We high-spiritedly announce the release of: heat 25.0.1 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/heat Download the package from: https://tarballs.openstack.org/heat/ Please report issues through: https://storyboard.openstack.org/#!/project/989 For more details, please see below. 25.0.1 ^^^^^^ Bug Fixes * Fixed the broken "heat-manage update_params" command. * The Keystone v3 ec2token end point requires authenticated access. The Heat ec2token filter now requires Keystone auth settings to be able to verify EC2 credentials. For single cloud mode the ec2token filter will look in the "[ec2authtoken]" section of the heat configuration for keystone authentication settings. In multicloud mode keystone auth settings must be supplied in configuration file sections names "[ec2authtoken.<name>]" . The "[ec2authtoken] clouds" option should be also configured to define the list of names. Note that ec2token request will be sent without authentication if the legacy settings ("auth_uri" and "allowed_auth_uris") are still used. * The "disk_bus" property of "OS::Nova::Server" resource's "block_device_mapping_v2" now accepts 'sata' as a valid value. The SATA disk bus was added to Nova in the Queens release. See story 2011600 (https://storyboard.openstack.org/#!/story/2011600). Changes in heat 25.0.0..25.0.1 ------------------------------ 8c019d44f Restore heat-manage update_params 6614a0006 Enable trunk plugin in CI 3ff3b3418 Use bulk create and diff-based update for SG rules d13004fb6 Preserve auto-populated binding:profile fields during update 22da21d1d Stably-only: Cap bandit 9a0530dd2 Add `sata` to OS::Nova::Server disk_bus constraint f2db16ff6 Add back ParallelDeploymentsTest in upgrade test 76bf87551 Use authentication with keystone ec2token api c0eb45352 Update TOX_CONSTRAINTS_FILE for stable/2025.2 e46ce1bd4 Update .gitreview for stable/2025.2 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 1 + devstack/lib/heat | 1 + heat/api/aws/ec2token.py | 228 ++++++-- heat/db/api.py | 186 ++++++- heat/engine/resources/openstack/neutron/port.py | 40 ++ .../resources/openstack/neutron/security_group.py | 85 ++- heat/engine/resources/openstack/nova/server.py | 2 +- .../api/aws/config/multi_cloud_auth_uris.conf | 10 + .../api/aws/config/multi_cloud_partial_v2.conf | 14 + .../neutron/test_neutron_security_group.py | 469 +++++++--------- ...heat-manage-update_params-59829be29d62efba.yaml | 4 + ...c2token-api-authenticated-b77da7d1edbb086c.yaml | 17 + ...ng-v2-disk-bus-allow-sata-d22c1dfe4f2f9a83.yaml | 7 + test-requirements.txt | 2 +- tox.ini | 10 +- 28 files changed, 1737 insertions(+), 557 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 262eaade7..f7b702277 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -4 +4 @@ hacking>=6.1.0,<6.2.0 # Apache-2.0 -bandit>=1.8.1 # Apache-2.0 +bandit>=1.8.1,<1.9.3 # Apache-2.0