New release v2.7.1

[stable-2.7] Fix from sivel for ansible-doc
* Major slow down due to using the wrong loader for plugin_types * traceback due to adding httpapi and cliconf plugins to the plugins we allow ansible-doc to process (cherry picked from commit e5a245d) Co-authored-by: Toshio Kuratomi <a.badger@gmail.com>
2018-10-25 13:12:52 -07:00 · 2018-10-25 12:49:58 -07:00 · 2018-10-25 11:32:02 -07:00 · 2018-10-24 10:49:40 -07:00 · 2018-10-24 07:33:20 -07:00 · 2018-10-23 21:04:09 -07:00
767 changed files with 13991 additions and 5857 deletions
--- a/MANIFEST.in
+++ b/MANIFEST.in
@ -1,11 +1,15 @@
-prune hacking
 include README.rst
 include COPYING
 include SYMLINK_CACHE.json
 include requirements.txt
 include .coveragerc
+include shippable.yml
+include tox.ini
+include bin/ansible-test
 include examples/hosts
 include examples/ansible.cfg
+include examples/scripts/ConfigureRemotingForAnsible.ps1
+include examples/scripts/upgrade_to_ps3.ps1
 recursive-include lib/ansible/module_utils/powershell *
 recursive-include lib/ansible/modules *
 recursive-include lib/ansible/galaxy/data *
--- a/2
+++ b/2
@ -122,7 +122,7 @@ ifneq ($(REPOTAG),)
 endif

 # ansible-test parameters
-ANSIBLE_TEST ?= test/runner/ansible-test
+ANSIBLE_TEST ?= bin/ansible-test
 TEST_FLAGS ?=

 # ansible-test units parameters (make test / make test-py3)
--- a/bin/ansible-connection
+++ b/bin/ansible-connection
@ -271,6 +271,8 @@ def main():

                    if rc == 0:
                        process.run()
+                    else:
+                        process.shutdown()

                    sys.exit(rc)

--- a/bin/ansible-test
+++ b/bin/ansible-test
@ -0,0 +1,15 @@
+#!/usr/bin/env python
+# PYTHON_ARGCOMPLETE_OK
+"""Primary entry point for ansible-test."""
+
+from __future__ import (absolute_import, division, print_function)
+
+__metaclass__ = type
+
+import os
+import sys
+
+if __name__ == '__main__':
+    sys.path.insert(0, os.path.abspath(os.path.join(os.path.dirname(os.path.dirname(__file__)), 'test', 'runner')))
+    import lib.cli
+    lib.cli.main()
--- a/changelogs/.changes.yaml
+++ b/changelogs/.changes.yaml
@ -1,4 +1,9 @@
 releases:
+  2.7.0:
+    codename: In the Light
+    fragments:
+    - v2.7.0_summary.yaml
+    release_date: '2018-10-03'
  2.7.0.a1:
    codename: In the Light
    fragments:
@ -94,7 +99,7 @@ releases:
    - user-module-backup-shadow.yaml
    - user_freebsd_always_changed_bugfix.yaml
    - v2.7.0-initial-commit.yaml
-    - v2.7.0_summary.yaml
+    - v2.7.0a1_summary.yaml
    - vars_prompt-allow-prompting-for-play-vars.yaml
    - vault-errors.yaml
    - vultr_modules_renamed.yml
@ -303,3 +308,254 @@ releases:
      - grafana_dashboard
      - nios_next_network
    release_date: '2018-08-27'
+  2.7.0b1:
+    codename: In the Light
+    fragments:
+    - blockdoc.yml
+    - delegate-to-get-vars-no-task.yaml
+    - gcp_service_account_home_path.yaml
+    - include-apply-insert-order.yaml
+    - include-double-handler.yaml
+    - loop-cache-fix.yaml
+    - no-dynamic-import-tasks.yaml
+    - onepassword_unlock_vault.yaml
+    - plugins-accept-only-valid-args.yaml
+    - urls-if-modified-since.yaml
+    - v2.7.0b1_summary.yaml
+    - win_disk_image-mount-paths.yaml
+    - win_psexec_command_arg.yaml
+    - win_psexec_session-selection.yaml
+    - win_uri-json.yml
+    - win_wait_for-timeout.yaml
+    modules:
+    - azure_rm_autoscale
+    - azure_rm_autoscale_facts
+    - azure_rm_containerregistry_facts
+    - azure_rm_sqlfirewallrule
+    - azure_rm_trafficmanagerendpoint
+    - azure_rm_trafficmanagerendpoint_facts
+    - azure_rm_trafficmanagerprofile
+    - azure_rm_trafficmanagerprofile_facts
+    - azure_rm_webapp_facts
+    - cpm_user
+    - elb_target_facts
+    - fmgr_provisioning
+    - ftd_configuration
+    - ftd_file_download
+    - ftd_file_upload
+    - gcp_compute_router
+    - gcp_spanner_database
+    - gcp_spanner_instance
+    - gcp_sql_database
+    - gcp_sql_instance
+    - gcp_sql_user
+    - ibm_sa_host
+    - ibm_sa_pool
+    - na_elementsw_access_group
+    - na_elementsw_account
+    - na_elementsw_admin_users
+    - na_elementsw_check_connections
+    - na_elementsw_cluster
+    - na_elementsw_drive
+    - na_elementsw_ldap
+    - na_elementsw_network_interfaces
+    - na_elementsw_node
+    - na_elementsw_snapshot
+    - na_elementsw_snapshot_restore
+    - na_elementsw_volume_clone
+    - na_ontap_autosupport
+    - na_ontap_cluster_peer
+    - na_ontap_command
+    - na_ontap_disks
+    - na_ontap_firewall_policy
+    - na_ontap_gather_facts
+    - na_ontap_motd
+    - na_ontap_node
+    - netapp_e_alerts
+    - netapp_e_asup
+    - netapp_e_auditlog
+    - netapp_e_global
+    - netapp_e_iscsi_interface
+    - netapp_e_iscsi_target
+    - netapp_e_ldap
+    - netapp_e_mgmt_interface
+    - netapp_e_syslog
+    - onepassword_facts
+    - opx_cps
+    - purefb_facts
+    - rds_instance
+    - redfish_command
+    - redfish_config
+    - tower_credential_type
+    - tower_settings
+    - tower_workflow_template
+    - vmware_host_ntp_facts
+    - win_wait_for_process
+    - win_xml
+    plugins:
+      lookup:
+      - cpm_metering
+    release_date: '2018-08-31'
+  2.7.0rc1:
+    codename: In the Light
+    fragments:
+    - 16748-docker_container-memory.yaml
+    - 33579-docker_container-log_driver.yaml
+    - 42380-docker_container-check-mode.yaml
+    - 42641-44812-docker-env-variables.yaml
+    - 42857-docker_container-working_dir.yaml
+    - 44808-docker_container-idempotency.yaml
+    - aws_bugfix_backports.yml
+    - cb_fix_config.yml
+    - dnf-group-removal.yaml
+    - ec2_vpc_route_table_replace_route_fix.yaml
+    - elb_target_group_fix_KeyError.yaml
+    - systemd_user_dep_fixes.yml
+    - terminal_plugin_nxos_iosxr.yaml
+    - v2.7.0rc1_summary.yaml
+    modules:
+    - online_user_facts
+    release_date: '2018-09-06'
+  2.7.0rc2:
+    codename: In the Light
+    fragments:
+    - 45501-get_url-better_checksums.yaml
+    - aws_cloudfront_distribution_fix_nonexistent_method_name.yaml
+    - azure-storage-cloud-environment.yaml
+    - azure_autoscale.yaml
+    - get-url-fix-idempotency.yaml
+    - loop_undefined_delegate_to.yaml
+    - nxos_ambiguous_command_check.yaml
+    - script-module-no-file-path.yaml
+    - v2.7.0rc2_summary.yaml
+    - vmware_wait_for_task_fix.yaml
+    - win_group_membership-com-marshal.yaml
+    - win_say-fix.yaml
+    plugins:
+      strategy:
+      - host_pinned
+    release_date: '2018-09-13'
+  2.7.0rc3:
+    codename: In the Light
+    fragments:
+    - ec2_group_fix_target_containing_list_within_list.yaml
+    - fix_nxos_facts_indefinite_hang.yaml
+    - v2.7.0rc3_summary.yaml
+    release_date: '2018-09-20'
+  2.7.0rc4:
+    codename: In the Light
+    fragments:
+    - v2.7.0rc4_summary.yaml
+    release_date: '2018-09-27'
+  2.7.1:
+    codename: In the Light
+    fragments:
+    - 33156-vmware_guest-resource_pool.yaml
+    - 34863-rabbitmq_user_unpack_fix.yaml
+    - 35120-redis_inventory_plugin_flush_cache.yaml
+    - 38679-vmware_guest-refactor_disk_logic.yml
+    - 42322-nmcli_fix_vlan_mod_function.yaml
+    - 42456-consul_kv-lookup.yaml
+    - 43997-docker_network-inspect.yaml
+    - 44755-win_nssm_fixes.yaml
+    - 45226-vmware_wait_for_ip_address.yaml
+    - 45417-ldap_entry-list_conversion.yml
+    - 45508-parse-docker-service-parameter.yaml
+    - 45543-rabbitmq_bindings-fix-quote.yaml
+    - 45628-fetch_url-error-headers.yaml
+    - 45700-docker_container-dont-parse-absent.yml
+    - 45712-45753-vultr-timeout.yml
+    - 45830-fixed-assigning-ssl-certificate.yaml
+    - 45921-os_router-ignores-enable_snat-no.yml
+    - 46049-route53-caa-ordering.txt
+    - 46115-46035-cs_instance-fixes.yml
+    - 46245-systemd-fix-service-enable-logic.yaml
+    - 46322-docker_container-image-not-given.yaml
+    - 46521-zabbix_host-fix-link-template-error.yml
+    - 46594-docker_container-publish-all-ports.yml
+    - 46595-docker_container-expected_ports.yml
+    - 46743-fix-native-jinja-newlines.yaml
+    - 46800-ec2_vol_facts-handle-missing-tags.yml
+    - 46961_fix_aws_ec2_cache.yaml
+    - 47046-docker-versions.yaml
+    - 47096-junos-terminal-regex-fix.yml
+    - 47109-fail-space-separated-string-pkgs.yaml
+    - 47133-pamd_use_module_tmpdir.yml
+    - 47281-pamd-dont-delete-named_temporary_file_on_close.yaml
+    - 47296-docker_container-memory_swappiness.yaml
+    - 47307-handler-include-task.yml
+    - 47395-docker_container-ipvX_address.yaml
+    - 47396-docker_container-detach-auto-remove.yaml
+    - 54434-iam-role-arn-parsing.yml
+    - ajson-nested-decode.yaml
+    - ansible-connection-cleanup-when-failed.yaml
+    - ansible-doc-fixes.yml
+    - aws_parameter_store_pagination.yaml
+    - azure-version.yaml
+    - azure_rm_autoscale-fixed_date.yml
+    - azure_rm_deployment_fix_45941.yaml
+    - blockinfile-bytes-fix.yaml
+    - callback_fixes.yml
+    - cliconf-get-bugfixes.yaml
+    - dd-put-empty-files.yaml
+    - delegate_to_loop_hostvars.yaml
+    - dnf-immutable-mutable.yaml
+    - dnf-localgpgcheck.yaml
+    - dnfyum-disable-excludes.yaml
+    - docker_container-idempotency.yaml
+    - docker_volume-force-change-detection.yaml
+    - fix_calling_deprecate_with_correct_arguments.yaml
+    - fix_ec2_group_target_vpc_precedence.yaml
+    - fix_flatten.yml
+    - fix_vyos_version.yaml
+    - free-strategy-include-var-tags.yaml
+    - ftd-http-api-plugin-refresh-token.yaml
+    - get_url-remove-fragile-code.yaml
+    - inv_fixes.yml
+    - ios-prompt-fix.yaml
+    - ip_netns-fix-exists.yaml
+    - issue46937-pr46519-pr47449-fix-pip-multiple-extras.yaml
+    - k8s_auth_kubeconfig.yml
+    - k8s_facts_fix.yaml
+    - lineinfile-insertbefore-index-out-of-range.yaml
+    - mail-fix-regression.yaml
+    - mysql-migrate_to_pymysql.yaml
+    - netconf_config_comfirm_commit_fix.yaml
+    - netconf_config_default_operation.yaml
+    - netconf_module_utils_py3_fix.yaml
+    - no-mutable-fieldattribute-defaults.yaml
+    - no-overwrite-roles.yaml
+    - nxos_file_copy_PY3_fix.yaml
+    - nxos_ospf_vrf_idempotence.yaml
+    - openssl-python3.yaml
+    - ovirt_host_network_check_for_empty_user_opts.yaml
+    - ovirt_vm__Fix_initialization_of_cloud_init.yaml
+    - ovirt_vm_check_next_run_configuration_update_if_exist.yaml
+    - ovirt_vm_fix_issue_in_SSO_option.yaml
+    - ovirt_vm_fix_issue_in_setting_the_custom_compatibility_version_to_NULL.yaml
+    - piped-transfer-empty-files.yaml
+    - plugin-docs-list-fix.yaml
+    - plugin-filters-cfg.yaml
+    - postgresql_user-not-sup-error.yaml
+    - psexec-handle-socket-errors.yaml
+    - psexec-imp-error.yaml
+    - psrp-utf8-stdio.yaml
+    - psrp-utf8.yaml
+    - reboot-unicode-string.yaml
+    - reboot-var-fix-bare-linux.yaml
+    - reboot_missing_parameter.yaml
+    - reboot_openbsd_support.yaml
+    - restore_sigpipe_dfl.yml
+    - solaris-prtdiag-path.yaml
+    - telent-prompt-fix.yaml
+    - unsafe-set-wrap.yaml
+    - user-do-not-pass-ssh_key_passphrase-on-cmdline.yaml
+    - user-docs-underlying-tools.yaml
+    - v2.7.1
+    - win_copy-dest-quote.yaml
+    - win_reboot-post-reboot-delay.yaml
+    - winrm_pexpect.yaml
+    - yum-proxy-userpass.yaml
+    - yum_bugfux.yml
+    - yum_bugfux_conf_file_none_type.yml
+    release_date: '2018-10-25'
--- a/changelogs/CHANGELOG-v2.7.rst
+++ b/changelogs/CHANGELOG-v2.7.rst
@ -2,8 +2,156 @@
 Ansible 2.7 "In the Light" Release Notes
 ========================================

-v2.7.0.a1
-=========
+.. contents:: Topics
+
+
+v2.7.1
+======
+
+Release Summary
+---------------
+
+| Release Date: 2018-10-25
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Minor Changes
+-------------
+
+- Fix yum module to properly check for empty conf_file value
+- added capability to set the scheme for the consul_kv lookup.
+- added optional certificate and certificate verification for consul_kv lookups
+- dnf - properly handle modifying the enable/disable excludes data field
+- dnf appropriately handles disable_excludes repoid argument
+- dnf properly honor disable_gpg_check for local (on local disk of remote node) package installation
+- fix yum module to handle list argument optional empty strings properly
+- netconf_config - Make default_operation optional in netconf_config module (https://github.com/ansible/ansible/pull/46333)
+- win_nssm - Drop support of literal YAML dictionnary for ``app_parameters`` option. Use the ``key=value;`` string form instead
+- yum - properly handle proxy password and username embedded in url
+- yum/dnf - fail when space separated string of names (https://github.com/ansible/ansible/pull/47109)
+
+Bugfixes
+--------
+
+- Ansible JSON Decoder - Switch from decode to object_hook to support nested use of __ansible_vault and __ansible_unsafe (https://github.com/ansible/ansible/pull/45514)
+- Don't parse parameters and options when ``state`` is ``absent`` (https://github.com/ansible/ansible/pull/45700).
+- FieldAttribute - Do not use mutable defaults, instead allow supplying a callable for defaults of mutable types (https://github.com/ansible/ansible/issues/46824)
+- Fix an issue with the default telnet prompt handling. The value needs to be escaped otherwise it does not work when converted to bytes.
+- Fix calling deprecate with correct arguments (https://github.com/ansible/ansible/pull/46062).
+- Fix iterator to list conversion in ldap_entry module.
+- Fix nxos_ospf_vrf module auto-cost idempotency and module check mode (https://github.com/ansible/ansible/pull/47190).
+- Fix pip module so that it can recognize multiple extras
+- Fix prompt mismatch issue for ios (https://github.com/ansible/ansible/issues/47004)
+- Fix the issue with refreshing the token by storing Authorization header inside HttpApi connection plugin.
+- Fix the quoting of vhost and other names in rabbitmq_binding
+- Fix the win_reboot plugin so that the post_reboot_delay parameter is honored
+- Fixed an issue with ansible-doc -l failing when parsing some plugin documentation.
+- Fixed: Appropriate code to expand value was missing so assigning SSL certificate is not working as described in the documentation. https://github.com/ansible/ansible/pull/45830
+- Fixes an error that occurs when attempting to see if the netns already exists on the remote device. This change will now execute ``ip netns list`` and check if the desired namespace is in the output.
+- Give user better error messages and more information on verbose about inventory plugin behaviour
+- Hardware fact gathering now completes on Solaris 8.  Previously, it aborted with error `Argument 'args' to run_command must be list or string`.
+- Ignore empty result of rabbitmqctl list_user_permissions.
+- In systemd module, allow scope to default to 'system'
+- In systemd module, fix check if a systemd+initd service is enabled - disabled in systemd means disabled
+- Only access EC2 volume tags when set
+- Only delete host key from redis in-memory cache if present.
+- PLUGIN_FILTERS_CFG - Ensure that the value is treated as type=path, and that we use the standard section of ``defaults`` instead of ``default`` (https://github.com/ansible/ansible/pull/45994)
+- Refactor virtual machine disk logic.
+- Restore SIGPIPE to SIG_DFL when creating subprocesses to avoid it being ignored under Python 2.
+- Rewrite get_resource_pool method for correct resource_pool selection.
+- The docker_* modules more uniformly check versions of docker-py/docker and (if necessary) the docker API.
+- Update callbacks to use Ansible's JSON encoder to avoid known serialization issues
+- Update the signatures of many cliconf plugins' get() methods to support the check_all paramter. Specifically, aireos, aruba, asa, ce, cnos, dellos6, dellos9, dellos10, edgeos, enos, exos, ironware, nos, onyx, routeros, slxos, and voss were updated. This fixes the cli_command module for these platforms
+- Vultr - fix for unreliable API behaviors resulting in timeouts (https://github.com/ansible/ansible/pull/45712/).
+- ansible-connection - Clean up socket files if playbook aborted before connection is started.
+- ansible-doc, removed local hardcoded listing, now uses the 'central' list from constants and other minor issues
+- aws_ec2 - fixed issue where cache did not contain the computed groups
+- aws_ssm_parameter_store - AWS Systems Manager Parameter Store may reach an internal limit before finding the expected parameter, causing misleading results. This is resolved by paginating the describe_parameters call.
+- azure_rm_deployment - fixed regression that prevents resource group from being created (https://github.com/ansible/ansible/issues/45941)
+- blockinfile - use bytes rather than a native string to prevent a stacktrace in Python 3 when writing to the file (https://github.com/ansible/ansible/issues/46237)
+- chroot connection - Support empty files with copying to target (https://github.com/ansible/ansible/issues/36725)
+- cs_instance - Fix docs and typo in examples (https://github.com/ansible/ansible/pull/46035).
+- cs_instance - Fix host migration without volume (https://github.com/ansible/ansible/pull/46115).
+- delegate_to - When templating ``delegate_to`` in a loop, don't use the task for a cache, return a special cache through ``get_vars`` allowing looping over a hostvar (https://github.com/ansible/ansible/issues/47207)
+- docker connection - Support empty files with copying to target (https://github.com/ansible/ansible/issues/36725)
+- docker_container - Fix idempotency problems with ``cap_drop`` and ``groups`` (when numeric group IDs were used).
+- docker_container - Fix type conversion errors for ``log_options``.
+- docker_container - Fixing various comparison/idempotency problems related to wrong comparisons. In particular, comparisons for ``command`` and ``entrypoint`` (both lists) no longer ignore missing elements during idempotency checks.
+- docker_container - Makes ``blkio_weight``, ``cpuset_mems``, ``dns_opts`` and ``uts`` options actually work.
+- docker_container - ``publish_ports: all`` was not used correctly when checking idempotency.
+- docker_container - fail if ``ipv4_address`` or ``ipv6_address`` is used with a too old docker-py version.
+- docker_container - fix ``memory_swappiness`` documentation.
+- docker_container - fix behavior of ``detach: yes`` if ``auto_remove: yes`` is specified.
+- docker_container - fix idempotency check for published_ports in some special cases.
+- docker_container - the behavior is improved in case ``image`` is not specified, but needed for (re-)creating the container.
+- docker_network - fixes idempotency issues (https://github.com/ansible/ansible/issues/33045) and name substring issue (https://github.com/ansible/ansible/issues/32926).
+- docker_service - correctly parse string values for the `scale` parameter https://github.com/ansible/ansible/pull/45508
+- docker_volume - fix ``force`` and change detection logic. If not both evaluated to ``True``, the volume was not recreated.
+- dynamic includes - Use the copied and merged task for calculating task vars in the free strategy (https://github.com/ansible/ansible/issues/47024)
+- ec2_group - There can be multiple security groups with the same name in different VPCs. Prior to 2.6 if a target group name was provided, the group matching the name and VPC had highest precedence. Restore this behavior by updated the dictionary with the groups matching the VPC last.
+- ec2_group - support EC2-Classic by not assuming security groups have VPCs.
+- ec2_metadata_facts - Parse IAM role name from metadata ARN instead of security credential field.
+- fetch_url did not always return lower-case header names in case of HTTP errors (https://github.com/ansible/ansible/pull/45628).
+- fix azure_rm_autoscale module can create a schedule with fixed start/end date (https://github.com/ansible/ansible/pull/47186)
+- fix flatten to properly handle multiple lists in lists https://github.com/ansible/ansible/issues/46343
+- get_url - improve code that parses checksums from a file so it is not fragile and reports a helpful error when no matching checksum is found
+- handlers - fix crash when handler task include tasks
+- jail connection - Support empty files with copying to target (https://github.com/ansible/ansible/issues/36725)
+- junos - fix terminal prompt regex (https://github.com/ansible/ansible/pull/47096)
+- k8s - allow kubeconfig or context to be set without the other
+- k8s_facts now returns a resources key in all situations
+- kubectl connection - Support empty files with copying to target (https://github.com/ansible/ansible/issues/36725)
+- libvirt_lxc connection - Support empty files with copying to target (https://github.com/ansible/ansible/issues/36725)
+- lineinfile - fix index out of range error when using insertbefore on a file with only one line (https://github.com/ansible/ansible/issues/46043)
+- mail - Fix regression when sending mail without TLS/SSL
+- mysql_*, proxysql_* - PyMySQL (a pure-Python MySQL driver) is now a preferred dependency also supporting Python 3.X.
+- netconf_config - Fix in confirmed_commit capability in netconf_config modules  (https://github.com/ansible/ansible/pull/46778)
+- netconf_config - Fix netconf module_utils dict changed size issue (https://github.com/ansible/ansible/pull/46778)
+- nmcli - fix syntax of vlan modification command (https://github.com/ansible/ansible/issues/42322)
+- nxos_file_copy fix for binary files (https://github.com/ansible/ansible/pull/46822).
+- openssl_csr - fix byte encoding issue on Python 3
+- openssl_pkcs12 - fix byte encoding issue on Python 3
+- os_router - ``enable_snat: no`` was ignored.
+- ovirt_host_network - check for empty user_opts (https://github.com/ansible/ansible/pull/47283).
+- ovirt_vm - Check next_run configuration update if exist (https://github.com/ansible/ansible/pull/47282/).
+- ovirt_vm - Fix initialization of cloud init (https://github.com/ansible/ansible/pull/47354).
+- ovirt_vm - Fix issue in SSO option (https://github.com/ansible/ansible/pull/47312).
+- ovirt_vm - Fix issue in setting the custom_compatibility_version to NULL (https://github.com/ansible/ansible/pull/47388).
+- pamd: add delete=False to NamedTemporaryFile() fixes OSError on module completion, and removes print statement from module code. (see https://github.com/ansible/ansible/pull/47281 and https://github.com/ansible/ansible/issues/47080)
+- pamd: use module.tmpdir for NamedTemporaryFile() (see https://github.com/ansible/ansible/pull/47133 and https://github.com/ansible/ansible/issues/36954)
+- postgresql_user - create pretty error message when creating a user without an encrypted password on newer PostgreSQL versions
+- psexec - Handle socket.error exceptions properly
+- psexec - give proper error message when the psexec requirements are not installed
+- psrp - Fix UTF-8 output - https://github.com/ansible/ansible/pull/46998
+- psrp - Fix issue when dealing with unicode values in the output for Python 2
+- reboot - add reboot_timeout parameter to the list of parameters so it can be used.
+- reboot - add support for OpenBSD
+- reboot - use correct syntax for fetching a value from a dict and account for bare Linux systems (https://github.com/ansible/ansible/pull/45607#issuecomment-422403177)
+- reboot - use unicode instead of bytes for stdout and stderr to match the type returned from low_level_execute()
+- roles - Ensure that we don't overwrite roles that have been registered (from imports) while parsing roles under the roles header (https://github.com/ansible/ansible/issues/47454)
+- route53 - fix CAA record ordering for idempotency.
+- ssh connection - Support empty files with piped transfer_method (https://github.com/ansible/ansible/issues/45426)
+- templar - Do not strip new lines in native jinja - https://github.com/ansible/ansible/issues/46743
+- unsafe - Add special casing to sets, to support wrapping elements of sets correctly in Python 3 (https://github.com/ansible/ansible/issues/47372)
+- use proper module_util to get Ansible version for Azure requests
+- user - add documentation on what underlying tools are used on each platform (https://github.com/ansible/ansible/issues/44266)
+- user module - do not pass ssh_key_passphrase on cmdline (CVE-2018-16837)
+- vmware - honor "wait_for_ip_address" when powering on a VM
+- vultr_server - fix diff for user data (https://github.com/ansible/ansible/pull/45753/).
+- vyos_facts - fix vyos_facts not returning version number issue (https://github.com/ansible/ansible/pull/39115)
+- win_copy - Fix issue where the dest return value would be enclosed in single quote when dest is a folder - https://github.com/ansible/ansible/issues/45281
+- win_nssm - Add missing space between parameters with ``app_parameters``
+- win_nssm - Correctly escape argument line when a parameter contains spaces, quotes or backslashes
+- win_nssm - Fix error when several services were given to the ``dependencies`` option
+- win_nssm - Fix extra space added in argument line with ``app_parameters`` or ``app_parameters_free_form`` when a parameter start by a dash and is followed by a period (https://github.com/ansible/ansible/issues/44079)
+- win_nssm - Fix service not started when ``state=started`` (https://github.com/ansible/ansible/issues/35442)
+- win_nssm - Fix several issues and idempotency problems (https://github.com/ansible/ansible/pull/44755)
+- winrm - Only use pexpect for auto kerb auth if it is installed and contains the required kwargs - https://github.com/ansible/ansible/issues/43462
+- zabbix_host - module was failing when zabbix host was updated with new interface and template depending on that interface at the same time
+- zone connection - Support empty files with copying to target (https://github.com/ansible/ansible/issues/36725)
+
+v2.7.0
+======

 Release Summary
 ---------------
@ -42,8 +190,10 @@ Minor Changes
 - Explicit encoding for the output of the template module, to be able to generate non-utf8 files from a utf-8 template. (https://github.com/ansible/proposals/issues/121)
 - File locking feature added, making it possible to gain exclusive access to given file through module_utils.common.file.FileLock (https://github.com/ansible/ansible/issues/29962)
 - Fix dnf handling of autoremove to be compatible with yum
+- Fix timer in exponential backoff algorithm in vmware.py.
 - Fixed group action idempotent transactions in dnf backend
 - Fixed group actions in check mode to report correct changed state
+- GCP Modules will do home path expansion on service account file paths
 - In Ansible-2.4 and above, Ansible passes the temporary directory a module should use to the module.  This is done via a module parameter (_ansible_tmpdir).  An earlier version of this which was also prototyped in Ansible-2.4 development used an environment variable, ANSIBLE_REMOTE_TMP to pass this information to the module instead.  When we switched to using a module parameter, the environment variable was left in by mistake. Ansible-2.7 removes that variable.  Any third party modules which relied on it should use the module parameter instead.
 - New config options `display_ok_hosts` and `display_failed_stderr` (along with the existing `display_skipped_hosts` option) allow more fine-grained control over the way that ansible displays output from a playbook (https://github.com/ansible/ansible/pull/41058)
 - Removed an unnecessary import from the AnsiballZ wrapper
@ -53,15 +203,19 @@ Minor Changes
 - The acme_account and acme_certificate modules now support two backends: the Python cryptograpy module or the OpenSSL binary. By default, the modules detect if a new enough cryptography module is available and use it, with the OpenSSL binary being a fallback. If the detection fails for some reason, the OpenSSL binary backend can be explicitly selected by setting select_crypto_backend to openssl.
 - The apt, ec2_elb_lb, elb_classic_lb, and unarchive modules have been ported away from using __file__.  This is futureproofing as__file__ won't work if we switch to using python -m to invoke modules in the future or if we figure out a way to make a module never touch disk for pipelining purposes.
 - The password_hash filter supports all parameters of passlib. This allows users to provide a rounds parameter. (https://github.com/ansible/ansible/issues/15326)
+- action plugins strictly accept valid parameters and report invalid parameters
 - allow user to customize default ansible-console prompt/msg default color
 - aws_caller_facts - The module now outputs the "account_alias" as well
 - aws_rds - Add new inventory plugin for RDS instances and clusters to match behavior in the ec2 inventory script.
 - command module - Add support for check mode when passing creates or removes arguments. (https://github.com/ansible/ansible/pull/40428)
+- dnf - group removal does not work if group was installed with Ansible because of dnf upstream bug https://bugzilla.redhat.com/show_bug.cgi?id=1620324
 - ec2_group - Add diff mode support with and without check mode. This feature is preview and may change when a common framework is adopted for AWS modules.
 - elasticsearch_plugin - Add the possibility to use the elasticsearch_plugin installation batch mode to install plugins with advanced privileges without user interaction.
 - gather_subset - removed deprecated functionality for using comma separated list with gather_subset (https://github.com/ansible/ansible/pull/44320)
 - get_url - implement [expend checksum format to <algorithm>:(<checksum>|<url>)] (https://github.com/ansible/ansible/issues/27617)
+- import_tasks - Do not allow import_tasks to transition to dynamic if the file is missing (https://github.com/ansible/ansible/issues/44822)
 - lineinfile - add warning when using an empty regexp (https://github.com/ansible/ansible/issues/29443)
+- onepassword/onepassword_raw - accept subdomain and vault_password to allow Ansible to unlock 1Password vaults
 - password_hash is not restricted to the subset provided by crypt.crypt (https://github.com/ansible/ansible/issues/17266)
 - passwordstore - Add backup option when overwriting password (off by default)
 - puppet - Add support for --debug, --verbose, --summarize https://github.com/ansible/ansible/issues/37986
@ -84,6 +238,8 @@ Minor Changes
 - win_chocolatey - Removed the need to manually escape double quotes in the proxy username and password
 - win_chocolatey - Will no longer upgrade Chocolatey in check mode
 - win_chocolatey - set the rc return value to always be returned, default to 0 https://github.com/ansible/ansible/issues/41758
+- win_disk_image - return a list of mount paths with the return value ``mount_paths``, this will always be a list and contain all mount points in an image
+- win_psexec - Added the ``session`` option to specify a session to start the process in
 - winrm - change the _reset() method to use reset() that is part of ConnectionBase

 Deprecated Features
@ -91,6 +247,7 @@ Deprecated Features

 - Modules will no longer be able to rely on the __file__ attribute pointing to a real file.  If your third party module is using __file__ for something it should be changed before 2.8.  See the 2.7 porting guide for more information.
 - The `skippy`, `full_skip`, `actionable`, and `stderr` callback plugins have been deprecated in favor of config options that influence the behavior of the `default` callback plugin (https://github.com/ansible/ansible/pull/41058)
+- win_disk_image - the return value ``mount_path`` is deprecated and will be removed in 2.11, this can be accessed through ``mount_paths[0]`` instead.

 Removed Features (previously deprecated)
 ----------------------------------------
@ -105,18 +262,31 @@ Bugfixes
 - **Security Fix** - Some connection exceptions would cause no_log specified on a task to be ignored.  If this happened, the task information, including any private information could have been displayed to stdout and (if enabled, not the default) logged to a log file specified in ansible.cfg's log_path. Additionally, sites which redirected stdout from ansible runs to a log file may have stored that private information onto disk that way as well. (https://github.com/ansible/ansible/pull/41414)
 - **Security Fix** - avoid loading host/group vars from cwd when not specifying a playbook or playbook base dir
 - **Security Fix** - avoid using ansible.cfg in a world writable dir.
+- Add ambiguous command check as the error message is not persistent on nexus devices (https://github.com/ansible/ansible/pull/45337).
+- Add argspec to aws_application_scaling_policy module to handle metric specifications, scaling cooldowns, and target values. https://github.com/ansible/ansible/pull/45235
 - Additional checks ensure that there is always a result of hashing passwords in the password_hash filter and vars_prompt, otherwise an error is returned. Some modules (like user module) interprets None as no password at all, which can be dangerous if the password given above is passed directly into those modules.
+- Allow arbitrary ``log_driver`` for docker_container (https://github.com/ansible/ansible/pull/33579).
 - Avoids deprecated functionality of passlib with newer library versions.
 - Changed the admin_users config option to not include "admin" by default as admin is frequently used for a non-privileged account  (https://github.com/ansible/ansible/pull/41164)
 - Fix alt linux detection/matching
 - Fix an atomic_move error that is 'true', but  misleading. Now we show all 3 files involved and clarify what happened.
+- Fix ec2_group support for multi-account and peered VPC security groups. Reported in https://github.com/ansible/ansible/issue/44788 and fixed in https://github.com/ansible/ansible/pull/45296
+- Fix ecs_taskdefinition handling of changed role_arn. If the task role in a ECS task definition changes ansible should create a new revsion of the task definition. https://github.com/ansible/ansible/pull/45317
 - Fix glob path of rc.d Some distribtuions like SUSE has the rc%.d directories under /etc/init.d
+- Fix health check parameter handling in elb_target_group per https://github.com/ansible/ansible/issues/43244 about health_check_port. Fixed in https://github.com/ansible/ansible/pull/45314
+- Fix lambda_policy updates when principal is an account number. Backport of https://github.com/ansible/ansible/pull/44871
 - Fix lxd module to be idempotent when the given configuration for the lxd container has not changed (https://github.com/ansible/ansible/pull/38166)
+- Fix python2.6 `nothing to repeat` nxos terminal plugin bug (https://github.com/ansible/ansible/pull/45271).
+- Fix s3_lifecycle module backwards compatibility without providing prefix. Blank prefixes regression was introduced in boto3 rewrite. https://github.com/ansible/ansible/pull/45318
+- Fix terminal plugin regex nxos, iosxr (https://github.com/ansible/ansible/pull/45135).
 - Fix the mount module's handling of swap entries in fstab (https://github.com/ansible/ansible/pull/42837)
 - Fixed an issue where ``ansible_facts.pkg_mgr`` would incorrectly set to ``zypper`` on Debian/Ubuntu systems that happened to have the command installed.
 - Fixed runtime module to be able to handle syslog_facility properly when python systemd module installed in a target system. (https://github.com/ansible/ansible/pull/41078)
 - Grafana dashboard module compatible with grafana 5 (https://github.com/ansible/ansible/pull/41249)
 - On Python2, loading config values from environment variables could lead to a traceback if there were nonascii characters present.  Converted them to text strings so that no traceback will occur (https://github.com/ansible/ansible/pull/43468)
+- Remove spurious `changed=True` returns when ec2_group module is used with numeric ports. https://github.com/ansible/ansible/pull/45240
+- Support key names that contain spaces in ec2_metadata_facts module. https://github.com/ansible/ansible/pull/45313
+- The docker_* modules respect the DOCKER_* environment variables again (https://github.com/ansible/ansible/pull/42641).
 - The fix for `CVE-2018-10875 <https://access.redhat.com/security/cve/cve-2018-10875>`__ prints out a warning message about skipping a config file from a world writable current working directory.  However, if the user explicitly specifies that the config file should be used via the ANSIBLE_CONFIG environment variable then Ansible would honor that but still print out the warning message.  This has been fixed so that Ansible honors the user's explicit wishes and does not print a warning message in that circumstance.
 - The fix for `CVE-2018-10875 <https://access.redhat.com/security/cve/cve-2018-10875>`__ prints out a warning message about skipping a config file from a world writable current working directory.  However, if the user is in a world writable current working directory which does not contain a config file, it should not print a warning message.  This release fixes that extaneous warning.
 - The ssh connection plugin was categorizing all 255 exit statuses as an ssh error but modules can return exit code 255 as well.  The connection plugin has now been changed to know that certain instances of exit code 255 are not ssh-related.  (https://github.com/ansible/ansible/pull/41716)
@ -127,21 +297,43 @@ Bugfixes
 - authorized_key now have an option for following symlinks, default behaviour (False) can be changed by setting follow True/False
 - basic.py - catch ValueError in case a FIPS enabled platform raises this exception - https://github.com/ansible/ansible/issues/44447
 - become runas - changed runas process so it does not create a temporary file on the disk during execution
+- cloudfront_distribution - replace call to nonexistent method 'validate_distribution_id_from_caller_reference' with 'validate_distribution_from_caller_reference' and set the distribution_id variable to the distribution's 'Id' key.
+- corrected and clarified 'user' option deprecation in systemd module in favor of 'scope' option.
+- delegate_to - ensure if we get a non-Task object in _get_delegated_vars, we return early (https://github.com/ansible/ansible/pull/44934)
+- docker_container: fixing ``working_dir`` idempotency problem (https://github.com/ansible/ansible/pull/42857)
+- docker_container: makes unit parsing for memory sizes more consistent, and fixes idempotency problem when ``kernel_memory`` is set (see https://github.com/ansible/ansible/pull/16748 and https://github.com/ansible/ansible/issues/42692)
+- ec2_group - Sanitize the ingress and egress rules before operating on them by flattening any lists within lists describing the target CIDR(s) into a list of strings. Prior to Ansible 2.6 the ec2_group module accepted a list of strings, a list of lists, or a combination of strings and lists within a list. https://github.com/ansible/ansible/pull/45594
+- ec2_vpc_route_table - check the origin before replacing routes. Routes with the origin 'EnableVgwRoutePropagation' may not be replaced.
 - elasticsearch_plugin - Improve error messages and show stderr of elasticsearch commands
 - elb_application_lb - Fix a dangerous behavior of deleting an ELB if state was omitted from the task. Now state defaults to 'present', which is typical throughout AWS modules.
+- elb_target_group - cast target ports to integers before making API calls after the key 'Targets' is in params.
 - file module - The touch subcommand had its diff output broken during the 2.6.x development cycle.  The patch to fix that broke check mode. This is now fixed (https://github.com/ansible/ansible/issues/42111)
 - file module - The touch subcommand had its diff output broken during the 2.6.x development cycle.  This is now fixed (https://github.com/ansible/ansible/issues/41755)
 - fix async for the aws_s3 module by adding async support to the action plugin (https://github.com/ansible/ansible/pull/40826)
+- fix azure storage blob cannot create blob container in non-public azure cloud environment. (https://github.com/ansible/ansible/issues/35223)
+- fix azure_rm_autoscale module can use dict to identify target (https://github.com/ansible/ansible/pull/45477)
 - fix decrypting vault files for the aws_s3 module (https://github.com/ansible/ansible/pull/39634)
 - fix default SSL version for docker modules https://github.com/ansible/ansible/issues/42897
 - fix for the bundled selectors module (used in the ssh and local connection plugins) when a syscall is restarted after being interrupted by a signal (https://github.com/ansible/ansible/issues/41630)
 - fix mail module for python 3.7.0 (https://github.com/ansible/ansible/pull/44552)
+- fix nxos_facts indefinite hang for text based output (https://github.com/ansible/ansible/pull/45845).
 - fix the enable_snat parameter that is only supposed to be used by an user with the right policies. https://github.com/ansible/ansible/pull/44418
 - fix the remote tmp folder permissions issue when becoming a non admin user - https://github.com/ansible/ansible/issues/41340, https://github.com/ansible/ansible/issues/42117
+- fixed typo in config that prevented keys matching
+- fixes docker_container check and debug mode (https://github.com/ansible/ansible/pull/42380)
 - flatten filter - use better method of type checking allowing flattening of mutable and non-mutable sequences (https://github.com/ansible/ansible/pull/44331)
 - gce_net - Fix sorting of allowed ports (https://github.com/ansible/ansible/pull/41567)
+- get_url - Don't re-download files unnecessarily when force=no (https://github.com/ansible/ansible/issues/45491)
 - get_url - fix the bug that get_url does not change mode when checksum matches (https://github.com/ansible/ansible/issues/29614)
+- get_url - support remote checksum files with paths specified with leading dots (`./path/to/file`)
+- get_url / uri - Use custom rfc2822 date format function instead of locale specific strftime (https://github.com/ansible/ansible/issues/44857)
+- improved block docs
+- improves docker_container idempotency (https://github.com/ansible/ansible/pull/44808)
+- include - Change order of where the new block is inserted with apply so that apply args are not applied to the include also (https://github.com/ansible/ansible/pull/44912)
+- includes - ensure we do not double register handlers from includes to prevent exception (https://github.com/ansible/ansible/issues/44848)
 - inventory - When using an inventory directory, ensure extension comparison uses text types (https://github.com/ansible/ansible/pull/42475)
+- loop - Ensure that a loop with a when condition that evaluates to false and delegate_to, will short circuit if the loop references an undefined variable. This matches the behavior in the same scenario without delegate_to (https://github.com/ansible/ansible/issues/45189)
+- loop - Ensure we only cache the loop when the task had a loop and delegate_to was templated (https://github.com/ansible/ansible/issues/44874)
 - made irc module python3 compatible https://github.com/ansible/ansible/issues/42256
 - nclu - no longer runs net on empty lines in templates (https://github.com/ansible/ansible/pull/43024)
 - nicer message when we are missing interpreter
@ -151,6 +343,7 @@ Bugfixes
 - plugins/inventory/openstack.py - Do not create group with empty name if region is not set
 - preseve delegation info on nolog https://github.com/ansible/ansible/issues/42344
 - remove ambiguity when it comes to 'the source'
+- script inventory plugin - Don't pass file_name to DataLoader.load, which will prevent misleading error messages (https://github.com/ansible/ansible/issues/34164)
 - urls - Only assume GET method if data is empty, otherwise POST
 - user - Strip trailing comments in /etc/default/passwd (https://github.com/ansible/ansible/pull/43931)
 - user - fix bug that resulted in module always reporting a change when specifiying the home directory on FreeBSD (https://github.com/ansible/ansible/issues/42484)
@ -164,15 +357,20 @@ Bugfixes
 - win_domain - fixes typo in one of the AD cmdlets https://github.com/ansible/ansible/issues/41536
 - win_domain_computer - fixed deletion of computer active directory object that have dependent objects (https://github.com/ansible/ansible/pull/44500)
 - win_domain_controller - ensure the Netlogon service is up and running after promoting host to controller - https://github.com/ansible/ansible/issues/39235
+- win_group_membership - fix intermittent issue where it failed to convert the ADSI object to the .NET object after using it once
 - win_iis_webapppool - redirect some module output to null so Ansible can read the output JSON https://github.com/ansible/ansible/issues/40874
 - win_lineinfile - changed `-Path` to `-LiteralPath` so that square brackes in the path are interpreted literally -  https://github.com/ansible/ansible/issues/44508
+- win_psexec - changed code to not escape the command option when building the args - https://github.com/ansible/ansible/issues/43839
 - win_reboot - fix for handling an already scheduled reboot and other minor log formatting issues
 - win_reboot - fix issue when overridding connection timeout hung the post reboot uptime check - https://github.com/ansible/ansible/issues/42185 https://github.com/ansible/ansible/issues/42294
 - win_reboot - handle post reboots when running test_command - https://github.com/ansible/ansible/issues/41713
+- win_say - fix syntax error in module and get tests working
 - win_security_policy - allows an empty string to reset a policy value https://github.com/ansible/ansible/issues/40869
 - win_updates - Fixed issue where running win_updates on async fails without any error
 - win_updates - fixed module return value is lost in error in some cases (https://github.com/ansible/ansible/pull/42647)
+- win_uri: Fix support for JSON output when charset is set
 - win_user - Use LogonUser to validate the password as it does not rely on SMB/RPC to be available https://github.com/ansible/ansible/issues/24884
+- win_wait_for - fix issue where timeout doesn't wait unless state=drained - https://github.com/ansible/ansible/issues/43446
 - winrm - ensure pexpect is set to not echo the input on a failure and have a manual sanity check afterwards https://github.com/ansible/ansible/issues/41865
 - winrm - running async with become on a Server 2008 or 2008 R2 host will now work

@ -199,10 +397,16 @@ Inventory
 Lookup
 ~~~~~~

+- cpm_metering - Get Power and Current data from WTI OOB/Combo and PDU devices
 - cpm_status - Get status and parameters from WTI OOB and PDU devices.
 - grafana_dashboard - list or search grafana dashboards
 - nios_next_network - Return the next available network range for a network-container

+Strategy
+~~~~~~~~
+
+- host_pinned - Executes tasks on each host without interruption
+
 New Modules
 -----------

@ -214,6 +418,8 @@ amazon

 - aws_eks_cluster - Manage Elastic Kubernetes Service Clusters
 - cloudformation_stack_set - Manage groups of CloudFormation stacks
+- elb_target_facts - Gathers which target groups a target is associated with.
+- rds_instance - Manage RDS instances

 azure
 ^^^^^
@ -221,6 +427,9 @@ azure
 - azure_rm_appgateway - Manage Application Gateway instance.
 - azure_rm_appserviceplan - Manage App Service Plan
 - azure_rm_appserviceplan_facts - Get azure app service plan facts.
+- azure_rm_autoscale - Manage Azure autoscale setting.
+- azure_rm_autoscale_facts - Get Azure Auto Scale Setting facts.
+- azure_rm_containerregistry_facts - Get Azure Container Registry facts.
 - azure_rm_mysqldatabase_facts - Get Azure MySQL Database facts.
 - azure_rm_mysqlserver_facts - Get Azure MySQL Server facts.
 - azure_rm_postgresqldatabase_facts - Get Azure PostgreSQL Database facts.
@ -228,8 +437,14 @@ azure
 - azure_rm_route - Manage Azure route resource.
 - azure_rm_routetable - Manage Azure route table resource.
 - azure_rm_routetable_facts - Get route table facts.
+- azure_rm_sqlfirewallrule - Manage Firewall Rule instance.
+- azure_rm_trafficmanagerendpoint - Manage Azure Traffic Manager endpoint.
+- azure_rm_trafficmanagerendpoint_facts - Get Azure Traffic Manager endpoint facts
+- azure_rm_trafficmanagerprofile - Manage Azure Traffic Manager profile.
+- azure_rm_trafficmanagerprofile_facts - Get Azure Traffic Manager profile facts
 - azure_rm_virtualmachine_facts - Get virtual machine facts.
 - azure_rm_webapp - Manage Web App instance.
+- azure_rm_webapp_facts - Get azure web app facts.

 cloudstack
 ^^^^^^^^^^
@ -263,6 +478,7 @@ google
 - gcp_compute_instance_template_facts - Gather facts for GCP InstanceTemplate
 - gcp_compute_network_facts - Gather facts for GCP Network
 - gcp_compute_route_facts - Gather facts for GCP Route
+- gcp_compute_router - Creates a GCP Router
 - gcp_compute_router_facts - Gather facts for GCP Router
 - gcp_compute_ssl_certificate_facts - Gather facts for GCP SslCertificate
 - gcp_compute_ssl_policy - Creates a GCP SslPolicy
@ -278,6 +494,16 @@ google
 - gcp_compute_url_map_facts - Gather facts for GCP UrlMap
 - gcp_compute_vpn_tunnel - Creates a GCP VpnTunnel
 - gcp_compute_vpn_tunnel_facts - Gather facts for GCP VpnTunnel
+- gcp_spanner_database - Creates a GCP Database
+- gcp_spanner_instance - Creates a GCP Instance
+- gcp_sql_database - Creates a GCP Database
+- gcp_sql_instance - Creates a GCP Instance
+- gcp_sql_user - Creates a GCP User
+
+online
+^^^^^^
+
+- online_user_facts - Gather facts about Online user.

 openstack
 ^^^^^^^^^
@ -312,6 +538,7 @@ vmware
 - vmware_guest_custom_attribute_defs - Manage custom attributes definitions for virtual machine from VMWare
 - vmware_guest_custom_attributes - Manage custom attributes from VMWare for the given virtual machine
 - vmware_guest_move - Moves virtual machines in vCenter
+- vmware_host_ntp_facts - Gathers facts about NTP configuration on an ESXi host
 - vmware_host_ssl_facts - Gather facts of ESXi host system about SSL
 - vmware_local_role_facts - Gather facts about local roles on an ESXi host

@ -356,6 +583,8 @@ acme
 Identity
 ~~~~~~~~

+- onepassword_facts - Fetch facts from 1Password items
+
 ipa
 ^^^

@ -429,6 +658,18 @@ f5
 - bigip_tunnel - Manage tunnels on a BIG-IP
 - bigiq_utility_license_assignment - Manage utility license assignment on BIG-IPs from a BIG-IQ

+fortimanager
+^^^^^^^^^^^^
+
+- fmgr_provisioning - Provision devices via FortiMananger
+
+ftd
+^^^
+
+- ftd_configuration - Manages configuration on Cisco FTD devices over REST API
+- ftd_file_download - Downloads files from Cisco FTD devices over HTTP(S)
+- ftd_file_upload - Uploads files to Cisco FTD devices over HTTP(S)
+
 meraki
 ^^^^^^

@ -457,6 +698,11 @@ onyx

 - onyx_igmp - Configures IGMP globl parameters

+opx
+^^^
+
+- opx_cps - CPS operations on networking device running Openswitch (OPX)
+
 panos
 ^^^^^

@ -485,11 +731,18 @@ cobbler
 ^^^^^^^

 - cobbler_sync - Sync Cobbler
- cobbler_system - Manage system ojects in Cobbler
+- cobbler_system - Manage system objects in Cobbler
+
+cpm
+^^^
+
+- cpm_user - Get various status and parameters from WTI OOB and PDU devices

 redfish
 ^^^^^^^

+- redfish_command - Manages Out-Of-Band controllers using Redfish APIs
+- redfish_config - Manages Out-Of-Band controllers using Redfish APIs
 - redfish_facts - Manages Out-Of-Band controllers using Redfish APIs

 ucs
@ -511,24 +764,60 @@ emc
 ibm
 ^^^

+- ibm_sa_host - Adds hosts to or removes them from IBM Spectrum Accelerate storage systems.
+- ibm_sa_pool - Handles pools on an IBM Spectrum Accelerate storage array.
 - ibm_sa_vol - Handle volumes on an IBM Spectrum Accelerate storage array

 netapp
 ^^^^^^

+- na_elementsw_access_group - NetApp Element Software Manage Access Groups
+- na_elementsw_account - NetApp Element Software Manage Accounts
+- na_elementsw_admin_users - NetApp Element Software Manage Admin Users
 - na_elementsw_backup - NetApp Element Software Create Backups
+- na_elementsw_check_connections - NetApp Element Software Check connectivity to MVIP and SVIP.
+- na_elementsw_cluster - NetApp Element Software Create Cluster
 - na_elementsw_cluster_pair - NetApp Element Software Manage Cluster Pair
+- na_elementsw_drive - NetApp Element Software Manage Node Drives
+- na_elementsw_ldap - NetApp Element Software Manage ldap admin users
+- na_elementsw_network_interfaces - NetApp Element Software Configure Node Network Interfaces
+- na_elementsw_node - NetApp Element Software Node Operation
+- na_elementsw_snapshot - NetApp Element Software Manage Snapshots
+- na_elementsw_snapshot_restore - NetApp Element Software Restore Snapshot
 - na_elementsw_snapshot_schedule - NetApp Element Software Snapshot Schedules
 - na_elementsw_vlan - NetApp Element Software Manage VLAN
 - na_elementsw_volume - NetApp Element Software Manage Volumes
+- na_elementsw_volume_clone - NetApp Element Software Create Volume Clone
 - na_elementsw_volume_pair - NetApp Element Software Volume Pair
- na_ontap_cg_snapshot - Create consistency group snapshot
+- na_ontap_autosupport - NetApp ONTAP manage Autosupport
+- na_ontap_cg_snapshot - NetApp ONTAP manage consistency group snapshot
+- na_ontap_cluster_peer - NetApp ONTAP Manage Cluster peering
+- na_ontap_command - NetApp ONTAP Run any cli command
+- na_ontap_disks - NetApp ONTAP Assign disks to nodes
 - na_ontap_dns - NetApp ONTAP Create, delete, modify DNS servers.
 - na_ontap_fcp - NetApp ONTAP Start, Stop and Enable FCP services.
+- na_ontap_firewall_policy - NetApp ONTAP Manage a firewall policy
+- na_ontap_gather_facts - NetApp information gatherer
+- na_ontap_motd - Setup motd on cDOT
+- na_ontap_node - NetApp ONTAP Rename a node.
 - na_ontap_snapmirror - NetApp ONTAP Manage SnapMirror
- na_ontap_software_update - NetApp ONTAP Update software
- na_ontap_svm_options - NetApp ONTAP Modify Options
- na_ontap_vserver_peer - Manage NetApp Vserver peering
+- na_ontap_software_update - NetApp ONTAP Update Software
+- na_ontap_svm_options - NetApp ONTAP Modify SVM Options
+- na_ontap_vserver_peer - NetApp ONTAP Vserver peering
+- netapp_e_alerts - NetApp E-Series manage email notification settings
+- netapp_e_asup - NetApp E-Series manage auto-support settings
+- netapp_e_auditlog - NetApp E-Series manage audit-log configuration
+- netapp_e_global - NetApp E-Series manage global settings configuration
+- netapp_e_iscsi_interface - NetApp E-Series manage iSCSI interface configuration
+- netapp_e_iscsi_target - NetApp E-Series manage iSCSI target configuration
+- netapp_e_ldap - NetApp E-Series manage LDAP integration to use for authentication
+- netapp_e_mgmt_interface - NetApp E-Series management interface configuration
+- netapp_e_syslog - NetApp E-Series manage syslog settings
+
+purestorage
+^^^^^^^^^^^
+
+- purefb_facts - Collect facts from Pure Storage FlashBlade

 System
 ~~~~~~
@ -543,7 +832,10 @@ Web Infrastructure
 ansible_tower
 ^^^^^^^^^^^^^

+- tower_credential_type - Create, update, or destroy custom Ansible Tower credential type.
 - tower_inventory_source - create, update, or destroy Ansible Tower inventory source.
+- tower_settings - Modify Ansible Tower settings.
+- tower_workflow_template - create, update, or destroy Ansible Tower workflow template.

 Windows
 ~~~~~~~
@ -551,3 +843,5 @@ Windows
 - win_chocolatey_config - Manages Chocolatey config settings
 - win_chocolatey_feature - Manages Chocolatey features
 - win_chocolatey_source - Manages Chocolatey sources
+- win_wait_for_process - Waits for a process to exist or not exist before continuing.
+- win_xml - Add XML fragment to an XML parent
--- a/changelogs/fragments/16748-docker_container-memory.yaml
+++ b/changelogs/fragments/16748-docker_container-memory.yaml
@ -0,0 +1,5 @@
+bugfixes:
+- "docker_container: makes unit parsing for memory sizes more consistent, and
+   fixes idempotency problem when ``kernel_memory`` is set (see
+   https://github.com/ansible/ansible/pull/16748 and
+   https://github.com/ansible/ansible/issues/42692)"
--- a/changelogs/fragments/33156-vmware_guest-resource_pool.yaml
+++ b/changelogs/fragments/33156-vmware_guest-resource_pool.yaml
@ -0,0 +1,2 @@
+bugfixes:
+- Rewrite get_resource_pool method for correct resource_pool selection.
--- a/changelogs/fragments/33579-docker_container-log_driver.yaml
+++ b/changelogs/fragments/33579-docker_container-log_driver.yaml
@ -0,0 +1,2 @@
+bugfixes:
+- "Allow arbitrary ``log_driver`` for docker_container (https://github.com/ansible/ansible/pull/33579)."
--- a/changelogs/fragments/34863-rabbitmq_user_unpack_fix.yaml
+++ b/changelogs/fragments/34863-rabbitmq_user_unpack_fix.yaml
@ -0,0 +1,2 @@
+bugfixes:
+- Ignore empty result of rabbitmqctl list_user_permissions.
--- a/changelogs/fragments/35120-redis_inventory_plugin_flush_cache.yaml
+++ b/changelogs/fragments/35120-redis_inventory_plugin_flush_cache.yaml
@ -0,0 +1,2 @@
+bugfixes:
+- Only delete host key from redis in-memory cache if present.
--- a/changelogs/fragments/38679-vmware_guest-refactor_disk_logic.yml
+++ b/changelogs/fragments/38679-vmware_guest-refactor_disk_logic.yml
@ -0,0 +1,2 @@
+bugfixes:
+- Refactor virtual machine disk logic.
--- a/changelogs/fragments/42322-nmcli_fix_vlan_mod_function.yaml
+++ b/changelogs/fragments/42322-nmcli_fix_vlan_mod_function.yaml
@ -0,0 +1,2 @@
+bugfixes:
+  - "nmcli - fix syntax of vlan modification command (https://github.com/ansible/ansible/issues/42322)"
--- a/changelogs/fragments/42380-docker_container-check-mode.yaml
+++ b/changelogs/fragments/42380-docker_container-check-mode.yaml
@ -0,0 +1,2 @@
+bugfixes:
+- "fixes docker_container check and debug mode (https://github.com/ansible/ansible/pull/42380)"
--- a/changelogs/fragments/42456-consul_kv-lookup.yaml
+++ b/changelogs/fragments/42456-consul_kv-lookup.yaml
@ -0,0 +1,3 @@
+minor_changes:
+  - added capability to set the scheme for the consul_kv lookup.
+  - added optional certificate and certificate verification for consul_kv lookups
--- a/changelogs/fragments/42641-44812-docker-env-variables.yaml
+++ b/changelogs/fragments/42641-44812-docker-env-variables.yaml
@ -0,0 +1,2 @@
+bugfixes:
+- "The docker_* modules respect the DOCKER_* environment variables again (https://github.com/ansible/ansible/pull/42641)."
--- a/changelogs/fragments/42857-docker_container-working_dir.yaml
+++ b/changelogs/fragments/42857-docker_container-working_dir.yaml
@ -0,0 +1,2 @@
+bugfixes:
+- "docker_container: fixing ``working_dir`` idempotency problem (https://github.com/ansible/ansible/pull/42857)"
--- a/changelogs/fragments/43997-docker_network-inspect.yaml
+++ b/changelogs/fragments/43997-docker_network-inspect.yaml
@ -0,0 +1,2 @@
+bugfixes:
+- "docker_network - fixes idempotency issues (https://github.com/ansible/ansible/issues/33045) and name substring issue (https://github.com/ansible/ansible/issues/32926)."
--- a/changelogs/fragments/44755-win_nssm_fixes.yaml
+++ b/changelogs/fragments/44755-win_nssm_fixes.yaml
@ -0,0 +1,10 @@
+bugfixes:
+- win_nssm - Fix several issues and idempotency problems (https://github.com/ansible/ansible/pull/44755)
+- win_nssm - Fix service not started when ``state=started`` (https://github.com/ansible/ansible/issues/35442)
+- win_nssm - Correctly escape argument line when a parameter contains spaces, quotes or backslashes
+- win_nssm - Add missing space between parameters with ``app_parameters``
+- win_nssm - Fix extra space added in argument line with ``app_parameters`` or ``app_parameters_free_form`` when a parameter start by a dash and is followed by a period (https://github.com/ansible/ansible/issues/44079)
+- win_nssm - Fix error when several services were given to the ``dependencies`` option
+
+minor_changes:
+- win_nssm - Drop support of literal YAML dictionnary for ``app_parameters`` option. Use the ``key=value;`` string form instead
--- a/changelogs/fragments/44808-docker_container-idempotency.yaml
+++ b/changelogs/fragments/44808-docker_container-idempotency.yaml
@ -0,0 +1,2 @@
+bugfixes:
+- "improves docker_container idempotency (https://github.com/ansible/ansible/pull/44808)"
--- a/changelogs/fragments/45226-vmware_wait_for_ip_address.yaml
+++ b/changelogs/fragments/45226-vmware_wait_for_ip_address.yaml
@ -0,0 +1,2 @@
+bugfixes:
+- vmware - honor "wait_for_ip_address" when powering on a VM
--- a/changelogs/fragments/45417-ldap_entry-list_conversion.yml
+++ b/changelogs/fragments/45417-ldap_entry-list_conversion.yml
@ -0,0 +1,2 @@
+bugfixes:
+- Fix iterator to list conversion in ldap_entry module.
--- a/changelogs/fragments/45501-get_url-better_checksums.yaml
+++ b/changelogs/fragments/45501-get_url-better_checksums.yaml
@ -0,0 +1,2 @@
+bugfixes:
+- get_url - support remote checksum files with paths specified with leading dots (`./path/to/file`)
--- a/changelogs/fragments/45508-parse-docker-service-parameter.yaml
+++ b/changelogs/fragments/45508-parse-docker-service-parameter.yaml
@ -0,0 +1,2 @@
+bugfixes:
+  - docker_service - correctly parse string values for the `scale` parameter https://github.com/ansible/ansible/pull/45508
--- a/changelogs/fragments/45543-rabbitmq_bindings-fix-quote.yaml
+++ b/changelogs/fragments/45543-rabbitmq_bindings-fix-quote.yaml
@ -0,0 +1,2 @@
+bugfixes:
+- Fix the quoting of vhost and other names in rabbitmq_binding
--- a/changelogs/fragments/45628-fetch_url-error-headers.yaml
+++ b/changelogs/fragments/45628-fetch_url-error-headers.yaml
@ -0,0 +1,2 @@
+bugfixes:
+- "fetch_url did not always return lower-case header names in case of HTTP errors (https://github.com/ansible/ansible/pull/45628)."
--- a/changelogs/fragments/45700-docker_container-dont-parse-absent.yml
+++ b/changelogs/fragments/45700-docker_container-dont-parse-absent.yml
@ -0,0 +1,2 @@
+bugfixes:
+- "Don't parse parameters and options when ``state`` is ``absent`` (https://github.com/ansible/ansible/pull/45700)."
--- a/changelogs/fragments/45712-45753-vultr-timeout.yml
+++ b/changelogs/fragments/45712-45753-vultr-timeout.yml
@ -0,0 +1,3 @@
+bugfixes:
+- Vultr - fix for unreliable API behaviors resulting in timeouts (https://github.com/ansible/ansible/pull/45712/).
+- vultr_server - fix diff for user data (https://github.com/ansible/ansible/pull/45753/).
--- a/changelogs/fragments/45830-fixed-assigning-ssl-certificate.yaml
+++ b/changelogs/fragments/45830-fixed-assigning-ssl-certificate.yaml
@ -0,0 +1,4 @@
+bugfixes:
+- "Fixed: Appropriate code to expand value was missing so assigning SSL
+   certificate is not working as described in the documentation.
+   https://github.com/ansible/ansible/pull/45830"
--- a/changelogs/fragments/45921-os_router-ignores-enable_snat-no.yml
+++ b/changelogs/fragments/45921-os_router-ignores-enable_snat-no.yml
@ -0,0 +1,2 @@
+bugfixes:
+    - "os_router - ``enable_snat: no`` was ignored."
--- a/changelogs/fragments/46049-route53-caa-ordering.txt
+++ b/changelogs/fragments/46049-route53-caa-ordering.txt
@ -0,0 +1,2 @@
+bugfixes:
+- "route53 - fix CAA record ordering for idempotency."
--- a/changelogs/fragments/46115-46035-cs_instance-fixes.yml
+++ b/changelogs/fragments/46115-46035-cs_instance-fixes.yml
@ -0,0 +1,3 @@
+bugfixes:
+- cs_instance - Fix host migration without volume (https://github.com/ansible/ansible/pull/46115).
+- cs_instance - Fix docs and typo in examples (https://github.com/ansible/ansible/pull/46035).
--- a/changelogs/fragments/46245-systemd-fix-service-enable-logic.yaml
+++ b/changelogs/fragments/46245-systemd-fix-service-enable-logic.yaml
@ -0,0 +1,3 @@
+bugfixes:
+- In systemd module, allow scope to default to 'system'
+- In systemd module, fix check if a systemd+initd service is enabled - disabled in systemd means disabled
--- a/changelogs/fragments/46322-docker_container-image-not-given.yaml
+++ b/changelogs/fragments/46322-docker_container-image-not-given.yaml
@ -0,0 +1,2 @@
+bugfixes:
+- "docker_container - the behavior is improved in case ``image`` is not specified, but needed for (re-)creating the container."
--- a/changelogs/fragments/46521-zabbix_host-fix-link-template-error.yml
+++ b/changelogs/fragments/46521-zabbix_host-fix-link-template-error.yml
@ -0,0 +1,2 @@
+bugfixes:
+- "zabbix_host - module was failing when zabbix host was updated with new interface and template depending on that interface at the same time"
--- a/changelogs/fragments/46594-docker_container-publish-all-ports.yml
+++ b/changelogs/fragments/46594-docker_container-publish-all-ports.yml
@ -0,0 +1,2 @@
+bugfixes:
+- "docker_container - ``publish_ports: all`` was not used correctly when checking idempotency."
--- a/changelogs/fragments/46595-docker_container-expected_ports.yml
+++ b/changelogs/fragments/46595-docker_container-expected_ports.yml
@ -0,0 +1,2 @@
+bugfixes:
+- "docker_container - fix idempotency check for published_ports in some special cases."
--- a/changelogs/fragments/46743-fix-native-jinja-newlines.yaml
+++ b/changelogs/fragments/46743-fix-native-jinja-newlines.yaml
@ -0,0 +1,2 @@
+bugfixes:
+    - templar - Do not strip new lines in native jinja - https://github.com/ansible/ansible/issues/46743
--- a/changelogs/fragments/46800-ec2_vol_facts-handle-missing-tags.yml
+++ b/changelogs/fragments/46800-ec2_vol_facts-handle-missing-tags.yml
@ -0,0 +1,3 @@
+---
+bugfixes:
+- Only access EC2 volume tags when set
--- a/changelogs/fragments/46961_fix_aws_ec2_cache.yaml
+++ b/changelogs/fragments/46961_fix_aws_ec2_cache.yaml
@ -0,0 +1,2 @@
+bugfixes:
+  - aws_ec2 - fixed issue where cache did not contain the computed groups
--- a/changelogs/fragments/47046-docker-versions.yaml
+++ b/changelogs/fragments/47046-docker-versions.yaml
@ -0,0 +1,2 @@
+bugfixes:
+- "The docker_* modules more uniformly check versions of docker-py/docker and (if necessary) the docker API."
--- a/changelogs/fragments/47096-junos-terminal-regex-fix.yml
+++ b/changelogs/fragments/47096-junos-terminal-regex-fix.yml
@ -0,0 +1,2 @@
+bugfixes:
+  - junos - fix terminal prompt regex (https://github.com/ansible/ansible/pull/47096)
--- a/changelogs/fragments/47109-fail-space-separated-string-pkgs.yaml
+++ b/changelogs/fragments/47109-fail-space-separated-string-pkgs.yaml
@ -0,0 +1,2 @@
+minor_changes:
+  - yum/dnf - fail when space separated string of names (https://github.com/ansible/ansible/pull/47109)
--- a/changelogs/fragments/47133-pamd_use_module_tmpdir.yml
+++ b/changelogs/fragments/47133-pamd_use_module_tmpdir.yml
@ -0,0 +1,4 @@
+---
+bugfixes:
+- "pamd: use module.tmpdir for NamedTemporaryFile()
+   (see https://github.com/ansible/ansible/pull/47133 and https://github.com/ansible/ansible/issues/36954)" 
--- a/changelogs/fragments/47281-pamd-dont-delete-named_temporary_file_on_close.yaml
+++ b/changelogs/fragments/47281-pamd-dont-delete-named_temporary_file_on_close.yaml
@ -0,0 +1,5 @@
+---
+bugfixes:
+- "pamd: add delete=False to NamedTemporaryFile() fixes OSError on module completion, and
+   removes print statement from module code.
+   (see https://github.com/ansible/ansible/pull/47281 and https://github.com/ansible/ansible/issues/47080)" 
--- a/changelogs/fragments/47296-docker_container-memory_swappiness.yaml
+++ b/changelogs/fragments/47296-docker_container-memory_swappiness.yaml
@ -0,0 +1,2 @@
+bugfixes:
+- "docker_container - fix ``memory_swappiness`` documentation."
--- a/changelogs/fragments/47307-handler-include-task.yml
+++ b/changelogs/fragments/47307-handler-include-task.yml
@ -0,0 +1,2 @@
+bugfixes:
+  - "handlers - fix crash when handler task include tasks"
--- a/changelogs/fragments/47395-docker_container-ipvX_address.yaml
+++ b/changelogs/fragments/47395-docker_container-ipvX_address.yaml
@ -0,0 +1,2 @@
+bugfixes:
+- "docker_container - fail if ``ipv4_address`` or ``ipv6_address`` is used with a too old docker-py version."
--- a/changelogs/fragments/47396-docker_container-detach-auto-remove.yaml
+++ b/changelogs/fragments/47396-docker_container-detach-auto-remove.yaml
@ -0,0 +1,2 @@
+bugfixes:
+- "docker_container - fix behavior of ``detach: yes`` if ``auto_remove: yes`` is specified."
--- a/changelogs/fragments/54434-iam-role-arn-parsing.yml
+++ b/changelogs/fragments/54434-iam-role-arn-parsing.yml
@ -0,0 +1,2 @@
+bugfixes:
+  - ec2_metadata_facts - Parse IAM role name from metadata ARN instead of security credential field.
--- a/changelogs/fragments/ajson-nested-decode.yaml
+++ b/changelogs/fragments/ajson-nested-decode.yaml
@ -0,0 +1,2 @@
+bugfixes:
+- Ansible JSON Decoder - Switch from decode to object_hook to support nested use of __ansible_vault and __ansible_unsafe (https://github.com/ansible/ansible/pull/45514)
--- a/changelogs/fragments/ansible-connection-cleanup-when-failed.yaml
+++ b/changelogs/fragments/ansible-connection-cleanup-when-failed.yaml
@ -0,0 +1,2 @@
+bugfixes:
+    - ansible-connection - Clean up socket files if playbook aborted before connection is started.
--- a/changelogs/fragments/ansible-doc-fixes.yml
+++ b/changelogs/fragments/ansible-doc-fixes.yml
@ -0,0 +1,2 @@
+bugfixes:
+    - ansible-doc, removed local hardcoded listing, now uses the 'central' list from constants and other minor issues
--- a/changelogs/fragments/aws_bugfix_backports.yml
+++ b/changelogs/fragments/aws_bugfix_backports.yml
@ -0,0 +1,22 @@
+bugfixes:
+- Fix lambda_policy updates when principal is an account number. Backport of
+  https://github.com/ansible/ansible/pull/44871
+- Support key names that contain spaces in ec2_metadata_facts module.
+  https://github.com/ansible/ansible/pull/45313
+- Fix ec2_group support for multi-account and peered VPC security groups.
+  Reported in https://github.com/ansible/ansible/issue/44788 and fixed in
+  https://github.com/ansible/ansible/pull/45296
+- Fix s3_lifecycle module backwards compatibility without providing prefix.
+  Blank prefixes regression was introduced in boto3 rewrite.
+  https://github.com/ansible/ansible/pull/45318
+- Fix ecs_taskdefinition handling of changed role_arn. If the task role in a
+  ECS task definition changes ansible should create a new revsion of the task
+  definition. https://github.com/ansible/ansible/pull/45317
+- Fix health check parameter handling in elb_target_group per
+  https://github.com/ansible/ansible/issues/43244 about health_check_port.
+  Fixed in https://github.com/ansible/ansible/pull/45314
+- Remove spurious `changed=True` returns when ec2_group module is used with
+  numeric ports. https://github.com/ansible/ansible/pull/45240
+- Add argspec to aws_application_scaling_policy module to handle metric
+  specifications, scaling cooldowns, and target values.
+  https://github.com/ansible/ansible/pull/45235
--- a/changelogs/fragments/aws_cloudfront_distribution_fix_nonexistent_method_name.yaml
+++ b/changelogs/fragments/aws_cloudfront_distribution_fix_nonexistent_method_name.yaml
@ -0,0 +1,5 @@
+---
+bugfixes:
+  - cloudfront_distribution - replace call to nonexistent method 'validate_distribution_id_from_caller_reference'
+    with 'validate_distribution_from_caller_reference' and set the distribution_id variable to the distribution's
+    'Id' key.
--- a/changelogs/fragments/aws_parameter_store_pagination.yaml
+++ b/changelogs/fragments/aws_parameter_store_pagination.yaml
@ -0,0 +1,5 @@
+---
+bugfixes:
+  - aws_ssm_parameter_store - AWS Systems Manager Parameter Store may reach
+    an internal limit before finding the expected parameter, causing misleading
+    results. This is resolved by paginating the describe_parameters call.
--- a/changelogs/fragments/azure-storage-cloud-environment.yaml
+++ b/changelogs/fragments/azure-storage-cloud-environment.yaml
@ -0,0 +1,3 @@
+---
+bugfixes:
+- fix azure storage blob cannot create blob container in non-public azure cloud environment. (https://github.com/ansible/ansible/issues/35223)
--- a/changelogs/fragments/azure-version.yaml
+++ b/changelogs/fragments/azure-version.yaml
@ -0,0 +1,2 @@
+bugfixes:
+- use proper module_util to get Ansible version for Azure requests
--- a/changelogs/fragments/azure_autoscale.yaml
+++ b/changelogs/fragments/azure_autoscale.yaml
@ -0,0 +1,3 @@
+---
+bugfixes:
+- fix azure_rm_autoscale module can use dict to identify target (https://github.com/ansible/ansible/pull/45477)
--- a/changelogs/fragments/azure_rm_autoscale-fixed_date.yml
+++ b/changelogs/fragments/azure_rm_autoscale-fixed_date.yml
@ -0,0 +1,2 @@
+bugfixes:
+- fix azure_rm_autoscale module can create a schedule with fixed start/end date (https://github.com/ansible/ansible/pull/47186)
--- a/changelogs/fragments/azure_rm_deployment_fix_45941.yaml
+++ b/changelogs/fragments/azure_rm_deployment_fix_45941.yaml
@ -0,0 +1,2 @@
+bugfixes:
+- azure_rm_deployment - fixed regression that prevents resource group from being created (https://github.com/ansible/ansible/issues/45941)
--- a/changelogs/fragments/blockinfile-bytes-fix.yaml
+++ b/changelogs/fragments/blockinfile-bytes-fix.yaml
@ -0,0 +1,2 @@
+bugfixes:
+  - blockinfile - use bytes rather than a native string to prevent a stacktrace in Python 3 when writing to the file (https://github.com/ansible/ansible/issues/46237)
--- a/changelogs/fragments/callback_fixes.yml
+++ b/changelogs/fragments/callback_fixes.yml
@ -0,0 +1,2 @@
+bugfixes:
+    - Update callbacks to use Ansible's JSON encoder to avoid known serialization issues
--- a/changelogs/fragments/cb_fix_config.yml
+++ b/changelogs/fragments/cb_fix_config.yml
@ -0,0 +1,2 @@
+bugfixes:
+    - fixed typo in config that prevented keys matching
--- a/changelogs/fragments/cliconf-get-bugfixes.yaml
+++ b/changelogs/fragments/cliconf-get-bugfixes.yaml
@ -0,0 +1,6 @@
+---
+bugfixes:
+- Update the signatures of many cliconf plugins' get() methods to support the check_all paramter.
+  Specifically, aireos, aruba, asa, ce, cnos, dellos6, dellos9, dellos10,
+  edgeos, enos, exos, ironware, nos, onyx, routeros, slxos, and voss were
+  updated. This fixes the cli_command module for these platforms
--- a/changelogs/fragments/dd-put-empty-files.yaml
+++ b/changelogs/fragments/dd-put-empty-files.yaml
@ -0,0 +1,7 @@
+bugfixes:
+- docker connection - Support empty files with copying to target (https://github.com/ansible/ansible/issues/36725)
+- chroot connection - Support empty files with copying to target (https://github.com/ansible/ansible/issues/36725)
+- jail connection - Support empty files with copying to target (https://github.com/ansible/ansible/issues/36725)
+- kubectl connection - Support empty files with copying to target (https://github.com/ansible/ansible/issues/36725)
+- libvirt_lxc connection - Support empty files with copying to target (https://github.com/ansible/ansible/issues/36725)
+- zone connection - Support empty files with copying to target (https://github.com/ansible/ansible/issues/36725)
--- a/changelogs/fragments/delegate_to_loop_hostvars.yaml
+++ b/changelogs/fragments/delegate_to_loop_hostvars.yaml
@ -0,0 +1,2 @@
+bugfixes:
+- delegate_to - When templating ``delegate_to`` in a loop, don't use the task for a cache, return a special cache through ``get_vars`` allowing looping over a hostvar (https://github.com/ansible/ansible/issues/47207)
--- a/changelogs/fragments/dnf-group-removal.yaml
+++ b/changelogs/fragments/dnf-group-removal.yaml
@ -0,0 +1,3 @@
+---
+minor_changes:
+  - "dnf - group removal does not work if group was installed with Ansible because of dnf upstream bug https://bugzilla.redhat.com/show_bug.cgi?id=1620324"
--- a/changelogs/fragments/dnf-immutable-mutable.yaml
+++ b/changelogs/fragments/dnf-immutable-mutable.yaml
@ -0,0 +1,3 @@
+---
+minor_changes:
+  - "dnf - properly handle modifying the enable/disable excludes data field"
--- a/changelogs/fragments/dnf-localgpgcheck.yaml
+++ b/changelogs/fragments/dnf-localgpgcheck.yaml
@ -0,0 +1,3 @@
+---
+minor_changes:
+  - "dnf properly honor disable_gpg_check for local (on local disk of remote node) package installation"
--- a/changelogs/fragments/dnfyum-disable-excludes.yaml
+++ b/changelogs/fragments/dnfyum-disable-excludes.yaml
@ -0,0 +1,3 @@
+---
+minor_changes:
+  - "dnf appropriately handles disable_excludes repoid argument"
--- a/changelogs/fragments/docker_container-idempotency.yaml
+++ b/changelogs/fragments/docker_container-idempotency.yaml
@ -0,0 +1,7 @@
+bugfixes:
+- "docker_container - Makes ``blkio_weight``, ``cpuset_mems``, ``dns_opts`` and ``uts`` options actually work."
+- "docker_container - Fix idempotency problems with ``cap_drop`` and ``groups`` (when numeric group IDs were used)."
+- "docker_container - Fix type conversion errors for ``log_options``."
+- "docker_container - Fixing various comparison/idempotency problems related to wrong comparisons.
+   In particular, comparisons for ``command`` and ``entrypoint`` (both lists) no longer ignore missing
+   elements during idempotency checks."
--- a/changelogs/fragments/docker_volume-force-change-detection.yaml
+++ b/changelogs/fragments/docker_volume-force-change-detection.yaml
@ -0,0 +1,2 @@
+bugfixes:
+- "docker_volume - fix ``force`` and change detection logic. If not both evaluated to ``True``, the volume was not recreated."
--- a/changelogs/fragments/ec2_group_fix_target_containing_list_within_list.yaml
+++ b/changelogs/fragments/ec2_group_fix_target_containing_list_within_list.yaml
@ -0,0 +1,6 @@
+---
+bugfixes:
+  - ec2_group - Sanitize the ingress and egress rules before operating on them by flattening any lists
+    within lists describing the target CIDR(s) into a list of strings. Prior to Ansible 2.6 the ec2_group
+    module accepted a list of strings, a list of lists, or a combination of strings and lists within a list.
+    https://github.com/ansible/ansible/pull/45594
--- a/changelogs/fragments/ec2_vpc_route_table_replace_route_fix.yaml
+++ b/changelogs/fragments/ec2_vpc_route_table_replace_route_fix.yaml
@ -0,0 +1,4 @@
+---
+bugfixes:
+- ec2_vpc_route_table - check the origin before replacing routes.
+  Routes with the origin 'EnableVgwRoutePropagation' may not be replaced.
--- a/changelogs/fragments/elb_target_group_fix_KeyError.yaml
+++ b/changelogs/fragments/elb_target_group_fix_KeyError.yaml
@ -0,0 +1,3 @@
+---
+bugfixes:
+- elb_target_group - cast target ports to integers before making API calls after the key 'Targets' is in params.
--- a/changelogs/fragments/fix_calling_deprecate_with_correct_arguments.yaml
+++ b/changelogs/fragments/fix_calling_deprecate_with_correct_arguments.yaml
@ -0,0 +1,2 @@
+bugfixes:
+  - Fix calling deprecate with correct arguments (https://github.com/ansible/ansible/pull/46062).
--- a/changelogs/fragments/fix_ec2_group_target_vpc_precedence.yaml
+++ b/changelogs/fragments/fix_ec2_group_target_vpc_precedence.yaml
@ -0,0 +1,7 @@
+---
+bugfixes:
+  - ec2_group - There can be multiple security groups with the same name in
+    different VPCs. Prior to 2.6 if a target group name was provided, the group
+    matching the name and VPC had highest precedence. Restore this behavior by
+    updated the dictionary with the groups matching the VPC last.
+  - ec2_group - support EC2-Classic by not assuming security groups have VPCs.
--- a/changelogs/fragments/fix_flatten.yml
+++ b/changelogs/fragments/fix_flatten.yml
@ -0,0 +1,2 @@
+bugfixes:
+    - fix flatten to properly handle multiple lists in lists https://github.com/ansible/ansible/issues/46343
--- a/changelogs/fragments/fix_nxos_facts_indefinite_hang.yaml
+++ b/changelogs/fragments/fix_nxos_facts_indefinite_hang.yaml
@ -0,0 +1,2 @@
+bugfixes:
+- fix nxos_facts indefinite hang for text based output (https://github.com/ansible/ansible/pull/45845).
--- a/changelogs/fragments/fix_vyos_version.yaml
+++ b/changelogs/fragments/fix_vyos_version.yaml
@ -0,0 +1,2 @@
+bugfixes:
+- vyos_facts - fix vyos_facts not returning version number issue (https://github.com/ansible/ansible/pull/39115)
--- a/changelogs/fragments/free-strategy-include-var-tags.yaml
+++ b/changelogs/fragments/free-strategy-include-var-tags.yaml
@ -0,0 +1,2 @@
+bugfixes:
+- dynamic includes - Use the copied and merged task for calculating task vars in the free strategy (https://github.com/ansible/ansible/issues/47024)
--- a/changelogs/fragments/ftd-http-api-plugin-refresh-token.yaml
+++ b/changelogs/fragments/ftd-http-api-plugin-refresh-token.yaml
@ -0,0 +1,2 @@
+bugfixes:
+- Fix the issue with refreshing the token by storing Authorization header inside HttpApi connection plugin.
--- a/changelogs/fragments/get-url-fix-idempotency.yaml
+++ b/changelogs/fragments/get-url-fix-idempotency.yaml
@ -0,0 +1,2 @@
+bugfixes:
+- get_url - Don't re-download files unnecessarily when force=no (https://github.com/ansible/ansible/issues/45491)
--- a/changelogs/fragments/get_url-remove-fragile-code.yaml
+++ b/changelogs/fragments/get_url-remove-fragile-code.yaml
@ -0,0 +1,2 @@
+bugfixes:
+  - get_url - improve code that parses checksums from a file so it is not fragile and reports a helpful error when no matching checksum is found
--- a/changelogs/fragments/inv_fixes.yml
+++ b/changelogs/fragments/inv_fixes.yml
@ -0,0 +1,2 @@
+bugfixes:
+    - Give user better error messages and more information on verbose about inventory plugin behaviour
--- a/changelogs/fragments/ios-prompt-fix.yaml
+++ b/changelogs/fragments/ios-prompt-fix.yaml
@ -0,0 +1,2 @@
+bugfixes:
+- Fix prompt mismatch issue for ios (https://github.com/ansible/ansible/issues/47004)
--- a/changelogs/fragments/ip_netns-fix-exists.yaml
+++ b/changelogs/fragments/ip_netns-fix-exists.yaml
@ -0,0 +1,5 @@
+---
+bugfixes:
+- Fixes an error that occurs when attempting to see if the netns already exists
+  on the remote device. This change will now execute ``ip netns list`` and check
+  if the desired namespace is in the output.
--- a/changelogs/fragments/issue46937-pr46519-pr47449-fix-pip-multiple-extras.yaml
+++ b/changelogs/fragments/issue46937-pr46519-pr47449-fix-pip-multiple-extras.yaml
@ -0,0 +1,2 @@
+bugfixes:
+- Fix pip module so that it can recognize multiple extras
--- a/changelogs/fragments/k8s_auth_kubeconfig.yml
+++ b/changelogs/fragments/k8s_auth_kubeconfig.yml
@ -0,0 +1,2 @@
+bugfixes:
+  - k8s - allow kubeconfig or context to be set without the other
--- a/changelogs/fragments/k8s_facts_fix.yaml
+++ b/changelogs/fragments/k8s_facts_fix.yaml
@ -0,0 +1,3 @@
+---
+bugfixes:
+- k8s_facts now returns a resources key in all situations
--- a/changelogs/fragments/lineinfile-insertbefore-index-out-of-range.yaml
+++ b/changelogs/fragments/lineinfile-insertbefore-index-out-of-range.yaml
@ -0,0 +1,2 @@
+bugfixes:
+  - lineinfile - fix index out of range error when using insertbefore on a file with only one line (https://github.com/ansible/ansible/issues/46043)
--- a/changelogs/fragments/loop_undefined_delegate_to.yaml
+++ b/changelogs/fragments/loop_undefined_delegate_to.yaml
@ -0,0 +1,4 @@
+bugfixes:
+- loop - Ensure that a loop with a when condition that evaluates to false and delegate_to, will short circuit if the
+  loop references an undefined variable. This matches the behavior in the same scenario without delegate_to
+  (https://github.com/ansible/ansible/issues/45189)
--- a/changelogs/fragments/mail-fix-regression.yaml
+++ b/changelogs/fragments/mail-fix-regression.yaml
@ -0,0 +1,2 @@
+bugfixes:
+- mail - Fix regression when sending mail without TLS/SSL
--- a/changelogs/fragments/mysql-migrate_to_pymysql.yaml
+++ b/changelogs/fragments/mysql-migrate_to_pymysql.yaml
@ -0,0 +1,2 @@
+bugfixes:
+- mysql_*, proxysql_* - PyMySQL (a pure-Python MySQL driver) is now a preferred dependency also supporting Python 3.X.
--- a/changelogs/fragments/netconf_config_comfirm_commit_fix.yaml
+++ b/changelogs/fragments/netconf_config_comfirm_commit_fix.yaml
@ -0,0 +1,3 @@
+---
+bugfixes:
+- netconf_config - Fix in confirmed_commit capability in netconf_config modules  (https://github.com/ansible/ansible/pull/46778)
--- a/changelogs/fragments/netconf_config_default_operation.yaml
+++ b/changelogs/fragments/netconf_config_default_operation.yaml
@ -0,0 +1,3 @@
+---
+minor_changes:
+- netconf_config - Make default_operation optional in netconf_config module (https://github.com/ansible/ansible/pull/46333)
--- a/changelogs/fragments/netconf_module_utils_py3_fix.yaml
+++ b/changelogs/fragments/netconf_module_utils_py3_fix.yaml
@ -0,0 +1,3 @@
+---
+bugfixes:
+- netconf_config - Fix netconf module_utils dict changed size issue (https://github.com/ansible/ansible/pull/46778)
--- a/changelogs/fragments/no-mutable-fieldattribute-defaults.yaml
+++ b/changelogs/fragments/no-mutable-fieldattribute-defaults.yaml
@ -0,0 +1,2 @@
+bugfixes:
+- FieldAttribute - Do not use mutable defaults, instead allow supplying a callable for defaults of mutable types (https://github.com/ansible/ansible/issues/46824)
--- a/changelogs/fragments/no-overwrite-roles.yaml
+++ b/changelogs/fragments/no-overwrite-roles.yaml
@ -0,0 +1,2 @@
+bugfixes:
+- roles - Ensure that we don't overwrite roles that have been registered (from imports) while parsing roles under the roles header (https://github.com/ansible/ansible/issues/47454)
--- a/Show More
+++ b/Show More