CheckMK-Role merge requestshttps://codebase.helmholtz.cloud/hifis-software-deployment/checkmk-role/-/merge_requests2024-03-28T06:40:42+01:00https://codebase.helmholtz.cloud/hifis-software-deployment/checkmk-role/-/merge_requests/144chore(deps): bump ansible from 9.1.0 to 9.3.02024-03-28T06:40:42+01:00HIFIS Botchore(deps): bump ansible from 9.1.0 to 9.3.0Bumps [ansible](https://github.com/ansible-community/ansible-build-data) from 9.1.0 to 9.3.0.
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/ansible-community/ansible-build-data/commit/4ab3017218c366b12a7ff9b9d...Bumps [ansible](https://github.com/ansible-community/ansible-build-data) from 9.1.0 to 9.3.0.
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/ansible-community/ansible-build-data/commit/4ab3017218c366b12a7ff9b9d5cc2bbd33b50d74"><code>4ab3017</code></a> Ansible 9.3.0: Dependencies, changelog and porting guide (<a href="https://github.com/ansible-community/ansible-build-data/issues/375">#375</a>)</li>
<li><a href="https://github.com/ansible-community/ansible-build-data/commit/8e6516288aa29f2568809aa933a6bae26273ced4"><code>8e65162</code></a> Remove purestorage.fusion from Ansible 10 (<a href="https://github.com/ansible-community/ansible-build-data/issues/374">#374</a>)</li>
<li><a href="https://github.com/ansible-community/ansible-build-data/commit/4952ad87b16711141cdf079f3d833f0b1cd66e19"><code>4952ad8</code></a> Deprecate netapp.storagegrid (<a href="https://github.com/ansible-community/ansible-build-data/issues/372">#372</a>)</li>
<li><a href="https://github.com/ansible-community/ansible-build-data/commit/15d59523ce2da44201f6d6708c8cdc4d9de0d539"><code>15d5952</code></a> Generate changelog both as RST and MarkDown (<a href="https://github.com/ansible-community/ansible-build-data/issues/364">#364</a>)</li>
<li><a href="https://github.com/ansible-community/ansible-build-data/commit/68bb47a5ce9924dab00bf1809b34126ef4bd0856"><code>68bb47a</code></a> Bump actions/checkout from 3 to 4 (<a href="https://github.com/ansible-community/ansible-build-data/issues/368">#368</a>)</li>
<li><a href="https://github.com/ansible-community/ansible-build-data/commit/5319f6a2906d08ffa098a2febfc88bbedd39affd"><code>5319f6a</code></a> Bump actions/setup-python from 4 to 5 (<a href="https://github.com/ansible-community/ansible-build-data/issues/371">#371</a>)</li>
<li><a href="https://github.com/ansible-community/ansible-build-data/commit/05eb58bb8dc7a08eca7b1d8306e64d8dabd99be2"><code>05eb58b</code></a> docs release-process: use GH_USERNAME as a placeholder (<a href="https://github.com/ansible-community/ansible-build-data/issues/367">#367</a>)</li>
<li><a href="https://github.com/ansible-community/ansible-build-data/commit/c87ec3a948ba9f6b33d34f0e607808c7752bee18"><code>c87ec3a</code></a> Revert "infinidat.infinibox 1.4.0 is not tagged. (<a href="https://github.com/ansible-community/ansible-build-data/issues/365">#365</a>)" (<a href="https://github.com/ansible-community/ansible-build-data/issues/366">#366</a>)</li>
<li><a href="https://github.com/ansible-community/ansible-build-data/commit/ecd20cb95f69a3e8dcb6be373d13433fd047a104"><code>ecd20cb</code></a> infinidat.infinibox 1.4.0 is not tagged. (<a href="https://github.com/ansible-community/ansible-build-data/issues/365">#365</a>)</li>
<li><a href="https://github.com/ansible-community/ansible-build-data/commit/51535ac00981248fcfd9f184bf46b7ad5723079b"><code>51535ac</code></a> Initial (Github Actions) Workflows for Ansible Community Package release (#...</li>
<li>Additional commits viewable in <a href="https://github.com/ansible-community/ansible-build-data/compare/9.1.0...9.3.0">compare view</a></li>
</ul>
</details>
<br />Huste, TobiasHuste, Tobiashttps://codebase.helmholtz.cloud/hifis-software-deployment/checkmk-role/-/merge_requests/137chore(deps-dev): bump ansible-lint from 6.22.1 to 24.2.02024-03-14T06:41:57+01:00HIFIS Botchore(deps-dev): bump ansible-lint from 6.22.1 to 24.2.0Bumps [ansible-lint](https://github.com/ansible/ansible-lint) from 6.22.1 to 24.2.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/ansible/ansible-lint/releases">ansible-lint's releases</a>.</...Bumps [ansible-lint](https://github.com/ansible/ansible-lint) from 6.22.1 to 24.2.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/ansible/ansible-lint/releases">ansible-lint's releases</a>.</em></p>
<blockquote>
<h2>v24.2.0</h2>
<h2>Minor Changes</h2>
<ul>
<li>Drop support for Python 3.9 (<a href="https://github.com/ansible/ansible-lint/issues/4009">#4009</a>) <a href="https://github.com/audgirka"><code>@audgirka</code></a></li>
</ul>
<h2>Bugfixes</h2>
<ul>
<li>Fix scenario when role has no <code>dependencies</code> section in <code>meta/main.yml</code> (<a href="https://github.com/ansible/ansible-lint/issues/3993">#3993</a>) <a href="https://github.com/audgirka"><code>@audgirka</code></a></li>
</ul>
<h2>v6.22.2</h2>
<h2>Bugfixes</h2>
<ul>
<li>Fix key error for name[casing] rule (<a href="https://github.com/ansible/ansible-lint/issues/3987">#3987</a>) <a href="https://github.com/ajinkyau"><code>@ajinkyau</code></a></li>
<li>Allow dashes in legacy role namespaces (<a href="https://github.com/ansible/ansible-lint/issues/3962">#3962</a>) <a href="https://github.com/sur5r"><code>@sur5r</code></a></li>
<li>Use new ansible-compat verbosity levels (<a href="https://github.com/ansible/ansible-lint/issues/3975">#3975</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
<li>Remove dependency on newer requests library (<a href="https://github.com/ansible/ansible-lint/issues/3959">#3959</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
<li>Ignore set-property for systemd command (<a href="https://github.com/ansible/ansible-lint/issues/3949">#3949</a>) <a href="https://github.com/alanbbr"><code>@alanbbr</code></a></li>
<li>Correct requires_ansible error message (<a href="https://github.com/ansible/ansible-lint/issues/3954">#3954</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
<li>Improve transformation for <code>no-free-form</code> rule (<a href="https://github.com/ansible/ansible-lint/issues/3945">#3945</a>) <a href="https://github.com/ajinkyau"><code>@ajinkyau</code></a></li>
<li>Documentation improvement (<a href="https://github.com/ansible/ansible-lint/issues/3946">#3946</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
<li>docs: fix grammatical issue in philosophy Q&A section (<a href="https://github.com/ansible/ansible-lint/issues/3934">#3934</a>) <a href="https://github.com/davidhulick"><code>@davidhulick</code></a></li>
<li>Update supported versions of ansible (<a href="https://github.com/ansible/ansible-lint/issues/3930">#3930</a>) <a href="https://github.com/ajinkyau"><code>@ajinkyau</code></a></li>
<li>Fix backward compatibility (<a href="https://github.com/ansible/ansible-lint/issues/3929">#3929</a>) <a href="https://github.com/McSim85"><code>@McSim85</code></a></li>
<li>Fix auto capitalization for name[prefix] rule (<a href="https://github.com/ansible/ansible-lint/issues/3922">#3922</a>) <a href="https://github.com/ajinkyau"><code>@ajinkyau</code></a></li>
<li>Fix role deps check for detecting path names (<a href="https://github.com/ansible/ansible-lint/issues/3923">#3923</a>) <a href="https://github.com/cavcrosby"><code>@cavcrosby</code></a></li>
<li>Avoid warnings about PATH with pipx installations (<a href="https://github.com/ansible/ansible-lint/issues/3920">#3920</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/ansible/ansible-lint/commit/a3fc7e4def4c3576a221fd1e0e58c0ee43f73af5"><code>a3fc7e4</code></a> chore: pre-commit autoupdate (<a href="https://github.com/ansible/ansible-lint/issues/4010">#4010</a>)</li>
<li><a href="https://github.com/ansible/ansible-lint/commit/4b36ffae7e4bf5624e5f59bc29deae515645c6f6"><code>4b36ffa</code></a> Apply Python 3.10 code changes (<a href="https://github.com/ansible/ansible-lint/issues/4012">#4012</a>)</li>
<li><a href="https://github.com/ansible/ansible-lint/commit/1543d4c8dfef023fc5f638c632bad16783eb8d55"><code>1543d4c</code></a> Drop support for Python 3.9 (<a href="https://github.com/ansible/ansible-lint/issues/4009">#4009</a>)</li>
<li><a href="https://github.com/ansible/ansible-lint/commit/26ecfa00b945bae5a7f4b3b437cbcb93775d8611"><code>26ecfa0</code></a> Configure codecov for ansible-lint (<a href="https://github.com/ansible/ansible-lint/issues/4011">#4011</a>)</li>
<li><a href="https://github.com/ansible/ansible-lint/commit/c98fa0e50703cc81bc8e89ce9d772c280de20523"><code>c98fa0e</code></a> Bump codecov/codecov-action from 3 to 4 (<a href="https://github.com/ansible/ansible-lint/issues/4003">#4003</a>)</li>
<li><a href="https://github.com/ansible/ansible-lint/commit/48a7c4f0ab0e15f197d6ca70ce9ed827447d0203"><code>48a7c4f</code></a> Make File Permissions Mode a String (<a href="https://github.com/ansible/ansible-lint/issues/4004">#4004</a>)</li>
<li><a href="https://github.com/ansible/ansible-lint/commit/2ce9450bfcc943f0a92188f65017145403fc6115"><code>2ce9450</code></a> Bump the dependencies group in /.config with 10 updates (<a href="https://github.com/ansible/ansible-lint/issues/4006">#4006</a>)</li>
<li><a href="https://github.com/ansible/ansible-lint/commit/6a8a4025834a1fb49f13d32ae8350fc2550883d0"><code>6a8a402</code></a> Bump the dependencies group in /.config with 16 updates (<a href="https://github.com/ansible/ansible-lint/issues/4002">#4002</a>)</li>
<li><a href="https://github.com/ansible/ansible-lint/commit/a93584a5392dc8496defec0366d54fe4ee9fd094"><code>a93584a</code></a> Rename lock file in GHA (<a href="https://github.com/ansible/ansible-lint/issues/4001">#4001</a>)</li>
<li><a href="https://github.com/ansible/ansible-lint/commit/eeac6813708c19e2646848762b56eccc9a3c08d8"><code>eeac681</code></a> Unify requirements files (<a href="https://github.com/ansible/ansible-lint/issues/3989">#3989</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/ansible/ansible-lint/compare/v6.22.1...v24.2.0">compare view</a></li>
</ul>
</details>
<br />Huste, TobiasHuste, Tobiashttps://codebase.helmholtz.cloud/hifis-software-deployment/checkmk-role/-/merge_requests/133chore(deps): bump ansible from 9.1.0 to 9.2.02024-02-28T06:41:15+01:00HIFIS Botchore(deps): bump ansible from 9.1.0 to 9.2.0Bumps [ansible](https://github.com/ansible-community/ansible-build-data) from 9.1.0 to 9.2.0.
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/ansible-community/ansible-build-data/commit/e95e18eb5992b912bfd9c2257...Bumps [ansible](https://github.com/ansible-community/ansible-build-data) from 9.1.0 to 9.2.0.
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/ansible-community/ansible-build-data/commit/e95e18eb5992b912bfd9c2257f1153c317664e7c"><code>e95e18e</code></a> Ansible 9.2.0: Dependencies, changelog and porting guide (<a href="https://github.com/ansible-community/ansible-build-data/issues/361">#361</a>)</li>
<li><a href="https://github.com/ansible-community/ansible-build-data/commit/1d660e7851c53685cace98c612d40e045bcc3610"><code>1d660e7</code></a> Remove community.sap from Ansible 10 (<a href="https://github.com/ansible-community/ansible-build-data/issues/360">#360</a>)</li>
<li><a href="https://github.com/ansible-community/ansible-build-data/commit/fbeaf1d9470f2304aae580bdba5a5c98c3554602"><code>fbeaf1d</code></a> Remove netapp.um_info from Ansible 10 (<a href="https://github.com/ansible-community/ansible-build-data/issues/359">#359</a>)</li>
<li><a href="https://github.com/ansible-community/ansible-build-data/commit/10563a72c4b124deca7952d2f4cbd34ef476a25f"><code>10563a7</code></a> Remove netapp.azure from Ansible 10 (<a href="https://github.com/ansible-community/ansible-build-data/issues/358">#358</a>)</li>
<li><a href="https://github.com/ansible-community/ansible-build-data/commit/87282a4535f8c5cc8e4a6a6bb491787e615607c3"><code>87282a4</code></a> Remove netapp.aws from Ansible 10 (<a href="https://github.com/ansible-community/ansible-build-data/issues/357">#357</a>)</li>
<li><a href="https://github.com/ansible-community/ansible-build-data/commit/6e0352cc06b2209bdbbb6db8bb240d8262897eb1"><code>6e0352c</code></a> Remove netapp.elementsw from Ansible 10 (<a href="https://github.com/ansible-community/ansible-build-data/issues/356">#356</a>)</li>
<li><a href="https://github.com/ansible-community/ansible-build-data/commit/58d2455fee0d0af906bdb113c9154e4f69752ea0"><code>58d2455</code></a> Remove gluster.gluster from Ansible 10 (<a href="https://github.com/ansible-community/ansible-build-data/issues/355">#355</a>)</li>
<li><a href="https://github.com/ansible-community/ansible-build-data/commit/c41449431cf974c4d85065c58cf43b39faa446ec"><code>c414494</code></a> Remove hpe.nimble from Ansible 10 (<a href="https://github.com/ansible-community/ansible-build-data/issues/354">#354</a>)</li>
<li><a href="https://github.com/ansible-community/ansible-build-data/commit/d309cad0adbd9351262082697fe00ba22e4b6c14"><code>d309cad</code></a> Ansible 7 and 8 are not compatible with community.docker 3.6.0 due to a new d...</li>
<li><a href="https://github.com/ansible-community/ansible-build-data/commit/db7ed847afc4ec588c163d2572729644b7177681"><code>db7ed84</code></a> Add community.library_inventory_filtering_v1 collection</li>
<li>Additional commits viewable in <a href="https://github.com/ansible-community/ansible-build-data/compare/9.1.0...9.2.0">compare view</a></li>
</ul>
</details>
<br />Huste, TobiasHuste, Tobiashttps://codebase.helmholtz.cloud/hifis-software-deployment/checkmk-role/-/merge_requests/142chore(deps): [security] bump cryptography from 41.0.7 to 42.0.22024-02-22T06:43:15+01:00HIFIS Botchore(deps): [security] bump cryptography from 41.0.7 to 42.0.2Bumps [cryptography](https://github.com/pyca/cryptography) from 41.0.7 to 42.0.2. **This update includes security fixes.**
<details>
<summary>Vulnerabilities fixed</summary>
<blockquote>
<p><strong>Python Cryptography package vulnerable ...Bumps [cryptography](https://github.com/pyca/cryptography) from 41.0.7 to 42.0.2. **This update includes security fixes.**
<details>
<summary>Vulnerabilities fixed</summary>
<blockquote>
<p><strong>Python Cryptography package vulnerable to Bleichenbacher timing oracle attack</strong>
A flaw was found in the python-cryptography package. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.</p>
<p>Patched versions: 42.0.0
Affected versions: < 42.0.0</p>
</blockquote>
<blockquote>
<p><strong>Null pointer dereference in PKCS12 parsing</strong>
Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL
to crash leading to a potential Denial of Service attack</p>
<p>Impact summary: Applications loading files in the PKCS12 format from untrusted
sources might terminate abruptly.</p>
<p>A file in PKCS12 format can contain certificates and keys and may come from an
untrusted source. The PKCS12 specification allows certain fields to be NULL, but
OpenSSL does not correctly check for this case. This can lead to a NULL pointer
dereference that results in OpenSSL crashing. If an application processes PKCS12
files from an untrusted source using the OpenSSL APIs then that application will
be vulnerable to this issue.</p>
<p>OpenSSL APIs that are vulnerable to this are: PKCS12_parse(),
PKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes()
and PKCS12_newpass().</p>
<p>We have also fixed a similar issue in SMIME_write_PKCS7(). However since this
function is related to writing data we do not consider it security significant.</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
<blockquote>
<p>Patched versions: 42.0.2
Affected versions: < 42.0.2</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst">cryptography's changelog</a>.</em></p>
<blockquote>
<p>42.0.2 - 2024-01-30</p>
<pre><code>
* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.2.1.
* Fixed an issue that prevented the use of Python buffer protocol objects in
``sign`` and ``verify`` methods on asymmetric keys.
* Fixed an issue with incorrect keyword-argument naming with ``EllipticCurvePrivateKey``
:meth:`~cryptography.hazmat.primitives.asymmetric.ec.EllipticCurvePrivateKey.exchange`,
``X25519PrivateKey``
:meth:`~cryptography.hazmat.primitives.asymmetric.x25519.X25519PrivateKey.exchange`,
``X448PrivateKey``
:meth:`~cryptography.hazmat.primitives.asymmetric.x448.X448PrivateKey.exchange`,
and ``DHPrivateKey``
:meth:`~cryptography.hazmat.primitives.asymmetric.dh.DHPrivateKey.exchange`.
<p>.. _v42-0-1:</p>
<p>42.0.1 - 2024-01-24
</code></pre></p>
<ul>
<li>Fixed an issue with incorrect keyword-argument naming with <code>EllipticCurvePrivateKey</code>
:meth:<code>~cryptography.hazmat.primitives.asymmetric.ec.EllipticCurvePrivateKey.sign</code>.</li>
<li>Resolved compatibility issue with loading certain RSA public keys in
:func:<code>~cryptography.hazmat.primitives.serialization.load_pem_public_key</code>.</li>
</ul>
<p>.. _v42-0-0:</p>
<p>42.0.0 - 2024-01-22</p>
<pre><code>
* **BACKWARDS INCOMPATIBLE:** Dropped support for LibreSSL < 3.7.
* **BACKWARDS INCOMPATIBLE:** Loading a PKCS7 with no content field using
:func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_pem_pkcs7_certificates`
or
:func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_der_pkcs7_certificates`
will now raise a ``ValueError`` rather than return an empty list.
* Parsing SSH certificates no longer permits malformed critical options with
values, as documented in the 41.0.2 release notes.
* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.2.0.
* Updated the minimum supported Rust version (MSRV) to 1.63.0, from 1.56.0.
* We now publish both ``py37`` and ``py39`` ``abi3`` wheels. This should
resolve some errors relating to initializing a module multiple times per
process.
* Support :class:`~cryptography.hazmat.primitives.asymmetric.padding.PSS` for
X.509 certificate signing requests and certificate revocation lists with the
keyword-only argument ``rsa_padding`` on the ``sign`` methods for
:class:`~cryptography.x509.CertificateSigningRequestBuilder` and
:class:`~cryptography.x509.CertificateRevocationListBuilder`.
* Added support for obtaining X.509 certificate signing request signature
algorithm parameters (including PSS) via
</tr></table>
</code></pre>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/pyca/cryptography/commit/2202123b50de1b8788f909a3e5afe350c56ad81e"><code>2202123</code></a> changelog and version bump 42.0.2 (<a href="https://github.com/pyca/cryptography/issues/10268">#10268</a>)</li>
<li><a href="https://github.com/pyca/cryptography/commit/f7032bdd409838f67fc2b93343f897fb5f397d80"><code>f7032bd</code></a> bump openssl in CI (<a href="https://github.com/pyca/cryptography/issues/10298">#10298</a>) (<a href="https://github.com/pyca/cryptography/issues/10299">#10299</a>)</li>
<li><a href="https://github.com/pyca/cryptography/commit/002e886f16d8857151c09b11dc86b35f2ac9aec3"><code>002e886</code></a> Fixes <a href="https://github.com/pyca/cryptography/issues/10294">#10294</a> -- correct accidental change to exchange kwarg (<a href="https://github.com/pyca/cryptography/issues/10295">#10295</a>) (<a href="https://github.com/pyca/cryptography/issues/10296">#10296</a>)</li>
<li><a href="https://github.com/pyca/cryptography/commit/92fa9f2f606caea5d499c825e832be5bac6f0c23"><code>92fa9f2</code></a> support bytes-like consistently across our asym sign/verify APIs (<a href="https://github.com/pyca/cryptography/issues/10260">#10260</a>) (<a href="https://github.com/pyca/cryptography/issues/1">#1</a>...</li>
<li><a href="https://github.com/pyca/cryptography/commit/6478f7e28be54b51931277235de01b249ceabd96"><code>6478f7e</code></a> explicitly support bytes-like for signature/data in RSA sign/verify (<a href="https://github.com/pyca/cryptography/issues/10259">#10259</a>) ...</li>
<li><a href="https://github.com/pyca/cryptography/commit/4bb8596ae02d95bb054dbcf55e8771379dbe0c19"><code>4bb8596</code></a> fix the release script (<a href="https://github.com/pyca/cryptography/issues/10233">#10233</a>) (<a href="https://github.com/pyca/cryptography/issues/10254">#10254</a>)</li>
<li><a href="https://github.com/pyca/cryptography/commit/337437dc2e62772bde4ad5544f4b1db9ee7572d9"><code>337437d</code></a> 42.0.1 bump (<a href="https://github.com/pyca/cryptography/issues/10252">#10252</a>)</li>
<li><a href="https://github.com/pyca/cryptography/commit/56255de6b2d1a2d2e502b0275231ca81907f33f1"><code>56255de</code></a> allow SPKI RSA keys to be parsed even if they have an incorrect delimiter (<a href="https://github.com/pyca/cryptography/issues/1">#1</a>...</li>
<li><a href="https://github.com/pyca/cryptography/commit/12f038b38af76e36efe8cef09597010c97647e8f"><code>12f038b</code></a> fixes <a href="https://github.com/pyca/cryptography/issues/10237">#10237</a> -- correct EC sign parameter name (<a href="https://github.com/pyca/cryptography/issues/10239">#10239</a>) (<a href="https://github.com/pyca/cryptography/issues/10240">#10240</a>)</li>
<li><a href="https://github.com/pyca/cryptography/commit/4e64baf360a3a89bd92582f59344c12b5c0bd3fd"><code>4e64baf</code></a> 42.0.0 version bump (<a href="https://github.com/pyca/cryptography/issues/10232">#10232</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/pyca/cryptography/compare/41.0.7...42.0.2">compare view</a></li>
</ul>
</details>
<br />Huste, TobiasHuste, Tobiashttps://codebase.helmholtz.cloud/hifis-software-deployment/checkmk-role/-/merge_requests/134chore(deps): [security] bump cryptography from 41.0.7 to 42.0.02024-02-17T06:43:02+01:00HIFIS Botchore(deps): [security] bump cryptography from 41.0.7 to 42.0.0Bumps [cryptography](https://github.com/pyca/cryptography) from 41.0.7 to 42.0.0. **This update includes a security fix.**
<details>
<summary>Vulnerabilities fixed</summary>
<blockquote>
<p><strong>Python Cryptography package vulnerable ...Bumps [cryptography](https://github.com/pyca/cryptography) from 41.0.7 to 42.0.0. **This update includes a security fix.**
<details>
<summary>Vulnerabilities fixed</summary>
<blockquote>
<p><strong>Python Cryptography package vulnerable to Bleichenbacher timing oracle attack</strong>
A flaw was found in the python-cryptography package. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.</p>
<p>Patched versions: 42.0.0
Affected versions: < 42.0.0</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst">cryptography's changelog</a>.</em></p>
<blockquote>
<p>42.0.0 - 2024-01-22</p>
<pre><code>
* **BACKWARDS INCOMPATIBLE:** Dropped support for LibreSSL < 3.7.
* **BACKWARDS INCOMPATIBLE:** Loading a PKCS7 with no content field using
:func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_pem_pkcs7_certificates`
or
:func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_der_pkcs7_certificates`
will now raise a ``ValueError`` rather than return an empty list.
* Parsing SSH certificates no longer permits malformed critical options with
values, as documented in the 41.0.2 release notes.
* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.2.0.
* Updated the minimum supported Rust version (MSRV) to 1.63.0, from 1.56.0.
* We now publish both ``py37`` and ``py39`` ``abi3`` wheels. This should
resolve some errors relating to initializing a module multiple times per
process.
* Support :class:`~cryptography.hazmat.primitives.asymmetric.padding.PSS` for
X.509 certificate signing requests and certificate revocation lists with the
keyword-only argument ``rsa_padding`` on the ``sign`` methods for
:class:`~cryptography.x509.CertificateSigningRequestBuilder` and
:class:`~cryptography.x509.CertificateRevocationListBuilder`.
* Added support for obtaining X.509 certificate signing request signature
algorithm parameters (including PSS) via
:meth:`~cryptography.x509.CertificateSigningRequest.signature_algorithm_parameters`.
* Added support for obtaining X.509 certificate revocation list signature
algorithm parameters (including PSS) via
:meth:`~cryptography.x509.CertificateRevocationList.signature_algorithm_parameters`.
* Added ``mgf`` property to
:class:`~cryptography.hazmat.primitives.asymmetric.padding.PSS`.
* Added ``algorithm`` and ``mgf`` properties to
:class:`~cryptography.hazmat.primitives.asymmetric.padding.OAEP`.
* Added the following properties that return timezone-aware ``datetime`` objects:
:meth:`~cryptography.x509.Certificate.not_valid_before_utc`,
:meth:`~cryptography.x509.Certificate.not_valid_after_utc`,
:meth:`~cryptography.x509.RevokedCertificate.revocation_date_utc`,
:meth:`~cryptography.x509.CertificateRevocationList.next_update_utc`,
:meth:`~cryptography.x509.CertificateRevocationList.last_update_utc`.
These are timezone-aware variants of existing properties that return naïve
``datetime`` objects.
* Deprecated the following properties that return naïve ``datetime`` objects:
:meth:`~cryptography.x509.Certificate.not_valid_before`,
:meth:`~cryptography.x509.Certificate.not_valid_after`,
:meth:`~cryptography.x509.RevokedCertificate.revocation_date`,
:meth:`~cryptography.x509.CertificateRevocationList.next_update`,
:meth:`~cryptography.x509.CertificateRevocationList.last_update`
in favor of the new timezone-aware variants mentioned above.
* Added support for
:class:`~cryptography.hazmat.primitives.ciphers.algorithms.ChaCha20`
on LibreSSL.
* Added support for RSA PSS signatures in PKCS7 with
</tr></table>
</code></pre>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/pyca/cryptography/commit/4e64baf360a3a89bd92582f59344c12b5c0bd3fd"><code>4e64baf</code></a> 42.0.0 version bump (<a href="https://github.com/pyca/cryptography/issues/10232">#10232</a>)</li>
<li><a href="https://github.com/pyca/cryptography/commit/7cb13a3bc91b7537c6231674fb5b0d2132a7edbe"><code>7cb13a3</code></a> we'll ship 3.2.0 for 42 (<a href="https://github.com/pyca/cryptography/issues/9951">#9951</a>)</li>
<li><a href="https://github.com/pyca/cryptography/commit/605c74e41c75edc717f21afaa5e6a0eee9863a10"><code>605c74e</code></a> Bump x509-limbo and/or wycheproof in CI (<a href="https://github.com/pyca/cryptography/issues/10231">#10231</a>)</li>
<li><a href="https://github.com/pyca/cryptography/commit/97578b98ffc417864e07d0ff9b76c02d2cb4e6da"><code>97578b9</code></a> Bump BoringSSL and/or OpenSSL in CI (<a href="https://github.com/pyca/cryptography/issues/10230">#10230</a>)</li>
<li><a href="https://github.com/pyca/cryptography/commit/972a7b5896a6047ea43a86db87820ab474d898ff"><code>972a7b5</code></a> verification: add test_verify_tz_aware (<a href="https://github.com/pyca/cryptography/issues/10229">#10229</a>)</li>
<li><a href="https://github.com/pyca/cryptography/commit/41daf2d86dd9bf18081802fa5d851a7953810786"><code>41daf2d</code></a> Migrate PKCS7 backend to Rust (<a href="https://github.com/pyca/cryptography/issues/10228">#10228</a>)</li>
<li><a href="https://github.com/pyca/cryptography/commit/d54093e62e7e68c02efbb4d6a09162ddb39bf72f"><code>d54093e</code></a> Remove some skips in tests that aren't needed anymore (<a href="https://github.com/pyca/cryptography/issues/10223">#10223</a>)</li>
<li><a href="https://github.com/pyca/cryptography/commit/71929bd91f34213b9f4a3a0a493c218c35fa25eb"><code>71929bd</code></a> Remove binding that's not used anymore (<a href="https://github.com/pyca/cryptography/issues/10224">#10224</a>)</li>
<li><a href="https://github.com/pyca/cryptography/commit/7ea4b89cea553ce0f641ed29e1ce2e3e34278f1d"><code>7ea4b89</code></a> fixed formatting in changelog (<a href="https://github.com/pyca/cryptography/issues/10225">#10225</a>)</li>
<li><a href="https://github.com/pyca/cryptography/commit/410f4a1ee4cbf46fe7e969bb48fccf261f74bbcd"><code>410f4a1</code></a> Allow brainpool on libressl (<a href="https://github.com/pyca/cryptography/issues/10222">#10222</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/pyca/cryptography/compare/41.0.7...42.0.0">compare view</a></li>
</ul>
</details>
<br />Huste, TobiasHuste, Tobiashttps://codebase.helmholtz.cloud/hifis-software-deployment/checkmk-role/-/merge_requests/140chore(deps-dev): bump yamllint from 1.33.0 to 1.35.02024-02-17T06:41:14+01:00HIFIS Botchore(deps-dev): bump yamllint from 1.33.0 to 1.35.0Bumps [yamllint](https://github.com/adrienverge/yamllint) from 1.33.0 to 1.35.0.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/adrienverge/yamllint/blob/master/CHANGELOG.rst">yamllint's changelog<...Bumps [yamllint](https://github.com/adrienverge/yamllint) from 1.33.0 to 1.35.0.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/adrienverge/yamllint/blob/master/CHANGELOG.rst">yamllint's changelog</a>.</em></p>
<blockquote>
<h2>1.35.0 (2024-02-15)</h2>
<ul>
<li>Fix failure on broken symlinks that should be ignored</li>
<li>API change: <code>linter.run(stream, config)</code> doesn't filter files anymore</li>
<li>Docs: Restore official Read the Docs theme</li>
</ul>
<h2>1.34.0 (2024-02-06)</h2>
<ul>
<li>Config: validate <code>ignore-from-file</code> inside rules</li>
<li>Rule <code>quoted-strings</code>: fix <code>only-when-needed</code> in flow maps and sequences</li>
<li>Rule <code>key-duplicates</code>: add <code>forbid-duplicated-merge-keys</code> option</li>
<li>Rule <code>quoted-strings</code>: add <code>check-keys</code> option</li>
<li>Docs: add GitLab CI example</li>
<li>Rule <code>truthy</code>: adapt forbidden values based on YAML version</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/adrienverge/yamllint/commit/3a13803fb091b39c46ff9dfb46d0753b8a2bd77a"><code>3a13803</code></a> yamllint version 1.35.0</li>
<li><a href="https://github.com/adrienverge/yamllint/commit/23443803539bdfc6ca2b35101cc8beb04fb184c1"><code>2344380</code></a> cli: Cleanly skip broken symlinks that are ignored</li>
<li><a href="https://github.com/adrienverge/yamllint/commit/f66855bf2d73357047118de68ce8224297c3ef5a"><code>f66855b</code></a> build: Restore official Read the Docs theme</li>
<li><a href="https://github.com/adrienverge/yamllint/commit/dd99a1c965b56027e9773442f41d3c58cc53c690"><code>dd99a1c</code></a> yamllint version 1.34.0</li>
<li><a href="https://github.com/adrienverge/yamllint/commit/01df5bf038ed4df3170477aab5ec8949d9bc8260"><code>01df5bf</code></a> truthy: Adapt forbidden values based on YAML version</li>
<li><a href="https://github.com/adrienverge/yamllint/commit/9931ad699ce2be71286bca0b991c8b3427ef6d40"><code>9931ad6</code></a> Undo ruff changes that conflict with flake8</li>
<li><a href="https://github.com/adrienverge/yamllint/commit/57d26917136ae237b2e142e515b1ee06bfc92f91"><code>57d2691</code></a> Revert replacement of flake8 with ruff</li>
<li><a href="https://github.com/adrienverge/yamllint/commit/3cb3a2038569370a2e44bcda28a378dac96c6c10"><code>3cb3a20</code></a> build: enable pygrep-hooks in ruff</li>
<li><a href="https://github.com/adrienverge/yamllint/commit/024b5367b6874200923c77a47b7ed08f3404b205"><code>024b536</code></a> style: silence pygrep-hooks warnings</li>
<li><a href="https://github.com/adrienverge/yamllint/commit/329500a1bcdc794ce6091a5c1923e4793c03b3c2"><code>329500a</code></a> build: enable tryceratops rules in ruff</li>
<li>Additional commits viewable in <a href="https://github.com/adrienverge/yamllint/compare/v1.33.0...v1.35.0">compare view</a></li>
</ul>
</details>
<br />Huste, TobiasHuste, Tobiashttps://codebase.helmholtz.cloud/hifis-software-deployment/checkmk-role/-/merge_requests/135chore(deps-dev): bump yamllint from 1.33.0 to 1.34.02024-02-16T06:41:07+01:00HIFIS Botchore(deps-dev): bump yamllint from 1.33.0 to 1.34.0Bumps [yamllint](https://github.com/adrienverge/yamllint) from 1.33.0 to 1.34.0.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/adrienverge/yamllint/blob/master/CHANGELOG.rst">yamllint's changelog<...Bumps [yamllint](https://github.com/adrienverge/yamllint) from 1.33.0 to 1.34.0.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/adrienverge/yamllint/blob/master/CHANGELOG.rst">yamllint's changelog</a>.</em></p>
<blockquote>
<h2>1.34.0 (2024-02-06)</h2>
<ul>
<li>Config: validate <code>ignore-from-file</code> inside rules</li>
<li>Rule <code>quoted-strings</code>: fix <code>only-when-needed</code> in flow maps and sequences</li>
<li>Rule <code>key-duplicates</code>: add <code>forbid-duplicated-merge-keys</code> option</li>
<li>Rule <code>quoted-strings</code>: add <code>check-keys</code> option</li>
<li>Docs: add GitLab CI example</li>
<li>Rule <code>truthy</code>: adapt forbidden values based on YAML version</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/adrienverge/yamllint/commit/dd99a1c965b56027e9773442f41d3c58cc53c690"><code>dd99a1c</code></a> yamllint version 1.34.0</li>
<li><a href="https://github.com/adrienverge/yamllint/commit/01df5bf038ed4df3170477aab5ec8949d9bc8260"><code>01df5bf</code></a> truthy: Adapt forbidden values based on YAML version</li>
<li><a href="https://github.com/adrienverge/yamllint/commit/9931ad699ce2be71286bca0b991c8b3427ef6d40"><code>9931ad6</code></a> Undo ruff changes that conflict with flake8</li>
<li><a href="https://github.com/adrienverge/yamllint/commit/57d26917136ae237b2e142e515b1ee06bfc92f91"><code>57d2691</code></a> Revert replacement of flake8 with ruff</li>
<li><a href="https://github.com/adrienverge/yamllint/commit/3cb3a2038569370a2e44bcda28a378dac96c6c10"><code>3cb3a20</code></a> build: enable pygrep-hooks in ruff</li>
<li><a href="https://github.com/adrienverge/yamllint/commit/024b5367b6874200923c77a47b7ed08f3404b205"><code>024b536</code></a> style: silence pygrep-hooks warnings</li>
<li><a href="https://github.com/adrienverge/yamllint/commit/329500a1bcdc794ce6091a5c1923e4793c03b3c2"><code>329500a</code></a> build: enable tryceratops rules in ruff</li>
<li><a href="https://github.com/adrienverge/yamllint/commit/f68cae3f1e8bd031ffb0f4b454058bdfbe8aea5a"><code>f68cae3</code></a> style: silence tryceratops warning</li>
<li><a href="https://github.com/adrienverge/yamllint/commit/47bbb26b42920ad10a9c7102d32fe1d90e509ded"><code>47bbb26</code></a> style: apply flake8-copyright rules</li>
<li><a href="https://github.com/adrienverge/yamllint/commit/0d7ae7bf6b852fd739ba385b686ea83ed3164a79"><code>0d7ae7b</code></a> style: fix section heading</li>
<li>Additional commits viewable in <a href="https://github.com/adrienverge/yamllint/compare/v1.33.0...v1.34.0">compare view</a></li>
</ul>
</details>
<br />Huste, TobiasHuste, Tobiashttps://codebase.helmholtz.cloud/hifis-software-deployment/checkmk-role/-/merge_requests/94Bump molecule-plugins from 23.4.1 to 23.5.02024-02-09T06:41:46+01:00HIFIS BotBump molecule-plugins from 23.4.1 to 23.5.0Bumps [molecule-plugins](https://github.com/ansible-community/molecule-plugins) from 23.4.1 to 23.5.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/ansible-community/molecule-plugins/releases...Bumps [molecule-plugins](https://github.com/ansible-community/molecule-plugins) from 23.4.1 to 23.5.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/ansible-community/molecule-plugins/releases">molecule-plugins's releases</a>.</em></p>
<blockquote>
<h2>v23.5.0</h2>
<h2>Minor Changes</h2>
<ul>
<li>podman: change ansible_async_dir only when $HOME is redefined (<a href="https://github.com/ansible-community/molecule-plugins/issues/173">#173</a>) <a href="https://github.com/grcancelliere"><code>@grcancelliere</code></a></li>
<li>Fix ansible-lint errors (<a href="https://github.com/ansible-community/molecule-plugins/issues/169">#169</a>) <a href="https://github.com/apatard"><code>@apatard</code></a></li>
<li>Add support for vmware_esxi plugin (<a href="https://github.com/ansible-community/molecule-plugins/issues/163">#163</a>) <a href="https://github.com/Tualua"><code>@Tualua</code></a></li>
<li>Allow for setting EC2 instance profile (<a href="https://github.com/ansible-community/molecule-plugins/issues/164">#164</a>) <a href="https://github.com/Thomas-McKanna"><code>@Thomas-McKanna</code></a></li>
<li>enhancement: Including files in source distributions with MANIFEST.in (<a href="https://github.com/ansible-community/molecule-plugins/issues/156">#156</a>) <a href="https://github.com/hswong3i"><code>@hswong3i</code></a></li>
<li>src/molecule_plugins/vagrant/modules/vagrant.py: Get rid of molecule dependency (<a href="https://github.com/ansible-community/molecule-plugins/issues/142">#142</a>) <a href="https://github.com/apatard"><code>@apatard</code></a></li>
<li>feat: Add runtime entry on docker create playbook (<a href="https://github.com/ansible-community/molecule-plugins/issues/154">#154</a>) <a href="https://github.com/pjrm"><code>@pjrm</code></a></li>
<li>Enhancement: Generate cookie cutter templates and apply linting on them (<a href="https://github.com/ansible-community/molecule-plugins/issues/123">#123</a>) <a href="https://github.com/wadhah101"><code>@wadhah101</code></a></li>
<li>Update driver.py documentation according to new plugin name (<a href="https://github.com/ansible-community/molecule-plugins/issues/149">#149</a>) <a href="https://github.com/Tcharl"><code>@Tcharl</code></a></li>
</ul>
<h2>Bugfixes</h2>
<ul>
<li>Revert "Update tests to use v6-alpha1 molecule version" (<a href="https://github.com/ansible-community/molecule-plugins/issues/178">#178</a>) <a href="https://github.com/ajinkyau"><code>@ajinkyau</code></a></li>
<li>Update tests to use v6-alpha1 molecule version (<a href="https://github.com/ansible-community/molecule-plugins/issues/177">#177</a>) <a href="https://github.com/ajinkyau"><code>@ajinkyau</code></a></li>
<li>enhancement: add fqcn to cookicutter files of ec2, containers and docker (<a href="https://github.com/ansible-community/molecule-plugins/issues/168">#168</a>) <a href="https://github.com/bernd-mueller-1"><code>@bernd-mueller-1</code></a></li>
<li>src/molecule_plugins/vagrant/modules/vagrant.py: Get rid of molecule dependency (<a href="https://github.com/ansible-community/molecule-plugins/issues/142">#142</a>) <a href="https://github.com/apatard"><code>@apatard</code></a></li>
<li>lint tests (<a href="https://github.com/ansible-community/molecule-plugins/issues/159">#159</a>) <a href="https://github.com/konstruktoid"><code>@konstruktoid</code></a></li>
<li>Add additional "safe" filters to entries in Vagrantfile (<a href="https://github.com/ansible-community/molecule-plugins/issues/153">#153</a>) <a href="https://github.com/samiam"><code>@samiam</code></a></li>
<li>fix: Ensure SSH wait polls proper async variable in ec2 create (<a href="https://github.com/ansible-community/molecule-plugins/issues/147">#147</a>) <a href="https://github.com/isuftin"><code>@isuftin</code></a></li>
</ul>
<h2>Deprecations</h2>
<ul>
<li>deprecated(azure): replace VM type (<a href="https://github.com/ansible-community/molecule-plugins/issues/151">#151</a>) <a href="https://github.com/wadhah101"><code>@wadhah101</code></a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/ansible-community/molecule-plugins/commit/c516daca85ec477758de5aafdf5dc00307a3ebd4"><code>c516dac</code></a> Revert "Update tests to use v6-alpha1 molecule version" (<a href="https://github.com/ansible-community/molecule-plugins/issues/178">#178</a>)</li>
<li><a href="https://github.com/ansible-community/molecule-plugins/commit/83383587d7481f2ef36190500392eda4490d07fd"><code>8338358</code></a> Update tests to use v6-alpha1 molecule version (<a href="https://github.com/ansible-community/molecule-plugins/issues/177">#177</a>)</li>
<li><a href="https://github.com/ansible-community/molecule-plugins/commit/e405709b64d81d77560c5247c2cb1b832222cfb7"><code>e405709</code></a> [pre-commit.ci] pre-commit autoupdate (<a href="https://github.com/ansible-community/molecule-plugins/issues/172">#172</a>)</li>
<li><a href="https://github.com/ansible-community/molecule-plugins/commit/b5509a19465ba39cfedff0e6450524620a2d6d2f"><code>b5509a1</code></a> podman: change ansible_async_dir only when $HOME is redefined (<a href="https://github.com/ansible-community/molecule-plugins/issues/173">#173</a>)</li>
<li><a href="https://github.com/ansible-community/molecule-plugins/commit/76c430934d5790061c0ab35ca32a6208d8c5b816"><code>76c4309</code></a> Fix ansible-lint errors (<a href="https://github.com/ansible-community/molecule-plugins/issues/169">#169</a>)</li>
<li><a href="https://github.com/ansible-community/molecule-plugins/commit/73bc48af6ea00a54ae9e4bcdcf02e918f45c31c8"><code>73bc48a</code></a> enhancement: add fqcn to cookicutter files of ec2, containers and docker (<a href="https://github.com/ansible-community/molecule-plugins/issues/168">#168</a>)</li>
<li><a href="https://github.com/ansible-community/molecule-plugins/commit/3676f28124b03ae136ae09167120d5854e06f043"><code>3676f28</code></a> Fix test roles linting</li>
<li><a href="https://github.com/ansible-community/molecule-plugins/commit/4afb087594a7af3d13e1f41b0d7e649cb2e6d139"><code>4afb087</code></a> Silence FIX related ruff errors</li>
<li><a href="https://github.com/ansible-community/molecule-plugins/commit/f0b4e52350d12bba78725a95098337eeaa83f26d"><code>f0b4e52</code></a> [pre-commit.ci] pre-commit autoupdate</li>
<li><a href="https://github.com/ansible-community/molecule-plugins/commit/cc9404570a8d7bb9519549e7a68bf43f84fc0f0d"><code>cc94045</code></a> Add support for vmware_esxi plugin (<a href="https://github.com/ansible-community/molecule-plugins/issues/163">#163</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/ansible-community/molecule-plugins/compare/v23.4.1...v23.5.0">compare view</a></li>
</ul>
</details>
<br />Huste, TobiasHuste, Tobiashttps://codebase.helmholtz.cloud/hifis-software-deployment/checkmk-role/-/merge_requests/130chore(deps-dev): bump ansible-lint from 6.22.1 to 6.22.22024-02-08T06:42:19+01:00HIFIS Botchore(deps-dev): bump ansible-lint from 6.22.1 to 6.22.2Bumps [ansible-lint](https://github.com/ansible/ansible-lint) from 6.22.1 to 6.22.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/ansible/ansible-lint/releases">ansible-lint's releases</a>.</...Bumps [ansible-lint](https://github.com/ansible/ansible-lint) from 6.22.1 to 6.22.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/ansible/ansible-lint/releases">ansible-lint's releases</a>.</em></p>
<blockquote>
<h2>v6.22.2</h2>
<h2>Bugfixes</h2>
<ul>
<li>Fix key error for name[casing] rule (<a href="https://github.com/ansible/ansible-lint/issues/3987">#3987</a>) <a href="https://github.com/ajinkyau"><code>@ajinkyau</code></a></li>
<li>Allow dashes in legacy role namespaces (<a href="https://github.com/ansible/ansible-lint/issues/3962">#3962</a>) <a href="https://github.com/sur5r"><code>@sur5r</code></a></li>
<li>Use new ansible-compat verbosity levels (<a href="https://github.com/ansible/ansible-lint/issues/3975">#3975</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
<li>Remove dependency on newer requests library (<a href="https://github.com/ansible/ansible-lint/issues/3959">#3959</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
<li>Ignore set-property for systemd command (<a href="https://github.com/ansible/ansible-lint/issues/3949">#3949</a>) <a href="https://github.com/alanbbr"><code>@alanbbr</code></a></li>
<li>Correct requires_ansible error message (<a href="https://github.com/ansible/ansible-lint/issues/3954">#3954</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
<li>Improve transformation for <code>no-free-form</code> rule (<a href="https://github.com/ansible/ansible-lint/issues/3945">#3945</a>) <a href="https://github.com/ajinkyau"><code>@ajinkyau</code></a></li>
<li>Documentation improvement (<a href="https://github.com/ansible/ansible-lint/issues/3946">#3946</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
<li>docs: fix grammatical issue in philosophy Q&A section (<a href="https://github.com/ansible/ansible-lint/issues/3934">#3934</a>) <a href="https://github.com/davidhulick"><code>@davidhulick</code></a></li>
<li>Update supported versions of ansible (<a href="https://github.com/ansible/ansible-lint/issues/3930">#3930</a>) <a href="https://github.com/ajinkyau"><code>@ajinkyau</code></a></li>
<li>Fix backward compatibility (<a href="https://github.com/ansible/ansible-lint/issues/3929">#3929</a>) <a href="https://github.com/McSim85"><code>@McSim85</code></a></li>
<li>Fix auto capitalization for name[prefix] rule (<a href="https://github.com/ansible/ansible-lint/issues/3922">#3922</a>) <a href="https://github.com/ajinkyau"><code>@ajinkyau</code></a></li>
<li>Fix role deps check for detecting path names (<a href="https://github.com/ansible/ansible-lint/issues/3923">#3923</a>) <a href="https://github.com/cavcrosby"><code>@cavcrosby</code></a></li>
<li>Avoid warnings about PATH with pipx installations (<a href="https://github.com/ansible/ansible-lint/issues/3920">#3920</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/ansible/ansible-lint/commit/24ac1cdb1ae30a273a844ac869fadd8d7b544ef5"><code>24ac1cd</code></a> Bump actions/cache from 3 to 4 (<a href="https://github.com/ansible/ansible-lint/issues/3986">#3986</a>)</li>
<li><a href="https://github.com/ansible/ansible-lint/commit/e53aa1638058cd054f9180fac2bf1ce6b2176130"><code>e53aa16</code></a> Fix key error for name[casing] rule (<a href="https://github.com/ansible/ansible-lint/issues/3987">#3987</a>)</li>
<li><a href="https://github.com/ansible/ansible-lint/commit/f45acb21215cf64041c4e767291344888fac8678"><code>f45acb2</code></a> Bump the dependencies group in /.config with 1 update (<a href="https://github.com/ansible/ansible-lint/issues/3983">#3983</a>)</li>
<li><a href="https://github.com/ansible/ansible-lint/commit/9c0db1daebe289cedd76e78152f0948d086e3eb4"><code>9c0db1d</code></a> Fix spelling in jinja.md (<a href="https://github.com/ansible/ansible-lint/issues/3971">#3971</a>)</li>
<li><a href="https://github.com/ansible/ansible-lint/commit/974c54d517ce7069742d80a6228f1887d0fcb998"><code>974c54d</code></a> Allow dashes in legacy role namespaces (<a href="https://github.com/ansible/ansible-lint/issues/3962">#3962</a>)</li>
<li><a href="https://github.com/ansible/ansible-lint/commit/322cde1bfe8cbd61ca29d21a276bba19a9c5c037"><code>322cde1</code></a> Bump the dependencies group in /.config with 47 updates (<a href="https://github.com/ansible/ansible-lint/issues/3979">#3979</a>)</li>
<li><a href="https://github.com/ansible/ansible-lint/commit/43719febe324c73d9bcb02a660c43a53742a17bb"><code>43719fe</code></a> Remove lock extra from mkdocs-ansible (<a href="https://github.com/ansible/ansible-lint/issues/3968">#3968</a>)</li>
<li><a href="https://github.com/ansible/ansible-lint/commit/ea5ea043c1e749aac9dcbf78866fe25ecad12b8a"><code>ea5ea04</code></a> Use new ansible-compat verbosity levels (<a href="https://github.com/ansible/ansible-lint/issues/3975">#3975</a>)</li>
<li><a href="https://github.com/ansible/ansible-lint/commit/7b2f7010006553ba295952ade65dfa29eef60ef2"><code>7b2f701</code></a> Enable toml sort (<a href="https://github.com/ansible/ansible-lint/issues/3969">#3969</a>)</li>
<li><a href="https://github.com/ansible/ansible-lint/commit/aa9788d543e7eefd0e7f0304e93f4744adff0457"><code>aa9788d</code></a> More test dependency maintenance (<a href="https://github.com/ansible/ansible-lint/issues/3964">#3964</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/ansible/ansible-lint/compare/v6.22.1...v6.22.2">compare view</a></li>
</ul>
</details>
<br />Huste, TobiasHuste, Tobiashttps://codebase.helmholtz.cloud/hifis-software-deployment/checkmk-role/-/merge_requests/123[Security] Bump cryptography from 41.0.5 to 41.0.62024-01-04T11:19:37+01:00HIFIS Bot[Security] Bump cryptography from 41.0.5 to 41.0.6Bumps [cryptography](https://github.com/pyca/cryptography) from 41.0.5 to 41.0.6. **This update includes a security fix.**
<details>
<summary>Vulnerabilities fixed</summary>
<blockquote>
<p><strong>cryptography vulnerable to NULL-derefer...Bumps [cryptography](https://github.com/pyca/cryptography) from 41.0.5 to 41.0.6. **This update includes a security fix.**
<details>
<summary>Vulnerabilities fixed</summary>
<blockquote>
<p><strong>cryptography vulnerable to NULL-dereference when loading PKCS7 certificates</strong></p>
<h3>Summary</h3>
<p>Calling <code>load_pem_pkcs7_certificates</code> or <code>load_der_pkcs7_certificates</code> could lead to a NULL-pointer dereference and segfault.</p>
<h3>PoC</h3>
<p>Here is a Python code that triggers the issue:</p>
<pre lang="python"><code>from cryptography.hazmat.primitives.serialization.pkcs7 import load_der_pkcs7_certificates, load_pem_pkcs7_certificates
<p>pem_p7 = b"""
-----BEGIN PKCS7-----
MAsGCSqGSIb3DQEHAg==
-----END PKCS7-----
"""</p>
<p>der_p7 = b"\x30\x0B\x06\x09\x2A\x86\x48\x86\xF7\x0D\x01\x07\x02"</p>
<p>load_pem_pkcs7_certificates(pem_p7)
load_der_pkcs7_certificates(der_p7)
</code></pre></p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
<blockquote>
<p>Patched versions: 41.0.6
Affected versions: >= 3.1, < 41.0.6</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst">cryptography's changelog</a>.</em></p>
<blockquote>
<p>41.0.6 - 2023-11-27</p>
<pre><code>
* Fixed a null-pointer-dereference and segfault that could occur when loading
certificates from a PKCS#7 bundle. Credit to **pkuzco** for reporting the
issue. **CVE-2023-49083**
<p>.. _v41-0-5:
</code></pre></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/pyca/cryptography/commit/f09c261ca10a31fe41b1262306db7f8f1da0e48a"><code>f09c261</code></a> 41.0.6 release (<a href="https://github.com/pyca/cryptography/issues/9927">#9927</a>)</li>
<li>See full diff in <a href="https://github.com/pyca/cryptography/compare/41.0.5...41.0.6">compare view</a></li>
</ul>
</details>
<br />Huste, TobiasHuste, Tobiashttps://codebase.helmholtz.cloud/hifis-software-deployment/checkmk-role/-/merge_requests/125[Security] Bump ansible-core from 2.16.0 to 2.16.12024-01-04T11:19:36+01:00HIFIS Bot[Security] Bump ansible-core from 2.16.0 to 2.16.1Bumps [ansible-core](https://github.com/ansible/ansible) from 2.16.0 to 2.16.1. **This update includes a security fix.**
<details>
<summary>Vulnerabilities fixed</summary>
<blockquote>
<p><strong>Ansible template injection vulnerability<...Bumps [ansible-core](https://github.com/ansible/ansible) from 2.16.0 to 2.16.1. **This update includes a security fix.**
<details>
<summary>Vulnerabilities fixed</summary>
<blockquote>
<p><strong>Ansible template injection vulnerability</strong>
A template injection flaw was found in Ansible where a user's controller internal templating operations may remove the unsafe designation from template data. This issue could allow an attacker to use a specially crafted file to introduce code injection when supplying templating data.</p>
<p>Patched versions: 2.16.1
Affected versions: >= 2.16.0, < 2.16.1</p>
</blockquote>
</details>
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/ansible/ansible/releases">ansible-core's releases</a>.</em></p>
<blockquote>
<h2>v2.16.1</h2>
<h1>Changelog</h1>
<p>See the <a href="https://github.com/ansible/ansible/blob/v2.16.1/changelogs/CHANGELOG-v2.16.rst">full changelog</a> for the changes included in this release.</p>
<h1>Release Artifacts</h1>
<ul>
<li>Built Distribution: <a href="https://files.pythonhosted.org/packages/f9/31/585576f619a974d9cdef009251d056a00e240c546f222d4bdb192d9e9208/ansible_core-2.16.1-py3-none-any.whl">ansible_core-2.16.1-py3-none-any.whl</a> - 2249752 bytes
<ul>
<li>8fc972ba6ba2161ecbde8166c0042080726c754f69ecb3ccd8c6636c98dc1c7e (SHA256)</li>
</ul>
</li>
<li>Source Distribution: <a href="https://files.pythonhosted.org/packages/6f/3f/1dc35ba302137a4b00d17a42a47859c9e133ea2af56a285418e6c22be05d/ansible-core-2.16.1.tar.gz">ansible-core-2.16.1.tar.gz</a> - 3162449 bytes
<ul>
<li>4fd1b3c86237507c67113f6770d2470f87477cd88244938d100a2d0fc37bf986 (SHA256)</li>
</ul>
</li>
</ul>
<h2>v2.16.1rc1</h2>
<h1>Changelog</h1>
<p>See the <a href="https://github.com/ansible/ansible/blob/v2.16.1rc1/changelogs/CHANGELOG-v2.16.rst">full changelog</a> for the changes included in this release.</p>
<h1>Release Artifacts</h1>
<ul>
<li>Built Distribution: <a href="https://files.pythonhosted.org/packages/0c/c4/62204080db2e00fc31225c1b2b165f3c50449a6ef94b55c88fc5ef2527f7/ansible_core-2.16.1rc1-py3-none-any.whl">ansible_core-2.16.1rc1-py3-none-any.whl</a> - 2249890 bytes
<ul>
<li>e84ea503dadfa7ffdb84f8de9a008b3d602aa24ee91386d68dfd37f76ac92d26 (SHA256)</li>
</ul>
</li>
<li>Source Distribution: <a href="https://files.pythonhosted.org/packages/21/9b/a89dd5b240d3cfca6bba0ce0e8a453290b0488348b10355d353c6425c47e/ansible-core-2.16.1rc1.tar.gz">ansible-core-2.16.1rc1.tar.gz</a> - 3167361 bytes
<ul>
<li>041f995a35fcec920435fa5fdb8e8f2c6e9f9019c0fb87b47a4a74bfa5426eac (SHA256)</li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/ansible/ansible/commit/6d40beeef4e360a5c485464337acfaea289d715f"><code>6d40bee</code></a> New release v2.16.1 (<a href="https://github.com/ansible/ansible/issues/82346">#82346</a>)</li>
<li><a href="https://github.com/ansible/ansible/commit/59aa0145d26602f2f5ae5196f77a45acfcbbbd1e"><code>59aa014</code></a> Fix various issues in unsafe_proxy (<a href="https://github.com/ansible/ansible/issues/82326">#82326</a>)</li>
<li><a href="https://github.com/ansible/ansible/commit/6655343d6df909d9cefb4857c941d6fce85b02f0"><code>6655343</code></a> Update Ansible release version to v2.16.1rc1.post0. (<a href="https://github.com/ansible/ansible/issues/82304">#82304</a>)</li>
<li><a href="https://github.com/ansible/ansible/commit/5007068bfea9649375b6361b17a19b0ca693de8b"><code>5007068</code></a> New release v2.16.1rc1 (<a href="https://github.com/ansible/ansible/issues/82301">#82301</a>)</li>
<li><a href="https://github.com/ansible/ansible/commit/270b39f6ff02511a2199505161218cbd1a5ae34f"><code>270b39f</code></a> Ensure that unsafe is more difficult to lose [stable-2.16] (<a href="https://github.com/ansible/ansible/issues/82293">#82293</a>)</li>
<li><a href="https://github.com/ansible/ansible/commit/f302b2f5924479ce0d115d316b59e091a3c987b0"><code>f302b2f</code></a> Allow include_tasks handlers for searching role subdirs (<a href="https://github.com/ansible/ansible/issues/82248">#82248</a>) (<a href="https://github.com/ansible/ansible/issues/82268">#82268</a>)</li>
<li><a href="https://github.com/ansible/ansible/commit/bb787c119dd119643861389101949f915eb4acef"><code>bb787c1</code></a> ansible-pull: expand destinantion directoy to avoid purgin in / (<a href="https://github.com/ansible/ansible/issues/82030">#82030</a>) (<a href="https://github.com/ansible/ansible/issues/82">#82</a>...</li>
<li><a href="https://github.com/ansible/ansible/commit/8a87e1c5d37422bc99d27ad4237d185cc233e035"><code>8a87e1c</code></a> no_log avoid masking booleans (<a href="https://github.com/ansible/ansible/issues/82217">#82217</a>) (<a href="https://github.com/ansible/ansible/issues/82235">#82235</a>)</li>
<li><a href="https://github.com/ansible/ansible/commit/fb5d254a79d3d07aa90d6c9d4a69a266ba959f59"><code>fb5d254</code></a> wait_for, fallback to read for non mmapable files (<a href="https://github.com/ansible/ansible/issues/82064">#82064</a>) (<a href="https://github.com/ansible/ansible/issues/82233">#82233</a>)</li>
<li><a href="https://github.com/ansible/ansible/commit/2f7376ce062c2ffa31803ac03ecba17f253af5c0"><code>2f7376c</code></a> flush_handlers: handle a failure in a nested block with force_handlers (<a href="https://github.com/ansible/ansible/issues/8157">#8157</a>...</li>
<li>Additional commits viewable in <a href="https://github.com/ansible/ansible/compare/v2.16.0...v2.16.1">compare view</a></li>
</ul>
</details>
<br />Huste, TobiasHuste, Tobiashttps://codebase.helmholtz.cloud/hifis-software-deployment/checkmk-role/-/merge_requests/112[Security] Bump urllib3 from 2.0.4 to 2.0.72023-11-25T06:42:00+01:00HIFIS Bot[Security] Bump urllib3 from 2.0.4 to 2.0.7Bumps [urllib3](https://github.com/urllib3/urllib3) from 2.0.4 to 2.0.7. **This update includes security fixes.**
<details>
<summary>Vulnerabilities fixed</summary>
<blockquote>
<p><strong><code>Cookie</code> HTTP header isn't stripped o...Bumps [urllib3](https://github.com/urllib3/urllib3) from 2.0.4 to 2.0.7. **This update includes security fixes.**
<details>
<summary>Vulnerabilities fixed</summary>
<blockquote>
<p><strong><code>Cookie</code> HTTP header isn't stripped on cross-origin redirects</strong>
urllib3 doesn't treat the <code>Cookie</code> HTTP header special or provide any helpers for managing cookies over HTTP, that is the responsibility of the user. However, it is possible for a user to specify a <code>Cookie</code> header and unknowingly leak information via HTTP redirects to a different origin if that user doesn't disable redirects explicitly.</p>
<p>Users <strong>must</strong> handle redirects themselves instead of relying on urllib3's automatic redirects to achieve safe processing of the <code>Cookie</code> header, thus we decided to strip the header by default in order to further protect users who aren't using the correct approach.</p>
<h2>Affected usages</h2>
<p>We believe the number of usages affected by this advisory is low. It requires all of the following to be true to be exploited:</p>
<ul>
<li>Using an affected version of urllib3 (patched in v1.26.17 and v2.0.6)</li>
<li>Using the <code>Cookie</code> header on requests, which is mostly typical for impersonating a browser.</li>
<li>Not disabling HTTP redirects</li>
<li>Either not using HTTPS or for the origin server to redirect to a malicious origin.</li>
</ul>
<h2>Remediation</h2>
<ul>
<li>Upgrading to at least urllib3 v1.26.17 or v2.0.6</li>
<li>Disabling HTTP redirects using <code>redirects=False</code> when sending requests.</li>
<li>Not using the <code>Cookie</code> header.</li>
</ul>
<p>Patched versions: 2.0.6
Affected versions: >= 2.0.0, < 2.0.6</p>
</blockquote>
<blockquote>
<p><strong>urllib3's request body not stripped after redirect from 303 status changes request method to GET</strong>
urllib3 previously wouldn't remove the HTTP request body when an HTTP redirect response using status 303 "See Other" after the request had its method changed from one that could accept a request body (like <code>POST</code>) to <code>GET</code> as is required by HTTP RFCs. Although the behavior of removing the request body is not specified in the section for redirects, it can be inferred by piecing together information from different sections and we have observed the behavior in other major HTTP client implementations like curl and web browsers.</p>
<p>From <a href="https://www.rfc-editor.org/rfc/rfc9110.html#name-get">RFC 9110 Section 9.3.1</a>:</p>
<blockquote>
<p>A client SHOULD NOT generate content in a GET request unless it is made directly to an origin server that has previously indicated, in or out of band, that such a request has a purpose and will be adequately supported.</p>
</blockquote>
<h2>Affected usages</h2>
<p>Because the vulnerability requires a previously trusted service to become compromised in order to have an impact on confidentiality we believe the exploitability of this vulnerability is low. Additionally, many users aren't putting sensitive data in HTTP request bodies, if this is the case then this vulnerability isn't exploitable.</p>
<p>Both of the following conditions must be true to be affected by this vulnerability:</p>
<ul>
<li>If you're using urllib3 and submitting sensitive information in the HTTP request body (such as form data or JSON)</li>
<li>The origin service is compromised and starts redirecting using 303 to a malicious peer or the redirected-to service becomes compromised.</li>
</ul>
<h2>Remediation</h2>
<p>You can remediate this vulnerability with any of the following steps:</p>
<ul>
<li>Upgrade to a patched version of urllib3 (v1.26.18 or v2.0.7)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
<blockquote>
<p>Patched versions: 2.0.7
Affected versions: >= 2.0.0, <= 2.0.6</p>
</blockquote>
</details>
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/urllib3/urllib3/releases">urllib3's releases</a>.</em></p>
<blockquote>
<h2>2.0.7</h2>
<ul>
<li>Made body stripped from HTTP requests changing the request method to GET after HTTP 303 "See Other" redirect responses. (GHSA-g4mx-q9vg-27p4)</li>
</ul>
<h2>2.0.6</h2>
<ul>
<li>Added the <code>Cookie</code> header to the list of headers to strip from requests when redirecting to a different host. As before, different headers can be set via <code>Retry.remove_headers_on_redirect</code>. (GHSA-v845-jxx5-vc9f)</li>
</ul>
<h2>2.0.5</h2>
<ul>
<li>Allowed pyOpenSSL third-party module without any deprecation warning. <a href="https://github.com/urllib3/urllib3/issues/3126">#3126</a></li>
<li>Fixed default <code>blocksize</code> of <code>HTTPConnection</code> classes to match high-level classes. Previously was 8KiB, now 16KiB. <a href="https://github.com/urllib3/urllib3/issues/3066%3E">#3066</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/urllib3/urllib3/blob/main/CHANGES.rst">urllib3's changelog</a>.</em></p>
<blockquote>
<h1>2.0.7 (2023-10-17)</h1>
<ul>
<li>Made body stripped from HTTP requests changing the request method to GET after HTTP 303 "See Other" redirect responses.</li>
</ul>
<h1>2.0.6 (2023-10-02)</h1>
<ul>
<li>Added the <code>Cookie</code> header to the list of headers to strip from requests when redirecting to a different host. As before, different headers can be set via <code>Retry.remove_headers_on_redirect</code>.</li>
</ul>
<h1>2.0.5 (2023-09-20)</h1>
<ul>
<li>Allowed pyOpenSSL third-party module without any deprecation warning. (<code>[#3126](https://github.com/urllib3/urllib3/issues/3126) <https://github.com/urllib3/urllib3/issues/3126></code>__)</li>
<li>Fixed default <code>blocksize</code> of <code>HTTPConnection</code> classes to match high-level classes. Previously was 8KiB, now 16KiB. (<code>[#3066](https://github.com/urllib3/urllib3/issues/3066) <https://github.com/urllib3/urllib3/issues/3066></code>__)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/urllib3/urllib3/commit/56f01e088dc006c03d4ee6ea9da4ab810f1ed700"><code>56f01e0</code></a> Release 2.0.7</li>
<li><a href="https://github.com/urllib3/urllib3/commit/4e50fbc5db74e32cabd5ccc1ab81fc103adfe0b3"><code>4e50fbc</code></a> Merge pull request from GHSA-g4mx-q9vg-27p4</li>
<li><a href="https://github.com/urllib3/urllib3/commit/80808b04bfa68fbd099828848c96ee25df185f1d"><code>80808b0</code></a> Fix docs build on Python 3.12 (<a href="https://github.com/urllib3/urllib3/issues/3144">#3144</a>)</li>
<li><a href="https://github.com/urllib3/urllib3/commit/f28deff1cf162c673b50d88d3552e91bda6d68a8"><code>f28deff</code></a> Add 1.26.17 to the current changelog</li>
<li><a href="https://github.com/urllib3/urllib3/commit/262e3e332209ee93ff70e2b13502c8f20c105ac8"><code>262e3e3</code></a> Release 2.0.6</li>
<li><a href="https://github.com/urllib3/urllib3/commit/644124ecd0b6e417c527191f866daa05a5a2056d"><code>644124e</code></a> Merge pull request from GHSA-v845-jxx5-vc9f</li>
<li><a href="https://github.com/urllib3/urllib3/commit/740380c59ca2a7c2dceca19e5dba99f6b7060e62"><code>740380c</code></a> Bump cryptography from 41.0.3 to 41.0.4 (<a href="https://github.com/urllib3/urllib3/issues/3131">#3131</a>)</li>
<li><a href="https://github.com/urllib3/urllib3/commit/d9f85a749488188c286cd50606d159874db94d5f"><code>d9f85a7</code></a> Release 2.0.5</li>
<li><a href="https://github.com/urllib3/urllib3/commit/d41f4122966f7f4f5f92001ad518e5d9dafcc886"><code>d41f412</code></a> Undeprecate pyOpenSSL module (<a href="https://github.com/urllib3/urllib3/issues/3127">#3127</a>)</li>
<li><a href="https://github.com/urllib3/urllib3/commit/b6c04cb3e62ef5a0e4947d037c12fb3ca79e024a"><code>b6c04cb</code></a> Fix a link to "absolute URI" definition (<a href="https://github.com/urllib3/urllib3/issues/3128">#3128</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/urllib3/urllib3/compare/2.0.4...2.0.7">compare view</a></li>
</ul>
</details>
<br />Huste, TobiasHuste, Tobiashttps://codebase.helmholtz.cloud/hifis-software-deployment/checkmk-role/-/merge_requests/117Bump ansible from 8.4.0 to 8.6.12023-11-22T06:41:00+01:00HIFIS BotBump ansible from 8.4.0 to 8.6.1Bumps [ansible](https://github.com/ansible/ansible) from 8.4.0 to 8.6.1.
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a href="https://github.com/ansible/ansible/commits">compare view</a></li>
</ul>
</details>
<br />Bumps [ansible](https://github.com/ansible/ansible) from 8.4.0 to 8.6.1.
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a href="https://github.com/ansible/ansible/commits">compare view</a></li>
</ul>
</details>
<br />Huste, TobiasHuste, Tobiashttps://codebase.helmholtz.cloud/hifis-software-deployment/checkmk-role/-/merge_requests/115Bump ansible from 8.4.0 to 8.6.02023-11-10T06:40:57+01:00HIFIS BotBump ansible from 8.4.0 to 8.6.0Bumps [ansible](https://github.com/ansible/ansible) from 8.4.0 to 8.6.0.
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a href="https://github.com/ansible/ansible/commits">compare view</a></li>
</ul>
</details>
<br />Bumps [ansible](https://github.com/ansible/ansible) from 8.4.0 to 8.6.0.
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a href="https://github.com/ansible/ansible/commits">compare view</a></li>
</ul>
</details>
<br />Huste, TobiasHuste, Tobiashttps://codebase.helmholtz.cloud/hifis-software-deployment/checkmk-role/-/merge_requests/114Bump ansible-lint from 6.20.0 to 6.21.12023-11-08T06:42:32+01:00HIFIS BotBump ansible-lint from 6.20.0 to 6.21.1Bumps [ansible-lint](https://github.com/ansible/ansible-lint) from 6.20.0 to 6.21.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/ansible/ansible-lint/releases">ansible-lint's releases</a>.</...Bumps [ansible-lint](https://github.com/ansible/ansible-lint) from 6.20.0 to 6.21.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/ansible/ansible-lint/releases">ansible-lint's releases</a>.</em></p>
<blockquote>
<h2>v6.21.1</h2>
<h2>Bugfixes</h2>
<ul>
<li>Avoid exception caused by accidental unloading of core rules (<a href="https://github.com/ansible/ansible-lint/issues/3857">#3857</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
<li>Document pre-commit access to ansible community bundle (<a href="https://github.com/ansible/ansible-lint/issues/3856">#3856</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
<li>Fix bug with auto-fix ending too soon (<a href="https://github.com/ansible/ansible-lint/issues/3855">#3855</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
</ul>
<h2>v6.21.0</h2>
<h2>Minor Changes</h2>
<ul>
<li>Allow linting plugin EXAMPLES as playbooks (<a href="https://github.com/ansible/ansible-lint/issues/3309">#3309</a>) <a href="https://github.com/Qalthos"><code>@Qalthos</code></a></li>
</ul>
<h2>Bugfixes</h2>
<ul>
<li>Add support for Rocky (<a href="https://github.com/ansible/ansible-lint/issues/3843">#3843</a>) <a href="https://github.com/facorazza"><code>@facorazza</code></a></li>
<li>Update supported Ubuntu versions in <code>meta.json</code> (<a href="https://github.com/ansible/ansible-lint/issues/3845">#3845</a>) <a href="https://github.com/mcdonnnj"><code>@mcdonnnj</code></a></li>
<li>Avoid false positives for handler in roles handlers directory (<a href="https://github.com/ansible/ansible-lint/issues/3838">#3838</a>) <a href="https://github.com/ajinkyau"><code>@ajinkyau</code></a></li>
<li>Hide stacktrace when loading invalid yaml (<a href="https://github.com/ansible/ansible-lint/issues/3844">#3844</a>) <a href="https://github.com/ajinkyau"><code>@ajinkyau</code></a></li>
<li>Add some platforms to <code>meta.json</code> (<a href="https://github.com/ansible/ansible-lint/issues/3841">#3841</a>) <a href="https://github.com/mcdonnnj"><code>@mcdonnnj</code></a></li>
<li>Temporary avoid auto-fixing YAML files not owned by ansible (<a href="https://github.com/ansible/ansible-lint/issues/3837">#3837</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
<li>Add environment variable for skipping schema update (<a href="https://github.com/ansible/ansible-lint/issues/3835">#3835</a>) <a href="https://github.com/ajinkyau"><code>@ajinkyau</code></a></li>
<li>Avoid creating temporary YAML files inside source tree (<a href="https://github.com/ansible/ansible-lint/issues/3819">#3819</a>) <a href="https://github.com/Qalthos"><code>@Qalthos</code></a></li>
<li>Document environment variables (<a href="https://github.com/ansible/ansible-lint/issues/3833">#3833</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
<li>Update schemas (<a href="https://github.com/ansible/ansible-lint/issues/3832">#3832</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
<li>Support complex requirements in argument_specs.yml (<a href="https://github.com/ansible/ansible-lint/issues/3823">#3823</a>) <a href="https://github.com/tapetersen"><code>@tapetersen</code></a></li>
<li>Fix SARIF-formatter severity levels (<a href="https://github.com/ansible/ansible-lint/issues/3824">#3824</a>) <a href="https://github.com/4ch1m"><code>@4ch1m</code></a></li>
<li>Add play level autofix for key-order rule (<a href="https://github.com/ansible/ansible-lint/issues/3815">#3815</a>) <a href="https://github.com/ajinkyau"><code>@ajinkyau</code></a></li>
<li>Add support for python 3.12 (<a href="https://github.com/ansible/ansible-lint/issues/3813">#3813</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
<li>Update SPDX license list (<a href="https://github.com/ansible/ansible-lint/issues/3814">#3814</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
<li>Use checkout action in install docs (<a href="https://github.com/ansible/ansible-lint/issues/3810">#3810</a>) <a href="https://github.com/gma"><code>@gma</code></a></li>
<li>Fix actions-tagger arguments (<a href="https://github.com/ansible/ansible-lint/issues/3808">#3808</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
</ul>
<h2>v6.20.3</h2>
<h2>Bugfixes</h2>
<ul>
<li>Fix wget command arguments in github action (<a href="https://github.com/ansible/ansible-lint/issues/3806">#3806</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
<li>Update some platform versions in meta.json (<a href="https://github.com/ansible/ansible-lint/issues/3800">#3800</a>) <a href="https://github.com/masoud-maghsoudi"><code>@masoud-maghsoudi</code></a></li>
</ul>
<h2>v6.20.2</h2>
<h2>Bugfixes</h2>
<ul>
<li>Do not use github action path for running ansible lint (<a href="https://github.com/ansible/ansible-lint/issues/3798">#3798</a>) <a href="https://github.com/ReenigneArcher"><code>@ReenigneArcher</code></a></li>
<li>Correct listing of autofix rules in documentation (<a href="https://github.com/ansible/ansible-lint/issues/3797">#3797</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
<li>Make the autofix rule list dynamic in documentation (<a href="https://github.com/ansible/ansible-lint/issues/3785">#3785</a>) <a href="https://github.com/shatakshiiii"><code>@shatakshiiii</code></a></li>
<li>Fix documentation links to autofix page (<a href="https://github.com/ansible/ansible-lint/issues/3796">#3796</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
<li>Bump test dependencies (<a href="https://github.com/ansible/ansible-lint/issues/3795">#3795</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
<li>Correct documentation regarding CLI argument precedence (<a href="https://github.com/ansible/ansible-lint/issues/3792">#3792</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
<li>Document autofix ability for rules that supports it (<a href="https://github.com/ansible/ansible-lint/issues/3791">#3791</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
<li>Accept underline prefix when checking var-naming (<a href="https://github.com/ansible/ansible-lint/issues/3789">#3789</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
<li>Correct regression with use of --fix (<a href="https://github.com/ansible/ansible-lint/issues/3783">#3783</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/ansible/ansible-lint/commit/b4d48101af3a26f66e304db200e80716fdf8b719"><code>b4d4810</code></a> Avoid exception caused by accidental unloading of core rules (<a href="https://github.com/ansible/ansible-lint/issues/3857">#3857</a>)</li>
<li><a href="https://github.com/ansible/ansible-lint/commit/899f44ce4e64f8b7fae472498ce88a73a8d12998"><code>899f44c</code></a> Document pre-commit access to ansible community bundle (<a href="https://github.com/ansible/ansible-lint/issues/3856">#3856</a>)</li>
<li><a href="https://github.com/ansible/ansible-lint/commit/dbcd960f8b1871c2a9f9decf20e4f6100b2483eb"><code>dbcd960</code></a> Fix bug with auto-fix ending too soon (<a href="https://github.com/ansible/ansible-lint/issues/3855">#3855</a>)</li>
<li><a href="https://github.com/ansible/ansible-lint/commit/83250b4484a00e5298a27bf350bbff8296edd41b"><code>83250b4</code></a> Improve test function names (<a href="https://github.com/ansible/ansible-lint/issues/3852">#3852</a>)</li>
<li><a href="https://github.com/ansible/ansible-lint/commit/031038ef5e1144d009d55b78a4d1db122ea5ab64"><code>031038e</code></a> Add support for Rocky (<a href="https://github.com/ansible/ansible-lint/issues/3843">#3843</a>)</li>
<li><a href="https://github.com/ansible/ansible-lint/commit/07181fede966192f43e5f7cc0dd2b4f64a7cde7c"><code>07181fe</code></a> Update supported Ubuntu versions in <code>meta.json</code> (<a href="https://github.com/ansible/ansible-lint/issues/3845">#3845</a>)</li>
<li><a href="https://github.com/ansible/ansible-lint/commit/bf43367e838a16a8fc2a2404ea02fc3d7a81480a"><code>bf43367</code></a> Avoid false positives for handler in roles handlers directory (<a href="https://github.com/ansible/ansible-lint/issues/3838">#3838</a>)</li>
<li><a href="https://github.com/ansible/ansible-lint/commit/721d1d53ca736fa0f261107ac0bb212957ec02b1"><code>721d1d5</code></a> Hide stacktrace when loading invalid yaml (<a href="https://github.com/ansible/ansible-lint/issues/3844">#3844</a>)</li>
<li><a href="https://github.com/ansible/ansible-lint/commit/0b528446f5c9e6a1a4e53db02f4f6641201be4fd"><code>0b52844</code></a> Add some platforms to <code>meta.json</code> (<a href="https://github.com/ansible/ansible-lint/issues/3841">#3841</a>)</li>
<li><a href="https://github.com/ansible/ansible-lint/commit/c81e65fab3f52714260122d4b4f9659bd3f04e92"><code>c81e65f</code></a> Temporary avoid auto-fixing YAML files not owned by ansible (<a href="https://github.com/ansible/ansible-lint/issues/3837">#3837</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/ansible/ansible-lint/compare/v6.20.0...v6.21.1">compare view</a></li>
</ul>
</details>
<br />Huste, TobiasHuste, Tobiashttps://codebase.helmholtz.cloud/hifis-software-deployment/checkmk-role/-/merge_requests/111Bump ansible from 8.4.0 to 8.5.02023-11-08T06:41:17+01:00HIFIS BotBump ansible from 8.4.0 to 8.5.0Bumps [ansible](https://github.com/ansible/ansible) from 8.4.0 to 8.5.0.
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a href="https://github.com/ansible/ansible/commits">compare view</a></li>
</ul>
</details>
<br />Bumps [ansible](https://github.com/ansible/ansible) from 8.4.0 to 8.5.0.
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a href="https://github.com/ansible/ansible/commits">compare view</a></li>
</ul>
</details>
<br />Huste, TobiasHuste, Tobiashttps://codebase.helmholtz.cloud/hifis-software-deployment/checkmk-role/-/merge_requests/113Bump ansible-lint from 6.20.0 to 6.21.02023-10-20T07:42:53+02:00HIFIS BotBump ansible-lint from 6.20.0 to 6.21.0Bumps [ansible-lint](https://github.com/ansible/ansible-lint) from 6.20.0 to 6.21.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/ansible/ansible-lint/releases">ansible-lint's releases</a>.</...Bumps [ansible-lint](https://github.com/ansible/ansible-lint) from 6.20.0 to 6.21.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/ansible/ansible-lint/releases">ansible-lint's releases</a>.</em></p>
<blockquote>
<h2>v6.21.0</h2>
<h2>Minor Changes</h2>
<ul>
<li>Allow linting plugin EXAMPLES as playbooks (<a href="https://github.com/ansible/ansible-lint/issues/3309">#3309</a>) <a href="https://github.com/Qalthos"><code>@Qalthos</code></a></li>
</ul>
<h2>Bugfixes</h2>
<ul>
<li>Add support for Rocky (<a href="https://github.com/ansible/ansible-lint/issues/3843">#3843</a>) <a href="https://github.com/facorazza"><code>@facorazza</code></a></li>
<li>Update supported Ubuntu versions in <code>meta.json</code> (<a href="https://github.com/ansible/ansible-lint/issues/3845">#3845</a>) <a href="https://github.com/mcdonnnj"><code>@mcdonnnj</code></a></li>
<li>Avoid false positives for handler in roles handlers directory (<a href="https://github.com/ansible/ansible-lint/issues/3838">#3838</a>) <a href="https://github.com/ajinkyau"><code>@ajinkyau</code></a></li>
<li>Hide stacktrace when loading invalid yaml (<a href="https://github.com/ansible/ansible-lint/issues/3844">#3844</a>) <a href="https://github.com/ajinkyau"><code>@ajinkyau</code></a></li>
<li>Add some platforms to <code>meta.json</code> (<a href="https://github.com/ansible/ansible-lint/issues/3841">#3841</a>) <a href="https://github.com/mcdonnnj"><code>@mcdonnnj</code></a></li>
<li>Temporary avoid auto-fixing YAML files not owned by ansible (<a href="https://github.com/ansible/ansible-lint/issues/3837">#3837</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
<li>Add environment variable for skipping schema update (<a href="https://github.com/ansible/ansible-lint/issues/3835">#3835</a>) <a href="https://github.com/ajinkyau"><code>@ajinkyau</code></a></li>
<li>Avoid creating temporary YAML files inside source tree (<a href="https://github.com/ansible/ansible-lint/issues/3819">#3819</a>) <a href="https://github.com/Qalthos"><code>@Qalthos</code></a></li>
<li>Document environment variables (<a href="https://github.com/ansible/ansible-lint/issues/3833">#3833</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
<li>Update schemas (<a href="https://github.com/ansible/ansible-lint/issues/3832">#3832</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
<li>Support complex requirements in argument_specs.yml (<a href="https://github.com/ansible/ansible-lint/issues/3823">#3823</a>) <a href="https://github.com/tapetersen"><code>@tapetersen</code></a></li>
<li>Fix SARIF-formatter severity levels (<a href="https://github.com/ansible/ansible-lint/issues/3824">#3824</a>) <a href="https://github.com/4ch1m"><code>@4ch1m</code></a></li>
<li>Add play level autofix for key-order rule (<a href="https://github.com/ansible/ansible-lint/issues/3815">#3815</a>) <a href="https://github.com/ajinkyau"><code>@ajinkyau</code></a></li>
<li>Add support for python 3.12 (<a href="https://github.com/ansible/ansible-lint/issues/3813">#3813</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
<li>Update SPDX license list (<a href="https://github.com/ansible/ansible-lint/issues/3814">#3814</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
<li>Use checkout action in install docs (<a href="https://github.com/ansible/ansible-lint/issues/3810">#3810</a>) <a href="https://github.com/gma"><code>@gma</code></a></li>
<li>Fix actions-tagger arguments (<a href="https://github.com/ansible/ansible-lint/issues/3808">#3808</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
</ul>
<h2>v6.20.3</h2>
<h2>Bugfixes</h2>
<ul>
<li>Fix wget command arguments in github action (<a href="https://github.com/ansible/ansible-lint/issues/3806">#3806</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
<li>Update some platform versions in meta.json (<a href="https://github.com/ansible/ansible-lint/issues/3800">#3800</a>) <a href="https://github.com/masoud-maghsoudi"><code>@masoud-maghsoudi</code></a></li>
</ul>
<h2>v6.20.2</h2>
<h2>Bugfixes</h2>
<ul>
<li>Do not use github action path for running ansible lint (<a href="https://github.com/ansible/ansible-lint/issues/3798">#3798</a>) <a href="https://github.com/ReenigneArcher"><code>@ReenigneArcher</code></a></li>
<li>Correct listing of autofix rules in documentation (<a href="https://github.com/ansible/ansible-lint/issues/3797">#3797</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
<li>Make the autofix rule list dynamic in documentation (<a href="https://github.com/ansible/ansible-lint/issues/3785">#3785</a>) <a href="https://github.com/shatakshiiii"><code>@shatakshiiii</code></a></li>
<li>Fix documentation links to autofix page (<a href="https://github.com/ansible/ansible-lint/issues/3796">#3796</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
<li>Bump test dependencies (<a href="https://github.com/ansible/ansible-lint/issues/3795">#3795</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
<li>Correct documentation regarding CLI argument precedence (<a href="https://github.com/ansible/ansible-lint/issues/3792">#3792</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
<li>Document autofix ability for rules that supports it (<a href="https://github.com/ansible/ansible-lint/issues/3791">#3791</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
<li>Accept underline prefix when checking var-naming (<a href="https://github.com/ansible/ansible-lint/issues/3789">#3789</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
<li>Correct regression with use of --fix (<a href="https://github.com/ansible/ansible-lint/issues/3783">#3783</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
</ul>
<h2>v6.20.1</h2>
<h2>Bugfixes</h2>
<ul>
<li>Fix detection of play roles vars missing prefix (<a href="https://github.com/ansible/ansible-lint/issues/3765">#3765</a>) <a href="https://github.com/cavcrosby"><code>@cavcrosby</code></a></li>
<li>Prune reported errors after autofix (<a href="https://github.com/ansible/ansible-lint/issues/3774">#3774</a>) <a href="https://github.com/cidrblock"><code>@cidrblock</code></a></li>
<li><code>--fix</code> will now default to <code>all</code> (<a href="https://github.com/ansible/ansible-lint/issues/3777">#3777</a>) <a href="https://github.com/ajinkyau"><code>@ajinkyau</code></a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/ansible/ansible-lint/commit/031038ef5e1144d009d55b78a4d1db122ea5ab64"><code>031038e</code></a> Add support for Rocky (<a href="https://github.com/ansible/ansible-lint/issues/3843">#3843</a>)</li>
<li><a href="https://github.com/ansible/ansible-lint/commit/07181fede966192f43e5f7cc0dd2b4f64a7cde7c"><code>07181fe</code></a> Update supported Ubuntu versions in <code>meta.json</code> (<a href="https://github.com/ansible/ansible-lint/issues/3845">#3845</a>)</li>
<li><a href="https://github.com/ansible/ansible-lint/commit/bf43367e838a16a8fc2a2404ea02fc3d7a81480a"><code>bf43367</code></a> Avoid false positives for handler in roles handlers directory (<a href="https://github.com/ansible/ansible-lint/issues/3838">#3838</a>)</li>
<li><a href="https://github.com/ansible/ansible-lint/commit/721d1d53ca736fa0f261107ac0bb212957ec02b1"><code>721d1d5</code></a> Hide stacktrace when loading invalid yaml (<a href="https://github.com/ansible/ansible-lint/issues/3844">#3844</a>)</li>
<li><a href="https://github.com/ansible/ansible-lint/commit/0b528446f5c9e6a1a4e53db02f4f6641201be4fd"><code>0b52844</code></a> Add some platforms to <code>meta.json</code> (<a href="https://github.com/ansible/ansible-lint/issues/3841">#3841</a>)</li>
<li><a href="https://github.com/ansible/ansible-lint/commit/c81e65fab3f52714260122d4b4f9659bd3f04e92"><code>c81e65f</code></a> Temporary avoid auto-fixing YAML files not owned by ansible (<a href="https://github.com/ansible/ansible-lint/issues/3837">#3837</a>)</li>
<li><a href="https://github.com/ansible/ansible-lint/commit/3c90628f665c8a3394fdac2c88ab1de6513ceb87"><code>3c90628</code></a> Add environment variable for skipping schema update (<a href="https://github.com/ansible/ansible-lint/issues/3835">#3835</a>)</li>
<li><a href="https://github.com/ansible/ansible-lint/commit/4a36d80709968de36b7ff709e5b49577ae22d4b8"><code>4a36d80</code></a> Avoid creating temporary YAML files inside source tree (<a href="https://github.com/ansible/ansible-lint/issues/3819">#3819</a>)</li>
<li><a href="https://github.com/ansible/ansible-lint/commit/9ec6f5962f5df52084a2e6adc6eff3551c1d31b9"><code>9ec6f59</code></a> Document environment variables (<a href="https://github.com/ansible/ansible-lint/issues/3833">#3833</a>)</li>
<li><a href="https://github.com/ansible/ansible-lint/commit/c3af71f47a514f36cdc3d6dfc0a6eb4556a42d1e"><code>c3af71f</code></a> Update schemas (<a href="https://github.com/ansible/ansible-lint/issues/3832">#3832</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/ansible/ansible-lint/compare/v6.20.0...v6.21.0">compare view</a></li>
</ul>
</details>
<br />Huste, TobiasHuste, Tobiashttps://codebase.helmholtz.cloud/hifis-software-deployment/checkmk-role/-/merge_requests/109Bump ansible-lint from 6.20.0 to 6.20.32023-10-19T07:42:54+02:00HIFIS BotBump ansible-lint from 6.20.0 to 6.20.3Bumps [ansible-lint](https://github.com/ansible/ansible-lint) from 6.20.0 to 6.20.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/ansible/ansible-lint/releases">ansible-lint's releases</a>.</...Bumps [ansible-lint](https://github.com/ansible/ansible-lint) from 6.20.0 to 6.20.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/ansible/ansible-lint/releases">ansible-lint's releases</a>.</em></p>
<blockquote>
<h2>v6.20.3</h2>
<h2>Bugfixes</h2>
<ul>
<li>Fix wget command arguments in github action (<a href="https://github.com/ansible/ansible-lint/issues/3806">#3806</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
<li>Update some platform versions in meta.json (<a href="https://github.com/ansible/ansible-lint/issues/3800">#3800</a>) <a href="https://github.com/masoud-maghsoudi"><code>@masoud-maghsoudi</code></a></li>
</ul>
<h2>v6.20.2</h2>
<h2>Bugfixes</h2>
<ul>
<li>Do not use github action path for running ansible lint (<a href="https://github.com/ansible/ansible-lint/issues/3798">#3798</a>) <a href="https://github.com/ReenigneArcher"><code>@ReenigneArcher</code></a></li>
<li>Correct listing of autofix rules in documentation (<a href="https://github.com/ansible/ansible-lint/issues/3797">#3797</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
<li>Make the autofix rule list dynamic in documentation (<a href="https://github.com/ansible/ansible-lint/issues/3785">#3785</a>) <a href="https://github.com/shatakshiiii"><code>@shatakshiiii</code></a></li>
<li>Fix documentation links to autofix page (<a href="https://github.com/ansible/ansible-lint/issues/3796">#3796</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
<li>Bump test dependencies (<a href="https://github.com/ansible/ansible-lint/issues/3795">#3795</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
<li>Correct documentation regarding CLI argument precedence (<a href="https://github.com/ansible/ansible-lint/issues/3792">#3792</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
<li>Document autofix ability for rules that supports it (<a href="https://github.com/ansible/ansible-lint/issues/3791">#3791</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
<li>Accept underline prefix when checking var-naming (<a href="https://github.com/ansible/ansible-lint/issues/3789">#3789</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
<li>Correct regression with use of --fix (<a href="https://github.com/ansible/ansible-lint/issues/3783">#3783</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
</ul>
<h2>v6.20.1</h2>
<h2>Bugfixes</h2>
<ul>
<li>Fix detection of play roles vars missing prefix (<a href="https://github.com/ansible/ansible-lint/issues/3765">#3765</a>) <a href="https://github.com/cavcrosby"><code>@cavcrosby</code></a></li>
<li>Prune reported errors after autofix (<a href="https://github.com/ansible/ansible-lint/issues/3774">#3774</a>) <a href="https://github.com/cidrblock"><code>@cidrblock</code></a></li>
<li><code>--fix</code> will now default to <code>all</code> (<a href="https://github.com/ansible/ansible-lint/issues/3777">#3777</a>) <a href="https://github.com/ajinkyau"><code>@ajinkyau</code></a></li>
<li>Avoid false error caused by TypeError with jinja rule (<a href="https://github.com/ansible/ansible-lint/issues/3773">#3773</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
<li>Sanity Rule Ignore Additions and Updates (<a href="https://github.com/ansible/ansible-lint/issues/3766">#3766</a>) <a href="https://github.com/alisonlhart"><code>@alisonlhart</code></a></li>
<li>Update rulebook schema (name is now required) (<a href="https://github.com/ansible/ansible-lint/issues/3776">#3776</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
<li>Expose rules that have autofix capability in docs (<a href="https://github.com/ansible/ansible-lint/issues/3770">#3770</a>) <a href="https://github.com/shatakshiiii"><code>@shatakshiiii</code></a></li>
<li>List all the fixable rules in CLI via <code>--list-rules</code> (<a href="https://github.com/ansible/ansible-lint/issues/3737">#3737</a>) <a href="https://github.com/shatakshiiii"><code>@shatakshiiii</code></a></li>
<li>Include level in SARIF results (<a href="https://github.com/ansible/ansible-lint/issues/3758">#3758</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
<li>Meta runtime supported version update (<a href="https://github.com/ansible/ansible-lint/issues/3755">#3755</a>) <a href="https://github.com/alisonlhart"><code>@alisonlhart</code></a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/ansible/ansible-lint/commit/82ab7c447614837c94fa8a9b5f667b8662aa055f"><code>82ab7c4</code></a> Fix wget command in action (<a href="https://github.com/ansible/ansible-lint/issues/3806">#3806</a>)</li>
<li><a href="https://github.com/ansible/ansible-lint/commit/5e6cb585eabe0dfa9b9e00ff5c5d4977974b9e59"><code>5e6cb58</code></a> Update some platform versions in meta.json (<a href="https://github.com/ansible/ansible-lint/issues/3800">#3800</a>)</li>
<li><a href="https://github.com/ansible/ansible-lint/commit/642ebef0fb21333e472c380763cf011db688d3f1"><code>642ebef</code></a> chore: pre-commit autoupdate (<a href="https://github.com/ansible/ansible-lint/issues/3804">#3804</a>)</li>
<li><a href="https://github.com/ansible/ansible-lint/commit/93ee6ee57a7d0f1c1df6b26f78fca223a2cd8a82"><code>93ee6ee</code></a> Bump mislav/bump-homebrew-formula-action from 3.0 to 3.1 (<a href="https://github.com/ansible/ansible-lint/issues/3803">#3803</a>)</li>
<li><a href="https://github.com/ansible/ansible-lint/commit/55b8b667587295d4fdbbd2f9c90a84455f6ece99"><code>55b8b66</code></a> Do not use github action path for running ansible lint (<a href="https://github.com/ansible/ansible-lint/issues/3798">#3798</a>)</li>
<li><a href="https://github.com/ansible/ansible-lint/commit/ca6922081fce00b8442dea0e93224abcef85ec0f"><code>ca69220</code></a> Correct listing of autofix rules in documentation (<a href="https://github.com/ansible/ansible-lint/issues/3797">#3797</a>)</li>
<li><a href="https://github.com/ansible/ansible-lint/commit/dcca4243e63b0bdbc747874e664b29b957518804"><code>dcca424</code></a> Make the autofix rule list dynamic in documentation (<a href="https://github.com/ansible/ansible-lint/issues/3785">#3785</a>)</li>
<li><a href="https://github.com/ansible/ansible-lint/commit/93b50d8f16250b4fda3d568097f7def5977332bb"><code>93b50d8</code></a> Fix documentation links to autofix page (<a href="https://github.com/ansible/ansible-lint/issues/3796">#3796</a>)</li>
<li><a href="https://github.com/ansible/ansible-lint/commit/715ba9c7211d29367655b317202b70d5fee549a6"><code>715ba9c</code></a> Bump test dependencies (<a href="https://github.com/ansible/ansible-lint/issues/3795">#3795</a>)</li>
<li><a href="https://github.com/ansible/ansible-lint/commit/16ef66a4ddd022a6d55930af9fe4e3ca52fa003e"><code>16ef66a</code></a> Enable useless-supression with pylint (<a href="https://github.com/ansible/ansible-lint/issues/3793">#3793</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/ansible/ansible-lint/compare/v6.20.0...v6.20.3">compare view</a></li>
</ul>
</details>
<br />Huste, TobiasHuste, Tobiashttps://codebase.helmholtz.cloud/hifis-software-deployment/checkmk-role/-/merge_requests/110[Security] Bump urllib3 from 2.0.4 to 2.0.62023-10-18T07:43:25+02:00HIFIS Bot[Security] Bump urllib3 from 2.0.4 to 2.0.6Bumps [urllib3](https://github.com/urllib3/urllib3) from 2.0.4 to 2.0.6. **This update includes a security fix.**
<details>
<summary>Vulnerabilities fixed</summary>
<blockquote>
<p><strong><code>Cookie</code> HTTP header isn't stripped o...Bumps [urllib3](https://github.com/urllib3/urllib3) from 2.0.4 to 2.0.6. **This update includes a security fix.**
<details>
<summary>Vulnerabilities fixed</summary>
<blockquote>
<p><strong><code>Cookie</code> HTTP header isn't stripped on cross-origin redirects</strong>
urllib3 doesn't treat the <code>Cookie</code> HTTP header special or provide any helpers for managing cookies over HTTP, that is the responsibility of the user. However, it is possible for a user to specify a <code>Cookie</code> header and unknowingly leak information via HTTP redirects to a different origin if that user doesn't disable redirects explicitly.</p>
<p>Users <strong>must</strong> handle redirects themselves instead of relying on urllib3's automatic redirects to achieve safe processing of the <code>Cookie</code> header, thus we decided to strip the header by default in order to further protect users who aren't using the correct approach.</p>
<h2>Affected usages</h2>
<p>We believe the number of usages affected by this advisory is low. It requires all of the following to be true to be exploited:</p>
<ul>
<li>Using an affected version of urllib3 (patched in v1.26.17 and v2.0.6)</li>
<li>Using the <code>Cookie</code> header on requests, which is mostly typical for impersonating a browser.</li>
<li>Not disabling HTTP redirects</li>
<li>Either not using HTTPS or for the origin server to redirect to a malicious origin.</li>
</ul>
<h2>Remediation</h2>
<ul>
<li>Upgrading to at least urllib3 v1.26.17 or v2.0.6</li>
<li>Disabling HTTP redirects using <code>redirects=False</code> when sending requests.</li>
<li>Not using the <code>Cookie</code> header.</li>
</ul>
<p>Patched versions: 2.0.6
Affected versions: >= 2.0.0, < 2.0.6</p>
</blockquote>
</details>
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/urllib3/urllib3/releases">urllib3's releases</a>.</em></p>
<blockquote>
<h2>2.0.6</h2>
<ul>
<li>Added the <code>Cookie</code> header to the list of headers to strip from requests when redirecting to a different host. As before, different headers can be set via <code>Retry.remove_headers_on_redirect</code>. (GHSA-v845-jxx5-vc9f)</li>
</ul>
<h2>2.0.5</h2>
<ul>
<li>Allowed pyOpenSSL third-party module without any deprecation warning. <a href="https://github.com/urllib3/urllib3/issues/3126">#3126</a></li>
<li>Fixed default <code>blocksize</code> of <code>HTTPConnection</code> classes to match high-level classes. Previously was 8KiB, now 16KiB. <a href="https://github.com/urllib3/urllib3/issues/3066%3E">#3066</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/urllib3/urllib3/blob/main/CHANGES.rst">urllib3's changelog</a>.</em></p>
<blockquote>
<h1>2.0.6 (2023-10-02)</h1>
<ul>
<li>Added the <code>Cookie</code> header to the list of headers to strip from requests when redirecting to a different host. As before, different headers can be set via <code>Retry.remove_headers_on_redirect</code>.</li>
</ul>
<h1>2.0.5 (2023-09-20)</h1>
<ul>
<li>Allowed pyOpenSSL third-party module without any deprecation warning. (<code>[#3126](https://github.com/urllib3/urllib3/issues/3126) <https://github.com/urllib3/urllib3/issues/3126></code>__)</li>
<li>Fixed default <code>blocksize</code> of <code>HTTPConnection</code> classes to match high-level classes. Previously was 8KiB, now 16KiB. (<code>[#3066](https://github.com/urllib3/urllib3/issues/3066) <https://github.com/urllib3/urllib3/issues/3066></code>__)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/urllib3/urllib3/commit/262e3e332209ee93ff70e2b13502c8f20c105ac8"><code>262e3e3</code></a> Release 2.0.6</li>
<li><a href="https://github.com/urllib3/urllib3/commit/644124ecd0b6e417c527191f866daa05a5a2056d"><code>644124e</code></a> Merge pull request from GHSA-v845-jxx5-vc9f</li>
<li><a href="https://github.com/urllib3/urllib3/commit/740380c59ca2a7c2dceca19e5dba99f6b7060e62"><code>740380c</code></a> Bump cryptography from 41.0.3 to 41.0.4 (<a href="https://github.com/urllib3/urllib3/issues/3131">#3131</a>)</li>
<li><a href="https://github.com/urllib3/urllib3/commit/d9f85a749488188c286cd50606d159874db94d5f"><code>d9f85a7</code></a> Release 2.0.5</li>
<li><a href="https://github.com/urllib3/urllib3/commit/d41f4122966f7f4f5f92001ad518e5d9dafcc886"><code>d41f412</code></a> Undeprecate pyOpenSSL module (<a href="https://github.com/urllib3/urllib3/issues/3127">#3127</a>)</li>
<li><a href="https://github.com/urllib3/urllib3/commit/b6c04cb3e62ef5a0e4947d037c12fb3ca79e024a"><code>b6c04cb</code></a> Fix a link to "absolute URI" definition (<a href="https://github.com/urllib3/urllib3/issues/3128">#3128</a>)</li>
<li><a href="https://github.com/urllib3/urllib3/commit/af7c78fa30f5a4e265911371d0c59b6baeddca0f"><code>af7c78f</code></a> refactor: change double conditional to one (<a href="https://github.com/urllib3/urllib3/issues/3118">#3118</a>)</li>
<li><a href="https://github.com/urllib3/urllib3/commit/34c13c8e68df6f89890ba08b9fc4fbf87ed21669"><code>34c13c8</code></a> Refer to current internet standards in docs on proxies (<a href="https://github.com/urllib3/urllib3/issues/3124">#3124</a>)</li>
<li><a href="https://github.com/urllib3/urllib3/commit/a3e94f218cd8297db73302eadae235f0c832a809"><code>a3e94f2</code></a> Fix a name of an attribute in docs (<a href="https://github.com/urllib3/urllib3/issues/3125">#3125</a>)</li>
<li><a href="https://github.com/urllib3/urllib3/commit/da69d4f4f95bc7ef9307fc8e0499c2121f1e4791"><code>da69d4f</code></a> Fix docs build (<a href="https://github.com/urllib3/urllib3/issues/3123">#3123</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/urllib3/urllib3/compare/2.0.4...2.0.6">compare view</a></li>
</ul>
</details>
<br />Huste, TobiasHuste, Tobiashttps://codebase.helmholtz.cloud/hifis-software-deployment/checkmk-role/-/merge_requests/107Bump ansible-lint from 6.20.0 to 6.20.22023-10-03T07:41:41+02:00HIFIS BotBump ansible-lint from 6.20.0 to 6.20.2Bumps [ansible-lint](https://github.com/ansible/ansible-lint) from 6.20.0 to 6.20.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/ansible/ansible-lint/releases">ansible-lint's releases</a>.</...Bumps [ansible-lint](https://github.com/ansible/ansible-lint) from 6.20.0 to 6.20.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/ansible/ansible-lint/releases">ansible-lint's releases</a>.</em></p>
<blockquote>
<h2>v6.20.2</h2>
<h2>Bugfixes</h2>
<ul>
<li>Do not use github action path for running ansible lint (<a href="https://github.com/ansible/ansible-lint/issues/3798">#3798</a>) <a href="https://github.com/ReenigneArcher"><code>@ReenigneArcher</code></a></li>
<li>Correct listing of autofix rules in documentation (<a href="https://github.com/ansible/ansible-lint/issues/3797">#3797</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
<li>Make the autofix rule list dynamic in documentation (<a href="https://github.com/ansible/ansible-lint/issues/3785">#3785</a>) <a href="https://github.com/shatakshiiii"><code>@shatakshiiii</code></a></li>
<li>Fix documentation links to autofix page (<a href="https://github.com/ansible/ansible-lint/issues/3796">#3796</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
<li>Bump test dependencies (<a href="https://github.com/ansible/ansible-lint/issues/3795">#3795</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
<li>Correct documentation regarding CLI argument precedence (<a href="https://github.com/ansible/ansible-lint/issues/3792">#3792</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
<li>Document autofix ability for rules that supports it (<a href="https://github.com/ansible/ansible-lint/issues/3791">#3791</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
<li>Accept underline prefix when checking var-naming (<a href="https://github.com/ansible/ansible-lint/issues/3789">#3789</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
<li>Correct regression with use of --fix (<a href="https://github.com/ansible/ansible-lint/issues/3783">#3783</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
</ul>
<h2>v6.20.1</h2>
<h2>Bugfixes</h2>
<ul>
<li>Fix detection of play roles vars missing prefix (<a href="https://github.com/ansible/ansible-lint/issues/3765">#3765</a>) <a href="https://github.com/cavcrosby"><code>@cavcrosby</code></a></li>
<li>Prune reported errors after autofix (<a href="https://github.com/ansible/ansible-lint/issues/3774">#3774</a>) <a href="https://github.com/cidrblock"><code>@cidrblock</code></a></li>
<li><code>--fix</code> will now default to <code>all</code> (<a href="https://github.com/ansible/ansible-lint/issues/3777">#3777</a>) <a href="https://github.com/ajinkyau"><code>@ajinkyau</code></a></li>
<li>Avoid false error caused by TypeError with jinja rule (<a href="https://github.com/ansible/ansible-lint/issues/3773">#3773</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
<li>Sanity Rule Ignore Additions and Updates (<a href="https://github.com/ansible/ansible-lint/issues/3766">#3766</a>) <a href="https://github.com/alisonlhart"><code>@alisonlhart</code></a></li>
<li>Update rulebook schema (name is now required) (<a href="https://github.com/ansible/ansible-lint/issues/3776">#3776</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
<li>Expose rules that have autofix capability in docs (<a href="https://github.com/ansible/ansible-lint/issues/3770">#3770</a>) <a href="https://github.com/shatakshiiii"><code>@shatakshiiii</code></a></li>
<li>List all the fixable rules in CLI via <code>--list-rules</code> (<a href="https://github.com/ansible/ansible-lint/issues/3737">#3737</a>) <a href="https://github.com/shatakshiiii"><code>@shatakshiiii</code></a></li>
<li>Include level in SARIF results (<a href="https://github.com/ansible/ansible-lint/issues/3758">#3758</a>) <a href="https://github.com/ssbarnea"><code>@ssbarnea</code></a></li>
<li>Meta runtime supported version update (<a href="https://github.com/ansible/ansible-lint/issues/3755">#3755</a>) <a href="https://github.com/alisonlhart"><code>@alisonlhart</code></a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/ansible/ansible-lint/commit/55b8b667587295d4fdbbd2f9c90a84455f6ece99"><code>55b8b66</code></a> Do not use github action path for running ansible lint (<a href="https://github.com/ansible/ansible-lint/issues/3798">#3798</a>)</li>
<li><a href="https://github.com/ansible/ansible-lint/commit/ca6922081fce00b8442dea0e93224abcef85ec0f"><code>ca69220</code></a> Correct listing of autofix rules in documentation (<a href="https://github.com/ansible/ansible-lint/issues/3797">#3797</a>)</li>
<li><a href="https://github.com/ansible/ansible-lint/commit/dcca4243e63b0bdbc747874e664b29b957518804"><code>dcca424</code></a> Make the autofix rule list dynamic in documentation (<a href="https://github.com/ansible/ansible-lint/issues/3785">#3785</a>)</li>
<li><a href="https://github.com/ansible/ansible-lint/commit/93b50d8f16250b4fda3d568097f7def5977332bb"><code>93b50d8</code></a> Fix documentation links to autofix page (<a href="https://github.com/ansible/ansible-lint/issues/3796">#3796</a>)</li>
<li><a href="https://github.com/ansible/ansible-lint/commit/715ba9c7211d29367655b317202b70d5fee549a6"><code>715ba9c</code></a> Bump test dependencies (<a href="https://github.com/ansible/ansible-lint/issues/3795">#3795</a>)</li>
<li><a href="https://github.com/ansible/ansible-lint/commit/16ef66a4ddd022a6d55930af9fe4e3ca52fa003e"><code>16ef66a</code></a> Enable useless-supression with pylint (<a href="https://github.com/ansible/ansible-lint/issues/3793">#3793</a>)</li>
<li><a href="https://github.com/ansible/ansible-lint/commit/7e381625d27f4596c957f47947154fc211f43ff1"><code>7e38162</code></a> Correct documentation regarding CLI argument precedence (<a href="https://github.com/ansible/ansible-lint/issues/3792">#3792</a>)</li>
<li><a href="https://github.com/ansible/ansible-lint/commit/54cf3ea7936e1d6f3a5c60c659516f0c16bf69ca"><code>54cf3ea</code></a> Document autofix ability for rules that supports it (<a href="https://github.com/ansible/ansible-lint/issues/3791">#3791</a>)</li>
<li><a href="https://github.com/ansible/ansible-lint/commit/a02e008e5eebf0e32856108d0b73657b0498a37b"><code>a02e008</code></a> Accept underline prefix when checking var-naming (<a href="https://github.com/ansible/ansible-lint/issues/3789">#3789</a>)</li>
<li><a href="https://github.com/ansible/ansible-lint/commit/e4ee3e6a2ae2cec6399c3234014ed4743b86e757"><code>e4ee3e6</code></a> Update test dependencies (<a href="https://github.com/ansible/ansible-lint/issues/3784">#3784</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/ansible/ansible-lint/compare/v6.20.0...v6.20.2">compare view</a></li>
</ul>
</details>
<br />Huste, TobiasHuste, Tobias