update from current

salt/deb_install/init.sls

@@ -1,23 +1,36 @@
 {% from "salt/map.jinja" import salt_daemons with context %}
 {% from "salt/deb_install/map.jinja" import osrelease, oscodename with context %}
 
-/etc/apt/keyrings/salt-archive-keyring-2023.gpg:
+/etc/apt/keyrings/salt-archive-keyring-2023.pgp:
   file.managed:
-    - source: https://repo.saltproject.io/salt/py3/{{ grains['os'].lower() }}/{{ osrelease }}/amd64/SALT-PROJECT-GPG-PUBKEY-2023.gpg
-    - source_hash: c6f6cbcd96fdb130b1dde8dcfc05d46a3a3f322ff0514f98e2e6473896243472
+    - source: https://packages.broadcom.com/artifactory/api/security/keypair/SaltProjectKey/public
+    - source_hash: 36decef986477acb8ba2a1fc4041bcf9f22229ef6c939d0317c9e36a9d142b34
 
 /etc/apt/sources.list.d/salt.list:
   file.managed:
-    - contents: "deb [signed-by=/etc/apt/keyrings/salt-archive-keyring-2023.gpg arch=amd64] https://repo.saltproject.io/salt/py3/{{ grains['os'].lower() }}/{{ osrelease }}/amd64/minor/{{ salt.pillar.get("salt:version") }} {{ oscodename }} main"
+    - contents: deb [signed-by=/etc/apt/keyrings/salt-archive-keyring-2023.pgp arch=amd64] https://packages.broadcom.com/artifactory/saltproject-deb/ stable main
 
 salt-common:
   pkg.installed:
     - version: '{{ salt.pillar.get("salt:version") }}'
     - refresh: true
     - require:
-      - file: /etc/apt/keyrings/salt-archive-keyring-2023.gpg
+      - file: /etc/apt/keyrings/salt-archive-keyring-2023.pgp
       - file: /etc/apt/sources.list.d/salt.list
 
+salt {{ salt.pillar.get("salt:version") }}:
+  pkg.held:
+    - pkgs:
+      - salt-common
+{% for daemon in salt_daemons %}
+      - salt-{{ daemon }}
+{% endfor %}
+    - require:
+      - pkg: salt-common
+{% for daemon in salt_daemons %}
+      - pkg: salt-{{ daemon }}
+{% endfor %}
+  
 {% for daemon in salt_daemons %}
 salt-{{ daemon }}:
   pkg.installed: