Hi,
I just noticed (via some unit test failures in Zuul) that the Ansible
project just released an update of Ansible 8 (ansible-core 2.15.7) that
includes a breaking change to address CVE-2023-5764.
The release summary:
https://github.com/ansible/ansible/blob/stable-2.15/changelogs/CHANGELOG-v2…
The porting guide:
https://docs.ansible.com/ansible-core/2.15/porting_guides/porting_guide_cor…
In particular one of Zuul's unit tests had an assertion with a nested
template:
assert:
that:
- zuul.project.name == '{{ (zuul | zuul_legacy_vars).ZUUL_PROJECT }}
As you can see from the porting guide, the fix is to remove the nested
template since the assertion is already expected to be a jinja template:
assert:
that:
- zuul.project.name == (zuul | zuul_legacy_vars).ZUUL_PROJECT
This message is just an FYI for anyone who may encounter this and be
surprised by a breaking change at this point.
-Jim