[renovate]

This PR contains the following updates:

Package	Update	Change
etkecc/agru	minor	v0.3.0 → v0.4.0

---

Release Notes

etkecc/agru

v0.4.0

Compare Source

Changelog

• 5564cdf BREAKING: change default -p location to use env vars (similar to ansible-galaxy) as well, fixes #​14
• c02922e Brew formula update for agru version v0.3.0
• 81bb461 add e2e test suite
• 7bfa81d publish pre-commit hook definition, closes #​13
• b4587c3 update deps

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[artidezi-etke-cc]

Approved: no adaptation is required under the configured project policy.

Approve the single agru v0.3.0 → v0.4.0 pin update unchanged. Upstream changes the default role installation path from roles/galaxy/ to Ansible environment paths or ~/.ansible/roles; callers requiring the previous project-local location must use -p roles/galaxy/ or ANSIBLE_ROLES_PATH. No repository-owned invocation depends on that default. Supplied multi-platform build/smoke CI is green, and the local release resolver returned 14.0.0-r0; publication and live host connections were not exercised.

Agent-assessed risk: Medium. The image integration is compatible, but agru’s changed default can relocate roles outside mounted project storage and affect callers relying on roles/galaxy/.

Evidence (6 items)

• Local check: git diff b372526b3dadb7c7f4e603ac785c29a747525cf3...refs/artidezi/inputs/source-pr; git merge-base; git status --short — Merge base equals recorded target b372526. The sole PR change is AGRU_VERSION=v0.4.0 in Dockerfile; no newer target-only changes or integration conflicts. Checkout remains clean and unchanged.
• Release notes: source — Identifies the breaking default role path change, additional e2e tests, pre-commit integration and dependency update.
• Upstream diff: source — Reviewed runtime changes: explicit -p/-cp override environment paths; first nonempty colon-separated entry is used, followed by ANSIBLE_HOME or ~/.ansible defaults. Old role location remains selectable. Collection/role deletion now refuses unrecognized directories; interrupted collections have recovery markers. Go requirement remains 1.26; doublestar changes 4.10.0 → 4.10.2. No image-owned caller or environment setting requires adaptation.
• Evidence: Dockerfile; bin/smoke-test.sh; .github/workflows/check.yml; supplied source CI snapshot — Go 1.27.3 builder satisfies upstream Go requirement. Upstream v0.4.0 justfile retains CGO_ENABLED=0 build to the copied agru path. Supplied two successful Build and smoke-test checks cover builds for linux/amd64, linux/arm64 and linux/arm/v7, with execution only on runner architecture. Smoke checks tool versions, Python dns/passlib/regex imports, password hashing, nsenter plugin documentation loading and SSH accept-new configuration. It does not install roles/collections with agru, execute nsenter against a host, test live SSH authentication or changed-key rejection. Ansible, its collections, …
• Local check: bin/resolve-ansible-version.sh — Passed locally using Docker and the final Alpine 3.24.3 base; output 14.0.0-r0. Confirms current package resolution on linux/x86_64 only, not future mirror availability or all-architecture runtime behavior. Did not rerun the successful source build/smoke checks.
• Evidence: .github/workflows/workflow.yml; bin/resolve-ansible-version.sh; bin/compute-next-tag.sh — Reviewed current release flow: main pushes and weekly schedule resolve exact Alpine ansible version, derive <version>-<release> tags from existing tags and Dockerfile changes, serialize releases, smoke-test locally, publish three platforms with the same ANSIBLE_VERSION, then push Git tag. The agru Dockerfile change qualifies for a new release. A later Alpine revision can change the resolved version; exact pinning makes a missing package fail rather than mislabel an image. Publication credentials, registry writes and actual remote tag history were not tested; no images or tags were published.

Assessed source 95911e9886a3bf94ce90b5ed799abe58b5a69c82.