automation: Update devsec.hardening to version 8.8.0 (!1037) · Merge requests · saibotk.de / Infrastructure

This MR contains the following updates:

Package	Type	Update	Change
devsec.hardening (source)	galaxy-collection	minor	`8.7.0` -> `8.8.0`

dev-sec/ansible-collection-hardening (devsec.hardening)

Implemented enhancements:

Add support for Fedora 38 #671
auditd: add possibility to override config template #685 [os_hardening] (Meecr0b)
add debian 12 support #684 [mysql_hardening] [os_hardening] [ssh_hardening] [nginx_hardening] (rndmh3ro)
feat: explicitly support Fedora 37 and 38 #682 [os_hardening] [ssh_hardening] (nejch)
Replace ssh_keys group with root, where applicable and use less permissive file mode #677 [ssh_hardening] (rndmh3ro)
Add oddjob mkhomedir option rhel pam #675 [os_hardening] (imp1sh)

Fixed bugs:

How does one set sshd_authenticationmethods to include password authentication? #686
Error: No file was found when using first_found on Ubuntu 20.04 #676
FreeIPA environment mkhomedir fails #664

Closed issues:

What is the uscase of sysctl_overwrite over ansible.posix.sysctl? #683
Ensure permissions on mysql-logfile are correct chokes when log_error is set to stderr #673
TASK TASK FAILED: [devsec.hardening.os_hardening : Set password ageing for existing regular (non-system, non-root) accounts] #670
After os_hardening ssh not working #663
Unsupported parameters for (ansible.builtin.user) module #650

Merged pull requests:

setting gets ignored #680 [os_hardening] (rndmh3ro)
add var-naming[no-role-prefix] to skip-list #679 (rndmh3ro)
expand on check conditions for non-file locations of logs #674 [mysql_hardening] (whysthatso)
use new molecule-plugins #667 (schurzi)
add spellchecking with codespell #662 [mysql_hardening] [os_hardening] [ssh_hardening] (schurzi)

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about this update again.

This MR has been generated by Renovate Bot. The local configuration can be found in the local Renovate Bot repository.

automation: Update devsec.hardening to version 8.8.0