Chore/token renewal chores (#666)

Chore/token renewal chores

See individual commit messages for details.
Related to packit/private#60

Reviewed-by: Laura Barcziová

Author: softwarefactory-project-zuul[bot]

devenv.lock

@@ -3,10 +3,10 @@
     "devenv": {
       "locked": {
         "dir": "src/modules",
-        "lastModified": 1752456450,
+        "lastModified": 1756101922,
         "owner": "cachix",
         "repo": "devenv",
-        "rev": "e2a9d0dd4cf87a1801c6d9e0d7a57bdd6de26ace",
+        "rev": "372c975fd0d5b7fc1ffbb15c75a21d7f9ea97603",
         "type": "github"
       },
       "original": {
@@ -40,10 +40,10 @@
         ]
       },
       "locked": {
-        "lastModified": 1750779888,
+        "lastModified": 1755960406,
         "owner": "cachix",
         "repo": "git-hooks.nix",
-        "rev": "16ec914f6fb6f599ce988427d9d94efddf25fe6d",
+        "rev": "e891a93b193fcaf2fc8012d890dc7f0befe86ec2",
         "type": "github"
       },
       "original": {
@@ -74,10 +74,10 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1751984180,
+        "lastModified": 1756266583,
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "9807714d6944a957c2e036f84b0ff8caf9930bc0",
+        "rev": "8a6d5427d99ec71c64f0b93d45778c889005d9c2",
         "type": "github"
       },
       "original": {

docs/deployment/nix.md

@@ -57,3 +57,7 @@ Feel free to follow the [devenv.sh' “Getting Started”](https://devenv.sh/get
 
 Bitwarden CLI is currently broken on macOS, therefore it's not included in the
 devenv.sh' config.
+
+There's also a need to set `ANSIBLE_PYTHON` as _devenv.sh_ creates a venv with
+the dependencies that need to be installed manually (such as `kubernetes`) for
+the playbooks to work properly.

tasks/set-facts.yml

@@ -49,10 +49,14 @@
     redis_hostname: "{{ kv_database }}"
 
 - name: Set Bitwarden URI
+  tags:
+    - always
   ansible.builtin.set_fact:
     bw_uri: "ansible://{{ service }}/{{ deployment }}"
 
 - name: Fetch git forges
   when: deployment != "dev"
+  tags:
+    - always
   ansible.builtin.set_fact:
     git_forges: "{{ lookup('community.general.bitwarden', bw_uri + '/git', search='') }}"