Merge pull request #179 from cisagov/bugfix/pin-ansible-core

Pin `ansible-core` to earlier than 2.16.3

.github/dependabot.yml

@@ -29,6 +29,7 @@ updates:
     # ignore:
     #   # Managed by cisagov/skeleton-ansible-role
     #   - dependency-name: ansible
+    #   - dependency-name: ansible-core
     package-ecosystem: pip
     schedule:
       interval: weekly

requirements-test.txt

@@ -14,6 +14,15 @@
 # often breaking changes across major versions.  This is the reason
 # for the upper bound.
 ansible>=8,<10
+# TODO: Remove this pin when possible.  See
+# cisagov/skeleton-ansible-role#178 for more details.
+#
+# ansible-core 2.16.3 and later suffer from the bug discussed in
+# ansible/ansible#82702, which breaks any symlinked files in vars,
+# tasks, etc. for any Ansible role installed via ansible-galaxy.
+#
+# See also cisagov/skeleton-packer#312.
+ansible-core<2.16.3
 # With the release of molecule v5 there were some breaking changes so
 # we need to pin at v5 or newer. However, v5.0.0 had an internal
 # dependency issue so we must use the bugfix release as the actual