May 2026 - Release-announce - lists.openstack.org

ironic 29.0.5 (epoxy)
by no-reply＠openstack.org 06 May '26

06 May '26

We are jazzed to announce the release of: ironic 29.0.5 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through: https://bugs.launchpad.net/ironic/+bugs For more details, please see below. 29.0.5 ^^^^^^ Bug Fixes ********* * [Bug 2135265 (https://bugs.launchpad.net/ironic/+bug/2135265) Fixes an issue where an exception in one of the inspection hooks when using the agent inspector interface would result in the node not being cleaned up. * Performance of Basic HTTP authentication has been improved by keeping a memory cache of bcrypt password checks. This improves the performance of Ironic conductor with JSON-RPC, and API access when using Basic HTTP authentication. * Ensure that the path to where we are copying the bootloader exists before attempting to copy the bootloader in. * Fixes a race condition where the Redfish power interface could fail with HTTP 400 (BadRequest) or HTTP 409 (Conflict) errors during power operations. These errors are now treated as success when the node is already in the target power state (either on or off), preventing deployment failures when power state changes complete after Ironic's state verification times out. Also refresh system state to get current power state from BMC instead of using potentially stale cached data. * Fixes an issue where console command passed to *socat*'s *EXEC:* was not quoted which could have security implications. * Fixes a security issue where the deprecated configuration molds feature would allow an user invoking molds to request authorization to be sent to a remote endpoint. This user supplied URL could be a "swift" or "http" url. While when used with "http", the feature was explicitly designed around a concept of just publishing to a file in a limited context with authentication details provided by the conductor, where as with "swift" the impact is greater because the time limited session token for Ironic's access of swift resources could be leaked, captured, and used. The configuration molds feature now explicitly checks the swift endpoint URL and raises an exception when the URL does not match the user supplied the configured Swift endpoint. More information can be found in bug 2148317 (https://bugs.launchpad.net/ironic/+bug/2148317) * Fixes an issue where "disable_ramdisk" could bypass API validation when supplied via a runbook because validation happened before runbook resolution. * Fixes an issue with the redfish firmware updates attached to the "management" interface where firmware updates performed as part of the SERVICE steps workflow could end up stuck in "service wait". This issue has been corrected and the nodes should now properly have their state checked. For more information, please consult bug 2136895 (https://bugs.launchpad.net/ironic/+bug/2136895) * Fixed an issue in the Redfish management driver where boot device setting failed for vendors requiring full boot parameter requests (such as American Megatrends International, ASRock Rack, and Redfish compatible systems). The driver was incorrectly using a parameter that could be None, but these vendors require explicit values for all boot parameters. This fix ensures that vendors in "VENDORS_REQUIRING_FULL_BOOT_REQUEST" always receive explicit boot configuration values, resolving boot device configuration failures on affected systems. * Fixes storage of inventory and plugin data in Swift. Previously, the data has not been stored as JSON. This meant that the data was stored in an odd format with part of the fields missing. * The flat network driver now raises "NetworkError" when rebind operations fail to bind any VIFs, instead of silently continuing. This prevents unexpected behavior when all port bindings fail during node rebind. * Extremely large instance images, post eventlet removal, were causing CPU spikes and the conductor process to hang while the image was being fetched and validated. This optimizes the instance fetch and validation in two ways -- first, we now calculate the image checksum while the file is being fetched instead of as a separate step. Secondly, we were, in some cases, using the default chunk size of 128 bytes during downloads. Now, we use a more standard and reasonable value of 1 megabyte. * Avoid an unhandled exception in the local_link_connection inspection hook which would cause inspection to fail instead of skipping past missing ports as originally intended. * Improved Redfish compatibility with ASRock Rack servers by updating how boot mode and boot device settings are applied. Previously, calls to *set_boot_device* and *set_boot_mode* only included minimal parameters (e.g., *BootOverrideTarget* and *BootOverrideMode*), which were insufficient for certain vendor implementations like ASRockRack. This fix updates the Redfish driver to send the full payload, including *BootSourceOverrideEnabled*, *BootSourceOverrideTarget*, *BootSourceOverrideMode*, ensuring better compliance and reliability on these platforms. * Report a better error message than a KeyError when there are no interfaces in the inspection data when running the validate- interfaces inspection hook. Other Notes *********** * Addition of an additional vendor variable for "VENDORS_REQUIRING_FULL_BOOT_REQUEST". This is because there are some recognised vendors, i.e. Lenovo, which use various BMC for their hardware, some of which require a full boot request; in such cases the "vendor" can now be changed to "redfish_compatible". Changes in ironic 29.0.4..29.0.5 -------------------------------- 27f58a0b2 security: validate molds url against swift in keystone catalog 5b2f24187 Shell-quote console command passed to `socat` 72928af47 devstack: Drop dead reference to pyghmi dcbd5c228 Add credential handling into console path f28e2f242 Improve image download performance ba5022f67 ci: Pin `setuptools` to a range that still ships 8798e74e4 Fix async periodic on redfish for servicewait 5a75e09eb Fix Redfish boot device setting for full boot request vendors b16277410 Fix order of `disable_ramdisk` validation e8de78ece fix: report a better error in validate-interfaces 1fd21b19d Adjust url to pull dnsmasq 8d70e05cb fix: agent inspection hooks failure does not clean up ee85a7423 fix: ensure that the bootloader path exists b549589cf Fail flat driver rebind when no VIFs are bound df2897582 Add generic redfish compatible vendor name 0aacd323d Fix : AsRockRack Management via Redfish 97777cdd3 fix: local_link_connection inspection hook does not fail on missing port 7a9c4f30f Fix storing inventory and plugin data in Swift 6781571ae Handle HTTP 400 and 409 race condition in Redfish power operations 9ce8befc4 More RAM for Anaconda job 61ce60cba No admin-set maintenance override on power sync e849dbfc6 Memoize calls to bcrypt.checkpw Diffstat (except docs and test files) ------------------------------------- devstack/lib/ironic | 6 +- ironic/api/controllers/v1/node.py | 3 +- ironic/common/auth_basic.py | 13 +- ironic/common/checksum_utils.py | 7 +- ironic/common/glance_service/image_service.py | 73 +++++++- ironic/common/image_service.py | 85 +++++++++- ironic/common/images.py | 16 +- ironic/common/molds.py | 23 ++- ironic/common/pxe_utils.py | 41 +++-- ironic/conductor/manager.py | 11 +- ironic/drivers/modules/console_utils.py | 25 ++- ironic/drivers/modules/inspect_utils.py | 5 +- ironic/drivers/modules/inspector/agent.py | 13 +- .../inspector/hooks/local_link_connection.py | 6 +- .../modules/inspector/hooks/validate_interfaces.py | 5 + ironic/drivers/modules/ipmitool.py | 56 ++++-- ironic/drivers/modules/network/flat.py | 5 + ironic/drivers/modules/redfish/management.py | 110 +++++++++++- ironic/drivers/modules/redfish/power.py | 41 +++++ .../inspector/hooks/test_local_link_connection.py | 3 +- .../unit/drivers/modules/network/test_flat.py | 15 ++ .../drivers/modules/redfish/test_management.py | 158 +++++++++++++++++ .../unit/drivers/modules/redfish/test_power.py | 187 +++++++++++++++++++++ .../unit/drivers/modules/test_console_utils.py | 82 ++++++++- .../unit/drivers/modules/test_deploy_utils.py | 14 +- .../unit/drivers/modules/test_inspect_utils.py | 7 +- ...spect-hooks-cleanup-error-c8901a7f8ad0dfd3.yaml | 7 + .../notes/bcrypt_cache-d78775ff02f2d970.yaml | 7 + ...bootloader-paths-creation-b5097003f25a18ad.yaml | 5 + .../notes/catch-redfish-409-0819174174245ade.yaml | 11 ++ ...ig-redfish-compatible-bmc-3c54a945a7aa2a7f.yaml | 8 + ...-console-string-arguments-555388ab8dcb8cc3.yaml | 5 + .../notes/fix-bug-2148317-471adcfac69791dc.yaml | 19 +++ ...k-validation-for-runbooks-e32617f1e9227e65.yaml | 6 + ...async-updates-servicewait-e834ae30c5f72641.yaml | 9 + ...-boot-device-full-request-6ff0ee231ee6e663.yaml | 11 ++ .../fix-swift-for-inventory-c371da65dd20fc74.yaml | 7 + ...lat-driver-rebind-no-vifs-192c9be8e6962d46.yaml | 6 + ...mage-download-performance-0bf1af5556c1adbf.yaml | 9 + ...cal-link-connection-crash-394edb1c35354968.yaml | 6 + ...l-boot-payload-asrockrack-79a9291da8ec5a50.yaml | 14 ++ .../validate-interfaces-hook-49d7d6c57929a8cd.yaml | 5 + tox.ini | 4 + zuul.d/ironic-jobs.yaml | 2 +- 53 files changed, 1370 insertions(+), 238 deletions(-)

1 0

ironic 36.0.0 (hibiscus)
by no-reply＠openstack.org 06 May '26

06 May '26

We are excited to announce the release of: ironic 36.0.0 This release is part of the hibiscus release series. The source is available from: https://opendev.org/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through: https://bugs.launchpad.net/ironic/+bugs For more details, please see below. 36.0.0 ^^^^^^ New Features ************ * Adds a "traits" field to runbooks, decoupling runbook eligibility from the runbook name. A runbook may now have any logical name; the set of traits on the runbook determines which nodes are permitted to use it. API microversion 1.112 is required to use this feature. * Adds a "description" field to runbooks, consistent with other Ironic objects. The field is available from API microversion 1.112 onwards and is included in the runbook body when retrieved via the API. * Adds new REST API endpoints for managing runbook traits: * "GET /v1/runbooks/{ident}/traits" — list all traits for a runbook. * "PUT /v1/runbooks/{ident}/traits" — replace all traits for a runbook. * "PUT /v1/runbooks/{ident}/traits/{trait}" — add a single trait. * "DELETE /v1/runbooks/{ident}/traits" — remove all traits. * "DELETE /v1/runbooks/{ident}/traits/{trait}" — remove a single trait. These endpoints are available from API microversion 1.112. * Runbook names are no longer required to be valid OpenStack trait strings when using API microversion 1.112 or later. Any string of 1–255 characters is now accepted as a runbook name. Upgrade Notes ************* * The configuration molds feature, deprecated since 2024.1, has been removed. This includes the "export_configuration", "import_configuration", and "import_export_configuration" deploy/clean steps from the "idrac-redfish" management interface, the "[molds]" configuration section, and the "[drac]query_import_config_job_status_interval" option. The removal was prompted by security concerns with the feature's URL handling (see bug 2148317 (https://bugs.launchpad.net/ironic/+bug/2148317)) * The iLO and iLO5 hardware types and all their interfaces (bios, boot, inspect, management, power, raid, vendor) have been removed. Users of the iLO drivers should migrate to the "redfish" hardware type, which provides equivalent functionality for HPE ProLiant servers. * The iRMC hardware type and all its interfaces have been removed. Users of the iRMC driver should migrate to a supported hardware type, preferably "redfish". * The "pysnmp-lextudio", "pyasn1", and "pyasn1-modules" libraries have been removed from both driver and test requirements, as they are no longer needed after the removal of the SNMP and iRMC drivers. * The SNMP hardware type and power interface has been removed. Users of the SNMP power driver should migrate to a supported hardware type, preferably "redfish". * An online data migration ("migrate_runbook_names_to_traits") seeds the "runbook_traits" table from the current runbook names. This migration runs as part of "ironic-dbsync online_data_migrations" and can be executed in batches while the service is running. Existing runbooks whose names were valid trait strings will continue to match nodes via the new trait-based mechanism. Runbooks created before API microversion 1.112 are not affected by the node matching logic change until they are updated via the new traits endpoints. * A quirk to note for users of the new runbook traits. Runbooks created using API microversion >=1.112, then later viewed with API microversions <1.112, may have names that do not conform to the custom traits schema (CUSTOM_*) previously enforced for runbook names. Bug Fixes ********* * Fixes an issue where the task for NIC firmware update completed before the first poll cycle could complete. This caused firmware caching to run before the OS had fully booted, preventing updated firmware information from being stored in the database. * Fixes an issue where console command passed to *socat*'s *EXEC:* was not quoted which could have security implications. * Fixes a security issue where the deprecated configuration molds feature would allow an user invoking molds to request authorization to be sent to a remote endpoint. This user supplied URL could be a "swift" or "http" url. While when used with "http", the feature was explicitly designed around a concept of just publishing to a file in a limited context with authentication details provided by the conductor, where as with "swift" the impact is greater because the time limited session token for Ironic's access of swift resources could be leaked, captured, and used. The configuration molds feature now explicitly checks the swift endpoint URL and raises an exception when the URL does not match the user supplied the configured Swift endpoint. More information can be found in bug 2148317 (https://bugs.launchpad.net/ironic/+bug/2148317) * Fixed an unnecessary IPA boot during out-of-band service steps. When all service steps declare "requires_ramdisk=False", the conductor correctly skips the initial ramdisk boot, but "service_disable_ramdisk" in "driver_internal_info" was left as "False". Steps that call "reboot_to_finish_step()" internally (e.g. Redfish BIOS "apply_configuration") would then boot IPA before the reboot, adding a disruptive and unnecessary boot cycle. The flag is now set to "True" whenever all service steps are out-of-band. * Fixes an issue where immediate reboots can interrupt the initialization of NIC firmware update. * [Bug 2146585 (https://bugs.launchpad.net/ironic/+bug/2146585) iDRAC devices report their Service Tag in the Redfish SKU field, which should be treated as the chassis serial number. The idrac- redfish driver already overrode serial_number with the SKU value, but the fix-up ran after inventory was stored and inspection rules were evaluated, causing rules to see the wrong serial_number. The override now happens inline via "_get_system_vendor_info" so the correct value is present before storage and rule evaluation. * Add validation to the "bios.apply_configuration" step's data before the job starts to run to avoid an indefinite hang because the step cannot set the BIOS to the value that was requested because it is not valid. If the BIOS has provided us with the valid values, ranges, or lengths of the data then we first validate it before attempting to use it. If the data is not valid then we clearly fail the step and report the field that was invalid. bug 2148675 (https://bugs.launchpad.net/ironic/+bug/2148675) * Allow the "set_bmc_clock" management setup in the redfish interface to set the time to the conductor if the time is not explicitly provided. This makes it possible to call this step and get an accurate time. For Ironic to manage the BMC, the time must be inline with the conductor so this is a better reasonable default. This also makes it possible to use the "set_bmc_clock" in runbooks, as originally intended, because users cannot supply a time for the runbooks without this fix the runbook could only ever set the time to a fixed value which isn't useful. Fixes bug 2146355 (https://bugs.launchpad.net/ironic/+bug/2146355) Changes in ironic 35.0.0..36.0.0 -------------------------------- 4e7c82542 ci: fix CI (aki/ari && novncproxy containers) 0b33845c2 Remove deprecated configuration molds feature c1c9930fb security: validate molds url against swift in keystone catalog 1a90db0a2 Shell-quote console command passed to `socat` aca38e899 CI: Set multinode jobs to fail if binding fails 105096d06 docs: add full rule example to inspection rules documentation 0ab27f395 objects: Prepare for oslo.versionedobjects 3.10.0 c5316b866 Revert "Soft power off before ejecting virtual media regardless of CONF.inspector.power_off" 1c75ebd23 Drop unnecessary import_exceptions 6bafa67df fix: bios.apply_configuration needs to validate before starting afd6676d5 ci: Tune multinode CI job VM resources for stability d5e252810 ci: fix guarding logic ovs qrouter logic 157b18688 build runbook traits via ORM relationship in create_runbook 9f2c21be1 Fix IPA boot during out-of-band service steps a5cc72722 devstack: skip qrouter namespace config for ovn 88ae57136 runbooks: add traits support, description field, and v1.112 API 776a146d6 Improve search experience in Ironic docs 8a0116f4a devstack: Drop dead reference to pyghmi b9c516178 fix ip route call to be idempotent 1697ff3e5 devstack: fix qrouter used in iptables calls 45279830c gracefully handle plugging the port for a test node afb64cf26 Remove iLO hardware type and interfaces d9a953f42 Remove IRONIC_RAMDISK_TYPE devstack setting c2d6761a6 Limit interfaces to fake-graphical for testing 06800cfaa Log node history on vif_attach and vif_detach failures b4e6a608d Add missing test coverage for node history API 8f3f49dc9 Firmware caching before OS boot complete f08e3d89d Clear affinity before deleting stale conductor 4ee0cbaf5 Fix idrac-redfish SKU to serial_number override to run before rule evaluation ab786123c Fix nova rebuilds w/ramdisk driver 6568b665c Drop unnecessary allowlist_externals 2df342dc4 Soft power off before ejecting virtual media regardless of CONF.inspector.power_off e78ad987a make target_datetime optional for set_bmc_clock step 7ceef452d Remove pysnmp and related dependencies 95f99ac58 Remove the SNMP hardware type and power interface 908d4d35f Remove the iRMC hardware type and all interfaces 6a66798f6 Make CONF picklable for oslo.service's spawn probe 9f4504205 Fix pickle error when oslo.service uses spawn mode 9f52550fc Fix Premature reboot interrupting NIC update f700d3da5 Update master for stable/2026.1 Diffstat (except docs and test files) ------------------------------------- devstack/lib/ironic | 309 +-- devstack/settings | 8 +- devstack/tools/ironic/scripts/create-node.sh | 7 +- .../glance-and-swift-for-partition-images.diag | 34 - .../glance-and-swift-for-partition-images.svg | 169 -- .../images/glance-and-swift-whole-disk-images.diag | 33 - .../images/glance-and-swift-whole-disk-images.svg | 162 -- driver-requirements.txt | 7 - ironic/api/controllers/v1/node.py | 35 +- ironic/api/controllers/v1/ramdisk.py | 2 - ironic/api/controllers/v1/runbook.py | 219 +- ironic/api/controllers/v1/utils.py | 10 + ironic/api/controllers/v1/versions.py | 9 +- ironic/command/dbsync.py | 1 + ironic/command/status.py | 41 - ironic/common/exception.py | 20 +- ironic/common/molds.py | 133 -- ironic/common/release_mappings.py | 6 +- ironic/common/rpc_service.py | 34 + ironic/common/service.py | 35 + ironic/conductor/base_manager.py | 28 + ironic/conductor/deployments.py | 2 + ironic/conductor/manager.py | 73 +- ironic/conductor/servicing.py | 3 + ironic/conf/__init__.py | 8 - ironic/conf/drac.py | 5 - ironic/conf/ilo.py | 132 -- ironic/conf/irmc.py | 197 -- ironic/conf/molds.py | 42 - ironic/conf/opts.py | 4 - ironic/conf/snmp.py | 58 - ironic/db/api.py | 62 + ...316b60d9e_add_runbook_traits_and_description.py | 52 + ironic/db/sqlalchemy/api.py | 183 +- ironic/db/sqlalchemy/models.py | 23 + ironic/drivers/ilo.py | 95 - ironic/drivers/irmc.py | 91 - ironic/drivers/modules/console_utils.py | 4 +- ironic/drivers/modules/drac/inspect.py | 40 +- ironic/drivers/modules/drac/management.py | 311 --- ironic/drivers/modules/fake.py | 7 +- ironic/drivers/modules/ilo/__init__.py | 0 ironic/drivers/modules/ilo/bios.py | 248 --- ironic/drivers/modules/ilo/boot.py | 1097 ---------- ironic/drivers/modules/ilo/common.py | 1185 ----------- ironic/drivers/modules/ilo/firmware_processor.py | 446 ----- ironic/drivers/modules/ilo/inspect.py | 316 --- ironic/drivers/modules/ilo/management.py | 1253 ------------ ironic/drivers/modules/ilo/power.py | 371 ---- ironic/drivers/modules/ilo/raid.py | 267 --- ironic/drivers/modules/ilo/vendor.py | 135 -- ironic/drivers/modules/image_utils.py | 21 +- ironic/drivers/modules/irmc/__init__.py | 0 ironic/drivers/modules/irmc/bios.py | 151 -- ironic/drivers/modules/irmc/boot.py | 1121 ----------- ironic/drivers/modules/irmc/common.py | 670 ------- ironic/drivers/modules/irmc/inspect.py | 348 ---- ironic/drivers/modules/irmc/management.py | 630 ------ ironic/drivers/modules/irmc/power.py | 340 ---- ironic/drivers/modules/irmc/raid.py | 499 ----- ironic/drivers/modules/irmc/vendor.py | 78 - ironic/drivers/modules/redfish/bios.py | 58 + ironic/drivers/modules/redfish/firmware.py | 39 +- ironic/drivers/modules/redfish/inspect.py | 36 +- ironic/drivers/modules/redfish/management.py | 15 +- ironic/drivers/modules/snmp.py | 1525 -------------- ironic/drivers/snmp.py | 42 - ironic/objects/fields.py | 11 +- ironic/objects/runbook.py | 166 +- .../unit/drivers/modules/drac/test_inspect.py | 67 +- .../unit/drivers/modules/drac/test_management.py | 630 ------ .../drivers/modules/ilo/test_firmware_processor.py | 646 ------ .../unit/drivers/modules/ilo/test_management.py | 2049 ------------------- .../drivers/modules/irmc/fake_sensors_data_ng.xml | 156 -- .../drivers/modules/irmc/fake_sensors_data_ok.xml | 156 -- .../unit/drivers/modules/irmc/test_inspect.py | 719 ------- .../unit/drivers/modules/irmc/test_management.py | 815 -------- .../drivers/modules/irmc/test_periodic_task.py | 333 --- .../unit/drivers/modules/redfish/test_bios.py | 237 +++ .../unit/drivers/modules/redfish/test_firmware.py | 150 +- .../unit/drivers/modules/redfish/test_inspect.py | 34 + .../drivers/modules/redfish/test_management.py | 28 + .../unit/drivers/modules/test_console_utils.py | 11 +- .../unit/drivers/modules/test_deploy_utils.py | 4 +- .../unit/drivers/third_party_driver_mock_specs.py | 63 - pyproject.toml | 24 - ...oot-to-apply-nic-firmware-629e86b65368dcd6.yaml | 7 + ...-console-string-arguments-555388ab8dcb8cc3.yaml | 5 + .../notes/fix-bug-2148317-471adcfac69791dc.yaml | 19 + ...pa-boot-oob-service-steps-b2e4f1a9c3d70845.yaml | 11 + ...t-interrupting-nic-update-3a4d8d4dbe4a9593.yaml | 5 + .../notes/idrac-redfish-sku-bad1ce14db1b980c.yaml | 11 + ...s-apply-config-validation-04042b14be9b94b4.yaml | 10 + .../redfish-set-bmc-clock-97a7132356f30485.yaml | 12 + .../remove-config-molds-e7759afd5d6cadff.yaml | 12 + .../remove-ilo-hardware-type-45cbe0440fcfbd45.yaml | 8 + .../notes/remove-irmc-driver-a1b2c3d4e5f6a7b8.yaml | 6 + ...emove-pysnmp-dependencies-c4d5e6f7a8b9c0d1.yaml | 7 + .../notes/remove-snmp-driver-b8e3d1f2a4c5e6f7.yaml | 6 + .../runbook-traits-support-8f3a2b1c4d5e6f7a.yaml | 40 + ...isk-artifacts-delineation-15a7d652d34b196f.yaml | 5 - releasenotes/source/2026.1.rst | 6 + releasenotes/source/index.rst | 1 + test-requirements.txt | 3 - tox.ini | 8 +- zuul.d/ironic-jobs.yaml | 63 +- 179 files changed, 2955 insertions(+), 35417 deletions(-) Requirements updates -------------------- diff --git a/driver-requirements.txt b/driver-requirements.txt index c805a5138..5fb34ff9e 100644 --- a/driver-requirements.txt +++ b/driver-requirements.txt @@ -6,7 +5,0 @@ -# These are available on pypi -proliantutils>=2.16.2,<2.17.0 -pysnmp-lextudio>=5.0.0 # BSD -pyasn1>=0.5.1 # BSD -pyasn1-modules>=0.3.0 # BSD -python-scciclient>=0.16.0,<0.17.0 - diff --git a/test-requirements.txt b/test-requirements.txt index f20c660e6..b46305fb8 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -10,3 +9,0 @@ WebTest>=2.0.27 # MIT -pysnmp-lextudio>=5.0.0 # BSD -pyasn1>=0.5.1 # BSD -pyasn1-modules>=0.3.0 # BSD

1 0

osprofiler 4.4.0
by no-reply＠openstack.org 05 May '26

05 May '26

We jubilantly announce the release of: osprofiler 4.4.0 The source is available from: https://opendev.org/openstack/osprofiler Download the package from: https://pypi.org/project/osprofiler For more details, please see below. 4.4.0 ^^^^^ Upgrade Notes * Support for Python 3.9 has been removed. Now the minimum python version supported is 3.10. * The Jager driver is no longer supported and now using it raises CommandError. This is because the jaeger-client-python library, which is its core dependency, was already retired. Changes in osprofiler 4.3.0..4.4.0 ---------------------------------- bedbbc5 tox: Use new constraints option bc6e39f Remove compatibility with SQLAlchemy<2.0 e90e6d0 Fix OSProfiler compatibility issues with SQLAlchemy 2.0 and Rally 0367301 redis: Drop support for unused db parameter 70bc86a typing: Update for typed oslotest, debtcollector 8067feb Create root span in the otlp driver 510823c Remove hacking checks about assertion methods fc168ce Use built-in noqa check 2cd626c Remove old check for Python 2-3 compatibility fcf6032 Add typing bd377bc Add ruff 31b0634 Replace deprecated datetime.datetime.utcnow 8f8a30b Migrate upper functional job to Python 3.13 f38f04e Fix KeyError in notifying db errors 975a38c Replace remaining py39 target 598db39 Exclude tests directory from bandit check c6839af Replace own hacking checks by built-in ones 930d0c5 Remove tox target for lower-constraints check 3b3994b pre-commit: Bump dependencies 5595604 Migrate setup configuration to pyproject.toml ddf0249 Drop Python 3.9 support be27342 Cleanup jaeger backend from devstack and examples e03de73 Retire Jaeger driver c242129 add pyproject.toml to support pip 23.1 36e5b5a Explicitly add six to unblock unit tests 4aa9526 Update functional test environments Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 27 +- .zuul.yaml | 6 +- devstack/README.rst | 4 +- devstack/lib/osprofiler | 10 +- devstack/plugin.sh | 5 +- osprofiler/_utils.py | 67 ++-- osprofiler/cmd/cliutils.py | 20 +- osprofiler/cmd/commands.py | 170 ++++++--- osprofiler/cmd/shell.py | 46 ++- osprofiler/drivers/__init__.py | 2 +- osprofiler/drivers/base.py | 172 +++++---- osprofiler/drivers/elasticsearch_driver.py | 120 ++++--- osprofiler/drivers/jaeger.py | 141 +------- osprofiler/drivers/loginsight.py | 192 ++++++---- osprofiler/drivers/messaging.py | 111 ++++-- osprofiler/drivers/mongodb.py | 68 ++-- osprofiler/drivers/otlp.py | 146 +++++--- osprofiler/drivers/redis_driver.py | 169 ++++++--- osprofiler/drivers/sqlalchemy_driver.py | 87 +++-- osprofiler/exc.py | 6 +- osprofiler/hacking/checks.py | 276 +++----------- osprofiler/initializer.py | 16 +- osprofiler/notifier.py | 41 ++- osprofiler/opts.py | 154 +++++--- osprofiler/profiler.py | 193 ++++++---- osprofiler/py.typed | 0 osprofiler/requests.py | 47 ++- osprofiler/sqlalchemy.py | 73 ++-- osprofiler/web.py | 69 ++-- pyproject.toml | 93 +++++ .../notes/remove-py39-d5921efb33a278ca.yaml | 5 + .../retire-jaeger-driver-d8add44c5522ad7a.yaml | 6 + releasenotes/source/conf.py | 36 +- setup.cfg | 50 --- setup.py | 4 +- test-requirements.txt | 3 +- tools/lint.py | 2 +- tools/patch_tox_venv.py | 27 +- tox.ini | 72 ++-- 60 files changed, 2833 insertions(+), 2192 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 0fc6787..b2fe737 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -15,2 +15 @@ redis>=2.10.0 # MIT -# For Jaeger Tracing -jaeger-client>=3.8.0 # Apache-2.0 +# For OTLP

1 0

horizon 25.7.3 (gazpacho)
by no-reply＠openstack.org 05 May '26

05 May '26

We are ecstatic to announce the release of: horizon 25.7.3 This release is part of the gazpacho release series. The source is available from: https://opendev.org/openstack/horizon Download the package from: https://tarballs.openstack.org/horizon/ Please report issues through: https://bugs.launchpad.net/horizon/+bugs For more details, please see below. Changes in horizon 25.7.2..25.7.3 --------------------------------- d83937385 Imported Translations from Zanata 78d0d05c6 Don't store next url in the session in WebSSO 1175b77a3 Imported Translations from Zanata 3f76e5118 Imported Translations from Zanata 2bb36e3e2 Move Enmerkar extraction logic to Horizon Diffstat (except docs and test files) ------------------------------------- .../locale/en_GB/LC_MESSAGES/doc-configuration.po | 96 +- .../locale/en_GB/LC_MESSAGES/doc-contributor.po | 85 +- .../locale/id/LC_MESSAGES/doc-configuration.po | 13 +- .../locale/id/LC_MESSAGES/doc-contributor.po | 72 +- .../test/unit/utils/test_babel_extract_django.py | 53 + horizon/utils/babel_extract_django.py | 181 + openstack_auth/views.py | 31 +- .../locale/as/LC_MESSAGES/django.po | 23 +- .../locale/bn_IN/LC_MESSAGES/django.po | 21 +- .../locale/brx/LC_MESSAGES/django.po | 22 +- .../locale/cs/LC_MESSAGES/django.po | 23 +- .../locale/de/LC_MESSAGES/django.po | 32 +- .../locale/en_AU/LC_MESSAGES/django.po | 23 +- .../locale/en_GB/LC_MESSAGES/django.po | 23 +- .../locale/eo/LC_MESSAGES/django.po | 24 +- .../locale/es/LC_MESSAGES/django.po | 24 +- .../locale/fr/LC_MESSAGES/django.po | 24 +- .../locale/gu/LC_MESSAGES/django.po | 22 +- .../locale/hi/LC_MESSAGES/django.po | 24 +- .../locale/id/LC_MESSAGES/django.po | 23 +- .../locale/it/LC_MESSAGES/django.po | 24 +- .../locale/ja/LC_MESSAGES/django.po | 23 +- .../locale/ka_GE/LC_MESSAGES/django.po | 8 +- .../locale/kn/LC_MESSAGES/django.po | 23 +- .../locale/ko_KR/LC_MESSAGES/django.po | 32 +- .../locale/kok/LC_MESSAGES/django.po | 21 +- .../locale/ks/LC_MESSAGES/django.po | 23 +- .../locale/mai/LC_MESSAGES/django.po | 24 +- .../locale/mni/LC_MESSAGES/django.po | 23 +- .../locale/mr/LC_MESSAGES/django.po | 21 +- .../locale/ne/LC_MESSAGES/django.po | 22 +- .../locale/pa_IN/LC_MESSAGES/django.po | 25 +- .../locale/pl_PL/LC_MESSAGES/django.po | 24 +- .../locale/pt_BR/LC_MESSAGES/django.po | 23 +- .../locale/ru/LC_MESSAGES/django.po | 118 +- .../locale/ru/LC_MESSAGES/djangojs.po | 35 +- .../locale/ta/LC_MESSAGES/django.po | 23 +- .../locale/tr_TR/LC_MESSAGES/django.po | 23 +- .../locale/ur/LC_MESSAGES/django.po | 24 +- .../locale/zh_Hans/LC_MESSAGES/django.po | 21 +- .../locale/zh_Hant/LC_MESSAGES/django.po | 21 +- .../source/locale/de/LC_MESSAGES/releasenotes.po | 4557 ------------- .../locale/en_GB/LC_MESSAGES/releasenotes.po | 6757 -------------------- .../source/locale/id/LC_MESSAGES/releasenotes.po | 6476 ------------------- .../source/locale/ja/LC_MESSAGES/releasenotes.po | 5776 ----------------- .../locale/ko_KR/LC_MESSAGES/releasenotes.po | 1698 ----- .../locale/pt_BR/LC_MESSAGES/releasenotes.po | 3938 ------------ .../locale/zh_CN/LC_MESSAGES/releasenotes.po | 508 -- requirements.txt | 6 - setup.cfg | 5 +- tox.ini | 3 + 66 files changed, 924 insertions(+), 31070 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index ce58cf9e4..dc1f92cc6 100644 --- a/requirements.txt +++ b/requirements.txt @@ -64,6 +63,0 @@ XStatic-tv4>=1.2.7.0 # MIT - -# enmerkar is not a runtime requirement. -# It is only required when extracting translation strings. -# Most horizon plugins do not have enmerkar in their requirements.txt -# and they depends on horizon requirements, so we keep it here. -enmerkar>=0.7.1 # BSD

1 0

sushy 5.11.0 (hibiscus)
by no-reply＠openstack.org 05 May '26

05 May '26

We jubilantly announce the release of: sushy 5.11.0 This release is part of the hibiscus release series. The source is available from: https://opendev.org/openstack/sushy Download the package from: https://tarballs.openstack.org/sushy/ Please report issues through: https://bugs.launchpad.net/sushy/+bugs For more details, please see below. 5.11.0 ^^^^^^ New Features ************ * Adds configurable TLS settings to the "Sushy" class constructor to allow operators to specify minimum TLS protocol versions and cipher suites for HTTPS connections to Redfish BMCs. * "tls_min_version": Minimum TLS version to use for HTTPS connections. Supported values are '1.1', '1.2', and '1.3'. If not specified, the default TLS version negotiation is used. Note that TLS 1.1 is deprecated and should only be used for compatibility with legacy BMC hardware. * "tls_ciphers": Colon-separated list of allowed cipher suites in OpenSSL format for HTTPS connections. If not specified, the default cipher suites are used. This change is fully backwards compatible. When TLS settings are provided, a custom HTTPAdapter is mounted that configures an ssl.SSLContext with the specified settings. This allows operators to enforce security policies requiring specific TLS versions or cipher suites when communicating with BMCs. Upgrade Notes ************* * The CD-to-UsbCd boot source override is now applied unconditionally to all Supermicro machines. Users running older ARS- 111GL-NHR firmware where 'Cd' was the correct virtual media device string will need to upgrade their BMC firmware. Bug Fixes ********* * Fixes virtual media insertion on BMCs (such as Cisco C845A M8 with Redfish Base.1.18.1) that return "ActionParameterMissing" for the missing "TransferProtocolType" parameter without including a "RelatedProperties" field in the error response. The "is_transfer_protocol_required" method now also checks for the parameter name in "MessageArgs" as a fallback. * Fixes a bug where the "connect_timeout" parameter caused an "Invalid timeout" error on any HTTP retry inside "Connector._op()". When "connect_timeout" is set, the timeout is wrapped into a "(connect, read)" tuple, but on recursive retries (server-side errors, re- authentication, or redirect following) the already- wrapped tuple was wrapped again, producing a nested tuple like "(30, (30, 60))" that the "requests" library rejects. The timeout tuple is now passed through unchanged on retries. See LP#2146416 (https://bugs.launchpad.net/sushy/+bug/2146416) * Fixes virtual media boot failure on Supermicro ARS-111GL-NHR with newer BMC firmware, where the virtual media device string has changed back to 'UsbCd' consistent with other Supermicro servers. The model-specific exception that previously skipped the CD-to-UsbCd override for this model has been reverted. Changes in sushy 5.10.0..5.11.0 ------------------------------- e33361d Update hacking to 7.0.0 7e2ed40 tls: Short circuit retries on hard tls errors 7be08db Fix verify option usage with tls version settings d6f61b5 Add TLS configuration support to sushy b87365b Prevent double-wrapping timeout tuple in Connector _op 950648a Revert "Skipping UsbCd workaround on Supermicro ARS-111GL-NHR" 74f0a93 Add missing __init__.py f2bedd8 Fix docs lint issue in docstring 1133fee Update master for stable/2026.1 c161b3a Handle missing RelatedProperties in TransferProtocolType detection Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 2 +- .../add-tls-configuration-8a94bb1bbeb79e6a.yaml | 22 +++ ...45a-transfer-protocol-fix-3791162410459a33.yaml | 9 ++ ...nnect-timeout-double-wrap-72ed19391dc0b470.yaml | 12 ++ ...ro-ars111gl-cd-workaround-e59d74a33b6ce10f.yaml | 14 ++ releasenotes/source/2026.1.rst | 6 + releasenotes/source/index.rst | 1 + sushy/connector.py | 75 ++++++++++- sushy/main.py | 16 ++- sushy/oem/dell/resources/system/__init__.py | 0 .../oem/dell/resources/system/storage/__init__.py | 0 .../dell/resources/system/storage/controller.py | 3 +- sushy/oem/dell/resources/taskservice/__init__.py | 0 sushy/resources/manager/virtual_media.py | 26 +++- sushy/resources/system/system.py | 15 +-- .../transfer_proto_required_error4.json | 19 +++ .../unit/resources/manager/test_virtual_media.py | 10 ++ 20 files changed, 359 insertions(+), 43 deletions(-)

1 0

oslo.reports 3.8.0 (hibiscus)
by no-reply＠openstack.org 05 May '26

05 May '26

We high-spiritedly announce the release of: oslo.reports 3.8.0 This release is part of the hibiscus release series. The source is available from: https://opendev.org/openstack/oslo.reports Download the package from: https://pypi.org/project/oslo.reports Please report issues through: https://bugs.launchpad.net/oslo.reports/+bugs For more details, please see below. Changes in oslo.reports 3.7.0..3.8.0 ------------------------------------ 9cae319 tox: Use new constraints option 0cc15fc typing: Update for typed oslotest 1b45779 Add typing 055a751 Apply ruff 857359d Update master for stable/2026.1 Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 16 +- oslo_reports/_utils.py | 3 +- oslo_reports/generators/conf.py | 4 +- oslo_reports/generators/process.py | 2 +- oslo_reports/generators/threading.py | 27 +- oslo_reports/generators/version.py | 16 +- oslo_reports/guru_meditation_report.py | 158 ++++++++---- oslo_reports/models/base.py | 74 +++--- oslo_reports/models/conf.py | 29 ++- oslo_reports/models/process.py | 19 +- oslo_reports/models/threading.py | 20 +- oslo_reports/models/version.py | 11 +- oslo_reports/models/with_default_views.py | 38 +-- oslo_reports/opts.py | 37 +-- oslo_reports/py.typed | 0 oslo_reports/report.py | 77 ++++-- oslo_reports/views/jinja_view.py | 23 +- oslo_reports/views/json/generic.py | 12 +- oslo_reports/views/text/generic.py | 52 ++-- oslo_reports/views/text/header.py | 6 +- oslo_reports/views/text/threading.py | 14 +- oslo_reports/views/xml/generic.py | 31 ++- pyproject.toml | 28 ++- releasenotes/source/2026.1.rst | 6 + releasenotes/source/conf.py | 36 ++- releasenotes/source/index.rst | 1 + setup.py | 4 +- tox.ini | 53 ++-- 32 files changed, 795 insertions(+), 564 deletions(-)

1 0

sushy 5.10.1 (gazpacho)
by no-reply＠openstack.org 05 May '26

05 May '26

We are satisfied to announce the release of: sushy 5.10.1 This release is part of the gazpacho release series. The source is available from: https://opendev.org/openstack/sushy Download the package from: https://tarballs.openstack.org/sushy/ Please report issues through: https://bugs.launchpad.net/sushy/+bugs For more details, please see below. 5.10.1 ^^^^^^ Bug Fixes * Fixes a bug where the "connect_timeout" parameter caused an "Invalid timeout" error on any HTTP retry inside "Connector._op()". When "connect_timeout" is set, the timeout is wrapped into a "(connect, read)" tuple, but on recursive retries (server-side errors, re- authentication, or redirect following) the already- wrapped tuple was wrapped again, producing a nested tuple like "(30, (30, 60))" that the "requests" library rejects. The timeout tuple is now passed through unchanged on retries. See LP#2146416 (https://bugs.launchpad.net/sushy/+bug/2146416) Changes in sushy 5.10.0..5.10.1 ------------------------------- a18eaf3 Prevent double-wrapping timeout tuple in Connector _op 3b53a98 Update TOX_CONSTRAINTS_FILE for stable/2026.1 5f57ecf Update .gitreview for stable/2026.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + ...nnect-timeout-double-wrap-72ed19391dc0b470.yaml | 12 +++++++++ sushy/connector.py | 3 ++- tox.ini | 10 ++++---- 5 files changed, 50 insertions(+), 6 deletions(-)

1 0

sushy 5.5.1 (epoxy)
by no-reply＠openstack.org 05 May '26

05 May '26

We are glad to announce the release of: sushy 5.5.1 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/sushy Download the package from: https://tarballs.openstack.org/sushy/ Please report issues through: https://bugs.launchpad.net/sushy/+bugs For more details, please see below. 5.5.1 ^^^^^ Bug Fixes * Improve Redfish VirtualMedia "InsertMedia" error handling on BMCs that require credentials but return unstructured errors (e.g., responses that omit "error.code" and report "ActionParameterMissing" only via "@Message.ExtendedInfo" or free-text messages). Sushy now detects these cases and retries with "UserName"/"Password" parameters, allowing ISO mounting to proceed. This also preserves compatibility with legacy "error.code == *GeneralError" responses that mention missing parameters. Changes in sushy 5.5.0..5.5.1 ----------------------------- d8efa59 Check required credentials in a detailed way 617a931 Update TOX_CONSTRAINTS_FILE for stable/2025.1 d9932e9 Update .gitreview for stable/2025.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + ...dia-credentials-detection-b30a78b85d794aea.yaml | 10 +++ sushy/resources/manager/virtual_media.py | 33 +++++++- .../unit/resources/manager/test_virtual_media.py | 91 +++++++++++++++++++++- tox.ini | 10 +-- 5 files changed, 137 insertions(+), 8 deletions(-)

1 0

sushy 5.7.2 (flamingo)
by no-reply＠openstack.org 05 May '26

05 May '26

We are pleased to announce the release of: sushy 5.7.2 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/sushy Download the package from: https://tarballs.openstack.org/sushy/ Please report issues through: https://bugs.launchpad.net/sushy/+bugs For more details, please see below. 5.7.2 ^^^^^ Bug Fixes * An issue was encountered on Dell hardware where the Baseboard Management Controller could respond with a HTTP 404 error temporarily during job creation, causing operations to fail unnecessarily. This occurred due to a race condition where the BMC had not yet finished creating the job when the initial request was made. The Dell OEM http_call method now automatically retries on 404 responses with configurable retry count (default: 3 retries) and delay (default: 10 seconds) to handle this transient condition gracefully. The retry behavior can be customized using the "max_404_retries" and "retry_404_delay" parameters. * Fixes an issue with the handling of idrac10 BMCs as it relates to the ComputerSystem resource. Previously, sushy was not able to identify the available boot target value. Now sushy is able to identify the boot values from a settings sub-resource and provide the needful clarity so consumers of the sushy library can identify available targets. * Improve Redfish VirtualMedia "InsertMedia" error handling on BMCs that require credentials but return unstructured errors (e.g., responses that omit "error.code" and report "ActionParameterMissing" only via "@Message.ExtendedInfo" or free-text messages). Sushy now detects these cases and retries with "UserName"/"Password" parameters, allowing ISO mounting to proceed. This also preserves compatibility with legacy "error.code == *GeneralError" responses that mention missing parameters. Changes in sushy 5.7.1..5.7.2 ----------------------------- 938e1bc Check required credentials in a detailed way a7400b1 Handle idrac10 moving some boot items aadeb59 Improve Dell Asynchronous task handling ada9579 Update TOX_CONSTRAINTS_FILE for stable/2025.2 c43f1c5 Update .gitreview for stable/2025.2 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + ...ll-bmc-404-race-condition-6000e47436cd4d6e.yaml | 12 ++ ...idrac10-settings-resource-c18e754c661a7056.yaml | 8 + ...dia-credentials-detection-b30a78b85d794aea.yaml | 10 + sushy/oem/dell/asynchronous.py | 29 ++- sushy/resources/manager/virtual_media.py | 33 ++- sushy/resources/system/system.py | 89 ++++++++ .../unit/resources/manager/test_virtual_media.py | 91 +++++++- tox.ini | 10 +- 11 files changed, 610 insertions(+), 13 deletions(-)

1 0

osc-lib 4.6.0 (hibiscus)
by no-reply＠openstack.org 05 May '26

05 May '26

We are delighted to announce the release of: osc-lib 4.6.0 This release is part of the hibiscus release series. The source is available from: https://opendev.org/openstack/osc-lib Download the package from: https://pypi.org/project/osc-lib Please report issues through: https://bugs.launchpad.net/python-openstackclient/+bugs For more details, please see below. Changes in osc-lib 4.5.0..4.6.0 ------------------------------- 47dd091 clientmanager: Add filters for ClientManger.is_service_available 6aef678 fix: unbound variable when both values are false 70c39a6 typing: union-attrs on find_project() Diffstat (except docs and test files) ------------------------------------- osc_lib/cli/identity.py | 10 +++++++--- osc_lib/clientmanager.py | 16 ++++++++++++++-- requirements.txt | 2 +- 4 files changed, 26 insertions(+), 6 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 7249568..1920c4d 100644 --- a/requirements.txt +++ b/requirements.txt @@ -3 +3 @@ keystoneauth1>=5.10.0 # Apache-2.0 -openstacksdk>=0.15.0 # Apache-2.0 +openstacksdk>=4.12.0 # Apache-2.0

1 0