all:
  children:
    zuul_unreachable:
      hosts: {}
  hosts:
    ubuntu-focal:
      ansible_connection: ssh
      ansible_host: 199.204.45.240
      ansible_port: 22
      ansible_python_interpreter: auto
      ansible_user: zuul
      molecule_install_collection_siblings: true
      molecule_scenario: nerdctl
      nodepool:
        az: nova
        cloud: public
        external_id: 7ecf6a37-75f9-4dfb-bf8e-3b39758206ce
        host_id: 86d6bbee9a590b753878988beec61ed4d37fe4ff9ff09e01cc4e099b
        interface_ip: 199.204.45.240
        label: ubuntu-focal
        node_properties: {}
        private_ipv4: 199.204.45.240
        private_ipv6: null
        provider: yul1
        public_ipv4: 199.204.45.240
        public_ipv6: 2604:e100:1:0:f816:3eff:fe45:e64f
        region: ca-ymq-1
        slot: null
      zuul_node:
        az: nova
        cloud: public
        external_id: 7ecf6a37-75f9-4dfb-bf8e-3b39758206ce
        host_id: 86d6bbee9a590b753878988beec61ed4d37fe4ff9ff09e01cc4e099b
        interface_ip: 199.204.45.240
        label: ubuntu-focal
        node_properties: {}
        private_ipv4: 199.204.45.240
        private_ipv6: null
        provider: yul1
        public_ipv4: 199.204.45.240
        public_ipv6: 2604:e100:1:0:f816:3eff:fe45:e64f
        region: ca-ymq-1
        slot: null
        uuid: null
  vars:
    molecule_install_collection_siblings: true
    molecule_scenario: nerdctl
    zuul:
      _inheritance_path:
      - '<Job base explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: vexxhost/zuul-config/zuul.d/jobs.yaml@main#1>'
      - '<Job molecule explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: vexxhost/zuul-jobs/zuul.d/ansible-jobs.yaml@main#1>'
      - '<Job ansible-collection-containers-molecule explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: vexxhost/ansible-collection-containers/.zuul.yaml@main#1>'
      - '<Job ansible-collection-containers-molecule-nerdctl explicit: None implied:
        {MatchAny:{ImpliedBranchMatcher:main}} source: vexxhost/ansible-collection-containers/.zuul.yaml@main#104>'
      - '<Job ansible-collection-containers-molecule-nerdctl-ubuntu-focal explicit:
        None implied: {MatchAny:{ImpliedBranchMatcher:main}} source: vexxhost/ansible-collection-containers/.zuul.yaml@main#121>'
      - '<Job ansible-collection-containers-molecule-nerdctl-ubuntu-focal explicit:
        None implied: None source: vexxhost/ansible-collection-containers/.zuul.yaml@main#136>'
      ansible_version: '9'
      attempts: 1
      branch: main
      build: 03e50c1607e44f60bd710b0e95e74d2d
      build_refs:
      - branch: main
        change: '124'
        change_message: "chore(deps): update step-security/harden-runner action to
          v2.19.2\n\nThis PR contains the following updates:\n\n| Package | Type |
          Update | Change | Pending |\n|---|---|---|---|---|\n| [step-security/harden-runner](https://redirect.github.com/step-security/harden-runner)
          | action | minor | `v2.18.0` \u2192 `v2.19.2` | `v2.19.3` |\n\n---\n\n###
          Release Notes\n\n<details>\n<summary>step-security/harden-runner (step-security/harden-runner)</summary>\n\n###
          [`v2.19.2`](https://redirect.github.com/step-security/harden-runner/releases/tag/v2.19.2)\n\n[Compare
          Source](https://redirect.github.com/step-security/harden-runner/compare/v2.19.1...v2.19.2)\n\n#####
          What's Changed\n\n- Update the Harden Runner agent for enterprise tier to
          use go 1.26 and fix minor bugs.\n\n**Full Changelog**: <https://github.com/step-security/harden-runner/compare/v2.19.1...v2.19.2>\n\n###
          [`v2.19.1`](https://redirect.github.com/step-security/harden-runner/releases/tag/v2.19.1)\n\n[Compare
          Source](https://redirect.github.com/step-security/harden-runner/compare/v2.19.0...v2.19.1)\n\n####
          What's Changed\n\n- fix: detect ubuntu-slim runners early and bail out by
          [@&#8203;devantler](https://redirect.github.com/devantler) in [#&#8203;657](https://redirect.github.com/step-security/harden-runner/pull/657)\n\nWhat
          the fix changes\n\n- Harden-Runner will detect `ubuntu-slim` runners and
          exit cleanly with an informational log message, instead of post harden runner
          step failing on chown: invalid user: 'undefined'.\n\nWhat the fix does not
          do\n\n- Jobs running on `ubuntu-slim` will not be monitored by Harden-Runner.
          The agent relies on kernel-level features (that require elevated capabilities).\n-
          Per GitHub's docs on [single-CPU runners](https://docs.github.com/en/actions/reference/runners/github-hosted-runners#single-cpu-runners):
          \"The container for ubuntu-slim runners runs in unprivileged mode. This
          means that some operations requiring elevated privileges such as mounting
          file systems, using Docker-in-Docker, or accessing low-level kernel features
          are not supported.\"  Those low-level kernel features are what the agent
          needs, so monitoring inside the unprivileged container is not feasible today.\n\nFor
          StepSecurity enterprise customers\nIf your security posture requires that
          workflows are always monitored, you can block the use of `ubuntu-slim` via
          workflow run policies see the [Runner Label Policy](https://docs.stepsecurity.io/workflow-run-policies/policies#runner-label-policy)
          docs. This lets you enforce that jobs only run on monitored runner types.\n\n####
          New Contributors\n\n- [@&#8203;devantler](https://redirect.github.com/devantler)
          made their first contribution in [#&#8203;657](https://redirect.github.com/step-security/harden-runner/pull/657)\n\n**Full
          Changelog**: <https://github.com/step-security/harden-runner/compare/v2.19.0...v2.19.1>\n\n###
          [`v2.19.0`](https://redirect.github.com/step-security/harden-runner/releases/tag/v2.19.0)\n\n[Compare
          Source](https://redirect.github.com/step-security/harden-runner/compare/v2.18.0...v2.19.0)\n\n#####
          What's Changed\n\n##### New Runner Support\n\nHarden-Runner now supports
          Depot, Blacksmith, Namespace, and WarpBuild runners with the same egress
          monitoring, runtime monitoring, and policy enforcement available on GitHub-hosted
          runners.\n\n##### Automated Incident Response for Supply Chain Attacks\n\n-
          Global block list: Outbound connections to known malicious domains and IPs
          are now blocked even in audit mode.\n- System-defined detection rules: Harden-Runner
          will trigger lockdown mode when a high risk event is detected during an
          active supply chain attack (for example, a process reading the memory of
          the runner worker process, a common technique for stealing GitHub Actions
          secrets).\n\n##### Bug Fixes\n\nWindows and macOS: stability and reliability
          fixes\n\n**Full Changelog**: <https://github.com/step-security/harden-runner/compare/v2.18.0...v2.19.0>\n\n</details>\n\n---\n\n###
          Configuration\n\n\U0001F4C5 **Schedule**: (UTC)\n\n- Branch creation\n  -
          At any time (no schedule defined)\n- Automerge\n  - At any time (no schedule
          defined)\n\n\U0001F6A6 **Automerge**: Enabled.\n\n\u267B **Rebasing**: Whenever
          PR is behind base branch, or you tick the rebase/retry checkbox.\n\n\U0001F515
          **Ignore**: Close this PR and you won't be reminded about this update again.\n\n---\n\n
          - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this
          box\n\n---\n\nThis PR was generated by [Mend Renovate](https://mend.io/renovate/).
          View the [repository job log](https://developer.mend.io/github/vexxhost/ansible-collection-containers).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNDEuMyIsInVwZGF0ZWRJblZlciI6IjQzLjE4NS4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->\n"
        change_url: https://github.com/vexxhost/ansible-collection-containers/pull/124
        commit_id: 8d415c661506f0c32187f6a89c5d10425aab29ca
        patchset: 8d415c661506f0c32187f6a89c5d10425aab29ca
        project:
          canonical_hostname: github.com
          canonical_name: github.com/vexxhost/ansible-collection-containers
          name: vexxhost/ansible-collection-containers
          short_name: ansible-collection-containers
          src_dir: src/github.com/vexxhost/ansible-collection-containers
        src_dir: src/github.com/vexxhost/ansible-collection-containers
        topic: null
      buildset: 166fcb2462b04a42951b3b43170d79f6
      buildset_refs:
      - branch: main
        change: '124'
        change_message: "chore(deps): update step-security/harden-runner action to
          v2.19.2\n\nThis PR contains the following updates:\n\n| Package | Type |
          Update | Change | Pending |\n|---|---|---|---|---|\n| [step-security/harden-runner](https://redirect.github.com/step-security/harden-runner)
          | action | minor | `v2.18.0` \u2192 `v2.19.2` | `v2.19.3` |\n\n---\n\n###
          Release Notes\n\n<details>\n<summary>step-security/harden-runner (step-security/harden-runner)</summary>\n\n###
          [`v2.19.2`](https://redirect.github.com/step-security/harden-runner/releases/tag/v2.19.2)\n\n[Compare
          Source](https://redirect.github.com/step-security/harden-runner/compare/v2.19.1...v2.19.2)\n\n#####
          What's Changed\n\n- Update the Harden Runner agent for enterprise tier to
          use go 1.26 and fix minor bugs.\n\n**Full Changelog**: <https://github.com/step-security/harden-runner/compare/v2.19.1...v2.19.2>\n\n###
          [`v2.19.1`](https://redirect.github.com/step-security/harden-runner/releases/tag/v2.19.1)\n\n[Compare
          Source](https://redirect.github.com/step-security/harden-runner/compare/v2.19.0...v2.19.1)\n\n####
          What's Changed\n\n- fix: detect ubuntu-slim runners early and bail out by
          [@&#8203;devantler](https://redirect.github.com/devantler) in [#&#8203;657](https://redirect.github.com/step-security/harden-runner/pull/657)\n\nWhat
          the fix changes\n\n- Harden-Runner will detect `ubuntu-slim` runners and
          exit cleanly with an informational log message, instead of post harden runner
          step failing on chown: invalid user: 'undefined'.\n\nWhat the fix does not
          do\n\n- Jobs running on `ubuntu-slim` will not be monitored by Harden-Runner.
          The agent relies on kernel-level features (that require elevated capabilities).\n-
          Per GitHub's docs on [single-CPU runners](https://docs.github.com/en/actions/reference/runners/github-hosted-runners#single-cpu-runners):
          \"The container for ubuntu-slim runners runs in unprivileged mode. This
          means that some operations requiring elevated privileges such as mounting
          file systems, using Docker-in-Docker, or accessing low-level kernel features
          are not supported.\"  Those low-level kernel features are what the agent
          needs, so monitoring inside the unprivileged container is not feasible today.\n\nFor
          StepSecurity enterprise customers\nIf your security posture requires that
          workflows are always monitored, you can block the use of `ubuntu-slim` via
          workflow run policies see the [Runner Label Policy](https://docs.stepsecurity.io/workflow-run-policies/policies#runner-label-policy)
          docs. This lets you enforce that jobs only run on monitored runner types.\n\n####
          New Contributors\n\n- [@&#8203;devantler](https://redirect.github.com/devantler)
          made their first contribution in [#&#8203;657](https://redirect.github.com/step-security/harden-runner/pull/657)\n\n**Full
          Changelog**: <https://github.com/step-security/harden-runner/compare/v2.19.0...v2.19.1>\n\n###
          [`v2.19.0`](https://redirect.github.com/step-security/harden-runner/releases/tag/v2.19.0)\n\n[Compare
          Source](https://redirect.github.com/step-security/harden-runner/compare/v2.18.0...v2.19.0)\n\n#####
          What's Changed\n\n##### New Runner Support\n\nHarden-Runner now supports
          Depot, Blacksmith, Namespace, and WarpBuild runners with the same egress
          monitoring, runtime monitoring, and policy enforcement available on GitHub-hosted
          runners.\n\n##### Automated Incident Response for Supply Chain Attacks\n\n-
          Global block list: Outbound connections to known malicious domains and IPs
          are now blocked even in audit mode.\n- System-defined detection rules: Harden-Runner
          will trigger lockdown mode when a high risk event is detected during an
          active supply chain attack (for example, a process reading the memory of
          the runner worker process, a common technique for stealing GitHub Actions
          secrets).\n\n##### Bug Fixes\n\nWindows and macOS: stability and reliability
          fixes\n\n**Full Changelog**: <https://github.com/step-security/harden-runner/compare/v2.18.0...v2.19.0>\n\n</details>\n\n---\n\n###
          Configuration\n\n\U0001F4C5 **Schedule**: (UTC)\n\n- Branch creation\n  -
          At any time (no schedule defined)\n- Automerge\n  - At any time (no schedule
          defined)\n\n\U0001F6A6 **Automerge**: Enabled.\n\n\u267B **Rebasing**: Whenever
          PR is behind base branch, or you tick the rebase/retry checkbox.\n\n\U0001F515
          **Ignore**: Close this PR and you won't be reminded about this update again.\n\n---\n\n
          - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this
          box\n\n---\n\nThis PR was generated by [Mend Renovate](https://mend.io/renovate/).
          View the [repository job log](https://developer.mend.io/github/vexxhost/ansible-collection-containers).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNDEuMyIsInVwZGF0ZWRJblZlciI6IjQzLjE4NS4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->\n"
        change_url: https://github.com/vexxhost/ansible-collection-containers/pull/124
        commit_id: 8d415c661506f0c32187f6a89c5d10425aab29ca
        patchset: 8d415c661506f0c32187f6a89c5d10425aab29ca
        project:
          canonical_hostname: github.com
          canonical_name: github.com/vexxhost/ansible-collection-containers
          name: vexxhost/ansible-collection-containers
          short_name: ansible-collection-containers
          src_dir: src/github.com/vexxhost/ansible-collection-containers
        src_dir: src/github.com/vexxhost/ansible-collection-containers
        topic: null
      change: '124'
      change_message: "chore(deps): update step-security/harden-runner action to v2.19.2\n\nThis
        PR contains the following updates:\n\n| Package | Type | Update | Change |
        Pending |\n|---|---|---|---|---|\n| [step-security/harden-runner](https://redirect.github.com/step-security/harden-runner)
        | action | minor | `v2.18.0` \u2192 `v2.19.2` | `v2.19.3` |\n\n---\n\n###
        Release Notes\n\n<details>\n<summary>step-security/harden-runner (step-security/harden-runner)</summary>\n\n###
        [`v2.19.2`](https://redirect.github.com/step-security/harden-runner/releases/tag/v2.19.2)\n\n[Compare
        Source](https://redirect.github.com/step-security/harden-runner/compare/v2.19.1...v2.19.2)\n\n#####
        What's Changed\n\n- Update the Harden Runner agent for enterprise tier to
        use go 1.26 and fix minor bugs.\n\n**Full Changelog**: <https://github.com/step-security/harden-runner/compare/v2.19.1...v2.19.2>\n\n###
        [`v2.19.1`](https://redirect.github.com/step-security/harden-runner/releases/tag/v2.19.1)\n\n[Compare
        Source](https://redirect.github.com/step-security/harden-runner/compare/v2.19.0...v2.19.1)\n\n####
        What's Changed\n\n- fix: detect ubuntu-slim runners early and bail out by
        [@&#8203;devantler](https://redirect.github.com/devantler) in [#&#8203;657](https://redirect.github.com/step-security/harden-runner/pull/657)\n\nWhat
        the fix changes\n\n- Harden-Runner will detect `ubuntu-slim` runners and exit
        cleanly with an informational log message, instead of post harden runner step
        failing on chown: invalid user: 'undefined'.\n\nWhat the fix does not do\n\n-
        Jobs running on `ubuntu-slim` will not be monitored by Harden-Runner. The
        agent relies on kernel-level features (that require elevated capabilities).\n-
        Per GitHub's docs on [single-CPU runners](https://docs.github.com/en/actions/reference/runners/github-hosted-runners#single-cpu-runners):
        \"The container for ubuntu-slim runners runs in unprivileged mode. This means
        that some operations requiring elevated privileges such as mounting file systems,
        using Docker-in-Docker, or accessing low-level kernel features are not supported.\"
        \ Those low-level kernel features are what the agent needs, so monitoring
        inside the unprivileged container is not feasible today.\n\nFor StepSecurity
        enterprise customers\nIf your security posture requires that workflows are
        always monitored, you can block the use of `ubuntu-slim` via workflow run
        policies see the [Runner Label Policy](https://docs.stepsecurity.io/workflow-run-policies/policies#runner-label-policy)
        docs. This lets you enforce that jobs only run on monitored runner types.\n\n####
        New Contributors\n\n- [@&#8203;devantler](https://redirect.github.com/devantler)
        made their first contribution in [#&#8203;657](https://redirect.github.com/step-security/harden-runner/pull/657)\n\n**Full
        Changelog**: <https://github.com/step-security/harden-runner/compare/v2.19.0...v2.19.1>\n\n###
        [`v2.19.0`](https://redirect.github.com/step-security/harden-runner/releases/tag/v2.19.0)\n\n[Compare
        Source](https://redirect.github.com/step-security/harden-runner/compare/v2.18.0...v2.19.0)\n\n#####
        What's Changed\n\n##### New Runner Support\n\nHarden-Runner now supports Depot,
        Blacksmith, Namespace, and WarpBuild runners with the same egress monitoring,
        runtime monitoring, and policy enforcement available on GitHub-hosted runners.\n\n#####
        Automated Incident Response for Supply Chain Attacks\n\n- Global block list:
        Outbound connections to known malicious domains and IPs are now blocked even
        in audit mode.\n- System-defined detection rules: Harden-Runner will trigger
        lockdown mode when a high risk event is detected during an active supply chain
        attack (for example, a process reading the memory of the runner worker process,
        a common technique for stealing GitHub Actions secrets).\n\n##### Bug Fixes\n\nWindows
        and macOS: stability and reliability fixes\n\n**Full Changelog**: <https://github.com/step-security/harden-runner/compare/v2.18.0...v2.19.0>\n\n</details>\n\n---\n\n###
        Configuration\n\n\U0001F4C5 **Schedule**: (UTC)\n\n- Branch creation\n  -
        At any time (no schedule defined)\n- Automerge\n  - At any time (no schedule
        defined)\n\n\U0001F6A6 **Automerge**: Enabled.\n\n\u267B **Rebasing**: Whenever
        PR is behind base branch, or you tick the rebase/retry checkbox.\n\n\U0001F515
        **Ignore**: Close this PR and you won't be reminded about this update again.\n\n---\n\n
        - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this
        box\n\n---\n\nThis PR was generated by [Mend Renovate](https://mend.io/renovate/).
        View the [repository job log](https://developer.mend.io/github/vexxhost/ansible-collection-containers).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNDEuMyIsInVwZGF0ZWRJblZlciI6IjQzLjE4NS4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->\n"
      change_url: https://github.com/vexxhost/ansible-collection-containers/pull/124
      child_jobs: []
      commit_id: 8d415c661506f0c32187f6a89c5d10425aab29ca
      event_id: da2537c0-54fc-11f1-97ac-d0d861a4fea1
      executor:
        hostname: 2d72f0692154
        inventory_file: /var/lib/zuul/builds/03e50c1607e44f60bd710b0e95e74d2d/ansible/inventory.yaml
        log_root: /var/lib/zuul/builds/03e50c1607e44f60bd710b0e95e74d2d/work/logs
        result_data_file: /var/lib/zuul/builds/03e50c1607e44f60bd710b0e95e74d2d/work/results.json
        src_root: /var/lib/zuul/builds/03e50c1607e44f60bd710b0e95e74d2d/work/src
        work_root: /var/lib/zuul/builds/03e50c1607e44f60bd710b0e95e74d2d/work
      include_vars: []
      items:
      - branch: main
        change: '124'
        change_message: "chore(deps): update step-security/harden-runner action to
          v2.19.2\n\nThis PR contains the following updates:\n\n| Package | Type |
          Update | Change | Pending |\n|---|---|---|---|---|\n| [step-security/harden-runner](https://redirect.github.com/step-security/harden-runner)
          | action | minor | `v2.18.0` \u2192 `v2.19.2` | `v2.19.3` |\n\n---\n\n###
          Release Notes\n\n<details>\n<summary>step-security/harden-runner (step-security/harden-runner)</summary>\n\n###
          [`v2.19.2`](https://redirect.github.com/step-security/harden-runner/releases/tag/v2.19.2)\n\n[Compare
          Source](https://redirect.github.com/step-security/harden-runner/compare/v2.19.1...v2.19.2)\n\n#####
          What's Changed\n\n- Update the Harden Runner agent for enterprise tier to
          use go 1.26 and fix minor bugs.\n\n**Full Changelog**: <https://github.com/step-security/harden-runner/compare/v2.19.1...v2.19.2>\n\n###
          [`v2.19.1`](https://redirect.github.com/step-security/harden-runner/releases/tag/v2.19.1)\n\n[Compare
          Source](https://redirect.github.com/step-security/harden-runner/compare/v2.19.0...v2.19.1)\n\n####
          What's Changed\n\n- fix: detect ubuntu-slim runners early and bail out by
          [@&#8203;devantler](https://redirect.github.com/devantler) in [#&#8203;657](https://redirect.github.com/step-security/harden-runner/pull/657)\n\nWhat
          the fix changes\n\n- Harden-Runner will detect `ubuntu-slim` runners and
          exit cleanly with an informational log message, instead of post harden runner
          step failing on chown: invalid user: 'undefined'.\n\nWhat the fix does not
          do\n\n- Jobs running on `ubuntu-slim` will not be monitored by Harden-Runner.
          The agent relies on kernel-level features (that require elevated capabilities).\n-
          Per GitHub's docs on [single-CPU runners](https://docs.github.com/en/actions/reference/runners/github-hosted-runners#single-cpu-runners):
          \"The container for ubuntu-slim runners runs in unprivileged mode. This
          means that some operations requiring elevated privileges such as mounting
          file systems, using Docker-in-Docker, or accessing low-level kernel features
          are not supported.\"  Those low-level kernel features are what the agent
          needs, so monitoring inside the unprivileged container is not feasible today.\n\nFor
          StepSecurity enterprise customers\nIf your security posture requires that
          workflows are always monitored, you can block the use of `ubuntu-slim` via
          workflow run policies see the [Runner Label Policy](https://docs.stepsecurity.io/workflow-run-policies/policies#runner-label-policy)
          docs. This lets you enforce that jobs only run on monitored runner types.\n\n####
          New Contributors\n\n- [@&#8203;devantler](https://redirect.github.com/devantler)
          made their first contribution in [#&#8203;657](https://redirect.github.com/step-security/harden-runner/pull/657)\n\n**Full
          Changelog**: <https://github.com/step-security/harden-runner/compare/v2.19.0...v2.19.1>\n\n###
          [`v2.19.0`](https://redirect.github.com/step-security/harden-runner/releases/tag/v2.19.0)\n\n[Compare
          Source](https://redirect.github.com/step-security/harden-runner/compare/v2.18.0...v2.19.0)\n\n#####
          What's Changed\n\n##### New Runner Support\n\nHarden-Runner now supports
          Depot, Blacksmith, Namespace, and WarpBuild runners with the same egress
          monitoring, runtime monitoring, and policy enforcement available on GitHub-hosted
          runners.\n\n##### Automated Incident Response for Supply Chain Attacks\n\n-
          Global block list: Outbound connections to known malicious domains and IPs
          are now blocked even in audit mode.\n- System-defined detection rules: Harden-Runner
          will trigger lockdown mode when a high risk event is detected during an
          active supply chain attack (for example, a process reading the memory of
          the runner worker process, a common technique for stealing GitHub Actions
          secrets).\n\n##### Bug Fixes\n\nWindows and macOS: stability and reliability
          fixes\n\n**Full Changelog**: <https://github.com/step-security/harden-runner/compare/v2.18.0...v2.19.0>\n\n</details>\n\n---\n\n###
          Configuration\n\n\U0001F4C5 **Schedule**: (UTC)\n\n- Branch creation\n  -
          At any time (no schedule defined)\n- Automerge\n  - At any time (no schedule
          defined)\n\n\U0001F6A6 **Automerge**: Enabled.\n\n\u267B **Rebasing**: Whenever
          PR is behind base branch, or you tick the rebase/retry checkbox.\n\n\U0001F515
          **Ignore**: Close this PR and you won't be reminded about this update again.\n\n---\n\n
          - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this
          box\n\n---\n\nThis PR was generated by [Mend Renovate](https://mend.io/renovate/).
          View the [repository job log](https://developer.mend.io/github/vexxhost/ansible-collection-containers).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNDEuMyIsInVwZGF0ZWRJblZlciI6IjQzLjE4NS4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->\n"
        change_url: https://github.com/vexxhost/ansible-collection-containers/pull/124
        commit_id: 8d415c661506f0c32187f6a89c5d10425aab29ca
        patchset: 8d415c661506f0c32187f6a89c5d10425aab29ca
        project:
          canonical_hostname: github.com
          canonical_name: github.com/vexxhost/ansible-collection-containers
          name: vexxhost/ansible-collection-containers
          short_name: ansible-collection-containers
          src_dir: src/github.com/vexxhost/ansible-collection-containers
        topic: null
      job: ansible-collection-containers-molecule-nerdctl-ubuntu-focal
      jobtags: []
      max_attempts: 3
      message: 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
      patchset: 8d415c661506f0c32187f6a89c5d10425aab29ca
      pipeline: check
      playbook_context:
        playbook_projects:
          trusted/project_0/github.com/vexxhost/zuul-config:
            canonical_name: github.com/vexxhost/zuul-config
            checkout: main
            commit: 298983cd1253e6833abdb49d87d912527e0e6597
          trusted/project_1/opendev.org/zuul/zuul-jobs:
            canonical_name: opendev.org/zuul/zuul-jobs
            checkout: master
            commit: 0006564de174b87f2f6253cf820f852d63dc24b3
          trusted/project_2/github.com/vexxhost/zuul-jobs:
            canonical_name: github.com/vexxhost/zuul-jobs
            checkout: main
            commit: 348c7ff425450b0356e1d84589143dce260be74a
          untrusted/project_0/github.com/vexxhost/zuul-jobs:
            canonical_name: github.com/vexxhost/zuul-jobs
            checkout: main
            commit: 348c7ff425450b0356e1d84589143dce260be74a
          untrusted/project_1/github.com/vexxhost/zuul-config:
            canonical_name: github.com/vexxhost/zuul-config
            checkout: main
            commit: 298983cd1253e6833abdb49d87d912527e0e6597
          untrusted/project_2/opendev.org/zuul/zuul-jobs:
            canonical_name: opendev.org/zuul/zuul-jobs
            checkout: master
            commit: 0006564de174b87f2f6253cf820f852d63dc24b3
        playbooks:
        - path: untrusted/project_0/github.com/vexxhost/zuul-jobs/playbooks/molecule/run.yaml
          roles:
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/playbook_0/role_1/zuul-jobs
            link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs
            role_path: ansible/playbook_0/role_1/zuul-jobs/roles
          - checkout: main
            checkout_description: playbook branch
            link_name: ansible/playbook_0/role_2/zuul-jobs
            link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs
            role_path: ansible/playbook_0/role_2/zuul-jobs/roles
        post_playbooks:
        - path: trusted/project_0/github.com/vexxhost/zuul-config/playbooks/base/post.yaml
          roles:
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/post_playbook_0/role_1/zuul-jobs
            link_target: trusted/project_1/opendev.org/zuul/zuul-jobs
            role_path: ansible/post_playbook_0/role_1/zuul-jobs/roles
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/post_playbook_0/role_2/zuul-jobs
            link_target: trusted/project_2/github.com/vexxhost/zuul-jobs
            role_path: ansible/post_playbook_0/role_2/zuul-jobs/roles
        - path: trusted/project_0/github.com/vexxhost/zuul-config/playbooks/base/post-logs.yaml
          roles:
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/post_playbook_1/role_1/zuul-jobs
            link_target: trusted/project_1/opendev.org/zuul/zuul-jobs
            role_path: ansible/post_playbook_1/role_1/zuul-jobs/roles
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/post_playbook_1/role_2/zuul-jobs
            link_target: trusted/project_2/github.com/vexxhost/zuul-jobs
            role_path: ansible/post_playbook_1/role_2/zuul-jobs/roles
        pre_playbooks:
        - path: trusted/project_0/github.com/vexxhost/zuul-config/playbooks/base/pre.yaml
          roles:
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/pre_playbook_0/role_1/zuul-jobs
            link_target: trusted/project_1/opendev.org/zuul/zuul-jobs
            role_path: ansible/pre_playbook_0/role_1/zuul-jobs/roles
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/pre_playbook_0/role_2/zuul-jobs
            link_target: trusted/project_2/github.com/vexxhost/zuul-jobs
            role_path: ansible/pre_playbook_0/role_2/zuul-jobs/roles
        - path: untrusted/project_0/github.com/vexxhost/zuul-jobs/playbooks/molecule/pre.yaml
          roles:
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/pre_playbook_1/role_1/zuul-jobs
            link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs
            role_path: ansible/pre_playbook_1/role_1/zuul-jobs/roles
          - checkout: main
            checkout_description: playbook branch
            link_name: ansible/pre_playbook_1/role_2/zuul-jobs
            link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs
            role_path: ansible/pre_playbook_1/role_2/zuul-jobs/roles
      post_review: false
      post_timeout: null
      pre_timeout: null
      project:
        canonical_hostname: github.com
        canonical_name: github.com/vexxhost/ansible-collection-containers
        name: vexxhost/ansible-collection-containers
        short_name: ansible-collection-containers
        src_dir: src/github.com/vexxhost/ansible-collection-containers
      projects:
        github.com/vexxhost/ansible-collection-containers:
          canonical_hostname: github.com
          canonical_name: github.com/vexxhost/ansible-collection-containers
          checkout: main
          checkout_description: zuul branch
          commit: 7b6ecf8c287a81b1ed6da2aaad819c2e72a67428
          name: vexxhost/ansible-collection-containers
          required: false
          short_name: ansible-collection-containers
          src_dir: src/github.com/vexxhost/ansible-collection-containers
      ref: refs/pull/124/head
      resources: {}
      tenant: oss
      timeout: 1800
      topic: null
      voting: true
