Pulpcore

Latest version: v3.53.0

Safety actively analyzes 629639 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 50 of 57

3.14.2

Not secure
===================
REST API
--------

Bugfixes
~~~~~~~~

- Fixed bug where content app would not respond to ``Range`` HTTP Header in requests when
``remote.policy`` was either ``on_demand`` or ``streamed``. For example this request is used by
Anaconda clients.
(backported from 8865)
:redmine:`9057`
- Fixed a bug that caused a serializer to ignore form data for ``pulp_labels``.
(backported from 8954)
:redmine:`9058`
- Fixed the behavior of setting "repository" on a distribution for publication-based plugins.
(backported from 9039)
:redmine:`9059`
- Use proxy auth from Remote config to download content from a remote repository.
(backported from 9024)
:redmine:`9068`
- Fixed server error when accessing invalid files from content app base directory
(backported from 9074)
:redmine:`9077`


Misc
~~~~

- :redmine:`9063`


Plugin API
----------

No significant changes.

3.14.1

Not secure
===================
REST API
--------

Bugfixes
~~~~~~~~

- Fixed a regression preventing syncs from file:// urls.
(backported from 9003)
:redmine:`9015`
- Removed ambiguity from the OpenAPI schema for Exports. The exported_resources are now a list of URI strings.
(backported from 9008)
:redmine:`9025`


Plugin API
----------

No significant changes.

3.14.0

Not secure
===================
REST API
--------

Features
~~~~~~~~

- Introduce new worker style. (tech-preview)
:redmine:`8501`
- Added new endpoint ``/pulp/api/v3/orphans/cleanup/``. When called with ``POST`` and no parameters
it is equivalent to calling ``DELETE /pulp/api/v3/orphans/``. Additionally the optional parameter
``content_hrefs`` can be specified and must contain a list of content hrefs. When ``content_hrefs``
is specified, only those content units will be considered to be removed by orphan cleanup.
:redmine:`8658`
- Content app responses are now smartly cached in Redis.
:redmine:`8805`
- Downloads from remote sources will now be retried on more kinds of errors, such as HTTP 500 or socket errors.
:redmine:`8881`
- Add a correlation id filter to the task list endpoint.
:redmine:`8891`
- Where before ``download_concurrency`` would previously be set to a default value upon creation, it will now be set NULL (but a default value will still be used).
:redmine:`8897`
- Added graceful shutdown to pulpcore workers.
:redmine:`8930`
- Activate the new task worker type by default.

.. warning::

If you intend to stick with the old tasking system, you should configure the
``USE_NEW_WORKER_TYPE`` setting to false before upgrade

:redmine:`8948`


Bugfixes
~~~~~~~~

- Fixed race condition where a task could clean up reserved resources shared with another task.
:redmine:`8637`
- Altered redirect URL escaping, preventing invalidation of signed URLs for artifacts using cloud storage.
:redmine:`8670`
- Add an update row lock on in task dispatching for ``ReservedResource`` to prevent a race where an
object was deleted that was supposed to be reused. This prevents a condition where tasks ended up in
waiting state forever.
:redmine:`8708`
- Retry downloads on ``ClientConnectorSSLError``, which appears to be spuriously returned by some CDNs.
:redmine:`8867`
- Fixed OpenAPI schema tag generation for resources that are nested more than 2 levels.

This change is most evident in client libraries generated from the OpenAPI schema.

Prior to this change, the API client for a resource located at
`/api/v3/pulp/exporters/core/pulp/<uuid>/exports/` was named `ExportersCoreExportsApi`.

After this change, the API client for a resource located at
`/api/v3/pulp/exporters/core/pulp/<uuid>/exports/` is named `ExportersPulpExportsApi`.
:redmine:`8868`
- Fixed request schema for ``/pulp/api/v3/repair/``, which did identify any arguments. This also fixes
the bindings.
:redmine:`8869`
- Update default access policies in the database if they were unmodified by the administrator.
:redmine:`8883`
- Pinning to psycopg2 < 2.9 as psycopg 2.9 doesn't work with django 2.2. More info at
https://github.com/django/django/commit/837ffcfa681d0f65f444d881ee3d69aec23770be.
:redmine:`8926`
- Fixed bug where artifacts and content were not always saved in Pulp with each
on_demand request serviced by content app.
:redmine:`8980`


Improved Documentation
~~~~~~~~~~~~~~~~~~~~~~

- Fixed a number of link-problems in the installation/ section of docs.
:redmine:`6837`
- Added a troubleshooting section to the docs explaining how to find stuck tasks.
:redmine:`8774`
- Moved existing basic auth docs to a new top-level section named Authentication.
:redmine:`8800`
- Moved ``Webserver Authentication`` docs under the top-level ``Authentication`` section.
:redmine:`8801`
- Provide instructions to use Keycloak authenication using Python Social Aauth
:redmine:`8803`
- Updated the docs.pulpproject.org to provide some immediate direction for better user orientation.
:redmine:`8946`
- Separated hardware and Filesystem information from the Architecture section and added them to the Installation section.
:redmine:`8947`
- Added sub-headings and simplified language of Pulp concept section.
:redmine:`8949`


Deprecations
~~~~~~~~~~~~

- Deprecated the ``DELETE /pulp/api/v3/orphans/`` call. Instead use the
``POST /pulp/api/v3/orphans/cleanup/`` call.
:redmine:`8876`


Misc
~~~~

- :redmine:`8821`, :redmine:`8827`, :redmine:`8975`


Plugin API
----------

Features
~~~~~~~~

- Added the ``pulpcore.plugin.viewsets.DistributionFilter``. This should be used instead of
``pulpcore.plugin.viewsets.NewDistributionFilter``.
:redmine:`8480`
- Added ``user_hidden`` field to ``Repository`` to hide repositories from users.
:redmine:`8487`
- Added a ``timestamp_of_interest`` field to Content and Artifacts. This field can be updated by
calling a new method ``touch()`` on Artifacts and Content. Plugin writers should call this method
whenever they deal with Content or Artifacts. For example, this includes places where Content is
uploaded or added to Repository Versions. This will prevent Content and Artifacts from being cleaned
up when orphan cleanup becomes a non-blocking task in pulpcore 3.15.
:redmine:`8823`
- Exposed ``AsyncUpdateMixin`` through ``pulpcore.plugin.viewsets``.
:redmine:`8844`
- Added a field ``DEFAULT_MAX_RETRIES`` to the ``Remote`` base class - plugin writers can override the default number of retries attempted when file downloads failed for each type of remote. The default value is 3.
:redmine:`8881`
- Added a field ``DEFAULT_DOWNLOAD_CONCURRENCY`` to the Remote base class - plugin writers can override the number of concurrent downloads for each type of remote. The default value is 10.
:redmine:`8897`


Bugfixes
~~~~~~~~

- Fixed OpenAPI schema tag generation for resources that are nested more than 2 levels.

This change is most evident in client libraries generated from the OpenAPI schema.

Prior to this change, the API client for a resource located at
`/api/v3/pulp/exporters/core/pulp/<uuid>/exports/` was named `ExportersCoreExportsApi`.

After this change, the API client for a resource located at
`/api/v3/pulp/exporters/core/pulp/<uuid>/exports/` is named `ExportersPulpExportsApi`.
:redmine:`8868`


Removals
~~~~~~~~

- The usage of non-JSON serializable types of ``args`` and ``kwargs`` to tasks is no longer supported.
``uuid.UUID`` objects however will silently be converted to ``str``.
:redmine:`8501`
- Removed the ``versions_containing_content`` method from the
`pulpcore.plugin.models.RepositoryVersion`` object. Instead use
``RepositoryVersion.objects.with_content()``.
:redmine:`8729`
- Removed `pulpcore.plugin.stages.ContentUnassociation` from the plugin API.
:redmine:`8827`


Deprecations
~~~~~~~~~~~~

- The ``pulpcore.plugin.viewsets.NewDistributionFilter`` is deprecated and will be removed from a
future release. Instead use ``pulpcore.plugin.viewsets.DistributionFilter``.
:redmine:`8480`
- Deprecate the use of the `reserved_resources_record__resource` in favor of `reserved_resources_record__contains`.
Tentative removal release is pulpcore==3.15.
:redmine:`8501`
- Plugin writers who create custom downloaders by subclassing ``HttpDownloader`` no longer need to wrap the ``_run()`` method with a ``backoff`` decorator. Consequntly the ``http_giveup`` handler the sake of the ``backoff`` decorator is no longer needed and has been deprecated. It is likely to be removed in pulpcore 3.15.
:redmine:`8881`

3.13.0

Not secure
===================
REST API
--------

Features
~~~~~~~~

- Added two views to identify content which belongs to repository_version or publication.
:redmine:`4832`
- Added repository field to repository version endpoints.
:redmine:`6068`
- Added ability for users to limit how many repo versions Pulp retains by setting
``retained_versions`` on repository.
:redmine:`8368`
- Added the ``add-signing-service`` management command.
Notice that it is still in tech-preview and can change without further notice.
:redmine:`8609`
- Added a ``pulpcore-worker`` entrypoint to simplify and unify the worker command.
:redmine:`8721`
- Content app auto-distributes latest publication if distribution's ``repository`` field is set
:redmine:`8760`


Bugfixes
~~~~~~~~

- Fixed cleanup of UploadChunks when their corresponding Upload is deleted.
:redmine:`7316`
- Fixed an issue that caused the request's context to be ignored in the serializers.
:redmine:`8396`
- Fixed missing ``REDIS_SSL`` parameter in RQ config.
:redmine:`8525`
- Fixed bug where using forms submissions to create resources (e.g. ``Remotes``) raised exception
about the format of ``pulp_labels``.
:redmine:`8541`
- Fixed bug where publications sometimes fail with the error '[Errno 39] Directory not empty'.
:redmine:`8595`
- Handled a tasking race condition where cleaning up resource reservations sometimes raised an IntegrityError.
:redmine:`8603`
- Fixed on-demand sync/migration of repositories that don't have sha256 checksums.
:redmine:`8625`
- Taught pulp-export to validate chunk-size to be <= 1TB.
:redmine:`8628`
- Addressed a race-condition in PulpImport that could fail with unique-constraint violations.
:redmine:`8633`
- Content app now properly lists all distributions present
:redmine:`8636`
- Fixed ability to specify custom headers on a Remote.
:redmine:`8689`
- Fixed compatibility with Django 2.2 LTS. Pulp now requires Django~=2.2.23
:redmine:`8691`
- Skip allowed content checks on collectstatic
:redmine:`8711`
- Fixed a bug in the retained versions code where content wasn't being properly moved to newer repo
versions when old versions were cleaned up.
:redmine:`8793`


Improved Documentation
~~~~~~~~~~~~~~~~~~~~~~

- Added docs on how to list the effective settings using ``dynaconf list``.
:redmine:`6235`
- Added anti-instructions, that users should never run `pulpcore-manager makemigrations``, but file a bug instead.
:redmine:`6703`
- Clarified repositories are typed in concepts page
:redmine:`6990`
- Added UTF-8 character set encoding as a requirement for PostgreSQL
:redmine:`7019`
- Fixed typo s/comtrol/control
:redmine:`7715`
- Removed the PUP references from the docs.
:redmine:`7747`
- Updated plugin writers' guide to not use settings directly in the model fields.
:redmine:`7776`
- Make the reference to the Pulp installer documentation more explicit.
:redmine:`8477`
- Removed example Ansible installer playbook from the pulpcore docs so that Pulp users would have a single source of truth in the pulp-installer docs.
:redmine:`8550`
- Added security disclosures ref to homepage
:redmine:`8584`
- Add sequential steps for storage docs
:redmine:`8597`
- Updated signing service workflow. Removed old deprecation warning.
:redmine:`8609`
- Add an example of how to specify an array value and a dict key in the auth methods section
:redmine:`8668`
- Fixed docs build errors reported by autodoc.
:redmine:`8784`


Misc
~~~~

- :redmine:`8524`, :redmine:`8656`, :redmine:`8761`


Plugin API
----------

Features
~~~~~~~~

- Undeprecated the use of ``uuid.UUID`` in task arguments. With this, primary keys do not need to be explicitely cast to ``str``.
:redmine:`8723`


Bugfixes
~~~~~~~~

- Added RepositoryVersionRelatedField to the plugin API.
:redmine:`8578`
- Fixed auto-distribute w/ retained_versions tests
:redmine:`8792`


Removals
~~~~~~~~

- Removed deprecated ``pulpcore.plugin.tasking.WorkingDirectory``.
:redmine:`8354`
- Removed ``BaseDistribution``, ``PublicationDistribution``, and ``RepositoryVersionDistribution``
models. Removed ``BaseDistributionSerializer``, ``PublicationDistributionSerializer``, and
``RepositoryVersionDistributionSerializer`` serializers. Removed ``BaseDistributionViewSet`` and
``DistributionFilter``.
:redmine:`8386`
- Removed ``pulpcore.plugin.tasking.enqueue_with_reservation``.
:redmine:`8497`


Deprecations
~~~~~~~~~~~~

- RepositoryVersion method "versions_containing_content" is deprecated now.
:redmine:`4832`
- The usage of the `pulpcore.plugin.stages.ContentUnassociation` stage has been deprecated. A future update will remove it from the plugin API.
:redmine:`8635`

3.12.2

Not secure
===================
REST API
--------

Bugfixes
~~~~~~~~

- Backported a fix for on-demand sync/migration of repositories that don't have sha256 checksums.
:redmine:`8652`


Plugin API
----------

No significant changes.

3.12.1

Not secure
===================
REST API
--------

No significant changes.


Plugin API
----------

Bugfixes
~~~~~~~~

- Added RepositoryVersionRelatedField to the plugin API.
:redmine:`8580`

Page 50 of 57

Links

Releases

Has known vulnerabilities

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.