Daniel Wozniak

[BUG] Master cluster event port is not documented or configurable.

4

**Description** The port required to be open for a master cluster to properly function is not documented and should be configurable. **Versions Report** 3007.1

[BUG] Traceback from _send_req_sync

2

``` Feb 19 19:41:02 : run_func(minion_instance, opts, data) Feb 19 19:41:02 : File "/opt/saltstack/salt/lib/python3.10/site-packages/salt/minion.py", line 1923, in run_func Feb 19 19:41:02 : return Minion._thread_return(minion_instance, opts, data) Feb 19 19:41:02 :...

### Why We’re Adding Type Hints to relenv - Catch bugs early: mypy flags mismatched types and brittle assumptions before they ship, so build and packaging regressions surface while we’re...

These man pages are still generated and packaged with every release.

Adds disable_aes_with_tls config option that eliminates redundant AES encryption when TLS with mutual authentication is active, providing performance improvement with 6 security checks including certificate identity verification. ### What does...

### What does this PR do? ### What issues does this PR fix or reference? Fixes ### Previous Behavior Remove this section if not relevant ### New Behavior Remove this...

We need containers that have python >= 3.10 to upgrade relenv

Pulling in a regression test and fix for MSI package upgrades. The commits were made on our merge forward to master where the issue started causing some pip test to...

[Bug] Authentication downgrade

2

### What happened? CVE-2025-62349 Authentication downgrade attack.There's a vulnerability in 3006.12+ and 3007.4+ that allows minion impersonation via a downgrade attack. It is possible to circumvent the fixes for CVE-2024-38822...