New release v2.13.8 (#80082)

* don't ignore templated _raw_params that k=v parser failed to parse (#79913)

fixes #79862

* backport test changes

.azure-pipelines/azure-pipelines.yml

@@ -27,11 +27,14 @@ variables:
   - name: coverageBranches
     value: devel
   - name: entryPoint
-    value: .azure-pipelines/commands/entry-point.sh
+    value: test/utils/shippable/shippable.sh
   - name: fetchDepth
     value: 500
-  - name: defaultContainer
-    value: quay.io/ansible/azure-pipelines-test-container:6.0.0
+
+resources:
+  containers:
+    - container: default
+      image: quay.io/ansible/azure-pipelines-test-container:3.0.0
 
 pool: Standard
 
@@ -46,6 +49,9 @@ stages:
           targets:
             - test: 1
             - test: 2
+            - test: 3
+            - test: 4
+            - test: 5
   - stage: Units
     dependsOn: []
     jobs:
@@ -54,12 +60,13 @@ stages:
           nameFormat: Python {0}
           testFormat: units/{0}
           targets:
+            - test: 2.7
+            - test: 3.5
+            - test: 3.6
+            - test: 3.7
             - test: 3.8
             - test: 3.9
             - test: '3.10'
-            - test: 3.11
-            - test: 3.12
-            - test: 3.13
   - stage: Windows
     dependsOn: []
     jobs:
@@ -68,96 +75,80 @@ stages:
           nameFormat: Server {0}
           testFormat: windows/{0}/1
           targets:
-            - name: 2016 WinRM HTTP
-              test: 2016/winrm/http
-            - name: 2019 WinRM HTTPS
-              test: 2019/winrm/https
-            - name: 2022 WinRM HTTPS
-              test: 2022/winrm/https
-            - name: 2022 PSRP HTTP
-              test: 2022/psrp/http
-            - name: 2022 SSH Key
-              test: 2022/ssh/key
-            - name: 2025 PSRP HTTP
-              test: 2025/psrp/http
-            - name: 2025 SSH Key
-              test: 2025/ssh/key
+            - test: 2012
+            - test: 2012-R2
+            - test: 2016
+            - test: 2019
+            - test: 2022
   - stage: Remote
     dependsOn: []
     jobs:
-      - template: templates/matrix.yml  # context/target
+      - template: templates/matrix.yml
         parameters:
           targets:
-            - name: macOS 15.3
-              test: macos/15.3
-            - name: RHEL 9.5 py39
-              test: rhel/9.5@3.9
-            - name: RHEL 9.5 py312
-              test: rhel/9.5@3.12
-            - name: FreeBSD 13.5
-              test: freebsd/13.5
-            - name: FreeBSD 14.2
-              test: freebsd/14.2
+            - name: macOS 12.0
+              test: macos/12.0
+            - name: RHEL 7.9
+              test: rhel/7.9
+            - name: RHEL 8.5 py36
+              test: rhel/8.5@3.6
+            - name: RHEL 8.5 py38
+              test: rhel/8.5@3.8
+            - name: RHEL 9.0
+              test: rhel/9.0
+            - name: FreeBSD 12.3
+              test: freebsd/12.3
+            - name: FreeBSD 13.0
+              test: freebsd/13.0
           groups:
             - 1
             - 2
-      - template: templates/matrix.yml  # context/controller
-        parameters:
-          targets:
-            - name: macOS 15.3
-              test: macos/15.3
-            - name: RHEL 9.5
-              test: rhel/9.5
-            - name: FreeBSD 13.5
-              test: freebsd/13.5
-            - name: FreeBSD 14.2
-              test: freebsd/14.2
-          groups:
             - 3
             - 4
             - 5
       - template: templates/matrix.yml  # context/controller (ansible-test container management)
         parameters:
           targets:
-            - name: Alpine 3.21
-              test: alpine/3.21
-            - name: Fedora 41
-              test: fedora/41
-            - name: RHEL 9.5
-              test: rhel/9.5
-            - name: Ubuntu 24.04
-              test: ubuntu/24.04
+            - name: Alpine 3.16
+              test: alpine/3.16
+            - name: Fedora 36
+              test: fedora/36
+            - name: RHEL 8.5
+              test: rhel/8.5
+            - name: RHEL 9.0
+              test: rhel/9.0
+            - name: Ubuntu 20.04
+              test: ubuntu/20.04
+            - name: Ubuntu 22.04
+              test: ubuntu/22.04
           groups:
             - 6
   - stage: Docker
     dependsOn: []
     jobs:
-      - template: templates/matrix.yml  # context/target
+      - template: templates/matrix.yml
         parameters:
           testFormat: linux/{0}
           targets:
-            - name: Alpine 3.21
-              test: alpine321
-            - name: Fedora 41
-              test: fedora41
-            - name: Ubuntu 22.04
-              test: ubuntu2204
-            - name: Ubuntu 24.04
-              test: ubuntu2404
+            - name: Alpine 3
+              test: alpine3
+            - name: CentOS 7
+              test: centos7
+            - name: Fedora 34
+              test: fedora34
+            - name: Fedora 35
+              test: fedora35
+            - name: openSUSE 15 py2
+              test: opensuse15py2
+            - name: openSUSE 15 py3
+              test: opensuse15
+            - name: Ubuntu 18.04
+              test: ubuntu1804
+            - name: Ubuntu 20.04
+              test: ubuntu2004
           groups:
             - 1
             - 2
-      - template: templates/matrix.yml  # context/controller
-        parameters:
-          testFormat: linux/{0}
-          targets:
-            - name: Alpine 3.21
-              test: alpine321
-            - name: Fedora 41
-              test: fedora41
-            - name: Ubuntu 24.04
-              test: ubuntu2404
-          groups:
             - 3
             - 4
             - 5
@@ -169,9 +160,9 @@ stages:
           nameFormat: Python {0}
           testFormat: galaxy/{0}/1
           targets:
-            - test: 3.11
-            - test: 3.12
-            - test: 3.13
+            - test: 3.8
+            - test: 3.9
+            - test: '3.10'
   - stage: Generic
     dependsOn: []
     jobs:
@@ -180,9 +171,21 @@ stages:
           nameFormat: Python {0}
           testFormat: generic/{0}/1
           targets:
-            - test: 3.11
-            - test: 3.12
-            - test: 3.13
+            - test: 3.8
+            - test: 3.9
+            - test: '3.10'
+  - stage: Incidental_Remote
+    displayName: Incidental Remote
+    dependsOn: []
+    jobs:
+      - template: templates/matrix.yml
+        parameters:
+          testFormat: i/{0}
+          targets:
+            - name: RHEL 8.5 py36
+              test: rhel/8.5@3.6
+            - name: RHEL 8.5 py38
+              test: rhel/8.5@3.8
   - stage: Incidental_Windows
     displayName: Incidental Windows
     dependsOn: []
@@ -192,20 +195,11 @@ stages:
           nameFormat: Server {0}
           testFormat: i/windows/{0}
           targets:
-            - name: 2016 WinRM HTTP
-              test: 2016/winrm/http
-            - name: 2019 WinRM HTTPS
-              test: 2019/winrm/https
-            - name: 2022 WinRM HTTPS
-              test: 2022/winrm/https
-            - name: 2022 PSRP HTTP
-              test: 2022/psrp/http
-            - name: 2022 SSH Key
-              test: 2022/ssh/key
-            - name: 2025 PSRP HTTP
-              test: 2025/psrp/http
-            - name: 2025 SSH Key
-              test: 2025/ssh/key
+            - test: 2012
+            - test: 2012-R2
+            - test: 2016
+            - test: 2019
+            - test: 2022
   - stage: Incidental
     dependsOn: []
     jobs:
@@ -215,6 +209,14 @@ stages:
           targets:
             - name: IOS Python
               test: ios/csr1000v/
+            - name: VyOS Python
+              test: vyos/1.1.8/
+            - name: AWS Python 2.7
+              test: aws/2.7
+            - name: AWS Python 3.6
+              test: aws/3.6
+            - name: Cloud Python
+              test: cloud/
   - stage: Summary
     condition: succeededOrFailed()
     dependsOn:
@@ -225,6 +227,7 @@ stages:
       - Docker
       - Galaxy
       - Generic
+      - Incidental_Remote
       - Incidental_Windows
       - Incidental
     jobs:

.azure-pipelines/commands/entry-point.sh

@@ -1,62 +0,0 @@
-#!/usr/bin/env bash
-
-set -o pipefail -eux
-
-declare -a args
-IFS='/:' read -ra args <<< "$1"
-
-script="${args[0]}"
-
-test="$1"
-
-docker images
-docker ps
-
-for container in $(docker ps --format '{{.Image}} {{.ID}}' | grep -v -e '^quay.io/ansible/azure-pipelines-test-container:' | sed 's/^.* //'); do
-    docker rm -f "${container}" || true  # ignore errors
-done
-
-docker ps
-
-export PATH="${PWD}/bin:${PATH}"
-export PYTHONIOENCODING='utf-8'
-
-if [ -n "${COVERAGE:-}" ]; then
-    # on-demand coverage reporting triggered by setting the COVERAGE environment variable to a non-empty value
-    export COVERAGE="--coverage"
-elif [[ "${COMMIT_MESSAGE}" =~ ci_coverage ]]; then
-    # on-demand coverage reporting triggered by having 'ci_coverage' in the latest commit message
-    export COVERAGE="--coverage"
-else
-    # on-demand coverage reporting disabled (default behavior, always-on coverage reporting remains enabled)
-    export COVERAGE="--coverage-check"
-fi
-
-if [ -n "${COMPLETE:-}" ]; then
-    # disable change detection triggered by setting the COMPLETE environment variable to a non-empty value
-    export CHANGED=""
-elif [[ "${COMMIT_MESSAGE}" =~ ci_complete ]]; then
-    # disable change detection triggered by having 'ci_complete' in the latest commit message
-    export CHANGED=""
-else
-    # enable change detection (default behavior)
-    export CHANGED="--changed"
-fi
-
-if [ "${IS_PULL_REQUEST:-}" == "true" ]; then
-    # run unstable tests which are targeted by focused changes on PRs
-    export UNSTABLE="--allow-unstable-changed"
-else
-    # do not run unstable tests outside PRs
-    export UNSTABLE=""
-fi
-
-if [[ "${COVERAGE:-}" == "--coverage" ]]; then
-    timeout=60
-else
-    timeout=50
-fi
-
-ansible-test env --dump --show --timeout "${timeout}" --color -v
-
-".azure-pipelines/commands/${script}.sh" "${test}"

.azure-pipelines/commands/incidental/windows.sh

@@ -1,46 +0,0 @@
-#!/usr/bin/env bash
-
-set -o pipefail -eux
-
-declare -a args
-IFS='/:' read -ra args <<< "$1"
-
-version="${args[1]}"
-connection="${args[2]}"
-connection_setting="${args[3]}"
-
-target="shippable/windows/incidental/"
-
-stage="${S:-prod}"
-provider="${P:-default}"
-
-# python version to run full tests on while other versions run minimal tests
-python_default="$(PYTHONPATH="${PWD}/test/lib" python -c 'from ansible_test._internal import constants; print(constants.CONTROLLER_MIN_PYTHON_VERSION)')"
-
-# version to test when only testing a single version
-single_version=2022
-
-# shellcheck disable=SC2086
-ansible-test windows-integration --list-targets -v ${CHANGED:+"$CHANGED"} ${UNSTABLE:+"$UNSTABLE"} > /tmp/explain.txt 2>&1 || { cat /tmp/explain.txt && false; }
-{ grep ' windows-integration: .* (targeted)$' /tmp/explain.txt || true; } > /tmp/windows.txt
-
-if [ -s /tmp/windows.txt ] || [ "${CHANGED:+$CHANGED}" == "" ]; then
-    echo "Detected changes requiring integration tests specific to Windows:"
-    cat /tmp/windows.txt
-
-    echo "Running Windows integration tests for the version ${version}."
-else
-    echo "No changes requiring integration tests specific to Windows were detected."
-    echo "Running Windows integration tests for a single version only: ${single_version}"
-
-    if [ "${version}" != "${single_version}" ]; then
-        echo "Skipping this job since it is for: ${version}"
-        exit 0
-    fi
-fi
-
-# shellcheck disable=SC2086
-ansible-test windows-integration --color -v --retry-on-error "${target}" ${COVERAGE:+"$COVERAGE"} ${CHANGED:+"$CHANGED"} ${UNSTABLE:+"$UNSTABLE"} \
-    --controller "docker:default,python=${python_default}" \
-    --target "remote:windows/${version},connection=${connection}+${connection_setting},provider=${provider}" \
-    --remote-terminate always --remote-stage "${stage}"

.azure-pipelines/commands/sanity.sh

@@ -1,41 +0,0 @@
-#!/usr/bin/env bash
-
-set -o pipefail -eux
-
-declare -a args
-IFS='/:' read -ra args <<< "$1"
-
-group="${args[1]}"
-
-group2_include=(
-    ansible-doc
-    changelog
-    package-data
-    pep8
-    pylint
-    validate-modules
-)
-
-group1_exclude=(
-    "${group2_include[@]}"
-)
-
-options=()
-
-case "${group}" in
-    1)
-        for name in "${group1_exclude[@]}"; do
-            options+=(--skip-test "${name}")
-        done
-        ;;
-    2)
-        for name in "${group2_include[@]}"; do
-            options+=(--test "${name}")
-        done
-        ;;
-esac
-
-# shellcheck disable=SC2086
-ansible-test sanity --color -v --junit ${COVERAGE:+"$COVERAGE"} ${CHANGED:+"$CHANGED"} \
-    --docker \
-    "${options[@]}" --allow-disabled

.azure-pipelines/commands/windows.sh

@@ -1,89 +0,0 @@
-#!/usr/bin/env bash
-
-set -o pipefail -eux
-
-declare -a args
-IFS='/:' read -ra args <<< "$1"
-
-version="${args[1]}"
-connection="${args[2]}"
-connection_setting="${args[3]}"
-group="${args[4]}"
-
-target="shippable/windows/group${group}/"
-
-stage="${S:-prod}"
-provider="${P:-default}"
-
-# python versions to test in order
-IFS=' ' read -r -a python_versions <<< \
-    "$(PYTHONPATH="${PWD}/test/lib" python -c 'from ansible_test._internal import constants; print(" ".join(constants.CONTROLLER_PYTHON_VERSIONS))')"
-
-# python version to run full tests on while other versions run minimal tests
-python_default="$(PYTHONPATH="${PWD}/test/lib" python -c 'from ansible_test._internal import constants; print(constants.CONTROLLER_MIN_PYTHON_VERSION)')"
-
-# version to test when only testing a single version
-single_version=2022
-
-# shellcheck disable=SC2086
-ansible-test windows-integration --list-targets -v ${CHANGED:+"$CHANGED"} ${UNSTABLE:+"$UNSTABLE"} > /tmp/explain.txt 2>&1 || { cat /tmp/explain.txt && false; }
-{ grep ' windows-integration: .* (targeted)$' /tmp/explain.txt || true; } > /tmp/windows.txt
-
-if [ -s /tmp/windows.txt ] || [ "${CHANGED:+$CHANGED}" == "" ]; then
-    echo "Detected changes requiring integration tests specific to Windows:"
-    cat /tmp/windows.txt
-
-    echo "Running Windows integration tests for the version ${version}."
-else
-    echo "No changes requiring integration tests specific to Windows were detected."
-    echo "Running Windows integration tests for a single version only: ${single_version}"
-
-    if [ "${version}" != "${single_version}" ]; then
-        echo "Skipping this job since it is for: ${version}"
-        exit 0
-    fi
-fi
-
-for py_version in "${python_versions[@]}"; do
-    changed_all_target="all"
-    changed_all_mode="default"
-
-    if [ "${py_version}" == "${python_default}" ]; then
-        # smoketest tests
-        if [ "${CHANGED}" ]; then
-            # with change detection enabled run tests for anything changed
-            # use the smoketest tests for any change that triggers all tests
-            ci="${target}"
-            changed_all_target="shippable/windows/smoketest/"
-            if [ "${target}" == "shippable/windows/group1/" ]; then
-                # only run smoketest tests for group1
-                changed_all_mode="include"
-            else
-                # smoketest tests already covered by group1
-                changed_all_mode="exclude"
-            fi
-        else
-            # without change detection enabled run entire test group
-            ci="${target}"
-        fi
-    else
-        # only run minimal tests for group1
-        if [ "${target}" != "shippable/windows/group1/" ]; then continue; fi
-        # minimal tests for other python versions
-        ci="shippable/windows/minimal/"
-    fi
-
-    # terminate remote instances on the final python version tested
-    if [ "${py_version}" = "${python_versions[-1]}" ]; then
-        terminate="always"
-    else
-        terminate="never"
-    fi
-
-    # shellcheck disable=SC2086
-    ansible-test windows-integration --color -v --retry-on-error "${ci}" ${COVERAGE:+"$COVERAGE"} ${CHANGED:+"$CHANGED"} ${UNSTABLE:+"$UNSTABLE"} \
-        --changed-all-target "${changed_all_target}" --changed-all-mode "${changed_all_mode}" \
-        --controller "docker:default,python=${py_version}" \
-        --target "remote:windows/${version},connection=${connection}+${connection_setting},provider=${provider}" \
-        --remote-terminate "${terminate}" --remote-stage "${stage}"
-done

.azure-pipelines/scripts/combine-coverage.py

@@ -7,7 +7,8 @@ Keep in mind that Azure Pipelines does not enforce unique job display names (onl
 It is up to pipeline authors to avoid name collisions when deviating from the recommended format.
 """
 
-from __future__ import annotations
+from __future__ import (absolute_import, division, print_function)
+__metaclass__ = type
 
 import os
 import re

.azure-pipelines/scripts/publish-codecov.py

@@ -4,7 +4,6 @@ Upload code coverage reports to codecov.io.
 Multiple coverage files from multiple languages are accepted and aggregated after upload.
 Python coverage, as well as PowerShell and Python stubs can all be uploaded.
 """
-from __future__ import annotations
 
 import argparse
 import dataclasses

.azure-pipelines/scripts/report-coverage.sh

@@ -12,6 +12,6 @@ if ! ansible-test --help >/dev/null 2>&1; then
     pip install https://github.com/ansible/ansible/archive/devel.tar.gz --disable-pip-version-check
 fi
 
-# Generate stubs using docker.
-# The use of docker is mandatory when Powershell code is present.
-ansible-test coverage xml --group-by command --stub --docker --color -v
+# Generate stubs using docker (if supported) otherwise fall back to using a virtual environment instead.
+# The use of docker is required when Powershell code is present, but Ansible 2.12 was the first version to support --docker with coverage.
+ansible-test coverage xml --group-by command --stub --docker --color -v || ansible-test coverage xml --group-by command --stub --venv --color -v

.azure-pipelines/scripts/time-command.py

@@ -1,7 +1,8 @@
 #!/usr/bin/env python
 """Prepends a relative timestamp to each input line from stdin and writes it to stdout."""
 
-from __future__ import annotations
+from __future__ import (absolute_import, division, print_function)
+__metaclass__ = type
 
 import sys
 import time

.azure-pipelines/templates/coverage.yml

@@ -6,7 +6,7 @@
 jobs:
   - job: Coverage
     displayName: Code Coverage
-    container: $[ variables.defaultContainer ]
+    container: default
     workspace:
       clean: all
     steps:

.azure-pipelines/templates/test.yml

@@ -11,7 +11,7 @@ jobs:
   - ${{ each job in parameters.jobs }}:
     - job: test_${{ replace(replace(replace(replace(job.test, '/', '_'), '.', '_'), '-', '_'), '@', '_') }}
       displayName: ${{ job.name }}
-      container: $[ variables.defaultContainer ]
+      container: default
       workspace:
         clean: all
       steps:

.git-blame-ignore-revs

@@ -1,6 +0,0 @@
-# .git-blame-ignore-revs
-# Bulk PowerShell sanity fixes
-6def4a3180fe03981ba64c6d8db28fed3bb39c0c
-716631189cb5a3f66b3add98f39e64e98bc17bf7
-# Bulk update of strings from triple single quotes to triple double quotes
-a0495fc31497798a7a833ba7406a9729e1528dd8

.github/BOTMETA.yml

@@ -0,0 +1,151 @@
+automerge: false
+collection_redirect: true
+notifications: false
+files:
+  $module_utils/csharp: &id001
+    labels: windows
+    maintainers: $team_windows_core
+    support: core
+  $module_utils/network:
+    labels: networking
+  $module_utils/network/common:
+    maintainers: $team_networking
+    support: network
+  $module_utils/powershell: *id001
+  $modules:
+    ignored: ryansb tomaszkiewicz
+  $modules/lineinfile.py: $team_ansible samdoran
+  $modules/stat.py:
+    ignored: bpennypacker
+  $modules/unarchive.py:
+    ignored: dagwieers
+    labels: m:unarchive
+    maintainers: pileofrogs
+  $modules/add_host.py:
+    ignored: skvidal
+    maintainers: $team_ansible
+  $modules/get_url.py: ptux
+  $modules/uri.py:
+    ignored: romeotheriault
+    maintainers: $team_ansible
+  $modules/pip.py: Lujeni webknjaz
+  $modules//yum.py:
+    ignored: skvidal
+    maintainers: $team_ansible kustodian
+  $modules/user.py: $team_ansible samdoran
+  $modules/pause.py: samdoran
+  $modules/wait_for.py: gregswift
+  $plugins/cliconf/:
+    labels: networking
+  $plugins/connection/psrp.py: *id001
+  $plugins/connection/winrm.py: *id001
+  $plugins/doc_fragments/url_windows.py:
+    labels: windows
+    maintainers: $team_windows_core
+    support: core
+  $plugins/httpapi:
+    labels: networking
+    maintainers: $team_networking
+    support: network
+  $plugins/netconf/:
+    labels: networking
+    maintainers: $team_networking
+    support: network
+  $plugins/shell/powershell.py: *id001
+  $plugins/terminal/:
+    labels: networking
+  $plugins/terminal/__init__.py:
+    support: network
+  .github/BOTMETA.yml:
+    labels: botmeta
+    support: core
+  docs/:
+    maintainers:
+    - acozine
+  docs/docsite/rst/community/:
+    maintainers:
+    - gundalow
+  docs/docsite/rst/dev_guide/:
+    maintainers:
+    - gundalow
+  docs/docsite/rst/network/:
+    labels: networking
+    maintainers:
+    - samccann
+  docs/docsite/rst/user_guide/windows: *id001
+  hacking/report.py:
+    notified: mattclay
+  hacking/shippable/:
+    notified: mattclay
+  lib/ansible/cli/scripts/ansible_connection_cli_stub.py:
+    keywords:
+    - persistent connection
+    labels: networking
+  lib/ansible/config/ansible_builtin_runtime.yml:
+    labels: runtime
+    maintainers: gundalow
+  lib/ansible/executor/powershell: *id001
+  lib/ansible/inventory:
+    keywords:
+    - core inventory
+    - inventory
+    - inventory parsing
+  lib/ansible/playbook/handler.py:
+    keywords:
+    - handlers
+  lib/ansible/playbook/role:
+    keywords:
+    - roles path
+    - roles_path
+    - role
+    - role path
+  lib/ansible/playbook/role/include.py:
+    keywords:
+    - include role
+    - include_role
+    - role include
+  lib/ansible/playbook/role/requirement.py:
+    keywords:
+    - role dependencies
+    - role dep
+    - role dependency
+  lib/ansible/release.py:
+    notified: mattclay nitzmahone
+  lib/ansible/template:
+    keywords:
+    - jinja
+    - jinja2
+  lib/ansible/utils/collection_loader.py:
+    notified: mattclay nitzmahone
+  test/integration/targets/incidental_:
+    notified: mattclay
+  test/lib/:
+    notified: mattclay
+  test/lib/ansible_test/_util/controller/sanity/validate-modules:
+    keywords:
+    - validate-modules
+    notified:
+    - mattclay
+  test/lib/ansible_test/_util/controller/sanity/validate-modules/validate_modules/main.py:
+    notified:
+    - gundalow
+    - sivel
+  test/lib/ansible_test/_util/controller/sanity/validate-modules/validate_modules/schema.py:
+    notified:
+    - gundalow
+    - sivel
+  test/sanity/:
+    notified: mattclay
+  test/sanity/ignore.txt:
+    notified: tremble
+  test/support/:
+    notified: mattclay
+  test/utils/shippable/:
+    notified: mattclay
+macros:
+  module_utils: lib/ansible/module_utils
+  modules: lib/ansible/modules
+  plugins: lib/ansible/plugins
+  team_ansible: []
+  team_networking: Qalthos ganeshrn trishnaguha justjais NilashishC danielmellado rohitthakur2590 GomathiselviS
+  team_windows_core: nitzmahone jborean93

.github/CONTRIBUTING.md

@@ -4,75 +4,22 @@ Hi! Nice to see you here!
 
 ## QUESTIONS ?
 
-If you have questions about anything related to Ansible, get in touch with us!
-See [Communicating with the Ansible community](https://docs.ansible.com/ansible/devel/community/communication.html) to find out how.
+Please see the [Community Guide](https://docs.ansible.com/ansible/latest/community/index.html) for information on how to ask questions on the [mailing lists](https://docs.ansible.com/ansible/latest/community/communication.html#mailing-list-information) and IRC.
 
-The [Community Guide](https://docs.ansible.com/ansible/devel/community/index.html) also explains how to contribute
-and interact with the project, including how to submit bug reports and code to Ansible.
-
-Please note that the GitHub issue tracker is not the best place to ask questions for several reasons.
-You'll get more helpful, and quicker, responses in the forum.
+The GitHub issue tracker is not the best place for questions for various reasons, but both IRC and the mailing list are very helpful places for those things, as the community page explains best.
 
 ## CONTRIBUTING ?
 
-By contributing to this project you agree to the [Developer Certificate of Origin (DCO)](#developer-certificate-of-origin-dco).
+By contributing you agree that these contributions are your own (or approved by your employer) and you grant a full, complete, irrevocable copyright license to all users and developers of the project, present and future, pursuant to the license of the project. You can also read the same [CLA](https://docs.ansible.com/ansible/latest/community/contributor_license_agreement.html) on the Ansible docsite.
 
-The Ansible project is licensed under the [GPL-3.0](COPYING) or later. Some portions of the code fall under other licenses as noted in individual files.
-
-The Ansible project accepts contributions through GitHub pull requests.
-Please review the [Community Guide](https://docs.ansible.com/ansible/devel/community/index.html) for more information on contributing to Ansible.
+Please review the [Community Guide](https://docs.ansible.com/ansible/latest/community/index.html) for more information on contributing to Ansible.
 
 ## BUG TO REPORT ?
 
-First and foremost, also check the [Community Guide](https://docs.ansible.com/ansible/devel/community/index.html).
+First and foremost, also check the [Community Guide](https://docs.ansible.com/ansible/latest/community/index.html).
 
-You can report bugs or make enhancement requests at
-the [Ansible GitHub issue page](http://github.com/ansible/ansible/issues/new/choose) by filling out the issue template that will be presented.
+You can report bugs or make enhancement requests at the [Ansible GitHub issue page](http://github.com/ansible/ansible/issues/new/choose) by filling out the issue template that will be presented.
 
-Also please make sure you are testing on the latest released version of Ansible or the development branch.
-See the [Installation Guide](https://docs.ansible.com/ansible/latest/installation_guide/intro_installation.html) for details.
+Also please make sure you are testing on the latest released version of Ansible or the development branch; see the [Installation Guide](https://docs.ansible.com/ansible/latest/installation_guide/intro_installation.html) for details.
 
 Thanks!
-
-## DEVELOPER CERTIFICATE OF ORIGIN (DCO)
-
-This document was created by the Linux Kernel community and is a simple statement that you, as a contributor, have the legal right to make the contribution.
-
-```text
-Developer Certificate of Origin
-Version 1.1
-
-Copyright (C) 2004, 2006 The Linux Foundation and its contributors.
-1 Letterman Drive
-Suite D4700
-San Francisco, CA, 94129
-
-Everyone is permitted to copy and distribute verbatim copies of this
-license document, but changing it is not allowed.
-
-Developer's Certificate of Origin 1.1
-
-By making a contribution to this project, I certify that:
-
-(a) The contribution was created in whole or in part by me and I
-    have the right to submit it under the open source license
-    indicated in the file; or
-
-(b) The contribution is based upon previous work that, to the best
-    of my knowledge, is covered under an appropriate open source
-    license and I have the right under that license to submit that
-    work with modifications, whether created in whole or in part
-    by me, under the same open source license (unless I am
-    permitted to submit under a different license), as indicated
-    in the file; or
-
-(c) The contribution was provided directly to me by some other
-    person who certified (a), (b) or (c) and I have not modified
-    it.
-
-(d) I understand and agree that this project and the contribution
-    are public and that a record of the contribution (including all
-    personal information I submit with it, including my sign-off) is
-    maintained indefinitely and may be redistributed consistent with
-    this project or the open source license(s) involved.
-```

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -19,14 +19,13 @@ body:
       Also test if the latest release and devel branch are affected too.
 
 
-      **Tip:** If you are seeking community support, please see
-      [Communicating with the Ansible community][communication] to
-      get in touch and ask questions.
+      **Tip:** If you are seeking community support, please consider
+      [starting a mailing list thread or chatting in IRC][ML||IRC].
 
 
 
-      [communication]:
-      https://docs.ansible.com/ansible/devel/community/communication.html
+      [ML||IRC]:
+      https://docs.ansible.com/ansible-core/devel/community/communication.html?utm_medium=github&utm_source=issue_form--bug_report.yml#mailing-list-information
 
       [issue search]: ../search?q=is%3Aissue&type=issues
 
@@ -47,7 +46,23 @@ body:
 - type: dropdown
   attributes:
     label: Issue Type
-    description: This is a marker for our automatic bot. Do not change it.
+    description: >
+      Please select the single available option in the drop-down.
+
+      <details>
+        <summary>
+          <em>Why?</em>
+        </summary>
+
+        We would do it by ourselves but unfortunatelly, the curent
+        edition of GitHub Issue Forms Alpha does not support this yet 🤷
+
+
+        _We will make it easier in the future, once GitHub
+        supports dropdown defaults. Promise!_
+
+      </details>
+    # FIXME: Once GitHub allows defining the default choice, update this
     options:
     - Bug Report
   validations:
@@ -72,7 +87,7 @@ body:
 
 
       [collections org]: /ansible-collections
-    placeholder: dnf, apt, pip, user etc.
+    placeholder: dnf, apt, yum, pip, user etc.
   validations:
     required: true
 
@@ -81,7 +96,7 @@ body:
     label: Ansible Version
     description: >-
       Paste verbatim output from `ansible --version` below, under
-      the prompt line. Please don't wrap it with triple backticks — your
+      the prompt line. Please don't wrap it with tripple backticks — your
       whole input will be turned into a code snippet automatically.
     render: console
     value: |
@@ -104,17 +119,15 @@ body:
   attributes:
     label: Configuration
     description: >-
-      Paste verbatim output from `ansible-config dump --only-changed -t all` below, under the prompt line.
-      (if using a version older than ansible-core 2.12 you should omit the '-t all')
-      Please don't wrap it with triple backticks — your
+      Paste verbatim output from `ansible-config dump --only-changed`
+      below, under the prompt line.
+      Please don't wrap it with tripple backticks — your
       whole input will be turned into a code snippet automatically.
     render: console
     value: |
-      # if using a version older than ansible-core 2.12 you should omit the '-t all'
-      $ ansible-config dump --only-changed -t all
+      $ ansible-config dump --only-changed
     placeholder: |
-      # if using a version older than ansible-core 2.12 you should omit the '-t all'
-      $ ansible-config dump --only-changed -t all
+      $ ansible-config dump --only-changed
       DEFAULT_GATHERING(~/src/github/ansible/ansible/ansible.cfg) = smart
       DEFAULT_HOST_LIST(~/src/github/ansible/ansible/ansible.cfg) = ['~/src/github/ansible/ansible/hosts']
       DEFAULT_VAULT_PASSWORD_FILE(~/src/github/ansible/ansible/ansible.cfg) = ~/src/github/ansible/ansible/vault/print-password.sh
@@ -178,7 +191,7 @@ body:
     description: |
       Describe what actually happened. If possible run with extra verbosity (`-vvvv`).
 
-      Paste verbatim command output and don't wrap it with triple backticks — your
+      Paste verbatim command output and don't wrap it with tripple backticks — your
       whole input will be turned into a code snippet automatically.
     render: console
     placeholder: >-
@@ -234,7 +247,7 @@ body:
 
 
       [ansibot help]:
-      /ansible/ansibotmini#ansibotmini
+      /ansible/ansibullbot/blob/master/ISSUE_HELP.md#for-issue-submitters
 
 
 - type: checkboxes
@@ -243,7 +256,7 @@ body:
     description: |
       Read the [Ansible Code of Conduct][CoC] first.
 
-      [CoC]: https://docs.ansible.com/ansible/devel/community/code_of_conduct.html?utm_medium=github&utm_source=issue_form--bug_report.yml
+      [CoC]: https://docs.ansible.com/ansible/latest/community/code_of_conduct.html?utm_medium=github&utm_source=issue_form--bug_report.yml
     options:
     - label: I agree to follow the Ansible Code of Conduct
       required: true

.github/ISSUE_TEMPLATE/config.yml

@@ -2,7 +2,7 @@
 blank_issues_enabled: false  # default: true
 contact_links:
 - name: 🔐 Security bug report 🔥
-  url: https://docs.ansible.com/ansible/devel/community/reporting_bugs_and_features.html?utm_medium=github&utm_source=issue_template_chooser
+  url: https://docs.ansible.com/ansible/latest/community/reporting_bugs_and_features.html?utm_medium=github&utm_source=issue_template_chooser
   about: |
     Please learn how to report security vulnerabilities here.
 
@@ -11,15 +11,15 @@ contact_links:
     a prompt response.
 
     For more information, see
-    https://docs.ansible.com/ansible/devel/community/reporting_bugs_and_features.html
+    https://docs.ansible.com/ansible/latest/community/reporting_bugs_and_features.html
 - name: 📝 Ansible Code of Conduct
-  url: https://docs.ansible.com/ansible/devel/community/code_of_conduct.html?utm_medium=github&utm_source=issue_template_chooser
+  url: https://docs.ansible.com/ansible/latest/community/code_of_conduct.html?utm_medium=github&utm_source=issue_template_chooser
   about: ❤ Be nice to other members of the community. ☮ Behave.
-- name: 💬 Talk to the community
-  url: https://docs.ansible.com/ansible/devel/community/communication.html?utm_medium=github&utm_source=issue_template_chooser#forum
+- name: 💬 Talks to the community
+  url: https://docs.ansible.com/ansible/latest/community/communication.html?utm_medium=github&utm_source=issue_template_chooser#mailing-list-information
   about: Please ask and answer usage questions here
 - name: ⚡ Working groups
-  url: https://forum.ansible.com/g?utm_medium=github&utm_source=issue_template_chooser
+  url: https://github.com/ansible/community/wiki
   about: Interested in improving a specific area? Become a part of a working group!
 - name: 💼 For Enterprise
   url: https://www.ansible.com/products/engine?utm_medium=github&utm_source=issue_template_chooser

.github/ISSUE_TEMPLATE/documentation_report.yml

@@ -22,46 +22,18 @@ body:
       Also test if the latest release and devel branch are affected too.
 
 
-      **Tip:** If you are seeking community support, please see
-      [Communicating with the Ansible community][communication] to
-      get in touch and ask questions.
+      **Tip:** If you are seeking community support, please consider
+      [starting a mailing list thread or chatting in IRC][ML||IRC].
 
 
-
-      [communication]:
-      https://docs.ansible.com/ansible/devel/community/communication.html
+      [ML||IRC]:
+      https://docs.ansible.com/ansible-core/devel/community/communication.html?utm_medium=github&utm_source=issue_form--documentation_report.yml#mailing-list-information
 
       [issue search]: ../search?q=is%3Aissue&type=issues
 
       [submit a pull request]:
       https://docs.ansible.com/ansible-core/devel/community/documentation_contributions.html
 
-- type: markdown
-  attributes:
-    value: >
-      **Check the repository for your issue.**
-
-      Source files for Ansible community documentation are
-      hosted in different repositories. Please make sure to file an
-      issue in the correct project.
-
-      Documentation for modules/plugins/etc that are officially
-      supported by the Ansible Core Engineering team is available
-      in this (`ansible/ansible`) repository.
-
-      The Installation Guide, Playbook Guide, Developer Guide,
-      and other documentation is available in the
-      [ansible/ansible-documentation] repository.
-      Documentation for other modules/plugins/etc is likely to be
-      available in one of the [Ansible Collections][collections index].
-      If available in the collection documentation, select the
-      **Issue Tracker** button to go directly to the GitHub issues.
-
-
-      [ansible/ansible-documentation]: /ansible/ansible-documentation
-
-      [collections index]:
-      https://docs.ansible.com/ansible/latest/collections/index.html
 
 - type: textarea
   attributes:
@@ -84,7 +56,23 @@ body:
 - type: dropdown
   attributes:
     label: Issue Type
-    description: This is a marker for our automatic bot. Do not change it.
+    description: >
+      Please select the single available option in the drop-down.
+
+      <details>
+        <summary>
+          <em>Why?</em>
+        </summary>
+
+        We would do it by ourselves but unfortunatelly, the curent
+        edition of GitHub Issue Forms Alpha does not support this yet 🤷
+
+
+        _We will make it easier in the future, once GitHub
+        supports dropdown defaults. Promise!_
+
+      </details>
+    # FIXME: Once GitHub allows defining the default choice, update this
     options:
     - Documentation Report
   validations:
@@ -97,7 +85,19 @@ body:
       Write the short name of the rst file, module, plugin, task or
       feature below, *use your best guess if unsure*.
 
-    placeholder: lib/ansible/modules/copy.py
+
+      **Tip:** Be advised that the source for some parts of the
+      documentation are hosted outside of this repository. If the page
+      you are reporting describes modules/plugins/etc that are not
+      officially supported by the Ansible Core Engineering team, there
+      is a good chance that it is coming from one of the [Ansible
+      Collections maintained by the community][collections org]. If this
+      is the case, please make sure to file an issue under the
+      appropriate project there instead.
+
+
+      [collections org]: /ansible-collections
+    placeholder: docs/docsite/rst/dev_guide/debugging.rst
   validations:
     required: true
 
@@ -106,7 +106,7 @@ body:
     label: Ansible Version
     description: >-
       Paste verbatim output from `ansible --version` below, under
-      the prompt line. Please don't wrap it with triple backticks — your
+      the prompt line. Please don't wrap it with tripple backticks — your
       whole input will be turned into a code snippet automatically.
     render: console
     value: |
@@ -129,17 +129,15 @@ body:
   attributes:
     label: Configuration
     description: >-
-      Paste verbatim output from `ansible-config dump --only-changed -t all` below, under the prompt line.
-      (if using a version older than ansible-core 2.12 you should omit the '-t all')
-      Please don't wrap it with triple backticks — your
+      Paste verbatim output from `ansible-config dump --only-changed`
+      below, under the prompt line.
+      Please don't wrap it with tripple backticks — your
       whole input will be turned into a code snippet automatically.
     render: console
     value: |
-      # if using a version older than ansible-core 2.12 you should omit the '-t all'
-      $ ansible-config dump --only-changed -t all
+      $ ansible-config dump --only-changed
     placeholder: |
-      # if using a version older than ansible-core 2.12 you should omit the '-t all'
-      $ ansible-config dump --only-changed -t all
+      $ ansible-config dump --only-changed
       DEFAULT_GATHERING(~/src/github/ansible/ansible/ansible.cfg) = smart
       DEFAULT_HOST_LIST(~/src/github/ansible/ansible/ansible.cfg) = ['~/src/github/ansible/ansible/hosts']
       DEFAULT_VAULT_PASSWORD_FILE(~/src/github/ansible/ansible/ansible.cfg) = ~/src/github/ansible/ansible/vault/print-password.sh
@@ -185,7 +183,7 @@ body:
 
 
       [ansibot help]:
-      /ansible/ansibotmini#ansibotmini
+      /ansible/ansibullbot/blob/master/ISSUE_HELP.md#for-issue-submitters
 
 
 - type: checkboxes
@@ -194,7 +192,7 @@ body:
     description: |
       Read the [Ansible Code of Conduct][CoC] first.
 
-      [CoC]: https://docs.ansible.com/ansible/devel/community/code_of_conduct.html?utm_medium=github&utm_source=issue_form--documentation_report.yml
+      [CoC]: https://docs.ansible.com/ansible/latest/community/code_of_conduct.html?utm_medium=github&utm_source=issue_form--documentation_report.yml
     options:
     - label: I agree to follow the Ansible Code of Conduct
       required: true

.github/ISSUE_TEMPLATE/feature_request.yml

@@ -21,7 +21,8 @@ body:
 
       If unsure, consider filing a [new proposal] instead outlining your
       use-cases, the research and implementation considerations. Then,
-      start a discussion in the [Ansible forum][forum].
+      start a discussion on one of the public [IRC meetings] we have just
+      for this.
 
 
       <details>
@@ -43,22 +44,21 @@ body:
       Also test if the devel branch does not already implement this.
 
 
-      **Tip:** If you are seeking community support, please see
-      [Communicating with the Ansible community][communication] to
-      get in touch and ask questions.
+      **Tip:** If you are seeking community support, please consider
+      [starting a mailing list thread or chatting in IRC][ML||IRC].
 
 
 
       [contribute to collections]:
       https://docs.ansible.com/ansible-core/devel/community/contributing_maintained_collections.html?utm_medium=github&utm_source=issue_form--feature_request.yml
 
-      [communication]:
-      https://docs.ansible.com/ansible/devel/community/communication.html
+      [IRC meetings]:
+        https://docs.ansible.com/ansible-core/devel/community/communication.html?utm_medium=github&utm_source=issue_form--feature_request.yml#irc-meetings
 
       [issue search]: ../search?q=is%3Aissue&type=issues
 
-      [forum help]:
-      https://forum.ansible.com/c/help/6
+      [ML||IRC]:
+      https://docs.ansible.com/ansible-core/devel/community/communication.html?utm_medium=github&utm_source=issue_form--feature_request.yml#mailing-list-information
 
       [new proposal]: ../../proposals/issues/new
 
@@ -101,7 +101,23 @@ body:
 - type: dropdown
   attributes:
     label: Issue Type
-    description: This is a marker for our automatic bot. Do not change it.
+    description: >
+      Please select the single available option in the drop-down.
+
+      <details>
+        <summary>
+          <em>Why?</em>
+        </summary>
+
+        We would do it by ourselves but unfortunatelly, the curent
+        edition of GitHub Issue Forms Alpha does not support this yet 🤷
+
+
+        _We will make it easier in the future, once GitHub
+        supports dropdown defaults. Promise!_
+
+      </details>
+    # FIXME: Once GitHub allows defining the default choice, update this
     options:
     - Feature Idea
   validations:
@@ -123,7 +139,7 @@ body:
 
 
       [collections org]: /ansible-collections
-    placeholder: dnf, apt, pip, user etc.
+    placeholder: dnf, apt, yum, pip, user etc.
   validations:
     required: true
 
@@ -160,7 +176,7 @@ body:
 
 
       [ansibot help]:
-      /ansible/ansibotmini#ansibotmini
+      /ansible/ansibullbot/blob/master/ISSUE_HELP.md#for-issue-submitters
 
 
 - type: checkboxes
@@ -169,7 +185,7 @@ body:
     description: |
       Read the [Ansible Code of Conduct][CoC] first.
 
-      [CoC]: https://docs.ansible.com/ansible/devel/community/code_of_conduct.html?utm_medium=github&utm_source=issue_form--feature_request.yml
+      [CoC]: https://docs.ansible.com/ansible/latest/community/code_of_conduct.html?utm_medium=github&utm_source=issue_form--feature_request.yml
     options:
     - label: I agree to follow the Ansible Code of Conduct
       required: true

.github/ISSUE_TEMPLATE/internal_issue.md

@@ -1,10 +0,0 @@
----
-name: Internal Issue
-about: Free-form issue creation for core maintainer use only.
-title: ''
-labels: [core-internal]
-assignees: ''
----
-
-
-@ansibot bot_skip

.github/ISSUE_TEMPLATE/pre_release.yml

@@ -1,42 +0,0 @@
-name: Pre-Release Bug Report
-description: File a bug report against a pre-release version
-labels:
-  - bug
-  - pre_release
-assignees:
-  - nitzmahone
-  - mattclay
-body:
-  - type: markdown
-    attributes:
-      value: |
-        ## Bug Report
-  - type: textarea
-    attributes:
-      label: Ansible Version
-      description: Paste the full output from `ansible --version` below.
-      render: console
-      placeholder: $ ansible --version
-    validations:
-      required: true
-  - type: textarea
-    attributes:
-      label: Summary
-      description: Describe the issue with any relevant steps to reproduce.
-    validations:
-      required: true
-  - type: dropdown
-    attributes:
-      label: <!-- Bot instructions (ignore this) -->
-      options:
-        - |
-          <!--
-          ### Component Name
-          bin/ansible
-          ### Issue Type
-          Bug Report
-          ### Configuration
-          ### OS / Environment
-          -->
-    validations:
-      required: true

.github/PULL_REQUEST_TEMPLATE.md

@@ -1 +0,0 @@
-PULL_REQUEST_TEMPLATE/Unclear purpose or motivation.md

.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,23 @@
+##### SUMMARY
+<!--- Describe the change below, including rationale and design decisions -->
+
+<!--- HINT: Include "Fixes #nnn" if you are fixing an existing issue -->
+
+##### ISSUE TYPE
+<!--- Pick one below and delete the rest -->
+- Bugfix Pull Request
+- Docs Pull Request
+- Feature Pull Request
+- Test Pull Request
+
+##### COMPONENT NAME
+<!--- Write the short name of the module, plugin, task or feature below -->
+
+##### ADDITIONAL INFORMATION
+<!--- Include additional information to help people understand the change here -->
+<!--- A step-by-step reproduction of the problem is helpful if there is no related issue -->
+
+<!--- Paste verbatim command output below, e.g. before and after your change -->
+```paste below
+
+```

.github/PULL_REQUEST_TEMPLATE/Bug fix.md

@@ -1,9 +0,0 @@
-##### SUMMARY
-
-<!--- Describe the change below, including rationale and design decisions -->
-
-<!--- Add "Fixes #1234" or steps to reproduce the problem if there is no corresponding issue -->
-
-##### ISSUE TYPE
-
-- Bugfix Pull Request

.github/PULL_REQUEST_TEMPLATE/Documentation change.md

@@ -1,9 +0,0 @@
-##### SUMMARY
-
-<!--- Describe the change below, including rationale -->
-
-<!--- Add "Fixes #1234" if there is a corresponding issue -->
-
-##### ISSUE TYPE
-
-- Docs Pull Request

.github/PULL_REQUEST_TEMPLATE/New feature.md

@@ -1,9 +0,0 @@
-##### SUMMARY
-
-<!--- Describe the change below, including rationale and design decisions -->
-
-<!--- Add "Fixes #1234" if there is a corresponding issue -->
-
-##### ISSUE TYPE
-
-- Feature Pull Request

.github/PULL_REQUEST_TEMPLATE/PULL_REQUEST_TEMPLATE.md

@@ -1 +0,0 @@
-Unclear purpose or motivation.md

.github/PULL_REQUEST_TEMPLATE/Tests.md

@@ -1,9 +0,0 @@
-##### SUMMARY
-
-<!--- Describe the change below, including rationale and design decisions -->
-
-<!--- Add "Fixes #1234" if there is a corresponding issue -->
-
-##### ISSUE TYPE
-
-- Test Pull Request

.github/PULL_REQUEST_TEMPLATE/Unclear purpose or motivation.md

@@ -1,14 +0,0 @@
-##### SUMMARY
-
-<!--- Describe the change below, including rationale and design decisions -->
-
-<!--- Add "Fixes #1234" or steps to reproduce the problem if there is no corresponding issue -->
-
-##### ISSUE TYPE
-
-<!--- Pick one below and delete the rest -->
-
-- Bugfix Pull Request
-- Docs Pull Request
-- Feature Pull Request
-- Test Pull Request

.github/RELEASE_NAMES.txt

@@ -1,20 +0,0 @@
-2.19.0  What Is and What Should Never Be
-2.18.0  Fool in the Rain
-2.17.0  Gallows Pole
-2.16.0  All My Love
-2.15.0  Ten Years Gone
-2.14.0  C'mon Everybody
-2.13.0  Nobody's Fault but Mine
-2.12.0  Dazed and Confused
-2.11.0  Hey Hey, What Can I Do
-2.10.0  When the Levee Breaks
-2.9.0   Immigrant Song
-2.8.0   How Many More Times
-2.7.0   In the Light
-2.6.0   Heartbreaker
-2.5.0   Kashmir
-2.4.0   Dancing Days
-2.3.0   Ramble On
-2.2.0   The Battle of Evermore
-2.1.0   The Song Remains the Same
-2.0.0   Over the Hills and Far Away

.github/RELEASE_NAMES.yml

@@ -0,0 +1,15 @@
+---
+- 2.13.0  Nobody's Fault but Mine
+- 2.12.0  Dazed and Confused
+- 2.11.0  Hey Hey, What Can I Do
+- 2.10.0  When the Levee Breaks
+- 2.9.0   Immigrant Song
+- 2.8.0   How Many More Times
+- 2.7.0   In the Light
+- 2.6.0   Heartbreaker
+- 2.5.0   Kashmir
+- 2.4.0   Dancing Days
+- 2.3.0   Ramble On
+- 2.2.0   The Battle of Evermore
+- 2.1.0   The Song Remains the Same
+- 2.0.0   Over the Hills and Far Away

.gitignore

@@ -73,16 +73,7 @@ coverage.xml
 /test/cache/*
 # Development
 /test/develop
-# Environments
-.env
-.venv
-env/
-venv/
-ENV/
-env.bak/
-venv.bak/
 venv
-env
 Vagrantfile
 .vagrant
 # Backwards compatibility with `stable-2.9` and earlier branches.
@@ -92,8 +83,6 @@ Vagrantfile
 /lib/ansible_base.egg-info/
 # First used in the `devel` branch during Ansible 2.11 development.
 /lib/ansible_core.egg-info/
-# First used in the `devel` branch during Ansible 2.18 development.
-/ansible_core.egg-info/
 # vendored lib dir
 lib/ansible/_vendor/*
 !lib/ansible/_vendor/__init__.py
@@ -101,6 +90,8 @@ lib/ansible/_vendor/*
 /test/integration/cloud-config-*.*
 !/test/integration/cloud-config-*.*.template
 .python-version
+/hacking/tests/selinux/*.mod
+/hacking/tests/selinux/*.pp
 # Release directory
 packaging/release/ansible_release
 /.cache/

COPYING

@@ -1,7 +1,7 @@
                     GNU GENERAL PUBLIC LICENSE
                        Version 3, 29 June 2007
 
- Copyright (C) 2007 Free Software Foundation, Inc. <https://fsf.org/>
+ Copyright (C) 2007 Free Software Foundation, Inc. <http://fsf.org/>
  Everyone is permitted to copy and distribute verbatim copies
  of this license document, but changing it is not allowed.
 
@@ -645,7 +645,7 @@ the "copyright" line and a pointer to where the full notice is found.
     GNU General Public License for more details.
 
     You should have received a copy of the GNU General Public License
-    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+    along with this program.  If not, see <http://www.gnu.org/licenses/>.
 
 Also add information on how to contact you by electronic and paper mail.
 
@@ -664,11 +664,12 @@ might be different; for a GUI interface, you would use an "about box".
   You should also get your employer (if you work as a programmer) or school,
 if any, to sign a "copyright disclaimer" for the program, if necessary.
 For more information on this, and how to apply and follow the GNU GPL, see
-<https://www.gnu.org/licenses/>.
+<http://www.gnu.org/licenses/>.
 
   The GNU General Public License does not permit incorporating your program
 into proprietary programs.  If your program is a subroutine library, you
 may consider it more useful to permit linking proprietary applications with
 the library.  If this is what you want to do, use the GNU Lesser General
 Public License instead of this License.  But first, please read
-<https://www.gnu.org/licenses/why-not-lgpl.html>.
+<http://www.gnu.org/philosophy/why-not-lgpl.html>.
+

MANIFEST.in

@@ -1,10 +1,51 @@
+include README.rst
 include COPYING
+include SYMLINK_CACHE.json
+include requirements.txt
+recursive-include docs *
+include docs/docsite/rst/collections/all_plugins.rst
+exclude docs/docsite/rst_warnings
+exclude docs/docsite/rst/conf.py
+exclude docs/docsite/rst/index.rst
+exclude docs/docsite/rst/dev_guide/index.rst
+exclude docs/docsite/rst/dev_guide/testing/sanity/bin-symlinks.rst
+exclude docs/docsite/rst/dev_guide/testing/sanity/botmeta.rst
+exclude docs/docsite/rst/dev_guide/testing/sanity/integration-aliases.rst
+exclude docs/docsite/rst/dev_guide/testing/sanity/release-names.rst
+recursive-exclude docs/docsite/_build *
+recursive-exclude docs/docsite/_extensions *.pyc *.pyo
+include examples/hosts
+include examples/ansible.cfg
+include examples/scripts/ConfigureRemotingForAnsible.ps1
+include examples/scripts/upgrade_to_ps3.ps1
+include lib/ansible/keyword_desc.yml
+recursive-include lib/ansible/executor/powershell *.ps1
+recursive-include lib/ansible/module_utils/csharp *.cs
+recursive-include lib/ansible/module_utils/powershell *.psm1
+recursive-include lib/ansible/modules/windows *.ps1
+recursive-include lib/ansible/galaxy/data *.yml *.j2 README.md ansible.cfg inventory .git_keep
+recursive-include lib/ansible/config *.yml
+recursive-include licenses *.txt
+recursive-include packaging *
+recursive-include test/ansible_test *.py Makefile
+recursive-include test/integration *
+recursive-include test/lib/ansible_test/config *.yml *.template
+recursive-include test/lib/ansible_test/_data *.cfg *.in *.ini *.ps1 *.txt *.yml coveragerc
+recursive-include test/lib/ansible_test/_util *.cfg *.ini *.json *.ps1 *.psd1 *.py *.sh *.txt *.yml
+recursive-include test/lib/ansible_test/_util/controller/sanity/validate-modules validate-modules
+recursive-include test/sanity *.in *.json *.py *.txt
+recursive-include test/support *.py *.ps1 *.psm1 *.cs
+exclude test/sanity/code-smell/botmeta.*
+exclude test/sanity/code-smell/release-names.*
+exclude test/lib/ansible_test/_internal/commands/sanity/bin_symlinks.py
+exclude test/lib/ansible_test/_internal/commands/sanity/integration_aliases.py
+recursive-include test/units *
+include Makefile
+include MANIFEST.in
 include changelogs/CHANGELOG*.rst
 include changelogs/changelog.yaml
-include licenses/*.txt
-include requirements.txt
-recursive-include packaging *.py *.j2
-recursive-include test/integration *
-recursive-include test/sanity *.in *.json *.py *.txt *.ini
-recursive-include test/support *.py *.ps1 *.psm1 *.cs *.md
-recursive-include test/units *
+recursive-include hacking/build_library *.py
+include hacking/build-ansible.py
+include hacking/test-module.py
+include hacking/update-sanity-requirements.py
+include bin/*

Makefile

@@ -0,0 +1,154 @@
+# WARN: gmake syntax
+########################################################
+# Makefile for Ansible
+#
+# useful targets:
+#   make clean ---------------- clean up
+#   make sdist ---------------- produce a tarball
+#   make tests ---------------- run the tests (see https://docs.ansible.com/ansible/devel/dev_guide/testing_units.html for requirements)
+
+########################################################
+# variable section
+
+NAME = ansible-core
+OS = $(shell uname -s)
+PREFIX ?= '/usr/local'
+SDIST_DIR ?= 'dist'
+
+# This doesn't evaluate until it's called. The -D argument is the
+# directory of the target file ($@), kinda like `dirname`.
+MANPAGES ?= $(patsubst %.rst.in,%,$(wildcard ./docs/man/man1/ansible*.1.rst.in))
+ifneq ($(shell which rst2man 2>/dev/null),)
+ASCII2MAN = rst2man $< $@
+else ifneq ($(shell which rst2man.py 2>/dev/null),)
+ASCII2MAN = rst2man.py $< $@
+else
+ASCII2MAN = @echo "ERROR: rst2man from docutils command is not installed but is required to build $(MANPAGES)" && exit 1
+endif
+
+PYTHON ?= python
+GENERATE_CLI = hacking/build-ansible.py generate-man
+
+# fetch version from project release.py as single source-of-truth
+VERSION := $(shell $(PYTHON) packaging/release/versionhelper/version_helper.py --raw || echo error)
+ifeq ($(findstring error,$(VERSION)), error)
+$(error "version_helper failed")
+endif
+
+# ansible-test parameters
+ANSIBLE_TEST ?= bin/ansible-test
+TEST_FLAGS ?=
+
+# ansible-test units parameters (make test / make test-py3)
+PYTHON_VERSION ?= $(shell python2 -c 'import sys; print("%s.%s" % sys.version_info[:2])')
+PYTHON3_VERSION ?= $(shell python3 -c 'import sys; print("%s.%s" % sys.version_info[:2])')
+
+# ansible-test integration parameters (make integration)
+IMAGE ?= centos7
+TARGET ?=
+
+########################################################
+
+.PHONY: all
+all: clean python
+
+.PHONY: tests
+tests:
+	$(ANSIBLE_TEST) units -v --python $(PYTHON_VERSION) $(TEST_FLAGS)
+
+.PHONY: tests-py3
+tests-py3:
+	$(ANSIBLE_TEST) units -v --python $(PYTHON3_VERSION) $(TEST_FLAGS)
+
+.PHONY: integration
+integration:
+	$(ANSIBLE_TEST) integration -v --docker $(IMAGE) $(TARGET) $(TEST_FLAGS)
+
+# Regenerate %.1.rst if %.1.rst.in has been modified more
+# recently than %.1.rst.
+%.1.rst: %.1.rst.in
+	sed "s/%VERSION%/$(VERSION)/" $< > $@
+	rm $<
+
+# Regenerate %.1 if %.1.rst or release.py has been modified more
+# recently than %.1. (Implicitly runs the %.1.rst recipe)
+%.1: %.1.rst lib/ansible/release.py
+	$(ASCII2MAN)
+
+.PHONY: clean
+clean:
+	@echo "Cleaning up distutils stuff"
+	rm -rf build
+	rm -rf dist
+	rm -rf lib/ansible*.egg-info/
+	@echo "Cleaning up byte compiled python stuff"
+	find . -type f -regex ".*\.py[co]$$" -delete
+	find . -type d -name "__pycache__" -delete
+	@echo "Cleaning up editor backup files"
+	find . -type f -not -path ./test/units/inventory_test_data/group_vars/noparse/all.yml~ \( -name "*~" -or -name "#*" \) -delete
+	find . -type f \( -name "*.swp" \) -delete
+	@echo "Cleaning up manpage stuff"
+	find ./docs/man -type f -name "*.xml" -delete
+	find ./docs/man -type f -name "*.rst" -delete
+	find ./docs/man/man3 -type f -name "*.3" -delete
+	rm -f ./docs/man/man1/*
+	@echo "Cleaning up output from test runs"
+	rm -rf test/test_data
+	rm -rf logs/
+	rm -rf .cache/
+	rm -f test/units/.coverage*
+	rm -rf test/results/*/*
+	find test/ -type f -name '*.retry' -delete
+	@echo "Cleaning up symlink cache"
+	rm -f SYMLINK_CACHE.json
+	rm -rf docs/json
+	rm -rf docs/js
+	@echo "Cleaning up docsite"
+	$(MAKE) -C docs/docsite clean
+
+.PHONY: python
+python:
+	$(PYTHON) setup.py build
+
+.PHONY: install
+install:
+	$(PYTHON) setup.py install
+
+install_manpages:
+	gzip -9 $(wildcard ./docs/man/man1/ansible*.1)
+	cp $(wildcard ./docs/man/man1/ansible*.1.gz) $(PREFIX)/man/man1/
+
+.PHONY: sdist_check
+sdist_check:
+	$(PYTHON) -c 'import setuptools, sys; sys.exit(int(not (tuple(map(int, setuptools.__version__.split("."))) > (39, 2, 0))))'
+	$(PYTHON) packaging/sdist/check-link-behavior.py
+
+.PHONY: sdist
+sdist: sdist_check clean docs
+	_ANSIBLE_SDIST_FROM_MAKEFILE=1 $(PYTHON) setup.py sdist --dist-dir=$(SDIST_DIR)
+
+# Official releases generate the changelog as the last commit before the release.
+# Snapshots shouldn't result in new checkins so the changelog is generated as
+# part of creating the tarball.
+.PHONY: snapshot
+snapshot: sdist_check clean docs changelog
+	_ANSIBLE_SDIST_FROM_MAKEFILE=1 $(PYTHON) setup.py sdist --dist-dir=$(SDIST_DIR)
+
+.PHONY: sdist_upload
+sdist_upload: clean docs
+	$(PYTHON) setup.py sdist upload 2>&1 |tee upload.log
+
+.PHONY: changelog
+changelog:
+	PYTHONPATH=./lib antsibull-changelog release -vv --use-ansible-doc && PYTHONPATH=./lib antsibull-changelog generate -vv --use-ansible-doc
+
+.PHONY: generate_rst
+generate_rst: lib/ansible/cli/*.py
+	mkdir -p ./docs/man/man1/ ; \
+	$(PYTHON) $(GENERATE_CLI) --template-file=docs/templates/man.j2 --output-dir=docs/man/man1/ --output-format man lib/ansible/cli/*.py
+
+docs: generate_rst
+	$(MAKE) $(MANPAGES)
+
+version:
+	@echo $(VERSION)

README.md

@@ -1,101 +0,0 @@
-[![PyPI version](https://img.shields.io/pypi/v/ansible-core.svg)](https://pypi.org/project/ansible-core)
-[![Docs badge](https://img.shields.io/badge/docs-latest-brightgreen.svg)](https://docs.ansible.com/ansible/latest/)
-[![Chat badge](https://img.shields.io/badge/chat-IRC-brightgreen.svg)](https://docs.ansible.com/ansible/devel/community/communication.html)
-[![Build Status](https://dev.azure.com/ansible/ansible/_apis/build/status/CI?branchName=devel)](https://dev.azure.com/ansible/ansible/_build/latest?definitionId=20&branchName=devel)
-[![Ansible Code of Conduct](https://img.shields.io/badge/code%20of%20conduct-Ansible-silver.svg)](https://docs.ansible.com/ansible/devel/community/code_of_conduct.html)
-[![Ansible mailing lists](https://img.shields.io/badge/mailing%20lists-Ansible-orange.svg)](https://docs.ansible.com/ansible/devel/community/communication.html#mailing-list-information)
-[![Repository License](https://img.shields.io/badge/license-GPL%20v3.0-brightgreen.svg)](COPYING)
-[![Ansible CII Best Practices certification](https://bestpractices.coreinfrastructure.org/projects/2372/badge)](https://bestpractices.coreinfrastructure.org/projects/2372)
-
-# Ansible
-
-Ansible is a radically simple IT automation system. It handles
-configuration management, application deployment, cloud provisioning,
-ad-hoc task execution, network automation, and multi-node orchestration. Ansible makes complex
-changes like zero-downtime rolling updates with load balancers easy. More information on the Ansible [website](https://ansible.com/).
-
-## Design Principles
-
-* Have an extremely simple setup process with a minimal learning curve.
-* Manage machines quickly and in parallel.
-* Avoid custom-agents and additional open ports, be agentless by
-  leveraging the existing SSH daemon.
-* Describe infrastructure in a language that is both machine and human
-  friendly.
-* Focus on security and easy auditability/review/rewriting of content.
-* Manage new remote machines instantly, without bootstrapping any
-  software.
-* Allow module development in any dynamic language, not just Python.
-* Be usable as non-root.
-* Be the easiest IT automation system to use, ever.
-
-## Use Ansible
-
-You can install a released version of Ansible with `pip` or a package manager. See our
-[installation guide](https://docs.ansible.com/ansible/latest/installation_guide/intro_installation.html) for details on installing Ansible
-on a variety of platforms.
-
-Power users and developers can run the `devel` branch, which has the latest
-features and fixes, directly. Although it is reasonably stable, you are more likely to encounter
-breaking changes when running the `devel` branch. We recommend getting involved
-in the Ansible community if you want to run the `devel` branch.
-
-## Communication
-
-Join the Ansible forum to ask questions, get help, and interact with the
-community.
-
-* [Get Help](https://forum.ansible.com/c/help/6): Find help or share your Ansible knowledge to help others.
-  Use tags to filter and subscribe to posts, such as the following:
-  * Posts tagged with [ansible](https://forum.ansible.com/tag/ansible)
-  * Posts tagged with [ansible-core](https://forum.ansible.com/tag/ansible-core)
-  * Posts tagged with [playbook](https://forum.ansible.com/tag/playbook)
-* [Social Spaces](https://forum.ansible.com/c/chat/4): Meet and interact with fellow enthusiasts.
-* [News & Announcements](https://forum.ansible.com/c/news/5): Track project-wide announcements including social events.
-* [Bullhorn newsletter](https://docs.ansible.com/ansible/devel/community/communication.html#the-bullhorn): Get release announcements and important changes.
-
-For more ways to get in touch, see [Communicating with the Ansible community](https://docs.ansible.com/ansible/devel/community/communication.html).
-
-## Contribute to Ansible
-
-* Check out the [Contributor's Guide](./.github/CONTRIBUTING.md).
-* Read [Community Information](https://docs.ansible.com/ansible/devel/community) for all
-  kinds of ways to contribute to and interact with the project,
-  including how to submit bug reports and code to Ansible.
-* Submit a proposed code update through a pull request to the `devel` branch.
-* Talk to us before making larger changes
-  to avoid duplicate efforts. This not only helps everyone
-  know what is going on, but it also helps save time and effort if we decide
-  some changes are needed.
-
-## Coding Guidelines
-
-We document our Coding Guidelines in the [Developer Guide](https://docs.ansible.com/ansible/devel/dev_guide/). We particularly suggest you review:
-
-* [Contributing your module to Ansible](https://docs.ansible.com/ansible/devel/dev_guide/developing_modules_checklist.html)
-* [Conventions, tips, and pitfalls](https://docs.ansible.com/ansible/devel/dev_guide/developing_modules_best_practices.html)
-
-## Branch Info
-
-* The `devel` branch corresponds to the release actively under development.
-* The `stable-2.X` branches correspond to stable releases.
-* Create a branch based on `devel` and set up a [dev environment](https://docs.ansible.com/ansible/devel/dev_guide/developing_modules_general.html#common-environment-setup) if you want to open a PR.
-* See the [Ansible release and maintenance](https://docs.ansible.com/ansible/devel/reference_appendices/release_and_maintenance.html) page for information about active branches.
-
-## Roadmap
-
-Based on team and community feedback, an initial roadmap will be published for a major or minor version (ex: 2.7, 2.8).
-The [Ansible Roadmap page](https://docs.ansible.com/ansible/devel/roadmap/) details what is planned and how to influence the roadmap.
-
-## Authors
-
-Ansible was created by [Michael DeHaan](https://github.com/mpdehaan)
-and has contributions from over 5000 users (and growing). Thanks everyone!
-
-[Ansible](https://www.ansible.com) is sponsored by [Red Hat, Inc.](https://www.redhat.com)
-
-## License
-
-GNU General Public License v3.0 or later
-
-See [COPYING](COPYING) to see the full text.

README.rst

@@ -0,0 +1,115 @@
+|PyPI version| |Docs badge| |Chat badge| |Build Status| |Code Of Conduct| |Mailing Lists| |License| |CII Best Practices|
+
+*******
+Ansible
+*******
+
+Ansible is a radically simple IT automation system. It handles
+configuration management, application deployment, cloud provisioning,
+ad-hoc task execution, network automation, and multi-node orchestration. Ansible makes complex
+changes like zero-downtime rolling updates with load balancers easy. More information on the Ansible `website <https://ansible.com/>`_.
+
+Design Principles
+=================
+
+*  Have an extremely simple setup process with a minimal learning curve.
+*  Manage machines quickly and in parallel.
+*  Avoid custom-agents and additional open ports, be agentless by
+   leveraging the existing SSH daemon.
+*  Describe infrastructure in a language that is both machine and human
+   friendly.
+*  Focus on security and easy auditability/review/rewriting of content.
+*  Manage new remote machines instantly, without bootstrapping any
+   software.
+*  Allow module development in any dynamic language, not just Python.
+*  Be usable as non-root.
+*  Be the easiest IT automation system to use, ever.
+
+Use Ansible
+===========
+
+You can install a released version of Ansible with ``pip`` or a package manager. See our
+`installation guide <https://docs.ansible.com/ansible/latest/installation_guide/intro_installation.html>`_ for details on installing Ansible
+on a variety of platforms.
+
+Power users and developers can run the ``devel`` branch, which has the latest
+features and fixes, directly. Although it is reasonably stable, you are more likely to encounter
+breaking changes when running the ``devel`` branch. We recommend getting involved
+in the Ansible community if you want to run the ``devel`` branch.
+
+Get Involved
+============
+
+*  Read `Community
+   Information <https://docs.ansible.com/ansible/latest/community>`_ for all
+   kinds of ways to contribute to and interact with the project,
+   including mailing list information and how to submit bug reports and
+   code to Ansible.
+*  Join a `Working Group
+   <https://github.com/ansible/community/wiki>`_, an organized community devoted to a specific technology domain or platform.
+*  Submit a proposed code update through a pull request to the ``devel`` branch.
+*  Talk to us before making larger changes
+   to avoid duplicate efforts. This not only helps everyone
+   know what is going on, but it also helps save time and effort if we decide
+   some changes are needed.
+*  For a list of email lists, IRC channels and Working Groups, see the
+   `Communication page <https://docs.ansible.com/ansible/latest/community/communication.html>`_
+
+Coding Guidelines
+=================
+
+We document our Coding Guidelines in the `Developer Guide <https://docs.ansible.com/ansible/devel/dev_guide/>`_. We particularly suggest you review:
+
+* `Contributing your module to Ansible <https://docs.ansible.com/ansible/devel/dev_guide/developing_modules_checklist.html>`_
+* `Conventions, tips, and pitfalls <https://docs.ansible.com/ansible/devel/dev_guide/developing_modules_best_practices.html>`_
+
+Branch Info
+===========
+
+*  The ``devel`` branch corresponds to the release actively under development.
+*  The ``stable-2.X`` branches correspond to stable releases.
+*  Create a branch based on ``devel`` and set up a `dev environment <https://docs.ansible.com/ansible/latest/dev_guide/developing_modules_general.html#common-environment-setup>`_ if you want to open a PR.
+*  See the `Ansible release and maintenance <https://docs.ansible.com/ansible/devel/reference_appendices/release_and_maintenance.html>`_ page for information about active branches.
+
+Roadmap
+=======
+
+Based on team and community feedback, an initial roadmap will be published for a major or minor version (ex: 2.7, 2.8).
+The `Ansible Roadmap page <https://docs.ansible.com/ansible/devel/roadmap/>`_ details what is planned and how to influence the roadmap.
+
+Authors
+=======
+
+Ansible was created by `Michael DeHaan <https://github.com/mpdehaan>`_
+and has contributions from over 5000 users (and growing). Thanks everyone!
+
+`Ansible <https://www.ansible.com>`_ is sponsored by `Red Hat, Inc.
+<https://www.redhat.com>`_
+
+License
+=======
+
+GNU General Public License v3.0 or later
+
+See `COPYING <COPYING>`_ to see the full text.
+
+.. |PyPI version| image:: https://img.shields.io/pypi/v/ansible-core.svg
+   :target: https://pypi.org/project/ansible-core
+.. |Docs badge| image:: https://img.shields.io/badge/docs-latest-brightgreen.svg
+   :target: https://docs.ansible.com/ansible/latest/
+.. |Build Status| image:: https://dev.azure.com/ansible/ansible/_apis/build/status/CI?branchName=devel
+   :target: https://dev.azure.com/ansible/ansible/_build/latest?definitionId=20&branchName=devel
+.. |Chat badge| image:: https://img.shields.io/badge/chat-IRC-brightgreen.svg
+   :target: https://docs.ansible.com/ansible/latest/community/communication.html
+.. |Code Of Conduct| image:: https://img.shields.io/badge/code%20of%20conduct-Ansible-silver.svg
+   :target: https://docs.ansible.com/ansible/latest/community/code_of_conduct.html
+   :alt: Ansible Code of Conduct
+.. |Mailing Lists| image:: https://img.shields.io/badge/mailing%20lists-Ansible-orange.svg
+   :target: https://docs.ansible.com/ansible/latest/community/communication.html#mailing-list-information
+   :alt: Ansible mailing lists
+.. |License| image:: https://img.shields.io/badge/license-GPL%20v3.0-brightgreen.svg
+   :target: COPYING
+   :alt: Repository License
+.. |CII Best Practices| image:: https://bestpractices.coreinfrastructure.org/projects/2372/badge
+   :target: https://bestpractices.coreinfrastructure.org/projects/2372
+   :alt: Ansible CII Best Practices certification

bin/ansible-connection

@@ -0,0 +1 @@
+../lib/ansible/cli/scripts/ansible_connection_cli_stub.py

changelogs/CHANGELOG-v2.13.rst

@@ -0,0 +1,656 @@
+=========================================================
+ansible-core 2.13 "Nobody's Fault but Mine" Release Notes
+=========================================================
+
+.. contents:: Topics
+
+
+v2.13.8
+=======
+
+Release Summary
+---------------
+
+| Release Date: 2023-02-27
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Major Changes
+-------------
+
+- ansible-test - Docker Desktop on WSL2 is now supported (additional configuration required).
+- ansible-test - Docker and Podman are now supported on hosts with cgroup v2 unified. Previously only cgroup v1 and cgroup v2 hybrid were supported.
+- ansible-test - Podman now works on container hosts without systemd. Previously only some containers worked, while others required rootfull or rootless Podman, but would not work with both. Some containers did not work at all.
+- ansible-test - Podman on WSL2 is now supported.
+- ansible-test - When additional cgroup setup is required on the container host, this will be automatically detected. Instructions on how to configure the host will be provided in the error message shown.
+
+Minor Changes
+-------------
+
+- ansible-test - A new ``audit`` option is available when running custom containers. This option can be used to indicate whether a container requires the AUDIT_WRITE capability. The default is ``required``, which most containers will need when using Podman. If necessary, the ``none`` option can be used to opt-out of the capability. This has no effect on Docker, which always provides the capability.
+- ansible-test - A new ``cgroup`` option is available when running custom containers. This option can be used to indicate a container requires cgroup v1 or that it does not use cgroup. The default behavior assumes the container works with cgroup v2 (as well as v1).
+- ansible-test - Add support for provisioning Alpine 3.16 remote instances.
+- ansible-test - Add support for provisioning Fedora 36 remote instances.
+- ansible-test - Add support for provisioning Ubuntu 20.04 remote instances.
+- ansible-test - Add support for provisioning remotes which require ``doas`` for become.
+- ansible-test - Additional log details are shown when containers fail to start or SSH connections to containers fail.
+- ansible-test - Alpine remotes now use ``sudo`` for tests, using ``doas`` only for bootstrapping.
+- ansible-test - Become support for remote instance provisioning is no longer tied to a fixed list of platforms.
+- ansible-test - Connection failures to remote provisioned hosts now show failure details as a warning.
+- ansible-test - Containers included with ansible-test no longer disable seccomp by default.
+- ansible-test - Failure to connect to a container over SSH now results in a clear error. Previously tests would be attempted even after initial connection attempts failed.
+- ansible-test - FreeBSD remotes now use ``sudo`` for tests, using ``su`` only for bootstrapping.
+- ansible-test - Integration tests can be excluded from retries triggered by the ``--retry-on-error`` option by adding the ``retry/never`` alias. This is useful for tests that cannot pass on a retry or are too slow to make retries useful.
+- ansible-test - More details are provided about an instance when provisioning fails.
+- ansible-test - Reduce the polling limit for SSHD startup in containers from 60 retries to 10. The one second delay between retries remains in place.
+- ansible-test - Remote Alpine instances now have the ``acl`` package installed.
+- ansible-test - Remote Fedora instances now have the ``acl`` package installed.
+- ansible-test - Remote FreeBSD instances now have ACLs enabled on the root filesystem.
+- ansible-test - Remote Ubuntu instances now have the ``acl`` package installed.
+- ansible-test - SSH connections from OpenSSH 8.8+ to CentOS 6 containers now work without additional configuration. However, clients older than OpenSSH 7.0 can no longer connect to CentOS 6 containers as a result. The container must have ``centos6`` in the image name for this work-around to be applied.
+- ansible-test - SSH shell connections from OpenSSH 8.8+ to ansible-test provisioned network instances now work without additional configuration. However, clients older than OpenSSH 7.0 can no longer open shell sessions for ansible-test provisioned network instances as a result.
+- ansible-test - Specify the configuration file location required by test plugins when the config file is not found. This resolves issue: https://github.com/ansible/ansible/issues/79411
+- ansible-test - The ``ansible-test env`` command now detects and reports the container ID if running in a container.
+- ansible-test - Unit tests now support network disconnect by default when running under Podman. Previously this feature only worked by default under Docker.
+- ansible-test - Use ``stop --time 0`` followed by ``rm`` to remove ephemeral containers instead of ``rm -f``. This speeds up teardown of ephemeral containers.
+- ansible-test - Warnings are now shown when using containers that were built with VOLUME instructions.
+- ansible-test - When setting the max open files for containers, the container host's limit will be checked. If the host limit is lower than the preferred value, it will be used and a warning will be shown.
+- ansible-test - When using Podman, ansible-test will detect if the loginuid used in containers is incorrect. When this occurs a warning is displayed and the container is run with the AUDIT_CONTROL capability. Previously containers would fail under this situation, with no useful warnings or errors given.
+- ansible-test acme test container - update version to update used Pebble version, underlying Python and Go base containers, and Python requirements (https://github.com/ansible/ansible/pull/79783).
+
+Bugfixes
+--------
+
+- Ansible.Basic.cs - Ignore compiler warning (reported as an error) when running under PowerShell 7.3.x.
+- TaskExecutor - don't ignore templated _raw_params that k=v parser failed to parse (https://github.com/ansible/ansible/issues/79862)
+- ansible-test - Always remove containers after failing to create/run them. This avoids leaving behind created containers when using podman.
+- ansible-test - Avoid using ``exec`` after container startup when possible. This improves container startup performance and avoids intermittent startup issues with some old containers.
+- ansible-test - Connection attempts to managed remote instances no longer abort on ``Permission denied`` errors.
+- ansible-test - Detection for running in a Podman or Docker container has been fixed to detect more scenarios. The new detection relies on ``/proc/self/mountinfo`` instead of ``/proc/self/cpuset``. Detection now works with custom cgroups and private cgroup namespaces.
+- ansible-test - Fix bootstrapping of Python 3.9 on Ubuntu 20.04 remotes.
+- ansible-test - Fix validate-modules error when retrieving PowerShell argspec when retrieved inside a Cmdlet
+- ansible-test - Handle server errors when executing the ``docker info`` command.
+- ansible-test - Multiple containers now work under Podman without specifying the ``--docker-network`` option.
+- ansible-test - Pass the ``XDG_RUNTIME_DIR`` environment variable through to container commands.
+- ansible-test - Perform PyPI proxy configuration after instances are ready and bootstrapping has been completed. Only target instances are affected, as controller instances were already handled this way. This avoids proxy configuration errors when target instances are not yet ready for use.
+- ansible-test - Prevent concurrent / repeat inspections of the same container image.
+- ansible-test - Prevent concurrent / repeat pulls of the same container image.
+- ansible-test - Prevent concurrent execution of cached methods.
+- ansible-test - Show the exception type when reporting errors during instance provisioning.
+- ansible-test - Support Podman 4.4.0+ by adding the ``SYS_CHROOT`` capability when running containers.
+- ansible-test - Temporary executables are now verified as executable after creation. Without this check, path injected scripts may not be found, typically on systems with ``/tmp`` mounted using the "noexec" option. This can manifest as a missing Python interpreter, or use of the wrong Python interpreter, as well as other error conditions.
+- ansible-test - Test containers are now run with the ``--tmpfs`` option for ``/tmp``, ``/run`` and ``/run/lock``. This allows use of containers built without the ``VOLUME`` instruction. Additionally, containers with those volumes defined no longer create anonymous volumes for them. This avoids leaving behind volumes on the container host after the container is stopped and deleted.
+- ansible-test - fix warning message about failing to run an image to include the image name
+- file - touch action in check mode was always returning ok. Fix now evaluates the different conditions and returns the appropriate changed status. (https://github.com/ansible/ansible/issues/79360)
+
+Known Issues
+------------
+
+- ansible-test - Additional configuration may be required for certain container host and container combinations. Further details are available in the testing documentation.
+- ansible-test - Custom containers with ``VOLUME`` instructions may be unable to start, when previously the containers started correctly. Remove the ``VOLUME`` instructions to resolve the issue. Containers with this condition will cause ``ansible-test`` to emit a warning.
+- ansible-test - Systems with Podman networking issues may be unable to run containers, when previously the issue went unreported. Correct the networking issues to continue using ``ansible-test`` with Podman.
+- ansible-test - Using Docker on systems with SELinux may require setting SELinux to permissive mode. Podman should work with SELinux in enforcing mode.
+
+v2.13.7
+=======
+
+Release Summary
+---------------
+
+| Release Date: 2022-12-05
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Minor Changes
+-------------
+
+- ansible-test - Improve consistency of executed ``pylint`` commands by making the plugins ordered.
+
+Bugfixes
+--------
+
+- file lookup now plays nice with generic lookup ``errors`` option.
+
+v2.13.6
+=======
+
+Release Summary
+---------------
+
+| Release Date: 2022-11-07
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Minor Changes
+-------------
+
+- ansible-test - Improve consistency of version specific documentation links.
+
+Bugfixes
+--------
+
+- BSD network facts - Do not assume column indexes, look for ``netmask`` and ``broadcast`` for determining the correct columns when parsing ``inet`` line (https://github.com/ansible/ansible/issues/79117)
+- ansible-galaxy - make initial call to Galaxy server on-demand only when installing, getting info about, and listing roles.
+- ansible-test - Add ``wheel < 0.38.0`` constraint for Python 3.6 and earlier.
+- ansible-test - Fix broken documentation link for ``aws`` test plugin error messages.
+- copy module will no longer move 'non files' set as src when remote_src=true.
+- file lookup now handles missing files more gracefully.
+- service_facts - Use python re to parse service output instead of grep (https://github.com/ansible/ansible/issues/78541)
+- updated error messages to include 'acl' and not just mode changes when failing to set required permissions on remote.
+
+v2.13.5
+=======
+
+Release Summary
+---------------
+
+| Release Date: 2022-10-10
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Bugfixes
+--------
+
+- ``ansible-galaxy`` - remove extra server api call during dependency resolution for requirements and dependencies that are already satisfied (https://github.com/ansible/ansible/issues/77443).
+- ansible-test - Allow disabled, unsupported, unstable and destructive integration test targets to be selected using their respective prefixes.
+- ansible-test - Allow unstable tests to run when targeted changes are made and the ``--allow-unstable-changed`` option is specified (resolves https://github.com/ansible/ansible/issues/74213).
+- apt - Fix module failure when a package is not installed and only_upgrade=True. Skip that package and check the remaining requested packages for upgrades. (https://github.com/ansible/ansible/issues/78762)
+- apt module should not traceback on invalid type given as package. issue 78663.
+- known_hosts - do not return changed status when a non-existing key is removed (https://github.com/ansible/ansible/issues/78598)
+- paramiko - Add back support for ``ssh_args``, ``ssh_common_args``, and ``ssh_extra_args`` for parsing the ``ProxyCommand`` (https://github.com/ansible/ansible/issues/78750)
+- plugin loader, fix detection for existing configuration before initializing for a plugin
+
+v2.13.4
+=======
+
+Release Summary
+---------------
+
+| Release Date: 2022-09-12
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Bugfixes
+--------
+
+- Fix for network_cli not getting all relevant connection options
+- ansible-galaxy - Fix detection of ``--role-file`` in arguments for implicit role invocation (https://github.com/ansible/ansible/issues/78204)
+- ansible-galaxy - Fix exit codes for role search and delete (https://github.com/ansible/ansible/issues/78516)
+- ansible-test - Fix change detection for ansible-test's own integration tests.
+- ansible-test - ansible-doc sanity test - Correctly determine the fully-qualified collection name for plugins in subdirectories, resolving https://github.com/ansible/ansible/issues/78490.
+- apt - don't actually update the cache in check mode with update_cache=true.
+- apt - don't mark existing packages as manually installed in check mode (https://github.com/ansible/ansible/issues/66413).
+- apt - fix package selection to include /etc/apt/preferences(.d) (https://github.com/ansible/ansible/issues/77969)
+- urls - Guard imports of ``urllib3`` by catching ``Exception`` instead of ``ImportError`` to prevent exceptions in the import process of optional dependencies from preventing use of ``urls.py`` (https://github.com/ansible/ansible/issues/78648)
+- wait_for - Read file and perform comparisons using bytes to avoid decode errors (https://github.com/ansible/ansible/issues/78214)
+
+v2.13.3
+=======
+
+Release Summary
+---------------
+
+| Release Date: 2022-08-15
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Bugfixes
+--------
+
+- Avoid 'unreachable' error when chmod on AIX has 255 as return code.
+- Fix PluginLoader to mimic Python import machinery by adding module to sys.modules before exec
+- Fix dnf module documentation to indicate that comparison operators for package version require spaces around them (https://github.com/ansible/ansible/issues/78295)
+- ansible-connection - decrypt vaulted parameters before sending over the socket, as vault secrets are not available on the other side.
+- ansible-galaxy - Fix reinitializing the whole collection directory with ``ansible-galaxy collection init ns.coll --force``. Now directories and files that are not included in the collection skeleton will be removed.
+- ansible-galaxy - do not require mandatory keys in the ``galaxy.yml`` of source collections when listing them (https://github.com/ansible/ansible/issues/70180).
+- ansible-galaxy - fix listing collections that contains metadata but the namespace or name are not strings.
+- ansible-galaxy - fix setting the cache for paginated responses from Galaxy NG/AH (https://github.com/ansible/ansible/issues/77911).
+- ansible-test - Delegation for commands which generate output for programmatic consumption no longer redirect all output to stdout. The affected commands and options are ``shell``, ``sanity --lint``, ``sanity --list-tests``, ``integration --list-targets``, ``coverage analyze``
+- ansible-test - Delegation now properly handles arguments given after ``--`` on the command line.
+- ansible-test - Test configuration for collections is now parsed only once, prior to delegation. Fixes issue: https://github.com/ansible/ansible/issues/78334
+- ansible-test - The ``shell`` command no longer redirects all output to stdout when running a provided command. Any command output written to stderr will be mixed with the stderr output from ansible-test.
+- ansible-test - The ``shell`` command no longer requests a TTY when using delegation unless an interactive shell is being used. An interactive shell is the default behavior when no command is given to pass to the shell.
+- dnf - fix output parsing on systems with ``LANGUAGE`` set to a language other than English (https://github.com/ansible/ansible/issues/78193)
+- if a config setting prevents running ansible it should at least show it's "origin".
+- prevent type annotation shim failures from causing runtime failures (https://github.com/ansible/ansible/pull/77860)
+- template module/lookup - fix ``convert_data`` option that was effectively always set to True for Jinja macros (https://github.com/ansible/ansible/issues/78141)
+- uri - properly use uri parameter use_proxy (https://github.com/ansible/ansible/issues/58632)
+- yum - fix traceback when ``releasever`` is specified with ``latest`` (https://github.com/ansible/ansible/issues/78058)
+
+v2.13.2
+=======
+
+Release Summary
+---------------
+
+| Release Date: 2022-07-18
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Minor Changes
+-------------
+
+- ansible-test - An improved error message is shown when the download of a pip bootstrap script fails. The download now uses ``urllib2`` instead of ``urllib`` on Python 2.
+
+Bugfixes
+--------
+
+- Move undefined check from concat to finalize (https://github.com/ansible/ansible/issues/78156)
+- ansible-doc - no longer list module and plugin aliases that are created with symlinks (https://github.com/ansible/ansible/pull/78137).
+- ansible-doc - when listing modules in collections, proceed recursively. This fixes module listing for community.general 5.x.y and community.network 4.x.y (https://github.com/ansible/ansible/pull/78137).
+- ansible-doc will not add 'website for' in ":ref:" substitutions as it made them confusing.
+- file backed cache plugins now handle concurrent access by making atomic updates to the files.
+- password lookup does not ignore k=v arguments anymore.
+- user - Fix error "Permission denied" in user module while generating SSH keys (https://github.com/ansible/ansible/issues/78017).
+
+v2.13.1
+=======
+
+Release Summary
+---------------
+
+| Release Date: 2022-06-20
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Minor Changes
+-------------
+
+- Add an 'action_plugin' field for modules in runtime.yml plugin_routing.
+
+  This fixes module_defaults by supporting modules-as-redirected-actions
+  without redirecting module_defaults entries to the common action.
+
+  .. code: yaml
+
+     plugin_routing:
+       action:
+         facts:
+           redirect: ns.coll.eos
+         command:
+           redirect: ns.coll.eos
+       modules:
+         facts:
+           redirect: ns.coll.eos_facts
+         command:
+           redirect: ns.coll.eos_command
+
+  With the runtime.yml above for ns.coll, a task such as
+
+  .. code: yaml
+
+     - hosts: all
+       module_defaults:
+         ns.coll.eos_facts: {'valid_for_eos_facts': 'value'}
+         ns.coll.eos_command: {'not_valid_for_eos_facts': 'value'}
+       tasks:
+         - ns.coll.facts:
+
+  will end up with defaults for eos_facts and eos_command
+  since both modules redirect to the same action.
+
+  To select an action plugin for a module without merging
+  module_defaults, define an action_plugin field for the resolved
+  module in the runtime.yml.
+
+  .. code: yaml
+
+     plugin_routing:
+       modules:
+         facts:
+           redirect: ns.coll.eos_facts
+           action_plugin: ns.coll.eos
+         command:
+           redirect: ns.coll.eos_command
+           action_plugin: ns.coll.eos
+
+  The action_plugin field can be a redirected action plugin, as
+  it is resolved normally.
+
+  Using the modified runtime.yml, the example task will only use
+  the ns.coll.eos_facts defaults.
+- ansible-galaxy - Support resolvelib versions 0.6.x, 0.7.x, and 0.8.x. The full range of supported versions is now >= 0.5.3, < 0.9.0.
+- ansible-test - Add RHEL 9.0 remote support.
+- ansible-test - Add support for Ubuntu VMs using the ``--remote`` option.
+- ansible-test - Add support for exporting inventory with ``ansible-test shell --export {path}``.
+- ansible-test - Add support for multi-arch remotes.
+- ansible-test - Add support for running non-interactive commands with ``ansible-test shell``.
+- ansible-test - Avoid using the ``mock_use_standalone_module`` setting for unit tests running on Python 3.8 or later.
+- ansible-test - Blocking mode is now enforced for stdin, stdout and stderr. If any of these are non-blocking then ansible-test will exit during startup with an error.
+- ansible-test - Improve consistency of output messages by using stdout or stderr for most output, but not both.
+- ansible-test - The ``shell`` command can be used outside a collection if no controller delegation is required.
+
+Bugfixes
+--------
+
+- Add PyYAML >= 5.1 as a dependency of ansible-core to be compatible with Python 3.8+.
+- ansible-config dump - Only display plugin type headers when plugin options are changed if --only-changed is specified.
+- ansible-galaxy - handle unsupported versions of resolvelib gracefully.
+- ansible-test - Fix internal validation of remote completion configuration.
+- ansible-test - Prevent ``--target-`` prefixed options for the ``shell`` command from being combined with legacy environment options.
+- ansible-test - Sanity test output with the ``--lint`` option is no longer mixed in with bootstrapping output.
+- ansible-test - Subprocesses are now isolated from the stdin, stdout and stderr of ansible-test. This avoids issues with subprocesses tampering with the file descriptors, such as SSH making them non-blocking. As a result of this change, subprocess output from unit and integration tests on stderr now go to stdout.
+- ansible-test - Subprocesses no longer have access to the TTY ansible-test is connected to, if any. This maintains consistent behavior between local testing and CI systems, which typically do not provide a TTY. Tests which require a TTY should use pexpect or another mechanism to create a PTY.
+- apt module now correctly handles virtual packages.
+- lookup plugin - catch KeyError when lookup returns dictionary (https://github.com/ansible/ansible/pull/77789).
+- pip - fix cases where resolution of pip Python module fails when importlib.util has not already been imported
+- plugin loader - Sort results when fuzzy matching plugin names (https://github.com/ansible/ansible/issues/77966).
+- plugin loader will now load config data for plugin by name instead of by file to avoid issues with the same file being loaded under different names (fqcn + short name).
+- psrp connection now handles default to inventory_hostname correctly.
+- winrm connection now handles default to inventory_hostname correctly.
+
+v2.13.0
+=======
+
+Release Summary
+---------------
+
+| Release Date: 2022-05-16
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Major Changes
+-------------
+
+- Jinja2 Controller Requirement - Jinja2 3.0.0 or newer is required for the control node (the machine that runs Ansible) (https://github.com/ansible/ansible/pull/75881)
+- Templating - remove ``safe_eval`` in favor of using ``NativeEnvironment`` but utilizing ``literal_eval`` only in cases when ``safe_eval`` was used (https://github.com/ansible/ansible/pull/75587)
+
+Minor Changes
+-------------
+
+- Action Plugins - Add helper method for argument spec validation, and extend to pause and async_wrapper
+- Added AIX root CA certs folders - enhance the TLS support in ``uri`` task on AIX
+- Added ``module_utils.compat.typing`` to facilitate type-hinting on all supported Python versions.
+- Ansible.Basic - small changes to allow use in PowerShell modules running on non-Windows platforms (https://github.com/ansible/ansible/pull/76924).
+- AnsibleModule.run_command() now has a toggle to allow caller to decide to handle exceptions from executing the command itself
+- Attach concat function to an environment class (https://github.com/ansible/ansible/pull/76282)
+- Clarify in a comment that unrolling an iterator in ``Templar._finalize`` is actually necessary. Also switch to using the ``_unroll_iterator`` decorator directly to deduplicate code in ``Templar._finalize``. (https://github.com/ansible/ansible/pull/76436)
+- Installation - modernize our python installation, to reduce dynamic code in setup.py, and migrate what is feasible to setup.cfg. This will enable shipping wheels in the future.
+- PlayIterator - introduce public methods to access ``PlayIterator._host_states`` (https://github.com/ansible/ansible/pull/74416)
+- PlayIterator - use enums for Iterating and Failed states (https://github.com/ansible/ansible/pull/74511)
+- Reduce number of iterations through PlayIterator (https://github.com/ansible/ansible/pull/74175)
+- Remove more Python 2.x compatibility code from controller (https://github.com/ansible/ansible/pull/77320).
+- Start of moving away from using Six, Python 2 and 3 compatibility library (https://github.com/ansible/ansible/pull/75863)
+- The collection loader now reports a Python warning if an attempt is made to install the Ansible collection loader a second time. Previously this condition was reported using an Ansible warning.
+- ``ansible-galaxy collection [install|verify]`` - allow user-provided signature sources in addition to those from the Galaxy server. Each collection entry in a requirements file can specify a ``signatures`` key followed by a list of sources. Collection name(s) provided on the CLI can specify additional signature sources by using the ``--signatures`` CLI option. Signature sources should be URIs that can be opened with ``urllib.request.urlopen()``, such as "https://example.com/path/to/detached_signature.asc" or "file:///path/to/detached_signature.asc". The ``--keyring`` option must be specified if signature sources are provided.
+- ``ansible-galaxy collection [install|verify]`` - use gpg to verify the authenticity of the signed ``MANIFEST.json`` with ASCII armored detached signatures provided by the Galaxy server. The keyring (which is not managed by ``ansible-galaxy``) must be provided with the ``--keyring`` option to use signature verification. If no ``--keyring`` is specified and the collection to ``install|verify`` has associated detached signatures on the Galaxy server, a warning is provided.
+- ``ansible-galaxy collection install`` - Add a global configuration to modify the required number of signatures that must verify the authenticity of the collection. By default, the number of required successful signatures is 1. Set this option to ``all`` to require all signatures verify the collection. To ensure signature verification fails if there are no valid signatures, prepend the value with '+', such as ``+all`` or ``+1``.
+- ``ansible-galaxy collection install`` - Add a global ignore list for gpg signature errors. This can be used to ignore certain signatures when the number of required successful signatures is all. When the required number of successful signatures is a positive integer, the only effect this has is to display fewer errors to the user on failure (success is determined by having the minimum number of successful signatures, in which case all errors are disregarded).
+- ``ansible-galaxy collection install`` - Add a global toggle to turn off GPG signature verification.
+- ``ansible-galaxy collection install`` - Store Galaxy server metadata alongside installed collections for provenance. Signatures obtained from the Galaxy server can be used for offline verification with ``ansible-galaxy collection verify --offline``.
+- ansible-console - Provide a  way to customize the stdout callback
+- ansible-core modules - Remove unused Python shebangs from built-in modules.
+- ansible-doc metadata dump - add option ``--no-fail-on-errors`` which allows to not fail the ansible-doc invocation when errors happen during docs parsing or processing. Instead they are reported in the JSON result in an ``error`` key for the affected plugins (https://github.com/ansible/ansible/pull/77035).
+- ansible-galaxy - the option to skip certificate verification now also applies when cloning via SCM (git/hg) (https://github.com/ansible/ansible/issues/41077)
+- ansible-test - Accept new-style Python modules without a shebang.
+- ansible-test - Add ``--version`` support to show the ansible-core version.
+- ansible-test - Add support for ``rhel/8.5`` remote instances.
+- ansible-test - Add support for remote testing of FreeBSD 12.3.
+- ansible-test - Add support for running container tests with ``podman remote`` (https://github.com/ansible/ansible/pull/75753)
+- ansible-test - Added the ``fedora35`` test container.
+- ansible-test - Change the maximum number of open files in a test container from the default to ``10240``.
+- ansible-test - Declare public dependencies of ansible-core and use to limit unguarded imports in plugins.
+- ansible-test - Importing ``distutils`` now results in an error.
+- ansible-test - Installation of ``cryptography`` is no longer version constrained when ``openssl`` 1.1.0 or later is installed.
+- ansible-test - Miscellaneous code cleanup and type hint fixes.
+- ansible-test - PowerShell in the ``base`` and ``default`` containers has been upgraded to version 7.1.4.
+- ansible-test - Remove RHEL 8.4 remote (``rhel/8.4``) support.
+- ansible-test - Remove ``idna`` constraint.
+- ansible-test - Remove obsolete ``MAXFD`` display.
+- ansible-test - Remove obsolete constraints for Python 2.6.
+- ansible-test - Remove support for FreeBSD 12.2 remote provisioning.
+- ansible-test - Remove support for macOS 11.1 remote provisioning.
+- ansible-test - Remove support for provisioning remote AIX instances.
+- ansible-test - Remove the ``centos8`` test container since CentOS 8 will reach end-of-life soon.
+- ansible-test - Remove the ``fedora33`` test container since Fedora 33 will reach end-of-life soon.
+- ansible-test - Remove unused Python 2.x compatibility code.
+- ansible-test - Removed support for Sherlock from the Azure provisioning plugin.
+- ansible-test - Removed used ``MarkupSafe`` constraint for Python 3.5 and earlier.
+- ansible-test - Requirements for the plugin import test are now frozen.
+- ansible-test - Shellcheck in the ``base`` and ``default`` containers has been upgraded to version 0.7.0.
+- ansible-test - Stop early with an error if the current working directory contains an invalid collection namespace or name.
+- ansible-test - The ``--help`` option is now available when an unsupported cwd is in use.
+- ansible-test - The ``--help`` output now shows the same instructions about cwd as would be shown in error messages if the cwd is unsupported.
+- ansible-test - The ``pip`` and ``wheel`` packages are removed from all sanity test virtual environments after installation completes to reduce their size. Previously they were only removed from the environments used for the ``import`` sanity test.
+- ansible-test - The explanation about cwd usage has been improved to explain more clearly what is required.
+- ansible-test - The hash for all managed sanity test virtual environments has changed. Containers that include ``ansible-test sanity --prime-venvs`` will need to be rebuilt to continue using primed virtual environments.
+- ansible-test - Update ``base`` container to version 2.1.0.
+- ansible-test - Update ``base`` container to version 2.2.0.
+- ansible-test - Update ``default`` containers to version 5.2.0.
+- ansible-test - Update ``default`` containers to version 5.4.0.
+- ansible-test - Update ``default`` containers to version 5.5.0.
+- ansible-test - Update ``default`` containers to version 5.6.2.
+- ansible-test - Update ``default`` containers to version 5.7.0.
+- ansible-test - Update ``default`` containers to version 5.8.0.
+- ansible-test - Update ``default`` containers to version 5.9.0.
+- ansible-test - Update ``pip`` used to bootstrap remote FreeBSD instances from version 20.3.4 to 21.3.1.
+- ansible-test - Update sanity test requirements.
+- ansible-test - Update the NIOS test plugin container to version 1.4.0.
+- ansible-test - Update the ``alpine`` container to version 3.3.0. This updates the base image from 3.14.2 to 3.15.0, which includes support for installing binary wheels using pip.
+- ansible-test - Update the ``base`` and ``default`` containers from Python 3.10.0rc2 to 3.10.0.
+- ansible-test - Update the ``base`` and ``default`` containers from a Ubuntu 18.04 to Ubuntu 20.04 base image.
+- ansible-test - Update the ``default`` containers to version 5.1.0.
+- ansible-test - Update the ``galaxy`` test plugin to get its container from a copy on quay.io.
+- ansible-test - Update the ``openshift`` test plugin to get its container from a copy on quay.io.
+- ansible-test - Use Python 3.10 as the default Python version for the ``base`` and ``default`` containers.
+- ansible-test - add macOS 12.0 as a remote target (https://github.com/ansible/ansible/pull/76328)
+- ansible-test - handle JSON decode error gracefully in podman environment.
+- ansible-test pslint - Added the `AvoidLongLines <https://github.com/PowerShell/PSScriptAnalyzer/blob/master/docs/Rules/AvoidLongLines.md>`_ rule set to a length of 160.
+- ansible-test pslint - Added the `PlaceCloseBrace <https://github.com/PowerShell/PSScriptAnalyzer/blob/master/docs/Rules/PlaceCloseBrace.md>`_ rule set to enforce close braces on a newline.
+- ansible-test pslint - Added the `PlaceOpenBrace <https://github.com/PowerShell/PSScriptAnalyzer/blob/master/docs/Rules/PlaceOpenBrace.md>`_ rule set to enforce open braces on the same line and a subsequent newline.
+- ansible-test pslint - Added the `UseConsistentIndentation <https://github.com/PowerShell/PSScriptAnalyzer/blob/master/docs/Rules/UseConsistentIndentation.md>`_ rule to enforce indentation is done with 4 spaces.
+- ansible-test pslint - Added the `UseConsistentWhitespace <https://github.com/PowerShell/PSScriptAnalyzer/blob/master/docs/Rules/UseConsistentWhitespace.md>`_ rule to enforce whitespace consistency in PowerShell.
+- ansible-test pslint - Updated ``PowerShellScriptAnalyzer`` to 1.20.0
+- ansible-test sanity validate-modules - the validate-modules sanity test now also checks the documentation of documentable plugin types (https://github.com/ansible/ansible/pull/71734).
+- ansible-test validate-modules sanity test - add more schema checks to improve quality of plugin documentation (https://github.com/ansible/ansible/pull/77268).
+- ansible-test validate_modules - allow ``choices`` for return values (https://github.com/ansible/ansible/pull/76009).
+- apt - Add support for using ">=" in package version number matching.
+- apt - Adds APT option ``--allow-change-held-packages`` as module parameter ``allow_change_held_packages`` to allow APT up- or downgrading a package which is on APTs hold list (https://github.com/ansible/ansible/issues/65325)
+- auto inventory plugin will now give plugin loading information on verbose output
+- callbacks - Add result serialization format options to ``_dump_results`` allowing plugins such as the ``default`` callback to emit ``YAML`` serialized task results in addition to ``JSON``
+- dnf - add more specific error message for GPG validation (https://github.com/ansible/ansible/issues/76192)
+- env lookup, add default option
+- facts - report prefix length for IPv4 addresses in Linux network facts.
+- get_parsable_locale now logs result when in debug mode.
+- git - display the destination directory path in error msg when local_mods detects local modifications conflict so that users see the exact location
+- iptables - add the ``chain_management`` parameter that controls iptables chain creation and deletion
+- jinja2_native - keep same behavior on Python 3.10.
+- junit callback - Add support for replacing the directory portion of out-of-tree relative task paths with a placeholder.
+- k8s - scenario guides for kubernetes migrated to ``kubernetes.core`` collection.
+- module_utils.distro - Add missing ``typing`` import from original code.
+- package_facts - add pkg_info support for OpenBSD and NetBSD (https://github.com/ansible/ansible/pull/76580)
+- services_facts - Add support for openrc (https://github.com/ansible/ansible/pull/76373).
+- setting DEFAULT_FACT_PATH is being deprecated in favor of the generic module_defaults keyword
+- uri - Avoid reading the response body when not needed
+- uri - Eliminate multiple requests to determine the final URL for file naming with ``dest``
+- validate-modules - do some basic validation on the ``M(...)``, ``U(...)``, ``L(..., ...)`` and ``R(..., ...)`` documentation markups (https://github.com/ansible/ansible/pull/76262).
+- vmware - migrated vmware scenario guides to `community.vmware` repo.
+- yum, dnf - add sslverify option to temporarily disable certificate validation for a repository
+
+Breaking Changes / Porting Guide
+--------------------------------
+
+- Module Python Dependency - Drop support for Python 2.6 in module execution.
+- Templating - it is no longer allowed to perform arithmetic and concatenation operations outside of the jinja template (https://github.com/ansible/ansible/pull/75587)
+- The ``finalize`` method is no longer exposed in the globals for use in templating.
+
+Deprecated Features
+-------------------
+
+- ansible-core - Remove support for Python 2.6.
+- ansible-test - Remove support for Python 2.6.
+- ssh connection plugin option scp_if_ssh in favor of ssh_transfer_method.
+
+Removed Features (previously deprecated)
+----------------------------------------
+
+- Remove deprecated ``Templar.set_available_variables()`` method (https://github.com/ansible/ansible/issues/75828)
+- cli - remove deprecated ability to set verbosity before the sub-command (https://github.com/ansible/ansible/issues/75823)
+- copy - remove deprecated ``thirsty`` alias (https://github.com/ansible/ansible/issues/75824)
+- psrp - Removed fallback on ``put_file`` with older ``pypsrp`` versions. Users must have at least ``pypsrp>=0.4.0``.
+- url_argument_spec - remove deprecated ``thirsty`` alias for ``get_url`` and ``uri`` modules (https://github.com/ansible/ansible/issues/75825, https://github.com/ansible/ansible/issues/75826)
+
+Security Fixes
+--------------
+
+- Do not include params in exception when a call to ``set_options`` fails. Additionally, block the exception that is returned from being displayed to stdout. (CVE-2021-3620)
+
+Bugfixes
+--------
+
+- Add a YAML representer for ``NativeJinjaText``
+- Add a YAML representer for ``NativeJinjaUnsafeText``
+- AnsiballZ - Ensure we use the full python package in the module cache filename to avoid a case where ``collections:`` is used to execute a module via short name, where the short name duplicates another module from ``ansible.builtin`` or another collection that was executed previously.
+- Ansible.ModuleUtils.LinkUtil - Ignore the ``LIB`` environment variable when loading the ``LinkUtil`` code
+- Ansible.ModuleUtils.SID - Use user principal name as is for lookup in the ``Convert-ToSID`` function - https://github.com/ansible/ansible/issues/77316
+- Detect package manager for Amazon Linux 2022 (AL2022) as dnf
+- Ensure the correct ``environment_class`` is set on ``AnsibleJ2Template``
+- Fix ``AttributeError`` when providing password file via ``--connection-password-file`` (https://github.com/ansible/ansible/issues/76530)
+- Fix ``end_play`` to end the current play only (https://github.com/ansible/ansible/issues/76672)
+- Fix collection filter/test plugin redirects (https://github.com/ansible/ansible/issues/77192).
+- Fix executing includes in the always section in the free strategy (https://github.com/ansible/ansible/issues/75642)
+- Fix for when templating empty template file resulted in file with string 'None' (https://github.com/ansible/ansible/issues/76610)
+- Fix help message for the 'ansible-galaxy collection verify' positional argument. The positional argument must be a collection name (https://github.com/ansible/ansible/issues/76087).
+- Fix module logging issue when using custom module on WSL2 (https://github.com/ansible/ansible/issues/76320)
+- Fix task debugger to work with ``run_once`` using ``linear`` strategy (https://github.com/ansible/ansible/issues/76049)
+- Fix traceback when installing a collection from a git repository and git is not installed (https://github.com/ansible/ansible/issues/77479).
+- Interpreter Discovery - Fallback to OS family if the distro is not found in ``INTERPRETER_PYTHON_DISTRO_MAP`` (https://github.com/ansible/ansible/issues/75560)
+- Interpreter discovery - Add ``RHEL`` to ``OS_FAMILY_MAP`` for correct family fallback for interpreter discovery (https://github.com/ansible/ansible/issues/77368)
+- Make include_role/include_tasks work with any_errors_fatal (https://github.com/ansible/ansible/issues/50897)
+- Parser errors from within includes should not be rescueable (https://github.com/ansible/ansible/issues/73657)
+- Prevent losing unsafe on results returned from lookups (https://github.com/ansible/ansible/issues/77535)
+- Templating - Ensure we catch exceptions when getting ``.filters`` and ``.tests`` attributes on their respective plugins and properly error, instead of aborting which results in no filters being added to the jinja2 environment
+- Trigger an undefined error when an undefined variable is detected within a dictionary and/or list (https://github.com/ansible/ansible/pull/75587)
+- _run_loop - Add the task name to the warning (https://github.com/ansible/ansible/issues/76011)
+- ``Templar.copy_with_new_env`` - set the ``finalize`` method of the new ``Templar`` object for the new environment (https://github.com/ansible/ansible/issues/76379)
+- add_host/group_by: fix using changed_when in a loop (https://github.com/ansible/ansible/issues/71627)
+- ansible - Exclude Python 2.6 from Python interpreter discovery.
+- ansible-config avoid showing _terms and _input when --only-changed.
+- ansible-doc - Fix ansible-doc -l ansible.builtin / ansible.legacy not returning anything
+- ansible-doc - ignore plugin deprecation warnings (https://github.com/ansible/ansible/issues/75671)
+- ansible-galaxy - Add galaxy_collection_skeleton/galaxy_collection_skeleton_ignore configuration options
+- ansible-galaxy - Fix using the '--ignore-certs' option when there is no server-specific configuration for the Galaxy server.
+- ansible-galaxy - installing/downloading collections with invalid versions in git repositories and directories now gives a formatted error message (https://github.com/ansible/ansible/issues/76425, https://github.com/ansible/ansible/issues/75404).
+- ansible-galaxy - when installing a role properly raise an error when inaccessible path is specified multiple times in roles_path (e.g. via environment variable and command line option) (https://github.com/ansible/ansible/issues/76316)
+- ansible-galaxy collection build - Ignore any existing ``MANIFEST.json`` and ``FILES.json`` in the root directory when building a collection.
+- ansible-galaxy collection verify - display files/directories not included in the FILES.json as modified content.
+- ansible-galaxy publish - Fix warning and error detection in import messages to properly display them in Ansible
+- ansible-pull handle case where hostname and nodename are empty
+- ansible-test - Add default entry for Windows remotes to be used with unknown versions.
+- ansible-test - All virtual environments managed by ansible-test are marked as usable after being bootstrapped, to avoid errors caused by use of incomplete environments. Previously this was only done for sanity tests. Existing environments from previous versions of ansible-test will be recreated on demand due to lacking the new marker.
+- ansible-test - Automatic target requirements installation is now based on the target environment instead of the controller environment.
+- ansible-test - Correctly detect when running as the ``root`` user (UID 0) on the origin host. The result of the detection was incorrectly being inverted.
+- ansible-test - Don't fail if network cannot be disconnected (https://github.com/ansible/ansible/pull/77472)
+- ansible-test - Fix Python real prefix detection when running in a ``venv`` virtual environment.
+- ansible-test - Fix ``windows-integration`` and ``network-integration`` when used with the ``--docker`` option and user-provided inventory.
+- ansible-test - Fix installation and usage of ``pyyaml`` requirement for the ``import`` sanity test for collections.
+- ansible-test - Fix path to inventory file for ``windows-integration`` and ``network-integration`` commands for collections.
+- ansible-test - Fix plugin loading.
+- ansible-test - Fix skipping of tests marked ``needs/python`` on the origin host.
+- ansible-test - Fix skipping of tests marked ``needs/root`` on the origin host.
+- ansible-test - Fix the ``import`` sanity test to work properly when Ansible's built-in vendoring support is in use.
+- ansible-test - Fix the ``validate-modules`` sanity test to avoid double-loading the collection loader and possibly failing on import of the ``packaging`` module.
+- ansible-test - Fix traceback in ``import`` sanity test on Python 2.7 when ``pip`` is not available.
+- ansible-test - Fix traceback in the ``validate-modules`` sanity test when testing an Ansible module without any callables.
+- ansible-test - Fix traceback when running from an install and delegating execution to a different Python interpreter.
+- ansible-test - Fix traceback when using the ``--all`` option with PowerShell code coverage.
+- ansible-test - Fix type hints.
+- ansible-test - Import ``yaml.cyaml.CParser`` instead of ``_yaml.CParser`` in the ``yamllint`` sanity test.
+- ansible-test - Limit ``paramiko`` installation to versions before 2.9.0. This is required to maintain support for systems which do not support RSA SHA-2 algorithms.
+- ansible-test - Pylint Deprecated Plugin - Use correct message symbols when date or version is not a float or str (https://github.com/ansible/ansible/issues/77085)
+- ansible-test - Relocate constants to eliminate symlink.
+- ansible-test - Replace the directory portion of out-of-tree paths in JUnit files from integration tests with the ``out-of-tree:`` prefix.
+- ansible-test - Sanity tests run with the ``--requirements` option for Python 2.x now install ``virtualenv`` when it is missing or too old. Previously it was only installed if missing. Version 16.7.12 is now installed instead of the latest version.
+- ansible-test - Set the ``pytest`` option ``--rootdir`` instead of letting it be auto-detected.
+- ansible-test - Show an error message instead of a traceback when running outside of a supported directory.
+- ansible-test - Target integration test requirements are now correctly installed for target environments running on the controller.
+- ansible-test - The ``import`` sanity test no longer reports errors about ``packaging`` being missing when testing collections.
+- ansible-test - Update distribution test containers to version 3.1.0.
+- ansible-test - Update help links to reference ``ansible-core`` instead of ``ansible``.
+- ansible-test - Update unit tests to use the ``--forked`` option instead of the deprecated ``--boxed`` option.
+- ansible-test - Use https://ci-files.testing.ansible.com/ for instance bootstrapping instead of an S3 endpoint.
+- ansible-test - Use relative paths in JUnit files generated during integration test runs.
+- ansible-test - Use the correct variable to reference the client's SSH key when generating inventory.
+- ansible-test - Use the legacy collection loader for ``import`` sanity tests on target-only Python versions.
+- ansible-test - Virtual environments managed by ansible-test now use consistent versions of ``pip``, ``setuptools`` and ``wheel``. This avoids issues with virtual environments containing outdated or dysfunctional versions of these tools. The initial bootstrapping of ``pip`` is done by ansible-test from an HTTPS endpoint instead of creating the virtual environment with it already present.
+- ansible-test - fix a typo in validate-modules.
+- ansible-test - fixed support container failures (eg http-test-container) under podman
+- ansible-test compile sanity test - do not crash if a column could not be determined for an error (https://github.com/ansible/ansible/pull/77465).
+- ansible-test pslint - Fix error when encountering validation results that are highly nested - https://github.com/ansible/ansible/issues/74151
+- ansible-vault encrypt_string - fix ``--output`` option to correctly write encrypted string into given file (https://github.com/ansible/ansible/issues/75101)
+- ansible.builtin.file modification_time supports check_mode
+- ansible_facts.devices - Fix parsing of device serial number detected via sg_inq for rhel8 (https://github.com/ansible/ansible/issues/75420)
+- apt - fails to deploy deb file to old debian systems using python-apt < 0.8.9 (https://github.com/ansible/ansible/issues/47277)
+- arg_spec - Fix incorrect ``no_log`` warning when a parameter alias is used (https://github.com/ansible/ansible/pull/77576)
+- async - Improve performance of sending async callback events by never sending the full task through the queue (https://github.com/ansible/ansible/issues/76729)
+- catch the case that cowsay is broken which would lead to missing output
+- cleaning facts will now only warn about the variable name and not post the content, which can be undesireable to disclose
+- collection_loader - Implement 'find_spec' and 'exec_module' to override deprecated importlib methods 'find_module' and 'load_module' when applicable (https://github.com/ansible/ansible/issues/74660).
+- correctly inherit vars from parent in block (https://github.com/ansible/ansible/issues/75286).
+- default callback - Ensure we compare FQCN also in lockstep logic, to ensure using the FQCN of a strategy plugin triggers the correct behavior in the default callback plugin. (https://github.com/ansible/ansible/issues/76782)
+- distribution - add EuroLinux to fact gathering (https://github.com/ansible/ansible/pull/76624).
+- distribution - detect tencentos and gather correct facts on the distro.
+- dnf - ensure releasever is passed into libdnf as string (https://github.com/ansible/ansible/issues/77010)
+- extend timeout for ansible-galaxy when communicating with the galaxy server api, and apply it to all interactions with the api
+- facts - add support for deepin distro information detection (https://github.com/ansible/ansible/issues/77286).
+- first_found - fix to allow for spaces in file names (https://github.com/ansible/ansible/issues/77136)
+- gather_facts - Fact gathering now continues even if it fails to read a file
+- gather_facts action now handles the move of base connection plugin types into collections to add/prevent subset argument correctly
+- gather_facts/setup will not fail anymore if capsh is present but not executable
+- git module fix docs and proper use of ssh wrapper script and GIT_SSH_COMMAND depending on version.
+- git module is more consistent and clearer about which ssh options are added to git calls.
+- git module no longer uses wrapper script for ssh options.
+- hacking - fix incorrect usage of deprecated fish-shell redirection operators that failed to honor ``--quiet`` flag when sourced (https://github.com/ansible/ansible/pull/77180).
+- hostname - Do not require SystemdStrategy subclasses for every distro (https://github.com/ansible/ansible/issues/76792)
+- hostname - Fix Debian strategy KeyError, use `SystemdStrategy` (https://github.com/ansible/ansible/issues/76124)
+- hostname - Update the systemd strategy in the ``hostname`` module to not interfere with NetworkManager (https://github.com/ansible/ansible/issues/76958)
+- hostname - add hostname support for openEuler distro (https://github.com/ansible/ansible/pull/76619).
+- hostname - use ``file_get_content()`` to read the file containing the host name in the ``FileStrategy.get_permanent_hostname()`` method. This prevents a ``TypeError`` from being raised when the strategy is used (https://github.com/ansible/ansible/issues/77025).
+- include_vars, properly initialize variable as there is corner case in which it can end up referenced and not defined
+- inventory - parameterize ``disable_lookups`` in ``Constructable`` (https://github.com/ansible/ansible/issues/76769).
+- inventory manager now respects --flush-cache
+- junit callback - Fix traceback during automatic fact gathering when using relative paths.
+- junit callback - Fix unicode error when handling non-ASCII task paths.
+- module_utils.common.yaml - The ``SafeLoader``, ``SafeDumper`` and ``Parser`` classes now fallback to ``object`` when ``yaml`` is not available. This fixes tracebacks when inheriting from these classes without requiring a ``HAS_YAML`` guard around class definitions.
+- parameters - handle blank values when argument is a list (https://github.com/ansible/ansible/issues/77108).
+- play_context now compensates for when a conneciton sets the default to inventory_hostname but skips adding it to the vars.
+- playbook/strategy have more informative 'attribute' based errors for playbook objects and handlers.
+- python modules (new type) will now again prefer the specific python stated in the module's shebang instead of hardcoding to /usr/bin/python.
+- replace - Always return ``rc`` to ensure return values are consistent - https://github.com/ansible/ansible/pull/71963
+- script - skip in check mode if the plugin cannot determine if a change will occur (i.e. neither `creates` or `removes` are provided).
+- service - Fixed handling of sleep arguments during service restarts on AIX. (https://github.com/ansible/ansible/issues/76877)
+- service - Fixed service restarts with arguments on AIX. (https://github.com/ansible/ansible/issues/76840)
+- service_facts module will now give more meaningful warnings when it fails to gather data.
+- set_fact/include_vars correctly handle delegation assignments within loops
+- setup - detect docker container with check for ./dockerenv or ./dockinit (https://github.com/ansible/ansible/pull/74349).
+- shell/command - only return changed as True if the task has not been skipped.
+- shell/command - only skip in check mode if the options `creates` and `removes` are both None.
+- ssh connection - properly quote controlpersist path given by user to avoid issues with spaces and other characters
+- ssh connection avoid parsing ssh cli debug lines as they can match expected output at high verbosities.
+- ssh connection now uses more correct host source as play_context can ignore loop/delegation variations.
+- sudo become plugin, fix handling of non interactive flags, previous substitution was too naive
+- systemd - check if service is alias so it gets enabled (https://github.com/ansible/ansible/issues/75538).
+- systemd - check if service is indirect so it gets enabled (https://github.com/ansible/ansible/issues/76453).
+- task_executor reverts the change to push facts into delegated vars on loop finalization as result managing code already handles this and was duplicating effort to wrong result.
+- template lookup - restore inadvertently deleted default for ``convert_data`` (https://github.com/ansible/ansible/issues/77004)
+- to_json/to_nice_json filters defaults back to unvaulting/no unsafe packing.
+- unarchive - Fix zip archive file listing that caused issues with content postprocessing (https://github.com/ansible/ansible/issues/76067).
+- unarchive - Make extraction work when the LANGUAGE environment variable is set to a non-English locale.
+- unarchive - apply ``owner`` and ``group`` permissions to top folder (https://github.com/ansible/ansible/issues/35426)
+- unarchive - include the original error when a handler cannot manage the archive (https://github.com/ansible/ansible/issues/28977).
+- unarchive - the ``io_buffer_size`` option added in 2.12 was not accepted by the module (https://github.com/ansible/ansible/pull/77271).
+- urls - Allow ``ca_path`` to point to a bundle containing multiple PEM certs (https://github.com/ansible/ansible/issues/75015)
+- urls/uri - Address case where ``HTTPError`` isn't fully initialized due to the error, and is missing certain methods and attributes (https://github.com/ansible/ansible/issues/76386)
+- user - allow ``password_expiry_min`` and ``password_expiry_min`` to be set to ``0`` (https://github.com/ansible/ansible/issues/75017)
+- user - allow password min and max to be set at the same time (https://github.com/ansible/ansible/issues/75017)
+- user - update logic to check if user exists or not in MacOS.
+- validate_argument_spec - Skip suboption validation if the top level option is an invalid type (https://github.com/ansible/ansible/issues/75612).
+- variablemanager, more efficient read of vars files
+- vault - Warn instead of fail for missing vault IDs if at least one valid vault secret is found.
+- winrm - Ensure ``kinit`` is run with the same ``PATH`` env var as the Ansible process
+- yum - prevent storing unnecessary cache data by running `yum makecache fast` (https://github.com/ansible/ansible/issues/76336)
+
+Known Issues
+------------
+
+- get_url - document ``check_mode`` correctly with unreliable changed status (https://github.com/ansible/ansible/issues/65687).

changelogs/CHANGELOG-v2.19.rst

@@ -1,416 +0,0 @@
-==================================================================
-ansible-core 2.19 "What Is and What Should Never Be" Release Notes
-==================================================================
-
-.. contents:: Topics
-
-v2.19.0b4
-=========
-
-Release Summary
----------------
-
-| Release Date: 2025-05-12
-| `Porting Guide <https://docs.ansible.com/ansible-core/2.19/porting_guides/porting_guide_core_2.19.html>`__
-
-Minor Changes
--------------
-
-- facts - add "CloudStack KVM Hypervisor" for Linux VM in virtual facts (https://github.com/ansible/ansible/issues/85089).
-- modules - use ``AnsibleModule.warn`` instead of passing ``warnings`` to ``exit_json`` or ``fail_json`` which is deprecated.
-
-Bugfixes
---------
-
-- ansible-test - Updated the ``pylint`` sanity test to skip some deprecation validation checks when all arguments are dynamic.
-- config - Preserve or apply Origin tag to values returned by config.
-- config - Prevented fatal errors when ``MODULE_IGNORE_EXTS`` configuration was set.
-- config - Templating failures on config defaults now issue a warning. Previously, failures silently returned an unrendered and untrusted template to the caller.
-- config - ``ensure_type`` correctly propagates trust and other tags on returned values.
-- config - ``ensure_type`` now converts mappings to ``dict`` when requested, instead of returning the mapping.
-- config - ``ensure_type`` now converts sequences to ``list`` when requested, instead of returning the sequence.
-- config - ``ensure_type`` now correctly errors when ``pathlist`` or ``pathspec`` types encounter non-string list items.
-- config - ``ensure_type`` now reports an error when ``bytes`` are provided for any known ``value_type``. Previously, the behavior was undefined, but often resulted in an unhandled exception or incorrect return type.
-- config - ``ensure_type`` with expected type ``int`` now properly converts ``True`` and ``False`` values to ``int``. Previously, these values were silently returned unmodified.
-- convert_bool.boolean API conversion function - Unhashable values passed to ``boolean`` behave like other non-boolean convertible values, returning False or raising ``TypeError`` depending on the value of ``strict``. Previously, unhashable values always raised ``ValueError`` due to an invalid set membership check.
-- dnf5 - when ``bugfix`` and/or ``security`` is specified, skip packages that do not have any such updates, even for new versions of libdnf5 where this functionality changed and it is considered failure
-- plugin loader - Apply template trust to strings loaded from plugin configuration definitions and doc fragments.
-- template action - Template files where the entire file's output renders as ``None`` are no longer emitted as the string "None", but instead render to an empty file as in previous releases.
-
-v2.19.0b3
-=========
-
-Release Summary
----------------
-
-| Release Date: 2025-05-06
-| `Porting Guide <https://docs.ansible.com/ansible-core/2.19/porting_guides/porting_guide_core_2.19.html>`__
-
-Minor Changes
--------------
-
-- ansible-config will now show internal, but not test configuration entries. This allows for debugging but still denoting the configurations as internal use only (_ prefix).
-- ansible-test - Improved ``pylint`` checks for Ansible-specific deprecation functions.
-- ansible-test - Use the ``-t`` option to set the stop timeout when stopping a container. This avoids use of the ``--time`` option which was deprecated in Docker v28.0.
-- collection metadata - The collection loader now parses scalar values from ``meta/runtime.yml`` as strings. This avoids issues caused by unquoted values such as versions or dates being parsed as types other than strings.
-- deprecation warnings - Deprecation warning APIs automatically capture the identity of the deprecating plugin. The ``collection_name`` argument is only required to correctly attribute deprecations that occur in module_utils or other non-plugin code.
-- deprecation warnings - Improved deprecation messages to more clearly indicate the affected content, including plugin name when available.
-- deprecations - Collection name strings not of the form ``ns.coll`` passed to deprecation API functions will result in an error.
-- deprecations - Removed support for specifying deprecation dates as a ``datetime.date``, which was included in an earlier 2.19 pre-release.
-- deprecations - Some argument names to ``deprecate_value`` for consistency with existing APIs. An earlier 2.19 pre-release included a ``removal_`` prefix on the ``date`` and ``version`` arguments.
-- modules - The ``AnsibleModule.deprecate`` function no longer sends deprecation messages to the target host's logging system.
-
-Deprecated Features
--------------------
-
-- Passing a ``warnings` or ``deprecations`` key to ``exit_json`` or ``fail_json`` is deprecated. Use ``AnsibleModule.warn`` or ``AnsibleModule.deprecate`` instead.
-- plugins - Accessing plugins with ``_``-prefixed filenames without the ``_`` prefix is deprecated.
-
-Bugfixes
---------
-
-- Ansible will now ensure predictable permissions on remote artifacts, until now it only ensured executable and relied on system masks for the rest.
-- dnf5 - avoid generating excessive transaction entries in the dnf5 history (https://github.com/ansible/ansible/issues/85046)
-
-v2.19.0b2
-=========
-
-Release Summary
----------------
-
-| Release Date: 2025-04-24
-| `Porting Guide <https://docs.ansible.com/ansible-core/2.19/porting_guides/porting_guide_core_2.19.html>`__
-
-Minor Changes
--------------
-
-- comment filter - Improve the error message shown when an invalid ``style`` argument is provided.
-
-Bugfixes
---------
-
-- Remove use of `required` parameter in `get_bin_path` which has been deprecated.
-- ansible-doc - fix indentation for first line of descriptions of suboptions and sub-return values (https://github.com/ansible/ansible/pull/84690).
-- ansible-doc - fix line wrapping for first line of description of options and return values (https://github.com/ansible/ansible/pull/84690).
-
-v2.19.0b1
-=========
-
-Release Summary
----------------
-
-| Release Date: 2025-04-14
-| `Porting Guide <https://docs.ansible.com/ansible-core/2.19/porting_guides/porting_guide_core_2.19.html>`__
-
-Major Changes
--------------
-
-- Jinja plugins - Jinja builtin filter and test plugins are now accessible via their fully-qualified names ``ansible.builtin.{name}``.
-- Task Execution / Forks - Forks no longer inherit stdio from the parent ``ansible-playbook`` process. ``stdout``, ``stderr``, and ``stdin`` within a worker are detached from the terminal, and non-functional. All needs to access stdio from a fork for controller side plugins requires use of ``Display``.
-- ansible-test - Packages beneath ``module_utils`` can now contain ``__init__.py`` files.
-- variables - The type system underlying Ansible's variable storage has been significantly overhauled and formalized. Attempts to store unsupported Python object types in variables will now result in an error.
-- variables - To support new Ansible features, many variable objects are now represented by subclasses of their respective native Python types. In most cases, they behave indistinguishably from their original types, but some Python libraries do not handle builtin object subclasses properly. Custom plugins that interact with such libraries may require changes to convert and pass the native types.
-
-Minor Changes
--------------
-
-- Added a -vvvvv log message indicating when a host fails to produce output within the timeout period.
-- AnsibleModule.uri - Add option ``multipart_encoding`` for ``form-multipart`` files in body to change default base64 encoding for files
-- INVENTORY_IGNORE_EXTS config, removed ``ini`` from the default list, inventory scripts using a corresponding .ini configuration are rare now and inventory.ini files are more common. Those that need to ignore the ini files for inventory scripts can still add it to configuration.
-- Jinja plugins - Plugins can declare support for undefined values.
-- Jinja2 version 3.1.0 or later is now required on the controller.
-- Move ``follow_redirects`` parameter to module_utils so external modules can reuse it.
-- PlayIterator - do not return tasks from already executed roles so specific strategy plugins do not have to do the filtering of such tasks themselves
-- SSH Escalation-related -vvv log messages now include the associated host information.
-- Windows - Add support for Windows Server 2025 to Ansible and as an ``ansible-test`` remote target - https://github.com/ansible/ansible/issues/84229
-- Windows - refactor the async implementation to better handle errors during bootstrapping and avoid WMI when possible.
-- ``ansible-galaxy collection install`` — the collection dependency resolver now prints out conflicts it hits during dependency resolution when it's taking too long and it ends up backtracking a lot. It also displays suggestions on how to help it compute the result more quickly.
-- ansible, ansible-console, ansible-pull - add --flush-cache option (https://github.com/ansible/ansible/issues/83749).
-- ansible-galaxy - Add support for Keycloak service accounts
-- ansible-galaxy - support ``resolvelib >= 0.5.3, < 2.0.0`` (https://github.com/ansible/ansible/issues/84217).
-- ansible-test - Added a macOS 15.3 remote VM, replacing 14.3.
-- ansible-test - Automatically retry HTTP GET/PUT/DELETE requests on exceptions.
-- ansible-test - Default to Python 3.13 in the ``base`` and ``default`` containers.
-- ansible-test - Disable the ``deprecated-`` prefixed ``pylint`` rules as their results vary by Python version.
-- ansible-test - Disable the ``pep8`` sanity test rules ``E701`` and ``E704`` to improve compatibility with ``black``.
-- ansible-test - Improve container runtime probe error handling. When unexpected probe output is encountered, an error with more useful debugging information is provided.
-- ansible-test - Replace container Alpine 3.20 with 3.21.
-- ansible-test - Replace container Fedora 40 with 41.
-- ansible-test - Replace remote Alpine 3.20 with 3.21.
-- ansible-test - Replace remote Fedora 40 with 41.
-- ansible-test - Replace remote FreeBSD 13.3 with 13.5.
-- ansible-test - Replace remote FreeBSD 14.1 with 14.2.
-- ansible-test - Replace remote RHEL 9.4 with 9.5.
-- ansible-test - Show a more user-friendly error message when a ``runme.sh`` script is not executable.
-- ansible-test - The ``yamllint`` sanity test now enforces string values for the ``!vault`` tag.
-- ansible-test - Update ``nios-test-container`` to version 7.0.0.
-- ansible-test - Update ``pylint`` sanity test to use version 3.3.1.
-- ansible-test - Update distro containers to remove unnecessary pakages (apache2, subversion, ruby).
-- ansible-test - Update sanity test requirements to latest available versions.
-- ansible-test - Update the HTTP test container.
-- ansible-test - Update the PyPI test container.
-- ansible-test - Update the ``base`` and ``default`` containers.
-- ansible-test - Update the utility container.
-- ansible-test - Use Python's ``urllib`` instead of ``curl`` for HTTP requests.
-- ansible-test - When detection of the current container network fails, a warning is now issued and execution continues. This simplifies usage in cases where the current container cannot be inspected, such as when running in GitHub Codespaces.
-- ansible-test acme test container - bump `version to 2.3.0 <https://github.com/ansible/acme-test-container/releases/tag/2.3.0>`__ to include newer versions of Pebble, dependencies, and runtimes. This adds support for ACME profiles, ``dns-account-01`` support, and some smaller improvements (https://github.com/ansible/ansible/pull/84547).
-- apt_key module - add notes to docs and errors to point at the CLI tool deprecation by Debian and alternatives
-- apt_repository module - add notes to errors to point at the CLI tool deprecation by Debian and alternatives
-- become plugins get new property 'pipelining' to show support or lack there of for the feature.
-- callback plugins - add has_option() to CallbackBase to match other functions overloaded from AnsiblePlugin
-- callback plugins - fix get_options() for CallbackBase
-- copy - fix sanity test failures (https://github.com/ansible/ansible/pull/83643).
-- copy - parameter ``local_follow`` was incorrectly documented as having default value ``True`` (https://github.com/ansible/ansible/pull/83643).
-- cron - Provide additional error information while writing cron file (https://github.com/ansible/ansible/issues/83223).
-- csvfile - let the config system do the typecasting (https://github.com/ansible/ansible/pull/82263).
-- display - Deduplication of warning and error messages considers the full content of the message (including source and traceback contexts, if enabled). This may result in fewer messages being omitted.
-- distribution - Added openSUSE MicroOS to Suse OS family (#84685).
-- dnf5, apt - add ``auto_install_module_deps`` option (https://github.com/ansible/ansible/issues/84206)
-- docs - add collection name in message from which the module is being deprecated (https://github.com/ansible/ansible/issues/84116).
-- env lookup - The error message generated for a missing environment variable when ``default`` is an undefined value (e.g. ``undef('something')``) will contain the hint from that undefined value, except when the undefined value is the default of ``undef()`` with no arguments. Previously, any existing undefined hint would be ignored.
-- file - enable file module to disable diff_mode (https://github.com/ansible/ansible/issues/80817).
-- file - make code more readable and simple.
-- filter - add support for URL-safe encoding and decoding in b64encode and b64decode (https://github.com/ansible/ansible/issues/84147).
-- find - add a checksum_algorithm parameter to specify which type of checksum the module will return
-- from_json filter - The filter accepts a ``profile`` argument, which defaults to ``tagless``.
-- handlers - Templated handler names with syntax errors, or that resolve to ``omit`` are now skipped like handlers with undefined variables in their name.
-- improved error message for yaml parsing errors in plugin documentation
-- local connection plugin - A new ``become_strip_preamble`` config option (default True) was added; disable to preserve diagnostic ``become`` output in task results.
-- local connection plugin - A new ``become_success_timeout`` operation-wide timeout config (default 10s) was added for ``become``.
-- local connection plugin - When a ``become`` plugin's ``prompt`` value is a non-string after the ``check_password_prompt`` callback has completed, no prompt stripping will occur on stderr.
-- lookup_template - add an option to trim blocks while templating (https://github.com/ansible/ansible/issues/75962).
-- module - set ipv4 and ipv6 rules simultaneously in iptables module (https://github.com/ansible/ansible/issues/84404).
-- module_utils - Add ``NoReturn`` type annotations to functions which never return.
-- modules - PowerShell modules can now receive ``datetime.date``, ``datetime.time`` and ``datetime.datetime`` values as ISO 8601 strings.
-- modules - PowerShell modules can now receive strings sourced from inline vault-encrypted strings.
-- modules - Unhandled exceptions during Python module execution are now returned as structured data from the target. This allows the new traceback handling to be applied to exceptions raised on targets.
-- pipelining logic has mostly moved to connection plugins so they can decide/override settings.
-- plugin error handling - When raising exceptions in an exception handler, be sure to use ``raise ... from`` as appropriate. This supersedes the use of the ``AnsibleError`` arg ``orig_exc`` to represent the cause. Specifying ``orig_exc`` as the cause is still permitted. Failure to use ``raise ... from`` when ``orig_exc`` is set will result in a warning. Additionally, if the two cause exceptions do not match, a warning will be issued.
-- removed harcoding of su plugin as it now works with pipelining.
-- runtime-metadata sanity test - improve validation of ``action_groups`` (https://github.com/ansible/ansible/pull/83965).
-- service_facts module got freebsd support added.
-- ssh connection plugin - Support ``SSH_ASKPASS`` mechanism to provide passwords, making it the default, but still offering an explicit choice to use ``sshpass`` (https://github.com/ansible/ansible/pull/83936)
-- ssh connection plugin now overrides pipelining when a tty is requested.
-- ssh-agent - ``ansible``, ``ansible-playbook`` and ``ansible-console`` are capable of spawning or reusing an ssh-agent, allowing plugins to interact with the ssh-agent. Additionally a pure python ssh-agent client has been added, enabling easy interaction with the agent. The ssh connection plugin contains new functionality via ``ansible_ssh_private_key`` and ``ansible_ssh_private_key_passphrase``, for loading an SSH private key into the agent from a variable.
-- templating - Access to an undefined variable from inside a lookup, filter, or test (which raises MarkerError) no longer ends processing of the current template. The triggering undefined value is returned as the result of the offending plugin invocation, and the template continues to execute.
-- templating - Embedding ``range()`` values in containers such as lists will result in an error on use. Previously the value would be converted to a string representing the range parameters, such as ``range(0, 3)``.
-- templating - Handling of omitted values is now a first-class feature of the template engine, and is usable in all Ansible Jinja template contexts. Any template that resolves to ``omit`` is automatically removed from its parent container during templating.
-- templating - Template evaluation is lazier than in previous versions. Template expressions which resolve only portions of a data structure no longer result in the entire structure being templated.
-- templating - Templating errors now provide more information about both the location and context of the error, especially for deeply-nested and/or indirected templating scenarios.
-- templating - Unified ``omit`` behavior now requires that plugins calling ``Templar.template()`` handle cases where the entire template result is omitted, by catching the ``AnsibleValueOmittedError`` that is raised. Previously, this condition caused a randomly-generated string marker to appear in the template result.
-- templating - Variables of type ``set`` and ``tuple`` are now converted to ``list`` when exiting the final pass of templating.
-- to_json / to_nice_json filters - The filters accept a ``profile`` argument, which defaults to ``tagless``.
-- troubleshooting - Tracebacks can be collected and displayed for most errors, warnings, and deprecation warnings (including those generated by modules). Tracebacks are no longer enabled with ``-vvv``; the behavior is directly configurable via the ``DISPLAY_TRACEBACK`` config option. Module tracebacks passed to ``fail_json`` via the ``exception`` kwarg will not be included in the task result unless error tracebacks are configured.
-- undef jinja function - The ``undef`` jinja function now raises an error if a non-string hint is given. Attempting to use an undefined hint also results in an error, ensuring incorrect use of the function can be distinguished from the function's normal behavior.
-- validate-modules sanity test - make sure that ``module`` and ``plugin`` ``seealso`` entries use FQCNs (https://github.com/ansible/ansible/pull/84325).
-- vault - improved vault filter documentation by adding missing example content for dump_template_data.j2, refining examples for clarity, and ensuring variable consistency (https://github.com/ansible/ansible/issues/83583).
-- warnings - All warnings (including deprecation warnings) issued during a task's execution are now accessible via the ``warnings`` and ``deprecations`` keys on the task result.
-- when the ``dict`` lookup is given a non-dict argument, show the value of the argument and its type in the error message.
-- windows - add hard minimum limit for PowerShell to 5.1. Ansible dropped support for older versions of PowerShell in the 2.16 release but this reqirement is now enforced at runtime.
-- windows - refactor windows exec runner to improve efficiency and add better error reporting on failures.
-- winrm - Remove need for pexpect on macOS hosts when using ``kinit`` to retrieve the Kerberos TGT. By default the code will now only use the builtin ``subprocess`` library which should handle issues with select and a high fd count and also simplify the code.
-
-Breaking Changes / Porting Guide
---------------------------------
-
-- Support for the ``toml`` library has been removed from TOML inventory parsing and dumping. Use ``tomli`` for parsing on Python 3.10. Python 3.11 and later have built-in support for parsing. Use ``tomli-w`` to support outputting inventory in TOML format.
-- assert - The ``quiet`` argument must be a commonly-accepted boolean value. Previously, unrecognized values were silently treated as False.
-- callback plugins - The structure of the ``exception``, ``warnings`` and ``deprecations`` values visible to callbacks has changed. Callbacks that inspect or serialize these values may require special handling.
-- conditionals - Conditional expressions that result in non-boolean values are now an error by default. Such results often indicate unintentional use of templates where they are not supported, resulting in a conditional that is always true. When this option is enabled, conditional expressions which are a literal ``None`` or empty string will evaluate as true, for backwards compatibility. The error can be temporarily changed to a deprecation warning by enabling the ``ALLOW_BROKEN_CONDITIONALS`` config option.
-- first_found lookup - When specifying ``files`` or ``paths`` as a templated list containing undefined values, the undefined list elements will be discarded with a warning. Previously, the entire list would be discarded without any warning.
-- internals - The ``AnsibleLoader`` and ``AnsibleDumper`` classes for working with YAML are now factory functions and cannot be extended.
-- internals - The ``ansible.utils.native_jinja`` Python module has been removed.
-- inventory - Invalid variable names provided by inventories result in an inventory parse failure. This behavior is now consistent with other variable name usages throughout Ansible.
-- lookup plugins - Lookup plugins called as `with_(lookup)` will no longer have the `_subdir` attribute set.
-- lookup plugins - ``terms`` will always be passed to ``run`` as the first positional arg, where previously it was sometimes passed as a keyword arg when using ``with_`` syntax.
-- loops - Omit placeholders no longer leak between loop item templating and task templating. Previously, ``omit`` placeholders could remain embedded in loop items after templating and be used as an ``omit`` for task templating. Now, values resolving to ``omit`` are dropped immediately when loop items are templated. To turn missing values into an ``omit`` for task templating, use ``| default(omit)``. This solution is backwards compatible with previous versions of ansible-core.
-- modules - Ansible modules using ``sys.excepthook`` must use a standard ``try/except`` instead.
-- plugins - Any plugin that sources or creates templates must properly tag them as trusted.
-- plugins - Custom Jinja plugins that accept undefined top-level arguments must opt in to receiving them.
-- plugins - Custom Jinja plugins that use ``environment.getitem`` to retrieve undefined values will now trigger a ``MarkerError`` exception. This exception must be handled to allow the plugin to return a ``Marker``, or the plugin must opt-in to accepting ``Marker`` values.
-- public API - The ``ansible.vars.fact_cache.FactCache`` wrapper has been removed.
-- serialization of ``omit`` sentinel - Serialization of variables containing ``omit`` sentinels (e.g., by the ``to_json`` and ``to_yaml`` filters or ``ansible-inventory``) will fail if the variable has not completed templating. Previously, serialization succeeded with placeholder strings emitted in the serialized output.
-- set_fact - The string values "yes", "no", "true" and "false" were previously converted (ignoring case) to boolean values when not using Jinja2 native mode. Since Jinja2 native mode is always used, this conversion no longer occurs. When boolean values are required, native boolean syntax should be used where variables are defined, such as in YAML. When native boolean syntax is not an option, the ``bool`` filter can be used to parse string values into booleans.
-- template lookup - The ``convert_data`` option is deprecated and no longer has any effect. Use the ``from_json`` filter on the lookup result instead.
-- templating - Access to ``_`` prefixed attributes and methods, and methods with known side effects, is no longer permitted. In cases where a matching mapping key is present, the associated value will be returned instead of an error. This increases template environment isolation and ensures more consistent behavior between the ``.`` and ``[]`` operators.
-- templating - Conditionals and lookups which use embedded inline templates in Jinja string constants now display a warning. These templates should be converted to their expression equivalent.
-- templating - Many Jinja plugins (filters, lookups, tests) and methods previously silently ignored undefined inputs, which often masked subtle errors. Passing an undefined argument to a Jinja plugin or method that does not declare undefined support now results in an undefined value.
-- templating - Templates are always rendered in Jinja2 native mode. As a result, non-string values are no longer automatically converted to strings.
-- templating - Templates resulting in ``None`` are no longer automatically converted to an empty string.
-- templating - Templates with embedded inline templates that were not contained within a Jinja string constant now result in an error, as support for multi-pass templating was removed for security reasons. In most cases, such templates can be easily rewritten to avoid the use of embedded inline templates.
-- templating - The ``allow_unsafe_lookups`` option no longer has any effect. Lookup plugins are responsible for tagging strings containing templates to allow evaluation as a template.
-- templating - The result of the ``range()`` global function cannot be returned from a template- it should always be passed to a filter (e.g., ``random``). Previously, range objects returned from an intermediate template were always converted to a list, which is inconsistent with inline consumption of range objects.
-- templating - ``#jinja2:`` overrides in templates with invalid override names or types are now templating errors.
-
-Deprecated Features
--------------------
-
-- CLI - The ``--inventory-file`` option alias is deprecated. Use the ``-i`` or ``--inventory`` option instead.
-- Stategy Plugins - Use of strategy plugins not provided in ``ansible.builtin`` are deprecated and do not carry any backwards compatibility guarantees going forward. A future release will remove the ability to use external strategy plugins. No alternative for third party strategy plugins is currently planned.
-- ``ansible.module_utils.compat.datetime`` - The datetime compatibility shims are now deprecated. They are scheduled to be removed in ``ansible-core`` v2.21. This includes ``UTC``, ``utcfromtimestamp()`` and ``utcnow`` importable from said module (https://github.com/ansible/ansible/pull/81874).
-- bool filter - Support for coercing unrecognized input values (including None) has been deprecated. Consult the filter documentation for acceptable values, or consider use of the ``truthy`` and ``falsy`` tests.
-- cache plugins - The `ansible.plugins.cache.base` Python module is deprecated. Use `ansible.plugins.cache` instead.
-- callback plugins - The `v2_on_any` callback method is deprecated. Use specific callback methods instead.
-- callback plugins - The v1 callback API (callback methods not prefixed with `v2_`) is deprecated. Use `v2_` prefixed methods instead.
-- conditionals - Conditionals using Jinja templating delimiters (e.g., ``{{``, ``{%``) should be rewritten as expressions without delimiters, unless the entire conditional value is a single template that resolves to a trusted string expression. This is useful for dynamic indirection of conditional expressions, but is limited to trusted literal string expressions.
-- config - The ``ACTION_WARNINGS`` config has no effect. It previously disabled command warnings, which have since been removed.
-- config - The ``DEFAULT_JINJA2_NATIVE`` option has no effect. Jinja2 native mode is now the default and only option.
-- config - The ``DEFAULT_NULL_REPRESENTATION`` option has no effect. Null values are no longer automatically converted to another value during templating of single variable references.
-- display - The ``Display.get_deprecation_message`` method has been deprecated. Call ``Display.deprecated`` to display a deprecation message, or call it with ``removed=True`` to raise an ``AnsibleError``.
-- file loading - Loading text files with ``DataLoader`` containing data that cannot be decoded under the expected encoding is deprecated. In most cases the encoding must be UTF-8, although some plugins allow choosing a different encoding. Previously, invalid data was silently wrapped in Unicode surrogate escape sequences, often resulting in later errors or other data corruption.
-- first_found lookup - Splitting of file paths on ``,;:`` is deprecated. Pass a list of paths instead. The ``split`` method on strings can be used to split variables into a list as needed.
-- interpreter discovery - The ``auto_legacy`` and ``auto_legacy_silent`` options for ``INTERPRETER_PYTHON`` are deprecated. Use ``auto`` or ``auto_silent`` options instead, as they have the same effect.
-- oneline callback - The ``oneline`` callback and its associated ad-hoc CLI args (``-o``, ``--one-line``) are deprecated.
-- paramiko - The paramiko connection plugin has been deprecated with planned removal in 2.21.
-- playbook variables - The ``play_hosts`` variable has been deprecated, use ``ansible_play_batch`` instead.
-- plugin error handling - The ``AnsibleError`` constructor arg ``suppress_extended_error`` is deprecated. Using ``suppress_extended_error=True`` has the same effect as ``show_content=False``.
-- plugins - The ``listify_lookup_plugin_terms`` function is obsolete and in most cases no longer needed.
-- template lookup - The jinja2_native option is no longer used in the Ansible Core code base. Jinja2 native mode is now the default and only option.
-- templating - Support for enabling Jinja2 extensions (not plugins) has been deprecated.
-- templating - The ``ansible_managed`` variable available for certain templating scenarios, such as the ``template`` action and ``template`` lookup has been deprecated. Define and use a custom variable instead of relying on ``ansible_managed``.
-- templating - The ``disable_lookups`` option has no effect, since plugins must be updated to apply trust before any templating can be performed.
-- to_yaml/to_nice_yaml filters - Implicit YAML dumping of vaulted value ciphertext is deprecated. Set `dump_vault_tags` to explicitly specify the desired behavior.
-- tree callback - The ``tree`` callback and its associated ad-hoc CLI args (``-t``, ``--tree``) are deprecated.
-
-Removed Features (previously deprecated)
-----------------------------------------
-
-- Remove deprecated plural form of collection path (https://github.com/ansible/ansible/pull/84156).
-- Removed deprecated STRING_CONVERSION_ACTION (https://github.com/ansible/ansible/issues/84220).
-- encrypt - passing unsupported passlib hashtype now raises AnsibleFilterError.
-- manager - remove deprecated include_delegate_to parameter from get_vars API.
-- modules - Modules returning non-UTF8 strings now result in an error. The ``MODULE_STRICT_UTF8_RESPONSE`` setting can be used to disable this check.
-- removed deprecated pycompat24 and compat.importlib.
-- selector - remove deprecated compat.selector related files (https://github.com/ansible/ansible/pull/84155).
-- windows - removed common module functions ``ConvertFrom-AnsibleJson``, ``Format-AnsibleException`` from Windows modules as they are not used and add uneeded complexity to the code.
-
-Security Fixes
---------------
-
-- include_vars action - Ensure that result masking is correctly requested when vault-encrypted files are read. (CVE-2024-8775)
-- task result processing - Ensure that action-sourced result masking (``_ansible_no_log=True``) is preserved. (CVE-2024-8775)
-- templating - Ansible's template engine no longer processes Jinja templates in strings unless they are marked as coming from a trusted source. Untrusted strings containing Jinja template markers are ignored with a warning. Examples of trusted sources include playbooks, vars files, and many inventory sources. Examples of untrusted sources include module results and facts. Plugins which have not been updated to preserve trust while manipulating strings may inadvertently cause them to lose their trusted status.
-- templating - Changes to conditional expression handling removed numerous instances of insecure multi-pass templating (which could result in execution of untrusted template expressions).
-- user action won't allow ssh-keygen, chown and chmod to run on existing ssh public key file, avoiding traversal on existing symlinks (CVE-2024-9902).
-
-Bugfixes
---------
-
-- Ansible will now also warn when reserved keywords are set via a module (set_fact, include_vars, etc).
-- Ansible.Basic - Fix ``required_if`` check when the option value to check is unset or set to null.
-- Correctly return ``False`` when using the ``filter`` and ``test`` Jinja tests on plugin names which are not filters or tests, respectively. (resolves issue https://github.com/ansible/ansible/issues/82084)
-- Do not run implicit ``flush_handlers`` meta tasks when the whole play is excluded from the run due to tags specified.
-- Errors now preserve stacked error messages even when YAML is involved.
-- Fix a display.debug statement with the wrong param in _get_diff_data() method
-- Fix disabling SSL verification when installing collections and roles from git repositories. If ``--ignore-certs`` isn't provided, the value for the ``GALAXY_IGNORE_CERTS`` configuration option will be used (https://github.com/ansible/ansible/issues/83326).
-- Fix ipv6 pattern bug in lib/ansible/parsing/utils/addresses.py (https://github.com/ansible/ansible/issues/84237)
-- Fix returning 'unreachable' for the overall task result. This prevents false positives when a looped task has unignored unreachable items (https://github.com/ansible/ansible/issues/84019).
-- Implicit ``meta: flush_handlers`` tasks now have a parent block to prevent potential tracebacks when calling methods like ``get_play()`` on them internally.
-- Improve performance on large inventories by reducing the number of implicit meta tasks.
-- Jinja plugins - Errors raised will always be derived from ``AnsibleTemplatePluginError``.
-- Optimize the way tasks from within ``include_tasks``/``include_role`` are inserted into the play.
-- Time out waiting on become is an unreachable error (https://github.com/ansible/ansible/issues/84468)
-- Use consistent multiprocessing context for action write locks
-- Use the requested error message in the ansible.module_utils.facts.timeout timeout function instead of hardcoding one.
-- Windows - add support for running on system where WDAC is in audit mode with ``Dynamic Code Security`` enabled.
-- YAML parsing - The `!unsafe` tag no longer coerces non-string scalars to strings.
-- ``ansible-galaxy`` — the collection dependency resolver now treats version specifiers starting with ``!=`` as unpinned.
-- ``package``/``dnf`` action plugins - provide the reason behind the failure to gather the ``ansible_pkg_mgr`` fact to identify the package backend
-- action plugins - Action plugins that raise unhandled exceptions no longer terminate playbook loops. Previously, exceptions raised by an action plugin caused abnormal loop termination and loss of loop iteration results.
-- ansible-config - format galaxy server configs while dumping in JSON format (https://github.com/ansible/ansible/issues/84840).
-- ansible-doc - If none of the files in files exists, path will be undefined and a direct reference will throw an UnboundLocalError (https://github.com/ansible/ansible/pull/84464).
-- ansible-galaxy - Small adjustments to URL building for ``download_url`` and relative redirects.
-- ansible-pull change detection will now work independently of callback or result format settings.
-- ansible-test - Enable the ``sys.unraisablehook`` work-around for the ``pylint`` sanity test on Python 3.11. Previously the work-around was only enabled for Python 3.12 and later. However, the same issue has been discovered on Python 3.11.
-- ansible-test - Ensure CA certificates are installed on managed FreeBSD instances.
-- ansible-test - Fix support for PowerShell module_util imports with the ``-Optional`` flag.
-- ansible-test - Fix support for detecting PowerShell modules importing module utils with the newer ``#AnsibleRequires`` format.
-- ansible-test - Fix traceback that occurs after an interactive command fails.
-- ansible-test - Fix up coverage reporting to properly translate the temporary path of integration test modules to the expected static test module path.
-- ansible-test - Fixed traceback when handling certain YAML errors in the ``yamllint`` sanity test.
-- ansible-test - Managed macOS instances now use the ``sudo_chdir`` option for the ``sudo`` become plugin to avoid permission errors when dropping privileges.
-- ansible-vault will now correctly handle `--prompt`, previously it would issue an error about stdin if no 2nd argument was passed
-- ansible_uptime_second - added ansible_uptime_seconds fact support for AIX (https://github.com/ansible/ansible/pull/84321).
-- apt_key module - prevent tests from running when apt-key was removed
-- base.yml - deprecated libvirt_lxc_noseclabel config.
-- build - Pin ``wheel`` in ``pyproject.toml`` to ensure compatibility with supported ``setuptools`` versions.
-- config - various fixes to config lookup plugin (https://github.com/ansible/ansible/pull/84398).
-- copy - refactor copy module for simplicity.
-- copy action now prevents user from setting internal options.
-- debconf - set empty password values (https://github.com/ansible/ansible/issues/83214).
-- debug - hide loop vars in debug var display (https://github.com/ansible/ansible/issues/65856).
-- default callback - Error context is now shown for failing tasks that use the ``debug`` action.
-- display - The ``Display.deprecated`` method once again properly handles the ``removed=True`` argument (https://github.com/ansible/ansible/issues/82358).
-- distro - add support for Linux Mint Debian Edition (LMDE) (https://github.com/ansible/ansible/issues/84934).
-- distro - detect Debian as os_family for LMDE 6 (https://github.com/ansible/ansible/issues/84934).
-- dnf5 - Handle forwarded exceptions from dnf5-5.2.13 where a generic ``RuntimeError`` was previously raised
-- dnf5 - fix ``is_installed`` check for packages that are not installed but listed as provided by an installed package (https://github.com/ansible/ansible/issues/84578)
-- dnf5 - fix installing a package using ``state=latest`` when a binary of the same name as the package is already installed (https://github.com/ansible/ansible/issues/84259)
-- dnf5 - fix traceback when ``enable_plugins``/``disable_plugins`` is used on ``python3-libdnf5`` versions that do not support this functionality
-- dnf5 - libdnf5 - use ``conf.pkg_gpgcheck`` instead of deprecated ``conf.gpgcheck`` which is used only as a fallback
-- dnf5 - matching on a binary can be achieved only by specifying a full path (https://github.com/ansible/ansible/issues/84334)
-- facts - gather pagesize and calculate respective values depending upon architecture (https://github.com/ansible/ansible/issues/84773).
-- facts - skip if distribution file path is directory, instead of raising error (https://github.com/ansible/ansible/issues/84006).
-- find - skip ENOENT error code while recursively enumerating files. find module will now be tolerant to race conditions that remove files or directories from the target it is currently inspecting. (https://github.com/ansible/ansible/issues/84873).
-- first_found lookup - Corrected return value documentation to reflect None (not empty string) for no files found.
-- gather_facts action now defaults to `ansible.legacy.setup` if `smart` was set, no network OS was found and no other alias for `setup` was present.
-- gather_facts action will now issues errors and warnings as appropriate if a network OS is detected but no facts modules are defined for it.
-- gather_facts action, will now add setup when 'smart' appears with other modules in the FACTS_MODULES setting (#84750).
-- get_url - add support for BSD-style checksum digest file (https://github.com/ansible/ansible/issues/84476).
-- get_url - fix honoring ``filename`` from the ``content-disposition`` header even when the type is ``inline`` (https://github.com/ansible/ansible/issues/83690)
-- host_group_vars - fixed defining the 'key' variable if the get_vars method is called with cache=False (https://github.com/ansible/ansible/issues/84384)
-- include_vars - fix including previously undefined hash variables with hash_behaviour merge (https://github.com/ansible/ansible/issues/84295).
-- iptables - Allows the wait parameter to be used with iptables chain creation (https://github.com/ansible/ansible/issues/84490)
-- linear strategy - fix executing ``end_role`` meta tasks for each host, instead of handling these as implicit run_once tasks (https://github.com/ansible/ansible/issues/84660).
-- local connection plugin - Become timeout errors now include all received data. Previously, the most recently-received data was discarded.
-- local connection plugin - Ensure ``become`` success validation always occurs, even when an active plugin does not set ``prompt``.
-- local connection plugin - Fixed cases where the internal ``BECOME-SUCCESS`` message appeared in task output.
-- local connection plugin - Fixed hang or spurious failure when data arrived concurrently on stdout and stderr during a successful ``become`` operation validation.
-- local connection plugin - Fixed hang when a become plugin expects a prompt but a password was not provided.
-- local connection plugin - Fixed hang when an active become plugin incorrectly signals lack of prompt.
-- local connection plugin - Fixed hang when an internal become read timeout expired before the password prompt was written.
-- local connection plugin - Fixed hang when only one of stdout or stderr was closed by the ``become_exe`` subprocess.
-- local connection plugin - Fixed long timeout/hang for ``become`` plugins that repeat their prompt on failure (e.g., ``sudo``, some ``su`` implementations).
-- local connection plugin - Fixed silent ignore of ``become`` failures and loss of task output when data arrived concurrently on stdout and stderr during ``become`` operation validation.
-- local connection plugin - Fixed task output header truncation when post-become data arrived before ``become`` operation validation had completed.
-- lookup plugins - The ``terms`` arg to the ``run`` method is now always a list. Previously, there were cases where a non-list could be received.
-- module arg templating - When using a templated raw task arg and a templated ``args`` keyword, args are now merged. Previously use of templated raw task args silently ignored all values from the templated ``args`` keyword.
-- module defaults - Module defaults are no longer templated unless they are used by a task that does not override them. Previously, all module defaults for all modules were templated for every task.
-- module respawn - limit to supported Python versions
-- omitting task args - Use of omit for task args now properly falls back to args of lower precedence, such as module defaults. Previously an omitted value would obliterate values of lower precedence.
-- package_facts module when using 'auto' will return the first package manager found that provides an output, instead of just the first one, as this can be foreign and not have any packages.
-- psrp - Improve stderr parsing when running raw commands that emit error records or stderr lines.
-- regex_search filter - Corrected return value documentation to reflect None (not empty string) for no match.
-- respawn - use copy of env variables to update existing PYTHONPATH value (https://github.com/ansible/ansible/issues/84954).
-- runas become - Fix up become logic to still get the SYSTEM token with the most privileges when running as SYSTEM.
-- sequence lookup - sequence query/lookups without positional arguments now return a valid list if their kwargs comprise a valid sequence expression (https://github.com/ansible/ansible/issues/82921).
-- service_facts - skip lines which does not contain service names in openrc output (https://github.com/ansible/ansible/issues/84512).
-- ssh - Improve the logic for parsing CLIXML data in stderr when working with Windows host. This fixes issues when the raw stderr contains invalid UTF-8 byte sequences and improves embedded CLIXML sequences.
-- ssh - Raise exception when sshpass returns error code (https://github.com/ansible/ansible/issues/58133).
-- ssh - connection options were incorrectly templated during ``reset_connection`` tasks (https://github.com/ansible/ansible/pull/84238).
-- stability - Fixed silent process failure on unhandled IOError/OSError under ``linear`` strategy.
-- su become plugin - Ensure generated regex from ``prompt_l10n`` config values is properly escaped.
-- su become plugin - Ensure that password prompts are correctly detected in the presence of leading output. Previously, this case resulted in a timeout or hang.
-- su become plugin - Ensure that trailing colon is expected on all ``prompt_l10n`` config values.
-- sudo become plugin - The `sudo_chdir` config option allows the current directory to be set to the specified value before executing sudo to avoid permission errors when dropping privileges.
-- sunos - remove hard coding of virtinfo command in facts gathering code (https://github.com/ansible/ansible/pull/84357).
-- to_yaml/to_nice_yaml filters - Eliminated possibility of keyword arg collisions with internally-set defaults.
-- unarchive - Clamp timestamps from beyond y2038 to representible values when unpacking zip files on platforms that use 32-bit time_t (e.g. Debian i386).
-- uri - Form location correctly when the server returns a relative redirect (https://github.com/ansible/ansible/issues/84540)
-- uri - Handle HTTP exceptions raised while reading the content (https://github.com/ansible/ansible/issues/83794).
-- uri - mark ``url`` as required (https://github.com/ansible/ansible/pull/83642).
-- user - Create Buildroot subclass as alias to Busybox (https://github.com/ansible/ansible/issues/83665).
-- user - Set timeout for passphrase interaction.
-- user - Update prompt for SSH key passphrase (https://github.com/ansible/ansible/issues/84484).
-- user - Use higher precedence HOME_MODE as UMASK for path provided (https://github.com/ansible/ansible/pull/84482).
-- user action will now require O(force) to overwrite the public part of an ssh key when generating ssh keys, as was already the case for the private part.
-- user module now avoids changing ownership of files symlinked in provided home dir skeleton
-- vars lookup - The ``default`` substitution only applies when trying to look up a variable which is not defined. If the variable is defined, but templates to an undefined value, the ``default`` substitution will not apply. Use the ``default`` filter to coerce those values instead.
-- wait_for_connection - a warning was displayed if any hosts used a local connection (https://github.com/ansible/ansible/issues/84419)
-
-Known Issues
-------------
-
-- templating - Any string value starting with ``#jinja2:`` which is templated will always be interpreted as Jinja2 configuration overrides. To include this literal value at the start of a string, a space or other character must precede it.
-- variables - Tagged values cannot be used for dictionary keys in many circumstances.
-- variables - The values ``None``, ``True`` and ``False`` cannot be tagged because they are singletons. Attempts to apply tags to these values will be silently ignored.

changelogs/CHANGELOG.rst

@@ -0,0 +1,6 @@
+Placeholder changelog
+=====================
+
+This file is a placeholder; a version-specific ``CHANGELOG-vX.Y.rst`` will be generated during releases from fragments
+under changelogs/fragments. On release branches once a release has been created, consult the branch's version-specific
+file for changes that have occurred in that branch.

changelogs/README.md

@@ -1,8 +0,0 @@
-Changelogs
-==========
-
-As part of the release process a version-specific `CHANGELOG-vX.Y.rst` will be generated from fragments in
-the `fragments` directory.
-
-On release branches once a release has been created, consult the branch's version-specific file for changes that have
-occurred in that branch. The `devel` branch does not have a generated changelog, only changelog fragments.

changelogs/fragments/ 75876-fix-parsing-of-device-serial-number-for-rhel-8.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+  - ansible_facts.devices - Fix parsing of device serial number detected via sg_inq for rhel8 (https://github.com/ansible/ansible/issues/75420)

changelogs/fragments/2.19.0b1_summary.yaml

@@ -1,3 +0,0 @@
-release_summary: |
-   | Release Date: 2025-04-14
-   | `Porting Guide <https://docs.ansible.com/ansible-core/2.19/porting_guides/porting_guide_core_2.19.html>`__

changelogs/fragments/2.19.0b2_summary.yaml

@@ -1,3 +0,0 @@
-release_summary: |
-   | Release Date: 2025-04-24
-   | `Porting Guide <https://docs.ansible.com/ansible-core/2.19/porting_guides/porting_guide_core_2.19.html>`__

changelogs/fragments/2.19.0b3_summary.yaml

@@ -1,3 +0,0 @@
-release_summary: |
-   | Release Date: 2025-05-06
-   | `Porting Guide <https://docs.ansible.com/ansible-core/2.19/porting_guides/porting_guide_core_2.19.html>`__

changelogs/fragments/2.19.0b4_summary.yaml

@@ -1,3 +0,0 @@
-release_summary: |
-   | Release Date: 2025-05-12
-   | `Porting Guide <https://docs.ansible.com/ansible-core/2.19/porting_guides/porting_guide_core_2.19.html>`__

changelogs/fragments/47277-fails-to-deploy-deb-when-has-no-architecture-attribute.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - apt - fails to deploy deb file to old debian systems using python-apt < 0.8.9 (https://github.com/ansible/ansible/issues/47277)

changelogs/fragments/50771-uri-improvements.yml

@@ -0,0 +1,3 @@
+minor_changes:
+- uri - Eliminate multiple requests to determine the final URL for file naming with ``dest``
+- uri - Avoid reading the response body when not needed

changelogs/fragments/50897-include_role-any_errors_fatal.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+  - Make include_role/include_tasks work with any_errors_fatal (https://github.com/ansible/ansible/issues/50897)

changelogs/fragments/58632-uri-include_use_proxy.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+  - uri - properly use uri parameter use_proxy (https://github.com/ansible/ansible/issues/58632)

changelogs/fragments/67616-galaxy-scm-cloning-ignore-certs.yml

@@ -0,0 +1,2 @@
+minor_changes:
+- ansible-galaxy - the option to skip certificate verification now also applies when cloning via SCM (git/hg) (https://github.com/ansible/ansible/issues/41077)

changelogs/fragments/69776-add-aix-root-ca-certs-paths.yml

@@ -0,0 +1,3 @@
+---
+minor_changes:
+- Added AIX root CA certs folders - enhance the TLS support in ``uri`` task on AIX

changelogs/fragments/70180-collection-list-more-robust.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - ansible-galaxy - do not require mandatory keys in the ``galaxy.yml`` of source collections when listing them (https://github.com/ansible/ansible/issues/70180).

changelogs/fragments/71627-add_host-group_by-fix-changed_when-in-loop.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - "add_host/group_by: fix using changed_when in a loop (https://github.com/ansible/ansible/issues/71627)"

changelogs/fragments/71734-validate-plugins.yml

@@ -0,0 +1,2 @@
+minor_changes:
+  - "ansible-test sanity validate-modules - the validate-modules sanity test now also checks the documentation of documentable plugin types (https://github.com/ansible/ansible/pull/71734)."

changelogs/fragments/72405-git-module-local_mods-show-conflict-destination-directory.yml

@@ -0,0 +1,2 @@
+minor_changes:
+  - git - display the destination directory path in error msg when local_mods detects local modifications conflict so that users see the exact location

changelogs/fragments/72592-catch-broken-cowsay.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+  - catch the case that cowsay is broken which would lead to missing output

changelogs/fragments/73024-unarchive-apply-permissions-top-folder.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - unarchive - apply ``owner`` and ``group`` permissions to top folder (https://github.com/ansible/ansible/issues/35426)

changelogs/fragments/73629_allow-change-held-packages.yml

@@ -0,0 +1,3 @@
+minor_changes:
+  - apt - Adds APT option ``--allow-change-held-packages`` as module parameter ``allow_change_held_packages`` to allow APT up- or
+    downgrading a package which is on APTs hold list (https://github.com/ansible/ansible/issues/65325)

changelogs/fragments/73657-include-parser-error-fail.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - Parser errors from within includes should not be rescueable (https://github.com/ansible/ansible/issues/73657)

changelogs/fragments/74127-bad-filter-2.yml

@@ -0,0 +1,5 @@
+bugfixes:
+- Templating - Ensure we catch exceptions when getting ``.filters`` and
+  ``.tests`` attributes on their respective plugins and properly error,
+  instead of aborting which results in no filters being added to the
+  jinja2 environment

changelogs/fragments/74349-improve-docker-detection.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - setup - detect docker container with check for ./dockerenv or ./dockinit (https://github.com/ansible/ansible/pull/74349).

changelogs/fragments/74416-PlayIterator-_host_states-setters.yml

@@ -0,0 +1,2 @@
+minor_changes:
+  - "PlayIterator - introduce public methods to access ``PlayIterator._host_states`` (https://github.com/ansible/ansible/pull/74416)"

changelogs/fragments/74446-network-conn-options.yaml

@@ -0,0 +1,3 @@
+---
+bugfixes:
+  - Fix for network_cli not getting all relevant connection options

changelogs/fragments/74511-PlayIterator-states-enums.yml

@@ -0,0 +1,2 @@
+minor_changes:
+  - "PlayIterator - use enums for Iterating and Failed states (https://github.com/ansible/ansible/pull/74511)"

changelogs/fragments/75002-apt_min_version.yml

@@ -0,0 +1,2 @@
+minor_changes:
+  - apt - Add support for using ">=" in package version number matching.

changelogs/fragments/75015-ca-path-bundle.yml

@@ -0,0 +1,3 @@
+bugfixes:
+- urls - Allow ``ca_path`` to point to a bundle containing multiple PEM certs
+  (https://github.com/ansible/ansible/issues/75015)

changelogs/fragments/75017-user-password-expiry.yml

@@ -0,0 +1,3 @@
+bugfixes:
+  - user - allow ``password_expiry_min`` and ``password_expiry_min`` to be set to ``0`` (https://github.com/ansible/ansible/issues/75017)
+  - user - allow password min and max to be set at the same time (https://github.com/ansible/ansible/issues/75017)

changelogs/fragments/75101-ansible-vault-encrypt_string-output-file.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - "ansible-vault encrypt_string - fix ``--output`` option to correctly write encrypted string into given file (https://github.com/ansible/ansible/issues/75101)"

changelogs/fragments/75538-systemd-alias-check.yml

@@ -0,0 +1,2 @@
+bugfixes:
+- systemd - check if service is alias so it gets enabled (https://github.com/ansible/ansible/issues/75538).

changelogs/fragments/75540-warn-invalid-configured-vault-secret-files.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+  - vault - Warn instead of fail for missing vault IDs if at least one valid vault secret is found.

changelogs/fragments/75560-interp-discovery-family-fallback.yml

@@ -0,0 +1,4 @@
+bugfixes:
+- Interpreter Discovery - Fallback to OS family if the distro is not found in
+  ``INTERPRETER_PYTHON_DISTRO_MAP``
+  (https://github.com/ansible/ansible/issues/75560)

changelogs/fragments/75635-fix-role-argspec-suboption-validation.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - validate_argument_spec - Skip suboption validation if the top level option is an invalid type (https://github.com/ansible/ansible/issues/75612).

changelogs/fragments/75642-free-strat-fix-executing-includes.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - Fix executing includes in the always section in the free strategy (https://github.com/ansible/ansible/issues/75642)

changelogs/fragments/75671-ansible-doc-ignore-deprecations.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - ansible-doc - ignore plugin deprecation warnings (https://github.com/ansible/ansible/issues/75671)

changelogs/fragments/75823-cli-remove-deprecated-verbosity-before-sub-cmd.yml

@@ -0,0 +1,2 @@
+removed_features:
+  - cli - remove deprecated ability to set verbosity before the sub-command (https://github.com/ansible/ansible/issues/75823)

changelogs/fragments/75824-copy-remove-deprecated-thirsty-alias.yml

@@ -0,0 +1,2 @@
+removed_features:
+  - copy - remove deprecated ``thirsty`` alias (https://github.com/ansible/ansible/issues/75824)

changelogs/fragments/75825-75826-get_url-uri-remove-deprecated-thirsty-alias.yml

@@ -0,0 +1,2 @@
+removed_features:
+  - url_argument_spec - remove deprecated ``thirsty`` alias for ``get_url`` and ``uri`` modules (https://github.com/ansible/ansible/issues/75825, https://github.com/ansible/ansible/issues/75826)

changelogs/fragments/75828-remove-deprecated-set_available_variables.yml

@@ -0,0 +1,2 @@
+removed_features:
+  - Remove deprecated ``Templar.set_available_variables()`` method (https://github.com/ansible/ansible/issues/75828)

changelogs/fragments/75845-ansible-galaxy-support-collection-skeleton.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - ansible-galaxy - Add galaxy_collection_skeleton/galaxy_collection_skeleton_ignore configuration options

changelogs/fragments/75863-start-move-away-six.yml

@@ -0,0 +1,2 @@
+minor_changes:
+  - "Start of moving away from using Six, Python 2 and 3 compatibility library (https://github.com/ansible/ansible/pull/75863)"

changelogs/fragments/75881-jinja2-3-min.yml

@@ -0,0 +1,3 @@
+major_changes:
+- Jinja2 Controller Requirement - Jinja2 3.0.0 or newer is required for the control node (the machine that runs Ansible)
+  (https://github.com/ansible/ansible/pull/75881)

changelogs/fragments/76009-validate-modules-choices-return-value.yml

@@ -0,0 +1,2 @@
+minor_changes:
+  - "ansible-test validate_modules - allow ``choices`` for return values (https://github.com/ansible/ansible/pull/76009)."

changelogs/fragments/76011-loop-variable-in-use-warning.yml

@@ -0,0 +1,3 @@
+bugfixes:
+- _run_loop - Add the task name to the warning
+  (https://github.com/ansible/ansible/issues/76011)

changelogs/fragments/76049-task-debugger-run_once.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - "Fix task debugger to work with ``run_once`` using ``linear`` strategy (https://github.com/ansible/ansible/issues/76049)"

changelogs/fragments/76069-fix-unarchive-file-listing-in-zip.yaml

@@ -0,0 +1,3 @@
+bugfixes:
+- unarchive - Fix zip archive file listing that caused issues with content
+  postprocessing (https://github.com/ansible/ansible/issues/76067).

changelogs/fragments/76108-fix-ansible-galaxy-collection-verify-help.yaml

@@ -0,0 +1,3 @@
+bugfixes:
+  - Fix help message for the 'ansible-galaxy collection verify' positional argument.
+    The positional argument must be a collection name (https://github.com/ansible/ansible/issues/76087).

changelogs/fragments/76124-hostname-debianstrategy.yml

@@ -0,0 +1,3 @@
+bugfixes:
+  - hostname - Fix Debian strategy KeyError, use `SystemdStrategy`
+    (https://github.com/ansible/ansible/issues/76124)

changelogs/fragments/76192-dnf-specific-gpg-error.yml

@@ -0,0 +1,2 @@
+minor_changes:
+  - dnf - add more specific error message for GPG validation (https://github.com/ansible/ansible/issues/76192)

changelogs/fragments/76225-update-collection-loader-for-python3.yaml

@@ -0,0 +1,4 @@
+bugfixes:
+- >-
+  collection_loader - Implement 'find_spec' and 'exec_module' to override deprecated importlib methods
+  'find_module' and 'load_module' when applicable (https://github.com/ansible/ansible/issues/74660).

changelogs/fragments/76235-fix-ansible-doc-builtin-legacy.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - ansible-doc - Fix ansible-doc -l ansible.builtin / ansible.legacy not returning anything

changelogs/fragments/76262-validate-modules-validate-markup.yml

@@ -0,0 +1,2 @@
+minor_changes:
+  - "validate-modules - do some basic validation on the ``M(...)``, ``U(...)``, ``L(..., ...)`` and ``R(..., ...)`` documentation markups (https://github.com/ansible/ansible/pull/76262)."

changelogs/fragments/76316-galaxy-install-role-inaccessible-dir-fix.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - "ansible-galaxy - when installing a role properly raise an error when inaccessible path is specified multiple times in roles_path (e.g. via environment variable and command line option) (https://github.com/ansible/ansible/issues/76316)"

changelogs/fragments/76336-yum-makecache-fast.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - yum - prevent storing unnecessary cache data by running `yum makecache fast` (https://github.com/ansible/ansible/issues/76336)

changelogs/fragments/76343-tencentos-dnf.yml

@@ -0,0 +1,2 @@
+bugfixes:
+- distribution - detect tencentos and gather correct facts on the distro.

changelogs/fragments/76353-fix-check-mode-skipping.yaml

@@ -0,0 +1,4 @@
+bugfixes:
+  - shell/command - only skip in check mode if the options `creates` and `removes` are both None.
+  - shell/command - only return changed as True if the task has not been skipped.
+  - script - skip in check mode if the plugin cannot determine if a change will occur (i.e. neither `creates` or `removes` are provided).

changelogs/fragments/76356-yumdnf-sslverify.yml

@@ -0,0 +1,3 @@
+---
+minor_changes:
+  - yum, dnf - add sslverify option to temporarily disable certificate validation for a repository

changelogs/fragments/76365-unarchive-include-stderr-in-error-message.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - unarchive - include the original error when a handler cannot manage the archive (https://github.com/ansible/ansible/issues/28977).

changelogs/fragments/76373-add-openrc-support-to-service_facts.yaml

@@ -0,0 +1,2 @@
+minor_changes:
+  - services_facts - Add support for openrc (https://github.com/ansible/ansible/pull/76373).