## Upgrade Journey

Chef lets you choose your upgrade journey based on your current version of Chef Automate. You can do all the version upgrades manually.

| Your Current Version | Upgrade To |
| -------------------- | ---------- |
| Any version before 20220329091442| 20220329091442|
| 20220329091442| 3.0.x|
| 3.0.49| 4.x|

See the [Chef Automate 4.x upgrade documentation](https://docs.chef.io/automate/major_upgrade_4.x/) for more information. 

## New Features
Added the `--verify-restore-config` flag to the Automate Command Line Interface (CLI) High Availability (HA) Restore command for snapshot/base-path verification. 

## Compliance Profile Updates
The compliance profiles were updated to version 1.0.0/20250813155029, which includes the new and improved profiles for:  
- CIS Oracle Database 23 ai v1.0.0  
- CIS Ubuntu 22.04 v2.0.0 audits profile   
- CIS RHEL 8 v3.0.0 improvement in control 5.2.3.13 (removed unwanted code)
- CIS PostgreSQL 16 v1.0.0 (Audits) control 7.2 (log replication default to on)
- CIS PostgreSQL 16 v1.0.0 (Audits) control 3.1.8 (used correct anecdote for hours)
- CIS IBM AIX 7 v1.1.0 (audits profile)  

## Bug Fixes
Updated the self-signed certificate for the Postgres and Open search packages for the Automate HA packages.

## Maintenance
- Updated the following packages to ensure they are as up-to-date as possible:
  - OpenSearch (version specific to Chef commercially licensed from Tuxcare)  
  - OpenJDK  
  - Golang  
  - NodeJS  
  - Angular  
  - Chef components: 
    - knife-ec-backup  
    - InSpec  
    - Habitat  
    - Chef Server
* PostgreSQL and libraries to support the same   
* MinIO
* Dex  
* OpenSSL  
* HAProxy  
* Curl

## Security Updates

Many of the underlying packages were upgraded to improve security posture. Refer to the list of packages upgraded in the **Maintenance** section.

## Chef Packaged Product Versions

This release uses:
- Chef Habitat version: 1.6.1243/20241227194506  
- Chef Habitat Builder version: 10717/20250805204117  
- Chef Infra Server version: 15.10.63  
- Chef InSpec version: 5.22.95/20250805133317  

## Service Versions

This release uses:
- Postgres: 13.21.0  
- OpenSearch: 1.3.20-tuxcare  
- Nginx: 1.25.4  
- HAProxy: 2.8.15  

## Supported External Chef Products

This release supports the following external Chef products:
- Chef Infra Server version: 14.0.58+
- Chef Inspec version: 4.3.2+
- Chef Infra Client: 17.0.242+
- Chef Habitat: 0.81+

View the [package manifest](https://packages.chef.io/manifests/current/automate/latest_semver.json) for the latest release.