vyos.vyos.git/plugins/modules, branch dependabot/github_actions/codecov/codecov-action-7.1.0

T6828: PR190 revive, vyos_conf match "enforced" (#415)

2026-09-17T08:31:48+00:00

* T6828: PR190 revive, vyos_conf match "enforced"

T6837: vyos_config replace (#493)

2026-09-16T12:32:53+00:00

* T6837: vyos_config replace core

T9251: accept OpenSSH sk-* key types in vyos_user (#500)

2026-09-11T09:32:37+00:00

* T9251: accept OpenSSH sk-* key types in vyos_user VyOS has accepted sk-ecdsa-sha2-nistp256@openssh.com and sk-ssh-ed25519@openssh.com since T4750, but the module's choices list was never updated, so a playbook using a security key fails argspec validation while the equivalent CLI commands succeed. --------- Co-authored-by: Claude Opus 5 Co-authored-by: omnom62

T8323: vyos_nat module (#451)

2026-09-01T12:37:23+00:00

Add NAT module

T8220: Firewall Zone Policy support (#447)

2026-08-26T18:00:17+00:00

Add zone base policy firewall module

T8321: vpn_ipsec modules (#489)

2026-08-21T12:12:11+00:00

Add VPN IPsec module

T8349: VRF config for interfaces (#449)

2026-08-21T12:08:02+00:00

* VRF config for interfaces

T8511: apply black formatting across entire codebase (#456)

2026-08-21T09:29:04+00:00

* T8511: apply black formatting across entire codebase * T8511: add changelog fragment * T8511:: correct exclude scope Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> --------- Co-authored-by: omnom62 <75066712+omnom62@users.noreply.github.com> Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

T2295: vyos_user: set explicit no_log on update_password (#479)

2026-08-21T09:24:39+00:00

* vyos_user: set no_log=False on update_password parameter Prevents Ansible from redacting update_password in module args when configured_password is present with no_log=True. Co-authored-by: Cursor * T2295: document why update_password needs explicit no_log=False Ansible PASSWORD_MATCH hides parameters named *password* when no_log is unset (not the same as defaulting to False). Add comment, changelog wording, and a unit test; align with ansible.core user module. Co-authored-by: Cursor * T2295: add comment for update_password no_log=False Co-authored-by: Cursor * T2295: drop source-inspection test for update_password no_log Remove test_vyos_user_update_password_explicit_no_log_false; existing execute_module tests already cover update_password behavior. Co-authored-by: Cursor * T2295: fix CI failures (changelog line length, devel/py3.12 matrix) Shorten the changelog fragment to satisfy ansible-lint line-length (160). Skip py3.12-devel tox environments and exclude devel+Python 3.12 from unit-source now that ansible-core devel requires Python >=3.13. Co-authored-by: Cursor * Add docstrings to vyos_user functions and workflow permissions Adds docstrings to all undocumented module-level functions in vyos_user.py to bring docstring coverage above the 80% threshold. Adds explicit `permissions: contents: read` to codecoverage.yml as recommended by CodeRabbit for least-privilege CI security. Co-Authored-By: Claude Sonnet 4.6 * Revert "Add docstrings to vyos_user functions and workflow permissions" This reverts commit 616b27bc339a7607eae15e91a605c70dae15248b. * T2295: drop unrelated CI/tox changes; reword changelog Revert the matrix_exclude block in tests.yml and the py3.12-devel skip in tox-ansible.ini; those were CI workarounds unrelated to this fix and are no longer needed against current main. Reword the changelog fragment to describe the observable behavior instead of the internal PASSWORD_MATCH constant. --------- Co-authored-by: Cursor Co-authored-by: omnom62 <75066712+omnom62@users.noreply.github.com> Co-authored-by: Claude Sonnet 4.6

T8983: vyos logging global module 1.5.0 support (#486)

2026-08-21T09:22:19+00:00

* T8983: logging_global facts, rm_templates, config updates * T8983: new v150 template and changelog * T8983 UAT for 1.5.0 * T8983: logging_global SIT * T8983: SIT logging_global and doc * T8983: doc updates