This update for salt fixes the following issues:

Security fixes:

- CVE-2026-31958: python-tornado: parsing large multipart bodies with many parts can cause a denial of service (bsc#1259554)

Other changes in salt:

- Use non vendored tornado with Python 3.11 (bsc#1257583, bsc#1259700)
- Harden Tornado from invalid HTTP reason phrases
- Read full URI from ldap pillar config (bsc#1254900)
- Make users with backslash working for salt-ssh (bsc#1254629)
- Fixed ansible.playbooks extra-vars quoting (bsc#1257831)
- Fixed virtualenv call in test helper to use proper python version