---
- name: Ensure Debian is up-to-date
  apt:
    update_cache: yes
    upgrade: "{{ apt_upgrade_mode | default('safe') }}"
  tags:
    - system
    - packages