automation: Update devsec.hardening to version 8 - autoclosed

This MR contains the following updates:

Package	Type	Update	Change
devsec.hardening (source)	galaxy-collection	major	7.16.0 -> 8.3.0

---

Release Notes

dev-sec/ansible-collection-hardening

v8.3.0

Compare Source

Full Changelog

Implemented enhancements:

• add hardening of root user account(s) #​579 [os_hardening] (DonEstefan)

Fixed bugs:

• cast expected int types in pam tasks #​594 [os_hardening] (dlouzan)
• do not manage trusted user ca keys if none exist #​580 [ssh_hardening] (hollow)

Closed issues:

• Trying to run the os_hardening on Debian 11, but fails on privilege escalation #​587
• auditd increasing logfiles #​586
• Path to nginx.conf should be configurable in a variable #​577

Merged pull requests:

• adopt all current suggestions from ansible-lint #​592 [mysql_hardening] [os_hardening] [ssh_hardening] (schurzi)
• Support more os #​588 [mysql_hardening] [os_hardening] [ssh_hardening] [nginx_hardening] (rndmh3ro)
• run tests only on pushes to master or to MRs #​581 [mysql_hardening] [os_hardening] [ssh_hardening] [nginx_hardening] (rndmh3ro)

v8.2.0

Compare Source

Full Changelog

Implemented enhancements:

• Add nginx variables for config-path and owner/group #​578 [nginx_hardening] (hagenbauer)
• add centos >8 Support #​573 [ssh_hardening] (sbaerlocher)
• add always-tag to include so other tags can be used #​569 [os_hardening] (rndmh3ro)

Closed issues:

• Bug using os_hardening "tags" #​567

v8.1.0

Compare Source

Full Changelog

Closed issues:

• dev-sec CI bot should not update CHANGELOG.md in fork repository #​566

Merged pull requests:

• update supported OS in meta and fix linting #​572 [mysql_hardening] [os_hardening] [ssh_hardening] [nginx_hardening] (rndmh3ro)
• fix misleading comment #​571 [os_hardening] (DonEstefan)
• only run release actions on upstream-repo #​568 (rndmh3ro)

v8.0.0

Compare Source

Full Changelog

Breaking changes:

• change default to allow SFTP #​564 [ssh_hardening] (schurzi)

Implemented enhancements:

• add possibility to keep .netrc files in users homedir #​563 [os_hardening] (PhilippFunk)
• rework filesystem hardening #​555 [os_hardening] (divialth)

Closed issues:

• Error in Task 'Create sshd_config and set permissions to root/600' #​565 [ssh_hardening]
• [ssh_hardening] Debian 11 - Ansible cannot transfer files #​557
• Add the old SFTP-Reminder to the stable ssh_hardening role for ansible #​521

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about this update again.

---

• If you want to rebase/retry this MR, check this box

---

This MR has been generated by Renovate Bot. The local configuration can be found in the SI Renovate Bot repository.