Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Aug 25, 2025

This PR contains the following updates:

Package Change Age Confidence
pulp_rpm_client '~> 3.19.0' -> '~> 3.33.0' age confidence

Release Notes

pulp/pulp_rpm (pulp_rpm_client)

v3.33.1

Compare Source

Misc {: #​3.33.1-misc }

v3.33.0

Compare Source

Features {: #​3.33.0-feature }
  • Updated pulp_rpm package signing code to use "rpm_package" location instead of expecting the original file to be signed.
    #​4189
Bugfixes {: #​3.33.0-bugfix }
  • Fixed a bug where syncing from a remote repository with duplicate filenames and different paths
    would result in one of these packages being missing from a Pulp distribution.
    This is known to happen in some JFrog repositories.

    On systems that have synced from such repositories before, it is required to clean up the related
    packages with orphan cleanup or use the provided "pulpcore-manager rpm-datarepair 4073",
    which forces internal objects to use non-ambiguous filenames.
    #​4073

  • Taught publish/synchronize to return full serialized object of their action.
    #​4117

  • Fix a bug where the retain_package_versions feature (and prune and a few others) was not correctly determining which packages were most recent.
    #​4124

  • Downgraded openapi spec version from 3.1 to 3.0 to revert regression in the published Ruby bindings.
    #​4125

  • Fixed synchronous RPM upload using an existing artifact.
    #​4148

  • Improved postgres memory performance on mirror complete sync
    #​4174

  • Fixed the chunk uploads as part of the synchronous RPM upload.
    #​4179

  • Renaming PackageUploadSerializer to RPMPackageUploadSerializer to avoid the duplicating schema
    #​4196

  • Update the required version of the libcomps package to ensure a bugfix is present which was resulting in memory corruption and segfaults in some cases.

Improved Documentation {: #​3.33.0-doc }
  • Clarified retain_package_versions function in the documentation.
    #​4169
  • Updated page about bindings to point to Pulp Openapi Generator documentation.
Misc {: #​3.33.0-misc }

v3.32.5

Compare Source

Bugfixes {: #​3.32.5-bugfix }
  • Fixed the chunk uploads as part of the synchronous RPM upload.
    #​4179

v3.32.4

Compare Source

Bugfixes {: #​3.32.4-bugfix }
  • Fixed synchronous RPM upload using an existing artifact.
    #​4148

v3.32.3

Compare Source

Bugfixes {: #​3.32.3-bugfix }
  • Fixed a bug where syncing from a remote repository with duplicate filenames and different paths
    would result in one of these packages being missing from a Pulp distribution.
    This is known to happen in some JFrog repositories.

    On systems that have synced from such repositories before, it is required to clean up the related
    packages with orphan cleanup or use the provided "pulpcore-manager rpm-datarepair 4073",
    which forces internal objects to use non-ambiguous filenames.
    #​4073

  • Fix a bug where the retain_package_versions feature (and prune and a few others) was not correctly determining which packages were most recent.
    #​4124


v3.32.2

Compare Source

Bugfixes {: #​3.32.2-bugfix }
  • Downgraded openapi spec version from 3.1 to 3.0 to revert regression in the published Ruby bindings.
    #​4125

v3.32.1

Compare Source

Bugfixes {: #​3.32.1-bugfix }
  • Update the required version of the libcomps package to ensure a bugfix is present which was resulting in memory corruption and segfaults in some cases.

v3.32.0

Compare Source

Bugfixes {: #​3.32.0-bugfix }
  • Fixed: KeyError: 'package_signing_fingerprint' in pulp_rpm/app/serializers/repository.py
    #​4038
  • Adapt to a pulpcore change that inadvertently broke pulp_rpm, due to a slightly improper use of an API.
    #​4054

v3.31.2

Compare Source

Bugfixes {: #​3.31.2-bugfix }
  • Adapt to a pulpcore change that inadvertently broke pulp_rpm, due to a slightly improper use of an API.
    #​4054

v3.31.1

Compare Source

Bugfixes {: #​3.31.1-bugfix }
  • Fixed: KeyError: 'package_signing_fingerprint' in pulp_rpm/app/serializers/repository.py
    #​4038

v3.31.0

Compare Source

Features {: #​3.31.0-feature }
  • Added a synchronous RPM upload API. It's available at /pulp/api/v3/content/rpm/packages/upload/.
    #​4027
Bugfixes {: #​3.31.0-bugfix }
  • Ensure API responses for Repository.package_signing_fingerprint returns an empty string instead of null.
    #​3995
  • Significantly improved publish performance (more than double in some cases) by fixing some Django queries.
Improved Documentation {: #​3.31.0-doc }
  • Added an example of uploading all packages inside a repository using the --directory option.
    #​3709
  • Updated the modify guides to reflect a fix in the pulp-cli modify command.
    #​3881
Misc {: #​3.31.0-misc }

v3.30.2

Compare Source

Bugfixes {: #​3.30.2-bugfix }
  • Ensure API responses for Repository.package_signing_fingerprint returns an empty string instead of null.
    #​3995

v3.30.1

Compare Source

Bugfixes {: #​3.30.1-bugfix }
  • Significantly improved publish performance (more than double in some cases) by fixing some Django queries.

v3.30.0

Compare Source

Features {: #​3.30.0-feature }
  • Enabled the checkpoint feature in pulp_rpm.
    #​3907
Bugfixes {: #​3.30.0-bugfix }
  • Fix a memory consumption issue w/ syncing repositories that contain modules.
    #​3311
  • Fixed RPM signing with chunked uploads
    #​3927
Deprecations and Removals {: #​3.30.0-removal }
  • Using the 'gpgcheck', 'repo_gpgcheck', 'package_checksum_type', or 'checksum_type' options, which have been deprecated for some time, will no longer have any effect. In the case of 'gpgcheck' or 'repo_gpgcheck', please use the 'repo_config' option instead. In the case of 'package_checksum_type' or 'metadata_checksum_type', please use 'checksum_type' instead.
Misc {: #​3.30.0-misc }

v3.29.8

Compare Source

Bugfixes {: #​3.29.8-bugfix }
  • Fix a bug where the retain_package_versions feature (and prune and a few others) was not correctly determining which packages were most recent.
    #​4124

v3.29.7

Compare Source

Bugfixes {: #​3.29.7-bugfix }
  • Update the required version of the libcomps package to ensure a bugfix is present which was resulting in memory corruption and segfaults in some cases.

v3.29.6

Compare Source

Bugfixes {: #​3.29.6-bugfix }
  • Fixed a bug where syncing from a remote repository with duplicate filenames and different paths
    would result in one of these packages being missing from a Pulp distribution.
    This is known to happen in some JFrog repositories.

    On systems that have synced from such repositories before, it is required to clean up the related
    packages with orphan cleanup or use the provided "pulpcore-manager rpm-datarepair 4073",
    which forces internal objects to use non-ambiguous filenames.
    #​4073


v3.29.5

Compare Source

Bugfixes {: #​3.29.5-bugfix }
  • Fixed: KeyError: 'package_signing_fingerprint' in pulp_rpm/app/serializers/repository.py
    #​4038
  • Adapt to a pulpcore change that inadvertently broke pulp_rpm, due to a slightly improper use of an API.
    #​4054

v3.29.4

Compare Source

Bugfixes {: #​3.29.4-bugfix }
  • Ensure API responses for Repository.package_signing_fingerprint returns an empty string instead of null.
    #​3995

v3.29.3

Compare Source

Bugfixes {: #​3.29.3-bugfix }
  • Fixed RPM signing with chunked uploads
    #​3927
  • Significantly improved publish performance (more than double in some cases) by fixing some Django queries.

v3.29.2

Compare Source

Bugfixes {: #​3.29.2-bugfix }
  • Fix a memory consumption issue w/ syncing repositories that contain modules.
    #​3311

v3.29.1

Compare Source

Misc {: #​3.29.1-misc }

v3.29.0

Compare Source

Features {: #​3.29.0-feature }
  • Make the layout of the packages in the published repository configurable.
    #​3874

  • Added permissions for set/unset_label on RPM content-types.

    The types that support this new call include:

    • Package
    • UpdateRecord
    • Modulemd
    • ModulemdDefaults
    • ModulemdObsoletes
      #​3896
Bugfixes {: #​3.29.0-bugfix }
  • Added a retry mechanism for client authentication in ULN-based downloaders to improve connection stability.
    #​3891

  • Reworked content-labeling RBAC to rely on core.manage_content_labels permission.

    This permission must be explicitly granted by assigning the core.content_labeler Role
    to a user.
    #​3910


v3.28.1

Compare Source

No significant changes.


v3.28.0

Compare Source

Bugfixes {: #​3.28.0-bugfix }
  • Honor repository's compression_type for publications unless overridden
    #​3614
  • Declared compatibility against pulpcore<3.70.
    #​3620
  • Fixed the JSONField specification so it doesn't break ruby bindings.
    #​3639
  • Fixed stacktrace from create_modulemd() when trying to report an error.
    #​3756
  • Make it possible to sync repositories without filelists.xml or other.xml metadata
    #​3777
  • Extended PRN support to Advanced Copy API and DistributionTree.
    #​3853
Improved Documentation {: #​3.28.0-doc }
  • Updated documentation for prune and advanced-copy to use pulp-cli examples.
    #​3622
Misc {: #​3.28.0-misc }

v3.27.9

Compare Source

Bugfixes {: #​3.27.9-bugfix }
  • Fix a bug where the retain_package_versions feature (and prune and a few others) was not correctly determining which packages were most recent.
    #​4124

v3.27.8

Compare Source

No significant changes.


v3.27.7

Compare Source

No significant changes.


v3.27.6

Compare Source

No significant changes.


v3.27.5

Compare Source

Bugfixes {: #​3.27.5-bugfix }
  • Ensure API responses for Repository.package_signing_fingerprint returns an empty string instead of null.
    #​3995
  • Fixed: KeyError: 'package_signing_fingerprint' in pulp_rpm/app/serializers/repository.py
    #​4038
  • Adapt to a pulpcore change that inadvertently broke pulp_rpm, due to a slightly improper use of an API.
    #​4054

v3.27.4

Compare Source

Bugfixes {: #​3.27.4-bugfix }
  • Fixed RPM signing with chunked uploads
    #​3927
  • Significantly improved publish performance (more than double in some cases) by fixing some Django queries.

v3.27.3

Compare Source

Bugfixes {: #​3.27.3-bugfix }
  • Fix a memory consumption issue w/ syncing repositories that contain modules.
    #​3311

v3.27.2

Compare Source

Bugfixes {: #​3.27.2-bugfix }
  • Fixed the JSONField specification so it doesn't break ruby bindings.
    #​3639
  • Fixed stacktrace from create_modulemd() when trying to report an error.
    #​3756

v3.27.1

Compare Source

Features {: #​3.27.1-feature }
  • Honor repository's compression_type for publications unless overridden
    #​3614
Bugfixes {: #​3.27.1-bugfix }
  • Declared compatibility against pulpcore<3.70.
    #​3620

v3.27.0

Compare Source

Features {: #​3.27.0-feature }
  • Added /rpm/prune/ endpoint to allow "pruning" old Packages from repositories.
    #​2909
  • Added (tech preview) support for signing RPM packages when uploading to a Repository.
    #​2986
Bugfixes {: #​3.27.0-bugfix }
  • Taught tests to find centos8 at vault.centos.org.
    #​3572
  • Fix a flaw that still allowed to add duplicate advisories to a repository version.
    #​3587
  • Made sync more tolerant of poorly configured webservers.
    #​3599

v3.26.6

Compare Source

Bugfixes {: #​3.26.6-bugfix }
  • Adapt to a pulpcore change that inadvertently broke pulp_rpm, due to a slightly improper use of an API.
    #​4054
  • Significantly improved publish performance (more than double in some cases) by fixing some Django queries.

v3.26.5

Compare Source

Bugfixes {: #​3.26.5-bugfix }
  • Fix a memory consumption issue w/ syncing repositories that contain modules.
    #​3311

v3.26.4

Compare Source

No significant changes.


v3.26.3

Compare Source

Bugfixes {: #​3.26.3-bugfix }
  • Fixed the JSONField specification so it doesn't break ruby bindings.
    #​3639

v3.26.2

Compare Source

Bugfixes {: #​3.26.2-bugfix }
  • Honor repository's compression_type for publications unless overridden
    #​3614
  • Declared compatibility against pulpcore<3.70.
    #​3620
  • Fixed stacktrace from create_modulemd() when trying to report an error.
    #​3756

v3.26.1

Compare Source

Bugfixes {: #​3.26.1-bugfix }
  • Taught tests to find centos8 at vault.centos.org.
    #​3572
  • Fix a flaw that still allowed to add duplicate advisories to a repository version.
    #​3587
  • Made sync more tolerant of poorly configured webservers.
    #​3599

v3.26.0

Compare Source

Features
  • Added django admin command to analyse repository disk size.
    #​3003
  • Added support for repository-size management command.
    #​3312
Bugfixes
  • Addressed some edge-cases involving advisory-collection-naming and imports.
    #​3380
  • Fixed modulemd upload raising an error when "packages" parameter was passed.
    #​3427
  • Fixed an issue where the value of gpgcheck wasn't appropriately set on some publications.
    #​3462
  • Fix publications created by mirror_complete syncs not having checksum_type set properly.
    #​3484
  • Fixed modulemd_defaults create endpoint not setting the content digest.
    #​3495
Improved Documentation
  • Improved pages about Post/Delete Content (from Pulp) and Add/Remove/Copy existing Content (from Repos).
    #​3482
Misc

v3.25.6

Compare Source

Bugfixes {: #​3.25.6-bugfix }
  • Honor repository's compression_type for publications unless overridden
    #​3614
  • Declared compatibility against pulpcore<3.70.
    #​3620
  • Fixed stacktrace from create_modulemd() when trying to report an error.
    #​3756

v3.25.5

Compare Source

Bugfixes {: #​3.25.5-bugfix }
  • Taught tests to find centos8 at vault.centos.org.
    #​3572
  • Fix a flaw that still allowed to add duplicate advisories to a repository version.
    #​3587
  • Made sync more tolerant of poorly configured webservers.
    #​3599
Misc {: #​3.25.5-misc }

v3.25.4

Compare Source

Bugfixes
  • Fixed modulemd upload raising an error when "packages" parameter was passed.
    #​3427
Misc

v3.25.3

Compare Source

Bugfixes
  • Fix publications created by mirror_complete syncs not having checksum_type set properly.
    #​3484
  • Fixed modulemd_defaults create endpoint not setting the content digest.
    #​3495

v3.25.2

Compare Source

Bugfixes
  • Fixed an issue where the value of gpgcheck wasn't appropriately set on some publications.
    #​3462

v3.25.1

Compare Source

Bugfixes
  • Addressed some edge-cases involving advisory-collection-naming and imports.
    #​3380

v3.25.0

Compare Source

Features
  • Added a compression_type option to allow publishing metadata files with zstd compression (in addition to the default gzip).
    #​3316
  • Raised pulpcore requirement to 3.44.1 to fix an RBAC related bug.
    #​3381
Bugfixes
  • Added support for preventing unquoted NSVCA numerical values (e.g. "stream": 2.10) of having zeros stripped on modulemd YAML files.
    #​3285
  • Fixed bug about malformed tuple introduced on the removal of sqlite-metadata support (PR #​3328).
    #​3351
  • Fixed server error when trying to create repository with deprecated gpgcheck and repo_gpgcheck.
    #​3357
  • Fixes bug where RpmPublications couldn't be created when using a non-admin user.
    #​3381
Deprecations and Removals
  • Removed the ability to generate sqlite metadata during repository publish.
    #​2457
  • Removed support for publishing repos with a checksum type of md5, sha1, or sha224
    #​2488
Misc

v3.24.0

Compare Source

Features
  • Added pulpcore 3.40 compatibility.
  • Added ability to customize config .repo file.
    #​2295
  • Added new json field repo_config that can be used to configure .repo file
    #​2902
  • Added new json field repo_config that can be used to configure .repo file.
    #​2903
Bugfixes
  • Improved performance by reducing the number of small queries during exports.
    #​3286

v3.23.6

Compare Source

Bugfixes {: #​3.23.6-bugfix }
  • Fix a memory consumption issue w/ syncing repositories that contain modules.
    #​3311

v3.23.5

Compare Source

Bugfixes {: #​3.23.5-bugfix }
  • Fixed stacktrace from create_modulemd() when trying to report an error.
    #​3756

v3.23.4

Compare Source

Bugfixes {: #​3.23.4-bugfix }
  • Fixed modulemd upload raising an error when "packages" parameter was passed.
    #​3427
  • Fixed modulemd_defaults create endpoint not setting the content digest.
    #​3495
  • Taught tests to find centos8 at vault.centos.org.
    #​3572
  • Fix a flaw that still allowed to add duplicate advisories to a repository version.
    #​3587
  • Made sync more tolerant of poorly configured webservers.
    #​3599

v3.23.3

Compare Source

Bugfixes
  • Addressed some edge-cases involving advisory-collection-naming and imports.
    #​3380

v3.23.2

Compare Source

No significant changes.


v3.23.0

Compare Source

Features
  • Added NOCACHE_LIST config to enable specifying files to be served with a no-cache header.

    By default, repomd.xml, repomd.key, and repomd.key.asc are served with
    Cache-control: no-cache.
    #​2947

  • Added to the distribution generate_repo_config field specifying whether Pulp should generate
    *.repo files. Defaults to False.
    #​2985

  • Added a filename filter to package list endpoint.
    #​3215

  • Adjusted default access policies for new labels api.
    #​3243

Bugfixes
  • Fixed a deadlock during concurrent syncs of rpm-repos that need data fixups.
    #​2980
  • Don't write invalid characters to a repo id, even if the distro name contains them.
    #​3170
  • Made 0048 migration more robust in the face of unexpected data.
    #​3177
  • Stopped package upload to parse the artifact twice.
    #​3183
  • Remove the non functional retrieve logic from advisories upload, fixing a bug that appeared
    with pulpcore >= 3.29.
    #​3195
  • Made 0049 migration more robust in the face of unexpected data.
    #​3196
  • Adjust modules uniqueness to allow two modules with same NSVCA but different snippet content.
    #​3241
  • Improved performance of exports significantly in some circumstances by optimizing a query.
    #​3259
  • Fixed sporadic error due to to set domain on non-Content objects at sync time.
    #​3275
Misc

v3.22.9

Compare Source

Bugfixes {: #​3.22.9-bugfix }
  • Fixed stacktrace from create_modulemd() when trying to report an error.
    #​3756

v3.22.8

Compare Source

Bugfixes {: #​3.22.8-bugfix }
  • Taught tests to find centos8 at vault.centos.org.
    #​3572
  • Fix a flaw that still allowed to add duplicate advisories to a repository version.
    #​3587

v3.22.7

Compare Source

Bugfixes
  • Added support for preventing unquoted NSVCA numerical values (e.g. "stream": 2.10) of having zeros stripped on modulemd YAML files.
    #​3285
  • Addressed some edge-cases involving advisory-collection-naming and imports.
    #​3380

v3.22.6

Compare Source

Bugfixes
  • Fixed sporadic error due to to set domain on non-Content objects at sync time.
    #​3275
  • Improved performance by reducing the number of small queries during exports.
    #​3286
Misc

v3.22.5

Compare Source

Bugfixes
  • Improved performance of exports significantly in some circumstances by optimizing a query.
    #​3259

v3.22.4

Compare Source

Misc

v3.22.3

Compare Source

Bugfixes
  • Stopped package upload to parse the artifact twice.
    #​3183
  • Remove the non functional retrieve logic from advisories upload, fixing a bug that appeared
    with pulpcore >= 3.29.
    #​3195
  • Made 0049 migration more robust in the face of unexpected data.
    #​3196

v3.22.2

Compare Source

Bugfixes
  • Made 0048 migration more robust in the face of unexpected data.
    #​3177

v3.22.1

Compare Source

Bugfixes
  • Fixed a deadlock during concurrent syncs of rpm-repos that need data fixups.
    #​2980
  • Don't write invalid characters to a repo id, even if the distro name contains them.
    #​3170

v3.22.0

Compare Source

Features

v3.21.1

Compare Source

Bugfixes
  • Fixed a deadlock during concurrent syncs of rpm-repos that need data fixups.
    #​2980
  • Made 0048 migration more robust in the face of unexpected data.
    #​3177

v3.21.0

Compare Source

Features
  • Declares (and requires at least) pulpcore/3.25 compatibility.
    #​3151
Improved Documentation
  • Fixed infinite loading when searching for specific terms.
    #​3150

v3.20.0

Compare Source

Features
  • The package upload feature was changed to allow the upload of packages which are already
    uploaded - in this scenario, the API will display the existing package as if it had just
    been created.
    #​2764
  • Added the ability to replicate RPM distributions/repositories from an upstream Pulp instance.
    #​2995
  • Added a new setting RPM_METADATA_USE_REPO_PACKAGE_TIME that will set the primary.xml timestamp
    of each package to when the package was added to the repo rather than when the package first
    appeared in Pulp.
    #​3009
  • Added more filter options on the packages API.
    #​3135
Bugfixes
  • Publish all metadata with a stable sort order. This should reduce artifact churn when certain metadata files are published repeatedly unchanged.
    #​2752
  • Fixed a failure that can occur during migration from 3.17 to 3.18
    #​2952
  • Fix a minor module metadata parsing regression that broke Pulp-to-Pulp sync in some scenarios.
    #​2961
  • Stopped publishing updateinfo.xml when there are no advisories.
    #​2967
  • Fixed 0044_noartifact_modules migration that was failing with object storage.
    #​2988
  • Loosen modulemd validation to allow version numbers that have string type but represent integers
    #​2998
  • Fixed a regression in 3.19 which resulted in unintentional API changes and problems with "depsolving" repo copy.
    #​3012
  • Fix import/export not importing modulemd_packages data with ManyToMany relationship.
    #​3019
  • Fix relative path and location href mismatch of the uploaded rpm caused by filename and rpm header mismatch. Clients are getting HTTP 404 Not Found error when downloading the rpm.
    #​3039
  • Fix a bug with copying modules with depsolving enabled - dependencies were not copied.
    #​3119
  • Fix a bug for certain repos (e.g. mercurial) relating to how modules are handled.
    #​3121
  • Fix an issue where the name of UpdateCollection is not defined and might affect import/export, and added a data repair script (pulpcore-manager rpm-datarepair 3127).
    #​3127
  • Fixes an accidental change that was made to how "profiles" are formatted in the modulemd API.
    #​3131
Misc


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot force-pushed the renovate/pulp_rpm_client-3.x branch from 41a21f3 to 375d838 Compare October 25, 2025 11:44
@renovate renovate bot changed the title Update dependency pulp_rpm_client to '~> 3.32.0' Update dependency pulp_rpm_client to '~> 3.33.0' Oct 25, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant