This release includes 1 breaking change for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Summary
AI summaryImplement Choria Transport (Phases 1 and 2) enabling tasks, scripts, and commands via Choria.
Full changelog
This is the first release that supports the Choria transport! Right now, it only supports running tasks, scripts, and commands. Tasks can be run either via Choria's bolt_tasks agent (default) or the shell agent. Scripts and commands must use shell agent. See the associated Choria docs in the repo for more details on how it works and the roadmap to full functionality.
What's Changed
New Features 🎉
- feat: allow to pass additional HTTP headers in puppetdb requests by @TheMeier in https://github.com/OpenVoxProject/openbolt/pull/175
- Implement Choria Transport (Phases 1 and 2) by @nmburgan in https://github.com/OpenVoxProject/openbolt/pull/206
- Migrate bundled module specs from mocha to rspec-mocks/voxpupuli-test by @nmburgan in https://github.com/OpenVoxProject/openbolt/pull/216
- Move Choria docs to existing locations by @nmburgan in https://github.com/OpenVoxProject/openbolt/pull/221
- Add --choria-mcollective-certname flag for non-root cert identity by @nmburgan in https://github.com/OpenVoxProject/openbolt/pull/223
- Rename NATS server terminology to Choria Broker by @nmburgan in https://github.com/OpenVoxProject/openbolt/pull/225
Bug Fixes 🐛
- Increase WinRM shell and user limits for CI by @nmburgan in https://github.com/OpenVoxProject/openbolt/pull/199
- Fix windows builds by @nmburgan in https://github.com/OpenVoxProject/openbolt/pull/204
- Fix concurrency test bug and install modules before unit tests by @nmburgan in https://github.com/OpenVoxProject/openbolt/pull/222
Dependency Updates ⬆️
- Build(deps-dev): Update mocha requirement from >= 1.4.0, < 3 to >= 1.4.0, < 4 by @dependabot[bot] in https://github.com/OpenVoxProject/openbolt/pull/210
- Build(deps-dev): Update voxpupuli-rubocop requirement from ~> 5.0.0 to ~> 5.2.0 by @dependabot[bot] in https://github.com/OpenVoxProject/openbolt/pull/213
- Update dependency puppet-openvox_bootstrap to v1.4.0 by @renovate[bot] in https://github.com/OpenVoxProject/openbolt/pull/214
- Build(deps-dev): Update github_changelog_generator requirement from ~> 1.16.4 to ~> 1.18 by @dependabot[bot] in https://github.com/OpenVoxProject/openbolt/pull/209
Other Changes
- docs: fix README badges by @d1nuc0m in https://github.com/OpenVoxProject/openbolt/pull/172
- Drop puppet_connect plugin & module by @jay7x in https://github.com/OpenVoxProject/openbolt/pull/197
- Add SLES16 by @sbernhard in https://github.com/OpenVoxProject/openbolt/pull/176
- Update gem versions to align with openbolt-runtime changes by @nmburgan in https://github.com/OpenVoxProject/openbolt/pull/140
- Promote puppet-runtime 2026.03.19.1 by @OpenVoxProjectBot in https://github.com/OpenVoxProject/openbolt/pull/205
- Add signoff option to promotion workflow by @nmburgan in https://github.com/OpenVoxProject/openbolt/pull/217
- package build: replace
build->vanagon buildby @bastelfreak in https://github.com/OpenVoxProject/openbolt/pull/219 - Promote puppet-runtime 2026.04.20.1 by @OpenVoxProjectBot in https://github.com/OpenVoxProject/openbolt/pull/220
New Contributors
- @d1nuc0m made their first contribution in https://github.com/OpenVoxProject/openbolt/pull/172
- @jay7x made their first contribution in https://github.com/OpenVoxProject/openbolt/pull/197
- @TheMeier made their first contribution in https://github.com/OpenVoxProject/openbolt/pull/175
- @sbernhard made their first contribution in https://github.com/OpenVoxProject/openbolt/pull/176
Full Changelog: https://github.com/OpenVoxProject/openbolt/compare/5.4.0...5.5.0
Breaking Changes
- Drop puppet_connect plugin & module
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About OpenBolt
Orchestration tool to run orchestration workflows or one-off tasks/scripts to automate the provisioning and management of nodes. Community fork of the last open source version of Puppet Bolt.
Related context
Related tools
Beta — feedback welcome: [email protected]