DEV Community

Cover image for Puppetlabs Modules Roundup – September 2026
puppet profile image Jason St-Cyr
Jason St-Cyr for puppet

Posted on AI-assisted

Puppetlabs Modules Roundup – September 2026

#puppet

September 2026 saw 53 Puppetlabs modules get releases (some of which got multiple releases) in the Puppetlabs Forge catalog, so it is going to be a full edition of this month's roundup as I try to pull all of these changes into one place.

Across the month, the clearest themes were Puppet Core 9 support as it rolls out across nearly the whole catalog. This preparation also saw Puppet 7 support dropped in seven modules, so the summary below focuses on support changes, maintenance work, and operational impact.

Highlighted Updates

Puppet Core 9 support rolls out across nearly the whole catalog

Forty-nine of the fifty-three modules released this month shipped explicit Puppet Core 9 compatibility work. This included metadata bumps, new CI lanes, and in several cases a parallel Ruby 4.0 compatibility pass. The releases range from Tier 1 modules (examples: puppetdb, mysql, postgresql, stdlib, apache, firewall) to the full set of Bolt task-helper and cloud-inventory modules, making this the single largest coordinated update the puppetlabs namespace has shipped in one month in 2026. facts 1.8.0 is part of the same push, after first correcting an accidental major-version bump to 2.0.0 back down to a minor release.

  • Affected modules: accounts, acl, apache, apt, audit_policy, aws_inventory, azure_inventory, bash_task_helper, chocolatey, concat, docker, dsc_lite, facter_task, facts, firewall, gcloud_inventory, haproxy, http_request, iis, java_ks, kubernetes, motd, mysql, ntp, pkcs7, postgresql, powershell, powershell_task_helper, puppet_conf, puppetdb, pwshlib, python_task_helper, registry, ruby_plugin_helper, ruby_task_helper, sce_linux, scheduled_task, secure_env_vars, security_policy, sqlserver, sslcertificate, stdlib, terraform, tomcat, vault, vcsrepo, windows_env, wsus_client, yaml.

Puppet Core prep drops Puppet 7 support in seven modules

As part of preparing for Puppet Core, puppetdb, registry, acl, facter_task, puppet_conf, java_ks, and vcsrepo shipped new releases that drop Puppet 7 support outright. Because registry 6.0.0 was a major release and a breaking change, four of its dependents (chocolatey, wsus_client, windows_eventlog, and motd) had to widen their puppetlabs/registry dependency bound to allow the new major version.

  • Affected modules: acl, chocolatey, facter_task, java_ks, motd, puppet_conf, puppetdb, registry, vcsrepo, windows_eventlog, wsus_client.

Breaking changes to review

A small number of releases include compatibility-impacting changes that may need extra review in your modules or environments before rolling them out.

  • puppetdb: The new version 9.0.0 drops Puppet 7 support, changes the default postgres_version from 14 to 17 to match what Puppet Enterprise now installs, and adds strict Puppet data-type validation across module parameters that may reject previously-accepted invalid values.
  • registry: Version 6.0.0 drops Puppet 7 support as part of its Puppet Core update, a major-version change that required chocolatey, wsus_client, windows_eventlog, and motd to widen their dependency bounds to allow it. If your module is dependent on registry, you may want to look at updating your upper bound to allow it.

What Updates Happened to Puppetlabs Modules in September 2026?

The following is an alphabetical listing of modules which received updates in September 2026. If a module had multiple versions released, the updates are collected together, numbered with the "latest" version available.

accounts 9.1.0

📅 Latest release: 2026-09-04 (🌐 View on the Forge)

This release focused on adding Puppet Core 9 support.

acl 6.0.0

📅 Latest release: 2026-09-04 (🌐 View on the Forge)

This release focused on adding Puppet Core 9 support and dropping support for Puppet 7.

  • (CAT-2360) Prepare module for Puppet Core / Drop Support for Puppet 7 #310 (david22swan)
  • MODULES-11712: Add Puppet Core 9 support #315 (span786)

apache 13.4.0

📅 Latest release: 2026-09-02 (🌐 View on the Forge)

This release focused on adding Puppet Core 9 support.

apt 11.4.0

📅 Latest release: 2026-09-09 (🌐 View on the Forge)

This release focused on adding support for Puppet Core 9.

audit_policy 1.2.1

📅 Latest release: 2026-09-10 (🌐 View on the Forge)

This release fixed misleading ensure-change reports, added Puppet Core 9 support, and addressed some maintenance issues with the repo.

Includes monthly releases: 1.2.1 (2026-09-10), 1.2.0 (2026-09-08), 1.1.0 (2026-09-02).

  • [MODULES-11879] Fix misleading ensure-change reports when only flag differs #31 (mehul-jain1)
  • fix(MODULES-11932): Add Puppet Core 9 support in puppetlabs-audit_policy #28 (SugatD)
  • [MODULES-11839] Implement manifest init and add specs #26 (SugatD)
  • [MODULES-11794] Reformat CHANGELOG.md to Keep a Changelog format #24 (SugatD)

aws_inventory 0.9.0

📅 Latest release: 2026-09-11 (🌐 View on the Forge)

This release reverted the version bump from major to minor (1.0.0 -> 0.9.0) while also adding support for Puppet Core 9.

azure_inventory 0.6.0

📅 Latest release: 2026-09-11 (🌐 View on the Forge)

This release reverted the version bump from major to minor (1.0.0 -> 0.6.0) while also updating to Puppet Core 9.

bash_task_helper 2.3.0

📅 Latest release: 2026-09-11 (🌐 View on the Forge)

This release reverted the version bump from major to minor (3.0.0 -> 2.3.0) while also adding the PDK update to Puppet Core 9.

chocolatey 9.1.0

📅 Latest release: 2026-09-10 (🌐 View on the Forge)

This release added Puppet Core 9 support and widened the puppetlabs/registry dependency to allow 6.x.

comply 3.9.1

📅 Latest release: 2026-09-01 (🌐 View on the Forge)

5 CVEs were addressed in this release. Check the official release notes for comply 3.9.1 for the full details.

complyadm 3.9.1

📅 Latest release: 2026-09-01 (🌐 View on the Forge)

5 CVEs were addressed in this release. Check the official release notes for complyadm 3.9.1 for the full details.

concat 10.1.0

📅 Latest release: 2026-09-03 (🌐 View on the Forge)

This release focused on adding Puppet Core 9 support.

docker 10.5.0

📅 Latest release: 2026-09-23 (🌐 View on the Forge)

This release added Puppet Core 9 support and fixed the EL7 Docker CE repository path to point at the correct CentOS source.

  • (MODULES-11718) Add Puppet Core 9 support in puppetlabs-docker #1065 (imaqsood)
  • (MODULES-11929) Point EL7 at the centos Docker CE repo path #1067 (imaqsood)

dsc_lite 5.1.0

📅 Latest release: 2026-09-08 (🌐 View on the Forge)

This release focused on adding Puppet Core 9 support.

facter_task 3.0.0

📅 Latest release: 2026-09-15 (🌐 View on the Forge)

This release focused on adding Puppet Core 9 support and dropping support for Puppet 7, along with some CI maintenance.

facts 1.8.0

📅 Latest release: 2026-09-11 (🌐 View on the Forge)

This release reverted the version bump from major to minor (2.0.0 -> 1.8.0) while also adding Puppet Core 9 compatibility.

firewall 8.6.0

📅 Latest release: 2026-09-02 (🌐 View on the Forge)

This release focused on adding Puppet Core 9 support.

gcloud_inventory 0.4.0

📅 Latest release: 2026-09-11 (🌐 View on the Forge)

This release reverted the version bump from major to minor (1.0.0 -> 0.4.0) while also adding Puppet Core 9 support.

haproxy 9.2.0

📅 Latest release: 2026-09-16 (🌐 View on the Forge)

This release added Puppet Core 9 support, introduced the haproxy::http_errors and haproxy::ring resource types, and added Ubuntu 24.04 support.

http_request 0.4.0

📅 Latest release: 2026-09-11 (🌐 View on the Forge)

This release reverted the version bump from major to minor (1.0.0 -> 0.4.0) while also adding Puppet Core 9 support.

iis 11.1.0

📅 Latest release: 2026-09-15 (🌐 View on the Forge)

This release focused on adding Puppet Core 9 support.

java_ks 6.1.0

📅 Latest release: 2026-09-23 (🌐 View on the Forge)

This month's releases made the keytool path configurable, dropped support for Puppet 7, and added Puppet Core 9 support. It also fixed incorrect boolean parameter handling and a Tempfile race condition.

Includes monthly releases: 6.1.0 (2026-09-23), 6.0.0 (2026-09-16).

kubernetes 8.2.0

📅 Latest release: 2026-09-24 (🌐 View on the Forge)

This release focused on adding Puppet Core 9 support.

  • MODULES-11735: Add Puppet Core 9 support #723 (span786)

motd 8.1.1

📅 Latest release: 2026-09-04 (🌐 View on the Forge)

This month's releases added Puppet Core 9 support and widened the puppetlabs/registry dependency to allow 6.x.

Includes monthly releases: 8.1.1 (2026-09-04), 8.1.0 (2026-09-02).

  • (MODULES-11708) Widen puppetlabs/registry dependency to allow 6.x #571 (span786)
  • (MODULES-11702) Add Puppet Core 9 support #561 (imaqsood)

mysql 17.3.0

📅 Latest release: 2026-09-28 (🌐 View on the Forge)

This month's releases added Puppet Core 9 support, support for hex hashes with the caching_sha2_password plugin, and a fix for the mysqld_version fact on FreeBSD. It also tightened validation on purge_conf_dir, fixed .my.cnf root password resolution timing, and allowed metacharacters in SQL file paths.

Includes monthly releases: 17.3.0 (2026-09-28), 17.2.0 (2026-09-16), 17.1.1 (2026-09-02).

  • Add ability to use hex hash with caching_sha2_password plugin #1612 (C24-AK)
  • Correct Fact mysqld_version on FreeBSD #1654 (kapouik)
  • feat(MODULES-11715) Add Puppet Core 9 support #1742 (imaqsood)
  • Restrict mysql::server::purge_conf_dir type to valid values (#1740) #1741 (jst-cyr)
  • Use deferrable_epp for .my.cnf to ensure root password resolve correctly #1698 (jiayuchen888)
  • Update conditional logic xtrabackup.pp to properly... #1609 (ndelic0)
  • allow metacharacters * and ? in sql file path #1544 (zivis)

ntp 11.2.0

📅 Latest release: 2026-09-04 (🌐 View on the Forge)

This release focused on adding Puppet Core 9 support.

peadm 3.38.3

📅 Latest release: 2026-09-15 (🌐 View on the Forge)

This month's releases completed the CA storage migration for split topologies, added support for PE 2023.8.11 and 2025.11.3, and surfaced provision_replica failures in the add_replica plan instead of hiding them.

Includes monthly releases: 3.38.3 (2026-09-15), 3.38.2 (2026-09-01).

  • Adding support for PE 2023.8.11 and 2025.11.3 #702 (Jade2153)
  • (PE-45431) Complete CA storage migration for split topologies #696 (Jade2153)
  • (PE-43490) Surface provision_replica failures in add_replica plan #677 (CharithaDunuwille)
  • (PE-45885) Add code-manager to the managed database list #698 (Magisus)
  • (PE-45110) Ruby 4.0 compatibility: fix missing default-gem deps, document upstream blockers maintenance #685 (CharithaDunuwille)
  • (PE-45390) Add code coverage reporting to CI #686 (seamymckenna)
  • Adding support for PE 2025.11.2 #694 (Jade2153)

pkcs7 0.2.0

📅 Latest release: 2026-09-11 (🌐 View on the Forge)

This release reverted the version bump from major to minor (1.0.0 -> 0.2.0) while also adding Puppet Core 9 support.

postgresql 10.7.0

📅 Latest release: 2026-09-08 (🌐 View on the Forge)

This release added Puppet Core 9 support, allowed puppet/systemd 10.x, and fixed default_privileges idempotency on PostgreSQL 17.

  • (MODULES-11720) Add Puppet Core 9 support in puppetlabs-postgresql #1700 (imaqsood)
  • Allow puppet/systemd 10.x #1691 (deric)
  • (MODULES-11935) Fix default_privileges idempotency on PostgreSQL 17 #1701 (imaqsood)

powershell 6.2.0

📅 Latest release: 2026-09-09 (🌐 View on the Forge)

This release focused on adding support for Puppet Core 9.

powershell_task_helper 0.2.0

📅 Latest release: 2026-09-11 (🌐 View on the Forge)

This release reverted the version bump from major to minor (1.0.0 -> 0.2.0) while also adding Puppet Core 9 support.

puppet_conf 3.0.0

📅 Latest release: 2026-09-02 (🌐 View on the Forge)

This release focused on adding Puppet Core 9 support and dropping support for Puppet 7.

  • (CAT-2387) Prepare module for Puppet Core / Drop Support for Puppet 7 #223 (SugatD)
  • (MODULES-11736) Add Puppet Core 9 support #225 (imaqsood)

puppetdb 9.0.0

📅 Latest release: 2026-09-30 (🌐 View on the Forge)

This release dropped Puppet 7 support, changed the default postgres_version from 14 to 17, and added strict data-type validation and Sensitive-type handling for secrets across module parameters, along with several other fixes.

  • Add strict Puppet data type validation across module parameters (String, Integer, Boolean, Enum, Array, Hash, Absolutepath, Stdlib::Host, etc.), including port validation restricted to the unprivileged range (1024-49151) #411 (chambersmp)
  • Support for Puppet Core 9
  • Breaking: Default postgres_version bumped from 14 to 17 to match the version installed by the latest Puppet Enterprise
  • Use the Sensitive data type for secrets (passwords) #331 (cocker-cc)
  • Extend the puppetdb_version fact to handle Debian packages #416 (rwaffen)
  • Updated to PDK 3.8.0, dropped Puppet 7 support, and tightened version requirements on module dependencies
  • Update CI workflows (maint) #410 (h0tw1r3)
  • Update CODEOWNERS #417 (chambersmp)
  • Correct spelling of "certificates" #414 (viscountstyx)
  • Lower the stdlib requirement back down, since puppetdb depends on puppetlabs/postgresql, which depends on puppet/systemd, and puppet/systemd does not yet support stdlib >= 10.0.0
  • Correct stale postgres_version documentation in puppetdb::init and puppetdb::database::postgresql that still referenced the old 11/9.6 defaults
  • Set open_ssl_port to default false instead of undef in unit test shared examples
  • Prepare module for Puppet Core 9 #438 (gavindidrichsen)
  • Feature maintenance #436 (klab-systems)
  • Update storeconfig ini section with masters #432 (XMol)
  • Issue 430: Fix Datatype for listen_addresses #431 (cocker-cc)
  • Only include 'firewall' module when necessary #415 (Geod24)

pwshlib 2.1.1

📅 Latest release: 2026-09-07 (🌐 View on the Forge)

This release declared Puppet Core 9 support in metadata.json and added a Ruby 4.0 / Puppet Core 9 CI lane, sourcing gems from Puppet Core.

Includes monthly releases: 2.1.1 (2026-09-07), 2.1.0 (2026-09-07).

  • Declare Puppet Core 9 support in metadata.json requirements #393 (LukasAud)
  • (CAT-2589) Add Ruby 4.0 / Puppet Core 9 lane, source gems from Puppet Core #385 (LukasAud)

python_task_helper 0.7.0

📅 Latest release: 2026-09-11 (🌐 View on the Forge)

This release reverted the version bump from major to minor (1.0.0 -> 0.7.0) while also adding Puppet Core 9 support.

registry 6.0.0

📅 Latest release: 2026-09-04 (🌐 View on the Forge)

This release dropped Puppet 7 support, added Puppet Core 9 support, and added Sensitive data type support for registry_value.

  • (CAT-2389) Puppet Core update / Drop Puppet 7 support #315 (LukasAud)
  • MODULES-11708: Add Puppet Core 9 support #320 (span786)
  • (PA-8354): Add support for Sensitive data in registry_value #319 (span786)
  • Update link to Puppet modules contribution documentation #318 (jst-cyr)

ruby_plugin_helper 0.4.0

📅 Latest release: 2026-09-11 (🌐 View on the Forge)

This release reverted the version bump from major to minor (1.0.0 -> 0.4.0) while also adding Puppet Core 9 support.

ruby_task_helper 1.1.0

📅 Latest release: 2026-09-11 (🌐 View on the Forge)

This release reverted the version bump from major to minor (2.0.0 -> 1.1.0) while also adding Puppet Core 9 support.

sce_linux 2.9.0

📅 Latest release: 2026-09-09 (🌐 View on the Forge)

A few highlights from this release:

  • Crypto controls incorrectly configured on Rocky Linux 8. Crypto controls are intended to prevent the use of weak Message Authentication Code (MAC) algorithms. On Rocky Linux 8, the controls were not working as designed. The manage_crypto_policies block was updated to resolve the issue and enforce strong algorithms.
  • Error occurs when specifying active zone target for firewalld. Previously, an error occurred when users set an active zone target for the firewalld solution by specifying {"public"=>{"target"=>"DROP"}}. The "unable to parse" error was displayed because the {"public"=>{"target"=>"DROP"}} example shown on the Puppet Forge Reference page was invalid. To resolve the issue, the Reference page was updated to display only the valid example:.
  • PAM profiles not applied on Ubuntu Linux. Previously, pluggable authentication module (PAM) profiles were enabled but not applied, causing some 5.3.x controls to fail on nodes reported as compliant. The issue was resolved to ensure that the profiles are applied and the PAM stack is hardened.

Check the official release notes for sce_linux 2.9.0 for the full details.

scheduled_task 5.1.0

📅 Latest release: 2026-09-03 (🌐 View on the Forge)

This release focused on adding support for Puppet Core 9.

  • (MODULES-11734) Add support for Puppet Core 9 #277 (SugatD)

secure_env_vars 0.3.0

📅 Latest release: 2026-09-11 (🌐 View on the Forge)

This release reverted the version bump from major to minor (1.0.0 -> 0.3.0) while also adding Puppet Core 9 support.

security_policy 1.2.0

📅 Latest release: 2026-09-24 (🌐 View on the Forge)

This release added Puppet Core 9 support, isolated per-SID translation failures so one bad SID no longer fails the whole batch, and fixed the security_option provider missing out-of-band policy drift.

Includes monthly releases: 1.2.0 (2026-09-23), 1.1.2 (2026-09-18), 1.1.1 (2026-09-01).

  • [MODULES-11933] Add Puppet Core 9 support #57 (SugatD)
  • [MODULES-11947] Isolate per-SID translation failures from the whole batch #55 (mehul-jain1)
  • Fix security_option provider missing out-of-band security policy drift #50 (mehul-jain1)

sqlserver 5.2.0

📅 Latest release: 2026-09-02 (🌐 View on the Forge)

This release focused on adding Puppet Core 9 support, along with several CI and test-infrastructure fixes.

sslcertificate 6.1.0

📅 Latest release: 2026-09-02 (🌐 View on the Forge)

This release focused on adding Puppet Core 9 support.

stdlib 10.1.0

📅 Latest release: 2026-09-07 (🌐 View on the Forge)

This release focused on adding Puppet Core 9 support.

terraform 0.8.0

📅 Latest release: 2026-09-11 (🌐 View on the Forge)

This release reverted the version bump from major to minor (1.0.0 -> 0.8.0) while also adding Puppet Core 9 (Ruby 4) support.

tomcat 8.1.0

📅 Latest release: 2026-09-03 (🌐 View on the Forge)

This release focused on adding Puppet Core 9 support.

  • fix(MODULES-11727): Add Puppet Core 9 support in puppetlabs-tomcat #587 (SugatD)

vault 0.5.0

📅 Latest release: 2026-09-11 (🌐 View on the Forge)

This release reverted the version bump from major to minor (1.0.0 -> 0.5.0) while also adding Puppet Core 9 support.

vcsrepo 8.0.0

📅 Latest release: 2026-09-02 (🌐 View on the Forge)

This release dropped Puppet 7 support, added Puppet Core 9 support, and added support for Git sparse checkouts via Git includes.

windows_env 6.2.0

📅 Latest release: 2026-09-04 (🌐 View on the Forge)

This release focused on adding support for Puppet Core 9.

  • (MODULES-11728) Add support for Puppet Core 9 #117 (SugatD)

windows_eventlog 5.2.1

📅 Latest release: 2026-09-04 (🌐 View on the Forge)

This release widened the puppetlabs/registry dependency to allow 6.x and included some repo maintenance work.

wsus_client 6.4.0

📅 Latest release: 2026-09-09 (🌐 View on the Forge)

This release added Puppet Core 9 support and widened the puppetlabs/registry dependency to allow 6.x.

  • MODULES-11737: Add Puppet Core 9 support #240 (span786)
  • (MODULES-11708) Widen puppetlabs/registry dependency to allow 6.x #241 (span786)

yaml 0.3.0

📅 Latest release: 2026-09-11 (🌐 View on the Forge)

This release reverted the version bump from major to minor (1.0.0 -> 0.3.0) while also adding Puppet Core 9 support.

Until Next Time!

That wraps up the September 2026 roundup! If any of puppetdb, mysql intersect with your environment, the linked Forge pages and release notes are worth a closer look.

Feedback on the series is always useful, especially if there are module families or release-note patterns that deserve more attention in future editions.

More updates coming next month when the October 2026 releases land, after Hallowe'en.🎃
Have a great month!

🤖 AI Disclosure

This roundup is produced by a mostly-automated pipeline, with some AI sprinkled in for orchestration and enrichment (or 'Combobulating' and 'Finagling'), followed by a human review (that would be me) before publishing.

The automation is an open-source project with deterministic python scripts to crawl the Forge and determine which puppetlabs modules were released during a specific month (and catching when a module gets more than one release in a month). By combining a template, automation scripts, and some AI orchestration the content all gets pulled together for a structured markdown document. I then jump in to double-check the content and update any wording that seems repetitive or irrelevant (and sometimes I need to add some extra context that isn't in the changelog notes).

Top comments (0)