chore(deps): pin dependencies

.gitea/workflows/ansible-linters.yaml

@@ -12,9 +12,9 @@ jobs:
     runs-on:
     - ubuntu-latest
     steps:
-    - uses: actions/checkout@v6.0.1
+    - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
     - name: Run ansible-lint
-      uses: ansible/ansible-lint@v25.12.2
+      uses: ansible/ansible-lint@5fac056c45595896c973fbde871f01f6cb14d74c # v26.4.0
       with:
         args: "--config-file .ansible-lint"
         setup_python: "true"

.gitea/workflows/markdown-linters.yaml

@@ -12,7 +12,7 @@ jobs:
     runs-on:
     - ubuntu-latest
     steps:
-    - uses: actions/checkout@v6.0.1
+    - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
-    - uses: DavidAnson/markdownlint-cli2-action@v21.0.0
+    - uses: DavidAnson/markdownlint-cli2-action@ded1f9488f68a970bc66ea5619e13e9b52e601cd # v23.2.0
       with:
         globs: '**/*.md'

.gitea/workflows/release.yaml

@@ -0,0 +1,22 @@
+name: Release Ansible Role
+
+on:
+  push:
+    tags:
+    - '**'
+  workflow_dispatch: {}
+
+jobs:
+  release:
+    name: Release Ansible Role
+    runs-on: ubuntu-latest
+    steps:
+    - name: Install Ansible Galaxy
+      run: |
+        apt update --yes
+        apt install --yes ansible
+    - env:
+        ANSIBLE_GALAXY_TOKEN: ${{ secrets.ANSIBLE_GALAXY_TOKEN }}
+      name: Update Ansible Role in Ansible Galaxy
+      run: |
+        ansible-galaxy role import --token=${ANSIBLE_GALAXY_TOKEN} volker-raschek ${GITHUB_REPOSITORY#*/}

tasks/git_user.yaml

@@ -7,18 +7,18 @@
 
 - name: "Create git config directory for unix user: {{ item.key }}"
   ansible.builtin.file:
-    dest: "{{ getent_passwd[item.key][4] }}/.config/git"
+    dest: "{{ ansible_facts['getent_passwd'][item.key][4] }}/.config/git"
     owner: "{{ item.key }}"
-    group: "{{ getent_passwd[item.key][2] }}"
+    group: "{{ ansible_facts['getent_passwd'][item.key][2] }}"
     state: directory
     mode: "0755"
 
 - name: Create global git config files
   ansible.builtin.template:
     src: "{{ filename }}.j2"
-    dest: "{{ getent_passwd[item.key][4] }}/{{ filename }}"
+    dest: "{{ ansible_facts['getent_passwd'][item.key][4] }}/{{ filename }}"
     owner: "{{ item.key }}"
-    group: "{{ getent_passwd[item.key][2] }}"
+    group: "{{ ansible_facts['getent_passwd'][item.key][2] }}"
     mode: "0644"
   with_items:
   - .config/git/allowedSignersFile