New release v2.8.20

Change:
- Add missing no_log on fields and subfields which should have it.
- Update several changelogs with CVE id.

Signed-off-by: Rick Elrod <rick@elrod.me>

.azure-pipelines/azure-pipelines.yml

@@ -0,0 +1,219 @@
+trigger:
+  batch: true
+  branches:
+    include:
+      - devel
+      - stable-*
+
+pr:
+  autoCancel: true
+  branches:
+    include:
+      - devel
+      - stable-*
+
+schedules:
+  - cron: 0 7 * * *
+    displayName: Nightly
+    always: true
+    branches:
+      include:
+        - devel
+        - stable-*
+
+variables:
+  - name: checkoutPath
+    value: ansible
+  - name: coverageBranches
+    value: devel
+  - name: pipelinesCoverage
+    value: coverage
+  - name: entryPoint
+    value: test/utils/shippable/shippable.sh
+  - name: fetchDepth
+    value: 500
+
+resources:
+  containers:
+    - container: default
+      image: quay.io/ansible/azure-pipelines-test-container:1.8.0
+
+pool: Standard
+
+stages:
+  - stage: Sanity
+    dependsOn: []
+    jobs:
+      - template: templates/matrix.yml
+        parameters:
+          nameFormat: Test {0}
+          testFormat: sanity/{0}
+          targets:
+            - test: 1
+            - test: 2
+            - test: 3
+            - test: 4
+  - stage: Units
+    dependsOn: []
+    jobs:
+      - template: templates/matrix.yml
+        parameters:
+          nameFormat: Python {0}
+          testFormat: units/{0}
+          targets:
+            - test: 2.6
+            - test: 2.7
+            - test: 3.5
+            - test: 3.6
+            - test: 3.7
+            - test: 3.8
+          groups:
+            - 1
+            - 2
+  - stage: Windows
+    dependsOn: []
+    jobs:
+      - template: templates/matrix.yml
+        parameters:
+          nameFormat: Server {0}
+          testFormat: windows/{0}
+          targets:
+            - test: 2012
+            - test: 2012-R2
+            - test: 2016
+            - test: 2019
+          groups:
+            - 1
+            - 2
+            - 3
+            - 4
+            - 5
+            - 6
+            - 7
+  - stage: Network
+    dependsOn: []
+    jobs:
+      - template: templates/matrix.yml
+        parameters:
+          nameFormat: Python {0}
+          testFormat: network/{0}
+          targets:
+            - test: ''
+  - stage: Remote
+    dependsOn: []
+    jobs:
+      - template: templates/matrix.yml
+        parameters:
+          targets:
+            - name: OS X 10.11
+              test: osx/10.11
+            - name: RHEL 7.9
+              test: rhel/7.9
+            - name: RHEL 8.2
+              test: rhel/8.2
+            - name: FreeBSD 11.1
+              test: freebsd/11.1
+            - name: FreeBSD 12.0
+              test: freebsd/12.0
+          groups:
+            - 1
+            - 2
+            - 3
+            - 4
+  - stage: Docker
+    dependsOn: []
+    jobs:
+      - template: templates/matrix.yml
+        parameters:
+          testFormat: linux/{0}
+          targets:
+            - name: CentOS 6
+              test: centos6
+            - name: CentOS 7
+              test: centos7
+            - name: Fedora 29
+              test: fedora29
+            - name: Fedora 30
+              test: fedora30
+            - name: openSUSE 15 py2
+              test: opensuse15py2
+            - name: openSUSE 15 py3
+              test: opensuse15
+            - name: Ubuntu 16.04
+              test: ubuntu1604
+            - name: Ubuntu 18.04
+              test: ubuntu1804
+          groups:
+            - 1
+            - 2
+            - 3
+            - 4
+  - stage: AWS
+    dependsOn: []
+    jobs:
+      - template: templates/matrix.yml
+        parameters:
+          nameFormat: Python {0}
+          testFormat: aws/{0}
+          targets:
+            - test: 2.7
+            - test: 3.6
+          groups:
+            - 1
+            - 2
+  - stage: vCenter
+    dependsOn: []
+    jobs:
+      - template: templates/matrix.yml
+        parameters:
+          nameFormat: Python {0}
+          testFormat: vcenter/{0}/1
+          targets:
+            - test: 2.7
+            - test: 3.6
+  - stage: CloudStack
+    dependsOn: []
+    jobs:
+      - template: templates/matrix.yml
+        parameters:
+          nameFormat: Python {0}
+          testFormat: cs/{0}/1
+          targets:
+            - test: 2.7
+            - test: 3.6
+  - stage: Cloud
+    dependsOn: []
+    jobs:
+      - template: templates/matrix.yml
+        parameters:
+          nameFormat: Python {0}
+          testFormat: cloud/{0}/1
+          targets:
+            - test: 2.7
+            - test: 3.6
+  - stage: Hetzner
+    dependsOn: []
+    jobs:
+      - template: templates/matrix.yml
+        parameters:
+          nameFormat: Python {0}
+          testFormat: hcloud/{0}/1
+          targets:
+            - test: 2.7
+            - test: 3.6
+  - stage: Summary
+    condition: succeededOrFailed()
+    dependsOn:
+      - Sanity
+      - Units
+      - Windows
+      - Network
+      - Remote
+      - Docker
+      - AWS
+      - vCenter
+      - CloudStack
+      - Cloud
+      - Hetzner
+    jobs:
+      - template: templates/coverage.yml

.azure-pipelines/scripts/aggregate-coverage.sh

@@ -0,0 +1,20 @@
+#!/usr/bin/env bash
+# Aggregate code coverage results for later processing.
+
+set -o pipefail -eu
+
+agent_temp_directory="$1"
+
+PATH="${PWD}/bin:${PATH}"
+
+mkdir "${agent_temp_directory}/coverage/"
+
+options=(--venv --venv-system-site-packages --color -v)
+
+ansible-test coverage combine --export "${agent_temp_directory}/coverage/" "${options[@]}"
+
+if ansible-test coverage analyze targets generate --help >/dev/null 2>&1; then
+    # Only analyze coverage if the installed version of ansible-test supports it.
+    # Doing so allows this script to work unmodified for multiple Ansible versions.
+    ansible-test coverage analyze targets generate "${agent_temp_directory}/coverage/coverage-analyze-targets.json" "${options[@]}"
+fi

.azure-pipelines/scripts/combine-coverage.py

@@ -0,0 +1,60 @@
+#!/usr/bin/env python
+"""
+Combine coverage data from multiple jobs, keeping the data only from the most recent attempt from each job.
+Coverage artifacts must be named using the format: "Coverage $(System.JobAttempt) {StableUniqueNameForEachJob}"
+The recommended coverage artifact name format is: Coverage $(System.JobAttempt) $(System.StageDisplayName) $(System.JobDisplayName)
+Keep in mind that Azure Pipelines does not enforce unique job display names (only names).
+It is up to pipeline authors to avoid name collisions when deviating from the recommended format.
+"""
+
+from __future__ import (absolute_import, division, print_function)
+__metaclass__ = type
+
+import os
+import re
+import shutil
+import sys
+
+
+def main():
+    """Main program entry point."""
+    source_directory = sys.argv[1]
+
+    if '/ansible_collections/' in os.getcwd():
+        output_path = "tests/output"
+    else:
+        output_path = "test/results"
+
+    destination_directory = os.path.join(output_path, 'coverage')
+
+    if not os.path.exists(destination_directory):
+        os.makedirs(destination_directory)
+
+    jobs = {}
+    count = 0
+
+    for name in os.listdir(source_directory):
+        match = re.search('^Coverage (?P<attempt>[0-9]+) (?P<label>.+)$', name)
+        label = match.group('label')
+        attempt = int(match.group('attempt'))
+        jobs[label] = max(attempt, jobs.get(label, 0))
+
+    for label, attempt in jobs.items():
+        name = 'Coverage {attempt} {label}'.format(label=label, attempt=attempt)
+        source = os.path.join(source_directory, name)
+        source_files = os.listdir(source)
+
+        for source_file in source_files:
+            source_path = os.path.join(source, source_file)
+            destination_path = os.path.join(destination_directory, source_file + '.' + label)
+            print('"%s" -> "%s"' % (source_path, destination_path))
+            shutil.copyfile(source_path, destination_path)
+            count += 1
+
+    print('Coverage file count: %d' % count)
+    print('##vso[task.setVariable variable=coverageFileCount]%d' % count)
+    print('##vso[task.setVariable variable=outputPath]%s' % output_path)
+
+
+if __name__ == '__main__':
+    main()

.azure-pipelines/scripts/process-results.sh

@@ -0,0 +1,24 @@
+#!/usr/bin/env bash
+# Check the test results and set variables for use in later steps.
+
+set -o pipefail -eu
+
+if [[ "$PWD" =~ /ansible_collections/ ]]; then
+    output_path="tests/output"
+else
+    output_path="test/results"
+fi
+
+echo "##vso[task.setVariable variable=outputPath]${output_path}"
+
+if compgen -G "${output_path}"'/junit/*.xml' > /dev/null; then
+    echo "##vso[task.setVariable variable=haveTestResults]true"
+fi
+
+if compgen -G "${output_path}"'/bot/ansible-test-*' > /dev/null; then
+    echo "##vso[task.setVariable variable=haveBotResults]true"
+fi
+
+if compgen -G "${output_path}"'/coverage/*' > /dev/null; then
+    echo "##vso[task.setVariable variable=haveCoverageData]true"
+fi

.azure-pipelines/scripts/publish-codecov.sh

@@ -0,0 +1,27 @@
+#!/usr/bin/env bash
+# Upload code coverage reports to codecov.io.
+# Multiple coverage files from multiple languages are accepted and aggregated after upload.
+# Python coverage, as well as PowerShell and Python stubs can all be uploaded.
+
+set -o pipefail -eu
+
+output_path="$1"
+
+curl --silent --show-error https://codecov.io/bash > codecov.sh
+
+for file in "${output_path}"/reports/coverage*.xml; do
+    name="${file}"
+    name="${name##*/}"  # remove path
+    name="${name##coverage=}"  # remove 'coverage=' prefix if present
+    name="${name%.xml}"  # remove '.xml' suffix
+
+    bash codecov.sh \
+        -f "${file}" \
+        -n "${name}" \
+        -X coveragepy \
+        -X gcov \
+        -X fix \
+        -X search \
+        -X xcode \
+        || echo "Failed to upload code coverage report to codecov.io: ${file}"
+done

.azure-pipelines/scripts/report-coverage.sh

@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+# Generate code coverage reports for uploading to Azure Pipelines and codecov.io.
+
+set -o pipefail -eu
+
+PATH="${PWD}/bin:${PATH}"
+
+if ! ansible-test --help >/dev/null 2>&1; then
+    # Install the devel version of ansible-test for generating code coverage reports.
+    # This is only used by Ansible Collections, which are typically tested against multiple Ansible versions (in separate jobs).
+    # Since a version of ansible-test is required that can work the output from multiple older releases, the devel version is used.
+    pip install https://github.com/ansible/ansible/archive/devel.tar.gz --disable-pip-version-check
+fi
+
+ansible-test coverage xml --stub --venv --venv-system-site-packages --color -v

.azure-pipelines/scripts/run-tests.sh

@@ -0,0 +1,34 @@
+#!/usr/bin/env bash
+# Configure the test environment and run the tests.
+
+set -o pipefail -eu
+
+entry_point="$1"
+test="$2"
+read -r -a coverage_branches <<< "$3"  # space separated list of branches to run code coverage on for scheduled builds
+
+export COMMIT_MESSAGE
+export COMPLETE
+export COVERAGE
+export IS_PULL_REQUEST
+
+if [ "${SYSTEM_PULLREQUEST_TARGETBRANCH:-}" ]; then
+    IS_PULL_REQUEST=true
+    COMMIT_MESSAGE=$(git log --format=%B -n 1 HEAD^2)
+else
+    IS_PULL_REQUEST=
+    COMMIT_MESSAGE=$(git log --format=%B -n 1 HEAD)
+fi
+
+COMPLETE=
+COVERAGE=
+
+if [ "${BUILD_REASON}" = "Schedule" ]; then
+    COMPLETE=yes
+
+    if printf '%s\n' "${coverage_branches[@]}" | grep -q "^${BUILD_SOURCEBRANCHNAME}$"; then
+        COVERAGE=yes
+    fi
+fi
+
+"${entry_point}" "${test}" 2>&1 | "$(dirname "$0")/time-command.py"

.azure-pipelines/scripts/time-command.py

@@ -0,0 +1,25 @@
+#!/usr/bin/env python
+"""Prepends a relative timestamp to each input line from stdin and writes it to stdout."""
+
+from __future__ import (absolute_import, division, print_function)
+__metaclass__ = type
+
+import sys
+import time
+
+
+def main():
+    """Main program entry point."""
+    start = time.time()
+
+    sys.stdin.reconfigure(errors='surrogateescape')
+    sys.stdout.reconfigure(errors='surrogateescape')
+
+    for line in sys.stdin:
+        seconds = time.time() - start
+        sys.stdout.write('%02d:%02d %s' % (seconds // 60, seconds % 60, line))
+        sys.stdout.flush()
+
+
+if __name__ == '__main__':
+    main()

.azure-pipelines/templates/coverage.yml

@@ -0,0 +1,39 @@
+# This template adds a job for processing code coverage data.
+# It will upload results to Azure Pipelines and codecov.io.
+# Use it from a job stage that completes after all other jobs have completed.
+# This can be done by placing it in a separate summary stage that runs after the test stage(s) have completed.
+
+jobs:
+  - job: Coverage
+    displayName: Code Coverage
+    container: default
+    workspace:
+      clean: all
+    steps:
+      - checkout: self
+        fetchDepth: $(fetchDepth)
+        path: $(checkoutPath)
+      - task: DownloadPipelineArtifact@2
+        displayName: Download Coverage Data
+        inputs:
+          path: coverage/
+          patterns: "Coverage */*=coverage.combined"
+      - bash: .azure-pipelines/scripts/combine-coverage.py coverage/
+        displayName: Combine Coverage Data
+      - bash: .azure-pipelines/scripts/report-coverage.sh
+        displayName: Generate Coverage Report
+        condition: gt(variables.coverageFileCount, 0)
+      - task: PublishCodeCoverageResults@1
+        inputs:
+          codeCoverageTool: Cobertura
+          # Azure Pipelines only accepts a single coverage data file.
+          # That means only Python or PowerShell coverage can be uploaded, but not both.
+          # Set the "pipelinesCoverage" variable to determine which type is uploaded.
+          # Use "coverage" for Python and "coverage-powershell" for PowerShell.
+          summaryFileLocation: "$(outputPath)/reports/$(pipelinesCoverage).xml"
+        displayName: Publish to Azure Pipelines
+        condition: gt(variables.coverageFileCount, 0)
+      - bash: .azure-pipelines/scripts/publish-codecov.sh "$(outputPath)"
+        displayName: Publish to codecov.io
+        condition: gt(variables.coverageFileCount, 0)
+        continueOnError: true

.azure-pipelines/templates/matrix.yml

@@ -0,0 +1,55 @@
+# This template uses the provided targets and optional groups to generate a matrix which is then passed to the test template.
+# If this matrix template does not provide the required functionality, consider using the test template directly instead.
+
+parameters:
+  # A required list of dictionaries, one per test target.
+  # Each item in the list must contain a "test" or "name" key.
+  # Both may be provided. If one is omitted, the other will be used.
+  - name: targets
+    type: object
+
+  # An optional list of values which will be used to multiply the targets list into a matrix.
+  # Values can be strings or numbers.
+  - name: groups
+    type: object
+    default: []
+
+  # An optional format string used to generate the job name.
+  # - {0} is the name of an item in the targets list.
+  - name: nameFormat
+    type: string
+    default: "{0}"
+
+  # An optional format string used to generate the test name.
+  # - {0} is the name of an item in the targets list.
+  - name: testFormat
+    type: string
+    default: "{0}"
+
+  # An optional format string used to add the group to the job name.
+  # {0} is the formatted name of an item in the targets list.
+  # {{1}} is the group -- be sure to include the double "{{" and "}}".
+  - name: nameGroupFormat
+    type: string
+    default: "{0} - {{1}}"
+
+  # An optional format string used to add the group to the test name.
+  # {0} is the formatted test of an item in the targets list.
+  # {{1}} is the group -- be sure to include the double "{{" and "}}".
+  - name: testGroupFormat
+    type: string
+    default: "{0}/{{1}}"
+
+jobs:
+  - template: test.yml
+    parameters:
+      jobs:
+        - ${{ if eq(length(parameters.groups), 0) }}:
+          - ${{ each target in parameters.targets }}:
+            - name: ${{ format(parameters.nameFormat, coalesce(target.name, target.test)) }}
+              test: ${{ format(parameters.testFormat, coalesce(target.test, target.name)) }}
+        - ${{ if not(eq(length(parameters.groups), 0)) }}:
+          - ${{ each group in parameters.groups }}:
+            - ${{ each target in parameters.targets }}:
+              - name: ${{ format(format(parameters.nameGroupFormat, parameters.nameFormat), coalesce(target.name, target.test), group) }}
+                test: ${{ format(format(parameters.testGroupFormat, parameters.testFormat), coalesce(target.test, target.name), group) }}

.azure-pipelines/templates/test.yml

@@ -0,0 +1,45 @@
+# This template uses the provided list of jobs to create test one or more test jobs.
+# It can be used directly if needed, or through the matrix template.
+
+parameters:
+  # A required list of dictionaries, one per test job.
+  # Each item in the list must contain a "job" and "name" key.
+  - name: jobs
+    type: object
+
+jobs:
+  - ${{ each job in parameters.jobs }}:
+    - job: test_${{ replace(replace(replace(job.test, '/', '_'), '.', '_'), '-', '_') }}
+      displayName: ${{ job.name }}
+      container: default
+      workspace:
+        clean: all
+      steps:
+        - checkout: self
+          fetchDepth: $(fetchDepth)
+          path: $(checkoutPath)
+        - bash: .azure-pipelines/scripts/run-tests.sh "$(entryPoint)" "${{ job.test }}" "$(coverageBranches)"
+          displayName: Run Tests
+        - bash: .azure-pipelines/scripts/process-results.sh
+          condition: succeededOrFailed()
+          displayName: Process Results
+        - bash: .azure-pipelines/scripts/aggregate-coverage.sh "$(Agent.TempDirectory)"
+          condition: eq(variables.haveCoverageData, 'true')
+          displayName: Aggregate Coverage Data
+        - task: PublishTestResults@2
+          condition: eq(variables.haveTestResults, 'true')
+          inputs:
+            testResultsFiles: "$(outputPath)/junit/*.xml"
+          displayName: Publish Test Results
+        - task: PublishPipelineArtifact@1
+          condition: eq(variables.haveBotResults, 'true')
+          displayName: Publish Bot Results
+          inputs:
+            targetPath: "$(outputPath)/bot/"
+            artifactName: "Bot $(System.JobAttempt) $(System.StageDisplayName) $(System.JobDisplayName)"
+        - task: PublishPipelineArtifact@1
+          condition: eq(variables.haveCoverageData, 'true')
+          displayName: Publish Coverage Data
+          inputs:
+            targetPath: "$(Agent.TempDirectory)/coverage/"
+            artifactName: "Coverage $(System.JobAttempt) $(System.StageDisplayName) $(System.JobDisplayName)"

.github/BOTMETA.yml

@@ -1411,8 +1411,6 @@ files:
     notified: mattclay
   hacking/report.py:
     notified: mattclay
-  shippable.yml:
-    notified: mattclay
   tox.ini:
     notified: mattclay
 macros:

MANIFEST.in

@@ -3,7 +3,6 @@ include COPYING
 include SYMLINK_CACHE.json
 include requirements.txt
 include .coveragerc
-include shippable.yml
 include tox.ini
 include bin/ansible-test
 include examples/hosts

Makefile

@@ -51,7 +51,7 @@ RELEASE ?= 1
 
 # Get the branch information from git
 ifneq ($(shell which git),)
-GIT_DATE := $(shell git log -n 1 --format="%ai")
+GIT_DATE := $(shell git log -n 1 --format="%ci")
 GIT_HASH := $(shell git log -n 1 --format="%h")
 GIT_BRANCH := $(shell git rev-parse --abbrev-ref HEAD | sed 's/[-_.\/]//g')
 GITINFO = .$(GIT_HASH).$(GIT_BRANCH)
@@ -60,7 +60,7 @@ GITINFO = ""
 endif
 
 ifeq ($(shell echo $(OS) | egrep -c 'Darwin|FreeBSD|OpenBSD|DragonFly'),1)
-DATE := $(shell date -j -r $(shell git log -n 1 --format="%at") +%Y%m%d%H%M)
+DATE := $(shell date -j -r $(shell git log -n 1 --format="%ct") +%Y%m%d%H%M)
 CPUS ?= $(shell sysctl hw.ncpu|awk '{print $$2}')
 else
 DATE := $(shell date --utc --date="$(GIT_DATE)" +%Y%m%d%H%M)

README.rst

@@ -84,7 +84,7 @@ and has contributions from over 4000 users (and growing). Thanks everyone!
 License
 =======
 
-GNU General Public License v3.0
+GNU General Public License v3.0 or later
 
 See `COPYING <COPYING>`_ to see the full text.
 
@@ -92,8 +92,8 @@ See `COPYING <COPYING>`_ to see the full text.
    :target: https://pypi.org/project/ansible
 .. |Docs badge| image:: https://img.shields.io/badge/docs-latest-brightgreen.svg
    :target: https://docs.ansible.com/ansible/latest/
-.. |Build Status| image:: https://api.shippable.com/projects/573f79d02a8192902e20e34b/badge?branch=devel
-   :target: https://app.shippable.com/projects/573f79d02a8192902e20e34b
+.. |Build Status| image:: https://dev.azure.com/ansible/ansible/_apis/build/status/CI?branchName=stable-2.8
+   :target: https://dev.azure.com/ansible/ansible/_build/latest?definitionId=20&branchName=stable-2.8
 .. |Chat badge| image:: https://img.shields.io/badge/chat-IRC-brightgreen.svg
    :target: https://docs.ansible.com/ansible/latest/community/communication.html
 .. |Code Of Conduct| image:: https://img.shields.io/badge/code%20of%20conduct-Ansible-silver.svg

changelogs/.changes.yaml

@@ -1627,6 +1627,139 @@ releases:
     - win_acl-network.yaml
     - winrm-input-failures.yaml
     release_date: '2019-06-06'
+  2.8.10:
+    codename: How Many More Times
+    fragments:
+    - openstack-regression.yml
+    - v2.8.10_summary.yaml
+    release_date: '2020-03-05'
+  2.8.11:
+    codename: How Many More Times
+    fragments:
+    - 63280-fix_acl_spaces_in_path.yml
+    - 64906-always-delegate-fact-prefixes.yml
+    - af_clean.yml
+    - ansible-test-opensuse-15.1.yml
+    - ansible-test-rhel-7.8.yml
+    - fetch_no_slurp.yml
+    - ldap-params-removal.yml
+    - remote_mkdir_fix.yml
+    - subversion_password.yaml
+    - v2.8.11_summary.yaml
+    - vault_tmp_file.yml
+    - vault_tmp_race_fix.yml
+    - win-unzip-check-extraction-path.yml
+    release_date: '2020-04-16'
+  2.8.12:
+    codename: How Many More Times
+    fragments:
+    - 225-mysql_user_fix_no_database_selected.yml
+    - 68251-redfish_config-fix-boolean-bios-attr-support.yaml
+    - 68592-pip-check_mode-prereleases.yml
+    - ansible-test-rhel-82.yml
+    - dnf-4-2-18.yml
+    - inventory_docs_fix.yml
+    - v2.8.12_summary.yaml
+    - win_psmodule-repo-tls.yaml
+    release_date: '2020-05-11'
+  2.8.13:
+    codename: How Many More Times
+    fragments:
+    - 61889-change-transform_invalid_group_chars-default.yml
+    - 66549-enablerepo-not-honored-when-used-with-disablerepo-all.yml
+    - 70261_pipe_lookup.yml
+    - v2.8.13_summary.yaml
+    release_date: '2020-07-14'
+  2.8.14:
+    codename: How Many More Times
+    fragments:
+    - 32386_debconf_password.yml
+    - 67794-atomic_move-default-perms.yml
+    - 67794-default-permissions-warning-fix.yml
+    - 70762-sanitize-uri-keys.yml
+    - copy-sanitize-check-mode-invocation-args.yaml
+    - rpmfluff-compat-fixes.yml
+    - test-ansible-runner-pin-psutil.yml
+    - v2.8.14_summary.yaml
+    release_date: '2020-08-10'
+  2.8.15:
+    codename: How Many More Times
+    fragments:
+    - cve-2020-1736-revert.yml
+    - dnf_gpg.yml
+    - v2.8.15_summary.yaml
+    release_date: '2020-08-31'
+  2.8.16:
+    codename: How Many More Times
+    fragments:
+    - ansible-test-sanity-pylint-config-fix.yml
+    - v2.8.16_summary.yaml
+    release_date: '2020-10-05'
+  2.8.16rc1:
+    codename: How Many More Times
+    fragments:
+    - 159_kubectl.yml
+    - 69508-ansible-test-local-changes-detection.yml
+    - ansible-test-azp-resource-prefix.yml
+    - ansible-test-change-classification.yml
+    - ansible-test-ci-support-azure.yml
+    - ansible-test-ci-support-shippable-auth.yml
+    - ansible-test-ci-support.yml
+    - ansible-test-endpoint-update.yml
+    - ansible-test-parallels-endpoint.yml
+    - v2.8.16rc1_summary.yaml
+    release_date: '2020-09-28'
+  2.8.17:
+    codename: How Many More Times
+    fragments:
+    - v2.8.17_summary.yaml
+    release_date: '2020-11-02'
+  2.8.17rc1:
+    codename: How Many More Times
+    fragments:
+    - 71535_kubectl_followup.yml
+    - ansible-test-azp-agent-temp-dir.yml
+    - ansible-test-container-ip-lookup.yml
+    - ansible-test-docker-default-network.yml
+    - ansible-test-docker-detection-fix.yml
+    - ansible-test-docker-not-localhost.yml
+    - ansible-test-docker-socket.yml
+    - ansible-test-network-container-search.yml
+    - galaxy_login_bye.yml
+    - v2.8.17rc1_summary.yaml
+    release_date: '2020-10-26'
+  2.8.18:
+    codename: How Many More Times
+    fragments:
+    - v2.8.18_summary.yaml
+    release_date: '2020-12-14'
+  2.8.18rc1:
+    codename: How Many More Times
+    fragments:
+    - ansible-test-acme-test-plugin.yml
+    - ansible-test-azp-change-detection.yml
+    - ansible-test-centos6-eol.yml
+    - cffi-constraint.yml
+    - py26-multiprocess-queue-bug.yml
+    - rhel-7.9.yml
+    - v2.8.18rc1_summary.yaml
+    release_date: '2020-12-07'
+  2.8.19:
+    codename: How Many More Times
+    fragments:
+    - v2.8.19_summary.yaml
+    release_date: '2021-02-17'
+  2.8.19rc1:
+    codename: How Many More Times
+    fragments:
+    - ansible-test-pip-bootstrap-s3.yml
+    - ansible-test-pip-bootstrap.yml
+    - cve_bitbucket_pipeline_variable.yml
+    - new-nolog-entries.yml
+    - no_log-fallback.yml
+    - snmp_facts.yml
+    - v2.8.19rc1_summary.yaml
+    release_date: '2021-02-08'
   2.8.2:
     codename: How Many More Times
     fragments:
@@ -1730,3 +1863,331 @@ releases:
     - win_get_url-Fix-restricted-header-handling.yml
     - win_shell-arg-space.yaml
     release_date: '2019-07-03'
+  2.8.20:
+    codename: How Many More Times
+    fragments:
+    - v2.8.20_summary.yaml
+    release_date: '2021-04-12'
+  2.8.20rc1:
+    codename: How Many More Times
+    fragments:
+    - 471-no_log.yml
+    - community.aws-475-no_log-missing.yml
+    - community.docker-103-docker_swarm-no_log.yml
+    - community.general-2018-missing-no_log-again.yml
+    - community.network-223-no_log-missing.yml
+    - more-no_log-fixes.yml
+    - v2.8.20rc1_summary.yaml
+    release_date: '2021-04-05'
+  2.8.3:
+    codename: How Many More Times
+    fragments:
+    - 41240-fix-os_quota-without-cinder.yaml
+    - 50617-vmware_guest-vapp_settings.yml
+    - 54790-fix-region-aws_secret-lookup.yaml
+    - 55194-ec2_eip-required_together.yml
+    - 56376-bootproto_dhcp_regression.yaml
+    - 56481-group-detect-duplicate-gids-local.yaml
+    - 57298-ovirt_vnic_remove_duplication_readme.yml
+    - 57351-role-custom-filter.yaml
+    - 57518-tower_role-fix_validate_certs.yml
+    - 57711-To_resolve_NoneType_error_in_aci_l3out.yaml
+    - 57907-update-ce_interface-to-fix-bugs.yml
+    - 57947-update-ce_vxlan_global-to-fix-bugs.yml
+    - 58060-vmware_guest-make_max_connections_work.yml
+    - 58136-ovirt_vm_migrate_with_state_present.yml
+    - 58200-update-ce_bfd_global-to-fix-a-bug.yml
+    - 58207-update-ce_bfd_view-to-fix-a-bug.yml
+    - 58226-update-ce_vxlan_gateway-to-fix-a-bug.yml
+    - 58227-update-cce_evpn_bd_vni-to-fix-a-bug.yml
+    - 58229-update-ce_interface_ospf-to-fix-a-bug.yml
+    - 58483-win_setup_resilience.yml
+    - 58554-update-ce_vrrp-to-fix-a-bug.yml
+    - 58559-update-ce_evpn_bgp_rr-to-fix-a-bug.yml
+    - 58561-update-ce_link_status-to-fix-a-bug.yml
+    - 58563-update-ce_netstream_aging-to-fix-a-bug.yml
+    - 58565-update-ce_static_route-to-fix-a-bug.yml
+    - 58569-nagios-fifo-fix.yaml
+    - 58577-ovirt_update_vm_migration_domunetation.yml
+    - 58579-vmware_object_role_perm_fix.yml
+    - 58605-openssl_privatekey-secp256r1.yml
+    - 58625-ovirt_add_host_retry_doc.yml
+    - 58734-correct-machinectl-become-plugin.yaml
+    - 58737-vmware_guest-fix_clone_guest.yml
+    - 58791-docker-errors.yml
+    - 58820-use-templated-loop_var-in-include_tasks.yaml
+    - 58949-nmcli-vlanid-typecast.yml
+    - 59043-docker_container-nocopy.yml
+    - 59072-update-ce_interface-to-fix-a-bug.yml
+    - 59190-vmware_guest-mem_reservation.yml
+    - 59196-ovirt_use_sysprep_when_needed.yml
+    - 59243-update-ce_file_copy-to-fix-a-bug.yml
+    - 59342_postgresql_schema-fix-example.yml
+    - 59377-ovirt-vm-when-creating-fix.yml
+    - ac_collection_plugin_load.yml
+    - become_none.yml
+    - dzdo_password_prompt.yml
+    - facts-linux-cpu-arm-architecture.yml
+    - fix_gathering_reporting.yml
+    - gather_subset_defaults.yml
+    - ios_command_edit_macro_dont_handle_no_macro.yaml
+    - ovirt_fetch_also_list_of_hrefs.yaml
+    - slxos_config_fix.yaml
+    - user-local-mode-group-append.yaml
+    - v2.8.3_summary.yaml
+    - win_domain_user-error.yaml
+    - win_get_url-proxy-not-used.yml
+    - win_reg_stat-hku.yaml
+    - yum-handle-stale-lock-file.yaml
+    - yum-sane-default-lockfile-timeout.yml
+    release_date: '2019-07-25'
+  2.8.4:
+    codename: How Many More Times
+    fragments:
+    - 46332-aws-improve-etag-handling.yml
+    - 49568-type-checking.yaml
+    - 49754-default-become-user-pbrun-become-plugin.yaml
+    - 55716-ec2_instance_int_volume_size.yml
+    - 56392-consul_session-improve_doc_and_add_integration_tests.yaml
+    - 56844-glusterfs_volume-fix_compare.yml
+    - 57579-add-pipelining-to-podman-connection-plugin.yaml
+    - 57935-ovirt-host-event-log.yml
+    - 57993-openssh_keypair-add-public-key-and-key-comment-validation.yml
+    - 58360-fix-cpu-count-ppc.yaml
+    - 58876-do-not-reuse-remote_user-from-prev-loop.yaml
+    - 59106-fix-ipv6-truncating-in-ec2_group.yml
+    - 59335-developing_modules_general-update_docs.yaml
+    - 59437-update-ce_ntp_auth-to-fix-a-bug.yml
+    - 59445-ce_rollback_shouldnt_load_xml_configure_via_network_cli.yml
+    - 59456-find-return-values.yaml
+    - 59497_postgresql-modules-remove-unused-imports.yml
+    - 59503-fix-recursive-csharp-logging.yml
+    - 59515-ce_mtu-update-to-fix-bugs.yml
+    - 59520-ce_startup-update-to-fix-a-bug.yml
+    - 59548-import-playbook-plugin-dirs.yml
+    - 59677-ce_vrrp-to-fix-bugs.yml
+    - 59678-ce_bgp_af-to-fix-bugs.yml
+    - 59684-ce_mlag_config-to-fix-bugs.yml
+    - 59685-ce_stp-to-fix-bugs.yml
+    - 59715-docker_container-ipv6-port-bind.yml
+    - 59728-ce_config-to-fix-bugs.yml
+    - 59769-fix_ansible_issue_58469_regression.yaml
+    - 59786-ce_netstream_global-to-fix-bugs.yml
+    - 59862-ovirt-vnic-profile-qos-update-fix.yml
+    - 60033-ce_netstream_template-to-fix-bugs.yml
+    - 60084-ce_ce_rollback_set_mmi-mode-enable.yaml
+    - 60085-ce_config _set_mmi-mode.yml
+    - 60105-postgresql_turn_off_db_default_warnings.yml
+    - 60198-ovirt-vnic-profile-check-fix.yml
+    - 60202-ovirt-host-update-force-docs.yml
+    - 60270-ce_aaa_server-to-fix-bugs.yml
+    - 60272-ce_aaa_server_host-to-fix-bugs.yml
+    - 60274-ce_acl-to-fix-bugs.yml
+    - adhoc-command-async-output.yaml
+    - aws_s3-etags.yaml
+    - dont_template_passwords_from_prompt.yml
+    - fix_iosxr_facts.yaml
+    - fix_strategy_inv_up.yml
+    - gcp-session-merge_dict.yml
+    - gcp_fixes.yml
+    - group-chars-ignore-doc.yaml
+    - netconf_command_timeout.yaml
+    - os_subnet-subnetpool-id-allowed.yaml
+    - podman_image-build-output-format.yaml
+    - sysctl-check-file-and-system.yaml
+    - user-local-warning-fix.yaml
+    - v2.8.4_summary.yaml
+    - vmware_datastore_facts_dict_iter.yml
+    - win_domain_group_membership-Fix-missing-vars-for-Get-command.yml
+    - win_dsc-datetime.yaml
+    - win_user-logon-err.yaml
+    release_date: '2019-08-15'
+  2.8.5:
+    codename: How Many More Times
+    fragments:
+    - 57096-netapp_e_lun_mapping-Fix-confict-and-zero-lun.yaml
+    - 57185-fix_vmware_modules_py_pre2.79.yaml
+    - 58194-vm-name-item-not-yet-present-at-creation-time.yaml
+    - 59471-systemd-wait-while-deactivating.yaml
+    - 59745-fix-pipelining-in-buildah-connection-plugin.yml
+    - 60381-docker_login-logout-change.yml
+    - 60410-search-project-in-domain.yml
+    - 60412-ce_bfd_global-to-fix-bugs.yml
+    - 60461-ovirt-vm-update-template-search-by-datacenter.yml
+    - 60581-ovirt-vm-add-linux-boot-param-warning.yml
+    - 60582-ovirt-vm-update-kernel-docs.yml
+    - 60616-support-multiple-port.yaml
+    - 60683-backport-57418.yaml
+    - 60727-acme_certificate-acme-compatibility.yml
+    - 60737-xenserver_guest-vbd-plug-fix.yml
+    - 60745-openssl_certificate-idempotency.yml
+    - 60912-constructed-groups-option-sanitization.yaml
+    - 60961-docker_compose-fix-deprecation-warning.yml
+    - 61231-extended-loop-include.yaml
+    - 61655-fix-digital-ocean-droplet-create.yaml
+    - 61735-wait-for-s3-bucket-to-exist-before-modifying.yaml
+    - 61740-docker_container-port-range-parsing.yml
+    - bigip-monitor-http-receive-parameter.yaml
+    - meraki-syslog-net-id.yaml
+    - meraki_syslog_net_id.yaml
+    - nxos_install_os_28_testfix.yaml
+    - openbsd-disabled-account-no-warning-for-passwd.yaml
+    - package_facts-performace-regression-fix.yaml
+    - purefa_facts-api-version-check-for-admin-and-all.yml
+    - user-docs-group-fix.yaml
+    - v2.8.5_summary.yaml
+    - win_domain-exceptions-2.yaml
+    - win_domain-exceptions.yaml
+    release_date: '2019-09-12'
+  2.8.6:
+    codename: How Many More Times
+    fragments:
+    - 55919-rabbitmq_publish-fix-for-recent-pika-versions.yml
+    - 57741-podman-connection-plugin-fix-mount.yaml
+    - 58756-fix_eos_bgp_fetching_as.yaml
+    - 58978-junos_user-fix-ssh-key-assignment.yaml
+    - 59450-ce_file_copy_different_version_sshserver_xml.yml
+    - 59765-cron-cronvar-use-get-bin-path.yaml
+    - 60569-plugins-netconf-ce.yml
+    - 60573-ce_bgp-to-fix-bugs.yml
+    - 60634-ce_bgp_neighbor-to-fix-bugs.yml
+    - 60937-ce_bgp_neighbor_af-to-fix-bugs.yml
+    - 61013-ce_evpn_bgp-to-fix-bugs.yml
+    - 61136-ce_evpn_bgp-to-fix-bugs.yml
+    - 61168-ce_evpn_bgp_rrl-to-fix-bugs.yml
+    - 61283-ce_info_center_global-to-fix-bugs.yml
+    - 61431-ce_interface_ospf-to-fix-bugs.yml
+    - 61442-ce_mtu-to-fix-bugs.yml
+    - 61652-ce_netstream_export-to-fix-bugs.yml
+    - 61653-ce_netstream_aging-to-fix-bugs.yml
+    - 61654-ce_ntp-to-fix-bugs.yml
+    - 61672-jenkins_modules-csrf-handling-in-versions-more-2.173.3.yaml
+    - 61683-ce_vrf_af-to-fix-bugs.yml
+    - 61684-ce_ospf-to-fix-bugs.yml
+    - 61693-acme-buypass-acme-v1.yml
+    - 61774-ce_stp-to-fix-bugs.yml
+    - 61842-ce_snmp_target_host-to-fix-bugs.yml
+    - 61843-ce_snmp_traps-to-fix-bugs.yml
+    - 61978-get-url-no-checksum.yml
+    - 61995-ce_vxlan_arp-to-fix-bugs.yml
+    - 61996-ce_vxlan_vap-to-fix-bugs.yml
+    - 62184-junos_user_encrypted_password_fix.yaml
+    - 62498-ce_static_route-to-fix-bugs.yml
+    - 62587-module_utils-network-cloudengine.yml
+    - 62589-ce_bgp_af-to-fix-bugs.yml
+    - 62621-docker_login-fix-60381.yaml
+    - 62790-openssl_certificate_fix_assert.yml
+    - 62809-dnf-wildcard-absent-failure.yml
+    - 62857-detect-freebsd-jails.yaml
+    - 62928-docker_container-ip-address-idempotency.yml
+    - 62971-docker_container-image-finding.yml
+    - 63194-lineinfile_insertafter_duplicate.yaml
+    - 63249-fix-sts-assume-role-test.yml
+    - 63331-ce_facts-to-fix-bugs.yml
+    - 63345-docker_image-deprecation-warnings.yml
+    - 63388_ce_netsream_list_index_out_of_range.yml
+    - 63418-docker_node_info-errors.yml
+    - 63422-ce_link_status_fix_bugs.yaml
+    - aci-42-filter-whitespace.yaml
+    - ansible-test-redact.yml
+    - ansible-test-ssh-keygen-fix.yml
+    - boto-logging-credentials.yml
+    - cron-only-get-bin-path-once.yaml
+    - cronvar-correct-binary-name.yaml
+    - debug_loop_changed.yaml
+    - display-warning-remove-erroneous-space.yaml
+    - dont-template-cli-passwords.yml
+    - firewalld-version-0_7_0.yml
+    - lookup_rabbitmq-is_closing-bug.yml
+    - mso_schema_template_bd-payload-fix.yaml
+    - no-log-sub-options-invalid-parameter.yaml
+    - package-facts-use-module-warnings.yaml
+    - package_facts_apt_fix.yml
+    - package_facts_clarify.yml
+    - psexec-kerb-and-interactive.yaml
+    - user-aix-shadow-unbound-local.yaml
+    - v2.8.6_summary.yaml
+    - vmware-use_non_default.yml
+    - win_exec-error.yaml
+    release_date: '2019-10-17'
+  2.8.7:
+    codename: How Many More Times
+    fragments:
+    - 56832-remove-aptitude-warning.yml
+    - 57804-win_acl-no-longer-needs-SeSecurityPrivilege.yml
+    - 58158-sysctl-fix-referenced-before-assignment.yaml
+    - 58323-copy-deep-recursive-with-remote_src.yaml
+    - 58525-zabbix-modules-logout.yml
+    - 59017-perf-regression-handlers.yml
+    - 60425-gitlab-fix-deprecation-warning.yml
+    - 62407-wait_for_connection.yml
+    - 62872-ce_config_too_many_quit_close_connection.yml
+    - 63140-acme-fix-fetch-url-status-codes.yaml
+    - 63432-openssl_csr-version.yml
+    - 63513-ce_action_wait_prompt_trigger_time_out.yaml
+    - 63522-remove-args-from-sumologic-and-splunk-callbacks.yml
+    - 63919-lineinfile-create-no-dir-path.yml
+    - 63984-openssl-ed25519-ed448.yml
+    - 64011_vmware_deploy_ovf.yml
+    - 64018-ce_acl_interface-to-fix-bugs.yml
+    - 64382-docker_login-fix-invalid-json.yml
+    - 64637-docker_swarm_service-tmpfs-source.yml
+    - ansible-test-rhel-8.1-testing.yml
+    - ansible_basic_no_log_empty_string.yaml
+    - lineinfile-backrefs-match-object-type.yaml
+    - lineinfile-use-correct-index-value.yaml
+    - paramiko_ssh-improve-error-message.yaml
+    - v2.8.7_summary.yaml
+    - vault-ensure-vault-password-files-are-list.yaml
+    - win_domain_computer-credential.yaml
+    - win_iis_website-restarted.yaml
+    - win_partition-var.yaml
+    release_date: '2019-11-13'
+  2.8.8:
+    codename: How Many More Times
+    fragments:
+    - 59887-scale-bug.yml
+    - 62348-yarn-no_version_install_fix.yml
+    - 63551-yum-single-YumBase-instantiation.yaml
+    - 63621-gitlab_user-fix-sshkey-and-user.yml
+    - 64397-netscaler_service-bugfix.yml
+    - 64648-acme_certificate-acmev1.yml
+    - 64902-fix-allow-duplicates-in-single-role.yml
+    - 64940_update_modules_docs_notes.yml
+    - 64941_update_modules_docs_notes.yml
+    - 64942_update_modules_docs_notes.yml
+    - 64943_update_modules_docs_notes.yml
+    - 64944_update_modules_docs_notes.yml
+    - 64945_update_modules_docs_notes.yml
+    - 65017-openssh_keypair-idempotence.yml
+    - 65018-docker-none-errors.yml
+    - 65065-plugins-netconf-ce-fix.yaml
+    - 65176-gitlab-runner-idempotency.yaml
+    - 65302-dnf-msg-return.yml
+    - 65435-openssl_csr-privatekey_path-required.yml
+    - 65839-docker_network-idempotence.yml
+    - 65854-docker_container-wait-for-removal.yml
+    - 65993-restart-docker_container-on-restart-policy-updates.yaml
+    - 66151-docker_swarm_service-healthcheck-start-period.yml
+    - ansible-test-coverage-constraint.yml
+    - ansible-test-ignore-pip-warnings.yml
+    - ansible-test-setuptools-constraint.yml
+    - fips-paramiko-import-error.yaml
+    - nxos_file_copy_path_issue.yml
+    - solaris_zone_name_fix.yml
+    - user-alpine-on-changed-fix.yaml
+    - v2.8.8_summary.yaml
+    - yum-enable-missing-repo.yaml
+    release_date: '2020-01-15'
+  2.8.9:
+    codename: How Many More Times
+    fragments:
+    - 62062-os_network-openstacksdk-min.yml
+    - 66914-purefa_user_string.yaml
+    - 66974-mysql_user_doesnt_support_privs_with_underscore.yml
+    - 67515-openssl-fingerprint-fips.yml
+    - ansible-test-constraints-virtualenv.yml
+    - ansible-test-jinja2-python-2.6.yml
+    - v2.8.9_summary.yaml
+    - win_unzip-paths.yaml
+    release_date: '2020-03-04'

changelogs/CHANGELOG-v2.8.rst

@@ -5,6 +5,816 @@ Ansible 2.8 "How Many More Times" Release Notes
 .. contents:: Topics
 
 
+v2.8.20
+=======
+
+Release Summary
+---------------
+
+| Release Date: 2021-04-12
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Breaking Changes / Porting Guide
+--------------------------------
+
+- docker_swarm - if ``join_token`` is specified, a returned join token with the same value will be replaced by ``VALUE_SPECIFIED_IN_NO_LOG_PARAMETER``. Make sure that you do not blindly use the join tokens from the return value of this module when the module is invoked with ``join_token`` specified! This breaking change appears in a minor release since it is necessary to fix a security issue (https://github.com/ansible-collections/community.docker/pull/103). (CVE-2021-3447)
+
+Security Fixes
+--------------
+
+- avi_cloudconnectoruser - mark the ``azure_userpass`` parameter as ``no_log`` to prevent leaking of secret values (https://github.com/ansible-collections/community.network/pull/223). (CVE-2021-3447)
+- avi_sslkeyandcertificate - mark the ``enckey_base64`` parameter as ``no_log`` to prevent potential leaking of secret values (https://github.com/ansible-collections/community.network/pull/223). (CVE-2021-3447)
+- avi_webhook - mark the ``verification_token`` parameter as ``no_log`` to prevent potential leaking of secret values (https://github.com/ansible-collections/community.network/pull/223). (CVE-2021-3447)
+- aws_direct_connect_virtual_interface - mark the ``authentication_key`` parameter as ``no_log`` to avoid accidental leaking of secrets in logs (https://github.com/ansible-collections/community.aws/pull/475). (CVE-2021-3447)
+- aws_secret - flag the ``secret`` parameter as containing sensitive data which shouldn't be logged (https://github.com/ansible-collections/community.aws/pull/471) (CVE-2021-3447).
+- azure_rm_devtestlabartifactsource - ``security_token`` no longer appears in logs (``no_log``) (CVE-2021-3447)
+- bigip_device_license - ``license_key`` no longer appears in logs (``no_log``) (CVE-2021-3447)
+- bigip_dns_nameserver - ``tsig_key`` no longer appears in logs (``no_log``) (CVE-2021-3447)
+- bigip_dns_zone - ``tsig_server_key`` no longer appears in logs (``no_log``) (CVE-2021-3447)
+- bigip_profile_client_ssl - ``key`` and ``passphrase`` no longer appears in logs (``no_log``) (CVE-2021-3447)
+- docker_swarm - the ``join_token`` option is now marked as ``no_log`` so it is no longer written into logs (https://github.com/ansible-collections/community.docker/pull/103). (CVE-2021-3447)
+- fortios_dlp_fp_doc_source - ``password`` no longer appears in logs (``no_log``) (CVE-2021-3447)
+- fortios_endpoint_control_forticlient_ems - ``admin_password`` no longer appears in logs (``no_log``) (CVE-2021-3447)
+- fortios_endpoint_control_profile - ``preshared_key`` no longer appears in logs (``no_log``) (CVE-2021-3447)
+- fortios_endpoint_control_settings - ``forticlient_reg_key`` no longer appears in logs (``no_log``) (CVE-2021-3447)
+- fortios_extender_controller_extender - ``aaa_shared_secret``, ``ha_shared_secret``, ``modem_passwd``, and ``ppp_password`` no longer appears in logs (``no_log``) (CVE-2021-3447)
+- fortios_firewall_ssh_local_ca - ``password`` and ``private_key`` no longer appears in logs (``no_log``) (CVE-2021-3447)
+- fortios_firewall_ssh_local_key - ``password`` and ``private_key`` no longer appears in logs (``no_log``) (CVE-2021-3447)
+- fortios_log_disk_setting - ``uploadpass`` no longer appears in logs (``no_log``) (CVE-2021-3447)
+- fortios_router_bgp - ``password`` no longer appears in logs (``no_log``) (CVE-2021-3447)
+- fortios_router_ospf - ``authentication_key`` and `md5_key`` no longer appears in logs (``no_log``) (CVE-2021-3447)
+- fortios_router_rip - ``auth_string`` no longer appears in logs (``no_log``) (CVE-2021-3447)
+- fortios_system_admin - ``fortitoken`` and ``password`` no longer appears in logs (``no_log``) (CVE-2021-3447)
+- fortios_system_api_user - ``api_key`` no longer appears in logs (``no_log``) (CVE-2021-3447)
+- fortios_system_interface - ``password`` and ``pptp_password`` no longer appears in logs (``no_log``) (CVE-2021-3447)
+- fortios_system_sdn_connector - ``access_key``, ``client_secret``, ``key_passwd``, ``password``, ``private_key``, and ``secret_key`` no longer appears in logs (``no_log``) (CVE-2021-3447)
+- fortios_system_virtual_wan_link - ``password`` no longer appears in logs (``no_log``) (CVE-2021-3447)
+- fortios_user_radius - ``secret``, ``rsso_secret``, ``secondary_secret``, and ``tertiary_secret`` no longer appears in logs (``no_log``) (CVE-2021-3447)
+- fortios_user_tacacsplus - ``key``, ``secondary_key``, and ``tertiary_key`` no longer appears in logs (``no_log``) (CVE-2021-3447)
+- fortios_vpn_ipsec_manualkey - ``authkey`` and ``enckey`` no longer appears in logs (``no_log``) (CVE-2021-3447)
+- fortios_vpn_ipsec_manualkey_interface - ``auth_key`` and ``enc_key`` no longer appears in logs (``no_log``) (CVE-2021-3447)
+- fortios_vpn_ipsec_phase1 - ``authpasswd``, ``group_authentication_secret``, ``ppk_secret``, ``psksecret``, and ``psksecret_remote`` no longer appears in logs (``no_log``) (CVE-2021-3447)
+- fortios_vpn_ipsec_phase1_interface - ``authpasswd``, ``group_authentication_secret``, ``ppk_secret``, ``psksecret``, and ``psksecret_remote`` no longer appears in logs (``no_log``) (CVE-2021-3447)
+- fortios_vpn_ssl_web_portal - ``logon_password`` and ``sso_password`` no longer appears in logs (``no_log``) (CVE-2021-3447)
+- fortios_wireless_controller_vap - ``captive_portal_macauth_radius_secret``, ``captive_portal_radius_secret``, ``key``, and ``passphrase`` no longer appears in logs (``no_log``) (CVE-2021-3447)
+- fortios_wireless_controller_wtp - ``login_passwd`` no longer appears in logs (``no_log``) (CVE-2021-3447)
+- fortios_wireless_controller_wtp_profile - ``fortipresence_secret`` and ``login_passwd`` no longer appears in logs (``no_log``) (CVE-2021-3447)
+- gcp_compute_instance - ``raw_key`` no longer appears in logs (``no_log``) (CVE-2021-3447)
+- gcp_container_cluster - ``password`` no longer appears in logs (``no_log``) (CVE-2021-3447)
+- gcp_sql_instance - ``password`` no longer appears in logs (``no_log``) (CVE-2021-3447)
+- ios_ntp - ``auth_key`` no longer appears in logs (``no_log``) (CVE-2021-3447)
+- logentries_msg - ``token`` no longer appears in logs (``no_log``) (CVE-2021-3447)
+- na_cdot_user - mark the ``set_password`` parameter as ``no_log`` to avoid leakage of secrets (https://github.com/ansible-collections/community.general/pull/2018). (CVE-2021-3447)
+- na_elementsw_cluster_snmp - ``password`` and ``passphrase`` no longer appears in logs (``no_log``) (CVE-2021-3447)
+- netscaler_lb_monitor - ``password`` and ``secondarypassword`` no longer appears in logs (``no_log``) (CVE-2021-3447)
+- nxos_aaa_server_host - ``key`` no longer appears in logs (``no_log``) (CVE-2021-3447)
+- ovirt_auth - ``token`` no longer appears in logs (``no_log``) (CVE-2021-3447)
+- pingdom - ``key`` no longer appears in logs (``no_log``) (CVE-2021-3447)
+- rollbar_deployment - ``token` no longer appears in logs (``no_log``) (CVE-2021-3447)
+- stackdriver - ``key`` no longer appears in logs (``no_log``) (CVE-2021-3447)
+- sts_assume_role - mark the ``mfa_token`` parameter as ``no_log`` to avoid accidental leaking of secrets in logs (https://github.com/ansible-collections/community.aws/pull/475). (CVE-2021-3447)
+- sts_session_token - mark the ``mfa_token`` parameter as ``no_log`` to avoid accidental leaking of secrets in logs (https://github.com/ansible-collections/community.aws/pull/475). (CVE-2021-3447)
+- tower_credential - ``security_token`` and ``secret`` no longer appears in logs (``no_log``) (CVE-2021-3447)
+- zabbix_action - ``password`` no longer appears in logs (``no_log``) (CVE-2021-3447)
+
+v2.8.19
+=======
+
+Release Summary
+---------------
+
+| Release Date: 2021-02-17
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Security Fixes
+--------------
+
+- **security issue** - Mask default and fallback values for ``no_log`` module options (CVE-2021-20228)
+- _sf_account_manager - `initiator_secret` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191).
+- _sf_account_manager - `target_secret` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191).
+- bitbucket_pipeline_variable - hide user sensitive information which are marked as ``secured`` from logging into the console (https://github.com/ansible-collections/community.general/pull/1635) (CVE-2021-20180).
+- ce_vrrp - `auth_key` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191).
+- docker_swarm - `signing_ca_key` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191).
+- gcp_compute_backend_service - `oauth2_client_secret` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191).
+- gcp_compute_disk - `disk_encryption_key` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191).
+- gcp_compute_disk - `source_image_encryption_key` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191).
+- gcp_compute_disk - `source_snapshot_encryption_key` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191).
+- gcp_compute_image - `image_encryption_key` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191).
+- gcp_compute_image - `source_disk_encryption_key` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191).
+- gcp_compute_instance_template - `disk_encryption_key` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191).
+- gcp_compute_instance_template - `source_image_encryption_key` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191).
+- gcp_compute_region_disk - `disk_encryption_key` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191).
+- gcp_compute_region_disk - `source_snapshot_encryption_key` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191).
+- gcp_compute_ssl_certificate - `private_key` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191).
+- gcp_compute_vpn_tunnel - `shared_secret` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191).
+- gcp_sql_instance - `client_key` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191).
+- gitlab_runner - `registration_token` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191).
+- iap_start_workflow - `token_key` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191).
+- ibm_sa_host - `iscsi_chap_secret` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191).
+- keycloak_client - `auth_client_secret` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191).
+- keycloak_client - `registration_access_token` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191).
+- keycloak_clienttemplate - `auth_client_secret` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191).
+- keycloak_group - `auth_client_secret` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191).
+- librato_annotation - `api_key` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191).
+- na_elementsw_account - `initiator_secret` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191).
+- na_elementsw_account - `target_secret` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191).
+- netscaler_lb_monitor - `radkey` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191).
+- nios_nsgroup - `tsig_key` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191).
+- nxos_aaa_server - `global_key` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191).
+- nxos_pim_interface - `hello_auth_key` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191).
+- oneandone_firewall_policy - `auth_token` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191).
+- oneandone_load_balancer - `auth_token` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191).
+- oneandone_monitoring_policy - `auth_token` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191).
+- oneandone_private_network - `auth_token` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191).
+- oneandone_public_ip - `auth_token` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191).
+- ovirt - `instance_rootpw` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191).
+- pagerduty_alert - `api_key` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191).
+- pagerduty_alert - `integration_key` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191).
+- pagerduty_alert - `service_key` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191).
+- pulp_repo - `feed_client_key` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191).
+- rax_clb_ssl - `private_key` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191).
+- snmp_facts - hide user sensitive information such as ``privkey`` and ``authkey`` from logging into the console (https://github.com/ansible-collections/community.general/pull/1621) (CVE-2021-20178).
+- spotinst_aws_elastigroup - `multai_token` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191).
+- spotinst_aws_elastigroup - `token` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191).
+- utm_proxy_auth_profile - `frontend_cookie_secret` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191).
+
+Bugfixes
+--------
+
+- ansible-test - The ``--remote`` option has been updated for Python 2.7 to work around breaking changes in the newly released ``get-pip.py`` bootstrapper.
+- ansible-test - The ``--remote`` option has been updated to use a versioned ``get-pip.py`` bootstrapper to avoid issues with future releases.
+
+v2.8.18
+=======
+
+Release Summary
+---------------
+
+| Release Date: 2020-12-14
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Minor Changes
+-------------
+
+- ansible-test - Added the ``-remote rhel/7.9`` option to run tests on RHEL 7.9
+- ansible-test - Fix container hostname/IP discovery for the ``acme`` test plugin.
+- ansible-test - centos6 end of life - container image updated to point to vault base repository (https://github.com/ansible/distro-test-containers/pull/54)
+
+Bugfixes
+--------
+
+- account for bug in Python 2.6 that occurs during interpreter shutdown to avoid stack trace
+- ansible-test - Correctly detect changes in a GitHub pull request when running on Azure Pipelines.
+- ansible-test - add constraint for ``cffi`` to prevent failure on systems with older versions of ``gcc`` (https://foss.heptapod.net/pypy/cffi/-/issues/480)
+
+
+v2.8.17
+=======
+
+Release Summary
+---------------
+
+| Release Date: 2020-11-02
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Minor Changes
+-------------
+
+- ansible-test - Add a ``--docker-network`` option to choose the network for running containers when using the ``--docker`` option.
+
+Breaking Changes / Porting Guide
+--------------------------------
+
+- ansible-galaxy login command has been removed (see https://github.com/ansible/ansible/issues/71560)
+
+Bugfixes
+--------
+
+- ansible-test - Always connect additional Docker containers to the network used by the current container (if any).
+- ansible-test - Always map ``/var/run/docker.sock`` into test containers created by the ``--docker`` option if the docker host is not ``localhost``.
+- ansible-test - Attempt to detect the Docker hostname instead of assuming ``localhost``.
+- ansible-test - Correctly detect running in a Docker container on Azure Pipelines.
+- ansible-test - Prefer container IP at ``.NetworkSettings.Networks.{NetworkName}.IPAddress`` over ``.NetworkSettings.IPAddress``.
+- ansible-test - The ``cs`` and ``openshift`` test plugins now search for containers on the current network instead of assuming the ``bridge`` network.
+- ansible-test - Using the ``--remote`` option on Azure Pipelines now works from a job running in a container.
+- kubectl - follow up fix in _build_exec_cmd API (https://github.com/ansible/ansible/issues/72171).
+
+v2.8.16
+=======
+
+Release Summary
+---------------
+
+| Release Date: 2020-10-05
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Minor Changes
+-------------
+
+- ansible-test - Added CI provider support for Azure Pipelines.
+- ansible-test - Added support for Ansible Core CI request signing for Shippable.
+- ansible-test - Allow custom ``--remote-stage`` options for development and testing.
+- ansible-test - Refactored CI related logic into a basic provider abstraction.
+- ansible-test - Remove the discontinued ``us-east-2`` choice from the ``--remote-aws-region`` option.
+- ansible-test - Request remote resources by provider name for all provider types.
+- ansible-test - Show a warning when the obsolete ``--remote-aws-region`` option is used.
+- ansible-test - Support custom remote endpoints with the ``--remote-endpoint`` option.
+- ansible-test - Update built-in service endpoints for the ``--remote`` option.
+- ansible-test - Use new endpoint for Parallels based instances with the ``--remote`` option.
+
+Security Fixes
+--------------
+
+- kubectl - connection plugin now redact kubectl_token and kubectl_password in console log (https://github.com/ansible-collections/community.kubernetes/issues/65) (CVE-2020-1753).
+
+Bugfixes
+--------
+
+- ansible-test - Change classification using ``--changed`` now consistently handles common configuration files for supported CI providers.
+- ansible-test - Disabled the ``duplicate-code`` and ``cyclic-import`` checks for the ``pylint`` sanity test due to inconsistent results.
+- ansible-test - The ``resource_prefix`` variable provided to tests running on Azure Pipelines is now converted to lowercase to match other CI providers.
+- ansible-test - for local change detection, allow to specify branch to compare to with ``--base-branch`` for all types of tests (https://github.com/ansible/ansible/pull/69508).
+
+v2.8.15
+=======
+
+Release Summary
+---------------
+
+| Release Date: 2020-08-31
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Security Fixes
+--------------
+
+- The fix for CVE-2020-1736 has been reverted. Users are encouraged to specify a ``mode`` parameter in their file-based tasks when the files being manipulated contain sensitive data.
+- dnf - Previously, regardless of the ``disable_gpg_check`` option, packages were not GPG validated. They are now. (CVE-2020-14365)
+
+v2.8.14
+=======
+
+Release Summary
+---------------
+
+| Release Date: 2020-08-10
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Minor Changes
+-------------
+
+- debconf - add a note about no_log=True since module might expose sensitive information to logs (https://github.com/ansible/ansible/issues/32386).
+
+Security Fixes
+--------------
+
+- **security issue** - copy - Redact the value of the no_log 'content' parameter in the result's invocation.module_args in check mode. Previously when used with check mode and with '-vvv', the module would not censor the content if a change would be made to the destination path. (CVE-2020-14332)
+
+- **security issue** atomic_move - change default permissions when creating temporary files so they are not world readable (https://github.com/ansible/ansible/issues/67794) (CVE-2020-1736)
+
+- Fix warning for default permission change when no mode is specified. Follow up to https://github.com/ansible/ansible/issues/67794. (CVE-2020-1736)
+
+- Sanitize no_log values from any response keys that might be returned from the uri module (CVE-2020-14330).
+
+Bugfixes
+--------
+
+- Address compat with rpmfluff-0.6 for integration tests
+- add constraints file for ``anisble_runner`` test since an update to ``psutil`` is now causing test failures
+
+v2.8.13
+=======
+
+Release Summary
+---------------
+
+| Release Date: 2020-07-14
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Minor Changes
+-------------
+
+- Remove the deprecation message for the ``TRANSFORM_INVALID_GROUP_CHARS`` setting. (https://github.com/ansible/ansible/issues/61889)
+- pipe lookup - update docs for Popen with shell=True usages (https://github.com/ansible/ansible/issues/70159).
+
+Bugfixes
+--------
+
+- yum - fix bug that caused ``enablerepo`` to not be honored when used with disablerepo all wildcard/glob (https://github.com/ansible/ansible/issues/66549)
+
+v2.8.12
+=======
+
+Release Summary
+---------------
+
+| Release Date: 2020-05-11
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Minor Changes
+-------------
+
+- Point inventory script location to their respective version rather than devel version in documentation.
+- ansible-test - Now includes testing support for RHEL 8.2
+
+Bugfixes
+--------
+
+- dnf - Unified error messages when trying to install a nonexistent package with newer dnf (4.2.18) vs older dnf (4.2.9)
+- dnf - Unified error messages when trying to remove a wildcard name that is not currently installed, with newer dnf (4.2.18) vs older dnf (4.2.9)
+- mysql_user - fix the error No database selected (https://github.com/ansible/ansible/issues/68070).
+- pip - check_mode with ``state: present`` now returns the correct state for pre-release versioned packages
+- redfish_config - fix support for boolean bios attrs (https://github.com/ansible/ansible/pull/68251)
+- win_psmodule - Fix TLS 1.2 compatibility with PSGallery.
+- win_psrepository - Fix TLS 1.2 compatibility with PSGallery.
+- win_psrepository - Fix ``Ignore`` error when trying to retrieve the list of registered repositories
+
+v2.8.11
+=======
+
+Release Summary
+---------------
+
+| Release Date: 2020-04-16
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Minor Changes
+-------------
+
+- ansible-test - Upgrade OpenSUSE containers to use Leap 15.1.
+- ansible-test now supports testing against RHEL 7.8 when using the ``--remote`` option.
+
+Removed Features (previously deprecated)
+----------------------------------------
+
+- ldap_attr, ldap_entry - The ``params`` option has been removed in Ansible-2.10 as it circumvents Ansible's option handling.  Setting ``bind_pw`` with the ``params`` option was disallowed in Ansible-2.7, 2.8, and 2.9 as it was insecure.  For information about this policy, see the discussion at: https://meetbot.fedoraproject.org/ansible-meeting/2017-09-28/ansible_dev_meeting.2017-09-28-15.00.log.html This fixes CVE-2020-1746
+
+Security Fixes
+--------------
+
+- **security issue** - The ``subversion`` module provided the password via the svn command line option ``--password`` and can be retrieved from the host's /proc/<pid>/cmdline file. Update the module to use the secure ``--password-from-stdin`` option instead, and add a warning in the module and in the documentation if svn version is too old to support it. (CVE-2020-1739)
+
+- **security issue** win_unzip - normalize paths in archive to ensure extracted files do not escape from the target directory (CVE-2020-1737)
+
+- **security_issue** - create temporary vault file with strict permissions when editing and prevent race condition (CVE-2020-1740)
+- Ensure we get an error when creating a remote tmp if it already exists. CVE-2020-1733
+- In fetch action, avoid using slurp return to set up dest, also ensure no dir traversal CVE-2020-1735.
+
+Bugfixes
+--------
+
+- Ensure DataLoader temp files are removed at appropriate times and that we observe the LOCAL_TMP setting.
+- Ensure we don't allow ansible_facts subkey of ansible_facts to override top level, also fix 'deprefixing' to prevent key transforms.
+- Fact Delegation - Add ability to indicate which facts must always be delegated. Primarily for ``discovered_interpreter_python`` right now, but extensible later. (https://github.com/ansible/ansible/issues/61002)
+- acl - fixed module failure if there are spaces in a path
+
+v2.8.10
+=======
+
+Release Summary
+---------------
+
+| Release Date: 2020-03-05
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Bugfixes
+--------
+
+- Fix ``TypeError`` in OpenStack modules introduced in Ansible 2.8.9 (https://github.com/ansible/ansible/pull/68043).
+
+v2.8.9
+======
+
+Release Summary
+---------------
+
+| Release Date: 2020-03-04
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Bugfixes
+--------
+
+- Bump the minimum openstacksdk version to 0.18.0 when os_network uses the port_security_enabled argument.
+- ansible-test - Use ``virtualenv`` versions before 20 on provisioned macOS instances to remain compatible with an older pip install.
+- ansible-test now limits Jinja2 installs to version 2.10 and earlier on Python 2.6
+- mysql_user - fix support privileges with underscore (https://github.com/ansible/ansible/issues/66974).
+- openssl_* modules - prevent crash on fingerprint determination in FIPS mode (https://github.com/ansible/ansible/issues/67213).
+- pure - fix incorrect user_string setting in module_utils file (https://github.com/ansible/ansible/pull/66914)
+- win_unzip - Fix support for paths with square brackets not being detected properly
+
+v2.8.8
+======
+
+Release Summary
+---------------
+
+| Release Date: 2020-01-15
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Minor Changes
+-------------
+
+- docker_container.py - update a containers restart_policy without restarting the container (https://github.com/ansible/ansible/issues/65993)
+
+Bugfixes
+--------
+
+- **SECURITY** - CVE-2019-14904 - solaris_zone module accepts zone name and performs actions related to that. However, there is no user input validation done while performing actions. A malicious user could provide a crafted zone name which allows executing commands into the server manipulating the module behaviour. Adding user input validation as per Solaris Zone documentation fixes this issue.
+- CVE-2019-14905 - nxos_file_copy module accepts remote_file parameter which is used for destination name and performs actions related to that on the device using the value of remote_file which is of string type However, there is no user input validation done while performing actions. A malicious code could crafts the filename parameter to take advantage by performing an OS command injection. This fix validates the option value if it is legitimate file path or not.
+- acme_certificate - fix misbehavior when ACME v1 is used with ``modify_account`` set to ``false``.
+- ansible-test no longer tries to install ``coverage`` 5.0+ since those versions are unsupported
+- ansible-test no longer tries to install ``setuptools`` 45+ on Python 2.x since those versions are unsupported
+- ansible-test now ignores warnings when comparing pip versions before and after integration tests run
+- ce modules - Update(add) docs notes to tell user modules work connection.
+- ce modules - Update(add) docs notes to tell user modules work connection.
+- ce modules - Update(add) docs notes to tell user modules work connection.
+- ce modules - Update(add) docs notes to tell user modules work connection.
+- ce modules - Update(add) docs notes to tell user modules work connection.
+- ce modules - Update(add) docs notes to tell user modules work connection.
+- decouple k8s_scale from the k8s module utils so that it doesn't complain about missing arguments
+- dnf module - Ensure the modules exit_json['msg'] response is always string, not sometimes a tuple.
+- docker_container - fix network idempotence comparison error.
+- docker_container - wait for removal of container if docker API returns early (https://github.com/ansible/ansible/issues/65811).
+- docker_network - fix idempotence comparison error.
+- docker_network - fix idempotency for multiple IPAM configs of the same IP version (https://github.com/ansible/ansible/issues/65815).
+- docker_network - validate IPAM config subnet CIDR notation on module setup and not during idempotence checking.
+- docker_swarm_service - fix task always reporting as changed when using ``healthcheck.start_period``.
+- gitlab_runner - fix idempotency for shared runner
+- gitlab_user - Fix adding ssh key to new/changed user and adding group membership for new/changed user
+- netscaler_service - fixed issue preventing use of graceful attribute
+- openssh_keypair - fixes idempotence issue with public key (https://github.com/ansible/ansible/issues/64969).
+- openssl_csr - the module will now enforce that ``privatekey_path`` is specified when ``state=present``.
+- paramiko - catch and handle exception to prevent stack trace when running in FIPS mode
+- plugins-netconf-ce - Fix failed to get version information.
+- roles - Ensure that ``allow_duplicates: true`` enables to run single role multiple times (https://github.com/ansible/ansible/issues/64902)
+- user - on systems using busybox, honor the ``on_changed`` parameter to prevent unnecessary password changing (https://github.com/ansible/ansible/issues/65711)
+- yarn - handle no version when installing module by name (https://github.com/ansible/ansible/issues/55097)
+- yum - gracefully handle failure case of enabling a non existent repo, as the yum cli does (Fixes https://github.com/ansible/ansible/issues/52582)
+- yum - performance bugfix, the YumBase object was being  instantiated multiple times unnecessarily, which lead to considerable overhead when operating against large sets of packages.
+
+v2.8.7
+======
+
+Release Summary
+---------------
+
+| Release Date: 2019-11-13
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Minor Changes
+-------------
+
+- ansible-test - switch from testing RHEL 8.0 and RHEL 8.1 Beta to RHEL 8.1
+
+Bugfixes
+--------
+
+- **security issue** - Ansible: Splunk and Sumologic callback plugins leak sensitive data in logs (CVE-2019-14864)
+- ACME modules: make sure some connection errors are handled properly
+- Ansible.Basic - Fix issue when setting a ``no_log`` parameter to an empty string - https://github.com/ansible/ansible/issues/62613
+- Fix deprecation warning on GitLab modules
+- Fix for performance regression in handler invocation (https://github.com/ansible/ansible/issues/59017)
+- Fix requirements on non required module parameters
+- Remove a temp directory created by wait_for_connection action plugin (https://github.com/ansible/ansible/issues/62407).
+- Remove the unnecessary warning about aptitude not being installed (https://github.com/ansible/ansible/issues/56832).
+- action/ce - fix a bug, some new version os will not discard uncommitted configure with a return directly.(https://github.com/ansible/ansible/pull/63513).
+- ansible-vault - fix error when multiple vault password files are specified (https://github.com/ansible/ansible/issues/57172)
+- ce_acl_interface - update to fix some bugs - Modified the prompt statement when the switch device cannot be configured. (https://github.com/ansible/ansible/pull/64018)
+- ce_config - fixed issue - Re-building commands(config src) by replacing '#' with 'quit','quit' commands may close connection (https://github.com/ansible/ansible/issues/62872)
+- copy - recursive copy with ``remote_src=yes`` now recurses beyond first level. (Fixes https://github.com/ansible/ansible/issues/58284)
+- docker_login - Use ``with`` statement when accessing files, to prevent that invalid JSON output is produced.
+- docker_swarm_service - ``source`` must no longer be specified for ``tmpfs`` mounts.
+- lineinfile - don't attempt mkdirs when path doesn't contain directory path
+- lineinfile - properly handle inserting a line when backrefs are enabled and the line already exists in the file (https://github.com/ansible/ansible/issues/63756)
+- lineinfile - use correct index value when inserting a line at the end of a file (https://github.com/ansible/ansible/issues/63684)
+- openssl_certificate and openssl_csr - fix Ed25519 and Ed448 private key support for ``cryptography`` backend. This probably needs at least cryptography 2.8, since older versions have problems with signing certificates or CSRs with such keys. (https://github.com/ansible/ansible/issues/59039, PR https://github.com/ansible/ansible/pull/63984)
+- openssl_csr - a warning is issued if an unsupported value for ``version`` is used for the ``cryptography`` backend.
+- paramiko_ssh - improve authentication error message so it is less confusing
+- sysctl - fix err referenced before assignment (https://github.com/ansible/ansible/issues/58158)
+- vmware_deploy_ovf - backport content fix from 2.9 (https://github.com/ansible/ansible/pull/59614)
+- win_acl - Fixed error when setting rights on directory for which inheritance from parent directory has been disabled.
+- win_domain_computer - Honour the explicit domain server and credentials when moving or removing a computer object - https://github.com/ansible/ansible/pull/63093
+- win_iis_website - Actually restart the site when ``state=restarted`` - https://github.com/ansible/ansible/issues/63828
+- win_partition - Fix invalid variable name causing a failure on checks - https://github.com/ansible/ansible/issues/62401
+- zabbix_* modules - modules will now properly disconnect existing sessions from Zabbix server (see https://github.com/ansible/ansible/pull/58525)
+
+v2.8.6
+======
+
+Release Summary
+---------------
+
+| Release Date: 2019-10-17
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Minor Changes
+-------------
+
+- ansible-test defaults to redacting sensitive values (disable with the ``--no-redact`` option)
+- dnf - Properly handle idempotent transactions with package name wildcard globs (https://github.com/ansible/ansible/issues/62809)
+
+Security Fixes
+--------------
+
+- **security issue** - Convert CLI provided passwords to text initially, to prevent unsafe context being lost when converting from bytes->text during post processing of PlayContext. This prevents CLI provided passwords from being incorrectly templated (CVE-2019-14856)
+
+- **security issue** - properly hide parameters marked with ``no_log`` in suboptions when invalid parameters are passed to the module (CVE-2019-14858)
+
+Bugfixes
+--------
+
+- **SECURITY** - CVE-2019-14846 - Several Ansible plugins could disclose aws credentials in log files.  inventory/aws_ec2.py, inventory/aws_rds.py, lookup/aws_account_attribute.py, and lookup/aws_secret.py, lookup/aws_ssm.py use the boto3 library from the Ansible process. The boto3 library logs credentials at log level DEBUG.  If Ansible's logging was enabled (by setting LOG_PATH to a value) Ansible would set the global log level to DEBUG.  This was inherited by boto and would then log boto credentials to the file specified by LOG_PATH.  This did not affect aws ansible modules as those are executed in a separate process.  This has been fixed by switching to log level INFO
+- ACI modules - Fix a whitespace issue in filters for ACI 4.2 strict validation
+- ACME modules: fix bug in ACME v1 account update code
+- ACME modules: support Buypass' ACME v1 endpoint
+- Cloudengine module_utils - the ``set-id`` (RPC-REPLY XML attribute) may change over the time althougth ``set-id`` is the identity of the next RPC packet.
+- Cloudengine netconf plugin - add a dispatch RPC function,just return original RPC-REPLY, the function is used by ``Cloudengine module_utils``.
+- For package_facts, correct information about apt being missing and fix missing attribute.
+- ansible-podman connection plugin - Fix case when mount of podman container fails and files can't be copied to/from container. Also add error handling in case of failed podman commands. (https://github.com/ansible/ansible/issues/57740)
+- ansible-test now updates SSH keys it generates with newer versions of ssh-keygen to function with Paramiko
+- ce_bgp - update to fix some bugs - When the vrf_name parameter is in the module and the configuration is repeatedly sent to the device, the module displays change = True. (https://github.com/ansible/ansible/pull/60573)
+- ce_bgp_af - update to fix some bugs - Add some update statements. (https://github.com/ansible/ansible/pull/62589)
+- ce_bgp_neighbor - update to fix some bugs - Add some update statements. (https://github.com/ansible/ansible/pull/60934)
+- ce_bgp_neighbor_af - update to fix some bugs - Add some update statements. (https://github.com/ansible/ansible/pull/60937)
+- ce_evpn_bgp - update to fix some bugs - Modify the configured query statement and replace get_config with exec_command. (https://github.com/ansible/ansible/pull/61136)
+- ce_evpn_bgp_rr - update to fix some bugs - Modify the configured query statement and replace get_config with exec_command. (https://github.com/ansible/ansible/pull/61168)
+- ce_evpn_global - update to fix some bugs - Modify the configured query statement and replace get_config with exec_command. (https://github.com/ansible/ansible/pull/61013)
+- ce_facts - update to fix some bugs - Modifying regular expression errors. (https://github.com/ansible/ansible/pull/63331)
+- ce_file_copy - update to Compatible with multiple version of NETCONF API(sshServer). (https://github.com/ansible/ansible/pull/59450)
+- ce_info_center_global- update to fix some bugs - Add some update statements. (https://github.com/ansible/ansible/pull/61283)
+- ce_interface_ospf- update to fix some bugs - Add some update statements. (https://github.com/ansible/ansible/pull/61431)
+- ce_link_status - fix some bugs, result of interface <get> operation involves a large amount of data,interact with the device through the <get-next>.(https://github.com/ansible/ansible/pull/62417).
+- ce_mtu- update to fix some bugs - Contrast before and after adding configuration. (https://github.com/ansible/ansible/pull/61442)
+- ce_netstream_aging - Fix bugs(list index out of range).
+- ce_netstream_aging- update to fix some bugs - Modify the configured query statement and replace get_config with exec_command. (https://github.com/ansible/ansible/pull/61653)
+- ce_netstream_export- update to fix some bugs - Modify the configured query statement and replace get_config with exec_command. (https://github.com/ansible/ansible/pull/61652)
+- ce_netstream_global -  Fix bugs(list index out of range and key error).
+- ce_netstream_template - Fix bugs(list index out of range and update commands error).
+- ce_ntp - update to fix some bugs - Add some update statements. (https://github.com/ansible/ansible/pull/61654)
+- ce_ospf - update to fix some bugs - Contrast before and after adding configuration. (https://github.com/ansible/ansible/pull/61684)
+- ce_snmp_target_host - update to fix some bugs - Contrast before and after adding configuration. (https://github.com/ansible/ansible/pull/61842)
+- ce_snmp_traps - update to fix some bugs - Contrast before and after adding configuration. (https://github.com/ansible/ansible/pull/61843)
+- ce_static_route - update to fix some bugs - Add some update statements. (https://github.com/ansible/ansible/pull/62498)
+- ce_stp - update to fix some bugs - Modify the configured query statement and replace get_config with exec_command. (https://github.com/ansible/ansible/pull/61774)
+- ce_vrf_af - update to fix some bugs - Add some update statements. (https://github.com/ansible/ansible/pull/61683)
+- ce_vxlan_arp - update to fix some bugs - Modifying regular expressions. (https://github.com/ansible/ansible/pull/61995)
+- ce_vxlan_vap - update to fix some bugs - Modify the Operator Difference between Python 2 and Python 3. (https://github.com/ansible/ansible/pull/61996)
+- clarify error messages for 'auto' and missing libs, add missing lib msg for rpm.
+- cron and cronvar - use get_bin_path utility to locate the default crontab executable instead of the hardcoded /usr/bin/crontab. (https://github.com/ansible/ansible/pull/59765)
+- cron cronvar - only run ``get_bin_path()`` once
+- cronvar - use correct binary name (https://github.com/ansible/ansible/issues/63274)
+- debug - fixed an issue introduced in Ansible 2.4 where a loop of debug tasks would lose the "changed" status on each item.
+- display - remove leading space when displaying WARNING messages
+- docker_container - fix idempotency for IP addresses for networks. The old implementation checked the effective IP addresses assigned by the Docker daemon, and not the specified ones. This causes idempotency issues for containers which are not running, since they have no effective IP addresses assigned.
+- docker_container - make sure that when image is missing, check mode indicates a change (image will be pulled).
+- docker_image - make sure that deprecated options also emit proper deprecation warnings next to warnings which indicate how to replace them.
+- docker_login - correct broken fix for https://github.com/ansible/ansible/pull/60381 which crashes for Python 3.
+- docker_node_info - improve error handling when service inspection fails, for example because node name being ambiguous (https://github.com/ansible/ansible/issues/63353, PR https://github.com/ansible/ansible/pull/63418).
+- eos_bgp - Fix fetching AS failure if BGP is not already configured (https://github.com/ansible/ansible/pull/58756)
+- facts/virtual
+- firewalld - enable the firewalld module to function offline with firewalld version 0.7.0 and newer (https://github.com/ansible/ansible/issues/63254)
+- get_url - Don't treat no checksum as a checksum match (https://github.com/ansible/ansible/issues/61978)
+- jenkins modules - CSRF handling fixed accordingly the latest updates in Jenkins Security model for versions > 2.173.3
+- junos_user - Add no_log=True to junos_user `encrypted_password` (https://github.com/ansible/ansible/pull/62184)
+- junos_user - fixed issue with adding multiple values for a Junos account with aggregate mode
+- lineinfile - fix bug that caused multiple line insertions (https://github.com/ansible/ansible/issues/58923).
+- mso_schema_template_bd - Fix incorrect payload when setting intersiteBUMTrafficAllow.
+- openssl_certificate - fix ``assertonly`` provider certificate verification, causing 'private key mismatch' and 'subject mismatch' errors.
+- package_facts - use module warnings rather than a custom implementation for reporting warnings
+- plugins-netconf-ce - to get attribute 'set-id' from rpc-reply.
+- psexec - Fix issue where the Kerberos package was not detected as being available.
+- psexec - Fix issue where the ``interactive`` option was not being passed down to the library.
+- rabbitmq lookup plugin - Fix for rabbitmq lookups failing when using pika v1.0.0 and newer.
+- rabbitmq_publish - Fix to ensure the module works correctly for pika v1.0.0 and later. (https://github.com/ansible/ansible/pull/61960)
+- sts_assume_role - fix assertion text in integration test
+- user - fix stack trace on AIX when attempting to parse shadow file that does not exist (https://github.com/ansible/ansible/issues/62510)
+- vmware_deploy_ovf use user specified resource pool or resource pool pod rather than cluster default (https://github.com/ansible/ansible/issues/61645).
+- win_exec_wrapper - Be more defensive when it comes to getting unhandled exceptions
+
+v2.8.5
+======
+
+Release Summary
+---------------
+
+| Release Date: 2019-09-12
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Minor Changes
+-------------
+
+- ovirt_vm - add documentation warning about linux boot params - they will not be suported since oVirt 4.4 (https://bugzilla.redhat.com/1732437)
+- ovirt_vm - add warning message about linux boot params - they will not be suported since oVirt 4.4 (https://bugzilla.redhat.com/1732437)
+
+Bugfixes
+--------
+
+- Backported to stable-2.8 - Fix
+- Extended loop variables now work with includes (https://github.com/ansible/ansible/pull/61231)
+- Fix nxos_install_os test cases typo (https://github.com/ansible/ansible/pull/58825).
+- Pipelining now works with the buildah plugin.
+- acme_certificate - improve compatibility when finalizing ACME v2 orders. Fixes problem with Buypass' ACME v2 testing endpoint.
+- apt_facts - fix performance regression when getting facts about apt packages (https://github.com/ansible/ansible/issues/60450)
+- aws_s3 - Try to wait for the bucket to exist before setting the access control list.
+- bigip_monitor_http - fix issue with receive parameter idempotency (https://github.com/ansible/ansible/pull/59999)
+- ce_bfd_global - update to fix some bugs - When BFD is unavailable, tosExp and other parameters are sent down to report errors; this error is corrected and the query results are processed again. (https://github.com/ansible/ansible/pull/60412)
+- constructed - Add a warning for the change in behavior in the sanitization of the groups option.
+- digital_ocean_droplet - Fix creation of DigitalOcean droplets using digital_ocean_droplet module (https://github.com/ansible/ansible/pull/61655)
+- docker_compose - fix issue where docker deprecation warning results in ansible erroneously reporting a failure
+- docker_container - improve error behavior when parsing port ranges fails.
+- docker_login - report change on successful logout (https://github.com/ansible/ansible/issues/59232)
+- docker_swarm_service - allow the same port to be published both with TCP and UDP.
+- meraki_syslog - Module would ignore net_id parameter if passed.
+- meraki_syslog - Properly handle tasks with `net_id` instead of `net_name`.
+- netapp_e_lun_mapping - Fix hosts with same lun number conflict in netapp_e_lun_mapping
+- netapp_e_lun_mapping - Fix netapp_e_host module bug when lun=0
+- openssl_certificate - if both private key and CSR were specified, the idempotency check for ``selfsigned`` and ``ownca`` providers ignored the CSR.
+- os_user - when domain is provided, default_project will be taken from this domain.
+- ovirt_vm - update tempalte search by datacenter (https://github.com/ansible/ansible/issues/59189)
+- proxmox_kvm - fixed issue when vm has not yet a name item (https://github.com/ansible/ansible/issues/58194)
+- purefa_facts - Fix bug which causes module failure when selecting I(admins) or I(all) against an old Purity version
+- systemd - wait for a service which is in deactivating state when using ``state=stopped`` (https://github.com/ansible/ansible/pull/59471)
+- user - allow 13 asterisk characters in password field without warning
+- user - update docs to reflect proper way to remove account from all groups
+- vmware - Ensure we can use the modules with Python < 2.7.9 or RHEL/CentOS < 7.4, this as soon as ``validate_certs`` is disabled.
+- win_domain - Set reboot required dependent on exception and add exception id to error message
+- win_domain_controller - Do not fail the play without the user being able to catch dcpromo failing because of a pending reboot within a playbook using ignore_error or retry logic.
+- xenserver_guest - when adding disks to a VM in powered on state, disks are now properly plugged/activated (https://github.com/ansible/ansible/issues/60693).
+
+v2.8.4
+======
+
+Release Summary
+---------------
+
+| Release Date: 2019-08-15
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Minor Changes
+-------------
+
+- Correct the return values of matched and examined from string to int
+- Fix call from "merge_dictionaries" to "_merge_dictionaries" in GcpSession object (https://github.com/ansible/ansible/issues/57140).
+- Fixes comparison of list to integer in gluster_volume (https://github.com/ansible/ansible/issues/56844).
+- The `podman` connection plugin now supports pipelining.
+- With Python3, we cannot iterate on a dict and modify it at the same time (https://github.com/ansible/ansible/issues/54869).
+- ovirt_host - update force parameter documentation (https://bugzilla.redhat.com/show_bug.cgi?id=1719271#c11)
+- remove ambiguity in module naming; use "my_test" as module name
+
+Bugfixes
+--------
+
+- Add no_log to credentials field to avoid disclosures (CVE-2019-10217)
+- Do not re-use remote_user from previous loop iteration (https://github.com/ansible/ansible/issues/58876)
+- Fix netconf connection command timeout issue (https://github.com/ansible/ansible/pull/58322)
+- Fix strategy functions that update inventory and back 'add_host' and 'group_by' actions.
+- Fixed issue where `ansible_net_model` was not being populated in iosxr_facts (https://github.com/ansible/ansible/pull/58488)
+- ansible.basics - fix core C# recursive call when logging fails (e.g. if insufficient permissions are held) (https://github.com/ansible/ansible/pull/59503)
+- async - Fix async callback plugins to allow async output to be displayed when running command/shell (https://github.com/ansible/ansible/issues/15988)
+- aws_s3 - Improve usability when the execution host lacks MD5 support (e.g. due to FIPS-140-2).
+- aws_s3 module - Improve ETag calculation, allow overwrite=always to work on FIPS-140-2
+- ce_aaa_server - update to fix some bugs - When you want to delete a parameter, a conflict will occur, causing the download configuration to fail. (https://github.com/ansible/ansible/pull/60270)
+- ce_aaa_server_host - update to fix some bugs - module CMD update in ansible is inconsistent with switch; when parameter is bool type, it is impossible to judge the value of expensive parameter. (https://github.com/ansible/ansible/pull/60272)
+- ce_acl - update to fix some bugs - When the frag_type parameter is in the module and the configuration is repeatedly sent to the device, the module displays change = True. (https://github.com/ansible/ansible/pull/60274)
+- ce_bgp_af - update to fix some bugs - XML query result error, update_cmds statement missing. (https://github.com/ansible/ansible/pull/59678)
+- ce_config  - It is also necessary to undo mmi-mode enable after running commands.Otherwise it will make a effect to next tasks.(https://github.com/ansible/ansible/pull/60071).
+- ce_config - Optimize multi-level views & fix a bug. (https://github.com/ansible/ansible/pull/59523)
+- ce_mlag_config - update to fix some bugs - Configuration does not absent as expect. (https://github.com/ansible/ansible/pull/59336)
+- ce_mtu - bug-info - unable to parse request, to fix the bug (https://github.com/ansible/ansible/pull/59343)
+- ce_netstream_global - The 'get_config', which is from 'ansible.module_utils.network.cloudengine.ce', try to return the result from cache,however the configure has changed. (https://github.com/ansible/ansible/pull/59689)
+- ce_netstream_global - The 'get_config', which is from 'ansible.module_utils.network.cloudengine.ce', try to return the result from cache,however the configure has changed. (https://github.com/ansible/ansible/pull/59690)
+- ce_ntp_auth - update to fix "state is present but all of the following are missing-password" bug(https://github.com/ansible/ansible/pull/59344)
+- ce_rollback - set mmi-mode enable to run commands and unset after running(https://github.com/ansible/ansible/pull/60075).
+- ce_rollback - shouldn't load xml configure via network_cli(https://github.com/ansible/ansible/pull/59345)
+- ce_startup - update to fix a bug - netconf and cli are all used to load configure at a time (https://github.com/ansible/ansible/pull/59346 )
+- ce_stp - update to fix some bugs - The config of first time showing is same as second because of 'get_config', using regular to search & show config (https://github.com/ansible/ansible/pull/59347 )
+- ce_vrrp - update to fix some bugs - Solving the mistake of parameter judgment, update_cmds statement missing. (https://github.com/ansible/ansible/pull/59677)
+- consul_session - ``state`` parameter: use ``required_if``, document ``id`` parameter, update ``name`` parameter documentation
+- docker_container - fix port bindings with IPv6 addresses.
+- documented ``ignore`` option for ``TRANSFORM_INVALID_GROUP_CHARS``
+- ec2_group - Don't truncate the host bits off of IPv6 CIDRs. CIDRs will be passed thru to EC2 as-is provided they are valid IPv6 representations.  (https://github.com/ansible/ansible/issues/53297)
+- ec2_instance - Ensures ``ebs.volume_size`` and ``ebs.iops`` are ``int`` to avoid issues with Jinja2 templating
+- facts - fixed double-counting of CPUs on POWER systems
+- group - The group module errored of if the gid exists with the same group name. This prevents reruns of the playbook. This fixes a regression introduced by 4898b0a.
+- nagios - Removed redundant type check which caused crashes. Guardrails added elsewhere in earlier change.
+- openssh_keypair - add public key and key comment validation on change
+- os_subnet - it is valid to specify an explicit ``subnetpool_id`` rather than ``use_default_subnetpool`` or ``cidr``
+
+- ovirt_host - add event log on failure (https://github.com/oVirt/ovirt-ansible-infra/issues/8)
+- ovirt_vnic_profile - fix for updating vnic profile (https://github.com/ansible/ansible/pull/56518)
+- ovirt_vnic_profile - update qos and pass_through logic (https://bugzilla.redhat.com/show_bug.cgi?id=1597537)
+- pbrun - add default user for become plugin (https://github.com/ansible/ansible/pull/59754)
+- plugin loader - Restore adding plugin loader playbook dir to ``Playbook`` in addition to ``PlaybookCLI`` to solve sub directory playbook relative plugins to be located (https://github.com/ansible/ansible/issues/59548)
+- podman_image - handle new output format for image build
+- postgresql_db.py - Fix code formatting (https://github.com/ansible/ansible/pull/59497)
+- postgresql_ext.py - Remove pg_quote_identifier unused import (https://github.com/ansible/ansible/pull/59497)
+- postgresql_lang.py - Remove pg_quote_identifier and to_native unused imports (https://github.com/ansible/ansible/pull/59497)
+- postgresql_membership - turn off the default database warning (https://github.com/ansible/ansible/pull/60043)
+- postgresql_ping - turn off the default database warning (https://github.com/ansible/ansible/pull/60043)
+- postgresql_slot - turn off the default database warning for slot_type physical (https://github.com/ansible/ansible/issues/60043)
+- postgresql_table.py - Fix code formatting (https://github.com/ansible/ansible/pull/59497)
+- postgresql_tablespace - turn off the default database warning (https://github.com/ansible/ansible/pull/60043)
+- resolves CVE-2019-10206, by avoiding templating passwords from prompt as it is probable they have special characters.
+- sysctl - check system values, not just sysctl.conf file, when determing state (https://github.com/ansible/ansible/pull/56153#issuecomment-514384922)
+- user - do not warn when using ``local: yes`` if user already exists (https://github.com/ansible/ansible/issues/58063)
+- win_domain_group_membership - Fix missing @extra_args on Get-ADObject to support dirrent domain and credentials for retrival (https://github.com/ansible/ansible/issues/57404)
+- win_dsc - Be more leniant around the accepted DateTime values for backwards compatibility - https://github.com/ansible/ansible/issues/59667
+- win_user - Get proper error code when failing to validate the user's credentials
+
+v2.8.3
+======
+
+Release Summary
+---------------
+
+| Release Date: 2019-07-25
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Minor Changes
+-------------
+
+- In ec2_eip, device_id is required when private_ip_address is set, but the reverse is not true (https://github.com/ansible/ansible/pull/55194).
+- Typecast vlan id to string in nmcli module (https://github.com/ansible/ansible/issues/58949).
+- Warn user about Distributed vSwitch permission in vmware_object_role_permission (https://github.com/ansible/ansible/issues/55248).
+- When using `fetch_nested` fetch also list of href, instead only single object hrefs.
+- dnf - set lock_timeout to a sane default (30 seconds, as is the cli)
+- fix exception when tower_verify_ssl parameter is used in tower_role module (https://github.com/ansible/ansible/pull/57518).
+- vApp setting can be set while VM creation in vmware_guest (https://github.com/ansible/ansible/issues/50617).
+- yum - set lock_timeout to a sane default (30 seconds, as is the cli)
+
+Bugfixes
+--------
+
+- Check when user does pass empty dict to sysprep. Fixes https://github.com/oVirt/ovirt-ansible-vm-infra/issues/104
+- Do not assume None is equal as connection and become tools can have different unspecified defaults.
+- Fix broken slxos_config due to changed backup options (https://github.com/ansible/ansible/pull/58804).
+- Fix regression when including a role with a custom filter (https://github.com/ansible/ansible/issues/57351)
+- Fixed disk already exists issue while cloning guest in vmware_guest module (https://github.com/ansible/ansible/issues/56861).
+- Gather facts should use gather_subset config by default.
+- Make max_connections parameter work again in vmware_guest module (https://github.com/ansible/ansible/pull/58061).
+- To find specified interfaces, add a interface-type.
+- To resolve NoneType error as it was missing NoneType check for l3protocol param in aci_l3out. (https://github.com/ansible/ansible/pull/58618).
+- Use templated loop_var/index_var when looping include_* (https://github.com/ansible/ansible/issues/58820)
+- Using neconf API to send cli commands is a bug, now fix it(https://github.com/ansible/ansible/pull/59071)
+- aws_secret - Document region so the config manager can retrieve its value.
+- ce_bfd_global - line284, 'data' tag of xpath should be removed. line498, add "self.existing == self.end_state" to compare the status and get 'changed'.
+- ce_bfd_view - line287, line293, 'data' tag of a xpath should be removed to find a element.line500, running result judgment.
+- ce_evpn_bd_vni - modify xml function to find data.(https://github.com/ansible/ansible/pull/58227)
+- ce_evpn_bgp_rr - fix bugs,get wrong config, get wrong result.changed .(https://github.com/ansible/ansible/pull/58228)
+- ce_interface - It is not a good way to find data from a xml tree by regular. lin379 line405.
+- ce_interface - line 750,779 Some attributes of interfaces are missing, 'ifAdminStatus', 'ifDescr', 'isL2SwitchPort'.So add them when get interface status.
+- ce_interface_ospf - remove the 'data' tag to fix a bug,.(https://github.com/ansible/ansible/pull/58229)
+- ce_link_status - remove the 'data' tag to fix a bug,.(https://github.com/ansible/ansible/pull/58229)
+- ce_netstream_aging - line318, Redundant regular. line326,line33, there may be out of array rang,some time.(https://github.com/ansible/ansible/pull/58231)
+- ce_static_route The IPv6 binary system has a length of 128 bits and is grouped by 16 bits. Each group is separated by a colon ":" and can be divided into 8 groups, each group being represented by 4 hexadecimal. You can use a double colon "::" to represent a group of 0 or more consecutive 0s, but only once. Divisible compatible with Python2 and Python3. To find all elements, Data root node that is taged 'data' should be removed.(https://github.com/ansible/ansible/pull/58251)
+- ce_vrrp - tag 'data' is the root node of data xml tree,remove 'data' tag to find all. line 700,747 "vrrp_group_info["adminIgnoreIfDown"]", value is string and lower case. line 1177,1240. Compare wrong! They should be same key of value to be compared.
+- ce_vxlan_gateway - update the regular expression to match the more.(https://github.com/ansible/ansible/pull/58226)
+- ce_vxlan_global - line 242 , bd_info is a string array,and it should be 'extend' operation. line 423, 'if' and 'else' should set a different value. if 'exist', that value is 'enable'. line 477, To get state of result, if it is changed or not.
+- docker_* modules - behave better when requests errors are not caught by docker-py.
+- docker_container - add support for ``nocopy`` mode for volumes.
+- docker_image - validate ``tag`` option value.
+- dzdo did not work with password authentication
+- facts - handle situation where ``ansible_architecture`` may not be defined (https://github.com/ansible/ansible/issues/55400)
+- fixed collection-based plugin loading in ansible-connection (eg networking plugins)
+- gather_facts now correctly passes back the full output of modules on error and skipped, fixes
+- group - properly detect duplicate GIDs when local=yes (https://github.com/ansible/ansible/issues/56481)
+- ios_config - fixed issue where the "no macro" command was erroneously handled by edit_macro(). https://github.com/ansible/ansible/issues/55212
+- machinectl become plugin - correct bugs which induced errors on plugin usage
+- nagios module - Fix nagios module to recognize if ``cmdfile`` exists and is fifo pipe.
+- nmcli - fixed regression caused by commit b7724fd, github issue
+- openssl_privatekey - ``secp256r1`` got accidentally forgotten in the curve list.
+- os_quota - fix failure to set compute or network quota when volume service is not available
+- ovirt add host retry example to documentation BZ(https://bugzilla.redhat.com/show_bug.cgi?id=1719271)
+- ovirt migrate virtual machine with state present and not only running BZ(https://bugzilla.redhat.com/show_bug.cgi?id=1722403)
+- ovirt update vm migration domunetation BZ(https://bugzilla.redhat.com/show_bug.cgi?id=1724535)
+- ovirt vnic profile: remove duplication in readme
+- ovirt_vm - fix for module failure on creation (https://github.com/ansible/ansible/issues/59385)
+- postgresql_schema - Parameter ensure replaced by state in the drop schema example (https://github.com/ansible/ansible/pull/59342)
+- setup (Windows) - prevent setup module failure if Get-MachineSid fails (https://github.com/ansible/ansible/issues/47813)
+- user - omit incompatible options when operating in local mode (https://github.com/ansible/ansible/issues/48722)
+- vmware_guest accepts 0 MB of memory reservation, fix regression introduced via 193f69064fb40a83e3e7d2112ef24868b45233b3 (https://github.com/ansible/ansible/issues/59190).
+- win_domain_user - Do not hide error and stacktrace on failures
+- win_get_url - Fix proxy_url not used correctly (https://github.com/ansible/ansible/issues/58691)
+- win_reg_stat - fix issue when trying to check keys in ``HKU:\`` - https://github.com/ansible/ansible/issues/59337
+- yum - handle stale/invalid yum.pid lock file (https://github.com/ansible/ansible/issues/57189)
+
 v2.8.2
 ======
 
@@ -1503,9 +2313,9 @@ vmware
 xenserver
 ^^^^^^^^^
 
-- xenserver_guest - Manages virtual machines running on Citrix XenServer host or pool
-- xenserver_guest_facts - Gathers facts for virtual machines running on Citrix XenServer host or pool
-- xenserver_guest_powerstate - Manages power states of virtual machines running on Citrix XenServer host or pool
+- xenserver_guest - Manages virtual machines running on Citrix Hypervisor/XenServer host or pool
+- xenserver_guest_facts - Gathers facts for virtual machines running on Citrix Hypervisor/XenServer host or pool
+- xenserver_guest_powerstate - Manages power states of virtual machines running on Citrix Hypervisor/XenServer host or pool
 
 Clustering
 ~~~~~~~~~~
@@ -1916,7 +2726,7 @@ fortios
 - fortios_report_layout - Report layout configuration in Fortinet's FortiOS and FortiGate.
 - fortios_report_setting - Report setting configuration in Fortinet's FortiOS and FortiGate.
 - fortios_report_style - Report style configuration in Fortinet's FortiOS and FortiGate.
-- fortios_report_theme - Report themes configuratio in Fortinet's FortiOS and FortiGate.
+- fortios_report_theme - Report themes configuration in Fortinet's FortiOS and FortiGate.
 - fortios_router_access_list - Configure access lists in Fortinet's FortiOS and FortiGate.
 - fortios_router_auth_path - Configure authentication based routing in Fortinet's FortiOS and FortiGate.
 - fortios_router_bfd - Configure BFD in Fortinet's FortiOS and FortiGate.
@@ -2141,8 +2951,8 @@ cpm
 - cpm_plugconfig - Get and Set Plug Parameters on WTI OOB and PDU power devices
 - cpm_plugcontrol - Get and Set Plug actions on WTI OOB and PDU power devices
 
-dellemc.idrac
-^^^^^^^^^^^^^
+dellemc
+^^^^^^^
 
 - idrac_firmware - Firmware update from a repository on a network share (CIFS, NFS).
 - idrac_server_config_profile - Export or Import iDRAC Server Configuration Profile (SCP).

changelogs/config.yaml

@@ -7,7 +7,9 @@ new_plugins_after_name: removed_features
 sections:
 - ['major_changes', 'Major Changes']
 - ['minor_changes', 'Minor Changes']
+- ['breaking_changes', 'Breaking Changes / Porting Guide']
 - ['deprecated_features', 'Deprecated Features']
 - ['removed_features', 'Removed Features (previously deprecated)']
+- ['security_fixes', 'Security Fixes']
 - ['bugfixes', 'Bugfixes']
 - ['known_issues', 'Known Issues']

changelogs/fragments/159_kubectl.yml

@@ -0,0 +1,2 @@
+security_fixes:
+- kubectl - connection plugin now redact kubectl_token and kubectl_password in console log (https://github.com/ansible-collections/community.kubernetes/issues/65) (CVE-2020-1753).

changelogs/fragments/225-mysql_user_fix_no_database_selected.yml

@@ -0,0 +1,2 @@
+bugfixes:
+- mysql_user - fix the error No database selected (https://github.com/ansible/ansible/issues/68070).

changelogs/fragments/32386_debconf_password.yml

@@ -0,0 +1,2 @@
+minor_changes:
+- debconf - add a note about no_log=True since module might expose sensitive information to logs (https://github.com/ansible/ansible/issues/32386).

changelogs/fragments/41240-fix-os_quota-without-cinder.yaml

@@ -0,0 +1,3 @@
+---
+bugfixes:
+  - "os_quota - fix failure to set compute or network quota when volume service is not available"

changelogs/fragments/46332-aws-improve-etag-handling.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - aws_s3 module - Improve ETag calculation, allow overwrite=always to work on FIPS-140-2

changelogs/fragments/471-no_log.yml

@@ -0,0 +1,2 @@
+security_fixes:
+- aws_secret - flag the ``secret`` parameter as containing sensitive data which shouldn't be logged (https://github.com/ansible-collections/community.aws/pull/471) (CVE-2021-3447).

changelogs/fragments/49568-type-checking.yaml

@@ -0,0 +1,3 @@
+---
+bugfixes:
+- "nagios - Removed redundant type check which caused crashes. Guardrails added elsewhere in earlier change."

changelogs/fragments/49754-default-become-user-pbrun-become-plugin.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+  - pbrun - add default user for become plugin (https://github.com/ansible/ansible/pull/59754)

changelogs/fragments/50617-vmware_guest-vapp_settings.yml

@@ -0,0 +1,2 @@
+minor_changes:
+- vApp setting can be set while VM creation in vmware_guest (https://github.com/ansible/ansible/issues/50617).

changelogs/fragments/54790-fix-region-aws_secret-lookup.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+  - aws_secret - Document region so the config manager can retrieve its value.

changelogs/fragments/55194-ec2_eip-required_together.yml

@@ -0,0 +1,2 @@
+minor_changes:
+  - In ec2_eip, device_id is required when private_ip_address is set, but the reverse is not true (https://github.com/ansible/ansible/pull/55194).

changelogs/fragments/55716-ec2_instance_int_volume_size.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - ec2_instance - Ensures ``ebs.volume_size`` and ``ebs.iops`` are ``int`` to avoid issues with Jinja2 templating

changelogs/fragments/55919-rabbitmq_publish-fix-for-recent-pika-versions.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - rabbitmq_publish - Fix to ensure the module works correctly for pika v1.0.0 and later. (https://github.com/ansible/ansible/pull/61960)

changelogs/fragments/56376-bootproto_dhcp_regression.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+  - nmcli - fixed regression caused by commit b7724fd, github issue #36615 (https://github.com/ansible/ansible/issues/36615)

changelogs/fragments/56392-consul_session-improve_doc_and_add_integration_tests.yaml

@@ -0,0 +1,3 @@
+---
+bugfixes:
+  - "consul_session - ``state`` parameter: use ``required_if``, document ``id`` parameter, update ``name`` parameter documentation"

changelogs/fragments/56481-group-detect-duplicate-gids-local.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+  - group - properly detect duplicate GIDs when local=yes (https://github.com/ansible/ansible/issues/56481)

changelogs/fragments/56832-remove-aptitude-warning.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - Remove the unnecessary warning about aptitude not being installed (https://github.com/ansible/ansible/issues/56832).

changelogs/fragments/56844-glusterfs_volume-fix_compare.yml

@@ -0,0 +1,2 @@
+minor_changes:
+  - Fixes comparison of list to integer in gluster_volume (https://github.com/ansible/ansible/issues/56844).

changelogs/fragments/57096-netapp_e_lun_mapping-Fix-confict-and-zero-lun.yaml

@@ -0,0 +1,3 @@
+bugfixes:
+  - netapp_e_lun_mapping - Fix hosts with same lun number conflict in netapp_e_lun_mapping
+  - netapp_e_lun_mapping - Fix netapp_e_host module bug when lun=0

changelogs/fragments/57185-fix_vmware_modules_py_pre2.79.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+  - vmware - Ensure we can use the modules with Python < 2.7.9 or RHEL/CentOS < 7.4, this as soon as ``validate_certs`` is disabled.

changelogs/fragments/57298-ovirt_vnic_remove_duplication_readme.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - "ovirt vnic profile: remove duplication in readme"

changelogs/fragments/57351-role-custom-filter.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+  - Fix regression when including a role with a custom filter (https://github.com/ansible/ansible/issues/57351)

changelogs/fragments/57518-tower_role-fix_validate_certs.yml

@@ -0,0 +1,2 @@
+minor_changes:
+  - fix exception when tower_verify_ssl parameter is used in tower_role module (https://github.com/ansible/ansible/pull/57518).

changelogs/fragments/57579-add-pipelining-to-podman-connection-plugin.yaml

@@ -0,0 +1,2 @@
+minor_changes:
+- The `podman` connection plugin now supports pipelining.

changelogs/fragments/57711-To_resolve_NoneType_error_in_aci_l3out.yaml

@@ -0,0 +1,3 @@
+bugfixes:
+  - To resolve NoneType error as it was missing NoneType check for l3protocol param in aci_l3out.
+    (https://github.com/ansible/ansible/pull/58618).

changelogs/fragments/57741-podman-connection-plugin-fix-mount.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+  - ansible-podman connection plugin - Fix case when mount of podman container fails and files can't be copied to/from container. Also add error handling in case of failed podman commands. (https://github.com/ansible/ansible/issues/57740)

changelogs/fragments/57804-win_acl-no-longer-needs-SeSecurityPrivilege.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - win_acl - Fixed error when setting rights on directory for which inheritance from parent directory has been disabled.

changelogs/fragments/57907-update-ce_interface-to-fix-bugs.yml

@@ -0,0 +1,3 @@
+bugfixes:
+  - ce_interface - It is not a good way to find data from a xml tree by regular. lin379 line405.
+  - ce_interface - line 750,779 Some attributes of interfaces are missing, 'ifAdminStatus', 'ifDescr', 'isL2SwitchPort'.So add them when get interface status.

changelogs/fragments/57935-ovirt-host-event-log.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - ovirt_host - add event log on failure (https://github.com/oVirt/ovirt-ansible-infra/issues/8)

changelogs/fragments/57947-update-ce_vxlan_global-to-fix-bugs.yml

@@ -0,0 +1,4 @@
+bugfixes:
+  - ce_vxlan_global - line 242 , bd_info is a string array,and it should be 'extend' operation.
+    line 423, 'if' and 'else' should set a different value. if 'exist', that value is 'enable'.
+    line 477, To get state of result, if it is changed or not.

changelogs/fragments/57993-openssh_keypair-add-public-key-and-key-comment-validation.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - openssh_keypair - add public key and key comment validation on change

changelogs/fragments/58060-vmware_guest-make_max_connections_work.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - Make max_connections parameter work again in vmware_guest module (https://github.com/ansible/ansible/pull/58061).

changelogs/fragments/58136-ovirt_vm_migrate_with_state_present.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - ovirt migrate virtual machine with state present and not only running BZ(https://bugzilla.redhat.com/show_bug.cgi?id=1722403)

changelogs/fragments/58158-sysctl-fix-referenced-before-assignment.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+  - sysctl - fix err referenced before assignment (https://github.com/ansible/ansible/issues/58158)

changelogs/fragments/58194-vm-name-item-not-yet-present-at-creation-time.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+  - proxmox_kvm - fixed issue when vm has not yet a name item (https://github.com/ansible/ansible/issues/58194)

changelogs/fragments/58200-update-ce_bfd_global-to-fix-a-bug.yml

@@ -0,0 +1,3 @@
+bugfixes:
+  - ce_bfd_global - line284, 'data' tag of xpath should be removed.
+    line498, add "self.existing == self.end_state" to compare the status and get 'changed'.

changelogs/fragments/58207-update-ce_bfd_view-to-fix-a-bug.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - ce_bfd_view - line287, line293, 'data' tag of a xpath should be removed to find a element.line500, running result judgment.

changelogs/fragments/58226-update-ce_vxlan_gateway-to-fix-a-bug.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - ce_vxlan_gateway - update the regular expression to match the more.(https://github.com/ansible/ansible/pull/58226)

changelogs/fragments/58227-update-cce_evpn_bd_vni-to-fix-a-bug.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - ce_evpn_bd_vni - modify xml function to find data.(https://github.com/ansible/ansible/pull/58227)

changelogs/fragments/58229-update-ce_interface_ospf-to-fix-a-bug.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - ce_interface_ospf - remove the 'data' tag to fix a bug,.(https://github.com/ansible/ansible/pull/58229)

changelogs/fragments/58323-copy-deep-recursive-with-remote_src.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+- copy - recursive copy with ``remote_src=yes`` now recurses beyond first level. (Fixes https://github.com/ansible/ansible/issues/58284)

changelogs/fragments/58360-fix-cpu-count-ppc.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+  - facts - fixed double-counting of CPUs on POWER systems

changelogs/fragments/58483-win_setup_resilience.yml

@@ -0,0 +1,2 @@
+bugfixes:
+- setup (Windows) - prevent setup module failure if Get-MachineSid fails (https://github.com/ansible/ansible/issues/47813)

changelogs/fragments/58525-zabbix-modules-logout.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - zabbix_* modules - modules will now properly disconnect existing sessions from Zabbix server (see https://github.com/ansible/ansible/pull/58525)

changelogs/fragments/58554-update-ce_vrrp-to-fix-a-bug.yml

@@ -0,0 +1,4 @@
+bugfixes:
+  - ce_vrrp - tag 'data' is the root node of data xml tree,remove 'data' tag to find all. 
+    line 700,747 "vrrp_group_info["adminIgnoreIfDown"]", value is string and lower case.
+    line 1177,1240. Compare wrong! They should be same key of value to be compared.

changelogs/fragments/58559-update-ce_evpn_bgp_rr-to-fix-a-bug.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - ce_evpn_bgp_rr - fix bugs,get wrong config, get wrong result.changed .(https://github.com/ansible/ansible/pull/58228)

changelogs/fragments/58561-update-ce_link_status-to-fix-a-bug.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - ce_link_status - remove the 'data' tag to fix a bug,.(https://github.com/ansible/ansible/pull/58229)

changelogs/fragments/58563-update-ce_netstream_aging-to-fix-a-bug.yml

@@ -0,0 +1,3 @@
+bugfixes:
+  - ce_netstream_aging - line318, Redundant regular.
+    line326,line33, there may be out of array rang,some time.(https://github.com/ansible/ansible/pull/58231)

changelogs/fragments/58565-update-ce_static_route-to-fix-a-bug.yml

@@ -0,0 +1,7 @@
+bugfixes:
+  - ce_static_route 
+    The IPv6 binary system has a length of 128 bits and is grouped by 16 bits.
+    Each group is separated by a colon ":" and can be divided into 8 groups, each group being represented by 4 hexadecimal.
+    You can use a double colon "::" to represent a group of 0 or more consecutive 0s, but only once.
+    Divisible compatible with Python2 and Python3.
+    To find all elements, Data root node that is taged 'data' should be removed.(https://github.com/ansible/ansible/pull/58251)

changelogs/fragments/58569-nagios-fifo-fix.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+  - nagios module - Fix nagios module to recognize if ``cmdfile`` exists and is fifo pipe.

changelogs/fragments/58577-ovirt_update_vm_migration_domunetation.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - ovirt update vm migration domunetation BZ(https://bugzilla.redhat.com/show_bug.cgi?id=1724535)

changelogs/fragments/58579-vmware_object_role_perm_fix.yml

@@ -0,0 +1,2 @@
+minor_changes:
+  - Warn user about Distributed vSwitch permission in vmware_object_role_permission (https://github.com/ansible/ansible/issues/55248).

changelogs/fragments/58605-openssl_privatekey-secp256r1.yml

@@ -0,0 +1,2 @@
+bugfixes:
+- "openssl_privatekey - ``secp256r1`` got accidentally forgotten in the curve list."

changelogs/fragments/58625-ovirt_add_host_retry_doc.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - ovirt add host retry example to documentation BZ(https://bugzilla.redhat.com/show_bug.cgi?id=1719271)

changelogs/fragments/58734-correct-machinectl-become-plugin.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+  - machinectl become plugin - correct bugs which induced errors on plugin usage

changelogs/fragments/58737-vmware_guest-fix_clone_guest.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - Fixed disk already exists issue while cloning guest in vmware_guest module (https://github.com/ansible/ansible/issues/56861).

changelogs/fragments/58756-fix_eos_bgp_fetching_as.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+  - eos_bgp - Fix fetching AS failure if BGP is not already configured (https://github.com/ansible/ansible/pull/58756)

changelogs/fragments/58791-docker-errors.yml

@@ -0,0 +1,3 @@
+bugfixes:
+- "docker_image - validate ``tag`` option value."
+- "docker_* modules - behave better when requests errors are not caught by docker-py."

changelogs/fragments/58820-use-templated-loop_var-in-include_tasks.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+  - Use templated loop_var/index_var when looping include_* (https://github.com/ansible/ansible/issues/58820)

changelogs/fragments/58876-do-not-reuse-remote_user-from-prev-loop.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+  - Do not re-use remote_user from previous loop iteration (https://github.com/ansible/ansible/issues/58876)

changelogs/fragments/58949-nmcli-vlanid-typecast.yml

@@ -0,0 +1,2 @@
+minor_changes:
+- Typecast vlan id to string in nmcli module (https://github.com/ansible/ansible/issues/58949).

changelogs/fragments/58978-junos_user-fix-ssh-key-assignment.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+  - junos_user - fixed issue with adding multiple values for a Junos account with aggregate mode

changelogs/fragments/59017-perf-regression-handlers.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - Fix for performance regression in handler invocation (https://github.com/ansible/ansible/issues/59017)

changelogs/fragments/59043-docker_container-nocopy.yml

@@ -0,0 +1,2 @@
+bugfixes:
+- "docker_container - add support for ``nocopy`` mode for volumes."

changelogs/fragments/59072-update-ce_interface-to-fix-a-bug.yml

@@ -0,0 +1,2 @@
+bugfixes:
+- "To find specified interfaces, add a interface-type."

changelogs/fragments/59106-fix-ipv6-truncating-in-ec2_group.yml

@@ -0,0 +1,4 @@
+bugfixes:
+  - ec2_group - Don't truncate the host bits off of IPv6 CIDRs.
+    CIDRs will be passed thru to EC2 as-is provided they are valid IPv6
+    representations.  (https://github.com/ansible/ansible/issues/53297)

changelogs/fragments/59190-vmware_guest-mem_reservation.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - vmware_guest accepts 0 MB of memory reservation, fix regression introduced via 193f69064fb40a83e3e7d2112ef24868b45233b3 (https://github.com/ansible/ansible/issues/59190).

changelogs/fragments/59196-ovirt_use_sysprep_when_needed.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - "Check when user does pass empty dict to sysprep. Fixes https://github.com/oVirt/ovirt-ansible-vm-infra/issues/104"

changelogs/fragments/59243-update-ce_file_copy-to-fix-a-bug.yml

@@ -0,0 +1,2 @@
+bugfixes:
+- Using neconf API to send cli commands is a bug, now fix it(https://github.com/ansible/ansible/pull/59071)

changelogs/fragments/59335-developing_modules_general-update_docs.yaml

@@ -0,0 +1,2 @@
+minor_changes:
+- remove ambiguity in module naming; use "my_test" as module name

changelogs/fragments/59342_postgresql_schema-fix-example.yml

@@ -0,0 +1,2 @@
+bugfixes:
+- postgresql_schema - Parameter ensure replaced by state in the drop schema example (https://github.com/ansible/ansible/pull/59342)

changelogs/fragments/59377-ovirt-vm-when-creating-fix.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - ovirt_vm - fix for module failure on creation (https://github.com/ansible/ansible/issues/59385)

changelogs/fragments/59437-update-ce_ntp_auth-to-fix-a-bug.yml

@@ -0,0 +1,2 @@
+bugfixes:
+- ce_ntp_auth - update to fix "state is present but all of the following are missing-password" bug(https://github.com/ansible/ansible/pull/59344)

changelogs/fragments/59445-ce_rollback_shouldnt_load_xml_configure_via_network_cli.yml

@@ -0,0 +1,2 @@
+bugfixes:
+- ce_rollback - shouldn't load xml configure via network_cli(https://github.com/ansible/ansible/pull/59345)

changelogs/fragments/59450-ce_file_copy_different_version_sshserver_xml.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - ce_file_copy - update to Compatible with multiple version of NETCONF API(sshServer). (https://github.com/ansible/ansible/pull/59450)

changelogs/fragments/59456-find-return-values.yaml

@@ -0,0 +1,2 @@
+minor_changes:
+  - Correct the return values of matched and examined from string to int

changelogs/fragments/59471-systemd-wait-while-deactivating.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+  - systemd - wait for a service which is in deactivating state when using ``state=stopped`` (https://github.com/ansible/ansible/pull/59471)

changelogs/fragments/59497_postgresql-modules-remove-unused-imports.yml

@@ -0,0 +1,5 @@
+bugfixes:
+- postgresql_db.py - Fix code formatting (https://github.com/ansible/ansible/pull/59497)
+- postgresql_ext.py - Remove pg_quote_identifier unused import (https://github.com/ansible/ansible/pull/59497)
+- postgresql_lang.py - Remove pg_quote_identifier and to_native unused imports (https://github.com/ansible/ansible/pull/59497)
+- postgresql_table.py - Fix code formatting (https://github.com/ansible/ansible/pull/59497)

changelogs/fragments/59503-fix-recursive-csharp-logging.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - ansible.basics - fix core C# recursive call when logging fails (e.g. if insufficient permissions are held) (https://github.com/ansible/ansible/pull/59503)

changelogs/fragments/59515-ce_mtu-update-to-fix-bugs.yml

@@ -0,0 +1,2 @@
+bugfixes:
+- ce_mtu - bug-info - unable to parse request, to fix the bug (https://github.com/ansible/ansible/pull/59343)

changelogs/fragments/59520-ce_startup-update-to-fix-a-bug.yml

@@ -0,0 +1,2 @@
+bugfixes:
+- ce_startup - update to fix a bug - netconf and cli are all used to load configure at a time (https://github.com/ansible/ansible/pull/59346 )

changelogs/fragments/59548-import-playbook-plugin-dirs.yml

@@ -0,0 +1,4 @@
+bugfixes:
+- plugin loader - Restore adding plugin loader playbook dir to ``Playbook`` in
+  addition to ``PlaybookCLI`` to solve sub directory playbook relative plugins
+  to be located (https://github.com/ansible/ansible/issues/59548)