## Upgrade Journey

Chef lets you choose your **upgrade journey** based on your current version of Chef Automate. You can do all the version upgrades manually.

| Your Current Version | Upgrade To |
| -------------------- | ---------- |
| Any version before 20220329091442| 20220329091442|
| 20220329091442| 3.0.49|
| 3.0.49| 4.x|

Click [here](https://docs.chef.io/automate/major_upgrade_4.x/) to know more.

## Improvements
- Automate supports substring search consistently in Compliance and Infra tabs ([#7076](https://github.com/chef/automate/pull/7076)).

## Compliance Profile Updates
- Compliance profiles are updated to version 1.0.0/20220603123504, which includes the following profile changes:  
> RHEL 8 v 2.0.0  
> Mongo DB 3.6 v1.1.0  

and Fixes for:  
> Windows 2016 Server 1607 v 1.3.0  
> Window 10 Enterprise 1909 v1.8.1  
> Stig Windows 10 Server 
> Stig Windows 12 Server r2 v3  
> Windows 2012 Server r2 v 2.5.0  
> Windows 2019 Server v1.2.1  

## Security

### Security Improvements
(examples: new security configurations)
- Stop showing external OpenSearch credentials in plain text ([#7024](https://github.com/chef/automate/pull/7024)).

### Security Updates
(examples: dependency updates, CVE fixes)
OpenJDK is updated to 11.0.15_10 which fixes the following vulnerabilities:
- CVE-2022-21426
- CVE-2022-21434
- CVE-2022-21443
- CVE-2022-21449
- CVE-2022-21476
- CVE-2022-21496

## Chef Packaged Product Versions

This release uses:
- Chef Habitat version: 1.6.181/20201030172917
- Chef Habitat Builder version: 9978/20211221122808
- Chef Infra Server version: 14.15.10/20220510065931
- Chef InSpec version: 4.56.22/20220517052126

## Service Versions

This release uses:
- Postgres:13.5
- OpenSearch: 1.2.4
- Nginx: 1.21.3
- Haproxy: 2.2.2

## Supported External Chef Products

This release supports the following external chef products:

- Chef Infra Server version: 14.0.58+
- Chef Inspec version: 4.3.2+
- Chef Infra Client: 17.0.242+
- Chef Habitat: 0.81+

View the [package manifest](https://packages.chef.io/manifests/current/automate/latest_semver.json) for the latest release.