Today, we are pleased to announce the release of CFEngine 3.28.0! The code word for this release is introspection.
This is a non-LTS, not supported, feature release, with features which will become part of the next LTS scheduled for summer 2027.
What’s new
Container introspection
In the CFEngine Enterprise Web UI, users can now see information about containers:
For this first iteration, we support docker and podman as the 2 engines / CLIs where we get information about containers.
Customers who are using something else can open a support ticket / feature request and we can add more in future versions.
Breaking changes
From time to time, we need to change the behavior of certain features of CFEngine in a way that is not completely backwards compatible.
This is usually to address security concerns, bugs causing issues for our users, or features behaving in really unexpected or unintended ways.
In such cases, we try to communicate the changes with users, along with what is needed from them (such as adjusting their policy, reports, or API usage).
Please take a look at the recent change-in-behavior blog posts, and stay up to date on these via our blog:
https://cfengine.com/tags/change-in-behavior/
Changelogs
As always, you can see a full list of changes and improvements in our changelogs:
- 3.28.0 Changelog for CFEngine Community
- 3.28.0 Changelog for CFEngine Enterprise
- 3.28.0 Changelog for Masterfiles Policy Framework
Please note that the Enterprise changelogs contain only changes specific to Enterprise. To get a full overview of all changes in a version, read all 3 changelogs.
Dependency updates
We update dependencies to ensure we have the latest security fixes in the libraries and tools used in CFEngine. The table below shows our dependencies and their versions, with version 3.26.0 for comparison:
| CFEngine version | 3.27.0 | 3.28.0 |
|---|---|---|
| Apache | 2.4.66 | 2.4.68 |
| APR | 1.7.6 | 1.7.6 |
| apr-util | 1.6.3 | 1.6.3 |
| diffutils | 3.12 | 3.12 |
| Git | 2.52.0 | 2.54.0 |
| leech | 0.2.0 | - |
| leech2 | - | 5.2.0 |
| libacl | 2.3.2 | 2.3.2 |
| libattr | 2.5.2 | 2.5.2 |
| libcurl | 8.17.0 | 8.20.0 |
| libcurl-hub | 8.17.0 | 8.20.0 |
| libexpat | 2.7.3 | 2.8.1 |
| libgnurx | 2.5.1 | 2.5.1 |
| libiconv | 1.18 | 1.19 |
| librsync | 2.3.4 | 2.3.4 |
| libxml2 | 2.15.1 | 2.15.3 |
| LibYAML | 0.2.5 | 0.2.5 |
| LMDB | 0.9.33 | 0.9.35 |
| nghttp2 | 1.68.0 | 1.69.0 |
| OpenLDAP | 2.6.10 | 2.6.13 |
| OpenSSL | 3.6.0 | 4.0.1 |
| PCRE2 | 10.47 | 10.47 |
| PHP | 8.5.1 | 8.5.7 |
| PostgreSQL | 18.1 | 18.4 |
| pthreads-w32 | 2-9-1 | 2-9-1 |
| rsync | 3.4.1 | 3.4.4 |
| SASL2 | 2.1.28 | 2.1.28 |
| zlib | 1.3.1 | 1.3.2 |
Thank you to all the developers and maintainers of Open Source Software which make CFEngine possible!
Downloads
CFEngine Enterprise is free for up to 25 hosts, click here to go to the download pages with new packages.
If you are using cf-remote, you can specify this version using the --version command line flag:
cf-remote --version 3.28.0 download(Since this is a non-LTS release, it will not be the default in cf-remote and other places, even though it is the newest).
Contributions
We encourage all of our users to get involved in the community and contribute. Feel free to use one of the following avenues:
- Ask for help, share an idea, or start a discussion on GitHub Discussions
- Contribute modules to CFEngine Build
- Look through our curated list of issues for new contributors
- Improve the documentation by fixing typos, adding examples, or explaining things you found difficult
- Browse the code or submit a pull request through GitHub
- Submit a bug report or feature request in our issue tracker
