Fix renovate tag, don't run SSH wrapper tests with 3006/3.12

3006 has issues with Python 3.12, which is the system default Python
version of the new `ubuntu-24.04` runner.

.github/workflows/test-action.yml

@@ -26,7 +26,7 @@ jobs:
           fetch-depth: 2  # coverage: Issue detecting commit SHA
 
       - name: Setup Vault
-        # renovate: datasource=git-tags depName=https://github.com/eLco/setup-vault depType=action
+        # renovate:
         uses: eLco/setup-vault@5d0ddffdfca9650484ae1378dafc376a9ebcd15e  # v1.0.3
         with:
           vault_version: 1.15.4

tests/integration/wrapper/conftest.py

@@ -0,0 +1,22 @@
+import pytest
+import salt.version
+from packaging.version import Version
+
+
+@pytest.fixture(scope="module", autouse=True)
+def _check_host_python(salt_ssh_cli):
+    """
+    When testing Salt 3006.*, the host's default Python version
+    needs to be <3.12, otherwise Salt just crashes with an ImportError
+    regarding ``backports.ssl_match_hostname``.
+    """
+    if Version(salt.version.__version__) >= Version("3007"):
+        return
+    ret = salt_ssh_cli.run("--raw", "python3 --version")
+    assert ret.returncode == 0
+    assert isinstance(ret.data, dict)
+    python_version = Version(ret.data["stdout"].split(" ")[1])
+    if python_version >= Version("3.12"):
+        pytest.skip(
+            f"The host Python ({python_version}) is not supported by Salt {salt.version.__version__}"
+        )