Bring CI/CD up to date and resolve Python 3 cryptography issue (#250)

Author: alessfg

.ansible-lint

@@ -1,6 +1,8 @@
 ---
+exclude_paths:
+  - .github/
 offline: true
 skip_list:
-  - args[module]
   - name[template]
+  - schema[meta]
   - yaml[line-length]

.github/release-drafter.yml

@@ -1,6 +1,7 @@
 ---
 name-template: "$RESOLVED_VERSION"
 tag-template: "$RESOLVED_VERSION"
+include-pre-releases: true
 categories:
   - title: "💣 Breaking Changes"
     labels:

.github/workflows/galaxy.yml

@@ -11,10 +11,10 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Check out the codebase
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: Set up Python 3
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@v5
         with:
           python-version: 3.x
 

.github/workflows/molecule.yml

@@ -13,9 +13,36 @@ on:
     - cron: "0 0 1 * *"
   workflow_dispatch:
 jobs:
+  ansible-lint:
+    name: Ansible Lint
+    runs-on: ubuntu-22.04
+    steps:
+      - name: Check out the codebase
+        uses: actions/checkout@v4
+
+      - name: Set up Python 3
+        uses: actions/setup-python@v5
+        with:
+          python-version: 3.x
+
+      - name: Install Ansible Lint
+        run: pip3 install -r .github/workflows/requirements/requirements_ansible_lint.txt
+
+      - name: Install Ansible collection dependencies
+        run: ansible-galaxy install -r .github/workflows/requirements/requirements_ansible.yml
+
+      - name: Run Ansible Lint
+        run: ansible-lint --force-color
+
   molecule:
     name: Molecule
     runs-on: ubuntu-22.04
+    needs: ansible-lint
+    env:
+      NGINX_CRT: ${{ secrets.NGINX_CRT }}
+      NGINX_KEY: ${{ secrets.NGINX_KEY }}
+      RHEL_USERNAME: ${{ secrets.RHEL_USERNAME }}
+      RHEL_PASSWORD: ${{ secrets.RHEL_PASSWORD }}
     strategy:
       fail-fast: false
       matrix:
@@ -27,10 +54,10 @@ jobs:
           - uninstall
     steps:
       - name: Check out the codebase
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: Set up Python 3
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@v5
         with:
           python-version: 3.x
 
@@ -46,7 +73,4 @@ jobs:
         env:
           PY_COLORS: 1
           ANSIBLE_FORCE_COLOR: 1
-          NGINX_CRT: ${{ secrets.NGINX_CRT }}
-          NGINX_KEY: ${{ secrets.NGINX_KEY }}
-          RHEL_USERNAME: ${{ secrets.RHEL_USERNAME }}
-          RHEL_PASSWORD: ${{ secrets.RHEL_PASSWORD }}
+

.github/workflows/requirements/requirements_ansible.yml

@@ -1,10 +1,10 @@
 ---
 collections:
   - name: ansible.posix
-    version: 1.4.0
-  - name: community.crypto
-    version: 2.10.0
+    version: 1.5.4
   - name: community.general
-    version: 6.2.0
+    version: 6.4.0
+  - name: community.crypto
+    version: 2.14.1
   - name: community.docker # Only required if you plan to use Molecule
-    version: 3.4.0
+    version: 3.4.7

.github/workflows/requirements/requirements_ansible_lint.txt

@@ -0,0 +1,5 @@
+ansible-core==2.16.2
+jinja2==3.1.3
+ansible-compat==4.1.11
+yamllint==1.33.0
+ansible-lint==6.22.1

.github/workflows/requirements/requirements_galaxy.txt

@@ -1 +1 @@
-ansible-core==2.14.4
+ansible-core==2.16.2

.github/workflows/requirements/requirements_molecule.txt

@@ -1,6 +1,6 @@
-ansible-core==2.14.4
-Jinja2==3.1.2
-ansible-lint==6.15.0
-yamllint==1.30.0
-molecule[docker]==4.0.4
-docker==6.0.1
+ansible-core==2.16.2
+jinja2==3.1.3
+ansible-compat==4.1.11
+molecule==6.0.3
+molecule-plugins[docker]==23.5.0
+docker==7.0.0

CHANGELOG.md

@@ -1,5 +1,18 @@
 # Changelog
 
+## 0.9.1 (Unreleased)
+
+ENHANCEMENTS:
+
+- Bump the Ansible `ansible.posix` collection to `1.5.4`, `community.general` collection to `6.4.0`, `community.crypto` collection to `2.14.1` and `community.docker` collection to `3.4.7`.
+- Oracle Linux 8 requires the Python `python3.11-cryptography` package for validating the NGINX App Protect repository certificate.
+
+CI/CD:
+
+- Split Ansible Lint into its own GitHub Actions job since Molecule no longer runs linters natively.
+- Replace `molecule[docker]` with `molecule` and `molecule-plugins[docker]`.
+- Add pre-releases to Release Drafter.
+
 ## 0.9.0 (January 29, 2023)
 
 FEATURES:

molecule/advanced/molecule.yml

@@ -5,9 +5,6 @@ dependency:
     role-file: molecule/advanced/requirements.yml
 driver:
   name: docker
-lint: |
-  set -e
-  ansible-lint --force-color
 platforms:
   - name: test-workload
     image: nginxdemos/hello