build(deps): bump salt from 3002.9 to 3005.5 in /salt/tests #4477

dependabot · 2024-11-14T18:08:40Z

Bumps salt from 3002.9 to 3005.5.

Release notes

v3005.5

Version 3005.5

v3005.4

No release notes provided.

v3005.3

No release notes provided.

v3005.2

No release notes provided.

v3005.1-2

No release notes provided.

v3005.1

No release notes provided.

v3005

Version 3005

v3005rc2

No release notes provided.

v3005rc1

No release notes provided.

v3004.2

No release notes provided.

v3004.1

No release notes provided.

v3004

WARNING: The tarball generated by GitHub will not have the correct version information when using a version not ending in .0 . Please use the tarball generated by SaltStack instead. See issue #41847 for more information.

Official Salt packages can be found at https://repo.saltproject.io/

v3004rc1

No release notes provided.

v3003.5

No release notes provided.

v3003.4

No release notes provided.

v3003.3

No release notes provided.

... (truncated)

Changelog

Sourced from salt's changelog.

Salt 3005.5 (2024-01-19)

Security

Fix CVE-2024-22231 Prevent directory traversal when creating syndic cache directory on the master.

Fix CVE-2024-22232 Prevent directory traversal attacks in the master's serve_file method.

These vulnerablities were discovered and reported by: Yudi Zhao(Huawei Nebula Security Lab),Chenwei Jiang(Huawei Nebula Security Lab) (#565)

Salt v3005.4 (2023-10-16)

Removed

Tech Debt - support for pysss removed due to functionality addition in Python 3.3 #65029

Fixed

Improved error message when state arguments are accidentally passed as a string #38098

Allow pip.install to create a log file that is passed in if the parent directory is writeable #44722

Fixed merging of complex pillar overrides with salt-ssh states #59802

Fixed gpg pillar rendering with salt-ssh #60002

Made salt-ssh states not re-render pillars unnecessarily #62230

Made Salt maintain options in Debian package repo definitions #64130

Migrated all invoke tasks to python-tools-scripts.

tasks/docs.py -> tools/precommit/docs.py

tasks/docstrings.py -> tools/precommit/docstrings.py

tasks/loader.py -> tools/precommit/loader.py

tasks/filemap.py -> tools/precommit/filemap.py #64374

Fix salt user login shell path in Debian packages #64377

Fill out lsb_distrib_xxxx (best estimate) grains if problems with retrieving lsb_release data #64473

Fixed an issue in the file.directory state where the children_only keyword argument was not being respected. #64497

Move salt.ufw to correct location /etc/ufw/applications.d/ #64572

Fixed salt-ssh stacktrace when retcode is not an integer #64575

Fixed SSH shell seldomly fails to report any exit code #64588

Fixed some issues in x509_v2 execution module private key functions #64597

Fixed grp.getgrall() in utils/user.py causing performance issues #64888

Fix user.list_groups omits remote groups via sssd, etc. #64953

Ensure sync from _grains occurs before attempting pillar compilation in case custom grain used in pillar file #65027

Moved gitfs locks to salt working dir to avoid lock wipes #65086

Only attempt to create a keys directory when --gen-keys is passed to the salt-key CLI #65093

Fix nonce verification, request server replies do not stomp on eachother. #65114

... (truncated)

Commits

e39b65a Add man pages
066ab8f More revisions
20aff06 Add minor revisions requested by Shane
ac52f60 Create 3006.5 release notes and update 3005 changelog
01752fc Stop time bombing with RuntimeError's
8504ad8 Backport notarize.sh from 3006
2c8f1b7 Add credit
d9019bd Add changelogs for CVE-2024-22231 and CVE-2024-22232
4a5839e Clean up test fixtures
3468033 Fix linter issue
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [salt](https://github.com/saltstack/salt) from 3002.9 to 3005.5. - [Release notes](https://github.com/saltstack/salt/releases) - [Changelog](https://github.com/saltstack/salt/blob/master/CHANGELOG.md) - [Commits](saltstack/salt@v3002.9...v3005.5) --- updated-dependencies: - dependency-name: salt dependency-type: direct:production ... Signed-off-by: dependabot[bot] <[email protected]>

bert-e · 2024-11-14T18:08:43Z

Hello dependabot[bot],

My role is to assist you with the merge of this
pull request. Please type @bert-e help to get information
on this process, or consult the user documentation.

Available options

name	description	privileged	authored
`/after_pull_request`	Wait for the given pull request id to be merged before continuing with the current one.
`/bypass_author_approval`	Bypass the pull request author's approval	⭐
`/bypass_build_status`	Bypass the build and test status	⭐
`/bypass_commit_size`	Bypass the check on the size of the changeset `TBA`	⭐
`/bypass_incompatible_branch`	Bypass the check on the source branch prefix	⭐
`/bypass_jira_check`	Bypass the Jira issue check	⭐
`/bypass_peer_approval`	Bypass the pull request peers' approval	⭐
`/bypass_leader_approval`	Bypass the pull request leaders' approval	⭐
`/approve`	Instruct Bert-E that the author has approved the pull request.		✍️
`/create_pull_requests`	Allow the creation of integration pull requests.
`/create_integration_branches`	Allow the creation of integration branches.
`/no_octopus`	Prevent Wall-E from doing any octopus merge and use multiple consecutive merge instead
`/unanimity`	Change review acceptance criteria from `one reviewer at least` to `all reviewers`
`/wait`	Instruct Bert-E not to run until further notice.

Available commands

name	description	privileged
`/help`	Print Bert-E's manual in the pull request.
`/status`	Print Bert-E's current status in the pull request `TBA`
`/clear`	Remove all comments from Bert-E from the history `TBA`
`/retry`	Re-start a fresh build `TBA`
`/build`	Re-start a fresh build `TBA`
`/force_reset`	Delete integration branches & pull requests, and restart merge process from the beginning.
`/reset`	Try to remove integration branches unless there are commits on them which do not appear on the source branch.

Status report is not available.

The following options are set: bypass_author_approval, bypass_jira_check

bert-e · 2024-11-14T18:08:49Z

Waiting for approval

The following approvals are needed before I can proceed with the merge:

the author
one peer

Peer approvals must include at least 1 approval from the following list:

The following options are set: bypass_author_approval, bypass_jira_check

bert-e · 2024-11-14T20:20:41Z

Waiting for approval

The following approvals are needed before I can proceed with the merge:

the author
one peer

Peer approvals must include at least 1 approval from the following list:

The following options are set: bypass_author_approval, bypass_jira_check

dependabot bot requested a review from a team as a code owner November 14, 2024 18:08

dependabot bot added kind:dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Nov 14, 2024

dependabot bot mentioned this pull request Nov 14, 2024

build(deps): bump salt from 3002.8 to 3003.5 in /salt/tests #3809

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

build(deps): bump salt from 3002.9 to 3005.5 in /salt/tests #4477

build(deps): bump salt from 3002.9 to 3005.5 in /salt/tests #4477

Uh oh!

dependabot bot commented on behalf of github Nov 14, 2024

Uh oh!

bert-e commented Nov 14, 2024

Uh oh!

bert-e commented Nov 14, 2024

Uh oh!

bert-e commented Nov 14, 2024

Uh oh!

Uh oh!

build(deps): bump salt from 3002.9 to 3005.5 in /salt/tests #4477

Are you sure you want to change the base?

build(deps): bump salt from 3002.9 to 3005.5 in /salt/tests #4477

Uh oh!

Conversation

dependabot bot commented on behalf of github Nov 14, 2024

v3005.5

v3005.4

v3005.3

v3005.2

v3005.1-2

v3005.1

v3005

v3005rc2

v3005rc1

v3004.2

v3004.1

v3004

v3004rc1

v3003.5

v3003.4

v3003.3

Salt 3005.5 (2024-01-19)

Security

Salt v3005.4 (2023-10-16)

Removed

Fixed

Uh oh!

bert-e commented Nov 14, 2024

Hello dependabot[bot],

Uh oh!

bert-e commented Nov 14, 2024

Waiting for approval

Uh oh!

bert-e commented Nov 14, 2024

Waiting for approval

Uh oh!

Uh oh!