FIX: 2.4.10 bug fixes with update-changes migrations

controls/roles/manage-service/tasks/main.yml

@@ -153,6 +153,15 @@
         (stereum_service_configuration.service is match("OpRethService") and stereum_service_configuration.network is match("op-mainnet")) and
         (stereum.manage_service.state == "started" or stereum.manage_service.state == "restarted")
 
+    - name: Refresh image for services pinned to the "latest" tag
+      community.docker.docker_image_pull:
+        name: "{{ stereum_service_configuration.image }}"
+      become: yes
+      failed_when: false
+      when:
+        - stereum.manage_service.state == "started" or stereum.manage_service.state == "restarted"
+        - (stereum_service_configuration.image | split('/') | last | split(':') | last) == "latest"
+
     - name: Start service
       community.docker.docker_container:
         command_handling: correct

controls/roles/update-changes/molecule/2410/converge.yml

@@ -0,0 +1,10 @@
+---
+- name: Converge
+  hosts: all
+  vars_files:
+  - ../../../../defaults/stereum_defaults.yaml
+
+  tasks:
+    - name: "Include update-changes"
+      include_role:
+        name: "update-changes"

controls/roles/update-changes/molecule/2410/molecule.yml

@@ -0,0 +1,28 @@
+---
+#dependency:
+#  name: galaxy
+driver:
+  name: docker
+platforms:
+  - name: "update-changes--2.4.10--ubuntu-26.04"
+    image: ubuntu:resolute
+  # - name: "configure-updates--default--centos-8"
+  #   image: geerlingguy/docker-centos8-ansible
+provisioner:
+  name: ansible
+  env:
+    ANSIBLE_PIPELINING: "True"
+    ANSIBLE_ROLES_PATH: "${MOLECULE_PROJECT_DIRECTORY}/..:./roles:~/.ansible/roles:/usr/share/ansible/roles:/etc/ansible/roles"
+lint: |
+  set -e
+  yamllint .
+  ansible-lint .
+scenario:
+  test_sequence:
+    - destroy
+    - create
+    - prepare
+    - converge
+    - idempotence
+    - verify
+    - destroy

controls/roles/update-changes/molecule/2410/playbook.yml

@@ -0,0 +1,7 @@
+---
+- name: Converge
+  hosts: all
+  tasks:
+    - name: "Include update-changes"
+      include_role:
+        name: "update-changes"