openstack/neutron — Week of 2026-08-01

Validation and tenancy hardening. The bulk of the functional work tightened input checks at the API layer. RBAC now validates target_project as a UUID or wildcard, and network segment range creation rejects overlapping ranges for tunnel types. QoS get_policy_rule now validates parent policy ownership, and subnet onboard is blocked from crossing projects on shared networks — both landed on master and were backported across several stable branches (six backports of the subnet onboard fix alone). A quota fix corrects reservation under-counting in get_total_reservations_map(), also carried back to older branches.

Features. PVLAN gained server-side filtering support (995712), and the BGP code paths were tidied to use the API-defined has_lock and the agent_api for chassis name lookups with UUID caching. New test coverage was added for BGP event helper functions.

Contributor tooling. A sizeable ~730 lines of AI-assistant material landed under ai/: a Launchpad bug triage agent, a code-review agent guide, and a git commit message formatting agent. Docs also gained a CLI reference for neutron-remove-duplicated-port-bindings.

Elsewhere. OVS multinode tempest jobs were made non-voting, OVN_BUILD_MODULES references were removed, rally was capped for unmaintained/2023.1, a retry decorator was added to flaky ML2 segment range functional tests, and pre-commit and hacking plugin configs were refreshed.