role.securityupdates/tasks/main.yml

---
- name: Sanity check
  assert:
    that: ansible_pkg_mgr in ["apk", "apt", "dnf", "pacman", "xbps", "yum", "zypper"]
    msg: 'Unsupported package manager "{{ ansible_pkg_mgr }}"'

##############################################################################

- name: Update index files
  package:
    update_cache: true
  # when: ansible_pkg_mgr not in []

##############################################################################

- name: Void -- Pre-Update xbps
  package:
    upgrade_xbps: true
  when: ansible_pkg_mgr == "xbps"

##############################################################################

- name: Debian -- Dist-Upgrade packages
  package:
    upgrade: dist
  when: ansible_pkg_mgr == "apt"

- name: Alpine/Arch/Voidlinux -- Upgrade whole system
  package:
    upgrade: yes
  when: ansible_pkg_mgr in ["apk", "pacman", "xbps"]

- name: Others -- Upgrade all packages
  package:
    name: "*"
    state: latest
  when: ansible_pkg_mgr not in ["apk", "apt", "pacman", "xbps"]