all:
  children:
    zuul_unreachable:
      hosts: {}
  hosts:
    debian-bookworm:
      ansible_connection: ssh
      ansible_host: 2a13:1a81:8000:3124:f816:3eff:fe2c:e014
      ansible_port: 22
      ansible_python_interpreter: auto
      ansible_user: zuul
      nodepool:
        az: nova
        cloud: regiocloud-a-ci
        external_id: 30491b74-0744-479a-8b22-abefe206e79b
        host_id: df70f2a3f3d0c26428f22685cfc722ebc48099d99e7332c39e017195
        interface_ip: 2a13:1a81:8000:3124:f816:3eff:fe2c:e014
        label: debian-bookworm
        node_properties: {}
        private_ipv4: 10.128.0.108
        private_ipv6: null
        provider: regiocloud-a
        public_ipv4: 81.163.193.152
        public_ipv6: 2a13:1a81:8000:3124:f816:3eff:fe2c:e014
        region: null
        slot: null
  vars:
    zuul:
      _inheritance_path:
      - '<Job base explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/zuul-config/zuul.d/jobs.yaml@main#2>'
      - '<Job flake8 explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/zuul-jobs/.zuul.yaml@main#32>'
      - '<Job flake8 explicit: None implied: None source: osism/cfg-cookiecutter/.zuul.yaml@main#82>'
      ansible_version: '9'
      attempts: 1
      branch: main
      build: e2e70b5d4dc740ee854eb80ce3541d9a
      build_refs:
      - branch: main
        change: '857'
        change_message: "chore(deps): update dependency paramiko to v5 [security]\n\nThis
          PR contains the following updates:\n\n| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/)
          | [Confidence](https://docs.renovatebot.com/merge-confidence/) |\n|---|---|---|---|\n|
          [paramiko](https://redirect.github.com/paramiko/paramiko) ([changelog](https://www.paramiko.org/changelog.html))
          | `==4.0.0` \u2192 `==5.0.0` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/paramiko/5.0.0?slim=true)
          | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/paramiko/4.0.0/5.0.0?slim=true)
          |\n\n---\n\n### Paramiko rsakey.py allows the SHA-1 algorithm\n[CVE-2026-44405](https://nvd.nist.gov/vuln/detail/CVE-2026-44405)
          / [GHSA-r374-rxx8-8654](https://redirect.github.com/advisories/GHSA-r374-rxx8-8654)
          / PYSEC-2026-2858\n\n<details>\n<summary>More information</summary>\n\n####
          Details\nIn Paramiko through 4.0.0 before a448945, rsakey.py allows the
          SHA-1 algorithm.\n\n#### Severity\n- CVSS Score: 3.4 / 10 (Low)\n- Vector
          String: `CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N`\n\n#### References\n-
          [https://nvd.nist.gov/vuln/detail/CVE-2026-44405](https://nvd.nist.gov/vuln/detail/CVE-2026-44405)\n-
          [https://github.com/paramiko/paramiko/commit/a4489456b6f65281e172380cc4826cee5e851dbb](https://redirect.github.com/paramiko/paramiko/commit/a4489456b6f65281e172380cc4826cee5e851dbb)\n-
          [https://github.com/paramiko/paramiko](https://redirect.github.com/paramiko/paramiko)\n-
          [https://ostif.org/wp-content/uploads/2026/05/25-11-2415-REP_paramiko-security-audit_v1.1.pdf](https://ostif.org/wp-content/uploads/2026/05/25-11-2415-REP_paramiko-security-audit_v1.1.pdf)\n\nThis
          data is provided by [OSV](https://osv.dev/vulnerability/GHSA-r374-rxx8-8654)
          and the [GitHub Advisory Database](https://redirect.github.com/github/advisory-database)
          ([CC-BY 4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)).\n</details>\n\n---\n\n###
          Paramiko rsakey.py allows the SHA-1 algorithm\n[CVE-2026-44405](https://nvd.nist.gov/vuln/detail/CVE-2026-44405)
          / [GHSA-r374-rxx8-8654](https://redirect.github.com/advisories/GHSA-r374-rxx8-8654)
          / PYSEC-2026-2858\n\n<details>\n<summary>More information</summary>\n\n####
          Details\nIn Paramiko through 4.0.0 before a448945, rsakey.py allows the
          SHA-1 algorithm.\n\n#### Severity\n- CVSS Score: 3.4 / 10 (Low)\n- Vector
          String: `CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N`\n\n#### References\n-
          [https://nvd.nist.gov/vuln/detail/CVE-2026-44405](https://nvd.nist.gov/vuln/detail/CVE-2026-44405)\n-
          [https://github.com/paramiko/paramiko/commit/a4489456b6f65281e172380cc4826cee5e851dbb](https://redirect.github.com/paramiko/paramiko/commit/a4489456b6f65281e172380cc4826cee5e851dbb)\n-
          [https://github.com/paramiko/paramiko](https://redirect.github.com/paramiko/paramiko)\n-
          [https://ostif.org/wp-content/uploads/2026/05/25-11-2415-REP_paramiko-security-audit_v1.1.pdf](https://ostif.org/wp-content/uploads/2026/05/25-11-2415-REP_paramiko-security-audit_v1.1.pdf)\n-
          [https://pypi.org/project/paramiko](https://pypi.org/project/paramiko)\n-
          [https://github.com/advisories/GHSA-r374-rxx8-8654](https://redirect.github.com/advisories/GHSA-r374-rxx8-8654)\n\nThis
          data is provided by [OSV](https://osv.dev/vulnerability/PYSEC-2026-2858)
          and the [PyPI Advisory Database](https://redirect.github.com/pypa/advisory-database)
          ([CC-BY 4.0](https://redirect.github.com/pypa/advisory-database/blob/main/LICENSE)).\n</details>\n\n---\n\n###
          Release Notes\n\n<details>\n<summary>paramiko/paramiko (paramiko)</summary>\n\n###
          [`v5.0.0`](https://redirect.github.com/paramiko/paramiko/compare/4.0.0...5.0.0)\n\n[Compare
          Source](https://redirect.github.com/paramiko/paramiko/compare/4.0.0...5.0.0)\n\n</details>\n\n---\n\n###
          Configuration\n\n\U0001F4C5 **Schedule**: (UTC)\n\n- Branch creation\n  -
          At any time (no schedule defined)\n- Automerge\n  - At any time (no schedule
          defined)\n\n\U0001F6A6 **Automerge**: Disabled by config. Please merge this
          manually once you are satisfied.\n\n\u267B **Rebasing**: Whenever PR becomes
          conflicted, or you tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**:
          Close this PR and you won't be reminded about this update again.\n\n---\n\n
          - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this
          box\n\n---\n\nThis PR was generated by [Mend Renovate](https://mend.io/renovate/).
          View the [repository job log](https://developer.mend.io/github/osism/cfg-cookiecutter).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMzEuMSIsInVwZGF0ZWRJblZlciI6IjQzLjI1OS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZSJdfQ==-->\n"
        change_url: https://github.com/osism/cfg-cookiecutter/pull/857
        commit_id: 86f8da681d50f2046fb809b6e7626f12c55f71ed
        patchset: 86f8da681d50f2046fb809b6e7626f12c55f71ed
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/cfg-cookiecutter
          name: osism/cfg-cookiecutter
          short_name: cfg-cookiecutter
        src_dir: src/github.com/osism/cfg-cookiecutter
        topic: null
      buildset: ec0c378b57c446d69e42630e4043214f
      buildset_refs:
      - branch: main
        change: '857'
        change_message: "chore(deps): update dependency paramiko to v5 [security]\n\nThis
          PR contains the following updates:\n\n| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/)
          | [Confidence](https://docs.renovatebot.com/merge-confidence/) |\n|---|---|---|---|\n|
          [paramiko](https://redirect.github.com/paramiko/paramiko) ([changelog](https://www.paramiko.org/changelog.html))
          | `==4.0.0` \u2192 `==5.0.0` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/paramiko/5.0.0?slim=true)
          | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/paramiko/4.0.0/5.0.0?slim=true)
          |\n\n---\n\n### Paramiko rsakey.py allows the SHA-1 algorithm\n[CVE-2026-44405](https://nvd.nist.gov/vuln/detail/CVE-2026-44405)
          / [GHSA-r374-rxx8-8654](https://redirect.github.com/advisories/GHSA-r374-rxx8-8654)
          / PYSEC-2026-2858\n\n<details>\n<summary>More information</summary>\n\n####
          Details\nIn Paramiko through 4.0.0 before a448945, rsakey.py allows the
          SHA-1 algorithm.\n\n#### Severity\n- CVSS Score: 3.4 / 10 (Low)\n- Vector
          String: `CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N`\n\n#### References\n-
          [https://nvd.nist.gov/vuln/detail/CVE-2026-44405](https://nvd.nist.gov/vuln/detail/CVE-2026-44405)\n-
          [https://github.com/paramiko/paramiko/commit/a4489456b6f65281e172380cc4826cee5e851dbb](https://redirect.github.com/paramiko/paramiko/commit/a4489456b6f65281e172380cc4826cee5e851dbb)\n-
          [https://github.com/paramiko/paramiko](https://redirect.github.com/paramiko/paramiko)\n-
          [https://ostif.org/wp-content/uploads/2026/05/25-11-2415-REP_paramiko-security-audit_v1.1.pdf](https://ostif.org/wp-content/uploads/2026/05/25-11-2415-REP_paramiko-security-audit_v1.1.pdf)\n\nThis
          data is provided by [OSV](https://osv.dev/vulnerability/GHSA-r374-rxx8-8654)
          and the [GitHub Advisory Database](https://redirect.github.com/github/advisory-database)
          ([CC-BY 4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)).\n</details>\n\n---\n\n###
          Paramiko rsakey.py allows the SHA-1 algorithm\n[CVE-2026-44405](https://nvd.nist.gov/vuln/detail/CVE-2026-44405)
          / [GHSA-r374-rxx8-8654](https://redirect.github.com/advisories/GHSA-r374-rxx8-8654)
          / PYSEC-2026-2858\n\n<details>\n<summary>More information</summary>\n\n####
          Details\nIn Paramiko through 4.0.0 before a448945, rsakey.py allows the
          SHA-1 algorithm.\n\n#### Severity\n- CVSS Score: 3.4 / 10 (Low)\n- Vector
          String: `CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N`\n\n#### References\n-
          [https://nvd.nist.gov/vuln/detail/CVE-2026-44405](https://nvd.nist.gov/vuln/detail/CVE-2026-44405)\n-
          [https://github.com/paramiko/paramiko/commit/a4489456b6f65281e172380cc4826cee5e851dbb](https://redirect.github.com/paramiko/paramiko/commit/a4489456b6f65281e172380cc4826cee5e851dbb)\n-
          [https://github.com/paramiko/paramiko](https://redirect.github.com/paramiko/paramiko)\n-
          [https://ostif.org/wp-content/uploads/2026/05/25-11-2415-REP_paramiko-security-audit_v1.1.pdf](https://ostif.org/wp-content/uploads/2026/05/25-11-2415-REP_paramiko-security-audit_v1.1.pdf)\n-
          [https://pypi.org/project/paramiko](https://pypi.org/project/paramiko)\n-
          [https://github.com/advisories/GHSA-r374-rxx8-8654](https://redirect.github.com/advisories/GHSA-r374-rxx8-8654)\n\nThis
          data is provided by [OSV](https://osv.dev/vulnerability/PYSEC-2026-2858)
          and the [PyPI Advisory Database](https://redirect.github.com/pypa/advisory-database)
          ([CC-BY 4.0](https://redirect.github.com/pypa/advisory-database/blob/main/LICENSE)).\n</details>\n\n---\n\n###
          Release Notes\n\n<details>\n<summary>paramiko/paramiko (paramiko)</summary>\n\n###
          [`v5.0.0`](https://redirect.github.com/paramiko/paramiko/compare/4.0.0...5.0.0)\n\n[Compare
          Source](https://redirect.github.com/paramiko/paramiko/compare/4.0.0...5.0.0)\n\n</details>\n\n---\n\n###
          Configuration\n\n\U0001F4C5 **Schedule**: (UTC)\n\n- Branch creation\n  -
          At any time (no schedule defined)\n- Automerge\n  - At any time (no schedule
          defined)\n\n\U0001F6A6 **Automerge**: Disabled by config. Please merge this
          manually once you are satisfied.\n\n\u267B **Rebasing**: Whenever PR becomes
          conflicted, or you tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**:
          Close this PR and you won't be reminded about this update again.\n\n---\n\n
          - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this
          box\n\n---\n\nThis PR was generated by [Mend Renovate](https://mend.io/renovate/).
          View the [repository job log](https://developer.mend.io/github/osism/cfg-cookiecutter).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMzEuMSIsInVwZGF0ZWRJblZlciI6IjQzLjI1OS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZSJdfQ==-->\n"
        change_url: https://github.com/osism/cfg-cookiecutter/pull/857
        commit_id: 86f8da681d50f2046fb809b6e7626f12c55f71ed
        patchset: 86f8da681d50f2046fb809b6e7626f12c55f71ed
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/cfg-cookiecutter
          name: osism/cfg-cookiecutter
          short_name: cfg-cookiecutter
        src_dir: src/github.com/osism/cfg-cookiecutter
        topic: null
      change: '857'
      change_message: "chore(deps): update dependency paramiko to v5 [security]\n\nThis
        PR contains the following updates:\n\n| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/)
        | [Confidence](https://docs.renovatebot.com/merge-confidence/) |\n|---|---|---|---|\n|
        [paramiko](https://redirect.github.com/paramiko/paramiko) ([changelog](https://www.paramiko.org/changelog.html))
        | `==4.0.0` \u2192 `==5.0.0` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/paramiko/5.0.0?slim=true)
        | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/paramiko/4.0.0/5.0.0?slim=true)
        |\n\n---\n\n### Paramiko rsakey.py allows the SHA-1 algorithm\n[CVE-2026-44405](https://nvd.nist.gov/vuln/detail/CVE-2026-44405)
        / [GHSA-r374-rxx8-8654](https://redirect.github.com/advisories/GHSA-r374-rxx8-8654)
        / PYSEC-2026-2858\n\n<details>\n<summary>More information</summary>\n\n####
        Details\nIn Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1
        algorithm.\n\n#### Severity\n- CVSS Score: 3.4 / 10 (Low)\n- Vector String:
        `CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N`\n\n#### References\n- [https://nvd.nist.gov/vuln/detail/CVE-2026-44405](https://nvd.nist.gov/vuln/detail/CVE-2026-44405)\n-
        [https://github.com/paramiko/paramiko/commit/a4489456b6f65281e172380cc4826cee5e851dbb](https://redirect.github.com/paramiko/paramiko/commit/a4489456b6f65281e172380cc4826cee5e851dbb)\n-
        [https://github.com/paramiko/paramiko](https://redirect.github.com/paramiko/paramiko)\n-
        [https://ostif.org/wp-content/uploads/2026/05/25-11-2415-REP_paramiko-security-audit_v1.1.pdf](https://ostif.org/wp-content/uploads/2026/05/25-11-2415-REP_paramiko-security-audit_v1.1.pdf)\n\nThis
        data is provided by [OSV](https://osv.dev/vulnerability/GHSA-r374-rxx8-8654)
        and the [GitHub Advisory Database](https://redirect.github.com/github/advisory-database)
        ([CC-BY 4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)).\n</details>\n\n---\n\n###
        Paramiko rsakey.py allows the SHA-1 algorithm\n[CVE-2026-44405](https://nvd.nist.gov/vuln/detail/CVE-2026-44405)
        / [GHSA-r374-rxx8-8654](https://redirect.github.com/advisories/GHSA-r374-rxx8-8654)
        / PYSEC-2026-2858\n\n<details>\n<summary>More information</summary>\n\n####
        Details\nIn Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1
        algorithm.\n\n#### Severity\n- CVSS Score: 3.4 / 10 (Low)\n- Vector String:
        `CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N`\n\n#### References\n- [https://nvd.nist.gov/vuln/detail/CVE-2026-44405](https://nvd.nist.gov/vuln/detail/CVE-2026-44405)\n-
        [https://github.com/paramiko/paramiko/commit/a4489456b6f65281e172380cc4826cee5e851dbb](https://redirect.github.com/paramiko/paramiko/commit/a4489456b6f65281e172380cc4826cee5e851dbb)\n-
        [https://github.com/paramiko/paramiko](https://redirect.github.com/paramiko/paramiko)\n-
        [https://ostif.org/wp-content/uploads/2026/05/25-11-2415-REP_paramiko-security-audit_v1.1.pdf](https://ostif.org/wp-content/uploads/2026/05/25-11-2415-REP_paramiko-security-audit_v1.1.pdf)\n-
        [https://pypi.org/project/paramiko](https://pypi.org/project/paramiko)\n-
        [https://github.com/advisories/GHSA-r374-rxx8-8654](https://redirect.github.com/advisories/GHSA-r374-rxx8-8654)\n\nThis
        data is provided by [OSV](https://osv.dev/vulnerability/PYSEC-2026-2858) and
        the [PyPI Advisory Database](https://redirect.github.com/pypa/advisory-database)
        ([CC-BY 4.0](https://redirect.github.com/pypa/advisory-database/blob/main/LICENSE)).\n</details>\n\n---\n\n###
        Release Notes\n\n<details>\n<summary>paramiko/paramiko (paramiko)</summary>\n\n###
        [`v5.0.0`](https://redirect.github.com/paramiko/paramiko/compare/4.0.0...5.0.0)\n\n[Compare
        Source](https://redirect.github.com/paramiko/paramiko/compare/4.0.0...5.0.0)\n\n</details>\n\n---\n\n###
        Configuration\n\n\U0001F4C5 **Schedule**: (UTC)\n\n- Branch creation\n  -
        At any time (no schedule defined)\n- Automerge\n  - At any time (no schedule
        defined)\n\n\U0001F6A6 **Automerge**: Disabled by config. Please merge this
        manually once you are satisfied.\n\n\u267B **Rebasing**: Whenever PR becomes
        conflicted, or you tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**:
        Close this PR and you won't be reminded about this update again.\n\n---\n\n
        - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this
        box\n\n---\n\nThis PR was generated by [Mend Renovate](https://mend.io/renovate/).
        View the [repository job log](https://developer.mend.io/github/osism/cfg-cookiecutter).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMzEuMSIsInVwZGF0ZWRJblZlciI6IjQzLjI1OS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZSJdfQ==-->\n"
      change_url: https://github.com/osism/cfg-cookiecutter/pull/857
      child_jobs: []
      commit_id: 86f8da681d50f2046fb809b6e7626f12c55f71ed
      event_id: b338c870-8427-11f1-9f2c-51edbc68062b
      executor:
        hostname: 521e9411259a
        inventory_file: /var/lib/zuul/builds/e2e70b5d4dc740ee854eb80ce3541d9a/ansible/inventory.yaml
        log_root: /var/lib/zuul/builds/e2e70b5d4dc740ee854eb80ce3541d9a/work/logs
        result_data_file: /var/lib/zuul/builds/e2e70b5d4dc740ee854eb80ce3541d9a/work/results.json
        src_root: /var/lib/zuul/builds/e2e70b5d4dc740ee854eb80ce3541d9a/work/src
        work_root: /var/lib/zuul/builds/e2e70b5d4dc740ee854eb80ce3541d9a/work
      include_vars: []
      items:
      - branch: main
        change: '857'
        change_message: "chore(deps): update dependency paramiko to v5 [security]\n\nThis
          PR contains the following updates:\n\n| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/)
          | [Confidence](https://docs.renovatebot.com/merge-confidence/) |\n|---|---|---|---|\n|
          [paramiko](https://redirect.github.com/paramiko/paramiko) ([changelog](https://www.paramiko.org/changelog.html))
          | `==4.0.0` \u2192 `==5.0.0` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/paramiko/5.0.0?slim=true)
          | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/paramiko/4.0.0/5.0.0?slim=true)
          |\n\n---\n\n### Paramiko rsakey.py allows the SHA-1 algorithm\n[CVE-2026-44405](https://nvd.nist.gov/vuln/detail/CVE-2026-44405)
          / [GHSA-r374-rxx8-8654](https://redirect.github.com/advisories/GHSA-r374-rxx8-8654)
          / PYSEC-2026-2858\n\n<details>\n<summary>More information</summary>\n\n####
          Details\nIn Paramiko through 4.0.0 before a448945, rsakey.py allows the
          SHA-1 algorithm.\n\n#### Severity\n- CVSS Score: 3.4 / 10 (Low)\n- Vector
          String: `CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N`\n\n#### References\n-
          [https://nvd.nist.gov/vuln/detail/CVE-2026-44405](https://nvd.nist.gov/vuln/detail/CVE-2026-44405)\n-
          [https://github.com/paramiko/paramiko/commit/a4489456b6f65281e172380cc4826cee5e851dbb](https://redirect.github.com/paramiko/paramiko/commit/a4489456b6f65281e172380cc4826cee5e851dbb)\n-
          [https://github.com/paramiko/paramiko](https://redirect.github.com/paramiko/paramiko)\n-
          [https://ostif.org/wp-content/uploads/2026/05/25-11-2415-REP_paramiko-security-audit_v1.1.pdf](https://ostif.org/wp-content/uploads/2026/05/25-11-2415-REP_paramiko-security-audit_v1.1.pdf)\n\nThis
          data is provided by [OSV](https://osv.dev/vulnerability/GHSA-r374-rxx8-8654)
          and the [GitHub Advisory Database](https://redirect.github.com/github/advisory-database)
          ([CC-BY 4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)).\n</details>\n\n---\n\n###
          Paramiko rsakey.py allows the SHA-1 algorithm\n[CVE-2026-44405](https://nvd.nist.gov/vuln/detail/CVE-2026-44405)
          / [GHSA-r374-rxx8-8654](https://redirect.github.com/advisories/GHSA-r374-rxx8-8654)
          / PYSEC-2026-2858\n\n<details>\n<summary>More information</summary>\n\n####
          Details\nIn Paramiko through 4.0.0 before a448945, rsakey.py allows the
          SHA-1 algorithm.\n\n#### Severity\n- CVSS Score: 3.4 / 10 (Low)\n- Vector
          String: `CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N`\n\n#### References\n-
          [https://nvd.nist.gov/vuln/detail/CVE-2026-44405](https://nvd.nist.gov/vuln/detail/CVE-2026-44405)\n-
          [https://github.com/paramiko/paramiko/commit/a4489456b6f65281e172380cc4826cee5e851dbb](https://redirect.github.com/paramiko/paramiko/commit/a4489456b6f65281e172380cc4826cee5e851dbb)\n-
          [https://github.com/paramiko/paramiko](https://redirect.github.com/paramiko/paramiko)\n-
          [https://ostif.org/wp-content/uploads/2026/05/25-11-2415-REP_paramiko-security-audit_v1.1.pdf](https://ostif.org/wp-content/uploads/2026/05/25-11-2415-REP_paramiko-security-audit_v1.1.pdf)\n-
          [https://pypi.org/project/paramiko](https://pypi.org/project/paramiko)\n-
          [https://github.com/advisories/GHSA-r374-rxx8-8654](https://redirect.github.com/advisories/GHSA-r374-rxx8-8654)\n\nThis
          data is provided by [OSV](https://osv.dev/vulnerability/PYSEC-2026-2858)
          and the [PyPI Advisory Database](https://redirect.github.com/pypa/advisory-database)
          ([CC-BY 4.0](https://redirect.github.com/pypa/advisory-database/blob/main/LICENSE)).\n</details>\n\n---\n\n###
          Release Notes\n\n<details>\n<summary>paramiko/paramiko (paramiko)</summary>\n\n###
          [`v5.0.0`](https://redirect.github.com/paramiko/paramiko/compare/4.0.0...5.0.0)\n\n[Compare
          Source](https://redirect.github.com/paramiko/paramiko/compare/4.0.0...5.0.0)\n\n</details>\n\n---\n\n###
          Configuration\n\n\U0001F4C5 **Schedule**: (UTC)\n\n- Branch creation\n  -
          At any time (no schedule defined)\n- Automerge\n  - At any time (no schedule
          defined)\n\n\U0001F6A6 **Automerge**: Disabled by config. Please merge this
          manually once you are satisfied.\n\n\u267B **Rebasing**: Whenever PR becomes
          conflicted, or you tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**:
          Close this PR and you won't be reminded about this update again.\n\n---\n\n
          - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this
          box\n\n---\n\nThis PR was generated by [Mend Renovate](https://mend.io/renovate/).
          View the [repository job log](https://developer.mend.io/github/osism/cfg-cookiecutter).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMzEuMSIsInVwZGF0ZWRJblZlciI6IjQzLjI1OS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZSJdfQ==-->\n"
        change_url: https://github.com/osism/cfg-cookiecutter/pull/857
        commit_id: 86f8da681d50f2046fb809b6e7626f12c55f71ed
        patchset: 86f8da681d50f2046fb809b6e7626f12c55f71ed
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/cfg-cookiecutter
          name: osism/cfg-cookiecutter
          short_name: cfg-cookiecutter
          src_dir: src/github.com/osism/cfg-cookiecutter
        topic: null
      job: flake8
      jobtags: []
      max_attempts: 3
      message: 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
      patchset: 86f8da681d50f2046fb809b6e7626f12c55f71ed
      pipeline: check
      playbook_context:
        playbook_projects:
          trusted/project_0/github.com/osism/zuul-config:
            canonical_name: github.com/osism/zuul-config
            checkout: main
            commit: 71b711c422c10c242a8f785dc6d41ed9d12e9cd3
          trusted/project_1/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 242732586e2cba04d04867d3e302888c766bc231
          trusted/project_2/github.com/osism/zuul-jobs:
            canonical_name: github.com/osism/zuul-jobs
            checkout: main
            commit: 1d71e58c93442038e695a5d883d57a603182c7ae
          untrusted/project_0/github.com/osism/zuul-jobs:
            canonical_name: github.com/osism/zuul-jobs
            checkout: main
            commit: 1d71e58c93442038e695a5d883d57a603182c7ae
          untrusted/project_1/github.com/osism/zuul-config:
            canonical_name: github.com/osism/zuul-config
            checkout: main
            commit: 71b711c422c10c242a8f785dc6d41ed9d12e9cd3
          untrusted/project_2/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 242732586e2cba04d04867d3e302888c766bc231
        playbooks:
        - path: untrusted/project_0/github.com/osism/zuul-jobs/playbooks/flake8/run.yaml
          roles:
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/playbook_0/role_0/zuul-config
            link_target: untrusted/project_1/github.com/osism/zuul-config
            role_path: ansible/playbook_0/role_0/zuul-config/roles
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/playbook_0/role_1/openinfra-zuul-jobs
            link_target: untrusted/project_2/github.com/osism/openinfra-zuul-jobs
            role_path: ansible/playbook_0/role_1/openinfra-zuul-jobs/roles
          - checkout: main
            checkout_description: playbook branch
            link_name: ansible/playbook_0/role_2/zuul-jobs
            link_target: untrusted/project_0/github.com/osism/zuul-jobs
            role_path: ansible/playbook_0/role_2/zuul-jobs/roles
      post_review: false
      post_timeout: 1800
      pre_timeout: null
      project:
        canonical_hostname: github.com
        canonical_name: github.com/osism/cfg-cookiecutter
        name: osism/cfg-cookiecutter
        short_name: cfg-cookiecutter
        src_dir: src/github.com/osism/cfg-cookiecutter
      projects:
        github.com/osism/cfg-cookiecutter:
          canonical_hostname: github.com
          canonical_name: github.com/osism/cfg-cookiecutter
          checkout: main
          checkout_description: zuul branch
          commit: b44db55c12c3cb465396e7b06ff4c51eaf83cb18
          name: osism/cfg-cookiecutter
          required: false
          short_name: cfg-cookiecutter
          src_dir: src/github.com/osism/cfg-cookiecutter
      ref: refs/pull/857/head
      resources: {}
      tenant: osism
      timeout: 1800
      topic: null
      voting: true
