New release v2.11.6 (#75999)

* ansible-test pslint - fix warning with nested objects

(cherry picked from commit 7e19957afa)

.azure-pipelines/azure-pipelines.yml

@@ -36,7 +36,7 @@ variables:
 resources:
   containers:
     - container: default
-      image: quay.io/ansible/azure-pipelines-test-container:1.8.0
+      image: quay.io/ansible/azure-pipelines-test-container:1.9.0
 
 pool: Standard
 

.azure-pipelines/scripts/publish-codecov.sh

@@ -7,7 +7,7 @@ set -o pipefail -eu
 
 output_path="$1"
 
-curl --silent --show-error https://codecov.io/bash > codecov.sh
+curl --silent --show-error https://ansible-ci-files.s3.us-east-1.amazonaws.com/codecov/codecov.sh > codecov.sh
 
 for file in "${output_path}"/reports/coverage*.xml; do
     name="${file}"

.gitattributes

@@ -1,2 +1 @@
 .github/ export-ignore
-hacking/ export-ignore

Makefile

@@ -11,7 +11,7 @@
 #   make deb ------------------ produce a DEB
 #   make docs ----------------- rebuild the manpages (results are checked in)
 #   make gettext -------------- produce POT files for docs
-#   make generate-po ---------- generate language specfic po file
+#   make generate-po ---------- generate language specific po file
 #   make needs-translation ---- generate list of file with unstranlated or fuzzy string for a specific language
 #   make tests ---------------- run the tests (see https://docs.ansible.com/ansible/devel/dev_guide/testing_units.html for requirements)
 
@@ -34,7 +34,7 @@ else
 ASCII2MAN = @echo "ERROR: rst2man from docutils command is not installed but is required to build $(MANPAGES)" && exit 1
 endif
 
-PYTHON=python
+PYTHON ?= python
 GENERATE_CLI = hacking/build-ansible.py generate-man
 
 # fetch version from project release.py as single source-of-truth

changelogs/CHANGELOG-v2.11.rst

@@ -5,105 +5,212 @@ ansible-core 2.11 "Hey Hey, What Can I Do" Release Notes
 .. contents:: Topics
 
 
-v2.11.0b4
-=========
+v2.11.6
+=======
 
 Release Summary
 ---------------
 
-| Release Date: 2021-03-29
+| Release Date: 2021-10-11
 | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
 
 
 Minor Changes
 -------------
 
-- ansible-galaxy CLI - ``collection verify`` command now exits with a non-zero exit code on verification failure
-- ansible-galaxy CLI - ``collection verify`` command now supports a ``--offline`` option for local-only verification
+- ansible-galaxy - Non-HTTP exceptions from Galaxy servers are now a warning and only fatal if the collection to download|install|verify is not available from any of the servers (https://github.com/ansible/ansible/issues/75443).
+
+Security Fixes
+--------------
+
+- Do not include params in exception when a call to ``set_options`` fails. Additionally, block the exception that is returned from being displayed to stdout. (CVE-2021-3620)
 
 Bugfixes
 --------
 
-- Correctly set template_path and template_fullpath for usage in template lookup and action plugins.
-- Try to avoid kernel 'blocking' state on reading files while fact gathering.
-- apt - fix policy_rc_d parameter throwing an exception when restoring original file (https://github.com/ansible/ansible/issues/66211)
-- argument spec validation - fix behavior of ``apply_defaults=True`` when an empty dictionary is specified for such an option (https://github.com/ansible/ansible/pull/74029).
-- pause - do not accept enter to continue when a timeout is set (https://github.com/ansible/ansible/issues/73948)
-- setup module, fix error handling on bad subset given
-- wait_for module, move missing socket into function to get proper comparrison in time.
+- PowerShell - Ignore the ``LIB`` environment variable when compiling C# Ansible code
+- ansible-galaxy - Fix handling HTTP exceptions from Galaxy servers. Continue to the next server in the list until the collection is found.
+- ansible-test pslint - Fix error when encountering validation results that are highly nested - https://github.com/ansible/ansible/issues/74151
+- config - use ``callbacks_enabled`` instead ``callback_enabled`` in a deprecated message (https://github.com/ansible/ansible/issues/70028).
+- netconf - catch and handle exception to prevent stack trace when running in FIPS mode
+- roles - fix unexpected ``AttributeError`` when an empty ``argument_specs.yml`` is present (https://github.com/ansible/ansible/pull/75604).
 
-v2.11.0b3
-=========
+v2.11.5
+=======
 
 Release Summary
 ---------------
 
-| Release Date: 2021-03-19
+| Release Date: 2021-09-13
 | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
 
 
-Major Changes
--------------
-
-- AnsibleModule - use ``ArgumentSpecValidator`` class for validating argument spec and remove private methods related to argument spec validation. Any modules using private methods should now use the ``ArgumentSpecValidator`` class or the appropriate validation function.
-
-Minor Changes
--------------
-
-- Callbacks - Migrate more places in the ``TaskExecutor`` to sending callbacks directly over the queue, instead of sending them as ``TaskResult`` and short circuiting in the Strategy to send the callback. This enables closer to real time callbacks of retries and loop results (https://github.com/ansible/ansible/issues/73899)
-- setup - fix distribution facts for Older Amazon Linux with ``/etc/os-release`` (https://github.com/ansible/ansible/issues/73946).
-
 Bugfixes
 --------
 
-- Fix adding unrelated candidate names to the plugin loader redirect list.
-- Strategy - When building the task in the Strategy from the Worker, ensure it is properly marked as finalized and squashed. Addresses an issue with ``ansible_failed_task``. (https://github.com/ansible/ansible/issues/57399)
-- ansible-pull - Run all playbooks that when multiple are supplied via the command line (https://github.com/ansible/ansible/issues/72708)
-- find module, fix default pattern when use_regex is true.
+- Fix templating task action with host-specific vars (https://github.com/ansible/ansible/issues/75568)
+- Since ansible/2.11 doc site was removed, the current relative messages point to a 404 url, this fixes it by chainging the target to ansible-core/2.11
+- ansible-galaxy - Fix a bug with build_ignore when installing collections from source (https://github.com/ansible/ansible/issues/75528).
+- ansible-galaxy - Improve error message from dependency resolution when a candidate has inconsistent requirements (https://github.com/ansible/ansible/issues/75139).
+- ansible-playbook, more robust handling of --list-hosts and undefined vars in hosts keyword.
+- command module, clarify order of remove/creates checks.
+- command module, correctly handles chdir to symlinks.
+- command module, move to standarized messages in 'msg' vs abusing 'stdout'.
+- command module, now all options work in ad-hoc execution.
+- command module, now always returns what we documented as 'returns always'.
+- get_bin_path, clarify with quotes what the missing required executable is.
+- make previous versions compatible we new attributres w/o implementing them.
+- paramiko_ssh - mark connection as connected when ``_connect()`` is called (https://github.com/ansible/ansible/issues/74081)
+- setup module should now not truncate hpux interface names.
+- validate_argument_spec, correct variable precedence and merge method and add missing examples
+- variable manager, avoid sourcing delegated variables when no inventory hostname is present. This affects scenarios like syntax check and imports.
 
-v2.11.0b2
-=========
+v2.11.4
+=======
 
 Release Summary
 ---------------
 
-| Release Date: 2021-03-15
+| Release Date: 2021-08-16
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Bugfixes
+--------
+
+- Fix ``when`` evaluation on Native Jinja and Python 3.10.
+- Jinja2 globals should be accessible even when importing a template without the context (https://github.com/ansible/ansible/issues/75371)
+- ansible-test - add packaging python module to ``ansible-doc`` sanity test requirements.
+- ansible-test validate-modules - correctly validate positional parameters to ``AnsibleModules`` (https://github.com/ansible/ansible/pull/75332).
+- cli defaults for ssh args set to None as '' was bypassing normal default.
+- dnf module - Use all components of a package name to determine if it's installed (https://github.com/ansible/ansible/issues/75311).
+- do not trigger interpreter discovery in the forced_local module path as they should use the ansible playbook python unless otherwise configured.
+- find action, correctly convert path to text when warning about skiping.
+- remote tmpdir permissions - fix type error in macOS chmod ACL fallback (https://github.com/ansible/ansible/pull/74613).
+- template - ensure Jinja2 overrides from template header are used (https://github.com/ansible/ansible/issues/75275)
+- unarchive - move failure for missing binary to ``can_handle_archive()`` rather than ``__init__()``
+
+v2.11.3
+=======
+
+Release Summary
+---------------
+
+| Release Date: 2021-07-19
 | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
 
 
 Minor Changes
 -------------
 
-- ansible-test - The generated ``resource_prefix`` variable now meets the host name syntax requirements specified in RFC 1123 and RFC 952. The value used for local tests now places the random number before the hostname component, rather than after. If the resulting value is too long, it will be truncated.
-- ansible-test validate-modules - option names that seem to indicate they contain secret information that should be marked ``no_log=True`` are now flagged in the validate-modules sanity test. False positives can be marked by explicitly setting ``no_log=False`` for these options in the argument spec. Please note that many false positives are expected; the assumption is that it is by far better to have false positives than false negatives (https://github.com/ansible/ansible/pull/73508).
-- distribution - add facts about Amazon Linux Distribution facts (https://github.com/ansible/ansible/issues/73742).
-- module payload builder - module_utils imports in any nested block (eg, ``try``, ``if``) are treated as optional during module payload builds; this allows modules to implement runtime fallback behavior for module_utils that do not exist in older versions of Ansible.
+- ansible-test - aws creates and exposes a new tiny_prefix variable to provide a shorter prefix for the AWS tests.
 
 Bugfixes
 --------
 
-- A handler defined within a role will now search handlers subdir for included tasks (issue https://github.com/ansible/ansible/issues/71222).
-- ALLOW_WORLD_READABLE_TMP, switched to 'moved' message as 'deprecation' is misleading since config settings still work w/o needing change.
-- Automatically remove async cache files for polled async tasks that have completed (issue https://github.com/ansible/ansible/issues/73206).
-- Deal with failures when sorting JSON and you have incompatible key types.
-- Setup virtualization_facts - add RHV and oVirt type. This change will fully work for VMs in clusters at cluster level 4.4 or newer (https://github.com/ansible/ansible/pull/72876).
-- [set_fact] Corrected and expanded documentation as well as now raise errors that were previously ignored.
-- ansible-test - ensure unit test paths for connection and inventory plugins are correctly identified for collections (https://github.com/ansible/ansible/issues/73876).
-- connection/ssh, ensure parameters come from correct source get_option, so functionality matches docs.
-- connection/ssh, fix reset to use same parameters to check if socket exists as actually used, was hardcoded to default string construction previouslly.
-- j2 plugin loader clarified comments, made note with better fqcn detection.
-- notify keyword is not ignored anymore on import_tasks, also able to apply to blocks now.
-- restrict module valid JSON parsed output to objects as lists are not valid responses.
-- setup, don't give up on all local facts gathering if one script file fails.
-- su become plugin, ensure correct type for localization option.
+- Add unicode support to ``ansible-inventory`` CLI (https://github.com/ansible/ansible/issues/57378)
+- Ensure we get full path for extra vars into cliargs to avoid realpath issues after initial load.
+- ansible-doc - in text output, do not show empty ``version_added_collection`` values (https://github.com/ansible/ansible/pull/74999).
+- ansible-test - restrict ``packaging`` to ``< 21.0`` for Python ``< 3.6`` (https://github.com/ansible/ansible/pull/75186).
+- command - remove unreachable code path when trying to convert the value for ``chdir`` to bytes (https://github.com/ansible/ansible/pull/75036)
+- module_common - handle exception when multiple workers try to create the cache directory
+- roles - make sure argspec validation task templates suboptions (https://github.com/ansible/ansible/issues/75070).
+- slurp - improve the logic in the error handling and remove ``os.stat()`` call (https://github.com/ansible/ansible/pull/75038)
+- ssh_connection - rename ``retries`` to ``reconnection_retries`` to avoid conflicts with task vars (https://github.com/ansible/ansible/issues/75142).
+- ssh_connection - set the default for ``reconnection_retries`` back to ``0`` (https://github.com/ansible/ansible/issues/75142).
+- task_executor/ssh_connection - use the ``retries`` value from ``ssh_connection`` settings, not the default from the ``Task`` field attributes (https://github.com/ansible/ansible/issues/75142).
 
-v2.11.0b1
-=========
+v2.11.2
+=======
 
 Release Summary
 ---------------
 
-| Release Date: 2021-03-02
+| Release Date: 2021-06-22
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Security Fixes
+--------------
+
+- templating engine fix for not preserving usnafe status when trying to preserve newlines. CVE-2021-3583
+
+Bugfixes
+--------
+
+- AnsibleModule.set_mode_if_different - don't check file existence when check_mode is activated (https://github.com/ansible/ansible/issues/61185).
+- Apply ``display_failed_stderr`` callback option on loop item results. (https://github.com/ansible/ansible/issues/74864)
+- Avoid task executor from ending early as vars can come from delegated to host.
+- ansible-pull - update documentation for ``--directory`` option to clarify path must be absolute.
+- config, ensure 'quoted' lists from ini or env do not take the quotes literally as part of the list item.
+- gather_facts, package, service - fix using module_defaults for the modules in addition to the action plugins. (https://github.com/ansible/ansible/issues/72918)
+- psrp - Always cleanup the last run pipeline if a second pipeline is invoked to avoid violating any resource limits.
+- psrp - Fix error when resetting a connection that was initialised but not connected - (https://github.com/ansible/ansible/issues/74092).
+- psrp - Try to clean up any server-side resources when resetting a connection.
+- roles - make sure argspec validation task is tagged with ``always`` (https://github.com/ansible/ansible/pull/74994).
+- slurp - Fix error messages for unreadable files and directories (https://github.com/ansible/ansible/issues/67340).
+- slurp - handle error when ``path`` is a directory and not a file (https://github.com/ansible/ansible/pull/74930).
+- ssh connection - fix interaction between transfer settings options.
+- subversion - fix stack trace when getting information about the repository (https://github.com/ansible/ansible/issues/36498)
+- version test - improve error message when an empty version is provided
+
+v2.11.1
+=======
+
+Release Summary
+---------------
+
+| Release Date: 2021-05-24
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Minor Changes
+-------------
+
+- ansible adhoc, clarified the help to some options, also added some comments to code.
+- command - update the user warning message to point out command name (https://github.com/ansible/ansible/pull/74475).
+
+Bugfixes
+--------
+
+- Add RockyLinux to fact gathering (https://github.com/ansible/ansible/pull/74530).
+- Improve resilience of ``ansible-galaxy collection`` by increasing the page size to make fewer requests overall and retrying queries with a jittered exponential backoff when rate limiting HTTP codes (520 and 429) occur. (https://github.com/ansible/ansible/issues/74191)
+- Prevent ``ansible_failed_task`` from further templating (https://github.com/ansible/ansible/issues/74036)
+- Remove 'default' from ssh plugin as we want to rely on default from ssh itself or ssh/config.
+- The error message about the failure to import a ``gpg`` key by the ``apt_key`` module was incorrect (https://github.com/ansible/ansible/issues/74423).
+- ansible-test - Avoid publishing the port used by the ``pypi-test-container`` since it is only accessed by other containers. This avoids issues when trying to run tests in parallel on a single host.
+- ansible-test - Fix docker container IP address detection. The ``bridge`` network is no longer assumed to be the default.
+- ansible-test - Use documented API to retrieve build information from Azure Pipelines.
+- ansible.builtin.cron - Keep non-empty crontabs, when removing cron jobs (https://github.com/ansible/ansible/pull/74497).
+- ansible.utils.encrypt now handles missing or unusable 'crypt' library.
+- ansible_test - add constraint for ``MarkupSafe`` (https://github.com/ansible/ansible/pull/74666)
+- apt_key - Binary GnuPG keys downloaded via URLs were corrupted so GnuPG could not import them (https://github.com/ansible/ansible/issues/74424).
+- become - fix a regression on Solaris where chmod can return 5 which we interpret as auth failure and stop trying become tmpdir permission fallbacks
+- become - work around setfacl not existing on modern Solaris (and possibly failing on some filesystems even when it does exist)
+- callback default, now uses task delegate_to instead of delegate vars to display delegate to host
+- callbacks, restores missing delegate_vars
+- correct doc links for become on warnings over world readable settings.
+- correctly use world readable setting since old constant is not 'settable' anymore.
+- facts - detect homebrew installed at /opt/homebrew/bin/brew
+- filter plugins - patch new versions of Jinja2 to prevent warnings/errors on renamed filter decorators (https://github.com/ansible/ansible/issues/74667)
+- get_url - Fixed checksum validation for binary files (leading asterisk) in checksum files (https://github.com/ansible/ansible/pull/74502).
+- hostname - Add Rocky Linux support
+- ini lookup - handle errors for duplicate keys and missing sections (https://github.com/ansible/ansible/issues/74601)
+- interpreter discovery - Debian 8 and lower will avoid unsupported Python3 version in interpreter discovery
+- pause - ensure control characters are always set to an appropriate value (https://github.com/ansible/ansible/issues/73264)
+- playbook loaded from collection subdir now does not ignore subdirs.
+- plugin config now allows list type options to have multiple valid choices (#74225).
+- replace - better handling of file operation exceptions (https://github.com/ansible/ansible/pull/74686).
+- roles - allow for role arg specs in new meta file (https://github.com/ansible/ansible/issues/74525).
+- service - compare version without LooseVersion API (https://github.com/ansible/ansible/issues/74488).
+
+v2.11.0
+=======
+
+Release Summary
+---------------
+
+| Release Date: 2021-04-26
 | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
 
 
@@ -111,6 +218,7 @@ Major Changes
 -------------
 
 - A collection can be reinstalled with new version requirements without using the ``--force`` flag. The collection's dependencies will also be updated if necessary with the new requirements. Use ``--upgrade`` to force transitive dependency updates.
+- AnsibleModule - use ``ArgumentSpecValidator`` class for validating argument spec and remove private methods related to argument spec validation. Any modules using private methods should now use the ``ArgumentSpecValidator`` class or the appropriate validation function.
 - Declared ``resolvelib >= 0.5.3, < 0.6.0`` a direct dependency of
   ansible-core. Refs:
   - https://github.com/sarugaku/resolvelib
@@ -120,6 +228,7 @@ Major Changes
 - It became possible to upgrade Ansible collections from Galaxy servers using the ``--upgrade`` option with ``ansible-galaxy collection install``.
 - Support for role argument specification validation at role execution time. When a role contains an argument spec, an implicit validation task is inserted at the start of role execution.
 - add ``ArgumentSpecValidator`` class for validating parameters against an argument spec outside of ``AnsibleModule`` (https://github.com/ansible/ansible/pull/73335)
+- ansible-test - Tests run with the ``centos6`` and ``default`` test containers now use a PyPI proxy container to access PyPI when Python 2.6 is used. This allows tests running under Python 2.6 to continue functioning even though PyPI is discontinuing support for non-SNI capable clients.
 
 Minor Changes
 -------------
@@ -147,6 +256,7 @@ Minor Changes
 - CLI - Specify jinja version in ``--version`` output
 - CLI - Specify whether PyYAML includes libyaml support in version output
 - CLI version displays clarified as core version
+- Callbacks - Migrate more places in the ``TaskExecutor`` to sending callbacks directly over the queue, instead of sending them as ``TaskResult`` and short circuiting in the Strategy to send the callback. This enables closer to real time callbacks of retries and loop results (https://github.com/ansible/ansible/issues/73899)
 - Collection routing: Cisco NSO content from community.network migrated to cisco.nso (https://github.com/ansible/ansible/pull/73046).
 - Collection routing: DellEMC content from community.general migrated to dellemc.openmanage (https://github.com/ansible/ansible/pull/73046).
 - Collection routing: FortiOS content from community.network migrated to community.fortios (https://github.com/ansible/ansible/pull/73046).
@@ -200,9 +310,12 @@ Minor Changes
 - ansible-galaxy - Change the output verbosity level of the download message from 3 to 0 (https://github.com/ansible/ansible/issues/70010)
 - ansible-galaxy - Ensure ``get_collection_versions`` returns an empty list when a collection does not exist for consistency across API versions.
 - ansible-galaxy - find any collection dependencies in the globally configured Galaxy servers and not just the server the parent collection is from.
+- ansible-galaxy CLI - ``collection verify`` command now exits with a non-zero exit code on verification failure
+- ansible-galaxy CLI - ``collection verify`` command now supports a ``--offline`` option for local-only verification
 - ansible-test - A warning is no longer emitted when a ``pip*`` or ``python*`` binary is found without a matching couterpart.
 - ansible-test - Add ``macos/10.15`` as a supported value for the ``--remote`` option.
 - ansible-test - Add a ``--docker-network`` option to choose the network for running containers when using the ``--docker`` option.
+- ansible-test - Add constraint for ``decorator`` for Python versions prior to 3.5.
 - ansible-test - Add support for running tests on Fedora 33 (https://github.com/ansible/ansible/pull/72861).
 - ansible-test - Added Ubuntu 20.04 LTS image to the default completion list
 - ansible-test - Added a ``--export`` option to the ``ansible-test coverage combine`` command to facilitate multi-stage aggregation of coverage in CI pipelines.
@@ -258,9 +371,12 @@ Minor Changes
 - ansible-test - The ``pylint`` sanity test is now skipped with a warning on Python 3.9 due to unresolved upstream regressions.
 - ansible-test - The ``pylint`` sanity test is now supported on Python 3.8.
 - ansible-test - The ``rstcheck`` sanity test is no longer used for collections, but continues to be used for ansible-core.
+- ansible-test - The generated ``resource_prefix`` variable now meets the host name syntax requirements specified in RFC 1123 and RFC 952. The value used for local tests now places the random number before the hostname component, rather than after. If the resulting value is too long, it will be truncated.
 - ansible-test - Ubuntu containers as well as ``default-test-container`` and ``ansible-base-test-container`` are now slightly smaller due to apt cleanup (https://github.com/ansible/distro-test-containers/pull/46).
 - ansible-test - Update ``pylint`` and its dependencies to the latest available versions to support Python 3.9.
 - ansible-test - Update built-in service endpoints for the ``--remote`` option.
+- ansible-test - Update distribution test containers from version 2.0.1 to 2.0.2.
+- ansible-test - Update the Ansible Core and Ansible Collection default test containers to 3.2.0 and 3.2.2 respectively.
 - ansible-test - Updated the default test containers to version 3.1.0.
 - ansible-test - Upgrade ansible-runner version used in compatibility tests, remove some tasks that were only needed with older versions, and skip in python2 because ansible-runner is soon dropping it.
 - ansible-test - Use new endpoint for Parallels based instances with the ``--remote`` option.
@@ -286,6 +402,7 @@ Minor Changes
 - ansible-test runtime-metadata - validate removal version numbers, and check removal dates more strictly (https://github.com/ansible/ansible/pull/71679).
 - ansible-test validate-modules - ensure that removal collection version numbers and version_added collection version numbers conform to the semantic versioning specification at https://semver.org/ (https://github.com/ansible/ansible/pull/71679).
 - ansible-test validate-modules - no longer assume that ``default`` for ``type=bool`` options is ``false``, as the default is ``none`` and for some modules, ``none`` and ``false`` mean different things (https://github.com/ansible/ansible/issues/69561).
+- ansible-test validate-modules - option names that seem to indicate they contain secret information that should be marked ``no_log=True`` are now flagged in the validate-modules sanity test. False positives can be marked by explicitly setting ``no_log=False`` for these options in the argument spec. Please note that many false positives are expected; the assumption is that it is by far better to have false positives than false negatives (https://github.com/ansible/ansible/pull/73508).
 - ansible-test validate-modules - validate removal version numbers (https://github.com/ansible/ansible/pull/71679).
 - ansible.utils.encrypt now returns `AnsibleError` instead of crypt.crypt's `OSError` on Python 3.9
 - apt - module now works under any supported Python interpreter
@@ -303,6 +420,7 @@ Minor Changes
 - default callback - task name is now shown for ``include_tasks`` when using the ``free`` strategy (https://github.com/ansible/ansible/issues/71277).
 - default callback - task name is now shown for ``include_tasks`` when using the ``linear`` strategy with ``ANSIBLE_DISPLAY_SKIPPED_HOSTS=0``.
 - default_callback - moving 'check_mode_markers' documentation in default_callback doc_fragment (https://github.com/ansible-collections/community.general/issues/565).
+- distribution - add facts about Amazon Linux Distribution facts (https://github.com/ansible/ansible/issues/73742).
 - distribution - add support for DragonFly distribution (https://github.com/ansible/ansible/issues/43739).
 - distribution - added distribution fact and hostname support for Parrot OS (https://github.com/ansible/ansible/pull/69158).
 - distribution - handle NetBSD OS Family (https://github.com/ansible/ansible/issues/43739).
@@ -328,6 +446,7 @@ Minor Changes
 - lineinfile - add search_string parameter for non-regexp searching (https://github.com/ansible/ansible/issues/70470)
 - linux facts - Add additional check to ensure 'container' virtual fact gets added to guest_tech when appropriate (https://github.com/ansible/ansible/pull/71385)
 - meta - now include a ``skip_reason`` when skipped (https://github.com/ansible/ansible/pull/71355).
+- module payload builder - module_utils imports in any nested block (eg, ``try``, ``if``) are treated as optional during module payload builds; this allows modules to implement runtime fallback behavior for module_utils that do not exist in older versions of Ansible.
 - module_utils - ``get_file_attributes()`` now takes an optional ``include_version`` boolean parameter. When ``True`` (default), the file's version/generation number is included in the result (but requires ``lsattr -v`` to work on the target platform).
 - now !unsafe works on all types of data, not just strings, even recursively for mappings and sequences.
 - package_facts - module support for apt and rpm now works under any supported Python interpreter
@@ -338,7 +457,9 @@ Minor Changes
 - remove ``excommunicate`` debug command from AnsiballZ
 - selinux - return selinux_getpolicytype facts correctly.
 - service_facts - return service state information on AIX.
+- service_facts - return service state information on OpenBSD.
 - setup - allow list of filters (https://github.com/ansible/ansible/pull/68551).
+- setup - fix distribution facts for Older Amazon Linux with ``/etc/os-release`` (https://github.com/ansible/ansible/issues/73946).
 - setup.py - Declare that Python 3.9 is now supported (https://github.com/ansible/ansible/pull/72861).
 - setup.py - Skip doing conflict checks for ``sdist`` and ``egg_info`` commands (https://github.com/ansible/ansible/pull/71310)
 - subelements - clarify the lookup plugin documentation for parameter handling (https://github.com/ansible/ansible/issues/38182).
@@ -371,7 +492,7 @@ Deprecated Features
 -------------------
 
 - Starting in 2.14, shell and command modules will no longer have the option to warn and suggest modules in lieu of commands. The ``warn`` parameter to these modules is now deprecated and defaults to ``False``. Similarly, the ``COMMAND_WARNINGS`` configuration option is also deprecated and defaults to ``False``. These will be removed and their presence will become an error in 2.14.
-- apt_key - the paramater ``key`` does not have any effect, has been deprecated and will be removed in ansible-core version 2.14 (https://github.com/ansible/ansible/pull/70319).
+- apt_key - the parameter ``key`` does not have any effect, has been deprecated and will be removed in ansible-core version 2.14 (https://github.com/ansible/ansible/pull/70319).
 - psrp - Set the minimum version of ``pypsrp`` to ``0.4.0``.
 
 Removed Features (previously deprecated)
@@ -396,6 +517,8 @@ Security Fixes
 Bugfixes
 --------
 
+- A handler defined within a role will now search handlers subdir for included tasks (issue https://github.com/ansible/ansible/issues/71222).
+- ALLOW_WORLD_READABLE_TMP, switched to 'moved' message as 'deprecation' is misleading since config settings still work w/o needing change.
 - ANSIBLE_COLLECTIONS_PATHS - remove deprecation so that users of Ansible 2.9 and 2.10+ can use the same var when specifying a collection path without a warning.
 - Added unsafe_writes test.
 - Address compat with rpmfluff-0.6 for integration tests
@@ -407,6 +530,7 @@ Bugfixes
 - Ansible output now uses stdout to determine column width instead of stdin
 - AnsibleModule - added arg ``ignore_invalid_cwd`` to ``AnsibleModule.run_command()``, to control its behaviour when ``cwd`` is invalid. (https://github.com/ansible/ansible/pull/72390)
 - Apply ``_wrap_native_text`` only for builtin filters specified in STRING_TYPE_FILTERS.
+- Automatically remove async cache files for polled async tasks that have completed (issue https://github.com/ansible/ansible/issues/73206).
 - Be smarter about collection paths ending with ansible_collections, emulating a-galaxy behaviour. Issue 72628
 - CLI - Restore git information in version output when running from source
 - Collection callbacks were ignoring options and rules for stdout and adhoc cases.
@@ -415,6 +539,8 @@ Bugfixes
 - ConfigManager - Normalize ConfigParser between Python2 and Python3 to for handling comments (https://github.com/ansible/ansible/issues/73709)
 - Continue execution when  'flatten' filter when it hits a None/null value as part of the list.
 - Correct the inventory source error parse handling, specifically make the config INVENTORY_ANY_UNPARSED_IS_FAILED work as expected.
+- Correctly set template_path and template_fullpath for usage in template lookup and action plugins.
+- Deal with failures when sorting JSON and you have incompatible key types.
 - Display - Use wcswidth to calculate printable width of a text string (https://github.com/ansible/ansible/issues/63105)
 - Enabled unsafe_writes for get_url which was ignoring the paramter.
 - Ensure Ansible's unique filter preserves order (https://github.com/ansible/ansible/issues/63417)
@@ -425,6 +551,7 @@ Bugfixes
 - Fix --list-tasks format `role_name : task_name` when task name contains the role name. (https://github.com/ansible/ansible/issues/72505)
 - Fix ``RecursionError`` when templating large vars structures (https://github.com/ansible/ansible/issues/71920)
 - Fix ``delegate_facts: true`` when ``ansible_python_interpreter`` is not set. (https://github.com/ansible/ansible/issues/70168)
+- Fix adding unrelated candidate names to the plugin loader redirect list.
 - Fix an exit code for a non-failing playbook (https://github.com/ansible/ansible/issues/71306)
 - Fix ansible-galaxy collection list to show collections in site-packages (https://github.com/ansible/ansible/issues/70147)
 - Fix bytestring vs string comparison in module_utils.basic.is_special_selinux_path() so that special-cased filesystems which don't support SELinux context attributes still allow files to be manipulated on them. (https://github.com/ansible/ansible/issues/70244)
@@ -451,6 +578,7 @@ Bugfixes
 - InventoryManager - Fix unhandled exception when inventory directory was empty or contained empty subdirectories (https://github.com/ansible/ansible/issues/73658).
 - JSON Encoder - Ensure we treat single vault encrypted values as strings (https://github.com/ansible/ansible/issues/70784)
 - Lookup user by UID in password database if login name is not found (https://github.com/ansible/ansible/issues/17029)
+- OpenBSD module_utils - update sysctl variable name
 - Pass expression in angle-bracket notation as filename argument to a ``compile()`` built-in function, so that Python debuggers do not try to parse it as filename.
 - Pass the connection's timeout to connection plugins instead of the task's timeout.
 - Provide more information in AnsibleUndefinedVariable (https://github.com/ansible/ansible/issues/55152)
@@ -461,9 +589,11 @@ Bugfixes
 - Restored unsafe_writes functionality which was being skipped.
 - Restructured pipelining settings to be at the connection plugins leaving base config as global and for backwards compatiblity.
 - SSH plugin - Improve error message when ssh client is not found on the host
+- Setup virtualization_facts - add RHV and oVirt type. This change will fully work for VMs in clusters at cluster level 4.4 or newer (https://github.com/ansible/ansible/pull/72876).
 - Skip invalid collection names when listing in ansible-doc instead of throwing exception. Issue#72257
 - Skip literal_eval for string filters results in native jinja. (https://github.com/ansible/ansible/issues/70831)
 - Stop adding the connection variables to the output results
+- Strategy - When building the task in the Strategy from the Worker, ensure it is properly marked as finalized and squashed. Addresses an issue with ``ansible_failed_task``. (https://github.com/ansible/ansible/issues/57399)
 - Suppress warning when user directory used in --playbook-dir option with ansible-inventory command (https://github.com/ansible/ansible/issues/65262).
 - TOML inventory - Ensure we register dump functions for ``AnsibleUnsafe`` to support dumping unsafe values. Note that the TOML format has no functionality to mark that the data is unsafe for re-consumption. (https://github.com/ansible/ansible/issues/71307)
 - Terminal plugins - add "\e[m" to the list of ANSI sequences stripped from device output
@@ -471,9 +601,13 @@ Bugfixes
 - The ``flush()`` method of ``CachePluginAdjudicator`` now calls the plugin's ``flush()`` method instead of iterating over the keys that the adjudicator knows about and deleting those from the cache. (https://github.com/ansible/ansible/issues/68770)
 - The `ansible_become` value was not being treated as a boolean value when set in an INI format inventory file (fixes bug https://github.com/ansible/ansible/issues/70476).
 - The machine-readable changelog ``changelogs/changelog.yaml`` is now contained in the release.
+- Try to avoid kernel 'blocking' state on reading files while fact gathering.
 - Updated docs and added warning on max_fail_percentage and free strategy usage. fixes issue 16666.
 - VariableManager - Add the 'vars' key before getting delegated variables (https://github.com/ansible/ansible/issues/71092).
 - Vault - Allow single vault encrypted values to be used directly as module parameters. (https://github.com/ansible/ansible/issues/68275)
+- WorkerProcess - Implement workaround for stdout deadlock in multiprocessing shutdown to avoid process hangs.
+- WorkerProcess - Python 3.5 fix for workaround for stdout deadlock in multiprocessing shutdown to avoid process hangs. (https://github.com/ansible/ansible/issues/74149)
+- [set_fact] Corrected and expanded documentation as well as now raise errors that were previously ignored.
 - account for bug in Python 2.6 that occurs during interpreter shutdown to avoid stack trace
 - action plugins - change all action/module delegations to use FQ names while allowing overrides (https://github.com/ansible/ansible/issues/69788)
 - add AlmaLinux to fact gathering (https://github.com/ansible/ansible/pull/73458)
@@ -502,7 +636,9 @@ Bugfixes
 - ansible-galaxy collection download - fix downloading tar.gz files and collections in git repositories (https://github.com/ansible/ansible/issues/70429)
 - ansible-galaxy collection install - fix fallback mechanism if the AH server did not have the collection requested - https://github.com/ansible/ansible/issues/70940
 - ansible-galaxy download - fix bug when downloading a collection in a SCM subdirectory
+- ansible-pull - Run all playbooks that when multiple are supplied via the command line (https://github.com/ansible/ansible/issues/72708)
 - ansible-test - Add ``pytest < 6.0.0`` constraint for managed installations on Python 3.x to avoid issues with relative imports.
+- ansible-test - Add a ``six < 1.14.0`` constraint for Python 2.6.
 - ansible-test - Always connect additional Docker containers to the network used by the current container (if any).
 - ansible-test - Always map ``/var/run/docker.sock`` into test containers created by the ``--docker`` option if the docker host is not ``localhost``.
 - ansible-test - Attempt to detect the Docker hostname instead of assuming ``localhost``.
@@ -518,10 +654,12 @@ Bugfixes
 - ansible-test - Skip installing requirements if they are already installed.
 - ansible-test - Symbolic links are no longer used to inject ``python`` into the environment, since they do not work reliably in all cases. Instead, the existing Python based exec wrapper is always used.
 - ansible-test - Temporarily limit ``cryptography`` to versions before 3.4 to enable tests to function.
+- ansible-test - The ``--export`` option for ``ansible-test coverage`` is now limited to the ``combine`` command. It was previously available for reporting commands on which it had no effect.
 - ansible-test - The ``--raw`` option for ``ansible-test shell --remote`` now uses ``sh`` for the shell instead of ``bash``, which may not be present.
 - ansible-test - The ``--remote`` option has been updated for Python 2.7 to work around breaking changes in the newly released ``get-pip.py`` bootstrapper.
 - ansible-test - The ``--remote`` option has been updated to use a versioned ``get-pip.py`` bootstrapper to avoid issues with future releases.
 - ansible-test - The ``ansible-doc`` sanity test now works for ``netconf`` plugins.
+- ansible-test - The ``ansible-test coverage combine`` option ``--export`` now exports relative paths. This avoids loss of coverage data when aggregating across systems with different absolute paths. Paths will be converted back to absolute when generating reports.
 - ansible-test - The ``changelog`` sanity test has been updated to ensure ``rstcheck`` does not load the ``sphinx`` module.
 - ansible-test - The ``cs`` and ``openshift`` test plugins now search for containers on the current network instead of assuming the ``bridge`` network.
 - ansible-test - The ``resource_prefix`` variable provided to tests running on Azure Pipelines is now converted to lowercase to match other CI providers.
@@ -530,6 +668,8 @@ Bugfixes
 - ansible-test - ``cryptography`` is now limited to versions prior to 3.2 only when an incompatible OpenSSL version (earlier than 1.1.0) is detected
 - ansible-test - add constraint for ``cffi`` to prevent failure on systems with older versions of ``gcc`` (https://foss.heptapod.net/pypy/cffi/-/issues/480)
 - ansible-test - convert target paths to unicode on Python 2 to avoid ``UnicodeDecodeError`` (https://github.com/ansible/ansible/issues/68398, https://github.com/ansible/ansible/pull/72623).
+- ansible-test - ensure the correct unit test target is given when the ``__init__.py`` file is modified inside the connection plugins directory
+- ansible-test - ensure unit test paths for connection and inventory plugins are correctly identified for collections (https://github.com/ansible/ansible/issues/73876).
 - ansible-test - improve classification of changes to ``.gitignore``, ``COPYING``, ``LICENSE``, ``Makefile``, and all files ending with one of ``.in`, ``.md`, ``.rst``, ``.toml``, ``.txt`` in the collection root directory (https://github.com/ansible/ansible/pull/72353).
 - ansible-test - integration and unit test change detection now works for filter, lookup and test plugins
 - ansible-test now always uses the ``--python`` option for ``virtualenv`` to select the correct interpreter when creating environments with the ``--venv`` option
@@ -541,9 +681,11 @@ Bugfixes
 - ansible_pkg_mgr fact - now correctly returns ``atomic_container`` when run on "RHEL for Edge" images and Fedora/RHEL/CentOS Atomic Host (https://github.com/ansible/ansible/issues/73084).
 - api - time.clock is removed in Python 3.8, add backward compatible code (https://github.com/ansible/ansible/issues/70649).
 - apt - add ``fail_on_autoremove`` param to apt module to avoid unintended package removals (https://github.com/ansible/ansible/issues/63231)
+- apt - fix policy_rc_d parameter throwing an exception when restoring original file (https://github.com/ansible/ansible/issues/66211)
 - apt - include exception message from apt python library in error output
 - apt_key - Specifying ``file`` as mutually exclusive with ``data``, ``keyserver``, ``url`` (https://github.com/ansible/ansible/pull/70492).
 - apt_repository - fixes ``mode`` doc to remove ineffective default (https://github.com/ansible/ansible/pull/70319).
+- argument spec validation - fix behavior of ``apply_defaults=True`` when an empty dictionary is specified for such an option (https://github.com/ansible/ansible/pull/74029).
 - assemble - fix decrypt argument in the module (https://github.com/ansible/ansible/issues/65450).
 - async - Fix Python 3 interpreter parsing from module by comparing with bytes (https://github.com/ansible/ansible/issues/70690)
 - async_wrapper - Fix race condition when ``~/.ansible_async`` folder tries to be created by multiple async tasks at the same time - https://github.com/ansible/ansible/issues/59306
@@ -556,8 +698,11 @@ Bugfixes
 - clarified changed status to reflect existing rule that had never been written down.
 - collection loader - fix bogus code coverage entries for synthetic packages
 - collection metadata - ensure collection loader uses libyaml/CSafeLoader to parse collection metadata if available
+- connection/ssh, ensure parameters come from correct source get_option, so functionality matches docs.
+- connection/ssh, fix reset to use same parameters to check if socket exists as actually used, was hardcoded to default string construction previouslly.
 - cron - cron file should not be empty after adding var (https://github.com/ansible/ansible/pull/71207)
 - cron - encode and decode crontab files in UTF-8 explicitly to allow non-ascii chars in cron filepath and job (https://github.com/ansible/ansible/issues/69492)
+- debug action, prevent setting facts when displaying ansible_facts.
 - default callback - Ensure that the ``host_pinned`` strategy is not treated as lockstep (https://github.com/ansible/ansible/issues/73364)
 - delegate_to - Ensure that calculating ``delegate_to`` vars with a loop uses the correct context to correctly evaluate the loop (https://github.com/ansible/ansible/issues/37132)
 - display correct error information when an error exists in the last line of the file (https://github.com/ansible/ansible/issues/16456)
@@ -578,6 +723,7 @@ Bugfixes
 - file - the module should warn in check_mode when path an owner/group don't exist (https://github.com/ansible/ansible/issues/67307).
 - find module - Don't treat empty excludes as a match (https://github.com/ansible/ansible/issues/70640)
 - find module - Stop traversing directories past the requested depth. (https://github.com/ansible/ansible/issues/73627)
+- find module, fix default pattern when use_regex is true.
 - fix issue with inventory_hostname and delegated host vars mixing on connection settings.
 - fortimanager httpapi plugin - fix redirect to point to the ``fortinet.fortimanager`` collection (https://github.com/ansible/ansible/pull/71073).
 - galaxy - handle plus sign in user token appearing in role url (https://github.com/ansible/ansible/issues/45475).
@@ -595,15 +741,18 @@ Bugfixes
 - inventory plugins - Let plugins define the sanitization method for the constructed ``groups`` feature.
 - inventory_hostnames - Use ``InventoryManager`` instead of trying to replicate its behavior (https://github.com/ansible/ansible/issues/17268)
 - is_string/vault - Ensure the is_string helper properly identifies AnsibleVaultEncryptedUnicode as a string (https://github.com/ansible/ansible/pull/71609)
+- j2 plugin loader clarified comments, made note with better fqcn detection.
 - lineinfile - fix not subscriptable error in exception handling around file creation
 - linux network facts - get the correct value for broadcast address (https://github.com/ansible/ansible/issues/64384)
 - native jinja2 types - properly handle Undefined in nested data.
+- notify keyword is not ignored anymore on import_tasks, also able to apply to blocks now.
 - package - use list of built in package managers from facts rather than creating a new list
 - paramiko connection plugin - Ensure we only reset the connection when one has been previously established (https://github.com/ansible/ansible/issues/65812)
 - password hashing - Ensure we validate salts against allowed characters and length when using ``crypt`` (https://github.com/ansible/ansible/issues/71107)
 - password lookup - Try to automatically generate salts using known salt sizes (https://github.com/ansible/ansible/issues/53750)
 - pause - Fix indefinite hang when using a pause task on a background process (https://github.com/ansible/ansible/issues/32142)
 - pause - catch additional error on setting up curses (https://github.com/ansible/ansible/pull/73588).
+- pause - do not accept enter to continue when a timeout is set (https://github.com/ansible/ansible/issues/73948)
 - pause - do not warn when running in the background if a timeout is provided (https://github.com/ansible/ansible/issues/73042)
 - pause - handle exception when there is no stdout (https://github.com/ansible/ansible/pull/47851)
 - powershell - fix escaping of strings that broken modules like fetch when dealing with special chars - https://github.com/ansible/ansible/issues/62781
@@ -616,15 +765,19 @@ Bugfixes
 - remove contradictory recomendation from template docs. https://github.com/ansible/ansible/issues/63484
 - remove redundant remote_user setting in play_context for local as plugin already does it, also removes fork/thread issue from use of pwd library.
 - reset logging level to INFO due to CVE-2019-14846.
+- restrict module valid JSON parsed output to objects as lists are not valid responses.
 - runas - create a new token when running as ``SYSTEM`` to ensure it has the full privileges assigned to that account
 - service - Fix for the BSD rcconf code using a Python 2 specific string replace function
 - set_mode_if_different - handle symlink if it is inside a directory with sticky bit set (https://github.com/ansible/ansible/pull/45198)
+- setup module, fix error handling on bad subset given
+- setup, don't give up on all local facts gathering if one script file fails.
 - several fixes to make apt_key better at identifying needs for change and also to avoid changes in check_mode.
 - shell - fix quoting of mkdir command in creation of remote_tmp in order to allow spaces and other special characters (https://github.com/ansible/ansible/issues/69577).
 - splunk httpapi plugin - switch from splunk.enterprise_security to splunk.es in runtime.yml to reflect upstream change of Collection Name
 - ssh connection plugin - use ``get_option()`` rather than ``_play_context`` to ensure ``ANSBILE_SSH_ARGS`` are applied properly (https://github.com/ansible/ansible/issues/70437)
 - stat - handle colons in filename while parsing the mimetype output (https://github.com/ansible/ansible/issues/70256).
 - strftime filter - Input epoch is allowed to be a float (https://github.com/ansible/ansible/issues/71257)
+- su become plugin, ensure correct type for localization option.
 - systemd - account for templated unit files using ``@`` when searching for the unit file (https://github.com/ansible/ansible/pull/72347#issuecomment-730626228)
 - systemd - fixed chroot usage on new versions of systemd, that broke because of upstream changes in systemctl output
 - systemd - follow up fix to https://github.com/ansible/ansible/issues/72338 to use ``list-unit-files`` rather than ``list-units`` in order to show all units files on the system.
@@ -650,6 +803,7 @@ Bugfixes
 - vault - Support reading raw binary data from stdin under python3
 - virtual facts - kubevirt is now identified as "KubeVirt" and with a "guest" role instead of "kvm" and "host" role (https://github.com/ansible/ansible/issues/72001).
 - wait_for - catch and ignore errors when getting active connections with psutil (https://github.com/ansible/ansible/issues/72322)
+- wait_for module, move missing socket into function to get proper comparrison in time.
 - win setup - Fix redirection path for the windows setup module
 - windows async - use full path when calling PowerShell to reduce reliance on environment vars being correct - https://github.com/ansible/ansible/issues/70655
 - winrm - preserve winrm forensic data on put_file failures

changelogs/changelog.yaml

@@ -1,5 +1,32 @@
 ancestor: 2.10.0
 releases:
+  2.11.0:
+    changes:
+      bugfixes:
+      - ansible-test - ensure the correct unit test target is given when the ``__init__.py``
+        file is modified inside the connection plugins directory
+      major_changes:
+      - ansible-test - Tests run with the ``centos6`` and ``default`` test containers
+        now use a PyPI proxy container to access PyPI when Python 2.6 is used. This
+        allows tests running under Python 2.6 to continue functioning even though
+        PyPI is discontinuing support for non-SNI capable clients.
+      minor_changes:
+      - ansible-test - Update distribution test containers from version 2.0.1 to 2.0.2.
+      - ansible-test - Update the Ansible Core and Ansible Collection default test
+        containers to 3.2.0 and 3.2.2 respectively.
+      release_summary: '| Release Date: 2021-04-26
+
+        | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+        '
+    codename: Hey Hey, What Can I Do
+    fragments:
+    - ansible-test-connection-units-init.yml
+    - ansible-test-default-containers-3.2.yml
+    - ansible-test-distro-containers-2.0.2.yml
+    - ansible-test-pypi-test-container.yml
+    - v2.11.0_summary.yaml
+    release_date: '2021-04-26'
   2.11.0b1:
     changes:
       breaking_changes:
@@ -509,7 +536,7 @@ releases:
         ``COMMAND_WARNINGS`` configuration option is also deprecated and defaults
         to ``False``. These will be removed and their presence will become an error
         in 2.14.
-      - apt_key - the paramater ``key`` does not have any effect, has been deprecated
+      - apt_key - the parameter ``key`` does not have any effect, has been deprecated
         and will be removed in ansible-core version 2.14 (https://github.com/ansible/ansible/pull/70319).
       - psrp - Set the minimum version of ``pypsrp`` to ``0.4.0``.
       known_issues:
@@ -1586,3 +1613,434 @@ releases:
     - v2.11.0b4_summary.yaml
     - wait_for_fix.yml
     release_date: '2021-03-29'
+  2.11.0rc1:
+    changes:
+      bugfixes:
+      - OpenBSD module_utils - update sysctl variable name
+      - WorkerProcess - Implement workaround for stdout deadlock in multiprocessing
+        shutdown to avoid process hangs.
+      - ansible-test - Add a ``six < 1.14.0`` constraint for Python 2.6.
+      - ansible-test - The ``--export`` option for ``ansible-test coverage`` is now
+        limited to the ``combine`` command. It was previously available for reporting
+        commands on which it had no effect.
+      - ansible-test - The ``ansible-test coverage combine`` option ``--export`` now
+        exports relative paths. This avoids loss of coverage data when aggregating
+        across systems with different absolute paths. Paths will be converted back
+        to absolute when generating reports.
+      - debug action, prevent setting facts when displaying ansible_facts.
+      minor_changes:
+      - ansible-test - Add constraint for ``decorator`` for Python versions prior
+        to 3.5.
+      - service_facts - return service state information on OpenBSD.
+      release_summary: '| Release Date: 2021-04-05
+
+        | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+        '
+    codename: Hey Hey, What Can I Do
+    fragments:
+    - ansible-test-decorator-constraint.yml
+    - ansible-test-fix-coverage-export.yml
+    - ansible-test-six.yml
+    - debug_dont_set_facts.yml
+    - openbsd-service.yml
+    - openbsd-sysutil.yml
+    - v2.11.0rc1_summary.yaml
+    - workerprocess-stdout-deadlock.yml
+    release_date: '2021-04-05'
+  2.11.0rc2:
+    changes:
+      bugfixes:
+      - WorkerProcess - Python 3.5 fix for workaround for stdout deadlock in multiprocessing
+        shutdown to avoid process hangs. (https://github.com/ansible/ansible/issues/74149)
+      release_summary: '| Release Date: 2021-04-06
+
+        | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+        '
+    codename: Hey Hey, What Can I Do
+    fragments:
+    - fix-for-workerprocess-stdout-deadlock-fix.yml
+    - v2.11.0rc2_summary.yaml
+    release_date: '2021-04-06'
+  2.11.1:
+    changes:
+      release_summary: '| Release Date: 2021-05-24
+
+        | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+        '
+    codename: Hey Hey, What Can I Do
+    fragments:
+    - v2.11.1_summary.yaml
+    release_date: '2021-05-24'
+  2.11.1rc1:
+    changes:
+      bugfixes:
+      - Add RockyLinux to fact gathering (https://github.com/ansible/ansible/pull/74530).
+      - Improve resilience of ``ansible-galaxy collection`` by increasing the page
+        size to make fewer requests overall and retrying queries with a jittered exponential
+        backoff when rate limiting HTTP codes (520 and 429) occur. (https://github.com/ansible/ansible/issues/74191)
+      - Prevent ``ansible_failed_task`` from further templating (https://github.com/ansible/ansible/issues/74036)
+      - Remove 'default' from ssh plugin as we want to rely on default from ssh itself
+        or ssh/config.
+      - The error message about the failure to import a ``gpg`` key by the ``apt_key``
+        module was incorrect (https://github.com/ansible/ansible/issues/74423).
+      - ansible-test - Avoid publishing the port used by the ``pypi-test-container``
+        since it is only accessed by other containers. This avoids issues when trying
+        to run tests in parallel on a single host.
+      - ansible-test - Fix docker container IP address detection. The ``bridge`` network
+        is no longer assumed to be the default.
+      - ansible-test - Use documented API to retrieve build information from Azure
+        Pipelines.
+      - ansible.builtin.cron - Keep non-empty crontabs, when removing cron jobs (https://github.com/ansible/ansible/pull/74497).
+      - ansible.utils.encrypt now handles missing or unusable 'crypt' library.
+      - ansible_test - add constraint for ``MarkupSafe`` (https://github.com/ansible/ansible/pull/74666)
+      - apt_key - Binary GnuPG keys downloaded via URLs were corrupted so GnuPG could
+        not import them (https://github.com/ansible/ansible/issues/74424).
+      - become - fix a regression on Solaris where chmod can return 5 which we interpret
+        as auth failure and stop trying become tmpdir permission fallbacks
+      - become - work around setfacl not existing on modern Solaris (and possibly
+        failing on some filesystems even when it does exist)
+      - callback default, now uses task delegate_to instead of delegate vars to display
+        delegate to host
+      - callbacks, restores missing delegate_vars
+      - correct doc links for become on warnings over world readable settings.
+      - correctly use world readable setting since old constant is not 'settable'
+        anymore.
+      - facts - detect homebrew installed at /opt/homebrew/bin/brew
+      - filter plugins - patch new versions of Jinja2 to prevent warnings/errors on
+        renamed filter decorators (https://github.com/ansible/ansible/issues/74667)
+      - get_url - Fixed checksum validation for binary files (leading asterisk) in
+        checksum files (https://github.com/ansible/ansible/pull/74502).
+      - hostname - Add Rocky Linux support
+      - ini lookup - handle errors for duplicate keys and missing sections (https://github.com/ansible/ansible/issues/74601)
+      - interpreter discovery - Debian 8 and lower will avoid unsupported Python3
+        version in interpreter discovery
+      - pause - ensure control characters are always set to an appropriate value (https://github.com/ansible/ansible/issues/73264)
+      - playbook loaded from collection subdir now does not ignore subdirs.
+      - plugin config now allows list type options to have multiple valid choices
+        (#74225).
+      - replace - better handling of file operation exceptions (https://github.com/ansible/ansible/pull/74686).
+      - roles - allow for role arg specs in new meta file (https://github.com/ansible/ansible/issues/74525).
+      - service - compare version without LooseVersion API (https://github.com/ansible/ansible/issues/74488).
+      minor_changes:
+      - ansible adhoc, clarified the help to some options, also added some comments
+        to code.
+      - command - update the user warning message to point out command name (https://github.com/ansible/ansible/pull/74475).
+      release_summary: '| Release Date: 2021-05-17
+
+        | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+        '
+    codename: Hey Hey, What Can I Do
+    fragments:
+    - 73264-pause-emacs.yml
+    - 73887.mac-m1-homebrew.yaml
+    - 74036-unsafe-ansible_failed_task.yml
+    - 74240-ansible-galaxy-increase-pagesize-and-handle-throttling.yml
+    - 74474-apt_key-gpg-binary-import.yaml
+    - 74476-apt_key-gpg-inline-data.yaml
+    - 74488_solaris_looseversion.yml
+    - 74497-keep-non-empty-crontabs.yml
+    - 74502-get_url-filx-checksum-binary.yml
+    - 74582-role-argspec-new-file.yml
+    - 74601-ini-lookup-handle-errors.yml
+    - 74686-replace-handle-file-exc.yml
+    - adhoc_help_clarify.yml
+    - allow_lists_of_config_choices.yml
+    - ansible-test-azp-build-api.yml
+    - ansible-test-docker-network-detect.yml
+    - ansible-test-markupsafe-constraint.yml
+    - ansible-test-pypi-container-no-publish.yml
+    - cmd_wording.yml
+    - coll_pb_subdir_fixes.yml
+    - crypt_missing.yml
+    - debian8_discovery.yml
+    - jinja2_decorator_renames.yml
+    - macos-solaris-regression.yml
+    - missing_delegate_vars.yml
+    - solaris-setfacl-chmod-fallback.yml
+    - ssh_port_default_fix.yml
+    - support_rocky_linux_hostname.yml
+    - support_rockylinux.yml
+    - v2.11.1rc1_summary.yaml
+    - world_readable_fixes.yml
+    release_date: '2021-05-17'
+  2.11.2:
+    changes:
+      release_summary: '| Release Date: 2021-06-22
+
+        | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+        '
+    codename: Hey Hey, What Can I Do
+    fragments:
+    - v2.11.2_summary.yaml
+    release_date: '2021-06-22'
+  2.11.2rc1:
+    changes:
+      bugfixes:
+      - AnsibleModule.set_mode_if_different - don't check file existence when check_mode
+        is activated (https://github.com/ansible/ansible/issues/61185).
+      - Apply ``display_failed_stderr`` callback option on loop item results. (https://github.com/ansible/ansible/issues/74864)
+      - Avoid task executor from ending early as vars can come from delegated to host.
+      - ansible-pull - update documentation for ``--directory`` option to clarify
+        path must be absolute.
+      - config, ensure 'quoted' lists from ini or env do not take the quotes literally
+        as part of the list item.
+      - gather_facts, package, service - fix using module_defaults for the modules
+        in addition to the action plugins. (https://github.com/ansible/ansible/issues/72918)
+      - psrp - Always cleanup the last run pipeline if a second pipeline is invoked
+        to avoid violating any resource limits.
+      - psrp - Fix error when resetting a connection that was initialised but not
+        connected - (https://github.com/ansible/ansible/issues/74092).
+      - psrp - Try to clean up any server-side resources when resetting a connection.
+      - roles - make sure argspec validation task is tagged with ``always`` (https://github.com/ansible/ansible/pull/74994).
+      - slurp - Fix error messages for unreadable files and directories (https://github.com/ansible/ansible/issues/67340).
+      - slurp - handle error when ``path`` is a directory and not a file (https://github.com/ansible/ansible/pull/74930).
+      - ssh connection - fix interaction between transfer settings options.
+      - subversion - fix stack trace when getting information about the repository
+        (https://github.com/ansible/ansible/issues/36498)
+      - version test - improve error message when an empty version is provided
+      release_summary: '| Release Date: 2021-06-14
+
+        | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+        '
+      security_fixes:
+      - templating engine fix for not preserving usnafe status when trying to preserve
+        newlines. CVE-2021-3583
+    codename: Hey Hey, What Can I Do
+    fragments:
+    - 36498-subversion-fix-info-parsing.yml
+    - 61185-basic.py-fix-check_mode.yaml
+    - 67340-slurp_error_message.yml
+    - 73864-action-plugin-module-defaults.yml
+    - 74864-display_failed_stderr-per-item.yml
+    - ansible-pull-doc-update.yml
+    - config_lists_unquote.yml
+    - delegate_te_fix.yml
+    - fix_scp_ssh_settings.yml
+    - fix_unsafe_newline.yml
+    - psrp-cleanup.yml
+    - psrp-reset.yml
+    - role_argspec_tagged_always.yml
+    - slurp-handle-error-with-dir.yml
+    - v2.11.2rc1_summary.yaml
+    - version_compare-error-on-empty.yml
+    release_date: '2021-06-14'
+  2.11.3:
+    changes:
+      release_summary: '| Release Date: 2021-07-19
+
+        | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+        '
+    codename: Hey Hey, What Can I Do
+    fragments:
+    - v2.11.3_summary.yaml
+    release_date: '2021-07-19'
+  2.11.3rc1:
+    changes:
+      bugfixes:
+      - Add unicode support to ``ansible-inventory`` CLI (https://github.com/ansible/ansible/issues/57378)
+      - Ensure we get full path for extra vars into cliargs to avoid realpath issues
+        after initial load.
+      - ansible-doc - in text output, do not show empty ``version_added_collection``
+        values (https://github.com/ansible/ansible/pull/74999).
+      - ansible-test - restrict ``packaging`` to ``< 21.0`` for Python ``< 3.6`` (https://github.com/ansible/ansible/pull/75186).
+      - command - remove unreachable code path when trying to convert the value for
+        ``chdir`` to bytes (https://github.com/ansible/ansible/pull/75036)
+      - module_common - handle exception when multiple workers try to create the cache
+        directory
+      - roles - make sure argspec validation task templates suboptions (https://github.com/ansible/ansible/issues/75070).
+      - slurp - improve the logic in the error handling and remove ``os.stat()`` call
+        (https://github.com/ansible/ansible/pull/75038)
+      - ssh_connection - rename ``retries`` to ``reconnection_retries`` to avoid conflicts
+        with task vars (https://github.com/ansible/ansible/issues/75142).
+      - ssh_connection - set the default for ``reconnection_retries`` back to ``0``
+        (https://github.com/ansible/ansible/issues/75142).
+      - task_executor/ssh_connection - use the ``retries`` value from ``ssh_connection``
+        settings, not the default from the ``Task`` field attributes (https://github.com/ansible/ansible/issues/75142).
+      minor_changes:
+      - ansible-test - aws creates and exposes a new tiny_prefix variable to provide
+        a shorter prefix for the AWS tests.
+      release_summary: '| Release Date: 2021-07-13
+
+        | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+        '
+    codename: Hey Hey, What Can I Do
+    fragments:
+    - 57378-inventory-cli-unicode.yml
+    - 74999-ansible-doc-version_added_collection.yml
+    - 75073-role-argspec-suboption-variables.yaml
+    - 75142-ssh-retries-collision.yml
+    - 75186-ansible-test-packaging-constraint.yml
+    - aws_tiny_prefix.yaml
+    - command-remove-unreachable-code.yml
+    - concurrency-cache-dir-collision.yml
+    - extra_vars_unfrack.yml
+    - slurp-improve-error-handling-readability.yml
+    - v2.11.3rc1_summary.yaml
+    release_date: '2021-07-13'
+  2.11.4:
+    changes:
+      release_summary: '| Release Date: 2021-08-16
+
+        | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+        '
+    codename: Hey Hey, What Can I Do
+    fragments:
+    - v2.11.4_summary.yaml
+    release_date: '2021-08-16'
+  2.11.4rc1:
+    changes:
+      bugfixes:
+      - Fix ``when`` evaluation on Native Jinja and Python 3.10.
+      - Jinja2 globals should be accessible even when importing a template without
+        the context (https://github.com/ansible/ansible/issues/75371)
+      - ansible-test - add packaging python module to ``ansible-doc`` sanity test
+        requirements.
+      - ansible-test validate-modules - correctly validate positional parameters to
+        ``AnsibleModules`` (https://github.com/ansible/ansible/pull/75332).
+      - cli defaults for ssh args set to None as '' was bypassing normal default.
+      - dnf module - Use all components of a package name to determine if it's installed
+        (https://github.com/ansible/ansible/issues/75311).
+      - do not trigger interpreter discovery in the forced_local module path as they
+        should use the ansible playbook python unless otherwise configured.
+      - find action, correctly convert path to text when warning about skiping.
+      - remote tmpdir permissions - fix type error in macOS chmod ACL fallback (https://github.com/ansible/ansible/pull/74613).
+      - template - ensure Jinja2 overrides from template header are used (https://github.com/ansible/ansible/issues/75275)
+      - unarchive - move failure for missing binary to ``can_handle_archive()`` rather
+        than ``__init__()``
+      release_summary: '| Release Date: 2021-08-10
+
+        | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+        '
+    codename: Hey Hey, What Can I Do
+    fragments:
+    - 74613-actionfixup_perms2_macos_remote_paths_ensure_list.yml
+    - 75275-ensure-jinja2-header-overrides-used.yml
+    - 75332-ansible-test-validate-modules-AnsibleModule-args.yml
+    - 75356-add-requirement-to-ansible-test.yml
+    - 75371-import_template_globals.yml
+    - find_error_fix.yml
+    - fix-dnf-filtering-for-installed-package-name.yml
+    - fix_cli_ssh_defaults.yml
+    - skip_local_discovery.yml
+    - unarchive-fix-bin-checking.yml
+    - v2.11.4rc1_summary.yaml
+    - when-eval-native-py310.yml
+    release_date: '2021-08-10'
+  2.11.5:
+    changes:
+      release_summary: '| Release Date: 2021-09-13
+
+        | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+        '
+    codename: Hey Hey, What Can I Do
+    fragments:
+    - v2.11.5_summary.yaml
+    release_date: '2021-09-13'
+  2.11.5rc1:
+    changes:
+      bugfixes:
+      - Fix templating task action with host-specific vars (https://github.com/ansible/ansible/issues/75568)
+      - Since ansible/2.11 doc site was removed, the current relative messages point
+        to a 404 url, this fixes it by chainging the target to ansible-core/2.11
+      - ansible-galaxy - Fix a bug with build_ignore when installing collections from
+        source (https://github.com/ansible/ansible/issues/75528).
+      - ansible-galaxy - Improve error message from dependency resolution when a candidate
+        has inconsistent requirements (https://github.com/ansible/ansible/issues/75139).
+      - ansible-playbook, more robust handling of --list-hosts and undefined vars
+        in hosts keyword.
+      - command module, clarify order of remove/creates checks.
+      - command module, correctly handles chdir to symlinks.
+      - command module, move to standarized messages in 'msg' vs abusing 'stdout'.
+      - command module, now all options work in ad-hoc execution.
+      - command module, now always returns what we documented as 'returns always'.
+      - get_bin_path, clarify with quotes what the missing required executable is.
+      - make previous versions compatible we new attributres w/o implementing them.
+      - paramiko_ssh - mark connection as connected when ``_connect()`` is called
+        (https://github.com/ansible/ansible/issues/74081)
+      - setup module should now not truncate hpux interface names.
+      - validate_argument_spec, correct variable precedence and merge method and add
+        missing examples
+      - variable manager, avoid sourcing delegated variables when no inventory hostname
+        is present. This affects scenarios like syntax check and imports.
+      release_summary: '| Release Date: 2021-09-08
+
+        | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+        '
+    codename: Hey Hey, What Can I Do
+    fragments:
+    - 74081-paramiko-mark-connected.yml
+    - 75235-ansible-galaxy-inconsistent-candidate-error.yml
+    - 75547-fix-installing-collections-from-source.yaml
+    - 75568-fix-templating-task-action-host-specific-vars.yml
+    - attributes_compat.yml
+    - clarify_missing_exe.yml
+    - command_deliver_promisses.yml
+    - fix_host_list.yml
+    - fix_relative_msg_urls.yml
+    - fix_syntax_check.yml
+    - hpux_iface_facts_length.yml
+    - v2.11.5rc1_summary.yaml
+    - vas_fixes.yml
+    release_date: '2021-09-08'
+  2.11.6:
+    changes:
+      bugfixes:
+      - ansible-test pslint - Fix error when encountering validation results that
+        are highly nested - https://github.com/ansible/ansible/issues/74151
+      release_summary: '| Release Date: 2021-10-11
+
+        | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+        '
+    codename: Hey Hey, What Can I Do
+    fragments:
+    - pslint-sanity-warning.yml
+    - v2.11.6_summary.yaml
+    release_date: '2021-10-11'
+  2.11.6rc1:
+    changes:
+      bugfixes:
+      - PowerShell - Ignore the ``LIB`` environment variable when compiling C# Ansible
+        code
+      - ansible-galaxy - Fix handling HTTP exceptions from Galaxy servers. Continue
+        to the next server in the list until the collection is found.
+      - config - use ``callbacks_enabled`` instead ``callback_enabled`` in a deprecated
+        message (https://github.com/ansible/ansible/issues/70028).
+      - netconf - catch and handle exception to prevent stack trace when running in
+        FIPS mode
+      - roles - fix unexpected ``AttributeError`` when an empty ``argument_specs.yml``
+        is present (https://github.com/ansible/ansible/pull/75604).
+      minor_changes:
+      - ansible-galaxy - Non-HTTP exceptions from Galaxy servers are now a warning
+        and only fatal if the collection to download|install|verify is not available
+        from any of the servers (https://github.com/ansible/ansible/issues/75443).
+      release_summary: '| Release Date: 2021-10-04
+
+        | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+        '
+      security_fixes:
+      - Do not include params in exception when a call to ``set_options`` fails. Additionally,
+        block the exception that is returned from being displayed to stdout. (CVE-2021-3620)
+    codename: Hey Hey, What Can I Do
+    fragments:
+    - 70028-config-small-typo-fix.yml
+    - 75468_fix_galaxy_server_fallback.yaml
+    - 75604-empty-argument-specs.yml
+    - avoid-set_options-leak.yaml
+    - fips-ncclient-import-error.yaml
+    - powershell-addtype-env-vars.yml
+    - v2.11.6rc1_summary.yaml
+    release_date: '2021-10-04'

changelogs/fragments/36498-subversion-fix-info-parsing.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - subversion - fix stack trace when getting information about the repository (https://github.com/ansible/ansible/issues/36498)

changelogs/fragments/57378-inventory-cli-unicode.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - Add unicode support to ``ansible-inventory`` CLI (https://github.com/ansible/ansible/issues/57378)

changelogs/fragments/61185-basic.py-fix-check_mode.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+- AnsibleModule.set_mode_if_different - don't check file existence when check_mode is activated (https://github.com/ansible/ansible/issues/61185).

changelogs/fragments/67340-slurp_error_message.yml

@@ -0,0 +1,2 @@
+bugfixes:
+- "slurp - Fix error messages for unreadable files and directories (https://github.com/ansible/ansible/issues/67340)."

changelogs/fragments/70028-config-small-typo-fix.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - config - use ``callbacks_enabled`` instead ``callback_enabled`` in a deprecated message (https://github.com/ansible/ansible/issues/70028).

changelogs/fragments/70319-reduce-ignored-module-sanity-tests.yml

@@ -1,4 +1,4 @@
 bugfixes:
   - apt_repository - fixes ``mode`` doc to remove ineffective default (https://github.com/ansible/ansible/pull/70319).
 deprecated_features:
-  - apt_key - the paramater ``key`` does not have any effect, has been deprecated and will be removed in ansible-core version 2.14 (https://github.com/ansible/ansible/pull/70319).
+  - apt_key - the parameter ``key`` does not have any effect, has been deprecated and will be removed in ansible-core version 2.14 (https://github.com/ansible/ansible/pull/70319).

changelogs/fragments/73264-pause-emacs.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - pause - ensure control characters are always set to an appropriate value (https://github.com/ansible/ansible/issues/73264)

changelogs/fragments/73864-action-plugin-module-defaults.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - gather_facts, package, service - fix using module_defaults for the modules in addition to the action plugins. (https://github.com/ansible/ansible/issues/72918)

changelogs/fragments/73887.mac-m1-homebrew.yaml

@@ -0,0 +1,3 @@
+---
+bugfixes:
+  - facts - detect homebrew installed at /opt/homebrew/bin/brew

changelogs/fragments/74036-unsafe-ansible_failed_task.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - Prevent ``ansible_failed_task`` from further templating (https://github.com/ansible/ansible/issues/74036)

changelogs/fragments/74081-paramiko-mark-connected.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - paramiko_ssh - mark connection as connected when ``_connect()`` is called (https://github.com/ansible/ansible/issues/74081)

changelogs/fragments/74240-ansible-galaxy-increase-pagesize-and-handle-throttling.yml

@@ -0,0 +1,6 @@
+bugfixes:
+- >-
+  Improve resilience of ``ansible-galaxy collection`` by increasing the page
+  size to make fewer requests overall and retrying queries with a jittered
+  exponential backoff when rate limiting HTTP codes (520 and 429) occur.
+  (https://github.com/ansible/ansible/issues/74191)

changelogs/fragments/74474-apt_key-gpg-binary-import.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+  - apt_key - Binary GnuPG keys downloaded via URLs were corrupted so GnuPG could not import them (https://github.com/ansible/ansible/issues/74424).

changelogs/fragments/74476-apt_key-gpg-inline-data.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+  - The error message about the failure to import a ``gpg`` key by the ``apt_key`` module was incorrect (https://github.com/ansible/ansible/issues/74423).

changelogs/fragments/74488_solaris_looseversion.yml

@@ -0,0 +1,2 @@
+bugfixes:
+- service - compare version without LooseVersion API (https://github.com/ansible/ansible/issues/74488).

changelogs/fragments/74497-keep-non-empty-crontabs.yml

@@ -0,0 +1,3 @@
+bugfixes:
+  - ansible.builtin.cron - Keep non-empty crontabs, when removing cron jobs
+    (https://github.com/ansible/ansible/pull/74497).

changelogs/fragments/74502-get_url-filx-checksum-binary.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - get_url - Fixed checksum validation for binary files (leading asterisk) in checksum files (https://github.com/ansible/ansible/pull/74502).

changelogs/fragments/74582-role-argspec-new-file.yml

@@ -0,0 +1,2 @@
+bugfixes:
+    - roles - allow for role arg specs in new meta file (https://github.com/ansible/ansible/issues/74525).

changelogs/fragments/74601-ini-lookup-handle-errors.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - ini lookup - handle errors for duplicate keys and missing sections (https://github.com/ansible/ansible/issues/74601)

changelogs/fragments/74613-actionfixup_perms2_macos_remote_paths_ensure_list.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - "remote tmpdir permissions - fix type error in macOS chmod ACL fallback (https://github.com/ansible/ansible/pull/74613)."

changelogs/fragments/74686-replace-handle-file-exc.yml

@@ -0,0 +1,2 @@
+bugfixes:
+    - replace - better handling of file operation exceptions (https://github.com/ansible/ansible/pull/74686).

changelogs/fragments/74864-display_failed_stderr-per-item.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - Apply ``display_failed_stderr`` callback option on loop item results. (https://github.com/ansible/ansible/issues/74864)

changelogs/fragments/74999-ansible-doc-version_added_collection.yml

@@ -0,0 +1,2 @@
+bugfixes:
+- "ansible-doc - in text output, do not show empty ``version_added_collection`` values (https://github.com/ansible/ansible/pull/74999)."

changelogs/fragments/75073-role-argspec-suboption-variables.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+  - roles - make sure argspec validation task templates suboptions (https://github.com/ansible/ansible/issues/75070).

changelogs/fragments/75142-ssh-retries-collision.yml

@@ -0,0 +1,7 @@
+bugfixes:
+  - >-
+    task_executor/ssh_connection - use the ``retries`` value from ``ssh_connection`` settings,
+    not the default from the ``Task`` field attributes (https://github.com/ansible/ansible/issues/75142).
+
+  - ssh_connection - set the default for ``reconnection_retries`` back to ``0`` (https://github.com/ansible/ansible/issues/75142).
+  - ssh_connection - rename ``retries`` to ``reconnection_retries`` to avoid conflicts with task vars (https://github.com/ansible/ansible/issues/75142).

changelogs/fragments/75186-ansible-test-packaging-constraint.yml

@@ -0,0 +1,2 @@
+bugfixes:
+- "ansible-test - restrict ``packaging`` to ``< 21.0`` for Python ``< 3.6`` (https://github.com/ansible/ansible/pull/75186)."

changelogs/fragments/75235-ansible-galaxy-inconsistent-candidate-error.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - ansible-galaxy - Improve error message from dependency resolution when a candidate has inconsistent requirements (https://github.com/ansible/ansible/issues/75139).

changelogs/fragments/75275-ensure-jinja2-header-overrides-used.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - template - ensure Jinja2 overrides from template header are used (https://github.com/ansible/ansible/issues/75275)

changelogs/fragments/75332-ansible-test-validate-modules-AnsibleModule-args.yml

@@ -0,0 +1,2 @@
+bugfixes:
+- "ansible-test validate-modules - correctly validate positional parameters to ``AnsibleModules`` (https://github.com/ansible/ansible/pull/75332)."

changelogs/fragments/75356-add-requirement-to-ansible-test.yml

@@ -0,0 +1,2 @@
+bugfixes:
+- ansible-test - add packaging python module to ``ansible-doc`` sanity test requirements.

changelogs/fragments/75371-import_template_globals.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - Jinja2 globals should be accessible even when importing a template without the context (https://github.com/ansible/ansible/issues/75371)

changelogs/fragments/75468_fix_galaxy_server_fallback.yaml

@@ -0,0 +1,9 @@
+bugfixes:
+  - >-
+    ansible-galaxy - Fix handling HTTP exceptions from Galaxy servers.
+    Continue to the next server in the list until the collection is found.
+minor_changes:
+  - >-
+    ansible-galaxy - Non-HTTP exceptions from Galaxy servers are now a warning and only fatal if
+    the collection to download|install|verify is not available from any of the servers
+    (https://github.com/ansible/ansible/issues/75443).

changelogs/fragments/75547-fix-installing-collections-from-source.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+  - ansible-galaxy - Fix a bug with build_ignore when installing collections from source (https://github.com/ansible/ansible/issues/75528).

changelogs/fragments/75568-fix-templating-task-action-host-specific-vars.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - Fix templating task action with host-specific vars (https://github.com/ansible/ansible/issues/75568)

changelogs/fragments/75604-empty-argument-specs.yml

@@ -0,0 +1,3 @@
+---
+bugfixes:
+  - roles - fix unexpected ``AttributeError`` when an empty ``argument_specs.yml`` is present (https://github.com/ansible/ansible/pull/75604).

changelogs/fragments/adhoc_help_clarify.yml

@@ -0,0 +1,2 @@
+minor_changes:
+  - ansible adhoc, clarified the help to some options, also added some comments to code.

changelogs/fragments/allow_lists_of_config_choices.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - plugin config now allows list type options to have multiple valid choices (#74225).

changelogs/fragments/ansible-pull-doc-update.yml

@@ -0,0 +1,2 @@
+bugfixes:
+    - ansible-pull - update documentation for ``--directory`` option to clarify path must be absolute.

changelogs/fragments/ansible-test-azp-build-api.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - ansible-test - Use documented API to retrieve build information from Azure Pipelines.

changelogs/fragments/ansible-test-connection-units-init.yml

@@ -0,0 +1,4 @@
+bugfixes:
+  - >-
+    ansible-test - ensure the correct unit test target is given when the
+    ``__init__.py`` file is modified inside the connection plugins directory

changelogs/fragments/ansible-test-decorator-constraint.yml

@@ -0,0 +1,2 @@
+minor_changes:
+    - ansible-test - Add constraint for ``decorator`` for Python versions prior to 3.5.

changelogs/fragments/ansible-test-default-containers-3.2.yml

@@ -0,0 +1,2 @@
+minor_changes:
+    - ansible-test - Update the Ansible Core and Ansible Collection default test containers to 3.2.0 and 3.2.2 respectively.

changelogs/fragments/ansible-test-distro-containers-2.0.2.yml

@@ -0,0 +1,2 @@
+minor_changes:
+    - ansible-test - Update distribution test containers from version 2.0.1 to 2.0.2.

changelogs/fragments/ansible-test-docker-network-detect.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - ansible-test - Fix docker container IP address detection. The ``bridge`` network is no longer assumed to be the default.

changelogs/fragments/ansible-test-markupsafe-constraint.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - ansible_test - add constraint for ``MarkupSafe`` (https://github.com/ansible/ansible/pull/74666)

changelogs/fragments/ansible-test-pypi-container-no-publish.yml

@@ -0,0 +1,3 @@
+bugfixes:
+  - ansible-test - Avoid publishing the port used by the ``pypi-test-container`` since it is only accessed by other containers.
+                   This avoids issues when trying to run tests in parallel on a single host.

changelogs/fragments/ansible-test-pypi-test-container.yml

@@ -0,0 +1,3 @@
+major_changes:
+  - ansible-test - Tests run with the ``centos6`` and ``default`` test containers now use a PyPI proxy container to access PyPI when Python 2.6 is used.
+                   This allows tests running under Python 2.6 to continue functioning even though PyPI is discontinuing support for non-SNI capable clients.

changelogs/fragments/attributes_compat.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - make previous versions compatible we new attributres w/o implementing them.

changelogs/fragments/avoid-set_options-leak.yaml

@@ -0,0 +1,5 @@
+---
+security_fixes:
+  - Do not include params in exception when a call to ``set_options`` fails.
+    Additionally, block the exception that is returned from being displayed to stdout.
+    (CVE-2021-3620)

changelogs/fragments/aws_tiny_prefix.yaml

@@ -0,0 +1,3 @@
+---
+minor_changes:
+- ansible-test - aws creates and exposes a new tiny_prefix variable to provide a shorter prefix for the AWS tests. 

changelogs/fragments/clarify_missing_exe.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - get_bin_path, clarify with quotes what the missing required executable is.

changelogs/fragments/cmd_wording.yml

@@ -0,0 +1,2 @@
+minor_changes:
+- command - update the user warning message to point out command name (https://github.com/ansible/ansible/pull/74475).

changelogs/fragments/coll_pb_subdir_fixes.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - playbook loaded from collection subdir now does not ignore subdirs.

changelogs/fragments/command-remove-unreachable-code.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - command - remove unreachable code path when trying to convert the value for ``chdir`` to bytes (https://github.com/ansible/ansible/pull/75036)

changelogs/fragments/command_deliver_promisses.yml

@@ -0,0 +1,6 @@
+bugfixes:
+  - command module, now always returns what we documented as 'returns always'.
+  - command module, now all options work in ad-hoc execution.
+  - command module, clarify order of remove/creates checks.
+  - command module, correctly handles chdir to symlinks.
+  - command module, move to standarized messages in 'msg' vs abusing 'stdout'.

changelogs/fragments/concurrency-cache-dir-collision.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - module_common - handle exception when multiple workers try to create the cache directory

changelogs/fragments/config_lists_unquote.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - config, ensure 'quoted' lists from ini or env do not take the quotes literally as part of the list item.

changelogs/fragments/crypt_missing.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - ansible.utils.encrypt now handles missing or unusable 'crypt' library.

changelogs/fragments/debian8_discovery.yml

@@ -0,0 +1,2 @@
+bugfixes:
+- interpreter discovery - Debian 8 and lower will avoid unsupported Python3 version in interpreter discovery

changelogs/fragments/delegate_te_fix.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - Avoid task executor from ending early as vars can come from delegated to host.

changelogs/fragments/extra_vars_unfrack.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - Ensure we get full path for extra vars into cliargs to avoid realpath issues after initial load.

changelogs/fragments/find_error_fix.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - find action, correctly convert path to text when warning about skiping.

changelogs/fragments/fips-ncclient-import-error.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+  - netconf - catch and handle exception to prevent stack trace when running in FIPS mode

changelogs/fragments/fix-dnf-filtering-for-installed-package-name.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - dnf module - Use all components of a package name to determine if it's installed (https://github.com/ansible/ansible/issues/75311).

changelogs/fragments/fix-for-workerprocess-stdout-deadlock-fix.yml

@@ -0,0 +1,2 @@
+bugfixes:
+ - "WorkerProcess - Python 3.5 fix for workaround for stdout deadlock in multiprocessing shutdown to avoid process hangs. (https://github.com/ansible/ansible/issues/74149)"

changelogs/fragments/fix_cli_ssh_defaults.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - cli defaults for ssh args set to None as '' was bypassing normal default.

changelogs/fragments/fix_host_list.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - ansible-playbook, more robust handling of --list-hosts and undefined vars in hosts keyword.

changelogs/fragments/fix_relative_msg_urls.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - Since ansible/2.11 doc site was removed, the current relative messages point to a 404 url, this fixes it by chainging the target to ansible-core/2.11

changelogs/fragments/fix_scp_ssh_settings.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - ssh connection - fix interaction between transfer settings options.

changelogs/fragments/fix_syntax_check.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - variable manager, avoid sourcing delegated variables when no inventory hostname is present. This affects scenarios like syntax check and imports.

changelogs/fragments/fix_unsafe_newline.yml

@@ -0,0 +1,2 @@
+security_fixes:
+  - templating engine fix for not preserving usnafe status when trying to preserve newlines. CVE-2021-3583

changelogs/fragments/hpux_iface_facts_length.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - setup module should now not truncate hpux interface names.

changelogs/fragments/jinja2_decorator_renames.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - filter plugins - patch new versions of Jinja2 to prevent warnings/errors on renamed filter decorators (https://github.com/ansible/ansible/issues/74667)

changelogs/fragments/macos-solaris-regression.yml

@@ -0,0 +1,4 @@
+bugfixes:
+  - >-
+    become - fix a regression on Solaris where chmod can return 5 which we
+    interpret as auth failure and stop trying become tmpdir permission fallbacks

changelogs/fragments/missing_delegate_vars.yml

@@ -0,0 +1,3 @@
+bugfixes:
+  - callbacks, restores missing delegate_vars
+  - callback default, now uses task delegate_to instead of delegate vars to display delegate to host

changelogs/fragments/powershell-addtype-env-vars.yml

@@ -0,0 +1,2 @@
+bugfixes:
+- PowerShell - Ignore the ``LIB`` environment variable when compiling C# Ansible code

changelogs/fragments/pslint-sanity-warning.yml

@@ -0,0 +1,2 @@
+bugfixes:
+- ansible-test pslint - Fix error when encountering validation results that are highly nested - https://github.com/ansible/ansible/issues/74151

changelogs/fragments/psrp-cleanup.yml

@@ -0,0 +1,2 @@
+bugfixes:
+- psrp - Always cleanup the last run pipeline if a second pipeline is invoked to avoid violating any resource limits.

changelogs/fragments/psrp-reset.yml

@@ -0,0 +1,3 @@
+bugfixes:
+- psrp - Fix error when resetting a connection that was initialised but not connected - (https://github.com/ansible/ansible/issues/74092).
+- psrp - Try to clean up any server-side resources when resetting a connection.

changelogs/fragments/role_argspec_tagged_always.yml

@@ -0,0 +1,2 @@
+bugfixes:
+    - roles - make sure argspec validation task is tagged with ``always`` (https://github.com/ansible/ansible/pull/74994).

changelogs/fragments/skip_local_discovery.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - do not trigger interpreter discovery in the forced_local module path as they should use the ansible playbook python unless otherwise configured.

changelogs/fragments/slurp-handle-error-with-dir.yml

@@ -0,0 +1,2 @@
+bugfixes:
+- slurp - handle error when ``path`` is a directory and not a file (https://github.com/ansible/ansible/pull/74930).

changelogs/fragments/slurp-improve-error-handling-readability.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - slurp - improve the logic in the error handling and remove ``os.stat()`` call (https://github.com/ansible/ansible/pull/75038)

changelogs/fragments/solaris-setfacl-chmod-fallback.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - become - work around setfacl not existing on modern Solaris (and possibly failing on some filesystems even when it does exist)

changelogs/fragments/ssh_port_default_fix.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - Remove 'default' from ssh plugin as we want to rely on default from ssh itself or ssh/config.

changelogs/fragments/support_rocky_linux_hostname.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - hostname - Add Rocky Linux support

changelogs/fragments/support_rockylinux.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - Add RockyLinux to fact gathering (https://github.com/ansible/ansible/pull/74530).

changelogs/fragments/unarchive-fix-bin-checking.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - unarchive - move failure for missing binary to ``can_handle_archive()`` rather than ``__init__()``

changelogs/fragments/v2.11.0_summary.yaml

@@ -0,0 +1,3 @@
+release_summary: |
+   | Release Date: 2021-04-26
+   | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__

changelogs/fragments/v2.11.0rc1_summary.yaml

@@ -0,0 +1,3 @@
+release_summary: |
+   | Release Date: 2021-04-05
+   | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__

changelogs/fragments/v2.11.0rc2_summary.yaml

@@ -0,0 +1,3 @@
+release_summary: |
+   | Release Date: 2021-04-06
+   | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__

changelogs/fragments/v2.11.1_summary.yaml

@@ -0,0 +1,3 @@
+release_summary: |
+   | Release Date: 2021-05-24
+   | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__

changelogs/fragments/v2.11.1rc1_summary.yaml

@@ -0,0 +1,3 @@
+release_summary: |
+   | Release Date: 2021-05-17
+   | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__

changelogs/fragments/v2.11.2_summary.yaml

@@ -0,0 +1,3 @@
+release_summary: |
+   | Release Date: 2021-06-22
+   | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__