- Release-announce - lists.openstack.org

oslo.rootwrap 7.7.0 (flamingo)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We joyfully announce the release of: oslo.rootwrap 7.7.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/oslo.rootwrap Download the package from: https://pypi.org/project/oslo.rootwrap Please report issues through: https://bugs.launchpad.net/oslo.rootwrap/+bugs For more details, please see below. Changes in oslo.rootwrap 7.6.0..7.7.0 ------------------------------------- 0cb36cd add pyproject.toml to support pip 23.1 Diffstat (except docs and test files) ------------------------------------- pyproject.toml | 3 +++ 1 file changed, 3 insertions(+)

1 0

taskflow 6.0.2 (flamingo)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We are amped to announce the release of: taskflow 6.0.2 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/taskflow Download the package from: https://pypi.org/project/taskflow Please report issues through: https://bugs.launchpad.net/taskflow/+bugs For more details, please see below. Changes in taskflow 6.0.1..6.0.2 -------------------------------- 1a744a78 Bump etcd to 3.5.x c8899090 Allow overriding etcd version in tests f80b1bfb fix(conductor): add stop and wait methods to base Diffstat (except docs and test files) ------------------------------------- setup-etcd-env.sh | 2 +- taskflow/conductors/backends/impl_executor.py | 26 ++++++++------------------ taskflow/conductors/base.py | 24 ++++++++++++++++++++++++ tox.ini | 2 ++ 4 files changed, 35 insertions(+), 19 deletions(-)

1 0

oslo.serialization 5.8.0 (flamingo)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We are amped to announce the release of: oslo.serialization 5.8.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/oslo.serialization Download the package from: https://pypi.org/project/oslo.serialization Please report issues through: https://bugs.launchpad.net/oslo.serialization/+bugs For more details, please see below. Changes in oslo.serialization 5.7.0..5.8.0 ------------------------------------------ 8ed3fca add pyproject.toml to support pip 23.1 2bd106c Update master for stable/2025.1 Diffstat (except docs and test files) ------------------------------------- pyproject.toml | 3 +++ releasenotes/source/2025.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + 3 files changed, 10 insertions(+)

1 0

oslo.i18n 6.6.0 (flamingo)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We are overjoyed to announce the release of: oslo.i18n 6.6.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/oslo.i18n Download the package from: https://pypi.org/project/oslo.i18n Please report issues through: https://bugs.launchpad.net/oslo.i18n/+bugs For more details, please see below. Changes in oslo.i18n 6.5.1..6.6.0 --------------------------------- 303fcac add pyproject.toml to support pip 23.1 5fed9a3 Remove test code to be used in Python 2.7 44e0cb0 Update master for stable/2025.1 Diffstat (except docs and test files) ------------------------------------- pyproject.toml | 3 +++ releasenotes/source/2025.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + 4 files changed, 12 insertions(+), 8 deletions(-)

1 0

oslo.reports 3.6.0 (flamingo)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We are chuffed to announce the release of: oslo.reports 3.6.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/oslo.reports Download the package from: https://pypi.org/project/oslo.reports Please report issues through: https://bugs.launchpad.net/oslo.reports/+bugs For more details, please see below. Changes in oslo.reports 3.5.1..3.6.0 ------------------------------------ b8904f1 add pyproject.toml to support pip 23.1 172df1f tox: Remove basepython 43a3a27 Update master for stable/2025.1 Diffstat (except docs and test files) ------------------------------------- pyproject.toml | 3 +++ releasenotes/source/2025.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + tox.ini | 2 -- 4 files changed, 10 insertions(+), 2 deletions(-)

1 0

oslo.versionedobjects 3.8.0 (flamingo)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We are pumped to announce the release of: oslo.versionedobjects 3.8.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/oslo.versionedobjects Download the package from: https://pypi.org/project/oslo.versionedobjects Please report issues through: https://bugs.launchpad.net/oslo.versionedobjects/+bugs For more details, please see below. Changes in oslo.versionedobjects 3.7.0..3.8.0 --------------------------------------------- 5c2d02e add pyproject.toml to support pip 23.1 Diffstat (except docs and test files) ------------------------------------- pyproject.toml | 3 +++ 1 file changed, 3 insertions(+)

1 0

oslo.utils 9.1.0 (flamingo)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We are stoked to announce the release of: oslo.utils 9.1.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/oslo.utils Download the package from: https://pypi.org/project/oslo.utils Please report issues through: https://bugs.launchpad.net/oslo.utils/+bugs For more details, please see below. Changes in oslo.utils 9.0.0..9.1.0 ---------------------------------- c9dd062 add pyproject.toml to support pip 23.1 Diffstat (except docs and test files) ------------------------------------- pyproject.toml | 3 +++ 1 file changed, 3 insertions(+)

1 0

oslo.metrics 0.13.0 (flamingo)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We are delighted to announce the release of: oslo.metrics 0.13.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/oslo.metrics Download the package from: https://pypi.org/project/oslo.metrics Please report issues through: https://bugs.launchpad.net/oslo.metrics/+bugs For more details, please see below. Changes in oslo.metrics 0.12.0..0.13.0 -------------------------------------- 276d34d add pyproject.toml to support pip 23.1 Diffstat (except docs and test files) ------------------------------------- pyproject.toml | 3 +++ 1 file changed, 3 insertions(+)

1 0

oslo.privsep 3.8.0 (flamingo)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We enthusiastically announce the release of: oslo.privsep 3.8.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/oslo.privsep Download the package from: https://pypi.org/project/oslo.privsep Please report issues through: https://bugs.launchpad.net/oslo.privsep/+bugs For more details, please see below. Changes in oslo.privsep 3.7.0..3.8.0 ------------------------------------ c343be9 Restore compatibility with non-linux operating systems 699b3ca Imported Translations from Zanata d4b560f add pyproject.toml to support pip 23.1 Diffstat (except docs and test files) ------------------------------------- oslo_privsep/capabilities.py | 16 ++++++++++++---- oslo_privsep/daemon.py | 9 ++++++--- oslo_privsep/locale/en_GB/LC_MESSAGES/oslo_privsep.po | 10 +++++----- pyproject.toml | 3 +++ 6 files changed, 47 insertions(+), 12 deletions(-)

1 0

nova 29.3.0 (caracal)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We are psyched to announce the release of: nova 29.3.0 This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/nova Download the package from: https://tarballs.openstack.org/nova/ Please report issues through: https://bugs.launchpad.net/nova/+bugs For more details, please see below. 29.3.0 ^^^^^^ Security Issues *************** * Nova has documented that the "update volume attachment" API PUT /servers/{server_id}/os-volume_attachments/{volume_id} should not be called directly for a very long time. "When updating volumeId, this API is typically meant to only be used as part of a larger orchestrated volume migration operation initiated in the block storage service via the os-retype or os- migrate_volume volume actions. Direct usage of this API to update volumeId is not recommended and may result in needing to hard reboot the server to update details within the guest such as block storage serial IDs. Furthermore, updating volumeId via this API is only implemented by certain compute drivers." As an admin only api, direct usage has always been limited to admins or service like "watcher". This longstanding recommendation is now enforced as a security hardening measure and restricted to only cinder. The prior warning alluded to the fact that directly using this api can result in a guest with a de-synced definition of the volume serial. Before this change it was possible for an admin to unknowingly put a VM in an inconsistent state such that a future live migration may fail or succeed and break tenant isolation. This could not happen when the api was called by cinder so Nova has restricted that api exclusively to that use-case. see: https://bugs.launchpad.net/nova/+bug/2112187 for details. Bug Fixes ********* * Bug #2095364: Fixed the List Server API and the List Server Detail API 500 Internal Server Error issue in v2.96 or later API microversion if one or more instance has no request spec object. One usecase was when cloud user tried to create instance which exceeded their quota, the request does not create instance request spec. Once the no request spec instance is created in cloud user project, the server list API and the list server details API return 500 Internal Server Error for the project until the cloud user deletes the no request spec object instance. After this fix, the v2.96 or later returns *null* at the *pinned_availability_zone* value if not specified. (https://launchpad.net/bugs/2095364) * "Nova" now strictly enforces that only "cinder" can call the "update volume attachment" aka "swap volume" api. This is part of addressing a security hardening gap identified as part of bug: https://bugs.launchpad.net/nova/+bug/2112187 Changes in nova 29.2.2..29.3.0 ------------------------------ 5a92bb594f restrict swap volume to cinder 64594ec320 Use dict object for request_specs_dict in the _list_view ea00e28452 Add ServersViewBuilderTestV296 unit test class Diffstat (except docs and test files) ------------------------------------- api-ref/source/os-volume-attachments.inc | 20 ++-- api-ref/source/parameters.yaml | 1 + nova/api/openstack/compute/views/servers.py | 25 +++-- nova/api/openstack/compute/volumes.py | 6 + .../functional/regressions/test_bug_1943431.py | 49 ++------- .../functional/regressions/test_bug_2112187.py | 67 ++++++++++++ .../unit/api/openstack/compute/test_servers.py | 121 +++++++++++++++++++++ .../unit/api/openstack/compute/test_volumes.py | 81 +++++++++----- .../notes/bug-2095364-ffbf67c0ae3f53b5.yaml | 15 +++ .../notes/bug-2112187-e1c1d40f090e421b.yaml | 36 ++++++ 13 files changed, 367 insertions(+), 98 deletions(-)

1 0