mirror of
https://github.com/saltstack/salt.git
synced 2025-04-16 01:30:20 +00:00
4.5 KiB
4.5 KiB
(release-3006.7)=
Salt 3006.7 release notes
Changelog
Deprecated
- Deprecate and stop using
salt.features
#65951
Changed
- Change module search path priority, so Salt extensions can be overridden by syncable modules and module_dirs. You can switch back to the old logic by setting features.enable_deprecated_module_search_path_priority to true, but it will be removed in Salt 3008. #65938
Fixed
- Fix an issue with mac_shadow that was causing a command execution error when retrieving values that were not yet set. For example, retrieving last login before the user had logged in. #34658
- Fixed an issue when keys didn't match because of line endings #52289
- Corrected encoding of credentials for use with Artifactory #63063
- Use
send_multipart
instead ofsend
when sending multipart message. #65018 - Fix an issue where the minion would crash on Windows if some of the grains failed to resolve #65154
- Fix issue with openscap when the error was outside the expected scope. It now returns failed with the error code and the error #65193
- Upgrade relenv to 0.15.0 to fix namespaced packages installed by salt-pip #65433
- Fix regression of fileclient re-use when rendering sls pillars and states #65450
- Fixes the s3fs backend computing the local cache's files with the wrong hash type #65589
- Fixed Salt-SSH pillar rendering and state rendering with nested SSH calls when called via saltutil.cmd or in an orchestration #65670
- Fix boto execution module loading #65691
- Removed PR 65185 changes since incomplete solution #65692
- catch only ret/ events not all returning events. #65727
- Fix nonsensical time in fileclient timeout error. #65752
- Fixes an issue when reading/modifying ini files that contain unicode characters #65777
- added https proxy to the list of proxies so that requests knows what to do with https based proxies #65824
- Ensure minion channels are closed on any master connection error. #65932
- Fixed issue where Salt can't find libcrypto when pip installed from a cloned repo #65954
- Fix RPM package systemd scriptlets to make RPM packages more universal #65987
- Fixed an issue where fileclient requests during Pillar rendering cause fileserver backends to be needlessly refreshed. #65990
- Fix exceptions being set on futures that are already done in ZeroMQ transport #66006
- Use hmac compare_digest method in hashutil module to mitigate potential timing attacks #66041
- Fix request channel default timeout regression. In 3006.5 it was changed from 60 to 30 and is now set back to 60 by default. #66061
- Upgrade relenv to 0.15.1 to fix debugpy support. #66094
Security
-
Bump to
cryptography==42.0.0
due to https://github.com/advisories/GHSA-3ww4-gg4f-jr7fIn the process, we were also required to update to
pyOpenSSL==24.0.0
#66004 -
Bump to
cryptography==42.0.3
due to https://github.com/advisories/GHSA-3ww4-gg4f-jr7f #66090