Did you know Puppet 9 is coming? 👀

Join Jason St-Cyr and Gavin Patton to understand what’s changing and how to prepare for a smooth upgrade.

- What's new in Puppet 9?
- The new product lifecycles
- Impact to modules?
- Upgrade guidance

If you're running Puppet Enterprise or Puppet Core, this will help you plan out your upgrades for the coming year!

Register: https://www.puppet.com/resources/events/webinar/puppet-9

#Puppet

We've released #OpenVox Server and OpenVoxDB, but there's something you should know. Even though it's in the middle of the 8.x release lifecycle we did a major upgrade to Jetty 12, breaking semver. Read on to find out why and how it benefits you! #security #puppet https://voxpupuli.org/blog/2026/06/26/openvox-server-openvoxdb-8.14.1-release/

I'm excited to tell y'all that Jig has been donated upstream to @voxpupuli.org . Thanks Anthony; I'm glad you're going to continue on the project. #puppet #module #authoring https://github.com/voxpupuli/jig

Tomorrow is Last Wednesday at the Bye & Bye for the #PDX #Puppet crew! I'll be there around 6pm or so.

Have you seen how fast #OpenVox has been patching #security issues? Watch the release notes and keep your software current! #puppet #vulnerabilities https://docs.openvoxproject.org/openvox/latest/release_notes.html

The Audits are coming! The Audits are coming!

Get ready with this webinar featuring Martin Alfke (@tuxmea) of betadots GmbH where the focus is on making audit/compliance workflows less painful and more repeatable using Puppet and the tools you already use today.

If you care about:
- traceability in your infra changes
- reducing manual audit prep
- building compliance into your pipelines instead of bolting it on later

It’s worth a look 👇
https://www.puppet.com/resources/events/webinar/audit-ready

#Puppet #Compliance #DevOps

ℹ️ RHEL 10 support now available in Puppet Security Compliance Enforcement (SCE) for Linux.

You can now enforce CIS benchmarks (v1.0.1, Levels 1 & 2) on RHEL 10, along with additional improvements for logging issues with the rsyslog configuration file and intrusion detection on RHEL 9.

See release notes for the full details! ⬇️
https://help.puppet.com/sce/current/linux/scel_relnotes_270.htm

#Puppet #Linux #Security #Compliance #DevOps

Alt...

Puppet release announcement banner that has the title “SCE for Linux new release” and the subtitle reads “Version 2.7.0 of Security Compliance Enforcement (SCE) for Linux now supports RHEL 10!”

Did you know that you don't need #Puppet's #PDK to run all the tests in the #VoxPupuli #DevKit? Just let Jig build your module and run `bundle exec rake test`. https://docs.openvoxproject.org/ecosystem/latest/devkit/unit_testing.html

SCM 3.8.0 is out and the license expiry part is the most important one to act on: 👀

- CIS-CAT Pro Assessor license in 3.7.1 expires June 21, 2026
- 3.8.0 extends it to June 2027
- SCM 3.8.0 also introduces a way to update the license without a full upgrade

Also in this release:
- Auto cleanup for stuck scans
- New scan timeout control
- Updated benchmarks
- 40 security fixes

If you’re running SCM, worth upgrading soon.

https://help.puppet.com/scm/current/Content/UserGuide/SCM/Release_notes/release_notes.htm#SecurityComplianceManagement380

#Puppet #DevSecOps

Alt...

Perforce Puppet release announcement banner image. The heading reads: “Security Compliance” with a subtitle that has the text “SCM 3.8.0 includes new CIS-CAT license, broader benchmark coverage, and multiple security updates.”

OpenSSL advisories are nothing new… but this latest drop is a reminder of what “at scale” means. 18 CVEs, including RCE.

The challenge isn’t patching, it’s knowing where you're exposed.

Great write-up from Paul Reed on using PuppetDB queries to get your *actual* blast radius before acting.

Start with visibility, not patching.

https://dev.to/puppet/remediating-18-openssl-cves-at-scale-with-puppet-1abo

#Puppet #OpenSSL #DevOps #CyberSecurity

Heads up for anyone working with Puppet modules referencing stdlib 👀

puppetlabs-stdlib 10 is coming for Puppet users, targeting June 30, 2026.

This major release drops Puppet 7 (EOL Feb 2025) and requires Ruby 3.1+, alongside ~18 months of accumulated changes across CI, tooling, platform support, fixes, and enhancements.

If your module is pinned to <10, it will stay on 9.x, no immediate action required, but worth planning ahead.

https://www.puppet.com/blog/puppetlabs-stdlib-10

#Puppet

If you want to trust your VM configurations, you need to automate variability and consistency, even when you get to enterprise scale. Puppet experts Stephen K Potter and Matthew Stone put together a solid breakdown of what makes VM configuration so challenging:

➡️ https://www.puppet.com/blog/vm-configuration

- You need to enforce state beyond day 0

- “Almost identical” VMs are where drift really start to show up

- Misconfiguration impacts performance and DevEx too

#Puppet #InfrastructureAsCode #DevOps

The monthly recap of new Puppetlabs modules is out! This month there were 11 modules getting releases (some more than once!) including some community contributions on the apt module, some CentOS9 support added to a few modules, and a new Windows DSC module for audit policy management!

https://dev.to/puppet/puppetlabs-modules-roundup-may-2026-2gp2

#Puppet

Did you know that #Puppet Bolt 5.1.0 is now released?

- puppet-agent module updated to 4.27.0 (via Bolt Puppetfile)
- Puppet Core 8.17.0 and Facter 4.17.0 now bundled
- Bundled + internal modules updated to latest releases
- Ruby 3 and 4 now supported
- Debian 13 packages now available (validate inventories + transport plugins before prod)
- Fix: issue adding Bolt for RHEL 10 to your repository resolved

Good release If you’re tracking distro and Ruby compatibility.

➡️ https://help.puppet.com/bolt/current/topics/changelog.htm#Bolt51020260526

Guess what? Once again I've almost let it slip by me that today is #LastWednesday for the #PDX #Puppet folk! Hope to see you at the Bye & Bye this evening around 6pm or so!

New Puppet Core 8.19 is out!

Highlights:
- Security updates for bundled components (Ruby, OpenSSL, libxml2, curl, net-imap, erb)
- CSV Ruby gem dependency removed
- Windows user passwords now allow colons (:), avoiding unnecessary failures
- Installation now blocks unsupported Ruby versions (max supported is Ruby 3.x)

If you use net-imap directly, definitely read the release notes carefully as the new version is stricter.

Full details + CVEs:
https://help.puppet.com/core/current/Content/PuppetCore/PuppetReleaseNotes/release_notes_puppet_x-8-19-0.htm

#Puppet #DevOps #Security

Alt...

Perforce Puppet release announcement banner image. The heading reads: “Puppet Core 8.19 released!” with a subtitle that has the text “Reduce exposure with multiple security updates”

Been dealing with Copy Fail and Dirty Frag vulnerabilities on Linux? Long-time Puppet expert Tony Green has published some open source modules to help you detect what is impacted in your Puppet estate and mitigate!

https://dev.to/puppet/handling-dirty-frag-and-copy-fail-with-puppet-6ff

#Puppet #Linux #CopyFail #DirtyFrag #Security

April’s Puppetlabs Modules Roundup is live!

This month covers updates to 8 puppetlabs modules:
- cd4peadm
- comply
- complyadm
- lvm
- pe_event_forwarding
- peadm
- sce_linux
- splunk_hec

If you manage Puppet at scale, this is a quick way to spot changes worth a closer look.

Read the April 2026 roundup: https://dev.to/puppet/puppetlabs-modules-roundup-april-2026-358

#Puppet #DevOps #PuppetForge

[lien] Why Migrations Fail: Drift, Cutovers & Control | Puppet #puppet #tips #gik

“Migrations fail when visibility is stale, drift grows, and cutovers go manual.”

Migrating Puppet environments doesn’t have to be painful.

Tony Green shares hard‑won lessons from real-world migrations and how to stay in control when things get messy.

If you’re planning a Puppet migration (or already in the middle of one), this is well worth a read:

https://www.puppet.com/blog/puppet-mirgration-workflows

#Puppet #DevOps #InfrastructureAsCode #Automation

A lot of teams are being told to “use AI in ops” right now. The harder part is figuring out *where it actually helps* day to day without adding risk, noise, or another thing to babysit.

If you’re curious (or skeptical 👀) about AI in ops, join Robin Tatam and Jason St-Cyr as they share their thoughts on where AI can realistically fit into infrastructure operations today. No magic, just using good tools to do better.

👉 https://www.puppet.com/resources/events/webinar/puppet-ai

#Puppet #InfrastructureAsCode #AIOps

Hey #PDX #Puppet people! Tomorrow is Last Wednesday at the Bye & Bye. I'll be there around six, other folks might be there a little earlier.

📢 Puppet Continuous Delivery 5.15.0 available with improvements for stability, security, integrations, and usability.

Highlights include:
- New external_webhook_url support for proxy-based deployments
- Impact Analysis updates for Pipelines as Code
- Clearer GitLab commit status reporting
- Amazon Linux 2023 support for Docker-based installs
- Security and dependency updates addressing reported CVEs

Full release notes:
https://help.puppet.com/cdpe/current/Content/UserGuide/CDPE/ReleaseNotes/cd_release_notes.htm#Version5150

#Puppet #InfrastructureAsCode #ContinuousDelivery

Alt...

Perforce Puppet release announcement banner image. The heading reads: “Puppet Continuous Delivery” with a subtitle that has the text “Security updates, improved VCS integration flexibility, more focused Impact Analysis, and more in the new releases of Puppet CD 5.15!”

Puppet Security Compliance Management 3.7.0 is out!

This release focuses on keeping compliance stable as environments scale:
- New CIS benchmarks for modern Linux, macOS, and Windows 11
- More predictable scan performance with tunable JVM memory
- Stronger session and GraphQL API controls
- Security fixes and dependency updates (CVE items in the release notes!)

👇Check out the Release notes:
https://help.puppet.com/scm/current/Content/UserGuide/SCM/Release_notes/release_notes.htm#SecurityComplianceManagement370

#Puppet #Compliance #InfrastructureAsCode

Alt...

Perforce Puppet release announcement banner image. The heading reads: “Security Compliance” with a subtitle that has the text “SCM 3.7.0 adds new CIS benchmarks for Linux and macOS, along with Windows 11 Enterprise updates.”

Are you looking at how you can bring your Copilot and Puppet development together to build more of your infrastructure as code in an agent-assisted flow? Jason St-Cyr put together a blog tutorial showing his experience generating a Puppet module using GitHub Copilot, Visual Studio Code, and the latest Puppet MCP release!

https://www.puppet.com/blog/ai-assisted-puppet-module-development

#Puppet #AI #Copilot #AIOps

Puppet Core 8.18.0 is out with macOS 15 support and security updates.

This release includes CVE fixes across core dependencies:
- libxml2 updated to 2.15.2
- zlib gem updated to 3.0.1
- curl updated to 8.19.0

If you’re managing macOS fleets or operating with tight patch windows, this is a solid release to plan into your next upgrade cycle.

Release notes:
https://help.puppet.com/core/current/Content/PuppetCore/PuppetReleaseNotes/release_notes_puppet_x-8-18-0.htm

#Puppet #DevOps #Security #InfrastructureAsCode

Alt...

Perforce Puppet release announcement banner image. The heading reads: “Puppet Core 8.17 released!” with a subtitle that has the text “Key security updates and macOS 15 support added.”

March 2026 brought 4 Puppetlabs module releases in the Forge catalog.

Across the month, the clearest themes were compatibility updates across Puppet Enterprise (PE), supported platforms, and operational hardening and troubleshooting improvements.

Read along to see what changed this month! 👇

https://dev.to/puppet/puppetlabs-modules-roundup-march-2026-3bde

#Puppet #InfrastructureAsCode

In Puppet Enterprise (PE) versions prior to PE 2025.9, malformed task or plan metadata was logged in the bolt-server log and the affected task or plan was ignored.

In 2025.9, malformed metadata caused the task and plan listing to fail to load and prevented affected tasks or plans from running. Errors were written to the bolt-server log.

This issue has been resolved in PE 2025.10.

👉 Official 2025.10 Release Notes: https://help.puppet.com/pe/current/topics/release-notes-pe-x-10.htm

#Puppet #PuppetEnterprise

Alt...

Perforce Puppet release announcement banner image. The heading reads: “Puppet Enterprise” with a subtitle that has the text “Malformed task or plan metadata no longer causes failures with Puppet Enterprise 2025.10”

Puppet Enterprise 2025.9 and 2023.8.9 are out!

🔧 PE 2025.9:
- Real-time visibility into Advanced Patching runs
- Clearer errors and retry support for patch group creation
- Edit or stop workflows from the console or API
- Agent support for Debian 13 (amd64, aarch64)
- Multiple CVEs addressed

🔐 PE 2023.8.9 adds Debian 13 agent support and security fixes.

📄 Release notes:
2025.9: https://help.puppet.com/pe/current/topics/release-notes-pe-x-9.htm
2023.8.9: https://help.puppet.com/pe/2023.8/topics/release-notes-pe-x-y-9.htm

#Puppet #DevOps #InfrastructureAsCode

Alt...

Perforce Puppet release announcement banner image. The heading reads: “Puppet Enterprise” with a subtitle that has the text “Realtime patch run visibility, workflows editing, and more now available with Puppet Enterprise 2025.9 and 2023.8.9!”

Hey #PDX #Puppet people! Tomorrow is #LastWednesday at the Bye and Bye and a little birdie told me that there might be a surprise appearance from one of our favorite furry friends. We'll roll in sometime around 5:30 or 6 and would love to see you!

AI adoption in DevOps is accelerating, but trust, accuracy, and real-world usability still matter.

Jason St-Cyr sits down with Jessica Gao, Product Manager at Puppet, to unpack how AI is actually being used in infrastructure and operations teams today, and what’s changed over the last 12–18 months. Hear about where AI code assist can actually be usefully in your flow and what to watch for next as the industry matures.

https://www.youtube.com/watch?v=WBxkMbT3Hr8

#Puppet #AI #MCP #DevOps

ℹ️ Ubuntu 24.04 support comes to Puppet SCE for Linux.

SCE for Linux 2.6.0 is now available, adding support for enforcing CIS benchmarks (v1.0.0, Level 1 & 2) on Ubuntu 24.04 LTS, plus logging and reliability improvements.

Also includes additional improvements for logging, handling of sce_mount_info, module dependencies, rsyslog-related failures, and augeas warnings.

📘See release notes for the full details!
https://help.puppet.com/sce/current/linux/scel_relnotes_260.htm

#Puppet #Linux #Security #Compliance #DevOps

Alt...

Puppet release announcement banner that has the title “SCE for Linux new release” and the subtitle reads “Version 2.6.0 of Security Compliance Enforcement (SCE) for Linux now supports Ubuntu 24.04 and other changes. Download today!”

#FreeBSD ports for the legacy Open Source #Puppet are now DEPRECATED. They will be removed from the ports tree in a few months.

If your rely on these ports, you are advised to switch to the #OpenVox ports, maintained by the #VoxPupuli folks 😃.

https://voxpupuli.org/blog/2026/03/15/puppet-deprecated-on-freebsd/

Perforce Puppet has posted a 90-day notice that Puppet Agent support for the following operating system platforms is reaching End of Life (EOL). Support for these platforms will be discontinued in upcoming Puppet releases:

- Amazon Linux 2
- Debian 10
- Fedora 40
- Red Hat Enterprise Linux 7
- Ubuntu 18.04
- Ubuntu 20.04
- Windows 10

After this period, these platforms will no longer receive updates or be included in future puppet-agent releases.

https://dev.to/puppet/puppet-agent-os-support-eol-90-day-notice-4k9c

#Puppet

Wondering what new Puppet module releases came out in February? Check out the details on the the latest module updates!

- sqlserver module now supports SQL Server 2025
- sce_windows module resolves DSC reporting issues
- Community improvements to docker module included in latest release, including APT keyring improvements
- SUSE IPv6 improvements for the firewall module
- Puppet 7 removed from 4 more modules

And more updates too! Check out the full roundup:

https://dev.to/puppet/puppetlabs-modules-roundup-february-2026-2p98

#puppet

[lien] GitHub - theforeman/puppetdb_foreman: PuppetDB proxy in Foreman · GitHub #puppet #gik