July 2026 - Release-announce - lists.openstack.org

heat 26.0.1 (gazpacho)
by no-reply＠openstack.org 27 Jul '26

27 Jul '26

We joyfully announce the release of: heat 26.0.1 This release is part of the gazpacho release series. The source is available from: https://opendev.org/openstack/heat Download the package from: https://tarballs.openstack.org/heat/ Please report issues through: https://storyboard.openstack.org/#!/project/989 For more details, please see below. 26.0.1 ^^^^^^ Bug Fixes * Fixed the broken "heat-manage update_params" command. Changes in heat 26.0.0..26.0.1 ------------------------------ f8ffc8224 Restore heat-manage update_params ffc76501e Enable trunk plugin in CI 6cd71ce1c Use bulk create and diff-based update for SG rules d00e4de52 Preserve auto-populated binding:profile fields during update 426970666 Update TOX_CONSTRAINTS_FILE for stable/2026.1 f01d8b678 Update .gitreview for stable/2026.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 1 + heat/db/api.py | 186 +++++++- heat/engine/resources/openstack/neutron/port.py | 40 ++ .../resources/openstack/neutron/security_group.py | 85 ++-- .../neutron/test_neutron_security_group.py | 469 +++++++++------------ ...heat-manage-update_params-59829be29d62efba.yaml | 4 + tox.ini | 8 +- 10 files changed, 976 insertions(+), 322 deletions(-)

1 0

heat 25.0.1 (flamingo)
by no-reply＠openstack.org 27 Jul '26

27 Jul '26

We high-spiritedly announce the release of: heat 25.0.1 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/heat Download the package from: https://tarballs.openstack.org/heat/ Please report issues through: https://storyboard.openstack.org/#!/project/989 For more details, please see below. 25.0.1 ^^^^^^ Bug Fixes * Fixed the broken "heat-manage update_params" command. * The Keystone v3 ec2token end point requires authenticated access. The Heat ec2token filter now requires Keystone auth settings to be able to verify EC2 credentials. For single cloud mode the ec2token filter will look in the "[ec2authtoken]" section of the heat configuration for keystone authentication settings. In multicloud mode keystone auth settings must be supplied in configuration file sections names "[ec2authtoken.<name>]" . The "[ec2authtoken] clouds" option should be also configured to define the list of names. Note that ec2token request will be sent without authentication if the legacy settings ("auth_uri" and "allowed_auth_uris") are still used. * The "disk_bus" property of "OS::Nova::Server" resource's "block_device_mapping_v2" now accepts 'sata' as a valid value. The SATA disk bus was added to Nova in the Queens release. See story 2011600 (https://storyboard.openstack.org/#!/story/2011600) Changes in heat 25.0.0..25.0.1 ------------------------------ 8c019d44f Restore heat-manage update_params 6614a0006 Enable trunk plugin in CI 3ff3b3418 Use bulk create and diff-based update for SG rules d13004fb6 Preserve auto-populated binding:profile fields during update 22da21d1d Stably-only: Cap bandit 9a0530dd2 Add `sata` to OS::Nova::Server disk_bus constraint f2db16ff6 Add back ParallelDeploymentsTest in upgrade test 76bf87551 Use authentication with keystone ec2token api c0eb45352 Update TOX_CONSTRAINTS_FILE for stable/2025.2 e46ce1bd4 Update .gitreview for stable/2025.2 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 1 + devstack/lib/heat | 1 + heat/api/aws/ec2token.py | 228 ++++++-- heat/db/api.py | 186 ++++++- heat/engine/resources/openstack/neutron/port.py | 40 ++ .../resources/openstack/neutron/security_group.py | 85 ++- heat/engine/resources/openstack/nova/server.py | 2 +- .../api/aws/config/multi_cloud_auth_uris.conf | 10 + .../api/aws/config/multi_cloud_partial_v2.conf | 14 + .../neutron/test_neutron_security_group.py | 469 +++++++--------- ...heat-manage-update_params-59829be29d62efba.yaml | 4 + ...c2token-api-authenticated-b77da7d1edbb086c.yaml | 17 + ...ng-v2-disk-bus-allow-sata-d22c1dfe4f2f9a83.yaml | 7 + test-requirements.txt | 2 +- tox.ini | 10 +- 28 files changed, 1737 insertions(+), 557 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 262eaade7..f7b702277 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -4 +4 @@ hacking>=6.1.0,<6.2.0 # Apache-2.0 -bandit>=1.8.1 # Apache-2.0 +bandit>=1.8.1,<1.9.3 # Apache-2.0

1 0

heat 24.1.1 (epoxy)
by no-reply＠openstack.org 27 Jul '26

27 Jul '26

We are amped to announce the release of: heat 24.1.1 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/heat Download the package from: https://tarballs.openstack.org/heat/ Please report issues through: https://storyboard.openstack.org/#!/project/989 For more details, please see below. 24.1.1 ^^^^^^ Bug Fixes * Fixed the broken "heat-manage update_params" command. * The Keystone v3 ec2token end point requires authenticated access. The Heat ec2token filter now requires Keystone auth settings to be able to verify EC2 credentials. For single cloud mode the ec2token filter will look in the "[ec2authtoken]" section of the heat configuration for keystone authentication settings. In multicloud mode keystone auth settings must be supplied in configuration file sections names "[ec2authtoken.<name>]" . The "[ec2authtoken] clouds" option should be also configured to define the list of names. Note that ec2token request will be sent without authentication if the legacy settings ("auth_uri" and "allowed_auth_uris") are still used. * The "disk_bus" property of "OS::Nova::Server" resource's "block_device_mapping_v2" now accepts 'sata' as a valid value. The SATA disk bus was added to Nova in the Queens release. See story 2011600 (https://storyboard.openstack.org/#!/story/2011600) * Enable the creation of an "OS::Neutron::VPNService" resource, and an "OS::Neutron::IPsecSiteConnection" resource that depends on it, within the same stack. Changes in heat 24.1.0..24.1.1 ------------------------------ 103183469 Preserve auto-populated binding:profile fields during update b8b85de4c Restore heat-manage update_params a13230861 stable/2025.1 only: Disable Jammy job 5e56c980e Add `sata` to OS::Nova::Server disk_bus constraint 7c43e53cf stable-only: Pin setuptools 8bb750117 Add back ParallelDeploymentsTest in upgrade test 3b2ebd307 stable/2025.1 only: Drop SLURP job 006357801 Use authentication with keystone ec2token api 48538e5a2 Consider the VPNService resource complete if its Neutron object is in PENDING_CREATE f09ee2ca7 Switch back pre-upgrade check to source branch 1fd4e26f6 Fix instance_group/autoscaling_group intermittent test failures 70f4be9cd Fix barbican client plugin 603e546f2 Fix stack update when reauthentication_auth_method=trusts Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 20 +- devstack/lib/heat | 1 + devstack/upgrade/resources.sh | 1 - heat/api/aws/ec2token.py | 228 ++++++-- heat/db/api.py | 186 ++++++- heat/engine/clients/os/barbican.py | 2 +- heat/engine/resources/openstack/neutron/port.py | 40 ++ .../resources/openstack/neutron/vpnservice.py | 12 +- heat/engine/resources/openstack/nova/server.py | 2 +- heat/engine/stack.py | 10 + .../api/aws/config/multi_cloud_auth_uris.conf | 10 + .../api/aws/config/multi_cloud_partial_v2.conf | 14 + .../openstack/neutron/test_neutron_vpnservice.py | 1 - .../functional/test_autoscaling.py | 51 +- .../functional/test_instance_group.py | 51 +- ...heat-manage-update_params-59829be29d62efba.yaml | 4 + ...c2token-api-authenticated-b77da7d1edbb086c.yaml | 17 + ...ng-v2-disk-bus-allow-sata-d22c1dfe4f2f9a83.yaml | 7 + ...vpnservice-pending-create-f261c5dfc290a734.yaml | 6 + test-requirements.txt | 2 +- tox.ini | 4 + 34 files changed, 1558 insertions(+), 330 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 262eaade7..f7b702277 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -4 +4 @@ hacking>=6.1.0,<6.2.0 # Apache-2.0 -bandit>=1.8.1 # Apache-2.0 +bandit>=1.8.1,<1.9.3 # Apache-2.0

1 0

zaqar 22.0.1 (gazpacho)
by no-reply＠openstack.org 23 Jul '26

23 Jul '26

We are delighted to announce the release of: zaqar 22.0.1 This release is part of the gazpacho release series. The source is available from: https://opendev.org/openstack/zaqar Download the package from: https://tarballs.openstack.org/zaqar/ Please report issues through: https://bugs.launchpad.net/zaqar/+bugs For more details, please see below. 22.0.1 ^^^^^^ Security Issues * Bug 2161254 (https://bugs.launchpad.net/zaqar/+bug/2161254) Fixed Requests with the "EXTRA-SPEC" header bypassed authentication and policy check. Changes in zaqar 22.0.0..22.0.1 ------------------------------- 58fb21d0 Do not bypass authentication for requests with EXTRA-SPEC header ebed9f5e Remove remaining handling for v1 API 9d1d2b36 Update TOX_CONSTRAINTS_FILE for stable/2026.1 4910306a Update .gitreview for stable/2026.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + releasenotes/notes/bug-2161254-55c2748092268fb3.yaml | 6 ++++++ tox.ini | 8 ++++---- zaqar/transport/middleware/auth.py | 8 +++----- 4 files changed, 14 insertions(+), 9 deletions(-)

1 0

zaqar 21.0.1 (flamingo)
by no-reply＠openstack.org 23 Jul '26

23 Jul '26

We are satisfied to announce the release of: zaqar 21.0.1 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/zaqar Download the package from: https://tarballs.openstack.org/zaqar/ Please report issues through: https://bugs.launchpad.net/zaqar/+bugs For more details, please see below. 21.0.1 ^^^^^^ Security Issues * Bug 2161254 (https://bugs.launchpad.net/zaqar/+bug/2161254) Fixed Requests with the "EXTRA-SPEC" header bypassed authentication and policy check. Changes in zaqar 21.0.0..21.0.1 ------------------------------- 46ff729c Do not bypass authentication for requests with EXTRA-SPEC header 466c77a6 Fix outdated version list api example 84a628eb Update TOX_CONSTRAINTS_FILE for stable/2025.2 c96cc1f4 Update .gitreview for stable/2025.2 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + api-ref/source/samples/versions-list-response.json | 21 ++------------------- .../notes/bug-2161254-55c2748092268fb3.yaml | 6 ++++++ tox.ini | 8 ++++---- zaqar/transport/middleware/auth.py | 8 +++----- 5 files changed, 16 insertions(+), 28 deletions(-)

1 0

zaqar 20.1.1 (epoxy)
by no-reply＠openstack.org 23 Jul '26

23 Jul '26

We are delighted to announce the release of: zaqar 20.1.1 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/zaqar Download the package from: https://tarballs.openstack.org/zaqar/ Please report issues through: https://bugs.launchpad.net/zaqar/+bugs For more details, please see below. 20.1.1 ^^^^^^ Security Issues * Bug 2161254 (https://bugs.launchpad.net/zaqar/+bug/2161254) Fixed Requests with the "EXTRA-SPEC" header bypassed authentication and policy check. Changes in zaqar 20.1.0..20.1.1 ------------------------------- 07b283de Do not bypass authentication for requests with EXTRA-SPEC header 9277829d stable/2025.1 only: Disable Jammy job Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 6 ++++-- releasenotes/notes/bug-2161254-55c2748092268fb3.yaml | 6 ++++++ zaqar/transport/middleware/auth.py | 8 +++----- 3 files changed, 13 insertions(+), 7 deletions(-)

1 0

rally-openstack 4.1.0
by no-reply＠openstack.org 23 Jul '26

23 Jul '26

We are pleased to announce the release of: rally-openstack 4.1.0 The source is available from: https://opendev.org/openstack/rally-openstack Download the package from: https://pypi.org/project/rally-openstack For more details, please see below. Changes in rally-openstack 4.0.0..4.1.0 --------------------------------------- 9657535f Update release date for 4.1.0 5aa3dcfc [ci] Fix docker-push-image role and zuul-ansible-lint tox env 6c8c86c1 Propose 4.1.0 release 294bf4a8 Update changelog entry to include bug report 899b8c3d Replace deprecated datetime.datetime.utcnow cccf8e19 Fix support for cinder microversions b1043640 [ci] Enable ansible-split-streams for rally-task-at-devstack 3cf9d3bb [ci] Rotate dockerhub creds b53535b4 [ci] Relax SLA for cinder volume workloads ca886162 [ci] Allow reusing task files from rally-openstack project 9f06bcb8 [ci] Allow to run rally-verify-tempest outside Diffstat (except docs and test files) ------------------------------------- .zuul.d/README.rst | 6 +++ .zuul.d/base.yaml | 3 ++ .zuul.d/docker-jobs.yaml | 41 ++++++++------- CHANGELOG.rst | 38 ++++++++++++++ DOCKER_README.md | 10 ++-- rally-jobs/cinder.yaml | 21 ++++++++ rally-jobs/nova.yaml | 3 ++ rally_openstack/common/services/storage/block.py | 23 +++++++++ .../common/services/storage/cinder_common.py | 23 +++++++-- rally_openstack/task/scenarios/barbican/secrets.py | 4 +- .../roles/docker-push-image/tasks/main.yaml | 54 ++++++++++++++++--- .../roles/prepare-for-rally-task/tasks/main.yaml | 15 +++++- .../common/services/storage/test_cinder_common.py | 13 ++++- tox.ini | 4 +- 21 files changed, 372 insertions(+), 49 deletions(-)

1 0

zaqar 20.1.0 (epoxy)
by no-reply＠openstack.org 22 Jul '26

22 Jul '26

We are overjoyed to announce the release of: zaqar 20.1.0 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/zaqar Download the package from: https://tarballs.openstack.org/zaqar/ Please report issues through: https://bugs.launchpad.net/zaqar/+bugs For more details, please see below. 20.1.0 ^^^^^^ Bug Fixes * Fixed the wrong type of "[drivers:message_store:swift] insecure" option. It was previously string (so non-empty strings were translated to True), but has been changed to boolean. Changes in zaqar 20.0.0..20.1.0 ------------------------------- b1dad729 Reject enabling v1 API a7d0b283 Fix wrong type of [drivers:message_store:swift] insecure 74364071 devstack: Be tolerant of existing /etc/apt/sources.list.d dir daa05164 Update TOX_CONSTRAINTS_FILE for stable/2025.1 4e8c77db Update .gitreview for stable/2025.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + devstack/plugin.sh | 6 ++++-- releasenotes/notes/fix-swift-insecure-149799b47c3da6cf.yaml | 6 ++++++ tools/test-setup.sh | 4 +++- tox.ini | 8 ++++---- zaqar/conf/default.py | 2 +- zaqar/conf/drivers_message_store_swift.py | 2 +- 28 files changed, 44 insertions(+), 33 deletions(-)

1 0

release-test 8.5.0 (hibiscus)
by no-reply＠openstack.org 22 Jul '26

22 Jul '26

We exuberantly announce the release of: release-test 8.5.0 This release is part of the hibiscus release series. The source is available from: https://opendev.org/openstack/release-test Download the package from: https://tarballs.openstack.org/release-test/ Please report issues through: https://bugs.launchpad.net/nova/+bugs For more details, please see below. Changes in release-test 8.4.0..8.5.0 ------------------------------------ e60de70 Apply pyupgrade Diffstat (except docs and test files) ------------------------------------- release_test/__init__.py | 2 -- 3 files changed, 6 deletions(-)

1 0

masakari 19.1.0 (epoxy)
by no-reply＠openstack.org 21 Jul '26

21 Jul '26

We are overjoyed to announce the release of: masakari 19.1.0 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/masakari Download the package from: https://tarballs.openstack.org/masakari/ Please report issues through: https://bugs.launchpad.net/masakari/+bugs For more details, please see below. 19.1.0 ^^^^^^ New Features * A new module, "masakari.wsgi", has been added as a place to gather WSGI "application" objects. This is intended to ease deployment by providing a consistent location for these objects. For example, if using uWSGI then instead of: [uwsgi] wsgi-file = /bin/masakari-wsgi You can now use: [uwsgi] module = masakari.wsgi.api:application This also simplifies deployment with other WSGI servers that expect module paths such as gunicorn. Changes in masakari 19.0.0..19.1.0 ---------------------------------- 0fd34dd Add new masakari.wsgi module d93dd09 Update TOX_CONSTRAINTS_FILE for stable/2025.1 39df5af Update .gitreview for stable/2025.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + devstack/plugin.sh | 2 +- devstack/settings | 2 +- masakari/api/auth.py | 3 +- masakari/api/openstack/__init__.py | 4 +-- masakari/api/openstack/common.py | 2 +- masakari/api/openstack/wsgi.py | 2 +- masakari/{ => api}/wsgi.py | 0 masakari/service.py | 2 +- masakari/wsgi/__init__.py | 0 masakari/wsgi/api.py | 24 ++++++++++++++ .../add-masakari-wsgi-module-a5f5a649a2ec460c.yaml | 22 +++++++++++++ tox.ini | 10 +++--- 16 files changed, 79 insertions(+), 36 deletions(-)

1 0