r.2026.03.18.0

Summary:

• Bug fixes for OCP compute/memory reports, GPU count aggregation, and AWS download throttling.
• Added Sources API compatibility endpoints for on-prem.
• Bumped Django to 5.2.12 and other dependency updates.

What's Changed

• Fix flakey org unit test by @myersCody in #5938
• Fix null usage/request/limit in OCP compute/memory reports by @djnakabaale in #5935
• bump django to 5.2.12 and other dependency updates by @djnakabaale in #5934
• [COST-7257] Fix GPU incorrect count by @bacciotti in #5916
• Add Sources API compatibility endpoints to Koku for on-prem by @ELK4N4 in #5895
• [COST-7306] Fix AWS throttle bug by @bacciotti in #5946

New Contributors

• @ELK4N4 made their first contribution in #5895

Full Changelog: r.2026.03.09.0...r.2026.03.18.0

r.2026.03.09.0

Summary:

This release introduces a refactor of the operator versions into a dedicated module, which now includes support for operator v4.3.1. Additionally, tag rate limiting has been expanded to cover AWS reports to improve system stability and performance and a fix for an infinite loop issue within the sources coordinator.

What's Changed

• [COST-7229] add operator v4.3.1 commits and refactor OPERATOR_VERSIONS into a module by @djnakabaale in #5915
• Expand tag rate limiting to AWS reports by @bacciotti in #5921
• Fix infinite loop with sources coordinator by @myersCody in #5928

Full Changelog: r.2026.03.02.0...r.2026.03.09.0

r.2026.03.02.0

Summary:

Update trino version and restrict GPU finalization.

What's Changed

• Update local trino version by @djnakabaale in #5914
• Restrict GPU "Artificial" Finalization to 2nd of the month by @esebesto in #5920

Full Changelog: r.2026.02.26.0...r.2026.03.02.0

r.2026.02.26.0

Summary:

This release focuses on system efficiency and infrastructure refinements, specifically optimizing self-hosted SQL queries by removing unnecessary data casts and improving throttling mechanisms. For on-premises deployments, the update introduces logic to skip Hive database creation and adds necessary environment variables for Clowder. Additionally, the update resolves a bug in GPU tag filtering and includes routine maintenance of project dependencies to ensure stability.

What's Changed

• [COST-7217] Fix GPU tag filtering bug by @bacciotti in #5901
• Remove unnecessary jsonb casts from self-hosted SQL queries by @ydayagi in #5897
• chore: Update Pipfile.lock dependencies by @github-actions[bot] in #5907
• Skip hive database creation when ONPREM=True by @ydayagi in #5900
• [COST-7254] Add onprem envvar clowdapp by @bacciotti in #5911
• Improve throttling by @bacciotti in #5913

Full Changelog: r.2026.02.23.0...r.2026.02.26.0

r.2026.02.23.0

Summary:

• Enable autoscalers for OCP and cost model worker queues.
• Add rate limiting for expensive tag group-by queries.
• Fix OCP capacity calculation error when node capacity values are null.
• Revert sentry fingerprinting.
• Dependency updates.

What's Changed

• chore: Update Pipfile.lock dependencies by @github-actions[bot] in #5889
• [COST-7246] Enable autoscalers for OCP and cost model worker queues by @djnakabaale in #5899
• Check if fingerprinting is source of latency by @myersCody in #5904
• [COST-6655] Add unleash based tag query throttling by @myersCody in #5892
• [COST-7256] coalesce OCP capacity_count aggregations to prevent TypeError on None comparisons by @djnakabaale in #5903

Full Changelog: r.2026.02.16.0...r.2026.02.23.0

r.2026.02.16.0

Summary:

Bug fixes and new workflows for on site effort.

What's Changed

• Bump step-security/harden-runner from 2.14.1 to 2.14.2 in the ci-dependencies group by @dependabot[bot] in #5890
• Replace trino sql with postgresql on site SQL for on premise by @ydayagi in #5848
• [COST-6655] Noisy out of memory errors on api reads by @myersCody in #5891
• Normalise GPU node labels to match Model name by @lcouzens in #5894
• [COST-2022] Add type-ahead support for OCP on cloud by @bacciotti in #5893
• Move date range set to after continue by @myersCody in #5898

New Contributors

• @ydayagi made their first contribution in #5848

Full Changelog: r.2026.02.10.0...r.2026.02.16.0

r.2026.02.10.0

Summary:

Security updates and bug fixes.

What's Changed

• [COST-7061] Prevent cross org data manipulation by @myersCody in #5853
• skip GCP summary when bill id is None by @djnakabaale in #5859
• add smoke-tests to action by @bacciotti in #5867
• Bump step-security/harden-runner from 2.14.0 to 2.14.1 in the ci-dependencies group by @dependabot[bot] in #5861
• [COST-7063] Enhance ingress reports auth and tenant scoping by @djnakabaale in #5855
• Cost 7062 fix idor vulnerability by @myersCody in #5862
• skip gpu summary when cluster_id is none by @djnakabaale in #5866
• clean up unnecessary status from stats endpoint by @lcouzens in #5864
• [COST-7176] Fix broken local OCP ingestion by @bacciotti in #5868
• [COST-7063] Use schema_name for ingress RBAC grace period check by @esebesto in #5876
• Move sensitive fields to internal Masu endpoint by @bacciotti in #5875
• [COST-7039] Improve authorization in cost models API by @djnakabaale in #5863
• [COST-7039] Cost models validate source_uuids using customer schema_name by @djnakabaale in #5882
• Bump actions/cache from 5.0.2 to 5.0.3 in the ci-dependencies group by @dependabot[bot] in #5880
• chore: Update Pipfile.lock dependencies by @github-actions[bot] in #5860
• [COST-7063] fix ingress access via enabled unleash and bump local unleash by @djnakabaale in #5877
• [COST-7202] Fix VM summary by iterating through summary month range by @myersCody in #5885
• [COST-6869] Upgrade to Django 5 by @djnakabaale in #5870
• Remove convert_account to utilise schema directly by @djnakabaale in #5878
• [COST-7038] Secure ocp ingestion by @myersCody in #5884
• [COST-7202] Don't summarize vm tables 4 previous month finalization by @myersCody in #5888

Full Changelog: r.2026.01.22.0...r.2026.02.10.0

r.2026.01.22.0

Summary:

• Improved unallocated GPU cost distribution to ensure accuracy at the start of each month.
• Added logging for org_id verification to improve troubleshooting.
• Updated core dependencies and CI tools to the latest versions.

What's Changed

• [COST-7062] Fix IDOR vulnerability in OCP provider duplicate check by @bacciotti in #5854
• [COST-7114] Distribute GPU unallocated at start of month by @myersCody in #5846
• Revert "[COST-7062] Fix IDOR vulnerability in OCP provider duplicate check" by @myersCody in #5857
• chore: Update Pipfile.lock dependencies by @github-actions[bot] in #5852
• Bump the ci-dependencies group with 4 updates by @dependabot[bot] in #5856
• [COST-7061] Log message to check org_id by @myersCody in #5858

Full Changelog: r.2026.01.20.0...r.2026.01.22.0

r.2026.01.20.0

Summary:

• Bug fixes for gpu summary query and type-ahead search logic.
• Dependency updates.

What's Changed

• Bump urllib3 from 2.6.2 to 2.6.3 in the pip group across 1 directory by @dependabot[bot] in #5844
• [COST-7168] add weekly workflow to update dependencies by @maskarb in #5850
• type cast date trino query by @maskarb in #5851
• Update Resource-Type Search Logic by @esebesto in #5847

Full Changelog: r.2026.01.15.0...r.2026.01.20.0

r.2026.01.15.0

Summary:

• support ocp filtering for aws-categories type-ahead
• bug-fix: gpu node aggregation

What's Changed

• [COST-7158] support ocp filtering for aws-categories type-ahead by @maskarb in #5843
• [COST-7104] Fix node aggregation by @myersCody in #5845

Full Changelog: r.2026.01.08.0...r.2026.01.15.0