July 2026 - Release-announce - lists.openstack.org

ironic-python-agent-builder 6.0.1 (epoxy)
by no-reply＠openstack.org 20 Jul '26

20 Jul '26

We are delighted to announce the release of: ironic-python-agent-builder 6.0.1 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/ironic-python-agent-builder Download the package from: https://tarballs.openstack.org/ironic-python-agent-builder/ Please report issues through: https://bugs.launchpad.net/ironic-python-agent-builder/+bugs For more details, please see below. 6.0.1 ^^^^^ Bug Fixes * Fixes firmware cleanup to be a bit more defensive and also be more open to allowing for "glob expansion" as it relates to cleaning up files. Ultimately this change fixes firmware cleanup so remnents are not left in the image where previously some artifacts were not deleted due to prior defensiveness in the cleanup logic. The net result is smaller images for booting IPA. Changes in ironic-python-agent-builder 6.0.0..6.0.1 --------------------------------------------------- 5eca416 Pin setuptools in the requirements.txt copied from IPA 76741a4 ci: Pin setuptools to a range that still ships 5f42c76 Exclude unnecessary firmewares 5329e34 Add additional firmware images which are not needed 6da8380 Add Mellanox Spectrum to firmware to remove list 146f281 Fix firmware cleanup - more. dec0a94 Allow dib build to remove firmware in a structure. a65cd96 Don't install biosdevname in arm64/aarch64 arches d477fe2 Update TOX_CONSTRAINTS_FILE for stable/2025.1 f38a1ed Update .gitreview for stable/2025.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + dib/extra-hardware/package-installs.yaml | 2 +- .../environment.d/10-defaults.bash | 20 ++++++++++++- .../post-install.d/99-remove-extra-packages | 35 ++++++++++++++++++++-- ...irmware-cleanup-revisited-3047b3bf415bc91c.yaml | 9 ++++++ tinyipa/build-tinyipa.sh | 3 ++ tox.ini | 3 +- 7 files changed, 68 insertions(+), 5 deletions(-)

1 0

ironic 29.0.6 (epoxy)
by no-reply＠openstack.org 20 Jul '26

20 Jul '26

We are glad to announce the release of: ironic 29.0.6 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through: https://bugs.launchpad.net/ironic/+bugs For more details, please see below. 29.0.6 ^^^^^^ Known Issues ************ * System operators should note that changing the owner field on a node does not affect its child or parent nodes, potentially resulting in these nodes being in different projects. Upgrade Notes ************* * Adds an upgrade check that issues a warning when any node has a different owner from its parent node. Deprecation Notes ***************** * The node "driver_info" field value "pxe_template" has been deprecated and is expected to be removed in the future Ironic 2027.2 release. Security Issues *************** * Addresses a potential security issues where an admin of a project could create nodes with "parent_node" set to a node from a different project. * Prevents changing the "node_uuid" of ports, port groups, volume targets, and volume connectors to point to a node with a different owner from the initial node. In some cases this is not normally permitted due to the database model, but additional access checking was added across these similar resources for consistency in the event the Ironic project fixes 12150252 (https://bugs.launchpad.net/ironic/+bug/2150252) * Fixes CVE-2026-48681 which was a lack of file path validation when interacting with ISO9660 files in the kickstart/anaconda driver, and administrative deployment ISOs which are admin-provided. Ironic now explicitly rejects the submitted files when such a case has been detected. * Disable installation of bootloaders (via grub-install) by IPA by default in order to improve security posture by adding a new agent configuration option *enable_bios_bootloader_install* which defaults to *True* for this branch of Ironic. Operators who have a stricter security posture or do not need this functionality can disable installation of bootloaders by setting *enable_bios_bootloader_install* to *False*. Addresses CVE-2026-43003. * The IPMI Vendor-Passthru interface method "send_raw" step has been disabled by default due to security implications. A malicious user with sufficient Ironic access could utilzie this interface to make manual changes to BMCs when the "ipmitool" vendor-passthru interface was enabled. * Fixes a vulnerability where security proxy could be crashed if attacker controls host VNC server. The exploit requires that VNC server first informs the client that there is 0 security types available and then sends a reason with reason length for this. There is no checks for reason length, so the attacker can make the security proxy to reserve up to 4 GB of memory and causing it to crash. The security proxy is shared between all tenants, so crashing the proxy denies console access for all tenants. More information in the bug description bug 2155052 (https://bugs.launchpad.net/ironic/+bug/2155052) * Fixes a security issue where a malicious 'kernel_append_params' in a node's 'instance_info' or 'driver_info' could cause an attacker to take control of a node's initial boot through boot script injection. The fix includes sanitization of 'kernel_append_params' to prevent such injection. Strict parsing of kernel parameters is now in place as well and enabled by default. If an operator needs to disable such strict parsing they may do so by setting the configuration option conductor.disable_kernel_parameter_parsing to 'True'. However, this is discouraged as it weakens the security posture of Ironic. This fix addresses CVE-2026-46447. This back-port utilizes a generated, stand-alone lark parser governed by the MPL v2.0 license. * A vulnerability was discovered in an minimally documented feature of Ironic where an absolute path to a "pxe_template" override value could be defined by an authenticated and privilged API user. The Ironic team has chosen to immediately deprecate and remove this functionality. To provide an immediate security fix, this functionality is now disabled by default. The functionality can be re-enabled via the "[pxe]enable_insecure_template_override" configuration option which was added to ironic.conf with a default value of "False". This issue is tracked as bug 2148319 (https://bugs.launchpad.net/ironic/+bug/2148319) * The volume target "properties" field can contain sensitive iSCSI connection details, including CHAP authentication credentials. A contributor identified that the "baremetal:volume:view_target_properties" RBAC policy check was not applied to "PATCH" responses. During review, the ironic core security team determined that RBAC policy enforcement alone was insufficient since standalone deployments do not have RBAC support. The fix was updated in line with code reviewer feedback to add secondary scrubbing of the "properties" field in all cases using "mask_dict_password", ensuring password-like values are masked in all API responses unconditionally. Bug Fixes ********* * The "[pxe]pxe_bootfile_name_by_arch" and "[pxe]ipxe_bootfile_name_by_arch" options now support composite keys in the format "arch-boot_mode" (e.g. "x86_64-bios:undionly.kpxe", "x86_64-uefi:snponly.efi"). The composite key is tried first, then the arch-only key as a fallback, preserving backward compatibility. Previously it was not possible to specify different boot files for the same architecture in different boot modes (e.g. x86_64 in both UEFI and BIOS), because the boot mode check was skipped when a by- arch entry matched. Fixes bug 2157027 (https://bugs.launchpad.net/ironic/+bug/2157027) * Fixes path handling around ISO9660 file handling as denoted in bug 2148333 (https://bugs.launchpad.net/ironic/+bug/2148333) under CVE-2026-48681 where a malicious user with deployment privilges could craft an ISO9660 formatted configuration drive or deployment ramdisk which includes intentional path manipulation which is non- compliant with the underlying standard. Ironic now explicitly looks for such attempts and rejects the content. * Fixes a bug where ironic allowed the ability for operators to send raw commands when the "ipmitool" vendor interface was enabled and configured for a baremetal node utilizing the IPMI protocol. The Ironic project generally recommends the use of "redfish" instead of IPMI, however recognizes that is not universally possible for all operators. More information can be found in bug 2150458 (https://bugs.launchpad.net/ironic/+bug/2150458) * Fixes security issue identified in bug 2148307 (https://bugs.launchpad.net/ironic/+bug/2148307) where users of the anaconda deployment interface could supply a malicious template. The conductor process now sandboxes all jinja2 rendering operations. * Fixes an issue in the url handling logic of instance deploy logic where file paths validity was not checked upfront, and the conductor service would directly begin calculating checksums. This highlighted a DoS issue where an attacker could exhaust conductor threads by attempting to request, "file:///dev/zero", which would never return the thread. This is because file URLs don't require downloading first, and validity checking logic was all in the file access logic, not checksum logic. Ironic now explicitly invokes the URL/validity checking logic prior to calling the checksum logic which effectively prevents this issue. This issue is tracked as CVE-2026-44919. * Fixes a vulnerability where security proxy could be crashed if the VNC server sends unreasonable large reason length. The security proxy is shared between all tenants, so crashing the proxy denies console access for all tenants. More information in the bug description bug 2155052 (https://bugs.launchpad.net/ironic/+bug/2155052) * Fixes a vulnerability (CVE-2026-44917) which was identified inhandling of pxe_template overrides where an authenticated and authorized user could request an override template via direct file path which would bypass file URL handling guards introduced in OSSA-2025-001. This feature was minimally documented through only a release note, and does not appear to have actual use. This functionality is being disabled by default, and will be promptly removed from Ironic's current development branch. * Neutron port operations now always use service credentials from config, rather than the user's token context. This prevents ports being created with an unexpected project id (e.g. the project id of the user's context). * The "PATCH" endpoint for volume targets now applies the "baremetal:volume:view_target_properties" RBAC policy check to its response payload, consistent with the "GET" endpoints. Additionally, the "properties" field is now scrubbed using "mask_dict_password" to mask any password-like keys, providing defense-in-depth independent of RBAC policy enforcement. Changes in ironic 29.0.5..29.0.6 -------------------------------- 17d566791 Use service auth for Neutron port operations 54e4cf7a4 CVE-2026-44918: Prevent rehoming resources to nodes with different owner dd8c84f51 security: block vendor.send_raw (CVE-2026-54423) 4d5a3da4f Fix bootfile_name_by_arch to consider boot mode c5f2ced12 Add operator-configurable step disallow lists 416ebf2bd Add an agent flag to disable installing boatloaders 7c00fdb88 Fix kernel parameter parsing for quoted values and whitespace 49bff4c09 Security: Fix sensitive properties returned on volume targets 0768080c5 Set bound for failure reason from RFB 769bcc2e4 security: disable driver_info level pxe_template override fbe121c2a security: directory transversal ISO9660 support d94a1990f Ensure kernel_append_params are valid kernel parameters 607c5f734 [stable-only][ci] Remove non-voting, obsolete jobs 97f75b2e7 security: move file url validation up into deploy_utils main path 8e54f49f9 security: Use sandbox rendering for jinja2 Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 9 +- LICENSE | 2 + ironic/api/controllers/v1/node.py | 54 +- ironic/api/controllers/v1/port.py | 18 +- ironic/api/controllers/v1/portgroup.py | 21 +- ironic/api/controllers/v1/ramdisk.py | 1 + ironic/api/controllers/v1/utils.py | 76 +- ironic/api/controllers/v1/volume_connector.py | 21 +- ironic/api/controllers/v1/volume_target.py | 51 +- ironic/cmd/status.py | 37 + ironic/common/exception.py | 13 + ironic/common/image_service.py | 3 +- ironic/common/images.py | 11 +- ironic/common/kernel_parameter_parser/__init__.py | 0 ironic/common/kernel_parameter_parser/grammar.g | 44 + .../kernel_parameter_parser.py | 3572 ++++++++++++++++++++ ironic/common/kernel_parameters.py | 158 + ironic/common/kickstart_utils.py | 5 + ironic/common/neutron.py | 4 +- ironic/common/pxe_utils.py | 2 + ironic/common/utils.py | 42 +- ironic/conductor/manager.py | 28 +- ironic/conductor/steps.py | 58 +- ironic/conf/agent.py | 8 + ironic/conf/api.py | 71 + ironic/conf/conductor.py | 12 + ironic/conf/pxe.py | 23 +- ironic/console/securityproxy/rfb.py | 9 +- ironic/drivers/modules/deploy_utils.py | 84 +- ironic/drivers/utils.py | 22 +- .../unit/api/controllers/v1/test_volume_target.py | 166 + .../unit/drivers/modules/test_deploy_utils.py | 162 +- .../notes/2150450-owners-b4019d5fa63a8bc1.yaml | 21 + ...h-boot-mode-composite-key-2b0a10764f3b71a9.yaml | 13 + .../notes/bug-2148333-b3a74b813eea7dab.yaml | 17 + ...ng-bootloaders-by-default-4a3c69777069587c.yaml | 11 + .../notes/disable_send_raw-f92217bf07c3eb38.yaml | 20 + .../notes/fix-bug-2148307-ddf0b4d69244e86e.yaml | 8 + .../fix-file-url-validation-5fb819ef5ae74ddc.yaml | 15 + ...-text-resource-exhaustion-5fc9485d9b0d6698.yaml | 19 + ...tize-kernel-append-params-8b2953a9d903d0f6.yaml | 14 + .../security-bug-2148319-49974afdcd38d9c0.yaml | 28 + ...r-neutron-port-operations-03c8349ee5c06e3b.yaml | 6 + ...dact-sensitive-properties-041818005cac008f.yaml | 21 + tox.ini | 2 +- zuul.d/project.yaml | 65 - 59 files changed, 6282 insertions(+), 266 deletions(-)

1 0

designate-dashboard 20.0.1 (epoxy)
by no-reply＠openstack.org 20 Jul '26

20 Jul '26

We are overjoyed to announce the release of: designate-dashboard 20.0.1 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/designate-dashboard Download the package from: https://tarballs.openstack.org/designate-dashboard/ Please report issues through: https://bugs.launchpad.net/designate-dashboard/+bugs For more details, please see below. Changes in designate-dashboard 20.0.0..20.0.1 --------------------------------------------- 1a26eb1 Fix undefined in success toast for update calls 898c1e9 Check description before using it in update_zone() 58a6cb0 Imported Translations from Zanata cc0efb2 Update TOX_CONSTRAINTS_FILE for stable/2025.1 c9f458a Update .gitreview for stable/2025.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + designatedashboard/api/rest/designate.py | 3 +- designatedashboard/locale/ru/LC_MESSAGES/django.po | 13 +-- .../os-designate-floatingip/actions/set.service.js | 4 +- .../actions/update.service.js | 4 +- .../os-designate-zone/actions/update.service.js | 4 +- .../source/locale/cs/LC_MESSAGES/releasenotes.po | 30 ------ .../source/locale/de/LC_MESSAGES/releasenotes.po | 57 ----------- .../locale/en_GB/LC_MESSAGES/releasenotes.po | 112 --------------------- .../source/locale/fr/LC_MESSAGES/releasenotes.po | 31 ------ .../source/locale/id/LC_MESSAGES/releasenotes.po | 30 ------ .../source/locale/ja/LC_MESSAGES/releasenotes.po | 30 ------ .../locale/ko_KR/LC_MESSAGES/releasenotes.po | 30 ------ .../source/locale/ne/LC_MESSAGES/releasenotes.po | 30 ------ .../locale/pt_BR/LC_MESSAGES/releasenotes.po | 31 ------ .../source/locale/ru/LC_MESSAGES/releasenotes.po | 28 ------ .../locale/zh_CN/LC_MESSAGES/releasenotes.po | 30 ------ tox.ini | 2 +- 18 files changed, 17 insertions(+), 453 deletions(-)

1 0

python-ironicclient 5.10.3 (epoxy)
by no-reply＠openstack.org 20 Jul '26

20 Jul '26

We are pleased to announce the release of: python-ironicclient 5.10.3 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/python-ironicclient Download the package from: https://pypi.org/project/python-ironicclient Please report issues through: https://bugs.launchpad.net/python-ironicclient/+bugs For more details, please see below. Changes in python-ironicclient 5.10.2..5.10.3 --------------------------------------------- 6ad50ee [stable only] pin setuptools to fix pkg_resources errors 6e0c3ed Fix parallel initial version negotiation Diffstat (except docs and test files) ------------------------------------- ironicclient/common/http.py | 6 +++++- tox.ini | 4 +++- 2 files changed, 8 insertions(+), 2 deletions(-)

1 0

cloudkitty-dashboard 20.0.1 (epoxy)
by no-reply＠openstack.org 20 Jul '26

20 Jul '26

We are excited to announce the release of: cloudkitty-dashboard 20.0.1 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/cloudkitty-dashboard Download the package from: https://pypi.org/project/cloudkitty-dashboard Please report issues through: https://storyboard.openstack.org/#!/project/openstack/cloudkitty- dashboard For more details, please see below. Changes in cloudkitty-dashboard 20.0.0..20.0.1 ---------------------------------------------- 5dbc016 Replace deprecated is_ajax call. This fixes the broken /project/rating endpoint 77f0953 Constrain setuptools<82 due to pkg_resources deprecation 9a9dd5e Update TOX_CONSTRAINTS_FILE for stable/2025.1 7667eb1 Update .gitreview for stable/2025.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + build-constraints.txt | 1 + cloudkittydashboard/dashboards/project/rating/views.py | 2 +- tools/pip.sh | 3 +++ tox.ini | 16 ++++++++++++---- 6 files changed, 20 insertions(+), 7 deletions(-)

1 0

cloudkitty 22.1.0 (epoxy)
by no-reply＠openstack.org 20 Jul '26

20 Jul '26

We are happy to announce the release of: cloudkitty 22.1.0 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/cloudkitty Download the package from: https://pypi.org/project/cloudkitty Please report issues through: https://storyboard.openstack.org/#!/project/openstack/cloudkitty For more details, please see below. 22.1.0 ^^^^^^ New Features ************ * A new module, "cloudkitty.wsgi", has been added as a place to gather WSGI "application" objects. This is intended to ease deployment by providing a consistent location for these objects. For example, if using uWSGI then instead of: [uwsgi] wsgi-file = /bin/cloudkitty-api You can now use: [uwsgi] module = cloudkitty.wsgi.api:application This also simplifies deployment with other WSGI servers that expect module paths such as gunicorn. Upgrade Notes ************* * The WSGI script "cloudkitty-api" has been removed. Deployment tooling should instead reference the Python module path for the wsgi module in CloudKitty, "cloudkitty.wsgi.api:application" if their chosen WSGI server supports this (gunicorn, uWSGI, etc.) or implement a .wsgi script themselves if not (mod_wsgi). Security Issues *************** * Previously, cloudkitty-api recorded request token in plain text format when a request does not comply with policy rules or debug log is enabled. This has been fixed and now token is masked in logs. Bug Fixes ********* * Fix request to Elasticsearch/OpenSearch that has potentially not the correct type. Changes in cloudkitty 22.0.0..22.1.0 ------------------------------------ 2fee74e Fix elasticsearch & opensearch requests 2eb9a6a Hide credentials in contexts from logs 22f6f3b Add wsgi module to cloudkitty dccd389 Update TOX_CONSTRAINTS_FILE for stable/2025.1 0a40a71 Update .gitreview for stable/2025.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + cloudkitty/common/policy.py | 15 +++++++---- cloudkitty/storage/v2/elasticsearch/client.py | 3 +++ cloudkitty/storage/v2/opensearch/client.py | 3 +++ cloudkitty/wsgi/__init__.py | 0 cloudkitty/wsgi/api.py | 24 ++++++++++++++++++ devstack/plugin.sh | 2 +- .../notes/fix-elasticsearch-a9a37443f81b3a79.yaml | 5 ++++ .../hide-token-from-log-e29066d6c93f3ed4.yaml | 6 +++++ .../remove-wsgi-scripts-27d0da6926c2127c.yaml | 29 ++++++++++++++++++++++ tox.ini | 4 +-- 13 files changed, 98 insertions(+), 8 deletions(-)

1 0

magnum 20.0.2 (epoxy)
by no-reply＠openstack.org 20 Jul '26

20 Jul '26

We are amped to announce the release of: magnum 20.0.2 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/magnum Download the package from: https://tarballs.openstack.org/magnum/ Please report issues through: https://bugs.launchpad.net/magnum/+bugs For more details, please see below. 20.0.2 ^^^^^^ New Features ************ * Add a validation for the case when boot_volume_size label and flavor's disk are both zero. Bug Fixes ********* * The boot_volume_size label value is passed as a string from the API. The validator now converts it to an integer before comparison. Changes in magnum 20.0.1..20.0.2 -------------------------------- 907b8427 Ensure cluster template can be created with no labels 50aa89ef devstack: Add function to copy kubeconfig from d-p-c k8s-capi 7937d01d CI: Don't use m-t-p job from master 727b1d8f Cache nodegroups per Cluster object instance 58b0f2cf Fix per request RPCClient construction eb2e8566 Fix repeated keystone re-auth on every policy enforcement 075f62e8 fix TypeError when boot_volume_size label is passed as string a47df4be add validation for boot volume size 913a3e00 [stable-2025.1-only] CI: Fix docs job Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 68 ++-------------------- devstack/lib/magnum | 9 ++- devstack/plugin.sh | 5 ++ magnum/api/attr_validator.py | 24 ++++++++ magnum/api/controllers/v1/cluster.py | 41 ++++++++++++- magnum/api/controllers/v1/cluster_template.py | 24 ++++++++ magnum/api/controllers/v1/nodegroup.py | 21 +++++++ magnum/common/exception.py | 5 ++ magnum/common/policy.py | 31 ++++++++-- magnum/common/rpc_service.py | 40 +++++++++++-- magnum/db/sqlalchemy/api.py | 25 ++++++-- magnum/objects/cluster.py | 56 +++++++++++++++--- .../api/controllers/v1/test_cluster_template.py | 51 ++++++++++++++++ .../unit/api/controllers/v1/test_nodegroup.py | 9 +++ ...dd-boot-volume-size-check-0262c2b61abc7ccf.yaml | 5 ++ ...ot-volume-size-label-type-a5625def4c6db32b.yaml | 5 ++ tox.ini | 1 + 21 files changed, 410 insertions(+), 89 deletions(-)

1 0

oslo.config 10.6.0 (hibiscus)
by no-reply＠openstack.org 16 Jul '26

16 Jul '26

We are gleeful to announce the release of: oslo.config 10.6.0 This release is part of the hibiscus release series. The source is available from: https://opendev.org/openstack/oslo.config Download the package from: https://pypi.org/project/oslo.config Please report issues through: https://bugs.launchpad.net/oslo.config/+bugs For more details, please see below. 10.6.0 ^^^^^^ New Features * "ConfigOpts" instances can now export and import a serialized state and use that state for pickle serialization. This allows configuration state to be passed to multiprocessing workers that use the "spawn" start method. The serialized state preserves registered options and groups, parsed command-line and config-file values, defaults, overrides, and setup metadata. Process-local helpers such as argparse parsers, caches, extension managers, mutation hooks, and environment drivers are intentionally excluded from the serialized state. Loaded configuration source objects are rejected with "ConfigOptsSerializationError" instead of being silently dropped. Changes in oslo.config 10.5.0..10.6.0 ------------------------------------- 0297093 Name ConfigOpts serialized state version 68f3d39 ruff: Enable log-related checks 4c77204 Support ConfigOpts state snapshots for spawn workers 6635ee6 zuul: Use openstack-python3-next-jobs template e4f0766 pre-commit: Bump versions a0725f1 Run doc8 dd0f9d5 Do not install code to build release notes 75eeb37 Loose validation for schemes 7a5d776 Better support Sphinx doc generation with custom option types a4eccbf typing: Accept Sequence to ConfigOpts.__call__ Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 9 +- .zuul.yaml | 3 + oslo_config/cfg.py | 304 ++++++++++++- oslo_config/sphinxconfiggen.py | 2 +- oslo_config/sphinxext.py | 11 +- oslo_config/types.py | 4 +- oslo_config/validator.py | 21 +- pyproject.toml | 2 +- ...gopts-serialization-spawn-9f6d3a1c2b4e5f70.yaml | 14 + tox.ini | 2 +- 13 files changed, 878 insertions(+), 26 deletions(-)

1 0

oslo.concurrency 7.6.1 (hibiscus)
by no-reply＠openstack.org 16 Jul '26

16 Jul '26

We eagerly announce the release of: oslo.concurrency 7.6.1 This release is part of the hibiscus release series. The source is available from: https://opendev.org/openstack/oslo.concurrency Download the package from: https://pypi.org/project/oslo.concurrency Please report issues through: https://bugs.launchpad.net/oslo.concurrency/+bugs For more details, please see below. Changes in oslo.concurrency 7.6.0..7.6.1 ---------------------------------------- 4b8f9f6 Add basic ReaderWriterLock tests 9dae0eb Restore ReadWriterLock writer exclusiveness in eventlet 5caf1b7 Reproduce bug/2160596 Diffstat (except docs and test files) ------------------------------------- oslo_concurrency/lockutils.py | 7 -- 2 files changed, 105 insertions(+), 7 deletions(-)

1 0

neutron-lib 4.2.0 (hibiscus)
by no-reply＠openstack.org 16 Jul '26

16 Jul '26

We are psyched to announce the release of: neutron-lib 4.2.0 This release is part of the hibiscus release series. The source is available from: https://opendev.org/openstack/neutron-lib Download the package from: https://pypi.org/project/neutron-lib Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. Changes in neutron-lib 4.1.0..4.2.0 ----------------------------------- eb6427ff Remove unused VPN exception classes 129d3996 Remove unused firewall v2 exception classes bff18fc0 Remove unused ``DuplicateMeteringRuleInPost`` and ``InvalidPTRZoneConfiguration`` 26279a5c Remove unused exception classes c66fe838 Remove testing of [oslo_policy] enforce_scope = False a215cd12 hacking: Remove N524 ``check_no_contextlib_nested`` c024c436 Remove unused ``DBAPIContextManagerFixture`` 0206cb6d adjust required Python to 3.11 and newer 4fff3890 Add is_filter to PVLAN attributes d81239ec [FWaaS] Set 'is_filter' for the attributes which allows filtering 47920493 Allow filtering by security groups "stateful" 2010f464 zuul: Use openstack-python3-next-jobs template 57616f6d pre-commit: Bump versions 1af691d0 Fix no-else-return pylint warnings 743bfb4b Fix unnecessary-pass pylint warnings 056feb26 Fix superfluous-parens pylint warnings 230d219d typing: Add types for ACTION_MAP b8010afe typing: Add types for SUB_RESOURCE_ATTRIBUTE_MAP aa674e6c typing: Add types for RESOURCE_ATTRIBUTE_MAP Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 6 +- .pylintrc | 5 - .zuul.yaml | 3 + HACKING.rst | 1 - neutron_lib/agent/l2_extension.py | 1 - neutron_lib/api/converters.py | 8 +- neutron_lib/api/definitions/_dummy.py | 13 ++- .../api/definitions/aap_reject_multicast.py | 11 ++- neutron_lib/api/definitions/address_group.py | 6 +- neutron_lib/api/definitions/address_scope.py | 12 ++- neutron_lib/api/definitions/agent.py | 13 ++- .../api/definitions/agent_resources_synced.py | 6 +- neutron_lib/api/definitions/agent_sort_key.py | 14 ++- neutron_lib/api/definitions/allowedaddresspairs.py | 11 ++- .../api/definitions/auto_allocated_topology.py | 11 ++- neutron_lib/api/definitions/availability_zone.py | 12 ++- .../api/definitions/availability_zone_filter.py | 12 ++- neutron_lib/api/definitions/bgp.py | 6 +- neutron_lib/api/definitions/bgp_4byte_asn.py | 5 +- .../api/definitions/bgp_dragentscheduler.py | 5 +- neutron_lib/api/definitions/bgpvpn.py | 16 ++-- .../api/definitions/bgpvpn_routes_control.py | 15 +-- neutron_lib/api/definitions/bgpvpn_stdattrs.py | 11 ++- .../api/definitions/bgpvpn_stdattrs_net_assoc.py | 11 ++- .../api/definitions/bgpvpn_stdattrs_port_assoc.py | 11 ++- .../definitions/bgpvpn_stdattrs_router_assoc.py | 11 ++- neutron_lib/api/definitions/bgpvpn_vni.py | 27 ++++-- neutron_lib/api/definitions/data_plane_status.py | 14 +-- neutron_lib/api/definitions/default_subnetpools.py | 11 ++- neutron_lib/api/definitions/dhcpagentscheduler.py | 11 ++- neutron_lib/api/definitions/dns.py | 11 ++- neutron_lib/api/definitions/dns_domain_keywords.py | 11 ++- neutron_lib/api/definitions/dns_domain_ports.py | 13 ++- neutron_lib/api/definitions/dvr.py | 11 ++- neutron_lib/api/definitions/ecmp_routes.py | 12 ++- .../api/definitions/empty_string_filtering.py | 12 ++- neutron_lib/api/definitions/evpn.py | 14 ++- .../api/definitions/expose_l3_conntrack_helper.py | 11 ++- .../definitions/expose_port_forwarding_in_fip.py | 11 ++- neutron_lib/api/definitions/external_net.py | 11 ++- neutron_lib/api/definitions/extra_dhcp_opt.py | 11 ++- neutron_lib/api/definitions/extraroute.py | 11 ++- neutron_lib/api/definitions/extraroute_atomic.py | 5 +- neutron_lib/api/definitions/filter_validation.py | 12 ++- neutron_lib/api/definitions/fip_distributed.py | 11 ++- neutron_lib/api/definitions/fip_pf_description.py | 11 ++- neutron_lib/api/definitions/fip_pf_detail.py | 12 ++- neutron_lib/api/definitions/fip_pf_port_range.py | 19 ++-- neutron_lib/api/definitions/fip_port_details.py | 11 ++- neutron_lib/api/definitions/firewall_v2.py | 71 ++++++++------ .../api/definitions/firewall_v2_stdattrs.py | 11 ++- neutron_lib/api/definitions/flavors.py | 12 ++- .../api/definitions/floating_ip_port_forwarding.py | 16 ++-- .../definitions/floatingip_autodelete_internal.py | 12 ++- neutron_lib/api/definitions/floatingip_pools.py | 11 ++- neutron_lib/api/definitions/flowclassifier.py | 14 +-- neutron_lib/api/definitions/ip_allocation.py | 11 ++- .../api/definitions/ip_substring_port_filtering.py | 13 ++- neutron_lib/api/definitions/l2_adjacency.py | 11 ++- neutron_lib/api/definitions/l3.py | 5 +- .../l3_agent_scheduler_ha_chassis_priority.py | 11 ++- neutron_lib/api/definitions/l3_conntrack_helper.py | 14 ++- .../api/definitions/l3_enable_default_route_bfd.py | 11 ++- .../definitions/l3_enable_default_route_ecmp.py | 11 ++- neutron_lib/api/definitions/l3_ext_gw_mode.py | 11 ++- .../api/definitions/l3_ext_gw_multihoming.py | 14 ++- neutron_lib/api/definitions/l3_ext_ha_mode.py | 11 ++- neutron_lib/api/definitions/l3_ext_ndp_proxy.py | 11 ++- neutron_lib/api/definitions/l3_flavors.py | 11 ++- neutron_lib/api/definitions/l3_ndp_proxy.py | 12 ++- .../definitions/l3_port_ip_change_not_allowed.py | 11 ++- neutron_lib/api/definitions/local_ip.py | 11 ++- neutron_lib/api/definitions/logging.py | 11 ++- neutron_lib/api/definitions/metering.py | 11 ++- .../metering_source_and_destination_filters.py | 14 ++- neutron_lib/api/definitions/multiprovidernet.py | 11 ++- neutron_lib/api/definitions/network.py | 11 ++- .../api/definitions/network_availability_zone.py | 11 ++- .../api/definitions/network_cascade_delete.py | 12 ++- neutron_lib/api/definitions/network_ha.py | 11 ++- .../api/definitions/network_ip_availability.py | 12 ++- .../definitions/network_ip_availability_details.py | 11 ++- neutron_lib/api/definitions/network_mtu.py | 11 ++- .../api/definitions/network_mtu_writable.py | 11 ++- .../api/definitions/network_segment_range.py | 13 ++- neutron_lib/api/definitions/pagination.py | 12 ++- neutron_lib/api/definitions/port.py | 11 ++- neutron_lib/api/definitions/port_device_profile.py | 5 +- .../api/definitions/port_hardware_offload_type.py | 5 +- .../api/definitions/port_hint_ovs_tx_steering.py | 12 ++- neutron_lib/api/definitions/port_hints.py | 11 ++- .../api/definitions/port_mac_address_override.py | 12 ++- .../api/definitions/port_mac_address_regenerate.py | 11 ++- .../api/definitions/port_numa_affinity_policy.py | 5 +- .../port_numa_affinity_policy_socket.py | 5 +- .../api/definitions/port_resource_request.py | 5 +- .../definitions/port_resource_request_groups.py | 12 ++- neutron_lib/api/definitions/port_security.py | 11 ++- neutron_lib/api/definitions/port_trusted_vif.py | 5 +- neutron_lib/api/definitions/portbindings.py | 6 +- .../api/definitions/portbindings_extended.py | 11 ++- .../api/definitions/project_default_networks.py | 14 +-- neutron_lib/api/definitions/project_id.py | 12 ++- neutron_lib/api/definitions/provider_net.py | 6 +- neutron_lib/api/definitions/pvlan.py | 13 ++- neutron_lib/api/definitions/qinq.py | 5 +- neutron_lib/api/definitions/qos.py | 29 +++--- .../api/definitions/qos_bw_limit_direction.py | 12 ++- .../api/definitions/qos_bw_minimum_ingress.py | 12 ++- neutron_lib/api/definitions/qos_default.py | 11 ++- neutron_lib/api/definitions/qos_fip.py | 11 ++- .../api/definitions/qos_fip_network_policy.py | 11 ++- neutron_lib/api/definitions/qos_gateway_ip.py | 11 ++- .../api/definitions/qos_port_network_policy.py | 11 ++- .../api/definitions/qos_pps_minimum_rule.py | 17 ++-- .../api/definitions/qos_pps_minimum_rule_alias.py | 13 ++- neutron_lib/api/definitions/qos_pps_rule.py | 9 +- .../api/definitions/qos_rule_type_details.py | 11 ++- .../api/definitions/qos_rule_type_filter.py | 11 ++- neutron_lib/api/definitions/qos_rules_alias.py | 20 ++-- neutron_lib/api/definitions/quota_check_limit.py | 12 ++- .../api/definitions/quota_check_limit_default.py | 11 ++- neutron_lib/api/definitions/rbac_address_groups.py | 12 ++- neutron_lib/api/definitions/rbac_address_scope.py | 12 ++- neutron_lib/api/definitions/rbac_bgpvpn.py | 11 ++- .../api/definitions/rbac_security_groups.py | 12 ++- neutron_lib/api/definitions/rbac_subnetpool.py | 12 ++- neutron_lib/api/definitions/revisionifmatch.py | 12 ++- .../router_admin_state_down_before_update.py | 11 ++- .../api/definitions/router_availability_zone.py | 11 ++- neutron_lib/api/definitions/router_enable_snat.py | 11 ++- neutron_lib/api/definitions/routerservicetype.py | 11 ++- .../security_groups_default_statefulness.py | 13 ++- .../definitions/security_groups_normalized_cidr.py | 13 ++- .../definitions/security_groups_port_filtering.py | 14 ++- .../security_groups_remote_address_group.py | 13 ++- .../security_groups_rules_belongs_to_default_sg.py | 13 ++- .../security_groups_shared_filtering.py | 14 +-- neutron_lib/api/definitions/segment.py | 14 +-- .../segments_peer_subnet_host_routes.py | 11 ++- neutron_lib/api/definitions/servicetype.py | 12 ++- neutron_lib/api/definitions/sfc.py | 14 +-- neutron_lib/api/definitions/sort_key_validation.py | 11 ++- neutron_lib/api/definitions/sorting.py | 12 ++- .../api/definitions/standard_attr_segment.py | 11 ++- .../api/definitions/stateful_security_group.py | 23 +++-- neutron_lib/api/definitions/subnet.py | 11 ++- .../api/definitions/subnet_dns_publish_fixed_ip.py | 13 ++- .../api/definitions/subnet_external_network.py | 11 ++- neutron_lib/api/definitions/subnet_onboard.py | 12 ++- .../api/definitions/subnet_segmentid_enforce.py | 11 ++- .../api/definitions/subnet_segmentid_writable.py | 11 ++- .../api/definitions/subnet_service_types.py | 11 ++- neutron_lib/api/definitions/subnetpool.py | 11 ++- .../api/definitions/subnetpool_prefix_ops.py | 12 ++- neutron_lib/api/definitions/taas.py | 6 +- neutron_lib/api/definitions/tag_creation.py | 12 ++- .../definitions/tag_ports_during_bulk_creation.py | 12 ++- neutron_lib/api/definitions/tap_mirror.py | 11 ++- .../api/definitions/tap_mirror_both_direction.py | 25 +++-- neutron_lib/api/definitions/trunk.py | 5 +- neutron_lib/api/definitions/trunk_details.py | 5 +- .../api/definitions/uplink_status_propagation.py | 11 ++- .../uplink_status_propagation_updatable.py | 11 ++- neutron_lib/api/definitions/vlan_filter.py | 5 +- neutron_lib/api/definitions/vlantransparent.py | 11 ++- neutron_lib/api/definitions/vpn.py | 13 ++- neutron_lib/api/definitions/vpn_aes_ccm_gcm.py | 11 ++- neutron_lib/api/definitions/vpn_aes_ctr.py | 11 ++- neutron_lib/api/definitions/vpn_endpoint_groups.py | 11 ++- neutron_lib/api/definitions/vpn_flavors.py | 11 ++- neutron_lib/api/definitions/vpn_no_sha1_3des.py | 11 ++- neutron_lib/api/extensions.py | 3 +- neutron_lib/api/validators/__init__.py | 26 ++--- neutron_lib/callbacks/exceptions.py | 3 +- neutron_lib/constants.py | 2 +- neutron_lib/db/api.py | 4 +- neutron_lib/db/model_query.py | 2 +- neutron_lib/db/utils.py | 5 +- neutron_lib/exceptions/__init__.py | 19 ---- neutron_lib/exceptions/dns.py | 6 -- neutron_lib/exceptions/firewall_v2.py | 24 ----- neutron_lib/exceptions/metering.py | 4 - neutron_lib/exceptions/vpn.py | 16 ---- neutron_lib/fixture.py | 37 ++----- neutron_lib/hacking/checks.py | 27 +----- neutron_lib/ovn/db_sync.py | 1 - neutron_lib/placement/client.py | 17 ++-- neutron_lib/plugins/ml2/api.py | 28 ------ neutron_lib/plugins/utils.py | 4 +- neutron_lib/rpc.py | 1 - neutron_lib/services/base.py | 2 - neutron_lib/types.py | 106 +++++++++++++++++++++ neutron_lib/utils/helpers.py | 4 +- neutron_lib/utils/upgrade_checks.py | 1 - pyproject.toml | 3 +- tox.ini | 7 +- 203 files changed, 1515 insertions(+), 851 deletions(-)

1 0