EOL 2.11 docs (#79355)

The ansible-core 2.11 release has reached EOL with the release of ansible-core 2.14.

.azure-pipelines/azure-pipelines.yml

@@ -12,20 +12,13 @@ pr:
       - devel
       - stable-*
 
-schedules:
-  - cron: 0 7 * * *
-    displayName: Nightly
-    always: true
-    branches:
-      include:
-        - devel
-        - stable-*
-
 variables:
   - name: checkoutPath
     value: ansible
   - name: coverageBranches
     value: devel
+  - name: pipelinesCoverage
+    value: coverage
   - name: entryPoint
     value: test/utils/shippable/shippable.sh
   - name: fetchDepth
@@ -60,13 +53,13 @@ stages:
           nameFormat: Python {0}
           testFormat: units/{0}
           targets:
+            - test: 2.6
             - test: 2.7
             - test: 3.5
             - test: 3.6
             - test: 3.7
             - test: 3.8
             - test: 3.9
-            - test: '3.10'
   - stage: Windows
     dependsOn: []
     jobs:
@@ -79,50 +72,28 @@ stages:
             - test: 2012-R2
             - test: 2016
             - test: 2019
-            - test: 2022
   - stage: Remote
     dependsOn: []
     jobs:
       - template: templates/matrix.yml
         parameters:
           targets:
-            - name: macOS 12.0
-              test: macos/12.0
+            - name: macOS 11.1
+              test: macos/11.1
             - name: RHEL 7.9
               test: rhel/7.9
-            - name: RHEL 8.5 py36
-              test: rhel/8.5@3.6
-            - name: RHEL 8.5 py38
-              test: rhel/8.5@3.8
-            - name: RHEL 9.0
-              test: rhel/9.0
-            - name: FreeBSD 12.3
-              test: freebsd/12.3
-            - name: FreeBSD 13.0
-              test: freebsd/13.0
+            - name: RHEL 8.3 py36
+              test: rhel/8.3@3.6
+            - name: RHEL 8.3 py38
+              test: rhel/8.3@3.8
+            - name: FreeBSD 12.2
+              test: freebsd/12.2
           groups:
             - 1
             - 2
             - 3
             - 4
             - 5
-      - template: templates/matrix.yml  # context/controller (ansible-test container management)
-        parameters:
-          targets:
-            - name: Alpine 3.16
-              test: alpine/3.16
-            - name: Fedora 36
-              test: fedora/36
-            - name: RHEL 8.5
-              test: rhel/8.5
-            - name: RHEL 9.0
-              test: rhel/9.0
-            - name: Ubuntu 20.04
-              test: ubuntu/20.04
-            - name: Ubuntu 22.04
-              test: ubuntu/22.04
-          groups:
-            - 6
   - stage: Docker
     dependsOn: []
     jobs:
@@ -132,12 +103,14 @@ stages:
           targets:
             - name: Alpine 3
               test: alpine3
+            - name: CentOS 6
+              test: centos6
             - name: CentOS 7
               test: centos7
-            - name: Fedora 34
-              test: fedora34
-            - name: Fedora 35
-              test: fedora35
+            - name: Fedora 32
+              test: fedora32
+            - name: Fedora 33
+              test: fedora33
             - name: openSUSE 15 py2
               test: opensuse15py2
             - name: openSUSE 15 py3
@@ -160,9 +133,8 @@ stages:
           nameFormat: Python {0}
           testFormat: galaxy/{0}/1
           targets:
-            - test: 3.8
-            - test: 3.9
-            - test: '3.10'
+            - test: 2.7
+            - test: 3.6
   - stage: Generic
     dependsOn: []
     jobs:
@@ -171,9 +143,8 @@ stages:
           nameFormat: Python {0}
           testFormat: generic/{0}/1
           targets:
-            - test: 3.8
-            - test: 3.9
-            - test: '3.10'
+            - test: 2.7
+            - test: 3.6
   - stage: Incidental_Remote
     displayName: Incidental Remote
     dependsOn: []
@@ -182,10 +153,40 @@ stages:
         parameters:
           testFormat: i/{0}
           targets:
-            - name: RHEL 8.5 py36
-              test: rhel/8.5@3.6
-            - name: RHEL 8.5 py38
-              test: rhel/8.5@3.8
+            - name: OS X 10.11
+              test: osx/10.11
+            - name: RHEL 7.9
+              test: rhel/7.9
+            - name: RHEL 8.3 py36
+              test: rhel/8.3@3.6
+            - name: RHEL 8.3 py38
+              test: rhel/8.3@3.8
+            - name: FreeBSD 12.2
+              test: freebsd/12.2
+  - stage: Incidental_Docker
+    displayName: Incidental Docker
+    dependsOn: []
+    jobs:
+      - template: templates/matrix.yml
+        parameters:
+          testFormat: i/linux/{0}
+          targets:
+            - name: CentOS 6
+              test: centos6
+            - name: CentOS 7
+              test: centos7
+            - name: Fedora 32
+              test: fedora32
+            - name: Fedora 33
+              test: fedora33
+            - name: openSUSE 15 py2
+              test: opensuse15py2
+            - name: openSUSE 15 py3
+              test: opensuse15
+            - name: Ubuntu 18.04
+              test: ubuntu1804
+            - name: Ubuntu 20.04
+              test: ubuntu2004
   - stage: Incidental_Windows
     displayName: Incidental Windows
     dependsOn: []
@@ -199,7 +200,6 @@ stages:
             - test: 2012-R2
             - test: 2016
             - test: 2019
-            - test: 2022
   - stage: Incidental
     dependsOn: []
     jobs:
@@ -209,8 +209,10 @@ stages:
           targets:
             - name: IOS Python
               test: ios/csr1000v/
-            - name: VyOS Python
-              test: vyos/1.1.8/
+            - name: VyOS Python 2.7
+              test: vyos/1.1.8/2.7
+            - name: VyOS Python 3.6
+              test: vyos/1.1.8/3.6
             - name: AWS Python 2.7
               test: aws/2.7
             - name: AWS Python 3.6
@@ -228,6 +230,7 @@ stages:
       - Galaxy
       - Generic
       - Incidental_Remote
+      - Incidental_Docker
       - Incidental_Windows
       - Incidental
     jobs:

.azure-pipelines/scripts/aggregate-coverage.sh

@@ -9,7 +9,7 @@ PATH="${PWD}/bin:${PATH}"
 
 mkdir "${agent_temp_directory}/coverage/"
 
-options=(--venv --color -v)
+options=(--venv --venv-system-site-packages --color -v)
 
 ansible-test coverage combine --group-by command --export "${agent_temp_directory}/coverage/" "${options[@]}"
 

.azure-pipelines/scripts/publish-codecov.py

@@ -88,7 +88,7 @@ def download_file(url: str, dest: pathlib.Path, flags: int, dry_run: bool = Fals
 
 def main():
     args = parse_args()
-    url = 'https://ci-files.testing.ansible.com/codecov/linux/codecov'
+    url = 'https://ansible-ci-files.s3.amazonaws.com/codecov/linux/codecov'
     with tempfile.TemporaryDirectory(prefix='codecov-') as tmpdir:
         codecov_bin = pathlib.Path(tmpdir) / 'codecov'
         download_file(url, codecov_bin, 0o755, args.dry_run)

.azure-pipelines/scripts/report-coverage.sh

@@ -12,6 +12,4 @@ if ! ansible-test --help >/dev/null 2>&1; then
     pip install https://github.com/ansible/ansible/archive/devel.tar.gz --disable-pip-version-check
 fi
 
-# Generate stubs using docker (if supported) otherwise fall back to using a virtual environment instead.
-# The use of docker is required when Powershell code is present, but Ansible 2.12 was the first version to support --docker with coverage.
-ansible-test coverage xml --group-by command --stub --docker --color -v || ansible-test coverage xml --group-by command --stub --venv --color -v
+ansible-test coverage xml --group-by command --stub --venv --venv-system-site-packages --color -v

.azure-pipelines/templates/coverage.yml

@@ -23,6 +23,16 @@ jobs:
       - bash: .azure-pipelines/scripts/report-coverage.sh
         displayName: Generate Coverage Report
         condition: gt(variables.coverageFileCount, 0)
+      - task: PublishCodeCoverageResults@1
+        inputs:
+          codeCoverageTool: Cobertura
+          # Azure Pipelines only accepts a single coverage data file.
+          # That means only Python or PowerShell coverage can be uploaded, but not both.
+          # Set the "pipelinesCoverage" variable to determine which type is uploaded.
+          # Use "coverage" for Python and "coverage-powershell" for PowerShell.
+          summaryFileLocation: "$(outputPath)/reports/$(pipelinesCoverage).xml"
+        displayName: Publish to Azure Pipelines
+        condition: gt(variables.coverageFileCount, 0)
       - bash: .azure-pipelines/scripts/publish-codecov.py "$(outputPath)"
         displayName: Publish to codecov.io
         condition: gt(variables.coverageFileCount, 0)

.github/BOTMETA.yml

@@ -121,16 +121,16 @@ files:
     notified: mattclay
   test/lib/:
     notified: mattclay
-  test/lib/ansible_test/_util/controller/sanity/validate-modules:
+  test/lib/ansible_test/_data/sanity/validate-modules:
     keywords:
     - validate-modules
     notified:
     - mattclay
-  test/lib/ansible_test/_util/controller/sanity/validate-modules/validate_modules/main.py:
+  test/lib/ansible_test/_data/sanity/validate-modules/validate_modules/main.py:
     notified:
     - gundalow
     - sivel
-  test/lib/ansible_test/_util/controller/sanity/validate-modules/validate_modules/schema.py:
+  test/lib/ansible_test/_data/sanity/validate-modules/validate_modules/schema.py:
     notified:
     - gundalow
     - sivel

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -1,35 +1,18 @@
 ---
 name: 🐛 Bug report
 description: Create a report to help us improve
+issue_body: false  # default: true, adds a classic WSYWIG textarea, if on
 
 body:
 - type: markdown
   attributes:
-    value: >
-      **Thank you for wanting to report a bug in ansible-core!**
-
-
+    value: |
       ⚠
-      Verify first that your issue is not [already reported on
-      GitHub][issue search] and keep in mind that we may have to keep
-      the current behavior because [every change breaks someone's
-      workflow][XKCD 1172].
-      We try to be mindful about this.
-
+      Verify first that your issue is not [already reported on GitHub][issue search].
       Also test if the latest release and devel branch are affected too.
+      *Complete **all** sections as described, this form is processed automatically.*
 
-
-      **Tip:** If you are seeking community support, please consider
-      [starting a mailing list thread or chatting in IRC][ML||IRC].
-
-
-
-      [ML||IRC]:
-      https://docs.ansible.com/ansible-core/devel/community/communication.html?utm_medium=github&utm_source=issue_form--bug_report.yml#mailing-list-information
-
-      [issue search]: ../search?q=is%3Aissue&type=issues
-
-      [XKCD 1172]: https://xkcd.com/1172/
+      [issue search]: https://github.com/ansible/ansible/search?q=is%3Aissue&type=issues
 
 
 - type: textarea
@@ -46,22 +29,6 @@ body:
 - type: dropdown
   attributes:
     label: Issue Type
-    description: >
-      Please select the single available option in the drop-down.
-
-      <details>
-        <summary>
-          <em>Why?</em>
-        </summary>
-
-        We would do it by ourselves but unfortunatelly, the curent
-        edition of GitHub Issue Forms Alpha does not support this yet 🤷
-
-
-        _We will make it easier in the future, once GitHub
-        supports dropdown defaults. Promise!_
-
-      </details>
     # FIXME: Once GitHub allows defining the default choice, update this
     options:
     - Bug Report
@@ -71,22 +38,9 @@ body:
 - type: input
   attributes:
     label: Component Name
-    description: >
-      Write the short name of the rst file, module, plugin, task or
-      feature below, *use your best guess if unsure*.
-
-
-      **Tip:** Cannot find it in this repository? Please be advised that
-      the source for some parts of the documentation are hosted outside
-      of this repository. If the page you are reporting describes
-      modules/plugins/etc that are not officially supported by the
-      Ansible Core Engineering team, there is a good chance that it is
-      coming from one of the [Ansible Collections maintained by the
-      community][collections org]. If this is the case, please make sure
-      to file an issue under the appropriate project there instead.
-
-
-      [collections org]: /ansible-collections
+    description: >-
+      Write the short name of the module, plugin, task or feature below,
+      *use your best guess if unsure*.
     placeholder: dnf, apt, yum, pip, user etc.
   validations:
     required: true
@@ -95,23 +49,13 @@ body:
   attributes:
     label: Ansible Version
     description: >-
-      Paste verbatim output from `ansible --version` below, under
-      the prompt line. Please don't wrap it with tripple backticks — your
-      whole input will be turned into a code snippet automatically.
-    render: console
+      Paste verbatim output from `ansible --version` between
+      tripple backticks.
     value: |
+      ```console (paste below)
       $ ansible --version
-    placeholder: |
-      $ ansible --version
-      ansible [core 2.11.0b4.post0]  (detached HEAD ref: refs/) last updated 2021/04/02 00:33:35 (GMT +200)
-        config file = None
-        configured module search path = ['~/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules']
-        ansible python module location = ~/src/github/ansible/ansible/lib/ansible
-        ansible collection location = ~/.ansible/collections:/usr/share/ansible/collections
-        executable location = bin/ansible
-        python version = 3.9.0 (default, Oct 26 2020, 13:08:59) [GCC 10.2.0]
-        jinja version = 2.11.3
-        libyaml = True
+
+      ```
   validations:
     required: true
 
@@ -119,18 +63,12 @@ body:
   attributes:
     label: Configuration
     description: >-
-      Paste verbatim output from `ansible-config dump --only-changed`
-      below, under the prompt line.
-      Please don't wrap it with tripple backticks — your
-      whole input will be turned into a code snippet automatically.
-    render: console
+      Paste verbatim output from `ansible-config dump --only-changed` between quotes.
     value: |
+      ```console (paste below)
       $ ansible-config dump --only-changed
-    placeholder: |
-      $ ansible-config dump --only-changed
-      DEFAULT_GATHERING(~/src/github/ansible/ansible/ansible.cfg) = smart
-      DEFAULT_HOST_LIST(~/src/github/ansible/ansible/ansible.cfg) = ['~/src/github/ansible/ansible/hosts']
-      DEFAULT_VAULT_PASSWORD_FILE(~/src/github/ansible/ansible/ansible.cfg) = ~/src/github/ansible/ansible/vault/print-password.sh
+
+      ```
   validations:
     required: true
 
@@ -157,20 +95,6 @@ body:
       ```yaml (paste below)
 
       ```
-    placeholder: |
-      1. Implement the following playbook:
-
-         ```yaml
-         ---
-         # ping.yml
-         - hosts: all
-           gather_facts: false
-           tasks:
-           - ping:
-         ...
-         ```
-      2. Then run `ANSIBLE_DEBUG=1 ansible-playbook ping.yml -vvvvv`
-      3. An error occurs.
   validations:
     required: true
 
@@ -191,73 +115,11 @@ body:
     description: |
       Describe what actually happened. If possible run with extra verbosity (`-vvvv`).
 
-      Paste verbatim command output and don't wrap it with tripple backticks — your
-      whole input will be turned into a code snippet automatically.
-    render: console
-    placeholder: >-
-      Certificate did not match expected hostname: files.pythonhosted.org. Certificate: {'notAfter': 'Apr 28 19:20:25 2021 GMT', 'subjectAltName': ((u'DNS', 'r.ssl.fastly.net'), (u'DNS', '*.catchpoint.com'), (u'DNS', '*.cnn.io'), (u'DNS', '*.dollarshaveclub.com'), (u'DNS', '*.eater.com'), (u'DNS', '*.fastly.picmonkey.com'), (u'DNS', '*.files.saymedia-content.com'), (u'DNS', '*.ft.com'), (u'DNS', '*.meetupstatic.com'), (u'DNS', '*.nfl.com'), (u'DNS', '*.pagar.me'), (u'DNS', '*.picmonkey.com'), (u'DNS', '*.realself.com'), (u'DNS', '*.sbnation.com'), (u'DNS', '*.shakr.com'), (u'DNS', '*.streamable.com'), (u'DNS', '*.surfly.com'), (u'DNS', '*.theverge.com'), (u'DNS', '*.thrillist.com'), (u'DNS', '*.vox-cdn.com'), (u'DNS', '*.vox.com'), (u'DNS', '*.voxmedia.com'), (u'DNS', 'eater.com'), (u'DNS', 'ft.com'), (u'DNS', 'i.gse.io'), (u'DNS', 'picmonkey.com'), (u'DNS', 'realself.com'), (u'DNS', 'static.wixstatic.com'), (u'DNS', 'streamable.com'), (u'DNS', 'surfly.com'), (u'DNS', 'theverge.com'), (u'DNS', 'vox-cdn.com'), (u'DNS', 'vox.com'), (u'DNS', 'www.joyent.com')), 'subject': ((('countryName', u'US'),), (('stateOrProvinceName', u'California'),), (('localityName', u'San Francisco'),), (('organizationName', u'Fastly, Inc'),), (('commonName', u'r.ssl.fastly.net'),))}
-      Exception:
-      Traceback (most recent call last):
-        File "/usr/local/lib/python2.6/dist-packages/pip/basecommand.py", line 215, in main
-          status = self.run(options, args)
-        File "/usr/local/lib/python2.6/dist-packages/pip/commands/install.py", line 335, in run
-          wb.build(autobuilding=True)
-        File "/usr/local/lib/python2.6/dist-packages/pip/wheel.py", line 749, in build
-          self.requirement_set.prepare_files(self.finder)
-        File "/usr/local/lib/python2.6/dist-packages/pip/req/req_set.py", line 380, in prepare_files
-          ignore_dependencies=self.ignore_dependencies))
-        File "/usr/local/lib/python2.6/dist-packages/pip/req/req_set.py", line 620, in _prepare_file
-          session=self.session, hashes=hashes)
-        File "/usr/local/lib/python2.6/dist-packages/pip/download.py", line 821, in unpack_url
-          hashes=hashes
-        File "/usr/local/lib/python2.6/dist-packages/pip/download.py", line 659, in unpack_http_url
-          hashes)
-        File "/usr/local/lib/python2.6/dist-packages/pip/download.py", line 853, in _download_http_url
-          stream=True,
-        File "/usr/local/lib/python2.6/dist-packages/pip/_vendor/requests/sessions.py", line 521, in get
-          return self.request('GET', url, **kwargs)
-        File "/usr/local/lib/python2.6/dist-packages/pip/download.py", line 386, in request
-          return super(PipSession, self).request(method, url, *args, **kwargs)
-        File "/usr/local/lib/python2.6/dist-packages/pip/_vendor/requests/sessions.py", line 508, in request
-          resp = self.send(prep, **send_kwargs)
-        File "/usr/local/lib/python2.6/dist-packages/pip/_vendor/requests/sessions.py", line 618, in send
-          r = adapter.send(request, **kwargs)
-        File "/usr/local/lib/python2.6/dist-packages/pip/_vendor/cachecontrol/adapter.py", line 47, in send
-          resp = super(CacheControlAdapter, self).send(request, **kw)
-        File "/usr/local/lib/python2.6/dist-packages/pip/_vendor/requests/adapters.py", line 506, in send
-          raise SSLError(e, request=request)
-      SSLError: HTTPSConnectionPool(host='files.pythonhosted.org', port=443): Max retries exceeded with url: /packages/ef/ab/aa12712415809bf698e719b307419f953e25344e8f42d557533d7a02b276/netapp_lib-2020.7.16-py2-none-any.whl (Caused by SSLError(CertificateError("hostname 'files.pythonhosted.org' doesn't match either of 'r.ssl.fastly.net', '*.catchpoint.com', '*.cnn.io', '*.dollarshaveclub.com', '*.eater.com', '*.fastly.picmonkey.com', '*.files.saymedia-content.com', '*.ft.com', '*.meetupstatic.com', '*.nfl.com', '*.pagar.me', '*.picmonkey.com', '*.realself.com', '*.sbnation.com', '*.shakr.com', '*.streamable.com', '*.surfly.com', '*.theverge.com', '*.thrillist.com', '*.vox-cdn.com', '*.vox.com', '*.voxmedia.com', 'eater.com', 'ft.com', 'i.gse.io', 'picmonkey.com', 'realself.com', 'static.wixstatic.com', 'streamable.com', 'surfly.com', 'theverge.com', 'vox-cdn.com', 'vox.com', 'www.joyent.com'",),))
-      ERROR: Command "/usr/bin/python2.6 /root/ansible/test/lib/ansible_test/_data/quiet_pip.py install --disable-pip-version-check -r /root/ansible/test/lib/ansible_test/_data/requirements/units.txt -r tests/unit/requirements.txt -c /root/ansible/test/lib/ansible_test/_data/requirements/constraints.txt" returned exit status 2.
-      ERROR: Command "docker exec d47eb360db4ce779c1f690db964655b76e68895c4360ff252c46fe7fe6f5c75a /usr/bin/env ANSIBLE_TEST_CONTENT_ROOT=/root/ansible_collections/netapp/ontap LC_ALL=en_US.UTF-8 /usr/bin/python3.6 /root/ansible/bin/ansible-test units --metadata tests/output/.tmp/metadata-9i2qfrcl.json --truncate 200 --redact --color yes --requirements --python default --requirements-mode only" returned exit status 1.
+      Paste verbatim command output between quotes.
+    value: |
+      ```console (paste below)
+
+      ```
   validations:
     required: true
-
-
-- type: markdown
-  attributes:
-    value: >
-      *One last thing...*
-
-
-      *Please, complete **all** sections as described, this form
-      is [processed automatically by a robot][ansibot help].*
-
-
-      Thank you for your collaboration!
-
-
-      [ansibot help]:
-      /ansible/ansibullbot/blob/master/ISSUE_HELP.md#for-issue-submitters
-
-
-- type: checkboxes
-  attributes:
-    label: Code of Conduct
-    description: |
-      Read the [Ansible Code of Conduct][CoC] first.
-
-      [CoC]: https://docs.ansible.com/ansible/latest/community/code_of_conduct.html?utm_medium=github&utm_source=issue_form--bug_report.yml
-    options:
-    - label: I agree to follow the Ansible Code of Conduct
-      required: true
 ...

.github/ISSUE_TEMPLATE/documentation_report.yml

@@ -1,51 +1,28 @@
 ---
 name: 📝 Documentation Report
 description: Ask us about docs
+# NOTE: issue body is enabled to allow screenshots
+issue_body: true  # default: true, adds a classic WSYWIG textarea, if on
 
 body:
 - type: markdown
   attributes:
-    value: >
-      **Thank you for wanting to report a problem with ansible-core
-      documentation!**
-
-
-      Please fill out your suggestions below. If the problem seems
-      straightforward, feel free to go ahead and
-      [submit a pull request] instead!
-
-
+    value: |
       ⚠
-      Verify first that your issue is not [already reported on
-      GitHub][issue search].
-
+      Verify first that your issue is not [already reported on GitHub][issue search].
       Also test if the latest release and devel branch are affected too.
+      *Complete **all** sections as described, this form is processed automatically.*
 
-
-      **Tip:** If you are seeking community support, please consider
-      [starting a mailing list thread or chatting in IRC][ML||IRC].
-
-
-      [ML||IRC]:
-      https://docs.ansible.com/ansible-core/devel/community/communication.html?utm_medium=github&utm_source=issue_form--documentation_report.yml#mailing-list-information
-
-      [issue search]: ../search?q=is%3Aissue&type=issues
-
-      [submit a pull request]:
-      https://docs.ansible.com/ansible-core/devel/community/documentation_contributions.html
+      [issue search]: https://github.com/ansible/ansible/search?q=is%3Aissue&type=issues
 
 
 - type: textarea
   attributes:
     label: Summary
-    description: >
-      Explain the problem briefly below, add suggestions to wording
-      or structure.
+    description: |
+      Explain the problem briefly below, add suggestions to wording or structure.
 
-
-      **HINT:** Did you know the documentation has a `View on GitHub`
-      link on some pages? Feel free to use it to start a pull request
-      right from the GitHub UI!
+      **HINT:** Did you know the documentation has an `Edit on GitHub` link on every page?
     placeholder: >-
       I was reading the ansible-core documentation of version X and I'm having
       problems understanding Y. It would be very helpful if that got
@@ -56,22 +33,6 @@ body:
 - type: dropdown
   attributes:
     label: Issue Type
-    description: >
-      Please select the single available option in the drop-down.
-
-      <details>
-        <summary>
-          <em>Why?</em>
-        </summary>
-
-        We would do it by ourselves but unfortunatelly, the curent
-        edition of GitHub Issue Forms Alpha does not support this yet 🤷
-
-
-        _We will make it easier in the future, once GitHub
-        supports dropdown defaults. Promise!_
-
-      </details>
     # FIXME: Once GitHub allows defining the default choice, update this
     options:
     - Documentation Report
@@ -81,22 +42,9 @@ body:
 - type: input
   attributes:
     label: Component Name
-    description: >
+    description: >-
       Write the short name of the rst file, module, plugin, task or
       feature below, *use your best guess if unsure*.
-
-
-      **Tip:** Be advised that the source for some parts of the
-      documentation are hosted outside of this repository. If the page
-      you are reporting describes modules/plugins/etc that are not
-      officially supported by the Ansible Core Engineering team, there
-      is a good chance that it is coming from one of the [Ansible
-      Collections maintained by the community][collections org]. If this
-      is the case, please make sure to file an issue under the
-      appropriate project there instead.
-
-
-      [collections org]: /ansible-collections
     placeholder: docs/docsite/rst/dev_guide/debugging.rst
   validations:
     required: true
@@ -105,23 +53,13 @@ body:
   attributes:
     label: Ansible Version
     description: >-
-      Paste verbatim output from `ansible --version` below, under
-      the prompt line. Please don't wrap it with tripple backticks — your
-      whole input will be turned into a code snippet automatically.
-    render: console
+      Paste verbatim output from `ansible --version` between
+      tripple backticks.
     value: |
+      ```console (paste below)
       $ ansible --version
-    placeholder: |
-      $ ansible --version
-      ansible [core 2.11.0b4.post0]  (detached HEAD ref: refs/) last updated 2021/04/02 00:33:35 (GMT +200)
-        config file = None
-        configured module search path = ['~/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules']
-        ansible python module location = ~/src/github/ansible/ansible/lib/ansible
-        ansible collection location = ~/.ansible/collections:/usr/share/ansible/collections
-        executable location = bin/ansible
-        python version = 3.9.0 (default, Oct 26 2020, 13:08:59) [GCC 10.2.0]
-        jinja version = 2.11.3
-        libyaml = True
+
+      ```
   validations:
     required: true
 
@@ -129,18 +67,12 @@ body:
   attributes:
     label: Configuration
     description: >-
-      Paste verbatim output from `ansible-config dump --only-changed`
-      below, under the prompt line.
-      Please don't wrap it with tripple backticks — your
-      whole input will be turned into a code snippet automatically.
-    render: console
+      Paste verbatim output from `ansible-config dump --only-changed` between quotes.
     value: |
+      ```console (paste below)
       $ ansible-config dump --only-changed
-    placeholder: |
-      $ ansible-config dump --only-changed
-      DEFAULT_GATHERING(~/src/github/ansible/ansible/ansible.cfg) = smart
-      DEFAULT_HOST_LIST(~/src/github/ansible/ansible/ansible.cfg) = ['~/src/github/ansible/ansible/hosts']
-      DEFAULT_VAULT_PASSWORD_FILE(~/src/github/ansible/ansible/ansible.cfg) = ~/src/github/ansible/ansible/vault/print-password.sh
+
+      ```
   validations:
     required: true
 
@@ -154,46 +86,12 @@ body:
   validations:
     required: true
 
-
-- type: textarea
+- type: markdown
   attributes:
-    label: Additional Information
-    description: |
+    value: |
+      **Additional Information**
+
       Describe how this improves the documentation, e.g. before/after situation or screenshots.
 
       **HINT:** You can paste https://gist.github.com links for larger files.
-    placeholder: >-
-      When the improvement is applied, it makes it more straightforward
-      to understand X.
-  validations:
-    required: true
-
-
-- type: markdown
-  attributes:
-    value: >
-      *One last thing...*
-
-
-      *Please, complete **all** sections as described, this form
-      is [processed automatically by a robot][ansibot help].*
-
-
-      Thank you for your collaboration!
-
-
-      [ansibot help]:
-      /ansible/ansibullbot/blob/master/ISSUE_HELP.md#for-issue-submitters
-
-
-- type: checkboxes
-  attributes:
-    label: Code of Conduct
-    description: |
-      Read the [Ansible Code of Conduct][CoC] first.
-
-      [CoC]: https://docs.ansible.com/ansible/latest/community/code_of_conduct.html?utm_medium=github&utm_source=issue_form--documentation_report.yml
-    options:
-    - label: I agree to follow the Ansible Code of Conduct
-      required: true
 ...

.github/ISSUE_TEMPLATE/feature_request.yml

@@ -1,96 +1,24 @@
 ---
 name: ✨ Feature request
 description: Suggest an idea for this project
+issue_body: false  # default: true, adds a classic WSYWIG textarea, if on
 
 body:
 - type: markdown
   attributes:
-    value: >
-      **Thank you for wanting to suggest a feature for ansible-core!**
-
-
-
-      💡
-      Before you go ahead with your request, please first consider if it
-      would be useful for majority of the ansible-core users. As a
-      general rule of thumb, any feature that is only of interest to a
-      small sub group should be [implemented in a third-party Ansible
-      Collection][contribute to collections] or maybe even just your
-      project alone. Be mindful of the fact that the essential
-      ansible-core features have a broad impact.
-
-      If unsure, consider filing a [new proposal] instead outlining your
-      use-cases, the research and implementation considerations. Then,
-      start a discussion on one of the public [IRC meetings] we have just
-      for this.
-
-
-      <details>
-        <summary>
-          ❗ Every change breaks someone's workflow.
-        </summary>
-
-
-        [![❗ Every change breaks someone's workflow.
-        ](https://imgs.xkcd.com/comics/workflow.png)
-        ](https://xkcd.com/1172/)
-      </details>
-
-
+    value: |
       ⚠
-      Verify first that your idea is not [already requested on
-      GitHub][issue search].
+      Verify first that your issue is not [already reported on GitHub][issue search].
+      Also test if the latest release and devel branch are affected too.
+      *Complete **all** sections as described, this form is processed automatically.*
 
-      Also test if the devel branch does not already implement this.
-
-
-      **Tip:** If you are seeking community support, please consider
-      [starting a mailing list thread or chatting in IRC][ML||IRC].
-
-
-
-      [contribute to collections]:
-      https://docs.ansible.com/ansible-core/devel/community/contributing_maintained_collections.html?utm_medium=github&utm_source=issue_form--feature_request.yml
-
-      [IRC meetings]:
-        https://docs.ansible.com/ansible-core/devel/community/communication.html?utm_medium=github&utm_source=issue_form--feature_request.yml#irc-meetings
-
-      [issue search]: ../search?q=is%3Aissue&type=issues
-
-      [ML||IRC]:
-      https://docs.ansible.com/ansible-core/devel/community/communication.html?utm_medium=github&utm_source=issue_form--feature_request.yml#mailing-list-information
-
-      [new proposal]: ../../proposals/issues/new
+      [issue search]: https://github.com/ansible/ansible/search?q=is%3Aissue&type=issues
 
 
 - type: textarea
   attributes:
     label: Summary
-    description: >
-      Describe the new feature/improvement you would like briefly below.
-
-
-      What's the problem this feature will solve?
-
-      What are you trying to do, that you are unable to achieve
-      with ansible-core as it currently stands?
-
-
-      * Provide examples of real-world use cases that this would enable
-      and how it solves the problem you described.
-
-      * How do you solve this now?
-
-      * Have you tried to work around the problem using other tools?
-
-      * Could there be a different approach to solving this issue?
-
-
-      *Know **exactly** what you want?* Consider filing a [new proposal]
-      instead outlining your research and implementation considerations.
-
-
-      [new proposal]: ../../proposals/issues/new
+    description: Describe the new feature/improvement briefly below.
     placeholder: >-
       I am trying to do X with ansible-core from the devel branch on GitHub and
       I think that implementing a feature Y would be very helpful for me and
@@ -101,22 +29,6 @@ body:
 - type: dropdown
   attributes:
     label: Issue Type
-    description: >
-      Please select the single available option in the drop-down.
-
-      <details>
-        <summary>
-          <em>Why?</em>
-        </summary>
-
-        We would do it by ourselves but unfortunatelly, the curent
-        edition of GitHub Issue Forms Alpha does not support this yet 🤷
-
-
-        _We will make it easier in the future, once GitHub
-        supports dropdown defaults. Promise!_
-
-      </details>
     # FIXME: Once GitHub allows defining the default choice, update this
     options:
     - Feature Idea
@@ -126,19 +38,9 @@ body:
 - type: input
   attributes:
     label: Component Name
-    description: >
+    description: >-
       Write the short name of the module, plugin, task or feature below,
       *use your best guess if unsure*.
-
-
-      Be aware that a lot of content that used to reside in this repository
-      previously, is now hosted under [individual collection
-      projects][collections org].
-      If this is the case, please make sure to file an issue under the
-      appropriate project there instead.
-
-
-      [collections org]: /ansible-collections
     placeholder: dnf, apt, yum, pip, user etc.
   validations:
     required: true
@@ -155,38 +57,6 @@ body:
       ```yaml (paste below)
 
       ```
-    placeholder: >-
-      I asked on https://stackoverflow.com/.... and the community
-      advised me to do X, Y and Z.
   validations:
     required: true
-
-
-- type: markdown
-  attributes:
-    value: >
-      *One last thing...*
-
-
-      *Please, complete **all** sections as described, this form
-      is [processed automatically by a robot][ansibot help].*
-
-
-      Thank you for your collaboration!
-
-
-      [ansibot help]:
-      /ansible/ansibullbot/blob/master/ISSUE_HELP.md#for-issue-submitters
-
-
-- type: checkboxes
-  attributes:
-    label: Code of Conduct
-    description: |
-      Read the [Ansible Code of Conduct][CoC] first.
-
-      [CoC]: https://docs.ansible.com/ansible/latest/community/code_of_conduct.html?utm_medium=github&utm_source=issue_form--feature_request.yml
-    options:
-    - label: I agree to follow the Ansible Code of Conduct
-      required: true
 ...

.github/RELEASE_NAMES.yml

@@ -1,6 +1,4 @@
 ---
-- 2.13.0  Nobody's Fault but Mine
-- 2.12.0  Dazed and Confused
 - 2.11.0  Hey Hey, What Can I Do
 - 2.10.0  When the Levee Breaks
 - 2.9.0   Immigrant Song

.gitignore

@@ -38,7 +38,6 @@ docs/docsite/rst/cli/ansible-*.rst
 docs/docsite/rst/cli/ansible.rst
 docs/docsite/rst/dev_guide/collections_galaxy_meta.rst
 docs/docsite/rst/dev_guide/testing/sanity/index.rst.new
-docs/docsite/rst/dev_guide/index.rst
 docs/docsite/rst/modules/*.rst
 docs/docsite/rst/collections/*.rst
 !docs/docsite/rst/collections/all_plugins.rst
@@ -53,10 +52,12 @@ docs/docsite/searchindex.js
 docs/docsite/_static/*.gif
 docs/docsite/_static/*.png
 docs/docsite/_static/websupport.js
+# deb building stuff...
+/debian/
+deb-build
 # Vim swap files
 *.swp
 *.swo
-[._]*.un~
 credentials.yml
 # test output
 *.retry
@@ -83,10 +84,7 @@ Vagrantfile
 /lib/ansible_base.egg-info/
 # First used in the `devel` branch during Ansible 2.11 development.
 /lib/ansible_core.egg-info/
-# vendored lib dir
-lib/ansible/_vendor/*
-!lib/ansible/_vendor/__init__.py
-# test stuff
+/shippable/
 /test/integration/cloud-config-*.*
 !/test/integration/cloud-config-*.*.template
 .python-version

MANIFEST.in

@@ -7,11 +7,6 @@ include docs/docsite/rst/collections/all_plugins.rst
 exclude docs/docsite/rst_warnings
 exclude docs/docsite/rst/conf.py
 exclude docs/docsite/rst/index.rst
-exclude docs/docsite/rst/dev_guide/index.rst
-exclude docs/docsite/rst/dev_guide/testing/sanity/bin-symlinks.rst
-exclude docs/docsite/rst/dev_guide/testing/sanity/botmeta.rst
-exclude docs/docsite/rst/dev_guide/testing/sanity/integration-aliases.rst
-exclude docs/docsite/rst/dev_guide/testing/sanity/release-names.rst
 recursive-exclude docs/docsite/_build *
 recursive-exclude docs/docsite/_extensions *.pyc *.pyo
 include examples/hosts
@@ -29,16 +24,13 @@ recursive-include licenses *.txt
 recursive-include packaging *
 recursive-include test/ansible_test *.py Makefile
 recursive-include test/integration *
-recursive-include test/lib/ansible_test/config *.yml *.template
-recursive-include test/lib/ansible_test/_data *.cfg *.in *.ini *.ps1 *.txt *.yml coveragerc
-recursive-include test/lib/ansible_test/_util *.cfg *.ini *.json *.ps1 *.psd1 *.py *.sh *.txt *.yml
-recursive-include test/lib/ansible_test/_util/controller/sanity/validate-modules validate-modules
-recursive-include test/sanity *.in *.json *.py *.txt
+recursive-include test/lib/ansible_test/config *.template
+recursive-include test/lib/ansible_test/_data *.cfg *.ini *.json *.ps1 *.psd1 *.py *.sh *.txt *.yml coveragerc inventory
+recursive-include test/lib/ansible_test/_data/injector ansible ansible-config ansible-connection ansible-console ansible-doc ansible-galaxy ansible-playbook ansible-pull ansible-test ansible-vault pytest
+recursive-include test/lib/ansible_test/_data/sanity/validate-modules validate-modules
+recursive-include test/sanity *.json *.py *.txt
 recursive-include test/support *.py *.ps1 *.psm1 *.cs
 exclude test/sanity/code-smell/botmeta.*
-exclude test/sanity/code-smell/release-names.*
-exclude test/lib/ansible_test/_internal/commands/sanity/bin_symlinks.py
-exclude test/lib/ansible_test/_internal/commands/sanity/integration_aliases.py
 recursive-include test/units *
 include Makefile
 include MANIFEST.in
@@ -46,6 +38,3 @@ include changelogs/CHANGELOG*.rst
 include changelogs/changelog.yaml
 recursive-include hacking/build_library *.py
 include hacking/build-ansible.py
-include hacking/test-module.py
-include hacking/update-sanity-requirements.py
-include bin/*

Makefile

@@ -4,7 +4,15 @@
 #
 # useful targets:
 #   make clean ---------------- clean up
+#   make webdocs -------------- produce ansible doc at docs/docsite/_build/html
+#   make coredocs ------------- produce core doc at docs/docsite/_build/html
 #   make sdist ---------------- produce a tarball
+#   make deb-src -------------- produce a DEB source
+#   make deb ------------------ produce a DEB
+#   make docs ----------------- rebuild the manpages (results are checked in)
+#   make gettext -------------- produce POT files for docs
+#   make generate-po ---------- generate language specific po file
+#   make needs-translation ---- generate list of file with unstranlated or fuzzy string for a specific language
 #   make tests ---------------- run the tests (see https://docs.ansible.com/ansible/devel/dev_guide/testing_units.html for requirements)
 
 ########################################################
@@ -35,6 +43,58 @@ ifeq ($(findstring error,$(VERSION)), error)
 $(error "version_helper failed")
 endif
 
+# Get the branch information from git
+ifneq ($(shell which git),)
+GIT_DATE := $(shell git log -n 1 --format="%ci")
+GIT_HASH := $(shell git log -n 1 --format="%h")
+GIT_BRANCH := $(shell git rev-parse --abbrev-ref HEAD | sed 's/[-_.\/]//g')
+GITINFO = .$(GIT_HASH).$(GIT_BRANCH)
+else
+GITINFO = ""
+endif
+
+ifeq ($(shell echo $(OS) | egrep -c 'Darwin|FreeBSD|OpenBSD|DragonFly'),1)
+DATE := $(shell date -j -r $(shell git log -n 1 --format="%ct") +%Y%m%d%H%M)
+CPUS ?= $(shell sysctl hw.ncpu|awk '{print $$2}')
+else
+DATE := $(shell date --utc --date="$(GIT_DATE)" +%Y%m%d%H%M)
+CPUS ?= $(shell nproc)
+endif
+
+# Intenationalisation and Localisation
+LANGUAGES ?=
+
+# DEB build parameters
+DEBUILD_BIN ?= debuild
+DEBUILD_OPTS = --source-option="-I"
+DPUT_BIN ?= dput
+DPUT_OPTS ?=
+DEB_DATE := $(shell LC_TIME=C date +"%a, %d %b %Y %T %z")
+DEB_VERSION ?= $(shell $(PYTHON) packaging/release/versionhelper/version_helper.py --debversion)
+ifeq ($(OFFICIAL),yes)
+    DEB_RELEASE ?= $(shell $(PYTHON) packaging/release/versionhelper/version_helper.py --debrelease)ppa
+    # Sign OFFICIAL builds using 'DEBSIGN_KEYID'
+    # DEBSIGN_KEYID is required when signing
+    ifneq ($(DEBSIGN_KEYID),)
+        DEBUILD_OPTS += -k$(DEBSIGN_KEYID)
+    endif
+else
+    DEB_RELEASE ?= 100.git$(DATE)$(GITINFO)
+    # Do not sign unofficial builds
+    DEBUILD_OPTS += -uc -us
+    DPUT_OPTS += -u
+endif
+DEBUILD = $(DEBUILD_BIN) $(DEBUILD_OPTS)
+DEB_PPA ?= ppa
+# Choose the desired Ubuntu release: lucid precise saucy trusty
+DEB_DIST ?= unstable
+
+# pbuilder parameters
+PBUILDER_ARCH ?= amd64
+PBUILDER_CACHE_DIR = /var/cache/pbuilder
+PBUILDER_BIN ?= pbuilder
+PBUILDER_OPTS ?= --debootstrapopts --variant=buildd --architecture $(PBUILDER_ARCH) --debbuildopts -b
+
 # ansible-test parameters
 ANSIBLE_TEST ?= bin/ansible-test
 TEST_FLAGS ?=
@@ -94,6 +154,7 @@ clean:
 	rm -f ./docs/man/man1/*
 	@echo "Cleaning up output from test runs"
 	rm -rf test/test_data
+	rm -rf shippable/
 	rm -rf logs/
 	rm -rf .cache/
 	rm -f test/units/.coverage*
@@ -101,6 +162,9 @@ clean:
 	find test/ -type f -name '*.retry' -delete
 	@echo "Cleaning up symlink cache"
 	rm -f SYMLINK_CACHE.json
+	@echo "Cleaning up Debian building stuff"
+	rm -rf debian
+	rm -rf deb-build
 	rm -rf docs/json
 	rm -rf docs/js
 	@echo "Cleaning up docsite"
@@ -142,13 +206,108 @@ sdist_upload: clean docs
 changelog:
 	PYTHONPATH=./lib antsibull-changelog release -vv --use-ansible-doc && PYTHONPATH=./lib antsibull-changelog generate -vv --use-ansible-doc
 
+.PHONY: debian
+debian: sdist
+	@for DIST in $(DEB_DIST) ; do \
+	    mkdir -p deb-build/$${DIST} ; \
+	    tar -C deb-build/$${DIST} -xvf dist/$(NAME)-$(VERSION).tar.gz ; \
+	    cp -a packaging/debian deb-build/$${DIST}/$(NAME)-$(VERSION)/ ; \
+        sed -ie "s|%VERSION%|$(DEB_VERSION)|g;s|%RELEASE%|$(DEB_RELEASE)|;s|%DIST%|$${DIST}|g;s|%DATE%|$(DEB_DATE)|g" deb-build/$${DIST}/$(NAME)-$(VERSION)/debian/changelog ; \
+	done
+
+.PHONY: deb
+deb: deb-src
+	@for DIST in $(DEB_DIST) ; do \
+	    PBUILDER_OPTS="$(PBUILDER_OPTS) --distribution $${DIST} --basetgz $(PBUILDER_CACHE_DIR)/$${DIST}-$(PBUILDER_ARCH)-base.tgz --buildresult $(CURDIR)/deb-build/$${DIST}" ; \
+	    $(PBUILDER_BIN) create $${PBUILDER_OPTS} --othermirror "deb http://archive.ubuntu.com/ubuntu $${DIST} universe" ; \
+	    $(PBUILDER_BIN) update $${PBUILDER_OPTS} ; \
+	    $(PBUILDER_BIN) build $${PBUILDER_OPTS} deb-build/$${DIST}/$(NAME)_$(DEB_VERSION)-$(DEB_RELEASE)~$${DIST}.dsc ; \
+	done
+	@echo "#############################################"
+	@echo "Ansible DEB artifacts:"
+	@for DIST in $(DEB_DIST) ; do \
+	    echo deb-build/$${DIST}/$(NAME)_$(DEB_VERSION)-$(DEB_RELEASE)~$${DIST}_amd64.changes ; \
+	done
+	@echo "#############################################"
+
+# Build package outside of pbuilder, with locally installed dependencies.
+# Install BuildRequires as noted in packaging/debian/control.
+.PHONY: local_deb
+local_deb: debian
+	@for DIST in $(DEB_DIST) ; do \
+	    (cd deb-build/$${DIST}/$(NAME)-$(VERSION)/ && $(DEBUILD) -b) ; \
+	done
+	@echo "#############################################"
+	@echo "Ansible DEB artifacts:"
+	@for DIST in $(DEB_DIST) ; do \
+	    echo deb-build/$${DIST}/$(NAME)_$(DEB_VERSION)-$(DEB_RELEASE)~$${DIST}_amd64.changes ; \
+	done
+	@echo "#############################################"
+
+.PHONY: deb-src
+deb-src: debian
+	@for DIST in $(DEB_DIST) ; do \
+	    (cd deb-build/$${DIST}/$(NAME)-$(VERSION)/ && $(DEBUILD) -S) ; \
+	done
+	@echo "#############################################"
+	@echo "Ansible DEB artifacts:"
+	@for DIST in $(DEB_DIST) ; do \
+	    echo deb-build/$${DIST}/$(NAME)_$(DEB_VERSION)-$(DEB_RELEASE)~$${DIST}_source.changes ; \
+	done
+	@echo "#############################################"
+
+.PHONY: deb-upload
+deb-upload: deb
+	@for DIST in $(DEB_DIST) ; do \
+	    $(DPUT_BIN) $(DPUT_OPTS) $(DEB_PPA) deb-build/$${DIST}/$(NAME)_$(DEB_VERSION)-$(DEB_RELEASE)~$${DIST}_amd64.changes ; \
+	done
+
+.PHONY: deb-src-upload
+deb-src-upload: deb-src
+	@for DIST in $(DEB_DIST) ; do \
+	    $(DPUT_BIN) $(DPUT_OPTS) $(DEB_PPA) deb-build/$${DIST}/$(NAME)_$(DEB_VERSION)-$(DEB_RELEASE)~$${DIST}_source.changes ; \
+	done
+
+.PHONY: epub
+epub:
+	(cd docs/docsite/; CPUS=$(CPUS) $(MAKE) epub)
+
+# for arch or gentoo, read instructions in the appropriate 'packaging' subdirectory directory
+.PHONY: webdocs
+webdocs:
+	(cd docs/docsite/; CPUS=$(CPUS) $(MAKE) docs)
+
+.PHONY: coredocs
+coredocs:
+	(cd docs/docsite/; CPUS=$(CPUS) $(MAKE) coredocs)
+
+.PHONY: gettext
+gettext:
+	(cd docs/docsite/; CPUS=$(CPUS) $(MAKE) gettext)
+
+.PHONY: generate-po
+generate-po:
+	(cd docs/docsite/; CPUS=$(CPUS) LANGUAGES=$(LANGUAGES) $(MAKE) generate-po)
+
+.PHONY: needs-translation
+needs-translation:
+	(cd docs/docsite/; CPUS=$(CPUS) LANGUAGES=$(LANGUAGES) $(MAKE) needs-translation)
+
+.PHONY: linkcheckdocs
+linkcheckdocs:
+	(cd docs/docsite/; CPUS=$(CPUS) $(MAKE) linkcheckdocs)
+
 .PHONY: generate_rst
 generate_rst: lib/ansible/cli/*.py
 	mkdir -p ./docs/man/man1/ ; \
-	$(PYTHON) $(GENERATE_CLI) --template-file=docs/templates/man.j2 --output-dir=docs/man/man1/ --output-format man lib/ansible/cli/*.py
+	$(GENERATE_CLI) --template-file=docs/templates/man.j2 --output-dir=docs/man/man1/ --output-format man lib/ansible/cli/*.py
+
 
 docs: generate_rst
 	$(MAKE) $(MANPAGES)
 
+.PHONY: alldocs
+alldocs: docs webdocs
+
 version:
 	@echo $(VERSION)

README.rst

@@ -7,13 +7,13 @@ Ansible
 Ansible is a radically simple IT automation system. It handles
 configuration management, application deployment, cloud provisioning,
 ad-hoc task execution, network automation, and multi-node orchestration. Ansible makes complex
-changes like zero-downtime rolling updates with load balancers easy. More information on the Ansible `website <https://ansible.com/>`_.
+changes like zero-downtime rolling updates with load balancers easy. More information on `the Ansible website <https://ansible.com/>`_.
 
 Design Principles
 =================
 
-*  Have an extremely simple setup process with a minimal learning curve.
-*  Manage machines quickly and in parallel.
+*  Have a dead-simple setup process with a minimal learning curve.
+*  Manage machines very quickly and in parallel.
 *  Avoid custom-agents and additional open ports, be agentless by
    leveraging the existing SSH daemon.
 *  Describe infrastructure in a language that is both machine and human
@@ -32,6 +32,8 @@ You can install a released version of Ansible with ``pip`` or a package manager.
 `installation guide <https://docs.ansible.com/ansible/latest/installation_guide/intro_installation.html>`_ for details on installing Ansible
 on a variety of platforms.
 
+Red Hat offers supported builds of `Ansible Engine <https://www.ansible.com/ansible-engine>`_.
+
 Power users and developers can run the ``devel`` branch, which has the latest
 features and fixes, directly. Although it is reasonably stable, you are more likely to encounter
 breaking changes when running the ``devel`` branch. We recommend getting involved

bin/ansible

@@ -1 +1 @@
-../lib/ansible/cli/adhoc.py
+../lib/ansible/cli/scripts/ansible_cli_stub.py

bin/ansible-config

@@ -1 +1 @@
-../lib/ansible/cli/config.py
+ansible

bin/ansible-console

@@ -1 +1 @@
-../lib/ansible/cli/console.py
+ansible

bin/ansible-doc

@@ -1 +1 @@
-../lib/ansible/cli/doc.py
+ansible

bin/ansible-galaxy

@@ -1 +1 @@
-../lib/ansible/cli/galaxy.py
+ansible

bin/ansible-inventory

@@ -1 +1 @@
-../lib/ansible/cli/inventory.py
+ansible

bin/ansible-playbook

@@ -1 +1 @@
-../lib/ansible/cli/playbook.py
+ansible

bin/ansible-pull

@@ -1 +1 @@
-../lib/ansible/cli/pull.py
+ansible

bin/ansible-test

@@ -1 +1 @@
-../test/lib/ansible_test/_util/target/cli/ansible_test_cli_stub.py
+../test/lib/ansible_test/_data/cli/ansible_test_cli_stub.py

bin/ansible-vault

@@ -1 +1 @@
-../lib/ansible/cli/vault.py
+ansible

changelogs/CHANGELOG-v2.11.rst

@@ -0,0 +1,951 @@
+========================================================
+ansible-core 2.11 "Hey Hey, What Can I Do" Release Notes
+========================================================
+
+.. contents:: Topics
+
+
+v2.11.12
+========
+
+Release Summary
+---------------
+
+| Release Date: 2022-05-23
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Bugfixes
+--------
+
+- Prevent losing unsafe on results returned from lookups (https://github.com/ansible/ansible/issues/77535)
+- plugin loader will now load config data for plugin by name instead of by file to avoid issues with the same file being loaded under different names (fqcn + short name).
+
+v2.11.11
+========
+
+Release Summary
+---------------
+
+| Release Date: 2022-04-25
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Bugfixes
+--------
+
+- Ansible.ModuleUtils.SID - Use user principal name as is for lookup in the ``Convert-ToSID`` function - https://github.com/ansible/ansible/issues/77316
+- ansible-test - Update ``rstcheck`` constraint from ``>= 3.3.1`` to ``== 3.3.1`` to avoid breaking changes in newer releases.
+- winrm - Ensure ``kinit`` is run with the same ``PATH`` env var as the Ansible process
+
+v2.11.10
+========
+
+Release Summary
+---------------
+
+| Release Date: 2022-03-28
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Bugfixes
+--------
+
+- AnsiballZ - Ensure we use the full python package in the module cache filename to avoid a case where ``collections:`` is used to execute a module via short name, where the short name duplicates another module from ``ansible.builtin`` or another collection that was executed previously.
+- Fix collection filter/test plugin redirects (https://github.com/ansible/ansible/issues/77192).
+- ansible-galaxy collection verify - display files/directories not included in the FILES.json as modified content.
+- ansible-test - Fix an integration test traceback that occurs when some tests use cloud plugins, but all tests for at least one cloud plugin are skipped. (https://github.com/ansible/ansible/issues/75711)
+- extend timeout for ansible-galaxy when communicating with the galaxy server api, and apply it to all interactions with the api
+
+v2.11.9
+=======
+
+Release Summary
+---------------
+
+| Release Date: 2022-02-28
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Minor Changes
+-------------
+
+- ansible-test - Integration and unit tests no longer install ``cryptography`` if it is already installed.
+- ansible-test - Update the ``galaxy`` test plugin to get its container from a copy on quay.io.
+- ansible-test - Update the ``openshift`` test plugin to get its container from a copy on quay.io.
+- junit callback - Add support for replacing the directory portion of out-of-tree relative task paths with a placeholder.
+
+Bugfixes
+--------
+
+- ansible-test - Add constraint for ``MarkupSafe < 2.1.0`` on Python 3.6 and later. This avoids installation failures when old ``pip`` or ``setuptools`` packages are present.
+- ansible-test - Install ``pyopenssl`` when installing ``cryptography`` to make sure a compatible version is used (except for sanity tests).
+- ansible-test - Replace the directory portion of out-of-tree paths in JUnit files from integration tests with the ``out-of-tree:`` prefix.
+- ansible-test - Update unit tests to use the ``--forked`` option instead of the deprecated ``--boxed`` option.
+- ansible-test - Use relative paths in JUnit files generated during integration test runs.
+- cleaning facts will now only warn about the variable name and not post the content, which can be undesireable to disclose
+- correctly inherit vars from parent in block (https://github.com/ansible/ansible/issues/75286).
+- gather_facts action now handles the move of base connection plugin types into collections to add/prevent subset argument correctly
+- junit callback - Fix traceback during automatic fact gathering when using relative paths.
+- junit callback - Fix unicode error when handling non-ASCII task paths.
+- ssh connection now uses more correct host source as play_context can ignore loop/delegation variations.
+
+v2.11.8
+=======
+
+Release Summary
+---------------
+
+| Release Date: 2022-01-31
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Minor Changes
+-------------
+
+- service_facts now handles more states/statuses from systemd and in a more reliable way (failed, not-found, masked).
+
+Bugfixes
+--------
+
+- ansible-galaxy collection build - Ignore any existing ``MANIFEST.json`` and ``FILES.json`` in the root directory when building a collection.
+- ansible-test - Fix traceback in the ``validate-modules`` sanity test when testing an Ansible module without any callables.
+- backwards compatiblity copy of doc fragment action_common_attributes
+- default callback - Ensure we compare FQCN also in lockstep logic, to ensure using the FQCN of a strategy plugin triggers the correct behavior in the default callback plugin. (https://github.com/ansible/ansible/issues/76782)
+- include_vars, properly initialize variable as there is corner case in which it can end up referenced and not defined
+- ssh connection - properly quote controlpersist path given by user to avoid issues with spaces and other characters
+- ssh connection avoid parsing ssh cli debug lines as they can match expected output at high verbosities.
+- unarchive - Fix zip archive file listing that caused issues with content postprocessing (https://github.com/ansible/ansible/issues/76067).
+
+v2.11.7
+=======
+
+Release Summary
+---------------
+
+| Release Date: 2021-12-06
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Bugfixes
+--------
+
+- Ansible.ModuleUtils.LinkUtil - Ignore the ``LIB`` environment variable when loading the ``LinkUtil`` code
+- ``action_groups`` - Alias short names in collection action groups to FQCR of the owning collection (https://github.com/ansible/ansible/issues/76164)
+- hostname, fix module example using `strategy` instead of `use`.
+- set ssh host_key_checking defaults to True, restoring original behaviour (https://github.com/ansible/ansible/issues/75168)
+- validate_argument_spec - Skip suboption validation if the top level option is an invalid type (https://github.com/ansible/ansible/issues/75612).
+
+v2.11.6
+=======
+
+Release Summary
+---------------
+
+| Release Date: 2021-10-11
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Minor Changes
+-------------
+
+- ansible-galaxy - Non-HTTP exceptions from Galaxy servers are now a warning and only fatal if the collection to download|install|verify is not available from any of the servers (https://github.com/ansible/ansible/issues/75443).
+
+Security Fixes
+--------------
+
+- Do not include params in exception when a call to ``set_options`` fails. Additionally, block the exception that is returned from being displayed to stdout. (CVE-2021-3620)
+
+Bugfixes
+--------
+
+- PowerShell - Ignore the ``LIB`` environment variable when compiling C# Ansible code
+- ansible-galaxy - Fix handling HTTP exceptions from Galaxy servers. Continue to the next server in the list until the collection is found.
+- ansible-test pslint - Fix error when encountering validation results that are highly nested - https://github.com/ansible/ansible/issues/74151
+- config - use ``callbacks_enabled`` instead ``callback_enabled`` in a deprecated message (https://github.com/ansible/ansible/issues/70028).
+- netconf - catch and handle exception to prevent stack trace when running in FIPS mode
+- roles - fix unexpected ``AttributeError`` when an empty ``argument_specs.yml`` is present (https://github.com/ansible/ansible/pull/75604).
+
+v2.11.5
+=======
+
+Release Summary
+---------------
+
+| Release Date: 2021-09-13
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Bugfixes
+--------
+
+- Fix templating task action with host-specific vars (https://github.com/ansible/ansible/issues/75568)
+- Since ansible/2.11 doc site was removed, the current relative messages point to a 404 url, this fixes it by chainging the target to ansible-core/2.11
+- ansible-galaxy - Fix a bug with build_ignore when installing collections from source (https://github.com/ansible/ansible/issues/75528).
+- ansible-galaxy - Improve error message from dependency resolution when a candidate has inconsistent requirements (https://github.com/ansible/ansible/issues/75139).
+- ansible-playbook, more robust handling of --list-hosts and undefined vars in hosts keyword.
+- command module, clarify order of remove/creates checks.
+- command module, correctly handles chdir to symlinks.
+- command module, move to standarized messages in 'msg' vs abusing 'stdout'.
+- command module, now all options work in ad-hoc execution.
+- command module, now always returns what we documented as 'returns always'.
+- get_bin_path, clarify with quotes what the missing required executable is.
+- make previous versions compatible we new attributres w/o implementing them.
+- paramiko_ssh - mark connection as connected when ``_connect()`` is called (https://github.com/ansible/ansible/issues/74081)
+- setup module should now not truncate hpux interface names.
+- validate_argument_spec, correct variable precedence and merge method and add missing examples
+- variable manager, avoid sourcing delegated variables when no inventory hostname is present. This affects scenarios like syntax check and imports.
+
+v2.11.4
+=======
+
+Release Summary
+---------------
+
+| Release Date: 2021-08-16
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Bugfixes
+--------
+
+- Fix ``when`` evaluation on Native Jinja and Python 3.10.
+- Jinja2 globals should be accessible even when importing a template without the context (https://github.com/ansible/ansible/issues/75371)
+- ansible-test - add packaging python module to ``ansible-doc`` sanity test requirements.
+- ansible-test validate-modules - correctly validate positional parameters to ``AnsibleModules`` (https://github.com/ansible/ansible/pull/75332).
+- cli defaults for ssh args set to None as '' was bypassing normal default.
+- dnf module - Use all components of a package name to determine if it's installed (https://github.com/ansible/ansible/issues/75311).
+- do not trigger interpreter discovery in the forced_local module path as they should use the ansible playbook python unless otherwise configured.
+- find action, correctly convert path to text when warning about skiping.
+- remote tmpdir permissions - fix type error in macOS chmod ACL fallback (https://github.com/ansible/ansible/pull/74613).
+- template - ensure Jinja2 overrides from template header are used (https://github.com/ansible/ansible/issues/75275)
+- unarchive - move failure for missing binary to ``can_handle_archive()`` rather than ``__init__()``
+
+v2.11.3
+=======
+
+Release Summary
+---------------
+
+| Release Date: 2021-07-19
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Minor Changes
+-------------
+
+- ansible-test - aws creates and exposes a new tiny_prefix variable to provide a shorter prefix for the AWS tests.
+
+Bugfixes
+--------
+
+- Add unicode support to ``ansible-inventory`` CLI (https://github.com/ansible/ansible/issues/57378)
+- Ensure we get full path for extra vars into cliargs to avoid realpath issues after initial load.
+- ansible-doc - in text output, do not show empty ``version_added_collection`` values (https://github.com/ansible/ansible/pull/74999).
+- ansible-test - restrict ``packaging`` to ``< 21.0`` for Python ``< 3.6`` (https://github.com/ansible/ansible/pull/75186).
+- command - remove unreachable code path when trying to convert the value for ``chdir`` to bytes (https://github.com/ansible/ansible/pull/75036)
+- module_common - handle exception when multiple workers try to create the cache directory
+- roles - make sure argspec validation task templates suboptions (https://github.com/ansible/ansible/issues/75070).
+- slurp - improve the logic in the error handling and remove ``os.stat()`` call (https://github.com/ansible/ansible/pull/75038)
+- ssh_connection - rename ``retries`` to ``reconnection_retries`` to avoid conflicts with task vars (https://github.com/ansible/ansible/issues/75142).
+- ssh_connection - set the default for ``reconnection_retries`` back to ``0`` (https://github.com/ansible/ansible/issues/75142).
+- task_executor/ssh_connection - use the ``retries`` value from ``ssh_connection`` settings, not the default from the ``Task`` field attributes (https://github.com/ansible/ansible/issues/75142).
+
+v2.11.2
+=======
+
+Release Summary
+---------------
+
+| Release Date: 2021-06-22
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Security Fixes
+--------------
+
+- templating engine fix for not preserving usnafe status when trying to preserve newlines. CVE-2021-3583
+
+Bugfixes
+--------
+
+- AnsibleModule.set_mode_if_different - don't check file existence when check_mode is activated (https://github.com/ansible/ansible/issues/61185).
+- Apply ``display_failed_stderr`` callback option on loop item results. (https://github.com/ansible/ansible/issues/74864)
+- Avoid task executor from ending early as vars can come from delegated to host.
+- ansible-pull - update documentation for ``--directory`` option to clarify path must be absolute.
+- config, ensure 'quoted' lists from ini or env do not take the quotes literally as part of the list item.
+- gather_facts, package, service - fix using module_defaults for the modules in addition to the action plugins. (https://github.com/ansible/ansible/issues/72918)
+- psrp - Always cleanup the last run pipeline if a second pipeline is invoked to avoid violating any resource limits.
+- psrp - Fix error when resetting a connection that was initialised but not connected - (https://github.com/ansible/ansible/issues/74092).
+- psrp - Try to clean up any server-side resources when resetting a connection.
+- roles - make sure argspec validation task is tagged with ``always`` (https://github.com/ansible/ansible/pull/74994).
+- slurp - Fix error messages for unreadable files and directories (https://github.com/ansible/ansible/issues/67340).
+- slurp - handle error when ``path`` is a directory and not a file (https://github.com/ansible/ansible/pull/74930).
+- ssh connection - fix interaction between transfer settings options.
+- subversion - fix stack trace when getting information about the repository (https://github.com/ansible/ansible/issues/36498)
+- version test - improve error message when an empty version is provided
+
+v2.11.1
+=======
+
+Release Summary
+---------------
+
+| Release Date: 2021-05-24
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Minor Changes
+-------------
+
+- ansible adhoc, clarified the help to some options, also added some comments to code.
+- command - update the user warning message to point out command name (https://github.com/ansible/ansible/pull/74475).
+
+Bugfixes
+--------
+
+- Add RockyLinux to fact gathering (https://github.com/ansible/ansible/pull/74530).
+- Improve resilience of ``ansible-galaxy collection`` by increasing the page size to make fewer requests overall and retrying queries with a jittered exponential backoff when rate limiting HTTP codes (520 and 429) occur. (https://github.com/ansible/ansible/issues/74191)
+- Prevent ``ansible_failed_task`` from further templating (https://github.com/ansible/ansible/issues/74036)
+- Remove 'default' from ssh plugin as we want to rely on default from ssh itself or ssh/config.
+- The error message about the failure to import a ``gpg`` key by the ``apt_key`` module was incorrect (https://github.com/ansible/ansible/issues/74423).
+- ansible-test - Avoid publishing the port used by the ``pypi-test-container`` since it is only accessed by other containers. This avoids issues when trying to run tests in parallel on a single host.
+- ansible-test - Fix docker container IP address detection. The ``bridge`` network is no longer assumed to be the default.
+- ansible-test - Use documented API to retrieve build information from Azure Pipelines.
+- ansible.builtin.cron - Keep non-empty crontabs, when removing cron jobs (https://github.com/ansible/ansible/pull/74497).
+- ansible.utils.encrypt now handles missing or unusable 'crypt' library.
+- ansible_test - add constraint for ``MarkupSafe`` (https://github.com/ansible/ansible/pull/74666)
+- apt_key - Binary GnuPG keys downloaded via URLs were corrupted so GnuPG could not import them (https://github.com/ansible/ansible/issues/74424).
+- become - fix a regression on Solaris where chmod can return 5 which we interpret as auth failure and stop trying become tmpdir permission fallbacks
+- become - work around setfacl not existing on modern Solaris (and possibly failing on some filesystems even when it does exist)
+- callback default, now uses task delegate_to instead of delegate vars to display delegate to host
+- callbacks, restores missing delegate_vars
+- correct doc links for become on warnings over world readable settings.
+- correctly use world readable setting since old constant is not 'settable' anymore.
+- facts - detect homebrew installed at /opt/homebrew/bin/brew
+- filter plugins - patch new versions of Jinja2 to prevent warnings/errors on renamed filter decorators (https://github.com/ansible/ansible/issues/74667)
+- get_url - Fixed checksum validation for binary files (leading asterisk) in checksum files (https://github.com/ansible/ansible/pull/74502).
+- hostname - Add Rocky Linux support
+- ini lookup - handle errors for duplicate keys and missing sections (https://github.com/ansible/ansible/issues/74601)
+- interpreter discovery - Debian 8 and lower will avoid unsupported Python3 version in interpreter discovery
+- pause - ensure control characters are always set to an appropriate value (https://github.com/ansible/ansible/issues/73264)
+- playbook loaded from collection subdir now does not ignore subdirs.
+- plugin config now allows list type options to have multiple valid choices (#74225).
+- replace - better handling of file operation exceptions (https://github.com/ansible/ansible/pull/74686).
+- roles - allow for role arg specs in new meta file (https://github.com/ansible/ansible/issues/74525).
+- service - compare version without LooseVersion API (https://github.com/ansible/ansible/issues/74488).
+
+v2.11.0
+=======
+
+Release Summary
+---------------
+
+| Release Date: 2021-04-26
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Major Changes
+-------------
+
+- A collection can be reinstalled with new version requirements without using the ``--force`` flag. The collection's dependencies will also be updated if necessary with the new requirements. Use ``--upgrade`` to force transitive dependency updates.
+- AnsibleModule - use ``ArgumentSpecValidator`` class for validating argument spec and remove private methods related to argument spec validation. Any modules using private methods should now use the ``ArgumentSpecValidator`` class or the appropriate validation function.
+- Declared ``resolvelib >= 0.5.3, < 0.6.0`` a direct dependency of
+  ansible-core. Refs:
+  - https://github.com/sarugaku/resolvelib
+  - https://pypi.org/p/resolvelib
+  - https://pradyunsg.me/blog/2020/03/27/pip-resolver-testing
+- It became possible to install Ansible Collections from local folders and namespaces folder similar to SCM structure with multiple collections.
+- It became possible to upgrade Ansible collections from Galaxy servers using the ``--upgrade`` option with ``ansible-galaxy collection install``.
+- Support for role argument specification validation at role execution time. When a role contains an argument spec, an implicit validation task is inserted at the start of role execution.
+- add ``ArgumentSpecValidator`` class for validating parameters against an argument spec outside of ``AnsibleModule`` (https://github.com/ansible/ansible/pull/73335)
+- ansible-test - Tests run with the ``centos6`` and ``default`` test containers now use a PyPI proxy container to access PyPI when Python 2.6 is used. This allows tests running under Python 2.6 to continue functioning even though PyPI is discontinuing support for non-SNI capable clients.
+
+Minor Changes
+-------------
+
+- Add ``--format`` CLI option to ``ansible-galaxy collection list`` which allows for ``human`` (default), ``yaml``, or ``json``. (https://github.com/ansible/ansible/pull/73474)
+- Add an example for using var in with_sequence (https://github.com/ansible/ansible/issues/68836).
+- Add new rolespec_validate option to the import/include_role modules do allow disabling of the implicit role arg validation task on a per-role basis.
+- Add option to pass extra vars to ansible-inventory
+- Add path of collection location in Ansible CLI version info.
+- Add standard Python 2/3 compatibility boilerplate to setup script, module_utils and docs_fragments which were missing them.
+- Add support for `argument_specs` data in role metadata.
+- Add support for datetime.date object type in module result (https://github.com/ansible/ansible/issues/70583).
+- Add which conditional is being evaluated at each step when debugging.
+- Add yum/dnf version comparison documentation for package install
+- Added NO_COLOR environment var to ansible color configuration, allowing it to integrate with existing convention.
+- Added name of aliases in user error (https://github.com/ansible/ansible/issues/58752).
+- Added support for GSSAPI/Kerberos authentication with ``urls.py`` that is used by ``uri`` and ``get_url``.
+- Added support for specify custom credentials for GSSAPI authentication.
+- Allow an attribute to be passed to the min and max filters with Jinja 2.10+
+- Allow for the skipped filter to be used on a registered looped task results. (https://github.com/ansible/ansible/issues/16949)
+- Allow inventory plugins access to extra vars by default
+- Allow unsafe_writes to be set on target via env var, for those targets that need a blanket setting.
+- Also added extra vars cli option to console CLI.
+- AnsiballZ - Improve performance of ``ModuleDepFinder`` by using faster lookups and reducing the object types that are walked while looking for ``import`` statements. (https://github.com/ansible/ansible/pull/70475)
+- CLI - Specify jinja version in ``--version`` output
+- CLI - Specify whether PyYAML includes libyaml support in version output
+- CLI version displays clarified as core version
+- Callbacks - Migrate more places in the ``TaskExecutor`` to sending callbacks directly over the queue, instead of sending them as ``TaskResult`` and short circuiting in the Strategy to send the callback. This enables closer to real time callbacks of retries and loop results (https://github.com/ansible/ansible/issues/73899)
+- Collection routing: Cisco NSO content from community.network migrated to cisco.nso (https://github.com/ansible/ansible/pull/73046).
+- Collection routing: DellEMC content from community.general migrated to dellemc.openmanage (https://github.com/ansible/ansible/pull/73046).
+- Collection routing: FortiOS content from community.network migrated to community.fortios (https://github.com/ansible/ansible/pull/73046).
+- Collection routing: Google content from community.general migrated to community.google (https://github.com/ansible/ansible/pull/73046).
+- Collection routing: Hashi Vault content from community.general migrated to community.hashi_vault (https://github.com/ansible/ansible/pull/73046).
+- Collection routing: Hetzner Robot content from community.general migrated to community.hrobot (https://github.com/ansible/ansible/pull/73046).
+- Collection routing: KubeVirt content from community.general migrated to community.kubevirt (https://github.com/ansible/ansible/pull/73046).
+- Collection routing: OC content from community.general migrated to community.okd (https://github.com/ansible/ansible/pull/73046).
+- Collection routing: PostgreSQL content from community.general migrated to community.postgresql (https://github.com/ansible/ansible/pull/73046).
+- Collection routing: RouterOS content from community.network migrated to community.routeros (https://github.com/ansible/ansible/pull/73046).
+- Collection routing: docker content from community.general migrated to community.docker (https://github.com/ansible/ansible/pull/73046).
+- Controller - Add warning for Ansible 2.11 when running a Python version older than Python 3.8 to inform users that 2.12 will only support Python 3.8 and newer on the controller. Starting with Ansible 2.11, the project will only be packaged for Python 3.8 and newer.
+- Discourage the use of 'hexdigits' in password lookup, as it distorts expected entropy.
+- Enable extra vars for inventory plugin options
+- Errors - Ensure that errors passed with ``orig_exc`` include the context of that exception (https://github.com/ansible/ansible/issues/68605)
+- Filters - Add new ``split`` filter for splitting strings
+- Fixed ansible-doc to not substitute for words followed by parenthesis.  For instance, ``IBM(International Business Machines)`` will no longer be substituted with a link to a non-existent module. https://github.com/ansible/ansible/pull/71070
+- Force the template module to use non-native Jinja2 (https://github.com/ansible/ansible/issues/46169)
+- Internal config entries will not be documented, to mark an entry as internal it must start with `_`.
+- Interpreter Discovery - Add Python 3.8 and Python 3.9 to the fallback list
+- Minor code cleanup in plugin loader.
+- Module API - libselinux-python is no longer required for basic module API selinux operations (affects core modules assemble, blockinfile, copy, cron, file, get_url, lineinfile, setup, replace, unarchive, uri, user, yum_repository)
+- Module API - new module_respawn API allows modules that need to run under a specific Python interpreter to respawn in place under that interpreter
+- Module iptables multiport destination support added (https://github.com/ansible/ansible/pull/72928)
+- Module iptables set/ipset support added (https://github.com/ansible/ansible/pull/72984)
+- New 'timeout' feature added to adhoc and console CLIs, corresponding to the recent 'timeout' task keyword.
+- New virtualization facts, ``virtualization_tech_guest`` and ``virtualization_tech_host`` now allow for conveying when a system is a host or guest of multiple virtualization technologies.
+- Now 'choices' keyword in config definitions also restricts valid values for the entry.
+- Refactored ``ansible-galaxy collection [download|install|list|verify]`` CLI subcommands with the public interface kept intact.
+- Restructured _fixup_perms2() in ansible.plugins.action to make it more linear
+- Shadow prompt input to ansible-vault encrypt-string unless the ``--show-input`` flag is set
+- Switch to hashlib.sha256() for ansible-test to allow for FIPs mode.
+- TOML inventory plugin is no longer in preview status
+- Templar - reduce the complexity of ``Templar._lookup`` (https://github.com/ansible/ansible/pull/73277)
+- The ``csvfile`` lookup plugin now uses ``parse_kv()`` internally. As a result, multi-word search keys can now be passed.
+- The ``csvfile`` lookup plugin's documentation has been fixed; it erroneously said that the delimiter could be ``t`` which was never true. We now accept ``\t``, however, and the error in the documentation has been fixed to note that.
+- The constructed inventory plugin has new option to force using vars plugins on previouslly processed inventory sources.
+- The find module is now more specific about the reasons it skips candidate files.
+- The logging functionality in module_utils.basic now returns a nicer error when it falls back to syslog but ends up getting a TypeError thrown back.
+- The new dependency resolver prefers ``MANIFEST.json`` over ``galaxy.yml`` if it exists in the target directory.
+- The plugin loader now keeps track of the collection where a plugin was resolved to, in particular whether the plugin was loaded from ansible-core's internal paths (``ansible.builtin``) or from user-supplied paths (no collection name).
+- Toggle allowing usage of extra_vars in compose
+- When connecting as an unprivileged user, and becoming an unprivileged user, we now fall back to also trying ``chmod +a`` which works on macOS and makes use of ACLs.
+- allow tree callback plugin to be configurable, for use with playbooks.
+- ansible-doc - In Windows setup steps, ``ExecutionPolicy`` should be restored to default value ``RemoteSigned`` (https://github.com/ansible/ansible/pull/72993).
+- ansible-doc - provide ``has_action`` field in JSON output for modules. That information is currently only available in the text view (https://github.com/ansible/ansible/pull/72359).
+- ansible-doc has new option to show keyword documentation.
+- ansible-doc will now format, ``L()``, ``R()``, and ``HORIZONTALLINE`` in plugin docs just as the website docs do.  https://github.com/ansible/ansible/pull/71070
+- ansible-galaxy - Add installation successful message
+- ansible-galaxy - Added caching mechanisms when retrieving collection info to speed up installs and downloads
+- ansible-galaxy - Change the output verbosity level of the download message from 3 to 0 (https://github.com/ansible/ansible/issues/70010)
+- ansible-galaxy - Ensure ``get_collection_versions`` returns an empty list when a collection does not exist for consistency across API versions.
+- ansible-galaxy - find any collection dependencies in the globally configured Galaxy servers and not just the server the parent collection is from.
+- ansible-galaxy CLI - ``collection verify`` command now exits with a non-zero exit code on verification failure
+- ansible-galaxy CLI - ``collection verify`` command now supports a ``--offline`` option for local-only verification
+- ansible-test - A warning is no longer emitted when a ``pip*`` or ``python*`` binary is found without a matching couterpart.
+- ansible-test - Add ``macos/10.15`` as a supported value for the ``--remote`` option.
+- ansible-test - Add a ``--docker-network`` option to choose the network for running containers when using the ``--docker`` option.
+- ansible-test - Add constraint for ``decorator`` for Python versions prior to 3.5.
+- ansible-test - Add support for running tests on Fedora 33 (https://github.com/ansible/ansible/pull/72861).
+- ansible-test - Added Ubuntu 20.04 LTS image to the default completion list
+- ansible-test - Added a ``--export`` option to the ``ansible-test coverage combine`` command to facilitate multi-stage aggregation of coverage in CI pipelines.
+- ansible-test - Added the ``-remote rhel/7.9`` option to run tests on RHEL 7.9
+- ansible-test - Allow custom ``--remote-stage`` options for development and testing.
+- ansible-test - CentOS 8 container is now 8.2.2004 (https://github.com/ansible/distro-test-containers/pull/45).
+- ansible-test - Changed the internal name of the custom plugin used to identify use of unwanted imports and functions.
+- ansible-test - Cleaned up code to resolve warnings and errors reported by PyCharm.
+- ansible-test - Code cleanup in the ``import`` sanity test.
+- ansible-test - Code cleanup in the internal logic for code coverage collection of PowerShell modules.
+- ansible-test - Collections can now specify pip constraints for unit and integration test requirements using ``tests/unit/constraints.txt`` and ``tests/integration/constraints.txt`` respectively.
+- ansible-test - Containers used with the ``--remote`` option have been updated to version 1.29.0 to include the latest Ansible requirements.
+- ansible-test - Files used to track remote instances no longer have a region suffix.
+- ansible-test - Fix ``ansible-test coverage`` reporting sub-commands (``report``, ``html``, ``xml``) on Python 2.6.
+- ansible-test - Fix container hostname/IP discovery for the ``acme`` test plugin.
+- ansible-test - FreeBSD 11.4 and 12.2 provisioning can now be used with the ``--python 3.8`` option.
+- ansible-test - FreeBSD instances provisioned with ``--remote`` now make ``libyaml`` available for use with PyYAML installation.
+- ansible-test - Generation of an ``egg-info`` directory, if needed, is now done after installing test dependencies and before running tests. When running from an installed version of ``ansible-test`` a temporary directory is used to avoid permissions issues. Previously it was done before installing test dependencies and adjacent to the installed directory.
+- ansible-test - Implemented CloudStack test container selection by ENV variable `ANSIBLE_CLOUDSTACK_CONTAINER` with a default to `quay.io/ansible/cloudstack-test-container:1.4.0`.
+- ansible-test - Improved handling of minimum Python version requirements for sanity tests. Supported versions are now included in warning messages displayed when tests are skipped.
+- ansible-test - More sanity test requirements have been pinned to specific versions to provide consistent test results.
+- ansible-test - Most sanity test specific ``pip`` constraints are now used only when running sanity tests. This should reduce conflicts with ``pip`` requirements and constraints when testing collections.
+- ansible-test - Most sanity tests are now skipped on Python 3.5 and earlier with a warning. Previously this was done for Python 2.7 and earlier.
+- ansible-test - Now supports freebsd/11.4 remote (https://github.com/ansible/ansible/issues/48782).
+- ansible-test - Now supports freebsd/12.2 remote (https://github.com/ansible/ansible/issues/72366).
+- ansible-test - OpenSuse container now uses Leap 15.2 (https://github.com/ansible/distro-test-containers/pull/48).
+- ansible-test - Pin the ``virtualenv`` version used for ``--remote`` pip installs to the latest version supported by Python 2.x, which is version 16.7.10.
+- ansible-test - Provisioning of RHEL instances now includes installation of pinned versions of ``packaging`` and ``pyparsing`` to match the downstream vendored versions.
+- ansible-test - RHEL 8.2+ provisioning can now be used with the ``--python 3.8`` option, taking advantage of the Python 3.8 AppStream.
+- ansible-test - Raise the number of bytes scanned by ansible-test to determine if a file is binary to 4096.
+- ansible-test - Refactor code for installing ``cryptography`` to allow re-use in the future.
+- ansible-test - Refactor code to remove unused logic for obsolete support of multiple provisioning endpoints.
+- ansible-test - Remove ``pytest < 6.0.0`` constraint for managed installations on Python 3.x now that pytest 6 is supported.
+- ansible-test - Remove em dash from the Pytest configuration file in order to be readable on systems where preferred encoding is ASCII. (https://github.com/ansible/ansible/issues/71739)
+- ansible-test - Remove outdated ``--docker`` completion entries: fedora30, fedora31, ubuntu1604
+- ansible-test - Remove outdated ``--remote`` completion entries: freebsd/11.1, freebsd/12.1, osx/10.11, macos/10.15, rhel/7.6, rhel/7.8, rhel/8.1, rhel/8.2
+- ansible-test - Remove outdated ``--windows`` completion entries: 2008, 2008-R2
+- ansible-test - Remove the discontinued ``us-east-2`` choice from the ``--remote-aws-region`` option.
+- ansible-test - Remove unused ``--remote`` completion entry: power/centos/7
+- ansible-test - Removed ``pip`` constraints related to integration tests that have been moved to collections. This should reduce conflicts with ``pip`` requirements and constraints when testing collections.
+- ansible-test - Removed the obsolete ``--remote-aws-region`` provisioning option.
+- ansible-test - Removed the obsolete ``tower`` test plugin for testing Tower modules.
+- ansible-test - Removed unused provisioning code and cleaned up remote provider management logic.
+- ansible-test - Rename internal functions to match associated constant names that were previously updated.
+- ansible-test - Reorganize internal ``pylint`` configuration files for easier comparison and maintenance.
+- ansible-test - Report the correct line number in the ``yamllint`` sanity test when reporting ``libyaml`` parse errors in module documentation.
+- ansible-test - Request remote resources by provider name for all provider types.
+- ansible-test - Show a warning when the obsolete ``--remote-aws-region`` option is used.
+- ansible-test - Silence ``pip`` warnings about Python 3.5 being EOL when installing requirements.
+- ansible-test - Support custom remote endpoints with the ``--remote-endpoint`` option.
+- ansible-test - The ``--remote`` option no longer pre-installs the ``virtualenv`` module on Python 3.x instances. The Python built-in ``venv`` module should be used instead.
+- ansible-test - The ``default`` container for both collections and core have been updated to versions 2.11.0 and 1.9.0 respectively.
+- ansible-test - The ``pylint`` sanity test is now skipped with a warning on Python 3.9 due to unresolved upstream regressions.
+- ansible-test - The ``pylint`` sanity test is now supported on Python 3.8.
+- ansible-test - The ``rstcheck`` sanity test is no longer used for collections, but continues to be used for ansible-core.
+- ansible-test - The generated ``resource_prefix`` variable now meets the host name syntax requirements specified in RFC 1123 and RFC 952. The value used for local tests now places the random number before the hostname component, rather than after. If the resulting value is too long, it will be truncated.
+- ansible-test - Ubuntu containers as well as ``default-test-container`` and ``ansible-base-test-container`` are now slightly smaller due to apt cleanup (https://github.com/ansible/distro-test-containers/pull/46).
+- ansible-test - Update ``pylint`` and its dependencies to the latest available versions to support Python 3.9.
+- ansible-test - Update built-in service endpoints for the ``--remote`` option.
+- ansible-test - Update distribution test containers from version 2.0.1 to 2.0.2.
+- ansible-test - Update the Ansible Core and Ansible Collection default test containers to 3.2.0 and 3.2.2 respectively.
+- ansible-test - Updated the default test containers to version 3.1.0.
+- ansible-test - Upgrade ansible-runner version used in compatibility tests, remove some tasks that were only needed with older versions, and skip in python2 because ansible-runner is soon dropping it.
+- ansible-test - Use new endpoint for Parallels based instances with the ``--remote`` option.
+- ansible-test - ``default-test-container`` and ``ansible-base-test-container`` now use Python 3.9.0 instead of 3.9.0rc1.
+- ansible-test - add https endpoint for ansible-test
+- ansible-test - add macOS 11.1 as a remote target (https://github.com/ansible/ansible/pull/72622)
+- ansible-test - add the collection plugin directories ``plugin_utils`` and ``sub_plugins`` to list of plugin types. This ensures such plugins are tested for the ``import`` sanity test (https://github.com/ansible/ansible/pull/73599).
+- ansible-test - centos6 end of life - container image updated to point to vault base repository (https://github.com/ansible/distro-test-containers/pull/54)
+- ansible-test - centos6 image now has multiple fallback yum repositories for CentOS Vault.
+- ansible-test - default container now uses default-test-container 2.7.0 and ansible-base-test-container 1.6.0. This brings in Python 3.9.0rc1 for testing.
+- ansible-test - now makes a better attempt to support podman when calling ``docker images`` and asking for JSON format.
+- ansible-test - python-cryptography is now bounded at <3.2, as 3.2 drops support for OpenSSL 1.0.2 upon which some of our CI infrastructure still depends.
+- ansible-test - remote macOS instances no longer install ``virtualenv`` during provisioning
+- ansible-test - the ACME test container was updated, it now supports external account creation and has a basic OCSP responder (https://github.com/ansible/ansible/pull/71097, https://github.com/ansible/acme-test-container/releases/tag/2.0.0).
+- ansible-test - the ``import`` sanity test now also tries to import all non-module and non-module_utils Python files in ``lib/ansible/`` resp. ``plugins/`` (https://github.com/ansible/ansible/pull/72497).
+- ansible-test - virtualenv helper scripts now prefer ``venv`` on Python 3 over ``virtualenv``
+- ansible-test Now supports RHEL 8.3
+- ansible-test pylint - ensure that removal collection version numbers conform to the semantic versioning specification at https://semver.org/ (https://github.com/ansible/ansible/pull/71679).
+- ansible-test pylint sanity test - stop ignoring ``used-before-assignment`` errors (https://github.com/ansible/ansible/pull/73639).
+- ansible-test runtime-metadata - compare deprecation and tombstone versions to the current version to ensure that they are correct (https://github.com/ansible/ansible/pull/72625).
+- ansible-test runtime-metadata - ensure that removal collection version numbers conform to the semantic versioning specification at https://semver.org/ (https://github.com/ansible/ansible/pull/71679).
+- ansible-test runtime-metadata - ensure that the tombstone removal date is not in the future (https://github.com/ansible/ansible/pull/72625).
+- ansible-test runtime-metadata - validate removal version numbers, and check removal dates more strictly (https://github.com/ansible/ansible/pull/71679).
+- ansible-test validate-modules - ensure that removal collection version numbers and version_added collection version numbers conform to the semantic versioning specification at https://semver.org/ (https://github.com/ansible/ansible/pull/71679).
+- ansible-test validate-modules - no longer assume that ``default`` for ``type=bool`` options is ``false``, as the default is ``none`` and for some modules, ``none`` and ``false`` mean different things (https://github.com/ansible/ansible/issues/69561).
+- ansible-test validate-modules - option names that seem to indicate they contain secret information that should be marked ``no_log=True`` are now flagged in the validate-modules sanity test. False positives can be marked by explicitly setting ``no_log=False`` for these options in the argument spec. Please note that many false positives are expected; the assumption is that it is by far better to have false positives than false negatives (https://github.com/ansible/ansible/pull/73508).
+- ansible-test validate-modules - validate removal version numbers (https://github.com/ansible/ansible/pull/71679).
+- ansible.utils.encrypt now returns `AnsibleError` instead of crypt.crypt's `OSError` on Python 3.9
+- apt - module now works under any supported Python interpreter
+- apt_repository - module now works under any supported Python interpreter
+- callback plugins - ``meta`` tasks now get sent to ``v2_playbook_on_task_start``. Explicit tasks are always sent. Plugins can opt in to receiving implicit ones.
+- callbacks - Add feature allowing forks to send callback events (https://github.com/ansible/ansible/issues/14681)
+- conditionals - change the default of CONDITIONAL_BARE_VARS to False (https://github.com/ansible/ansible/issues/70682).
+- config - more types are now automatically coerced to string when ``type: str`` is used and the value is parsed as a different type
+- constructed - Add a toggle to allow the separator to be omitted if no prefix has been provided.
+- constructed inventory plugin - Sanitize group names created from the ``groups`` option silently.
+- create ``get_type_validator`` standalone function and move that functionality out of ``AnsibleModule`` (https://github.com/ansible/ansible/pull/72667)
+- create ``get_unsupported_parameters`` validation function (https://github.com/ansible/ansible/pull/72447/files)
+- debconf - add a note about no_log=True since module might expose sensitive information to logs (https://github.com/ansible/ansible/issues/32386).
+- default callback - add ``show_task_path_on_failure`` option to display file and line number of tasks only on failed tasks when running at normal verbosity level (https://github.com/ansible/ansible/issues/64625)
+- default callback - task name is now shown for ``include_tasks`` when using the ``free`` strategy (https://github.com/ansible/ansible/issues/71277).
+- default callback - task name is now shown for ``include_tasks`` when using the ``linear`` strategy with ``ANSIBLE_DISPLAY_SKIPPED_HOSTS=0``.
+- default_callback - moving 'check_mode_markers' documentation in default_callback doc_fragment (https://github.com/ansible-collections/community.general/issues/565).
+- distribution - add facts about Amazon Linux Distribution facts (https://github.com/ansible/ansible/issues/73742).
+- distribution - add support for DragonFly distribution (https://github.com/ansible/ansible/issues/43739).
+- distribution - added distribution fact and hostname support for Parrot OS (https://github.com/ansible/ansible/pull/69158).
+- distribution - handle NetBSD OS Family (https://github.com/ansible/ansible/issues/43739).
+- distribution facts - ``distribution_release`` is now ``"Stream"`` on CentOS Stream (https://github.com/ansible/ansible/issues/73027).
+- dnf - Add nobest option (https://github.com/ansible/ansible/issues/69983)
+- dnf - When ``state: absent``, package names are now matched similarly to how the ``dnf`` CLI matches them (https://github.com/ansible/ansible/issues/72809).
+- dnf - module now works under any supported Python interpreter
+- dnf - now shows specific package changes (installations/removals) under ``results`` in check_mode. (https://github.com/ansible/ansible/issues/66132)
+- facts - ``/dev/kvm`` is now consulted in Linux virtualization facts, and the host is considered a KVM host if this file exists and none of the pre-existing checks matched.
+- facts - add new fact ``date_time['tz_dst']``, which returns the daylight saving timezone (https://github.com/ansible/ansible/issues/69004).
+- facts - add uptime to openbsd
+- find module - Now has a ``read_whole_file`` boolean parameter which allows for reading the whole file and doing an ``re.search()`` regex evaluation on it when searching using the ``contains`` option. This allows (for example) for ensuring the very end of the file matches a pattern.
+- galaxy - add documentation about galaxy parameters in examples/ansible.cfg (https://github.com/ansible/ansible/issues/68402).
+- galaxy - handle token as dict while loading from yaml file (https://github.com/ansible/ansible/issues/70887).
+- get_url - allow checksum urls to point to file:// resources, moving scheme test to function
+- get_url - handle same SHA sum for checksum file (https://github.com/ansible/ansible/issues/71420).
+- git - add ``single_branch`` parameter (https://github.com/ansible/ansible/pull/28465)
+- hash filter - fail when unsupported hash type is passed as an argument (https://github.com/ansible/ansible/issues/70258)
+- inventory cache - do not show a warning when the cache file does not (yet) exist.
+- iptables - add a note about ipv6-icmp in protocol parameter (https://github.com/ansible/ansible/issues/70905).
+- iptables - fixed get_chain_policy API (https://github.com/ansible/ansible/issues/68612).
+- iptables - reorder comment postition to be at the end (https://github.com/ansible/ansible/issues/71444).
+- lineinfile - add search_string parameter for non-regexp searching (https://github.com/ansible/ansible/issues/70470)
+- linux facts - Add additional check to ensure 'container' virtual fact gets added to guest_tech when appropriate (https://github.com/ansible/ansible/pull/71385)
+- meta - now include a ``skip_reason`` when skipped (https://github.com/ansible/ansible/pull/71355).
+- module payload builder - module_utils imports in any nested block (eg, ``try``, ``if``) are treated as optional during module payload builds; this allows modules to implement runtime fallback behavior for module_utils that do not exist in older versions of Ansible.
+- module_utils - ``get_file_attributes()`` now takes an optional ``include_version`` boolean parameter. When ``True`` (default), the file's version/generation number is included in the result (but requires ``lsattr -v`` to work on the target platform).
+- now !unsafe works on all types of data, not just strings, even recursively for mappings and sequences.
+- package_facts - module support for apt and rpm now works under any supported Python interpreter
+- pipe lookup - update docs for Popen with shell=True usages (https://github.com/ansible/ansible/issues/70159).
+- plugin examples - Allow non-YAML examples, so that examples for plugins like the INI and TOML inventory plugins can be directly represented (https://github.com/ansible/ansible/pull/71184)
+- plugin option validation - now the option type ``dict``/``dictionary`` is also validated by the config manager (https://github.com/ansible/ansible/pull/71928).
+- reboot - add ``reboot_command`` parameter to allow specifying the command used to reboot the system (https://github.com/ansible/ansible/issues/51359)
+- remove ``excommunicate`` debug command from AnsiballZ
+- selinux - return selinux_getpolicytype facts correctly.
+- service_facts - return service state information on AIX.
+- service_facts - return service state information on OpenBSD.
+- setup - allow list of filters (https://github.com/ansible/ansible/pull/68551).
+- setup - fix distribution facts for Older Amazon Linux with ``/etc/os-release`` (https://github.com/ansible/ansible/issues/73946).
+- setup.py - Declare that Python 3.9 is now supported (https://github.com/ansible/ansible/pull/72861).
+- setup.py - Skip doing conflict checks for ``sdist`` and ``egg_info`` commands (https://github.com/ansible/ansible/pull/71310)
+- subelements - clarify the lookup plugin documentation for parameter handling (https://github.com/ansible/ansible/issues/38182).
+- subversion - ``validate_certs`` option, which, when true, will avoid passing ``--trust-server-cert`` to ``svn`` commands (https://github.com/ansible/ansible/issues/22599).
+- unarchive - Add support for .tar.zst (zstd compression) (https://github.com/ansible/ansible/pull/73265).
+- unarchive - add ``RETURN`` documentation (https://github.com/ansible/ansible/issues/67445).
+- unarchive - add ``include`` parameter to allow extracting specific files from an archive (https://github.com/ansible/ansible/pull/40522)
+- update sphinx to 2.1.2 and rstcheck to 3.3.1 for building documentation.
+- uri - add ``ca_path`` argument to allow specification of a CA certificate (https://github.com/ansible/ansible/pull/71979).
+- user - add new parameters ``password_expire_max`` and ``password_expire_min`` for controlling password expiration (https://github.com/ansible/ansible/issues/68775)
+- varnames lookup plugin - Fixed grammar error in exception message when the plugin is given a non-string term.
+- vault - Provide better error for single value encrypted values to indicate the file, line, and column of the errant vault (https://github.com/ansible/ansible/issues/72276)
+- version test - Add semantic version functionality
+- virtual facts - containerd cgroup is now recognized as container tech (https://github.com/ansible/ansible/issues/66304).
+- virtualization facts - Detect ``vdsmd`` in addition to ``vdsm`` when trying to detect RHEV hosts. (https://github.com/ansible/ansible/issues/66147)
+- winrm - Added ``ansible_winrm_kinit_args`` that can be used to control the args that are sent to the ``kinit`` call for Kerberos authentication.
+- yum - module now works under any supported Python interpreter
+- yum_repository - added boolean option module_hotfixes which allows to enable functionality for dnf.
+
+Breaking Changes / Porting Guide
+--------------------------------
+
+- Made SCM collections be reinstalled regardless of ``--force`` being present.
+- NetBSD virtualization facts (specifically ``ansible_virtualization_type``) now returns a more accurate value by checking the value of the ``machdep.hypervisor`` ``sysctl`` key. This change is breaking because in some cases previously, we would erroneously report ``xen`` even when the target is not running on Xen. This prevents that behavior in most cases. (https://github.com/ansible/ansible/issues/69352)
+- Replaced the in-tree dependency resolver with an external implementation that pip >= 20.3 uses now by default — ``resolvelib``. (https://github.com/ansible/ansible/issues/71784)
+- The ``meta`` module now supports tags for user-defined tasks. Internal ``meta`` tasks continue to always run. (https://github.com/ansible/ansible/issues/64558)
+- ansible-galaxy login command has been removed (see https://github.com/ansible/ansible/issues/71560)
+
+Deprecated Features
+-------------------
+
+- Starting in 2.14, shell and command modules will no longer have the option to warn and suggest modules in lieu of commands. The ``warn`` parameter to these modules is now deprecated and defaults to ``False``. Similarly, the ``COMMAND_WARNINGS`` configuration option is also deprecated and defaults to ``False``. These will be removed and their presence will become an error in 2.14.
+- apt_key - the parameter ``key`` does not have any effect, has been deprecated and will be removed in ansible-core version 2.14 (https://github.com/ansible/ansible/pull/70319).
+- psrp - Set the minimum version of ``pypsrp`` to ``0.4.0``.
+
+Removed Features (previously deprecated)
+----------------------------------------
+
+- Removed `SharedPluginLoaderObj` class from ansible.plugins.strategy. It was deprecated in favor of using the standard plugin loader.
+- Removed `_get_item()` alias from callback plugin base class which had been deprecated in favor of `_get_item_label()`.
+- The "user" parameter was previously deprecated and is now removed in favor of "scope"
+- The deprecated ``ansible.constants.BECOME_METHODS`` has been removed.
+- The deprecated ``ansible.constants.get_config()`` has been removed.
+- The deprecated ``ansible.constants.mk_boolean()`` has been removed.
+- `with_*` loops are no longer optimized for modules whose `name` parameters can take lists (mostly package managers). Use `name` instead of looping over individual names with `with_items` and friends.
+
+Security Fixes
+--------------
+
+- **security issue** - Mask default and fallback values for ``no_log`` module options (CVE-2021-20228)
+- **security issue** - copy - Redact the value of the no_log 'content' parameter in the result's invocation.module_args in check mode. Previously when used with check mode and with '-vvv', the module would not censor the content if a change would be made to the destination path. (CVE-2020-14332)
+- Sanitize no_log values from any response keys that might be returned from the uri module (CVE-2020-14330).
+- dnf - Previously, regardless of the ``disable_gpg_check`` option, packages were not GPG validated. They are now. (CVE-2020-14365)
+
+Bugfixes
+--------
+
+- A handler defined within a role will now search handlers subdir for included tasks (issue https://github.com/ansible/ansible/issues/71222).
+- ALLOW_WORLD_READABLE_TMP, switched to 'moved' message as 'deprecation' is misleading since config settings still work w/o needing change.
+- ANSIBLE_COLLECTIONS_PATHS - remove deprecation so that users of Ansible 2.9 and 2.10+ can use the same var when specifying a collection path without a warning.
+- Added unsafe_writes test.
+- Address compat with rpmfluff-0.6 for integration tests
+- Address the deprecation of the use of stdlib distutils in packaging. It's a short-term hotfix for the problem (https://github.com/ansible/ansible/issues/70456, https://github.com/pypa/setuptools/issues/2230, https://github.com/pypa/setuptools/commit/bd110264)
+- Adjust various hard-coded action names to also include their ``ansible.builtin.`` and ``ansible.legacy.`` prefixed version (https://github.com/ansible/ansible/issues/71817, https://github.com/ansible/ansible/issues/71818, https://github.com/ansible/ansible/pull/71824).
+- Allow TypeErrors on Undefined variables in filters to be handled or deferred when processing for loops.
+- Allow `~` to be present in file names in galaxy roles (https://github.com/ansible/ansible/issues/72966)
+- Always mention the name of the deprecated or tombstoned plugin in routing deprecation/tombstone messages (https://github.com/ansible/ansible/pull/73059).
+- Ansible output now uses stdout to determine column width instead of stdin
+- AnsibleModule - added arg ``ignore_invalid_cwd`` to ``AnsibleModule.run_command()``, to control its behaviour when ``cwd`` is invalid. (https://github.com/ansible/ansible/pull/72390)
+- Apply ``_wrap_native_text`` only for builtin filters specified in STRING_TYPE_FILTERS.
+- Automatically remove async cache files for polled async tasks that have completed (issue https://github.com/ansible/ansible/issues/73206).
+- Be smarter about collection paths ending with ansible_collections, emulating a-galaxy behaviour. Issue 72628
+- CLI - Restore git information in version output when running from source
+- Collection callbacks were ignoring options and rules for stdout and adhoc cases.
+- Collections - Ensure ``action_loader.get`` is called with ``collection_list`` to properly find collections when ``collections:`` search is specified (https://github.com/ansible/ansible/issues/72170)
+- Command module now returns stdout & stderr if executable is missing or an unknown error occurs
+- ConfigManager - Normalize ConfigParser between Python2 and Python3 to for handling comments (https://github.com/ansible/ansible/issues/73709)
+- Continue execution when  'flatten' filter when it hits a None/null value as part of the list.
+- Correct the inventory source error parse handling, specifically make the config INVENTORY_ANY_UNPARSED_IS_FAILED work as expected.
+- Correctly set template_path and template_fullpath for usage in template lookup and action plugins.
+- Deal with failures when sorting JSON and you have incompatible key types.
+- Display - Use wcswidth to calculate printable width of a text string (https://github.com/ansible/ansible/issues/63105)
+- Enabled unsafe_writes for get_url which was ignoring the paramter.
+- Ensure Ansible's unique filter preserves order (https://github.com/ansible/ansible/issues/63417)
+- Ensure if a traceback halts ``strategy.run`` that we still attempt to clean up (https://github.com/ansible/ansible/issues/23958)
+- Ensure password passed in by -k is used on delegated hosts that do not have ansible_password set
+- Ensure the correct options are used when ssh executables are used that don't match ssh executable names.
+- Facts collection - get serial number of NVMe device without sg_inq (https://github.com/ansible/ansible/issues/66663).
+- Fix --list-tasks format `role_name : task_name` when task name contains the role name. (https://github.com/ansible/ansible/issues/72505)
+- Fix ``RecursionError`` when templating large vars structures (https://github.com/ansible/ansible/issues/71920)
+- Fix ``delegate_facts: true`` when ``ansible_python_interpreter`` is not set. (https://github.com/ansible/ansible/issues/70168)
+- Fix adding unrelated candidate names to the plugin loader redirect list.
+- Fix an exit code for a non-failing playbook (https://github.com/ansible/ansible/issues/71306)
+- Fix ansible-galaxy collection list to show collections in site-packages (https://github.com/ansible/ansible/issues/70147)
+- Fix bytestring vs string comparison in module_utils.basic.is_special_selinux_path() so that special-cased filesystems which don't support SELinux context attributes still allow files to be manipulated on them. (https://github.com/ansible/ansible/issues/70244)
+- Fix execution of the meta tasks 'clear_facts', 'clear_host_errors', 'end_play', 'end_host', and 'reset_connection' when the CLI flag '--flush-cache' is provided.
+- Fix fileglob bug where it could return different results for different order of parameters (https://github.com/ansible/ansible/issues/72873).
+- Fix incorrect msg in the results dict in loops
+- Fix incorrect re-run of roles with tags (https://github.com/ansible/ansible/issues/69848)
+- Fix incorrect variable scoping when using ``import with context`` in Jinja2 templates. (https://github.com/ansible/ansible/issues/72615)
+- Fix jsonfile cache plugin option '_uri' to be a type path instead of a string. (https://github.com/ansible/ansible/issues/38002)
+- Fix notifying handlers via `role_name : handler_name` when handler name contains the role name. (https://github.com/ansible/ansible/issues/70582)
+- Fix parsing of values when using empty string as a key (https://github.com/ansible/ansible/issues/57132)
+- Fix statistics reporting when rescue block contains another block (issue https://github.com/ansible/ansible/issues/61253).
+- Fix to previous deprecation change (#70504) which caused command warning deprecation to show in all cases, even when not specified by the user.
+- Fixed TypeError instancemethod expecting at least 2 arguments for apt_repository(issue https://github.com/ansible/ansible/issues/69308, PR https://github.com/ansible/ansible/pull/69463)
+- Fixed issue when `netstat` is either missing or doesn't have execution permissions leading to incorrect command being executed.
+- Fixes ``ansible-galaxy role info`` to support multiple roles on the command line (https://github.com/ansible/ansible/pull/70148)
+- Fixes ansible-test traceback when plugin author is not a string or a list of strings (https://github.com/ansible/ansible/pull/70507)
+- Handle more varnames that can create conflicts, expand a function in general, handle jinja2 globals in particular (https://github.com/ansible/ansible/issues/41955).
+- INTERPRETER_PYTHON_DISTRO_MAP - prefer ``/usr/libexec/platform-python`` on ``oraclelinux 8`` when other pythons are present.
+- Improve Ansible config deprecations to show the source of the deprecation (ansible-core). Also remove space before a comma in config deprecations (https://github.com/ansible/ansible/pull/72697).
+- Improved/fixed regular expressions in ``validate-modules/validate_modules/schema.py`` and ``utils/collection_loader/_collection_finder.py`` (https://github.com/ansible/ansible/pull/73577).
+- Includes - Explicitly get the include task, and not assume it is the parent (https://github.com/ansible/ansible/issues/65710)
+- InventoryManager - Fix unhandled exception when given limit file was actually a directory.
+- InventoryManager - Fix unhandled exception when inventory directory was empty or contained empty subdirectories (https://github.com/ansible/ansible/issues/73658).
+- JSON Encoder - Ensure we treat single vault encrypted values as strings (https://github.com/ansible/ansible/issues/70784)
+- Lookup user by UID in password database if login name is not found (https://github.com/ansible/ansible/issues/17029)
+- OpenBSD module_utils - update sysctl variable name
+- Pass expression in angle-bracket notation as filename argument to a ``compile()`` built-in function, so that Python debuggers do not try to parse it as filename.
+- Pass the connection's timeout to connection plugins instead of the task's timeout.
+- Provide more information in AnsibleUndefinedVariable (https://github.com/ansible/ansible/issues/55152)
+- Python module_utils finder - refactor logic to eliminate many corner cases, remove recursion, fix base module_utils redirections
+- Remove an embedded function from RoleMixin and add tests for it (https://github.com/ansible/ansible/pull/72754).
+- Remove the warning displayed when validating the arg spec of a role with dependencies and add it to the documentation.
+- Restore the ability for changed_when/failed_when to function with group_by (#70844).
+- Restored unsafe_writes functionality which was being skipped.
+- Restructured pipelining settings to be at the connection plugins leaving base config as global and for backwards compatiblity.
+- SSH plugin - Improve error message when ssh client is not found on the host
+- Setup virtualization_facts - add RHV and oVirt type. This change will fully work for VMs in clusters at cluster level 4.4 or newer (https://github.com/ansible/ansible/pull/72876).
+- Skip invalid collection names when listing in ansible-doc instead of throwing exception. Issue#72257
+- Skip literal_eval for string filters results in native jinja. (https://github.com/ansible/ansible/issues/70831)
+- Stop adding the connection variables to the output results
+- Strategy - When building the task in the Strategy from the Worker, ensure it is properly marked as finalized and squashed. Addresses an issue with ``ansible_failed_task``. (https://github.com/ansible/ansible/issues/57399)
+- Suppress warning when user directory used in --playbook-dir option with ansible-inventory command (https://github.com/ansible/ansible/issues/65262).
+- TOML inventory - Ensure we register dump functions for ``AnsibleUnsafe`` to support dumping unsafe values. Note that the TOML format has no functionality to mark that the data is unsafe for re-consumption. (https://github.com/ansible/ansible/issues/71307)
+- Terminal plugins - add "\e[m" to the list of ANSI sequences stripped from device output
+- The ``docker`` and ``k8s`` action groups / module default groups now also support the moved modules in `community.docker <https://galaxy.ansible.com/community/docker>`_, `community.kubevirt <https://github.com/ansible-collections/community.kubevirt>`_, `community.okd <https://galaxy.ansible.com/community/okd>`_, and `kubernetes.core <https://galaxy.ansible.com/kubernetes/core>`_ (https://github.com/ansible/ansible/pull/72428).
+- The ``flush()`` method of ``CachePluginAdjudicator`` now calls the plugin's ``flush()`` method instead of iterating over the keys that the adjudicator knows about and deleting those from the cache. (https://github.com/ansible/ansible/issues/68770)
+- The `ansible_become` value was not being treated as a boolean value when set in an INI format inventory file (fixes bug https://github.com/ansible/ansible/issues/70476).
+- The machine-readable changelog ``changelogs/changelog.yaml`` is now contained in the release.
+- Try to avoid kernel 'blocking' state on reading files while fact gathering.
+- Updated docs and added warning on max_fail_percentage and free strategy usage. fixes issue 16666.
+- VariableManager - Add the 'vars' key before getting delegated variables (https://github.com/ansible/ansible/issues/71092).
+- Vault - Allow single vault encrypted values to be used directly as module parameters. (https://github.com/ansible/ansible/issues/68275)
+- WorkerProcess - Implement workaround for stdout deadlock in multiprocessing shutdown to avoid process hangs.
+- WorkerProcess - Python 3.5 fix for workaround for stdout deadlock in multiprocessing shutdown to avoid process hangs. (https://github.com/ansible/ansible/issues/74149)
+- [set_fact] Corrected and expanded documentation as well as now raise errors that were previously ignored.
+- account for bug in Python 2.6 that occurs during interpreter shutdown to avoid stack trace
+- action plugins - change all action/module delegations to use FQ names while allowing overrides (https://github.com/ansible/ansible/issues/69788)
+- add AlmaLinux to fact gathering (https://github.com/ansible/ansible/pull/73458)
+- add constraints file for ``ansible_runner`` test since an update to ``psutil`` is now causing test failures
+- add magic/connection vars updates from delegated host info.
+- add support for alpine linux 'apk' package manager in package_facts
+- allow become method 'su' to work on 'local' connection by allocating a fake tty.
+- ansible-console - Ctrl+C (in a task) abort current task, and put you back on prompt (this behavior doesn't change) (ditto)
+- ansible-console - Ctrl+C (on prompt) used to exit the shell, unlike most shells, it should just reset the current line (ie. abort it and spawn a new prompt) (https://github.com/ansible/ansible/issues/68529)
+- ansible-console - Ctrl+D (on prompt) now exit the shell, this is the expected behavior in a shell (cf bash, sh, zsh, ipython, ...) (ditto)
+- ansible-console - add more documentation, specifically on various commands[1] (https://github.com/ansible/ansible/issues/72195)
+- ansible-console - fixes few strings' typos
+- ansible-console - remove useless and poorly formatted comment section (replaced with [1])
+- ansible-doc - account for an empty ``meta/main.yml`` file when displaying role information (https://github.com/ansible/ansible/pull/73590)
+- ansible-doc - collection name for plugin top-level deprecation was not inserted when deprecating by version (https://github.com/ansible/ansible/pull/70344).
+- ansible-doc - improve error message in text formatter when ``description`` is missing for a (sub-)option or a return value or its ``contains`` (https://github.com/ansible/ansible/pull/70046).
+- ansible-doc - improve man page formatting to avoid problems when YAML anchors are used (https://github.com/ansible/ansible/pull/70045).
+- ansible-doc - include the collection name in the text output (https://github.com/ansible/ansible/pull/70401).
+- ansible-doc - plugin option deprecations now also get ``collection_name`` added (https://github.com/ansible/ansible/pull/71735).
+- ansible-doc - properly show plugin name when ``name:`` is used instead of ``<plugin_type>:`` (https://github.com/ansible/ansible/pull/71966).
+- ansible-galaxy - Cache the responses for available collection versions after getting all pages. (https://github.com/ansible/ansible/issues/73071)
+- ansible-galaxy - Instead of assuming the first defined server is galaxy, filter based on the servers that support the v1 API, and return the first of those (https://github.com/ansible/ansible/issues/65440)
+- ansible-galaxy - Use ``sys.exit`` instead of ``exit`` when reporting an error for the removed login command.
+- ansible-galaxy - correct ``collections-path`` command line argument (https://github.com/ansible/ansible/issues/73127)
+- ansible-galaxy - fixed galaxy role init command (https://github.com/ansible/ansible/issues/71977).
+- ansible-galaxy collection download - fix downloading tar.gz files and collections in git repositories (https://github.com/ansible/ansible/issues/70429)
+- ansible-galaxy collection install - fix fallback mechanism if the AH server did not have the collection requested - https://github.com/ansible/ansible/issues/70940
+- ansible-galaxy download - fix bug when downloading a collection in a SCM subdirectory
+- ansible-pull - Run all playbooks that when multiple are supplied via the command line (https://github.com/ansible/ansible/issues/72708)
+- ansible-test - Add ``pytest < 6.0.0`` constraint for managed installations on Python 3.x to avoid issues with relative imports.
+- ansible-test - Add a ``six < 1.14.0`` constraint for Python 2.6.
+- ansible-test - Always connect additional Docker containers to the network used by the current container (if any).
+- ansible-test - Always map ``/var/run/docker.sock`` into test containers created by the ``--docker`` option if the docker host is not ``localhost``.
+- ansible-test - Attempt to detect the Docker hostname instead of assuming ``localhost``.
+- ansible-test - Avoid using ``/tmp`` to resolve occasional failures starting tests with the ``--docker`` option.
+- ansible-test - Change classification using ``--changed`` now consistently handles common configuration files for supported CI providers.
+- ansible-test - Change detection now properly resolves relative imports instead of treating them as absolute imports.
+- ansible-test - Correctly detect changes in a GitHub pull request when running on Azure Pipelines.
+- ansible-test - Correctly detect running in a Docker container on Azure Pipelines.
+- ansible-test - Do not try to validate PowerShell modules ``setup.ps1``, ``slurp.ps1``, and ``async_status.ps1``
+- ansible-test - Prefer container IP at ``.NetworkSettings.Networks.{NetworkName}.IPAddress`` over ``.NetworkSettings.IPAddress``.
+- ansible-test - Running tests using an installed version of ``ansible-test`` against one Python version from another no longer fails due to a missing ``egg-info`` directory. This could occur when testing plugins which import ``pkg_resources``.
+- ansible-test - Running tests using an installed version of ``ansible-test`` no longer generates an error attempting to create an ``egg-info`` directory when an existing one is not found in the expected location. This could occur if the existing ``egg-info`` directory included a Python version specifier in the name.
+- ansible-test - Skip installing requirements if they are already installed.
+- ansible-test - Symbolic links are no longer used to inject ``python`` into the environment, since they do not work reliably in all cases. Instead, the existing Python based exec wrapper is always used.
+- ansible-test - Temporarily limit ``cryptography`` to versions before 3.4 to enable tests to function.
+- ansible-test - The ``--export`` option for ``ansible-test coverage`` is now limited to the ``combine`` command. It was previously available for reporting commands on which it had no effect.
+- ansible-test - The ``--raw`` option for ``ansible-test shell --remote`` now uses ``sh`` for the shell instead of ``bash``, which may not be present.
+- ansible-test - The ``--remote`` option has been updated for Python 2.7 to work around breaking changes in the newly released ``get-pip.py`` bootstrapper.
+- ansible-test - The ``--remote`` option has been updated to use a versioned ``get-pip.py`` bootstrapper to avoid issues with future releases.
+- ansible-test - The ``ansible-doc`` sanity test now works for ``netconf`` plugins.
+- ansible-test - The ``ansible-test coverage combine`` option ``--export`` now exports relative paths. This avoids loss of coverage data when aggregating across systems with different absolute paths. Paths will be converted back to absolute when generating reports.
+- ansible-test - The ``changelog`` sanity test has been updated to ensure ``rstcheck`` does not load the ``sphinx`` module.
+- ansible-test - The ``cs`` and ``openshift`` test plugins now search for containers on the current network instead of assuming the ``bridge`` network.
+- ansible-test - The ``resource_prefix`` variable provided to tests running on Azure Pipelines is now converted to lowercase to match other CI providers.
+- ansible-test - Unified SSH key management for all instances created with the ``--remote`` or ``--docker`` options.
+- ansible-test - Using the ``--remote`` option on Azure Pipelines now works from a job running in a container.
+- ansible-test - ``cryptography`` is now limited to versions prior to 3.2 only when an incompatible OpenSSL version (earlier than 1.1.0) is detected
+- ansible-test - add constraint for ``cffi`` to prevent failure on systems with older versions of ``gcc`` (https://foss.heptapod.net/pypy/cffi/-/issues/480)
+- ansible-test - convert target paths to unicode on Python 2 to avoid ``UnicodeDecodeError`` (https://github.com/ansible/ansible/issues/68398, https://github.com/ansible/ansible/pull/72623).
+- ansible-test - ensure the correct unit test target is given when the ``__init__.py`` file is modified inside the connection plugins directory
+- ansible-test - ensure unit test paths for connection and inventory plugins are correctly identified for collections (https://github.com/ansible/ansible/issues/73876).
+- ansible-test - improve classification of changes to ``.gitignore``, ``COPYING``, ``LICENSE``, ``Makefile``, and all files ending with one of ``.in`, ``.md`, ``.rst``, ``.toml``, ``.txt`` in the collection root directory (https://github.com/ansible/ansible/pull/72353).
+- ansible-test - integration and unit test change detection now works for filter, lookup and test plugins
+- ansible-test now always uses the ``--python`` option for ``virtualenv`` to select the correct interpreter when creating environments with the ``--venv`` option
+- ansible-test sanity changelog test - bump dependency on antsibull-changelog to 0.9.0 so that `fragments that add new plugins or objects <https://github.com/ansible-community/antsibull-changelog/blob/main/docs/changelogs.rst#adding-new-roles-playbooks-test-and-filter-plugins>`_ will not fail validation (https://github.com/ansible/ansible/pull/73428).
+- ansible-test units - fixed collection location code to work under pytest >= 6.0.0
+- ansible-test validate-modules - ``version_added`` on module level was not validated for modules in collections (https://github.com/ansible/ansible/pull/70869).
+- ansible-test validate-modules - return correct error codes ``option-invalid-version-added`` resp. ``return-invalid-version-added`` instead of the wrong error ``deprecation-either-date-or-version`` when an invalid value of ``version_added`` is specified for an option or a return value (https://github.com/ansible/ansible/pull/70869).
+- ansible-test validate-modules - when a module uses ``add_file_common_args=True`` and does not use a keyword argument for ``argument_spec`` in ``AnsibleModule()``, the common file arguments were not considered added during validation (https://github.com/ansible/ansible/pull/72334).
+- ansible_pkg_mgr fact - now correctly returns ``atomic_container`` when run on "RHEL for Edge" images and Fedora/RHEL/CentOS Atomic Host (https://github.com/ansible/ansible/issues/73084).
+- api - time.clock is removed in Python 3.8, add backward compatible code (https://github.com/ansible/ansible/issues/70649).
+- apt - add ``fail_on_autoremove`` param to apt module to avoid unintended package removals (https://github.com/ansible/ansible/issues/63231)
+- apt - fix policy_rc_d parameter throwing an exception when restoring original file (https://github.com/ansible/ansible/issues/66211)
+- apt - include exception message from apt python library in error output
+- apt_key - Specifying ``file`` as mutually exclusive with ``data``, ``keyserver``, ``url`` (https://github.com/ansible/ansible/pull/70492).
+- apt_repository - fixes ``mode`` doc to remove ineffective default (https://github.com/ansible/ansible/pull/70319).
+- argument spec validation - fix behavior of ``apply_defaults=True`` when an empty dictionary is specified for such an option (https://github.com/ansible/ansible/pull/74029).
+- assemble - fix decrypt argument in the module (https://github.com/ansible/ansible/issues/65450).
+- async - Fix Python 3 interpreter parsing from module by comparing with bytes (https://github.com/ansible/ansible/issues/70690)
+- async_wrapper - Fix race condition when ``~/.ansible_async`` folder tries to be created by multiple async tasks at the same time - https://github.com/ansible/ansible/issues/59306
+- avoid possible errors accessing os.environ by not assuming existance of variables.
+- basic - handle exceptions for default selectors in Python 2.7 (https://github.com/ansible/ansible/issues/71704).
+- basic - use PollSelector implementation when DefaultSelector fails (https://github.com/ansible/ansible/issues/70238).
+- bcrypt hashing - Ensure we repair the salt, to avoid warnings (https://github.com/ansible/ansible/issues/36129)
+- blockinfile - properly insert a block at the end of a file that does not have a trailing newline character (https://github.com/ansible/ansible/issues/72055)
+- blockinfile now returns name of backup file when this option is used.
+- clarified changed status to reflect existing rule that had never been written down.
+- collection loader - fix bogus code coverage entries for synthetic packages
+- collection metadata - ensure collection loader uses libyaml/CSafeLoader to parse collection metadata if available
+- connection/ssh, ensure parameters come from correct source get_option, so functionality matches docs.
+- connection/ssh, fix reset to use same parameters to check if socket exists as actually used, was hardcoded to default string construction previouslly.
+- cron - cron file should not be empty after adding var (https://github.com/ansible/ansible/pull/71207)
+- cron - encode and decode crontab files in UTF-8 explicitly to allow non-ascii chars in cron filepath and job (https://github.com/ansible/ansible/issues/69492)
+- debug action, prevent setting facts when displaying ansible_facts.
+- default callback - Ensure that the ``host_pinned`` strategy is not treated as lockstep (https://github.com/ansible/ansible/issues/73364)
+- delegate_to - Ensure that calculating ``delegate_to`` vars with a loop uses the correct context to correctly evaluate the loop (https://github.com/ansible/ansible/issues/37132)
+- display correct error information when an error exists in the last line of the file (https://github.com/ansible/ansible/issues/16456)
+- distribution - add support for Pardus Linux distribution (https://github.com/ansible/ansible/issues/71636).
+- distribution facts - Allow ``distribution_major_version`` and ``distribution_version`` to work for RC and PRERELEASE versions of FreeBSD (and derived distributions) (https://github.com/ansible/ansible/issues/72331).
+- dnf - fix filtering to avoid dependncy conflicts (https://github.com/ansible/ansible/issues/72316)
+- dnf - it is now possible to specify both ``security: true`` and ``bugfix: true`` to install updates of both types. Previously, only security would get installed if both were true. (https://github.com/ansible/ansible/issues/70854)
+- ensure 'local' connection always has the correct default user for actions to consume.
+- ensure delegated vars can resolve hostvars object and access vars from hostvars[inventory_hostname].
+- ensure find_mount_point consistently returns text.
+- ensure we don't clobber role vars data when getting an empty file
+- expect - Operate pexpect with bytes to avoid potential encoding issues (https://github.com/ansible/ansible/issues/29351)
+- facts - account for Slackware OS with ``+`` in the name (https://github.com/ansible/ansible/issues/38760)
+- facts - fix distribution fact for SLES4SAP (https://github.com/ansible/ansible/pull/71559).
+- facts - fix incorrect UTC timestamp in ``iso8601_micro`` and ``iso8601``
+- facts - properly report virtualization facts for Linux guests running on bhyve (https://github.com/ansible/ansible/issues/73167)
+- file - prevent link src from being rewritten when src is not specified explicitly (https://github.com/ansible/ansible/issues/65448)
+- file - the module should warn in check_mode when path an owner/group don't exist (https://github.com/ansible/ansible/issues/67307).
+- find module - Don't treat empty excludes as a match (https://github.com/ansible/ansible/issues/70640)
+- find module - Stop traversing directories past the requested depth. (https://github.com/ansible/ansible/issues/73627)
+- find module, fix default pattern when use_regex is true.
+- fix issue with inventory_hostname and delegated host vars mixing on connection settings.
+- fortimanager httpapi plugin - fix redirect to point to the ``fortinet.fortimanager`` collection (https://github.com/ansible/ansible/pull/71073).
+- galaxy - handle plus sign in user token appearing in role url (https://github.com/ansible/ansible/issues/45475).
+- get_sysctl now handles multiline values and does not die silently anymore.
+- get_url - skip checksum during ``--check`` (https://github.com/ansible/ansible/issues/61369).
+- git - Only pass ``--raw`` flag to git verify commands (verify-tag, verify-commit) when ``gpg_whitelist`` is in use. Otherwise don't pass it so that non-whitelist GPG validation still works on older Git versions. (https://github.com/ansible/ansible/issues/64469)
+- gluster modules - fix redirect to point to the ``gluster.gluster`` collection (https://github.com/ansible/ansible/pull/71240).
+- hostname - Fixed an issue where the hostname on the alinux could not be set.
+- hostname - add Almalinux support (https://github.com/ansible/ansible/pull/73619)
+- hostname - add macOS support (https://github.com/ansible/ansible/pull/54439)
+- if the ``type`` for a module parameter in the argument spec is callable, do not pass ``kwargs`` to avoid errors (https://github.com/ansible/ansible/issues/70017)
+- import_playbook - change warning about extra parameters to deprecation (https://github.com/ansible/ansible/issues/72745)
+- improve deprecation message when using bare variable (https://github.com/ansible/ansible/pull/70687)
+- inventory - pass the vars dictionary to combine_vars instead of an individual key's value (https://github.com/ansible/ansible/issues/72975).
+- inventory plugins - Let plugins define the sanitization method for the constructed ``groups`` feature.
+- inventory_hostnames - Use ``InventoryManager`` instead of trying to replicate its behavior (https://github.com/ansible/ansible/issues/17268)
+- is_string/vault - Ensure the is_string helper properly identifies AnsibleVaultEncryptedUnicode as a string (https://github.com/ansible/ansible/pull/71609)
+- j2 plugin loader clarified comments, made note with better fqcn detection.
+- lineinfile - fix not subscriptable error in exception handling around file creation
+- linux network facts - get the correct value for broadcast address (https://github.com/ansible/ansible/issues/64384)
+- native jinja2 types - properly handle Undefined in nested data.
+- notify keyword is not ignored anymore on import_tasks, also able to apply to blocks now.
+- package - use list of built in package managers from facts rather than creating a new list
+- paramiko connection plugin - Ensure we only reset the connection when one has been previously established (https://github.com/ansible/ansible/issues/65812)
+- password hashing - Ensure we validate salts against allowed characters and length when using ``crypt`` (https://github.com/ansible/ansible/issues/71107)
+- password lookup - Try to automatically generate salts using known salt sizes (https://github.com/ansible/ansible/issues/53750)
+- pause - Fix indefinite hang when using a pause task on a background process (https://github.com/ansible/ansible/issues/32142)
+- pause - catch additional error on setting up curses (https://github.com/ansible/ansible/pull/73588).
+- pause - do not accept enter to continue when a timeout is set (https://github.com/ansible/ansible/issues/73948)
+- pause - do not warn when running in the background if a timeout is provided (https://github.com/ansible/ansible/issues/73042)
+- pause - handle exception when there is no stdout (https://github.com/ansible/ansible/pull/47851)
+- powershell - fix escaping of strings that broken modules like fetch when dealing with special chars - https://github.com/ansible/ansible/issues/62781
+- powershell - fix the CLIXML parser when it contains nested CLIXML objects - https://github.com/ansible/ansible/issues/69550
+- powershell - remove getting the PowerShell version from the env var ``POWERSHELL_VERSION``. This feature never worked properly and can cause conflicts with other libraries that use this var
+- psrp - Fix hang when copying an empty file to the remote target
+- psrp - Use native PSRP mechanism when copying files to support custom endpoints
+- quote filter - normalize how ``None`` is handled, to match Python3 behavior (https://github.com/ansible/ansible/issues/32174)
+- reboot - Add support for the runit init system, used on Void Linux, that does not support the normal Linux syntax.
+- remove contradictory recomendation from template docs. https://github.com/ansible/ansible/issues/63484
+- remove redundant remote_user setting in play_context for local as plugin already does it, also removes fork/thread issue from use of pwd library.
+- reset logging level to INFO due to CVE-2019-14846.
+- restrict module valid JSON parsed output to objects as lists are not valid responses.
+- runas - create a new token when running as ``SYSTEM`` to ensure it has the full privileges assigned to that account
+- service - Fix for the BSD rcconf code using a Python 2 specific string replace function
+- set_mode_if_different - handle symlink if it is inside a directory with sticky bit set (https://github.com/ansible/ansible/pull/45198)
+- setup module, fix error handling on bad subset given
+- setup, don't give up on all local facts gathering if one script file fails.
+- several fixes to make apt_key better at identifying needs for change and also to avoid changes in check_mode.
+- shell - fix quoting of mkdir command in creation of remote_tmp in order to allow spaces and other special characters (https://github.com/ansible/ansible/issues/69577).
+- splunk httpapi plugin - switch from splunk.enterprise_security to splunk.es in runtime.yml to reflect upstream change of Collection Name
+- ssh connection plugin - use ``get_option()`` rather than ``_play_context`` to ensure ``ANSBILE_SSH_ARGS`` are applied properly (https://github.com/ansible/ansible/issues/70437)
+- stat - handle colons in filename while parsing the mimetype output (https://github.com/ansible/ansible/issues/70256).
+- strftime filter - Input epoch is allowed to be a float (https://github.com/ansible/ansible/issues/71257)
+- su become plugin, ensure correct type for localization option.
+- systemd - account for templated unit files using ``@`` when searching for the unit file (https://github.com/ansible/ansible/pull/72347#issuecomment-730626228)
+- systemd - fixed chroot usage on new versions of systemd, that broke because of upstream changes in systemctl output
+- systemd - follow up fix to https://github.com/ansible/ansible/issues/72338 to use ``list-unit-files`` rather than ``list-units`` in order to show all units files on the system.
+- systemd - made the systemd module work correctly when the SYSTEMD_OFFLINE environment variable is set
+- systemd - preserve the full unit name when using a templated service and ``systemd`` failed to parse dbus due to a known bug in ``systemd`` (https://github.com/ansible/ansible/pull/72985)
+- systemd - work around bug with ``systemd`` 245 and 5.8 kernel that does not correctly report service state (https://github.com/ansible/ansible/issues/71528)
+- task parsing - strip spaces from action name when using ``action: foo bar=baz`` form. (https://github.com/ansible/ansible/issues/62136)
+- templating - fix error message for ``x in y`` when y is undefined (https://github.com/ansible/ansible/issues/70984)
+- the unvault lookup plugin returned a byte string. Now returns a real string.
+- to_text(stdout) before json.loads in psrp.Connection.put_file in case stdout is bytes
+- unarchive - ``zip`` unarchive no longer errors on RHEL/CentOS 6 and old Fedora when attempting to use a numeric gid (https://github.com/ansible/ansible/issues/71903).
+- unarchive - check ``fut_gid`` against ``run_gid`` in addition to supplemental groups (https://github.com/ansible/ansible/issues/49284)
+- undeprecate hash_merge setting and add more docs clarifying its use and why not to use it.
+- uri - ``status_code`` elements are type ``int``
+- url lookup - make sure that options supplied in ansible.cfg are actually used (https://github.com/ansible/ansible/pull/71736).
+- url lookup - set default user agent to ``ansible-httpget`` (https://github.com/ansible/ansible/pull/72324)
+- urls - Close filedescriptor of certificate chain tempfile to prevent stale filedescriptor leakage (https://github.com/ansible/ansible/pull/71825).
+- user - AnsibleModule.run_command returns a tuple of return code, stdout and stderr. The module main function of the user module expects user.create_user to return a tuple of return code, stdout and stderr. Fix the locations where stdout and stderr got reversed.
+- user - Local users with an expiry date cannot be created as the ``luseradd`` / ``lusermod`` commands do not support the ``-e`` option. Set the expiry time in this case via ``lchage`` after the user was created / modified. (https://github.com/ansible/ansible/issues/71942)
+- user - do the right thing when ``password_lock=True`` and ``password`` are used together (https://github.com/ansible/ansible/issues/72992)
+- user - don't create home directory and missing parents when create_home == false (https://github.com/ansible/ansible/pull/70600).
+- validate-modules - do not raise an ``AttributeError`` if a value is assigned to a module attribute in a try/except block.
+- vault - Support reading raw binary data from stdin under python3
+- virtual facts - kubevirt is now identified as "KubeVirt" and with a "guest" role instead of "kvm" and "host" role (https://github.com/ansible/ansible/issues/72001).
+- wait_for - catch and ignore errors when getting active connections with psutil (https://github.com/ansible/ansible/issues/72322)
+- wait_for module, move missing socket into function to get proper comparrison in time.
+- win setup - Fix redirection path for the windows setup module
+- windows async - use full path when calling PowerShell to reduce reliance on environment vars being correct - https://github.com/ansible/ansible/issues/70655
+- winrm - preserve winrm forensic data on put_file failures
+- yamllint - do not raise an ``AttributeError`` if a value is assigned to a module attribute at the top of the module.
+
+Known Issues
+------------
+
+- ansible-test - The ``pylint`` sanity test no longer correctly detects "bad" variable names for non-constants. See https://github.com/PyCQA/pylint/issues/3701 for additional details.
+
+New Modules
+-----------
+
+- validate_argument_spec - Validate role argument specs.

changelogs/CHANGELOG-v2.13.rst

@@ -1,656 +0,0 @@
-=========================================================
-ansible-core 2.13 "Nobody's Fault but Mine" Release Notes
-=========================================================
-
-.. contents:: Topics
-
-
-v2.13.8
-=======
-
-Release Summary
----------------
-
-| Release Date: 2023-02-27
-| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
-
-
-Major Changes
--------------
-
-- ansible-test - Docker Desktop on WSL2 is now supported (additional configuration required).
-- ansible-test - Docker and Podman are now supported on hosts with cgroup v2 unified. Previously only cgroup v1 and cgroup v2 hybrid were supported.
-- ansible-test - Podman now works on container hosts without systemd. Previously only some containers worked, while others required rootfull or rootless Podman, but would not work with both. Some containers did not work at all.
-- ansible-test - Podman on WSL2 is now supported.
-- ansible-test - When additional cgroup setup is required on the container host, this will be automatically detected. Instructions on how to configure the host will be provided in the error message shown.
-
-Minor Changes
--------------
-
-- ansible-test - A new ``audit`` option is available when running custom containers. This option can be used to indicate whether a container requires the AUDIT_WRITE capability. The default is ``required``, which most containers will need when using Podman. If necessary, the ``none`` option can be used to opt-out of the capability. This has no effect on Docker, which always provides the capability.
-- ansible-test - A new ``cgroup`` option is available when running custom containers. This option can be used to indicate a container requires cgroup v1 or that it does not use cgroup. The default behavior assumes the container works with cgroup v2 (as well as v1).
-- ansible-test - Add support for provisioning Alpine 3.16 remote instances.
-- ansible-test - Add support for provisioning Fedora 36 remote instances.
-- ansible-test - Add support for provisioning Ubuntu 20.04 remote instances.
-- ansible-test - Add support for provisioning remotes which require ``doas`` for become.
-- ansible-test - Additional log details are shown when containers fail to start or SSH connections to containers fail.
-- ansible-test - Alpine remotes now use ``sudo`` for tests, using ``doas`` only for bootstrapping.
-- ansible-test - Become support for remote instance provisioning is no longer tied to a fixed list of platforms.
-- ansible-test - Connection failures to remote provisioned hosts now show failure details as a warning.
-- ansible-test - Containers included with ansible-test no longer disable seccomp by default.
-- ansible-test - Failure to connect to a container over SSH now results in a clear error. Previously tests would be attempted even after initial connection attempts failed.
-- ansible-test - FreeBSD remotes now use ``sudo`` for tests, using ``su`` only for bootstrapping.
-- ansible-test - Integration tests can be excluded from retries triggered by the ``--retry-on-error`` option by adding the ``retry/never`` alias. This is useful for tests that cannot pass on a retry or are too slow to make retries useful.
-- ansible-test - More details are provided about an instance when provisioning fails.
-- ansible-test - Reduce the polling limit for SSHD startup in containers from 60 retries to 10. The one second delay between retries remains in place.
-- ansible-test - Remote Alpine instances now have the ``acl`` package installed.
-- ansible-test - Remote Fedora instances now have the ``acl`` package installed.
-- ansible-test - Remote FreeBSD instances now have ACLs enabled on the root filesystem.
-- ansible-test - Remote Ubuntu instances now have the ``acl`` package installed.
-- ansible-test - SSH connections from OpenSSH 8.8+ to CentOS 6 containers now work without additional configuration. However, clients older than OpenSSH 7.0 can no longer connect to CentOS 6 containers as a result. The container must have ``centos6`` in the image name for this work-around to be applied.
-- ansible-test - SSH shell connections from OpenSSH 8.8+ to ansible-test provisioned network instances now work without additional configuration. However, clients older than OpenSSH 7.0 can no longer open shell sessions for ansible-test provisioned network instances as a result.
-- ansible-test - Specify the configuration file location required by test plugins when the config file is not found. This resolves issue: https://github.com/ansible/ansible/issues/79411
-- ansible-test - The ``ansible-test env`` command now detects and reports the container ID if running in a container.
-- ansible-test - Unit tests now support network disconnect by default when running under Podman. Previously this feature only worked by default under Docker.
-- ansible-test - Use ``stop --time 0`` followed by ``rm`` to remove ephemeral containers instead of ``rm -f``. This speeds up teardown of ephemeral containers.
-- ansible-test - Warnings are now shown when using containers that were built with VOLUME instructions.
-- ansible-test - When setting the max open files for containers, the container host's limit will be checked. If the host limit is lower than the preferred value, it will be used and a warning will be shown.
-- ansible-test - When using Podman, ansible-test will detect if the loginuid used in containers is incorrect. When this occurs a warning is displayed and the container is run with the AUDIT_CONTROL capability. Previously containers would fail under this situation, with no useful warnings or errors given.
-- ansible-test acme test container - update version to update used Pebble version, underlying Python and Go base containers, and Python requirements (https://github.com/ansible/ansible/pull/79783).
-
-Bugfixes
---------
-
-- Ansible.Basic.cs - Ignore compiler warning (reported as an error) when running under PowerShell 7.3.x.
-- TaskExecutor - don't ignore templated _raw_params that k=v parser failed to parse (https://github.com/ansible/ansible/issues/79862)
-- ansible-test - Always remove containers after failing to create/run them. This avoids leaving behind created containers when using podman.
-- ansible-test - Avoid using ``exec`` after container startup when possible. This improves container startup performance and avoids intermittent startup issues with some old containers.
-- ansible-test - Connection attempts to managed remote instances no longer abort on ``Permission denied`` errors.
-- ansible-test - Detection for running in a Podman or Docker container has been fixed to detect more scenarios. The new detection relies on ``/proc/self/mountinfo`` instead of ``/proc/self/cpuset``. Detection now works with custom cgroups and private cgroup namespaces.
-- ansible-test - Fix bootstrapping of Python 3.9 on Ubuntu 20.04 remotes.
-- ansible-test - Fix validate-modules error when retrieving PowerShell argspec when retrieved inside a Cmdlet
-- ansible-test - Handle server errors when executing the ``docker info`` command.
-- ansible-test - Multiple containers now work under Podman without specifying the ``--docker-network`` option.
-- ansible-test - Pass the ``XDG_RUNTIME_DIR`` environment variable through to container commands.
-- ansible-test - Perform PyPI proxy configuration after instances are ready and bootstrapping has been completed. Only target instances are affected, as controller instances were already handled this way. This avoids proxy configuration errors when target instances are not yet ready for use.
-- ansible-test - Prevent concurrent / repeat inspections of the same container image.
-- ansible-test - Prevent concurrent / repeat pulls of the same container image.
-- ansible-test - Prevent concurrent execution of cached methods.
-- ansible-test - Show the exception type when reporting errors during instance provisioning.
-- ansible-test - Support Podman 4.4.0+ by adding the ``SYS_CHROOT`` capability when running containers.
-- ansible-test - Temporary executables are now verified as executable after creation. Without this check, path injected scripts may not be found, typically on systems with ``/tmp`` mounted using the "noexec" option. This can manifest as a missing Python interpreter, or use of the wrong Python interpreter, as well as other error conditions.
-- ansible-test - Test containers are now run with the ``--tmpfs`` option for ``/tmp``, ``/run`` and ``/run/lock``. This allows use of containers built without the ``VOLUME`` instruction. Additionally, containers with those volumes defined no longer create anonymous volumes for them. This avoids leaving behind volumes on the container host after the container is stopped and deleted.
-- ansible-test - fix warning message about failing to run an image to include the image name
-- file - touch action in check mode was always returning ok. Fix now evaluates the different conditions and returns the appropriate changed status. (https://github.com/ansible/ansible/issues/79360)
-
-Known Issues
-------------
-
-- ansible-test - Additional configuration may be required for certain container host and container combinations. Further details are available in the testing documentation.
-- ansible-test - Custom containers with ``VOLUME`` instructions may be unable to start, when previously the containers started correctly. Remove the ``VOLUME`` instructions to resolve the issue. Containers with this condition will cause ``ansible-test`` to emit a warning.
-- ansible-test - Systems with Podman networking issues may be unable to run containers, when previously the issue went unreported. Correct the networking issues to continue using ``ansible-test`` with Podman.
-- ansible-test - Using Docker on systems with SELinux may require setting SELinux to permissive mode. Podman should work with SELinux in enforcing mode.
-
-v2.13.7
-=======
-
-Release Summary
----------------
-
-| Release Date: 2022-12-05
-| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
-
-
-Minor Changes
--------------
-
-- ansible-test - Improve consistency of executed ``pylint`` commands by making the plugins ordered.
-
-Bugfixes
---------
-
-- file lookup now plays nice with generic lookup ``errors`` option.
-
-v2.13.6
-=======
-
-Release Summary
----------------
-
-| Release Date: 2022-11-07
-| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
-
-
-Minor Changes
--------------
-
-- ansible-test - Improve consistency of version specific documentation links.
-
-Bugfixes
---------
-
-- BSD network facts - Do not assume column indexes, look for ``netmask`` and ``broadcast`` for determining the correct columns when parsing ``inet`` line (https://github.com/ansible/ansible/issues/79117)
-- ansible-galaxy - make initial call to Galaxy server on-demand only when installing, getting info about, and listing roles.
-- ansible-test - Add ``wheel < 0.38.0`` constraint for Python 3.6 and earlier.
-- ansible-test - Fix broken documentation link for ``aws`` test plugin error messages.
-- copy module will no longer move 'non files' set as src when remote_src=true.
-- file lookup now handles missing files more gracefully.
-- service_facts - Use python re to parse service output instead of grep (https://github.com/ansible/ansible/issues/78541)
-- updated error messages to include 'acl' and not just mode changes when failing to set required permissions on remote.
-
-v2.13.5
-=======
-
-Release Summary
----------------
-
-| Release Date: 2022-10-10
-| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
-
-
-Bugfixes
---------
-
-- ``ansible-galaxy`` - remove extra server api call during dependency resolution for requirements and dependencies that are already satisfied (https://github.com/ansible/ansible/issues/77443).
-- ansible-test - Allow disabled, unsupported, unstable and destructive integration test targets to be selected using their respective prefixes.
-- ansible-test - Allow unstable tests to run when targeted changes are made and the ``--allow-unstable-changed`` option is specified (resolves https://github.com/ansible/ansible/issues/74213).
-- apt - Fix module failure when a package is not installed and only_upgrade=True. Skip that package and check the remaining requested packages for upgrades. (https://github.com/ansible/ansible/issues/78762)
-- apt module should not traceback on invalid type given as package. issue 78663.
-- known_hosts - do not return changed status when a non-existing key is removed (https://github.com/ansible/ansible/issues/78598)
-- paramiko - Add back support for ``ssh_args``, ``ssh_common_args``, and ``ssh_extra_args`` for parsing the ``ProxyCommand`` (https://github.com/ansible/ansible/issues/78750)
-- plugin loader, fix detection for existing configuration before initializing for a plugin
-
-v2.13.4
-=======
-
-Release Summary
----------------
-
-| Release Date: 2022-09-12
-| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
-
-
-Bugfixes
---------
-
-- Fix for network_cli not getting all relevant connection options
-- ansible-galaxy - Fix detection of ``--role-file`` in arguments for implicit role invocation (https://github.com/ansible/ansible/issues/78204)
-- ansible-galaxy - Fix exit codes for role search and delete (https://github.com/ansible/ansible/issues/78516)
-- ansible-test - Fix change detection for ansible-test's own integration tests.
-- ansible-test - ansible-doc sanity test - Correctly determine the fully-qualified collection name for plugins in subdirectories, resolving https://github.com/ansible/ansible/issues/78490.
-- apt - don't actually update the cache in check mode with update_cache=true.
-- apt - don't mark existing packages as manually installed in check mode (https://github.com/ansible/ansible/issues/66413).
-- apt - fix package selection to include /etc/apt/preferences(.d) (https://github.com/ansible/ansible/issues/77969)
-- urls - Guard imports of ``urllib3`` by catching ``Exception`` instead of ``ImportError`` to prevent exceptions in the import process of optional dependencies from preventing use of ``urls.py`` (https://github.com/ansible/ansible/issues/78648)
-- wait_for - Read file and perform comparisons using bytes to avoid decode errors (https://github.com/ansible/ansible/issues/78214)
-
-v2.13.3
-=======
-
-Release Summary
----------------
-
-| Release Date: 2022-08-15
-| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
-
-
-Bugfixes
---------
-
-- Avoid 'unreachable' error when chmod on AIX has 255 as return code.
-- Fix PluginLoader to mimic Python import machinery by adding module to sys.modules before exec
-- Fix dnf module documentation to indicate that comparison operators for package version require spaces around them (https://github.com/ansible/ansible/issues/78295)
-- ansible-connection - decrypt vaulted parameters before sending over the socket, as vault secrets are not available on the other side.
-- ansible-galaxy - Fix reinitializing the whole collection directory with ``ansible-galaxy collection init ns.coll --force``. Now directories and files that are not included in the collection skeleton will be removed.
-- ansible-galaxy - do not require mandatory keys in the ``galaxy.yml`` of source collections when listing them (https://github.com/ansible/ansible/issues/70180).
-- ansible-galaxy - fix listing collections that contains metadata but the namespace or name are not strings.
-- ansible-galaxy - fix setting the cache for paginated responses from Galaxy NG/AH (https://github.com/ansible/ansible/issues/77911).
-- ansible-test - Delegation for commands which generate output for programmatic consumption no longer redirect all output to stdout. The affected commands and options are ``shell``, ``sanity --lint``, ``sanity --list-tests``, ``integration --list-targets``, ``coverage analyze``
-- ansible-test - Delegation now properly handles arguments given after ``--`` on the command line.
-- ansible-test - Test configuration for collections is now parsed only once, prior to delegation. Fixes issue: https://github.com/ansible/ansible/issues/78334
-- ansible-test - The ``shell`` command no longer redirects all output to stdout when running a provided command. Any command output written to stderr will be mixed with the stderr output from ansible-test.
-- ansible-test - The ``shell`` command no longer requests a TTY when using delegation unless an interactive shell is being used. An interactive shell is the default behavior when no command is given to pass to the shell.
-- dnf - fix output parsing on systems with ``LANGUAGE`` set to a language other than English (https://github.com/ansible/ansible/issues/78193)
-- if a config setting prevents running ansible it should at least show it's "origin".
-- prevent type annotation shim failures from causing runtime failures (https://github.com/ansible/ansible/pull/77860)
-- template module/lookup - fix ``convert_data`` option that was effectively always set to True for Jinja macros (https://github.com/ansible/ansible/issues/78141)
-- uri - properly use uri parameter use_proxy (https://github.com/ansible/ansible/issues/58632)
-- yum - fix traceback when ``releasever`` is specified with ``latest`` (https://github.com/ansible/ansible/issues/78058)
-
-v2.13.2
-=======
-
-Release Summary
----------------
-
-| Release Date: 2022-07-18
-| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
-
-
-Minor Changes
--------------
-
-- ansible-test - An improved error message is shown when the download of a pip bootstrap script fails. The download now uses ``urllib2`` instead of ``urllib`` on Python 2.
-
-Bugfixes
---------
-
-- Move undefined check from concat to finalize (https://github.com/ansible/ansible/issues/78156)
-- ansible-doc - no longer list module and plugin aliases that are created with symlinks (https://github.com/ansible/ansible/pull/78137).
-- ansible-doc - when listing modules in collections, proceed recursively. This fixes module listing for community.general 5.x.y and community.network 4.x.y (https://github.com/ansible/ansible/pull/78137).
-- ansible-doc will not add 'website for' in ":ref:" substitutions as it made them confusing.
-- file backed cache plugins now handle concurrent access by making atomic updates to the files.
-- password lookup does not ignore k=v arguments anymore.
-- user - Fix error "Permission denied" in user module while generating SSH keys (https://github.com/ansible/ansible/issues/78017).
-
-v2.13.1
-=======
-
-Release Summary
----------------
-
-| Release Date: 2022-06-20
-| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
-
-
-Minor Changes
--------------
-
-- Add an 'action_plugin' field for modules in runtime.yml plugin_routing.
-
-  This fixes module_defaults by supporting modules-as-redirected-actions
-  without redirecting module_defaults entries to the common action.
-
-  .. code: yaml
-
-     plugin_routing:
-       action:
-         facts:
-           redirect: ns.coll.eos
-         command:
-           redirect: ns.coll.eos
-       modules:
-         facts:
-           redirect: ns.coll.eos_facts
-         command:
-           redirect: ns.coll.eos_command
-
-  With the runtime.yml above for ns.coll, a task such as
-
-  .. code: yaml
-
-     - hosts: all
-       module_defaults:
-         ns.coll.eos_facts: {'valid_for_eos_facts': 'value'}
-         ns.coll.eos_command: {'not_valid_for_eos_facts': 'value'}
-       tasks:
-         - ns.coll.facts:
-
-  will end up with defaults for eos_facts and eos_command
-  since both modules redirect to the same action.
-
-  To select an action plugin for a module without merging
-  module_defaults, define an action_plugin field for the resolved
-  module in the runtime.yml.
-
-  .. code: yaml
-
-     plugin_routing:
-       modules:
-         facts:
-           redirect: ns.coll.eos_facts
-           action_plugin: ns.coll.eos
-         command:
-           redirect: ns.coll.eos_command
-           action_plugin: ns.coll.eos
-
-  The action_plugin field can be a redirected action plugin, as
-  it is resolved normally.
-
-  Using the modified runtime.yml, the example task will only use
-  the ns.coll.eos_facts defaults.
-- ansible-galaxy - Support resolvelib versions 0.6.x, 0.7.x, and 0.8.x. The full range of supported versions is now >= 0.5.3, < 0.9.0.
-- ansible-test - Add RHEL 9.0 remote support.
-- ansible-test - Add support for Ubuntu VMs using the ``--remote`` option.
-- ansible-test - Add support for exporting inventory with ``ansible-test shell --export {path}``.
-- ansible-test - Add support for multi-arch remotes.
-- ansible-test - Add support for running non-interactive commands with ``ansible-test shell``.
-- ansible-test - Avoid using the ``mock_use_standalone_module`` setting for unit tests running on Python 3.8 or later.
-- ansible-test - Blocking mode is now enforced for stdin, stdout and stderr. If any of these are non-blocking then ansible-test will exit during startup with an error.
-- ansible-test - Improve consistency of output messages by using stdout or stderr for most output, but not both.
-- ansible-test - The ``shell`` command can be used outside a collection if no controller delegation is required.
-
-Bugfixes
---------
-
-- Add PyYAML >= 5.1 as a dependency of ansible-core to be compatible with Python 3.8+.
-- ansible-config dump - Only display plugin type headers when plugin options are changed if --only-changed is specified.
-- ansible-galaxy - handle unsupported versions of resolvelib gracefully.
-- ansible-test - Fix internal validation of remote completion configuration.
-- ansible-test - Prevent ``--target-`` prefixed options for the ``shell`` command from being combined with legacy environment options.
-- ansible-test - Sanity test output with the ``--lint`` option is no longer mixed in with bootstrapping output.
-- ansible-test - Subprocesses are now isolated from the stdin, stdout and stderr of ansible-test. This avoids issues with subprocesses tampering with the file descriptors, such as SSH making them non-blocking. As a result of this change, subprocess output from unit and integration tests on stderr now go to stdout.
-- ansible-test - Subprocesses no longer have access to the TTY ansible-test is connected to, if any. This maintains consistent behavior between local testing and CI systems, which typically do not provide a TTY. Tests which require a TTY should use pexpect or another mechanism to create a PTY.
-- apt module now correctly handles virtual packages.
-- lookup plugin - catch KeyError when lookup returns dictionary (https://github.com/ansible/ansible/pull/77789).
-- pip - fix cases where resolution of pip Python module fails when importlib.util has not already been imported
-- plugin loader - Sort results when fuzzy matching plugin names (https://github.com/ansible/ansible/issues/77966).
-- plugin loader will now load config data for plugin by name instead of by file to avoid issues with the same file being loaded under different names (fqcn + short name).
-- psrp connection now handles default to inventory_hostname correctly.
-- winrm connection now handles default to inventory_hostname correctly.
-
-v2.13.0
-=======
-
-Release Summary
----------------
-
-| Release Date: 2022-05-16
-| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
-
-
-Major Changes
--------------
-
-- Jinja2 Controller Requirement - Jinja2 3.0.0 or newer is required for the control node (the machine that runs Ansible) (https://github.com/ansible/ansible/pull/75881)
-- Templating - remove ``safe_eval`` in favor of using ``NativeEnvironment`` but utilizing ``literal_eval`` only in cases when ``safe_eval`` was used (https://github.com/ansible/ansible/pull/75587)
-
-Minor Changes
--------------
-
-- Action Plugins - Add helper method for argument spec validation, and extend to pause and async_wrapper
-- Added AIX root CA certs folders - enhance the TLS support in ``uri`` task on AIX
-- Added ``module_utils.compat.typing`` to facilitate type-hinting on all supported Python versions.
-- Ansible.Basic - small changes to allow use in PowerShell modules running on non-Windows platforms (https://github.com/ansible/ansible/pull/76924).
-- AnsibleModule.run_command() now has a toggle to allow caller to decide to handle exceptions from executing the command itself
-- Attach concat function to an environment class (https://github.com/ansible/ansible/pull/76282)
-- Clarify in a comment that unrolling an iterator in ``Templar._finalize`` is actually necessary. Also switch to using the ``_unroll_iterator`` decorator directly to deduplicate code in ``Templar._finalize``. (https://github.com/ansible/ansible/pull/76436)
-- Installation - modernize our python installation, to reduce dynamic code in setup.py, and migrate what is feasible to setup.cfg. This will enable shipping wheels in the future.
-- PlayIterator - introduce public methods to access ``PlayIterator._host_states`` (https://github.com/ansible/ansible/pull/74416)
-- PlayIterator - use enums for Iterating and Failed states (https://github.com/ansible/ansible/pull/74511)
-- Reduce number of iterations through PlayIterator (https://github.com/ansible/ansible/pull/74175)
-- Remove more Python 2.x compatibility code from controller (https://github.com/ansible/ansible/pull/77320).
-- Start of moving away from using Six, Python 2 and 3 compatibility library (https://github.com/ansible/ansible/pull/75863)
-- The collection loader now reports a Python warning if an attempt is made to install the Ansible collection loader a second time. Previously this condition was reported using an Ansible warning.
-- ``ansible-galaxy collection [install|verify]`` - allow user-provided signature sources in addition to those from the Galaxy server. Each collection entry in a requirements file can specify a ``signatures`` key followed by a list of sources. Collection name(s) provided on the CLI can specify additional signature sources by using the ``--signatures`` CLI option. Signature sources should be URIs that can be opened with ``urllib.request.urlopen()``, such as "https://example.com/path/to/detached_signature.asc" or "file:///path/to/detached_signature.asc". The ``--keyring`` option must be specified if signature sources are provided.
-- ``ansible-galaxy collection [install|verify]`` - use gpg to verify the authenticity of the signed ``MANIFEST.json`` with ASCII armored detached signatures provided by the Galaxy server. The keyring (which is not managed by ``ansible-galaxy``) must be provided with the ``--keyring`` option to use signature verification. If no ``--keyring`` is specified and the collection to ``install|verify`` has associated detached signatures on the Galaxy server, a warning is provided.
-- ``ansible-galaxy collection install`` - Add a global configuration to modify the required number of signatures that must verify the authenticity of the collection. By default, the number of required successful signatures is 1. Set this option to ``all`` to require all signatures verify the collection. To ensure signature verification fails if there are no valid signatures, prepend the value with '+', such as ``+all`` or ``+1``.
-- ``ansible-galaxy collection install`` - Add a global ignore list for gpg signature errors. This can be used to ignore certain signatures when the number of required successful signatures is all. When the required number of successful signatures is a positive integer, the only effect this has is to display fewer errors to the user on failure (success is determined by having the minimum number of successful signatures, in which case all errors are disregarded).
-- ``ansible-galaxy collection install`` - Add a global toggle to turn off GPG signature verification.
-- ``ansible-galaxy collection install`` - Store Galaxy server metadata alongside installed collections for provenance. Signatures obtained from the Galaxy server can be used for offline verification with ``ansible-galaxy collection verify --offline``.
-- ansible-console - Provide a  way to customize the stdout callback
-- ansible-core modules - Remove unused Python shebangs from built-in modules.
-- ansible-doc metadata dump - add option ``--no-fail-on-errors`` which allows to not fail the ansible-doc invocation when errors happen during docs parsing or processing. Instead they are reported in the JSON result in an ``error`` key for the affected plugins (https://github.com/ansible/ansible/pull/77035).
-- ansible-galaxy - the option to skip certificate verification now also applies when cloning via SCM (git/hg) (https://github.com/ansible/ansible/issues/41077)
-- ansible-test - Accept new-style Python modules without a shebang.
-- ansible-test - Add ``--version`` support to show the ansible-core version.
-- ansible-test - Add support for ``rhel/8.5`` remote instances.
-- ansible-test - Add support for remote testing of FreeBSD 12.3.
-- ansible-test - Add support for running container tests with ``podman remote`` (https://github.com/ansible/ansible/pull/75753)
-- ansible-test - Added the ``fedora35`` test container.
-- ansible-test - Change the maximum number of open files in a test container from the default to ``10240``.
-- ansible-test - Declare public dependencies of ansible-core and use to limit unguarded imports in plugins.
-- ansible-test - Importing ``distutils`` now results in an error.
-- ansible-test - Installation of ``cryptography`` is no longer version constrained when ``openssl`` 1.1.0 or later is installed.
-- ansible-test - Miscellaneous code cleanup and type hint fixes.
-- ansible-test - PowerShell in the ``base`` and ``default`` containers has been upgraded to version 7.1.4.
-- ansible-test - Remove RHEL 8.4 remote (``rhel/8.4``) support.
-- ansible-test - Remove ``idna`` constraint.
-- ansible-test - Remove obsolete ``MAXFD`` display.
-- ansible-test - Remove obsolete constraints for Python 2.6.
-- ansible-test - Remove support for FreeBSD 12.2 remote provisioning.
-- ansible-test - Remove support for macOS 11.1 remote provisioning.
-- ansible-test - Remove support for provisioning remote AIX instances.
-- ansible-test - Remove the ``centos8`` test container since CentOS 8 will reach end-of-life soon.
-- ansible-test - Remove the ``fedora33`` test container since Fedora 33 will reach end-of-life soon.
-- ansible-test - Remove unused Python 2.x compatibility code.
-- ansible-test - Removed support for Sherlock from the Azure provisioning plugin.
-- ansible-test - Removed used ``MarkupSafe`` constraint for Python 3.5 and earlier.
-- ansible-test - Requirements for the plugin import test are now frozen.
-- ansible-test - Shellcheck in the ``base`` and ``default`` containers has been upgraded to version 0.7.0.
-- ansible-test - Stop early with an error if the current working directory contains an invalid collection namespace or name.
-- ansible-test - The ``--help`` option is now available when an unsupported cwd is in use.
-- ansible-test - The ``--help`` output now shows the same instructions about cwd as would be shown in error messages if the cwd is unsupported.
-- ansible-test - The ``pip`` and ``wheel`` packages are removed from all sanity test virtual environments after installation completes to reduce their size. Previously they were only removed from the environments used for the ``import`` sanity test.
-- ansible-test - The explanation about cwd usage has been improved to explain more clearly what is required.
-- ansible-test - The hash for all managed sanity test virtual environments has changed. Containers that include ``ansible-test sanity --prime-venvs`` will need to be rebuilt to continue using primed virtual environments.
-- ansible-test - Update ``base`` container to version 2.1.0.
-- ansible-test - Update ``base`` container to version 2.2.0.
-- ansible-test - Update ``default`` containers to version 5.2.0.
-- ansible-test - Update ``default`` containers to version 5.4.0.
-- ansible-test - Update ``default`` containers to version 5.5.0.
-- ansible-test - Update ``default`` containers to version 5.6.2.
-- ansible-test - Update ``default`` containers to version 5.7.0.
-- ansible-test - Update ``default`` containers to version 5.8.0.
-- ansible-test - Update ``default`` containers to version 5.9.0.
-- ansible-test - Update ``pip`` used to bootstrap remote FreeBSD instances from version 20.3.4 to 21.3.1.
-- ansible-test - Update sanity test requirements.
-- ansible-test - Update the NIOS test plugin container to version 1.4.0.
-- ansible-test - Update the ``alpine`` container to version 3.3.0. This updates the base image from 3.14.2 to 3.15.0, which includes support for installing binary wheels using pip.
-- ansible-test - Update the ``base`` and ``default`` containers from Python 3.10.0rc2 to 3.10.0.
-- ansible-test - Update the ``base`` and ``default`` containers from a Ubuntu 18.04 to Ubuntu 20.04 base image.
-- ansible-test - Update the ``default`` containers to version 5.1.0.
-- ansible-test - Update the ``galaxy`` test plugin to get its container from a copy on quay.io.
-- ansible-test - Update the ``openshift`` test plugin to get its container from a copy on quay.io.
-- ansible-test - Use Python 3.10 as the default Python version for the ``base`` and ``default`` containers.
-- ansible-test - add macOS 12.0 as a remote target (https://github.com/ansible/ansible/pull/76328)
-- ansible-test - handle JSON decode error gracefully in podman environment.
-- ansible-test pslint - Added the `AvoidLongLines <https://github.com/PowerShell/PSScriptAnalyzer/blob/master/docs/Rules/AvoidLongLines.md>`_ rule set to a length of 160.
-- ansible-test pslint - Added the `PlaceCloseBrace <https://github.com/PowerShell/PSScriptAnalyzer/blob/master/docs/Rules/PlaceCloseBrace.md>`_ rule set to enforce close braces on a newline.
-- ansible-test pslint - Added the `PlaceOpenBrace <https://github.com/PowerShell/PSScriptAnalyzer/blob/master/docs/Rules/PlaceOpenBrace.md>`_ rule set to enforce open braces on the same line and a subsequent newline.
-- ansible-test pslint - Added the `UseConsistentIndentation <https://github.com/PowerShell/PSScriptAnalyzer/blob/master/docs/Rules/UseConsistentIndentation.md>`_ rule to enforce indentation is done with 4 spaces.
-- ansible-test pslint - Added the `UseConsistentWhitespace <https://github.com/PowerShell/PSScriptAnalyzer/blob/master/docs/Rules/UseConsistentWhitespace.md>`_ rule to enforce whitespace consistency in PowerShell.
-- ansible-test pslint - Updated ``PowerShellScriptAnalyzer`` to 1.20.0
-- ansible-test sanity validate-modules - the validate-modules sanity test now also checks the documentation of documentable plugin types (https://github.com/ansible/ansible/pull/71734).
-- ansible-test validate-modules sanity test - add more schema checks to improve quality of plugin documentation (https://github.com/ansible/ansible/pull/77268).
-- ansible-test validate_modules - allow ``choices`` for return values (https://github.com/ansible/ansible/pull/76009).
-- apt - Add support for using ">=" in package version number matching.
-- apt - Adds APT option ``--allow-change-held-packages`` as module parameter ``allow_change_held_packages`` to allow APT up- or downgrading a package which is on APTs hold list (https://github.com/ansible/ansible/issues/65325)
-- auto inventory plugin will now give plugin loading information on verbose output
-- callbacks - Add result serialization format options to ``_dump_results`` allowing plugins such as the ``default`` callback to emit ``YAML`` serialized task results in addition to ``JSON``
-- dnf - add more specific error message for GPG validation (https://github.com/ansible/ansible/issues/76192)
-- env lookup, add default option
-- facts - report prefix length for IPv4 addresses in Linux network facts.
-- get_parsable_locale now logs result when in debug mode.
-- git - display the destination directory path in error msg when local_mods detects local modifications conflict so that users see the exact location
-- iptables - add the ``chain_management`` parameter that controls iptables chain creation and deletion
-- jinja2_native - keep same behavior on Python 3.10.
-- junit callback - Add support for replacing the directory portion of out-of-tree relative task paths with a placeholder.
-- k8s - scenario guides for kubernetes migrated to ``kubernetes.core`` collection.
-- module_utils.distro - Add missing ``typing`` import from original code.
-- package_facts - add pkg_info support for OpenBSD and NetBSD (https://github.com/ansible/ansible/pull/76580)
-- services_facts - Add support for openrc (https://github.com/ansible/ansible/pull/76373).
-- setting DEFAULT_FACT_PATH is being deprecated in favor of the generic module_defaults keyword
-- uri - Avoid reading the response body when not needed
-- uri - Eliminate multiple requests to determine the final URL for file naming with ``dest``
-- validate-modules - do some basic validation on the ``M(...)``, ``U(...)``, ``L(..., ...)`` and ``R(..., ...)`` documentation markups (https://github.com/ansible/ansible/pull/76262).
-- vmware - migrated vmware scenario guides to `community.vmware` repo.
-- yum, dnf - add sslverify option to temporarily disable certificate validation for a repository
-
-Breaking Changes / Porting Guide
---------------------------------
-
-- Module Python Dependency - Drop support for Python 2.6 in module execution.
-- Templating - it is no longer allowed to perform arithmetic and concatenation operations outside of the jinja template (https://github.com/ansible/ansible/pull/75587)
-- The ``finalize`` method is no longer exposed in the globals for use in templating.
-
-Deprecated Features
--------------------
-
-- ansible-core - Remove support for Python 2.6.
-- ansible-test - Remove support for Python 2.6.
-- ssh connection plugin option scp_if_ssh in favor of ssh_transfer_method.
-
-Removed Features (previously deprecated)
-----------------------------------------
-
-- Remove deprecated ``Templar.set_available_variables()`` method (https://github.com/ansible/ansible/issues/75828)
-- cli - remove deprecated ability to set verbosity before the sub-command (https://github.com/ansible/ansible/issues/75823)
-- copy - remove deprecated ``thirsty`` alias (https://github.com/ansible/ansible/issues/75824)
-- psrp - Removed fallback on ``put_file`` with older ``pypsrp`` versions. Users must have at least ``pypsrp>=0.4.0``.
-- url_argument_spec - remove deprecated ``thirsty`` alias for ``get_url`` and ``uri`` modules (https://github.com/ansible/ansible/issues/75825, https://github.com/ansible/ansible/issues/75826)
-
-Security Fixes
---------------
-
-- Do not include params in exception when a call to ``set_options`` fails. Additionally, block the exception that is returned from being displayed to stdout. (CVE-2021-3620)
-
-Bugfixes
---------
-
-- Add a YAML representer for ``NativeJinjaText``
-- Add a YAML representer for ``NativeJinjaUnsafeText``
-- AnsiballZ - Ensure we use the full python package in the module cache filename to avoid a case where ``collections:`` is used to execute a module via short name, where the short name duplicates another module from ``ansible.builtin`` or another collection that was executed previously.
-- Ansible.ModuleUtils.LinkUtil - Ignore the ``LIB`` environment variable when loading the ``LinkUtil`` code
-- Ansible.ModuleUtils.SID - Use user principal name as is for lookup in the ``Convert-ToSID`` function - https://github.com/ansible/ansible/issues/77316
-- Detect package manager for Amazon Linux 2022 (AL2022) as dnf
-- Ensure the correct ``environment_class`` is set on ``AnsibleJ2Template``
-- Fix ``AttributeError`` when providing password file via ``--connection-password-file`` (https://github.com/ansible/ansible/issues/76530)
-- Fix ``end_play`` to end the current play only (https://github.com/ansible/ansible/issues/76672)
-- Fix collection filter/test plugin redirects (https://github.com/ansible/ansible/issues/77192).
-- Fix executing includes in the always section in the free strategy (https://github.com/ansible/ansible/issues/75642)
-- Fix for when templating empty template file resulted in file with string 'None' (https://github.com/ansible/ansible/issues/76610)
-- Fix help message for the 'ansible-galaxy collection verify' positional argument. The positional argument must be a collection name (https://github.com/ansible/ansible/issues/76087).
-- Fix module logging issue when using custom module on WSL2 (https://github.com/ansible/ansible/issues/76320)
-- Fix task debugger to work with ``run_once`` using ``linear`` strategy (https://github.com/ansible/ansible/issues/76049)
-- Fix traceback when installing a collection from a git repository and git is not installed (https://github.com/ansible/ansible/issues/77479).
-- Interpreter Discovery - Fallback to OS family if the distro is not found in ``INTERPRETER_PYTHON_DISTRO_MAP`` (https://github.com/ansible/ansible/issues/75560)
-- Interpreter discovery - Add ``RHEL`` to ``OS_FAMILY_MAP`` for correct family fallback for interpreter discovery (https://github.com/ansible/ansible/issues/77368)
-- Make include_role/include_tasks work with any_errors_fatal (https://github.com/ansible/ansible/issues/50897)
-- Parser errors from within includes should not be rescueable (https://github.com/ansible/ansible/issues/73657)
-- Prevent losing unsafe on results returned from lookups (https://github.com/ansible/ansible/issues/77535)
-- Templating - Ensure we catch exceptions when getting ``.filters`` and ``.tests`` attributes on their respective plugins and properly error, instead of aborting which results in no filters being added to the jinja2 environment
-- Trigger an undefined error when an undefined variable is detected within a dictionary and/or list (https://github.com/ansible/ansible/pull/75587)
-- _run_loop - Add the task name to the warning (https://github.com/ansible/ansible/issues/76011)
-- ``Templar.copy_with_new_env`` - set the ``finalize`` method of the new ``Templar`` object for the new environment (https://github.com/ansible/ansible/issues/76379)
-- add_host/group_by: fix using changed_when in a loop (https://github.com/ansible/ansible/issues/71627)
-- ansible - Exclude Python 2.6 from Python interpreter discovery.
-- ansible-config avoid showing _terms and _input when --only-changed.
-- ansible-doc - Fix ansible-doc -l ansible.builtin / ansible.legacy not returning anything
-- ansible-doc - ignore plugin deprecation warnings (https://github.com/ansible/ansible/issues/75671)
-- ansible-galaxy - Add galaxy_collection_skeleton/galaxy_collection_skeleton_ignore configuration options
-- ansible-galaxy - Fix using the '--ignore-certs' option when there is no server-specific configuration for the Galaxy server.
-- ansible-galaxy - installing/downloading collections with invalid versions in git repositories and directories now gives a formatted error message (https://github.com/ansible/ansible/issues/76425, https://github.com/ansible/ansible/issues/75404).
-- ansible-galaxy - when installing a role properly raise an error when inaccessible path is specified multiple times in roles_path (e.g. via environment variable and command line option) (https://github.com/ansible/ansible/issues/76316)
-- ansible-galaxy collection build - Ignore any existing ``MANIFEST.json`` and ``FILES.json`` in the root directory when building a collection.
-- ansible-galaxy collection verify - display files/directories not included in the FILES.json as modified content.
-- ansible-galaxy publish - Fix warning and error detection in import messages to properly display them in Ansible
-- ansible-pull handle case where hostname and nodename are empty
-- ansible-test - Add default entry for Windows remotes to be used with unknown versions.
-- ansible-test - All virtual environments managed by ansible-test are marked as usable after being bootstrapped, to avoid errors caused by use of incomplete environments. Previously this was only done for sanity tests. Existing environments from previous versions of ansible-test will be recreated on demand due to lacking the new marker.
-- ansible-test - Automatic target requirements installation is now based on the target environment instead of the controller environment.
-- ansible-test - Correctly detect when running as the ``root`` user (UID 0) on the origin host. The result of the detection was incorrectly being inverted.
-- ansible-test - Don't fail if network cannot be disconnected (https://github.com/ansible/ansible/pull/77472)
-- ansible-test - Fix Python real prefix detection when running in a ``venv`` virtual environment.
-- ansible-test - Fix ``windows-integration`` and ``network-integration`` when used with the ``--docker`` option and user-provided inventory.
-- ansible-test - Fix installation and usage of ``pyyaml`` requirement for the ``import`` sanity test for collections.
-- ansible-test - Fix path to inventory file for ``windows-integration`` and ``network-integration`` commands for collections.
-- ansible-test - Fix plugin loading.
-- ansible-test - Fix skipping of tests marked ``needs/python`` on the origin host.
-- ansible-test - Fix skipping of tests marked ``needs/root`` on the origin host.
-- ansible-test - Fix the ``import`` sanity test to work properly when Ansible's built-in vendoring support is in use.
-- ansible-test - Fix the ``validate-modules`` sanity test to avoid double-loading the collection loader and possibly failing on import of the ``packaging`` module.
-- ansible-test - Fix traceback in ``import`` sanity test on Python 2.7 when ``pip`` is not available.
-- ansible-test - Fix traceback in the ``validate-modules`` sanity test when testing an Ansible module without any callables.
-- ansible-test - Fix traceback when running from an install and delegating execution to a different Python interpreter.
-- ansible-test - Fix traceback when using the ``--all`` option with PowerShell code coverage.
-- ansible-test - Fix type hints.
-- ansible-test - Import ``yaml.cyaml.CParser`` instead of ``_yaml.CParser`` in the ``yamllint`` sanity test.
-- ansible-test - Limit ``paramiko`` installation to versions before 2.9.0. This is required to maintain support for systems which do not support RSA SHA-2 algorithms.
-- ansible-test - Pylint Deprecated Plugin - Use correct message symbols when date or version is not a float or str (https://github.com/ansible/ansible/issues/77085)
-- ansible-test - Relocate constants to eliminate symlink.
-- ansible-test - Replace the directory portion of out-of-tree paths in JUnit files from integration tests with the ``out-of-tree:`` prefix.
-- ansible-test - Sanity tests run with the ``--requirements` option for Python 2.x now install ``virtualenv`` when it is missing or too old. Previously it was only installed if missing. Version 16.7.12 is now installed instead of the latest version.
-- ansible-test - Set the ``pytest`` option ``--rootdir`` instead of letting it be auto-detected.
-- ansible-test - Show an error message instead of a traceback when running outside of a supported directory.
-- ansible-test - Target integration test requirements are now correctly installed for target environments running on the controller.
-- ansible-test - The ``import`` sanity test no longer reports errors about ``packaging`` being missing when testing collections.
-- ansible-test - Update distribution test containers to version 3.1.0.
-- ansible-test - Update help links to reference ``ansible-core`` instead of ``ansible``.
-- ansible-test - Update unit tests to use the ``--forked`` option instead of the deprecated ``--boxed`` option.
-- ansible-test - Use https://ci-files.testing.ansible.com/ for instance bootstrapping instead of an S3 endpoint.
-- ansible-test - Use relative paths in JUnit files generated during integration test runs.
-- ansible-test - Use the correct variable to reference the client's SSH key when generating inventory.
-- ansible-test - Use the legacy collection loader for ``import`` sanity tests on target-only Python versions.
-- ansible-test - Virtual environments managed by ansible-test now use consistent versions of ``pip``, ``setuptools`` and ``wheel``. This avoids issues with virtual environments containing outdated or dysfunctional versions of these tools. The initial bootstrapping of ``pip`` is done by ansible-test from an HTTPS endpoint instead of creating the virtual environment with it already present.
-- ansible-test - fix a typo in validate-modules.
-- ansible-test - fixed support container failures (eg http-test-container) under podman
-- ansible-test compile sanity test - do not crash if a column could not be determined for an error (https://github.com/ansible/ansible/pull/77465).
-- ansible-test pslint - Fix error when encountering validation results that are highly nested - https://github.com/ansible/ansible/issues/74151
-- ansible-vault encrypt_string - fix ``--output`` option to correctly write encrypted string into given file (https://github.com/ansible/ansible/issues/75101)
-- ansible.builtin.file modification_time supports check_mode
-- ansible_facts.devices - Fix parsing of device serial number detected via sg_inq for rhel8 (https://github.com/ansible/ansible/issues/75420)
-- apt - fails to deploy deb file to old debian systems using python-apt < 0.8.9 (https://github.com/ansible/ansible/issues/47277)
-- arg_spec - Fix incorrect ``no_log`` warning when a parameter alias is used (https://github.com/ansible/ansible/pull/77576)
-- async - Improve performance of sending async callback events by never sending the full task through the queue (https://github.com/ansible/ansible/issues/76729)
-- catch the case that cowsay is broken which would lead to missing output
-- cleaning facts will now only warn about the variable name and not post the content, which can be undesireable to disclose
-- collection_loader - Implement 'find_spec' and 'exec_module' to override deprecated importlib methods 'find_module' and 'load_module' when applicable (https://github.com/ansible/ansible/issues/74660).
-- correctly inherit vars from parent in block (https://github.com/ansible/ansible/issues/75286).
-- default callback - Ensure we compare FQCN also in lockstep logic, to ensure using the FQCN of a strategy plugin triggers the correct behavior in the default callback plugin. (https://github.com/ansible/ansible/issues/76782)
-- distribution - add EuroLinux to fact gathering (https://github.com/ansible/ansible/pull/76624).
-- distribution - detect tencentos and gather correct facts on the distro.
-- dnf - ensure releasever is passed into libdnf as string (https://github.com/ansible/ansible/issues/77010)
-- extend timeout for ansible-galaxy when communicating with the galaxy server api, and apply it to all interactions with the api
-- facts - add support for deepin distro information detection (https://github.com/ansible/ansible/issues/77286).
-- first_found - fix to allow for spaces in file names (https://github.com/ansible/ansible/issues/77136)
-- gather_facts - Fact gathering now continues even if it fails to read a file
-- gather_facts action now handles the move of base connection plugin types into collections to add/prevent subset argument correctly
-- gather_facts/setup will not fail anymore if capsh is present but not executable
-- git module fix docs and proper use of ssh wrapper script and GIT_SSH_COMMAND depending on version.
-- git module is more consistent and clearer about which ssh options are added to git calls.
-- git module no longer uses wrapper script for ssh options.
-- hacking - fix incorrect usage of deprecated fish-shell redirection operators that failed to honor ``--quiet`` flag when sourced (https://github.com/ansible/ansible/pull/77180).
-- hostname - Do not require SystemdStrategy subclasses for every distro (https://github.com/ansible/ansible/issues/76792)
-- hostname - Fix Debian strategy KeyError, use `SystemdStrategy` (https://github.com/ansible/ansible/issues/76124)
-- hostname - Update the systemd strategy in the ``hostname`` module to not interfere with NetworkManager (https://github.com/ansible/ansible/issues/76958)
-- hostname - add hostname support for openEuler distro (https://github.com/ansible/ansible/pull/76619).
-- hostname - use ``file_get_content()`` to read the file containing the host name in the ``FileStrategy.get_permanent_hostname()`` method. This prevents a ``TypeError`` from being raised when the strategy is used (https://github.com/ansible/ansible/issues/77025).
-- include_vars, properly initialize variable as there is corner case in which it can end up referenced and not defined
-- inventory - parameterize ``disable_lookups`` in ``Constructable`` (https://github.com/ansible/ansible/issues/76769).
-- inventory manager now respects --flush-cache
-- junit callback - Fix traceback during automatic fact gathering when using relative paths.
-- junit callback - Fix unicode error when handling non-ASCII task paths.
-- module_utils.common.yaml - The ``SafeLoader``, ``SafeDumper`` and ``Parser`` classes now fallback to ``object`` when ``yaml`` is not available. This fixes tracebacks when inheriting from these classes without requiring a ``HAS_YAML`` guard around class definitions.
-- parameters - handle blank values when argument is a list (https://github.com/ansible/ansible/issues/77108).
-- play_context now compensates for when a conneciton sets the default to inventory_hostname but skips adding it to the vars.
-- playbook/strategy have more informative 'attribute' based errors for playbook objects and handlers.
-- python modules (new type) will now again prefer the specific python stated in the module's shebang instead of hardcoding to /usr/bin/python.
-- replace - Always return ``rc`` to ensure return values are consistent - https://github.com/ansible/ansible/pull/71963
-- script - skip in check mode if the plugin cannot determine if a change will occur (i.e. neither `creates` or `removes` are provided).
-- service - Fixed handling of sleep arguments during service restarts on AIX. (https://github.com/ansible/ansible/issues/76877)
-- service - Fixed service restarts with arguments on AIX. (https://github.com/ansible/ansible/issues/76840)
-- service_facts module will now give more meaningful warnings when it fails to gather data.
-- set_fact/include_vars correctly handle delegation assignments within loops
-- setup - detect docker container with check for ./dockerenv or ./dockinit (https://github.com/ansible/ansible/pull/74349).
-- shell/command - only return changed as True if the task has not been skipped.
-- shell/command - only skip in check mode if the options `creates` and `removes` are both None.
-- ssh connection - properly quote controlpersist path given by user to avoid issues with spaces and other characters
-- ssh connection avoid parsing ssh cli debug lines as they can match expected output at high verbosities.
-- ssh connection now uses more correct host source as play_context can ignore loop/delegation variations.
-- sudo become plugin, fix handling of non interactive flags, previous substitution was too naive
-- systemd - check if service is alias so it gets enabled (https://github.com/ansible/ansible/issues/75538).
-- systemd - check if service is indirect so it gets enabled (https://github.com/ansible/ansible/issues/76453).
-- task_executor reverts the change to push facts into delegated vars on loop finalization as result managing code already handles this and was duplicating effort to wrong result.
-- template lookup - restore inadvertently deleted default for ``convert_data`` (https://github.com/ansible/ansible/issues/77004)
-- to_json/to_nice_json filters defaults back to unvaulting/no unsafe packing.
-- unarchive - Fix zip archive file listing that caused issues with content postprocessing (https://github.com/ansible/ansible/issues/76067).
-- unarchive - Make extraction work when the LANGUAGE environment variable is set to a non-English locale.
-- unarchive - apply ``owner`` and ``group`` permissions to top folder (https://github.com/ansible/ansible/issues/35426)
-- unarchive - include the original error when a handler cannot manage the archive (https://github.com/ansible/ansible/issues/28977).
-- unarchive - the ``io_buffer_size`` option added in 2.12 was not accepted by the module (https://github.com/ansible/ansible/pull/77271).
-- urls - Allow ``ca_path`` to point to a bundle containing multiple PEM certs (https://github.com/ansible/ansible/issues/75015)
-- urls/uri - Address case where ``HTTPError`` isn't fully initialized due to the error, and is missing certain methods and attributes (https://github.com/ansible/ansible/issues/76386)
-- user - allow ``password_expiry_min`` and ``password_expiry_min`` to be set to ``0`` (https://github.com/ansible/ansible/issues/75017)
-- user - allow password min and max to be set at the same time (https://github.com/ansible/ansible/issues/75017)
-- user - update logic to check if user exists or not in MacOS.
-- validate_argument_spec - Skip suboption validation if the top level option is an invalid type (https://github.com/ansible/ansible/issues/75612).
-- variablemanager, more efficient read of vars files
-- vault - Warn instead of fail for missing vault IDs if at least one valid vault secret is found.
-- winrm - Ensure ``kinit`` is run with the same ``PATH`` env var as the Ansible process
-- yum - prevent storing unnecessary cache data by running `yum makecache fast` (https://github.com/ansible/ansible/issues/76336)
-
-Known Issues
-------------
-
-- get_url - document ``check_mode`` correctly with unreliable changed status (https://github.com/ansible/ansible/issues/65687).

changelogs/fragments/ 75876-fix-parsing-of-device-serial-number-for-rhel-8.yaml

@@ -1,2 +0,0 @@
-bugfixes:
-  - ansible_facts.devices - Fix parsing of device serial number detected via sg_inq for rhel8 (https://github.com/ansible/ansible/issues/75420)

changelogs/fragments/14681-allow-callbacks-from-forks.yml

@@ -0,0 +1,3 @@
+minor_changes:
+- callbacks - Add feature allowing forks to send callback events
+  (https://github.com/ansible/ansible/issues/14681)

changelogs/fragments/16456-correct-YAML-error-message-when-file-load-failed.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - display correct error information when an error exists in the last line of the file (https://github.com/ansible/ansible/issues/16456)

changelogs/fragments/16949-global-skipped-result-flag-looped-tasks.yml

@@ -0,0 +1,2 @@
+minor_changes:
+  - Allow for the skipped filter to be used on a registered looped task results. (https://github.com/ansible/ansible/issues/16949)

changelogs/fragments/17029-prevent-user-fact-lookup-failure-is-logname-is-set.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - Lookup user by UID in password database if login name is not found (https://github.com/ansible/ansible/issues/17029)

changelogs/fragments/17268-inventory-hostnames.yml

@@ -0,0 +1,3 @@
+bugfixes:
+- inventory_hostnames - Use ``InventoryManager`` instead of trying to replicate its behavior
+  (https://github.com/ansible/ansible/issues/17268)

changelogs/fragments/22599_svn_validate_certs.yml

@@ -0,0 +1,2 @@
+minor_changes:
+  - subversion - ``validate_certs`` option, which, when true, will avoid passing ``--trust-server-cert`` to ``svn`` commands (https://github.com/ansible/ansible/issues/22599).

changelogs/fragments/23958-cleanup.yml

@@ -0,0 +1,3 @@
+bugfixes:
+- Ensure if a traceback halts ``strategy.run`` that we still attempt to clean up
+  (https://github.com/ansible/ansible/issues/23958)

changelogs/fragments/29351-expect-bytes.yml

@@ -0,0 +1,3 @@
+bugfixes:
+- expect - Operate pexpect with bytes to avoid potential encoding issues
+  (https://github.com/ansible/ansible/issues/29351)

changelogs/fragments/32143-pause-background-hangs.yml

@@ -0,0 +1,4 @@
+bugfixes:
+  - >
+    pause - Fix indefinite hang when using a pause task on a background
+    process (https://github.com/ansible/ansible/issues/32142)

changelogs/fragments/32174-normalize-None-quote.yml

@@ -0,0 +1,3 @@
+bugfixes:
+- quote filter - normalize how ``None`` is handled, to match Python3 behavior
+  (https://github.com/ansible/ansible/issues/32174)

changelogs/fragments/322214-hostname-macos-support.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - hostname - add macOS support (https://github.com/ansible/ansible/pull/54439)

changelogs/fragments/32386_debconf_password.yml

@@ -0,0 +1,2 @@
+minor_changes:
+- debconf - add a note about no_log=True since module might expose sensitive information to logs (https://github.com/ansible/ansible/issues/32386).

changelogs/fragments/36498-subversion-fix-info-parsing.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - subversion - fix stack trace when getting information about the repository (https://github.com/ansible/ansible/issues/36498)

changelogs/fragments/37132-delegate-to-loop-context.yml

@@ -0,0 +1,4 @@
+bugfixes:
+- delegate_to - Ensure that calculating ``delegate_to`` vars with a loop
+  uses the correct context to correctly evaluate the loop
+  (https://github.com/ansible/ansible/issues/37132)

changelogs/fragments/38182_subelements.yml

@@ -0,0 +1,2 @@
+minor_changes:
+- subelements - clarify the lookup plugin documentation for parameter handling (https://github.com/ansible/ansible/issues/38182).

changelogs/fragments/38760-slackware-os-dist.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - facts - account for Slackware OS with ``+`` in the name (https://github.com/ansible/ansible/issues/38760)

changelogs/fragments/40522-unarchive-add-include.yml

@@ -0,0 +1,4 @@
+minor_changes:
+  - >
+    unarchive - add ``include`` parameter to allow extracting specific files
+    from an archive (https://github.com/ansible/ansible/pull/40522)

changelogs/fragments/43739_dragonflybsd_disto.yml

@@ -0,0 +1,2 @@
+minor_changes:
+- distribution - add support for DragonFly distribution (https://github.com/ansible/ansible/issues/43739).

changelogs/fragments/45475_galaxy.yml

@@ -0,0 +1,2 @@
+bugfixes:
+- galaxy - handle plus sign in user token appearing in role url (https://github.com/ansible/ansible/issues/45475).

changelogs/fragments/46169-non-native-template-module.yml

@@ -0,0 +1,2 @@
+minor_changes:
+  - Force the template module to use non-native Jinja2 (https://github.com/ansible/ansible/issues/46169)

changelogs/fragments/47277-fails-to-deploy-deb-when-has-no-architecture-attribute.yml

@@ -1,2 +0,0 @@
-bugfixes:
-  - apt - fails to deploy deb file to old debian systems using python-apt < 0.8.9 (https://github.com/ansible/ansible/issues/47277)

changelogs/fragments/50771-uri-improvements.yml

@@ -1,3 +0,0 @@
-minor_changes:
-- uri - Eliminate multiple requests to determine the final URL for file naming with ``dest``
-- uri - Avoid reading the response body when not needed

changelogs/fragments/50897-include_role-any_errors_fatal.yaml

@@ -1,2 +0,0 @@
-bugfixes:
-  - Make include_role/include_tasks work with any_errors_fatal (https://github.com/ansible/ansible/issues/50897)

changelogs/fragments/50909-min-max-attrs.yml

@@ -0,0 +1,2 @@
+minor_changes:
+  - Allow an attribute to be passed to the min and max filters with Jinja 2.10+

changelogs/fragments/52229-vault-python3-binary-stdin.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - vault - Support reading raw binary data from stdin under python3

changelogs/fragments/55152-add-more-info-to-AnsibleUndefinedVariable.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - Provide more information in AnsibleUndefinedVariable (https://github.com/ansible/ansible/issues/55152)

changelogs/fragments/565_default_callback.yml

@@ -0,0 +1,2 @@
+minor_changes:
+- default_callback - moving 'check_mode_markers' documentation in default_callback doc_fragment (https://github.com/ansible-collections/community.general/issues/565).

changelogs/fragments/57378-inventory-cli-unicode.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - Add unicode support to ``ansible-inventory`` CLI (https://github.com/ansible/ansible/issues/57378)

changelogs/fragments/57399-finalize-task-in-strategy.yml

@@ -0,0 +1,5 @@
+bugfixes:
+- Strategy - When building the task in the Strategy from the Worker,
+  ensure it is properly marked as finalized and squashed. Addresses an
+  issue with ``ansible_failed_task``.
+  (https://github.com/ansible/ansible/issues/57399)

changelogs/fragments/58632-uri-include_use_proxy.yaml

@@ -1,2 +0,0 @@
-bugfixes:
-  - uri - properly use uri parameter use_proxy (https://github.com/ansible/ansible/issues/58632)

changelogs/fragments/58752_argument_aliases.yml

@@ -0,0 +1,2 @@
+minor_changes:
+- Added name of aliases in user error (https://github.com/ansible/ansible/issues/58752).

changelogs/fragments/60882-keyed_groups-leading-separator-toggle.yaml

@@ -0,0 +1,2 @@
+minor_changes:
+  - constructed - Add a toggle to allow the separator to be omitted if no prefix has been provided.

changelogs/fragments/61185-basic.py-fix-check_mode.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+- AnsibleModule.set_mode_if_different - don't check file existence when check_mode is activated (https://github.com/ansible/ansible/issues/61185).

changelogs/fragments/61234-yum-dnf-version-comp-doc.yml

@@ -0,0 +1,2 @@
+minor_changes:
+  - Add yum/dnf version comparison documentation for package install

changelogs/fragments/61369_get_url.yml

@@ -0,0 +1,2 @@
+bugfixes:
+- get_url - skip checksum during ``--check`` (https://github.com/ansible/ansible/issues/61369).

changelogs/fragments/62136_strip_spaces_from_action_names.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - "task parsing - strip spaces from action name when using ``action: foo bar=baz`` form. (https://github.com/ansible/ansible/issues/62136)"

changelogs/fragments/63105-wcswidth.yml

@@ -0,0 +1,3 @@
+bugfixes:
+- Display - Use wcswidth to calculate printable width of a text string
+  (https://github.com/ansible/ansible/issues/63105)

changelogs/fragments/63378_find_module_regex_whole_file.yml

@@ -0,0 +1,2 @@
+minor_changes:
+  - find module - Now has a ``read_whole_file`` boolean parameter which allows for reading the whole file and doing an ``re.search()`` regex evaluation on it when searching using the ``contains`` option. This allows (for example) for ensuring the very end of the file matches a pattern.

changelogs/fragments/63417-unique-filter-preserve-order.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - Ensure Ansible's unique filter preserves order (https://github.com/ansible/ansible/issues/63417)

changelogs/fragments/64469_git_no_raw.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - git - Only pass ``--raw`` flag to git verify commands (verify-tag, verify-commit) when ``gpg_whitelist`` is in use. Otherwise don't pass it so that non-whitelist GPG validation still works on older Git versions. (https://github.com/ansible/ansible/issues/64469)

changelogs/fragments/64625-show-file-path-on-task-failure-callback-option.yml

@@ -0,0 +1,5 @@
+minor_changes:
+  - >-
+    default callback - add ``show_task_path_on_failure`` option to display file and
+    line number of tasks only on failed tasks when running at
+    normal verbosity level (https://github.com/ansible/ansible/issues/64625)

changelogs/fragments/65262_ansible_inventory.yml

@@ -0,0 +1,2 @@
+bugfixes:
+- Suppress warning when user directory used in --playbook-dir option with ansible-inventory command (https://github.com/ansible/ansible/issues/65262).

changelogs/fragments/65710-find-include-parent.yml

@@ -0,0 +1,3 @@
+bugfixes:
+- Includes - Explicitly get the include task, and not assume it is the parent
+  (https://github.com/ansible/ansible/issues/65710)

changelogs/fragments/65812-paramiko-attribute-error.yml

@@ -0,0 +1,3 @@
+bugfixes:
+- paramiko connection plugin - Ensure we only reset the connection when one has been
+  previously established (https://github.com/ansible/ansible/issues/65812)

changelogs/fragments/66132_dnf_show_pkgs_in_check_mode.yml

@@ -0,0 +1,2 @@
+minor_changes:
+  - dnf - now shows specific package changes (installations/removals) under ``results`` in check_mode. (https://github.com/ansible/ansible/issues/66132)

changelogs/fragments/66147_rhev_vdsm_vdsmd.yml

@@ -0,0 +1,2 @@
+minor_changes:
+  - virtualization facts - Detect ``vdsmd`` in addition to ``vdsm`` when trying to detect RHEV hosts. (https://github.com/ansible/ansible/issues/66147)

changelogs/fragments/66304-facts_containerd.yml

@@ -0,0 +1,2 @@
+minor_changes:
+  - virtual facts - containerd cgroup is now recognized as container tech (https://github.com/ansible/ansible/issues/66304).

changelogs/fragments/67340-slurp_error_message.yml

@@ -0,0 +1,2 @@
+bugfixes:
+- "slurp - Fix error messages for unreadable files and directories (https://github.com/ansible/ansible/issues/67340)."

changelogs/fragments/67508-meta-task-tags.yaml

@@ -0,0 +1,2 @@
+breaking_changes:
+  - The ``meta`` module now supports tags for user-defined tasks. Internal ``meta`` tasks continue to always run. (https://github.com/ansible/ansible/issues/64558)

changelogs/fragments/67616-galaxy-scm-cloning-ignore-certs.yml

@@ -1,2 +0,0 @@
-minor_changes:
-- ansible-galaxy - the option to skip certificate verification now also applies when cloning via SCM (git/hg) (https://github.com/ansible/ansible/issues/41077)

changelogs/fragments/68275-vault-module-args.yml

@@ -0,0 +1,3 @@
+bugfixes:
+- Vault - Allow single vault encrypted values to be used directly as module
+  parameters. (https://github.com/ansible/ansible/issues/68275)

changelogs/fragments/68402_galaxy.yml

@@ -0,0 +1,2 @@
+minor_changes:
+- galaxy - add documentation about galaxy parameters in examples/ansible.cfg (https://github.com/ansible/ansible/issues/68402).

changelogs/fragments/68551_allow_list_of_filters_for_the_setup_module.yml

@@ -0,0 +1,2 @@
+minor_changes:
+  - setup - allow list of filters (https://github.com/ansible/ansible/pull/68551).

changelogs/fragments/68605-ansible-error-orig-exc-context.yml

@@ -0,0 +1,3 @@
+minor_changes:
+- Errors - Ensure that errors passed with ``orig_exc`` include the context of that exception
+  (https://github.com/ansible/ansible/issues/68605)

changelogs/fragments/68612_iptables.yml

@@ -0,0 +1,2 @@
+minor_changes:
+- iptables - fixed get_chain_policy API (https://github.com/ansible/ansible/issues/68612).

changelogs/fragments/68770_cache_adjudicator_flush.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - The ``flush()`` method of ``CachePluginAdjudicator`` now calls the plugin's ``flush()`` method instead of iterating over the keys that the adjudicator knows about and deleting those from the cache. (https://github.com/ansible/ansible/issues/68770)

changelogs/fragments/69352-netbsd-virtual-facts.yml

@@ -0,0 +1,2 @@
+breaking_changes:
+  - NetBSD virtualization facts (specifically ``ansible_virtualization_type``) now returns a more accurate value by checking the value of the ``machdep.hypervisor`` ``sysctl`` key. This change is breaking because in some cases previously, we would erroneously report ``xen`` even when the target is not running on Xen. This prevents that behavior in most cases. (https://github.com/ansible/ansible/issues/69352)

changelogs/fragments/69463-fix-apt_repository-typeerror- instancemethod.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+- Fixed TypeError instancemethod expecting at least 2 arguments for apt_repository(issue https://github.com/ansible/ansible/issues/69308, PR https://github.com/ansible/ansible/pull/69463)

changelogs/fragments/69531_user_password_expire.yml

@@ -0,0 +1,2 @@
+minor_changes:
+  - user - add new parameters ``password_expire_max`` and ``password_expire_min`` for controlling password expiration (https://github.com/ansible/ansible/issues/68775)

changelogs/fragments/69578-shell-remote_tmp-quoting.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+  - shell - fix quoting of mkdir command in creation of remote_tmp in order to allow spaces and other special characters (https://github.com/ansible/ansible/issues/69577).

changelogs/fragments/69640-file_should_warn_when_path_and_owner_or_group_dont_exist.yml

@@ -0,0 +1,2 @@
+bugfixes:
+- file - the module should warn in check_mode when path an owner/group don't exist (https://github.com/ansible/ansible/issues/67307).

changelogs/fragments/69776-add-aix-root-ca-certs-paths.yml

@@ -1,3 +0,0 @@
----
-minor_changes:
-- Added AIX root CA certs folders - enhance the TLS support in ``uri`` task on AIX

changelogs/fragments/69848-fix-rerunning-tagged-roles.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - Fix incorrect re-run of roles with tags (https://github.com/ansible/ansible/issues/69848)

changelogs/fragments/70017-avoid-params-to-callable-checkers.yml

@@ -0,0 +1,4 @@
+bugfixes:
+  - >-
+    if the ``type`` for a module parameter in the argument spec is callable,
+    do not pass ``kwargs`` to avoid errors (https://github.com/ansible/ansible/issues/70017)

changelogs/fragments/70028-config-small-typo-fix.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - config - use ``callbacks_enabled`` instead ``callback_enabled`` in a deprecated message (https://github.com/ansible/ansible/issues/70028).

changelogs/fragments/70042-dnf-repository-hotfixes.yml

@@ -0,0 +1,2 @@
+minor_changes:
+  - yum_repository - added boolean option module_hotfixes which allows to enable functionality for dnf.

changelogs/fragments/70045-ansible-doc-yaml-anchors.yml

@@ -0,0 +1,2 @@
+bugfixes:
+- "ansible-doc - improve man page formatting to avoid problems when YAML anchors are used (https://github.com/ansible/ansible/pull/70045)."

changelogs/fragments/70046-ansible-doc-description-crash.yml

@@ -0,0 +1,2 @@
+bugfixes:
+- "ansible-doc - improve error message in text formatter when ``description`` is missing for a (sub-)option or a return value or its ``contains`` (https://github.com/ansible/ansible/pull/70046)."

changelogs/fragments/70056-add-a-param-to-apt-module-to-avoid-unintended-uninstalls.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - apt - add ``fail_on_autoremove`` param to apt module to avoid unintended package removals (https://github.com/ansible/ansible/issues/63231)

changelogs/fragments/70099-make-apt-errors-more-transparent.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+  - apt - include exception message from apt python library in error output

changelogs/fragments/70122-improve-error-message-ssh-client-is-not-found.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - SSH plugin - Improve error message when ssh client is not found on the host

changelogs/fragments/70148-galaxy-role-info.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+  - Fixes ``ansible-galaxy role info`` to support multiple roles on the command line (https://github.com/ansible/ansible/pull/70148)