openstack/horizon — Week of 2026-09-19

SDK migration. The largest functional change moves the Nova hypervisors panel onto openstacksdk, replacing the legacy novaclient plumbing across ~370 lines of dashboard and API glue (1003616). This continues the ongoing shift of Horizon's service clients toward the unified SDK.

Auth and uploads. A new WEBSSO_ALLOWED_REFERER_HOSTS setting lands to constrain which Referer values Horizon will accept during WebSSO redirects, together with a documentation warning describing the risk model. Separately, Horizon now stops attaching the CSRF token on Glance direct image uploads, which had been interfering with browser-to-Glance PUTs.

Bug fixes. The volume detail overview no longer renders "None" for the Created field when the timestamp is present, and a long-standing flaky test_image_filtration_admin test is stabilized. Documentation gets spelling and grammar cleanup in the settings guide plus a refresh of an outdated mailing list link.

Translations. Eight Zanata import batches account for the bulk of line churn but no code behavior changes.