What ansible/ansible shipped
Written by FoxPlug from public releases; not affiliated with Ansible. An automatic summary of the public release, pull request and commit data of github.com/ansible/ansible. Ansible did not write it and does not use or endorse FoxPlug. Every line links to the public change it describes.
Get a weekly update like this for your product, free
Week of September 21, 2026
What shipped
- Added
mask_objectmethod to ensure callback task results are automatically redacted before being passed to callbacks, removing the need for callbacks to handle secret masking themselves. Pull request #87559 - Fixed fact aliasing issue where hosts in the same play could see each other's gathered facts when
run_oncetasks were used by copying facts in set_host_facts() instead of storing direct references. Pull request #87503 - Fixed hypervisor detection regression on FreeBSD jails running on bhyve hosts that was causing jail facts to be incorrectly overwritten. Pull request #87508
- Increased test coverage for the secret masker including handling of integers in vaulted lists. Pull request #87560
- Rephrased password documentation for the user module on macOS for clarity. Pull request #87544
Why it matters
This week's updates focus on security improvements through better secret masking across callbacks, fixing critical bugs in fact handling and hypervisor detection that affected multi-host and specialized deployment scenarios, and expanding test coverage to prevent regressions.
Changelog entry
- Security: Added
mask_objectmethod to automatically redact secrets in callback task results. Pull request #87559 - Bugfix: Fixed fact aliasing where hosts could see each other's gathered facts in the same play with
run_oncetasks. Pull request #87503 - Bugfix: Fixed hypervisor detection regression on FreeBSD jails running on bhyve hosts. Pull request #87508
- Testing: Increased secret masker coverage including vaulted list handling. Pull request #87560
- Documentation: Improved macOS password documentation in user module. Pull request #87544
New in Ansible: automatic secret masking in callbacks, fixed fact aliasing in run_once tasks, corrected FreeBSD jail detection, and improved secret masker coverage.
This week's Ansible releases address important infrastructure reliability and security improvements. We've added automatic secret masking for callback results, fixed a fact aliasing bug affecting multi-host plays with run_once tasks, corrected FreeBSD jail hypervisor detection, and expanded secret masker test coverage.