---
# Ansible collections needed by the playbooks.
# Semaphore installs these before running (Task Template -> "install requirements").
#
# Versions are PINNED. Leaving them unpinned makes ansible-galaxy hit the Galaxy
# version-listing endpoint, which triggers a KeyError:'results' bug in this
# ansible-core/galaxy combo. Pinning a concrete version avoids that code path.
collections:
  - name: community.docker
    version: "3.13.1"        # docker_compose_v2 module (Homarr deploy)
  - name: ansible.posix
    version: "1.6.2"         # authorized_key module (install SSH keys)
  - name: infisical.vault
    version: "1.2.1"         # read secrets from Infisical (precheck)
  - name: community.general
    version: "9.5.0"         # flatpak / flatpak_remote / ufw modules

# NOTE: infisical.vault also needs the Python package `infisicalsdk` on the runner:
#   pip install infisicalsdk
# In Semaphore, ensure the runner image has it (or add a pip task / custom runner image).