These release notes are for an old release of Salt. This release might contain known security and other issues that are fixed in the latest release.

(release-3006.9)=

# Salt 3006.9 release notes

## Changelog

### Deprecated

- Drop CentOS 7 support #66623

- No longer build RPM packages with CentOS Stream 9 #66624

### Fixed

- Made slsutil.renderer work with salt-ssh #50196

- Fixed defaults.merge is not available when using salt-ssh #51605

- Fixed config.get does not support merge option with salt-ssh #56441

- Update to include croniter in pkg requirements #57649

- Fixed state.test does not work with salt-ssh #61100

- Made slsutil.findup work with salt-ssh #61143

- Fixes multiple issues with the cmd module on Windows. Scripts are called using the `-File` parameter to the `powershell.exe` binary. `CLIXML` data in stderr is now removed (only applies to encoded commands). Commands can now be sent to `cmd.powershell` as a list. Makes sure JSON data returned is valid. Strips whitespace from the return when using `runas`. #61166

- Fixed the win_lgpo_netsh salt util to handle non-English systems. This was a rewrite to use PowerShell instead of netsh to make the changes on the system #61534

- file.replace and file.search work properly with /proc files #63102

- Fix utf8 handling in 'pass' renderer #64300

- Fixed incorrect version argument will be ignored for multiple package targets warning when using pkgs argument to yumpkg module. #64563

- salt-cloud honors root_dir config setting for log_file location and fixes for root_dir locations on windows. #64728

- Fixed slsutil.update with salt-ssh during template rendering #65067

- Fix config.items when called on minion #65251

- Ensure on rpm and deb systems, that user and group for existing Salt, is maintained on upgrade #65264

- Fix typo in nftables module to ensure unique nft family values #65295

- pkg.installed state aggregate does not honors requires requisite #65304

- Added SSH wrapper for logmod #65630

- Fix for GitFS failure to unlock lock file, and resource cleanup for process SIGTERM #65816

- Corrected x509_v2 CRL creation `last_update` and `next_update` values when system timezone is not UTC #65837

- Make sure the root minion process handles SIGUSR1 and emits a traceback like it's child processes #66095

- Replaced pyvenv with builtin venv for virtualenv_mod #66132

- Made `file.managed` skip download of a remote source if the managed file already exists with the correct hash #66342

- Fix win_task ExecutionTimeLimit and result/error code interpretation #66347, #66441

- Fixed nftables.build_rule breaks ipv6 rules by using the wrong syntax for source and destination addresses #66382

- Fixed x509_v2 certificate.managed crash for locally signed certificates if the signing policy defines signing_private_key #66414

- Fixed parallel state execution with Salt-SSH #66514

- Fix support for FIPS approved encryption and signing algorithms. #66579

- Fix relative file_roots paths #66588

- Fixed an issue with cmd.run with requirements when the shell is not the default #66596

- Fix RPM package provides #66604

- Upgrade relAenv to 0.16.1. This release fixes several package installs for salt-pip #66632

- Upgrade relenv to 0.17.0 (https://github.com/saltstack/relenv/blob/v0.17.0/CHANGELOG.md) #66663

- Upgrade dependencies due to security issues:

  - pymysql>=1.1.1

  - requests>=2.32.0

  - docker>=7.1.0 #66666

- Corrected missed line in branch 3006.x when backporting from PR 61620 and 65044 #66683

- Remove debug output from shell scripts for packaging #66747

### Added

- Add Ubuntu 24.04 support #66180

- Add Fedora 40 support, replacing Fedora 39 #66300

- Build RPM packages with Rocky Linux 9 (instead of CentOS Stream 9) #66624

### Security

- Bump to `jinja2==3.1.4` due to https://github.com/advisories/GHSA-h75v-3vvj-5mfj #66488

- CVE-2024-37088 salt-call will fail with exit code 1 if bad pillar data is encountered. #66702