From 139b567cabb7891ef4c9a0c4e21584b45f25dae4 Mon Sep 17 00:00:00 2001
From: Matt Clay <matt@mystile.com>
Date: Mon, 30 Jun 2025 14:59:56 -0700
Subject: [PATCH] New release v2.19.0rc1 (#85403)

---
 changelogs/CHANGELOG-v2.19.rst              | 21 +++++++++++++++++
 changelogs/changelog.yaml                   | 26 +++++++++++++++++++++
 changelogs/fragments/2.19.0rc1_summary.yaml |  3 +++
 lib/ansible/release.py                      |  2 +-
 4 files changed, 51 insertions(+), 1 deletion(-)
 create mode 100644 changelogs/fragments/2.19.0rc1_summary.yaml

diff --git a/changelogs/CHANGELOG-v2.19.rst b/changelogs/CHANGELOG-v2.19.rst
index a57674392fb..dc76df68c57 100644
--- a/changelogs/CHANGELOG-v2.19.rst
+++ b/changelogs/CHANGELOG-v2.19.rst
@@ -4,6 +4,27 @@ ansible-core 2.19 "What Is and What Should Never Be" Release Notes
 
 .. contents:: Topics
 
+v2.19.0rc1
+==========
+
+Release Summary
+---------------
+
+| Release Date: 2025-06-30
+| `Porting Guide <https://docs.ansible.com/ansible-core/2.19/porting_guides/porting_guide_core_2.19.html>`__
+
+Minor Changes
+-------------
+
+- templating - Relaxed the Jinja sandbox to allow specific bitwise operations which have no filter equivalent. The allowed methods are ``__and__``, ``__lshift__``, ``__or__``, ``__rshift__``, ``__xor__``.
+- templating - Switched from the Jinja immutable sandbox to the standard sandbox. This restores the ability to use mutation methods such as ``list.append`` and ``dict.update``.
+
+Bugfixes
+--------
+
+- Update automatic role argument spec validation to not use deprecated syntax (https://github.com/ansible/ansible/issues/85399).
+- ssh connection plugin - Allow only one password prompt attempt when utilizing ``SSH_ASKPASS`` (https://github.com/ansible/ansible/issues/85359)
+
 v2.19.0b7
 =========
 
diff --git a/changelogs/changelog.yaml b/changelogs/changelog.yaml
index 911ca9bc75d..510d1a469de 100644
--- a/changelogs/changelog.yaml
+++ b/changelogs/changelog.yaml
@@ -1112,3 +1112,29 @@ releases:
     - variable_names.yml
     - warn-on-reserved.yml
     release_date: '2025-06-24'
+  2.19.0rc1:
+    changes:
+      bugfixes:
+      - Update automatic role argument spec validation to not use deprecated syntax
+        (https://github.com/ansible/ansible/issues/85399).
+      - ssh connection plugin - Allow only one password prompt attempt when utilizing
+        ``SSH_ASKPASS`` (https://github.com/ansible/ansible/issues/85359)
+      minor_changes:
+      - templating - Relaxed the Jinja sandbox to allow specific bitwise operations
+        which have no filter equivalent. The allowed methods are ``__and__``, ``__lshift__``,
+        ``__or__``, ``__rshift__``, ``__xor__``.
+      - templating - Switched from the Jinja immutable sandbox to the standard sandbox.
+        This restores the ability to use mutation methods such as ``list.append``
+        and ``dict.update``.
+      release_summary: '| Release Date: 2025-06-30
+
+        | `Porting Guide <https://docs.ansible.com/ansible-core/2.19/porting_guides/porting_guide_core_2.19.html>`__
+
+        '
+    codename: What Is and What Should Never Be
+    fragments:
+    - 2.19.0rc1_summary.yaml
+    - 85359-askpass-incorrect-password-retries.yml
+    - fix-auto-role-spec-validation-deprecation.yml
+    - template-sandbox.yml
+    release_date: '2025-06-30'
diff --git a/changelogs/fragments/2.19.0rc1_summary.yaml b/changelogs/fragments/2.19.0rc1_summary.yaml
new file mode 100644
index 00000000000..3d1b1bda176
--- /dev/null
+++ b/changelogs/fragments/2.19.0rc1_summary.yaml
@@ -0,0 +1,3 @@
+release_summary: |
+   | Release Date: 2025-06-30
+   | `Porting Guide <https://docs.ansible.com/ansible-core/2.19/porting_guides/porting_guide_core_2.19.html>`__
diff --git a/lib/ansible/release.py b/lib/ansible/release.py
index 3a0438f1a0f..3acce268f22 100644
--- a/lib/ansible/release.py
+++ b/lib/ansible/release.py
@@ -17,6 +17,6 @@
 
 from __future__ import annotations
 
-__version__ = '2.19.0b7.post0'
+__version__ = '2.19.0rc1'
 __author__ = 'Ansible, Inc.'
 __codename__ = "What Is and What Should Never Be"