Changelog¶

3.123.2 (2026-11-05)¶

REST API¶

Bugfixes¶

Fixed uploads of files whose names start with artifact when the media root is empty. #8041
Insures that Content-Disposition, Content-Security-Policy, and X-Content-Type-Options are set consistently in the content-app. This addresses CVE-2026-84232.

Plugin API¶

Bugfixes¶

Pulp's gpg_verify() function now respects the system policy for the sequoia crypto library in /etc/crypto-policies/back-ends/sequoia.config (or the path set by the environment variable SEQUOIA_CRYPTO_POLICY).

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.123.1 (2026-10-23)¶

REST API¶

Bugfixes¶

Fixed responses for a distribution being cached from the previous repository version, and served until the cache entry expired, when they were requested while a new version was being created. #8246

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.123.0 (2026-10-21)¶

REST API¶

Bugfixes¶

Fixed a foreign key error when a first-time pull-through download fails digest validation; the content app now reports the intended checksum error and closes the connection.
Fixed repository version serialization failing with LookupError when the version contains a content type that has no registered viewset.

Removals¶

Removed SFTP storage support because it was unreliable and could corrupt files; it also did not support object-storage redirects or on-demand downloads.

Plugin API¶

Features¶

SigningService.sign() and asign() now accept an optional pubkey_fingerprint to sign with a key other than the one the signing service was created with. #7942

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.122.2 (2026-10-15)¶

REST API¶

No significant changes.

3.122.0 (2026-10-14)¶

REST API¶

Features¶

Added ETag/If-None-Match and Last-Modified/If-Modified-Since (304 Not Modified) support on content-app responses so edge caches can revalidate without re-downloading. #7929
Added a pulpcore-manager clear-cache command to clear cached content responses globally or by repository, distribution, or base path. #8165
Added UpstreamPulp.remote_policy so remotes created during replication can use on_demand or streamed instead of defaulting to immediate.
Added an authentication backend for SAML2 attribute based authorization.

Bugfixes¶

Use repository-version summaries to speed unfiltered content-list pagination counts. #PULP-1996
Fixed a bug where filesystem export trying to use local on demand files can be tricked breaking out of ALLOWED_IMPORT_PATHS.
Fixed an issue where users were able to list (but not modify) uploads they didn't have permissions to view.
Fixed directory listings for published content displaying publication time instead of repository added date.
Optimized scope_queryset SQL queries when using a domain scoped endpoint.
Orphan cleanup with content_hrefs now deletes only artifacts associated with the selected content.
Removed parent directory sizes and fixed wrong last modified timestamp in content app listings.
Repeated object lookups in a single API request now reuse the retrieved object.
Reverted support for returning 304 responses to content requests with conditional headers because of a breaking change in the internal plugin's API.

Plugin API¶

Features¶

Made add_and_remove and aadd_and_remove return the serialized newly created repository version as the task result.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.121.3 (2026-10-09)¶

REST API¶

Bugfixes¶

Fixed directory listings for published content displaying publication time instead of repository added date.

3.121.1 (2026-10-08)¶

REST API¶

Bugfixes¶

Fixed an issue where users were able to list (but not modify) uploads they didn't have permissions to view.
Removed parent directory sizes and fixed wrong last modified timestamp in content app listings.
Repeated object lookups in a single API request now reuse the retrieved object.
Reverted support for returning 304 responses to content requests with conditional headers because of a breaking change in the internal plugin's API.

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.121.0 (2026-10-06)¶

REST API¶

Features¶

Added ETag/If-None-Match and Last-Modified/If-Modified-Since (304 Not Modified) support on content-app responses so edge caches can revalidate without re-downloading. #7929

Bugfixes¶

Avoid loading repository version content IDs when serving fallback content during the grace period.
Fixed vulnerability report rescans to update existing reports.

Plugin API¶

No significant changes.

Pulp File¶

Bugfixes¶

Fixed optimize in file sync to honor the value False. #8141

Pulp Cert Guard¶

No significant changes.

3.120.0 (2026-09-29)¶

REST API¶

Features¶

Added workload identity authentication, so a CI job can authenticate with a short-lived OIDC token instead of a stored secret and receive per-request roles computed from the WORKLOAD_IDENTITY setting.

Bugfixes¶

Improved the performance of the latest publication lookup when serving content from a repository-backed distribution. #1995
Fixed file downloader path sanitation. CVE-2026-90959
Fixed the long_running pytest-mark, so that it correctly applies even when "nightly" is selected. This includes fixing a window in the task-cleanup path, where a missing worker's jobs were not getting cleaned up until a new task entered the system.

3.119.1 (2026-09-23)¶

REST API¶

Bugfixes¶

Fixed file downloader path sanitation. CVE-2026-90959

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.119.0 (2026-09-23)¶

REST API¶

Features¶

Added EnvVarHeaderContentGuard to validate a Base64-encoded header against a content-app environment variable listed in ENVVAR_HEADER_CONTENT_GUARD_ALLOWED_VARS. #8007

Bugfixes¶

Add a management command to help remove distributions with a dysfunctional base_path that prevents upgrading to 3.117. #8067
Fixed replicate() deleting temporary TLS files before pulp-glue could use them, and stopped leaking PULP_CA_BUNDLE into later worker tasks.
Reduce the number and size of queries made for each content app request.
Task failures that previously surfaced as unhandled Python exceptions (deleting an object still referenced by others, replication errors, and failed subtasks) now raise proper Pulp errors, so their messages are preserved and reported clearly.

3.118.6 (2026-11-05)¶

REST API¶

Bugfixes¶

Fixed uploads of files whose names start with artifact when the media root is empty. #8041
Increased the default maximum HTTP header field size for the pulpcore gunicorn config from 8190 to 16384 bytes to support PQC (post-quantum) X.509 certificates forwarded via the X-CLIENT-CERT header.

Plugin API¶

Bugfixes¶

Pulp's gpg_verify() function now respects the system policy for the sequoia crypto library in /etc/crypto-policies/back-ends/sequoia.config (or the path set by the environment variable SEQUOIA_CRYPTO_POLICY).

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.118.5 (2026-10-23)¶

REST API¶

Bugfixes¶

Fixed responses for a distribution being cached from the previous repository version, and served until the cache entry expired, when they were requested while a new version was being created. #8246
Fixed file downloader path sanitation. CVE-2026-90959

3.118.3 (2026-10-15)¶

REST API¶

No significant changes.

3.118.1 (2026-09-17)¶

REST API¶

Bugfixes¶

Reduce the number and size of queries made for each content app request.

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.118.0 (2026-09-15)¶

REST API¶

Features¶

Added optional added_between and removed_between filters to the content list endpoints. Each takes two repository versions (by HREF/PRN) as base,target and returns the net set of content added or removed going from the base version to the target version, allowing diffs between two arbitrary (possibly non-adjacent) repository versions instead of only the single-step difference against the immediate predecessor. #7831

Bugfixes¶

Cache 404s when content doesn't exist in repository #8078
Fixed RepositoryVersion.contains always returning False.
Fixed post-migrate hooks to prevent failing on incomplete or rolled back migrations.
Preserve OpenPGP verification compatibility for failed signatures and fix key ID calculation for OpenPGP v6.
Revert the migration of relative_paths to the new domain type.

Misc¶

#7986

Plugin API¶

Deprecations¶

Deprecated RepositoryVersion.content_batch_qs.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.117.2 (2026-09-11)¶

REST API¶

Bugfixes¶

Preserve OpenPGP verification compatibility for failed signatures and fix key ID calculation for OpenPGP v6.

Added a default_content_guard field to domains that is automatically assigned to new distributions created within the domain when they do not specify their own content-guard. #7988
Added --no-control-socket flag to pulpcore-api and pulpcore-content commands to disable the gunicorn control socket.
Pulpcore is now considered provisionally "post quantum cryptography" (PQC) compatible. PQC certificates are now supported for TLS, PGP operations, and signing services.

Bugfixes¶

Fixed head-of-line blocking in fetch_task() by excluding blocked resources at the DB level. #7900
Fixed general_delete, ageneral_delete, and general_multi_delete to skip instances that no longer exist instead of failing with a bare DoesNotExist. The task result now reports skipped pks under skipped and per-model delete counts. #7910
Fixed RedisWorker being blocked by its own stale locks after a worker restarts under the same name, by releasing them at startup. #7919
Fixed orphaned Redis task/resource locks left behind when a worker's AppStatus was already deleted, via periodic reconciliation. #7920
Fixed cache invalidation and DistributedPublication tracking for distributions serving via repository_version when publications are created or deleted. #7993
Filled missing repository version content_ids in SQL from content membership, committing per repository so large databases are less likely to hit statement timeouts.

Plugin API¶

Features¶

gpg_verify() now supports post-quantum cryptography (PQC) algorithms.

Pulp File¶

Bugfixes¶

Fixed synchronous File uploads failing with "Artifact already exists" instead of reusing the existing Artifact.
GitPython is now imported only when syncing a FileGitRemote, so pulp_file loads on installs with no git executable on PATH.

Pulp Cert Guard¶

Bugfixes¶

Fixed RHSM certguard path matching when domains are enabled.

3.116.3 (2026-09-02)¶

REST API¶

Bugfixes¶

Filled missing repository version content_ids in SQL from content membership, committing per repository so large databases are less likely to hit statement timeouts.

Plugin API¶

No significant changes.

Pulp File¶

Bugfixes¶

GitPython is now imported only when syncing a FileGitRemote, so pulp_file loads on installs with no git executable on PATH.

Pulp Cert Guard¶

No significant changes.

3.116.2 (2026-09-01)¶

REST API¶

Features¶

Pulpcore is now considered provisionally "post quantum cryptography" (PQC) compatible. PQC certificates are now supported for TLS, PGP operations, and signing services.

Plugin API¶

Features¶

gpg_verify() now supports post-quantum cryptography (PQC) algorithms.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.116.1 (2026-08-27)¶

REST API¶

Bugfixes¶

Fixed head-of-line blocking in fetch_task() by excluding blocked resources at the DB level. #7900

Plugin API¶

No significant changes.

Pulp File¶

Bugfixes¶

Fixed synchronous File uploads failing with "Artifact already exists" instead of reusing the existing Artifact.

Pulp Cert Guard¶

No significant changes.

3.116.0 (2026-08-12)¶

REST API¶

Features¶

Added --backend option to the add-signing-service management command, enabling Sequoia (sq) as an alternative to GPG for key management. Use --backend sq to register signing services using Sequoia's key store. #7479

Bugfixes¶

Reduced lock contention for distribution updates that leave base_path unchanged. #3322, #7896
Fix temp file leak in pull-through metadata streaming. #7846
Fixed domain list returning all domains to authenticated users instead of only domains they can view. #7898
Fixed RedisWorker leaking Redis locks when task acquire, abort, cancel, or immediate dispatch cleanup failed. #7902
Fixed the waiting_tasks metric to count only tasks that can run in parallel under resource locks, matching worker FIFO scheduling. #7938
Fixed Redis workers polling the database at the single-worker rate during startup by learning the online worker count before the first heartbeat.
Increased the content app's maximum HTTP header field size from 8190 to 16384 bytes to support PQC (post-quantum) X.509 certificates forwarded via the X-CLIENT-CERT header.

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.115.5 (2026-10-21)¶

REST API¶

No significant changes.

3.115.3 (2026-07-28)¶

REST API¶

Bugfixes¶

Fixed domain list returning all domains to authenticated users instead of only domains they can view. #7898

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.115.2 (2026-07-22)¶

Features¶

Add /v4/ API to Pulp.

This adds a /v4/ API path to Pulp, in parallel to the existing /v3/ path. The two are currently (nearly) identical APIs - see the /pulp/api/v4/status/ ouput for the only (current) end-user-visible impact.

This change is primarily setting the stage to allow for future API changes and growth. It is in TECH PREVIEW, and is likely to have significant changes happening to it as we continue integrating into the rest of the Pulp architecture. #6462 - Allow commas in pulp_labels values. To filter for labels containing commas, escape them with a backslash (e.g. ?pulp_label_select=key=val\,ue). #7789 - Optimized response time when filtering repository versions by content. #7799 - Added saml2 as a dependency option accompanied by the SAML_CONFIG setting.

Bugfixes¶

Fixed content app directory listing generating broken links when distribution base paths contain colons. #6955
Fixed RelatedField rendering wrong domain in hrefs when DOMAIN_ENABLED=True. #7835
Fixed RepositoryVersion.remove_content failing when the queryset is derived from self.content and the repository version contains >= 65,535 content items. The lazy queryset was re-evaluated after content_ids was already updated, causing RepositoryContent entries to be left orphaned. #7851
Fixed a race condition when creating content with file_url or upload that could result in a duplicate artifact error.
Fixed delete timeouts when removing repositories or repository versions with large numbers of PublishedArtifacts by batching bulk deletes and avoiding nested subqueries that produce poor PostgreSQL execution plans.
Improved validation of relative paths to prevent a path traversal attack in filesystem exports. (CVE-2026-12701)
Stopped shipping an insecure default as DJANGO_SECRET.

Improved Documentation¶

Reformatted and partially rewrote the Pull-Request Walkthrough.

Removals¶

Drop support for running with Django 4. #7343

Plugin API¶

Features¶

Added pulp_domain to TaskSchedule so scheduled tasks dispatch in the correct domain. Name uniqueness is now per domain. #7829

Removals¶

Made content_ids cache required with forceful migration and removed the /pulp/api/v3/datarepair/7465/ endpoint. This will run a migration that could take a while if you haven't already run the datarepair endpoint. #7466
Deactivated dynaconf boxify. This can affect plugins that access nested settings via dot instead of subscribing.

Pulp File¶

Features¶

Added sync optimization that skips re-syncing when the remote manifest has not changed. An optimize flag on the sync endpoint (default True) allows forcing a full sync when needed.

Pulp Cert Guard¶

No significant changes.

3.114.2 (2026-07-20)¶

REST API¶

Bugfixes¶

Improved validation of relative paths to prevent a path traversal attack in filesystem exports. (CVE-2026-12701)

3.114.0 (2026-06-09)¶

REST API¶

Features¶

Improved sync performance by caching content during re-syncs.

Bugfixes¶

Enabled filesystem export of content synced with a streamed policy from a file:// remote, by reading the files from their local path instead of failing because no Artifact was downloaded. #7746
Respect the system /etc/hosts and nsswitch.conf configurations for sync configurations. We drop the aiodns resolver backend for aiohttp and use the default resolver.

Plugin API¶

Features¶

DeclarativeVersion now accepts deferred_fields to exclude fields not needed during sync, reducing memory usage and producing lighter queries.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.113.0 (2026-06-03)¶

REST API¶

Features¶

Added support for passing q_select as a parameter to the replicate action, allowing users to selectively sync a subset of upstream distributions without modifying the stored upstream-pulp configuration. #7617
Added the FeatureNotImplementedError exception to indicate that a requested feature is not yet implemented.

Bugfixes¶

Optimized QueryExistingArtifacts by reducing database queries. #7558
Replication now reuses existing distributions matched by base_path when a name lookup misses (e.g. upstream rename), preventing base_path uniqueness conflicts and preserving content continuity. Stale distributions are also cleaned up before new distributions are created as an additional safeguard. Improved error reporting in finalize_replication to include details about which subtasks failed. #7614
Allow nested downloader_config to be passed json stringified. #7677
Fixed adjust_roles to use update_or_create instead of get_or_create when populating locked roles, so that a pre-existing role with locked=False is updated rather than causing a duplicate key error.

Plugin API¶

Features¶

Exposed StableOrderingFilter in the plugin API so pulp plugins can import it from pulpcore.plugin.
Exposed cancel_task and cancel_task_group from pulpcore.plugin.tasking so plugins can import them.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.112.2 (2026-10-21)¶

REST API¶

No significant changes.

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.112.1 (2026-06-03)¶

REST API¶

Bugfixes¶

Optimized QueryExistingArtifacts by reducing database queries. #7558
Allow nested downloader_config to be passed json stringified. #7677

Plugin API¶

Features¶

Exposed StableOrderingFilter in the plugin API so pulp plugins can import it from pulpcore.plugin.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.112.0 (2026-05-19)¶

REST API¶

Bugfixes¶

Decoupled the /livez liveness probe from the database so it returns 200 even when the database is unavailable. #7721
Fixed a bug where immediate tasks could be executed even if they were blocked by other tasks using the same resources.

Plugin API¶

Bugfixes¶

Removed the default=True from the overwrite field on NoArtifactContentSerializer so it no longer leaks into validated_data. This fixes plugins that splat content serializer data (**serializer.validated_data).

Pulp File¶

Features¶

Added NAME_FILTER_OPTIONS to the relative_path field in FileContentFilter, enabling contains, startswith, regex, and other lookup expressions. #7719

Pulp Cert Guard¶

No significant changes.

3.111.2 (2026-05-19)¶

REST API¶

Bugfixes¶

Fixed a bug where immediate tasks could be executed even if they were blocked by other tasks using the same resources.

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.111.1 (2026-05-14)¶

REST API¶

No significant changes.

Plugin API¶

Bugfixes¶

Removed the default=True from the overwrite field on NoArtifactContentSerializer so it no longer leaks into validated_data. This fixes plugins that splat content serializer data (**serializer.validated_data).

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.111.0 (2026-05-13)¶

REST API¶

Features¶

Added an overwrite boolean parameter to the repository content modify and content upload endpoints. When set to false, the task will fail if the content being added would overwrite existing content based on repo_key_fields. Defaults to true. #7550
Add a configurable ResourceBudget for preventing over-subscription of the disk "properly". Adds a backpressure mechanism + flushing mechanism in order to ensure that batches get fully processed even if minsize hasn't yet been reached. Allows previous performance-reducing mitigations to be removed. #7559
Add more PulpExceptions. Treat DRF APIExceptions as safe in the task runner.
Added network configuration fields (total_timeout, connect_timeout, sock_connect_timeout, sock_read_timeout, download_concurrency, max_retries) to the Upstream Pulp model, allowing these settings to be propagated to remotes created during replication.

Bugfixes¶

Added a distributions lock to finalize_replication to prevent concurrent finalize tasks from different upstream servers from racing on the same distribution objects. #7614
Fixed TypeError: 'str' object has no attribute 'tolower' in _ensure_bool during incremental content exports. Changed .tolower() to .lower(). #7678
Fixed add-signing-service management command failing with "There are N keys matching the key id" for PGP keys that have subkeys.
Fixed cache forgetting the Content-Type header of ApiResponses
Treat aiohttp.ClientError exceptions as safe in the task runner to preserve download error details when REDACT_UNSAFE_EXCEPTIONS is enabled.

Plugin API¶

Features¶

Exposed EncryptedJSONField via the plugin API. #7690
Exported DATETIME_FILTER_OPTIONS from pulpcore.plugin.viewsets.
Renamed the Replicator constructor parameter and instance attribute from tls_settings to remote_settings to reflect the expanded set of remote configuration fields propagated during replication. The old tls_settings attribute is still available as a deprecated alias.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.110.3 (2026-05-13)¶

REST API¶

Bugfixes¶

Added a distributions lock to finalize_replication to prevent concurrent finalize tasks from different upstream servers from racing on the same distribution objects. #7614
Fixed cache forgetting the Content-Type header of ApiResponses

3.110.1 (2026-05-05)¶

REST API¶

Bugfixes¶

Fixed TypeError: 'str' object has no attribute 'tolower' in _ensure_bool during incremental content exports. Changed .tolower() to .lower(). #7678

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.110.0 (2026-04-28)¶

REST API¶

Bugfixes¶

Replace use of the deprecated distutils. The module has been removed in Python 3.12 . #7571
Fixed RedisWorker stalling when more than 20 tasks are waiting on the same resource. The worker now doubles its fetch limit and retries until a runnable task is found or the entire queue has been examined. #7612
Fixed RedisWorker not always respecting FIFO order of tasks with shared resources. #7616
Fixed an issue where gpg_verify() was rejecting some valid PGP signatures after changes made in pulpcore 3.108.

Plugin API¶

Features¶

Added task_args and task_kwargs fields to TaskSchedule, allowing plugins to store positional and keyword arguments that are forwarded to tasks when they are dispatched on schedule. Both fields are encrypted at rest. TaskSchedule and TaskScheduleSerializer are now exposed via the plugin API. #7608
Allow plugins to access pulp_plugin_configs and get_plugin_config from pulpcore.app.apps via pulpcore.plugin.apps #7650

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.109.3 (2026-04-28)¶

REST API¶

Bugfixes¶

Replace use of the deprecated distutils. The module has been removed in Python 3.12 . #7571

3.109.1 (2026-04-22)¶

REST API¶

Bugfixes¶

Fixed RedisWorker stalling when more than 20 tasks are waiting on the same resource. The worker now doubles its fetch limit and retries until a runnable task is found or the entire queue has been examined. #7612
Fixed RedisWorker not always respecting FIFO order of tasks with shared resources. #7616

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.109.0 (2026-04-21)¶

REST API¶

Features¶

Added support for serving superseded publications for a configurable retention period. #7514
Added ability for non-admin users to update their personal account fields

Bugfixes¶

Added option to pulpcore-content and pulpcore-api to configure the gunicorn control socket path. The default path could cause permission errors on certain deployments setups. This feature was added in gunicorn>=25.1 and is ignored for lower version. #7574
Optimized cleanup_old_versions() by rewriting protected_versions() to avoid expensive JOINs on large databases and deferring the content_ids field during version deletion. #7594
Added new setting TASK_PREFER_DEFER to always defer immediate tasks to a task worker. Useful for systems with slow databases that frequently timeout immediate tasks.

Plugin API¶

No significant changes.

Pulp File¶

Bugfixes¶

Fixed double publish when performing file replication. #7557

Pulp Cert Guard¶

No significant changes.

3.108.2 (2026-04-24)¶

REST API¶

Bugfixes¶

Fixed an issue where gpg_verify() was rejecting some valid PGP signatures after changes made in pulpcore 3.108.

3.108.0 (2026-04-14)¶

REST API¶

Features¶

Added WORKER_TYPE setting. Defaults to 'pulpcore'. 'redis' is also available. #7210
Added OTEL_METRICS_DISPATCH_INTERVAL_MINUTES setting to allow configuring the periodic telemetry dispatch interval (default: 5 minutes). #7532
Added pulpcore.app.find_url.find_api_root() to standardize Pulp url-creation.

Bugfixes¶

Set default --max-requests 10000 and --max-requests-jitter 500 for API workers to prevent unbounded RSS growth from glibc heap fragmentation over long-lived worker processes. #7482
Fixed reset-admin-password command failing when using --random option on Django 5. #7533
Fixed a race condition that could sometimes occur when converting an existing non-replica Pulp instance into a replica ("reverse-replication"). Likely rare in real world use.

Plugin API¶

No significant changes.

Pulp File¶

Misc¶

Pulp Cert Guard¶

No significant changes.

3.107.1 (2026-04-09)¶

REST API¶

Bugfixes¶

Fixed reset-admin-password command failing when using --random option on Django 5. #7533

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.107.0 (2026-04-01)¶

REST API¶

Features¶

Added the created_resource_prns field to Task, returning the PRN of each created resource. #7003
Add REDACT_UNSAFE_EXCEPTIONS setting for strict exception handling.

Bugfixes¶

Fixed a performance issue causing operations that process large numbers of HREFs to be ~1000x slower than equivalent PRN-based operations. #6237
Pulp Replicas now present all of their distribution updates at the end of the replication process, rather than each individual repository-distribution pair being updated individually as syncs and publishes are completed. Unfortunately for users with existing replicated setups the very first replication post-upgrade will still have the old behavior - but afterwards it should work as expected. #7333

Plugin API¶

Features¶

Made the prefix on PgpKeyFingerprintField optional, defaulting to v4: when omitted.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.106.0 (2026-03-24)¶

REST API¶

Features¶

Added the content_guard_prn field to Distribution. #7004
Add a data repair API for admins - for more granular control and operations which are too long for migrations. #7272
Added retain_checkpoints field to Repository to automatically clear the checkpoint flag on older publications exceeding the limit. #7428
Added /pulp/api/v3/datarepair/7465/ endpoint to add missing repository version content_ids cache to all repository versions. #7465
It is now possible to set repository_version on any distribution type, including for publication-based content types where this was not previously the case. For publication-based content, selecting a repository_version to distribute will pick the latest publication for that repository version, just as selecting a repository will pick the latest repository version.

Bugfixes¶

Fixed duplicate chunk uploads corrupting the entire upload #6381
Added upperbounds to uvloop (an optional dependency) to prevent a known bug in newer releases. #7213
Fixed bug where API process would miss heartbeats during long uploads. #7315
Fix remove-signing-service handling, can now remove service without --class argument. #7318
Fixed metadata artifacts being re-uploaded to storage when creating a publication for an already-published repository version. #7344
Fixed a bug when syncing a custom repository using the upstream username only (no password) did not send any authentication since both were required by the download factory. #7425
Added a management command (pulpcore-manager datarepair 7465) to populate the content_ids cache for all repository versions. #7465
Added a composite database index on (pulp_domain, size) to the Artifact model to improve query performance when loading metrics data. #7475
Added a GIN index to the pulp_labels field on Content and updated label filtering to use GIN-optimized lookups, improving query performance for label-based content searches. #7477
Fixed a bug where a worker would start running finalize_replication task before the replicate_distributions task finishes. #7520

Plugin API¶

Features¶

Added PgpKeyFingerprintField serializer field to the plugin API for validating and normalizing type-prefixed OpenPGP key identifiers.

Bugfixes¶

Properly support DRF responses in Synchronous Content Cache.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.105.27 (2026-11-09)¶

REST API¶

Bugfixes¶

Insures that Content-Disposition, Content-Security-Policy, and X-Content-Type-Options are set consistently in the content-app. This addresses CVE-2026-84232.

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.105.26 (2026-11-05)¶

REST API¶

Bugfixes¶

Fixed uploads of files whose names start with artifact when the media root is empty. #8041
Increased the default maximum HTTP header field size for the pulpcore gunicorn config from 8190 to 16384 bytes to support PQC (post-quantum) X.509 certificates forwarded via the X-CLIENT-CERT header.

Plugin API¶

Bugfixes¶

Pulp's gpg_verify() function now respects the system policy for the sequoia crypto library in /etc/crypto-policies/back-ends/sequoia.config (or the path set by the environment variable SEQUOIA_CRYPTO_POLICY).

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.105.25 (2026-10-23)¶

REST API¶

No significant changes.

REST API¶

Features¶

Pulpcore is now considered provisionally "post quantum cryptography" (PQC) compatible. PQC certificates are now supported for TLS, PGP operations, and signing services.

Plugin API¶

Features¶

gpg_verify() now supports post-quantum cryptography (PQC) algorithms.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.105.17 (2026-08-27)¶

REST API¶

Features¶

Added --backend option to the add-signing-service management command, enabling Sequoia (sq) as an alternative to GPG for key management. Use --backend sq to register signing services using Sequoia's key store. #7479

Bugfixes¶

Fixed add-signing-service management command failing with "There are N keys matching the key id" for PGP keys that have subkeys.
Fixed an issue where gpg_verify() was rejecting some valid PGP signatures after changes made in pulpcore 3.108.
Increased the content app's maximum HTTP header field size from 8190 to 16384 bytes to support PQC (post-quantum) X.509 certificates forwarded via the X-CLIENT-CERT header.

Plugin API¶

No significant changes.

Pulp File¶

Bugfixes¶

Fixed synchronous File uploads failing with "Artifact already exists" instead of reusing the existing Artifact.

Pulp Cert Guard¶

No significant changes.

3.105.16 (2026-08-12)¶

REST API¶

Bugfixes¶

Reduced lock contention for distribution updates that leave base_path unchanged. #3322, #7896

3.105.14 (2026-07-28)¶

REST API¶

No significant changes.

3.105.12 (2026-07-20)¶

REST API¶

Bugfixes¶

Improved validation of relative paths to prevent a path traversal attack in filesystem exports. (CVE-2026-12701)

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.105.11 (2026-07-16)¶

REST API¶

No significant changes.

3.105.9 (2026-06-09)¶

REST API¶

Bugfixes¶

Fixed adjust_roles to use update_or_create instead of get_or_create when populating locked roles, so that a pre-existing role with locked=False is updated rather than causing a duplicate key error.

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.105.8 (2026-06-03)¶

REST API¶

Bugfixes¶

Optimized QueryExistingArtifacts by reducing database queries. #7558
Allow nested downloader_config to be passed json stringified. #7677

Plugin API¶

Features¶

Exposed StableOrderingFilter in the plugin API so pulp plugins can import it from pulpcore.plugin.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.105.7 (2026-05-13)¶

REST API¶

Bugfixes¶

Fixed cache forgetting the Content-Type header of ApiResponses

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.105.6 (2026-05-05)¶

REST API¶

Bugfixes¶

Set default --max-requests 10000 and --max-requests-jitter 500 for API workers to prevent unbounded RSS growth from glibc heap fragmentation over long-lived worker processes. #7482
Added option to pulpcore-content and pulpcore-api to configure the gunicorn control socket path. The default path could cause permission errors on certain deployments setups.

This feature was added in gunicorn>=25.1 and is ignored for lower version. #7574 - Fixed TypeError: 'str' object has no attribute 'tolower' in _ensure_bool during incremental content exports. Changed .tolower() to .lower(). #7678

3.105.4 (2026-04-21)¶

REST API¶

Bugfixes¶

Optimized cleanup_old_versions() by rewriting protected_versions() to avoid expensive JOINs on large databases and deferring the content_ids field during version deletion. #7594
Added new setting TASK_PREFER_DEFER to always defer immediate tasks to a task worker. Useful for systems with slow databases that frequently timeout immediate tasks.

3.105.2 (2026-03-24)¶

REST API¶

Bugfixes¶

Fixed a bug when syncing a custom repository using the upstream username only (no password) did not send any authentication since both were required by the download factory. #7425
Added a management command (pulpcore-manager datarepair 7465) to populate the content_ids cache for all repository versions. #7465

Plugin API¶

Bugfixes¶

Properly support DRF responses in Synchronous Content Cache.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.105.1 (2026-03-17)¶

REST API¶

Bugfixes¶

Fixed duplicate chunk uploads corrupting the entire upload #6381
Fix remove-signing-service handling, can now remove service without --class argument. #7318
Fixed metadata artifacts being re-uploaded to storage when creating a publication for an already-published repository version. #7344

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.105.0 (2026-03-10)¶

REST API¶

Features¶

Added better error handling for errors when creating RepositoryVersions. Now the duplicate content pks are shown in the logs. #7184
repository_version filters now accept Repository HREF/PRNs to filter by the latest version #7365

Bugfixes¶

Unified pulp_labels key validation across create/update, set_label/unset_label, and label filters to consistently allow alphanumerics, underscores, spaces, hyphens, and dots. #6456
Fixed a traceback when setting pulp_labels with null values on create or update. #6593
Clean up on-demand temporary file left over on an aborted download. #6975
Fixed a typo in GroupRoleSerializer that caused a 500 error when listing group roles with a domain set. #7095
Fix regression (crash) during retain_repo_versions cleanup. #7371
Moved artifact checksum validation from module-level settings code to a Django system check. #7380
Fixed RemoteSerializer to fail when it contains invalid parameters. #7385
Fixed the url of the generated openapi schemas when using pulpcore-manager openapi.

Plugin API¶

No significant changes.

Pulp File¶

Features¶

Added ability to sync a git repository with the new FileGitRemote. #4708
Added support for Git LFS in pulp-file git sync.

Pulp Cert Guard¶

No significant changes.

3.104.2 (2026-03-05)¶

REST API¶

Bugfixes¶

Fixed a typo in GroupRoleSerializer that caused a 500 error when listing group roles with a domain set. #7095
Fixed RemoteSerializer to fail when it contains invalid parameters. #7385

3.104.0 (2026-02-24)¶

REST API¶

Features¶

Added a "debug-logs" option to the TASK_DIAGNOSTICS / X-Task-Diagnostics feature - dumps task-specific logs into a profile artifact at a DEBUG level. #7214
Added a "logs" option to the TASK_DIAGNOSTICS / X-Task-Diagnostics feature - dumps task-specific logs into a profile artifact. #7215
Add memory caching for api doc endpoints.

Bugfixes¶

"profile options" designated using the X-Task-Diagnostics feature should be propagated to child tasks. #7219
Added a new "datarepair" management command for data cleanups which are for whatever reason not possible to run in a migration. Added support for cleaning up after issue #7272. #7272
Fix OpenAPI spec to use string instead of UUID format.
Fixed PRNField slowing down the generic list endpoints with extra database queries.

Improved Documentation¶

Fixed the quickstart instructions on how to contribute with code as well as links to more comprehensive guides. #7319

Removals¶

Reverted the exception handling refactor.

Plugin API¶

Bugfixes¶

Harden RepositoryVersion memoization against bugs that could lead to incorrect counts and repository content. #7272
Fixed new downloader config field breaking plugins with synchronous uploads.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.103.4 (2026-02-18)¶

REST API¶

Bugfixes¶

Added a new "datarepair" management command for data cleanups which are for whatever reason not possible to run in a migration. Added support for cleaning up after issue #7272. #7272

Plugin API¶

Bugfixes¶

Harden RepositoryVersion memoization against bugs that could lead to incorrect counts and repository content. #7272

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.103.3 (2026-02-11)¶

REST API¶

Removals¶

Reverted the exception handling refactor.

3.103.1 (2026-02-03)¶

REST API¶

No significant changes.

Plugin API¶

Bugfixes¶

Fixed new downloader config field breaking plugins with synchronous uploads.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.103.0 (2026-02-03)¶

REST API¶

Features¶

Add network configuration support for synchronous file uploads #7201
Improve the logging for heartbeat failures by including the actual Exception. It helps with troubleshooting. #7235

Bugfixes¶

Fix an error when running pulpcore-manager list-signing-services.

Plugin API¶

Features¶

Added more useful error exceptions for general tasks. #7270

Bugfixes¶

Exposed PulpLabelsField and pulp_labels_validator to the plugin API.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.102.0 (2026-01-27)¶

REST API¶

Features¶

Added a pulpcore-manager list-signing-services command.

Bugfixes¶

Implement atomic hashing and chunking in PulpExport #7218
Fixed not supporting the new rename of the S3 storage backend. #7228
Fixed duplicate error code PLP0003 used by both ResourceImmutableError and DigestValidationError. ResourceImmutableError now uses PLP0006.
Use a proper spdx license identifier in the openapi docs.

Improved Documentation¶

Updated error handling documentation with all PulpException classes and usage examples.

Removals¶

Stopped leaking sensitive information of failures in the task API.

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.101.0 (2026-01-13)¶

REST API¶

Improved Documentation¶

Re-introduced "Hardware Requirements" page to the docs. #7063

Plugin API¶

Features¶

Added modify_task property to ModifyRepositoryActionMixin so plugin writers can override the task that Pulp calls.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.100.0 (2026-01-06)¶

REST API¶

Features¶

Adapted PulpImport/Export to allow update django-import-export==4.x. #5324
Allow use of Django5 as well as Django4. #6988

Bugfixes¶

Fixed file handle leak when content app access triggers downloads due to on_demand or streamed policy. #7157

Misc¶

Plugin API¶

Removals¶

Removed the fallback for unserializable task return values. Tasks resulting from an api action should use the corresponding serializer to produce useful output. Maintenance tasks should return nothing. #6079

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.95.3 (2025-12-17)¶

REST API¶

Bugfixes¶

Fixed file handle leak when content app access triggers downloads due to on_demand or streamed policy. #7157

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.95.2 (2025-12-11)¶

REST API¶

No significant changes.

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.95.1 (2025-12-09)¶

REST API¶

Misc¶

3.94.0 (2025-11-25)¶

REST API¶

Features¶

Added synchronous upload API for Files. #6898

Bugfixes¶

Improve handling of some edge cases in task diagnostics code. #7020
Restrict batch processing minsize to the settings value defined for MAX_CONCURRENT_CONTENT. Smaller values will increase sync times but reduce the amount of outstanding content in the pipeline, which reduces peak resource consumption (memory, temporary disk requirements). #7064
Fixed incorrect filtering of vulnerability reports when querying a specific repository version. #7091
Allow to specify a template for the status names of the processes using '--name-template` to overcome conflicts in certain containerized environments.

Plugin API¶

Bugfixes¶

Fixed NoArtifactContentUploadViewSet/Serializer breaking when using the artifact, upload or file_url fields.
Fixed resolved_prn failing when the object's pk wasn't an UUID.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.93.4 (2026-02-10)¶

REST API¶

No significant changes.

3.93.2 (2025-11-18)¶

REST API¶

Bugfixes¶

Fixed incorrect filtering of vulnerability reports when querying a specific repository version. #7091

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.93.1 (2025-11-13)¶

REST API¶

Bugfixes¶

Improve handling of some edge cases in task diagnostics code. #7020
Allow to specify a template for the status names of the processes using '--name-template` to overcome conflicts in certain containerized environments.

Plugin API¶

Bugfixes¶

Fixed NoArtifactContentUploadViewSet/Serializer breaking when using the artifact, upload or file_url fields.
Fixed resolved_prn failing when the object's pk wasn't an UUID.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.93.0 (2025-11-05)¶

REST API¶

Features¶

Updated API to allow adding custom metadata to exports #6712

Bugfixes¶

Fixed an issue with dispatching repository.add_and_remove tasks for pull-through caching

3.92.0 (2025-10-28)¶

REST API¶

Features¶

Add MAX_CONCURRENT_CONTENT as a global setting. During sync, this setting will be used to determine the size of batch of content being processed in one go. Default value is 200. #7024

Bugfixes¶

Modified the error response ("AttributeError: This QueryDict instance is immutable") raised when a file didn't upload properly or was incomplete. #6993
Fixed immediate tasks from the content app getting stuck in waiting.

3.91.0 (2025-10-01)¶

REST API¶

Features¶

Changed orphan cleanup to run as a scheduled task.
Removed the use of session scoped advisory locks from workers janitorial work.

Bugfixes¶

Fix situations with a single worker per installation failing to unblock all tasks that come in quick succession. #6873
Fixed exception propagation in the pulp-content instrumentation middleware. #6925

3.90.0 (2025-09-23)¶

REST API¶

Features¶

Modified the API so that updates do not dispatch a task if no change is needed. Update responses can now respond with either 200 for an immediate result, or issue 202 for a dispatched task. #6896, #6897
Taught pulp-import-export to work in a domain-enabled environment.

All combinations of domain-state between upstream and downstream are handled. #6926 - Cleanup missing worker processes records faster.

Bugfixes¶

Fixed generation of signed URLs when using GCS as the storage backend. #6917

Misc¶

-

3.89.1 (2025-09-18)¶

REST API¶

Bugfixes¶

Fixed generation of signed URLs when using GCS as the storage backend. #6917

3.88.0 (2025-09-03)¶

REST API¶

Features¶

Added a result JSONField to the Task model to store the task's return value. #6901

Bugfixes¶

Fixed error case where worker tried to aquire the app lock for a Task that was already finished. #6899

Plugin API¶

Deprecations¶

Deprecated returning non-JSON-serializable values from tasks. Such values will be replaced with None, and this workaround will be removed in version 3.100. #6901

Pulp File¶

Features¶

Updated tasks to always return JSON-serializable value. #6901

Pulp Cert Guard¶

No significant changes.

3.87.1 (2025-09-03)¶

REST API¶

Bugfixes¶

Fixed error case where worker tried to aquire the app lock for a Task that was already finished. #6899

3.86.0 (2025-08-21)¶

REST API¶

Features¶

Added a configurable bucket boundary for API request duration metric using the OTEL_PULP_API_HISTOGRAM_BUCKETS setting. #6845

Bugfixes¶

Made DjangoMetricsMiddleware aware of OTEL urls exclusion envvars. #6843
Fixed repository version validation to allow legitimate shared artifacts between content units. #6868
Fixed a bug that prevents migrations from running.

Improved Documentation¶

Updated documentation for the TASK_DIAGNOSTICS setting. #6854

Plugin API¶

Removals¶

Removed support for synchronous immediate tasks.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.85.36 (2026-11-09)¶

REST API¶

Bugfixes¶

Insures that Content-Disposition, Content-Security-Policy, and X-Content-Type-Options are set consistently in the content-app. This addresses CVE-2026-84232.

Fixed responses for a distribution being cached from the previous repository version, and served until the cache entry expired, when they were requested while a new version was being created. #8246

Improved Documentation¶

Modernized documentation around signing docs.
Separated and improved documentation around the database encryption key.

3.85.31 (2026-09-23)¶

REST API¶

Bugfixes¶

Fixed file downloader path sanitation. CVE-2026-90959
Fixed post-migrate hooks to prevent failing on incomplete or rolled back migrations.

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.85.30 (2026-09-01)¶

REST API¶

No significant changes.

3.85.28 (2026-07-29)¶

REST API¶

No significant changes.

3.85.26 (2026-07-20)¶

REST API¶

Bugfixes¶

Improved validation of relative paths to prevent a path traversal attack in filesystem exports. (CVE-2026-12701)

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.85.25 (2026-07-16)¶

REST API¶

No significant changes.

3.85.23 (2026-06-09)¶

REST API¶

Bugfixes¶

Fixed adjust_roles to use update_or_create instead of get_or_create when populating locked roles, so that a pre-existing role with locked=False is updated rather than causing a duplicate key error.

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.85.22 (2026-06-03)¶

REST API¶

Bugfixes¶

Optimized QueryExistingArtifacts by reducing database queries. #7558

Plugin API¶

Features¶

Exposed StableOrderingFilter in the plugin API so pulp plugins can import it from pulpcore.plugin.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.85.21 (2026-05-13)¶

REST API¶

Bugfixes¶

Fixed cache forgetting the Content-Type header of ApiResponses

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

REST API¶

Bugfixes¶

Fixed a bug when syncing a custom repository using the upstream username only (no password) did not send any authentication since both were required by the download factory. #7425
Added a management command (pulpcore-manager datarepair 7465) to populate the content_ids cache for all repository versions. #7465

Plugin API¶

Bugfixes¶

Properly support DRF responses in Synchronous Content Cache.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.85.14 (2026-03-17)¶

REST API¶

Bugfixes¶

Fixed duplicate chunk uploads corrupting the entire upload #6381
Clean up on-demand temporary file left over on an aborted download. #6975
Fix remove-signing-service handling, can now remove service without --class argument. #7318
Fixed metadata artifacts being re-uploaded to storage when creating a publication for an already-published repository version. #7344

3.85.12 (2026-02-25)¶

REST API¶

No significant changes.

3.85.10 (2026-02-10)¶

REST API¶

Features¶

Adapted PulpImport/Export to allow update django-import-export==4.x. #5324
Allow use of Django 5 as well as Django 4. Note the following breaking changes if upgrading to Django 5: storage configuration must use the new STORAGES format instead of DEFAULT_FILE_STORAGE, Python >= 3.10 is required, and PostgreSQL >= 14 is required. #6988

Bugfixes¶

Fixed PRNField slowing down the generic list endpoints with extra database queries.

Plugin API¶

Bugfixes¶

Exposed PulpLabelsField and pulp_labels_validator to the plugin API.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.85.9 (2026-01-27)¶

REST API¶

Bugfixes¶

Fixed not supporting the new rename of the S3 storage backend. #7228

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.85.8 (2026-01-14)¶

REST API¶

No significant changes.

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.85.7 (2025-12-22)¶

REST API¶

No significant changes.

Plugin API¶

Bugfixes¶

Exposed RepositoryVersionSerializer to the plugin API. In some cases a plugin might have used that serializer for a newer pulpcore version but it could also be installed with a lower pulpcore version.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.85.6 (2025-12-17)¶

REST API¶

Bugfixes¶

Fixed file handle leak when content app access triggers downloads due to on_demand or streamed policy. #7157

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.85.5 (2025-12-11)¶

REST API¶

No significant changes.

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.85.4 (2025-12-09)¶

REST API¶

Misc¶

3.85.2 (2025-11-13)¶

REST API¶

Bugfixes¶

Fixed exception propagation in the pulp-content instrumentation middleware. #6925
Improve handling of some edge cases in task diagnostics code. #7020
Allow to specify a template for the status names of the processes using '--name-template` to overcome conflicts in certain containerized environments.

Plugin API¶

Bugfixes¶

Fixed NoArtifactContentUploadViewSet/Serializer breaking when using the artifact, upload or file_url fields.
Fixed resolved_prn failing when the object's pk wasn't an UUID.

Removals¶

Removed support for synchronous immediate tasks.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.85.1 (2025-08-12)¶

REST API¶

Bugfixes¶

Fixed a bug that prevents migrations from running.

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.85.0 (2025-08-12)¶

REST API¶

Features¶

Added the ability to configure the openapi schema for remote user authentication via REMOTE_USER_OPENAPI_SECURITY_SCHEME. Its type defaults to "mutualTLS" for cert based authentication. #5437
Added the vulnerability report data model. #6773
Added a new table to track all app status in a common place.

Bugfixes¶

Made a failure to update the heartbeat catastrophic, so we can actually rely on workers that claim to be "online". #heartbeat
Redirect checkpoint URLs without a trailing slash to add the slash. #6812
Fixed worker emitting logs with wrong task's domain names. #6818

Removals¶

Bumped the minimum required python version to 3.11. #6262
Removed support for DEFAULT_FILE_STORAGE and it's corresponding storage options. Use STORAGES instead: #6807
Switch OpenAPI specification to use version 3.1.

Plugin API¶

Removals¶

Purged migrations that were squashed before. Plugins need to rebase their migrations onto "core:0091_systemid". Removed BaseDistribution.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

Features¶

Replaced unmaintained rhsm check_path with local replacement. Dropped the optional dependency on python-rhsm. #6195

3.84.0 (2025-07-30)¶

REST API¶

Features¶

Added the --auxiliary flag to the workers entrypoint to allow adding workers to an installation that will only handle unblocked tasks.
Moved timestamping of new tasks from application code into the database.

Bugfixes¶

Fixed the new content set optimization failing when the RepositoryVersion grew larger than 65K content units. #6772
Add some randomness to the task pickup code to relieve some pressure from the queue. #6799
When running as a recurring scheduled task, purge will now clean stale task records accross all domains. #6815
Added some Postgresql transactions in places where they are appropriate.

3.83.1 (2025-07-15)¶

REST API¶

Bugfixes¶

Fixed the new content set optimization failing when the RepositoryVersion grew larger than 65K content units. #6772

3.82.1 (2025-07-04)¶

REST API¶

No significant changes.

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.82.0 (2025-07-02)¶

REST API¶

Features¶

Added support for profiling individual tasks with X-TASK-DIAGNOSTICS header. The TASK_DIAGNOSTICS setting now determines which profilers are available to users of the REST API. #6725

Bugfixes¶

Fixed S3 Storage configuration. #6630
Fixed HEAD requests to large on-demand files (>1MB) leaving behind temporary files. #6647

Improved Documentation¶

Updated "Protect Content" documentation regarding the --guard command-line option. #6731

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.81.0 (2025-06-24)¶

REST API¶

Features¶

Checksum calculation of files being uploaded or downloaded to Pulp is now multithreaded.

Bugfixes¶

Changed default http bind address from [::] to 0.0.0.0 if IPv6 is not available. #6606
Raised the minimum version of gunicorn to 22.0. #6640

Plugin API¶

Bugfixes¶

Fixed the pulp_labels field on the NoArtifactContentSerializer to work inside ViewSets for multipart/form uploads. #6713

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.80.2 (2025-06-24)¶

REST API¶

No significant changes.

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.80.1 (2025-06-12)¶

REST API¶

No significant changes.

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.80.0 (2025-05-27)¶

REST API¶

Bugfixes¶

Prevent downloader session to be closed when there is a digest validation in on_demand content serving.

Improved Documentation¶

Adds docs on the Alternate Content Sources feature set. #6609

Plugin API¶

Deprecations¶

Deprecated TaskGroup.finish() for removal with Pulp 4. #task_group_finish

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.79.1 (2025-05-27)¶

REST API¶

No significant changes.

3.78.0 (2025-05-13)¶

REST API¶

Features¶

Added the optional feature to enable uvloop library as a replacement of asyncio eventloop. The feature is activated through the UVLOOP_ENABLED feature flag settings and the 'uvloop' optional dependency. #6021

Bugfixes¶

Taught tasks to update the state of associated progress-reports when canceled/failed.

REST API¶

Features¶

The TASK_DIAGNOSTICS option now permits individual diagnostics to be enabled or disabled by listing them. #4548
If enabled using TASK_DIAGNOSTICS and the appropriate package is installed, tasks can now output a profile of what functions / lines allocated the most memory at the time of peak RSS.

Bugfixes¶

Fixed a memory consumption issue that was triggered by the use of the Alternate Content Source feature. #6500
Fixed incorrect use of f-strings in gettext. #6521

Improved Documentation¶

Fixed the TASK_DIAGNOSTICS documentation, which was out of date. #6481

Misc¶

-

Plugin API¶

Bugfixes¶

Re-added* timeout to tasks dispatched as immediate for both deferred and non-deferred runs.

Also, immediate tasks must be coroutines from now on. This is to enable immediate tasks to run on the workers foreground without completely blocking heartbeats. Support for legacy non-coroutines immediate task will be dropped in pulpcore 3.85.

REST API¶

Features¶

Added the task_name and if it's a task.immediate to the Starting task ... log entry. #6482

Bugfixes¶

Added validation to PublicationSerializer and DistributionSerializer to raise an error if repo and remote differ. #6174
Set the X-PULP-ARTIFACT-SIZE header at the handle_response_header function. #6390
Client- and CA-certificates used in Remotes are now validated and any comments stripped before being applied to the Remote. #6491
Fixed an oversight in the #6385 fix.

Improved Documentation¶

Updated the settings.md file to be sorted alphabetically. #6459

Plugin API¶

Bugfixes¶

Fixed add_roles_for_object_creator not handling anonymous users.
Reverted adding timeout to immediate tasks, for it was causing a regression with pull-through caching (https://github.com/pulp/pulpcore/issues/6429).

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.75.3 (2025-04-22)¶

REST API¶

No significant changes.

Plugin API¶

Bugfixes¶

Fixed add_roles_for_object_creator not handling anonymous users.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.75.2 (2025-04-09)¶

REST API¶

Bugfixes¶

Set the X-PULP-ARTIFACT-SIZE header at the handle_response_header function. #6390

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.75.1 (2025-04-08)¶

REST API¶

Bugfixes¶

Fixed an oversight in the #6385 fix.

Plugin API¶

Bugfixes¶

Reverted adding timeout to immediate tasks, for it was causing a regression with pull-through caching (https://github.com/pulp/pulpcore/issues/6429).

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.75.0 (2025-04-02)¶

REST API¶

Features¶

Added validation to the RepositorySyncURLSerializer to raise an error if repo and remote are from different plugins. #1860

Bugfixes¶

Fixes the Remote configuration of timeouts to properly fallback to aiohttp defaults if they are unset by the user. #5439
Reworked the loading of plugin default settings in order to fix interference with environment injection. #6341
Fixed migrations 0131 and 0132 to make it possible to upgrade from 3.73. #6375
Fixed task purge in case no access policy based permission framework is configured for Pulp. #6380
Fixed pull-through caching failure when content already existed on-demand. #6385
Fixed cross-domain check for RepositoryVersion fields. #6388
Redeclared the aiohttp dependency boundaries to follow semver as stated in their documentation.

Plugin API¶

Bugfixes¶

Added timeout to tasks dispatched as immediate for both deferred and non-deferred runs.

REST API¶

Bugfixes¶

Fixed migrations 0131 and 0132 to make it possible to upgrade from 3.73. #6375

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.74.0 (2025-03-18)¶

REST API¶

Features¶

Added validation to the orphans/cleanup/ endpoint to restrict the orphan_protection_time value. #3234
Added support to create and distribute checkpoint publications in Pulp. #6244

Bugfixes¶

Fixed cache not being invalidated when a publication was created or a repository version was deleted. #6333
Reworked content-labeling RBAC to use a specific permission for set/unset labels.

Users must be explicitly given the core.content_labeler role to access this functionality, or to upload content with labels. #6337 - Fixed a bug in the plugin API related to set and unset labels for ReadOnlyContentViewSet. #6340 - Fixed not being able to call the set/unset label endpoints for domains. - Reverted the feature to allow describing remote authentication in the openapi specs. It depended on the also reverted switch to openapi 3.1.

Plugin API¶

Features¶

Added ability for plugins to dispatch a task to add pull-through content to an associated repository.

Add the class var PULL_THROUGH_SUPPORTED = True to the plugin's repository model to enable this feature. Plugins can also customize the dispatched task by supplying their own pull_through_add_content method on their repository model. #6201 - Added support to create and distribute checkpoint publications in Pulp. Plugins can choose to enable this feature by exposing the checkpoint field in their inherited PublicationSerializer and DistributionSerializer. Checkpoint publications and distributions can be created by passing checkpoint=True when creating them. #6244

Pulp File¶

Features¶

Added support to create checkpoint file publications and distribute them through checkpoint file distributions. #6244

Pulp Cert Guard¶

No significant changes.

3.73.49 (2026-11-09)¶

REST API¶

Bugfixes¶

Insures that Content-Disposition, Content-Security-Policy, and X-Content-Type-Options are set consistently in the content-app. This addresses CVE-2026-84232.

3.73.40 (2026-07-20)¶

REST API¶

Bugfixes¶

Improved validation of relative paths to prevent a path traversal attack in filesystem exports. (CVE-2026-12701)

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.73.39 (2026-07-16)¶

REST API¶

No significant changes.

3.73.37 (2026-06-09)¶

REST API¶

Bugfixes¶

Fixed adjust_roles to use update_or_create instead of get_or_create when populating locked roles, so that a pre-existing role with locked=False is updated rather than causing a duplicate key error.

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.73.36 (2026-06-03)¶

REST API¶

Bugfixes¶

Optimized QueryExistingArtifacts by reducing database queries. #7558

Plugin API¶

Features¶

Exposed StableOrderingFilter in the plugin API so pulp plugins can import it from pulpcore.plugin.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.73.35 (2026-05-13)¶

REST API¶

Bugfixes¶

Fixed cache forgetting the Content-Type header of ApiResponses

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.73.34 (2026-05-07)¶

REST API¶

No significant changes.

3.73.32 (2026-04-28)¶

REST API¶

Bugfixes¶

Replace use of the deprecated distutils. The module has been removed in Python 3.12 . #7571

3.73.30 (2026-03-24)¶

REST API¶

Bugfixes¶

Fixed a bug when syncing a custom repository using the upstream username only (no password) did not send any authentication since both were required by the download factory. #7425

Plugin API¶

Bugfixes¶

Properly support DRF responses in Synchronous Content Cache.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.73.29 (2026-03-17)¶

REST API¶

Bugfixes¶

Fixed duplicate chunk uploads corrupting the entire upload #6381
Clean up on-demand temporary file left over on an aborted download. #6975
Fix remove-signing-service handling, can now remove service without --class argument. #7318
Fixed metadata artifacts being re-uploaded to storage when creating a publication for an already-published repository version. #7344

3.73.27 (2026-02-25)¶

REST API¶

No significant changes.

3.73.25 (2026-02-10)¶

REST API¶

Features¶

Adapted PulpImport/Export to allow update django-import-export==4.x. #5324
Allow use of Django 5 as well as Django 4. Note the following breaking changes if upgrading to Django 5: storage configuration must use the new STORAGES format instead of DEFAULT_FILE_STORAGE, Python >= 3.10 is required, and PostgreSQL >= 14 is required. #6988

Bugfixes¶

Fixed PRNField slowing down the generic list endpoints with extra database queries.

Plugin API¶

Bugfixes¶

Exposed PulpLabelsField and pulp_labels_validator to the plugin API.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.73.24 (2026-01-27)¶

REST API¶

Bugfixes¶

Fixed not supporting the new rename of the S3 storage backend. #7228

3.73.22 (2026-01-14)¶

REST API¶

No significant changes.

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.73.21 (2025-12-22)¶

REST API¶

No significant changes.

Plugin API¶

Bugfixes¶

Exposed RepositoryVersionSerializer to the plugin API. In some cases a plugin might have used that serializer for a newer pulpcore version but it could also be installed with a lower pulpcore version.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.73.20 (2025-12-09)¶

REST API¶

Misc¶

3.73.18 (2025-11-18)¶

REST API¶

Bugfixes¶

Allow to specify a template for the status names of the processes using '--name-template` to overcome conflicts in certain containerized environments.

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.73.17 (2025-11-13)¶

REST API¶

No significant changes.

Plugin API¶

Bugfixes¶

Fixed NoArtifactContentUploadViewSet/Serializer breaking when using the artifact, upload or file_url fields.
Fixed resolved_prn failing when the object's pk wasn't an UUID.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.73.16 (2025-10-01)¶

REST API¶

Bugfixes¶

Fixed exception propagation in the pulp-content instrumentation middleware. #6925

Taught tasks to update the state of associated progress-reports when canceled/failed.

3.73.9 (2025-05-06)¶

REST API¶

No significant changes.

3.73.7 (2025-04-23)¶

REST API¶

Bugfixes¶

Fixed a memory consumption issue that was triggered by the use of the Alternate Content Source feature. #6500

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.73.6 (2025-04-23)¶

REST API¶

No significant changes.

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.73.5 (2025-04-22)¶

REST API¶

Bugfixes¶

Client- and CA-certificates used in Remotes are now validated and any comments stripped before being applied to the Remote. #6491

Plugin API¶

Bugfixes¶

Fixed add_roles_for_object_creator not handling anonymous users.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.73.4 (2025-04-08)¶

REST API¶

Bugfixes¶

Fixed an oversight in the #6385 fix.

3.73.2 (2025-03-14)¶

REST API¶

Bugfixes¶

Fixed cache not being invalidated when a publication was created or a repository version was deleted. #6333
Reworked content-labeling RBAC to use a specific permission for set/unset labels.

Users must be explicitly given the core.content_labeler role to access this functionality, or to upload content with labels. #6337 - Fixed a bug in the plugin API related to set and unset labels for ReadOnlyContentViewSet. #6340

3.73.0 (2025-03-04)¶

REST API¶

Features¶

Allow labelling Content in pulp.

This adds pulp_labels to Content subclasses, using the same entities as used for labelling Repositories, Remotes, and Distributions currently (q.v.). Labels can be added when uploading Content, searched on using the pulp_labels_select filter to the list endpoints, and set/unset on existing Content. #3338 - Added new field policy to UpstreamPulp that decides how Replicate manages local objects within the domain.

Replicate will now copy the upstream's pulp_labels on downstream objects. Also, replicate will now label the downstream objects created with the UpstreamPulp they came from. #5214 - Add ability to configure the openapi schema for remote user authentication via REMOTE_USER_OPENAPI_SECURITY_SCHEME. Its type defaults to "mutualTLS" for cert based authentication. #5437

Bugfixes¶

Fixed plugin default settings overriding user settings.

Improved Documentation¶

Add a new section about configuring AWS CloudFront as storage backend. #6258

Misc¶

#6225

3.72.1 (2025-02-26)¶

REST API¶

No significant changes.

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

YANKED 3.72.0 (2025-02-25)¶

REST API¶

Features¶

Added ENABLED_PLUGINS option to allow selecting installed plugins to be enabled. #5235
Added support for labels on domains. #6236
Added TASK_GRACE_INTERVAL as a setting to specify the amount of seconds a worker gives the current task to finish when receiving SIGINT. #6242

Bugfixes¶

Taught the upload-workflow to replace missing artifact-files when discovered. #6274
Fixed an issue in immediate tasks switching to tmp directories and API worker failing to run cwd. #6293
The Alternate Content Source sync feature has received some optimizations, making it dramatically faster.

Improved Documentation¶

Added basic documentation for Content Guards. #4629

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.71.2 (2025-02-24)¶

REST API¶

No significant changes.

3.71.0 (2025-02-19)¶

REST API¶

Features¶

Added pulp_created filter for Tasks API. #6241

Bugfixes¶

Content app now returns a 400 Bad Request response when receiving invalid cookies instead of a 500 error. #6214
Fixed a bug in replication, where a failed sync will not be reattempted. #6261

Plugin API¶

Bugfixes¶

Fixed immediate tasks to run in a temporary directory. #5928

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.70.1 (2025-02-12)¶

REST API¶

Bugfixes¶

Fixed a bug in replication, where a failed sync will not be reattempted. #6261

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.70.0 (2025-02-04)¶

REST API¶

Features¶

Allow CONTENT_ORIGIN to be None. When None, the base_url for Distributions is a relative path. #5931
Added a login api endpoint to result in an authorization cookie from any other sort of feasible authentication. #5932
Added the unblocked_at filter for Tasks API. #6165
Added a check to the basic auth module to respect the X-Requested-With: "XMLHttpRequest" header. In return the signature of the WWW-Authenticate header is changed so browsers will not pop up a password dialog.

Bugfixes¶

Fixed replication failing when the upstream Pulp doesn't have all the same plugins as the downstream. #4509
Added an extra check to the task unblocking logic to catch a rare case of stuck tasks in running, but never unblocked. Tasks in normal operation should never end in this state, but at least with a specific upgrade it can happen. #6225

Improved Documentation¶

Expanded docs on correlation id. #6248

Removals¶

Marked django's DEFAULT_FILE_STORAGE and STATIC_FILE_STORAGE settings to be removed in pulpcore 3.85. Users should upgrade to use the STORAGES setting instead.

The django-upgrade tool can handle simple cases. If cloud storages are being used, refer to django-storages to adapt their specific storage options. E.g:

https://django-storages.readthedocs.io/en/latest/backends/amazon-S3.html
https://django-storages.readthedocs.io/en/latest/backends/azure.html #5404
Updated the OpenAPI generator version used to generate python bindings to 7.10.0. This involves stricter client side validation of api calls when using the bindings.

Plugin API¶

Features¶

Modified the artifact_url method from ArtifactDistribution model to return a relative URL (no protocol, fqdn, and port) in case CONTENT_ORIGIN is not defined. #relative-path-base-url

Removals¶

Started using settings.STORAGES internally instead of settings.DEFAULT_FILE_STORAGE and settings.STATICFILES_STORAGE, which was deprecated in Django 4.2.

For compatibility, plugins must replace access to:

settings.DEFAULT_FILE_STORAGE with settings.STORAGES["default"]["BACKEND"]
settings.STATICFILES_STORAGE with settings.STORAGES["staticfiles"]["BACKEND"]

REST API¶

No significant changes.

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.69.0 (2024-12-11)¶

REST API¶

Features¶

Added core version to the bindings api spec even if core apis are not part of the spec.

Bugfixes¶

Fixed content-app behavior for the case where the client would get a 200 response for a package streamed from a Remote which did not match the expected checksum. Now, the connection is closed before finalizing the response. #5012
On a request for on-demand content in the content app, a corrupted Remote that contains the wrong binary (for that content) prevented other Remotes from being attempted on future requests. Now the last failed Remotes are temporarily ignored and others may be picked. #5725
Disable retry logic on the context of content-app on-demand streaming, as we can't recover from any errors after starting the streaming process (chunked transfer). #5937
Allowed to bind api and content workers to multiple addresses. You can specify --bind multiple times on the pulpcore-{api,content} entrypoints. #6053
Fixed the openapi schema definition of task error.
Fixed the schema definition for created resources.

Improved Documentation¶

Added docs about on-demand content limitations and caveats. #1975, #3212

Plugin API¶

Features¶

Pulpcore migrations have been squashed. In order to allow removing the old ones, plugins should rebase their migrations on at least the 0091 migration of core. The pulpcore-manager rebasemigrations command will hep with that.

Bugfixes¶

Fixed GetOrCreateSerializerMixin not accepting pulp_domain for the natural key creation. #domain-get-create-serializer-mixin

Misc¶

-

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.68.2 (2024-12-11)¶

REST API¶

No significant changes.

Plugin API¶

Bugfixes¶

Fixed GetOrCreateSerializerMixin not accepting pulp_domain for the natural key creation. #domain-get-create-serializer-mixin

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.68.1 (2024-11-26)¶

REST API¶

Bugfixes¶

Fixed content-app behavior for the case where the client would get a 200 response for a package streamed from a Remote which did not match the expected checksum. Now, the connection is closed before finalizing the response. #5012
Allowed to bind api and content workers to multiple addresses. You can specify --bind multiple times on the pulpcore-{api,content} entrypoints. #6053

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.68.0 (2024-11-12)¶

REST API¶

Bugfixes¶

Fixed an assertion on all content being added/removed in a repository version is of the same domain. #content-assert
Fixed incorrect count of waiting tasks in the queue for the tasks_unblocked_queue and tasks_longest_unblocked_time metrics. #5941
On the content-app, added ClientConnectionError (aiohttp) as an exception that can trigger a retry when streaming content from a Remote. #5967

Plugin API¶

Features¶

Added pulpcore.app.util.cache_key to the plugin api. Use this method to get the base-key when using the Pulp cache. #cache-key

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.67.1 (2024-11-12)¶

REST API¶

Bugfixes¶

Fixed an assertion on all content being added/removed in a repository version is of the same domain. #content-assert

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.67.0 (2024-11-06)¶

REST API¶

Features¶

Added DefaultAccessPolicy that will always use the default policy declared on the views. Added AccessPolicyFromSettings that will read policies from the ACCESS_POLICIES setting first. #5882
Replaced built-in opentelemetry metrics with custom middlewares. Additionally, introduced a new setting OTEL_ENABLED that toggles the opentelemetry instrumentation on and off. It defaults to False. #5943

Bugfixes¶

pass envvars to Signing Scripts to access GNUPGHOME #5911
Fixed repository modify allowing content from separate domains. #5934
Fixed the JSONField specification so it doesn't break ruby bindings. See context here.

Improved Documentation¶

Fixed pulpcore code-api generated docs, which was not using the right mkdocstring directives yet. #5834

Plugin API¶

Bugfixes¶

Downloaders now always ensure the download ends up under WORKING_DIRECTORY. #5912

Deprecations¶

Deprecated AccessPolicyFromDB for removal in 4.0. #5822

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.66.1 (2024-11-06)¶

REST API¶

Bugfixes¶

Fixed repository modify allowing content from separate domains. #5934
Fixed the JSONField specification so it doesn't break ruby bindings. See context here.

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.66.0 (2024-10-16)¶

REST API¶

Features¶

Added OpenPGP keyring repository type and OpenPGP key content type. #3024
Re-enabled and refactored the Domain Storage metric emitter. #5762
Added a formal "immediate" type of Task and changed workers behavior to prioritize those. This labeling is exlusive to plugin code and should only be applied where it's known that the task will finish shortly, like in updates of repositories, remotes, and distributions. #5767

Bugfixes¶

Fixed task purge to not expect a user, when a run has been scheduled by Pulp itself. #5881

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.65.0 (2024-10-08)¶

REST API¶

Bugfixes¶

pulp-worker fails to start with "float object cannot be interpreted as an integer" on some versions of python. #5861
Fixed the name of the metrics' attribute reporting the worker's process name. Started emitting the name of the Pulp service with a dedicated label (i.e., job=pulp-api). #5864
Started propagating headers from the content-app when using a non-default filesystem storage. #5879

Improved Documentation¶

Correct rendering of pulp bash example in reclaim-disk-space.md #5876

Plugin API¶

No significant changes.

Pulp File¶

Bugfixes¶

During sync, quote the URL path for file downloads using HTTP. #5686

Pulp Cert Guard¶

No significant changes.

3.64.0 (2024-10-03)¶

REST API¶

Features¶

Started using an upstream version of the OpenTelemetry aiohttp server instrumentation. #5833
Included the worker's name in the http.server.duration OpenTelemetry metric attributes. #5844

Bugfixes¶

Started collecting artifact size metrics even after caching the served content. #5817

3.63.50 (2026-11-05)¶

REST API¶

No significant changes.

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.63.49 (2026-10-22)¶

REST API¶

No significant changes.

3.63.43 (2026-07-20)¶

REST API¶

Bugfixes¶

Improved validation of relative paths to prevent a path traversal attack in filesystem exports. (CVE-2026-12701)

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.63.42 (2026-07-16)¶

REST API¶

No significant changes.

3.63.40 (2026-06-03)¶

REST API¶

Bugfixes¶

Optimized QueryExistingArtifacts by reducing database queries. #7558

3.63.38 (2026-05-07)¶

REST API¶

No significant changes.

3.63.36 (2026-04-28)¶

REST API¶

Bugfixes¶

Replace use of the deprecated distutils. The module has been removed in Python 3.12 . #7571

3.63.34 (2026-03-24)¶

REST API¶

Bugfixes¶

Fixed a bug when syncing a custom repository using the upstream username only (no password) did not send any authentication since both were required by the download factory. #7425

Plugin API¶

Bugfixes¶

Properly support DRF responses in Synchronous Content Cache.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.63.33 (2026-03-17)¶

REST API¶

Bugfixes¶

Fixed duplicate chunk uploads corrupting the entire upload #6381
Clean up on-demand temporary file left over on an aborted download. #6975
Fixed metadata artifacts being re-uploaded to storage when creating a publication for an already-published repository version. #7344

3.63.31 (2026-02-25)¶

REST API¶

No significant changes.

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.63.30 (2026-02-10)¶

REST API¶

Features¶

Adapted PulpImport/Export to allow update django-import-export==4.x. #5324
Allow use of Django 5 as well as Django 4. Note the following breaking changes if upgrading to Django 5: storage configuration must use the new STORAGES format instead of DEFAULT_FILE_STORAGE, Python >= 3.10 is required, and PostgreSQL >= 14 is required. #6988

Bugfixes¶

Fixed PRNField slowing down the generic list endpoints with extra database queries.

3.63.28 (2025-12-22)¶

REST API¶

No significant changes.

Plugin API¶

Bugfixes¶

Exposed RepositoryVersionSerializer to the plugin API. In some cases a plugin might have used that serializer for a newer pulpcore version but it could also be installed with a lower pulpcore version.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.63.27 (2025-12-09)¶

REST API¶

Misc¶

3.63.25 (2025-11-13)¶

REST API¶

No significant changes.

Plugin API¶

Bugfixes¶

Fixed NoArtifactContentUploadViewSet/Serializer breaking when using the artifact, upload or file_url fields.
Fixed resolved_prn failing when the object's pk wasn't an UUID.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.63.24 (2025-10-01)¶

REST API¶

Bugfixes¶

Fixed task purge in case no access policy based permission framework is configured for Pulp. #6380

Taught tasks to update the state of associated progress-reports when canceled/failed.

Added a management-task, clean-up-progress-reports, to clean up existing reports. #3609

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

REST API¶

Bugfixes¶

Client- and CA-certificates used in Remotes are now validated and any comments stripped before being applied to the Remote. #6491

Plugin API¶

Bugfixes¶

Fixed add_roles_for_object_creator not handling anonymous users.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.63.14 (2025-04-08)¶

REST API¶

Bugfixes¶

Fixed an oversight in the #6385 fix.

3.63.12 (2025-03-18)¶

REST API¶

Bugfixes¶

Fixed cache not being invalidated when a publication was created or a repository version was deleted. #6333
The Alternate Content Source sync feature has received some optimizations, making it dramatically faster.

3.63.10 (2025-02-28)¶

REST API¶

No significant changes.

3.63.8 (2025-01-21)¶

REST API¶

Bugfixes¶

On a request for on-demand content in the content app, a corrupted Remote that contains the wrong binary (for that content) prevented other Remotes from being attempted on future requests. Now the last failed Remotes are temporarily ignored and others may be picked. #5725

Plugin API¶

Bugfixes¶

Fixed GetOrCreateSerializerMixin not accepting pulp_domain for the natural key creation. #domain-get-create-serializer-mixin

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.63.4 (2024-11-26)¶

REST API¶

Bugfixes¶

Fixed content-app behavior for the case where the client would get a 200 response for a package streamed from a Remote which did not match the expected checksum. Now, the connection is closed before finalizing the response. #5012
Allowed to bind api and content workers to multiple addresses. You can specify --bind multiple times on the pulpcore-{api,content} entrypoints. #6053

3.63.2 (2024-11-12)¶

REST API¶

Bugfixes¶

Fixed an assertion on all content being added/removed in a repository version is of the same domain. #content-assert
pulp-worker fails to start with "float object cannot be interpreted as an integer" on some versions of python. #5861
Started propagating headers from the content-app when using a non-default filesystem storage. #5879
Fixed task purge to not expect a user, when a run has been scheduled by Pulp itself. #5881
pass envvars to Signing Scripts to access GNUPGHOME #5911
On the content-app, added ClientConnectionError (aiohttp) as an exception that can trigger a retry when streaming content from a Remote. #5967

Plugin API¶

No significant changes.

Pulp File¶

Bugfixes¶

During sync, quote the URL path for file downloads using HTTP. #5686

Pulp Cert Guard¶

No significant changes.

3.63.1 (2024-10-30)¶

REST API¶

Bugfixes¶

Fixed repository modify allowing content from separate domains. #5934
Fixed the JSONField specification so it doesn't break ruby bindings. See context here.

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.63.0 (2024-10-01)¶

REST API¶

Features¶

Introduced new immutable resource identifier: Pulp Resource Name (PRN). All objects within Pulp will now show their PRN alongside their pulp_href. The PRN can be used in lieu of the pulp_href in API calls when creating or filtering objects. The PRN of any object has the form of prn:app_label.model_label:pulp_id. #5766

Bugfixes¶

Removed opentelemetry-instrumentation-django from dependencies. #5843
Made Kafka dependencies optional depending on whether the producer is configured. #5850

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.62.0 (2024-09-25)¶

REST API¶

Features¶

Added name, base_url and last_replication filters for UpstreamPulps. #4110
Added new setting API_ROOT_REWRITE_HEADER that when specified allows the API_ROOT to be rewritten per request based on the header's value. #4207
Added new q_select field to UpstreamPulp to allow for more advanced filtering on upstream distributions. pulp_label_select has been removed and its values have been migrated to this new field. Please upgrade every API worker before issuing a new replicate task to avoid unwanted behavior. #5087

Bugfixes¶

Fixed Publication & RepositoryVersion's content__in filter to properly accept an array of strings. #3634

Improved Documentation¶

Document the environment variables used in the test fixture bindings_cfg. #5807

Plugin API¶

Features¶

Added new reverse method that handles Pulp specific url formatting. Plugins should update instances of django.urls.reverse and rest_framework.reverse to this new Pulp one. #4207

Deprecations¶

Deprecated Replicator's distribution_data, plugins should switch to distribution_extra_fields. distribution_data will be removed in pulpcore==3.70. #3649

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.61.0 (2024-09-18)¶

REST API¶

Features¶

Added new /migrate/ endpoint to Domains that allows for migrating artifacts from one storage backend to another. #3358

Bugfixes¶

Fix a memory spike on deletion of large repositories. #5048
Fixed a logging issue, when a task marked for cancelling that finished produced an unecessary stack trace.

3.59.0 (2024-08-28)¶

REST API¶

Features¶

Added ability to cancel all tasks in a TaskGroup through a partial update with state=canceled. #4125

Bugfixes¶

Added a default access policy where only admin users will be able to upload and read/list artifacts. #5525

Improved Documentation¶

Improved documentation for the complex filtering. #5703

Deprecations¶

The DELETE request method from Artifact viewset has been deprecated and planned for removal. #5525

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.58.0 (2024-08-14)¶

REST API¶

Features¶

Optimized replication to skip content syncing when upstream distributions are unchanged. The optimization considers changes on the upstream distributions serving content directly from a publication or repository version. #5493
Exposed the no_content_change_since field on the Distribution API endpoint to return a timestamp since when the distributed content served by a distribution has not changed. If the value equals to null, no such a guarantee about the content change is given. #5687

Bugfixes¶

Fixed RBAC permissions being incorrectly assigned in tasks that create objects. https://access.redhat.com/security/cve/cve-2024-7143 #5683

3.57.0 (2024-08-07)¶

REST API¶

Features¶

Added the ability to save task's diagnostics data as artifacts. These artifacts are available at the task's detail endpoint. To download them, issue a GET request to ${TASK_HREF}profile_artifacts/. The artifacts are cleaned up automatically by the orphan cleanup. #5422
Improved performance when handling tasks by deferred loading of encrypted args. This also allows seeing and purging tasks in case the symmetric db key was lost.

Bugfixes¶

Implemented batching for artifact deletion to handle the reclaim space task for large repositories. #5635
Fixed urlizing of api hrefs in clickable api. #5664

Improved Documentation¶

Updated REMOTE-USER header definition (to use hyphen, instead of underscore) due to gunicorn version update blocking its usage for security purposes. #5478

Plugin API¶

Bugfixes¶

Change field name url to file_url on UploadSerializerFieldsMixin to avoid conflicting fields in plugins. #5633

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.56.1 (2024-07-26)¶

REST API¶

No significant changes.

Plugin API¶

Bugfixes¶

Change field name url to file_url on UploadSerializerFieldsMixin to avoid conflicting fields in plugins. #5633

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.56.0 (2024-07-23)¶

REST API¶

Features¶

Added kafka integration (tech-preview). #5337
Added RBAC for TaskGroups API. #5497

Bugfixes¶

Fixed path title at content directory index to include domain's name when enabled. #4253
Fixed content upload for existing on-demand content not properly storing the new artifact. #5501
Fixed openapi command where plugins relied on CONTENT_ORIGIN to be set. #5510
Added a note about the default value of the SECRET_KEY setting. #5529
Browsable HREFs now have clickable links again. #5563
Fixed a bug in has_repo_or_repo_ver_param_model_or_obj_perms function to make it work with plugin Repositories. #5619

Plugin API¶

Features¶

Added new url field to UploadSerializerFieldsMixin that will download the file used for the content upload task. #4608

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.55.3 (2024-07-23)¶

REST API¶

Bugfixes¶

Fixed a bug in has_repo_or_repo_ver_param_model_or_obj_perms function to make it work with plugin Repositories. #5619

3.55.1 (2024-06-24)¶

REST API¶

Bugfixes¶

Fixed openapi command where plugins relied on CONTENT_ORIGIN to be set. #5510

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.55.0 (2024-06-18)¶

REST API¶

Features¶

Added two new metrics related to Tasks: pulp_tasks_unblocked_waiting_queue has the number of unblocked waiting tasks that have been waiting longer than five(5) seconds, while pulp_tasks_longest_unblocked_waiting_time record the time in seconds of the longest waiting time for a task in the queue. #3821
Added indices to object_id on user and group roles tables. #5369
Add pulpcore-manager openapi command to help generate api.json for bindings. #5462

Bugfixes¶

Added Pulp side batching to fix large exports that were failing due to changes in psycopg. #5375
Added a lock to avoid multiple workers sending metrics at the same time. #5442
Pulpcore no longer assumes that every plugin implementing the Replication feature supports Publications. #5464

Removals¶

Removed pulp_hrefs from task reserved resources record. Task resource locking will now use Pulp Resource Names (PRNs) that are immutable with respect to settings changes. A resource's pulp_href can still be used in task's reserved_resources filter, Pulp will convert it to the new format behind the scenes. #5148
Removed task's reserved_resources_record filter. Please use reserved_resources instead. #5415
Removed deprecated plugin query string parameter from api doc endpoint. Please use a list of app labels with the component parameter instead.
Upgrade the version of drf spectacular to 0.27.2.

Misc¶

#5420, #5468

Plugin API¶

Removals¶

Removed deprecated functional test fixtures for api clients. The new pulpcore_bindings, file_bindings, ... fixtures should be used instead. #5417

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.54.1 (2024-06-18)¶

REST API¶

Bugfixes¶

Pulpcore no longer assumes that every plugin implementing the Replication feature supports Publications. #5464

Misc¶

#5462

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.54.0 (2024-05-22)¶

REST API¶

Features¶

Added search indices to the Task table to speed up task operations. #5367
Added a scheduled version of task purge. You need to adjust the "TASK_PROTECTION_TIME" setting in order to use it. #5378

Bugfixes¶

Renamed name to domain_name in the metric's attributes reporting domain's disk usage. #5134
Fixed content directory listing returning 500 in certain scenarios due to missing artifact sizes. #5318
Fixed a bug related to replication of AppStream and BaseOS repositories of CentOS. #5358
Stopped deleting content and artifacts presumably created by later failed or canceled tasks. Deleting these lies solely in the responsibility of orphan cleanup. #5363

Improved Documentation¶

Made the complex filtering feature production-ready. This feature supports a special q filter that allows combinations of other filters with NOT, AND and OR operations. #5319

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.53.0 (2024-04-30)¶

REST API¶

Features¶

Added integration with Sentry/GlitchTip. #5285

Bugfixes¶

Update jquery version from 3.5.1 to 3.7.1 in API.html template #5306

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.52.0 (2024-04-23)¶

REST API¶

Features¶

Added a Liveness API that can be used for the livenessProbe in k8s. #5243

Bugfixes¶

Fixed bug where Last-Modified header of packages in django-storages was being updated on duplicate uploads. #5149
Fixed bug which prevented the Pulp API usaging from a web browser #5250

Misc¶

-

Plugin API¶

Bugfixes¶

Fixed a bug where models with auto assign permissions failed when no viewset was attached. #5267

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.51.3 (2024-04-23)¶

REST API¶

Bugfixes¶

Fixed bug which prevented the Pulp API usaging from a web browser #5250

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.51.2 (2024-04-17)¶

REST API¶

No significant changes.

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.51.1 (2024-04-17)¶

REST API¶

No significant changes.

Plugin API¶

Bugfixes¶

Fixed a bug where models with auto assign permissions failed when no viewset was attached. #5267

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.51.0 (2024-04-16)¶

REST API¶

Features¶

Add a new SecurityScheme for external authentication in the OpenAPI schema. #5179

Bugfixes¶

Fix Upload failing to run post create hooks. On installations using the default access policy, this fixes the automatic owner assignment for users with the core.upload_create role on upload objects. #5199
Catch any DatabaseError, not only OperationalError to trigger reconnect to the database #5259

Misc¶

#4592, #5010

3.50.2 (2024-04-09)¶

REST API¶

Misc¶

#5010

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.50.1 (2024-04-03)¶

REST API¶

No significant changes.

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.50.0 (2024-03-26)¶

REST API¶

Bugfixes¶

Fixed an issue in replicate, where an existing distribution had a conflicting publication set. #4637
Fixed content directory listing not showing file size for 0-byte files. #5100

Deprecations¶

Task filter reserved_resources_record has been deprecated and planned for removal in pulpcore 3.55. #4315

Misc¶

#4315

3.49.73 (2026-11-05)¶

REST API¶

Bugfixes¶

Fixed a typo in GroupRoleSerializer that caused a 500 error when listing group roles with a domain set. #7095

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.49.72 (2026-10-22)¶

REST API¶

No significant changes.

3.49.66 (2026-07-20)¶

REST API¶

Bugfixes¶

Improved validation of relative paths to prevent a path traversal attack in filesystem exports. (CVE-2026-12701)

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.49.65 (2026-07-16)¶

REST API¶

No significant changes.

3.49.63 (2026-06-09)¶

REST API¶

Bugfixes¶

Fixed adjust_roles to use update_or_create instead of get_or_create when populating locked roles, so that a pre-existing role with locked=False is updated rather than causing a duplicate key error.

3.49.61 (2026-05-07)¶

REST API¶

No significant changes.

3.49.59 (2026-04-28)¶

REST API¶

Bugfixes¶

Replace use of the deprecated distutils. The module has been removed in Python 3.12 . #7571

3.49.57 (2026-03-24)¶

REST API¶

No significant changes.

3.49.55 (2026-03-10)¶

REST API¶

Bugfixes¶

Moved artifact checksum validation from module-level settings code to a Django system check. #7380
Fixed the url of the generated openapi schemas when using pulpcore-manager openapi.

3.49.50 (2026-02-10)¶

REST API¶

Features¶

Adapted PulpImport/Export to allow update django-import-export==4.x. #5324
Allow use of Django 5 as well as Django 4. Note the following breaking changes if upgrading to Django 5: storage configuration must use the new STORAGES format instead of DEFAULT_FILE_STORAGE, Python >= 3.10 is required, and PostgreSQL >= 14 is required. #6988

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.49.49 (2025-12-22)¶

REST API¶

No significant changes.

Plugin API¶

Bugfixes¶

Exposed RepositoryVersionSerializer to the plugin API. In some cases a plugin might have used that serializer for a newer pulpcore version but it could also be installed with a lower pulpcore version.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.49.48 (2025-12-09)¶

REST API¶

Misc¶

3.49.46 (2025-11-13)¶

REST API¶

No significant changes.

Plugin API¶

Bugfixes¶

Fixed NoArtifactContentUploadViewSet/Serializer breaking when using the artifact, upload or file_url fields.

REST API¶

No significant changes.

Plugin API¶

Bugfixes¶

Fixed GetOrCreateSerializerMixin not accepting pulp_domain for the natural key creation. #domain-get-create-serializer-mixin

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.49.26 (2024-11-29)¶

REST API¶

No significant changes.

3.49.24 (2024-11-12)¶

REST API¶

Bugfixes¶

Fixed an assertion on all content being added/removed in a repository version is of the same domain. #content-assert
On the content-app, added ClientConnectionError (aiohttp) as an exception that can trigger a retry when streaming content from a Remote. #5967

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.49.23 (2024-11-06)¶

REST API¶

Bugfixes¶

Fixed repository modify allowing content from separate domains. #5934
Fixed the JSONField specification so it doesn't break ruby bindings. See context here.

Plugin API¶

Bugfixes¶

Downloaders now always ensure the download ends up under WORKING_DIRECTORY. #5912

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.49.22 (2024-10-17)¶

REST API¶

Bugfixes¶

pass envvars to Signing Scripts to access GNUPGHOME #5911

3.49.17 (2024-08-10)¶

REST API¶

Bugfixes¶

Fixed RBAC permissions being incorrectly assigned in tasks that create objects. https://access.redhat.com/security/cve/cve-2024-7143 #5683

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

REST API¶

Bugfixes¶

Pulpcore no longer assumes that every plugin implementing the Replication feature supports Publications. #5464

Misc¶

#5462

3.49.9 (2024-05-22)¶

REST API¶

No significant changes.

3.49.7 (2024-05-07)¶

REST API¶

Bugfixes¶

Fixed bug which prevented the Pulp API usaging from a web browser #5250

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.49.6 (2024-04-30)¶

REST API¶

No significant changes.

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

REST API¶

No significant changes.

Plugin API¶

Features¶

Added NoArtifactContentViewSet for content creation that does not require a file to be uploaded. #5086

Pulp File¶

Misc¶

#5055

Pulp Cert Guard¶

Misc¶

#5054

3.48.0 (2024-02-28)¶

REST API¶

Features¶

Added a serializer to output pulp_last_updated field on pulp resources. #5033
Added unblocked_at to tasks to distingish waiting for other resources from waiting for a free worker. #5057

Bugfixes¶

Fixed a theoretical race condition leading to improper locking when dispatching tasks. #5071

3.46.0 (2024-02-13)¶

REST API¶

Bugfixes¶

Taught downloader to trust system-cert-store on HTTPS proxy connections. #3036
Fixed a warning that gets raised when cache is enabled: RuntimeWarning: coroutine 'AsyncCache.delete' was never awaited. #4967
Added a serializer validation for domain names with more than 50 characters. #4976

Misc¶

#4589

Plugin API¶

Features¶

Exposed TimeoutException to plugin writers. #5024

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.45.4 (2024-03-26)¶

REST API¶

No significant changes.

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.45.3 (2024-03-05)¶

REST API¶

No significant changes.

3.45.1 (2024-01-30)¶

REST API¶

Bugfixes¶

Fixed a warning that gets raised when cache is enabled: RuntimeWarning: coroutine 'AsyncCache.delete' was never awaited. #4967

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

Pulp Cert Guard¶

No significant changes.

3.45.0 (2024-01-24)¶

REST API¶

Features¶

Added orphaned_for filters to artifact and content endpoints to filter content that has been orphaned for a given number of minutes. #3364
Added pulp-certguard as a resident plugin. #4626

Bugfixes¶

Fixed a bug where publications couldn't be created from repository versions when using RBAC. #4932

Features¶

Added "module" to status api. #4728
Enabled the gunicorn applications for pulpcore-api and pulpcore-content to load configurations from the "gunicorn.conf.py" file. #4917

Bugfixes¶

Repo versions are now protected from deletion if they are being used by Pulp to distribute content. Users must first update any necessary distributions before deleting a protected repo version. #2705
Fixed a bug in the repository version repair API for non-default domains. #4776, #4806
Fix a bug in import/export that could result in a division-by-zero during import. #4777
Ensure the Redis cache is actually respecting the TTL. #4845
Fixed an issue with importing async-timeout in Python 3.11. #4923
Fixed RBAC related bug where syncing a repository with a predefined remote required specifying the remote's HREF at sync time. #4925

Removals¶

The python package for the file plugin is now correctly reporting as "pulpcore". #4728

Deprecations¶

Deprecated the query parameter plugin on the api doc endpoint in favor of component. #4728

Misc¶

#4751, #4850, #4881

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

3.43.3 (2024-01-16)¶

REST API¶

Bugfixes¶

Fixed an issue with importing async-timeout in Python 3.11. #4923

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

3.43.2 (2024-01-09)¶

REST API¶

Bugfixes¶

Fix a bug in import/export that could result in a division-by-zero during import. #4777

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

3.43.1 (2023-12-12)¶

REST API¶

Bugfixes¶

Fixed a bug in the repository version repair API for non-default domains. #4776, #4806

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

3.43.0 (2023-12-05)¶

REST API¶

Features¶

Added a CompositeContentGuard, that manages a list-of ContentGuards and permits access to content if ANY guard permits. #4583

Bugfixes¶

Removed a race condition leading to 500 error in distribution filtering. #4766
Added missing database indices to the RemoteArtifact model. #4835

Plugin API¶

Features¶

Added the async safe detail_model property to master detail models. #4766

Pulp File¶

No significant changes.

3.42.0 (2023-11-28)¶

REST API¶

Features¶

Added instrumentation to content-app to track telemetry data. #3829

Bugfixes¶

Fixed that pulp_file presented its python_package as pulp_file instead of pulp-file. #4724

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

3.41.1 (2023-11-21)¶

REST API¶

Bugfixes¶

Fixed that pulp_file presented its python_package as pulp_file instead of pulp-file. #4724

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

3.41.0 (2023-11-14)¶

REST API¶

Features¶

Added a --restart option to pulpcore worker. This requires "hupper" to be installed.
Added new management command repository-size that calculates the total size in bytes of files stored in repositories. #2079

Bugfixes¶

Closed the window when serializer.get_or_create could raise ObjectDoesnotExist. #4648
Restored the ability to set --max-requests-jitter on service entrypoints. #4679
Fix file:// syncs deleting the original files. #4681

Plugin API¶

Features¶

Exposed a function to return a batch from a given queryset at pulpcore.plugin.util.batch_qs. #4607
Added content app feature to accept a ContentArtifact from content_handler so that the plugin writer no longer has to generate a response when dealing with ContentArtifacts. #4635

Bugfixes¶

Added ADD_TRAILING_SLASH property to AsyncContentCache. The default value is True. By default, AsyncContentCache will call into Handler._match_distribution(path, add_trailing_slash=True). If the meaning of the Distribution's base_path changes when a trailing slash is added, this method will not match such a Distribution. In this case, AsyncContentCache.ADD_TRAILING_SLASH should be set to False. #4634
Fixed how Distribution.content_handler() is called in the content app. #4644
Fixed content app returning 404s on directory index pages for some published plugins. #4654

Removals¶

Removed the ability to call functions defined outside of pulp components as the target of a task. #4651

Pulp File¶

Bugfixes¶

Fix pulp_file advertised version. #4633

3.40.4 (2023-11-08)¶

REST API¶

Bugfixes¶

Restored the ability to set --max-requests-jitter on service entrypoints. #4679

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

3.40.3 (2023-11-07)¶

REST API¶

Bugfixes¶

Closed the window when serializer.get_or_create could raise ObjectDoesnotExist. #4648

Plugin API¶

No significant changes.

Pulp File¶

No significant changes.

3.40.2 (2023-11-06)¶

REST API¶

No significant changes.

Plugin API¶

Bugfixes¶

Fixed content app returning 404s on directory index pages for some published plugins. #4654

Pulp File¶

No significant changes.

3.40.1 (2023-11-02)¶

REST API¶

No significant changes.

Plugin API¶

Bugfixes¶

Added ADD_TRAILING_SLASH property to AsyncContentCache. The default value is True. By default, AsyncContentCache will call into Handler._match_distribution(path, add_trailing_slash=True). If the meaning of the Distribution's base_path changes when a trailing slash is added, this method will not match such a Distribution. In this case, AsyncContentCache.ADD_TRAILING_SLASH should be set to False. #4634
Fixed how Distribution.content_handler() is called in the content app. #4644

Pulp File¶

Bugfixes¶

Fix pulp_file advertised version. #4633

3.40.0 (2023-10-31)¶

REST API¶

Features¶

The content app now returns a 301 redirect when a requested path does not end in a / but should end in a /. #3173
Added upload field to no artifact content upload apis. #4348
Added pulp_file as a resident plugin. #4550

Removals¶

Removed fallback to eval in case EncryptedJSONField failed to decode json data. In case you suspect bad entries in the database, run pulpcore-manager rotate-db-key before the upgrade. #4383
Removed old unencrypted task arguments from database. #4546

Plugin API¶

Features¶

Handler._match_distribution() method now accepts add_trailing_slash keyword argument. When set to False, the content app will not try to append a '/' to the path before trying to match it to a distribution. Plugin code that calls this method directly needs to be updated to account for the desired behavior. #3459

Removals¶

The changes introduced to the content upload serializers need adjustments in dome plugins. Specifically plugin that implemented their own notion of deferred validation to NoArtifactContentUploadSerializer seem to be affected. #4348

Pulp File¶

Features¶

Starting from this release pulp_file will be shipped as part of the pulpcore package. #4550

3.39.35 (2025-12-09)¶

REST API¶

No significant changes.

Plugin API¶

No significant changes.

3.39.34 (2025-11-13)¶

REST API¶

No significant changes.

Plugin API¶

Bugfixes¶

Fixed NoArtifactContentUploadViewSet/Serializer breaking when using the artifact, upload or file_url fields.

3.39.33 (2025-07-30)¶

REST API¶

No significant changes.

Plugin API¶

No significant changes.

3.39.32 (2025-05-27)¶

REST API¶

Bugfixes¶

Fixed bug which prevented the Pulp API usaging from a web browser #5250
pass envvars to Signing Scripts to access GNUPGHOME #5911

Plugin API¶

No significant changes.

REST API¶

No significant changes.

Plugin API¶

No significant changes.

REST API¶

No significant changes.

Plugin API¶

No significant changes.

3.39.20 (2024-08-10)¶

REST API¶

Bugfixes¶

Fixed RBAC permissions being incorrectly assigned in tasks that create objects. https://access.redhat.com/security/cve/cve-2024-7143 #5683

Plugin API¶

No significant changes.

REST API¶

Misc¶

#4589

Plugin API¶

No significant changes.

3.39.9 (2024-01-30)¶

REST API¶

Bugfixes¶

Fixed a warning that gets raised when cache is enabled: RuntimeWarning: coroutine 'AsyncCache.delete' was never awaited. #4967

Plugin API¶

No significant changes.

No significant changes.

Plugin API¶

No significant changes.

3.39.0 (2023-10-25)¶

REST API¶

Features¶

Added a HeaderContentGuard to allow a content access based on a valued provided by a specific header. The header can optionally be filtered through a jq expression. #4518

Bugfixes¶

Resolved a sync-time performance regression. #4591

Plugin API¶

No significant changes.

3.38.1 (2023-10-28)¶

REST API¶

Bugfixes¶

Resolved a sync-time performance regression. #4591

Plugin API¶

No significant changes.

3.38.0 (2023-10-19)¶

REST API¶

Features¶

Use CRC32 checksums instead of SHA256 to improve import/export performance. Cryptographic checksums aren't required as we are only verifying the integrity of the files. #4447
Parsing of the db encryption key was made resiliant to whitespace and to allow comments. #4542

Bugfixes¶

Stopped reassembling the tarball of a chunked import into one large file, and instead gather the bits on the fly. This also allows importing directly from a read-only medium. #4545
Improve performance during export operations. #4551
Taught ContentArtifactResource import to cache content results to improve performance. #4564

Misc¶

#4323, #4585

Plugin API¶

No significant changes.

3.37.0 (2023-10-05)¶

REST API¶

Features¶

Include social_django urls based on config option #4511

Bugfixes¶

Added format param to DEFAULT_FILTERS in BaseFilterSet to fix django api format. #4450

Plugin API¶

No significant changes.

3.36.0 (2023-09-27)¶

REST API¶

Features¶

Status endpoint now reports storage usage of the domain being called from. #4456
Status endpoint now reports the storage usage for non-filesystem storage backends. #4457

Bugfixes¶

Removed a workaround to force close all tcp connections in sync leading to an exhaustion of port numbers and their reuse while in time_wait state. #4452
Fixed the return value of get_users_with_perms_attached_roles to give proper role names. #4478

Removals¶

Exports now take place in .tar format rather than .tar.gz. It was previously found that the compression provided little benefit but came with large runtime costs, so the compression level was reduced to 0. However even packaging the data in a gzip archive without compression comes with performance costs (particularly on import), so, we remove that layer entirely. #4446

Plugin API¶

No significant changes.

3.35.0 (2023-09-20)¶

REST API¶

Features¶

Added RBAC for UpstreamPulp APIs. #3994
Added filters name__regex and name__iregex to various endpoints. #4432
Enabling the TASK_DIAGNOSTICS option now additionally creates a profile of all executed tasks if the pyinstrument package is installed. This incurs a small overhead on task runtime (5-10%). #4436

Bugfixes¶

Added encryption to task argument fields.
Fixed sync not deleting temporary files when WORKING_DIRECTORY is not a sub-directory of MEDIA_ROOT or when using a non-filesystem storage backend. #1936
Ensure non-chunked exports and chunked exports use the same compression level. #4411
Removed compression from exports (using gzip level 0). For most users of export functionality it seems to be a poor tradeoff. #4434
Fixed bug where supplying an empty list for pulp_href__in or pulp_id__in would return all results instead of none. #4437

Removals¶

Removed the pulp-content script that was superseeded by pulpcore-content.

Plugin API¶

No significant changes.

3.34.0 (2023-09-12)¶

REST API¶

Bugfixes¶

Added missing --preload option to pulpcore-api and pulpcore-content. #4368
Ensured that repository and remote delete is always executed in a task. This fixes a bug when the deletion blocks the gunicorn api worker for too long. #4372

Plugin API¶

Features¶

Added a LabelsMixin for views to allow syncronous manipulation of labels on existing objects. Repository, remote and distribution views inherit this from pulpcore, but default access policies need to be adjusted. #3332
Added a migration operation RequireVersion that refuses to complete as long as active server components exist in the database. #3401

3.33.0 (2023-09-06)¶

REST API¶

Features¶

Added a filter q that supports complex filter expressions.

This feature is in tech-preview for the time being. #2480, #3914
Add status records for api apps. #3175
Added set_label and unset_label endpoints to allow manipulating individual labels synchronously. #3332
Added --burst flag to pulpcore-worker so it will terminate instead of sleeping. #4341

Bugfixes¶

Fixed an exception that gets raised inside the domain delete hook when there are still repositories with content in the domain. #4157
Made orphan clean up more tolerant when other tasks are running in parallel. #4316
Fix the label migration 0104 to allow upgrading from before 3.25. #4319
Fixed Distribution validation for PUT calls when the data source changes. #4324
Ensure the compression level is reliably set properly as per #3869. #4351
Fix encrypted fields to use json instead of repr/eval and make them fit for bulk_update. This solves an issue with pulpcore-manager rotate-db-key corrupting data. #4359

Removals¶

Starting with this release, it is highly recommended to start the api and content processes by the newly provided entrypoints (pulpcore-api and pulpcore-content) instead of calling gunicorn directly. #3175

Plugin API¶

Features¶

Added a LabelsMixin for views to allow syncronous manipulation of labels on existing objects. Repository, remote and distribution views inherit this from pulpcore, but default access policies need to be adjusted. #3332

3.32.1 (2023-09-06)¶

REST API¶

Bugfixes¶

Ensure the compression level is reliably set properly as per #3869. #4351
Fix encrypted fields to use json instead of repr/eval and make them fit for bulk_update. This solves an issue with pulpcore-manager rotate-db-key corrupting data. #4359

Plugin API¶

No significant changes.

3.32.0 (2023-08-22)¶

REST API¶

Bugfixes¶

Improved the performance when looking up content for repository versions. #3969
Fixed bug where incorrect error message presented in relation to content-import #4294

Plugin API¶

Features¶

Made the current domain a shared resource for all tasks even with domains disabled, so tasks can hold off all other operations by taking an exclusive lock on the (default) domain. #4285

3.31.0 (2023-08-15)¶

REST API¶

Bugfixes¶

Optimized content app to not slow down as the size of a repository grows. #3802
Fixed FileDownloader in the presence of on_demand remotes. #4019
Taught downloader to correctly handle plugin-specified headers for object-storage backends. #4028

Plugin API¶

Features¶

Added memoized system_id function to the plugin api. #4276

3.30.0 (2023-08-08)¶

REST API¶

Bugfixes¶

Resolved a memory leak that could occur while making large repeated queries against the API service. #2250
Made reclaim space task more tolerant in the face of artifact shared between two content units. #3610
Fixed a bug with the replicate API not handling Upstream Pulp API over HTTPS. #3910
Fixed duplicate OpenAPI operation ids when using domains. #3977
Updates file system exporter to correctly account the start_repository_version for pass_through publications #4051
Taught pulp-import to be able to use a subset of available worker-threads. #4068
Updated the downloader's fetch method to comply with Python 3.11. #4107
Taught repair task to be tolerant in the face of any artifact download failure. #4111
Fixed a 500 error for Upstream Pulp Replicate API when domains are enabled. #4119
Fixed the OpenAPI schema for the 'replicate' operation response. #4121
Fixed a bug where repositories were getting deleted accross domains. #4158
Taught the Artifact.json of an export to hold minimum-unique-set of Artifact entries.

In highly-duplicated-content export scenarios, this can mean a significant decrease in export-size, and significant improvement in import-performance. #4159
Fixed bug where the Task Group for replication would be marked as fully dispatched after just one replicator. #4175
Fixed a 500 server error when two concurrent requests try to create an object with the same unique fields. #4183
Fix a subtle export bug introduced from the optimizations in #4159. #4210
Fixed a bug where replication remotes did not have their URLs updated on subsequent runs. #4218
Fixed a bug where ca_cert was not getting set for replication remotes. #4219
Correctly fixed pulp_rpm-export-edgecase - fix #4210 was incomplete. #4231
Fixed bug where tls_validation, client_key, and client_cert were not getting set on replication remotes. #4247

Misc¶

#3923

Plugin API¶

Features¶

Adjusted the BaseDownloader.fetch() method to accept extra_data. #4229

3.29.8 (2023-08-08)¶

REST API¶

Bugfixes¶

Fixed bug where tls_validation, client_key, and client_cert were not getting set on replication remotes. #4247

Plugin API¶

No significant changes.

3.29.7 (2023-08-01)¶

REST API¶

Bugfixes¶

Fixed a bug where replication remotes did not have their URLs updated on subsequent runs. #4218
Fixed a bug where ca_cert was not getting set for replication remotes. #4219
Correctly fixed pulp_rpm-export-edgecase - fix #4210 was incomplete. #4231

Plugin API¶

No significant changes.

3.29.6 (2023-07-31)¶

REST API¶

Bugfixes¶

Fix a subtle export bug introduced from the optimizations in #4159. #4210

Plugin API¶

No significant changes.

3.29.5 (2023-07-29)¶

REST API¶

Bugfixes¶

Made reclaim space task more tolerant in the face of artifact shared between two content units. #3610
Fixed a bug with the replicate API not handling Upstream Pulp API over HTTPS. #3910
Updated the downloader's fetch method to comply with Python 3.11. #4107
Fixed a bug where repositories were getting deleted accross domains. #4158
Taught the Artifact.json of an export to hold minimum-unique-set of Artifact entries.

In highly-duplicated-content export scenarios, this can mean a significant decrease in export-size, and significant improvement in import-performance. #4159
Fixed bug where the Task Group for replication would be marked as fully dispatched after just one replicator. #4175

Misc¶

#3923

Plugin API¶

No significant changes.

3.29.4 (2023-07-25)¶

REST API¶

Bugfixes¶

Fixed a 500 error for Upstream Pulp Replicate API when domains are enabled. #4119
Fixed the OpenAPI schema for the 'replicate' operation response. #4121

Plugin API¶

No significant changes.

3.29.3 (2023-07-22)¶

REST API¶

Bugfixes¶

Resolved a memory leak that could occur while making large repeated queries against the API service. #2250
Taught repair task to be tolerant in the face of any artifact download failure. #4111

Plugin API¶

No significant changes.

3.29.2 (2023-07-19)¶

REST API¶

Bugfixes¶

Fixed duplicate OpenAPI operation ids when using domains. #3977
Updates file system exporter to correctly account the start_repository_version for pass_through publications #4051

Plugin API¶

No significant changes.

3.29.1 (2023-07-14)¶

REST API¶

Bugfixes¶

Pinned importlib-metadata to 6.0.1 given pip is unable to solve an opentelemetry dependency version correctly. #4042

Plugin API¶

No significant changes.

3.29.0 (2023-07-12)¶

REST API¶

Features¶

Added version information to tasks. Workers will refuse to pick up tasks with a version higher than their own. #3369
Added graceful shutdown to pulpcore-worker without killing the current task on receiving SIGHUP or SIGTERM. #3940
Added periodically executed cleanup tasks for uploads and temporary files. Configure a time interval in UPLOAD_PROTECTION_TIME or TMPFILE_PROTECTION_TIME to activate. #3949

Bugfixes¶

Made the incremental file export include all published metadata. #3941
Fixed error when downloading pull-through content that already exists in Pulp. #3945
Fixed circular imports caused by get_user_model calls. #3957
Fix api schema of the upstream_pulp_replicate operation requiring no body. #3995

Plugin API¶

Features¶

Added retrieve logic to MultipleArtifactContentSerializer. #3951

Bugfixes¶

Fixed the import path for pulpcore.plugin.pulp_hashlib. #4006

Misc¶

#3798

3.28.44 (2026-03-10)¶

REST API¶

Bugfixes¶

Moved artifact checksum validation from module-level settings code to a Django system check. #7380

Plugin API¶

No significant changes.

3.28.43 (2025-12-09)¶

REST API¶

No significant changes.

Plugin API¶

No significant changes.

3.28.42 (2025-12-04)¶

REST API¶

Bugfixes¶

pulp-worker fails to start with "float object cannot be interpreted as an integer" on some versions of python. #5861

Fixed bug which prevented the Pulp API usaging from a web browser #5250
pass envvars to Signing Scripts to access GNUPGHOME #5911

Fixed the JSONField specification so it doesn't break ruby bindings. See context here.

Plugin API¶

No significant changes.

## 3.28.32 (2024-08-10)¶

REST API¶

Bugfixes¶

Fixed RBAC permissions being incorrectly assigned in tasks that create objects. https://access.redhat.com/security/cve/cve-2024-7143 #5683

Plugin API¶

No significant changes.

REST API¶

Bugfixes¶

Fixed a warning that gets raised when cache is enabled: RuntimeWarning: coroutine 'AsyncCache.delete' was never awaited. #4967

Plugin API¶

No significant changes.

REST API¶

Features¶

Enabling the TASK_DIAGNOSTICS option now additionally creates a profile of all executed tasks if the pyinstrument package is installed. This incurs a small overhead on task runtime (5-10%). #4436

Bugfixes¶

Fixed sync not deleting temporary files when WORKING_DIRECTORY is not a sub-directory of MEDIA_ROOT or when using a non-filesystem storage backend. #1936
Made the incremental file export include all published metadata. #3941
Fixed the return value of get_users_with_perms_attached_roles to give proper role names. #4478

Plugin API¶

No significant changes.

3.28.15 (2023-09-20)¶

REST API¶

Bugfixes¶

Ensure non-chunked exports and chunked exports use the same compression level. #4411
Removed compression from exports (using gzip level 0). For most users of export functionality it seems to be a poor tradeoff. #4434

Plugin API¶

No significant changes.

3.28.14 (2023-09-12)¶

REST API¶

Bugfixes¶

Ensured that repository and remote delete is always executed in a task. This fixes a bug when the deletion blocks the gunicorn api worker for too long. #4372

Plugin API¶

No significant changes.

3.28.13 (2023-09-06)¶

REST API¶

Bugfixes¶

Fix the label migration 0104 to allow upgrading from before 3.25. #4319
Ensure the compression level is reliably set properly as per #3869. #4351
Fix encrypted fields to use json instead of repr/eval and make them fit for bulk_update. This solves an issue with pulpcore-manager rotate-db-key corrupting data. #4359

Plugin API¶

No significant changes.

3.28.12 (2023-08-22)¶

REST API¶

Bugfixes¶

Improved the performance when looking up content for repository versions. #3969
Taught pulp-import to be able to use a subset of available worker-threads. #4068
Fixed bug where incorrect error message presented in relation to content-import #4294

Plugin API¶

Features¶

Added memoized system_id function to the plugin api. #4276

3.28.11 (2023-08-15)¶

REST API¶

Bugfixes¶

Taught downloader to correctly handle plugin-specified headers for object-storage backends. #4028

Plugin API¶

No significant changes.

3.28.10 (2023-08-08)¶

REST API¶

Bugfixes¶

Fixed bug where tls_validation, client_key, and client_cert were not getting set on replication remotes. #4247

Plugin API¶

No significant changes.

REST API¶

Bugfixes¶

Made reclaim space task more tolerant in the face of artifact shared between two content units. #3610
Fixed a bug with the replicate API not handling Upstream Pulp API over HTTPS. #3910
Updated the downloader's fetch method to comply with Python 3.11. #4107
Fixed a bug where repositories were getting deleted accross domains. #4158
Taught the Artifact.json of an export to hold minimum-unique-set of Artifact entries.

In highly-duplicated-content export scenarios, this can mean a significant decrease in export-size, and significant improvement in import-performance. #4159
Fixed bug where the Task Group for replication would be marked as fully dispatched after just one replicator. #4175

Misc¶

#3923

Plugin API¶

No significant changes.

3.28.5 (2023-07-25)¶

REST API¶

Bugfixes¶

Resolved a memory leak that could occur while making large repeated queries against the API service. #2250
Fixed a 500 error for Upstream Pulp Replicate API when domains are enabled. #4119
Fixed the OpenAPI schema for the 'replicate' operation response. #4121

Plugin API¶

No significant changes.

3.28.4 (2023-07-19)¶

REST API¶

Bugfixes¶

Fixed duplicate OpenAPI operation ids when using domains. #3977
Updates file system exporter to correctly account the start_repository_version for pass_through publications #4051

Plugin API¶

Bugfixes¶

Fixed the import path for pulpcore.plugin.pulp_hashlib. #4006

3.28.3 (2023-07-14)¶

REST API¶

Bugfixes¶

Pinned importlib-metadata to 6.0.1 given pip is unable to solve an opentelemetry dependency version correctly. #4042

Plugin API¶

No significant changes.

3.28.2 (2023-07-12)¶

REST API¶

Bugfixes¶

Fix api schema of the upstream_pulp_replicate operation requiring no body. #3995

Plugin API¶

No significant changes.

3.28.1 (2023-06-27)¶

REST API¶

Bugfixes¶

Fixed error when downloading pull-through content that already exists in Pulp. #3945
Fixed circular imports caused by get_user_model calls. #3957

Plugin API¶

No significant changes.

3.28.0 (2023-06-14)¶

REST API¶

Bugfixes¶

Taught PulpImport to be more robust in the face of previous failed attempts. #3737
Exports now use gzip compression level 1 rather than compression level 9. Exported archives will now be slightly larger, but exports should be much faster. This is considered to be a more optimal balance of space/time for the export operation. #3869
Fixed the method for displaying the representation of MasterModel objects. #3898

Improved Documentation¶

Removes leftover documentation referring to the deprecated Ansible based installer. #3834

Plugin API¶

Features¶

Added support to pull-through caching for streaming metadata files.

Remote.get_remote_artifact_content_type can now return None to inform the content app that the requested path is a metadata file that should be streamed and not saved for the pull-through caching feature. #3817
Added support to pull-through caching for plugins with multi-artifact content types.

Content.init_from_artifact_and_relative_path can now return a tuple of the new content unit and a dict containing the mapping of that content's artifacts and their relative paths. #3818
Added Distribution.content_headers_for() to let plugins affect content-app response headers.

This can be useful, for example, when it's desirable for specific files to be served with Cache-control: no-cache. #3897

3.27.2 (2023-07-14)¶

REST API¶

Bugfixes¶

Fixed circular imports caused by get_user_model calls. #3957
Pinned importlib-metadata to 6.0.1 given pip is unable to solve an opentelemetry dependency version correctly. #4042

Plugin API¶

No significant changes.

3.27.1 (2023-06-05)¶

REST API¶

Bugfixes¶

Taught PulpImport to be more robust in the face of previous failed attempts. #3737
Fixed the method for displaying the representation of MasterModel objects. #3898

Plugin API¶

No significant changes.

3.27.0 (2023-05-31)¶

REST API¶

Features¶

Expose user who dispatched a Task under new field created_by. #1917
Added hidden field to Distributions that toggles visibility in Content app directory listing. #3538

Bugfixes¶

Taught repair task to remove unrepairable corrupted files. #1947
Taught repair task to continue when encountering a 404 during the repair process. #3611
Serialized global reclaim space, global repair artifacts tasks with respect to each other to prevent them from failing. #3786

Improved Documentation¶

Release-process documentation is now more explicit about which branches are tested by CI. #3841
Added the instructions needed to enable OpenTelemetry on pulp-api application. #3867

Misc¶

#3873

Plugin API¶

Features¶

Added async version of cast as acast. #3873

Bugfixes¶

Fixed potential unnecessary database calls executed after matching distributions in the content application. #3876

3.26.2 (2023-07-14)¶

REST API¶

Bugfixes¶

Taught PulpImport to be more robust in the face of previous failed attempts. #3737
Pinned importlib-metadata to 6.0.1 given pip is unable to solve an opentelemetry dependency version correctly. #4042

Plugin API¶

No significant changes.

3.26.1 (2023-05-25)¶

REST API¶

No significant changes.

Plugin API¶

Bugfixes¶

Fixed potential unnecessary database calls executed after matching distributions in the content application. #3876

3.26.0 (2023-05-16)¶

REST API¶

Features¶

Added a pre-delete hook to domains in order to stop orphaned content preventing the deletion. #3800
Enabled OpenTelemetry metrics and tracing for the pulp-api app. #3835

Improved Documentation¶

Updated examples and fixed some typos in Domains workflow doc. #3825

Plugin API¶

No significant changes.

3.25.1 (2023-05-25)¶

REST API¶

No significant changes.

Plugin API¶

Bugfixes¶

Fixed potential unnecessary database calls executed after matching distributions in the content application. #3876

3.25.0 (2023-05-10)¶

REST API¶

Features¶

Added filters with_content and latest_with_content to Repository list endpoint. #2865
Updated Django version to 4.2 LTS branch. #3660

Bugfixes¶

Fixed representation of domains in created_resources on task list and show. #3783
Deferred artifact file deletion to after committing the database transaction. #3807

Misc¶

#2993

Plugin API¶

Features¶

Created a wrapper type for UUID generation so that the implementation can potentially be switched in the future. UUIDs are just 128-bit integers - as long as they don't overlap there is no explicit need to stick with any particular implementation. Plugin writers may notice a migration created due to this change depending on how they have written the plugin. #3117
Bumped the database backend from psycopg2 to psycopg3. #3792

Removals¶

Removed NamedModelViewSet.extract_pk in favor of pulpcore.plugin.util.extract_pk and raise_for_unknown_content_units from pulpcore.plugin.actions, which moved to pulpcore.plugin.util. #3613
Removed the deprecated verify_signature. Use gpg_verify instead. #3614
Removed LabelsField, Label, and LabelSelectFilter. #3615
Updated Django version to 4.2 LTS branch. This may introduce some breaking changes to plugins. #3660

3.24.1 (2023-05-03)¶

REST API¶

Bugfixes¶

Fixed representation of domains in created_resources on task list and show. #3783

Plugin API¶

No significant changes.

3.24.0 (2023-05-02)¶

REST API¶

Features¶

Added commands and documentation for db encryption key rotation. #2048
Added ability to filter resources by list of HREFs or IDs with pulp_href__in and pulp_id__in. #2975
Added ability to sort by type on generic list endpoints with pulp_type__in. #3408
Added file size to the content app listing. #3656
Changed most of the update and delete tasks to allow for immediate execution if not contested by other running tasks. #3661

Bugfixes¶

Fixed some deprecations in preparation to 3.25 being a breaking change release. #3023
Task purge now continues when encountering a task that could not be deleted. The user is informed about any such tasks. #3530
Fixed package timestamp on content app to reflect time package was added to the repository. #3653
Fixed import/export in the presence of the domains work. #3663
Fixed a regular expression used when listing directories. #3673
Optimized queries needed when listing Tasks. #3711
Optimized DB queries for content, distribution, publication, remote, repository, and repository-version list endpoints. #3714
Downloader will now attempt to keep the filename of the requested URL intact if one exists. #3715
Fixed returned error codes for unauthenticated users. Pulp now returns HTTP 401 errors instead of HTTP 403 errors which were default return types for SessionAuthentication. #3730
Fixed issue with deleting export tasks via purge. #3741
Closed the window for a race condition in content creation. #3754

Improved Documentation¶

Updated contributor docs to point to the oci-env for the developer environment. #3444
Fixed infinite loading when searching for specific terms. #3667

Misc¶

#3247

Plugin API¶

Features¶

Added flags immediate and deferred to dispatch to allow specifying whether a task can be attempted to run synchronously and whether it can be deferred. #3661

REST API¶

Bugfixes¶

Made reclaim space task more tolerant in the face of artifact shared between two content units. #3610
Fixed a bug with the replicate API not handling Upstream Pulp API over HTTPS. #3910
Taught pulp-import to be able to use a subset of available worker-threads. #4068
Updated the downloader's fetch method to comply with Python 3.11. #4107
Fixed a bug where repositories were getting deleted accross domains. #4158
Taught the Artifact.json of an export to hold minimum-unique-set of Artifact entries.

In highly-duplicated-content export scenarios, this can mean a significant decrease in export-size, and significant improvement in import-performance. #4159
Fixed bug where the Task Group for replication would be marked as fully dispatched after just one replicator. #4175

Misc¶

#3923

Plugin API¶

No significant changes.

3.23.11 (2023-07-25)¶

REST API¶

Bugfixes¶

Fixed a 500 error for Upstream Pulp Replicate API when domains are enabled. #4119
Fixed the OpenAPI schema for the 'replicate' operation response. #4121

Plugin API¶

No significant changes.

3.23.10 (2023-07-22)¶

REST API¶

Bugfixes¶

Resolved a memory leak that could occur while making large repeated queries against the API service. #2250
Taught repair task to be tolerant in the face of any artifact download failure. #4111

Plugin API¶

No significant changes.

3.23.9 (2023-07-19)¶

REST API¶

Bugfixes¶

Fixed duplicate OpenAPI operation ids when using domains. #3977

Plugin API¶

No significant changes.

3.23.8 (2023-07-12)¶

REST API¶

Bugfixes¶

Fix api schema of the upstream_pulp_replicate operation requiring no body. #3995

Plugin API¶

No significant changes.

3.23.7 (2023-06-14)¶

REST API¶

Bugfixes¶

Exports now use gzip compression level 1 rather than compression level 9. Exported archives will now be slightly larger, but exports should be much faster. This is considered to be a more optimal balance of space/time for the export operation. #3869

Plugin API¶

No significant changes.

3.23.6 (2023-05-30)¶

REST API¶

Bugfixes¶

Taught repair task to remove unrepairable corrupted files. #1947
Taught repair task to continue when encountering a 404 during the repair process. #3611

Plugin API¶

No significant changes.

3.23.5 (2023-05-23)¶

REST API¶

Bugfixes¶

Serialized global reclaim space, global repair artifacts tasks with respect to each other to prevent them from failing. #3786

Plugin API¶

No significant changes.

3.23.4 (2023-05-10)¶

REST API¶

Bugfixes¶

Task purge now continues when encountering a task that could not be deleted. The user is informed about any such tasks. #3530
Closed the window for a race condition in content creation. #3754

Plugin API¶

No significant changes.

REST API¶

Features¶

Added a repository exact and in filters to the Distributions API. #3394
Added a new optional multi-tenancy namespacing feature: Domains. See workflow documentation for more information on this tech-preview feature. #3403
Add GCP support #3424
Added retain_repo_versions filter to Repository endpoint. #3507
Pass correlation id to signing script through ENV variable #3522
Added ability to replicate distributions/repositories from another Pulp. #3566
Started to collect statistics about RBAC (amd domain) usage. #3639

Bugfixes¶

Bump dynaconf version to 3.1.12 given it fixes a bug to handle failures when pwd does not exist. #3310
Added validation to the repository modify endpoint. #3326
Addressed a possible N+1 query performance issue within reclaim_space task. #3404
Added repeating logic to signalling a task worker subprocess. This should fix a bug where the task refuses to be terminated easily. #3407
Added a start_repository_version parameter to the file system exporter.

If specified, it will export only content units that differed between two repository versions. #3413
Fixed the label migration code for not null constraint errors when objects with and without labels are migrated. #3495
Added int64 format to integer fields in api schema. #3590
Fixed a bug that caused Pulp to return duplicate content when a user was logged in as a non-superuser while the content was part of multiple repositories. #3641
Added missing validation to the repair endpoint. #3645
Fixed bug related to pulpcore-content serving content from a remote (pull-through-cache). #3654

Improved Documentation¶

Revisited features in tech preview (e.g., ACS, RBAC, metadata signing, import/export) and marked them production ready. #3429
Documented PostgreSQL version compatibility and incompatibility with transaction based connection pooling. #3505
Updated the release-process doc to be more complete. #3514
Added links to the Containerfiles used for building the pulp and pulp-minimal OCI images. #3627

Removals¶

Removed the PROFILE_STAGES_API setting along with the dependent code. #3595

Misc¶

#3446, #3541, #3569, #3574, #3584, #3638

Plugin API¶

Features¶

Refactored ArtifactDownloader stage logic into base class GenericDownloader and allow for the progress reports message and code to be customized by subclasses. #1931
Added version information to the worker records in the database. #3365
Added new config option domain_compatible to PluginAppConfig to specify Domains feature compatibility within a plugin. See Domains compatibility documentation in plugin-writer section for more information. #3403
Exported TaskSerializer in pulpcore.plugin.serializers #3506
Added Replicator class that plugins can implement to enable distribution/repository replication. #3566
Exposed a function for extracting PKs from URIs and a function for validating content units (pulpcore.plugin.util.extract_pk, pulpcore.plugin.util.raise_for_unknown_content_units). #3604
Add label_field_name arg to LabelFilter() filter that allows plugin devs to customize the model field that LabelFilter filters on. #3631

Bugfixes¶

Added HiddenFieldsMixin to the plugin API. #3520
Exported LabelFilter to the plugin api as a replacement for the deprecated LabelSelectFilter. #3570

Improved Documentation¶

Adds docs that plugin writers tasks must be backwards compatible until the next major Pulp version. #3368
Adds docs on the need and possible options for writing migrations in a way that they could be applied to a running Pulp system. #3443

Deprecations¶

Deprecated NamedModelViewSet.extract_pk in favour of pulpcore.plugin.util.extract_pk. Deprecated pulpcore.plugin.actions.raise_for_unknown_content_units in favour of pulpcore.plugin.util.raise_for_unknown_content_units. #3604

3.22.35 (2025-01-08)¶

REST API¶

No significant changes.

Plugin API¶

No significant changes.

3.22.34 (2024-11-26)¶

REST API¶

No significant changes.

Plugin API¶

No significant changes.

REST API¶

Misc¶

#5462

Plugin API¶

No significant changes.

Warning

Until Role-Based Access Control is added to Pulp, REST API is not safe for multi-user use. Sensitive credentials can be read by any user, e.g. Remote.password, Remote.client_key.

3.22.26 (2024-05-14)¶

REST API¶

Bugfixes¶

Stopped deleting content and artifacts presumably created by later failed or canceled tasks. Deleting these lies solely in the responsibility of orphan cleanup. #5363

Plugin API¶

No significant changes.

3.22.25 (2024-04-17)¶

REST API¶

No significant changes.

Plugin API¶

No significant changes.

3.22.24 (2024-03-26)¶

REST API¶

Misc¶

#3574

Plugin API¶

No significant changes.

3.22.23 (2024-03-26)¶

REST API¶

No significant changes.

Plugin API¶

No significant changes.

3.22.22 (2024-01-30)¶

REST API¶

Bugfixes¶

Fixed a warning that gets raised when cache is enabled: RuntimeWarning: coroutine 'AsyncCache.delete' was never awaited. #4967

Plugin API¶

No significant changes.

REST API¶

Bugfixes¶

Fixed sync not deleting temporary files when WORKING_DIRECTORY is not a sub-directory of MEDIA_ROOT or when using a non-filesystem storage backend. #1936

Misc¶

#4436

Plugin API¶

No significant changes.

3.22.15 (2023-09-20)¶

REST API¶

Bugfixes¶

Ensure non-chunked exports and chunked exports use the same compression level. #4411
Removed compression from exports (using gzip level 0). For most users of export functionality it seems to be a poor tradeoff. #4434

Plugin API¶

No significant changes.

3.22.14 (2023-09-06)¶

REST API¶

Bugfixes¶

Ensure the compression level is reliably set properly as per #3869. #4351

Plugin API¶

No significant changes.

3.22.13 (2023-08-23)¶

REST API¶

Bugfixes¶

Improved the performance when looking up content for repository versions. #3969
Fixed bug where incorrect error message presented in relation to content-import #4294

Plugin API¶

No significant changes.

3.22.12 (2023-08-01)¶

REST API¶

Bugfixes¶

Correctly fixed pulp_rpm-export-edgecase - fix #4210 was incomplete. #4231

Plugin API¶

No significant changes.

3.22.11 (2023-07-31)¶

REST API¶

Bugfixes¶

Fix a subtle export bug introduced from the optimizations in #4159. #4210

Plugin API¶

No significant changes.

3.22.10 (2023-07-29)¶

REST API¶

Bugfixes¶

Made reclaim space task more tolerant in the face of artifact shared between two content units. #3610
Taught pulp-import to be able to use a subset of available worker-threads. #4068
Updated the downloader's fetch method to comply with Python 3.11. #4107
Taught the Artifact.json of an export to hold minimum-unique-set of Artifact entries.

In highly-duplicated-content export scenarios, this can mean a significant decrease in export-size, and significant improvement in import-performance. #4159

Plugin API¶

No significant changes.

3.22.9 (2023-07-22)¶

REST API¶

Bugfixes¶

Resolved a memory leak that could occur while making large repeated queries against the API service. #2250
Added repeating logic to signalling a task worker subprocess. This should fix a bug where the task refuses to be terminated easily. #3407
Taught repair task to be tolerant in the face of any artifact download failure. #4111

Plugin API¶

No significant changes.

3.22.8 (2023-07-19)¶

REST API¶

Bugfixes¶

Made the incremental file export include all published metadata. #3941
Updates file system exporter to correctly account the start_repository_version for pass_through publications #4051

Plugin API¶

No significant changes.

3.22.7 (2023-06-14)¶

REST API¶

Bugfixes¶

Exports now use gzip compression level 1 rather than compression level 9. Exported archives will now be slightly larger, but exports should be much faster. This is considered to be a more optimal balance of space/time for the export operation. #3869

Plugin API¶

No significant changes.

3.22.6 (2023-06-07)¶

REST API¶

Bugfixes¶

Taught PulpImport to be more robust in the face of previous failed attempts. #3737

Plugin API¶

No significant changes.

3.22.5 (2023-05-30)¶

REST API¶

Bugfixes¶

Taught repair task to remove unrepairable corrupted files. #1947
Taught repair task to continue when encountering a 404 during the repair process. #3611

Plugin API¶

No significant changes.

3.22.4 (2023-04-11)¶

REST API¶

Bugfixes¶

Fixed package timestamp on content app to reflect time package was added to the repository. #3653
Downloader will now attempt to keep the filename of the requested URL intact if one exists. #3715

Plugin API¶

No significant changes.

REST API¶

Features¶

Added dates to the HTML pages listing the content of distributions. The timestamp is of when the content was created in Pulp. #2054
Create HiddenFieldsMixin serializer and add hidden_fields to RemoteSerializer and UserSerializer. #2825
Added pulpcore-manager command called remove-signing-service for removing specified signing services. #2967
Added the option HIDE_GUARDED_DISTRIBUTIONS to allow hiding the content guard protected distributions from the listing page. #3061
Added "content_settings" stanza to the /status/ output. #3138
Added expiry to preauthenticated URLs from ContentRedirectingContentGuard. #3238
Added reserved_resources, reserved_resources__in, exclusive_resources, exclusive_resources__in, shared_resources and shared_resources__in filter to task list endpoint. #3280
The postgresql version is now included in analytics data posted. The payload looks like: {'postgresqlVersion': 90200}. The integer value is the raw format postgresql reports its version as. #3396
The new ANALYTICS setting replaced the TELEMETRY setting to avoid confusion with application metrics that will be exposed using OpenTelemetry. #3417

Bugfixes¶

Fixed the fs exporter to handle the case where there are pre-existing files in the location that FileSystem attempts to export to you get a FileExistsError. #1949
The logging_cid field of a task can no longer be an empty string. #3016
Fixed content-disposition header which is used in the object storage backends. #3124
Fixed the fs exporter to handle the case where hardlink method was requested but pulp and export locations are in different partitions so can't share the same inode. #3187
Another guardrail added around content-stages to address deadlock in a specific usecase. #3192
Fixed bug where installations with at least one pre-release plugin installed were posting to the production analytics site instead of the developer analytics site. #3213
Fixed the worker__in filter for Tasks API. #3235
Do not expose artifact digest via content-disposition header when using Azure backend. #3244
Fixed a bug that disallowed non-admin users to purge completed tasks. #3263
Made ordering consistent between all list API endpoints. #3266
Another step on closing the deadlock-window when syncing overlapping content. #3284
Fixed an occasional 500 error when viewing a repository version content summary while performing a content deletion task. #3299
Fixed an error when raising UnexportableArtifactException. #3313
Hardened the state transition for tasks and ensured a canceled task will have finished_at set. #3319
Made sure PulpImport's use of tar.extractall() is safe. #3323
Fixed content disposition header value when content is stored in Azure. #3342
Fixes schema generation to use proper type uri for HyperlinkRelatedFilter. #3351
Insured that pulp-export correctly locks repos-being-exported. #3370
Fixed the update of default access policies when fields are missing. #3391
Fixed the openapi spec of "fields" and "exclude_fields" querystring parameters. #3398
Fixed label querying performance issues. In case some labels could not be migrated properly, a datarepair-labels command was added. #3400
Fix migrating Remotes with @ in path #3409
Fixed the broken link on the root page served by pulpcore-content. #3436

Improved Documentation¶

Improvements clarifying how to specify settings and which settings are required. #2417
Documented Pulpcore and Plugin release processes. #3204
Separated the user plugin listing from the plugin developer docs more clearly. #3260
Remove the ansible collection from the recommendation #3430

Deprecations¶

TELEMETRY setting was deprecated in favor of ANALYTICS. #3417 <https://github.com/pulp/pulpcore/issues/3417>`__

Misc¶

#3232, #3333, #3334, #3461

Plugin API¶

Features¶

Added get_artifact_url to emit preauthed urls to existing artifacts. #2785
The upload feature was changed to accept already existing content. This allows multiple users to own identical content when working with plugins that implement the 'retrieve' method inside their ContentUpload serializers. #3081
Exposed ArtifactResponse at pulpcore.plugin.responses. #3340
Exposed the get_url util function. #3468

Bugfixes¶

Added BaseFilterSet to NamedModelViewSet to allow ordering on all list endpoints even without specifying a custom filterset class. #3266

Improved Documentation¶

Added documentation for plugin writers on declaring dependencies. #2997

Removals¶

Deprecated model Label and serializer field LabelField and LabelSelectFilter for removal in 3.25. #3400

REST API¶

Misc¶

#5462

Plugin API¶

No significant changes.

Warning

Until Role-Based Access Control is added to Pulp, REST API is not safe for multi-user use. Sensitive credentials can be read by any user, e.g. Remote.password, Remote.client_key.

3.21.29 (2024-05-14)¶

REST API¶

Bugfixes¶

Stopped deleting content and artifacts presumably created by later failed or canceled tasks. Deleting these lies solely in the responsibility of orphan cleanup. #5363

Plugin API¶

No significant changes.

3.21.28 (2024-03-26)¶

REST API¶

Misc¶

#3574

Plugin API¶

No significant changes.

3.21.27 (2024-03-26)¶

REST API¶

No significant changes.

Plugin API¶

No significant changes.

3.21.26 (2024-01-30)¶

REST API¶

Bugfixes¶

Fixed a warning that gets raised when cache is enabled: RuntimeWarning: coroutine 'AsyncCache.delete' was never awaited. #4967

Plugin API¶

No significant changes.

REST API¶

Bugfixes¶

Fixed sync not deleting temporary files when WORKING_DIRECTORY is not a sub-directory of MEDIA_ROOT or when using a non-filesystem storage backend. #1936

Misc¶

#4436

Plugin API¶

No significant changes.

3.21.18 (2023-09-25)¶

REST API¶

Bugfixes¶

Ensure non-chunked exports and chunked exports use the same compression level. #4411
Removed compression from exports (using gzip level 0). For most users of export functionality it seems to be a poor tradeoff. #4434

Plugin API¶

No significant changes.

3.21.17 (2023-09-06)¶

REST API¶

Bugfixes¶

Ensure the compression level is reliably set properly as per #3869. #4351

Plugin API¶

No significant changes.

3.21.16 (2023-08-23)¶

REST API¶

Bugfixes¶

Added repeating logic to signalling a task worker subprocess. This should fix a bug where the task refuses to be terminated easily. #3407
Improved the performance when looking up content for repository versions. #3969
Fixed bug where incorrect error message presented in relation to content-import #4294

Plugin API¶

No significant changes.

3.21.15 (2023-08-01)¶

REST API¶

Bugfixes¶

Correctly fixed pulp_rpm-export-edgecase - fix #4210 was incomplete. #4231

Plugin API¶

No significant changes.

3.21.14 (2023-07-31)¶

REST API¶

Bugfixes¶

Fix a subtle export bug introduced from the optimizations in #4159. #4210

Plugin API¶

No significant changes.

3.21.13 (2023-07-29)¶

REST API¶

Bugfixes¶

Made reclaim space task more tolerant in the face of artifact shared between two content units. #3610
Taught pulp-import to be able to use a subset of available worker-threads. #4068
Updated the downloader's fetch method to comply with Python 3.11. #4107
Taught the Artifact.json of an export to hold minimum-unique-set of Artifact entries.

In highly-duplicated-content export scenarios, this can mean a significant decrease in export-size, and significant improvement in import-performance. #4159

Plugin API¶

No significant changes.

3.21.12 (2023-07-22)¶

REST API¶

Bugfixes¶

Resolved a memory leak that could occur while making large repeated queries against the API service. #2250
Taught repair task to be tolerant in the face of any artifact download failure. #4111

Plugin API¶

No significant changes.

3.21.11 (2023-07-19)¶

REST API¶

Bugfixes¶

Made the incremental file export include all published metadata. #3941
Updates file system exporter to correctly account the start_repository_version for pass_through publications #4051

Plugin API¶

No significant changes.

3.21.10 (2023-06-14)¶

REST API¶

Bugfixes¶

Exports now use gzip compression level 1 rather than compression level 9. Exported archives will now be slightly larger, but exports should be much faster. This is considered to be a more optimal balance of space/time for the export operation. #3869

Plugin API¶

No significant changes.

3.21.9 (2023-06-06)¶

REST API¶

Bugfixes¶

Taught PulpImport to be more robust in the face of previous failed attempts. #3737

Plugin API¶

No significant changes.

3.21.8 (2023-05-30)¶

REST API¶

Bugfixes¶

Taught repair task to remove unrepairable corrupted files. #1947
Taught repair task to continue when encountering a 404 during the repair process. #3611

Plugin API¶

No significant changes.

3.21.7 (2023-04-11)¶

REST API¶

Bugfixes¶

Downloader will now attempt to keep the filename of the requested URL intact if one exists. #3715

Plugin API¶

No significant changes.

3.21.6 (2023-03-29)¶

REST API¶

Bugfixes¶

Fixed an error when raising UnexportableArtifactException. #3313
Fixed the openapi spec of "fields" and "exclude_fields" querystring parameters. #3398

Plugin API¶

No significant changes.

3.21.5 (2023-02-02)¶

REST API¶

Bugfixes¶

Added a start_repository_version parameter to the file system exporter.

If specified, it will export only content units that differed between two repository versions. #3413

Plugin API¶

No significant changes.

3.21.4 (2023-01-20)¶

REST API¶

Bugfixes¶

Fixed an occasional 500 error when viewing a repository version content summary while performing a content deletion task. #3299
Fix migrating Remotes with @ in path #3409

Plugin API¶

No significant changes.

3.21.3 (2022-11-15)¶

REST API¶

Bugfixes¶

Adjust the dependency on cryptography to suite more versions of pulp-certguard. #3269
Insured that pulp-export correctly locks repos-being-exported. #3370
Fixed the update of default access policies when fields are missing. #3391

Plugin API¶

No significant changes.

3.21.2 (2022-10-24)¶

REST API¶

Bugfixes¶

Another step on closing the deadlock-window when syncing overlapping content. #3284
Fixed content disposition header value when content is stored in Azure. #3342

Plugin API¶

No significant changes.

3.21.1 (2022-10-18)¶

REST API¶

Bugfixes¶

Fixed the fs exporter to handle the case where there are pre-existing files in the location that FileSystem attempts to export to you get a FileExistsError. #1949
Fixed content-disposition header which is used in the object storage backends. #3124
Fixed the fs exporter to handle the case where hardlink method was requested but pulp and export locations are in different partitions so can't share the same inode. #3187
Another guardrail added around content-stages to address deadlock in a specific usecase. #3192
Fixed bug where installations with at least one pre-release plugin installed were posting to the production telemetry site instead of the developer telemetry site. #3213
Do not expose artifact digest via content-disposition header when using Azure backend. #3244

Plugin API¶

No significant changes.

3.21.0 (2022-09-08)¶

REST API¶

Features¶

Added an option for automatically creating repositories on the fly during an import procedure. The option is disabled by default. Enable it by setting the field create_repositories to True via the REST API. #1920
Content app now groups distributions in a directory structure on the landing page. #1951
Added RBAC protection to upload objects. #2362
New endpoint to list all Remote objects is now available at /pulp/api/v3/remotes/. #2530
HyperlinkRelatedFilter can now be filtered by object types and NULL values.

Repositories can now be filtered by Remotes. #2864
Introduced the with_content query parameter that filters distributions by the specified content unit. #2952
Add a debug log to see where is file downloaded from. #3088
Introduces anonymous telemetry data posting to https://analytics.pulpproject.org/. This is enabled by default, and can be disabled by setting the TELEMETRY setting to False. See the telemetry docs for more info on exactly what is posted along with an example. #3115

Bugfixes¶

Fixed the value of the Content-Type header returned for .xml.gz files. #2811
Improve content app performance on head requests #2924
Use published relative paths for FS Exporter. #2933
Configured aiohttp to avoid rewriting redirect URLs, as some web servers (e.g. Amazon CloudFront) can be tempermental about the encoding of the URL. #2964
Fixed inaccurate 404 error message for content app. #2977
Fixed variable referenced before assignment error in django-admin dump-permissions. #3011
Do not create telemetry TaskSchedule for production systems. #3015
Serialized orphan cleanup tasks with respect to each other to prevent them from failing. #3030
Fixed 500 error when 'range' header starts with a negative value for 'on-demand' content. #3052
Fixed bug where 'range' header with a start value greater than size of on-demand content would produce an incomplete response. #3054
Fixed a bug where Content-Length header value was wrong when on-demand content was requested with a Range header that has an end value greater than the size of the content. #3055
Fixed a bug in the routing logic, where generic base class viewsets were served on actual urls. #3056
Fixed a bug in import code where all objects imported would also be added to the target repository by their UUID. In case of a UUID-collision with content, unwanted content may have ended up being in the next repository version. #3064
Fixed a bug that caused the import machinery to import the same content multiple times in a row. #3075
Limited access policy reset to viewsets with a default one. This will solve 500 errors when trying to reset an access policy whose viewset name is repeated by an abstract base class. Stopped reporting on unmodified access policies when migrating. #3080
Fixed another rare deadlock for high-concurrency/overlapping-content syncs. #3111
Fixed the progress report counter for imported content units. #3113
Moved telemetry setup to the pulpcore-worker startup sequence. This will prevent orm calls before all apps are ready. #3122

Improved Documentation¶

docs: Update the architecture diagram to reflect the fact that both API and workers talk to redis. #3000
Multiple updates to the PyPI (manual) install instructions. #3051

Misc¶

#2445, #2890, #3063, #3091

Plugin API¶

Features¶

Exposed the RepositoryResource class to enable plugin writers to customize the way of importing/exporting of particular repository types. Repositories should be now a part of exported resources to enable automatic creation of missing repositories. #1920
Added a global access condition has_upload_param_model_or_obj_perms to enforce permissions on the upload parameter. #2362
Extended the interface of verify_signature as a new function gpg_verify to support file like objects in addition to a file path and also return the python-gnupg verify object. #2930
Added new field info to the RepositoryVersion. This will allow to store additional information for a specific version. #2998
Added pulpcore.plugin.models.EncryptedTextField to plugin api. #3157 <https://github.com/pulp/pulpcore/issues/3157>`__

Improved Documentation¶

Adds Master/Detail pattern overview and usage documentation to the Plugin writer docs. #2981
Documented the use of RolesMixin in the plugin writer concepts section. #3085

Deprecations¶

Deprecated verify_signature in favor of gpg_verify for removal in 3.25. #2930

3.20.0 (2022-06-21)¶

REST API¶

Features¶

Added a repository filter to publications. #1912
The status API endpoint now shows the python package name that provides a given plugin. #1982
Queryset scoping can be customized by the user using the new field queryset_scoping on a ViewSet's AccessPolicy. #2114
Enabled administrators to work with a customized GnuPG home directory and keyring during the creation of a signing service. The introduced optional arguments --gnupghome and --keyring are available under the pulpcore-manager add-signing-service command. #2476
Added the setting REDIRECT_TO_OBJECT_STORAGE to allow using cloud storage with or without redirecting urls.

Added support for sftp storage via the pulpcore.app.models.storage.PulpSFTPStorage class. #2537
Added more details to an error message that is shown when none of the allowed content checksums hashers could be used. #2550
Add contains_permission query parameter to the roles API that allows clients to get back a list of roles that have any permission in a list of permissions. #2715
Master Content endpoint, /pulp/api/v3/content/, has a new access policy that allows any authenticated user to view content. The endpoint now scopes the content based on repositories the user can see. #2724
New AccessPolicies have been added to ContentGuard, Distribution, Publication, Repository, and RepositoryVersions master ViewSets. Queryset scoping has been enabled for each ViewSet. #2725
New AccessPolicy for ContentRedirectContentGuard ViewSet has been added. #2726
Added dump-permissions management command to list deprecated permissions not yet translated into roles. This is the only way to get to this information after the 3.20 release. #2741
Add ?for_object_type query parameter to Roles API that accepts an object HREF and returns a list of roles that only contain permissions for the given object type. #2747
Add role description and permissions to group and user role serializer. #2765

Bugfixes¶

Leading and trailing whitespace characters are no longer trimmed in passwords within remotes. #2068
Fixed generation of the redirect url to the object storage #2075
Taught PulpImport to stream imports rather than reading files into memory in one chunk.

This largely alleviates the memory-pressure that results from importing multiple large repositories in parallel. #2307
Made the API root endpoint accessible for anonymous users once again. #2340
Removed il8n from the logs written so they will always show up in English for speedy resolution of error messages. All user facing strings are still expected to be il8n. #2477
Replaced "//" with "/" in base_url when CONTENT_PATH_PREFIX is "" or "/". #2553
Fixed does_batch method in sync pipeline to allow waiting on content that is already resolved. #2557
Fixed OOM error after uploading large chunked files. #2573
Ensure downloader resets file on retry. #2576
Taught PulpImport to retry more than once in the event of creation-collisions.

This fixes a rare import-failure during high-concurrency, high-content-overlap imports. #2589
Improved the error message when HTTP proxies reject requests from Pulp. #2654
Fix ?ordering=role on user and group role apis so that it sorts results by role name. #2703
Add options to the role_util functions to make them work the same as guardian did. #2739
Fixed a bug that disallowed administrators to create a signing service via the pulpcore-manager utility. #2798
Reduced duplicate SQL queries for AccessPolicy when accessing any view. #2802
Fixed docs regarding the default for orphan protection time. #2810
Started showing errors when users try to export remote artifacts. #2817
Restore multiple-retry logic for PulpImport. #2854

Improved Documentation¶

Cleared out some of the paragraphs from the "Pull Request Walkthrough" section. #1852
Added a troubleshooting section that includes information on how to enable DEBUG logging. #1944
Removed some out of date references to Redmine (the previous issue tracker). We use Github Issues now. #2642
Added a note about explicitly setting content_object to null when assigning model-level permissions. #2758
Fixed extlinks use in docs to be Sphinx==5.0.0 compatible. #2782
Update installation instructions about "User and database configuration" for the Database setup to point to a matching Django documentation. #2877

Deprecations¶

Deprecated creation hook interface was removed. Creation hook need to be registered with the view set by the plugin writer before being used. Creation hooks can no longer be added with the deprecated name permission_assignments. #2559

Removals¶

Removed the group permission endpoints api/v3/groups/:id/model_permissions/ and api/v3/groups/:id/object_permissions/. Permissions should be managed via roles exclusively. #2050
Removed django-guardian from the stack. The guardian.backends.ObjectPermissionBackend should not be used anymore. #2051

Misc¶

#2070, #2244, #2605, #2643

Plugin API¶

Features¶

Plugins are required to provide the python_package_name as a string attribute on their subclass of PulpPluginAppConfig. #1982
Exposed the method raise_for_unknown_content_units which raises ValidationError for content units that were not found in the database. #2052
Plugins now have to enable default queryset scoping by setting the queryset_scoping field on the AccessPolicy to {"function": "scope_queryset"}.

Default queryset scoping behavior can be changed by supplying a new scope_queryset method.

Extra queryset scoping functions can be declared on plugin ViewSets and used by setting the AccessPolicy's queryset_scoping field. #2114
DeclarativeArtifact now accepts a urls option which permits multiple URLs to be provided for a single artifact. If multiple URLs are provided, the download stage will try each of them in turn upon encountering failures. #2175
Exposed the function pulpcore.plugin.util.verify_signature for verifying signatures created by signing services. #2476
Added pulpcore.plugin.content.ArtifactResponse to plugin API. Use this response to stream an artifact from the object storage if redirecting is impossible. #2537
Queryset scoping is now performed when the ViewSet's AccessPolicy field scope_queryset is set to a function on the ViewSet.

NamedModelViewSet now has default scoping method scope_queryset that will scope the request off of queryset_filtering_required_permission if present. If ViewSet is a master ViewSet then scoping will be performed by calling each child's scoping method if present. #2723
Content ViewSets default scope_queryset method will scope based on repositories the user can see. #2724
Added the ability to specify an upload for the single shot upload serializer. This allows to upload files in chunks and attach them with content in repositories without creating orphans. #2786
Added new access condition has_required_repo_perms_on_upload for RBAC plugins to use to require users to specify a repository when uploading content. If not used when uploading content, non-admin users will not be able to see their uploaded content if queryset scoping is enabled. #2796

Bugfixes¶

Reworked the ordering framework to use django-filters.

Plugins should not declare filter-backends on viewsets. #2703

Improved Documentation¶

Updated plugin writers RBAC guide to explain more roles and less permissions. Removed mentions of django-guardian. #2463
Added docs on the expectation that all user-facing strings are i8ln wrapped with gettext, but log messages are not. #2477

Removals¶

The pulpcore.plugin.exceptions.MissingResource object has been removed. Instead let 404 errors propagate upwards for DRF to handle, or use the DRF exception NotFound. #1812
Removed django-guardian from the stack. This includes the removal of AutoDeleteObjPermsMixin from the plugin api. #2051
Removed the custom_file_object argument to pulpcore.plugin.download.BaseDownloader. Now all downloaded data will be written to a random file in the current working directory. Further customization of where downloaded data can be written to can be done through subclassing. #2137
Constructor signature of DigestValidationError and SizeValidationError has changed - the "actual" and "expected" values are now required and "url" which was previously a positional argument is now a keyword argument. #2244
The pulpcore.plugin.constants.API_ROOT has been removed. Use the V3_API_ROOT and V3_API_ROOT_NO_FRONT_SLASH settings instead. #2556
Plugins using the SingleArtifactContentUploadSerializer must place a super call when overwriting deferred_validate. They can only assume the existance of the Artifact in the database, after this call. #2786

Misc¶

#2634, #2742

3.19.1 (2022-07-11)¶

REST API¶

Bugfixes¶

Taught PulpImport to stream imports rather than reading files into memory in one chunk.

This largely alleviates the memory-pressure that results from importing multiple large repositories in parallel. #2307
Fixed does_batch method in sync pipeline to allow waiting on content that is already resolved. #2557
Ensure downloader resets file on retry. #2576
Taught PulpImport to retry more than once in the event of creation-collisions.

This fixes a rare import-failure during high-concurrency, high-content-overlap imports. #2589
Improved the error message when HTTP proxies reject requests from Pulp. #2654
Restore multiple-retry logic for PulpImport. #2854
Improve content app performance on head requests #2924

Improved Documentation¶

Removed some out of date references to Redmine (the previous issue tracker). We use Github Issues now. #2642
Fixed extlinks use in docs to be Sphinx==5.0.0 compatible. #2782

Misc¶

#2605

Plugin API¶

No significant changes.

3.19.0 (2022-04-12)¶

REST API¶

Features¶

Content app now logs where it gets on-demand and streamed content from. #2059
Reclaim disk space can now accept ["*"] for repo_hrefs to specify all repositories for reclaim. #2065
Added a filter to allow searching for user roles by their description. #2276
Add swagger view and make OpenAPI human readable #2291
Adds a TASK_DIAGNOSTICS setting which will enable each task to write out diagnostic information such as memory usage of the task to a data file in /var/tmp/pulp/<task_UUID>/. This is disabled by default. #2329
Added a /pulp/api/v3/distributions/ endpoint to list all distributions. #2379

Bugfixes¶

Added reason for 404 error when accessing distributions without a publication. #1910
Fixed validation order of required settings to occur before plugin settings are loaded. #1968
Fix delete repository version causing "duplicate key value violates unique constraint" error. #2047
Fixed two instances of Pulp not writing to the task worker's temporary directory. #2061
Reduced memory usage during tasks like sync by holding fewer objects in-memory unnecessarily. #2069
Fixed migration 0064_add_new_style_task_columns to purge extraneous ReservedResource and TaskReservedResource entries, which could block sync and publish tasks post-upgrade.

Also taught the migration to bulk-update the Task changes. In large installations, this should have a positive impact on the time it takes to apply the migration. #2101
Taught task-purge to process tasks in batches of 1000. This prevents large purges from using large amounts of memory as a result of reading all the affected Tasks into memory at once. #2215
This fix prevents the lost track of a content removed version when deleting a repository version that deletes a content that is added back in the subsequent version, but deleted again in a later version. #2267
Added transactions around repository version operations to prevent data loss. #2268
Loosened the version-restrictions on PulpImport to only require X.Y matching. #2269
Fix a mistake in a previous migration which may have caused improperly encrypted remote fields. #2327
Fixed improper fields being listed in RepositoryVersion repair API. #2330
Fixes duplicate key error Key (content_artifact_id, remote_id) when creating RemoteArtifacts during syncs in pulp_container and possibly other plugins. #2381
Declared proper dependency on user model in migration 0040. #2403
Fixed a rare deadlock when sync'ing overlapping content in high-concurrency envs. #2420
Fixed a (rare) deadlock around bulk_update() during syncs with overlapping content. #2430
Fixed a bug where notifications to workers may go unnoticed. This may lead to idle workers while there are tasks waiting. #2506

Improved Documentation¶

Updates and revises docs on webserver based authentication. #2260
Adds docs on recording and building graphs from the memory data saved by the TASK_DIAGNOSTICS setting. #2329

Removals¶

Removed the Django UI Admin site. It was added to provide RBAC permissions management before there were APIs that could provide that. It was tech preview and now there are APIs for user and group management, along with role and permission assignment. It is being removed because the direct DB access it provides has caused some issues for users, especially since its not integrated with the validation provided by Django Rest Framework, which Pulp uses. #2374

Plugin API¶

Features¶

Exposed the PulpRemoteUserAuthentication class to plugin writers. This will allow the use of remote authentication methods when building protected endpoints. #2262
Added new global access conditions has_publication_param_model_or_obj_perms and has_repo_or_repo_ver_param_model_or_obj_perms for RBAC checks. #2364
Changed the reusable_conditions module configuration for access policies to being a list to enable plugins to add custom modules to it. #2495

Bugfixes¶

Adjusted the default size of the queues between pipelines to be 1 instead of 1000. The batchers in the stage will still accumulate up to 500 (by default) items so batching is still in-effect there where it matters. #2069

3.18.36 (2024-03-26)¶

REST API¶

No significant changes.

Plugin API¶

No significant changes.

3.18.35 (2024-01-30)¶

REST API¶

Bugfixes¶

Fixed a warning that gets raised when cache is enabled: RuntimeWarning: coroutine 'AsyncCache.delete' was never awaited. #4967

Plugin API¶

No significant changes.

REST API¶

Improved Documentation¶

Adds docs on recording and building graphs from the memory data saved by the TASK_DIAGNOSTICS setting. #2329

Misc¶

#2329, #4436

Plugin API¶

No significant changes.

3.18.28 (2023-09-20)¶

REST API¶

Bugfixes¶

Improved the performance when looking up content for repository versions. #3969
Ensure non-chunked exports and chunked exports use the same compression level. #4411
Removed compression from exports (using gzip level 0). For most users of export functionality it seems to be a poor tradeoff. #4434

Plugin API¶

No significant changes.

3.18.27 (2023-09-06)¶

REST API¶

Bugfixes¶

Ensure the compression level is reliably set properly as per #3869. #4351

Plugin API¶

No significant changes.

3.18.26 (2023-08-23)¶

REST API¶

Bugfixes¶

Fixed bug where incorrect error message presented in relation to content-import #4294

Plugin API¶

No significant changes.

3.18.25 (2023-08-01)¶

REST API¶

Bugfixes¶

Correctly fixed pulp_rpm-export-edgecase - fix #4210 was incomplete. #4231

Plugin API¶

No significant changes.

3.18.24 (2023-07-31)¶

REST API¶

Bugfixes¶

Fix a subtle export bug introduced from the optimizations in #4159. #4210

Plugin API¶

No significant changes.

3.18.23 (2023-07-29)¶

REST API¶

Bugfixes¶

Made reclaim space task more tolerant in the face of artifact shared between two content units. #3610
Taught pulp-import to be able to use a subset of available worker-threads. #4068
Updated the downloader's fetch method to comply with Python 3.11. #4107
Taught the Artifact.json of an export to hold minimum-unique-set of Artifact entries.

In highly-duplicated-content export scenarios, this can mean a significant decrease in export-size, and significant improvement in import-performance. #4159

Plugin API¶

No significant changes.

3.18.22 (2023-07-25)¶

REST API¶

Bugfixes¶

Taught repair task to be tolerant in the face of any artifact download failure. #4111

Plugin API¶

No significant changes.

3.18.21 (2023-07-19)¶

REST API¶

Bugfixes¶

Made the incremental file export include all published metadata. #3941
Updates file system exporter to correctly account the start_repository_version for pass_through publications #4051

Plugin API¶

No significant changes.

3.18.20 (2023-06-14)¶

REST API¶

Bugfixes¶

Exports now use gzip compression level 1 rather than compression level 9. Exported archives will now be slightly larger, but exports should be much faster. This is considered to be a more optimal balance of space/time for the export operation. #3869

Plugin API¶

No significant changes.

3.18.19 (2023-06-06)¶

REST API¶

Bugfixes¶

Taught PulpImport to be more robust in the face of previous failed attempts. #3737

Plugin API¶

No significant changes.

3.18.18 (2023-05-30)¶

REST API¶

Bugfixes¶

Taught repair task to remove unrepairable corrupted files. #1947
Taught repair task to continue when encountering a 404 during the repair process. #3611

Plugin API¶

No significant changes.

3.18.17 (2023-04-11)¶

REST API¶

Bugfixes¶

Downloader will now attempt to keep the filename of the requested URL intact if one exists. #3715

Plugin API¶

No significant changes.

3.18.16 (2023-03-29)¶

REST API¶

Bugfixes¶

Fixed an error when raising UnexportableArtifactException. #3313

Plugin API¶

No significant changes.

3.18.15 (2023-03-09)¶

REST API¶

Bugfixes¶

Added a start_repository_version parameter to the file system exporter.

If specified, it will export only content units that differed between two repository versions. #3413

Plugin API¶

No significant changes.

3.18.14 (2023-02-23)¶

REST API¶

Bugfixes¶

Fixed a bug that caused the import machinery to import the same content multiple times in a row. #3075

Plugin API¶

No significant changes.

3.18.13 (2023-01-20)¶

REST API¶

Bugfixes¶

Fixed an occasional 500 error when viewing a repository version content summary while performing a content deletion task. #3299

Plugin API¶

No significant changes.

3.18.12 (2023-01-10)¶

REST API¶

Bugfixes¶

Insured that pulp-export correctly locks repos-being-exported. #3370
Fix migrating Remotes with @ in path #3409

Plugin API¶

No significant changes.

3.18.11 (2022-11-02)¶

REST API¶

Bugfixes¶

Fixed the fs exporter to handle the case where there are pre-existing files in the location that FileSystem attempts to export to you get a FileExistsError. #1949
Fixed the fs exporter to handle the case where hardlink method was requested but pulp and export locations are in different partitions so can't share the same inode. #3187
Another step on closing the deadlock-window when syncing overlapping content. #3284

Plugin API¶

No significant changes.

3.18.10 (2022-09-14)¶

REST API¶

Bugfixes¶

Another guardrail added around content-stages to address deadlock in a specific usecase. #3192

Plugin API¶

No significant changes.

3.18.9 (2022-09-01)¶

REST API¶

Bugfixes¶

Fixed the value of the Content-Type header returned for .xml.gz files. #2811
Fixed another rare deadlock for high-concurrency/overlapping-content syncs. #3111

Plugin API¶

No significant changes.

3.18.8 (2022-08-16)¶

REST API¶

No significant changes.

Plugin API¶

No significant changes.

3.18.7 (2022-08-15)¶

REST API¶

Bugfixes¶

Serialized orphan cleanup tasks with respect to each other to prevent them from failing. #3030

Plugin API¶

No significant changes.

3.18.6 (2022-08-03)¶

REST API¶

Bugfixes¶

Restore multiple-retry logic for PulpImport. #2854
Improve content app performance on head requests #2924
Use published relative paths for FS Exporter. #2933
Configured aiohttp to avoid rewriting redirect URLs, as some web servers (e.g. Amazon CloudFront) can be tempermental about the encoding of the URL. #2964

Improved Documentation¶

Removed some out of date references to Redmine (the previous issue tracker). We use Github Issues now. #2642
Fixed extlinks use in docs to be Sphinx==5.0.0 compatible. #2782

Plugin API¶

No significant changes.

3.18.5 (2022-05-10)¶

REST API¶

Bugfixes¶

Taught PulpImport to stream imports rather than reading files into memory in one chunk.

This largely alleviates the memory-pressure that results from importing multiple large repositories in parallel. #2307
Fixed does_batch method in sync pipeline to allow waiting on content that is already resolved. #2557
Ensure downloader resets file on retry. #2576
Taught PulpImport to retry more than once in the event of creation-collisions.

This fixes a rare import-failure during high-concurrency, high-content-overlap imports. #2589
Improved the error message when HTTP proxies reject requests from Pulp. #2654

Plugin API¶

No significant changes.

3.18.4 (2022-04-12)¶

REST API¶

Bugfixes¶

Fixed two instances of Pulp not writing to the task worker's temporary directory. #2061
Taught task-purge to process tasks in batches of 1000. This prevents large purges from using large amounts of memory as a result of reading all the affected Tasks into memory at once. #2215
Loosened the version-restrictions on PulpImport to only require X.Y matching. #2269
Fixed a (rare) deadlock around bulk_update() during syncs with overlapping content. #2430
Fixed a bug where notifications to workers may go unnoticed. This may lead to idle workers while there are tasks waiting. #2506

Plugin API¶

No significant changes.

3.18.3 (2022-03-25)¶

REST API¶

Bugfixes¶

Reduced memory usage during tasks like sync by holding fewer objects in-memory unnecessarily. #2069
Fixes duplicate key error Key (content_artifact_id, remote_id) when creating RemoteArtifacts during syncs in pulp_container and possibly other plugins. #2381
Declared proper dependency on user model in migration 0040. #2403
Fixed a rare deadlock when sync'ing overlapping content in high-concurrency envs. #2420

Plugin API¶

Bugfixes¶

Adjusted the default size of the queues between pipelines to be 1 instead of 1000. The batchers in the stage will still accumulate up to 500 (by default) items so batching is still in-effect there where it matters. #2069

3.18.2 (2022-03-18)¶

REST API¶

Bugfixes¶

Fix delete repository version causing "duplicate key value violates unique constraint" error. #2047
Fixed migration 0064_add_new_style_task_columns to purge extraneous ReservedResource and TaskReservedResource entries, which could block sync and publish tasks post-upgrade.

Also taught the migration to bulk-update the Task changes. In large installations, this should have a positive impact on the time it takes to apply the migration. #2101
This fix prevents the lost track of a content removed version when deleting a repository version that deletes a content that is added back in the subsequent version, but deleted again in a later version. #2267
Fix a mistake in a previous migration which may have caused improperly encrypted remote fields. #2327

Plugin API¶

No significant changes.

3.18.1 (2022-03-01)¶

REST API¶

Bugfixes¶

Added transactions around repository version operations to prevent data loss. #2268

Plugin API¶

No significant changes.

3.18.0 (2022-02-22)¶

REST API¶

Features¶

Added a pulpcore-manager command remove-plugin to remove a Pulp plugin. #1945
Implemented the Redis caching machinery that can be used within the synchronous context. #2003
Add a "current_task" field to workers so that you can easily see which workers are currently active. #2034
Allowed Pulp to install without Redis. #2057
Added has_repository_obj_perms and has_repository_model_or_obj_perms as access conditions that can be used by viewsets nested beneath repository viewsets. #2076
Queryset scoping can now be disabled by changing the DEFAULT_PERMISSION_CLASSES. #2115
Specifying a different value for DEFAULT_PERMISSION_CLASSES will now automatically disable the permission assignment provided by the creation_hooks portion of an AccessPolicyFromDB. #2116
The Pulp API can now be rerooted using the new API_ROOT setting. By default it is set to /pulp/. Pulp appends the string api/v3/ onto the value of API_ROOT. #2148
Added a redirecting content guard that can be employed by plugins to forward from a REST call to the content app. #2151
Added a new analyze-publication management command to facilitate debugging. #2200
Added a read-only task schedule view for configured tasks schedules.

NOTE: This feature is in tech-preview and may change in backwards incompatible ways in the future. #2204

Bugfixes¶

Fix import and export OOM error. #2072
Fixed downloader retry logic with partially written files. #2078
Fix content summary showing incorrect count after previous version deletion. #2084
Fixed issue with listing repository versions after deleting previous versions. #2085
Fixed file descriptior leak during upload. #2087
Fixed an api schema bug where both permission_assignment and creation_hooks were required by the AccessPolicy serializer. #2089
Fixed migration 0081 to be compatible with custom User models. #2090
Fixed PulpImport to correctly save relative to MEDIA_ROOT. #2091
Added proper logging around certain ways a task could fail. #2093
Taught PulpImport to retry in the event of a concurrency-collision on ContentArtifact. #2102
Fixed an edge case where the first (streamed) response from an repo synced as "on_demand" could be incorrect. #2119
Fixed bug where retries of partially downloaded files failed digest and size validation. #2135
Fixed the calculation of response range headers in streaming answers from the content app. #2147
Fixed potential deadlock-window in touch() path. #2157
Fixed reporting tasks being canceled before being picked up by a worker as canceled instead of failed. #2183
Return a concise message exception on 500 in case file is missing on the FS. #2187
Fixed import/export of repositories with sub-content.

An example would be the sub-repositories in pulp_rpm DistributionTrees. #2192
touch() now uses standard Django instead of raw-sql to update. #2229

Misc¶

#2086, #2094, #2173, #2202

Plugin API¶

Features¶

The AutoAddObjPermsMixin now calls a handle_creation_hooks interface on the configured DRF permission class, e.g. the default AccessPolicyFromDB. #2116
Added a redirecting content guard that can be employed by plugins to generate preauthenticated URLs that forward from a REST call to the content app. Added the GetOrCreateSerializerMixin to get_or_create objects still validating them through the serializer. #2151
Exposed synchronous and asynchronous caching machinery. The classes AsyncContentCache and SyncContentCache can be now managed by plugin writers. #8806

Bugfixes¶

Started using a plugin provided serializer in has_remote_param_obj_perms and has_remote_param_model_or_obj_perms to solve the Unexpected field error during sync by a non-admin user. #2088
Exposed adjust_roles in the plugin api. #2092
Expose Roles model in plugin api. #2185

Deprecations¶

Deprecate the the use of custom_file_object parameter in BaseDownloader. #2123
The API_ROOT constant has been deprecated and turned into a setting. Its removal is scheduled for 3.20. Please use the setting with the same name instead. #2148
The ACCESS_POLICY_VIEWSET_NAME attribute is no longer expected to be present on models. The RBAC machinery no longer uses this, and if present a deprecation warning will be emitted. #2209

3.17.8 (2022-05-10)¶

REST API¶

Bugfixes¶

Taught PulpImport to stream imports rather than reading files into memory in one chunk.

This largely alleviates the memory-pressure that results from importing multiple large repositories in parallel. #2307
Fixed does_batch method in sync pipeline to allow waiting on content that is already resolved. #2557
Ensure downloader resets file on retry. #2576
Taught PulpImport to retry more than once in the event of creation-collisions.

This fixes a rare import-failure during high-concurrency, high-content-overlap imports. #2589
Improved the error message when HTTP proxies reject requests from Pulp. #2654

Plugin API¶

No significant changes.

3.17.7 (2022-04-12)¶

REST API¶

Bugfixes¶

Fixed two instances of Pulp not writing to the task worker's temporary directory. #2061
Taught task-purge to process tasks in batches of 1000. This prevents large purges from using large amounts of memory as a result of reading all the affected Tasks into memory at once. #2215
Loosened the version-restrictions on PulpImport to only require X.Y matching. #2269
Fixed a (rare) deadlock around bulk_update() during syncs with overlapping content. #2430
Fixed a bug where notifications to workers may go unnoticed. This may lead to idle workers while there are tasks waiting. #2506

Plugin API¶

No significant changes.

3.17.6 (2022-03-25)¶

REST API¶

Bugfixes¶

Reduced memory usage during tasks like sync by holding fewer objects in-memory unnecessarily. #2069
Fixes duplicate key error Key (content_artifact_id, remote_id) when creating RemoteArtifacts during syncs in pulp_container and possibly other plugins. #2381
Declared proper dependency on user model in migration 0040. #2403
Fixed a rare deadlock when sync'ing overlapping content in high-concurrency envs. #2420

Plugin API¶

Bugfixes¶

Adjusted the default size of the queues between pipelines to be 1 instead of 1000. The batchers in the stage will still accumulate up to 500 (by default) items so batching is still in-effect there where it matters. #2069

3.17.5 (2022-03-18)¶

REST API¶

Bugfixes¶

Fix delete repository version causing "duplicate key value violates unique constraint" error. #2047
Fixed migration 0064_add_new_style_task_columns to purge extraneous ReservedResource and TaskReservedResource entries, which could block sync and publish tasks post-upgrade.

Also taught the migration to bulk-update the Task changes. In large installations, this should have a positive impact on the time it takes to apply the migration. #2101
Taught PulpImport to retry in the event of a concurrency-collision on ContentArtifact. #2102
This fix prevents the lost track of a content removed version when deleting a repository version that deletes a content that is added back in the subsequent version, but deleted again in a later version. #2267
Fix a mistake in a previous migration which may have caused improperly encrypted remote fields. #2327

Plugin API¶

No significant changes.

3.17.4 (2022-03-01)¶

REST API¶

Bugfixes¶

Fix import and export OOM error. #2072
Fixed downloader retry logic with partially written files. #2078
Fix content summary showing incorrect count after previous version deletion. #2084
Fixed issue with listing repository versions after deleting previous versions. #2085
Fixed file descriptior leak during upload. #2087
Added proper logging around certain ways a task could fail. #2093
Make checksum mismatches a retryable error. #2094
Fixed an edge case where the first (streamed) response from an repo synced as "on_demand" could be incorrect. #2119
Fixed bug where retries of partially downloaded files failed digest and size validation. #2135
Fixed the calculation of response range headers in streaming answers from the content app. #2147
Fixed potential deadlock-window in touch() path. #2157
Fixed reporting tasks being canceled before being picked up by a worker as canceled instead of failed. #2183
Fixed import/export of repositories with sub-content.

An example would be the sub-repositories in pulp_rpm DistributionTrees. #2192
touch() now uses standard Django instead of raw-sql to update. #2229
Added transactions around repository version operations to prevent data loss. #2268

Plugin API¶

No significant changes.

3.17.3 (2022-01-12)¶

REST API¶

No significant changes.

Plugin API¶

Bugfixes¶

Exposed adjust_roles in the plugin api. (backported from #9665) #9668

3.17.2 (2022-01-06)¶

REST API¶

Bugfixes¶

Fixed PulpImport to correctly save relative to MEDIA_ROOT. (backported from #9660) #9664

Plugin API¶

No significant changes.

3.17.1 (2021-12-21)¶

REST API¶

Bugfixes¶

Fixed migration 0081 to be compatible with custom User models. #9654

Plugin API¶

No significant changes.

3.17.0 (2021-12-14)¶

REST API¶

Features¶

Added a /tasks/purge/ API to do bulk-deletion of old tasks.

Over time, the database can fill with task-records. This API allows an installation to bulk-remove records based on their completion timestamps.

NOTE: this endpoint is in tech-preview and may change in backwards incompatible ways in the future. #8554
Added a role model to support RBAC and the utility functions assign_role and remove_role.

The field permissions_assignment of access policies has been renamed to creation_hooks. A compatibility patch has been added to be removed with pulpcore=3.20.

The permissions argument to creation_hooks has been deprecated to be removed with pulpcore=3.20. #9411
Added views to assign model and object level roles to users and groups. #9413
Rewrote existing access policies on viewsets to use roles. #9415
Added validation to prevent credentials in remote urls. Also added data migration to move credentials out of remote url and into remote username/password fields for existing remotes. #9459
Reworked RBAC Content Guards to now use roles. Added new endpoints {list, add, remove}_roles and my_permissions to the RBAC content guard viewset. #9498
Content-type and Content-disposition headers are now sent in the AzureStorage.url. #9518
SigningService scripts can now access the public key fingerprint using the PULP_SIGNING_KEY_FINGERPRINT environment variable. This allows for more generic scripts, that do not need to "guess" (hardcode) what key they should use. #9532
Added object specific endpoints {list,add}_roles, remove_roles and my_permissions to tasks and groups viewsets. #9604
Added a reset endpoint to the access policy viewset to revert to the provided default uncustomized access policy. #9606

Bugfixes¶

PulpImporter now unpacks into the task-worker's working directory rather than /tmp. Unpacking large files into /tmp could cause the operation to fail, or even cause stability issues for Pulp instance, due to running /tmp out of space. #8610
Missing worker records are now kept in the database for seven days allowing time for post-mortem analysis of them. The user-facing data in the status API remains unmodified. #8988
Made Pulp to be fault-tolerant to Redis server connection issues. #8997
Cache is now properly invalidated after reclaim disk task. #9215
Fixed bug where the content app would stop working after a brief loss of connection to the database. #9276
Improved messaging around timeout requests. #9301
Updated the distribution validation to properly handle the use of repository / repository_version / publication. #9434
Fixed issue with listing repository versions while running orphan cleanup task. #9481
Fixed erroneous ordering filters from appearing in HTML views and causing 500 errors when used. #9496
Fixed bug where Artifacts were being downloaded even if they were already saved in Pulp. #9542
Fixed a bug in pulpcore-worker, where wakeup and cancel signals could be lost due to a race condition. #9549
Fixed bug where chunked uploads were being assembled in /tmp. #9550
Created a proxy model for Groups to allow using creation_hooks with them. #9588
Fixed permission errors on artifact retrieval from object storage when redis caching is enabled. #9595

Improved Documentation¶

Adjusted the RBAC documentation for the roles framework. #9411
Added documentation for DB_ENCRYPTION_KEY setting. #9495
Fixed the path to uploaded artifacts. #9527

Removals¶

The pulpcore-worker binary no longer accepts the --resource-manager flag. There is no resource manager anymore, so this flag is no longer needed. #9327
Removed tech previewed assign_permission and remove_permission endpoints from RBAC content guard viewset. #9498

Misc¶

#9353, #9354, #9506

Plugin API¶

Features¶

Added get_objects_for_user to support queryset filtering by roles. Added hooks in AutoAddObjPermsMixin to support auto-assignment of roles.

Changed the lookup for creation hooks so hooks need to be registered in REGISTERED_CREATION_HOOKS on the model to be used. The signature for creation hooks that are registered must match the exploded version of the dict parameters from the access policy. Unregistered creation hooks are deprecated and support will be dropped in pulpcore 3.20. #9411
Made RepositoryAddRemoveContentSerializer available for plugin writers. #9504
Added ability to pass headers through the AzureStorage.url. #9518
Remote.get_remote_artifact_url now accepts a request parameter. #9554
Added initialize_new_version function to Repository model. #9579
DownloaderFactory.user_agent() method is now available if plugin needs to generate User-Agent header value to use in their custom (subclasssed) downloader factory. #9591
Added ability to use a custom download factory. Remote.get_downloader now accepts a download_factory parameter. #9592
Handler._serve_content_artifact method accepts new positional argument request. #9595
Added Group model to plugin api. Added RolesMixin to for viewsets to allow managing object roles based on permissions. #9604
Added new async sign method asign to the SigningService model. #9615
SigningService.sign and SigningService.asign now accepts a env_var parameter that makes it possible to pass environment variables to the signing script. #9621

Bugfixes¶

Include additional information about which AccessPolicy is using deprecated policy features. #9608

3.16.24 (2023-10-30)¶

REST API¶

Bugfixes¶

Resolved a sync-time performance regression. #4591

Plugin API¶

No significant changes.

3.16.23 (2023-10-16)¶

REST API¶

Bugfixes¶

Improve performance during export operations. #4551
Taught ContentArtifactResource import to cache content results to improve performance. #4564

Plugin API¶

No significant changes.

3.16.22 (2023-10-05)¶

REST API¶

Bugfixes¶

Made sure PulpImport's use of tar.extractall() is safe. #3323

Plugin API¶

No significant changes.

3.16.21 (2023-09-27)¶

REST API¶

Improved Documentation¶

Adds docs on recording and building graphs from the memory data saved by the TASK_DIAGNOSTICS setting. #2329

Misc¶

#2329, #4436

Plugin API¶

No significant changes.

3.16.20 (2023-09-20)¶

REST API¶

Bugfixes¶

Removed compression from exports (using gzip level 0). For most users of export functionality it seems to be a poor tradeoff. #4434

Plugin API¶

No significant changes.

3.16.19 (2023-09-13)¶

REST API¶

Bugfixes¶

Taught PulpImport to be more robust in the face of previous failed attempts. #3737
Exports now use gzip compression level 1 rather than compression level 9. Exported archives will now be slightly larger, but exports should be much faster. This is considered to be a more optimal balance of space/time for the export operation. #3869
Improved the performance when looking up content for repository versions. #3969
Taught the Artifact.json of an export to hold minimum-unique-set of Artifact entries.

In highly-duplicated-content export scenarios, this can mean a significant decrease in export-size, and significant improvement in import-performance. #4159
Fix a subtle export bug introduced from the optimizations in #4159. #4210
Correctly fixed pulp_rpm-export-edgecase - fix #4210 was incomplete. #4231
Ensure the compression level is reliably set properly as per #3869. #4351
Ensure non-chunked exports also use gzip compressionlevel=1 #4411

Plugin API¶

No significant changes.

3.16.18 (2023-08-01)¶

REST API¶

Bugfixes¶

Updated the downloader's fetch method to comply with Python 3.11. #4107

Plugin API¶

No significant changes.

3.16.17 (2023-04-11)¶

REST API¶

Bugfixes¶

Downloader will now attempt to keep the filename of the requested URL intact if one exists. #3715

Plugin API¶

No significant changes.

3.16.16 (2023-02-23)¶

REST API¶

Bugfixes¶

Fixed a bug that caused the import machinery to import the same content multiple times in a row. #3075
Insured that pulp-export correctly locks repos-being-exported. #3370

Plugin API¶

No significant changes.

3.16.15 (2022-11-02)¶

REST API¶

Bugfixes¶

Fixed the fs exporter to handle the case where there are pre-existing files in the location that FileSystem attempts to export to you get a FileExistsError. #1949
Fixed the fs exporter to handle the case where hardlink method was requested but pulp and export locations are in different partitions so can't share the same inode. #3187
Another step on closing the deadlock-window when syncing overlapping content. #3284

Plugin API¶

No significant changes.

3.16.14 (2022-09-13)¶

REST API¶

Bugfixes¶

Fixed the value of the Content-Type header returned for .xml.gz files. #2811
Another guardrail added around content-stages to address deadlock in a specific usecase. #3192

Plugin API¶

No significant changes.

3.16.13 (2022-09-01)¶

REST API¶

Bugfixes¶

Fixed another rare deadlock for high-concurrency/overlapping-content syncs. #3111

Plugin API¶

No significant changes.

3.16.12 (2022-08-05)¶

REST API¶

Bugfixes¶

Use published relative paths for FS Exporter. #2933
Serialized orphan cleanup tasks with respect to each other to prevent them from failing. #3030

Plugin API¶

No significant changes.

3.16.11 (2022-07-14)¶

REST API¶

Bugfixes¶

Improve content app performance on head requests #2924
Configured aiohttp to avoid rewriting redirect URLs, as some web servers (e.g. Amazon CloudFront) can be tempermental about the encoding of the URL. #2964

Plugin API¶

No significant changes.

3.16.10 (2022-06-16)¶

REST API¶

Bugfixes¶

Restore multiple-retry logic for PulpImport. #2854

Plugin API¶

No significant changes.

3.16.9 (2022-06-15)¶

REST API¶

Bugfixes¶

Started showing errors when users try to export remote artifacts. #2817

Misc¶

#2816

Plugin API¶

No significant changes.

3.16.8 (2022-05-10)¶

REST API¶

Bugfixes¶

Taught PulpImport to stream imports rather than reading files into memory in one chunk.

This largely alleviates the memory-pressure that results from importing multiple large repositories in parallel. #2307
Fixed does_batch method in sync pipeline to allow waiting on content that is already resolved. #2557
Ensure downloader resets file on retry. #2576
Taught PulpImport to retry more than once in the event of creation-collisions.

This fixes a rare import-failure during high-concurrency, high-content-overlap imports. #2589
Improved the error message when HTTP proxies reject requests from Pulp. #2654

Plugin API¶

No significant changes.

3.16.7 (2022-04-12)¶

REST API¶

Bugfixes¶

Fixed two instances of Pulp not writing to the task worker's temporary directory. #2061
Fixed file descriptior leak during upload. #2087
Fixed a bug in pulpcore-worker, where wakeup and cancel signals could be lost due to a race condition. #2144
Loosened the version-restrictions on PulpImport to only require X.Y matching. #2269
Fixed a (rare) deadlock around bulk_update() during syncs with overlapping content. #2430
Fixed a bug where notifications to workers may go unnoticed. This may lead to idle workers while there are tasks waiting. #2506

Plugin API¶

No significant changes.

3.16.6 (2022-03-25)¶

REST API¶

Bugfixes¶

Reduced memory usage during tasks like sync by holding fewer objects in-memory unnecessarily. #2069
Fixes duplicate key error Key (content_artifact_id, remote_id) when creating RemoteArtifacts during syncs in pulp_container and possibly other plugins. #2381
Declared proper dependency on user model in migration 0040. #2403
Fixed a rare deadlock when sync'ing overlapping content in high-concurrency envs. #2420
Fixed secure proxy support by updating aiohttp version to ~=3.8.1. #2423

Plugin API¶

Bugfixes¶

Adjusted the default size of the queues between pipelines to be 1 instead of 1000. The batchers in the stage will still accumulate up to 500 (by default) items so batching is still in-effect there where it matters. #2069

3.16.5 (2022-03-17)¶

REST API¶

Bugfixes¶

Fix delete repository version causing "duplicate key value violates unique constraint" error. #2047
Fixed migration 0064_add_new_style_task_columns to purge extraneous ReservedResource and TaskReservedResource entries, which could block sync and publish tasks post-upgrade.

Also taught the migration to bulk-update the Task changes. In large installations, this should have a positive impact on the time it takes to apply the migration. #2101
Taught PulpImport to retry in the event of a concurrency-collision on ContentArtifact. #2102
This fix prevents the lost track of a content removed version when deleting a repository version that deletes a content that is added back in the subsequent version, but deleted again in a later version. #2267
Fix a mistake in a previous migration which may have caused improperly encrypted remote fields. #2327

Plugin API¶

No significant changes.

3.16.4 (2022-03-01)¶

REST API¶

Bugfixes¶

Fix content summary showing incorrect count after previous version deletion. #2084
Fixed issue with listing repository versions after deleting previous versions. #2085
Fixed potential deadlock-window in touch() path. #2157
Fixed import/export of repositories with sub-content.

An example would be the sub-repositories in pulp_rpm DistributionTrees. #2192
touch() now uses standard Django instead of raw-sql to update. #2229
PulpImporter now unpacks into the task-worker's working directory rather than /tmp. Unpacking large files into /tmp could cause the operation to fail, or even cause stability issues for Pulp instance, due to running /tmp out of space. #2247
Added transactions around repository version operations to prevent data loss. #2268

Plugin API¶

No significant changes.

3.16.3 (2022-02-08)¶

REST API¶

Bugfixes¶

Fix import and export OOM error. #2072
Fixed downloader retry logic with partially written files. #2078
Fixed bug where retries of partially downloaded files failed digest and size validation. #2135
Fixed the calculation of response range headers in streaming answers from the content app. #2147
Improved messaging around timeout requests. #2169
Fixed reporting tasks being canceled before being picked up by a worker as canceled instead of failed. #2183

Misc¶

#2094

Plugin API¶

No significant changes.

3.16.2 (2022-01-07)¶

REST API¶

Bugfixes¶

Fixed PulpImport to correctly save relative to MEDIA_ROOT. (backported from #9660) #9663

Plugin API¶

No significant changes.

3.16.1 (2021-12-02)¶

REST API¶

Bugfixes¶

Fixed bug where Artifacts were being downloaded even if they were already saved in Pulp. (backported from #9542) #9596
Fixed bug where the content app would stop working after a brief loss of connection to the database. (backported from #9276) #9598

Plugin API¶

No significant changes.

3.16.0 (2021-10-05)¶

REST API¶

Features¶

Prioritize remote content provided by Alternate Content Sources over regular content in the content app. #8749
Marked readonly task resources as shared for concurrent use. #9326
Added validation for the remote type that can be used with the ACS. #9375

Bugfixes¶

Ordered several ContentStages paths to fix deadlocks in high-concurrency scenarios. #8750
Fixed a bug where pulpcore-content decompressed data while incorrectly advertising to clients it was still compressed via the Content-Encoding: gzip header. #9213
Changed the pulpcore-worker to mark abandoned tasks as "failed" instead of "canceled". #9247
Fixed the repository modify endpoint performance problems. #9266
RBACContentGuard assign/remove permission endpoints now properly return 201 instead of 200 #9314
Fixed bug where some Openshift environments could not start workers due to a strange Python runtime import issue. #9338
PATCH/PUT/DELETE calls for the ACS are asynchronous and trigger a task. #9374
Fixed update call for the ACS so paths are not silenty removed when other fields are being updated. #9376
Fixed an issue where on_demand content might not be downloaded properly if the remote URL was changed (even if re-synced). #9395
Fixed a bug, where natural key calculations on content performed superfluous database calls. #9409
Ensured that with the removal of ACS its' hidden repositories are removed as well. #9417
Taught a remote-artifact error path to not assume 'filename' was valid for all content. #9427
Taught several more codepaths to order-before-update to avoid deadlocks. #9441

Improved Documentation¶

Added an architecture diagram to the components page. #7692
Fixed a note saying where to find versioning details. #8859
Removed deprecated uses of MEDIA_ROOT. #9100
Updated ACS docs to use CLI commands. #9251
Document Azure storage needs to set MEDIA_ROOT #9428
Corrected a fact that Redis is needed by the tasking system in the installation section. #9436

Removals¶

Removed the legacy tasking system and the USE_NEW_WORKER_TYPE setting. #9157
Removed OpenAPI browsable API #9322
Updated the pulp import creation endpoint to return a task group instead of a task. #9382

Misc¶

#9432, #9443

Plugin API¶

Features¶

Added optional stage for Alternate Content Source support. #8748
AlternateContentSource has a new class variable REMOTE_TYPES that it will use to validate the type of remote set on the ACS. #9375
Added pulpcore.plugin.viewset.TaskGroupResponse which can be used to return a reference to a task group created in a viewset. Added pulpcore.plugin.serializers.TaskGroupResponseSerializer which can be used to indicate the serializer response format of viewsets that will use TaskGroupResponse similar to how AsyncOperationResponseSerializer is used. #9380
Added the pulpcore.plugin.tasking.general_multi_delete that deletes a list of model instances in a transaction. #9417
Exposed tasks general_create, general_create_from_temp_file, general_delete, general_update, orphan_cleanup, and reclaim_space in the plugin api. #9418
ALLOW_SHARED_TASK_RESOURCES is now enabled by default. If all goes smoothly, this will become permanent and the setting will be removed in the next release. #9474

Bugfixes¶

Set the default widget type to JSONWidget for JSONFields for Model Resources to fix django-import-export bug where django.db.models.JSONFields weren't properly handled. #9307
PATCH/PUT/DELETE calls for the ACS are asynchronous and trigger a task. #9374

Removals¶

Removed the deprecated reserved_resources_record__resource filter for Task. Use reserved_resources_record__contains instead. #9157
Removed drf-access-policy workaround for condition/condition_expession. #9163
Removed ACS path validation. Plugins should now define validate_paths on their ACS serializer to validate paths. #9340
Renamed TaskGroupResponse to TaskGroupOperationResponse and TaskGroupResponseSerializer to TaskGroupOperationResponseSerializer in order to avoid conflicts with responses from task groups endpoints. #9425
The resources argument of dispatch() has been removed. exclusive_resources and shared_resources should be used instead. #9477
ContentSaver._pre_save() and ContentSaver._post_save() must now be implemented as synchronous functions rather than coroutines. #9478

3.15.9 (2022-06-28)¶

REST API¶

Bugfixes¶

Restore multiple-retry logic for PulpImport. #2854

Misc¶

#2856

Plugin API¶

No significant changes.

3.15.8 (2022-04-12)¶

REST API¶

Bugfixes¶

Fixed file descriptior leak during upload. #2087
Fixed a bug in pulpcore-worker, where wakeup and cancel signals could be lost due to a race condition. #2144
Fixed a bug where notifications to workers may go unnoticed. This may lead to idle workers while there are tasks waiting. #2506
Changed the pulpcore-worker to mark abandoned tasks as "failed" instead of "canceled". #2532

Plugin API¶

No significant changes.

3.15.7 (2022-03-25)¶

REST API¶

Bugfixes¶

Reduced memory usage during tasks like sync by holding fewer objects in-memory unnecessarily. #2069
Fixes duplicate key error Key (content_artifact_id, remote_id) when creating RemoteArtifacts during syncs in pulp_container and possibly other plugins. #2381
Declared proper dependency on user model in migration 0040. #2403
Fixed a rare deadlock when sync'ing overlapping content in high-concurrency envs. #2420

Plugin API¶

Bugfixes¶

Adjusted the default size of the queues between pipelines to be 1 instead of 1000. The batchers in the stage will still accumulate up to 500 (by default) items so batching is still in-effect there where it matters. #2069

3.15.6 (2022-03-22)¶

REST API¶

Bugfixes¶

Fix a mistake in a previous migration which may have caused improperly encrypted remote fields. #2327

Plugin API¶

No significant changes.

3.15.5 (2022-03-15)¶

REST API¶

Bugfixes¶

Fix delete repository version causing "duplicate key value violates unique constraint" error. #2047
Fix content summary showing incorrect count after previous version deletion. #2084
Fixed issue with listing repository versions after deleting previous versions. #2085
Fixed migration 0064_add_new_style_task_columns to purge extraneous ReservedResource and TaskReservedResource entries, which could block sync and publish tasks post-upgrade.

Also taught the migration to bulk-update the Task changes. In large installations, this should have a positive impact on the time it takes to apply the migration. #2101
Taught PulpImport to retry in the event of a concurrency-collision on ContentArtifact. #2102
Fixed potential deadlock-window in touch() path. #2157
Fixed reporting tasks being canceled before being picked up by a worker as canceled instead of failed. #2183
Fixed import/export of repositories with sub-content.

An example would be the sub-repositories in pulp_rpm DistributionTrees. #2192
touch() now uses standard Django instead of raw-sql to update. #2229
PulpImporter now unpacks into the task-worker's working directory rather than /tmp. Unpacking large files into /tmp could cause the operation to fail, or even cause stability issues for Pulp instance, due to running /tmp out of space. #2247
This fix prevents the lost track of a content removed version when deleting a repository version that deletes a content that is added back in the subsequent version, but deleted again in a later version. #2267
Added transactions around repository version operations to prevent data loss. #2268
Fixed bug where the content app would stop working after a brief loss of connection to the database. #2293

Plugin API¶

No significant changes.

3.15.4 (2022-01-28)¶

REST API¶

Bugfixes¶

Fixed downloader retry logic with partially written files. #2078
Fixed bug where retries of partially downloaded files failed digest and size validation. #2135
Fixed the calculation of response range headers in streaming answers from the content app. #2147
Improved messaging around timeout requests. #2169

Misc¶

#2094

Plugin API¶

No significant changes.

3.15.3 (2021-11-30)¶

REST API¶

Bugfixes¶

Fixed bug where Artifacts were being downloaded even if they were already saved in Pulp. (backported from #9542) #9584

Plugin API¶

No significant changes.

3.15.2 (2021-09-02)¶

REST API¶

Bugfixes¶

Fixed bug where some Openshift environments could not start workers due to a strange Python runtime import issue. (backported from #9338) #9342

Plugin API¶

No significant changes.

3.15.1 (2021-08-31)¶

REST API¶

Bugfixes¶

RBACContentGuard assign/remove permission endpoints now properly return 201 instead of 200 (backported from #9314) #9323

Plugin API¶

Bugfixes¶

Set the default widget type to JSONWidget for JSONFields for Model Resources to fix django-import-export bug where django.db.models.JSONFields weren't properly handled. (backported from #9307) #9324

3.15.0 (2021-08-26)¶

REST API¶

Features¶

Added encryption in the database for Remote fields username, password, proxy_username, proxy_password, and client_key. #8192
Added feature to reclaim disk space for a list of repositories. #8459
Added method field to filesystem exporters to customize how they export files. Users can now export files by writing them to the filesystem, using hardlinks, or using symlinks. #8695
Changed orphan cleanup task to be a non-blocking task that can be run at any time. Added a ORPHAN_PROTECTION_TIME setting that can be configured for how long orphan Content and Artifacts are kept before becoming candidates for deletion by the orphan cleanup task. #8824
Added a /v3/exporters/core/filesystem/ endpoint for exporting publications or repository versions to the filesystem. #8860
Added a periodical cleanup to the pulpcore-worker class to keep the Worker table clean. #8931
Added new content guard that uses RBAC policies to protect content #8940
Added authentication to the content app. #8951
A new setting ALLOW_SHARED_TASK_RESOURCES was temporarily added to allow plugins to use specific resources concurrently, during task execution. It defaults to False. It will switch to True with 3.16 and will eventually be removed. #9148

Bugfixes¶

In stages-pipeline and new-version sanity-checks, added full error-info on path-problems. #8133
Improved disk usage during the synchronization. #8295
Fixed an internal server error that was raised when a user provided invalid parameters while assigning new permissions to an object. #8500
Fixed a bug, where new tasks were assigned to dead workers. #8779
Fixed bug where content app would not respond to Range HTTP Header in requests when remote.policy was either on_demand or streamed. For example this request is used by Anaconda clients. #8865
Unpublished content can no longer be accessed from content app if publication based-plugin has defined their distributions as publication serving #8870
Fixed a bug that caused a serializer to ignore form data for pulp_labels. #8954
Fixed inability for users to disable RBAC at the settings level by changing the DEFAULT_PERMISSION_CLASSES like any user configuring a DRF project expects to. #8974
Fixed signal handling to properly kill a task when double ctrl-c is used to shut down a worker fast. #8986
Added an attempt to cancel a task if a worker needed to abort it on graceful shutdown. #8987
Fixed a bug where on-demand downloads would fill up /var/run/ by not deleting downloaded files. #9000
Fixed a regression preventing syncs from file:// urls. #9003
Removed ambiguity from the OpenAPI schema for Exports. The exported_resources are now a list of URI strings. #9008
Use proxy auth from Remote config to download content from a remote repository. #9024
Fixed the behavior of setting "repository" on a distribution for publication-based plugins. #9039
Set Redis connection information in status to null unless it's used. Redis is needed for RQ tasking or content caching. #9070
Fixed server error when accessing invalid files from content app base directory #9074
Fixed improper validation of remotes' URLs. #9080
Artifacts are now being properly updated for Content after switching from 'on_demand' to 'immediate'. #9101
Made all database queries run serially using a single connection to the database. #9129
Move files to artifact storage only when they originate from WORKING_DIRECTORY. Copy files from all other sources. #9146
Content app now properly sets Content-Type header for artifacts being served from S3 #9216
Fixed repository sync performance regression introduced in pulpcore 3.14. #9243
Stop using insecure hash function blake2s for calculating 64 bit lock identifier from uuid. #9249
Fixed another occurence of the HTTP 500 error and connection already closed in the logs while accessing content. #9275

Removals¶

Dropped support for Python 3.6 and 3.7. Pulp now supports Python 3.8+. #8855
Renamed the retained_versions field on repositories to retain_repo_versions. #9030

Deprecations¶

The traditional tasking system (formerly the default in pulpcore<=3.13) is deprecated and will be removed in pulpcore==3.16. If you are using the USE_NEW_WORKER_TYPE=False that will no longer give you the traditional tasking system starting with pulpcore==3.16. #9159

Misc¶

#5582, #8996, #9010, #9056, #9112, #9120, #9171, #9174

Plugin API¶

Features¶

Content model has a new boolean class constant PROTECTED_FROM_RECLAIM for plugins to enable the reclaim disk space feature provided by core. #8459
Added endpoints for managing Alternate Content Sources. #8607
Orphan cleanup task has a new optional parameter orphan_protection_time that decides for how long Pulp will hold orphan Content and Artifacts before they become candidates for deletion for this particular orphan cleanup task. #8824
Distribution model has a new boolean class variable SERVE_FROM_PUBLICATION for plugins to declare whether their distributions serve from publications or directly from repository versions #8870
The settings file switched DEFAULT_PERMISSION_CLASSES to use AccessPolicyFromDB instead of IsAdminUser with a fallback to a behavior of IsAdminUser. With this feature plugin writers no longer need to declare permission_classes on their Views or Viewsets to use AccessPolicyFromDB. #8974
Upgraded django from 2.2 to 3.2. #9018
pulpcore.plugin.models.ProgressReport now has async interfaces: asave(), aincrease_by(), aincrement(), aenter(), aexit_(). Plugins should switch to the async interfaces in their Stages. pulpcore.plugin.sync.sync_to_async_iterator is a utility method to synchronize the database queries generated when a QuerySet is iterated. #9129
Added shared_resources to the dispatch call, so tasks can run concurrently if they need overlapping resources for read only. #9148
Added touch to Artifact and Content query sets for bulk operation. #9234
Added ContentManager to the plugin API - all subclasses of Content that add their own custom manager should have the manager subclass ContentManager. #9269

Bugfixes¶

Added kwarg to RemoteArtifactSaver init to allow enabling handling of rare error edge-case.

fix_mismatched_remote_artifacts=True enables workaround for a failure-scenario that (so far) is only encountered by pulp_rpm. Current behavior is the default. #8133

Removals¶

Removed the pulpcore.plugin.viewsets.NewDistributionFilter. Instead use pulpcore.plugin.viewsets.DistributionFilter. #8479
Removed FilesystemExporterSerializer and PublicationExportSerializer from the plugin api. Filesystem exports are now handled by pulpcore. #8860
The pulpcore.plugin.download.http_giveup method has been removed from the plugin API. Plugins used to have to use this to wrap the _run method defined on subclasses of HttpDownloader, but starting with pulpcore 3.14 the backoff is implemented directly in the HttpDownloader.run() method which subclasses do not override. Due to pulpcore implementing it, it is no longer needed or available for plugins to use. #8913

Deprecations¶

ContentSaver._pre_save() and ContentSaver._post_save() hooks are no longer coroutines. They should be implemented as synchronous functions. #9129
Deprecate the compatibility layer for access policies. As of pulpcore 3.16, all plugins should properly use the "condition" and "condition_expression" fields in the access policy statements. #9160
Deprecate the resources argument of dispatch in favor of exclusive_resources and shared_resources. #9257

Misc¶

#8606, #9160

3.14.19 (2023-02-09)¶

REST API¶

Bugfixes¶

Fixed another rare deadlock for high-concurrency/overlapping-content syncs. #3111
Another step on closing the deadlock-window when syncing overlapping content. #3284

Plugin API¶

No significant changes.

3.14.18 (2022-07-14)¶

REST API¶

Bugfixes¶

Started showing errors when users try to export remote artifacts. #2817
Restore multiple-retry logic for PulpImport. #2854
Configured aiohttp to avoid rewriting redirect URLs, as some web servers (e.g. Amazon CloudFront) can be tempermental about the encoding of the URL. #2964

Plugin API¶

No significant changes.

3.14.17 (2022-05-09)¶

REST API¶

Bugfixes¶

Loosened the version-restrictions on PulpImport to only require X.Y matching. #2269
Taught PulpImport to stream imports rather than reading files into memory in one chunk.

This largely alleviates the memory-pressure that results from importing multiple large repositories in parallel. #2307
Ensure downloader resets file on retry. #2576
Taught PulpImport to retry more than once in the event of creation-collisions.

This fixes a rare import-failure during high-concurrency, high-content-overlap imports. #2589

Plugin API¶

No significant changes.

3.14.16 (2022-04-12)¶

REST API¶

Bugfixes¶

Fixed two instances of Pulp not writing to the task worker's temporary directory. #2061
Fixed a (rare) deadlock around bulk_update() during syncs with overlapping content. #2430
Fixed a bug where notifications to workers may go unnoticed. This may lead to idle workers while there are tasks waiting. #2506

Plugin API¶

No significant changes.

3.14.15 (2022-03-25)¶

REST API¶

Bugfixes¶

Fix delete repository version causing "duplicate key value violates unique constraint" error. #2047
Reduced memory usage during tasks like sync by holding fewer objects in-memory unnecessarily. #2069
This fix prevents the lost track of a content removed version when deleting a repository version that deletes a content that is added back in the subsequent version, but deleted again in a later version. #2267
Fixes duplicate key error Key (content_artifact_id, remote_id) when creating RemoteArtifacts during syncs in pulp_container and possibly other plugins. #2381
Declared proper dependency on user model in migration 0040. #2403
Fixed a rare deadlock when sync'ing overlapping content in high-concurrency envs. #2420

Plugin API¶

Bugfixes¶

Adjusted the default size of the queues between pipelines to be 1 instead of 1000. The batchers in the stage will still accumulate up to 500 (by default) items so batching is still in-effect there where it matters. #2069

3.14.14 (2022-03-10)¶

REST API¶

Bugfixes¶

Fixed migration 0064_add_new_style_task_columns to purge extraneous ReservedResource and TaskReservedResource entries, which could block sync and publish tasks post-upgrade.

Also taught the migration to bulk-update the Task changes. In large installations, this should have a positive impact on the time it takes to apply the migration. #2101

Plugin API¶

No significant changes.

3.14.13 (2022-03-08)¶

REST API¶

Bugfixes¶

Taught PulpImport to retry in the event of a concurrency-collision on ContentArtifact. #2102
Fixed import/export of repositories with sub-content.

An example would be the sub-repositories in pulp_rpm DistributionTrees. #2192
touch() now uses standard Django instead of raw-sql to update. #2229
PulpImporter now unpacks into the task-worker's working directory rather than /tmp. Unpacking large files into /tmp could cause the operation to fail, or even cause stability issues for Pulp instance, due to running /tmp out of space. #2247

3.14.12 (2022-02-11)¶

REST API¶

Bugfixes¶

Fixed potential deadlock-window in touch() path. #2157
Fixed reporting tasks being canceled before being picked up by a worker as canceled instead of failed. #2183

Plugin API¶

No significant changes.

3.14.11 (2022-01-27)¶

REST API¶

Bugfixes¶

Fix import and export OOM error. #2072
Fixed downloader retry logic with partially written files. #2078
Fix content summary showing incorrect count after previous version deletion. #2084
Fixed issue with listing repository versions after deleting previous versions. #2085
Fixed file descriptior leak during upload. #2087
Added proper logging around certain ways a task could fail. #2093
Make checksum mismatches a retryable error. #2094
Fixed an edge case where the first (streamed) response from an repo synced as "on_demand" could be incorrect. #2119
Fixed bug where retries of partially downloaded files failed digest and size validation. #2135
Fixed a bug in pulpcore-worker, where wakeup and cancel signals could be lost due to a race condition. #2144
Fixed the calculation of response range headers in streaming answers from the content app. #2147

Plugin API¶

No significant changes.

3.14.10 (2022-01-07)¶

REST API¶

Bugfixes¶

Fixed PulpImport to correctly save relative to MEDIA_ROOT. (backported from #9660) #9662

Plugin API¶

No significant changes.

3.14.9 (2021-11-05)¶

REST API¶

Bugfixes¶

Fixed a bug where the /pulp/content/ page would return a 500 error after the database connection was closed due to a network problem or a database restart. #9515
Fixed bug where chunked uploads were being assembled in /tmp. #9556

Plugin API¶

No significant changes.

3.14.8 (2021-10-06)¶

REST API¶

Bugfixes¶

Improved messaging around timeout requests. (Backported from #9301). #9491

Plugin API¶

No significant changes.

3.14.7 (2021-09-29)¶

REST API¶

Bugfixes¶

Added a periodical cleanup to the pulpcore-worker class to keep the Worker table clean. (backported from #8931) #9462
Ordered several ContentStages paths to fix deadlocks in high-concurrency scenarios. (backported from #8750) #9379
Fixed an issue where on_demand content might not be downloaded properly if the remote URL was changed (even if re-synced). (backported from #9395) #9400
Fixed the repository modify endpoint performance problems. (backported from #9266) #9401
Taught a remote-artifact error path to not assume 'filename' was valid for all content. (backported from #9427) #9440
Taught several more codepaths to order-before-update to avoid deadlocks. (backported from #9441) #9445
Changed the pulpcore-worker to mark abandoned tasks as "failed" instead of "canceled". (backported from #9247) #9453

Plugin API¶

No significant changes.

3.14.6 (2021-09-02)¶

REST API¶

Bugfixes¶

Stop using insecure hash function blake2s for calculating 64 bit lock identifier from uuid. (backported from #9249) #9288
Fixed a bug where pulpcore-content decompressed data while incorrectly advertising to clients it was still compressed via the Content-Encoding: gzip header. (backported from #9213) #9325
Fixed bug where some Openshift environments could not start workers due to a strange Python runtime import issue. (backported from #9338) #9339

Plugin API¶

No significant changes.

3.14.5 (2021-08-24)¶

REST API¶

Bugfixes¶

Content app now properly sets Content-Type header for artifacts being served from S3 (backported from #9216) #9244
Artifacts are now being properly updated for Content after switching from 'on_demand' to 'immediate'. (backported from #9101) #9261
Fixed repository sync performance regression introduced in pulpcore 3.14. (backported from #9243) #9264
Fixed another occurence of the HTTP 500 error and connection already closed in the logs while accessing content. (backported from #9275) #9282

Misc¶

#9265

Plugin API¶

Misc¶

#9268, #9273

3.14.4 (2021-08-10)¶

REST API¶

Bugfixes¶

Unpublished content can no longer be accessed from content app if publication based-plugin has defined their distributions as publication serving (backported from #8870) #9126
In stages-pipeline and new-version sanity-checks, added full error-info on path-problems. (backported from #8133) #9130
Move files to artifact storage only when they originate from WORKING_DIRECTORY. Copy files from all other sources. (backported from #9146) #9202

Misc¶

#9179

Plugin API¶

Features¶

Distribution model has a new boolean class variable SERVE_FROM_PUBLICATION for plugins to declare whether their distributions serve from publications or directly from repository versions (backported from #8870) #9126

Bugfixes¶

Added kwarg to RemoteArtifactSaver init to allow enabling handling of rare error edge-case.

fix_mismatched_remote_artifacts=True enables workaround for a failure-scenario that (so far) is only encountered by pulp_rpm. Current behavior is the default. (backported from #8133) #9130

3.14.3 (2021-07-23)¶

REST API¶

Bugfixes¶

Fixed improper validation of remotes' URLs. (backported from #9080) #9083
Set Redis connection information in status to null unless it's used. Redis is needed for RQ tasking or content caching. (backported from #9070) #9085
Fixed signal handling to properly kill a task when double ctrl-c is used to shut down a worker fast. (backported from #8986) #9086
Improved disk usage during the synchronization. (backported from #8295) #9103
Fixed a bug where on-demand downloads would fill up /var/run/ by not deleting downloaded files. (backported from #9000) #9110
Fixed a bug, where new tasks were assigned to dead workers. (backported from #8779) #9116

Plugin API¶

No significant changes.

3.14.2 (2021-07-13)¶

REST API¶

Bugfixes¶

Fixed bug where content app would not respond to Range HTTP Header in requests when remote.policy was either on_demand or streamed. For example this request is used by Anaconda clients. (backported from #8865) #9057
Fixed a bug that caused a serializer to ignore form data for pulp_labels. (backported from #8954) #9058
Fixed the behavior of setting "repository" on a distribution for publication-based plugins. (backported from #9039) #9059
Use proxy auth from Remote config to download content from a remote repository. (backported from #9024) #9068
Fixed server error when accessing invalid files from content app base directory (backported from #9074) #9077

Misc¶

#9063

Plugin API¶

No significant changes.

3.14.1 (2021-07-07)¶

REST API¶

Bugfixes¶

Fixed a regression preventing syncs from file:// urls. (backported from #9003) #9015
Removed ambiguity from the OpenAPI schema for Exports. The exported_resources are now a list of URI strings. (backported from #9008) #9025

Plugin API¶

No significant changes.

3.14.0 (2021-07-01)¶

REST API¶

Features¶

Introduce new worker style. (tech-preview) #8501
Added new endpoint /pulp/api/v3/orphans/cleanup/. When called with POST and no parameters it is equivalent to calling DELETE /pulp/api/v3/orphans/. Additionally the optional parameter content_hrefs can be specified and must contain a list of content hrefs. When content_hrefs is specified, only those content units will be considered to be removed by orphan cleanup. #8658
Content app responses are now smartly cached in Redis. #8805
Downloads from remote sources will now be retried on more kinds of errors, such as HTTP 500 or socket errors. #8881
Add a correlation id filter to the task list endpoint. #8891
Where before download_concurrency would previously be set to a default value upon creation, it will now be set NULL (but a default value will still be used). #8897
Added graceful shutdown to pulpcore workers. #8930
Activate the new task worker type by default.

Warning

If you intend to stick with the old tasking system, you should configure the USE_NEW_WORKER_TYPE setting to false before upgrade

#8948

Bugfixes¶

Fixed race condition where a task could clean up reserved resources shared with another task. #8637
Altered redirect URL escaping, preventing invalidation of signed URLs for artifacts using cloud storage. #8670
Add an update row lock on in task dispatching for ReservedResource to prevent a race where an object was deleted that was supposed to be reused. This prevents a condition where tasks ended up in waiting state forever. #8708
Retry downloads on ClientConnectorSSLError, which appears to be spuriously returned by some CDNs. #8867
Fixed OpenAPI schema tag generation for resources that are nested more than 2 levels.

This change is most evident in client libraries generated from the OpenAPI schema.

Prior to this change, the API client for a resource located at [/api/v3/pulp/exporters/core/pulp//exports/]{.title-ref} was named ExportersCoreExportsApi.

After this change, the API client for a resource located at [/api/v3/pulp/exporters/core/pulp//exports/]{.title-ref} is named ExportersPulpExportsApi. #8868
Fixed request schema for /pulp/api/v3/repair/, which did identify any arguments. This also fixes the bindings. #8869
Update default access policies in the database if they were unmodified by the administrator. #8883
Pinning to psycopg2 < 2.9 as psycopg 2.9 doesn't work with django 2.2. More info at https://github.com/django/django/commit/837ffcfa681d0f65f444d881ee3d69aec23770be. #8926
Fixed bug where artifacts and content were not always saved in Pulp with each on_demand request serviced by content app. #8980

Improved Documentation¶

Fixed a number of link-problems in the installation/ section of docs. #6837
Added a troubleshooting section to the docs explaining how to find stuck tasks. #8774
Moved existing basic auth docs to a new top-level section named Authentication. #8800
Moved Webserver Authentication docs under the top-level Authentication section. #8801
Provide instructions to use Keycloak authenication using Python Social Aauth #8803
Updated the docs.pulpproject.org to provide some immediate direction for better user orientation. #8946
Separated hardware and Filesystem information from the Architecture section and added them to the Installation section. #8947
Added sub-headings and simplified language of Pulp concept section. #8949

Deprecations¶

Deprecated the DELETE /pulp/api/v3/orphans/ call. Instead use the POST /pulp/api/v3/orphans/cleanup/ call. #8876

Misc¶

#8821, #8827, #8975

Plugin API¶

Features¶

Added the pulpcore.plugin.viewsets.DistributionFilter. This should be used instead of pulpcore.plugin.viewsets.NewDistributionFilter. #8480
Added user_hidden field to Repository to hide repositories from users. #8487
Added a timestamp_of_interest field to Content and Artifacts. This field can be updated by calling a new method touch() on Artifacts and Content. Plugin writers should call this method whenever they deal with Content or Artifacts. For example, this includes places where Content is uploaded or added to Repository Versions. This will prevent Content and Artifacts from being cleaned up when orphan cleanup becomes a non-blocking task in pulpcore 3.15. #8823
Exposed AsyncUpdateMixin through pulpcore.plugin.viewsets. #8844
Added a field DEFAULT_MAX_RETRIES to the Remote base class - plugin writers can override the default number of retries attempted when file downloads failed for each type of remote. The default value is 3. #8881
Added a field DEFAULT_DOWNLOAD_CONCURRENCY to the Remote base class - plugin writers can override the number of concurrent downloads for each type of remote. The default value is 10. #8897

Bugfixes¶

Fixed OpenAPI schema tag generation for resources that are nested more than 2 levels.

This change is most evident in client libraries generated from the OpenAPI schema.

Prior to this change, the API client for a resource located at [/api/v3/pulp/exporters/core/pulp//exports/]{.title-ref} was named ExportersCoreExportsApi.

After this change, the API client for a resource located at [/api/v3/pulp/exporters/core/pulp//exports/]{.title-ref} is named ExportersPulpExportsApi. #8868

Removals¶

The usage of non-JSON serializable types of args and kwargs to tasks is no longer supported. uuid.UUID objects however will silently be converted to str. #8501
Removed the versions_containing_content method from the pulpcore.plugin.models.RepositoryVersion object. Instead use RepositoryVersion.objects.with_content(). #8729 <https://pulp.plan.io/issues/8729>`__
Removed pulpcore.plugin.stages.ContentUnassociation from the plugin API. #8827

Deprecations¶

The pulpcore.plugin.viewsets.NewDistributionFilter is deprecated and will be removed from a future release. Instead use pulpcore.plugin.viewsets.DistributionFilter. #8480
Deprecate the use of the reserved_resources_record__resource in favor of reserved_resources_record__contains. Tentative removal release is pulpcore==3.15. #8501
Plugin writers who create custom downloaders by subclassing HttpDownloader no longer need to wrap the _run() method with a backoff decorator. Consequntly the http_giveup handler the sake of the backoff decorator is no longer needed and has been deprecated. It is likely to be removed in pulpcore 3.15. #8881

3.13.0 (2021-05-25)¶

REST API¶

Features¶

Added two views to identify content which belongs to repository_version or publication. #4832
Added repository field to repository version endpoints. #6068
Added ability for users to limit how many repo versions Pulp retains by setting retained_versions on repository. #8368
Added the add-signing-service management command. Notice that it is still in tech-preview and can change without further notice. #8609
Added a pulpcore-worker entrypoint to simplify and unify the worker command. #8721
Content app auto-distributes latest publication if distribution's repository field is set #8760

Bugfixes¶

Fixed cleanup of UploadChunks when their corresponding Upload is deleted. #7316
Fixed an issue that caused the request's context to be ignored in the serializers. #8396
Fixed missing REDIS_SSL parameter in RQ config. #8525
Fixed bug where using forms submissions to create resources (e.g. Remotes) raised exception about the format of pulp_labels. #8541
Fixed bug where publications sometimes fail with the error '[Errno 39] Directory not empty'. #8595
Handled a tasking race condition where cleaning up resource reservations sometimes raised an IntegrityError. #8603
Fixed on-demand sync/migration of repositories that don't have sha256 checksums. #8625
Taught pulp-export to validate chunk-size to be <= 1TB. #8628
Addressed a race-condition in PulpImport that could fail with unique-constraint violations. #8633
Content app now properly lists all distributions present #8636
Fixed ability to specify custom headers on a Remote. #8689
Fixed compatibility with Django 2.2 LTS. Pulp now requires Django~=2.2.23 #8691
Skip allowed content checks on collectstatic #8711
Fixed a bug in the retained versions code where content wasn't being properly moved to newer repo versions when old versions were cleaned up. #8793

Improved Documentation¶

Added docs on how to list the effective settings using dynaconf list. #6235
Added anti-instructions, that users should never run pulpcore-manager makemigrations[, but file a bug instead. ]{.title-ref}#6703 <https://pulp.plan.io/issues/6703>`__
Clarified repositories are typed in concepts page #6990
Added UTF-8 character set encoding as a requirement for PostgreSQL #7019
Fixed typo s/comtrol/control #7715
Removed the PUP references from the docs. #7747
Updated plugin writers' guide to not use settings directly in the model fields. #7776
Make the reference to the Pulp installer documentation more explicit. #8477
Removed example Ansible installer playbook from the pulpcore docs so that Pulp users would have a single source of truth in the pulp-installer docs. #8550
Added security disclosures ref to homepage #8584
Add sequential steps for storage docs #8597
Updated signing service workflow. Removed old deprecation warning. #8609
Add an example of how to specify an array value and a dict key in the auth methods section #8668
Fixed docs build errors reported by autodoc. #8784

Misc¶

#8524, #8656, #8761

Plugin API¶

Features¶

Undeprecated the use of uuid.UUID in task arguments. With this, primary keys do not need to be explicitely cast to str. #8723

Bugfixes¶

Added RepositoryVersionRelatedField to the plugin API. #8578
Fixed auto-distribute w/ retained_versions tests #8792

Removals¶

Removed deprecated pulpcore.plugin.tasking.WorkingDirectory. #8354
Removed BaseDistribution, PublicationDistribution, and RepositoryVersionDistribution models. Removed BaseDistributionSerializer, PublicationDistributionSerializer, and RepositoryVersionDistributionSerializer serializers. Removed BaseDistributionViewSet and DistributionFilter. #8386
Removed pulpcore.plugin.tasking.enqueue_with_reservation. #8497

Deprecations¶

RepositoryVersion method "versions_containing_content" is deprecated now. #4832
The usage of the pulpcore.plugin.stages.ContentUnassociation stage has been deprecated. A future update will remove it from the plugin API. #8635

3.12.2 (2021-04-29)¶

REST API¶

Bugfixes¶

Backported a fix for on-demand sync/migration of repositories that don't have sha256 checksums. #8652

Plugin API¶

No significant changes.

3.12.1 (2021-04-20)¶

REST API¶

No significant changes.

Plugin API¶

Bugfixes¶

Added RepositoryVersionRelatedField to the plugin API. #8580

3.12.0 (2021-04-08)¶

REST API¶

Features¶

Add support for automatic publishing and distributing. #7626
Add a warning at startup time if there are remote artifacts with checksums but no allowed checksums. #7985
Added support in content app for properly handling unknown or forbidden digest errors. #7989
Added sync check that raises error when only forbidden checksums are found for on-demand content. #8423
Added ability for users to delete repo version 0 as long as they still have at least one repo version for their repo. #8454

Bugfixes¶

Added asynchronous tasking to the Update and Delete endpoints of PulpExporter to provide proper locking on resources. #7438
Fixed a scenario where canceled tasks could be marked failed. #7980
Taught PulpImport correct way to find and import RepositoryVersions. Previous implementation only worked for RepositoryVersions that were the 'current' version of the exported Repository. #8116
Fixed a race condition that sometimes surfaced during handling of reserved resources. #8352
Made digest and size sync erros more helpful by logging url of the requested files. #8357
Fixed artifact-stage to handle an edge-case when multiple multi-artifact content, from different remotes, is in a single batch. #8377
Fixed Azure artifacts download. #8427
Fixed bug during sync where a unique constraint violation for Content would raise an "X matching query does not exist" error. #8430
Fix artifact checksum check to not check on-demand content. #8445
Fixed a bug where the existence of PublishedMetadata caused LookupError when querying /pulp/api/v3/content/ #8447
Distributions are now viewable again at the base url of the content app #8475
Fixed a path in artifact_stages that could lead to sync-failures in pulp_container. #8489

Improved Documentation¶

Update docs with guide how to change 'ALLOWED_CONTENT_CHECKSUMS' setting using 'pulpcore-manager handle-artifact-checksums --report' if needed. #8325

Removals¶

The Update and Delete endpoints of Exporters changed to now return 202 with tasks. #7438
Deprecation warnings are now being logged by default if the log level includes WARNING. This can be disabled by adjusting the log level of pulpcore.deprecation. See the deprecation docs for more information. #8499

Misc¶

#8450

Plugin API¶

Features¶

Added a new callback method to Repository named on_new_version(), which runs when a new repository version has been created. This can be used for e.g. automatically publishing or distributing a new repository version after it has been created. #7626
Added url as optional argument to DigestValidationError and SizeValidationError exceptions to log urls in the exception message. #8357
Added the following new objects related to a new Distribution MasterModel:
- pulpcore.plugin.models.Distribution - A new MasterModel Distribution which replaces the pulpcore.plugin.models.BaseDistribution. This now contains the repository, repository_version, and publication fields on the MasterModel instead of on the detail models as was done with pulpcore.plugin.models.BaseDistribution.
- pulpcore.plugin.serializer.DistributionSerializer - A serializer plugin writers should use with the new pulpcore.plugin.models.Distribution.
- pulpcore.plugin.viewset.DistributionViewSet - The viewset that replaces the deprecated pulpcore.plugin.viewset.BaseDistributionViewSet.
- pulpcore.plugin.viewset.NewDistributionFilter - The filter that pairs with the Distribution model. #8384
Added checksum type enforcement to pulpcore.plugin.download.BaseDownloader. #8435
Adds the pulpcore.plugin.tasking.dispatch interface which replaces the pulpcore.plugin.tasking.enqueue_with_reservation interface. It is the same except:
- It returns a pulpcore.plugin.models.Task instead of an RQ object
- It does not support the options keyword argument
Additionally the pulpcore.plugin.viewsets.OperationPostponedResponse was updated to support both the dispatch and enqueue_with_reservation interfaces. #8496

Bugfixes¶

Allow plugins to unset the queryset_filtering_required_permission attribute in NamedModelViewSet. #8438

Removals¶

Removed checksum type filtering from pulpcore.plugin.models.Remote.get_downloader and pulpcore.plugin.stages.DeclarativeArtifact.download. #8435

Deprecations¶

The following objects were deprecated:
- pulpcore.plugin.models.BaseDistribution -- Instead use pulpcore.plugin.models.Distribution.
- pulpcore.plugin.viewset.BaseDistributionViewSet -- Instead use pulpcore.plugin.viewset.DistributionViewSet.
- pulpcore.plugin.serializer.BaseDistributionSerializer -- Instead use pulpcore.plugin.serializer.DistributionSerializer.
- pulpcore.plugin.serializer.PublicationDistributionSerializer -- Instead use define the publication field directly on your detail distribution object. See the docstring for pulpcore.plugin.serializer.DistributionSerializer for an example.
- pulpcore.plugin.serializer.RepositoryVersionDistributionSerializer -- Instead use define the repository_version field directly on your detail distribution object. See the docstring for pulpcore.plugin.serializer.DistributionSerializer for an example.
- pulpcore.plugin.viewset.DistributionFilter -- Instead use pulpcore.plugin.viewset.NewDistributionFilter.
Note

You will have to define a migration to move your data from pulpcore.plugin.models.BaseDistribution to pulpcore.plugin.models.Distribution. See the pulp_file migration 0009 as a reference example.

#8385
Deprecated the pulpcore.plugin.tasking.enqueue_with_reservation. Instead use the pulpcore.plugin.tasking.dispatch interface. #8496
The usage of non-JSON serializable types of args and kwargs to tasks is deprecated. Future releases of pulpcore may discontinue accepting complex argument types. Note, UUID objects are not JSON serializable. A deprecated warning is logged if a non-JSON serializable is used. #8505

3.11.2 (2021-05-25)¶

REST API¶

Bugfixes¶

Skip allowed content checks on collectstatic (backported from #8711) #8712
Fixed cleanup of UploadChunks when their corresponding Upload is deleted. (backported from #7316) #8757
Fixed compatibility with Django 2.2 LTS. Pulp now requires Django~=2.2.23 (backported from #8691) #8758
Pinned click~=7.1.2 to ensure RQ is compatible with it. #8767

Plugin API¶

No significant changes.

3.11.1 (2021-04-29)¶

REST API¶

Bugfixes¶

Fixed a race condition that sometimes surfaced during handling of reserved resources. #8632
Handled a tasking race condition where cleaning up resource reservations sometimes raised an IntegrityError. #8648

Plugin API¶

Bugfixes¶

Allow plugins to unset the queryset_filtering_required_permission attribute in NamedModelViewSet. #8444

3.11.0 (2021-03-15)¶

REST API¶

Features¶

Raise error when syncing content with a checksum not included in ALLOWED_CONTENT_CHECKSUMS. #7854
User can evaluate how many content units are affected with checksum type change with 'pulpcore-manager handle-artifact-checksums --report'. #7986
The fields proxy_username and proxy_password have been added to remotes. Credentials can no longer be specified as part of the proxy_url. A data migration will move the proxy auth information on existing remotes to the new fields. #8167
Added the WORKER_TTL setting, that specifies the interval a worker is considered missing after its last heartbeat. #8291
Due to the removal of md5 and sha1 from the ALLOWED_CONTENT_CHECKSUMS setting, every system that had any Artifacts synced in in prior to 3.11 will have to run the pulpcore-manager handle-content-checksums command. A data migration is provided with 3.11 that will run this automatically as part of the pulpcore-manager migrate command all upgrades must run anyway. #8322

Bugfixes¶

Fixed a bug experienced by the migration plugin where all content objects are assumed to have a remote associated with them. #7876
Restored inadvertently-changed content-guards API to its correct endpoint.

In the process of adding generic list-endpoints, the /pulp/api/v3/contentguards API was inadvertently rehomed to /pulp/api/v3/content_guards. This change restores it to its published value. #8283
Added headers field to the list of fields in the RemoteSerializer base class and marked it optional to make it accessible via the REST api. #8330
Fixed AccessPolicy AttributeError. #8395

Improved Documentation¶

Removed correlation id feature from tech preview. #7927
Removed 'tech preview' label from handle-artifact-checksums command.

handle-artifact-checksums is now a fully-supported part of Pulp3. #7928
Added a warning banner to the ALLOWED_CONTENT_CHECKSUMS setting section indicating the setting is not fully enforcing in pulpcore code and various plugins. #8342

Removals¶

The component field of the versions section of the status API /pulp/api/v3/status/ now lists the Django app name, not the Python package name. Similarly the OpenAPI schema at /pulp/api/v3 does also. #8198
Removed sensitive fields username, password, and client_key from Remote responses. These fields can still be set and updated but will no longer be readable. #8202
Adjusted the ALLOWED_CONTENT_CHECKSUMS setting to remove md5 and sha1 since they are insecure. Now, by default, the ALLOWED_CONTENT_CHECKSUMS contain sha224, sha256, sha384, and sha512. #8246

Misc¶

#7797, #7984, #8315

Plugin API¶

Features¶

Allow developers to use more than one WorkingDirectory() within a task, including nested calls. Tasks will also now use a temporary working directory by default. #7815
Added the pulpcore.app.pulp_hashlib module which provides the new function and ensures only allowed hashers listed in ALLOWED_CONTENT_CHECKSUMS can be instantiated. Plugin writers should use this instead of hashlib.new to generate checksum hashers. #7984
Add a get_content method to pulpcore.plugin.models.RepositoryVersion that accepts a queryset and returns a list of content in that repository using the given queryset. This allows for specific content type to be returned by executing repo_version.get_content(content_qs=MyContentType.objects). #8375

Improved Documentation¶

Added docs identifying plugin writers to use the pulpcore.app.pulp_hashlib module which provides the new function and ensures only allowed hashers can be instantiated. This should be used in place of hashlib.new. #7984
The use of tempdir.TemporaryDirectory in tasks has been documented. #8231

Removals¶

Adjusted the ALLOWED_CONTENT_CHECKSUMS setting to remove md5 and sha1 since they are insecure. Now, by default, the ALLOWED_CONTENT_CHECKSUMS contain sha224, sha256, sha384, and sha512. #8246
Removed unused get_plugin_storage_path method. #8343
It is not longer possible to address AccessPolicy via the viewset's classname. Viewset's urlpattern should be used instead. #8397
Removed deprecated key field returned by the signing service. Plugin writers must now refer directly to the public_key field on the signing service object. #8398

Deprecations¶

pulpcore.plugin.tasking.WorkingDirectory has been deprecated. #8231

3.10.0 (2021-02-04)¶

REST API¶

Features¶

Change the default deployment layout

This changes the default deployment layout. The main change is that MEDIA_ROOT gets its own directory. This allows limiting the file permissions in a shared Pulp 2 + Pulp 3 deployment and the SELinux file contexts. Another benefit is compatibility with django_extensions' unreferenced_files command which lists all files in MEDIA_ROOT that are not in the database.

Other paths are kept on the same absolute paths. The documentation is updated to show the latest best practices. #7178
Added general endpoints to list Content, ContentGuards, and Repositories. #7204
Added /importers/core/pulp/import-check/ to validate import-parameters. #7549
Added a new field called public_key to SigningService. This field preserves the value of the public key. In addition to that, the field fingerprint was introduced as well. This field identifies the public key. #7700
Added possibility to filter users and groups by various fields. #7975
Added pulp_labels to allow users to add key/value data to objects. #8065
Added pulp_label_select filter to allow users to filter by labels. #8067
Added optional headers field to the aiohttp ClientSession. #8083
Allow querying names on the api using name__icontains, name__contains and name__startswith query parameters. #8094
Added RBAC to the endpoint for managing groups. #8159
Added RBAC to the endpoint for managing group users. #8160
Added the AccessPolicy.customized field which if True indicates a user has modified the default AccessPolicy. #8182
Added filtering for access policies. #8189
As an authenticated user I can create and view artifacts. #8193

Bugfixes¶

Fixed bug where duplicate artifact error message was nondeterministic in displaying different error messages with different checksum types. Also, updated duplicate artifact error message to be more descriptive. #3387
Fixed Pulp import/export bug that occurs when sha384 or sha512 is not in ALLOWED_CONTENT_CHECKSUMS. #7836
X-CSRFToken is not sent through ajax requests (PUT) in api.html. Fixed by setting the right value in the JS code. #7888
Provide a mechanism to automatically resolve issues and prevent deadlocks when Redis experiences data loss (such as a restart). #7912
Silence unnecessary log messages from django_guid which were spamming up the logs. #7982
Changed the default permission class to IsAdminUser to protect endpoints not yet guarded by an access policy from users without permission. #8018
Fixed apidoc bug, where model and object permissions on groups overlapped. #8033
Fixed the viewset_name used by access policy for the cases when parent_viewset is involved. #8152
Made the viewset_name property of access policies read only. #8185

Improved Documentation¶

Added a description of the common filesystem layout in the deployment section. #7750
Updated the reference to the new location of pulplift at the installer repository in the development section. #7878
Add links to plugin docs into docs.pulpproject.org. #8131
Added documentation for labels. #8157

Misc¶

#8203

Plugin API¶

Features¶

Add rate_limit option to Remote #7965
Made DistributionFilter accessible to plugin writers. #8059
Adding Label and LabelSerializer to the plugin api. #8065
Added LabelSelectFilter to filter resources by labels. #8067
Added ReadOnlyRepositoryViewset to the plugin API. #8103
Added NAME_FILTER_OPTIONS to the plugin API to gain more consistency across plugins when filter by name or similar CharFields. #8117
Added has_repo_attr_obj_perms and has_repo_attr_model_or_obj_perms to the global access checks available to all plugins to use. #8161

Removals¶

Plugins are required to define a version attribute on their subclass of PulpPluginAppConfig. Starting with pulpcore==3.10, if undefined while Pulp loads, Pulp will refuse to start. #7930
Changed the default permission class to from IsAuthenticated to IsAdminUser. Any endpoints that should be accessible by all known to the system users need to specify the permission_classes accordingly. #8018
pulpcore.plugin.models.UnsupportedDigestValidationError has been removed. Plugins should look for this at pulpcore.plugin.exceptions.UnsupportedDigestValidationError instead. #8169

Deprecations¶

Access to the path of the public key of a signing service was deprecated. The value of the public key is now expected to be saved in the model instance as SigningService.public_key. #7700
The pulpcore.plugin.storage.get_plugin_storage_path() method has been deprecated. #7935

3.9.1 (2021-01-21)¶

REST API¶

Removals¶

CHUNKED_UPLOAD_DIR was converted to a relative path inside MEDIA_ROOT. #8099

Plugin API¶

No significant changes.

3.9.0 (2020-12-07)¶

REST API¶

Features¶

Made uploaded chunks to be stored as separate files in the default storage. This feature removes the need for a share storage of pulp api nodes, as the chunks are now stored individually in the shared storage and are therefore accessible by all nodes. #4498
Add support for logging messages with a correlation id that can either be autogenerated or passed in with a Correlation-ID header. This feature is provided as a tech preview in pulpcore 3.9. #4689
Added progress reporting for pulp imports. #6559
Exposed aiohttp.ClientTimeout fields in Remote as connect_timeout, sock_connect_timeout, sock_read_timeout, and total_timeout.

This replaces the previous hard-coded 600 second timeout for sock_connect and sock_read, giving per-Remote control of all four ClientTimeout fields to the user. #7201
Enabled users to add checksums to ALLOWED_CONTENT_CHECKSUMS by allowing them to populate checksums with handle-artifact-checksums command. #7561
Added version information to api docs. #7569
Made signing services to be immutable. This requires content signers to create a new signing service explicitly when a change occurs. #7701
Added support for repairing Pulp by detecting and redownloading missing or corrupted artifact files. Sending a POST request to /pulp/api/v3/repair/ will trigger a task that scans all artifacts for missing and corrupted files in Pulp storage, and will attempt to redownload them from the original remote. Specifying verify_checksums=False when POSTing to the same endpoint will skip checking the hashes of the files (corruption detection) and will instead just look for missing files.

The verify_checksums POST parameter was added to the existing "repository version repair" endpoint as well. #7755
Added check to prevent Pulp to start if there are Artifacts with forbidden checksums. #7914

Bugfixes¶

Fixed a serious bug data integrity bug where some Artifact files could be silently deleted from storage in specific circumstances. #7676
Moved the initial creation of access_policies to post_migrate signal. This enforces their existance both with migrate and flush. #7710
Fixed incremental export to happen if start_version provided, even if last_export is null. #7716
Fixed a file descriptor leak during repository version repair operations. #7735
Fixed bug where exporter directory existed and was writable but not owned by worker process and thus not chmod-able. #7829
Properly namespaced the viewset_name in AccessPolicy to avoid naming conflicts in plugins. #7845
Update jquery version from 3.3.1 to 3.5.1 in API.html template. It is the version provided by djangorestframework~=3.12.2 #7850
Prevented a Redis failure scenario from causing the tasking system to back up due to "tasking system locks" not being released, even on worker restart. #7907
Use subclassed plugin downloaders during the pulp repair. #7909

Improved Documentation¶

Added requirement to record a demo with PRs of substantial change. #7703
Removed outdated reference stating Pulp did not have an SELinux policy. #7793

Removals¶

The local file system directory used for uploaded chunks is specified by the setting CHUNKED_UPLOAD_DIR. Users are encouraged to remove all uncommitted uploaded files before applying this change. #4498

Misc¶

#7690, #7753, #7902, #7890

Plugin API¶

Features¶

Added pre_save hook to Artifact to enforce checksum rules implied by ALLOWED_CONTENT_CHECKSUMS. #7696
Enabled plugin writers to retrieve a request object from a serializer when look ups are performed from within the task serializer. #7718
Expose ProgressReportSerializer through pulpcore.plugin #7759
Allowed plugin writers to access the models Upload and UploadChunk #7833
Exposed pulpcore.plugin.constants.ALL_KNOWN_CONTENT_CHECKSUMS. #7897
Added UnsupportedDigestValidationError to pulpcore.plugins.exceptions. Going forward, plugin authors can expect to find all unique exceptions under pulpcore.plugin.exceptions. #7908

Deprecations¶

Plugins are encouraged to define a version attribute on their subclass of PulpPluginAppConfig. If undefined while Pulp loads a warning is now shown to encourage plugin writers to implement this attribute, which will be required starting in pulpcore==3.10. #6671
Using the ViewSet's classname to identify its AccessPolicy has been deprecated and is slated for removal in 3.10. Instead the urlpattern is supposed to be used.

Plugins with existing AccessPolicies should add a data migration to rename their AccessPolicies:

::

access_policy = AccessPolicy.get(viewset_name="MyViewSet") access_policy.viewset_name = "objectclass/myplugin/myclass" access_policy.save()

#7845
The pulpcore.plugin.models.UnsupportedDigestValidationError is being deprecated and will be removed in 3.10.

It can now be found at pulpcore.plugin.exceptions.UnsupportedDigestValidationError instead; please change any code that imports it to access it from its new location. #7908

3.8.1 (2020-10-30)¶

REST API¶

Bugfixes¶

Fixed a serious bug data integrity bug where some Artifact files could be silently deleted from storage in specific circumstances. (Backported from #7676) #7758

Plugin API¶

No significant changes.

3.8.0 (2020-10-20)¶

REST API¶

Features¶

Added check to prevent users from adding checksums to ALLOWED_CONTENT_CHECKSUMS if there are Artifacts without those checksums. #7487
Django admin site URL is configurable via ADMIN_SITE_URL settings parameter. #7637
Always set a default for DJANGO_SETTINGS_MODULE. This means the services files don't need to. #7720

Bugfixes¶

Fix a warning inappropriately logged when cancelling a task. #4559
When a task is canceled, we now set the state of all incomplete "progress reports" to canceled as well. #4921
Properly handle duplicate content during synchronization and migration from Pulp 2 to 3. #7147
Enable content streaming for RepositoryVersionDistribution #7568
Change dropped DRF filter to django urlize. #7634
Added some more files to MANIFEST.in. #7656
Updated dynaconf requirement to prevent use of older buggy versions. #7682

Improved Documentation¶

Updated examples of auto-distribution. #5247
Improved testing section in Pulp contributor docs. Mentioned prestart, pminio, pfixtures and phelp. #7475
Fix an erroneous API endpoint in the "upload and publish" workflow documentation. #7655
Documented that we don't support backporting migrations. #7657

Plugin API¶

Improved Documentation¶

Removed mentions of semver in the plugin API docs, and replaced them with a link to the deprecation policy where appropriate. #7555

3.7.9 (2021-11-30)¶

REST API¶

Bugfixes¶

Prevented a Redis failure scenario from causing the tasking system to back up due to "tasking system locks" not being released, even on worker restart. (backported from #7907) #9547
Prevent proxy credentials to be passed to aiohttp, so they no longer appear in stack traces. This is a rewritten backport of #8167. #9573

Plugin API¶

No significant changes.

3.7.8 (2021-08-24)¶

REST API¶

Bugfixes¶

In stages-pipeline and new-version sanity-checks, added full error-info on path-problems. (backported from #8133) #9227

Plugin API¶

Bugfixes¶

Added kwarg to RemoteArtifactSaver init to allow enabling handling of rare error edge-case.

fix_mismatched_remote_artifacts=True enables workaround for a failure-scenario that (so far) is only encountered by pulp_rpm. Current behavior is the default. (backported from #8133) #9227

3.7.7 (2021-07-26)¶

REST API¶

Bugfixes¶

Fixed a bug, where new tasks were assigned to dead workers. (backported from #8779) #9118

Plugin API¶

No significant changes.

3.7.6 (2021-04-29)¶

REST API¶

Bugfixes¶

Backported a fix for on-demand sync/migration of repositories that don't have sha256 checksums. #8651

Plugin API¶

No significant changes.

3.7.5 (2021-04-12)¶

REST API¶

Bugfixes¶

Backported fixes for artifact handling important for pulp-2to3-migration plugin use cases. #8485
Allowed to use PyYAML 5.4 which contains a patch for [CVE-2020-14343 <https://nvd.nist.gov/vuln/detail/CVE-2020-14343]{.title-ref}. #8540

Plugin API¶

No significant changes.

3.7.4 (2021-03-15)¶

REST API¶

Bugfixes¶

No longer load .env files. They are not used by Pulp but potentially can break the setup. #8373

Plugin API¶

No significant changes.

3.7.3 (2020-10-28)¶

REST API¶

Bugfixes¶

Fixed a serious bug data integrity bug where some Artifact files could be silently deleted from storage in specific circumstances. (Backported from #7676) #7757

Plugin API¶

No significant changes.

3.7.2 (2020-10-21)¶

REST API¶

Bugfixes¶

Properly handle duplicate content during synchronization and migration from Pulp 2 to 3. #7702
Fixed incremental export to happen if start_version provided, even if last_export is null. #7725

Plugin API¶

No significant changes.

3.7.1 (2020-09-29)¶

REST API¶

Bugfixes¶

Including functest_requirements.txt on MANIFEST.in #7610

Plugin API¶

No significant changes.

3.7.0 (2020-09-22)¶

REST API¶

Features¶

Added setting ALLOWED_CONTENT_CHECKSUMS to support limiting the checksum-algorithms Pulp uses. #5216
Added progress-reports to the PulpExport task. #6541
Improve performance and memory consumption of orphan cleanup. #6581
Extra require: s3, azure, prometheus and test #6844
Added the toc_info attribute with filename/sha256sum to PulpExport, to enable direct access to the export-TOC. #7221
Taught export-process to clean up broken files if the export fails. #7246
Added the django-cleanup handlers for removing files stored within FileField #7316
Added deprecations section to the changelog. #7415

Bugfixes¶

Address some problems with stuck tasks when connection to redis is interrupted. #6449
Fixed a bug where creating an incomplete repository version (via canceled or failed task) could cause future operations to fail. #6463
Added validation for unknown serializers' fields #7245
Fixed: PulpTemporaryFile stored in the wrong location #7319
Fixed an edge case where canceled tasks might sometimes be processed and marked completed. #7389
Fixed pulp-export scenario where specifying full= could fail silently. #7403
Fixed OpenAPI creation response status code to 201 #7444
The AccessPolicy.permissions_assignment can now be null, which some viewset endpoints may require. #7448
Taught export to insure export-dir was writeable by group as well as owner. #7459
Fixed orphan cleanup for subrepositories (e.g. an add-on repository in RPM distribution tree repository). #7460
Fixed issue with reserved resources not being displayed for waiting tasks. #7497
Fixed broken bindings resulting from drf-spectacular 0.9.13 release. #7510
Fix filesystem exports failing due to undefinied validate_path method. #7521
Fix a bug that prevented users from adding permissions for models have conflicting names across different django apps. #7541

Improved Documentation¶

Added pulp 2 obsolete concepts (consumers, applicability). #6255

Misc¶

#7508

Plugin API¶

Features¶

Enabled the automatic removal of files, which are stored in FileField, when a corresponding model's delete() method is invoked #7316
Add add_and_remove task to pulpcore.plugin.tasking #7351
Added deprecations section to the plugin api changelog. #7415

Bugfixes¶

The AccessPolicy.permissions_assignment can now be null, which some viewset endpoints may require. #7448

Improved Documentation¶

Added an example how to use a serializer to create validated objects. #5927
Document the URLField OpenAPI issue #6828
Added all exported models to the autogenerated API reference. #7045
Updated docs recommending plugins to rely on a 1-release deprecation process for backwards incompatible changes in the pulpcore.plugin. #7413
Adds plugin writer docs on how to ship snippets which override default webserver routes provided by the installer. #7471
Revises the "installation plugin custom tasks" documentation to reflect that plugin writers can contribute their custom installation needs directly to the installer. #7523

Misc¶

#7270

3.6.5 (2020-10-28)¶

REST API¶

Bugfixes¶

Fixed a bug where creating an incomplete repository version (via canceled or failed task) could cause future operations to fail. (Backported from #6463) #7737

Plugin API¶

No significant changes.

3.6.4 (2020-09-23)¶

REST API¶

Bugfixes¶

Fixed broken bindings resulting from drf-spectacular 0.9.13 release. #7510

Plugin API¶

No significant changes.

3.6.3 (2020-09-04)¶

REST API¶

Misc¶

#7450

Plugin API¶

No significant changes.

3.6.2 (2020-09-02)¶

REST API¶

No significant changes.

Plugin API¶

Bugfixes¶

Remove customized operation_id from OrphansView #7446

3.6.1 (2020-09-01)¶

REST API¶

Bugfixes¶

Fixing groups API validation #7329

Improved Documentation¶

Updated Pypi installation step. #6305
Added hardware requirements. #6856

Misc¶

#7229

Plugin API¶

Bugfixes¶

Fix custom operation_id's from OpenAPI #7341
OpenAPI: do not discard components without properties #7347

3.6.0 (2020-08-13)¶

REST API¶

Features¶

Added table-of-contents to export and gave import a toc= to find/reassemble pieces on import. #6737
Added ability to associate a Remote with a Repository so users no longer have to specify Remote when syncing. #7015
The /pulp/api/v3/access_policies/ endpoint is available for reading and modifying the AccessPolicy used for Role Based Access Control for all Pulp endpoints. This allows for complete customization of the Authorization policies.

NOTE: this endpoint is in tech-preview and may change in backwards incompatible ways in the future. #7160
The /pulp/api/v3/access_policies/ endpoint also includes a permissions_assignment section which customizes the permissions assigned to new objects. This allows for complete customization for how new objects work with custom define Authorization policies. #7210
The /pulp/api/v3/users/ endpoint is available for reading the Users, Group membership, and Permissions.

NOTE: this endpoint is in tech-preview and may change in backwards incompatible ways in the future. #7231
The /pulp/api/v3/groups/ endpoint is available for reading the Groups, membership, and Permissions.

NOTE: this endpoint is in tech-preview and may change in backwards incompatible ways in the future. #7232
The /pulp/api/v3/tasks/ endpoint now provides a user-isolation behavior for non-admin users. This policy is controllable at the /pulp/api/v3/access_policies/ endpoint.

NOTE: The user-isolation behavior is in "tech preview" and production systems are recommended to continue using the build-in admin user only. #7301
Extended endpoint /pulp/api/v3/groups/:pk/users to add and remove users from a group.

NOTE: this endpoint is in tech-preview and may change in backwards incompatible ways in the future. #7310
Extended endpoints /pulp/api/v3/groups/:pk/model_permissions and /pulp/api/v3/groups/:pk/object_permissions to add and remove permissions from a group.

NOTE: this endpoint is in tech-preview and may change in backwards incompatible ways in the future. #7311

Bugfixes¶

WorkerDirectory.delete() no longer recursively trys to delete itself when encountering a permission error #6504
Stopped preventing removal of PulpExport/Exporter when last-export existed. #6555
First time on demand content requests appear in the access log. #7002
Fixed denial of service caused by extra slashes in content urls. #7066
Set a default DJANGO_SETTINGS_MODULE env var in content app #7179
Added plugin namespace to openapi href identifier. #7209
By default, html in field descriptions filtered out in REST API docs unless 'include_html' is set. #7299
Fixed plugin filtering in bindings to work independently from "bindings" parameter. #7306

Improved Documentation¶

Made password variable consistent with Ansible installer example playbook #7065
Fixed various docs bugs in the pulpcore docs. #7090
Adds documentation about SSL configuration requirements for reverse proxies. #7285
Fixed REST API docs. #7292

Deprecations and Removals¶

Removed unnecessary fields from the import/export transfer. #6515
Upgrading the api documentation from OpenAPI v2 to OpenAPI v3.
- Methods signatures for bindings may change. #7108
Changed default download_concurrency on Remotes from 20 to 10 to avoid connection problems. Also updated existing Remotes with download_concurrency of 20 to 10. #7212

Misc¶

#6807, #7142, #7196

Plugin API¶

Features¶

Adding PulpTemporaryFile for handling temporary files between the viewset and triggered tasks #6749
RepositorySyncURLSerializer will now check remote on the repository before it raises an exception if the remote param is not set. #7015
Added a hook on Repository called artifacts_for_version() that plugins can override to modify the logic behind RepositoryVersion.artifacts. For now, this is used when exporting artifacts. #7021
Enabling plugin writers to have more control on HttpDownloader response codes 400+ by subclassing HttpDownloader and overwriting raise_for_status method #7117
BaseModel now inherits from LifecycleModel provided by django-lifecycle allowing any subclass to also use it instead of signals. #7151
A new pulpcore.plugin.models.AutoDeleteObjPermsMixin object can be added to models to automatically delete all user and group permissions for an object just before the object is deleted. This provides an easy cleanup mechanism and can be added to models as a mixin. Note that your model must support django-lifecycle to use this mixin. #7157
A new model pulpcore.plugin.models.AccessPolicy is available to store AccessPolicy statements in the database. The model's statements field stores the list of policy statements as a JSON field. The name field stores the name of the Viewset the AccessPolicy is protecting.

Additionally, the pulpcore.plugin.access_policy.AccessPolicyFromDB is a drf-access-policy which viewsets can use to protect their viewsets with. See the viewset_enforcement for more information on this. #7158
Adds the TaskViewSet and TaskGroupViewSet objects to the plugin api. #7187
Enabled plugin writers to create immutable repository ViewSets #7191
A new pulpcore.plugin.models.AutoAddObjPermsMixin object can be added to models to automatically add permissions for an object just after the object is created. This is controlled by data saved in the permissions_assignment attribute of the pulpcore.plugin.models.AccessPolicy allowing users to control what permissions are created. Note that your model must support django-lifecycle to use this mixin. #7210
Added ability for plugin writers to set a content_mapping property on content resources to provide a custom mapping of content to repositories. #7252
Automatically excluding pulp_id, pulp_created, and pulp_last_updated for QueryModelResources. #7277
Viewsets that subclass pulpcore.plugin.viewsets.NamedModelViewSet can declare the queryset_filtering_required_permission class attribute naming the permission required to view an object. See the queryset_scoping documentation for more information. ]{.title-ref}#7300 <https://pulp.plan.io/issues/7300>`__

Bugfixes¶

Making operation_id unique #7233
Making ReDoc OpenAPI summary human readable #7237
OpenAPI schema generation from CLI #7258
Allow pulpcore.plugin.models.AutoAddObjPermsMixin.add_for_object_creator to skip assignment of permissions if there is no known user. This allows endpoints that do not use authorization but still create objects in the DB to execute without error. #7312

Improved Documentation¶

Omit a view/viewset from the OpenAPI schema #7133
Added plugin writer docs for BaseContentResource. #7296

Deprecations and Removals¶

Newlines in certificate string (ca_cert, client_cert, client_key) on Remotes are not required to be escaped. #6735
Replaced drf-yasg with drf-spectacular.
- This updates the api documentation to openapi v3.
- Plugins may require changes.
- Methods signatures for bindings may change. #7108
Moving containers from pulpcore to pulp-operator #7171

3.5.0 (2020-07-08)¶

REST API¶

Features¶

Added start_versions= to export to allow for arbitrary incremental exports. #6763
Added GroupProgressReport to track progress in a TaskGroup. #6858
Provide a user agent string with all aiohttp requests by default. #6954

Bugfixes¶

Fixed 'integer out of range' error during sync by changing RemoteArtifact size field to BigIntegerField. #6717
Added a more descriptive error message that is shown when CONTENT_ORIGIN is not properly configured #6771
Including requirements.txt on MANIFEST.in #6888
Corrected a number of filters to be django-filter-2.3.0-compliant. #6915
Locked Content table to prevent import-deadlock. #7073

Improved Documentation¶

Updating installation docs #6836
Fixed a number of typos in the import/export workflow docs. #6919
Fixed docs which claim that admin user has a default password. #6992
Fixed broken link to content plugins web page #7017

Deprecations and Removals¶

Removes the Write models from the OpenAPI schema. Brings back the models that were accidentally removed from the OpenAPI schema in 3.4.0 release. #7087

Misc¶

#6483, #6925

Plugin API¶

Features¶

Views can specify the tag name with pulp_tag_name #6832
Added GroupProgressReport to track progress in a TaskGroup. #6858
Exported the symbols serializers.SingleContentArtifactField and files.PulpTemporaryUploadedFile. #7088

3.4.1 (2020-06-03)¶

REST API¶

Bugfixes¶

Including requirements.txt on MANIFEST.in #6888

Plugin API¶

No significant changes.

3.4.0 (2020-05-27)¶

REST API¶

Features¶

Implemented incremental-exporting for PulpExport. #6136
Added support for S3 and other non-filesystem storage options to pulp import/export functionality. #6456
Optimized imports by having repository versions processed using child tasks. #6484
Added repository type check during Pulp imports. #6532
Added version checking to import process. #6558
Taught PulpExport to export by RepositoryVersions if specified. #6566
Task groups now have an 'all_tasks_dispatched' field which denotes that no more tasks will spawn as part of this group. #6591
Taught export how to split export-file into chunk_size bytes. #6736

Bugfixes¶

Remote fields username and password show up in: REST docs, API responses, and are available in the bindings. #6346
Fixed a bug, where the attempt to cancel a completed task lead to a strange response. #6465
Fixed KeyError during OpenAPI schema generation. #6468
Added a missing trailing slash to distribution's base_url #6507
Fixed a bug where the wrong kind of error was being raised for href parameters of mismatched types. #6521
containers: Fix pulp_rpm 3.3.0 install by replacing the python3-createrepo_c RPM with its build-dependencies, so createrep_c gets installed & built from PyPI #6523
Fixed OpenAPI schema for importer and export APIs. #6556
Normalized export-file-path for PulpExports. #6564
Changed repository viewset to use the general_update and general_delete tasks. This fixes a bug where updating specialized fields of a repository was impossible due to using the wrong serializer. #6569
Only uses multipart OpenAPI Schema when dealing with file fields #6702
Fixed a bug that prevented write_only fields from being present in the API docs and bindings #6775
Added proper headers for index.html pages served by content app. #6802
Removed Content-Encoding header from pulpcore-content responses. #6831

Improved Documentation¶

Adding docs for importing and exporting from Pulp to Pulp. #6364
Add some documentation around TaskGroups. #6641
Introduced a brief explanation about pulp_installer #6674
Added a warning that the REST API is not safe for multi-user use until RBAC is implemented. #6692
Updated the required roles names #6758

Deprecations and Removals¶

Changed repositories field on /pulp/api/v3/exporters/core/pulp/ from UUIDs to hrefs. #6457
Imports now spawn child tasks which can be fetched via the child_tasks field of the import task. #6484
Content of ssl certificates and keys changed to be return their full value instead of sha256 through REST API. #6691
Replaced PulpExport filename/sha256 fields, with output_info_file, a '': '' dictionary. #6736

Misc¶

#5020, #6421, #6477, #6539, #6542, #6544, #6572, #6583, #6695, #6803, #6804

Plugin API¶

Features¶

Added new NoArtifactContentUploadSerializer and NoArtifactContentUploadViewSet to enable plugin writers to upload content without storing an Artifact #6281
Added view_name_pattern to DetailRelatedField and DetailIdentityField to properly identify wrong resource types. #6521
Added support for Distributions to provide non-Artifact content via a content_handler. #6570
Added constants to the plugin API at pulpcore.plugin.constants. #6579
TaskGroups now have an 'all_tasks_dispatched' field that can be used to notify systems that no further tasks will be dispatched for a TaskGroup. Plugin writers should call ".finish()" on all TaskGroups created once they are done using them to set this field. #6591

Bugfixes¶

Added RemoteFilter to the plugin API as it was missing but used by plugin_template. #6563

Deprecations and Removals¶

Fields: username and password will be returned to the rest API user requesting a Remote #6346
Rehomed QueryModelResource to pulpcore.plugin.importexport. #6514
The pulpcore.content.handler.Handler.list_directory function now returns a set of strings where it returned a string of HTML before. #6570

3.3.1 (2020-05-07)¶

REST API¶

Bugfixes¶

Fixed partial and general update calls for SecretCharField on the Remote. #6565
Fixed bug where TaskGroup was showing up as null for created_resources in tasks. #6573

Plugin API¶

Features¶

Add TaskGroup to the plugin API. #6603

3.3.0 (2020-04-15)¶

REST API¶

Features¶

Added support for repairing a RepositoryVersion by redownloading corrupted artifact files. Sending a POST request to /pulp/api/v3/repositories/<plugin>/<type>/<repository-uuid>/versions/<version-number>/repair/ will trigger a task that scans all associated artfacts and attempts to fetch missing or corrupted ones again. #5613
Added support for exporting pulp-repo-versions. POSTing to an exporter using the /pulp/api/v3/exporters/core/pulp/<exporter-uuid>/exports/ API will instantiate a PulpExport entity, which will generate an export-tar.gz file at <exporter.path>/export-<export-uuid>-YYYYMMDD_hhMM.tar.gz #6135
Added API for importing Pulp Exports at POST /importers/core/pulp/<uuid>/imports/. #6137
Added the new setting CHUNKED_UPLOAD_DIR for configuring a default directory used for uploads #6253
Exported SigningService in plugin api #6256
Added name filter for SigningService #6257
Relationships between tasks that spawn other tasks will be shown in the Task API. #6282
Added a new APIs for PulpExporters and Exports at /exporters/core/pulp/ and /exporters/core/pulp/<uuid>/exports/. #6328
Added PulpImporter API at /pulp/api/v3/importers/core/pulp/. PulpImporters are used for importing exports from Pulp. #6329
Added an ALLOWED_EXPORT_PATHS setting with list of filesystem locations that exporters can export to. #6335
Indroduced ordering keyword, which orders the results by specified field. Pulp objects will by default be ordered by pulp_created if that field exists. #6347
Task Groups added -- Plugin writers can spawn tasks as part of a "task group", which facilitates easier monitoring of related tasks. #6414

Bugfixes¶

Improved the overall performance while syncing very large repositories #6121
Made chunked uploads to be stored in a local file system instead of a default file storage #6253
Fixed 500 error when calling modify on nonexistent repo. #6284
Fixed bug where user could delete repository version 0 but not recreate it by preventing users from deleting repo version 0. #6308
Fixed non unique content units on content list #6347
Properly sort endpoints during generation of the OpenAPI schema. #6372
Improved resync performance by up to 2x with a change to the content stages. #6373
Fixed bug where 'secret' fields would be set to the sha256 checksum of the original value. #6402
Fixed pulp containers not allowing commands to be run via absolute path. #6420

Improved Documentation¶

Documented bindings installation for a dev environment #6221
Added documentation for how to write changelog messages. #6336
Cleared up a line in the database settings documentation that was ambiguous. #6384
Updated docs to reflect that S3/Azure are supported and no longer tech preview. #6443
Added tech preview note to docs for importers/exporters. #6454
Renamed ansible-pulp to pulp_installer (to avoid confusion with pulp-ansible) #6461
Fixed missing terms in documentation. #6485

Deprecations and Removals¶

Changing STATIC_URL from /static/ to /assets/ for avoiding conflicts #6128
Exporting now requires the configuration of the ALLOWED_EXPORT_PATHS setting. Without this configuration, Pulp will not export content to the filesystem. #6335

Misc¶

#5826, #6155, #6357, #6450, #6451, #6481, #6482

Plugin API¶

Features¶

Tasks can now be spawned from inside other tasks, and these relationships can be explored via the "parent_task" field and "child_tasks" related name on the Task model. #6282
Added a new Export model, serializer, and viewset. #6328
Added models Import and Importer (as well as serializers and viewsets) that can be used for importing data into Pulp. #6329
NamedModelViewSet uses a default ordering of -pulp_created using the StableOrderingFilter. Users using the ordering keyword will be the primary ordering used when specified. #6347
Added two new repo validation methods (validate_repo_version and validate_duplicate_content). #6362
enqueue_with_reservation() provides a new optional argument for "task_group". #6414

Bugfixes¶

Fixed bug where RepositoryVersion.artifacts returns None. #6439

Improved Documentation¶

Add plugin writer docs on adding MANIFEST.in entry to include webserver_snippets in the Python package. #6249
Updated the metadata signing plugin writers documentation. #6342

Deprecations and Removals¶

Changed master model from FileSystemExporter to Exporter. Plugins will still need to extend FileSystemExporter but the master table is now core_exporter. This will require that plugins drop and recreate their filesystem exporter tables. #6328
RepositoryVersion add_content no longer checks for duplicate content. #6362

Misc¶

#6342

3.2.1 (2020-03-17)¶

REST API¶

Misc¶

#6244

Plugin API¶

No significant changes.

3.2.0 (2020-02-26)¶

REST API¶

Features¶

Added a pulpcore-manager script that is django-admin only configured with DJANGO_SETTINGS_MODULE="pulpcore.app.settings". This can be used for things like applying database migrations or collecting static media. #5859
Resolve DNS faster with aiodns #6190

Bugfixes¶

Considering base version when removing duplicates #5964
Renames /var/lib/pulp/static/ to /var/lib/pulp/assets/. #5995
Disabled the trimming of leading and trailing whitespace characters which led to a situation where a hash of a certificate computed in Pulp was not equal to a hash generated locally #6025
Repository.latest_version() considering deleted versions #6147
Stopped HttpDownloader sending basic auth credentials to redirect location if domains don't match. #6227

Improved Documentation¶

Updated docs to suggest to use pulpcore-manager command instead of django-admin directly. #5859

Deprecations and Removals¶

Renaming Repository.last_version to Repository.next_version #6147

Misc¶

#6038, #6202

Plugin API¶

Features¶

Adding not equal lookup to model field filters. #5868

Improved Documentation¶

Adds plugin writer docs on adding custom url routes and having the installer configure the reverse proxy to route them. #6209

3.1.1 (2020-02-17)¶

REST API¶

Bugfixes¶

Content with duplicate repo_key_fields raises an error #5567
Resolve content app errors django.db.utils.InterfaceError: connection already closed. #6045
Fix a bug that could cause an inability to detect an invalid signing script during the validation #6077
Fixing broken S3 redirect #6154
Pin idna==2.8 to avoid a version conflict caused by the idna 2.9 release. #6169 <https://pulp.plan.io/issues/6169>`__

Plugin API¶

Features¶

A new method _reset_db_connection has been added to content.Handler. It can be called before accessing the db to ensure that the db connection is alive. #6045

3.1.0 (2020-01-30)¶

REST API¶

Features¶

Allow administrators to add a signing service #5943
Adds pulpcore.app.authentication.PulpDoNotCreateUsersRemoteUserBackend which can be used to verify authentication in the webserver, but will not automatically create users like django.contrib.auth.backends.RemoteUserBackend does. #5949
Allow Azure blob storage to be used as DEFAULT_FILE_STORAGE for Pulp #5954
Allow to filter publications by repository_version and pulp_created #5968
Adds the ALLOWED_IMPORT_PATHS setting which can specify the file path prefix that file:/// remote paths can import from. #5974
Allow the same artifact to be published at multiple relative paths in the same publication. #6037

Bugfixes¶

Files stored on S3 and Azure now download with the correct filename. #4733
Adds operation_summary to the OpenAPI schema definition of repository modify operation #6002
Temporarily pinned redis-py version to avoid a task locking issue. #6038

Improved Documentation¶

Rewrote the Authentication page for more clarity on how to configure Pulp's authentication. #5949

Deprecations and Removals¶

Removed the django.contrib.auth.backends.RemoteUserBackend as a default configured backend in settings.AUTHENTICATION_BACKENDS. Also removed pulpcore.app.authentication.PulpRemoteUserAuthentication from the DRF configuration of DEFAULT_AUTHENTICATION_CLASSES. #5949
Importing from file:/// now requires the configuration of the ALLOWED_IMPORT_PATHS setting. Without this configuration, Pulp will not import content from file:/// locations correctly. #5974

Misc¶

#5795

Plugin API¶

Features¶

Allow awaiting for resolution on DeclarativeContent. #5668
Add a previous() method to RepositoryVersion. #5734
Enable plugin writers to sign selected content with signing scripts provided by administrators #5946
Add a batching content iterator content_batch_qs() to RepositoryVersion. #6024

Deprecations and Removals¶

The Handler._handle_file_response has been removed. It was renamed to _serve_content_artifact and has the following signature:
```
def _serve_content_artifact(self, content_artifact, headers):
```
#4733
Remove get_or_create_future and does_batch from DeclarativeContent. Replaced by awaiting for resolution on the DeclarativeContent itself. #5668

3.0.1 (2020-01-15)¶

REST API¶

Bugfixes¶

Fix bug where content shows as being added and removed in the same version. #5707
Fix bug where calling Repository new_version() outside of task raises exception. #5894
Adjusts setup.py classifier to show 3.0 as Production/Stable. #5896
Importing from file:/// paths no longer destroys the source repository. #5941
Webserver auth no longer prompts for csrf incorrectly. #5955

Deprecations and Removals¶

Removed pulpcore.app.middleware.PulpRemoteUserMiddleware from the default middleware section. Also replaced rest_framework.authentication.RemoteUserAuthentication with pulpcore.app.authentication.PulpRemoteUserAuthentication in the Django Rest Framework portion of the config. #5955

Misc¶

#5833, #5867, #5870, #5873

Plugin API¶

Features¶

Added an optional parameter base_version to RepositoryVersion add() and removed() methods. #5706

Deprecations and Removals¶

Saving an Artifact from a source that is outside of settings.MEDIA_ROOT will copy the file instead of moving the file as it did in previous versions. This causes data imported from file:/// sources to be left in tact. #5941

3.0.0 (2019-12-11)¶

Note

Task names, e.g. pulpcore.app.tasks.orphan.orphan_cleanup, are subject to change in future releases 3.y releases. These are represented in the Task API as the "name" attribute. Please check future release notes to see when these names will be considered stable. Otherwise, the REST API pulpcore provides is considered semantically versioned.

REST API¶

Features¶

Pulp will do validation that a new repository version contains only content which is supported by the Repository type. Using the same a-priori knowledge of content types, increase performance of duplicate removal. #5701

Bugfixes¶

Improve speed and memory performance. #5688

Improved Documentation¶

Fix an incorrect license claim in the docs. Pulp is GPLv2+. #4592
Labeling 3.0 features as tech preview. #5563
Simplified docs index page. #5714
Add text to Promotion page. #5721
Fixes and updates to the glossry page. #5726

Plugin API¶

Features¶

Added a new required field called CONTENT_TYPES to the Repository model. #5701