Puppet Core 9.0.0 and 8.21.0 are now available

[Puppet Product Updates]

We are pleased to announce the release of Puppet Core 9.0.0, a major foundation release for customers ready to modernize, and Puppet Core 8.21.0, a maintenance release for customers staying on the 8.x track. Both releases ship with Facter 4.21.0.

• Puppet Core 9.0.0 updates key runtime and security foundations, including Ruby 4.0 and OpenSSL 3.5.
• It also includes a modernized Windows toolchain and a cleaner supported-platform baseline.
• Puppet Core 8.21.0 includes the same new platform support and selected security hardening, without the major dependency updates.

Security fixes

These releases include important dependency updates and hardening across OpenSSL, curl, Ruby, SSH key validation, autoloader input validation, and certificate handling. For the full security detail, see the full release notes.

OS additions and EOLs

• Added in Puppet Core 9.0.0 and 8.21.0: Rocky Linux 10 and Alma Linux 10 on x86_64.
• Removed in both the 8.x and 9.0.0 tracks: Amazon Linux 2 on aarch64; Debian 10; Fedora 36 and 40; macOS 13 on x86_64 and ARM; Red Hat Enterprise Linux 7 on x86_64; Ubuntu 18.04 and 20.04 on both architectures; and Windows 10 on x86_64.
• Additional removals in Puppet Core 9.0.0 only: Debian 11 and Debian 12.

If you're running any managed nodes on these platforms, migrate them before upgrading to the corresponding release — contact your Puppet account team if you need to discuss extended support options.

What to check before upgrading

• If you’re moving to Puppet Core 9.0.0, test custom facts, functions, types, providers, and Forge modules against Ruby 4.0.
• Review any SHA-1 usage, OpenSSL-linked integrations, deferred functions, and Ruby gem dependencies.
• Confirm managed nodes are on supported platforms before upgrading; several EOL operating systems have been removed.
• PE customers planning for the Puppet Core 9 pairing should allow time for JDK 21 and PostgreSQL 17 requirements.

For full details on breaking changes and upgrade considerations, see the Puppet Core 9 upgrade docs and the full release notes.

Puppet Server and PuppetDB highlights

Puppet Server 9.0.2 and PuppetDB 9.0.1 move to the JDK 21 / Jetty 12 baseline and include CA, certificate, authentication, and endpoint hardening. Puppet Server 8.9.10 and PuppetDB 8.10.11 bring selected hardening and platform updates to the 8.x track. For the full component-level detail, see the full release notes.

Facter 4.21.0

Facter now includes native Windows disk and partition facts via WMI, reducing the need for third-party module coverage in that area.

Resources

• Puppet Core platform support lifecycle
• Full release notes
• Validate a module: use the Puppet Development Kit (PDK) 3.8.0 to check compatibility with Puppet Core 9
• Puppet Core 9 upgrade docs
• Questions? Reach out to your Puppet account team.

Upgrade today to take advantage of the latest security, platform, and reliability improvements.

— The Puppet Team

This e-mail may contain information that is privileged or confidential. If you are not the intended recipient, please delete the e-mail and any attachments and notify us immediately.