pulp-python 3.32.1__py3-none-any.whl → 3.33.0__py3-none-any.whl

pulp_python/app/__init__.py

@@ -12,7 +12,7 @@ class PulpPythonPluginAppConfig(PulpPluginAppConfig):
 
     name = "pulp_python.app"
     label = "python"
-    version = "3.32.1"
+    version = "3.33.0"
     python_package_name = "pulp-python"
     domain_compatible = True
 

pulp_python/app/migrations/0023_packageyank.py

@@ -0,0 +1,50 @@
+# Generated by Django 5.2.16 on 2026-07-30 10:44
+
+import django.db.models.deletion
+from django.db import migrations, models
+
+import pulpcore.app.util
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ("python", "0022_pythonblocklistentry"),
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name="PackageYank",
+            fields=[
+                (
+                    "content_ptr",
+                    models.OneToOneField(
+                        auto_created=True,
+                        on_delete=django.db.models.deletion.CASCADE,
+                        parent_link=True,
+                        primary_key=True,
+                        serialize=False,
+                        to="core.content",
+                    ),
+                ),
+                ("name_normalized", models.TextField()),
+                ("version", models.TextField()),
+                ("yanked_reason", models.TextField(default="")),
+                (
+                    "_pulp_domain",
+                    models.ForeignKey(
+                        default=pulpcore.app.util.get_domain_pk,
+                        on_delete=django.db.models.deletion.PROTECT,
+                        to="core.domain",
+                    ),
+                ),
+            ],
+            options={
+                "default_related_name": "%(app_label)s_%(model_name)s",
+                "unique_together": {
+                    ("name_normalized", "version", "yanked_reason", "_pulp_domain")
+                },
+            },
+            bases=("core.content",),
+        ),
+    ]

pulp_python/app/models.py

@@ -204,8 +204,6 @@ class PythonPackageContent(Content):
     sha256 = models.CharField(db_index=True, max_length=64)
     metadata_sha256 = models.CharField(max_length=64, null=True)
     size = models.BigIntegerField(default=0)
-    # yanked and yanked_reason are not implemented because they are mutable
-
     # From pulpcore
     PROTECTED_FROM_RECLAIM = False
     TYPE = "python"
@@ -289,6 +287,32 @@ class PackageProvenance(Content):
         unique_together = ("sha256", "_pulp_domain")
 
 
+class PackageYank(Content):
+    """
+    A marker content type indicating a package version is yanked in a repository (PEP 592).
+
+    Its presence in a repository version means all files for the matching
+    (name_normalized, version) pair are yanked. Yank/unyank operations
+    add/remove this marker, creating new repository versions.
+    """
+
+    TYPE = "python_yank"
+    repo_key_fields = ("name_normalized", "version")
+
+    name_normalized = models.TextField()
+    version = models.TextField()
+    yanked_reason = models.TextField(default="")
+
+    _pulp_domain = models.ForeignKey("core.Domain", default=get_domain_pk, on_delete=models.PROTECT)
+
+    def __str__(self):
+        return f"<{self._meta.object_name}: {self.name_normalized} [{self.version}]>"
+
+    class Meta:
+        default_related_name = "%(app_label)s_%(model_name)s"
+        unique_together = ("name_normalized", "version", "yanked_reason", "_pulp_domain")
+
+
 class PythonPublication(Publication, AutoAddObjPermsMixin):
     """
     A Publication for PythonContent.
@@ -364,7 +388,7 @@ class PythonRepository(Repository, AutoAddObjPermsMixin):
     """
 
     TYPE = "python"
-    CONTENT_TYPES = [PythonPackageContent, PackageProvenance]
+    CONTENT_TYPES = [PythonPackageContent, PackageProvenance, PackageYank]
     REMOTE_TYPES = [PythonRemote]
     PULL_THROUGH_SUPPORTED = True
 

pulp_python/app/pypi/serializers.py

@@ -136,3 +136,24 @@ class PackageUploadTaskSerializer(serializers.Serializer):
     session = serializers.CharField(allow_null=True)
     task = serializers.CharField()
     task_start_time = serializers.DateTimeField(allow_null=True)
+
+
+class YankSerializer(serializers.Serializer):
+    """
+    A Serializer for yank/unyank requests (PEP 592).
+    """
+
+    name = serializers.CharField(
+        help_text=_("The name of the package to yank or unyank."),
+        required=True,
+    )
+    version = serializers.CharField(
+        help_text=_("The version of the package to yank or unyank."),
+        required=True,
+    )
+    yanked_reason = serializers.CharField(
+        help_text=_("The reason for yanking the package version."),
+        required=False,
+        allow_blank=True,
+        default="",
+    )

pulp_python/app/pypi/views.py

@@ -29,6 +29,7 @@ from rest_framework.renderers import BrowsableAPIRenderer, JSONRenderer, Templat
 from rest_framework.response import Response
 from rest_framework.viewsets import ViewSet
 
+from pulpcore.plugin.serializers import AsyncOperationResponseSerializer
 from pulpcore.plugin.tasking import dispatch
 from pulpcore.plugin.util import get_domain, get_url
 from pulpcore.plugin.viewsets import OperationPostponedResponse
@@ -37,6 +38,7 @@ from pulp_python.app import tasks
 from pulp_python.app.cache import PythonApiCache, find_base_path_cached
 from pulp_python.app.models import (
     PackageProvenance,
+    PackageYank,
     PythonDistribution,
     PythonPackageContent,
     PythonPublication,
@@ -46,6 +48,7 @@ from pulp_python.app.pypi.serializers import (
     PackageUploadSerializer,
     PackageUploadTaskSerializer,
     SummarySerializer,
+    YankSerializer,
 )
 from pulp_python.app.utils import (
     PYPI_LAST_SERIAL,
@@ -356,6 +359,8 @@ class SimpleView(PackageUploadMixin, ViewSet):
                 "upload_time": release_package.upload_time,
                 "version": release_package.version,
                 "provenance": release_package.provenance_url,
+                "yanked": release_package.is_yanked,
+                "yanked_reason": release_package.yanked_reason or "",
             }
 
         rfilter = get_remote_package_filter(remote)
@@ -408,6 +413,11 @@ class SimpleView(PackageUploadMixin, ViewSet):
                 "version",
                 "has_provenance",
             )
+            yank_markers = dict(
+                PackageYank.objects.filter(
+                    pk__in=repo_ver.content, name_normalized=normalized
+                ).values_list("version", "yanked_reason")
+            )
             local_releases = {
                 p["filename"]: {
                     **p,
@@ -418,6 +428,8 @@ class SimpleView(PackageUploadMixin, ViewSet):
                         if p["has_provenance"]
                         else None
                     ),
+                    "yanked": p["version"] in yank_markers,
+                    "yanked_reason": yank_markers.get(p["version"], ""),
                 }
                 for p in packages
             }
@@ -493,12 +505,18 @@ class MetadataView(PyPIMixin, ViewSet):
             headers = {PYPI_LAST_SERIAL: str(PYPI_SERIAL_CONSTANT)}
             if settings.DOMAIN_ENABLED:
                 domain = get_domain()
+            yank_markers = dict(
+                PackageYank.objects.filter(
+                    pk__in=repo_ver.content, name_normalized=normalized
+                ).values_list("version", "yanked_reason")
+            )
             json_body = python_content_to_json(
                 path,
                 package_content,
                 version=version,
                 domain=domain,
                 repository_version=repo_ver,
+                yank_markers=yank_markers,
             )
             if json_body:
                 return Response(data=json_body, headers=headers)
@@ -586,3 +604,78 @@ class ProvenanceView(PyPIMixin, ViewSet):
                 if provenance:
                     return Response(data=provenance.provenance)
         return HttpResponseNotFound(f"{package} {version} {filename} provenance does not exist.")
+
+
+class YankView(PyPIMixin, ViewSet):
+    """View for yank/unyank requests (PEP 592)."""
+
+    endpoint_name = "yank"
+    DEFAULT_ACCESS_POLICY = {
+        "statements": [
+            {
+                "action": ["yank", "unyank"],
+                "principal": "authenticated",
+                "effect": "allow",
+                "condition": "index_has_repo_perm:python.modify_pythonrepository",
+            },
+        ],
+    }
+
+    @extend_schema(
+        request=YankSerializer,
+        responses={202: AsyncOperationResponseSerializer},
+        summary="Yank a package version",
+    )
+    def yank(self, request, path):
+        """Yank a package version, marking all its files with data-yanked."""
+        repo = self.distribution.repository
+        if not repo:
+            return HttpResponseBadRequest(reason="Index is not pointing to a repository")
+
+        serializer = YankSerializer(data=request.data)
+        serializer.is_valid(raise_exception=True)
+
+        normalized = canonicalize_name(serializer.validated_data["name"])
+        version = serializer.validated_data["version"]
+        repo_ver = self.get_repository_version(self.distribution)
+        if not PythonPackageContent.objects.filter(
+            pk__in=repo_ver.content, name_normalized=normalized, version=version
+        ).exists():
+            return HttpResponseNotFound(f"{normalized}=={version} not found in repository")
+
+        result = dispatch(
+            tasks.ayank_package,
+            exclusive_resources=[repo],
+            kwargs={
+                "repository_pk": str(repo.pk),
+                "name": serializer.validated_data["name"],
+                "version": serializer.validated_data["version"],
+                "yanked_reason": serializer.validated_data.get("yanked_reason", ""),
+            },
+        )
+        return OperationPostponedResponse(result, request)
+
+    @extend_schema(
+        request=YankSerializer,
+        responses={202: AsyncOperationResponseSerializer},
+        summary="Unyank a package version",
+    )
+    def unyank(self, request, path):
+        """Unyank a package version, unmarking all its files with data-yanked."""
+        repo = self.distribution.repository
+        if not repo:
+            return HttpResponseBadRequest(reason="Index is not pointing to a repository")
+
+        serializer = YankSerializer(data=request.data)
+        serializer.is_valid(raise_exception=True)
+
+        result = dispatch(
+            tasks.aunyank_package,
+            exclusive_resources=[repo],
+            kwargs={
+                "repository_pk": str(repo.pk),
+                "name": serializer.validated_data["name"],
+                "version": serializer.validated_data["version"],
+            },
+        )
+        return OperationPostponedResponse(result, request)

pulp_python/app/serializers.py

@@ -683,6 +683,25 @@ class PackageProvenanceSerializer(core_serializers.NoArtifactContentUploadSerial
         model = python_models.PackageProvenance
 
 
+class PackageYankSerializer(core_serializers.NoArtifactContentSerializer):
+    """
+    Read-only serializer for PackageYank content units (PEP 592).
+    Used by PackageYankViewSet to expose yank markers via the Pulp REST API.
+    """
+
+    name_normalized = serializers.CharField(read_only=True)
+    version = serializers.CharField(read_only=True)
+    yanked_reason = serializers.CharField(read_only=True)
+
+    class Meta:
+        fields = core_serializers.NoArtifactContentSerializer.Meta.fields + (
+            "name_normalized",
+            "version",
+            "yanked_reason",
+        )
+        model = python_models.PackageYank
+
+
 class MultipleChoiceArrayField(serializers.MultipleChoiceField):
     """
     A wrapper to make sure this DRF serializer works properly with ArrayFields.

pulp_python/app/tasks/__init__.py

@@ -7,3 +7,4 @@ from .repair import repair  # noqa:F401
 from .sync import sync  # noqa:F401
 from .upload import upload, upload_group  # noqa:F401
 from .vulnerability_report import get_repo_version_content  # noqa:F401
+from .yank import aunyank_package, ayank_package  # noqa:F401

pulp_python/app/tasks/sync.py

@@ -24,6 +24,7 @@ from pulpcore.plugin.stages import (
 from pulp_python.app.exceptions import UnsupportedProtocolError
 from pulp_python.app.models import (
     PackageProvenance,
+    PackageYank,
     PythonPackageContent,
     PythonRemote,
 )
@@ -265,6 +266,15 @@ class PulpMirror(Mirror):
                         )
                         d_artifacts.append(metadata_artifact)
 
+                    if upstream_pkg.is_yanked:
+                        yank_marker = PackageYank(
+                            name_normalized=pkg.name,
+                            version=version,
+                            yanked_reason=upstream_pkg.yanked_reason or "",
+                        )
+                        yank_dc = DeclarativeContent(content=yank_marker, d_artifacts=[])
+                        await self.python_stage.put(yank_dc)
+
                 dc = DeclarativeContent(content=package, d_artifacts=d_artifacts)
                 declared_contents[entry["filename"]] = dc
                 await self.python_stage.put(dc)

pulp_python/app/tasks/yank.py

@@ -0,0 +1,64 @@
+from packaging.utils import canonicalize_name
+
+from pulpcore.plugin.exceptions import ValidationError
+from pulpcore.plugin.tasking import aadd_and_remove
+
+from pulp_python.app.models import PackageYank, PythonPackageContent, PythonRepository
+
+
+async def ayank_package(repository_pk, name, version, yanked_reason=""):
+    """
+    Yank a package version in a repository by adding a PackageYank marker.
+    Creates a new repository version with the yank marker added.
+    """
+    normalized = canonicalize_name(name)
+    repository = await PythonRepository.objects.aget(pk=repository_pk)
+    latest = await repository.alatest_version()
+
+    exists = await PythonPackageContent.objects.filter(
+        pk__in=latest.content, name_normalized=normalized, version=version
+    ).aexists()
+    if not exists:
+        raise ValidationError(f"Package {name}=={version} not found in repository")
+
+    existing_yank = await PackageYank.objects.filter(
+        pk__in=latest.content, name_normalized=normalized, version=version
+    ).afirst()
+    if existing_yank and existing_yank.yanked_reason == yanked_reason:
+        return
+
+    yank_marker, _ = await PackageYank.objects.aget_or_create(
+        name_normalized=normalized,
+        version=version,
+        yanked_reason=yanked_reason,
+        _pulp_domain_id=repository.pulp_domain_id,
+    )
+
+    await aadd_and_remove(
+        repository_pk=repository.pk,
+        add_content_units=[yank_marker.pk],
+        remove_content_units=[],
+    )
+
+
+async def aunyank_package(repository_pk, name, version):
+    """
+    Unyank a package version in a repository by removing its PackageYank marker.
+    Creates a new repository version with the yank marker removed.
+    """
+    normalized = canonicalize_name(name)
+    repository = await PythonRepository.objects.aget(pk=repository_pk)
+    latest = await repository.alatest_version()
+
+    yank_marker = await PackageYank.objects.filter(
+        pk__in=latest.content, name_normalized=normalized, version=version
+    ).afirst()
+
+    if yank_marker is None:
+        return
+
+    await aadd_and_remove(
+        repository_pk=repository.pk,
+        add_content_units=[],
+        remove_content_units=[yank_marker.pk],
+    )

pulp_python/app/urls.py

@@ -7,6 +7,7 @@ from pulp_python.app.pypi.views import (
     PyPIView,
     SimpleView,
     UploadView,
+    YankView,
 )
 
 if settings.DOMAIN_ENABLED:
@@ -40,5 +41,7 @@ urlpatterns = [
         SimpleView.as_view({"get": "list", "post": "create"}),
         name="simple-detail",
     ),
+    path(PYPI_API_URL + "yank/", YankView.as_view({"post": "yank"}), name="yank"),
+    path(PYPI_API_URL + "unyank/", YankView.as_view({"post": "unyank"}), name="unyank"),
     path(PYPI_API_URL, PyPIView.as_view({"get": "retrieve"}), name="pypi-detail"),
 ]

pulp_python/app/utils.py

@@ -30,7 +30,7 @@ log = logging.getLogger(__name__)
 PYPI_LAST_SERIAL = "X-PYPI-LAST-SERIAL"
 """TODO This serial constant is temporary until Python repositories implements serials"""
 PYPI_SERIAL_CONSTANT = 1000000000
-SUPPORTED_METADATA_VERSIONS = ("1.0", "1.1", "1.2", "2.0", "2.1", "2.2", "2.3", "2.4")
+SUPPORTED_METADATA_VERSIONS = ("1.0", "1.1", "1.2", "2.0", "2.1", "2.2", "2.3", "2.4", "2.5")
 
 SIMPLE_API_VERSION = "1.1"
 PYPI_SIMPLE_V1_HTML = "application/vnd.pypi.simple.v1+html"
@@ -50,7 +50,6 @@ simple_index_template = """<!DOCTYPE html>
 </html>
 """
 
-# TODO in the future: data-yanked (not implemented yet because it is mutable)
 simple_detail_template = """<!DOCTYPE html>
 <html>
   <head>
@@ -62,6 +61,7 @@ simple_detail_template = """<!DOCTYPE html>
     {%- for pkg in project_packages %}
       <a href="{{ pkg.url }}#sha256={{ pkg.sha256 }}" rel="internal"
       {%- if pkg.requires_python %} data-requires-python="{{ pkg.requires_python }}" {%- endif %}
+      {%- if pkg.yanked %} data-yanked="{{ pkg.yanked_reason }}" {%- endif %}
       {%- if pkg.metadata_sha256 %} data-dist-info-metadata="sha256={{ pkg.metadata_sha256 }}" data-core-metadata="sha256={{ pkg.metadata_sha256 }}"
       {%- endif %} {% if pkg.provenance -%}
       data-provenance="{{ pkg.provenance }}"{% endif %}>{{ pkg.filename }}</a><br/>
@@ -362,7 +362,12 @@ def fetch_json_release_metadata(name: str, version: str, remotes: set[Remote]) -
 
 
 def python_content_to_json(
-    base_path, content_query, version=None, domain=None, repository_version=None
+    base_path,
+    content_query,
+    version=None,
+    domain=None,
+    repository_version=None,
+    yank_markers=None,
 ):
     """
     Converts a QuerySet of PythonPackageContent into the PyPi JSON format
@@ -375,6 +380,8 @@ def python_content_to_json(
 
     Returns None if version is specified but not found within content_query
     """
+    if yank_markers is None:
+        yank_markers = {}
     if repository_version:
         content_query = content_query.annotate(
             active_membership=FilteredRelation(
@@ -386,25 +393,32 @@ def python_content_to_json(
             ),
             repo_added_time=F("active_membership__pulp_created"),
         )
-    full_metadata = {"last_serial": 0}  # For now the serial field isn't supported by Pulp
-    latest_content = latest_content_version(content_query, version)
+
+    all_content = list(content_query)
+    for content in all_content:
+        content.yanked = content.version in yank_markers
+        content.yanked_reason = yank_markers.get(content.version)
+
+    latest_content = latest_content_version(all_content, version)
     if not latest_content:
         return None
-    full_metadata.update({"info": python_content_to_info(latest_content[0])})
-    full_metadata.update({"releases": python_content_to_releases(content_query, base_path, domain)})
-    full_metadata.update({"urls": python_content_to_urls(latest_content, base_path, domain)})
+
+    full_metadata = {"last_serial": 0}  # For now the serial field isn't supported by Pulp
+    full_metadata["info"] = python_content_to_info(latest_content[0])
+    full_metadata["releases"] = python_content_to_releases(all_content, base_path, domain)
+    full_metadata["urls"] = python_content_to_urls(latest_content, base_path, domain)
     return full_metadata
 
 
-def latest_content_version(content_query, version):
+def latest_content_version(all_content, version):
     """
-    Walks through the content QuerySet and finds the instances that is the latest version.
+    Walks through the content list and finds the instances that are the latest version.
     If 'version' is specified, the function instead tries to find content instances
     with that version and will return an empty list if nothing is found
     """
     latest_version = version
     latest_content = []
-    for content in content_query:
+    for content in all_content:
         if version and parse(version) == parse(content.version):
             latest_content.append(content)
         elif not latest_version or parse(content.version) > parse(latest_version):
@@ -462,8 +476,8 @@ def python_content_to_info(content):
         "platform": content.platform or "",
         "requires_dist": json_to_dict(content.requires_dist) or None,
         "classifiers": json_to_dict(content.classifiers) or None,
-        "yanked": False,  # These are no longer used on PyPI, but are still present
-        "yanked_reason": None,
+        "yanked": getattr(content, "yanked", False),
+        "yanked_reason": getattr(content, "yanked_reason", None),
         # New core metadata (Version 2.1, 2.2, 2.4)
         "provides_extras": json_to_dict(content.provides_extras) or None,
         "dynamic": json_to_dict(content.dynamic) or None,
@@ -472,13 +486,13 @@ def python_content_to_info(content):
     }
 
 
-def python_content_to_releases(content_query, base_path, domain=None):
+def python_content_to_releases(all_content, base_path, domain=None):
     """
-    Takes a QuerySet of PythonPackageContent and returns a dictionary of releases
+    Takes a list of PythonPackageContent and returns a dictionary of releases
     with each key being a version and value being a list of content for that version of the package
     """
     releases = defaultdict(lambda: [])
-    for content in content_query:
+    for content in all_content:
         releases[content.version].append(
             python_content_to_download_info(content, base_path, domain)
         )
@@ -535,22 +549,22 @@ def python_content_to_download_info(content, base_path, domain=None):
             (getattr(content, "repo_added_time", None) or content.pulp_created).isoformat()
         ),
         "url": url,
-        "yanked": False,
-        "yanked_reason": None,
+        "yanked": getattr(content, "yanked", False),
+        "yanked_reason": getattr(content, "yanked_reason", None),
     }
 
 
-def write_simple_index(project_names, streamed=False):
+def write_simple_index(project_names):
     """Writes the simple index."""
     simple = Template(simple_index_template)
     context = {
         "SIMPLE_API_VERSION": SIMPLE_API_VERSION,
         "projects": ((x, canonicalize_name(x)) for x in project_names),
     }
-    return simple.stream(**context) if streamed else simple.render(**context)
+    return simple.render(**context)
 
 
-def write_simple_detail(project_name, project_packages, streamed=False):
+def write_simple_detail(project_name, project_packages):
     """Writes the simple detail page of a package."""
     detail = Template(simple_detail_template, autoescape=True)
     context = {
@@ -558,7 +572,7 @@ def write_simple_detail(project_name, project_packages, streamed=False):
         "project_name": project_name,
         "project_packages": project_packages,
     }
-    return detail.stream(**context) if streamed else detail.render(**context)
+    return detail.render(**context)
 
 
 def write_simple_index_json(project_names):
@@ -591,7 +605,12 @@ def write_simple_detail_json(project_name, project_packages):
                 "core-metadata": (
                     {"sha256": package["metadata_sha256"]} if package["metadata_sha256"] else False
                 ),
-                # yanked and yanked_reason are not implemented because they are mutable
+                # PEP 592
+                "yanked": (
+                    package.get("yanked_reason")
+                    if package.get("yanked") and package.get("yanked_reason")
+                    else package.get("yanked", False)
+                ),
                 # (v1.1, PEP 700)
                 "size": package["size"],
                 "upload-time": format_upload_time(package["upload_time"]),

pulp_python/app/viewsets.py

@@ -5,6 +5,7 @@ from django.db import transaction
 from django_filters import CharFilter
 from django_filters.rest_framework import filters as drf_filters
 from drf_spectacular.utils import extend_schema, extend_schema_view
+from packaging.specifiers import InvalidSpecifier, SpecifierSet
 from packaging.utils import canonicalize_name
 from rest_framework import status
 from rest_framework.decorators import action
@@ -466,6 +467,25 @@ class NormalizedNameInFilter(drf_filters.BaseInFilter, NormalizedNameFilter):
     """In-filter that normalizes each input value and queries name_normalized."""
 
 
+class VersionSpecifierFilter(CharFilter):
+    """Filter that matches versions against a PEP 440 specifier string."""
+
+    def filter(self, qs, value):
+        if not value:
+            return qs
+        try:
+            spec = SpecifierSet(value, prereleases=True)
+        except InvalidSpecifier:
+            raise ValidationError(
+                {"version_specifier": f"Invalid PEP 440 version specifier: {value}"}
+            )
+        matching_pks = []
+        for pk, version in qs.values_list("pk", self.field_name):
+            if spec.contains(version):
+                matching_pks.append(pk)
+        return qs.filter(pk__in=matching_pks)
+
+
 class PythonPackageContentFilter(core_viewsets.ContentFilter):
     """
     FilterSet for PythonPackageContent.
@@ -474,6 +494,10 @@ class PythonPackageContentFilter(core_viewsets.ContentFilter):
     name = NormalizedNameFilter(field_name="name_normalized", lookup_expr="exact")
     name__in = NormalizedNameInFilter(field_name="name_normalized", lookup_expr="in")
     name__contains = CharFilter(field_name="name", lookup_expr="contains")
+    version_specifier = VersionSpecifierFilter(
+        field_name="version",
+        help_text="Filter by PEP 440 version specifier (e.g., >=2.4,<3.0 or ~=1.26)",
+    )
 
     class Meta:
         model = python_models.PythonPackageContent
@@ -615,6 +639,29 @@ class PackageProvenanceViewSet(core_viewsets.NoArtifactContentUploadViewSet):
     }
 
 
+class PackageYankViewSet(core_viewsets.ReadOnlyContentViewSet):
+    """
+    Read-only viewset for PackageYank content units (PEP 592).
+    PackageYank markers indicate that a package version has been yanked in a repository.
+    Use the /yank/ and /unyank/ PyPI endpoints to create or remove these markers.
+    """
+
+    endpoint_name = "yanks"
+    queryset = python_models.PackageYank.objects.all()
+    serializer_class = python_serializers.PackageYankSerializer
+
+    DEFAULT_ACCESS_POLICY = {
+        "statements": [
+            {
+                "action": ["list", "retrieve"],
+                "principal": "authenticated",
+                "effect": "allow",
+            },
+        ],
+        "queryset_scoping": {"function": "scope_queryset"},
+    }
+
+
 class PythonRemoteViewSet(core_viewsets.RemoteViewSet, core_viewsets.RolesMixin):
     """
     <!-- User-facing documentation, rendered as html-->

pulp_python/tests/functional/api/test_crud_content_unit.py

@@ -1,6 +1,7 @@
 from urllib.parse import urljoin
 
 import pytest
+import requests
 from pypi_simple import PyPISimple
 
 from pulpcore.tests.functional.utils import PulpTaskError
@@ -174,14 +175,32 @@ def test_upload_requires_python(python_content_factory):
 @pytest.mark.parallel
 def test_upload_metadata_24_spec(python_content_factory):
     """Test that packages using metadata spec 2.4 can be uploaded to pulp."""
-    filename = "setuptools-80.9.0.tar.gz"
-    url = get_package_url("setuptools", filename)
+    filename = "attrs-26.1.0.tar.gz"
+    url = get_package_url("attrs", filename)
     content = python_content_factory(filename, url=url)
     assert content.metadata_version == "2.4"
     assert content.license_expression == "MIT"
     assert content.license_file == '["LICENSE"]'
 
 
+@pytest.mark.parallel
+def test_legacy_upload_metadata_25(python_empty_repo_distro, python_package_dist_directory):
+    """Test that metadata_version 2.5 (PEP 794) is accepted via the legacy upload endpoint."""
+    flit_url = get_package_url("flit", "flit-4.0.2-py3-none-any.whl")
+    _, flit_file = python_package_dist_directory(flit_url)
+    _, distro = python_empty_repo_distro()
+    url = urljoin(distro.base_url, "legacy/")
+    sha256 = "7b0b0038cd91a7f04e2e287d958dc5f25e68ffeed0b93e613bd50aec99a0d9ca"
+    with open(flit_file, "rb") as f:
+        response = requests.post(
+            url,
+            data={"sha256_digest": sha256, "metadata_version": "2.5"},
+            files={"content": f},
+            auth=("admin", "password"),
+        )
+    assert response.status_code == 202
+
+
 @pytest.mark.parallel
 def test_package_creation_with_metadata(
     pulp_content_url,

pulp_python/tests/functional/api/test_full_mirror.py

@@ -32,7 +32,7 @@ def test_pull_through_install(
     # Perform pull-through install
     host = urlsplit(distro.base_url).hostname
     url = f"{distro.base_url}simple/"
-    cmd = ("pip", "install", "--trusted-host", host, "-i", url, PACKAGE)
+    cmd = ("pip", "install", "--no-deps", "--trusted-host", host, "-i", url, PACKAGE)
     subprocess.run(cmd, check=True)
 
     stdout = subprocess.run(("pip", "list"), capture_output=True).stdout.decode("utf-8")

pulp_python/tests/functional/api/test_version_specifier_filter.py

@@ -0,0 +1,28 @@
+import pytest
+
+from pulp_python.tests.functional.constants import PYTHON_SM_PROJECT_SPECIFIER
+
+
+@pytest.mark.parallel
+def test_version_specifier_filter(python_bindings, python_repo_with_sync, python_remote_factory):
+    """Test filtering content by PEP 440 version specifier."""
+    remote = python_remote_factory(includes=PYTHON_SM_PROJECT_SPECIFIER)
+    repo = python_repo_with_sync(remote=remote)
+
+    result = python_bindings.ContentPackagesApi.list(
+        repository_version=repo.latest_version_href,
+        name="Django",
+        version_specifier=">=1.10.2,<1.10.4",
+    )
+    versions = {c.version for c in result.results}
+    assert "1.10.2" in versions
+    assert "1.10.3" in versions
+    assert "1.10.4" not in versions
+
+
+@pytest.mark.parallel
+def test_version_specifier_filter_invalid(python_bindings):
+    """Test that an invalid specifier returns a 400 error."""
+    with pytest.raises(python_bindings.ApiException) as exc:
+        python_bindings.ContentPackagesApi.list(version_specifier=">=invalid!version")
+    assert exc.value.status == 400

pulp_python/tests/functional/api/test_yank.py

@@ -0,0 +1,306 @@
+from urllib.parse import urljoin
+
+import pytest
+import requests
+
+from pulp_python.tests.functional.constants import (
+    PYPI_SIMPLE_V1_JSON,
+    PYTHON_FIXTURES_URL,
+    TWINE_EGG_FILENAME,
+    TWINE_EGG_URL,
+    TWINE_WHEEL_FILENAME,
+    TWINE_WHEEL_URL,
+)
+
+TWINE_NAME = "twine"
+TWINE_VERSION = "5.1.0"
+
+TWINE_500_WHEEL_FILENAME = "twine-5.0.0-py3-none-any.whl"
+TWINE_500_WHEEL_URL = urljoin(urljoin(PYTHON_FIXTURES_URL, "packages/"), TWINE_500_WHEEL_FILENAME)
+
+
+def test_yank_and_unyank(
+    delete_orphans_pre,
+    monitor_task,
+    python_bindings,
+    python_content_factory,
+    python_content_summary,
+    python_distribution_factory,
+    python_repo_factory,
+):
+    """
+    Yank and unyank lifecycle including idempotency and reason update checks.
+
+    Every yank/unyank that changes state creates a new repo version.
+    Repeating the same operation with the same reason is a no-op (no new version).
+    Re-yanking with a different reason updates the reason and creates a new version.
+    """
+    content_sdist = python_content_factory(TWINE_EGG_FILENAME, url=TWINE_EGG_URL)
+    content_whl = python_content_factory(TWINE_WHEEL_FILENAME, url=TWINE_WHEEL_URL)
+    repo = python_repo_factory()
+    body = {"add_content_units": [content_sdist.pulp_href, content_whl.pulp_href]}
+    monitor_task(python_bindings.RepositoriesPythonApi.modify(repo.pulp_href, body).task)
+    repo = python_bindings.RepositoriesPythonApi.read(repo.pulp_href)
+    distro = python_distribution_factory(repository=repo)
+    version_1 = repo.latest_version_href
+
+    # 1. Yank
+    response = python_bindings.PypiYankApi.yank(
+        path=distro.base_path,
+        yank={"name": TWINE_NAME, "version": TWINE_VERSION, "yanked_reason": "broken"},
+    )
+    monitor_task(response.task)
+
+    repo = python_bindings.RepositoriesPythonApi.read(repo.pulp_href)
+    version_2 = repo.latest_version_href
+    assert version_2 != version_1
+    summary = python_content_summary(repository=repo, version=2)
+    assert summary.added["python.python_yank"]["count"] == 1
+
+    # Check Simple API JSON - yanked files should have yanked reason
+    simple_url = urljoin(distro.base_url, f"simple/{TWINE_NAME}")
+    response = requests.get(simple_url, headers={"Accept": PYPI_SIMPLE_V1_JSON})
+    assert response.json()["files"][0]["yanked"] == "broken"
+    assert response.json()["files"][1]["yanked"] == "broken"
+
+    # Check Simple API HTML - data-yanked attribute should be present
+    response = requests.get(simple_url)
+    assert response.text.count('data-yanked="broken"') == 2
+
+    # Check PyPI Metadata API - yanked info in metadata
+    pypi_url = urljoin(distro.base_url, f"pypi/{TWINE_NAME}/json")
+    response = requests.get(pypi_url)
+    data = response.json()
+    assert data["info"]["yanked"] is True
+    assert data["info"]["yanked_reason"] == "broken"
+    for f in data["releases"][TWINE_VERSION]:
+        assert f["yanked"] is True
+        assert f["yanked_reason"] == "broken"
+    for f in data["urls"]:
+        assert f["yanked"] is True
+        assert f["yanked_reason"] == "broken"
+
+    # Yank again with same reason - idempotent, no new repo version
+    response = python_bindings.PypiYankApi.yank(
+        path=distro.base_path,
+        yank={"name": TWINE_NAME, "version": TWINE_VERSION, "yanked_reason": "broken"},
+    )
+    monitor_task(response.task)
+
+    repo = python_bindings.RepositoriesPythonApi.read(repo.pulp_href)
+    assert repo.latest_version_href == version_2
+
+    # Yank again with different reason - updates the reason
+    response = python_bindings.PypiYankApi.yank(
+        path=distro.base_path,
+        yank={"name": TWINE_NAME, "version": TWINE_VERSION, "yanked_reason": "security fix"},
+    )
+    monitor_task(response.task)
+
+    repo = python_bindings.RepositoriesPythonApi.read(repo.pulp_href)
+    version_3 = repo.latest_version_href
+    assert version_3 != version_2
+
+    # Simple API should show updated reason
+    response = requests.get(simple_url, headers={"Accept": PYPI_SIMPLE_V1_JSON})
+    assert response.json()["files"][0]["yanked"] == "security fix"
+    assert response.json()["files"][1]["yanked"] == "security fix"
+
+    response = requests.get(simple_url)
+    assert response.text.count('data-yanked="security fix"') == 2
+
+    # 2. Unyank
+    response = python_bindings.PypiUnyankApi.unyank(
+        path=distro.base_path, yank={"name": TWINE_NAME, "version": TWINE_VERSION}
+    )
+    monitor_task(response.task)
+
+    repo = python_bindings.RepositoriesPythonApi.read(repo.pulp_href)
+    version_4 = repo.latest_version_href
+    assert version_4 != version_3
+    summary = python_content_summary(repository=repo, version=4)
+    assert summary.removed["python.python_yank"]["count"] == 1
+
+    # Check Simple API JSON - yanked should be False after unyank
+    response = requests.get(simple_url, headers={"Accept": PYPI_SIMPLE_V1_JSON})
+    assert response.json()["files"][0]["yanked"] is False
+    assert response.json()["files"][1]["yanked"] is False
+
+    # Check Simple API HTML - data-yanked attribute should not be present
+    response = requests.get(simple_url)
+    assert "data-yanked" not in response.text
+
+    # Check PyPI Metadata API - yanked should be False after unyank
+    response = requests.get(pypi_url)
+    data = response.json()
+    assert data["info"]["yanked"] is False
+    assert data["info"]["yanked_reason"] is None
+    for f in data["releases"][TWINE_VERSION]:
+        assert f["yanked"] is False
+        assert f["yanked_reason"] is None
+    for f in data["urls"]:
+        assert f["yanked"] is False
+        assert f["yanked_reason"] is None
+
+    # Unyank again - idempotent, no new repo version
+    response = python_bindings.PypiUnyankApi.unyank(
+        path=distro.base_path, yank={"name": TWINE_NAME, "version": TWINE_VERSION}
+    )
+    monitor_task(response.task)
+
+    repo = python_bindings.RepositoriesPythonApi.read(repo.pulp_href)
+    assert repo.latest_version_href == version_4
+
+
+def test_yank_sync(
+    delete_orphans_pre,
+    python_remote_factory,
+    python_repo_with_sync,
+    python_content_summary,
+    python_distribution_factory,
+):
+    """
+    Syncing a yanked package from upstream creates a PackageYank marker.
+    """
+    remote = python_remote_factory(includes=[f"{TWINE_NAME}=={TWINE_VERSION}"])
+    repo = python_repo_with_sync(remote)
+    distro = python_distribution_factory(repository=repo)
+
+    # Sync should have created a yank marker for twine 5.1.0
+    summary = python_content_summary(repository=repo, version=1)
+    assert summary.added["python.python"]["count"] == 2
+    assert summary.added["python.python_yank"]["count"] == 1
+
+    # Check Simple API JSON - yanked files should have yanked reason
+    simple_url = urljoin(distro.base_url, f"simple/{TWINE_NAME}")
+    response = requests.get(simple_url, headers={"Accept": PYPI_SIMPLE_V1_JSON})
+    assert response.json()["files"][0]["yanked"] == "https://github.com/pypa/twine/issues/1125"
+    assert response.json()["files"][1]["yanked"] == "https://github.com/pypa/twine/issues/1125"
+
+    # Check Simple API HTML - data-yanked attribute should be present
+    response = requests.get(simple_url)
+    assert response.text.count("data-yanked=") == 2
+
+
+@pytest.mark.parallel
+def test_partial_yank(
+    monitor_task,
+    python_bindings,
+    python_content_factory,
+    python_content_summary,
+    python_distribution_factory,
+    python_repo_factory,
+):
+    """
+    Yanking one version does not affect other versions of the same package.
+    """
+    content_510 = python_content_factory(TWINE_WHEEL_FILENAME, url=TWINE_WHEEL_URL)
+    content_500 = python_content_factory(TWINE_500_WHEEL_FILENAME, url=TWINE_500_WHEEL_URL)
+
+    repo = python_repo_factory()
+    body = {"add_content_units": [content_510.pulp_href, content_500.pulp_href]}
+    monitor_task(python_bindings.RepositoriesPythonApi.modify(repo.pulp_href, body).task)
+    distro = python_distribution_factory(repository=repo)
+
+    response = python_bindings.PypiYankApi.yank(
+        path=distro.base_path,
+        yank={"name": TWINE_NAME, "version": TWINE_VERSION, "yanked_reason": "broken 5.1.0"},
+    )
+    monitor_task(response.task)
+
+    summary = python_content_summary(repository=repo, version=2)
+    assert summary.added["python.python_yank"]["count"] == 1
+    assert summary.present["python.python_yank"]["count"] == 1
+
+    # Check Simple API JSON - yanked files should have yanked reason
+    simple_url = urljoin(distro.base_url, f"simple/{TWINE_NAME}")
+    response = requests.get(simple_url, headers={"Accept": PYPI_SIMPLE_V1_JSON})
+    data = response.json()
+    file_510 = next(f for f in data["files"] if f["filename"] == TWINE_WHEEL_FILENAME)
+    file_500 = next(f for f in data["files"] if f["filename"] == TWINE_500_WHEEL_FILENAME)
+    assert file_510["yanked"] == "broken 5.1.0"
+    assert file_500["yanked"] is False
+
+
+@pytest.mark.parallel
+def test_yank_isolation_across_repositories(
+    monitor_task,
+    python_bindings,
+    python_content_factory,
+    python_content_summary,
+    python_distribution_factory,
+    python_repo_factory,
+):
+    """
+    Yanking in one repo does not affect another repo with the same content.
+    """
+    content = python_content_factory(TWINE_WHEEL_FILENAME, url=TWINE_WHEEL_URL)
+
+    repo_a = python_repo_factory()
+    repo_b = python_repo_factory()
+    body = {"add_content_units": [content.pulp_href]}
+    monitor_task(python_bindings.RepositoriesPythonApi.modify(repo_a.pulp_href, body).task)
+    monitor_task(python_bindings.RepositoriesPythonApi.modify(repo_b.pulp_href, body).task)
+
+    distro_a = python_distribution_factory(repository=repo_a)
+    distro_b = python_distribution_factory(repository=repo_b)
+
+    # Yank in repo A only
+    response = python_bindings.PypiYankApi.yank(
+        path=distro_a.base_path, yank={"name": TWINE_NAME, "version": TWINE_VERSION}
+    )
+    monitor_task(response.task)
+
+    # Repo A should have a yank marker, repo B should not
+    summary_a = python_content_summary(repository=repo_a, version=2)
+    assert summary_a.present["python.python_yank"]["count"] == 1
+    summary_b = python_content_summary(repository=repo_b, version=1)
+    assert "python.python_yank" not in summary_b.present
+
+    # Yank in repo B too, then unyank only in repo A
+    response = python_bindings.PypiYankApi.yank(
+        path=distro_b.base_path, yank={"name": TWINE_NAME, "version": TWINE_VERSION}
+    )
+    monitor_task(response.task)
+
+    response = python_bindings.PypiUnyankApi.unyank(
+        path=distro_a.base_path, yank={"name": TWINE_NAME, "version": TWINE_VERSION}
+    )
+    monitor_task(response.task)
+
+    # Repo A should be not-yanked, repo B should remain yanked
+    summary_a = python_content_summary(repository=repo_a, version=3)
+    assert "python.python_yank" not in summary_a.present
+    summary_b = python_content_summary(repository=repo_b, version=2)
+    assert summary_b.present["python.python_yank"]["count"] == 1
+
+
+@pytest.mark.parallel
+def test_yank_nonexistent_package(
+    python_bindings, python_repo_factory, python_distribution_factory
+):
+    """
+    Yanking a package not in the repo should return 404.
+    """
+    repo = python_repo_factory()
+    distro = python_distribution_factory(repository=repo)
+
+    with pytest.raises(python_bindings.ApiException) as exc:
+        python_bindings.PypiYankApi.yank(
+            path=distro.base_path, yank={"name": "nonexistent-package", "version": "99.99.99"}
+        )
+    assert exc.value.status == 404
+
+
+@pytest.mark.parallel
+def test_yank_no_repository(python_bindings, python_distribution_factory):
+    """
+    Yanking on a distribution with no repository should return 400.
+    """
+    distro = python_distribution_factory()
+
+    with pytest.raises(python_bindings.ApiException) as exc:
+        python_bindings.PypiYankApi.yank(
+            path=distro.base_path, yank={"name": TWINE_NAME, "version": TWINE_VERSION}
+        )
+    assert exc.value.status == 400

{pulp_python-3.32.1.dist-info → pulp_python-3.33.0.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: pulp-python
-Version: 3.32.1
+Version: 3.33.0
 Summary: pulp-python plugin for the Pulp Project
 Author-email: Pulp Team <pulp-list@redhat.com>
 Project-URL: Homepage, https://pulpproject.org

{pulp_python-3.32.1.dist-info → pulp_python-3.33.0.dist-info}/RECORD

@@ -1,18 +1,18 @@
 pulp_python/__init__.py,sha256=GIuTLoBTc-07dSLJUh8xrZPRz8x-jJ61pfR0J1IjnzI,65
 pulp_python/pytest_plugin.py,sha256=8Ko-O87JGPC79h8-Ecw2gJLxa6q1Ng8wD6WxbinOnVs,8573
-pulp_python/app/__init__.py,sha256=iwdj2oF4-hKr7-1-FR2-qyjZQjEL5ZTRgv-cKfDFsjs,2490
+pulp_python/app/__init__.py,sha256=bjr3cUnummu5g439G8dE0t3bIvggT7lgQOXuhuMM_IM,2490
 pulp_python/app/cache.py,sha256=Zl2nb4uKyPYp5a3FBrdRZ_-cXfofNMQmIRaQ6dUZZ1g,1037
 pulp_python/app/exceptions.py,sha256=mPNcWyuzF0XeOPybm-G6oDKtRqvfj4jyp41iaYqcqkA,1314
 pulp_python/app/global_access_conditions.py,sha256=MZJtyoVsr-4hRaty6mKDqh3caOHd5UKJjEWLV2crOLs,1080
 pulp_python/app/modelresource.py,sha256=4SFAdqk6lozi_cZz4uqDIqhqPAZF-7l5jJwPn-xGZFs,1249
-pulp_python/app/models.py,sha256=oEZ05nKkYzqkMOq2dUJ4QzZlA0-rvwWyxrEHwax91YI,17691
+pulp_python/app/models.py,sha256=jTt3Ulk8KeX2QEzQdquYNszwjjeRWYdwJ-OoMIFi3rU,18557
 pulp_python/app/provenance.py,sha256=iyhkuNahHiTDK0Djrd4-PlgErA5SJVI0uQOIPj46tEI,2352
 pulp_python/app/replica.py,sha256=qiWRP7tM_v4yP_XLIQfumfGolru-Jt6ZA0KVb-9g2cA,1882
-pulp_python/app/serializers.py,sha256=y4WJTMPVKcGlbj98cKTeqWQLCB2kfjkX2hON90_iGDo,33882
+pulp_python/app/serializers.py,sha256=F_MrhMaxkA1dNnQhRAmefrsbOkHoWu8i3DqHa2ndmIw,34519
 pulp_python/app/settings.py,sha256=Cyc_p6U0HQjKpyrRL6JFrK3R7RMQJ9MAgNMJCfzPEiA,255
-pulp_python/app/urls.py,sha256=M2xjQ0j47BwQVpi75QCa5eUnQDcroKv3Cee7UrQ3QcA,1387
-pulp_python/app/utils.py,sha256=oIFX4RaDcxPvlFdkTilyW_66MOdlKMz7Ke42lLlyNNs,27414
-pulp_python/app/viewsets.py,sha256=yN1gHaT9vosqTbEP6emyMzoitliTzeHZTEqBVyn_2vA,34219
+pulp_python/app/urls.py,sha256=p784I54JxOFXOg9dcXXimbnXQWvYfSLwjw3Qopib9Pw,1573
+pulp_python/app/utils.py,sha256=13jUDe8BwfuN1m3-pAJ8Kip0vixQTHAiZZIn7xl0YUo,27786
+pulp_python/app/viewsets.py,sha256=WUn9iOneAF61tHT8r4iTDGjIBY6Vis71fczVX78czW4,35858
 pulp_python/app/management/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 pulp_python/app/management/commands/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 pulp_python/app/management/commands/repair-python-metadata.py,sha256=knvTPcPwyfgCH0-KNNCK1Mj0mQKzXUdYEwo-v6F94XU,4548
@@ -39,16 +39,18 @@ pulp_python/app/migrations/0019_create_missing_metadata_artifacts.py,sha256=glHe
 pulp_python/app/migrations/0020_pythonpackagecontent_name_normalized.py,sha256=n-gtLKmhDiydgkM5Fv8OisoFZYPPOhOa8-9nExCCq14,1317
 pulp_python/app/migrations/0021_pythonrepository_upload_duplicate_filenames.py,sha256=Yx-Cgk8DR9J9e9ht00xy0s6ogh2Rh5JS7AbdzSngKLY,384
 pulp_python/app/migrations/0022_pythonblocklistentry.py,sha256=EbtjZuN65myTAHVWrJYbt4mWgWL7EElEYs1XulHB6Bo,1732
+pulp_python/app/migrations/0023_packageyank.py,sha256=357fqSNK-D1OvI9RynnyMMrXJtdcjoEg5j4GteqiESU,1590
 pulp_python/app/migrations/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 pulp_python/app/pypi/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-pulp_python/app/pypi/serializers.py,sha256=rE0Cci2IMg4NbNWlVdo-8zPaJCAUq2Re57q_T3jMt0Y,5030
-pulp_python/app/pypi/views.py,sha256=guGJeH9D4HZ5cG4YaByjwIr-1CrC2ziD7YkM_gPgH_U,22616
-pulp_python/app/tasks/__init__.py,sha256=lTFpVvpDKbqv9RC0b2RYU8Bo6svDjrA-djt16pADFr8,284
+pulp_python/app/pypi/serializers.py,sha256=VDV4REMltZr98bxulgOGoGLnBxUtDod0t1fg_lDFpcs,5601
+pulp_python/app/pypi/views.py,sha256=m5_b_MLoSNhwZ64UpQKOzmlaAA7nCfKU_4r1RFY3jnA,26252
+pulp_python/app/tasks/__init__.py,sha256=JplOj2JtE_i4sQYqV7JnDY7zkraU_KlsCaNnYYaZ1x4,346
 pulp_python/app/tasks/publish.py,sha256=bjsJzqJbLu7TF5rLb-UsZMmlNnc_LKw-sdHX9Gcatbw,4334
 pulp_python/app/tasks/repair.py,sha256=5InzdbjW8y3AC4Vj2PsNLm3wGGTr8D3LcfPw_WA2Fks,12257
-pulp_python/app/tasks/sync.py,sha256=kD1E_Y8lzsUP2T6gZ58lESkV5dkjj8uOPoqsDYh6jcs,12895
+pulp_python/app/tasks/sync.py,sha256=pgiw6R142ynN-lVocyOYDmokklMJFWeH9xAgwXan9a8,13363
 pulp_python/app/tasks/upload.py,sha256=HBOknlsAb0mlE-2dJsalH_8JUZwrKk4AsVibmVJf2aQ,6102
 pulp_python/app/tasks/vulnerability_report.py,sha256=0cyxNb4048HFUdUlGBA6wYsg-hEMjSfE8mtw05Ct9BQ,1126
+pulp_python/app/tasks/yank.py,sha256=VU16uLkA2-CUJe7q_u87AdkDH6gqWCwsHyc36wH35rc,2200
 pulp_python/app/webserver_snippets/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 pulp_python/app/webserver_snippets/apache.conf,sha256=3frHSl2YV_8pJPscaFxMVo7HmxGJdb8XVmfdLtCxzoA,97
 pulp_python/app/webserver_snippets/nginx.conf,sha256=gMqZGFefsTJVVx9YRxpHVS7NMEll9CzOseYdtLr3Avc,344
@@ -61,13 +63,13 @@ pulp_python/tests/functional/api/test_attestations.py,sha256=7tXJY4b48ww8Sdc37Vo
 pulp_python/tests/functional/api/test_auto_publish.py,sha256=uCIt4LsO61oMk3bDs3LMQDJI8zkKqvY0b1uX16bTxzM,1747
 pulp_python/tests/functional/api/test_blocklist.py,sha256=IWzlazoQbrfyHNq9bNAa9FcbShWqzC2Zhq8qrN7HBwg,5994
 pulp_python/tests/functional/api/test_consume_content.py,sha256=-7b6KOrIT3NLSUafeu1tzXEXRPddDbS5VeMHxMIy2n8,999
-pulp_python/tests/functional/api/test_crud_content_unit.py,sha256=S14yzx0HrRtSbs1uhvfQRPge6gB--ZOEqSescDtOtD8,13750
+pulp_python/tests/functional/api/test_crud_content_unit.py,sha256=g2G_Rxd9e8-m5n_Tv3J527nDQ4UgsDNKJzIdn2hshfI,14548
 pulp_python/tests/functional/api/test_crud_publications.py,sha256=3cuSDC9C9M1opt0lh5ObGj8t7gq5jUW-RWj6MrA4Teo,5647
 pulp_python/tests/functional/api/test_crud_remotes.py,sha256=clFFhgG5udyKzWOLwxpmwjhiVz8r5JEPAQHkztcAf9w,5812
 pulp_python/tests/functional/api/test_domains.py,sha256=uEA7dIBXaXah3WQ6g6xSIjdXOR_hrsQnSFrfbdtz8bg,10421
 pulp_python/tests/functional/api/test_download_content.py,sha256=5IuaHXyLakPkjm5sLTxtTl7Dq0yl7N36HpObnIa0Sks,4950
 pulp_python/tests/functional/api/test_export_import.py,sha256=rHns9wdaeP-vtfW_qoGHU9EVuJ4YuWE0-rjl_8otAgU,4530
-pulp_python/tests/functional/api/test_full_mirror.py,sha256=eU5HzgBBFOnX1q4m8ELx-t-I3U4TWXL-LNrlc2BcWVc,12045
+pulp_python/tests/functional/api/test_full_mirror.py,sha256=v0nSlGKGSycFqZM4opCTHVtbmCfo_Y5y3k_6Rm7eBF8,12058
 pulp_python/tests/functional/api/test_pypi_apis.py,sha256=iZnoSN2wCczXh14KJDH8pSDTygjs0kgZsYIcIYS5TP8,13647
 pulp_python/tests/functional/api/test_pypi_simple_api.py,sha256=tOUl8WXgJkMoxGyLbA-WorCxIRKfGWM-27_dK_Jc0Q4,7171
 pulp_python/tests/functional/api/test_rbac.py,sha256=-xNWqvKKU-v1uC6tCRGBK0aWaff25K9C-AfzQkdHhhI,10513
@@ -75,12 +77,14 @@ pulp_python/tests/functional/api/test_repair.py,sha256=4FR7jx_LA2K-pnRJXKkhq-1uU
 pulp_python/tests/functional/api/test_simple_cache.py,sha256=kJ9mwJKf9A-RthLzPZi0rjRQlygEkWsV6jAaAR8aYgc,4944
 pulp_python/tests/functional/api/test_sync.py,sha256=TTHR1CpZeRoD97RKxj2pZPsP0OS9ibYKGPOh1WfKISg,13801
 pulp_python/tests/functional/api/test_upload.py,sha256=f21Li9agJ5fdBqErVg1j6v5FDVdazB5mNClmGOjLUq8,5981
+pulp_python/tests/functional/api/test_version_specifier_filter.py,sha256=nmnBbhwxCEmcHOyFbS1uvemar67sONBGM9SsNn79LCc,1063
 pulp_python/tests/functional/api/test_vulnerability_report.py,sha256=Rv492Wrvu1FY7O_moo9DTB6OkI-OZURj_fuTKbENLh8,1730
+pulp_python/tests/functional/api/test_yank.py,sha256=qyZbAJ6bJO-4LPkVfVxKuWFjypJ8BmBrCnLo0luAhVk,11913
 pulp_python/tests/unit/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 pulp_python/tests/unit/test_models.py,sha256=TBI0yKsrdbnJSPeBFfxSqhXK7zaNvR6qg5JehGH3Pds,229
-pulp_python-3.32.1.dist-info/licenses/LICENSE,sha256=2ylvL381vKOhdO-w6zkrOxe9lLNBhRQpo9_0EbHC_HM,18046
-pulp_python-3.32.1.dist-info/METADATA,sha256=L3MSixYuk-rR8Xw7sm3-iXNiVPPx__1IQ_-7mWTBN2o,1744
-pulp_python-3.32.1.dist-info/WHEEL,sha256=K260EYznzXsJYBQGqmI8VTxEdiZYNvDZwW9cBh9-_MA,91
-pulp_python-3.32.1.dist-info/entry_points.txt,sha256=HvqLEXjw_dS5jqAwnE5JiRZFE6f-y5SRtitKLPml2To,115
-pulp_python-3.32.1.dist-info/top_level.txt,sha256=X0hXgXc_bpbiKqVrkt8jD5_QEiQviKbHDwveQcOcJjo,12
-pulp_python-3.32.1.dist-info/RECORD,,
+pulp_python-3.33.0.dist-info/licenses/LICENSE,sha256=2ylvL381vKOhdO-w6zkrOxe9lLNBhRQpo9_0EbHC_HM,18046
+pulp_python-3.33.0.dist-info/METADATA,sha256=7sbTkC494WCjyKIVjtdp9drQ29M8gzlsgiiyg5fZfYg,1744
+pulp_python-3.33.0.dist-info/WHEEL,sha256=K260EYznzXsJYBQGqmI8VTxEdiZYNvDZwW9cBh9-_MA,91
+pulp_python-3.33.0.dist-info/entry_points.txt,sha256=HvqLEXjw_dS5jqAwnE5JiRZFE6f-y5SRtitKLPml2To,115
+pulp_python-3.33.0.dist-info/top_level.txt,sha256=X0hXgXc_bpbiKqVrkt8jD5_QEiQviKbHDwveQcOcJjo,12
+pulp_python-3.33.0.dist-info/RECORD,,