pulpcore 3.63.30__tar.gz → 3.63.32__tar.gz

{pulpcore-3.63.30 → pulpcore-3.63.32}/CHANGES.md

@@ -8,6 +8,51 @@
 
 [//]: # (towncrier release notes start)
 
+## 3.63.32 (2026-03-10) {: #3.63.32 }
+
+### REST API {: #3.63.32-rest-api }
+
+#### Bugfixes {: #3.63.32-rest-api-bugfix }
+
+- Fixed a typo in `GroupRoleSerializer` that caused a 500 error when listing group roles with a domain set.
+  [#7095](https://github.com/pulp/pulpcore/issues/7095)
+- Moved artifact checksum validation from module-level settings code to a Django system check.
+  [#7380](https://github.com/pulp/pulpcore/issues/7380)
+
+### Plugin API {: #3.63.32-plugin-api }
+
+No significant changes.
+
+### Pulp File {: #3.63.32-pulp-file }
+
+No significant changes.
+
+### Pulp Cert Guard {: #3.63.32-pulp-cert-guard }
+
+No significant changes.
+
+---
+
+## 3.63.31 (2026-02-25) {: #3.63.31 }
+
+### REST API {: #3.63.31-rest-api }
+
+No significant changes.
+
+### Plugin API {: #3.63.31-plugin-api }
+
+No significant changes.
+
+### Pulp File {: #3.63.31-pulp-file }
+
+No significant changes.
+
+### Pulp Cert Guard {: #3.63.31-pulp-cert-guard }
+
+No significant changes.
+
+---
+
 ## 3.63.30 (2026-02-10) {: #3.63.30 }
 
 ### REST API {: #3.63.30-rest-api }

{pulpcore-3.63.30 → pulpcore-3.63.32}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: pulpcore
-Version: 3.63.30
+Version: 3.63.32
 Summary: Pulp Django Application and Related Modules
 Home-page: https://pulpproject.org
 Author: Pulp Team
@@ -26,9 +26,9 @@ Requires-Dist: asyncio-throttle<=1.0.2,>=1.0
 Requires-Dist: async-timeout<4.0.4,>=4.0.3; python_version < "3.11"
 Requires-Dist: backoff<2.2.2,>=2.1.2
 Requires-Dist: click<=8.1.7,>=8.1.0
-Requires-Dist: cryptography<45.0.4,>=44.0.2
+Requires-Dist: cryptography<47.0,>=38.0.1
 Requires-Dist: Django!=5.0,!=5.1,<5.3,>=4.2.24
-Requires-Dist: django-filter<=24.3,>=23.1
+Requires-Dist: django-filter<=25.2,>=23.1
 Requires-Dist: django-guid<=3.5.0,>=3.3
 Requires-Dist: django-import-export<5.0,>=2.9
 Requires-Dist: django-lifecycle<=1.2.4,>=1.0
@@ -36,7 +36,7 @@ Requires-Dist: djangorestframework<=3.15.2,>=3.14.0
 Requires-Dist: djangorestframework-queryfields<=1.1.0,>=1.0
 Requires-Dist: drf-access-policy<1.5.1,>=1.1.2
 Requires-Dist: drf-nested-routers<=0.94.1,>=0.93.4
-Requires-Dist: drf-spectacular==0.27.2
+Requires-Dist: drf-spectacular<0.30,>=0.27.2
 Requires-Dist: dynaconf<3.3.0,>=3.1.12
 Requires-Dist: gunicorn<23.1.0,>=20.1
 Requires-Dist: importlib-metadata<=6.0.1,>=6.0.1

{pulpcore-3.63.30 → pulpcore-3.63.32}/pulp_certguard/app/__init__.py

@@ -6,6 +6,6 @@ class PulpCertGuardPluginAppConfig(PulpPluginAppConfig):
 
     name = "pulp_certguard.app"
     label = "certguard"
-    version = "3.63.30"
+    version = "3.63.32"
     python_package_name = "pulpcore"
     domain_compatible = True

{pulpcore-3.63.30 → pulpcore-3.63.32}/pulp_file/app/__init__.py

@@ -8,6 +8,6 @@ class PulpFilePluginAppConfig(PulpPluginAppConfig):
 
     name = "pulp_file.app"
     label = "file"
-    version = "3.63.30"
+    version = "3.63.32"
     python_package_name = "pulpcore"
     domain_compatible = True

{pulpcore-3.63.30 → pulpcore-3.63.32}/pulpcore/app/apps.py

@@ -244,7 +244,7 @@ class PulpAppConfig(PulpPluginAppConfig):
     label = "core"
 
     # The version of this app
-    version = "3.63.30"
+    version = "3.63.32"
 
     # The python package name providing this app
     python_package_name = "pulpcore"

{pulpcore-3.63.30 → pulpcore-3.63.32}/pulpcore/app/checks.py

@@ -1,7 +1,16 @@
 from pathlib import Path
 
 from django.conf import settings
-from django.core.checks import Error as CheckError, Warning as CheckWarning, register
+from django.core.checks import (
+    Debug as CheckDebug,
+    Error as CheckError,
+    Warning as CheckWarning,
+    Tags,
+    register,
+)
+from django.db.models import Q
+
+from pulpcore import constants
 
 
 @register(deploy=True)
@@ -71,3 +80,55 @@ def storage_paths(app_configs, **kwargs):
             )
 
     return warnings
+
+
+@register(Tags.database)
+def check_artifact_checksums(app_configs, **kwargs):
+    from pulpcore.app.models import Artifact, RemoteArtifact
+
+    messages = []
+    allowed = set(settings.ALLOWED_CONTENT_CHECKSUMS)
+    forbidden = set(constants.ALL_KNOWN_CONTENT_CHECKSUMS).difference(allowed)
+
+    try:
+        for checksum in allowed:
+            if Artifact.objects.filter(**{checksum: None}).exists():
+                messages.append(
+                    CheckError(
+                        f"There have been identified artifacts missing checksum '{checksum}'. "
+                        "Run 'pulpcore-manager handle-artifact-checksums' first to populate "
+                        "missing artifact checksums.",
+                        id="pulpcore.E002",
+                    )
+                )
+        for checksum in forbidden:
+            if Artifact.objects.exclude(**{checksum: None}).exists():
+                messages.append(
+                    CheckWarning(
+                        f"There have been identified artifacts with forbidden checksum "
+                        f"'{checksum}'. Run 'pulpcore-manager handle-artifact-checksums' "
+                        "to unset forbidden checksums.",
+                        id="pulpcore.W004",
+                    )
+                )
+
+        has_any_checksum = ~Q(**{c: None for c in constants.ALL_KNOWN_CONTENT_CHECKSUMS})
+        missing_allowed = Q(**{c: None for c in allowed})
+        if RemoteArtifact.objects.filter(has_any_checksum & missing_allowed).exists():
+            messages.append(
+                CheckWarning(
+                    "Detected remote content without allowed checksums. "
+                    "Run 'pulpcore-manager handle-artifact-checksums --report' to "
+                    "view this content.",
+                    id="pulpcore.W005",
+                )
+            )
+    except Exception:
+        messages.append(
+            CheckDebug(
+                "Skipping artifact checksum checks (table may not exist yet).",
+                id="pulpcore.D001",
+            )
+        )
+
+    return messages

{pulpcore-3.63.30 → pulpcore-3.63.32}/pulpcore/app/serializers/user.py

@@ -373,7 +373,7 @@ class GroupRoleSerializer(ValidateRoleMixin, ModelSerializer, NestedHyperlinkedM
         help_text=_(
             "Domain this role should be applied on, mutually exclusive with content_object."
         ),
-        view_name="domain-detail",
+        view_name="domains-detail",
         queryset=Domain.objects.all(),
         allow_null=True,
         required=False,

{pulpcore-3.63.30 → pulpcore-3.63.32}/pulpcore/app/settings.py

@@ -19,7 +19,6 @@ from cryptography.fernet import Fernet
 from django.conf import global_settings
 from django.core.files.storage import storages  # noqa: F401
 from django.core.exceptions import ImproperlyConfigured
-from django.db import connection
 
 from pulpcore import constants
 
@@ -512,69 +511,6 @@ FORBIDDEN_CHECKSUMS = set(constants.ALL_KNOWN_CONTENT_CHECKSUMS).difference(
     ALLOWED_CONTENT_CHECKSUMS
 )
 
-_SKIPPED_COMMANDS_FOR_CONTENT_CHECKS = [
-    "handle-artifact-checksums",
-    "migrate",
-    "collectstatic",
-    "openapi",
-]
-
-if not (len(sys.argv) >= 2 and sys.argv[1] in _SKIPPED_COMMANDS_FOR_CONTENT_CHECKS):
-    try:
-        with connection.cursor() as cursor:
-            for checksum in ALLOWED_CONTENT_CHECKSUMS:
-                # can't import Artifact here so use a direct db connection
-                cursor.execute(f"SELECT count(pulp_id) FROM core_artifact WHERE {checksum} IS NULL")
-                row = cursor.fetchone()
-                if row[0] > 0:
-                    raise ImproperlyConfigured(
-                        (
-                            "There have been identified artifacts missing checksum '{}'. "
-                            "Run 'pulpcore-manager handle-artifact-checksums' first to populate "
-                            "missing artifact checksums."
-                        ).format(checksum)
-                    )
-            for checksum in FORBIDDEN_CHECKSUMS:
-                # can't import Artifact here so use a direct db connection
-                cursor.execute(
-                    f"SELECT count(pulp_id) FROM core_artifact WHERE {checksum} IS NOT NULL"
-                )
-                row = cursor.fetchone()
-                if row[0] > 0:
-                    raise ImproperlyConfigured(
-                        (
-                            "There have been identified artifacts with forbidden checksum '{}'. "
-                            "Run 'pulpcore-manager handle-artifact-checksums' first to unset "
-                            "forbidden checksums."
-                        ).format(checksum)
-                    )
-
-            # warn if there are remote artifacts with checksums but no allowed checksums
-            cond = " AND ".join([f"{c} IS NULL" for c in constants.ALL_KNOWN_CONTENT_CHECKSUMS])
-            no_checksum_query = f"SELECT pulp_id FROM core_remoteartifact WHERE {cond}"
-            cond = " AND ".join([f"{c} IS NULL" for c in ALLOWED_CONTENT_CHECKSUMS])
-            cursor.execute(
-                f"SELECT count(pulp_id) FROM core_remoteartifact WHERE {cond} AND "
-                f"pulp_id NOT IN ({no_checksum_query})"
-            )
-            row = cursor.fetchone()
-            if row[0] > 0:
-                _logger.warning(
-                    (
-                        "Warning: detected remote content without allowed checksums. "
-                        "Run 'pulpcore-manager handle-artifact-checksums --report' to "
-                        "view this content."
-                    )
-                )
-
-    except ImproperlyConfigured as e:
-        raise e
-    except Exception:
-        # our check could fail if the table hasn't been created yet or we can't get a db connection
-        pass
-    finally:
-        connection.close()
-
 # Ensures the cached property storage.backends uses the right value after dynaconf init
 storages._backends = settings.STORAGES.copy()
 storages.backends

{pulpcore-3.63.30 → pulpcore-3.63.32}/pulpcore/tests/functional/api/test_users_groups.py

@@ -73,3 +73,22 @@ def test_groups_add_bad_user(pulpcore_bindings, gen_object_with_cleanup):
     ).pulp_href
     with pytest.raises(ApiException, match="foo"):
         pulpcore_bindings.GroupsUsersApi.create(group_href, group_user={"username": "foo"})
+
+
+@pytest.mark.parallel
+def test_group_roles_with_domain(pulpcore_bindings, gen_object_with_cleanup):
+    """Test that group roles with a domain can be listed and serialized.
+
+    Regression test for https://github.com/pulp/pulpcore/issues/7095
+    """
+    group = gen_object_with_cleanup(pulpcore_bindings.GroupsApi, {"name": str(uuid.uuid4())})
+    default_domain = pulpcore_bindings.DomainsApi.list(name="default").results[0]
+    gen_object_with_cleanup(
+        pulpcore_bindings.GroupsRolesApi,
+        group.pulp_href,
+        {"role": "core.task_viewer", "content_object": None, "domain": default_domain.pulp_href},
+    )
+
+    roles = pulpcore_bindings.GroupsRolesApi.list(group.pulp_href)
+    assert roles.count == 1
+    assert roles.results[0].domain == default_domain.pulp_href

{pulpcore-3.63.30 → pulpcore-3.63.32}/pulpcore.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: pulpcore
-Version: 3.63.30
+Version: 3.63.32
 Summary: Pulp Django Application and Related Modules
 Home-page: https://pulpproject.org
 Author: Pulp Team
@@ -26,9 +26,9 @@ Requires-Dist: asyncio-throttle<=1.0.2,>=1.0
 Requires-Dist: async-timeout<4.0.4,>=4.0.3; python_version < "3.11"
 Requires-Dist: backoff<2.2.2,>=2.1.2
 Requires-Dist: click<=8.1.7,>=8.1.0
-Requires-Dist: cryptography<45.0.4,>=44.0.2
+Requires-Dist: cryptography<47.0,>=38.0.1
 Requires-Dist: Django!=5.0,!=5.1,<5.3,>=4.2.24
-Requires-Dist: django-filter<=24.3,>=23.1
+Requires-Dist: django-filter<=25.2,>=23.1
 Requires-Dist: django-guid<=3.5.0,>=3.3
 Requires-Dist: django-import-export<5.0,>=2.9
 Requires-Dist: django-lifecycle<=1.2.4,>=1.0
@@ -36,7 +36,7 @@ Requires-Dist: djangorestframework<=3.15.2,>=3.14.0
 Requires-Dist: djangorestframework-queryfields<=1.1.0,>=1.0
 Requires-Dist: drf-access-policy<1.5.1,>=1.1.2
 Requires-Dist: drf-nested-routers<=0.94.1,>=0.93.4
-Requires-Dist: drf-spectacular==0.27.2
+Requires-Dist: drf-spectacular<0.30,>=0.27.2
 Requires-Dist: dynaconf<3.3.0,>=3.1.12
 Requires-Dist: gunicorn<23.1.0,>=20.1
 Requires-Dist: importlib-metadata<=6.0.1,>=6.0.1

{pulpcore-3.63.30 → pulpcore-3.63.32}/pulpcore.egg-info/requires.txt

@@ -4,9 +4,9 @@ aiohttp<3.14,>=3.9.0
 asyncio-throttle<=1.0.2,>=1.0
 backoff<2.2.2,>=2.1.2
 click<=8.1.7,>=8.1.0
-cryptography<45.0.4,>=44.0.2
+cryptography<47.0,>=38.0.1
 Django!=5.0,!=5.1,<5.3,>=4.2.24
-django-filter<=24.3,>=23.1
+django-filter<=25.2,>=23.1
 django-guid<=3.5.0,>=3.3
 django-import-export<5.0,>=2.9
 django-lifecycle<=1.2.4,>=1.0
@@ -14,7 +14,7 @@ djangorestframework<=3.15.2,>=3.14.0
 djangorestframework-queryfields<=1.1.0,>=1.0
 drf-access-policy<1.5.1,>=1.1.2
 drf-nested-routers<=0.94.1,>=0.93.4
-drf-spectacular==0.27.2
+drf-spectacular<0.30,>=0.27.2
 dynaconf<3.3.0,>=3.1.12
 gunicorn<23.1.0,>=20.1
 importlib-metadata<=6.0.1,>=6.0.1

{pulpcore-3.63.30 → pulpcore-3.63.32}/pyproject.toml

@@ -99,12 +99,14 @@ ignore = [
     "lint_requirements.txt",
     ".flake8",
     "pulpcore/tests/functional/assets/**",
+    "AGENTS.md",
+    "CLAUDE.md",
 ]
 
 [tool.bumpversion]
 # This section is managed by the plugin template. Do not edit manually.
 
-current_version = "3.63.30"
+current_version = "3.63.32"
 commit = false
 tag = false
 parse = "(?P<major>\\d+)\\.(?P<minor>\\d+)\\.(?P<alpha>0a)?(?P<patch>\\d+)(\\.(?P<release>[a-z]+))?"

{pulpcore-3.63.30 → pulpcore-3.63.32}/requirements.txt

@@ -5,9 +5,9 @@ asyncio-throttle>=1.0,<=1.0.2
 async-timeout>=4.0.3,<4.0.4;python_version<"3.11"
 backoff>=2.1.2,<2.2.2
 click>=8.1.0,<=8.1.7
-cryptography>=44.0.2,<45.0.4
+cryptography>=38.0.1,<47.0  # SemVer compatible https://cryptography.io/en/latest/api-stability/#versioning .
 Django>=4.2.24,<5.3, !=5.0, !=5.1  # LTS version, switch only if we have a compelling reason to
-django-filter>=23.1,<=24.3
+django-filter>=23.1,<=25.2  # Uses CalVer, not released often https://github.com/carltongibson/django-filter
 django-guid>=3.3,<=3.5.0
 django-import-export>=2.9,<5.0
 django-lifecycle>=1.0,<=1.2.4
@@ -15,7 +15,7 @@ djangorestframework>=3.14.0,<=3.15.2
 djangorestframework-queryfields>=1.0,<=1.1.0
 drf-access-policy>=1.1.2,<1.5.1
 drf-nested-routers>=0.93.4,<=0.94.1
-drf-spectacular==0.27.2  # We monkeypatch this so we need a very narrow requirement string
+drf-spectacular>=0.27.2,<0.30  # We monkeypatch this so we may need a very narrow requirement string.
 dynaconf>=3.1.12,<3.3.0
 gunicorn>=20.1,<23.1.0
 importlib-metadata>=6.0.1,<=6.0.1  # Pinned to fix opentelemetry dependency solving issues with pip

{pulpcore-3.63.30 → pulpcore-3.63.32}/setup.py

@@ -8,7 +8,7 @@ with open("requirements.txt") as requirements:
 
 setup(
     name="pulpcore",
-    version="3.63.30",
+    version="3.63.32",
     description="Pulp Django Application and Related Modules",
     long_description=long_description,
     long_description_content_type="text/markdown",