chore: release

Author: openstack-experimental-release-plz[bot]

Cargo.lock

@@ -125,10 +125,10 @@ openstack-keystone-appcred-driver-sql = { version = "0.1", path = "crates/appcre
 openstack-keystone-assignment-driver-sql = { version = "0.1", path = "crates/assignment-driver-sql/" }
 openstack-keystone-catalog-driver-sql = { version = "0.1", path = "crates/catalog-driver-sql/" }
 openstack-keystone-config = { version = "0.1.0", path = "crates/config"}
-openstack-keystone-core = { version = "0.1.0", path = "crates/core" }
-openstack-keystone-core-types = { version = "0.1.0", path = "crates/core-types" }
+openstack-keystone-core = { version = "0.1.2", path = "crates/core" }
+openstack-keystone-core-types = { version = "0.1.1", path = "crates/core-types" }
 openstack-keystone-credential-driver-sql = { version = "0.1", path = "crates/credential-driver-sql/" }
-openstack-keystone-distributed-storage = { version = "0.1.0", path = "crates/storage"}
+openstack-keystone-distributed-storage = { version = "0.1.1", path = "crates/storage"}
 openstack-keystone-auth-plugin-core = { version = "0.1.0", path = "crates/auth-plugin-core" }
 openstack-keystone-auth-plugin-identity-driver-raft = { version = "0.1.0", path = "crates/auth-plugin-identity-driver-raft" }
 openstack-keystone-auth-plugin-runtime = { version = "0.1.0", path = "crates/auth-plugin-runtime" }
@@ -154,7 +154,7 @@ openstack-keystone-resource-driver-sql = { version = "0.1", path = "crates/resou
 openstack-keystone-revoke-driver-sql = { version = "0.1", path = "crates/revoke-driver-sql/" }
 openstack-keystone-role-driver-sql = { version = "0.1", path = "crates/role-driver-sql/" }
 openstack-keystone-scim-driver-raft = { version = "0.1", path = "crates/scim-driver-raft/" }
-openstack-keystone-token-driver-fernet = { version = "0.1.0", path = "crates/token-driver-fernet" }
+openstack-keystone-token-driver-fernet = { version = "0.1.1", path = "crates/token-driver-fernet" }
 openstack-keystone-token-driver-jws = { version = "0.1.0", path = "crates/token-driver-jws" }
 openstack-keystone-token-restriction-driver-sql = { version = "0.1", path = "crates/token-restriction-driver-sql/" }
 openstack-keystone-trust-driver-sql = { version = "0.1", path = "crates/trust-driver-sql/" }

Cargo.toml

@@ -0,0 +1,17 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [Unreleased]
+
+## [0.1.0](https://github.com/openstack-experimental/keystone/releases/tag/openstack-keystone-api-key-driver-raft-v0.1.0) - 2026-08-10
+
+### Added
+
+- Auto-register backend drivers via inventory ([#1105](https://github.com/openstack-experimental/keystone/pull/1105))
+- Generalize marker pagination for v3/v4 lists ([#1086](https://github.com/openstack-experimental/keystone/pull/1086))
+- ADR 0021 admin surface, simulate-access, and janitor ([#896](https://github.com/openstack-experimental/keystone/pull/896))
+- Implement stateless SCIM ingress auth (ADR 0021) ([#891](https://github.com/openstack-experimental/keystone/pull/891))

crates/api-key-driver-raft/CHANGELOG.md

@@ -0,0 +1,88 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [Unreleased]
+
+## [0.1.1](https://github.com/openstack-experimental/keystone/compare/openstack-keystone-api-types-v0.1.0...openstack-keystone-api-types-v0.1.1) - 2026-08-10
+
+### Added
+
+- *(policy)* Implement legacy Policy API (/v3/policies) ([#1127](https://github.com/openstack-experimental/keystone/pull/1127))
+- Filter user listing by type ([#813](https://github.com/openstack-experimental/keystone/pull/813))
+- *(loadtest)* Add more auth tests ([#1119](https://github.com/openstack-experimental/keystone/pull/1119))
+- *(pagination)* Add pagination to remaining places ([#1106](https://github.com/openstack-experimental/keystone/pull/1106))
+- Add immutable option for project, domain, role ([#1097](https://github.com/openstack-experimental/keystone/pull/1097))
+- Generalize marker pagination for v3/v4 lists ([#1086](https://github.com/openstack-experimental/keystone/pull/1086))
+- *(identity)* Add trust create/delete and REST CRUD ([#1079](https://github.com/openstack-experimental/keystone/pull/1079))
+- *(catalog)* Expose /v3/regions REST API ([#1078](https://github.com/openstack-experimental/keystone/pull/1078))
+- *(identity)* Add PATCH to few resources ([#1076](https://github.com/openstack-experimental/keystone/pull/1076))
+- *(ldap)* Add LDAP identity driver ([#1047](https://github.com/openstack-experimental/keystone/pull/1047))
+- *(test)* Add tempest identity compatibility ([#998](https://github.com/openstack-experimental/keystone/pull/998))
+- *(adr0028)* Add local-quorum-bypass emergency rotation ([#1032](https://github.com/openstack-experimental/keystone/pull/1032))
+- Add catalog CRUD API and bootstrap support ([#1029](https://github.com/openstack-experimental/keystone/pull/1029))
+- *(adr0026)* Extend keystone-manage oauth2 CLI ([#1020](https://github.com/openstack-experimental/keystone/pull/1020))
+- *(adr0026)* Phase 6a ([#1017](https://github.com/openstack-experimental/keystone/pull/1017))
+- *(adr0026)* Add client_credentials token endpoint ([#1014](https://github.com/openstack-experimental/keystone/pull/1014))
+- *(adr0026)* Phase 2 client registration & OIDC discovery ([#1013](https://github.com/openstack-experimental/keystone/pull/1013))
+- *(adr0026)* Phase 1 crypto engine & JWKS endpoint ([#1011](https://github.com/openstack-experimental/keystone/pull/1011))
+- *(identity)* Add per-user auth rate limiting ([#996](https://github.com/openstack-experimental/keystone/pull/996))
+- *(adr0025)* Complete imlpementation ([#969](https://github.com/openstack-experimental/keystone/pull/969))
+- *(identity)* Implement user password change endpoint ([#970](https://github.com/openstack-experimental/keystone/pull/970))
+- *(api)* Add global IP rate limiting framework (ADR-0022 phase 1) ([#846](https://github.com/openstack-experimental/keystone/pull/846))
+- *(adr0025)* Phase 1 (1.1+1.2) ([#952](https://github.com/openstack-experimental/keystone/pull/952))
+- *(security)* Wrap secrets with secrecy crate ([#369](https://github.com/openstack-experimental/keystone/pull/369)) ([#912](https://github.com/openstack-experimental/keystone/pull/912))
+- *(scim)* ADR 0024 - Phase 5 ([#951](https://github.com/openstack-experimental/keystone/pull/951))
+- *(scim)* ADR 0024 - Phase 1+2 ([#925](https://github.com/openstack-experimental/keystone/pull/925))
+- *(credential)* Implement Phase 3 of ADR 0019 ([#909](https://github.com/openstack-experimental/keystone/pull/909))
+- ADR 0021 admin surface, simulate-access, and janitor ([#896](https://github.com/openstack-experimental/keystone/pull/896))
+- Implement stateless SCIM ingress auth (ADR 0021) ([#891](https://github.com/openstack-experimental/keystone/pull/891))
+- Migrate federation to new mapping engine ([#839](https://github.com/openstack-experimental/keystone/pull/839))
+- ADR-0020 mapping phase 4 ([#818](https://github.com/openstack-experimental/keystone/pull/818))
+- *(mapping)* ADR-0020 phase 2 ([#807](https://github.com/openstack-experimental/keystone/pull/807))
+- *(mapping)* ADR-0020 (mapping engine) phase 1 ([#794](https://github.com/openstack-experimental/keystone/pull/794))
+- Validate password for compliance conformity ([#774](https://github.com/openstack-experimental/keystone/pull/774))
+- Add system-user-role assignments API ([#762](https://github.com/openstack-experimental/keystone/pull/762))
+- Add role-imply rest api ([#750](https://github.com/openstack-experimental/keystone/pull/750))
+- Add user update functionality ([#747](https://github.com/openstack-experimental/keystone/pull/747))
+- Add api to list user roles on project ([#639](https://github.com/openstack-experimental/keystone/pull/639))
+- Add domain CRUD operations ([#743](https://github.com/openstack-experimental/keystone/pull/743))
+- Add spiffe binding API ([#740](https://github.com/openstack-experimental/keystone/pull/740))
+- Add spiffe provider ([#733](https://github.com/openstack-experimental/keystone/pull/733))
+- Introduce SecurityContext ([#710](https://github.com/openstack-experimental/keystone/pull/710))
+- Add skeleton for the spiffe mTLS integration ([#695](https://github.com/openstack-experimental/keystone/pull/695))
+- Improve the code ([#686](https://github.com/openstack-experimental/keystone/pull/686))
+
+### Fixed
+
+- Register UserType in OpenAPI components schema ([#1151](https://github.com/openstack-experimental/keystone/pull/1151))
+- Map raft-not-available to proper HTTP status codes ([#1149](https://github.com/openstack-experimental/keystone/pull/1149))
+- *(api)* Fix pagination limit, filters, and rows ([#1115](https://github.com/openstack-experimental/keystone/pull/1115))
+- Address multiple tempest failures ([#1083](https://github.com/openstack-experimental/keystone/pull/1083))
+- *(api)* Default enabled/domain_id on create ([#1073](https://github.com/openstack-experimental/keystone/pull/1073))
+- *(security)* Address security review findings ([#1049](https://github.com/openstack-experimental/keystone/pull/1049))
+- *(federation)* Allow long external unique_id values ([#1033](https://github.com/openstack-experimental/keystone/pull/1033))
+- Unify ApiClient scope validation, fix nextest filter ([#947](https://github.com/openstack-experimental/keystone/pull/947))
+- Finalize ADR 0021 work ([#906](https://github.com/openstack-experimental/keystone/pull/906))
+
+### Other
+
+- *(identity)* Remove service account API methods ([#1152](https://github.com/openstack-experimental/keystone/pull/1152))
+- Feature/expose app credential ([#948](https://github.com/openstack-experimental/keystone/pull/948))
+- *(api)* Expand v3 coverage and enforce EC2 token restrictions ([#1084](https://github.com/openstack-experimental/keystone/pull/1084))
+- Extend workspace unsafe/unwrap/expect lints ([#1120](https://github.com/openstack-experimental/keystone/pull/1120))
+- *(test)* Improve testing of the oauth2 OP ([#1024](https://github.com/openstack-experimental/keystone/pull/1024))
+- Move jsonwebtoken to keystone crate ([#820](https://github.com/openstack-experimental/keystone/pull/820))
+- *(tests)* Reorganize integration_api tests ([#815](https://github.com/openstack-experimental/keystone/pull/815))
+- mapping engine phase 3 - migrate SPIFFE ([#811](https://github.com/openstack-experimental/keystone/pull/811))
+- Rename identity_mapping to idmapping ([#788](https://github.com/openstack-experimental/keystone/pull/788))
+- Further align workspace features ([#772](https://github.com/openstack-experimental/keystone/pull/772))
+- Make resolve_implied_roles optional ([#764](https://github.com/openstack-experimental/keystone/pull/764))
+- Redesign SecurityContext with two-phase validation ([#717](https://github.com/openstack-experimental/keystone/pull/717))
+- Small optimization of the derives ([#638](https://github.com/openstack-experimental/keystone/pull/638))
+- Split the core-types crate ([#640](https://github.com/openstack-experimental/keystone/pull/640))
+- Introduce features in api-types crate ([#624](https://github.com/openstack-experimental/keystone/pull/624))
+- Slim down api-types crate ([#622](https://github.com/openstack-experimental/keystone/pull/622))

crates/api-types/CHANGELOG.md

@@ -1,7 +1,7 @@
 [package]
 name = "openstack-keystone-api-types"
 description = "OpenStack Keystone API types"
-version = "0.1.0"
+version = "0.1.1"
 rust-version.workspace = true
 edition.workspace = true
 license.workspace = true

crates/api-types/Cargo.toml

@@ -0,0 +1,30 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [Unreleased]
+
+## [0.1.0](https://github.com/openstack-experimental/keystone/releases/tag/openstack-keystone-appcred-driver-sql-v0.1.0) - 2026-08-10
+
+### Added
+
+- Auto-register backend drivers via inventory ([#1105](https://github.com/openstack-experimental/keystone/pull/1105))
+- *(security)* Wrap secrets with secrecy crate ([#369](https://github.com/openstack-experimental/keystone/pull/369)) ([#912](https://github.com/openstack-experimental/keystone/pull/912))
+- Add access rule CRD to appcred provider ([#806](https://github.com/openstack-experimental/keystone/pull/806))
+- Make drivers more dynamic ([#737](https://github.com/openstack-experimental/keystone/pull/737))
+
+### Fixed
+
+- Ensure appcred are unique over name+user_id ([#1150](https://github.com/openstack-experimental/keystone/pull/1150))
+
+### Other
+
+- Feature/expose app credential ([#948](https://github.com/openstack-experimental/keystone/pull/948))
+- *(deps)* Bump sea-orm and sea-orm-migration to 2.0 ([#1089](https://github.com/openstack-experimental/keystone/pull/1089))
+- Extract password hashing into own crate ([#1055](https://github.com/openstack-experimental/keystone/pull/1055))
+- *(core)* Eliminate XxxProvider enums ([#830](https://github.com/openstack-experimental/keystone/pull/830))
+- Move jsonwebtoken to keystone crate ([#820](https://github.com/openstack-experimental/keystone/pull/820))
+- Further align workspace features ([#772](https://github.com/openstack-experimental/keystone/pull/772))

crates/appcred-driver-sql/CHANGELOG.md

@@ -0,0 +1,33 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [Unreleased]
+
+## [0.1.0](https://github.com/openstack-experimental/keystone/releases/tag/openstack-keystone-assignment-driver-sql-v0.1.0) - 2026-08-10
+
+### Added
+
+- *(pagination)* Add pagination to remaining places ([#1106](https://github.com/openstack-experimental/keystone/pull/1106))
+- Auto-register backend drivers via inventory ([#1105](https://github.com/openstack-experimental/keystone/pull/1105))
+- *(audit)* Implement CADF audit framework Phase 2 ([#872](https://github.com/openstack-experimental/keystone/pull/872))
+- Add role-imply rest api ([#750](https://github.com/openstack-experimental/keystone/pull/750))
+- Make drivers more dynamic ([#737](https://github.com/openstack-experimental/keystone/pull/737))
+
+### Fixed
+
+- Respect group_id param in assignment list ([#953](https://github.com/openstack-experimental/keystone/pull/953))
+- *(ci)* Prepare workflows for merge queue ([#902](https://github.com/openstack-experimental/keystone/pull/902))
+
+### Other
+
+- Extend workspace unsafe/unwrap/expect lints ([#1120](https://github.com/openstack-experimental/keystone/pull/1120))
+- *(db)* 3 optimizations for DB queries ([#1111](https://github.com/openstack-experimental/keystone/pull/1111))
+- Wrap ServiceState under ExecutionContext ([#856](https://github.com/openstack-experimental/keystone/pull/856))
+- *(storage)* Decouple core from storage ([#832](https://github.com/openstack-experimental/keystone/pull/832))
+- Move jsonwebtoken to keystone crate ([#820](https://github.com/openstack-experimental/keystone/pull/820))
+- Further align workspace features ([#772](https://github.com/openstack-experimental/keystone/pull/772))
+- Make resolve_implied_roles optional ([#764](https://github.com/openstack-experimental/keystone/pull/764))

crates/assignment-driver-sql/CHANGELOG.md

@@ -0,0 +1,24 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [Unreleased]
+
+## [0.1.0](https://github.com/openstack-experimental/keystone/releases/tag/openstack-keystone-audit-v0.1.0) - 2026-08-10
+
+### Added
+
+- *(audit)* Complete ADR-0023 audit implementation ([#887](https://github.com/openstack-experimental/keystone/pull/887))
+- Audit framework (ADR-0023) phase 3 ([#880](https://github.com/openstack-experimental/keystone/pull/880))
+- *(audit)* Implement CADF audit framework Phase 2 ([#872](https://github.com/openstack-experimental/keystone/pull/872))
+
+### Fixed
+
+- Fix ID sanitizer and capture client IP in audit ([#1126](https://github.com/openstack-experimental/keystone/pull/1126))
+
+### Other
+
+- Extend workspace unsafe/unwrap/expect lints ([#1120](https://github.com/openstack-experimental/keystone/pull/1120))

crates/audit/CHANGELOG.md

@@ -0,0 +1,14 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [Unreleased]
+
+## [0.1.0](https://github.com/openstack-experimental/keystone/releases/tag/openstack-keystone-auth-plugin-core-v0.1.0) - 2026-08-10
+
+### Other
+
+- Split extism out of core's dependency tree ([#1148](https://github.com/openstack-experimental/keystone/pull/1148))

crates/auth-plugin-core/CHANGELOG.md

@@ -0,0 +1,15 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [Unreleased]
+
+## [0.1.0](https://github.com/openstack-experimental/keystone/releases/tag/openstack-keystone-auth-plugin-identity-driver-raft-v0.1.0) - 2026-08-10
+
+### Added
+
+- Auto-register backend drivers via inventory ([#1105](https://github.com/openstack-experimental/keystone/pull/1105))
+- *(adr0025)* Complete imlpementation ([#969](https://github.com/openstack-experimental/keystone/pull/969))