(release-3006.9)= # Salt 3006.9 release notes ## Changelog ### Deprecated - Drop CentOS 7 support [#66623](https://github.com/saltstack/salt/issues/66623) - No longer build RPM packages with CentOS Stream 9 [#66624](https://github.com/saltstack/salt/issues/66624) ### Fixed - Made slsutil.renderer work with salt-ssh [#50196](https://github.com/saltstack/salt/issues/50196) - Fixed defaults.merge is not available when using salt-ssh [#51605](https://github.com/saltstack/salt/issues/51605) - Fixed config.get does not support merge option with salt-ssh [#56441](https://github.com/saltstack/salt/issues/56441) - Update to include croniter in pkg requirements [#57649](https://github.com/saltstack/salt/issues/57649) - Fixed state.test does not work with salt-ssh [#61100](https://github.com/saltstack/salt/issues/61100) - Made slsutil.findup work with salt-ssh [#61143](https://github.com/saltstack/salt/issues/61143) - Fixes multiple issues with the cmd module on Windows. Scripts are called using the ``-File`` parameter to the ``powershell.exe`` binary. ``CLIXML`` data in stderr is now removed (only applies to encoded commands). Commands can now be sent to ``cmd.powershell`` as a list. Makes sure JSON data returned is valid. Strips whitespace from the return when using ``runas``. [#61166](https://github.com/saltstack/salt/issues/61166) - Fixed the win_lgpo_netsh salt util to handle non-English systems. This was a rewrite to use PowerShell instead of netsh to make the changes on the system [#61534](https://github.com/saltstack/salt/issues/61534) - file.replace and file.search work properly with /proc files [#63102](https://github.com/saltstack/salt/issues/63102) - Fix utf8 handling in 'pass' renderer [#64300](https://github.com/saltstack/salt/issues/64300) - Fixed incorrect version argument will be ignored for multiple package targets warning when using pkgs argument to yumpkg module. [#64563](https://github.com/saltstack/salt/issues/64563) - salt-cloud honors root_dir config setting for log_file location and fixes for root_dir locations on windows. [#64728](https://github.com/saltstack/salt/issues/64728) - Fixed slsutil.update with salt-ssh during template rendering [#65067](https://github.com/saltstack/salt/issues/65067) - Fix config.items when called on minion [#65251](https://github.com/saltstack/salt/issues/65251) - Ensure on rpm and deb systems, that user and group for existing Salt, is maintained on upgrade [#65264](https://github.com/saltstack/salt/issues/65264) - Fix typo in nftables module to ensure unique nft family values [#65295](https://github.com/saltstack/salt/issues/65295) - pkg.installed state aggregate does not honors requires requisite [#65304](https://github.com/saltstack/salt/issues/65304) - Added SSH wrapper for logmod [#65630](https://github.com/saltstack/salt/issues/65630) - Fix for GitFS failure to unlock lock file, and resource cleanup for process SIGTERM [#65816](https://github.com/saltstack/salt/issues/65816) - Corrected x509_v2 CRL creation `last_update` and `next_update` values when system timezone is not UTC [#65837](https://github.com/saltstack/salt/issues/65837) - Make sure the root minion process handles SIGUSR1 and emits a traceback like it's child processes [#66095](https://github.com/saltstack/salt/issues/66095) - Replaced pyvenv with builtin venv for virtualenv_mod [#66132](https://github.com/saltstack/salt/issues/66132) - Made `file.managed` skip download of a remote source if the managed file already exists with the correct hash [#66342](https://github.com/saltstack/salt/issues/66342) - Fix win_task ExecutionTimeLimit and result/error code interpretation [#66347](https://github.com/saltstack/salt/issues/66347), [#66441](https://github.com/saltstack/salt/issues/66441) - Fixed nftables.build_rule breaks ipv6 rules by using the wrong syntax for source and destination addresses [#66382](https://github.com/saltstack/salt/issues/66382) - Fixed x509_v2 certificate.managed crash for locally signed certificates if the signing policy defines signing_private_key [#66414](https://github.com/saltstack/salt/issues/66414) - Fixed parallel state execution with Salt-SSH [#66514](https://github.com/saltstack/salt/issues/66514) - Fix support for FIPS approved encryption and signing algorithms. [#66579](https://github.com/saltstack/salt/issues/66579) - Fix relative file_roots paths [#66588](https://github.com/saltstack/salt/issues/66588) - Fixed an issue with cmd.run with requirements when the shell is not the default [#66596](https://github.com/saltstack/salt/issues/66596) - Fix RPM package provides [#66604](https://github.com/saltstack/salt/issues/66604) - Upgrade relAenv to 0.16.1. This release fixes several package installs for salt-pip [#66632](https://github.com/saltstack/salt/issues/66632) - Upgrade relenv to 0.17.0 (https://github.com/saltstack/relenv/blob/v0.17.0/CHANGELOG.md) [#66663](https://github.com/saltstack/salt/issues/66663) - Upgrade dependencies due to security issues: - pymysql>=1.1.1 - requests>=2.32.0 - docker>=7.1.0 [#66666](https://github.com/saltstack/salt/issues/66666) - Corrected missed line in branch 3006.x when backporting from PR 61620 and 65044 [#66683](https://github.com/saltstack/salt/issues/66683) - Remove debug output from shell scripts for packaging [#66747](https://github.com/saltstack/salt/issues/66747) ### Added - Add Ubuntu 24.04 support [#66180](https://github.com/saltstack/salt/issues/66180) - Add Fedora 40 support, replacing Fedora 39 [#66300](https://github.com/saltstack/salt/issues/66300) - Build RPM packages with Rocky Linux 9 (instead of CentOS Stream 9) [#66624](https://github.com/saltstack/salt/issues/66624) ### Security - Bump to ``jinja2==3.1.4`` due to https://github.com/advisories/GHSA-h75v-3vvj-5mfj [#66488](https://github.com/saltstack/salt/issues/66488) - CVE-2024-37088 salt-call will fail with exit code 1 if bad pillar data is encountered. [#66702](https://github.com/saltstack/salt/issues/66702)