From 2dd22e3025df7b6cefead5b9cb8f59a2662756b4 Mon Sep 17 00:00:00 2001 From: Matt Martz Date: Tue, 3 Oct 2023 16:01:03 -0400 Subject: [PATCH] New release v2.16.0b2 (#81864) --- changelogs/CHANGELOG-v2.16.rst | 31 +++++++++++++++++- changelogs/changelog.yaml | 37 +++++++++++++++++++++- changelogs/fragments/2.16.0b2_summary.yaml | 3 ++ lib/ansible/release.py | 2 +- 4 files changed, 70 insertions(+), 3 deletions(-) create mode 100644 changelogs/fragments/2.16.0b2_summary.yaml diff --git a/changelogs/CHANGELOG-v2.16.rst b/changelogs/CHANGELOG-v2.16.rst index da6367f97a9..d36d5bff4cf 100644 --- a/changelogs/CHANGELOG-v2.16.rst +++ b/changelogs/CHANGELOG-v2.16.rst @@ -5,6 +5,34 @@ ansible-core 2.16 "All My Love" Release Notes .. contents:: Topics +v2.16.0b2 +========= + +Release Summary +--------------- + +| Release Date: 2023-10-03 +| `Porting Guide `__ + + +Minor Changes +------------- + +- ansible-test - When invoking ``sleep`` in containers during container setup, the ``env`` command is used to avoid invoking the shell builtin, if present. + +Security Fixes +-------------- + +- ansible-galaxy - Prevent roles from using symlinks to overwrite files outside of the installation directory (CVE-2023-5115) + +Bugfixes +-------- + +- ``import_role`` reverts to previous behavior of exporting vars at compile time. +- ansible-galaxy info - fix reporting no role found when lookup_role_by_name returns None. +- uri/urls - Add compat function to handle the ability to parse the filename from a Content-Disposition header (https://github.com/ansible/ansible/issues/81806) +- winrm - Better handle send input failures when communicating with hosts under load + v2.16.0b1 ========= @@ -82,10 +110,11 @@ Minor Changes - ansible-test - Update the ``nios-test-container`` to version 2.0.0, which supports API version 2.9. - ansible-test - Update the logic used to detect when ``ansible-test`` is running from source. - ansible-test - Updated the CloudStack test container to version 1.6.1. +- ansible-test - Updated the distro test containers to version 6.3.0 to include coverage 7.3.2 for Python 3.8+. The alpine3 container is now based on 3.18 instead of 3.17 and includes Python 3.11 instead of Python 3.10. - ansible-test - Use ``datetime.datetime.now`` with ``tz`` specified instead of ``datetime.datetime.utcnow``. - ansible-test - Use a context manager to perform cleanup at exit instead of using the built-in ``atexit`` module. - ansible-test - remove Alpine 3.17 from remotes -- ansible-test — Python 3.8–3.12 will use ``coverage`` v7.3.0. +- ansible-test — Python 3.8–3.12 will use ``coverage`` v7.3.2. - ansible-test — ``coverage`` v6.5.0 is to be used only under Python 3.7. - ansible-vault create: Now raises an error when opening the editor without tty. The flag --skip-tty-check restores previous behaviour. - ansible_user_module - tweaked macos user defaults to reflect expected defaults (https://github.com/ansible/ansible/issues/44316) diff --git a/changelogs/changelog.yaml b/changelogs/changelog.yaml index cc33e244258..060ce878a30 100644 --- a/changelogs/changelog.yaml +++ b/changelogs/changelog.yaml @@ -410,12 +410,15 @@ releases: - ansible-test - Update the logic used to detect when ``ansible-test`` is running from source. - ansible-test - Updated the CloudStack test container to version 1.6.1. + - ansible-test - Updated the distro test containers to version 6.3.0 to include + coverage 7.3.2 for Python 3.8+. The alpine3 container is now based on 3.18 + instead of 3.17 and includes Python 3.11 instead of Python 3.10. - ansible-test - Use ``datetime.datetime.now`` with ``tz`` specified instead of ``datetime.datetime.utcnow``. - ansible-test - Use a context manager to perform cleanup at exit instead of using the built-in ``atexit`` module. - ansible-test - remove Alpine 3.17 from remotes - - "ansible-test \u2014 Python 3.8\u20133.12 will use ``coverage`` v7.3.0." + - "ansible-test \u2014 Python 3.8\u20133.12 will use ``coverage`` v7.3.2." - "ansible-test \u2014 ``coverage`` v6.5.0 is to be used only under Python 3.7." - 'ansible-vault create: Now raises an error when opening the editor without tty. The flag --skip-tty-check restores previous behaviour.' @@ -678,3 +681,35 @@ releases: - yum-repository-docs-fixes.yml - yum_repository_keepcache.yml release_date: '2023-09-26' + 2.16.0b2: + changes: + bugfixes: + - '``import_role`` reverts to previous behavior of exporting vars at compile + time.' + - ansible-galaxy info - fix reporting no role found when lookup_role_by_name + returns None. + - uri/urls - Add compat function to handle the ability to parse the filename + from a Content-Disposition header (https://github.com/ansible/ansible/issues/81806) + - winrm - Better handle send input failures when communicating with hosts under + load + minor_changes: + - ansible-test - When invoking ``sleep`` in containers during container setup, + the ``env`` command is used to avoid invoking the shell builtin, if present. + release_summary: '| Release Date: 2023-10-03 + + | `Porting Guide `__ + + ' + security_fixes: + - ansible-galaxy - Prevent roles from using symlinks to overwrite files outside + of the installation directory (CVE-2023-5115) + codename: All My Love + fragments: + - 2.16.0b2_summary.yaml + - 81806-py2-content-disposition.yml + - ansible-test-container-sleep.yml + - cve-2023-5115.yml + - fix-ansible-galaxy-info-no-role-found.yml + - import_role_goes_public.yml + - winrm-send-input.yml + release_date: '2023-10-03' diff --git a/changelogs/fragments/2.16.0b2_summary.yaml b/changelogs/fragments/2.16.0b2_summary.yaml new file mode 100644 index 00000000000..f00704ccced --- /dev/null +++ b/changelogs/fragments/2.16.0b2_summary.yaml @@ -0,0 +1,3 @@ +release_summary: | + | Release Date: 2023-10-03 + | `Porting Guide `__ diff --git a/lib/ansible/release.py b/lib/ansible/release.py index 0d97b8421e4..5ab50910d98 100644 --- a/lib/ansible/release.py +++ b/lib/ansible/release.py @@ -19,6 +19,6 @@ from __future__ import (absolute_import, division, print_function) __metaclass__ = type -__version__ = '2.16.0b1.post0' +__version__ = '2.16.0b2' __author__ = 'Ansible, Inc.' __codename__ = "All My Love"