Red Hat rolls 11 Ansible networking collection releases into its NetOps push
The quarterly engineering update emphasizes safer CI, more predictable device-state handling and fixes for large configurations and connection timeouts.
Red Hat says it shipped 11 releases across its core Ansible networking collections during the third quarter of 2026, with changes concentrated on security, state accuracy and operability.
The release set spans ansible.netcommon, cisco.ios, cisco.iosxr, cisco.nxos, arista.eos and ansible.utils. Red Hat’s update also places the work beside Automation Orchestrator, the add-on made generally available for Ansible Automation Platform 2.7, but the more consequential detail for network teams is in the collection-level fixes.
Safer automation pipelines
Red Hat removed the obsolete pycrypto dependency from unit-test requirements and corrected deprecated ansible.module_utils imports across multiple networking collections. It also split continuous-integration jobs so untrusted pull requests run only secret-free checks while privileged jobs remain label-gated. Published ansible-pylibssh wheels now include libssh 0.12.2.
Device-specific fixes include corrected TACACS+ enable-prompt handling in arista.eos and several SNMP behavior corrections in cisco.nxos, including update and removal behavior for users and communities.
State should match intent
A large share of the quarter’s work addresses resource-module state handling, where a bad diff can translate directly into an unintended network change. The cisco.ios collection received corrections for BGP neighbor route maps, prefix lists, ASDOT local-AS notation and remote-AS idempotency. Red Hat also lists VLAN, switchport and access-control-list context fixes across the NX-OS and EOS collections, along with fact-gathering crash fixes on IOS XR and Nexus systems.
For large estates, ansible.netcommon and cisco.iosxr now support huge_tree for NETCONF so large configurations do not hit default parser limits. The libssh connection plug-in now honors persistent_connect_timeout, and network_cli adds optional transcript recording for troubleshooting and audit. Red Hat says cli_config can also push configuration and detect changes on platforms without native diff support.
Partner content continues downstream
The quarterly summary also highlights Arista AVD enhancements and notes that newer netbox.netbox releases, including 3.23.0, are queued for Red Hat certification rather than already certified. That distinction matters for customers who consume collections through Automation Hub: upstream availability and certified availability are separate milestones.
Taken together, the releases are incremental rather than a single platform launch, but they target the failure modes that make network automation risky at scale: secret exposure, incorrect diffs, parser limits and inconsistent connection behavior.
sources
comments · 0