## Upgrade Journey

Chef lets you choose your **upgrade journey** based on your current version of Chef Automate. You can do all the version upgrades manually.

| Your Current Version | Upgrade To |
| -------------------- | ---------- |
| Any version before 20220329091442| 20220329091442|
| 20220329091442| 3.0.x|
| 3.0.49| 4.x|

See the [Chef Automate 4.x upgrade documentation](https://docs.chef.io/automate/major_upgrade_4.x/) for more information. 

## New features

- Added ServiceNow version Xanadu. ([#8857](https://github.com/chef/automate/pull/8857))

## Bug Fixes
- Resolved an issue where Automate would not exit maintenance mode after being turned off. ([#8849](https://github.com/chef/automate/pull/8849))

### Enhancements/Bug Fixes made to High Availability

- Fixed a bug where backend node IPs were not properly registered on frontend nodes. ([#8868](https://github.com/chef/automate/pull/8868))
- Resolved an issue where configuration values were reset to defaults following an upgrade. ([#8875](https://github.com/chef/automate/pull/8875))
- Updated documentation to include `max_connection` configuration for HA setups. ([#8852](https://github.com/chef/automate/pull/8852))
- Corrected handling of the `skip_migration` file that previously blocked restore command execution. ([#8823](https://github.com/chef/automate/pull/8823))
- Updated documentation to reflect use of $HOME for config verification services. ([#8874](https://github.com/chef/automate/pull/8874))
- Automated verification services now correctly reference the home directory using the $HOME environment variable. ([#8864](https://github.com/chef/automate/pull/8864))
- Addressed a bug where outdated node DNs persisted after certificate rotation. ([#8871](https://github.com/chef/automate/pull/8871))
- Support was added for the new replication configuration in PostgreSQL. ([#8878](https://github.com/chef/automate/pull/8878))
- Improved certificate handling to support commas in subject names.  ([#8864](https://github.com/chef/automate/pull/8864))
- Removed deprecated certificate rotation command to prevent confusion. ([#8871](https://github.com/chef/automate/pull/8871))
- Fixed a connection leak in the automate-backend-sidecar service. ([#8859](https://github.com/chef/automate/pull/8859))
- Maintenance mode status is now accurately reflected in the system status summary. ([#8864](https://github.com/chef/automate/pull/8864))
- The chef-automate version command now includes the airgap bundle version. ([#8864](https://github.com/chef/automate/pull/8864))
- Revised HA architecture diagrams for improved clarity and accuracy. ([#8881](https://github.com/chef/automate/pull/8881))

## Security

### Security Updates
(examples: dependency updates, CVE fixes)

- Updated action mailer to 7.0.8.5, which fixes
> CVE-2024-47889

## Chef Packaged Product Versions

This release uses:

- Chef Habitat version:1.6.1205/20241107140309
- Chef Habitat Builder version: 9497/20221221224518
- Chef Infra Server version: 15.10.33/20250220084434
- Chef InSpec version: 4.56.61/20240809111842

## Service Versions

This release uses:

- Postgres: 13.18
- OpenSearch: 1.3.20
- Nginx: 1.25.4
- HAProxy: 2.2.29
- Dex: 2.35.0

## Supported External Chef Products

This release supports the following external Chef products:

- Chef Infra Server version: 14.0.58+
- Chef Inspec version: 4.3.2+
- Chef Infra Client: 17.0.242+
- Chef Habitat: 0.81+

## Supported framework versions

This release is built on the following framework versions:

- GoLang: 1.22.5
- OpenJDK: 11.0.22+7
- Angular: 17.3.0

View the [package manifest](https://packages.chef.io/manifests/current/automate/latest_semver.json) for the latest release.