gitlabform 5.5.7__tar.gz → 6.1.0__tar.gz

{gitlabform-5.5.7 → gitlabform-6.1.0}/.github/ISSUE_TEMPLATE/bug_report.md

@@ -18,3 +18,14 @@ Output of `gitlabform -V`
 **GitLab version**
 
 F.e. `13.12.4-ee`
+
+**GitLabForm configuration**
+
+The relevant part of your gitlabform config (optionally anonymized).  
+If applicable, share both the before and after config.
+
+**Would you be open to contributing a fix?**
+
+- [ ] Yes
+- [ ] No
+- [ ] Maybe

{gitlabform-5.5.7 → gitlabform-6.1.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: gitlabform
-Version: 5.5.7
+Version: 6.1.0
 Summary: 🏗 Specialized configuration as a code tool for GitLab projects, groups and more using hierarchical configuration written in YAML
 Project-URL: Homepage, https://gitlabform.github.io/gitlabform/
 Project-URL: Repository, https://github.com/gitlabform/gitlabform.git
@@ -19,9 +19,8 @@ Classifier: Operating System :: POSIX :: Linux
 Classifier: Programming Language :: Python :: 3.14
 Classifier: Topic :: Software Development :: Version Control :: Git
 Requires-Python: >=3.12.0
-Requires-Dist: certifi==2026.5.20
+Requires-Dist: certifi==2026.6.17
 Requires-Dist: cli-ui==0.19.0
-Requires-Dist: ez-yaml==1.2.0
 Requires-Dist: jinja2==3.1.6
 Requires-Dist: luddite==1.0.4
 Requires-Dist: markupsafe==3.0.3
@@ -30,8 +29,8 @@ Requires-Dist: packaging==26.2
 Requires-Dist: python-gitlab[graphql]==8.4.0
 Requires-Dist: requests==2.34.2
 Requires-Dist: rich==15.0.0
-Requires-Dist: ruamel-yaml==0.17.21
-Requires-Dist: yamlpath==3.8.2
+Requires-Dist: ruamel-yaml==0.19.1
+Requires-Dist: yamlpath==3.9.1
 Description-Content-Type: text/markdown
 
 [![version](https://badge.fury.io/gh/gitlabform%2Fgitlabform.svg)](https://badge.fury.io/gh/gitlabform%2Fgitlabform)

{gitlabform-5.5.7 → gitlabform-6.1.0}/dev/gitlab/gitlab.rb

@@ -1,4 +1,7 @@
 gitlab_rails['initial_root_password']='mK9JnG7jwYdFcBNoQ3W3'
+# Bind nginx on IPv4 and IPv6 loopback. Without IPv6, Sidekiq's mirror sync
+# fails intermittently with ECONNREFUSED when libcurl resolves localhost to ::1.
+nginx['listen_addresses'] = ['0.0.0.0', '[::]']
 registry['enable']=false
 prometheus_monitoring['enable']=false
 gitlab_rails['initial_license_file']='/etc/gitlab/Gitlab.gitlab-license'
@@ -38,4 +41,4 @@ gitlab_rails['omniauth_providers'] = [
            },
     label: 'SAML Login'
   }
-]
+]

{gitlabform-5.5.7 → gitlabform-6.1.0}/docs/changelog.md

@@ -6,6 +6,34 @@ For details on how to migrate between major versions, please refer to the [upgra
 
 ---
 
+## 6.1.0
+
+### Features
+
+* Add wildcard pattern support for project configuration [#1311](https://github.com/gitlabform/gitlabform/pull/1311). ([nikaro](https://github.com/nikaro)) 
+
+### Bug Fixes
+
+* group_saml_links: stop delete-and-recreate churn on unchanged links [#1331](https://github.com/gitlabform/gitlabform/pull/1331). ([rickbrouwer](https://github.com/rickbrouwer))
+* validate key in files config to avoid cryptic KeyError [#1317](https://github.com/gitlabform/gitlabform/pull/1317), resolves [#1312](https://github.com/gitlabform/gitlabform/issues/1312). ([rickbrouwer](https://github.com/rickbrouwer))
+* Normalize GitLab URL while parsing configuration [#1338](https://github.com/gitlabform/gitlabform/pull/1338). ([schurzi](https://github.com/schurzi))
+
+### Dependencies
+
+* Update various dependencies to newer versions.
+
+Thanks to all the contributors of this release!
+
+## 6.0.0
+
+### Breaking Changes
+
+**Drops default support for YAML 1.1 by upgrading dependency major versions:** [#1309](https://github.com/gitlabform/gitlabform/pull/1309). ([timknight01](https://github.com/TimKnight01))
+* Drops DeepDiff and ez_yaml dependencies
+* Upgrades ruamel.yaml and yamlpath to their latest versions
+
+See [upgrade guide](upgrade.md) for important upgrade instructions and migration details.
+
 ## 5.5.7
 
 ### Build

{gitlabform-5.5.7 → gitlabform-6.1.0}/docs/upgrade.md

@@ -2,6 +2,25 @@
 
 Some of these changes between major application versions may affect the effective configuration that would be applied if you run the application. Therefore to do the upgrade safely please follow this procedure.
 
+## From 5.\* to 6.\*
+
+We have upgraded to new major versions of underlying YAML libraries `ezyaml`, `yamlpath` and `ruamel.yaml`.
+
+This results in GitLabForm no longer defaulting to `yaml 1.1` support when parsing YAML configuration files.
+
+In order to retain `yaml 1.1` configuration you **must** add the `%YAML` directive to the top of your configuration file, for example:
+
+```yaml
+%YAML 1.1
+---
+ projects_and_groups:
+   some_group/*:
+     project_settings:
+       foo: yes
+```
+
+Alternatively update your YAML to be compatible with `yaml 1.2` specification, for example by replacing `yes` with `true` in the above example, and any instances of `no` with `false`.
+
 ## From 4.\* to 5.\*
 
 ### Update `config_version`

{gitlabform-5.5.7 → gitlabform-6.1.0}/gitlabform/__init__.py

@@ -68,8 +68,9 @@ class GitLabForm:
             self.only_sections = "all"
             self.exclude_sections = []
             self.recurse_subgroups = recurse_subgroups
+            self.log_level = logging.DEBUG
 
-            self._configure_output(tests=True)
+            self._configure_logging()
         else:
             # normal mode
 
@@ -94,7 +95,16 @@ class GitLabForm:
                 self.recurse_subgroups,
             ) = self._parse_args()
 
-            self._configure_output()
+            if self.debug:
+                level = logging.DEBUG
+            elif self.verbose:
+                level = logging.INFO
+            else:
+                level = logging.WARNING
+
+            self.log_level = level
+
+            self._configure_logging()
 
             self._show_version(self.skip_version_check)
             if self.just_show_version:
@@ -108,7 +118,7 @@ class GitLabForm:
 
         self.application_processors = ApplicationProcessors(self.gitlab, self.configuration, self.strict)
         self.group_processors = GroupProcessors(self.gitlab, self.configuration, self.strict)
-        self.project_processors = ProjectProcessors(self.gitlab, self.configuration, self.strict)
+        self.project_processors = ProjectProcessors(self.gitlab, self.configuration, self.strict, self.log_level)
         self.groups_provider = GroupsProvider(
             self.gitlab,
             self.configuration,
@@ -323,27 +333,24 @@ class GitLabForm:
             args.recurse_subsgroups,
         )
 
-    def _configure_output(self, tests=False) -> None:
+    def _configure_logging(self) -> None:
         """
         Configures the application output using logging, based on debug and verbose flags:
 
         * normal mode - logging only WARNING logs
         * verbose mode - logging INFO level and above
         * debug / tests mode - logging DEBUG level and above, along with rich exception tracebacks (may expose secrets)
-
-        :param tests: True if we are running in tests mode
         """
         rich_tracebacks = False
-        if tests or self.debug:
-            level = logging.DEBUG
+
+        if self.log_level == logging.DEBUG:
             rich_tracebacks = True
-        elif self.verbose:
-            level = logging.INFO
-        else:
-            level = logging.WARNING
 
         logging.basicConfig(
-            level=level, format="%(message)s", datefmt="[%X]", handlers=[RichHandler(rich_tracebacks=rich_tracebacks)]
+            level=self.log_level,
+            format="%(message)s",
+            datefmt="[%X]",
+            handlers=[RichHandler(rich_tracebacks=rich_tracebacks)],
         )
 
     def _initialize_configuration_and_gitlab(self) -> Tuple[GitLab, Configuration]:
@@ -362,7 +369,7 @@ class GitLabForm:
                 gitlab = GitLab(config_path=self.config)
             configuration = gitlab.get_configuration()
 
-            configuration_transformers = ConfigurationTransformers(gitlab)
+            configuration_transformers = ConfigurationTransformers(gitlab, self.log_level)
             configuration_transformers.transform(configuration)
 
         except ConfigFileNotFoundException as e:

{gitlabform-5.5.7 → gitlabform-6.1.0}/gitlabform/configuration/core.py

@@ -1,3 +1,4 @@
+import fnmatch
 import sys
 from typing import Any
 
@@ -93,10 +94,6 @@ class ConfigurationCore(ABC):
 
         yaml = Parsers.get_yaml_editor()
 
-        # for better backward compatibility with PyYAML (that supports only YAML 1.1) used in the previous
-        # GitLabForm versions, let's force ruamel.yaml to use YAML version 1.1 by default too
-        yaml.version = (1, 1)
-
         if config_string:
             config = textwrap.dedent(source)
             info("Reading config from the provided string.")
@@ -215,6 +212,26 @@ class ConfigurationCore(ABC):
 
         return dict(merged_dict)
 
+    @staticmethod
+    def _get_key_type(a_key: str) -> str:
+        """
+        Classify a config key used under 'projects_and_groups'.
+        """
+        if a_key == "*":
+            return "common"
+        if a_key.endswith("/*"):
+            return "group"
+        if "*" in a_key:
+            return "project_pattern"
+        return "project"
+
+    @staticmethod
+    def _match_pattern(pattern: str, item: str) -> bool:
+        """
+        Case-insensitive fnmatch between pattern and item.
+        """
+        return fnmatch.fnmatchcase(item.lower(), pattern.lower())
+
     @staticmethod
     def _get_case_insensitively(a_dict: dict, a_key: str):
         for dict_key in a_dict.keys():
@@ -235,6 +252,7 @@ class ConfigurationCore(ABC):
             if list_element == item:
                 return True
 
+            # Support for traditional group/* skip pattern
             if (
                 list_element.endswith("/*")
                 and item.startswith(list_element[:-2])
@@ -242,6 +260,10 @@ class ConfigurationCore(ABC):
             ):
                 return True
 
+            # Support for partial wildcard patterns like group/foo-*
+            if "*" in list_element and fnmatch.fnmatchcase(item, list_element):
+                return True
+
         return False
 
     def _find_almost_duplicates(self):

{gitlabform-5.5.7 → gitlabform-6.1.0}/gitlabform/configuration/projects.py

@@ -15,14 +15,14 @@ class ConfigurationProjects(ConfigurationGroups, ABC):
     depends on the groups (and common) configuration.
     """
 
-    def get_projects(self) -> list:
+    def get_projects(self, key_type: str = "project") -> list:
         """
         :return: sorted list of projects names, that are EXPLICITLY defined in the config
         """
         projects = []
         projects_and_groups = self.get("projects_and_groups")
         for element in projects_and_groups.keys():
-            if element != "*" and not element.endswith("/*"):
+            if self._get_key_type(element) == key_type:
                 projects.append(element)
         return sorted(projects)
 
@@ -68,6 +68,27 @@ class ConfigurationProjects(ConfigurationGroups, ABC):
         """
         :param group_and_project: 'group/project'
         :return: configuration for this project or empty dict if not defined,
-                 ignoring the case
+                 ignoring the case. Also checks for matching project patterns.
         """
-        return self._get_case_insensitively(self.get("projects_and_groups"), group_and_project)
+        projects_and_groups = self.get("projects_and_groups")
+
+        # 1. Exact match
+        exact = self._get_case_insensitively(projects_and_groups, group_and_project)
+        if exact:
+            return exact
+
+        # 2. Best matching pattern
+        matches = []
+        for key in projects_and_groups.keys():
+            if self._get_key_type(key) == "project_pattern":
+                if self._match_pattern(key, group_and_project):
+                    # store a 3-tuple for later sorting
+                    prefix = key.split("*", 1)[0]
+                    matches.append((len(prefix), -key.count("*"), key))
+        if matches:
+            # longest literal prefix wins; tie -> fewer wildcards; still tie -> first appearance
+            matches.sort(reverse=True)
+            best_key = matches[0][2]
+            return self._get_case_insensitively(projects_and_groups, best_key)
+
+        return {}

{gitlabform-5.5.7 → gitlabform-6.1.0}/gitlabform/configuration/transform.py

@@ -1,15 +1,13 @@
 import sys
-from logging import debug, info, critical
+from logging import debug, info, critical, DEBUG
 from abc import ABC, abstractmethod
-from ez_yaml import ez_yaml
-from ruamel.yaml import YAML
 from types import SimpleNamespace
-
 from ruamel.yaml.comments import CommentedMap
 from yamlpath import Processor
 from yamlpath.exceptions import YAMLPathException
 from yamlpath.wrappers import ConsolePrinter
 
+from gitlabform import util
 from gitlabform.constants import EXIT_INVALID_INPUT, APPROVAL_RULE_NAME
 from gitlabform.configuration import Configuration
 from gitlabform.gitlab import AccessLevel
@@ -24,23 +22,26 @@ from gitlabform.gitlab import GitLab
 
 
 class ConfigurationTransformers:
-    def __init__(self, gitlab: GitLab):
+    def __init__(self, gitlab: GitLab, log_level: int):
         self.user_transformer = UserTransformer(gitlab)
         self.group_transformer = GroupTransformer(gitlab)
         self.implicit_name_transformer = ImplicitNameTransformer(gitlab)
         self.access_level_transformer = AccessLevelsTransformer(gitlab)
+        self.log_level = log_level
 
     def transform(self, configuration: Configuration) -> None:
-        config_before = ez_yaml.to_string(obj=configuration.config, options={})
-        debug(f"Config BEFORE transformations:\n{config_before}")
+        if self.log_level == DEBUG:
+            config_before = util.yaml_config_to_string(configuration.config)
+            debug(f"Config BEFORE transformations:\n{config_before}")
 
         self.user_transformer.transform(configuration)
         self.group_transformer.transform(configuration)
         self.implicit_name_transformer.transform(configuration)
         self.access_level_transformer.transform(configuration, last=True)
 
-        config_after = ez_yaml.to_string(obj=configuration.config, options={})
-        debug(f"Config AFTER transformations:\n{config_after}")
+        if self.log_level == DEBUG:
+            config_after = util.yaml_config_to_string(configuration.config)
+            debug(f"Config AFTER transformations:\n{config_after}")
 
 
 class ConfigurationTransformer(ABC):
@@ -58,9 +59,9 @@ class ConfigurationTransformer(ABC):
         # we needed complex ruamel.yaml's types like ordereddict and CommentedSeq
         # for transformations, but at the end convert them to simple dict and lists
         # for easier to understand debug output and tests
+        config_yaml_string = util.yaml_config_to_string(configuration.config)
 
-        config_yaml_string = ez_yaml.to_string(obj=configuration.config, options={})
-        simple_yaml_loader = YAML(typ="safe", pure=True)
+        simple_yaml_loader = util.configure_ruamel_yaml_loader(typ="safe", pure=True)
         configuration.config = simple_yaml_loader.load(config_yaml_string)
 
 

{gitlabform-5.5.7 → gitlabform-6.1.0}/gitlabform/gitlab/core.py

@@ -37,6 +37,9 @@ class GitLabCore:
         gitlab_config_from_file = self.configuration.get("gitlab", {})
         self.gitlab_config = {**default_gitlab_config, **gitlab_config_from_file}
 
+        if self.gitlab_config["url"]:
+            self.gitlab_config["url"] = self.gitlab_config["url"].rstrip("/")
+
         self.session = requests.Session()
 
         retries_status_forcelist = []

{gitlabform-5.5.7 → gitlabform-6.1.0}/gitlabform/lists/projects.py

@@ -96,6 +96,13 @@ class ProjectsProvider(GroupsProvider):
             # defined in the configuration, but we don't need to re-check for
             # being archived or scheduled for deletion projects that we already got from groups
 
+            for resolved_project in self._resolve_project_patterns(groups.get_effective()):
+                if (
+                    resolved_project not in projects.requested
+                    and resolved_project not in projects_from_configuration_not_from_groups
+                ):
+                    projects_from_configuration_not_from_groups.append(resolved_project)
+
             (
                 archived_projects_from_configuration_not_from_groups,
                 scheduled_for_deletion_projects_from_configuration_not_from_groups,
@@ -198,6 +205,42 @@ class ProjectsProvider(GroupsProvider):
 
         return skipped
 
+    def _resolve_project_patterns(self, effective_groups: list) -> list:
+        """
+        Resolve project patterns from config to concrete project paths.
+        Only resolves patterns whose parent group is not already in the effective groups list
+        to avoid redundant API calls.
+        """
+        pattern_projects = []
+        for pattern in self.configuration.get_projects("project_pattern"):
+            pattern_group = pattern.rsplit("/", 1)[0]
+            if pattern_group in effective_groups:
+                # projects from this group already fetched through normal means
+                continue
+
+            try:
+                maybe_group = self.gitlab.get_group_case_insensitive(pattern_group)
+                group_path = maybe_group["full_path"]
+            except NotFoundException:
+                debug(
+                    "Group '%s' for pattern '%s' not found in GitLab, skipping",
+                    pattern_group,
+                    pattern,
+                )
+                continue
+
+            try:
+                all_project_objects = self.gitlab.get_projects(group_path, include_archived=True, only_names=False)
+            except NotFoundException:
+                all_project_objects = []
+
+            for project_object in all_project_objects:
+                path = project_object["path_with_namespace"]
+                if self.configuration._match_pattern(pattern, path) and path not in pattern_projects:
+                    pattern_projects.append(path)
+
+        return pattern_projects
+
     def _get_project_transfer_source_from_config(self, project: str) -> Optional[str]:
         try:
             debug(

{gitlabform-5.5.7 → gitlabform-6.1.0}/gitlabform/output.py

@@ -1,8 +1,7 @@
 import sys
 from logging import debug, critical, info
 
-import ez_yaml
-
+from gitlabform import util
 from gitlabform.constants import EXIT_INVALID_INPUT, EXIT_PROCESSING_ERROR
 
 
@@ -38,7 +37,7 @@ class EffectiveConfigurationFile:
     def write_to_file(self):
         if self.output_file:
             try:
-                yaml_configuration = ez_yaml.to_string(self.config)
+                yaml_configuration = util.yaml_config_to_string(self.config)
                 self.output_file.write(yaml_configuration)
                 self.output_file.close()
             except Exception as e:

gitlabform-6.1.0/gitlabform/processors/group/group_saml_links_processor.py

@@ -0,0 +1,61 @@
+from logging import debug
+from typing import List
+
+from gitlabform.gitlab import GitLab
+from gitlab.v4.objects import Group, GroupSAMLGroupLink
+from gitlabform.processors.abstract_processor import AbstractProcessor
+
+
+class GroupSAMLLinksProcessor(AbstractProcessor):
+
+    def __init__(self, gitlab: GitLab):
+        super().__init__("group_saml_links", gitlab)
+
+    def _process_configuration(self, group_path_and_name: str, configuration: dict) -> None:
+        """Process the SAML links configuration for a group."""
+
+        configured_section = configuration.get("group_saml_links", {}) or {}
+        enforce_links = configuration.get("group_saml_links|enforce", False)
+
+        configured_links = {k: v for k, v in configured_section.items() if k != "enforce"}
+
+        group: Group = self.gl.get_group_by_path_cached(group_path_and_name)
+        existing_links: List[GroupSAMLGroupLink] = group.saml_group_links.list(get_all=True)
+        existing_by_name = {link.name: link for link in existing_links}
+
+        for _, link_configuration in configured_links.items():
+            saml_group_name = link_configuration.get("saml_group_name")
+            existing_link = existing_by_name.get(saml_group_name)
+
+            if existing_link is None:
+                group.saml_group_links.create(link_configuration)
+                continue
+
+            # GitLab API's request and response attributes differs when SAML link is created vs retrieved.
+            # On creation or retrieving a link, attribute is called `saml_group_name` but and returned response is 'name' instead.
+            # To compare existing link (retrieved from GitLab) with configured link, link configuration need to replace `saml_group_name` with `name`
+            expected = {**link_configuration, "name": saml_group_name}
+            expected.pop("saml_group_name", None)
+
+            if self._needs_update(existing_link.asdict(), expected):
+                # GitLab API has no update endpoint for SAML links; delete and recreate instead.
+                debug(f"Updating SAML link: {saml_group_name} with {link_configuration}")
+                existing_link.delete()
+                group.saml_group_links.create(link_configuration)
+
+        if enforce_links:
+            self._delete_extra_links(group, existing_links, configured_links)
+
+    def _delete_extra_links(
+        self,
+        group: Group,
+        existing: List[GroupSAMLGroupLink],
+        configured: dict,
+    ) -> None:
+        """Delete any SAML links that are not in the configuration."""
+        known_names = {link["saml_group_name"] for link in configured.values()}
+
+        for link in existing:
+            if link.name not in known_names:
+                debug(f"Deleting extra SAML link: {link.name}")
+                group.saml_group_links.delete(link.name)

{gitlabform-5.5.7 → gitlabform-6.1.0}/gitlabform/processors/project/__init__.py

@@ -47,7 +47,7 @@ from gitlabform.processors.project.remote_mirrors_processor import RemoteMirrors
 
 
 class ProjectProcessors(AbstractProcessors):
-    def __init__(self, gitlab: GitLab, config: Configuration, strict: bool):
+    def __init__(self, gitlab: GitLab, config: Configuration, strict: bool, log_level: int):
         super().__init__(gitlab, config, strict)
         self.processors: List[AbstractProcessor] = [
             # Order of processors matter. GitLabForm will process config sections
@@ -64,7 +64,7 @@ class ProjectProcessors(AbstractProcessors):
             ProjectLabelsProcessor(gitlab),
             JobTokenScopeProcessor(gitlab),
             DeployKeysProcessor(gitlab),
-            ProjectVariablesProcessor(gitlab),
+            ProjectVariablesProcessor(gitlab, log_level),
             BranchesProcessor(gitlab, strict),
             TagsProcessor(gitlab, strict),
             IntegrationsProcessor(gitlab),

{gitlabform-5.5.7 → gitlabform-6.1.0}/gitlabform/processors/project/files_processor.py

@@ -24,6 +24,19 @@ class FilesProcessor(AbstractProcessor):
         self.strict = strict
         self.branch_processor = BranchesProcessor(gitlab, strict)
 
+    def _can_proceed(self, project_or_group: str, configuration: dict):
+        for file in sorted(configuration["files"]):
+            file_config = configuration["files"][file]
+            if "branches" not in file_config:
+                critical(
+                    f"File '{file}' is missing the required 'branches' key."
+                    f" Specify which branches to apply the file to using one of:"
+                    f" 'all', 'protected', or a list of branch names (e.g. ['main'])."
+                )
+                sys.exit(EXIT_INVALID_INPUT)
+
+        return True
+
     def _process_configuration(self, project_and_group: str, configuration: dict):
         for file in sorted(configuration["files"]):
             project: Project = self.gl.get_project_by_path_cached(project_and_group)

{gitlabform-5.5.7 → gitlabform-6.1.0}/gitlabform/processors/project/project_variables_processor.py

@@ -1,12 +1,13 @@
 from typing import Dict, Any, List, cast
-from logging import warning, info
+from logging import warning, info, INFO
 
 import copy
 import textwrap
-import ez_yaml
 
 from gitlab.exceptions import GitlabGetError
 from gitlab.v4.objects import Project, ProjectVariable
+
+from gitlabform import util
 from gitlabform.gitlab import GitLab
 from gitlabform.processors.util.difference_logger import hide
 from gitlabform.processors.abstract_processor import AbstractProcessor
@@ -14,8 +15,9 @@ from gitlabform.processors.util.variables_processor import VariablesProcessor
 
 
 class ProjectVariablesProcessor(AbstractProcessor):
-    def __init__(self, gitlab: GitLab):
+    def __init__(self, gitlab: GitLab, log_level: int):
         super().__init__("variables", gitlab)
+        self.log_level = log_level
         self._variables_processor = VariablesProcessor(self._needs_update)
 
     def _process_configuration(self, project_and_group: str, configuration: Dict[str, Any]) -> None:
@@ -65,12 +67,14 @@ class ProjectVariablesProcessor(AbstractProcessor):
                 variables_list.append(var_dict)
 
             info(f"Variables for {project_and_group} in GitLab:")
-            info(
-                textwrap.indent(
-                    ez_yaml.to_string(variables_list),
-                    "  ",
+            if self.log_level == INFO:
+                yaml = util.yaml_config_to_string(variables_list)
+                info(
+                    textwrap.indent(
+                        yaml,
+                        "  ",
+                    )
                 )
-            )
         except GitlabGetError:
             info(f"Variables for {project_and_group} in GitLab cannot be checked.")
 
@@ -86,9 +90,11 @@ class ProjectVariablesProcessor(AbstractProcessor):
         for key in configured_variables.keys():
             configured_variables[key]["value"] = hide(configured_variables[key]["value"])
 
-        info(
-            textwrap.indent(
-                ez_yaml.to_string(configured_variables),
-                "  ",
+        if self.log_level == INFO:
+            yaml = util.yaml_config_to_string(configured_variables)
+            info(
+                textwrap.indent(
+                    "",
+                    "  ",
+                )
             )
-        )