devpi-server 6.19.2__tar.gz → 6.19.3__tar.gz

{devpi_server-6.19.2 → devpi_server-6.19.3}/.flake8

@@ -4,5 +4,4 @@ ignore = E203,E501,E704,E741,W503
 per-file-ignores =
     plugin.py:E127,E128,E231
     model.py:E128,E231
-    test_importexport.py:E121
     test*.py:E126,E127,E128,E225,E226,E231,E251

{devpi_server-6.19.2 → devpi_server-6.19.3}/CHANGELOG

@@ -2,6 +2,19 @@
 
 .. towncrier release notes start
 
+6.19.3 (2026-04-13)
+===================
+
+Bug Fixes
+---------
+
+- Fix #1112: Parse simple JSON reply even with wrong content-type in reply if the body seems to contain JSON.
+
+- Return stale project list for mirrors when the lock can't be acquired within the timeout.
+
+- Fix importing of toxresults from devpi-server 6.5.0 to 6.9.0 where the wrong hash was stored.
+
+
 6.19.2 (2026-03-17)
 ===================
 

{devpi_server-6.19.2 → devpi_server-6.19.3}/CHANGELOG.short.rst

@@ -9,6 +9,19 @@ Changelog
 
 .. towncrier release notes start
 
+6.19.3 (2026-04-13)
+===================
+
+Bug Fixes
+---------
+
+- Fix #1112: Parse simple JSON reply even with wrong content-type in reply if the body seems to contain JSON.
+
+- Return stale project list for mirrors when the lock can't be acquired within the timeout.
+
+- Fix importing of toxresults from devpi-server 6.5.0 to 6.9.0 where the wrong hash was stored.
+
+
 6.19.2 (2026-03-17)
 ===================
 
@@ -99,51 +112,3 @@ Other Changes
 
 - The filenames of some exported doczip files change due to normalization of the project name caused by changing the internals during export to allow ``--hard-links`` to work.
 
-
-6.17.0 (2025-08-27)
-===================
-
-Deprecations and Removals
--------------------------
-
-- Dropped support for migrating old password hashes that were replaced in devpi-server 4.2.0.
-
-- Removed support for basic authorization in primary URL. The connection is already secured by a bearer token header.
-
-- Removed the experimental ``--replica-cert`` option. The replica is already using a token via a shared secret, so this is redundant.
-
-- Removed ``--replica-max-retries`` option. It wasn't implemented for async_httpget and didn't work correctly when streaming data.
-
-Features
---------
-
-- Use httpx for all data fetching for mirrors and fetch projects list asynchronously to allow update in background even after a timeout.
-
-- Use httpx instead of requests when proxying from replicas to primary.
-
-- Use httpx for all requests from replicas to primary.
-
-- Use httpx when pushing releases to external index.
-
-- Added ``mirror_ignore_serial_header`` mirror index option, which allows switching from PyPI to a mirror without serials header when set to ``True``, otherwise only stale links will be served and no updates be stored.
-
-- The HTTP cache information for mirrored projects is persisted and re-used on server restarts.
-
-- Added ``--file-replication-skip-indexes`` option to skip file replication for ``all``, by index type (i.e. ``mirror``) or index name (i.e. ``root/pypi``).
-
-Bug Fixes
----------
-
-- Correctly handle lists for ``Provides-Extra`` and ``License-File`` metadata in database.
-
-- Fix traceback by returning 401 error code when using wrong password with a user that was created using an authentication plugin like devpi-ldap which passes authentication through in that case.
-
-- Fix #1053: allow users to update their passwords when ``--restrict-modify`` is used.
-
-- Fix #1097: return 404 when trying to POST to +simple.
-
-Other Changes
--------------
-
-- Changed User-Agent when fetching data for mirrors from just "server" to "devpi-server".
-

{devpi_server-6.19.2 → devpi_server-6.19.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: devpi-server
-Version: 6.19.2
+Version: 6.19.3
 Summary: devpi-server: backend for hosting private package indexes and PyPI on-demand mirrors
 Maintainer-email: Florian Schulze <mail@pyfidelity.com>
 License-Expression: MIT
@@ -121,6 +121,19 @@ Changelog
 
 .. towncrier release notes start
 
+6.19.3 (2026-04-13)
+===================
+
+Bug Fixes
+---------
+
+- Fix #1112: Parse simple JSON reply even with wrong content-type in reply if the body seems to contain JSON.
+
+- Return stale project list for mirrors when the lock can't be acquired within the timeout.
+
+- Fix importing of toxresults from devpi-server 6.5.0 to 6.9.0 where the wrong hash was stored.
+
+
 6.19.2 (2026-03-17)
 ===================
 
@@ -211,51 +224,3 @@ Other Changes
 
 - The filenames of some exported doczip files change due to normalization of the project name caused by changing the internals during export to allow ``--hard-links`` to work.
 
-
-6.17.0 (2025-08-27)
-===================
-
-Deprecations and Removals
--------------------------
-
-- Dropped support for migrating old password hashes that were replaced in devpi-server 4.2.0.
-
-- Removed support for basic authorization in primary URL. The connection is already secured by a bearer token header.
-
-- Removed the experimental ``--replica-cert`` option. The replica is already using a token via a shared secret, so this is redundant.
-
-- Removed ``--replica-max-retries`` option. It wasn't implemented for async_httpget and didn't work correctly when streaming data.
-
-Features
---------
-
-- Use httpx for all data fetching for mirrors and fetch projects list asynchronously to allow update in background even after a timeout.
-
-- Use httpx instead of requests when proxying from replicas to primary.
-
-- Use httpx for all requests from replicas to primary.
-
-- Use httpx when pushing releases to external index.
-
-- Added ``mirror_ignore_serial_header`` mirror index option, which allows switching from PyPI to a mirror without serials header when set to ``True``, otherwise only stale links will be served and no updates be stored.
-
-- The HTTP cache information for mirrored projects is persisted and re-used on server restarts.
-
-- Added ``--file-replication-skip-indexes`` option to skip file replication for ``all``, by index type (i.e. ``mirror``) or index name (i.e. ``root/pypi``).
-
-Bug Fixes
----------
-
-- Correctly handle lists for ``Provides-Extra`` and ``License-File`` metadata in database.
-
-- Fix traceback by returning 401 error code when using wrong password with a user that was created using an authentication plugin like devpi-ldap which passes authentication through in that case.
-
-- Fix #1053: allow users to update their passwords when ``--restrict-modify`` is used.
-
-- Fix #1097: return 404 when trying to POST to +simple.
-
-Other Changes
--------------
-
-- Changed User-Agent when fetching data for mirrors from just "server" to "devpi-server".
-

devpi_server-6.19.3/devpi_server/__init__.py

@@ -0,0 +1 @@
+__version__ = "6.19.3"

{devpi_server-6.19.2 → devpi_server-6.19.3}/devpi_server/config.py

@@ -4,6 +4,7 @@ from . import fileutil
 from . import hookspecs
 from .interfaces import IIOFileFactory
 from .log import threadlog
+from copy import deepcopy
 from devpi_common.types import cached_property
 from devpi_common.url import URL
 from operator import itemgetter
@@ -776,16 +777,11 @@ def get_io_file_factory(storage_info: dict) -> IIOFileFactory:
     _io_file_factory: Callable
     db_filestore = storage_info.setdefault("db_filestore", True)
     settings = storage_info.setdefault("settings", {})
-    if db_filestore:
-        from .filestore_db import DBIOFile
-
-        _io_file_factory = DBIOFile
-    else:
-        fsbackend = settings.setdefault("fsbackend", "fs")
-        _io_file_factory = __import__(
-            f"filestore_{fsbackend}", globals=globals(), level=1
-        ).fsiofile_factory
-
+    fsbackend = settings.setdefault("fsbackend", "db" if db_filestore else "fs")
+    _io_file_factory = __import__(
+        f"filestore_{fsbackend}", globals=globals(), level=1
+    ).fsiofile_factory
+    if not db_filestore:
         storage_info.setdefault("_test_markers", []).append("storage_with_filesystem")
     verifyObject(IIOFileFactory, _io_file_factory)
 
@@ -1147,7 +1143,7 @@ class Config:
     def _storage_info(self):
         name = self.storage_info["name"]
         settings = self.storage_info["settings"]
-        return self._storage_info_from_name(name, settings)
+        return deepcopy(self._storage_info_from_name(name, settings))
 
     @property
     def io_file_factory(self) -> IIOFileFactory:

{devpi_server-6.19.2 → devpi_server-6.19.3}/devpi_server/filestore_db.py

@@ -80,3 +80,8 @@ class DBIOFile:
 
     def _rollback(self) -> None:
         pass
+
+
+@provider(IIOFileFactory)
+def fsiofile_factory(conn: Any, settings: dict) -> DBIOFile:
+    return DBIOFile(conn, settings)

{devpi_server-6.19.2 → devpi_server-6.19.3}/devpi_server/filestore_hash_hl.py

@@ -43,7 +43,7 @@ class File:
     basedir: Path = field(kw_only=True)
     file_path_info: FilePathInfo = field(kw_only=True)
     path: Path = field(kw_only=True)
-    digest_path: Path = field(kw_only=True)
+    digest_path: Path | None = field(kw_only=True)
 
     def __repr__(self) -> str:
         return f"<{self.__class__.__name__} {self.path}>"
@@ -70,6 +70,7 @@ class File:
         with suppress(OSError):
             self.path.unlink()
         digest_path = self.digest_path
+        assert digest_path is not None
         if digest_path.exists() and digest_path.stat().st_nlink == 1:
             # if nothing else links to the digest file anymore, then remove it
             digest_path.unlink()
@@ -87,10 +88,13 @@ class DirtyFile(File):
     def commit(self) -> list[str]:
         assert tmpsuffix_for_path(self.path) is not None
         digest_path = self.digest_path
+        assert digest_path is not None
         if digest_path.exists():
             # additional check besides the content digest
             assert getsize(digest_path) == self.getsize()
             # link to the existing digest file
+            if self.dst_path.exists():
+                raise RuntimeError(f"{self.dst_path} -> {digest_path}")
             hardlink(digest_path, self.dst_path)
             # drop the temporary file
             self.drop()
@@ -112,8 +116,11 @@ class DirtyFile(File):
 @provider(IDirtyFileFactory, IFileFactory)
 class HashHLFactory:
     @classmethod
-    def _make_digest_path(cls, basedir: Path, file_path_info: FilePathInfo) -> Path:
-        assert file_path_info.hash_digest is not None
+    def _make_digest_path(
+        cls, basedir: Path, file_path_info: FilePathInfo
+    ) -> Path | None:
+        if file_path_info.hash_digest is None:
+            return None
         return basedir.joinpath("+h", *split_digest(file_path_info.hash_digest))
 
     @classmethod
@@ -184,6 +191,7 @@ class HashHLIOFile(FSIOFileBase):
                     path.unlink()
                     threadlog.warn("completed file-del from crashed tx: %s", path)
                 digest_path = HashHLFactory._make_digest_path(basedir, file_path_info)
+                assert digest_path is not None
                 with suppress(OSError):
                     digest_path.unlink()
                     threadlog.warn(
@@ -193,6 +201,7 @@ class HashHLIOFile(FSIOFileBase):
                 dst = HashHLFactory._make_path(basedir, relpath)
                 src = basedir / rel_rename
                 digest_path = HashHLFactory._make_digest_path(basedir, file_path_info)
+                assert digest_path is not None
                 if digest_path.exists() and src.exists():
                     # additional check besides the content digest
                     assert getsize(digest_path) == getsize(src)

{devpi_server-6.19.2 → devpi_server-6.19.3}/devpi_server/importexport.py

@@ -9,12 +9,16 @@ from .main import Fatal
 from .main import init_default_indexes
 from .main import set_state_version
 from .main import xom_from_config
+from .markers import absent
 from .model import Rel
 from .normalized import normalize_name
 from .readonly import ReadonlyView
 from .readonly import get_mutable_deepcopy
+from attrs import define
+from attrs import field
 from collections import defaultdict
 from devpi_common.metadata import BasenameMeta
+from devpi_common.types import parse_hash_spec
 from devpi_common.url import URL
 from devpi_server import __version__ as server_version
 from devpi_server.model import get_stage_customizer_classes
@@ -350,6 +354,81 @@ class IndexDump:
         self.exporter.completed(f"{type}: {relpath} ")
 
 
+@define(kw_only=True)
+class Migrator:
+    dumpversion: int = field(converter=int)
+
+    @dumpversion.validator
+    def _validate_dumpversion(self, _attribute, value):
+        if value not in {1, 2}:
+            msg = f"incompatible dumpversion: {self.dumpversion}"
+            raise Fatal(msg)
+
+    def migrate(self, data: dict) -> dict:
+        data["indexes"] = {
+            k: self.migrate_index(v) for k, v in data.pop("indexes").items()
+        }
+        data["users"] = {k: self.migrate_user(v) for k, v in data.pop("users").items()}
+        return data
+
+    def migrate_file(self, data: dict) -> dict:
+        if self.dumpversion < 2:
+            # previous versions would not add a version attribute
+            data["version"] = BasenameMeta(Path(data["relpath"]).name).version
+        if "entrymapping" in data:
+            mapping = data["entrymapping"]
+            hashes = Digests(mapping.pop("hashes", {}))
+            # devpi-server-2.1 exported with md5 checksums
+            if "md5" in mapping:
+                hashes["md5"] = mapping.pop("md5")
+            # docs and toxresults didn't always have hashes stored in export dump
+            if "hash_spec" in mapping:
+                hashes.add_spec(mapping.pop("hash_spec"))
+            mapping["hashes"] = dict(hashes)
+        if "for_entrypath" in data:
+            self.migrate_toxresult(data)
+        return data
+
+    def migrate_index(self, data: dict) -> dict:
+        if "files" in data:
+            data["files"] = [self.migrate_file(v) for v in data.pop("files")]
+        indexconfig = data["indexconfig"]
+        if (
+            "uploadtrigger_jenkins" in indexconfig
+            and not indexconfig["uploadtrigger_jenkins"]
+        ):
+            # remove if not set, so if the trigger was never
+            # used, you don't need to install the plugin
+            del indexconfig["uploadtrigger_jenkins"]
+        if "pypi_whitelist" in indexconfig:
+            # this was renamed in 3.0.0
+            whitelist = indexconfig.pop("pypi_whitelist")
+            if "mirror_whitelist" not in indexconfig:
+                indexconfig["mirror_whitelist"] = whitelist
+        return data
+
+    def migrate_toxresult(self, data: dict) -> dict:
+        hash_type = None
+        hash_value = None
+        parts = Path(data["relpath"]).parts
+        if len(parts) == 5:
+            hash_spec = parse_hash_spec(parts[3])
+            if hash_spec[0] is not None:
+                hash_type = hash_spec[0]().name
+                hash_value = hash_spec[1]
+        if (entrymapping := data.get("entrymapping")) is not None:
+            hashes = entrymapping.get("hashes", {})
+            if hashes.get(hash_type, absent) == hash_value:
+                # from 6.5.0 until it was fixed in 6.9.0 the hash for toxresults
+                # was for the linked file, not for the contents, so we remove them
+                # here to prevent mismatch errors
+                hashes.clear()
+        return data
+
+    def migrate_user(self, data: dict) -> dict:
+        return data
+
+
 class Importer:
     import_indexes: dict[str, Any]
 
@@ -440,11 +519,10 @@ class Importer:
     def import_all(self, path: Path) -> None:  # noqa: PLR0912
         self.import_rootdir = path
         json_path = path / "dataindex.json"
-        self.import_data = self.read_json(json_path)
-        self.dumpversion = self.import_data["dumpversion"]
-        if self.dumpversion not in ("1", "2"):
-            msg = f"incompatible dumpversion: {self.dumpversion!r}"
-            raise Fatal(msg)
+        import_data = self.read_json(json_path)
+        self.import_data = Migrator(dumpversion=import_data["dumpversion"]).migrate(
+            import_data
+        )
         self.import_users = self.import_data["users"]
         self.import_indexes = self.import_data["indexes"]
         self.display_import_header(path)
@@ -495,16 +573,6 @@ class Importer:
                 indexconfig = dict(import_index["indexconfig"])
                 if indexconfig['type'] in self.types_to_skip:
                     continue
-                if 'uploadtrigger_jenkins' in indexconfig:
-                    if not indexconfig['uploadtrigger_jenkins']:
-                        # remove if not set, so if the trigger was never
-                        # used, you don't need to install the plugin
-                        del indexconfig['uploadtrigger_jenkins']
-                if 'pypi_whitelist' in indexconfig:
-                    # this was renamed in 3.0.0
-                    whitelist = indexconfig.pop('pypi_whitelist')
-                    if 'mirror_whitelist' not in indexconfig:
-                        indexconfig['mirror_whitelist'] = whitelist
                 username, index = stagename.split("/")
                 user = self.xom.model.get_user(username)
                 assert user is not None
@@ -605,22 +673,12 @@ class Importer:
         # docs and toxresults didn't always have entrymapping in export dump
         mapping = filedesc.get("entrymapping", {})
         hashes = Digests(mapping.get("hashes", {}))
-        # devpi-server-2.1 exported with md5 checksums
-        if "md5" in mapping:
-            hashes["md5"] = mapping["md5"]
-        # docs and toxresults didn't always have hashes stored in export dump
-        if "hash_spec" in mapping:
-            hashes.add_spec(mapping['hash_spec'])
         # note that the actual hash_type used within devpi-server is not
         # determined here but in store_releasefile/store_doczip/store_toxresult etc
         hashes.update(get_hashes(f, hash_types=hashes.get_missing_hash_types()))
 
         if filedesc["type"] == Rel.ReleaseFile:
-            if self.dumpversion == "1":
-                # previous versions would not add a version attribute
-                version = BasenameMeta(p.name).version
-            else:
-                version = filedesc["version"]
+            version = filedesc["version"]
 
             if hasattr(stage, 'store_releasefile'):
                 stage = cast("PrivateStage", stage)

{devpi_server-6.19.2 → devpi_server-6.19.3}/devpi_server/keyfs.py

@@ -742,6 +742,9 @@ class TransactionRootModel(RootModel):
             del self.model_cache[key]
         super().delete_stage(username, index)
 
+    def get_index(self, user: str, index: str | None = None) -> BaseStage | None:
+        return self.getstage(user, index)
+
     def get_user(self, name):
         if name not in self.model_cache:
             self.model_cache[name] = super().get_user(name)

{devpi_server-6.19.2 → devpi_server-6.19.3}/devpi_server/mirror.py

@@ -628,6 +628,9 @@ class MirrorStage(BaseStage):
         return self.xom.setdefault_singleton(
             self.name, "project_retrieve_times", factory=ProjectUpdateCache)
 
+    def get_projects_timeout(self, timeout: float | None) -> float:
+        return self.projects_timeout if timeout is None else timeout
+
     async def _get_remote_projects(
         self, projects_future: asyncio.Future[ProjectsResult]
     ) -> None:
@@ -656,7 +659,9 @@ class MirrorStage(BaseStage):
             )
         assert text is not None
         parser: ProjectHTMLParser | ProjectJSONv1Parser
-        if response.headers.get('content-type') == SIMPLE_API_V1_JSON:
+        if (
+            response.headers.get("content-type") == SIMPLE_API_V1_JSON
+        ) or text.startswith("{"):
             parser = ProjectJSONv1Parser(response.url)
             parser.feed(json.loads(text))
         else:
@@ -675,7 +680,7 @@ class MirrorStage(BaseStage):
     def _update_projects(
         self, timeout: float | None = None
     ) -> tuple[dict[NormalizedName, str], bool]:
-        projects_timeout = self.projects_timeout if timeout is None else timeout
+        projects_timeout = self.get_projects_timeout(timeout)
         projects_future = cast(
             "asyncio.Future[ProjectsResult]", self.xom.create_future()
         )
@@ -740,12 +745,18 @@ class MirrorStage(BaseStage):
         # try without lock first
         if not self.cache_projectnames.is_expired(self.cache_expiry):
             return (self.cache_projectnames.get(), False)
-        with self._list_projects_perstage_lock:
-            # retry in case it was updated in another thread
-            if not self.cache_projectnames.is_expired(self.cache_expiry):
-                return (self.cache_projectnames.get(), False)
-            # no fresh projects or None at all, let's go remote
-            return self._update_projects(timeout=timeout)
+        lock = self._list_projects_perstage_lock
+        projects_timeout = self.get_projects_timeout(timeout)
+        if lock.acquire(timeout=projects_timeout):
+            try:
+                # retry in case it was updated in another thread
+                if not self.cache_projectnames.is_expired(self.cache_expiry):
+                    return (self.cache_projectnames.get(), False)
+                # no fresh projects or None at all, let's go remote
+                return self._update_projects(timeout=timeout)
+            finally:
+                lock.release()
+        return (self._stale_list_projects_perstage(), True)
 
     def list_projects_perstage(self) -> dict[str, NormalizedName | str]:
         """ Return the project names. """

{devpi_server-6.19.2 → devpi_server-6.19.3}/devpi_server/model.py

@@ -236,6 +236,9 @@ class RootModel:
             del indexes[index]
             self.xom.del_singletons(f"{username}/{index}")
 
+    def get_index(self, user: str, index: str | None = None) -> BaseStage | None:
+        return self.getstage(user, index)
+
     def get_user(self, name: str) -> User | None:
         user = User(self, name)
         if user.key.exists():
@@ -492,6 +495,9 @@ class User:
         from .mirror import MirrorStage
         return MirrorStage
 
+    def get_index(self, indexname: str) -> BaseStage | None:
+        return self.getstage(indexname)
+
     def _getstage(self, indexname, index_type, ixconfig):
         if index_type == "mirror":
             cls = self.MirrorStage

{devpi_server-6.19.2 → devpi_server-6.19.3}/devpi_server/replica.py

@@ -303,7 +303,7 @@ class PrimaryChangelogRequest:
         with self.update_replica_status(start_serial):
             keyfs = self.xom.keyfs
             self._wait_for_serial(start_serial)
-            devpi_serial = keyfs.get_current_serial()
+            devpi_serial = keyfs.tx.conn.last_changelog_serial
             all_changes = []
             raw_size = 0
             start_time = time.time()
@@ -331,7 +331,7 @@ class PrimaryChangelogRequest:
 
         keyfs = self.xom.keyfs
         self._wait_for_serial(start_serial)
-        devpi_serial = keyfs.get_current_serial()
+        devpi_serial = keyfs.tx.conn.last_changelog_serial
         threadlog.info("Streaming from %s to %s", start_serial, devpi_serial)
 
         def iter_changelog_entries():

{devpi_server-6.19.2 → devpi_server-6.19.3}/devpi_server.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: devpi-server
-Version: 6.19.2
+Version: 6.19.3
 Summary: devpi-server: backend for hosting private package indexes and PyPI on-demand mirrors
 Maintainer-email: Florian Schulze <mail@pyfidelity.com>
 License-Expression: MIT
@@ -121,6 +121,19 @@ Changelog
 
 .. towncrier release notes start
 
+6.19.3 (2026-04-13)
+===================
+
+Bug Fixes
+---------
+
+- Fix #1112: Parse simple JSON reply even with wrong content-type in reply if the body seems to contain JSON.
+
+- Return stale project list for mirrors when the lock can't be acquired within the timeout.
+
+- Fix importing of toxresults from devpi-server 6.5.0 to 6.9.0 where the wrong hash was stored.
+
+
 6.19.2 (2026-03-17)
 ===================
 
@@ -211,51 +224,3 @@ Other Changes
 
 - The filenames of some exported doczip files change due to normalization of the project name caused by changing the internals during export to allow ``--hard-links`` to work.
 
-
-6.17.0 (2025-08-27)
-===================
-
-Deprecations and Removals
--------------------------
-
-- Dropped support for migrating old password hashes that were replaced in devpi-server 4.2.0.
-
-- Removed support for basic authorization in primary URL. The connection is already secured by a bearer token header.
-
-- Removed the experimental ``--replica-cert`` option. The replica is already using a token via a shared secret, so this is redundant.
-
-- Removed ``--replica-max-retries`` option. It wasn't implemented for async_httpget and didn't work correctly when streaming data.
-
-Features
---------
-
-- Use httpx for all data fetching for mirrors and fetch projects list asynchronously to allow update in background even after a timeout.
-
-- Use httpx instead of requests when proxying from replicas to primary.
-
-- Use httpx for all requests from replicas to primary.
-
-- Use httpx when pushing releases to external index.
-
-- Added ``mirror_ignore_serial_header`` mirror index option, which allows switching from PyPI to a mirror without serials header when set to ``True``, otherwise only stale links will be served and no updates be stored.
-
-- The HTTP cache information for mirrored projects is persisted and re-used on server restarts.
-
-- Added ``--file-replication-skip-indexes`` option to skip file replication for ``all``, by index type (i.e. ``mirror``) or index name (i.e. ``root/pypi``).
-
-Bug Fixes
----------
-
-- Correctly handle lists for ``Provides-Extra`` and ``License-File`` metadata in database.
-
-- Fix traceback by returning 401 error code when using wrong password with a user that was created using an authentication plugin like devpi-ldap which passes authentication through in that case.
-
-- Fix #1053: allow users to update their passwords when ``--restrict-modify`` is used.
-
-- Fix #1097: return 404 when trying to POST to +simple.
-
-Other Changes
--------------
-
-- Changed User-Agent when fetching data for mirrors from just "server" to "devpi-server".
-

{devpi_server-6.19.2 → devpi_server-6.19.3}/devpi_server.egg-info/SOURCES.txt

@@ -112,10 +112,14 @@ test_devpi_server/importexportdata/badindexname/dataindex.json
 test_devpi_server/importexportdata/badusername/dataindex.json
 test_devpi_server/importexportdata/basescycle/dataindex.json
 test_devpi_server/importexportdata/createdmodified/dataindex.json
+test_devpi_server/importexportdata/dashes_v1/dataindex.json
+test_devpi_server/importexportdata/dashes_v1/user1/dev/hello/hello-1.2_3.tar.gz
 test_devpi_server/importexportdata/deletedbase/dataindex.json
 test_devpi_server/importexportdata/mirrordata/dataindex.json
 test_devpi_server/importexportdata/mirrordata/root/pypi/dddttt/0.1.dev1/dddttt-0.1.dev1.tar.gz
 test_devpi_server/importexportdata/modifiedpypi/dataindex.json
+test_devpi_server/importexportdata/no_history_log/dataindex.json
+test_devpi_server/importexportdata/no_history_log/user1/dev/hello/hello-1.0.tar.gz
 test_devpi_server/importexportdata/nocreatedmodified/dataindex.json
 test_devpi_server/importexportdata/normalization/dataindex.json
 test_devpi_server/importexportdata/normalization/root/dev/hello.pkg/hello.pkg-1.0.tar.gz