New release v2.7.18

With collections migration, inventory scripts are moved from devel (2.10).
Point docs for inventory script to their respective version.

Signed-off-by: Abhijeet Kasurde <akasurde@redhat.com>

.github/BOTMETA.yml

@@ -48,6 +48,7 @@ files:
   $modules/cloud/amazon/ec2_asg.py: $team_ansible s-hertel ryansb
   $modules/cloud/amazon/ec2_group.py: $team_ansible
   $modules/cloud/amazon/ec2_group_facts.py: willthames
+  $modules/cloud/amazon/ec2_instance.py: Shaps
   $modules/cloud/amazon/ec2_instance_facts.py: willthames
   $modules/cloud/amazon/ec2_key.py: $team_ansible
   $modules/cloud/amazon/ec2_lc.py: $team_ansible

.github/CONTRIBUTING.md

@@ -4,25 +4,22 @@ Hi! Nice to see you here!
 
 ## QUESTIONS ?
 
-Please see the [community guide](https://docs.ansible.com/ansible/latest/community/index.html) for information on how to ask questions on the [mailing lists](https://docs.ansible.com/ansible/latest/community/communication.html#mailing-list-information) and IRC.
+Please see the [Community Guide](https://docs.ansible.com/ansible/latest/community/index.html) for information on how to ask questions on the [mailing lists](https://docs.ansible.com/ansible/latest/community/communication.html#mailing-list-information) and IRC.
 
 The GitHub issue tracker is not the best place for questions for various reasons, but both IRC and the mailing list are very helpful places for those things, as the community page explains best.
 
 ## CONTRIBUTING ?
 
-By contributing you agree that these contributions are your own (or approved by your employer) and you grant a full, complete, irrevocable copyright license to all users and developers of the project, present and future, pursuant to the license of the project.
+By contributing you agree that these contributions are your own (or approved by your employer) and you grant a full, complete, irrevocable copyright license to all users and developers of the project, present and future, pursuant to the license of the project. You can also read the same [CLA](https://docs.ansible.com/ansible/latest/community/contributor_license_agreement.html) on the Ansible docsite.
 
-Please see the [community guide](https://docs.ansible.com/ansible/latest/community/index.html) for information regarding the contribution process. Important license agreement information is also included on that page.
+Please review the [Community Guide](https://docs.ansible.com/ansible/latest/community/index.html) for more information on contributing to Ansible.
 
 ## BUG TO REPORT ?
 
-First and foremost, also check the [community guide](https://docs.ansible.com/ansible/latest/community/index.html).
+First and foremost, also check the [Community Guide](https://docs.ansible.com/ansible/latest/community/index.html).
 
 You can report bugs or make enhancement requests at the [Ansible GitHub issue page](http://github.com/ansible/ansible/issues/new/choose) by filling out the issue template that will be presented.
 
-Also please make sure you are testing on the latest released version of Ansible or the development branch. You can find the latest releases and development branch at:
-
-- https://github.com/ansible/ansible/releases
-- https://github.com/ansible/ansible/archive/devel.tar.gz
+Also please make sure you are testing on the latest released version of Ansible or the development branch; see the [Installation Guide](https://docs.ansible.com/ansible/latest/installation_guide/intro_installation.html) for details.
 
 Thanks!

.gitignore

@@ -29,13 +29,12 @@ docs/man/man3/*
 *.sublime-project
 *.sublime-workspace
 # docsite stuff...
-docs/api/_build/
-docs/api/rst/
 docs/docsite/_build
 docs/docsite/*.html
 docs/docsite/htmlout
 docs/docsite/rst/cli/ansible-*.rst
 docs/docsite/rst/cli/ansible.rst
+docs/docsite/rst/dev_guide/testing/sanity/index.rst.new
 docs/docsite/rst/modules/*.rst
 docs/docsite/rst/playbooks_directives.rst
 docs/docsite/rst/plugins_by_category.rst

CODING_GUIDELINES.md

@@ -1,316 +1,10 @@
 Coding Guidelines
 =================
 
-Hi!  Thanks for your interest in contributing to Ansible.
+Hi! Thanks for your interest in contributing to Ansible. We document our Coding Guidelines in the [Developer Guide](https://docs.ansible.com/ansible/devel/dev_guide/). We particularly suggest you review:
 
-Here are some guidelines for contributing code.  The purpose of this document is to establish what we're looking for in code contributions, and to make sure
-new contributors know some of the conventions that we've been using.
+* [Contributing your module to Ansible](https://docs.ansible.com/ansible/devel/dev_guide/developing_modules_checklist.html)
 
-We don't think much of this should be too strange to readers familiar with contributing to Python projects, though it helps if we all get on the same page.
+* [Development conventions, tips and pitfalls](https://docs.ansible.com/ansible/devel/dev_guide/developing_modules_best_practices.html)
 
-Language
-========
-
-  * While not all components of Ansible must be in Python, core contributions to the Ansible repo must be written in Python.  This is to maximize the ability of everyone to contribute.
-  * If you want to write non-Python ansible modules or inventory scripts, that's fine, but they are not going to get merged in most likely.  Sorry!!
-
-PEP 8 and basic style checks
-============================
-
-  * [PEP 8](https://www.python.org/dev/peps/pep-0008/) is a great Python style guide, which you should read.
-  * PEP 8 must not be strictly followed in all aspects, but most of it is good advice.
-  * The line is limited to 160 characters.
-  * To run checks for things we care about, use [ansible-test](https://docs.ansible.com/ansible/devel/dev_guide/testing_sanity.html).
-  * Similarly, additional checks can be made with "make pyflakes".
-  * There is no need to submit code changes for PEP 8 and pyflakes fixes, as these break attribution history.  Project leadership will make these periodically.
-  * Do not submit pull requests that simply adjust whitespace in the code.
-
-Testing
-=======
-
-  * Much of Ansible's testing needs are in integration, not unit tests.  Add module tests there.
-  * That being said, there are unit tests too!
-  * Code written must absolutely pass tests (i.e. "make tests")
-  * You should anticipate any error paths in your code and test down those error paths.
-  * Additions to tests for core code are welcome, but not always possible.  Be sure things are at least well tested manually in that case.
-
-Whitespace
-==========
-
-  * Four space indent is strictly required
-  * Include meaningful whitespace between lines of code
-
-Shebang Lines
-=============
-
-  * /usr/bin/scripts should start with '/usr/bin/env python'
-  * module code should still use '/usr/bin/python' as this is replaced automatically by 'ansible_python_interpreter', see the FAQ in the docs for more info.
-
-Comments
-========
-
-  * Readability is one of the most important goals for this project
-  * Comment any non-trivial code where someone might not know why you are doing something in a particular way
-  * Though if something should be commented, that's often a sign someone should write a function
-  * All new functions must have a basic docstring comment
-  * Commenting above a line is preferable to commenting at the end of a line
-
-Classes
-=======
-
-  * With the exception of module code (where inline is better), it is desirable to see classes in their own files.
-  * Classes should generally not cause side effects as soon as they are instantiated, move meaningful behavior to methods rather than constructors.
-
-Functions and Methods
-=====================
-
-  * In general, functions should not be 'too long' and should describe a meaningful amount of work
-  * When code gets too nested, that's usually the sign the loop body could benefit from being a function
-  * Parts of our existing code are not the best examples of this at times.
-  * Functions should have names that describe what they do, along with docstrings
-  * Functions should be named with_underscores
-  * "Don't repeat yourself" is generally a good philosophy
-
-Variables
-=========
-
-  * Use descriptive variable names instead of variables like 'x', unless x is an obvious loop index
-  * Ansible python code uses identifiers like 'ClassesLikeThis and variables_like_this
-  * Module parameters should also use_underscores and not runtogether
-
-Module Security
-===============
-
-  * Modules must take steps to avoid passing user input from the shell and always check return codes
-  * always use module.run_command instead of subprocess or Popen or os.system -- this is mandatory
-  * if you need to use the shell you must pass use_unsafe_shell=True to module.run_command
-  * if you do not need the shell, avoid using the shell
-  * any variables that can come from the user input with use_unsafe_shell=True must be wrapped by pipes.quote(x)
-  * downloads of https:// resource urls must import module_utils.urls and use the fetch_url method
-
-Misc Preferences
-================
-
-Use the dict constructor where possible when allocating dictionaries:
-
-    # not this:
-    foo = {
-       'a' : 12,
-       'b' : 34
-    }
-
-    # this:
-    foo = dict(
-       a=12,
-       b=34,
-    )
-
-Do not line up variables
-
-    # not this
-    a        = 12
-    foosball = 34
-    xyz      = 'dog'
-
-    # this
-    a = 12
-    foosball = 34
-    xyz = 'dog'
-
-Don't use line continuations:
-
-    # no
-    if (this_is_a_very_long_line and foo and \
-       i_am_going_to_continue_it):
-          bar()
-
-    # better:
-    if (this_is_a_very_long_line and foo and i_am_going_to_continue_it):
-       bar()
-
-Spacing:
-
-    # no
-    x = [1,2,3]
-
-    # no
-    x = [ 1, 2, 3 ]
-
-    # yes
-    x = [1, 2, 3]
-
-Spacing continued:
-
-    # no
-    x=foo(12)
-
-    # no
-    x = foo( 12 )
-
-    # yes
-    x = foo(12)
-
-Licenses
-========
-
-Every file should have a license header, including the copyright of the original author.  Major additions to the module are allowed
-to add an additional copyright line, and this is especially true of rewrites, but original authorship copyright messages should be preserved.
-
-All contributions to the core repo should preserve original licenses and new contributions must include the GPLv3 header.
-
-Module Documentation
-====================
-
-All module pull requests must include a DOCUMENTATION docstring (YAML format,
-see other modules for examples) as well as an EXAMPLES docstring, which is free form.
-
-When adding new modules, any new parameter must have a "version_added" attribute.
-When submitting a new module, the module should have a "version_added" attribute in the
-pull request as well, set to the current development version.
-
-Be sure to check grammar and spelling.
-
-It's frequently the case that modules get submitted with YAML that isn't valid,
-so you can run "make webdocs" from the checkout to preview your module's documentation.
-If it fails to build, take a look at your DOCUMENTATION string
-or you might have a Python syntax error in there too.
-
-Python Imports
-==============
-
-To make it clear what a module is importing, imports should not be sprinkled throughout the code.
-
-Python Imports should happen at the top of the file, exempting code from module_utils.
-
-When a conditional runtime import is required, do so something like this instead:
-
-    HAS_FOO = False
-    try:
-       import foo
-       HAS_FOO = True
-    except ImportError:
-       pass
-
-    ...
-
-    if not HAS_FOO:
-       raise Exception("the foo library is required")
-
-This makes it clear what optional dependencies are but allows this to be deferred until runtime.   In the case of module code, the raising of the Exception will be replaced
-with a "module.exit_json" call.
-
-Exceptions
-==========
-
-In the main body of the code, use typed exceptions where possible:
-
-    # not this
-    raise Exception("panic!")
-
-    # this
-    from ansible import errors
-    ...
-    raise errors.AnsibleError("panic!")
-
-Similarly, exception checking should be fine grained:
-
-    # not this
-    try:
-       foo()
-    except:
-       bar()
-
-    # but this
-    try:
-       foo()
-    except SomeTypedException:
-       bar()
-
-List Comprehensions
-===================
-
-In general list comprehensions are always preferred to map() and filter() calls.
-
-However, they can be abused.  Optimize for readability, and avoid nesting them too deeply.
-
-Regexes
-=======
-
-There is a time and place for them, but here's an illustrative joke.
-
-"A developer had a problem, and used a regular expression to solve it.  Now the developer had two problems".
-
-Often regexes are difficult to maintain, and a trusty call to other string operations can be a great solution, faster,
-and more readable.
-
-File Conventions
-================
-
-If a piece of code looks for a named YAML file in a directory, it should assume it can take no extension, or an extension of '.yml' or '.yaml'.
-This should be true against all code that loads files.
-
-Any code that uses directories should consider the possibility that the directory may be symlink.
-
-New Ansible language parameters
-===============================
-
-If adding a new parameter, like 'can_fizzbuzz: True/False' be sure the value of the parameter is templated somewhere in the Runner code, as if anything can be parameterized in Ansible,
-there is a user that will try to parameterize it.
-
-String Find
-===========
-
-Use 'in':
-
-    # not this:
-    if x.find('foo') != -1:
-
-    # this:
-    if 'foo' in x:
-
-String checks
-=============
-
-To test if something is a string, consider that it may be unicode.
-
-    # no
-    if type(x) == str:
-
-    # yes
-    from ansible.module_utils.six import string_types
-    if isinstance(x, string_types):
-
-Cleverness
-==========
-
-Ansible's code is intended to be read by as many people as possible, so we don't particularly encourage clever or heavily idiomatic code.
-
-In particular, metaclasses are probably not appropriate, however entertaining they may be to add.
-
-Git Practices
-=============
-
-Pull requests cannot be accepted if they contain merge commits.
-
-Always do "git pull --rebase" and "git rebase" vs "git pull" or "git merge". See [rebasing a pull request](https://docs.ansible.com/ansible/latest/dev_guide/developing_rebasing.html) for more information.
-
-Always create a new branch for each pull request to avoid intermingling different features or fixes on the same branch.
-
-
-Python Version Compliance
-=========================
-
-All code in Ansible core must support a minimum version of Python 2.6.
-
-Module code must support a minimum of Python 2.4, with occasional exceptions for modules that require code that themselves require 2.6 and later.
-
-A quick reminder is that list comprehensions in Python 2.4 are not as fully fleshed out, there are no 'dict' comprehensions, and there is no 'with' statement.
-But otherwise it's pretty much all the same.
-
-The End
-=======
-
-This was not meant to be a scary document, so we hope it wasn't, but we also hope this helps you write code that is easier to maintain by others in the future.
-If you have questions about this document, please ask on the ansible-devel mailing list.
-
-Thank you!
+Our [Community Guide](https://docs.ansible.com/ansible/devel/community/) may also help you connect with the community of Ansible developers.

MANIFEST.in

@@ -10,6 +10,7 @@ include examples/hosts
 include examples/ansible.cfg
 include examples/scripts/ConfigureRemotingForAnsible.ps1
 include examples/scripts/upgrade_to_ps3.ps1
+recursive-include lib/ansible/executor/powershell *
 recursive-include lib/ansible/module_utils/powershell *
 recursive-include lib/ansible/modules *
 recursive-include lib/ansible/galaxy/data *

MODULE_GUIDELINES.md

@@ -1,3 +1,5 @@
 # Module Maintainer Guidelines
 
 The Ansible Module Maintainer Guidelines can now be found in the [official Ansible community guide](https://docs.ansible.com/ansible/latest/community/maintainers.html).
+
+See also the [Developers Guide](https://docs.ansible.com/ansible/latest/dev_guide/)

Makefile

@@ -48,7 +48,7 @@ RELEASE ?= 1
 
 # Get the branch information from git
 ifneq ($(shell which git),)
-GIT_DATE := $(shell git log -n 1 --format="%ai")
+GIT_DATE := $(shell git log -n 1 --format="%ci")
 GIT_HASH := $(shell git log -n 1 --format="%h")
 GIT_BRANCH := $(shell git rev-parse --abbrev-ref HEAD | sed 's/[-_.\/]//g')
 GITINFO = .$(GIT_HASH).$(GIT_BRANCH)
@@ -57,7 +57,7 @@ GITINFO = ""
 endif
 
 ifeq ($(shell echo $(OS) | egrep -c 'Darwin|FreeBSD|OpenBSD|DragonFly'),1)
-DATE := $(shell date -j -r $(shell git log -n 1 --format="%at") +%Y%m%d%H%M)
+DATE := $(shell date -j -r $(shell git log -n 1 --format="%ct") +%Y%m%d%H%M)
 CPUS ?= $(shell sysctl hw.ncpu|awk '{print $$2}')
 else
 DATE := $(shell date --utc --date="$(GIT_DATE)" +%Y%m%d%H%M)
@@ -217,7 +217,6 @@ clean:
 	rm -f AUTHORS.TXT
 	@echo "Cleaning up docsite"
 	$(MAKE) -C docs/docsite clean
-	$(MAKE) -C docs/api clean
 
 .PHONY: python
 python:
@@ -398,4 +397,3 @@ alldocs: docs webdocs
 
 version:
 	@echo $(VERSION)
-

README.rst

@@ -1,4 +1,4 @@
-|PyPI version| |Docs badge| |Build Status|
+|PyPI version| |Docs badge| |Chat badge| |Build Status|
 
 *******
 Ansible
@@ -13,7 +13,7 @@ balancers.
 Read the documentation and more at https://ansible.com/
 
 You can find installation instructions
-`here <https://docs.ansible.com/intro_getting_started.html>`_ for a
+`here <https://docs.ansible.com/ansible/latest/installation_guide/intro_installation.html>`_ for a
 variety of platforms.
 
 Most users should probably install a released version of Ansible from ``pip``, a package manager or
@@ -26,33 +26,30 @@ Ansible this way.
 Design Principles
 =================
 
-*  Have a dead simple setup process and a minimal learning curve
-*  Manage machines very quickly and in parallel
+*  Have a dead simple setup process and a minimal learning curve.
+*  Manage machines very quickly and in parallel.
 *  Avoid custom-agents and additional open ports, be agentless by
-   leveraging the existing SSH daemon
+   leveraging the existing SSH daemon.
 *  Describe infrastructure in a language that is both machine and human
-   friendly
-*  Focus on security and easy auditability/review/rewriting of content
+   friendly.
+*  Focus on security and easy auditability/review/rewriting of content.
 *  Manage new remote machines instantly, without bootstrapping any
-   software
-*  Allow module development in any dynamic language, not just Python
-*  Be usable as non-root
+   software.
+*  Allow module development in any dynamic language, not just Python.
+*  Be usable as non-root.
 *  Be the easiest IT automation system to use, ever.
 
 Get Involved
 ============
 
 *  Read `Community
-   Information <https://docs.ansible.com/community.html>`_ for all
+   Information <https://docs.ansible.com/ansible/latest/community>`_ for all
    kinds of ways to contribute to and interact with the project,
    including mailing list information and how to submit bug reports and
    code to Ansible.
-*  All code submissions are done through pull requests. Take care to
-   make sure no merge commits are in the submission, and use
-   ``git rebase`` vs ``git merge`` for this reason. If submitting a
-   large code change (other than modules), it's probably a good idea to
-   join ansible-devel and talk about what you would like to do or add
-   first to avoid duplicate efforts. This not only helps everyone
+*  All code submissions are done through pull requests to the ``devel`` branch.
+*  Feel free to talk to us before making larger changes
+   to avoid duplicate efforts. This not only helps everyone
    know what's going on, it also helps save time and effort if we decide
    some changes are needed.
 *  Users list:
@@ -63,17 +60,22 @@ Get Involved
    `ansible-announce <https://groups.google.com/group/ansible-announce>`_
    -- read only
 *  irc.freenode.net: #ansible
+*  For the full list of Email Lists, IRC channels see the
+   `Communication page <https://docs.ansible.com/ansible/latest/community/communication.html>`_
 
 Branch Info
 ===========
 
 *  Releases are named after Led Zeppelin songs. (Releases prior to 2.0
    were named after Van Halen songs.)
-*  The devel branch corresponds to the release actively under
+*  The ``devel`` branch corresponds to the release actively under
    development.
+*  The ``stable-2.x`` branches exist for current releases.
 *  Various release-X.Y branches exist for previous releases.
-*  We'd love to have your contributions, read `Community
-   Information <https://docs.ansible.com/community.html>`_ for notes on
+*  For information about the active branches see the
+   `Ansible release and maintenance <https://docs.ansible.com/ansible/latest/reference_appendices/release_and_maintenance.html>`_ page.
+*  We'd love to have your contributions, read the `Community
+   Guide <https://docs.ansible.com/ansible/latest/community>`_ for notes on
    how to get started.
 
 Roadmap
@@ -82,22 +84,7 @@ Roadmap
 Based on team and community feedback, an initial roadmap will be published for a major or minor version (ex: 2.0, 2.1).
 Subminor versions will generally not have roadmaps published.
 
-Ansible 2.1 was the first release which published this and asked for feedback in this manner.
-Feedback on the roadmap and the new process is quite welcome.
-The team is aiming for further transparency and better inclusion of both community desires and submissions.
-
-These are the team's *best guess* roadmaps based on the Ansible team's experience and are also based on requests and feedback from the community.
-There are things that may not make it due to time constraints, lack of community maintainers, etc.
-Each roadmap is published both as an idea of what is upcoming in Ansible, and as a medium for seeking further feedback from the community.
-
-There are multiple places for you to submit feedback:
-
-- Add to the agenda of an IRC `Core Team Meeting <https://github.com/ansible/community/blob/master/meetings/README.md>`_ (preferred)
-- Ansible's google-group: ansible-devel
-- AnsibleFest conferences
-- IRC Freenode channel: #ansible-devel (this one may have things lost in lots of conversation)
-
-For additional details consult the published `Ansible Roadmap <https://docs.ansible.com/ansible/devel/roadmap/>`_.
+The `Ansible Roadmap page <https://docs.ansible.com/ansible/devel/roadmap/>`_ details what is planned and how to influence the roadmap.
 
 Authors
 =======
@@ -112,13 +99,15 @@ Ansible was created by `Michael DeHaan <https://github.com/mpdehaan>`_
 License
 =======
 
-GNU General Public License v3.0
+GNU General Public License v3.0 or later
 
 See `COPYING <COPYING>`_ to see the full text.
 
 .. |PyPI version| image:: https://img.shields.io/pypi/v/ansible.svg
    :target: https://pypi.org/project/ansible
 .. |Docs badge| image:: https://img.shields.io/badge/docs-latest-brightgreen.svg
-   :target: https://docs.ansible.com/ansible
+   :target: https://docs.ansible.com/ansible/latest/
 .. |Build Status| image:: https://api.shippable.com/projects/573f79d02a8192902e20e34b/badge?branch=devel
    :target: https://app.shippable.com/projects/573f79d02a8192902e20e34b
+.. |Chat badge| image:: https://img.shields.io/badge/chat-IRC-brightgreen.svg
+   :target: https://docs.ansible.com/ansible/latest/community/communication.html

bin/ansible-connection

@@ -182,6 +182,7 @@ class ConnectionProcess(object):
     def shutdown(self):
         """ Shuts down the local domain socket
         """
+        lock_path = unfrackpath("%s/.ansible_pc_lock_%s" % os.path.split(self.socket_path))
         if os.path.exists(self.socket_path):
             try:
                 if self.sock:
@@ -195,6 +196,10 @@ class ConnectionProcess(object):
                     os.remove(self.socket_path)
                     setattr(self.connection, '_socket_path', None)
                     setattr(self.connection, '_connected', False)
+
+        if os.path.exists(lock_path):
+            os.remove(lock_path)
+
         display.display('shutdown complete', log_only=True)
 
 
@@ -249,8 +254,8 @@ def main():
         tmp_path = unfrackpath(C.PERSISTENT_CONTROL_PATH_DIR)
         makedirs_safe(tmp_path)
 
-        lock_path = unfrackpath("%s/.ansible_pc_lock_%s" % (tmp_path, play_context.remote_addr))
         socket_path = unfrackpath(cp % dict(directory=tmp_path))
+        lock_path = unfrackpath("%s/.ansible_pc_lock_%s" % os.path.split(socket_path))
 
         with file_lock(lock_path):
             if not os.path.exists(socket_path):

changelogs/.changes.yaml

@@ -559,3 +559,473 @@ releases:
     - yum_bugfux.yml
     - yum_bugfux_conf_file_none_type.yml
     release_date: '2018-10-25'
+  2.7.10:
+    codename: In the Light
+    fragments:
+    - 48306-ansible-connection-json
+    - 51898-remove-non-standard-redfish-manager-attrs-commands.yaml
+    - 52010-handle-empty-output-in-remote_exists.yaml
+    - 53046-azure_rm_inventory_properties_missing.yaml
+    - 53134-yum-fix-disable_excludes-when-repoquery.yaml
+    - 53496-azure_rm_inventory_vmss_nic.yaml
+    - 54028_tower_settings_value_param_required.yml
+    - 54044-fix-include_task-no-file-traceback.yml
+    - 54085-openssl-mode-writing.yaml
+    - 54101-backport-51034-foreman-inventory.yaml
+    - 54192-openssl_publickey-openssh-passphrase.yml
+    - 54296-openssl_dhparam-remove.yaml
+    - 54298-openssl_certificate-remove.yaml
+    - dict_is_dict.yml
+    - get_url-checksum.yaml
+    - grafana_datasource_fix_basic_auth_python3_issue.yaml
+    - linux-arm-cpu-count.yaml
+    - openstack_inventory_constructed.yml
+    - pamd-make-idempotence-fix.yaml
+    - random_mac-random-int-fix.yaml
+    - replace-before-after.yaml
+    - ssh-check-returncode-before-exception.yaml
+    - v2.7.10_summary.yaml
+    - win_acl-paths.yaml
+    - win_acl_inheritance-paths.yaml
+    - win_certificate_store-paths.yaml
+    - win_chocolatey-update.yaml
+    - win_copy-paths.yaml
+    - win_file-paths.yaml
+    - win_find-paths.yaml
+    - win_mod_utils-paths.yaml
+    - win_owner-paths.yaml
+    - win_psexec-paths.yaml
+    - win_reboot-psrp.yaml
+    - win_slurp-paths.yaml
+    - win_tempfile-path.yaml
+    - win_user_right-output.yaml
+    - winrm-all-timeout-exceptions.yaml
+    release_date: '2019-04-03'
+  2.7.11:
+    codename: In the Light
+    fragments:
+    - 26937-fix-remove-orphans.yml
+    - 44412-copy-fix-unwanted-acls.yaml
+    - 50183-improve-gcp-documentation.yaml
+    - 53385-docker-privilege-escalation.yml
+    - 54130-fix-missing-timeout-in-redfish_utils.yaml
+    - 54754-acme_certificate-cwd.yml
+    - 54799-ufw-default-direction.yml
+    - 54955-docker_container-log_options-strings.yml
+    - 55078-redfish_utils_fix_406_not_acceptable_issue_with_some_oob_controllers.yml
+    - 55083-univention-diff-UnboundLocalError.yaml
+    - 55150-native-strings-for-signature-auth.yaml
+    - 55384-netconf-import.yaml
+    - 55496-docker_container-docker-py-1.7.0.yml
+    - 55589_fix_vyos_prompt_issues.yaml
+    - 55595-nios-zone-idempotency-fix.yaml
+    - 55617-docker_swarm_service_use_correct_secrets_configs_types.yaml
+    - 55619-vultr_server_idempotency.yml
+    - 55894-docker_container-restart.yml
+    - 56012-docker_container-oom-version.yml
+    - dnf-4.2.2-module-remove.yaml
+    - meraki_orgnet_fix.yml
+    - meraki_vlan_api_calls.yml
+    - netconf_plugin_dispatch_fix.yaml
+    - no_become_plugins.yml
+    - nxos_bugfixes_2710.yaml
+    - nxos_interfaces_27_fix.yaml
+    - persistent_loading.yml
+    - psrp-fetch.yaml
+    - psrp-output.yaml
+    - redhat_subscription_use_strings_for_yum_plugin_configs.yaml
+    - sysctl-invalid-value.yml
+    - user-aix-shadow-file-parsing.yaml
+    - v2.7.11_summary.yaml
+    - vsphere_guest-corrected-state-operations.yml
+    - win_acl-network.yaml
+    - win_domain-setup.yaml
+    - win_reboot-psrp-command.yaml
+    - win_region-format.yaml
+    - yum-select-version.yml
+    release_date: '2019-05-23'
+  2.7.12:
+    codename: In the Light
+    fragments:
+    - fix_safe_eval.yml
+    - v2.7.12_summary.yaml
+    release_date: '2019-07-03'
+  2.7.13:
+    codename: In the Light
+    fragments:
+    - dont_template_passwords_from_prompt.yml
+    - v2.7.13_summary.yaml
+    release_date: '2019-08-15'
+  2.7.14:
+    codename: In the Light
+    fragments:
+    - aci-42-filter-whitespace.yaml
+    - ansible-test-redact.yml
+    - boto-logging-credentials.yml
+    - dont-template-cli-passwords.yml
+    - no-log-sub-options-invalid-parameter.yaml
+    - v2.7.14_summary.yaml
+    release_date: '2019-10-17'
+  2.7.15:
+    codename: In the Light
+    fragments:
+    - 63522-remove-args-from-sumologic-and-splunk-callbacks.yml
+    - v2.7.15_summary.yaml
+    release_date: '2019-11-13'
+  2.7.16:
+    codename: In the Light
+    fragments:
+    - ansible-test-coverage-constraint.yml
+    - ansible-test-ignore-pip-warnings.yml
+    - ansible-test-setuptools-constraint.yml
+    - nxos_file_copy_path_issue.yml
+    - solaris_zone_name_fix.yml
+    - v2.7.16_summary.yaml
+    release_date: '2020-01-15'
+  2.7.17:
+    codename: In the Light
+    fragments:
+    - af_clean.yml
+    - ansible-test-constraints-virtualenv.yml
+    - ansible-test-jinja2-python-2.6.yml
+    - ansible-test-opensuse-15.1.yml
+    - ansible-test-rhel-7.8.yml
+    - fetch_no_slurp.yml
+    - ldap-params-removal.yml
+    - remote_mkdir_fix.yml
+    - subversion_password.yaml
+    - v2.7.17_summary.yaml
+    - vault_tmp_file.yml
+    - vault_tmp_race_fix.yml
+    - win-unzip-check-extraction-path.yml
+    release_date: '2020-04-16'
+  2.7.18:
+    codename: In the Light
+    fragments:
+    - 68592-pip-check_mode-prereleases.yml
+    - inventory_docs_fix.yml
+    - v2.7.18_summary.yaml
+    release_date: '2020-05-11'
+  2.7.2:
+    codename: In the Light
+    fragments:
+    - 44324-ini_file-options-with-no-section-managed.yaml
+    - 44988-acme-post-as-get.yaml
+    - 45151-fix-os-exception.yaml
+    - 45704-fix-redfish_facts-http-redirect.yaml
+    - 46148-provide-redfish_facts-gathering-flexibility.yaml
+    - 46658-plugin_filter-improve_error_handling.yaml
+    - 46665-plugin_filter_doc_fix.yaml
+    - 46700-vmware_doc-standalone_esxi.yaml
+    - 47030-assert-add-success_msg-to-valid-args.yaml
+    - 47117-vmware_doc-http_api_usage.yaml
+    - 47300-ios-check_rc.yaml
+    - 47313-vmware_utils-handle_requests_import_error.yaml
+    - 47459_grafana_dashboard_consistency_fix.yaml
+    - 47462-fix-redfish_config-idempotency.yaml
+    - 47563-vmware_host-refactor_SSL_thumbprint.yaml
+    - 47608-docker_swarm-advertise_addr.yml
+    - 47621-bugfix-for-na-ontap-snapmirror.yaml
+    - 47668-aci_switch_leaf_selector-support_empty_policy_group.yaml
+    - 47689-yum-fix-version-syntax.yaml
+    - 47693-fix-argument-spec-for-netapp-modules.yaml
+    - 47695-pamd-fix-idempotence-and-parsing-issues.yml
+    - 47711-docker_container-minimal-version-checks.yml
+    - 47712-docker_container-detach-auto-remove.yml
+    - 47722-vmware_guest_powerstate-restore_timeout.yaml
+    - 47889-vmware_doc-fix_privilege_names.yaml
+    - 47900-docker_container-paused.yml
+    - 47920-vmware_guest-handle_no_root_snapshot.yaml
+    - 47938-docker_swarm_service-requirements.yaml
+    - 47997-docker_container-ipc-pid-mode.yml
+    - 48009-ldap_attr-list.yml
+    - 48036-vultr-fix-empty-list-handling.yaml
+    - 48061-docker_container-auto_removal.yml
+    - 48148_net_put_cleanup.yaml
+    - 48317-do-not-auto-reboot-with-redfish_config-bios-changes
+    - 48341-ebs-optimized-ec2-instance.yaml
+    - 48342-vultr_server_facts-fix-firewall-group.yml
+    - 48474-k8s-module-docs-update.yaml
+    - 48536-docker_volume-labels.yml
+    - 48551-docker_container-idempotency.yml
+    - 48590-docker_container-unpause-stop.yml
+    - aci_access_port_to_interface_policy_leaf_profile-missing_policy_group.yaml
+    - aci_interface_policy_leaf_policy_group-missing_aep.yaml
+    - django_manage_status.yaml
+    - fix-password-lookup-on-fips.yaml
+    - galaxy-metea-yaml-extension.yaml
+    - loop-cache-include-apply.yml
+    - lvg_fix_47301.yaml
+    - nxos_evpn_vni_check_mode.yaml
+    - nxos_facts_trailing_comma.yaml
+    - nxos_install_os_force_disruptive.yaml
+    - os_router_enable_snat_fix.yaml
+    - ovirt_host_network_fix_type_conversion.yaml
+    - ovirt_host_pm_bug_fixes_for_power_management.yaml
+    - pip-fix-idempotence-in-check-mode.yaml
+    - reboot-change-default-boot-command.yaml
+    - remove_redundant_md5.yml
+    - tls_mail.yml
+    - uri-supports-async.yaml
+    - user-fix-zero-negative-expiration.yaml
+    - user-password_lock-change-fix.yaml
+    - user-restore-disabled-account.yaml
+    - v2.7.2_summary.yaml
+    - win_uri-junk-data.yaml
+    - yum-handle-obsoletes-check-update.yaml
+    - yumdnf-autoremove.yaml
+    release_date: '2018-11-15'
+  2.7.3:
+    codename: In the Light
+    fragments:
+    - 15732-wait_for-documentation_fix.yaml
+    - 46044-puppet-puppet6-fix.yaml
+    - 47198-fix-setuptools-distutils.yaml
+    - 47747-ftd-http-api-fixes.yaml
+    - 48580-apt_key-no-tty.yaml
+    - 48673-fix-omit-on-play-keywords.yaml
+    - 48675-cs_template-fix-keyerror-state-extracted.yml
+    - 48809-sysvinit_defaults_if_no_runlevels.yaml
+    - 48836-proxymox_kvm-dictionary.yaml
+    - 49078-docker_container-min-version-fix.yml
+    - cfg_mgr_fix.yml
+    - deal_with_bad_config_types.yml
+    - dnf-modularity.yaml
+    - docker_network-driver_options.yaml
+    - ec2_group-rule-purge-fix.yaml
+    - ps_sb_logging.yaml
+    - v2.7.3_summary.yaml
+    - win_security_policy-rights.yaml
+    release_date: '2018-11-29'
+  2.7.4:
+    codename: In the Light
+    fragments:
+    - powershell-bootstrap.yaml
+    - v2.7.4_summary.yaml
+    release_date: '2018-11-30'
+  2.7.5:
+    codename: In the Light
+    fragments:
+    - 33239-sensu-expire-cast-int.yaml
+    - 45122-fix-unarchive-excluded_files.yaml
+    - 45155-vmware-handle_exception.yaml
+    - 45155-vmware_host_service_facts-update_docs.yaml
+    - 46604-ontap-cifs-server-no-log-password.yaml
+    - 46740-gcp-utils-credentials-scoping.yaml
+    - 47019-mail-fix-py27-regression.yaml
+    - 47313-vmware-fix_module_error.yaml
+    - 48728-win_nssm-credential-quoting.yml
+    - 48730-zabbix_hostmacro-fixes.yml
+    - 48792-templar-fix-AttributeError.yml
+    - 48950-vault-encrypted-data-native-jinja.yaml
+    - 49096-ansible-galaxy-fix_info_typo.yaml
+    - 49113-iam-role-arn-parsing-updated.yml
+    - 49123-backport-devuan-support.yml
+    - 49212-require-git-ansible-galaxy.yaml
+    - 49235-docker_swarm_service-user-default.yaml
+    - 49266-acme-error-messages.yml
+    - 49299-openshift-inventory-plugin-empty-pods-and-serialization.yaml
+    - 49394_azure_image.yml
+    - 49407-acme-disabled-accounts.yml
+    - 49474-network_utils_dict_merge_fix.yaml
+    - 49553-aci_rest-fix-ignoring-custom-port.yaml
+    - avoid_ssh_retry_discolsures.yml
+    - azure_rm_subnet_route_table.yaml
+    - clear_system_variablse.yml
+    - detect_interpreter_stdout.yml
+    - dnf-fix-plugin-loading.yaml
+    - docker-swarm-min-ver.yaml
+    - iosxr_netconf_plugin_fix.yaml
+    - jinja2_native-fallback-warning.yaml
+    - nxos_facts_multiple_bugfixes.yaml
+    - nxos_install_os_nxapi_fix.yaml
+    - nxos_interface_linkagg_idempotence.yaml
+    - openstack-fixes-for-2.7.5.yaml
+    - ovirt_storage_connection_password-comparison.yaml
+    - parimko_ssh-log-message.yaml
+    - reboot-fix-exception-type.yaml
+    - redis-3-compat.yaml
+    - squash-deprecation-message.yml
+    - v2.7.5_summary.yaml
+    - vm_fix.yml
+    release_date: '2018-12-13'
+  2.7.6:
+    codename: In the Light
+    fragments:
+    - 46739-gcp-compute-instance-metadata.yaml
+    - 46774-ec2_instance_check_mode_fix.yaml
+    - 49084-influxdb_user-default-password-fix.yaml
+    - 49194-grafana_string_handling_fix.yml
+    - 49409-lineinfile_must_not_insert_lines_multiples_times_with_insertbefore_insertafter.yml
+    - 49758-azure_vmss_update_image_reference_fix.yaml
+    - 49794-docker_container-network-mode.yml
+    - 49843-docker_container-wrap-env.yaml
+    - 49922-network-cli-timeout.yaml
+    - 49987-certificate_complete_chain-error.yml
+    - 50034-move-import-errors.yaml
+    - 50076-os-sec-group-rule-proper-module-exit.yaml
+    - 50134-influxdb_user-invalid_auth_fix.yml
+    - 50143-win_firewall_rule-invalid-bypass.yml
+    - 50169-netconf-connection-log.yaml
+    - 50185-win_updates-report-changes-correctly.yml
+    - 50249-vmware_vm_inventory-fix_host_ip.yaml
+    - 50298-redfish_utils_fix_reference_to_local_variable_systems_service.yaml
+    - 50322-openssl-path-error.yml
+    - 50337-fix-vultr_server-ssh_keys-handling.yml
+    - 50361-openssl_csr-idempotency.yml
+    - 50448-paramiko_ssh_add_auth_timeout.yaml
+    - 50540-fix-lastpass-lookup-error.yaml
+    - 50654-docker-swarm-service-docker-api-fix.yaml
+    - 50655-docker_swarm_service-update_order-idempotency.yml
+    - 50697-openssl_pkcs12-ca_certificates.yaml
+    - 50861-docker_swarm_service-documentation-fixes.yml
+    - acl_doc_fix.yml
+    - callback-keep-more-debug-keys.yml
+    - copy-diff-text.yaml
+    - dnf-conf-file.yaml
+    - dnf-update-cache-broken-transaction.yaml
+    - docker_volume-force-change-detection-revert.yaml
+    - firewalld-missing-port-protocol.yml
+    - fix_vmware_inv.yml
+    - flatpak-compatibility-fixes.yaml
+    - icinga2_host-47671-fix-use_proxy.yaml
+    - junos_commit_error_fix.yaml
+    - openstack_inventory_fix.yml
+    - os-family_distro_variable_clearlinux.yaml
+    - persistent-socket-lock-name.yaml
+    - playbook-order-reverse_inventory.yaml
+    - pure_facts_fix.yaml
+    - reboot-add-aix-support.yml
+    - reboot-path-alpine-solaris.yaml
+    - reboot-vmware-esxi.yaml
+    - v2.7.6_summary.yaml
+    - win_copy-empty-dir.yaml
+    - win_lineinfile-output.yaml
+    - windows_setup_memtotal.yml
+    - yumdnf-better-uri-handling.yaml
+    release_date: '2019-01-17'
+  2.7.7:
+    codename: In the Light
+    fragments:
+    - 24633-copy-coherency-between-check-normal-mode.yaml
+    - 47213-onepassword_facts_fix_password_lookup.yaml
+    - 49444_fix_check_if_archive_is_created_in_path_to_be_removed.yml
+    - 50006-azure_rm_inventory_batchrequest_fix.yaml
+    - 50248-fix-coonfig-backup-glob.yaml
+    - 51232-docker_swarm_service-endpoint_mode.yaml
+    - 51406-aci_aaa_user-description.yaml
+    - 51495-k8s-load-envvars.yaml
+    - 51602-ec2_instance_single_iface_description.yaml
+    - cli_config_diff_fix.yaml
+    - delegate_facts_fix.yaml
+    - file-touch-non-owner.yaml
+    - fix_ansible_connect_timeout.yaml
+    - fix_ir_dupes.yml
+    - fix_pull_extra.yml
+    - nios_a_record_delete_failure_with_uppercase_name.yaml
+    - py37_misc_module_backports.yaml
+    - reboot-conn-timeout-reset.yaml
+    - ssh_connection_invalid_password.yaml
+    - systemd-warn-on-chroot.yaml
+    - v2.7.7_summary.yaml
+    - vmware_guest-documentation_fix.yaml
+    - win_chocolatey.yaml
+    - win_power_plan-windows10.yaml
+    - xdg_systemd_fix.yml
+    release_date: '2019-02-07'
+  2.7.8:
+    codename: In the Light
+    fragments:
+    - 45269-fix-vm-crashing.yaml
+    - 45378-fix-sql-tags.yml
+    - 46478-haproxy-fix-drain-mode.yaml
+    - 49485-ios-retry-section.yaml
+    - 49704-fix-vm-facts-crash.yaml
+    - 50120-fix-vm-facts-managed-disk.yaml
+    - 50402-ufw-check-direction.yml
+    - 51028-get-standard-redfish-properties-for-firmware-entries.yaml
+    - 51473-openssl_csr-idempotence.yaml
+    - 51535-ec2-fix-spot-request-end-date.yaml
+    - 51653-fixing-azure-postgresql-parameters.yaml
+    - 51661-fixing-azure-mysql-parameters.yaml
+    - 51697-disable_excludes-errors-with-disable-includes-message.yaml
+    - 51764-update-getbiosbootorder-to-standard-redfish-resources.yaml
+    - 51781-fixing-managed-disk-facts.yaml
+    - 51795-acme_challenge_cert_helper-module-fail.yaml
+    - 51827-openstack_logs_to_stderr.yml
+    - 52130-win_psmodule-update_nuget.yaml
+    - 52158-jinja2-native-types-contructed-keyed-groups.yaml
+    - 52388-postgresqldatabase-fix-force-update.yml
+    - 52389-mysqldatabase-fix-force-update.yaml
+    - allow_regions_aws_invp.yml
+    - disallow-relative-homedir.yaml
+    - psrp-display-exec-output.yaml
+    - ufw-reset-check-mode.yaml
+    - v2.7.8_summary.yaml
+    - win-become-elevation.yaml
+    - winrm-ansible-conn-error.yaml
+    - yum-unauthenticated-proxy.yaml
+    release_date: '2019-02-21'
+  2.7.9:
+    codename: In the Light
+    fragments:
+    - 36811-fix-lvol-valueerror-with-float-size.yaml
+    - 39301-dnsimple_keyerror_record-type.yaml
+    - 40092-mysql_user-match-backticks.yml
+    - 44561-vmware_host_config_manager-fix_key_error.yml
+    - 47508-openssl_certificate-fix-not-before-after.yml
+    - 47809-module_utils_mysql-unexpected-keyword-argument-cursorclass.yml
+    - 49191-module_utils_mysql-unexpected-keyword-argument-cursorclass.yml
+    - 49776-product_fix_katello_foreman_module.yaml
+    - 49881-fix-broken-urpmi-module.yaml
+    - 49981-filter-dnsimple-request-by-record-name.yaml
+    - 51136-fix-ansible-inventory-tracebacks.yml
+    - 51853-fix-truncated-macro-contexts.yml
+    - 51953-onepassword_facts-bug-fixes.yaml
+    - 52034-fix-traceback-on_ansible-doc_-all.yaml
+    - 52051-jenkins_plugin-state_present_fix.yaml
+    - 52166-fix_rabbitmq_plugin_idempotence.yml
+    - 52381-vmware_vm_inventory-fix_yaml_flag.yaml
+    - 52536-jenkins_plugin-update_url.yaml
+    - 52540-fix-vm-facts-crashing-managed-disk.yaml
+    - 52822-cloudscale_fix-py3.yaml
+    - 52825-docker_swarm-detection-check-mode.yaml
+    - 52885-edgeos-connectionError_fix.yaml
+    - 52895-docker_swarm-labels.yaml
+    - 53003-docker_swarm-force-new-cluster.yml
+    - 53039-docker_swarm-ca_force_rotate.yml
+    - 53070-get_url-check_mode.yml
+    - 53129-docker_swarm-older-docker-py.yaml
+    - 53152-create-groups-using-composed-variables.yaml
+    - 53198-openssl_csr-subject-validation.yml
+    - 53201-openssl_csr-improve-invalid-san.yml
+    - 53207-openssl_certificate-assertonly-extensions.yml
+    - 53224-docker_swarm_service-UpdateConfig.yml
+    - 53229-docker_swarm_service-return-value.yml
+    - 53262-docker_swarm_service-test_parameter_versions.yml
+    - 53289-module-option-int-long.yml
+    - 53440-docker_container-warnings.yml
+    - 53451-docker_image-fix-changed-tag-push.yml
+    - 53503-docker_swarm_fix_node_id.yml
+    - auto_nice_error.yml
+    - aws_ec2_inventory_integration_tests.yaml
+    - dict2items-mapping.yaml
+    - ec2_fix_assigning_private_without_public_ip.yml
+    - fix_order_serial.yml
+    - md5-hash-algorithms-pop-fix.yaml
+    - nmap_bytes_fix.yml
+    - openssl_certificate_fix_has_expired.yml
+    - rhsm_repository-handle-no-repos.yml
+    - skip_invalid_plugin.yml
+    - to_yaml-default_flow_style.yaml
+    - v2.7.9_summary.yaml
+    - win_certificate_store-excp.yaml
+    - win_chocolatey-beta-versions.yaml
+    - win_chocolatey_source_disabled.yaml
+    - win_domain-cred.yaml
+    - win_file-hidden.yaml
+    - winrm-send-input-check.yaml
+    plugins:
+      inventory:
+      - vmware_vm_inventory
+    release_date: '2019-03-14'

changelogs/CHANGELOG-v2.7.rst

@@ -5,6 +5,737 @@ Ansible 2.7 "In the Light" Release Notes
 .. contents:: Topics
 
 
+v2.7.18
+=======
+
+Release Summary
+---------------
+
+| Release Date: 2020-05-11
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Minor Changes
+-------------
+
+- Point inventory script location to their respective version rather than devel version in documentation.
+
+Bugfixes
+--------
+
+- pip - check_mode with ``state: present`` now returns the correct state for pre-release versioned packages
+
+v2.7.17
+=======
+
+Release Summary
+---------------
+
+| Release Date: 2020-04-16
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Minor Changes
+-------------
+
+- ansible-test - Upgrade OpenSUSE containers to use Leap 15.1.
+- ansible-test now supports testing against RHEL 7.8 when using the ``--remote`` option.
+
+Removed Features (previously deprecated)
+----------------------------------------
+
+- ldap_attr, ldap_entry - The ``params`` option has been removed in Ansible-2.10 as it circumvents Ansible's option handling.  Setting ``bind_pw`` with the ``params`` option was disallowed in Ansible-2.7, 2.8, and 2.9 as it was insecure.  For information about this policy, see the discussion at: https://meetbot.fedoraproject.org/ansible-meeting/2017-09-28/ansible_dev_meeting.2017-09-28-15.00.log.html This fixes CVE-2020-1746
+
+Bugfixes
+--------
+
+- **security issue** - The ``subversion`` module provided the password via the svn command line option ``--password`` and can be retrieved from the host's /proc/<pid>/cmdline file. Update the module to use the secure ``--password-from-stdin`` option instead, and add a warning in the module and in the documentation if svn version is too old to support it. (CVE-2020-1739)
+
+- **security issue** win_unzip - normalize paths in archive to ensure extracted files do not escape from the target directory (CVE-2020-1737)
+
+- **security_issue** - create temporary vault file with strict permissions when editing and prevent race condition (CVE-2020-1740)
+- Ensure DataLoader temp files are removed at appropriate times and that we observe the LOCAL_TMP setting.
+- Ensure we don't allow ansible_facts subkey of ansible_facts to override top level, also fix 'deprefixing' to prevent key transforms.
+- Ensure we get an error when creating a remote tmp if it already exists. CVE-2020-1733
+- In fetch action, avoid using slurp return to set up dest, also ensure no dir traversal CVE-2020-1735.
+- ansible-test - Use ``virtualenv`` versions before 20 on provisioned macOS instances to remain compatible with an older pip install.
+- ansible-test now limits Jinja2 installs to version 2.10 and earlier on Python 2.6
+
+v2.7.16
+=======
+
+Release Summary
+---------------
+
+| Release Date: 2020-01-15
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Bugfixes
+--------
+
+- **SECURITY** - CVE-2019-14904 - solaris_zone module accepts zone name and performs actions related to that. However, there is no user input validation done while performing actions. A malicious user could provide a crafted zone name which allows executing commands into the server manipulating the module behaviour. Adding user input validation as per Solaris Zone documentation fixes this issue.
+- CVE-2019-14905 - nxos_file_copy module accepts remote_file parameter which is used for destination name and performs actions related to that on the device using the value of remote_file which is of string type However, there is no user input validation done while performing actions. A malicious code could crafts the filename parameter to take advantage by performing an OS command injection. This fix validates the option value if it is legitimate file path or not.
+- ansible-test no longer tries to install ``coverage`` 5.0+ since those versions are unsupported
+- ansible-test no longer tries to install ``setuptools`` 45+ on Python 2.x since those versions are unsupported
+- ansible-test now ignores warnings when comparing pip versions before and after integration tests run
+
+v2.7.15
+=======
+
+Release Summary
+---------------
+
+| Release Date: 2019-11-13
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Bugfixes
+--------
+
+- **security issue** - Ansible: Splunk and Sumologic callback plugins leak sensitive data in logs (CVE-2019-14864)
+
+v2.7.14
+=======
+
+Release Summary
+---------------
+
+| Release Date: 2019-10-17
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Minor Changes
+-------------
+
+- ansible-test defaults to redacting sensitive values (disable with the ``--no-redact`` option)
+
+Bugfixes
+--------
+
+- **SECURITY** - CVE-2019-14846 - Several Ansible plugins could disclose aws credentials in log files.  inventory/aws_ec2.py, inventory/aws_rds.py, lookup/aws_account_attribute.py, and lookup/aws_secret.py, lookup/aws_ssm.py use the boto3 library from the Ansible process. The boto3 library logs credentials at log level DEBUG.  If Ansible's logging was enabled (by setting LOG_PATH to a value) Ansible would set the global log level to DEBUG.  This was inherited by boto and would then log boto credentials to the file specified by LOG_PATH.  This did not affect aws ansible modules as those are executed in a separate process.  This has been fixed by switching to log level INFO
+- **security issue** - Convert CLI provided passwords to text initially, to prevent unsafe context being lost when converting from bytes->text during post processing of PlayContext. This prevents CLI provided passwords from being incorrectly templated (CVE-2019-14856)
+
+- **security issue** - properly hide parameters marked with ``no_log`` in suboptions when invalid parameters are passed to the module (CVE-2019-14858)
+- ACI modules - Fix a whitespace issue in filters for ACI 4.2 strict validation
+
+v2.7.13
+=======
+
+Release Summary
+---------------
+
+| Release Date: 2019-08-15
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Bugfixes
+--------
+
+- resolves CVE-2019-10206, by avoiding templating passwords from prompt as it is probable they have special characters.
+
+v2.7.12
+=======
+
+Release Summary
+---------------
+
+| Release Date: 2019-07-03
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Bugfixes
+--------
+
+- Handle improper variable substitution that was happening in safe_eval, it was always meant to just do 'type enforcement' and have Jinja2 deal with all variable interpolation. Also see CVE-2019-10156
+
+v2.7.11
+=======
+
+Release Summary
+---------------
+
+| Release Date: 2019-05-23
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Bugfixes
+--------
+
+- Add missing parameters in get_config vyos (https://github.com/ansible/ansible/pull/50855).
+- Fix defaults option in the nxos_config module (https://github.com/ansible/ansible/pull/51076).
+- Fix netconf plugin dispatch response (https://github.com/ansible/ansible/issues/53236)
+- Fix nxos action plugin for nxos_install_os (https://github.com/ansible/ansible/pull/53768).
+- Fix privilege escalation support for the docker connection plugin when credentials need to be supplied (e.g. sudo with password).
+- Fix regular expression for timeout (https://github.com/ansible/ansible/pull/53994).
+- Fix unwanted ACLs when using copy module (https://github.com/ansible/ansible/issues/44412)
+- Fix vyos cli prompt inspection (https://github.com/ansible/ansible/pull/55589)
+- Match VLAN ID as whole line instead of searching for digits in line (https://github.com/ansible/ansible/pull/51019).
+- Meraki - Lookups using org_name or net_name no longer query Meraki twice, only once. Major performance improvements.
+- Move netconf import errors from import to use.
+- Removes superfluous commands nxos_vlan (https://github.com/ansible/ansible/pull/51796).
+- To fix the nios_zone module idempotency failure  - https://github.com/ansible/ansible/pull/55595
+- aci modules - Ensure we use native strings for signature
+- acme_certificate - writing result failed when no path was specified (i.e. destination in current working directory).
+- dnf - fix issue with dnf API calls to adapt to changes in upstream dnf version 4.2.2
+- docker_container - ``oom_killer`` and ``oom_score_adj`` options are available since docker-py 1.8.0, not 2.0.0 as assumed by the version check.
+- docker_container - fix idempotency of ``log_options`` when non-string values are used. Also warn user that this is the case.
+- docker_container - make again compatible with docker-py 1.7.0.
+- docker_container - use docker API's ``restart`` instead of ``stop``/``start`` to restart a container.
+- docker_service - fixed an issue where ``remove_orphans`` doesn't work reliably.
+- docker_swarm_service - Change the type of options ``gid`` and ``uid`` to ``str`` and ``mode`` to ``int`` on ``secrets`` and ``configs``.
+- fix eos_l2_interface insufficient commands (https://github.com/ansible/ansible/pull/50754).
+- fix eos_l2_interface invalid command (https://github.com/ansible/ansible/pull/50644).
+- gcp_compute - improve documentation on the usage of the dynamics gcp_compute inventory
+- httpapi/nxos_facts raise ConnectionError is missing `code` (https://github.com/ansible/ansible/pull/53406).
+- meraki_vlan - Module would make unnecessary API calls to Meraki when net_id is specified in task.
+- network.py:ActionModule:run does not honor _handle_src_option failures (https://github.com/ansible/ansible/pull/52745).
+- nxos_hsrp fix sh_preempt <unknown enum:> (https://github.com/ansible/ansible/pull/52858).
+- nxos_igmp_snooping group-timeout fails when igmp snooping disabled (https://github.com/ansible/ansible/pull/53079).
+- nxos_igmp_snooping more group-timeout fixes (https://github.com/ansible/ansible/pull/53553).
+- nxos_interface DI delay only when operation state check is requested (https://github.com/ansible/ansible/pull/54862).
+- nxos_interfaces_ospf fix passive-interface states & check_mode (https://github.com/ansible/ansible/pull/54260).
+- nxos_linkagg `group` type mismatch causes idempotency failure (https://github.com/ansible/ansible/pull/53653).
+- nxos_user fails to remove usernames with embedded rawstring (https://github.com/ansible/ansible/pull/53149).
+- pass correct loading context to persistent connections
+- psrp - Fix blank newlines appearing before ``stdout`` when using ``script`` or ``raw`` with the ``psrp`` connection plugin
+- psrp - Fix issues when fetching large files causing a memory leak - https://github.com/ansible/ansible/issues/55239
+- psrp - Fix issues with propagating errors back to Ansible with ``raw`` tasks
+- redfish_utils - expose timeout option for redfish implementations that exceed the 10 second default
+- redfish_utils - fix "406 Not Acceptable" issue with some OOB controllers (https://github.com/ansible/ansible/issues/55078)
+- redhat_subscription - For compatibility using the redhat_subscription module on hosts set to use a python 3 interpreter, use string values when updating yum plugin configuration files.
+- remove become plugins reference introduced in backport fix
+- sysctl: the module now also checks the output of STDERR to report if values are correctly set (https://github.com/ansible/ansible/pull/55695)
+- udm_dns_record - Fix issues when state is absent with undefined variable diff at the module return.
+- udm_dns_zone - Fix issues when state is absent with undefined variable diff at the module return.
+- udm_group - Fix issues when state is absent with undefined variable diff at the module return.
+- udm_share - Fix issues when state is absent with undefined variable diff at the module return.
+- udm_user - Fix issues when state is absent with undefined variable diff at the module return.
+- ufw - when ``default`` is specified, ``direction`` does not needs to be specified. This was accidentally introduced in Ansible 2.7.8.
+- user - properly parse the shadow file on AIX (https://github.com/ansible/ansible/issues/54461)
+- vsphere_guest - creating machines without vm_extra_config allowed
+- vsphere_guest - powering on/off absent virtual machine will fail
+- vultr_server - Fix idempotency for options ``ipv6_enabled`` and ``private_network_enabled``.
+- win_acl - Fix qualifier parser when using UNC paths - https://github.com/ansible/ansible/issues/55875
+- win_domain - Fix checking for a domain introduced in a recent patch
+- win_reboot - pass return value for ``test_command`` result when using the ``psrp`` connection plugin
+- win_region - Fix the check for ``format`` when running on the ``psrp`` connection plugin
+- yum allows comparison operators like '>=' for selecting package version
+
+v2.7.10
+=======
+
+Release Summary
+---------------
+
+| Release Date: 2019-04-03
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Minor Changes
+-------------
+
+- Catch all connection timeout related exceptions and raise AnsibleConnectionError instead
+- openssl_pkcs12, openssl_privatekey, openssl_publickey - These modules no longer delete the output file before starting to regenerate the output, or when generating the output failed.
+
+Bugfixes
+--------
+
+- Backport of https://github.com/ansible/ansible/pull/54105, pamd - fix idempotence issue when removing rules
+- Use custom JSON encoder in conneciton.py so that ansible objects (AnsibleVaultEncryptedUnicode, for example) can be sent to the persistent connection process
+- allow 'dict()' jinja2 global to function the same even though it has changed in jinja2 versions
+- azure_rm inventory plugin - fix missing hostvars properties (https://github.com/ansible/ansible/pull/53046)
+- azure_rm inventory plugin - fix no nic type in vmss nic. (https://github.com/ansible/ansible/pull/53496)
+- deprecate {Get/Set}ManagerAttributes commands (https://github.com/ansible/ansible/issues/47590)
+- flatpak_remote - Handle empty output in remote_exists, fixes https://github.com/ansible/ansible/issues/51481
+- foreman - fix Foreman returning host parameters
+- get_url - Fix issue with checksum validation when using a file to ensure we skip lines in the file that do not contain exactly 2 parts. Also restrict exception handling to the minimum number of necessary lines (https://github.com/ansible/ansible/issues/48790)
+- grafana_datasource - Fixed an issue when running Python3 and using basic auth (https://github.com/ansible/ansible/issues/49147)
+- include_tasks - Fixed an unexpected exception if no file was given to include.
+- openssl_certificate - fix ``state=absent``.
+- openssl_certificate, openssl_csr, openssl_pkcs12, openssl_privatekey, openssl_publickey - The modules are now able to overwrite write-protected files (https://github.com/ansible/ansible/issues/48656).
+- openssl_dhparam - fix ``state=absent`` idempotency and ``changed`` flag.
+- openssl_pkcs12, openssl_privatekey - These modules now accept the output file mode in symbolic form or as a octal string (https://github.com/ansible/ansible/issues/53476).
+- openssl_publickey - fixed crash on Python 3 when OpenSSH private keys were used with passphrases.
+- openstack inventory plugin: allow "constructed" functionality (``compose``, ``groups``, and ``keyed_groups``) to work as documented.
+- random_mac - generate a proper MAC address when the provided vendor prefix is two or four characters (https://github.com/ansible/ansible/issues/50838)
+- replace - fix behavior when ``before`` and ``after`` are used together (https://github.com/ansible/ansible/issues/31354)
+- report correct CPU information on ARM systems (https://github.com/ansible/ansible/pull/52884)
+- slurp - Fix issues when using paths on Windows with glob like characters, e.g. ``[``, ``]``
+- ssh - Check the return code of the ssh process before raising AnsibleConnectionFailure, as the error message for the ssh process will likely contain more useful information. This will improve the missing interpreter messaging when using modules such as setup which have a larger payload to transfer when combined with pipelining. (https://github.com/ansible/ansible/issues/53487)
+- tower_settings - 'name' and 'value' parameters are always required, module can not be used in order to get a setting
+- win_acl - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
+- win_acl_inheritance - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
+- win_certificate_store - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
+- win_chocolatey - Fix incompatibilities with the latest release of Chocolatey ``v0.10.12+``
+- win_copy - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
+- win_file - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
+- win_find - Ensure found files are sorted alphabetically by the path instead of it being random
+- win_find - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
+- win_owner - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
+- win_psexec - Support executables with a space in the path
+- win_reboot - Fix reboot command validation failure when running under the psrp connection plugin
+- win_tempfile - Always return the full NTFS absolute path and not a DOS 8.3 path.
+- win_user_right - Fix output containing non json data - https://github.com/ansible/ansible/issues/54413
+- windows - Fixed various module utils that did not work with path that had glob like chars
+- yum - fix disable_excludes on systems with yum rhn plugin enabled (https://github.com/ansible/ansible/issues/53134)
+
+v2.7.9
+======
+
+Release Summary
+---------------
+
+| Release Date: 2019-03-14
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Minor Changes
+-------------
+
+- Add missing import for ConnectionError in edge and routeros module_utils.
+- ``to_yaml`` filter updated to maintain formatting consistency when used with ``pyyaml`` versions 5.1 and later (https://github.com/ansible/ansible/pull/53772)
+- docker_image - set ``changed`` to ``false`` when using ``force: yes`` to tag or push an image that ends up being identical to one already present on the Docker host or Docker registry.
+- jenkins_plugin - Set new default value for the update_url parameter (https://github.com/ansible/ansible/issues/52086)
+
+Bugfixes
+--------
+
+- Fix bug where some inventory parsing tracebacks were missing or reported under the wrong plugin.
+- Fix rabbitmq_plugin idempotence due to information message in new version of rabbitmq (https://github.com/ansible/ansible/pull/52166)
+- Fixed KeyError issue in vmware_host_config_manager when a supported option isn't already set (https://github.com/ansible/ansible/issues/44561).
+- Fixed issue related to --yaml flag in vmware_vm_inventory. Also fixed caching issue in vmware_vm_inventory (https://github.com/ansible/ansible/issues/52381).
+- If large integers are passed as options to modules under Python 2, module argument parsing will reject them as they are of type ``long`` and not of type ``int``.
+- allow nice error to work when auto plugin reads file w/o `plugin` field
+- ansible-doc - Fix traceback on providing arguemnt --all to ansible-doc command
+- azure_rm_virtualmachine_facts - fixed crash related to attached managed disks (https://github.com/ansible/ansible/issues/52181)
+- basic - modify the correct variable when determining available hashing algorithms to avoid errors when md5 is not available (https://github.com/ansible/ansible/issues/51355)
+- cloudscale - Fix compatibilty with Python3 in version 3.5 and lower.
+- convert input into text to ensure valid comparisons in nmap inventory plugin
+- dict2items - Allow dict2items to work with hostvars
+- dnsimple - fixed a KeyError exception related to record types handling.
+- docker_container - now returns warnings from docker daemon on container creation and updating.
+- docker_swarm - Fixed node_id parameter not working for node removal (https://github.com/ansible/ansible/issues/53501)
+- docker_swarm - do not crash with older docker daemons (https://github.com/ansible/ansible/issues/51175).
+- docker_swarm - fixes idempotency for the ``ca_force_rotate`` option.
+- docker_swarm - improve Swarm detection.
+- docker_swarm - improve idempotency checking; ``rotate_worker_token`` and ``rotate_manager_token`` are now also used when all other parameters have not changed.
+- docker_swarm - now supports docker-py 1.10.0 and newer for most operations, instead only docker 2.6.0 and newer.
+- docker_swarm - properly implement check mode (it did apply changes).
+- docker_swarm - the ``force`` option was ignored when ``state: present``.
+- docker_swarm_service - do basic validation of ``publish`` option if specified (must be list of dicts).
+- docker_swarm_service - don't crash when ``publish`` is not specified.
+- docker_swarm_service - fix problem with docker daemons which do not return ``UpdateConfig`` in the swarm service spec.
+- docker_swarm_service - the return value was documented as ``ansible_swarm_service``, but the module actually returned ``ansible_docker_service``. Documentation and code have been updated so that the variable is now called ``swarm_service``. In Ansible 2.7.x, the old name ``ansible_docker_service`` can still be used to access the result.
+- ec2 - if the private_ip has been provided for the new network interface it shouldn't also be added to top level parameters for run_instances()
+- fix DNSimple to ensure check works even when the number of records is larger than 100
+- get_url - return no change in check mode when checksum matches
+- inventory plugins - Fix creating groups from composed variables by getting the latest host variables
+- inventory_aws_ec2 - fix no_log indentation so AWS temporary credentials aren't displayed in tests
+- jenkins_plugin - Prevent plugin to be reinstalled when state=present (https://github.com/ansible/ansible/issues/43728)
+- lvol - fixed ValueError when using float size (https://github.com/ansible/ansible/issues/32886, https://github.com/ansible/ansible/issues/29429)
+- mysql - MySQLdb doesn't import the cursors module for its own purposes so it has to be imported in MySQL module utilities before it can be used in dependent modules like the proxysql module family.
+- mysql - fixing unexpected keyword argument 'cursorclass' issue after migration from MySQLdb to PyMySQL.
+- mysql_user: match backticks, single and double quotes when checking user privileges.
+- onepassword_facts - Fixes issues which prevented this module working with 1Password CLI version 0.5.5 (or greater). Older versions of the CLI were deprecated by 1Password and will no longer function.
+- openssl_certificate - ``has_expired`` correctly checks if the certificate is expired or not
+- openssl_certificate - fix Python 3 string/bytes problems for `notBefore`/`notAfter` for self-signed and ownCA providers.
+- openssl_certificate - make sure that extensions are actually present when their values should be checked.
+- openssl_csr - improve ``subject`` validation.
+- openssl_csr - improve error messages for invalid SANs.
+- play order is now applied under all circumstances, fixes
+- remote_management foreman - Fixed issue where it was impossible to createdelete a product because product was missing in dict choices ( https://github.com/ansible/ansible/issues/48594 )
+- rhsm_repository - handle systems without any repos
+- skip invalid plugin after warning in loader
+- urpmi module - fixed issue
+- win_certificate_store - Fix exception handling typo
+- win_chocolatey - Fix issue when parsing a beta Chocolatey install - https://github.com/ansible/ansible/issues/52331
+- win_chocolatey_source - fix bug where a Chocolatey source could not be disabled unless ``source`` was also set - https://github.com/ansible/ansible/issues/50133
+- win_domain - Do not fail if DC is already promoted but a reboot is required, return ``reboot_required: True``
+- win_domain - Fix when running without credential delegated authentication - https://github.com/ansible/ansible/issues/53182
+- win_file - Fix issue when managing hidden files and directories - https://github.com/ansible/ansible/issues/42466
+- winrm - attempt to recover from a WinRM send input failure if possible
+- zabbix_hostmacro: fixes truncation of macro contexts that contain colons (see https://github.com/ansible/ansible/pull/51853)
+
+New Plugins
+-----------
+
+Inventory
+~~~~~~~~~
+
+- vmware_vm_inventory - VMware Guest inventory source
+
+v2.7.8
+======
+
+Release Summary
+---------------
+
+| Release Date: 2019-02-21
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Minor Changes
+-------------
+
+- Raise AnsibleConnectionError on winrm connnection errors
+
+Bugfixes
+--------
+
+- Backport of https://github.com/ansible/ansible/pull/46478 , fixes name collision in haproxy module
+- Fix aws_ec2 inventory plugin code to automatically populate regions when missing as documentation states, also leverage config system vs self default/type validation
+- Fix unexpected error when using Jinja2 native types with non-strict constructed keyed_groups (https://github.com/ansible/ansible/issues/52158).
+- If an ios module uses a section filter on a device which does not support it, retry the command without the filter.
+- acme_challenge_cert_helper - the module no longer crashes when the required ``cryptography`` library cannot be found.
+- azure_rm_managed_disk_facts - added missing implementation of listing managed disks by resource group
+- azure_rm_mysqlserver - fixed issues with passing parameters while updating existing server instance
+- azure_rm_postgresqldatabase - fix force_update bug (https://github.com/ansible/ansible/issues/50978).
+- azure_rm_postgresqldatabase - fix force_update bug.
+- azure_rm_postgresqlserver - fixed issues with passing parameters while updating existing server instance
+- azure_rm_sqlserver - fix for tags support
+- azure_rm_virtualmachine - fixed several crashes in module
+- azure_rm_virtualmachine_facts - fix crash when vm created from custom image
+- azure_rm_virtualmachine_facts - fixed crash related to VM with managed disk attached
+- ec2 - Correctly sets the end date of the Spot Instance request. Sets `ValidUntil` value in proper way so it will be auto-canceled through `spot_wait_timeout` interval.
+- openssl_csr - fixes idempotence problem with PyOpenSSL backend when no Subject Alternative Names were specified.
+- openstack inventory plugin - send logs from sdk to stderr so they do not combine with output
+- psrp - do not display bootstrap wrapper for each module exec run
+- redfish_utils - get standard properties for firmware entries (https://github.com/ansible/ansible/issues/49832)
+- remote home directory - Disallow use of remote home directories that include relative pathing by means of `..` (CVE-2019-3828) (https://github.com/ansible/ansible/pull/52133)
+- ufw - when using ``state: reset`` in check mode, ``ufw --dry-run reset`` was executed, which causes a loss of firewall rules. The ``ufw`` module was adjusted to no longer run ``ufw --dry-run reset`` to prevent this from happening.
+- ufw: make sure that only valid values for ``direction`` are passed on.
+- update GetBiosBootOrder to use standard Redfish resources (https://github.com/ansible/ansible/issues/47571)
+- win become - Fix some scenarios where become failed to create an elevated process
+- win_psmodule - the NuGet package provider will be updated, if needed, to avoid issue under adding a repository
+- yum - Remove incorrect disable_includes error message when using disable_excludes (https://github.com/ansible/ansible/issues/51697)
+- yum - properly handle a proxy config in yum.conf for an unauthenticated proxy
+
+v2.7.7
+======
+
+Release Summary
+---------------
+
+| Release Date: 2019-02-07
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Minor Changes
+-------------
+
+- Allow check_mode with supports_generate_diff capability in cli_config. (https://github.com/ansible/ansible/pull/51417)
+- Fixed typo in vmware documentation fragment. Changed "supported added" to "support added".
+
+Bugfixes
+--------
+
+- All K8S_AUTH_* environment variables are now properly loaded by the k8s lookup plugin
+- Change backup file globbing for network _config modules so backing up one host's config will not delete the backed up config of any host whose hostname is a subset of the first host's hostname (e.g., switch1 and switch11)
+- Fixes bug where nios_a_record wasn't getting deleted if an uppercase named a_record was being passed. (https://github.com/ansible/ansible/pull/51539)
+- aci_aaa_user - Fix setting user description (https://github.com/ansible/ansible/issues/51406)
+- apt_repository - fixed failure under Python 3.7 (https://github.com/ansible/ansible/pull/47219)
+- archive - Fix check if archive is created in path to be removed
+- azure_rm inventory plugin - fix azure batch request (https://github.com/ansible/ansible/pull/50006)
+- cnos_backup - fixed syntax error (https://github.com/ansible/ansible/pull/47219)
+- cnos_image - fixed syntax error (https://github.com/ansible/ansible/pull/47219)
+- consul_kv - minor error-handling bugfix under Python 3.7 (https://github.com/ansible/ansible/pull/47219)
+- copy - align invocation in return value between check and normal mode
+- delegate_facts - fix to work properly under block and include_role (https://github.com/ansible/ansible/pull/51553)
+- docker_swarm_service - fix ``endpoint_mode`` and ``publish`` idempotency.
+- ec2_instance - Correctly adds description when adding a single ENI to the instance
+- ensure we have a XDG_RUNTIME_DIR, as it is not handled correctly by some privilege escalation configurations
+- file - Allow state=touch on file the user does not own https://github.com/ansible/ansible/issues/50943
+- fix ansible-pull hanlding of extra args, complex quoting is needed for inline JSON
+- fix ansible_connect_timeout variable in network_cli,netconf,httpapi and nxos_install_os timeout check
+- netapp_e_storagepool - fixed failure under Python 3.7 (https://github.com/ansible/ansible/pull/47219)
+- onepassword_facts - Fix an issue looking up some 1Password items which have a 'password' attribute alongside the 'fields' attribute, not inside it.
+- prevent import_role from inserting dupe into `roles:` execution when duplicate signature role already exists in the section.
+- reboot - Fix bug where the connection timeout was not reset in the same task after rebooting
+- ssh connection - do not retry with invalid credentials to prevent account lockout (https://github.com/ansible/ansible/issues/48422)
+- systemd - warn when exeuting in a chroot environment rather than failing (https://github.com/ansible/ansible/pull/43904)
+- win_chocolatey - Fix hang when used with proxy for the first time - https://github.com/ansible/ansible/issues/47669
+- win_power_plan - Fix issue where win_power_plan failed on newer Windows 10 builds - https://github.com/ansible/ansible/issues/43827
+
+v2.7.6
+======
+
+Release Summary
+---------------
+
+| Release Date: 2019-01-17
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Minor Changes
+-------------
+
+- Added documentation about using VMware dynamic inventory plugin.
+- Fixed bug around populating host_ip in hostvars in vmware_vm_inventory.
+- Image reference change in Azure VMSS is detected and applied correctly.
+- docker_volume - reverted changed behavior of ``force``, which was released in Ansible 2.7.1 to 2.7.5, and Ansible 2.6.8 to 2.6.11. Volumes are now only recreated if the parameters changed **and** ``force`` is set to ``true`` (instead of or). This is the behavior which has been described in the documentation all the time.
+- set ansible_os_family from name variable in os-release
+- yum and dnf can now handle installing packages from URIs that are proxy redirects and don't end in the .rpm file extension
+
+Bugfixes
+--------
+
+- Added log message at -vvvv when using netconf connection listing connection details.
+- Changes how ansible-connection names socket lock files. They now use the same name as the socket itself, and as such do not lock other attempts on connections to the same host, or cause issues with overly-long hostnames.
+- Fix mandatory statement error for junos modules (https://github.com/ansible/ansible/pull/50138)
+- Moved error in netconf connection plugin from at import to on connection.
+- This reverts some changes from commit 723daf3. If a line is found in the file, exactly or via regexp matching, it must not be added again. `insertafter`/`insertbefore` options are used only when a line is to be inserted, to specify where it must be added.
+- allow using openstack inventory plugin w/o a cache
+- callbacks - Do not filter out exception, warnings, deprecations on failure when using debug (https://github.com/ansible/ansible/issues/47576)
+- certificate_complete_chain - fix behavior when invalid file is parsed while reading intermediate or root certificates.
+- copy - Ensure that the src file contents is converted to unicode in diff information so that it is properly wrapped by AnsibleUnsafeText to prevent unexpected templating of diff data in Python3 (https://github.com/ansible/ansible/issues/45717)
+- correct behaviour of verify_file for vmware inventory plugin, it was always returning True
+- dnf - fix issue where ``conf_file`` was not being loaded properly
+- dnf - fix update_cache combined with install operation to not cause dnf transaction failure
+- docker_container - fix ``network_mode`` idempotency if the ``container:<container-name>`` form is used (as opposed to ``container:<container-id>``) (https://github.com/ansible/ansible/issues/49794)
+- docker_container - warning when non-string env values are found, avoiding YAML parsing issues. Will be made an error in Ansible 2.8. (https://github.com/ansible/ansible/issues/49802)
+- docker_swarm_service - Document ``labels`` and ``container_labels`` with correct type.
+- docker_swarm_service - Document ``limit_memory`` and ``reserve_memory`` correctly on how to specify sizes.
+- docker_swarm_service - Document minimal API version for ``configs`` and ``secrets``.
+- docker_swarm_service - fix use of Docker API so that services are not detected as present if there is an existing service whose name is a substring of the desired service
+- docker_swarm_service - fixing falsely reporting ``update_order`` as changed when option is not used.
+- document old option that was initally missed
+- ec2_instance now respects check mode https://github.com/ansible/ansible/pull/46774
+- fix for network_cli - ansible_command_timeout not working as expected (#49466)
+- fix handling of firewalld port if protocol is missing
+- fix lastpass lookup failure on python 3 (https://github.com/ansible/ansible/issues/42062)
+- flatpak - Fixed Python 2/3 compatibility
+- flatpak - Fixed issue where newer versions of flatpak failed on flatpak removal
+- flatpak_remote - Fixed Python 2/3 compatibility
+- gcp_compute_instance - fix crash when the instance metadata is not set
+- grafana_dashboard - Fix a pair of unicode string handling issues with version checking (https://github.com/ansible/ansible/pull/49194)
+- host execution order - Fix ``reverse_inventory`` not to change the order of the items before reversing on python2 and to not backtrace on python3
+- icinga2_host - fixed the issue with not working ``use_proxy`` option of the module.
+- influxdb_user - An unspecified password now sets the password to blank, except on existing users. This previously caused an unhandled exception.
+- influxdb_user - Fixed unhandled exception when using invalid login credentials (https://github.com/ansible/ansible/issues/50131)
+- openssl_* - fix error when ``path`` contains a file name without path.
+- openssl_csr - fix problem with idempotency of keyUsage option.
+- openssl_pkcs12 - now does proper path expansion for ``ca_certificates``.
+- os_security_group_rule - os_security_group_rule doesn't exit properly when secgroup doesn't exist and state=absent (https://github.com/ansible/ansible/issues/50057)
+- paramiko_ssh - add auth_timeout parameter to ssh.connect when supported by installed paramiko version. This will prevent "Authentication timeout" errors when a slow authentication step (>30s) happens with a host (https://github.com/ansible/ansible/issues/42596)
+- purefa_facts and purefb_facts now correctly adds facts into main ansible_fact dictionary (https://github.com/ansible/ansible/pull/50349)
+- reboot - add appropriate commands to make the plugin work with VMware ESXi (https://github.com/ansible/ansible/issues/48425)
+- reboot - add support for rebooting AIX (https://github.com/ansible/ansible/issues/49712)
+- reboot - gather distribution information in order to support Alpine and other distributions (https://github.com/ansible/ansible/issues/46723)
+- reboot - search common paths for the shutdown command and use the full path to the binary rather than depending on the PATH of the remote system (https://github.com/ansible/ansible/issues/47131)
+- reboot - use a common set of commands for older and newer Solaris and SunOS variants (https://github.com/ansible/ansible/pull/48986)
+- redfish_utils - fix reference to local variable 'systems_service'
+- setup - fix the rounding of the ansible_memtotal_mb value on VMWare vm's (https://github.com/ansible/ansible/issues/49608)
+- vultr_server - fixed multiple ssh keys were not handled.
+- win_copy - Fix copy of a dir that contains an empty directory - https://github.com/ansible/ansible/issues/50077
+- win_firewall_rule - Remove invalid 'bypass' action
+- win_lineinfile - Fix issue where a malformed json block was returned causing an error
+- win_updates - Correctly report changes on success
+
+v2.7.5
+======
+
+Release Summary
+---------------
+
+| Release Date: 2018-12-13
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Minor Changes
+-------------
+
+- Add warning about falling back to jinja2_native=false when Jinja2 version is lower than 2.10.
+- Change the position to search os-release since clearlinux new versions are providing /etc/os-release too
+- Fixed typo in ansible-galaxy info command.
+- Improve the deprecation message for squashing, to not give misleading advice
+- Update docs and return section of vmware_host_service_facts module.
+- ansible-galaxy: properly warn when git isn't found in an installed bin path instead of traceback
+- dnf module properly load and initialize dnf package manager plugins
+- docker_swarm_service: use docker defaults for the ``user`` parameter if it is set to ``null``
+
+Bugfixes
+--------
+
+- ACME modules: improve error messages in some cases (include error returned by server).
+- Added unit test for VMware module_utils.
+- Also check stdout for interpreter errors for more intelligent messages to user
+- Backported support for Devuan-based distribution
+- Convert hostvars data in OpenShift inventory plugin to be serializable by ansible-inventory
+- Fix AttributeError (Python 3 only) when an exception occurs while rendering a template
+- Fix N3K power supply facts (https://github.com/ansible/ansible/pull/49150).
+- Fix NameError nxos_facts (https://github.com/ansible/ansible/pull/48981).
+- Fix VMware module utils for self usage.
+- Fix error in OpenShift inventory plugin when a pod has errored and is empty
+- Fix if the route table changed to none (https://github.com/ansible/ansible/pull/49533)
+- Fix iosxr netconf plugin response namespace (https://github.com/ansible/ansible/pull/49300)
+- Fix issues with nxos_install_os module for nxapi (https://github.com/ansible/ansible/pull/48811).
+- Fix lldp and cdp neighbors information (https://github.com/ansible/ansible/pull/48318)(https://github.com/ansible/ansible/pull/48087)(https://github.com/ansible/ansible/pull/49024).
+- Fix nxos_interface and nxos_linkagg Idempotence issue (https://github.com/ansible/ansible/pull/46437).
+- Fix traceback when updating facts and the fact cache plugin was nonfunctional
+- Fix using vault encrypted data with jinja2_native (https://github.com/ansible/ansible/issues/48950)
+- Fixed: Make sure that the files excluded when extracting the archive are not checked. https://github.com/ansible/ansible/pull/45122
+- Fixes issue where a password parameter was not set to no_log
+- Respect no_log on retry and high verbosity (CVE-2018-16876)
+- aci_rest - Fix issue ignoring custom port
+- acme_account, acme_account_facts - in some cases, it could happen that the modules return information on disabled accounts accidentally returned by the ACME server.
+- docker_swarm - decreased minimal required API version from 1.35 to 1.25; some features require API version 1.30 though.
+- docker_swarm_service: fails because of default "user: root" (https://github.com/ansible/ansible/issues/49199)
+- ec2_metadata_facts - Parse IAM role name from the security credential field since the instance profile name is different
+- fix azure_rm_image module use positional parameter (https://github.com/ansible/ansible/pull/49394)
+- fixes an issue with dict_merge in network utils (https://github.com/ansible/ansible/pull/49474)
+- gcp_utils - fix google auth scoping issue with application default credentials or google cloud engine credentials. Only scope credentials that can be scoped.
+- mail - fix python 2.7 regression
+- openstack - fix parameter handling when cloud provided as dict https://github.com/ansible/ansible/issues/42858
+- os_user - Include domain parameter in user deletion https://github.com/ansible/ansible/issues/42901
+- os_user - Include domain parameter in user lookup https://github.com/ansible/ansible/issues/42901
+- ovirt_storage_connection - comparing passwords breaks idempotency in update_check (https://github.com/ansible/ansible/issues/48933)
+- paramiko_ssh - improve log message to state the connection type
+- reboot - use IndexError instead of TypeError in exception
+- redis cache - Support version 3 of the redis python library (https://github.com/ansible/ansible/issues/49341)
+- sensu_silence - Cast int for expire field to avoid call failure to sensu API.
+- vmware_host_service_facts - handle exception when service package does not have package name.
+- win_nssm - Switched to Argv-ToString for escaping NSSM credentials (https://github.com/ansible/ansible/issues/48728)
+- zabbix_hostmacro - Added missing validate_certs logic for running module against Zabbix servers with untrused SSL certificates (https://github.com/ansible/ansible/issues/47611)
+- zabbix_hostmacro - Fixed support for user macros with context (https://github.com/ansible/ansible/issues/46953)
+
+v2.7.4
+======
+
+Release Summary
+---------------
+
+| Release Date: 2018-11-30
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Bugfixes
+--------
+
+- powershell - add ``lib/ansible/executor/powershell`` to the packaging data
+
+v2.7.3
+======
+
+Release Summary
+---------------
+
+| Release Date: 2018-11-29
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Minor Changes
+-------------
+
+- Document Path and Port are mutually exclusive parameters in wait_for module.
+- Puppet module remove ``--ignorecache`` to allow Puppet 6 support
+- dnf properly support modularity appstream installation via overloaded group modifier syntax
+- proxmox_kvm - fix exception.
+- win_security_policy - warn users to use win_user_right instead when editing ``Privilege Rights``
+
+Bugfixes
+--------
+
+- Fix the issue that FTD HTTP API retries authentication-related HTTP requests.
+- Fix the issue that module fails when the Swagger model does not have required fields.
+- Fix the issue with comparing string-like objects.
+- Fix using omit on play keywords (https://github.com/ansible/ansible/issues/48673)
+- Windows - prevent sensitive content from appearing in scriptblock logging (CVE 2018-16859)
+- apt_key - Disable TTY requirement in GnuPG for the module to work correctly when SSH pipelining is enabled (https://github.com/ansible/ansible/pull/48580)
+- better error message when bad type in config, deal with EVNAR= more gracefully https://github.com/ansible/ansible/issues/22470
+- configuration retrieval would fail on non primed plugins
+- cs_template - Fixed a KeyError on state=extracted.
+- docker_container - fix idempotency problems with docker-py caused by previous ``init`` idempotency fix.
+- docker_container - fix interplay of docker-py version check with argument_spec validation improvements.
+- docker_network - ``driver_options`` containing Python booleans would cause Docker to throw exceptions.
+- ec2_group - Fix comparison of determining which rules to purge by ignoring descriptions - https://github.com/ansible/ansible/issues/47904
+- pip module - fix setuptools/distutils replacement (https://github.com/ansible/ansible/issues/47198)
+- sysvinit - enabling a service should use "defaults" if no runlevels are specified
+
+v2.7.2
+======
+
+Release Summary
+---------------
+
+| Release Date: 2018-11-15
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Minor Changes
+-------------
+
+- Fix documentation for cloning template.
+- Parsing plugin filter may raise TypeError, gracefully handle this exception and let user know about the syntax error in plugin filter file.
+- Scenario guide for VMware HTTP API usage.
+- Update plugin filter documentation.
+- fix yum and dnf autoremove input sanitization to properly warn user if invalid options passed and update documentation to match
+- improve readability and fix privileges names on vmware scenario_clone_template.
+- k8s - updated module documentation to mention how to avoid SSL validation errors
+- yum - when checking for updates, now properly include Obsoletes (both old and new) package data in the module JSON output, fixes https://github.com/ansible/ansible/issues/39978
+
+Bugfixes
+--------
+
+- ACME modules support `POST-as-GET <https://community.letsencrypt.org/t/acme-v2-scheduled-deprecation-of-unauthenticated-resource-gets/74380>`__ and will be able to access Let's Encrypt ACME v2 endpoint after November 1st, 2019.
+- Add force disruptive option nxos_instal_os module (https://github.com/ansible/ansible/pull/47694).
+- Avoid misleading PyVmomi error if requests import fails in vmware module utils.
+- Fix argument spec for NetApp modules that are using the old version
+- Fix consistency issue in grafana_dashboard module where the module would detect absence of 'dashboard' key on dashboard create but not dashboard update.
+- Fix idempotency issues when setting BIOS attributes via redfish_config module (https://github.com/ansible/ansible/pull/47462)
+- Fix issue getting output from failed ios commands when ``check_rc=False``
+- Fix issue with HTTP redirects with redfish_facts module (https://github.com/ansible/ansible/pull/45704)
+- Fix the password lookup when run from a FIPS enabled system.  FIPS forbids the use of md5 but we can use sha1 instead. https://github.com/ansible/ansible/issues/47297
+- Fix trailing command in net_neighbors nxos_facts (https://github.com/ansible/ansible/pull/47548).
+- Fixed an issue where ``os_router`` would attempt to recreate router, because lack of ``enabled_snat`` parameter was treated as difference, if default Neutron policy for snat is set. (https://github.com/ansible/ansible/issues/29903)
+- Fixes issues with source and destination location for na_ontap_snapmirror
+- Handle exception when there is no snapshot available in virtual machine or template while cloning using vmware_guest.
+- Provides flexibility when retrieving redfish facts by not assuming that certains keys exist. Checks first if key exists before attempting to read from it.
+- Restore timeout in set_vm_power_state operation in vmware_guest_powerstate module.
+- aci_access_port_to_interface_policy_leaf_profile - Support missing policy_group
+- aci_interface_policy_leaf_policy_group - Support missing aep
+- aci_switch_leaf_selector - Support empty policy_group
+- ansible-galaxy - support yaml extension for meta file (https://github.com/ansible/ansible/pull/46505)
+- assert - add 'success_msg' to valid args (https://github.com/ansible/ansible/pull/47030)
+- delegate_to - Fix issue where delegate_to was upplied via ``apply`` on an include, where a loop was present on the include
+- django_manage - Changed the return type of the changed variable to bool.
+- docker_container - ``init`` and ``shm_size`` are now checked for idempotency.
+- docker_container - do not fail when removing a container which has ``auto_remove: yes``.
+- docker_container - fix ``ipc_mode`` and ``pid_mode`` idempotency if the ``host:<container-name>`` form is used (as opposed to ``host:<container-id>``).
+- docker_container - fix ``paused`` option (which never worked).
+- docker_container - fixing race condition when ``detach`` and ``auto_remove`` are both ``true``.
+- docker_container - refactored minimal docker-py/API version handling, and fixing such handling of some options.
+- docker_container - some docker versions require containers to be unpaused before stopping or removing. Adds check to do this when docker returns a corresponding error on stopping or removing.
+- docker_swarm - making ``advertise_addr`` optional, as it was already documented.
+- docker_swarm_service - The ``publish``.``mode`` parameter was being ignored if docker-py version was < 3.0.0. Added a parameter validation test.
+- docker_volume - ``labels`` now work (and are a ``dict`` and no longer a ``list``).
+- ec2_instance: - Fixed issue where ebs_optimized was considered sub-option of the network parameter. (https://github.com/ansible/ansible/issues/48159)
+- fix mail notification module when using starttls and py3.7
+- ini_file: Options within no sections aren't included, deleted or modified. These are just unmanged. This pull request solves this. (see https://github.com/ansible/ansible/pull/44324)
+- ldap_attr map to list (https://github.com/ansible/ansible/pull/48009)
+- lvg - fixed an idempotency regression in the lvg module (https://github.com/ansible/ansible/issues/47301)
+- net_put - fix when net_put module leaves temp files in some network OS cases e.g. routerOS
+- nxos_evpn_vni check_mode (https://github.com/ansible/ansible/pull/46612).
+- ovirt_host_network - Fix type conversion (https://github.com/ansible/ansible/pull/47617).
+- ovirt_host_pm - Bug fixes for power management (https://github.com/ansible/ansible/pull/47659).
+- pamd: fix state: args_present idempotence (see https://github.com/ansible/ansible/issues/47197)
+- pamd: fix state: updated idempotence (see https://github.com/ansible/ansible/issues/47083)
+- pamd: update regex to allow leading dash and retain EOF newline (see https://github.com/ansible/ansible/issues/47418)
+- pip - idempotence in check mode now works correctly.
+- reboot - change default reboot time command to prevent hanging on certain systems (https://github.com/ansible/ansible/issues/46562)
+- redfish_config - do not automatically reboot when scheduling a BIOS configuration job
+- remove rendundant path uniquifying in inventory plugins.  This removes use of md5 hashing and fixes inventory plugins when run in FIPS mode.
+- replace renamed exceptions in multiple openstack modules
+- uri - Ensure the ``uri`` module supports async (https://github.com/ansible/ansible/issues/47660)
+- user - do not report changes every time when setting password_lock (https://github.com/ansible/ansible/issues/43670)
+- user - properly remove expiration when set to a negative value (https://github.com/ansible/ansible/issues/47114)
+- user - remove warning when creating a disabled account with '!' or '*' in the password field (https://github.com/ansible/ansible/issues/46334)
+- vmware_host - fixes the retry mechanism of AddHost task.
+- vultr - fixed the handling of an inconsistency in the response from Vultr API when it returns an unexpected empty list instead a empty dict.
+- vultr_server_facts - fixed facts gathering fails if firewall is enabled.
+- win_uri - stop junk output from being returned to Ansible - https://github.com/ansible/ansible/issues/47998
+- yum - fix "package == version" syntax (https://github.com/ansible/ansible/pull/47744)
+
 v2.7.1
 ======
 
@@ -100,6 +831,7 @@ Bugfixes
 - junos - fix terminal prompt regex (https://github.com/ansible/ansible/pull/47096)
 - k8s - allow kubeconfig or context to be set without the other
 - k8s_facts now returns a resources key in all situations
+- k8s_facts: fix handling of unknown resource types
 - kubectl connection - Support empty files with copying to target (https://github.com/ansible/ansible/issues/36725)
 - libvirt_lxc connection - Support empty files with copying to target (https://github.com/ansible/ansible/issues/36725)
 - lineinfile - fix index out of range error when using insertbefore on a file with only one line (https://github.com/ansible/ansible/issues/46043)

changelogs/distribution-file-processing.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+  - distribution - add check to remove incorrect matches of Clear Linux when processing distribution files (https://github.com/ansible/ansible/issues/50009)

changelogs/fragments/15732-wait_for-documentation_fix.yaml

@@ -0,0 +1,2 @@
+minor_changes:
+- Document Path and Port are mutually exclusive parameters in wait_for module.

changelogs/fragments/24633-copy-coherency-between-check-normal-mode.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+  - copy - align invocation in return value between check and normal mode

changelogs/fragments/26937-fix-remove-orphans.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - docker_service - fixed an issue where ``remove_orphans`` doesn't work reliably.

changelogs/fragments/33239-sensu-expire-cast-int.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+- sensu_silence - Cast int for expire field to avoid call failure to sensu API.

changelogs/fragments/36811-fix-lvol-valueerror-with-float-size.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+  - lvol - fixed ValueError when using float size (https://github.com/ansible/ansible/issues/32886, https://github.com/ansible/ansible/issues/29429)

changelogs/fragments/39301-dnsimple_keyerror_record-type.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+- dnsimple - fixed a KeyError exception related to record types handling.

changelogs/fragments/40092-mysql_user-match-backticks.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - "mysql_user: match backticks, single and double quotes when checking user privileges."

changelogs/fragments/44324-ini_file-options-with-no-section-managed.yaml

@@ -0,0 +1,4 @@
+---
+bugfixes:
+- "ini_file: Options within no sections aren't included, deleted or modified. These are just unmanged. This pull request solves this.
+   (see https://github.com/ansible/ansible/pull/44324)"

changelogs/fragments/44412-copy-fix-unwanted-acls.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+  - Fix unwanted ACLs when using copy module (https://github.com/ansible/ansible/issues/44412)

changelogs/fragments/44561-vmware_host_config_manager-fix_key_error.yml

@@ -0,0 +1,2 @@
+bugfixes:
+- Fixed KeyError issue in vmware_host_config_manager when a supported option isn't already set (https://github.com/ansible/ansible/issues/44561).

changelogs/fragments/44988-acme-post-as-get.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+- "ACME modules support `POST-as-GET <https://community.letsencrypt.org/t/acme-v2-scheduled-deprecation-of-unauthenticated-resource-gets/74380>`__ and will be able to access Let's Encrypt ACME v2 endpoint after November 1st, 2019."

changelogs/fragments/45122-fix-unarchive-excluded_files.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+- "Fixed: Make sure that the files excluded when extracting the archive are not checked. https://github.com/ansible/ansible/pull/45122"

changelogs/fragments/45151-fix-os-exception.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+- replace renamed exceptions in multiple openstack modules

changelogs/fragments/45155-vmware-handle_exception.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+- vmware_host_service_facts - handle exception when service package does not have package name.

changelogs/fragments/45155-vmware_host_service_facts-update_docs.yaml

@@ -0,0 +1,2 @@
+minor_changes:
+- Update docs and return section of vmware_host_service_facts module.

changelogs/fragments/45269-fix-vm-crashing.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+- azure_rm_virtualmachine - fixed several crashes in module

changelogs/fragments/45378-fix-sql-tags.yml

@@ -0,0 +1,2 @@
+bugfixes:
+- azure_rm_sqlserver - fix for tags support

changelogs/fragments/45704-fix-redfish_facts-http-redirect.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+- "Fix issue with HTTP redirects with redfish_facts module (https://github.com/ansible/ansible/pull/45704)"

changelogs/fragments/46044-puppet-puppet6-fix.yaml

@@ -0,0 +1,2 @@
+minor_changes:
+- Puppet module remove ``--ignorecache`` to allow Puppet 6 support

changelogs/fragments/46148-provide-redfish_facts-gathering-flexibility.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+- "Provides flexibility when retrieving redfish facts by not assuming that certains keys exist. Checks first if key exists before attempting to read from it."

changelogs/fragments/46478-haproxy-fix-drain-mode.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+- Backport of https://github.com/ansible/ansible/pull/46478 , fixes name collision in haproxy module

changelogs/fragments/46604-ontap-cifs-server-no-log-password.yaml

@@ -0,0 +1,3 @@
+---
+bugfixes:
+  - Fixes issue where a password parameter was not set to no_log

changelogs/fragments/46658-plugin_filter-improve_error_handling.yaml

@@ -0,0 +1,2 @@
+minor_changes:
+- Parsing plugin filter may raise TypeError, gracefully handle this exception and let user know about the syntax error in plugin filter file.

changelogs/fragments/46665-plugin_filter_doc_fix.yaml

@@ -0,0 +1,2 @@
+minor_changes:
+- Update plugin filter documentation.

changelogs/fragments/46700-vmware_doc-standalone_esxi.yaml

@@ -0,0 +1,2 @@
+minor_changes:
+- Fix documentation for cloning template.

changelogs/fragments/46739-gcp-compute-instance-metadata.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+  - "gcp_compute_instance - fix crash when the instance metadata is not set"

changelogs/fragments/46740-gcp-utils-credentials-scoping.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+  - "gcp_utils - fix google auth scoping issue with application default credentials or google cloud engine credentials. Only scope credentials that can be scoped."

changelogs/fragments/46774-ec2_instance_check_mode_fix.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+  - ec2_instance now respects check mode https://github.com/ansible/ansible/pull/46774

changelogs/fragments/47019-mail-fix-py27-regression.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+- mail - fix python 2.7 regression

changelogs/fragments/47030-assert-add-success_msg-to-valid-args.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+    - assert - add 'success_msg' to valid args (https://github.com/ansible/ansible/pull/47030)

changelogs/fragments/47117-vmware_doc-http_api_usage.yaml

@@ -0,0 +1,2 @@
+minor_changes:
+- Scenario guide for VMware HTTP API usage.

changelogs/fragments/47198-fix-setuptools-distutils.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+  - "pip module - fix setuptools/distutils replacement (https://github.com/ansible/ansible/issues/47198)"

changelogs/fragments/47213-onepassword_facts_fix_password_lookup.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+  - onepassword_facts - Fix an issue looking up some 1Password items which have a 'password' attribute alongside the 'fields' attribute, not inside it.

changelogs/fragments/47300-ios-check_rc.yaml

@@ -0,0 +1,3 @@
+---
+bugfixes:
+  - Fix issue getting output from failed ios commands when ``check_rc=False``

changelogs/fragments/47313-vmware-fix_module_error.yaml

@@ -0,0 +1,4 @@
+---
+bugfixes:
+  - Fix VMware module utils for self usage.
+  - Added unit test for VMware module_utils.

changelogs/fragments/47313-vmware_utils-handle_requests_import_error.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+- Avoid misleading PyVmomi error if requests import fails in vmware module utils.

changelogs/fragments/47459_grafana_dashboard_consistency_fix.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+  - Fix consistency issue in grafana_dashboard module where the module would detect absence of 'dashboard' key on dashboard create but not dashboard update.

changelogs/fragments/47462-fix-redfish_config-idempotency.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+- "Fix idempotency issues when setting BIOS attributes via redfish_config module (https://github.com/ansible/ansible/pull/47462)"

changelogs/fragments/47508-openssl_certificate-fix-not-before-after.yml

@@ -0,0 +1,2 @@
+bugfixes:
+- "openssl_certificate - fix Python 3 string/bytes problems for `notBefore`/`notAfter` for self-signed and ownCA providers."

changelogs/fragments/47563-vmware_host-refactor_SSL_thumbprint.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+- vmware_host - fixes the retry mechanism of AddHost task.

changelogs/fragments/47608-docker_swarm-advertise_addr.yml

@@ -0,0 +1,3 @@
+---
+bugfixes:
+- "docker_swarm - making ``advertise_addr`` optional, as it was already documented."

changelogs/fragments/47621-bugfix-for-na-ontap-snapmirror.yaml

@@ -0,0 +1,3 @@
+---
+bugfixes:
+  - Fixes issues with source and destination location for na_ontap_snapmirror

changelogs/fragments/47668-aci_switch_leaf_selector-support_empty_policy_group.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+- aci_switch_leaf_selector - Support empty policy_group

changelogs/fragments/47689-yum-fix-version-syntax.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+  - yum - fix "package == version" syntax (https://github.com/ansible/ansible/pull/47744)

changelogs/fragments/47693-fix-argument-spec-for-netapp-modules.yaml

@@ -0,0 +1,3 @@
+---
+bugfixes:
+  - Fix argument spec for NetApp modules that are using the old version

changelogs/fragments/47695-pamd-fix-idempotence-and-parsing-issues.yml

@@ -0,0 +1,5 @@
+---
+bugfixes:
+- "pamd: update regex to allow leading dash and retain EOF newline (see https://github.com/ansible/ansible/issues/47418)"
+- "pamd: fix state: updated idempotence (see https://github.com/ansible/ansible/issues/47083)"
+- "pamd: fix state: args_present idempotence (see https://github.com/ansible/ansible/issues/47197)"

changelogs/fragments/47711-docker_container-minimal-version-checks.yml

@@ -0,0 +1,2 @@
+bugfixes:
+- "docker_container - refactored minimal docker-py/API version handling, and fixing such handling of some options."

changelogs/fragments/47712-docker_container-detach-auto-remove.yml

@@ -0,0 +1,2 @@
+bugfixes:
+- "docker_container - fixing race condition when ``detach`` and ``auto_remove`` are both ``true``."

changelogs/fragments/47722-vmware_guest_powerstate-restore_timeout.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+- Restore timeout in set_vm_power_state operation in vmware_guest_powerstate module.

changelogs/fragments/47747-ftd-http-api-fixes.yaml

@@ -0,0 +1,4 @@
+bugfixes:
+- Fix the issue that FTD HTTP API retries authentication-related HTTP requests.
+- Fix the issue that module fails when the Swagger model does not have required fields.
+- Fix the issue with comparing string-like objects.

changelogs/fragments/47809-module_utils_mysql-unexpected-keyword-argument-cursorclass.yml

@@ -0,0 +1,2 @@
+bugfixes:
+- mysql - fixing unexpected keyword argument 'cursorclass' issue after migration from MySQLdb to PyMySQL.

changelogs/fragments/47889-vmware_doc-fix_privilege_names.yaml

@@ -0,0 +1,2 @@
+minor_changes:
+- improve readability and fix privileges names on vmware scenario_clone_template.

changelogs/fragments/47900-docker_container-paused.yml

@@ -0,0 +1,2 @@
+bugfixes:
+- "docker_container - fix ``paused`` option (which never worked)."

changelogs/fragments/47920-vmware_guest-handle_no_root_snapshot.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+- Handle exception when there is no snapshot available in virtual machine or template while cloning using vmware_guest.

changelogs/fragments/47938-docker_swarm_service-requirements.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+- "docker_swarm_service - The ``publish``.``mode`` parameter was being ignored if docker-py version was < 3.0.0. Added a parameter validation test."

changelogs/fragments/47997-docker_container-ipc-pid-mode.yml

@@ -0,0 +1,2 @@
+bugfixes:
+- "docker_container - fix ``ipc_mode`` and ``pid_mode`` idempotency if the ``host:<container-name>`` form is used (as opposed to ``host:<container-id>``)."

changelogs/fragments/48009-ldap_attr-list.yml

@@ -0,0 +1,3 @@
+---
+bugfixes:
+  - ldap_attr map to list (https://github.com/ansible/ansible/pull/48009)

changelogs/fragments/48036-vultr-fix-empty-list-handling.yaml

@@ -0,0 +1,3 @@
+bugfixes:
+  - vultr - fixed the handling of an inconsistency in the response from
+    Vultr API when it returns an unexpected empty list instead a empty dict.

changelogs/fragments/48061-docker_container-auto_removal.yml

@@ -0,0 +1,2 @@
+bugfixes:
+- "docker_container - do not fail when removing a container which has ``auto_remove: yes``."

changelogs/fragments/48148_net_put_cleanup.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+- "net_put - fix when net_put module leaves temp files in some network OS cases e.g. routerOS"

changelogs/fragments/48306-ansible-connection-json

@@ -0,0 +1,4 @@
+---
+bugfixes:
+- Use custom JSON encoder in conneciton.py so that ansible objects (AnsibleVaultEncryptedUnicode, for example)
+  can be sent to the persistent connection process

changelogs/fragments/48317-do-not-auto-reboot-with-redfish_config-bios-changes

@@ -0,0 +1,2 @@
+bugfixes:
+  - redfish_config - do not automatically reboot when scheduling a BIOS configuration job

changelogs/fragments/48341-ebs-optimized-ec2-instance.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+  - "ec2_instance: - Fixed issue where ebs_optimized was considered sub-option of the network parameter. (https://github.com/ansible/ansible/issues/48159)"

changelogs/fragments/48342-vultr_server_facts-fix-firewall-group.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - vultr_server_facts - fixed facts gathering fails if firewall is enabled.

changelogs/fragments/48474-k8s-module-docs-update.yaml

@@ -0,0 +1,2 @@
+minor_changes:
+  - k8s - updated module documentation to mention how to avoid SSL validation errors

changelogs/fragments/48536-docker_volume-labels.yml

@@ -0,0 +1,2 @@
+bugfixes:
+- "docker_volume - ``labels`` now work (and are a ``dict`` and no longer a ``list``)."

changelogs/fragments/48551-docker_container-idempotency.yml

@@ -0,0 +1,2 @@
+bugfixes:
+- "docker_container - ``init`` and ``shm_size`` are now checked for idempotency."

changelogs/fragments/48580-apt_key-no-tty.yaml

@@ -0,0 +1,3 @@
+bugfixes:
+  - apt_key - Disable TTY requirement in GnuPG for the module to work correctly
+    when SSH pipelining is enabled (https://github.com/ansible/ansible/pull/48580)

changelogs/fragments/48590-docker_container-unpause-stop.yml

@@ -0,0 +1,3 @@
+bugfixes:
+- "docker_container - some docker versions require containers to be unpaused before stopping or removing.
+   Adds check to do this when docker returns a corresponding error on stopping or removing."

changelogs/fragments/48673-fix-omit-on-play-keywords.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+  - Fix using omit on play keywords (https://github.com/ansible/ansible/issues/48673)

changelogs/fragments/48675-cs_template-fix-keyerror-state-extracted.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - cs_template - Fixed a KeyError on state=extracted.

changelogs/fragments/48728-win_nssm-credential-quoting.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - "win_nssm - Switched to Argv-ToString for escaping NSSM credentials (https://github.com/ansible/ansible/issues/48728)"

changelogs/fragments/48730-zabbix_hostmacro-fixes.yml

@@ -0,0 +1,4 @@
+---
+bugfixes:
+  - zabbix_hostmacro - Added missing validate_certs logic for running module against Zabbix servers with untrused SSL certificates (https://github.com/ansible/ansible/issues/47611)
+  - zabbix_hostmacro - Fixed support for user macros with context (https://github.com/ansible/ansible/issues/46953)

changelogs/fragments/48792-templar-fix-AttributeError.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - Fix AttributeError (Python 3 only) when an exception occurs while rendering a template

changelogs/fragments/48809-sysvinit_defaults_if_no_runlevels.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+  - sysvinit - enabling a service should use "defaults" if no runlevels are specified

changelogs/fragments/48836-proxymox_kvm-dictionary.yaml

@@ -0,0 +1,2 @@
+minor_changes:
+- proxmox_kvm - fix exception.

changelogs/fragments/48950-vault-encrypted-data-native-jinja.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+  - Fix using vault encrypted data with jinja2_native (https://github.com/ansible/ansible/issues/48950)

changelogs/fragments/49078-docker_container-min-version-fix.yml

@@ -0,0 +1,3 @@
+bugfixes:
+- "docker_container - fix idempotency problems with docker-py caused by previous ``init`` idempotency fix."
+- "docker_container - fix interplay of docker-py version check with argument_spec validation improvements."

changelogs/fragments/49084-influxdb_user-default-password-fix.yaml

@@ -0,0 +1,3 @@
+---
+bugfixes:
+  - influxdb_user - An unspecified password now sets the password to blank, except on existing users. This previously caused an unhandled exception.

changelogs/fragments/49096-ansible-galaxy-fix_info_typo.yaml

@@ -0,0 +1,2 @@
+minor_changes:
+- Fixed typo in ansible-galaxy info command.

changelogs/fragments/49113-iam-role-arn-parsing-updated.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - ec2_metadata_facts - Parse IAM role name from the security credential field since the instance profile name is different

changelogs/fragments/49123-backport-devuan-support.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - Backported support for Devuan-based distribution

changelogs/fragments/49191-module_utils_mysql-unexpected-keyword-argument-cursorclass.yml

@@ -0,0 +1,2 @@
+bugfixes:
+- mysql - MySQLdb doesn't import the cursors module for its own purposes so it has to be imported in MySQL module utilities before it can be used in dependent modules like the proxysql module family.

changelogs/fragments/49194-grafana_string_handling_fix.yml

@@ -0,0 +1,3 @@
+---
+bugfixes:
+  - grafana_dashboard - Fix a pair of unicode string handling issues with version checking (https://github.com/ansible/ansible/pull/49194)

changelogs/fragments/49212-require-git-ansible-galaxy.yaml

@@ -0,0 +1,2 @@
+minor_changes:
+ - "ansible-galaxy: properly warn when git isn't found in an installed bin path instead of traceback"

changelogs/fragments/49235-docker_swarm_service-user-default.yaml

@@ -0,0 +1,5 @@
+---
+bugfixes:
+  - 'docker_swarm_service: fails because of default "user: root" (https://github.com/ansible/ansible/issues/49199)'
+minor_changes:
+  - 'docker_swarm_service: use docker defaults for the ``user`` parameter if it is set to ``null``'

changelogs/fragments/49266-acme-error-messages.yml

@@ -0,0 +1,2 @@
+bugfixes:
+- "ACME modules: improve error messages in some cases (include error returned by server)."

changelogs/fragments/49299-openshift-inventory-plugin-empty-pods-and-serialization.yaml

@@ -0,0 +1,4 @@
+---
+bugfixes:
+- Convert hostvars data in OpenShift inventory plugin to be serializable by ansible-inventory
+- Fix error in OpenShift inventory plugin when a pod has errored and is empty