Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package ansible-core for openSUSE:Factory checked in at 2024-12-02 16:58:41 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/ansible-core (Old) and /work/SRC/openSUSE:Factory/.ansible-core.new.28523 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "ansible-core" Mon Dec 2 16:58:41 2024 rev:36 rq:1227525 version:2.18.0 Changes: -------- --- /work/SRC/openSUSE:Factory/ansible-core/ansible-core.changes 2024-11-22 23:51:50.946208542 +0100 +++ /work/SRC/openSUSE:Factory/.ansible-core.new.28523/ansible-core.changes 2024-12-02 16:58:56.708724839 +0100 @@ -1,0 +2,82 @@ +Sat Nov 30 13:12:36 UTC 2024 - Johannes Kastl <opensuse_buildserv...@ojkastl.de> + +- update to 2.18.0: + * Breaking Changes / Porting Guide + - Stopped wrapping all commands sent over SSH on a Windows + target with a powershell.exe executable. This results in one + less process being started on each command for Windows to + improve efficiency, simplify the code, and make raw an actual + raw command run with the default shell configured on the + Windows sshd settings. This should have no affect on most + tasks except for raw which now is not guaranteed to always be + running in a PowerShell shell and from having the console + output codepage set to UTF-8. To avoid this issue either swap + to using ansible.windows.win_command, + ansible.windows.win_shell, ansible.windows.win_powershell or + manually wrap the raw command with the shell commands needed + to set the output console encoding. + - persistent connection plugins - The ANSIBLE_CONNECTION_PATH + config option no longer has any effect. + * Deprecated Features + - Deprecate ansible.module_utils.basic.AnsibleModule.safe_eval + and ansible.module_utils.common.safe_eval as they are no + longer used. + - persistent connection plugins - The ANSIBLE_CONNECTION_PATH + config option no longer has any effect, and will be removed + in a future release. + - yum_repository - deprecate async option as it has been + removed in RHEL 8 and will be removed in ansible-core 2.22. + - yum_repository - the following options are deprecated: + deltarpm_metadata_percentage, gpgcakey, http_caching, + keepalive, metadata_expire_filter, mirrorlist_expire, + protect, ssl_check_cert_permissions, ui_repoid_vars as they + have no effect for dnf as an underlying package manager. The + options will be removed in ansible-core 2.22. + * Removed Features (previously deprecated) + - Play - removed deprecated ROLE_CACHE property in favor of + role_cache. + - Remove deprecated VariableManager._get_delegated_vars method + (#82950) + - Removed Python 3.10 as a supported version on the controller. + Python 3.11 or newer is required. + - Removed support for setting the vars keyword to lists of + dictionaries. It is now required to be a single dictionary. + - loader - remove deprecated non-inclusive words (#82947). + - paramiko_ssh - removed deprecated ssh_args from the + paramiko_ssh connection plugin (#82939). + - paramiko_ssh - removed deprecated ssh_common_args from the + paramiko_ssh connection plugin (#82940). + - paramiko_ssh - removed deprecated ssh_extra_args from the + paramiko_ssh connection plugin (#82941). + - play_context - remove deprecated PlayContext.verbosity + property (#82945). + - utils/listify - remove deprecated 'loader' argument from + listify_lookup_plugin_terms API (#82949). + * Security Fixes + - include_vars action - Ensure that result masking is correctly + requested when vault-encrypted files are read. + (CVE-2024-8775) + - task result processing - Ensure that action-sourced result + masking (_ansible_no_log=True) is preserved. (CVE-2024-8775) + - user action won't allow ssh-keygen, chown and chmod to run on + existing ssh public key file, avoiding traversal on existing + symlinks (CVE-2024-9902). + * Known Issues + - ansible-test - When using ansible-test containers with Podman + on a Ubuntu 24.04 host, ansible-test must be run as a + non-root user to avoid permission issues caused by AppArmor. + - ansible-test - When using the Fedora 40 container with Podman + on a Ubuntu 24.04 host, the unix-chkpwd AppArmor profile must + be disabled on the host to allow SSH connections to the + container. + * New Plugins + - timedout - did the task time out + - vaulted_file - Is this file an encrypted vault + * New Modules + - ansible.modules + - mount_facts - Retrieve mount information. + * Bugfixes + Please see the full changelog: + https://github.com/ansible/ansible/blob/v2.18.0/changelogs/CHANGELOG-v2.18.rst + +------------------------------------------------------------------- Old: ---- ansible_core-2.17.6.tar.gz ansible_core-2.17.6.tar.gz.sha256 New: ---- ansible_core-2.18.0.tar.gz ansible_core-2.18.0.tar.gz.sha256 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ ansible-core.spec ++++++ --- /var/tmp/diff_new_pack.T5nzEl/_old 2024-12-02 16:58:57.464756560 +0100 +++ /var/tmp/diff_new_pack.T5nzEl/_new 2024-12-02 16:58:57.464756560 +0100 @@ -16,6 +16,8 @@ # +%define ansible_core_major_minor_version 2.18 + %{?sle15_python_module_pythons} %if 0%{?suse_version} < 1550 # Leap15, SLES15 @@ -41,7 +43,7 @@ %endif Name: ansible-core -Version: 2.17.6 +Version: 2.18.0 Release: 0 Summary: Radically simple IT automation License: GPL-3.0-or-later @@ -56,10 +58,16 @@ Conflicts: ansible < 3 Conflicts: ansible-base -# https://github.com/ansible/ansible/blob/stable-2.17/setup.cfg#L40 -BuildRequires: %{ansible_python}-base >= 3.10 +# cannot be installed with a lower or higher 2.X version +Conflicts: ansible-core < %{ansible_core_major_minor_version} +Conflicts: ansible-core > %{ansible_core_major_minor_version} + +# https://github.com/ansible/ansible/blob/stable-2.18/pyproject.toml#L6 +BuildRequires: %{ansible_python}-base >= 3.11 +BuildRequires: %{ansible_python}-pip BuildRequires: %{ansible_python}-setuptools -# https://github.com/ansible/ansible/blob/stable-2.17/requirements.txt +BuildRequires: %{ansible_python}-wheel +# https://github.com/ansible/ansible/blob/stable-2.18/requirements.txt BuildRequires: %{ansible_python}-Jinja2 >= 3.0.0 BuildRequires: %{ansible_python}-PyYAML >= 5.1 BuildRequires: %{ansible_python}-cryptography @@ -102,6 +110,9 @@ Requires: %{name} = %{version} BuildRequires: %{ansible_python}-virtualenv Requires: %{ansible_python}-virtualenv +# cannot be installed with a lower or higher 2.X version +Conflicts: ansible-test < %{ansible_core_major_minor_version} +Conflicts: ansible-test > %{ansible_core_major_minor_version} %description -n ansible-test This package installs the ansible-test command for testing modules and plugins @@ -128,14 +139,19 @@ find ./ -type f -exec \ sed -i '1s|^#!%{_bindir}/python$|#!%{_bindir}/%{ansible_python_executable}|' {} \; +# fix shebangs in scripts +sed -i "1{/python3/d;}" ./lib/ansible/cli/*.py +sed -i "1{/python3/d;}" ./lib/ansible/cli/scripts/ansible_connection_cli_stub.py +sed -i "1{/python3/d;}" ./lib/ansible/modules/hostname.py + %build -%python_build +%pyproject_wheel mkdir man1 %{ansible_python_executable} packaging/cli-doc/build.py man --output-dir ./man1 %install -%python_install +%pyproject_install %fdupes %{buildroot}%{ansible_python_sitelib} mkdir -p %{buildroot}%{_sysconfdir}/ansible/ @@ -182,24 +198,22 @@ # resp. https://bugzilla.opensuse.org/show_bug.cgi?id=1137479 mkdir -p %{buildroot}%{ansible_python_sitelib}/ansible/galaxy/data/default/role/{files,templates} -# fix shebangs in scripts -sed -i "1{/python3/d;}" %{buildroot}/%{ansible_python_sitelib}/ansible/cli/*.py -sed -i "1{/python3/d;}" %{buildroot}/%{ansible_python_sitelib}/ansible/cli/scripts/ansible_connection_cli_stub.py -sed -i "1{/python3/d;}" %{buildroot}/%{ansible_python_sitelib}/ansible/modules/hostname.py - mkdir -p %{buildroot}/%{_mandir}/man1/ cp -v ./man1/*.1 %{buildroot}/%{_mandir}/man1/ %check -# NEVER ship untested pure python packages. Enable this before the final submit. +export PYTHONPATH=%{ansible_python_sitelib}:$PWD +mkdir bin +cd bin +ln -s ../test/lib/ansible_test/_util/target/cli/ansible_test_cli_stub.py ./ansible-test +cd .. %{ansible_python_executable} bin/ansible-test units -v --python %{ansible_python_version} %files -%doc changelogs/CHANGELOG-v2.17.rst changelogs/changelog.yaml +%doc changelogs/CHANGELOG-v%{ansible_core_major_minor_version}.rst changelogs/changelog.yaml %license COPYING licenses/Apache-License.txt licenses/MIT-license.txt licenses/PSF-license.txt licenses/simplified_bsd.txt %{_bindir}/ansible %{_bindir}/ansible-config -%{_bindir}/ansible-connection %{_bindir}/ansible-console %{_bindir}/ansible-doc %{_bindir}/ansible-galaxy ++++++ ansible_core-2.17.6.tar.gz -> ansible_core-2.18.0.tar.gz ++++++ ++++ 48131 lines of diff (skipped) ++++++ ansible_core-2.17.6.tar.gz.sha256 -> ansible_core-2.18.0.tar.gz.sha256 ++++++ --- /work/SRC/openSUSE:Factory/ansible-core/ansible_core-2.17.6.tar.gz.sha256 2024-11-15 15:43:15.598466283 +0100 +++ /work/SRC/openSUSE:Factory/.ansible-core.new.28523/ansible_core-2.18.0.tar.gz.sha256 2024-12-02 16:58:56.756726852 +0100 @@ -1 +1 @@ -3e53970b7cebfe2adb39b711c1e2f8bbfcbedac828da51dc0357a19070638e95 ansible_core-2.17.6.tar.gz +87fbebbfe8d961e9b153e84b4438ba3a327dbfdcd4ad05a6065d9ff5d9d02e7b ansible_core-2.18.0.tar.gz
