Update dependency pulp_rpm_client to '~> 3.38.0'

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
pulp_rpm_client	'~> 3.19.0' → '~> 3.38.0'

---

Release Notes

pulp/pulp_rpm (pulp_rpm_client)

v3.38.4

Compare Source

No significant changes.

---

v3.38.3

Compare Source

No significant changes.

---

v3.38.2

Compare Source

Bugfixes {: #​3.38.2-bugfix }

• Fixed an IntegrityError that could abort signed_add_and_remove when the same package was signed concurrently by making the RpmPackageSigningResult creation race-safe and reusing the existing result.
  #​4522

---

v3.38.1

Compare Source

No significant changes.

---

v3.38.0

Compare Source

Features {: #​3.38.0-feature }

• Added a scan action to RepositoryVersion endpoint that scans all RPM packages in a repository version via https://osv.dev/.
  Repositories must be configured via the osv_config field, which specifies the ecosystems and releases to query.

Bugfixes {: #​3.38.0-bugfix }

• Fixed signing_keys not being populated for RPMs whose signatures contain only a key ID without a full fingerprint (common in packages signed by older GPG versions).
  #​4487
• Don't read the entire package on package upload, just read the header.

---

v3.37.2

Compare Source

Bugfixes {: #​3.37.2-bugfix }

• Fixed signing_keys not being populated for RPMs whose signatures contain only a key ID without a full fingerprint (common in packages signed by older GPG versions).
  #​4487

---

v3.37.1

Compare Source

Bugfixes {: #​3.37.1-bugfix }

• Don't read the entire package on package upload, just read the header.

---

v3.37.0

Compare Source

Features {: #​3.37.0-feature }

• Added dependency_upgrade boolean field to the copy API. When enabled,
  transitive dependencies are resolved to their latest available versions
  instead of preferring versions already present in the destination repository.
  #​4368
• Added support for the new overwrite parameter on the RPM repository modify
  endpoint. Packages already produced by Pulp's signing workflow (tracked via
  RpmPackageSigningResult) and present in the repository version are exempted
  from the overwrite check so the operation remains a NOOP.
• Replaced generic exceptions (ValueError, TypeError, Exception, etc.) in task contexts with
  PulpException subclasses that carry unique error codes (RPM0001–RPM0018). This ensures that
  error details are preserved when REDACT_UNSAFE_EXCEPTIONS is enabled, instead of being
  sanitized into generic "An error occurred" messages.

Bugfixes {: #​3.37.0-bugfix }

• Populate signing_keys directly from package headers upon upload - fixing an issue where the fingerprint does not match the actual one, when the package was signed by a subkey using the Pulp signing service which specified a non-signing mainkey package_signing_fingerprint.
  #​4458
• Substantially (>50%) reduced sync memory use and runtime requirements by using caching within the sync stage.
• Take advantage of pulpcore's ResourceBudget feature which enables the sync pipeline to keep disk usage down without an excessive performance hit.

Misc {: #​3.37.0-misc }

---

v3.36.1

Compare Source

No significant changes.

---

v3.36.0

Compare Source

Features {: #​3.36.0-feature }

• Added code and a setting (MAX_PACKAGE_SIGNING_WORKERS) to sign packages concurrently when adding
  them to a repo. Signing packages concurrently will speed up the time it takes to sign and add
  packages to a repo.
  #​4357
• Added signing_keys to the minimal package serializer.
  #​4393
• Added a new field signing_keys on packages that tracks the fingerprints of keys Pulp has used to sign the package.
• Signing fingerprints now use a versioned prefix format (e.g. v4:<hex>, keyid:<hex>) for
  package_signing_fingerprint on repositories and signing_keys on packages. The fingerprint prefix
  is passed to the signing script as the PULP_SIGNING_FINGERPRINT_TYPE environment variable.

Bugfixes {: #​3.36.0-bugfix }

• Fixed RpmRepository.package_signing_fingerprint field to accept and default to null instead of empty string.
  #​4007
• Significantly improved worst-case sync memory consumption and moderately improved worst-case publish memory consumption for most repos.
  #​4086
• Fixed a bug where two packages with the same NEVRA and identical build times but different checksums could both pass the sync tie-breaker and be added to the repository version. The first-seen package now wins deterministically.
  #​4341
• Updated package signing to refresh all RPM metadata fields from the signed package file, ensuring size, header offsets, and other fields stay consistent after signing.
  #​4383

Deprecations and Removals {: #​3.36.0-removal }

• Remove handling of the nested-by-both publication layout option - it is complex and a bit flawed.

Misc {: #​3.36.0-misc }

---

v3.35.3

Compare Source

Bugfixes {: #​3.35.3-bugfix }

• Fixed a bug where two packages with the same NEVRA and identical build times but different checksums could both pass the sync tie-breaker and be added to the repository version. The first-seen package now wins deterministically.
  #​4341
• Substantially (>50%) reduced sync memory use and runtime requirements by using caching within the sync stage.

---

v3.35.2

Compare Source

Bugfixes {: #​3.35.2-bugfix }

• Fixed RpmRepository.package_signing_fingerprint field to accept and default to null instead of empty string.
  #​4007

---

v3.35.1

Compare Source

Bugfixes {: #​3.35.1-bugfix }

• Significantly improved worst-case sync memory consumption and moderately improved worst-case publish memory consumption for most repos.
  #​4086

---

v3.35.0

Compare Source

Features {: #​3.35.0-feature }

• Support publishing uncompressed repository metadata.
  #​4281

Bugfixes {: #​3.35.0-bugfix }

• Nest the package URLs in nested_by_digest or nested_by_both repo layout options, improving browsability.
  #​4268

• Reduce the number of directories implicit in the nested_by_digest and nested_by_both repo layouts

  Previously many new URL paths could be created:
  Packages/by-digest/00/0000/
  Packages/by-digest/00/0001/
  Packages/by-digest/00/0002/
  ...
  Packages/by-digest/ff/ffff/

  While not every one of these possible directories exist, enough of them did to meaningfully increase the number of requests that scrapers generate. And since directory listings are not very cacheable, these requests all filtered down to the DB, resulting in very meaningful increase in DB load.

  Instead let's make the by-digest URLs use a very similar (and manageable) directory structure to the alphabetical nesting, and prepend the digest to the filename.
  Packages/f/by-digest/xxxxxx-foo-1.0.0-1.noarch.rpm
  #​4287

• Fixed problems with the prune operation. Additional remediation may be required: see pulp/pulpcore#7272

• Made the relative_path argument to package upload no-op. In #​4073 we started enforcing that the value of location_href and relative_path should be the canonicalized filename of the package.

Misc {: #​3.35.0-misc }

---

v3.34.0

Compare Source

Features {: #​3.34.0-feature }

• Implement nested_by_digest and nested_by_both and cache-friendly repo layout options.
  #​4215
• Added feature to sign packages when they are added via the repo modify endpoint.
  #​4234
• Bump pulpcore upperbound to <3.115.

Bugfixes {: #​3.34.0-bugfix }

• Fixes the 'flat' publication layout option, which previously resulted in 404s for all packages.
  #​4242

Misc {: #​3.34.0-misc }

---

v3.33.1

Compare Source

Misc {: #​3.33.1-misc }

---

v3.33.0

Compare Source

Features {: #​3.33.0-feature }

• Updated pulp_rpm package signing code to use "rpm_package" location instead of expecting the original file to be signed.
  #​4189

Bugfixes {: #​3.33.0-bugfix }

• Fixed a bug where syncing from a remote repository with duplicate filenames and different paths
  would result in one of these packages being missing from a Pulp distribution.
  This is known to happen in some JFrog repositories. On systems that have synced from such
  repositories before, it is required to clean up the related packages with orphan cleanup or use
  the provided pulpcore-manager rpm-datarepair 4073 command, which forces internal objects to use
  non-ambiguous filenames. #​4073
• Taught publish/synchronize to return full serialized object of their action.
  #​4117
• Fix a bug where the retain_package_versions feature (and prune and a few others) was not correctly determining which packages were most recent.
  #​4124
• Downgraded openapi spec version from 3.1 to 3.0 to revert regression in the published Ruby bindings.
  #​4125
• Fixed synchronous RPM upload using an existing artifact.
  #​4148
• Improved postgres memory performance on mirror complete sync
  #​4174
• Fixed the chunk uploads as part of the synchronous RPM upload.
  #​4179
• Renaming PackageUploadSerializer to RPMPackageUploadSerializer to avoid the duplicating schema
  #​4196
• Update the required version of the libcomps package to ensure a bugfix is present which was resulting in memory corruption and segfaults in some cases.

Improved Documentation {: #​3.33.0-doc }

• Clarified retain_package_versions function in the documentation.
  #​4169
• Updated page about bindings to point to Pulp Openapi Generator documentation.

Misc {: #​3.33.0-misc }

---

v3.32.10

Compare Source

Bugfixes {: #​3.32.10-bugfix }

• Fixed a bug where two packages with the same NEVRA and identical build times but different checksums could both pass the sync tie-breaker and be added to the repository version. The first-seen package now wins deterministically.
  #​4341
• Substantially (>50%) reduced sync memory use and runtime requirements by using caching within the sync stage.

---

v3.32.9

Compare Source

Bugfixes {: #​3.32.9-bugfix }

• Fixed RpmRepository.package_signing_fingerprint field to accept and default to null instead of empty string.
  #​4007

---

v3.32.8

Compare Source

Bugfixes {: #​3.32.8-bugfix }

• Significantly improved worst-case sync memory consumption and moderately improved worst-case publish memory consumption for most repos.
  #​4086

---

v3.32.7

Compare Source

Bugfixes {: #​3.32.7-bugfix }

• Fixed problems with the prune operation. Additional remediation may be required: see pulp/pulpcore#7272

Misc {: #​3.32.7-misc }

---

v3.32.6

Compare Source

Bugfixes {: #​3.32.6-bugfix }

• Improved postgres memory performance on mirror complete sync
  #​4174

---

v3.32.5

Compare Source

Bugfixes {: #​3.32.5-bugfix }

• Fixed the chunk uploads as part of the synchronous RPM upload.
  #​4179

---

v3.32.4

Compare Source

Bugfixes {: #​3.32.4-bugfix }

• Fixed synchronous RPM upload using an existing artifact.
  #​4148

---

v3.32.3

Compare Source

Bugfixes {: #​3.32.3-bugfix }

• Fixed a bug where syncing from a remote repository with duplicate filenames and different paths
  would result in one of these packages being missing from a Pulp distribution.
  This is known to happen in some JFrog repositories.

  On systems that have synced from such repositories before, it is required to clean up the related
  packages with orphan cleanup or use the provided "pulpcore-manager rpm-datarepair 4073",
  which forces internal objects to use non-ambiguous filenames.
  #​4073

• Fix a bug where the retain_package_versions feature (and prune and a few others) was not correctly determining which packages were most recent.
  #​4124

---

v3.32.2

Compare Source

Bugfixes {: #​3.32.2-bugfix }

• Downgraded openapi spec version from 3.1 to 3.0 to revert regression in the published Ruby bindings.
  #​4125

---

v3.32.1

Compare Source

Bugfixes {: #​3.32.10-bugfix }

• Fixed a bug where two packages with the same NEVRA and identical build times but different checksums could both pass the sync tie-breaker and be added to the repository version. The first-seen package now wins deterministically.
  #​4341
• Substantially (>50%) reduced sync memory use and runtime requirements by using caching within the sync stage.

---

v3.32.0

Compare Source

Bugfixes {: #​3.32.0-bugfix }

• Fixed: KeyError: 'package_signing_fingerprint' in pulp_rpm/app/serializers/repository.py
  #​4038
• Adapt to a pulpcore change that inadvertently broke pulp_rpm, due to a slightly improper use of an API.
  #​4054

---

v3.31.2

Compare Source

Bugfixes {: #​3.31.2-bugfix }

• Adapt to a pulpcore change that inadvertently broke pulp_rpm, due to a slightly improper use of an API.
  #​4054

---

v3.31.1

Compare Source

Bugfixes {: #​3.31.1-bugfix }

• Fixed: KeyError: 'package_signing_fingerprint' in pulp_rpm/app/serializers/repository.py
  #​4038

---

v3.31.0

Compare Source

Features {: #​3.31.0-feature }

• Added a synchronous RPM upload API. It's available at /pulp/api/v3/content/rpm/packages/upload/.
  #​4027

Bugfixes {: #​3.31.0-bugfix }

• Ensure API responses for Repository.package_signing_fingerprint returns an empty string instead of null.
  #​3995
• Significantly improved publish performance (more than double in some cases) by fixing some Django queries.

Improved Documentation {: #​3.31.0-doc }

• Added an example of uploading all packages inside a repository using the --directory option.
  #​3709
• Updated the modify guides to reflect a fix in the pulp-cli modify command.
  #​3881

Misc {: #​3.31.0-misc }

• #​3985

---

v3.30.2

Compare Source

Bugfixes {: #​3.30.2-bugfix }

• Ensure API responses for Repository.package_signing_fingerprint returns an empty string instead of null.
  #​3995

---

v3.30.1

Compare Source

Bugfixes {: #​3.30.1-bugfix }

• Significantly improved publish performance (more than double in some cases) by fixing some Django queries.

---

v3.30.0

Compare Source

Features {: #​3.30.0-feature }

• Enabled the checkpoint feature in pulp_rpm.
  #​3907

Bugfixes {: #​3.30.0-bugfix }

• Fix a memory consumption issue w/ syncing repositories that contain modules.
  #​3311
• Fixed RPM signing with chunked uploads
  #​3927

Deprecations and Removals {: #​3.30.0-removal }

• Using the 'gpgcheck', 'repo_gpgcheck', 'package_checksum_type', or 'checksum_type' options, which have been deprecated for some time, will no longer have any effect. In the case of 'gpgcheck' or 'repo_gpgcheck', please use the 'repo_config' option instead. In the case of 'package_checksum_type' or 'metadata_checksum_type', please use 'checksum_type' instead.

Misc {: #​3.30.0-misc }

---

v3.29.11

Compare Source

Bugfixes {: #​3.29.11-bugfix }

• Fixed RpmRepository.package_signing_fingerprint field to accept and default to null instead of empty string.
  #​4007
• Fixed a bug where two packages with the same NEVRA and identical build times but different checksums could both pass the sync tie-breaker and be added to the repository version. The first-seen package now wins deterministically.
  #​4341
• Substantially (>50%) reduced sync memory use and runtime requirements by using caching within the sync stage.

---

v3.29.10

Compare Source

Bugfixes {: #​3.29.10-bugfix }

• Significantly improved worst-case sync memory consumption and moderately improved worst-case publish memory consumption for most repos.
  #​4086

---

v3.29.9

Compare Source

Bugfixes {: #​3.29.9-bugfix }

• Improved postgres memory performance on mirror complete sync
  #​4174
• Fixed problems with the prune operation. Additional remediation may be required: see pulp/pulpcore#7272

Misc {: #​3.29.9-misc }

---

v3.29.8

Compare Source

Bugfixes {: #​3.29.8-bugfix }

• Fix a bug where the retain_package_versions feature (and prune and a few others) was not correctly determining which packages were most recent.
  #​4124

---

v3.29.7

Compare Source

Bugfixes {: #​3.29.7-bugfix }

• Update the required version of the libcomps package to ensure a bugfix is present which was resulting in memory corruption and segfaults in some cases.

---

v3.29.6

Compare Source

Bugfixes {: #​3.29.6-bugfix }

• Fixed a bug where syncing from a remote repository with duplicate filenames and different paths
  would result in one of these packages being missing from a Pulp distribution.
  This is known to happen in some JFrog repositories.

  On systems that have synced from such repositories before, it is required to clean up the related
  packages with orphan cleanup or use the provided "pulpcore-manager rpm-datarepair 4073",
  which forces internal objects to use non-ambiguous filenames.
  #​4073

---

v3.29.5

Compare Source

Bugfixes {: #​3.29.5-bugfix }

• Fixed: KeyError: 'package_signing_fingerprint' in pulp_rpm/app/serializers/repository.py
  #​4038
• Adapt to a pulpcore change that inadvertently broke pulp_rpm, due to a slightly improper use of an API.
  #​4054

---

v3.29.4

Compare Source

Bugfixes {: #​3.29.4-bugfix }

• Ensure API responses for Repository.package_signing_fingerprint returns an empty string instead of null.
  #​3995

---

v3.29.3

Compare Source

Bugfixes {: #​3.29.3-bugfix }

• Fixed RPM signing with chunked uploads
  #​3927
• Significantly improved publish performance (more than double in some cases) by fixing some Django queries.

---

v3.29.2

Compare Source

Bugfixes {: #​3.29.2-bugfix }

• Fix a memory consumption issue w/ syncing repositories that contain modules.
  #​3311

---

v3.29.1

Compare Source

Bugfixes {: #​3.29.11-bugfix }

• Fixed RpmRepository.package_signing_fingerprint field to accept and default to null instead of empty string.
  #​4007
• Fixed a bug where two packages with the same NEVRA and identical build times but different checksums could both pass the sync tie-breaker and be added to the repository version. The first-seen package now wins deterministically.
  #​4341
• Substantially (>50%) reduced sync memory use and runtime requirements by using caching within the sync stage.

---

v3.29.0

Compare Source

Features {: #​3.29.0-feature }

• Make the layout of the packages in the published repository configurable.
  #​3874

• Added permissions for set/unset_label on RPM content-types.

  The types that support this new call include:

  • Package
  • UpdateRecord
  • Modulemd
  • ModulemdDefaults
  • ModulemdObsoletes
    #​3896

Bugfixes {: #​3.29.0-bugfix }

• Added a retry mechanism for client authentication in ULN-based downloaders to improve connection stability.
  #​3891

• Reworked content-labeling RBAC to rely on core.manage_content_labels permission.

  This permission must be explicitly granted by assigning the core.content_labeler Role
  to a user.
  #​3910

---

v3.28.1

Compare Source

No significant changes.

---

v3.28.0

Compare Source

Bugfixes {: #​3.28.0-bugfix }

• Honor repository's compression_type for publications unless overridden
  #​3614
• Declared compatibility against pulpcore<3.70.
  #​3620
• Fixed the JSONField specification so it doesn't break ruby bindings.
  #​3639
• Fixed stacktrace from create_modulemd() when trying to report an error.
  #​3756
• Make it possible to sync repositories without filelists.xml or other.xml metadata
  #​3777
• Extended PRN support to Advanced Copy API and DistributionTree.
  #​3853

Improved Documentation {: #​3.28.0-doc }

• Updated documentation for prune and advanced-copy to use pulp-cli examples.
  #​3622

Misc {: #​3.28.0-misc }

• #​3828, #​3854, #​3856

---

v3.27.13

Compare Source

Bugfixes {: #​3.27.13-bugfix }

• Substantially (>50%) reduced sync memory use and runtime requirements by using caching within the sync stage.

---

v3.27.12

Compare Source

Bugfixes {: #​3.27.12-bugfix }

• Fixed RpmRepository.package_signing_fingerprint field to accept and default to null instead of empty string.
  #​4007

• Fixed a bug where syncing from a remote repository with duplicate filenames and different paths
  would result in one of these packages being missing from a Pulp distribution.
  This is known to happen in some JFrog repositories.

  On systems that have synced from such repositories before, it is required to clean up the related
  packages with orphan cleanup or use the provided "pulpcore-manager rpm-datarepair 4073",
  which forces internal objects to use non-ambiguous filenames.
  #​4073

• Fixed a bug where two packages with the same NEVRA and identical build times but different checksums could both pass the sync tie-breaker and be added to the repository version. The first-seen package now wins deterministically.
  #​4341

---

v3.27.11

Compare Source

Bugfixes {: #​3.27.11-bugfix }

• Significantly improved worst-case sync memory consumption and moderately improved worst-case publish memory consumption for most repos.
  #​4086

---

v3.27.10

Compare Source

Bugfixes {: #​3.27.10-bugfix }

• Improved postgres memory performance on mirror complete sync
  #​4174
• Fixed problems with the prune operation. Additional remediation may be required: see pulp/pulpcore#7272

Misc {: #​3.27.10-misc }

---

v3.27.9

Compare Source

Bugfixes {: #​3.27.9-bugfix }

• Fix a bug where the retain_package_versions feature (and prune and a few others) was not correctly determining which packages were most recent.
  #​4124

---

v3.27.8

Compare Source

No significant changes.

---

v3.27.7

Compare Source

No significant changes.

---

v3.27.6

Compare Source

No significant changes.

---

v3.27.5

Compare Source

Bugfixes {: #​3.27.5-bugfix }

• Ensure API responses for Repository.package_signing_fingerprint returns an empty string instead of null.
  #​3995
• Fixed: KeyError: 'package_signing_fingerprint' in pulp_rpm/app/serializers/repository.py
  #​4038
• Adapt to a pulpcore change that inadvertently broke pulp_rpm, due to a slightly improper use of an API.
  #​4054

---

v3.27.4

Compare Source

Bugfixes {: #​3.27.4-bugfix }

• Fixed RPM signing with chunked uploads
  #​3927
• Significantly improved publish performance (more than double in some cases) by fixing some Django queries.

---

v3.27.3

Compare Source

Bugfixes {: #​3.27.3-bugfix }

• Fix a memory consumption issue w/ syncing repositories that contain modules.
  #​3311

---

v3.27.2

Compare Source

Bugfixes {: #​3.27.2-bugfix }

• Fixed the JSONField specification so it doesn't break ruby bindings.
  #​3639
• Fixed stacktrace from create_modulemd() when trying to report an error.
  #​3756

---

v3.27.1

Compare Source

Bugfixes {: #​3.27.13-bugfix }

• Substantially (>50%) reduced sync memory use and runtime requirements by using caching within the sync stage.

---

v3.27.0

Compare Source

Features {: #​3.27.0-feature }

• Added /rpm/prune/ endpoint to allow "pruning" old Packages from repositories.
  #​2909
• Added (tech preview) support for signing RPM packages when uploading to a Repository.
  #​2986

Bugfixes {: #​3.27.0-bugfix }

• Taught tests to find centos8 at vault.centos.org.
  #​3572
• Fix a flaw that still allowed to add duplicate advisories to a repository version.
  #​3587
• Made sync more tolerant of poorly configured webservers.
  #​3599

---

v3.26.8

Compare Source

Bugfixes {: #​3.26.8-bugfix }

• Fixed a bug where syncing from a remote repository with duplicate filenames and different paths
  would result in one of these packages being missing from a Pulp distribution.
  This is known to happen in some JFrog repositories.

  On systems that have synced from such repositories before, it is required to clean up the related
  packages with orphan cleanup or use the provided "pulpcore-manager rpm-datarepair 4073",
  which forces internal objects to use non-ambiguous filenames.
  #​4073

• Fixed a bug where two packages with the same NEVRA and identical build times but different checksums could both pass the sync tie-breaker and be added to the repository version. The first-seen package now wins deterministically.
  #​4341

---

v3.26.7

Compare Source

Bugfixes {: #​3.26.7-bugfix }

• Improved postgres memory performance on mirror complete sync
  #​4174

---

v3.26.6

Compare Source

Bugfixes {: #​3.26.6-bugfix }

• Adapt to a pulpcore change that inadvertently broke pulp_rpm, due to a slightly improper use of an API.
  #​4054
• Significantly improved publish performance (more than double in some cases) by fixing some Django queries.

---

v3.26.5

Compare Source

Bugfixes {: #​3.26.5-bugfix }

• Fix a memory consumption issue w/ syncing repositories that contain modules.
  #​3311

---

v3.26.4

Compare Source

No significant changes.

---

v3.26.3

Compare Source

Bugfixes {: #​3.26.3-bugfix }

• Fixed the JSONField specification so it doesn't break ruby bindings.
  #​3639

---

v3.26.2

Compare Source

Bugfixes {: #​3.26.2-bugfix }

• Honor repository's compression_type for publications unless overridden
  #​3614
• Declared compatibility against pulpcore<3.70.
  #​3620
• Fixed stacktrace from create_modulemd() when trying to report an error.
  #​3756

---

v3.26.1

Compare Source

Bugfixes {: #​3.26.1-bugfix }

• Taught tests to find centos8 at vault.centos.org.
  #​3572
• Fix a flaw that still allowed to add duplicate advisories to a repository version.
  #​3587
• Made sync more tolerant of poorly configured webservers.
  #​3599

---

v3.26.0

Compare Source

Features

• Added django admin command to analyse repository disk size.
  #​3003
• Added support for repository-size management command.
  #​3312

Bugfixes

• Addressed some edge-cases involving advisory-collection-naming and imports.
  #​3380
• Fixed modulemd upload raising an error when "packages" parameter was passed.
  #​3427
• Fixed an issue where the value of gpgcheck wasn't appropriately set on some publications.
  #​3462
• Fix publications created by mirror_complete syncs not having checksum_type set properly.
  #​3484
• Fixed modulemd_defaults create endpoint not setting the content digest.
  #​3495

Improved Documentation

• Improved pages about Post/Delete Content (from Pulp) and Add/Remove/Copy existing Content (from Repos).
  #​3482

Misc

• #​3445, #​3520, #​3526

---

v3.25.6

Compare Source

Bugfixes {: #​3.25.6-bugfix }

• Honor repository's compression_type for publications unless overridden
  #​3614
• Declared compatibility against pulpcore<3.70.
  #​3620
• Fixed stacktrace from create_modulemd() when trying to report an error.
  #​3756

---

v3.25.5

Compare Source

Bugfixes {: #​3.25.5-bugfix }

• Taught tests to find centos8 at vault.centos.org.
  #​3572
• Fix a flaw that still allowed to add duplicate advisories to a repository version.
  #​3587
• Made sync more tolerant of poorly configured webservers.
  #​3599

Misc {: #​3.25.5-misc }

• #​3520

---

v3.25.4

Compare Source

Bugfixes

• Fixed modulemd upload raising an error when "packages" parameter was passed.
  #​3427

Misc

• #​3526

---

v3.25.3

Compare Source

Bugfixes

• Fix publications created by mirror_complete syncs not having checksum_type set properly.
  #​3484
• Fixed modulemd_defaults create endpoint not setting the content digest.
  #​3495

---

v3.25.2

Compare Source

Bugfixes

• Fixed an issue where the value of gpgcheck wasn't appropriately set on some publications.
  #​3462

---

v3.25.1

Compare Source

Bugfixes

• Addressed some edge-cases involving advisory-collection-naming and imports.
  #​3380

---

v3.25.0

Compare Source

Features

• Added a compression_type option to allow publishing metadata files with zstd compression (in addition to the default gzip).
  #​3316
• Raised pulpcore requirement to 3.44.1 to fix an RBAC related bug.
  #​3381

Bugfixes

• Added support for preventing unquoted NSVCA numerical values (e.g. "stream": 2.10) of having zeros stripped on modulemd YAML files.
  #​3285
• Fixed bug about malformed tuple introduced on the removal of sqlite-metadata support (PR #​3328).
  #​3351
• Fixed server error when trying to create repository with deprecated gpgcheck and repo_gpgcheck.
  #​3357
• Fixes bug where RpmPublications couldn't be created when using a non-admin user.
  #​3381

Deprecations and Removals

• Removed the ability to generate sqlite metadata during repository publish.
  #​2457
• Removed support for publishing repos with a checksum type of md5, sha1, or sha224
  #​2488

Misc

• #​3345

---

v3.24.0

Compare Source

Features

• Added pulpcore 3.40 compatibility.
• Added ability to customiz

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.