CVS commit: pkgsrc/sysutils/ansible-core

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Tue Nov 12 08:02:34 UTC 2024

Modified Files:
        pkgsrc/sysutils/ansible-core: Makefile PLIST distinfo

Log Message:
ansible-core: updated to 2.18.0

v2.18.0
=======

Minor Changes
-------------

- Add ``gid_min``, ``gid_max`` to the group plugin to overwrite the defaults provided by the ``/etc/login.defs`` file (https://github.com/ansible/ansible/pull/81770).
- Add ``python3.13`` to the default ``INTERPRETER_PYTHON_FALLBACK`` list.
- Add ``uid_min``, ``uid_max`` to the user plugin to overwrite the defaults provided by the ``/etc/login.defs`` file (https://github.com/ansible/ansible/pull/81770).
- Add a new meta task ``end_role`` (https://github.com/ansible/ansible/issues/22286)
- Add a new mount_facts module to support gathering information about mounts that are excluded by default fact gathering.
- Introducing COLOR_INCLUDED parameter. This can set a specific color for "included" events.
- Removed the shell ``environment`` config entry as this is already covered by the play/task directives documentation and the value itself is not used in the shell plugins. This should remove any 
confusion around how people set the environment for a task.
- Suppress cryptography deprecation warnings for Blowfish and TripleDES when the ``paramiko`` Python module is installed.
- The minimum supported Python version on targets is now Python 3.8.
- ``ansible-galaxy collection publish`` - add configuration options for the initial poll interval and the exponential when checking the import status of a collection, since the default is relatively 
slow.
- ansible-config has new 'validate' option to find mispelled/forgein configurations in ini file or environment variables.
- ansible-doc - show examples in role entrypoint argument specs (https://github.com/ansible/ansible/pull/82671).
- ansible-galaxy - Handle authentication errors and token expiration
- ansible-test - Add Ubuntu 24.04 remote.
- ansible-test - Add support for Python 3.13.
- ansible-test - An ``ansible_core.egg-info`` directory is no longer generated when running tests.
- ansible-test - Connection options can be set for ansible-test managed remote Windows instances.
- ansible-test - Default to Python 3.13 in the ``base`` and ``default`` containers.
- ansible-test - Disable the ``deprecated-`` prefixed ``pylint`` rules as their results vary by Python version.
- ansible-test - Improve container runtime probe error handling. When unexpected probe output is encountered, an error with more useful debugging information is provided.
- ansible-test - Improve the error message shown when an unknown ``--remote`` or ``--docker`` option is given.
- ansible-test - Remove Python 2.7 compatibility imports.
- ansible-test - Removed the ``vyos/1.1.8`` network remote as it is no longer functional.
- ansible-test - Replace Alpine 3.19 container and remote with Alpine 3.20.
- ansible-test - Replace Fedora 39 container and remote with Fedora 40.
- ansible-test - Replace FreeBSD 14.0 remote with FreeBSD 14.1.
- ansible-test - Replace RHEL 9.3 remote with RHEL 9.4.
- ansible-test - Replace Ubuntu 20.04 container with Ubuntu 24.04 container.
- ansible-test - The ``empty-init`` sanity test no longer applies to ``module_utils`` packages.
- ansible-test - Update ``ansible-test-utility-container`` to version 3.1.0.
- ansible-test - Update ``base`` and ``default`` containers to omit Python 3.7.
- ansible-test - Update ``coverage`` to version 7.6.1.
- ansible-test - Update ``http-test-container`` to version 3.0.0.
- ansible-test - Update ``nios-test-container`` to version 5.0.0.
- ansible-test - Update ``pylint`` sanity test to use version 3.3.1.
- ansible-test - Update ``pypi-test-container`` to version 3.2.0.
- ansible-test - Update the ``base`` and ``default`` containers.
- ansible-test - Updated the frozen requirements for all sanity tests.
- ansible-test - Upgrade ``pip`` used in ansible-test managed virtual environments from version 24.0 to 24.2.
- ansible-test - Virtual environments created by ansible-test no longer include the ``wheel`` or ``setuptools`` packages.
- ansible-test - update HTTP test container to 3.2.0 (https://github.com/ansible/ansible/pull/83469).
- ansible.log now also shows log severity field
- distribution.py - Added SL-Micro in Suse OS Family. (https://github.com/ansible/ansible/pull/83541)
- dnf - minor internal changes in how the errors from the dnf API are handled; rely solely on the exceptions rather than inspecting text embedded in them
- dnf - remove legacy code for unsupported dnf versions
- dnf5 - implement ``enable_plugin`` and ``disable_plugin`` options
- fact gathering - Gather /proc/sysinfo facts on s390 Linux on Z
- facts - add systemd version and features
- find - change the datatype of ``elements`` to ``path`` in option ``paths`` (https://github.com/ansible/ansible/pull/83575).
- ini lookup - add new ``interpolation`` option (https://github.com/ansible/ansible/issues/83755)
- isidentifier - remove unwanted Python 2 specific code.
- loop_control - add a break_when option to to break out of a task loop early based on Jinja2 expressions (https://github.com/ansible/ansible/issues/83442).
- package_facts module now supports using aliases for supported package managers, for example managers=yum or managers=dnf will resolve to using the underlying rpm.
- plugins, deprecations and warnings concerning configuration are now displayed to the user, technical issue that prevented 'de-duplication' have been resolved.
- psrp - Remove connection plugin extras vars lookup. This should have no affect on existing users as all options have been documented.
- remove extraneous selinux import (https://github.com/ansible/ansible/issues/83657).
- replace random with secrets library.
- rpm_key - allow validation of gpg key with a subkey fingerprint
- rpm_key - enable gpg validation that requires presence of multiple fingerprints
- service_mgr - add support for dinit service manager (https://github.com/ansible/ansible/pull/83489).
- task timeout now returns timedout key with frame/code that was in execution when the timeout is triggered.
- timedout test for checking if a task result represents a 'timed out' task.
- unarchive - Remove Python 2.7 compatibility imports.
- validate-modules sanity test - detect if names of an option (option name + aliases) do not match between argument spec and documentation (https://github.com/ansible/ansible/issues/83598, 
https://github.com/ansible/ansible/pull/83599).
- validate-modules sanity test - reject option/aliases names that are identical up to casing but belong to different options (https://github.com/ansible/ansible/pull/83530).
- vaulted_file test filter added, to test if the provided path is an 'Ansible vaulted' file
- yum_repository - add ``excludepkgs`` alias to the ``exclude`` option.

Breaking Changes / Porting Guide
--------------------------------

- Stopped wrapping all commands sent over SSH on a Windows target with a ``powershell.exe`` executable. This results in one less process being started on each command for Windows to improve 
efficiency, simplify the code, and make ``raw`` an actual raw command run with the default shell configured on the Windows sshd settings. This should have no affect on most tasks except for ``raw`` 
which now is not guaranteed to always be running in a PowerShell shell and from having the console output codepage set to UTF-8. To avoid this issue either swap to using 
``ansible.windows.win_command``, ``ansible.windows.win_shell``, ``ansible.windows.win_powershell`` or manually wrap the raw command with the shell commands needed to set the output console encoding.
- persistent connection plugins - The ``ANSIBLE_CONNECTION_PATH`` config option no longer has any effect.

Deprecated Features
-------------------

- Deprecate ``ansible.module_utils.basic.AnsibleModule.safe_eval`` and ``ansible.module_utils.common.safe_eval`` as they are no longer used.
- persistent connection plugins - The ``ANSIBLE_CONNECTION_PATH`` config option no longer has any effect, and will be removed in a future release.
- yum_repository - deprecate ``async`` option as it has been removed in RHEL 8 and will be removed in ansible-core 2.22.
- yum_repository - the following options are deprecated: ``deltarpm_metadata_percentage``, ``gpgcakey``, ``http_caching``, ``keepalive``, ``metadata_expire_filter``, ``mirrorlist_expire``, 
``protect``, ``ssl_check_cert_permissions``, ``ui_repoid_vars`` as they have no effect for dnf as an underlying package manager. The options will be removed in ansible-core 2.22.

Removed Features (previously deprecated)
----------------------------------------

- Play - removed deprecated ``ROLE_CACHE`` property in favor of ``role_cache``.
- Remove deprecated `VariableManager._get_delegated_vars` method (https://github.com/ansible/ansible/issues/82950)
- Removed Python 3.10 as a supported version on the controller. Python 3.11 or newer is required.
- Removed support for setting the ``vars`` keyword to lists of dictionaries. It is now required to be a single dictionary.
- loader - remove deprecated non-inclusive words (https://github.com/ansible/ansible/issues/82947).
- paramiko_ssh - removed deprecated ssh_args from the paramiko_ssh connection plugin (https://github.com/ansible/ansible/issues/82939).
- paramiko_ssh - removed deprecated ssh_common_args from the paramiko_ssh connection plugin (https://github.com/ansible/ansible/issues/82940).
- paramiko_ssh - removed deprecated ssh_extra_args from the paramiko_ssh connection plugin (https://github.com/ansible/ansible/issues/82941).
- play_context - remove deprecated PlayContext.verbosity property (https://github.com/ansible/ansible/issues/82945).
- utils/listify - remove deprecated 'loader' argument from listify_lookup_plugin_terms API (https://github.com/ansible/ansible/issues/82949).

Security Fixes
--------------

- include_vars action - Ensure that result masking is correctly requested when vault-encrypted files are read. (CVE-2024-8775)
- task result processing - Ensure that action-sourced result masking (``_ansible_no_log=True``) is preserved. (CVE-2024-8775)
- user action won't allow ssh-keygen, chown and chmod to run on existing ssh public key file, avoiding traversal on existing symlinks (CVE-2024-9902).


To generate a diff of this commit:
cvs rdiff -u -r1.39 -r1.40 pkgsrc/sysutils/ansible-core/Makefile
cvs rdiff -u -r1.9 -r1.10 pkgsrc/sysutils/ansible-core/PLIST
cvs rdiff -u -r1.33 -r1.34 pkgsrc/sysutils/ansible-core/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/sysutils/ansible-core/Makefile
diff -u pkgsrc/sysutils/ansible-core/Makefile:1.39 pkgsrc/sysutils/ansible-core/Makefile:1.40
--- pkgsrc/sysutils/ansible-core/Makefile:1.39  Mon Nov 11 07:28:57 2024
+++ pkgsrc/sysutils/ansible-core/Makefile       Tue Nov 12 08:02:34 2024
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.39 2024/11/11 07:28:57 wiz Exp $
+# $NetBSD: Makefile,v 1.40 2024/11/12 08:02:34 adam Exp $
 
-DISTNAME=      ansible_core-2.17.5
+DISTNAME=      ansible_core-2.18.0
 PKGNAME=       ${DISTNAME:S/_/-/}
 CATEGORIES=    sysutils python
 MASTER_SITES=  ${MASTER_SITE_PYPI:=a/ansible-core/}

Index: pkgsrc/sysutils/ansible-core/PLIST
diff -u pkgsrc/sysutils/ansible-core/PLIST:1.9 pkgsrc/sysutils/ansible-core/PLIST:1.10
--- pkgsrc/sysutils/ansible-core/PLIST:1.9      Wed May 22 04:57:28 2024
+++ pkgsrc/sysutils/ansible-core/PLIST  Tue Nov 12 08:02:34 2024
@@ -1,7 +1,6 @@
-@comment $NetBSD: PLIST,v 1.9 2024/05/22 04:57:28 adam Exp $
+@comment $NetBSD: PLIST,v 1.10 2024/11/12 08:02:34 adam Exp $
 bin/ansible
 bin/ansible-config
-bin/ansible-connection
 bin/ansible-console
 bin/ansible-doc
 bin/ansible-galaxy
@@ -11,11 +10,15 @@ bin/ansible-pull
 bin/ansible-test
 bin/ansible-vault
 @pkgdir etc/ansible
+${PYSITELIB}/${WHEEL_INFODIR}/Apache-License.txt
 ${PYSITELIB}/${WHEEL_INFODIR}/COPYING
 ${PYSITELIB}/${WHEEL_INFODIR}/METADATA
+${PYSITELIB}/${WHEEL_INFODIR}/MIT-license.txt
+${PYSITELIB}/${WHEEL_INFODIR}/PSF-license.txt
 ${PYSITELIB}/${WHEEL_INFODIR}/RECORD
 ${PYSITELIB}/${WHEEL_INFODIR}/WHEEL
 ${PYSITELIB}/${WHEEL_INFODIR}/entry_points.txt
+${PYSITELIB}/${WHEEL_INFODIR}/simplified_bsd.txt
 ${PYSITELIB}/${WHEEL_INFODIR}/top_level.txt
 ${PYSITELIB}/ansible/__init__.py
 ${PYSITELIB}/ansible/__init__.pyc
@@ -178,6 +181,7 @@ ${PYSITELIB}/ansible/galaxy/collection/g
 ${PYSITELIB}/ansible/galaxy/collection/gpg.py
 ${PYSITELIB}/ansible/galaxy/collection/gpg.pyc
 ${PYSITELIB}/ansible/galaxy/collection/gpg.pyo
+${PYSITELIB}/ansible/galaxy/data/COPYING
 ${PYSITELIB}/ansible/galaxy/data/apb/Dockerfile.j2
 ${PYSITELIB}/ansible/galaxy/data/apb/Makefile.j2
 ${PYSITELIB}/ansible/galaxy/data/apb/README.md
@@ -291,6 +295,18 @@ ${PYSITELIB}/ansible/keyword_desc.yml
 ${PYSITELIB}/ansible/module_utils/__init__.py
 ${PYSITELIB}/ansible/module_utils/__init__.pyc
 ${PYSITELIB}/ansible/module_utils/__init__.pyo
+${PYSITELIB}/ansible/module_utils/_internal/__init__.py
+${PYSITELIB}/ansible/module_utils/_internal/__init__.pyc
+${PYSITELIB}/ansible/module_utils/_internal/__init__.pyo
+${PYSITELIB}/ansible/module_utils/_internal/_concurrent/__init__.py
+${PYSITELIB}/ansible/module_utils/_internal/_concurrent/__init__.pyc
+${PYSITELIB}/ansible/module_utils/_internal/_concurrent/__init__.pyo
+${PYSITELIB}/ansible/module_utils/_internal/_concurrent/_daemon_threading.py
+${PYSITELIB}/ansible/module_utils/_internal/_concurrent/_daemon_threading.pyc
+${PYSITELIB}/ansible/module_utils/_internal/_concurrent/_daemon_threading.pyo
+${PYSITELIB}/ansible/module_utils/_internal/_concurrent/_futures.py
+${PYSITELIB}/ansible/module_utils/_internal/_concurrent/_futures.pyc
+${PYSITELIB}/ansible/module_utils/_internal/_concurrent/_futures.pyo
 ${PYSITELIB}/ansible/module_utils/_text.py
 ${PYSITELIB}/ansible/module_utils/_text.pyc
 ${PYSITELIB}/ansible/module_utils/_text.pyo
@@ -581,6 +597,9 @@ ${PYSITELIB}/ansible/module_utils/facts/
 ${PYSITELIB}/ansible/module_utils/facts/system/ssh_pub_keys.py
 ${PYSITELIB}/ansible/module_utils/facts/system/ssh_pub_keys.pyc
 ${PYSITELIB}/ansible/module_utils/facts/system/ssh_pub_keys.pyo
+${PYSITELIB}/ansible/module_utils/facts/system/systemd.py
+${PYSITELIB}/ansible/module_utils/facts/system/systemd.pyc
+${PYSITELIB}/ansible/module_utils/facts/system/systemd.pyo
 ${PYSITELIB}/ansible/module_utils/facts/system/user.py
 ${PYSITELIB}/ansible/module_utils/facts/system/user.pyc
 ${PYSITELIB}/ansible/module_utils/facts/system/user.pyo
@@ -784,6 +803,9 @@ ${PYSITELIB}/ansible/modules/lineinfile.
 ${PYSITELIB}/ansible/modules/meta.py
 ${PYSITELIB}/ansible/modules/meta.pyc
 ${PYSITELIB}/ansible/modules/meta.pyo
+${PYSITELIB}/ansible/modules/mount_facts.py
+${PYSITELIB}/ansible/modules/mount_facts.pyc
+${PYSITELIB}/ansible/modules/mount_facts.pyo
 ${PYSITELIB}/ansible/modules/package.py
 ${PYSITELIB}/ansible/modules/package.pyc
 ${PYSITELIB}/ansible/modules/package.pyo
@@ -1501,6 +1523,7 @@ ${PYSITELIB}/ansible/plugins/test/succee
 ${PYSITELIB}/ansible/plugins/test/success.yml
 ${PYSITELIB}/ansible/plugins/test/successful.yml
 ${PYSITELIB}/ansible/plugins/test/superset.yml
+${PYSITELIB}/ansible/plugins/test/timedout.yml
 ${PYSITELIB}/ansible/plugins/test/truthy.yml
 ${PYSITELIB}/ansible/plugins/test/unreachable.yml
 ${PYSITELIB}/ansible/plugins/test/uri.py
@@ -1510,6 +1533,7 @@ ${PYSITELIB}/ansible/plugins/test/uri.ym
 ${PYSITELIB}/ansible/plugins/test/url.yml
 ${PYSITELIB}/ansible/plugins/test/urn.yml
 ${PYSITELIB}/ansible/plugins/test/vault_encrypted.yml
+${PYSITELIB}/ansible/plugins/test/vaulted_file.yml
 ${PYSITELIB}/ansible/plugins/test/version.yml
 ${PYSITELIB}/ansible/plugins/test/version_compare.yml
 ${PYSITELIB}/ansible/plugins/vars/__init__.py
@@ -1683,8 +1707,6 @@ ${PYSITELIB}/ansible_test/_data/requirem
 ${PYSITELIB}/ansible_test/_data/requirements/sanity.import.txt
 ${PYSITELIB}/ansible_test/_data/requirements/sanity.integration-aliases.in
 ${PYSITELIB}/ansible_test/_data/requirements/sanity.integration-aliases.txt
-${PYSITELIB}/ansible_test/_data/requirements/sanity.mypy.in
-${PYSITELIB}/ansible_test/_data/requirements/sanity.mypy.txt
 ${PYSITELIB}/ansible_test/_data/requirements/sanity.pep8.in
 ${PYSITELIB}/ansible_test/_data/requirements/sanity.pep8.txt
 ${PYSITELIB}/ansible_test/_data/requirements/sanity.pslint.ps1
@@ -1992,9 +2014,6 @@ ${PYSITELIB}/ansible_test/_internal/comm
 ${PYSITELIB}/ansible_test/_internal/commands/sanity/integration_aliases.py
 ${PYSITELIB}/ansible_test/_internal/commands/sanity/integration_aliases.pyc
 ${PYSITELIB}/ansible_test/_internal/commands/sanity/integration_aliases.pyo
-${PYSITELIB}/ansible_test/_internal/commands/sanity/mypy.py
-${PYSITELIB}/ansible_test/_internal/commands/sanity/mypy.pyc
-${PYSITELIB}/ansible_test/_internal/commands/sanity/mypy.pyo
 ${PYSITELIB}/ansible_test/_internal/commands/sanity/pep8.py
 ${PYSITELIB}/ansible_test/_internal/commands/sanity/pep8.pyc
 ${PYSITELIB}/ansible_test/_internal/commands/sanity/pep8.pyo
@@ -2237,10 +2256,6 @@ ${PYSITELIB}/ansible_test/_util/controll
 ${PYSITELIB}/ansible_test/_util/controller/sanity/integration-aliases/yaml_to_json.py
 ${PYSITELIB}/ansible_test/_util/controller/sanity/integration-aliases/yaml_to_json.pyc
 ${PYSITELIB}/ansible_test/_util/controller/sanity/integration-aliases/yaml_to_json.pyo
-${PYSITELIB}/ansible_test/_util/controller/sanity/mypy/ansible-core.ini
-${PYSITELIB}/ansible_test/_util/controller/sanity/mypy/ansible-test.ini
-${PYSITELIB}/ansible_test/_util/controller/sanity/mypy/modules.ini
-${PYSITELIB}/ansible_test/_util/controller/sanity/mypy/packaging.ini
 ${PYSITELIB}/ansible_test/_util/controller/sanity/pep8/current-ignore.txt
 ${PYSITELIB}/ansible_test/_util/controller/sanity/pslint/pslint.ps1
 ${PYSITELIB}/ansible_test/_util/controller/sanity/pslint/settings.psd1

Index: pkgsrc/sysutils/ansible-core/distinfo
diff -u pkgsrc/sysutils/ansible-core/distinfo:1.33 pkgsrc/sysutils/ansible-core/distinfo:1.34
--- pkgsrc/sysutils/ansible-core/distinfo:1.33  Tue Oct  8 10:42:03 2024
+++ pkgsrc/sysutils/ansible-core/distinfo       Tue Nov 12 08:02:34 2024
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.33 2024/10/08 10:42:03 adam Exp $
+$NetBSD: distinfo,v 1.34 2024/11/12 08:02:34 adam Exp $
 
-BLAKE2s (ansible_core-2.17.5.tar.gz) = 6cb6b2efb39aa7c357a15813b54c834ba20b46eccac813b6b9295ba41e849027
-SHA512 (ansible_core-2.17.5.tar.gz) = 944bab7e731f7c8dc8ea26a7792ac9a84ea51376755650ea4850885735324442581e1736a2f3d66c3304f115757d0f773e922abb15b1b9b9cd591a3adb940822
-Size (ansible_core-2.17.5.tar.gz) = 3097858 bytes
+BLAKE2s (ansible_core-2.18.0.tar.gz) = 8cf6c030db2d5d9bc7e94a5eb2a8e462f0be1649dade4ae4b5f380b600ea132b
+SHA512 (ansible_core-2.18.0.tar.gz) = 49165e4a6a5bf16e1450ecda0387cb8a143981bf10215f45c1376a468de7efe5348f36d8e419e1d54d701b050daab71ed908a946df29a502d160a47139d8dffa
+Size (ansible_core-2.18.0.tar.gz) = 3064903 bytes
 SHA1 (patch-lib_ansible_module__utils_facts_hardware_netbsd.py) = cdc41b104bffab7badd00446a9d0cdecba32cca2