build(deps): bump salt from 3002.8 to 3003.5 in /salt/tests #3809

dependabot · 2022-07-05T22:45:06Z

Bumps salt from 3002.8 to 3003.5.

Release notes

v3003.5

No release notes provided.

v3003.4

No release notes provided.

v3003.3

No release notes provided.

v3003.2

WARNING: The tarball generated by GitHub will not have the correct version information when using a version not ending in .0 . Please use the tarball generated by SaltStack instead. See issue #41847 for more information.

Official Salt packages can be found at https://repo.saltproject.io/

v3003.1

WARNING: The tarball generated by GitHub will not have the correct version information when using a version not ending in .0 . Please use the tarball generated by SaltStack instead. See issue #41847 for more information.

Official Salt packages can be found at https://repo.saltproject.io/

v3003

WARNING: The tarball generated by GitHub will not have the correct version information when using a version not ending in .0 . Please use the tarball generated by SaltStack instead. See issue #41847 for more information.

Official Salt packages can be found at https://repo.saltproject.io/

v3002.9

No release notes provided.

Changelog

Sourced from salt's changelog.

Salt 3003.5 (2022-07-05)

Fixed

Update Markup and contextfunction imports for jinja versions >=3.1. (#61848)

Fix bug in tcp transport (#61865)

Make sure the correct key is being used when verifying or validating communication, eg. when a Salt syndic is involved use syndic_master.pub and when a Salt minion is involved use minion_master.pub. (#61868)

Security

Fixed PAM auth to reject auth attempt if user account is locked. (cve-2022-22967)

Salt 3003.4 (2022-02-25)

Security

Sign authentication replies to prevent MiTM (cve-2022-22935)

Prevent job and fileserver replays (cve-2022-22936)

Sign pillar data to prevent MiTM attacks. (cve-2202-22934)

Fixed targeting bug, especially visible when using syndic and user auth. (CVE-2022-22941) (#60413)

Fix denial of service in junos ifconfig output parsing.

Salt 3003.3 (2021-08-20)

Fixed

Fix issue introduced in saltstack/salt#59648 (#60046)

Security

Verify the owner of an existing config before trusting it during install. If the owner cannot be verified, back it up and use defaults. (CVE-2021-22004)

Ensure that sourced file is cached using its hash name (cve-2021-21996)

Salt 3003.2 (2021-07-29)

Fixed

... (truncated)

Commits

3fa1e4c Merge pull request #460 from Ch3LL/docs_3003.5
683b21b Update release notes and man pages for 3003.5
88e9b86 Merge pull request #319 from saltstack/issue/3003.5/61865
40478bc Fix tests on MacOS
58d5517 Fix the test_zeromq_filtering test
fe9fb01 Fix bug in tcp transport
3d53101 Merge pull request #305 from saltstack/cve/3003.4-pam-auth-fix
08acb9b pre-commit fixes
42bbee0 Skip PAM auth tests on Windows
124a6f0 rewrite hook changes
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

bert-e · 2022-07-05T22:45:08Z

Hello dependabot[bot],

My role is to assist you with the merge of this
pull request. Please type @bert-e help to get information
on this process, or consult the user documentation.

Status report is not available.

The following options are set: bypass_author_approval, bypass_jira_check

bert-e · 2022-07-05T22:45:12Z

Waiting for approval

The following approvals are needed before I can proceed with the merge:

the author
one peer

Peer approvals must include at least 1 approval from the following list:

The following options are set: bypass_author_approval, bypass_jira_check

bert-e · 2022-07-06T11:05:10Z

Conflict

There is a conflict between your branch dependabot/pip/salt/tests/salt-3003.5 and the
destination branch development/123.0.

Please resolve the conflict on the feature branch (dependabot/pip/salt/tests/salt-3003.5).

git fetch && \
git checkout origin/dependabot/pip/salt/tests/salt-3003.5 && \
git merge origin/development/123.0

Resolve merge conflicts and commit

git push origin HEAD:dependabot/pip/salt/tests/salt-3003.5

The following options are set: bypass_author_approval, bypass_jira_check

bert-e · 2022-07-06T11:05:53Z

Waiting for approval

The following approvals are needed before I can proceed with the merge:

the author
one peer

Peer approvals must include at least 1 approval from the following list:

The following options are set: bypass_author_approval, bypass_jira_check

bert-e · 2022-07-27T07:48:00Z

Waiting for approval

The following approvals are needed before I can proceed with the merge:

the author
one peer

Peer approvals must include at least 1 approval from the following list:

The following options are set: bypass_author_approval, bypass_jira_check

bert-e · 2022-08-29T17:21:05Z

Branches have diverged

This pull request's source branch dependabot/pip/salt/tests/salt-3003.5 has diverged from
development/124.0 by more than 50 commits.

To avoid any integration risks, please re-synchronize them using one of the
following solutions:

Merge origin/development/124.0 into dependabot/pip/salt/tests/salt-3003.5
Rebase dependabot/pip/salt/tests/salt-3003.5 onto origin/development/124.0

Note: If you choose to rebase, you may have to ask me to rebuild
integration branches using the reset command.

The following options are set: bypass_author_approval, bypass_jira_check

bert-e · 2022-08-29T17:23:19Z

Waiting for approval

The following approvals are needed before I can proceed with the merge:

the author
one peer

Peer approvals must include at least 1 approval from the following list:

The following options are set: bypass_author_approval, bypass_jira_check

bert-e · 2022-10-13T14:53:08Z

Branches have diverged

This pull request's source branch dependabot/pip/salt/tests/salt-3003.5 has diverged from
development/124.0 by more than 50 commits.

To avoid any integration risks, please re-synchronize them using one of the
following solutions:

Merge origin/development/124.0 into dependabot/pip/salt/tests/salt-3003.5
Rebase dependabot/pip/salt/tests/salt-3003.5 onto origin/development/124.0

Note: If you choose to rebase, you may have to ask me to rebuild
integration branches using the reset command.

The following options are set: bypass_author_approval, bypass_jira_check

Bumps [salt](https://github.com/saltstack/salt) from 3002.8 to 3003.5. - [Release notes](https://github.com/saltstack/salt/releases) - [Changelog](https://github.com/saltstack/salt/blob/master/CHANGELOG.md) - [Commits](saltstack/salt@v3002.8...v3003.5) --- updated-dependencies: - dependency-name: salt dependency-type: direct:production ... Signed-off-by: dependabot[bot] <[email protected]>

bert-e · 2022-10-13T14:55:08Z

Waiting for approval

The following approvals are needed before I can proceed with the merge:

the author
one peer

Peer approvals must include at least 1 approval from the following list:

The following options are set: bypass_author_approval, bypass_jira_check

dependabot · 2024-11-14T18:08:43Z

Superseded by #4477.

dependabot bot requested a review from a team as a code owner July 5, 2022 22:45

dependabot bot added kind:dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jul 5, 2022

dependabot bot mentioned this pull request Jul 5, 2022

build(deps): bump salt from 3002.8 to 3003.3 in /salt/tests #3797

Closed

dependabot bot force-pushed the dependabot/pip/salt/tests/salt-3003.5 branch from d2fbd1f to 66db6e8 Compare July 6, 2022 11:05

dependabot bot changed the base branch from development/123.0 to development/124.0 July 27, 2022 07:47

dependabot bot force-pushed the dependabot/pip/salt/tests/salt-3003.5 branch from 66db6e8 to 7b1adbe Compare August 29, 2022 17:22

dependabot bot force-pushed the dependabot/pip/salt/tests/salt-3003.5 branch from 7b1adbe to 4de15c8 Compare October 13, 2022 14:55

dependabot bot closed this Nov 14, 2024

dependabot bot deleted the dependabot/pip/salt/tests/salt-3003.5 branch November 14, 2024 18:08

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps): bump salt from 3002.8 to 3003.5 in /salt/tests #3809

build(deps): bump salt from 3002.8 to 3003.5 in /salt/tests #3809

dependabot bot commented on behalf of github Jul 5, 2022 •

edited

Loading

bert-e commented Jul 5, 2022

bert-e commented Jul 5, 2022

bert-e commented Jul 6, 2022

bert-e commented Jul 6, 2022

bert-e commented Jul 27, 2022

bert-e commented Aug 29, 2022

bert-e commented Aug 29, 2022

bert-e commented Oct 13, 2022

bert-e commented Oct 13, 2022

dependabot bot commented on behalf of github Nov 14, 2024

build(deps): bump salt from 3002.8 to 3003.5 in /salt/tests #3809

build(deps): bump salt from 3002.8 to 3003.5 in /salt/tests #3809

Conversation

dependabot bot commented on behalf of github Jul 5, 2022 • edited Loading

v3003.5

v3003.4

v3003.3

v3003.2

v3003.1

v3003

v3002.9

Salt 3003.5 (2022-07-05)

Fixed

Security

Salt 3003.4 (2022-02-25)

Security

Salt 3003.3 (2021-08-20)

Fixed

Security

Salt 3003.2 (2021-07-29)

bert-e commented Jul 5, 2022

Hello dependabot[bot],

bert-e commented Jul 5, 2022

Waiting for approval

bert-e commented Jul 6, 2022

Conflict

bert-e commented Jul 6, 2022

Waiting for approval

bert-e commented Jul 27, 2022

Waiting for approval

bert-e commented Aug 29, 2022

Branches have diverged

bert-e commented Aug 29, 2022

Waiting for approval

bert-e commented Oct 13, 2022

Branches have diverged

bert-e commented Oct 13, 2022

Waiting for approval

dependabot bot commented on behalf of github Nov 14, 2024

dependabot bot commented on behalf of github Jul 5, 2022 •

edited

Loading