automation: Update devsec.hardening to version 9

This MR contains the following updates:

Package	Type	Update	Change
devsec.hardening	galaxy-collection	major	8.8.0 -> 9.0.0

---

Release Notes

dev-sec/ansible-collection-hardening (devsec.hardening)

v9.0.0

Compare Source

Full Changelog

Breaking changes:

• make it possible to configure more then yes and no for PermitTunnel #​715 [ssh_hardening] (rndmh3ro)
• add role argument spec for os, ssh, mysql #​687 [mysql_hardening] [os_hardening] [ssh_hardening] [nginx_hardening] (rndmh3ro)

Implemented enhancements:

• Create role documentation with Automated-Ansible-Role-Documentation #​694
• Minimize access user paths should be fully configurable #​689
• Add support for Debian 12 #​672
• add testing and support for current versions of Fedora and FreeBSD #​709 [os_hardening] [ssh_hardening] (schurzi)
• feat: workflow for roles readme #​705 [ssh_hardening] (Nemental)
• do not try to drop roles in mysql hardening #​649 [mysql_hardening] (rndmh3ro)

Fixed bugs:

• nginx conf.d directory is missing on Rocky Linux 8 #​707
• Default value of ssh_client_alive_interval is inconsistent with what documentation says #​701
• [devsec.hardening.os_hardening : restart-auditd] fails #​698
• sshd_hardening role cannot be used to build system images #​697
• Error: No file was found when using first_found on Ubuntu 20.04 #​676
• PUBLIC-role breaks mysql-hardening #​648
• Error deploying the playbook #​630
• Gather facts when os_hardening role is executed with tags #​708 [os_hardening] (schurzi)

Closed issues:

• Dependency Dashboard #​655
• Add send-to-mailinglist to github release action #​434

Merged pull requests:

• update status badges in README #​714 [mysql_hardening] [os_hardening] [ssh_hardening] [nginx_hardening] (schurzi)
• fix CI test for os_hardening #​711 [os_hardening] (schurzi)
• fix nginx CI tests #​710 [nginx_hardening] (schurzi)
• fix: roles-readme action default value #​706 [ssh_hardening] (Nemental)
• fix some wrong defaults and types in the readmes #​703 [mysql_hardening] [os_hardening] [ssh_hardening] [nginx_hardening] (rndmh3ro)
• update links to new Ansible Galaxy #​702 [nginx_hardening] (schurzi)
• Fix typo in login.defs.j2 #​700 [os_hardening] (nejch)
• chore(deps): update actions/checkout action to v4 #​696 [mysql_hardening] [os_hardening] [ssh_hardening] [nginx_hardening] (renovate[bot])
• test debian12 on VM #​695 (rndmh3ro)
• fix descriptions in readme #​693 [os_hardening] (rndmh3ro)
• feat: customize user paths default #​692 [os_hardening] (S0obi)
• disable PAM tests #​691 [os_hardening] (rndmh3ro)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about this update again.

---

• If you want to rebase/retry this MR, check this box

---

This MR has been generated by Renovate Bot. The local configuration can be found in the local Renovate Bot repository.