mistral (14.0.0-0ubuntu1.1) jammy-security; urgency=medium

  * SECURITY UPDATE: unauthorized resource publication via overly permissive
    publicize policies in workflows, actions, event triggers, code sources,
    dynamic actions, workbooks, cron triggers, and environments.
    - debian/patches/CVE-2026-41283-1.patch: restrict publicize policies to
      admin_only for workflows, actions and event triggers.
    - debian/patches/CVE-2026-41283-2.patch: clean up unnecessary
      expect_errors=True in policy tests.
    - debian/patches/CVE-2026-41283-3.patch: add code_sources:publicize
      policy (admin_only) and enforce on create/update.
    - debian/patches/CVE-2026-41283-4.patch: restrict code_sources and
      dynamic_actions operations to admin_only.
    - debian/patches/CVE-2026-41283-5.patch: add dynamic_actions:publicize
      policy (admin_only) and enforce on create/update.
    - debian/patches/CVE-2026-41283-6.patch: add workbooks:publicize policy
      (admin_only) and enforce on create/update.
    - debian/patches/CVE-2026-41283-7.patch: add cron_triggers:publicize
      policy (admin_only) and enforce on create.
    - debian/patches/CVE-2026-41283-8.patch: add environments:publicize
      policy (admin_only) and enforce on create/update.
    - CVE-2026-41283

 -- Federico Quattrin <federico.quattrin@canonical.com>  Tue, 09 Jun 2026 16:20:02 -0300

mistral (14.0.0-0ubuntu1) jammy; urgency=medium

  * d/watch: Scope to 14.x.
  * New upstream release for OpenStack Yoga.
  * d/p/switch-to-collections.abc-abstract-base-classes.patch: Dropped.
    Fixed upstream.

 -- Corey Bryant <corey.bryant@canonical.com>  Wed, 30 Mar 2022 21:02:00 -0400

mistral (13.0.0+git2022030313.55bb2564-0ubuntu1) jammy; urgency=medium

  * New upstream snapshot for OpenStack Yoga.
  * d/p/switch-test-workflows-to-yaml-safe-load.patch: Dropped. Fixed in
    upstream snapshot.

 -- Corey Bryant <corey.bryant@canonical.com>  Thu, 03 Mar 2022 13:48:27 -0500

mistral (13.0.0+git2021120910.b2d6de56-0ubuntu1) jammy; urgency=medium

  * New upstream snapshot for OpenStack Yoga.
  * d/p/switch-to-collections.abc-abstract-base-classes.patch: This fixes
    unit test errors detected with Python 3.10.
  * d/p/switch-test-workflows-to-yaml-safe-load.patch: Transition test
    code to yaml.safe_load() to fix error exposed by unit tests.
  * d/p/revert-test-change-for-1936667.patch: Dropped. No longer needed.

 -- Corey Bryant <corey.bryant@canonical.com>  Thu, 09 Dec 2021 10:54:08 -0500

mistral (13.0.0-0ubuntu1) impish; urgency=medium

  * d/watch: Scope to 13.x.
  * New upstream release for OpenStack Xena.
  * d/p/revert-test-change-for-1936667.patch: Revert upstream change
    that causes test failures.

 -- Chris MacNaughton <chris.macnaughton@ubuntu.com>  Thu, 07 Oct 2021 09:43:27 +0000

mistral (12.0.0+git2021072117.22e822dd-0ubuntu1) impish; urgency=medium

  * New upstream snapshot for OpenStack Xena.

 -- Corey Bryant <corey.bryant@canonical.com>  Wed, 21 Jul 2021 17:08:46 -0400

mistral (12.0.0+git2021061112.c63e6e08-0ubuntu1) impish; urgency=medium

  * New upstream snapshot for OpenStack Xena.

 -- Chris MacNaughton <chris.macnaughton@ubuntu.com>  Fri, 11 Jun 2021 12:51:46 +0000

mistral (12.0.0-0ubuntu1) hirsute; urgency=medium

  * New upstream release for OpenStack Wallaby.

 -- Chris MacNaughton <chris.macnaughton@ubuntu.com>  Wed, 14 Apr 2021 14:46:15 +0000

mistral (12.0.0~rc1-0ubuntu1) hirsute; urgency=medium

  * d/watch: Scope to 12.x series
  * New upstream release candidate for OpenStack Wallaby.

 -- Chris MacNaughton <chris.macnaughton@ubuntu.com>  Fri, 02 Apr 2021 09:32:34 +0000

mistral (11.0.0+git2021012507.3c83837f-0ubuntu1) hirsute; urgency=medium

  * New upstream snapshot for OpenStack Wallaby.
  * d/control: Align (Build-)Depends with upstream.

 -- Chris MacNaughton <chris.macnaughton@ubuntu.com>  Mon, 25 Jan 2021 08:06:28 +0000

# For older changelog entries, run 'apt-get changelog python3-mistral'
