Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update dependency ansible-core to v2.15.9 [security] #12

Merged
merged 1 commit into from
Mar 18, 2024

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Mar 17, 2024

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
ansible-core (source) ==2.15.6 -> ==2.15.9 age adoption passing confidence

GitHub Vulnerability Alerts

CVE-2023-5764

A template injection flaw was found in Ansible where a user's controller internal templating operations may remove the unsafe designation from template data. This issue could allow an attacker to use a specially crafted file to introduce code injection when supplying templating data.

CVE-2024-0690

An information disclosure flaw was found in ansible-core due to a failure to respect the ANSIBLE_NO_LOG configuration in some scenarios. It was discovered that information is still included in the output in certain tasks, such as loop items. Depending on the task, this issue may include sensitive information, such as decrypted secret values.


Release Notes

ansible/ansible (ansible-core)

v2.15.9

Compare Source

Changelog

See the full changelog for the changes included in this release.

Release Artifacts

v2.15.8

Compare Source

Changelog

See the full changelog for the changes included in this release.

Release Artifacts

v2.15.7

Compare Source

Changelog

See the full changelog for the changes included in this release.

Release Artifacts


Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@ppat ppat force-pushed the renovate/pypi-ansible-core-vulnerability branch from e1a5b99 to 2981bc6 Compare March 18, 2024 01:57
@ppat ppat merged commit 070af95 into main Mar 18, 2024
4 checks passed
@renovate renovate bot deleted the renovate/pypi-ansible-core-vulnerability branch March 18, 2024 02:03
ppat pushed a commit that referenced this pull request Apr 27, 2024
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
ppat pushed a commit that referenced this pull request May 5, 2024
## 1.0.0 (2024-05-05)

### ⚙️ Other

* **deps:** bump tar and npm ([#31](#31)) ([3378cd9](3378cd9))
* **deps:** update all python major dependencies (major) ([#7](#7)) ([d818016](d818016))
* **deps:** update all python non-major dependencies ([#16](#16)) ([f3a4ab9](f3a4ab9))
* **deps:** update all python non-major dependencies ([#18](#18)) ([617a0cc](617a0cc))
* **deps:** update all python non-major dependencies ([#4](#4)) ([8331d9f](8331d9f))
* **deps:** update dependency ansible-core to v2.15.9 [security] ([#12](#12)) ([a833378](a833378))
* **deps:** update dependency ansible-core to v2.16.6 ([#25](#25)) ([4db290e](4db290e))
* **deps:** update dependency k3s-io/k3s to v1.29.4+k3s1 ([#24](#24)) ([7469ff8](7469ff8))
* **deps:** update dependency nestybox/sysbox to v0.6.4 ([#41](#41)) ([1e1c6c4](1e1c6c4))
* **deps:** upgrade commitlint and semantic-release while fixing breaking changes with require in commitlint ([#32](#32)) ([5df8c42](5df8c42))
* **deps:** remove unused dependency 'commitizen' and enable 'sysbox' to be upgraded by renovate ([#38](#38)) ([84b5e4f](84b5e4f))
* **k3s:** fix k3s github action where branch was selected incorrectly when run on main branch ([#36](#36)) ([e0148af](e0148af))
* **k3s:** fix k3s github action where branch was selected incorrectly when run on main branch ([#37](#37)) ([07eda30](07eda30))
* **other:** add renovate config for updating versions in yaml files ([6307a62](6307a62))
* **other:** update renovate config for github actions update ([#40](#40)) ([0f6fac4](0f6fac4))
* **release:** update release github-action to publish to ansible-galaxy ([#43](#43)) ([94788c1](94788c1))

### ✨ Features

* **archive:** introduce homelab_ops.archive collection ([#13](#13)) ([7474b89](7474b89))
* **block_device:** introduce homelab_ops.block_device collection ([#14](#14)) ([d2f77a5](d2f77a5))
* **configure:** introduce homelab_ops.configure collection ([#19](#19)) ([d3dc563](d3dc563))
* **k3s:** introduce homelab_ops.k3s collection ([#22](#22)) ([0e3c4be](0e3c4be))
* **os:** introduce homelab_ops.os collection ([#30](#30)) ([d71ccfd](d71ccfd))
* **packages:** introduce homelab_ops.packages collection ([3d4a4c7](3d4a4c7))
* **raspberry_pi:** introduce homelab_ops.raspberry_pi collection ([#33](#33)) ([12aec3a](12aec3a))

### 🐛 Enhancements + Bug Fixes

* **deps:** update all npm non-major dependencies ([#5](#5)) ([4c7a63b](4c7a63b))
ppat pushed a commit that referenced this pull request May 6, 2024
## 1.0.0 (2024-05-06)

### ⚙️ Other

* **deps:** bump tar and npm ([#31](#31)) ([3378cd9](3378cd9))
* **deps:** update all python major dependencies (major) ([#7](#7)) ([d818016](d818016))
* **deps:** update all python non-major dependencies ([#16](#16)) ([f3a4ab9](f3a4ab9))
* **deps:** update all python non-major dependencies ([#18](#18)) ([617a0cc](617a0cc))
* **deps:** update all python non-major dependencies ([#4](#4)) ([8331d9f](8331d9f))
* **deps:** update dependency ansible-core to v2.15.9 [security] ([#12](#12)) ([a833378](a833378))
* **deps:** update dependency ansible-core to v2.16.6 ([#25](#25)) ([4db290e](4db290e))
* **deps:** update dependency k3s-io/k3s to v1.29.4+k3s1 ([#24](#24)) ([7469ff8](7469ff8))
* **deps:** update dependency nestybox/sysbox to v0.6.4 ([#41](#41)) ([1e1c6c4](1e1c6c4))
* **deps:** upgrade commitlint and semantic-release while fixing breaking changes with require in commitlint ([#32](#32)) ([5df8c42](5df8c42))
* **deps:** remove unused dependency 'commitizen' and enable 'sysbox' to be upgraded by renovate ([#38](#38)) ([84b5e4f](84b5e4f))
* **k3s:** fix k3s github action where branch was selected incorrectly when run on main branch ([#36](#36)) ([e0148af](e0148af))
* **k3s:** fix k3s github action where branch was selected incorrectly when run on main branch ([#37](#37)) ([07eda30](07eda30))
* **other:** add renovate config for updating versions in yaml files ([6307a62](6307a62))
* **other:** update renovate config for github actions update ([#40](#40)) ([0f6fac4](0f6fac4))
* **release:** update release github-action to publish to ansible-galaxy ([#43](#43)) ([d10c74e](d10c74e))

### ✨ Features

* **archive:** introduce homelab_ops.archive collection ([#13](#13)) ([7474b89](7474b89))
* **block_device:** introduce homelab_ops.block_device collection ([#14](#14)) ([d2f77a5](d2f77a5))
* **configure:** introduce homelab_ops.configure collection ([#19](#19)) ([d3dc563](d3dc563))
* **k3s:** introduce homelab_ops.k3s collection ([#22](#22)) ([0e3c4be](0e3c4be))
* **os:** introduce homelab_ops.os collection ([#30](#30)) ([d71ccfd](d71ccfd))
* **packages:** introduce homelab_ops.packages collection ([3d4a4c7](3d4a4c7))
* **raspberry_pi:** introduce homelab_ops.raspberry_pi collection ([#33](#33)) ([12aec3a](12aec3a))

### 🐛 Enhancements + Bug Fixes

* **deps:** update all npm non-major dependencies ([#5](#5)) ([4c7a63b](4c7a63b))
ppat pushed a commit that referenced this pull request May 6, 2024
## 1.0.0 (2024-05-06)

### ⚙️ Other

* **deps:** bump tar and npm ([#31](#31)) ([3378cd9](3378cd9))
* **deps:** update all python major dependencies (major) ([#7](#7)) ([d818016](d818016))
* **deps:** update all python non-major dependencies ([#16](#16)) ([f3a4ab9](f3a4ab9))
* **deps:** update all python non-major dependencies ([#18](#18)) ([617a0cc](617a0cc))
* **deps:** update all python non-major dependencies ([#4](#4)) ([8331d9f](8331d9f))
* **deps:** update dependency ansible-core to v2.15.9 [security] ([#12](#12)) ([a833378](a833378))
* **deps:** update dependency ansible-core to v2.16.6 ([#25](#25)) ([4db290e](4db290e))
* **deps:** update dependency k3s-io/k3s to v1.29.4+k3s1 ([#24](#24)) ([7469ff8](7469ff8))
* **deps:** update dependency nestybox/sysbox to v0.6.4 ([#41](#41)) ([1e1c6c4](1e1c6c4))
* **deps:** upgrade commitlint and semantic-release while fixing breaking changes with require in commitlint ([#32](#32)) ([5df8c42](5df8c42))
* **deps:** remove unused dependency 'commitizen' and enable 'sysbox' to be upgraded by renovate ([#38](#38)) ([84b5e4f](84b5e4f))
* **k3s:** fix k3s github action where branch was selected incorrectly when run on main branch ([#36](#36)) ([e0148af](e0148af))
* **k3s:** fix k3s github action where branch was selected incorrectly when run on main branch ([#37](#37)) ([07eda30](07eda30))
* **other:** add renovate config for updating versions in yaml files ([6307a62](6307a62))
* **other:** update renovate config for github actions update ([#40](#40)) ([0f6fac4](0f6fac4))
* **release:** update release github-action to publish to ansible-galaxy ([#43](#43)) ([ae73039](ae73039))

### ✨ Features

* **archive:** introduce homelab_ops.archive collection ([#13](#13)) ([7474b89](7474b89))
* **block_device:** introduce homelab_ops.block_device collection ([#14](#14)) ([d2f77a5](d2f77a5))
* **configure:** introduce homelab_ops.configure collection ([#19](#19)) ([d3dc563](d3dc563))
* **k3s:** introduce homelab_ops.k3s collection ([#22](#22)) ([0e3c4be](0e3c4be))
* **os:** introduce homelab_ops.os collection ([#30](#30)) ([d71ccfd](d71ccfd))
* **packages:** introduce homelab_ops.packages collection ([3d4a4c7](3d4a4c7))
* **raspberry_pi:** introduce homelab_ops.raspberry_pi collection ([#33](#33)) ([12aec3a](12aec3a))

### 🐛 Enhancements + Bug Fixes

* **deps:** update all npm non-major dependencies ([#5](#5)) ([4c7a63b](4c7a63b))
ppat pushed a commit that referenced this pull request May 6, 2024
## 1.0.0 (2024-05-06)

### ⚙️ Other

* **deps:** bump tar and npm ([#31](#31)) ([3378cd9](3378cd9))
* **deps:** update all python major dependencies (major) ([#7](#7)) ([d818016](d818016))
* **deps:** update all python non-major dependencies ([#16](#16)) ([f3a4ab9](f3a4ab9))
* **deps:** update all python non-major dependencies ([#18](#18)) ([617a0cc](617a0cc))
* **deps:** update all python non-major dependencies ([#4](#4)) ([8331d9f](8331d9f))
* **deps:** update dependency ansible-core to v2.15.9 [security] ([#12](#12)) ([a833378](a833378))
* **deps:** update dependency ansible-core to v2.16.6 ([#25](#25)) ([4db290e](4db290e))
* **deps:** update dependency k3s-io/k3s to v1.29.4+k3s1 ([#24](#24)) ([7469ff8](7469ff8))
* **deps:** update dependency nestybox/sysbox to v0.6.4 ([#41](#41)) ([1e1c6c4](1e1c6c4))
* **deps:** upgrade commitlint and semantic-release while fixing breaking changes with require in commitlint ([#32](#32)) ([5df8c42](5df8c42))
* **deps:** remove unused dependency 'commitizen' and enable 'sysbox' to be upgraded by renovate ([#38](#38)) ([84b5e4f](84b5e4f))
* **k3s:** fix k3s github action where branch was selected incorrectly when run on main branch ([#36](#36)) ([e0148af](e0148af))
* **k3s:** fix k3s github action where branch was selected incorrectly when run on main branch ([#37](#37)) ([07eda30](07eda30))
* **other:** add renovate config for updating versions in yaml files ([6307a62](6307a62))
* **other:** update renovate config for github actions update ([#40](#40)) ([0f6fac4](0f6fac4))
* **release:** update release github-action to publish to ansible-galaxy ([#43](#43)) ([a37f6d1](a37f6d1))

### ✨ Features

* **archive:** introduce homelab_ops.archive collection ([#13](#13)) ([7474b89](7474b89))
* **block_device:** introduce homelab_ops.block_device collection ([#14](#14)) ([d2f77a5](d2f77a5))
* **configure:** introduce homelab_ops.configure collection ([#19](#19)) ([d3dc563](d3dc563))
* **k3s:** introduce homelab_ops.k3s collection ([#22](#22)) ([0e3c4be](0e3c4be))
* **os:** introduce homelab_ops.os collection ([#30](#30)) ([d71ccfd](d71ccfd))
* **packages:** introduce homelab_ops.packages collection ([3d4a4c7](3d4a4c7))
* **raspberry_pi:** introduce homelab_ops.raspberry_pi collection ([#33](#33)) ([12aec3a](12aec3a))

### 🐛 Enhancements + Bug Fixes

* **deps:** update all npm non-major dependencies ([#5](#5)) ([4c7a63b](4c7a63b))
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant