New release v2.14.18rc1 (#84197)

changelogs/CHANGELOG-v2.14.rst

@@ -5,6 +5,36 @@ ansible-core 2.14 "C'mon Everybody" Release Notes
 .. contents:: Topics
 
 
+v2.14.18rc1
+===========
+
+Release Summary
+---------------
+
+| Release Date: 2024-10-29
+| `Porting Guide <https://docs.ansible.com/ansible-core/2.14/porting_guides/porting_guide_core_2.14.html>`__
+
+
+Minor Changes
+-------------
+
+- ansible-test - Improve container runtime probe error handling. When unexpected probe output is encountered, an error with more useful debugging information is provided.
+- ansible-test - Removed support for provisioning remote Windows 2012 and 2012-R2 instances.
+- ansible-test - Removed the ``vyos/1.1.8`` network remote as it is no longer functional.
+- ansible-test - Update ``pypi-test-container`` to version 3.1.0.
+
+Security Fixes
+--------------
+
+- include_vars action - Ensure that result masking is correctly requested when vault-encrypted files are read. (CVE-2024-8775)
+- task result processing - Ensure that action-sourced result masking (``_ansible_no_log=True``) is preserved. (CVE-2024-8775)
+- user action won't allow ssh-keygen, chown and chmod to run on existing ssh public key file, avoiding traversal on existing symlinks (CVE-2024-9902).
+
+Bugfixes
+--------
+
+- user action will now require O(force) to overwrite the public part of an ssh key when generating ssh keys, as was already the case for the private part.
+
 v2.14.17
 ========
 

changelogs/changelog.yaml

@@ -1130,6 +1130,42 @@ releases:
     - 2.14.17rc1_summary.yaml
     - ansible-test-centos7-pypi-proxy.yml
     release_date: '2024-05-13'
+  2.14.18rc1:
+    changes:
+      bugfixes:
+      - user action will now require O(force) to overwrite the public part of an ssh
+        key when generating ssh keys, as was already the case for the private part.
+      minor_changes:
+      - ansible-test - Improve container runtime probe error handling. When unexpected
+        probe output is encountered, an error with more useful debugging information
+        is provided.
+      - ansible-test - Removed support for provisioning remote Windows 2012 and 2012-R2
+        instances.
+      - ansible-test - Removed the ``vyos/1.1.8`` network remote as it is no longer
+        functional.
+      - ansible-test - Update ``pypi-test-container`` to version 3.1.0.
+      release_summary: '| Release Date: 2024-10-29
+
+        | `Porting Guide <https://docs.ansible.com/ansible-core/2.14/porting_guides/porting_guide_core_2.14.html>`__
+
+        '
+      security_fixes:
+      - include_vars action - Ensure that result masking is correctly requested when
+        vault-encrypted files are read. (CVE-2024-8775)
+      - task result processing - Ensure that action-sourced result masking (``_ansible_no_log=True``)
+        is preserved. (CVE-2024-8775)
+      - user action won't allow ssh-keygen, chown and chmod to run on existing ssh
+        public key file, avoiding traversal on existing symlinks (CVE-2024-9902).
+    codename: C'mon Everybody
+    fragments:
+    - 2.14.18rc1_summary.yaml
+    - ansible-test-probe-error-handling.yml
+    - ansible-test-pypi-test-container-update.yml
+    - ansible-test-vyos.yml
+    - ansible-test-windows-2012.yml
+    - cve-2024-8775.yml
+    - user_ssh_fix.yml
+    release_date: '2024-10-29'
   2.14.1rc1:
     changes:
       bugfixes:

changelogs/fragments/2.14.18rc1_summary.yaml

@@ -0,0 +1,3 @@
+release_summary: |
+   | Release Date: 2024-10-29
+   | `Porting Guide <https://docs.ansible.com/ansible-core/2.14/porting_guides/porting_guide_core_2.14.html>`__

lib/ansible/release.py

@@ -19,6 +19,6 @@
 from __future__ import (absolute_import, division, print_function)
 __metaclass__ = type
 
-__version__ = '2.14.17.post0'
+__version__ = '2.14.18rc1'
 __author__ = 'Ansible, Inc.'
 __codename__ = "C'mon Everybody"

pyproject.toml

@@ -1,3 +1,3 @@
 [build-system]
-requires = ["setuptools >= 45.2.0, <= 72.1.0"]  # lower bound to support controller Python versions, upper bound for latest version tested at release
+requires = ["setuptools >= 45.2.0, <= 75.3.0"]  # lower bound to support controller Python versions, upper bound for latest version tested at release
 build-backend = "setuptools.build_meta"