Happy Thursday Everyone! We are pleased to announce that the 8.14.1 releases of OpenVox Server and OpenVoxDB have been published to the production repositories at OSUOSL and should sync out to voxpupuli.org repos within the hour. These releases contain one MAJOR change that everyone should be aware of: • The Jetty webserver has been upgraded from Jetty 10 to Jetty 12. This is a larger change than we would normally put into a stable 8.x release, but Jetty 10 has passed end-of-life and moving to Jetty 12 was the best option to address CVEs. We are hoping this will result in no visible change in behavior. But, Jetty does handle all API traffic for Server and DB, so the major version bump is something to be aware of with this upgrade. Other items of note in these releases: • Packages are available for Fedora 44. • Issues with

zypper install

and

zypper remove

have been fixed. • An issue with JRuby failing to load some Eliptic Curve (EC) keys has been fixed. This fix has increased the package size by about 30 MB -- something that will be reduced in a future release. The 8.14.0 builds were not released, due to metrics collection being broken, but the tags for those releases summarize the changes, fixes, and resolved CVEs: • github.com/OpenVoxProject/…/8.14.0 • github.com/OpenVoxProject/…/8.14.0 Big thanks to @austb for getting Jetty 12 up and running, and to Nick Burgan for getting it backported to the 8.x series. Thanks to @bastelfreak for pulling this release together and to @Corporate Gadfly for the SLES, EC, and other fixes. Also, a shout-out to @Josh Partlow for adding ARM64 coverage to the acceptance piplines and cutting the runtime of x86_64 tests in half while doing it. If you have questions about, or encounter issues with this release please reach out in #openvox here on Slack or

#voxpupuli-openvox

on IRC at libera.chat Hope everyone is having a great week, and a pleasant summer!

Happy Wednesday everyone! Mostly all quiet on the release front this week as holidays are happening and folks are enjoying some time in the sun. There is one item I wanted to announce and that is we have completed our first inventory of dependencies included in the

openvox-agent

,

openbolt

,

openvox-server

, and

openvoxdb

packages. These packages each contain dozens of Ruby gems, Java JARs, and C libraries from upstream open source projects --- it is nice to finally have a list of "Who's Who in the Zoo". This inventory is auto-generated from Vanagon build configurations and Maven depedency trees. From there, we are able to auto-generate the CVE fix lists that are now included in release notes for each of the projects. The tooling for all of this automation can be found in this Git repo: github.com/OpenVoxProject/openvox-sbom-tools Of particular note is this sub-directory, which contains Software Bill of Material (SBOM) files, in CycloneDX-JSON format, for each release we have done in 2026: github.com/OpenVoxProject/…/sbom This is a first step, and we will be working to fill in components that the automation currently doesn't find (e.g. Ruby Gems bundled with JRuby) and enrich the output with any information required by U.S. Executive Order 14028 or the EU Cyber Resilience Act (CRA). If you have any questions, please reach out in #sig-release here on Slack or

#voxpupuli-sig-release

on IRC at libera.chat. Looking forward, we will likely be moving toward a release of

openvox-agent

in the next couple of weeks to clear out CVEs addressed by last week's

curl

release. If you have PRs for small bugs waiting for merge, let us know in the #openvox channel on Slack, or

#voxpupuli-openvox

on IRC. That's all for today! Hope everyone is having a pleasant summer, and a very happy Canada Day canadaflag

📢 VoxConf 2026 is happening! Registration is open for VoxConf 2026, the annual conference for the Vox Pupuli and OpenVox community! 🗓️ When: Thursday, July 16, 2026 8:45 till the later afternoon) 📍 Where: Garching near Munich, Germany 💰 Cost: Free (but sign up at https://www.meetup.com/foreman-user-group/events/313848953/)! Whether you're a long-time contributor or just interested in OpenVox, Puppet, and configuration management, it's a great opportunity to meet the community, learn something new, and share ideas. VoxConf is followed by the Foreman Birthday event in the afternoon, so there's even more reason to join. 👉 Checkout our schedule at: https://voxpupuli.org/voxconf/2026/ 👉 Also sign up for the sponsored get-together on the 15th: https://www.meetup.com/vox-pupuli/events/315150350/ Hope to see some of you there! 🎉

openvox-agent 8.28.1 is in our testing repo! https://s3.osuosl.org/openvox-artifacts/index.html#repo_test/ ## What's Changed ### Bug Fixes 🐛 • [Backport 8.x] Tolerate concurrent creation of directories by @OpenVoxProjectBot in https://github.com/OpenVoxProject/openvox/pull/507 • [Backport 8.x] Copy input mtime to files generated by puppet generate types by @OpenVoxProjectBot in https://github.com/OpenVoxProject/openvox/pull/523 • [Backport 8.x] Fix regex node lookup regression from PUP-11515 by @OpenVoxProjectBot in https://github.com/OpenVoxProject/openvox/pull/515 • [Backport 8.x] Update ca_last_update/crl_last_update on HTTP 304 by @OpenVoxProjectBot in https://github.com/OpenVoxProject/openvox/pull/526 • Fix for a puppet-resource_api CVE: https://www.cve.org/CVERecord?id=CVE-2026-8804 ### Other Changes • Add jruby 9.4.15 to CI by @bastelfreak in https://github.com/OpenVoxProject/openvox/pull/487 • Promote puppet-runtime 2026.06.24.1 into 8.x by @OpenVoxProjectBot in https://github.com/OpenVoxProject/openvox/pull/501 • Add arm64 support to acceptance 8.x by @jpartlow in https://github.com/OpenVoxProject/openvox/pull/499 • [Backport 8.x] Fix handling of Puppet::Pops serialization issues by @OpenVoxProjectBot in https://github.com/OpenVoxProject/openvox/pull/514 • Promote puppet-resource_api 1.9.1 into 8.x by @OpenVoxProjectBot in https://github.com/OpenVoxProject/openvox/pull/518 • Promote puppet-resource_api 1.9.2 into 8.x by @OpenVoxProjectBot in https://github.com/OpenVoxProject/openvox/pull/527 The release already passed our acceptance testing. Please test the packages and provide feedback. We want to promote them to the stable repos tomorrow evening

Good evening people, openvox 8.28.1 is now live on our mirrors! We have a blogpost available with the changelog and the Casks for Homebrew got also updated. Enjoy the release and please provide feedback in #openvox!

Good news everyone! VoxConf will be streamed and recorded. [1] Save this link for later streaming.media.ccc.de/voxconf/voxconf You may as well look the streaming link up on our homepage voxpupuli.org/voxconf/2026 Thanks to many unnamed people for providing hardware and assistance. [1] Setup is tested. I still bet on Ethernet or 5G cellular network being available.

Happy Wednesday Everyone! In celebration of VoxConf and The Foreman Birthday, the release team is pleased to announce something special this week: We have just shipped

9.0.0~beta1

releases of the

openvox-agent

,

openvox-server

, and

openvoxdb

packages. This is the first 9.0 pre-release that contains both the agent and the server packages and they have been shipped as a set to new

openvox9

repositories. To configure these repositories, install the

openvox9-release

packages from: - apt.voxpupuli.org - yum.voxpupuli.org Packages for macOS can be found at: downloads.voxpupuli.org/mac/openvox9 Updates to

homebrew-openvox

will show up later in the week. It wouldn't be a beta release without something going wrong, and today it was our Windows signing pipeline. For those adventurous souls who are fine with unsigned packages, the Windows build can be found on OSUOSL: s3.osuosl.org/openvox-artifacts/openvox-agent/9.0.0~beta1/openvox-agent-9.0.0~beta1-x64.msi That build will be published to voxpupuli.org once the Windows signer is sorted out. Headline component changes in these releases, compared to OpenVox 8: -

openvox-agent

now uses Ruby 4.0, which is an upgrade from Ruby 3.2. -

openvox-server

and

openvoxdb

are configured to run on Java 25, with the exception of EL 8 which uses Java 21. This is an upgrade from Java 17. -

openvox-server

now uses JRuby 10.0, which is compatible with Ruby 3.4. This is an upgrade from JRuby 9.4, which was compatible with Ruby 3.1. -

openvoxdb

is now tested against PostgreSQL 17 and 18. This is an upgrade from PostgreSQL 14. Please see the release notes for numerous other changes, including bugfixes and breaking changes: - `opevox-agent`: github.com/OpenVoxProject/…/9.0.0-beta1 - `openvox-server`: github.com/OpenVoxProject/…/9.0.0-beta1 - `openvoxdb`: github.com/OpenVoxProject/…/9.0.0-beta1 This is a BETA release, so we don't recommend upgrading production systems at this time. For those who try upgrading test systems to use these releases, there are a couple of caveats to be aware of: - Do a full upgrade via

apt

,

dnf

, or

zypper

in order to re-solve dependencies. This should bring in the new Java 25 or Java 21 packages. After upgrade, check

update-alternatives --display java

to ensure

/usr/bin/java

points at version 21 or newer. If the new packages try to run under Java 17, the service will crash early with

Execution error (ClassNotFoundException)

referencing

java.util.SequencedCollection

. - If you have previously installed either of our

9.0.0.alpha1

or

9.0.0.alpha2

releases, then you will need to downgrade to the beta release. E.g.

dnf downgrade openvox-agent 9.0.0~beta1

. The tilde,

~

, in the beta release version makes it sort older than a full version number and should help later when upgrading pre-releases to the final

9.0.0

version. Finally, thanks to everyone in the community who has submitted pull request, filed bugs, tried out pre-releases, and otherwise contributed to making these builds happen. Special shout-outs to @bastelfreak and @Corporate Gadfly for working on all aspects of these builds, @Steven Pritchard for keeping track of breaking changes, and @Josh Partlow for tons of work on the acceptances tests. Shout out to @austb for getting us onto Jetty 12, and @Nick Burgan for building out the release infrastructure to make this happen. Special thanks to @CVQuesty for testing early builds and uncovering issues vox pupuli If you have questions about, or encounter issues with these releases, reach out in #openvox here on Slack or

#voxpupuli-openvox

on IRC. See voxpupuli.org/connect for details.

Happy Thursday Everyone! Quick update today: the Windows package for

openvox-agent 9.0.0~beta1

has been successfully signed and published. It will take an hour-ish for sync to run against the OSUOSL repos, when it finishes the signed package should be live at: downloads.voxpupuli.org/windows/openvox9 The tool we use to perform signing,

jsign

, had a typo in the URLs that it used when interacting with the DigiCert API. There was a doubled slash, resulting in a request for

/api/v1//keypairs/

instead of

/api/v1/keypairs/

. The DigiCert API server appears to have been tolerant of this until sometime after the 8.28.1 release last week. Luckily for us,

jsign

published a bugfix release yesterday and a simple upgrade got the Windows signing working again.

Hello All, If you can believe it, it's a Friday once again! Another quick update on `openvox-agent 9.0.0~beta1`: when I shipped "everything but Windows" on Wednesday, I forgot to apply a

s/aarch64/arm64/

substitution when enumerating the Debian and Ubuntu package names. So, the 64 bit ARM builds got left behind. That has now been fixed and signed packages for ARM64 should show up on apt.voxpupuli.org within the hour. Thanks a bunch to @bootc for alerting us to the gap!

Happy Wednesday everyone! wednesday This week, we are pleased to announce the OpenVox Server 8.15.1 and OpenVoxDB 8.15.0 maintenance releases. These releases contain fixes for CVEs in several Java libraries: notably the Jackson XML and JSON parser, and the BouncyCastle TLS library. Please see the release notes for details: - github.com/OpenVoxProject/openvox-server/…/8.15.0 - github.com/OpenVoxProject/openvoxdb/…/8.15.0 The CVE fix list for OpenVoxDB is longer as we missed a Jackson update in the 8.14.1 release that only went into OpenVox Server. This sort of miss should be eliminated going forward as we have automation in place to open update PRs after upstream components release combined with SBOM generation to help us audit what is in the builds. At this point we're shipping component updates faster than some CVEs get published to vulnerability databases --- the fix lists in the release notes will likely update in a week or two after BouncyCastle publishes the CVE list fixed in their 1.85 release. The OpenVox Server release also contains one significant functional change: - The JRuby version has been updated from 9.4.12.1 to 9.4.15.0. We had been pinned to the older version for a while due to a memory leak that showed up in 9.4.13.0 that has now been root caused and fixed. We are now up to date with the latest fixes and enhancements on the JRuby 9.4 line. We couldn't ship the 8.15.0 build of OpenVox Server as the BouncyCastle 1.85 update broke the process for building JRuby in FIPS mode. That issue has been fixed with the 8.15.1 build. If you have questions about, or encounter issues with these releases, reach out in #C088QSEH1RA here on Slack or

#voxpupuli-openvox

on IRC. See voxpupuli.org/connect for details.

Also available are now the 8.15.x container images:

docker pull <http://ghcr.io/openvoxproject/openvoxserver:8.15.1|ghcr.io/openvoxproject/openvoxserver:8.15.1>
docker pull <http://ghcr.io/openvoxproject/openvoxserver:8.15.1-alpine|ghcr.io/openvoxproject/openvoxserver:8.15.1-alpine>

docker pull <http://ghcr.io/openvoxproject/openvoxdb:8.15.0|ghcr.io/openvoxproject/openvoxdb:8.15.0>
docker pull <http://ghcr.io/openvoxproject/openvoxdb:8.15.0-alpine|ghcr.io/openvoxproject/openvoxdb:8.15.0-alpine>

hello people! We released openvox-server 8.15.2 & 9.0.0-beta2 today! ## What's Changed in 8.15.2 ### Bug Fixes 🐛 • [Backport 8.x] Fix Resolv regression when querying IPv6 DNS servers by @OpenVoxProjectBot in https://github.com/OpenVoxProject/openvox-server/pull/538 Full Changelog: https://github.com/OpenVoxProject/openvox-server/compare/8.15.1...8.15.2 ## What's Changed in 9.0.0-beta2 ### Breaking Changes 🛠️ • Depend on openvox-agent >=9.0.0~beta1 by @Sharpie in https://github.com/OpenVoxProject/openvox-server/pull/495 • Update Jruby 10.0.6.0 to 10.1.1.0 (MRI 3.4 -> 4.0) by @renovate[bot] in https://github.com/OpenVoxProject/openvox-server/pull/525 ### Bug Fixes 🐛 • Ensure "gem install" works during FIPS builds by @Sharpie in https://github.com/OpenVoxProject/openvox-server/pull/517 • Fix Resolv regression when querying IPv6 DNS servers by @Sharpie in https://github.com/OpenVoxProject/openvox-server/pull/537 ### Dependency Updates ⬆️ • Update dependency gettext to v3.5.2 (main) by @renovate[bot] in https://github.com/OpenVoxProject/openvox-server/pull/442 • Update dependency locale to v2.1.5 (main) by @renovate[bot] in https://github.com/OpenVoxProject/openvox-server/pull/443 • Update dependency org.openvoxproject:ssl-utils to v3.7.0 (main) by @renovate[bot] in https://github.com/OpenVoxProject/openvox-server/pull/499 • Update dependency org.openvoxproject:http-client to v2.4.0 (main) by @renovate[bot] in https://github.com/OpenVoxProject/openvox-server/pull/500 • Update dependency org.openvoxproject:trapperkeeper-webserver to v12.1.0 (main) by @renovate[bot] in https://github.com/OpenVoxProject/openvox-server/pull/502 • Update dependency org.openvoxproject:trapperkeeper-authorization to v2.4.0 (main) by @renovate[bot] in https://github.com/OpenVoxProject/openvox-server/pull/501 ### Other Changes • Update dependency org.bouncycastle:bcpkix-jdk18on to v1.85 (main) by @renovate[bot] in https://github.com/OpenVoxProject/openvox-server/pull/489 Full Changelog: https://github.com/OpenVoxProject/openvox-server/compare/9.0.0-beta1...9.0.0-beta2

Hello! openfact 6.0.0 arrived! We removed a bunch of deprecated functions. openfact 6 will be included in the openvox-agent 9 packages. It will also be possible to install the openfact 6 gem together with the openvox 8 gem, to make testing easier. However, openvox agent 8 packages will stick to openfact 5.x ### Breaking Changes 🛠️ • search_path: Add common elements from $PATH by @bastelfreak in https://github.com/OpenVoxProject/openfact/pull/138 • Remove deprecated ldapname fact option and accessor by @silug in https://github.com/OpenVoxProject/openfact/pull/111 • Deprecate time_limit and limit timeout aliases in Facter:Core:Execution.execute by @silug in https://github.com/OpenVoxProject/openfact/pull/114 • deprecation: add runtime warnings to deprecated exec/which methods by @silug in https://github.com/OpenVoxProject/openfact/pull/121 • Drop Ruby 2.5 / 2.6 support by @bastelfreak in https://github.com/OpenVoxProject/openfact/pull/69 • Ruby: Drop 2.7; Require 3+ by @bastelfreak in https://github.com/OpenVoxProject/openfact/pull/153 • Deprecate Resolvable#limit compatibility bridge for timeout by @silug in https://github.com/OpenVoxProject/openfact/pull/115 ### New Features 🎉 • CI: Update jruby-9.4.12.1->jruby-9.4.15.0 by @bastelfreak in https://github.com/OpenVoxProject/openfact/pull/154 • Add Ruby 4 support+tests on windows by @bastelfreak in https://github.com/OpenVoxProject/openfact/pull/156 • CI: overhaul Ruby matrix by @bastelfreak in https://github.com/OpenVoxProject/openfact/pull/155 • rubocop: autofix part 1 by @bastelfreak in https://github.com/OpenVoxProject/openfact/pull/159 • rubocop: autofix part 2 by @bastelfreak in https://github.com/OpenVoxProject/openfact/pull/160 ### Bug Fixes 🐛 • Fix missing .El tag in manpage by @jcharaoui in https://github.com/OpenVoxProject/openfact/pull/151 ### Other Changes • thor: require 1.5 by @kenyon in https://github.com/OpenVoxProject/openfact/pull/44 ## New Contributors • @silug made their first contribution in https://github.com/OpenVoxProject/openfact/pull/111 • @jcharaoui made their first contribution in https://github.com/OpenVoxProject/openfact/pull/151 • @kenyon made their first contribution in https://github.com/OpenVoxProject/openfact/pull/44 Full Changelog: https://github.com/OpenVoxProject/openfact/compare/5.7.0...6.0.0

🚀 VoxBox 10.0.0 is here — with a brand-new container tag scheme! Starting with VoxBox 10.0.0, the VoxBox container follows its own semantic versioning, independent of the OpenVox version included in the image. The new tags clearly identify both components: 📌

10.0.0-openvox8.28.1

An immutable release pinned to an exact VoxBox and OpenVox version. 📌

10.0.0-openvox8

An immutable VoxBox release for the OpenVox 8 flavor. (it's shorter to write 😄) We have also clarified the moving and development tags: •

latest

points to the highest successfully published VoxBox SemVer release. It does not simply follow the most recently built image. ◦ Publishing or rebuilding an older release or backport will not move

latest

backwards. For example, if

10.2.0

is the highest published release, a later build of

10.1.5

will not replace it. •

main

follows the latest build from the main branch. •

sha-<git-sha>

identifies an immutable build from a specific Git revision. For reproducible CI pipelines, we recommend pinning either a versioned release tag or a

sha-*

tag:

podman pull <http://ghcr.io/voxpupuli/voxbox:10.0.0-openvox8.28.1|ghcr.io/voxpupuli/voxbox:10.0.0-openvox8.28.1>

⚠️ Existing legacy tags such as

8

,

8-latest

, and

8.28.1-latest

remain available, but they will no longer be updated. Bare numeric tags such as

10

will not be published. The new scheme is available from both GHCR and Docker Hub. 🎉 github.com/voxpupuli/container-voxbox/…/v10.0.0 github.com/voxpupuli/container-voxbox#…

Fasten your seatbelts! openvox-agent 9.0.0-beta2 is there! ### Breaking Changes 🛠️ • Promote openfact 6.0.0 into main by @OpenVoxProjectBot in https://github.com/OpenVoxProject/openvox/pull/575 • Remove hiera indirector by @silug in https://github.com/OpenVoxProject/openvox/pull/384 • openfact: Require 6.x by @bastelfreak in https://github.com/OpenVoxProject/openvox/pull/577 • Remove data-binding settings by @silug in https://github.com/OpenVoxProject/openvox/pull/385 • Allow file content that looks like a checksum. by @Jérémie Pierson in https://github.com/OpenVoxProject/openvox/pull/170 • Change reports default from "store" to "none" by @Sharpie in https://github.com/OpenVoxProject/openvox/pull/583 • puppet-runtime: update 2026.07.16.1->2026.08.04.1 / removed java keystores by @bastelfreak in https://github.com/OpenVoxProject/openvox/pull/593 • Remove zone_core module by @bastelfreak in https://github.com/OpenVoxProject/openvox/pull/592 • Update vendored modules to latest versions by @bastelfreak in https://github.com/OpenVoxProject/openvox/pull/589 ### New Features 🎉 • Replace deprecated

--force-yes

apt-get

option by @jay7x in https://github.com/OpenVoxProject/openvox/pull/560 • Update CFPropertyList requirement from >= 3.0.6, < 4 to ~> 4.0 by @dependabot[bot] in https://github.com/OpenVoxProject/openvox/pull/509 ### Bug Fixes 🐛 • fix: Pacman provider uses unrecognized option '--update' by @fmichea in https://github.com/OpenVoxProject/openvox/pull/451 • Fix filebucket REST terminus to support request.server by @mdechiaro in https://github.com/OpenVoxProject/openvox/pull/368 • fix:

Deferred

resolution of Puppet-language functions (e.g. mocks in tests) failing due to lack of

:global_scope

by @griggi-ws in https://github.com/OpenVoxProject/openvox/pull/350 ### Documentation Updates 📚 • Document cross-node read exposure of a central filebucket by @silug in https://github.com/OpenVoxProject/openvox/pull/585 ### Other Changes • Promote puppet-runtime 2026.07.16.1 into main by @OpenVoxProjectBot in https://github.com/OpenVoxProject/openvox/pull/553 • Set

PUPPET_EXTRA_OPTS

variable to empty by @Corporate Gadfly in https://github.com/OpenVoxProject/openvox/pull/559 • Generate module tarball fixtures at test time by @silug in https://github.com/OpenVoxProject/openvox/pull/566 • Improve manpage reproducibility by @jcharaoui in https://github.com/OpenVoxProject/openvox/pull/570 • Fix a small typo in the markdown docs by @jcharaoui in https://github.com/OpenVoxProject/openvox/pull/569 • Update URLs in default config files by @jcharaoui in https://github.com/OpenVoxProject/openvox/pull/572 • Fix "translates custom oids to their long name" test by @anthonyryan1 in https://github.com/OpenVoxProject/openvox/pull/488 • Replace 'master' terminology with 'server' by @silug in https://github.com/OpenVoxProject/openvox/pull/348 • User resource pw provider: Switches a couple commands to the safer array syntax by @binford2k in https://github.com/OpenVoxProject/openvox/pull/567 • Rebrand Puppet -> OpenVox and fix links by @silug in https://github.com/OpenVoxProject/openvox/pull/530 • Add man page validation to CI by @silug in https://github.com/OpenVoxProject/openvox/pull/580 • Address review feedback from #530 by @silug in https://github.com/OpenVoxProject/openvox/pull/579 • Remove bashism from pre/post-install scripts by @sideeffect42 in https://github.com/OpenVoxProject/openvox/pull/573 • Validate that the catalog is compiled for this node by @binford2k in https://github.com/OpenVoxProject/openvox/pull/568 • Update JRuby 10.1 test cell to 10.1.1.0 by @Sharpie in https://github.com/OpenVoxProject/openvox/pull/584 • Remove unloadable CC-BY-1.0 RDoc template and generator by @silug in https://github.com/OpenVoxProject/openvox/pull/587 • Remove setup.ps1 Cygwin setup script by @Sharpie in https://github.com/OpenVoxProject/openvox/pull/591 ## New Contributors • @fmichea made their first contribution in https://github.com/OpenVoxProject/openvox/pull/451 • @jcharaoui made their first contribution in https://github.com/OpenVoxProject/openvox/pull/570 • @anthonyryan1 made their first contribution in https://github.com/OpenVoxProject/openvox/pull/488 • @mdechiaro made their first contribution in https://github.com/OpenVoxProject/openvox/pull/368 • @sideeffect42 made their first contribution in https://github.com/OpenVoxProject/openvox/pull/573 • @Jérémie Pierson made their first contribution in https://github.com/OpenVoxProject/openvox/pull/170 • @griggi-ws made their first contribution in https://github.com/OpenVoxProject/openvox/pull/350 Full Changelog: https://github.com/OpenVoxProject/openvox/compare/9.0.0-beta1...9.0.0-beta2 A big thank you to all the new contributors! The packages are available on our apt/yum repo. the windows msi file is at https://downloads.voxpupuli.org/windows/openvox9/. the dmg will be provided very soonish. Please please test the packages and provide feedback!

There's also a new openvox-server 9.0.0-beta5 release! We had a hiccup with our CI system and the 9.0.0-beta3 packages weren't released. In addition, a 9.0.0 release was published to clojars with the 9.0.0-beta3 changes. 9.0.0-beta4 just republishes the 9.0.0-beta3 changes. 9.0.0-beta4 had one regression which was fixed in https://github.com/OpenVoxProject/openvox-server/pull/558. tl;dr: We won't provide 9.0.0-beta3 nor 9.0.0-beta4 packages. The following changelos is for 9.0.0-beta2 -> 9.0.0-beta5 ### Breaking Changes 🛠️ • Restrict filebucket reads to pp_cli_auth certificates by @silug in https://github.com/OpenVoxProject/openvox-server/pull/549 • drop gettext from jruby gems by @jcharaoui in https://github.com/OpenVoxProject/openvox-server/pull/98 ### New Features 🎉 • Fall back to the vendored PEM CA bundle for the system trust store by @silug in https://github.com/OpenVoxProject/openvox-server/pull/558 • Rebrand Puppet Server -> OpenVox Server in docs and comments by @silug in https://github.com/OpenVoxProject/openvox-server/pull/544 • openvox-agent: require 9.0.0~beta2 by @bastelfreak in https://github.com/OpenVoxProject/openvox-server/pull/551 ### Bug Fixes 🐛 • Fix the report authorization test's is_pe? misfire by @silug in https://github.com/OpenVoxProject/openvox-server/pull/557 • fix: match pre-release tarballs by base version on upload by @slauger in https://github.com/OpenVoxProject/openvox-server/pull/550 ### Dependency Updates ⬆️ • Update logback-version to v1.6.2 (main) by @renovate[bot] in https://github.com/OpenVoxProject/openvox-server/pull/562 • Update dependency prismatic:schema to v1.4.2 (main) by @renovate[bot] in https://github.com/OpenVoxProject/openvox-server/pull/561 • Update dependency org.openvoxproject:clj-shell-utils to v2.2.1 (main) by @renovate[bot] in https://github.com/OpenVoxProject/openvox-server/pull/563 • Update dependency org.openvoxproject:jruby-utils to v7.0.2 (main) by @renovate[bot] in https://github.com/OpenVoxProject/openvox-server/pull/566 • Update dependency org.openvoxproject:i18n to v1.0.5 (main) by @renovate[bot] in https://github.com/OpenVoxProject/openvox-server/pull/565 • Update dependency org.openvoxproject:comidi to v1.1.4 (main) by @renovate[bot] in https://github.com/OpenVoxProject/openvox-server/pull/564 • Update dependency org.openvoxproject:trapperkeeper-filesystem-watcher to v1.6.1 (main) by @renovate[bot] in https://github.com/OpenVoxProject/openvox-server/pull/577 • Update dependency org.openvoxproject:trapperkeeper-scheduler to v1.4.1 (main) by @renovate[bot] in https://github.com/OpenVoxProject/openvox-server/pull/579 • Update dependency org.openvoxproject:http-client to v2.4.1 (main) by @renovate[bot] in https://github.com/OpenVoxProject/openvox-server/pull/572 • Update dependency org.openvoxproject:trapperkeeper to v5.0.5 (main) by @renovate[bot] in https://github.com/OpenVoxProject/openvox-server/pull/575 • Update dependency org.openvoxproject:trapperkeeper-metrics to v2.3.2 (main) by @renovate[bot] in https://github.com/OpenVoxProject/openvox-server/pull/578 • Update dependency org.openvoxproject:trapperkeeper-authorization to v2.4.1 (main) - autoclosed by @renovate[bot] in https://github.com/OpenVoxProject/openvox-server/pull/576 • Update dependency org.openvoxproject:kitchensink to v3.5.8 (main) by @renovate[bot] in https://github.com/OpenVoxProject/openvox-server/pull/567 • Update dependency org.openvoxproject:ring-middleware to v2.2.1 (main) by @renovate[bot] in https://github.com/OpenVoxProject/openvox-server/pull/573 • Update dependency org.openvoxproject:ssl-utils to v3.7.1 (main) by @renovate[bot] in https://github.com/OpenVoxProject/openvox-server/pull/574 • Update dependency org.openvoxproject:trapperkeeper-webserver to v12.1.1 (main) by @renovate[bot] in https://github.com/OpenVoxProject/openvox-server/pull/580 • Update dependency org.openvoxproject:trapperkeeper-status to v1.5.1 (main) by @renovate[bot] in https://github.com/OpenVoxProject/openvox-server/pull/592 • Update dependency org.openvoxproject:trapperkeeper-comidi-metrics to v1.1.1 (main) by @renovate[bot] in https://github.com/OpenVoxProject/openvox-server/pull/593 • Update dependency ch.qos.logback.access:logback-access-jetty12 to v2.0.14 (main) by @renovate[bot] in https://github.com/OpenVoxProject/openvox-server/pull/521 • Update dependency ch.qos.logback.access:logback-access-common to v2.0.14 (main) by @renovate[bot] in https://github.com/OpenVoxProject/openvox-server/pull/520 • Update dependency commons-codec:commons-codec to v1.22.1 (main) by @renovate[bot] in https://github.com/OpenVoxProject/openvox-server/pull/542 • Update dependency openvoxserver-ca to v3.3.0 (main) by @renovate[bot] in https://github.com/OpenVoxProject/openvox-server/pull/546 • Update dependency concurrent-ruby to v1.3.8 (main) by @renovate[bot] in https://github.com/OpenVoxProject/openvox-server/pull/497 ### Other Changes • Fix the filebucket read authorization test by @silug in https://github.com/OpenVoxProject/openvox-server/pull/556 Full Changelog: https://github.com/OpenVoxProject/openvox-server/compare/9.0.0-beta2...9.0.0-beta5 The packages are available on our apt/yum repo. Please please test the packages and provide feedback!

🗳️ OpenVox needs your vote! 🦊 OpenVox is participating in the Open Source Wettbewerb 2026, organized by the Center for Digital Sovereignty (ZenDiS) and the Open Source Business Alliance (OSBA). 🇩🇪🐧 The competition highlights open-source projects that strengthen digital sovereignty in Germany and Europe. Alongside the jury awards, there's a Community Award decided entirely by public voting. 🏆 👉 Vote for OpenVox here! We're up against 65 open-source projects, so every vote counts! 💪💚 I hope everyone can vote/ reach the site. But maybe there are some geoblockers, but please try if you can and vote 🙂 Community voting is not limited to Germany or EMEA. More votes from abroad are a sign of an international community. Vote, share, spread the word! 📣

Note: Community voting is not limited to Germany or EMEA. More votes from abroad are a sign of an international community.

🦊 Hello party people! last week we released openvox-agent 8.29.0 & 9.0.0-rc1 partyfrog You can see the full changelog at GitHub: • https://github.com/OpenVoxProject/openvox/releases/tag/8.29.0 • https://github.com/OpenVoxProject/openvox/releases/tag/9.0.0-rc1 Packages are available on our mirrors. openvox-server & openvoxdb will be released this week as well!

🦊 openvox-server & openvoxdb 8.16.0 are released! partyfrog You can see the full changelog at GitHub: • https://github.com/OpenVoxProject/openvox-server/releases/tag/8.16.0 • https://github.com/OpenVoxProject/openvoxdb/releases/tag/8.16.0 Packages are available on our mirrors. openvox-server 9.0.0-rc1 & openvoxdb 9.0.0-rc1 will be released this week as well!

🦊 openvox-server 9.0.0-rc1 is there! partyfrog see the changelog at https://github.com/OpenVoxProject/openvox-server/releases/tag/9.0.0-rc1 Please provide feedback! We want to do the first official 9.x release this month

🦊 openvox-db 9.0.0-rc1 is there! partyfrog see the full changelog at https://github.com/OpenVoxProject/openvoxdb/releases/tag/9.0.0-rc1 Honourable mentions: @Daniel Juárez provided a patch to filter incoming facts in openvoxdb, based on the fact name or a regular expression: https://github.com/OpenVoxProject/openvoxdb/pull/502 . if this is going to work well, we plan to backport it to 8.x. Thanks to the awesome work from @Charlie Sharpsteen on ezbake and the original trapperkeeper patches from Jerome Charaoui and enhancements from @Sebastian Spritzgebaeck Rakel and lots of testing from @bastelfreak, the openvoxdb/server 9 packages now use

Type=notify

or

Type=notify-reload

. The latter requires systemd 253, which isn't supported by older distributions. With those changes, the services will now inform systemd when they are fully started. And they will be started with the correct java bin path. The packages depend on JRE 25, or if not available, JRE 21. The JRE path is used in the systemd unit. The older environment variable

JAVA_BIN

from

/etc/{default,sysconfig}/puppet{db,server}

isn't used anymore and users don't need to deal with it. This was a great team effort, thank you everybody for contributing ❤️ And as always; please test the packages and provide feedback, to bring us closer to an official 9 release.

🦊 openvox-server and openvox-db 9.0.0-rc2 and openvox-agent 9.0.0-rc4 partyfrog Barring any major bugs being found, this is the last set of Release Candidates before final release! If you are able, please 🙏 test these packages and give us feedback! We plan on doing the final release on Friday. Changelogs: github.com/OpenVoxProject/openvox/…/9.0.0-rc4 This fixes an issue with the EC2 fact and bumps dependencies to address CVEs. github.com/OpenVoxProject/openvox-server/…/9.0.0-rc2 This exposes an endpoint to delete the environment cache, bumps dependencies, and changes our strategy a little bit under the hood for selecting a Java binary by setting the selection of the preferred binary via a small bash shim rather than having this logic deep in the guts of our build system. This also fixes problems seen around this with FIPS and arm64 packages from RC1. If you want to specify your own special binary, you can still do so by setting JAVA_BIN. github.com/OpenVoxProject/openvoxdb/…/9.0.0-rc2 Same java bin change as server, bumps dependencies, and fixes a build issue where the source tarball in artifacts.voxpupuli.org was getting overwritten depending on which build job finished last. Sneak preview of the 9.0 release announcement, if you want to refresh yourself on other changes going into 9.0

openvox9️⃣ OpenVox 9 has been released! partyfrog party 🎉 Release notes: github.com/OpenVoxProject/openvox/…/9.0.0 github.com/OpenVoxProject/openvox-server/…/9.0.1 github.com/OpenVoxProject/openvoxdb/…/9.0.0 Blog post In particular, take a look at the "Upgrading from OpenVox 8" section in the first link for things you should inspect before upgrading. It should be a relatively drama-free upgrade 🤞 without too many breaking changes. As always, please pop into #C088QSEH1RA or any of the related channels if you run into issues or need assistance with the upgrade. Major thanks to EVERYONE in the community for making this release happen. All of your PRs, filed bugs, pre-release testing, and discussions in these channels have been vital to the success of this project. Congrats to all on this major milestone! This is by no means an exhaustive list of significant contributors, but in particular for this major release, an enormous, special thanks to (in no particular order): @bastelfreak @Charlie Sharpsteen @Michael Harp @Corporate Gadfly @Martin Alfke @rwaffen @binford2k @Josh Partlow @austb @Miranda Streeter Jerome Charaoui

Congrats and thanks to everyone! This is a big jump forward!

VoxBox v10.1.0 is out! 🥳 Release notes: github.com/voxpupuli/container-voxbox/…/v10.1.0 TL;DR: alot of dependency updates. v10.1.0 is also the

latest

tag

We also have some releases for the OpenVox 8.x line to announce: • OpenVox Agent 8.30.0: github.com/OpenVoxProject/openvox/…/8.30.0 • OpenVox Server 8.17.0: github.com/OpenVoxProject/openvox-server/…/8.17.0 • OpenVoxDB 8.17.0: github.com/OpenVoxProject/openvoxdb/…/8.17.0 These releases contain dependency updates to address various CVEs. The 8.30.0 release of

openvox-agent

also moves CRL refresh from the daemon to the worker process spawned by

fork

. This change should resolve segfaults observed on macOS. Many thanks to everyone that filed bug reports, submitted patches, updated documentation, or otherwise contributed to these releases!

New openvox-release packages The openvox<major>-release packages (e.g. apt.voxpupuli.org/…) have been regenerated. The rpms are identical. For the debs, a few changes were made to allow installing different major release packages side by side: •

/etc/apt/preferences.d/openvox-release.pref

is now

/etc/apt/preferences.d/openvox<major>-release.pref

•

/etc/apt/keyrings/openvox-keyring.gpg

is no2

/etc/apt/keyrings/openvox<major>-release-keyring.gpg

• The new path to the keyring is pointed to in the

.list

file There are no changes to the key itself. If you do not ever plan to install openvox8-release and openvox9-release side by side, then you don't need to take any action.

more new packages! This time openvox-agent 9.1.0 & 8.31.0! Biggest change is the support for JSON 3 and an Augeas update. The packages are on our mirror. Checkout the full release notes on GitHub: • https://github.com/OpenVoxProject/openvox/releases/tag/9.1.0 • https://github.com/OpenVoxProject/openvox/releases/tag/8.31.0

Hey all, today we shipped 9.1.0 releases for

openvox-server

and

openvoxdb

. These add two notable enhancements for users of the FIPS builds: • The FIPS builds now bundle a 2.1 release of the BouncyCastle FIPS libraries instead of a 1.0 release. The 2.1 release series is certified for use with Java 21 whereas the 1.0 release series is only certified up to Java 17. • A FIPS build is now provided for RedHat 10. Additionally, there is one important bugfix for `openvox-server`: • DNS lookups using the ruby

resolv

library no longer raise errors. More info about these releases can be found here: • github.com/OpenVoxProject/openvox-server/…/9.1.0 • github.com/OpenVoxProject/openvoxdb/…/9.1.0