What ansible/ansible shipped
Written by FoxPlug from the repository's own releases; not affiliated with Ansible. Paste your own repository in the box below and FoxPlug writes the same weekly update for your product. This page is an automatic summary of the releases, pull requests and commits in github.com/ansible/ansible; Ansible did not write it and does not use or endorse FoxPlug. Every line links to the change it describes.
Get a weekly update like this for your product, free
Week of October 5, 2026
What shipped
- Ansible-galaxy collection install now validates paths before extraction and errors if FILES.json directory entries or symlink targets would escape the installation path. Pull request #87660
- Exception content is redacted if any error in the chain has
show_contentset to false, so an outer exception cannot unintentionally reveal hidden content. Pull request #87548 - Argument validation no longer crashes when a
no_logoption has a non-string default such as true. Pull request #87624 - The cron module gained an executable parameter for choosing a different crontab executable. Pull request #87575
- Mask_url now handles unparsable URLs, including unicode inputs and bad IPv6 addresses. Pull request #87613
- The sudo become plugin falls back to a sudo-rs compatible regex to handle internationalization, with tests for several locales. Pull request #87620
- Release v2.21.5 was published with a built wheel and source distribution. Release
- Release v2.20.10 was published with a built wheel and source distribution. Release
- Release v2.19.14 was published with a built wheel and source distribution. Release
- Ansible-test-units-forked now works without passing -v by hardcoding the expected PASSED output. Pull request #87662
Why it matters
This week brought three patch releases and several fixes that reduce surprise in everyday use. Collection installation is safer because path escapes are rejected before extraction, and error messages no longer leak content when any error in the chain asks for redaction. Plus, cron becomes configurable, sudo-rs i18n is handled, and unparsable URLs no longer break mask_url.
Changelog entry
- Ansible-galaxy collection install - validate paths before extraction to prevent escape from the installation path. Pull request #87660
- Redact exception content when any error in the chain has
show_contentset to false. Pull request #87548 - Fix a crash on
no_logoptions with non-string defaults. Pull request #87624 - Cron - add an executable parameter for a configurable crontab executable. Pull request #87575
- Mask_url - handle unparsable URLs, including unicode and bad IPv6. Pull request #87613
- Sudo become plugin - handle sudo-rs i18n with a compatible regex fallback. Pull request #87620
- Release v2.21.5. Release
- Release v2.20.10. Release
- Release v2.19.14. Release
- Ansible-test-units-forked works without passing -v. Pull request #87662
This week: safer ansible-galaxy collection installs, redaction that stays intact through error chains, non-string no_log defaults no longer crash validation, configurable cron executable, sudo-rs i18n fallback, mask_url fix, and releases v2.21.5, v2.20.10, and v2.19.14.
This week in Ansible: ansible-galaxy collection install validates paths before extraction and errors if directory entries or symlink targets would escape the installation path. Exception content is redacted if any error in the chain has show_content set to false. Argument validation no longer fails on no_log options with non-string defaults like true. The cron module now accepts an executable parameter. The sudo become plugin version 2.22 handles sudo-rs i18n with a fallback regex and locale tests. mask_url now deals with unparsable URLs, unicode, and bad IPv6. Releases v2.21.5, v2.20.10, and v2.19.14 are available.
Week of September 28, 2026
What shipped
- V2.22.0b2 released with wheel and source distributions available Release
- V2.20.10rc1 released with wheel and source distributions available Release
- V2.21.5rc1 released with wheel and source distributions available Release
- V2.19.14rc1 released with wheel and source distributions available Release
- FreeBSD service module now maps restart action to onerestart to align with documented behavior Pull request #87585
- Sudo become plugin updated to handle sudo-rs i18n prompts with regex instead of word matching Pull request #86964
- Ansible connection plugin now ensures proper permissions for persistent socket directory Pull request #87574
- Mask_url filter improved to handle unparsable URLs containing unicode characters Pull request #87562
- Python 3.9 support dropped from Ansible Pull request #87582
- Secrets keyword for plugin schema backported to stable-2.21 for collection author compatibility Pull request #87514
Why it matters
Four release candidate and beta versions shipped this week across multiple supported versions, providing users with patches and new features across the release branches. Key fixes address FreeBSD service handling, become plugin compatibility, and persistent connection security, while infrastructure changes drop legacy Python support and improve plugin schema validation.
Changelog entry
- Service module on FreeBSD now maps restart action to onerestart Pull request #87585
- Sudo become plugin improved to handle sudo-rs i18n password prompts Pull request #86964
- Mask_url filter now handles unparsable URLs with unicode characters Pull request #87562
- Ansible connection ensures proper permissions for persistent socket directory Pull request #87574
- DNF5 module sets
download_diras documented when download_only=true Pull request #87534 - Python 3.9 support removed Pull request #87582
- Secrets keyword for plugin schema backported to stable-2.21 Pull request #87514
- Secrets keyword for plugin schema backported to stable-2.19 Pull request #87512
- Secrets keyword for plugin schema backported to stable-2.20 Pull request #87513
This week Ansible shipped v2.22.0b2, v2.21.5rc1, v2.20.10rc1, and v2.19.14rc1 with FreeBSD service fixes, sudo-rs i18n support, connection security improvements, and Python 3.9 EOL.
Four Ansible versions shipped this week: v2.22.0b2 beta, plus v2.21.5rc1, v2.20.10rc1, and v2.19.14rc1 release candidates. Notable improvements include FreeBSD service restart action alignment, sudo-rs internationalization support, persistent connection directory permission fixes, and discontinuation of Python 3.9 support.
Week of September 21, 2026
What shipped
- Added
mask_objectmethod to ensure callback task results are automatically redacted before being passed to callbacks, removing the need for callbacks to handle secret masking themselves. Pull request #87559 - Fixed fact aliasing issue where hosts in the same play could see each other's gathered facts when
run_oncetasks were used by copying facts in set_host_facts() instead of storing direct references. Pull request #87503 - Fixed hypervisor detection regression on FreeBSD jails running on bhyve hosts that was causing jail facts to be incorrectly overwritten. Pull request #87508
- Increased test coverage for the secret masker including handling of integers in vaulted lists. Pull request #87560
- Rephrased password documentation for the user module on macOS for clarity. Pull request #87544
Why it matters
This week's updates focus on security improvements through better secret masking across callbacks, fixing critical bugs in fact handling and hypervisor detection that affected multi-host and specialized deployment scenarios, and expanding test coverage to prevent regressions.
Changelog entry
- Security: Added
mask_objectmethod to automatically redact secrets in callback task results. Pull request #87559 - Bugfix: Fixed fact aliasing where hosts could see each other's gathered facts in the same play with
run_oncetasks. Pull request #87503 - Bugfix: Fixed hypervisor detection regression on FreeBSD jails running on bhyve hosts. Pull request #87508
- Testing: Increased secret masker coverage including vaulted list handling. Pull request #87560
- Documentation: Improved macOS password documentation in user module. Pull request #87544
New in Ansible: automatic secret masking in callbacks, fixed fact aliasing in run_once tasks, corrected FreeBSD jail detection, and improved secret masker coverage.
This week's Ansible releases address important infrastructure reliability and security improvements. We've added automatic secret masking for callback results, fixed a fact aliasing bug affecting multi-host plays with run_once tasks, corrected FreeBSD jail hypervisor detection, and expanded secret masker test coverage.