Testing Farm release 2026-03.3

The Red Hat ranch now enforces a repository allowlist for all test requests. Only repositories matching the pre-configured allowlist will be accepted — requests with non-matching repository URLs will be rejected with a 403 Forbidden error. The public ranch is not affected.

Based on our analysis of the last 2 years of production data, this change should negatively impact only approximately 1.8% of current requests. The allowlist was pre-populated with all actively used repositories, Red Hat-owned GitHub and GitLab.com organizations, and individual forks verified against Red Hat internal LDAP.

See Repository Allowlists for full details on how to add your repository to the allowlist if your requests are being rejected.

tmt was updated to 1.70 from 1.69.

Testing Farm CLI tool was updated to v0.0.34, please update your installation.

Upgraded Python to 3.12 and Ansible 2.16 in testing-farm CLI container image. (TFT-4524)

Removed per pool knob for instance name template. (TFT-4449)

Added support for configuring citool-config per Testing Farm request via a container image. Allowed only for admins via settings.worker.config-image API setting or --worker-config-image CLI option. (TFT-4503)

Updated the Repository Allowlists documentation with contribution guidelines, rules for what is allowed and not allowed, and instructions for adding repositories to the allowlist. (TFT-4362)

Fixed git-ref without git-url not being honored. (TFT-4416)

Fixed Catastrophic regex backtracking in shell framework _extract_failures on long lines in tmt. (TFT-4428)

Fixed TMT_SSH_CONNECTION_TIMEOUT being incorrectly converted to -oConnectionTimeout instead of -oConnectTimeout. (TFT-4479)

List of important packages bundled in the worker image.

Number of processed requests in the last 30 days was 218k+.

The average error rate for Testing Farm was approximately 3.56%.