v3.0.0

Important Changes

Playbooks has gone under an heavy rewrite, please review the changes in the dedicated section

What's Changed

• OPSEXP-3036 Do not run updatecli on tags by @gionn in #1052
• OPSEXP-3006 Move upgrade checks as playbook and add skip variable by @gionn in #1041
• OPSEXP-3015: set secure, sensible yet usable default for max upload files by @alxgomz in #1049
• Disable flaky test_get_sync on arm runners by @gionn in #1055
• OPSEXP-3058 Move supported_os vars to version specific vars file by @pmacius in #1057
• fix case issue on showAuthorizationStatus by @alxgomz in #1056
• OPSEXP-3058 Point community to acs23 vars by @pmacius in #1062
• Bump community version by @pmacius in #1063
• Fix community dtas assertions by @pmacius in #1064
• OPSEXP-3019 Bump python to 3.11 and ansible to 2.17 by @gionn in #1031
• OPSEXP-3041 Refactor activemq role to use default vars by @pmacius in #1059
• Bump cryptography from 42.0.8 to 44.0.1 by @dependabot in #1060
• Bump github/codeql-action from 3.28.7 to 3.28.8 in the github-actions group by @dependabot in #1050
• Bump requests from 2.31.0 to 2.32.3 by @dependabot in #899
• OPSEXP-3043 Refactor audit_storage role to use default vars by @pmacius in #1065
• dependabot: ignore minor updates on ansible-core by @gionn in #1074
• OPSEXP-3042: set ADF download vars as adf_app role's arguments by @alxgomz in #1061
• OPSEXP-3045 Refactor search role to use default vars by @pmacius in #1069
• OPSEXP-3044: add defaults to java role for artifact fetching by @alxgomz in #1067
• OPSEXP-3046 Refactor search_enterprise role to use default vars by @pmacius in #1070
• OPSEXP-3047 Refactor sfs role to use default vars by @pmacius in #1071
• OPSEXP-3048: add sync download vars as role defaults by @alxgomz in #1079
• Bump nokogiri from 1.16.5 to 1.18.3 in /docs by @dependabot in #1081
• Bump pytest from 8.3.3 to 8.3.4 by @dependabot in #1078
• OPSEXP-3051 Refactor tomcat role by @pmacius in #1080
• OPSEXP-3044: pass java_version as an argument for roles depending on java by @alxgomz in #1083
• OPSEXP-3052 Refactor trouter role to use default vars by @pmacius in #1082
• OPSEXP-3053 Refactor transformers_libreoffice to use default vars by @pmacius in #1084
• OPSEXP-3053 Refactor transformers_pdf to use default vars by @pmacius in #1085
• OPSEXP-3053 Refactor transformers_imagemagick to use default vars by @pmacius in #1086
• OPSEXP-3053 Refactor transformers role to use default vars by @pmacius in #1087
• OPSEXP-3054: move jdbc driver vars to sync & repo roles by @alxgomz in #1089
• OPSEXP-3055 Refactor repository war downloads to use defaults by @pmacius in #1088
• OPSEXP-3056 Refactor amps installation to use role defaults by @pmacius in #1090
• Bump actions/cache from 4.2.0 to 4.2.2 in /.github/actions/galaxy by @dependabot in #1093
• Bump the github-actions group across 1 directory with 6 updates by @dependabot in #1092
• Bump prospector from 1.10.3 to 1.11.0 by @dependabot in #1072
• Group all dependabot gha by @gionn in #1097
• Bump the github-actions group in /.github/actions/molecule_integration_ec2 with 2 updates by @dependabot in #1099
• Bump actions/cache from 4.2.0 to 4.2.2 in /.github/actions/setup-python in the github-actions group by @dependabot in #1098
• Group molecule dependabot updates by @gionn in #1101
• Bump pytest from 8.3.4 to 8.3.5 by @dependabot in #1096
• OPSEXP-3057 Refactor repository role to use default vars by @pmacius in #1091
• OPSEXP-3010 Add most common security headers by @gionn in #1068
• OPSEXP-3057 Add missing prefix for repository role vars by @pmacius in #1105
• OPSEXP-3118: move ES version to version vars by @alxgomz in #1104
• OPSEXP-3057 Move leftover repository group vars into role defaults and playbook group vars by @pmacius in #1106
• OPSEXP-3040 Move postgres major version var to version specific file by @pmacius in #1107
• OPSEXP-3040 Move sync_db vars from group vars by @pmacius in #1108
• OPSEXP-3040 Move nexus related vars out of group vars by @pmacius in #1109
• OPSEXP-3040 Remove urls related vars from group vars by @pmacius in #1110
• OPSEXP-3106: search role vars cleanup by @alxgomz in #1113
• OPSEXP-3106: cleanup ats mtls keystores vars by @alxgomz in #1114
• OPSEXP-3106: align sync role vars to match role name by @alxgomz in #1116
• OPSEXP-3162 Replace extra-vars files with the acs_play_major_version var by @pmacius in #1115
• Bump ansible-lint from 25.1.2 to 25.1.3 by @dependabot in #1103
• Bump jinja2 from 3.1.5 to 3.1.6 by @dependabot in #1118
• OPSEXP-3106: miscellaneous var cleanup by @alxgomz in #1117
• OPSEXP-3106 Add missing acs_play_ prefix for audit storage vars by @pmacius in #1121
• OPSEXP-3107 Bumps with updatecli v2 by @gionn in #1120
• OPSEXP-3168 Fix documentation after moving to default vars 📝 by @pmacius in #1119
• OPSEXP-3106: rename sfs and trouter download vars as artifacts are not zip 💅 by @alxgomz in #1122
• Fixup base folder in apply_amps by @gionn in #1008
• OPSEXP-3169 Support ubuntu 24.04 in vagrant config by @gionn in #1123
• OPSEXP-3106: change role var names as checksum may not be urls by @alxgomz in #1124
• OPSEXP-3168: update main readme by @alxgomz in #1125
• OPSEXP-3107 Support amps bumps via updatecli by @gionn in #1128
• OPSEXP-3107 Support bumping versions in roles defaults by @gionn in #1129
• Bump yamllint from 1.35.1 to 1.36.2 by @dependabot in #1130
• OPSEXP-3174 Prevent http credentials in ansible logs by @gionn in #1131
• Bump galaxy collections by @gionn in #1132
• OPSEXP-3176 Automate AMI bumps with updatecli by @gionn in https://gith...

v2.13.0

What's Changed

• OPSEXP-2930 Point links to support.hyland.com by @pmacius in #1009
• DOCS-7967 Fix docs reference where known_urls should be set by @gionn in #1010
• OPSEXP-2955 Avoid resetting permissions on mounted shared content storage by @gionn in #1018
• OPSEXP-2951 Enable elasticsearch 8 major version by @pmacius in #1021
• Update dependency amazon.aws to v8.2.2 by @alfresco-build in #1023
• Update dependency community.general to v9.5.3 by @alfresco-build in #1011
• Update dependency ansible.posix to v2 by @alfresco-build in #1012
• Update dependency community.crypto to v2.23.0 by @alfresco-build in #1013
• Update dependency community.postgresql to v3.9.1 by @alfresco-build in #1000
• Bump jinja2 from 3.1.4 to 3.1.5 by @dependabot in #1024
• OPSEXP-2954 Bump galaxy deps by @gionn in #1025
• OPSEXP-2954 Support ubuntu 24.04 by @gionn in #1020
• OPSEXP-3019 Switch to arm64 GA runners by @gionn in #1030
• OPSEXP-2923 Bump keycloak to v25 by @gionn in #1036
• OPSEXP-3066 Switch to build-tools updatecli action by @gionn in #1039
• Fix updatecli pipeline for community by @gionn in #1040
• OPSEXP-3036 Bump versions for pegasus release by @gionn in #1044
• OPSEXP-3036 Bump to latest tomcat patch and update README by @gionn in #1051

Full Changelog: v2.12.0...v2.13.0

v2.12.0 (ACS 23.4.0)

What's Changed

• OPSEXP-2927 ADW/ACC config via group vars by @gionn in #984
• Bump ansible-core from 2.15.12 to 2.15.13 by @dependabot in #985
• OPSEXP-2755 Update the docs with new artifact path by @pmacius in #989
• OPSEXP-2972 Workaround apache mirror flakiness with controller cache by @gionn in #999
• OPSEXP-2941 Bump versions for Orion release by @gionn in #998
• OPSEXP-2972 Ensure downloads cache is already available on matrix jobs by @gionn in #1004
• OPSEXP-2880 Add audit-storage role by @gionn in #996
• OPSEXP-2941 Bump readme and stack patches by @gionn in #1006

Full Changelog: v2.11.2...v2.12.0

v2.11.2

What's Changed

• OPSEXP-2895 Revert broken sync amp version which impair indexing in search enterprise by @gionn in #968
• OPSEXP-2147 Drop helper_modules role by @gionn in #956

Full Changelog: v2.11.1...v2.11.2

v2.11.1

What's Changed

• OPSEXP-2874 Bump Search Services to 2.0.12 by @gionn in #965

• Update dependency ansible.utils to v5.1.2 by @alfresco-build in #958

• Update dependency community.postgresql to v3.6.1 by @alfresco-build in #959

Full Changelog: v2.11.0...v2.11.1

v2.11.0

What's Changed

• OPSEXP-2753 Trigger ec2 test when PR label ec2-test is added and on master branch by @pmacius in #945
• OPSEXP-2121 Add kics scan by @pmacius in #947
• Bump webrick from 1.8.1 to 1.8.2 in /docs by @dependabot in #948
• OPSEXP-2121 Fix permission for sarif report from KICS by @pmacius in #949
• OPSEXP-2121 Fix permission on KICS workflow by @pmacius in #950
• Update dependency middleware_automation.keycloak to v2.4.2 by @alfresco-build in #951
• Update dependency community.general to v9.4.0 by @alfresco-build in #954
• Update dependency ansible.posix to v1.6.0 by @alfresco-build in #952
• Bump google-protobuf from 4.26.1 to 4.27.5 in /docs by @dependabot in #946
• Update dependency community.crypto to v2.22.0 by @alfresco-build in #953
• OPSEXP-2870 Bump components for Libra release by @pmacius in #957

Full Changelog: v2.10.2...v2.11.0

v2.10.2

What's Changed

• OPSEXP-2830: always escape % (also fixes consecutive %) by @alxgomz in #940
• OPSEXP-2674 Disable implicit flow with newer adw by @gionn in #877
• OPSEXP-2832 Explicit failure when unable to generate secrets during secrets-init by @gionn in #941

Full Changelog: v2.10.1...v2.10.2

v2.10.1

What's Changed

• OPSEXP-2824 do not check for adw which is a stateless frontend app by @gionn in #935
• OPSEXP-2827: escape % char in systemd unit env vars by @alxgomz in #936

Full Changelog: v2.10.0...v2.10.1

v2.10.0

What's Changed

• Bump ansible-core from 2.15.11 to 2.15.12 by @dependabot in #910
• OPSEXP-2747 Avoid configuring repository with search enterprise for community by @gionn in #908
• OPSEXP-2704 ARM64 ImageMagick by @gionn in #892
• OPSEXP-2760 Switch to new ARM64 runners by @gionn in #922
• OPSEXP-2777 Revert to last official AMI for ubuntu 18.04 by @gionn in #932
• OPSEXP-2777 Bump components for Indus release by @gionn in #930

Full Changelog: v2.9.0...v2.10.0

v2.9.0

What's Changed

• OPSEXP-2691 Add aarch64 support in java role by @gionn in #876
• OPSEXP-2668 Bump keycloak to 24.0.5 by @gionn in #884
• Fix pages validation when adding new pages by @gionn in #885
• OPSEXP-2693 Drop support for Centos/RHEL 7 by @pmacius in #891
• Bump urllib3 from 1.26.18 to 1.26.19 by @dependabot in #888
• OPSEXP-2636 Set passphrase secrets when mtls is required and capable by @pmacius in #889
• Bump Alfresco/alfresco-build-tools from 5.25.0 to 5.30.0 in /.github/actions/molecule_integration_ec2 by @dependabot in #897
• Update dependency community.general to v8.6.2 by @alfresco-build in #893
• OPSEXP-2637: refactor postgres role to generate syncservice database credentials only when needed by @alxgomz in #894
• Bump Alfresco/alfresco-build-tools from 5.30.0 to 5.31.0 in /.github/actions/molecule_integration_ec2 by @dependabot in #900
• Bump certifi from 2023.11.17 to 2024.7.4 by @dependabot in #898
• Update dependency ansible.utils to v5 by @alfresco-build in #887
• Bump ansible-lint from 6.14.3 to 6.22.2 by @dependabot in #805
• Update dependency community.general to v9 by @alfresco-build in #879
• Update dependency community.aws & amazon.aws to v8 by @alfresco-build in #878
• OPSEXP-2739: bump Alfresco components and third parties by @alxgomz in #901
• OPSEXP-2739: update comments with new AMI names [skip ci] by @alxgomz in #903

Full Changelog: v2.8.0...v2.9.0