openstack/sunbeam-charms — Week of 2026-07-04

Snap confinement safeguards. The largest body of work hardens how charms interact with snap confinement. New logic blocks unsafe snap confinement changes across three branches (~1,200 lines), and a companion set preserves devmode across snap refreshes so operator-installed development snaps aren't silently re-confined. Both changes landed on master and two stable branches in lockstep.

Charm and library updates. The tls_certificates interface library was refreshed to patchlib 30 across three branches. openstack-port-cni gained a re-bootstrap step on pod restart to recover from a previously fatal state. openstack-hypervisor now passes Southbound addresses as a comma-separated list rather than a single value (995027). Smaller charm-level tweaks include an octavia-k8s default-provider update and configurable health_manager threads, and barbican-k8s enabling the new secure-rbac policy.

Tooling and CI. Zuul jobs were restructured to build only the charms modified in a change, cutting unnecessary CI work. Linting issues were cleaned up across the tree with a few noisy linters disabled, and horizon-k8s on stable/2025.1 was rebuilt to pick up the SRU for LP#2156606.

Nearly every substantive change this week was backported to two stable branches alongside master.