openstack/aodh — Week of 2026-08-22

API scoping fix. The headline work is a project-scope bypass fix on the alarms API: all_projects=false was not properly enforcing project scope, and the correction landed on master plus four stable branches in parallel (one of the backports). A couple of stable-only follow-ups disable failing tests and config file generation on the older branches so the backports stay green.

Tooling. Linting picked up meaningful churn: ruff and autopep8 were introduced, doc8 was added for docs, and ruff's S (bandit-derived security) checks were switched on. A small tempest-job tweak stops skipping tests on requirements updates.

Maintenance. A redundant UTC-timezone replace() call was removed. All eleven merges came from a single contributor this week.