No description
  • Python 99.4%
  • Jinja 0.4%
  • Shell 0.2%
Find a file
Repository files (latest commit first)
Filename Latest commit message Latest commit date
RAKESH S ab625b40d4
fix(deps): exclude ansible-core 2.17.x (CVE-2026-11332) (#4662)
Exclude the entire ansible-core 2.17.x range from the dependency spec.
2.17 is EOL and will never receive the fix for CVE-2026-11332 (argument
injection in ansible-galaxy role install, CVSS 7.8).

With this change, Python 3.10 users get ansible-core 2.16.19 (patched)
and Python 3.11+ users get 2.18+ (patched). Nobody resolves to the
vulnerable 2.17.x anymore.

Reference: https://github.com/advisories/GHSA-w8p5-mx5w-cpqj
Fix PR: https://github.com/ansible/ansible/pull/87070

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit

* **Chores**
* Updated the supported Ansible Core dependency range to require version
2.15.0 or newer while excluding 2.17.x versions.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->
2026-07-21 20:56:07 +05:30
.config chore(deps): update pep621 (#4643) 2026-06-04 09:56:49 +00:00
.github fix: add explicit permissions to release workflow jobs (#4653) 2026-07-04 18:15:34 +05:30
.vscode chore: update hooks (#4566) 2025-10-15 16:15:22 +01:00
collections chore: replace pre-commit with prek (#4614) 2026-02-25 13:53:52 +00:00
community.molecule fix: add missing build_ignore entries to galaxy.yml (#4650) 2026-06-24 15:14:17 +05:30
docs fix: remove outdated --driver-name reference (#4654) 2026-07-13 21:07:40 +05:30
src/molecule Fix/sonarcloud quality gate issues (#4657) 2026-07-07 18:00:52 +05:30
tests fix: remove outdated --driver-name reference (#4654) 2026-07-13 21:07:40 +05:30
tools chore: use tox>=4.46.0 during testing (#4615) 2026-02-25 13:05:38 +00:00
.env Make molecule compatible with ansible 2.19 data tagging (#4418) 2025-04-03 15:28:27 +00:00
.gitignore GHA release fixes (#4473) 2025-07-11 11:26:46 +01:00
.markdownlint-cli2.jsonc chore: replace pre-commit with prek (#4614) 2026-02-25 13:53:52 +00:00
.markdownlint.yaml chore: replace pre-commit with prek (#4614) 2026-02-25 13:53:52 +00:00
.pre-commit-config.yaml chore(deps): update all dependencies (#4644) 2026-06-09 11:53:02 +00:00
.prekignore chore: replace pre-commit with prek (#4614) 2026-02-25 13:53:52 +00:00
.readthedocs.yml fix: adopt uv.lock and newer packaging (#4554) 2025-09-22 12:57:11 +01:00
.yamllint chore: replace pre-commit with prek (#4614) 2026-02-25 13:53:52 +00:00
ansible.cfg Make molecule compatible with ansible 2.19 data tagging (#4418) 2025-04-03 15:28:27 +00:00
biome.json chore: update hooks (#4566) 2025-10-15 16:15:22 +01:00
codecov.yml fix: adopt uv.lock and newer packaging (#4554) 2025-09-22 12:57:11 +01:00
cspell.config.yaml chore: update hooks (#4566) 2025-10-15 16:15:22 +01:00
LICENSE Molecule - Ansible by Red Hat (#1531) 2018-11-01 11:18:54 +00:00
mise.toml chore: swap deprecated setting (#4441) 2025-05-19 08:53:53 +00:00
mkdocs.yml Add execution flow documentation (#4589) 2025-12-11 08:59:50 -05:00
molecule Minor test improvements (#4363) 2025-01-21 15:56:01 +05:30
pyproject.toml fix(deps): exclude ansible-core 2.17.x (CVE-2026-11332) (#4662) 2026-07-21 20:56:07 +05:30
README.md chore: replace pre-commit with prek (#4614) 2026-02-25 13:53:52 +00:00
renovate.json chore(deps): update all dependencies (#4595) 2026-01-19 21:44:04 +00:00
sonar-project.properties Update sonar-project.properties configuration (#4564) 2025-10-13 12:24:14 -04:00
uv.lock fix(deps): exclude ansible-core 2.17.x (CVE-2026-11332) (#4662) 2026-07-21 20:56:07 +05:30

About Ansible Molecule

PyPI Package Documentation Status image Python Black Code Style Ansible Code of Conduct Discussions Repository License

Molecule is an Ansible testing framework designed for developing and testing Ansible collections, playbooks, and roles.

Molecule leverages standard Ansible features including inventory, playbooks, and collections to provide flexible testing workflows. Test scenarios can target any system or service reachable from Ansible, from containers and virtual machines to cloud infrastructure, hyperscaler services, APIs, databases, and network devices. Molecule can also validate inventory configurations and dynamic inventory sources.

Molecule encourages an approach that results in consistently developed Ansible content that is well-written, easily understood and maintained.

Molecule supports only the latest two major versions of Ansible (N/N-1).

Once installed, the command line can be called using any of the methods below:

molecule ...
python3 -m molecule ...  # python module calling method

Documentation

Read the documentation and more at https://docs.ansible.com/projects/molecule//.

Get Involved

See the Talk to us section of the documentation to ask questions, find help, and join the conversation.

For complete details, see the Ansible communication guide.

If you want to get moving fast and make a quick patch:

git clone https://github.com/ansible-community/molecule && cd molecule
python3 -m venv .venv && source .venv/bin/activate
python3 -m pip install -U setuptools pip tox

And you're ready to make your changes!

Authors

Molecule project was created by Retr0h and it is now community-maintained as part of the Ansible by Red Hat project.

License

The MIT License.

The logo is licensed under the Creative Commons NoDerivatives 4.0 License.

If you have some other use in mind, contact us.