Merge branch 'main' into ssh-keys-add-debian-13-support

Author: Normo

.github/workflows/lint.yml

@@ -24,4 +24,4 @@ jobs:
         uses: "actions/checkout@v6"
 
       - name: "Lint code."
-        uses: "ansible/ansible-lint@v25.11.1"
+        uses: "ansible/ansible-lint@v25.12.1"

CHANGELOG.md

@@ -1,5 +1,15 @@
 # Changelog
 
+## [v6.3.2](https://github.com/hifis-net/ansible-collection-toolkit/tree/v6.3.2) (2025-12-01)
+
+[Full Changelog](https://github.com/hifis-net/ansible-collection-toolkit/compare/v6.3.1...v6.3.2)
+
+**Merged pull requests:**
+
+- Prepare release version 6.3.2 [\#541](https://github.com/hifis-net/ansible-collection-toolkit/pull/541) ([Normo](https://github.com/Normo))
+- gitlab: restrict file permission for gitlab.rb [\#540](https://github.com/hifis-net/ansible-collection-toolkit/pull/540) [[gitlab](https://github.com/hifis-net/ansible-collection-toolkit/labels/gitlab)] ([Normo](https://github.com/Normo))
+- gitlab: fix sensitive information disclosure [\#539](https://github.com/hifis-net/ansible-collection-toolkit/pull/539) [[gitlab](https://github.com/hifis-net/ansible-collection-toolkit/labels/gitlab)] ([Normo](https://github.com/Normo))
+
 ## [v6.3.1](https://github.com/hifis-net/ansible-collection-toolkit/tree/v6.3.1) (2025-11-28)
 
 [Full Changelog](https://github.com/hifis-net/ansible-collection-toolkit/compare/v6.3.0...v6.3.1)

CITATION.cff

@@ -36,5 +36,5 @@ authors:
     orcid: 'https://orcid.org/0000-0002-5028-6663'
 repository-code: 'https://github.com/hifis-net/ansible-collection-toolkit'
 repository-artifact: 'https://galaxy.ansible.com/ui/repo/published/hifis/toolkit/'
-version: v6.3.1'
-date-released: '2025-11-28'
+version: v6.3.2'
+date-released: '2025-12-01'

galaxy.yml

@@ -5,7 +5,7 @@
 
 namespace: 'hifis'
 name: 'toolkit'
-version: '6.3.1'
+version: '6.3.2'
 readme: 'README.md'
 authors:
   - 'HIFIS Software Services <support@hifis.net>'

pyproject.toml

@@ -5,7 +5,7 @@
 
 [project]
 name = "ansible-collection-toolkit"
-version = "6.3.1"
+version = "6.3.2"
 description = "This collection provides production-ready Ansible roles used for providing services used in research and by research software engineers, but not exclusively."
 readme = "README.md"
 requires-python = ">=3.11"

roles/gitlab/tasks/check.yml

@@ -23,6 +23,7 @@
     __gitlab_registry_config: "{{ item.registry }}"
   when: "item.registry is defined"
   loop: "{{ gitlab_additional_configurations }}"
+  no_log: "{{ gitlab_hide_sensitive_changes }}"
 
 - name: "Check if database key is defined in registry"
   ansible.builtin.set_fact:

roles/gitlab/tasks/configure.yml

@@ -31,6 +31,7 @@
       ansible.builtin.set_fact:
         __gitaly_item: "{{ item.gitaly }}"
       with_items: "{{ gitlab_additional_configurations }}"
+      no_log: "{{ gitlab_hide_sensitive_changes }}"
 
     - name: "Check if gitaly['configuration'] is present"
       when:
@@ -39,6 +40,7 @@
       ansible.builtin.set_fact:
         __gitaly_configuration_exists: true
       with_items: "{{ __gitaly_item | default([]) }}"
+      no_log: "{{ gitlab_hide_sensitive_changes }}"
 
     - name: "Warn if gitaly['configuration'] is already present"
       when:
@@ -53,7 +55,7 @@
     dest: "{{ gitlab_configuration_file_path }}"
     owner: "root"
     group: "root"
-    mode: "0644"
+    mode: "0600"
   no_log: "{{ gitlab_hide_sensitive_changes }}"
   notify:
     - "Reconfigure Primary GitLab"