automation: Update devsec.hardening to version 8.5.0

This MR contains the following updates:

Package	Type	Update	Change
devsec.hardening (source)	galaxy-collection	minor	8.4.0 -> 8.5.0

---

Release Notes

dev-sec/ansible-collection-hardening

v8.5.0

Compare Source

Full Changelog

Implemented enhancements:

• Add support for /etc/auditd.conf num_logs to go with max_log_file_action #​616
• password ageing not enforced #​570
• Rewrite system account detection and hardening and create tests #​621 [os_hardening] [ssh_hardening] (rndmh3ro)
• Add support for /etc/auditd.conf num_logs to go with max_log_file_action #​617 [os_hardening] (richardlock)
• Preserve default ownership and dir mode for /var/log on Ubuntu #​615 [os_hardening] (stdtom)
• rewrite user home dir hardening #​584 [os_hardening] (DonEstefan)
• apply password age settings to exisiting regular users #​582 [os_hardening] (DonEstefan)
• Parametrize more auditd.conf options #​535 [os_hardening] (kravietz)

Fixed bugs:

• os_hardening is setting wrong ownership for /var/log on Ubuntu #​614
• [os_hardening] Task for setting initramfs modules does not match its condition #​590 [os_hardening]
• Support for Amazon Linux 2 #​624 [ssh_hardening] (mmitnyan)

Deprecated:

• deprecate rebuilding of initramfs #​618 [os_hardening] (rndmh3ro)

Closed issues:

• Ubuntu 22.04 vars file missing? #​619
• SSH KexAlgorithms causes SSH daemon to fail #​500
• Playbook won't run for hardening #​462

Merged pull requests:

• do not let dependabot label our prs #​626 (rndmh3ro)
• run linting only when files inside roles change #​625 (rndmh3ro)
• cancel running tests if new commit to branch is made #​622 [mysql_hardening] [os_hardening] [ssh_hardening] [nginx_hardening] (rndmh3ro)
• Fixed problems with running molecule locally with cgroup v2 #​620 [mysql_hardening] [os_hardening] [ssh_hardening] [nginx_hardening] (rndmh3ro)
• Bump actions/setup-python from 1 to 4 #​611 [mysql_hardening] [os_hardening] [ssh_hardening] [nginx_hardening] (dependabot[bot])
• Bump creyD/prettier_action from 3.1 to 4.2 #​610 (dependabot[bot])
• linting #​603 [mysql_hardening] [os_hardening] [ssh_hardening] [nginx_hardening] (rndmh3ro)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about this update again.

---

• If you want to rebase/retry this MR, check this box

---

This MR has been generated by Renovate Bot. The local configuration can be found in the local Renovate Bot repository.