Subject: CVS commit: pkgsrc/sysutils
From: Adam Ciarcinski
Date: 2024-01-22 17:35:25
Message id: 20240122163525.A5137FA42@cvs.NetBSD.org

Log Message:
salt salt-docs: updated to 3006.5

SALT 3006.5

REMOVED

Tech Debt - support for pysss removed due to functionality addition in Python 3.3

FIXED

Improved error message when state arguments are accidentally passed as a string

Allow pip.install to create a log file that is passed in if the parent directory \ 
is writeable

Fixed merging of complex pillar overrides with salt-ssh states

Fixed gpg pillar rendering with salt-ssh

Made salt-ssh states not re-render pillars unnecessarily

Made Salt maintain options in Debian package repo definitions

Migrated all invoke tasks to python-tools-scripts.

tasks/docs.py -> tools/precommit/docs.py

tasks/docstrings.py -> tools/precommit/docstrings.py

tasks/loader.py -> tools/precommit/loader.py

tasks/filemap.py -> tools/precommit/filemap.py

Fix salt user login shell path in Debian packages

Fill out lsb_distrib_xxxx (best estimate) grains if problems with retrieving \ 
lsb_release data

Fixed an issue in the file.directory state where the children_only keyword \ 
argument was not being respected.

Move salt.ufw to correct location /etc/ufw/applications.d/

Fixed salt-ssh stacktrace when retcode is not an integer

Fixed SSH shell seldomly fails to report any exit code

Fixed some issues in x509_v2 execution module private key functions

Fixed grp.getgrall() in utils/user.py causing performance issues

Fix user.list_groups omits remote groups via sssd, etc.

Ensure sync from _grains occurs before attempting pillar compilation in case \ 
custom grain used in pillar file

Moved gitfs locks to salt working dir to avoid lock wipes

Only attempt to create a keys directory when --gen-keys is passed to the salt-key CLI

Fix nonce verification, request server replies do not stomp on eachother.

speed up yumpkg list_pkgs by not requiring digest or signature verification on \ 
lookup.

Fix pkg.latest failing on windows for winrepo packages where the package is \ 
already up to date

Ensure kwarg is preserved when checking for kwargs. This change affects proxy \ 
minions when used with Deltaproxy, which had kwargs popped when targeting \ 
multiple minions id.

Fixes traceback when state id is an int in a reactor SLS file.

Install logrotate config as /etc/logrotate.d/salt-common for Debian packages \ 
Remove broken /etc/logrotate.d/salt directory from 3006.3 if it exists.

Use sha256 as the default hash_type. It has been the default since Salt v2016.9

Preserve ownership on log rotation

Ensure that the correct value of jid_inclue is passed if the argument is \ 
included in the passed keyword arguments.

Uprade relenv to 0.14.2

Update openssl to address CVE-2023-5363.

Fix bug in openssl setup when openssl binary can't be found.

Add M1 mac support.

Fix regex for filespec adding/deleting fcontext policy in selinux

Ensure CLI options take priority over Saltfile options

Test mode for state function saltmod.wheel no longer set's result to (None,)

Client only process events which tag conforms to an event return.

Fixes an issue setting user or machine policy on Windows when the Group Policy \ 
directory is missing

Fix regression in file module which was not re-using a file client.

pip.installed state will now properly fail when a specified user does not exists

Publish channel connect callback method properly closes it's request channel.

Ensured the pillar in SSH wrapper modules is the same as the one used in \ 
template rendering when overrides are passed

Fix file.comment ignore_missing not working with multiline char

Warn when an un-closed transport client is being garbage collected.

Only generate the HMAC's for libssl.so.1.1 and libcrypto.so.1.1 if those files exist.

Fixed an issue where Salt Cloud would fail if it could not delete lingering \ 
PAexec binaries

ADDED

Added Salt support for Debian 12

Added Salt support for Amazon Linux 2023

SECURITY

Bump to cryptography==41.0.4 due to https://github.com/advisories/GHSA-v8gr-m533-ghj9

Bump to cryptography==41.0.7 due to https://github.com/advisories/GHSA-jfhm-5ghh-2f97

Files:
RevisionActionfile
1.83modifypkgsrc/sysutils/salt/Makefile
1.2modifypkgsrc/sysutils/salt/Makefile.common
1.32modifypkgsrc/sysutils/salt/PLIST
1.48modifypkgsrc/sysutils/salt/distinfo
1.35modifypkgsrc/sysutils/salt-docs/Makefile
1.2modifypkgsrc/sysutils/salt/patches/patch-salt_utils_rsax931.py
1.1removepkgsrc/sysutils/salt/patches/patch-doc_conf.py
1.1removepkgsrc/sysutils/salt/patches/patch-requirements_base.txt