Salt 3006.9 release notes¶

Drop CentOS 7 support #66623

No longer build RPM packages with CentOS Stream 9 #66624

Made slsutil.renderer work with salt-ssh #50196

Fixed defaults.merge is not available when using salt-ssh #51605

Fixed config.get does not support merge option with salt-ssh #56441

Update to include croniter in pkg requirements #57649

Fixed state.test does not work with salt-ssh #61100

Made slsutil.findup work with salt-ssh #61143

Fixes multiple issues with the cmd module on Windows. Scripts are called using the -File parameter to the powershell.exe binary. CLIXML data in stderr is now removed (only applies to encoded commands). Commands can now be sent to cmd.powershell as a list. Makes sure JSON data returned is valid. Strips whitespace from the return when using runas. #61166

Fixed the win_lgpo_netsh salt util to handle non-English systems. This was a rewrite to use PowerShell instead of netsh to make the changes on the system #61534

file.replace and file.search work properly with /proc files #63102

Fix utf8 handling in 'pass' renderer #64300

Fixed incorrect version argument will be ignored for multiple package targets warning when using pkgs argument to yumpkg module. #64563

salt-cloud honors root_dir config setting for log_file location and fixes for root_dir locations on windows. #64728

Fixed slsutil.update with salt-ssh during template rendering #65067

Fix config.items when called on minion #65251

Ensure on rpm and deb systems, that user and group for existing Salt, is maintained on upgrade #65264

Fix typo in nftables module to ensure unique nft family values #65295

pkg.installed state aggregate does not honors requires requisite #65304

Added SSH wrapper for logmod #65630

Fix for GitFS failure to unlock lock file, and resource cleanup for process SIGTERM #65816

Corrected x509_v2 CRL creation last_update and next_update values when system timezone is not UTC #65837

Make sure the root minion process handles SIGUSR1 and emits a traceback like it's child processes #66095

Replaced pyvenv with builtin venv for virtualenv_mod #66132

Made file.managed skip download of a remote source if the managed file already exists with the correct hash #66342

Fix win_task ExecutionTimeLimit and result/error code interpretation #66347, #66441

Fixed nftables.build_rule breaks ipv6 rules by using the wrong syntax for source and destination addresses #66382

Fixed x509_v2 certificate.managed crash for locally signed certificates if the signing policy defines signing_private_key #66414

Fixed parallel state execution with Salt-SSH #66514

Fix support for FIPS approved encryption and signing algorithms. #66579

Fix relative file_roots paths #66588

Fixed an issue with cmd.run with requirements when the shell is not the default #66596

Fix RPM package provides #66604

Upgrade relAenv to 0.16.1. This release fixes several package installs for salt-pip #66632

Upgrade relenv to 0.17.0 (https://github.com/saltstack/relenv/blob/v0.17.0/CHANGELOG.md) #66663

Upgrade dependencies due to security issues:

• pymysql>=1.1.1

• requests>=2.32.0

• docker>=7.1.0 #66666

Corrected missed line in branch 3006.x when backporting from PR 61620 and 65044 #66683

Remove debug output from shell scripts for packaging #66747

Add Ubuntu 24.04 support #66180

Add Fedora 40 support, replacing Fedora 39 #66300

Build RPM packages with Rocky Linux 9 (instead of CentOS Stream 9) #66624

Bump to jinja2==3.1.4 due to https://github.com/advisories/GHSA-h75v-3vvj-5mfj #66488

CVE-2024-37088 salt-call will fail with exit code 1 if bad pillar data is encountered. #66702