v3.5.0

Enhancements

• OPSEXP-3538 Bump versions for Virgo Major release by @siddavamshi4 in #1292
• OPSEXP-3320 Remove ACS 7.3 from Ansible repo CI by @siddavamshi4 in #1286
• OPSEXP-3507 Add unsafe-eval to default CSP for webapps by @Copilot in #1265
• OPSEXP-3507 Fix worker script CSP directive for webapps by @gionn in #1268

What's Changed

• Bump AMIs versions by @alfresco-build in #1259
• Bump pytest from 8.4.1 to 8.4.2 by @dependabot[bot] in #1260
• chore(deps): update dependency community.general to v11.3.0 by @alfresco-build in #1266
• Bump AMIs versions by @alfresco-build in #1271
• Test dependabot wildcard for gha ecosystem by @gionn in #1279
• Hopefully workaround dependabot failure in handling this action by @gionn in #1280
• Cleanup actions name and descriptions by @gionn in #1282
• Move prefetch artifacts outside action to workaround dependabot by @gionn in #1283
• Bump the github-actions group across 5 directories with 6 updates by @dependabot[bot] in #1284
• Fixup cache key for prefetch artifacts action by @gionn in #1285
• Bump AMIs versions by @alfresco-build in #1278
• Bump AMIs versions by @alfresco-build in #1287
• Bump rexml from 3.3.9 to 3.4.2 in /docs by @dependabot[bot] in #1270
• chore(deps): update dependency community.general to v11.4.0 by @alfresco-build in #1290
• Bump AMIs versions by @alfresco-build in #1293
• chore(deps): update dependency amazon.aws to v10.1.2 by @alfresco-build in #1289
• Remove docker images and AMI id verification from release checklist by @Copilot in #1294

New Contributors

• @Copilot made their first contribution in #1265

Full Changelog: v3.4.0...v3.5.0

v3.4.0

What's Changed

• OPSEXP-3429 Fixup activemq password escaping in atr systemd service by @gionn in #1243
• OPSEXP-3456 Bump versions for Vela release by @gionn in #1257
• OPSEXP-3456 Bump galaxy dependencies by @gionn in #1256

Full Changelog: v3.3.1...v3.4.0

v3.3.1

What's Changed

• OPSEXP-2826 Run apply_amps script only when needed by @pmacius in #1240

• OPSEXP-3412 Bump frontend apps by @gionn in #1242

• OPSEXP-3170 Add workflow to cleanup AWS MQ configuration leftovers by @siddavamshi4 in #1229

• chore: trim python dependencies by @gionn in #1232

• chore(deps): update dependency ansible.posix to v2.1.0 by @alfresco-build in #1233

• chore(deps): update dependency community.general to v10.7.2 by @alfresco-build in #1218

• chore(deps): update dependency community.crypto to v2.26.4 by @alfresco-build in #1202

Full Changelog: v3.3.0...v3.3.1

v3.3.0 (ACS 25.2.0)

What's Changed

• OPSEXP-3298 Workaround the downloaded artifacts cache invalidation by @gionn in #1209
• OPSEXP-3298 Go back to setup-python with arm and pipenv support by @gionn in #1210
• Bump postgresql to fix CVE-2025-49146 by @gionn in #1208
• OPSEXP-3267 migrate activemq testinfra tests to ansible by @siddavamshi4 in #1205
• OPSEXP-3268 Migrate PostgreSQL testinfra tests to ansible by @siddavamshi4 in #1206
• OPSEXP-3273 Migrate search testinfra tests to ansible with search tests by @siddavamshi4 in #1207
• OPSEXP-3272 Migrate Transformer testinfra tests to ansible by @siddavamshi4 in #1215
• OPSEXP-3269 Migrate Tomcat testinfra tests to ansible by @siddavamshi4 in #1211
• OPSEXP-3271 Migrate T-router testinfra tests to ansible by @siddavamshi4 in #1214
• OPSEXP-3270 Migrate Shared File Storage(SFS) testinfra tests to ansible by @siddavamshi4 in #1212
• OPSEXP-3274 Migrate repository testinfra tests to ansible by @siddavamshi4 in #1217
• OPSEXP-3205 Handle extra amps in upgrade checks by @pmacius in #1223
• Update dependency middleware_automation.keycloak to v3.0.2 by @alfresco-build in #1226
• OPSEXP-3350 Bump versions for Ursa Major release by @gionn in #1228

New Contributors

• @siddavamshi4 made their first contribution in #1205

Full Changelog: v3.2.0...v3.3.0

v3.2.0

Enhancements

• OPSEXP-3222 Use alfresco.platform collection for audit_storage role by @pmacius in #1189
• OPSEXP-3260 Bump versions for Taurus release by @gionn in #1198
• OPSEXP-3253 Document workaround for pipenv on Ubuntu 24.04 for Python 3.12 by @gionn in #1185

Minor changes

• Bump amazon broker version for multimachine scenario by @pmacius in #1191
• Update dependency community.postgresql to v3.14.2 by @alfresco-build in #1188
• Bump ansible-lint from 25.4.0 to 25.5.0 by @dependabot in #1186
• Bump the github-actions group with 4 updates by @dependabot in #1194
• Bump the github-actions group in /.github/actions/molecule_integration_ec2 with 2 updates by @dependabot in #1195
• Update dependency community.general to v10.7.0 by @alfresco-build in #1192
• Update dependency community.postgresql to v4 by @alfresco-build in #1193
• Update dependency community.crypto to v2.26.2 by @alfresco-build in #1187
• Bump AMIs versions by @alfresco-build in #1197

Full Changelog: v3.1.0...v3.2.0

v3.1.0

What's Changed

• OPSEXP-3176 Fixup ami bumps for latest RH/RL supported versions by @gionn in #1142
• Bump yamllint from 1.36.2 to 1.37.0 by @dependabot in #1144
• Bump nokogiri from 1.18.3 to 1.18.4 in /docs by @dependabot in #1140
• Bump AMIs versions by @alfresco-build in #1143
• Bump AMIs versions by @alfresco-build in #1146
• OPSEXP-3188: CSRF origins asserter match regex by @alxgomz in #1147
• Bump Alfresco/alfresco-build-tools from 8.14.1 to 8.18.0 in /.github/actions/molecule_integration_ec2 in the github-actions group by @dependabot in #1149
• Bump actions/cache from 4.2.2 to 4.2.3 in /.github/actions/setup-python in the github-actions group by @dependabot in #1148
• Bump actions/cache from 4.2.2 to 4.2.3 in /.github/actions/galaxy in the github-actions group by @dependabot in #1151
• Bump the github-actions group with 3 updates by @dependabot in #1150
• Bump AMIs versions by @alfresco-build in #1152
• OPSEXP-3071 Properly escape eventual % in java opts in tengine aio systemd service by @gionn in #1154
• Bump ansible-lint from 25.1.3 to 25.2.1 by @dependabot in #1155
• OPSEXP-3146 Use OIDC role to auth to aws 🛂 by @pmacius in #1153
• OPSEXP-3125 Support config folder for jar extensions by @gionn in #1160
• Bump AMIs versions by @alfresco-build in #1158
• Bump nokogiri from 1.18.4 to 1.18.8 in /docs by @dependabot in #1159
• Fix external hosts usage in playbooks by @gionn in #1165
• Fix prospector in pre-commit by setting the snowballstemmer dependency to working version by @pmacius in #1175
• OPSEXP-2923 Bump keycloak to v26 by @pmacius in #1173
• Bump the github-actions group with 4 updates by @dependabot in #1168
• Update dependency ansible.utils to v6 by @alfresco-build in #1166
• Update dependency community.postgresql to v3.14.0 by @alfresco-build in #1163
• Bump ansible-lint from 25.2.1 to 25.4.0 by @dependabot in #1161
• Bump the github-actions group in /.github/actions/molecule_integration_ec2 with 2 updates by @dependabot in #1169
• Update dependency community.crypto to v2.26.1 by @alfresco-build in #1162
• Update dependency community.general to v10.6.0 by @alfresco-build in #1145
• Bump AMIs versions by @alfresco-build in #1170
• Update dependency community.aws to v9.2.0 by @alfresco-build in #1157
• Update dependency amazon.aws to v9.4.0 by @alfresco-build in #1156
• OPSEXP-3233 Fix jdbc driver class not propagated to repo/sync roles by @gionn in #1172
• OPSEXP-3231 Integrate the new hxi_connector role by @gionn in #1164
• Update dependency community.aws to v9.3.0 and amazon.aws to 9.5.0 by @alfresco-build in #1178
• Bump yamllint from 1.37.0 to 1.37.1 by @dependabot in #1184
• Bump AMIs versions by @alfresco-build in #1182
• OPSEXP-3235 refactor: extract db common vars to the main playbook by @gionn in #1174
• OPSEXP-3219 Bump versions for Sagittarius release by @pmacius in #1181

Full Changelog: v3.0.0...v3.1.0

v3.0.0

Important Changes

Playbooks has gone under an heavy rewrite, please review the changes in the dedicated section

What's Changed

• OPSEXP-3036 Do not run updatecli on tags by @gionn in #1052
• OPSEXP-3006 Move upgrade checks as playbook and add skip variable by @gionn in #1041
• OPSEXP-3015: set secure, sensible yet usable default for max upload files by @alxgomz in #1049
• Disable flaky test_get_sync on arm runners by @gionn in #1055
• OPSEXP-3058 Move supported_os vars to version specific vars file by @pmacius in #1057
• fix case issue on showAuthorizationStatus by @alxgomz in #1056
• OPSEXP-3058 Point community to acs23 vars by @pmacius in #1062
• Bump community version by @pmacius in #1063
• Fix community dtas assertions by @pmacius in #1064
• OPSEXP-3019 Bump python to 3.11 and ansible to 2.17 by @gionn in #1031
• OPSEXP-3041 Refactor activemq role to use default vars by @pmacius in #1059
• Bump cryptography from 42.0.8 to 44.0.1 by @dependabot in #1060
• Bump github/codeql-action from 3.28.7 to 3.28.8 in the github-actions group by @dependabot in #1050
• Bump requests from 2.31.0 to 2.32.3 by @dependabot in #899
• OPSEXP-3043 Refactor audit_storage role to use default vars by @pmacius in #1065
• dependabot: ignore minor updates on ansible-core by @gionn in #1074
• OPSEXP-3042: set ADF download vars as adf_app role's arguments by @alxgomz in #1061
• OPSEXP-3045 Refactor search role to use default vars by @pmacius in #1069
• OPSEXP-3044: add defaults to java role for artifact fetching by @alxgomz in #1067
• OPSEXP-3046 Refactor search_enterprise role to use default vars by @pmacius in #1070
• OPSEXP-3047 Refactor sfs role to use default vars by @pmacius in #1071
• OPSEXP-3048: add sync download vars as role defaults by @alxgomz in #1079
• Bump nokogiri from 1.16.5 to 1.18.3 in /docs by @dependabot in #1081
• Bump pytest from 8.3.3 to 8.3.4 by @dependabot in #1078
• OPSEXP-3051 Refactor tomcat role by @pmacius in #1080
• OPSEXP-3044: pass java_version as an argument for roles depending on java by @alxgomz in #1083
• OPSEXP-3052 Refactor trouter role to use default vars by @pmacius in #1082
• OPSEXP-3053 Refactor transformers_libreoffice to use default vars by @pmacius in #1084
• OPSEXP-3053 Refactor transformers_pdf to use default vars by @pmacius in #1085
• OPSEXP-3053 Refactor transformers_imagemagick to use default vars by @pmacius in #1086
• OPSEXP-3053 Refactor transformers role to use default vars by @pmacius in #1087
• OPSEXP-3054: move jdbc driver vars to sync & repo roles by @alxgomz in #1089
• OPSEXP-3055 Refactor repository war downloads to use defaults by @pmacius in #1088
• OPSEXP-3056 Refactor amps installation to use role defaults by @pmacius in #1090
• Bump actions/cache from 4.2.0 to 4.2.2 in /.github/actions/galaxy by @dependabot in #1093
• Bump the github-actions group across 1 directory with 6 updates by @dependabot in #1092
• Bump prospector from 1.10.3 to 1.11.0 by @dependabot in #1072
• Group all dependabot gha by @gionn in #1097
• Bump the github-actions group in /.github/actions/molecule_integration_ec2 with 2 updates by @dependabot in #1099
• Bump actions/cache from 4.2.0 to 4.2.2 in /.github/actions/setup-python in the github-actions group by @dependabot in #1098
• Group molecule dependabot updates by @gionn in #1101
• Bump pytest from 8.3.4 to 8.3.5 by @dependabot in #1096
• OPSEXP-3057 Refactor repository role to use default vars by @pmacius in #1091
• OPSEXP-3010 Add most common security headers by @gionn in #1068
• OPSEXP-3057 Add missing prefix for repository role vars by @pmacius in #1105
• OPSEXP-3118: move ES version to version vars by @alxgomz in #1104
• OPSEXP-3057 Move leftover repository group vars into role defaults and playbook group vars by @pmacius in #1106
• OPSEXP-3040 Move postgres major version var to version specific file by @pmacius in #1107
• OPSEXP-3040 Move sync_db vars from group vars by @pmacius in #1108
• OPSEXP-3040 Move nexus related vars out of group vars by @pmacius in #1109
• OPSEXP-3040 Remove urls related vars from group vars by @pmacius in #1110
• OPSEXP-3106: search role vars cleanup by @alxgomz in #1113
• OPSEXP-3106: cleanup ats mtls keystores vars by @alxgomz in #1114
• OPSEXP-3106: align sync role vars to match role name by @alxgomz in #1116
• OPSEXP-3162 Replace extra-vars files with the acs_play_major_version var by @pmacius in #1115
• Bump ansible-lint from 25.1.2 to 25.1.3 by @dependabot in #1103
• Bump jinja2 from 3.1.5 to 3.1.6 by @dependabot in #1118
• OPSEXP-3106: miscellaneous var cleanup by @alxgomz in #1117
• OPSEXP-3106 Add missing acs_play_ prefix for audit storage vars by @pmacius in #1121
• OPSEXP-3107 Bumps with updatecli v2 by @gionn in #1120
• OPSEXP-3168 Fix documentation after moving to default vars 📝 by @pmacius in #1119
• OPSEXP-3106: rename sfs and trouter download vars as artifacts are not zip 💅 by @alxgomz in #1122
• Fixup base folder in apply_amps by @gionn in #1008
• OPSEXP-3169 Support ubuntu 24.04 in vagrant config by @gionn in #1123
• OPSEXP-3106: change role var names as checksum may not be urls by @alxgomz in #1124
• OPSEXP-3168: update main readme by @alxgomz in #1125
• OPSEXP-3107 Support amps bumps via updatecli by @gionn in #1128
• OPSEXP-3107 Support bumping versions in roles defaults by @gionn in #1129
• Bump yamllint from 1.35.1 to 1.36.2 by @dependabot in #1130
• OPSEXP-3174 Prevent http credentials in ansible logs by @gionn in #1131
• Bump galaxy collections by @gionn in #1132
• OPSEXP-3176 Automate AMI bumps with updatecli by @gionn in https://gith...

v2.13.0

What's Changed

• OPSEXP-2930 Point links to support.hyland.com by @pmacius in #1009
• DOCS-7967 Fix docs reference where known_urls should be set by @gionn in #1010
• OPSEXP-2955 Avoid resetting permissions on mounted shared content storage by @gionn in #1018
• OPSEXP-2951 Enable elasticsearch 8 major version by @pmacius in #1021
• Update dependency amazon.aws to v8.2.2 by @alfresco-build in #1023
• Update dependency community.general to v9.5.3 by @alfresco-build in #1011
• Update dependency ansible.posix to v2 by @alfresco-build in #1012
• Update dependency community.crypto to v2.23.0 by @alfresco-build in #1013
• Update dependency community.postgresql to v3.9.1 by @alfresco-build in #1000
• Bump jinja2 from 3.1.4 to 3.1.5 by @dependabot in #1024
• OPSEXP-2954 Bump galaxy deps by @gionn in #1025
• OPSEXP-2954 Support ubuntu 24.04 by @gionn in #1020
• OPSEXP-3019 Switch to arm64 GA runners by @gionn in #1030
• OPSEXP-2923 Bump keycloak to v25 by @gionn in #1036
• OPSEXP-3066 Switch to build-tools updatecli action by @gionn in #1039
• Fix updatecli pipeline for community by @gionn in #1040
• OPSEXP-3036 Bump versions for pegasus release by @gionn in #1044
• OPSEXP-3036 Bump to latest tomcat patch and update README by @gionn in #1051

Full Changelog: v2.12.0...v2.13.0

v2.12.0 (ACS 23.4.0)

What's Changed

• OPSEXP-2927 ADW/ACC config via group vars by @gionn in #984
• Bump ansible-core from 2.15.12 to 2.15.13 by @dependabot in #985
• OPSEXP-2755 Update the docs with new artifact path by @pmacius in #989
• OPSEXP-2972 Workaround apache mirror flakiness with controller cache by @gionn in #999
• OPSEXP-2941 Bump versions for Orion release by @gionn in #998
• OPSEXP-2972 Ensure downloads cache is already available on matrix jobs by @gionn in #1004
• OPSEXP-2880 Add audit-storage role by @gionn in #996
• OPSEXP-2941 Bump readme and stack patches by @gionn in #1006

Full Changelog: v2.11.2...v2.12.0

v2.11.2

What's Changed

• OPSEXP-2895 Revert broken sync amp version which impair indexing in search enterprise by @gionn in #968
• OPSEXP-2147 Drop helper_modules role by @gionn in #956

Full Changelog: v2.11.1...v2.11.2