- Release-announce - lists.openstack.org

ansible-role-atos-hsm 9.0.0 (epoxy)
by no-reply＠openstack.org 02 Apr '25

02 Apr '25

We eagerly announce the release of: ansible-role-atos-hsm 9.0.0 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/ansible-role-atos-hsm Download the package from: https://tarballs.openstack.org/ansible-role-atos-hsm/ Please report issues through: https://storyboard.openstack.org/#!/project/1183 For more details, please see below. Changes in ansible-role-atos-hsm v0.1.0..9.0.0 ---------------------------------------------- baec445 Correct the tox option for skipping sdist generation dd4a795 Unpin ansible-lint f5c86df Disable auto-discovery for setuptools c9f757d setup.cfg: Replace dashes with underscores c5e5b24 Fix linter e51c244 Use underscore instead of dash 5069751 Add HA (load balancing) support 90bb6f6 OpenDev Migration Patch f6f9c3f Add gate config 485a4bb Document role variables and defaults Diffstat (except docs and test files) ------------------------------------- .ansible-lint | 2 + .gitreview | 4 + README.rst | 47 +++++++++++ defaults/main.yaml | 2 + handlers/main.yaml | 5 ++ ...high-availability-support-44343eaf5563f5c7.yaml | 12 +++ setup.cfg | 22 ++--- setup.py | 3 +- tasks/main.yaml | 97 ++++++++++++---------- templates/proteccio.rc.j2 | 17 ++++ test-requirements.txt | 2 + tox.ini | 10 +++ vars.yaml.sample | 12 +++ zuul.d/layout.yaml | 11 +++ 14 files changed, 189 insertions(+), 57 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt new file mode 100644 index 0000000..89e2495 --- /dev/null +++ b/test-requirements.txt @@ -0,0 +1,2 @@ +ansible-lint +reno

1 0

barbican 20.0.0 (epoxy)
by no-reply＠openstack.org 02 Apr '25

02 Apr '25

We jubilantly announce the release of: barbican 20.0.0 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/barbican Download the package from: https://tarballs.openstack.org/barbican/ Please report issues through: https://bugs.launchpad.net/barbican/+bugs For more details, please see below. 20.0.0 ^^^^^^ New Features * Key-encryption-key rotation has been implemented for for the Simple Crypto plugin backend. A new symmetric Fernet key can be created and added to the configuration file at any time. The *kek* option in the *[simple_crypto_plugin]* section can now be specified multiple times. When more than one KEK is configured, the first key is used to encrypt new project-specific keys (pKEKs) and the rest of the keys are only used to decrypt existing data. A new sub-command has been added to *barbican-manage* to re-encrypt existing pKEKs using the first *kek* in the config file. This command can be executed to ensure that all pKEKs in the database are re-encrypted with a specific key. To fully rotate an existing KEK, you can now generate a new KEK to replace ane existing key. You can add the new key as the first *kek* in the configuration file, and keep the existing key as the second *kek*. Then you can execute *barbican-manage simple_crypto rewrap_pkek* to re-encrypt all existing pKEKs with the new key. After the command executes, you can remove any previous keys from the config file. Changes in barbican 19.0.0..20.0.0 ---------------------------------- 4500d9f4 Enable pKEK rewrap with SimpleCrypto cfba1c1b Use MultiFernet to enable more than one KEK bf788731 Imported Translations from Zanata acd76fba Updating tox runtimes for 2025.1 16685c9e Enable new default 16ff9bc2 reno: Update master for unmaintained/2023.1 bae6737c Increase unit testing coverage for PKCS#11 ccaa1039 Update gate jobs as per the 2025.1 cycle testing runtime 7b36764c Fix typo in wrap_key function 0d4101fa Configure mechanism for wrapping pKEKs b365afcd Replace deprecated datetime.utcnow() 4110cd8a Remove default override for config options policy_file 52f4d5ca Add note about requirements lower bounds 72b2d693 Remove Python 3.8 support e1f7b30e Imported Translations from Zanata 45b01d35 Drop SQLALCHEMY_WARN_20 1321a2ab Update master for stable/2024.2 1046886f Imported Translations from Zanata 3d961ae1 Remove unused versionbuild script Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 1 + barbican/cmd/barbican_manage.py | 31 ++++- barbican/cmd/kek_rewrap.py | 77 +++++++++++ barbican/cmd/pkcs11_kek_rewrap.py | 58 +------- barbican/cmd/simple_crypto_kek_rewrap.py | 46 +++++++ barbican/common/config.py | 11 -- barbican/common/policy.py | 4 - barbican/locale/en_GB/LC_MESSAGES/barbican.po | 24 ++-- barbican/locale/zh_CN/LC_MESSAGES/barbican.po | 5 +- barbican/plugin/crypto/p11_crypto.py | 98 ++++++++----- barbican/plugin/crypto/pkcs11.py | 151 +++++++++++++-------- barbican/plugin/crypto/simple_crypto.py | 21 ++- barbican/queue/retry_scheduler.py | 4 +- barbican/queue/server.py | 3 +- .../test_repositories_certificate_authorities.py | 14 +- .../test_repositories_order_retry_tasks.py | 6 +- .../repositories/test_repositories_secrets.py | 3 +- bin/versionbuild.py | 85 ------------ bindep.txt | 1 + .../notes/fix-bug-2036506-bf171b5949495457.yaml | 22 +++ .../notes/remove-py38-ecd3b5c9b6799e75.yaml | 5 + ...imple-crypto-kek-rotation-b8fe76b32aa76190.yaml | 22 +++ ...imple-crypto-multiple-kek-939d7fae5657ca8e.yaml | 18 +++ releasenotes/source/2023.1.rst | 2 +- releasenotes/source/2024.2.rst | 6 + releasenotes/source/index.rst | 1 + .../locale/en_GB/LC_MESSAGES/releasenotes.po | 120 +++++++++++++++- requirements.txt | 8 +- setup.cfg | 4 +- tox.ini | 4 +- 41 files changed, 739 insertions(+), 373 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 945e81f3..44d7be0d 100644 --- a/requirements.txt +++ b/requirements.txt @@ -0,0 +1,4 @@ +# Requirements lower bounds listed here are our best effort to keep them up to +# date but we do not test them so no guarantee of having them all correct. If +# you find any incorrect lower bounds, let us know or propose a fix. + @@ -13 +17 @@ oslo.log>=4.3.0 # Apache-2.0 -oslo.policy>=3.11.0 # Apache-2.0 +oslo.policy>=4.5.0 # Apache-2.0 @@ -17 +21 @@ oslo.upgradecheck>=1.3.0 # Apache-2.0 -oslo.utils>=3.33.0 # Apache-2.0 +oslo.utils>=7.0.0 # Apache-2.0

1 0

blazar 15.0.0 (epoxy)
by no-reply＠openstack.org 02 Apr '25

02 Apr '25

We are pleased to announce the release of: blazar 15.0.0 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/blazar Download the package from: https://tarballs.openstack.org/blazar/ Please report issues through: https://bugs.launchpad.net/blazar/+bugs For more details, please see below. 15.0.0 ^^^^^^ Bug Fixes * Fixes functionality of host randomization feature. LP#2099927 Changes in blazar 14.0.0..15.0.0 -------------------------------- dbdf1b8 Fix host randomization 92cba0c Add secure RBAC role as new default 5df5277 Replace deprecated datetime.utcnow() 99d93c8 reno: Update master for unmaintained/2023.1 0db9a32 Remove default override for config options policy_file 55cb9a9 Update gate jobs as per the 2025.1 cycle testing runtime 3483be4 Update master for stable/2024.2 Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 + blazar/config.py | 16 --- blazar/manager/service.py | 7 +- blazar/plugins/floatingips/floatingip_plugin.py | 3 +- blazar/plugins/instances/instance_plugin.py | 6 +- blazar/plugins/oshosts/host_plugin.py | 15 ++- blazar/policies/base.py | 41 +++++- blazar/policies/floatingips.py | 11 +- blazar/policies/leases.py | 20 +-- blazar/policies/oshosts.py | 21 ++- blazar/policy.py | 8 -- .../filters/test_max_lease_duration_filter.py | 24 ++-- .../plugins/instances/test_instance_plugin.py | 41 +++--- .../plugins/oshosts/test_physical_host_plugin.py | 31 ++--- .../fix-host-randomization-bcab5276ef6199e6.yaml | 5 + .../secure-rbac-defaults-2c46da839de3d59c.yaml | 17 +++ releasenotes/source/2023.1.rst | 2 +- releasenotes/source/2024.2.rst | 6 + releasenotes/source/index.rst | 1 + requirements.txt | 4 +- setup.cfg | 2 - 26 files changed, 223 insertions(+), 220 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index ab3de64..1dd9d5e 100644 --- a/requirements.txt +++ b/requirements.txt @@ -25 +25 @@ oslo.middleware>=3.31.0 # Apache-2.0 -oslo.policy>=3.6.0 # Apache-2.0 +oslo.policy>=4.5.0 # Apache-2.0 @@ -29 +29 @@ oslo.upgradecheck>=1.3.0 # Apache-2.0 -oslo.utils>=4.5.0 # Apache-2.0 +oslo.utils>=7.0.0 # Apache-2.0

1 0

aodh 20.0.0 (epoxy)
by no-reply＠openstack.org 02 Apr '25

02 Apr '25

We are pumped to announce the release of: aodh 20.0.0 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/aodh Download the package from: https://tarballs.openstack.org/aodh/ Please report issues through: https://bugs.launchpad.net/aodh/+bugs For more details, please see below. Changes in aodh 19.0.0..20.0.0 ------------------------------ 0bc467d1 Drop leftover of functional tests ab98b1e8 Loose lower bound of python-dateutil 4450d9bd RDO: Fix package name of aodhclient a6695835 doc: Use dnf instead of yum 1622797c Update gate jobs as per the 2025.1 cycle testing runtime 79655fcf Imported Translations from Zanata ee8b7db2 Imported Translations from Zanata f2cc2a10 Add policy rule for get quotas fac8aa64 Drop logic for absence of segregation rule 04f19518 Drop remaining reference to 'test' extras 413b17ed Remove gabbi from test-requirements 11164d20 Declare python 3.12 support 10cde330 reno: Update master for unmaintained/2023.1 e43cf94a Drop unused test utility 7bdfeb23 Fix missing nullable constraint 7b205645 Use built-in logic to compare dictionaries eaf0a39b Replace deprecated configure_auth_token_middleware e71c1973 Remove default override for config options policy_file 32989421 Allow overriding AODH_SERVICE_HOST ca2401aa Add note about lower bound of requirements 1c4761ec Revert "Disable GLOBAL_VENV" 6831c030 Support file watcher to trigger GMR report 2813c83e Load full contexts from request headers e52699f9 Make PostgreSQL functional job non-voting 4b8a53f4 Switch back to built-in md5 function bfffb34e Imported Translations from Zanata c2f6cac1 Update master for stable/2024.2 916e0861 Drop SQLALCHEMY_WARN_20 1fd9f09b Imported Translations from Zanata 88c2fd90 Remove Python 3.8 support 98ab3065 Simplify tox targets Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 28 ++--- aodh/api/controllers/v2/alarms.py | 39 +++---- aodh/api/controllers/v2/query.py | 10 +- aodh/api/controllers/v2/quotas.py | 17 ++- aodh/api/controllers/v2/utils.py | 4 +- aodh/api/hooks.py | 4 - aodh/api/policies.py | 23 ++++ aodh/api/rbac.py | 52 +++------ aodh/coordination.py | 5 +- aodh/evaluator/__init__.py | 14 +-- aodh/service.py | 4 +- aodh/storage/sqlalchemy/models.py | 6 +- .../functional_live/gabbi/gabbits-live/alarms.yaml | 127 --------------------- devstack/plugin.sh | 25 +--- devstack/settings | 5 +- .../notes/drop-python-3-8-24f35246e92cf9af.yaml | 5 + .../notes/get-quotas-policy-b0338f314ec06ae9.yaml | 4 + releasenotes/source/2023.1.rst | 2 +- releasenotes/source/2024.2.rst | 6 + releasenotes/source/index.rst | 1 + .../locale/en_GB/LC_MESSAGES/releasenotes.po | 32 +++++- requirements.txt | 47 ++++---- setup.cfg | 4 +- test-requirements.txt | 7 +- tox.ini | 40 +------ 35 files changed, 189 insertions(+), 434 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index f6e06861..e38cb50a 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1 +1,5 @@ -tenacity>=3.2.1 # Apache-2.0 +# Requirements lower bounds listed here are our best effort to keep them up to +# date but we do not test them so no guarantee of having them all correct. If +# you find any incorrect lower bounds, let us know or propose a fix. + +tenacity>=3.2.1 # Apache-2.0 @@ -3 +7 @@ croniter>=0.3.4 # MIT License -futurist>=0.11.0 # Apache-2.0 +futurist>=0.11.0 # Apache-2.0 @@ -6,2 +10,2 @@ keystonemiddleware>=5.1.0 # Apache-2.0 -gnocchiclient>=6.0.0 # Apache-2.0 -lxml>=2.3 +gnocchiclient>=6.0.0 # Apache-2.0 +lxml>=2.3 # BSD @@ -13 +17 @@ oslo.reports>=1.18.0 # Apache-2.0 -oslo.policy>=3.11.0 # Apache-2.0 +oslo.policy>=4.5.0 # Apache-2.0 @@ -15 +19 @@ oslo.upgradecheck>=1.3.0 # Apache-2.0 -PasteDeploy>=1.5.0 +PasteDeploy>=1.5.0 # MIT @@ -17 +21 @@ pbr>=2.0.0 # Apache-2.0 -pecan>=0.8.0 +pecan>=0.8.0 # BSD @@ -21,3 +25,2 @@ oslo.utils>=4.7.0 # Apache-2.0 -python-keystoneclient>=1.6.0 -pytz>=2013.6;python_version<"3.9" # MIT -requests>=2.5.2 +python-keystoneclient>=1.6.0 # Apache-2.0 +requests>=2.5.2 # Apache-2.0 @@ -25 +28 @@ stevedore>=1.5.0 # Apache-2.0 -SQLAlchemy>=1.4.1 +SQLAlchemy>=1.4.1 # MIT @@ -27,11 +30,11 @@ tooz>=1.28.0 # Apache-2.0 -voluptuous>=0.8.10 -WebOb>=1.2.3 -WSME>=0.12.1 -cachetools>=1.1.6 -cotyledon>=1.7.3 -keystoneauth1>=2.1 -python-observabilityclient>=0.0.4 -python-octaviaclient>=1.8.0 -python-dateutil>=2.8.2 # BSD -python-heatclient>=1.17.0 -tzdata>=2022.4;python_version>="3.9" # MIT +voluptuous>=0.8.10 # BSD +WebOb>=1.2.3 # MIT +WSME>=0.12.1 # MIT +cachetools>=1.1.6 # MIT +cotyledon>=1.7.3 # Apache-2.0 +keystoneauth1>=2.1 # Apache-2.0 +python-observabilityclient>=0.0.4 # Apache-2.0 +python-octaviaclient>=1.8.0 # Apache-2.0 +python-dateutil>=2.5.3 # BSD +python-heatclient>=1.17.0 # Apache-2.0 +tzdata>=2022.4 # MIT diff --git a/test-requirements.txt b/test-requirements.txt index 9fc84fcb..af12d3da 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -3,2 +3,2 @@ oslotest>=2.15.0 # Apache-2.0 -coverage>=3.6 -fixtures>=1.3.1 +coverage>=3.6 # Apache-2.0 +fixtures>=1.3.1 # Apache-2.0/BSD @@ -6 +5,0 @@ SQLAlchemy-Utils>=0.39.0 -gabbi>=1.30.0 # Apache-2.0 @@ -8 +7 @@ gabbi>=1.30.0 # Apache-2.0 -WebTest>=3.0.0 +WebTest>=3.0.0 # MIT

1 0

ansible-role-lunasa-hsm 9.0.0 (epoxy)
by no-reply＠openstack.org 02 Apr '25

02 Apr '25

We are satisfied to announce the release of: ansible-role-lunasa-hsm 9.0.0 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/ansible-role-lunasa-hsm Download the package from: https://tarballs.openstack.org/ansible-role-lunasa-hsm/ Please report issues through: https://storyboard.openstack.org/#!/project/1180 For more details, please see below. Changes in ansible-role-lunasa-hsm 6.0.0..9.0.0 ----------------------------------------------- c867490 Disable auto-discovery for setuptools 5c10114 Fix vtl verification 02d9642 Fix permissions error during client installation 1ae2b5a setup.cfg: Replace dashes with underscores 60bc791 Fix lint errors Diffstat (except docs and test files) ------------------------------------- setup.cfg | 6 ++-- setup.py | 3 +- tasks/main.yaml | 69 +++++++++++++++++++++++--------------------- tasks/register_client.yaml | 27 +++++++++-------- tasks/unregister_client.yaml | 3 +- 5 files changed, 56 insertions(+), 52 deletions(-)

1 0

cinder 26.0.0.0rc2 (epoxy)
by no-reply＠openstack.org 28 Mar '25

28 Mar '25

Hello everyone, A new release candidate for cinder for the end of the Epoxy cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/cinder/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Epoxy release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/epoxy release branch at: https://opendev.org/openstack/cinder/src/branch/stable/epoxy Release notes for cinder can be found at: https://docs.openstack.org/releasenotes/cinder/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/cinder/+bugs and tag it *epoxy-rc-potential* to bring it to the cinder release crew's attention.

1 0

trove 23.0.0.0rc2 (epoxy)
by no-reply＠openstack.org 28 Mar '25

28 Mar '25

Hello everyone, A new release candidate for trove for the end of the Epoxy cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/trove/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Epoxy release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/epoxy release branch at: https://opendev.org/openstack/trove/src/branch/stable/epoxy Release notes for trove can be found at: https://docs.openstack.org/releasenotes/trove/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/trove/+bugs and tag it *epoxy-rc-potential* to bring it to the trove release crew's attention.

1 0

neutron 26.0.0.0rc2 (epoxy)
by no-reply＠openstack.org 28 Mar '25

28 Mar '25

Hello everyone, A new release candidate for neutron for the end of the Epoxy cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/neutron/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Epoxy release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/epoxy release branch at: https://opendev.org/openstack/neutron/src/branch/stable/epoxy Release notes for neutron can be found at: https://docs.openstack.org/releasenotes/neutron/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/neutron/+bugs and tag it *epoxy-rc-potential* to bring it to the neutron release crew's attention.

1 0

manila 20.0.0.0rc2 (epoxy)
by no-reply＠openstack.org 28 Mar '25

28 Mar '25

Hello everyone, A new release candidate for manila for the end of the Epoxy cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/manila/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Epoxy release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/epoxy release branch at: https://opendev.org/openstack/manila/src/branch/stable/epoxy Release notes for manila can be found at: https://docs.openstack.org/releasenotes/manila/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/manila/+bugs and tag it *epoxy-rc-potential* to bring it to the manila release crew's attention.

1 0

freezer-tempest-plugin 3.2.0 (epoxy)
by no-reply＠openstack.org 26 Mar '25

26 Mar '25

We eagerly announce the release of: freezer-tempest-plugin 3.2.0 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/freezer-tempest-plugin Download the package from: https://tarballs.openstack.org/freezer-tempest-plugin/ Please report issues through: https://bugs.launchpad.net/freezer/+bugs For more details, please see below. Changes in freezer-tempest-plugin xena-last..3.2.0 -------------------------------------------------- e9dfb1a remove unicode literal from code 31967fe Update README.rst 6343d37 Create client before using it in jobs 549885a cli without project_name argument f5c268b Pin stable branch jobs nodeset to Ubuntu Focal (20.04) f90cff9 Cleanup py27 support c7241b1 setup.cfg: Replace dashes with underscores Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 23 ++------------- README.rst | 5 ++-- releasenotes/source/conf.py | 16 +++++----- setup.cfg | 6 ++-- setup.py | 9 ------ 8 files changed, 50 insertions(+), 53 deletions(-)

1 0