Changelog v25.09.3

Changes from v25.09.2 to v25.09.3

• a9714cd7 Set release date for 25.09.3.
• db2b2d62 pinctrl: Make sure the BFD packet contains correct amount of data.
• 71069211 pinctrl: Unify handling of DHCPv6 options.
• 2434ce73 pinctrl: Limit the IP packet size to buffer size for ICMP Need Frag.
• 45c18c43 northd: Fix ls_stateful_record_set_acls() not called in I-P handlers.
• 9ebb4479 controller: Make sure we free the route_data during change check.
• 10f77a3e controller: Add missing neighbor_table_notify_destroy call.
• 1d14f5e2 northd: Don’t forward IP multicast to routers without IGMP relay.
• f94a35bc tests: Add missing L3 EVPN helper functions for multinode BGP tests.
• 4dedd1e8 tests: Stabilize localnet_learn_fdb packet-in count.
• fad3dcd8 northd: Fix requested-tnl-key not reassigned after conflict resolved by deletion.
• c38d7c7a controller: Fix bfd up too early after unexpected reboot.
• 2d22689f northd: Fix L3 EVPN when remote VTEP is not L2 adjacent.
• 93177514 northd: Learned route use nexthop address family for outport IP selection.
• 5a3da276 northd: Use nexthop address family for ECMP symmetric reply flows.
• 0cf2debd northd: Use nexthop address family in find_static_route_outport.
• ac42e942 controller: Fix an assertion failure with multiple mirror types.
• b65d5fc7 pinctrl: Update in-memory svc monitor structures on SB changes.
• bfef1eb3 rhel: Make version displayed to the user customizable.
• eed62b61 ci: Bump action versions to support Node 24.
• f3a1395a northd: Get neutron values from proper column.
• f4de40a3 northd: Drop traffic for ECMP group with “discard” route.
• 049a029e Add Dmitry Mityugov to AUTHORS.rst.
• 7ca7399f northd: Fix a discarded qualifer warning.
• 04ed706d mac-cache: Only refresh mac bindings for chassis local ports.
• c71061a6 statctrl: Remove handler specific parameters.
• c7066edb ic: Fix infinite route learning with same prefix and nexthop.
• 0c8fc85e tests: Fix the “Service Monitor synchronization” for cross-az.
• 7982264e pinctrl: Process packets even when the lock is taken.
• 9c4c8f4c tests: Fix two “BGP learned routes” tests.
• d70ba7ae tests: Fix multinode test using wrong system-id.
• deb87385 ovs: Update submodule to v3.6.2.
• 4918661f northd: Do not fully parse LSP port security.
• 96e081bc en-datapath-logical-switch: Use correct datatype.
• 8748adda northd: Make sure we repopulate the IPAM reserved addresses.
• 4a123644 tests: Sort output in flaky s390x tests.
• 62dc2240 northd: Remove redundant engine node input.
• 8dda00d5 controller: ACL correctly handles fragmented traffic.
• 3ea381d7 ci: ovn-kubernetes: Move our CI jobs to OVN-K release-1.2 branch.
• 18516f8c controller: Add option to make port security compliant with RFC 9568.
• 8b70e8b2 ovn-util: Add helper for parsing and working with masked MACs.
• 762027ca lflow: Change the port security parsing log from INFO to WARN.
• 1252ba38 northd: Do not forward unknown ether type to router ports.
• b1a96fd4 inc-proc-eng: Assert that node states are in the right range.
• e97f7caf northd: Commit ECMP symmetric egress traffic earlier.
• 04eac21d controller: Prevent crash when SB_Global is empty.
• 2e152863 tests: Fix flaky ‘Remote chassis flood flows’ test.
• 47b97170 tests: Don’t use potentially unreachable IPs for IPFIX.
• 89f75aa6 ci: Increase the disk size for CirrusCI VM.
• 41668dae ovn-ic: Fix Service_Monitor fight between ovn-ic and ovn-northd.
• 7e60bc72 tests: Use command -v instead of which.
• e0b3dadc tests: Use find_command to check for nft command.
• 19590124 lflow: Add missing match on eth.src for ND port security.
• 55494c15 northd: Do not send ICMP packet too big for multicast traffic.
• d8cbf37e ci: ovn-kubernetes: Consolidate to use ovn-kube’s Dockerfile.
• 13ec1488 northd: Skip switch ports from conntrack.
• 4d3bc6a7 lflow: Enable default drop for ND NS in with port security enabled.
• 33dfbcea northd: Improvements of ICMP TTL exceeded behavior.
• 0f456ab9 controller: Avoid adv the same ip prefix and priority.
• a0072dc7 tests: Add new TAG_TEST_NOT_UPGRADABLE to some tests.
• 92be0368 tests: Fix “ACL log_related” system-test.
• 82c04934 northd: Fix TCP connection in stateless nat.
• b1384b05 northd: Fix enable-stateless-acl-with-lb hairpin use.
• c157eb53 physical: Fix remote chassis flood ingress flows for multiple encaps.
• 0d16ab09 controller: Add missing nw_ttl field to match against legit NAs.
• 3f7ada65 pinctrl: Avoid unaligned access to dhcpv6 options.
• eaa34803 controller-vtep: Properly free the ovn version at the end.
• b556bff6 binding: Prevent maybe-uninitialized error for queue variable.
• 751f87a4 tests: Tag “enable-stateless-acl-with-lb usage” as unstable.
• 9ee7c8bc northd: Do not assign requested tunnel key to the derived CR port.
• 75fff00b northd: Delete learned route with CR without chassis.
• a416129f tests: Ignore AT_CHECK stderr for grep ... | grep -q.
• b907f9ed tests: Fix test for tc rounding behavior change.
• cdb79fd5 controller: Fix typo configuring evpn IPv6 local tunnel IP.
• cc9d497b tests: Mark fmt_pkt test with HAVE_SCAPY requirement.
• 49ff6818 controller: Make sure we don’t do shallow copy of route_data.
• eea8adf8 controller: Make sure we remove stale routes first.
• f321eead tests: Fix ACL direction consistency.
• c75770a4 tests/ovn-ic: Add missing OVN_CLEANUP_IC call.
• a29d068a tests/ovn-controller: Add missing cleanup.
• 3d90c453 tests/ovn: Add missing partial cleanups.
• 6494596f tests/ovn: Add missing OVN_CLEANUP calls.
• c35d4171 tests: Add OVN_CLEANUP_DBS and use it in tests that already stopped northd.
• b25f3da1 tests/ovn-controller-vtep: Remove unused test net.
• 50acb55e tests/ovn-controller-vtep: Add missing OVN_CONTROLLER_VTEP_STOP calls.
• 4589ac78 tests: Add missing OVN_CLEANUP_NORTHD calls.
• 6da9f1fc en-datapath-sync: Avoid unnecessary datapath recomputes.
• 59abbd20 controller: CT zone allocation for DGP LSPs enabled ACL.
• df99035f tests: Require scapy for ‘IP packet buffering’.
• dd7cac55 Prepare for 25.09.3.