From 3aa4b359eb7f66ce3d1c04768930382355fca233 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sat, 11 Jul 2026 10:06:17 +0000
Subject: [PATCH] Update Ansible

---
 ansible/inventory/group_vars/debian/vars.yaml   | 4 ++--
 ansible/requirements.yml                        | 2 +-
 ansible/roles/debian_base/tasks/60-go-task.yaml | 7 +++++--
 ansible/roles/debian_tools/tasks/30-asdf.yaml   | 9 ++++++++-
 ansible/roles/ubuntu_desktop/defaults/main.yaml | 2 +-
 5 files changed, 17 insertions(+), 7 deletions(-)

diff --git a/ansible/inventory/group_vars/debian/vars.yaml b/ansible/inventory/group_vars/debian/vars.yaml
index 59876cf0..a768a2fb 100644
--- a/ansible/inventory/group_vars/debian/vars.yaml
+++ b/ansible/inventory/group_vars/debian/vars.yaml
@@ -15,7 +15,7 @@ debian_base_install_crowdsec_bouncer: false
 
 # https://github.com/go-task/task/releases
 # renovate: datasource=github-releases depName=go-task/task
-debian_base_go_task_version: "v3.51.1"
+debian_base_go_task_version: "3.52.0"
 
 debian_base_apt_packages:
   # Common
@@ -84,7 +84,7 @@ debian_tools_brew_packages_azure:
 
 ## asdf - https://asdf-vm.com/
 # renovate: datasource=github-releases depName=asdf-vm/asdf
-debian_tools_asdf_version: "v0.16.7"
+debian_tools_asdf_version: "0.20.0"
 
 debian_tools_asdf_tools:
   - plugin: terraform
diff --git a/ansible/requirements.yml b/ansible/requirements.yml
index 4c23c782..96e2fc8a 100644
--- a/ansible/requirements.yml
+++ b/ansible/requirements.yml
@@ -11,4 +11,4 @@ collections:
     version: 5.2.1
   # Source: https://github.com/ansible-collections/ansible.posix
   - name: ansible.posix
-    version: 2.2.0
+    version: 2.2.1
diff --git a/ansible/roles/debian_base/tasks/60-go-task.yaml b/ansible/roles/debian_base/tasks/60-go-task.yaml
index 58efc591..89edfd87 100644
--- a/ansible/roles/debian_base/tasks/60-go-task.yaml
+++ b/ansible/roles/debian_base/tasks/60-go-task.yaml
@@ -21,13 +21,16 @@
   ansible.builtin.set_fact:
     debian_base_task_arch: "{{ {'x86_64': 'amd64', 'aarch64': 'arm64', 'armv7l': 'arm', 'armv6l': 'arm'}[ansible_facts['architecture']] }}"
 
+# Normalize the version to a bare number (strip any leading "v"): Renovate's
+# github-releases datasource writes the version without the "v" prefix, while the
+# go-task release tag requires it (tag "v3.52.0" contains file "task_3.52.0_...").
 - name: Set go-task version
   ansible.builtin.set_fact:
-    debian_base_go_task_version: "{{ debian_base_go_task_version | default('v3.50.0') }}"
+    debian_base_go_task_version: "{{ debian_base_go_task_version | default('3.50.0') | regex_replace('^v', '') }}"
 
 - name: Download go-task .deb package
   ansible.builtin.get_url:
-    url: "https://github.com/go-task/task/releases/download/{{ debian_base_go_task_version }}/task_{{ debian_base_go_task_version | regex_replace('^v', '') }}_linux_{{ debian_base_task_arch }}.deb"
+    url: "https://github.com/go-task/task/releases/download/v{{ debian_base_go_task_version }}/task_{{ debian_base_go_task_version }}_linux_{{ debian_base_task_arch }}.deb"
     dest: "/tmp/go-task/task_{{ debian_base_go_task_version }}_linux_{{ debian_base_task_arch }}.deb"
     mode: "0644"
   when: debian_base_task_version_check.rc != 0
diff --git a/ansible/roles/debian_tools/tasks/30-asdf.yaml b/ansible/roles/debian_tools/tasks/30-asdf.yaml
index 5da7e6e8..1757e0cc 100644
--- a/ansible/roles/debian_tools/tasks/30-asdf.yaml
+++ b/ansible/roles/debian_tools/tasks/30-asdf.yaml
@@ -12,10 +12,17 @@
   register: _debian_tools_asdf_installed
   become: false
 
+# Normalize the version to a bare number (strip any leading "v"): Renovate's
+# github-releases datasource writes the version without the "v" prefix, while the
+# asdf release tag and asset both require it (e.g. "v0.20.0"/"asdf-v0.20.0-...").
+- name: Set asdf version
+  ansible.builtin.set_fact:
+    debian_tools_asdf_version: "{{ debian_tools_asdf_version | regex_replace('^v', '') }}"
+
 - name: Download and install asdf binary
   ansible.builtin.unarchive:
     src: >-
-      https://github.com/asdf-vm/asdf/releases/download/{{ debian_tools_asdf_version }}/asdf-{{ debian_tools_asdf_version }}-linux-{{
+      https://github.com/asdf-vm/asdf/releases/download/v{{ debian_tools_asdf_version }}/asdf-v{{ debian_tools_asdf_version }}-linux-{{
         'amd64' if ansible_facts['architecture'] == 'x86_64' else 'arm64'
       }}.tar.gz
     dest: "{{ ansible_facts['env']['HOME'] }}/.local/bin"
diff --git a/ansible/roles/ubuntu_desktop/defaults/main.yaml b/ansible/roles/ubuntu_desktop/defaults/main.yaml
index 64bbf4ab..6e647881 100644
--- a/ansible/roles/ubuntu_desktop/defaults/main.yaml
+++ b/ansible/roles/ubuntu_desktop/defaults/main.yaml
@@ -10,7 +10,7 @@ ubuntu_desktop_install_chrome: true
 
 ubuntu_desktop_install_rustdesk: true
 # renovate: datasource=github-releases depName=rustdesk/rustdesk
-ubuntu_desktop_rustdesk_version: "1.4.8"
+ubuntu_desktop_rustdesk_version: "1.4.9"
 
 ubuntu_desktop_install_sunshine: false
 # renovate: datasource=github-releases depName=LizardByte/Sunshine