Pulpcore

Latest version: v3.53.0

Safety actively analyzes 629678 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 52 of 57

3.9.0

Not secure
==================
REST API
--------

Features
~~~~~~~~

- Made uploaded chunks to be stored as separate files in the default storage. This feature removes
the need for a share storage of pulp api nodes, as the chunks are now stored individually in the
shared storage and are therefore accessible by all nodes.
:redmine:`4498`
- Add support for logging messages with a correlation id that can either be autogenerated or passed in
with a ``Correlation-ID`` header. This feature is provided as a tech preview in pulpcore 3.9.
:redmine:`4689`
- Added progress reporting for pulp imports.
:redmine:`6559`
- Exposed ``aiohttp.ClientTimeout`` fields in ``Remote`` as ``connect_timeout``,
``sock_connect_timeout``, ``sock_read_timeout``, and ``total_timeout``.

This replaces the previous hard-coded 600 second timeout for sock_connect and sock_read,
giving per-``Remote`` control of all four ``ClientTimeout`` fields to the user.
:redmine:`7201`
- Enabled users to add checksums to ALLOWED_CONTENT_CHECKSUMS by allowing them to populate checksums
with handle-artifact-checksums command.
:redmine:`7561`
- Added version information to api docs.
:redmine:`7569`
- Made signing services to be immutable. This requires content signers to create a new signing
service explicitly when a change occurs.
:redmine:`7701`
- Added support for repairing Pulp by detecting and redownloading missing or corrupted artifact files. Sending a POST request to ``/pulp/api/v3/repair/`` will trigger a task that scans all artifacts for missing and corrupted files in Pulp storage, and will attempt to redownload them from the original remote. Specifying ``verify_checksums=False`` when POSTing to the same endpoint will skip checking the hashes of the files (corruption detection) and will instead just look for missing files.

The ``verify_checksums`` POST parameter was added to the existing "repository version repair" endpoint as well.
:redmine:`7755`
- Added check to prevent Pulp to start if there are Artifacts with forbidden checksums.
:redmine:`7914`


Bugfixes
~~~~~~~~

- Fixed a serious bug data integrity bug where some Artifact files could be silently deleted from storage in specific circumstances.
:redmine:`7676`
- Moved the initial creation of access_policies to post_migrate signal.
This enforces their existance both with migrate and flush.
:redmine:`7710`
- Fixed incremental export to happen if start_version provided, even if last_export is null.
:redmine:`7716`
- Fixed a file descriptor leak during repository version repair operations.
:redmine:`7735`
- Fixed bug where exporter directory existed and was writable but not owned by worker process and thus
not chmod-able.
:redmine:`7829`
- Properly namespaced the `viewset_name` in `AccessPolicy` to avoid naming conflicts in plugins.
:redmine:`7845`
- Update jquery version from 3.3.1 to 3.5.1 in API.html template. It is the version provided by djangorestframework~=3.12.2
:redmine:`7850`
- Prevented a Redis failure scenario from causing the tasking system to back up due to "tasking system
locks" not being released, even on worker restart.
:redmine:`7907`
- Use subclassed plugin downloaders during the pulp repair.
:redmine:`7909`


Improved Documentation
~~~~~~~~~~~~~~~~~~~~~~

- Added requirement to record a demo with PRs of substantial change.
:redmine:`7703`
- Removed outdated reference stating Pulp did not have an SELinux policy.
:redmine:`7793`


Removals
~~~~~~~~

- The local file system directory used for uploaded chunks is specified by the setting
CHUNKED_UPLOAD_DIR. Users are encouraged to remove all uncommitted uploaded files before
applying this change.
:redmine:`4498`


Misc
~~~~

- :redmine:`7690`, :redmine:`7753`, :redmine:`7902`, :redmine:`7890`

Plugin API
----------

Features
~~~~~~~~

- Added pre_save hook to Artifact to enforce checksum rules implied by ALLOWED_CONTENT_CHECKSUMS.
:redmine:`7696`
- Enabled plugin writers to retrieve a request object from a serializer when look ups are
performed from within the task serializer.
:redmine:`7718`
- Expose ProgressReportSerializer through `pulpcore.plugin`
:redmine:`7759`
- Allowed plugin writers to access the models Upload and UploadChunk
:redmine:`7833`
- Exposed ``pulpcore.plugin.constants.ALL_KNOWN_CONTENT_CHECKSUMS``.
:redmine:`7897`
- Added ``UnsupportedDigestValidationError`` to ``pulpcore.plugins.exceptions``. Going
forward, plugin authors can expect to find all unique exceptions under
``pulpcore.plugin.exceptions``.
:redmine:`7908`


Deprecations
~~~~~~~~~~~~

- Plugins are encouraged to define a ``version`` attribute on their subclass of
``PulpPluginAppConfig``. If undefined while Pulp loads a warning is now shown to encourage plugin
writers to implement this attribute, which will be required starting in pulpcore==3.10.
:redmine:`6671`
- Using the ViewSet's classname to identify its AccessPolicy has been deprecated and is slated for removal in 3.10.
Instead the urlpattern is supposed to be used.

Plugins with existing AccessPolicies should add a data migration to rename their AccessPolicies:

::
access_policy = AccessPolicy.get(viewset_name="MyViewSet")
access_policy.viewset_name = "objectclass/myplugin/myclass"
access_policy.save()

:redmine:`7845`
- The ``pulpcore.plugin.models.UnsupportedDigestValidationError`` is being deprecated and
will be removed in 3.10.

It can now be found at ``pulpcore.plugin.exceptions.UnsupportedDigestValidationError``
instead; please change any code that imports it to access it from its new location.
:redmine:`7908`

3.8.1

Not secure
==================
REST API
--------

Bugfixes
~~~~~~~~

- Fixed a serious bug data integrity bug where some Artifact files could be silently deleted from storage in specific circumstances. (Backported from :redmine:`7676`)
:redmine:`7758`


Plugin API
----------

No significant changes.

3.8.0

Not secure
==================
REST API
--------

Features
~~~~~~~~

- Added check to prevent users from adding checksums to ``ALLOWED_CONTENT_CHECKSUMS`` if there are
Artifacts without those checksums.
:redmine:`7487`
- Django admin site URL is configurable via `ADMIN_SITE_URL` settings parameter.
:redmine:`7637`
- Always set a default for DJANGO_SETTINGS_MODULE. This means the services files don't need to.
:redmine:`7720`


Bugfixes
~~~~~~~~

- Fix a warning inappropriately logged when cancelling a task.
:redmine:`4559`
- When a task is canceled, we now set the state of all incomplete "progress reports" to canceled as well.
:redmine:`4921`
- Properly handle duplicate content during synchronization and migration from Pulp 2 to 3.
:redmine:`7147`
- Enable content streaming for RepositoryVersionDistribution
:redmine:`7568`
- Change dropped DRF filter to django urlize.
:redmine:`7634`
- Added some more files to MANIFEST.in.
:redmine:`7656`
- Updated dynaconf requirement to prevent use of older buggy versions.
:redmine:`7682`


Improved Documentation
~~~~~~~~~~~~~~~~~~~~~~

- Updated examples of auto-distribution.
:redmine:`5247`
- Improved testing section in Pulp contributor docs.
Mentioned `prestart`, `pminio`, `pfixtures` and `phelp`.
:redmine:`7475`
- Fix an erroneous API endpoint in the "upload and publish" workflow documentation.
:redmine:`7655`
- Documented that we don't support backporting migrations.
:redmine:`7657`


Plugin API
----------

Improved Documentation
~~~~~~~~~~~~~~~~~~~~~~

- Removed mentions of semver in the plugin API docs, and replaced them with a link to the deprecation policy where appropriate.
:redmine:`7555`

3.7.9

Not secure
==================
REST API
--------

Bugfixes
~~~~~~~~

- Prevented a Redis failure scenario from causing the tasking system to back up due to "tasking system
locks" not being released, even on worker restart.
(backported from 7907)
:redmine:`9547`
- Prevent proxy credentials to be passed to aiohttp, so they no longer appear in stack traces.
This is a rewritten backport of 8167.
:redmine:`9573`


Plugin API
----------

No significant changes.

3.7.8

Not secure
==================
REST API
--------

Bugfixes
~~~~~~~~

- In stages-pipeline and new-version sanity-checks, added full error-info on path-problems.
(backported from 8133)
:redmine:`9227`


Plugin API
----------

Bugfixes
~~~~~~~~

- Added kwarg to RemoteArtifactSaver init to allow enabling handling of rare error edge-case.

`fix_mismatched_remote_artifacts=True` enables workaround for a failure-scenario that
(so far) is only encountered by pulp_rpm. Current behavior is the default.
(backported from 8133)
:redmine:`9227`

3.7.7

Not secure
==================
REST API
--------

Bugfixes
~~~~~~~~

- Fixed a bug, where new tasks were assigned to dead workers.
(backported from 8779)
:redmine:`9118`


Plugin API
----------

No significant changes.

Page 52 of 57

Links

Releases

Has known vulnerabilities

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.