🌟 Apache CloudStack – Daily Status Report
Generated: June 2, 2026
🚀 Recent Releases
Great momentum with two LTS releases shipped in the past month! 🎉
🔀 Pull Request Activity
✅ Recently Merged
#13210 – Convert command's timeout for snapshots commands (erikbocks)#13278 – Update GitHub AW actions (vishesh92)#13215 – Bump GitHub Actions dependencies (dependabot)#13050 – FlashArray: fall back to array capacity when pod has no quota (genegr)#13238 – Docs: note MariaDB support in README (robertsilen)#13078 – fix(linstor): surface ambiguous template fallbacks and legacy orphan cleanup (jmsperu)#13021 – Fix the validation of CPVMs states in multiple zones (Tonitzpp)
🔥 Hot PRs (Active Today)
#13322 – Deduplicate Sonar CI GitHub workflow (Pearl1594)#13321 – UI support for the scaleSystemVm API (gruckbit)#13320 – Stop role from auto-changing on manual account creation (gp-santos)#13319 – Fix KVM live volume migration command payload (vanquyen020920)#13293 – Add draft project security threat-model document (potiuk)#13236 – Introduce Quota resource statement API (winterhazel)#13140 – Add code coverage grading workflow (Pearl1594)
🏗️ Big Features In Progress
#12711 – 🔑 Key Management Service (KMS) (vishesh92)#13033 – 🔐 Keycloak OAuth provider (tazouxme)#12991 – 💾 Backup: Veeam KVM integration (shwstppr)#12758 – 📦 New backup provider: KBOSS (JoaoJandre)#13032 – 🌐 Network Extension: Orchestrate external network devices (weizhouapache)#13015 – 🗑️ Soft delete for port forwarding, load balancing & firewall rules (bernardodemarco)#12124 – Dell EMC ECS Object Storage plugin (mhkadhum)
🛡️ Security Watch
A wave of security vulnerability reports has been filed (#13296–#13311), covering:
- Plaintext credential exposure in IPMI, SSH, CIFS, and KVM helpers
- Keystore/SSL private key exposure in logs
- VM user-data and VNC password leaks in various subsystems
⚠️ Maintainers: These reports need triage and prioritization. Many appear to be part of a coordinated responsible disclosure effort — consider batching fixes in an upcoming security release.
📊 Project Highlights
- 🔧 CI/CD improvements active (Sonar deduplication, code coverage grading)
- 📝 Security threat model document being drafted — great proactive step!
- 🔌 Plugin ecosystem expanding: KMS, Keycloak OAuth, Veeam, KBOSS, Dell EMC ECS — the integrations pipeline is vibrant
✅ Recommended Next Steps
- Triage the new security vulnerability reports (
#13296–#13311) — assign owners and set target milestones
- Review and merge the KVM live migration fix (
#13319) — appears to be a straightforward bugfix
- Progress the security threat model (
#13293) — community input welcome
- Code coverage workflow (
#13140) — valuable for long-term quality; encourage review
- Plan 4.22.2.0 / 4.20.4.0 cadence given the active security report backlog
Keep up the great work, contributors! 💪 The project is active, healthy, and growing fast.
Generated by Repo Status · sonnet46 558.1K · ◷
Add this agentic workflows to your repo
To install this agentic workflow, run
gh aw add githubnext/agentics/workflows/repo-status.md@main
🌟 Apache CloudStack – Daily Status Report
Generated: June 2, 2026
🚀 Recent Releases
Great momentum with two LTS releases shipped in the past month! 🎉
🔀 Pull Request Activity
✅ Recently Merged
#13210– Convert command's timeout for snapshots commands (erikbocks)#13278– Update GitHub AW actions (vishesh92)#13215– Bump GitHub Actions dependencies (dependabot)#13050– FlashArray: fall back to array capacity when pod has no quota (genegr)#13238– Docs: note MariaDB support in README (robertsilen)#13078– fix(linstor): surface ambiguous template fallbacks and legacy orphan cleanup (jmsperu)#13021– Fix the validation of CPVMs states in multiple zones (Tonitzpp)🔥 Hot PRs (Active Today)
#13322– Deduplicate Sonar CI GitHub workflow (Pearl1594)#13321– UI support for thescaleSystemVmAPI (gruckbit)#13320– Stop role from auto-changing on manual account creation (gp-santos)#13319– Fix KVM live volume migration command payload (vanquyen020920)#13293– Add draft project security threat-model document (potiuk)#13236– Introduce Quota resource statement API (winterhazel)#13140– Add code coverage grading workflow (Pearl1594)🏗️ Big Features In Progress
#12711– 🔑 Key Management Service (KMS) (vishesh92)#13033– 🔐 Keycloak OAuth provider (tazouxme)#12991– 💾 Backup: Veeam KVM integration (shwstppr)#12758– 📦 New backup provider: KBOSS (JoaoJandre)#13032– 🌐 Network Extension: Orchestrate external network devices (weizhouapache)#13015– 🗑️ Soft delete for port forwarding, load balancing & firewall rules (bernardodemarco)#12124– Dell EMC ECS Object Storage plugin (mhkadhum)🛡️ Security Watch
A wave of security vulnerability reports has been filed (
#13296–#13311), covering:📊 Project Highlights
✅ Recommended Next Steps
#13296–#13311) — assign owners and set target milestones#13319) — appears to be a straightforward bugfix#13293) — community input welcome#13140) — valuable for long-term quality; encourage reviewKeep up the great work, contributors! 💪 The project is active, healthy, and growing fast.
Add this agentic workflows to your repo
To install this agentic workflow, run