CHANGELOG.md

Change Log

12.8.1 (2016-03-07)

Full Changelog

Implemented enhancements:

• Clarify the probable cause of tempfile creation failure during cookbook sync #2171
• Remove static libraries from Chef package #4654 (chefsalim)
• Have client.rb verify that FIPS mode can be enforced #4630 (ksubrama)
• List all of the unignored files when loading a cookbook #4629 (danielsdeleo)
• adding pry and pry-byebug to dev dependencies #4601 (mwrock)
• Split group members on commas #4583 (thommay)
• Make tempfiles easier to read (prepend chef to the name) #4582 (thommay)
• Extend cookbook shadowing deprecation warnings more broadly #4574 (lamont-granquist)
• tell knife's edit_data what the object is #4548 (thommay)
• Implement knife bootstrap client.d RFC #4529 (jaym)
• Update to Log Level when showing unencrypted databag #4524 (PatrickWalker)
• RFC-060 gem metadata MVP #4478 (lamont-granquist)
• chef-client: add --[no]skip-cookbook-sync option #4316 (josb)
• Extend service resource to support masking #4307 (davide125)
• launchd for osx #4111 (mikedodge04)

Fixed bugs:

• Chef::DataBagItem.to_hash is modifying Chef::DataBagItem.raw_data #4614
• Chef 12 seeing a ton of these in debug mode #2396
• Data bag item hash can have name key #4664 (chefsalim)
• Clearer exception for loading non-existent data bag items in solo mode. #4655 (coderanger)
• Always rehash from gem source and not existing hash file #4651 (tyler-ball)
• Handle negative content length headers too. #4646 (coderanger)
• if no module name is found for a valid dsc resource default to PSDesiredStateConfiguration #4638 (mwrock)
• removing disabling of readline in chef-shell #4635 (mwrock)
• Fix a bug that was causing DataBagItem.to_hash to mutate the data bag item #4631 (itmustbejj)
• ensure paths maintain utf-8ness in non ascii encodings #4626 (mwrock)
• Fix the Chocolatey-missing error again #4621 (randomcamel)
• fixes exe package downloads #4612 (mwrock)
• fallback to netmsg.dll error table if error message is not found in system errors #4600 (mwrock)
• zypper multipackage performance fix #4591 (lamont-granquist)
• bugfix #2865 check for validation_key #4581 (thommay)
• remove bogus recalculation of cookbook upload failures #4580 (thommay)
• Make sure we have a valid object before calling close! #4579 (thommay)
• Fix policyfile_zero provisioner in 12.7 #4571 (andy-dufour)
• do not include source parameter when removing a chocolatey package and ensure source is used on all functional tests #4570 (mwrock)
• Fix databag globbing issues for chef-solo on windows #4569 (jaym)
• remove Chef::Mixin::Command use #4566 (lamont-granquist)

12.7.2

• pr#4559 Remove learnchef acceptance tests until we make them more reliable
• pr#4545 Removing rm -rf in chef-solo recipe_url

12.7.1

• Daniel Steen

  • pr#3183 Provide more helpful error message when accidentally using --secret instead of --secret-file

• pr#4532 Bump Bundler + Rubygems

• pr#4550 Use a streaming request to download cookbook

12.7.0

• Nate Walck

  • pr#4078 Add osx_profile resource for OS X

• Timothy Cyrus

  • pr#4420 Update code climate badge and code climate blocks in README.md

• Jordan Running

  • pr#4399 Correctly save policy_name and policy_group with knife node edit

• Brian Goad

  • pr#4315 Add extra tests around whether to skip with multiple guards

• pr#4516 Return propper error messages when using windows based mount, user and group resources

• pr#4500 Explicitly declare directory permissions of chef install on windows to restrict rights on Windows client versions

• pr#4498 Correct major and minor OS versions for Windows 10 and add versions for Windows 2016 Server

• pr#4375 No longer try to auto discover package version of exe based windows packages

• pr#4369 Import omnibus-chef chef project definition and history

• pr#4399 Correctly save policy_name and policy_group with knife node edit

• pr#4278 make file resource use properties

• pr#4479 Remove incorrect cookbook artifact normalization

• pr#4470 Fix sh spacing issues

• pr#4434 adds EOFError message to handlers

• pr#4422 Add an apt_update resource

• pr#4287 Default Chef with FIPS OpenSSL to use sign v1.3

• pr#4461 debian-6 is EOL next month

• pr#4460 Set range of system user/group id to max of 200

• pr#4231 zypper multipackage patch

• pr#4459 use require_paths and not path so bundler grabs all paths from a git reference

• pr#4450 don't warn about ambiguous property usage

• pr#4445 Add CBGB to the repository

• pr#4423 Add deprecation warnings to Chef::REST and all json_creates

• pr#4439 Sometimes chocolately doesn't appear on the path

• pr#4432 add get_rest etc calls to ServerAPI

• pr#4435 add nokogiri to omnibus-chef

• pr#4419 explicitly adding .bat to service executable called by service in case users remove .bat from PATHEXT

• pr#4413 configure chef client windows service to the correct chef directory

• pr#4377 fixing candidate filtering and adding functional tests for chocolatey_package

• pr#4406 Updating to the latest release of net-ssh to consume net-ssh/net-ssh#280

• pr#4405 ServerAPI will return a raw hash, so do that

• pr#4400 inflate an environment after loading it

• pr#4396 Remove duplicate initialization of @password in user_v1

• pr#4344 Warn (v. info) when reloading resources

• pr#4369 Migrate omnibus-chef project/software definitions for chef in here

• pr#4106 add chocolatey_package to core chef

• pr#4321 fix run_as_user of windows_service

• pr#4333 no longer wait on node search to refresh vault but pass created ApiCient instead

• pr#4325 Pin win32-eventlog to 0.6.3 to avoid clashing CreateEvent definition

• pr#4312 Updates the template to use omnitruck-direct.chef.io

• pr#4277 non msi packages must explicitly provide a source attribute on install

• pr#4309 tags always an array; fix set_unless

• pr#4278 make file resource use properties

• pr#4288 Fix no_proxy setting in chef-config

• pr#4273 Use signing protocol 1.1 by default

• pr#4520 Fix a few dsc_resource bugs

12.6.0

• Dave Eddy pr#3187 overhaul solaris SMF service provider

• Mikhail Zholobov

  • pr#3192 provider/user/dscl: Set default gid to 20
  • pr#3193 provider/user/dscl: Set "comment" default value

• Jordan Evans

  • pr#3263 value_for_platform should use Chef::VersionConstraint::Platform
  • pr#3633 add the word group to converge_by call for group provider

• Scott McGillivray pr#3450 Fix 'knife cookbook show' to work on root files

• Aubrey Holland pr#3986 fix errors when files go away during chown

• James Michael DuPont pr#3973 better error reporting

• Michael Pereira pr#3968 Fix cookbook installation from supermarket on windows

• Yukihiko SAWANOBORI

  • pr#3941 allow reboot by reboot resource with chef-apply
  • pr#3900 Add new option json attributes file to bootstraping

• permyakovsv pr#3901 Add tmux-split parameter to knife ssh

• Evan Gilman pr#3864 Knife bootstrap_environment should use Explicit config before Implicit

• Ranjib Dey pr#3834 Dont spit out stdout and stderr for execute resource failure, if its declared sensitive

• Jeff Blaine

  • pr#3776 Changes --hide-healthy to --hide-by-mins MINS
  • pr#3848 Migrate to --ssh-identity-file instead of --identity-file

• dbresson pr#3650 Define == for node objects

• Patrick Connolly pr#3529 Allow user@hostname format for knife-bootstrap

• Justin Seubert pr#4160 Correcting regex for upstart_state

• Sarah Michaelson pr#3810 GH-1909 Add validation for chef_server_url

• Maxime Brugidou pr#4052 Add make_child_entry in ChefFS CookbookSubdir

• Nathan Williams pr#3836 simplify service helpers

• Paul Welch pr#4066 Fix chef-apply usage banner

• Mat Schaffer pr#4153 Require ShellOut before Knife::SSH definition

• Donald Guy pr#4158 Allow named_run_list to be loaded from config

• Jos Backus pr#4064 Ensure that tags are properly initialized

• John Bellone pr#4101 Adds alias method upgrade_package for solaris package

• Nolan Davidson pr#4014 Adding ksh resource

• pr#4193 support for inno, nsis, wise and installshield installer types in windows_package resource

• pr#4196 multipackage dpkg_package and bonus fixes

• pr#4185 dpkg provider cleanup

• pr#4165 Multipackage internal API improvements

• pr#4081 RFC-037: add chef_version and ohai_version metadata

• pr#3530 Allow using --sudo option with user's home folder in knife bootstrap

• pr#3858 Remove duplicate 'Accept' header in spec

• pr#3911 Avoid subclassing Struct.new

• pr#3990 Use SHA256 instead of MD5 for registry_key when data is not displayable

• pr#4034 add optional ruby-profiling with --profile-ruby

• pr#3119 allow removing user, even if their GID isn't resolvable

• pr#4068 update messaging from LWRP to Custom Resource in logging and spec

• pr#4021 add missing requires for Chef::DSL::Recipe to LWRPBase

• pr#3597 print STDOUT from the powershell_script

• pr#4091 Allow downloading of root_files in a chef repository

• pr#4112 Update knife bootstrap command to honor --no-color flag in chef-client run that is part of the bootstrap process.

• pr#4090 Improve detection of ChefFS-based commands in knife rehash

• pr#3991 Modify remote_file cache_control_data to use sha256 for its name

• pr#4079 add logger to windows service shellout

• pr#3966 Report expanded run list json tree to reporting

• pr#4080 Make property modules possible

• pr#4069 Improvements to log messages

• pr#4049 Add gemspec files to allow bundler to run from the gem

• pr#4029 Fix search result pagination

• pr#4048 Accept coercion as a way to accept nil values

• pr#4046 ignore gid in the user resource on windows

• pr#4118 Make Property.derive create derived properties of the same type

• pr#4133 Add retries to Chef::HTTP for transient SSL errors

• pr#4135 Windows service uses log file location from config if none is given on commandline

• pr#4142 Use the proper python interpretor for yum-dump.py on Fedora 21

• pr#4149 Handle nil run list option in knife bootstrap

• pr#4040 Implement live streaming for execute resources

• pr#4167 Add reboot_action to dsc_resource

• pr#4167 Allow dsc_resource to run with the LCM enabled

• pr#4188 Update dsc_resource to use verbose stream output

• pr#4200 Prevent inspect of PsCredential from printing out plain text password

• pr#4237 Enabling 'knife ssl check/fetch' commands to respect proxy environment variables and moving proxy environment variables export to Chef::Config

12.5.1

• Ranjib Dey: pr#3588 Count skipped resources among total resources in doc formatter

• John Kerry: pr#3539 Fix issue: registry_key resource is case sensitive in chef but not on windows

• David Eddy:

  • pr#3443 remove extraneous space
  • pr#3091 fix locking/unlocking users on SmartOS

• margueritepd: pr#3693 Interpolate %{path} in verify command

• Jeremy Fleischman: pr#3383 gem_package should install to the systemwide Ruby when using ChefDK

• Stefano Rivera: pr#3657 fix upstart status_commands

• ABE Satoru: pr#3764 uniquify chef_repo_path

• Renan Vicente: pr#3771 add depth property for deploy resource

• James Belchamber: pr#1796: make mount options aware

• Nate Walck:

  • pr#3594: Update service provider for OSX 10.11
  • pr#3704: Add SIP (OS X 10.11) support

• Phil Dibowitz: pr#3805 LWRP parameter validators should use truthiness

• Igor Shpakov: pr#3743 speed improvement for remote_directory resource

• James FitzGibbon: pr#3027 Add warnings to 'knife node run list remove ...'

• Backslasher: pr#3172 Migrated deploy resource to use shell_out instead of run_command

• Sean Walberg: pr#3190 Allow tags to be set on a node during bootstrap

• ckaushik and Sam Dunne: pr#3510 Fix broken rendering of partial templates.

• Simon Detheridge: pr#3806 Replace output_of_command with shell_out! in subversion provider

• Joel Handwell: pr#3821 Human friendly elapsed time in log

• pr#3985 Simplify the regex which determines the rpm version to resolve issue #3671

• pr#3928 Add named run list support when using policyfiles

• pr#3913 Add policy_nameand policy_group fields to the node object

• pr#3875 Patch Win32::Registry#delete_key, #delete_value to use wide (W) APIs

• pr#3850 Patch Win32::Registry#write to fix encoding errors

• pr#3837 refactor remote_directory provider for mem+perf improvement

• pr#3799 fix supports hash issues in service providers

• pr#3797 Fix dsc_script spec failure on 64-bit Ruby

• pr#3817 Remove now-useless forcing of ruby Garbage Collector run

• pr#3775 Enable 64-bit support for Powershell and Batch scripts

• pr#3774 Add support for yum-deprecated in yum provider

• pr#3793 CHEF-5372: Support specific run_levels for RedHat service

• pr#2460 add privacy flag

• pr#1259 CHEF-5012: add methods for template breadcrumbs

• pr#3656 remove use of self.provides?

• pr#3455 powershell_script: do not allow suppression of syntax errors

• pr#3519 The wording seemed odd.

• pr#3208 Missing require (require what you use).

• pr#3449 correcting minor typo in user_edit knife action

• pr#3572 Use windows paths without case-sensitivity.

• pr#3666 Support SNI in knife ssl check.

• pr#3667 Change chef service to start as 'Automatic delayed start'.

• pr#3683 Correct Windows reboot command to delay in minutes, per the property.

• pr#3698 Add ability to specify dependencies in chef-service-manager.

• pr#3728 Rewrite NetLocalGroup things to use FFI

• pr#3754 Fix functional tests for group resource - fix #3728

• pr#3498 Use dpkg-deb directly rather than regex

• pr#3759 Repair service convergence test on AIX

• pr#3329 Use ifconfig target property

• pr#3652 Fix explanation for configuring audit mode in client.rb

• pr#3687 Add formatter and force-logger/formatter options to chef-apply

• pr#3768 Make reboot_pending? look for CBS RebootPending

• pr#3815 Fix powershell_script validation to use correct architecture

• pr#3772 Add ps_credential dsl method to dsc_script

• pr#3462 Fix issue where ps_credential does not work over winrm

12.4.1

• Noah Kantrowitz: pr#3605 Rework Resource#action to match 12.3 API

• pr#3586 Fix bug preventing light weight resources from being used with heavy weight providers

• Issue #3593 Fix bug where provider priority map did not take into consideration a provided block

• pr#3630 Restore Chef::User and Chef::ApiClient namespace to API V0 functionality and move new functionality into Chef::UserV1 and Chef::ApiClientV1 until Chef 13.

• pr#3611 Call provides? even if provides is not called

• pr#3589 Fix errant bashisms

• pr#3620 Fix issue where recipe names in run list mutate when version constaints are present

• pr#3623 Allow LWRPs to access the real class when accessed through Chef::Resource and Chef::Provider

• pr#3627 Separate priority map and DSL handler map so that provides has veto power over priority

• pr#3638 Deprecate passing more than 1 argument to create a resource

12.4.0

• Phil Dibowitz: Fix multipackage and architectures

• Igor Shpakov: Always run exception handlers Prioritise manual ssh attribute over automatic ones for knife

• Noah Kantrowitz: Cache service_resource_providers for the duration of the run. #2953

• Slava Kardakov: Fix installation of yum packages with version constraints #3155

• Dave Eddy: fix smartos_package for new "pkgin" output, fixes #3112 #3165

• Yukihiko SAWANOBORI: Show Chef version on chef shell prompt

• Jacob Minshall: Ensure suid bit is preserved if group or owner changes

• Tim Smith: Convert wiki links to point to docs.chef.io

• SAWANOBORI Yukihiko: Add Chef::Log::Syslog class for integrating sending logs to syslog

• Pavel Yudin: Ensure LWRP and HWRP @action variable is consistent #3156

• Dan Bjorge: Fix bad Windows securable_resource functional spec assumptions for default file owners/groups #3266

• Yukihiko SAWANOBORI: Pass name by knife cil attribute pr#3195

• Torben Knerr: Allow knife sub-command loader to match platform specific gems. pr#3281

• Steve Lowe: Fix copying ntfs dacl and sacl when they are nil. pr#3066

• pr#3339: Powershell command wrappers to make argument passing to knife/chef-client etc. easier.

• pr#3720: Extract chef's configuration to a separate gem. Code stays in the Chef git repo.

• pr#3321: Add an integration test of chef-client with empty ENV.

• pr#3278: Switch over Windows builds to universal builds.

• pr#2877: Convert bootstrap template to use sh.

• Issue #3316: Fix idempotency issues with the windows_package resource

• pr#3295: Stop mutating new_resource.checksum in file providers. Fixes some ChecksumMismatch exceptions like issue#3168

• pr#3320: Sanitize non-UTF8 characters in the node data before doing node.save(). Works around many UTF8 exception issues reported on node.save().

• Implemented X-Ops-Server-API-Version with a API version of 0, as well as error handling when the Chef server does not support the API version that the client supports.

• pr#3327: Fix unreliable AIX service group parsing mechanism.

• pr#3333: Fix SSL errors when connecting to private Supermarkets

• pr#3340: Allow Event dispatch subscribers to be inspected.

• Issue #3055: Fix regex parsing for recipe failures on Windows

• pr#3345: Windows Event log logger

• pr#3336: Remote file understands UNC paths

• pr#3269: Deprecate automatic recipe DSL for classes in Chef::Resource

• pr#3360: Add check_resource_semantics! lifecycle method to provider

• pr#3344: Rewrite Windows user resouce code to use ffi instead of win32-api

• pr#3318: Modify Windows package provider to allow for url source

• pr#3381: warn on cookbook self-deps

• pr#2312: fix node[:recipes] duplication, add node[:cookbooks] and node[:expanded_run_list]

• pr#3325: enforce passing a node name with validatorless bootstrapping

• pr#3398: Allow spaces in files for the remote_file resource

• Issue #3010 Fixed knife user for use with current and future versions of Chef Server 12, with continued backwards compatible support for use with Open Source Server 11.

• pr#3438 Server API V1 support. Vast improvements to and testing expansion for Chef::User, Chef::ApiClient, and related knife commands. Deprecated Open Source Server 11 user support to the Chef::OscUser and knife osc_user namespace, but with backwards compatible support via knife user.

• Issue #2247: powershell_script returns 0 for scripts with syntax errors

• pr#3080: Issue 2247: powershell_script exit status should be nonzero for syntax errors

• pr#3441: Add powershell_out mixin to core chef

• pr#3448: Fix dsc_resource to work with wmf5 april preview

• pr#3392: Comment up Chef::Client and privatize/deprecate unused things

• pr#3419: Fix cli issue with chef_repo_path when ENV variable is unset

• pr#3358: Separate audit and converge failures

• pr#3431: Fix backups on windows for the file resource

• pr#3397: Validate owner exists in directory resources

• pr#3418: Add shell_out mixin to Chef::Resource class for use in not_if/only_if conditionals, etc.

• pr#3406: Add wide-char 'Environment' to broadcast_env_change mixin for setting windows environment variables

• pr#3442: Add resource_name to top-level Resource class to make defining resources easier.

• pr#3447: Add allowed_actions and default_action to top-level Resource class.

• pr#3475: Fix shell_out timeouts in all package providers to respect timeout property on the resource.

• pr#3477: Update zypper_package to look like the rest of our package classes.

• pr#3483: Allow include_recipe from LWRP providers.

• pr#3495: Make resource name automatically determined from class name, and provide DSL for it.

• pr#3497: Issue 3485: Corruption of node's run_context when non-default guard_interpreter is evaluated

• pr#3299: Remove experimental warning on audit mode

12.3.0

• pr#3160: Use Chef Zero in socketless mode for local mode, add --no-listen flag to disable port binding

• Nolan Davidson: Removed after_created and added test to recipe_spec

• Tim Sogard: Reset $HOME to user running chef-client when running via sudo

• Torben Knerr: Allow for the chef gem installation to succeed without elevated privileges #3126

• Mike Dodge MacOSX services: Load LaunchAgents as console user, adding plist and session_type options.

• Eric Herot Ensure knife ssh doesn't use a non-existant field for hostname #3131

• Tom Hughes Ensure searches progress in the face of incomplete responses #3135

• pr#3162: Add --minimal-ohai flag to client/solo/apply; restricts ohai to only the bare minimum of plugins.

• Ensure link's path attribute works with delayed #3130

• gem_package, chef_gem should not shell out to using https://rubygems.org #2867

• Add dynamic resource resolution similar to dynamic provider resolution

• Add Chef class fascade to internal structures

• Fix nil pointer for windows event logger #3200

• Use partial search for knife status

• Ensure chef/knife properly honours proxy config

12.2.1

• Issue 3153: Fix bug where unset HOME would cause chef to crash

12.2.0

• Update policyfile API usage to match forthcoming Chef Server release
• knife ssh now has an --exit-on-error option that allows users to fail-fast rather than moving on to the next machine.
• migrate macosx, windows, openbsd, and netbsd resources to dynamic resolution
• migrate cron and mdadm resources to dynamic resolution
• Issue 3096 Fix OpenBSD package provider installation issues
• New dsc_resource resource to invoke Powershell DSC resources

12.1.2

• Issue 3022: Homebrew Cask install fails FIXME (remove on 12.2.0 release): 3022 was only merged to 12-stable and #3077 or its descendant should fix this
• Issue 3059: Chef 12.1.1 yum_package silently fails
• Issue 3078: Compat break in audit-mode changes

12.1.1

• Phil Dibowitz: Issue 3008 Allow people to pass in source to package
• Issue 3011 package provider base should include Chef::Mixin::Command as there are still providers that use it.
• Ranjib Dey: Issue 3019 Fix data fetching when explicit attributes are passed

12.1.0

• Andre Elizondo Typo fixes
• Vasiliy Tolstov: cleanup cookbook path from stale files (when using chef-solo with a tarball url)
• Nathan Cerny: Fix rubygems provider to use https instead of http.
• Anshul Sharma removed securerandom patch
• Scott Bonds add package support for OpenBSD
• Lucy Wyman Added support for handling empty version strings to rubygems provider.
• Yulian Kuncheff Correctly set the pre-release identifier during knife bootstrap.
• Anshul Sharma knife node run_list remove now accepts run_list options in the same form as add
• Veres Lajos Typo fixes
• Tim Smith Typo fixes
• Pull 2505 Make Chef handle URIs in a case-insensitive manner
• Phil Dibowitz: Drop SSL warnings now that we have a safe default
• Pull 2684 Remove ole_initialize/uninitialize which cause problems with Ruby >= 2
• BinaryBabel Make knife cookbook site share prefer gnutar when packaging
• Dave Eddy Support arrays for not_if and only_if
• Scott Bonds Add service provider for OpenBSD
• Alex Slynko Change env provider to preserve ordering
• Rob Redpath Add --lockfile opt for chef-client and chef-solo
• Josh Murphy Check cookbooks exist in path(s) before attempting to upload them with --all
• Vasiliy Tolstov add ability to fetch recipes like in chef-solo when using local-mode
• Jan FIX data_bag_item.rb:161: warning: circular argument reference - data_bag
• David Radcliffe add banner for knife serve command
• Yukihiko Sawanobori use Chef::JSONCompat.parse for file_contents
• [Xabier de Zuazo] (https://github.com/zuazo) Remove some simple Ruby 1.8 and 1.9 code
• [Xabier de Zuazo] (https://github.com/zuazo) Remove all RSpec test filters related to Ruby 1.8 and 1.9
• [Xabier de Zuazo] (https://github.com/zuazo) Fix knife cookbook upload messages
• [David Crowder] (https://github.com/david-crowder) refactor to use shell_out in rpm provider
• Phil Dibowitz: Multi-package support
• Naotoshi Seo: Support HTTP/FTP source on rpm_package add json_attribs option for chef-apply command allow_downgrade in rpm_package
• AJ Christensen: Isolate/fix the no-fork fault. Issue 2709
• Cory Stephenson: Remove comments of a service being enabled/disabled in FreeBSD. Fixes #1791
• Will Albenzi: CHEF-4591: Knife commands to manipulate env_run_list on nodes
• Jon Cowie: CHEF-2911: Fix yum_package provider to respect version requirements in package name and version attribute
• Anshul Sharma:
  • Node::Attribute to_s should print merged attributes Issue 1526
  • Access keys attribute in knife show list incorrect information Issue 1974
  • Guard interpreter loading incorrect resource Issue 2683

Chef Contributions

• ruby 1.9.3 support is dropped
• Update Chef to use RSpec 3.2
• Cleaned up script and execute provider + specs
• Added deprecation warnings around the use of command attribute in script resources
• Audit mode feature added - see the RELEASE_NOTES for details
• shell_out now sets LANGUAGE and LANG to the Chef::Config[:internal_locale] in addition to LC_ALL forcing
• chef_gem supports a compile_time flag and will warn if it is not set (behavior will change in the future)
• suppress CHEF-3694 warnings on the most trivial resource cloning
• fixed bugs in the deep_merge_cache logic introduced in 12.0.0 around node['foo'] vs node[:foo] vs. node.foo
• add include_recipe "::recipe" sugar to reference a recipe in the current cookbook
• Add --proxy-auth option to knife raw
• added Chef::Org model class for Chef Organizations in Chef 12 Server
• powershell_script should now correctly get the exit code for scripts that it runs. See Issue 2348
• Useradd functional tests fail randomly
• Add comments to trusted_certs_content
• fixes a bug where providers would not get defined if a top-level ruby constant with the same name was already defined (ark cookbook, chrome cookbook)
• Fix a bug in reboot, ips_package, paludis_package, windows_package resources where action :nothing was not permitted
• Use Chef::ApiClient#from_hash in knife client create to avoid json_class requirement. Issue 2542
• Add support for policyfile native API (preview). These APIs are unstable, and you may be forced to delete data uploaded to them in a future release, so only use them for demonstration purposes.
• Deprecation warning for 'knife cookbook test'
• dsc_script should now correctly honor timeout. See Issue 2831
• Added an imports attribute to dsc_script. This attribute allows you to specify DSC resources that need to be imported for your script.
• Fixed error where guard resources (using :guard_interpreter) were not ran in why_run mode Issue 2694
• Add verify method to File resource per RFC027
• Move supermarket.getchef.com to supermarket.chef.io
• Check with AccessCheck for permission to write to directory on Windows
• Add declare_resource/build_resource comments, fix faulty ||=
• Knife bootstrap creates a client and ships it to the node to implement validatorless bootstraps
• Knife bootstrap can use the client it creates to setup chef-vault items for the node
• windows service now has a configurable timeout

12.0.3

• Phil Dibowitz: Issue 2594 Restore missing require in digester.

12.0.2

• Issue 2578 Check that installed is not empty for keg_only formula in Homebrew provider
• Issue 2609 Resolve the circular dependency between ProviderResolver and Resource.
• Issue 2596 Fix nodes not writing to disk
• Issue 2580 Make sure the relative paths are preserved when using link resource.
• Pull 2630 Improve knife's SSL error messaging
• Issue 2606 chef 12 ignores default_release for apt_package
• Issue 2602 Fix subscribes resource notifications.
• Issue 2578 Check that installed is not empty for keg_only formula in Homebrew provider.
• gh2k: Issue 2625 Fix missing shell_out! for windows_package resource
• BackSlasher: Issue 2634 Fix option ':command' is not a valid option error in subversion provider.
• Seth Vargo: Issue 2345 Allow knife to install cookbooks with metadata.json.

12.0.1

• Issue 2552 Create constant for LWRP before calling provides
• Issue 2545 path attribute of execute resource is restored to provide backwards compatibility with Chef 11.
• Issue 2565 Fix Chef::Knife::Core::BootstrapContext constructor for knife-windows compat.
• Issue 2566 Make sure Client doesn't raise error when interval is set on Windows.
• Issue 2560 Fix uninitialized constant Windows::Constants in windows_eventlog.
• Issue 2563 Make sure the Chef Client rpm packages are signed with GPG keys correctly.

12.0.0

• Jesse Hu: retry on HTTP 50X Error when calling Chef REST API
• Nolan Davidson: The chef-apply command now prints usage information when called without arguments
• Kazuki Saito: CHEF-4933: idempotency fixes for ifconfig provider
• Kirill Shirinkin: The knife bootstrap command expands the path of the secret-file
• Malte Swart: [CHEF-4101] DeepMerge - support overwriting hash values with nil
• James Belchamber: Mount provider remount action now honours options
• Mark Gibbons: Fix noauto support in Solaris Mount Provider
• Jordan Evans: support version constraints in value_for_platform
• Yukihiko Sawanobori: Add environment resource attribute to scm resources
• Grzesiek Kolodziejczyk: Use thread-safe OpenSSL::Digest instead of Digest
• Grzesiek Kolodziejczyk: Chef::Digester converted to thread-safe Singleton mixin.
• Vasiliy Tolstov: Reload systemd service only if it's running, otherwise start.
• Chris Jerdonek: knife diagnostic messages sent to stdout instead of stderr
• Xabier de Zuazo: Remove the unused StreamingCookbookUploader class (CHEF-4586)
• Jacob Vosmaer: Fix creation of non-empty FreeBSD groups (#1698)
• Nathan Huff: Check local repository for ips package installs (#1703)
• Sean Clemmer: Fix "cron" resource handling of special strings (e.g. @reboot, @yearly) (#1708)
• Phil Dibowitz: 'group' provider on OSX properly uses 'dscl' to determine existing groups
• Hugo Lopes Tavares: Catch StandardError in Chef::ResourceReporter#post_reporting_data (Issue 1550).
• Daniel O'Connor: Fix regex causing DuplicateRole error (Issue 1739).
• Xeron: Ability to specify an array for data_bag_path. (CHEF-3399, CHEF-4753)
• Jordan: Use Systemd for recent Fedora and RHEL 7.
• Xabier de Zuazo: Encrypted data bags should use different HMAC key and include the IV in the HMAC (CHEF-5356).
• Pierre Ynard: Don't modify variable passed to env resource when updating.
• Chris Aumann: Add "force" attribute to resource/user, pass "-f" to userdel. (Issue 1601)
• Brian Cobb: Chef::VersionConstraint#to_s should accurately reflect constraint's behavior.
• Kevin Graham: Do not override ShellOut:live_stream if already set.
• Mike Heijmans: Change knife option --force to --delete-validators. (Issue 1652)
• Pavel Yudin: Add Parallels Cloud Server (PCS) platform support.
• tbe: Minor fixes for the Paludis package provider:
  • only search for non-masked packages,
  • increase command timeout length for package installation.
• sawanoboly: Use shared_path for deploy resource.
• Victor Hahn: Add template syntax check to files in the templates/ dir only.
• Jordan: Allow git provider to checkout existing branch names.
• Eric Herot: Add whitespace boundaries to some mount point references in mount provider.
• Dave Eddy: Improve the regex for /etc/rc.conf for the FreeBSD service provider
• Stanislav Bogatyrev: Fetch recipe_url before loading json_attribs in chef-solo (CHEF-5075)
• Mal Graty: Workaround for a breaking change in git's shallow-clone behavior. (Issue 1563)
• Dave Eddy: Fix version detection in FreeBSD pkgng provider. (PR 1980)
• Dan Rathbone: Fixed gem_package resource to be able to upgrade gems when version is not set.
• Jean Mertz: Made Chef Client load library folder recursively.
• Eric Saxby: Made Chef Client read the non-root crontab entries as the user specified in the resource.
• sawanoboly: Added --dry-run option to knife cookbook site share which displays the files that are to be uploaded to Supermarket.
• Sander van Harmelen: Fixed Chef::HTTP to be able to follow relative redirects.
• Cory Stephenson: Fixed FreeBSD port package provider to interpret FreeBSD version 10 correctly.
• Brett Chalupa: Added source_url and issues_url options to metadata to be used by Supermarket.
• Anshul Sharma: Fixed Chef Client to use the :client_name instead of :node_name during initial client registration.
• tbe: Fixed Paludis package provider to be able to interpret the package category.
• David Workman: Added a more clear error message to chef-apply when no recipe is given.
• Joe Nuspl: Added support for sensitive property to the execute resource.
• Nolan Davidson: Added an error message to prevent unintentional running of exec() in recipes.
• wacky612: Fixed a bug in pacman package provider that was preventing the installation of bind package.
• Ionuț Arțăriși: Changed the default service provider to systemd on SLES versions 12 and higher.
• Ionuț Arțăriși: Changed the default group provider to gpasswd on SLES versions 12 and higher.
• Noah Kantrowitz: Implemented RFC017 - File Specificity Overhaul.
• James Bence: Improved the reliability of Git provider by making it to be more specific when selecting tags.
• Jean Mertz: Changed knife upload not to validate the ruby files under files & templates directories.
• Alex Pop: Made knife cookbook create to display the directory of the cookbook that is being created.
• Alex Pop: Fixed the information debug output for the configuration file being used when running knife.
• Martin Smith: Changed knife cookbook site share to make category an optional parameter when uploading cookbooks. It is still required when the cookbook is being uploaded for the first time but on the consequent uploads existing category of the cookbook will be used.
• Nicolas DUPEUX: Added JSON output to knife status command. --medium and --long output formatting parameters are now supported in knife status.
• Trevor North: Removed dead code from knife ssh.
• Nicolas Szalay: Fixed a bug preventing mounting of cgroup type devices in the mount provider.
• Anshul Sharma: Fixed inconsistent globbing in knife from file command.
• Nicolas Szalay: Made user prompts in knife more beautiful by adding a space after Y/N prompts.
• Ivan Larionov: Made empty run_list to produce an empty array when using node.to_hash.
• Siddheshwar More: Fixed a bug in knife bootstrap that caused config options to override command line options.
• Thiago Oliveira: Fixed a bug in Mac OSX group provider and made it idempotent.
• liseki: Fixed a bug in why-run mode for freebsd service resources without configured init scripts.
• liseki: Fixed a bug in freebsd service providers to load the status correctly.

Chef Contributions

• ruby 1.9.3 support is dropped
• Added RFC-023 Chef 12 Attribute Changes (https://github.com/opscode/chef-rfc/blob/master/rfc023-chef-12-attributes-changes.md)
• Added os/platform_family options to provides syntax on the Chef::Resource DSL
• Added provides methods to the Chef::Provider DSL
• Added supported?(resource, action) class method to all Providers for late-evaluation if a provider can handle a resource
• Added ProviderResolver feature to handle late resolution of providers based on what kinds of support is in the base operating system.
• Partial Deprecation of Chef::Platform provider mapping. The static mapping will be removed as Chef-12 progresses and the hooks will be completely dropped in Chef-13.
• Default guard_interpreter for powershell_script resource set to :powershell_script, for batch to :batch
• Recipe definition now returns the retval of the definition
• Add support for Windows 10 to version helper.
• dsc_script resource should honor configuration parameters when configuration_data_script is not set (Issue #2209)
• Ruby has been updated to 2.1.3 along with rubygems update to 2.4.2
• Removed shelling out to erubis/ruby for syntax checks (>= 1.9 has been able to do this in the ruby vm itself for awhile now and we've dropped 1.8.7 which could not do this and had to shell_out)
• Report the request and response when a non-200 error code happens
• [FEATURE] Upgrade knife upload and knife download to download everything in an organization, now including the organization definition itself (knife download /org.json) and the invitations and member list (knife download /invitations.json and knife download /members.json). Should be compatible with knife-ec-backup.
• Make default Windows paths more backslashy
• knife now prefers to load config.rb in preference to knife.rb; knife.rb will be used if config.rb is not found.
• Fixed Config[:cache_path] to use path_join()
• Updated chef-zero to 3.0, so that client tests can be run against Enterprise Chef as well as Open Source.
• knife cookbook site download/list/search/share/show/unshare now uses supermerket.getchef.com urls
• added Chef::ResourceCollection#insert_at API to the ResourceCollection
• http_proxy and related config vars no longer clobber already set ENV vars
• all http_proxy configs now set lowercase + uppercase versions of ENV vars
• https_proxy/ftp_proxy support setting http:https:// URLs (and whatever mix and match makes sense)
• End-to-end tests for Ubuntu 12.04
• Only run end-to-end tests when secure environment variables are present.
• Remove recipe DSL from base provisioner (Issue 1446).
• Enable client-side key generation by default. (Issue 1711)
• CookbookSiteStreamingUploader now uses ssl_verify_mode config option (Issue 1518).
• chef/json_compat now throws its own exceptions not JSON gem exceptions
• Modify action for env raises Chef::Exceptions::Env exception on Windows (Chef Issues 1754)
• Fix a bug in the experimental Policyfile mode that caused errors when using templates.
• Disable JSON encoding of request body when non-JSON content type is specified.
• Clean up FileVendor and CookbookUploader internal APIs
• log resource now marks itself as supporting why-run
• http_request no longer appends "?message=" query string to GET and HEAD requests
• added shell_out commands directly to the recipe DSL
• cookbook synchronizer deletes old files from cookbooks
• do not clear file cache when override run list is set (CHEF-3684)
• ruby 1.8.7/1.9.1/1.9.2 support is dropped
• set no_lazy_load to true (CHEF-4961)
• set file_stating_uses_destdir config option default to true (CHEF-5040)
• remove dependency on rest-client gem
• Add method shell_out_with_systems_locale to ShellOut.
• chef-repo rake tasks are deprecated; print relevant information for each one.
• Fix RPM package version detection (Issue 1554)
• Don't override :default provider map if :default passed as platform (OC-11667).
• Fix SuSE package removal failure (Issue 1732).
• Enable Travis to run Test Kitchen with Kitchen EC2.
• Fix a bug in reporting not to post negative duration values.
• Add password setting support for Mac 10.7, 10.8 and 10.9 to the dscl user provider.
• ChefSpec can find freebsd_package resource correctly when a package resource is declared on Freebsd.
• Autodetect/decrypt encrypted data bag items with data_bag_item dsl method. (Issue 1837, Issue 1849)
• windows_user: look up username instead of resource name (Issue #1705)
• Remove the unused bootstrap templates that install chef from rubygems
• Remove the Chef 10 functionality from bootstrap.
• Deprecate --distro / --template_file options in favor of --boostrap-template
• Add :node_ssl_verify_mode & :node_verify_api_cert options to bootstrap to be able to configure these settings on the bootstrapped node.
• Add partial_search dsl method to Chef::Search::Query, add result filtering to search.
• Transfer trusted certificates under :trusted_certs_dir during bootstrap.
• Set :ssl_verify_mode to :verify_peer by default.
• Add homebrew provider for package resource, use it by default on OS X (Issue #1709)
• Add escape_glob method to PathHelper, update glob operations.
• Verify x509 properties of certificates in the :trusted_certs_dir during knife ssl check.
• Disable unforked interval chef-client runs.
• Removed dependencies on the 'json' gem, replaced with ffi-yajl. Use Chef::JSONCompat library for parsing and printing.
• Restore the deprecation logic of #valid_actions in LWRPs until Chef 13.
• Now that we don't allow unforked chef-client interval runs, remove the reloading of previously defined LWRPs.
• Use shell_out to determine Chef::Config[:internal_locale], fix CentOS locale detection bug.
• only_if and not_if attributes of execute resource now inherits the parent resource's attributes when set to a String.
• Retain the original value of retries for resources and display the original value when the run fails.
• Added service provider for AIX.
• The Windows env provider will delete elements even if they are only in ENV (and not in the registry)
• Allow events to be logged to Windows Event Log
• Fixed bug in env resource where a value containing the delimiter could never correctly match the existing values
• More intelligent service check for systemd on Ubuntu 14.10.

11.16.4

• Windows omnibus installer security updates for redistributed bash.exe / sh.exe vulnerabilities ("Shellshock") CVE-2014-6271, CVE-2014-6271, CVE-2014-6278, CVE-2014-7186, CVE-2014-7187.
• Fix bug on Windows where using the env resource on path could render the path unusable.
• Chef Client now retries when it gets 50X from Chef Server.
• Chef Client 11.16.4 can use the policyfiles generated with Chef DK 0.3.0.

11.16.2

• Phil Dibowitz: Fix a regression in whyrun_safe_ruby_block.

11.16.0

• Fix a bug in user dscl provider to enable managing password and other properties at the same time.
• Add dsc_script resource to Chef for PowerShell DSC support on Windows

11.14.6:

• Modify action for env raises Chef::Exceptions::Env exception on Windows (Chef Issues 1754)
• Fix RPM package version detection (Issue 1554)
• Fix a bug in reporting not to post negative duration values.
• Add password setting support for Mac 10.7, 10.8 and 10.9 to the dscl user provider.
• ChefSpec can find freebsd_package resource correctly when a package resource is declared on Freebsd.
• http_proxy and related config vars no longer clobber already set ENV vars
• all http_proxy configs now set lowercase + uppercase versions of ENV vars
• https_proxy/ftp_proxy support setting http:https:// URLs (and whatever mix and match makes sense)

11.14.2

• Jess Mink: Symlinks to directories should be swingable on windows (CHEF-3960)

• Phil Dibowitz: SIGTERM will once-more kill a non-daemonized chef-client (CHEF-5172)

• Pierre Ynard: chef-service-manager should run as a non-interactive service (CHEF-5150)

• Tensibai Zhaoying: Fix file:https:// URI support in remote_file on windows (CHEF-4472)

• John Dyer: Catch HTTPServerException for 404 in remote_file retry (CHEF-5116)

• Pavel Yudin: Providers are now set correctly on CloudLinux. (CHEF-5182)

• Joe Richards: Made -E option to work with single lettered environments. (CHEF-3075)

• Jimmy McCrory: Added a 'knife node environment set' command. (CHEF-1910)

• Hongbin Lu: Made bootstrap report authentication exceptions. (CHEF-5161)

• Richard Manyanza: Made freebsd_package resource use the brand new "pkgng" package manager when available.(CHEF-4637)

• Nikhil Benesch: Implemented a threaded download queue for synchronizing cookbooks. (CHEF-4423)

• Chulki Lee: Raise an error when source is accidentally passed to apt_package (CHEF-5113)

• Cam Cope: Add an open_timeout when opening an http connection (CHEF-5152)

• Sander van Harmelen: Allow environment variables set on Windows to be used immediately (CHEF-5174)

• Luke Amdor: Add an option to configure the chef-zero port (CHEF-5228)

• Ricardo Signes: Added support for the usermod provider on OmniOS

• Anand Suresh: Only modify password when one has been specified. (CHEF-5327)

• Stephan Renatus: Add exception when JSON parsing fails. (CHEF-5309)

• Xabier de Zuazo: OK to exclude space in dependencies in metadata.rb. (CHEF-4298)

• Łukasz Jagiełło: Allow cookbook names with leading underscores. (CHEF-4562)

• Michael Bernstein: Add Code Climate badge to README.

• Phil Sturgeon: Documentation that -E is not respected by knife ssh [search]. (CHEF-4778)

• Stephan Renatus: Fix resource_spec.rb.

• Sander van Harmelen: Ensure URI compliant urls. (CHEF-5261)

• Robby Dyer: Correctly detect when rpm_package does not exist in upgrade action. (CHEF-5273)

• Sergey Sergeev: Hide sensitive data output on chef-client error (CHEF-5098)

• Mark Vanderwiel: Add config option :yum-lock-timeout for yum-dump.py

• Peter Fern: Convert APT package resource to use provides :package, add timeout parameter.

• Xabier de Zuazo: Fix Chef::User#list API error when inflate=true. (CHEF-5328)

• Raphaël Valyi: Use git resource status checking to reduce shell_out system calls.

• Eric Krupnik: Added .project to git ignore list.

• Ryan Cragun: Support override_runlist CLI option in shef/chef-shell. (CHEF-5314)

• Cam Cope: Fix updating user passwords on Solaris. (CHEF-5247)

• Ben Somers: Enable storage of roles in subdirectories for chef-solo. (CHEF-4193)

• Robert Tarrall: Fix Upstart provider with parameters. (CHEF-5265)

• Klaas Jan Wierenga: Don't pass on default HTTP port(80) in Host header. (CHEF-5355)

• MarkGibbons: Allow for undefined solaris services in the service resource. (CHEF-5347)

• Allan Espinosa: Properly knife bootstrap on ArchLinux. (CHEF-5366)

• Matt Hoyle: Made windows service resource to handle transitory states. (CHEF-5319, CHEF-4791)

• Brett cave: Add Dir.pwd as fallback for default user_home if home directory is not set. (CHEF-5365)

• Caleb Tennis: Add support for automatically using the Systemd service provider when available. (CHEF-3637)

• Matt Hoyle: Add timeout for Chef::Provider::Service::Windows. (CHEF-1165)

• Jesse Hu: knife[:attribute] in knife.rb should not override --attribute (CHEF-5158)

• Vasiliy Tolstov: Added the initial exherbo linux support for Chef providers.

• Fix knife cookbook site share on windows (CHEF-4994)

• YAJL Allows Invalid JSON File Sending To The Server (CHEF-4899)

• YAJL Silently Ingesting Invalid JSON and "Normalizing" Incorrectly (CHEF-4565)

• Update rpm provider checking regex to allow for special characters (CHEF-4893)

• Allow for spaces in selinux controlled directories (CHEF-5095)

• Windows batch resource run action fails: " TypeError: can't convert nil into String" (CHEF-5287)

• Log resource always triggers notifications (CHEF-4028)

• Prevent tracing? from throwing an exception when first starting chef-shell.

• Use Upstart provider on Ubuntu 13.10+. (CHEF-5276)

• Cleaned up mount provider superclass

• Added "knife serve" to bring up local mode as a server

• Print nested LWRPs with indentation in doc formatter output

• Make local mode stable enough to run chef-pedant

• Wrap code in block context when syntax checking so return is valid (CHEF-5199)

• Quote git resource rev_pattern to prevent glob matching files (CHEF-4940)

• User resource now only prints the name during why-run runs. (CHEF-5180)

• Set --run-lock-timeout to wait/bail if another client has the runlock (CHEF-5074)

• remote_file's source attribute does not support DelayedEvaluators (CHEF-5162)

• option attribute of mount resource now supports lazy evaluation. (CHEF-5163)

• force_unlink now only unlinks if the file already exists. (CHEF-5015)

• chef_gem resource now uses omnibus gem binary. (CHEF-5092)

• chef-full template gets knife options to override install script url, add wget/curl cli options, and custom install commands (CHEF-4697)

• knife now bootstraps node with the latest current version of chef-client. (CHEF-4911)

• Add config options for attribute whitelisting in node.save. (CHEF-3811)

• Use user's .chef as a fallback cache path if /var/chef is not accessible. (CHEF-5259)

• Fixed Ruby 2.0 Windows compatibility issues around ruby-wmi gem by replacing it with wmi-lite gem.

• Set proxy environment variables if preset in config. (CHEF-4712)

• Automatically enable verify_api_cert when running chef-client in local-mode. (Chef Issues 1464)

• Add helper to warn for broken [windows] paths. (CHEF-5322)

• Send md5 checksummed data for registry key if data type is binary, dword, or qword. (Chef-5323)

• Add warning if host resembles winrm command and knife-windows is not present.

• Use FFI binders to attach :SendMessageTimeout to avoid DL deprecation warning. (ChefDK Issues 69)

• Use 'guest' user on AIX for RSpec tests. (OC-9954)

• Added DelayedEvaluator support in LWRP using the lazy {} key

• Fixed a bug where nested resources that inherited from Resource::LWRPBase would not share the same actions/default_action as their parent

• Raise error if a guard_interpreter is specified and a block is passed to a guard (conditional)

• Allow specifying a guard_interpreter after a conditional on a resource (Fixes #1943)

• Windows package type should be a symbol (Fixes #1997)