Update cnspec

Keep cnspec up to date so you stay on the latest policies, fixes, and features. To check the currently installed version:

cnspec version

For provider versioning (separate from cnspec itself), read Manage cnspec Providers.

How cnspec versioning works

cnspec versions follow MAJOR.MINOR.PATCH (for example, 12.1.2). Each release bumps one of those components based on the kind of changes shipped.

Breaking changes

Major releases can include soft-breaking changes that may require updates to your policies, query packs, or automation. Mondoo announces these well in advance, and they don't become hard-breaking until the following major release.

Supported releases

cnspec follows an N-1 support cycle: the current major version (N) and the previous one (N-1) are officially supported. Both can talk to Mondoo Platform and run every published policy and query pack. When 13.0 ships, the minimum supported version becomes 12.0 and all 11.x releases reach end of life (EOL).

Update cnspec

Update using the install script

The simplest way to update cnspec is to re-run the installation script.

bash -c "$(curl -sSL https://install.mondoo.com/sh)"

Set-ExecutionPolicy Unrestricted -Scope Process -Force;
[System.Net.ServicePointManager]::SecurityProtocol = [System.Net.ServicePointManager]::SecurityProtocol -bor 3072;
iex ((New-Object System.Net.WebClient).DownloadString('https://install.mondoo.com/ps1/cnspec'));
Install-Mondoo -Product cnspec;

Update using a package manager

If you installed cnspec through a package manager, use the same package manager to update.

brew upgrade mondoo

choco upgrade mondoo -y

apt update && apt install --only-upgrade -y mondoo

yum update -y mondoo

dnf update -y mondoo

zypper update -y mondoo

Verify the update

After updating, confirm the new version:

cnspec version

If cnspec is registered with Mondoo Platform, check that it's communicating properly:

cnspec status

Learn more

• Installation overview
• Manage cnspec providers
• Uninstall cnspec