## Compliance Phase Improvements

### Chef InSpec 4.49.0

Chef InSpec has been updated from 4.46.13 to 4.49.0 with the following updates:

#### New Features

- Added support for testing Cassandra DB configurations and CQL commands.

#### Bug Fixes

- Resolved case sensitivity issue for Windows users and group resources.
- Fixed the oracledb_session resource when invoking a query using OS user and DB role.
- Additional oracledb_session resource fixes.

## Resource Updates

### chef_client_trusted_certificate

The chef_client_trusted_certificate resource now supports the sensitive property to mask certificate contents in logs. Thanks for this improvement [@jakauppila](https://github.com/jakauppila)!

## System Detection

### Improved RHEL Derivative Detection

Ohai now detects XCP-ng 8, Rocky Linux, and Virtuozzo as being part of the `rhel` platform family. 

### Windows Package Detection

32-bit applications on 64-bit Windows hosts are now properly detected by Ohai in the `node['packages']` attribute. Thanks for this fix [@knightorc](https://github.com/knightorc)!

## Packaging

### Solaris 11.3 Support

Solaris 11.3 support is back due to popular demand. If you've upgraded to Solaris 11.4, Chef Infra Client will continue to work, but this way you'll have a bit longer to plan your upgrade.

## Security

### CA Certificates 10-26-2021

The bundled CA certificates file has been updated to the 10-26-2021 release, which includes 3 new CA certs.