cisagov / skeleton-ansible-role

A skeleton project for quickly getting a new cisagov Ansible role started.
Creative Commons Zero v1.0 Universal
7 stars 6 forks source link

Bump up the lower bound on `ansible-core` #209

Closed jsf9k closed 2 days ago

jsf9k commented 2 weeks ago

๐Ÿ—ฃ Description

This pull request bumps up the lower bound on the ansible-core Python package.

See also cisagov/skeleton-generic#196 and the commits cisagov/skeleton-packer@26a8bafe25f49a099a07342a1539e4dd6eb60095 and cisagov/skeleton-packer@19fbaf3e1a6da801ce796509b8187ff1aa541d43 in cisagov/skeleton-packer#376.

Supplants #208.

๐Ÿ’ญ Motivation and context

This is being done because the pip-audit pre-commit hook identifies a vulnerability in ansible-core version 2.16.13. Note that this requires that we bump up the version of ansible to version 10 since all versions of ansible 9 have a dependency on ansible-core~=2.16.X.

๐Ÿงช Testing

All automated tests pass.

โœ… Pre-approval checklist