Chocolatey

v2.7.2 Maintenance

This release keeps dependencies and maintenance posture current for teams operating this tool.

Published 22d Build & Package

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

c-sharp chocolatey package-management package-manager package-manager-tool powershell

+5 more

software software-management softwareautomation windows windows-server

Affected surfaces

deps

ReleasePort's take

Moderate signal

editorial:auto 13d

Chocolatey 2.7.2 updates log4net to 3.3.1 and 7zip executables to v26.01. These are routine dependency updates included in this minor release.

Why it matters: Update at next maintenance window to receive upstream improvements. No urgent action required; incorporate as part of standard patch management.

Summary

AI summary

Minor fixes and improvements.

Changes in this release

Type	Severity	Summary	CVE
Dependency	Medium	log4net upgraded to version 3.3.1. log4net upgraded to version 3.3.1. Source: llm_adapter@2026-05-21 Confidence: high	—
Dependency	Medium	Bundled 7zip executables updated to v26.01. Bundled 7zip executables updated to v26.01. Source: llm_adapter@2026-05-21 Confidence: high	—

Full changelog

As part of this release we had 2 issues closed.

Dependency Changes

Upgrade log4net to 3.3.1.
- See #3887 by corbob, resolved in !3886 by corbob.
Update bundled 7zip executables to v26.01.
- See #3888 by corbob.

Contributors

1 contributors made this release possible.

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track Chocolatey

Get notified when new releases ship.

About Chocolatey

Chocolatey - the package manager for Windows

All releases →