From 5b37e1d2049f172832cc2a28e97687fa7c372b96 Mon Sep 17 00:00:00 2001 From: Felix Fontein Date: Mon, 20 May 2024 09:04:50 +0200 Subject: [PATCH] Release 8.6.1. --- CHANGELOG.md | 99 ++++++++++++------- CHANGELOG.rst | 21 ++++ changelogs/changelog.yaml | 23 +++++ changelogs/fragments/8.6.1.yml | 1 - .../8303-fix-rendering-foreign-variables.yaml | 2 - ...ration-fix-diff-krbPrincipalAttribute.yaml | 2 - .../fragments/8355-keycloak-idp-sanitize.yaml | 2 - .../8367-fix-close-span-if-no-logs.yaml | 2 - .../fragments/8373-honour-disable-logs.yaml | 3 - 9 files changed, 106 insertions(+), 49 deletions(-) delete mode 100644 changelogs/fragments/8.6.1.yml delete mode 100644 changelogs/fragments/8303-fix-rendering-foreign-variables.yaml delete mode 100644 changelogs/fragments/8320-keycloak_user_federation-fix-diff-krbPrincipalAttribute.yaml delete mode 100644 changelogs/fragments/8355-keycloak-idp-sanitize.yaml delete mode 100644 changelogs/fragments/8367-fix-close-span-if-no-logs.yaml delete mode 100644 changelogs/fragments/8373-honour-disable-logs.yaml diff --git a/CHANGELOG.md b/CHANGELOG.md index 31af2b80b2..2fc5d8f1f6 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,72 +2,97 @@ **Topics** -- v8\.6\.0 +- v8\.6\.1 - Release Summary + - Security Fixes + - Bugfixes +- v8\.6\.0 + - Release Summary - Minor Changes - Deprecated Features - - Bugfixes + - Bugfixes - New Modules - v8\.5\.0 - - Release Summary + - Release Summary - Minor Changes - - Security Fixes - - Bugfixes + - Security Fixes + - Bugfixes - New Modules - v8\.4\.0 - - Release Summary + - Release Summary - Minor Changes - - Bugfixes + - Bugfixes - New Plugins - Callback - Filter - New Modules - v8\.3\.0 - - Release Summary + - Release Summary - Minor Changes - Deprecated Features - - Bugfixes + - Bugfixes - New Modules - v8\.2\.0 - - Release Summary + - Release Summary - Minor Changes - - Bugfixes + - Bugfixes - New Plugins - Connection - Filter - Lookup - New Modules - v8\.1\.0 - - Release Summary + - Release Summary - Minor Changes - - Bugfixes + - Bugfixes - New Plugins - Lookup - Test - New Modules - v8\.0\.2 - - Release Summary - - Bugfixes -- v8\.0\.1 - Release Summary - Bugfixes -- v8\.0\.0 +- v8\.0\.1 - Release Summary + - Bugfixes +- v8\.0\.0 + - Release Summary - Minor Changes - Breaking Changes / Porting Guide - Deprecated Features - Removed Features \(previously deprecated\) - - Bugfixes + - Bugfixes - Known Issues - New Plugins - Lookup - New Modules This changelog describes changes after version 7\.0\.0\. + +## v8\.6\.1 + + +### Release Summary + +Regular bugfix release\. + + +### Security Fixes + +* keycloak\_identity\_provider \- the client secret was not correctly sanitized by the module\. The return values proposed\, existing\, and end\_state\, as well as the diff\, did contain the client secret unmasked \([https\://github\.com/ansible\-collections/community\.general/pull/8355](https\://github\.com/ansible\-collections/community\.general/pull/8355)\)\. + + +### Bugfixes + +* keycloak\_user\_federation \- fix diff of empty krbPrincipalAttribute \([https\://github\.com/ansible\-collections/community\.general/pull/8320](https\://github\.com/ansible\-collections/community\.general/pull/8320)\)\. +* merge\_variables lookup plugin \- fixing cross host merge\: providing access to foreign hosts variables to the perspective of the host that is performing the merge \([https\://github\.com/ansible\-collections/community\.general/pull/8303](https\://github\.com/ansible\-collections/community\.general/pull/8303)\)\. +* opentelemetry callback plugin \- close spans always \([https\://github\.com/ansible\-collections/community\.general/pull/8367](https\://github\.com/ansible\-collections/community\.general/pull/8367)\)\. +* opentelemetry callback plugin \- honour the disable\_logs option to avoid storing task results since they are not used regardless \([https\://github\.com/ansible\-collections/community\.general/pull/8373](https\://github\.com/ansible\-collections/community\.general/pull/8373)\)\. + ## v8\.6\.0 - + ### Release Summary Regular bugfix and features release\. @@ -95,7 +120,7 @@ Regular bugfix and features release\. * hipchat callback plugin \- the hipchat service has been discontinued and the self\-hosted variant has been End of Life since 2020\. The callback plugin is therefore deprecated and will be removed from community\.general 10\.0\.0 if nobody provides compelling reasons to still keep it \([https\://github\.com/ansible\-collections/community\.general/issues/8184](https\://github\.com/ansible\-collections/community\.general/issues/8184)\, [https\://github\.com/ansible\-collections/community\.general/pull/8189](https\://github\.com/ansible\-collections/community\.general/pull/8189)\)\. - + ### Bugfixes * aix\_filesystem \- fix \_validate\_vg not passing VG name to lsvg\_cmd \([https\://github\.com/ansible\-collections/community\.general/issues/8151](https\://github\.com/ansible\-collections/community\.general/issues/8151)\)\. @@ -121,7 +146,7 @@ Regular bugfix and features release\. ## v8\.5\.0 - + ### Release Summary Regular feature and bugfix release with security fixes\. @@ -139,12 +164,12 @@ Regular feature and bugfix release with security fixes\. * proxmox \- adds startup parameters to configure startup order\, startup delay and shutdown delay \([https\://github\.com/ansible\-collections/community\.general/pull/8038](https\://github\.com/ansible\-collections/community\.general/pull/8038)\)\. * revbitspss lookup plugin \- removed a redundant unicode prefix\. The prefix was not necessary for Python 3 and has been cleaned up to streamline the code \([https\://github\.com/ansible\-collections/community\.general/pull/8087](https\://github\.com/ansible\-collections/community\.general/pull/8087)\)\. - + ### Security Fixes * cobbler\, gitlab\_runners\, icinga2\, linode\, lxd\, nmap\, online\, opennebula\, proxmox\, scaleway\, stackpath\_compute\, virtualbox\, and xen\_orchestra inventory plugin \- make sure all data received from the remote servers is marked as unsafe\, so remote code execution by obtaining texts that can be evaluated as templates is not possible \([https\://www\.die\-welt\.net/2024/03/remote\-code\-execution\-in\-ansible\-dynamic\-inventory\-plugins/](https\://www\.die\-welt\.net/2024/03/remote\-code\-execution\-in\-ansible\-dynamic\-inventory\-plugins/)\, [https\://github\.com/ansible\-collections/community\.general/pull/8098](https\://github\.com/ansible\-collections/community\.general/pull/8098)\)\. - + ### Bugfixes * aix\_filesystem \- fix issue with empty list items in crfs logic and option order \([https\://github\.com/ansible\-collections/community\.general/pull/8052](https\://github\.com/ansible\-collections/community\.general/pull/8052)\)\. @@ -166,7 +191,7 @@ Regular feature and bugfix release with security fixes\. ## v8\.4\.0 - + ### Release Summary Regular bugfix and feature release\. @@ -184,7 +209,7 @@ Regular bugfix and feature release\. * sudoers \- add support for the NOEXEC tag in sudoers rules \([https\://github\.com/ansible\-collections/community\.general/pull/7983](https\://github\.com/ansible\-collections/community\.general/pull/7983)\)\. * terraform \- fix diff\_mode in state absent and when terraform resource\_changes does not exist \([https\://github\.com/ansible\-collections/community\.general/pull/7963](https\://github\.com/ansible\-collections/community\.general/pull/7963)\)\. - + ### Bugfixes * cargo \- fix idempotency issues when using a custom installation path for packages \(using the \-\-path parameter\)\. The initial installation runs fine\, but subsequent runs use the get\_installed\(\) function which did not check the given installation location\, before running cargo install\. This resulted in a false changed state\. Also the removal of packeges using state\: absent failed\, as the installation check did not use the given parameter \([https\://github\.com/ansible\-collections/community\.general/pull/7970](https\://github\.com/ansible\-collections/community\.general/pull/7970)\)\. @@ -222,7 +247,7 @@ Regular bugfix and feature release\. ## v8\.3\.0 - + ### Release Summary Regular bugfix and feature release\. @@ -245,7 +270,7 @@ Regular bugfix and feature release\. * consul\_acl \- the module has been deprecated and will be removed in community\.general 10\.0\.0\. consul\_token and consul\_policy can be used instead \([https\://github\.com/ansible\-collections/community\.general/pull/7901](https\://github\.com/ansible\-collections/community\.general/pull/7901)\)\. - + ### Bugfixes * homebrew \- detect already installed formulae and casks using JSON output from brew info \([https\://github\.com/ansible\-collections/community\.general/issues/864](https\://github\.com/ansible\-collections/community\.general/issues/864)\)\. @@ -269,7 +294,7 @@ Regular bugfix and feature release\. ## v8\.2\.0 - + ### Release Summary Regular bugfix and feature release\. @@ -290,7 +315,7 @@ Regular bugfix and feature release\. * ssh\_config \- new feature to set IdentitiesOnly option to yes or no \([https\://github\.com/ansible\-collections/community\.general/pull/7704](https\://github\.com/ansible\-collections/community\.general/pull/7704)\)\. * xcc\_redfish\_command \- added support for raw POSTs \(command\=PostResource in category\=Raw\) without a specific action info \([https\://github\.com/ansible\-collections/community\.general/pull/7746](https\://github\.com/ansible\-collections/community\.general/pull/7746)\)\. - + ### Bugfixes * keycloak\_identity\_provider \- mappers processing was not idempotent if the mappers configuration list had not been sorted by name \(in ascending order\)\. Fix resolves the issue by sorting mappers in the desired state using the same key which is used for obtaining existing state \([https\://github\.com/ansible\-collections/community\.general/pull/7418](https\://github\.com/ansible\-collections/community\.general/pull/7418)\)\. @@ -330,7 +355,7 @@ Regular bugfix and feature release\. ## v8\.1\.0 - + ### Release Summary Regular bugfix and feature release\. @@ -372,7 +397,7 @@ Regular bugfix and feature release\. * redfish\_info \- adding the BootProgress property when getting Systems info \([https\://github\.com/ansible\-collections/community\.general/pull/7626](https\://github\.com/ansible\-collections/community\.general/pull/7626)\)\. * ssh\_config \- adds controlmaster\, controlpath and controlpersist parameters \([https\://github\.com/ansible\-collections/community\.general/pull/7456](https\://github\.com/ansible\-collections/community\.general/pull/7456)\)\. - + ### Bugfixes * apt\-rpm \- the module did not upgrade packages if a newer version exists\. Now the package will be reinstalled if the candidate is newer than the installed version \([https\://github\.com/ansible\-collections/community\.general/issues/7414](https\://github\.com/ansible\-collections/community\.general/issues/7414)\)\. @@ -413,12 +438,12 @@ Regular bugfix and feature release\. ## v8\.0\.2 - + ### Release Summary Bugfix release for inclusion in Ansible 9\.0\.0rc1\. - + ### Bugfixes * ocapi\_utils\, oci\_utils\, redfish\_utils module utils \- replace type\(\) calls with isinstance\(\) calls \([https\://github\.com/ansible\-collections/community\.general/pull/7501](https\://github\.com/ansible\-collections/community\.general/pull/7501)\)\. @@ -427,12 +452,12 @@ Bugfix release for inclusion in Ansible 9\.0\.0rc1\. ## v8\.0\.1 - + ### Release Summary Bugfix release for inclusion in Ansible 9\.0\.0b1\. - + ### Bugfixes * gitlab\_group\_members \- fix gitlab constants call in gitlab\_group\_members module \([https\://github\.com/ansible\-collections/community\.general/issues/7467](https\://github\.com/ansible\-collections/community\.general/issues/7467)\)\. @@ -445,7 +470,7 @@ Bugfix release for inclusion in Ansible 9\.0\.0b1\. ## v8\.0\.0 - + ### Release Summary This is release 8\.0\.0 of community\.general\, released on 2023\-11\-01\. @@ -649,7 +674,7 @@ This is release 8\.0\.0 of community\.general\, released on 2023\-1 * proxmox module utils \- removed unused imports \([https\://github\.com/ansible\-collections/community\.general/pull/6873](https\://github\.com/ansible\-collections/community\.general/pull/6873)\)\. * xfconf \- the deprecated disable\_facts option was removed \([https\://github\.com/ansible\-collections/community\.general/pull/7358](https\://github\.com/ansible\-collections/community\.general/pull/7358)\)\. - + ### Bugfixes * CmdRunner module utils \- does not attempt to resolve path if executable is a relative or absolute path \([https\://github\.com/ansible\-collections/community\.general/pull/7200](https\://github\.com/ansible\-collections/community\.general/pull/7200)\)\. diff --git a/CHANGELOG.rst b/CHANGELOG.rst index ec5dade3d3..30491e8f5d 100644 --- a/CHANGELOG.rst +++ b/CHANGELOG.rst @@ -6,6 +6,27 @@ Community General Release Notes This changelog describes changes after version 7.0.0. +v8.6.1 +====== + +Release Summary +--------------- + +Regular bugfix release. + +Security Fixes +-------------- + +- keycloak_identity_provider - the client secret was not correctly sanitized by the module. The return values ``proposed``, ``existing``, and ``end_state``, as well as the diff, did contain the client secret unmasked (https://github.com/ansible-collections/community.general/pull/8355). + +Bugfixes +-------- + +- keycloak_user_federation - fix diff of empty ``krbPrincipalAttribute`` (https://github.com/ansible-collections/community.general/pull/8320). +- merge_variables lookup plugin - fixing cross host merge: providing access to foreign hosts variables to the perspective of the host that is performing the merge (https://github.com/ansible-collections/community.general/pull/8303). +- opentelemetry callback plugin - close spans always (https://github.com/ansible-collections/community.general/pull/8367). +- opentelemetry callback plugin - honour the ``disable_logs`` option to avoid storing task results since they are not used regardless (https://github.com/ansible-collections/community.general/pull/8373). + v8.6.0 ====== diff --git a/changelogs/changelog.yaml b/changelogs/changelog.yaml index b45d412768..de131d3f17 100644 --- a/changelogs/changelog.yaml +++ b/changelogs/changelog.yaml @@ -1432,3 +1432,26 @@ releases: name: keycloak_client_rolescope namespace: '' release_date: '2024-04-22' + 8.6.1: + changes: + bugfixes: + - keycloak_user_federation - fix diff of empty ``krbPrincipalAttribute`` (https://github.com/ansible-collections/community.general/pull/8320). + - 'merge_variables lookup plugin - fixing cross host merge: providing access + to foreign hosts variables to the perspective of the host that is performing + the merge (https://github.com/ansible-collections/community.general/pull/8303).' + - opentelemetry callback plugin - close spans always (https://github.com/ansible-collections/community.general/pull/8367). + - opentelemetry callback plugin - honour the ``disable_logs`` option to avoid + storing task results since they are not used regardless (https://github.com/ansible-collections/community.general/pull/8373). + release_summary: Regular bugfix release. + security_fixes: + - keycloak_identity_provider - the client secret was not correctly sanitized + by the module. The return values ``proposed``, ``existing``, and ``end_state``, + as well as the diff, did contain the client secret unmasked (https://github.com/ansible-collections/community.general/pull/8355). + fragments: + - 8.6.1.yml + - 8303-fix-rendering-foreign-variables.yaml + - 8320-keycloak_user_federation-fix-diff-krbPrincipalAttribute.yaml + - 8355-keycloak-idp-sanitize.yaml + - 8367-fix-close-span-if-no-logs.yaml + - 8373-honour-disable-logs.yaml + release_date: '2024-05-20' diff --git a/changelogs/fragments/8.6.1.yml b/changelogs/fragments/8.6.1.yml deleted file mode 100644 index 1b14bd80d1..0000000000 --- a/changelogs/fragments/8.6.1.yml +++ /dev/null @@ -1 +0,0 @@ -release_summary: Regular bugfix release. diff --git a/changelogs/fragments/8303-fix-rendering-foreign-variables.yaml b/changelogs/fragments/8303-fix-rendering-foreign-variables.yaml deleted file mode 100644 index c2162771f2..0000000000 --- a/changelogs/fragments/8303-fix-rendering-foreign-variables.yaml +++ /dev/null @@ -1,2 +0,0 @@ -bugfixes: - - "merge_variables lookup plugin - fixing cross host merge: providing access to foreign hosts variables to the perspective of the host that is performing the merge (https://github.com/ansible-collections/community.general/pull/8303)." diff --git a/changelogs/fragments/8320-keycloak_user_federation-fix-diff-krbPrincipalAttribute.yaml b/changelogs/fragments/8320-keycloak_user_federation-fix-diff-krbPrincipalAttribute.yaml deleted file mode 100644 index df4a892733..0000000000 --- a/changelogs/fragments/8320-keycloak_user_federation-fix-diff-krbPrincipalAttribute.yaml +++ /dev/null @@ -1,2 +0,0 @@ -bugfixes: - - keycloak_user_federation - fix diff of empty ``krbPrincipalAttribute`` (https://github.com/ansible-collections/community.general/pull/8320). diff --git a/changelogs/fragments/8355-keycloak-idp-sanitize.yaml b/changelogs/fragments/8355-keycloak-idp-sanitize.yaml deleted file mode 100644 index 3a7942bb88..0000000000 --- a/changelogs/fragments/8355-keycloak-idp-sanitize.yaml +++ /dev/null @@ -1,2 +0,0 @@ -security_fixes: - - keycloak_identity_provider - the client secret was not correctly sanitized by the module. The return values ``proposed``, ``existing``, and ``end_state``, as well as the diff, did contain the client secret unmasked (https://github.com/ansible-collections/community.general/pull/8355). \ No newline at end of file diff --git a/changelogs/fragments/8367-fix-close-span-if-no-logs.yaml b/changelogs/fragments/8367-fix-close-span-if-no-logs.yaml deleted file mode 100644 index e0a90be311..0000000000 --- a/changelogs/fragments/8367-fix-close-span-if-no-logs.yaml +++ /dev/null @@ -1,2 +0,0 @@ -bugfixes: - - "opentelemetry callback plugin - close spans always (https://github.com/ansible-collections/community.general/pull/8367)." diff --git a/changelogs/fragments/8373-honour-disable-logs.yaml b/changelogs/fragments/8373-honour-disable-logs.yaml deleted file mode 100644 index 112b10a9f4..0000000000 --- a/changelogs/fragments/8373-honour-disable-logs.yaml +++ /dev/null @@ -1,3 +0,0 @@ -bugfixes: - - opentelemetry callback plugin - honour the ``disable_logs`` option to avoid storing task results since they are not used regardless (https://github.com/ansible-collections/community.general/pull/8373). -