Update dependency nginxinc.nginx to v0.25.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
nginxinc.nginx	role	minor	0.24.3 -> 0.25.0

---

Release Notes

nginxinc/ansible-role-nginx (nginxinc.nginx)

v0.25.0

Compare Source

BREAKING CHANGES:

• NGINX Plus requires a JWT license starting with R33. Make sure you include the path to the base64 encoded JWT license using the new nginx_license['jwt'] parameter.
• Remove support for RHEL 7 based distributions (RHEL/CentOS/Oracle Linux 7). CentOS 7 has reached EoL, RHEL 7 has reached EoM, and Oracle Linux 7 will reach EoL shortly. These distributions will not be supported by new NGINX releases moving forward. If you are still using one of these distributions, please consider upgrading. If you still want to use this role for the time being, please use the previous release (0.24.3). Do note that you will only be able to use NGINX versions released as of the date of the aforementioned release (July 11, 2024).
• Remove support for installing NGINX Open Source and NGINX Plus on Alpine Linux 3.16.
• Remove support for installing NGINX Open Source on Alpine Linux 3.17.
• Remove support for installing NGINX Open Source on Ubuntu mantic.
• No longer omit allow_downgrade module parameter when running Ansible versions lower than 2.12.

DEPRECATION WARNINGS:

• The NGINX Agent features contained in this role will be split into a separate role in the next minor release. If you are using this role to install and configure the NGINX Agent, please switch to the new role once it's available.

FEATURES:

• Add support for templating the entire NGINX Agent configuration file.
• Add support for installing and configuring the NGINX Plus HA keepalived package.
• Add validation tasks to check the Ansible version, the Jinja2 version, whether the required Ansible collections for this role are installed, and whether you are trying to install a valid NGINX module.
• Add support for installing NGINX Open Source and NGINX Plus on Alpine Linux 3.20.
• Add support for installing NGINX Open Source on Ubuntu oracular.
• Add support for installing NGINX Agent on Ubuntu noble.
• Bump the minimum version of Ansible supported to 2.16, whilst clarifying that Ansible 2.18 is not supported at this stage.

DOCUMENTATION:

• Update community docs per the latest NGINX template repository guidelines.
• Update and tweak the README. In order to make the installation instructions easier, some file names used by the various GitHub Actions workflows have been renamed.

TESTS:

• Update RHEL UBI images to UBI 8.10 and UBI 9.4.

MAINTENANCE:

• Installing certain NGINX modules on Alpine Linux 3.17 no longer requires installing nginx-plus-module-ndk as a separate step.
• Add an ansible_managed comment to the various templated configs deployed by the role.
• Tweak Release Drafter to work better with conventional commits.

CI/CD:

• Update GitHub Actions to Ubuntu 24.04 (noble).
• Switch GitHub Actions from using tags to release hashes.
• Remove commented out Molecule platforms and GitHub Actions QEMU step for the time being. These changes will be reverted if multi-arch testing can be reinstated in GitHub Actions.
• Bump the minimum version of Ansible supported on Ansible Galaxy to 2.16.
• Remove platform metadata from the Ansible Galaxy role metadata since platforms are no longer supported in Ansible Galaxy NG.
• Implement OSSF Scorecard.
• Implement Renovate and replace Dependabot.
• Automatically add milestone and project data to Renovate Bot PRs.

---

Configuration

📅 Schedule: Branch creation - "* 0-3 1 * *" in timezone America/Los_Angeles, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.