Compare commits

..

55 Commits

Author SHA1 Message Date
sivel / Matt Martz 754d8eb868
New release v2.20.1rc1 (#86286) 2 days ago
Brian Coca fe6654bc8c
vars loading, show file name instead of vars in error (#86277) (#86280)
* Show file instead of vars on load error

(cherry picked from commit 490795770f34120adc02b08fc24fc50be6ac68a2)
(cherry picked from commit 11a2d02bf2)

* merged

* Update lib/ansible/vars/manager.py



---------


(cherry picked from commit 335db20951)

Co-authored-by: Abhijeet Kasurde <akasurde@redhat.com>
2 days ago
Abhijeet Kasurde 19428e37af
[stable-2.20] regex: fix example documentation for regex_test (#86172) (#86256)
Fixes: https://github.com/ansible/ansible-documentation/issues/3246
(cherry picked from commit 5f2d96c)

Signed-off-by: Abhijeet Kasurde <Akasurde@redhat.com>
2 days ago
Felix Fontein f704b0c7ef
runtime-metadata sanity test: ignore pre-release and build identifier (#85198) (#86159)
* Ignore pre-release and build identifier.

* Add tests.

* Improve changelog fragment.



* Extend tests.

---------


(cherry picked from commit 89ba882b08)

Co-authored-by: Matt Clay <matt@mystile.com>
1 week ago
Abhijeet Kasurde 4e2136cdbd
[stable-2.20] Fix getuser fallback error handling (#86144) (#86167)
(cherry picked from commit 4184d96)

Co-authored-by: Matt Clay <matt@mystile.com>
1 week ago
Felix Fontein 79a243940f
Fix AnsibleModule.human_to_bytes (#85259) (#86173)
* Fix AnsibleModule.human_to_bytes.

* Add unit test.

* Fix wrong example in docstring.

* Forgot tests without keyword.



* Apply review suggestions.

* Add type hints.



---------



(cherry picked from commit 13a7393cfe)

Signed-off-by: Abhijeet Kasurde <Akasurde@redhat.com>
Co-authored-by: Matt Clay <matt@mystile.com>
1 week ago
Abhijeet Kasurde 8de1d8ea3f
[stable-2.20] get_url: Fix regex for GNU digest line (#86134) (#86215)
* GNU digest line may contain multiple spaces between
  checksum and filename. Fix regex to handle this situation.

Fixes: #86132
(cherry picked from commit af9009b)

Signed-off-by: Abhijeet Kasurde <Akasurde@redhat.com>
1 week ago
Abhijeet Kasurde cc7b984418
[stable-2.20] Fix first_found example (#86224) (#86225)
(cherry picked from commit ce84d31)

Co-authored-by: Matt Clay <matt@mystile.com>
1 week ago
Matt Clay 0feb43a333
[stable-2.20] ansible-test - Improve AZP commit API error handling (#86197) (#86201)
(cherry picked from commit 3d26431e4f)
3 weeks ago
🇺🇦 Sviatoslav Sydorenko (Святослав Сидоренко) 9d38ce7007
[stable-2.20] 🧪 Set timeouts for CI jobs (#86109)
Sometimes, AZP would mark steps in jobs as cancelled when they've
actually exited successfully but on the boundary of the default
60-minute timeout. Such logs might be difficult to reason about.

Additionally, `entry-point.sh` sets a 60-minute timeout for the main
test invocation but it would never trigger earlier that AZP would kill
such a job as the job-global timeout was 60 minutes already and it'd
always be hit earlier than the test runner one.

The patch sets maximum observable job timeouts with extra buffer to
account for flakiness.

PR #86073
(cherry picked from commit 730af32)

Co-authored-by: Matt Clay <matt@mystile.com>
3 weeks ago
🇺🇦 Sviatoslav Sydorenko (Святослав Сидоренко) f5fc17ad39
[stable-2.20] Install `xt_comment` kernel mod @ `iptables` test (#86187) (#86195)
This patch fixes integration test jobs running under RHEL 10.0 that don't have this extension pre-installed.

(cherry picked from commit 69c9fbed26)
3 weeks ago
Matt Clay 9db2cae072
[stable-2.20] Fix unit test serialization (#86163) (#86164)
This allows the test to work on pytest 9+

(cherry picked from commit 76f07034b3)
3 weeks ago
Matt Davis bc15b10d18
Update Ansible release version to v2.20.0.post0. (#86131) 4 weeks ago
Matt Davis 85a7a5ae15
New release v2.20.0 (#86126) 4 weeks ago
Matt Clay ba5ba3ccfc
Update Ansible release version to v2.20.0rc3.post0. (#86097) 1 month ago
Matt Clay 560b1af96d
New release v2.20.0rc3 (#86093) 1 month ago
Brian Coca 8a85ee8363
option deprecations show alternatives (#86032) (#86069)
Give users a helpful hint on what to do to address the deprecation

(cherry picked from commit 516a114ef6)
1 month ago
Abhijeet Kasurde 032d91897b
[stable-2.20] package_facts: typecast bytes to string while returning facts (#85939) (#86046)
Fixes: #85937
(cherry picked from commit ef53d63)

Signed-off-by: Abhijeet Kasurde <Akasurde@redhat.com>
1 month ago
Brian Coca 2721b0d50a
config lookup, fix 'show_origin' and variables (#85356) (#86041)
show_origin and variable sources were broken for base config when 'forked' from plugins
---------
Co-authored-by: 🇺🇦 Sviatoslav Sydorenko (Святослав Сидоренко) <wk.cvs.github@sydorenko.org.ua>

(cherry picked from commit 1cb2932c95)
1 month ago
Jordan Borean 2ca84eea86
[stable-2.20] Remove AddType warning for cleanup (#86029) (#86039)
* Remove AddType warning for cleanup (#86029)

Removes the warning emitted when using Add-Type and the cleanup of temp
files fails due to a file still being in use. The cleanup should be
handled by AnsibleModule on exit giving it more time to wait for any
open file handles to close. The exception is still present if calling
`Add-CSharpType` without an `AnsibleModule` object.

(cherry picked from commit 99bb587906)

* Update win_exec_wrapper integration test to match #86029 (#86052)

* Remove assertion now that there is no warning

(cherry picked from commit df34bf9e70)

---------

Co-authored-by: Sloane Hertel <19572925+s-hertel@users.noreply.github.com>
1 month ago
Matt Clay 549a6acac8
ansible-test - Update default containers (#86088) 1 month ago
Matt Clay 453a706c85
[stable-2.20] ansible-test - Update sanity requirements (#86083) (#86084)
(cherry picked from commit 12acd5c18f)
1 month ago
sivel / Matt Martz 3e33dc5cbf
Update Ansible release version to v2.20.0rc2.post0. (#86037) 1 month ago
sivel / Matt Martz f83bccc457
New release v2.20.0rc2 (#86034) 1 month ago
Jordan Borean fb61d54216
Fix psrp - ReadTimeout exceptions now mark host as unreachable (#85974) (#85993)
* psrp - ReadTimeout exceptions now mark host as unreachable

* add try to _exec_psrp_script

* fix indent E111

* update raise format

switch to raise Exception from e



---------


(cherry picked from commit 9fcf1f7c58)

Co-authored-by: Michał Gąsior <rogacz@gmail.com>
2 months ago
Martin Krizek 061c504e98
[stable-2.20] Avoid the ssh-agent exiting before tests end (#85979) (#86008)
There were couple of occurrences where the hard 30 seconds limit on
running ssh-agent was not enough for the test to run and the ssh-agent
was killed resulting in the test failing with "Connection refused". This
change just lets the agent run in the background and kills it
manually after the tests finish.
(cherry picked from commit 05d5b0f168)
2 months ago
sivel / Matt Martz 48789c4efc
[stable-2.20] Don't deprecate six yet (#86020) (#86021)
* [stable-2.20] Don't deprecate six yet (#86020)
(cherry picked from commit 1a3e63c)
2 months ago
sivel / Matt Martz f14923276c
Update Ansible release version to v2.20.0rc1.post0. (#85991) 2 months ago
sivel / Matt Martz 5431f258b8
New release v2.20.0rc1 (#85989) 2 months ago
sivel / Matt Martz 163a6ec526
fix urls in additional ansible-doc test (#85988)
(cherry picked from commit c02f59ca3a)
2 months ago
Matt Clay 110993bbfd
ansible-test - Update base/default/distro containers (#85985)
(cherry picked from commit 83c79240ec)
2 months ago
Matt Clay bdba82ff07
ansible-test - Upgrade coverage to 7.10.7 (#85981)
(cherry picked from commit 7c2311d547)
2 months ago
Matt Clay 405e2bf2bf
ansible-test - Update pinned pip to 25.2 (#85982)
(cherry picked from commit de7dd5bbb2)
2 months ago
Matt Clay ed60501603
ansible-test - Update sanity test requirements (#85980)
(cherry picked from commit 9ee667030f)
2 months ago
Matt Clay d0552b56ef
ansible-test - Update base/default containers (#85967)
(cherry picked from commit 82b64d4b69)
2 months ago
Matt Clay ab4d37a803
Use bcrypt < 5 for unit tests (#85969)
(cherry picked from commit 06456c68ec)
2 months ago
Sviatoslav Sydorenko 1b6bcc53b1
Mention pkg name in `package-data` sanity output
The logs were displaying a series of numbers in parens like `(66.1.0)`
at the end of each error line. its unintuitive what that means. I had
to look into the source code to confirm my suspicion of it being the
version of `setuptools`. This patch spells it out.

(cherry picked from commit 53afc6f203)
2 months ago
Sviatoslav Sydorenko 3f7cfd961c
Use strict_optional @ ansible.galaxy.dependency_resolution
This patch drops unnecessary default for
`CollectionDependencyProvider`'s `concrete_artifacts_manager` argument
as it is always passed, in every place across the code base where the
provider is constructed.

It was also causing MyPy violations on calls to
`_ComputedReqKindsMixin.from_requirement_dict()` in the "strict
optional" mode which is now enforced for $sbj, while remaining
disabled globally.

It is a #85545 follow-up.

(cherry picked from commit 0cd36ce6d0)
2 months ago
Sviatoslav Sydorenko bef8eece4b
Type-annotate ansible.galaxy.dependency_resolution
This patch is a combination of `pyrefly autotype` and manual
post-processing. Parts of it migrate pre-existing comment-based
annotations, fixing incorrect ones where applicable.

The change also configures MyPy to run checks against actual
`resolvelib` annotations and includes a small tweak of
`ansible.galaxy.collection._resolve_depenency_map` to make it
compatible with those.

Co-Authored-By: Jordan Borean <jborean93@gmail.com>
Co-Authored-By: Matt Clay <matt@mystile.com>
Co-Authored-By: Sloane Hertel <19572925+s-hertel@users.noreply.github.com>
(cherry picked from commit c9131aa847)
2 months ago
David Shrewsbury cc6a93f23e
Fix flakey get_url test (#85953)
(cherry picked from commit feda8fc564)
2 months ago
sivel / Matt Martz 59dc766d7d
[stable-2.20] Fix signal propagation (#85907) (#85983)
(cherry picked from commit 5a9afe4)
2 months ago
sivel / Matt Martz a4776f850c
Update Ansible release version to v2.20.0b2.post0. (#85954) 2 months ago
sivel / Matt Martz 4f1fe10921
New release v2.20.0b2 (#85950) 2 months ago
sivel / Matt Martz ff29cd4ff0
Update DataLoader.get_basedir to be an abspath (#85940)
(cherry picked from commit 6673a14a9e)
2 months ago
s-hamann 06f272129c
fetch - return file in result when changed is true (#85729)
Set the (source) file attribute in the return value if the file changed
(e.g. on initial fetch). The attribute is already set in all other
cases.

(cherry picked from commit 0c7dcb65cf)
2 months ago
Martin Krizek 0f079fd23f
Deprecate `ansible.module_utils.six` (#85934)
* Deprecate `ansible.module_utils.six`

Fixes #85920

(cherry picked from commit 686c3658ae)
2 months ago
Sloane Hertel cbeb1da98b
Remove support for resolvelib < 0.8.0 (#85936)
* Remove support for resolvelib < 0.8.0

Remove code handling differences between resolvelib 0.5.3 and 0.8.0

Drop some versions from the test to reduce the time it takes to run

Co-authored-by: Sviatoslav Sydorenko <wk@sydorenko.org.ua>

* Remove type annotation

---------

Co-authored-by: Sviatoslav Sydorenko <wk@sydorenko.org.ua>
(cherry picked from commit cb2ecda514)
2 months ago
Martin Krizek 7db5959813
Don't special case implicit meta tasks when filtering on tags (#85805)
* Don't special case implicit meta tasks when filtering on tags

Fixes #85475

(cherry picked from commit 313c6f6b4d)
2 months ago
Abhijeet Kasurde 40b11f86fb
known_hosts: return rc and stderr in fail_json (#85871)
* When ssh-keygen fails, return rc and stderr in fail_json
  in order to help debugging.

Fixes: #85850

Signed-off-by: Abhijeet Kasurde <Akasurde@redhat.com>
(cherry picked from commit 6bee84318d)
2 months ago
Martin Krizek 580eb781dc
import_tasks processing closer to include_tasks (#85877)
Fixes #69882
Closes #83853
Fixes #85855
Fixes #85856

(cherry picked from commit c3f87b31d1)
2 months ago
Abhijeet Kasurde f23224d7b4
falsy: Update doc (#85913)
Signed-off-by: Abhijeet Kasurde <Akasurde@redhat.com>
(cherry picked from commit c5e6227bdb)
2 months ago
Luca Steinke 418746dcfc
fix description of truthy test (#85911)
There's a "not" too much here.

Maybe further examples can be found.

(cherry picked from commit eafa139f77)
2 months ago
Felix Fontein 48ef23fe4f
Make sure ansible-doc doesn't crash when scanning collections whose path contains ansible_collections twice (#85361)
Ref: https://github.com/ansible/ansible/issues/84909#issuecomment-2767335761

Co-authored-by: s-hertel <19572925+s-hertel@users.noreply.github.com>
Co-authored-by: Brian Coca <bcoca@users.noreply.github.com>
(cherry picked from commit c6d8d206af)
2 months ago
Matt Davis 00ee6040b6
Update Ansible release version to v2.20.0b1.post0. (#85902) 2 months ago
Matt Davis 21de43ab65
New release v2.20.0b1 (#85901) 2 months ago

@ -47,25 +47,13 @@ def parse_args() -> Args:
return Args(**kwargs) return Args(**kwargs)
def run( def run(*args: str | pathlib.Path) -> None:
*args: str | pathlib.Path,
dry_run: bool = False,
) -> None:
"""
Log and run given command.
The command is not actually executed if ``dry_run`` is truthy.
"""
cmd = [str(arg) for arg in args] cmd = [str(arg) for arg in args]
print(f'==> {shlex.join(cmd)}', flush=True)
subprocess.run(cmd, check=True)
dry_prefix = '[would run] ' if dry_run else ''
print(f'==> {dry_prefix}{shlex.join(cmd)}', flush=True)
if not dry_run: def install_codecov(dest: pathlib.Path) -> pathlib.Path:
subprocess.run(cmd, check=True)
def install_codecov(dest: pathlib.Path, dry_run: bool = False) -> pathlib.Path:
"""Populate a transitively pinned venv with ``codecov-cli``.""" """Populate a transitively pinned venv with ``codecov-cli``."""
requirement_file = DEPS_DIR / 'codecov.in' requirement_file = DEPS_DIR / 'codecov.in'
constraint_file = requirement_file.with_suffix('.txt') constraint_file = requirement_file.with_suffix('.txt')
@ -84,7 +72,6 @@ def install_codecov(dest: pathlib.Path, dry_run: bool = False) -> pathlib.Path:
f'--constraint={constraint_file!s}', f'--constraint={constraint_file!s}',
f'--requirement={requirement_file!s}', f'--requirement={requirement_file!s}',
'--disable-pip-version-check', '--disable-pip-version-check',
dry_run=dry_run,
) )
return codecov_bin return codecov_bin
@ -131,40 +118,16 @@ def upload_files(codecov_bin: pathlib.Path, config_file: pathlib.Path, files: t.
run(*cmd) run(*cmd)
def report_upload_completion(
codecov_bin: pathlib.Path,
config_file: pathlib.Path,
dry_run: bool = False,
) -> None:
"""Notify Codecov backend that all reports we wanted are in."""
cmd = [
codecov_bin,
'--disable-telem',
f'--codecov-yml-path={config_file}',
'send-notifications',
]
run(*cmd, dry_run=dry_run)
def main() -> None: def main() -> None:
args = parse_args() args = parse_args()
with tempfile.TemporaryDirectory(prefix='codecov-') as tmpdir: with tempfile.TemporaryDirectory(prefix='codecov-') as tmpdir:
config_file = pathlib.Path(tmpdir) / 'config.yml' config_file = pathlib.Path(tmpdir) / 'config.yml'
# Refs: config_file.write_text('')
# * https://docs.codecov.com/docs/codecovyml-reference#codecovnotifymanual_trigger
# * https://docs.codecov.com/docs/notifications#preventing-notifications-until-youre-ready-to-send-notifications codecov_bin = install_codecov(pathlib.Path(tmpdir))
config_file.write_text('codecov:\n notify:\n manual_trigger: true')
codecov_bin = install_codecov(
pathlib.Path(tmpdir),
dry_run=args.dry_run,
)
files = process_files(args.path) files = process_files(args.path)
upload_files(codecov_bin, config_file, files, args.dry_run) upload_files(codecov_bin, config_file, files, args.dry_run)
# Ref: https://docs.codecov.com/docs/cli-options#send-notifications
report_upload_completion(codecov_bin, config_file, args.dry_run)
if __name__ == '__main__': if __name__ == '__main__':

@ -1,55 +0,0 @@
---
description: Review an Ansible PR following the project's standardized process from CLAUDE.md
argument-hint: <pr_number>
allowed-tools: [TodoWrite, Bash(gh pr view:*), Bash(gh pr diff:*), Bash(gh pr checkout:*), Bash(gh pr checks:*), Read, Grep, Glob, Search]
---
PR Review Command
=================
Review an Ansible PR following the project's standardized process from `CLAUDE.md`.
Usage
-----
```bash
/review <pr_number>
```
Arguments
---------
- `pr_number` (required): The GitHub PR number to review
Implementation
--------------
This command implements the PR Review Guidelines documented in the `PR Review Guidelines` section of CLAUDE.md.
Review Process Steps
--------------------
The command follows these numbered steps from CLAUDE.md:
1. **Create TodoWrite list** for systematic review tracking
2. **Get PR details**: `gh pr view <number>` to understand scope, motivation and the desired outcome
3. **Get PR diff**: `gh pr diff <number>` to see all changes
4. **Check required components FIRST**:
- Verify changelog fragment exists in `changelogs/fragments/`
- Verify changelog uses correct section (check `changelogs/config.yaml`)
- Verify tests exist and specifically cover the changed code paths
- Unit tests should be pytest style, and functional rather than tightly coupled to mocking
- Integration tests required for almost all plugin changes
5. **Checkout PR branch**: `gh pr checkout <number>` to examine code holistically
6. **Review existing feedback**: `gh pr view <number> --comments` for all comments and previous reviews
7. **Verify all issues addressed**: Ensure bot failures, reviewer requests, and discussion points are resolved
8. **Call out unresolved feedback**: Explicitly mention any discussions/requests that remain unaddressed
Critical Review Elements
------------------------
- **Licensing**: Verify GPLv3/BSD-2-Clause compatibility for any new dependencies
- **Test scope**: Tests must exercise actual changed code, not just add random coverage
- **Changelog validation**: Fragment structure follows sections defined in `changelogs/config.yaml`
Each step is tracked in TodoWrite for visibility and systematic completion. A review round should not exceed 20 feedback items.

@ -105,8 +105,7 @@ body:
label: Configuration label: Configuration
description: >- description: >-
Paste verbatim output from `ansible-config dump --only-changed -t all` below, under the prompt line. Paste verbatim output from `ansible-config dump --only-changed -t all` below, under the prompt line.
Remember to redact secret values. You can easily filter Galaxy server secrets using grep, (if using a version older than ansible-core 2.12 you should omit the '-t all')
for example `ansible-config dump --only-changed -t all | grep -Ev 'token|password|client_secret'`.
Please don't wrap it with triple backticks — your Please don't wrap it with triple backticks — your
whole input will be turned into a code snippet automatically. whole input will be turned into a code snippet automatically.
render: console render: console

@ -130,8 +130,6 @@ body:
label: Configuration label: Configuration
description: >- description: >-
Paste verbatim output from `ansible-config dump --only-changed -t all` below, under the prompt line. Paste verbatim output from `ansible-config dump --only-changed -t all` below, under the prompt line.
Remember to redact secret values. You can easily filter Galaxy server secrets using grep,
for example `ansible-config dump --only-changed -t all | grep -Ev 'token|password|client_secret'`.
(if using a version older than ansible-core 2.12 you should omit the '-t all') (if using a version older than ansible-core 2.12 you should omit the '-t all')
Please don't wrap it with triple backticks — your Please don't wrap it with triple backticks — your
whole input will be turned into a code snippet automatically. whole input will be turned into a code snippet automatically.

2
.gitignore vendored

@ -127,5 +127,3 @@ test/units/.coverage.*
/SYMLINK_CACHE.json /SYMLINK_CACHE.json
changelogs/.plugin-cache.yaml changelogs/.plugin-cache.yaml
.ansible-test-timeout.json .ansible-test-timeout.json
# Agents
CLAUDE.local.md

@ -1,321 +0,0 @@
# AGENTS.md
This file provides guidance to Claude Code (claude.ai/code) and other compatible agentic tools when working with code in this repository.
**Note:** This file is for AI assistant use only. For human developers, see the [Ansible Developer Guide](https://docs.ansible.com/ansible-core/devel/dev_guide/index.html).
## ⚠️ IMPORTANT: Always Start Here
**BEFORE starting any PR review or development task:**
1. **Read this file first** - Don't work from memory or assumptions
2. **Use TodoWrite** to create a task list and track progress systematically
3. **Follow the numbered steps** in the relevant process sections
4. **Reference Quick Reference** for correct commands and patterns
## ⚠️ CRITICAL: Licensing Requirements
**NEVER suggest, recommend, or approve code that violates these requirements:**
- **ansible-core**: All code must be **GPLv3 compatible**
- **lib/ansible/module_utils/**: Defaults to **BSD-2-Clause** (more permissive)
- **External dependencies**: Only recommend libraries compatible with these licenses
- **PR reviews**: Always verify any new dependencies or suggested libraries are license-compatible
- **When in doubt**: Ask about licensing compatibility rather than assuming
**This is non-negotiable** - licensing violations can create serious legal issues for the project.
## Quick Reference
Most commonly used commands and patterns:
```bash
# Testing
ansible-test sanity -v --docker default # Run all sanity tests
ansible-test sanity -v --docker default --test <test> # Run specific sanity test
ansible-test units -v --docker default # Run unit tests
ansible-test integration -v --docker ubuntu2404 # Run integration tests
# PR Review and CI
gh pr view <number> # Get PR details
gh pr view <number> --comments # Check for ansibot CI failures
gh pr checks <number> # Get Azure Pipelines URLs
gh pr checkout <number> # Switch to PR branch
gh pr diff <number> # See all changes
```
**Container Selection:**
- Sanity/Unit tests: `--docker default`
- Integration tests: `--docker ubuntu2204`, `--docker ubuntu2404`, etc. (NOT default/base)
**Critical Reminders:**
- **Licensing**: See [Licensing Requirements](#-critical-licensing-requirements) - GPLv3/BSD-2-Clause only
## Development Environment Setup
Ansible development typically uses an editable install after forking and cloning:
```bash
# After forking and cloning the repository
pip install -e .
```
**Note:** ansible-core and all CLIs (including ansible-test) require a POSIX OS. On Windows, use WSL (Windows Subsystem for Linux).
## Testing and CI
### Basic Testing Commands
```bash
# Run sanity tests - these are linting/static analysis (pylint, mypy, pep8, etc.)
ansible-test sanity -v --docker default
# List available sanity tests
ansible-test sanity --list-tests
# Run specific sanity tests
ansible-test sanity -v --docker default --test pep8 --test pylint
# Run sanity on specific files (paths relative to repo root)
ansible-test sanity -v --docker default lib/ansible/modules/command.py
# Run unit tests (recommended with Docker)
ansible-test units -v --docker default
# Run specific unit test (paths relative to repo root, targets in test/units/)
ansible-test units -v --docker default test/units/modules/test_command.py
# Run integration tests (choose appropriate container - NOT base/default)
ansible-test integration -v --docker ubuntu2404
# Run specific integration target (directory name in test/integration/targets/)
ansible-test integration -v --docker ubuntu2404 setup_remote_tmp_dir
# Run with coverage
ansible-test units -v --docker default --coverage
# Alternative: use --venv if Docker/Podman unavailable (less reliable for units/integration)
ansible-test sanity -v --venv
```
Available Docker containers for testing can be found in `./test/lib/ansible_test/_data/completion/docker.txt`.
The `base` and `default` containers are for sanity/unit tests only. For integration tests, use distro-specific
containers, depending on the modules being tested.
**Test isolation options:**
- `--docker` (supports Docker or Podman) - preferred for reliable, isolated testing
- `--venv` - fallback when containers unavailable, but unit tests may be unreliable due to host environment differences
### Helping Developers with CI Failures
When developers submit PRs and encounter CI failures, use these approaches to help diagnose and resolve issues:
**1. Check for ansibot comments:**
```bash
# Get all PR comments to find ansibot CI failure reports
gh pr view <number> --comments
```
Look for comments from `ansibot` that contain:
- Test failure details with specific error messages
- File paths and line numbers for failures
- Links to sanity test documentation (e.g., `[explain](https://docs.ansible.com/...`)
**2. Get CI check status and URLs:**
```bash
# See all CI check results with Azure Pipelines URLs
gh pr checks <number>
```
This shows:
- Overall CI status (pass/fail) with timing
- Direct links to Azure DevOps build results
- Individual job results (Sanity Test 1/2, Docker tests, Units, etc.)
**3. Common CI failure patterns:**
- **Sanity failures**: Usually have specific fixes (trailing whitespace, import errors, etc.)
- **Integration test failures**: May require platform-specific containers or test adjustments
- **Unit test failures**: Often indicate actual code issues that need debugging
**4. CI failure analysis workflow:**
1. Check ansibot comments first for immediate error details
2. Use `gh pr checks <number>` to get Azure Pipelines URLs for detailed logs
3. Focus on failed jobs (marked as `fail`) and examine their specific error output
4. For sanity test failures, the error messages usually indicate exactly what needs to be fixed
5. For test failures, run the same tests locally using `ansible-test` to reproduce and debug
## PR Review Guidelines
### PR Review Checklist
Use this checklist for EVERY PR review:
```text
□ Created TodoWrite list for review steps
□ Step 1: Get PR details with gh pr view <number>
□ Step 2: Get PR diff with gh pr diff <number>
□ Step 3: Check required components (changelog, tests)
□ Step 4: Checkout PR branch with gh pr checkout <number>
□ Step 5: Review existing feedback with gh pr view <number> --comments
□ Step 6: Verify all issues addressed
□ Step 7: Call out any unresolved feedback
□ Mark each TodoWrite item as completed when done
```
When assisting with PR reviews, verify:
### Required Components
- Changelog fragment exists in `changelogs/fragments/`
- Appropriate tests are included and cover the changed code
- Unit tests should be pytest style, and functional rather than tightly coupled to mocking
- Integration tests required for almost all plugin changes (tests the public API)
- Tests should exercise the actual changed code, not just add random coverage
### Review Process
Follow these steps in order for thorough PR reviews:
1. **Get PR details**: Use `gh pr view <number>` to understand the PR scope and description
2. **Get PR diff**: Use `gh pr diff <number>` to see all changes
3. **Check required components FIRST**:
- Verify changelog fragment exists and uses correct section (check `changelogs/config.yaml` for valid sections)
- Verify tests exist and specifically cover the changed code paths
4. **Checkout PR branch**: Use `gh pr checkout <number>` to examine code holistically with changes applied
5. **Review existing feedback**: Use `gh pr view <number> --comments` to see all comments and previous review feedback
6. **Verify all issues addressed**: Ensure all bot failures, reviewer requests, and discussion points are resolved
7. **Call out any unresolved review feedback**: Explicitly mention any discussions or requests that remain unaddressed
### Common Review Issues to Check
- **Changelog section errors**: Verify changelog uses valid section from `changelogs/config.yaml`. Fragment structure follows sections defined there.
- **Test scope**: Ensure tests exercise the actual changed code, not just add random coverage.
Integration tests required for almost all plugin changes (tests the public API).
Tests should be functional rather than tightly coupled to mocking.
### Review Task Management
- Use TodoWrite tool to track review steps for complex PRs
- Mark tasks as in_progress when actively working on them
- Complete tasks immediately after finishing each step
- This provides visibility to users about review progress
### Review Tools
- `gh pr view <number>` - Get PR details and description
- `gh pr view <number> --comments` - See all comments and review feedback
- `gh pr diff <number>` - Get complete diff of changes
- `gh pr checkout <number>` - Switch to PR branch for holistic examination
- `Read` tool - Examine specific changed files in detail
- `Grep` tool - Search for related code patterns or test coverage (uses ripgrep/rg)
## Development Guidelines
### Code Style Notes
- Line limit is 160 characters (not 80)
- E402 (module level import not at top) is ignored
- In `lib/ansible/modules/`, imports must come after DOCUMENTATION, EXAMPLES, and RETURN definitions
- Don't add obvious comments about code
- Use native type hints with `from __future__ import annotations` (converts to strings at runtime)
- Don't document module parameters in docstrings - migrate to type hints instead
- **No trailing whitespace**: Always clean up trailing spaces on lines, especially when editing existing files
### Python Version Support
- Controller code: support range defined in `pyproject.toml`
- Modules/module_utils: minimum version in `lib/ansible/module_utils/basic.py` (`_PY_MIN`) up to max from `pyproject.toml`
- Modules support a wider Python version range than controller code
### Dependencies and Imports
- Prefer Python stdlib over external dependencies
- Use existing code from within the Ansible project
- `lib/ansible/modules/` can only import from `lib/ansible/module_utils/` (modules are packaged for remote execution)
- `lib/ansible/module_utils/` cannot import from outside itself
## Documentation Standards
### Module and Plugin Documentation
- Modules and plugins require DOCUMENTATION, EXAMPLES, and RETURN blocks as static YAML string variables
- These blocks cannot be dynamically generated - they are parsed via AST/token parsing
- Alternative: "sidecar" documentation as `.yml` files with same stem name adjacent to plugin files
- All modules should have a `main()` function and `if __name__ == '__main__':` block
- Use `version_added` fields in documentation following existing version format patterns
### Changelog Requirements
- Changes require entries in `changelogs/fragments/` as YAML files
- Create a new fragment file per PR (never reuse existing fragments to avoid merge conflicts)
- Fragment structure follows sections defined in `changelogs/config.yaml` under the `sections` key
- Naming: `{issue_number}-{short-description}.yml` or `{component}-{description}.yml` if no issue
- Format: `- {component} - {description} ({optional URL to GH issue})`
- Content supports Sphinx markup (use double backticks for code references)
## Repository Management
### Plugin Development
- New plugins should go into collections, not ansible-core
- ansible-core rarely accepts new plugins; core team makes these decisions
### Branch and Release Management
- All PRs target the `devel` branch
- Use GitHub templates when creating issues/PRs (`.github/ISSUE_TEMPLATE/` and `.github/PULL_REQUEST_TEMPLATE/`)
- For issues: fill out the `component` field with project root relative file path
- For PRs: adjust the issue type in the template as listed in `.github/PULL_REQUEST_TEMPLATE/PULL_REQUEST_TEMPLATE.md`
- Validate issues are fixed in `devel` before reporting against stable releases
- Bug fixes: backported to latest stable only
- Critical bug fixes: backported to latest and previous stable
- Security issues: contact security@ansible.com privately, not via GitHub
### Backwards Compatibility
- Backwards compatibility is prioritized over most other concerns
- Deprecation cycle: 4 releases (deprecation + 2 releases + removal)
- Use `Display.deprecated` or `AnsibleModule.deprecate` with version from `lib/ansible/release.py` plus 3
- Example: deprecating in 2.19 means removal in 2.22
## Code Structure Reference
### Core Structure
- `lib/ansible/` - Main Ansible library code
- `cli/` - Command-line interface implementations (ansible, ansible-playbook, etc.)
- `executor/` - Task execution engine and strategies (includes PowerShell support in `powershell/`)
- `inventory/` - Inventory management and parsing
- `modules/` - Core modules (built-in automation modules)
- `module_utils/` - Shared utilities for modules (includes C# in `csharp/` and PowerShell in `powershell/`)
- `plugins/` - Plugin framework (filters, tests, lookups, etc.)
- `vars/` - Variable management
- `config/` - Configuration handling
- `collections/` - Ansible Collections framework
### Key Components
- **CLI Layer**: Entry points in `lib/ansible/cli/` handle command parsing and dispatch
- **Executor**: `lib/ansible/executor/` contains the core execution engine that runs tasks and plays
- **Module System**: Modules in `lib/ansible/modules/` are the units of work; they're executed remotely
- **Plugin Architecture**: `lib/ansible/plugins/` provides extensibility through filters, tests, lookups, etc.
- **Inventory**: `lib/ansible/inventory/` manages host and group definitions
- **Collections**: Modern packaging format for distributing Ansible content
### Testing Infrastructure
- `test/units/` - Unit tests mirroring the lib structure
- `test/integration/` - Integration tests organized by target (named after plugin/functionality being tested)
- Some targets have `context/controller` or `context/target` in their `aliases` file when not easily inferable
- Only modules run on target hosts; all other plugins execute locally in the ansible process
- `test/lib/` - Test utilities and frameworks
- `ansible-test` - Unified testing tool for all test types
For CI failure debugging, see [Helping Developers with CI Failures](#helping-developers-with-ci-failures).

@ -1,3 +0,0 @@
- @AGENTS.md
- @~/.claude/ansible.md
- @CLAUDE.local.md

@ -0,0 +1,182 @@
======================================================
ansible-core 2.20 "Good Times Bad Times" Release Notes
======================================================
.. contents:: Topics
v2.20.1rc1
==========
Release Summary
---------------
| Release Date: 2025-12-02
| `Porting Guide <https://docs.ansible.com/ansible-core/2.20/porting_guides/porting_guide_core_2.20.html>`__
Bugfixes
--------
- Fix ``AnsibleModule.human_to_bytes()``, which was never adjusted after the standalone ``human_to_bytes()`` got a new parameter ``default_unit`` (https://github.com/ansible/ansible/pull/85259).
- Variable loading now uses file source instead of variables when invalidly formmated vars file is loaded.
- ansible-test - The runtime-metadata sanity test now ignores pre-release and build identifiers in collection versions. This prevents errors if a tombstone version is ``X.0.0``, while the collection's version is ``X.0.0-prerelease`` (https://github.com/ansible/ansible/issues/85193)."
- display - Fix ``getuser`` fallback error handling on Python 3.13 and later. (https://github.com/ansible/ansible/issues/86142)
- first_found - Correct the "Include tasks only if one of the files exists, otherwise skip" example.
- get_url - fix regex for GNU Digest line which is used in comparing checksums (https://github.com/ansible/ansible/issues/86132).
- local connection - Fix ``getuser`` fallback error handling on Python 3.13 and later.
v2.20.0
=======
Release Summary
---------------
| Release Date: 2025-11-04
| `Porting Guide <https://docs.ansible.com/ansible-core/2.20/porting_guides/porting_guide_core_2.20.html>`__
Major Changes
-------------
- ansible - Add support for Python 3.14.
- ansible - Drop support for Python 3.11 on the controller.
- ansible - Drop support for Python 3.8 on targets.
Minor Changes
-------------
- Add tech preview play argument spec validation, which can be enabled by setting the play keyword ``validate_argspec`` to ``True`` or the name of an argument spec. When ``validate_argspec`` is set to ``True``, a play ``name`` is required and used as the argument spec name. When enabled, the argument spec is loaded from a file matching the pattern <playbook_name>.meta.yml. At minimum, this file should contain ``{"argument_specs": {"name": {"options": {}}}}``, where "name" is the name of the play or configured argument spec.
- Added Univention Corporate Server as a part of Debian OS distribution family (https://github.com/ansible/ansible/issues/85490).
- AnsibleModule - Add temporary internal monkeypatch-able hook to alter module result serialization by splitting serialization from ``_return_formatted`` into ``_record_module_result``.
- DataLoader - Update ``DataLoader.get_basedir`` to be an abspath
- Python type hints applied to ``to_text`` and ``to_bytes`` functions for better type hint interactions with code utilizing these functions.
- ansible now warns if you use reserved tags that were only meant for selection and not for use in play.
- ansible-doc - Return a more verbose error message when the ``description`` field is missing.
- ansible-doc - show ``notes``, ``seealso``, and top-level ``version_added`` for role entrypoints (https://github.com/ansible/ansible/pull/81796).
- ansible-doc adds support for RETURN documentation to support doc fragment plugins
- ansible-test - Default to Python 3.14 in the ``base`` and ``default`` test containers.
- ansible-test - Filter out pylint messages for invalid filenames and display a notice when doing so.
- ansible-test - Implement new authentication methods for accessing the Ansible Core CI service.
- ansible-test - Improve formatting of generated coverage config file.
- ansible-test - Removed support for automatic provisioning of obsolete instances for network-integration tests.
- ansible-test - Replace FreeBSD 14.2 with 14.3.
- ansible-test - Replace RHEL 9.5 with 9.6.
- ansible-test - Update Ubuntu containers.
- ansible-test - Update astroid imports in custom pylint checkers.
- ansible-test - Update base/default containers to include Python 3.14.0.
- ansible-test - Update default containers.
- ansible-test - Update pinned ``pip`` version to 25.2.
- ansible-test - Update pinned sanity test requirements, including upgrading to pylint 4.0.0.
- ansible-test - Update pinned sanity test requirements.
- ansible-test - Update test containers.
- ansible-test - Update the pylint sanity test to pylint 4.0.2.
- ansible-test - Upgrade Alpine 3.21 to 3.22.
- ansible-test - Upgrade Fedora 41 to Fedora 42.
- ansible-test - Upgrade to ``coverage`` version 7.10.7 for Python 3.9 and later.
- ansible-test - Use OS packages to satisfy controller requirements on FreeBSD 13.5 during managed instance bootstrapping.
- apt_repository - use correct debug method to print debug message.
- blockinfile - add new module option ``encoding`` to support files in encodings other than UTF-8 (https://github.com/ansible/ansible/pull/85291).
- deb822_repository - Add automatic installation of the ``python3-debian`` package if it is missing by adding the parameter ``install_python_debian``
- default callback plugin - add option to configure indentation for JSON and YAML output (https://github.com/ansible/ansible/pull/85497).
- encrypt - check datatype of salt_size in password_hash filter.
- fetch_file - add ca_path and cookies parameter arguments (https://github.com/ansible/ansible/issues/85172).
- include_vars - Raise an error if 'extensions' is not specified as a list.
- include_vars - Raise an error if 'ignore_files' is not specified as a list.
- known_hosts - return rc and stderr when ssh-keygen command fails for further debugging (https://github.com/ansible/ansible/issues/85850).
- lineinfile - add new module option ``encoding`` to support files in encodings other than UTF-8 (https://github.com/ansible/ansible/pull/84999).
- regex - Document the match_type fullmatch.
- regex - Ensure that match_type is one of match, fullmatch, or search (https://github.com/ansible/ansible/pull/85629).
- replace - read/write files in text-mode as unicode chars instead of as bytes and switch regex matching to unicode chars instead of bytes. (https://github.com/ansible/ansible/pull/85785).
- service_facts - handle keyerror exceptions with warning.
- service_facts - warn user about missing service details instead of ignoring.
- setup - added new subkey ``lvs`` within each entry of ``ansible_facts['vgs']`` to provide complete logical volume data scoped by volume group. The top level ``lvs`` fact by comparison, deduplicates logical volume names across volume groups and may be incomplete. (https://github.com/ansible/ansible/issues/85632)
- six - bump six version from 1.16.0 to 1.17.0 (https://github.com/ansible/ansible/issues/85408).
- stat module - add SELinux context as a return value, and add a new option to trigger this return, which is False by default. (https://github.com/ansible/ansible/issues/85217).
- tags now warn when using reserved keywords.
- wrapt - bump version from 1.15.0 to 1.17.2 (https://github.com/ansible/ansible/issues/85407).
Breaking Changes / Porting Guide
--------------------------------
- powershell - Removed code that tried to remote quotes from paths when performing Windows operations like copying and fetching file. This should not affect normal playbooks unless a value is quoted too many times.
Deprecated Features
-------------------
- Deprecated the shell plugin's ``wrap_for_exec`` function. This API is not used in Ansible or any known collection and is being removed to simplify the plugin API. Plugin authors should wrap their command to execute within an explicit shell or other known executable.
- INJECT_FACTS_AS_VARS configuration currently defaults to ``True``, this is now deprecated and it will switch to ``False`` by Ansible 2.24. You will only get notified if you are accessing 'injected' facts (for example, ansible_os_distribution vs ansible_facts['os_distribution']).
- hash_params function in roles/__init__ is being deprecated as it is not in use.
- include_vars - Specifying 'ignore_files' as a string is deprecated.
- vars, the internal variable cache will be removed in 2.24. This cache, once used internally exposes variables in inconsistent states, the 'vars' and 'varnames' lookups should be used instead.
Removed Features (previously deprecated)
----------------------------------------
- Removed the option to set the ``DEFAULT_TRANSPORT`` configuration to ``smart`` that selects the default transport as either ``ssh`` or ``paramiko`` based on the underlying platform configuraton.
- ``vault``/``unvault`` filters - remove the deprecated ``vaultid`` parameter.
- ansible-doc - role entrypoint attributes are no longer shown
- ansible-galaxy - remove support for resolvelib >= 0.5.3, < 0.8.0.
- ansible-galaxy - removed the v2 Galaxy server API. Galaxy servers hosting collections must support v3.
- dnf/dnf5 - remove deprecated ``install_repoquery`` option.
- encrypt - remove deprecated passlib_or_crypt API.
- paramiko - Removed the ``PARAMIKO_HOST_KEY_AUTO_ADD`` and ``PARAMIKO_LOOK_FOR_KEYS`` configuration keys, which were previously deprecated.
- py3compat - remove deprecated ``py3compat.environ`` call.
- vars plugins - removed the deprecated ``get_host_vars`` or ``get_group_vars`` fallback for vars plugins that do not inherit from ``BaseVarsPlugin`` and define a ``get_vars`` method.
- yum_repository - remove deprecated ``keepcache`` option.
Bugfixes
--------
- Do not re-add ``tags`` on blocks from within ``import_tasks``.
- Fix issue where play tags prevented executing notified handlers (https://github.com/ansible/ansible/issues/85475)
- Fix issues with keywords being incorrectly validated on ``import_tasks`` (https://github.com/ansible/ansible/issues/85855, https://github.com/ansible/ansible/issues/85856)
- Fix traceback when trying to import non-existing file via nested ``import_tasks`` (https://github.com/ansible/ansible/issues/69882)
- SIGINT/SIGTERM Handling - Make SIGINT/SIGTERM handling more robust by splitting concerns between forks and the parent.
- The ``ansible_failed_task`` variable is now correctly exposed in a rescue section, even when a failing handler is triggered by the ``flush_handlers`` task in the corresponding ``block`` (https://github.com/ansible/ansible/issues/85682)
- Windows - ignore temporary file cleanup warning when using AnsibleModule to compile C# utils. This should reduce the number of warnings that can safely be ignored when running PowerShell modules - https://github.com/ansible/ansible/issues/85976
- Windows async - Handle running PowerShell modules with trailing data after the module result
- ``ansible-galaxy collection list`` - fail when none of the configured collection paths exist.
- ``ternary`` filter - evaluate values lazily (https://github.com/ansible/ansible/issues/85743)
- ansible-doc - prevent crash when scanning collections in paths that have more than one ``ansible_collections`` in it (https://github.com/ansible/ansible/issues/84909, https://github.com/ansible/ansible/pull/85361).
- ansible-doc --list/--list_files/--metadata-dump - fixed relative imports in nested filter/test plugin files (https://github.com/ansible/ansible/issues/85753).
- ansible-galaxy - Use the provided import task url, instead of parsing to get the task id and reconstructing the URL
- ansible-galaxy no longer shows the internal protomatter collection when listing.
- ansible-test - Always exclude the ``tests/output/`` directory from a collection's code coverage. (https://github.com/ansible/ansible/issues/84244)
- ansible-test - Fix a traceback that can occur when using delegation before the ansible-test temp directory is created.
- ansible-test - Limit package install retries during managed remote instance bootstrapping.
- ansible-test - Use a consistent coverage config for all collection testing.
- apt - mark dependencies installed as part of deb file installation as auto (https://github.com/ansible/ansible/issues/78123).
- argspec validation - The ``str`` argspec type treats ``None`` values as empty string for better consistency with pre-2.19 templating conversions.
- cache plugins - close temp cache file before moving it to fix error on WSL. (https://github.com/ansible/ansible/pull/85816)
- callback plugins - fix displaying the rendered ``ansible_host`` variable with ``delegate_to`` (https://github.com/ansible/ansible/issues/84922).
- callback plugins - improve consistency accessing the Task object's resolved_action attribute.
- conditionals - When displaying a broken conditional error or deprecation warning, the origin of the non-boolean result is included (if available), and the raw result is omitted.
- config lookup now properly factors in variables and show_origin when checking entries from the global configuration.
- display - Fixed reference to undefined `_DeferredWarningContext` when issuing early warnings during startup. (https://github.com/ansible/ansible/issues/85886)
- dnf - Check if installroot is directory or not (https://github.com/ansible/ansible/issues/85680).
- failed_when - When using ``failed_when`` to suppress an error, the ``exception`` key in the result is renamed to ``failed_when_suppressed_exception``. This prevents the error from being displayed by callbacks after being suppressed. (https://github.com/ansible/ansible/issues/85505)
- fetch - also return ``file`` in the result when changed is ``True`` (https://github.com/ansible/ansible/pull/85729).
- import_tasks - fix templating parent include arguments.
- include_role - allow host specific values in all ``*_from`` arguments (https://github.com/ansible/ansible/issues/66497)
- option argument deprecations now have a proper alternative help text.
- package_facts - typecast bytes to string while returning facts (https://github.com/ansible/ansible/issues/85937).
- pip - Fix pip module output so that it returns changed when the only operation is initializing a venv.
- plugins config, get_option_and_origin now correctly displays the value and origin of the option.
- psrp - ReadTimeout exceptions now mark host as unreachable instead of fatal (https://github.com/ansible/ansible/issues/85966)
- run_command - Fixed premature selector unregistration on empty read from stdout/stderr that caused truncated output or hangs in rare situations.
- script inventory plugin will now show correct 'incorrect' type when doing implicit conversions on groups.
- ssh connection - fix documented variables for the ``host`` option. Connection options can be configured with delegated variables in general.
- template lookup - Skip finalization on the internal templating operation to allow markers to be returned and handled by, e.g. the ``default`` filter. Previously, finalization tripped markers, causing an exception to end processing of the current template pipeline. (https://github.com/ansible/ansible/issues/85674)
- templating - Avoid tripping markers within Jinja generated code. (https://github.com/ansible/ansible/issues/85674)
- templating - Ensure filter plugin result processing occurs under the correct call context. (https://github.com/ansible/ansible/issues/85585)
- templating - Fix slicing of tuples in templating (https://github.com/ansible/ansible/issues/85606).
- templating - Multi-node template results coerce embedded ``None`` nodes to empty string (instead of rendering literal ``None`` to the output).
- templating - Undefined marker values sourced from the Jinja ``getattr->getitem`` fallback are now accessed correctly, raising AnsibleUndefinedVariable for user plugins that do not understand markers. Previously, these values were erroneously returned to user plugin code that had not opted in to marker acceptance.
- tqm - use display.error_as_warning instead of display.warning_as_error.
- tqm - use display.error_as_warning instead of self.warning.
- uri - fix form-multipart file not being found when task is retried (https://github.com/ansible/ansible/issues/85009)
- validate-modules sanity test - fix handling of missing doc fragments (https://github.com/ansible/ansible/pull/85638).
Known Issues
------------
- templating - Exceptions raised in a Jinja ``set`` or ``with`` block which are not accessed by the template are ignored in the same manner as undefined values.
- templating - Passing a container created in a Jinja ``set`` or ``with`` block to a method results in a copy of that container. Mutations to that container which are not returned by the method will be discarded.

@ -1,2 +1,429 @@
ancestor: 2.20.0 ancestor: 2.18.0
releases: {} releases:
2.20.0:
changes:
release_summary: '| Release Date: 2025-11-04
| `Porting Guide <https://docs.ansible.com/ansible-core/2.20/porting_guides/porting_guide_core_2.20.html>`__
'
codename: Good Times Bad Times
fragments:
- 2.20.0_summary.yaml
release_date: '2025-11-04'
2.20.0b1:
changes:
breaking_changes:
- powershell - Removed code that tried to remote quotes from paths when performing
Windows operations like copying and fetching file. This should not affect
normal playbooks unless a value is quoted too many times.
bugfixes:
- Do not re-add ``tags`` on blocks from within ``import_tasks``.
- The ``ansible_failed_task`` variable is now correctly exposed in a rescue
section, even when a failing handler is triggered by the ``flush_handlers``
task in the corresponding ``block`` (https://github.com/ansible/ansible/issues/85682)
- Windows async - Handle running PowerShell modules with trailing data after
the module result
- '``ansible-galaxy collection list`` - fail when none of the configured collection
paths exist.'
- '``ternary`` filter - evaluate values lazily (https://github.com/ansible/ansible/issues/85743)'
- ansible-doc --list/--list_files/--metadata-dump - fixed relative imports in
nested filter/test plugin files (https://github.com/ansible/ansible/issues/85753).
- ansible-galaxy - Use the provided import task url, instead of parsing to get
the task id and reconstructing the URL
- ansible-galaxy no longer shows the internal protomatter collection when listing.
- ansible-test - Always exclude the ``tests/output/`` directory from a collection's
code coverage. (https://github.com/ansible/ansible/issues/84244)
- ansible-test - Fix a traceback that can occur when using delegation before
the ansible-test temp directory is created.
- ansible-test - Limit package install retries during managed remote instance
bootstrapping.
- ansible-test - Use a consistent coverage config for all collection testing.
- apt - mark dependencies installed as part of deb file installation as auto
(https://github.com/ansible/ansible/issues/78123).
- argspec validation - The ``str`` argspec type treats ``None`` values as empty
string for better consistency with pre-2.19 templating conversions.
- cache plugins - close temp cache file before moving it to fix error on WSL.
(https://github.com/ansible/ansible/pull/85816)
- callback plugins - fix displaying the rendered ``ansible_host`` variable with
``delegate_to`` (https://github.com/ansible/ansible/issues/84922).
- callback plugins - improve consistency accessing the Task object's resolved_action
attribute.
- conditionals - When displaying a broken conditional error or deprecation warning,
the origin of the non-boolean result is included (if available), and the raw
result is omitted.
- display - Fixed reference to undefined `_DeferredWarningContext` when issuing
early warnings during startup. (https://github.com/ansible/ansible/issues/85886)
- dnf - Check if installroot is directory or not (https://github.com/ansible/ansible/issues/85680).
- failed_when - When using ``failed_when`` to suppress an error, the ``exception``
key in the result is renamed to ``failed_when_suppressed_exception``. This
prevents the error from being displayed by callbacks after being suppressed.
(https://github.com/ansible/ansible/issues/85505)
- import_tasks - fix templating parent include arguments.
- include_role - allow host specific values in all ``*_from`` arguments (https://github.com/ansible/ansible/issues/66497)
- pip - Fix pip module output so that it returns changed when the only operation
is initializing a venv.
- plugins config, get_option_and_origin now correctly displays the value and
origin of the option.
- run_command - Fixed premature selector unregistration on empty read from stdout/stderr
that caused truncated output or hangs in rare situations.
- script inventory plugin will now show correct 'incorrect' type when doing
implicit conversions on groups.
- ssh connection - fix documented variables for the ``host`` option. Connection
options can be configured with delegated variables in general.
- template lookup - Skip finalization on the internal templating operation to
allow markers to be returned and handled by, e.g. the ``default`` filter.
Previously, finalization tripped markers, causing an exception to end processing
of the current template pipeline. (https://github.com/ansible/ansible/issues/85674)
- templating - Avoid tripping markers within Jinja generated code. (https://github.com/ansible/ansible/issues/85674)
- templating - Ensure filter plugin result processing occurs under the correct
call context. (https://github.com/ansible/ansible/issues/85585)
- templating - Fix slicing of tuples in templating (https://github.com/ansible/ansible/issues/85606).
- templating - Multi-node template results coerce embedded ``None`` nodes to
empty string (instead of rendering literal ``None`` to the output).
- templating - Undefined marker values sourced from the Jinja ``getattr->getitem``
fallback are now accessed correctly, raising AnsibleUndefinedVariable for
user plugins that do not understand markers. Previously, these values were
erroneously returned to user plugin code that had not opted in to marker acceptance.
- tqm - use display.error_as_warning instead of display.warning_as_error.
- tqm - use display.error_as_warning instead of self.warning.
- uri - fix form-multipart file not being found when task is retried (https://github.com/ansible/ansible/issues/85009)
- validate-modules sanity test - fix handling of missing doc fragments (https://github.com/ansible/ansible/pull/85638).
deprecated_features:
- Deprecated the shell plugin's ``wrap_for_exec`` function. This API is not
used in Ansible or any known collection and is being removed to simplify the
plugin API. Plugin authors should wrap their command to execute within an
explicit shell or other known executable.
- INJECT_FACTS_AS_VARS configuration currently defaults to ``True``, this is
now deprecated and it will switch to ``False`` by Ansible 2.24. You will only
get notified if you are accessing 'injected' facts (for example, ansible_os_distribution
vs ansible_facts['os_distribution']).
- hash_params function in roles/__init__ is being deprecated as it is not in
use.
- include_vars - Specifying 'ignore_files' as a string is deprecated.
- vars, the internal variable cache will be removed in 2.24. This cache, once
used internally exposes variables in inconsistent states, the 'vars' and 'varnames'
lookups should be used instead.
known_issues:
- templating - Exceptions raised in a Jinja ``set`` or ``with`` block which
are not accessed by the template are ignored in the same manner as undefined
values.
- templating - Passing a container created in a Jinja ``set`` or ``with`` block
to a method results in a copy of that container. Mutations to that container
which are not returned by the method will be discarded.
major_changes:
- ansible - Add support for Python 3.14.
- ansible - Drop support for Python 3.11 on the controller.
- ansible - Drop support for Python 3.8 on targets.
minor_changes:
- 'Add tech preview play argument spec validation, which can be enabled by setting
the play keyword ``validate_argspec`` to ``True`` or the name of an argument
spec. When ``validate_argspec`` is set to ``True``, a play ``name`` is required
and used as the argument spec name. When enabled, the argument spec is loaded
from a file matching the pattern <playbook_name>.meta.yml. At minimum, this
file should contain ``{"argument_specs": {"name": {"options": {}}}}``, where
"name" is the name of the play or configured argument spec.'
- Added Univention Corporate Server as a part of Debian OS distribution family
(https://github.com/ansible/ansible/issues/85490).
- AnsibleModule - Add temporary internal monkeypatch-able hook to alter module
result serialization by splitting serialization from ``_return_formatted``
into ``_record_module_result``.
- Python type hints applied to ``to_text`` and ``to_bytes`` functions for better
type hint interactions with code utilizing these functions.
- ansible now warns if you use reserved tags that were only meant for selection
and not for use in play.
- ansible-doc - Return a more verbose error message when the ``description``
field is missing.
- ansible-doc - show ``notes``, ``seealso``, and top-level ``version_added``
for role entrypoints (https://github.com/ansible/ansible/pull/81796).
- ansible-doc adds support for RETURN documentation to support doc fragment
plugins
- ansible-test - Implement new authentication methods for accessing the Ansible
Core CI service.
- ansible-test - Improve formatting of generated coverage config file.
- ansible-test - Removed support for automatic provisioning of obsolete instances
for network-integration tests.
- ansible-test - Replace FreeBSD 14.2 with 14.3.
- ansible-test - Replace RHEL 9.5 with 9.6.
- ansible-test - Update Ubuntu containers.
- ansible-test - Update base/default containers to include Python 3.14.0.
- ansible-test - Update pinned sanity test requirements.
- ansible-test - Update test containers.
- ansible-test - Upgrade Alpine 3.21 to 3.22.
- ansible-test - Upgrade Fedora 41 to Fedora 42.
- ansible-test - Upgrade to ``coverage`` version 7.10.7 for Python 3.9 and later.
- ansible-test - Use OS packages to satisfy controller requirements on FreeBSD
13.5 during managed instance bootstrapping.
- apt_repository - use correct debug method to print debug message.
- blockinfile - add new module option ``encoding`` to support files in encodings
other than UTF-8 (https://github.com/ansible/ansible/pull/85291).
- deb822_repository - Add automatic installation of the ``python3-debian`` package
if it is missing by adding the parameter ``install_python_debian``
- default callback plugin - add option to configure indentation for JSON and
YAML output (https://github.com/ansible/ansible/pull/85497).
- encrypt - check datatype of salt_size in password_hash filter.
- fetch_file - add ca_path and cookies parameter arguments (https://github.com/ansible/ansible/issues/85172).
- include_vars - Raise an error if 'extensions' is not specified as a list.
- include_vars - Raise an error if 'ignore_files' is not specified as a list.
- lineinfile - add new module option ``encoding`` to support files in encodings
other than UTF-8 (https://github.com/ansible/ansible/pull/84999).
- regex - Document the match_type fullmatch.
- regex - Ensure that match_type is one of match, fullmatch, or search (https://github.com/ansible/ansible/pull/85629).
- replace - read/write files in text-mode as unicode chars instead of as bytes
and switch regex matching to unicode chars instead of bytes. (https://github.com/ansible/ansible/pull/85785).
- service_facts - handle keyerror exceptions with warning.
- service_facts - warn user about missing service details instead of ignoring.
- setup - added new subkey ``lvs`` within each entry of ``ansible_facts['vgs']``
to provide complete logical volume data scoped by volume group. The top level
``lvs`` fact by comparison, deduplicates logical volume names across volume
groups and may be incomplete. (https://github.com/ansible/ansible/issues/85632)
- six - bump six version from 1.16.0 to 1.17.0 (https://github.com/ansible/ansible/issues/85408).
- stat module - add SELinux context as a return value, and add a new option
to trigger this return, which is False by default. (https://github.com/ansible/ansible/issues/85217).
- tags now warn when using reserved keywords.
- wrapt - bump version from 1.15.0 to 1.17.2 (https://github.com/ansible/ansible/issues/85407).
release_summary: '| Release Date: 2025-09-23
| `Porting Guide <https://docs.ansible.com/ansible-core/2.20/porting_guides/porting_guide_core_2.20.html>`__
'
removed_features:
- Removed the option to set the ``DEFAULT_TRANSPORT`` configuration to ``smart``
that selects the default transport as either ``ssh`` or ``paramiko`` based
on the underlying platform configuraton.
- '``vault``/``unvault`` filters - remove the deprecated ``vaultid`` parameter.'
- ansible-doc - role entrypoint attributes are no longer shown
- ansible-galaxy - removed the v2 Galaxy server API. Galaxy servers hosting
collections must support v3.
- dnf/dnf5 - remove deprecated ``install_repoquery`` option.
- encrypt - remove deprecated passlib_or_crypt API.
- paramiko - Removed the ``PARAMIKO_HOST_KEY_AUTO_ADD`` and ``PARAMIKO_LOOK_FOR_KEYS``
configuration keys, which were previously deprecated.
- py3compat - remove deprecated ``py3compat.environ`` call.
- vars plugins - removed the deprecated ``get_host_vars`` or ``get_group_vars``
fallback for vars plugins that do not inherit from ``BaseVarsPlugin`` and
define a ``get_vars`` method.
- yum_repository - remove deprecated ``keepcache`` option.
codename: Good Times Bad Times
fragments:
- 2.20.0b1_summary.yaml
- 66497-include_role-_from-dedup.yml
- 81796-ansible-doc-roles.yml
- 85010-uri-multipart-file-on-retry.yml
- 85217-stat-add-selinux-context.yml
- 85487-add-dependency-installation-to-deb822_repository.yml
- 85497-default-callback-indent.yml
- 85524-resolve-task-resolved_action-early.yml
- 85556-fix-pip-changed.yml
- 85596-hide-proto.yml
- 85599-fix-templating-import_tasks-parent-include.yml
- 85632-setup-logical-volume-name-uniqueness.yml
- 85638-ansible-test-validate-modules-doc-fragments.yml
- 85682-rescue-flush_handlers.yml
- 85743-lazy-ternary.yml
- 85816-wsl-cache-files.yml
- ansible-doc-description-verbosity.yml
- ansible-test-auth-update.yml
- ansible-test-bootstrap-retry.yml
- ansible-test-containers.yml
- ansible-test-coverage-config.yml
- ansible-test-coverage-upgrade.yml
- ansible-test-freebsd-14.3.yml
- ansible-test-freebsd-bootstrap.yml
- ansible-test-ios.yml
- ansible-test-missing-dir-fix.yml
- ansible-test-remotes.yml
- ansible-test-rhel-9.6.yml
- ansible-test-sanity-requirements.yml
- apt_deb_install.yml
- apt_repo_debug.yml
- blockinfile-new-module-option-encoding.yml
- concat_coerce_none_to_empty.yml
- deprecate_inject.yml
- display_internals.yml
- dnf-remove-install_repoquery.yml
- dnf_installroot_dir.yml
- elide_broken_conditional_result.yml
- encrypt.yml
- failed-when-exception.yml
- fetch_file.yml
- fix-displaying-delegate_to-ansible_host.yml
- fix-listing-nested-filter-and-test-plugins.yml
- fix_script_error.yml
- galaxy-use-import-task-url.yml
- getattr_marker_access.yml
- hide_proto.yml
- import_tasks-dont-readd-tags.yml
- include_vars.yml
- known_issues_jinja_error.yml
- lineinfile-new-module-option-encoding.yml
- module_direct_exec.yml
- openrc.yml
- paramiko-global-config-removal.yml
- password_hash_encrypt.yml
- play-argument-spec-validation.yml
- plugins_fix_origin.yml
- powershell-quoting.yml
- python-support.yml
- regex_test.yml
- remove-role-entrypoint-attrs.yml
- remove-v2-galaxy-api.yml
- remove_hash_params.yml
- remove_py3compat.yml
- replace-update-string-comparison-method-to-unicode.yml
- return_fragments.yml
- run_command_output_selector.yml
- shell-wrap_for_exec_deprecation.yml
- six_1.7.0.yml
- smart-transport-removal.yml
- tag_u_it.yml
- template-tuple-fix.yml
- template_lookup_skip_finalize.yml
- templating-filter-generators.yml
- to-text-to-bytes.yml
- tqm.yml
- ucs.yml
- vars-remove-get_hostgroup_vars.yml
- vars_begone.yml
- vault-vaultid-removal.yml
- warn_reserved_tags.yml
- win_async-junk-output.yml
- wrapt_1.17.2.yml
- yum_repository-remove-keepcache.yml
release_date: '2025-09-23'
2.20.0b2:
changes:
bugfixes:
- Fix issue where play tags prevented executing notified handlers (https://github.com/ansible/ansible/issues/85475)
- Fix issues with keywords being incorrectly validated on ``import_tasks`` (https://github.com/ansible/ansible/issues/85855,
https://github.com/ansible/ansible/issues/85856)
- Fix traceback when trying to import non-existing file via nested ``import_tasks``
(https://github.com/ansible/ansible/issues/69882)
- ansible-doc - prevent crash when scanning collections in paths that have more
than one ``ansible_collections`` in it (https://github.com/ansible/ansible/issues/84909,
https://github.com/ansible/ansible/pull/85361).
- fetch - also return ``file`` in the result when changed is ``True`` (https://github.com/ansible/ansible/pull/85729).
minor_changes:
- DataLoader - Update ``DataLoader.get_basedir`` to be an abspath
- known_hosts - return rc and stderr when ssh-keygen command fails for further
debugging (https://github.com/ansible/ansible/issues/85850).
release_summary: '| Release Date: 2025-10-06
| `Porting Guide <https://docs.ansible.com/ansible-core/2.20/porting_guides/porting_guide_core_2.20.html>`__
'
removed_features:
- ansible-galaxy - remove support for resolvelib >= 0.5.3, < 0.8.0.
codename: Good Times Bad Times
fragments:
- 2.20.0b2_summary.yaml
- 85361-collection-name-from-path-none.yml
- 85475-fix-flush_handlers-play-tags.yml
- data-loader-basedir-abspath.yml
- drop-resolvelib-lt-0_8_0.yml
- fix-fetch-return-file.yml
- import_tasks-fixes.yml
- known_hosts.yml
release_date: '2025-10-06'
2.20.0rc1:
changes:
bugfixes:
- SIGINT/SIGTERM Handling - Make SIGINT/SIGTERM handling more robust by splitting
concerns between forks and the parent.
minor_changes:
- ansible-test - Default to Python 3.14 in the ``base`` and ``default`` test
containers.
- ansible-test - Filter out pylint messages for invalid filenames and display
a notice when doing so.
- ansible-test - Update astroid imports in custom pylint checkers.
- ansible-test - Update pinned ``pip`` version to 25.2.
- ansible-test - Update pinned sanity test requirements, including upgrading
to pylint 4.0.0.
release_summary: '| Release Date: 2025-10-14
| `Porting Guide <https://docs.ansible.com/ansible-core/2.20/porting_guides/porting_guide_core_2.20.html>`__
'
codename: Good Times Bad Times
fragments:
- 2.20.0rc1_summary.yaml
- ansible-test-sanity-requirements-again.yml
- fix-signal-propagation.yml
release_date: '2025-10-14'
2.20.0rc2:
changes:
bugfixes:
- psrp - ReadTimeout exceptions now mark host as unreachable instead of fatal
(https://github.com/ansible/ansible/issues/85966)
release_summary: '| Release Date: 2025-10-20
| `Porting Guide <https://docs.ansible.com/ansible-core/2.20/porting_guides/porting_guide_core_2.20.html>`__
'
codename: Good Times Bad Times
fragments:
- 2.20.0rc2_summary.yaml
- 85966-psrp-readtimeout.yml
release_date: '2025-10-20'
2.20.0rc3:
changes:
bugfixes:
- Windows - ignore temporary file cleanup warning when using AnsibleModule to
compile C# utils. This should reduce the number of warnings that can safely
be ignored when running PowerShell modules - https://github.com/ansible/ansible/issues/85976
- config lookup now properly factors in variables and show_origin when checking
entries from the global configuration.
- option argument deprecations now have a proper alternative help text.
- package_facts - typecast bytes to string while returning facts (https://github.com/ansible/ansible/issues/85937).
minor_changes:
- ansible-test - Update default containers.
- ansible-test - Update the pylint sanity test to pylint 4.0.2.
release_summary: '| Release Date: 2025-10-29
| `Porting Guide <https://docs.ansible.com/ansible-core/2.20/porting_guides/porting_guide_core_2.20.html>`__
'
codename: Good Times Bad Times
fragments:
- 2.20.0rc3_summary.yaml
- add-type-warning.yml
- ansible-test-containers-update.yml
- ansible-test-pylint-update.yml
- config_lookup_fix.yml
- option_deprecation_help.yml
- package_facts.yml
release_date: '2025-10-29'
2.20.1rc1:
changes:
bugfixes:
- Fix ``AnsibleModule.human_to_bytes()``, which was never adjusted after the
standalone ``human_to_bytes()`` got a new parameter ``default_unit`` (https://github.com/ansible/ansible/pull/85259).
- Variable loading now uses file source instead of variables when invalidly
formmated vars file is loaded.
- ansible-test - The runtime-metadata sanity test now ignores pre-release and
build identifiers in collection versions. This prevents errors if a tombstone
version is ``X.0.0``, while the collection's version is ``X.0.0-prerelease``
(https://github.com/ansible/ansible/issues/85193)."
- display - Fix ``getuser`` fallback error handling on Python 3.13 and later.
(https://github.com/ansible/ansible/issues/86142)
- first_found - Correct the "Include tasks only if one of the files exists,
otherwise skip" example.
- get_url - fix regex for GNU Digest line which is used in comparing checksums
(https://github.com/ansible/ansible/issues/86132).
- local connection - Fix ``getuser`` fallback error handling on Python 3.13
and later.
release_summary: '| Release Date: 2025-12-02
| `Porting Guide <https://docs.ansible.com/ansible-core/2.20/porting_guides/porting_guide_core_2.20.html>`__
'
codename: Good Times Bad Times
fragments:
- 2.20.1rc1_summary.yaml
- 85193-runtime-metadata.yml
- 85259-fix-human_to_bytes.yml
- first-found-example.yml
- get_url_regex.yml
- getuser-exception-handling.yml
- varloaderror.yml
release_date: '2025-12-02'

@ -0,0 +1,3 @@
release_summary: |
| Release Date: 2025-11-04
| `Porting Guide <https://docs.ansible.com/ansible-core/2.20/porting_guides/porting_guide_core_2.20.html>`__

@ -0,0 +1,3 @@
release_summary: |
| Release Date: 2025-09-23
| `Porting Guide <https://docs.ansible.com/ansible-core/2.20/porting_guides/porting_guide_core_2.20.html>`__

@ -0,0 +1,3 @@
release_summary: |
| Release Date: 2025-10-06
| `Porting Guide <https://docs.ansible.com/ansible-core/2.20/porting_guides/porting_guide_core_2.20.html>`__

@ -0,0 +1,3 @@
release_summary: |
| Release Date: 2025-10-14
| `Porting Guide <https://docs.ansible.com/ansible-core/2.20/porting_guides/porting_guide_core_2.20.html>`__

@ -0,0 +1,3 @@
release_summary: |
| Release Date: 2025-10-20
| `Porting Guide <https://docs.ansible.com/ansible-core/2.20/porting_guides/porting_guide_core_2.20.html>`__

@ -0,0 +1,3 @@
release_summary: |
| Release Date: 2025-10-29
| `Porting Guide <https://docs.ansible.com/ansible-core/2.20/porting_guides/porting_guide_core_2.20.html>`__

@ -0,0 +1,3 @@
release_summary: |
| Release Date: 2025-12-02
| `Porting Guide <https://docs.ansible.com/ansible-core/2.20/porting_guides/porting_guide_core_2.20.html>`__

@ -0,0 +1,2 @@
bugfixes:
- include_role - allow host specific values in all ``*_from`` arguments (https://github.com/ansible/ansible/issues/66497)

@ -0,0 +1,2 @@
minor_changes:
- "ansible-doc - show ``notes``, ``seealso``, and top-level ``version_added`` for role entrypoints (https://github.com/ansible/ansible/pull/81796)."

@ -0,0 +1,2 @@
bugfixes:
- uri - fix form-multipart file not being found when task is retried (https://github.com/ansible/ansible/issues/85009)

@ -0,0 +1,2 @@
minor_changes:
- stat module - add SELinux context as a return value, and add a new option to trigger this return, which is False by default. (https://github.com/ansible/ansible/issues/85217).

@ -1,2 +0,0 @@
bugfixes:
- apt - Stop the >= operator from being ignored for packages that are not already installed (https://github.com/ansible/ansible/pull/85254)

@ -0,0 +1,3 @@
bugfixes:
- "ansible-doc - prevent crash when scanning collections in paths that have more than one ``ansible_collections`` in it
(https://github.com/ansible/ansible/issues/84909, https://github.com/ansible/ansible/pull/85361)."

@ -0,0 +1,2 @@
bugfixes:
- Fix issue where play tags prevented executing notified handlers (https://github.com/ansible/ansible/issues/85475)

@ -0,0 +1,2 @@
minor_changes:
- deb822_repository - Add automatic installation of the ``python3-debian`` package if it is missing by adding the parameter ``install_python_debian``

@ -0,0 +1,2 @@
minor_changes:
- "default callback plugin - add option to configure indentation for JSON and YAML output (https://github.com/ansible/ansible/pull/85497)."

@ -0,0 +1,2 @@
bugfixes:
- callback plugins - improve consistency accessing the Task object's resolved_action attribute.

@ -0,0 +1,2 @@
bugfixes:
- pip - Fix pip module output so that it returns changed when the only operation is initializing a venv.

@ -0,0 +1,3 @@
bugfixes:
- >-
``ansible-galaxy collection list`` - fail when none of the configured collection paths exist.

@ -0,0 +1,2 @@
bugfixes:
- import_tasks - fix templating parent include arguments.

@ -1,5 +0,0 @@
bugfixes:
- >-
``ansible.builtin.pip`` - Running the built-in pip module with ``check_mode`` and packages coming from VCS URLs, archives, or local filepaths now correctly outputs the ``changed`` status of the task.
Previously, it was always reported as changed due to improper package name resolution.
(https://github.com/ansible/ansible/pull/85623)

@ -0,0 +1,6 @@
minor_changes:
- >-
setup - added new subkey ``lvs`` within each entry of ``ansible_facts['vgs']``
to provide complete logical volume data scoped by volume group.
The top level ``lvs`` fact by comparison, deduplicates logical volume names
across volume groups and may be incomplete. (https://github.com/ansible/ansible/issues/85632)

@ -0,0 +1,2 @@
bugfixes:
- "validate-modules sanity test - fix handling of missing doc fragments (https://github.com/ansible/ansible/pull/85638)."

@ -0,0 +1,2 @@
bugfixes:
- The ``ansible_failed_task`` variable is now correctly exposed in a rescue section, even when a failing handler is triggered by the ``flush_handlers`` task in the corresponding ``block`` (https://github.com/ansible/ansible/issues/85682)

@ -0,0 +1,2 @@
bugfixes:
- "``ternary`` filter - evaluate values lazily (https://github.com/ansible/ansible/issues/85743)"

@ -1,2 +0,0 @@
bugfixes:
- ansible_virtualization_role and ansible_virtualization_type facts - fix the detection of vms running inside FreeBSD Bhyve hypervisor and detection of jails (https://github.com/ansible/ansible/pull/85767)

@ -0,0 +1,2 @@
bugfixes:
- cache plugins - close temp cache file before moving it to fix error on WSL. (https://github.com/ansible/ansible/pull/85816)

@ -1,6 +0,0 @@
---
bugfixes:
- galaxy - previously, some corrupted cache files could cause Ansible Galaxy to fail
with a traceback. This has been corrected to display a clear error message explaining
how to resolve the problem.
(https://github.com/ansible/ansible/issues/85918)

@ -1,2 +0,0 @@
removed_features:
- Removed deprecated ability to import ``datetime``, ``signal``, ``types``, ``chain``, ``repeat``, ``map`` and ``shlex_quote`` from ``ansible.module_utils.basic``.

@ -1,2 +0,0 @@
removed_features:
- Removed deprecated ``handle_stats_and_callbacks`` parameter of the ``StrategyBase._load_included_file`` method. (https://github.com/ansible/ansible/issues/86003)

@ -1,2 +0,0 @@
minor_changes:
- "ansible-test validate-modules sanity test - now reports bad return value keys that cannot be used with the dot notation in Jinja expressions (https://github.com/ansible/ansible/issues/86079)."

@ -1,3 +0,0 @@
---
minor_changes:
- script - remove the currently unsupported ``decrypt`` argument from the module documentation (https://github.com/ansible/ansible/issues/86067).

@ -1,6 +0,0 @@
---
bugfixes:
- >-
iptables - The module can now detect when a extensions added with the module ``match`` argument have
been automatically imported by other module arguments such as ``uid_owner`` and prevents duplicate
extension imports which previously caused an error (https://github.com/ansible/ansible/issues/84387).

@ -1,2 +0,0 @@
bugfixes:
- modules - fix AnsiballZ wrapper code escaping of sitecustomize

@ -0,0 +1,2 @@
minor_changes:
- ansible-doc - Return a more verbose error message when the ``description`` field is missing.

@ -1,2 +0,0 @@
minor_changes:
- The minimum required ``setuptools`` version is now ``77.0.3``, as it is needed for the new PEP 639 license format

@ -0,0 +1,2 @@
minor_changes:
- ansible-test - Implement new authentication methods for accessing the Ansible Core CI service.

@ -0,0 +1,2 @@
bugfixes:
- ansible-test - Limit package install retries during managed remote instance bootstrapping.

@ -0,0 +1,2 @@
minor_changes:
- ansible-test - Update default containers.

@ -1,2 +1,3 @@
minor_changes: minor_changes:
- ansible-test - Update base and default containers. - ansible-test - Update test containers.
- ansible-test - Update base/default containers to include Python 3.14.0.

@ -0,0 +1,7 @@
bugfixes:
- ansible-test - Use a consistent coverage config for all collection testing.
- ansible-test - Always exclude the ``tests/output/`` directory from a collection's code coverage.
(https://github.com/ansible/ansible/issues/84244)
minor_changes:
- ansible-test - Improve formatting of generated coverage config file.

@ -0,0 +1,2 @@
minor_changes:
- ansible-test - Upgrade to ``coverage`` version 7.10.7 for Python 3.9 and later.

@ -1,2 +0,0 @@
bugfixes:
- ansible-test - Fix docker hostname parsing

@ -0,0 +1,2 @@
minor_changes:
- ansible-test - Replace FreeBSD 14.2 with 14.3.

@ -0,0 +1,2 @@
minor_changes:
- ansible-test - Use OS packages to satisfy controller requirements on FreeBSD 13.5 during managed instance bootstrapping.

@ -1,2 +0,0 @@
bugfixes:
- ansible-test - Restore code coverage reporting for Python code residing in integration tests.

@ -1,4 +0,0 @@
minor_changes:
- >-
ansible-test - add ``.winrm`` and ``.networking`` as valid JSON/YAML inventory file extensions. This should not
affect any public facing code as it is used internally for inventories generated by ``ansible-test``.

@ -0,0 +1,2 @@
minor_changes:
- ansible-test - Removed support for automatic provisioning of obsolete instances for network-integration tests.

@ -0,0 +1,2 @@
bugfixes:
- ansible-test - Fix a traceback that can occur when using delegation before the ansible-test temp directory is created.

@ -1,2 +0,0 @@
minor_changes:
- ansible-test - Remove pylint check for ``urllib2`` usage.

@ -0,0 +1,4 @@
minor_changes:
- ansible-test - Upgrade Fedora 41 to Fedora 42.
- ansible-test - Upgrade Alpine 3.21 to 3.22.
- ansible-test - Update Ubuntu containers.

@ -0,0 +1,2 @@
minor_changes:
- ansible-test - Replace RHEL 9.5 with 9.6.

@ -0,0 +1,6 @@
minor_changes:
- ansible-test - Update pinned sanity test requirements, including upgrading to pylint 4.0.0.
- ansible-test - Filter out pylint messages for invalid filenames and display a notice when doing so.
- ansible-test - Update astroid imports in custom pylint checkers.
- ansible-test - Default to Python 3.14 in the ``base`` and ``default`` test containers.
- ansible-test - Update pinned ``pip`` version to 25.2.

@ -0,0 +1,2 @@
minor_changes:
- ansible-test - Update pinned sanity test requirements.

@ -0,0 +1,3 @@
---
bugfixes:
- apt - mark dependencies installed as part of deb file installation as auto (https://github.com/ansible/ansible/issues/78123).

@ -0,0 +1,3 @@
---
minor_changes:
- apt_repository - use correct debug method to print debug message.

@ -1,3 +0,0 @@
---
removed_features:
- interpreter_discovery - removed auto_legacy and auto_legacy_slient options (https://github.com/ansible/ansible/issues/85995).

@ -1,4 +0,0 @@
deprecated_features:
- The ``get_platfrom()`` function from ``ansible.module_utils.basic`` is deprecated and will be removed in ansible-core 2.24. Use ``platform.system()`` from the Python standard library instead.
- The ``load_platform_subclass()`` function from ``ansible.module_utils.basic`` is deprecated and will be removed in ansible-core 2.24. Use ``get_platform_subclass()`` from ``ansible.module_utils.common.sys_info`` instead.
- The ``get_all_subclasses()`` function from ``ansible.module_utils.basic`` is deprecated and will be removed in ansible-core 2.24. Use ``get_all_subclasses()`` from ``ansible.module_utils.common._utils`` instead.

@ -1,3 +0,0 @@
---
bugfixes:
- basic - fail in controlled manner when ``run_command()`` attempts to parse a command with broken syntax passed in as a string (https://github.com/ansible/ansible/issues/85719).

@ -0,0 +1,2 @@
minor_changes:
- blockinfile - add new module option ``encoding`` to support files in encodings other than UTF-8 (https://github.com/ansible/ansible/pull/85291).

@ -1,2 +0,0 @@
bugfixes:
- cache plugins based on the BaseFileCache class will now sanitize keys to avoid names that could cause issues with the storage path

@ -1,3 +0,0 @@
---
removed_features:
- compat.datetime - removed deprecated datetime compat APIs (https://github.com/ansible/ansible/issues/86000).

@ -0,0 +1,3 @@
bugfixes:
- templating - Multi-node template results coerce embedded ``None`` nodes to empty string (instead of rendering literal ``None`` to the output).
- argspec validation - The ``str`` argspec type treats ``None`` values as empty string for better consistency with pre-2.19 templating conversions.

@ -1,3 +0,0 @@
minor_changes:
- callback plugins - support configuration using extra variables.
- default callback plugin - add variable configuration for ``display_skipped_hosts`` (https://github.com/ansible/ansible/issues/84469).

@ -1,3 +0,0 @@
---
bugfixes:
- copy - honor directory_mode when copying directories with remote_src=True (https://github.com/ansible/ansible/issues/81292).

@ -1,2 +0,0 @@
minor_changes:
- password hashing - Add support back for using the ``crypt`` implmentation from the C library used to build Python, or with expanded functionality using ``libxcrypt``

@ -0,0 +1,2 @@
minor_changes:
- DataLoader - Update ``DataLoader.get_basedir`` to be an abspath

@ -1,2 +0,0 @@
minor_changes:
- DataLoader - Update ``DataLoader`` to deal exclusively in str

@ -0,0 +1,3 @@
deprecated_features:
- INJECT_FACTS_AS_VARS configuration currently defaults to ``True``, this is now deprecated and it will switch to ``False`` by Ansible 2.24.
You will only get notified if you are accessing 'injected' facts (for example, ansible_os_distribution vs ansible_facts['os_distribution']).

@ -0,0 +1,3 @@
bugfixes:
- display - Fixed reference to undefined `_DeferredWarningContext` when issuing early warnings during startup.
(https://github.com/ansible/ansible/issues/85886)

@ -0,0 +1,2 @@
removed_features:
- dnf/dnf5 - remove deprecated ``install_repoquery`` option.

@ -0,0 +1,3 @@
---
bugfixes:
- dnf - Check if installroot is directory or not (https://github.com/ansible/ansible/issues/85680).

@ -0,0 +1,2 @@
removed_features:
- ansible-galaxy - remove support for resolvelib >= 0.5.3, < 0.8.0.

@ -1,4 +0,0 @@
---
minor_changes:
- file - return disk_usage_bytes fact (https://github.com/ansible/ansible/issues/70834).
- stat - return disk_usage_bytes fact (https://github.com/ansible/ansible/issues/70834).

@ -0,0 +1,3 @@
bugfixes:
- conditionals - When displaying a broken conditional error or deprecation warning,
the origin of the non-boolean result is included (if available), and the raw result is omitted.

@ -0,0 +1,3 @@
---
removed_features:
- encrypt - remove deprecated passlib_or_crypt API.

@ -0,0 +1,4 @@
bugfixes:
- failed_when - When using ``failed_when`` to suppress an error, the ``exception`` key in the result is renamed to ``failed_when_suppressed_exception``.
This prevents the error from being displayed by callbacks after being suppressed.
(https://github.com/ansible/ansible/issues/85505)

@ -0,0 +1,3 @@
---
minor_changes:
- fetch_file - add ca_path and cookies parameter arguments (https://github.com/ansible/ansible/issues/85172).

@ -0,0 +1,3 @@
bugfixes:
- callback plugins - fix displaying the rendered ``ansible_host`` variable with ``delegate_to`` (https://github.com/ansible/ansible/issues/84922).
- ssh connection - fix documented variables for the ``host`` option. Connection options can be configured with delegated variables in general.

@ -0,0 +1,2 @@
bugfixes:
- fetch - also return ``file`` in the result when changed is ``True`` (https://github.com/ansible/ansible/pull/85729).

@ -0,0 +1,2 @@
bugfixes:
- ansible-doc --list/--list_files/--metadata-dump - fixed relative imports in nested filter/test plugin files (https://github.com/ansible/ansible/issues/85753).

@ -0,0 +1,3 @@
bugfixes:
- SIGINT/SIGTERM Handling - Make SIGINT/SIGTERM handling more robust by splitting concerns
between forks and the parent.

@ -0,0 +1,2 @@
bugfixes:
- script inventory plugin will now show correct 'incorrect' type when doing implicit conversions on groups.

@ -0,0 +1,2 @@
bugfixes:
- ansible-galaxy - Use the provided import task url, instead of parsing to get the task id and reconstructing the URL

@ -1,3 +0,0 @@
---
minor_changes:
- generator - add support for extra vars (https://github.com/ansible/ansible/issues/83270).

@ -0,0 +1,4 @@
bugfixes:
- templating - Undefined marker values sourced from the Jinja ``getattr->getitem`` fallback are now accessed correctly,
raising AnsibleUndefinedVariable for user plugins that do not understand markers.
Previously, these values were erroneously returned to user plugin code that had not opted in to marker acceptance.

@ -1,2 +0,0 @@
bugfixes:
- getent - handle non-empty string for split parameter value (https://github.com/ansible/ansible/issues/85720).

@ -1,3 +0,0 @@
---
removed_features:
- git - removed deprecated alias gpg_whitelist (https://github.com/ansible/ansible/issues/86004).

@ -1,2 +0,0 @@
minor_changes:
- group - Add warning message when invalid priority values are provided to Group.set_priority() method (https://github.com/ansible/ansible/pull/85468).

@ -0,0 +1,2 @@
bugfixes:
- ansible-galaxy no longer shows the internal protomatter collection when listing.

@ -0,0 +1,2 @@
bugfixes:
- Do not re-add ``tags`` on blocks from within ``import_tasks``.

Some files were not shown because too many files have changed in this diff Show More

Loading…
Cancel
Save