[renovate]

This PR contains the following updates:

Package	Update	Change
etkecc/agru	minor	v0.2.1 → v0.3.0

---

Release Notes

etkecc/agru (etkecc/agru)

v0.3.0

Compare Source

Changelog

• e728aaf Add Homebrew Formula for self-hosted tap
• d79e47e Merge pull request #​7 from Bergruebe/homebrew-tap
• 2080429 README: document the new Homebrew tap
• 71ab4bc add collections support (implements #​3), refactor a bit
• 1f932ed add comment-guard lint
• d6382f5 add more validations
• 4337528 fix glob filepaths (fix for #​12)
• 0bd50f0 fix indentation on update, fixes #​10
• 7f567a1 goreleaser: publish the Homebrew formula on release
• 01b6723 ignore non-existing files for -r arg
• 5389cd0 preserve requirements.yml extra props on remarshal, fixes #​8
• 7ca30e1 remove TUI - that was an interesting experiment, but in all cases the main question was how to disable it, so... you don't need to worry about disabling it anymore
• 2e6425b support ** in requirements.yml path, fixes #​12
• 4b8fb5e update ci

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[artidezi-etke-cc]

Approved: no adaptation is required under the configured project policy.

Approve the agru v0.2.1 → v0.3.0 update unchanged. Its single version change merges cleanly with the newer target Go builder; no image-source adaptation is needed. Source CI reports successful build/smoke checks, and the target resolves Ansible 14.0.0-r0. agru removes the TUI and -k flag, retains -no-tui, and adds Git-backed collections; smoke tests do not verify these operations or actual host connections. Publication was not attempted.

Agent-assessed risk: Low. The isolated agru update fits the existing static build and platform flow, with limited consumer-visible CLI changes and runtime coverage gaps.

Evidence (8 items)

• Local check: git diff 70c58695e4aa4c5a988cb8e1339de72579c1b229...refs/artidezi/inputs/source-pr; git merge-base — Merge base ea6ae92; PR changes only AGRU_VERSION in Dockerfile. Newer target builder is unrelated target work, not a PR deletion.
• Local check: git apply --check; temporary-index git read-tree followed by git apply --cached --3way — Plain patch application failed because the target changed adjacent FROM context. Three-way application succeeded in an isolated temporary index, retaining golang:1.27.1-alpine3.24 and all other target content while selecting agru v0.3.0. Checkout remains unchanged; this verifies merge integration, not an integrated image build.
• Release notes: source — Adds collections, requirements glob handling, metadata preservation and validations; removes TUI. Release notes retrieved through GitHub API.
• Upstream diff: source — Focused inspection of go.mod, main/CLI, installer, runner and README: Go requirement remains 1.26; static CGO_ENABLED=0 just build remains suitable for Alpine and existing architectures. -version and -no-tui remain; -k is removed. Git-backed collections use git/tar already supplied by git and Alpine BusyBox, and default to ~/.ansible/collections with configurable overrides; Galaxy-name collections remain unsupported. New argv execution and name/symlink validations improve safety but may reject previously accepted unsafe inputs.
• Evidence: Source CI snapshot; .github/workflows/check.yml; bin/smoke-test.sh — Snapshot reports two successful Build and smoke-test checks. Repository PR workflow builds linux/amd64, linux/arm64 and linux/arm/v7, then smoke-tests the runner platform. Smoke covers tool versions, Python dns/passlib/regex imports, nsenter plugin documentation availability, a debug/password-hash task and effective accept-new SSH setting. It does not execute nsenter against the host, real SSH authentication/changed-key rejection, or agru installation/update. These CI checks were not rerun.
• Local check: bin/resolve-ansible-version.sh — Ran successfully against target final base alpine:3.24.1; returned exact package 14.0.0-r0. Confirms current package resolution on the worker default platform; does not prove future package availability or every architecture.
• Evidence: .github/workflows/workflow.yml; bin/compute-next-tag.sh; Dockerfile — Main pushes refresh latest; weekly schedule releases when needed. Dockerfile changes increment the release counter for an existing exact Ansible package version. Both release builds receive the resolved ANSIBLE_VERSION; runner-platform smoke precedes three-platform publication, and Git tagging follows publication. Serial release jobs and main-only guard apply. PR does not change Ansible/collections packages, Python dependencies, SSH accept-new behavior or authentication. Publication credentials and future registry availability are not established by PR CI; no images or tags were published.
• Local check: git status --porcelain; git rev-parse HEAD — Working tree clean and HEAD unchanged at 70c5869.

Assessed source 40ae8ea42ba0b815357b3764788be5d9e82b5baa.