RBAC. Secure RBAC is now enabled by default, and the policy scope enforcement tests were overhauled alongside it — together roughly 250 lines of policy and test churn moving the project toward the default-on scoped policy model.

Driver work. The Quobyte driver picked up two changes: a fix for copy_image_to_volume and the addition of provisioning reporting in driver stats. The NetApp ZAPI client's NaServer was ported off urllib onto requests, trimming ~30 lines net while modernizing the HTTP path. The Hitachi driver gained request-auditing instrumentation to aid debugging, and a small fix stops Cinder from sending an empty properties={} payload to Glance.

Maintenance. References to the retired cinderlib project were removed from the tree.