automation: Update devsec.hardening to version 8.8.0

This MR contains the following updates:

Package	Type	Update	Change
devsec.hardening (source)	galaxy-collection	minor	8.7.0 -> 8.8.0

---

⚠ Dependency Lookup Warnings ⚠

Warnings were logged while processing this repo. Please check the Dependency Dashboard for more information.

---

Release Notes

dev-sec/ansible-collection-hardening

v8.8.0

Compare Source

Full Changelog

Implemented enhancements:

• Add support for Fedora 38 #​671
• auditd: add possibility to override config template #​685 [os_hardening] (Meecr0b)
• add debian 12 support #​684 [mysql_hardening] [os_hardening] [ssh_hardening] [nginx_hardening] (rndmh3ro)
• feat: explicitly support Fedora 37 and 38 #​682 [os_hardening] [ssh_hardening] (nejch)
• Replace ssh_keys group with root, where applicable and use less permissive file mode #​677 [ssh_hardening] (rndmh3ro)
• Add oddjob mkhomedir option rhel pam #​675 [os_hardening] (imp1sh)

Fixed bugs:

• How does one set sshd_authenticationmethods to include password authentication? #​686
• Error: No file was found when using first_found on Ubuntu 20.04 #​676
• FreeIPA environment mkhomedir fails #​664

Closed issues:

• What is the uscase of sysctl_overwrite over ansible.posix.sysctl? #​683
• Ensure permissions on mysql-logfile are correct chokes when log_error is set to stderr #​673
• TASK TASK FAILED: [devsec.hardening.os_hardening : Set password ageing for existing regular (non-system, non-root) accounts] #​670
• After os_hardening ssh not working #​663
• Unsupported parameters for (ansible.builtin.user) module #​650

Merged pull requests:

• setting gets ignored #​680 [os_hardening] (rndmh3ro)
• add var-naming[no-role-prefix] to skip-list #​679 (rndmh3ro)
• expand on check conditions for non-file locations of logs #​674 [mysql_hardening] (whysthatso)
• use new molecule-plugins #​667 (schurzi)
• add spellchecking with codespell #​662 [mysql_hardening] [os_hardening] [ssh_hardening] (schurzi)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about this update again.

---

• If you want to rebase/retry this MR, check this box

---

This MR has been generated by Renovate Bot.