New releases: ansible-base 2.10.8, ansible 2.9.20, ansible 2.8.20

[Rick Elrod]

Hi all- we're happy to announce that the general release of ansible-base 2.10.8,
ansible 2.9.20, and ansible 2.8.20 are now available!

Note that this is the final release of the 2.8 series of Ansible, and the final
bugfix release of the 2.9 series of Ansible. All future Ansible 2.9 releases are
planned to be security fixes only.

On the subject of security: ansible 2.9.20 and ansible 2.8.20 both contain
several security fixes. In particular, they address a flaw (CVE-2021-3447)
where some modules did not mask sensitive parameters, which led to those
parameters' values being logged on the managed node, and in some cases printed
to the console of the controller node.


How to get it
-------------

$ pip install ansible-base==2.10.8 --user
or
$ pip install ansible==2.9.20 --user
or
$ pip install ansible==2.8.20 --user

The tar.gz of the release can be found here:

* ansible-base 2.10.8
https://pypi.python.org/packages/source/a/ansible-base/ansible-base-2.10.8.tar.gz
SHA256: f45df824051339d8bec32d7ab4e9e676498c05e2d9cfce6d54c9698a577e15e2

* ansible 2.9.20
https://releases.ansible.com/ansible/ansible-2.9.20.tar.gz
SHA256: 73a271b9b2081a254deaa7347583d8bd97142b67c891e463ff2302006c5c8c38

* ansible 2.8.20
https://releases.ansible.com/ansible/ansible-2.8.20.tar.gz
SHA256: f0672d138cf79cd39197952df0f8c761aac27c639a8ff7bdbd62cf463a7edaea


What's new
----------

This release is a maintenance release containing numerous bugfixes. The full
changelog is at:

* ansible-base 2.10.8
https://github.com/ansible/ansible/blob/stable-2.10/changelogs/CHANGELOG-v2.10.rst

* ansible 2.9.20
https://github.com/ansible/ansible/blob/stable-2.9/changelogs/CHANGELOG-v2.9.rst

* ansible 2.8.20
https://github.com/ansible/ansible/blob/stable-2.8/changelogs/CHANGELOG-v2.8.rst


What's the schedule for future maintenance releases?
----------------------------------------------------

For the 2.8 series, there will be no further releases.

With this release, Ansible 2.9 now enters security-only mode, and so all future
fixes will address security issues only, not general bugfixes.

The next batch of release candidates can be expected 2 weeks from today (one
week earlier than usual), to coincide with the scheduled release of ansible-core
2.11.0. That is, 26 April 2021.


Porting Help
------------

We've published a porting guide at
https://docs.ansible.com/ansible/devel/porting_guides/porting_guide_2.10.html
to help migrate your content to 2.10.


If you discover any errors or if any of your working playbooks break when you
upgrade to 2.10.8, please use the following link to report the regression:

https://github.com/ansible/ansible/issues/new/choose

In your issue, be sure to mention the version that works and the one that
doesn't.

Thanks!

-Rick Elrod