(automated) Bump dependencies for OpenStack stackhpc/2025.1

[github-actions]

This PR was created automatically to update dependencies for the stackhpc/2025.1 release.

Changes

• Kolla bumped from stackhpc/20.4.0.10 to stackhpc/20.4.0.11
  • Changelog: https://github.com/stackhpc/kolla/releases/tag/stackhpc/20.4.0.11
• Kolla-Ansible bumped from stackhpc/20.4.0.11 to stackhpc/20.4.0.15
  • Changelog: https://github.com/stackhpc/kolla-ansible/releases/tag/stackhpc/20.4.0.15
• Kayobe bumped from stackhpc/18.4.0.6 to stackhpc/18.4.0.7
  • Changelog: https://github.com/stackhpc/kayobe/releases/tag/stackhpc/18.4.0.7

[priteau]

kolla-ansible is broken, see stackhpc/kolla-ansible#917

[Alex-Welsh]

kolla-ansible is broken, see stackhpc/kolla-ansible#917

Nice to see CI working

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 0d181642-8e1f-4a07-9a93-a8c7a7f3a686

📥 Commits

Reviewing files that changed from the base of the PR and between 22f010b and 3fba2dd.

📒 Files selected for processing (2)

• etc/kayobe/stackhpc.yml
• requirements.txt

📜 Recent review details

⏰ Context from checks skipped due to timeout. (3)

• GitHub Check: stackhpc/check
• GitHub Check: Ansible 2.18 lint with Python 3.12
• GitHub Check: Ansible 2.17 lint with Python 3.10

🧰 Additional context used

🪛 OSV Scanner (2.4.0)

requirements.txt

[MEDIUM] 1-1: idna 3.9.0: undefined

(PYSEC-2026-215)

---

[MEDIUM] 1-1: idna 3.9.0: Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix

(GHSA-65pc-fj4g-8rjx)

---

[MEDIUM] 1-1: requests 2.32.5: undefined

(PYSEC-2026-2275)

---

[MEDIUM] 1-1: requests 2.32.5: Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function

(GHSA-gc5v-m9x4-r6x2)

🔇 Additional comments (2)

requirements.txt (1)

1-1: 🔒 Security & Privacy

Check the resolved Kayobe dependency graph. If this ref still pulls in idna 3.9 or requests 2.32.5, bump the Kayobe ref or add constraints that reach idna 3.15 and requests 2.33.0.

etc/kayobe/stackhpc.yml (1)

232-233: 🗄️ Data Integrity & Integration

Confirm the Kolla-Ansible target before merging.
stackhpc_kolla_ansible_source_version is set to stackhpc/20.4.0.15, while the PR objective references stackhpc/20.4.0.14. This value drives both source selection and the version check, so the target needs to match the intended release.

---

📝 Walkthrough

Updated StackHPC 2025.1 dependencies: Kolla to 20.4.0.11, Kolla-Ansible to 20.4.0.15, and Kayobe to 18.4.0.7.

Walkthrough

The pull request updates the pinned Kayobe dependency and StackHPC Kolla and Kolla-Ansible source versions to newer release references.

Changes

Release pin updates

Layer / File(s)	Summary
Update release references requirements.txt, etc/kayobe/stackhpc.yml	The Kayobe dependency changes from 18.4.0.6 to 18.4.0.7; Kolla and Kolla-Ansible source versions advance to 20.4.0.11 and 20.4.0.15.

Estimated code review effort: 1 (Trivial) | ~5 minutes

🚥 Pre-merge checks | ✅ 3

✅ Passed checks (3 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

---

_{Comment @coderabbitai help to get the list of available commands.}