Update package versions and script documentation (#100)

Author: devanshjainms

.github/workflows/codeql.yml

@@ -46,14 +46,14 @@ jobs:
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@28deaeda66b76a05916b6923827895f2b14ab387 # v3.28.16
+        uses: github/codeql-action/init@07bb2b932c90fc1ec97637495e4072a0966fa74c # v3.28.20
         with:
           languages: ${{ matrix.language }}
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@28deaeda66b76a05916b6923827895f2b14ab387 # v3.28.16
+        uses: github/codeql-action/autobuild@07bb2b932c90fc1ec97637495e4072a0966fa74c # v3.28.20
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@28deaeda66b76a05916b6923827895f2b14ab387 # v3.28.16
+        uses: github/codeql-action/analyze@07bb2b932c90fc1ec97637495e4072a0966fa74c # v3.28.20
         with:
           category: "/language:${{matrix.language}}"

.github/workflows/ossf-scoreboard.yml

@@ -50,6 +50,6 @@ jobs:
           retention-days: 5
 
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@28deaeda66b76a05916b6923827895f2b14ab387 # v3.28.16
+        uses: github/codeql-action/upload-sarif@07bb2b932c90fc1ec97637495e4072a0966fa74c # v3.28.20
         with:
           sarif_file: results.sarif

.github/workflows/trivy.yml

@@ -36,7 +36,7 @@ jobs:
         output: report-fs.sarif
 
     - name: Upload Trivy report (fs) GitHub Security
-      uses: github/codeql-action/upload-sarif@28deaeda66b76a05916b6923827895f2b14ab387 # v3.28.16
+      uses: github/codeql-action/upload-sarif@07bb2b932c90fc1ec97637495e4072a0966fa74c # v3.28.20
       with:
         sarif_file: report-fs.sarif
         category: 'fs'

requirements.txt

@@ -6,7 +6,7 @@
 #
 ansible-compat==25.6.0
     # via ansible-lint
-ansible-core==2.17.12
+ansible-core==2.17.13
     # via
     #   -r requirements.in
     #   ansible-compat
@@ -15,7 +15,7 @@ ansible-lint==25.6.1
     # via -r requirements.in
 ansible-runner==2.4.1
     # via -r requirements.in
-astroid==3.3.10
+astroid==3.3.11
     # via pylint
 attrs==25.3.0
     # via
@@ -30,15 +30,15 @@ azure-core==1.35.0
     #   azure-mgmt-core
     #   azure-storage-blob
     #   azure-storage-queue
-azure-identity==1.23.0
+azure-identity==1.23.1
     # via
     #   -r requirements.in
     #   azure-kusto-data
-azure-kusto-data==5.0.4
+azure-kusto-data==5.0.5
     # via
     #   -r requirements.in
     #   azure-kusto-ingest
-azure-kusto-ingest==5.0.4
+azure-kusto-ingest==5.0.5
     # via -r requirements.in
 azure-mgmt-core==1.6.0
     # via azure-mgmt-network
@@ -58,7 +58,7 @@ black==25.1.0
     #   ansible-lint
 bracex==2.6
     # via wcmatch
-certifi==2025.7.9
+certifi==2025.7.14
     # via requests
 cffi==1.17.1
     # via cryptography
@@ -68,7 +68,7 @@ click==8.2.1
     # via
     #   -r requirements.in
     #   black
-coverage[toml]==7.9.2
+coverage[toml]==7.10.0
     # via
     #   -r requirements.in
     #   pytest-cov
@@ -107,7 +107,7 @@ jinja2==3.1.6
     #   ansible-core
 jmespath==1.0.1
     # via -r requirements.in
-jsonschema==4.24.0
+jsonschema==4.25.0
     # via
     #   ansible-compat
     #   ansible-lint
@@ -123,7 +123,7 @@ mccabe==0.7.0
     # via pylint
 mdurl==0.1.2
     # via markdown-it-py
-msal==1.32.3
+msal==1.33.0
     # via
     #   azure-identity
     #   azure-kusto-data

scripts/sap_automation_qa.sh

@@ -84,7 +84,11 @@ Options:
   --test_groups=GROUP       Specify test group to run (e.g., HA_DB_HANA, HA_SCS)
   --test_cases=[case1,case2] Specify specific test cases to run (comma-separated, in brackets)
   --extra-vars=VAR          Specify additional Ansible extra variables (e.g., --extra-vars='{"key":"value"}')
-  --offline                 Run offline test cases using previously collected CIB data
+  --offline                 Run offline test cases using previously collected CIB data.
+				While running offline tests, the script will look for CIB data in
+				WORKSPACES/SYSTEM/<SYSTEM_CONFIG_NAME>/offline_validation directory.
+				Extra vars "ansible_os_family" required for offline mode
+				(e.g., --extra-vars='{"ansible_os_family":"SUSE"}')
   -h, --help                Show this help message
 
 Examples:
@@ -94,6 +98,34 @@ Examples:
   $0 --test_groups=HA_DB_HANA --test_cases=[ha-config,primary-node-crash] --extra-vars='{"key":"value"}'
   $0 --test_groups=HA_DB_HANA --test_cases=[ha-config] --offline
 
+Available Test Cases for groups:
+	$0 --test_groups=HA_DB_HANA
+				ha-config => High Availability configuration
+				azure-lb => Azure Load Balancer
+				resource-migration => Resource Migration
+				primary-node-crash => Primary Node Crash
+				block-network => Block Network
+				primary-crash-index => Primary Crash Index
+				primary-node-kill => Primary Node Kill
+				primary-echo-b => Primary Echo B
+				secondary-node-kill => Secondary Node Kill
+				secondary-echo-b => Secondary Echo B
+				fs-freeze => FS Freeze
+				sbd-fencing => SBD Fencing
+				secondary-crash-index => Secondary Crash Index
+	$0 --test_groups=HA_SCS
+				ha-config => High Availability configuration
+				azure-lb => Azure Load Balancer
+				sapcontrol-config => SAP Control Configuration
+				ascs-migration => ASCS Migration
+				block-network => Block Network
+				kill-message-server => Kill Message Server
+				kill-enqueue-server => Kill Enqueue Server
+				kill-enqueue-replication => Kill Enqueue Replication
+				kill-sapstartsrv-process => Kill SAP Start Service Process
+				manual-restart => Manual Restart
+				ha-failover-to-node => HA Failover to Secondary Node
+
 Configuration is read from vars.yaml file.
 EOF
 }

src/module_utils/get_pcmk_properties.py

@@ -166,7 +166,15 @@ def _create_parameter(
         if isinstance(expected_value, list):
             expected_value = expected_value[0] if expected_value else ""
         elif isinstance(expected_value, dict):
-            expected_value = list(expected_value.values())[0] if expected_value else ""
+            expected_value = (
+                [
+                    item
+                    for val in expected_value.values()
+                    for item in (val if isinstance(val, list) else [val])
+                ]
+                if expected_value
+                else ""
+            )
 
         return Parameters(
             category=f"{category}_{subcategory}" if subcategory else category,

src/roles/ha_db_hana/tasks/files/constants.yaml

@@ -50,7 +50,7 @@ VALID_CONFIGS:
     stonith-timeout:                  ["900s", "900"]
   ISCSI:
     have-watchdog:                    "true"
-    stonith-timeout:                  ["144", "144s"]
+    stonith-timeout:                  ["210", "210s"]
 
 
 # === Resource Defaults ===

src/roles/ha_scs/tasks/files/constants.yaml

@@ -58,7 +58,7 @@ VALID_CONFIGS:
     stonith-timeout:                  ["900", "900s"]
   ISCSI:
     have-watchdog:                    "true"
-    stonith-timeout:                  ["144", "144s"]
+    stonith-timeout:                  ["210", "210s"]
 
 # === Resource Defaults ===
 # cibadmin --query --scope resources