August 2025 - Release-announce - lists.openstack.org

futurist 3.2.1
by no-reply＠openstack.org 29 Aug '25

29 Aug '25

We are satisfied to announce the release of: futurist 3.2.1 The source is available from: https://opendev.org/openstack/futurist Download the package from: https://pypi.org/project/futurist For more details, please see below. 3.2.1 ^^^^^ Bug Fixes * "shutdown(wait=True)" abandoned queued work. This fix ensures it blocks until all submitted tasks (running and queued) finishes, consistent with Python's concurrent.futures.ThreadPoolExecutor Changes in futurist 3.2.0..3.2.1 -------------------------------- 388ec84 Fix `shutdown(wait=True)` to wait for queued tasks Diffstat (except docs and test files) ------------------------------------- futurist/_futures.py | 5 +++ futurist/_thread.py | 2 ++ ...own-wait-for-queued-tasks-81a6b584f69ac62f.yaml | 6 ++++ 4 files changed, 54 insertions(+)

1 0

python-venusclient 2.5.0 (flamingo)
by no-reply＠openstack.org 29 Aug '25

29 Aug '25

We are overjoyed to announce the release of: python-venusclient 2.5.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/python-venusclient Download the package from: https://pypi.org/project/python-venusclient Please report issues through: https://bugs.launchpad.net/openstack-venus/+bugs For more details, please see below. Changes in python-venusclient 2.1.0..2.5.0 ------------------------------------------ 9208ade Add delete-anomaly-rule in venusclient CLI 956a08e Combine 4 get-type-xxx to get-search-params in venusclient CLI 73f507b Add 'get-anomaly-rule' to venusclient 5a2b1f5 Add parameter desc of analyse-log of venusclient CLI 38abcf7 Add add_anomaly_rule to venusclient 594f204 modify search logs params in venusclient 8d6b6f6 Add set-custom-config subcommand to venusclient 1ca4f68 Document Format Modification 5e791c3 Update master for stable/2023.2 243f335 Adding get-instance-callchain subcommand to venusclient Diffstat (except docs and test files) ------------------------------------- HACKING.rst | 3 +- README.rst | 4 +- releasenotes/source/2023.2.rst | 6 +++ releasenotes/source/index.rst | 1 + venusclient/v1/analyse.py | 17 +++--- venusclient/v1/analyse_shell.py | 34 +++++++++++- venusclient/v1/anomaly.py | 35 ++++++++++++ venusclient/v1/anomaly_shell.py | 51 ++++++++++++++++++ venusclient/v1/config.py | 16 ++++++ venusclient/v1/config_shell.py | 15 ++++++ venusclient/v1/search.py | 89 ++++++++++++------------------- venusclient/v1/search_shell.py | 115 +++++++++++++++++++++++++++++++--------- 12 files changed, 291 insertions(+), 95 deletions(-)

1 0

python-cyborgclient 2.6.0 (flamingo)
by no-reply＠openstack.org 29 Aug '25

29 Aug '25

We contentedly announce the release of: python-cyborgclient 2.6.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/python-cyborgclient Download the package from: https://pypi.org/project/python-cyborgclient Please report issues through: https://storyboard.openstack.org/#!/project/openstack/cyborg For more details, please see below. Changes in python-cyborgclient 2.3.0..2.6.0 ------------------------------------------- 218cc6d Update python classifier in setup.cfg Diffstat (except docs and test files) ------------------------------------- setup.cfg | 2 ++ 1 file changed, 2 insertions(+)

1 0

oslo.config 9.4.1 (caracal)
by no-reply＠openstack.org 28 Aug '25

28 Aug '25

We exuberantly announce the release of: oslo.config 9.4.1 This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/oslo.config Download the package from: https://pypi.org/project/oslo.config Please report issues through: https://bugs.launchpad.net/oslo.config/+bugs For more details, please see below. Changes in oslo.config 9.4.0..9.4.1 ----------------------------------- 144d02a Fix concurrent access crash in _all_opt_infos() 042ece5 Update TOX_CONSTRAINTS_FILE for stable/2024.1 5fcbf5d Update .gitreview for stable/2024.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + oslo_config/cfg.py | 6 +++--- tox.ini | 4 ++-- 3 files changed, 6 insertions(+), 5 deletions(-)

1 0

neutron 24.2.1 (caracal)
by no-reply＠openstack.org 28 Aug '25

28 Aug '25

We are pumped to announce the release of: neutron 24.2.1 This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/neutron Download the package from: https://tarballs.openstack.org/neutron/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 24.2.1 ^^^^^^ Bug Fixes ********* * When ML2/OVN backend is used, usage of the metadata port IP address as a virtual IP address is blocked. That means that setting such IP address as allowed_address_pair for other port is not allowed and API will return 400 error in such case. For more information, see bug 2116249 (https://bugs.launchpad.net/neutron/+bug/2116249) Other Notes *********** * Neutron uses a new algorithm to compare the differences between security group rules in Neutron and ACLs in OVN. Before comparison, the data is sorted according to the security group rule ID, then the two ordered arrays are compared. This increases efficiency when larger sets of rules need to be synchronized. Changes in neutron 24.2.0..24.2.1 --------------------------------- 4086ec1c97 Re Reduce number of routers created in test_gateway_chassis_rebalance feea7e9f75 OVS firewall: only remove security group when truly unused cc4b1d3461 [SGL] Use admin context to retrieve log objs 50a6ae4cf9 [ML2/OVN] Validate allowed address pairs and distributed ports d5ed882bbd [FT] Isolate randomly failing address scope tests a35f555d60 Remove non voting arm64 jobs from stable branches 24c492cf39 Limit trunk ACTIVE state hack to OVN 6634ef5110 Consider logging options when using OVNdbsync d363b51503 Improve ACL comparison efficiency e7713e8742 Allow empty gateway IP in subnets from subnet pools 7b0a44c02b [FT] Improve ``test_assert_pings_during_br_phys_setup_not_lost*`` tests 4128a867c1 Fix nova notification on port unplug bcc380b39e Add provider network resources filter for "network" 1814fbb4c8 [OVN] OVN agent retrieval filter matching improvement 790b51985a Allow to delete singleton instances 420b5dc22f [FT] Match the correct event in ``test_subport_delete`` Diffstat (except docs and test files) ------------------------------------- .../agent/linux/openvswitch_firewall/firewall.py | 2 +- neutron/common/ovn/acl.py | 5 +- neutron/common/ovn/constants.py | 7 +- neutron/common/utils.py | 19 ++- neutron/db/allowedaddresspairs_db.py | 16 +++ neutron/db/db_base_plugin_v2.py | 35 +++++ neutron/ipam/requests.py | 36 ++++- neutron/ipam/subnet_alloc.py | 18 ++- .../plugins/ml2/drivers/ovn/agent/neutron_agent.py | 23 +++- .../ml2/drivers/ovn/mech_driver/mech_driver.py | 55 +++++++- .../drivers/ovn/mech_driver/ovsdb/ovn_db_sync.py | 152 +++++++++++++++++---- neutron/plugins/ml2/managers.py | 16 --- neutron/plugins/ml2/plugin.py | 9 +- neutron/services/logapi/common/sg_callback.py | 5 +- neutron/services/logapi/drivers/ovn/driver.py | 74 ++++++++++ neutron/services/trunk/drivers/ovn/trunk_driver.py | 48 +++++++ neutron/services/trunk/plugin.py | 10 +- .../mech_driver/ovsdb/extensions/test_placement.py | 11 +- .../ovn/mech_driver/ovsdb/test_ovn_db_sync.py | 106 +++++++++++++- .../functional/services/ovn_l3/test_plugin.py | 2 +- .../trunk/drivers/ovn/test_trunk_driver.py | 15 ++ .../linux/openvswitch_firewall/test_firewall.py | 43 ++++++ .../ml2/drivers/ovn/agent/test_neutron_agent.py | 129 +++++++++++++++-- .../ovn/mech_driver/ovsdb/test_ovn_db_sync.py | 55 +++++++- .../drivers/ovn/mech_driver/test_mech_driver.py | 50 ++++++- .../services/logapi/drivers/ovn/test_driver.py | 45 ++++++ .../trunk/drivers/ovn/test_trunk_driver.py | 69 ++++++++++ ...-virtual-ip-by-ovn-driver-0d46fed7652fea7a.yaml | 8 ++ ...acl-comparison-efficiency-9fc1027c37626419.yaml | 8 ++ tox.ini | 2 +- zuul.d/job-templates.yaml | 11 -- 39 files changed, 1125 insertions(+), 193 deletions(-)

1 0

python-tackerclient 2.4.0 (flamingo)
by no-reply＠openstack.org 28 Aug '25

28 Aug '25

We joyfully announce the release of: python-tackerclient 2.4.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/python-tackerclient Download the package from: https://pypi.org/project/python-tackerclient Please report issues through: https://bugs.launchpad.net/python-tackerclient/+bugs For more details, please see below. Changes in python-tackerclient 2.3.0..2.4.0 ------------------------------------------- 00d6e14 Replace Legacy Callable Formatter Functions c2bdc92 Update master for stable/2025.1 Diffstat (except docs and test files) ------------------------------------- releasenotes/source/2025.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + tackerclient/osc/v1/nfvo/vim.py | 7 ++++--- 3 files changed, 11 insertions(+), 3 deletions(-)

1 0

oslo.cache 3.7.1 (caracal)
by no-reply＠openstack.org 28 Aug '25

28 Aug '25

We are jazzed to announce the release of: oslo.cache 3.7.1 This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/oslo.cache Download the package from: https://pypi.org/project/oslo.cache Please report issues through: https://bugs.launchpad.net/oslo.cache/+bugs For more details, please see below. 3.7.1 ^^^^^ Bug Fixes * If tls_enabled=true memcache_pool has been switched to use bmemcached. Changes in oslo.cache 3.7.0..3.7.1 ---------------------------------- 5d7c471 Use BMemcacheClientPool if tls_enabled=true 5f0f768 Update TOX_CONSTRAINTS_FILE for stable/2024.1 6f5190c Update .gitreview for stable/2024.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + oslo_cache/backends/memcache_pool.py | 8 +++++--- oslo_cache/core.py | 4 ++++ ...emcache-for-memcache-pool-if-tls-enabled-733d98c265a3a9a1.yaml | 4 ++++ tox.ini | 4 ++-- 5 files changed, 16 insertions(+), 5 deletions(-)

1 0

python-zaqarclient 4.1.0 (flamingo)
by no-reply＠openstack.org 28 Aug '25

28 Aug '25

We eagerly announce the release of: python-zaqarclient 4.1.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/python-zaqarclient Download the package from: https://pypi.org/project/python-zaqarclient Please report issues through: https://bugs.launchpad.net/python-zaqarclient/+bugs For more details, please see below. Changes in python-zaqarclient 4.0.0..4.1.0 ------------------------------------------ f037482 Remove left overs of v1(.1) API support Diffstat (except docs and test files) ------------------------------------- zaqarclient/queues/v2/core.py | 2 +- zaqarclient/queues/v2/iterator.py | 2 +- zaqarclient/queues/v2/message.py | 4 ++-- zaqarclient/transport/__init__.py | 10 +++++----- zaqarclient/transport/request.py | 2 +- 13 files changed, 30 insertions(+), 30 deletions(-)

1 0

python-octaviaclient 3.12.0 (flamingo)
by no-reply＠openstack.org 28 Aug '25

28 Aug '25

We joyfully announce the release of: python-octaviaclient 3.12.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/python-octaviaclient Download the package from: https://pypi.org/project/python-octaviaclient Please report issues through: https://storyboard.openstack.org/#!/project/openstack/python- octaviaclient For more details, please see below. 3.12.0 ^^^^^^ Upgrade Notes ************* * Support for Python 3.9 has been removed. Now Python 3.10 is the minimum version supported. Bug Fixes ********* * Fixed a bug when using the "--wait" flag with the "l7rule create" command, it displayed an error message even when the command succeeded. Changes in python-octaviaclient 3.11.1..3.12.0 ---------------------------------------------- 9044650 tox: Drop envdir 05f0aac Fixed --wait flag with l7rule create ddba32a Remove Python 3.9 support 7f769f4 Drop explicit dependency on python-subunit Diffstat (except docs and test files) ------------------------------------- octaviaclient/osc/v2/l7rule.py | 2 +- releasenotes/notes/fix-l7rule-create-wait-1f087c17a82eedeb.yaml | 5 +++++ releasenotes/notes/remove-py39-18d9fc827db08abc.yaml | 5 +++++ requirements.txt | 4 ---- setup.cfg | 3 +-- test-requirements.txt | 5 ----- tox.ini | 4 +--- 9 files changed, 15 insertions(+), 19 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 3a1783f..d37de3f 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5,4 +4,0 @@ -# The order of packages is significant, because pip processes them in the order -# of appearance. Changing the order has an impact on the overall integration -# process, which may cause wedges in the gate later. - diff --git a/test-requirements.txt b/test-requirements.txt index 5d38791..95b1eef 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,4 +0,0 @@ -# The order of packages is significant, because pip processes them in the order -# of appearance. Changing the order has an impact on the overall integration -# process, which may cause wedges in the gate later. - @@ -13 +8,0 @@ pylint>=2.5.3 # GPLv2 -python-subunit>=1.0.0 # Apache-2.0/BSD

1 0

swift 2.35.1 (epoxy)
by no-reply＠openstack.org 28 Aug '25

28 Aug '25

We are pumped to announce the release of: swift 2.35.1 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/swift Download the package from: https://tarballs.openstack.org/swift/ Please report issues through: https://bugs.launchpad.net/swift/+bugs For more details, please see below. 2.35.1 ^^^^^^ New Features * S3 API * Added support for aws-chunked transfers. Recent AWS clients recently began defaulting to this mode. See Amazon's documentation. * Added support for verifying additional checksums during upload. All algorithms currently supported by AWS are supported: "CRC64NVME", "CRC32", "CRC32C", "SHA1", and "SHA256". See Amazon's documentation. Note that some algorithms require the availability of additional libraries: ISA-L or anycrc. Changes in swift 2.35.0..2.35.1 ------------------------------- 9ae4dd332 CHANGELOG for 2.35.1 af7082564 checksums: Ignore broken pyeclib installs ca70c3a3f checksum.py: fail gracefully if pyeclib is broken 972baf30d CI: Fix py36/py37 jobs 5b9ccdc03 CI: run func tests during rolling upgrade job 8b406ffa6 s3api: Add support for crc64nvme checksum calculation 9539a85bf s3api: Validate additional checksums on upload 02d5833cd utils: Add CRCHasher and crc32c implementation 68ef96d44 Add support of Sigv4-streaming f0d17af87 s3request: refactor error handling while reading input 3fafacbba s3request: refactor to introduce SigChecker classes 095779bf4 Update TOX_CONSTRAINTS_FILE for stable/2025.1 31d6e6a83 Update .gitreview for stable/2025.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 15 +- CHANGELOG | 16 + .../notes/release-2.35.1-58d9d52dfe46ee4d.yaml | 16 + swift/common/middleware/s3api/exception.py | 78 + swift/common/middleware/s3api/s3api.py | 3 +- swift/common/middleware/s3api/s3request.py | 1066 ++++++++-- swift/common/middleware/s3api/s3response.py | 13 +- .../s3api/schema/complete_multipart_upload.rng | 25 + swift/common/utils/__init__.py | 16 +- swift/common/utils/checksum.py | 266 +++ test/functional/s3api/test_object.py | 40 +- test/s3api/test_input_errors.py | 2095 +++++++++++++++++++- test/s3api/test_mpu.py | 2 +- test/s3api/test_object_checksums.py | 600 ++++++ test/unit/__init__.py | 24 +- .../common/middleware/s3api/test_multi_upload.py | 10 + test/unit/common/middleware/s3api/test_s3api.py | 43 +- .../unit/common/middleware/s3api/test_s3request.py | 1355 ++++++++++++- test/unit/common/test_utils.py | 22 + test/unit/common/utils/test_checksum.py | 417 ++++ tools/playbooks/multinode_setup/run.yaml | 1 - tox.ini | 4 +- 24 files changed, 5890 insertions(+), 245 deletions(-)

1 0

python-cloudkittyclient 5.4.0 (flamingo)
by no-reply＠openstack.org 28 Aug '25

28 Aug '25

We are thrilled to announce the release of: python-cloudkittyclient 5.4.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/python-cloudkittyclient Download the package from: https://pypi.org/project/python-cloudkittyclient Please report issues through: https://storyboard.openstack.org/#!/project/openstack/python- cloudkittyclient For more details, please see below. Changes in python-cloudkittyclient 5.3.1..5.4.0 ----------------------------------------------- 4fec2c3 Remove Python 3 variables from devstack config 4058c7f Use releases.openstack.org instead of opendev.org 5573390 Update master for stable/2025.1 Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 -- releasenotes/source/2025.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + tox.ini | 2 +- 4 files changed, 8 insertions(+), 3 deletions(-)

1 0

watcher 12.1.0 (caracal)
by no-reply＠openstack.org 28 Aug '25

28 Aug '25

We are tickled pink to announce the release of: watcher 12.1.0 This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/watcher Download the package from: https://tarballs.openstack.org/watcher/ Please report issues through: https://bugs.launchpad.net/watcher/+bugs For more details, please see below. 12.1.0 ^^^^^^ Security Issues *************** * Watchers no longer forges requests on behalf of a tenant when swapping volumes. Prior to this release watcher had 2 implementations of moving a volume, it could use cinders volume migrate api or its own internal implementation that directly calls nova volume attachment update api. The former is safe and the recommend way to move volumes between cinder storage backend the internal implementation was insecure, fragile due to a lack of error handling and capable of deleting user data. Insecure: the internal volume migration operation created a new keystone user with a weak name and password and added it to the tenants project with the admin role. It then used that user to forge request on behalf of the tenant with admin right to swap the volume. if the applier was restarted during the execution of this operation it would never be cleaned up. Fragile: the error handling was minimal, the swap volume api is async so watcher has to poll for completion, there was no support to resume that if interrupted of the time out was exceeded. Data-loss: while the internal polling logic returned success or failure watcher did not check the result, once the function returned it unconditionally deleted the source volume. For larger volumes this could result in irretrievable data loss. Finally if a volume was swapped using the internal workflow it put the nova instance in an out of sync state. If the VM was live migrated after the swap volume completed successfully prior to a hard reboot then the migration would fail or succeed and break tenant isolation. see: https://bugs.launchpad.net/nova/+bug/2112187 for details. Bug Fixes ********* * All code related to creating keystone user and granting roles has been removed. The internal swap volume implementation has been removed and replaced by cinders volume migrate api. Note as part of this change Watcher will no longer attempt volume migrations or retypes if the instance is in the *Verify Resize* task state. This resolves several issues related to volume migration in the zone migration and Storage capacity balance strategies. While efforts have been made to maintain backward compatibility these changes are required to address a security weakness in watcher's prior approach. see: https://bugs.launchpad.net/nova/+bug/2112187 for more context. Changes in watcher 12.0.0..12.1.0 --------------------------------- 6264f17c Configure watcher tempest's microversion in devstack 4fca7d24 use cinder migrate for swap volume 64ba589f Further database refactoring accc7a2a Replace deprecated LegacyEngineFacade 70d92a75 Skip real-data tests in non-real-data jobs f5ef5557 Update TOX_CONSTRAINTS_FILE for stable/2024.1 c604e00b Update .gitreview for stable/2024.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 1 + devstack/lib/watcher | 13 ++ devstack/plugin.sh | 3 + .../notes/bug-2112187-763bae283e0b736d.yaml | 47 +++++ tox.ini | 2 +- watcher/applier/actions/volume_migration.py | 98 +++-------- watcher/common/context.py | 3 + watcher/common/keystone_helper.py | 34 ---- watcher/common/utils.py | 8 +- watcher/db/sqlalchemy/alembic/env.py | 4 +- watcher/db/sqlalchemy/api.py | 195 ++++++++++----------- watcher/db/sqlalchemy/migration.py | 6 +- watcher/db/sqlalchemy/models.py | 8 - watcher/decision_engine/audit/continuous.py | 2 +- .../strategy/strategies/zone_migration.py | 55 +++--- .../decision_engine/audit/test_audit_handlers.py | 14 +- .../strategy/strategies/test_zone_migration.py | 5 +- 20 files changed, 270 insertions(+), 322 deletions(-)

1 0

watcher 14.1.0 (epoxy)
by no-reply＠openstack.org 28 Aug '25

28 Aug '25

We are gleeful to announce the release of: watcher 14.1.0 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/watcher Download the package from: https://tarballs.openstack.org/watcher/ Please report issues through: https://bugs.launchpad.net/watcher/+bugs For more details, please see below. 14.1.0 ^^^^^^ New Features ************ * A new module, "watcher.wsgi", has been added as a place to gather WSGI "application" objects. This is intended to ease deployment by providing a consistent location for these objects. For example, if using uWSGI then instead of: [uwsgi] wsgi-file = /bin/watcher-api-wsgi You can now use: [uwsgi] module = watcher.wsgi.api:application This also simplifies deployment with other WSGI servers that expect module paths such as gunicorn. Deprecation Notes ***************** * The watcher-api-wsgi console script is deprecated for removal in a future release. This artifact is generated using a setup-tools extension that is provide by PBR which is also deprecated. due to the changes in python packaging this custom extensions is planned to be removed form all OpenStack projects in a future PBR release in favor of module based wsgi applications entry points. Security Issues *************** * Watchers no longer forges requests on behalf of a tenant when swapping volumes. Prior to this release watcher had 2 implementations of moving a volume, it could use cinders volume migrate api or its own internal implementation that directly calls nova volume attachment update api. The former is safe and the recommend way to move volumes between cinder storage backend the internal implementation was insecure, fragile due to a lack of error handling and capable of deleting user data. Insecure: the internal volume migration operation created a new keystone user with a weak name and password and added it to the tenants project with the admin role. It then used that user to forge request on behalf of the tenant with admin right to swap the volume. if the applier was restarted during the execution of this operation it would never be cleaned up. Fragile: the error handling was minimal, the swap volume api is async so watcher has to poll for completion, there was no support to resume that if interrupted of the time out was exceeded. Data-loss: while the internal polling logic returned success or failure watcher did not check the result, once the function returned it unconditionally deleted the source volume. For larger volumes this could result in irretrievable data loss. Finally if a volume was swapped using the internal workflow it put the nova instance in an out of sync state. If the VM was live migrated after the swap volume completed successfully prior to a hard reboot then the migration would fail or succeed and break tenant isolation. see: https://bugs.launchpad.net/nova/+bug/2112187 for details. Bug Fixes ********* * When using prometheus datasource and more that one target has the same value for the "fqdn_label", the driver used the wrong instance label to query for host metrics. The "instance" label is no longer used in the queries but the "fqdn_label" which identifies all the metrics for a specific compute node. see Bug 2103451: https://bugs.launchpad.net/watcher/+bug/2103451 for more info. * Previously, when users attempted to create a new audit without providing a name and a goal or an audit template, the API returned error 500 and an incorrect error message was displayed. Now, Watcher displays a helpful message and returns HTTP error 400. For more info see: https://bugs.launchpad.net/watcher/+bug/2110947 * All code related to creating keystone user and granting roles has been removed. The internal swap volume implementation has been removed and replaced by cinders volume migrate api. Note as part of this change Watcher will no longer attempt volume migrations or retypes if the instance is in the *Verify Resize* task state. This resolves several issues related to volume migration in the zone migration and Storage capacity balance strategies. While efforts have been made to maintain backward compatibility these changes are required to address a security weakness in watcher's prior approach. see: https://bugs.launchpad.net/nova/+bug/2112187 for more context. * When running an audit with the *workload_stabilization* strategy with *instance_ram_usage* metric in a deployment with prometheus datasource, the host metric for the ram usage was wrongly reported with the incorrect unit which lead to incorrect standard deviation and action plans due to the application of the wrong scale factor in the algorithm. The host ram usage metric is now properly reported in KB when using a prometheus datasource and the strategy *workload_stabilization* calculates the standard deviation properly. For more details: https://launchpad.net/bugs/2113776 * Host maintenance strategy should migrate servers based on backup node if specified or rely on nova scheduler. It was enabling disabled hosts with watcher_disabled reason and migrating servers to those nodes. It can impact customer workload. Compute nodes were disabled for a reason. Host maintenance strategy is fixed now to support migrating servers only on backup node or rely on nova scheduler if no backup node is provided. * Previously, if an action failed in an action plan, the state of the action plan was reported as SUCCEEDED if the execution of the action has finished regardless of the outcome. Watcher will now reflect the actual state of all the actions in the plan after the execution has finished. If any action has status FAILED, it will set the state of the action plan as FAILED. This is the expected behavior according to Watcher documentation. For more info see: https://bugs.launchpad.net/watcher/+bug/2106407 * Bug #2110538 (https://bugs.launchpad.net/watcher/+bug/2110538) Corrected the HTTP error code returned when watcher users try to create audits with invalid parameters. The API now correctly returns a 400 Bad Request error. Changes in watcher 14.0.0..14.1.0 --------------------------------- ffec800f use cinder migrate for swap volume defd3953 Configure watcher tempest's microversion in devstack ba417b38 Fix audit creation with no name and no goal or audit_template 38622442 Set actionplan state to FAILED if any action has failed c7fde924 Add unit test to check action plan state when a nested action fails e5b5ff5d Return HTTP code 400 when creating an audit with wrong parameters fb85b27a Use KiB as unit for host_ram_usage when using prometheus datasource 53872f9a Aggregate by label when querying instance cpu usage in prometheus c0ebb8dd Drop code from Host maintenance strategy migrating instance to disabled hosts 1d7f1636 Added unit test to validate audit creation with no goal and no name c6ceaacf Add a unit test to check the error when creating an audit with wrong parameters f4bfb105 [host_maintenance] Pass des hostname in add_action solution 8a99d4c5 Add support for pyproject.toml and wsgi module paths ce9f0b4c Skip real-data tests in non-real-data jobs e385ece6 Aggregate by fqdn label instead instance in host cpu metrics c6505ad0 Query by fqdn_label instead of instance for host metrics 64f70b94 Drop sg_core prometheus related vars 68c9ce65 Update TOX_CONSTRAINTS_FILE for stable/2025.1 5fa09265 Update .gitreview for stable/2025.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 17 +-- devstack/lib/watcher | 96 ++++---------- devstack/plugin.sh | 3 + pyproject.toml | 3 + .../add-wsgi-module-support-597f479e31979270.yaml | 30 +++++ ...ries-with-multiple-target-0e65d20711d1abe2.yaml | 8 ++ releasenotes/notes/bug-2110947.yaml | 10 ++ .../notes/bug-2112187-763bae283e0b736d.yaml | 47 +++++++ .../notes/bug-2113776-4bd314fb46623fbc.yaml | 14 +++ ...trategy-on-disabled-hosts-24084a22d4c8f914.yaml | 10 ++ ...ion-plan-state-on-failure-69e498d902ada5c5.yaml | 13 ++ ...ror-400-on-bad-parameters-bb964e4f5cadc15c.yaml | 7 ++ setup.cfg | 2 +- tox.ini | 13 +- watcher/api/controllers/v1/audit.py | 19 +-- watcher/applier/action_plan/default.py | 22 +++- watcher/applier/actions/volume_migration.py | 98 ++++----------- watcher/common/keystone_helper.py | 34 ----- watcher/common/utils.py | 8 +- watcher/decision_engine/datasources/base.py | 2 +- watcher/decision_engine/datasources/prometheus.py | 135 ++++++++++---------- .../strategy/strategies/host_maintenance.py | 26 +--- .../strategy/strategies/zone_migration.py | 55 ++++---- .../action_plan/test_default_action_handler.py | 27 ++++ .../datasources/test_prometheus_helper.py | 140 +++++++++++++++------ .../strategy/strategies/test_host_maintenance.py | 13 +- .../strategies/test_workload_stabilization.py | 62 ++++++++- .../strategy/strategies/test_zone_migration.py | 5 +- watcher/wsgi/__init__.py | 0 watcher/wsgi/api.py | 18 +++ 34 files changed, 652 insertions(+), 422 deletions(-)

1 0

oslo.service 4.3.0 (flamingo)
by no-reply＠openstack.org 28 Aug '25

28 Aug '25

We exuberantly announce the release of: oslo.service 4.3.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/oslo.service Download the package from: https://pypi.org/project/oslo.service Please report issues through: https://bugs.launchpad.net/oslo.service/+bugs For more details, please see below. 4.3.0 ^^^^^ Upgrade Notes * Internal backend modules have been renamed to **explicitly indicate that they are** private: * "oslo_service.backend.common" → "oslo_service.backend._common" * "oslo_service.backend.threading" → "oslo_service.backend._threading" * "oslo_service.backend.eventlet" → "oslo_service.backend._eventlet" These modules were never intended to be used directly. **This change makes it clearer** that they are internal to "oslo_service.backend". Projects should only interact with the backend system via the public interface provided in "oslo_service.backend.__init__"—**specifically through functions like** "get_component()", "get_backend()", and "init_backend()". **If your project was** directly importing any of these modules, please update the imports to use the public API instead. Changes in oslo.service 4.2.2..4.3.0 ------------------------------------ bfc7798 Fix signal lookup to only include singals. 89026fd Merge common files in one service file. caacdc8 Add comprehensive backend system documentation. Diffstat (except docs and test files) ------------------------------------- oslo_service/backend/__init__.py | 11 +- .../backend/{common => _common}/__init__.py | 0 .../backend/{common => _common}/constants.py | 0 oslo_service/backend/_common/service.py | 80 +++++++ .../backend/{eventlet => _eventlet}/__init__.py | 18 +- .../backend/{eventlet => _eventlet}/loopingcall.py | 0 .../backend/{eventlet => _eventlet}/service.py | 21 +- .../backend/{eventlet => _eventlet}/threadgroup.py | 2 +- .../backend/{threading => _threading}/__init__.py | 18 +- .../{threading => _threading}/loopingcall.py | 0 .../backend/{threading => _threading}/service.py | 12 +- .../{threading => _threading}/threadgroup.py | 2 +- oslo_service/backend/common/daemon_utils.py | 33 --- oslo_service/backend/common/signal_utils.py | 38 ---- oslo_service/backend/common/singleton.py | 26 --- oslo_service/backend/common/validation_utils.py | 23 -- ...end-submodules-to-private-63bfa674677c3854.yaml | 19 ++ 20 files changed, 383 insertions(+), 162 deletions(-)

1 0

watcher 13.1.0 (dalmatian)
by no-reply＠openstack.org 28 Aug '25

28 Aug '25

We are pumped to announce the release of: watcher 13.1.0 This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/watcher Download the package from: https://tarballs.openstack.org/watcher/ Please report issues through: https://bugs.launchpad.net/watcher/+bugs For more details, please see below. 13.1.0 ^^^^^^ Security Issues *************** * Watchers no longer forges requests on behalf of a tenant when swapping volumes. Prior to this release watcher had 2 implementations of moving a volume, it could use cinders volume migrate api or its own internal implementation that directly calls nova volume attachment update api. The former is safe and the recommend way to move volumes between cinder storage backend the internal implementation was insecure, fragile due to a lack of error handling and capable of deleting user data. Insecure: the internal volume migration operation created a new keystone user with a weak name and password and added it to the tenants project with the admin role. It then used that user to forge request on behalf of the tenant with admin right to swap the volume. if the applier was restarted during the execution of this operation it would never be cleaned up. Fragile: the error handling was minimal, the swap volume api is async so watcher has to poll for completion, there was no support to resume that if interrupted of the time out was exceeded. Data-loss: while the internal polling logic returned success or failure watcher did not check the result, once the function returned it unconditionally deleted the source volume. For larger volumes this could result in irretrievable data loss. Finally if a volume was swapped using the internal workflow it put the nova instance in an out of sync state. If the VM was live migrated after the swap volume completed successfully prior to a hard reboot then the migration would fail or succeed and break tenant isolation. see: https://bugs.launchpad.net/nova/+bug/2112187 for details. Bug Fixes ********* * All code related to creating keystone user and granting roles has been removed. The internal swap volume implementation has been removed and replaced by cinders volume migrate api. Note as part of this change Watcher will no longer attempt volume migrations or retypes if the instance is in the *Verify Resize* task state. This resolves several issues related to volume migration in the zone migration and Storage capacity balance strategies. While efforts have been made to maintain backward compatibility these changes are required to address a security weakness in watcher's prior approach. see: https://bugs.launchpad.net/nova/+bug/2112187 for more context. Changes in watcher 13.0.0..13.1.0 --------------------------------- b5b1bc54 Configure watcher tempest's microversion in devstack c049a533 use cinder migrate for swap volume dbc06d15 Skip real-data tests in non-real-data jobs 54b3b584 Further database refactoring 8b0f1dbf Replace deprecated LegacyEngineFacade 238bb50f Run watcher-db-manage in grenade testing from venv db85f326 Update TOX_CONSTRAINTS_FILE for stable/2024.2 f6015fd6 Update .gitreview for stable/2024.2 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 1 + devstack/lib/watcher | 16 ++ devstack/plugin.sh | 3 + devstack/upgrade/upgrade.sh | 2 +- .../notes/bug-2112187-763bae283e0b736d.yaml | 47 +++++ tox.ini | 2 +- watcher/applier/actions/volume_migration.py | 98 +++-------- watcher/common/context.py | 3 + watcher/common/keystone_helper.py | 34 ---- watcher/common/utils.py | 8 +- watcher/db/sqlalchemy/alembic/env.py | 4 +- watcher/db/sqlalchemy/api.py | 195 ++++++++++----------- watcher/db/sqlalchemy/migration.py | 6 +- watcher/db/sqlalchemy/models.py | 8 - watcher/decision_engine/audit/continuous.py | 2 +- .../strategy/strategies/zone_migration.py | 55 +++--- .../decision_engine/audit/test_audit_handlers.py | 14 +- .../strategy/strategies/test_zone_migration.py | 5 +- 21 files changed, 274 insertions(+), 323 deletions(-)

1 0

python-glanceclient 4.10.0 (flamingo)
by no-reply＠openstack.org 28 Aug '25

28 Aug '25

We are glad to announce the release of: python-glanceclient 4.10.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/python-glanceclient Download the package from: https://pypi.org/project/python-glanceclient Please report issues through: https://bugs.launchpad.net/python-glanceclient/+bugs For more details, please see below. Changes in python-glanceclient 4.9.0..4.10.0 -------------------------------------------- d46a9bf Python 3.13: fix tests 90d15f6 Add support for passing image size to Glance API b78fdc3 Replace oslo_utils.encodeutils.exception_to_unicode Diffstat (except docs and test files) ------------------------------------- glanceclient/shell.py | 2 +- glanceclient/v2/images.py | 14 +- glanceclient/v2/metadefs.py | 18 +- glanceclient/v2/shell.py | 43 ++++- glanceclient/v2/tasks.py | 2 +- 9 files changed, 403 insertions(+), 40 deletions(-)

1 0

python-keystoneclient 5.7.0 (flamingo)
by no-reply＠openstack.org 28 Aug '25

28 Aug '25

We are happy to announce the release of: python-keystoneclient 5.7.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/python-keystoneclient Download the package from: https://pypi.org/project/python-keystoneclient Please report issues through: https://bugs.launchpad.net/python-keystoneclient/+bugs For more details, please see below. 5.7.0 ^^^^^ Upgrade Notes * Support for Python 3.9 has been removed. Now Python 3.10 is the minimum version supported. Changes in python-keystoneclient 5.6.0..5.7.0 --------------------------------------------- be6c5069 Remove Python 3.9 support 18b5f422 Update master for stable/2025.1 851c8856 Update default envlist cf8ce5db reno: Update master for unmaintained/2023.1 Diffstat (except docs and test files) ------------------------------------- releasenotes/notes/remove-py39-a294c2d7335b646e.yaml | 5 +++++ releasenotes/source/2023.1.rst | 2 +- releasenotes/source/2025.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + setup.cfg | 3 +-- tox.ini | 2 +- 6 files changed, 15 insertions(+), 4 deletions(-)

1 0

python-aodhclient 3.9.1 (flamingo)
by no-reply＠openstack.org 28 Aug '25

28 Aug '25

We are excited to announce the release of: python-aodhclient 3.9.1 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/python-aodhclient Download the package from: https://pypi.org/project/python-aodhclient Please report issues through: https://bugs.launchpad.net/python-aodhclient/+bugs For more details, please see below. Changes in python-aodhclient 3.9.0..3.9.1 ----------------------------------------- 89f1235 Replace os-client-config 1db6158 Drop reference to ceilometerclient Diffstat (except docs and test files) ------------------------------------- test-requirements.txt | 2 +- 3 files changed, 6 insertions(+), 13 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 213d060..662e7b7 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1 +0,0 @@ -os-client-config>=1.28.0 # Apache-2.0 @@ -2,0 +2 @@ coverage>=3.6 # Apache-2.0 +openstacksdk>=0.10.0 # Apache-2.0

1 0

python-observabilityclient 1.2.0 (flamingo)
by no-reply＠openstack.org 28 Aug '25

28 Aug '25

We are jazzed to announce the release of: python-observabilityclient 1.2.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/python-observabilityclient Download the package from: https://pypi.org/project/python-observabilityclient Please report issues through: https://bugs.launchpad.net/python-observabilityclient/+bugs For more details, please see below. Changes in python-observabilityclient 1.1.0..1.2.0 -------------------------------------------------- bcadbfe Fix PrometheusAPIClient set_client_cert Diffstat (except docs and test files) ------------------------------------- observabilityclient/prometheus_client.py | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-)

1 0

python-barbicanclient 7.2.0 (flamingo)
by no-reply＠openstack.org 28 Aug '25

28 Aug '25

We exuberantly announce the release of: python-barbicanclient 7.2.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/python-barbicanclient Download the package from: https://tarballs.openstack.org/python-barbicanclient/ Please report issues through: https://bugs.launchpad.net/python-barbicanclient/+bugs For more details, please see below. Changes in python-barbicanclient 7.1.0..7.2.0 --------------------------------------------- 5c53121 Cleanup py27 support Diffstat (except docs and test files) ------------------------------------- setup.py | 9 --------- 1 file changed, 9 deletions(-)

1 0

mistral 18.1.0 (caracal)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We are tickled pink to announce the release of: mistral 18.1.0 This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/mistral Download the package from: https://pypi.org/project/mistral Please report issues through: https://bugs.launchpad.net/mistral/+bugs For more details, please see below. 18.1.0 ^^^^^^ New Features * Added mutually exclusive config options "[action_providers]/allowlist" and "[action_providers]/denylist" that can be used to filter what action providers is loaded. * Added mutually exclusive config options "[legacy_action_provider]/allowlist" and "[legacy_action_provider]/denylist" that can be used to filter what actions is loaded by the legacy action provider. Changes in mistral 18.0.1..18.1.0 --------------------------------- 82c573e2 Support fnmatch glob for allow/deny lists 9a961a83 Add legacy action group to list_opts 985ed5db Add allowlist and denylist for action providers and actions 3c16d9d5 Update TOX_CONSTRAINTS_FILE for stable/2024.1 84354f15 Update .gitreview for stable/2024.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + mistral/actions/legacy.py | 7 ++ mistral/config.py | 46 ++++++++++ mistral/engine/base.py | 6 +- mistral/services/actions.py | 9 ++ .../unit/actions/test_legacy_action_provider.py | 102 +++++++++++++++++++++ mistral/utils/__init__.py | 21 ----- mistral/utils/expr_utils.py | 37 ++++++++ mistral/utils/filter_utils.py | 26 ++++++ ...ctions-allowlist-denylist-57c033279e27772e.yaml | 10 ++ tox.ini | 6 +- 12 files changed, 334 insertions(+), 27 deletions(-)

1 0

mistral 20.1.0 (epoxy)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We are thrilled to announce the release of: mistral 20.1.0 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/mistral Download the package from: https://pypi.org/project/mistral Please report issues through: https://bugs.launchpad.net/mistral/+bugs For more details, please see below. 20.1.0 ^^^^^^ New Features * Added mutually exclusive config options "[action_providers]/allowlist" and "[action_providers]/denylist" that can be used to filter what action providers is loaded. * Added mutually exclusive config options "[legacy_action_provider]/allowlist" and "[legacy_action_provider]/denylist" that can be used to filter what actions is loaded by the legacy action provider. Changes in mistral 20.0.0..20.1.0 --------------------------------- 32e37047 Support fnmatch glob for allow/deny lists 953e5b9a Add legacy action group to list_opts 9e5d9c6b Add allowlist and denylist for action providers and actions 40c63aa8 Update TOX_CONSTRAINTS_FILE for stable/2025.1 dc0b20a5 Update .gitreview for stable/2025.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + mistral/actions/legacy.py | 7 ++ mistral/config.py | 46 ++++++++++ mistral/engine/base.py | 6 +- mistral/services/actions.py | 9 ++ .../unit/actions/test_legacy_action_provider.py | 102 +++++++++++++++++++++ mistral/utils/__init__.py | 22 +---- mistral/utils/expr_utils.py | 37 ++++++++ mistral/utils/filter_utils.py | 26 ++++++ ...ctions-allowlist-denylist-57c033279e27772e.yaml | 10 ++ tox.ini | 2 +- 12 files changed, 333 insertions(+), 25 deletions(-)

1 0

os-ken 3.1.1 (flamingo)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We exuberantly announce the release of: os-ken 3.1.1 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/os-ken Download the package from: https://pypi.org/project/os-ken Please report issues through: https://storyboard.openstack.org/#!/project/openstack/os-ken For more details, please see below. Changes in os-ken 3.1.0..3.1.1 ------------------------------ bf639392 Fixing the BGP loop prevention Diffstat (except docs and test files) ------------------------------------- os_ken/services/protocols/bgp/peer.py | 9 +- 2 files changed, 106 insertions(+), 4 deletions(-)

1 0

os-vif 4.2.1 (flamingo)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We are thrilled to announce the release of: os-vif 4.2.1 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/os-vif Download the package from: https://pypi.org/project/os-vif Please report issues through: https://bugs.launchpad.net/os-vif/+bugs For more details, please see below. Changes in os-vif 4.2.0..4.2.1 ------------------------------ b33415b Zuul: do not use USE_PYTHON3 Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 1 - 1 file changed, 1 deletion(-)

1 0

neutron-lib 3.21.1 (flamingo)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We are excited to announce the release of: neutron-lib 3.21.1 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/neutron-lib Download the package from: https://pypi.org/project/neutron-lib Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. Changes in neutron-lib 3.21.0..3.21.1 ------------------------------------- 791d4b24 Remove url tags from README 63979eb6 tox: Remove basepython and ineffective ignore_basepython_conflict 9b6a1aaf Add the hacking checks to the entry points Diffstat (except docs and test files) ------------------------------------- README.rst | 18 ++++-------------- setup.cfg | 10 ++++++++++ tox.ini | 2 -- 3 files changed, 14 insertions(+), 16 deletions(-)

1 0

oslo.upgradecheck 2.6.0 (flamingo)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We are pumped to announce the release of: oslo.upgradecheck 2.6.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/oslo.upgradecheck Download the package from: https://pypi.org/project/oslo.upgradecheck Please report issues through: https://bugs.launchpad.net/oslo.upgradecheck/+bugs For more details, please see below. Changes in oslo.upgradecheck 2.5.0..2.6.0 ----------------------------------------- f7dcd0c add pyproject.toml to support pip 23.1 a9a8b2c Update master for stable/2025.1 Diffstat (except docs and test files) ------------------------------------- pyproject.toml | 3 +++ releasenotes/source/2025.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + 3 files changed, 10 insertions(+)

1 0

ovsdbapp 2.13.0 (flamingo)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We are chuffed to announce the release of: ovsdbapp 2.13.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/ovsdbapp Download the package from: https://tarballs.openstack.org/ovsdbapp/ Please report issues through: https://bugs.launchpad.net/ovsdbapp/+bugs For more details, please see below. Changes in ovsdbapp 2.12.0..2.13.0 ---------------------------------- d518d76 Unpin isort cf5b6d0 Drop explicit dependency on python-subunit d84c82e nb: add support for chains in logical router policies Diffstat (except docs and test files) ------------------------------------- ovsdbapp/backend/ovs_idl/idlutils.py | 26 ++++ ovsdbapp/constants.py | 6 +- ovsdbapp/schema/ovn_northbound/commands.py | 42 +++++-- ovsdbapp/schema/ovn_northbound/impl_idl.py | 14 ++- .../schema/ovn_northbound/test_impl_idl.py | 135 +++++++++++++++++++++ test-requirements.txt | 2 - 6 files changed, 209 insertions(+), 16 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 4b6c133..15f94b7 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -2,2 +1,0 @@ coverage!=4.4,>=4.0 # Apache-2.0 -isort==4.3.21 # MIT -python-subunit>=1.0.0 # Apache-2.0/BSD

1 0

oslo.log 7.2.1 (flamingo)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We are delighted to announce the release of: oslo.log 7.2.1 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/oslo.log Download the package from: https://pypi.org/project/oslo.log Please report issues through: https://bugs.launchpad.net/oslo.log/+bugs For more details, please see below. Changes in oslo.log 7.2.0..7.2.1 -------------------------------- dda3eb6 Imported Translations from Zanata Diffstat (except docs and test files) ------------------------------------- oslo_log/locale/en_GB/LC_MESSAGES/oslo_log.po | 8 ++------ releasenotes/source/locale/en_GB/LC_MESSAGES/releasenotes.po | 10 +++++----- 2 files changed, 7 insertions(+), 11 deletions(-)

1 0

oslo.context 6.1.0 (flamingo)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We high-spiritedly announce the release of: oslo.context 6.1.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/oslo.context Download the package from: https://pypi.org/project/oslo.context Please report issues through: https://bugs.launchpad.net/oslo.context/+bugs For more details, please see below. Changes in oslo.context 6.0.0..6.1.0 ------------------------------------ f23bc41 Add build-system to pyproject.toml Diffstat (except docs and test files) ------------------------------------- pyproject.toml | 4 ++++ 1 file changed, 4 insertions(+)

1 0

stevedore 5.5.0 (flamingo)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We enthusiastically announce the release of: stevedore 5.5.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/stevedore Download the package from: https://pypi.org/project/stevedore Please report issues through: https://bugs.launchpad.net/stevedore/+bugs For more details, please see below. Changes in stevedore 5.4.1..5.5.0 --------------------------------- d279323 add pyproject.toml to support pip 23.1 3731204 tox: Remove basepython 16ee2fd Update master for stable/2025.1 7c2740e Remove explicit pbr dependency Diffstat (except docs and test files) ------------------------------------- pyproject.toml | 3 +++ releasenotes/source/2025.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + requirements.txt | 2 -- setup.py | 1 - tox.ini | 2 -- 6 files changed, 10 insertions(+), 5 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index d988712..bbdc307 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4,2 +3,0 @@ - -pbr>=2.0.0 # Apache-2.0

1 0

oslo.cache 3.12.0 (flamingo)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We are chuffed to announce the release of: oslo.cache 3.12.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/oslo.cache Download the package from: https://pypi.org/project/oslo.cache Please report issues through: https://bugs.launchpad.net/oslo.cache/+bugs For more details, please see below. Changes in oslo.cache 3.11.0..3.12.0 ------------------------------------ 1683ddb Imported Translations from Zanata 0ab5e0a Drop unused script for etcd tests 4727fe4 add pyproject.toml to support pip 23.1 ed02757 Fix missing ':' in IPv6 example Diffstat (except docs and test files) ------------------------------------- oslo_cache/_opts.py | 2 +- oslo_cache/locale/en_GB/LC_MESSAGES/oslo_cache.po | 7 +---- oslo_cache/locale/ru/LC_MESSAGES/oslo_cache.po | 10 ++++---- pyproject.toml | 3 +++ tools/setup-etcd-env.sh | 31 ----------------------- 5 files changed, 10 insertions(+), 43 deletions(-)

1 0

glance_store 5.2.0 (flamingo)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We contentedly announce the release of: glance_store 5.2.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/glance_store Download the package from: https://pypi.org/project/glance_store For more details, please see below. 5.2.0 ^^^^^ New Features ************ * Support setting "s3_store_large_object_size" to "0" to force multipart upload when "image_size" is unknown. Bug Fixes ********* * Bug #2043740 (https://bugs.launchpad.net/glance- store/+bug/2043740): "s3_store_large_object_size" can be set to "0" to force multipart upload when creating an image in the S3 backend from a Cinder volume. Changes in glance_store 5.1.0..5.2.0 ------------------------------------ e63e0e4 Support multipart upload when image_size == 0 Diffstat (except docs and test files) ------------------------------------- glance_store/_drivers/s3.py | 5 ++++- .../s3-store-large-object-size-zero-a24229ae6955b799.yaml | 10 ++++++++++ 2 files changed, 14 insertions(+), 1 deletion(-)

1 0

kuryr 3.3.0 (flamingo)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We eagerly announce the release of: kuryr 3.3.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/kuryr Download the package from: https://tarballs.openstack.org/kuryr/ Please report issues through: https://bugs.launchpad.net/kuryr/+bugs For more details, please see below. Changes in kuryr 3.2.0..3.3.0 ----------------------------- 78acf16 Update master for stable/2025.1 Diffstat (except docs and test files) ------------------------------------- releasenotes/source/2025.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + 2 files changed, 7 insertions(+)

1 0

oslo.policy 4.6.0 (flamingo)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We are happy to announce the release of: oslo.policy 4.6.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/oslo.policy Download the package from: https://pypi.org/project/oslo.policy Please report issues through: https://bugs.launchpad.net/oslo.policy/+bugs For more details, please see below. Changes in oslo.policy 4.5.1..4.6.0 ----------------------------------- fc28a7b add pyproject.toml to support pip 23.1 0ab8cb7 tox: Remove basepython 4d59bcd Skip cross jobs for .gitreview update 54e746a Update master for stable/2025.1 Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 1 + pyproject.toml | 3 +++ releasenotes/source/2025.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + tox.ini | 2 -- 5 files changed, 11 insertions(+), 2 deletions(-)

1 0

oslo.concurrency 7.2.0 (flamingo)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We are excited to announce the release of: oslo.concurrency 7.2.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/oslo.concurrency Download the package from: https://pypi.org/project/oslo.concurrency Please report issues through: https://bugs.launchpad.net/oslo.concurrency/+bugs For more details, please see below. Changes in oslo.concurrency 7.1.0..7.2.0 ---------------------------------------- 08987d8 add pyproject.toml to support pip 23.1 71698aa Update master for stable/2025.1 47874c4 Use releases.openstack.org instead of opendev.org Diffstat (except docs and test files) ------------------------------------- pyproject.toml | 3 +++ releasenotes/source/2025.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + tox.ini | 2 +- 4 files changed, 11 insertions(+), 1 deletion(-)

1 0

os-brick 6.13.0 (flamingo)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We joyfully announce the release of: os-brick 6.13.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/os-brick Download the package from: https://pypi.org/project/os-brick Please report issues through: https://bugs.launchpad.net/os-brick/+bugs For more details, please see below. 6.13.0 ^^^^^^ Upgrade Notes ************* * With the fix for Bug #2114879 (https://bugs.launchpad.net/cinder/+bug/2114879) users do not need to create the */opt/emc/scaleio/openstack/connector.conf* file on the hosts using "os-brick". Meanwhile, this version of "os-brick" is compatible with Dell PowerFlex cinder driver using the legacy password-in-host-file strategy. * Support for Python 3.9 has been removed. Now Python 3.10 is the minimum version supported. Security Issues *************** * Dell PowerFlex driver: This release contains a fix for Bug #2114879 (https://bugs.launchpad.net/cinder/+bug/2114879) It removes the limitation of use with bare metal hosts mentioned in OSSN-0086 (https://wiki.openstack.org/wiki/OSSN/OSSN-0086) Bug Fixes ********* * Dell PowerFlex driver Bug #2114879 (https://bugs.launchpad.net/cinder/+bug/2114879) This release contains an updated connector for use with Dell PowerFlex backend. "os-brick" no longer requires access to PowerFlex backend secrets, and all that is handled by the cinder driver now. * RBD connector bug #2121082 (https://bugs.launchpad.net/cinder/+bug/2121082) Pass all monitor hosts in a single parameter. Prior to this fix, only the last monitor was considered which could cause connection failures if that one monitor was inaccessible. Changes in os-brick 6.12.0..6.13.0 ---------------------------------- 84cd5c6 Add missing release note 649cf90 Dell PowerFlex: Improve secret handling 0595163 Drop redundant description of default values 0a5a387 iSCSI: Add debug log for WWN and multipath 577a88f Remove Python 3.9 support 6f03ec8 Allow extend_volume for local devices e0460de Remove usage of the "VIRTUAL_ENV" environment variable 5832f18 Use oslo.utils to strip scope from an IPv6 address 7a015ee Switch back to built-in md5 method cc73a66 Fix outdated notes in requirement files a8277b0 RBD: Pass all monitor hosts in a single parameter Diffstat (except docs and test files) ------------------------------------- os_brick/initiator/connectors/base_rbd.py | 3 +- os_brick/initiator/connectors/iscsi.py | 2 + os_brick/initiator/connectors/lightos.py | 5 +- os_brick/initiator/connectors/local.py | 5 +- os_brick/initiator/connectors/scaleio.py | 74 ++++++++++++++++------ os_brick/opts.py | 5 +- os_brick/privileged/__init__.py | 10 +-- os_brick/remotefs/remotefs.py | 5 +- ...x-improve-secret-handling-c468d66b58a9626d.yaml | 23 +++++++ .../notes/bug-2121082-ae51de14b3c243fe.yaml | 8 +++ .../notes/remove-py39-1df77515becc0d51.yaml | 5 ++ requirements.txt | 8 +-- setup.cfg | 3 +- test-requirements.txt | 4 -- 20 files changed, 161 insertions(+), 67 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 9a636e9..338eaab 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,3 +1,3 @@ -# The order of packages is significant, because pip processes them in the order -# of appearance. Changing the order has an impact on the overall integration -# process, which may cause wedges in the gate later. +# Requirements lower bounds listed here are our best effort to keep them up to +# date but we do not test them so no guarantee of having them all correct. If +# you find any incorrect lower bounds, let us know or propose a fix. @@ -14 +14 @@ oslo.service>=2.8.0 # Apache-2.0 -oslo.utils>=6.0.0 # Apache-2.0 +oslo.utils>=7.3.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index f906c69..97e09bd 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,4 +0,0 @@ -# The order of packages is significant, because pip processes them in the order -# of appearance. Changing the order has an impact on the overall integration -# process, which may cause wedges in the gate later. -

1 0

oslo.rootwrap 7.7.0 (flamingo)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We joyfully announce the release of: oslo.rootwrap 7.7.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/oslo.rootwrap Download the package from: https://pypi.org/project/oslo.rootwrap Please report issues through: https://bugs.launchpad.net/oslo.rootwrap/+bugs For more details, please see below. Changes in oslo.rootwrap 7.6.0..7.7.0 ------------------------------------- 0cb36cd add pyproject.toml to support pip 23.1 Diffstat (except docs and test files) ------------------------------------- pyproject.toml | 3 +++ 1 file changed, 3 insertions(+)

1 0

taskflow 6.0.2 (flamingo)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We are amped to announce the release of: taskflow 6.0.2 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/taskflow Download the package from: https://pypi.org/project/taskflow Please report issues through: https://bugs.launchpad.net/taskflow/+bugs For more details, please see below. Changes in taskflow 6.0.1..6.0.2 -------------------------------- 1a744a78 Bump etcd to 3.5.x c8899090 Allow overriding etcd version in tests f80b1bfb fix(conductor): add stop and wait methods to base Diffstat (except docs and test files) ------------------------------------- setup-etcd-env.sh | 2 +- taskflow/conductors/backends/impl_executor.py | 26 ++++++++------------------ taskflow/conductors/base.py | 24 ++++++++++++++++++++++++ tox.ini | 2 ++ 4 files changed, 35 insertions(+), 19 deletions(-)

1 0

oslo.serialization 5.8.0 (flamingo)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We are amped to announce the release of: oslo.serialization 5.8.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/oslo.serialization Download the package from: https://pypi.org/project/oslo.serialization Please report issues through: https://bugs.launchpad.net/oslo.serialization/+bugs For more details, please see below. Changes in oslo.serialization 5.7.0..5.8.0 ------------------------------------------ 8ed3fca add pyproject.toml to support pip 23.1 2bd106c Update master for stable/2025.1 Diffstat (except docs and test files) ------------------------------------- pyproject.toml | 3 +++ releasenotes/source/2025.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + 3 files changed, 10 insertions(+)

1 0

oslo.i18n 6.6.0 (flamingo)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We are overjoyed to announce the release of: oslo.i18n 6.6.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/oslo.i18n Download the package from: https://pypi.org/project/oslo.i18n Please report issues through: https://bugs.launchpad.net/oslo.i18n/+bugs For more details, please see below. Changes in oslo.i18n 6.5.1..6.6.0 --------------------------------- 303fcac add pyproject.toml to support pip 23.1 5fed9a3 Remove test code to be used in Python 2.7 44e0cb0 Update master for stable/2025.1 Diffstat (except docs and test files) ------------------------------------- pyproject.toml | 3 +++ releasenotes/source/2025.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + 4 files changed, 12 insertions(+), 8 deletions(-)

1 0

oslo.reports 3.6.0 (flamingo)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We are chuffed to announce the release of: oslo.reports 3.6.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/oslo.reports Download the package from: https://pypi.org/project/oslo.reports Please report issues through: https://bugs.launchpad.net/oslo.reports/+bugs For more details, please see below. Changes in oslo.reports 3.5.1..3.6.0 ------------------------------------ b8904f1 add pyproject.toml to support pip 23.1 172df1f tox: Remove basepython 43a3a27 Update master for stable/2025.1 Diffstat (except docs and test files) ------------------------------------- pyproject.toml | 3 +++ releasenotes/source/2025.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + tox.ini | 2 -- 4 files changed, 10 insertions(+), 2 deletions(-)

1 0

oslo.versionedobjects 3.8.0 (flamingo)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We are pumped to announce the release of: oslo.versionedobjects 3.8.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/oslo.versionedobjects Download the package from: https://pypi.org/project/oslo.versionedobjects Please report issues through: https://bugs.launchpad.net/oslo.versionedobjects/+bugs For more details, please see below. Changes in oslo.versionedobjects 3.7.0..3.8.0 --------------------------------------------- 5c2d02e add pyproject.toml to support pip 23.1 Diffstat (except docs and test files) ------------------------------------- pyproject.toml | 3 +++ 1 file changed, 3 insertions(+)

1 0

oslo.utils 9.1.0 (flamingo)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We are stoked to announce the release of: oslo.utils 9.1.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/oslo.utils Download the package from: https://pypi.org/project/oslo.utils Please report issues through: https://bugs.launchpad.net/oslo.utils/+bugs For more details, please see below. Changes in oslo.utils 9.0.0..9.1.0 ---------------------------------- c9dd062 add pyproject.toml to support pip 23.1 Diffstat (except docs and test files) ------------------------------------- pyproject.toml | 3 +++ 1 file changed, 3 insertions(+)

1 0

oslo.metrics 0.13.0 (flamingo)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We are delighted to announce the release of: oslo.metrics 0.13.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/oslo.metrics Download the package from: https://pypi.org/project/oslo.metrics Please report issues through: https://bugs.launchpad.net/oslo.metrics/+bugs For more details, please see below. Changes in oslo.metrics 0.12.0..0.13.0 -------------------------------------- 276d34d add pyproject.toml to support pip 23.1 Diffstat (except docs and test files) ------------------------------------- pyproject.toml | 3 +++ 1 file changed, 3 insertions(+)

1 0

oslo.privsep 3.8.0 (flamingo)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We enthusiastically announce the release of: oslo.privsep 3.8.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/oslo.privsep Download the package from: https://pypi.org/project/oslo.privsep Please report issues through: https://bugs.launchpad.net/oslo.privsep/+bugs For more details, please see below. Changes in oslo.privsep 3.7.0..3.8.0 ------------------------------------ c343be9 Restore compatibility with non-linux operating systems 699b3ca Imported Translations from Zanata d4b560f add pyproject.toml to support pip 23.1 Diffstat (except docs and test files) ------------------------------------- oslo_privsep/capabilities.py | 16 ++++++++++++---- oslo_privsep/daemon.py | 9 ++++++--- oslo_privsep/locale/en_GB/LC_MESSAGES/oslo_privsep.po | 10 +++++----- pyproject.toml | 3 +++ 6 files changed, 47 insertions(+), 12 deletions(-)

1 0

nova 29.3.0 (caracal)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We are psyched to announce the release of: nova 29.3.0 This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/nova Download the package from: https://tarballs.openstack.org/nova/ Please report issues through: https://bugs.launchpad.net/nova/+bugs For more details, please see below. 29.3.0 ^^^^^^ Security Issues *************** * Nova has documented that the "update volume attachment" API PUT /servers/{server_id}/os-volume_attachments/{volume_id} should not be called directly for a very long time. "When updating volumeId, this API is typically meant to only be used as part of a larger orchestrated volume migration operation initiated in the block storage service via the os-retype or os- migrate_volume volume actions. Direct usage of this API to update volumeId is not recommended and may result in needing to hard reboot the server to update details within the guest such as block storage serial IDs. Furthermore, updating volumeId via this API is only implemented by certain compute drivers." As an admin only api, direct usage has always been limited to admins or service like "watcher". This longstanding recommendation is now enforced as a security hardening measure and restricted to only cinder. The prior warning alluded to the fact that directly using this api can result in a guest with a de-synced definition of the volume serial. Before this change it was possible for an admin to unknowingly put a VM in an inconsistent state such that a future live migration may fail or succeed and break tenant isolation. This could not happen when the api was called by cinder so Nova has restricted that api exclusively to that use-case. see: https://bugs.launchpad.net/nova/+bug/2112187 for details. Bug Fixes ********* * Bug #2095364: Fixed the List Server API and the List Server Detail API 500 Internal Server Error issue in v2.96 or later API microversion if one or more instance has no request spec object. One usecase was when cloud user tried to create instance which exceeded their quota, the request does not create instance request spec. Once the no request spec instance is created in cloud user project, the server list API and the list server details API return 500 Internal Server Error for the project until the cloud user deletes the no request spec object instance. After this fix, the v2.96 or later returns *null* at the *pinned_availability_zone* value if not specified. (https://launchpad.net/bugs/2095364) * "Nova" now strictly enforces that only "cinder" can call the "update volume attachment" aka "swap volume" api. This is part of addressing a security hardening gap identified as part of bug: https://bugs.launchpad.net/nova/+bug/2112187 Changes in nova 29.2.2..29.3.0 ------------------------------ 5a92bb594f restrict swap volume to cinder 64594ec320 Use dict object for request_specs_dict in the _list_view ea00e28452 Add ServersViewBuilderTestV296 unit test class Diffstat (except docs and test files) ------------------------------------- api-ref/source/os-volume-attachments.inc | 20 ++-- api-ref/source/parameters.yaml | 1 + nova/api/openstack/compute/views/servers.py | 25 +++-- nova/api/openstack/compute/volumes.py | 6 + .../functional/regressions/test_bug_1943431.py | 49 ++------- .../functional/regressions/test_bug_2112187.py | 67 ++++++++++++ .../unit/api/openstack/compute/test_servers.py | 121 +++++++++++++++++++++ .../unit/api/openstack/compute/test_volumes.py | 81 +++++++++----- .../notes/bug-2095364-ffbf67c0ae3f53b5.yaml | 15 +++ .../notes/bug-2112187-e1c1d40f090e421b.yaml | 36 ++++++ 13 files changed, 367 insertions(+), 98 deletions(-)

1 0

nova 30.1.0 (dalmatian)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We joyfully announce the release of: nova 30.1.0 This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/nova Download the package from: https://tarballs.openstack.org/nova/ Please report issues through: https://bugs.launchpad.net/nova/+bugs For more details, please see below. 30.1.0 ^^^^^^ Security Issues *************** * Nova has documented that the "update volume attachment" API PUT /servers/{server_id}/os-volume_attachments/{volume_id} should not be called directly for a very long time. "When updating volumeId, this API is typically meant to only be used as part of a larger orchestrated volume migration operation initiated in the block storage service via the os-retype or os- migrate_volume volume actions. Direct usage of this API to update volumeId is not recommended and may result in needing to hard reboot the server to update details within the guest such as block storage serial IDs. Furthermore, updating volumeId via this API is only implemented by certain compute drivers." As an admin only api, direct usage has always been limited to admins or service like "watcher". This longstanding recommendation is now enforced as a security hardening measure and restricted to only cinder. The prior warning alluded to the fact that directly using this api can result in a guest with a de-synced definition of the volume serial. Before this change it was possible for an admin to unknowingly put a VM in an inconsistent state such that a future live migration may fail or succeed and break tenant isolation. This could not happen when the api was called by cinder so Nova has restricted that api exclusively to that use-case. see: https://bugs.launchpad.net/nova/+bug/2112187 for details. Bug Fixes ********* * Fixes an issue seen when using bare metal (Ironic) instances where an instance could fail to delete. See Bug 2019977 for more details. (https://bugs.launchpad.net/nova/+bug/2019977) * During the Caracal cycle the libvirt driver was enhanced to support using device aliases to detach devices from a domain. I1dfe4ad3df81bc810835af9b09cfc6c06e9a5388 This introduced a regression for instance with vgpus. A prior bugfix https://bugs.launchpad.net/nova/+bug/1942345 addressed the symptom without correcting the underlying problem. A related bug for mdev devices was later reported. https://bugs.launchpad.net/nova/+bug/2074219 When this feature was added nova introduced a helper method to get device via the alias because the libvirt api does not provide one natively. That helper function assumed all devices would have an alias attribute. That assumption was not valid and had now been corrected. As a result detaching a volume from an instance with vgpus should now be possible and this class of bug should no longer happen. * Fixed an issue where the instance rebuild option failed for Ironic instances. The problem was caused by an incorrect parameter order in the "add_instance_info_to_node" function, which was introduced by commit *93b90d2b* <https://review.opendev.org/c/openstack/nova/+/923910>. For more details, see *bug 2092570* <https://bugs.launchpad.net/nova/+bug/2092570>. * Bug #2095364: Fixed the List Server API and the List Server Detail API 500 Internal Server Error issue in v2.96 or later API microversion if one or more instance has no request spec object. One usecase was when cloud user tried to create instance which exceeded their quota, the request does not create instance request spec. Once the no request spec instance is created in cloud user project, the server list API and the list server details API return 500 Internal Server Error for the project until the cloud user deletes the no request spec object instance. After this fix, the v2.96 or later returns *null* at the *pinned_availability_zone* value if not specified. (https://launchpad.net/bugs/2095364) * "Nova" now strictly enforces that only "cinder" can call the "update volume attachment" aka "swap volume" api. This is part of addressing a security hardening gap identified as part of bug: https://bugs.launchpad.net/nova/+bug/2112187 * Nova now allows to use a hyphen in the "[cinder]catalog_info" service-type field, so in particular the official "block-storage" type is now valid. Bug 2092194 (https://bugs.launchpad.net/nova/+bug/2092194) * Fix displaying the reason messages from the Ironic validate node operation that is called just before the instance is deployed on the bare metal node. The message from Ironic is now correctly logged. Fixes *bug 2100009 <https://bugs.launchpad.net/nova/+bug/2100009>_*. * When live migration fails during pre_live_migration on the destination, during rollback Cinder volumes will now be disconnected from the destination locally instead of remotely over RPC from the source. This should ensure that only connection_info for the destination will be used to disconnect volumes from the destination. See bug #1899835 (https://bugs.launchpad.net/nova/+bug/1899835) for more details. * With this change, operators can now resize the instance flavor swap to a smaller swap size, it can be expand and shrunk down to 0 using the same resize API. For more details see: bug 1552777 (https://bugs.launchpad.net/nova/+bug/1552777) * Bug #2091033: Fixed calls to libvirt "listDevices()" and "listAllDevices()" from potentially blocking all other greenthreads in "nova-compute". Under certain circumstances, it was possible for the "nova-compute" service to freeze with all other greenthreads blocked and unable to perform any other activities including logging. This issue has been fixed by wrapping the libvirt "listDevices()" and "listAllDevices()" calls with "eventlet.tpool.Proxy". (https://bugs.launchpad.net/nova/+bug/2091033) Changes in nova 30.0.0..30.1.0 ------------------------------ 6fcc9e2dd9 restrict swap volume to cinder 574c19ab8b Use dict object for request_specs_dict in the _list_view 706642bde3 Add ServersViewBuilderTestV296 unit test class 5b10871e21 Fix detaching devices by alias with mdevs 7e7652f433 Add repoducer test for bug 2074219 88e49dd65c [tool] Fix backport validator for non-SLURP 4cb106fc71 live migration: Avoid volume rollback mismatches e05052a3ff Amend functional reproducer for bug 1899835 89c9a9cab4 Libvirt: updates resource provider trait list 50e97805ae ironic: fix logging of validation errors 137097dc93 Allow hyphen in cinder catalog_info service-type 4a17d63535 Fix parameter order in add_instance_info_to_node a8de6737d2 Fix device type when booting from ISO image c4f4ae784f libvirt: Fix regression of listDevices() return type 173defb64c Reproducer for bug 2098892 c008126257 Update InstanceNUMACell version in more cases 7ff108b5fb Update InstanceNUMACell version after data migration 82b5bd6a7e Reproduce bug/2097359 1b28f649fe ironic: Fix ConflictException when deleting server 22981123dc libvirt: Wrap un-proxied listDevices() and listAllDevices() 3d3ada4bce Update Nova bdm with updated swap info 684586f3cb Revert "[libvirt] Live migration fails when config_drive_format=iso9660" 89c07d7353 Route shared storage RPC to evac dest at startup 19c7a6e392 Reproduce bug 2085975 in functional 2dce2e277b [doc]Add `socket` option to [pci]alias numa_policy 59d6cb3b49 Revert "Test live migration between hosts with differnet cpu_shared_sets" ea0f46f80d [doc]Fix the device_spec config doc about placement bef7768ee5 Update TOX_CONSTRAINTS_FILE for stable/2024.2 59a44217e6 Update .gitreview for stable/2024.2 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 23 -- api-ref/source/os-volume-attachments.inc | 20 +- api-ref/source/parameters.yaml | 1 + nova/api/openstack/compute/views/servers.py | 25 +- nova/api/openstack/compute/volumes.py | 6 + nova/compute/manager.py | 156 ++++++--- nova/conf/cinder.py | 2 +- nova/conf/pci.py | 7 +- nova/objects/instance_numa.py | 75 ++++- nova/test.py | 11 +- .../functional/regressions/test_bug_1899835.py | 125 +++++++- .../functional/regressions/test_bug_1943431.py | 49 +-- .../functional/regressions/test_bug_2062425.py | 22 +- .../functional/regressions/test_bug_2074219.py | 66 ++++ .../functional/regressions/test_bug_2085975.py | 131 ++++++++ .../functional/regressions/test_bug_2098892.py | 52 +++ .../functional/regressions/test_bug_2112187.py | 67 ++++ .../unit/api/openstack/compute/test_servers.py | 121 +++++++ .../unit/api/openstack/compute/test_volumes.py | 81 +++-- nova/virt/ironic/driver.py | 48 +-- nova/virt/libvirt/blockinfo.py | 32 +- nova/virt/libvirt/driver.py | 37 ++- nova/virt/libvirt/guest.py | 2 +- nova/virt/libvirt/host.py | 21 +- .../notes/bug-2019977-4afe7658394130b8.yaml | 7 + .../notes/bug-2074219-937d6404c1cbb04c.yaml | 17 + ...rameter-order-in-add_instance_info_to_node.yaml | 7 + .../notes/bug-2095364-ffbf67c0ae3f53b5.yaml | 15 + .../notes/bug-2112187-e1c1d40f090e421b.yaml | 36 +++ ...inder-catalog-info-hyphen-842f02febcfff041.yaml | 7 + ...nic-validate-node-message-6a8b1eedbddd06fd.yaml | 7 + ...e-live-migration-rollback-7de399d9b3979f79.yaml | 9 + .../notes/resize-swap-size-1e15e67c436f4b95.yaml | 10 + ...xied-libvirt-list-devices-7cd218c1a33535c9.yaml | 11 + tools/check-cherry-picks.sh | 7 +- tox.ini | 2 +- 52 files changed, 1790 insertions(+), 440 deletions(-)

1 0

nova 31.1.0 (epoxy)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We are ecstatic to announce the release of: nova 31.1.0 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/nova Download the package from: https://tarballs.openstack.org/nova/ Please report issues through: https://bugs.launchpad.net/nova/+bugs For more details, please see below. 31.1.0 ^^^^^^ Security Issues *************** * Nova has documented that the "update volume attachment" API PUT /servers/{server_id}/os-volume_attachments/{volume_id} should not be called directly for a very long time. "When updating volumeId, this API is typically meant to only be used as part of a larger orchestrated volume migration operation initiated in the block storage service via the os-retype or os- migrate_volume volume actions. Direct usage of this API to update volumeId is not recommended and may result in needing to hard reboot the server to update details within the guest such as block storage serial IDs. Furthermore, updating volumeId via this API is only implemented by certain compute drivers." As an admin only api, direct usage has always been limited to admins or service like "watcher". This longstanding recommendation is now enforced as a security hardening measure and restricted to only cinder. The prior warning alluded to the fact that directly using this api can result in a guest with a de-synced definition of the volume serial. Before this change it was possible for an admin to unknowingly put a VM in an inconsistent state such that a future live migration may fail or succeed and break tenant isolation. This could not happen when the api was called by cinder so Nova has restricted that api exclusively to that use-case. see: https://bugs.launchpad.net/nova/+bug/2112187 for details. Bug Fixes ********* * Fixed the issue bug 2098496 where nova assigned more PCI hostdevs to a VM than the flavor requested via the pci_passthrough:alias extra_spec. This only affected systems where both "[filter_scheduler]pci_in_placement" and "[pci]report_in_placement" were set to True. This only affected systems where the PCI alias requested type-VF devices and a single PF device on the compute node supported more than one VFs and "[pci]device_spec" configuration allowed nova to use multiple VFs from a single PF. * "Nova" now strictly enforces that only "cinder" can call the "update volume attachment" aka "swap volume" api. This is part of addressing a security hardening gap identified as part of bug: https://bugs.launchpad.net/nova/+bug/2112187 Changes in nova 31.0.1..31.1.0 ------------------------------ 76fe0294ff restrict swap volume to cinder 72cbe56a03 Ignore metadata tags in pci/stats _find_pool logic Diffstat (except docs and test files) ------------------------------------- api-ref/source/os-volume-attachments.inc | 20 ++-- nova/api/openstack/compute/volumes.py | 6 ++ nova/pci/stats.py | 47 +++++++++ .../functional/regressions/test_bug_1943431.py | 49 ++------- .../functional/regressions/test_bug_2098496.py | 64 ++---------- .../functional/regressions/test_bug_2112187.py | 67 ++++++++++++ .../unit/api/openstack/compute/test_volumes.py | 81 +++++++++------ ...i-hostdevs-than-requested-0139018213f1be96.yaml | 12 +++ .../notes/bug-2112187-e1c1d40f090e421b.yaml | 36 +++++++ 13 files changed, 394 insertions(+), 144 deletions(-)

1 0

governance 0.19.0
by no-reply＠openstack.org 22 Aug '25

22 Aug '25

We are tickled pink to announce the release of: governance 0.19.0 The source is available from: https://opendev.org/openstack/governance Download the package from: https://tarballs.openstack.org/governance/ For more details, please see below. Changes in governance 0.18.0..0.19.0 ------------------------------------ fd2c5832 Freezer - remove information about Disaster Recovery a9c79bf0 Add Extra ACs for governance repositories c3b92ba5 Define "affiliation" within the context of the TC 05524bea Add series names to runtimes doc 4947f4ed Retire networking-midonet 23dcf285 Fix project_stats_check script 981727b3 Make Eventlet removal deadlines more acceptable for operators 8ae1e276 Deprecate shade, os-client-config bb77d2e9 os-test-images never releases 4974083e Fix typo in tested runtimes for 2024.1 1df1f2f5 Remove mentions to CLA in licensing guide 3ab54b61 Add nova-contrib repository 686fc81f Fix outdated info on the tc-guide 40fb2ae8 [resolution] Replace CLA with DCO for all contributions 4a2644f0 Clarify actions when no elections are required dbdca7da [resolution] Relinquish "quantum" project on PyPI 19a94c49 fix prettytable deprecation warning 08b93a18 Updating Ghanshyam email/irc name ed0a9fff Fix gmaan's email address c8377a22 Add openstack/grian-ui 33b93b80 [resolution] Extend scope of VMT to cover all project teams 7beee792 Deprecate openstack-ansible-tests repo 2cf12be5 Retire openstack-helm-infra repo f46bfa92 Fix Dan Smith's email 02f510b4 Add aetos to telemetry project 41c38cb1 Fix nova PTL irc nick 5f7f98da Mark CI migration to Ubuntu Noble goal complete b940b224 Fix links to chair responsibilities in TC Guide 8c0688ff Add separate freezer-api deliverable 2729f9ad Add 2025.2 TC chair and vice-chair b6dca22c Appoint Hao Wang as PTL for OpenStack Zaqar 3e902282 Appoint Felipe Reyes as PTL for OpenStack Charms bc15bea5 Add suzhengwei as PTL for Masakari d2d1806d Add gouthamr's nomination for 2025.2 TC chair 772b572e Add TC chair nomination folder for 2025.2 2f6c4643 Appoint Mauricio Harley as PTL for Barbican 929a58dd Switch back Oslo to DPL model 7c887722 Add TC/PTL results from 2025.2 election da6c4631 Add Extra-ACs to the tech committee repos faf1c53d Deprecate ironic-lib 4364d4bd Switch Ironic to Distributed Leadership d7cbd2e0 Cleanup policy popup leads list Diffstat (except docs and test files) ------------------------------------- goals/completed/2025.1/index.rst | 9 + .../2025.1}/migrate-ci-jobs-to-ubuntu-noble.rst | 0 goals/selected/remove-eventlet.rst | 15 +- reference/charter.rst | 41 ++++- reference/legacy.yaml | 8 + reference/licensing.rst | 24 ++- reference/members.yaml | 28 +-- reference/popup-teams.rst | 5 +- reference/projects.yaml | 205 +++++++++++++-------- reference/runtimes/2023.1.rst | 6 +- reference/runtimes/2023.2.rst | 6 +- reference/runtimes/2024.1.rst | 8 +- reference/runtimes/2024.2.rst | 6 +- reference/runtimes/2025.1.rst | 6 +- reference/runtimes/2025.2.rst | 6 +- reference/tc-chair-candidates/2025.2/.placeholder | 0 .../2025.2/gouthampravi(a)gmail.com | 16 ++ reference/tc-chair-responsibilities.rst | 5 +- reference/tc-guide.rst | 31 ++-- reference/technical-committee-repos.yaml | 11 ++ ...0250317-extend-scope-VMT-cover-all-projects.rst | 67 +++++++ ...20250514-relinquish-quantum-project-on-pypi.rst | 36 ++++ ...lace-the-cla-with-dco-for-all-contributions.rst | 61 ++++++ tools/check_review_status.py | 2 +- tools/project_stats_check.py | 2 +- 25 files changed, 455 insertions(+), 149 deletions(-)

1 0

oslo.db 15.0.1 (caracal)
by no-reply＠openstack.org 21 Aug '25

21 Aug '25

We are excited to announce the release of: oslo.db 15.0.1 This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/oslo.db Download the package from: https://pypi.org/project/oslo.db Please report issues through: https://bugs.launchpad.net/oslo.db/+bugs For more details, please see below. Changes in oslo.db 15.0.0..15.0.1 --------------------------------- 3a31478 exc_filters: Handle OperationalError for MariaDB/Galera 72604f8 Update TOX_CONSTRAINTS_FILE for stable/2024.1 abcd7eb Update .gitreview for stable/2024.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + oslo_db/sqlalchemy/exc_filters.py | 2 ++ tox.ini | 4 ++-- 4 files changed, 11 insertions(+), 2 deletions(-)

1 0