SOPS 3.9.0: use encrypt/decrypt subcommands, use --filename-override option for encryption, use filestatus to check for encrypted files

[felixfontein]

Motivation

Use new features of SOPS 3.9.0 to improve various things in this collection.

Changes description

• Add SOPS version detection.
• Use encrypt/decrypt subcommands with SOPS 3.9.0+.
• Use --filename-override when encrypting with SOPS 3.9.0+. This fixes If .sops.yaml contains a path_regex sops_encrypt doesn't work #153.
• Use filestatus command to detect whether a file is SOPS encrypted (vars plugin).

[github-actions]

Docs Build 📝

Thank you for contribution!✨

This PR has been merged and the docs are now incorporated into main:
https://ansible-collections.github.io/community.sops/branch/main

[felixfontein]

This is now ready for review! 🎉

[endorama]

Left a nitpick, looks great to me!

[endorama]

I'd suggest to remove efficiently as it suggest that some form of version detection happened, which is not the case.

Suggested change

	self._debug('Cannot detect SOPS version efficiently, likely a version before 3.8.0')
	self._debug('Cannot detect SOPS version, likely a version before 3.8.0')

[felixfontein]

Actually efficicently is the whole point here: only 3.8.0 and later allow to disable the network request done when calling sops --version, which makes sops --version rather slow (0.3-0.7 seconds vs. 0.01-0.03 seconds runtime for 3.9.0, not sure how slow it is with older versions, since the way the version check worked changed over time).

[endorama]

Thank you for the clarification! So that cli flag avoids the roundtrip speeding up the command. Let's merge this! 👍

[felixfontein]

@endorama thanks for reviewing this!