---
# tasks file for ensure_os_patch
- name: 'ensure Debian patch'
  when:
    - ansible_facts["system"] == 'Linux'
    - ansible_facts["pkg_mgr"]== 'apt'
  ansible.builtin.apt:
    autoclean: 'yes'
    autoremove: 'yes'
    upgrade: 'dist'
  notify:
    - 'ensure_os_patch.package_facts'
    - 'ensure_os_patch.service_facts'
- name: 'flush handlers'
  meta: 'flush_handlers'
...