## Upgrade Journey Chef lets you choose your **upgrade journey** based on your current version of Chef Automate. You can do all the version upgrades manually. | Your Current Version | Upgrade To | | -------------------- | ---------- | | Any version before 20220329091442| 20220329091442| | 20220329091442| 3.0.49| | 3.0.49| 4.0.x| Click [here](https://docs.chef.io/automate/major_upgrade_4.x) to know more. ## New Features - In Chef Automate a new security feature has been implemented to lock users on multiple failed attempts while logging in ([#6923](https://github.com/chef/automate/pull/6923)). - The Chef Automate bundle for airgapped customers is now available. Click [here](https://packages.chef.io/airgap_bundle/current/automate/latest.aib) to download the bundle ([#6973](https://github.com/chef/automate/pull/6973)). ## Improvements - Pagination has been implemented to show all the controls of the `ListControl` API ([#6910](https://github.com/chef/automate/pull/6910)). ## Compliance Profile Updates - Compliance profiles are updated to version 1.0.0/20220518045206, which includes the following profile changes: > Postgres 11 v1.0.0 ## Security ### Security Updates Updated url-parse to v1.5.10: - CVE-2022-0686 - CVE-2022-0691 - CVE-2022-0639 - CVE-2022-0512 - CVE-2021-3664 Updated minimize to 1.2.6 - CVE-2021-44906 ## Chef Packaged Product Versions This release uses: - Chef Habitat version: 1.6.181/20201030172917 - Chef Habitat Builder version: 9978/20211221122808 - Chef Infra Server version: 14.15.10/20220510065931 - Chef InSpec version: 4.51.1/20211201163039 ## Service Versions This release uses: - Postgres: 13.5 - OpenSearch: 1.2.4 - Nginx: 1.21.3 - Haproxy: 2.2.2 ## Supported External Chef Products This release supports the following external chef products: - Chef Infra Server version: 14.0.58+ - Chef Inspec version: 4.3.2+ - Chef Infra Client: 17.0.242+ - Chef Habitat: 0.81+ View the [package manifest](https://packages.chef.io/manifests/current/automate/latest_semver.json) for the latest release.