ansible-core (2.19.11-0+deb13u1) trixie; urgency=medium

  * d/salsa-ci.yml: Run lintian CI against trixie for this branch New upstream
  * New upstream version 2.19.5
    - Fix ``AnsibleModule.human_to_bytes()``, which was never adjusted after the
      standalone ``human_to_bytes()`` got a new parameter ``default_unit``
      (https://github.com/ansible/ansible/pull/85259).
    - Variable loading now uses file source instead of variables when invalidly
      formmated vars file is loaded.
    - ansible-test - The runtime-metadata sanity test now ignores pre-release
      and build identifiers in collection versions. This prevents errors if a
      tombstone version is ``X.0.0``, while the collection's version is
      ``X.0.0-prerelease`` (https://github.com/ansible/ansible/issues/85193)."
    - first_found - Correct the "Include tasks only if one of the files exists,
      otherwise skip" example.
    - get_url - fix regex for GNU Digest line which is used in comparing
      checksums (https://github.com/ansible/ansible/issues/86132).
  * New upstream version 2.19.6
    - ansible-test - Replace RHEL 10.0 remote with 10.1.
    - ansible-test - Replace RHEL 9.5 remote with 9.7.
    - Fix Windows LIB env var corruption.
    - ansible_local will no longer trigger variable injection default value
      deprecation.
    - package, service, gather_facts - fix templating module_defaults for
      modules executed by these action plugins.
    - winrm - Provide a better error message if a domain user is specified using
      a User Principal Name (UPN) but the pykerberos library is not installed so
      Kerberos is unavailable.
  * New upstream version 2.19.7
    - ansible-test - Update URL used to download FreeBSD wheels for managed
      remotes.
    - ansible-test - Use the new API endpoint for the Ansible Core CI service.
    - Fix up the Action plugin _make_tmp_path error to only include the command
      run rather than the shell's dataclass repr from mkdtemp.
    - local connection - Pass correct type to become plugins when checking
      password
  * New upstream version 2.19.8
    - ansible-test - Add container/remote aliases for more loosely specifying
      managed test environments.
    - ansible-test - Add support for using the Ansible Core CI service from
      GitHub Actions.
  * New upstream version 2.19.9
    - ansible-test - Generate dist_info when running tests.
    - ansible-test - Replace the parallels managed macOS provider with a new mac
      provider.
    - ansible-test - Switch managed macOS remotes from x86_64 to aarch64.
    - ansible-galaxy collection - Fix using the server configuration for
      validate_certs when downloading collections.
  * New upstream version 2.19.10
    - psrp - Do not log raw stdout/stderr on verbosity 5 when task has
      "no_log: true" set
    - winrm - Do not log raw stdout/stderr on verbosity 5 when task has
      "no_log: true" set
    - ansible-test remote alias - Alias values for `--controller` and
      `--target` are properly resolved for `remote`. Previously, remote
      alias values (e.g. `fedora/latest`) resolved correctly only for the
      legacy `--remote` arg, failing with unknown image error for newer args.
    - module_utils/basic.py - Fix `AnsibleModule.run_command()` to handle
      `None` return from non-blocking pipe reads
      (https://github.com/ansible/ansible/issues/86920).
  * New upstream version 2.19.11
    - ansible-test - Replace FreeBSD 14.2 with 14.3.
    - ansible-galaxy install - Ensure role requirements are passed as positional
      arguments to `git clone`. Previously, a malicious role author could
      inject arbitrary git configuration in role dependencies. (CVE-2026-11332)
      (Closes: #1139175)
    - module_utils sanitize_keys and remove_value functions now sort their input
      to ensure matching subsets are always obscured.

 -- Lee Garrett <debian@rocketjump.eu>  Fri, 19 Jun 2026 18:56:20 +0200

ansible-core (2.19.4-0+deb13u1) trixie; urgency=medium

  [ Lee Garrett ]
  * New upstream bugfix release 2.19.4
    - Fix regression from 2.18 regarding handlers and play tags (Closes:
      #1114932)
  * d/t/ansible-test-integration.py: Match conditional with log verbosity
  * autopkgtest: Always emit output when testbed-setup.sh is run

  [ Colin Watson ]
  * Move apt sources lists aside more comprehensively in tests
  * testbed-setup: Only remove autopkgtest's global pinning

 -- Lee Garrett <debian@rocketjump.eu>  Fri, 07 Nov 2025 23:26:04 +0100

ansible-core (2.19.1-0+deb13u1) trixie; urgency=medium

  * New upstream bugfix release 2.19.1
  * Update debian/gbp.conf to track trixie branches
  * Update watch file to follow ansible-core 2.19.x in trixie
  * Change gbp upstream tag as long as upstream version in trixie and sid match
  * Skip ansible-test-debugging integration test (requires running from source)

 -- Lee Garrett <debian@rocketjump.eu>  Tue, 26 Aug 2025 22:44:31 +0200

ansible-core (2.19.0~beta6-1) unstable; urgency=medium

  * New upstream version 2.19.0~beta6
  * Add NEWS entry documenting the disruptive changes by the new Data Tagging
    feature in 2.19.
  * d/control: Remove Breaks/Replaces from pre-bookworm packages.
  * d/control: Update version recommendation for ansible package.
  * Don't run deb822_repository integration test in autopkgtest (flaky).

 -- Lee Garrett <debian@rocketjump.eu>  Thu, 12 Jun 2025 23:55:52 +0200

ansible-core (2.19.0~beta5-1) unstable; urgency=medium

  * The "Can't believe it's been a year" release
  * New upstream version 2.19.0~beta5
    - Allow template calls to collection mutation methods (Closes: #1106362)
  * d/watch: Update uversionmangle to normalize beta/RC releases
  * Drop upstream_PR84487.patch (applied upstream)
  * Run deb822_repository integration test in autopkgtest again

 -- Lee Garrett <debian@rocketjump.eu>  Wed, 04 Jun 2025 23:28:05 +0200

ansible-core (2.19.0~beta4-1) unstable; urgency=medium

  * New upstream version 2.19.0~beta4
  * Bump jinja2 requirements
  * d/tests/control: Add "mount" as unit test dependency.
  * Update test meta-data patch and forward upstream again
  * d/t/ansible-test-integration.py: replace "print" with log functions
  * d/t/ansible-test-integration.py: Add helpful debugging comment
  * d/t/ansible-test-integration.py: Add info when tests that should fail
    succeed
  * Run tests that require pip in the default test suite
  * Update test dependencies
  * Add 12 previously failing integration tests to the default set
  * fix apt integration patch
  * Add DEP3 header to patch
  * Add forwarded field to patch

 -- Lee Garrett <debian@rocketjump.eu>  Tue, 13 May 2025 14:54:15 +0200

ansible-core (2.19.0~beta2-1) unstable; urgency=medium

  * New upstream version 2.19.0~beta2
  * Update watch file to track beta and rc releases
  * Drop patch fixing tests (PR85007, applied upstream)

 -- Lee Garrett <debian@rocketjump.eu>  Thu, 24 Apr 2025 12:55:06 +0200

ansible-core (2.19.0~beta1-2) unstable; urgency=medium

  * Update d/copyright
  * Fix test_range_templating on 32-bit architectures

 -- Lee Garrett <debian@rocketjump.eu>  Thu, 17 Apr 2025 13:40:39 +0200

ansible-core (2.19.0~beta1-1) unstable; urgency=high

  * New upstream version 2.19.0~beta1
  * Update quilt patch meta-data
  * Update use-py3 quilt patch
  * Update lintian overrides
  * Mark ssh_agent integration test as requiring ssh
  * Add missing depends on paramiko unit test

 -- Lee Garrett <debian@rocketjump.eu>  Tue, 15 Apr 2025 19:01:32 +0200

ansible-core (2.19~pre20250510~5347d4d4fc-1) unstable; urgency=high

  * New upstream version 2.19~pre20250510~5347d4d4fc

 -- Lee Garrett <debian@rocketjump.eu>  Thu, 10 Apr 2025 16:37:56 +0200

ansible-core (2.19~pre20250506~462affa7c4-1) unstable; urgency=medium

  * New upstream version 2.19~pre20250506~462affa7c4
  * Package pre-release version of ansible 2.19, which should have the first
    beta release in a few days. This is because 2.19 will have longer upstream
    security support than 2.18, and 2.19 should release before trixie.
  * Drop patches (applied upstream)
    - Bump-ansible-galaxy-s-resolvelib-requirement-upperbo.patch
    - test-git-archive-prefix-32-bit.patch
    - upstream_PR84377.patch
    - upstream_PR84378.patch
    - upstream_PR84379.patch
    - upstream_PR84409.patch
    - upstream_PR84482.patch
    - upstream_PR84486.patch
  * Bump Standards-Version (no changes needed)
  * Update integration test exceptions
  * Update d/copyright to make lintian happy

 -- Lee Garrett <debian@rocketjump.eu>  Wed, 09 Apr 2025 17:15:41 +0200

ansible-core (2.18.3-1) unstable; urgency=medium

  * New upstream release
  * d/t/control: Add dep to ssh

 -- Lee Garrett <debian@rocketjump.eu>  Tue, 25 Feb 2025 18:23:04 +0100

ansible-core (2.18.1-4) unstable; urgency=medium

  * Fix autopkgtest failure on i386. Thanks, Stefano!

 -- Lee Garrett <debian@rocketjump.eu>  Sat, 28 Dec 2024 17:29:53 +0100

ansible-core (2.18.1-3) unstable; urgency=medium

  * Skip testbed setup when in dry run mode
  * integration tests: read root requirements from test
  * Fix several integration tests
  * Run autopkgtests on VMs instead of containers

 -- Lee Garrett <debian@rocketjump.eu>  Wed, 25 Dec 2024 10:33:42 +0100

ansible-core (2.18.1-2) unstable; urgency=medium

  * Minor fix for ci.debian.net

 -- Lee Garrett <debian@rocketjump.eu>  Sat, 21 Dec 2024 14:30:19 +0100

ansible-core (2.18.1-1) unstable; urgency=medium

  * New upstream version 2.18.1
  * Drop CVE-2024-11079 patch (applied upstream)
  * Make less autopkgtests fail that use git in some form
  * Update autopkgtest dependencies
  * Remove py3 shebang which caused ansible-test-sanity-shebang to fail
  * Update list of integration tests requiring root
  * Skip certain failing integration tests
  * autopkgtest: Preserve PYTHONPATH env when using sudo
  * Fix many CI tests to run on Debian sid as unprivileged user
  * Update testbed-setup.sh to make tests pass
  * Add workaround for copy integration test
  * unbreak pip for integration tests
  * Add debug/fix code for common permission errors
  * autopkgtests: Add workaround for missing VERSION_ID in /etc/os-release
  * d/t/ansible-test-integration.py: Show which tests would be run
  * Replace PR83844 patch with three smaller ones
  * Fix integration tests mount_facts, unarchive, user
  * Fix homedir permission in user module (and test)
  * Mark several integration tests as broken
  * Update lintian overrides

 -- Lee Garrett <debian@rocketjump.eu>  Fri, 20 Dec 2024 19:33:03 +0100

ansible-core (2.18.0-2) unstable; urgency=medium

  * Team upload
  * Fix CVE-2024-11079: This vulnerability allows attackers
    to bypass unsafe content protections using the
    hostvars object to reference and execute templated content.
    This issue can lead to arbitrary code execution if remote
    data or module outputs are improperly templated within playbooks
    (Closes: #1088106).

 -- Bastien Roucariès <rouca@debian.org>  Sat, 30 Nov 2024 17:21:42 +0000

ansible-core (2.18.0-1) unstable; urgency=medium

  * Team upload

  [ Bastien Roucariès ]
  * Fix CVE-2024-9902: A flaw was found in Ansible.
    The ansible-core `user` module can allow an
    unprivileged user to silently create or replace
    the contents of any file on any system path
    and take ownership of it when a privileged user
    executes the `user` module against the unprivileged
    user's home directory. If the unprivileged user
    has traversal permissions on the directory containing
    the exploited target file, they retain full control
    over the contents of the file as its owner.

  [ Colin Watson ]
  * New upstream release.
  * Remove misleading sequence numbers from files in debian/patches.

 -- Colin Watson <cjwatson@debian.org>  Mon, 11 Nov 2024 15:02:45 +0000

ansible-core (2.17.5-5) unstable; urgency=medium

  * Team upload.

  [ Bastien Roucariès ]
  * Fix CVE-2024-8775: A flaw was found in Ansible,
    where sensitive information stored in Ansible Vault
    files can be exposed in plaintext during the execution
    of a playbook. This occurs when using tasks such as
    include_vars to load vaulted variables without
    setting the no_log: true parameter, resulting in
    sensitive data being printed in the playbook output
    or logs. This can lead to the unintentional disclosure
    of secrets like passwords or API keys, compromising
    security and potentially allowing unauthorized
    access or actions.
    (Closes: #1082851)
  * Bump resolvelib dependency to << 1.2 (Closes: #1086551)

  [ Colin Watson ]
  * Disable a few tests until https://pypi.org/project/ansible-core/ is
    updated with upstream's resolvelib dependency change.

 -- Colin Watson <cjwatson@debian.org>  Thu, 07 Nov 2024 16:36:31 +0000

ansible-core (2.17.5-4) unstable; urgency=medium

  * Team upload.
  * Make autopkgtests depend on libffi-dev, needed to install cffi from PyPI
    on some architectures.

 -- Colin Watson <cjwatson@debian.org>  Mon, 28 Oct 2024 15:58:59 +0000

ansible-core (2.17.5-3) unstable; urgency=medium

  * Team upload.
  * Make autopkgtests depend on libssl-dev and pkg-config, needed to install
    cryptography from PyPI on some architectures.
  * Make autopkgtests depend on libyaml-dev, needed to install PyYAML from
    PyPI on some architectures.
  * Make autopkgtests depend on python3-dev, needed to install cffi from
    PyPI on some architectures.

 -- Colin Watson <cjwatson@debian.org>  Sun, 27 Oct 2024 23:40:22 +0000

ansible-core (2.17.5-2) unstable; urgency=medium

  * Team upload.
  * test: Make git archive prefix fit in 32-bit ssize_t.
  * Make autopkgtests depend on cargo and gcc, needed to install
    cryptography and cffi from PyPI on some architectures.
  * Skip binary_modules_linux integration test except on amd64/ppc64el.

 -- Colin Watson <cjwatson@debian.org>  Wed, 16 Oct 2024 18:29:18 +0100

ansible-core (2.17.5-1) unstable; urgency=medium

  * Team upload.
  * New upstream release:
    - copy module now updates mtime/atime (closes: #1078779).
  * Skip "raw" integration test, since it requires su (closes: #1079672).

 -- Colin Watson <cjwatson@debian.org>  Wed, 16 Oct 2024 01:57:21 +0100

ansible-core (2.17.3-1) unstable; urgency=medium

  * New upstream version 2.17.3
  * Disable some tests on CI that time out
  * Updates to autopkgtests

 -- Lee Garrett <debian@rocketjump.eu>  Tue, 13 Aug 2024 14:14:20 +0200

ansible-core (2.17.2-1) unstable; urgency=medium

  * New upstream version 2.17.2
  * Add integration tests to autopkgtest

 -- Lee Garrett <debian@rocketjump.eu>  Fri, 26 Jul 2024 02:07:36 +0200

ansible-core (2.17.1-1) unstable; urgency=medium

  * New upstream version 2.17.1

 -- Lee Garrett <debian@rocketjump.eu>  Tue, 25 Jun 2024 12:48:41 +0200

ansible-core (2.17.0-1) unstable; urgency=medium

  * New upstream version 2.17.0
  * d/control: Update VCS links after moving package to python-team
  * Remove trailing whitespace
  * Refresh patches

 -- Lee Garrett <debian@rocketjump.eu>  Wed, 05 Jun 2024 14:59:38 +0200

ansible-core (2.16.6-1) unstable; urgency=medium

  [ Alexandre Detiste ]
  * remove stale dependency on python3-mock

  [ Lee Garrett ]
  * d/gbp.conf: Sign tags by default
  * Update watch file to accomodate a common upstream typo
  * New upstream version 2.16.6
  * Bump recommended ansible version to 9.5.1
  * Bump Standards-Version (no changes needed)
  * autopkgtests: Add dep to python3-systemd

 -- Lee Garrett <debian@rocketjump.eu>  Thu, 25 Apr 2024 00:36:22 +0200

ansible-core (2.16.5-1) unstable; urgency=medium

  * New upstream release (Closes: #1057640)
    - ansible-test supports python 3.12 now (Closes: #1061782, #1061781)
    - fixes CVE-2024-0690 (Closes: #1061156)
  * Drop dependency on python3-distutils (Closes: #1065826)
  * Drop patches applied upstream
  * Refreshen patches

 -- Lee Garrett <debian@rocketjump.eu>  Wed, 17 Apr 2024 23:47:08 +0200

ansible-core (2.14.13-1) unstable; urgency=medium

  * New upstream version 2.14.13
  * Update package to conform to DEP-14 packaging layout
  * Update dep3 patch headers

 -- Lee Garrett <debian@rocketjump.eu>  Tue, 12 Dec 2023 11:20:17 +0100

ansible-core (2.14.11-2) unstable; urgency=medium

  * Enforce locale to ensure it builds reproducibly
  * Fix facter when puppet not present (Closes: #1055616)

 -- Lee Garrett <debian@rocketjump.eu>  Fri, 10 Nov 2023 13:50:13 +0100

ansible-core (2.14.11-1) unstable; urgency=medium

  * New upstream version 2.14.11
  * Fix galaxy tests
  * Fix lintian override
  * Update changelog and release to unstable

 -- Lee Garrett <debian@rocketjump.eu>  Fri, 20 Oct 2023 19:41:09 +0200

ansible-core (2.14.10-1) unstable; urgency=medium

  * New upstream release

 -- Lee Garrett <debian@rocketjump.eu>  Tue, 12 Sep 2023 12:27:50 +0200

ansible-core (2.14.9-2) unstable; urgency=medium

  * Fix unit tests

 -- Lee Garrett <debian@rocketjump.eu>  Sat, 19 Aug 2023 02:16:32 +0200

ansible-core (2.14.9-1) unstable; urgency=medium

  * New upstream version 2.14.9
  * Refresh patches
  * Adapt to upstream change of man page building
  * Fix double-build failure (Closes: #1043680)

 -- Lee Garrett <debian@rocketjump.eu>  Fri, 18 Aug 2023 23:56:27 +0200

ansible-core (2.14.8-1) unstable; urgency=medium

  * New upstream release

 -- Lee Garrett <debian@rocketjump.eu>  Tue, 18 Jul 2023 13:24:30 +0200

ansible-core (2.14.7-1) unstable; urgency=medium

  * New upstream release
  * Refresh 0005-use-py3.patch
  * Drop 0010-fix-json-uri-subtype.patch (applied upstream)

 -- Lee Garrett <debian@rocketjump.eu>  Mon, 17 Jul 2023 15:26:13 +0200

ansible-core (2.14.6-1) unstable; urgency=medium

  * New upstream release
  * d/watch: Remove signature check
  * d/control: Recommend python3-passlib (Closes: #1034251)
  * d/control: Update python3-resolvelib version dependency (Closes: #1037932, #1037443)
  * uri: fix search for json types to include strings in the format xxx/yyy+json
    (Closes: #1037126)

 -- Lee Garrett <debian@rocketjump.eu>  Fri, 16 Jun 2023 16:13:27 +0200

ansible-core (2.14.3-1) unstable; urgency=medium

  * New upstream release

 -- Lee Garrett <debian@rocketjump.eu>  Wed, 01 Mar 2023 21:06:21 +0100

ansible-core (2.14.2-1) unstable; urgency=medium

  * Bump Standards-Version (no changes needed)
  * New upstream version 2.14.2
  * Acknowledge previous NMU.

 -- Lee Garrett <debian@rocketjump.eu>  Tue, 31 Jan 2023 13:11:22 +0100

ansible-core (2.14.1-2) unstable; urgency=medium

  * Team upload.

  [ Steve Langasek ]
  * Drop superfluous --python 3.10 in autopkgtest (Closes: #1028405)

 -- Jochen Sprickerhof <jspricke@debian.org>  Mon, 16 Jan 2023 10:14:20 +0100

ansible-core (2.14.1-1) unstable; urgency=medium

  * New upstream release
  * autopkgtest: Depend on python3-pytest-forked (Closes: #1025335)

 -- Lee Garrett <debian@rocketjump.eu>  Tue, 13 Dec 2022 16:17:44 +0100

ansible-core (2.14.0-1) unstable; urgency=medium

  * New upstream release
  * Use PEP517 build process (Closes: #1024705)
  * Tighten resolvelib dependency (Closes: #1010345)
  * Tighten python3 and pyyaml dependencies
  * Fix autopkgtests (Closes: #1024713)
  * Remove 0007-use-C.UTF-8.patch (fixed upstream)

 -- Lee Garrett <debian@rocketjump.eu>  Tue, 29 Nov 2022 01:55:18 +0100

ansible-core (2.13.4-1) unstable; urgency=medium

  * New upstream release

 -- Lee Garrett <debian@rocketjump.eu>  Tue, 13 Sep 2022 16:41:09 +0200

ansible-core (2.13.3-1) unstable; urgency=medium

  * New upstream release 2.13.3
  * Remove patch to preserve debian dir
  * Refresh Debian patches
  * Correctly build man pages
  * Update Build-Depends
  * Bump jinja2 requirements
  * Run autopkgtests against python 3.10
  * support for newer resolvelib (Closes: #1007907)

 -- Lee Garrett <debian@rocketjump.eu>  Wed, 07 Sep 2022 18:05:59 +0200

ansible-core (2.12.4-1) unstable; urgency=medium

  * New upstream release

 -- Lee Garrett <debian@rocketjump.eu>  Tue, 29 Mar 2022 17:10:19 +0200

ansible-core (2.12.3-1) unstable; urgency=medium

  * New upstream release
  * Switch build-dep from python3-all to python3 (Closes: #1001040)

 -- Lee Garrett <debian@rocketjump.eu>  Sun, 06 Mar 2022 18:39:56 +0100

ansible-core (2.12.0-1) unstable; urgency=medium

  * New upstream release.
  * Upload to unstable.
  * Drop 0006-use-Cryptodome.patch (fixed upstream)

 -- Lee Garrett <debian@rocketjump.eu>  Thu, 18 Nov 2021 13:42:31 +0100

ansible-core (2.11.6-1) experimental; urgency=medium

  * New upstream release (Closes: #977327)
  * Rename source/binary package to ansible-core
  * Upload to experimental (Closes: #995879)
  * Fix issues with 0005_use_py3.patch (Closes: #992107)
  * Fix usage of Cryptodome
  * Fix all unit tests
  * Bump Standards-Version to 4.6.0.1 (no changes needed)
  * Fix several lintian warnings

 -- Lee Garrett <debian@rocketjump.eu>  Sun, 07 Nov 2021 00:40:26 +0100

ansible-base (2.10.5+dfsg-2) experimental; urgency=medium

  * Enable autopkgtests.
  * Fix python interpreter detection (Closes: #983140)

 -- Lee Garrett <debian@rocketjump.eu>  Mon, 22 Mar 2021 22:41:46 +0100

ansible-base (2.10.5+dfsg-1) unstable; urgency=medium

  * New upstream release.
  * Upload to unstable.

 -- Lee Garrett <debian@rocketjump.eu>  Wed, 10 Feb 2021 01:09:15 +0100

ansible-base (2.10.4-1) experimental; urgency=medium

  * Initial packaging of ansible-base (split out at upstream from ansible)
  * Switch from python3-crypto to python3-pycryptodome (Closes: #971309)
  * Bump Standards-Version to 4.5.1 (no changes needed)

 -- Lee Garrett <debian@rocketjump.eu>  Sat, 09 Jan 2021 23:14:43 +0100
