Ansible on Project Wintermute

Ansible 2.20.9 - URL Masking And Tempfile Name Checks

Tue, 08 Sep 2026 16:50:09 +0000

Ansible published ansible-core v2.20.9 on 8 September 2026 at 16:50:09 UTC. The change that reaches controller logs is mask_url: a URL with a password and no username, such as redis://:password@host, is rewritten so the password is no longer intact. The same tag rejects prefix and suffix on ansible.builtin.tempfile when those values contain a path separator.

Ansible 2.19.13 - URL Credential Masking

Tue, 08 Sep 2026 16:48:31 +0000

The Ansible project published ansible-core v2.19.13 on 8 September 2026 at 16:48 UTC. mask_url in lib/ansible/module_utils/urls.py now masks a URL that carries a password and no username, such as redis://:password@host. The same tag rejects tempfile prefix and suffix values whose basename differs from the raw string, which is how path separators were reaching mkstemp and mkdtemp.

Ansible Fixes SSH Become Detection When Extra Args Contain ssh

Tue, 08 Sep 2026 14:00:00 +0000

Ansible core on the ansible/ansible devel branch took five commits this week, 22 files, 131 insertions, 70 deletions. The change operators will feel is a become bug in the SSH connection plugin. Extra args that happen to contain the ssh executable name were treated as if the process itself was ssh, which sent sftp and scp transfers down the privilege escalation prompt path.

Ansible v2.21.3 - Galaxy Retry And rpm_key Parse Fix

Mon, 10 Aug 2026 16:46:28 +0000

Ansible published v2.21.3 on 10 August 2026 as a stable patch on the 2.21 controller line. The change most operators will feel is in ansible-galaxy: a truncated Galaxy response no longer fails collection install on the first hash mismatch. The CLI retries the download when the body is shorter than expected.

Ansible v2.20.8 - rpm_key And Fact Gather Hang

Mon, 10 Aug 2026 16:45:07 +0000

Ansible published ansible-core v2.20.8 on 10 August 2026. The patch closes a hang in parallel fact gathering when async job files are corrupt, and it makes the async wrapper consult remaining timeout before it kills a module process. Operators who gather facts at inventory scale, and hosts that import RPM keys through rpm_key, are the audience for this tag.

Ansible v2.19.12 - Async Timeout And Test Filtering

Mon, 10 Aug 2026 16:43:51 +0000

Ansible published v2.19.12 on 10 August 2026 as a stable patch on the 2.19 line of ansible-core. The change that shows up first on a controller that gathers facts in parallel is the async wrapper: it now consults the module timeout before it kills the process that is still running a fact module. This is not a prerelease.

Ansible v2.18.19 - Parallel Fact Gathering Fixes

Mon, 10 Aug 2026 16:42:12 +0000

Ansible v2.18.19 was published on August 10, 2026. Its main operator visible change fixes parallel fact gathering that could hang when async job files were corrupt, while a related timeout correction makes the async wrapper account for remaining job time.

Ansible Facts And Input Validation Notes

Sat, 25 Jul 2026 14:00:06 +0000

Ansible is a configuration automation engine that also moves a large amount of host and inventory data. Its nine recent commits are worth reading because they improve fact identity, reject bad inputs earlier, and close one path that could expose credentials in output. Across 48 files, the patch set adds 171 lines and removes 66.

Services

Sun, 13 Feb 2022 11:11:11 -0100

Below is what we actually do day to day. We try to keep the list short and the descriptions honest. If something here matches what you need, get in touch.

Software engineering ¶

We write backend services in Java, Kotlin, Go, and Groovy. Most of the work falls into a few buckets: REST and gRPC APIs, distributed systems handling high request volumes, and the occasional batch job that has to be reliable more than fast.