canonical/lxd lxd-6.3

LXD 6.3

on GitHub

Announcement

https://discourse.ubuntu.com/t/lxd-6-3-has-been-released/56974

What's Changed

• LXC: Create config paths when no local daemons (from Incus) by @kadinsayani in #14550
• lxd/instance: Lock image access (from Incus) by @MusicDin in #14546
• Add workflow to run e2e tests from lxd-ui by @edlerd in #14035
• E2E UI tests by @edlerd in #14553
• doc/guest-os-compatibility: 16.04 and 18.04 require manual installation of lxd-agent by @simondeziel in #14554
• API: Add support for fetching images across all projects (from Incus) by @kadinsayani in #14260
• Device: Add support for discovering multiple unix-hotplug devices by @kadinsayani in #14375
• Storage: Specify storage volume type in disk device source by @MggMuggins in #14491
• VM: Fix nvram file update from 2MB OVMF and CSM mode by @tomponline in #14555
• Simplify config validation by @simondeziel in #14559
• LXC: Fix lxc image list regression by @kadinsayani in #14563
• github: only upload client binaries when merging PRs by @simondeziel in #14565
• Test image list of some builtin remotes by @simondeziel in #14564
• API: Add scope to metadata configuration API by @kadinsayani in #14530
• Clarify which snap channel we recommend by @simondeziel in #14558
• Revert "github: only run CodeQL (go) on PRs and on weekly schedule" by @simondeziel in #14571
• build(deps): bump github.com/dell/goscaleio from 1.17.0 to 1.17.1 by @dependabot in #14567
• build(deps): bump github.com/minio/minio-go/v7 from 7.0.80 to 7.0.81 by @dependabot in #14566
• doc: Add noble package to Windows image conversion by @MggMuggins in #14573
• Device: Add ownership.inherit setting for unix-hotplug devices by @kadinsayani in #14417
• Device: Add subsystem device option for unix-hotplug devices by @kadinsayani in #14529
• doc: Update doclint exceptions by @MggMuggins in #14579
• test/suites: Check that a restricted client certificate cannot view server configuration by @markylaing in #14580
• doc/support: detail the 3 levels of LTS support by @simondeziel in #14562
• Fix detection of suitable architecture for conversion when LXD is clustered by @MusicDin in #14586
• Storage: Add storage driver cache update to storagePoolCreateLocal by @kadinsayani in #14583
• Introduce source type constants by @MusicDin in #14587
• client: Fix unnecessary error formatting by @MusicDin in #14596
• github: lp-snap-build action by @simondeziel in #14592
• lxd: Get config for instance on offline cluster member by @hamistao in #14539
• gomod: Update dependencies by @tomponline in #14620
• Linter fixes by @tomponline in #14626
• Storage: Define per-pool default block size by @hamistao in #14594
• build(deps): bump github/codeql-action from 3.27.5 to 3.27.6 by @dependabot in #14608
• build(deps): bump actions/cache from 4.1.2 to 4.2.0 by @dependabot in #14607
• Optimize Project Queries during limits checks by @MggMuggins in #14369
• doc: clarify that storage size is equal to quota by @minaelee in #14604
• test: add markdown table with the duration of each test by @simondeziel in #14602
• Docs: Add OVN network developer documentation by @markylaing in #14556
• Set OSD pool size when creating ceph and cephfs storage pools by @masnax in #14044
• github: Use cohort="+" for trivy snap scan by @tomponline in #14632
• Simplify actions/lp-snap-build to be reusable by @simondeziel in #14601
• Device: Rework ueventParseVendorProduct logic by @kadinsayani in #14636
• Have make update-* propose to commit any changes by @simondeziel in #14630
• OpenFGA: Add request cache to the OpenFGA datastore by @gabrielmougard in #14557
• Documentation: VM live migration internals documentation by @kadinsayani in #14574
• Doc: Mention that zfs.delegate is best used in conjunction with security.nesting by @simondeziel in #14629
• docs: Update storage volume How-to by @MggMuggins in #14578
• Documentation: Update doc links by @kadinsayani in #14600
• Storage: Show correct instance root disk size on API by @hamistao in #14511
• lxc: Accept volume full name on detach by @hamistao in #14593
• lp-snap-builder action v3 by @simondeziel in #14638
• Doc: Remove monthly from feature release by @tomponline in #14637
• github: another attempt at adding ~/go/bin to system path by @simondeziel in #14640
• lxd/devices: Update logger.*f messages with their contextual logging equivalents by @kadinsayani in #14639
• Storage: Check default osd pool size before setting on create. by @masnax in #14642
• doc: fix lxc network load-balancer backend add command syntax by @minaelee in #14643
• lxd: Deny creation of empty ISO volume by @hamistao in #14644
• build(deps): bump golang.org/x/crypto from 0.30.0 to 0.31.0 by @dependabot in #14645
• Network: add target parameter for GET 1.0/networks and network_get_target api extension by @edlerd in #14419
• lxd: Remove lint exception for defer rule. by @markylaing in #14649
• storage: Disallow volume.security.shared on cephfs by @hamistao in #14633
• LXC: Improve configuration key validation and add missing completions for lxc config unset by @kadinsayani in #14584
• CLI: Add dynamic lxc config unset shell completions for server config keys by @kadinsayani in #14653
• Documentation: Update VM live migration implementation diagrams by @kadinsayani in #14652
• Fix typo: Reusuable -> Reusable by @simondeziel in #14650
• build(deps): bump tiobe/tics-github-action from 3.2.1 to 3.3.0 by @dependabot in #14660
• build(deps): bump github/codeql-action from 3.27.6 to 3.27.9 by @dependabot in #14661
• Patches: Remove volatile.%.last_state.ip_addresses keys more efficiently by @tomponline in #14659
• build(deps): bump github.com/minio/minio-go/v7 from 7.0.81 to 7.0.82 by @dependabot in #14656
• build(deps): bump actions/setup-go from 5.1.0 to 5.2.0 by @dependabot in #14662
• build(deps): bump github.com/go-chi/chi/v5 from 5.1.0 to 5.2.0 by @dependabot in #14657
• Add --format flag to lxd sql by @markylaing in #14670
• build(deps): bump github.com/openfga/openfga from 1.8.1 to 1.8.2 and update gomod lists by @kadinsayani in #14672
• Doc: Improve network load-balancer instructions and add examples by @minaelee in #14654
• OVN tests for main test suite by @markylaing in #14651
• VM: Move check for container-specific prefixed keys applied to VMs up by @kadinsayani in #14680
• golangci: Add prealloc linter by @kadinsayani in #14678
• CLI: Exclude default remote from lxc remote switch|remove shell completions by @kadinsayani in #14677
• Documentation: Update link prefix for doc/reference/storage_cephfs by @kadinsayani in #14675
• Remove defunct lint exceptions by @markylaing in #14676
• test: Improve usage of lxd sql in tests by @markylaing in #14674
• Preserve custom/c1 syntax during storage volume rename by @MggMuggins in #14681
• github: Disable TICS temporarily by @tomponline in #14686
• github: update of .jira_sync_config.yaml by @mseralessandri in #14688
• doc/cloud-init: add a note that recent cloud-init on older Ubuntu still doesn't support modern keys by @simondeziel in #14693
• doc: revise explanation titles by @minaelee in #14692
• lxc: man pages fixes and updates by @minaelee in #14685
• Network: Minor fixes by @tomponline in #14694
• lxd/resources/cpu: fix GetCPU() to handle multisockets systems by @mihalicyn in #14695
• VM: Fix live migration by @tomponline in #14696
• github: Dont require UI tests to pass to build edge snap by @tomponline in #14698
• Minor tweaks by @simondeziel in #14683
• Gomod updates by @simondeziel in #14701
• DB: Fix update-schema to support lxd in non-GOPATH locations by @tomponline in #14704
• Remove runtime.Caller from schema.DotGo by @markylaing in #14705
• Remove schema command from lxd-generate by @markylaing in #14707
• CLI: lxc storage volume completion fixes and command description update by @kadinsayani in #14702
• Storage: Add reverter to disk device update & test by @MggMuggins in #14703
• CLI: Fix remote completions by @kadinsayani in #14712
• build(deps): bump google.golang.org/protobuf from 1.36.0 to 1.36.1 by @dependabot in #14724
• build(deps): bump github.com/go-acme/lego/v4 from 4.20.4 to 4.21.0 by @dependabot in #14721
• build(deps): bump actions/upload-artifact from 4.4.3 to 4.5.0 by @dependabot in #14720
• build(deps): bump github/codeql-action from 3.27.9 to 3.28.0 by @dependabot in #14719
• build(deps): bump golang.org/x/oauth2 from 0.24.0 to 0.25.0 by @dependabot in #14733
• build(deps): bump golang.org/x/term from 0.27.0 to 0.28.0 by @dependabot in #14729
• build(deps): bump github.com/openfga/openfga from 1.8.2 to 1.8.3 by @dependabot in #14730
• build(deps): bump github.com/osrg/gobgp/v3 from 3.32.0 to 3.33.0 by @dependabot in #14731
• build(deps): bump github.com/zitadel/oidc/v3 from 3.33.1 to 3.34.0 by @dependabot in #14732
• Network: Return ACL logs from syslogs when the OVN controller is deployed in MicroOVN by @gabrielmougard in #14327
• lxc: Update auth group edit help text by @markylaing in #14752
• lxd: lxd cluster show print bytes by @MggMuggins in #14763
• devlxd: Unmask Render errors by @hamistao in #14760
• devlxd: Avoid superfluous call to WriteHeader by @hamistao in #14759
• CLI: Add flag completions for --project, --profile and --mode by @kadinsayani in #14758
• shared/entity: Fix and Enhance Project Query Parameter Handling in Entity URL Parsing by @gabrielmougard in #14756
• CLI: Add lxc file completions and fix lxc profile copy completions (from Incus) by @kadinsayani in #14749
• Misc fixes by @simondeziel in #14714
• doc: update ref to cloud-init docs by @minaelee in #14765
• lxd/storage: Remove redundant error check by @MggMuggins in #14764
• Storage: Add block reset logic (from Incus) by @tomponline in #14761
• CLI: lxc image alias completions (from Incus) by @kadinsayani in #14757
• CLI: lxc network forward completion improvements by @kadinsayani in #14713
• API: Add all projects support for network zones (from Incus) by @kadinsayani in #14585
• Attach VM root volumes as disk devices by @MggMuggins in #14532
• github: add actions/reclaim-memory by @simondeziel in #14766
• Devlxd: Fix crash due to concurrent pidMapper map access by @tomponline in #14771
• Drop support for LXD_INSECURE_TLS by @simondeziel in #14769
• build(deps): bump github/codeql-action from 3.28.0 to 3.28.1 by @dependabot in #14784
• build(deps): bump actions/upload-artifact from 4.5.0 to 4.6.0 by @dependabot in #14783
• build(deps): bump golang.org/x/crypto from 0.31.0 to 0.32.0 by @dependabot in #14776
• build(deps): bump github.com/dell/goscaleio from 1.17.1 to 1.18.0 by @dependabot in #14775
• build(deps): bump github.com/minio/minio-go/v7 from 7.0.82 to 7.0.83 by @dependabot in #14774
• build(deps): bump google.golang.org/protobuf from 1.36.1 to 1.36.2 by @dependabot in #14777
• build(deps): bump github.com/mattn/go-colorable from 0.1.13 to 0.1.14 by @dependabot in #14773
• lxd-agent: If the target path of a mount is relative, make it absolute. by @gabrielmougard in #14792
• Storage: Revert "lxd/storage/drivers/generic/vfs: Truncate/Discard ahead of sparse write" by @tomponline in #14794
• lxd-agent/metrics: ignore fuse.lxcfs FSes by @simondeziel in #14797
• doc: Add file command as requirement for lxd-migrate by @MusicDin in #14798
• Deprecation client/lxd_containers functions by @simondeziel in #14801
• Micro-optimise URL path checks to derive instance type by @simondeziel in #14800
• lxd/storage: Fix scope of volume.size for storage pools by @kadinsayani in #14799
• Storage: Fix copying storage volumes between cluster nodes when target and project parameters are set by @kadinsayani in #14804
• Storage: Use qemu-img target-is-zero option (from Incus) by @tomponline in #14809
• Network: Prevent removal of OVN uplink volatile keys when associated network IP is populated by @tomponline in #14811
• lxd/network/acl: Use the journalctl wrapper script introduced in the LXD snap by @gabrielmougard in #14805
• CLI: Rework cmpInstanceKeys for contextual completions based on instance type by @kadinsayani in #14684
• Storage: Align Ceph block device name encoding by @MggMuggins in #14807
• build(deps): bump golang.org/x/tools from 0.28.0 to 0.29.0 by @dependabot in #14822
• build(deps): bump github.com/openfga/openfga from 1.8.3 to 1.8.4 by @dependabot in #14820
• build(deps): bump github.com/zitadel/oidc/v3 from 3.34.0 to 3.34.1 by @dependabot in #14821
• build(deps): bump google.golang.org/protobuf from 1.36.2 to 1.36.3 by @dependabot in #14823
• build(deps): bump github.com/minio/minio-go/v7 from 7.0.83 to 7.0.84 by @dependabot in #14819
• Devices: CPU pinning fix (allow explicit pinning on isolated CPUs for VM instances) by @mihalicyn in #14817
• Add missing swtpm command for container_devices_tpm test by @simondeziel in #14844
• Godoc deprecation notice by @simondeziel in #14845
• Avoid fmt.Sprintf where possible as it is slow by @simondeziel in #14806
• Network: Factor out uplink validation logic by @hamistao in #14846
• Revert "github: Disable TICS temporarily" by @tomponline in #14847
• Device: Remove existing GPU CDI device files before new device files are added by @gabrielmougard in #14842
• LXC: Fix lxc image list --all-projects by @kadinsayani in #14833
• VM: Send two ACPI events on shutdown, fix timeout errors and add progress tracking to export (from Incus) by @kadinsayani in #14850
• Network: De-duplicate uplink address allocation logic by @hamistao in #14848
• client: Fall back to OIDC verification_uri by @markylaing in #14851
• Per-project uplink IP quotas by @hamistao in #14631
• build(deps): bump github.com/miekg/dns from 1.1.62 to 1.1.63 by @dependabot in #14855
• build(deps): bump google.golang.org/protobuf from 1.36.3 to 1.36.4 by @dependabot in #14856
• build(deps): bump github/codeql-action from 3.28.1 to 3.28.5 by @dependabot in #14863
• build(deps): bump actions/setup-go from 5.2.0 to 5.3.0 by @dependabot in #14864
• build(deps): bump github.com/NVIDIA/nvidia-container-toolkit from 1.17.3 to 1.17.4 by @dependabot in #14857
• cloud-init: Address cloud-init misconceptions by @hamistao in #14852
• shared/util: set the path variable provided to the editor by @simondeziel in #14866
• doc: Fix typo in cloud-init docs by @hamistao in #14872
• auth: Add entitlements to LXD entities (part 2: Enrich LXD resources with entitlements) by @gabrielmougard in #14748
• Documentation: Add missing swtpm package to installing from source section by @kadinsayani in #14875
• doc: revise/replace where VMs described as less featureful than containers by @minaelee in #14877
• Project: Pass context to database querying functions by @hamistao in #14873
• doc: add live-migration info, command syntax, misc improvements by @minaelee in #14870
• Storage: Use zero for unbound volumes' total size on the API by @hamistao in #14837
• Storage: Add NVMe and SDC storage connectors by @MusicDin in #14710
• doc: improve network forward docs pt1 by @minaelee in #14878
• Storage: Remove context timeout upper limit in connectors utils by @MusicDin in #14887
• doc(instance) fix cluster.evacuate doc block to avoid newlines in the generated metadata api response by @edlerd in #14890
• OIDC: Use proxy enabled HTTP client for relying party remote key set by @markylaing in #14871
• doc: remove unsupported proxy connection types and improve wording by @minaelee in #14893
• Backup: Add consistent name validation by @boltmark in #14896
• Storage: PowerFlex fixes and improvements by @roosterfish in #14865
• Properly mark functions/fields as deprecated by @simondeziel in #14869
• doc: increase linkcheck max rate limit timeout and retries by @minaelee in #14892
• API: Add all projects support for profiles (from Incus) by @kadinsayani in #14876
• Projects: Deny restricting a project that is using a forbidden uplink by @hamistao in #14867
• lxd: Entitlement enrichment for remaining API entities by @gabrielmougard in #14880
• CLI: Cluster member config key completions by @kadinsayani in #14894
• Device: Allow containers with CDI GPU to be restarted even after abrupt host shutdown by @gabrielmougard in #14899
• Remove handling of old/unsupported liblxc (LXC 5.0 or newer required) by @simondeziel in #14906
• Follow-up on fmt.Sprintf() replacement by @simondeziel in #14901
• build(deps): bump github.com/osrg/gobgp/v3 from 3.33.0 to 3.34.0 by @dependabot in #14913
• build(deps): bump github/codeql-action from 3.28.5 to 3.28.8 by @dependabot in #14912
• build(deps): bump redhat-plumbers-in-action/differential-shellcheck from 5.4.0 to 5.5.1 by @dependabot in #14911
• Doc: Add storage_driver_powerflex API extension by @roosterfish in #14914
• Storage: Context linter fixes by @MusicDin in #14915
• Network: Parse host physical NIC MAC address for storing in device configuration by @kadinsayani in #14905
• Storage: Add Pure Storage storage driver by @MusicDin in #14599
• Projects: Peform uplink quota validation in a single transaction by @hamistao in #14882
• Storage: Minor fixes for pure storage driver by @MusicDin in #14919
• Network: Update physical NIC device options for added clarity by @kadinsayani in #14917
• Volume disk device source-type by @MggMuggins in #14886
• Storage: Restore specialized mount functions by @MggMuggins in #14921
• Storage: Delete potentially left snapshot temporary volume by @MusicDin in #14920
• lxd/metrics: Simplify TYPE handling by @simondeziel in #14922
• Storage: Replace iscsi discovery with manual db management by @MusicDin in #14924
• Storage: Disk device doc updates by @MggMuggins in #14895
• VM: Apply mount options to hotplugged disks by @hamistao in #14898
• CLI: Improve config key update for loki.api.url by @kadinsayani in #14868
• Doc: Add how-to guides for Entra ID by @markylaing in #14925
• OIDC: Add methods to extract and verify claims by @markylaing in #14928
• Network: Improve ovn validation efficiency and logic by @tomponline in #14927
• lxd/device: Unmount instance disk devices by @MggMuggins in #14929
• VM: Fix nvram file update from older non-symlinked templates file in LXD 4.0 by @tomponline in #14933
• github/actions/setup-microceph: force the detection of new partitions by @simondeziel in #14934
• doc: fix looping local sphinx-autobuild by @minaelee in #14937
• doc: improve network forward docs including UI instructions by @minaelee in #14931
• doc: update guide on moving instances and live migration by @minaelee in #14926
• build(deps): bump github.com/minio/minio-go/v7 from 7.0.84 to 7.0.85 by @dependabot in #14954
• build(deps): bump golang.org/x/sys from 0.29.0 to 0.30.0 by @dependabot in #14953
• build(deps): bump google.golang.org/protobuf from 1.36.4 to 1.36.5 by @dependabot in #14951
• build(deps): bump github.com/go-chi/chi/v5 from 5.2.0 to 5.2.1 by @dependabot in #14950
• build(deps): bump github/codeql-action from 3.28.8 to 3.28.9 by @dependabot in #14939
• build(deps): bump golang.org/x/crypto from 0.32.0 to 0.33.0 by @dependabot in #14952
• Instance: Fix qemu double-escaped device name being passed as fd set name by @MggMuggins in #14958
• Storage: Include required Pure Storage API token role in description by @MusicDin in #14960
• Storage: Document Powerflex user minimum require role by @roosterfish in #14961
• docs: Clarify Pure Storage array usage between LXD installations by @MusicDin in #14962
• Storage: Add TryLock loop for faster connection attempts during errors by @roosterfish in #14957
• Network: Generate OVN PTR records for instance NIC IPs by @tomponline in #14956
• Network: Fix OVN ChassisGroupChassisDelete to convert chassis_name by @escabo in #14904
• Storage: Powerflex use Connect and Disconnect for NVMe/TCP by @roosterfish in #14900
• Network: Fix OVN ChassisGroupChassisDelete quoting values by @tomponline in #14964
• Storage: Revert PowerFlex client API token lock by @roosterfish in #14969
• Storage: Always create new request body reader by @MusicDin in #14968
• API: Avoid premature load of instance DB record in log endpoints by @tomponline in #14967
• Improve short description of zfs.export configuration setting by @simondeziel in #14971
• cloud-init: Support injection of additional SSH keys on instances by @hamistao in #14959
• OIDC: Make scopes configurable by @markylaing in #14935
• lxd: Add storage and network options to project create by @boltmark in #14836
• doc: lxd to lxc typo in network_forwards.md by @maubuz in #14975
• github: split documentation job into build and test by @mas-who in #14977
• doc: ignore linkcheck for gnu.org per often fails by @minaelee in #14980
• cloud-init: Follow up on SSH key injection by @hamistao in #14976
• Replace source-type with source.type by @MggMuggins in #14982
• Small tweaks by @simondeziel in #14981
• Network: Fix OVN LogicalSwitchPortGetDNS to understand DNS records field that contains PTR records by @tomponline in #14978
• github: Rework documentation tests by @tomponline in #14986
• Daemon: Update storage.backups_volume and storage.images_volume validation by @tomponline in #14984
• Auth: Return missing group names on error by @markylaing in #14979
• Auth: Don't create oidctokens directory if there are no tokens by @markylaing in #14987
• lxd: Extra validation of daemon storage options pool and volume names by @simondeziel in #14989
• Storage: Prevent using remote storage pools for (images|backups)_volume by @roosterfish in #14990
• Remove a few more fmt.Sprintf() and do some preallocations by @simondeziel in #14991
• Don't cancel pool Unmount() during service stop by @simondeziel in #15012
• Storage: Revert general remote driver exclusion and explicitly allow "read-write-many" vols by @roosterfish in #14993
• build(deps): bump github.com/spf13/cobra from 1.8.1 to 1.9.1 by @dependabot in #15008
• build(deps): bump github.com/minio/minio-go/v7 from 7.0.85 to 7.0.86 by @dependabot in #15007
• build(deps): bump canonical/has-signed-canonical-cla from 1.2.3 to 2.0.0 by @dependabot in #14997
• build(deps): bump redhat-plumbers-in-action/differential-shellcheck from 5.5.1 to 5.5.2 by @dependabot in #14996
• build(deps): bump golang.org/x/oauth2 from 0.25.0 to 0.26.0 by @dependabot in #15005
• build(deps): bump golang.org/x/tools from 0.29.0 to 0.30.0 by @dependabot in #15006
• Defend against path traversal attacks by @simondeziel in #15014
• gomod: Update dependencies by @simondeziel in #15018
• Misc fixes for CodeQL warning by @simondeziel in #15021
• doc: update forward API docstrings by @minaelee in #14992
• Device: Use GPU CDI config search paths option for Ubuntu Core by @mihalicyn in #15027
• VM: Fix lxd-agent path check logic by @hamistao in #15028
• doc: Update outdated MicroCloud info by @roosterfish in #15029
• Network: Fix DHCPv4 after int formatting regression in LogicalSwitchDHCPv4OptionsSet by @tomponline in #15031
• cloud-init: Include user.* keys in meta-data file by @hamistao in #14983
• gomod: Update dependencies by @simondeziel in #15037
• Followup fixes by @simondeziel in #15039
• Network: Don't ask OVN to allocate dynamic addresses when DHCP is disabled by @tomponline in #15034
• Constant time comparisons by @simondeziel in #15036
• Network: Remove unnecessary inclusion of OVN NIC static IPs in logical switch exclude_ips setting by @tomponline in #15041
• cloud-init: Reset Instance ID when SSH keys are defined by @hamistao in #15042
• Improve bound checks around some int conversions by @simondeziel in #15045
• build(deps): bump golang.org/x/crypto from 0.33.0 to 0.34.0 by @dependabot in #15064
• build(deps): bump github.com/zitadel/oidc/v3 from 3.34.1 to 3.35.0 by @dependabot in #15063
• build(deps): bump canonical/has-signed-canonical-cla from 2.0.0 to 2.1.0 by @dependabot in #15062
• build(deps): bump redhat-plumbers-in-action/differential-shellcheck from 5.5.2 to 5.5.3 by @dependabot in #15061
• build(deps): bump actions/upload-artifact from 4.6.0 to 4.6.1 by @dependabot in #15060
• build(deps): bump github/codeql-action from 3.28.9 to 3.28.10 by @dependabot in #15059
• build(deps): bump actions/cache from 4.2.0 to 4.2.1 by @dependabot in #15058
• Improved validation of project and instance names by @simondeziel in #15022
• auth: Add more tests for entity enrichment with entitlements by @gabrielmougard in #14973
• Auth: Fix idFromURLQuery for fine-grained TLS identities by @markylaing in #15066
• github: require code tests to pass before running client ones by @simondeziel in #15068
• gomod: Update dependencies by @simondeziel in #15070
• Assorted small fixes and improvements by @simondeziel in #15067
• lxd/instance_backup: Save the implicitly validated instance name by @simondeziel in #15071
• Update Read the Docs build config by @simondeziel in #15074
• doc: Improvements to cloud-init docs by @hamistao in #15043
• doc/guest-os-compatibility: document host/guest compat for containers by @simondeziel in #15073
• Misc fixes by @simondeziel in #15076
• Auth: Permission deletion trigger bug by @markylaing in #15077
• Tweaks for backup tests by @simondeziel in #15072
• doc: improve and update contributing guidelines by @minaelee in #15083
• OVN: Remove state.State from openvswitch by @markylaing in #15084
• Network: Fix OVN NIC dynamic IPs not being allocated when DHCP is disabled but NIC device has routes by @tomponline in #15085
• Network: Simplify OVN NIC dynamic and static IP logic by @tomponline in #15087
• Ubuntu Pro: Enable guest attachment by @markylaing in #15080
• lxd/operations: don't log whole operation on failure by @simondeziel in #15088
• snapshot: Replace lxc snapshot create by lxc snapshot by @gabrielmougard in #15095
• doc: Code of Conduct replacement and minor fixes by @minaelee in #15092
• github: Switch to use org level TICS secret by @tomponline in #15097
• lxc: Improve image error by @roosterfish in #15089
• build(deps): bump actions/download-artifact from 4.1.8 to 4.1.9 by @dependabot in #15103
• build(deps): bump actions/cache from 4.2.1 to 4.2.2 by @dependabot in #15102
• build(deps): bump github.com/osrg/gobgp/v3 from 3.34.0 to 3.35.0 by @dependabot in #15100
• lxd/auth: Fix missing comments from @markylaing by @gabrielmougard in #15096
• doc/installing: fix missing words in command syntax by @minaelee in #15110
• Storage: Attach VM snapshots as disk devices by @MggMuggins in #14930
• lxd/device/disk: Consider readonly for other volume types by @MggMuggins in #15112
• doc: code of conduct updates by @minaelee in #15113
• lxd/instance/drivers/lxc: tiny improvements by @simondeziel in #15111
• Network: Add OVS bridge information by @ghadi-rahme in #15044
• doc: update broken link in howto/initialize by @nmezhenskyi in #15121
• docs: add oidc configuration with auth0 and idp groups WD-18947 by @edlerd in #15116
• Resources: Prioritize native bridges over ovs ones by @ghadi-rahme in #15130
• Fix Snapshot Root attachment for RBD Volumes by @MggMuggins in #15124
• lxd/instance_instance_types: Update instanceRefreshTypes function to use all.yaml instance type file by @kadinsayani in #15132
• doc: hard-code discourse and related links titles by @minaelee in #15131
• Network forward api howtos by @minaelee in #15134
• LXD: Proxy device fixes by @kadinsayani in #15081
• cloud-init: SSH key injection improvements by @hamistao in #15015
• lxd/ubuntupro: Reduce log verbosity when Pro config directory does not exist by @markylaing in #15123
• gomod: Update dependencies by @tomponline in #15127
• Client cert presence check in GET /1.0 by @edlerd in #15122
• build(deps): bump github/codeql-action from 3.28.10 to 3.28.11 by @dependabot in #15140
• build(deps): bump github.com/minio/minio-go/v7 from 7.0.87 to 7.0.88 by @dependabot in #15142
• lxd/resources/network: Fix regression in GetNetworkState by @tomponline in #15151
• lxd/instance_instance_types: Convert logging to contextual logging in instanceRefreshTypes function by @kadinsayani in #15153
• test: Add wait_for_add call during test_container_devices_nic_bridged_filtering by @tomponline in #15160
• github: Use microovn waitready by @MggMuggins in #15167
• API: Don't panic if instance backup config is invalid by @roosterfish in #15166
• doc/cloud-init: Fix command example by @hamistao in #15171

New Contributors

• @maubuz made their first contribution in #14975
• @mas-who made their first contribution in #14977
• @ghadi-rahme made their first contribution in #15044
• @nmezhenskyi made their first contribution in #15121

Full Changelog: lxd-6.2...lxd-6.3