pulp-python 3.31.1__tar.gz → 3.31.2__tar.gz

{pulp_python-3.31.1 → pulp_python-3.31.2}/CHANGES.md

@@ -8,6 +8,14 @@
 
 [//]: # (towncrier release notes start)
 
+## 3.31.2 (2026-07-15) {: #3.31.2 }
+
+#### Bugfixes {: #3.31.2-bugfix }
+
+- Fixed provenance sync failing when syncing Pulp-created attestations that use a `Pulp User` publisher.
+
+---
+
 ## 3.31.1 (2026-06-30) {: #3.31.1 }
 
 #### Bugfixes {: #3.31.1-bugfix }

{pulp_python-3.31.1 → pulp_python-3.31.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: pulp-python
-Version: 3.31.1
+Version: 3.31.2
 Summary: pulp-python plugin for the Pulp Project
 Author-email: Pulp Team <pulp-list@redhat.com>
 Project-URL: Homepage, https://pulpproject.org

{pulp_python-3.31.1 → pulp_python-3.31.2}/pulp_python/app/__init__.py

@@ -12,7 +12,7 @@ class PulpPythonPluginAppConfig(PulpPluginAppConfig):
 
     name = "pulp_python.app"
     label = "python"
-    version = "3.31.1"
+    version = "3.31.2"
     python_package_name = "pulp-python"
     domain_compatible = True
 

{pulp_python-3.31.1 → pulp_python-3.31.2}/pulp_python/app/tasks/sync.py

@@ -9,7 +9,6 @@ from bandersnatch.master import Master
 from bandersnatch.mirror import Mirror
 from lxml.etree import LxmlError
 from packaging.requirements import Requirement
-from pypi_attestations import Provenance
 from pypi_simple import IndexPage
 
 from pulpcore.plugin.download import HttpDownloader
@@ -28,6 +27,7 @@ from pulp_python.app.models import (
     PythonPackageContent,
     PythonRemote,
 )
+from pulp_python.app.provenance import Provenance
 from pulp_python.app.utils import PYPI_LAST_SERIAL, aget_remote_simple_page, parse_metadata
 
 logger = logging.getLogger(__name__)

{pulp_python-3.31.1 → pulp_python-3.31.2}/pulp_python/tests/functional/api/test_attestations.py

@@ -154,6 +154,54 @@ def test_attestation_sync_upload(python_bindings, twine_package, download_python
     assert att_bundle["publisher"]["kind"] == "Pulp User"
 
 
+@pytest.mark.parallel
+def test_sync_pulp_created_provenance(
+    domain_factory,
+    python_bindings,
+    twine_package,
+    python_repo_factory,
+    python_distribution_factory,
+    python_remote_factory,
+    python_repo_with_sync,
+    python_content_summary,
+    monitor_task,
+):
+    """Test syncing provenance across domains from a Pulp upload."""
+    source_domain = domain_factory()
+    attestations = get_attestations(twine_package.provenance_url)
+    source_repo = python_repo_factory(pulp_domain=source_domain.name)
+    body = {
+        "relative_path": twine_package.filename,
+        "file_url": twine_package.url,
+        "attestations": json.dumps(attestations),
+        "repository": source_repo.pulp_href,
+    }
+    task = python_bindings.ContentPackagesApi.create(pulp_domain=source_domain.name, **body).task
+    monitor_task(task)
+
+    source_distro = python_distribution_factory(
+        repository=source_repo, pulp_domain=source_domain.name
+    )
+    dest_domain = domain_factory()
+    remote = python_remote_factory(
+        url=source_distro.base_url,
+        provenance=True,
+        includes=[f"twine=={twine_package.version}"],
+        pulp_domain=dest_domain.name,
+    )
+    dest_repo = python_repo_with_sync(remote=remote, pulp_domain=dest_domain.name)
+
+    summary = python_content_summary(repository_version=dest_repo.latest_version_href)
+    assert summary.present["python.provenance"]["count"] == 1
+
+    provs = python_bindings.ContentProvenanceApi.list(
+        repository_version=dest_repo.latest_version_href,
+        pulp_domain=dest_domain.name,
+    )
+    assert provs.count == 1
+    assert provs.results[0].provenance["attestation_bundles"][0]["publisher"]["kind"] == "Pulp User"
+
+
 def test_attestation_twine_upload(
     pulpcore_bindings,
     python_content_summary,

{pulp_python-3.31.1 → pulp_python-3.31.2}/pulp_python/tests/functional/api/test_crud_content_unit.py

@@ -203,7 +203,6 @@ def test_package_creation_with_metadata(
     )
 
 
-@pytest.mark.parallel
 def test_disallow_package_substitution(
     monitor_task,
     python_bindings,
@@ -272,7 +271,6 @@ def test_disallow_package_substitution(
     assert repo.latest_version_href.endswith("/2/")
 
 
-@pytest.mark.parallel
 def test_package_substitution_allowed_by_default(
     monitor_task,
     python_bindings,

{pulp_python-3.31.1 → pulp_python-3.31.2}/pulp_python.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: pulp-python
-Version: 3.31.1
+Version: 3.31.2
 Summary: pulp-python plugin for the Pulp Project
 Author-email: Pulp Team <pulp-list@redhat.com>
 Project-URL: Homepage, https://pulpproject.org

{pulp_python-3.31.1 → pulp_python-3.31.2}/pyproject.toml

@@ -7,7 +7,7 @@ build-backend = 'setuptools.build_meta'
 
 [project]
 name = "pulp-python"
-version = "3.31.1"
+version = "3.31.2"
 description = "pulp-python plugin for the Pulp Project"
 readme = "README.md"
 authors = [
@@ -79,7 +79,7 @@ ignore = [
 [tool.bumpversion]
 # This section is managed by the plugin template. Do not edit manually.
 
-current_version = "3.31.1"
+current_version = "3.31.2"
 commit = false
 tag = false
 parse = "(?P<major>\\d+)\\.(?P<minor>\\d+)\\.(?P<alpha>0a)?(?P<patch>\\d+)(\\.(?P<release>[a-z]+))?"