May 2019 - Release-announce - lists.openstack.org

horizon 15.1.0 (stein)
by no-reply＠openstack.org 28 May '19

28 May '19

We are jazzed to announce the release of: horizon 15.1.0: OpenStack Dashboard This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/horizon Download the package from: https://tarballs.openstack.org/horizon/ Please report issues through: https://bugs.launchpad.net/horizon/+bugs For more details, please see below. 15.1.0 ^^^^^^ Upgrade Notes * python-cinderclient ">=4.0.1" is now required to fix :bug:`1824017`. Cinder API 3.55 or later does not accept additional properties but python-cinderclient older than 4.0.0 sends additional properties like used_id, status and so on. Horizon uses Cinder API 3.58 to create a volume, and this means the volume creation fails if python- cinderclient <4.0.0 is used. To handle this, the minimum requirement of python-cinderclient was bumped to 4.0.1. Changes in horizon 15.0.0..15.1.0 --------------------------------- 56a876b43 Imported Translations from Zanata 0d70b2e68 Add relnote on cinderclient minver bump to 4.0.1 13140aeea Imported Translations from Zanata a5a4c6d5f Update sphinx dependency 72b40d94d Correctly set content-type for workflow response 6768f5e57 Fix KeyError when image was deleted 6199bf352 Imported Translations from Zanata 478d28615 Imported Translations from Zanata ce158299b Imported Translations from Zanata ad587a006 OpenDev Migration Patch 2bad7e483 Complete angular translation extract pattern a0bf613d9 Change Cinder API version in the documentation b086505d3 Set min version of python-cinderclient to 4.0.0 7807bd9b6 Imported Translations from Zanata Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 2 +- .../locale/id/LC_MESSAGES/doc-configuration.po | 322 ++++++++++++++++++++- horizon/forms/views.py | 3 +- .../test/unit/utils/test_babel_extract_angular.py | 16 + horizon/utils/babel_extract_angular.py | 8 +- lower-constraints.txt | 2 +- .../dashboards/project/instances/views.py | 4 +- .../local/local_settings.py.example | 3 +- .../locale/de/LC_MESSAGES/djangojs.po | 20 +- .../locale/eo/LC_MESSAGES/django.po | 170 ++++++++++- .../locale/fr/LC_MESSAGES/django.po | 34 ++- .../locale/fr/LC_MESSAGES/djangojs.po | 37 ++- .../locale/id/LC_MESSAGES/django.po | 58 +++- .../locale/id/LC_MESSAGES/djangojs.po | 29 +- .../locale/ja/LC_MESSAGES/django.po | 31 +- .../locale/pt_BR/LC_MESSAGES/django.po | 291 ++++++++++++++++++- .../locale/ru/LC_MESSAGES/django.po | 12 +- .../locale/ru/LC_MESSAGES/djangojs.po | 20 +- .../locale/zh_CN/LC_MESSAGES/django.po | 6 +- ...n-cinderclient-dependency-9e12a69492f63289.yaml | 10 + requirements.txt | 2 +- 31 files changed, 1068 insertions(+), 80 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 336f62fa6..2c907d8da 100644 --- a/requirements.txt +++ b/requirements.txt @@ -34 +34 @@ pyScss!=1.3.5,>=1.3.4 # MIT License -python-cinderclient>=3.3.0 # Apache-2.0 +python-cinderclient>=4.0.1 # Apache-2.0

1 0

python-novaclient 14.1.0 (train)
by no-reply＠openstack.org 28 May '19

28 May '19

We are jazzed to announce the release of: python-novaclient 14.1.0: Client library for OpenStack Compute API This release is part of the train release series. The source is available from: https://opendev.org/openstack/python-novaclient Download the package from: https://pypi.org/project/python-novaclient Please report issues through: https://bugs.launchpad.net/python-novaclient/+bugs For more details, please see below. 14.1.0 ^^^^^^ New Features * The "novaclient.v2.hypervisors.HypervisorManager.search" method now accepts a "detailed" boolean kwarg which defaults to False but when True will search for the given hypervisor hostname match and return details about any matching hypervisors. Specifying "detailed=True" requires compute API version 2.53 or greater. Changes in python-novaclient 14.0.0..14.1.0 ------------------------------------------- 7b9d3000 Set the lower limit of api_version for volume_type f78a4706 Allow passing negative values for the locked search_opt in cs.servers.list 0dc6b96e Allow searching for hypervisors and getting back details 2ecb3971 Optimize limit option docs string description for novaclient Diffstat (except docs and test files) ------------------------------------- novaclient/v2/flavors.py | 3 +++ novaclient/v2/hypervisors.py | 18 +++++++++++--- novaclient/v2/instance_action.py | 3 +++ novaclient/v2/keypairs.py | 3 +++ novaclient/v2/migrations.py | 6 +++++ novaclient/v2/server_groups.py | 3 +++ novaclient/v2/servers.py | 13 ++++++++-- novaclient/v2/shell.py | 2 +- novaclient/v2/usage.py | 8 +++++-- ...earch-hypervisor-detailed-352f3ac70d42fe6e.yaml | 8 +++++++ 14 files changed, 140 insertions(+), 8 deletions(-)

1 0

networking-hyperv 7.2.0 (stein)
by no-reply＠openstack.org 24 May '19

24 May '19

We are pleased to announce the release of: networking-hyperv 7.2.0: This project tracks the work to integrate the Hyper-V networking with Neutron. This project contains the Hyper-V Neutron Agent Mixin, Security Groups Driver, ML2 Mechanism Driver and the utils modules they use in order to properly bind neutron ports on a Hyper-V host. This project resulted from the neutron core vendor decomposition. This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/networking-hyperv Download the package from: https://pypi.org/project/networking-hyperv Please report issues through: https://bugs.launchpad.net/networking-hyperv/+bugs For more details, please see below. Changes in networking-hyperv 7.1.0..7.2.0 ----------------------------------------- 653ba51 Uses neutron_lib's rpc module 25e0016 OpenDev Migration Patch db12ebb Update UPPER_CONSTRAINTS_FILE for stable/stein e2e58b2 Update .gitreview for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 ++- lower-constraints.txt | 2 +- networking_hyperv/neutron/agent/layer2.py | 2 +- requirements.txt | 2 +- tox.ini | 2 +- 7 files changed, 9 insertions(+), 7 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 62a3ef5..408e1fc 100644 --- a/requirements.txt +++ b/requirements.txt @@ -9 +9 @@ eventlet!=0.18.3,!=0.20.1,>=0.18.2 # MIT -neutron-lib>=1.13.0 # Apache-2.0 +neutron-lib>=1.18.0 # Apache-2.0

1 0

tripleo-upgrade 4.0.0
by no-reply＠openstack.org 24 May '19

24 May '19

We are excited to announce the release of: tripleo-upgrade 4.0.0: tripleo-upgrade - An ansible role for upgrade and update a TripleO deployment The source is available from: https://opendev.org/openstack/tripleo-upgrade Download the package from: https://tarballs.openstack.org/tripleo-upgrade/ For more details, please see below. Changes in tripleo-upgrade 3.0.0..4.0.0 --------------------------------------- 39d4b47 OpenDev Migration Patch db7e04b Add new oc_hosts_roles variable. 00ed89b Option to specify python version and use package instead of yum. f3bbe18 Use the new limit option. 34936a2 [FFWD] Add missing post* workarounds calls. 42beb3e [FFWD] Align workarounds templating with upgrades. d67e6e7 Switch to more specific include modules for ffwd. 6e9762f Switch to more specific include modules for updates. 571d6b0 Switch to more specific include modules for upgrades. 2ff51bd Switch to more specific include statements. 4776547 [Configuration] Remove the build documentation. 4d62924 Remove become and become_user from include_role 34b12e0 Allow to specify order of roles upgrade. 9fec316 Fix order for applying workarounds 72d9519 Simplify some scripts and remove some unnecessary jq usage e3e97be [Documentation] Migrate the format. 1d03dfb Address ansible-lint issues 8ac74a8 Migrate linting to pre-commit 711a673 Cleanup irrelevant scripts from previous releases. 6ea9642 Drop overcloud-user for ceph external-upgrade. 82b0ad6 Fix condition for setting workload_memory fact. 353589b Fix typo in option name. c7a1178 [validation] Filter Neutron sidecar containers 0628e5f [Configuration] Update min tox version. d1888ac Don't wait on ERROR VM state a51bd6f [Core] Change the author mail. 96b4bec Autodiscover SSL cert after uc upgrade cc9133b Assert workloads are spawned in different stages 1235f10 Do not adjust roles data for minor updates. 2fd1b26 Drop remaining ssh-user from templates. 43cc0db Run online data migration before update/upgrade converge. ba36d95 [validation] ignore openstack-neutron-dhcp-agent as it is not restarting d8d12b9 Fix typo in workarounds step name 8c37eaa Use Jinja2 macro to remove redundancy in workarounds.sh.j2. ebc575a Remove tripleo-ci-centos-7-containerized-undercloud-upgrades from gate 6411e52 Drop ssh-user from 'upgrade run' template. f2beaf8 Set containerized_undercloud_upgrade to true 19ff8a7 Add missing bracket in jinja filter 7442009 Set pipefail during overcloud upgrade tasks. 037919f Drop deprecated Telemetry services from custom roles_data. 147ae80 Add container image prepare script to upgrade workflow. bd559cb Allow specify Ceph upgrade workarounds. 7e0412e Add timeout to openstack command 203db80 Pass stack name during minor update. abbf554 Add cli_opts_params.yaml to update prepare/converge. 9246d9d Add containers-prepare parameter to upgrade scripts. 2dba1be Add rocky specific parameters to custom NICs. 8cdda0e Fix variables for workaround variables. ed4cdcc Function to apply workarounds 4c28657 Add ContainerImagePrepare to custom roles_data 7c0fbc0 Adjust templating for upgrade scripts. c0c804d Use external-(upgrade|update) commands for Ceph. c0fad7c Set container_cli for undercloud 2caf0d5 Fix variable name for workload_launch task. 195ac92 Fix linters E102 Error 8ca800a Replace RabbitMQ with OsloMessaging(Rpc|Notify) 204787b SSH to node before validating services. 4611303 Update required packages for containerized undercloud upgrade f2d0bc0 fix tox python3 overrides 6e72e7d Assert services/containers are started after reboot. 1e04ab8 Don't change user during ping check. d2d32c9 Configure undercloud for containerized upgrade. 6d83ff9 Use ansible_host variable in wait_for task. 493446c Enhance undercloud reboot procedure for baremetal f87d7c5 Update reno for stable/rocky ee96eea Set container_images_file for containerized undercloud. Diffstat (except docs and test files) ------------------------------------- .ansible-lint | 15 ++ .gitreview | 2 +- .pre-commit-config.yaml | 41 ++++ .yamllint | 6 + README.md => README.rst | 95 +++++----- ci-scripts/ansible-lint.sh | 15 -- defaults/main.yml | 39 ++-- infrared_plugin/main.yml | 84 ++++----- meta/main.yml | 207 ++------------------- releasenotes/source/index.rst | 1 + releasenotes/source/rocky.rst | 6 + requirements.txt | 1 - setup.cfg | 4 +- tasks/common/adjust-roles-data.yaml | 32 +++- tasks/common/auxilary-facts.yaml | 8 +- tasks/common/controller_post_script.yml | 4 +- tasks/common/controller_post_scripts.yml | 1 + tasks/common/convert_ceph_params.yaml | 22 ++- tasks/common/convert_cli_opts_params.yaml | 20 +- tasks/common/convert_nic_templates.yaml | 6 +- tasks/common/convert_roles_data.yaml | 1 + tasks/common/create_http_test_scripts.yml | 6 +- .../create_l3_agent_connectivity_check_script.yml | 1 + .../create_l3_agent_failover_check_script.yml | 1 + tasks/common/create_nova_actions_check_script.yml | 1 + tasks/common/create_workload.yml | 1 - tasks/common/load_roles_from_inventory.yaml | 24 ++- .../queens_to_rocky_adjust_nic_templates.yaml | 43 +++++ tasks/common/ssh_config_skip_host.yml | 1 + tasks/common/undercloud_validate_upgrade.yaml | 121 ++++++------ tasks/fast-forward-upgrade/convert_roles_data.yaml | 27 +-- tasks/fast-forward-upgrade/create-ffu-scripts.yaml | 1 + .../create-prepare-scripts.yaml | 61 +++--- .../ffu_update_stack_outputs.yaml | 6 +- tasks/fast-forward-upgrade/ffu_upgrade_ceph.yaml | 7 +- .../fast-forward-upgrade/ffu_upgrade_converge.yaml | 6 +- tasks/fast-forward-upgrade/main.yml | 146 ++++++++++----- tasks/fast-forward-upgrade/overcloud_bulk.yaml | 18 +- tasks/fast-forward-upgrade/overcloud_role.yaml | 33 ++-- tasks/fast-forward-upgrade/undercloud-upgrade.yml | 3 +- tasks/update/create-overcloud-update-scripts.yaml | 32 +++- tasks/update/create-undercloud-update-scripts.yaml | 3 +- tasks/update/main.yml | 59 ++++-- tasks/update/overcloud_update_converge.yml | 10 +- tasks/update/overcloud_update_prepare.yml | 11 +- tasks/update/overcloud_update_run.yml | 11 +- tasks/upgrade/ceph_upgrade_run.yml | 3 +- tasks/upgrade/compute_detect.yml | 25 --- tasks/upgrade/compute_upgrade.yml | 6 - tasks/upgrade/configure_uc_containers.yml | 60 ++++++ tasks/upgrade/container_images.yaml | 5 - tasks/upgrade/controller_node_upgrade.yml | 2 +- tasks/upgrade/controller_post_upgrade.yml | 1 + .../upgrade/create-overcloud-upgrade-scripts.yaml | 63 +++++-- .../upgrade/create-undercloud-upgrade-scripts.yaml | 9 +- tasks/upgrade/docker_registry_images_env.yaml | 5 - tasks/upgrade/kill_ssh.yaml | 1 + tasks/upgrade/local_docker_registry_env.yaml | 3 - tasks/upgrade/main.yml | 93 ++++++--- tasks/upgrade/node_upgrade.yml | 11 -- tasks/upgrade/non_controller_upgrade_scripts.yml | 14 -- tasks/upgrade/overcloud_upgrade_converge.yml | 10 +- tasks/upgrade/overcloud_upgrade_prepare.yml | 16 +- tasks/upgrade/overcloud_upgrade_run.yml | 8 +- tasks/upgrade/step_upgrade.yml | 45 ----- tasks/upgrade/swiftstorage_upgrade.yml | 11 -- tasks/upgrade/undercloud_ssl_camap.yaml | 71 +++++-- tasks/upgrade/use_oooq.yaml | 6 +- templates/ceph-update-run.sh.j2 | 66 +++++-- templates/ceph-upgrade-run.sh.j2 | 77 +++++--- templates/check_service_galera.sh.j2 | 2 +- templates/check_service_haproxy.sh.j2 | 2 +- templates/check_service_rabbitmq.sh.j2 | 2 +- templates/check_service_reboot.sh.j2 | 2 +- templates/check_service_redis.sh.j2 | 2 +- .../overcloud_upgrade_nodes.sh.j2 | 2 +- .../overcloud_upgrade_role.sh.j2 | 2 +- templates/fast-forward-upgrade/workarounds.sh.j2 | 143 +++++--------- templates/node_upgrade_post.sh.j2 | 2 +- templates/nova_actions_check.sh.j2 | 2 +- templates/overcloud_online_data_migration.sh.j2 | 18 ++ templates/overcloud_prepare_containers.sh.j2 | 18 ++ templates/overcloud_update_converge.sh.j2 | 3 + templates/overcloud_update_prepare.sh.j2 | 3 + templates/overcloud_update_run.sh.j2 | 12 +- templates/overcloud_upgrade_converge.sh.j2 | 53 +++--- templates/overcloud_upgrade_prepare.sh.j2 | 46 ++--- templates/overcloud_upgrade_run.sh.j2 | 21 ++- templates/undercloud_upgrade.sh.j2 | 6 +- templates/validate_docker_images_versions.sh.j2 | 2 +- templates/workarounds.sh.j2 | 140 ++++++-------- templates/workload_launch.sh.j2 | 178 +++++++++++++++--- test-requirements.txt | 6 +- tox.ini | 55 ++---- zuul.d/layout.yaml | 3 +- 97 files changed, 1450 insertions(+), 1135 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 885c2cb..ac56c37 100644 --- a/requirements.txt +++ b/requirements.txt @@ -2 +1,0 @@ pbr>=1.6 -ansible diff --git a/test-requirements.txt b/test-requirements.txt index 685f9b9..c4960de 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -0,0 +1 @@ +pre-commit==1.13.0 # MIT License @@ -3,5 +3,0 @@ bashate>=0.5.1 # Apache-2.0 - -# this is required for the docs build jobs -reno>=2.5.0 # Apache-2.0 -sphinx>=1.6.2 # BSD -openstackdocstheme>=1.17.0 # Apache-2.0

1 0

os-resource-classes 0.4.0
by no-reply＠openstack.org 23 May '19

23 May '19

We are thrilled to announce the release of: os-resource-classes 0.4.0: Resource Classes for OpenStack The source is available from: https://opendev.org/openstack/os-resource-classes Download the package from: https://pypi.org/project/os-resource-classes For more details, please see below. Changes in os-resource-classes 0.3.0..0.4.0 ------------------------------------------- 5943305 Replace git.openstack.org URLs with opendev.org URLs 3c8a66a Add MEM_ENCRYPTION_CONTEXT resource class 6a49f2a Add missing upper-constraints.txt to deps in docs testenv 610afeb Use py3 for all* tox targets 7c6ac2b Dropping the py35 testing 63b1039 OpenDev Migration Patch 930e199 Update master for stable/stein f88664e Update bug links for storyboard Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 1 - CONTRIBUTING.rst | 4 +++- HACKING.rst | 2 +- README.rst | 8 ++++---- os_resource_classes/__init__.py | 4 ++++ releasenotes/source/index.rst | 1 + releasenotes/source/stein.rst | 6 ++++++ setup.cfg | 2 +- tox.ini | 11 +++++++++-- 11 files changed, 32 insertions(+), 13 deletions(-)

1 0

python-ironicclient 2.7.2 (stein)
by no-reply＠openstack.org 23 May '19

23 May '19

We are thrilled to announce the release of: python-ironicclient 2.7.2: OpenStack Bare Metal Provisioning API Client Library This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/python-ironicclient Download the package from: https://pypi.org/project/python-ironicclient Please report issues through: https://bugs.launchpad.net/python-ironicclient/+bugs For more details, please see below. 2.7.2 ^^^^^ Bug Fixes * Prevent trying to access endpoints with "/v1/v1" when using endpoint overrides containing "/v1". Changes in python-ironicclient 2.7.1..2.7.2 ------------------------------------------- 266a700 Do not try to use /v1/v1 when endpoint_override is used 7217d7e OpenDev Migration Patch Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- ironicclient/common/http.py | 16 ++++++++++------ releasenotes/notes/endpoint-strip-dea59ccb05628a35.yaml | 5 +++++ zuul.d/ironicclient-jobs.yaml | 2 +- 5 files changed, 20 insertions(+), 11 deletions(-)

1 0

ironic-inspector 7.2.4 (queens)
by no-reply＠openstack.org 22 May '19

22 May '19

We exuberantly announce the release of: ironic-inspector 7.2.4: Hardware introspection for OpenStack Bare Metal This release is part of the queens stable release series. The source is available from: https://opendev.org/openstack/ironic-inspector Download the package from: https://tarballs.openstack.org/ironic-inspector/ Please report issues through: https://bugs.launchpad.net/ironic-inspector/+bugs For more details, please see below. 7.2.4 ^^^^^ Security Issues *************** * Fixes insufficient input filtering when looking up a node by information from the introspection data. It could potentially allow SQL injections via the "/v1/continue" API endpoint. See story 2005678 (https://storyboard.openstack.org/#!/story/2005678) for details. Bug Fixes ********* * Fix starting inspection of node having IPv6 BMC address. Inspection could not be initiated because v6 address was being considered as a hostname. Thus resolving incorrect hostname ended up with blocking error. Changes in ironic-inspector 7.2.3..7.2.4 ---------------------------------------- 17c796b Eliminate SQL injection vulnerability in node_cache a28fd20 OpenDev Migration Patch 4cdd6f0 Replace openstack.org git:// URLs with https:// 81c0e17 Fix lookup when ipmi_address is a hostname d934e9a Use getaddrinfo instead of gethostbyname while resolving BMC address Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- ironic_inspector/common/ironic.py | 37 +++++++++++---- ironic_inspector/introspect.py | 5 +- ironic_inspector/node_cache.py | 15 +++--- ironic_inspector/plugins/discovery.py | 3 +- ironic_inspector/test/unit/test_common_ironic.py | 53 ++++++++++++++-------- ironic_inspector/test/unit/test_introspect.py | 40 +++++++++++++--- ironic_inspector/test/unit/test_node_cache.py | 5 ++ .../legacy/ironic-inspector-grenade-dsvm/run.yaml | 18 ++++---- .../run.yaml | 12 ++--- .../ironic-inspector-tempest-dsvm-python3/run.yaml | 10 ++-- ...find-node-input-filtering-e8ea529252e80739.yaml | 7 +++ ...-address-start-inspection-7a72794f25eb9f19.yaml | 7 +++ zuul.d/legacy-ironic-inspector-jobs.yaml | 4 +- 14 files changed, 151 insertions(+), 67 deletions(-)

1 0

ironic-inspector 8.0.3 (rocky)
by no-reply＠openstack.org 22 May '19

22 May '19

We are thrilled to announce the release of: ironic-inspector 8.0.3: Hardware introspection for OpenStack Bare Metal This release is part of the rocky stable release series. The source is available from: https://opendev.org/openstack/ironic-inspector Download the package from: https://tarballs.openstack.org/ironic-inspector/ Please report issues through: https://storyboard.openstack.org/#!/project/944 For more details, please see below. 8.0.3 ^^^^^ Security Issues *************** * Fixes insufficient input filtering when looking up a node by information from the introspection data. It could potentially allow SQL injections via the "/v1/continue" API endpoint. See story 2005678 (https://storyboard.openstack.org/#!/story/2005678) for details. Bug Fixes ********* * Fix starting inspection of node having IPv6 BMC address. Inspection could not be initiated because v6 address was being considered as a hostname. Thus resolving incorrect hostname ended up with blocking error. Changes in ironic-inspector 8.0.2..8.0.3 ---------------------------------------- 97f9d34 Eliminate SQL injection vulnerability in node_cache f73967f OpenDev Migration Patch de754cc Replace openstack.org git:// URLs with https:// f66e207 Fix lookup when ipmi_address is a hostname 40abe1b Use getaddrinfo instead of gethostbyname while resolving BMC address Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- ironic_inspector/common/ironic.py | 37 +++++++++++---- ironic_inspector/introspect.py | 5 +- ironic_inspector/node_cache.py | 15 +++--- ironic_inspector/plugins/discovery.py | 3 +- ironic_inspector/test/unit/test_common_ironic.py | 53 ++++++++++++++-------- ironic_inspector/test/unit/test_introspect.py | 45 ++++++++++++++---- ironic_inspector/test/unit/test_node_cache.py | 5 ++ .../legacy/ironic-inspector-grenade-dsvm/run.yaml | 18 ++++---- .../run.yaml | 12 ++--- .../ironic-inspector-tempest-dsvm-python3/run.yaml | 10 ++-- ...find-node-input-filtering-e8ea529252e80739.yaml | 7 +++ ...-address-start-inspection-7a72794f25eb9f19.yaml | 7 +++ zuul.d/legacy-ironic-inspector-jobs.yaml | 4 +- 14 files changed, 154 insertions(+), 69 deletions(-)

1 0

ironic-inspector 8.2.1 (stein)
by no-reply＠openstack.org 22 May '19

22 May '19

We are glad to announce the release of: ironic-inspector 8.2.1: Hardware introspection for OpenStack Bare Metal This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/ironic-inspector Download the package from: https://tarballs.openstack.org/ironic-inspector/ Please report issues through: https://storyboard.openstack.org/#!/project/944 For more details, please see below. 8.2.1 ^^^^^ Security Issues * Fixes insufficient input filtering when looking up a node by information from the introspection data. It could potentially allow SQL injections via the "/v1/continue" API endpoint. See story 2005678 (https://storyboard.openstack.org/#!/story/2005678) for details. Changes in ironic-inspector 8.2.0..8.2.1 ---------------------------------------- 67ff87e Eliminate SQL injection vulnerability in node_cache fbd3867 OpenDev Migration Patch bbd3894 Replace openstack.org git:// URLs with https:// 2ee155e Update UPPER_CONSTRAINTS_FILE for stable/stein 42900cc Update .gitreview for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 ++- ironic_inspector/node_cache.py | 15 ++++++--------- ironic_inspector/test/unit/test_node_cache.py | 5 +++++ .../legacy/ironic-inspector-grenade-dsvm/run.yaml | 18 +++++++++--------- .../find-node-input-filtering-e8ea529252e80739.yaml | 7 +++++++ tox.ini | 2 +- zuul.d/ironic-inspector-jobs.yaml | 2 +- zuul.d/legacy-ironic-inspector-jobs.yaml | 4 ++-- 8 files changed, 33 insertions(+), 23 deletions(-)

1 0

oslo.db 5.0.0 (train)
by no-reply＠openstack.org 21 May '19

21 May '19

We are overjoyed to announce the release of: oslo.db 5.0.0: Oslo Database library This release is part of the train release series. The source is available from: https://opendev.org/openstack/oslo.db Download the package from: https://pypi.org/project/oslo.db Please report issues through: https://bugs.launchpad.net/oslo.db/+bugs For more details, please see below. 5.0.0 ^^^^^ Bug Fixes * Removed deprecated database option "min_pool_size". This option had no effect and was deprecated in Rocky. For more information see bug 1764786 (https://bugs.launchpad.net/oslo.db/+bug/1764786) Changes in oslo.db 4.46.0..5.0.0 -------------------------------- 05ddd9f docs: Use sphinxcontrib.apidoc for building API docs 925bb81 Cap Bandit below 1.6.0 and update Sphinx requirement cc5c0e3 Replace git.openstack.org URLs with opendev.org URLs 7c164cf Support context function argument as keyword 6cfdc11 Removing deprecated min_pool_size Diffstat (except docs and test files) ------------------------------------- README.rst | 2 +- oslo_db/options.py | 11 ----- oslo_db/sqlalchemy/enginefacade.py | 7 ++- ...-deprecated-min-pool-size-1f351d79fe232129.yaml | 7 +++ setup.cfg | 19 +------- test-requirements.txt | 2 +- tox.ini | 54 +++++++++++----------- 12 files changed, 69 insertions(+), 111 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 27a9e3f..26e7f56 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -15 +15 @@ os-testr>=1.0.0 # Apache-2.0 -bandit>=1.1.0 # Apache-2.0 +bandit>=1.1.0,<1.6.0 # Apache-2.0

1 0