We high-spiritedly announce the release of: heat 9.0.4: OpenStack Orchestration This release is part of the pike stable release series. Download the package from: https://tarballs.openstack.org/heat/ For more details, please see below. 9.0.4 ^^^^^ Security Issues * Heat no longer uses standard Python RNG when generating values for OS::Heat::RandomString resource, and instead relies on system's RNG for that. Changes in heat 9.0.3..9.0.4 ---------------------------- 06a28c5 Update Zuul branch limit b6bbcde Allow iteration over files dict before template stored 1755030 Replace random with SystemRandom for RandomString f04a2b2 Add endpoint_type config option f77fab1 Update .stestr.conf with the group_regex 3ac0bbe Avoid race in OSWaitCondition test 319a31e Zuul: Remove project name 1cb9855 Include outputs in rolling update of ResourceGroup e94e90b Fix resource.<n> attribute caching in ResourceGroup/Chain 07382d9 Fix attribute caching in Heat AutoScalingGroup cabb3b9 Fix attribute caching in SoftwareDeploymentGroup 0519cd9 Protect prepare_update_replace() with resource lock 0d005ff Fix non-destructive upgrade for deprecated res types in convergence Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 4 - devstack/upgrade/resources.sh | 16 ++ heat/engine/resource.py | 207 ++++++++++++--------- .../resources/openstack/heat/autoscaling_group.py | 11 +- .../resources/openstack/heat/random_string.py | 6 +- .../resources/openstack/heat/resource_chain.py | 6 +- .../resources/openstack/heat/resource_group.py | 25 +-- .../openstack/heat/software_deployment.py | 21 ++- heat/engine/template_files.py | 2 +- .../functional/test_os_wait_condition.py | 6 +- .../functional/test_replace_deprecated.py | 12 +- playbooks/devstack/functional/run.yaml | 14 +- .../system-random-string-38a14ae2cb6f4a24.yaml | 6 + 19 files changed, 306 insertions(+), 143 deletions(-)