build(deps): bump ansible from 11.13.0 to 14.1.0

Bumps [ansible](https://github.com/ansible-community/ansible-build-data) from 11.13.0 to 14.1.0.
- [Changelog](https://github.com/ansible-community/ansible-build-data/blob/main/docs/release-process.md)
- [Commits](https://github.com/ansible-community/ansible-build-data/compare/11.13.0...14.1.0)

---
updated-dependencies:
- dependency-name: ansible
  dependency-version: 14.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

.github/workflows/auto-label-os.yml

@@ -13,7 +13,7 @@ jobs:
       issues: write
 
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
 
       - name: Parse issue form
         uses: stefanbuck/github-issue-parser@cb6e97157cbf851e3a393ff8d57c93a484cc323f

.github/workflows/upgrade-patch-versions.yml

@@ -11,7 +11,7 @@ jobs:
   update-patch-versions:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
+    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
       with:
         ref: ${{ inputs.branch }}
     - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0

README.md

@@ -119,7 +119,7 @@ Note:
 - Network Plugin
   - [cni-plugins](https://github.com/containernetworking/plugins) 1.9.1
   - [calico](https://github.com/projectcalico/calico) 3.31.5
-  - [cilium](https://github.com/cilium/cilium) 1.19.4
+  - [cilium](https://github.com/cilium/cilium) 1.19.5
   - [flannel](https://github.com/flannel-io/flannel) 0.28.4
   - [kube-ovn](https://github.com/alauda/kube-ovn) 1.12.21
   - [kube-router](https://github.com/cloudnativelabs/kube-router) 2.1.1

docs/CNI/cilium.md

@@ -245,7 +245,7 @@ cilium_operator_extra_volume_mounts:
 ## Choose Cilium version
 
 ```yml
-cilium_version: "1.19.4"
+cilium_version: "1.19.5"
 ```
 
 ## Add variable to config

requirements.txt

@@ -1,6 +1,6 @@
-ansible==11.13.0
+ansible==14.1.0
 # Prevented passlib version conflicts
-bcrypt<5
+bcrypt<6
 # Needed for community.crypto module
 cryptography==49.0.0
 # Needed for jinja2 json_query templating

roles/bootstrap_os/tasks/centos.yml

@@ -6,7 +6,7 @@
 
 - name: Add proxy to yum.conf or dnf.conf if http_proxy is defined
   community.general.ini_file:
-    path: "{{ ((ansible_distribution_major_version | int) < 8) | ternary('/etc/yum.conf', '/etc/dnf/dnf.conf') }}"
+    path: "{{ ((ansible_facts['distribution_major_version'] | int) < 8) | ternary('/etc/yum.conf', '/etc/dnf/dnf.conf') }}"
     section: main
     option: proxy
     value: "{{ http_proxy | default(omit) }}"
@@ -20,28 +20,28 @@
 
 - name: Install EPEL for Oracle Linux repo package
   package:
-    name: "oracle-epel-release-el{{ ansible_distribution_major_version }}"
+    name: "oracle-epel-release-el{{ ansible_facts['distribution_major_version'] }}"
     state: present
   when:
     - use_oracle_public_repo
     - '''ID="ol"'' in os_release.stdout_lines'
-    - (ansible_distribution_version | float) >= 7.6
+    - (ansible_facts['distribution_version'] | float) >= 7.6
 
 - name: Enable Oracle Linux repo
   community.general.ini_file:
-    dest: "/etc/yum.repos.d/oracle-linux-ol{{ ansible_distribution_major_version }}.repo"
-    section: "ol{{ ansible_distribution_major_version }}_addons"
+    dest: "/etc/yum.repos.d/oracle-linux-ol{{ ansible_facts['distribution_major_version'] }}.repo"
+    section: "ol{{ ansible_facts['distribution_major_version'] }}_addons"
     option: "{{ item.option }}"
     value: "{{ item.value }}"
     mode: "0644"
   with_items:
-    - { option: "name", value: "ol{{ ansible_distribution_major_version }}_addons" }
+    - { option: "name", value: "ol{{ ansible_facts['distribution_major_version'] }}_addons" }
     - { option: "enabled", value: "1" }
-    - { option: "baseurl", value: "http://yum.oracle.com/repo/OracleLinux/OL{{ ansible_distribution_major_version }}/addons/$basearch/" }
+    - { option: "baseurl", value: "http://yum.oracle.com/repo/OracleLinux/OL{{ ansible_facts['distribution_major_version'] }}/addons/$basearch/" }
   when:
     - use_oracle_public_repo
     - '''ID="ol"'' in os_release.stdout_lines'
-    - (ansible_distribution_version | float) >= 7.6
+    - (ansible_facts['distribution_version'] | float) >= 7.6
 
 - name: Enable Centos extra repo for Oracle Linux
   community.general.ini_file:
@@ -51,15 +51,15 @@
     value: "{{ item.value }}"
     mode: "0644"
   with_items:
-    - { option: "name", value: "CentOS-{{ ansible_distribution_major_version }} - Extras" }
+    - { option: "name", value: "CentOS-{{ ansible_facts['distribution_major_version'] }} - Extras" }
     - { option: "enabled", value: "1" }
     - { option: "gpgcheck", value: "0" }
-    - { option: "baseurl", value: "http://mirror.centos.org/centos/{{ ansible_distribution_major_version }}/extras/$basearch/os/" }
+    - { option: "baseurl", value: "http://mirror.centos.org/centos/{{ ansible_facts['distribution_major_version'] }}/extras/$basearch/os/" }
   when:
     - use_oracle_public_repo
     - '''ID="ol"'' in os_release.stdout_lines'
-    - (ansible_distribution_version | float) >= 7.6
-    - (ansible_distribution_version | float) < 9
+    - (ansible_facts['distribution_version'] | float) >= 7.6
+    - (ansible_facts['distribution_version'] | float) < 9
 
 # CentOS ships with python installed
 

roles/bootstrap_os/tasks/rhel.yml

@@ -6,7 +6,7 @@
 
 - name: Add proxy to yum.conf or dnf.conf if http_proxy is defined
   community.general.ini_file:
-    path: "{{ ((ansible_distribution_major_version | int) < 8) | ternary('/etc/yum.conf', '/etc/dnf/dnf.conf') }}"
+    path: "{{ ((ansible_facts['distribution_major_version'] | int) < 8) | ternary('/etc/yum.conf', '/etc/dnf/dnf.conf') }}"
     section: main
     option: proxy
     value: "{{ http_proxy | default(omit) }}"
@@ -71,7 +71,7 @@
       - "rhel-8-for-*-appstream-rpms"
     state: "{{ 'enabled' if (rhel_enable_repos | bool) else 'disabled' }}"
   when:
-    - ansible_distribution_major_version == "8"
+    - ansible_facts['distribution_major_version'] == "8"
     - (not rh_subscription_status.changed) or (rh_subscription_username is defined) or (rh_subscription_org_id is defined)
 
 - name: Check presence of fastestmirror.conf

roles/download/tasks/download_container.yml

@@ -74,7 +74,6 @@
       delegate_to: "{{ download_delegate }}"
       delegate_facts: false
       register: container_save_status
-      failed_when: container_save_status.stderr
       run_once: true
       become: "{{ user_can_become_root | default(false) or not download_localhost }}"
       when:

roles/kubespray_defaults/defaults/main/download.yml

@@ -116,7 +116,7 @@ flannel_version: 0.28.4
 flannel_cni_version: 1.7.1-flannel1
 cni_version: "{{ (cni_binary_checksums['amd64'] | dict2items)[0].key }}"
 
-cilium_version: "1.19.4"
+cilium_version: "1.19.5"
 cilium_cli_version: "{{ (ciliumcli_binary_checksums['amd64'] | dict2items)[0].key }}"
 cilium_enable_hubble: false
 
@@ -239,7 +239,7 @@ cilium_operator_image_tag: "v{{ cilium_version }}"
 cilium_hubble_relay_image_repo: "{{ quay_image_repo }}/cilium/hubble-relay"
 cilium_hubble_relay_image_tag: "v{{ cilium_version }}"
 cilium_hubble_certgen_image_repo: "{{ quay_image_repo }}/cilium/certgen"
-cilium_hubble_certgen_image_tag: "v0.4.3"
+cilium_hubble_certgen_image_tag: "v0.4.5"
 cilium_hubble_ui_image_repo: "{{ quay_image_repo }}/cilium/hubble-ui"
 cilium_hubble_ui_image_tag: "v0.13.5"
 cilium_hubble_ui_backend_image_repo: "{{ quay_image_repo }}/cilium/hubble-ui-backend"