openstack/ironic — Week of 2026-07-18

API surface. New JSON schemas landed for the conductors and volume APIs, formalizing request validation on two more endpoints and adding roughly 150 lines of schema definitions.

Security and stability. TLS hardening was extended to kickstart configdrive fetches and inspection rule connections, and a fix landed for poisoning of the allowed origin list. On the reliability side, a destroy_node race condition was closed (with backports across three stable branches), the Redfish firmware update path now handles the NEW task state correctly (also backported twice), and autodetection of the deploy interface no longer fails during node adoption. Glance image member lookups are now skipped for non-shared images, trimming needless calls.

Neutron integration. Port operations against Neutron now use service auth, landing on master alongside four stable-branch backports — a small change with broad coverage across supported releases.

Maintenance. Driver dependencies were reworked to be tracked as optional dependencies (with unused bandit dropped), [ipmi]cipher_suite_versions ordering was clarified in docs, a release note was added for the disallow-steps feature, and the CI image build now ensures docker-buildx is present on dpkg platforms.