---
- name: Patch Debian-family hosts
  ansible.builtin.apt:
    state: present
    update_cache: yes
    upgrade: safe
    autoremove: yes
    autoclean: yes
  when: ansible_os_family == 'Debian'
  notify: Reboot if required