From 07450ad8760f4d17d6360fdceb74547a65aff1bd Mon Sep 17 00:00:00 2001
From: Christopher Palmer-Richez <tofu.ansible@chorky.net>
Date: Thu, 1 Aug 2024 17:05:15 -0400
Subject: [PATCH 01/19] Add publish workflow, rename galaxy.yaml to yml.

The publish workflow packages the collection, then attempts to publish
it using the release tag name stripped of its leading "v". If the tag
name and the galaxy.yml version name do not match, ansible-galaxy will
fail to find the tarball.
---
 .github/workflows/publish.yaml | 22 ++++++++++++++++++++++
 galaxy.yaml => galaxy.yml      |  0
 2 files changed, 22 insertions(+)
 create mode 100644 .github/workflows/publish.yaml
 rename galaxy.yaml => galaxy.yml (100%)

diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
new file mode 100644
index 0000000..ccccd93
--- /dev/null
+++ b/.github/workflows/publish.yaml
@@ -0,0 +1,22 @@
+- name: Deploy collection to galaxy
+  on:
+    release:
+      types:
+        - released
+
+  jobs:
+    publish:
+      runs-on: ubuntu-latest
+      steps:
+        - uses: checkout@v4
+          with:
+            ref: ${{ github.ref }}
+
+        - name: Build collection
+          run: ansible-galaxy collection build
+
+        - name: Get expected version string
+          shell: VERSION=$(echo "${{ github.ref_name }}" | sed -e 's/v([0-9]*\.?){3}/\1/')
+
+        - name: Publish to Galaxy
+          run: ansible-galaxy collection publish tofugarden-secureboot-$VERSION.tar.gz --token ${{ secrets.GALAXY_API_KEY }}
diff --git a/galaxy.yaml b/galaxy.yml
similarity index 100%
rename from galaxy.yaml
rename to galaxy.yml

From cd5c484d3667cae345c8f5044a5ebe84e487d515 Mon Sep 17 00:00:00 2001
From: Christopher Palmer-Richez <tofu.ansible@chorky.net>
Date: Thu, 1 Aug 2024 17:08:07 -0400
Subject: [PATCH 02/19] Add workflow job name.

---
 .github/workflows/publish.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index ccccd93..8e9a367 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -6,6 +6,7 @@
 
   jobs:
     publish:
+      name: Publish to Galaxy
       runs-on: ubuntu-latest
       steps:
         - uses: checkout@v4

From 2a9b0eb0ca90f97e0cf2146c3339152b9ebecf18 Mon Sep 17 00:00:00 2001
From: Christopher Palmer-Richez <tofu.ansible@chorky.net>
Date: Thu, 1 Aug 2024 17:17:37 -0400
Subject: [PATCH 03/19] Fix bad versions in galaxy.yml, fix version extract in
 wf.

---
 .github/workflows/publish.yaml | 2 +-
 galaxy.yml                     | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index 8e9a367..0650eef 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -17,7 +17,7 @@
           run: ansible-galaxy collection build
 
         - name: Get expected version string
-          shell: VERSION=$(echo "${{ github.ref_name }}" | sed -e 's/v([0-9]*\.?){3}/\1/')
+          shell: VERSION=$(echo "${{ github.ref_name }}" | echo "v0.0.1" | sed -e 's/v\(.*\)/\1/'
 
         - name: Publish to Galaxy
           run: ansible-galaxy collection publish tofugarden-secureboot-$VERSION.tar.gz --token ${{ secrets.GALAXY_API_KEY }}
diff --git a/galaxy.yml b/galaxy.yml
index efb4e7d..602cdb1 100644
--- a/galaxy.yml
+++ b/galaxy.yml
@@ -22,8 +22,8 @@ tags:
   - uki
 
 dependencies:
-  community.crypto: "9.2.0 <10.0.0"
-  community.general: "2.21.1 <3.0.0"
+  community.crypto: ">=9.2.0,<10.0.0"
+  community.general: ">=2.21.1,<3.0.0"
 
 repository: https://github.com/crichez/tofugarden.secureboot.git
 

From 6e4fbe5809bd4f3b2a70cf7df6a45c8dc6f9169b Mon Sep 17 00:00:00 2001
From: Christopher Palmer-Richez <tofu.ansible@chorky.net>
Date: Thu, 1 Aug 2024 17:19:55 -0400
Subject: [PATCH 04/19] Downgrade min community.crypto version

---
 galaxy.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/galaxy.yml b/galaxy.yml
index 602cdb1..056db6e 100644
--- a/galaxy.yml
+++ b/galaxy.yml
@@ -22,7 +22,7 @@ tags:
   - uki
 
 dependencies:
-  community.crypto: ">=9.2.0,<10.0.0"
+  community.crypto: ">=9.1.0,<10.0.0"
   community.general: ">=2.21.1,<3.0.0"
 
 repository: https://github.com/crichez/tofugarden.secureboot.git

From 65ba013b3ce88e8dace9356a22b07309a9ab4f1c Mon Sep 17 00:00:00 2001
From: Christopher Palmer-Richez <tofu.ansible@chorky.net>
Date: Thu, 1 Aug 2024 17:23:13 -0400
Subject: [PATCH 05/19] Fix bad dependency versions

---
 galaxy.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/galaxy.yml b/galaxy.yml
index 056db6e..dfd4bc8 100644
--- a/galaxy.yml
+++ b/galaxy.yml
@@ -22,8 +22,8 @@ tags:
   - uki
 
 dependencies:
-  community.crypto: ">=9.1.0,<10.0.0"
-  community.general: ">=2.21.1,<3.0.0"
+  community.crypto: ">=2.21.0,<3.0.0"
+  community.general: ">=9.0.0,<10.0.0"
 
 repository: https://github.com/crichez/tofugarden.secureboot.git
 

From a92bd3c205b0810628bce87e309b121c003f5d3a Mon Sep 17 00:00:00 2001
From: Christopher Palmer-Richez <tofu.ansible@chorky.net>
Date: Fri, 2 Aug 2024 09:50:10 -0400
Subject: [PATCH 06/19] Add required tags.

---
 galaxy.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/galaxy.yml b/galaxy.yml
index dfd4bc8..d7e6271 100644
--- a/galaxy.yml
+++ b/galaxy.yml
@@ -15,6 +15,9 @@ license:
   - GPL-3.0-only
 
 tags:
+  - linux
+  - security
+  - tools
   - secureboot
   - mok
   - shim

From efcc3c2edaa3d4e3d75c6a04ec4b265f22f1d1b1 Mon Sep 17 00:00:00 2001
From: Christopher Palmer-Richez <tofu.ansible@chorky.net>
Date: Fri, 2 Aug 2024 10:02:21 -0400
Subject: [PATCH 07/19] Add changelogs dir, original changelog.yaml

---
 changelogs/changelog.yaml | 13 +++++++++++++
 galaxy.yml                | 12 +-----------
 2 files changed, 14 insertions(+), 11 deletions(-)
 create mode 100644 changelogs/changelog.yaml

diff --git a/changelogs/changelog.yaml b/changelogs/changelog.yaml
new file mode 100644
index 0000000..68ab49c
--- /dev/null
+++ b/changelogs/changelog.yaml
@@ -0,0 +1,13 @@
+ancestor: null
+releases:
+  0.0.1:
+    release_date: "2024-08-02"
+    fragments:
+      - Initial release
+    changes:
+      release_summary: Initial release
+    objects:
+      role:
+        - name: uki_config
+          description: Configure kernel-install to use UKIs
+          namespace: null
diff --git a/galaxy.yml b/galaxy.yml
index d7e6271..1b4b1e6 100644
--- a/galaxy.yml
+++ b/galaxy.yml
@@ -1,19 +1,13 @@
+---
 namespace: tofugarden
-
 name: secureboot
-
 version: 0.0.1
-
 readme: README.md
-
 authors:
   Christopher Palmer-Richez tofu.ansible@chorky.net @crichez
-
 description: A collection related to secure boot management.
-
 license:
   - GPL-3.0-only
-
 tags:
   - linux
   - security
@@ -23,13 +17,9 @@ tags:
   - shim
   - tpm
   - uki
-
 dependencies:
   community.crypto: ">=2.21.0,<3.0.0"
   community.general: ">=9.0.0,<10.0.0"
-
 repository: https://github.com/crichez/tofugarden.secureboot.git
-
 documentation: https://github.com/crichez/tofugarden.secureboot
-
 issues: https://github.com/crichez/tofugarden.secureboot/issues

From c53196e9c3811e407939e9e1b83fc6ee17d5e7e7 Mon Sep 17 00:00:00 2001
From: Christopher Palmer-Richez <tofu.ansible@chorky.net>
Date: Fri, 2 Aug 2024 10:05:30 -0400
Subject: [PATCH 08/19] Add meta/runtime.yml with min ansible version.

---
 meta/runtime.yml | 2 ++
 1 file changed, 2 insertions(+)
 create mode 100644 meta/runtime.yml

diff --git a/meta/runtime.yml b/meta/runtime.yml
new file mode 100644
index 0000000..2df0dc8
--- /dev/null
+++ b/meta/runtime.yml
@@ -0,0 +1,2 @@
+---
+requires_ansible: ">=2.17"

From dcef3206201ebdb5b94d80b751c665b31a775101 Mon Sep 17 00:00:00 2001
From: Christopher Palmer-Richez <tofu.ansible@chorky.net>
Date: Fri, 2 Aug 2024 10:06:53 -0400
Subject: [PATCH 09/19] Fix min ansible version to be full length.

---
 meta/runtime.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/meta/runtime.yml b/meta/runtime.yml
index 2df0dc8..a764a08 100644
--- a/meta/runtime.yml
+++ b/meta/runtime.yml
@@ -1,2 +1,2 @@
 ---
-requires_ansible: ">=2.17"
+requires_ansible: ">=2.17.0"

From 1facc91518c97bb681a00399501764beb449d495 Mon Sep 17 00:00:00 2001
From: Christopher Palmer-Richez <tofu.ansible@chorky.net>
Date: Fri, 2 Aug 2024 10:08:58 -0400
Subject: [PATCH 10/19] Bump first release version to 1.0.0.

---
 changelogs/changelog.yaml                 | 3 ++-
 galaxy.yml                                | 2 +-
 roles/uki_config/meta/argument_specs.yaml | 3 ++-
 3 files changed, 5 insertions(+), 3 deletions(-)

diff --git a/changelogs/changelog.yaml b/changelogs/changelog.yaml
index 68ab49c..1b20602 100644
--- a/changelogs/changelog.yaml
+++ b/changelogs/changelog.yaml
@@ -1,6 +1,7 @@
+---
 ancestor: null
 releases:
-  0.0.1:
+  1.0.0:
     release_date: "2024-08-02"
     fragments:
       - Initial release
diff --git a/galaxy.yml b/galaxy.yml
index 1b4b1e6..637d932 100644
--- a/galaxy.yml
+++ b/galaxy.yml
@@ -1,7 +1,7 @@
 ---
 namespace: tofugarden
 name: secureboot
-version: 0.0.1
+version: 1.0.0
 readme: README.md
 authors:
   Christopher Palmer-Richez tofu.ansible@chorky.net @crichez
diff --git a/roles/uki_config/meta/argument_specs.yaml b/roles/uki_config/meta/argument_specs.yaml
index 7226519..611b439 100644
--- a/roles/uki_config/meta/argument_specs.yaml
+++ b/roles/uki_config/meta/argument_specs.yaml
@@ -1,8 +1,9 @@
+---
 argument_specs:
   main:
     short_description: UKI Configuration
     description: Configure kernel-install to build and sign UKIs
-    version_added: "0.0.1"
+    version_added: "1.0.0"
     author: "Christopher Palmer-Richez (tofugarden)"
     options:
       uki_config_initrd_generator:

From 370958d33e07edfc1d76d47efc8fbb282f901d35 Mon Sep 17 00:00:00 2001
From: Christopher Palmer-Richez <tofu.ansible@chorky.net>
Date: Fri, 2 Aug 2024 10:09:39 -0400
Subject: [PATCH 11/19] Fix authors not being a list.

---
 galaxy.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/galaxy.yml b/galaxy.yml
index 637d932..43b34a1 100644
--- a/galaxy.yml
+++ b/galaxy.yml
@@ -4,7 +4,7 @@ name: secureboot
 version: 1.0.0
 readme: README.md
 authors:
-  Christopher Palmer-Richez tofu.ansible@chorky.net @crichez
+  - Christopher Palmer-Richez tofu.ansible@chorky.net @crichez
 description: A collection related to secure boot management.
 license:
   - GPL-3.0-only

From f7a025b4c5e3e5766ce2a6dec88d7d292274ebc2 Mon Sep 17 00:00:00 2001
From: Christopher Palmer-Richez <tofu.ansible@chorky.net>
Date: Fri, 2 Aug 2024 10:18:53 -0400
Subject: [PATCH 12/19] Add doc header, enforce 60 char column limit

---
 .github/workflows/publish.yaml | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index 0650eef..06e0797 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -1,3 +1,4 @@
+---
 - name: Deploy collection to galaxy
   on:
     release:
@@ -17,7 +18,10 @@
           run: ansible-galaxy collection build
 
         - name: Get expected version string
-          shell: VERSION=$(echo "${{ github.ref_name }}" | echo "v0.0.1" | sed -e 's/v\(.*\)/\1/'
+          shell: VERSION=$(echo ${{ github.ref_name }} | sed -e 's/v\(.*\)/\1/'
 
         - name: Publish to Galaxy
-          run: ansible-galaxy collection publish tofugarden-secureboot-$VERSION.tar.gz --token ${{ secrets.GALAXY_API_KEY }}
+          run: |
+            ansible-galaxy collection publish \
+            tofugarden-secureboot-$VERSION.tar.gz \
+            --token ${{ secrets.GALAXY_API_KEY }}

From 1006ee5d53bdc25307c3dde1cad5e575a258bdd3 Mon Sep 17 00:00:00 2001
From: Christopher Palmer-Richez <tofu.ansible@chorky.net>
Date: Fri, 2 Aug 2024 10:33:54 -0400
Subject: [PATCH 13/19] Rename repo and collection to crichez.secureboot

---
 README.md  | 2 +-
 galaxy.yml | 8 ++++----
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/README.md b/README.md
index 46a86da..780e848 100644
--- a/README.md
+++ b/README.md
@@ -1,4 +1,4 @@
-# tofugarden.secureboot
+# crichez.secureboot
 
 This repository contains an Ansible roles to configure secure boot. 
 
diff --git a/galaxy.yml b/galaxy.yml
index 43b34a1..548091b 100644
--- a/galaxy.yml
+++ b/galaxy.yml
@@ -1,5 +1,5 @@
 ---
-namespace: tofugarden
+namespace: crichez
 name: secureboot
 version: 1.0.0
 readme: README.md
@@ -20,6 +20,6 @@ tags:
 dependencies:
   community.crypto: ">=2.21.0,<3.0.0"
   community.general: ">=9.0.0,<10.0.0"
-repository: https://github.com/crichez/tofugarden.secureboot.git
-documentation: https://github.com/crichez/tofugarden.secureboot
-issues: https://github.com/crichez/tofugarden.secureboot/issues
+repository: https://github.com/crichez/crichez.secureboot.git
+documentation: https://github.com/crichez/crichez.secureboot
+issues: https://github.com/crichez/crichez.secureboot/issues

From b9f5ae807825309e73160104163cb6587dd005a9 Mon Sep 17 00:00:00 2001
From: Christopher Palmer-Richez <tofu.ansible@chorky.net>
Date: Fri, 2 Aug 2024 10:38:18 -0400
Subject: [PATCH 14/19] Fix incorrect GH workflow syntax on second line.

---
 .github/workflows/publish.yaml | 44 +++++++++++++++++-----------------
 1 file changed, 22 insertions(+), 22 deletions(-)

diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index 06e0797..33b188d 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -1,27 +1,27 @@
 ---
-- name: Deploy collection to galaxy
-  on:
-    release:
-      types:
-        - released
+name: Deploy collection to galaxy
+on:
+  release:
+    types:
+      - released
 
-  jobs:
-    publish:
-      name: Publish to Galaxy
-      runs-on: ubuntu-latest
-      steps:
-        - uses: checkout@v4
-          with:
-            ref: ${{ github.ref }}
+jobs:
+  publish:
+    name: Publish to Galaxy
+    runs-on: ubuntu-latest
+    steps:
+      - uses: checkout@v4
+        with:
+          ref: ${{ github.ref }}
 
-        - name: Build collection
-          run: ansible-galaxy collection build
+      - name: Build collection
+        run: ansible-galaxy collection build
 
-        - name: Get expected version string
-          shell: VERSION=$(echo ${{ github.ref_name }} | sed -e 's/v\(.*\)/\1/'
+      - name: Get expected version string
+        shell: VERSION=$(echo ${{ github.ref_name }} | sed -e 's/v\(.*\)/\1/'
 
-        - name: Publish to Galaxy
-          run: |
-            ansible-galaxy collection publish \
-            tofugarden-secureboot-$VERSION.tar.gz \
-            --token ${{ secrets.GALAXY_API_KEY }}
+      - name: Publish to Galaxy
+        run: |
+          ansible-galaxy collection publish \
+          tofugarden-secureboot-$VERSION.tar.gz \
+          --token ${{ secrets.GALAXY_API_KEY }}

From d7f9665fbd4787fa5c997730b0c1a8a26a07ef74 Mon Sep 17 00:00:00 2001
From: Christopher Palmer-Richez <tofu.ansible@chorky.net>
Date: Fri, 2 Aug 2024 19:13:34 -0400
Subject: [PATCH 15/19] Use tool to generate changelogs.

This commit uses antsibull-changelog to generate changelogs for each
release. The CHANGELOG.rst file generated in this process will serve as
the body of the release. The source tarball is attached as an artifact.
---
 .github/workflows/release.yaml | 37 ++++++++++++++++++++++++++++++++++
 changelogs/changelog.yaml      | 13 ++++++------
 changelogs/config.yaml         | 37 ++++++++++++++++++++++++++++++++++
 3 files changed, 80 insertions(+), 7 deletions(-)
 create mode 100644 .github/workflows/release.yaml
 create mode 100644 changelogs/config.yaml

diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
new file mode 100644
index 0000000..3cfe2c6
--- /dev/null
+++ b/.github/workflows/release.yaml
@@ -0,0 +1,37 @@
+---
+name: Release
+on:
+  push:
+    tags:
+      - v*
+
+    tags-ignore:
+      - "*-alpha"
+      - "*-beta"
+
+jobs:
+  release:
+    name: Release
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Install antibull-changelog
+        run: pip install ansibull-changelog
+
+      - name: Generate changelog
+        run: ansibull-changelog release
+
+      - name: Build collection tarball
+        run: ansible-galaxy collection build
+
+      - name: Get version string
+        shell: echo "VERSION=${GITHUB_REF_NAME:1}" >> "$GITHUB_ENV"
+
+      - uses: ncipollo/release-action@v1
+        with:
+          artifacts:
+            - crichez-secureboot-${{ env.VERSION }}.tar.gz
+          body_file: CHANGELOG.rst
diff --git a/changelogs/changelog.yaml b/changelogs/changelog.yaml
index 1b20602..4a6395b 100644
--- a/changelogs/changelog.yaml
+++ b/changelogs/changelog.yaml
@@ -1,14 +1,13 @@
----
 ancestor: null
 releases:
   1.0.0:
-    release_date: "2024-08-02"
-    fragments:
-      - Initial release
     changes:
       release_summary: Initial release
+    fragments:
+    - Initial release
     objects:
       role:
-        - name: uki_config
-          description: Configure kernel-install to use UKIs
-          namespace: null
+      - description: Configure kernel-install to use UKIs
+        name: uki_config
+        namespace: null
+    release_date: '2024-08-02'
diff --git a/changelogs/config.yaml b/changelogs/config.yaml
new file mode 100644
index 0000000..0638c8d
--- /dev/null
+++ b/changelogs/config.yaml
@@ -0,0 +1,37 @@
+add_plugin_period: true
+changelog_filename_template: ../CHANGELOG.rst
+changelog_filename_version_depth: 0
+changelog_nice_yaml: false
+changelog_sort: alphanumerical
+changes_file: changelog.yaml
+changes_format: combined
+ignore_other_fragment_extensions: true
+keep_fragments: false
+mention_ancestor: true
+new_plugins_after_name: removed_features
+notesdir: fragments
+output_formats:
+- rst
+prelude_section_name: release_summary
+prelude_section_title: Release Summary
+sanitize_changelog: true
+sections:
+- - major_changes
+  - Major Changes
+- - minor_changes
+  - Minor Changes
+- - breaking_changes
+  - Breaking Changes / Porting Guide
+- - deprecated_features
+  - Deprecated Features
+- - removed_features
+  - Removed Features (previously deprecated)
+- - security_fixes
+  - Security Fixes
+- - bugfixes
+  - Bugfixes
+- - known_issues
+  - Known Issues
+title: Crichez.Secureboot
+trivial_section_name: trivial
+use_fqcn: true

From d9378b4f3077b6a8da5f1b75aadc2a37ad607393 Mon Sep 17 00:00:00 2001
From: Christopher Palmer-Richez <tofu.ansible@chorky.net>
Date: Fri, 2 Aug 2024 19:16:22 -0400
Subject: [PATCH 16/19] Use only generated changelog file.

The combination of the manually and auto generated parts failed the lint
check.
---
 changelogs/changelog.yaml | 6 +-----
 1 file changed, 1 insertion(+), 5 deletions(-)

diff --git a/changelogs/changelog.yaml b/changelogs/changelog.yaml
index 4a6395b..5eec00c 100644
--- a/changelogs/changelog.yaml
+++ b/changelogs/changelog.yaml
@@ -1,13 +1,9 @@
 ancestor: null
 releases:
   1.0.0:
-    changes:
-      release_summary: Initial release
-    fragments:
-    - Initial release
     objects:
       role:
-      - description: Configure kernel-install to use UKIs
+      - description: UKI Configuration.
         name: uki_config
         namespace: null
     release_date: '2024-08-02'

From b65678b42b59a977f5ace4d20c372c4452eb5f67 Mon Sep 17 00:00:00 2001
From: Christopher Palmer-Richez <tofu.ansible@chorky.net>
Date: Sat, 3 Aug 2024 14:15:36 -0400
Subject: [PATCH 17/19] Use nice YAML for ansible-lint.

---
 changelogs/changelog.yaml | 7 ++++---
 changelogs/config.yaml    | 2 +-
 2 files changed, 5 insertions(+), 4 deletions(-)

diff --git a/changelogs/changelog.yaml b/changelogs/changelog.yaml
index 5eec00c..a899c89 100644
--- a/changelogs/changelog.yaml
+++ b/changelogs/changelog.yaml
@@ -1,9 +1,10 @@
+---
 ancestor: null
 releases:
   1.0.0:
     objects:
       role:
-      - description: UKI Configuration.
-        name: uki_config
-        namespace: null
+        - description: UKI Configuration.
+          name: uki_config
+          namespace: null
     release_date: '2024-08-02'
diff --git a/changelogs/config.yaml b/changelogs/config.yaml
index 0638c8d..3f63fb3 100644
--- a/changelogs/config.yaml
+++ b/changelogs/config.yaml
@@ -1,7 +1,7 @@
 add_plugin_period: true
 changelog_filename_template: ../CHANGELOG.rst
 changelog_filename_version_depth: 0
-changelog_nice_yaml: false
+changelog_nice_yaml: true
 changelog_sort: alphanumerical
 changes_file: changelog.yaml
 changes_format: combined

From 51bc222664db6da14764aa303af8aebab51ff99e Mon Sep 17 00:00:00 2001
From: Christopher Palmer-Richez <tofu.ansible@chorky.net>
Date: Sat, 3 Aug 2024 14:16:50 -0400
Subject: [PATCH 18/19] Use CHANGELOG.md instead of RST.

---
 .github/workflows/release.yaml | 2 +-
 changelogs/config.yaml         | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 3cfe2c6..fb35c66 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -34,4 +34,4 @@ jobs:
         with:
           artifacts:
             - crichez-secureboot-${{ env.VERSION }}.tar.gz
-          body_file: CHANGELOG.rst
+          body_file: CHANGELOG.md
diff --git a/changelogs/config.yaml b/changelogs/config.yaml
index 3f63fb3..dea943a 100644
--- a/changelogs/config.yaml
+++ b/changelogs/config.yaml
@@ -11,7 +11,7 @@ mention_ancestor: true
 new_plugins_after_name: removed_features
 notesdir: fragments
 output_formats:
-- rst
+- md
 prelude_section_name: release_summary
 prelude_section_title: Release Summary
 sanitize_changelog: true

From 6e5336321fcd73cdeb32a8f60333d6d5b7470399 Mon Sep 17 00:00:00 2001
From: Christopher Palmer-Richez <tofu.ansible@chorky.net>
Date: Sat, 3 Aug 2024 14:20:27 -0400
Subject: [PATCH 19/19] Fix indentation for ansible-lint.

---
 changelogs/config.yaml | 34 +++++++++++++++++-----------------
 1 file changed, 17 insertions(+), 17 deletions(-)

diff --git a/changelogs/config.yaml b/changelogs/config.yaml
index dea943a..8e58a07 100644
--- a/changelogs/config.yaml
+++ b/changelogs/config.yaml
@@ -11,27 +11,27 @@ mention_ancestor: true
 new_plugins_after_name: removed_features
 notesdir: fragments
 output_formats:
-- md
+  - md
 prelude_section_name: release_summary
 prelude_section_title: Release Summary
 sanitize_changelog: true
 sections:
-- - major_changes
-  - Major Changes
-- - minor_changes
-  - Minor Changes
-- - breaking_changes
-  - Breaking Changes / Porting Guide
-- - deprecated_features
-  - Deprecated Features
-- - removed_features
-  - Removed Features (previously deprecated)
-- - security_fixes
-  - Security Fixes
-- - bugfixes
-  - Bugfixes
-- - known_issues
-  - Known Issues
+  - - major_changes
+    - Major Changes
+  - - minor_changes
+    - Minor Changes
+  - - breaking_changes
+    - Breaking Changes / Porting Guide
+  - - deprecated_features
+    - Deprecated Features
+  - - removed_features
+    - Removed Features (previously deprecated)
+  - - security_fixes
+    - Security Fixes
+  - - bugfixes
+    - Bugfixes
+  - - known_issues
+    - Known Issues
 title: Crichez.Secureboot
 trivial_section_name: trivial
 use_fqcn: true