CVS commit: pkgsrc/sysutils/salt

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Fri Nov 21 10:52:07 UTC 2025

Modified Files:
        pkgsrc/sysutils/salt: Makefile.common PLIST distinfo

Log Message:
salt salt-docs: updated to 3007.9

3007.9

FIXED

Render post/pre up/down and hwaddr options for debian-ip. See

Fix event flood by ensuring we do not retry sending the event indefinitely to the Master of Masters.

Prevent _pygit2.GitError: error loading known_hosts with certain pygit2/libgit2 versions.

salt-ssh now supports state.sls_exists

Allows file.symlink to pass a string to cmd_check

Simplied and sped up utils.json.find_json function

Improved runtime performance of chocolatey.installed

Add check for vault in opts var

Fixed user.present not having capability to persist home directory by adding persist_home flag.

Fixed pkg.installed state from showing warning if python rpm package not installed. Fixed pkg.installed state from showing warning and using slow process fork for version comparison when rpmdevtools 
is installed

Update pre-commit version used in github workflows to 4.3.0

Fixed issue with network grains in interfaces that don't support ip4 or ip6

Patch tornado for BDSA-2024-3438

Patch tornado for BDSA-2024-3439

Patch tornado for BDSA-2025-4215

Patch tornado for BDSA-2024-9026

Update LZMA to 5.8.2

Update ncurses to 6.5

Update openssl to 3.5.4

Fix shebang creating to work with pip >=25.2

Fix python source hash checking

Update to recent python versions: 3.12.12, 3.11.14, 3.10.19 and 3.9.24.

Fixed the lgpo_reg error when reading REG_BINARY type data in the registry.pol file.

Fix gnupghome directory translation for some versions of git for windows, e.g. 2.51.0.windows.2

Fix leak in SaltMessageServer where the unpacker was re-used on a stream disconnect.

Upgrade relenv to 0.21.2:

We refresh the ensurepip bundle during every build so new runtimes ship with pip 25.2 and setuptools 80.9.0.

Windows builds now pull newer SQLite (3.50.4.0) and XZ (5.6.2) sources, copy in a missing XZ config file, and tweak SBOM metadata; the libexpat update is prepared but only runs on older maintenance 
releases.

Our downloader helpers log more clearly, know about more archive formats, and retry cleanly on transient errors.

pip’s changing install API is handled by runtime wrappers that adapt to all of the current signatures.

Linux verification tests install pip 25.2/25.3 before building setuptools to make sure that flow keeps working.

salt/utils/odict.py has been deprecated and will be removed in 3009. Use the standard library implementation instead.

Fixed issue in cmd execution module that always return "Invalid user" for domain users.

Fixed authentication protocol version downgrade vulnerability (CVE-2025-62349) by adding minimum_auth_version configuration option (default: 3) to prevent minions from bypassing security features 
through protocol downgrade attacks.

BREAKING CHANGE: The default value enforces authentication protocol version 3 or higher. If upgrading a deployment with older minions that do not support protocol v3, you must temporarily set 
minimum_auth_version: 0 in the master configuration before upgrading the master, then upgrade all minions before removing this override.

Fixed unsafe YAML loader usage in junos execution module (CVE-2025-62348)


To generate a diff of this commit:
cvs rdiff -u -r1.7 -r1.8 pkgsrc/sysutils/salt/Makefile.common
cvs rdiff -u -r1.35 -r1.36 pkgsrc/sysutils/salt/PLIST
cvs rdiff -u -r1.52 -r1.53 pkgsrc/sysutils/salt/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/sysutils/salt/Makefile.common
diff -u pkgsrc/sysutils/salt/Makefile.common:1.7 pkgsrc/sysutils/salt/Makefile.common:1.8
--- pkgsrc/sysutils/salt/Makefile.common:1.7    Thu Oct  9 07:57:58 2025
+++ pkgsrc/sysutils/salt/Makefile.common        Fri Nov 21 10:52:07 2025
@@ -1,8 +1,8 @@
-# $NetBSD: Makefile.common,v 1.7 2025/10/09 07:57:58 wiz Exp $
+# $NetBSD: Makefile.common,v 1.8 2025/11/21 10:52:07 adam Exp $
 # used by sysutils/salt/Makefile
 # used by sysutils/salt-docs/Makefile
 
-DISTNAME=      salt-3007.5
+DISTNAME=      salt-3007.9
 CATEGORIES=    sysutils python
 MASTER_SITES=  ${MASTER_SITE_PYPI:=s/salt/}
 
@@ -42,4 +42,4 @@ DEPENDS+=     ${PYPKGPREFIX}-zmq>=25.1.2:../
 
 USE_LANGUAGES= # none
 
-PYTHON_VERSIONS_INCOMPATIBLE=  313
+PYTHON_VERSIONS_INCOMPATIBLE=  313 314

Index: pkgsrc/sysutils/salt/PLIST
diff -u pkgsrc/sysutils/salt/PLIST:1.35 pkgsrc/sysutils/salt/PLIST:1.36
--- pkgsrc/sysutils/salt/PLIST:1.35     Tue Jul  1 13:41:40 2025
+++ pkgsrc/sysutils/salt/PLIST  Fri Nov 21 10:52:07 2025
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.35 2025/07/01 13:41:40 adam Exp $
+@comment $NetBSD: PLIST,v 1.36 2025/11/21 10:52:07 adam Exp $
 bin/salt
 bin/salt-api
 bin/salt-call
@@ -4475,6 +4475,9 @@ ${PYSITELIB}/salt/utils/ctx.pyo
 ${PYSITELIB}/salt/utils/data.py
 ${PYSITELIB}/salt/utils/data.pyc
 ${PYSITELIB}/salt/utils/data.pyo
+${PYSITELIB}/salt/utils/datastructures.py
+${PYSITELIB}/salt/utils/datastructures.pyc
+${PYSITELIB}/salt/utils/datastructures.pyo
 ${PYSITELIB}/salt/utils/dateutils.py
 ${PYSITELIB}/salt/utils/dateutils.pyc
 ${PYSITELIB}/salt/utils/dateutils.pyo

Index: pkgsrc/sysutils/salt/distinfo
diff -u pkgsrc/sysutils/salt/distinfo:1.52 pkgsrc/sysutils/salt/distinfo:1.53
--- pkgsrc/sysutils/salt/distinfo:1.52  Tue Jul  1 13:41:40 2025
+++ pkgsrc/sysutils/salt/distinfo       Fri Nov 21 10:52:07 2025
@@ -1,7 +1,7 @@
-$NetBSD: distinfo,v 1.52 2025/07/01 13:41:40 adam Exp $
+$NetBSD: distinfo,v 1.53 2025/11/21 10:52:07 adam Exp $
 
-BLAKE2s (salt-3007.5.tar.gz) = 6d2b4136c0d41d167ad9afa8ef018c2e003858e617dda606a9174c48c27ac53a
-SHA512 (salt-3007.5.tar.gz) = 2ba88fff262875e7005df499ef73af99fca477f558583fddb68c42ee8b24592ae3d584f76a537727c6506e016111c5698e9fe05921f1c9c47246442af5e852a6
-Size (salt-3007.5.tar.gz) = 19491027 bytes
+BLAKE2s (salt-3007.9.tar.gz) = 441253c32b5b1e34611f0992fc44a077dd5d4a1e6c1577632c00c42647212608
+SHA512 (salt-3007.9.tar.gz) = bd40e5d4080d15928ccea01b84fc4f3e0bea8b7cdf8db18062f665ca81fe9fc23cd02adb9303391eb687141da9fd13ba26965c7d8b28735ad1104032eec8619b
+Size (salt-3007.9.tar.gz) = 19549730 bytes
 SHA1 (patch-salt_utils_rsax931.py) = 989e24088a55a983f7e404dc29cbffc7ec2f6aa6
 SHA1 (patch-salt_version.py) = 597d01aa77b024d56f1be0cbbad6936eb540bf98