Puppet Core 9.0.0 and 8.21.0 are now available # Puppet Core Release Announcement We are pleased to announce the release of Puppet Core 9.0.0, a major foundation release for customers ready to modernize, and Puppet Core 8.21.0, a maintenance release for customers staying on the 8.x track. Both releases ship with Facter 4.21.0. ## Key Updates • Puppet Core 9.0.0 updates key runtime and security foundations, including Ruby 4.0 and OpenSSL 3.5. • It also includes a modernized Windows toolchain and a cleaner supported-platform baseline. • Puppet Core 8.21.0 includes the same new platform support and selected security hardening, without the major dependency updates. ## Security fixes These releases include important dependency updates and hardening across OpenSSL, curl, Ruby, SSH key validation, autoloader input validation, and certificate handling. For the full security detail, see the [full release notes](https://help.puppet.com/core/current/Content/PuppetCore/PuppetReleaseNotes/release_notes_osp.htm). ## OS additions and EOLs Added in Puppet Core 9.0.0 and 8.21.0: Rocky Linux 10 and Alma Linux 10 on x86_64. Removed in both the 8.x and 9.0.0 tracks: • Amazon Linux 2 on aarch64 • Debian 10 • Fedora 36 and 40 • macOS 13 on x86_64 and ARM • Red Hat Enterprise Linux 7 on x86_64 • Ubuntu 18.04 and 20.04 on both architectures • Windows 10 on x86_64 Additional removals in Puppet Core 9.0.0 only: • Debian 11 and Debian 12. If you're running any managed nodes on these platforms, migrate them before upgrading to the corresponding release — [contact your Puppet account team](https://www.puppet.com/extended-agent-support) if you need to discuss extended support options. ## What to check before upgrading 1. If you’re moving to Puppet Core 9.0.0, test custom facts, functions, types, providers, and Forge modules against Ruby 4.0. 2. Review any SHA-1 usage, OpenSSL-linked integrations, deferred functions, and Ruby gem dependencies. 3. Confirm managed nodes are on supported platforms before upgrading; several EOL operating systems have been removed. 4. PE customers planning for the Puppet Core 9 pairing should allow time for JDK 21 and PostgreSQL 17 requirements. For full details on breaking changes and upgrade considerations, see the [Puppet Core 9 upgrade docs](https://help.puppet.com/core/current/Content/PuppetCore/upgrading-from-puppet8-to-puppet9.htm) and the [full release notes](https://help.puppet.com/core/current/Content/PuppetCore/PuppetReleaseNotes/release_notes_osp.htm). ## Puppet Server and PuppetDB highlights Puppet Server 9.0.2 and PuppetDB 9.0.1 move to the JDK 21 / Jetty 12 baseline and include CA, certificate, authentication, and endpoint hardening. Puppet Server 8.9.10 and PuppetDB 8.10.11 bring selected hardening and platform updates to the 8.x track. For the full component-level detail, see the [full release notes](https://help.puppet.com/core/current/Content/PuppetCore/PuppetReleaseNotes/release_notes_osp.htm). ## Facter 4.21.0 Facter now includes native Windows disk and partition facts via WMI, reducing the need for third-party module coverage in that area. ## Resources • [Puppet Core platform support lifecycle](https://www.puppet.com/products/puppet-core/support-lifecycle) • [Full release notes](https://help.puppet.com/core/current/Content/PuppetCore/PuppetReleaseNotes/release_notes_osp.htm) • Validate a module: use [the Puppet Development Kit (PDK) 3.8.0](https://help.puppet.com/pdk/current/topics/release_notes_pdk.htm#PDK380) to check compatibility with Puppet Core 9 • [Puppet Core 9 upgrade docs](https://help.puppet.com/core/current/Content/PuppetCore/upgrading-from-puppet8-to-puppet9.htm) • Questions? Reach out to your Puppet account team. Upgrade today to take advantage of the latest security, platform, and reliability improvements. — The Puppet Team Sent by Zapier