diff options
| author | Lee Garrett <lgarrett@rocketjump.eu> | 2022-11-28 08:44:02 +0100 |
|---|---|---|
| committer | Lee Garrett <lgarrett@rocketjump.eu> | 2022-11-28 08:44:02 +0100 |
| commit | a6f601d820bf261c5f160bfcadb7ca6aa14d6ec2 (patch) | |
| tree | 9ad0ffc7adc851191aa4787886c45d890d98a48b /changelogs | |
| parent | dfc95dfc10415e8ba138e2c042c39632c9251abb (diff) | |
| download | debian-ansible-core-a6f601d820bf261c5f160bfcadb7ca6aa14d6ec2.zip | |
New upstream version 2.14.0
Diffstat (limited to 'changelogs')
| -rw-r--r-- | changelogs/CHANGELOG-v2.13.rst | 501 | ||||
| -rw-r--r-- | changelogs/CHANGELOG-v2.14.rst | 388 | ||||
| -rw-r--r-- | changelogs/changelog.yaml | 1637 |
3 files changed, 1103 insertions, 1423 deletions
diff --git a/changelogs/CHANGELOG-v2.13.rst b/changelogs/CHANGELOG-v2.13.rst deleted file mode 100644 index 26e82197..00000000 --- a/changelogs/CHANGELOG-v2.13.rst +++ /dev/null @@ -1,501 +0,0 @@ -========================================================= -ansible-core 2.13 "Nobody's Fault but Mine" Release Notes -========================================================= - -.. contents:: Topics - - -v2.13.4 -======= - -Release Summary ---------------- - -| Release Date: 2022-09-12 -| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__ - - -Bugfixes --------- - -- Fix for network_cli not getting all relevant connection options -- ansible-galaxy - Fix detection of ``--role-file`` in arguments for implicit role invocation (https://github.com/ansible/ansible/issues/78204) -- ansible-galaxy - Fix exit codes for role search and delete (https://github.com/ansible/ansible/issues/78516) -- ansible-test - Fix change detection for ansible-test's own integration tests. -- ansible-test - ansible-doc sanity test - Correctly determine the fully-qualified collection name for plugins in subdirectories, resolving https://github.com/ansible/ansible/issues/78490. -- apt - don't actually update the cache in check mode with update_cache=true. -- apt - don't mark existing packages as manually installed in check mode (https://github.com/ansible/ansible/issues/66413). -- apt - fix package selection to include /etc/apt/preferences(.d) (https://github.com/ansible/ansible/issues/77969) -- urls - Guard imports of ``urllib3`` by catching ``Exception`` instead of ``ImportError`` to prevent exceptions in the import process of optional dependencies from preventing use of ``urls.py`` (https://github.com/ansible/ansible/issues/78648) -- wait_for - Read file and perform comparisons using bytes to avoid decode errors (https://github.com/ansible/ansible/issues/78214) - -v2.13.3 -======= - -Release Summary ---------------- - -| Release Date: 2022-08-15 -| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__ - - -Bugfixes --------- - -- Avoid 'unreachable' error when chmod on AIX has 255 as return code. -- Fix PluginLoader to mimic Python import machinery by adding module to sys.modules before exec -- Fix dnf module documentation to indicate that comparison operators for package version require spaces around them (https://github.com/ansible/ansible/issues/78295) -- ansible-connection - decrypt vaulted parameters before sending over the socket, as vault secrets are not available on the other side. -- ansible-galaxy - Fix reinitializing the whole collection directory with ``ansible-galaxy collection init ns.coll --force``. Now directories and files that are not included in the collection skeleton will be removed. -- ansible-galaxy - do not require mandatory keys in the ``galaxy.yml`` of source collections when listing them (https://github.com/ansible/ansible/issues/70180). -- ansible-galaxy - fix listing collections that contains metadata but the namespace or name are not strings. -- ansible-galaxy - fix setting the cache for paginated responses from Galaxy NG/AH (https://github.com/ansible/ansible/issues/77911). -- ansible-test - Delegation for commands which generate output for programmatic consumption no longer redirect all output to stdout. The affected commands and options are ``shell``, ``sanity --lint``, ``sanity --list-tests``, ``integration --list-targets``, ``coverage analyze`` -- ansible-test - Delegation now properly handles arguments given after ``--`` on the command line. -- ansible-test - Test configuration for collections is now parsed only once, prior to delegation. Fixes issue: https://github.com/ansible/ansible/issues/78334 -- ansible-test - The ``shell`` command no longer redirects all output to stdout when running a provided command. Any command output written to stderr will be mixed with the stderr output from ansible-test. -- ansible-test - The ``shell`` command no longer requests a TTY when using delegation unless an interactive shell is being used. An interactive shell is the default behavior when no command is given to pass to the shell. -- dnf - fix output parsing on systems with ``LANGUAGE`` set to a language other than English (https://github.com/ansible/ansible/issues/78193) -- if a config setting prevents running ansible it should at least show it's "origin". -- prevent type annotation shim failures from causing runtime failures (https://github.com/ansible/ansible/pull/77860) -- template module/lookup - fix ``convert_data`` option that was effectively always set to True for Jinja macros (https://github.com/ansible/ansible/issues/78141) -- uri - properly use uri parameter use_proxy (https://github.com/ansible/ansible/issues/58632) -- yum - fix traceback when ``releasever`` is specified with ``latest`` (https://github.com/ansible/ansible/issues/78058) - -v2.13.2 -======= - -Release Summary ---------------- - -| Release Date: 2022-07-18 -| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__ - - -Minor Changes -------------- - -- ansible-test - An improved error message is shown when the download of a pip bootstrap script fails. The download now uses ``urllib2`` instead of ``urllib`` on Python 2. - -Bugfixes --------- - -- Move undefined check from concat to finalize (https://github.com/ansible/ansible/issues/78156) -- ansible-doc - no longer list module and plugin aliases that are created with symlinks (https://github.com/ansible/ansible/pull/78137). -- ansible-doc - when listing modules in collections, proceed recursively. This fixes module listing for community.general 5.x.y and community.network 4.x.y (https://github.com/ansible/ansible/pull/78137). -- ansible-doc will not add 'website for' in ":ref:" substitutions as it made them confusing. -- file backed cache plugins now handle concurrent access by making atomic updates to the files. -- password lookup does not ignore k=v arguments anymore. -- user - Fix error "Permission denied" in user module while generating SSH keys (https://github.com/ansible/ansible/issues/78017). - -v2.13.1 -======= - -Release Summary ---------------- - -| Release Date: 2022-06-20 -| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__ - - -Minor Changes -------------- - -- Add an 'action_plugin' field for modules in runtime.yml plugin_routing. - - This fixes module_defaults by supporting modules-as-redirected-actions - without redirecting module_defaults entries to the common action. - - .. code: yaml - - plugin_routing: - action: - facts: - redirect: ns.coll.eos - command: - redirect: ns.coll.eos - modules: - facts: - redirect: ns.coll.eos_facts - command: - redirect: ns.coll.eos_command - - With the runtime.yml above for ns.coll, a task such as - - .. code: yaml - - - hosts: all - module_defaults: - ns.coll.eos_facts: {'valid_for_eos_facts': 'value'} - ns.coll.eos_command: {'not_valid_for_eos_facts': 'value'} - tasks: - - ns.coll.facts: - - will end up with defaults for eos_facts and eos_command - since both modules redirect to the same action. - - To select an action plugin for a module without merging - module_defaults, define an action_plugin field for the resolved - module in the runtime.yml. - - .. code: yaml - - plugin_routing: - modules: - facts: - redirect: ns.coll.eos_facts - action_plugin: ns.coll.eos - command: - redirect: ns.coll.eos_command - action_plugin: ns.coll.eos - - The action_plugin field can be a redirected action plugin, as - it is resolved normally. - - Using the modified runtime.yml, the example task will only use - the ns.coll.eos_facts defaults. -- ansible-galaxy - Support resolvelib versions 0.6.x, 0.7.x, and 0.8.x. The full range of supported versions is now >= 0.5.3, < 0.9.0. -- ansible-test - Add RHEL 9.0 remote support. -- ansible-test - Add support for Ubuntu VMs using the ``--remote`` option. -- ansible-test - Add support for exporting inventory with ``ansible-test shell --export {path}``. -- ansible-test - Add support for multi-arch remotes. -- ansible-test - Add support for running non-interactive commands with ``ansible-test shell``. -- ansible-test - Avoid using the ``mock_use_standalone_module`` setting for unit tests running on Python 3.8 or later. -- ansible-test - Blocking mode is now enforced for stdin, stdout and stderr. If any of these are non-blocking then ansible-test will exit during startup with an error. -- ansible-test - Improve consistency of output messages by using stdout or stderr for most output, but not both. -- ansible-test - The ``shell`` command can be used outside a collection if no controller delegation is required. - -Bugfixes --------- - -- Add PyYAML >= 5.1 as a dependency of ansible-core to be compatible with Python 3.8+. -- ansible-config dump - Only display plugin type headers when plugin options are changed if --only-changed is specified. -- ansible-galaxy - handle unsupported versions of resolvelib gracefully. -- ansible-test - Fix internal validation of remote completion configuration. -- ansible-test - Prevent ``--target-`` prefixed options for the ``shell`` command from being combined with legacy environment options. -- ansible-test - Sanity test output with the ``--lint`` option is no longer mixed in with bootstrapping output. -- ansible-test - Subprocesses are now isolated from the stdin, stdout and stderr of ansible-test. This avoids issues with subprocesses tampering with the file descriptors, such as SSH making them non-blocking. As a result of this change, subprocess output from unit and integration tests on stderr now go to stdout. -- ansible-test - Subprocesses no longer have access to the TTY ansible-test is connected to, if any. This maintains consistent behavior between local testing and CI systems, which typically do not provide a TTY. Tests which require a TTY should use pexpect or another mechanism to create a PTY. -- apt module now correctly handles virtual packages. -- lookup plugin - catch KeyError when lookup returns dictionary (https://github.com/ansible/ansible/pull/77789). -- pip - fix cases where resolution of pip Python module fails when importlib.util has not already been imported -- plugin loader - Sort results when fuzzy matching plugin names (https://github.com/ansible/ansible/issues/77966). -- plugin loader will now load config data for plugin by name instead of by file to avoid issues with the same file being loaded under different names (fqcn + short name). -- psrp connection now handles default to inventory_hostname correctly. -- winrm connection now handles default to inventory_hostname correctly. - -v2.13.0 -======= - -Release Summary ---------------- - -| Release Date: 2022-05-16 -| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__ - - -Major Changes -------------- - -- Jinja2 Controller Requirement - Jinja2 3.0.0 or newer is required for the control node (the machine that runs Ansible) (https://github.com/ansible/ansible/pull/75881) -- Templating - remove ``safe_eval`` in favor of using ``NativeEnvironment`` but utilizing ``literal_eval`` only in cases when ``safe_eval`` was used (https://github.com/ansible/ansible/pull/75587) - -Minor Changes -------------- - -- Action Plugins - Add helper method for argument spec validation, and extend to pause and async_wrapper -- Added AIX root CA certs folders - enhance the TLS support in ``uri`` task on AIX -- Added ``module_utils.compat.typing`` to facilitate type-hinting on all supported Python versions. -- Ansible.Basic - small changes to allow use in PowerShell modules running on non-Windows platforms (https://github.com/ansible/ansible/pull/76924). -- AnsibleModule.run_command() now has a toggle to allow caller to decide to handle exceptions from executing the command itself -- Attach concat function to an environment class (https://github.com/ansible/ansible/pull/76282) -- Clarify in a comment that unrolling an iterator in ``Templar._finalize`` is actually necessary. Also switch to using the ``_unroll_iterator`` decorator directly to deduplicate code in ``Templar._finalize``. (https://github.com/ansible/ansible/pull/76436) -- Installation - modernize our python installation, to reduce dynamic code in setup.py, and migrate what is feasible to setup.cfg. This will enable shipping wheels in the future. -- PlayIterator - introduce public methods to access ``PlayIterator._host_states`` (https://github.com/ansible/ansible/pull/74416) -- PlayIterator - use enums for Iterating and Failed states (https://github.com/ansible/ansible/pull/74511) -- Reduce number of iterations through PlayIterator (https://github.com/ansible/ansible/pull/74175) -- Remove more Python 2.x compatibility code from controller (https://github.com/ansible/ansible/pull/77320). -- Start of moving away from using Six, Python 2 and 3 compatibility library (https://github.com/ansible/ansible/pull/75863) -- The collection loader now reports a Python warning if an attempt is made to install the Ansible collection loader a second time. Previously this condition was reported using an Ansible warning. -- ``ansible-galaxy collection [install|verify]`` - allow user-provided signature sources in addition to those from the Galaxy server. Each collection entry in a requirements file can specify a ``signatures`` key followed by a list of sources. Collection name(s) provided on the CLI can specify additional signature sources by using the ``--signatures`` CLI option. Signature sources should be URIs that can be opened with ``urllib.request.urlopen()``, such as "https://example.com/path/to/detached_signature.asc" or "file:///path/to/detached_signature.asc". The ``--keyring`` option must be specified if signature sources are provided. -- ``ansible-galaxy collection [install|verify]`` - use gpg to verify the authenticity of the signed ``MANIFEST.json`` with ASCII armored detached signatures provided by the Galaxy server. The keyring (which is not managed by ``ansible-galaxy``) must be provided with the ``--keyring`` option to use signature verification. If no ``--keyring`` is specified and the collection to ``install|verify`` has associated detached signatures on the Galaxy server, a warning is provided. -- ``ansible-galaxy collection install`` - Add a global configuration to modify the required number of signatures that must verify the authenticity of the collection. By default, the number of required successful signatures is 1. Set this option to ``all`` to require all signatures verify the collection. To ensure signature verification fails if there are no valid signatures, prepend the value with '+', such as ``+all`` or ``+1``. -- ``ansible-galaxy collection install`` - Add a global ignore list for gpg signature errors. This can be used to ignore certain signatures when the number of required successful signatures is all. When the required number of successful signatures is a positive integer, the only effect this has is to display fewer errors to the user on failure (success is determined by having the minimum number of successful signatures, in which case all errors are disregarded). -- ``ansible-galaxy collection install`` - Add a global toggle to turn off GPG signature verification. -- ``ansible-galaxy collection install`` - Store Galaxy server metadata alongside installed collections for provenance. Signatures obtained from the Galaxy server can be used for offline verification with ``ansible-galaxy collection verify --offline``. -- ansible-console - Provide a way to customize the stdout callback -- ansible-core modules - Remove unused Python shebangs from built-in modules. -- ansible-doc metadata dump - add option ``--no-fail-on-errors`` which allows to not fail the ansible-doc invocation when errors happen during docs parsing or processing. Instead they are reported in the JSON result in an ``error`` key for the affected plugins (https://github.com/ansible/ansible/pull/77035). -- ansible-galaxy - the option to skip certificate verification now also applies when cloning via SCM (git/hg) (https://github.com/ansible/ansible/issues/41077) -- ansible-test - Accept new-style Python modules without a shebang. -- ansible-test - Add ``--version`` support to show the ansible-core version. -- ansible-test - Add support for ``rhel/8.5`` remote instances. -- ansible-test - Add support for remote testing of FreeBSD 12.3. -- ansible-test - Add support for running container tests with ``podman remote`` (https://github.com/ansible/ansible/pull/75753) -- ansible-test - Added the ``fedora35`` test container. -- ansible-test - Change the maximum number of open files in a test container from the default to ``10240``. -- ansible-test - Declare public dependencies of ansible-core and use to limit unguarded imports in plugins. -- ansible-test - Importing ``distutils`` now results in an error. -- ansible-test - Installation of ``cryptography`` is no longer version constrained when ``openssl`` 1.1.0 or later is installed. -- ansible-test - Miscellaneous code cleanup and type hint fixes. -- ansible-test - PowerShell in the ``base`` and ``default`` containers has been upgraded to version 7.1.4. -- ansible-test - Remove RHEL 8.4 remote (``rhel/8.4``) support. -- ansible-test - Remove ``idna`` constraint. -- ansible-test - Remove obsolete ``MAXFD`` display. -- ansible-test - Remove obsolete constraints for Python 2.6. -- ansible-test - Remove support for FreeBSD 12.2 remote provisioning. -- ansible-test - Remove support for macOS 11.1 remote provisioning. -- ansible-test - Remove support for provisioning remote AIX instances. -- ansible-test - Remove the ``centos8`` test container since CentOS 8 will reach end-of-life soon. -- ansible-test - Remove the ``fedora33`` test container since Fedora 33 will reach end-of-life soon. -- ansible-test - Remove unused Python 2.x compatibility code. -- ansible-test - Removed support for Sherlock from the Azure provisioning plugin. -- ansible-test - Removed used ``MarkupSafe`` constraint for Python 3.5 and earlier. -- ansible-test - Requirements for the plugin import test are now frozen. -- ansible-test - Shellcheck in the ``base`` and ``default`` containers has been upgraded to version 0.7.0. -- ansible-test - Stop early with an error if the current working directory contains an invalid collection namespace or name. -- ansible-test - The ``--help`` option is now available when an unsupported cwd is in use. -- ansible-test - The ``--help`` output now shows the same instructions about cwd as would be shown in error messages if the cwd is unsupported. -- ansible-test - The ``pip`` and ``wheel`` packages are removed from all sanity test virtual environments after installation completes to reduce their size. Previously they were only removed from the environments used for the ``import`` sanity test. -- ansible-test - The explanation about cwd usage has been improved to explain more clearly what is required. -- ansible-test - The hash for all managed sanity test virtual environments has changed. Containers that include ``ansible-test sanity --prime-venvs`` will need to be rebuilt to continue using primed virtual environments. -- ansible-test - Update ``base`` container to version 2.1.0. -- ansible-test - Update ``base`` container to version 2.2.0. -- ansible-test - Update ``default`` containers to version 5.2.0. -- ansible-test - Update ``default`` containers to version 5.4.0. -- ansible-test - Update ``default`` containers to version 5.5.0. -- ansible-test - Update ``default`` containers to version 5.6.2. -- ansible-test - Update ``default`` containers to version 5.7.0. -- ansible-test - Update ``default`` containers to version 5.8.0. -- ansible-test - Update ``default`` containers to version 5.9.0. -- ansible-test - Update ``pip`` used to bootstrap remote FreeBSD instances from version 20.3.4 to 21.3.1. -- ansible-test - Update sanity test requirements. -- ansible-test - Update the NIOS test plugin container to version 1.4.0. -- ansible-test - Update the ``alpine`` container to version 3.3.0. This updates the base image from 3.14.2 to 3.15.0, which includes support for installing binary wheels using pip. -- ansible-test - Update the ``base`` and ``default`` containers from Python 3.10.0rc2 to 3.10.0. -- ansible-test - Update the ``base`` and ``default`` containers from a Ubuntu 18.04 to Ubuntu 20.04 base image. -- ansible-test - Update the ``default`` containers to version 5.1.0. -- ansible-test - Update the ``galaxy`` test plugin to get its container from a copy on quay.io. -- ansible-test - Update the ``openshift`` test plugin to get its container from a copy on quay.io. -- ansible-test - Use Python 3.10 as the default Python version for the ``base`` and ``default`` containers. -- ansible-test - add macOS 12.0 as a remote target (https://github.com/ansible/ansible/pull/76328) -- ansible-test - handle JSON decode error gracefully in podman environment. -- ansible-test pslint - Added the `AvoidLongLines <https://github.com/PowerShell/PSScriptAnalyzer/blob/master/docs/Rules/AvoidLongLines.md>`_ rule set to a length of 160. -- ansible-test pslint - Added the `PlaceCloseBrace <https://github.com/PowerShell/PSScriptAnalyzer/blob/master/docs/Rules/PlaceCloseBrace.md>`_ rule set to enforce close braces on a newline. -- ansible-test pslint - Added the `PlaceOpenBrace <https://github.com/PowerShell/PSScriptAnalyzer/blob/master/docs/Rules/PlaceOpenBrace.md>`_ rule set to enforce open braces on the same line and a subsequent newline. -- ansible-test pslint - Added the `UseConsistentIndentation <https://github.com/PowerShell/PSScriptAnalyzer/blob/master/docs/Rules/UseConsistentIndentation.md>`_ rule to enforce indentation is done with 4 spaces. -- ansible-test pslint - Added the `UseConsistentWhitespace <https://github.com/PowerShell/PSScriptAnalyzer/blob/master/docs/Rules/UseConsistentWhitespace.md>`_ rule to enforce whitespace consistency in PowerShell. -- ansible-test pslint - Updated ``PowerShellScriptAnalyzer`` to 1.20.0 -- ansible-test sanity validate-modules - the validate-modules sanity test now also checks the documentation of documentable plugin types (https://github.com/ansible/ansible/pull/71734). -- ansible-test validate-modules sanity test - add more schema checks to improve quality of plugin documentation (https://github.com/ansible/ansible/pull/77268). -- ansible-test validate_modules - allow ``choices`` for return values (https://github.com/ansible/ansible/pull/76009). -- apt - Add support for using ">=" in package version number matching. -- apt - Adds APT option ``--allow-change-held-packages`` as module parameter ``allow_change_held_packages`` to allow APT up- or downgrading a package which is on APTs hold list (https://github.com/ansible/ansible/issues/65325) -- auto inventory plugin will now give plugin loading information on verbose output -- callbacks - Add result serialization format options to ``_dump_results`` allowing plugins such as the ``default`` callback to emit ``YAML`` serialized task results in addition to ``JSON`` -- dnf - add more specific error message for GPG validation (https://github.com/ansible/ansible/issues/76192) -- env lookup, add default option -- facts - report prefix length for IPv4 addresses in Linux network facts. -- get_parsable_locale now logs result when in debug mode. -- git - display the destination directory path in error msg when local_mods detects local modifications conflict so that users see the exact location -- iptables - add the ``chain_management`` parameter that controls iptables chain creation and deletion -- jinja2_native - keep same behavior on Python 3.10. -- junit callback - Add support for replacing the directory portion of out-of-tree relative task paths with a placeholder. -- k8s - scenario guides for kubernetes migrated to ``kubernetes.core`` collection. -- module_utils.distro - Add missing ``typing`` import from original code. -- package_facts - add pkg_info support for OpenBSD and NetBSD (https://github.com/ansible/ansible/pull/76580) -- services_facts - Add support for openrc (https://github.com/ansible/ansible/pull/76373). -- setting DEFAULT_FACT_PATH is being deprecated in favor of the generic module_defaults keyword -- uri - Avoid reading the response body when not needed -- uri - Eliminate multiple requests to determine the final URL for file naming with ``dest`` -- validate-modules - do some basic validation on the ``M(...)``, ``U(...)``, ``L(..., ...)`` and ``R(..., ...)`` documentation markups (https://github.com/ansible/ansible/pull/76262). -- vmware - migrated vmware scenario guides to `community.vmware` repo. -- yum, dnf - add sslverify option to temporarily disable certificate validation for a repository - -Breaking Changes / Porting Guide --------------------------------- - -- Module Python Dependency - Drop support for Python 2.6 in module execution. -- Templating - it is no longer allowed to perform arithmetic and concatenation operations outside of the jinja template (https://github.com/ansible/ansible/pull/75587) -- The ``finalize`` method is no longer exposed in the globals for use in templating. - -Deprecated Features -------------------- - -- ansible-core - Remove support for Python 2.6. -- ansible-test - Remove support for Python 2.6. -- ssh connection plugin option scp_if_ssh in favor of ssh_transfer_method. - -Removed Features (previously deprecated) ----------------------------------------- - -- Remove deprecated ``Templar.set_available_variables()`` method (https://github.com/ansible/ansible/issues/75828) -- cli - remove deprecated ability to set verbosity before the sub-command (https://github.com/ansible/ansible/issues/75823) -- copy - remove deprecated ``thirsty`` alias (https://github.com/ansible/ansible/issues/75824) -- psrp - Removed fallback on ``put_file`` with older ``pypsrp`` versions. Users must have at least ``pypsrp>=0.4.0``. -- url_argument_spec - remove deprecated ``thirsty`` alias for ``get_url`` and ``uri`` modules (https://github.com/ansible/ansible/issues/75825, https://github.com/ansible/ansible/issues/75826) - -Security Fixes --------------- - -- Do not include params in exception when a call to ``set_options`` fails. Additionally, block the exception that is returned from being displayed to stdout. (CVE-2021-3620) - -Bugfixes --------- - -- Add a YAML representer for ``NativeJinjaText`` -- Add a YAML representer for ``NativeJinjaUnsafeText`` -- AnsiballZ - Ensure we use the full python package in the module cache filename to avoid a case where ``collections:`` is used to execute a module via short name, where the short name duplicates another module from ``ansible.builtin`` or another collection that was executed previously. -- Ansible.ModuleUtils.LinkUtil - Ignore the ``LIB`` environment variable when loading the ``LinkUtil`` code -- Ansible.ModuleUtils.SID - Use user principal name as is for lookup in the ``Convert-ToSID`` function - https://github.com/ansible/ansible/issues/77316 -- Detect package manager for Amazon Linux 2022 (AL2022) as dnf -- Ensure the correct ``environment_class`` is set on ``AnsibleJ2Template`` -- Fix ``AttributeError`` when providing password file via ``--connection-password-file`` (https://github.com/ansible/ansible/issues/76530) -- Fix ``end_play`` to end the current play only (https://github.com/ansible/ansible/issues/76672) -- Fix collection filter/test plugin redirects (https://github.com/ansible/ansible/issues/77192). -- Fix executing includes in the always section in the free strategy (https://github.com/ansible/ansible/issues/75642) -- Fix for when templating empty template file resulted in file with string 'None' (https://github.com/ansible/ansible/issues/76610) -- Fix help message for the 'ansible-galaxy collection verify' positional argument. The positional argument must be a collection name (https://github.com/ansible/ansible/issues/76087). -- Fix module logging issue when using custom module on WSL2 (https://github.com/ansible/ansible/issues/76320) -- Fix task debugger to work with ``run_once`` using ``linear`` strategy (https://github.com/ansible/ansible/issues/76049) -- Fix traceback when installing a collection from a git repository and git is not installed (https://github.com/ansible/ansible/issues/77479). -- Interpreter Discovery - Fallback to OS family if the distro is not found in ``INTERPRETER_PYTHON_DISTRO_MAP`` (https://github.com/ansible/ansible/issues/75560) -- Interpreter discovery - Add ``RHEL`` to ``OS_FAMILY_MAP`` for correct family fallback for interpreter discovery (https://github.com/ansible/ansible/issues/77368) -- Make include_role/include_tasks work with any_errors_fatal (https://github.com/ansible/ansible/issues/50897) -- Parser errors from within includes should not be rescueable (https://github.com/ansible/ansible/issues/73657) -- Prevent losing unsafe on results returned from lookups (https://github.com/ansible/ansible/issues/77535) -- Templating - Ensure we catch exceptions when getting ``.filters`` and ``.tests`` attributes on their respective plugins and properly error, instead of aborting which results in no filters being added to the jinja2 environment -- Trigger an undefined error when an undefined variable is detected within a dictionary and/or list (https://github.com/ansible/ansible/pull/75587) -- _run_loop - Add the task name to the warning (https://github.com/ansible/ansible/issues/76011) -- ``Templar.copy_with_new_env`` - set the ``finalize`` method of the new ``Templar`` object for the new environment (https://github.com/ansible/ansible/issues/76379) -- add_host/group_by: fix using changed_when in a loop (https://github.com/ansible/ansible/issues/71627) -- ansible - Exclude Python 2.6 from Python interpreter discovery. -- ansible-config avoid showing _terms and _input when --only-changed. -- ansible-doc - Fix ansible-doc -l ansible.builtin / ansible.legacy not returning anything -- ansible-doc - ignore plugin deprecation warnings (https://github.com/ansible/ansible/issues/75671) -- ansible-galaxy - Add galaxy_collection_skeleton/galaxy_collection_skeleton_ignore configuration options -- ansible-galaxy - Fix using the '--ignore-certs' option when there is no server-specific configuration for the Galaxy server. -- ansible-galaxy - installing/downloading collections with invalid versions in git repositories and directories now gives a formatted error message (https://github.com/ansible/ansible/issues/76425, https://github.com/ansible/ansible/issues/75404). -- ansible-galaxy - when installing a role properly raise an error when inaccessible path is specified multiple times in roles_path (e.g. via environment variable and command line option) (https://github.com/ansible/ansible/issues/76316) -- ansible-galaxy collection build - Ignore any existing ``MANIFEST.json`` and ``FILES.json`` in the root directory when building a collection. -- ansible-galaxy collection verify - display files/directories not included in the FILES.json as modified content. -- ansible-galaxy publish - Fix warning and error detection in import messages to properly display them in Ansible -- ansible-pull handle case where hostname and nodename are empty -- ansible-test - Add default entry for Windows remotes to be used with unknown versions. -- ansible-test - All virtual environments managed by ansible-test are marked as usable after being bootstrapped, to avoid errors caused by use of incomplete environments. Previously this was only done for sanity tests. Existing environments from previous versions of ansible-test will be recreated on demand due to lacking the new marker. -- ansible-test - Automatic target requirements installation is now based on the target environment instead of the controller environment. -- ansible-test - Correctly detect when running as the ``root`` user (UID 0) on the origin host. The result of the detection was incorrectly being inverted. -- ansible-test - Don't fail if network cannot be disconnected (https://github.com/ansible/ansible/pull/77472) -- ansible-test - Fix Python real prefix detection when running in a ``venv`` virtual environment. -- ansible-test - Fix ``windows-integration`` and ``network-integration`` when used with the ``--docker`` option and user-provided inventory. -- ansible-test - Fix installation and usage of ``pyyaml`` requirement for the ``import`` sanity test for collections. -- ansible-test - Fix path to inventory file for ``windows-integration`` and ``network-integration`` commands for collections. -- ansible-test - Fix plugin loading. -- ansible-test - Fix skipping of tests marked ``needs/python`` on the origin host. -- ansible-test - Fix skipping of tests marked ``needs/root`` on the origin host. -- ansible-test - Fix the ``import`` sanity test to work properly when Ansible's built-in vendoring support is in use. -- ansible-test - Fix the ``validate-modules`` sanity test to avoid double-loading the collection loader and possibly failing on import of the ``packaging`` module. -- ansible-test - Fix traceback in ``import`` sanity test on Python 2.7 when ``pip`` is not available. -- ansible-test - Fix traceback in the ``validate-modules`` sanity test when testing an Ansible module without any callables. -- ansible-test - Fix traceback when running from an install and delegating execution to a different Python interpreter. -- ansible-test - Fix traceback when using the ``--all`` option with PowerShell code coverage. -- ansible-test - Fix type hints. -- ansible-test - Import ``yaml.cyaml.CParser`` instead of ``_yaml.CParser`` in the ``yamllint`` sanity test. -- ansible-test - Limit ``paramiko`` installation to versions before 2.9.0. This is required to maintain support for systems which do not support RSA SHA-2 algorithms. -- ansible-test - Pylint Deprecated Plugin - Use correct message symbols when date or version is not a float or str (https://github.com/ansible/ansible/issues/77085) -- ansible-test - Relocate constants to eliminate symlink. -- ansible-test - Replace the directory portion of out-of-tree paths in JUnit files from integration tests with the ``out-of-tree:`` prefix. -- ansible-test - Sanity tests run with the ``--requirements` option for Python 2.x now install ``virtualenv`` when it is missing or too old. Previously it was only installed if missing. Version 16.7.12 is now installed instead of the latest version. -- ansible-test - Set the ``pytest`` option ``--rootdir`` instead of letting it be auto-detected. -- ansible-test - Show an error message instead of a traceback when running outside of a supported directory. -- ansible-test - Target integration test requirements are now correctly installed for target environments running on the controller. -- ansible-test - The ``import`` sanity test no longer reports errors about ``packaging`` being missing when testing collections. -- ansible-test - Update distribution test containers to version 3.1.0. -- ansible-test - Update help links to reference ``ansible-core`` instead of ``ansible``. -- ansible-test - Update unit tests to use the ``--forked`` option instead of the deprecated ``--boxed`` option. -- ansible-test - Use https://ci-files.testing.ansible.com/ for instance bootstrapping instead of an S3 endpoint. -- ansible-test - Use relative paths in JUnit files generated during integration test runs. -- ansible-test - Use the correct variable to reference the client's SSH key when generating inventory. -- ansible-test - Use the legacy collection loader for ``import`` sanity tests on target-only Python versions. -- ansible-test - Virtual environments managed by ansible-test now use consistent versions of ``pip``, ``setuptools`` and ``wheel``. This avoids issues with virtual environments containing outdated or dysfunctional versions of these tools. The initial bootstrapping of ``pip`` is done by ansible-test from an HTTPS endpoint instead of creating the virtual environment with it already present. -- ansible-test - fix a typo in validate-modules. -- ansible-test - fixed support container failures (eg http-test-container) under podman -- ansible-test compile sanity test - do not crash if a column could not be determined for an error (https://github.com/ansible/ansible/pull/77465). -- ansible-test pslint - Fix error when encountering validation results that are highly nested - https://github.com/ansible/ansible/issues/74151 -- ansible-vault encrypt_string - fix ``--output`` option to correctly write encrypted string into given file (https://github.com/ansible/ansible/issues/75101) -- ansible.builtin.file modification_time supports check_mode -- ansible_facts.devices - Fix parsing of device serial number detected via sg_inq for rhel8 (https://github.com/ansible/ansible/issues/75420) -- apt - fails to deploy deb file to old debian systems using python-apt < 0.8.9 (https://github.com/ansible/ansible/issues/47277) -- arg_spec - Fix incorrect ``no_log`` warning when a parameter alias is used (https://github.com/ansible/ansible/pull/77576) -- async - Improve performance of sending async callback events by never sending the full task through the queue (https://github.com/ansible/ansible/issues/76729) -- catch the case that cowsay is broken which would lead to missing output -- cleaning facts will now only warn about the variable name and not post the content, which can be undesireable to disclose -- collection_loader - Implement 'find_spec' and 'exec_module' to override deprecated importlib methods 'find_module' and 'load_module' when applicable (https://github.com/ansible/ansible/issues/74660). -- correctly inherit vars from parent in block (https://github.com/ansible/ansible/issues/75286). -- default callback - Ensure we compare FQCN also in lockstep logic, to ensure using the FQCN of a strategy plugin triggers the correct behavior in the default callback plugin. (https://github.com/ansible/ansible/issues/76782) -- distribution - add EuroLinux to fact gathering (https://github.com/ansible/ansible/pull/76624). -- distribution - detect tencentos and gather correct facts on the distro. -- dnf - ensure releasever is passed into libdnf as string (https://github.com/ansible/ansible/issues/77010) -- extend timeout for ansible-galaxy when communicating with the galaxy server api, and apply it to all interactions with the api -- facts - add support for deepin distro information detection (https://github.com/ansible/ansible/issues/77286). -- first_found - fix to allow for spaces in file names (https://github.com/ansible/ansible/issues/77136) -- gather_facts - Fact gathering now continues even if it fails to read a file -- gather_facts action now handles the move of base connection plugin types into collections to add/prevent subset argument correctly -- gather_facts/setup will not fail anymore if capsh is present but not executable -- git module fix docs and proper use of ssh wrapper script and GIT_SSH_COMMAND depending on version. -- git module is more consistent and clearer about which ssh options are added to git calls. -- git module no longer uses wrapper script for ssh options. -- hacking - fix incorrect usage of deprecated fish-shell redirection operators that failed to honor ``--quiet`` flag when sourced (https://github.com/ansible/ansible/pull/77180). -- hostname - Do not require SystemdStrategy subclasses for every distro (https://github.com/ansible/ansible/issues/76792) -- hostname - Fix Debian strategy KeyError, use `SystemdStrategy` (https://github.com/ansible/ansible/issues/76124) -- hostname - Update the systemd strategy in the ``hostname`` module to not interfere with NetworkManager (https://github.com/ansible/ansible/issues/76958) -- hostname - add hostname support for openEuler distro (https://github.com/ansible/ansible/pull/76619). -- hostname - use ``file_get_content()`` to read the file containing the host name in the ``FileStrategy.get_permanent_hostname()`` method. This prevents a ``TypeError`` from being raised when the strategy is used (https://github.com/ansible/ansible/issues/77025). -- include_vars, properly initialize variable as there is corner case in which it can end up referenced and not defined -- inventory - parameterize ``disable_lookups`` in ``Constructable`` (https://github.com/ansible/ansible/issues/76769). -- inventory manager now respects --flush-cache -- junit callback - Fix traceback during automatic fact gathering when using relative paths. -- junit callback - Fix unicode error when handling non-ASCII task paths. -- module_utils.common.yaml - The ``SafeLoader``, ``SafeDumper`` and ``Parser`` classes now fallback to ``object`` when ``yaml`` is not available. This fixes tracebacks when inheriting from these classes without requiring a ``HAS_YAML`` guard around class definitions. -- parameters - handle blank values when argument is a list (https://github.com/ansible/ansible/issues/77108). -- play_context now compensates for when a conneciton sets the default to inventory_hostname but skips adding it to the vars. -- playbook/strategy have more informative 'attribute' based errors for playbook objects and handlers. -- python modules (new type) will now again prefer the specific python stated in the module's shebang instead of hardcoding to /usr/bin/python. -- replace - Always return ``rc`` to ensure return values are consistent - https://github.com/ansible/ansible/pull/71963 -- script - skip in check mode if the plugin cannot determine if a change will occur (i.e. neither `creates` or `removes` are provided). -- service - Fixed handling of sleep arguments during service restarts on AIX. (https://github.com/ansible/ansible/issues/76877) -- service - Fixed service restarts with arguments on AIX. (https://github.com/ansible/ansible/issues/76840) -- service_facts module will now give more meaningful warnings when it fails to gather data. -- set_fact/include_vars correctly handle delegation assignments within loops -- setup - detect docker container with check for ./dockerenv or ./dockinit (https://github.com/ansible/ansible/pull/74349). -- shell/command - only return changed as True if the task has not been skipped. -- shell/command - only skip in check mode if the options `creates` and `removes` are both None. -- ssh connection - properly quote controlpersist path given by user to avoid issues with spaces and other characters -- ssh connection avoid parsing ssh cli debug lines as they can match expected output at high verbosities. -- ssh connection now uses more correct host source as play_context can ignore loop/delegation variations. -- sudo become plugin, fix handling of non interactive flags, previous substitution was too naive -- systemd - check if service is alias so it gets enabled (https://github.com/ansible/ansible/issues/75538). -- systemd - check if service is indirect so it gets enabled (https://github.com/ansible/ansible/issues/76453). -- task_executor reverts the change to push facts into delegated vars on loop finalization as result managing code already handles this and was duplicating effort to wrong result. -- template lookup - restore inadvertently deleted default for ``convert_data`` (https://github.com/ansible/ansible/issues/77004) -- to_json/to_nice_json filters defaults back to unvaulting/no unsafe packing. -- unarchive - Fix zip archive file listing that caused issues with content postprocessing (https://github.com/ansible/ansible/issues/76067). -- unarchive - Make extraction work when the LANGUAGE environment variable is set to a non-English locale. -- unarchive - apply ``owner`` and ``group`` permissions to top folder (https://github.com/ansible/ansible/issues/35426) -- unarchive - include the original error when a handler cannot manage the archive (https://github.com/ansible/ansible/issues/28977). -- unarchive - the ``io_buffer_size`` option added in 2.12 was not accepted by the module (https://github.com/ansible/ansible/pull/77271). -- urls - Allow ``ca_path`` to point to a bundle containing multiple PEM certs (https://github.com/ansible/ansible/issues/75015) -- urls/uri - Address case where ``HTTPError`` isn't fully initialized due to the error, and is missing certain methods and attributes (https://github.com/ansible/ansible/issues/76386) -- user - allow ``password_expiry_min`` and ``password_expiry_min`` to be set to ``0`` (https://github.com/ansible/ansible/issues/75017) -- user - allow password min and max to be set at the same time (https://github.com/ansible/ansible/issues/75017) -- user - update logic to check if user exists or not in MacOS. -- validate_argument_spec - Skip suboption validation if the top level option is an invalid type (https://github.com/ansible/ansible/issues/75612). -- variablemanager, more efficient read of vars files -- vault - Warn instead of fail for missing vault IDs if at least one valid vault secret is found. -- winrm - Ensure ``kinit`` is run with the same ``PATH`` env var as the Ansible process -- yum - prevent storing unnecessary cache data by running `yum makecache fast` (https://github.com/ansible/ansible/issues/76336) - -Known Issues ------------- - -- get_url - document ``check_mode`` correctly with unreliable changed status (https://github.com/ansible/ansible/issues/65687). diff --git a/changelogs/CHANGELOG-v2.14.rst b/changelogs/CHANGELOG-v2.14.rst new file mode 100644 index 00000000..c849089b --- /dev/null +++ b/changelogs/CHANGELOG-v2.14.rst @@ -0,0 +1,388 @@ +================================================= +ansible-core 2.14 "C'mon Everybody" Release Notes +================================================= + +.. contents:: Topics + + +v2.14.0 +======= + +Release Summary +--------------- + +| Release Date: 2022-11-07 +| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__ + + +Major Changes +------------- + +- Move handler processing into new ``PlayIterator`` phase to use the configured strategy (https://github.com/ansible/ansible/issues/65067) +- ansible - At startup the filesystem encoding and locale are checked to verify they are UTF-8. If not, the process exits with an error reporting the errant encoding. +- ansible - Increase minimum Python requirement to Python 3.9 for CLI utilities and controller code +- ansible-test - At startup the filesystem encoding is checked to verify it is UTF-8. If not, the process exits with an error reporting the errant encoding. +- ansible-test - At startup the locale is configured as ``en_US.UTF-8``, with a fallback to ``C.UTF-8``. If neither encoding is available the process exits with an error. If the fallback is used, a warning is displayed. In previous versions the ``en_US.UTF-8`` locale was always requested. However, no startup checking was performed to verify the locale was successfully configured. + +Minor Changes +------------- + +- Add a new "INVENTORY_UNPARSED_WARNING" flag add to hide the "No inventory was parsed, only implicit localhost is available" warning +- Add an 'action_plugin' field for modules in runtime.yml plugin_routing. + + This fixes module_defaults by supporting modules-as-redirected-actions + without redirecting module_defaults entries to the common action. + + .. code: yaml + + plugin_routing: + action: + facts: + redirect: ns.coll.eos + command: + redirect: ns.coll.eos + modules: + facts: + redirect: ns.coll.eos_facts + command: + redirect: ns.coll.eos_command + + With the runtime.yml above for ns.coll, a task such as + + .. code: yaml + + - hosts: all + module_defaults: + ns.coll.eos_facts: {'valid_for_eos_facts': 'value'} + ns.coll.eos_command: {'not_valid_for_eos_facts': 'value'} + tasks: + - ns.coll.facts: + + will end up with defaults for eos_facts and eos_command + since both modules redirect to the same action. + + To select an action plugin for a module without merging + module_defaults, define an action_plugin field for the resolved + module in the runtime.yml. + + .. code: yaml + + plugin_routing: + modules: + facts: + redirect: ns.coll.eos_facts + action_plugin: ns.coll.eos + command: + redirect: ns.coll.eos_command + action_plugin: ns.coll.eos + + The action_plugin field can be a redirected action plugin, as + it is resolved normally. + + Using the modified runtime.yml, the example task will only use + the ns.coll.eos_facts defaults. +- Add support for parsing ``-a`` module options as JSON and not just key=value arguments - https://github.com/ansible/ansible/issues/78112 +- Added Kylin Linux Advanced Server OS in RedHat OS Family. +- Allow ``when`` conditionals to be used on ``flush_handlers`` (https://github.com/ansible/ansible/issues/77616) +- Allow meta tasks to be used as handlers. +- Display - The display class will now proxy calls to Display.display via the queue from forks/workers to be handled by the parent process for actual display. This reduces some reliance on the fork start method and improves reliability of displaying messages. +- Jinja version test - Add pep440 version_type for version test. (https://github.com/ansible/ansible/issues/78288) +- Loops - Add new ``loop_control.extended_allitems`` to allow users to disable tracking all loop items for each loop (https://github.com/ansible/ansible/issues/75216) +- NetBSD - Add uptime_seconds fact +- Provide a `utc` option for strftime to show time in UTC rather than local time +- Raise a proper error when ``include_role`` or ``import_role`` is used as a handler. +- Remove the ``AnsibleContext.resolve`` method as its override is not necessary. Furthermore the ability to override the ``resolve`` method was deprecated in Jinja 3.0.0 and removed in Jinja 3.1.0. +- Utilize @classmethod and @property together to form classproperty (Python 3.9) to access field attributes of a class +- ``LoopControl`` is now templated through standard ``post_validate`` method (https://github.com/ansible/ansible/pull/75715) +- ``ansible-galaxy collection install`` - add an ``--offline`` option to prevent querying distribution servers (https://github.com/ansible/ansible/issues/77443). +- ansible - Add support for Python 3.11 to Python interpreter discovery. +- ansible - At startup the stdin/stdout/stderr file handles are checked to verify they are using blocking IO. If not, the process exits with an error reporting which file handle(s) are using non-blocking IO. +- ansible-config adds JSON and YAML output formats for list and dump actions. +- ansible-connection now supports verbosity directly on cli +- ansible-console added 'collections' command to match playbook keyword. +- ansible-doc - remove some of the manual formatting, and use YAML more uniformly. This in particular means that ``true`` and ``false`` are used for boolean values, instead of ``True`` and ``False`` (https://github.com/ansible/ansible/pull/78668). +- ansible-galaxy - Support resolvelib versions 0.6.x, 0.7.x, and 0.8.x. The full range of supported versions is now >= 0.5.3, < 0.9.0. +- ansible-galaxy now supports a user defined timeout, instead of existing hardcoded 60s (now the default). +- ansible-test - Add FreeBSD 13.1 remote support. +- ansible-test - Add RHEL 9.0 remote support. +- ansible-test - Add support for Python 3.11. +- ansible-test - Add support for RHEL 8.6 remotes. +- ansible-test - Add support for Ubuntu VMs using the ``--remote`` option. +- ansible-test - Add support for exporting inventory with ``ansible-test shell --export {path}``. +- ansible-test - Add support for multi-arch remotes. +- ansible-test - Add support for provisioning Alpine 3.16 remote instances. +- ansible-test - Add support for provisioning Fedora 36 remote instances. +- ansible-test - Add support for provisioning Ubuntu 20.04 remote instances. +- ansible-test - Add support for provisioning remotes which require ``doas`` for become. +- ansible-test - Add support for running non-interactive commands with ``ansible-test shell``. +- ansible-test - Alpine remotes now use ``sudo`` for tests, using ``doas`` only for bootstrapping. +- ansible-test - An improved error message is shown when the download of a pip bootstrap script fails. The download now uses ``urllib2`` instead of ``urllib`` on Python 2. +- ansible-test - Avoid using the ``mock_use_standalone_module`` setting for unit tests running on Python 3.8 or later. +- ansible-test - Become support for remote instance provisioning is no longer tied to a fixed list of platforms. +- ansible-test - Blocking mode is now enforced for stdin, stdout and stderr. If any of these are non-blocking then ansible-test will exit during startup with an error. +- ansible-test - Distribution specific test containers are now multi-arch, supporting both x86_64 and aarch64. +- ansible-test - Distribution specific test containers no longer contain a ``/etc/ansible/hosts`` file. +- ansible-test - Enable loading of ``coverage`` data files created by older supported ansible-test releases. +- ansible-test - Fedora 36 has been added as a test container. +- ansible-test - FreeBSD remotes now use ``sudo`` for tests, using ``su`` only for bootstrapping. +- ansible-test - Improve consistency of output messages by using stdout or stderr for most output, but not both. +- ansible-test - Improve consistency of version specific documentation links. +- ansible-test - Remote Alpine instances now have the ``acl`` package installed. +- ansible-test - Remote Fedora instances now have the ``acl`` package installed. +- ansible-test - Remote FreeBSD instances now have ACLs enabled on the root filesystem. +- ansible-test - Remote Ubuntu instances now have the ``acl`` package installed. +- ansible-test - Remove Fedora 34 test container. +- ansible-test - Remove Fedora 35 test container. +- ansible-test - Remove FreeBSD 13.0 remote support. +- ansible-test - Remove RHEL 8.5 remote support. +- ansible-test - Remove Ubuntu 18.04 test container. +- ansible-test - Remove support for Python 2.7 on provisioned FreeBSD instances. +- ansible-test - Remove support for Python 3.8 on the controller. +- ansible-test - Remove the ``opensuse15py2`` container. +- ansible-test - Support multiple pinned versions of the ``coverage`` module. The version used now depends on the Python version in use. +- ansible-test - Test containers have been updated to remove the ``VOLUME`` instruction. +- ansible-test - The Alpine 3 test container has been updated to Alpine 3.16.0. +- ansible-test - The ``http-test-container`` container is now multi-arch, supporting both x86_64 and aarch64. +- ansible-test - The ``pypi-test-container`` container is now multi-arch, supporting both x86_64 and aarch64. +- ansible-test - The ``shell`` command can be used outside a collection if no controller delegation is required. +- ansible-test - The openSUSE test container has been updated to openSUSE Leap 15.4. +- ansible-test - Ubuntu 22.04 has been added as a test container. +- ansible-test - Update ``base`` and ``default`` containers to include Python 3.11.0. +- ansible-test - Update ``default`` containers to include new ``docs-build`` sanity test requirements. +- ansible-test - Update pinned sanity test requirements for all tests. +- ansible-test - Update the ``base`` container to 3.4.0. +- ansible-test - Update the ``default`` containers to 6.6.0. +- ansible-test validate-modules - Added support for validating module documentation stored in a sidecar file alongside the module (``{module}.yml`` or ``{module}.yaml``). Previously these files were ignored and documentation had to be placed in ``{module}.py``. +- apt_repository remove dependency on apt-key and use gpg + /usr/share/keyrings directly instead +- apt_repository will use the trust repo directories in order of preference (more appropriate to less) as they exist on the target. +- blockinfile - The presence of the multiline flag (?m) in the regular expression for insertafter opr insertbefore controls whether the match is done line by line or with multiple lines (https://github.com/ansible/ansible/pull/75090). +- calls to listify_lookup_plugin_terms in core do not pass in loader/dataloader anymore. +- collections - ``ansible-galaxy collection build`` can now utilize ``MANIFEST.in`` style directives from ``galaxy.yml`` instead of ``build_ignore`` effectively inverting the logic from include by default, to exclude by default. (https://github.com/ansible/ansible/pull/78422) +- config manager, move templating into main query function in config instead of constants +- config manager, remove updates to configdata as it is mostly unused +- configuration entry INTERPRETER_PYTHON_DISTRO_MAP is now 'private' and won't show up in normal configuration queries and docs, since it is not 'settable' this avoids user confusion. +- distribution - add distribution_minor_version for Debian Distro (https://github.com/ansible/ansible/issues/74481). +- documentation construction now gives more information on error. +- facts - add OSMC to Debian os_family mapping +- get_url - permit to pass to parameter ``checksum`` an URL pointing to a file containing only a checksum (https://github.com/ansible/ansible/issues/54390). +- new tests url, uri and urn will verify string as such, but they don't check existance of the resource +- plugin loader - add ansible_name and ansible_aliases attributes to plugin objects/classes. +- systemd is now systemd_service to better reflect the scope of the module, systemd is kept as an alias for backwards compatibility. +- templating - removed internal template cache +- uri - cleanup write_file method, remove overkill safety checks and report any exception, change shutilcopyfile to use module.atomic_move +- urls - Add support to specify SSL/TLS ciphers to use during a request (https://github.com/ansible/ansible/issues/78633) +- validate-modules - Allow ``type: raw`` on a module return type definition for values that have a dynamic type +- version output now includes the path to the python executable that Ansible is running under +- yum_repository - do not give the ``async`` parameter a default value anymore, since this option is deprecated in RHEL 8. This means that ``async = 1`` won't be added to repository files if omitted, but it can still be set explicitly if needed. + +Breaking Changes / Porting Guide +-------------------------------- + +- Allow for lazy evaluation of Jinja2 expressions (https://github.com/ansible/ansible/issues/56017) +- The default ansible-galaxy role skeletons no longer contain .travis.yml files. You can configure ansible-galaxy to use a custom role skeleton that contains a .travis.yml file to continue using Galaxy's integration with Travis CI. +- ansible - At startup the filesystem encoding and locale are checked to verify they are UTF-8. If not, the process exits with an error reporting the errant encoding. +- ansible - Increase minimum Python requirement to Python 3.9 for CLI utilities and controller code +- ansible-test - At startup the filesystem encoding is checked to verify it is UTF-8. If not, the process exits with an error reporting the errant encoding. +- ansible-test - At startup the locale is configured as ``en_US.UTF-8``, with a fallback to ``C.UTF-8``. If neither encoding is available the process exits with an error. If the fallback is used, a warning is displayed. In previous versions the ``en_US.UTF-8`` locale was always requested. However, no startup checking was performed to verify the locale was successfully configured. +- ansible-test validate-modules - Removed the ``missing-python-doc`` error code in validate modules, ``missing-documentation`` is used instead for missing PowerShell module documentation. +- strategy plugins - Make ``ignore_unreachable`` to increase ``ignored`` and ``ok`` and counter, not ``skipped`` and ``unreachable``. (https://github.com/ansible/ansible/issues/77690) + +Deprecated Features +------------------- + +- Deprecate ability of lookup plugins to return arbitrary data. Lookup plugins must return lists, failing to do so will be an error in 2.18. (https://github.com/ansible/ansible/issues/77788) +- Encryption - Deprecate use of the Python crypt module due to it's impending removal from Python 3.13 +- PlayContext.verbosity is deprecated and will be removed in 2.18. Use ansible.utils.display.Display().verbosity as the single source of truth. +- ``DEFAULT_FACT_PATH``, ``DEFAULT_GATHER_SUBSET`` and ``DEFAULT_GATHER_TIMEOUT`` are deprecated and will be removed in 2.18. Use ``module_defaults`` keyword instead. +- ``PlayIterator`` - deprecate ``cache_block_tasks`` and ``get_original_task`` which are noop and unused. +- ``Templar`` - deprecate ``shared_loader_obj`` option which is unused. ``ansible.plugins.loader`` is used directly instead. +- listify_lookup_plugin_terms, deprecate 'loader/dataloader' parameter as it not used. +- vars plugins - determining whether or not to run ansible.legacy vars plugins with the class attribute REQUIRES_WHITELIST is deprecated, set REQUIRES_ENABLED instead. + +Removed Features (previously deprecated) +---------------------------------------- + +- PlayIterator - remove deprecated ``PlayIterator.ITERATING_*`` and ``PlayIterator.FAILED_*`` +- Remove deprecated ``ALLOW_WORLD_READABLE_TMPFILES`` configuration option (https://github.com/ansible/ansible/issues/77393) +- Remove deprecated ``COMMAND_WARNINGS`` configuration option (https://github.com/ansible/ansible/issues/77394) +- Remove deprecated ``DISPLAY_SKIPPED_HOSTS`` environment variable (https://github.com/ansible/ansible/issues/77396) +- Remove deprecated ``LIBVIRT_LXC_NOSECLABEL`` environment variable (https://github.com/ansible/ansible/issues/77395) +- Remove deprecated ``NETWORK_GROUP_MODULES`` environment variable (https://github.com/ansible/ansible/issues/77397) +- Remove deprecated ``UnsafeProxy`` +- Remove deprecated ``plugin_filters_cfg`` config option from ``default`` section (https://github.com/ansible/ansible/issues/77398) +- Remove deprecated functionality that allows loading cache plugins directly without using ``cache_loader``. +- Remove deprecated functionality that allows subclassing ``DefaultCallback`` without the corresponding ``doc_fragment``. +- Remove deprecated powershell functions ``Load-CommandUtils`` and ``Import-PrivilegeUtil`` +- apt_key - remove deprecated ``key`` module param +- command/shell - remove deprecated ``warn`` module param +- get_url - remove deprecated ``sha256sum`` module param +- import_playbook - remove deprecated functionality that allows providing additional parameters in free form + +Bugfixes +-------- + +- "meta: refresh_inventory" does not clobber entries added by add_host/group_by anymore. +- Add PyYAML >= 5.1 as a dependency of ansible-core to be compatible with Python 3.8+. +- Avoid 'unreachable' error when chmod on AIX has 255 as return code. +- BSD network facts - Do not assume column indexes, look for ``netmask`` and ``broadcast`` for determining the correct columns when parsing ``inet`` line (https://github.com/ansible/ansible/issues/79117) +- Bug fix for when handlers were ran on failed hosts after an ``always`` section was executed (https://github.com/ansible/ansible/issues/52561) +- Do not allow handlers from dynamic includes to be notified (https://github.com/ansible/ansible/pull/78399) +- Do not crash when templating an expression with a test or filter that is not a valid Ansible filter name (https://github.com/ansible/ansible/issues/78912, https://github.com/ansible/ansible/pull/78913). +- Ensure handlers observe ``any_errors_fatal`` (https://github.com/ansible/ansible/issues/46447) +- Ensure syntax check errors include playbook filenames +- Ensure the correct ``environment_class`` is set on ``AnsibleJ2Template`` +- Error for collection redirects that do not use fully qualified collection names, as the redirect would be determined by the ``collections`` keyword. +- Fix PluginLoader to mimic Python import machinery by adding module to sys.modules before exec +- Fix ``-vv`` output for meta tasks to not have an empty message when skipped, print the skip reason instead. (https://github.com/ansible/ansible/issues/77315) +- Fix an issue where ``ansible_play_hosts`` and ``ansible_play_batch`` were not properly updated when a failure occured in an explicit block inside the rescue section (https://github.com/ansible/ansible/issues/78612) +- Fix dnf module documentation to indicate that comparison operators for package version require spaces around them (https://github.com/ansible/ansible/issues/78295) +- Fix for linear strategy when tasks were executed in incorrect order or even removed from execution. (https://github.com/ansible/ansible/issues/64611, https://github.com/ansible/ansible/issues/64999, https://github.com/ansible/ansible/issues/72725, https://github.com/ansible/ansible/issues/72781) +- Fix for network_cli not getting all relevant connection options +- Fix handlers execution with ``serial`` in the ``linear`` strategy (https://github.com/ansible/ansible/issues/54991) +- Fix potential, but unlikely, cases of variable use before definition. +- Fix reusing a connection in a task loop that uses a redirected or aliased name - https://github.com/ansible/ansible/issues/78425 +- Fix setting become activation in a task loop - https://github.com/ansible/ansible/issues/78425 +- Fix traceback when installing a collection from a git repository and git is not installed (https://github.com/ansible/ansible/issues/77479). +- GALAXY_IGNORE_CERTS reworked to allow each server entry to override +- More gracefully handle separator errors in jinja2 template overrides (https://github.com/ansible/ansible/pull/77495). +- Move undefined check from concat to finalize (https://github.com/ansible/ansible/issues/78156) +- Prevent losing unsafe on results returned from lookups (https://github.com/ansible/ansible/issues/77535) +- Propagate ``ansible_failed_task`` and ``ansible_failed_result`` to an outer rescue (https://github.com/ansible/ansible/issues/43191) +- Properly execute rescue section when an include task fails in all loop iterations (https://github.com/ansible/ansible/issues/23161) +- Properly send a skipped message when a list in a ``loop`` is empty and comes from a template (https://github.com/ansible/ansible/issues/77934) +- Support colons in jinja2 template override values (https://github.com/ansible/ansible/pull/77495). +- ``ansible-galaxy`` - remove extra server api call during dependency resolution for requirements and dependencies that are already satisfied (https://github.com/ansible/ansible/issues/77443). +- `ansible-config init -f vars` will now use shorthand format +- action plugins now pass cannonical info to modules instead of 'temporary' info from play_context +- ansible - Exclude Python 2.6 from Python interpreter discovery. +- ansible-config dump - Only display plugin type headers when plugin options are changed if --only-changed is specified. +- ansible-config limit shorthand format to assigned values +- ansible-configi init should now skip internal reserved config entries +- ansible-connection - decrypt vaulted parameters before sending over the socket, as vault secrets are not available on the other side. +- ansible-console - Renamed the first argument of ``ConsoleCLI.default`` from ``arg`` to ``line`` to match the first argument of the same method on the base class ``Cmd``. +- ansible-console commands now all have a help entry. +- ansible-console fixed to load modules via fqcn, short names and handle redirects. +- ansible-console now shows installed collection modules. +- ansible-doc - fix listing plugins. +- ansible-doc will not add 'website for' in ":ref:" substitutions as it made them confusing. +- ansible-doc will not again warn and skip when missing docs, always show the doc file (for edit on github) and match legacy plugins. +- ansible-doc will not traceback when legacy plugins don't have docs nor adjacent file with docs +- ansible-doc will now also display until as an 'implicit' templating keyword. +- ansible-doc will now not display version_added_collection under same conditions it does not display version_added. +- ansible-galaxy - Fix detection of ``--role-file`` in arguments for implicit role invocation (https://github.com/ansible/ansible/issues/78204) +- ansible-galaxy - Fix exit codes for role search and delete (https://github.com/ansible/ansible/issues/78516) +- ansible-galaxy - Fix loading boolean server options so False doesn't become a truthy string (https://github.com/ansible/ansible/issues/77416). +- ansible-galaxy - Fix reinitializing the whole collection directory with ``ansible-galaxy collection init ns.coll --force``. Now directories and files that are not included in the collection skeleton will be removed. +- ansible-galaxy - Fix unhandled traceback if a role's dependencies in meta/main.yml or meta/requirements.yml are not lists. +- ansible-galaxy - do not require mandatory keys in the ``galaxy.yml`` of source collections when listing them (https://github.com/ansible/ansible/issues/70180). +- ansible-galaxy - fix installing collections that have dependencies in the metadata set to null instead of an empty dictionary (https://github.com/ansible/ansible/issues/77560). +- ansible-galaxy - fix listing collections that contains metadata but the namespace or name are not strings. +- ansible-galaxy - fix missing meta/runtime.yml in default galaxy skeleton used for ansible-galaxy collection init +- ansible-galaxy - fix setting the cache for paginated responses from Galaxy NG/AH (https://github.com/ansible/ansible/issues/77911). +- ansible-galaxy - handle unsupported versions of resolvelib gracefully. +- ansible-galaxy --ignore-certs now has proper precedence over configuration +- ansible-test - Add ``wheel < 0.38.0`` constraint for Python 3.6 and earlier. +- ansible-test - Allow disabled, unsupported, unstable and destructive integration test targets to be selected using their respective prefixes. +- ansible-test - Allow unstable tests to run when targeted changes are made and the ``--allow-unstable-changed`` option is specified (resolves https://github.com/ansible/ansible/issues/74213). +- ansible-test - Always remove containers after failing to create/run them. This avoids leaving behind created containers when using podman. +- ansible-test - Correctly detect when running as the ``root`` user (UID 0) on the origin host. The result of the detection was incorrectly being inverted. +- ansible-test - Delegation for commands which generate output for programmatic consumption no longer redirect all output to stdout. The affected commands and options are ``shell``, ``sanity --lint``, ``sanity --list-tests``, ``integration --list-targets``, ``coverage analyze`` +- ansible-test - Delegation now properly handles arguments given after ``--`` on the command line. +- ansible-test - Don't fail if network cannot be disconnected (https://github.com/ansible/ansible/pull/77472) +- ansible-test - Fix bootstrapping of Python 3.9 on Ubuntu 20.04 remotes. +- ansible-test - Fix broken documentation link for ``aws`` test plugin error messages. +- ansible-test - Fix change detection for ansible-test's own integration tests. +- ansible-test - Fix internal validation of remote completion configuration. +- ansible-test - Fix skipping of tests marked ``needs/python`` on the origin host. +- ansible-test - Fix skipping of tests marked ``needs/root`` on the origin host. +- ansible-test - Prevent ``--target-`` prefixed options for the ``shell`` command from being combined with legacy environment options. +- ansible-test - Sanity test output with the ``--lint`` option is no longer mixed in with bootstrapping output. +- ansible-test - Subprocesses are now isolated from the stdin, stdout and stderr of ansible-test. This avoids issues with subprocesses tampering with the file descriptors, such as SSH making them non-blocking. As a result of this change, subprocess output from unit and integration tests on stderr now go to stdout. +- ansible-test - Subprocesses no longer have access to the TTY ansible-test is connected to, if any. This maintains consistent behavior between local testing and CI systems, which typically do not provide a TTY. Tests which require a TTY should use pexpect or another mechanism to create a PTY. +- ansible-test - Temporary executables are now verified as executable after creation. Without this check, path injected scripts may not be found, typically on systems with ``/tmp`` mounted using the "noexec" option. This can manifest as a missing Python interpreter, or use of the wrong Python interpreter, as well as other error conditions. +- ansible-test - Test configuration for collections is now parsed only once, prior to delegation. Fixes issue: https://github.com/ansible/ansible/issues/78334 +- ansible-test - Test containers are now run with the ``--tmpfs`` option for ``/tmp``, ``/run`` and ``/run/lock``. This allows use of containers built without the ``VOLUME`` instruction. Additionally, containers with those volumes defined no longer create anonymous volumes for them. This avoids leaving behind volumes on the container host after the container is stopped and deleted. +- ansible-test - The ``shell`` command no longer redirects all output to stdout when running a provided command. Any command output written to stderr will be mixed with the stderr output from ansible-test. +- ansible-test - The ``shell`` command no longer requests a TTY when using delegation unless an interactive shell is being used. An interactive shell is the default behavior when no command is given to pass to the shell. +- ansible-test - Update the ``pylint`` sanity test requirements to resolve crashes on Python 3.11. (https://github.com/ansible/ansible/issues/78882) +- ansible-test - Update the ``pylint`` sanity test to use version 2.15.4. +- ansible-test - Update the ``pylint`` sanity test to use version 2.15.5. +- ansible-test - ansible-doc sanity test - Correctly determine the fully-qualified collection name for plugins in subdirectories, resolving https://github.com/ansible/ansible/issues/78490. +- ansible-test - validate-modules - Documentation-only modules, used for documenting actions, are now allowed to have docstrings (https://github.com/ansible/ansible/issues/77972). +- ansible-test compile sanity test - do not crash if a column could not be determined for an error (https://github.com/ansible/ansible/pull/77465). +- apt - Fix module failure when a package is not installed and only_upgrade=True. Skip that package and check the remaining requested packages for upgrades. (https://github.com/ansible/ansible/issues/78762) +- apt - don't actually update the cache in check mode with update_cache=true. +- apt - don't mark existing packages as manually installed in check mode (https://github.com/ansible/ansible/issues/66413). +- apt - fix package selection to include /etc/apt/preferences(.d) (https://github.com/ansible/ansible/issues/77969) +- apt module now correctly handles virtual packages. +- apt module should not traceback on invalid type given as package. issue 78663. +- arg_spec - Fix incorrect ``no_log`` warning when a parameter alias is used (https://github.com/ansible/ansible/pull/77576) +- callback plugins - do not crash when ``exception`` passed from a module is not a string (https://github.com/ansible/ansible/issues/75726, https://github.com/ansible/ansible/pull/77781). +- cli now emits clearer error on no hosts selected +- config, ensure that pulling values from configmanager are templated if possible. +- display itself should be single source of 'verbosity' level to the engine. +- dnf - Condense a few internal boolean returns. +- dnf - The ``nobest`` option now also works for ``state=latest``. +- dnf - The ``skip_broken`` option is now used in installs (https://github.com/ansible/ansible/issues/73072). +- dnf - fix output parsing on systems with ``LANGUAGE`` set to a language other than English (https://github.com/ansible/ansible/issues/78193) +- facts - fix IP address discovery for specific interface names (https://github.com/ansible/ansible/issues/77792). +- facts - fix processor facts on AIX: correctly detect number of cores and threads, turn ``processor`` into a list (https://github.com/ansible/ansible/pull/78223). +- fetch_file - Ensure we only use the filename when calculating a tempfile, and do not incude the query string (https://github.com/ansible/ansible/issues/29680) +- fetch_file - properly split files with multiple file extensions (https://github.com/ansible/ansible/pull/75257) +- file - setting attributes of symbolic links or files that are hard linked no longer fails when the link target is unspecified (https://github.com/ansible/ansible/issues/76142). +- file backed cache plugins now handle concurrent access by making atomic updates to the files. +- git module fix docs and proper use of ssh wrapper script and GIT_SSH_COMMAND depending on version. +- handlers - fix an issue where the ``flush_handlers`` meta task could not be used with FQCN: ``ansible.builtin.meta`` (https://github.com/ansible/ansible/issues/79023) +- if a config setting prevents running ansible it should at least show it's "origin". +- include module - add docs url to include deprecation message (https://github.com/ansible/ansible/issues/76684). +- items2dict - Handle error if an item is not a dictionary or is missing the required keys (https://github.com/ansible/ansible/issues/70337). +- keyword inheritance - Ensure that we do not squash keywords in validate (https://github.com/ansible/ansible/issues/79021) +- known_hosts - do not return changed status when a non-existing key is removed (https://github.com/ansible/ansible/issues/78598) +- local facts - if a local fact in the facts directory cannot be stated, store an error message as the fact value and emit a warning just as if just as if the facts execution has failed. The stat can fail e.g. on dangling symlinks. +- lookup plugin - catch KeyError when lookup returns dictionary (https://github.com/ansible/ansible/pull/77789). +- module_utils - Make distro.id() report newer versions of OpenSuSE (at least >=15) also report as ``opensuse``. They report themselves as ``opensuse-leap``. +- module_utils.service - daemonize - Avoid modifying the list of file descriptors while iterating over it. +- null_representation config entry changed to 'raw' as it must allow 'none/null' and empty string. +- omit on keywords was resetting to default value, ignoring inheritance. +- paramiko - Add a new option to allow paramiko >= 2.9 to easily work with all devices now that rsa-sha2 support was added to paramiko, which prevented communication with numerous platforms. (https://github.com/ansible/ansible/issues/76737) +- paramiko - Add back support for ``ssh_args``, ``ssh_common_args``, and ``ssh_extra_args`` for parsing the ``ProxyCommand`` (https://github.com/ansible/ansible/issues/78750) +- password lookup does not ignore k=v arguments anymore. +- pause module will now report proper 'echo' vs always being true. +- pip - fix cases where resolution of pip Python module fails when importlib.util has not already been imported +- plugin loader - Sort results when fuzzy matching plugin names (https://github.com/ansible/ansible/issues/77966). +- plugin loader will now load config data for plugin by name instead of by file to avoid issues with the same file being loaded under different names (fqcn + short name). +- plugin loader, fix detection for existing configuration before initializing for a plugin +- plugin loader, now when skipping a plugin due to an abstract method error we provide that in 'verbose' mode instead of totally obscuring the error. The current implementation assumed only the base classes would trigger this and failed to consider 'in development' plugins. +- prevent lusermod from using group name instead of group id (https://github.com/ansible/ansible/pull/77914) +- prevent type annotation shim failures from causing runtime failures (https://github.com/ansible/ansible/pull/77860) +- psrp connection now handles default to inventory_hostname correctly. +- roles, fixed issue with roles loading paths not contained in the role itself when using the `_from` options. +- service_facts - Use python re to parse service output instead of grep (https://github.com/ansible/ansible/issues/78541) +- setup - Adds a default value to ``lvm_facts`` when lvm or lvm2 is not installed on linux (https://github.com/ansible/ansible/issues/17393) +- shell plugins now give a more user friendly error when fed the wrong type of data. +- template module/lookup - fix ``convert_data`` option that was effectively always set to True for Jinja macros (https://github.com/ansible/ansible/issues/78141) +- unarchive - if unzip is available but zipinfo is not, use unzip -Z instead of zipinfo (https://github.com/ansible/ansible/issues/76959). +- uri - properly use uri parameter use_proxy (https://github.com/ansible/ansible/issues/58632) +- uri module - failed status when Authentication Bearer used with netrc, because Basic authentication was by default. Fix now allows to ignore netrc by changing use_netrc=False (https://github.com/ansible/ansible/issues/74397). +- urls - Guard imports of ``urllib3`` by catching ``Exception`` instead of ``ImportError`` to prevent exceptions in the import process of optional dependencies from preventing use of ``urls.py`` (https://github.com/ansible/ansible/issues/78648) +- user - Fix error "Permission denied" in user module while generating SSH keys (https://github.com/ansible/ansible/issues/78017). +- user - fix creating a local user if the user group already exists (https://github.com/ansible/ansible/pull/75042) +- user module - Replace uses of the deprecated ``spwd`` python module with ctypes (https://github.com/ansible/ansible/pull/78050) +- validate-modules - fix validating version_added for new options. +- variablemanager, more efficient read of vars files +- vault secrets file now executes in the correct context when it is a symlink (not resolved to canonical file). +- wait_for - Read file and perform comparisons using bytes to avoid decode errors (https://github.com/ansible/ansible/issues/78214) +- winrm - Ensure ``kinit`` is run with the same ``PATH`` env var as the Ansible process +- winrm connection now handles default to inventory_hostname correctly. +- yaml inventory plugin - fix the error message for non-string hostnames (https://github.com/ansible/ansible/issues/77519). +- yum - fix traceback when ``releasever`` is specified with ``latest`` (https://github.com/ansible/ansible/issues/78058) + +New Plugins +----------- + +Test +~~~~ + +- uri - is the string a valid URI +- url - is the string a valid URL +- urn - is the string a valid URN diff --git a/changelogs/changelog.yaml b/changelogs/changelog.yaml index 98e8e90b..a687b456 100644 --- a/changelogs/changelog.yaml +++ b/changelogs/changelog.yaml @@ -1,794 +1,156 @@ -ancestor: 2.12.0 +ancestor: 2.13.0 releases: - 2.13.0: + 2.14.0: changes: - release_summary: '| Release Date: 2022-05-16 + bugfixes: + - ansible-test - Fix broken documentation link for ``aws`` test plugin error + messages. + minor_changes: + - ansible-test - Improve consistency of version specific documentation links. + release_summary: '| Release Date: 2022-11-07 | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__ ' - codename: Nobody's Fault but Mine + codename: C'mon Everybody fragments: - - v2.13.0_summary.yaml - release_date: '2022-05-16' - 2.13.0b0: + - ansible-test-docs-links.yml + - v2.14.0_summary.yaml + release_date: '2022-11-07' + 2.14.0b1: changes: breaking_changes: - - Module Python Dependency - Drop support for Python 2.6 in module execution. - - Templating - it is no longer allowed to perform arithmetic and concatenation - operations outside of the jinja template (https://github.com/ansible/ansible/pull/75587) - - The ``finalize`` method is no longer exposed in the globals for use in templating. + - Allow for lazy evaluation of Jinja2 expressions (https://github.com/ansible/ansible/issues/56017) + - The default ansible-galaxy role skeletons no longer contain .travis.yml files. + You can configure ansible-galaxy to use a custom role skeleton that contains + a .travis.yml file to continue using Galaxy's integration with Travis CI. + - ansible - At startup the filesystem encoding and locale are checked to verify + they are UTF-8. If not, the process exits with an error reporting the errant + encoding. + - ansible - Increase minimum Python requirement to Python 3.9 for CLI utilities + and controller code + - ansible-test - At startup the filesystem encoding is checked to verify it + is UTF-8. If not, the process exits with an error reporting the errant encoding. + - ansible-test - At startup the locale is configured as ``en_US.UTF-8``, with + a fallback to ``C.UTF-8``. If neither encoding is available the process exits + with an error. If the fallback is used, a warning is displayed. In previous + versions the ``en_US.UTF-8`` locale was always requested. However, no startup + checking was performed to verify the locale was successfully configured. + - strategy plugins - Make ``ignore_unreachable`` to increase ``ignored`` and + ``ok`` and counter, not ``skipped`` and ``unreachable``. (https://github.com/ansible/ansible/issues/77690) bugfixes: - - Add a YAML representer for ``NativeJinjaText`` - - Add a YAML representer for ``NativeJinjaUnsafeText`` - - AnsiballZ - Ensure we use the full python package in the module cache filename - to avoid a case where ``collections:`` is used to execute a module via short - name, where the short name duplicates another module from ``ansible.builtin`` - or another collection that was executed previously. - - Ansible.ModuleUtils.LinkUtil - Ignore the ``LIB`` environment variable when - loading the ``LinkUtil`` code - - Ansible.ModuleUtils.SID - Use user principal name as is for lookup in the - ``Convert-ToSID`` function - https://github.com/ansible/ansible/issues/77316 - - Detect package manager for Amazon Linux 2022 (AL2022) as dnf + - '"meta: refresh_inventory" does not clobber entries added by add_host/group_by + anymore.' + - Add PyYAML >= 5.1 as a dependency of ansible-core to be compatible with Python + 3.8+. + - Avoid 'unreachable' error when chmod on AIX has 255 as return code. + - Bug fix for when handlers were ran on failed hosts after an ``always`` section + was executed (https://github.com/ansible/ansible/issues/52561) + - Do not allow handlers from dynamic includes to be notified (https://github.com/ansible/ansible/pull/78399) + - Ensure handlers observe ``any_errors_fatal`` (https://github.com/ansible/ansible/issues/46447) + - Ensure syntax check errors include playbook filenames - Ensure the correct ``environment_class`` is set on ``AnsibleJ2Template`` - - Fix ``AttributeError`` when providing password file via ``--connection-password-file`` - (https://github.com/ansible/ansible/issues/76530) - - Fix ``end_play`` to end the current play only (https://github.com/ansible/ansible/issues/76672) - - Fix collection filter/test plugin redirects (https://github.com/ansible/ansible/issues/77192). - - Fix executing includes in the always section in the free strategy (https://github.com/ansible/ansible/issues/75642) - - Fix for when templating empty template file resulted in file with string 'None' - (https://github.com/ansible/ansible/issues/76610) - - Fix help message for the 'ansible-galaxy collection verify' positional argument. - The positional argument must be a collection name (https://github.com/ansible/ansible/issues/76087). - - Fix module logging issue when using custom module on WSL2 (https://github.com/ansible/ansible/issues/76320) - - Fix task debugger to work with ``run_once`` using ``linear`` strategy (https://github.com/ansible/ansible/issues/76049) + - Error for collection redirects that do not use fully qualified collection + names, as the redirect would be determined by the ``collections`` keyword. + - Fix PluginLoader to mimic Python import machinery by adding module to sys.modules + before exec + - Fix ``-vv`` output for meta tasks to not have an empty message when skipped, + print the skip reason instead. (https://github.com/ansible/ansible/issues/77315) + - Fix an issue where ``ansible_play_hosts`` and ``ansible_play_batch`` were + not properly updated when a failure occured in an explicit block inside the + rescue section (https://github.com/ansible/ansible/issues/78612) + - Fix dnf module documentation to indicate that comparison operators for package + version require spaces around them (https://github.com/ansible/ansible/issues/78295) + - Fix for linear strategy when tasks were executed in incorrect order or even + removed from execution. (https://github.com/ansible/ansible/issues/64611, + https://github.com/ansible/ansible/issues/64999, https://github.com/ansible/ansible/issues/72725, + https://github.com/ansible/ansible/issues/72781) + - Fix for network_cli not getting all relevant connection options + - Fix handlers execution with ``serial`` in the ``linear`` strategy (https://github.com/ansible/ansible/issues/54991) + - Fix potential, but unlikely, cases of variable use before definition. - Fix traceback when installing a collection from a git repository and git is not installed (https://github.com/ansible/ansible/issues/77479). - - Interpreter Discovery - Fallback to OS family if the distro is not found in - ``INTERPRETER_PYTHON_DISTRO_MAP`` (https://github.com/ansible/ansible/issues/75560) - - Interpreter discovery - Add ``RHEL`` to ``OS_FAMILY_MAP`` for correct family - fallback for interpreter discovery (https://github.com/ansible/ansible/issues/77368) - - Make include_role/include_tasks work with any_errors_fatal (https://github.com/ansible/ansible/issues/50897) - - Parser errors from within includes should not be rescueable (https://github.com/ansible/ansible/issues/73657) - - Templating - Ensure we catch exceptions when getting ``.filters`` and ``.tests`` - attributes on their respective plugins and properly error, instead of aborting - which results in no filters being added to the jinja2 environment - - Trigger an undefined error when an undefined variable is detected within a - dictionary and/or list (https://github.com/ansible/ansible/pull/75587) - - _run_loop - Add the task name to the warning (https://github.com/ansible/ansible/issues/76011) - - '``Templar.copy_with_new_env`` - set the ``finalize`` method of the new ``Templar`` - object for the new environment (https://github.com/ansible/ansible/issues/76379)' - - 'add_host/group_by: fix using changed_when in a loop (https://github.com/ansible/ansible/issues/71627)' - - ansible-config avoid showing _terms and _input when --only-changed. - - ansible-doc - Fix ansible-doc -l ansible.builtin / ansible.legacy not returning - anything - - ansible-doc - ignore plugin deprecation warnings (https://github.com/ansible/ansible/issues/75671) - - ansible-galaxy - Add galaxy_collection_skeleton/galaxy_collection_skeleton_ignore - configuration options - - ansible-galaxy - Fix using the '--ignore-certs' option when there is no server-specific - configuration for the Galaxy server. - - ansible-galaxy - installing/downloading collections with invalid versions - in git repositories and directories now gives a formatted error message (https://github.com/ansible/ansible/issues/76425, - https://github.com/ansible/ansible/issues/75404). - - ansible-galaxy - when installing a role properly raise an error when inaccessible - path is specified multiple times in roles_path (e.g. via environment variable - and command line option) (https://github.com/ansible/ansible/issues/76316) - - ansible-galaxy collection build - Ignore any existing ``MANIFEST.json`` and - ``FILES.json`` in the root directory when building a collection. - - ansible-galaxy collection verify - display files/directories not included - in the FILES.json as modified content. - - ansible-galaxy publish - Fix warning and error detection in import messages - to properly display them in Ansible - - ansible-pull handle case where hostname and nodename are empty - - ansible-test - Add default entry for Windows remotes to be used with unknown - versions. - - ansible-test - All virtual environments managed by ansible-test are marked - as usable after being bootstrapped, to avoid errors caused by use of incomplete - environments. Previously this was only done for sanity tests. Existing environments - from previous versions of ansible-test will be recreated on demand due to - lacking the new marker. - - ansible-test - Automatic target requirements installation is now based on - the target environment instead of the controller environment. + - GALAXY_IGNORE_CERTS reworked to allow each server entry to override + - More gracefully handle separator errors in jinja2 template overrides (https://github.com/ansible/ansible/pull/77495). + - Move undefined check from concat to finalize (https://github.com/ansible/ansible/issues/78156) + - Prevent losing unsafe on results returned from lookups (https://github.com/ansible/ansible/issues/77535) + - Propagate ``ansible_failed_task`` and ``ansible_failed_result`` to an outer + rescue (https://github.com/ansible/ansible/issues/43191) + - Properly execute rescue section when an include task fails in all loop iterations + (https://github.com/ansible/ansible/issues/23161) + - Properly send a skipped message when a list in a ``loop`` is empty and comes + from a template (https://github.com/ansible/ansible/issues/77934) + - Support colons in jinja2 template override values (https://github.com/ansible/ansible/pull/77495). + - '``ansible-galaxy`` - remove extra server api call during dependency resolution + for requirements and dependencies that are already satisfied (https://github.com/ansible/ansible/issues/77443).' + - '`ansible-config init -f vars` will now use shorthand format' + - action plugins now pass cannonical info to modules instead of 'temporary' + info from play_context + - ansible - Exclude Python 2.6 from Python interpreter discovery. + - ansible-config dump - Only display plugin type headers when plugin options + are changed if --only-changed is specified. + - ansible-configi init should now skip internal reserved config entries + - ansible-connection - decrypt vaulted parameters before sending over the socket, + as vault secrets are not available on the other side. + - ansible-console - Renamed the first argument of ``ConsoleCLI.default`` from + ``arg`` to ``line`` to match the first argument of the same method on the + base class ``Cmd``. + - ansible-console commands now all have a help entry. + - ansible-console fixed to load modules via fqcn, short names and handle redirects. + - ansible-console now shows installed collection modules. + - ansible-doc - fix listing plugins. + - ansible-doc will not add 'website for' in ":ref:" substitutions as it made + them confusing. + - ansible-doc will not again warn and skip when missing docs, always show the + doc file (for edit on github) and match legacy plugins. + - ansible-doc will not traceback when legacy plugins don't have docs nor adjacent + file with docs + - ansible-doc will now also display until as an 'implicit' templating keyword. + - ansible-doc will now not display version_added_collection under same conditions + it does not display version_added. + - ansible-galaxy - Fix detection of ``--role-file`` in arguments for implicit + role invocation (https://github.com/ansible/ansible/issues/78204) + - ansible-galaxy - Fix exit codes for role search and delete (https://github.com/ansible/ansible/issues/78516) + - ansible-galaxy - Fix loading boolean server options so False doesn't become + a truthy string (https://github.com/ansible/ansible/issues/77416). + - ansible-galaxy - Fix reinitializing the whole collection directory with ``ansible-galaxy + collection init ns.coll --force``. Now directories and files that are not + included in the collection skeleton will be removed. + - ansible-galaxy - Fix unhandled traceback if a role's dependencies in meta/main.yml + or meta/requirements.yml are not lists. + - ansible-galaxy - do not require mandatory keys in the ``galaxy.yml`` of source + collections when listing them (https://github.com/ansible/ansible/issues/70180). + - ansible-galaxy - fix installing collections that have dependencies in the + metadata set to null instead of an empty dictionary (https://github.com/ansible/ansible/issues/77560). + - ansible-galaxy - fix listing collections that contains metadata but the namespace + or name are not strings. + - ansible-galaxy - fix missing meta/runtime.yml in default galaxy skeleton used + for ansible-galaxy collection init + - ansible-galaxy - fix setting the cache for paginated responses from Galaxy + NG/AH (https://github.com/ansible/ansible/issues/77911). + - ansible-galaxy - handle unsupported versions of resolvelib gracefully. + - ansible-galaxy --ignore-certs now has proper precedence over configuration + - ansible-test - Allow disabled, unsupported, unstable and destructive integration + test targets to be selected using their respective prefixes. + - ansible-test - Allow unstable tests to run when targeted changes are made + and the ``--allow-unstable-changed`` option is specified (resolves https://github.com/ansible/ansible/issues/74213). + - ansible-test - Always remove containers after failing to create/run them. + This avoids leaving behind created containers when using podman. - ansible-test - Correctly detect when running as the ``root`` user (UID 0) on the origin host. The result of the detection was incorrectly being inverted. + - ansible-test - Delegation for commands which generate output for programmatic + consumption no longer redirect all output to stdout. The affected commands + and options are ``shell``, ``sanity --lint``, ``sanity --list-tests``, ``integration + --list-targets``, ``coverage analyze`` + - ansible-test - Delegation now properly handles arguments given after ``--`` + on the command line. - ansible-test - Don't fail if network cannot be disconnected (https://github.com/ansible/ansible/pull/77472) - - ansible-test - Fix Python real prefix detection when running in a ``venv`` - virtual environment. - - ansible-test - Fix ``windows-integration`` and ``network-integration`` when - used with the ``--docker`` option and user-provided inventory. - - ansible-test - Fix installation and usage of ``pyyaml`` requirement for the - ``import`` sanity test for collections. - - ansible-test - Fix path to inventory file for ``windows-integration`` and - ``network-integration`` commands for collections. - - ansible-test - Fix plugin loading. + - ansible-test - Fix bootstrapping of Python 3.9 on Ubuntu 20.04 remotes. + - ansible-test - Fix change detection for ansible-test's own integration tests. + - ansible-test - Fix internal validation of remote completion configuration. - ansible-test - Fix skipping of tests marked ``needs/python`` on the origin host. - ansible-test - Fix skipping of tests marked ``needs/root`` on the origin host. - - ansible-test - Fix the ``import`` sanity test to work properly when Ansible's - built-in vendoring support is in use. - - ansible-test - Fix the ``validate-modules`` sanity test to avoid double-loading - the collection loader and possibly failing on import of the ``packaging`` - module. - - ansible-test - Fix traceback in ``import`` sanity test on Python 2.7 when - ``pip`` is not available. - - ansible-test - Fix traceback in the ``validate-modules`` sanity test when - testing an Ansible module without any callables. - - ansible-test - Fix traceback when running from an install and delegating execution - to a different Python interpreter. - - ansible-test - Fix traceback when using the ``--all`` option with PowerShell - code coverage. - - ansible-test - Fix type hints. - - ansible-test - Import ``yaml.cyaml.CParser`` instead of ``_yaml.CParser`` - in the ``yamllint`` sanity test. - - ansible-test - Limit ``paramiko`` installation to versions before 2.9.0. This - is required to maintain support for systems which do not support RSA SHA-2 - algorithms. - - ansible-test - Pylint Deprecated Plugin - Use correct message symbols when - date or version is not a float or str (https://github.com/ansible/ansible/issues/77085) - - ansible-test - Relocate constants to eliminate symlink. - - ansible-test - Replace the directory portion of out-of-tree paths in JUnit - files from integration tests with the ``out-of-tree:`` prefix. - - ansible-test - Sanity tests run with the ``--requirements` option for Python - 2.x now install ``virtualenv`` when it is missing or too old. Previously it - was only installed if missing. Version 16.7.12 is now installed instead of - the latest version. - - ansible-test - Set the ``pytest`` option ``--rootdir`` instead of letting - it be auto-detected. - - ansible-test - Show an error message instead of a traceback when running outside - of a supported directory. - - ansible-test - Target integration test requirements are now correctly installed - for target environments running on the controller. - - ansible-test - The ``import`` sanity test no longer reports errors about ``packaging`` - being missing when testing collections. - - ansible-test - Update distribution test containers to version 3.1.0. - - ansible-test - Update help links to reference ``ansible-core`` instead of - ``ansible``. - - ansible-test - Update unit tests to use the ``--forked`` option instead of - the deprecated ``--boxed`` option. - - ansible-test - Use https://ci-files.testing.ansible.com/ for instance bootstrapping - instead of an S3 endpoint. - - ansible-test - Use relative paths in JUnit files generated during integration - test runs. - - ansible-test - Use the correct variable to reference the client's SSH key - when generating inventory. - - ansible-test - Use the legacy collection loader for ``import`` sanity tests - on target-only Python versions. - - ansible-test - Virtual environments managed by ansible-test now use consistent - versions of ``pip``, ``setuptools`` and ``wheel``. This avoids issues with - virtual environments containing outdated or dysfunctional versions of these - tools. The initial bootstrapping of ``pip`` is done by ansible-test from an - HTTPS endpoint instead of creating the virtual environment with it already - present. - - ansible-test - fix a typo in validate-modules. - - ansible-test - fixed support container failures (eg http-test-container) under - podman - - ansible-test compile sanity test - do not crash if a column could not be determined - for an error (https://github.com/ansible/ansible/pull/77465). - - ansible-test pslint - Fix error when encountering validation results that - are highly nested - https://github.com/ansible/ansible/issues/74151 - - ansible-vault encrypt_string - fix ``--output`` option to correctly write - encrypted string into given file (https://github.com/ansible/ansible/issues/75101) - - ansible.builtin.file modification_time supports check_mode - - ansible_facts.devices - Fix parsing of device serial number detected via sg_inq - for rhel8 (https://github.com/ansible/ansible/issues/75420) - - apt - fails to deploy deb file to old debian systems using python-apt < 0.8.9 - (https://github.com/ansible/ansible/issues/47277) - - async - Improve performance of sending async callback events by never sending - the full task through the queue (https://github.com/ansible/ansible/issues/76729) - - catch the case that cowsay is broken which would lead to missing output - - cleaning facts will now only warn about the variable name and not post the - content, which can be undesireable to disclose - - collection_loader - Implement 'find_spec' and 'exec_module' to override deprecated - importlib methods 'find_module' and 'load_module' when applicable (https://github.com/ansible/ansible/issues/74660). - - correctly inherit vars from parent in block (https://github.com/ansible/ansible/issues/75286). - - default callback - Ensure we compare FQCN also in lockstep logic, to ensure - using the FQCN of a strategy plugin triggers the correct behavior in the default - callback plugin. (https://github.com/ansible/ansible/issues/76782) - - distribution - add EuroLinux to fact gathering (https://github.com/ansible/ansible/pull/76624). - - distribution - detect tencentos and gather correct facts on the distro. - - dnf - ensure releasever is passed into libdnf as string (https://github.com/ansible/ansible/issues/77010) - - extend timeout for ansible-galaxy when communicating with the galaxy server - api, and apply it to all interactions with the api - - facts - add support for deepin distro information detection (https://github.com/ansible/ansible/issues/77286). - - first_found - fix to allow for spaces in file names (https://github.com/ansible/ansible/issues/77136) - - gather_facts - Fact gathering now continues even if it fails to read a file - - gather_facts action now handles the move of base connection plugin types into - collections to add/prevent subset argument correctly - - gather_facts/setup will not fail anymore if capsh is present but not executable - - git module fix docs and proper use of ssh wrapper script and GIT_SSH_COMMAND - depending on version. - - git module is more consistent and clearer about which ssh options are added - to git calls. - - git module no longer uses wrapper script for ssh options. - - hacking - fix incorrect usage of deprecated fish-shell redirection operators - that failed to honor ``--quiet`` flag when sourced (https://github.com/ansible/ansible/pull/77180). - - hostname - Do not require SystemdStrategy subclasses for every distro (https://github.com/ansible/ansible/issues/76792) - - hostname - Fix Debian strategy KeyError, use `SystemdStrategy` (https://github.com/ansible/ansible/issues/76124) - - hostname - Update the systemd strategy in the ``hostname`` module to not interfere - with NetworkManager (https://github.com/ansible/ansible/issues/76958) - - hostname - add hostname support for openEuler distro (https://github.com/ansible/ansible/pull/76619). - - hostname - use ``file_get_content()`` to read the file containing the host - name in the ``FileStrategy.get_permanent_hostname()`` method. This prevents - a ``TypeError`` from being raised when the strategy is used (https://github.com/ansible/ansible/issues/77025). - - include_vars, properly initialize variable as there is corner case in which - it can end up referenced and not defined - - inventory - parameterize ``disable_lookups`` in ``Constructable`` (https://github.com/ansible/ansible/issues/76769). - - inventory manager now respects --flush-cache - - junit callback - Fix traceback during automatic fact gathering when using - relative paths. - - junit callback - Fix unicode error when handling non-ASCII task paths. - - module_utils.common.yaml - The ``SafeLoader``, ``SafeDumper`` and ``Parser`` - classes now fallback to ``object`` when ``yaml`` is not available. This fixes - tracebacks when inheriting from these classes without requiring a ``HAS_YAML`` - guard around class definitions. - - parameters - handle blank values when argument is a list (https://github.com/ansible/ansible/issues/77108). - - play_context now compensates for when a conneciton sets the default to inventory_hostname - but skips adding it to the vars. - - playbook/strategy have more informative 'attribute' based errors for playbook - objects and handlers. - - python modules (new type) will now again prefer the specific python stated - in the module's shebang instead of hardcoding to /usr/bin/python. - - replace - Always return ``rc`` to ensure return values are consistent - https://github.com/ansible/ansible/pull/71963 - - script - skip in check mode if the plugin cannot determine if a change will - occur (i.e. neither `creates` or `removes` are provided). - - service - Fixed handling of sleep arguments during service restarts on AIX. - (https://github.com/ansible/ansible/issues/76877) - - service - Fixed service restarts with arguments on AIX. (https://github.com/ansible/ansible/issues/76840) - - service_facts module will now give more meaningful warnings when it fails - to gather data. - - set_fact/include_vars correctly handle delegation assignments within loops - - setup - detect docker container with check for ./dockerenv or ./dockinit (https://github.com/ansible/ansible/pull/74349). - - shell/command - only return changed as True if the task has not been skipped. - - shell/command - only skip in check mode if the options `creates` and `removes` - are both None. - - ssh connection - properly quote controlpersist path given by user to avoid - issues with spaces and other characters - - ssh connection avoid parsing ssh cli debug lines as they can match expected - output at high verbosities. - - ssh connection now uses more correct host source as play_context can ignore - loop/delegation variations. - - sudo become plugin, fix handling of non interactive flags, previous substitution - was too naive - - systemd - check if service is alias so it gets enabled (https://github.com/ansible/ansible/issues/75538). - - systemd - check if service is indirect so it gets enabled (https://github.com/ansible/ansible/issues/76453). - - task_executor reverts the change to push facts into delegated vars on loop - finalization as result managing code already handles this and was duplicating - effort to wrong result. - - template lookup - restore inadvertently deleted default for ``convert_data`` - (https://github.com/ansible/ansible/issues/77004) - - to_json/to_nice_json filters defaults back to unvaulting/no unsafe packing. - - unarchive - Fix zip archive file listing that caused issues with content postprocessing - (https://github.com/ansible/ansible/issues/76067). - - unarchive - Make extraction work when the LANGUAGE environment variable is - set to a non-English locale. - - unarchive - apply ``owner`` and ``group`` permissions to top folder (https://github.com/ansible/ansible/issues/35426) - - unarchive - include the original error when a handler cannot manage the archive - (https://github.com/ansible/ansible/issues/28977). - - unarchive - the ``io_buffer_size`` option added in 2.12 was not accepted by - the module (https://github.com/ansible/ansible/pull/77271). - - urls - Allow ``ca_path`` to point to a bundle containing multiple PEM certs - (https://github.com/ansible/ansible/issues/75015) - - urls/uri - Address case where ``HTTPError`` isn't fully initialized due to - the error, and is missing certain methods and attributes (https://github.com/ansible/ansible/issues/76386) - - user - allow ``password_expiry_min`` and ``password_expiry_min`` to be set - to ``0`` (https://github.com/ansible/ansible/issues/75017) - - user - allow password min and max to be set at the same time (https://github.com/ansible/ansible/issues/75017) - - user - update logic to check if user exists or not in MacOS. - - validate_argument_spec - Skip suboption validation if the top level option - is an invalid type (https://github.com/ansible/ansible/issues/75612). - - vault - Warn instead of fail for missing vault IDs if at least one valid vault - secret is found. - - winrm - Ensure ``kinit`` is run with the same ``PATH`` env var as the Ansible - process - - yum - prevent storing unnecessary cache data by running `yum makecache fast` - (https://github.com/ansible/ansible/issues/76336) - deprecated_features: - - ansible-core - Remove support for Python 2.6. - - ansible-test - Remove support for Python 2.6. - - ssh connection plugin option scp_if_ssh in favor of ssh_transfer_method. - known_issues: - - get_url - document ``check_mode`` correctly with unreliable changed status - (https://github.com/ansible/ansible/issues/65687). - major_changes: - - Jinja2 Controller Requirement - Jinja2 3.0.0 or newer is required for the - control node (the machine that runs Ansible) (https://github.com/ansible/ansible/pull/75881) - - Templating - remove ``safe_eval`` in favor of using ``NativeEnvironment`` - but utilizing ``literal_eval`` only in cases when ``safe_eval`` was used (https://github.com/ansible/ansible/pull/75587) - minor_changes: - - Action Plugins - Add helper method for argument spec validation, and extend - to pause and async_wrapper - - Added AIX root CA certs folders - enhance the TLS support in ``uri`` task - on AIX - - Added ``module_utils.compat.typing`` to facilitate type-hinting on all supported - Python versions. - - Ansible.Basic - small changes to allow use in PowerShell modules running on - non-Windows platforms (https://github.com/ansible/ansible/pull/76924). - - AnsibleModule.run_command() now has a toggle to allow caller to decide to - handle exceptions from executing the command itself - - Attach concat function to an environment class (https://github.com/ansible/ansible/pull/76282) - - Clarify in a comment that unrolling an iterator in ``Templar._finalize`` is - actually necessary. Also switch to using the ``_unroll_iterator`` decorator - directly to deduplicate code in ``Templar._finalize``. (https://github.com/ansible/ansible/pull/76436) - - Installation - modernize our python installation, to reduce dynamic code in - setup.py, and migrate what is feasible to setup.cfg. This will enable shipping - wheels in the future. - - PlayIterator - introduce public methods to access ``PlayIterator._host_states`` - (https://github.com/ansible/ansible/pull/74416) - - PlayIterator - use enums for Iterating and Failed states (https://github.com/ansible/ansible/pull/74511) - - Reduce number of iterations through PlayIterator (https://github.com/ansible/ansible/pull/74175) - - Remove more Python 2.x compatibility code from controller (https://github.com/ansible/ansible/pull/77320). - - Start of moving away from using Six, Python 2 and 3 compatibility library - (https://github.com/ansible/ansible/pull/75863) - - The collection loader now reports a Python warning if an attempt is made to - install the Ansible collection loader a second time. Previously this condition - was reported using an Ansible warning. - - '``ansible-galaxy collection [install|verify]`` - allow user-provided signature - sources in addition to those from the Galaxy server. Each collection entry - in a requirements file can specify a ``signatures`` key followed by a list - of sources. Collection name(s) provided on the CLI can specify additional - signature sources by using the ``--signatures`` CLI option. Signature sources - should be URIs that can be opened with ``urllib.request.urlopen()``, such - as "https://example.com/path/to/detached_signature.asc" or "file:///path/to/detached_signature.asc". - The ``--keyring`` option must be specified if signature sources are provided.' - - '``ansible-galaxy collection [install|verify]`` - use gpg to verify the authenticity - of the signed ``MANIFEST.json`` with ASCII armored detached signatures provided - by the Galaxy server. The keyring (which is not managed by ``ansible-galaxy``) - must be provided with the ``--keyring`` option to use signature verification. - If no ``--keyring`` is specified and the collection to ``install|verify`` - has associated detached signatures on the Galaxy server, a warning is provided.' - - '``ansible-galaxy collection install`` - Add a global configuration to modify - the required number of signatures that must verify the authenticity of the - collection. By default, the number of required successful signatures is 1. - Set this option to ``all`` to require all signatures verify the collection. - To ensure signature verification fails if there are no valid signatures, prepend - the value with ''+'', such as ``+all`` or ``+1``.' - - '``ansible-galaxy collection install`` - Add a global ignore list for gpg - signature errors. This can be used to ignore certain signatures when the number - of required successful signatures is all. When the required number of successful - signatures is a positive integer, the only effect this has is to display fewer - errors to the user on failure (success is determined by having the minimum - number of successful signatures, in which case all errors are disregarded).' - - '``ansible-galaxy collection install`` - Add a global toggle to turn off GPG - signature verification.' - - '``ansible-galaxy collection install`` - Store Galaxy server metadata alongside - installed collections for provenance. Signatures obtained from the Galaxy - server can be used for offline verification with ``ansible-galaxy collection - verify --offline``.' - - ansible-console - Provide a way to customize the stdout callback - - ansible-core modules - Remove unused Python shebangs from built-in modules. - - ansible-doc metadata dump - add option ``--no-fail-on-errors`` which allows - to not fail the ansible-doc invocation when errors happen during docs parsing - or processing. Instead they are reported in the JSON result in an ``error`` - key for the affected plugins (https://github.com/ansible/ansible/pull/77035). - - ansible-galaxy - the option to skip certificate verification now also applies - when cloning via SCM (git/hg) (https://github.com/ansible/ansible/issues/41077) - - ansible-test - Accept new-style Python modules without a shebang. - - ansible-test - Add ``--version`` support to show the ansible-core version. - - ansible-test - Add support for ``rhel/8.5`` remote instances. - - ansible-test - Add support for remote testing of FreeBSD 12.3. - - ansible-test - Add support for running container tests with ``podman remote`` - (https://github.com/ansible/ansible/pull/75753) - - ansible-test - Added the ``fedora35`` test container. - - ansible-test - Change the maximum number of open files in a test container - from the default to ``10240``. - - ansible-test - Declare public dependencies of ansible-core and use to limit - unguarded imports in plugins. - - ansible-test - Importing ``distutils`` now results in an error. - - ansible-test - Installation of ``cryptography`` is no longer version constrained - when ``openssl`` 1.1.0 or later is installed. - - ansible-test - Miscellaneous code cleanup and type hint fixes. - - ansible-test - PowerShell in the ``base`` and ``default`` containers has been - upgraded to version 7.1.4. - - ansible-test - Remove RHEL 8.4 remote (``rhel/8.4``) support. - - ansible-test - Remove ``idna`` constraint. - - ansible-test - Remove obsolete ``MAXFD`` display. - - ansible-test - Remove obsolete constraints for Python 2.6. - - ansible-test - Remove support for FreeBSD 12.2 remote provisioning. - - ansible-test - Remove support for macOS 11.1 remote provisioning. - - ansible-test - Remove support for provisioning remote AIX instances. - - ansible-test - Remove the ``centos8`` test container since CentOS 8 will reach - end-of-life soon. - - ansible-test - Remove the ``fedora33`` test container since Fedora 33 will - reach end-of-life soon. - - ansible-test - Remove unused Python 2.x compatibility code. - - ansible-test - Removed support for Sherlock from the Azure provisioning plugin. - - ansible-test - Removed used ``MarkupSafe`` constraint for Python 3.5 and earlier. - - ansible-test - Requirements for the plugin import test are now frozen. - - ansible-test - Shellcheck in the ``base`` and ``default`` containers has been - upgraded to version 0.7.0. - - ansible-test - Stop early with an error if the current working directory contains - an invalid collection namespace or name. - - ansible-test - The ``--help`` option is now available when an unsupported - cwd is in use. - - ansible-test - The ``--help`` output now shows the same instructions about - cwd as would be shown in error messages if the cwd is unsupported. - - ansible-test - The ``pip`` and ``wheel`` packages are removed from all sanity - test virtual environments after installation completes to reduce their size. - Previously they were only removed from the environments used for the ``import`` - sanity test. - - ansible-test - The explanation about cwd usage has been improved to explain - more clearly what is required. - - ansible-test - The hash for all managed sanity test virtual environments has - changed. Containers that include ``ansible-test sanity --prime-venvs`` will - need to be rebuilt to continue using primed virtual environments. - - ansible-test - Update ``base`` container to version 2.1.0. - - ansible-test - Update ``base`` container to version 2.2.0. - - ansible-test - Update ``default`` containers to version 5.2.0. - - ansible-test - Update ``default`` containers to version 5.4.0. - - ansible-test - Update ``default`` containers to version 5.5.0. - - ansible-test - Update ``default`` containers to version 5.6.2. - - ansible-test - Update ``default`` containers to version 5.7.0. - - ansible-test - Update ``default`` containers to version 5.8.0. - - ansible-test - Update ``pip`` used to bootstrap remote FreeBSD instances from - version 20.3.4 to 21.3.1. - - ansible-test - Update sanity test requirements. - - ansible-test - Update the NIOS test plugin container to version 1.4.0. - - ansible-test - Update the ``alpine`` container to version 3.3.0. This updates - the base image from 3.14.2 to 3.15.0, which includes support for installing - binary wheels using pip. - - ansible-test - Update the ``base`` and ``default`` containers from Python - 3.10.0rc2 to 3.10.0. - - ansible-test - Update the ``base`` and ``default`` containers from a Ubuntu - 18.04 to Ubuntu 20.04 base image. - - ansible-test - Update the ``default`` containers to version 5.1.0. - - ansible-test - Update the ``galaxy`` test plugin to get its container from - a copy on quay.io. - - ansible-test - Update the ``openshift`` test plugin to get its container from - a copy on quay.io. - - ansible-test - Use Python 3.10 as the default Python version for the ``base`` - and ``default`` containers. - - ansible-test - add macOS 12.0 as a remote target (https://github.com/ansible/ansible/pull/76328) - - ansible-test - handle JSON decode error gracefully in podman environment. - - ansible-test pslint - Added the `AvoidLongLines <https://github.com/PowerShell/PSScriptAnalyzer/blob/master/docs/Rules/AvoidLongLines.md>`_ - rule set to a length of 160. - - ansible-test pslint - Added the `PlaceCloseBrace <https://github.com/PowerShell/PSScriptAnalyzer/blob/master/docs/Rules/PlaceCloseBrace.md>`_ - rule set to enforce close braces on a newline. - - ansible-test pslint - Added the `PlaceOpenBrace <https://github.com/PowerShell/PSScriptAnalyzer/blob/master/docs/Rules/PlaceOpenBrace.md>`_ - rule set to enforce open braces on the same line and a subsequent newline. - - ansible-test pslint - Added the `UseConsistentIndentation <https://github.com/PowerShell/PSScriptAnalyzer/blob/master/docs/Rules/UseConsistentIndentation.md>`_ - rule to enforce indentation is done with 4 spaces. - - ansible-test pslint - Added the `UseConsistentWhitespace <https://github.com/PowerShell/PSScriptAnalyzer/blob/master/docs/Rules/UseConsistentWhitespace.md>`_ - rule to enforce whitespace consistency in PowerShell. - - ansible-test pslint - Updated ``PowerShellScriptAnalyzer`` to 1.20.0 - - ansible-test sanity validate-modules - the validate-modules sanity test now - also checks the documentation of documentable plugin types (https://github.com/ansible/ansible/pull/71734). - - ansible-test validate-modules sanity test - add more schema checks to improve - quality of plugin documentation (https://github.com/ansible/ansible/pull/77268). - - ansible-test validate_modules - allow ``choices`` for return values (https://github.com/ansible/ansible/pull/76009). - - apt - Add support for using ">=" in package version number matching. - - apt - Adds APT option ``--allow-change-held-packages`` as module parameter - ``allow_change_held_packages`` to allow APT up- or downgrading a package which - is on APTs hold list (https://github.com/ansible/ansible/issues/65325) - - auto inventory plugin will now give plugin loading information on verbose - output - - callbacks - Add result serialization format options to ``_dump_results`` allowing - plugins such as the ``default`` callback to emit ``YAML`` serialized task - results in addition to ``JSON`` - - dnf - add more specific error message for GPG validation (https://github.com/ansible/ansible/issues/76192) - - env lookup, add default option - - facts - report prefix length for IPv4 addresses in Linux network facts. - - get_parsable_locale now logs result when in debug mode. - - git - display the destination directory path in error msg when local_mods - detects local modifications conflict so that users see the exact location - - iptables - add the ``chain_management`` parameter that controls iptables chain - creation and deletion - - jinja2_native - keep same behavior on Python 3.10. - - junit callback - Add support for replacing the directory portion of out-of-tree - relative task paths with a placeholder. - - k8s - scenario guides for kubernetes migrated to ``kubernetes.core`` collection. - - module_utils.distro - Add missing ``typing`` import from original code. - - package_facts - add pkg_info support for OpenBSD and NetBSD (https://github.com/ansible/ansible/pull/76580) - - services_facts - Add support for openrc (https://github.com/ansible/ansible/pull/76373). - - setting DEFAULT_FACT_PATH is being deprecated in favor of the generic module_defaults - keyword - - uri - Avoid reading the response body when not needed - - uri - Eliminate multiple requests to determine the final URL for file naming - with ``dest`` - - validate-modules - do some basic validation on the ``M(...)``, ``U(...)``, - ``L(..., ...)`` and ``R(..., ...)`` documentation markups (https://github.com/ansible/ansible/pull/76262). - - vmware - migrated vmware scenario guides to `community.vmware` repo. - - yum, dnf - add sslverify option to temporarily disable certificate validation - for a repository - release_summary: '| Release Date: 2022-04-11 - - | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__ - - ' - removed_features: - - Remove deprecated ``Templar.set_available_variables()`` method (https://github.com/ansible/ansible/issues/75828) - - cli - remove deprecated ability to set verbosity before the sub-command (https://github.com/ansible/ansible/issues/75823) - - copy - remove deprecated ``thirsty`` alias (https://github.com/ansible/ansible/issues/75824) - - psrp - Removed fallback on ``put_file`` with older ``pypsrp`` versions. Users - must have at least ``pypsrp>=0.4.0``. - - url_argument_spec - remove deprecated ``thirsty`` alias for ``get_url`` and - ``uri`` modules (https://github.com/ansible/ansible/issues/75825, https://github.com/ansible/ansible/issues/75826) - security_fixes: - - Do not include params in exception when a call to ``set_options`` fails. Additionally, - block the exception that is returned from being displayed to stdout. (CVE-2021-3620) - codename: Nobody's Fault but Mine - fragments: - - ' 75876-fix-parsing-of-device-serial-number-for-rhel-8.yaml' - - 47277-fails-to-deploy-deb-when-has-no-architecture-attribute.yml - - 50771-uri-improvements.yml - - 50897-include_role-any_errors_fatal.yaml - - 67616-galaxy-scm-cloning-ignore-certs.yml - - 69776-add-aix-root-ca-certs-paths.yml - - 71627-add_host-group_by-fix-changed_when-in-loop.yml - - 71734-validate-plugins.yml - - 72405-git-module-local_mods-show-conflict-destination-directory.yml - - 72592-catch-broken-cowsay.yaml - - 73024-unarchive-apply-permissions-top-folder.yml - - 73629_allow-change-held-packages.yml - - 73657-include-parser-error-fail.yml - - 74127-bad-filter-2.yml - - 74349-improve-docker-detection.yml - - 74416-PlayIterator-_host_states-setters.yml - - 74511-PlayIterator-states-enums.yml - - 75002-apt_min_version.yml - - 75015-ca-path-bundle.yml - - 75017-user-password-expiry.yml - - 75101-ansible-vault-encrypt_string-output-file.yml - - 75538-systemd-alias-check.yml - - 75540-warn-invalid-configured-vault-secret-files.yaml - - 75560-interp-discovery-family-fallback.yml - - 75635-fix-role-argspec-suboption-validation.yml - - 75642-free-strat-fix-executing-includes.yml - - 75671-ansible-doc-ignore-deprecations.yml - - 75823-cli-remove-deprecated-verbosity-before-sub-cmd.yml - - 75824-copy-remove-deprecated-thirsty-alias.yml - - 75825-75826-get_url-uri-remove-deprecated-thirsty-alias.yml - - 75828-remove-deprecated-set_available_variables.yml - - 75845-ansible-galaxy-support-collection-skeleton.yml - - 75863-start-move-away-six.yml - - 75881-jinja2-3-min.yml - - 76009-validate-modules-choices-return-value.yml - - 76011-loop-variable-in-use-warning.yml - - 76049-task-debugger-run_once.yml - - 76069-fix-unarchive-file-listing-in-zip.yaml - - 76108-fix-ansible-galaxy-collection-verify-help.yaml - - 76124-hostname-debianstrategy.yml - - 76192-dnf-specific-gpg-error.yml - - 76225-update-collection-loader-for-python3.yaml - - 76235-fix-ansible-doc-builtin-legacy.yml - - 76262-validate-modules-validate-markup.yml - - 76316-galaxy-install-role-inaccessible-dir-fix.yml - - 76336-yum-makecache-fast.yml - - 76343-tencentos-dnf.yml - - 76353-fix-check-mode-skipping.yaml - - 76356-yumdnf-sslverify.yml - - 76365-unarchive-include-stderr-in-error-message.yml - - 76373-add-openrc-support-to-service_facts.yaml - - 76375-fix-module-logging-WSL2.yml - - 76378-iptables-chain-management.yml - - 76379-set-finalize-on-new-env.yml - - 76386-httperror-no-fp.yml - - 76433-get_url-document-check_mode.yml - - 76453-indirect-systemd-status.yml - - 76530-connection-password-file-tb-fix.yml - - 76542-fix-unarchive-on-nenglish-locales.yml - - 76579-fix-ansible-galaxy-collection-version-error.yml - - 76580-add-pkg_info-support-to-package_facts.yml - - 76610-empty-template-none.yml - - 76672-fix-end_play-multiple_plays.yml - - 76681-ansible-galaxy-add-gpg-signature-verification.yaml - - 76690-fix-ansible-galaxy-collection-verify-modified-content.yaml - - 76729-async-callback-perf.yml - - 76735-ansible-galaxy-fix-ignore-certs.yaml - - 76751-facts-check-datafile-before-close.yml - - 76769-inventory-constructable-disable-lookups.yml - - 76782-fqcn-compare-lockstep-strategies.yml - - 76792-hostname-all-systemd.yml - - 76840-added-restart-to-the-argument-condition-for-AIX.yml - - 76877-added-sleep-to-the-service-restart-for-AIX.yml - - 76924-powershell-ansible.basic-support-non-windows.yml - - 76958-hostname-systemd-nm.yaml - - 77004-restore-missing-default.yml - - 77010-dnf-ensure-releasever-string.yml - - 77035-ansible-doc-metadata-dump-errors.yml - - 77050-add-pkg-mgr-support-for-al2022.yaml - - 77074-hostname-fix-typeerror-in-filestrategy.yml - - 77086-correct-pylint-symbols.yml - - 77108_params_blank.yml - - 77136-first_found-spaces-in-names.yml - - 77180-fix-fish-env-setup-script.yml - - 77193-linux-networking-facts-Provide-IPv4-prefix.yml - - 77210-fix-collection-filter-test-redirects.yml - - 77268-validate-plugins.yml - - 77271-unarchive.yml - - 77275-add-support-for-deepin-distro-info-detection.yaml - - 77320-python-2.yml - - 77368-rhel-os-family-compat.yaml - - 77465-ansible-test-compile-crash.yml - - 77472-ansible-test-network-disconnect-warning.yml - - 77493-ansible-galaxy-find-git-executable-before-using.yaml - - ModuleUtils.SID-long-username.yml - - action-plugin-arg-spec.yml - - ansible-console-callback.yaml - - ansible-core-python-2.6.yaml - - ansible-module-shebangs.yml - - ansible-test-alpine3-update.yaml - - ansible-test-azure-sherlock.yml - - ansible-test-bootstrap-pip.yml - - ansible-test-ci-files.yaml - - ansible-test-code-cleanup.yml - - ansible-test-collection-identifier.yml - - ansible-test-constraints-cleanup.yaml - - ansible-test-constraints.yaml - - ansible-test-container-images.yml - - ansible-test-container-removal.yml - - ansible-test-default-base-containers-base-update.yaml - - ansible-test-default-base-containers-python-3.10.yaml - - ansible-test-default-container-update-5.2.0.yaml - - ansible-test-default-container-update-5.4.0.yaml - - ansible-test-default-container-update-5.5.0.yaml - - ansible-test-default-container-update-5.6.2.yaml - - ansible-test-default-container-update-5.7.0.yaml - - ansible-test-default-container-update-5.8.0.yaml - - ansible-test-default-container-update.yaml - - ansible-test-delegation-inventory.yaml - - ansible-test-delegation-pythonpath.yml - - ansible-test-distro-containers-3.1.0.yaml - - ansible-test-docker-ulimit.yml - - ansible-test-fedora35.yml - - ansible-test-fix-type-hints.yml - - ansible-test-fix-typo-validate-modules.yaml - - ansible-test-freebsd-12.3.yaml - - ansible-test-help-cwd.yml - - ansible-test-import-collections.yml - - ansible-test-import-distutils.yaml - - ansible-test-inventory-path.yaml - - ansible-test-inventory-ssh-key.yml - - ansible-test-junit-relative-paths.yml - - ansible-test-links.yml - - ansible-test-managed-venv.yml - - ansible-test-maxfd.yaml - - ansible-test-nios-container.yml - - ansible-test-paramiko-constraint.yaml - - ansible-test-plugin-loading.yml - - ansible-test-podman-remote.yaml - - ansible-test-podman-support-containers.yaml - - ansible-test-powershell-coverage-all.yaml - - ansible-test-pyopenssl.yaml - - ansible-test-pytest-forked.yml - - ansible-test-pytest-rootdir.yml - - ansible-test-python-2.6.yaml - - ansible-test-relocate-constants.yaml - - ansible-test-remote-cleanup.yaml - - ansible-test-remove-aix-provisioning.yaml - - ansible-test-requirements-target.yaml - - ansible-test-rhel-8.4.yml - - ansible-test-rhel85.yaml - - ansible-test-sanity-import-loader.yml - - ansible-test-sanity-import-no-pip.yml - - ansible-test-sanity-import.yml - - ansible-test-sanity-requirements-update.yaml - - ansible-test-sanity-vendoring.yml - - ansible-test-target-filter.yml - - ansible-test-unsupported-directory-traceback.yaml - - ansible-test-validate-modules-collection-loader.yml - - ansible-test-validate-modules-no-callable.yml - - ansible-test-venv-real-prefix.yaml - - ansible-test-windows-default.yaml - - ansible-test-yaml-import.yaml - - ansible_galaxy_timeout.yml - - ansible_test.yml - - auto_squeal.yml - - avoid-set_options-leak.yaml - - clarify-unroll.yml - - clean_facts_values.yml - - compat-typing.yml - - config_fix_terms.yml - - default-callback-result-format.yml - - deprecate_default_fact_path_setting.yml - - deprecate_scp_if_ssh.yml - - distro-module_utils-typing.yml - - drop-target-2.6-support.yml - - environment-concat.yml - - evn_default.yml - - file_modification_times_support_check_mode.yml - - finalize-not-in-globals.yml - - fix_block_var_inh.yml - - fix_fax_delegation_loops.yml - - fix_sudo_flag_mangling.yml - - fqn-module-cache.yml - - galaxy-build-files-ignore.yml - - galaxy-import-level-fix.yml - - gather_facts_collections.yml - - git_fixes.yml - - handle_connection_cornercase.yml - - include_vars_failed.yml - - inventory_manager_flush_cache.yml - - jinja2_native-literal_eval-py310.yml - - json_filter_fix.yml - - junit-callback-task-path-unicode.yml - - log_locale_selection_results.yml - - macos12-ci-image.yml - - migrated_k8s_scenario_guides.yml - - modernize-install.yaml - - module_utils-yaml-fix.yml - - more_targeted_attribute_errors.yml - - nativejinjatext-yaml-representer.yml - - nativejinjaunsafetext-yaml-representer.yml - - openEuler_hostname.yml - - pslint-sanity-warning.yml - - psrp-put_file-dep.yaml - - pull_fix_limit.yml - - pwsh-pssa-update.yml - - reduce-playiterator-iterations.yml - - replace-rc-return-values.yml - - restore_python_shebang_adherence.yml - - runc_command_exception_toggle.yml - - service_facts_warnings.yml - - set_fact_delegation.yml - - ssh_debug_noparse.yml - - ssh_quote_cp.yml - - ssh_use_right_host.yml - - support_eurolinux.yml - - templar-correct-environment_class-template.yml - - templating-safe-eval-replaced-native_environment.yml - - user_mac.yaml - - v2.13.0-initial-commit.yaml - - v2.13.0b0_summary.yaml - - vmware_sceanrio.yml - - win_LinkUtil-ignore-LIB.yml - - winrm-kinit-path.yml - release_date: '2022-04-11' - 2.13.0b1: - changes: - bugfixes: - - ansible - Exclude Python 2.6 from Python interpreter discovery. - - arg_spec - Fix incorrect ``no_log`` warning when a parameter alias is used - (https://github.com/ansible/ansible/pull/77576) - - variablemanager, more efficient read of vars files - minor_changes: - - ansible-test - Update ``default`` containers to version 5.9.0. - release_summary: '| Release Date: 2022-04-25 - - | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__ - - ' - codename: Nobody's Fault but Mine - fragments: - - 77576-arg_spec-no_log-aliases.yml - - ansible-test-default-container-update-5.9.0.yaml - - python-2.6-discovery.yml - - v2.13.0b1_summary.yaml - - vm_more_efficient.yml - release_date: '2022-04-25' - 2.13.0rc1: - changes: - bugfixes: - - Prevent losing unsafe on results returned from lookups (https://github.com/ansible/ansible/issues/77535) - release_summary: '| Release Date: 2022-05-02 - - | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__ - - ' - codename: Nobody's Fault but Mine - fragments: - - 77535-prevent-losing-unsafe-lookups.yml - - v2.13.0rc1_summary.yaml - release_date: '2022-05-02' - 2.13.1: - changes: - release_summary: '| Release Date: 2022-06-20 - - | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__ - - ' - codename: Nobody's Fault but Mine - fragments: - - v2.13.1_summary.yaml - release_date: '2022-06-20' - 2.13.1rc1: - changes: - bugfixes: - - Add PyYAML >= 5.1 as a dependency of ansible-core to be compatible with Python - 3.8+. - - ansible-config dump - Only display plugin type headers when plugin options - are changed if --only-changed is specified. - - ansible-galaxy - handle unsupported versions of resolvelib gracefully. - - ansible-test - Fix internal validation of remote completion configuration. - ansible-test - Prevent ``--target-`` prefixed options for the ``shell`` command from being combined with legacy environment options. - ansible-test - Sanity test output with the ``--lint`` option is no longer @@ -801,17 +163,166 @@ releases: is connected to, if any. This maintains consistent behavior between local testing and CI systems, which typically do not provide a TTY. Tests which require a TTY should use pexpect or another mechanism to create a PTY. + - ansible-test - Temporary executables are now verified as executable after + creation. Without this check, path injected scripts may not be found, typically + on systems with ``/tmp`` mounted using the "noexec" option. This can manifest + as a missing Python interpreter, or use of the wrong Python interpreter, as + well as other error conditions. + - 'ansible-test - Test configuration for collections is now parsed only once, + prior to delegation. Fixes issue: https://github.com/ansible/ansible/issues/78334' + - ansible-test - Test containers are now run with the ``--tmpfs`` option for + ``/tmp``, ``/run`` and ``/run/lock``. This allows use of containers built + without the ``VOLUME`` instruction. Additionally, containers with those volumes + defined no longer create anonymous volumes for them. This avoids leaving behind + volumes on the container host after the container is stopped and deleted. + - ansible-test - The ``shell`` command no longer redirects all output to stdout + when running a provided command. Any command output written to stderr will + be mixed with the stderr output from ansible-test. + - ansible-test - The ``shell`` command no longer requests a TTY when using delegation + unless an interactive shell is being used. An interactive shell is the default + behavior when no command is given to pass to the shell. + - ansible-test - ansible-doc sanity test - Correctly determine the fully-qualified + collection name for plugins in subdirectories, resolving https://github.com/ansible/ansible/issues/78490. + - ansible-test - validate-modules - Documentation-only modules, used for documenting + actions, are now allowed to have docstrings (https://github.com/ansible/ansible/issues/77972). + - ansible-test compile sanity test - do not crash if a column could not be determined + for an error (https://github.com/ansible/ansible/pull/77465). + - apt - Fix module failure when a package is not installed and only_upgrade=True. + Skip that package and check the remaining requested packages for upgrades. + (https://github.com/ansible/ansible/issues/78762) + - apt - don't actually update the cache in check mode with update_cache=true. + - apt - don't mark existing packages as manually installed in check mode (https://github.com/ansible/ansible/issues/66413). + - apt - fix package selection to include /etc/apt/preferences(.d) (https://github.com/ansible/ansible/issues/77969) - apt module now correctly handles virtual packages. + - arg_spec - Fix incorrect ``no_log`` warning when a parameter alias is used + (https://github.com/ansible/ansible/pull/77576) + - callback plugins - do not crash when ``exception`` passed from a module is + not a string (https://github.com/ansible/ansible/issues/75726, https://github.com/ansible/ansible/pull/77781). + - cli now emits clearer error on no hosts selected + - config, ensure that pulling values from configmanager are templated if possible. + - display itself should be single source of 'verbosity' level to the engine. + - dnf - Condense a few internal boolean returns. + - dnf - The ``nobest`` option now also works for ``state=latest``. + - dnf - The ``skip_broken`` option is now used in installs (https://github.com/ansible/ansible/issues/73072). + - dnf - fix output parsing on systems with ``LANGUAGE`` set to a language other + than English (https://github.com/ansible/ansible/issues/78193) + - facts - fix IP address discovery for specific interface names (https://github.com/ansible/ansible/issues/77792). + - 'facts - fix processor facts on AIX: correctly detect number of cores and + threads, turn ``processor`` into a list (https://github.com/ansible/ansible/pull/78223).' + - fetch_file - Ensure we only use the filename when calculating a tempfile, + and do not incude the query string (https://github.com/ansible/ansible/issues/29680) + - fetch_file - properly split files with multiple file extensions (https://github.com/ansible/ansible/pull/75257) + - file - setting attributes of symbolic links or files that are hard linked + no longer fails when the link target is unspecified (https://github.com/ansible/ansible/issues/76142). + - file backed cache plugins now handle concurrent access by making atomic updates + to the files. + - git module fix docs and proper use of ssh wrapper script and GIT_SSH_COMMAND + depending on version. + - if a config setting prevents running ansible it should at least show it's + "origin". + - include module - add docs url to include deprecation message (https://github.com/ansible/ansible/issues/76684). + - items2dict - Handle error if an item is not a dictionary or is missing the + required keys (https://github.com/ansible/ansible/issues/70337). + - local facts - if a local fact in the facts directory cannot be stated, store + an error message as the fact value and emit a warning just as if just as if + the facts execution has failed. The stat can fail e.g. on dangling symlinks. - lookup plugin - catch KeyError when lookup returns dictionary (https://github.com/ansible/ansible/pull/77789). + - module_utils - Make distro.id() report newer versions of OpenSuSE (at least + >=15) also report as ``opensuse``. They report themselves as ``opensuse-leap``. + - module_utils.service - daemonize - Avoid modifying the list of file descriptors + while iterating over it. + - null_representation config entry changed to 'raw' as it must allow 'none/null' + and empty string. + - paramiko - Add a new option to allow paramiko >= 2.9 to easily work with all + devices now that rsa-sha2 support was added to paramiko, which prevented communication + with numerous platforms. (https://github.com/ansible/ansible/issues/76737) + - paramiko - Add back support for ``ssh_args``, ``ssh_common_args``, and ``ssh_extra_args`` + for parsing the ``ProxyCommand`` (https://github.com/ansible/ansible/issues/78750) + - password lookup does not ignore k=v arguments anymore. + - pause module will now report proper 'echo' vs always being true. - pip - fix cases where resolution of pip Python module fails when importlib.util has not already been imported - plugin loader - Sort results when fuzzy matching plugin names (https://github.com/ansible/ansible/issues/77966). - plugin loader will now load config data for plugin by name instead of by file to avoid issues with the same file being loaded under different names (fqcn + short name). + - plugin loader, now when skipping a plugin due to an abstract method error + we provide that in 'verbose' mode instead of totally obscuring the error. + The current implementation assumed only the base classes would trigger this + and failed to consider 'in development' plugins. + - prevent lusermod from using group name instead of group id (https://github.com/ansible/ansible/pull/77914) + - prevent type annotation shim failures from causing runtime failures (https://github.com/ansible/ansible/pull/77860) - psrp connection now handles default to inventory_hostname correctly. + - roles, fixed issue with roles loading paths not contained in the role itself + when using the `_from` options. + - setup - Adds a default value to ``lvm_facts`` when lvm or lvm2 is not installed + on linux (https://github.com/ansible/ansible/issues/17393) + - shell plugins now give a more user friendly error when fed the wrong type + of data. + - template module/lookup - fix ``convert_data`` option that was effectively + always set to True for Jinja macros (https://github.com/ansible/ansible/issues/78141) + - unarchive - if unzip is available but zipinfo is not, use unzip -Z instead + of zipinfo (https://github.com/ansible/ansible/issues/76959). + - uri - properly use uri parameter use_proxy (https://github.com/ansible/ansible/issues/58632) + - uri module - failed status when Authentication Bearer used with netrc, because + Basic authentication was by default. Fix now allows to ignore netrc by changing + use_netrc=False (https://github.com/ansible/ansible/issues/74397). + - urls - Guard imports of ``urllib3`` by catching ``Exception`` instead of ``ImportError`` + to prevent exceptions in the import process of optional dependencies from + preventing use of ``urls.py`` (https://github.com/ansible/ansible/issues/78648) + - user - Fix error "Permission denied" in user module while generating SSH keys + (https://github.com/ansible/ansible/issues/78017). + - user - fix creating a local user if the user group already exists (https://github.com/ansible/ansible/pull/75042) + - user module - Replace uses of the deprecated ``spwd`` python module with ctypes + (https://github.com/ansible/ansible/pull/78050) + - validate-modules - fix validating version_added for new options. + - variablemanager, more efficient read of vars files + - vault secrets file now executes in the correct context when it is a symlink + (not resolved to canonical file). + - wait_for - Read file and perform comparisons using bytes to avoid decode errors + (https://github.com/ansible/ansible/issues/78214) + - winrm - Ensure ``kinit`` is run with the same ``PATH`` env var as the Ansible + process - winrm connection now handles default to inventory_hostname correctly. + - yaml inventory plugin - fix the error message for non-string hostnames (https://github.com/ansible/ansible/issues/77519). + - yum - fix traceback when ``releasever`` is specified with ``latest`` (https://github.com/ansible/ansible/issues/78058) + deprecated_features: + - Deprecate ability of lookup plugins to return arbitrary data. Lookup plugins + must return lists, failing to do so will be an error in 2.18. (https://github.com/ansible/ansible/issues/77788) + - Encryption - Deprecate use of the Python crypt module due to it's impending + removal from Python 3.13 + - PlayContext.verbosity is deprecated and will be removed in 2.18. Use ansible.utils.display.Display().verbosity + as the single source of truth. + - '``DEFAULT_FACT_PATH``, ``DEFAULT_GATHER_SUBSET`` and ``DEFAULT_GATHER_TIMEOUT`` + are deprecated and will be removed in 2.18. Use ``module_defaults`` keyword + instead.' + - '``PlayIterator`` - deprecate ``cache_block_tasks`` and ``get_original_task`` + which are noop and unused.' + - '``Templar`` - deprecate ``shared_loader_obj`` option which is unused. ``ansible.plugins.loader`` + is used directly instead.' + - listify_lookup_plugin_terms, deprecate 'loader/dataloader' parameter as it + not used. + - vars plugins - determining whether or not to run ansible.legacy vars plugins + with the class attribute REQUIRES_WHITELIST is deprecated, set REQUIRES_ENABLED + instead. + major_changes: + - Move handler processing into new ``PlayIterator`` phase to use the configured + strategy (https://github.com/ansible/ansible/issues/65067) + - ansible - At startup the filesystem encoding and locale are checked to verify + they are UTF-8. If not, the process exits with an error reporting the errant + encoding. + - ansible - Increase minimum Python requirement to Python 3.9 for CLI utilities + and controller code + - ansible-test - At startup the filesystem encoding is checked to verify it + is UTF-8. If not, the process exits with an error reporting the errant encoding. + - ansible-test - At startup the locale is configured as ``en_US.UTF-8``, with + a fallback to ``C.UTF-8``. If neither encoding is available the process exits + with an error. If the fallback is used, a warning is displayed. In previous + versions the ``en_US.UTF-8`` locale was always requested. However, no startup + checking was performed to verify the locale was successfully configured. minor_changes: + - Add a new "INVENTORY_UNPARSED_WARNING" flag add to hide the "No inventory + was parsed, only implicit localhost is available" warning - "Add an 'action_plugin' field for modules in runtime.yml plugin_routing.\n\nThis fixes module_defaults by supporting modules-as-redirected-actions\nwithout redirecting module_defaults entries to the common action.\n\n.. code: yaml\n\n @@ -831,222 +342,504 @@ releases: action_plugin field can be a redirected action plugin, as\nit is resolved normally.\n\nUsing the modified runtime.yml, the example task will only use\nthe ns.coll.eos_facts defaults.\n" + - Add support for parsing ``-a`` module options as JSON and not just key=value + arguments - https://github.com/ansible/ansible/issues/78112 + - Added Kylin Linux Advanced Server OS in RedHat OS Family. + - Allow ``when`` conditionals to be used on ``flush_handlers`` (https://github.com/ansible/ansible/issues/77616) + - Allow meta tasks to be used as handlers. + - Display - The display class will now proxy calls to Display.display via the + queue from forks/workers to be handled by the parent process for actual display. + This reduces some reliance on the fork start method and improves reliability + of displaying messages. + - Jinja version test - Add pep440 version_type for version test. (https://github.com/ansible/ansible/issues/78288) + - Loops - Add new ``loop_control.extended_allitems`` to allow users to disable + tracking all loop items for each loop (https://github.com/ansible/ansible/issues/75216) + - NetBSD - Add uptime_seconds fact + - Provide a `utc` option for strftime to show time in UTC rather than local + time + - Raise a proper error when ``include_role`` or ``import_role`` is used as a + handler. + - Remove the ``AnsibleContext.resolve`` method as its override is not necessary. + Furthermore the ability to override the ``resolve`` method was deprecated + in Jinja 3.0.0 and removed in Jinja 3.1.0. + - Utilize @classmethod and @property together to form classproperty (Python + 3.9) to access field attributes of a class + - '``LoopControl`` is now templated through standard ``post_validate`` method + (https://github.com/ansible/ansible/pull/75715)' + - '``ansible-galaxy collection install`` - add an ``--offline`` option to prevent + querying distribution servers (https://github.com/ansible/ansible/issues/77443).' + - ansible - Add support for Python 3.11 to Python interpreter discovery. + - ansible - At startup the stdin/stdout/stderr file handles are checked to verify + they are using blocking IO. If not, the process exits with an error reporting + which file handle(s) are using non-blocking IO. + - ansible-config adds JSON and YAML output formats for list and dump actions. + - ansible-connection now supports verbosity directly on cli + - ansible-console added 'collections' command to match playbook keyword. + - ansible-doc - remove some of the manual formatting, and use YAML more uniformly. + This in particular means that ``true`` and ``false`` are used for boolean + values, instead of ``True`` and ``False`` (https://github.com/ansible/ansible/pull/78668). - ansible-galaxy - Support resolvelib versions 0.6.x, 0.7.x, and 0.8.x. The full range of supported versions is now >= 0.5.3, < 0.9.0. + - ansible-galaxy now supports a user defined timeout, instead of existing hardcoded + 60s (now the default). + - ansible-test - Add FreeBSD 13.1 remote support. - ansible-test - Add RHEL 9.0 remote support. + - ansible-test - Add support for Python 3.11. + - ansible-test - Add support for RHEL 8.6 remotes. - ansible-test - Add support for Ubuntu VMs using the ``--remote`` option. - ansible-test - Add support for exporting inventory with ``ansible-test shell --export {path}``. - ansible-test - Add support for multi-arch remotes. + - ansible-test - Add support for provisioning Alpine 3.16 remote instances. + - ansible-test - Add support for provisioning Fedora 36 remote instances. + - ansible-test - Add support for provisioning Ubuntu 20.04 remote instances. + - ansible-test - Add support for provisioning remotes which require ``doas`` + for become. - ansible-test - Add support for running non-interactive commands with ``ansible-test shell``. + - ansible-test - Alpine remotes now use ``sudo`` for tests, using ``doas`` only + for bootstrapping. + - ansible-test - An improved error message is shown when the download of a pip + bootstrap script fails. The download now uses ``urllib2`` instead of ``urllib`` + on Python 2. - ansible-test - Avoid using the ``mock_use_standalone_module`` setting for unit tests running on Python 3.8 or later. + - ansible-test - Become support for remote instance provisioning is no longer + tied to a fixed list of platforms. - ansible-test - Blocking mode is now enforced for stdin, stdout and stderr. If any of these are non-blocking then ansible-test will exit during startup with an error. + - ansible-test - Distribution specific test containers are now multi-arch, supporting + both x86_64 and aarch64. + - ansible-test - Distribution specific test containers no longer contain a ``/etc/ansible/hosts`` + file. + - ansible-test - Enable loading of ``coverage`` data files created by older + supported ansible-test releases. + - ansible-test - Fedora 36 has been added as a test container. + - ansible-test - FreeBSD remotes now use ``sudo`` for tests, using ``su`` only + for bootstrapping. - ansible-test - Improve consistency of output messages by using stdout or stderr for most output, but not both. + - ansible-test - Remote Alpine instances now have the ``acl`` package installed. + - ansible-test - Remote Fedora instances now have the ``acl`` package installed. + - ansible-test - Remote FreeBSD instances now have ACLs enabled on the root + filesystem. + - ansible-test - Remote Ubuntu instances now have the ``acl`` package installed. + - ansible-test - Remove Fedora 34 test container. + - ansible-test - Remove Fedora 35 test container. + - ansible-test - Remove FreeBSD 13.0 remote support. + - ansible-test - Remove RHEL 8.5 remote support. + - ansible-test - Remove Ubuntu 18.04 test container. + - ansible-test - Remove support for Python 2.7 on provisioned FreeBSD instances. + - ansible-test - Remove support for Python 3.8 on the controller. + - ansible-test - Remove the ``opensuse15py2`` container. + - ansible-test - Support multiple pinned versions of the ``coverage`` module. + The version used now depends on the Python version in use. + - ansible-test - Test containers have been updated to remove the ``VOLUME`` + instruction. + - ansible-test - The Alpine 3 test container has been updated to Alpine 3.16.0. + - ansible-test - The ``http-test-container`` container is now multi-arch, supporting + both x86_64 and aarch64. + - ansible-test - The ``pypi-test-container`` container is now multi-arch, supporting + both x86_64 and aarch64. - ansible-test - The ``shell`` command can be used outside a collection if no controller delegation is required. - release_summary: '| Release Date: 2022-06-13 + - ansible-test - The openSUSE test container has been updated to openSUSE Leap + 15.4. + - ansible-test - Ubuntu 22.04 has been added as a test container. + - ansible-test - Update pinned sanity test requirements for all tests. + - ansible-test - Update the ``base`` container to 3.4.0. + - ansible-test - Update the ``default`` containers to 6.6.0. + - apt_repository remove dependency on apt-key and use gpg + /usr/share/keyrings + directly instead + - blockinfile - The presence of the multiline flag (?m) in the regular expression + for insertafter opr insertbefore controls whether the match is done line by + line or with multiple lines (https://github.com/ansible/ansible/pull/75090). + - calls to listify_lookup_plugin_terms in core do not pass in loader/dataloader + anymore. + - collections - ``ansible-galaxy collection build`` can now utilize ``MANIFEST.in`` + style directives from ``galaxy.yml`` instead of ``build_ignore`` effectively + inverting the logic from include by default, to exclude by default. (https://github.com/ansible/ansible/pull/78422) + - config manager, move templating into main query function in config instead + of constants + - config manager, remove updates to configdata as it is mostly unused + - configuration entry INTERPRETER_PYTHON_DISTRO_MAP is now 'private' and won't + show up in normal configuration queries and docs, since it is not 'settable' + this avoids user confusion. + - distribution - add distribution_minor_version for Debian Distro (https://github.com/ansible/ansible/issues/74481). + - documentation construction now gives more information on error. + - facts - add OSMC to Debian os_family mapping + - get_url - permit to pass to parameter ``checksum`` an URL pointing to a file + containing only a checksum (https://github.com/ansible/ansible/issues/54390). + - new tests url, uri and urn will verify string as such, but they don't check + existance of the resource + - plugin loader - add ansible_name and ansible_aliases attributes to plugin + objects/classes. + - systemd is now systemd_service to better reflect the scope of the module, + systemd is kept as an alias for backwards compatibility. + - templating - removed internal template cache + - uri - cleanup write_file method, remove overkill safety checks and report + any exception, change shutilcopyfile to use module.atomic_move + - urls - Add support to specify SSL/TLS ciphers to use during a request (https://github.com/ansible/ansible/issues/78633) + - 'validate-modules - Allow ``type: raw`` on a module return type definition + for values that have a dynamic type' + - version output now includes the path to the python executable that Ansible + is running under + - yum_repository - do not give the ``async`` parameter a default value anymore, + since this option is deprecated in RHEL 8. This means that ``async = 1`` won't + be added to repository files if omitted, but it can still be set explicitly + if needed. + release_summary: '| Release Date: 2022-09-26 | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__ ' - codename: Nobody's Fault but Mine + removed_features: + - PlayIterator - remove deprecated ``PlayIterator.ITERATING_*`` and ``PlayIterator.FAILED_*`` + - Remove deprecated ``ALLOW_WORLD_READABLE_TMPFILES`` configuration option (https://github.com/ansible/ansible/issues/77393) + - Remove deprecated ``COMMAND_WARNINGS`` configuration option (https://github.com/ansible/ansible/issues/77394) + - Remove deprecated ``DISPLAY_SKIPPED_HOSTS`` environment variable (https://github.com/ansible/ansible/issues/77396) + - Remove deprecated ``LIBVIRT_LXC_NOSECLABEL`` environment variable (https://github.com/ansible/ansible/issues/77395) + - Remove deprecated ``NETWORK_GROUP_MODULES`` environment variable (https://github.com/ansible/ansible/issues/77397) + - Remove deprecated ``UnsafeProxy`` + - Remove deprecated ``plugin_filters_cfg`` config option from ``default`` section + (https://github.com/ansible/ansible/issues/77398) + - Remove deprecated functionality that allows loading cache plugins directly + without using ``cache_loader``. + - Remove deprecated functionality that allows subclassing ``DefaultCallback`` + without the corresponding ``doc_fragment``. + - Remove deprecated powershell functions ``Load-CommandUtils`` and ``Import-PrivilegeUtil`` + - apt_key - remove deprecated ``key`` module param + - command/shell - remove deprecated ``warn`` module param + - get_url - remove deprecated ``sha256sum`` module param + - import_playbook - remove deprecated functionality that allows providing additional + parameters in free form + codename: C'mon Everybody fragments: + - 17393-fix_silently_failing_lvm_facts.yaml + - 23161-includes-loops-rescue.yml + - 29680-fetch-file-file-name-too-long.yml + - 43191-72638-ansible_failed_task-fixes.yml + - 56017-allow-lazy-eval-on-jinja2-expr.yml + - 58632-uri-include_use_proxy.yaml + - 61965-user-module-fails-to-change-primary-group.yml + - 64612-fetch_file-multi-part-extension.yml + - 65499-no_inventory_parsed.yml + - 70180-collection-list-more-robust.yml + - 73072-dnf-skip-broken.yml + - 74446-network-conn-options.yaml + - 74481_debian_minor_version.yml + - 75042-lowercase-dash-n-with-luseradd-on-all-distros.yml + - 75090-multiline-flag-support-for-blockinfile.yml + - 75216-loop-control-extended-allitems.yml + - 75364-yum-repository-async.yml + - 75431-Add-uptime-fact-for-NetBSD.yml + - 75715-post_validate-LoopControl.yml + - 75740-remove-travis-file-from-role-skeletons.yml + - 76167-update-attributes-of-files-that-are-links.yml + - 76737-paramiko-rsa-sha2.yml + - 76971-unarchive-remove-unnecessary-zipinfo-dependency.yml + - 77014-ansible-galaxy-list-fix-null-metadata-namespace-name.yml - 77265-module_defaults-with-modules-as-redirected-actions.yaml + - 77315-fix-meta-vv-header.yml + - 77393-remove-allow_world_readable_tmpfiles.yml + - 77394-remove-command_warnings.yml + - 77395-remove-libvirt_lxc_noseclabel.yml + - 77396-remove-display_skipped_hosts.yml + - 77397-remove-network_group_modules.yml + - 77398-remove-plugin_filters_cfg-default.yml + - 77418-ansible-galaxy-init-include-meta-runtime.yml + - 77424-fix-False-ansible-galaxy-server-config-options.yaml + - 77465-ansible-test-compile-crash.yml + - 77468-ansible-galaxy-remove-unnecessary-api-call.yml + - 77472-ansible-test-network-disconnect-warning.yml + - 77493-ansible-galaxy-find-git-executable-before-using.yaml + - 77507-deprecate-pc-verbosity.yml + - 77535-prevent-losing-unsafe-lookups.yml + - 77544-fix-error-yaml-inventory-int-hostnames.yml + - 77561-ansible-galaxy-coll-install-null-dependencies.yml + - 77576-arg_spec-no_log-aliases.yml + - 77599-add-url-include-deprecation.yml - 77630-ansible-galaxy-fix-unsupported-resolvelib-version.yml - 77649-support-recent-resolvelib-versions.yml + - 77679-syntax-error-mention-filename.yml + - 77693-actually-ignore-unreachable.yml + - 77781-callback-crash.yml + - 77788-deprecate-non-lists-lookups.yml - 77789-catch-keyerror-lookup-dict.yml + - 77792-fix-facts-discovery-specific-interface-names.yml - 77898-ansible-config-dump-only-changed-all-types.yml + - 77934-empty-loop-template-callback.yml - 77936-add-pyyaml-version.yml + - 77969-apt-preferences.yml + - 78050-replace-spwd.yml + - 78058-yum-releasever-latest.yml + - 78112-adhoc-args-as-json.yml + - 78141-template-fix-convert_data.yml + - 78156-undefined-check-in-finalize.yml + - 78204-galaxy-role-file-detection.yml + - 78214-wait-for-compare-bytes.yml + - 78223_aix_fix_processor_facts.yml + - 78295-dnf-fix-comparison-operators-docs.yml + - 78325-ansible-galaxy-fix-caching-paginated-responses-from-v3-servers.yml + - 78496-fix-apt-check-mode.yml + - 78512-uri-use-netrc-true-false-argument.yml + - 78516-galaxy-cli-exit-codes.yml + - 78562-deprecate-vars-plugin-attr.yml + - 78612-rescue-block-ansible_play_hosts.yml + - 78633-urls-ciphers.yml + - 78648-urllib3-import-exceptions.yml + - 78668-ansible-doc-formatting.yml + - 78678-add-a-g-install-offline.yml + - 78700-add-plugin-name-and-aliases.yml + - 78750-paramiko-ssh-args-compat.yml + - 78781-fix-apt-only_upgrade-behavior.yml + - abstract_errors_info.yml + - add-omsc-os-family.yml + - added_uri_tests.yml + - adoc_moarf.yml + - aix_chmod_255.yml + - ansible-connection_decode.yml + - ansible-console-renamed-arg.yml + - ansible-galaxy-collection-init-force.yml + - ansible-require-blocking-io.yml + - ansible-require-utf8.yml - ansible-test-ansible-core-mock.yml + - ansible-test-ansible-doc-sanity-fqcn.yml + - ansible-test-container-tmpfs.yml + - ansible-test-containers-no-volume.yml + - ansible-test-content-config.yml + - ansible-test-coverage.yml + - ansible-test-default-containers.yml + - ansible-test-distro-containers-hosts.yml + - ansible-test-distro-containers.yml + - ansible-test-drop-python-3.8-controller.yml + - ansible-test-fedora-35.yml + - ansible-test-filter-options.yml + - ansible-test-generalize-become.yml + - ansible-test-integration-targets-filter.yml + - ansible-test-less-python-2.7.yml + - ansible-test-locale.yml + - ansible-test-more-remotes.yml + - ansible-test-multi-arch-cloud-containers.yml + - ansible-test-multi-arch-distro-containers.yml - ansible-test-multi-arch-remotes.yml + - ansible-test-pip-bootstrap.yml + - ansible-test-podman-create-retry.yml + - ansible-test-remote-acl.yml + - ansible-test-remote-become.yml - ansible-test-remote-completion-validation.yml - - ansible-test-rhel-9.yaml + - ansible-test-remotes.yml + - ansible-test-rhel-8.6.yml + - ansible-test-sanity-requirements.yml + - ansible-test-self-change-classification.yml - ansible-test-shell-features.yml - ansible-test-subprocess-isolation.yml + - ansible-test-target-filter.yml - ansible-test-target-options.yml + - ansible-test-tty-output-handling.yml + - ansible-test-ubuntu-bootstrap-fix.yml - ansible-test-ubuntu-remote.yml + - ansible-test-validate-modules-docs-only-docstring.yml + - ansible-test-verify-executables.yml + - ansible_connection_verbosity.yml + - apt_key-remove-deprecated-key.yml + - apt_repository_sans_apt_key.yml - apt_virtual_fix.yml + - atomic_cache_files.yml + - better-msg-role-in-handler.yml + - better_info_sources.yml + - better_nohosts_error.yml + - collection-build-manifest.yml + - config_error_origin.yml + - config_formats.yml - config_load_by_name.yml + - config_manager_changes.yml + - console_list_all.yml + - deprecate-crypt-support.yml + - deprecate-fact_path-gather_subset-gather_timeout-defaults.yml + - display_verbosity.yml + - dnf-fix-locale-language.yml + - doc_errors.yml + - doc_vac_ignore.yml + - dont-expose-included-handlers.yml + - ensure_config_always_templated.yml + - fieldattributes-classproperty.yml + - fix-change-while-iterating-module-utils-service.yml + - fix_adoc_text.yml + - fix_init_commented.yml + - fix_inv_refresh.yml + - forked-display-via-queue.yml + - galaxy_server_timeout.yml + - get_url-accept-file-for-checksum.yml + - get_url-remove-deprecated-sha256sum.yml + - git_fixes.yml + - handle-role-dependency-type-error.yml + - hide_distro_map.yml + - import_playbook-remove-params.yml + - items2dict-error-handling.yml + - kylin_linux_advanced_server_distribution_support.yml + - legacy_no_file_skip.yml + - loader_in_listify.yml + - local_fact_unreadable.yml + - null_means_none.yml + - opensuse_disto_id.yml + - password_lookup_fix.yml + - pause_echo_fix.yml + - pep440-version-type.yml + - permission-denied-spwd-module.yml - pip-lazy-import.yml + - play_iterator-remove_deprecations.yml + - play_iterator_iterating_handlers.yml + - playiterator-deprecate-methods.yml - plugin-loader-deterministic-fuzzy-match.yml - - v2.13.1rc1_summary.yaml + - powershell-deprecated-functions.yml + - python-2.6-discovery.yml + - python-3.11.yml + - python39-min-controller.yml + - python_version_path.yml + - remove-ansiblecontext-resolve.yml + - remove-deprecated-default-callback-without-doc.yml + - remove-import-cache-plugin-directly.yml + - require-fqcn-redirects.yml + - restrict_role_files_to_role.yml + - self_referential.yml + - shell_env_typeerror.yml + - strftime-in-utc.yml + - systemd_services.yml + - templar-correct-environment_class-template.yml + - templar-deprecate-shared_loader_obj.yml + - template_override.yml + - type_shim_exception_swallow.yml + - unsafeproxy-deprecated.yml + - until_also_implicit.yml + - use-before-definition.yml + - v2.14.0-initial-commit.yaml + - v2.14.0b1_summary.yaml + - validate-modules-module-raw-return-type.yml + - validate-modules-version_added.yaml + - vault_syml_allow.yml + - vm_more_efficient.yml - windows_conn_option_fix.yml - release_date: '2022-06-13' - 2.13.2: - changes: - release_summary: '| Release Date: 2022-07-18 - - | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__ - - ' - codename: Nobody's Fault but Mine - fragments: - - v2.13.2_summary.yaml - release_date: '2022-07-18' - 2.13.2rc1: + - winrm-kinit-path.yml + - write_file_uri_cleanup.yml + - zap_template_cache.yml + release_date: '2022-09-26' + 2.14.0b2: changes: + breaking_changes: + - ansible-test validate-modules - Removed the ``missing-python-doc`` error code + in validate modules, ``missing-documentation`` is used instead for missing + PowerShell module documentation. bugfixes: - - Move undefined check from concat to finalize (https://github.com/ansible/ansible/issues/78156) - - ansible-doc - no longer list module and plugin aliases that are created with - symlinks (https://github.com/ansible/ansible/pull/78137). - - ansible-doc - when listing modules in collections, proceed recursively. This - fixes module listing for community.general 5.x.y and community.network 4.x.y - (https://github.com/ansible/ansible/pull/78137). - - ansible-doc will not add 'website for' in ":ref:" substitutions as it made - them confusing. - - file backed cache plugins now handle concurrent access by making atomic updates - to the files. - - password lookup does not ignore k=v arguments anymore. - - user - Fix error "Permission denied" in user module while generating SSH keys - (https://github.com/ansible/ansible/issues/78017). + - Fix reusing a connection in a task loop that uses a redirected or aliased + name - https://github.com/ansible/ansible/issues/78425 + - Fix setting become activation in a task loop - https://github.com/ansible/ansible/issues/78425 + - apt module should not traceback on invalid type given as package. issue 78663. + - known_hosts - do not return changed status when a non-existing key is removed + (https://github.com/ansible/ansible/issues/78598) + - plugin loader, fix detection for existing configuration before initializing + for a plugin minor_changes: - - ansible-test - An improved error message is shown when the download of a pip - bootstrap script fails. The download now uses ``urllib2`` instead of ``urllib`` - on Python 2. - release_summary: '| Release Date: 2022-07-11 + - ansible-test validate-modules - Added support for validating module documentation + stored in a sidecar file alongside the module (``{module}.yml`` or ``{module}.yaml``). + Previously these files were ignored and documentation had to be placed in + ``{module}.py``. + - apt_repository will use the trust repo directories in order of preference + (more appropriate to less) as they exist on the target. + release_summary: '| Release Date: 2022-10-03 | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__ ' - codename: Nobody's Fault but Mine + codename: C'mon Everybody fragments: - - 78137-ansible-doc-list-modules-recursively.yml - - 78156-undefined-check-in-finalize.yml - - ansible-test-pip-bootstrap.yml - - atomic_cache_files.yml - - fix_adoc_text.yml - - password_lookup_fix.yml - - permission-denied-spwd-module.yml - - v2.13.2rc1_summary.yaml - release_date: '2022-07-11' - 2.13.3: - changes: - release_summary: '| Release Date: 2022-08-15 - - | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__ - - ' - codename: Nobody's Fault but Mine - fragments: - - v2.13.3_summary.yaml - release_date: '2022-08-15' - 2.13.3rc1: + - 78881-fix-known-hosts-wrong-changed-status.yaml + - apt_notb.yml + - apt_repo_trust_prefs.yml + - become-loop-setting.yml + - plugin_loader_fix.yml + - v2.14.0b2_summary.yaml + - validate-modules-sidecar.yml + release_date: '2022-10-03' + 2.14.0b3: changes: bugfixes: - - Avoid 'unreachable' error when chmod on AIX has 255 as return code. - - Fix PluginLoader to mimic Python import machinery by adding module to sys.modules - before exec - - Fix dnf module documentation to indicate that comparison operators for package - version require spaces around them (https://github.com/ansible/ansible/issues/78295) - - ansible-connection - decrypt vaulted parameters before sending over the socket, - as vault secrets are not available on the other side. - - ansible-galaxy - Fix reinitializing the whole collection directory with ``ansible-galaxy - collection init ns.coll --force``. Now directories and files that are not - included in the collection skeleton will be removed. - - ansible-galaxy - do not require mandatory keys in the ``galaxy.yml`` of source - collections when listing them (https://github.com/ansible/ansible/issues/70180). - - ansible-galaxy - fix listing collections that contains metadata but the namespace - or name are not strings. - - ansible-galaxy - fix setting the cache for paginated responses from Galaxy - NG/AH (https://github.com/ansible/ansible/issues/77911). - - ansible-test - Delegation for commands which generate output for programmatic - consumption no longer redirect all output to stdout. The affected commands - and options are ``shell``, ``sanity --lint``, ``sanity --list-tests``, ``integration - --list-targets``, ``coverage analyze`` - - ansible-test - Delegation now properly handles arguments given after ``--`` - on the command line. - - 'ansible-test - Test configuration for collections is now parsed only once, - prior to delegation. Fixes issue: https://github.com/ansible/ansible/issues/78334' - - ansible-test - The ``shell`` command no longer redirects all output to stdout - when running a provided command. Any command output written to stderr will - be mixed with the stderr output from ansible-test. - - ansible-test - The ``shell`` command no longer requests a TTY when using delegation - unless an interactive shell is being used. An interactive shell is the default - behavior when no command is given to pass to the shell. - - dnf - fix output parsing on systems with ``LANGUAGE`` set to a language other - than English (https://github.com/ansible/ansible/issues/78193) - - if a config setting prevents running ansible it should at least show it's - "origin". - - prevent type annotation shim failures from causing runtime failures (https://github.com/ansible/ansible/pull/77860) - - template module/lookup - fix ``convert_data`` option that was effectively - always set to True for Jinja macros (https://github.com/ansible/ansible/issues/78141) - - uri - properly use uri parameter use_proxy (https://github.com/ansible/ansible/issues/58632) - - yum - fix traceback when ``releasever`` is specified with ``latest`` (https://github.com/ansible/ansible/issues/78058) - release_summary: '| Release Date: 2022-08-08 + - Do not crash when templating an expression with a test or filter that is not + a valid Ansible filter name (https://github.com/ansible/ansible/issues/78912, + https://github.com/ansible/ansible/pull/78913). + - 'handlers - fix an issue where the ``flush_handlers`` meta task could not + be used with FQCN: ``ansible.builtin.meta`` (https://github.com/ansible/ansible/issues/79023)' + - keyword inheritance - Ensure that we do not squash keywords in validate (https://github.com/ansible/ansible/issues/79021) + - omit on keywords was resetting to default value, ignoring inheritance. + - service_facts - Use python re to parse service output instead of grep (https://github.com/ansible/ansible/issues/78541) + release_summary: '| Release Date: 2022-10-10 | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__ ' - codename: Nobody's Fault but Mine + codename: C'mon Everybody fragments: - - 58632-uri-include_use_proxy.yaml - - 70180-collection-list-more-robust.yml - - 77014-ansible-galaxy-list-fix-null-metadata-namespace-name.yml - - 78058-yum-releasever-latest.yml - - 78141-template-fix-convert_data.yml - - 78295-dnf-fix-comparison-operators-docs.yml - - 78325-ansible-galaxy-fix-caching-paginated-responses-from-v3-servers.yml - - aix_chmod_255.yml - - ansible-connection_decode.yml - - ansible-galaxy-collection-init-force.yml - - ansible-test-content-config.yml - - ansible-test-filter-options.yml - - ansible-test-tty-output-handling.yml - - config_error_origin.yml - - dnf-fix-locale-language.yml - - self_referential.yml - - type_shim_exception_swallow.yml - - v2.13.3rc1_summary.yaml - release_date: '2022-08-08' - 2.13.4: + - 78541-service-facts-re.yml + - 78913-template-missing-filter-test.yml + - 79021-dont-squash-in-validate.yml + - 79023-fix-flush_handlers-fqcn.yml + - fix_omit_key.yml + - v2.14.0b3_summary.yaml + plugins: + test: + - description: is the string a valid URI + name: uri + namespace: null + - description: is the string a valid URL + name: url + namespace: null + - description: is the string a valid URN + name: urn + namespace: null + release_date: '2022-10-10' + 2.14.0rc1: changes: - release_summary: '| Release Date: 2022-09-12 + bugfixes: + - BSD network facts - Do not assume column indexes, look for ``netmask`` and + ``broadcast`` for determining the correct columns when parsing ``inet`` line + (https://github.com/ansible/ansible/issues/79117) + - ansible-config limit shorthand format to assigned values + - ansible-test - Update the ``pylint`` sanity test to use version 2.15.4. + release_summary: '| Release Date: 2022-10-17 | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__ ' - codename: Nobody's Fault but Mine + codename: C'mon Everybody fragments: - - v2.13.4_summary.yaml - release_date: '2022-09-12' - 2.13.4rc1: + - 79117-bsd-ifconfig-inet-fix.yml + - adjust_config_list.yml + - ansible-test-pylint-2.15.4.yml + - v2.14.0rc1_summary.yaml + release_date: '2022-10-13' + 2.14.0rc2: changes: bugfixes: - - Fix for network_cli not getting all relevant connection options - - ansible-galaxy - Fix detection of ``--role-file`` in arguments for implicit - role invocation (https://github.com/ansible/ansible/issues/78204) - - ansible-galaxy - Fix exit codes for role search and delete (https://github.com/ansible/ansible/issues/78516) - - ansible-test - Fix change detection for ansible-test's own integration tests. - - ansible-test - ansible-doc sanity test - Correctly determine the fully-qualified - collection name for plugins in subdirectories, resolving https://github.com/ansible/ansible/issues/78490. - - apt - don't actually update the cache in check mode with update_cache=true. - - apt - don't mark existing packages as manually installed in check mode (https://github.com/ansible/ansible/issues/66413). - - apt - fix package selection to include /etc/apt/preferences(.d) (https://github.com/ansible/ansible/issues/77969) - - urls - Guard imports of ``urllib3`` by catching ``Exception`` instead of ``ImportError`` - to prevent exceptions in the import process of optional dependencies from - preventing use of ``urls.py`` (https://github.com/ansible/ansible/issues/78648) - - wait_for - Read file and perform comparisons using bytes to avoid decode errors - (https://github.com/ansible/ansible/issues/78214) - release_summary: '| Release Date: 2022-09-06 + - ansible-test - Add ``wheel < 0.38.0`` constraint for Python 3.6 and earlier. + - ansible-test - Update the ``pylint`` sanity test requirements to resolve crashes + on Python 3.11. (https://github.com/ansible/ansible/issues/78882) + - ansible-test - Update the ``pylint`` sanity test to use version 2.15.5. + minor_changes: + - ansible-test - Update ``base`` and ``default`` containers to include Python + 3.11.0. + - ansible-test - Update ``default`` containers to include new ``docs-build`` + sanity test requirements. + release_summary: '| Release Date: 2022-10-31 | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__ ' - codename: Nobody's Fault but Mine + codename: C'mon Everybody fragments: - - 74446-network-conn-options.yaml - - 77969-apt-preferences.yml - - 78204-galaxy-role-file-detection.yml - - 78214-wait-for-compare-bytes.yml - - 78496-fix-apt-check-mode.yml - - 78516-galaxy-cli-exit-codes.yml - - 78648-urllib3-import-exceptions.yml - - ansible-test-ansible-doc-sanity-fqcn.yml - - ansible-test-self-change-classification.yml - - v2.13.4rc1_summary.yaml - release_date: '2022-09-06' + - 79187--wheel-0.38.0.yml + - ansible-test-containers-docs-build.yml + - ansible-test-containers-python-3.11.0.yml + - ansible-test-pylint-2.15.5.yml + - v2.14.0rc2_summary.yaml + release_date: '2022-10-31' |