Release Date: September 30, 2025.

## New features

- Updated Test Kitchen to 3.9.0. This adds support for using SSH transport on Windows platforms.

## Component updates

- Updated Chef Infra Client to v18.8.11. See the [Chef Infra Client release notes](https://docs.chef.io/release_notes_client/#18.8.11) for a full list of improvements and features.
- Updated Chef InSpec to v5.22.95. See the [InSpec release notes](https://docs.chef.io/release_notes_inspec/#5.22.95) for more information.
- Updated Knife to v18.8.13.
- Updated Test Kitchen to v3.9.0.
- Updated chef-vault from 4.1.23 to 4.2.5
- Updated knife-tidy from 2.1.6 to 2.3.2
- Updated kitchen-vagrant from 2.0.1 to 2.1.2
- Updated kitchen-dokken from 2.20.7 to 2.20.8
- Updated kitchen-ec2 from 3.19.0 to 3.20.0

## Security updates

- Updated ruby and ruby-msys2-devkit from 3.1.6 to 3.1.7

- Updated Go from 1.23.9 to 1.23.12 to resolve the following CVE:
  - [CVE-2025-0913](https://www.cvedetails.com/cve/CVE-2025-0913/)

- Updated git from 2.39.3 to 2.43.7 to resolve the following CVE:
  - [CVE-2025-48384](https://www.cvedetails.com/cve/CVE-2025-48384/)

- Updated cURL from 8.12.1 to 8.14.1 to resolve the following CVEs:
  - [CVE-2025-5025](https://www.cvedetails.com/cve/CVE-2025-5025/)
  - [CVE-2025-4947](https://www.cvedetails.com/cve/CVE-2025-4947/)

- Updated libxml2 from 2.12.10 to 2.13.8 to resolve the following CVEs:
  - [CVE-2025-32415](https://www.cvedetails.com/cve/CVE-2025-32415/)
  - [CVE-2025-32414](https://www.cvedetails.com/cve/CVE-2025-32414/)

- Updated libarchive from 3.7.9 to 3.8.1 to resolve the following CVEs:
  - [CVE-2025-5914](https://www.cvedetails.com/cve/CVE-2025-5914/)
  - [CVE-2025-5915](https://www.cvedetails.com/cve/CVE-2025-5915/)
  - [CVE-2025-5916](https://www.cvedetails.com/cve/CVE-2025-5916/)
  - [CVE-2025-5917](https://www.cvedetails.com/cve/CVE-2025-5917/)
  - [CVE-2025-5918](https://www.cvedetails.com/cve/CVE-2025-5918/)

- Updated Berkshelf from 8.0.22 to 8.1.6 to address code scanning and dependabot alerts.

## Packaging

We now build Windows packages for:

- Windows 2019

We no longer build packages for:

- Windows 8
- Windows Server 2012
- Windows Server 2012 R2.