Track external Ansible deprecation warnings

[claytono]

Summary

We have deprecation warnings from external dependencies that we cannot fix directly. These are tracked in our CI allowlist (ansible/deprecation-allowlist.yaml) but should be monitored for upstream fixes.

Current External Deprecations

1. INJECT_FACTS_AS_VARS (oefenweb.postfix)

Source: oefenweb.postfix Galaxy role
Issue: Uses ansible_virtualization_role, ansible_virtualization_type instead of ansible_facts['...']
Upstream: https://github.com/Oefenweb/ansible-postfix

2. Importing from ansible.module_utils._text (ansible.posix.sysctl)

Source: ansible.posix collection v2.1.0
Issue: The sysctl module imports to_native from the private ansible.module_utils._text module
Upstream: This is a bug in the ansible.posix collection itself

Action Items

• Monitor oefenweb.postfix for update that fixes INJECT_FACTS_AS_VARS
• Check if newer ansible.posix versions fix the _text import
• Consider forking oefenweb.postfix if no upstream fix forthcoming

[github-actions]

Issue Triage Report

Status: BLOCKED

Upstream Dependencies

1. INJECT_FACTS_AS_VARS (oefenweb.postfix)

Repo: Oefenweb/ansible-postfix

• Current version in repo: v3.8.1 (latest)
• State: No upstream fix - deprecation still present in latest release
• The role uses ansible_virtualization_role and ansible_virtualization_type directly instead of ansible_facts['...'] syntax (line 11 of tasks/main.yml)
• No issue has been filed upstream for this deprecation
• Last release: v3.8.1 (2025-12-21) - only fixed a linebreak, no deprecation fix

2. to_native import from ansible.module_utils._text (ansible.posix)

Issue: #695 - ansible.posix.authorized_key deprecation warning

• State: Open
• Created: 2025-12-10
• Last activity: 2026-01-19
• Notable: Comments confirm sysctl and mount modules also affected

Issue: #686 - synchronize: deprecation warning to_text

• State: Open
• Created: 2025-11-09
• Related deprecation for to_text import

PR: #689 - Fix to_native deprecation warning in authorized_key module

• State: Open (no reviews)
• Created: 2025-11-24
• Last activity: 2025-11-24 (stale for ~2 months)

PR: #690 - Fix deprecated module_utils imports (synchronize, mount)

• State: Open (no reviews)
• Created: 2025-11-26
• Last activity: 2025-12-24 (stale for ~1 month)
• Fixes synchronize and mount modules but not sysctl (which this repo uses)

Note: Latest ansible.posix release is v2.1.0 (2025-07-17) - predates the fix PRs.

What's Needed

1. oefenweb.postfix:

   • File an upstream issue requesting fix for INJECT_FACTS_AS_VARS deprecation
   • Or fork and fix locally if upstream is unresponsive

2. ansible.posix:

   • PRs Update ghcr.io/linuxserver/qbittorrent:5.1.2 Docker digest to a5b277b #689 and Update pre-commit hook astral-sh/ruff-pre-commit to v0.14.5 #690 need to be reviewed and merged
   • A fix for the sysctl module is still needed - neither PR addresses it despite it being mentioned in the issue comments
   • New release of ansible.posix collection needed after merges
   • Renovate will create PR when new version is available

Summary

Both deprecations are blocked on upstream fixes. The ansible.posix fixes have open PRs but they're stale and incomplete (sysctl not covered). The oefenweb.postfix deprecation has no upstream issue filed.

[claytono]

Submitted upstream PR for the oefenweb.postfix INJECT_FACTS_AS_VARS deprecation: Oefenweb/ansible-postfix#152

[github-actions]

Issue Triage Report

Status: BLOCKED

Upstream Dependencies

1. INJECT_FACTS_AS_VARS (oefenweb.postfix)

PR: Fix INJECT_FACTS_AS_VARS deprecation warning

• State: Open
• Created: 2026-01-25
• Author: @claytono (this repo's owner)
• Last activity: 2026-01-25
• Reviews: Copilot provided automated review, no human reviews yet
• Notable: Fixes all deprecated fact references (ansible_fqdn, ansible_domain, ansible_virtualization_role, ansible_virtualization_type)

Current version: v3.8.1 (2025-12-21) - does not include fix

2. to_native import from ansible.module_utils._text (ansible.posix)

Issue: #695 - ansible.posix.authorized_key deprecation warning

• State: Open
• Created: 2025-12-10
• Last activity: 2026-01-19
• Notable: Comments confirm sysctl and mount modules also affected

PR: #689 - Fix to_native deprecation warning in authorized_key module

• State: Open (no reviews)
• Created: 2025-11-24
• Stale: ~2 months without activity

PR: #690 - Fix deprecated module_utils imports (synchronize, mount)

• State: Open (no reviews)
• Created: 2025-11-26
• Last activity: 2025-12-24
• Notable: Fixes synchronize and mount modules but not sysctl

Current version: v2.1.0 (2025-07-17) - predates all fix PRs

What's Needed

1. oefenweb.postfix:

   • PR Add ArgoCD applications for reloader and ingress-nginx #152 needs review and merge from upstream maintainer
   • New release required after merge
   • Renovate will create PR when new version is available on Galaxy

2. ansible.posix:

   • PRs Update ghcr.io/linuxserver/qbittorrent:5.1.2 Docker digest to a5b277b #689 and Update pre-commit hook astral-sh/ruff-pre-commit to v0.14.5 #690 need review and merge (both stale)
   • A fix for the sysctl module is still missing - neither PR addresses it
   • New release of ansible.posix collection needed after merges
   • Renovate will create PR when new version is available

What Changed

• Previous status: No upstream PR existed for oefenweb.postfix deprecation
• Now: PR Add ArgoCD applications for reloader and ingress-nginx #152 submitted by @claytono on 2026-01-25 to fix INJECT_FACTS_AS_VARS deprecation
• Issue remains BLOCKED pending PR merge and new release

[github-actions]

Issue Triage Report

Status: BLOCKED

Upstream Dependencies

1. INJECT_FACTS_AS_VARS (oefenweb.postfix) - RESOLVED upstream

PR: Fix INJECT_FACTS_AS_VARS deprecation warning

• State: Merged (2026-01-27)
• Author: @claytono

Release: v3.8.2

• Released: 2026-01-27
• Includes the INJECT_FACTS_AS_VARS deprecation fix

This repo: Still on v3.8.1. No Renovate PR has been created yet for the v3.8.2 update. Once Renovate picks it up, the oefenweb.postfix deprecation allowlist entries can be removed.

2. to_native import from ansible.module_utils._text (ansible.posix)

Issue: #695 - ansible.posix.authorized_key deprecation warning

• State: Open
• Created: 2025-12-10
• Last activity: 2026-01-29
• Notable: Confirmed to affect sysctl, mount, and authorized_key modules

PR: #689 - Fix to_native deprecation warning in authorized_key module

• State: Closed (not merged, 2026-01-29)
• Superseded by PR Update pre-commit hook astral-sh/ruff-pre-commit to v0.14.5 #690 which aims to consolidate all deprecated import fixes

PR: #690 - Fix deprecated module_utils imports (synchronize, mount)

• State: Open (no maintainer reviews)
• Created: 2025-11-26
• Last activity: 2026-01-29
• Notable: Currently only fixes synchronize and mount modules. Discussion ongoing (2026-01-29) about expanding scope to cover all remaining deprecated imports across the collection (including sysctl, authorized_key, acl, patch, callbacks, and others - 15+ files still affected)
• sysctl module (used by this repo) is NOT yet covered by this PR
• No maintainer has reviewed or approved the PR

Current version: v2.1.0 (2025-07-17) - no new release since fix PRs were opened

What's Needed

1. oefenweb.postfix: Upstream fix Done. Waiting for Renovate to create a PR updating from v3.8.1 to v3.8.2. After that, the INJECT_FACTS_AS_VARS deprecation allowlist entries can be cleaned up.

2. ansible.posix:

   • PR Update pre-commit hook astral-sh/ruff-pre-commit to v0.14.5 #690 needs to be expanded to cover sysctl module (and ideally all remaining deprecated imports)
   • PR Update pre-commit hook astral-sh/ruff-pre-commit to v0.14.5 #690 needs maintainer review and merge
   • New ansible.posix release needed (still at v2.1.0 from July 2025)
   • Renovate will create PR when new version is available

What Changed

• Previous status (2026-01-27): oefenweb.postfix PR Add ArgoCD applications for reloader and ingress-nginx #152 was open, ansible.posix PRs Update ghcr.io/linuxserver/qbittorrent:5.1.2 Docker digest to a5b277b #689 and Update pre-commit hook astral-sh/ruff-pre-commit to v0.14.5 #690 both open
• Now:
  • oefenweb.postfix PR Add ArgoCD applications for reloader and ingress-nginx #152 merged and v3.8.2 released - this blocker is resolved upstream, awaiting Renovate update
  • ansible.posix PR Update ghcr.io/linuxserver/qbittorrent:5.1.2 Docker digest to a5b277b #689 closed (superseded by Update pre-commit hook astral-sh/ruff-pre-commit to v0.14.5 #690)
  • ansible.posix PR Update pre-commit hook astral-sh/ruff-pre-commit to v0.14.5 #690 still open with active discussion about expanding scope to cover all 15+ affected files (including sysctl, which this repo uses)
• Overall status remains BLOCKED due to ansible.posix

[github-actions]

Issue Triage Report

Status: BLOCKED

Upstream Dependencies

1. INJECT_FACTS_AS_VARS (oefenweb.postfix) - RESOLVED upstream, awaiting Renovate

PR: Fix INJECT_FACTS_AS_VARS deprecation warning

• State: Merged (2026-01-27)

Release: v3.8.2

• Released: 2026-01-27
• Includes the INJECT_FACTS_AS_VARS deprecation fix

This repo: Still on v3.8.1 (see ansible/requirements.yml). No Renovate PR has been created for the v3.8.2 update. This may require a manual version bump since Galaxy roles are pinned in requirements.yml and may not be covered by Renovate's configured managers.

2. to_native import from ansible.module_utils._text (ansible.posix)

Issue: #695 - ansible.posix.authorized_key deprecation warning

• State: Open
• Created: 2025-12-10
• Last activity: 2026-01-29

PR: #690 - Fix all deprecated module_utils imports before ansible-core 2.24 removal

• State: Open
• Created: 2025-11-26
• Last activity: 2026-02-16
• Major update (2026-02-15): @barpavel expanded the PR to fix ALL deprecated ansible.module_utils imports across the entire collection — 26 files fixed in dedicated commits, including sysctl.py (which this repo uses). Zero deprecated imports remain.
• CI: All relevant checks pass (sanity, unit, integration). Remaining CI failures are infrastructure issues affecting all PRs in the repo.
• Still no maintainer review. No maintainer has reviewed or approved the PR.

Current version: v2.1.0 (2025-07-17) — no new release since fix PRs were opened

What's Needed

1. oefenweb.postfix: Upstream fix is done and released. Either wait for Renovate to create a PR, or manually bump ansible/requirements.yml from v3.8.1 to v3.8.2. After updating, the INJECT_FACTS_AS_VARS deprecation allowlist entries can be removed.

2. ansible.posix:

   • PR Update pre-commit hook astral-sh/ruff-pre-commit to v0.14.5 #690 needs maintainer review and merge (comprehensive fix is ready, CI passes)
   • New ansible.posix release needed (still at v2.1.0 from July 2025)
   • Renovate will create PR when new version is available

What Changed

• Previous status (2026-02-03): PR Update pre-commit hook astral-sh/ruff-pre-commit to v0.14.5 #690 only fixed synchronize and mount modules; sysctl was NOT covered. Discussion was ongoing about expanding scope.
• Now: PR Update pre-commit hook astral-sh/ruff-pre-commit to v0.14.5 #690 was significantly expanded on 2026-02-15 to fix ALL 26 files with deprecated imports, including sysctl.py. All relevant CI checks pass. The PR is now comprehensive but still awaits maintainer review.
• The oefenweb.postfix situation is unchanged — still awaiting Renovate PR or manual bump.
• Overall status remains BLOCKED due to ansible.posix needing maintainer merge and release.

[github-actions]

Issue Triage Report

Status: BLOCKED

Upstream Dependencies

1. INJECT_FACTS_AS_VARS (oefenweb.postfix) - FULLY RESOLVED

PR: Fix INJECT_FACTS_AS_VARS deprecation warning

• State: Merged (2026-01-27)

Release: v3.8.2

• Released: 2026-01-27

This repo: Updated to v3.8.2 in ansible/requirements.yml. The INJECT_FACTS_AS_VARS entries have been removed from the deprecation allowlist. This dependency is fully resolved.

2. to_native import from ansible.module_utils._text (ansible.posix)

Issue: #695 - ansible.posix.authorized_key deprecation warning

• State: Open
• Created: 2025-12-10
• Last activity: 2026-01-29

PR: #690 - Fix all deprecated module_utils imports before ansible-core 2.24 removal

• State: Open
• Created: 2025-11-26
• Last activity: 2026-02-21
• Covers all deprecated imports including sysctl.py (used by this repo)
• CI passes on all relevant checks
• Still no maintainer review — community members are waiting for merge (comments on 2026-02-20 and 2026-02-21)

Current version: v2.1.0 (2025-07-17) — no new release since fix PRs were opened. A 3.0.0 release is being planned (#681) but preparation is incomplete.

What's Needed

1. oefenweb.postfix — Done. Fully resolved in this repo.

2. ansible.posix:

   • PR Update pre-commit hook astral-sh/ruff-pre-commit to v0.14.5 #690 needs maintainer review and merge (comprehensive fix is ready, CI passes, ~3 months without maintainer review)
   • New ansible.posix release needed (still at v2.1.0 from July 2025 — 7+ months without a release)
   • Renovate will create PR when new version is available

What Changed

• Previous status (2026-02-17): oefenweb.postfix v3.8.2 was released but this repo was still on v3.8.1, awaiting Renovate update or manual bump.
• Now: This repo has been updated to oefenweb.postfix v3.8.2 and the INJECT_FACTS_AS_VARS deprecation allowlist entries have been cleaned up. This dependency is fully resolved.
• ansible.posix PR Update pre-commit hook astral-sh/ruff-pre-commit to v0.14.5 #690 remains open with no maintainer review. Recent community comments (2026-02-20, 2026-02-21) express frustration at the wait.
• Overall status remains BLOCKED due to ansible.posix needing maintainer merge and release.