Skip to content

Changelog

8.1.0-rc.19 - 2026-07-24

Highlights

This release gives support and helpdesk teams a dedicated way to manage support users directly from the administration area, with improved search and the ability to merge duplicate accounts. Operators also gain a staff-only tool to find and clean up duplicate per-tenant OpenStack offerings, reducing marketplace clutter. Together these changes make day-to-day administration of support and OpenStack resources more reliable.

What's New

  • Support users management page — Staff can now view, create, edit, enable/disable, delete, and merge support users from a new administration page, with user search and a helpdesk filter to quickly find the right account (WAL-10159).
  • Resolve duplicate per-tenant offerings — A new staff API (with a companion management command) lets operators detect and deduplicate per-tenant OpenStack offerings that were created more than once (WAL-10163).

Improvements

  • More resilient support user data — Support user records now tolerate empty linked-user fields, avoiding errors when an account has no associated Waldur user.

Core Component Activity

  • Waldur Mastermind: 3 commits - staff API for deduplicating per-tenant offerings, support user search and helpdesk filtering.
  • Waldur Homeport: 2 commits - new support users management page in the administration area.

8.1.0-rc.18 - 2026-07-23

Highlights

This release expands automated company verification for onboarding across the Nordics, giving operators in Denmark, Finland, Norway, and Sweden a Dun & Bradstreet-backed registry check out of the box. Project owners gain a richer view of their credit health, with a new lifecycle breakdown in the spending watch dashboard. Support and helpdesk workflows become more capable with staff-facing support user management and a manual route-to-provider action, while several reliability fixes smooth out order state transitions and OpenStack port provisioning.

What's New

  • Onboarding can now verify company registrations through Dun & Bradstreet (D&B) as a registry backend for Nordic countries (Denmark, Finland, Norway, and Sweden), giving operators a trusted automated verification path during sign-up.
  • Project dashboards now include a credit lifecycle breakdown in the spending watch view, showing how credits are consumed over time with pacing indicators and per-period breakdowns so teams can spot overspend earlier.
  • Staff can manage support users through a dedicated API, including a merge action to consolidate duplicate support user records.
  • Support agents can manually route a ticket to a service provider, and customers now carry a helpdesk-configured flag with notifications when a provider ticket is withdrawn.
  • A cookie settings menu is now available from the footer, alongside legal and privacy links, so end users can review consent preferences.

Improvements

  • Lifecycle subnet and resource-provider limit-policy plugin options are now persisted for offering integrations, so these settings survive across updates.
  • Blank usage limit restrictions are now correctly represented in the OpenAPI schema, improving generated client accuracy.
  • Matrix chat network policy behaviour is now documented, clarifying the decoupled matrixChat.networkPolicy gate for deployments.

Bug Fixes

  • Fixed a spurious Creating → Terminated → Erred double state transition that could occur when a resource failed to create.
  • OpenStack instance ports are now created via an admin session in push_instance_ports, avoiding permission-related failures.

Core Component Activity

  • Waldur Mastermind: 9 commits - D&B onboarding backend, support user management and provider routing, plus order-state and OpenStack port fixes.
  • Waldur Homeport: 3 commits - credit lifecycle breakdown in spending watch and a cookie settings footer menu.
  • Waldur Helm: 1 commit - documentation for the decoupled Matrix chat network policy gate.

8.1.0-rc.17 - 2026-07-22

Highlights

This release adds a multi-tenant provider helpdesk, letting service providers route and manage support tickets across multiple backends from within Waldur. Operators gain finer control over project naming through configurable validation rules, and a new scope-aware event pub/sub system enables cheaper, more targeted event delivery to agents and integrations. Several reliability fixes — around token rotation, remote offering sync, and billing visibility — plus security dependency updates round out the release.

What's New

  • Multi-tenant provider helpdesk: Service providers can now operate their own helpdesk with support for multiple ticketing backends (Atlassian, Zammad, SMAX, email, and basic), including ticket routing, escalation, SLA warnings, and customer comment notifications.
  • Scope-aware event pub/sub: A new event consumer system delivers events based on entity bindings and user-centric scoping, allowing site agents and integrations to subscribe to just the events they need with efficient fan-out.
  • Configurable project name validation: Administrators can define a project name validation pattern; the project creation form now surfaces and enforces the configured restriction, and resource/allocation names may start with a digit.
  • Maintenance announcement permission: A dedicated permission now governs who can create and manage maintenance announcements, and admin announcements support a scheduled maintenance window.
  • Expanded user audit log: User audit logs can be filtered by related user, with the corresponding filter exposed in the user dashboard events view.

Improvements

  • Call organizers and call managers can now view the call team, and managers appear in the team list.
  • Project users can see invoice items when the customer chooses to display billing information in projects.
  • Offering user lists can be filtered by first and last name.
  • Remote offering synchronization now handles transport errors gracefully and refreshes stale credentials automatically.
  • INFO-level authentication logs no longer leak sensitive information.
  • Matrix and LiveKit network policies in the Helm chart can now be configured independently of the chart-wide network policy toggle.
  • Caddy now compresses proxied responses, scoped to compressible content types, in the Docker Compose deployment.

Bug Fixes

  • Fixed a token refresh race that caused an IntegrityError during concurrent token rotation.
  • Fixed the "Add resource" popup that capped the offerings list at the first page.
  • Fixed Instance.external_address to exclude floating IPs that have no address set.
  • Corrected the OpenAPI schema type for project metadata answers and allowed null values in permission request fields.
  • Fixed provider attribution on maintenance admin announcements.

Security

  • Updated pyasn1 to 0.6.4 to address two high-severity CVEs, and bumped vulnerable JavaScript dependencies (including brace-expansion) flagged by scanners.

Core Component Activity

  • Waldur Mastermind: 20 commits - Provider helpdesk, scope-aware pub/sub, project name validation, and multiple billing and permission fixes.
  • Waldur Homeport: 11 commits - Project name restriction UI, expanded audit log filter, offerings popup fix, and dependency updates.
  • Waldur Helm: 1 commit - Decoupled Matrix/LiveKit network policies from the chart-wide gate.
  • Waldur Docker Compose: 5 commits - Enabled and scoped Caddy response compression.

8.1.0-rc.16 - 2026-07-19

Highlights

This release makes supporting documents easier to find on public offering pages. Prospective customers browsing an offering can now see its documents tab directly in the public view, so they can review terms, guides, and other reference material before requesting access — without needing to sign in first. The documents view is also better behaved, staying hidden when an offering has no documents to show.

What's New

  • Offering documents are now available directly from the public view of an offering, letting visitors browse attached documents without logging in.

Improvements

  • The public documents tab now appears regardless of whether pricing is concealed, and the documents dialog handles its open/close state more cleanly.
  • The documents tab is automatically hidden on the public offering page when no documents have been attached, avoiding an empty section.
  • Added test coverage for the offering documents view, including adding and removing documents.

Core Component Activity

  • Waldur Homeport: 5 commits - Exposed offering documents in the public view, refined its visibility and dialog behavior, and added test coverage.

8.1.0-rc.15 - 2026-07-19

Highlights

This release strengthens access control and marketplace governance. Providers can now restrict resource and offering access to specific network subnets, and restricted offerings are automatically hidden from users who cannot order them. Organizations gain scoped custom roles for finer-grained permission management, and operators get searchable chat history plus richer logging around maintenance announcements. A batch of performance fixes removes N+1 queries and a multi-second table refresh hang, making large deployments noticeably more responsive.

What's New

  • Providers can define allowed access subnets for resources and offerings, with an offering-level opt-in and management UI for default and per-resource subnet lists.
  • Organizations can now create and manage organization-scoped custom roles, with matching UI for cloning, editing, and assigning them.
  • Restricted marketplace offerings that a user cannot order are now hidden from the catalog, the deploy action is disabled for inaccessible offerings, and categories can be filtered by accessibility.
  • Chat conversation content is now full-text searchable, backed by database GIN indexes.
  • Maintenance announcements now record creation and state-change events, and the announcement actions and success notifications were corrected.
  • Marketplace offerings support uploading documentation files that are shown to end users on the public offering page.
  • LLM inference offerings gain a dedicated inference service view with an interactive playground for testing models.
  • Provider offering Backend ID rules are now editable directly in the Integration tab.

Improvements

  • The reviewer dashboard pages (assignments, calls, invitations, profile) were polished per design review.
  • The /api/users/me and /api/roles payloads were trimmed to return only needed fields, reducing response size, with org-group role details fetched from the dedicated user-permissions endpoint.
  • User name and surname sync is now skipped for users whose identity is already provided via eduTEAMS.

Bug Fixes

  • Fixed a roughly 8-second table refresh hang caused by an aborted-request retry storm.
  • Reconciled Instance and Volume resources left orphaned under terminated tenants.
  • Removed N+1 query patterns in category component usage writes and organization-group resource counts.
  • URL-restored table filters are now scoped to fields owned by each table, preventing cross-table filter leakage.
  • The customer quotas report now loads correctly by seeding a default quota name.

Core Component Activity

  • Waldur Mastermind: 18 commits - access subnets, organization-scoped roles, chat search, maintenance logging, and query performance fixes.
  • Waldur Homeport: 21 commits - access subnet UI, custom roles UI, inference playground, offering documents, and table filter fixes.
  • Waldur Helm: 2 commits - maintenance updates only.
  • Waldur Docker Compose: 1 commit - maintenance updates only.

8.1.0-rc.14 - 2026-07-14

Highlights

This release hardens OpenStack VM handling: startup scripts (user_data) are now clearly flagged as plaintext both in the portal and in the API, and instance and volume names accept longer values so real-world naming and imaging no longer hit truncation limits. A marketplace software-catalog cleanup bug that could abort with an integrity error is fixed, and several proposal-call management screens are easier to navigate. A dependency security update rounds out the release.

Improvements

  • OpenStack startup scripts (user_data) are now clearly marked as stored in plaintext — a warning appears on the instance create form, and the value is redacted from backend logs so sensitive content is not exposed.
  • Instance and volume names, image names, and directly-connected IP lists now support much larger values (names up to 255 characters), avoiding truncation for longer identifiers and larger network configurations.
  • The proposal call editor's Configuration tab is now organized as a dropdown of focused panels, and the call-manage dashboard shows workflow steps in a read-only table, making call setup and review clearer.
  • The Matrix chat rooms poll now runs only for authenticated users, avoiding unnecessary requests before sign-in.
  • Updated httplib2 and setuptools to resolve known security vulnerabilities.

Bug Fixes

  • Fixed an integrity error during software catalog cleanup by skipping links that already exist, so catalog syncs complete reliably.
  • Corrected OpenAPI list field types so generated SDK clients accurately reflect the API.

Core Component Activity

  • Waldur Mastermind: 8 commits - OpenStack field widening and user_data redaction, software catalog cleanup fix, OpenAPI type corrections, and a security dependency bump.
  • Waldur Homeport: 5 commits - user_data plaintext warning, proposal-call management UI refinements, Matrix poll gating, and migration to SDK-generated count methods.

8.1.0-rc.13 - 2026-07-13

Highlights

This release significantly advances the call and proposal management workflow: reviewers now work through structured checklists, technical assessments, and conflict-of-interest confirmations, while call managers gain quicker ways to review proposals and inspect existing reviews. Billing reliability improves with fixes that prevent plan periods from being missed on mid-month usage reports and on resources that reach an active state through non-standard paths. Operators also benefit from API response compression across deployments, and OpenStack users get clearer visibility of 1:1 NAT public IPs on floating IPs.

What's New

  • Proposal reviews now support a full workflow with per-step checklists, technical assessments, and conflict-of-interest confirmation, spanning both the backend workflow engine and the reviewer UI. Required checklists must be answered before a step can be completed, and the compliance checklist has graduated out of experimental UI into general availability.
  • Call managers can now review a proposal themselves directly from the proposal actions, and can open a Reviews popup to inspect all reviews on a proposal from the management view.
  • The backfill_plan_periods management command now accepts offering, resource, and date filters so operators can target specific backfill runs.

Improvements

  • Archived calls are now consistently read-only across the entire edit surface, with the frontend read-only state aligned to backend enforcement and a new indicator for whether a call has proposals.
  • Rounds can now be created and edited on active calls, and call scopes link to their management dashboard from Roles & permissions.
  • Reviewers no longer see proposal team-role expiration details, and submitted-proposal team roles are exempted from automatic expiration so access is not lost mid-review.
  • Proposal resource-requests now show the requested resource limits, review notification links point to the review-scoped route, and the Documents tab is hidden on public call views when empty.
  • API responses are now compressed on both Helm (Traefik) and Docker Compose (Caddy) deployments, reducing bandwidth and improving load times.
  • OpenStack floating IPs now display the associated 1:1 NAT public IP.
  • Bumped click and pillow to patch OSV-flagged vulnerabilities.

Bug Fixes

  • Mid-month usage reports now resolve the correct plan period so billing is no longer skipped, and plan periods are created on any transition into an active (OK) state rather than only from the creating state.
  • Fixed public IP mapping not being set when an OpenStack floating IP port is attached after the fact.
  • Compliance checklist "No" answers no longer incorrectly block proposal submission.
  • Fixed a crash in read-only proposal plan-component summaries and removed redundant toolbars.
  • Queries no longer retry on 4xx errors, and falsy table column entries are now filtered centrally to avoid rendering artifacts.

Core Component Activity

  • Waldur Mastermind: 17 commits - proposal workflow engine, billing plan-period fixes, and call-management presets
  • Waldur Homeport: 18 commits - proposal review workflow UI, call read-only alignment, and floating IP display
  • Waldur Helm: 1 commit - API response compression on ingress
  • Waldur Docker Compose: 1 commit - API response compression in Caddy

8.1.0-rc.12 - 2026-07-11

Highlights

This release strengthens Waldur's marketplace and call-management workflows. OpenStack instance orders are now checked against project allocations before they are submitted, so users get immediate feedback instead of a late provisioning failure. Cost-policy and usage-limit pausing is more accurate and faster to react, and the reasons behind a paused resource are now shown clearly in the UI. Call managers get a streamlined proposal workflow with clearer activation preconditions.

What's New

  • OpenStack instance orders now run a pre-flight allocation check at submission time, so orders that would exceed the project's allocation are caught up front rather than failing during provisioning.
  • Call managers can now drive step completion for all non-applicant workflow steps, and the applicant team is captured at submission time, giving a more predictable proposal review process.

Improvements

  • Paused resources now display the actual usage-limit reason instead of a generic "manually" label, both on the resource flags and in the policy attribution banner, so operators understand why a resource was paused.
  • Cost-policy cost is now aggregated directly in the database, removing per-item Python summation and N+1 queries for faster, more scalable policy evaluation.
  • The Add-member dialog now offers only the roles the current user is actually allowed to grant, reducing confusing failed assignments.
  • Resource order history now shows the "Restore" order type explicitly.
  • Legacy proposal Accept/Reject actions were removed in favour of surfacing activation preconditions directly, simplifying the proposal actions.
  • Disabled buttons now show a tooltip explaining why they are unavailable.

Bug Fixes

  • Usage-limit pausing now checks the per-resource limit rather than only the component's limit amount, so resources are paused based on their own configured limits.
  • Fixed cost-policy pausing latency, closed a debounce blind window, and corrected the resource name shown in the activity log.

Security

  • Upgraded Django from 6.0.6 to 6.0.7 to address known vulnerabilities.

Core Component Activity

  • Waldur Mastermind: 8 commits - usage-limit and cost-policy accuracy and performance, OpenStack pre-flight allocation check, call-management workflow, and a Django security bump.
  • Waldur Homeport: 12 commits - clearer pause reasons, call-management proposal UI, grantable-role filtering, order history and button UX improvements, plus added test coverage.

8.1.0-rc.11 - 2026-07-10

Highlights

This release focuses on reliability and correctness. Resource limit handling in the marketplace is now more robust against stale data, the SLURM policy reporting endpoint is faster under load, and the grant proposal review workflow has been cleaned up to remove a legacy approval path. A form editing fix in the interface makes working with repeated field groups more dependable.

Improvements

  • Resource limit formatting and the set-limits action now safely ignore orphaned limit keys, preventing errors when offering configurations drift out of sync with stored resource data.
  • The grant proposal review workflow has retired the legacy Accept/Reject path and added guards around call activation and allocation, so proposals move through review states more consistently. A data migration backfills any workflow instances that were left in an inconsistent state.

Bug Fixes

  • Fixed an N+1 query in the SLURM report-command-result action, reducing database load and improving response times for policy reporting.
  • Corrected the edit field dialog so that editing fields within a field array works as expected.

Core Component Activity

  • Waldur Mastermind: 3 commits - marketplace limit safeguards, SLURM policy query optimization, and proposal workflow cleanup.
  • Waldur Homeport: 1 commit - fix for editing fields within field arrays.

8.1.0-rc.10 - 2026-07-10

Highlights

This release makes grant call management substantially more capable, giving call managers a drivable proposal workflow engine where allocation timing, panel staffing, and per-proposal step actions are all handled directly from the call UI. Operators also gain finer control over resource lifecycle and cost governance: offerings can now automatically pause or downscale resources when reported usage hits a component limit, grace periods can be disabled per offering, and project cost policies can be scoped to individual resources.

What's New

  • Offerings can now automatically pause or downscale a resource when its reported usage reaches the configured component limit, with a new selector in the offering's lifecycle policy section to choose the action to take (WAL-10094).
  • Staff can disable the grace period on a per-offering basis, and resource end dates now account for whether a grace period applies, shown consistently across resource lists and details.
  • The proposal workflow engine is now drivable end to end: call managers can run per-proposal workflow step actions from the call-manager UI, allocation timing is configured as part of the call step configuration, and workflow steps can provision resources on completion.
  • Panel members can be assigned directly from the call's team tab.

Improvements

  • Project cost policies can now be scoped to an individual resource and include a toggle for whether credits apply, giving finer control over cost governance and compensation.
  • Allocation policy has been consolidated onto the call workflow, with proposals rejected on a negative outcome for clearer, more predictable review handling.

Bug Fixes

  • Fixed a crash on the reviewer review page when a proposal round was missing (call-audit F4.3).

Core Component Activity

  • Waldur Mastermind: 8 commits - usage-limit auto-pause/downscale, per-offering grace-period control, resource-scoped cost policies, and proposal workflow engine consolidation.
  • Waldur Homeport: 8 commits - UI for usage-limit actions, grace-period disabling, resource-scoped cost policies, and call workflow management.

8.1.0-rc.9 - 2026-07-08

Highlights

This release strengthens resource lifecycle management and identity handling. Operators can now let terminated resources be restored through a self-service action, appoint Call organizers directly as organization owners, and provision user SSH keys automatically over SCIM. A batch of order-form and profile-editing fixes resolves cases where selections were silently dropped or saved in the wrong format, making marketplace ordering and user administration more reliable.

What's New

  • Terminated resources can now be restored: offerings gain a toggle to allow restoration, users get a restore action on eligible resources, and the resulting support tickets are clearly marked as restorations ([WAL-10086]).
  • Organization owners can appoint Call organizers directly, streamlining call management without needing higher-level administrators (call-audit F1.1/F1.2).
  • User SSH public keys can now be managed automatically through inbound SCIM provisioning.
  • Identity provider forms now support extra fields and full attribute mapping for more complete provider configuration.
  • Maintenance reporting adds an actual-vs-scheduled overlay and an overrun column, making it easy to see how maintenance windows compared to plan ([WAL-9984]).
  • The order form now previews volume-based discounts wherever they can be computed up front ([WAL-10026]).
  • A new CHECK_FOR_UPDATES setting lets administrators disable the outbound GitHub version check.

Improvements

  • All user profile attributes are now admin-selectable, with the frontend profile editor aligned to the backend attribute set.
  • Project creators are now notified when someone requests permission to auto-create a project.
  • In-progress maintenance announcements can now be edited after they start.
  • Resource usage and credit filters are now scoped to the selected resource for clearer reporting.
  • HEAD-based count operations are now available (opt-in) on nested and detail-list endpoints for lighter-weight totals.

Bug Fixes

  • Fixed OpenStack tenant and instance option values being dropped on order submission, including a backend fix to render non-string dictionary keys instead of failing ([WAL-10085]).
  • Fixed profile select fields submitting option objects instead of plain string values, and the full user record is now loaded in the support details popup.
  • Fixed identity provider protected fields being submitted as a string on update.
  • Fixed reviewer alternative names being stored as a string instead of a list.
  • Fixed blank option text in several async select dropdowns (auto-provisioning rules, Azure location pickers, offering creation, and token scope pickers).

Core Component Activity

  • Waldur Mastermind: 12 commits - resource restoration, Call organizer permissions, SCIM SSH keys, and order serialization fixes.
  • Waldur Homeport: 17 commits - restore actions, identity provider and profile form fixes, maintenance reporting, and discount previews.

8.1.0-rc.8 - 2026-07-07

Highlights

This release sharpens identity management and resource visibility. GLAuth directory integration now surfaces per-user personal groups and uses the offering username as the account name, giving operators clearer, more accurate LDAP/SSSD trees. OpenStack users can see live quota usage directly on tenant resource details, and a race condition that could disrupt tenant creation with dependent provisioning has been fixed for more reliable deployments.

What's New

  • GLAuth directory trees now surface each user's personal group, both in the backend tree view and the Homeport GLAuth Directory tree view, so operators can see per-user group membership at a glance.
  • OpenStack tenant resources now display live quota usage on their details page, letting users track real-time consumption without leaving the resource view.

Improvements

  • GLAuth accounts now use the offering username as the account name, aligning directory identities with marketplace usernames.
  • Resource mass actions now use consistent naming: the batch "Destroy" action is labeled "Terminate", and the "Unlink" action wording was reinforced to reduce confusion. German, Estonian, and Lithuanian translations were updated to match.
  • The embedded AI assistant was upgraded (@assistant-ui/react 0.14.26) for a smoother chat experience.

Bug Fixes

  • Fixed a race condition during tenant creation that could interfere with provisioning of dependent resources.
  • Raised the default log level to INFO to quiet noisy debug output during service startup.

Core Component Activity

  • Waldur Mastermind: 9 commits - GLAuth account naming and personal-group support, tenant creation race fix, and logging cleanup.
  • Waldur Homeport: 4 commits - Live OpenStack quota usage, GLAuth personal groups in the directory tree, resource action naming, and an AI assistant upgrade.

8.1.0-rc.7 - 2026-07-06

Highlights

This release introduces centralized POSIX UID/GID pool management, giving providers a reliable way to allocate and track user and group IDs across offerings — with full management UI for ID ranges, per-user identities, and project groups. Marketplace visitors can now get help before logging in through a new anonymous AI assistant, and OpenStack operators gain tools to diagnose and clean up duplicate tenant offerings. Billing accuracy improves for OpenStack instances by sourcing usage directly from Placement allocations.

What's New

  • POSIX UID/GID pool management: providers can define ID ranges, allocate stable UID/GID values to users and groups, override individual identities, and view allocation statistics. This spans backend pool models, backfill migrations, and a full management interface covering provider offerings, per-user identities, and project groups.
  • Anonymous marketplace AI assistant: visitors can now chat with an AI assistant to explore offerings and get help before signing in, complete with streaming responses and feedback controls.
  • OpenStack duplicate-offering diagnostics: a new admin page surfaces duplicate tenant offerings, backed by an API and a dedupe_tenant_offerings command with self-heal and SMAX logging to help operators identify and resolve conflicts.
  • OpenStack billing source selector: operators can choose to source instance component usage from Placement allocations, configurable per offering, for more accurate usage-based billing.

Improvements

  • Maintenance announcements now support overrun metrics, ordering, and bucket filtering, making it easier to track and organize scheduled maintenance windows.
  • Admin announcements collapse into a single group once more than three are active, reducing header clutter.

Bug Fixes

  • Certificate uploads now correctly validate the .pem file extension.
  • Fixed shifted columns in the remote accounts table.
  • Order summary popups now receive the correct form context so submitted details display accurately.
  • Resource action buttons no longer go stale after syncing on the resource details page.

Core Component Activity

  • Waldur Mastermind: 5 commits - POSIX ID pools, OpenStack duplicate-offering diagnostics, Placement-based billing, maintenance metrics, and certificate validation fix.
  • Waldur Homeport: 10 commits - POSIX ID management UI, anonymous AI assistant, duplicate offerings admin page, and several UI fixes.

8.1.0-rc.6 - 2026-07-06

Highlights

This release introduces a complete affiliate program with volume discounts, letting operators offer partners referral links, track earnings, and apply component-level discount formulas backed by a credit ledger — all surfaced in the UI. Maintenance announcements become far more manageable, with automatic start/completion, editing while scheduled, and cleaner visibility rules. Providers gain finer control over consumer approvals and offering settings, while several fixes improve whitelabeling, GLAuth configuration, and resource lifecycle handling.

What's New

  • Affiliate program and volume discounts (WAL-10026). Operators can now create and manage affiliate links, apply limit- and component-based discount formulas to plans, and track partner fee accrual through a new credit ledger. The UI surfaces volume discounts, affiliate earnings, credit transactions, and a plan discount editor.
  • Role-based consumer approval skipping. Offerings can now auto-approve orders for consumers holding specific roles, configurable through a new staff-only control in offering settings.
  • Historical user roles (WAL-10031). Administrators can view a user's past roles and revoke or restore them directly from the affiliations list.

Improvements

  • Maintenance announcements. Scheduled announcements now start and complete automatically (WAL-10070), can be edited while still scheduled (WAL-9985), and outdated announcements are hidden from resource views (WAL-10054).
  • Permission requests now notify the customer's contact and notification email addresses so approvals are not missed (ONS-1263).
  • End-date-triggered resource terminations are now forced through even when a stuck approval would otherwise block them.
  • Prepaid usage-based components now appear in the resource Usage history tab (WAL-10075), and the order start date field is hidden when its feature is disabled (WAL-10074).
  • User and tenant imports gained a managed_isds field and now apply preset quota limits and usages on import (WAL-9951).
  • Staff can now see router gateway advanced options on any network (RWA-44).
  • GLAuth group configuration is now emitted as proper array-of-tables, with improved config viewer rendering and badge contrast.
  • Unstable quota-full and quota-75% notifications have been removed to reduce noisy, unreliable alerts.

Bug Fixes

  • Whitelabeling icon URLs no longer use an internal host pulled from cached configuration.
  • Fixed the silent first playback of Matrix voice messages.

Core Component Activity

  • Waldur Mastermind: 16 commits - affiliate program and credit ledger, maintenance automation, approval and notification refinements.
  • Waldur Homeport: 13 commits - affiliate and discount UI, maintenance announcement actions, user role history, and assorted fixes.

8.1.0-rc.5 - 2026-07-02

Highlights

This release brings a redesigned Matrix team chat experience with voice messages and in-app calls, backed by new observability tooling for administrators. Operators gain more control over scheduled maintenance windows with extend, end-early, and cancel actions, and can now report or backfill usage for prepaid components. Several fixes address crashes and empty data in offering details and marketplace navigation, making day-to-day administration more reliable.

What's New

  • Matrix team chat has been redesigned with a unified chat drawer, voice messages, typing indicators, and in-call widgets. Voice message playback is enabled end-to-end, with the necessary media policy allowances added to the Helm and Docker Compose deployments.
  • Administrators get a new LiveKit Calls observability tab in the Matrix admin dashboard, showing active rooms and call details.
  • Providers can now report and backfill usage for prepaid components, giving more flexibility in how consumption is recorded.
  • Scheduled maintenance windows can now be extended, ended early, or cancelled directly from a cleaned-up maintenance action menu.

Improvements

  • Workflow steps can no longer be enabled while a step they depend on is still disabled, preventing invalid proposal workflow configurations.

Bug Fixes

  • Fixed empty fields showing in the offering user details dialog.
  • Fixed a crash on the offering Customers tab and corrected sub-tab navigation.
  • Fixed a crash in error handling when transport-level HTTP errors occurred during service integrations.

Core Component Activity

  • Waldur Mastermind: 3 commits - Prepaid usage reporting, a transport-error handling fix, and internal config generation refactoring.
  • Waldur Homeport: 6 commits - Matrix chat redesign, LiveKit call observability, maintenance actions, and marketplace/offering fixes.
  • Waldur Helm: 1 commit - Content security policy update to support voice message media.
  • Waldur Docker Compose: 1 commit - Content security policy update to support voice message media.

8.1.0-rc.4 - 2026-07-01

Highlights

This release candidate hardens several edge cases that could disrupt everyday operations. Staff and support users can now review historical role assignments — including who revoked a role and why — making access audits far easier. Marketplace resource provisioning is more reliable under heavy churn, project creation no longer fails unexpectedly on long descriptions, and OpenStack port security changes are now safer.

What's New

  • Staff and support users can now look up historical user roles, including revocation reason and who revoked each role, improving access auditing and troubleshooting.

Improvements

  • Offering configuration now warns when a project-slug account naming policy conflicts with the resource slug template, so operators can catch misconfigurations before they cause provisioning issues (backend guidance and UI warnings on the offering integration screens).
  • Disabling port security is now rejected when allowed address pairs are configured on an OpenStack port, preventing an unsafe network configuration.

Bug Fixes

  • Fixed a double counter appearing in generated resource slugs when resources are created and deleted in rapid succession.
  • Fixed a server error (HTTP 500) that occurred when creating a project whose description exceeded the length limit after HTML cleanup; the request now returns a proper validation error.

Core Component Activity

  • Waldur Mastermind: 6 commits - historical role lookup, marketplace slug and project validation fixes, and OpenStack port security hardening.
  • Waldur Homeport: 1 commit - warns when account naming policy conflicts with the resource slug template on offering integration screens.

8.1.0-rc.3 - 2026-06-29

Highlights

This release candidate sharpens OpenStack networking and invitation workflows. Operators can now edit allowed address pairs directly from the tenant ports view, with IP address details properly exposed in the API. Invitees who follow expired or canceled invitation links now see a clear explanation instead of a confusing 404 page, and scheduling maintenance windows is faster thanks to a unified date range picker with a live impact summary.

Improvements

  • OpenStack allowed address pairs: You can now manage allowed address pairs from the tenant ports view, and the OpenStack port read schema exposes the ip_address field so pair details are visible through the API (WAL-10067, WAL-10068).
  • Maintenance window scheduling: The separate start/end datetime fields have been replaced with a single range picker, and a live impact summary now shows the effect of the chosen window as you fill in the form (WAL-9983).
  • Invitation handling: Expired and canceled invitations now return their details to invitees so they understand why a link no longer works.

Bug Fixes

  • Following an expired or invalid invitation link no longer redirects to a 404 page; the dialog explains the invitation's status instead.
  • Corrected a Lithuanian translation string.

Core Component Activity

  • Waldur Mastermind: 2 commits - OpenStack port schema and invitation detail improvements.
  • Waldur Homeport: 4 commits - allowed address pairs editing, maintenance window picker, and invitation dialog fixes.

8.1.0-rc.2 - 2026-06-29

Highlights

This release gives offering owners finer control over who can see and order their marketplace offerings, with a new per-offering role restriction that is fully configurable from the offering settings. User profiles and provider records now capture organization address and VAT code, making it easier to collect the billing and identity details needed for procurement. Several reliability fixes round out the release, including correct usage-history exports, more stable account pages, and a database compatibility fix for deployments.

What's New

  • Per-offering role restriction: Offering owners can now restrict an offering to specific user roles, controlling its visibility and orderability directly from the offering settings, with the matching backend enforcement.
  • Organization address and VAT code: User profiles, provider records, and service provider user views now support an organization address and organization VAT code, exposed through the profile UI, provider form, and completion banner.

Improvements

  • The user edit form now prevents changing the username, avoiding accidental account identity changes.
  • The organization manage page now remembers the active tab when navigating, so you return to where you left off.
  • Bulk course account creation now returns a clearer error message when something goes wrong.
  • SLURM raw usage is no longer reset for single-shot offerings, keeping usage accounting accurate for one-off allocations.
  • Usage history exports now honor the selected user filter so the exported data matches what is shown on screen.

Bug Fixes

  • Fixed sidebar resource counters showing stale numbers from a previously active workspace on global pages.
  • Fixed the FreeIPA account page failing to load for users without a profile.
  • Disabled prepared statements for the psycopg3 database driver to resolve a connection-pooling compatibility issue in deployments.

Core Component Activity

  • Waldur Mastermind: 5 commits - per-offering role restrictions, organization address/VAT fields, and SLURM usage accounting fix.
  • Waldur Homeport: 14 commits - offering role restriction controls, organization profile fields, and several UI reliability fixes (excludes dependency and docs updates).
  • Waldur Helm: 1 commit - disabled psycopg3 prepared statements for database compatibility.

8.1.0-rc.1 - 2026-06-24

Highlights

This release candidate focuses on running Waldur more reliably under load and giving operators new levers to keep memory in check. The Mastermind service now uses less memory by default, and both Helm and Docker Compose deployments expose new tuning knobs to recycle workers and control preloading. End users and providers also benefit from VAT-code support in user profiles, clearer remote-offering details, and several fixes to organization settings and policy evaluation.

Improvements

  • Reduced the Mastermind process memory footprint and added a memory-profiling harness, with matching deployment knobs: Helm and Docker Compose now expose gunicorn preload and a Celery per-child memory ceiling so operators can recycle workers and retune memory usage from their environment.
  • Added an affiliation VAT code field to user profiles, which can be exposed in offering user attributes and call applicant visibility settings.
  • Service providers can now update an offering when management is enabled for it.
  • Providers can now see project metadata directly in the provider project list.
  • The remote offering UUID is now shown in the provisioning configuration form, making remote offerings easier to identify.
  • OIDC block-message URLs on the login-failed page are now rendered as clickable links.
  • Disabled psycopg3 prepared statements on Django database connections to improve compatibility with connection poolers.

Bug Fixes

  • Fixed the country not being saved when editing organization settings.
  • Fixed a race condition that could cause lost updates during periodic SLURM usage-policy evaluation.
  • Fixed offering thumbnail import failing when the thumbnail path exceeded the previous length limit.
  • Remote offering pulls are now skipped when the backend ID is empty, avoiding unnecessary errors.

Core Component Activity

  • Waldur Mastermind: 8 commits - memory footprint reduction, VAT code field, offering management and policy fixes.
  • Waldur Homeport: 5 commits - organization settings fix, remote offering details, provider project metadata.
  • Waldur Helm: 1 commit - exposes Mastermind memory tuning values.
  • Waldur Docker Compose: 1 commit - exposes Mastermind memory tuning environment knobs.

8.0.9 - 2026-06-21

Highlights

This release brings real-time team collaboration to Waldur with an integrated Matrix-based chat — including in-browser voice/video calls — available across projects. It also adds SCIM 2.0 identity provisioning, a structured proposal evaluation workflow, and substantially deeper OpenStack network management (topology views, router gateway control, effective routes, and RBAC sharing). Operators gain finer access control through per-user personal access token gating and entity-scoped tokens, while a broad security pass hardens authentication, webhooks, and API endpoints. The frontend completed a large-scale migration to a modern form and data-fetching architecture for better reliability and performance.

What's New

  • Team chat for projects — A new Matrix-based chat lets project members message each other and start fullscreen voice/video calls directly in the browser, with file uploads, drafts, reactions, and message history export. Deployable via the Helm chart and as an optional Docker Compose add-on (LiveKit + Tuwunel homeserver).
  • SCIM 2.0 identity management — Waldur can now act as a SCIM identity provider and pull users from external directories, enabling automated user lifecycle management with identity systems.
  • Proposal evaluation workflows — Calls can define multi-step evaluation workflows with manual and automatic transitions, responsible roles, per-step configuration, and a visual status stepper for applicants and reviewers.
  • Offering groups — Related offerings can be grouped together and managed from a dedicated provider tab.
  • Per-project order auto-approval — Projects can be configured to automatically approve marketplace orders, with a clear notice surfaced at checkout.
  • Resource limit change requests — Project members can request resource limit changes, with approval notifications and period-aware pricing shown in the UI.
  • OpenStack network tooling — New tenant network topology diagram (exportable as PNG), router effective-routes view, external gateway management, inbound RBAC share visibility, per-instance config-drive control, and connectivity diagnostics for instances.
  • Likert and rich-text checklist questions, plus support for file and multiple-file question types in checklists.
  • Personal access token controls — Per-user gating of token usage and entity-scoped token bindings that restrict tokens to specific resources.
  • Quick impersonate action from the global user search for staff.
  • Inference playground — Chat directly with a resource's vLLM endpoint from the resource view.

Improvements

  • Marketplace orders can require a purchase order on update, and offering descriptions support inline image upload.
  • OpenStack set_quotas now accepts network, subnet, port, floating-IP, and dynamic storage-type quotas; security group rules support custom IP protocol numbers.
  • Resource and project teams gained soft-delete with audit fields, batch end-date actions, and a "sync remote team members" staff action.
  • Site Agent diagnostics collection, offering-wide resource synchronization, and broker resilience/health-check tuning improve operational visibility.
  • TypeScript SDK generation was centralized with stronger typing across modules, and the frontend migrated forms, tables, and data fetching to react-final-form and React Query for fewer regressions.
  • Affiliation handling was redesigned with per-customer defaults and a mandatory-selection option.

Bug Fixes

  • Re-enabled CSRF protection on cookie-session authentication and blocked SSRF on OIDC discovery and webhook destinations; fixed an invoice-cost IDOR and restricted /api/query/ to staff.
  • Fixed OpenStack server-group operations against newer Nova APIs, floating-IP attach failures, and instance-creation race conditions.
  • Corrected component usage permissions so authenticated users no longer see all usage data, and fixed total-usage and invoice-period calculations.
  • Resolved numerous frontend crashes (floating-IP detach, contact panel, booking details, OIDC bootstrap) and client-side table pagination regressions.
  • Hardened auto-deactivation of role-less users and added an admin override.

Core Component Activity

  • Waldur Mastermind: 265 commits - Matrix chat, SCIM, proposal workflows, OpenStack networking, security hardening, and dependency upgrades.
  • Waldur Homeport: 300 commits - Matrix chat UI, workflow steppers, OpenStack topology/routing views, and a large form/data-fetching architecture migration.
  • Waldur Helm: 42 commits - Matrix chat stack, Traefik ingress support, Bitnami-style extension hooks, and worker health-probe fixes.
  • Waldur Docker Compose: 39 commits - Optional Matrix chat add-on with LiveKit calls and TURN relay.

Resources

8.0.8 - 2026-05-05

Highlights

This release introduces resource-level project management through a new ResourceProject system that lets service providers organize and invite users to projects directly on resources, alongside a major expansion of the AI Assistant with an agentic loop, new tools for proposals and reviews, and a public service-discovery chatbot. OpenStack support gets significant upgrades — instance rescue/unrescue, full load balancer (LBaaS) management in the UI, hypervisor capacity tracking via the Placement API, and router gateway management. Operators benefit from usage-based billing for OpenStack offerings, monthly component usage reporting, project affiliations with external organizations, and a science domain registry, while extensive serialization and pagination fixes resolve Go SDK compatibility issues and report performance.

What's New

  • Resource projects and unified permissions — Service providers can now create projects under a resource, invite users with specific roles, and apply per-project resource limits. Backed by a unified permission system that consolidates resource user roles (mastermind + homeport).
  • AI Assistant agentic loop and expanded tools — The AI assistant now runs an agentic loop with tools for marketplace search, proposal research, review workload management, and VM ordering. Includes user feedback collection, configurable system prompts, and a HomePort navigation block.
  • Anonymous service-discovery chatbot — A new public-facing chatbot for HPC Service Hub helps unauthenticated visitors discover offerings and calls, with rate limiting and PII protections.
  • OpenStack instance rescue/unrescue — Recover misconfigured instances by booting them from a rescue image without losing the original disk state. Available as a UI action.
  • OpenStack load balancer (LBaaS) management — Full UI for creating and managing load balancers, listeners, pools, members, and health monitors, with floating IP attachment, security group rules on VIP ports, and algorithm validation against provider capabilities.
  • OpenStack router external gateway management — New actions for setting and clearing external gateways and managing static routes from the UI.
  • Hypervisor capacity via Placement API — OpenStack capacity tracking migrated to the Nova Placement API with a new per-instance allocations diagnostic endpoint, allocation-candidates pre-flight check, and a hypervisor summary tab on the tenant page.
  • Usage-based billing for OpenStack offerings — Operators can now configure OpenStack offerings to bill by actual usage instead of upfront allocation [WAL-9841].
  • Monthly component usage reporting — Aggregated monthly usage records per offering component, with a new reporting page for service providers showing usage trends [WAL-9823].
  • Project affiliations with external organizations — Projects can now declare affiliations with external organizations, with admin UI and a project metadata editor [WAL-9846].
  • Science domain registry — New ScienceDomain/ScienceSubDomain registry with admin UI, preset loading, and editable per-project assignment [HPCMP-476].
  • Custom project slug templates — Customers and calls can now define project slug templates with live hint preview during project creation.
  • Resource grace period — Offerings can opt into a grace period before resources are downscaled or terminated; surfaced as a warning bar on projects and a flag on resources [HPCMP-477].
  • Project lifecycle badges — Projects show lifecycle state (active, ending soon, in grace period) in lists, cards, and resource flags.
  • GDPR-compliant address attribute on User — User profiles now include an address field that can be exposed selectively via offering attribute config.
  • AI Assistant message feedback collection — Users can rate assistant responses with a categorized feedback dialog [WAL-9486].
  • Reviewer invitation emails and rejection notifications — Reviewers receive emails when added to a call pool; requesters and Puhuri portal contacts receive notifications when permission requests or allocations are rejected.
  • Cross-organization notification isolation — Tests and behavior added to ensure notifications never leak across organization boundaries.
  • Restoring soft-deleted projects — Project recovery action graduated out of feature flag and available to staff.
  • Order timestamps in error and output logs — Orders now expose error_updated_at and output_updated_at for clearer troubleshooting [WAL-7982].
  • SET_CONSUMER_ORDER_INFO permission — Consumer-side users can respond to provider information requests on orders with a dedicated permission [WAL-9872].
  • ORDER.CREATE permission — Restricts order creation so customer readers cannot create orders.
  • Onboarding button on organization page — Direct access to organization onboarding from the organization list.
  • Usage-based pagination across reports — Server-side pagination added to offering cost reports, missing usage reports, and resources-by-offering tables for large dataset performance.

Improvements

  • Server-side pagination across reporting tables (offering costs, missing usage, resources-by-offering, usage monitoring) replaces client-side filtering for large datasets.
  • Marketplace landing page gets new layouts (carousel, sidebar, classic) with category sidebar, hero section, and configurable card styles.
  • AI Assistant drawer now supports expand/collapse, defers runtime mount until opened, and renders a richer resource list block with table data.
  • Plan details popup correctly shows the prepaid subscription period and remaining duration; resource change-limits dialog now shows remaining prepaid period instead of annual price.
  • Order summary and pending-confirmation drawer get UI polish: cleaner table headers, icon button consistency, hidden actions when empty, and avatar placeholder colors aligned with the design system.
  • OpenStack Octavia load balancer sync skips when the service is not in the catalog and is now part of TenantPullExecutor [WAL-9387].
  • Pending order tickets include prepaid total cost, slugs, and start/end dates in the description.
  • Pending order ticket created automatically when an order enters pending state.
  • Volume snapshot deletion cascades to delete the connected VM snapshot [WAL-9882].
  • Hypervisor summary tab added to OpenStack tenant management view, with capacity charts [WAL-7929].
  • Maintenance announcement template API now exposes affected_offerings.
  • Remaining group invitation tokens are removed when project details dialog is cancelled.
  • Resource end-date no longer enforces a 1-week minimum, giving operators full flexibility.
  • AI Assistant content saved to the chat history now matches what was displayed in the UI [WAL-9848].
  • AI Assistant for staff users can discuss generic, non-Waldur questions [WAL-9811].
  • AI Assistant uses keyword-based intent classification to load only relevant tools per query [WAL-9845].
  • Service provider chat offering filter correctly matches shared offerings [WAL-9799].
  • TOS management UI rewritten for consistency, with a pending TOS consent widget on the user dashboard [WAL-9874, WAL-9877].
  • Project slug template now applies when projects are created via API.
  • Identity bridge selection allows first/last name as user attribute choices.
  • Service desk request type management gets reorder validation and bulk activate/deactivate/delete actions.
  • Provider project list now has an expandable team subtable for service providers [WAL-9844].
  • Set consumer info action permission moved to the new SET_CONSUMER_ORDER_INFO permission [WAL-9872].
  • Retry order button now respects permission checks [WAL-9880].
  • Resource row actions correctly fetch project UUID for permission evaluation [WAL-9871].
  • Project team Details action restricted to staff/support [WAL-9875].
  • Apply action on calls table moved into the 3-dots dropdown for cleaner UX.
  • Reporting charts use lighter color palettes; summary widgets get improved spacing.
  • Pillow upgraded to 12.2.0 (CVE-2026-40192); lxml bumped to fix GHSA-vfmq-68hx-4jfw; dompurify upgraded to 3.4.0 (GHSA-39q2-94rc-95cp); xmldom upgraded to 0.8.13; Keycloak bumped to 26.6.1 (CVE-2026-4366, CVE-2026-4633); waldur-keycloak-mapper bumped to 1.4.0.
  • Python runtime upgraded to 3.13 on Debian Bookworm; Docker image switched from Alpine to Debian slim for fastembed/onnxruntime support.
  • Resource Add button hidden from users without CREATE_ORDER permission.

Bug Fixes

  • Numerous serializer fixes correct Go SDK unmarshal errors: minimal_price, plan prices, get_quotas return type, NestedPriceEstimateSerializer, scope_name field type, and access_url OpenAPI schema [PUHURI/SDK].
  • Fix IntegrityError on OpenStack image pull when duplicates are hidden, with regression test.
  • Fix N+1 queries in marketplace component usage list endpoint and avoid M2M JOIN + DISTINCT on offering-users endpoint [PUHURI-PORTALS-P52, Q1P].
  • Fix PlanComponent.DoesNotExist crash in set_limits for TOTAL limit components.
  • Fix quarterly SLURM policies broken by 0226 limit_period backfill, with repair migration [WAL-9907].
  • Fix prepaid field validation to allow null values on non-prepaid components [WAL-9908].
  • Fix volume discount applied to duration-multiplied quantity (frontend threshold check also corrected for prepaid components).
  • Fix prepaid duration calculation to use order start_date.
  • Fix CourseAccount serializer crash on null project dates.
  • Fix user_has_consent=false filter incorrectly excluding offerings with no consent records.
  • Fix IntegrityError and InvalidCursorName crash in sync_allocation_limits and SLURM periodic settings sync OOM.
  • Fix deactivated users unable to log in via OIDC with pending invitation; group invitations no longer blocked by OIDC_BLOCK_CREATION_OF_UNINVITED_USERS.
  • Fix UniqueViolation in constance key rename migration.
  • Fix verify_ssl not being passed to OctaviaClient connection [WAL-9388].
  • Fix user filter incorrectly including users with revoked project/organization roles.
  • Fix maintenance announcement affected_offerings missing from API response.
  • Fix scientific notation display in plan price editing.
  • Fix tool-call follow-up path crash and silent content drop in AI Assistant streamer.
  • Fix XSS vulnerabilities across markdown/HTML rendering components.
  • Fix dropdown pagination in cost policy, credit, issue project/resource, and move-to-project autocompletes [HPCMP-471].
  • Fix credit usage dialog showing wrong project name and incorrect filter.
  • Fix estimated total price value in plan section.
  • Fix permission request rejection notification to use full name as sender [WAL-9906].
  • Fix set_as_erred action exposure for orders in UI [WAL-9648].

Core Component Activity

  • Waldur Mastermind: 184 commits - Resource projects, AI assistant tools, OpenStack rescue/Placement API/LBaaS, usage-based billing, science domains, affiliated organizations, Python 3.13 upgrade.
  • Waldur Homeport: 160 commits - Resource projects UI, OpenStack LBaaS frontend, AI assistant agentic loop, marketplace layouts, server-side pagination for reports, useManagedMutation refactor, extensive UI polish.
  • Waldur Helm: 15 commits - Pull secret added to cleanup cronjob; release candidate version bumps.
  • Waldur Docker Compose: 16 commits - Keycloak 26.6.1 (CVE fixes), waldur-keycloak-mapper 1.4.0, release candidate bumps.

Resources

8.0.7 - 2026-04-09

Highlights

This release introduces Personal Access Tokens (PATs) for programmatic API access, upfront billing with prepaid components, and a fully redesigned reporting and analytics module. Policy enforcement is now more reliable with credit-aware evaluation, debounced month-boundary triggers, and clear attribution of automated actions. The AI Assistant gained VM creation capabilities, role-based access control, OpenAI API compatibility, and improved streaming reliability.

What's New

  • Personal Access Tokens (PATs): Users can now create, rotate, and revoke personal access tokens for programmatic API access, with a dedicated management UI and admin overview.
  • Upfront billing and prepaid components: Offerings can now use upfront billing with configurable prepaid durations, renewal constraints, and volume discount display in the order form.
  • Project end date change requests: Project members can request end date modifications through a formal approval workflow with notifications for approvals and rejections.
  • AI Assistant VM creation: The built-in AI Assistant can now create virtual machines through a guided multi-step flow with offering selection, inline streaming of tool results, and rendered UI blocks.
  • AI Assistant RBAC and customization: AI Assistant access can now be restricted by role, its name and organization are customizable, and it includes a disclosure statement for users.
  • Reporting and analytics overhaul: The reporting module has been completely redesigned with a new layout, toggleable report screens, chart export capabilities, proposal analytics, and user demographics dashboards.
  • Quota usage notifications: Automated email notifications are now sent when resource quota usage reaches 75% and 100%.
  • Batch project operations: Staff users can now batch-move and batch-delete projects, and batch-activate or batch-deactivate users.
  • Bulk article code updates: Staff users can find and replace article codes across offerings through a guided wizard.
  • Identity bridge allowed-fields endpoint: A new API endpoint exposes which identity bridge fields are available, and these fields are now shown on the user's own profile.

Improvements

  • Cost policy enhancements: Policies now account for available project/customer credits, include affected resource counts, debounce at month boundaries to prevent false triggers, and track actions with reversion history and event scopes.
  • OpenStack improvements: Load balancer management now uses the OpenStack SDK (Octavia), port security can be toggled during instance creation, fixed IPs are supported in port updates, and Nova microversion 2.47 is used for reliable flavor data.
  • Marketplace filters and API: Added resource attribute filters, slug filters on all slug-based endpoints, robot account search filters, and created_before/modified_before date filters.
  • Offering and resource management: Offerings now support helpdesk and documentation URLs, extensions lists on software packages, state counters for resource/user distribution, and a provider description field. Billing mode switching is generalized for all offering types.
  • Grace period visibility: Grace period information is now displayed in project cards, resource lists, resource details, and organization settings.
  • User management: Added deactivation reason tracking, gender field now uses string values, and OIDC claim parsing includes normalization. Staff can add deactivated users to teams.
  • Proposal system: Reviewers and proposal creators receive deadline approach notifications, staff can override COI blocks and reviewer invitations, and proposal analytics are available in reporting.
  • SCIM and site agent sync: SCIM sync now triggers on resource and user state transitions and offering endpoint changes. Site agent message deduplication can be bypassed for user-triggered updates.
  • Notifications default to disabled: All notifications are now disabled by default and must be explicitly enabled.
  • Marketplace layout customization: Admins can configure marketplace card style and layout mode, and select login page visual layouts through a preview selector.
  • Rebranded eduTEAMS to MyAccessID in the authentication UI.
  • E2E testing migrated from Cypress to Playwright.

Bug Fixes

  • Fixed price estimate fields returning numbers instead of strings.
  • Fixed renewal cost calculation not accounting for component factors.
  • Fixed ComponentUsage duplicates caused by plan period mismatches.
  • Fixed limit usage calculation consistency between panel display and policy enforcement.
  • Fixed credit deduction and policy evaluation race conditions.
  • Fixed policy actions bypassing Django signals, breaking STOMP notifications.
  • Fixed STOMP circuit breaker never recovering from OPEN state.
  • Fixed user deactivation sync for course accounts and inactive users.
  • Fixed internal comment flag not synced from Jira REST API.
  • Fixed N+1 queries on users, course accounts, and service provider users endpoints.
  • Fixed offering user creation race conditions and Gunicorn worker timeouts.
  • Fixed offering user usernames cleared on plugin options update.
  • Fixed duplicate key errors during structure import with existing offering users.
  • Fixed AI Assistant persisting full message instead of partial on stop and mid-stream disconnects.
  • Fixed resource panel showing stale usage when limit_usage is zero.
  • Fixed marketplace sidebar filter synchronization issues.
  • Fixed URLs with trailing slashes causing 404 errors.

Security

  • Bumped Django to address GHSA-5mf9-h53q-7mhq.
  • Bumped cryptography 46.0.6 to 46.0.7 to fix GHSA-p423-j2cm-9vmq.
  • Added osv-scanner dependency vulnerability scanning to CI pipelines.
  • Escaped user input in GLauth TOML config to prevent parse errors.
  • Added validation that security groups cannot be used with port security disabled.

Core Component Activity

  • Waldur Mastermind: 216 commits - PATs, upfront billing, policy improvements, AI Assistant enhancements, quota notifications, project end date requests, OpenStack SDK migration
  • Waldur Homeport: 180 commits - PAT management UI, prepaid billing forms, reporting overhaul, project end date requests, AI Assistant VM creation, Playwright migration
  • Waldur Helm: 31 commits - Configurable proxy buffer size, whitelabeling image pull secret, version bumps
  • Waldur Docker Compose: 28 commits - Keycloak upgrade with optional profile, removed deprecated FirecREST config, version bumps

Resources

8.0.6 - 2026-03-06

Highlights

This release delivers major API performance improvements by fixing numerous N+1 query issues across key endpoints, significantly reducing response times for large deployments. OpenStack gains Load Balancer as a Service (LBaaS) support and Application Credentials authentication, while the AI Assistant is hardened with sensitive data detection and injection prevention. Operators also get new feature flags for fine-grained UI visibility control and improved billing credit handling.

What's New

  • OpenStack Load Balancer as a Service (LBaaS). Backend support for managing load balancers via the OpenStack Octavia API.
  • OpenStack Application Credentials authentication. Operators can now connect OpenStack services using application credentials instead of username/password.
  • OpenStack instances reporting page. Staff users can view aggregate statistics and details for all OpenStack instances from a dedicated reporting page.
  • AI Assistant sensitive data detection. Chat input is now scanned for PII, credentials, and injection attempts before being sent to the AI model, with warnings displayed to users.
  • GPU architecture fields for software catalogs and partitions. Software targets and offering partitions now track GPU architectures, with filtering support in the UI.
  • Software catalog: multiple parent packages. Software extensions can now be linked to multiple parent packages instead of just one.
  • Staff user creation and password management. Staff users can now create and edit user accounts with password management through a step-by-step wizard.
  • SLURM policy force-period-reset. Staff can manually trigger a period reset for SLURM usage policies via a new API action.
  • SSH key change notifications. Optionally create support tickets when users add or remove SSH keys, configurable via Constance settings.
  • SSH key type restrictions. Operators can restrict which SSH key types (RSA, ED25519, etc.) are accepted, with the UI showing restrictions before import.
  • Feature flags for UI visibility. New toggles to conceal audit logs from end users, hide resource metadata, and restrict marketplace access to staff.
  • Quarterly usage aggregation. Resource usage can now be aggregated by quarter in addition to monthly and total periods.
  • Table growth monitoring UI. Administrators can view database table growth trends and trigger manual samples from a new settings page.
  • Visual login layout selector. Administrators can preview and select login page layouts from a visual picker in settings.
  • Offering user auto-deletion option. New plugin option to automatically delete offering users when they are removed, with sync restoration support.
  • Identity management improvements. ISD managers can create agent identities without offering users, and identity managers can list offering users scoped by ISD overlap.

Improvements

  • Extensive N+1 query fixes. Resolved N+1 queries on project list, project list_users, customer projects, robot accounts, service provider project_permissions, component usage, marketplace orders, and stats endpoints.
  • Django upgraded to 6.0.2. The backend framework has been updated from Django 5.2 to 6.0.2.
  • Structured logging migration. Mastermind now uses structlog for consistent JSON-formatted logs across API, Celery, and Django request loggers.
  • Bulk course account creation moved to background tasks. Large CSV uploads no longer time out — processing happens asynchronously.
  • Token refresh DB load reduced. An adaptive debounce interval prevents excessive database writes during token refreshes.
  • Migration squashing. 60 migration steps consolidated across 5 apps, speeding up fresh database setup and CI runs.
  • Locale-aware number formatting. Usage and quota displays now format numbers according to the user's locale.
  • Footer redesign. Application footer links have been consolidated and redesigned for better organization.
  • Table toolbar alignment. Search, filters, and action buttons are now consistently aligned in table toolbars.
  • Filter migration to generator. Multiple batches of hand-written table filters replaced with auto-generated versions for consistency.
  • Offering managers can set order states. Expanding self-service capabilities for service providers.
  • Invitation text extended to 2000 characters. Longer custom messages can now be included in invitations.
  • Marketplace resource pull action exposed. Users can now trigger resource sync from the UI for OpenStack instances, tenants, and volumes.
  • Helm chart supports image digest pulling. Deployments can now pin images by digest for reproducibility.
  • Dependencies bumped to address known security vulnerabilities in both Python and npm packages.

Bug Fixes

  • Fixed expired project credits not being zeroed and excluded from linear consumption calculations.
  • Fixed duplicate role creation when group invitations are auto-approved.
  • Fixed 500 error when X-Forwarded-For header contains a hostname instead of an IP address.
  • Fixed invalid auth state handling during social authentication flows.
  • Fixed resource duplication check incorrectly preventing all resource creation in remote marketplace.
  • Fixed corrupt NULL constance values crashing the settings endpoint.
  • Fixed GLAuth uidnumber generation to be scoped per offering instead of globally.
  • Fixed synchronous subtask call in SLURM policy evaluation causing Celery issues.
  • Fixed order unlink AttributeError by relocating get_order_scopes to the log module.
  • Fixed Atlassian support backend TypeError in pull_request_types.
  • Fixed image name parsing/grouping and increased flavor page size in instance deployment.
  • Fixed resource component quota display showing incorrect units and layout.
  • Fixed order details showing pricing when billing info is concealed.
  • Fixed stale "No association" warning after auto-approved group invitation.
  • Fixed various translation issues across Estonian, Lithuanian, and German locales.

Core Component Activity

  • Waldur Mastermind: 92 commits - LBaaS backend, N+1 fixes, AI assistant hardening, Django 6.0, structured logging, SLURM policy reset, SSH key management
  • Waldur Homeport: 56 commits - OpenStack reporting page, user management wizard, sensitive data detection UI, filter generator migration, footer redesign, feature flag support
  • Waldur Helm: 9 commits - Docker image digest support, helm-unittest migration
  • Waldur Docker Compose: 4 commits - Maintenance updates only

Resources

8.0.5 - 2026-02-23

This release strengthens AI Assistant security with prompt injection detection, introduces a hypervisor placement map for OpenStack instances, and adds configurable resource naming patterns for offerings. Operators benefit from several reliability fixes addressing webhook race conditions, Keycloak migration conflicts on upgrades, and billing calculation accuracy for total-period limits.

What's New

  • Prompt injection detection for AI Assistant. Incoming messages are now scanned against configurable regex patterns and scored for injection risk. Flagged messages are logged with severity and categories, and administrators can review detection events in the support logs.
  • Hypervisor placement map. OpenStack tenant instance lists now include a visual placement map showing VM-to-hypervisor distribution, with batch action support for selecting multiple instances.
  • Configurable resource naming patterns. Offering managers can define naming patterns for the suggest-name endpoint, and suggested names now use hyphens instead of underscores for consistency.
  • Cost breakdown dialog. Project dashboards now include a detailed cost breakdown dialog showing per-resource rates and usage for the current billing period.
  • Font family selection in branding. Administrators can choose a custom font family in the theme settings to match organizational branding.
  • Bulk user usage submission. A new API endpoint allows submitting usage data for multiple users in a single request.
  • OpenStack cloud demo preset. A new demo preset is available for quickly bootstrapping an OpenStack cloud offering with backend model support.

Improvements

  • Constance settings now support generic enum and multi-select field types in both the backend API and the administration UI.
  • Table filter components across the frontend have been migrated to auto-generated components based on the OpenAPI specification, improving consistency and reducing manual maintenance.
  • Resource action options are now sorted alphabetically by label.
  • Branding configuration modals have been adjusted to a more appropriate size.
  • Question mapping fields are now required when configuring onboarding checklists.
  • Resource component usage rendering has been refined with clearer limit-period display logic.
  • MQTT protocol support has been removed from the Helm chart RabbitMQ configuration, simplifying the messaging setup.

Bug Fixes

  • Fixed EESSI software catalog versions being incorrectly mixed across different catalogs.
  • Fixed a webhook dispatch race condition in the event emit handler that could cause missed or duplicate notifications.
  • Fixed Keycloak migration conflicts that caused InconsistentMigrationHistory errors on databases upgraded from older releases, and made the initial migration idempotent.
  • Fixed AI Assistant returning HTTP 400 errors when regenerating or editing responses with chat storage disabled.
  • Fixed billing calculation for TOTAL limit period resources that was incorrectly multiplied by the number of days.
  • Fixed N+1 query performance issues in course accounts and support comments endpoints.
  • Fixed pricing information showing in organization and project cards when the organization has cost display disabled.
  • Added missing Lithuanian translations for order metadata labels.
  • Fixed remote eduteams configuration and HAproxy redirect annotation in the Helm chart.

Core Component Activity

  • Waldur Mastermind: 23 commits - injection detection, configurable naming patterns, billing fixes, migration safety improvements.
  • Waldur Homeport: 24 commits - placement map, cost breakdown UI, filter generation migration, branding improvements.
  • Waldur Helm: 3 commits - MQTT removal, eduteams and HAproxy fixes.

Resources

8.0.4 - 2026-02-19

This release introduces Keycloak-based user role management for marketplace offerings, full OpenStack server group policy support, and a new system for auto-generating UI table filters from the OpenAPI schema. Several reliability fixes address invoice proration, resource state transitions, and mobile UI regressions.

What's New

  • Keycloak user role management. A new waldur_keycloak plugin enables service providers to manage Keycloak group memberships directly from offering settings, including importing remote groups, assigning memberships, and sending notification emails. The frontend provides a full management UI with bulk actions.
  • OpenStack server group policies. All OpenStack server group policies (affinity, anti-affinity, soft variants) are now supported. Users can create server groups and assign instances to them during deployment via a new scheduling step.
  • AI assistant chat logs. Support staff can now view AI assistant conversation logs in the support view, with expandable rows showing full chat history. Chat context retrieval has been moved server-side for better reliability.
  • OpenAPI-driven filter generation. Table filters can now be auto-generated from the OpenAPI specification, ensuring frontend filters stay in sync with backend query parameters. Several list views have been migrated to this approach.
  • User profile completeness tracking. Service providers can now filter offering users by profile attribute completeness and see field-level warnings. End users see a banner on resource pages when their profile is incomplete.

Improvements

  • Django upgraded from 4.2 to 5.2. The backend framework has been updated to the latest LTS release.
  • MQTT protocol support removed. Message delivery now uses STOMP exclusively, simplifying RabbitMQ configuration across Helm and Docker Compose deployments.
  • Configurable UI font family. Administrators can now select the portal font via a new FONT_FAMILY setting.
  • Sidebar "Match theme" style option. A new sidebar appearance option automatically matches the current theme colors.
  • Onboarding setup view redesigned. The admin onboarding question management interface has been refreshed with improved layout.
  • Permission deletion by type. User affiliation actions now support bulk and row-level permission removal based on permission type.
  • Software package API filters. New name_exact and is_extension filters added for more precise software package lookups.
  • OpenAPI schema quality improvements. View names and operation IDs are now exposed on UUID/URL filter fields, optional request bodies are marked correctly for SDK generators, and a naming collision detector prevents Go SDK build failures.
  • Resource limit validation. The update_limits endpoint now validates min/max bounds before accepting changes.
  • Auto-create default VM/Volume categories. OpenStack resource import automatically creates marketplace categories when they do not exist.
  • Disclaimer area reordered. The footer disclaimer now shows text before the logo with increased spacing.
  • Removed unused SITE_LOGO setting. The deprecated constance setting has been cleaned up from backend and frontend.
  • Header cleanup. Removed duplicate page title and extra search input from the navigation header.
  • Updated Lithuanian translation for the sign-in label.

Bug Fixes

  • Fixed MultipleObjectsReturned error in usage reporting caused by duplicate ComponentUsage records, including a migration to deduplicate existing data.
  • Fixed resources getting stuck in "Updating" state after a successful plan switch.
  • Fixed quarterly limit change invoice quantity proration calculating incorrect amounts.
  • Fixed Customer.get_owners raising AttributeError and deduplicated usage policy notifications.
  • Fixed OpenStack instance image name not being detected during resource pull.
  • Fixed mobile table filters not opening the sidebar drawer due to a missing context action.
  • Fixed pricing information being visible when billing info is configured to be concealed.
  • Fixed null date_created in the offering revision backfill migration.
  • Fixed remote eduteams configuration and HAProxy redirect annotation in Helm charts.
  • Fixed docker-logger permission denied error on docker.sock in Docker Compose setup.

Core Component Activity

  • Waldur Mastermind: 38 commits - Keycloak plugin, Django 5.2 upgrade, OpenAPI improvements, billing and state fixes
  • Waldur Homeport: 24 commits - Keycloak UI, server groups UI, filter generation, profile completeness, mobile fix
  • Waldur Helm: 3 commits - MQTT removal, eduteams and HAProxy fixes
  • Waldur Docker Compose: 3 commits - MQTT removal, docker-logger fix

Resources

8.0.3 - 2026-02-15

This release introduces two-way messaging between providers and consumers on pending orders, a new Identity Bridge API for push-based user attribute synchronization, and a system logs view for administrators. Multiple N+1 query fixes significantly improve API performance on key endpoints, and new feature toggles give operators finer control over marketplace visibility and offering lifecycle management.

What's New

  • Two-way provider-consumer messaging on pending orders. Providers and consumers can now exchange messages while an order is pending review, with email notifications for both sides. This allows clarifying order details without rejecting and re-submitting.
  • Identity Bridge API. A new push-based API enables external identity services to synchronize user profile attributes (organization, registry code) into Waldur without polling.
  • System logs view. Administrators can now view and filter recent Mastermind system logs directly from the admin panel and support view.
  • Order rejection comments. When rejecting an order, both providers and consumers can now include a reason, which is shown in the order details.
  • Provider approval with option modification. Service providers can review and modify resource options when approving an order via a dedicated approval dialog.
  • Renewal cost breakdown. The resource renewal flow now shows a detailed cost estimate via a new estimate_renewal API endpoint before the user confirms.
  • Offering-level backend_id validation rules. Operators can configure regex-based validation patterns for backend IDs on a per-offering basis.
  • Configurable disclaimer area. A new footer disclaimer area can display a custom logo and text, controlled via feature toggle and branding settings.
  • Group invitation custom text. Group invitations now support a custom welcome message, and the creator is hidden on public invitation pages.

Improvements

  • Service provider offering lifecycle controls. New configuration options allow operators to gate offering activation, pausing, and archival to service providers via feature flags, including restricting deletion of offerings with active resources.
  • Organization visibility controls. New feature toggles allow hiding organization-level information from project-level members and disabling the marketplace UI for end users.
  • Permission-aware resource actions. Frontend resource actions (terminate, change plan, change limits, etc.) are now hidden from users who lack the required permissions, with improved tooltips explaining why actions are unavailable.
  • OIDC email-based failover matching. When the primary OIDC identifier is missing, Waldur can fall back to email-based user matching.
  • Organization registry code on user profile. User profiles now include an organization registry code field, synced from identity providers and exposed in the Order API.
  • Duplicate invitation detection. The invitation form now warns creators when a duplicate invitation already exists for the same email.
  • Onboarding checklist setup. Administrators have an improved onboarding question management interface with predefined templates and better filtering.
  • Customer detail data scoped to visible projects. Customer API responses now only include projects visible to the requesting user, and GDPR name filtering now covers all name fields.
  • Service providers can set resource state to OK to manually recover resources, and SLURM policies are re-evaluated when limits increase on downscaled resources.
  • eduTEAMS refresh token rotation moved to Celery Beat for improved reliability as a periodic task.
  • Removed legacy django-admin-tools and django-fluent-dashboard dependencies.
  • Cache-based background task locking replaces equality-check deduplication for improved reliability.
  • Billing info concealment now respected in change limits, change plan, and renewal dialogs.
  • Helm chart improvements. Added secret support for kubeconfig and DataCite password, stomp ingress whitelist configuration, and invoice finalization grace period setting.
  • Lithuanian translations updated across user profile, invitations, terms of service, and organization fields.

Bug Fixes

  • Fixed N+1 query issues on public offerings, service provider, usage task, and users list endpoints by adding caching and optimized prefetching.
  • Fixed cost policy being bypassed for the first resource allocation.
  • Fixed Arrow vendor offering mapping serializer not accepting UUIDs, with updated frontend to match.
  • Fixed login redirect failing when the auth token is expired.
  • Fixed infinite re-render crash when opening drawers on the Resources tab.
  • Fixed offering filter not syncing correctly to the URL.
  • Fixed pricing display for daily-billed offerings showing incorrect amounts.
  • Fixed fractional values being rounded in resource component usage display.
  • Fixed ECharts crash when chart container is null after component unmount.
  • Fixed FreeIPA existing key handling and UVK ingress path type in Helm chart.

Core Component Activity

  • Waldur Mastermind: 59 commits - Provider-consumer messaging, Identity Bridge API, system logs, N+1 fixes, offering lifecycle controls
  • Waldur Homeport: 70 commits - Messaging UI, system logs view, rejection comments, permission-aware actions, billing display fixes
  • Waldur Helm: 10 commits - Secret support for kubeconfig and DataCite, FreeIPA fix, invoice finalization grace period
  • Waldur Docker Compose: 1 commit - Maintenance updates only

Resources

8.0.2 - 2026-02-05

Highlights

This release introduces an invoice finalization grace period, giving operators a configurable window to adjust invoices before they become final. Marketplace offering owners can now disable specific resource actions per offering, providing fine-grained control over what end users can do. OpenStack infrastructure discovery and software catalog management have been significantly improved with new admin tooling and a guided setup wizard.

What's New

  • Invoice finalization grace period. Invoices now enter a "pending finalization" state before becoming final, allowing operators a configurable window to make adjustments. Usage updates on already-finalized invoices are now properly rejected.
  • Disableable resource actions per offering. Offering owners can now selectively disable specific resource actions (e.g., terminate, change limits, move, synchronize, report usage, and more). Only staff users can modify these settings.
  • OpenStack infrastructure discovery. A new discovery wizard helps operators configure OpenStack offerings by auto-detecting available infrastructure, including external network support with dedicated models and API endpoints.
  • AI assistant chat session management. Backend support for logging, persisting, and managing AI assistant chat sessions, including role-based access control and automatic cleanup.
  • Software catalog administration. New admin UI for managing software catalogs with discovery capabilities, plus management commands for exporting, importing, and cleaning up software catalog structures. Catalog loading is now safer with improved validation.
  • Project move permissions expanded. Organization owners in both the source and target organizations can now move projects between them.
  • Separate customer contact update permission. A new CUSTOMER_CONTACT_UPDATE permission allows delegating contact information management without granting broader customer editing rights.
  • Event logs for deleted verifications. Verification deletion events are now logged for audit trail purposes.

Improvements

  • Version history API reliability. Fixed empty results for newly created objects and backfilled initial version history entries for existing resources.
  • SCIM entitlements refactored to use offering user usernames, improving compatibility with identity providers.
  • Customer list filtering extended with additional filter options.
  • Registration method is now exposed in the offering serializer by default.
  • Resource options validation now checks for pending orders before allowing updates.

Bug Fixes

  • Fixed SLURM QoS not updating correctly when downscaling allocations, with improved policy warning display when the site agent queue is misconfigured.
  • Fixed N+1 query performance issue on the marketplace orders list endpoint.
  • Fixed quarterly and annual billing limit changes creating duplicate invoice items.
  • Fixed invoice generation for annual billing periods.
  • Fixed TypeError when saving date values in offering plugin_options.
  • Fixed nullable partition field in software catalog serializer for SDK compatibility.
  • Fixed undefined variable exception in OpenStack backend.
  • Added debounce to global search to prevent rate limit errors on fast typing.
  • Fixed AI assistant token usage column showing in user list when the feature is disabled.
  • Fixed select field rendering in offering edit panel.
  • Fixed confirmation dialog input type for onboarding justification actions.
  • Fixed invitation translation strings.

Core Component Activity

  • Waldur Mastermind: 30 commits - Invoice grace period, disableable actions, OpenStack discovery, AI chat management, software catalog tooling, billing and permission fixes.
  • Waldur Homeport: 17 commits - Disableable actions UI, invoice state support, OpenStack discovery wizard, software catalog admin UI, search and rendering fixes.
  • Waldur Helm: 2 commits - Maintenance updates and CI fix for homeport tag setting.
  • Waldur Docker Compose: 1 commit - Maintenance updates only.

Resources

8.0.1 - 2026-02-03

Highlights

Waldur 8.0.1 is a major release that introduces Arrow accounting integration for automated license and consumption billing, a comprehensive analytics and reporting suite covering orders, users, provisioning, and resource geography, and a revamped SLURM policy management experience with visual previews and execution logging. Operators gain new tools for database growth monitoring, OIDC identity provider discovery, SCIM user synchronization, and event subscription queues for real-time integrations.

What's New

  • Arrow accounting integration. New module for syncing resources, consumption records, and billing data from Arrow, with a full management dashboard including customer mappings, vendor offering mappings, and import wizards.
  • Analytics and reporting suite. Added reporting pages for orders, user demographics, provisioning statistics, resource geography, usage trends, usage by organization type, project classification, offering costs, maintenance operations, and provider-level analytics.
  • SLURM policy visualization and logging. SLURM usage policies now include a visual preview, execution log viewer, status summary, and on-demand policy evaluation from the offering management page.
  • OIDC discovery. Administrators can now configure identity providers via OpenID Connect discovery, with a guided wizard that auto-discovers endpoints and claim mappings.
  • SCIM synchronization. Initial support for synchronizing user data to external systems via the SCIM protocol.
  • Event subscription queues. New SubscriptionQueue model enables external systems to subscribe to Waldur events and consume them via a pull-based API.
  • Resource version history. Resources now track changes via django-reversion, with a timeline UI showing diffs between versions.
  • Offering tag management. Offerings can be tagged and filtered by tags across the marketplace, with a dedicated admin interface for managing tags.
  • Database table growth monitoring. New scheduled task tracks table sizes over time with configurable alerts when growth exceeds thresholds, visible in the administration panel.
  • AI assistant usage accounting. Token consumption by the AI assistant is now tracked per user with configurable quotas, plus an LLM validation management command for quality assurance.
  • Storage folder manager. Initial skeleton for a new storage folder manager offering option type.
  • Project digest notifications. Project members can now receive periodic digest emails summarizing team activity, resource usage, and upcoming end dates.

Improvements

  • Extended user profile attributes. Users now have fields for country of residence, eduPerson assurance level, nationality, and affiliations parsed from AAI attributes. Administrators can define mandatory profile attributes that users must complete before accessing the platform.
  • Offering visibility modes. Marketplace offerings can be configured with visibility modes to control which users can see them.
  • Cross-field validators for offering options. Marketplace offering options now support greater-than, greater-than-or-equal, less-than, and less-than-or-equal validators with cross-field references.
  • Editable pending orders. Users with approval permissions can now update limits, attributes, and start date on pending orders.
  • Subscription renewal minimum set to 12 months. The minimum extension period for allocation renewals has been increased from 1 to 12 months.
  • Staff-only set_erred and set_ok actions. Staff users can now manually transition resources and routers to erred or OK states for troubleshooting.
  • Conditional checklist questions. Onboarding checklists now support conditional question logic based on previous answers.
  • Support users can manage announcements. The admin announcements feature is now accessible to support-role users.
  • OpenStack duplicate image handling. When duplicate image names are retrieved from OpenStack, only the most recently created image is used.
  • Service providers can update OpenStack quotas. OpenStack tenant quotas can now be updated by the service provider role.
  • Offering pricing tab toggle. A new feature flag allows hiding the pricing tab on offerings.
  • Unified wizard components. Wizard dialogs across the application now share a consistent step indicator and layout.
  • Improved pending invitations display. The user dashboard shows invitations in a more compact format with expiry badges.
  • Onboarding address fetching. Estonian and Austrian business registry validation now automatically fetches company address data.
  • Improved translations. Updated localization files for 23 languages.

Bug Fixes

  • Fixed a TransitionNotAllowed error when saving an OfferingUser in DELETED state.
  • Fixed RabbitMQ host resolution in the Docker Compose init script that was overwriting pre-set host values.
  • Fixed OpenStack network and subnet creation to use non-bulk API calls for better compatibility.
  • Fixed group invitation token handling during OAuth login flow.
  • Fixed one-time component price calculation returning incorrect values for zero quotas.
  • Fixed marketplace script pull and options handler in Kubernetes mode.
  • Fixed a 500 error when requesting specific fields via the API.
  • Fixed anonymous user filtering by organization in the marketplace.
  • Fixed missing pagination on the support page offering users list.
  • Fixed the Enter key triggering form submission in search filter bars.
  • Fixed the edit end date dialog sizing when many resources are affected.
  • Normalized country codes to uppercase when parsing schacPersonalUniqueID attributes.

Core Component Activity

  • Waldur Mastermind: 98 commits - Arrow integration, SLURM policy overhaul, extended user attributes, reporting endpoints, OIDC discovery, SCIM sync, event subscription queues, resource history API, offering tags, DB growth monitoring
  • Waldur Homeport: 83 commits - Arrow management dashboard, comprehensive reporting suite, SLURM policy visualization, OIDC discovery wizard, version history UI, offering tags UI, user profile rework, wizard unification
  • Waldur Helm: 2 commits - maintenance updates only
  • Waldur Docker Compose: 2 commits - maintenance updates only

Resources

7.9.8 - 2026-01-21

Release Summary

  • Release Impact: Minor release with configuration and documentation updates

Core Component Activity

  • Waldur Mastermind: No changes
  • Waldur Homeport: No changes
  • Waldur Helm: No changes
  • Waldur Docker Compose: No changes
  • Waldur Prometheus Exporter: No changes

Resources

7.9.7 - 2026-01-17

Release Summary

  • Release Impact: Minor release with configuration and documentation updates
  • SDK Updates: 3 auto-generated clients updated

Core Component Activity

  • Waldur Mastermind: No changes
  • Waldur Homeport: No changes
  • Waldur Helm: No changes
  • Waldur Docker Compose: No changes
  • Waldur Prometheus Exporter: No changes

SDK Updates (Auto-generated)

Py Client Highlights

  • Release: bump version to 7.9.7.
  • Update Waldur Python SDK.
  • Update Waldur Python SDK.

Js Client Highlights

  • Release: bump version to 7.9.7.
  • 7.9.7-dev.10.
  • Update Waldur TypeScript SDK.

Go Client Highlights

  • Update Waldur Go SDK.
  • Update Waldur Go SDK.
  • Update Waldur Go SDK.

7.9.6 - 2026-01-07

Release Summary

  • Release Impact: Minor release with configuration and documentation updates
  • SDK Updates: 3 auto-generated clients updated

Core Component Activity

  • Waldur Mastermind: No changes
  • Waldur Homeport: No changes
  • Waldur Helm: No changes
  • Waldur Docker Compose: No changes
  • Waldur Prometheus Exporter: No changes

SDK Updates (Auto-generated)

Py Client Highlights

  • Release: bump version to 7.9.6.
  • Update Waldur Python SDK.
  • Update Waldur Python SDK.

Js Client Highlights

  • Release: bump version to 7.9.6.
  • 7.9.6-dev.24.
  • Update Waldur TypeScript SDK.

Go Client Highlights

  • Update Waldur Go SDK.
  • Update Waldur Go SDK.
  • Update Waldur Go SDK.

Resources

7.9.5 - 2025-12-17

Release Summary

  • Release Impact: Minor release with configuration and documentation updates

Core Component Activity

  • Waldur Mastermind: No changes
  • Waldur Homeport: No changes
  • Waldur Helm: No changes
  • Waldur Docker Compose: No changes
  • Waldur Prometheus Exporter: No changes

Resources

7.9.4 - 2025-12-16

Release Summary

  • Release Impact: Minor release with configuration and documentation updates
  • SDK Updates: 3 auto-generated clients updated

Core Component Activity

  • Waldur Mastermind: No changes
  • Waldur Homeport: No changes
  • Waldur Helm: No changes
  • Waldur Docker Compose: No changes
  • Waldur Prometheus Exporter: No changes

SDK Updates (Auto-generated)

Js Client Highlights

  • Release: bump version to 7.9.4.
  • 7.9.4-dev.2.
  • Update Waldur TypeScript SDK.

Resources

7.9.3 - 2025-12-14

Release Summary

  • Release Impact: Minor release with configuration and documentation updates

Core Component Activity

  • Waldur Mastermind: No changes
  • Waldur Homeport: No changes
  • Waldur Helm: No changes
  • Waldur Docker Compose: No changes
  • Waldur Prometheus Exporter: No changes

Resources

7.9.2 - 2025-12-07

Release Summary

  • Release Impact: Minor release with configuration and documentation updates
  • SDK Updates: 3 auto-generated clients updated

Core Component Activity

  • Waldur Mastermind: No changes
  • Waldur Homeport: No changes
  • Waldur Helm: No changes
  • Waldur Docker Compose: No changes
  • Waldur Prometheus Exporter: No changes

SDK Updates (Auto-generated)

Py Client Highlights

  • Release: bump version to 7.9.2.
  • Update Waldur Python SDK.
  • Update Waldur Python SDK.

Js Client Highlights

  • Release: bump version to 7.9.2.
  • 7.9.2-dev.8.
  • Update Waldur TypeScript SDK.

Go Client Highlights

  • Update Waldur Go SDK.
  • Update Waldur Go SDK.
  • Update Waldur Go SDK.

Resources

7.9.1 - 2025-11-30

Release Summary

  • Release Impact: 23 commits across 4 core repositories
  • Functional Changes: 82 files changed with +4925/-1030 lines
  • SDK Updates: 3 auto-generated clients updated from OpenAPI schema

Statistics Note

Excludes tests, auto-generated files, and SDK client code for accurate development metrics.

Core Component Activity

  • Waldur Mastermind: 11 commits · 21 files changed (+2791/-557 lines)
  • Waldur Homeport: 9 commits · 54 files changed (+2125/-465 lines)
  • Waldur Helm: 2 commits · 7 files changed (+9/-8 lines)
  • Waldur Docker Compose: 1 commits
  • Waldur Prometheus Exporter: No changes

SDK Updates (Auto-generated)

Notable Changes

  • Check if WALDUR_OPENPORTAL during routes permission check. (349cad4 - Waldur Homeport)
  • Allow set of custom cluster issuer name for cert manager. (7ee2d14 - Waldur Helm)
  • Workarkound for changed API. (23c6904 - Waldur Mastermind)
  • Extend export/import of data. (9f50656 - Waldur Mastermind)
  • Set target version to 7.9.1. (7fc5104 - Waldur Helm)
  • Set target version to 7.9.1. (c7dc4e7 - Waldur Docker Compose)

Waldur Mastermind Highlights

  • Workarkound for changed API.
  • Extend export/import of data.
  • Add filter to exclude transitional resources with early pending orders.

Waldur Homeport Highlights

  • Fix bad error message when applying for a an available organization with already open request.
  • Migrate invitation form to react final form.
  • Reallocation limits UI changes.

Js Client Highlights

  • Release: bump version to 7.9.1.
  • 7.9.1-dev.2.
  • Update Waldur TypeScript SDK.

Resources

7.9.0 - 2025-11-30

Release Summary

  • Release Impact: 16 commits across 4 core repositories
  • Functional Changes: 114 files changed with +1405/-927 lines
  • SDK Updates: 3 auto-generated clients updated from OpenAPI schema

Statistics Note

Excludes tests, auto-generated files, and SDK client code for accurate development metrics.

Core Component Activity

  • Waldur Mastermind: 8 commits · 11 files changed (+377/-7 lines)
  • Waldur Homeport: 3 commits · 99 files changed (+1023/-915 lines)
  • Waldur Helm: 4 commits · 4 files changed (+5/-5 lines)
  • Waldur Docker Compose: 1 commits
  • Waldur Prometheus Exporter: No changes

SDK Updates (Auto-generated)

Notable Changes

  • [WAl-9443] Show review summary on in review proposals. (46b54e2 - Waldur Homeport)
  • Set target version to 7.9.0. (9d3756c - Waldur Helm)
  • Revert "Revert "Remove leftover path modifications"". (5ee8f11 - Waldur Helm)
  • Fix ingress condition. (63903a7 - Waldur Helm)
  • Revert "Remove leftover path modifications". (d8dd890 - Waldur Helm)
  • Set target version to 7.9.0. (58ceaa9 - Waldur Docker Compose)

Waldur Mastermind Highlights

  • Cleanup unused migration.
  • Add readonly viewset to list checklists for call organizers.
  • Expose additional fields for invoice items.

Resources

7.8.9 - 2025-11-30

Release Summary

  • Release Impact: 4 commits across 3 core repositories
  • Functional Changes: 8 files changed with +243/-38 lines
  • SDK Updates: 2 auto-generated clients updated from OpenAPI schema

Statistics Note

Excludes tests, auto-generated files, and SDK client code for accurate development metrics.

Core Component Activity

  • Waldur Mastermind: 2 commits · 6 files changed (+240/-35 lines)
  • Waldur Homeport: No changes
  • Waldur Helm: 1 commits · 2 files changed (+3/-3 lines)
  • Waldur Docker Compose: 1 commits
  • Waldur Prometheus Exporter: No changes

SDK Updates (Auto-generated)

Notable Changes

  • Request deletion of offeringuser upon removal from project. (9135636 - Waldur Mastermind)
  • Add validation that resources belong to the same offering for limit reallocation. (3c8adcd - Waldur Mastermind)
  • Set target version to 7.8.9. (39c5fea - Waldur Helm)
  • Set target version to 7.8.9. (fad7a57 - Waldur Docker Compose)

Resources

7.8.8 - 2025-11-30

Release Summary

  • Release Impact: 123 commits across 4 core repositories
  • Functional Changes: 667 files changed with +36182/-3236 lines
  • SDK Updates: 3 auto-generated clients updated from OpenAPI schema

Statistics Note

Excludes tests, auto-generated files, and SDK client code for accurate development metrics.

Core Component Activity

  • Waldur Mastermind: 74 commits · 118 files changed (+22512/-916 lines)
  • Waldur Homeport: 31 commits · 517 files changed (+13369/-2145 lines)
  • Waldur Helm: 17 commits · 32 files changed (+301/-175 lines)
  • Waldur Docker Compose: 1 commits
  • Waldur Prometheus Exporter: No changes

SDK Updates (Auto-generated)

Notable Changes

  • Force migration of queues. (202721f - Waldur Mastermind)
  • Fix check for rmq availability. (1d4da20 - Waldur Mastermind)
  • Extend migration to handle both broken and new migrations. (6bb3faf - Waldur Mastermind)
  • Fix mermaid typos. (2b7c2ca - Waldur Mastermind)
  • Add orders documentation. (65a4924 - Waldur Mastermind)
  • Disable rendering of email vars as they crash ansible installer. (9bde6ca - Waldur Helm)

Waldur Mastermind Highlights

  • Extend migration to handle both broken and new migrations.
  • Fix mermaid typos.
  • Add orders documentation.

Waldur Homeport Highlights

  • Expose uploaded purchase order in order details [WAL-9356].
  • Implement frontend for site agent diagnostics.
  • Add form field use_user_organization_as_customer_name.

Waldur Helm Highlights

  • Disable rendering of email vars as they crash ansible installer.
  • Set target version to 7.8.8.
  • Fix template.

Py Client Highlights

  • Release: bump version to 7.8.8.
  • Update Waldur Python SDK.
  • Update Waldur Python SDK.

Js Client Highlights

  • Release: bump version to 7.8.8.
  • 7.8.8-dev.17.
  • Update Waldur TypeScript SDK.

Go Client Highlights

  • Update Waldur Go SDK.
  • Update Waldur Go SDK.
  • Update Waldur Go SDK.

Resources

7.8.7 - 2025-11-30

Release Summary

  • Release Impact: 78 commits across 4 core repositories
  • Functional Changes: 186 files changed with +6887/-1416 lines
  • SDK Updates: 3 auto-generated clients updated from OpenAPI schema

Statistics Note

Excludes tests, auto-generated files, and SDK client code for accurate development metrics.

Core Component Activity

  • Waldur Mastermind: 49 commits · 46 files changed (+3070/-210 lines)
  • Waldur Homeport: 25 commits · 113 files changed (+3140/-1040 lines)
  • Waldur Helm: 3 commits · 27 files changed (+677/-166 lines)
  • Waldur Docker Compose: 1 commits
  • Waldur Prometheus Exporter: No changes

SDK Updates (Auto-generated)

Notable Changes

  • Fix project credit modal crashing issue. (b25f336 - Waldur Homeport)
  • Improve UI of add component modal. (297babe - Waldur Homeport)
  • Set target version to 7.8.7. (563758c - Waldur Helm)
  • Cleanup docs. (78a0621 - Waldur Helm)
  • Add support to set external db name and username configuration. (eb63a40 - Waldur Helm)
  • Set target version to 7.8.7. (85107e8 - Waldur Docker Compose)

Waldur Mastermind Highlights

  • Add autoprovisioning docs.
  • Handle adding/removal of offering compliance checklists.
  • Add unique constraint on slurm periodic policy.

Waldur Homeport Highlights

  • Implement UI to configure organization-specific component usage limits.
  • Fix project credit modal crashing issue.
  • Improve UI of add component modal.

Py Client Highlights

  • Release: bump version to 7.8.7.
  • Update Waldur Python SDK.
  • Update Waldur Python SDK.

Js Client Highlights

  • Release: bump version to 7.8.7.
  • 7.8.7-dev.13.
  • Update Waldur TypeScript SDK.

Go Client Highlights

  • Update Waldur Go SDK.
  • Update Waldur Go SDK.
  • Update Waldur Go SDK.

Resources

7.8.6 - 2025-11-30

Release Summary

  • Release Impact: 37 commits across 4 core repositories
  • Functional Changes: 152 files changed with +6124/-729 lines
  • SDK Updates: 3 auto-generated clients updated from OpenAPI schema

Statistics Note

Excludes tests, auto-generated files, and SDK client code for accurate development metrics.

Core Component Activity

  • Waldur Mastermind: 5 commits
  • Waldur Homeport: 22 commits · 129 files changed (+4549/-597 lines)
  • Waldur Helm: 7 commits · 20 files changed (+1574/-107 lines)
  • Waldur Docker Compose: 3 commits · 3 files changed (+1/-25 lines)
  • Waldur Prometheus Exporter: No changes

SDK Updates (Auto-generated)

Notable Changes

  • Set target version to 7.8.6. (7718ea0 - Waldur Docker Compose)
  • Add filter to exclude transitional resources with early pending orders. (b216f24 - Waldur Mastermind)
  • Improve filters labels. (fc5b9a1 - Waldur Mastermind)
  • Update configuration, CLI and developer guide. (0287336 - Waldur Mastermind)
  • Workarkound for changed API. (23c6904 - Waldur Mastermind)
  • Extend export/import of data. (9f50656 - Waldur Mastermind)

Waldur Homeport Highlights

  • Add multiplier configuration options [WAL-9373].
  • Add staff notes.
  • Add new end date setting to recovery view.

Waldur Helm Highlights

  • Set target version to 7.8.6.
  • Update documentation.
  • Remove leftover path modifications.

Py Client Highlights

  • Release: bump version to 7.8.6.
  • Update Waldur Python SDK.
  • Update Waldur Python SDK.

Go Client Highlights

  • Update Waldur Go SDK.
  • Update Waldur Go SDK.
  • Update Waldur Go SDK.

Resources

7.8.5 - 2025-11-30

Release Summary

  • Release Impact: 65 commits across 3 core repositories
  • Functional Changes: 502 files changed with +8116/-4035 lines
  • SDK Updates: 2 auto-generated clients updated from OpenAPI schema

Statistics Note

Excludes tests, auto-generated files, and SDK client code for accurate development metrics.

Core Component Activity

  • Waldur Mastermind: No changes
  • Waldur Homeport: 59 commits · 496 files changed (+8027/-4010 lines)
  • Waldur Helm: 5 commits · 6 files changed (+89/-25 lines)
  • Waldur Docker Compose: 1 commits
  • Waldur Prometheus Exporter: No changes

SDK Updates (Auto-generated)

Notable Changes

  • Update enums and descriptions from Waldur Mastermind. (ab5581c - Waldur Homeport)
  • Add JIRA mapping of frontend types to request types. (96e94ad - Waldur Homeport)
  • Add support for display and management of terminated projects [WAL-9212]. (d9776ed - Waldur Homeport)
  • Fix sentry crash. (bd96857 - Waldur Homeport)
  • Set target version to 7.8.5. (bc1f90d - Waldur Helm)
  • Set target version to 7.8.5. (943480b - Waldur Docker Compose)

Waldur Homeport Highlights

  • Add support for display and management of terminated projects [WAL-9212].
  • Fix sentry crash.
  • Update enums and descriptions from Waldur Mastermind.

Py Client Highlights

  • Release: bump version to 7.8.5.
  • Update Waldur Python SDK.
  • Update Waldur Python SDK.

Go Client Highlights

  • Update Waldur Go SDK.
  • Update Waldur Go SDK.
  • Update Waldur Go SDK.

Resources

7.8.4 - 2025-11-30

Release Summary

  • Release Impact: 10 commits across 3 core repositories
  • Functional Changes: 3 files changed with +67/-52 lines
  • SDK Updates: 1 auto-generated clients updated from OpenAPI schema

Statistics Note

Excludes tests, auto-generated files, and SDK client code for accurate development metrics.

Core Component Activity

  • Waldur Mastermind: No changes
  • Waldur Homeport: 5 commits
  • Waldur Helm: 3 commits · 2 files changed (+3/-3 lines)
  • Waldur Docker Compose: 2 commits · 1 files changed (+64/-49 lines)
  • Waldur Prometheus Exporter: No changes

SDK Updates (Auto-generated)

Notable Changes

  • Set target version to 7.8.4. (fb7f946 - Waldur Docker Compose)
  • Fix bad error message when applying for a an available organization with already open request. (e035237 - Waldur Homeport)
  • Migrate invitation form to react final form. (264cc02 - Waldur Homeport)
  • Reallocation limits UI changes. (dc725fb - Waldur Homeport)
  • Fix either toggle or specific organization can be selected. (c506659 - Waldur Homeport)
  • Check if WALDUR_OPENPORTAL during routes permission check. (349cad4 - Waldur Homeport)

Py Client Highlights

  • Release: bump version to 7.8.4.
  • Update Waldur Python SDK.
  • Update Waldur Python SDK.

Resources

7.8.3 - 2025-11-30

Release Summary

  • Release Impact: 2 commits across 2 core repositories
  • Functional Changes: 2 files changed with +3/-3 lines
  • SDK Updates: 2 auto-generated clients updated from OpenAPI schema

Statistics Note

Excludes tests, auto-generated files, and SDK client code for accurate development metrics.

Core Component Activity

  • Waldur Mastermind: No changes
  • Waldur Homeport: No changes
  • Waldur Helm: 1 commits · 2 files changed (+3/-3 lines)
  • Waldur Docker Compose: 1 commits
  • Waldur Prometheus Exporter: No changes

SDK Updates (Auto-generated)

Notable Changes

  • Set target version to 7.8.3. (827681b - Waldur Helm)
  • Set target version to 7.8.3. (e32b13b - Waldur Docker Compose)

Resources

7.8.2 - 2025-11-30

Release Summary

  • Release Impact: 2 commits across 2 core repositories
  • Functional Changes: 2 files changed with +3/-3 lines
  • SDK Updates: 2 auto-generated clients updated from OpenAPI schema

Statistics Note

Excludes tests, auto-generated files, and SDK client code for accurate development metrics.

Core Component Activity

  • Waldur Mastermind: No changes
  • Waldur Homeport: No changes
  • Waldur Helm: 1 commits · 2 files changed (+3/-3 lines)
  • Waldur Docker Compose: 1 commits
  • Waldur Prometheus Exporter: No changes

SDK Updates (Auto-generated)

Notable Changes

  • Set target version to 7.8.2. (8b9a3c2 - Waldur Helm)
  • Set target version to 7.8.2. (19ef652 - Waldur Docker Compose)

Go Client Highlights

  • Update Waldur Go SDK.
  • Update Waldur Go SDK.
  • Update Waldur Go SDK.

Resources