These release notes are for an old release of Salt. This release might contain known security and other issues that are fixed in the latest release.

(release-3007.7)=

# Salt 3007.7 release notes

## Changelog

### Changed

- cmdmod: invoke a shell only with cmd.shell or when using the shell parameter cmdmod: run PowerShell scripts via -File instead of -Command cmdmod: allow passing args as a list for cmd.script cmdmod: return an error when running a bad command with cmd.powershell #68156

### Fixed

- Fixes issue with the `minion.restart` function not working with systemd. Will now detect if the system is using systemd or is a Windows system and use `service.restart` instead. #46255

- Fixed max_depth not respected in file.directory state #55306

- Updated CLI examples in docs to conform to bash syntax. Standardized documentation on Windows modules to Google Style Python Docstrings. #63856

- Ensure the right HOME environment value is set during Pygit2 remote initialization. #64121

- Fix sync_renderers failure when the custom renderer is specified via config #66453

- modules.aptpkg: correct handling of foreign-arch packages #66940

- Ensure network connections are cleanly closed in ipc and tcp transports #67076

- cmdmod: fix special character handling on Windows #68096

- cmdmod: fix quotation handling with Windows and Powershell #68118

- Fix `test mode` causing unintended execution when non-boolean values are passed. #68121

- Fixed ssh_known_hosts.present failure when ssh host keys changed #68132

- Revert 'ipc_write_timeout' change (3006.13) due to multiple reports of this change causing instability #68151

- cmdmod: handle cases where the temp script is not removed with cmd.script #68156

- win_runas: fix output decoding exceptions win_runas: ensure opened handles are closed #68157

- Fixed MinionManager.stop() to allow processing of minion event bus when called, to allow jobs returns from `service.restart salt-minion no_block=True` to reach master. #68183

- grains.disks: fix exception with incompatible output of Get-PhysicalDisk #68184

- Log a useful error if the minion's key is overwritten with bad data; instead of a traceback. #68190

- win_lgpo_reg only applies user settings to the registry.pol file. It no longer applies those same settings to the user registry. Those settings will be applied to all users the next time they log in. #68191

- salt.crypt.AsyncAuth and salt.crypt.SAuth read the private key from the filesystem a single time. #68195

- Modifies systemd_service.{restart,stop} to default to using no_block=True when the service being stopped or restarted is the salt-minion. #68212

- Upgrade onedir relenv to 0.20.5:

  - Update gdbm from 1.25 to 1.26

  - Update libffi from 3.5.1 to 3.5.2

  - Update readline from 8.2.13 to 8.3

  - Update sqlite from 3.50.2 to 3.50.4

  - Update sqlite on windows from 3.40.1 to 0.35.4 (CVE-2025-6965) #68291

### Added

- Added a new `force` option to pkg.install on Windows to force the installer to run even if the package is already installed #68102

- win_runas: support cmdmod parameters bg, env, redirect_stderr, timeout #68157

- Adds support for creating a scheduled job to restart the minion if the initial attempt at restarting it via `minion.restart` has failed. #68225