Your message dated Wed, 09 Jul 2025 16:04:49 +0000
with message-id <e1uzxht-00d0fm...@fasolo.debian.org>
and subject line Bug#1106362: fixed in ansible-core 2.19.0~rc2-1
has caused the Debian Bug report #1106362,
regarding ansible-core: Changes in templating system breaks all my playbooks
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
1106362: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1106362
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: ansible-core
Version: 2.19.0~beta4-1
Severity: important
Forwarded: https://github.com/ansible/ansible/issues/85202
X-Debbugs-Cc: t...@debian.org
For the past few years, I have wrote thousands of lines of code to build
complex playbooks. Since Jinja filters are not powerful enough for complex
transformations and it does not allow generator expressions, many of these
templates need to use hacks such as these:
```yaml
test: |-
{% set result = [] %}
{% for key in data %}
{% if <condition> %}
{% set _ = result.append(key) %}
{% endif %}
{% endfor %}
{{ result }}
```
The changes introduced in #84621 broke this by disallowing access to methods
with known side-effects, which seems like a good idea, but there was no
deprecation period and there is is no way to disable this change temporarily.
This means that 2.19 will break all my code, and it will take me months to
rewrite all those templates.. If I find a way to do it with the severely
limited jinja language!
I really don't think Trixie should ship with a version of ansible that will
cause so much headache to users. This is still a beta release, and upstream is
still receiving bugs related to the breaking changes they introduced. Please
consider rolling it back to 2.18.
-- System Information:
Debian Release: 13.0
APT prefers testing
APT policy: (500, 'testing'), (50, 'unstable'), (10, 'experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 6.12.27-amd64 (SMP w/8 CPU threads; PREEMPT)
Locale: LANG=en_IE.UTF-8, LC_CTYPE=en_IE.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages ansible-core depends on:
ii openssh-client 1:10.0p1-5
ii python3 3.13.3-1
ii python3-cryptography 43.0.0-3
ii python3-dnspython 2.7.0-1
ii python3-httplib2 0.22.0-1
ii python3-jinja2 3.1.6-1
ii python3-netaddr 1.3.0-1
ii python3-packaging 25.0-1
ii python3-paramiko 3.5.1-2
ii python3-resolvelib 1.1.0-1
ii python3-yaml 6.0.2-1+b2
Versions of packages ansible-core recommends:
ii ansible 12.0.0~a2+dfsg-1
ii python3-argcomplete 3.6.2-1
ii python3-jmespath 1.0.1-1
pn python3-kerberos <none>
pn python3-libcloud <none>
pn python3-passlib <none>
pn python3-selinux <none>
pn python3-winrm <none>
ii python3-xmltodict 0.13.0-1
Versions of packages ansible-core suggests:
pn cowsay <none>
ii sshpass 1.10-0.1
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: ansible-core
Source-Version: 2.19.0~rc2-1
Done: Lee Garrett <deb...@rocketjump.eu>
We believe that the bug you reported is fixed in the latest version of
ansible-core, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 1106...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Lee Garrett <deb...@rocketjump.eu> (supplier of updated ansible-core package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 09 Jul 2025 16:19:24 +0200
Source: ansible-core
Architecture: source
Version: 2.19.0~rc2-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Python Team <team+pyt...@tracker.debian.org>
Changed-By: Lee Garrett <deb...@rocketjump.eu>
Closes: 1106362
Changes:
ansible-core (2.19.0~rc2-1) unstable; urgency=medium
.
* New upstream version 2.19.0~rc1
- templating - Relaxed the Jinja sandbox to allow specific bitwise
operations which have no filter equivalent. The allowed methods are
__and__, __lshift__, __or__, __rshift__, __xor__. (Closes: #1106362)
- templating - Switched from the Jinja immutable sandbox to the standard
sandbox. This restores the ability to use mutation methods such as
list.append and dict.update.
- Bugfix: Update automatic role argument spec validation to not use
deprecated syntax.
- Bugfix: ssh connection plugin - Allow only one password prompt attempt
when utilizing SSH_ASKPASS.
* New upstream version 2.19.0~rc2
- Add deprecation warnings to YAML parsing, config settings, playbooks, and
the public API.
Checksums-Sha1:
b3869bd83613d79d54a88faf2705e3c9623b66ee 2972 ansible-core_2.19.0~rc2-1.dsc
095bcd350c7573aa0d175cc2905d911e78449d47 3400380
ansible-core_2.19.0~rc2.orig.tar.gz
345280b09754045898e94eca42bc9512c144c367 28848
ansible-core_2.19.0~rc2-1.debian.tar.xz
eb682db751ece1d8bfc09fad7216ec22b51b579b 7496
ansible-core_2.19.0~rc2-1_amd64.buildinfo
Checksums-Sha256:
354dc4fe37080d3ee2bacaaa836a7575084ecb38b73d3375e8a21aafd74b3229 2972
ansible-core_2.19.0~rc2-1.dsc
3ef31998e8c67f5559347707045bb05136b84f7106552ffcebe99b851997205a 3400380
ansible-core_2.19.0~rc2.orig.tar.gz
b9604861664e2c8c7ef4f2d05554b7de1b45fcce9ad31ff61db925acd8efe511 28848
ansible-core_2.19.0~rc2-1.debian.tar.xz
27a50b09f07eb20ee56e226f567c7dad8aa6ecbf021c09ae20bc66a8fe6c5cc8 7496
ansible-core_2.19.0~rc2-1_amd64.buildinfo
Files:
dc6e694bc2c57b6889377276a7aa2eb7 2972 admin optional
ansible-core_2.19.0~rc2-1.dsc
10007b3afb1e0d3e5db4b4ed204cdf02 3400380 admin optional
ansible-core_2.19.0~rc2.orig.tar.gz
b86b67a73fe80bc14cc4caf818f7bd0b 28848 admin optional
ansible-core_2.19.0~rc2-1.debian.tar.xz
da399233d9211fa76fa10c86c30cc34e 7496 admin optional
ansible-core_2.19.0~rc2-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iQQzBAEBCgAdFiEE2EfGJRCpwv8kLOAs1gShxII+4PgFAmhujgYACgkQ1gShxII+
4PjJ+h//fSR8Utxop1WWhTGOmGL2+hlV16ZCaQjQtm7udUYyJqczNVcpkPJUbg0v
pui+B0NnszULVn4fTYOK2DvP8u+hHNXHuNkU5jAPP3noaepIAtVxktWGHSbR865n
KkQAiLbVvzoteuForq2++dANIFy86VfMYjv0+xAm0Xv/y9ti/9l03UZjElV48BrF
A5gdbCrtv6AUpMXXY4Ep8aMYm9qSis95slIzNXHWfzTKOX2dink2Qs5iNWcuQ7xY
Tcz55Jdzj3tvooo775kyXcXzJomEbntL/xqWmEFyIdWyZw+ZBoWxh4C5AZAM8KAh
8HUNxzpBpoy4+MYskvGb2HRYEtLLL2Qy1zUOP7acMV0dX3c2PBUCZ9wLrjTdjs+l
vtBy2BUyaKHg0YcqQK8w8cp3lcAFWrxtnQFZ/P+Ash5YOxugVcUqH4elr+xI5j2c
cppBO5ZFB9T/wJ1p3EcNz1L7AIcc2nsUkaRXqHPXmb7OwtGGx1a6QaXhDgKyPAOf
Aw9mjch57GAWd9efTcXhov5eGhZqEMHMzFKCi3kA/NVNKH6Gcsh9AsA4KKomGf7r
FTVju1JR4UBNQjsSul/jHHlsWy7NcQ8RpihRnhuYm6QCk8xOOl3KQVopr7ZCPL8j
K7sOqWZ7vrk6iYNtKFnV3N8aFd5KaeJ8mea2gBpVkiOdaCCkzXzqLjd/2rDT9oxD
bJRJnoo0Yk7Z1avlYCkvHaCMH+BnH7QdYN/+PxGAERUOQ12AjIbdt64tfY4srvHC
JzK++UAZqkZsWO+taChvKWThc6xdnTMp+s9EdGP3kthtAIIJv+2YlLBhJFot8+st
dnc7jmpiT8SFwJHj5p8GrTB5EDTR0NKRE5CrF/X3sAEGT9jVSoGgBmrEyo+SlrBX
LV/OGp5ZX3Vo/zAfPmGMhYQmL37gYq+VhD6l7RA5pkFpnW6mZ7abmxFwnT+Cx5pU
+dDT8WFMQk179AzpRUU+AXFbx6TTJtyaIXzQn5ZNI1GYCfxwsEN+2i5rYkugqLeB
uL6DdpbjgDmwJpRapKpxpm9OGTcjbeZCCaFL5xTFdkPUlpzP+mCL8QxJLQYQe+FL
JTa3rfI5bQ2M2U8tmaOuK4ZirxNGiqAmfQ0/fb6kHA/4N6EWzBKUtBv/dNoBR2H7
YklNZHGe+CD14ZmW1Ryn1JO8f6AGwpPpB47EwyKANqWPAbeH3QhGgW+XVF3FEeoX
sSi7uzjqTYo4q17VKwRVpos1Eih8yNowFr7NfVgwMz+Dr5pNXh6nRuY8kuVs4aj1
fXcQcdYeTWePu1ZWyKcsiGRUCE43akN7Ymcz5IAMTOrbiv3k5/kfJaQ89TRw4BFZ
tdua1Ce8k8mC0D+xY29EdV3LMomCAQ==
=yZZl
-----END PGP SIGNATURE-----
pgpefqNOEnOYd.pgp
Description: PGP signature
--- End Message ---
