## Updated Components

### Chef Infra Client 17.6.18

Chef Infra Client has been updated from 17.4.38 to 17.6.18. This new release supports shipping InSpec profiles directly in cookbooks with a new `compliance` directory in cookbooks. It also adds support to the `secrets` helper for fetching secrets from HashiCorp Vault as well as Akeyless Vault. For a complete list of everything new in this release see the [Chef Infra Client Release Notes](https://docs.chef.io/release_notes_client/).

### InSpec 4.46.13

Chef InSpec has been updated from 4.41.20 to 4.46.13 with the following enhancements:

- Added `rocky` and `almalinux` Linux distributions to `service` resource.
- Added the ability to handle files without headers in the `csv` resource.
- Added the option to establish a connection using a UNIX socket in the `postgres_session` resource.
- Fixed the --tags filter for dependent profiles.
- Fixed the --controls filter for dependent profiles.
- Fixed the `opa_cli` and `opa_api` resources so they are able to verify an empty result.

### Cookstyle 7.25.6

Cookstyle has been updated from 7.24.1 to 7.25.6. This new release includes an updated RuboCop engine to resolve edge cases and adds the `Chef/Correctness/MetadataMissingVersion` cop to detect cookbooks that don't have a version defined in the `metadata.rb` file.

### chef-vault

Chef Vault has been updated to allow uploading secrets that include a newline character (`\n`).

### Test Kitchen

#### WinRM Certificate Authentication

Test Kitchen now supports certificate authentication with the WinRM transport. New WinRM transport configuration options `client_cert` and `client_key` control the certificate authentication behavior. See the [WinRM Transport Documentation](https://kitchen.ci/docs/transports/winrm/) for more information on this transport and these new configuration options. Thanks for adding this new capability [@gholtiii](https://github.com/gholtiii)!

#### Kitchen DigitalOcean

The Kitchen Digital Ocean driver now supports Debian 11 DigitalOcean droplets. Thanks for this new capability [@cedricverhaeghe](https://github.com/cedricverhaeghe)!

#### Kitchen vCenter

The Kitchen vCenter drive now supports passing `guestinfo` data to the test instances. Thanks for this new capability [@jasonwbarnett](https://github.com/jasonwbarnett)!

## Security

### OpenSSL 1.0.2zb

OpenSSL has been updated from 1.0.2za to 1.0.2zb to resolve issues with Let's Encrypt certificates.

### cacerts

The cacerts bundle has been updated to the 2021-09-30 release which removes older expired root certificates and adds the following new root certificates:

* AC RAIZ FNMT-RCM SERVIDORES SEGUROS
* GlobalSign Root R46
* GlobalSign Root E46
* GLOBALTRUST 2020
* ANF Secure Server Root CA
* Certum EC-384 CA
* Certum Trusted Root CA

## Packaging

Chef Workstation packages are now produced for the following operating systems:

* Windows 11
* Windows 2022
* macOS 12
* Debian 11
* Ubuntu 16.04 (no longer EOL)