openstack/glance — Week of 2026-11-07

Import and upload surface. A new import info detail API landed, exposing richer information about the image import process (https://review.opendev.org/c/openstack/glance/+/1011995). Alongside it, both the glance-download import method and the location-import hash calculation path were bounded to image_size_cap, closing ingestion routes that previously could accept data beyond the configured limit. The location-import bound shipped twice, indicating a backport to a stable branch.

Hardening against hostile payloads. The decompression plugin grew protection against "zip bomb" inputs, with the fix landing three times across master and stable branches. The format inspector test tool was also repaired, keeping the image-inspection test harness usable.

Error semantics and metadata. Glance now returns HTTP 503 when a store backend is unavailable, rather than a less specific error. On the metadef side, the Intel TDX properties were refreshed to track Nova, and almalinux was added to the recognized os_distro values.

Elsewhere. Docs gained guidance on the uWSGI chunked-input-limit knob for image uploads, a typo was fixed in useful-image-properties.rst, and .gitreview/reno housekeeping opened the unmaintained/2025.1 branch.