- name: Upgrade packages
  hosts: vms
  become: true

  tasks:
   - name: Update apt cache
     ansible.builtin.apt:
      update_cache: true
     register: cache_updated

   - name: Upgrade all packages
     ansible.builtin.apt:
      upgrade: "yes"
     when: cache_updated.changed or cache_updated.rc == 0

   - name: Autoremove unnecessary packages
     ansible.builtin.apt:
      autoremove: true
     when: cache_updated.changed or cache_updated.rc == 0

   - name: Autoclean apt cache
     ansible.builtin.apt:
      autoclean: true
     when: cache_updated.changed or cache_updated.rc == 0