Deprecate source/destination flow-label and add single flow-label leaf

  * (M) release/models/acl/openconfig-packet-match.yang
    - Deprecate source-flow-label and destination-flow-label
    - Add flow-label leaf to ipv6-protocol-fields-config grouping
    - Bump openconfig-version to 2.3.0

Author: earies

release/models/acl/openconfig-packet-match.yang

@@ -31,7 +31,14 @@ module openconfig-packet-match {
     wildcard ('any') for that field.";
 
 
-  oc-ext:openconfig-version "2.2.0";
+  oc-ext:openconfig-version "2.3.0";
+
+  revision "2026-03-20" {
+    description
+      "Deprecate source/destination flow-label definitions and replace
+      with single IPv6 flow-label leaf.";
+    reference "2.3.0";
+  }
 
   revision "2025-06-10" {
     description
@@ -410,8 +417,13 @@ module openconfig-packet-match {
 
     leaf source-flow-label {
       type oc-inet:ipv6-flow-label;
+      status deprecated;
       description
-        "Source IPv6 Flow label.";
+        "Source IPv6 Flow label.
+
+        Deprecated: use flow-label instead.  The IPv6 header contains a
+        single flow-label field; there is no distinct source or
+        destination flow-label.";
     }
 
     leaf destination-address {
@@ -431,9 +443,20 @@ module openconfig-packet-match {
     }
 
     leaf destination-flow-label {
+      type oc-inet:ipv6-flow-label;
+      status deprecated;
+      description
+        "Destination IPv6 Flow label.
+
+        Deprecated: use flow-label instead.  The IPv6 header contains a
+        single flow-label field; there is no distinct source or
+        destination flow-label.";
+    }
+
+    leaf flow-label {
       type oc-inet:ipv6-flow-label;
       description
-        "Destination IPv6 Flow label.";
+        "IPv6 Flow label.";
     }
 
     uses ip-protocol-fields-common-config;