Script 'mail_helper' called by obssrc
Hello community,

here is the log from the commit of package ansible-core-2.19 for 
openSUSE:Factory checked in at 2026-06-19 16:37:35
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/ansible-core-2.19 (Old)
 and      /work/SRC/openSUSE:Factory/.ansible-core-2.19.new.1956 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "ansible-core-2.19"

Fri Jun 19 16:37:35 2026 rev:8 rq:1360468 version:2.19.11

Changes:
--------
--- /work/SRC/openSUSE:Factory/ansible-core-2.19/ansible-core-2.19.changes      
2026-05-19 17:51:11.738684597 +0200
+++ 
/work/SRC/openSUSE:Factory/.ansible-core-2.19.new.1956/ansible-core-2.19.changes
    2026-06-19 17:12:41.040114656 +0200
@@ -1,0 +2,17 @@
+Fri Jun 19 05:28:37 UTC 2026 - Johannes Kastl 
<[email protected]>
+
+- update to 2.19.11:
+  
https://github.com/ansible/ansible/blob/v2.19.11/changelogs/CHANGELOG-v2.19.rst
+  * Security Fixes
+    - ansible-galaxy install - Ensure role requirements are passed
+      as positional arguments to :command:`git clone`. Previously,
+      a malicious role author could inject arbitrary git
+      configuration in role dependencies. (CVE-2026-11332)
+  * Minor Changes
+    - ansible-test - Replace FreeBSD 14.2 with 14.3.
+  * Bugfixes
+    - module_utils sanitize_keys and remove_value functions now
+      sort their input to ensure matching subsets are always
+      obscured.
+
+-------------------------------------------------------------------

Old:
----
  ansible_core-2.19.10.tar.gz
  ansible_core-2.19.10.tar.gz.sha256

New:
----
  ansible_core-2.19.11.tar.gz
  ansible_core-2.19.11.tar.gz.sha256

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ ansible-core-2.19.spec ++++++
--- /var/tmp/diff_new_pack.XR7mDw/_old  2026-06-19 17:12:43.012181972 +0200
+++ /var/tmp/diff_new_pack.XR7mDw/_new  2026-06-19 17:12:43.020182246 +0200
@@ -43,7 +43,7 @@
 %endif
 
 Name:           ansible-core-2.19
-Version:        2.19.10
+Version:        2.19.11
 Release:        0
 Summary:        Radically simple IT automation
 License:        GPL-3.0-or-later

++++++ ansible_core-2.19.10.tar.gz -> ansible_core-2.19.11.tar.gz ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/ansible_core-2.19.10/PKG-INFO 
new/ansible_core-2.19.11/PKG-INFO
--- old/ansible_core-2.19.10/PKG-INFO   2026-05-18 21:15:09.000000000 +0200
+++ new/ansible_core-2.19.11/PKG-INFO   2026-06-18 21:34:02.000000000 +0200
@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: ansible-core
-Version: 2.19.10
+Version: 2.19.11
 Summary: Radically simple IT automation
 Author: Ansible Project
 Project-URL: Homepage, https://ansible.com/
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/ansible_core-2.19.10/ansible_core.egg-info/PKG-INFO 
new/ansible_core-2.19.11/ansible_core.egg-info/PKG-INFO
--- old/ansible_core-2.19.10/ansible_core.egg-info/PKG-INFO     2026-05-18 
21:15:09.000000000 +0200
+++ new/ansible_core-2.19.11/ansible_core.egg-info/PKG-INFO     2026-06-18 
21:34:02.000000000 +0200
@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: ansible-core
-Version: 2.19.10
+Version: 2.19.11
 Summary: Radically simple IT automation
 Author: Ansible Project
 Project-URL: Homepage, https://ansible.com/
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' 
old/ansible_core-2.19.10/ansible_core.egg-info/SOURCES.txt 
new/ansible_core-2.19.11/ansible_core.egg-info/SOURCES.txt
--- old/ansible_core-2.19.10/ansible_core.egg-info/SOURCES.txt  2026-05-18 
21:15:09.000000000 +0200
+++ new/ansible_core-2.19.11/ansible_core.egg-info/SOURCES.txt  2026-06-18 
21:34:02.000000000 +0200
@@ -1021,6 +1021,7 @@
 
test/integration/targets/ansible-galaxy-role/files/safe-symlinks/tasks/utils/suite.yml
 test/integration/targets/ansible-galaxy-role/meta/main.yml
 test/integration/targets/ansible-galaxy-role/tasks/dir-traversal.yml
+test/integration/targets/ansible-galaxy-role/tasks/git-config-injection.yml
 test/integration/targets/ansible-galaxy-role/tasks/main.yml
 test/integration/targets/ansible-galaxy-role/tasks/valid-role-symlinks.yml
 test/integration/targets/ansible-galaxy/files/testserver.py
@@ -3297,6 +3298,7 @@
 test/integration/targets/no_log/no_log_suboptions_invalid.yml
 test/integration/targets/no_log/runme.sh
 test/integration/targets/no_log/secretvars.yml
+test/integration/targets/no_log/sub_masking.yml
 test/integration/targets/no_log/action_plugins/action_sets_no_log.py
 test/integration/targets/no_log/library/module.py
 test/integration/targets/noexec/aliases
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/ansible_core-2.19.10/changelogs/CHANGELOG-v2.19.rst 
new/ansible_core-2.19.11/changelogs/CHANGELOG-v2.19.rst
--- old/ansible_core-2.19.10/changelogs/CHANGELOG-v2.19.rst     2026-05-18 
21:15:09.000000000 +0200
+++ new/ansible_core-2.19.11/changelogs/CHANGELOG-v2.19.rst     2026-06-18 
21:34:02.000000000 +0200
@@ -4,6 +4,30 @@
 
 .. contents:: Topics
 
+v2.19.11
+========
+
+Release Summary
+---------------
+
+| Release Date: 2026-06-18
+| `Porting Guide 
<https://docs.ansible.com/ansible-core/2.19/porting_guides/porting_guide_core_2.19.html>`__
+
+Minor Changes
+-------------
+
+- ansible-test - Replace FreeBSD 14.2 with 14.3.
+
+Security Fixes
+--------------
+
+- ansible-galaxy install - Ensure role requirements are passed as positional 
arguments to :command:`git clone`. Previously, a malicious role author could 
inject arbitrary git configuration in role dependencies. (CVE-2026-11332)
+
+Bugfixes
+--------
+
+- module_utils sanitize_keys and remove_value functions now sort their input 
to ensure matching subsets are always obscured.
+
 v2.19.10
 ========
 
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/ansible_core-2.19.10/changelogs/changelog.yaml 
new/ansible_core-2.19.11/changelogs/changelog.yaml
--- old/ansible_core-2.19.10/changelogs/changelog.yaml  2026-05-18 
21:15:09.000000000 +0200
+++ new/ansible_core-2.19.11/changelogs/changelog.yaml  2026-06-18 
21:34:02.000000000 +0200
@@ -1246,6 +1246,40 @@
     - core_ci_remote_alias.yml
     - winrm-psrp-nolog.yml
     release_date: '2026-05-11'
+  2.19.11:
+    changes:
+      release_summary: '| Release Date: 2026-06-18
+
+        | `Porting Guide 
<https://docs.ansible.com/ansible-core/2.19/porting_guides/porting_guide_core_2.19.html>`__
+
+        '
+    codename: What Is and What Should Never Be
+    fragments:
+    - 2.19.11_summary.yaml
+    release_date: '2026-06-18'
+  2.19.11rc1:
+    changes:
+      bugfixes:
+      - module_utils sanitize_keys and remove_value functions now sort their 
input
+        to ensure matching subsets are always obscured.
+      minor_changes:
+      - ansible-test - Replace FreeBSD 14.2 with 14.3.
+      release_summary: '| Release Date: 2026-06-11
+
+        | `Porting Guide 
<https://docs.ansible.com/ansible-core/2.19/porting_guides/porting_guide_core_2.19.html>`__
+
+        '
+      security_fixes:
+      - ansible-galaxy install - Ensure role requirements are passed as 
positional
+        arguments to :command:`git clone`. Previously, a malicious role author 
could
+        inject arbitrary git configuration in role dependencies. 
(CVE-2026-11332)
+    codename: What Is and What Should Never Be
+    fragments:
+    - 2.19.11rc1_summary.yaml
+    - ansible-test-freebsd-14.3.yml
+    - fix-cloning-malformed-role-requirements.yml
+    - sort_obfuscation.yml
+    release_date: '2026-06-11'
   2.19.1rc1:
     changes:
       bugfixes:
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' 
old/ansible_core-2.19.10/lib/ansible/module_utils/ansible_release.py 
new/ansible_core-2.19.11/lib/ansible/module_utils/ansible_release.py
--- old/ansible_core-2.19.10/lib/ansible/module_utils/ansible_release.py        
2026-05-18 21:15:09.000000000 +0200
+++ new/ansible_core-2.19.11/lib/ansible/module_utils/ansible_release.py        
2026-06-18 21:34:02.000000000 +0200
@@ -17,6 +17,6 @@
 
 from __future__ import annotations
 
-__version__ = '2.19.10'
+__version__ = '2.19.11'
 __author__ = 'Ansible, Inc.'
 __codename__ = "What Is and What Should Never Be"
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' 
old/ansible_core-2.19.10/lib/ansible/module_utils/common/parameters.py 
new/ansible_core-2.19.11/lib/ansible/module_utils/common/parameters.py
--- old/ansible_core-2.19.10/lib/ansible/module_utils/common/parameters.py      
2026-05-18 21:15:09.000000000 +0200
+++ new/ansible_core-2.19.11/lib/ansible/module_utils/common/parameters.py      
2026-06-18 21:34:02.000000000 +0200
@@ -512,7 +512,7 @@
     return no_log_values
 
 
-def _sanitize_keys_conditions(value, no_log_strings, ignore_keys, 
deferred_removals):
+def _sanitize_keys_conditions(value, deferred_removals):
     """ Helper method to :func:`sanitize_keys` to build ``deferred_removals`` 
and avoid deep recursion. """
     if isinstance(value, (text_type, binary_type)):
         return value
@@ -880,8 +880,9 @@
 
     deferred_removals = deque()
 
-    no_log_strings = [to_native(s, errors='surrogate_or_strict') for s in 
no_log_strings]
-    new_value = _sanitize_keys_conditions(obj, no_log_strings, ignore_keys, 
deferred_removals)
+    # sort ensuring we always handle longer strings vs subsets
+    no_log_strings = sorted([to_native(s, errors='surrogate_or_strict') for s 
in no_log_strings], key=len, reverse=True)
+    new_value = _sanitize_keys_conditions(obj, deferred_removals)
 
     while deferred_removals:
         old_data, new_data = deferred_removals.popleft()
@@ -889,15 +890,15 @@
         if isinstance(new_data, Mapping):
             for old_key, old_elem in old_data.items():
                 if old_key in ignore_keys or old_key.startswith('_ansible'):
-                    new_data[old_key] = _sanitize_keys_conditions(old_elem, 
no_log_strings, ignore_keys, deferred_removals)
+                    new_data[old_key] = _sanitize_keys_conditions(old_elem, 
deferred_removals)
                 else:
                     # Sanitize the old key. We take advantage of the 
sanitizing code in
                     # _remove_values_conditions() rather than recreating it 
here.
                     new_key = _remove_values_conditions(old_key, 
no_log_strings, None)
-                    new_data[new_key] = _sanitize_keys_conditions(old_elem, 
no_log_strings, ignore_keys, deferred_removals)
+                    new_data[new_key] = _sanitize_keys_conditions(old_elem, 
deferred_removals)
         else:
             for elem in old_data:
-                new_elem = _sanitize_keys_conditions(elem, no_log_strings, 
ignore_keys, deferred_removals)
+                new_elem = _sanitize_keys_conditions(elem, deferred_removals)
                 if isinstance(new_data, MutableSequence):
                     new_data.append(new_elem)
                 elif isinstance(new_data, MutableSet):
@@ -920,7 +921,8 @@
 
     deferred_removals = deque()
 
-    no_log_strings = [to_native(s, errors='surrogate_or_strict') for s in 
no_log_strings]
+    # sort ensuring we always handle longer strings vs subsets
+    no_log_strings = sorted([to_native(s, errors='surrogate_or_strict') for s 
in no_log_strings], key=len, reverse=True)
     new_value = _remove_values_conditions(value, no_log_strings, 
deferred_removals)
 
     while deferred_removals:
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/ansible_core-2.19.10/lib/ansible/release.py 
new/ansible_core-2.19.11/lib/ansible/release.py
--- old/ansible_core-2.19.10/lib/ansible/release.py     2026-05-18 
21:15:09.000000000 +0200
+++ new/ansible_core-2.19.11/lib/ansible/release.py     2026-06-18 
21:34:02.000000000 +0200
@@ -17,6 +17,6 @@
 
 from __future__ import annotations
 
-__version__ = '2.19.10'
+__version__ = '2.19.11'
 __author__ = 'Ansible, Inc.'
 __codename__ = "What Is and What Should Never Be"
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/ansible_core-2.19.10/lib/ansible/utils/galaxy.py 
new/ansible_core-2.19.11/lib/ansible/utils/galaxy.py
--- old/ansible_core-2.19.10/lib/ansible/utils/galaxy.py        2026-05-18 
21:15:09.000000000 +0200
+++ new/ansible_core-2.19.11/lib/ansible/utils/galaxy.py        2026-06-18 
21:34:02.000000000 +0200
@@ -72,7 +72,7 @@
         elif scm == 'hg':
             clone_cmd.append('--insecure')
 
-    clone_cmd.extend([src, name])
+    clone_cmd.extend(['--', src, name])
 
     run_scm_cmd(clone_cmd, tempdir)
 
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' 
old/ansible_core-2.19.10/test/integration/targets/ansible-galaxy-role/tasks/git-config-injection.yml
 
new/ansible_core-2.19.11/test/integration/targets/ansible-galaxy-role/tasks/git-config-injection.yml
--- 
old/ansible_core-2.19.10/test/integration/targets/ansible-galaxy-role/tasks/git-config-injection.yml
        1970-01-01 01:00:00.000000000 +0100
+++ 
new/ansible_core-2.19.11/test/integration/targets/ansible-galaxy-role/tasks/git-config-injection.yml
        2026-06-18 21:34:02.000000000 +0200
@@ -0,0 +1,52 @@
+- vars:
+    invalid_git_opts: '-ccore.sshCommand=sh -c "id > {{ remote_tmp_dir 
}}/role_exe"'
+    # use SSH protocol to test core.sshCommand is not configured
+    dummy_repo: [email protected]:ansible/nosuchrepo.git
+  block:
+    - name: Ensure git is installed
+      package:
+        name: git
+      when: ansible_distribution not in ["MacOSX", "Alpine"]
+      register: git_install
+
+    - name: Create invalid requirements file
+      copy:
+        dest: "{{ remote_tmp_dir }}/invalid-requirements.yml"
+        content: |
+          - src: {{ invalid_git_opts }}
+            scm: git
+            name: {{ dummy_repo }}
+          - src: {{ dummy_repo }}
+            scm: git
+            name: {{ invalid_git_opts }}
+
+    - name: Attempt to install invalid role requirements
+      command: ansible-galaxy install -r {{ remote_tmp_dir 
}}/invalid-requirements.yml --ignore-errors
+      register: result
+      environment:
+        ANSIBLE_NOCOLOR: True
+        ANSIBLE_FORCE_COLOR: False
+
+    - name: Validate git core.sshCommand did not run
+      stat:
+        path: "{{ remote_tmp_dir }}/role_exe"
+      register: stat_result
+      failed_when: stat_result.stat.exists
+
+    - name: Verify the invalid field is treated as a single positional 
argument (repo or dest)
+      assert:
+        that:
+          - stderr is search(error1)
+          - stderr is search(error2)
+          - (stderr | regex_findall("git clone") | length) == (stderr | 
regex_findall("git clone --") | length) == 2
+      vars:
+        stderr: "{{ result.stderr | regex_replace('\\n', ' ') }}"
+        error1: "repository '{{ invalid_git_opts }}' does not exist"
+        error2: "Cloning into '{{ invalid_git_opts }}'"
+
+  always:
+    - name: Uninstall git if it was installed
+      package:
+        name: git
+        state: absent
+      when: git_install is changed | default(false)
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' 
old/ansible_core-2.19.10/test/integration/targets/ansible-galaxy-role/tasks/main.yml
 
new/ansible_core-2.19.11/test/integration/targets/ansible-galaxy-role/tasks/main.yml
--- 
old/ansible_core-2.19.10/test/integration/targets/ansible-galaxy-role/tasks/main.yml
        2026-05-18 21:15:09.000000000 +0200
+++ 
new/ansible_core-2.19.11/test/integration/targets/ansible-galaxy-role/tasks/main.yml
        2026-06-18 21:34:02.000000000 +0200
@@ -70,3 +70,4 @@
 
 - import_tasks: dir-traversal.yml
 - import_tasks: valid-role-symlinks.yml
+- import_tasks: git-config-injection.yml
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' 
old/ansible_core-2.19.10/test/integration/targets/no_log/library/module.py 
new/ansible_core-2.19.11/test/integration/targets/no_log/library/module.py
--- old/ansible_core-2.19.10/test/integration/targets/no_log/library/module.py  
2026-05-18 21:15:09.000000000 +0200
+++ new/ansible_core-2.19.11/test/integration/targets/no_log/library/module.py  
2026-06-18 21:34:02.000000000 +0200
@@ -37,7 +37,7 @@
 
         }
     )
-    module.exit_json(msg='done')
+    module.exit_json(msg='done', values=', '.join([str(v) for v in 
module.params.values() if v]))
 
 
 if __name__ == '__main__':
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' 
old/ansible_core-2.19.10/test/integration/targets/no_log/runme.sh 
new/ansible_core-2.19.11/test/integration/targets/no_log/runme.sh
--- old/ansible_core-2.19.10/test/integration/targets/no_log/runme.sh   
2026-05-18 21:15:09.000000000 +0200
+++ new/ansible_core-2.19.11/test/integration/targets/no_log/runme.sh   
2026-06-18 21:34:02.000000000 +0200
@@ -30,3 +30,6 @@
 [ "$(ansible-playbook no_log_config.yml -i ../../inventory -vvvvv "$@" | grep 
-Ec 'the output has been hidden')" = "1" ]
 [ "$(ANSIBLE_NO_LOG=0 ansible-playbook no_log_config.yml -i ../../inventory 
-vvvvv "$@" | grep -Ec 'the output has been hidden')" = "1" ]
 [ "$(ANSIBLE_NO_LOG=1 ansible-playbook no_log_config.yml -i ../../inventory 
-vvvvv "$@" | grep -Ec 'the output has been hidden')" = "5" ]
+
+# Ensure module no_log masking handles secrets that are substrings of other 
secrets correctly
+ansible-playbook sub_masking.yml -i ../../inventory -vvvvv "$@"
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' 
old/ansible_core-2.19.10/test/integration/targets/no_log/secretvars.yml 
new/ansible_core-2.19.11/test/integration/targets/no_log/secretvars.yml
--- old/ansible_core-2.19.10/test/integration/targets/no_log/secretvars.yml     
2026-05-18 21:15:09.000000000 +0200
+++ new/ansible_core-2.19.11/test/integration/targets/no_log/secretvars.yml     
2026-06-18 21:34:02.000000000 +0200
@@ -30,3 +30,6 @@
 s211: SECRET211
 s212: SECRET212
 s213: SECRET213
+
+# substring
+sec: RET
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' 
old/ansible_core-2.19.10/test/integration/targets/no_log/sub_masking.yml 
new/ansible_core-2.19.11/test/integration/targets/no_log/sub_masking.yml
--- old/ansible_core-2.19.10/test/integration/targets/no_log/sub_masking.yml    
1970-01-01 01:00:00.000000000 +0100
+++ new/ansible_core-2.19.11/test/integration/targets/no_log/sub_masking.yml    
2026-06-18 21:34:02.000000000 +0200
@@ -0,0 +1,60 @@
+- name: Ensure no_log obfuscation does not mask on substrings
+  hosts: all
+  vars_files:
+    - secretvars.yml
+  gather_facts: no
+
+  tasks:
+    - name: test with option long
+      module:
+        secret: "{{ s101 }}"
+        subopt_dict:
+          str_sub_opt1: "{{ s102 }}"
+          nested_subopt:
+            n_subopt1: "{{ s103 }}"
+        subopt_list:
+            - subopt1: "{{sec}}"
+      register: long_first
+
+    - name: Task with suboptions long
+      module:
+        secret: "{{ sec }}"
+        subopt_dict: 
+          str_sub_opt1: '{{ s101 }}'
+          nested_subopt:
+            n_subopt1: "{{ s102 }}"
+        subopt_list:
+            - subopt1: "{{ s103 }}"
+      register: short_first 
+
+    - name: Task with suboptions long
+      module:
+        secret: "{{ s101 }}"
+        subopt_dict: 
+          str_sub_opt1: '{{ sec }}'
+          nested_subopt:
+            n_subopt1: "{{ s102 }}"
+        subopt_list:
+            - subopt1: "{{ s103 }}"
+      register: middle_top
+
+    - name: Task with suboptions long
+      module:
+        secret: "{{ s102}}"
+        subopt_dict: 
+          str_sub_opt1: '{{ s102 }}'
+          nested_subopt:
+            n_subopt1: "{{ sec }}"
+        subopt_list:
+            - subopt1: "{{ s103 }}"
+      register: middle_bottom
+
+    - name: check output
+      assert:
+        that:
+          - "'SEC' not in (q('vars', item)|to_json)"
+      loop:
+        - long_first
+        - short_first
+        - middle_top
+        - middle_bottom
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' 
old/ansible_core-2.19.10/test/integration/targets/uri/tasks/main.yml 
new/ansible_core-2.19.11/test/integration/targets/uri/tasks/main.yml
--- old/ansible_core-2.19.10/test/integration/targets/uri/tasks/main.yml        
2026-05-18 21:15:09.000000000 +0200
+++ new/ansible_core-2.19.11/test/integration/targets/uri/tasks/main.yml        
2026-06-18 21:34:02.000000000 +0200
@@ -202,11 +202,11 @@
   stat:
     path: '{{ item }}'
   loop:
+    - '{{ cafile_path.stdout_lines|default(["/_i_dont_exist_ca.pem"])|first }}'
     - /etc/ssl/certs/ca-bundle.crt
     - /etc/ssl/certs/ca-certificates.crt
     - /var/lib/ca-certificates/ca-bundle.pem
     - /usr/local/share/certs/ca-root-nss.crt
-    - '{{ cafile_path.stdout_lines|default(["/_i_dont_exist_ca.pem"])|first }}'
     - /etc/ssl/cert.pem
   register: ca_bundle_candidates
 
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' 
old/ansible_core-2.19.10/test/lib/ansible_test/_data/completion/remote.txt 
new/ansible_core-2.19.11/test/lib/ansible_test/_data/completion/remote.txt
--- old/ansible_core-2.19.10/test/lib/ansible_test/_data/completion/remote.txt  
2026-05-18 21:15:09.000000000 +0200
+++ new/ansible_core-2.19.11/test/lib/ansible_test/_data/completion/remote.txt  
2026-06-18 21:34:02.000000000 +0200
@@ -3,7 +3,7 @@
 fedora/41 python=3.13 become=sudo provider=aws arch=x86_64 alias=fedora/latest
 fedora become=sudo provider=aws arch=x86_64
 freebsd/13.5 python=3.11 python_dir=/usr/local/bin become=su_sudo provider=aws 
arch=x86_64 alias=freebsd/13
-freebsd/14.2 python=3.11 python_dir=/usr/local/bin become=su_sudo provider=aws 
arch=x86_64 alias=freebsd/14,freebsd/latest
+freebsd/14.3 python=3.11 python_dir=/usr/local/bin become=su_sudo provider=aws 
arch=x86_64 alias=freebsd/14,freebsd/latest
 freebsd python_dir=/usr/local/bin become=su_sudo provider=aws arch=x86_64
 macos/15.3 python=3.13 python_dir=/usr/local/bin become=sudo provider=mac 
arch=aarch64 alias=macos/15,macos/latest
 macos python_dir=/usr/local/bin become=sudo provider=mac arch=aarch64
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' 
old/ansible_core-2.19.10/test/lib/ansible_test/_util/target/setup/bootstrap.sh 
new/ansible_core-2.19.11/test/lib/ansible_test/_util/target/setup/bootstrap.sh
--- 
old/ansible_core-2.19.10/test/lib/ansible_test/_util/target/setup/bootstrap.sh  
    2026-05-18 21:15:09.000000000 +0200
+++ 
new/ansible_core-2.19.11/test/lib/ansible_test/_util/target/setup/bootstrap.sh  
    2026-06-18 21:34:02.000000000 +0200
@@ -190,7 +190,7 @@
             13.5/3.11)
                 # defaults available
                 ;;
-            14.2/3.11)
+            14.3/3.11)
                 # defaults available
                 ;;
             *)
@@ -285,9 +285,13 @@
     # Instead, ansible-test will install it using pip.
     # packaging and resolvelib are missing for controller supported Python 
versions, so we just
     # skip them and let ansible-test install them from PyPI.
+    #
+    # sqlite-libs needs to be specified currently to get sqlite3 imports 
working
+    # https://redhat.atlassian.net/browse/RHEL-178008
     if [ "${controller}" ]; then
         packages="
             ${packages}
+            sqlite-libs
             ${py_pkg_prefix}-cryptography
             ${py_pkg_prefix}-pyyaml
             "

++++++ ansible_core-2.19.10.tar.gz.sha256 -> ansible_core-2.19.11.tar.gz.sha256 
++++++
--- 
/work/SRC/openSUSE:Factory/ansible-core-2.19/ansible_core-2.19.10.tar.gz.sha256 
    2026-05-19 17:51:11.854689390 +0200
+++ 
/work/SRC/openSUSE:Factory/.ansible-core-2.19.new.1956/ansible_core-2.19.11.tar.gz.sha256
   2026-06-19 17:12:41.140118069 +0200
@@ -1 +1 @@
-afe0438d3acb402319baeb12a52465e69642e7497889a3a979cf390c6061a138  
ansible_core-2.19.10.tar.gz
+e8d541720050fc0a7ddb568cde779cce25a9cf470aa489e63ee10d1c94df4248  
ansible_core-2.19.11.tar.gz

Reply via email to