pulp-python 3.28.2__py3-none-any.whl → 3.29.0__py3-none-any.whl

pulp_python/app/__init__.py

@@ -10,7 +10,7 @@ class PulpPythonPluginAppConfig(PulpPluginAppConfig):
 
     name = "pulp_python.app"
     label = "python"
-    version = "3.28.2"
+    version = "3.29.0"
     python_package_name = "pulp-python"
     domain_compatible = True
 

pulp_python/app/migrations/0022_pythonblocklistentry.py

@@ -0,0 +1,48 @@
+# Generated by Django 5.2.10 on 2026-04-16 14:00
+
+import django.db.models.deletion
+import django_lifecycle.mixins
+import pulpcore.app.models.base
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ("python", "0021_pythonrepository_upload_duplicate_filenames"),
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name="PythonBlocklistEntry",
+            fields=[
+                (
+                    "pulp_id",
+                    models.UUIDField(
+                        default=pulpcore.app.models.base.pulp_uuid,
+                        editable=False,
+                        primary_key=True,
+                        serialize=False,
+                    ),
+                ),
+                ("pulp_created", models.DateTimeField(auto_now_add=True)),
+                ("pulp_last_updated", models.DateTimeField(auto_now=True, null=True)),
+                ("name", models.TextField(default=None, null=True)),
+                ("version", models.TextField(default=None, null=True)),
+                ("filename", models.TextField(default=None, null=True)),
+                ("added_by", models.TextField(default="")),
+                (
+                    "repository",
+                    models.ForeignKey(
+                        on_delete=django.db.models.deletion.CASCADE,
+                        related_name="blocklist_entries",
+                        to="python.pythonrepository",
+                    ),
+                ),
+            ],
+            options={
+                "default_related_name": "%(app_label)s_%(model_name)s",
+            },
+            bases=(django_lifecycle.mixins.LifecycleModelMixin, models.Model),
+        ),
+    ]

pulp_python/app/models.py

@@ -14,6 +14,7 @@ from django_lifecycle import (
 from rest_framework.serializers import ValidationError
 from pulpcore.plugin.models import (
     AutoAddObjPermsMixin,
+    BaseModel,
     Content,
     Publication,
     Distribution,
@@ -399,9 +400,12 @@ class PythonRepository(Repository, AutoAddObjPermsMixin):
 
         When allow_package_substitution is False, reject any new version that would implicitly
         replace existing content with different checksums (content substitution).
+
+        Also checks newly added content against the repository's blocklist entries.
         """
         if not self.allow_package_substitution:
             self._check_for_package_substitution(new_version)
+        self._check_blocklist(new_version)
         remove_duplicates(new_version)
         validate_repo_version(new_version)
 
@@ -418,3 +422,63 @@ class PythonRepository(Repository, AutoAddObjPermsMixin):
                 "To allow this, set 'allow_package_substitution' to True on the repository. "
                 f"Conflicting packages: {duplicates}"
             )
+
+    def _check_blocklist(self, new_version):
+        """
+        Check newly added content in a repository version against the blocklist.
+        """
+        added_content = PythonPackageContent.objects.filter(
+            pk__in=new_version.added().values_list("pk", flat=True)
+        ).only("filename", "name_normalized", "version")
+        if added_content.exists():
+            self.check_blocklist_for_packages(added_content)
+
+    def check_blocklist_for_packages(self, packages):
+        """
+        Raise a ValidationError if any of the given packages match a blocklist entry.
+        """
+        entries = PythonBlocklistEntry.objects.filter(repository=self)
+        if not entries.exists():
+            return
+
+        blocked = []
+        for pkg in packages:
+            for entry in entries:
+                if entry.filename and entry.filename == pkg.filename:
+                    blocked.append(pkg.filename)
+                    break
+                if entry.name == pkg.name_normalized:
+                    if not entry.version or entry.version == pkg.version:
+                        blocked.append(pkg.filename)
+                        break
+        if blocked:
+            raise ValidationError(
+                "Blocklisted packages cannot be added to this repository: "
+                "{}".format(", ".join(blocked))
+            )
+
+
+class PythonBlocklistEntry(BaseModel):
+    """
+    An entry in a PythonRepository's package blocklist.
+
+    Blocklist entries prevent packages from being added to the repository.
+    Entries can match by package `name` (all versions), package `name` + `version`,
+    or exact `filename`. Exactly one of `name` or `filename` must be provided.
+    """
+
+    name = models.TextField(null=True, default=None)
+    version = models.TextField(null=True, default=None)
+    filename = models.TextField(null=True, default=None)
+    added_by = models.TextField(default="")
+    repository = models.ForeignKey(
+        PythonRepository, on_delete=models.CASCADE, related_name="blocklist_entries"
+    )
+
+    def __str__(self):
+        if self.filename:
+            return f"<{self._meta.object_name}: {self.filename}>"
+        return f"<{self._meta.object_name}: {self.name} [{self.version or 'all'}]>"
+
+    class Meta:
+        default_related_name = "%(app_label)s_%(model_name)s"

pulp_python/app/serializers.py

@@ -6,6 +6,7 @@ from django.conf import settings
 from django.db.utils import IntegrityError
 from drf_spectacular.utils import extend_schema_serializer
 from packaging.requirements import Requirement
+from packaging.version import Version, InvalidVersion
 from rest_framework import serializers
 from pypi_attestations import AttestationError
 from pydantic import TypeAdapter, ValidationError
@@ -13,9 +14,10 @@ from urllib.parse import urljoin
 
 from pulpcore.plugin import models as core_models
 from pulpcore.plugin import serializers as core_serializers
-from pulpcore.plugin.util import get_domain, get_prn, get_current_authenticated_user
+from pulpcore.plugin.util import get_domain, get_prn, get_current_authenticated_user, reverse
 
 from pulp_python.app import models as python_models
+from pulp_python.app.utils import canonicalize_name
 from pulp_python.app.provenance import (
     Attestation,
     Provenance,
@@ -53,6 +55,11 @@ class PythonRepositorySerializer(core_serializers.RepositorySerializer):
         default=False,
         required=False,
     )
+    blocklist_entries_href = serializers.SerializerMethodField(
+        help_text=_("URL to the blocklist entries for this repository."),
+        read_only=True,
+    )
+
     allow_package_substitution = serializers.BooleanField(
         help_text=_(
             "Whether to allow package substitution (replacing existing packages with packages "
@@ -65,10 +72,15 @@ class PythonRepositorySerializer(core_serializers.RepositorySerializer):
         required=False,
     )
 
+    def get_blocklist_entries_href(self, obj):
+        repo_href = reverse("repositories-python/python-detail", kwargs={"pk": obj.pk})
+        return f"{repo_href}blocklist_entries/"
+
     class Meta:
         fields = core_serializers.RepositorySerializer.Meta.fields + (
             "autopublish",
             "allow_package_substitution",
+            "blocklist_entries_href",
         )
         model = python_models.PythonRepository
 
@@ -780,6 +792,115 @@ class PythonRemoteSerializer(core_serializers.RemoteSerializer):
         model = python_models.PythonRemote
 
 
+class PythonBlocklistEntrySerializer(core_serializers.ModelSerializer):
+    """
+    Serializer for PythonBlocklistEntry.
+
+    The `repository` is supplied by the URL (not the request body) and is injected
+    by the viewset before saving.
+    """
+
+    pulp_href = serializers.SerializerMethodField(
+        read_only=True,
+        help_text=_("The URL of this blocklist entry."),
+    )
+    repository = core_serializers.DetailRelatedField(
+        read_only=True,
+        view_name_pattern=r"repositories(-.*/.*)?-detail",
+        help_text=_("Repository this blocklist entry belongs to."),
+    )
+    name = serializers.CharField(
+        required=False,
+        allow_null=True,
+        default=None,
+        help_text=_(
+            "Package name to block (for all versions). Compared after PEP 503 normalization. "
+            "Required when 'filename' is not provided."
+        ),
+    )
+    version = serializers.CharField(
+        required=False,
+        allow_null=True,
+        default=None,
+        help_text=_("Exact version string to block (e.g. '1.0'). Only used when 'name' is set."),
+    )
+    filename = serializers.CharField(
+        required=False,
+        allow_null=True,
+        default=None,
+        help_text=_("Exact filename to block. Required when 'name' is not provided."),
+    )
+    added_by = serializers.CharField(
+        read_only=True,
+        help_text=_("PRN of the user who added this blocklist entry."),
+    )
+
+    def get_pulp_href(self, obj):
+        repo_href = reverse("repositories-python/python-detail", kwargs={"pk": obj.repository_id})
+        return f"{repo_href}blocklist_entries/{obj.pk}/"
+
+    def validate(self, data):
+        """
+        Validate that the blocklist entry is well-formed and not a duplicate.
+        """
+        name = data.get("name")
+        filename = data.get("filename")
+        version = data.get("version")
+
+        if version and filename:
+            raise serializers.ValidationError(_("'version' cannot be used with 'filename'."))
+        if version and not name:
+            raise serializers.ValidationError(_("'version' requires 'name' to be provided."))
+        if bool(name) == bool(filename):
+            raise serializers.ValidationError(
+                _("Exactly one of 'name' or 'filename' must be provided.")
+            )
+
+        if version:
+            try:
+                Version(version)
+            except InvalidVersion:
+                raise serializers.ValidationError(
+                    {"version": _("'{}' is not a valid version.").format(version)}
+                )
+        if name:
+            data["name"] = canonicalize_name(name)
+            name = data["name"]
+
+        repository = self.context.get("repository")
+        if repository:
+            qs = python_models.PythonBlocklistEntry.objects.filter(repository=repository)
+            if name and qs.filter(name=name, version=version).exists():
+                raise serializers.ValidationError(
+                    _("A blocklist entry with this name and version already exists.")
+                )
+            if filename and qs.filter(filename=filename).exists():
+                raise serializers.ValidationError(
+                    _("A blocklist entry with this filename already exists.")
+                )
+            data["repository"] = repository
+
+        return data
+
+    def create(self, validated_data):
+        """
+        Create a new blocklist entry, recording the authenticated user in `added_by`.
+        """
+        user = get_current_authenticated_user()
+        validated_data["added_by"] = get_prn(user) if user else ""
+        return super().create(validated_data)
+
+    class Meta:
+        fields = core_serializers.ModelSerializer.Meta.fields + (
+            "repository",
+            "name",
+            "version",
+            "filename",
+            "added_by",
+        )
+        model = python_models.PythonBlocklistEntry
+
+
 class PythonBanderRemoteSerializer(serializers.Serializer):
     """
     A Serializer for the initial step of creating a Python Remote from a Bandersnatch config file

pulp_python/app/viewsets.py

@@ -7,6 +7,12 @@ from packaging.utils import canonicalize_name
 from pathlib import Path
 from rest_framework import status
 from rest_framework.decorators import action
+from rest_framework.mixins import (
+    CreateModelMixin,
+    DestroyModelMixin,
+    ListModelMixin,
+    RetrieveModelMixin,
+)
 from rest_framework.response import Response
 from rest_framework.serializers import ValidationError
 
@@ -143,15 +149,20 @@ class PythonRepositoryViewSet(
         If allow_package_substitution is False and the request is **only** adding packages, then a
         package substitution check is performed to provide a quicker error response. Otherwise, the
         check is delegated to the task.
+
+        Also performs an early blocklist check on added packages.
         """
         repository = self.get_object()
+        add_content_units = request.data.get("add_content_units", [])
+        content_ids = [extract_pk(x) for x in add_content_units]
+
+        self._early_blocklist_check(repository, content_ids)
+
         if not repository.allow_package_substitution:
             remove_content_units = request.data.get("remove_content_units", [])
             if remove_content_units or "base_version" in request.data:
                 return super().modify(request, pk)
             rvc = repository.latest_version().content
-            add_content_units = request.data.get("add_content_units", [])
-            content_ids = [extract_pk(x) for x in add_content_units]
             packages = (
                 python_models.PythonPackageContent.objects.filter(pk__in=content_ids)
                 .exclude(pk__in=rvc)
@@ -167,6 +178,17 @@ class PythonRepositoryViewSet(
                 )
         return super().modify(request, pk)
 
+    def _early_blocklist_check(self, repository, content_ids):
+        """
+        Raise early if any added packages match a blocklist entry.
+        """
+        if not content_ids:
+            return
+        packages = python_models.PythonPackageContent.objects.filter(pk__in=content_ids).only(
+            "filename", "name_normalized", "version"
+        )
+        repository.check_blocklist_for_packages(packages)
+
     @extend_schema(
         summary="Repair metadata",
         responses={202: AsyncOperationResponseSerializer},
@@ -216,6 +238,60 @@ class PythonRepositoryViewSet(
         return core_viewsets.OperationPostponedResponse(result, request)
 
 
+class PythonBlocklistEntryViewSet(
+    core_viewsets.NamedModelViewSet,
+    CreateModelMixin,
+    RetrieveModelMixin,
+    ListModelMixin,
+    DestroyModelMixin,
+):
+    """
+    ViewSet for managing blocklist entries on a PythonRepository.
+
+    Blocklist entries prevent packages from being added to the repository.
+    Entries can match by package `name` (all versions), package `name` + `version`,
+    or exact `filename`. Exactly one of `name` or `filename` must be provided.
+    """
+
+    endpoint_name = "blocklist_entries"
+    router_lookup = "pythonblocklistentry"
+    parent_viewset = PythonRepositoryViewSet
+    parent_lookup_kwargs = {"repository_pk": "repository__pk"}
+    serializer_class = python_serializers.PythonBlocklistEntrySerializer
+    queryset = python_models.PythonBlocklistEntry.objects.all()
+    ordering = ("-pulp_created",)
+
+    DEFAULT_ACCESS_POLICY = {
+        "statements": [
+            {
+                "action": ["list", "retrieve"],
+                "principal": "authenticated",
+                "effect": "allow",
+                "condition": "has_repository_model_or_domain_or_obj_perms:python.view_pythonrepository",  # noqa: E501
+            },
+            {
+                "action": ["create", "destroy"],
+                "principal": "authenticated",
+                "effect": "allow",
+                "condition": [
+                    "has_repository_model_or_domain_or_obj_perms:python.modify_pythonrepository",
+                    "has_repository_model_or_domain_or_obj_perms:python.view_pythonrepository",
+                ],
+            },
+        ],
+    }
+
+    def get_serializer_context(self):
+        """
+        Inject the parent repository into the serializer context so that `validate()` can check for
+        duplicate entries. The guard on `repository_pk` prevents errors during schema generation.
+        """
+        context = super().get_serializer_context()
+        if self.kwargs.get("repository_pk"):
+            context["repository"] = self.get_parent_object()
+        return context
+
+
 class PythonRepositoryVersionViewSet(core_viewsets.RepositoryVersionViewSet):
     """
     PythonRepositoryVersion represents a single Python repository version.

pulp_python/tests/functional/api/test_blocklist.py

@@ -0,0 +1,151 @@
+import pytest
+
+from pulpcore.tests.functional.utils import PulpTaskError
+from pulp_python.tests.functional.constants import PYTHON_EGG_FILENAME, PYTHON_EGG_URL
+
+CONTENT_BODY = {"relative_path": PYTHON_EGG_FILENAME, "file_url": PYTHON_EGG_URL}
+BLOCKED_MSG = "Blocklisted packages cannot be added to this repository"
+
+
+@pytest.mark.parallel
+def test_crd_entry(python_bindings, python_repo):
+    """
+    CRD operations on blocklist entries return correct fields and update the entry count.
+    """
+    entries_data = [
+        ({"name": "shelf-reader"}, "shelf-reader", None, None),
+        ({"name": "shelf-reader", "version": "0.1"}, "shelf-reader", "0.1", None),
+        ({"filename": PYTHON_EGG_FILENAME}, None, None, PYTHON_EGG_FILENAME),
+    ]
+    for body_kwargs, name, version, filename in entries_data:
+        entry = python_bindings.RepositoriesPythonBlocklistEntriesApi.create(
+            python_repo.pulp_href, python_bindings.PythonPythonBlocklistEntry(**body_kwargs)
+        )
+        assert entry.name == name
+        assert entry.version == version
+        assert entry.filename == filename
+        assert entry.added_by == "prn:auth.user:1"
+        assert entry.pulp_href is not None
+        assert entry.prn is not None
+
+    result = python_bindings.RepositoriesPythonBlocklistEntriesApi.list(python_repo.pulp_href)
+    assert result.count == 3
+
+    entry = result.results[0]
+    python_bindings.RepositoriesPythonBlocklistEntriesApi.read(entry.pulp_href)
+
+    python_bindings.RepositoriesPythonBlocklistEntriesApi.delete(entry.pulp_href)
+    result = python_bindings.RepositoriesPythonBlocklistEntriesApi.list(python_repo.pulp_href)
+    assert result.count == 2
+
+
+@pytest.mark.parallel
+@pytest.mark.parametrize(
+    "body_kwargs, expected_msg",
+    [
+        ({"name": "shelf-reader"}, "this name and version already exists"),
+        ({"name": "shelf-reader", "version": "0.1"}, "this name and version already exists"),
+        ({"filename": PYTHON_EGG_FILENAME}, "this filename already exists"),
+    ],
+)
+def test_duplicate_entry_rejected(python_bindings, python_repo, body_kwargs, expected_msg):
+    """
+    Creating a duplicate entry should fail.
+    """
+    python_bindings.RepositoriesPythonBlocklistEntriesApi.create(
+        python_repo.pulp_href, python_bindings.PythonPythonBlocklistEntry(**body_kwargs)
+    )
+    with pytest.raises(python_bindings.ApiException) as ctx:
+        python_bindings.RepositoriesPythonBlocklistEntriesApi.create(
+            python_repo.pulp_href, python_bindings.PythonPythonBlocklistEntry(**body_kwargs)
+        )
+    assert ctx.value.status == 400
+    assert expected_msg in ctx.value.body
+
+
+@pytest.mark.parallel
+@pytest.mark.parametrize(
+    "body_kwargs, expected_msg",
+    [
+        ({"version": "0.1", "filename": PYTHON_EGG_FILENAME}, "version' cannot be used with"),
+        ({"version": "0.1"}, "version' requires 'name'"),
+        ({"name": "shelf-reader", "filename": PYTHON_EGG_FILENAME}, "Exactly one of"),
+        ({}, "Exactly one of"),
+        ({"name": "shelf-reader", "version": "not-a-version"}, "not a valid version"),
+    ],
+)
+def test_invalid_entry_rejected(python_bindings, python_repo, body_kwargs, expected_msg):
+    """
+    Creating an entry with invalid data should fail.
+    """
+    with pytest.raises(python_bindings.ApiException) as ctx:
+        python_bindings.RepositoriesPythonBlocklistEntriesApi.create(
+            python_repo.pulp_href, python_bindings.PythonPythonBlocklistEntry(**body_kwargs)
+        )
+    assert ctx.value.status == 400
+    assert expected_msg in ctx.value.body
+
+
+@pytest.mark.parallel
+def test_upload_blocked(monitor_task, python_bindings, python_repo):
+    """
+    Uploading a package matching a blocklist entry is rejected.
+    """
+    python_bindings.RepositoriesPythonBlocklistEntriesApi.create(
+        python_repo.pulp_href,
+        python_bindings.PythonPythonBlocklistEntry(name="shelf-reader", version="0.1"),
+    )
+
+    with pytest.raises(PulpTaskError) as exc:
+        response = python_bindings.ContentPackagesApi.create(
+            repository=python_repo.pulp_href, **CONTENT_BODY
+        )
+        monitor_task(response.task)
+    assert BLOCKED_MSG in exc.value.task.error["description"]
+
+    repo = python_bindings.RepositoriesPythonApi.read(python_repo.pulp_href)
+    assert repo.latest_version_href.endswith("/0/")
+
+
+@pytest.mark.parallel
+def test_upload_allowed(monitor_task, python_bindings, python_repo):
+    """
+    Uploading a package is allowed when the blocklist entry targets a different version.
+    """
+    python_bindings.RepositoriesPythonBlocklistEntriesApi.create(
+        python_repo.pulp_href,
+        python_bindings.PythonPythonBlocklistEntry(name="shelf-reader", version="9.9"),
+    )
+
+    response = python_bindings.ContentPackagesApi.create(
+        repository=python_repo.pulp_href, **CONTENT_BODY
+    )
+    monitor_task(response.task)
+
+    repo = python_bindings.RepositoriesPythonApi.read(python_repo.pulp_href)
+    assert repo.latest_version_href.endswith("/1/")
+
+
+@pytest.mark.parallel
+def test_modify_blocked(monitor_task, python_bindings, python_repo):
+    """
+    Adding a blocklisted package via repository modify is rejected.
+    """
+    python_bindings.RepositoriesPythonBlocklistEntriesApi.create(
+        python_repo.pulp_href,
+        python_bindings.PythonPythonBlocklistEntry(name="shelf-reader", version="0.1"),
+    )
+
+    response = python_bindings.ContentPackagesApi.create(**CONTENT_BODY)
+    task = monitor_task(response.task)
+    content = python_bindings.ContentPackagesApi.read(task.created_resources[0])
+
+    with pytest.raises(python_bindings.ApiException) as exc:
+        python_bindings.RepositoriesPythonApi.modify(
+            python_repo.pulp_href, {"add_content_units": [content.pulp_href]}
+        )
+    assert exc.value.status == 400
+    assert BLOCKED_MSG in exc.value.body
+
+    repo = python_bindings.RepositoriesPythonApi.read(python_repo.pulp_href)
+    assert repo.latest_version_href.endswith("/0/")

{pulp_python-3.28.2.dist-info → pulp_python-3.29.0.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: pulp-python
-Version: 3.28.2
+Version: 3.29.0
 Summary: pulp-python plugin for the Pulp Project
 Author-email: Pulp Team <pulp-list@redhat.com>
 Project-URL: Homepage, https://pulpproject.org

{pulp_python-3.28.2.dist-info → pulp_python-3.29.0.dist-info}/RECORD

@@ -1,16 +1,16 @@
 pulp_python/__init__.py,sha256=GIuTLoBTc-07dSLJUh8xrZPRz8x-jJ61pfR0J1IjnzI,65
 pulp_python/pytest_plugin.py,sha256=EBivPJa39ZE1QaDWea9candeeJL_W_cBk6Q7Onhw4bE,8604
-pulp_python/app/__init__.py,sha256=mLATRQDvq2slgcrsrT6cRO5JQ0UYd5M5jb7u1wHqA1A,2488
+pulp_python/app/__init__.py,sha256=rWQatXxN5F1fdkajaunRkP5PUdVrWTH0qCZGU8jRHuw,2488
 pulp_python/app/global_access_conditions.py,sha256=MZJtyoVsr-4hRaty6mKDqh3caOHd5UKJjEWLV2crOLs,1080
 pulp_python/app/modelresource.py,sha256=dogoBWibBmQyFpcV-Hp1lu7D2WwSECa5PEShWSIg7mg,1248
-pulp_python/app/models.py,sha256=954pFPP05zbwRQmicA0NxFT3VIEur17HFOxPGSYBgp0,15218
+pulp_python/app/models.py,sha256=1lyO4Po_vTS8prrtBL1Lo5qh12fUQpvX6H3x2kVOCrY,17685
 pulp_python/app/provenance.py,sha256=iyhkuNahHiTDK0Djrd4-PlgErA5SJVI0uQOIPj46tEI,2352
 pulp_python/app/replica.py,sha256=W60Kt9CwZSfztRi3-f82Rfp0F_zhzpOTiz35bvRFBBE,1881
-pulp_python/app/serializers.py,sha256=67D1fGg-GxD3iQlEo-TI-3JOyaI2-VHqU_UNn9RDha8,29433
+pulp_python/app/serializers.py,sha256=Pulopm6BFfDrH4sUmt2x1ZI7mLzHtrQrOp3K9ILrxlw,33853
 pulp_python/app/settings.py,sha256=Cyc_p6U0HQjKpyrRL6JFrK3R7RMQJ9MAgNMJCfzPEiA,255
 pulp_python/app/urls.py,sha256=3-UG9-bkPW_bs8362XBnxbpGqQetyuMOfPaayadMYFo,1387
 pulp_python/app/utils.py,sha256=2MEHK_fuLpZA9w4ohbhcs1D2ii478gwW_iAuSTsu-kw,26740
-pulp_python/app/viewsets.py,sha256=yAXvuHNLdOkLznwiqIPSQPKf8-ttPGsmWy-mG1cbO38,31410
+pulp_python/app/viewsets.py,sha256=8-FPEgNGY_KEaoJbdE_N5hQg-KOe--OXvxQZ6p6wFhE,34120
 pulp_python/app/management/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 pulp_python/app/management/commands/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 pulp_python/app/management/commands/repair-python-metadata.py,sha256=i-mC3UYxIiHJoknRV4xZZ7cQ44lyqWshpbaeYi7as8E,4457
@@ -36,6 +36,7 @@ pulp_python/app/migrations/0018_packageprovenance.py,sha256=FU67aw6u77TjlPuzxRrR
 pulp_python/app/migrations/0019_create_missing_metadata_artifacts.py,sha256=glHecwu0X17RdRHo1MvjDRvrqpJ7EgxvYXy1FOXJvn4,817
 pulp_python/app/migrations/0020_pythonpackagecontent_name_normalized.py,sha256=n-gtLKmhDiydgkM5Fv8OisoFZYPPOhOa8-9nExCCq14,1317
 pulp_python/app/migrations/0021_pythonrepository_upload_duplicate_filenames.py,sha256=Yx-Cgk8DR9J9e9ht00xy0s6ogh2Rh5JS7AbdzSngKLY,384
+pulp_python/app/migrations/0022_pythonblocklistentry.py,sha256=EbtjZuN65myTAHVWrJYbt4mWgWL7EElEYs1XulHB6Bo,1732
 pulp_python/app/migrations/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 pulp_python/app/pypi/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 pulp_python/app/pypi/serializers.py,sha256=w6_doLpaO8Dnzur57MYrTIqEP4I3LI8biu9ipLC66fk,5028
@@ -56,6 +57,7 @@ pulp_python/tests/functional/utils.py,sha256=ZmOVSa94o0KvH7l42YwuUAcNJo8Eb733QBH
 pulp_python/tests/functional/api/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 pulp_python/tests/functional/api/test_attestations.py,sha256=_opUZT65c5H2j_8ous-nKGHmDOw8EMjxdooTIQhiXQ8,8640
 pulp_python/tests/functional/api/test_auto_publish.py,sha256=uCIt4LsO61oMk3bDs3LMQDJI8zkKqvY0b1uX16bTxzM,1747
+pulp_python/tests/functional/api/test_blocklist.py,sha256=ichJo5UxDdWcR3pnuRouAsPLVBZ7Wcss7oB-AJEV-s8,5993
 pulp_python/tests/functional/api/test_consume_content.py,sha256=QUOZ_bQ_Ortzitc7sjlMEJzRhPm00wayxjZvEeK18jI,1000
 pulp_python/tests/functional/api/test_crud_content_unit.py,sha256=IjkyVC761ZTOhdM3ksT_5zvvWhMk326BSJlUyql0vFM,13793
 pulp_python/tests/functional/api/test_crud_publications.py,sha256=uoTGHbhKq_mYOYtNV8Tt9cyhzY0zsoG1DhYrfIdYcMc,5646
@@ -75,9 +77,9 @@ pulp_python/tests/functional/assets/shelf-reader-0.1.tar.gz.publish.attestation,
 pulp_python/tests/functional/assets/shelf_reader-0.1-py2-none-any.whl.publish.attestation,sha256=muTQ8dqYSSdx76DlaPjB1REcNIS-aak-Na0TkASxu8M,10426
 pulp_python/tests/unit/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 pulp_python/tests/unit/test_models.py,sha256=TBI0yKsrdbnJSPeBFfxSqhXK7zaNvR6qg5JehGH3Pds,229
-pulp_python-3.28.2.dist-info/licenses/LICENSE,sha256=2ylvL381vKOhdO-w6zkrOxe9lLNBhRQpo9_0EbHC_HM,18046
-pulp_python-3.28.2.dist-info/METADATA,sha256=6tb2negw7mKY5EJ913yNvQg5fRJVBB8qc--Eo4atRIo,1744
-pulp_python-3.28.2.dist-info/WHEEL,sha256=aeYiig01lYGDzBgS8HxWXOg3uV61G9ijOsup-k9o1sk,91
-pulp_python-3.28.2.dist-info/entry_points.txt,sha256=HvqLEXjw_dS5jqAwnE5JiRZFE6f-y5SRtitKLPml2To,115
-pulp_python-3.28.2.dist-info/top_level.txt,sha256=X0hXgXc_bpbiKqVrkt8jD5_QEiQviKbHDwveQcOcJjo,12
-pulp_python-3.28.2.dist-info/RECORD,,
+pulp_python-3.29.0.dist-info/licenses/LICENSE,sha256=2ylvL381vKOhdO-w6zkrOxe9lLNBhRQpo9_0EbHC_HM,18046
+pulp_python-3.29.0.dist-info/METADATA,sha256=alLnLZtMqhz4pl-EyaETY-NOOrRG7ziRJEQFO4bcfms,1744
+pulp_python-3.29.0.dist-info/WHEEL,sha256=aeYiig01lYGDzBgS8HxWXOg3uV61G9ijOsup-k9o1sk,91
+pulp_python-3.29.0.dist-info/entry_points.txt,sha256=HvqLEXjw_dS5jqAwnE5JiRZFE6f-y5SRtitKLPml2To,115
+pulp_python-3.29.0.dist-info/top_level.txt,sha256=X0hXgXc_bpbiKqVrkt8jD5_QEiQviKbHDwveQcOcJjo,12
+pulp_python-3.29.0.dist-info/RECORD,,