- Release-announce - lists.openstack.org

kolla 20.0.0.0rc1 (epoxy)
by no-reply＠openstack.org 09 May '25

09 May '25

Hello everyone, A new release candidate for kolla for the end of the Epoxy cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/kolla/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Epoxy release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/epoxy release branch at: https://opendev.org/openstack/kolla/src/branch/stable/epoxy Release notes for kolla can be found at: https://docs.openstack.org/releasenotes/kolla/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/kolla/+bugs and tag it *epoxy-rc-potential* to bring it to the kolla release crew's attention.

1 0

kolla-ansible 20.0.0.0rc1 (epoxy)
by no-reply＠openstack.org 09 May '25

09 May '25

Hello everyone, A new release candidate for kolla-ansible for the end of the Epoxy cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/kolla-ansible/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Epoxy release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/epoxy release branch at: https://opendev.org/openstack/kolla-ansible/src/branch/stable/epoxy Release notes for kolla-ansible can be found at: https://docs.openstack.org/releasenotes/kolla-ansible/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/kolla-ansible/+bugs and tag it *epoxy-rc-potential* to bring it to the kolla-ansible release crew's attention.

1 0

magnum-capi-helm 1.2.1
by no-reply＠openstack.org 09 May '25

09 May '25

We enthusiastically announce the release of: magnum-capi-helm 1.2.1 The source is available from: https://opendev.org/openstack/magnum-capi-helm Download the package from: https://pypi.org/project/magnum-capi-helm For more details, please see below. 1.2.1 ^^^^^ Bug Fixes * Fixed an issue where non-default node groups could not be individually deleted. The node groups would get stuck in the DELETE_IN_PROGRESS state and the underlying VMs would keep running. Node groups were only cleaned up when the entire cluster was deleted. Changes in magnum-capi-helm 1.2.0..1.2.1 ---------------------------------------- 3159a01 Improve node group deletion unit test 01548de Fix deletion of non-default node groups 8e82859 CI: Add linting to releasenotes eaccbd2 CI: Stop running py38, add py312 8a6c56d Intro docs for Magnum-CAPI-helm Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 18 +-- magnum_capi_helm/driver.py | 5 +- .../fix-nodegroup-delete-c83210c6029041d2.yaml | 8 ++ test-requirements.txt | 2 +- tox.ini | 13 ++ 10 files changed, 246 insertions(+), 26 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index e9dc685..445e8c7 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5 +5 @@ -hacking>=3.0,<3.1 # Apache-2.0 +hacking>=7.0.0,<7.1.0 # Apache-2.0

1 0

python-zaqarclient 3.0.1 (epoxy)
by no-reply＠openstack.org 09 May '25

09 May '25

We enthusiastically announce the release of: python-zaqarclient 3.0.1 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/python-zaqarclient Download the package from: https://pypi.org/project/python-zaqarclient Please report issues through: https://bugs.launchpad.net/python-zaqarclient/+bugs For more details, please see below. Changes in python-zaqarclient 3.0.0..3.0.1 ------------------------------------------ 0233b3b Remove remaining deprecated commands ce24421 Update TOX_CONSTRAINTS_FILE for stable/2025.1 c87fe99 Update .gitreview for stable/2025.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + setup.cfg | 3 --- tox.ini | 2 +- 3 files changed, 2 insertions(+), 4 deletions(-)

1 0

octavia 15.0.1 (dalmatian)
by no-reply＠openstack.org 09 May '25

09 May '25

We are glad to announce the release of: octavia 15.0.1 This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/octavia Download the package from: https://pypi.org/project/octavia Please report issues through: https://storyboard.openstack.org/#!/project/908 For more details, please see below. 15.0.1 ^^^^^^ Bug Fixes * Remove record in amphora_health table on revert. It's necessary, because record in amphora table for corresponding amphora also deleted. It allows to avoid false positive react of failover threshold due to orphan records in amphora_health table. * Ignore serialization loadbalancer class in GetAmphoraNetworkConfigs tasks. It allows to avoid storing full graph in jobboard details. It fixes cases with enabled jobboard for huge LBs with ~2000+ resources in graph. * Fixed potential AttributeError during listener update when security group rule had no protocol defined (ie. it was null). * Fixed an issue with SINGLE topology load balancer with UDP listeners, the Amphora now sends a Gratuitous ARP packet when a UDP pool is added, it makes the VIP address more quickly reachable after a failover or when reusing a previously allocated IP address. * Fix verification of certificates signed by a private CA when using Neutron endpoints. * Fix error on revert PlugVIPAmphora task, when db_lb is not defined and get_subnet raises NotFound error. It could happen when Amphora creation failed by timeout and before it VIP network was removed. As result revert failed with exception. Changes in octavia 15.0.0..15.0.1 --------------------------------- 8e02055af Ignore load_balancer graph in task results to avoid break write data in jobboard DB 3439d458d Fix amphora image builds to use DIB bindep 82d00251b Update stable/2024.2 to use 2024.2 tests f88404541 Fix missing GARP with UDP listeners on SINGLE LB b9196fd64 Fix verification of certificates signed by a private CA 71b964dcf Remove amphora_health record on revert CreateAmphoraInDB c60d7fbea Handle undefined protocol field in security group rules correctly 57ccd896e Do not fail on revert PlugVIPAmphora due undefined db_lb df8524849 Pin pylint on 2024.2 20d97469e Update TOX_CONSTRAINTS_FILE for stable/2024.2 e55d53480 Update .gitreview for stable/2024.2 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .../amphora-agent/source-repository-amphora-agent | 4 +- elements/octavia-lib/source-repository-octavia-lib | 2 +- .../backends/agent/api_server/keepalivedlvs.py | 9 +++ octavia/amphorae/backends/agent/api_server/util.py | 37 ++++++++- octavia/common/clients.py | 8 +- .../controller/worker/v2/tasks/database_tasks.py | 16 ++-- .../controller/worker/v2/tasks/network_tasks.py | 36 ++++++--- .../drivers/neutron/allowed_address_pairs.py | 5 +- .../backends/agent/api_server/test_util.py | 90 +++++++++++++++++++++- .../worker/v2/tasks/test_database_tasks.py | 34 ++++++-- .../worker/v2/tasks/test_network_tasks.py | 65 ++++++++++++++++ .../drivers/neutron/test_allowed_address_pairs.py | 3 +- playbooks/image-build/run.yaml | 52 ++----------- ...lth_row_on_amphora_revert-082f94459ecacaa2.yaml | 7 ++ ...t-amphora-network-configs-347a0a4340ee222b.yaml | 6 ++ ...up-rule-has-protocol-none-9b7217c5477d01b6.yaml | 5 ++ ...ix-garp-for-udp-listeners-6bf2ec8d491d1e1b.yaml | 7 ++ ...te-ca-signed-certificates-b9386a0d92627b03.yaml | 5 ++ ..._db_lb_on_plug_vip_revert-5c24af124498b246.yaml | 7 ++ test-requirements.txt | 2 +- tox.ini | 8 +- zuul.d/jobs.yaml | 89 +++++++++++++++++++-- zuul.d/projects.yaml | 36 ++++----- 24 files changed, 426 insertions(+), 108 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index fa31c123f..6f9f2cb36 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -11 +11 @@ oslotest>=3.2.0 # Apache-2.0 -pylint>=2.5.3 # GPLv2 +pylint>=2.5.3,<3.2.0 # GPLv2

1 0

ironic 29.0.2 (epoxy)
by no-reply＠openstack.org 09 May '25

09 May '25

We are jazzed to announce the release of: ironic 29.0.2 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through: https://bugs.launchpad.net/ironic/+bugs For more details, please see below. 29.0.2 ^^^^^^ Security Issues * Fixes OSSA-2025-001, where Ironic did not properly filter file:// paths when used as image sources. This would permit any file accessible by the conductor to be used as an image to attempt deployment. Adds "CONF.conductor.file_url_allowed_paths", an allowlist configuration defaulting to "/var/lib/ironic", "/shared/html", "/opt/cache/files", "/vagrant", and "/templates", permits operators to further restrict where the conductor will fetch images for when provided a file:// URL. This default value was chosen based on known usage by projects downstream of Ironic, including Metal3, Bifrost, and OpenShift. These defaults may change to be more restrictive at a later date. Operators using file:// URLs are encouraged to explicitly set this value even if the current default is sufficient. Operators wishing to fully disable the ability to deploy with a file:// URL should set this configuration to "" (empty). Operators wishing to restore the original insecure behavior should set "CONF.conductor.file_url_allowed_paths" to "/". Take note that in the 2025.2 release and later, "/dev", "/sys", "/proc", "/run", and "/etc" will be unconditionally blocked as a security measure. This issue only poses a significant security risk when Ironic's automated cleaning process is disabled and the service is configured in such a way that permits direct deployment by an untrusted API user, such as standalone Ironic installations or environments granting ownership of nodes to projects. Changes in ironic 29.0.1..29.0.2 -------------------------------- 0506aae0c OSSA-2025-001: Disallow unsafe image file:// paths Diffstat (except docs and test files) ------------------------------------- ironic/common/image_service.py | 22 +++++++- ironic/conf/conductor.py | 15 ++++++ ironic/conf/types.py | 55 +++++++++++++++++++ ...sallow-unsafe-image-paths-670fdcfe3e4647d4.yaml | 29 ++++++++++ 8 files changed, 269 insertions(+), 10 deletions(-)

1 0

oslo.middleware 6.5.0 (flamingo)
by no-reply＠openstack.org 08 May '25

08 May '25

We are excited to announce the release of: oslo.middleware 6.5.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/oslo.middleware Download the package from: https://pypi.org/project/oslo.middleware Please report issues through: https://bugs.launchpad.net/oslo.middleware/+bugs For more details, please see below. Changes in oslo.middleware 6.4.0..6.5.0 --------------------------------------- 26dfbfd typing: Fix issue with HealthCheck.app_factory af16970 Drop redundant injection of VIRTUAL_ENV Diffstat (except docs and test files) ------------------------------------- oslo_middleware/healthcheck/__init__.py | 15 +++++---------- requirements.txt | 9 +++++---- tox.ini | 6 ++---- 3 files changed, 12 insertions(+), 18 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 96e761d..f15a2ef 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5 +5,2 @@ -pbr>=2.0.0 # Apache-2.0 +bcrypt>=3.1.3 # Apache-2.0 +debtcollector>=1.2.0 # Apache-2.0 @@ -10,0 +12,2 @@ oslo.utils>=3.33.0 # Apache-2.0 +pbr>=2.0.0 # Apache-2.0 +statsd>=3.2.1 # MIT @@ -11,0 +15 @@ stevedore>=1.20.0 # Apache-2.0 +typing-extensions>=4.11.0 # PSF-2.0 @@ -13,3 +16,0 @@ WebOb>=1.8.0 # MIT -debtcollector>=1.2.0 # Apache-2.0 -statsd>=3.2.1 # MIT -bcrypt>=3.1.3 # Apache-2.0

1 0

python-heatclient 4.2.0 (flamingo)
by no-reply＠openstack.org 08 May '25

08 May '25

We exuberantly announce the release of: python-heatclient 4.2.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/python-heatclient Download the package from: https://pypi.org/project/python-heatclient Please report issues through: https://bugs.launchpad.net/python-heatclient/+bugs For more details, please see below. Changes in python-heatclient 4.1.0..4.2.0 ----------------------------------------- 47d6aac add pyproject.toml to support pip 23.1 8571344 osc: Use FormattableColumn for formatter 28464d9 Drop redundant injection of VIRTUAL_ENV ba0c136 doc: Use common requirements definition 704e13a Use pre-commit to run format check 804539b Skip functional tests for .gitreview ad1846c Update master for stable/2025.1 Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 25 +++++++++++++++ .zuul.yaml | 1 + heatclient/osc/v1/build_info.py | 6 ++-- heatclient/osc/v1/common.py | 42 +++++++++++++++++++++++++ heatclient/osc/v1/event.py | 5 +-- heatclient/osc/v1/stack.py | 23 +++++++------- heatclient/osc/v1/template.py | 11 ++++--- pyproject.toml | 3 ++ releasenotes/source/2025.1.rst | 6 ++++ releasenotes/source/index.rst | 1 + test-requirements.txt | 2 -- tox.ini | 39 +++++++++++------------ 14 files changed, 131 insertions(+), 47 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 475d75e..cbf85dd 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,2 +0,0 @@ -# Hacking already pins down pep8, pyflakes and flake8 -hacking>=6.1.0,<6.2.0 # Apache-2.0

1 0

openstack-doc-tools 4.0.1
by no-reply＠openstack.org 06 May '25

06 May '25

We are amped to announce the release of: openstack-doc-tools 4.0.1 The source is available from: https://opendev.org/openstack/openstack-doc-tools Download the package from: https://tarballs.openstack.org/openstack-doc-tools/ For more details, please see below. Changes in openstack-doc-tools 4.0.0..4.0.1 ------------------------------------------- eae764a Add 2024.2 to sitemap generator script Diffstat (except docs and test files) ------------------------------------- sitemap/generator/spiders/sitemap_file.py | 1 + 1 file changed, 1 insertion(+)

1 0

oslotest 5.0.1
by no-reply＠openstack.org 06 May '25

06 May '25

We are stoked to announce the release of: oslotest 5.0.1 The source is available from: https://opendev.org/openstack/oslotest Download the package from: https://pypi.org/project/oslotest For more details, please see below. Changes in oslotest 5.0.0..5.0.1 -------------------------------- 1fe4458 Run pyupgrade to clean up Python 2 syntaxes be6c0f9 pre-commit: Bump versions 1e773ba Declare Python 3.12 support eb6b03d Remove old excludes cd03a53 reno: Update master for unmaintained/victoria Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 10 +++++++--- oslotest/base.py | 8 ++++---- oslotest/createfile.py | 2 +- oslotest/log.py | 6 +++--- oslotest/mock_fixture.py | 13 ++++++------- oslotest/modules.py | 6 +++--- oslotest/output.py | 4 ++-- oslotest/timeout.py | 4 ++-- releasenotes/source/conf.py | 1 - releasenotes/source/victoria.rst | 2 +- setup.cfg | 1 + test-requirements.txt | 9 +-------- tox.ini | 5 ++++- 22 files changed, 44 insertions(+), 60 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 606c951..fbc8d35 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,6 +1 @@ -hacking>=6.1.0,<6.2.0 # Apache-2.0 - -# when we can require tox>= 1.4, this can go into tox.ini: -# [testenv:cover] -# deps = {[testenv]deps} coverage -coverage!=4.4,>=4.0 # Apache-2.0 +coverage>=4.0 # Apache-2.0 @@ -10,2 +4,0 @@ stestr>=2.0.0 - -pre-commit>=2.6.0 # MIT

1 0