---

# install updates
- name: "install updates"
  tags:
    - "update"
    - "never"
  block:

    # install updates - debian
    - name: "install updates - debian"
      when: 'ansible_os_family == "Debian"'
      block:

        # install updates
        - name: "install updates - debian"
          ansible.builtin.apt:
            autoremove: true
            update_cache: true
            upgrade: "safe"

        # clean cache
        - name: "clean cache - debian"
          ansible.builtin.apt:
            clean: true


    # install updates - rhel
    - name: "install updates - rhel"
      when: 'ansible_os_family == "RedHat"'
      block:

        # install updates
        - name: "install updates - rhel"
          ansible.builtin.dnf:
            name: "*"
            state: "latest"
            update_cache: true

        # autoremove
        - name: "autoremove unused packages - rhel"
          ansible.builtin.dnf:
            autoremove: true

        # clean cache
        - name: "clean cache - rhel"
          ansible.builtin.command:
            cmd: "dnf clean all"
          changed_when: false


    # install updates - suse
    - name: "install updates"
      when: 'ansible_os_family == "Suse"'
      block:

        # install updates
        - name: "install updates - suse"
          community.general.zypper:
            name: "*"
            state: "latest"
            update_cache: true

        # clean cache
        - name: "clean cache - suse"
          ansible.builtin.command:
            cmd: "zypper clean --all"
          changed_when: false