Release 6.6.9.

ansible-collections · May 19, 2024 · c663a30 · c663a30
1 parent cee1d93
commit c663a30
Show file tree

Hide file tree

Showing 7 changed files with 136 additions and 72 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
diff --git a/CHANGELOG.rst b/CHANGELOG.rst
@@ -6,6 +6,28 @@ Community General Release Notes
 
 This changelog describes changes after version 5.0.0.
 
+v6.6.9
+======
+
+Release Summary
+---------------
+
+Maintenance release.
+
+This is the last 6.x.y release. The 6.x.y release train is now effectively End of Life.
+Thanks to everyone who contributed to the community.general 6.x.y releases!
+
+Security Fixes
+--------------
+
+- keycloak_identity_provider - the client secret was not correctly sanitized by the module. The return values ``proposed``, ``existing``, and ``end_state``, as well as the diff, did contain the client secret unmasked (https://github.com/ansible-collections/community.general/pull/8355).
+
+Bugfixes
+--------
+
+- inventory plugins - add unsafe wrapper to avoid marking strings that do not contain ``{`` or ``}`` as unsafe, to work around a bug in AWX ((https://github.com/ansible-collections/community.general/issues/8212, https://github.com/ansible-collections/community.general/pull/8225).
+- xml - make module work with lxml 5.1.1, which removed some internals that the module was relying on (https://github.com/ansible-collections/community.general/pull/8169).
+
 v6.6.8
 ======
 

diff --git a/changelogs/changelog.yaml b/changelogs/changelog.yaml
@@ -1644,3 +1644,30 @@ releases:
     - inventory-rce.yml
     - pacemaker-cluster.yml
     release_date: '2024-03-25'
+  6.6.9:
+    changes:
+      bugfixes:
+      - inventory plugins - add unsafe wrapper to avoid marking strings that do not
+        contain ``{`` or ``}`` as unsafe, to work around a bug in AWX ((https://github.com/ansible-collections/community.general/issues/8212,
+        https://github.com/ansible-collections/community.general/pull/8225).
+      - xml - make module work with lxml 5.1.1, which removed some internals that
+        the module was relying on (https://github.com/ansible-collections/community.general/pull/8169).
+      release_summary: 'Maintenance release.
+
+
+        This is the last 6.x.y release. The 6.x.y release train is now effectively
+        End of Life.
+
+        Thanks to everyone who contributed to the community.general 6.x.y releases!
+
+        '
+      security_fixes:
+      - keycloak_identity_provider - the client secret was not correctly sanitized
+        by the module. The return values ``proposed``, ``existing``, and ``end_state``,
+        as well as the diff, did contain the client secret unmasked (https://github.com/ansible-collections/community.general/pull/8355).
+    fragments:
+    - 6.6.9.yml
+    - 8169-lxml.yml
+    - 8225-unsafe.yml
+    - 8355-keycloak-idp-sanitize.yaml
+    release_date: '2024-05-19'
diff --git a/changelogs/fragments/6.6.9.yml b/changelogs/fragments/6.6.9.yml
diff --git a/changelogs/fragments/8169-lxml.yml b/changelogs/fragments/8169-lxml.yml
diff --git a/changelogs/fragments/8225-unsafe.yml b/changelogs/fragments/8225-unsafe.yml
diff --git a/changelogs/fragments/8355-keycloak-idp-sanitize.yaml b/changelogs/fragments/8355-keycloak-idp-sanitize.yaml