- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
* skip-package-names-without-colon-bsc-1208691-578.patch
* fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
* 3005.1-implement-zypper-removeptf-573.patch
OBS-URL: https://build.opensuse.org/request/show/1072612
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/salt?expand=0&rev=136
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Added:
* make-pass-renderer-configurable-other-fixes-532.patch
* ignore-non-utf8-characters-while-reading-files-with-.patch
* fopen-workaround-bad-buffering-for-binary-mode-563.patch
* backport-syndic-auth-fixes.patch
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module
on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks
on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Added:
* fix-the-regression-in-schedule-module-releasded-in-3.patch
* retry-if-rpm-lock-is-temporarily-unavailable-547.patch
* change-the-delimeters-to-prevent-possible-tracebacks.patch
* add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
* fix-state.apply-in-test-mode-with-file-state-module-.patch
- Fix test_ipc unit test
- Added:
* fix-test_ipc-unit-tests.patch
OBS-URL: https://build.opensuse.org/request/show/1008560
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/salt?expand=0&rev=131
- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja >= and <= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq >= 23.0.0 (bsc#1201082)
- Added:
* fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
* add-support-for-gpgautoimport-539.patch
* fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
* fix-salt.states.file.managed-for-follow_symlinks-tru.patch
- Add support for name, pkgs and diff_attr parameters to upgrade
function for zypper and yum (bsc#1198489)
- Added:
* add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
* normalize-package-names-once-with-pkg.installed-remo.patch
* use-salt-bundle-in-dockermod.patch
* fix-ownership-of-salt-thin-directory-when-using-the-.patch
* ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
* set-default-target-for-pip-from-venv_pip_target-envi.patch
* save-log-to-logfile-with-docker.build.patch
OBS-URL: https://build.opensuse.org/request/show/988366
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/salt?expand=0&rev=130
- Prevent data pollution between actions proceesed
at the same time (bsc#1197637)
- Fix regression preventing bootstrapping new clients
caused by redundant dependency on psutil (bsc#1197533)
- Added:
* fix-regression-with-depending-client.ssh-on-psutil-b.patch
* prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
- Fixes for Python 3.10
- Added:
* fixes-for-python-3.10-502.patch
* Sign authentication replies to prevent MiTM (CVE-2022-22935)
* Sign pillar data to prevent MiTM attacks. (CVE-2022-22934)
* Prevent job and fileserver replays (CVE-2022-22936)
* Fixed targeting bug, especially visible when using syndic and user auth. (CVE-2022-22941)
OBS-URL: https://build.opensuse.org/request/show/969843
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/salt?expand=0&rev=128
- Fix issues found around pre_flight_script_args
- Added:
* prevent-shell-injection-via-pre_flight_script_args-4.patch
- Add salt-ssh with Salt Bundle support (venv-salt-minion)
(bsc#1182851, bsc#1196432)
- Added:
* add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
- Restrict "state.orchestrate_single" to pass a pillar value if it exists (bsc#1194632)
- Added:
* state.orchestrate_single-does-not-pass-pillar-none-4.patch
OBS-URL: https://build.opensuse.org/request/show/958078
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/salt?expand=0&rev=126
- Fix exception in batch_async caused by a bad function call
- Added:
* drop-serial-from-event.unpack-in-cli.batch_async.patch
- Fix inspector module export function (bsc#1097531)
- Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357)
- Added:
* fix-inspector-module-export-function-bsc-1097531-481.patch
* wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch
OBS-URL: https://build.opensuse.org/request/show/950374
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/salt?expand=0&rev=124
- Simplify "transactional_update" module to not use SSH wrapper and allow more flexible execution
- Add "--no-return-event" option to salt-call to prevent sending return event back to master.
- Make "state.highstate" to acts on concurrent flag.
- Fix print regression for yumnotify plugin
- Added:
* refactor-and-improvements-for-transactional-updates-.patch
* fix-the-regression-for-yumnotify-plugin-456.patch
- Use dnfnotify instead yumnotify for relevant distros
- dnfnotify pkgset plugin implementation
- Add rpm_vercmp python library support for version comparison
- Prevent pkg plugins errors on missing cookie path (bsc#1186738)
- Added:
* add-rpm_vercmp-python-library-for-version-comparison.patch
* mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
* dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
* fix-traceback.print_exc-calls-for-test_pip_state-432.patch
* prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
- Fix ip6_interface grain to not leak secondary IPv4 aliases (bsc#1191412)
- Make "salt-api" package to require python3-cherrypy on RHEL systems
- Make "tar" as required for "salt-transactional-update" package
- Added:
* fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
OBS-URL: https://build.opensuse.org/request/show/931742
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/salt?expand=0&rev=122
- Exclude the full path of a download URL to prevent injection of
malicious code (bsc#1190265) (CVE-2021-21996)
- Added:
* exclude-the-full-path-of-a-download-url-to-prevent-i.patch
- Fix wrong relative paths resolution with Jinja renderer when importing subdirectories
- Added:
* templates-move-the-globals-up-to-the-environment-jin.patch
- Don't pass shell="/sbin/nologin" to onlyif/unless checks (bsc#1188259)
- Add missing aarch64 to rpm package architectures
- Backport of upstream PR#59492
- Added:
* backport-of-upstream-pr59492-to-3002.2-404.patch
* don-t-use-shell-sbin-nologin-in-requisites.patch
* add-missing-aarch64-to-rpm-package-architectures-405.patch
- Fix failing unit test for systemd
- Fix error handling in openscap module (bsc#1188647)
- Better handling of bad public keys from minions (bsc#1189040)
- Added:
* better-handling-of-bad-public-keys-from-minions-bsc-.patch
* fix-error-handling-in-openscap-module-bsc-1188647-40.patch
* fix-failing-unit-tests-for-systemd.patch
- Define license macro as doc in spec file if not existing
- Add standalone formulas configuration for salt minion and remove salt-master requirement (bsc#1168327)
- Do noop for services states when running systemd in offline mode (bsc#1187787)
- transactional_updates: do not execute states in parallel but use a queue (bsc#1188170)
OBS-URL: https://build.opensuse.org/request/show/919452
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/salt?expand=0&rev=118
- Improvements on "ansiblegate" module:
* New methods: ansible.targets / ansible.discover_playbooks
* General bugfixes
- Added:
* improvements-on-ansiblegate-module-354.patch
- Regression fix of salt-ssh on processing some targets
- Added:
* regression-fix-of-salt-ssh-on-processing-targets-353.patch
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Added:
* add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Added:
* update-target-fix-for-salt-ssh-to-process-targets-li.patch
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Added:
* add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
* notify-beacon-for-debian-ubuntu-systems-347.patch
- Allow vendor change option with zypper
- Added:
* allow-vendor-change-option-with-zypper-313.patch
OBS-URL: https://build.opensuse.org/request/show/887060
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/salt?expand=0&rev=117
- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
* remove-deprecated-warning-that-breaks-miniion-execut.patch
- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
* revert-add-patch-support-for-allow-vendor-change-opt.patch
- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
* force-zyppnotify-to-prefer-packages.db-than-packages.patch
* fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
* add-patch-support-for-allow-vendor-change-option-wit.patch
* add-pkg.services_need_restart-302.patch
- virt: more network support
Add more network and PCI/USB host devices passthrough support
to virt module and states
- Added:
* open-suse-3002.2-virt-network-311.patch
- Bigvm backports
virt consoles, CPU tuning and topology, and memory tuning.
- Added:
* open-suse-3002.2-bigvm-310.patch
- Fix pkg states when DEB package has "all" arch
OBS-URL: https://build.opensuse.org/request/show/862930
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/salt?expand=0&rev=113
