Add SafeDict/SafeList pillar wrapping with Pydantic secrets, output redaction, and no_log#68907

Open

Akm0d wants to merge 41 commits intosaltstack:masterfrom

Akm0d:fix/67367-mask-pillar

Commits on Apr 15, 2026

add pydantic to requirements with pre-commit
Akm0d
committed
msgpack: unwrap safepillar types and Pydantic secrets in payload encoder
Akm0d
committed
Access pillar data while rendering pillars

dwoz
authored and
Akm0d
committed
Fix unit test

dwoz
authored and
Akm0d
committed
Add test from alt PR

dwoz
authored and
Akm0d
committed
Fix matchers using pillar in opts

dwoz
authored and
Akm0d
committed
Add changelog for #65724

dwoz
authored and
Akm0d
committed
Fix linter

dwoz
authored and
Akm0d
committed
Fix typo

dwoz
authored and
Akm0d
committed
Fix test assertion for ext_pillar_first

dwoz
authored and
Akm0d
committed
Address frebib's PR comments: ensure opts['pillar'] is set in __init__ and explicitly update pack

dwoz
authored and
Akm0d
committed
Fix linter: remove trailing newlines

dwoz
authored and
Akm0d
committed
Fully address frebib's suggestions: update loader pack instead of reloading

dwoz
authored and
Akm0d
committed
Fix circular reference in Pillar when pillar_opts is True

dwoz
authored and
Akm0d
committed
Fix integration regression: preserve master ID in ext_pillar_opts

dwoz
authored and
Akm0d
committed
Final cleanup: surgical pillar data access, fixed regressions, and broken circular references

dwoz
authored and
Akm0d
committed
Final cleanup: remove dangerous updates to pillar_data and ensure integration tests pass locally

dwoz
authored and
Akm0d
committed
Final cleanup: pop __context__ from master opts to prevent circular references

dwoz
authored and
Akm0d
committed
Final verified cleanup: resolved circular references and integration test regressions

dwoz
authored and
Akm0d
committed
Final verified fix: restore opts['pillar'] assignment for matchers in compile_pillar

dwoz
authored and
Akm0d
committed
Final verified cleanup: removed circular references and fixed integration regressions by relying on loader packs

dwoz
authored and
Akm0d
committed
Final verified fix for Pillar regressions: resolved circular references, fixed integration regressions, and improved matcher fallback logic

dwoz
authored and
Akm0d
committed
Final verified cleanup: resolved circular references, integration regressions, and linting issues

dwoz
authored and
Akm0d
committed
Add changelog for #64043

dwoz
authored and
Akm0d
committed
Add explicit tests for pillar_opts, ssh_merge_pillar, decrypt_pillar and non-ext_pillar_first paths

dwoz
authored and
Akm0d
committed
Fix formatting and final logic verification for dunder pillar

dwoz
authored and
Akm0d
committed
Fix log of dead processes in reap_stray_processes

m-czernek
authored and
Akm0d
committed
pass pre-commit
Akm0d
committed
safepillar: only redact credential-like pillar branches; unwrap for Jinja
Akm0d
committed
Merge branch 'master' into fix/67367-mask-pillar
Akm0d
authored

Commits on Apr 16, 2026