openstack/ironic-python-agent — Week of 2026-07-25

Security fixes. The week was dominated by two coordinated security fixes landing across master and all supported stable branches. The bootc container deployment path was hardened so that the registry pull secret is no longer exposed to the bootc container itself — seven backports of this change went in, adding roughly 300 lines each. A parallel fix to NTP command handling landed as seven more backports, tightening how the agent invokes time-sync commands.

Maintenance. Elsewhere, the legacy agent_token fallback code was removed, closing out a compatibility path that is no longer needed.