Auth and uploads. A new WEBSSO_ALLOWED_REFERER_HOSTS setting lands to constrain which Referer values Horizon will accept during WebSSO redirects, together with a documentation warning describing the risk model. Separately, Horizon now stops attaching the CSRF token on Glance direct image uploads, which had been interfering with browser-to-Glance PUTs.

Bug fixes. The volume detail overview no longer renders "None" for the Created field when the timestamp is present, and a long-standing flaky test_image_filtration_admin test is stabilized. Documentation gets spelling and grammar cleanup in the settings guide plus a refresh of an outdated mailing list link.

Translations. Eight Zanata import batches account for the bulk of line churn but no code behavior changes.

SDK alignment. Migration toward openstacksdk continued on two fronts: flavor test data is now constructed through the SDK, and PortForwardingManager was updated to match current SDK signatures. A one-line trunk fix also corrects child-port detection.

Runtime support. Python 3.14 is now declared supported, and a non-voting job was added to exercise Django 6.0 ahead of any commitment. A stale identity_api_version entry was dropped from the sample clouds.yaml.

Small fixes. Corrections landed for the Flavor Access tab description, a misleading help string, and security-group error messages. Two rounds of Zanata translation imports round out the week.