kevinveenbirkenbachandClaude Opus 5.5 acad754cda fix(group_vars): evaluate the CAPTCHA flags only for a configured provider ...

A host that defines CAPTCHA with one provider replaces the group_vars mapping (no hash_behaviour merge), so galaxyserver, which configures only hCaptcha, left CAPTCHA.RECAPTCHA undefined. RECAPTCHA_ENABLED then failed to render, the applications render fallback returned the expression as text, and Keycloak's '| bool' coerced it to False with a deprecation warning that ansible-core 2.23 turns into an error. Both flags now check that their provider mapping is defined first; the effective values stay the same for every existing inventory.

test_captcha_enabled renders every role's services.recaptcha/hcaptcha.enabled through the real templar for defaults, both providers, only the other provider and only this provider, and fails on the raw text (negative control with the old expression: 4 subtests).

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

2026-10-25 20:58:06 +01:00

..

cli

feat(inventory): reject unread keys and a missing Cloudflare token before the deploy

2026-10-23 16:18:12 +02:00

group_vars

fix(group_vars): evaluate the CAPTCHA flags only for a configured provider

2026-10-25 20:58:06 +01:00

library

perf(sys-stk-front-proxy): probe every queued vhost in one parallel batch per stage

2026-10-25 18:16:04 +01:00

plugins

fix(mcp): keep a persistent host's providers through a partial deploy

2026-10-25 09:24:28 +01:00

roles

perf(web-app-nextcloud): run the post-upgrade pass only after a version change, take app updates from the daily update check otherwise

2026-10-25 20:52:11 +01:00

scripts

fix(apparmor): keep docker-default loaded when tearing AppArmor down

2026-10-20 12:11:14 +02:00

utils

fix(tls): serve a redirect to another host through the redirect role

2026-10-25 11:04:28 +01:00

__init__.py

…