July 2026 - Release-announce - lists.openstack.org

neutron-fwaas 22.0.1 (epoxy)
by no-reply＠openstack.org 21 Jul '26

21 Jul '26

We high-spiritedly announce the release of: neutron-fwaas 22.0.1 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/neutron-fwaas Download the package from: https://tarballs.openstack.org/neutron-fwaas/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. Changes in neutron-fwaas 22.0.0..22.0.1 --------------------------------------- 106b2ed88 Pass router_id to the _cleanup_nflog_process method addb861f2 Ensure default fw group, policies and rules exists e659e7350 Commit creation of the default FW group before listing them 7a8ccee5f [Devstack] Use correct function to enable fwaas logging L3 extension 49c0c369f Limit virtualenv<20.37.0,tox<4.44.0 to have "pkg_resources" 1cc8fb877 Switch to neutron-tempest-plugin-fwaas job for 2025.1 branch 3e94867ae Update TOX_CONSTRAINTS_FILE for stable/2025.1 242e0e8a8 Update .gitreview for stable/2025.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 6 +- devstack/plugin.sh | 2 +- neutron_fwaas/common/fwaas_constants.py | 10 ++ neutron_fwaas/db/firewall/v2/firewall_db_v2.py | 54 ++++++---- .../services/logapi/agents/drivers/iptables/log.py | 16 +-- .../logapi/agents/drivers/iptables/test_log.py | 3 +- .../unit/db/firewall/v2/test_firewall_db_v2.py | 109 ++++++++++++++++++--- tox.ini | 14 ++- 9 files changed, 163 insertions(+), 52 deletions(-)

1 0

os-ken 3.0.2 (epoxy)
by no-reply＠openstack.org 21 Jul '26

21 Jul '26

We are happy to announce the release of: os-ken 3.0.2 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/os-ken Download the package from: https://pypi.org/project/os-ken Please report issues through: https://storyboard.openstack.org/#!/project/openstack/os-ken For more details, please see below. Changes in os-ken 3.0.1..3.0.2 ------------------------------ 7dbd116e Accept empty "OXM" fields (tuple, list) 03c74875 Update TOX_CONSTRAINTS_FILE for stable/2025.1 4700aa67 Update .gitreview for stable/2025.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + os_ken/ofproto/oxx_fields.py | 5 ++++- tox.ini | 4 ++-- 4 files changed, 21 insertions(+), 5 deletions(-)

1 0

ovn-bgp-agent 4.0.1 (epoxy)
by no-reply＠openstack.org 21 Jul '26

21 Jul '26

We jubilantly announce the release of: ovn-bgp-agent 4.0.1 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/ovn-bgp-agent Download the package from: https://tarballs.openstack.org/ovn-bgp-agent/ Please report issues through: https://bugs.launchpad.net/ovn-bgp-agent/+bugs For more details, please see below. Changes in ovn-bgp-agent 4.0.0..4.0.1 ------------------------------------- 4f02cad Fix hacking checks from neutron-lib 3.21.1 51e1978 Ensure that bridge exist and UP before adding tables 9a36c38 Update TOX_CONSTRAINTS_FILE for stable/2025.1 edceb80 Update .gitreview for stable/2025.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- ovn_bgp_agent/drivers/openstack/nb_ovn_bgp_driver.py | 13 +++++++------ ovn_bgp_agent/drivers/openstack/ovn_bgp_driver.py | 2 ++ ovn_bgp_agent/drivers/openstack/utils/evpn.py | 9 +++++---- ovn_bgp_agent/drivers/openstack/utils/frr.py | 4 ++-- ovn_bgp_agent/drivers/openstack/utils/ovn.py | 17 +++++++++-------- ovn_bgp_agent/drivers/openstack/utils/wire.py | 5 ++++- .../unit/drivers/openstack/test_nb_ovn_bgp_driver.py | 15 +++++++++------ .../unit/drivers/openstack/utils/test_driver_utils.py | 3 +-- ovn_bgp_agent/utils/linux_net.py | 3 ++- tox.ini | 4 ++-- 15 files changed, 60 insertions(+), 42 deletions(-)

1 0

ovn-octavia-provider 8.1.0 (epoxy)
by no-reply＠openstack.org 21 Jul '26

21 Jul '26

We joyfully announce the release of: ovn-octavia-provider 8.1.0 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/ovn-octavia-provider Download the package from: https://tarballs.openstack.org/ovn-octavia-provider/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 8.1.0 ^^^^^ Upgrade Notes ************* * OVN Octavia provider load balancer VIP and additional VIP Neutron ports are now created with "device_id" set to "lb-<lb_id>" and "device_owner" set to "ovn-lb:vip". This matches the protection the Amphora driver has always provided and prevents other workloads (e.g. Nova instances) from attaching the VIP port, which would otherwise leave OVN NAT state for an attached floating IP inconsistent and break external access to the load balancer. Bug Fixes ********* * [bug 2110488 (https://bugs.launchpad.net/neutron/+bug/2110488) Fixed wrong endpoint information in Neutron client configuration. * [bug 2150682 (https://bugs.launchpad.net/neutron/+bug/2150682) OVN Octavia provider VIP ports were unprotected because they were created with empty "device_id" and "device_owner", allowing them to be attached to other workloads and breaking the load balancer (a stale "external_mac" could remain on the OVN NAT entry for the attached floating IP after the misuse, breaking external connectivity to the VIP). VIP ports created from now on are protected at creation time, and a new periodic maintenance task backfills the same fields on legacy OVN provider VIP ports created before this fix. Changes in ovn-octavia-provider 8.0.0..8.1.0 -------------------------------------------- 3fa13a7 [OVN] Protect LB VIP ports with device_id and device_owner 132ef20 [stable/2025.1] Fix flake8-import-order for modern setuptools dc900b2 Fix sync tool to pass lists to member CRUD actions e695548 Fix OVN DB sync when syncing an OVN LB from scratch 0aee7b4 Skip LB association to provider networks with localnet ports 5a3273c Member batch actions to increase performance ade0932 Optimize _get_current_operating_statuses to reduce octavia_lib calls 44e368c Reduce coverage threshold on stable branches f70e3a7 Ensure LB with HM rechecks member status after re-enable 92094c8 Patching Octavia LB pool removal issue and adding updated unit tests 0401ccb Respect passed arguments for Neutron client connection 1eeb1d1 Prepare to handle ha_chassis_group for LRP 820d758 Update TOX_CONSTRAINTS_FILE for stable/2025.1 20574a6 Update .gitreview for stable/2025.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + ovn_octavia_provider/common/clients.py | 12 +- ovn_octavia_provider/common/constants.py | 5 + ovn_octavia_provider/driver.py | 251 ++++---- ovn_octavia_provider/helper.py | 662 ++++++++++++++------- ovn_octavia_provider/maintenance.py | 84 +++ ovn_octavia_provider/ovsdb/impl_idl_ovn.py | 2 +- ...ron-client-interface-info-6a018cad49b5d240.yaml | 5 + ...t-ovn-lb-vip-port-2150682-7adb09b830065875.yaml | 22 + test-requirements.txt | 3 +- tox.ini | 6 +- 17 files changed, 1415 insertions(+), 462 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 879e5f0..cd7ad5a 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -9,2 +9 @@ coverage!=4.4,>=4.0 # Apache-2.0 -flake8-import-order>=0.18.0,<0.19.0 # LGPLv3 -python-subunit>=1.0.0 # Apache-2.0/BSD +flake8-import-order>=0.19.0 # LGPLv3

1 0

trove 23.1.0 (epoxy)
by no-reply＠openstack.org 21 Jul '26

21 Jul '26

We are pumped to announce the release of: trove 23.1.0 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/trove Download the package from: https://tarballs.openstack.org/trove/ Please report issues through: https://bugs.launchpad.net/trove/+bugs For more details, please see below. 23.1.0 ^^^^^^ New Features ************ * Allow creating configurations for disabled datastore versions. This improves the user experience by not forcing users with instances based on outdated datastore versions to upgrade. * Introduced a new configuration option "[DEFAULT]/cinder_client_version" with default value set as *3*. This allows operators to supply the intended version of Cinder API to interact with. Bug Fixes ********* * Fixes incorrect root status reporting. *root show* could report *"is_root_enabled": True* after root was disabled; the status now reflects the actual instance state while preserving *root_enabled_history* logic. * Logic for fetching Cinder API version has been fixed, and it no longer relies on the "[DEFAULT]/cinder_service_type" value. This allows to have a cinder_service_type defined as "block-storage", or any other name which is not versioned. * Fix PostgreSQL guest agent issues for password changes and access control. * Fix AttributeError when changing user passwords due to improper deserialization in PgSqlAdmin.change_passwords method. * Update grant_access and revoke_access methods to handle PostgreSQL changes: * Explicitly grant/revoke schema (public) access for PostgreSQL 14+ * Revoke CONNECT privilege from PUBLIC to ensure proper revocation * Ensure connection is made to specific database for grant/revoke operations in PostgreSQL 16+ * Fixes potential PostgreSQL shared memory exhaustion in mid-size deployments. Changes in trove 23.0.0..23.1.0 ------------------------------- 1b8990bf Handle Nova microversion >=2.47 in resize validation 8bab08e8 Missing upgrade implementation in PostgreSQL 8de2ef6d replace .values()[0] with .scalar() in _migrate_legacy_database 6353d480 Use version 3 of Cinder API by default 33ebb4f6 Allow upgrade to the same version dc313dfb Use compatible tempest tag for 2025.1 ubuntu jammy jobs 792470fd Fix PostgreSQL cinder backup failure due to lost backend connection 9f1e9382 Feature: allow configuration create for disabled datastores cef16772 Fix hardcoded WAL archive cleanup threshold in PostgreSQL cc3178dc CI: upgrade the backup base image to ubuntu 22.04 d46955c7 Postgres: Fix user password change and access 6128da27 Pin setuptools 0b346d62 Fix Keystone SSL verification handling in Trove service session 425dd8c0 Fix WAL archiving stall caused by partial archive files 2e76bee3 Inconsistent behavior after root disable af51f4ec Fix: Prevent config removal on instance update 4b9eadc3 Fix: Allow float values in KeyValueCodec f2227f74 Skip remaining Swift checks when not in use 32635dba pg_hba.conf not re-creating after rebuild in PostgreSQL 5340fbf5 Set ipc_mode to host to prevent potential shared memory exhaustion 433337c6 Fix PostgreSQL compatibility issues for versions greater than 15 d10a6d22 Add pyproject.toml to support pip 23.1 6c01b505 Cleanup setup.py 0db31401 Change settings for stable/2025.1 f977687c Fix bug: "TROVE_USE_MOD_WSGI" always TRUE. 049ca520 Drop logic for nova-network Diffstat (except docs and test files) ------------------------------------- api-ref/source/instances.inc | 39 ++++- api-ref/source/parameters.yaml | 6 + ...instance-put-detach-config-group-request-2.json | 5 + .../instance-put-detach-config-group-request.json | 3 + backup/Dockerfile | 2 +- backup/drivers/postgres.py | 27 +++- backup/utils/postgresql.py | 9 +- devstack/plugin.sh | 4 +- devstack/settings | 6 +- integration/scripts/conf/test_begin.conf | 1 - .../guest-agent/source-repository-guest-agent | 4 +- integration/scripts/localrc.rc | 14 +- integration/scripts/trovestack | 21 +-- integration/scripts/trovestack.rc | 9 +- playbooks/image-build/docker-registry.yaml | 4 +- pyproject.toml | 3 + ...n-for-disabled-datastores-764521e327152de3.yaml | 6 + .../notes/bug-root-disable-d675768d4e77b61f.yaml | 5 + .../cinder_client_version-f09caad9fd44b5a1.yaml | 13 ++ .../fix-postgres-access-127470577e5c5794.yaml | 15 ++ ...l-share-memory-exhaustion-b033973f1f83f3f0.yaml | 4 + requirements.txt | 2 +- setup.py | 13 +- tox.ini | 26 +++- trove/backup/models.py | 3 +- trove/common/cfg.py | 4 +- trove/common/clients_admin.py | 9 +- trove/common/stream_codecs.py | 2 + trove/configuration/service.py | 24 ++- trove/db/sqlalchemy/api.py | 2 +- ...7baf8_add_deleted_at_column_to_root_enabled_.py | 45 ++++++ trove/extensions/common/models.py | 15 +- trove/guestagent/common/guestagent_utils.py | 18 ++- trove/guestagent/datastore/manager.py | 3 +- trove/guestagent/datastore/mysql_common/service.py | 6 +- trove/guestagent/datastore/postgres/manager.py | 50 +++++- trove/guestagent/datastore/postgres/query.py | 15 ++ trove/guestagent/datastore/postgres/service.py | 169 +++++++++++++++++++-- trove/guestagent/utils/docker.py | 3 + trove/instance/models.py | 6 +- trove/instance/service.py | 13 +- trove/taskmanager/models.py | 22 ++- trove/templates/postgresql/config.template | 5 +- trove/templates/postgresql/validation-rules.json | 16 ++ .../configuration/test_configuration_controller.py | 20 +++ .../guestagent/datastore/postgres/test_manager.py | 104 ++++++++++--- .../guestagent/utils/test_guestagent_utils.py | 45 ++++++ zuul.d/jobs.yaml | 5 +- zuul.d/nodesets.yaml | 42 ++--- 57 files changed, 948 insertions(+), 176 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 4a39a3cc..93edec6d 100644 --- a/requirements.txt +++ b/requirements.txt @@ -6 +6 @@ alembic>=1.8.0 -pbr!=2.1.0,>=2.0.0 # Apache-2.0 +pbr>=6.0.0 # Apache-2.0

1 0

tap-as-a-service 15.0.1 (epoxy)
by no-reply＠openstack.org 21 Jul '26

21 Jul '26

We enthusiastically announce the release of: tap-as-a-service 15.0.1 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/tap-as-a-service Download the package from: https://pypi.org/project/tap-as-a-service Please report issues through: https://bugs.launchpad.net/tap-as-a-service/+bugs For more details, please see below. Changes in tap-as-a-service 15.0.0..15.0.1 ------------------------------------------ 0900f29 Filter service providers configuration by the service name e232a66 Fix issues related to pkg_resources module 5361d04 Update TOX_CONSTRAINTS_FILE for stable/2025.1 2122784 Update .gitreview for stable/2025.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + neutron_taas/services/taas/taas_plugin.py | 2 +- neutron_taas/services/taas/tap_mirror_plugin.py | 2 +- test-requirements.txt | 2 +- tox.ini | 9 ++++++--- 6 files changed, 11 insertions(+), 7 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index fbc643d..a3357c3 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -8 +8 @@ oslotest>=4.4.1 # Apache-2.0 -requests_mock>=1.5.0 # Apache-2.0 +requests-mock>=1.5.0 # Apache-2.0

1 0

python-neutronclient 11.4.1 (epoxy)
by no-reply＠openstack.org 21 Jul '26

21 Jul '26

We are excited to announce the release of: python-neutronclient 11.4.1 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/python-neutronclient Download the package from: https://pypi.org/project/python-neutronclient Please report issues through: https://bugs.launchpad.net/python-neutronclient/+bugs For more details, please see below. Changes in python-neutronclient 11.4.0..11.4.1 ---------------------------------------------- 77e4e01 v2_0: Use 'bindings' when listing port bindings 5f7de3d Update TOX_CONSTRAINTS_FILE for stable/2025.1 f6291a2 Update .gitreview for stable/2025.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + neutronclient/v2_0/client.py | 2 +- tox.ini | 6 +++--- 3 files changed, 5 insertions(+), 4 deletions(-)

1 0

neutron 26.0.5 (epoxy)
by no-reply＠openstack.org 21 Jul '26

21 Jul '26

We are thrilled to announce the release of: neutron 26.0.5 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/neutron Download the package from: https://tarballs.openstack.org/neutron/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 26.0.5 ^^^^^^ Bug Fixes * RPC workers now use "BaseOvnIdl" and "BaseOvnSbIdl" instead of the monitoring IDL classes ("OvnNbIdl", "OvnSbIdl") when connecting to the OVN northbound and southbound databases. This prevents RPC workers from processing OVN database notification events that are only relevant to the API workers, reducing unnecessary overhead and avoiding potential event handling errors. For more information, see bug 2158611 (https://launchpad.net/bugs/2158611) Changes in neutron 26.0.4..26.0.5 --------------------------------- e3ea5df10f ovn: Skip LSP host info update for router ports 59b2d02a86 ovn: read LSP ``up`` state from IDL cache in ``update_lsp_host_info`` 75b8da4352 [OVN] Check if the LSP is present when setting the port UP d039edc05f rpc/ovn: Use base OVN IDL for RPC workers, disable notification events fa7e294a23 segments: Catch RP not found in ``_delete_nova_inventory`` 4a63864c7b ovn: Fix HA_Chassis_Group race condition in port create/update f2d28a7261 [UT] Update base_mac config override Diffstat (except docs and test files) ------------------------------------- neutron/common/ovn/utils.py | 32 +++++++++++++---- .../drivers/ovn/mech_driver/ovsdb/impl_idl_ovn.py | 7 ++-- .../drivers/ovn/mech_driver/ovsdb/ovn_client.py | 24 ++++++++++--- neutron/services/segments/plugin.py | 7 ++-- .../ovn/mech_driver/ovsdb/test_ovn_client.py | 22 +++++++++++- ...cworker-idl-notifications-17c312ad56b24424.yaml | 10 ++++++ 8 files changed, 127 insertions(+), 17 deletions(-)

1 0

networking-generic-switch 7.6.0 (epoxy)
by no-reply＠openstack.org 20 Jul '26

20 Jul '26

We are delighted to announce the release of: networking-generic-switch 7.6.0 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/networking-generic-switch Download the package from: https://pypi.org/project/networking-generic-switch Please report issues through: https://bugs.launchpad.net/networking-generic-switch/+bugs For more details, please see below. 7.6.0 ^^^^^ Bug Fixes * Add bond trunk commands so LACP bond trunk ports are supported on Dell OS10 switches. * Fixes incorrect instantiations of GenericSwitchNotSupported exceptions. See LP#2147055 for details. * Fixed incorrect command when unplugging bond subports. Previously, when a bond was unplugged from a network with trunk subports, the system would incorrectly try to add subports instead of removing them. This bug has been fixed, and the system now uses the correct command to remove subports, ensuring proper bond cleanup. Changes in networking-generic-switch 7.5.0..7.6.0 ------------------------------------------------- d00e900 Sanitise secret config field 98fab22 Add Dell OS10 bond trunk support cca6f54 Fix GenericSwitchNotSupported exceptions 68464a4 CI: Temporary setuptools pin 1067c92 Use upper constraints in pep8 job 2481e27 Fix incorrect command when unplugging bond subports 10c91e3 Cast numeric Netmiko kwargs to native types. b849617 Correctly set use_keys when key_file is set af6c3ef Update TOX_CONSTRAINTS_FILE for stable/2025.1 35abafe Update .gitreview for stable/2025.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + devstack/plugin.sh | 1 + .../devices/netmiko_devices/__init__.py | 27 +++++++++++++++- .../devices/netmiko_devices/dell.py | 37 ++++++++++++++++++++++ networking_generic_switch/devices/utils.py | 2 +- networking_generic_switch/generic_switch_mech.py | 9 +++--- .../dell-os10-bond-trunk-8df03c8490ee94b0.yaml | 5 +++ ...chnotsupported-exceptions-80fcdcaadb16ca7b.yaml | 7 ++++ ...unplugging-trunk-subports-66d8496b43c55130.yaml | 8 +++++ tox.ini | 10 +++--- 13 files changed, 125 insertions(+), 11 deletions(-)

1 0

oslo.config 9.7.2 (epoxy)
by no-reply＠openstack.org 20 Jul '26

20 Jul '26

We are satisfied to announce the release of: oslo.config 9.7.2 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/oslo.config Download the package from: https://pypi.org/project/oslo.config Please report issues through: https://bugs.launchpad.net/oslo.config/+bugs For more details, please see below. Changes in oslo.config 9.7.1..9.7.2 ----------------------------------- 485b600 Fix concurrent access crash in _all_opt_infos() ea67a1b Update TOX_CONSTRAINTS_FILE for stable/2025.1 40318da Update .gitreview for stable/2025.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + oslo_config/cfg.py | 6 +++--- tox.ini | 4 ++-- 3 files changed, 6 insertions(+), 5 deletions(-)

1 0