Ansible-2.10.7 released.

370 views
Skip to first unread message

Toshio Kuratomi

unread,
Feb 9, 2021, 4:28:36 PM2/9/21
to ansible-devel, ansible...@googlegroups.com, ansible-...@googlegroups.com
Hi all,

We're happy to announce that the ansible-2.10.7 package is now
available! This update contains bugfixes and new, backwards compatible
features in the contained collections.

Ansible-2.10.x is a big change in how the Ansible package is built so
if you missed out on all the changes that have gone into the
ansible-2.10.x packages, please read the announcement for
ansible-2.10.0:
https://groups.google.com/g/ansible-announce/c/QxIOml3i62A

How to get it
-------------

Due to a limitation in pip, if you are upgrading from Ansible 2.9 (or
earlier), you need to uninstall ansible before installing the 2.10
version:

```
$ pip uninstall ansible
$ pip install ansible==2.10.6 --user
```

The tar.gz of the release can be found here:

* Ansible 2.10.6
https://pypi.python.org/packages/source/a/ansible/ansible-2.10.7.tar.gz
SHA256: 9ff024500116d53c460cb09ea92e3c9404119f100d1d1ff0de69a9dafca561d5

What's new in Ansible 2.10.7
----------------------------

We had planned on Ansible-2.10.6 being the last release in the
ansible-2.10.x series but decided that one more release was
appropriate to fix a few important issues.

* The community.docker, community.general, and community.network
collections had multiple modules updated to specify that the
parameters should not be logged as they could contain secret
information. Collectively, these problems are listed in the Common
Vulnerabilities database as CVE-2021-20191.

* The community.general.utm_proxy_auth_profile module has had the
frontend_cookie_secret return value replaced with a placeholder value
as known secret values should not be returned from modules.

* The community.okd collection was downgraded from version 1.0.1 to
version 1.0.0. This was done because 1.0.1 depends on kubernetes.core
which was not shipped in ansible-2.10.x. community.okd-1.0.0 is the
same code but with a dependency on community.kubernetes (which is
included in ansible-2.10.7) instead. The intention for Ansible-3.x is
to include both kubernetes.core and newer versions of community.okd.

* Collections which have opted into being a part of the Ansible-2.10.7
unified changelog will have an entry on this page:
* https://github.com/ansible-community/ansible-build-data/blob/main/2.10/CHANGELOG-v2.10.rst#v2-10-7

* For collections which have not opted into the unified changelog,
consult the list of included collections in the link below and check
their entry on https://galaxy.ansible.com for information about their
changes.
* https://github.com/ansible-community/ansible-build-data/blob/main/2.10/ansible-2.10.7.deps

* You can find more information for those on
https://galaxy.ansible.com/. For instance, the community.crypto
collection listed in the ansible-2.10.6.deps file has a galaxy page at
https://galaxy.ansible.com/community/crypto/

* Changelog for ansible-base-2.10.5 which this release of ansible
installs: https://github.com/ansible/ansible/blob/stable-2.10/changelogs/CHANGELOG-v2.10.rst

What's the schedule for new Ansible releases after 2.10.7?
----------------------------------------------------------

* We expect Ansible-2.10.7 to be the last 2.10.x release.
Ansible-3.0.0rc1 is due out later today. If no blockers are found,
Ansible-3.0.0 final will be released next week. If there is a desire
for further maintenance releases of the 2.10.x version, drop by a
Community Working Group Meeting to discuss how you can help. (
https://github.com/ansible/community/tree/main/meetings#wednesdays )

* The next major release of Ansible (3.0.0) is scheduled for February
16, 2021. This release will still be based on ansible-base-2.10 but
will contain potential incompatible changes to the included
collections.

* We are adopting semantic versioning in that version, so it will be
Ansible-3.0.0 rather than Ansible-2.11.0.

* Patch releases will continue to be released approximately every
three weeks with bugfixes and new features as long as those features
do not cause incompatibilities.

Porting Help
-------------

There's a unified porting guide for collections which have opted-in.
You can find that at:
https://github.com/ansible/ansible/blob/devel/docs/docsite/rst/porting_guides/porting_guide_2.10.rst

Toshio Kuratomi

unread,
Feb 9, 2021, 4:50:41 PM2/9/21
to ansible-devel, ansible...@googlegroups.com, ansible-...@googlegroups.com
Small correction. The pip install instructions should read:

$ pip uninstall ansible
$ pip install ansible==2.10.7 --user


Thanks!
-Toshio
Reply all
Reply to author
Forward
0 new messages