New release v2.7.0rc2

It has lots of FieldAttributes that won't serialize.
Also the connection doesn't care.
(cherry picked from commit 3d0f19d)

Co-authored-by: Nathaniel Case <this.is@nathanielca.se>

.coveragerc

@@ -23,3 +23,4 @@ omit =
     */python*/distutils/*
     */pyshared/*
     */pytest
+    */AnsiballZ_*.py

.github/ISSUE_TEMPLATE/security_bug_report.md

@@ -0,0 +1,8 @@
+---
+name: 🔥 Security bug report
+about: How to report security vulnerabilities
+---
+
+For all security related bugs, email security@ansible.com instead of using this issue tracker and you will receive a prompt response.
+
+For more information, see https://docs.ansible.com/ansible/latest/community/reporting_bugs_and_features.html

.github/PULL_REQUEST_TEMPLATE.md

@@ -13,7 +13,7 @@ the change does.-->
  - Docs Pull Request
 
 ##### COMPONENT NAME
-<!--- Name of the module, plugin, module or task -->
+<!--- Name of the module, plugin, task or feature -->
 
 ##### ANSIBLE VERSION
 <!--- Paste verbatim output from "ansible --version" between quotes below -->

.gitignore

@@ -103,4 +103,5 @@ htmlcov/
 # ansible-test coverage results
 test/units/.coverage.*
 /test/integration/cloud-config-azure.yml
+/SYMLINK_CACHE.json
 changelogs/.plugin-cache.yaml

MANIFEST.in

@@ -1,16 +1,11 @@
+prune hacking
 include README.rst
 include COPYING
 include SYMLINK_CACHE.json
 include requirements.txt
 include .coveragerc
-include shippable.yml
-include tox.ini
-include bin/ansible-test
 include examples/hosts
 include examples/ansible.cfg
-include examples/scripts/ConfigureRemotingForAnsible.ps1
-include examples/scripts/upgrade_to_ps3.ps1
-recursive-include lib/ansible/executor/powershell *
 recursive-include lib/ansible/module_utils/powershell *
 recursive-include lib/ansible/modules *
 recursive-include lib/ansible/galaxy/data *
@@ -20,6 +15,6 @@ recursive-include packaging *
 recursive-include test *
 include Makefile
 include MANIFEST.in
-include changelogs/CHANGELOG-*.rst
+include changelogs/CHANGELOG*.rst
 include contrib/README.md
 recursive-include contrib/inventory *

Makefile

@@ -122,7 +122,7 @@ ifneq ($(REPOTAG),)
 endif
 
 # ansible-test parameters
-ANSIBLE_TEST ?= bin/ansible-test
+ANSIBLE_TEST ?= test/runner/ansible-test
 TEST_FLAGS ?=
 
 # ansible-test units parameters (make test / make test-py3)

README.rst

@@ -103,10 +103,11 @@ Authors
 =======
 
 Ansible was created by `Michael DeHaan <https://github.com/mpdehaan>`_
-(michael.dehaan/gmail/com) and has contributions from over 1000 users
+(michael.dehaan/gmail/com) and has contributions from over 3700 users
 (and growing). Thanks everyone!
 
-Ansible is sponsored by `Ansible, Inc <https://ansible.com>`_
+`Ansible <https://www.ansible.com>`_ is sponsored by `Red Hat, Inc.
+<https://www.redhat.com>`_
 
 License
 =======

bin/ansible-connection

@@ -17,6 +17,7 @@ import os
 import signal
 import socket
 import sys
+import time
 import traceback
 import errno
 import json
@@ -24,7 +25,7 @@ import json
 from contextlib import contextmanager
 
 from ansible import constants as C
-from ansible.module_utils._text import to_bytes, to_native, to_text
+from ansible.module_utils._text import to_bytes, to_text
 from ansible.module_utils.six import PY3
 from ansible.module_utils.six.moves import cPickle, StringIO
 from ansible.module_utils.connection import Connection, ConnectionError, send_data, recv_data
@@ -103,6 +104,7 @@ class ConnectionProcess(object):
                                                     ansible_playbook_pid=self._ansible_playbook_pid)
             self.connection.set_options(var_options=variables)
             self.connection._connect()
+
             self.connection._socket_path = self.socket_path
             self.srv.register(self.connection)
             messages.extend(sys.stdout.getvalue().splitlines())
@@ -137,7 +139,7 @@ class ConnectionProcess(object):
                     if not data:
                         break
 
-                    signal.alarm(self.connection._play_context.timeout)
+                    signal.alarm(self.connection.get_option('persistent_command_timeout'))
                     resp = self.srv.handle_request(data)
                     signal.alarm(0)
 
@@ -154,22 +156,28 @@ class ConnectionProcess(object):
                 self.exception = traceback.format_exc()
 
         finally:
-            # when done, close the connection properly and cleanup
-            # the socket file so it can be recreated
+            # allow time for any exception msg send over socket to receive at other end before shutting down
+            time.sleep(0.1)
+
+            # when done, close the connection properly and cleanup the socket file so it can be recreated
             self.shutdown()
 
     def connect_timeout(self, signum, frame):
-        display.display('persistent connection idle timeout triggered, timeout value is %s secs'
-                        % self.connection.get_option('persistent_connect_timeout'), log_only=True)
-        self.shutdown()
+        msg = 'persistent connection idle timeout triggered, timeout value is %s secs.\nSee the timeout setting options in the Network Debug and ' \
+              'Troubleshooting Guide.' % self.connection.get_option('persistent_connect_timeout')
+        display.display(msg, log_only=True)
+        raise Exception(msg)
 
     def command_timeout(self, signum, frame):
-        display.display('command timeout triggered, timeout value is %s secs' % self.play_context.timeout, log_only=True)
-        self.shutdown()
+        msg = 'command timeout triggered, timeout value is %s secs.\nSee the timeout setting options in the Network Debug and Troubleshooting Guide.'\
+              % self.connection.get_option('persistent_command_timeout')
+        display.display(msg, log_only=True)
+        raise Exception(msg)
 
     def handler(self, signum, frame):
-        display.display('signal handler called with signal %s' % signum, log_only=True)
-        self.shutdown()
+        msg = 'signal handler called with signal %s.' % signum
+        display.display(msg, log_only=True)
+        raise Exception(msg)
 
     def shutdown(self):
         """ Shuts down the local domain socket
@@ -263,8 +271,6 @@ def main():
 
                     if rc == 0:
                         process.run()
-                    else:
-                        process.shutdown()
 
                     sys.exit(rc)
 
@@ -278,6 +284,7 @@ def main():
             else:
                 messages.append('found existing local domain socket, using it!')
                 conn = Connection(socket_path)
+                conn.set_options(var_options=variables)
                 pc_data = to_text(init_data)
                 try:
                     messages.extend(conn.update_play_context(pc_data))

bin/ansible-test

@@ -1,15 +0,0 @@
-#!/usr/bin/env python
-# PYTHON_ARGCOMPLETE_OK
-"""Primary entry point for ansible-test."""
-
-from __future__ import (absolute_import, division, print_function)
-
-__metaclass__ = type
-
-import os
-import sys
-
-if __name__ == '__main__':
-    sys.path.insert(0, os.path.abspath(os.path.join(os.path.dirname(os.path.dirname(__file__)), 'test', 'runner')))
-    import lib.cli
-    lib.cli.main()

changelogs/CHANGELOG-v2.7.rst

@@ -0,0 +1,831 @@
+========================================
+Ansible 2.7 "In the Light" Release Notes
+========================================
+
+.. contents:: Topics
+
+
+v2.7.0rc2
+=========
+
+Release Summary
+---------------
+
+| Release Date: 2018-09-13
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Minor Changes
+-------------
+
+- Fix timer in exponential backoff algorithm in vmware.py.
+
+Bugfixes
+--------
+
+- Add ambiguous command check as the error message is not persistent on nexus devices (https://github.com/ansible/ansible/pull/45337).
+- cloudfront_distribution - replace call to nonexistent method 'validate_distribution_id_from_caller_reference' with 'validate_distribution_from_caller_reference' and set the distribution_id variable to the distribution's 'Id' key.
+- fix azure storage blob cannot create blob container in non-public azure cloud environment. (https://github.com/ansible/ansible/issues/35223)
+- fix azure_rm_autoscale module can use dict to identify target (https://github.com/ansible/ansible/pull/45477)
+- get_url - Don't re-download files unnecessarily when force=no (https://github.com/ansible/ansible/issues/45491)
+- get_url - support remote checksum files with paths specified with leading dots (`./path/to/file`)
+- loop - Ensure that a loop with a when condition that evaluates to false and delegate_to, will short circuit if the loop references an undefined variable. This matches the behavior in the same scenario without delegate_to (https://github.com/ansible/ansible/issues/45189)
+- script inventory plugin - Don't pass file_name to DataLoader.load, which will prevent misleading error messages (https://github.com/ansible/ansible/issues/34164)
+- win_group_membership - fix intermittent issue where it failed to convert the ADSI object to the .NET object after using it once
+- win_say - fix syntax error in module and get tests working
+
+New Plugins
+-----------
+
+Strategy
+~~~~~~~~
+
+- host_pinned - Executes tasks on each host without interruption
+
+v2.7.0rc1
+=========
+
+Release Summary
+---------------
+
+| Release Date: 2018-09-06
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Minor Changes
+-------------
+
+- dnf - group removal does not work if group was installed with Ansible because of dnf upstream bug https://bugzilla.redhat.com/show_bug.cgi?id=1620324
+
+Bugfixes
+--------
+
+- Add argspec to aws_application_scaling_policy module to handle metric specifications, scaling cooldowns, and target values. https://github.com/ansible/ansible/pull/45235
+- Allow arbitrary ``log_driver`` for docker_container (https://github.com/ansible/ansible/pull/33579).
+- Fix ec2_group support for multi-account and peered VPC security groups. Reported in https://github.com/ansible/ansible/issue/44788 and fixed in https://github.com/ansible/ansible/pull/45296
+- Fix ecs_taskdefinition handling of changed role_arn. If the task role in a ECS task definition changes ansible should create a new revsion of the task definition. https://github.com/ansible/ansible/pull/45317
+- Fix health check parameter handling in elb_target_group per https://github.com/ansible/ansible/issues/43244 about health_check_port. Fixed in https://github.com/ansible/ansible/pull/45314
+- Fix lambda_policy updates when principal is an account number. Backport of https://github.com/ansible/ansible/pull/44871
+- Fix python2.6 `nothing to repeat` nxos terminal plugin bug (https://github.com/ansible/ansible/pull/45271).
+- Fix s3_lifecycle module backwards compatibility without providing prefix. Blank prefixes regression was introduced in boto3 rewrite. https://github.com/ansible/ansible/pull/45318
+- Fix terminal plugin regex nxos, iosxr (https://github.com/ansible/ansible/pull/45135).
+- Remove spurious `changed=True` returns when ec2_group module is used with numeric ports. https://github.com/ansible/ansible/pull/45240
+- Support key names that contain spaces in ec2_metadata_facts module. https://github.com/ansible/ansible/pull/45313
+- The docker_* modules respect the DOCKER_* environment variables again (https://github.com/ansible/ansible/pull/42641).
+- corrected and clarified 'user' option deprecation in systemd module in favor of 'scope' option.
+- docker_container: fixing ``working_dir`` idempotency problem (https://github.com/ansible/ansible/pull/42857)
+- docker_container: makes unit parsing for memory sizes more consistent, and fixes idempotency problem when ``kernel_memory`` is set (see https://github.com/ansible/ansible/pull/16748 and https://github.com/ansible/ansible/issues/42692)
+- ec2_vpc_route_table - check the origin before replacing routes. Routes with the origin 'EnableVgwRoutePropagation' may not be replaced.
+- elb_target_group - cast target ports to integers before making API calls after the key 'Targets' is in params.
+- fixed typo in config that prevented keys matching
+- fixes docker_container check and debug mode (https://github.com/ansible/ansible/pull/42380)
+- improves docker_container idempotency (https://github.com/ansible/ansible/pull/44808)
+
+New Modules
+-----------
+
+Cloud
+~~~~~
+
+online
+^^^^^^
+
+- online_user_facts - Gather facts about Online user.
+
+v2.7.0b1
+========
+
+Release Summary
+---------------
+
+| Release Date: 2018-08-31
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Minor Changes
+-------------
+
+- GCP Modules will do home path expansion on service account file paths
+- action plugins strictly accept valid parameters and report invalid parameters
+- import_tasks - Do not allow import_tasks to transition to dynamic if the file is missing (https://github.com/ansible/ansible/issues/44822)
+- onepassword/onepassword_raw - accept subdomain and vault_password to allow Ansible to unlock 1Password vaults
+- win_disk_image - return a list of mount paths with the return value ``mount_paths``, this will always be a list and contain all mount points in an image
+- win_psexec - Added the ``session`` option to specify a session to start the process in
+
+Deprecated Features
+-------------------
+
+- win_disk_image - the return value ``mount_path`` is deprecated and will be removed in 2.11, this can be accessed through ``mount_paths[0]`` instead.
+
+Bugfixes
+--------
+
+- delegate_to - ensure if we get a non-Task object in _get_delegated_vars, we return early (https://github.com/ansible/ansible/pull/44934)
+- get_url / uri - Use custom rfc2822 date format function instead of locale specific strftime (https://github.com/ansible/ansible/issues/44857)
+- improved block docs
+- include - Change order of where the new block is inserted with apply so that apply args are not applied to the include also (https://github.com/ansible/ansible/pull/44912)
+- includes - ensure we do not double register handlers from includes to prevent exception (https://github.com/ansible/ansible/issues/44848)
+- loop - Ensure we only cache the loop when the task had a loop and delegate_to was templated (https://github.com/ansible/ansible/issues/44874)
+- win_psexec - changed code to not escape the command option when building the args - https://github.com/ansible/ansible/issues/43839
+- win_uri: Fix support for JSON output when charset is set
+- win_wait_for - fix issue where timeout doesn't wait unless state=drained - https://github.com/ansible/ansible/issues/43446
+
+New Plugins
+-----------
+
+Lookup
+~~~~~~
+
+- cpm_metering - Get Power and Current data from WTI OOB/Combo and PDU devices
+
+New Modules
+-----------
+
+Cloud
+~~~~~
+
+amazon
+^^^^^^
+
+- elb_target_facts - Gathers which target groups a target is associated with.
+- rds_instance - Manage RDS instances
+
+azure
+^^^^^
+
+- azure_rm_autoscale - Manage Azure autoscale setting.
+- azure_rm_autoscale_facts - Get Azure Auto Scale Setting facts.
+- azure_rm_containerregistry_facts - Get Azure Container Registry facts.
+- azure_rm_sqlfirewallrule - Manage Firewall Rule instance.
+- azure_rm_trafficmanagerendpoint - Manage Azure Traffic Manager endpoint.
+- azure_rm_trafficmanagerendpoint_facts - Get Azure Traffic Manager endpoint facts
+- azure_rm_trafficmanagerprofile - Manage Azure Traffic Manager profile.
+- azure_rm_trafficmanagerprofile_facts - Get Azure Traffic Manager profile facts
+- azure_rm_webapp_facts - Get azure web app facts.
+
+google
+^^^^^^
+
+- gcp_compute_router - Creates a GCP Router
+- gcp_spanner_database - Creates a GCP Database
+- gcp_spanner_instance - Creates a GCP Instance
+- gcp_sql_database - Creates a GCP Database
+- gcp_sql_instance - Creates a GCP Instance
+- gcp_sql_user - Creates a GCP User
+
+vmware
+^^^^^^
+
+- vmware_host_ntp_facts - Gathers facts about NTP configuration on an ESXi host
+
+Identity
+~~~~~~~~
+
+- onepassword_facts - Fetch facts from 1Password items
+
+Network
+~~~~~~~
+
+fortimanager
+^^^^^^^^^^^^
+
+- fmgr_provisioning - Provision devices via FortiMananger
+
+ftd
+^^^
+
+- ftd_configuration - Manages configuration on Cisco FTD devices over REST API
+- ftd_file_download - Downloads files from Cisco FTD devices over HTTP(S)
+- ftd_file_upload - Uploads files to Cisco FTD devices over HTTP(S)
+
+opx
+^^^
+
+- opx_cps - CPS operations on networking device running Openswitch (OPX)
+
+Remote Management
+~~~~~~~~~~~~~~~~~
+
+cpm
+^^^
+
+- cpm_user - Get various status and parameters from WTI OOB and PDU devices
+
+redfish
+^^^^^^^
+
+- redfish_command - Manages Out-Of-Band controllers using Redfish APIs
+- redfish_config - Manages Out-Of-Band controllers using Redfish APIs
+
+Storage
+~~~~~~~
+
+ibm
+^^^
+
+- ibm_sa_host - Adds hosts to or removes them from IBM Spectrum Accelerate storage systems.
+- ibm_sa_pool - Handles pools on an IBM Spectrum Accelerate storage array.
+
+netapp
+^^^^^^
+
+- na_elementsw_access_group - NetApp Element Software Manage Access Groups
+- na_elementsw_account - NetApp Element Software Manage Accounts
+- na_elementsw_admin_users - NetApp Element Software Manage Admin Users
+- na_elementsw_check_connections - NetApp Element Software Check connectivity to MVIP and SVIP.
+- na_elementsw_cluster - NetApp Element Software Create Cluster
+- na_elementsw_drive - NetApp Element Software ManageNetApp Element Software Node Drives
+- na_elementsw_ldap - NetApp Element Software Manage ldap admin users
+- na_elementsw_network_interfaces - NetApp Element Software Configure Node Network Interfaces
+- na_elementsw_node - NetApp Element Software Node Operation
+- na_elementsw_snapshot - NetApp Element Software Manage Snapshots
+- na_elementsw_snapshot_restore - NetApp Element Software Restore Snapshot
+- na_elementsw_volume_clone - NetApp Element Software Create Volume Clone
+- na_ontap_autosupport - Manage NetApp Autosupport
+- na_ontap_cluster_peer - NetApp ONTAP Manage Cluster peering
+- na_ontap_command - NetApp ONTAP Run any cli command
+- na_ontap_disks - NetApp ONTAP Assign disks to nodes
+- na_ontap_firewall_policy - NetApp ONTAP Manage a firewall policy
+- na_ontap_gather_facts - NetApp information gatherer
+- na_ontap_motd - Setup motd on cDOT
+- na_ontap_node - NetApp ONTAP Rename a node.
+- netapp_e_alerts - NetApp E-Series manage email notification settings
+- netapp_e_asup - manage E-Series auto-support settings
+- netapp_e_auditlog - NetApp E-Series manage audit-log configuration
+- netapp_e_global - NetApp E-Series manage global settings configuration
+- netapp_e_iscsi_interface - NetApp E-Series manage iSCSI interface configuration
+- netapp_e_iscsi_target - NetApp E-Series manage iSCSI target configuration
+- netapp_e_ldap - NetApp E-Series manage LDAP integration to use for authentication
+- netapp_e_mgmt_interface - NetApp E-Series management interface configuration
+- netapp_e_syslog - NetApp E-Series manage syslog settings
+
+purestorage
+^^^^^^^^^^^
+
+- purefb_facts - Collect facts from Pure Storage FlashBlade
+
+Web Infrastructure
+~~~~~~~~~~~~~~~~~~
+
+ansible_tower
+^^^^^^^^^^^^^
+
+- tower_credential_type - Create, update, or destroy custom Ansible Tower credential type.
+- tower_settings - Modify Ansible Tower settings.
+- tower_workflow_template - create, update, or destroy Ansible Tower workflow template.
+
+Windows
+~~~~~~~
+
+- win_wait_for_process - Waits for a process to exist or not exist before continuing.
+- win_xml - Add XML fragment to an XML parent
+
+v2.7.0.a1
+=========
+
+Release Summary
+---------------
+
+| Release Date: 2018-08-31
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Major Changes
+-------------
+
+- Allow config to enable native jinja types (https://github.com/ansible/ansible/pull/32738)
+- Extends `module_defaults` by adding a prefix to defaults `group/` which denotes a builtin or user-specified list of modules, such as `group/aws` or `group/gcp`
+- New keyword `ignore_unreachable` for plays and blocks. Allows ignoring tasks that fail due to unreachable hosts, and check results with `is unreachable` test.
+- New yumdnf module defines the shared argument specification for both yum and dnf modules and provides an entry point to share code when applicable
+- Remove support for simplejson (https://github.com/ansible/ansible/issues/42761)
+- Support for running an Ansible controller with Python-2.6 has been dropped. You can still manage machines which use Python-2.6 but you will have to manage them from a machine which has Python-2.7 or Python-3.5 or greater installed.  See the `porting guide <https://docs.ansible.com/ansible/devel/porting_guides/porting_guide_2.7.html>`_ if you need more information.
+- new yum action plugin enables the yum module to work with both yum3 and dnf-based yum4 by detecting the backend package manager and routing commands through the correct Ansible module for that python API
+- yum and dnf modules now at feature parity
+
+Minor Changes
+-------------
+
+- ActionBase - removed deprecated _fixup_perms method (https://github.com/ansible/ansible/pull/44320)
+- Add `is_boto3_error_code` function to `module_utils/aws/core.py` to make it easier for modules to handle special AWS error codes.
+- Add use_backend to yum module/action plugin
+- Added PrivilegeUtil PowerShell module util to easily control Windows Privileges in a process
+- Added capability to skip ssl verification on zabbix host with dynamic inventory
+- Added inventory.any_unparsed_is_failed configuration setting. In an inventory with a static hosts file and (say) ec2.py, enabling this setting will cause a failure instead of a warning if ec2.py fails.
+- Added new filter to generate random MAC addresses from a given string acting as a prefix. Refer to the appropriate entry which has been added to user_guide playbook_filters.rst document.
+- Added the from_yaml_all filter to parse multi-document yaml strings. Refer to the appropriate entry which as been added to user_guide playbooks_filters.rst document.
+- Ansible-2.7 changes the Ansiballz strategy for running modules remotely so that invoking a module only needs to invoke python once per module on the remote machine instead of twice.
+- Better error handling for depsolve and transaction errors in DNF
+- Changed the prefix of all Vultr modules from vr to vultr (https://github.com/ansible/ansible/issues/42942).
+- Enable installroot tests for yum4(dnf) integration testing, dnf backend now supports that
+- Explicit encoding for the output of the template module, to be able to generate non-utf8 files from a utf-8 template. (https://github.com/ansible/proposals/issues/121)
+- File locking feature added, making it possible to gain exclusive access to given file through module_utils.common.file.FileLock (https://github.com/ansible/ansible/issues/29962)
+- Fix dnf handling of autoremove to be compatible with yum
+- Fixed group action idempotent transactions in dnf backend
+- Fixed group actions in check mode to report correct changed state
+- In Ansible-2.4 and above, Ansible passes the temporary directory a module should use to the module.  This is done via a module parameter (_ansible_tmpdir).  An earlier version of this which was also prototyped in Ansible-2.4 development used an environment variable, ANSIBLE_REMOTE_TMP to pass this information to the module instead.  When we switched to using a module parameter, the environment variable was left in by mistake. Ansible-2.7 removes that variable.  Any third party modules which relied on it should use the module parameter instead.
+- New config options `display_ok_hosts` and `display_failed_stderr` (along with the existing `display_skipped_hosts` option) allow more fine-grained control over the way that ansible displays output from a playbook (https://github.com/ansible/ansible/pull/41058)
+- Removed an unnecessary import from the AnsiballZ wrapper
+- Restore module_utils.basic.BOOLEANS variable for backwards compatibility with the module API in older ansible releases.
+- Setting file attributes (via the file module amongst others) now accepts + and - modifiers to add or remove individual attributes. (https://github.com/ansible/ansible/issues/33838)
+- Switch from zip to bc for certain package install/remove test cases in yum integration tests. The dnf depsolver downgrades python when you uninstall zip which alters the test environment and we have no control over that.
+- The acme_account and acme_certificate modules now support two backends: the Python cryptograpy module or the OpenSSL binary. By default, the modules detect if a new enough cryptography module is available and use it, with the OpenSSL binary being a fallback. If the detection fails for some reason, the OpenSSL binary backend can be explicitly selected by setting select_crypto_backend to openssl.
+- The apt, ec2_elb_lb, elb_classic_lb, and unarchive modules have been ported away from using __file__.  This is futureproofing as__file__ won't work if we switch to using python -m to invoke modules in the future or if we figure out a way to make a module never touch disk for pipelining purposes.
+- The password_hash filter supports all parameters of passlib. This allows users to provide a rounds parameter. (https://github.com/ansible/ansible/issues/15326)
+- allow user to customize default ansible-console prompt/msg default color
+- aws_caller_facts - The module now outputs the "account_alias" as well
+- aws_rds - Add new inventory plugin for RDS instances and clusters to match behavior in the ec2 inventory script.
+- command module - Add support for check mode when passing creates or removes arguments. (https://github.com/ansible/ansible/pull/40428)
+- ec2_group - Add diff mode support with and without check mode. This feature is preview and may change when a common framework is adopted for AWS modules.
+- elasticsearch_plugin - Add the possibility to use the elasticsearch_plugin installation batch mode to install plugins with advanced privileges without user interaction.
+- gather_subset - removed deprecated functionality for using comma separated list with gather_subset (https://github.com/ansible/ansible/pull/44320)
+- get_url - implement [expend checksum format to <algorithm>:(<checksum>|<url>)] (https://github.com/ansible/ansible/issues/27617)
+- lineinfile - add warning when using an empty regexp (https://github.com/ansible/ansible/issues/29443)
+- password_hash is not restricted to the subset provided by crypt.crypt (https://github.com/ansible/ansible/issues/17266)
+- passwordstore - Add backup option when overwriting password (off by default)
+- puppet - Add support for --debug, --verbose, --summarize https://github.com/ansible/ansible/issues/37986
+- puppet - Add support for setting logdest to both stdout and syslog via 'all'
+- replace copy.deepcopy in high workload areas with a custom function to improve performance (https://github.com/ansible/ansible/pull/44337)
+- roles - removed deprecated functionality for non YAML role specs (https://github.com/ansible/ansible/pull/44320)
+- roles - removed deprecated special casing functionality of connection, port, and remote_user for role params (https://github.com/ansible/ansible/pull/44320)
+- service - removed deprecated state=running (https://github.com/ansible/ansible/pull/44320)
+- shell module - Add support for check mode when passing creates or removes arguments. (https://github.com/ansible/ansible/pull/40428)
+- sns_topic - Port sns_topic module to boto3 and add an integration test suite.
+- ssh - reset connection will show a warning instead of failing for older OpenSSH versions
+- to_nice_json - specify separators to json.dumps to normalize the output between python2 and python3 (https://github.com/ansible/ansible/pull/42633)
+- user - backup shadow file on platforms where the module modifies it directly (https://github.com/ansible/ansible/issues/40696)
+- user module - add a sanity check for the user's password and a more helpful warning message (https://github.com/ansible/ansible/pull/43615)
+- vars_prompt - removed deprecated functionality supporting 'short form' for vars_prompt (https://github.com/ansible/ansible/pull/44320)
+- vault - removed deprecated functionality for insecure VaultAES class (https://github.com/ansible/ansible/pull/44320)
+- win_chocolatey - Add support for installing Chocolatey itself from a source feed
+- win_chocolatey - Add support for username and password on source feeds
+- win_chocolatey - Added ability to specify multiple packages as a list in 1 module invocation
+- win_chocolatey - Removed the need to manually escape double quotes in the proxy username and password
+- win_chocolatey - Will no longer upgrade Chocolatey in check mode
+- win_chocolatey - set the rc return value to always be returned, default to 0 https://github.com/ansible/ansible/issues/41758
+- winrm - change the _reset() method to use reset() that is part of ConnectionBase
+
+Deprecated Features
+-------------------
+
+- Modules will no longer be able to rely on the __file__ attribute pointing to a real file.  If your third party module is using __file__ for something it should be changed before 2.8.  See the 2.7 porting guide for more information.
+- The `skippy`, `full_skip`, `actionable`, and `stderr` callback plugins have been deprecated in favor of config options that influence the behavior of the `default` callback plugin (https://github.com/ansible/ansible/pull/41058)
+
+Removed Features (previously deprecated)
+----------------------------------------
+
+- The configuration toggle, ``merge_multiple_cli_tags``, has been removed. This setting controlled whether specifying ``--tags`` or ``--skip-tags`` multiple times on the commandline would merge the specified tags or use the old behaviour of overwriting the previous entry.  The overwriting behaviour was deprecated in 2.3 and the default value of the config option became merge in 2.4.
+- ec2_facts - deprecated module removed (https://github.com/ansible/ansible/pull/44536)
+- s3 - deprecated module removed (https://github.com/ansible/ansible/pull/44537)
+
+Bugfixes
+--------
+
+- **Security Fix** - Some connection exceptions would cause no_log specified on a task to be ignored.  If this happened, the task information, including any private information could have been displayed to stdout and (if enabled, not the default) logged to a log file specified in ansible.cfg's log_path. Additionally, sites which redirected stdout from ansible runs to a log file may have stored that private information onto disk that way as well. (https://github.com/ansible/ansible/pull/41414)
+- **Security Fix** - avoid loading host/group vars from cwd when not specifying a playbook or playbook base dir
+- **Security Fix** - avoid using ansible.cfg in a world writable dir.
+- Additional checks ensure that there is always a result of hashing passwords in the password_hash filter and vars_prompt, otherwise an error is returned. Some modules (like user module) interprets None as no password at all, which can be dangerous if the password given above is passed directly into those modules.
+- Avoids deprecated functionality of passlib with newer library versions.
+- Changed the admin_users config option to not include "admin" by default as admin is frequently used for a non-privileged account  (https://github.com/ansible/ansible/pull/41164)
+- Fix alt linux detection/matching
+- Fix an atomic_move error that is 'true', but  misleading. Now we show all 3 files involved and clarify what happened.
+- Fix glob path of rc.d Some distribtuions like SUSE has the rc%.d directories under /etc/init.d
+- Fix lxd module to be idempotent when the given configuration for the lxd container has not changed (https://github.com/ansible/ansible/pull/38166)
+- Fix the mount module's handling of swap entries in fstab (https://github.com/ansible/ansible/pull/42837)
+- Fixed an issue where ``ansible_facts.pkg_mgr`` would incorrectly set to ``zypper`` on Debian/Ubuntu systems that happened to have the command installed.
+- Fixed runtime module to be able to handle syslog_facility properly when python systemd module installed in a target system. (https://github.com/ansible/ansible/pull/41078)
+- Grafana dashboard module compatible with grafana 5 (https://github.com/ansible/ansible/pull/41249)
+- On Python2, loading config values from environment variables could lead to a traceback if there were nonascii characters present.  Converted them to text strings so that no traceback will occur (https://github.com/ansible/ansible/pull/43468)
+- The fix for `CVE-2018-10875 <https://access.redhat.com/security/cve/cve-2018-10875>`__ prints out a warning message about skipping a config file from a world writable current working directory.  However, if the user explicitly specifies that the config file should be used via the ANSIBLE_CONFIG environment variable then Ansible would honor that but still print out the warning message.  This has been fixed so that Ansible honors the user's explicit wishes and does not print a warning message in that circumstance.
+- The fix for `CVE-2018-10875 <https://access.redhat.com/security/cve/cve-2018-10875>`__ prints out a warning message about skipping a config file from a world writable current working directory.  However, if the user is in a world writable current working directory which does not contain a config file, it should not print a warning message.  This release fixes that extaneous warning.
+- The ssh connection plugin was categorizing all 255 exit statuses as an ssh error but modules can return exit code 255 as well.  The connection plugin has now been changed to know that certain instances of exit code 255 are not ssh-related.  (https://github.com/ansible/ansible/pull/41716)
+- allow custom endpoints to be used in the aws_s3 module (https://github.com/ansible/ansible/pull/36832)
+- allow gathering env exception to work even when injection is off
+- always correctly template no log for tasks https://github.com/ansible/ansible/issues/43294
+- ansible-galaxy - properly list all roles in roles_path (https://github.com/ansible/ansible/issues/43010)
+- authorized_key now have an option for following symlinks, default behaviour (False) can be changed by setting follow True/False
+- basic.py - catch ValueError in case a FIPS enabled platform raises this exception - https://github.com/ansible/ansible/issues/44447
+- become runas - changed runas process so it does not create a temporary file on the disk during execution
+- elasticsearch_plugin - Improve error messages and show stderr of elasticsearch commands
+- elb_application_lb - Fix a dangerous behavior of deleting an ELB if state was omitted from the task. Now state defaults to 'present', which is typical throughout AWS modules.
+- file module - The touch subcommand had its diff output broken during the 2.6.x development cycle.  The patch to fix that broke check mode. This is now fixed (https://github.com/ansible/ansible/issues/42111)
+- file module - The touch subcommand had its diff output broken during the 2.6.x development cycle.  This is now fixed (https://github.com/ansible/ansible/issues/41755)
+- fix async for the aws_s3 module by adding async support to the action plugin (https://github.com/ansible/ansible/pull/40826)
+- fix decrypting vault files for the aws_s3 module (https://github.com/ansible/ansible/pull/39634)
+- fix default SSL version for docker modules https://github.com/ansible/ansible/issues/42897
+- fix for the bundled selectors module (used in the ssh and local connection plugins) when a syscall is restarted after being interrupted by a signal (https://github.com/ansible/ansible/issues/41630)
+- fix mail module for python 3.7.0 (https://github.com/ansible/ansible/pull/44552)
+- fix the enable_snat parameter that is only supposed to be used by an user with the right policies. https://github.com/ansible/ansible/pull/44418
+- fix the remote tmp folder permissions issue when becoming a non admin user - https://github.com/ansible/ansible/issues/41340, https://github.com/ansible/ansible/issues/42117
+- flatten filter - use better method of type checking allowing flattening of mutable and non-mutable sequences (https://github.com/ansible/ansible/pull/44331)
+- gce_net - Fix sorting of allowed ports (https://github.com/ansible/ansible/pull/41567)
+- get_url - fix the bug that get_url does not change mode when checksum matches (https://github.com/ansible/ansible/issues/29614)
+- inventory - When using an inventory directory, ensure extension comparison uses text types (https://github.com/ansible/ansible/pull/42475)
+- made irc module python3 compatible https://github.com/ansible/ansible/issues/42256
+- nclu - no longer runs net on empty lines in templates (https://github.com/ansible/ansible/pull/43024)
+- nicer message when we are missing interpreter
+- password_hash does not hard-code the salt-length, which fixes bcrypt in connection with passlib as bcrypt requires a salt with length 22.
+- pause - do not set stdout to raw mode when redirecting to a file (https://github.com/ansible/ansible/issues/41717)
+- pause - nest try except when importing curses to gracefully fail if curses is not present (https://github.com/ansible/ansible/issues/42004)
+- plugins/inventory/openstack.py - Do not create group with empty name if region is not set
+- preseve delegation info on nolog https://github.com/ansible/ansible/issues/42344
+- remove ambiguity when it comes to 'the source'
+- urls - Only assume GET method if data is empty, otherwise POST
+- user - Strip trailing comments in /etc/default/passwd (https://github.com/ansible/ansible/pull/43931)
+- user - fix bug that resulted in module always reporting a change when specifiying the home directory on FreeBSD (https://github.com/ansible/ansible/issues/42484)
+- user - use correct attribute name in FreeBSD for creat_home (https://github.com/ansible/ansible/pull/42711)
+- vars_prompt - properly template play level variables in vars_prompt (https://github.com/ansible/ansible/issues/37984)
+- vars_prompt with encrypt does not require passlib for the algorithms supported by crypt.
+- vault - fix error message encoding, and ensure we present a friendlier error when the EDITOR is missing (https://github.com/ansible/ansible/pull/44423)
+- win_chocolatey - enable TLSv1.2 support when downloading the Chocolatey installer https://github.com/ansible/ansible/issues/41906
+- win_chocolatey - fix issue where state=downgrade would upgrade a package if no version was set
+- win_domain - ensure the Netlogon service is up and running after promoting host to controller - https://github.com/ansible/ansible/issues/39235
+- win_domain - fixes typo in one of the AD cmdlets https://github.com/ansible/ansible/issues/41536
+- win_domain_computer - fixed deletion of computer active directory object that have dependent objects (https://github.com/ansible/ansible/pull/44500)
+- win_domain_controller - ensure the Netlogon service is up and running after promoting host to controller - https://github.com/ansible/ansible/issues/39235
+- win_iis_webapppool - redirect some module output to null so Ansible can read the output JSON https://github.com/ansible/ansible/issues/40874
+- win_lineinfile - changed `-Path` to `-LiteralPath` so that square brackes in the path are interpreted literally -  https://github.com/ansible/ansible/issues/44508
+- win_reboot - fix for handling an already scheduled reboot and other minor log formatting issues
+- win_reboot - fix issue when overridding connection timeout hung the post reboot uptime check - https://github.com/ansible/ansible/issues/42185 https://github.com/ansible/ansible/issues/42294
+- win_reboot - handle post reboots when running test_command - https://github.com/ansible/ansible/issues/41713
+- win_security_policy - allows an empty string to reset a policy value https://github.com/ansible/ansible/issues/40869
+- win_updates - Fixed issue where running win_updates on async fails without any error
+- win_updates - fixed module return value is lost in error in some cases (https://github.com/ansible/ansible/pull/42647)
+- win_user - Use LogonUser to validate the password as it does not rely on SMB/RPC to be available https://github.com/ansible/ansible/issues/24884
+- winrm - ensure pexpect is set to not echo the input on a failure and have a manual sanity check afterwards https://github.com/ansible/ansible/issues/41865
+- winrm - running async with become on a Server 2008 or 2008 R2 host will now work
+
+New Plugins
+-----------
+
+Callback
+~~~~~~~~
+
+- counter_enabled - adds counters to the output items (tasks and hosts/task)
+- logdna - Sends playbook logs to LogDNA
+- splunk - Sends task result events to Splunk HTTP Event Collector
+
+Connection
+~~~~~~~~~~
+
+- psrp - Run tasks over Microsoft PowerShell Remoting Protocol
+
+Inventory
+~~~~~~~~~
+
+- tower - Ansible dynamic inventory plugin for Ansible Tower.
+
+Lookup
+~~~~~~
+
+- cpm_status - Get status and parameters from WTI OOB and PDU devices.
+- grafana_dashboard - list or search grafana dashboards
+- nios_next_network - Return the next available network range for a network-container
+
+New Modules
+-----------
+
+Cloud
+~~~~~
+
+amazon
+^^^^^^
+
+- aws_eks_cluster - Manage Elastic Kubernetes Service Clusters
+- cloudformation_stack_set - Manage groups of CloudFormation stacks
+
+azure
+^^^^^
+
+- azure_rm_appgateway - Manage Application Gateway instance.
+- azure_rm_appserviceplan - Manage App Service Plan
+- azure_rm_appserviceplan_facts - Get azure app service plan facts.
+- azure_rm_mysqldatabase_facts - Get Azure MySQL Database facts.
+- azure_rm_mysqlserver_facts - Get Azure MySQL Server facts.
+- azure_rm_postgresqldatabase_facts - Get Azure PostgreSQL Database facts.
+- azure_rm_postgresqlserver_facts - Get Azure PostgreSQL Server facts.
+- azure_rm_route - Manage Azure route resource.
+- azure_rm_routetable - Manage Azure route table resource.
+- azure_rm_routetable_facts - Get route table facts.
+- azure_rm_virtualmachine_facts - Get virtual machine facts.
+- azure_rm_webapp - Manage Web App instance.
+
+cloudstack
+^^^^^^^^^^
+
+- cs_disk_offering - Manages disk offerings on Apache CloudStack based clouds.
+
+docker
+^^^^^^
+
+- docker_swarm - Manage Swarm cluster
+- docker_swarm_service - docker swarm service
+
+google
+^^^^^^
+
+- gcp_compute_address_facts - Gather facts for GCP Address
+- gcp_compute_backend_bucket_facts - Gather facts for GCP BackendBucket
+- gcp_compute_backend_service_facts - Gather facts for GCP BackendService
+- gcp_compute_disk_facts - Gather facts for GCP Disk
+- gcp_compute_firewall_facts - Gather facts for GCP Firewall
+- gcp_compute_forwarding_rule_facts - Gather facts for GCP ForwardingRule
+- gcp_compute_global_address_facts - Gather facts for GCP GlobalAddress
+- gcp_compute_global_forwarding_rule_facts - Gather facts for GCP GlobalForwardingRule
+- gcp_compute_health_check_facts - Gather facts for GCP HealthCheck
+- gcp_compute_http_health_check_facts - Gather facts for GCP HttpHealthCheck
+- gcp_compute_https_health_check_facts - Gather facts for GCP HttpsHealthCheck
+- gcp_compute_image_facts - Gather facts for GCP Image
+- gcp_compute_instance_facts - Gather facts for GCP Instance
+- gcp_compute_instance_group_facts - Gather facts for GCP InstanceGroup
+- gcp_compute_instance_group_manager_facts - Gather facts for GCP InstanceGroupManager
+- gcp_compute_instance_template_facts - Gather facts for GCP InstanceTemplate
+- gcp_compute_network_facts - Gather facts for GCP Network
+- gcp_compute_route_facts - Gather facts for GCP Route
+- gcp_compute_router_facts - Gather facts for GCP Router
+- gcp_compute_ssl_certificate_facts - Gather facts for GCP SslCertificate
+- gcp_compute_ssl_policy - Creates a GCP SslPolicy
+- gcp_compute_ssl_policy_facts - Gather facts for GCP SslPolicy
+- gcp_compute_subnetwork_facts - Gather facts for GCP Subnetwork
+- gcp_compute_target_http_proxy_facts - Gather facts for GCP TargetHttpProxy
+- gcp_compute_target_https_proxy_facts - Gather facts for GCP TargetHttpsProxy
+- gcp_compute_target_pool_facts - Gather facts for GCP TargetPool
+- gcp_compute_target_ssl_proxy_facts - Gather facts for GCP TargetSslProxy
+- gcp_compute_target_tcp_proxy_facts - Gather facts for GCP TargetTcpProxy
+- gcp_compute_target_vpn_gateway - Creates a GCP TargetVpnGateway
+- gcp_compute_target_vpn_gateway_facts - Gather facts for GCP TargetVpnGateway
+- gcp_compute_url_map_facts - Gather facts for GCP UrlMap
+- gcp_compute_vpn_tunnel - Creates a GCP VpnTunnel
+- gcp_compute_vpn_tunnel_facts - Gather facts for GCP VpnTunnel
+
+openstack
+^^^^^^^^^
+
+- os_coe_cluster_template - Add/Remove COE cluster template from OpenStack Cloud
+- os_listener - Add/Delete a listener for a load balancer from OpenStack Cloud
+- os_loadbalancer - Add/Delete load balancer from OpenStack Cloud
+- os_member - Add/Delete a member for a pool in load balancer from OpenStack Cloud
+- os_pool - Add/Delete a pool in the load balancing service from OpenStack Cloud
+
+scaleway
+^^^^^^^^
+
+- scaleway_image_facts - Gather facts about the Scaleway images available.
+- scaleway_ip_facts - Gather facts about the Scaleway ips available.
+- scaleway_organization_facts - Gather facts about the Scaleway organizations available.
+- scaleway_security_group_facts - Gather facts about the Scaleway security groups available.
+- scaleway_server_facts - Gather facts about the Scaleway servers available.
+- scaleway_snapshot_facts - Gather facts about the Scaleway snapshots available.
+- scaleway_volume - Scaleway volumes management module
+- scaleway_volume_facts - Gather facts about the Scaleway volumes available.
+
+vmware
+^^^^^^
+
+- vmware_about_facts - Provides information about VMware server to which user is connecting to
+- vmware_category - Manage VMware categories
+- vmware_category_facts - Gather facts about VMware tag categories
+- vmware_deploy_ovf - Deploys a VMware virtual machine from an OVF or OVA file
+- vmware_guest_boot_facts - Gather facts about boot options for the given virtual machine
+- vmware_guest_boot_manager - Manage boot options for the given virtual machine
+- vmware_guest_custom_attribute_defs - Manage custom attributes definitions for virtual machine from VMWare
+- vmware_guest_custom_attributes - Manage custom attributes from VMWare for the given virtual machine
+- vmware_guest_move - Moves virtual machines in vCenter
+- vmware_host_ssl_facts - Gather facts of ESXi host system about SSL
+- vmware_local_role_facts - Gather facts about local roles on an ESXi host
+
+vultr
+^^^^^
+
+- vultr_block_storage - Manages block storage volumes on Vultr.
+- vultr_block_storage_facts - Gather facts about the Vultr block storage volumes available.
+- vultr_dns_domain_facts - Gather facts about the Vultr DNS domains available.
+- vultr_firewall_group_facts - Gather facts about the Vultr firewall groups available.
+- vultr_network - Manages networks on Vultr.
+- vultr_network_facts - Gather facts about the Vultr networks available.
+- vultr_os_facts - Gather facts about the Vultr OSes available.
+- vultr_plan_facts - Gather facts about the Vultr plans available.
+- vultr_region_facts - Gather facts about the Vultr regions available.
+- vultr_server_facts - Gather facts about the Vultr servers available.
+- vultr_ssh_key_facts - Gather facts about the Vultr SSH keys available.
+- vultr_startup_script_facts - Gather facts about the Vultr startup scripts available.
+- vultr_user_facts - Gather facts about the Vultr user available.
+
+Clustering
+~~~~~~~~~~
+
+k8s
+^^^
+
+- k8s_facts - Describe Kubernetes (K8s) objects
+
+Crypto
+~~~~~~
+
+- certificate_complete_chain - Complete certificate chain given a set of untrusted and root certificates
+- openssl_pkcs12 - Generate OpenSSL PKCS#12 archive.
+
+acme
+^^^^
+
+- acme_account_facts - Retrieves information on ACME accounts
+- acme_certificate_revoke - Revoke certificates with the ACME protocol
+- acme_challenge_cert_helper - Prepare certificates required for ACME challenges such as C(tls-alpn-01)
+
+Identity
+~~~~~~~~
+
+ipa
+^^^
+
+- ipa_config - Manage Global FreeIPA Configuration Settings
+- ipa_vault - Manage FreeIPA vaults
+
+Monitoring
+~~~~~~~~~~
+
+zabbix
+^^^^^^
+
+- zabbix_host_facts - Gather facts about Zabbix host
+
+Net Tools
+~~~~~~~~~
+
+- netcup_dns - manage Netcup DNS records
+
+nios
+^^^^
+
+- nios_a_record - Configure Infoblox NIOS A records
+- nios_cname_record - Configure Infoblox NIOS CNAME records
+- nios_mx_record - Configure Infoblox NIOS MX records
+- nios_naptr_record - Configure Infoblox NIOS NAPTR records
+- nios_ptr_record - Configure Infoblox NIOS PTR records
+- nios_srv_record - Configure Infoblox NIOS SRV records
+- nios_txt_record - Configure Infoblox NIOS txt records
+
+Network
+~~~~~~~
+
+aci
+^^^
+
+- aci_interface_policy_ospf - Manage OSPF interface policies (ospf:IfPol)
+
+cli
+^^^
+
+- cli_command - Run a cli command on cli-based network devices
+- cli_config - Push text based configuration to network devices over network_cli
+
+exos
+^^^^
+
+- exos_config - Manage Extreme Networks EXOS configuration sections
+- exos_facts - Collect facts from devices running Extreme EXOS
+
+f5
+^^
+
+- bigip_appsvcs_extension - Manage application service deployments
+- bigip_cli_alias - Manage CLI aliases on a BIG-IP
+- bigip_cli_script - Manage CLI scripts on a BIG-IP
+- bigip_device_auth - Manage system authentication on a BIG-IP
+- bigip_device_facts - Collect facts from F5 BIG-IP devices
+- bigip_firewall_dos_profile - Manage AFM DoS profiles on a BIG-IP
+- bigip_firewall_policy - Manage AFM security firewall policies on a BIG-IP
+- bigip_firewall_rule - Manage AFM Firewall rules
+- bigip_firewall_rule_list - Manage AFM security firewall policies on a BIG-IP
+- bigip_monitor_dns - Manage DNS monitors on a BIG-IP
+- bigip_profile_http - Manage HTTP profiles on a BIG-IP
+- bigip_profile_http_compression - Manage HTTP compression profiles on a BIG-IP
+- bigip_profile_oneconnect - Manage OneConnect profiles on a BIG-IP
+- bigip_profile_persistence_src_addr - Manage source address persistence profiles
+- bigip_remote_role - Manage remote roles on a BIG-IP
+- bigip_software_image - Manage software images on a BIG-IP
+- bigip_software_install - Install software images on a BIG-IP
+- bigip_tunnel - Manage tunnels on a BIG-IP
+- bigiq_utility_license_assignment - Manage utility license assignment on BIG-IPs from a BIG-IQ
+
+meraki
+^^^^^^
+
+- meraki_config_template - Manage configuration templates in the Meraki cloud
+- meraki_device - Manage devices in the Meraki cloud
+- meraki_mr_l3_firewall - Manage MR access point layer 3 firewalls in the Meraki cloud
+- meraki_mx_l3_firewall - Manage MX appliance layer 3 firewalls in the Meraki cloud
+- meraki_ssid - Manage wireless SSIDs in the Meraki cloud
+- meraki_switchport - Manage switchports on a switch in the Meraki cloud
+- meraki_vlan - Manage VLANs in the Meraki cloud
+
+nos
+^^^
+
+- nos_command - Run commands on remote devices running Extreme Networks NOS
+- nos_config - Manage Extreme Networks NOS configuration sections
+- nos_facts - Collect facts from devices running Extreme NOS
+
+nxos
+^^^^
+
+- nxos_rpm - Install patch or feature rpms on Cisco NX-OS devices.
+
+onyx
+^^^^
+
+- onyx_igmp - Configures IGMP globl parameters
+
+panos
+^^^^^
+
+- panos_set - Execute arbitrary commands on a PAN-OS device using XPath and element
+
+routeros
+^^^^^^^^
+
+- routeros_command - Run commands on remote devices running MikroTik RouterOS
+
+slxos
+^^^^^
+
+- slxos_lldp - Manage LLDP configuration on Extreme Networks SLX-OS network devices.
+
+voss
+^^^^
+
+- voss_command - Run commands on remote devices running Extreme VOSS
+- voss_facts - Collect facts from remote devices running Extreme VOSS
+
+Remote Management
+~~~~~~~~~~~~~~~~~
+
+cobbler
+^^^^^^^
+
+- cobbler_sync - Sync Cobbler
+- cobbler_system - Manage system objects in Cobbler
+
+redfish
+^^^^^^^
+
+- redfish_facts - Manages Out-Of-Band controllers using Redfish APIs
+
+ucs
+^^^
+
+- ucs_ntp_server - Configures NTP server on Cisco UCS Manager
+- ucs_storage_profile - Configures storage profiles on Cisco UCS Manager
+- ucs_timezone - Configures timezone on Cisco UCS Manager
+- ucs_uuid_pool - Configures server UUID pools on Cisco UCS Manager
+
+Storage
+~~~~~~~
+
+emc
+^^^
+
+- emc_vnx_sg_member - Manage storage group member on EMC VNX
+
+ibm
+^^^
+
+- ibm_sa_vol - Handle volumes on an IBM Spectrum Accelerate storage array
+
+netapp
+^^^^^^
+
+- na_elementsw_backup - NetApp Element Software Create Backups
+- na_elementsw_cluster_pair - NetApp Element Software Manage Cluster Pair
+- na_elementsw_snapshot_schedule - NetApp Element Software Snapshot Schedules
+- na_elementsw_vlan - NetApp Element Software Manage VLAN
+- na_elementsw_volume - NetApp Element Software Manage Volumes
+- na_elementsw_volume_pair - NetApp Element Software Volume Pair
+- na_ontap_cg_snapshot - Create consistency group snapshot
+- na_ontap_dns - NetApp ONTAP Create, delete, modify DNS servers.
+- na_ontap_fcp - NetApp ONTAP Start, Stop and Enable FCP services.
+- na_ontap_snapmirror - NetApp ONTAP Manage SnapMirror
+- na_ontap_software_update - NetApp ONTAP Update software
+- na_ontap_svm_options - NetApp ONTAP Modify Options
+- na_ontap_vserver_peer - Manage NetApp Vserver peering
+
+System
+~~~~~~
+
+- java_keystore - Create or delete a Java keystore in JKS format.
+- python_requirements_facts - Show python path and assert dependency versions
+- reboot - Reboot a machine
+
+Web Infrastructure
+~~~~~~~~~~~~~~~~~~
+
+ansible_tower
+^^^^^^^^^^^^^
+
+- tower_inventory_source - create, update, or destroy Ansible Tower inventory source.
+
+Windows
+~~~~~~~
+
+- win_chocolatey_config - Manages Chocolatey config settings
+- win_chocolatey_feature - Manages Chocolatey features
+- win_chocolatey_source - Manages Chocolatey sources

changelogs/CHANGELOG.rst

@@ -0,0 +1,6 @@
+Placeholder changelog
+=====================
+
+This file is a placeholder; a version-specific ``CHANGELOG-vX.Y.rst`` will be generated during releases from fragments
+under changelogs/fragments. On release branches once a release has been created, consult the branch's version-specific
+file for changes that have occurred in that branch.

changelogs/fragments/32738-native-jinja-types.yaml

@@ -0,0 +1,2 @@
+major_changes:
+- Allow config to enable native jinja types (https://github.com/ansible/ansible/pull/32738)

changelogs/fragments/34863-rabbitmq_user_unpack_fix.yaml

@@ -1,2 +0,0 @@
-bugfixes:
-- Ignore empty result of rabbitmqctl list_user_permissions.

changelogs/fragments/40092-mysql_user-match-backticks.yml

@@ -1,2 +0,0 @@
-bugfixes:
-  - "mysql_user: match backticks, single and double quotes when checking user privileges."

changelogs/fragments/40839-docker_container_init.yml

@@ -1,2 +0,0 @@
-bugfixes:
-- fixes docker_container compatibilty with docker-py < 2.2

changelogs/fragments/41167_ansible_doc_regression.yaml

@@ -1,2 +0,0 @@
-bugfixes:
-- ansible-doc - fixed traceback on missing plugins (https://github.com/ansible/ansible/pull/41167)

changelogs/fragments/41530-apt-mark-deb6.yaml

@@ -1,2 +0,0 @@
-bugfixes:
-  - fix apt-mark on debian6 (https://github.com/ansible/ansible/pull/41530)

changelogs/fragments/42170-acme-backend-selection.yaml

@@ -0,0 +1,8 @@
+---
+minor_changes:
+- "The acme_account and acme_certificate modules now support two backends:
+   the Python cryptograpy module or the OpenSSL binary. By default, the
+   modules detect if a new enough cryptography module is available and
+   use it, with the OpenSSL binary being a fallback. If the detection
+   fails for some reason, the OpenSSL binary backend can be explicitly
+   selected by setting select_crypto_backend to openssl."

changelogs/fragments/42669-add_ssl_zabbix_inventory.yaml

@@ -0,0 +1,4 @@
+---
+minor_changes:
+  - Added capability to skip ssl verification 
+    on zabbix host with dynamic inventory

changelogs/fragments/42786-sysvinit-fix-2-issues.yml

@@ -1,4 +0,0 @@
-bugfixes:
-- "sysvinit module: handle values of optional parameters (https://github.com/ansible/ansible/pull/42786).
-  Don't disable service when `enabled` parameter isn't set.
-  Fix command when `arguments` parameter isn't set."

changelogs/fragments/42943_vmware_vmnic_fix.yaml

@@ -1,2 +0,0 @@
-bugfixes:
-- VMware handle pnic in proxyswitch (https://github.com/ansible/ansible/pull/42996)

changelogs/fragments/43024-nclu-empty-net-commands.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+- nclu - no longer runs net on empty lines in templates (https://github.com/ansible/ansible/pull/43024)

changelogs/fragments/43997-docker_network-inspect.yaml

@@ -1,2 +0,0 @@
-bugfixes:
-- "docker_network - fixes idempotency issues (https://github.com/ansible/ansible/issues/33045) and name substring issue (https://github.com/ansible/ansible/issues/32926)."

changelogs/fragments/44054--win_domain_computer.yaml

@@ -1,3 +0,0 @@
-bugfixes:
-- win_domain_computer - fixed error when description parameter is empty (https://github.com/ansible/ansible/pull/44054)
-- win_domain_computer - fixed error in diff_support

changelogs/fragments/44508-win_lineinfile.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+- win_lineinfile - changed `-Path` to `-LiteralPath` so that square brackes in the path are interpreted literally -  https://github.com/ansible/ansible/issues/44508

changelogs/fragments/44552-mail-py370-compat.yml

@@ -0,0 +1,2 @@
+bugfixes:
+- fix mail module for python 3.7.0 (https://github.com/ansible/ansible/pull/44552)

changelogs/fragments/44726-correct_deprecate_call.yaml

@@ -1,2 +0,0 @@
-bugfixes:
-  - Fix calling deprecate with correct arguments (https://github.com/ansible/ansible/pull/46062).

changelogs/fragments/44755-win_nssm_fixes.yaml

@@ -1,10 +0,0 @@
-bugfixes:
-- win_nssm - Fix several issues and idempotency problems (https://github.com/ansible/ansible/pull/44755)
-- win_nssm - Fix service not started when ``state=started`` (https://github.com/ansible/ansible/issues/35442)
-- win_nssm - Correctly escape argument line when a parameter contains spaces, quotes or backslashes
-- win_nssm - Add missing space between parameters with ``app_parameters``
-- win_nssm - Fix extra space added in argument line with ``app_parameters`` or ``app_parameters_free_form`` when a parameter start by a dash and is followed by a period (https://github.com/ansible/ansible/issues/44079)
-- win_nssm - Fix error when several services were given to the ``dependencies`` option
-
-minor_changes:
-- win_nssm - Drop support of literal YAML dictionnary for ``app_parameters`` option. Use the ``key=value;`` string form instead

changelogs/fragments/44988-acme-post-as-get.yaml

@@ -1,2 +0,0 @@
-bugfixes:
-- "ACME modules support `POST-as-GET <https://community.letsencrypt.org/t/acme-v2-scheduled-deprecation-of-unauthenticated-resource-gets/74380>`__ and will be able to access Let's Encrypt ACME v2 endpoint after November 1st, 2019."

changelogs/fragments/45155-vmware-handle_exception.yaml

@@ -1,2 +0,0 @@
-bugfixes:
-- vmware_host_service_facts - handle exception when service package does not have package name.

changelogs/fragments/45155-vmware_host_service_facts-update_docs.yaml

@@ -1,2 +0,0 @@
-minor_changes:
-- Update docs and return section of vmware_host_service_facts module.

changelogs/fragments/45203-sysvinit-fix-unassigned-variable.yml

@@ -1,2 +0,0 @@
-bugfixes:
-- Fix referenced before assignment in sysvinit module

changelogs/fragments/45378-fix-sql-tags.yml

@@ -1,2 +0,0 @@
-bugfixes:
-- azure_rm_sqlserver - fix for tags support

changelogs/fragments/45501-get_url-better_checksums.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+- get_url - support remote checksum files with paths specified with leading dots (`./path/to/file`)

changelogs/fragments/45508-parse-docker-service-parameter.yaml

@@ -1,2 +0,0 @@
-bugfixes:
-  - docker_service - correctly parse string values for the `scale` parameter https://github.com/ansible/ansible/pull/45508

changelogs/fragments/45628-fetch_url-error-headers.yaml

@@ -1,2 +0,0 @@
-bugfixes:
-- "fetch_url did not always return lower-case header names in case of HTTP errors (https://github.com/ansible/ansible/pull/45628)."

changelogs/fragments/45700-docker_container-dont-parse-absent.yml

@@ -1,2 +0,0 @@
-bugfixes:
-- "Don't parse parameters and options when ``state`` is ``absent`` (https://github.com/ansible/ansible/pull/45700)."

changelogs/fragments/45921-os_router-ignores-enable_snat-no.yml

@@ -1,2 +0,0 @@
-bugfixes:
-    - "os_router - ``enable_snat: no`` was ignored."

changelogs/fragments/46049-route53-caa-ordering.txt

@@ -1,2 +0,0 @@
-bugfixes:
-- "route53 - fix CAA record ordering for idempotency."

changelogs/fragments/46245-systemd-fix-service-enable-logic.yaml

@@ -1,2 +0,0 @@
-bugfixes:
-- In systemd module, fix check if a systemd+initd service is enabled - disabled in systemd means disabled

changelogs/fragments/46275-fix-_cond_not_supported_warn.yaml

@@ -1,2 +0,0 @@
-bugfixes:
-    - Fix for StrategyModule object has no attribute _cond_not_supported_warn (https://github.com/ansible/ansible/issues/46275)

changelogs/fragments/46322-docker_container-image-not-given.yaml

@@ -1,2 +0,0 @@
-bugfixes:
-- "docker_container - the behavior is improved in case ``image`` is not specified, but needed for (re-)creating the container."

changelogs/fragments/46521-zabbix_host-fix-link-template-error.yml

@@ -1,2 +0,0 @@
-bugfixes:
-- "zabbix_host - module was failing when zabbix host was updated with new interface and template depending on that interface at the same time"

changelogs/fragments/46594-docker_container-publish-all-ports.yml

@@ -1,2 +0,0 @@
-bugfixes:
-- "docker_container - ``publish_ports: all`` was not used correctly when checking idempotency."

changelogs/fragments/46595-docker_container-expected_ports.yml

@@ -1,2 +0,0 @@
-bugfixes:
-- "docker_container - fix idempotency check for published_ports in some special cases."

changelogs/fragments/46961_fix_aws_ec2_cache.yaml

@@ -1,2 +0,0 @@
-bugfixes:
-  - aws_ec2 - fixed issue where cache did not contain the computed groups

changelogs/fragments/47096-junos-terminal-regex-fix.yml

@@ -1,2 +0,0 @@
-bugfixes:
-  - junos - fix terminal prompt regex (https://github.com/ansible/ansible/pull/47096)

changelogs/fragments/47296-docker_container-memory_swappiness.yaml

@@ -1,2 +0,0 @@
-bugfixes:
-- "docker_container - fix ``memory_swappiness`` documentation."

changelogs/fragments/47313-vmware-fix_module_error.yaml

@@ -1,4 +0,0 @@
----
-bugfixes:
-  - Fix VMware module utils for self usage.
-  - Added unit test for VMware module_utils.

changelogs/fragments/47313-vmware_utils-handle_requests_import_error.yaml

@@ -1,2 +0,0 @@
-bugfixes:
-- Avoid misleading PyVmomi error if requests import fails in vmware module utils.

changelogs/fragments/47395-docker_container-ipvX_address.yaml

@@ -1,2 +0,0 @@
-bugfixes:
-- "docker_container - fail if ``ipv4_address`` or ``ipv6_address`` is used with a too old docker-py version."

changelogs/fragments/47396-docker_container-detach-auto-remove.yaml

@@ -1,2 +0,0 @@
-bugfixes:
-- "docker_container - fix behavior of ``detach: yes`` if ``auto_remove: yes`` is specified."

changelogs/fragments/47712-docker_container-detach-auto-remove.yml

@@ -1,2 +0,0 @@
-bugfixes:
-- "docker_container - fixing race condition when ``detach`` and ``auto_remove`` are both ``true``."

changelogs/fragments/47722-vmware_guest_powerstate-restore_timeout.yaml

@@ -1,2 +0,0 @@
-bugfixes:
-- Restore timeout in set_vm_power_state operation in vmware_guest_powerstate module.

changelogs/fragments/47889-vmware_doc-fix_privilege_names.yaml

@@ -1,2 +0,0 @@
-minor_changes:
-- Update plugin filter documentation.

changelogs/fragments/47900-docker_container-paused.yml

@@ -1,2 +0,0 @@
-bugfixes:
-- "docker_container - fix ``paused`` option (which never worked)."

changelogs/fragments/47997-docker_container-ipc-pid-mode.yml

@@ -1,2 +0,0 @@
-bugfixes:
-- "docker_container - fix ``ipc_mode`` and ``pid_mode`` idempotency if the ``host:<container-name>`` form is used (as opposed to ``host:<container-id>``)."

changelogs/fragments/48061-docker_container-auto_removal.yml

@@ -1,2 +0,0 @@
-bugfixes:
-- "docker_container - do not fail when removing a container which has ``auto_remove: yes``."

changelogs/fragments/48580-apt_key-no-tty.yaml

@@ -1,3 +0,0 @@
-bugfixes:
-  - apt_key - Disable TTY requirement in GnuPG for the module to work correctly
-    when SSH pipelining is enabled (https://github.com/ansible/ansible/pull/48580)

changelogs/fragments/48808-sysvinit_defaults_if_no_runlevels.yaml

@@ -1,2 +0,0 @@
-bugfixes:
-  - sysvinit - enabling a service should use "defaults" if no runlevels are specified

changelogs/fragments/49096-ansible-galaxy-fix_info_typo.yaml

@@ -1,2 +0,0 @@
-minor_changes:
-- Fixed typo in ansible-galaxy info command.

changelogs/fragments/49113-iam-role-arn-parsing-updated.yml

@@ -1,2 +0,0 @@
-bugfixes:
-  - ec2_metadata_facts - Parse IAM role name from the security credential field since the instance profile name is different

changelogs/fragments/49409-lineinfile_must_not_insert_lines_multiples_times_with_insertbefore_insertafter.yml

@@ -1,3 +0,0 @@
----
-bugfixes:
-  - "This reverts some changes from commit 723daf3. If a line is found in the file, exactly or via regexp matching, it must not be added again. `insertafter`/`insertbefore` options are used only when a line is to be inserted, to specify where it must be added."

changelogs/fragments/50143-win_firewall_rule-invalid-bypass.yml

@@ -1,3 +0,0 @@
----
-bugfixes:
-- win_firewall_rule - Remove invalid 'bypass' action

changelogs/fragments/50185-win_updates-report-changes-correctly.yml

@@ -1,3 +0,0 @@
----
-bugfixes:
-- win_updates - Correctly report changes on success

changelogs/fragments/51781-fixing-managed-disk-facts.yaml

@@ -1,2 +0,0 @@
-bugfixes:
-  - azure_rm_managed_disk_facts - added missing implementation of listing managed disks by resource group

changelogs/fragments/52130-win_psmodule-update_nuget.yaml

@@ -1,2 +0,0 @@
-bugfixes:
-  - win_psmodule - the NuGet package provider will be updated, if needed, to avoid issue under adding a repository

changelogs/fragments/52388-postgresqldatabase-fix-force-update.yml

@@ -1,2 +0,0 @@
-bugfixes:
-  - azure_rm_postgresqldatabase - fix force_update bug (https://github.com/ansible/ansible/issues/50978).

changelogs/fragments/52389-mysqldatabase-fix-force-update.yaml

@@ -1,2 +0,0 @@
-bugfixes: 
-  - azure_rm_postgresqldatabase - fix force_update bug.

changelogs/fragments/54192-openssl_publickey-openssh-passphrase.yml

@@ -1,2 +0,0 @@
-bugfixes:
-- "openssl_publickey - fixed crash on Python 3 when OpenSSH private keys were used with passphrases."

changelogs/fragments/acl_doc_fix.yml

@@ -1,2 +0,0 @@
-bugfixes:
-    - document old option that was initally missed

changelogs/fragments/add_file_lock_feature.yaml

@@ -0,0 +1,5 @@
+---
+minor_changes:
+- File locking feature added, making it possible to gain exclusive access
+  to given file through module_utils.common.file.FileLock
+  (https://github.com/ansible/ansible/issues/29962)

changelogs/fragments/add_random_mac_filtter.yaml

@@ -0,0 +1,6 @@
+---
+minor_changes:
+  - Added new filter to generate random MAC addresses from a given
+    string acting as a prefix. Refer to the appropriate entry
+    which has been added to user_guide playbook_filters.rst
+    document.

changelogs/fragments/ajson-nested-decode.yaml

@@ -1,2 +0,0 @@
-bugfixes:
-- Ansible JSON Decoder - Switch from decode to object_hook to support nested use of __ansible_vault and __ansible_unsafe (https://github.com/ansible/ansible/pull/45514)

changelogs/fragments/alternative_facts.yml

@@ -0,0 +1,2 @@
+bugfixes:
+    - Fix alt linux detection/matching

changelogs/fragments/always_run_removal.yaml

@@ -1,2 +0,0 @@
-removed_features:
-- "removed the deprecated always_run task option, please use ``check_mode: no`` instead"

changelogs/fragments/ansiballz_one_interpreter.yml

@@ -0,0 +1,5 @@
+---
+minor_changes:
+- Ansible-2.7 changes the Ansiballz strategy for running modules remotely so
+  that invoking a module only needs to invoke python once per module on the
+  remote machine instead of twice.

changelogs/fragments/ansiballz_streamline_imports.yaml

@@ -0,0 +1,3 @@
+---
+minor_changes:
+- Removed an unnecessary import from the AnsiballZ wrapper

changelogs/fragments/ansible-managed-encoding.yaml

@@ -1,5 +0,0 @@
----
-bugfixes:
-- template - Fix for encoding issues when a template path contains non-ascii
-  characters and using the template path in ansible_managed
-  (https://github.com/ansible/ansible/issues/27262)

changelogs/fragments/any_unparsed_is_failed.yaml

@@ -0,0 +1,5 @@
+---
+minor_changes:
+  - Added inventory.any_unparsed_is_failed configuration setting. In an
+    inventory with a static hosts file and (say) ec2.py, enabling this
+    setting will cause a failure instead of a warning if ec2.py fails.

changelogs/fragments/authorized_key_symlinks.yaml

@@ -0,0 +1,4 @@
+---
+bugfixes:
+- authorized_key now have an option for following symlinks,
+  default behaviour (False) can be changed by setting follow True/False

changelogs/fragments/avoid_ssh_retry_discolsures.yml

@@ -1,2 +0,0 @@
-bugfixes:
-    - now no log is being respected on retry and high verbosity.  CVE-2018-16876

changelogs/fragments/aws_bugfix_backports.yml

@@ -0,0 +1,22 @@
+bugfixes:
+- Fix lambda_policy updates when principal is an account number. Backport of
+  https://github.com/ansible/ansible/pull/44871
+- Support key names that contain spaces in ec2_metadata_facts module.
+  https://github.com/ansible/ansible/pull/45313
+- Fix ec2_group support for multi-account and peered VPC security groups.
+  Reported in https://github.com/ansible/ansible/issue/44788 and fixed in
+  https://github.com/ansible/ansible/pull/45296
+- Fix s3_lifecycle module backwards compatibility without providing prefix.
+  Blank prefixes regression was introduced in boto3 rewrite.
+  https://github.com/ansible/ansible/pull/45318
+- Fix ecs_taskdefinition handling of changed role_arn. If the task role in a
+  ECS task definition changes ansible should create a new revsion of the task
+  definition. https://github.com/ansible/ansible/pull/45317
+- Fix health check parameter handling in elb_target_group per
+  https://github.com/ansible/ansible/issues/43244 about health_check_port.
+  Fixed in https://github.com/ansible/ansible/pull/45314
+- Remove spurious `changed=True` returns when ec2_group module is used with
+  numeric ports. https://github.com/ansible/ansible/pull/45240
+- Add argspec to aws_application_scaling_policy module to handle metric
+  specifications, scaling cooldowns, and target values.
+  https://github.com/ansible/ansible/pull/45235

changelogs/fragments/aws_caller_facts_add_account_alias.yaml

@@ -0,0 +1,3 @@
+---
+minor_changes:
+  - aws_caller_facts - The module now outputs the "account_alias" as well

changelogs/fragments/aws_cloudfront_distribution_fix_nonexistent_method_name.yaml

@@ -0,0 +1,5 @@
+---
+bugfixes:
+  - cloudfront_distribution - replace call to nonexistent method 'validate_distribution_id_from_caller_reference'
+    with 'validate_distribution_from_caller_reference' and set the distribution_id variable to the distribution's
+    'Id' key.

changelogs/fragments/aws_core_is_boto3_error_code.yml

@@ -0,0 +1,4 @@
+---
+minor_changes:
+  - Add `is_boto3_error_code` function to `module_utils/aws/core.py` to make it
+    easier for modules to handle special AWS error codes.

changelogs/fragments/aws_ec2_inventory_integration_tests.yaml

@@ -1,2 +0,0 @@
-bugfixes:
-  - inventory_aws_ec2 - fix no_log indentation so AWS temporary credentials aren't displayed in tests

changelogs/fragments/aws_lightsail_documentation_fix.yml

@@ -1,3 +0,0 @@
----
-bugfixes:
-- fix  example code for AWS lightsail documentation

changelogs/fragments/aws_rds_inventory_plugin_added.yaml

@@ -0,0 +1,3 @@
+---
+minor_changes:
+  - aws_rds - Add new inventory plugin for RDS instances and clusters to match behavior in the ec2 inventory script.

changelogs/fragments/aws_s3_fix_exception_handling.yaml

@@ -1,5 +0,0 @@
----
-bugfixes:
-  - fix permission handling to try to download a file even if the user does not have permission to list all objects in the bucket
-  - fix BotoCoreError exception handling
-  - fix errors with S3-compatible APIs if they cannot use ACLs for buckets or objects

changelogs/fragments/aws_ses_identity_check_mode.yaml

@@ -1,2 +0,0 @@
-minor_changes:
-  - The aws_ses_identity module supports check mode

changelogs/fragments/azure-lb-sku.yaml

@@ -1,3 +0,0 @@
-minor_changes:
-- azure_rm_loadbalancer - add support for sku
-- azure_rm_publicipaddress - add support for sku

changelogs/fragments/azure-storage-cloud-environment.yaml

@@ -0,0 +1,3 @@
+---
+bugfixes:
+- fix azure storage blob cannot create blob container in non-public azure cloud environment. (https://github.com/ansible/ansible/issues/35223)

changelogs/fragments/azure-version.yaml

@@ -1,2 +0,0 @@
-bugfixes:
-- use proper module_util to get Ansible version for Azure requests

changelogs/fragments/azure_autoscale.yaml

@@ -0,0 +1,3 @@
+---
+bugfixes:
+- fix azure_rm_autoscale module can use dict to identify target (https://github.com/ansible/ansible/pull/45477)

changelogs/fragments/azure_nsg_deployment_lb.yaml

@@ -1,5 +0,0 @@
----
-bugfixes:
-- fix azure security group cannot add rules when purge_rule set to false. (https://github.com/ansible/ansible/pull/43699)
-- fix azure_rm_deployment collect tags from existing Resource Group. (https://github.com/ansible/ansible/pull/26104)
-- fix azure_rm_loadbalancer_facts list takes at least 2 arguments. (https://github.com/ansible/ansible/pull/29050)