Add support for Remove-New-Unused-Dependencies

README.md

@@ -46,8 +46,10 @@ On some hosts you may find that the unattended-upgrade's cronfile `/etc/cron.dai
     * Default: `false` (don't send any e-mail)
 * `unattended_mail_only_on_error`: send e-mail only on errors, otherwise e-mail will be sent every time there's a package upgrade.
     * Default: `false`
-* `unattended_remove_unused_dependencies`: do automatic removal of new unused dependencies after the upgrade.
+* `unattended_remove_unused_dependencies`: do automatic removal of all unused dependencies after the upgrade.
     * Default: `false`
+* `unattended_remove_new_unused_dependencies`: do automatic removal of new unused dependencies after the upgrade.
+    * Default: `true`
 * `unattended_automatic_reboot`: Automatically reboot system if any upgraded package requires it, immediately after the upgrade.
     * Default: `false`
 * `unattended_automatic_reboot_time`: Automatically reboot system if any upgraded package requires it, at the specific time (_HH:MM_) instead of immediately after the upgrade.

defaults/main.yml

@@ -48,10 +48,14 @@ unattended_mail: false
 unattended_mail_only_on_error: false
 
 #Unattended-Upgrade::Remove-Unused-Dependencies
-# Do automatic removal of new unused dependencies after the upgrade
+# Do automatic removal of all unused dependencies after the upgrade
 # (equivalent to apt-get autoremove)
 unattended_remove_unused_dependencies: false
 
+#Unattended-Upgrade::Remove-New-Unused-Dependencies
+# Remove any new unused dependencies after the upgrade
+unattended_remove_new_unused_dependencies: true
+
 #Unattended-Upgrade::Automatic-Reboot
 # Automatically reboot *WITHOUT CONFIRMATION* if a
 # the file /var/run/reboot-required is found after the upgrade
@@ -119,4 +123,4 @@ unattended_dpkg_options: []
 
 
 # Use apt bandwidth limit feature, this example limits the download speed to 70kb/sec
-#unattended_dl_limit: 70
+#unattended_dl_limit: 70

templates/unattended-upgrades.j2

@@ -57,11 +57,16 @@ Unattended-Upgrade::MailOnlyOnError "true";
 {% endif %}
 
 {% if unattended_remove_unused_dependencies %}
-// Do automatic removal of new unused dependencies after the upgrade
+// Do automatic removal of all unused dependencies after the upgrade
 // (equivalent to apt-get autoremove)
 Unattended-Upgrade::Remove-Unused-Dependencies "true";
 {% endif %}
 
+{% if not unattended_remove_new_unused_dependencies %}
+// Do automatic removal of new unused dependencies after the upgrade
+Unattended-Upgrade::Remove-New-Unused-Dependencies "false";
+{% endif %}
+
 {% if unattended_automatic_reboot %}
 // Automatically reboot *WITHOUT CONFIRMATION* if a
 // the file /var/run/reboot-required is found after the upgrade