openstack/swift — 2026-09-26

MPU accounting. The bulk of the week — roughly 1,100 lines — went into multipart upload bookkeeping. The container DB now tracks parts, manifest, and MPU sizes as distinct quantities, laying groundwork for accurate reporting of in-progress and completed multipart uploads (967978). A companion change reworks the ContainerBroker listing interface so callers can request the new size categories cleanly rather than post-filtering results.

Proxy and ring fixes. The tempurl middleware now rejects X-Copy-From on tempurl requests, closing a path that let a signed URL be used to pull content from arbitrary objects; the fix landed on master and a stable branch. On the ring side, handoff iterators are now pinned to a single ring version so a mid-request reload can't scramble the handoff sequence.

Tests and docs. Diskfile quarantine suffix fallback picks up coverage, quarantine hashdir tests move to POLICIES.default, and a large typo sweep touches ~140 lines across the tree. Docs gain an AWS reference for well-known checksum types.

Release plumbing. The stable/2026.2 branch was cut (.gitreview, tox constraints, master version bump), a rolling-upgrade CI job from Hibiscus was added, and the CHANGELOG now carries the calendar version alongside the code name.