What chef/chef shipped
Generated by FoxPlug from public activity — not affiliated with Chef.
Week of September 14, 2026
What shipped
- Chef 19.4.36 released [0]. Release
- Fixed sensitive properties leaking values to logs when validation fails with regex constraints [1]. Pull request #16300
- Chef 18.11.24 released [2]. Release
- Fixed Target Mode to use remote target's tmp directory instead of local host's for privileged file operations [8]. Pull request #16354
- Fixed homebrew_tap resource to work with Homebrew's Tap Trust enforcement on macOS [12]. Pull request #16367
- Fixed dscl group provider from overwriting the desired gid state [13]. Pull request #16326
- Fixed homebrew_package to respect the timeout property [15]. Pull request #16328
- Fixed undefined method error in Target Mode's FileUtils.chmod_R for recursive chmod operations [17]. Pull request #16355
- Updated Chef 18 SBOM generation pipeline with Habitat integration [3]. Pull request #16378
- Updated to Cookstyle 9.0 and resolved new linter offenses [16]. Pull request #16329
Why it matters
Multiple bug fixes improve stability across Target Mode operations, package management, and resource state handling. Critical security fix prevents sensitive data leakage in logs. Infrastructure updates ensure CI reliability and maintainability.
Changelog entry
- Chef 19.4.36 Release
- Fix sensitive properties leaking values to stdout/logs on validation failure Pull request #16300
- Chef 18.11.24 Release
- Chef 18.11.23 Release
- Fix debian-11 kitchen test apt-get update failure from expired bullseye-security suite Pull request #16374
- Trust Homebrew tap before tapping to work with Homebrew 6.0+ tap trust requirement Pull request #16373
- Chef 19.4.35 Release
- Fix Target Mode Dir.tmpdir to resolve remote target's tmp directory instead of local host Pull request #16354
- Chef 19.4.34 Release
- Stabilize intermittent Bundler git-clone hardlink race in GitHub Actions Pull request #16372
- Chef 19.4.33 Release
- Trust Homebrew tap before tapping so homebrew_tap survives Homebrew's Tap Trust enforcement Pull request #16367
- Stop dscl group provider from mutating new_resource.gid desired state Pull request #16326
- Fix debian/RHEL CI ruby build failure by adding pkg-config for fiddle/psych extensions Pull request #16366
- Respect timeout property in homebrew_package resource Pull request #16328
- Update to Cookstyle 9.0 and fix new offenses Pull request #16329
- Fix undefined method mode_to_s in Target Mode FileUtils.chmod_R Pull request #16355
Chef 19.4.36 and 18.11.24 ship this week with fixes for sensitive property logging, Target Mode tmp directories, and Homebrew tap trust.
New releases of Chef (19.4.36, 18.11.24) include important fixes: sensitive properties no longer leak to logs on validation failure, Target Mode correctly resolves remote tmp directories for privileged operations, and homebrew_tap works with Homebrew's Tap Trust enforcement. Additional fixes improve group provider state handling and homebrew_package timeout support.