CHANGES.md

# Changelog

[//]: # (You should *NOT* be adding new change log entries to this file, this)
[//]: # (file is managed by towncrier. You *may* edit previous change logs to)
[//]: # (fix problems like typo corrections or such.)
[//]: # (To add a new change log entry, please see the contributing docs.)
[//]: # (WARNING: Don't drop the towncrier directive!)

[//]: # (towncrier release notes start)

## 3.109.1 (2026-04-22) {: #3.109.1 }

### REST API {: #3.109.1-rest-api }

#### Bugfixes {: #3.109.1-rest-api-bugfix }

- Fixed RedisWorker stalling when more than 20 tasks are waiting on the same resource.
  The worker now doubles its fetch limit and retries until a runnable task is found or the
  entire queue has been examined.
  [#7612](https://github.com/pulp/pulpcore/issues/7612)
- Fixed RedisWorker not always respecting FIFO order of tasks with shared resources.
  [#7616](https://github.com/pulp/pulpcore/issues/7616)

### Plugin API {: #3.109.1-plugin-api }

No significant changes.

### Pulp File {: #3.109.1-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.109.1-pulp-cert-guard }

No significant changes.

---

## 3.109.0 (2026-04-21) {: #3.109.0 }

### REST API {: #3.109.0-rest-api }

#### Features {: #3.109.0-rest-api-feature }

- Added support for serving superseded publications for a configurable retention period.
  [#7514](https://github.com/pulp/pulpcore/issues/7514)
- Added ability for non-admin users to update their personal account fields

#### Bugfixes {: #3.109.0-rest-api-bugfix }

- Added option to `pulpcore-content` and `pulpcore-api` to configure the gunicorn control socket path.
  The default path could cause permission errors on certain deployments setups.

  This feature was added in gunicorn>=25.1 and is ignored for lower version.
  [#7574](https://github.com/pulp/pulpcore/issues/7574)
- Optimized cleanup_old_versions() by rewriting protected_versions() to avoid expensive JOINs
  on large databases and deferring the content_ids field during version deletion.
  [#7594](https://github.com/pulp/pulpcore/issues/7594)
- Added new setting `TASK_PREFER_DEFER` to always defer immediate tasks to a task worker. Useful for systems with slow databases that frequently timeout immediate tasks.

### Plugin API {: #3.109.0-plugin-api }

No significant changes.

### Pulp File {: #3.109.0-pulp-file }

#### Bugfixes {: #3.109.0-pulp-file-bugfix }

- Fixed double publish when performing file replication.
  [#7557](https://github.com/pulp/pulpcore/issues/7557)

### Pulp Cert Guard {: #3.109.0-pulp-cert-guard }

No significant changes.

---

## 3.108.1 (2026-04-20) {: #3.108.1 }

### REST API {: #3.108.1-rest-api }

#### Bugfixes {: #3.108.1-rest-api-bugfix }

- Optimized cleanup_old_versions() by rewriting protected_versions() to avoid expensive JOINs
  on large databases and deferring the content_ids field during version deletion.
  [#7594](https://github.com/pulp/pulpcore/issues/7594)
- Added new setting `TASK_PREFER_DEFER` to always defer immediate tasks to a task worker. Useful for systems with slow databases that frequently timeout immediate tasks.

### Plugin API {: #3.108.1-plugin-api }

No significant changes.

### Pulp File {: #3.108.1-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.108.1-pulp-cert-guard }

No significant changes.

---

## 3.108.0 (2026-04-14) {: #3.108.0 }

### REST API {: #3.108.0-rest-api }

#### Features {: #3.108.0-rest-api-feature }

- Added WORKER_TYPE setting. Defaults to 'pulpcore'. 'redis' is also available.
  [#7210](https://github.com/pulp/pulpcore/issues/7210)
- Added OTEL_METRICS_DISPATCH_INTERVAL_MINUTES setting to allow configuring the periodic telemetry
  dispatch interval (default: 5 minutes).
  [#7532](https://github.com/pulp/pulpcore/issues/7532)
- Added `pulpcore.app.find_url.find_api_root()` to standardize Pulp url-creation.

#### Bugfixes {: #3.108.0-rest-api-bugfix }

- Set default ``--max-requests 10000`` and ``--max-requests-jitter 500`` for API workers
  to prevent unbounded RSS growth from glibc heap fragmentation over long-lived worker processes.
  [#7482](https://github.com/pulp/pulpcore/issues/7482)
- Fixed `reset-admin-password` command failing when using `--random` option on Django 5.
  [#7533](https://github.com/pulp/pulpcore/issues/7533)
- Fixed a race condition that could sometimes occur when converting an existing non-replica Pulp instance into a replica ("reverse-replication"). Likely rare in real world use.

### Plugin API {: #3.108.0-plugin-api }

No significant changes.

### Pulp File {: #3.108.0-pulp-file }

#### Misc {: #3.108.0-pulp-file-misc }

- 

### Pulp Cert Guard {: #3.108.0-pulp-cert-guard }

No significant changes.

---

## 3.107.1 (2026-04-09) {: #3.107.1 }

### REST API {: #3.107.1-rest-api }

#### Bugfixes {: #3.107.1-rest-api-bugfix }

- Fixed `reset-admin-password` command failing when using `--random` option on Django 5.
  [#7533](https://github.com/pulp/pulpcore/issues/7533)

### Plugin API {: #3.107.1-plugin-api }

No significant changes.

### Pulp File {: #3.107.1-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.107.1-pulp-cert-guard }

No significant changes.

---

## 3.107.0 (2026-04-01) {: #3.107.0 }

### REST API {: #3.107.0-rest-api }

#### Features {: #3.107.0-rest-api-feature }

- Added the `created_resource_prns` field to Task, returning the PRN of each created resource.
  [#7003](https://github.com/pulp/pulpcore/issues/7003)
- Add REDACT_UNSAFE_EXCEPTIONS setting for strict exception handling.

#### Bugfixes {: #3.107.0-rest-api-bugfix }

- Fixed a performance issue causing operations that process large numbers of HREFs to be ~1000x slower than equivalent PRN-based operations.
  [#6237](https://github.com/pulp/pulpcore/issues/6237)
- Pulp Replicas now present all of their distribution updates at the end of the replication process, rather than each individual repository-distribution pair being updated individually as syncs and publishes are completed. Unfortunately for users with existing replicated setups the very first replication post-upgrade will still have the old behavior - but afterwards it should work as expected.
  [#7333](https://github.com/pulp/pulpcore/issues/7333)

### Plugin API {: #3.107.0-plugin-api }

#### Features {: #3.107.0-plugin-api-feature }

- Made the prefix on `PgpKeyFingerprintField` optional, defaulting to `v4:` when omitted.

### Pulp File {: #3.107.0-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.107.0-pulp-cert-guard }

No significant changes.

---

## 3.106.0 (2026-03-24) {: #3.106.0 }

### REST API {: #3.106.0-rest-api }

#### Features {: #3.106.0-rest-api-feature }

- Added the `content_guard_prn` field to Distribution.
  [#7004](https://github.com/pulp/pulpcore/issues/7004)
- Add a data repair API for admins - for more granular control and operations which are too long for migrations.
  [#7272](https://github.com/pulp/pulpcore/issues/7272)
- Added ``retain_checkpoints`` field to Repository to automatically clear the checkpoint flag on older publications exceeding the limit.
  [#7428](https://github.com/pulp/pulpcore/issues/7428)
- Added `/pulp/api/v3/datarepair/7465/` endpoint to add missing repository version content_ids cache to all repository versions.
  [#7465](https://github.com/pulp/pulpcore/issues/7465)
- It is now possible to set `repository_version` on any distribution type, including for publication-based content types where this was not previously the case. For publication-based content, selecting a `repository_version` to distribute will pick the latest publication for that repository version, just as selecting a `repository` will pick the latest repository version.

#### Bugfixes {: #3.106.0-rest-api-bugfix }

- Fixed duplicate chunk uploads corrupting the entire upload
  [#6381](https://github.com/pulp/pulpcore/issues/6381)
- Added upperbounds to uvloop (an optional dependency) to prevent a known bug in newer releases.
  [#7213](https://github.com/pulp/pulpcore/issues/7213)
- Fixed bug where API process would miss heartbeats during long uploads.
  [#7315](https://github.com/pulp/pulpcore/issues/7315)
- Fix remove-signing-service handling, can now remove service without --class argument.
  [#7318](https://github.com/pulp/pulpcore/issues/7318)
- Fixed metadata artifacts being re-uploaded to storage when creating a publication for an already-published repository version.
  [#7344](https://github.com/pulp/pulpcore/issues/7344)
- Fixed a bug when syncing a custom repository using the upstream username only (no password)
  did not send any authentication since both were required by the download factory.
  [#7425](https://github.com/pulp/pulpcore/issues/7425)
- Added a management command (`pulpcore-manager datarepair 7465`) to populate the content_ids cache for all repository versions.
  [#7465](https://github.com/pulp/pulpcore/issues/7465)
- Added a composite database index on (pulp_domain, size) to the Artifact model to improve
  query performance when loading metrics data.
  [#7475](https://github.com/pulp/pulpcore/issues/7475)
- Added a GIN index to the pulp_labels field on Content and updated label filtering to use
  GIN-optimized lookups, improving query performance for label-based content searches.
  [#7477](https://github.com/pulp/pulpcore/issues/7477)
- Fixed a bug where a worker would start running `finalize_replication` task before the
  `replicate_distributions` task finishes.
  [#7520](https://github.com/pulp/pulpcore/issues/7520)

### Plugin API {: #3.106.0-plugin-api }

#### Features {: #3.106.0-plugin-api-feature }

- Added ``PgpKeyFingerprintField`` serializer field to the plugin API for validating and normalizing type-prefixed OpenPGP key identifiers.

#### Bugfixes {: #3.106.0-plugin-api-bugfix }

- Properly support DRF responses in Synchronous Content Cache.

### Pulp File {: #3.106.0-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.106.0-pulp-cert-guard }

No significant changes.

---

## 3.105.4 (2026-04-21) {: #3.105.4 }

### REST API {: #3.105.4-rest-api }

#### Bugfixes {: #3.105.4-rest-api-bugfix }

- Optimized cleanup_old_versions() by rewriting protected_versions() to avoid expensive JOINs
  on large databases and deferring the content_ids field during version deletion.
  [#7594](https://github.com/pulp/pulpcore/issues/7594)
- Added new setting `TASK_PREFER_DEFER` to always defer immediate tasks to a task worker. Useful for systems with slow databases that frequently timeout immediate tasks.

### Plugin API {: #3.105.4-plugin-api }

No significant changes.

### Pulp File {: #3.105.4-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.105.4-pulp-cert-guard }

No significant changes.

---

## 3.105.3 (2026-04-14) {: #3.105.3 }

### REST API {: #3.105.3-rest-api }

#### Bugfixes {: #3.105.3-rest-api-bugfix }

- Fixed `reset-admin-password` command failing when using `--random` option on Django 5.
  [#7533](https://github.com/pulp/pulpcore/issues/7533)

### Plugin API {: #3.105.3-plugin-api }

No significant changes.

### Pulp File {: #3.105.3-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.105.3-pulp-cert-guard }

No significant changes.

---

## 3.105.2 (2026-03-24) {: #3.105.2 }

### REST API {: #3.105.2-rest-api }

#### Bugfixes {: #3.105.2-rest-api-bugfix }

- Fixed a bug when syncing a custom repository using the upstream username only (no password)
  did not send any authentication since both were required by the download factory.
  [#7425](https://github.com/pulp/pulpcore/issues/7425)
- Added a management command (`pulpcore-manager datarepair 7465`) to populate the content_ids cache for all repository versions.
  [#7465](https://github.com/pulp/pulpcore/issues/7465)

### Plugin API {: #3.105.2-plugin-api }

#### Bugfixes {: #3.105.2-plugin-api-bugfix }

- Properly support DRF responses in Synchronous Content Cache.

### Pulp File {: #3.105.2-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.105.2-pulp-cert-guard }

No significant changes.

---

## 3.105.1 (2026-03-17) {: #3.105.1 }

### REST API {: #3.105.1-rest-api }

#### Bugfixes {: #3.105.1-rest-api-bugfix }

- Fixed duplicate chunk uploads corrupting the entire upload
  [#6381](https://github.com/pulp/pulpcore/issues/6381)
- Fix remove-signing-service handling, can now remove service without --class argument.
  [#7318](https://github.com/pulp/pulpcore/issues/7318)
- Fixed metadata artifacts being re-uploaded to storage when creating a publication for an already-published repository version.
  [#7344](https://github.com/pulp/pulpcore/issues/7344)

### Plugin API {: #3.105.1-plugin-api }

No significant changes.

### Pulp File {: #3.105.1-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.105.1-pulp-cert-guard }

No significant changes.

---

## 3.105.0 (2026-03-10) {: #3.105.0 }

### REST API {: #3.105.0-rest-api }

#### Features {: #3.105.0-rest-api-feature }

- Added better error handling for errors when creating RepositoryVersions.
  Now the duplicate content pks are shown in the logs.
  [#7184](https://github.com/pulp/pulpcore/issues/7184)
- `repository_version` filters now accept Repository HREF/PRNs to filter by the latest version
  [#7365](https://github.com/pulp/pulpcore/issues/7365)

#### Bugfixes {: #3.105.0-rest-api-bugfix }

- Unified `pulp_labels` key validation across create/update, `set_label`/`unset_label`, and label filters to consistently allow alphanumerics, underscores, spaces, hyphens, and dots.
  [#6456](https://github.com/pulp/pulpcore/issues/6456)
- Fixed a traceback when setting `pulp_labels` with null values on create or update.
  [#6593](https://github.com/pulp/pulpcore/issues/6593)
- Clean up on-demand temporary file left over on an aborted download.
  [#6975](https://github.com/pulp/pulpcore/issues/6975)
- Fixed a typo in `GroupRoleSerializer` that caused a 500 error when listing group roles with a domain set.
  [#7095](https://github.com/pulp/pulpcore/issues/7095)
- Fix regression (crash) during retain_repo_versions cleanup.
  [#7371](https://github.com/pulp/pulpcore/issues/7371)
- Moved artifact checksum validation from module-level settings code to a Django system check.
  [#7380](https://github.com/pulp/pulpcore/issues/7380)
- Fixed RemoteSerializer to fail when it contains invalid parameters.
  [#7385](https://github.com/pulp/pulpcore/issues/7385)
- Fixed the url of the generated openapi schemas when using `pulpcore-manager openapi`.

### Plugin API {: #3.105.0-plugin-api }

No significant changes.

### Pulp File {: #3.105.0-pulp-file }

#### Features {: #3.105.0-pulp-file-feature }

- Added ability to sync a git repository with the new FileGitRemote.
  [#4708](https://github.com/pulp/pulpcore/issues/4708)
- Added support for Git LFS in pulp-file git sync.

### Pulp Cert Guard {: #3.105.0-pulp-cert-guard }

No significant changes.

---

## 3.104.2 (2026-03-05) {: #3.104.2 }

### REST API {: #3.104.2-rest-api }

#### Bugfixes {: #3.104.2-rest-api-bugfix }

- Fixed a typo in `GroupRoleSerializer` that caused a 500 error when listing group roles with a domain set.
  [#7095](https://github.com/pulp/pulpcore/issues/7095)
- Fixed RemoteSerializer to fail when it contains invalid parameters.
  [#7385](https://github.com/pulp/pulpcore/issues/7385)

### Plugin API {: #3.104.2-plugin-api }

No significant changes.

### Pulp File {: #3.104.2-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.104.2-pulp-cert-guard }

No significant changes.

---

## 3.104.1 (2026-03-02) {: #3.104.1 }

### REST API {: #3.104.1-rest-api }

#### Bugfixes {: #3.104.1-rest-api-bugfix }

- Fix regression (crash) during retain_repo_versions cleanup.
  [#7371](https://github.com/pulp/pulpcore/issues/7371)

### Plugin API {: #3.104.1-plugin-api }

No significant changes.

### Pulp File {: #3.104.1-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.104.1-pulp-cert-guard }

No significant changes.

---

## 3.104.0 (2026-02-24) {: #3.104.0 }

### REST API {: #3.104.0-rest-api }

#### Features {: #3.104.0-rest-api-feature }

- Added a "debug-logs" option to the TASK_DIAGNOSTICS / X-Task-Diagnostics feature - dumps task-specific logs into a profile artifact at a DEBUG level.
  [#7214](https://github.com/pulp/pulpcore/issues/7214)
- Added a "logs" option to the TASK_DIAGNOSTICS / X-Task-Diagnostics feature - dumps task-specific logs into a profile artifact.
  [#7215](https://github.com/pulp/pulpcore/issues/7215)
- Add memory caching for api doc endpoints.

#### Bugfixes {: #3.104.0-rest-api-bugfix }

- "profile options" designated using the X-Task-Diagnostics feature should be propagated to child tasks.
  [#7219](https://github.com/pulp/pulpcore/issues/7219)
- Added a new "datarepair" management command for data cleanups which are for whatever reason not possible to run in a migration. Added support for cleaning up after issue #7272.
  [#7272](https://github.com/pulp/pulpcore/issues/7272)
- Fix OpenAPI spec to use string instead of UUID format.
- Fixed PRNField slowing down the generic list endpoints with extra database queries.

#### Improved Documentation {: #3.104.0-rest-api-doc }

- Fixed the quickstart instructions on how to contribute with code as well as links to more comprehensive guides.
  [#7319](https://github.com/pulp/pulpcore/issues/7319)

#### Removals {: #3.104.0-rest-api-removal }

- Reverted the exception handling refactor.

### Plugin API {: #3.104.0-plugin-api }

#### Bugfixes {: #3.104.0-plugin-api-bugfix }

- Harden RepositoryVersion memoization against bugs that could lead to incorrect counts and repository content.
  [#7272](https://github.com/pulp/pulpcore/issues/7272)
- Fixed new downloader config field breaking plugins with synchronous uploads.

### Pulp File {: #3.104.0-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.104.0-pulp-cert-guard }

No significant changes.

---

## 3.103.4 (2026-02-18) {: #3.103.4 }

### REST API {: #3.103.4-rest-api }

#### Bugfixes {: #3.103.4-rest-api-bugfix }

- Added a new "datarepair" management command for data cleanups which are for whatever reason not possible to run in a migration. Added support for cleaning up after issue #7272.
  [#7272](https://github.com/pulp/pulpcore/issues/7272)

### Plugin API {: #3.103.4-plugin-api }

#### Bugfixes {: #3.103.4-plugin-api-bugfix }

- Harden RepositoryVersion memoization against bugs that could lead to incorrect counts and repository content.
  [#7272](https://github.com/pulp/pulpcore/issues/7272)

### Pulp File {: #3.103.4-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.103.4-pulp-cert-guard }

No significant changes.

---

## 3.103.3 (2026-02-11) {: #3.103.3 }

### REST API {: #3.103.3-rest-api }

#### Removals {: #3.103.3-rest-api-removal }

- Reverted the exception handling refactor.

### Plugin API {: #3.103.3-plugin-api }

No significant changes.

### Pulp File {: #3.103.3-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.103.3-pulp-cert-guard }

No significant changes.

---

## 3.103.2 (2026-02-06) {: #3.103.2 }

### REST API {: #3.103.2-rest-api }

#### Bugfixes {: #3.103.2-rest-api-bugfix }

- Fixed PRNField slowing down the generic list endpoints with extra database queries.
- Fixed an accidental API-breaking change to `PulpException` in the previous release.

### Plugin API {: #3.103.2-plugin-api }

No significant changes.

### Pulp File {: #3.103.2-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.103.2-pulp-cert-guard }

No significant changes.

---

## 3.103.1 (2026-02-03) {: #3.103.1 }

### REST API {: #3.103.1-rest-api }

No significant changes.

### Plugin API {: #3.103.1-plugin-api }

#### Bugfixes {: #3.103.1-plugin-api-bugfix }

- Fixed new downloader config field breaking plugins with synchronous uploads.

### Pulp File {: #3.103.1-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.103.1-pulp-cert-guard }

No significant changes.

---

## 3.103.0 (2026-02-03) {: #3.103.0 }

### REST API {: #3.103.0-rest-api }

#### Features {: #3.103.0-rest-api-feature }

- Add network configuration support for synchronous file uploads
  [#7201](https://github.com/pulp/pulpcore/issues/7201)
- Improve the logging for heartbeat failures by including the actual Exception. It helps with troubleshooting.
  [#7235](https://github.com/pulp/pulpcore/issues/7235)

#### Bugfixes {: #3.103.0-rest-api-bugfix }

- Fix an error when running `pulpcore-manager list-signing-services`.

### Plugin API {: #3.103.0-plugin-api }

#### Features {: #3.103.0-plugin-api-feature }

- Added more useful error exceptions for general tasks.
  [#7270](https://github.com/pulp/pulpcore/issues/7270)

#### Bugfixes {: #3.103.0-plugin-api-bugfix }

- Exposed `PulpLabelsField` and `pulp_labels_validator` to the plugin API.

### Pulp File {: #3.103.0-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.103.0-pulp-cert-guard }

No significant changes.

---

## 3.102.0 (2026-01-27) {: #3.102.0 }

### REST API {: #3.102.0-rest-api }

#### Features {: #3.102.0-rest-api-feature }

- Added a `pulpcore-manager list-signing-services` command.

#### Bugfixes {: #3.102.0-rest-api-bugfix }

- Implement atomic hashing and chunking in PulpExport
  [#7218](https://github.com/pulp/pulpcore/issues/7218)
- Fixed not supporting the new rename of the S3 storage backend.
  [#7228](https://github.com/pulp/pulpcore/issues/7228)
- Fixed duplicate error code PLP0003 used by both ResourceImmutableError and DigestValidationError. ResourceImmutableError now uses PLP0006.
- Use a proper spdx license identifier in the openapi docs.

#### Improved Documentation {: #3.102.0-rest-api-doc }

- Updated error handling documentation with all PulpException classes and usage examples.

#### Removals {: #3.102.0-rest-api-removal }

- Stopped leaking sensitive information of failures in the task API.

### Plugin API {: #3.102.0-plugin-api }

No significant changes.

### Pulp File {: #3.102.0-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.102.0-pulp-cert-guard }

No significant changes.

---

## 3.101.0 (2026-01-13) {: #3.101.0 }

### REST API {: #3.101.0-rest-api }

#### Improved Documentation {: #3.101.0-rest-api-doc }

- Re-introduced "Hardware Requirements" page to the docs.
  [#7063](https://github.com/pulp/pulpcore/issues/7063)

### Plugin API {: #3.101.0-plugin-api }

#### Features {: #3.101.0-plugin-api-feature }

- Added `modify_task` property to `ModifyRepositoryActionMixin` so plugin writers can override the
  task that Pulp calls.

### Pulp File {: #3.101.0-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.101.0-pulp-cert-guard }

No significant changes.

---

## 3.100.0 (2026-01-06) {: #3.100.0 }

### REST API {: #3.100.0-rest-api }

#### Features {: #3.100.0-rest-api-feature }

- Adapted PulpImport/Export to allow update django-import-export==4.x.
  [#5324](https://github.com/pulp/pulpcore/issues/5324)
- Allow use of Django5 as well as Django4.
  [#6988](https://github.com/pulp/pulpcore/issues/6988)

#### Bugfixes {: #3.100.0-rest-api-bugfix }

- Fixed file handle leak when content app access triggers downloads due to on_demand or streamed policy.
  [#7157](https://github.com/pulp/pulpcore/issues/7157)

#### Misc {: #3.100.0-rest-api-misc }

- 

### Plugin API {: #3.100.0-plugin-api }

#### Removals {: #3.100.0-plugin-api-removal }

- Removed the fallback for unserializable task return values.
  Tasks resulting from an api action should use the corresponding serializer to produce useful output. Maintenance tasks should return nothing.
  [#6079](https://github.com/pulp/pulpcore/issues/6079)

### Pulp File {: #3.100.0-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.100.0-pulp-cert-guard }

No significant changes.

---

## 3.95.3 (2025-12-17) {: #3.95.3 }

### REST API {: #3.95.3-rest-api }

#### Bugfixes {: #3.95.3-rest-api-bugfix }

- Fixed file handle leak when content app access triggers downloads due to on_demand or streamed policy.
  [#7157](https://github.com/pulp/pulpcore/issues/7157)

### Plugin API {: #3.95.3-plugin-api }

No significant changes.

### Pulp File {: #3.95.3-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.95.3-pulp-cert-guard }

No significant changes.

---

## 3.95.2 (2025-12-11) {: #3.95.2 }

### REST API {: #3.95.2-rest-api }

No significant changes.

### Plugin API {: #3.95.2-plugin-api }

No significant changes.

### Pulp File {: #3.95.2-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.95.2-pulp-cert-guard }

No significant changes.

---

## 3.95.1 (2025-12-09) {: #3.95.1 }

### REST API {: #3.95.1-rest-api }

#### Misc {: #3.95.1-rest-api-misc }

- 

### Plugin API {: #3.95.1-plugin-api }

No significant changes.

### Pulp File {: #3.95.1-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.95.1-pulp-cert-guard }

No significant changes.

---

## 3.95.0 (2025-12-04) {: #3.95.0 }

### REST API {: #3.95.0-rest-api }

#### Features {: #3.95.0-rest-api-feature }

- Improve touch performance in highly concurrent content operations.

### Plugin API {: #3.95.0-plugin-api }

No significant changes.

### Pulp File {: #3.95.0-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.95.0-pulp-cert-guard }

No significant changes.

---

## 3.94.0 (2025-11-25) {: #3.94.0 }

### REST API {: #3.94.0-rest-api }

#### Features {: #3.94.0-rest-api-feature }

- Added synchronous upload API for Files.
  [#6898](https://github.com/pulp/pulpcore/issues/6898)

#### Bugfixes {: #3.94.0-rest-api-bugfix }

- Improve handling of some edge cases in task diagnostics code.
  [#7020](https://github.com/pulp/pulpcore/issues/7020)
- Restrict batch processing `minsize` to the settings value defined for `MAX_CONCURRENT_CONTENT`. Smaller values will increase sync times but reduce the amount of outstanding content in the pipeline, which reduces peak resource consumption (memory, temporary disk requirements).
  [#7064](https://github.com/pulp/pulpcore/issues/7064)
- Fixed incorrect filtering of vulnerability reports when querying a specific repository version.
  [#7091](https://github.com/pulp/pulpcore/issues/7091)
- Allow to specify a template for the status names of the processes using '--name-template` to overcome conflicts in certain containerized environments.

### Plugin API {: #3.94.0-plugin-api }

#### Bugfixes {: #3.94.0-plugin-api-bugfix }

- Fixed NoArtifactContentUploadViewSet/Serializer breaking when using the `artifact`, `upload` or `file_url` fields.
- Fixed `resolved_prn` failing when the object's pk wasn't an UUID.

### Pulp File {: #3.94.0-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.94.0-pulp-cert-guard }

No significant changes.

---

## 3.93.4 (2026-02-10) {: #3.93.4 }

### REST API {: #3.93.4-rest-api }

No significant changes.

### Plugin API {: #3.93.4-plugin-api }

No significant changes.

### Pulp File {: #3.93.4-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.93.4-pulp-cert-guard }

No significant changes.

---

## 3.93.3 (2025-11-25) {: #3.93.3 }

### REST API {: #3.93.3-rest-api }

#### Bugfixes {: #3.93.3-rest-api-bugfix }

- Restrict batch processing `minsize` to the settings value defined for `MAX_CONCURRENT_CONTENT`. Smaller values will increase sync times but reduce the amount of outstanding content in the pipeline, which reduces peak resource consumption (memory, temporary disk requirements).
  [#7064](https://github.com/pulp/pulpcore/issues/7064)

### Plugin API {: #3.93.3-plugin-api }

No significant changes.

### Pulp File {: #3.93.3-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.93.3-pulp-cert-guard }

No significant changes.

---

## 3.93.2 (2025-11-18) {: #3.93.2 }

### REST API {: #3.93.2-rest-api }

#### Bugfixes {: #3.93.2-rest-api-bugfix }

- Fixed incorrect filtering of vulnerability reports when querying a specific repository version.
  [#7091](https://github.com/pulp/pulpcore/issues/7091)

### Plugin API {: #3.93.2-plugin-api }

No significant changes.

### Pulp File {: #3.93.2-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.93.2-pulp-cert-guard }

No significant changes.

---

## 3.93.1 (2025-11-13) {: #3.93.1 }

### REST API {: #3.93.1-rest-api }

#### Bugfixes {: #3.93.1-rest-api-bugfix }

- Improve handling of some edge cases in task diagnostics code.
  [#7020](https://github.com/pulp/pulpcore/issues/7020)
- Allow to specify a template for the status names of the processes using '--name-template` to overcome conflicts in certain containerized environments.

### Plugin API {: #3.93.1-plugin-api }

#### Bugfixes {: #3.93.1-plugin-api-bugfix }

- Fixed NoArtifactContentUploadViewSet/Serializer breaking when using the `artifact`, `upload` or `file_url` fields.
- Fixed `resolved_prn` failing when the object's pk wasn't an UUID.

### Pulp File {: #3.93.1-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.93.1-pulp-cert-guard }

No significant changes.

---

## 3.93.0 (2025-11-05) {: #3.93.0 }

### REST API {: #3.93.0-rest-api }

#### Features {: #3.93.0-rest-api-feature }

- Updated API to allow adding custom metadata to exports
  [#6712](https://github.com/pulp/pulpcore/issues/6712)

#### Bugfixes {: #3.93.0-rest-api-bugfix }

- Fixed an issue with dispatching repository.add_and_remove tasks for pull-through caching

### Plugin API {: #3.93.0-plugin-api }

No significant changes.

### Pulp File {: #3.93.0-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.93.0-pulp-cert-guard }

No significant changes.

---

## 3.92.1 (2025-10-29) {: #3.92.1 }

### REST API {: #3.92.1-rest-api }

#### Bugfixes {: #3.92.1-rest-api-bugfix }

- Fixed an issue with dispatching repository.add_and_remove tasks for pull-through caching

### Plugin API {: #3.92.1-plugin-api }

No significant changes.

### Pulp File {: #3.92.1-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.92.1-pulp-cert-guard }

No significant changes.

---

## 3.92.0 (2025-10-28) {: #3.92.0 }

### REST API {: #3.92.0-rest-api }

#### Features {: #3.92.0-rest-api-feature }

- Add MAX_CONCURRENT_CONTENT as a global setting.
  During sync, this setting will be used to determine the size of batch of
  content being processed in one go. Default value is 200.
  [#7024](https://github.com/pulp/pulpcore/issues/7024)

#### Bugfixes {: #3.92.0-rest-api-bugfix }

- Modified the error response ("AttributeError: This QueryDict instance is immutable") raised when a
  file didn't upload properly or was incomplete.
  [#6993](https://github.com/pulp/pulpcore/issues/6993)
- Fixed immediate tasks from the content app getting stuck in waiting.

### Plugin API {: #3.92.0-plugin-api }

No significant changes.

### Pulp File {: #3.92.0-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.92.0-pulp-cert-guard }

No significant changes.

---

## 3.91.1 (2025-10-07) {: #3.91.1 }

### REST API {: #3.91.1-rest-api }

#### Bugfixes {: #3.91.1-rest-api-bugfix }

- Modified the error response ("AttributeError: This QueryDict instance is immutable") raised when a
  file didn't upload properly or was incomplete.
  [#6993](https://github.com/pulp/pulpcore/issues/6993)

### Plugin API {: #3.91.1-plugin-api }

No significant changes.

### Pulp File {: #3.91.1-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.91.1-pulp-cert-guard }

No significant changes.

---

## 3.91.0 (2025-10-01) {: #3.91.0 }

### REST API {: #3.91.0-rest-api }

#### Features {: #3.91.0-rest-api-feature }

- Changed orphan cleanup to run as a scheduled task.
- Removed the use of session scoped advisory locks from workers janitorial work.

#### Bugfixes {: #3.91.0-rest-api-bugfix }

- Fix situations with a single worker per installation failing to unblock all tasks that come in quick succession.
  [#6873](https://github.com/pulp/pulpcore/issues/6873)
- Fixed exception propagation in the pulp-content instrumentation middleware.
  [#6925](https://github.com/pulp/pulpcore/issues/6925)

### Plugin API {: #3.91.0-plugin-api }

No significant changes.

### Pulp File {: #3.91.0-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.91.0-pulp-cert-guard }

No significant changes.

---

## 3.90.1 (2025-10-01) {: #3.90.1 }

### REST API {: #3.90.1-rest-api }

#### Bugfixes {: #3.90.1-rest-api-bugfix }

- Fix situations with a single worker per installation failing to unblock all tasks that come in quick succession.
  [#6873](https://github.com/pulp/pulpcore/issues/6873)
- Fixed exception propagation in the pulp-content instrumentation middleware.
  [#6925](https://github.com/pulp/pulpcore/issues/6925)

### Plugin API {: #3.90.1-plugin-api }

No significant changes.

### Pulp File {: #3.90.1-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.90.1-pulp-cert-guard }

No significant changes.

---

## 3.90.0 (2025-09-23) {: #3.90.0 }

### REST API {: #3.90.0-rest-api }

#### Features {: #3.90.0-rest-api-feature }

- Modified the API so that updates do not dispatch a task if no change is needed.
  Update responses can now respond with either 200 for an immediate result, or issue 202 for a dispatched task.
  [#6896](https://github.com/pulp/pulpcore/issues/6896),
  [#6897](https://github.com/pulp/pulpcore/issues/6897)
- Taught pulp-import-export to work in a domain-enabled environment.

  All combinations of domain-state between upstream and downstream are handled.
  [#6926](https://github.com/pulp/pulpcore/issues/6926)
- Cleanup missing worker processes records faster.

#### Bugfixes {: #3.90.0-rest-api-bugfix }

- Fixed generation of signed URLs when using GCS as the storage backend.
  [#6917](https://github.com/pulp/pulpcore/issues/6917)

#### Misc {: #3.90.0-rest-api-misc }

-

### Plugin API {: #3.90.0-plugin-api }

No significant changes.

### Pulp File {: #3.90.0-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.90.0-pulp-cert-guard }

No significant changes.

---

## 3.89.2 (2025-10-08) {: #3.89.2 }

### REST API {: #3.89.2-rest-api }

#### Bugfixes {: #3.89.2-rest-api-bugfix }

- Stop using the worker field on the task model in order to allow zero downtime upgrades.
  [#6991](https://github.com/pulp/pulpcore/issues/6991)

### Plugin API {: #3.89.2-plugin-api }

No significant changes.

### Pulp File {: #3.89.2-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.89.2-pulp-cert-guard }

No significant changes.

---

## 3.89.1 (2025-09-18) {: #3.89.1 }

### REST API {: #3.89.1-rest-api }

#### Bugfixes {: #3.89.1-rest-api-bugfix }

- Fixed generation of signed URLs when using GCS as the storage backend.
  [#6917](https://github.com/pulp/pulpcore/issues/6917)

### Plugin API {: #3.89.1-plugin-api }

No significant changes.

### Pulp File {: #3.89.1-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.89.1-pulp-cert-guard }

No significant changes.

---

## 3.89.0 (2025-09-09) {: #3.89.0 }

### REST API {: #3.89.0-rest-api }

#### Features {: #3.89.0-rest-api-feature }

- Stop using advisory locks in favor of a database column for locking on tasks.

### Plugin API {: #3.89.0-plugin-api }

No significant changes.

### Pulp File {: #3.89.0-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.89.0-pulp-cert-guard }

No significant changes.

---

## 3.88.0 (2025-09-03) {: #3.88.0 }

### REST API {: #3.88.0-rest-api }

#### Features {: #3.88.0-rest-api-feature }

- Added a `result` JSONField to the `Task` model to store the task's return value.
  [#6901](https://github.com/pulp/pulpcore/issues/6901)

#### Bugfixes {: #3.88.0-rest-api-bugfix }

- Fixed error case where worker tried to aquire the app lock for a Task that was already finished.
  [#6899](https://github.com/pulp/pulpcore/issues/6899)

### Plugin API {: #3.88.0-plugin-api }

#### Deprecations {: #3.88.0-plugin-api-deprecation }

- Deprecated returning non-JSON-serializable values from tasks.
  Such values will be replaced with `None`, and this workaround will be removed in version 3.100.
  [#6901](https://github.com/pulp/pulpcore/issues/6901)

### Pulp File {: #3.88.0-pulp-file }

#### Features {: #3.88.0-pulp-file-feature }

- Updated tasks to always return JSON-serializable value.
  [#6901](https://github.com/pulp/pulpcore/issues/6901)

### Pulp Cert Guard {: #3.88.0-pulp-cert-guard }

No significant changes.

---

## 3.87.1 (2025-09-03) {: #3.87.1 }

### REST API {: #3.87.1-rest-api }

#### Bugfixes {: #3.87.1-rest-api-bugfix }

- Fixed error case where worker tried to aquire the app lock for a Task that was already finished.
  [#6899](https://github.com/pulp/pulpcore/issues/6899)

### Plugin API {: #3.87.1-plugin-api }

No significant changes.

### Pulp File {: #3.87.1-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.87.1-pulp-cert-guard }

No significant changes.

---

## 3.87.0 (2025-08-29) {: #3.87.0 }

### REST API {: #3.87.0-rest-api }

#### Bugfixes {: #3.87.0-rest-api-bugfix }

- Fixed apps crashing in a loop on restart with the same name.
  [#6880](https://github.com/pulp/pulpcore/issues/6880)

### Plugin API {: #3.87.0-plugin-api }

No significant changes.

### Pulp File {: #3.87.0-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.87.0-pulp-cert-guard }

No significant changes.

---

## 3.86.0 (2025-08-21) {: #3.86.0 }

### REST API {: #3.86.0-rest-api }

#### Features {: #3.86.0-rest-api-feature }

- Added a configurable bucket boundary for API request duration metric using the `OTEL_PULP_API_HISTOGRAM_BUCKETS` setting.
  [#6845](https://github.com/pulp/pulpcore/issues/6845)

#### Bugfixes {: #3.86.0-rest-api-bugfix }

- Made DjangoMetricsMiddleware aware of OTEL urls exclusion envvars.
  [#6843](https://github.com/pulp/pulpcore/issues/6843)
- Fixed repository version validation to allow legitimate shared artifacts between content units.
  [#6868](https://github.com/pulp/pulpcore/issues/6868)
- Fixed a bug that prevents migrations from running.

#### Improved Documentation {: #3.86.0-rest-api-doc }

- Updated documentation for the `TASK_DIAGNOSTICS` setting.
  [#6854](https://github.com/pulp/pulpcore/issues/6854)

### Plugin API {: #3.86.0-plugin-api }

#### Removals {: #3.86.0-plugin-api-removal }

- Removed support for synchronous immediate tasks.

### Pulp File {: #3.86.0-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.86.0-pulp-cert-guard }

No significant changes.

---

## 3.85.17 (2026-04-21) {: #3.85.17 }

### REST API {: #3.85.17-rest-api }

#### Bugfixes {: #3.85.17-rest-api-bugfix }

- Added new setting `TASK_PREFER_DEFER` to always defer immediate tasks to a task worker. Useful for systems with slow databases that frequently timeout immediate tasks.

### Plugin API {: #3.85.17-plugin-api }

No significant changes.

### Pulp File {: #3.85.17-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.85.17-pulp-cert-guard }

No significant changes.

---

## 3.85.16 (2026-04-14) {: #3.85.16 }

### REST API {: #3.85.16-rest-api }

#### Bugfixes {: #3.85.16-rest-api-bugfix }

- Fixed `reset-admin-password` command failing when using `--random` option on Django 5.
  [#7533](https://github.com/pulp/pulpcore/issues/7533)

### Plugin API {: #3.85.16-plugin-api }

No significant changes.

### Pulp File {: #3.85.16-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.85.16-pulp-cert-guard }

No significant changes.

---

## 3.85.15 (2026-03-24) {: #3.85.15 }

### REST API {: #3.85.15-rest-api }

#### Bugfixes {: #3.85.15-rest-api-bugfix }

- Fixed a bug when syncing a custom repository using the upstream username only (no password)
  did not send any authentication since both were required by the download factory.
  [#7425](https://github.com/pulp/pulpcore/issues/7425)
- Added a management command (`pulpcore-manager datarepair 7465`) to populate the content_ids cache for all repository versions.
  [#7465](https://github.com/pulp/pulpcore/issues/7465)

### Plugin API {: #3.85.15-plugin-api }

#### Bugfixes {: #3.85.15-plugin-api-bugfix }

- Properly support DRF responses in Synchronous Content Cache.

### Pulp File {: #3.85.15-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.85.15-pulp-cert-guard }

No significant changes.

---

## 3.85.14 (2026-03-17) {: #3.85.14 }

### REST API {: #3.85.14-rest-api }

#### Bugfixes {: #3.85.14-rest-api-bugfix }

- Fixed duplicate chunk uploads corrupting the entire upload
  [#6381](https://github.com/pulp/pulpcore/issues/6381)
- Clean up on-demand temporary file left over on an aborted download.
  [#6975](https://github.com/pulp/pulpcore/issues/6975)
- Fix remove-signing-service handling, can now remove service without --class argument.
  [#7318](https://github.com/pulp/pulpcore/issues/7318)
- Fixed metadata artifacts being re-uploaded to storage when creating a publication for an already-published repository version.
  [#7344](https://github.com/pulp/pulpcore/issues/7344)

### Plugin API {: #3.85.14-plugin-api }

No significant changes.

### Pulp File {: #3.85.14-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.85.14-pulp-cert-guard }

No significant changes.

---

## 3.85.13 (2026-03-10) {: #3.85.13 }

### REST API {: #3.85.13-rest-api }

#### Bugfixes {: #3.85.13-rest-api-bugfix }

- Fixed a typo in `GroupRoleSerializer` that caused a 500 error when listing group roles with a domain set.
  [#7095](https://github.com/pulp/pulpcore/issues/7095)
- Moved artifact checksum validation from module-level settings code to a Django system check.
  [#7380](https://github.com/pulp/pulpcore/issues/7380)
- Fixed the url of the generated openapi schemas when using `pulpcore-manager openapi`.

### Plugin API {: #3.85.13-plugin-api }

No significant changes.

### Pulp File {: #3.85.13-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.85.13-pulp-cert-guard }

No significant changes.

---

## 3.85.12 (2026-02-25) {: #3.85.12 }

### REST API {: #3.85.12-rest-api }

No significant changes.

### Plugin API {: #3.85.12-plugin-api }

No significant changes.

### Pulp File {: #3.85.12-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.85.12-pulp-cert-guard }

No significant changes.

---

## 3.85.11 (2026-02-24) {: #3.85.11 }

### REST API {: #3.85.11-rest-api }

#### Bugfixes {: #3.85.11-rest-api-bugfix }

- Added a new "datarepair" management command for data cleanups which are for whatever reason not possible to run in a migration. Added support for cleaning up after issue #7272.
  [#7272](https://github.com/pulp/pulpcore/issues/7272)

### Plugin API {: #3.85.11-plugin-api }

No significant changes.

### Pulp File {: #3.85.11-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.85.11-pulp-cert-guard }

No significant changes.

---

## 3.85.10 (2026-02-10) {: #3.85.10 }

### REST API {: #3.85.10-rest-api }

#### Features {: #3.85.10-rest-api-feature }

- Adapted PulpImport/Export to allow update django-import-export==4.x.
  [#5324](https://github.com/pulp/pulpcore/issues/5324)
- Allow use of Django 5 as well as Django 4. Note the following breaking changes if upgrading to
  Django 5: storage configuration must use the new ``STORAGES`` format instead of
  ``DEFAULT_FILE_STORAGE``, Python >= 3.10 is required, and PostgreSQL >= 14 is required.
  [#6988](https://github.com/pulp/pulpcore/issues/6988)

#### Bugfixes {: #3.85.10-rest-api-bugfix }

- Fixed PRNField slowing down the generic list endpoints with extra database queries.

### Plugin API {: #3.85.10-plugin-api }

#### Bugfixes {: #3.85.10-plugin-api-bugfix }

- Exposed `PulpLabelsField` and `pulp_labels_validator` to the plugin API.

### Pulp File {: #3.85.10-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.85.10-pulp-cert-guard }

No significant changes.

---

## 3.85.9 (2026-01-27) {: #3.85.9 }

### REST API {: #3.85.9-rest-api }

#### Bugfixes {: #3.85.9-rest-api-bugfix }

- Fixed not supporting the new rename of the S3 storage backend.
  [#7228](https://github.com/pulp/pulpcore/issues/7228)

### Plugin API {: #3.85.9-plugin-api }

No significant changes.

### Pulp File {: #3.85.9-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.85.9-pulp-cert-guard }

No significant changes.

---

## 3.85.8 (2026-01-14) {: #3.85.8 }

### REST API {: #3.85.8-rest-api }

No significant changes.

### Plugin API {: #3.85.8-plugin-api }

No significant changes.

### Pulp File {: #3.85.8-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.85.8-pulp-cert-guard }

No significant changes.

---

## 3.85.7 (2025-12-22) {: #3.85.7 }

### REST API {: #3.85.7-rest-api }

No significant changes.

### Plugin API {: #3.85.7-plugin-api }

#### Bugfixes {: #3.85.7-plugin-api-bugfix }

- Exposed `RepositoryVersionSerializer` to the plugin API.
  In some cases a plugin might have used that serializer for a newer pulpcore version
  but it could also be installed with a lower pulpcore version.

### Pulp File {: #3.85.7-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.85.7-pulp-cert-guard }

No significant changes.

---

## 3.85.6 (2025-12-17) {: #3.85.6 }

### REST API {: #3.85.6-rest-api }

#### Bugfixes {: #3.85.6-rest-api-bugfix }

- Fixed file handle leak when content app access triggers downloads due to on_demand or streamed policy.
  [#7157](https://github.com/pulp/pulpcore/issues/7157)

### Plugin API {: #3.85.6-plugin-api }

No significant changes.

### Pulp File {: #3.85.6-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.85.6-pulp-cert-guard }

No significant changes.

---

## 3.85.5 (2025-12-11) {: #3.85.5 }

### REST API {: #3.85.5-rest-api }

No significant changes.

### Plugin API {: #3.85.5-plugin-api }

No significant changes.

### Pulp File {: #3.85.5-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.85.5-pulp-cert-guard }

No significant changes.

---

## 3.85.4 (2025-12-09) {: #3.85.4 }

### REST API {: #3.85.4-rest-api }

#### Misc {: #3.85.4-rest-api-misc }

- 

### Plugin API {: #3.85.4-plugin-api }

No significant changes.

### Pulp File {: #3.85.4-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.85.4-pulp-cert-guard }

No significant changes.

---

## 3.85.3 (2025-11-18) {: #3.85.3 }

### REST API {: #3.85.3-rest-api }

#### Bugfixes {: #3.85.3-rest-api-bugfix }

- Fixed incorrect filtering of vulnerability reports when querying a specific repository version.
  [#7091](https://github.com/pulp/pulpcore/issues/7091)

### Plugin API {: #3.85.3-plugin-api }

No significant changes.

### Pulp File {: #3.85.3-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.85.3-pulp-cert-guard }

No significant changes.

---

## 3.85.2 (2025-11-13) {: #3.85.2 }

### REST API {: #3.85.2-rest-api }

#### Bugfixes {: #3.85.2-rest-api-bugfix }

- Fixed exception propagation in the pulp-content instrumentation middleware.
  [#6925](https://github.com/pulp/pulpcore/issues/6925)
- Improve handling of some edge cases in task diagnostics code.
  [#7020](https://github.com/pulp/pulpcore/issues/7020)
- Allow to specify a template for the status names of the processes using '--name-template` to overcome conflicts in certain containerized environments.

### Plugin API {: #3.85.2-plugin-api }

#### Bugfixes {: #3.85.2-plugin-api-bugfix }

- Fixed NoArtifactContentUploadViewSet/Serializer breaking when using the `artifact`, `upload` or `file_url` fields.
- Fixed `resolved_prn` failing when the object's pk wasn't an UUID.

#### Removals {: #3.85.2-plugin-api-removal }

- Removed support for synchronous immediate tasks.

### Pulp File {: #3.85.2-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.85.2-pulp-cert-guard }

No significant changes.

---

## 3.85.1 (2025-08-12) {: #3.85.1 }

### REST API {: #3.85.1-rest-api }

#### Bugfixes {: #3.85.1-rest-api-bugfix }

- Fixed a bug that prevents migrations from running.

### Plugin API {: #3.85.1-plugin-api }

No significant changes.

### Pulp File {: #3.85.1-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.85.1-pulp-cert-guard }

No significant changes.

---

## 3.85.0 (2025-08-12) {: #3.85.0 }

### REST API {: #3.85.0-rest-api }

#### Features {: #3.85.0-rest-api-feature }

- Added the ability to configure the openapi schema for remote user authentication via `REMOTE_USER_OPENAPI_SECURITY_SCHEME`.
  Its type defaults to "mutualTLS" for cert based authentication.
  [#5437](https://github.com/pulp/pulpcore/issues/5437)
- Added the vulnerability report data model.
  [#6773](https://github.com/pulp/pulpcore/issues/6773)
- Added a new table to track all app status in a common place.

#### Bugfixes {: #3.85.0-rest-api-bugfix }

- Made a failure to update the heartbeat catastrophic, so we can actually rely on workers that claim to be "online".
  [#heartbeat](https://github.com/pulp/pulpcore/issues/heartbeat)
- Redirect checkpoint URLs without a trailing slash to add the slash.
  [#6812](https://github.com/pulp/pulpcore/issues/6812)
- Fixed worker emitting logs with wrong task's domain names.
  [#6818](https://github.com/pulp/pulpcore/issues/6818)

#### Removals {: #3.85.0-rest-api-removal }

- Bumped the minimum required python version to 3.11.
  [#6262](https://github.com/pulp/pulpcore/issues/6262)
- Removed support for `DEFAULT_FILE_STORAGE` and it's corresponding storage options.
  [Use STORAGES instead:](https://pulpproject.org/pulpcore/docs/admin/reference/settings/#storages)
  [#6807](https://github.com/pulp/pulpcore/issues/6807)
- Switch OpenAPI specification to use version 3.1.

### Plugin API {: #3.85.0-plugin-api }

#### Removals {: #3.85.0-plugin-api-removal }

- Purged migrations that were squashed before.
  Plugins need to rebase their migrations onto "core:0091_systemid".
  Removed `BaseDistribution`.

### Pulp File {: #3.85.0-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.85.0-pulp-cert-guard }

#### Features {: #3.85.0-pulp-cert-guard-feature }

- Replaced unmaintained rhsm `check_path` with local replacement. Dropped the optional dependency on `python-rhsm`.
  [#6195](https://github.com/pulp/pulpcore/issues/6195)

---

## 3.84.0 (2025-07-30) {: #3.84.0 }

### REST API {: #3.84.0-rest-api }

#### Features {: #3.84.0-rest-api-feature }

- Added the `--auxiliary` flag to the workers entrypoint to allow adding workers to an installation that will only handle unblocked tasks.
- Moved timestamping of new tasks from application code into the database.

#### Bugfixes {: #3.84.0-rest-api-bugfix }

- Fixed the new content set optimization failing when the RepositoryVersion grew larger than 65K content units.
  [#6772](https://github.com/pulp/pulpcore/issues/6772)
- Add some randomness to the task pickup code to relieve some pressure from the queue.
  [#6799](https://github.com/pulp/pulpcore/issues/6799)
- When running as a recurring scheduled task, purge will now clean stale task records accross all domains.
  [#6815](https://github.com/pulp/pulpcore/issues/6815)
- Added some Postgresql transactions in places where they are appropriate.

### Plugin API {: #3.84.0-plugin-api }

No significant changes.

### Pulp File {: #3.84.0-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.84.0-pulp-cert-guard }

No significant changes.

---

## 3.83.2 (2025-07-17) {: #3.83.2 }

### REST API {: #3.83.2-rest-api }

#### Bugfixes {: #3.83.2-rest-api-bugfix }

- Added some Postgresql transactions in places where they are appropriate.

### Plugin API {: #3.83.2-plugin-api }

No significant changes.

### Pulp File {: #3.83.2-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.83.2-pulp-cert-guard }

No significant changes.

---

## 3.83.1 (2025-07-15) {: #3.83.1 }

### REST API {: #3.83.1-rest-api }

#### Bugfixes {: #3.83.1-rest-api-bugfix }

- Fixed the new content set optimization failing when the RepositoryVersion grew larger than 65K content units.
  [#6772](https://github.com/pulp/pulpcore/issues/6772)

### Plugin API {: #3.83.1-plugin-api }

No significant changes.

### Pulp File {: #3.83.1-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.83.1-pulp-cert-guard }

No significant changes.

---

## 3.83.0 (2025-07-10) {: #3.83.0 }

### REST API {: #3.83.0-rest-api }

#### Features {: #3.83.0-rest-api-feature }

- Improved RepositoryVersion content set calculation speed.
  [#5783](https://github.com/pulp/pulpcore/issues/5783)

### Plugin API {: #3.83.0-plugin-api }

No significant changes.

### Pulp File {: #3.83.0-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.83.0-pulp-cert-guard }

No significant changes.

---

## 3.82.1 (2025-07-04) {: #3.82.1 }

### REST API {: #3.82.1-rest-api }

No significant changes.

### Plugin API {: #3.82.1-plugin-api }

No significant changes.

### Pulp File {: #3.82.1-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.82.1-pulp-cert-guard }

No significant changes.

---

## 3.82.0 (2025-07-02) {: #3.82.0 }

### REST API {: #3.82.0-rest-api }

#### Features {: #3.82.0-rest-api-feature }

- Added support for profiling individual tasks with X-TASK-DIAGNOSTICS header.
  The TASK_DIAGNOSTICS setting now determines which profilers are available to users of the REST API.
  [#6725](https://github.com/pulp/pulpcore/issues/6725)

#### Bugfixes {: #3.82.0-rest-api-bugfix }

- Fixed S3 Storage configuration.
  [#6630](https://github.com/pulp/pulpcore/issues/6630)
- Fixed HEAD requests to large on-demand files (>1MB) leaving behind temporary files.
  [#6647](https://github.com/pulp/pulpcore/issues/6647)

#### Improved Documentation {: #3.82.0-rest-api-doc }

- Updated "Protect Content" documentation regarding the `--guard` command-line option.
  [#6731](https://github.com/pulp/pulpcore/issues/6731)

### Plugin API {: #3.82.0-plugin-api }

No significant changes.

### Pulp File {: #3.82.0-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.82.0-pulp-cert-guard }

No significant changes.

---

## 3.81.0 (2025-06-24) {: #3.81.0 }

### REST API {: #3.81.0-rest-api }

#### Features {: #3.81.0-rest-api-feature }

- Checksum calculation of files being uploaded or downloaded to Pulp is now multithreaded.

#### Bugfixes {: #3.81.0-rest-api-bugfix }

- Changed default http bind address from `[::]` to `0.0.0.0` if IPv6 is not available.
  [#6606](https://github.com/pulp/pulpcore/issues/6606)
- Raised the minimum version of gunicorn to 22.0.
  [#6640](https://github.com/pulp/pulpcore/issues/6640)

### Plugin API {: #3.81.0-plugin-api }

#### Bugfixes {: #3.81.0-plugin-api-bugfix }

- Fixed the `pulp_labels` field on the NoArtifactContentSerializer to work inside ViewSets for multipart/form uploads.
  [#6713](https://github.com/pulp/pulpcore/issues/6713)

### Pulp File {: #3.81.0-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.81.0-pulp-cert-guard }

No significant changes.

---

## 3.80.2 (2025-06-24) {: #3.80.2 }

### REST API {: #3.80.2-rest-api }

No significant changes.

### Plugin API {: #3.80.2-plugin-api }

No significant changes.

### Pulp File {: #3.80.2-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.80.2-pulp-cert-guard }

No significant changes.

---

## 3.80.1 (2025-06-12) {: #3.80.1 }

### REST API {: #3.80.1-rest-api }

No significant changes.

### Plugin API {: #3.80.1-plugin-api }

No significant changes.

### Pulp File {: #3.80.1-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.80.1-pulp-cert-guard }

No significant changes.

---

## 3.80.0 (2025-05-27) {: #3.80.0 }

### REST API {: #3.80.0-rest-api }

#### Bugfixes {: #3.80.0-rest-api-bugfix }

- Prevent downloader session to be closed when there is a digest validation in on_demand content serving.

#### Improved Documentation {: #3.80.0-rest-api-doc }

- Adds docs on the Alternate Content Sources feature set.
  [#6609](https://github.com/pulp/pulpcore/issues/6609)

### Plugin API {: #3.80.0-plugin-api }

#### Deprecations {: #3.80.0-plugin-api-deprecation }

- Deprecated `TaskGroup.finish()` for removal with Pulp 4.
  [#task_group_finish](https://github.com/pulp/pulpcore/issues/task_group_finish)

### Pulp File {: #3.80.0-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.80.0-pulp-cert-guard }

No significant changes.

---

## 3.79.1 (2025-05-27) {: #3.79.1 }

### REST API {: #3.79.1-rest-api }

No significant changes.

### Plugin API {: #3.79.1-plugin-api }

No significant changes.

### Pulp File {: #3.79.1-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.79.1-pulp-cert-guard }

No significant changes.

---

## 3.79.0 (2025-05-20) {: #3.79.0 }

### REST API {: #3.79.0-rest-api }

#### Features {: #3.79.0-rest-api-feature }

- Added the `execution_time` as microseconds and other task related information on the finished task log entry.
  [#6569](https://github.com/pulp/pulpcore/issues/6569)

### Plugin API {: #3.79.0-plugin-api }

No significant changes.

### Pulp File {: #3.79.0-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.79.0-pulp-cert-guard }

No significant changes.

---

## 3.78.0 (2025-05-13) {: #3.78.0 }

### REST API {: #3.78.0-rest-api }

#### Features {: #3.78.0-rest-api-feature }

- Added the optional feature to enable uvloop library as a replacement of asyncio eventloop.
  The feature is activated through the UVLOOP_ENABLED feature flag settings and the 'uvloop' optional dependency.
  [#6021](https://github.com/pulp/pulpcore/issues/6021)

#### Bugfixes {: #3.78.0-rest-api-bugfix }

- Taught tasks to update the state of associated progress-reports when canceled/failed.

  Added a management-task, `clean-up-progress-reports`, to clean up existing reports.
  [#3609](https://github.com/pulp/pulpcore/issues/3609)
- Fixed a server error when listing user roles.
  [#6330](https://github.com/pulp/pulpcore/issues/6330)
- On-demand or pull-through content is now immediately cached upon first request.
  [#6540](https://github.com/pulp/pulpcore/issues/6540)

#### Misc {: #3.78.0-rest-api-misc }

-

### Plugin API {: #3.78.0-plugin-api }

No significant changes.

### Pulp File {: #3.78.0-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.78.0-pulp-cert-guard }

No significant changes.

---

## 3.77.1 (2025-05-08) {: #3.77.1 }

### REST API {: #3.77.1-rest-api }

#### Bugfixes {: #3.77.1-rest-api-bugfix }

- On-demand or pull-through content is now immediately cached upon first request.
  [#6540](https://github.com/pulp/pulpcore/issues/6540)

### Plugin API {: #3.77.1-plugin-api }

No significant changes.

### Pulp File {: #3.77.1-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.77.1-pulp-cert-guard }

No significant changes.

---

## 3.77.0 (2025-05-06) {: #3.77.0 }

### REST API {: #3.77.0-rest-api }

#### Features {: #3.77.0-rest-api-feature }

- The `TASK_DIAGNOSTICS` option now permits individual diagnostics to be enabled or disabled by listing them.
  [#4548](https://github.com/pulp/pulpcore/issues/4548)
- If enabled using `TASK_DIAGNOSTICS` and the appropriate package is installed, tasks can now output a profile of what functions / lines allocated the most memory at the time of peak RSS.

#### Bugfixes {: #3.77.0-rest-api-bugfix }

- Fixed a memory consumption issue that was triggered by the use of the Alternate Content Source feature.
  [#6500](https://github.com/pulp/pulpcore/issues/6500)
- Fixed incorrect use of f-strings in gettext.
  [#6521](https://github.com/pulp/pulpcore/issues/6521)

#### Improved Documentation {: #3.77.0-rest-api-doc }

- Fixed the TASK_DIAGNOSTICS documentation, which was out of date.
  [#6481](https://github.com/pulp/pulpcore/issues/6481)

#### Misc {: #3.77.0-rest-api-misc }

-

### Plugin API {: #3.77.0-plugin-api }

#### Bugfixes {: #3.77.0-plugin-api-bugfix }

- Re-added* timeout to tasks dispatched as immediate for both deferred and non-deferred runs.

  Also, immediate tasks must be coroutines from now on.
  This is to enable immediate tasks to run on the workers foreground without completely blocking heartbeats.
  Support for legacy non-coroutines immediate task will be dropped in pulpcore 3.85.

  \* This was added in pulpcore 3.75.0, reverted in 3.75.1 due to a regression and re-applied here with the regression fix.
  [#6429](https://github.com/pulp/pulpcore/issues/6429)

### Pulp File {: #3.77.0-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.77.0-pulp-cert-guard }

No significant changes.

---

## 3.76.1 (2025-04-24) {: #3.76.1 }

### REST API {: #3.76.1-rest-api }

#### Bugfixes {: #3.76.1-rest-api-bugfix }

- Fixed a memory consumption issue that was triggered by the use of the Alternate Content Source feature.
  [#6500](https://github.com/pulp/pulpcore/issues/6500)
- Reverted fix for #6491, it broke certificate-chains.
  [#6510](https://github.com/pulp/pulpcore/issues/6510)

### Plugin API {: #3.76.1-plugin-api }

No significant changes.

### Pulp File {: #3.76.1-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.76.1-pulp-cert-guard }

No significant changes.

---

## 3.76.0 (2025-04-22) {: #3.76.0 }

### REST API {: #3.76.0-rest-api }

#### Features {: #3.76.0-rest-api-feature }

- Added the `task_name` and if it's a `task.immediate` to the `Starting task ...` log entry.
  [#6482](https://github.com/pulp/pulpcore/issues/6482)

#### Bugfixes {: #3.76.0-rest-api-bugfix }

- Added validation to `PublicationSerializer` and `DistributionSerializer` to raise an error if repo and remote differ.
  [#6174](https://github.com/pulp/pulpcore/issues/6174)
- Set the X-PULP-ARTIFACT-SIZE header at the handle_response_header function.
  [#6390](https://github.com/pulp/pulpcore/issues/6390)
- Client- and CA-certificates used in Remotes are now validated and any comments stripped
  before being applied to the Remote.
  [#6491](https://github.com/pulp/pulpcore/issues/6491)
- Fixed an oversight in the #6385 fix.

#### Improved Documentation {: #3.76.0-rest-api-doc }

- Updated the settings.md file to be sorted alphabetically.
  [#6459](https://github.com/pulp/pulpcore/issues/6459)

### Plugin API {: #3.76.0-plugin-api }

#### Bugfixes {: #3.76.0-plugin-api-bugfix }

- Fixed `add_roles_for_object_creator` not handling anonymous users.
- Reverted adding timeout to immediate tasks, for it was causing a regression
  with pull-through caching (https://github.com/pulp/pulpcore/issues/6429).

### Pulp File {: #3.76.0-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.76.0-pulp-cert-guard }

No significant changes.

---

## 3.75.3 (2025-04-22) {: #3.75.3 }

### REST API {: #3.75.3-rest-api }

No significant changes.

### Plugin API {: #3.75.3-plugin-api }

#### Bugfixes {: #3.75.3-plugin-api-bugfix }

- Fixed `add_roles_for_object_creator` not handling anonymous users.

### Pulp File {: #3.75.3-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.75.3-pulp-cert-guard }

No significant changes.

---

## 3.75.2 (2025-04-09) {: #3.75.2 }

### REST API {: #3.75.2-rest-api }

#### Bugfixes {: #3.75.2-rest-api-bugfix }

- Set the X-PULP-ARTIFACT-SIZE header at the handle_response_header function.
  [#6390](https://github.com/pulp/pulpcore/issues/6390)

### Plugin API {: #3.75.2-plugin-api }

No significant changes.

### Pulp File {: #3.75.2-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.75.2-pulp-cert-guard }

No significant changes.

---

## 3.75.1 (2025-04-08) {: #3.75.1 }

### REST API {: #3.75.1-rest-api }

#### Bugfixes {: #3.75.1-rest-api-bugfix }

- Fixed an oversight in the #6385 fix.

### Plugin API {: #3.75.1-plugin-api }

#### Bugfixes {: #3.75.1-plugin-api-bugfix }

- Reverted adding timeout to immediate tasks, for it was causing a regression
  with pull-through caching (https://github.com/pulp/pulpcore/issues/6429).

### Pulp File {: #3.75.1-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.75.1-pulp-cert-guard }

No significant changes.

---

## 3.75.0 (2025-04-02) {: #3.75.0 }

### REST API {: #3.75.0-rest-api }

#### Features {: #3.75.0-rest-api-feature }

- Added validation to the `RepositorySyncURLSerializer` to raise an error if repo and remote are from different plugins.
  [#1860](https://github.com/pulp/pulpcore/issues/1860)

#### Bugfixes {: #3.75.0-rest-api-bugfix }

- Fixes the Remote configuration of timeouts to properly fallback to aiohttp defaults if they are unset by the user.
  [#5439](https://github.com/pulp/pulpcore/issues/5439)
- Reworked the loading of plugin default settings in order to fix interference with environment injection.
  [#6341](https://github.com/pulp/pulpcore/issues/6341)
- Fixed migrations 0131 and 0132 to make it possible to upgrade from 3.73.
  [#6375](https://github.com/pulp/pulpcore/issues/6375)
- Fixed task purge in case no access policy based permission framework is configured for Pulp.
  [#6380](https://github.com/pulp/pulpcore/issues/6380)
- Fixed pull-through caching failure when content already existed on-demand.
  [#6385](https://github.com/pulp/pulpcore/issues/6385)
- Fixed cross-domain check for RepositoryVersion fields.
  [#6388](https://github.com/pulp/pulpcore/issues/6388)
- Redeclared the aiohttp dependency boundaries to follow semver as stated in their documentation.

### Plugin API {: #3.75.0-plugin-api }

#### Bugfixes {: #3.75.0-plugin-api-bugfix }

- Added timeout to tasks dispatched as immediate for both deferred and non-deferred runs.

  Also, immediate tasks must be coroutines from now on.
  This is to enable immediate tasks to run on the workers foreground without completely blocking heartbeats.
  Support for legacy non-coroutines immediate task will be dropped in pulpcore 3.85.
  [#5930](https://github.com/pulp/pulpcore/issues/5930)

### Pulp File {: #3.75.0-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.75.0-pulp-cert-guard }

No significant changes.

---

## 3.74.2 (2025-04-02) {: #3.74.2 }

### REST API {: #3.74.2-rest-api }

#### Bugfixes {: #3.74.2-rest-api-bugfix }

- Fixes the Remote configuration of timeouts to properly fallback to aiohttp defaults if they are unset by the user.
  [#5439](https://github.com/pulp/pulpcore/issues/5439)
- Fixed task purge in case no access policy based permission framework is configured for Pulp.
  [#6380](https://github.com/pulp/pulpcore/issues/6380)
- Fixed pull-through caching failure when content already existed on-demand.
  [#6385](https://github.com/pulp/pulpcore/issues/6385)
- Fixed cross-domain check for RepositoryVersion fields.
  [#6388](https://github.com/pulp/pulpcore/issues/6388)
- Redeclared the aiohttp dependency boundaries to follow semver as stated in their documentation.

### Plugin API {: #3.74.2-plugin-api }

No significant changes.

### Pulp File {: #3.74.2-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.74.2-pulp-cert-guard }

No significant changes.

---

## 3.74.1 (2025-03-20) {: #3.74.1 }

### REST API {: #3.74.1-rest-api }

#### Bugfixes {: #3.74.1-rest-api-bugfix }

- Fixed migrations 0131 and 0132 to make it possible to upgrade from 3.73.
  [#6375](https://github.com/pulp/pulpcore/issues/6375)

### Plugin API {: #3.74.1-plugin-api }

No significant changes.

### Pulp File {: #3.74.1-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.74.1-pulp-cert-guard }

No significant changes.

---

## 3.74.0 (2025-03-18) {: #3.74.0 }

### REST API {: #3.74.0-rest-api }

#### Features {: #3.74.0-rest-api-feature }

- Added validation to the `orphans/cleanup/` endpoint to restrict the `orphan_protection_time` value.
  [#3234](https://github.com/pulp/pulpcore/issues/3234)
- Added support to create and distribute checkpoint publications in Pulp.
  [#6244](https://github.com/pulp/pulpcore/issues/6244)

#### Bugfixes {: #3.74.0-rest-api-bugfix }

- Fixed cache not being invalidated when a publication was created or a repository version was deleted.
  [#6333](https://github.com/pulp/pulpcore/issues/6333)
- Reworked content-labeling RBAC to use a specific permission for set/unset labels.

  Users must be explicitly given the `core.content_labeler` role to access this
  functionality, or to upload content with labels.
  [#6337](https://github.com/pulp/pulpcore/issues/6337)
- Fixed a bug in the plugin API related to set and unset labels for ReadOnlyContentViewSet.
  [#6340](https://github.com/pulp/pulpcore/issues/6340)
- Fixed not being able to call the set/unset label endpoints for domains.
- Reverted the feature to allow describing remote authentication in the openapi specs. It depended on the also reverted switch to openapi 3.1.

### Plugin API {: #3.74.0-plugin-api }

#### Features {: #3.74.0-plugin-api-feature }

- Added ability for plugins to dispatch a task to add pull-through content to an associated repository.

  Add the class var `PULL_THROUGH_SUPPORTED = True` to the plugin's repository model to enable this
  feature. Plugins can also customize the dispatched task by supplying their own
  `pull_through_add_content` method on their repository model.
  [#6201](https://github.com/pulp/pulpcore/issues/6201)
- Added support to create and distribute checkpoint publications in Pulp.
  Plugins can choose to enable this feature by exposing the checkpoint field in their inherited PublicationSerializer and DistributionSerializer.
  Checkpoint publications and distributions can be created by passing checkpoint=True when creating them.
  [#6244](https://github.com/pulp/pulpcore/issues/6244)

### Pulp File {: #3.74.0-pulp-file }

#### Features {: #3.74.0-pulp-file-feature }

- Added support to create checkpoint file publications and distribute them through checkpoint file distributions.
  [#6244](https://github.com/pulp/pulpcore/issues/6244)

### Pulp Cert Guard {: #3.74.0-pulp-cert-guard }

No significant changes.

---

## 3.73.31 (2026-04-14) {: #3.73.31 }

### REST API {: #3.73.31-rest-api }

#### Bugfixes {: #3.73.31-rest-api-bugfix }

- Fixed `reset-admin-password` command failing when using `--random` option on Django 5.
  [#7533](https://github.com/pulp/pulpcore/issues/7533)

### Plugin API {: #3.73.31-plugin-api }

No significant changes.

### Pulp File {: #3.73.31-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.73.31-pulp-cert-guard }

No significant changes.

---

## 3.73.30 (2026-03-24) {: #3.73.30 }

### REST API {: #3.73.30-rest-api }

#### Bugfixes {: #3.73.30-rest-api-bugfix }

- Fixed a bug when syncing a custom repository using the upstream username only (no password)
  did not send any authentication since both were required by the download factory.
  [#7425](https://github.com/pulp/pulpcore/issues/7425)

### Plugin API {: #3.73.30-plugin-api }

#### Bugfixes {: #3.73.30-plugin-api-bugfix }

- Properly support DRF responses in Synchronous Content Cache.

### Pulp File {: #3.73.30-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.73.30-pulp-cert-guard }

No significant changes.

---

## 3.73.29 (2026-03-17) {: #3.73.29 }

### REST API {: #3.73.29-rest-api }

#### Bugfixes {: #3.73.29-rest-api-bugfix }

- Fixed duplicate chunk uploads corrupting the entire upload
  [#6381](https://github.com/pulp/pulpcore/issues/6381)
- Clean up on-demand temporary file left over on an aborted download.
  [#6975](https://github.com/pulp/pulpcore/issues/6975)
- Fix remove-signing-service handling, can now remove service without --class argument.
  [#7318](https://github.com/pulp/pulpcore/issues/7318)
- Fixed metadata artifacts being re-uploaded to storage when creating a publication for an already-published repository version.
  [#7344](https://github.com/pulp/pulpcore/issues/7344)

### Plugin API {: #3.73.29-plugin-api }

No significant changes.

### Pulp File {: #3.73.29-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.73.29-pulp-cert-guard }

No significant changes.

---

## 3.73.28 (2026-03-10) {: #3.73.28 }

### REST API {: #3.73.28-rest-api }

#### Bugfixes {: #3.73.28-rest-api-bugfix }

- Fixed a typo in `GroupRoleSerializer` that caused a 500 error when listing group roles with a domain set.
  [#7095](https://github.com/pulp/pulpcore/issues/7095)
- Moved artifact checksum validation from module-level settings code to a Django system check.
  [#7380](https://github.com/pulp/pulpcore/issues/7380)

### Plugin API {: #3.73.28-plugin-api }

No significant changes.

### Pulp File {: #3.73.28-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.73.28-pulp-cert-guard }

No significant changes.

---

## 3.73.27 (2026-02-25) {: #3.73.27 }

### REST API {: #3.73.27-rest-api }

No significant changes.

### Plugin API {: #3.73.27-plugin-api }

No significant changes.

### Pulp File {: #3.73.27-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.73.27-pulp-cert-guard }

No significant changes.

---

## 3.73.26 (2026-02-24) {: #3.73.26 }

### REST API {: #3.73.26-rest-api }

#### Bugfixes {: #3.73.26-rest-api-bugfix }

- Fixed file handle leak when content app access triggers downloads due to on_demand or streamed policy.
  [#7157](https://github.com/pulp/pulpcore/issues/7157)

### Plugin API {: #3.73.26-plugin-api }

No significant changes.

### Pulp File {: #3.73.26-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.73.26-pulp-cert-guard }

No significant changes.

---

## 3.73.25 (2026-02-10) {: #3.73.25 }

### REST API {: #3.73.25-rest-api }

#### Features {: #3.73.25-rest-api-feature }

- Adapted PulpImport/Export to allow update django-import-export==4.x.
  [#5324](https://github.com/pulp/pulpcore/issues/5324)
- Allow use of Django 5 as well as Django 4. Note the following breaking changes if upgrading to
  Django 5: storage configuration must use the new ``STORAGES`` format instead of
  ``DEFAULT_FILE_STORAGE``, Python >= 3.10 is required, and PostgreSQL >= 14 is required.
  [#6988](https://github.com/pulp/pulpcore/issues/6988)

#### Bugfixes {: #3.73.25-rest-api-bugfix }

- Fixed PRNField slowing down the generic list endpoints with extra database queries.

### Plugin API {: #3.73.25-plugin-api }

#### Bugfixes {: #3.73.25-plugin-api-bugfix }

- Exposed `PulpLabelsField` and `pulp_labels_validator` to the plugin API.

### Pulp File {: #3.73.25-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.73.25-pulp-cert-guard }

No significant changes.

---

## 3.73.24 (2026-01-27) {: #3.73.24 }

### REST API {: #3.73.24-rest-api }

#### Bugfixes {: #3.73.24-rest-api-bugfix }

- Fixed not supporting the new rename of the S3 storage backend.
  [#7228](https://github.com/pulp/pulpcore/issues/7228)

### Plugin API {: #3.73.24-plugin-api }

No significant changes.

### Pulp File {: #3.73.24-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.73.24-pulp-cert-guard }

No significant changes.

---

## 3.73.23 (2026-01-21) {: #3.73.23 }

### REST API {: #3.73.23-rest-api }

#### Bugfixes {: #3.73.23-rest-api-bugfix }

- Improve handling of some edge cases in task diagnostics code.
  [#7020](https://github.com/pulp/pulpcore/issues/7020)

### Plugin API {: #3.73.23-plugin-api }

No significant changes.

### Pulp File {: #3.73.23-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.73.23-pulp-cert-guard }

No significant changes.

---

## 3.73.22 (2026-01-14) {: #3.73.22 }

### REST API {: #3.73.22-rest-api }

No significant changes.

### Plugin API {: #3.73.22-plugin-api }

No significant changes.

### Pulp File {: #3.73.22-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.73.22-pulp-cert-guard }

No significant changes.

---

## 3.73.21 (2025-12-22) {: #3.73.21 }

### REST API {: #3.73.21-rest-api }

No significant changes.

### Plugin API {: #3.73.21-plugin-api }

#### Bugfixes {: #3.73.21-plugin-api-bugfix }

- Exposed `RepositoryVersionSerializer` to the plugin API.
  In some cases a plugin might have used that serializer for a newer pulpcore version
  but it could also be installed with a lower pulpcore version.

### Pulp File {: #3.73.21-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.73.21-pulp-cert-guard }

No significant changes.

---

## 3.73.20 (2025-12-09) {: #3.73.20 }

### REST API {: #3.73.20-rest-api }

#### Misc {: #3.73.20-rest-api-misc }

- 

### Plugin API {: #3.73.20-plugin-api }

No significant changes.

### Pulp File {: #3.73.20-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.73.20-pulp-cert-guard }

No significant changes.

---

## 3.73.19 (2025-12-04) {: #3.73.19 }

### REST API {: #3.73.19-rest-api }

#### Bugfixes {: #3.73.19-rest-api-bugfix }

- Fixed a bug in the pre-migration hook that prevented proper cleanup of all Pulp app db records (content, api, worker).

### Plugin API {: #3.73.19-plugin-api }

No significant changes.

### Pulp File {: #3.73.19-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.73.19-pulp-cert-guard }

No significant changes.

---

## 3.73.18 (2025-11-18) {: #3.73.18 }

### REST API {: #3.73.18-rest-api }

#### Bugfixes {: #3.73.18-rest-api-bugfix }

- Allow to specify a template for the status names of the processes using '--name-template` to overcome conflicts in certain containerized environments.

### Plugin API {: #3.73.18-plugin-api }

No significant changes.

### Pulp File {: #3.73.18-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.73.18-pulp-cert-guard }

No significant changes.

---

## 3.73.17 (2025-11-13) {: #3.73.17 }

### REST API {: #3.73.17-rest-api }

No significant changes.

### Plugin API {: #3.73.17-plugin-api }

#### Bugfixes {: #3.73.17-plugin-api-bugfix }

- Fixed NoArtifactContentUploadViewSet/Serializer breaking when using the `artifact`, `upload` or `file_url` fields.
- Fixed `resolved_prn` failing when the object's pk wasn't an UUID.

### Pulp File {: #3.73.17-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.73.17-pulp-cert-guard }

No significant changes.

---

## 3.73.16 (2025-10-01) {: #3.73.16 }

### REST API {: #3.73.16-rest-api }

#### Bugfixes {: #3.73.16-rest-api-bugfix }

- Fixed exception propagation in the pulp-content instrumentation middleware.
  [#6925](https://github.com/pulp/pulpcore/issues/6925)

### Plugin API {: #3.73.16-plugin-api }

No significant changes.

### Pulp File {: #3.73.16-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.73.16-pulp-cert-guard }

No significant changes.

---

## 3.73.15 (2025-09-09) {: #3.73.15 }

### REST API {: #3.73.15-rest-api }

No significant changes.

### Plugin API {: #3.73.15-plugin-api }

No significant changes.

### Pulp File {: #3.73.15-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.73.15-pulp-cert-guard }

No significant changes.

---

## 3.73.14 (2025-06-25) {: #3.73.14 }

### REST API {: #3.73.14-rest-api }

No significant changes.

### Plugin API {: #3.73.14-plugin-api }

No significant changes.

### Pulp File {: #3.73.14-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.73.14-pulp-cert-guard }

No significant changes.

---

## 3.73.13 (2025-06-24) {: #3.73.13 }

### REST API {: #3.73.13-rest-api }

#### Bugfixes {: #3.73.13-rest-api-bugfix }

- Taught tasks to update the state of associated progress-reports when canceled/failed.

  Added a management-task, `clean-up-progress-reports`, to clean up existing reports.
  [#3609](https://github.com/pulp/pulpcore/issues/3609)

### Plugin API {: #3.73.13-plugin-api }

No significant changes.

### Pulp File {: #3.73.13-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.73.13-pulp-cert-guard }

No significant changes.

---

## 3.73.12 (2025-06-11) {: #3.73.12 }

### REST API {: #3.73.12-rest-api }

No significant changes.

### Plugin API {: #3.73.12-plugin-api }

No significant changes.

### Pulp File {: #3.73.12-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.73.12-pulp-cert-guard }

No significant changes.

---

## 3.73.11 (2025-06-04) {: #3.73.11 }

### REST API {: #3.73.11-rest-api }

No significant changes.

### Plugin API {: #3.73.11-plugin-api }

No significant changes.

### Pulp File {: #3.73.11-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.73.11-pulp-cert-guard }

No significant changes.

---

## 3.73.10 (2025-05-27) {: #3.73.10 }

### REST API {: #3.73.10-rest-api }

#### Bugfixes {: #3.73.10-rest-api-bugfix }

- Prevent downloader session to be closed when there is a digest validation in on_demand content serving.

### Plugin API {: #3.73.10-plugin-api }

No significant changes.

### Pulp File {: #3.73.10-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.73.10-pulp-cert-guard }

No significant changes.

---

## 3.73.9 (2025-05-06) {: #3.73.9 }

### REST API {: #3.73.9-rest-api }

No significant changes.

### Plugin API {: #3.73.9-plugin-api }

No significant changes.

### Pulp File {: #3.73.9-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.73.9-pulp-cert-guard }

No significant changes.

---

## 3.73.8 (2025-04-24) {: #3.73.8 }

### REST API {: #3.73.8-rest-api }

#### Bugfixes {: #3.73.8-rest-api-bugfix }

- Reverted fix for #6491, it broke certificate-chains.
  [#6510](https://github.com/pulp/pulpcore/issues/6510)

### Plugin API {: #3.73.8-plugin-api }

No significant changes.

### Pulp File {: #3.73.8-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.73.8-pulp-cert-guard }

No significant changes.

---

## 3.73.7 (2025-04-23) {: #3.73.7 }

### REST API {: #3.73.7-rest-api }

#### Bugfixes {: #3.73.7-rest-api-bugfix }

- Fixed a memory consumption issue that was triggered by the use of the Alternate Content Source feature.
  [#6500](https://github.com/pulp/pulpcore/issues/6500)

### Plugin API {: #3.73.7-plugin-api }

No significant changes.

### Pulp File {: #3.73.7-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.73.7-pulp-cert-guard }

No significant changes.

---

## 3.73.6 (2025-04-23) {: #3.73.6 }

### REST API {: #3.73.6-rest-api }

No significant changes.

### Plugin API {: #3.73.6-plugin-api }

No significant changes.

### Pulp File {: #3.73.6-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.73.6-pulp-cert-guard }

No significant changes.

---

## 3.73.5 (2025-04-22) {: #3.73.5 }

### REST API {: #3.73.5-rest-api }

#### Bugfixes {: #3.73.5-rest-api-bugfix }

- Client- and CA-certificates used in Remotes are now validated and any comments stripped
  before being applied to the Remote.
  [#6491](https://github.com/pulp/pulpcore/issues/6491)

### Plugin API {: #3.73.5-plugin-api }

#### Bugfixes {: #3.73.5-plugin-api-bugfix }

- Fixed `add_roles_for_object_creator` not handling anonymous users.

### Pulp File {: #3.73.5-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.73.5-pulp-cert-guard }

No significant changes.

---

## 3.73.4 (2025-04-08) {: #3.73.4 }

### REST API {: #3.73.4-rest-api }

#### Bugfixes {: #3.73.4-rest-api-bugfix }

- Fixed an oversight in the #6385 fix.

### Plugin API {: #3.73.4-plugin-api }

No significant changes.

### Pulp File {: #3.73.4-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.73.4-pulp-cert-guard }

No significant changes.

---

## 3.73.3 (2025-04-02) {: #3.73.3 }

### REST API {: #3.73.3-rest-api }

#### Bugfixes {: #3.73.3-rest-api-bugfix }

- Fixes the Remote configuration of timeouts to properly fallback to aiohttp defaults if they are unset by the user.
  [#5439](https://github.com/pulp/pulpcore/issues/5439)
- Fixed task purge in case no access policy based permission framework is configured for Pulp.
  [#6380](https://github.com/pulp/pulpcore/issues/6380)
- Fixed pull-through caching failure when content already existed on-demand.
  [#6385](https://github.com/pulp/pulpcore/issues/6385)
- Fixed cross-domain check for RepositoryVersion fields.
  [#6388](https://github.com/pulp/pulpcore/issues/6388)
- Redeclared the aiohttp dependency boundaries to follow semver as stated in their documentation.

### Plugin API {: #3.73.3-plugin-api }

No significant changes.

### Pulp File {: #3.73.3-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.73.3-pulp-cert-guard }

No significant changes.

---

## 3.73.2 (2025-03-14) {: #3.73.2 }

### REST API {: #3.73.2-rest-api }

#### Bugfixes {: #3.73.2-rest-api-bugfix }

- Fixed cache not being invalidated when a publication was created or a repository version was deleted.
  [#6333](https://github.com/pulp/pulpcore/issues/6333)
- Reworked content-labeling RBAC to use a specific permission for set/unset labels.

  Users must be explicitly given the `core.content_labeler` role to access this
  functionality, or to upload content with labels.
  [#6337](https://github.com/pulp/pulpcore/issues/6337)
- Fixed a bug in the plugin API related to set and unset labels for ReadOnlyContentViewSet.
  [#6340](https://github.com/pulp/pulpcore/issues/6340)

### Plugin API {: #3.73.2-plugin-api }

No significant changes.

### Pulp File {: #3.73.2-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.73.2-pulp-cert-guard }

No significant changes.

---

## 3.73.1 (2025-03-06) {: #3.73.1 }

### REST API {: #3.73.1-rest-api }

#### Bugfixes {: #3.73.1-rest-api-bugfix }

- Reverted the feature to allow describing remote authentication in the openapi specs. It depended on the also reverted switch to openapi 3.1.

### Plugin API {: #3.73.1-plugin-api }

No significant changes.

### Pulp File {: #3.73.1-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.73.1-pulp-cert-guard }

No significant changes.

---

## 3.73.0 (2025-03-04) {: #3.73.0 }

### REST API {: #3.73.0-rest-api }

#### Features {: #3.73.0-rest-api-feature }

- Allow labelling Content in pulp.

  This adds `pulp_labels` to Content subclasses, using the same entities as used for
  labelling Repositories, Remotes, and Distributions currently (q.v.). Labels can be added
  when uploading Content, searched on using the `pulp_labels_select` filter to the list
  endpoints, and set/unset on existing Content.
  [#3338](https://github.com/pulp/pulpcore/issues/3338)
- Added new field `policy` to UpstreamPulp that decides how Replicate manages local objects within the domain.

  Replicate will now copy the upstream's `pulp_labels` on downstream objects. Also, replicate will now
  label the downstream objects created with the UpstreamPulp they came from.
  [#5214](https://github.com/pulp/pulpcore/issues/5214)
- Add ability to configure the openapi schema for remote user authentication via `REMOTE_USER_OPENAPI_SECURITY_SCHEME`.
  Its type defaults to "mutualTLS" for cert based authentication.
  [#5437](https://github.com/pulp/pulpcore/issues/5437)

#### Bugfixes {: #3.73.0-rest-api-bugfix }

- Fixed plugin default settings overriding user settings.

#### Improved Documentation {: #3.73.0-rest-api-doc }

- Add a new section about configuring AWS CloudFront as storage backend.
  [#6258](https://github.com/pulp/pulpcore/issues/6258)

#### Misc {: #3.73.0-rest-api-misc }

- [#6225](https://github.com/pulp/pulpcore/issues/6225)

### Plugin API {: #3.73.0-plugin-api }

No significant changes.

### Pulp File {: #3.73.0-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.73.0-pulp-cert-guard }

No significant changes.

---

## 3.72.2 (2025-03-04) {: #3.72.2 }

### REST API {: #3.72.2-rest-api }

#### Bugfixes {: #3.72.2-rest-api-bugfix }

- Fixed plugin default settings overriding user settings.

### Plugin API {: #3.72.2-plugin-api }

No significant changes.

### Pulp File {: #3.72.2-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.72.2-pulp-cert-guard }

No significant changes.

---

## 3.72.1 (2025-02-26) {: #3.72.1 }

### REST API {: #3.72.1-rest-api }

No significant changes.

### Plugin API {: #3.72.1-plugin-api }

No significant changes.

### Pulp File {: #3.72.1-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.72.1-pulp-cert-guard }

No significant changes.

---

## YANKED 3.72.0 (2025-02-25) {: #3.72.0 }

### REST API {: #3.72.0-rest-api }

#### Features {: #3.72.0-rest-api-feature }

- Added ``ENABLED_PLUGINS`` option to allow selecting installed plugins to be enabled.
  [#5235](https://github.com/pulp/pulpcore/issues/5235)
- Added support for labels on domains.
  [#6236](https://github.com/pulp/pulpcore/issues/6236)
- Added `TASK_GRACE_INTERVAL` as a setting to specify the amount of seconds a worker gives the current task to finish when receiving SIGINT.
  [#6242](https://github.com/pulp/pulpcore/issues/6242)

#### Bugfixes {: #3.72.0-rest-api-bugfix }

- Taught the upload-workflow to replace missing artifact-files when discovered.
  [#6274](https://github.com/pulp/pulpcore/issues/6274)
- Fixed an issue in immediate tasks switching to tmp directories and API worker failing to run `cwd`.
  [#6293](https://github.com/pulp/pulpcore/issues/6293)
- The Alternate Content Source sync feature has received some optimizations, making it dramatically faster.

#### Improved Documentation {: #3.72.0-rest-api-doc }

- Added basic documentation for Content Guards.
  [#4629](https://github.com/pulp/pulpcore/issues/4629)

### Plugin API {: #3.72.0-plugin-api }

No significant changes.

### Pulp File {: #3.72.0-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.72.0-pulp-cert-guard }

No significant changes.

---

## 3.71.2 (2025-02-24) {: #3.71.2 }

### REST API {: #3.71.2-rest-api }

No significant changes.

### Plugin API {: #3.71.2-plugin-api }

No significant changes.

### Pulp File {: #3.71.2-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.71.2-pulp-cert-guard }

No significant changes.

---

## 3.71.1 (2025-02-24) {: #3.71.1 }

### REST API {: #3.71.1-rest-api }

#### Bugfixes {: #3.71.1-rest-api-bugfix }

- Fixed an issue in immediate tasks switching to tmp directories and API worker failing to run `cwd`.
  [#6293](https://github.com/pulp/pulpcore/issues/6293)

### Plugin API {: #3.71.1-plugin-api }

No significant changes.

### Pulp File {: #3.71.1-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.71.1-pulp-cert-guard }

No significant changes.

---

## 3.71.0 (2025-02-19) {: #3.71.0 }

### REST API {: #3.71.0-rest-api }

#### Features {: #3.71.0-rest-api-feature }

- Added `pulp_created` filter for Tasks API.
  [#6241](https://github.com/pulp/pulpcore/issues/6241)

#### Bugfixes {: #3.71.0-rest-api-bugfix }

- Content app now returns a 400 Bad Request response when receiving invalid cookies instead of a 500 error.
  [#6214](https://github.com/pulp/pulpcore/issues/6214)
- Fixed a bug in replication, where a failed sync will not be reattempted.
  [#6261](https://github.com/pulp/pulpcore/issues/6261)

### Plugin API {: #3.71.0-plugin-api }

#### Bugfixes {: #3.71.0-plugin-api-bugfix }

- Fixed immediate tasks to run in a temporary directory.
  [#5928](https://github.com/pulp/pulpcore/issues/5928)

### Pulp File {: #3.71.0-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.71.0-pulp-cert-guard }

No significant changes.

---

## 3.70.1 (2025-02-12) {: #3.70.1 }

### REST API {: #3.70.1-rest-api }

#### Bugfixes {: #3.70.1-rest-api-bugfix }

- Fixed a bug in replication, where a failed sync will not be reattempted.
  [#6261](https://github.com/pulp/pulpcore/issues/6261)

### Plugin API {: #3.70.1-plugin-api }

No significant changes.

### Pulp File {: #3.70.1-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.70.1-pulp-cert-guard }

No significant changes.

---

## 3.70.0 (2025-02-04) {: #3.70.0 }

### REST API {: #3.70.0-rest-api }

#### Features {: #3.70.0-rest-api-feature }

- Allow CONTENT_ORIGIN to be None. When None, the base_url for Distributions is a relative path.
  [#5931](https://github.com/pulp/pulpcore/issues/5931)
- Added a login api endpoint to result in an authorization cookie from any other sort of feasible authentication.
  [#5932](https://github.com/pulp/pulpcore/issues/5932)
- Added the unblocked_at filter for Tasks API.
  [#6165](https://github.com/pulp/pulpcore/issues/6165)
- Added a check to the basic auth module to respect the `X-Requested-With: "XMLHttpRequest"` header.
  In return the signature of the `WWW-Authenticate` header is changed so browsers will not pop up a password dialog.

#### Bugfixes {: #3.70.0-rest-api-bugfix }

- Fixed replication failing when the upstream Pulp doesn't have all the same plugins as the downstream.
  [#4509](https://github.com/pulp/pulpcore/issues/4509)
- Added an extra check to the task unblocking logic to catch a rare case of stuck tasks in running, but never unblocked.
  Tasks in normal operation should never end in this state, but at least with a specific upgrade it can happen.
  [#6225](https://github.com/pulp/pulpcore/issues/6225)

#### Improved Documentation {: #3.70.0-rest-api-doc }

- Expanded docs on correlation id.
  [#6248](https://github.com/pulp/pulpcore/issues/6248)

#### Removals {: #3.70.0-rest-api-removal }

- Marked django's `DEFAULT_FILE_STORAGE` and `STATIC_FILE_STORAGE` settings to be
  removed in pulpcore 3.85. Users should upgrade to use the
  [`STORAGES`](https://docs.djangoproject.com/en/4.2/ref/settings/#std-setting-STORAGES)
  setting instead.

  The [django-upgrade](https://github.com/adamchainz/django-upgrade?tab=readme-ov-file#django-42)
  tool can handle simple cases. If cloud storages are being used, refer to django-storages
  to adapt their specific storage options. E.g:

  * <https://django-storages.readthedocs.io/en/latest/backends/amazon-S3.html>
  * <https://django-storages.readthedocs.io/en/latest/backends/azure.html>
  [#5404](https://github.com/pulp/pulpcore/issues/5404)
- Updated the OpenAPI generator version used to generate python bindings to 7.10.0.
  This involves stricter client side validation of api calls when using the bindings.

### Plugin API {: #3.70.0-plugin-api }

#### Features {: #3.70.0-plugin-api-feature }

- Modified the `artifact_url` method from `ArtifactDistribution` model to return a relative URL
  (no protocol, fqdn, and port) in case `CONTENT_ORIGIN` is not defined.
  [#relative-path-base-url](https://github.com/pulp/pulpcore/issues/relative-path-base-url)

#### Removals {: #3.70.0-plugin-api-removal }

- Started using `settings.STORAGES` internally instead of `settings.DEFAULT_FILE_STORAGE` and `settings.STATICFILES_STORAGE`,
  which was deprecated in Django 4.2.

  For compatibility, plugins must replace access to:

  * `settings.DEFAULT_FILE_STORAGE` with `settings.STORAGES["default"]["BACKEND"]`
  * `settings.STATICFILES_STORAGE` with `settings.STORAGES["staticfiles"]["BACKEND"]`

  See the new storage structure in [Django docs](https://docs.djangoproject.com/en/4.2/ref/settings/#std-setting-STORAGES).
  [#5404](https://github.com/pulp/pulpcore/issues/5404)
- Removed `distribution_data` from `Replicator`. The function was renamed to `distribution_extra_fields`.
  [#6077](https://github.com/pulp/pulpcore/issues/6077)
- Deleted field `pulp_label_select` from UpstreamPulp model.

### Pulp File {: #3.70.0-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.70.0-pulp-cert-guard }

No significant changes.

---

## 3.69.2 (2025-01-29) {: #3.69.2 }

### REST API {: #3.69.2-rest-api }

#### Bugfixes {: #3.69.2-rest-api-bugfix }

- Added an extra check to the task unblocking logic to catch a rare case of stuck tasks in running, but never unblocked.
  Tasks in normal operation should never end in this state, but at least with a specific upgrade it can happen.
  [#6225](https://github.com/pulp/pulpcore/issues/6225)

### Plugin API {: #3.69.2-plugin-api }

No significant changes.

### Pulp File {: #3.69.2-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.69.2-pulp-cert-guard }

No significant changes.

---

## 3.69.1 (2025-01-21) {: #3.69.1 }

### REST API {: #3.69.1-rest-api }

No significant changes.

### Plugin API {: #3.69.1-plugin-api }

No significant changes.

### Pulp File {: #3.69.1-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.69.1-pulp-cert-guard }

No significant changes.

---

## 3.69.0 (2024-12-11) {: #3.69.0 }

### REST API {: #3.69.0-rest-api }

#### Features {: #3.69.0-rest-api-feature }

- Added core version to the bindings api spec even if core apis are not part of the spec.

#### Bugfixes {: #3.69.0-rest-api-bugfix }

- Fixed content-app behavior for the case where the client would get a 200 response for a package
  streamed from a Remote which did not match the expected checksum.
  Now, the connection is closed before finalizing the response.
  [#5012](https://github.com/pulp/pulpcore/issues/5012)
- On a request for on-demand content in the content app, a corrupted Remote that
  contains the wrong binary (for that content) prevented other Remotes from being
  attempted on future requests. Now the last failed Remotes are temporarily ignored
  and others may be picked.
  [#5725](https://github.com/pulp/pulpcore/issues/5725)
- Disable retry logic on the context of content-app on-demand streaming, as we can't recover
  from any errors after starting the streaming process (chunked transfer).
  [#5937](https://github.com/pulp/pulpcore/issues/5937)
- Allowed to bind api and content workers to multiple addresses.
  You can specify `--bind` multiple times on the `pulpcore-{api,content}` entrypoints.
  [#6053](https://github.com/pulp/pulpcore/issues/6053)
- Fixed the openapi schema definition of task error.
- Fixed the schema definition for created resources.

#### Improved Documentation {: #3.69.0-rest-api-doc }

- Added docs about on-demand content limitations and caveats.
  [#1975](https://github.com/pulp/pulpcore/issues/1975),
  [#3212](https://github.com/pulp/pulpcore/issues/3212)

### Plugin API {: #3.69.0-plugin-api }

#### Features {: #3.69.0-plugin-api-feature }

- Pulpcore migrations have been squashed.
  In order to allow removing the old ones, plugins should rebase their migrations on at least the 0091 migration of core.
  The `pulpcore-manager rebasemigrations` command will hep with that.

#### Bugfixes {: #3.69.0-plugin-api-bugfix }

- Fixed `GetOrCreateSerializerMixin` not accepting pulp_domain for the natural key creation.
  [#domain-get-create-serializer-mixin](https://github.com/pulp/pulpcore/issues/domain-get-create-serializer-mixin)

#### Misc {: #3.69.0-plugin-api-misc }

-

### Pulp File {: #3.69.0-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.69.0-pulp-cert-guard }

No significant changes.

---

## 3.68.2 (2024-12-11) {: #3.68.2 }

### REST API {: #3.68.2-rest-api }

No significant changes.

### Plugin API {: #3.68.2-plugin-api }

#### Bugfixes {: #3.68.2-plugin-api-bugfix }

- Fixed `GetOrCreateSerializerMixin` not accepting pulp_domain for the natural key creation.
  [#domain-get-create-serializer-mixin](https://github.com/pulp/pulpcore/issues/domain-get-create-serializer-mixin)

### Pulp File {: #3.68.2-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.68.2-pulp-cert-guard }

No significant changes.

---

## 3.68.1 (2024-11-26) {: #3.68.1 }

### REST API {: #3.68.1-rest-api }

#### Bugfixes {: #3.68.1-rest-api-bugfix }

- Fixed content-app behavior for the case where the client would get a 200 response for a package
  streamed from a Remote which did not match the expected checksum.
  Now, the connection is closed before finalizing the response.
  [#5012](https://github.com/pulp/pulpcore/issues/5012)
- Allowed to bind api and content workers to multiple addresses.
  You can specify `--bind` multiple times on the `pulpcore-{api,content}` entrypoints.
  [#6053](https://github.com/pulp/pulpcore/issues/6053)

### Plugin API {: #3.68.1-plugin-api }

No significant changes.

### Pulp File {: #3.68.1-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.68.1-pulp-cert-guard }

No significant changes.

---

## 3.68.0 (2024-11-12) {: #3.68.0 }

### REST API {: #3.68.0-rest-api }

#### Bugfixes {: #3.68.0-rest-api-bugfix }

- Fixed an assertion on all content being added/removed in a repository version is of the same domain.
  [#content-assert](https://github.com/pulp/pulpcore/issues/content-assert)
- Fixed incorrect count of waiting tasks in the queue for the `tasks_unblocked_queue` and `tasks_longest_unblocked_time` metrics.
  [#5941](https://github.com/pulp/pulpcore/issues/5941)
- On the content-app, added ClientConnectionError (aiohttp) as an exception that can trigger
  a retry when streaming content from a Remote.
  [#5967](https://github.com/pulp/pulpcore/issues/5967)

### Plugin API {: #3.68.0-plugin-api }

#### Features {: #3.68.0-plugin-api-feature }

- Added `pulpcore.app.util.cache_key` to the plugin api.
  Use this method to get the base-key when using the Pulp cache.
  [#cache-key](https://github.com/pulp/pulpcore/issues/cache-key)

### Pulp File {: #3.68.0-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.68.0-pulp-cert-guard }

No significant changes.

---

## 3.67.1 (2024-11-12) {: #3.67.1 }

### REST API {: #3.67.1-rest-api }

#### Bugfixes {: #3.67.1-rest-api-bugfix }

- Fixed an assertion on all content being added/removed in a repository version is of the same domain.
  [#content-assert](https://github.com/pulp/pulpcore/issues/content-assert)

### Plugin API {: #3.67.1-plugin-api }

No significant changes.

### Pulp File {: #3.67.1-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.67.1-pulp-cert-guard }

No significant changes.

---

## 3.67.0 (2024-11-06) {: #3.67.0 }

### REST API {: #3.67.0-rest-api }

#### Features {: #3.67.0-rest-api-feature }

- Added `DefaultAccessPolicy` that will always use the default policy declared on the views.
  Added `AccessPolicyFromSettings` that will read policies from the `ACCESS_POLICIES` setting first.
  [#5882](https://github.com/pulp/pulpcore/issues/5882)
- Replaced built-in opentelemetry metrics with custom middlewares. Additionally, introduced a new
  setting `OTEL_ENABLED` that toggles the opentelemetry instrumentation on and off. It defaults to
  `False`.
  [#5943](https://github.com/pulp/pulpcore/issues/5943)

#### Bugfixes {: #3.67.0-rest-api-bugfix }

- pass envvars to Signing Scripts to access GNUPGHOME
  [#5911](https://github.com/pulp/pulpcore/issues/5911)
- Fixed repository modify allowing content from separate domains.
  [#5934](https://github.com/pulp/pulpcore/issues/5934)
- Fixed the JSONField specification so it doesn't break ruby bindings.
  See context [here](https://github.com/pulp/pulp_rpm/issues/3639).

#### Improved Documentation {: #3.67.0-rest-api-doc }

- Fixed pulpcore code-api generated docs, which was not using the right mkdocstring directives yet.
  [#5834](https://github.com/pulp/pulpcore/issues/5834)

### Plugin API {: #3.67.0-plugin-api }

#### Bugfixes {: #3.67.0-plugin-api-bugfix }

- Downloaders now always ensure the download ends up under `WORKING_DIRECTORY`.
  [#5912](https://github.com/pulp/pulpcore/issues/5912)

#### Deprecations {: #3.67.0-plugin-api-deprecation }

- Deprecated `AccessPolicyFromDB` for removal in 4.0.
  [#5822](https://github.com/pulp/pulpcore/issues/5822)

### Pulp File {: #3.67.0-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.67.0-pulp-cert-guard }

No significant changes.

---

## 3.66.1 (2024-11-06) {: #3.66.1 }

### REST API {: #3.66.1-rest-api }

#### Bugfixes {: #3.66.1-rest-api-bugfix }

- Fixed repository modify allowing content from separate domains.
  [#5934](https://github.com/pulp/pulpcore/issues/5934)
- Fixed the JSONField specification so it doesn't break ruby bindings.
  See context [here](https://github.com/pulp/pulp_rpm/issues/3639).

### Plugin API {: #3.66.1-plugin-api }

No significant changes.

### Pulp File {: #3.66.1-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.66.1-pulp-cert-guard }

No significant changes.

---

## 3.66.0 (2024-10-16) {: #3.66.0 }

### REST API {: #3.66.0-rest-api }

#### Features {: #3.66.0-rest-api-feature }

- Added OpenPGP keyring repository type and OpenPGP key content type.
  [#3024](https://github.com/pulp/pulpcore/issues/3024)
- Re-enabled and refactored the Domain Storage metric emitter.
  [#5762](https://github.com/pulp/pulpcore/issues/5762)
- Added a formal "immediate" type of Task and changed workers behavior to prioritize those.
  This labeling is exlusive to plugin code and should only be applied where it's known that
  the task will finish shortly, like in updates of repositories, remotes, and distributions.
  [#5767](https://github.com/pulp/pulpcore/issues/5767)

#### Bugfixes {: #3.66.0-rest-api-bugfix }

- Fixed task purge to not expect a user, when a run has been scheduled by Pulp itself.
  [#5881](https://github.com/pulp/pulpcore/issues/5881)

### Plugin API {: #3.66.0-plugin-api }

No significant changes.

### Pulp File {: #3.66.0-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.66.0-pulp-cert-guard }

No significant changes.

---

## 3.65.0 (2024-10-08) {: #3.65.0 }

### REST API {: #3.65.0-rest-api }

#### Bugfixes {: #3.65.0-rest-api-bugfix }

- pulp-worker fails to start with "float object cannot be interpreted as an integer" on some versions of python.
  [#5861](https://github.com/pulp/pulpcore/issues/5861)
- Fixed the name of the metrics' attribute reporting the worker's process name. Started emitting the
  name of the Pulp service with a dedicated label (i.e., job=pulp-api).
  [#5864](https://github.com/pulp/pulpcore/issues/5864)
- Started propagating headers from the content-app when using a non-default filesystem storage.
  [#5879](https://github.com/pulp/pulpcore/issues/5879)

#### Improved Documentation {: #3.65.0-rest-api-doc }

- Correct rendering of pulp bash example in reclaim-disk-space.md
  [#5876](https://github.com/pulp/pulpcore/issues/5876)

### Plugin API {: #3.65.0-plugin-api }

No significant changes.

### Pulp File {: #3.65.0-pulp-file }

#### Bugfixes {: #3.65.0-pulp-file-bugfix }

- During sync, quote the URL path for file downloads using HTTP.
  [#5686](https://github.com/pulp/pulpcore/issues/5686)

### Pulp Cert Guard {: #3.65.0-pulp-cert-guard }

No significant changes.

---

## 3.64.0 (2024-10-03) {: #3.64.0 }

### REST API {: #3.64.0-rest-api }

#### Features {: #3.64.0-rest-api-feature }

- Started using an upstream version of the OpenTelemetry aiohttp server instrumentation.
  [#5833](https://github.com/pulp/pulpcore/issues/5833)
- Included the worker's name in the ``http.server.duration`` OpenTelemetry metric attributes.
  [#5844](https://github.com/pulp/pulpcore/issues/5844)

#### Bugfixes {: #3.64.0-rest-api-bugfix }

- Started collecting artifact size metrics even after caching the served content.
  [#5817](https://github.com/pulp/pulpcore/issues/5817)

### Plugin API {: #3.64.0-plugin-api }

No significant changes.

### Pulp File {: #3.64.0-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.64.0-pulp-cert-guard }

No significant changes.

---

## 3.63.35 (2026-04-14) {: #3.63.35 }

### REST API {: #3.63.35-rest-api }

#### Bugfixes {: #3.63.35-rest-api-bugfix }

- Fixed `reset-admin-password` command failing when using `--random` option on Django 5.
  [#7533](https://github.com/pulp/pulpcore/issues/7533)

### Plugin API {: #3.63.35-plugin-api }

No significant changes.

### Pulp File {: #3.63.35-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.63.35-pulp-cert-guard }

No significant changes.

---

## 3.63.34 (2026-03-24) {: #3.63.34 }

### REST API {: #3.63.34-rest-api }

#### Bugfixes {: #3.63.34-rest-api-bugfix }

- Fixed a bug when syncing a custom repository using the upstream username only (no password)
  did not send any authentication since both were required by the download factory.
  [#7425](https://github.com/pulp/pulpcore/issues/7425)

### Plugin API {: #3.63.34-plugin-api }

#### Bugfixes {: #3.63.34-plugin-api-bugfix }

- Properly support DRF responses in Synchronous Content Cache.

### Pulp File {: #3.63.34-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.63.34-pulp-cert-guard }

No significant changes.

---

## 3.63.33 (2026-03-17) {: #3.63.33 }

### REST API {: #3.63.33-rest-api }

#### Bugfixes {: #3.63.33-rest-api-bugfix }

- Fixed duplicate chunk uploads corrupting the entire upload
  [#6381](https://github.com/pulp/pulpcore/issues/6381)
- Clean up on-demand temporary file left over on an aborted download.
  [#6975](https://github.com/pulp/pulpcore/issues/6975)
- Fixed metadata artifacts being re-uploaded to storage when creating a publication for an already-published repository version.
  [#7344](https://github.com/pulp/pulpcore/issues/7344)

### Plugin API {: #3.63.33-plugin-api }

No significant changes.

### Pulp File {: #3.63.33-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.63.33-pulp-cert-guard }

No significant changes.

---

## 3.63.32 (2026-03-10) {: #3.63.32 }

### REST API {: #3.63.32-rest-api }

#### Bugfixes {: #3.63.32-rest-api-bugfix }

- Fixed a typo in `GroupRoleSerializer` that caused a 500 error when listing group roles with a domain set.
  [#7095](https://github.com/pulp/pulpcore/issues/7095)
- Moved artifact checksum validation from module-level settings code to a Django system check.
  [#7380](https://github.com/pulp/pulpcore/issues/7380)

### Plugin API {: #3.63.32-plugin-api }

No significant changes.

### Pulp File {: #3.63.32-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.63.32-pulp-cert-guard }

No significant changes.

---

## 3.63.31 (2026-02-25) {: #3.63.31 }

### REST API {: #3.63.31-rest-api }

No significant changes.

### Plugin API {: #3.63.31-plugin-api }

No significant changes.

### Pulp File {: #3.63.31-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.63.31-pulp-cert-guard }

No significant changes.

---

## 3.63.30 (2026-02-10) {: #3.63.30 }

### REST API {: #3.63.30-rest-api }

#### Features {: #3.63.30-rest-api-feature }

- Adapted PulpImport/Export to allow update django-import-export==4.x.
  [#5324](https://github.com/pulp/pulpcore/issues/5324)
- Allow use of Django 5 as well as Django 4. Note the following breaking changes if upgrading to
  Django 5: storage configuration must use the new ``STORAGES`` format instead of
  ``DEFAULT_FILE_STORAGE``, Python >= 3.10 is required, and PostgreSQL >= 14 is required.
  [#6988](https://github.com/pulp/pulpcore/issues/6988)

#### Bugfixes {: #3.63.30-rest-api-bugfix }

- Fixed PRNField slowing down the generic list endpoints with extra database queries.

### Plugin API {: #3.63.30-plugin-api }

No significant changes.

### Pulp File {: #3.63.30-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.63.30-pulp-cert-guard }

No significant changes.

---

## 3.63.29 (2026-01-27) {: #3.63.29 }

### REST API {: #3.63.29-rest-api }

#### Bugfixes {: #3.63.29-rest-api-bugfix }

- Improve handling of some edge cases in task diagnostics code.
  [#7020](https://github.com/pulp/pulpcore/issues/7020)
- Fixed not supporting the new rename of the S3 storage backend.
  [#7228](https://github.com/pulp/pulpcore/issues/7228)

### Plugin API {: #3.63.29-plugin-api }

No significant changes.

### Pulp File {: #3.63.29-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.63.29-pulp-cert-guard }

No significant changes.

---

## 3.63.28 (2025-12-22) {: #3.63.28 }

### REST API {: #3.63.28-rest-api }

No significant changes.

### Plugin API {: #3.63.28-plugin-api }

#### Bugfixes {: #3.63.28-plugin-api-bugfix }

- Exposed `RepositoryVersionSerializer` to the plugin API.
  In some cases a plugin might have used that serializer for a newer pulpcore version
  but it could also be installed with a lower pulpcore version.

### Pulp File {: #3.63.28-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.63.28-pulp-cert-guard }

No significant changes.

---

## 3.63.27 (2025-12-09) {: #3.63.27 }

### REST API {: #3.63.27-rest-api }

#### Misc {: #3.63.27-rest-api-misc }

- 

### Plugin API {: #3.63.27-plugin-api }

No significant changes.

### Pulp File {: #3.63.27-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.63.27-pulp-cert-guard }

No significant changes.

---

## 3.63.26 (2025-12-04) {: #3.63.26 }

### REST API {: #3.63.26-rest-api }

#### Bugfixes {: #3.63.26-rest-api-bugfix }

- Fixed a bug in the pre-migration hook that prevented proper cleanup of all Pulp app db records (content, api, worker).

### Plugin API {: #3.63.26-plugin-api }

No significant changes.

### Pulp File {: #3.63.26-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.63.26-pulp-cert-guard }

No significant changes.

---

## 3.63.25 (2025-11-13) {: #3.63.25 }

### REST API {: #3.63.25-rest-api }

No significant changes.

### Plugin API {: #3.63.25-plugin-api }

#### Bugfixes {: #3.63.25-plugin-api-bugfix }

- Fixed NoArtifactContentUploadViewSet/Serializer breaking when using the `artifact`, `upload` or `file_url` fields.
- Fixed `resolved_prn` failing when the object's pk wasn't an UUID.

### Pulp File {: #3.63.25-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.63.25-pulp-cert-guard }

No significant changes.

---

## 3.63.24 (2025-10-01) {: #3.63.24 }

### REST API {: #3.63.24-rest-api }

#### Bugfixes {: #3.63.24-rest-api-bugfix }

- Fixed task purge in case no access policy based permission framework is configured for Pulp.
  [#6380](https://github.com/pulp/pulpcore/issues/6380)

### Plugin API {: #3.63.24-plugin-api }

No significant changes.

### Pulp File {: #3.63.24-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.63.24-pulp-cert-guard }

No significant changes.

---

## 3.63.23 (2025-09-09) {: #3.63.23 }

### REST API {: #3.63.23-rest-api }

No significant changes.

### Plugin API {: #3.63.23-plugin-api }

No significant changes.

### Pulp File {: #3.63.23-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.63.23-pulp-cert-guard }

No significant changes.

---

## 3.63.22 (2025-07-02) {: #3.63.22 }

### REST API {: #3.63.22-rest-api }

No significant changes.

### Plugin API {: #3.63.22-plugin-api }

No significant changes.

### Pulp File {: #3.63.22-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.63.22-pulp-cert-guard }

No significant changes.

---

## 3.63.21 (2025-06-24) {: #3.63.21 }

### REST API {: #3.63.21-rest-api }

#### Bugfixes {: #3.63.21-rest-api-bugfix }

- Taught tasks to update the state of associated progress-reports when canceled/failed.

  Added a management-task, `clean-up-progress-reports`, to clean up existing reports.
  [#3609](https://github.com/pulp/pulpcore/issues/3609)

### Plugin API {: #3.63.21-plugin-api }

No significant changes.

### Pulp File {: #3.63.21-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.63.21-pulp-cert-guard }

No significant changes.

---

## 3.63.20 (2025-06-04) {: #3.63.20 }

### REST API {: #3.63.20-rest-api }

No significant changes.

### Plugin API {: #3.63.20-plugin-api }

No significant changes.

### Pulp File {: #3.63.20-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.63.20-pulp-cert-guard }

No significant changes.

---

## 3.63.19 (2025-05-27) {: #3.63.19 }

### REST API {: #3.63.19-rest-api }

#### Bugfixes {: #3.63.19-rest-api-bugfix }

- Prevent downloader session to be closed when there is a digest validation in on_demand content serving.

### Plugin API {: #3.63.19-plugin-api }

No significant changes.

### Pulp File {: #3.63.19-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.63.19-pulp-cert-guard }

No significant changes.

---

## 3.63.18 (2025-05-13) {: #3.63.18 }

### REST API {: #3.63.18-rest-api }

#### Bugfixes {: #3.63.18-rest-api-bugfix }

- Disable retry logic on the context of content-app on-demand streaming, as we can't recover
  from any errors after starting the streaming process (chunked transfer).
  [#5937](https://github.com/pulp/pulpcore/issues/5937)

### Plugin API {: #3.63.18-plugin-api }

No significant changes.

### Pulp File {: #3.63.18-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.63.18-pulp-cert-guard }

No significant changes.

---

## 3.63.17 (2025-04-24) {: #3.63.17 }

### REST API {: #3.63.17-rest-api }

#### Bugfixes {: #3.63.17-rest-api-bugfix }

- Reverted fix for #6491, it broke certificate-chains.
  [#6510](https://github.com/pulp/pulpcore/issues/6510)

### Plugin API {: #3.63.17-plugin-api }

No significant changes.

### Pulp File {: #3.63.17-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.63.17-pulp-cert-guard }

No significant changes.

---

## 3.63.16 (2025-04-23) {: #3.63.16 }

### REST API {: #3.63.16-rest-api }

#### Bugfixes {: #3.63.16-rest-api-bugfix }

- Fixed a memory consumption issue that was triggered by the use of the Alternate Content Source feature.
  [#6500](https://github.com/pulp/pulpcore/issues/6500)

### Plugin API {: #3.63.16-plugin-api }

No significant changes.

### Pulp File {: #3.63.16-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.63.16-pulp-cert-guard }

No significant changes.

---

## 3.63.15 (2025-04-22) {: #3.63.15 }

### REST API {: #3.63.15-rest-api }

#### Bugfixes {: #3.63.15-rest-api-bugfix }

- Client- and CA-certificates used in Remotes are now validated and any comments stripped
  before being applied to the Remote.
  [#6491](https://github.com/pulp/pulpcore/issues/6491)

### Plugin API {: #3.63.15-plugin-api }

#### Bugfixes {: #3.63.15-plugin-api-bugfix }

- Fixed `add_roles_for_object_creator` not handling anonymous users.

### Pulp File {: #3.63.15-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.63.15-pulp-cert-guard }

No significant changes.

---

## 3.63.14 (2025-04-08) {: #3.63.14 }

### REST API {: #3.63.14-rest-api }

#### Bugfixes {: #3.63.14-rest-api-bugfix }

- Fixed an oversight in the #6385 fix.

### Plugin API {: #3.63.14-plugin-api }

No significant changes.

### Pulp File {: #3.63.14-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.63.14-pulp-cert-guard }

No significant changes.

---

## 3.63.13 (2025-04-02) {: #3.63.13 }

### REST API {: #3.63.13-rest-api }

#### Bugfixes {: #3.63.13-rest-api-bugfix }

- Fixes the Remote configuration of timeouts to properly fallback to aiohttp defaults if they are unset by the user.
  [#5439](https://github.com/pulp/pulpcore/issues/5439)
- Fixed pull-through caching failure when content already existed on-demand.
  [#6385](https://github.com/pulp/pulpcore/issues/6385)
- Fixed cross-domain check for RepositoryVersion fields.
  [#6388](https://github.com/pulp/pulpcore/issues/6388)

### Plugin API {: #3.63.13-plugin-api }

No significant changes.

### Pulp File {: #3.63.13-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.63.13-pulp-cert-guard }

No significant changes.

---

## 3.63.12 (2025-03-18) {: #3.63.12 }

### REST API {: #3.63.12-rest-api }

#### Bugfixes {: #3.63.12-rest-api-bugfix }

- Fixed cache not being invalidated when a publication was created or a repository version was deleted.
  [#6333](https://github.com/pulp/pulpcore/issues/6333)
- The Alternate Content Source sync feature has received some optimizations, making it dramatically faster.

### Plugin API {: #3.63.12-plugin-api }

No significant changes.

### Pulp File {: #3.63.12-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.63.12-pulp-cert-guard }

No significant changes.

---

## 3.63.11 (2025-03-03) {: #3.63.11 }

### REST API {: #3.63.11-rest-api }

#### Misc {: #3.63.11-rest-api-misc }

- [#6225](https://github.com/pulp/pulpcore/issues/6225)

### Plugin API {: #3.63.11-plugin-api }

No significant changes.

### Pulp File {: #3.63.11-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.63.11-pulp-cert-guard }

No significant changes.

---

## 3.63.10 (2025-02-28) {: #3.63.10 }

### REST API {: #3.63.10-rest-api }

No significant changes.

### Plugin API {: #3.63.10-plugin-api }

No significant changes.

### Pulp File {: #3.63.10-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.63.10-pulp-cert-guard }

No significant changes.

---

## 3.63.9 (2025-01-29) {: #3.63.9 }

### REST API {: #3.63.9-rest-api }

#### Bugfixes {: #3.63.9-rest-api-bugfix }

- Added an extra check to the task unblocking logic to catch a rare case of stuck tasks in running, but never unblocked.
  Tasks in normal operation should never end in this state, but at least with a specific upgrade it can happen.
  [#6225](https://github.com/pulp/pulpcore/issues/6225)

### Plugin API {: #3.63.9-plugin-api }

No significant changes.

### Pulp File {: #3.63.9-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.63.9-pulp-cert-guard }

No significant changes.

---

## 3.63.8 (2025-01-21) {: #3.63.8 }

### REST API {: #3.63.8-rest-api }

#### Bugfixes {: #3.63.8-rest-api-bugfix }

- On a request for on-demand content in the content app, a corrupted Remote that
  contains the wrong binary (for that content) prevented other Remotes from being
  attempted on future requests. Now the last failed Remotes are temporarily ignored
  and others may be picked.
  [#5725](https://github.com/pulp/pulpcore/issues/5725)

### Plugin API {: #3.63.8-plugin-api }

No significant changes.

### Pulp File {: #3.63.8-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.63.8-pulp-cert-guard }

No significant changes.

---

## 3.63.7 (2025-01-08) {: #3.63.7 }

### REST API {: #3.63.7-rest-api }

No significant changes.

### Plugin API {: #3.63.7-plugin-api }

No significant changes.

### Pulp File {: #3.63.7-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.63.7-pulp-cert-guard }

No significant changes.

---

## 3.63.6 (2024-12-13) {: #3.63.6 }

### REST API {: #3.63.6-rest-api }

No significant changes.

### Plugin API {: #3.63.6-plugin-api }

No significant changes.

### Pulp File {: #3.63.6-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.63.6-pulp-cert-guard }

No significant changes.

---

## 3.63.5 (2024-12-11) {: #3.63.5 }

### REST API {: #3.63.5-rest-api }

No significant changes.

### Plugin API {: #3.63.5-plugin-api }

#### Bugfixes {: #3.63.5-plugin-api-bugfix }

- Fixed `GetOrCreateSerializerMixin` not accepting pulp_domain for the natural key creation.
  [#domain-get-create-serializer-mixin](https://github.com/pulp/pulpcore/issues/domain-get-create-serializer-mixin)

### Pulp File {: #3.63.5-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.63.5-pulp-cert-guard }

No significant changes.

---

## 3.63.4 (2024-11-26) {: #3.63.4 }

### REST API {: #3.63.4-rest-api }

#### Bugfixes {: #3.63.4-rest-api-bugfix }

- Fixed content-app behavior for the case where the client would get a 200 response for a package
  streamed from a Remote which did not match the expected checksum.
  Now, the connection is closed before finalizing the response.
  [#5012](https://github.com/pulp/pulpcore/issues/5012)
- Allowed to bind api and content workers to multiple addresses.
  You can specify `--bind` multiple times on the `pulpcore-{api,content}` entrypoints.
  [#6053](https://github.com/pulp/pulpcore/issues/6053)

### Plugin API {: #3.63.4-plugin-api }

No significant changes.

### Pulp File {: #3.63.4-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.63.4-pulp-cert-guard }

No significant changes.

---

## 3.63.3 (2024-11-20) {: #3.63.3 }

### REST API {: #3.63.3-rest-api }

#### Bugfixes {: #3.63.3-rest-api-bugfix }

- Fixed incorrect count of waiting tasks in the queue for the `tasks_unblocked_queue` and `tasks_longest_unblocked_time` metrics.
  [#5941](https://github.com/pulp/pulpcore/issues/5941)

### Plugin API {: #3.63.3-plugin-api }

No significant changes.

### Pulp File {: #3.63.3-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.63.3-pulp-cert-guard }

No significant changes.

---

## 3.63.2 (2024-11-12) {: #3.63.2 }

### REST API {: #3.63.2-rest-api }

#### Bugfixes {: #3.63.2-rest-api-bugfix }

- Fixed an assertion on all content being added/removed in a repository version is of the same domain.
  [#content-assert](https://github.com/pulp/pulpcore/issues/content-assert)
- pulp-worker fails to start with "float object cannot be interpreted as an integer" on some versions of python.
  [#5861](https://github.com/pulp/pulpcore/issues/5861)
- Started propagating headers from the content-app when using a non-default filesystem storage.
  [#5879](https://github.com/pulp/pulpcore/issues/5879)
- Fixed task purge to not expect a user, when a run has been scheduled by Pulp itself.
  [#5881](https://github.com/pulp/pulpcore/issues/5881)
- pass envvars to Signing Scripts to access GNUPGHOME
  [#5911](https://github.com/pulp/pulpcore/issues/5911)
- On the content-app, added ClientConnectionError (aiohttp) as an exception that can trigger
  a retry when streaming content from a Remote.
  [#5967](https://github.com/pulp/pulpcore/issues/5967)

### Plugin API {: #3.63.2-plugin-api }

No significant changes.

### Pulp File {: #3.63.2-pulp-file }

#### Bugfixes {: #3.63.2-pulp-file-bugfix }

- During sync, quote the URL path for file downloads using HTTP.
  [#5686](https://github.com/pulp/pulpcore/issues/5686)

### Pulp Cert Guard {: #3.63.2-pulp-cert-guard }

No significant changes.

---

## 3.63.1 (2024-10-30) {: #3.63.1 }

### REST API {: #3.63.1-rest-api }

#### Bugfixes {: #3.63.1-rest-api-bugfix }

- Fixed repository modify allowing content from separate domains.
  [#5934](https://github.com/pulp/pulpcore/issues/5934)
- Fixed the JSONField specification so it doesn't break ruby bindings.
  See context [here](https://github.com/pulp/pulp_rpm/issues/3639).

### Plugin API {: #3.63.1-plugin-api }

No significant changes.

### Pulp File {: #3.63.1-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.63.1-pulp-cert-guard }

No significant changes.

---

## 3.63.0 (2024-10-01) {: #3.63.0 }

### REST API {: #3.63.0-rest-api }

#### Features {: #3.63.0-rest-api-feature }

- Introduced new immutable resource identifier: Pulp Resource Name (PRN). All objects within Pulp
  will now show their PRN alongside their pulp_href. The PRN can be used in lieu of the pulp_href
  in API calls when creating or filtering objects. The PRN of any object has the form of
  `prn:app_label.model_label:pulp_id`.
  [#5766](https://github.com/pulp/pulpcore/issues/5766)

#### Bugfixes {: #3.63.0-rest-api-bugfix }

- Removed opentelemetry-instrumentation-django from dependencies.
  [#5843](https://github.com/pulp/pulpcore/issues/5843)
- Made Kafka dependencies optional depending on whether the producer is configured.
  [#5850](https://github.com/pulp/pulpcore/issues/5850)

### Plugin API {: #3.63.0-plugin-api }

No significant changes.

### Pulp File {: #3.63.0-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.63.0-pulp-cert-guard }

No significant changes.

---

## 3.62.0 (2024-09-25) {: #3.62.0 }

### REST API {: #3.62.0-rest-api }

#### Features {: #3.62.0-rest-api-feature }

- Added `name`, `base_url` and `last_replication` filters for UpstreamPulps.
  [#4110](https://github.com/pulp/pulpcore/issues/4110)
- Added new setting ``API_ROOT_REWRITE_HEADER`` that when specified allows the API_ROOT to be rewritten
  per request based on the header's value.
  [#4207](https://github.com/pulp/pulpcore/issues/4207)
- Added new `q_select` field to UpstreamPulp to allow for more advanced filtering on upstream distributions.
  `pulp_label_select` has been removed and its values have been migrated to this new field.
  Please upgrade every API worker before issuing a new replicate task to avoid unwanted behavior.
  [#5087](https://github.com/pulp/pulpcore/issues/5087)

#### Bugfixes {: #3.62.0-rest-api-bugfix }

- Fixed Publication & RepositoryVersion's `content__in` filter to properly accept an array of strings.
  [#3634](https://github.com/pulp/pulpcore/issues/3634)

#### Improved Documentation {: #3.62.0-rest-api-doc }

- Document the environment variables used in the test fixture `bindings_cfg`.
  [#5807](https://github.com/pulp/pulpcore/issues/5807)

### Plugin API {: #3.62.0-plugin-api }

#### Features {: #3.62.0-plugin-api-feature }

- Added new ``reverse`` method that handles Pulp specific url formatting. Plugins should update
  instances of ``django.urls.reverse`` and ``rest_framework.reverse`` to this new Pulp one.
  [#4207](https://github.com/pulp/pulpcore/issues/4207)

#### Deprecations {: #3.62.0-plugin-api-deprecation }

- Deprecated Replicator's `distribution_data`, plugins should switch to `distribution_extra_fields`.
  `distribution_data` will be removed in pulpcore==3.70.
  [#3649](https://github.com/pulp/pulpcore/issues/3649)

### Pulp File {: #3.62.0-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.62.0-pulp-cert-guard }

No significant changes.

---

## 3.61.0 (2024-09-18) {: #3.61.0 }

### REST API {: #3.61.0-rest-api }

#### Features {: #3.61.0-rest-api-feature }

- Added new `/migrate/` endpoint to Domains that allows for migrating artifacts from one storage backend to another.
  [#3358](https://github.com/pulp/pulpcore/issues/3358)

#### Bugfixes {: #3.61.0-rest-api-bugfix }

- Fix a memory spike on deletion of large repositories.
  [#5048](https://github.com/pulp/pulpcore/issues/5048)
- Fixed a logging issue, when a task marked for cancelling that finished produced an unecessary stack trace.

### Plugin API {: #3.61.0-plugin-api }

No significant changes.

### Pulp File {: #3.61.0-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.61.0-pulp-cert-guard }

No significant changes.

---

## 3.60.0 (2024-09-10) {: #3.60.0 }

### REST API {: #3.60.0-rest-api }

#### Features {: #3.60.0-rest-api-feature }

- Added metrics reporting the size of served artifacts.
  [#4602](https://github.com/pulp/pulpcore/issues/4602)
- Pulp-workers now also log domain name in which the task is executed.
  [#5693](https://github.com/pulp/pulpcore/issues/5693)

### Plugin API {: #3.60.0-plugin-api }

No significant changes.

### Pulp File {: #3.60.0-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.60.0-pulp-cert-guard }

No significant changes.

---

## 3.59.0 (2024-08-28) {: #3.59.0 }

### REST API {: #3.59.0-rest-api }

#### Features {: #3.59.0-rest-api-feature }

- Added ability to cancel all tasks in a TaskGroup through a partial update with `state=canceled`.
  [#4125](https://github.com/pulp/pulpcore/issues/4125)

#### Bugfixes {: #3.59.0-rest-api-bugfix }

- Added a default access policy where only admin users will be able to upload and
  read/list artifacts.
  [#5525](https://github.com/pulp/pulpcore/issues/5525)

#### Improved Documentation {: #3.59.0-rest-api-doc }

- Improved documentation for the complex filtering.
  [#5703](https://github.com/pulp/pulpcore/issues/5703)

#### Deprecations {: #3.59.0-rest-api-deprecation }

- The `DELETE` request method from Artifact viewset has been deprecated and
  planned for removal.
  [#5525](https://github.com/pulp/pulpcore/issues/5525)

### Plugin API {: #3.59.0-plugin-api }

No significant changes.

### Pulp File {: #3.59.0-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.59.0-pulp-cert-guard }

No significant changes.

---

## 3.58.0 (2024-08-14) {: #3.58.0 }

### REST API {: #3.58.0-rest-api }

#### Features {: #3.58.0-rest-api-feature }

- Optimized replication to skip content syncing when upstream distributions are unchanged. The
  optimization considers changes on the upstream distributions serving content directly from a
  publication or repository version.
  [#5493](https://github.com/pulp/pulpcore/issues/5493)
- Exposed the `no_content_change_since` field on the Distribution API endpoint to return a timestamp
  since when the distributed content served by a distribution has not changed. If the value equals to
  `null`, no such a guarantee about the content change is given.
  [#5687](https://github.com/pulp/pulpcore/issues/5687)

#### Bugfixes {: #3.58.0-rest-api-bugfix }

- Fixed RBAC permissions being incorrectly assigned in tasks that create objects.
  https://access.redhat.com/security/cve/cve-2024-7143
  [#5683](https://github.com/pulp/pulpcore/issues/5683)

### Plugin API {: #3.58.0-plugin-api }

No significant changes.

### Pulp File {: #3.58.0-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.58.0-pulp-cert-guard }

No significant changes.

---

## 3.57.1 (2024-08-10) {: #3.57.1 }

### REST API {: #3.57.1-rest-api }

#### Bugfixes {: #3.57.1-rest-api-bugfix }

- Fixed RBAC permissions being incorrectly assigned in tasks that create objects.
  https://access.redhat.com/security/cve/cve-2024-7143
  [#5683](https://github.com/pulp/pulpcore/issues/5683)

### Plugin API {: #3.57.1-plugin-api }

No significant changes.

### Pulp File {: #3.57.1-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.57.1-pulp-cert-guard }

No significant changes.

---

## 3.57.0 (2024-08-07) {: #3.57.0 }

### REST API {: #3.57.0-rest-api }

#### Features {: #3.57.0-rest-api-feature }

- Added the ability to save task's diagnostics data as artifacts. These artifacts are available at the
  task's detail endpoint. To download them, issue a GET request to `${TASK_HREF}profile_artifacts/`.
  The artifacts are cleaned up automatically by the orphan cleanup.
  [#5422](https://github.com/pulp/pulpcore/issues/5422)
- Improved performance when handling tasks by deferred loading of encrypted args.
  This also allows seeing and purging tasks in case the symmetric db key was lost.

#### Bugfixes {: #3.57.0-rest-api-bugfix }

- Implemented batching for artifact deletion to handle the reclaim space task for large repositories.
  [#5635](https://github.com/pulp/pulpcore/issues/5635)
- Fixed urlizing of api hrefs in clickable api.
  [#5664](https://github.com/pulp/pulpcore/issues/5664)

#### Improved Documentation {: #3.57.0-rest-api-doc }

- Updated REMOTE-USER header definition (to use hyphen, instead of underscore) due
  to gunicorn version update blocking its usage for security purposes.
  [#5478](https://github.com/pulp/pulpcore/issues/5478)

### Plugin API {: #3.57.0-plugin-api }

#### Bugfixes {: #3.57.0-plugin-api-bugfix }

- Change field name `url` to `file_url` on UploadSerializerFieldsMixin to avoid conflicting fields in
  plugins.
  [#5633](https://github.com/pulp/pulpcore/issues/5633)

### Pulp File {: #3.57.0-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.57.0-pulp-cert-guard }

No significant changes.

---

## 3.56.1 (2024-07-26) {: #3.56.1 }


### REST API {: #3.56.1-rest-api }

No significant changes.

### Plugin API {: #3.56.1-plugin-api }

#### Bugfixes {: #3.56.1-plugin-api-bugfix }

- Change field name `url` to `file_url` on UploadSerializerFieldsMixin to avoid conflicting fields in
  plugins.
  [#5633](https://github.com/pulp/pulpcore/issues/5633)

### Pulp File {: #3.56.1-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.56.1-pulp-cert-guard }

No significant changes.

---

## 3.56.0 (2024-07-23) {: #3.56.0 }


### REST API {: #3.56.0-rest-api }

#### Features {: #3.56.0-rest-api-feature }

- Added kafka integration (tech-preview).
  [#5337](https://github.com/pulp/pulpcore/issues/5337)
- Added RBAC for `TaskGroups` API.
  [#5497](https://github.com/pulp/pulpcore/issues/5497)

#### Bugfixes {: #3.56.0-rest-api-bugfix }

- Fixed path title at content directory index to include domain's name when enabled.
  [#4253](https://github.com/pulp/pulpcore/issues/4253)
- Fixed content upload for existing on-demand content not properly storing the new artifact.
  [#5501](https://github.com/pulp/pulpcore/issues/5501)
- Fixed openapi command where plugins relied on CONTENT_ORIGIN to be set.
  [#5510](https://github.com/pulp/pulpcore/issues/5510)
- Added a note about the default value of the `SECRET_KEY` setting.
  [#5529](https://github.com/pulp/pulpcore/issues/5529)
- Browsable HREFs now have clickable links again.
  [#5563](https://github.com/pulp/pulpcore/issues/5563)
- Fixed a bug in `has_repo_or_repo_ver_param_model_or_obj_perms` function to make
  it work with plugin Repositories.
  [#5619](https://github.com/pulp/pulpcore/issues/5619)

### Plugin API {: #3.56.0-plugin-api }

#### Features {: #3.56.0-plugin-api-feature }

- Added new `url` field to UploadSerializerFieldsMixin that will download the file used for the content upload task.
  [#4608](https://github.com/pulp/pulpcore/issues/4608)

### Pulp File {: #3.56.0-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.56.0-pulp-cert-guard }

No significant changes.

---

## 3.55.3 (2024-07-23) {: #3.55.3 }


### REST API {: #3.55.3-rest-api }

#### Bugfixes {: #3.55.3-rest-api-bugfix }

- Fixed a bug in `has_repo_or_repo_ver_param_model_or_obj_perms` function to make
  it work with plugin Repositories.
  [#5619](https://github.com/pulp/pulpcore/issues/5619)

### Plugin API {: #3.55.3-plugin-api }

No significant changes.

### Pulp File {: #3.55.3-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.55.3-pulp-cert-guard }

No significant changes.

---

## 3.55.2 (2024-07-16) {: #3.55.2 }


### REST API {: #3.55.2-rest-api }

#### Bugfixes {: #3.55.2-rest-api-bugfix }

- Browsable HREFs now have clickable links again.
  [#5563](https://github.com/pulp/pulpcore/issues/5563)

### Plugin API {: #3.55.2-plugin-api }

No significant changes.

### Pulp File {: #3.55.2-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.55.2-pulp-cert-guard }

No significant changes.

---

## 3.55.1 (2024-06-24) {: #3.55.1 }


### REST API {: #3.55.1-rest-api }

#### Bugfixes {: #3.55.1-rest-api-bugfix }

- Fixed openapi command where plugins relied on CONTENT_ORIGIN to be set.
  [#5510](https://github.com/pulp/pulpcore/issues/5510)

### Plugin API {: #3.55.1-plugin-api }

No significant changes.

### Pulp File {: #3.55.1-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.55.1-pulp-cert-guard }

No significant changes.

---

## 3.55.0 (2024-06-18) {: #3.55.0 }


### REST API {: #3.55.0-rest-api }

#### Features {: #3.55.0-rest-api-feature }

- Added two new metrics related to Tasks: `pulp_tasks_unblocked_waiting_queue` has the number of unblocked waiting tasks that have been waiting longer than five(5) seconds,
  while `pulp_tasks_longest_unblocked_waiting_time` record the time in seconds of the longest waiting time for a task in the queue.
  [#3821](https://github.com/pulp/pulpcore/issues/3821)
- Added indices to `object_id` on user and group roles tables.
  [#5369](https://github.com/pulp/pulpcore/issues/5369)
- Add `pulpcore-manager openapi` command to help generate `api.json` for bindings.
  [#5462](https://github.com/pulp/pulpcore/issues/5462)

#### Bugfixes {: #3.55.0-rest-api-bugfix }

- Added Pulp side batching to fix large exports that were failing due to changes in psycopg.
  [#5375](https://github.com/pulp/pulpcore/issues/5375)
- Added a lock to avoid multiple workers sending metrics at the same time.
  [#5442](https://github.com/pulp/pulpcore/issues/5442)
- Pulpcore no longer assumes that every plugin implementing the Replication feature supports
  Publications.
  [#5464](https://github.com/pulp/pulpcore/issues/5464)

#### Removals {: #3.55.0-rest-api-removal }

- Removed ``pulp_hrefs`` from task reserved resources record. Task resource locking will now use Pulp
  Resource Names (PRNs) that are immutable with respect to settings changes. A resource's ``pulp_href``
  can still be used in task's ``reserved_resources`` filter, Pulp will convert it to the new format
  behind the scenes.
  [#5148](https://github.com/pulp/pulpcore/issues/5148)
- Removed task's ``reserved_resources_record`` filter. Please use ``reserved_resources`` instead.
  [#5415](https://github.com/pulp/pulpcore/issues/5415)
- Removed deprecated `plugin` query string parameter from api doc endpoint.
  Please use a list of app labels with the `component` parameter instead.
- Upgrade the version of drf spectacular to 0.27.2.

#### Misc {: #3.55.0-rest-api-misc }

- [#5420](https://github.com/pulp/pulpcore/issues/5420), [#5468](https://github.com/pulp/pulpcore/issues/5468)

### Plugin API {: #3.55.0-plugin-api }

#### Removals {: #3.55.0-plugin-api-removal }

- Removed deprecated functional test fixtures for api clients.
  The new `pulpcore_bindings`, `file_bindings`, ... fixtures should be used instead.
  [#5417](https://github.com/pulp/pulpcore/issues/5417)

### Pulp File {: #3.55.0-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.55.0-pulp-cert-guard }

No significant changes.

---

## 3.54.1 (2024-06-18) {: #3.54.1 }


### REST API {: #3.54.1-rest-api }

#### Bugfixes {: #3.54.1-rest-api-bugfix }

- Pulpcore no longer assumes that every plugin implementing the Replication feature supports
  Publications.
  [#5464](https://github.com/pulp/pulpcore/issues/5464)

#### Misc {: #3.54.1-rest-api-misc }

- [#5462](https://github.com/pulp/pulpcore/issues/5462)

### Plugin API {: #3.54.1-plugin-api }

No significant changes.

### Pulp File {: #3.54.1-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.54.1-pulp-cert-guard }

No significant changes.

---

## 3.54.0 (2024-05-22) {: #3.54.0 }

### REST API

#### Features

-   Added search indices to the Task table to speed up task operations.
    [#5367](https://github.com/pulp/pulpcore/issues/5367)
-   Added a scheduled version of task purge.
    You need to adjust the "TASK_PROTECTION_TIME" setting in order to use it.
    [#5378](https://github.com/pulp/pulpcore/issues/5378)

#### Bugfixes

-   Renamed `name` to `domain_name` in the metric's attributes reporting domain's disk usage.
    [#5134](https://github.com/pulp/pulpcore/issues/5134)
-   Fixed content directory listing returning 500 in certain scenarios due to missing artifact sizes.
    [#5318](https://github.com/pulp/pulpcore/issues/5318)
-   Fixed a bug related to replication of AppStream and BaseOS repositories of CentOS.
    [#5358](https://github.com/pulp/pulpcore/issues/5358)
-   Stopped deleting content and artifacts presumably created by later failed or canceled tasks.
    Deleting these lies solely in the responsibility of orphan cleanup.
    [#5363](https://github.com/pulp/pulpcore/issues/5363)

#### Improved Documentation

-   Made the complex filtering feature production-ready. This feature supports a special q filter
    that allows combinations of other filters with NOT, AND and OR operations.
    [#5319](https://github.com/pulp/pulpcore/issues/5319)

### Plugin API

No significant changes.

### Pulp File

No significant changes.

### Pulp Cert Guard

No significant changes.

---

## 3.53.0 (2024-04-30) {: #3.53.0 }

### REST API

#### Features

-   Added integration with Sentry/GlitchTip.
    [#5285](https://github.com/pulp/pulpcore/issues/5285)

#### Bugfixes

-   Update jquery version from 3.5.1 to 3.7.1 in API.html template
    [#5306](https://github.com/pulp/pulpcore/issues/5306)

### Plugin API

No significant changes.

### Pulp File

No significant changes.

### Pulp Cert Guard

No significant changes.

---

## 3.52.0 (2024-04-23) {: #3.52.0 }

### REST API

#### Features

-   Added a Liveness API that can be used for the livenessProbe in k8s.
    [#5243](https://github.com/pulp/pulpcore/issues/5243)

#### Bugfixes

-   Fixed bug where Last-Modified header of packages in django-storages was being updated on duplicate
    uploads.
    [#5149](https://github.com/pulp/pulpcore/issues/5149)
-   Fixed bug which prevented the Pulp API usaging from a web browser
    [#5250](https://github.com/pulp/pulpcore/issues/5250)

#### Misc

-

### Plugin API

#### Bugfixes

-   Fixed a bug where models with auto assign permissions failed when no viewset was attached.
    [#5267](https://github.com/pulp/pulpcore/issues/5267)

### Pulp File

No significant changes.

### Pulp Cert Guard

No significant changes.

---

## 3.51.3 (2024-04-23) {: #3.51.3 }

### REST API

#### Bugfixes

-   Fixed bug which prevented the Pulp API usaging from a web browser
    [#5250](https://github.com/pulp/pulpcore/issues/5250)

### Plugin API

No significant changes.

### Pulp File

No significant changes.

### Pulp Cert Guard

No significant changes.

---

## 3.51.2 (2024-04-17) {: #3.51.2 }

### REST API

No significant changes.

### Plugin API

No significant changes.

### Pulp File

No significant changes.

### Pulp Cert Guard

No significant changes.

---

## 3.51.1 (2024-04-17) {: #3.51.1 }

### REST API

No significant changes.

### Plugin API

#### Bugfixes

-   Fixed a bug where models with auto assign permissions failed when no viewset was attached.
    [#5267](https://github.com/pulp/pulpcore/issues/5267)

### Pulp File

No significant changes.

### Pulp Cert Guard

No significant changes.

---

## 3.51.0 (2024-04-16) {: #3.51.0 }

### REST API

#### Features

-   Add a new SecurityScheme for external authentication in the OpenAPI schema.
    [#5179](https://github.com/pulp/pulpcore/issues/5179)

#### Bugfixes

-   Fix Upload failing to run post create hooks.
    On installations using the default access policy, this fixes the automatic owner assignment for
    users with the core.upload_create role on upload objects.
    [#5199](https://github.com/pulp/pulpcore/issues/5199)
-   Catch any DatabaseError, not only OperationalError to trigger reconnect to the database
    [#5259](https://github.com/pulp/pulpcore/issues/5259)

#### Misc

-   [#4592](https://github.com/pulp/pulpcore/issues/4592), [#5010](https://github.com/pulp/pulpcore/issues/5010)

### Plugin API

No significant changes.

### Pulp File

No significant changes.

### Pulp Cert Guard

No significant changes.

---

## 3.50.3 (2024-04-16) {: #3.50.3 }

### REST API

#### Bugfixes

-   Fix Upload failing to run post create hooks.
    On installations using the default access policy, this fixes the automatic owner assignment for
    users with the core.upload_create role on upload objects.
    [#5199](https://github.com/pulp/pulpcore/issues/5199)
-   Catch any DatabaseError, not only OperationalError to trigger reconnect to the database
    [#5259](https://github.com/pulp/pulpcore/issues/5259)

### Plugin API

No significant changes.

### Pulp File

No significant changes.

### Pulp Cert Guard

No significant changes.

---

## 3.50.2 (2024-04-09) {: #3.50.2 }

### REST API

#### Misc

-   [#5010](https://github.com/pulp/pulpcore/issues/5010)

### Plugin API

No significant changes.

### Pulp File

No significant changes.

### Pulp Cert Guard

No significant changes.

---

## 3.50.1 (2024-04-03) {: #3.50.1 }

### REST API

No significant changes.

### Plugin API

No significant changes.

### Pulp File

No significant changes.

### Pulp Cert Guard

No significant changes.

---

## 3.50.0 (2024-03-26) {: #3.50.0 }

### REST API

#### Bugfixes

-   Fixed an issue in replicate, where an existing distribution had a conflicting publication set.
    [#4637](https://github.com/pulp/pulpcore/issues/4637)
-   Fixed content directory listing not showing file size for 0-byte files.
    [#5100](https://github.com/pulp/pulpcore/issues/5100)

#### Deprecations

-   Task filter `reserved_resources_record` has been deprecated and planned for removal in pulpcore 3.55.
    [#4315](https://github.com/pulp/pulpcore/issues/4315)

#### Misc

-   [#4315](https://github.com/pulp/pulpcore/issues/4315)

### Plugin API

No significant changes.

### Pulp File

No significant changes.

### Pulp Cert Guard

No significant changes.

---

## 3.49.58 (2026-04-14) {: #3.49.58 }

### REST API {: #3.49.58-rest-api }

#### Bugfixes {: #3.49.58-rest-api-bugfix }

- Fixed `reset-admin-password` command failing when using `--random` option on Django 5.
  [#7533](https://github.com/pulp/pulpcore/issues/7533)

### Plugin API {: #3.49.58-plugin-api }

No significant changes.

### Pulp File {: #3.49.58-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.49.58-pulp-cert-guard }

No significant changes.

---

## 3.49.57 (2026-03-24) {: #3.49.57 }

### REST API {: #3.49.57-rest-api }

No significant changes.

### Plugin API {: #3.49.57-plugin-api }

No significant changes.

### Pulp File {: #3.49.57-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.49.57-pulp-cert-guard }

No significant changes.

---

## 3.49.56 (2026-03-17) {: #3.49.56 }

### REST API {: #3.49.56-rest-api }

#### Bugfixes {: #3.49.56-rest-api-bugfix }

- Fixed duplicate chunk uploads corrupting the entire upload
  [#6381](https://github.com/pulp/pulpcore/issues/6381)
- Clean up on-demand temporary file left over on an aborted download.
  [#6975](https://github.com/pulp/pulpcore/issues/6975)
- Fixed metadata artifacts being re-uploaded to storage when creating a publication for an already-published repository version.
  [#7344](https://github.com/pulp/pulpcore/issues/7344)

### Plugin API {: #3.49.56-plugin-api }

No significant changes.

### Pulp File {: #3.49.56-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.49.56-pulp-cert-guard }

No significant changes.

---

## 3.49.55 (2026-03-10) {: #3.49.55 }

### REST API {: #3.49.55-rest-api }

#### Bugfixes {: #3.49.55-rest-api-bugfix }

- Moved artifact checksum validation from module-level settings code to a Django system check.
  [#7380](https://github.com/pulp/pulpcore/issues/7380)
- Fixed the url of the generated openapi schemas when using `pulpcore-manager openapi`.

### Plugin API {: #3.49.55-plugin-api }

No significant changes.

### Pulp File {: #3.49.55-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.49.55-pulp-cert-guard }

No significant changes.

---

## 3.49.54 (2026-03-06) {: #3.49.54 }

### REST API {: #3.49.54-rest-api }

No significant changes.

### Plugin API {: #3.49.54-plugin-api }

No significant changes.

### Pulp File {: #3.49.54-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.49.54-pulp-cert-guard }

No significant changes.

---

## 3.49.53 (2026-03-03) {: #3.49.53 }

### REST API {: #3.49.53-rest-api }

No significant changes.

### Plugin API {: #3.49.53-plugin-api }

No significant changes.

### Pulp File {: #3.49.53-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.49.53-pulp-cert-guard }

No significant changes.

---

## 3.49.52 (2026-02-25) {: #3.49.52 }

### REST API {: #3.49.52-rest-api }

No significant changes.

### Plugin API {: #3.49.52-plugin-api }

No significant changes.

### Pulp File {: #3.49.52-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.49.52-pulp-cert-guard }

No significant changes.

---

## 3.49.51 (2026-02-24) {: #3.49.51 }

### REST API {: #3.49.51-rest-api }

#### Bugfixes {: #3.49.51-rest-api-bugfix }

- Fixed not supporting the new rename of the S3 storage backend.
  [#7228](https://github.com/pulp/pulpcore/issues/7228)

### Plugin API {: #3.49.51-plugin-api }

No significant changes.

### Pulp File {: #3.49.51-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.49.51-pulp-cert-guard }

No significant changes.

---

## 3.49.50 (2026-02-10) {: #3.49.50 }

### REST API {: #3.49.50-rest-api }

#### Features {: #3.49.50-rest-api-feature }

- Adapted PulpImport/Export to allow update django-import-export==4.x.
  [#5324](https://github.com/pulp/pulpcore/issues/5324)
- Allow use of Django 5 as well as Django 4. Note the following breaking changes if upgrading to
  Django 5: storage configuration must use the new ``STORAGES`` format instead of
  ``DEFAULT_FILE_STORAGE``, Python >= 3.10 is required, and PostgreSQL >= 14 is required.
  [#6988](https://github.com/pulp/pulpcore/issues/6988)

### Plugin API {: #3.49.50-plugin-api }

No significant changes.

### Pulp File {: #3.49.50-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.49.50-pulp-cert-guard }

No significant changes.

---

## 3.49.49 (2025-12-22) {: #3.49.49 }

### REST API {: #3.49.49-rest-api }

No significant changes.

### Plugin API {: #3.49.49-plugin-api }

#### Bugfixes {: #3.49.49-plugin-api-bugfix }

- Exposed `RepositoryVersionSerializer` to the plugin API.
  In some cases a plugin might have used that serializer for a newer pulpcore version
  but it could also be installed with a lower pulpcore version.

### Pulp File {: #3.49.49-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.49.49-pulp-cert-guard }

No significant changes.

---

## 3.49.48 (2025-12-09) {: #3.49.48 }

### REST API {: #3.49.48-rest-api }

#### Misc {: #3.49.48-rest-api-misc }

- 

### Plugin API {: #3.49.48-plugin-api }

No significant changes.

### Pulp File {: #3.49.48-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.49.48-pulp-cert-guard }

No significant changes.

---

## 3.49.47 (2025-12-04) {: #3.49.47 }

### REST API {: #3.49.47-rest-api }

#### Bugfixes {: #3.49.47-rest-api-bugfix }

- pulp-worker fails to start with "float object cannot be interpreted as an integer" on some versions of python.
  [#5861](https://github.com/pulp/pulpcore/issues/5861)
- Fixed a bug in the pre-migration hook that prevented proper cleanup of all Pulp app db records (content, api, worker).

### Plugin API {: #3.49.47-plugin-api }

No significant changes.

### Pulp File {: #3.49.47-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.49.47-pulp-cert-guard }

No significant changes.

---

## 3.49.46 (2025-11-13) {: #3.49.46 }

### REST API {: #3.49.46-rest-api }

No significant changes.

### Plugin API {: #3.49.46-plugin-api }

#### Bugfixes {: #3.49.46-plugin-api-bugfix }

- Fixed NoArtifactContentUploadViewSet/Serializer breaking when using the `artifact`, `upload` or `file_url` fields.

### Pulp File {: #3.49.46-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.49.46-pulp-cert-guard }

No significant changes.

---

## 3.49.45 (2025-09-09) {: #3.49.45 }

### REST API {: #3.49.45-rest-api }

No significant changes.

### Plugin API {: #3.49.45-plugin-api }

No significant changes.

### Pulp File {: #3.49.45-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.49.45-pulp-cert-guard }

No significant changes.

---

## 3.49.44 (2025-07-02) {: #3.49.44 }

### REST API {: #3.49.44-rest-api }

No significant changes.

### Plugin API {: #3.49.44-plugin-api }

No significant changes.

### Pulp File {: #3.49.44-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.49.44-pulp-cert-guard }

No significant changes.

---

## 3.49.43 (2025-06-24) {: #3.49.43 }

### REST API {: #3.49.43-rest-api }

No significant changes.

### Plugin API {: #3.49.43-plugin-api }

No significant changes.

### Pulp File {: #3.49.43-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.49.43-pulp-cert-guard }

No significant changes.

---

## 3.49.42 (2025-05-21) {: #3.49.42 }

### REST API {: #3.49.42-rest-api }

No significant changes.

### Plugin API {: #3.49.42-plugin-api }

No significant changes.

### Pulp File {: #3.49.42-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.49.42-pulp-cert-guard }

No significant changes.

---

## 3.49.41 (2025-05-13) {: #3.49.41 }

### REST API {: #3.49.41-rest-api }

#### Bugfixes {: #3.49.41-rest-api-bugfix }

- Disable retry logic on the context of content-app on-demand streaming, as we can't recover
  from any errors after starting the streaming process (chunked transfer).
  [#5937](https://github.com/pulp/pulpcore/issues/5937)

### Plugin API {: #3.49.41-plugin-api }

No significant changes.

### Pulp File {: #3.49.41-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.49.41-pulp-cert-guard }

No significant changes.

---

## 3.49.40 (2025-05-06) {: #3.49.40 }

### REST API {: #3.49.40-rest-api }

#### Bugfixes {: #3.49.40-rest-api-bugfix }

- Fixed to not use the OpenTelemetryMiddleware when PULP_OTEL_ENABLED is not set.
  [#6529](https://github.com/pulp/pulpcore/issues/6529)

### Plugin API {: #3.49.40-plugin-api }

No significant changes.

### Pulp File {: #3.49.40-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.49.40-pulp-cert-guard }

No significant changes.

---

## 3.49.39 (2025-04-24) {: #3.49.39 }

### REST API {: #3.49.39-rest-api }

#### Bugfixes {: #3.49.39-rest-api-bugfix }

- Reverted fix for #6491, it broke certificate-chains.
  [#6510](https://github.com/pulp/pulpcore/issues/6510)

### Plugin API {: #3.49.39-plugin-api }

No significant changes.

### Pulp File {: #3.49.39-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.49.39-pulp-cert-guard }

No significant changes.

---

## 3.49.38 (2025-04-23) {: #3.49.38 }

### REST API {: #3.49.38-rest-api }

#### Bugfixes {: #3.49.38-rest-api-bugfix }

- Fixed a memory consumption issue that was triggered by the use of the Alternate Content Source feature.
  [#6500](https://github.com/pulp/pulpcore/issues/6500)

### Plugin API {: #3.49.38-plugin-api }

No significant changes.

### Pulp File {: #3.49.38-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.49.38-pulp-cert-guard }

No significant changes.

---

## 3.49.37 (2025-04-22) {: #3.49.37 }

### REST API {: #3.49.37-rest-api }

#### Bugfixes {: #3.49.37-rest-api-bugfix }

- Client- and CA-certificates used in Remotes are now validated and any comments stripped
  before being applied to the Remote.
  [#6491](https://github.com/pulp/pulpcore/issues/6491)

### Plugin API {: #3.49.37-plugin-api }

No significant changes.

### Pulp File {: #3.49.37-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.49.37-pulp-cert-guard }

No significant changes.

---

## 3.49.36 (2025-04-08) {: #3.49.36 }

### REST API {: #3.49.36-rest-api }

#### Bugfixes {: #3.49.36-rest-api-bugfix }

- Fixed an oversight in the #6385 fix.

### Plugin API {: #3.49.36-plugin-api }

No significant changes.

### Pulp File {: #3.49.36-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.49.36-pulp-cert-guard }

No significant changes.

---

## 3.49.35 (2025-04-02) {: #3.49.35 }

### REST API {: #3.49.35-rest-api }

#### Bugfixes {: #3.49.35-rest-api-bugfix }

- Fixes the Remote configuration of timeouts to properly fallback to aiohttp defaults if they are unset by the user.
  [#5439](https://github.com/pulp/pulpcore/issues/5439)
- Fixed pull-through caching failure when content already existed on-demand.
  [#6385](https://github.com/pulp/pulpcore/issues/6385)
- Fixed cross-domain check for RepositoryVersion fields.
  [#6388](https://github.com/pulp/pulpcore/issues/6388)

### Plugin API {: #3.49.35-plugin-api }

No significant changes.

### Pulp File {: #3.49.35-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.49.35-pulp-cert-guard }

No significant changes.

---

## 3.49.34 (2025-03-18) {: #3.49.34 }

### REST API {: #3.49.34-rest-api }

#### Bugfixes {: #3.49.34-rest-api-bugfix }

- Fixed cache not being invalidated when a publication was created or a repository version was deleted.
  [#6333](https://github.com/pulp/pulpcore/issues/6333)
- The Alternate Content Source sync feature has received some optimizations, making it dramatically faster.

### Plugin API {: #3.49.34-plugin-api }

No significant changes.

### Pulp File {: #3.49.34-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.49.34-pulp-cert-guard }

No significant changes.

---

## 3.49.33 (2025-03-03) {: #3.49.33 }

### REST API {: #3.49.33-rest-api }

#### Misc {: #3.49.33-rest-api-misc }

- [#6225](https://github.com/pulp/pulpcore/issues/6225)

### Plugin API {: #3.49.33-plugin-api }

No significant changes.

### Pulp File {: #3.49.33-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.49.33-pulp-cert-guard }

No significant changes.

---

## 3.49.32 (2025-01-29) {: #3.49.32 }

### REST API {: #3.49.32-rest-api }

#### Bugfixes {: #3.49.32-rest-api-bugfix }

- Added an extra check to the task unblocking logic to catch a rare case of stuck tasks in running, but never unblocked.
  Tasks in normal operation should never end in this state, but at least with a specific upgrade it can happen.
  [#6225](https://github.com/pulp/pulpcore/issues/6225)

### Plugin API {: #3.49.32-plugin-api }

No significant changes.

### Pulp File {: #3.49.32-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.49.32-pulp-cert-guard }

No significant changes.

---

## 3.49.31 (2025-01-21) {: #3.49.31 }

### REST API {: #3.49.31-rest-api }

#### Bugfixes {: #3.49.31-rest-api-bugfix }

- On a request for on-demand content in the content app, a corrupted Remote that
  contains the wrong binary (for that content) prevented other Remotes from being
  attempted on future requests. Now the last failed Remotes are temporarily ignored
  and others may be picked.
  [#5725](https://github.com/pulp/pulpcore/issues/5725)

### Plugin API {: #3.49.31-plugin-api }

No significant changes.

### Pulp File {: #3.49.31-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.49.31-pulp-cert-guard }

No significant changes.

---

## 3.49.30 (2025-01-08) {: #3.49.30 }

### REST API {: #3.49.30-rest-api }

No significant changes.

### Plugin API {: #3.49.30-plugin-api }

No significant changes.

### Pulp File {: #3.49.30-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.49.30-pulp-cert-guard }

No significant changes.

---

## 3.49.29 (2024-12-18) {: #3.49.29 }

### REST API {: #3.49.29-rest-api }

No significant changes.

### Plugin API {: #3.49.29-plugin-api }

No significant changes.

### Pulp File {: #3.49.29-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.49.29-pulp-cert-guard }

No significant changes.

---

## 3.49.28 (2024-12-13) {: #3.49.28 }

### REST API {: #3.49.28-rest-api }

No significant changes.

### Plugin API {: #3.49.28-plugin-api }

No significant changes.

### Pulp File {: #3.49.28-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.49.28-pulp-cert-guard }

No significant changes.

---

## 3.49.27 (2024-12-07) {: #3.49.27 }

### REST API {: #3.49.27-rest-api }

No significant changes.

### Plugin API {: #3.49.27-plugin-api }

#### Bugfixes {: #3.49.27-plugin-api-bugfix }

- Fixed `GetOrCreateSerializerMixin` not accepting pulp_domain for the natural key creation.
  [#domain-get-create-serializer-mixin](https://github.com/pulp/pulpcore/issues/domain-get-create-serializer-mixin)

### Pulp File {: #3.49.27-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.49.27-pulp-cert-guard }

No significant changes.

---

## 3.49.26 (2024-11-29) {: #3.49.26 }

### REST API {: #3.49.26-rest-api }

No significant changes.

### Plugin API {: #3.49.26-plugin-api }

No significant changes.

### Pulp File {: #3.49.26-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.49.26-pulp-cert-guard }

No significant changes.

---

## 3.49.25 (2024-11-26) {: #3.49.25 }

### REST API {: #3.49.25-rest-api }

#### Bugfixes {: #3.49.25-rest-api-bugfix }

- Fixed content-app behavior for the case where the client would get a 200 response for a package
  streamed from a Remote which did not match the expected checksum.
  Now, the connection is closed before finalizing the response.
  [#5012](https://github.com/pulp/pulpcore/issues/5012)
- Fixed content directory listing returning 500 in certain scenarios due to missing artifact sizes.
  [#5318](https://github.com/pulp/pulpcore/issues/5318)
- Allowed to bind api and content workers to multiple addresses.
  You can specify `--bind` multiple times on the `pulpcore-{api,content}` entrypoints.
  [#6053](https://github.com/pulp/pulpcore/issues/6053)

### Plugin API {: #3.49.25-plugin-api }

No significant changes.

### Pulp File {: #3.49.25-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.49.25-pulp-cert-guard }

No significant changes.

---

## 3.49.24 (2024-11-12) {: #3.49.24 }

### REST API {: #3.49.24-rest-api }

#### Bugfixes {: #3.49.24-rest-api-bugfix }

- Fixed an assertion on all content being added/removed in a repository version is of the same domain.
  [#content-assert](https://github.com/pulp/pulpcore/issues/content-assert)
- On the content-app, added ClientConnectionError (aiohttp) as an exception that can trigger
  a retry when streaming content from a Remote.
  [#5967](https://github.com/pulp/pulpcore/issues/5967)

### Plugin API {: #3.49.24-plugin-api }

No significant changes.

### Pulp File {: #3.49.24-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.49.24-pulp-cert-guard }

No significant changes.

---

## 3.49.23 (2024-11-06) {: #3.49.23 }

### REST API {: #3.49.23-rest-api }

#### Bugfixes {: #3.49.23-rest-api-bugfix }

- Fixed repository modify allowing content from separate domains.
  [#5934](https://github.com/pulp/pulpcore/issues/5934)
- Fixed the JSONField specification so it doesn't break ruby bindings.
  See context [here](https://github.com/pulp/pulp_rpm/issues/3639).

### Plugin API {: #3.49.23-plugin-api }

#### Bugfixes {: #3.49.23-plugin-api-bugfix }

- Downloaders now always ensure the download ends up under `WORKING_DIRECTORY`.
  [#5912](https://github.com/pulp/pulpcore/issues/5912)

### Pulp File {: #3.49.23-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.49.23-pulp-cert-guard }

No significant changes.

---

## 3.49.22 (2024-10-17) {: #3.49.22 }

### REST API {: #3.49.22-rest-api }

#### Bugfixes {: #3.49.22-rest-api-bugfix }

- pass envvars to Signing Scripts to access GNUPGHOME
  [#5911](https://github.com/pulp/pulpcore/issues/5911)

### Plugin API {: #3.49.22-plugin-api }

No significant changes.

### Pulp File {: #3.49.22-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.49.22-pulp-cert-guard }

No significant changes.

---

## 3.49.21 (2024-10-09) {: #3.49.21 }

### REST API {: #3.49.21-rest-api }

No significant changes.

### Plugin API {: #3.49.21-plugin-api }

No significant changes.

### Pulp File {: #3.49.21-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.49.21-pulp-cert-guard }

No significant changes.

---

## 3.49.20 (2024-09-18) {: #3.49.20 }

### REST API {: #3.49.20-rest-api }

No significant changes.

### Plugin API {: #3.49.20-plugin-api }

No significant changes.

### Pulp File {: #3.49.20-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.49.20-pulp-cert-guard }

No significant changes.

---

## 3.49.19 (2024-09-03) {: #3.49.19 }

### REST API {: #3.49.19-rest-api }

No significant changes.

### Plugin API {: #3.49.19-plugin-api }

No significant changes.

### Pulp File {: #3.49.19-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.49.19-pulp-cert-guard }

No significant changes.

---

## 3.49.18 (2024-08-28) {: #3.49.18 }

### REST API {: #3.49.18-rest-api }

#### Bugfixes {: #3.49.18-rest-api-bugfix }

- Fixed urlizing of api hrefs in clickable api.
  [#5664](https://github.com/pulp/pulpcore/issues/5664)

### Plugin API {: #3.49.18-plugin-api }

No significant changes.

### Pulp File {: #3.49.18-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.49.18-pulp-cert-guard }

No significant changes.

---

## 3.49.17 (2024-08-10) {: #3.49.17 }

### REST API {: #3.49.17-rest-api }

#### Bugfixes {: #3.49.17-rest-api-bugfix }

- Fixed RBAC permissions being incorrectly assigned in tasks that create objects.
  https://access.redhat.com/security/cve/cve-2024-7143
  [#5683](https://github.com/pulp/pulpcore/issues/5683)

### Plugin API {: #3.49.17-plugin-api }

No significant changes.

### Pulp File {: #3.49.17-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.49.17-pulp-cert-guard }

No significant changes.

---

## 3.49.16 (2024-08-06) {: #3.49.16 }

### REST API {: #3.49.16-rest-api }

No significant changes.

### Plugin API {: #3.49.16-plugin-api }

No significant changes.

### Pulp File {: #3.49.16-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.49.16-pulp-cert-guard }

No significant changes.

---

## 3.49.15 (2024-07-23) {: #3.49.15 }


### REST API {: #3.49.15-rest-api }

#### Bugfixes {: #3.49.15-rest-api-bugfix }

- Fixed a bug in `has_repo_or_repo_ver_param_model_or_obj_perms` function to make
  it work with plugin Repositories.
  [#5619](https://github.com/pulp/pulpcore/issues/5619)

### Plugin API {: #3.49.15-plugin-api }

No significant changes.

### Pulp File {: #3.49.15-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.49.15-pulp-cert-guard }

No significant changes.

---

## 3.49.14 (2024-07-16) {: #3.49.14 }


### REST API {: #3.49.14-rest-api }

#### Bugfixes {: #3.49.14-rest-api-bugfix }

- Browsable HREFs now have clickable links again.
  [#5563](https://github.com/pulp/pulpcore/issues/5563)

### Plugin API {: #3.49.14-plugin-api }

No significant changes.

### Pulp File {: #3.49.14-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.49.14-pulp-cert-guard }

No significant changes.

---

## 3.49.13 (2024-07-02) {: #3.49.13 }


### REST API {: #3.49.13-rest-api }

#### Bugfixes {: #3.49.13-rest-api-bugfix }

- Update jquery version from 3.5.1 to 3.7.1 in API.html template
  [#5306](https://github.com/pulp/pulpcore/issues/5306)

### Plugin API {: #3.49.13-plugin-api }

No significant changes.

### Pulp File {: #3.49.13-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.49.13-pulp-cert-guard }

No significant changes.

---

## 3.49.12 (2024-06-24) {: #3.49.12 }


### REST API {: #3.49.12-rest-api }

#### Bugfixes {: #3.49.12-rest-api-bugfix }

- Fixed openapi command where plugins relied on CONTENT_ORIGIN to be set.
  [#5510](https://github.com/pulp/pulpcore/issues/5510)

### Plugin API {: #3.49.12-plugin-api }

No significant changes.

### Pulp File {: #3.49.12-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.49.12-pulp-cert-guard }

No significant changes.

---

## 3.49.11 (2024-06-18) {: #3.49.11 }


### REST API {: #3.49.11-rest-api }

#### Bugfixes {: #3.49.11-rest-api-bugfix }

- Pulpcore no longer assumes that every plugin implementing the Replication feature supports
  Publications.
  [#5464](https://github.com/pulp/pulpcore/issues/5464)

#### Misc {: #3.49.11-rest-api-misc }

- [#5462](https://github.com/pulp/pulpcore/issues/5462)

### Plugin API {: #3.49.11-plugin-api }

No significant changes.

### Pulp File {: #3.49.11-pulp-file }

No significant changes.

### Pulp Cert Guard {: #3.49.11-pulp-cert-guard }

No significant changes.

---

## 3.49.10 (2024-05-23) {: #3.49.10 }

### REST API

#### Bugfixes

-   Added Pulp side batching to fix large exports that were failing due to changes in psycopg.
    [#5375](https://github.com/pulp/pulpcore/issues/5375)

### Plugin API

No significant changes.

### Pulp File

No significant changes.

### Pulp Cert Guard

No significant changes.

---

## 3.49.9 (2024-05-22) {: #3.49.9 }

### REST API

No significant changes.

### Plugin API

No significant changes.

### Pulp File

No significant changes.

### Pulp Cert Guard

No significant changes.

---

## 3.49.8 (2024-05-16) {: #3.49.8 }

### REST API

#### Bugfixes

-   Stopped deleting content and artifacts presumably created by later failed or canceled tasks.
    Deleting these lies solely in the responsibility of orphan cleanup.
    [#5363](https://github.com/pulp/pulpcore/issues/5363)

### Plugin API

No significant changes.

### Pulp File

No significant changes.

### Pulp Cert Guard

No significant changes.

---

## 3.49.7 (2024-05-07) {: #3.49.7 }

### REST API

#### Bugfixes

-   Fixed bug which prevented the Pulp API usaging from a web browser
    [#5250](https://github.com/pulp/pulpcore/issues/5250)

### Plugin API

No significant changes.

### Pulp File

No significant changes.

### Pulp Cert Guard

No significant changes.

---

## 3.49.6 (2024-04-30) {: #3.49.6 }

### REST API

No significant changes.

### Plugin API

No significant changes.

### Pulp File

No significant changes.

### Pulp Cert Guard

No significant changes.

---

## 3.49.5 (2024-04-17) {: #3.49.5 }

### REST API

No significant changes.

### Plugin API

No significant changes.

### Pulp File

No significant changes.

### Pulp Cert Guard

No significant changes.

---

## 3.49.4 (2024-04-16) {: #3.49.4 }

### REST API

#### Bugfixes

-   Catch any DatabaseError, not only OperationalError to trigger reconnect to the database
    [#5259](https://github.com/pulp/pulpcore/issues/5259)

### Plugin API

No significant changes.

### Pulp File

No significant changes.

### Pulp Cert Guard

No significant changes.

---

## 3.49.3 (2024-03-27) {: #3.49.3 }

### REST API

#### Bugfixes

-   Fix import in wsgi preventing startup.
    [#5189](https://github.com/pulp/pulpcore/issues/5189)

### Plugin API

No significant changes.

### Pulp File

No significant changes.

### Pulp Cert Guard

No significant changes.

---

## 3.49.2 (2024-03-26) {: #3.49.2 }

### REST API

#### Bugfixes

-   Fixed an issue in replicate, where an existing distribution had a conflicting publication set.
    [#4637](https://github.com/pulp/pulpcore/issues/4637)

### Plugin API

No significant changes.

### Pulp File

No significant changes.

### Pulp Cert Guard

No significant changes.

---

## 3.49.1 (2024-03-19) {: #3.49.1 }

### REST API

#### Bugfixes

-   Fixed content directory listing not showing file size for 0-byte files.
    [#5100](https://github.com/pulp/pulpcore/issues/5100)

### Plugin API

No significant changes.

### Pulp File

No significant changes.

### Pulp Cert Guard

No significant changes.

---

## 3.49.0 (2024-03-05) {: #3.49.0 }

### REST API

No significant changes.

### Plugin API

#### Features

-   Added NoArtifactContentViewSet for content creation that does not require a file to be uploaded.
    [#5086](https://github.com/pulp/pulpcore/issues/5086)

### Pulp File

#### Misc

-   [#5055](https://github.com/pulp/pulpcore/issues/5055)

### Pulp Cert Guard

#### Misc

-   [#5054](https://github.com/pulp/pulpcore/issues/5054)

---

## 3.48.0 (2024-02-28) {: #3.48.0 }

### REST API

#### Features

-   Added a serializer to output pulp_last_updated field on pulp resources.
    [#5033](https://github.com/pulp/pulpcore/issues/5033)
-   Added `unblocked_at` to tasks to distingish waiting for other resources from waiting for a free worker.
    [#5057](https://github.com/pulp/pulpcore/issues/5057)

#### Bugfixes

-   Fixed a theoretical race condition leading to improper locking when dispatching tasks.
    [#5071](https://github.com/pulp/pulpcore/issues/5071)

### Plugin API

No significant changes.

### Pulp File

No significant changes.

### Pulp Cert Guard

No significant changes.

---

## 3.47.0 (2024-02-22) {: #3.47.0 }

### REST API

#### Features

-   Started emitting metrics that report disk usage within a domain. The metrics are sent to the
    collector every 60 seconds. The interval can be adjusted with the `OTEL_METRIC_EXPORT_INTERVAL`
    environemnt variable.
    [#4603](https://github.com/pulp/pulpcore/issues/4603)

### Plugin API

No significant changes.

### Pulp File

No significant changes.

### Pulp Cert Guard

No significant changes.

---

## 3.46.0 (2024-02-13) {: #3.46.0 }

### REST API

#### Bugfixes

-   Taught downloader to trust system-cert-store on HTTPS proxy connections.
    [#3036](https://github.com/pulp/pulpcore/issues/3036)
-   Fixed a warning that gets raised when cache is enabled: `RuntimeWarning: coroutine 'AsyncCache.delete' was never awaited`.
    [#4967](https://github.com/pulp/pulpcore/issues/4967)
-   Added a serializer validation for domain names with more than 50 characters.
    [#4976](https://github.com/pulp/pulpcore/issues/4976)

#### Misc

-   [#4589](https://github.com/pulp/pulpcore/issues/4589)

### Plugin API

#### Features

-   Exposed `TimeoutException` to plugin writers.
    [#5024](https://github.com/pulp/pulpcore/issues/5024)

### Pulp File

No significant changes.

### Pulp Cert Guard

No significant changes.

---

## 3.45.4 (2024-03-26) {: #3.45.4 }

### REST API

No significant changes.

### Plugin API

No significant changes.

### Pulp File

No significant changes.

### Pulp Cert Guard

No significant changes.

---

## 3.45.3 (2024-03-05) {: #3.45.3 }

### REST API

No significant changes.

### Plugin API

No significant changes.

### Pulp File

No significant changes.

### Pulp Cert Guard

No significant changes.

---

## 3.45.2 (2024-02-13) {: #3.45.2 }

### REST API

#### Misc

-   [#4589](https://github.com/pulp/pulpcore/issues/4589)

### Plugin API

No significant changes.

### Pulp File

No significant changes.

### Pulp Cert Guard

No significant changes.

---

## 3.45.1 (2024-01-30) {: #3.45.1 }

### REST API

#### Bugfixes

-   Fixed a warning that gets raised when cache is enabled: `RuntimeWarning: coroutine 'AsyncCache.delete' was never awaited`.
    [#4967](https://github.com/pulp/pulpcore/issues/4967)

### Plugin API

No significant changes.

### Pulp File

No significant changes.

### Pulp Cert Guard

No significant changes.

---

## 3.45.0 (2024-01-24) {: #3.45.0 }

### REST API

#### Features

-   Added `orphaned_for` filters to artifact and content endpoints to filter content that has been
    orphaned for a given number of minutes.
    [#3364](https://github.com/pulp/pulpcore/issues/3364)
-   Added `pulp-certguard` as a resident plugin.
    [#4626](https://github.com/pulp/pulpcore/issues/4626)

#### Bugfixes

-   Fixed a bug where publications couldn't be created from repository versions when using RBAC.
    [#4932](https://github.com/pulp/pulpcore/issues/4932)

### Plugin API

No significant changes.

### Pulp File

No significant changes.

### Pulp Cert Guard

No significant changes.

---

## 3.44.1 (2024-01-17) {: #3.44.1 }

### REST API

#### Bugfixes

-   Fixed a bug where publications couldn't be created from repository versions when using RBAC.
    [#4932](https://github.com/pulp/pulpcore/issues/4932)

### Plugin API

No significant changes.

### Pulp File

No significant changes.

---

## 3.44.0 (2024-01-16) {: #3.44.0 }

### REST API

#### Features

-   Added "module" to status api.
    [#4728](https://github.com/pulp/pulpcore/issues/4728)
-   Enabled the gunicorn applications for `pulpcore-api` and `pulpcore-content` to load configurations from the "gunicorn.conf.py" file.
    [#4917](https://github.com/pulp/pulpcore/issues/4917)

#### Bugfixes

-   Repo versions are now protected from deletion if they are being used by Pulp to distribute content.
    Users must first update any necessary distributions before deleting a protected repo version.
    [#2705](https://github.com/pulp/pulpcore/issues/2705)
-   Fixed a bug in the repository version repair API for non-default domains.
    [#4776](https://github.com/pulp/pulpcore/issues/4776),
    [#4806](https://github.com/pulp/pulpcore/issues/4806)
-   Fix a bug in import/export that could result in a division-by-zero during import.
    [#4777](https://github.com/pulp/pulpcore/issues/4777)
-   Ensure the Redis cache is actually respecting the TTL.
    [#4845](https://github.com/pulp/pulpcore/issues/4845)
-   Fixed an issue with importing async-timeout in Python 3.11.
    [#4923](https://github.com/pulp/pulpcore/issues/4923)
-   Fixed RBAC related bug where syncing a repository with a predefined remote required specifying the
    remote's HREF at sync time.
    [#4925](https://github.com/pulp/pulpcore/issues/4925)

#### Removals

-   The python package for the `file` plugin is now correctly reporting as `"pulpcore"`.
    [#4728](https://github.com/pulp/pulpcore/issues/4728)

#### Deprecations

-   Deprecated the query parameter `plugin` on the api doc endpoint in favor of `component`.
    [#4728](https://github.com/pulp/pulpcore/issues/4728)

#### Misc

-   [#4751](https://github.com/pulp/pulpcore/issues/4751), [#4850](https://github.com/pulp/pulpcore/issues/4850), [#4881](https://github.com/pulp/pulpcore/issues/4881)

### Plugin API

No significant changes.

### Pulp File

No significant changes.

---

## 3.43.3 (2024-01-16) {: #3.43.3 }

### REST API

#### Bugfixes

-   Fixed an issue with importing async-timeout in Python 3.11.
    [#4923](https://github.com/pulp/pulpcore/issues/4923)

### Plugin API

No significant changes.

### Pulp File

No significant changes.

---

## 3.43.2 (2024-01-09) {: #3.43.2 }

### REST API

#### Bugfixes

-   Fix a bug in import/export that could result in a division-by-zero during import.
    [#4777](https://github.com/pulp/pulpcore/issues/4777)

### Plugin API

No significant changes.

### Pulp File

No significant changes.

---

## 3.43.1 (2023-12-12) {: #3.43.1 }

### REST API

#### Bugfixes

-   Fixed a bug in the repository version repair API for non-default domains.
    [#4776](https://github.com/pulp/pulpcore/issues/4776),
    [#4806](https://github.com/pulp/pulpcore/issues/4806)

### Plugin API

No significant changes.

### Pulp File

No significant changes.

---

## 3.43.0 (2023-12-05) {: #3.43.0 }

### REST API

#### Features

-   Added a CompositeContentGuard, that manages a list-of ContentGuards and permits
    access to content if *ANY* guard permits.
    [#4583](https://github.com/pulp/pulpcore/issues/4583)

#### Bugfixes

-   Removed a race condition leading to 500 error in distribution filtering.
    [#4766](https://github.com/pulp/pulpcore/issues/4766)
-   Added missing database indices to the `RemoteArtifact` model.
    [#4835](https://github.com/pulp/pulpcore/issues/4835)

### Plugin API

#### Features

-   Added the async safe detail_model property to master detail models.
    [#4766](https://github.com/pulp/pulpcore/issues/4766)

### Pulp File

No significant changes.

---

## 3.42.0 (2023-11-28) {: #3.42.0 }

### REST API

#### Features

-   Added instrumentation to content-app to track telemetry data.
    [#3829](https://github.com/pulp/pulpcore/issues/3829)

#### Bugfixes

-   Fixed that pulp_file presented its python_package as pulp_file instead of pulp-file.
    [#4724](https://github.com/pulp/pulpcore/issues/4724)

### Plugin API

No significant changes.

### Pulp File

No significant changes.

## 3.41.1 (2023-11-21) {: #3.41.1 }

### REST API

#### Bugfixes

-   Fixed that pulp_file presented its python_package as pulp_file instead of pulp-file.
    [#4724](https://github.com/pulp/pulpcore/issues/4724)

### Plugin API

No significant changes.

### Pulp File

No significant changes.

## 3.41.0 (2023-11-14) {: #3.41.0 }

### REST API

#### Features

-   Added a `--restart` option to pulpcore worker. This requires "hupper" to be installed.
-   Added new management command `repository-size` that calculates the total size in bytes of files stored in repositories.
    [#2079](https://github.com/pulp/pulpcore/issues/2079)

#### Bugfixes

-   Closed the window when serializer.get_or_create could raise ObjectDoesnotExist.
    [#4648](https://github.com/pulp/pulpcore/issues/4648)
-   Restored the ability to set `--max-requests-jitter` on service entrypoints.
    [#4679](https://github.com/pulp/pulpcore/issues/4679)
-   Fix <file://> syncs deleting the original files.
    [#4681](https://github.com/pulp/pulpcore/issues/4681)

### Plugin API

#### Features

-   Exposed a function to return a batch from a given queryset at `pulpcore.plugin.util.batch_qs`.
    [#4607](https://github.com/pulp/pulpcore/issues/4607)
-   Added content app feature to accept a `ContentArtifact` from `content_handler` so that the
    plugin writer no longer has to generate a response when dealing with `ContentArtifacts`.
    [#4635](https://github.com/pulp/pulpcore/issues/4635)

#### Bugfixes

-   Added ADD_TRAILING_SLASH property to AsyncContentCache. The default value is True. By default,
    AsyncContentCache will call into Handler._match_distribution(path, add_trailing_slash=True). If the
    meaning of the Distribution's base_path changes when a trailing slash is added, this method will not
    match such a Distribution. In this case, AsyncContentCache.ADD_TRAILING_SLASH should be set to
    False.
    [#4634](https://github.com/pulp/pulpcore/issues/4634)
-   Fixed how Distribution.content_handler() is called in the content app.
    [#4644](https://github.com/pulp/pulpcore/issues/4644)
-   Fixed content app returning 404s on directory index pages for some published plugins.
    [#4654](https://github.com/pulp/pulpcore/issues/4654)

#### Removals

-   Removed the ability to call functions defined outside of pulp components as the target of a task.
    [#4651](https://github.com/pulp/pulpcore/issues/4651)

### Pulp File

#### Bugfixes

-   Fix pulp_file advertised version.
    [#4633](https://github.com/pulp/pulpcore/issues/4633)

## 3.40.4 (2023-11-08) {: #3.40.4 }

### REST API

#### Bugfixes

-   Restored the ability to set `--max-requests-jitter` on service entrypoints.
    [#4679](https://github.com/pulp/pulpcore/issues/4679)

### Plugin API

No significant changes.

### Pulp File

No significant changes.

## 3.40.3 (2023-11-07) {: #3.40.3 }

### REST API

#### Bugfixes

-   Closed the window when serializer.get_or_create could raise ObjectDoesnotExist.
    [#4648](https://github.com/pulp/pulpcore/issues/4648)

### Plugin API

No significant changes.

### Pulp File

No significant changes.

## 3.40.2 (2023-11-06) {: #3.40.2 }

### REST API

No significant changes.

### Plugin API

#### Bugfixes

-   Fixed content app returning 404s on directory index pages for some published plugins.
    [#4654](https://github.com/pulp/pulpcore/issues/4654)

### Pulp File

No significant changes.

## 3.40.1 (2023-11-02) {: #3.40.1 }

### REST API

No significant changes.

### Plugin API

#### Bugfixes

-   Added ADD_TRAILING_SLASH property to AsyncContentCache. The default value is True. By default,
    AsyncContentCache will call into Handler._match_distribution(path, add_trailing_slash=True). If the
    meaning of the Distribution's base_path changes when a trailing slash is added, this method will not
    match such a Distribution. In this case, AsyncContentCache.ADD_TRAILING_SLASH should be set to
    False.
    [#4634](https://github.com/pulp/pulpcore/issues/4634)
-   Fixed how Distribution.content_handler() is called in the content app.
    [#4644](https://github.com/pulp/pulpcore/issues/4644)

### Pulp File

#### Bugfixes

-   Fix pulp_file advertised version.
    [#4633](https://github.com/pulp/pulpcore/issues/4633)

## 3.40.0 (2023-10-31) {: #3.40.0 }

### REST API

#### Features

-   The content app now returns a 301 redirect when a requested path does not end in a / but should end in a /.
    [#3173](https://github.com/pulp/pulpcore/issues/3173)
-   Added upload field to no artifact content upload apis.
    [#4348](https://github.com/pulp/pulpcore/issues/4348)
-   Added pulp_file as a resident plugin.
    [#4550](https://github.com/pulp/pulpcore/issues/4550)

#### Removals

-   Removed fallback to eval in case EncryptedJSONField failed to decode json data.
    In case you suspect bad entries in the database, run pulpcore-manager rotate-db-key *before* the
    upgrade.
    [#4383](https://github.com/pulp/pulpcore/issues/4383)
-   Removed old unencrypted task arguments from database.
    [#4546](https://github.com/pulp/pulpcore/issues/4546)

### Plugin API

#### Features

-   Handler._match_distribution() method now accepts add_trailing_slash keyword argument. When set to False, the content app will not try to append a '/' to the path before trying to match it to a distribution. Plugin code that calls this method directly needs to be updated to account for the desired behavior.
    [#3459](https://github.com/pulp/pulpcore/issues/3459)

#### Removals

-   The changes introduced to the content upload serializers need adjustments in dome plugins.
    Specifically plugin that implemented their own notion of deferred validation to
    `NoArtifactContentUploadSerializer` seem to be affected.
    [#4348](https://github.com/pulp/pulpcore/issues/4348)

### Pulp File

#### Features

-   Starting from this release pulp_file will be shipped as part of the pulpcore package.
    [#4550](https://github.com/pulp/pulpcore/issues/4550)

## 3.39.35 (2025-12-09) {: #3.39.35 }

### REST API {: #3.39.35-rest-api }

No significant changes.

### Plugin API {: #3.39.35-plugin-api }

No significant changes.

---

## 3.39.34 (2025-11-13) {: #3.39.34 }

### REST API {: #3.39.34-rest-api }

No significant changes.

### Plugin API {: #3.39.34-plugin-api }

#### Bugfixes {: #3.39.34-plugin-api-bugfix }

- Fixed NoArtifactContentUploadViewSet/Serializer breaking when using the `artifact`, `upload` or `file_url` fields.

---

## 3.39.33 (2025-07-30) {: #3.39.33 }

### REST API {: #3.39.33-rest-api }

No significant changes.

### Plugin API {: #3.39.33-plugin-api }

No significant changes.

---

## 3.39.32 (2025-05-27) {: #3.39.32 }

### REST API {: #3.39.32-rest-api }

#### Bugfixes {: #3.39.32-rest-api-bugfix }

- Fixed bug which prevented the Pulp API usaging from a web browser
  [#5250](https://github.com/pulp/pulpcore/issues/5250)
- pass envvars to Signing Scripts to access GNUPGHOME
  [#5911](https://github.com/pulp/pulpcore/issues/5911)

### Plugin API {: #3.39.32-plugin-api }

No significant changes.

---

## 3.39.31 (2025-05-20) {: #3.39.31 }

### REST API {: #3.39.31-rest-api }

No significant changes.

### Plugin API {: #3.39.31-plugin-api }

No significant changes.

---

## 3.39.30 (2025-04-24) {: #3.39.30 }

### REST API {: #3.39.30-rest-api }

#### Bugfixes {: #3.39.30-rest-api-bugfix }

- Reverted fix for #6491, it broke certificate-chains.
  [#6510](https://github.com/pulp/pulpcore/issues/6510)

### Plugin API {: #3.39.30-plugin-api }

No significant changes.

---

## 3.39.29 (2025-04-23) {: #3.39.29 }

### REST API {: #3.39.29-rest-api }

#### Bugfixes {: #3.39.29-rest-api-bugfix }

- Fixed a memory consumption issue that was triggered by the use of the Alternate Content Source feature.
  [#6500](https://github.com/pulp/pulpcore/issues/6500)

### Plugin API {: #3.39.29-plugin-api }

No significant changes.

---

## 3.39.28 (2025-04-22) {: #3.39.28 }

### REST API {: #3.39.28-rest-api }

#### Bugfixes {: #3.39.28-rest-api-bugfix }

- Client- and CA-certificates used in Remotes are now validated and any comments stripped
  before being applied to the Remote.
  [#6491](https://github.com/pulp/pulpcore/issues/6491)

### Plugin API {: #3.39.28-plugin-api }

No significant changes.

---

## 3.39.27 (2025-04-02) {: #3.39.27 }

### REST API {: #3.39.27-rest-api }

#### Bugfixes {: #3.39.27-rest-api-bugfix }

- Fixes the Remote configuration of timeouts to properly fallback to aiohttp defaults if they are unset by the user.
  [#5439](https://github.com/pulp/pulpcore/issues/5439)

### Plugin API {: #3.39.27-plugin-api }

No significant changes.

---

## 3.39.26 (2025-03-18) {: #3.39.26 }

### REST API {: #3.39.26-rest-api }

#### Bugfixes {: #3.39.26-rest-api-bugfix }

- The Alternate Content Source sync feature has received some optimizations, making it dramatically faster.

### Plugin API {: #3.39.26-plugin-api }

No significant changes.

---

## 3.39.25 (2025-01-08) {: #3.39.25 }

### REST API {: #3.39.25-rest-api }

No significant changes.

### Plugin API {: #3.39.25-plugin-api }

No significant changes.

---

## 3.39.24 (2024-11-26) {: #3.39.24 }

### REST API {: #3.39.24-rest-api }

No significant changes.

### Plugin API {: #3.39.24-plugin-api }

No significant changes.

---

## 3.39.23 (2024-11-12) {: #3.39.23 }

### REST API {: #3.39.23-rest-api }

#### Bugfixes {: #3.39.23-rest-api-bugfix }

- On the content-app, added ClientConnectionError (aiohttp) as an exception that can trigger
  a retry when streaming content from a Remote.
  [#5967](https://github.com/pulp/pulpcore/issues/5967)

### Plugin API {: #3.39.23-plugin-api }

No significant changes.

---

## 3.39.22 (2024-11-06) {: #3.39.22 }

### REST API {: #3.39.22-rest-api }

#### Bugfixes {: #3.39.22-rest-api-bugfix }

- Fixed the JSONField specification so it doesn't break ruby bindings.
  See context [here](https://github.com/pulp/pulp_rpm/issues/3639).

### Plugin API {: #3.39.22-plugin-api }

No significant changes.

---

## 3.39.21 (2024-09-16) {: #3.39.21 }

### REST API {: #3.39.21-rest-api }

No significant changes.

### Plugin API {: #3.39.21-plugin-api }

No significant changes.

---

## 3.39.20 (2024-08-10) {: #3.39.20 }

### REST API {: #3.39.20-rest-api }

#### Bugfixes {: #3.39.20-rest-api-bugfix }

- Fixed RBAC permissions being incorrectly assigned in tasks that create objects.
  https://access.redhat.com/security/cve/cve-2024-7143
  [#5683](https://github.com/pulp/pulpcore/issues/5683)

### Plugin API {: #3.39.20-plugin-api }

No significant changes.

---

## 3.39.19 (2024-07-23) {: #3.39.19 }


### REST API {: #3.39.19-rest-api }

No significant changes.

### Plugin API {: #3.39.19-plugin-api }

No significant changes.

---

## 3.39.18 (2024-07-16) {: #3.39.18 }


### REST API {: #3.39.18-rest-api }

#### Bugfixes {: #3.39.18-rest-api-bugfix }

- Browsable HREFs now have clickable links again.
  [#5563](https://github.com/pulp/pulpcore/issues/5563)

### Plugin API {: #3.39.18-plugin-api }

No significant changes.

---

## 3.39.17 (2024-06-24) {: #3.39.17 }


### REST API {: #3.39.17-rest-api }

#### Bugfixes {: #3.39.17-rest-api-bugfix }

- Fixed openapi command where plugins relied on CONTENT_ORIGIN to be set.
  [#5510](https://github.com/pulp/pulpcore/issues/5510)

### Plugin API {: #3.39.17-plugin-api }

No significant changes.

---

## 3.39.16 (2024-06-18) {: #3.39.16 }


### REST API {: #3.39.16-rest-api }

#### Misc {: #3.39.16-rest-api-misc }

- [#5462](https://github.com/pulp/pulpcore/issues/5462)

### Plugin API {: #3.39.16-plugin-api }

No significant changes.

---

## 3.39.15 (2024-05-23) {: #3.39.15 }

### REST API

#### Bugfixes

-   Added Pulp side batching to fix large exports that were failing due to changes in psycopg.
    [#5375](https://github.com/pulp/pulpcore/issues/5375)

### Plugin API

No significant changes.

---

## 3.39.14 (2024-05-16) {: #3.39.14 }

### REST API

#### Bugfixes

-   Stopped deleting content and artifacts presumably created by later failed or canceled tasks.
    Deleting these lies solely in the responsibility of orphan cleanup.
    [#5363](https://github.com/pulp/pulpcore/issues/5363)

### Plugin API

No significant changes.

---

## 3.39.13 (2024-04-17) {: #3.39.13 }

### REST API

No significant changes.

### Plugin API

No significant changes.

---

## 3.39.12 (2024-03-26) {: #3.39.12 }

### REST API

No significant changes.

### Plugin API

No significant changes.

---

## 3.39.11 (2024-03-05) {: #3.39.11 }

### REST API

No significant changes.

### Plugin API

No significant changes.

---

## 3.39.10 (2024-02-13) {: #3.39.10 }

### REST API

#### Misc

-   [#4589](https://github.com/pulp/pulpcore/issues/4589)

### Plugin API

No significant changes.

---

## 3.39.9 (2024-01-30) {: #3.39.9 }

### REST API

#### Bugfixes

-   Fixed a warning that gets raised when cache is enabled: `RuntimeWarning: coroutine 'AsyncCache.delete' was never awaited`.
    [#4967](https://github.com/pulp/pulpcore/issues/4967)

### Plugin API

No significant changes.

---

## 3.39.8 (2024-01-25) {: #3.39.8 }

### REST API

No significant changes.

### Plugin API

No significant changes.

---

## 3.39.7 (2024-01-24) {: #3.39.7 }

### REST API

#### Bugfixes

-   Taught downloader to trust system-cert-store on HTTPS proxy connections.
    [#3036](https://github.com/pulp/pulpcore/issues/3036)

### Plugin API

No significant changes.

---

## 3.39.6 (2024-01-16) {: #3.39.6 }

### REST API

#### Bugfixes

-   Fixed an issue with importing async-timeout in Python 3.11.
    [#4923](https://github.com/pulp/pulpcore/issues/4923)

### Plugin API

No significant changes.

---

## 3.39.5 (2024-01-09) {: #3.39.5 }

### REST API

No significant changes.

### Plugin API

No significant changes.

---

## 3.39.4 (2023-12-14) {: #3.39.4 }

### REST API

#### Bugfixes

-   Fix a bug in import/export that could result in a division-by-zero during import.
    [#4777](https://github.com/pulp/pulpcore/issues/4777)

### Plugin API

No significant changes.

---

## 3.39.3 (2023-11-15) {: #3.39.3 }

### REST API

#### Bugfixes

-   Fix <file://> syncs deleting the original files.
    [#4681](https://github.com/pulp/pulpcore/issues/4681)

### Plugin API

No significant changes.

## 3.39.2 (2023-11-08) {: #3.39.2 }

### REST API

#### Bugfixes

-   Resolved a sync-time performance regression.
    [#4591](https://github.com/pulp/pulpcore/issues/4591)
-   Restored the ability to set `--max-requests-jitter` on service entrypoints.
    [#4679](https://github.com/pulp/pulpcore/issues/4679)

### Plugin API

No significant changes.

## 3.39.1 (2023-10-31) {: #3.39.1 }

### REST API

No significant changes.

### Plugin API

No significant changes.

## 3.39.0 (2023-10-25) {: #3.39.0 }

### REST API

#### Features

-   Added a `HeaderContentGuard` to allow a content access based on a valued provided by a specific header. The header can optionally be filtered through a `jq` expression.
    [#4518](https://github.com/pulp/pulpcore/issues/4518)

#### Bugfixes

-   Resolved a sync-time performance regression.
    [#4591](https://github.com/pulp/pulpcore/issues/4591)

### Plugin API

No significant changes.

## 3.38.1 (2023-10-28) {: #3.38.1 }

### REST API

#### Bugfixes

-   Resolved a sync-time performance regression.
    [#4591](https://github.com/pulp/pulpcore/issues/4591)

### Plugin API

No significant changes.

## 3.38.0 (2023-10-19) {: #3.38.0 }

### REST API

#### Features

-   Use CRC32 checksums instead of SHA256 to improve import/export performance. Cryptographic checksums aren't required as we are only verifying the integrity of the files.
    [#4447](https://github.com/pulp/pulpcore/issues/4447)
-   Parsing of the db encryption key was made resiliant to whitespace and to allow comments.
    [#4542](https://github.com/pulp/pulpcore/issues/4542)

#### Bugfixes

-   Stopped reassembling the tarball of a chunked import into one large file, and instead gather the
    bits on the fly. This also allows importing directly from a read-only medium.
    [#4545](https://github.com/pulp/pulpcore/issues/4545)
-   Improve performance during export operations.
    [#4551](https://github.com/pulp/pulpcore/issues/4551)
-   Taught ContentArtifactResource import to cache content results to improve performance.
    [#4564](https://github.com/pulp/pulpcore/issues/4564)

#### Misc

-   [#4323](https://github.com/pulp/pulpcore/issues/4323), [#4585](https://github.com/pulp/pulpcore/issues/4585)

### Plugin API

No significant changes.

## 3.37.0 (2023-10-05) {: #3.37.0 }

### REST API

#### Features

-   Include social_django urls based on config option
    [#4511](https://github.com/pulp/pulpcore/issues/4511)

#### Bugfixes

-   Added `format` param to `DEFAULT_FILTERS` in `BaseFilterSet` to fix django api format.
    [#4450](https://github.com/pulp/pulpcore/issues/4450)

### Plugin API

No significant changes.

## 3.36.0 (2023-09-27) {: #3.36.0 }

### REST API

#### Features

-   Status endpoint now reports storage usage of the domain being called from.
    [#4456](https://github.com/pulp/pulpcore/issues/4456)
-   Status endpoint now reports the storage usage for non-filesystem storage backends.
    [#4457](https://github.com/pulp/pulpcore/issues/4457)

#### Bugfixes

-   Removed a workaround to force close all tcp connections in sync leading to an exhaustion of port
    numbers and their reuse while in time_wait state.
    [#4452](https://github.com/pulp/pulpcore/issues/4452)
-   Fixed the return value of `get_users_with_perms_attached_roles` to give proper role names.
    [#4478](https://github.com/pulp/pulpcore/issues/4478)

#### Removals

-   Exports now take place in .tar format rather than .tar.gz. It was previously found that the
    compression provided little benefit but came with large runtime costs, so the compression
    level was reduced to 0. However even packaging the data in a gzip archive without compression
    comes with performance costs (particularly on import), so, we remove that layer entirely.
    [#4446](https://github.com/pulp/pulpcore/issues/4446)

### Plugin API

No significant changes.

## 3.35.0 (2023-09-20) {: #3.35.0 }

### REST API

#### Features

-   Added RBAC for UpstreamPulp APIs.
    [#3994](https://github.com/pulp/pulpcore/issues/3994)
-   Added filters `name__regex` and `name__iregex` to various endpoints.
    [#4432](https://github.com/pulp/pulpcore/issues/4432)
-   Enabling the TASK_DIAGNOSTICS option now additionally creates a profile of all executed tasks if the pyinstrument package is installed. This incurs a small overhead on task runtime (5-10%).
    [#4436](https://github.com/pulp/pulpcore/issues/4436)

#### Bugfixes

-   Added encryption to task argument fields.
-   Fixed sync not deleting temporary files when WORKING_DIRECTORY is not a sub-directory of MEDIA_ROOT
    or when using a non-filesystem storage backend.
    [#1936](https://github.com/pulp/pulpcore/issues/1936)
-   Ensure non-chunked exports and chunked exports use the same compression level.
    [#4411](https://github.com/pulp/pulpcore/issues/4411)
-   Removed compression from exports (using gzip level 0). For most users of export functionality it seems to be a poor tradeoff.
    [#4434](https://github.com/pulp/pulpcore/issues/4434)
-   Fixed bug where supplying an empty list for `pulp_href__in` or `pulp_id__in` would return all
    results instead of none.
    [#4437](https://github.com/pulp/pulpcore/issues/4437)

#### Removals

-   Removed the `pulp-content` script that was superseeded by `pulpcore-content`.

### Plugin API

No significant changes.

## 3.34.0 (2023-09-12) {: #3.34.0 }

### REST API

#### Bugfixes

-   Added missing `--preload` option to `pulpcore-api` and `pulpcore-content`.
    [#4368](https://github.com/pulp/pulpcore/issues/4368)
-   Ensured that repository and remote delete is always executed in a task. This fixes a bug when the
    deletion blocks the gunicorn api worker for too long.
    [#4372](https://github.com/pulp/pulpcore/issues/4372)

### Plugin API

#### Features

-   Added a `LabelsMixin` for views to allow syncronous manipulation of labels on existing objects.
    Repository, remote and distribution views inherit this from pulpcore, but default access policies
    need to be adjusted.
    [#3332](https://github.com/pulp/pulpcore/issues/3332)
-   Added a migration operation `RequireVersion` that refuses to complete as long as active
    server components exist in the database.
    [#3401](https://github.com/pulp/pulpcore/issues/3401)

## 3.33.0 (2023-09-06) {: #3.33.0 }

### REST API

#### Features

-   Added a filter q that supports complex filter expressions.

    This feature is in tech-preview for the time being.
    [#2480](https://github.com/pulp/pulpcore/issues/2480),
    [#3914](https://github.com/pulp/pulpcore/issues/3914)

-   Add status records for api apps.
    [#3175](https://github.com/pulp/pulpcore/issues/3175)

-   Added `set_label` and `unset_label` endpoints to allow manipulating individual labels
    synchronously.
    [#3332](https://github.com/pulp/pulpcore/issues/3332)

-   Added `--burst` flag to pulpcore-worker so it will terminate instead of sleeping.
    [#4341](https://github.com/pulp/pulpcore/issues/4341)

#### Bugfixes

-   Fixed an exception that gets raised inside the domain delete hook
    when there are still repositories with content in the domain.
    [#4157](https://github.com/pulp/pulpcore/issues/4157)
-   Made orphan clean up more tolerant when other tasks are running in parallel.
    [#4316](https://github.com/pulp/pulpcore/issues/4316)
-   Fix the label migration 0104 to allow upgrading from before 3.25.
    [#4319](https://github.com/pulp/pulpcore/issues/4319)
-   Fixed Distribution validation for PUT calls when the data source changes.
    [#4324](https://github.com/pulp/pulpcore/issues/4324)
-   Ensure the compression level is reliably set properly as per #3869.
    [#4351](https://github.com/pulp/pulpcore/issues/4351)
-   Fix encrypted fields to use json instead of repr/eval and make them fit for `bulk_update`.
    This solves an issue with `pulpcore-manager rotate-db-key` corrupting data.
    [#4359](https://github.com/pulp/pulpcore/issues/4359)

#### Removals

-   Starting with this release, it is highly recommended to start the api and content processes by
    the newly provided entrypoints (`pulpcore-api` and `pulpcore-content`) instead of calling
    `gunicorn` directly.
    [#3175](https://github.com/pulp/pulpcore/issues/3175)

### Plugin API

#### Features

-   Added a `LabelsMixin` for views to allow syncronous manipulation of labels on existing objects.
    Repository, remote and distribution views inherit this from pulpcore, but default access policies
    need to be adjusted.
    [#3332](https://github.com/pulp/pulpcore/issues/3332)

## 3.32.1 (2023-09-06) {: #3.32.1 }

### REST API

#### Bugfixes

-   Ensure the compression level is reliably set properly as per #3869.
    [#4351](https://github.com/pulp/pulpcore/issues/4351)
-   Fix encrypted fields to use json instead of repr/eval and make them fit for `bulk_update`.
    This solves an issue with `pulpcore-manager rotate-db-key` corrupting data.
    [#4359](https://github.com/pulp/pulpcore/issues/4359)

### Plugin API

No significant changes.

## 3.32.0 (2023-08-22) {: #3.32.0 }

### REST API

#### Bugfixes

-   Improved the performance when looking up content for repository versions.
    [#3969](https://github.com/pulp/pulpcore/issues/3969)
-   Fixed bug where incorrect error message presented in relation to content-import
    [#4294](https://github.com/pulp/pulpcore/issues/4294)

### Plugin API

#### Features

-   Made the current domain a shared resource for all tasks even with domains disabled, so tasks can
    hold off all other operations by taking an exclusive lock on the (default) domain.
    [#4285](https://github.com/pulp/pulpcore/issues/4285)

## 3.31.0 (2023-08-15) {: #3.31.0 }

### REST API

#### Bugfixes

-   Optimized content app to not slow down as the size of a repository grows.
    [#3802](https://github.com/pulp/pulpcore/issues/3802)
-   Fixed FileDownloader in the presence of on_demand remotes.
    [#4019](https://github.com/pulp/pulpcore/issues/4019)
-   Taught downloader to correctly handle plugin-specified headers for object-storage backends.
    [#4028](https://github.com/pulp/pulpcore/issues/4028)

### Plugin API

#### Features

-   Added memoized `system_id` function to the plugin api.
    [#4276](https://github.com/pulp/pulpcore/issues/4276)

## 3.30.0 (2023-08-08) {: #3.30.0 }

### REST API

#### Bugfixes

-   Resolved a memory leak that could occur while making large repeated queries against the API service.
    [#2250](https://github.com/pulp/pulpcore/issues/2250)

-   Made reclaim space task more tolerant in the face of artifact shared between two content units.
    [#3610](https://github.com/pulp/pulpcore/issues/3610)

-   Fixed a bug with the replicate API not handling Upstream Pulp API over HTTPS.
    [#3910](https://github.com/pulp/pulpcore/issues/3910)

-   Fixed duplicate OpenAPI operation ids when using domains.
    [#3977](https://github.com/pulp/pulpcore/issues/3977)

-   Updates file system exporter to correctly account the start_repository_version for pass_through publications
    [#4051](https://github.com/pulp/pulpcore/issues/4051)

-   Taught pulp-import to be able to use a subset of available worker-threads.
    [#4068](https://github.com/pulp/pulpcore/issues/4068)

-   Updated the downloader's fetch method to comply with Python 3.11.
    [#4107](https://github.com/pulp/pulpcore/issues/4107)

-   Taught repair task to be tolerant in the face of any artifact download failure.
    [#4111](https://github.com/pulp/pulpcore/issues/4111)

-   Fixed a 500 error for Upstream Pulp Replicate API when domains are enabled.
    [#4119](https://github.com/pulp/pulpcore/issues/4119)

-   Fixed the OpenAPI schema for the 'replicate' operation response.
    [#4121](https://github.com/pulp/pulpcore/issues/4121)

-   Fixed a bug where repositories were getting deleted accross domains.
    [#4158](https://github.com/pulp/pulpcore/issues/4158)

-   Taught the Artifact.json of an export to hold minimum-unique-set of Artifact entries.

    In highly-duplicated-content export scenarios, this can mean a significant decrease
    in export-size, and significant improvement in import-performance.
    [#4159](https://github.com/pulp/pulpcore/issues/4159)

-   Fixed bug where the Task Group for replication would be marked as fully dispatched after just one
    replicator.
    [#4175](https://github.com/pulp/pulpcore/issues/4175)

-   Fixed a 500 server error when two concurrent requests try to create an object with the same unique fields.
    [#4183](https://github.com/pulp/pulpcore/issues/4183)

-   Fix a subtle export bug introduced from the optimizations in #4159.
    [#4210](https://github.com/pulp/pulpcore/issues/4210)

-   Fixed a bug where replication remotes did not have their URLs updated on subsequent runs.
    [#4218](https://github.com/pulp/pulpcore/issues/4218)

-   Fixed a bug where ca_cert was not getting set for replication remotes.
    [#4219](https://github.com/pulp/pulpcore/issues/4219)

-   Correctly fixed pulp_rpm-export-edgecase - fix #4210 was incomplete.
    [#4231](https://github.com/pulp/pulpcore/issues/4231)

-   Fixed bug where tls_validation, client_key, and client_cert were not getting set on replication remotes.
    [#4247](https://github.com/pulp/pulpcore/issues/4247)

#### Misc

-   [#3923](https://github.com/pulp/pulpcore/issues/3923)

### Plugin API

#### Features

-   Adjusted the `BaseDownloader.fetch()` method to accept `extra_data`.
    [#4229](https://github.com/pulp/pulpcore/issues/4229)

## 3.29.8 (2023-08-08) {: #3.29.8 }

### REST API

#### Bugfixes

-   Fixed bug where tls_validation, client_key, and client_cert were not getting set on replication remotes.
    [#4247](https://github.com/pulp/pulpcore/issues/4247)

### Plugin API

No significant changes.

## 3.29.7 (2023-08-01) {: #3.29.7 }

### REST API

#### Bugfixes

-   Fixed a bug where replication remotes did not have their URLs updated on subsequent runs.
    [#4218](https://github.com/pulp/pulpcore/issues/4218)
-   Fixed a bug where ca_cert was not getting set for replication remotes.
    [#4219](https://github.com/pulp/pulpcore/issues/4219)
-   Correctly fixed pulp_rpm-export-edgecase - fix #4210 was incomplete.
    [#4231](https://github.com/pulp/pulpcore/issues/4231)

### Plugin API

No significant changes.

## 3.29.6 (2023-07-31) {: #3.29.6 }

### REST API

#### Bugfixes

-   Fix a subtle export bug introduced from the optimizations in #4159.
    [#4210](https://github.com/pulp/pulpcore/issues/4210)

### Plugin API

No significant changes.

## 3.29.5 (2023-07-29) {: #3.29.5 }

### REST API

#### Bugfixes

-   Made reclaim space task more tolerant in the face of artifact shared between two content units.
    [#3610](https://github.com/pulp/pulpcore/issues/3610)

-   Fixed a bug with the replicate API not handling Upstream Pulp API over HTTPS.
    [#3910](https://github.com/pulp/pulpcore/issues/3910)

-   Updated the downloader's fetch method to comply with Python 3.11.
    [#4107](https://github.com/pulp/pulpcore/issues/4107)

-   Fixed a bug where repositories were getting deleted accross domains.
    [#4158](https://github.com/pulp/pulpcore/issues/4158)

-   Taught the Artifact.json of an export to hold minimum-unique-set of Artifact entries.

    In highly-duplicated-content export scenarios, this can mean a significant decrease
    in export-size, and significant improvement in import-performance.
    [#4159](https://github.com/pulp/pulpcore/issues/4159)

-   Fixed bug where the Task Group for replication would be marked as fully dispatched after just one
    replicator.
    [#4175](https://github.com/pulp/pulpcore/issues/4175)

#### Misc

-   [#3923](https://github.com/pulp/pulpcore/issues/3923)

### Plugin API

No significant changes.

## 3.29.4 (2023-07-25) {: #3.29.4 }

### REST API

#### Bugfixes

-   Fixed a 500 error for Upstream Pulp Replicate API when domains are enabled.
    [#4119](https://github.com/pulp/pulpcore/issues/4119)
-   Fixed the OpenAPI schema for the 'replicate' operation response.
    [#4121](https://github.com/pulp/pulpcore/issues/4121)

### Plugin API

No significant changes.

## 3.29.3 (2023-07-22) {: #3.29.3 }

### REST API

#### Bugfixes

-   Resolved a memory leak that could occur while making large repeated queries against the API service.
    [#2250](https://github.com/pulp/pulpcore/issues/2250)
-   Taught repair task to be tolerant in the face of any artifact download failure.
    [#4111](https://github.com/pulp/pulpcore/issues/4111)

### Plugin API

No significant changes.

## 3.29.2 (2023-07-19) {: #3.29.2 }

### REST API

#### Bugfixes

-   Fixed duplicate OpenAPI operation ids when using domains.
    [#3977](https://github.com/pulp/pulpcore/issues/3977)
-   Updates file system exporter to correctly account the start_repository_version for pass_through publications
    [#4051](https://github.com/pulp/pulpcore/issues/4051)

### Plugin API

No significant changes.

## 3.29.1 (2023-07-14) {: #3.29.1 }

### REST API

#### Bugfixes

-   Pinned importlib-metadata to 6.0.1 given pip is unable to solve an opentelemetry dependency version correctly.
    [#4042](https://github.com/pulp/pulpcore/issues/4042)

### Plugin API

No significant changes.

## 3.29.0 (2023-07-12) {: #3.29.0 }

### REST API

#### Features

-   Added version information to tasks. Workers will refuse to pick up tasks with a version higher
    than their own.
    [#3369](https://github.com/pulp/pulpcore/issues/3369)
-   Added graceful shutdown to pulpcore-worker without killing the current task on receiving
    `SIGHUP` or `SIGTERM`.
    [#3940](https://github.com/pulp/pulpcore/issues/3940)
-   Added periodically executed cleanup tasks for uploads and temporary files. Configure a time
    interval in `UPLOAD_PROTECTION_TIME` or `TMPFILE_PROTECTION_TIME` to activate.
    [#3949](https://github.com/pulp/pulpcore/issues/3949)

#### Bugfixes

-   Made the incremental file export include all published metadata.
    [#3941](https://github.com/pulp/pulpcore/issues/3941)
-   Fixed error when downloading pull-through content that already exists in Pulp.
    [#3945](https://github.com/pulp/pulpcore/issues/3945)
-   Fixed circular imports caused by get_user_model calls.
    [#3957](https://github.com/pulp/pulpcore/issues/3957)
-   Fix api schema of the upstream_pulp_replicate operation requiring no body.
    [#3995](https://github.com/pulp/pulpcore/issues/3995)

### Plugin API

#### Features

-   Added `retrieve` logic to `MultipleArtifactContentSerializer`.
    [#3951](https://github.com/pulp/pulpcore/issues/3951)

#### Bugfixes

-   Fixed the import path for `pulpcore.plugin.pulp_hashlib`.
    [#4006](https://github.com/pulp/pulpcore/issues/4006)

#### Misc

-   [#3798](https://github.com/pulp/pulpcore/issues/3798)

## 3.28.44 (2026-03-10) {: #3.28.44 }

### REST API {: #3.28.44-rest-api }

#### Bugfixes {: #3.28.44-rest-api-bugfix }

- Moved artifact checksum validation from module-level settings code to a Django system check.
  [#7380](https://github.com/pulp/pulpcore/issues/7380)

### Plugin API {: #3.28.44-plugin-api }

No significant changes.

---

## 3.28.43 (2025-12-09) {: #3.28.43 }

### REST API {: #3.28.43-rest-api }

No significant changes.

### Plugin API {: #3.28.43-plugin-api }

No significant changes.

---

## 3.28.42 (2025-12-04) {: #3.28.42 }

### REST API {: #3.28.42-rest-api }

#### Bugfixes {: #3.28.42-rest-api-bugfix }

- pulp-worker fails to start with "float object cannot be interpreted as an integer" on some versions of python.
  [#5861](https://github.com/pulp/pulpcore/issues/5861)

### Plugin API {: #3.28.42-plugin-api }

No significant changes.

---

## 3.28.41 (2025-11-13) {: #3.28.41 }

### REST API {: #3.28.41-rest-api }

No significant changes.

### Plugin API {: #3.28.41-plugin-api }

No significant changes.

---

## 3.28.40 (2025-07-30) {: #3.28.40 }

### REST API {: #3.28.40-rest-api }

No significant changes.

### Plugin API {: #3.28.40-plugin-api }

No significant changes.

---

## 3.28.39 (2025-05-27) {: #3.28.39 }

### REST API {: #3.28.39-rest-api }

#### Bugfixes {: #3.28.39-rest-api-bugfix }

- Fixed bug which prevented the Pulp API usaging from a web browser
  [#5250](https://github.com/pulp/pulpcore/issues/5250)
- pass envvars to Signing Scripts to access GNUPGHOME
  [#5911](https://github.com/pulp/pulpcore/issues/5911)

### Plugin API {: #3.28.39-plugin-api }

No significant changes.

---

## 3.28.38 (2025-05-20) {: #3.28.38 }

### REST API {: #3.28.38-rest-api }

No significant changes.

### Plugin API {: #3.28.38-plugin-api }

No significant changes.

---

## 3.28.37 (2025-03-18) {: #3.28.37 }

### REST API {: #3.28.37-rest-api }

No significant changes.

### Plugin API {: #3.28.37-plugin-api }

No significant changes.

---

## 3.28.36 (2025-01-10) {: #3.28.36 }

### REST API {: #3.28.36-rest-api }

No significant changes.

### Plugin API {: #3.28.36-plugin-api }

No significant changes.

---

## 3.28.35 (2024-11-26) {: #3.28.35 }

### REST API {: #3.28.35-rest-api }

No significant changes.

### Plugin API {: #3.28.35-plugin-api }

No significant changes.

---

## 3.28.34 (2024-11-13) {: #3.28.34 }

### REST API {: #3.28.34-rest-api }

No significant changes.

### Plugin API {: #3.28.34-plugin-api }

No significant changes.

---

## 3.28.33 (2024-11-06) {: #3.28.33 }

### REST API {: #3.28.33-rest-api }

#### Bugfixes {: #3.28.33-rest-api-bugfix }

- Fixed the JSONField specification so it doesn't break ruby bindings.
  See context [here](https://github.com/pulp/pulp_rpm/issues/3639).

### Plugin API {: #3.28.33-plugin-api }

No significant changes.

---

# ## 3.28.32 (2024-08-10) {: #3.28.32 }

### REST API {: #3.28.32-rest-api }

#### Bugfixes {: #3.28.32-rest-api-bugfix }

- Fixed RBAC permissions being incorrectly assigned in tasks that create objects.
  https://access.redhat.com/security/cve/cve-2024-7143
  [#5683](https://github.com/pulp/pulpcore/issues/5683)

### Plugin API {: #3.28.32-plugin-api }

No significant changes.

---

## 3.28.31 (2024-07-23) {: #3.28.31 }


### REST API {: #3.28.31-rest-api }

No significant changes.

### Plugin API {: #3.28.31-plugin-api }

No significant changes.

---

## 3.28.30 (2024-07-16) {: #3.28.30 }


### REST API {: #3.28.30-rest-api }

#### Bugfixes {: #3.28.30-rest-api-bugfix }

- Browsable HREFs now have clickable links again.
  [#5563](https://github.com/pulp/pulpcore/issues/5563)

### Plugin API {: #3.28.30-plugin-api }

No significant changes.

---

## 3.28.29 (2024-06-24) {: #3.28.29 }


### REST API {: #3.28.29-rest-api }

#### Bugfixes {: #3.28.29-rest-api-bugfix }

- Fixed openapi command where plugins relied on CONTENT_ORIGIN to be set.
  [#5510](https://github.com/pulp/pulpcore/issues/5510)

### Plugin API {: #3.28.29-plugin-api }

No significant changes.

---

## 3.28.28 (2024-06-18) {: #3.28.28 }


### REST API {: #3.28.28-rest-api }

#### Misc {: #3.28.28-rest-api-misc }

- [#5462](https://github.com/pulp/pulpcore/issues/5462)

### Plugin API {: #3.28.28-plugin-api }

No significant changes.

---

## 3.28.27 (2024-05-22) {: #3.28.27 }

### REST API

#### Bugfixes

-   Stopped deleting content and artifacts presumably created by later failed or canceled tasks.
    Deleting these lies solely in the responsibility of orphan cleanup.
    [#5363](https://github.com/pulp/pulpcore/issues/5363)

### Plugin API

No significant changes.

---

## 3.28.26 (2024-04-17) {: #3.28.26 }

### REST API

No significant changes.

### Plugin API

No significant changes.

---

## 3.28.25 (2024-03-26) {: #3.28.25 }

### REST API

No significant changes.

### Plugin API

No significant changes.

---

## 3.28.24 (2024-03-05) {: #3.28.24 }

### REST API

No significant changes.

### Plugin API

No significant changes.

---

## 3.28.23 (2024-01-30) {: #3.28.23 }

### REST API

#### Bugfixes

-   Fixed a warning that gets raised when cache is enabled: `RuntimeWarning: coroutine 'AsyncCache.delete' was never awaited`.
    [#4967](https://github.com/pulp/pulpcore/issues/4967)

### Plugin API

No significant changes.

---

## 3.28.22 (2024-01-25) {: #3.28.22 }

### REST API

No significant changes.

### Plugin API

No significant changes.

---

## 3.28.21 (2024-01-25) {: #3.28.21 }

### REST API

#### Bugfixes

-   Fixed an issue with importing async-timeout in Python 3.11.
    [#4923](https://github.com/pulp/pulpcore/issues/4923)

### Plugin API

No significant changes.

---

## 3.28.20 (2024-01-24) {: #3.28.20 }

### REST API

#### Bugfixes

-   Fixed a regular expression used when listing directories.
    [#3673](https://github.com/pulp/pulpcore/issues/3673)
-   Taught repair task to be tolerant in the face of any artifact download failure.
    [#4111](https://github.com/pulp/pulpcore/issues/4111)
-   Removed a workaround to force close all tcp connections in sync leading to an exhaustion of port
    numbers and their reuse while in time_wait state.
    [#4452](https://github.com/pulp/pulpcore/issues/4452)
-   Fix <file://> syncs deleting the original files.
    [#4681](https://github.com/pulp/pulpcore/issues/4681)

### Plugin API

No significant changes.

---

## 3.28.19 (2023-11-06) {: #3.28.19 }

### REST API

#### Bugfixes

-   Resolved a sync-time performance regression.
    [#4591](https://github.com/pulp/pulpcore/issues/4591)

### Plugin API

No significant changes.

## 3.28.18 (2023-10-16) {: #3.28.18 }

### REST API

#### Bugfixes

-   Improve performance during export operations.
    [#4551](https://github.com/pulp/pulpcore/issues/4551)
-   Taught ContentArtifactResource import to cache content results to improve performance.
    [#4564](https://github.com/pulp/pulpcore/issues/4564)

### Plugin API

No significant changes.

## 3.28.17 (2023-10-05) {: #3.28.17 }

### REST API

#### Bugfixes

-   Added `format` param to `DEFAULT_FILTERS` in `BaseFilterSet` to fix django api format.
    [#4450](https://github.com/pulp/pulpcore/issues/4450)

### Plugin API

No significant changes.

## 3.28.16 (2023-09-27) {: #3.28.16 }

### REST API

#### Features

-   Enabling the TASK_DIAGNOSTICS option now additionally creates a profile of all executed tasks if the pyinstrument package is installed. This incurs a small overhead on task runtime (5-10%).
    [#4436](https://github.com/pulp/pulpcore/issues/4436)

#### Bugfixes

-   Fixed sync not deleting temporary files when WORKING_DIRECTORY is not a sub-directory of MEDIA_ROOT
    or when using a non-filesystem storage backend.
    [#1936](https://github.com/pulp/pulpcore/issues/1936)
-   Made the incremental file export include all published metadata.
    [#3941](https://github.com/pulp/pulpcore/issues/3941)
-   Fixed the return value of `get_users_with_perms_attached_roles` to give proper role names.
    [#4478](https://github.com/pulp/pulpcore/issues/4478)

### Plugin API

No significant changes.

## 3.28.15 (2023-09-20) {: #3.28.15 }

### REST API

#### Bugfixes

-   Ensure non-chunked exports and chunked exports use the same compression level.
    [#4411](https://github.com/pulp/pulpcore/issues/4411)
-   Removed compression from exports (using gzip level 0). For most users of export functionality it seems to be a poor tradeoff.
    [#4434](https://github.com/pulp/pulpcore/issues/4434)

### Plugin API

No significant changes.

## 3.28.14 (2023-09-12) {: #3.28.14 }

### REST API

#### Bugfixes

-   Ensured that repository and remote delete is always executed in a task. This fixes a bug when the
    deletion blocks the gunicorn api worker for too long.
    [#4372](https://github.com/pulp/pulpcore/issues/4372)

### Plugin API

No significant changes.

## 3.28.13 (2023-09-06) {: #3.28.13 }

### REST API

#### Bugfixes

-   Fix the label migration 0104 to allow upgrading from before 3.25.
    [#4319](https://github.com/pulp/pulpcore/issues/4319)
-   Ensure the compression level is reliably set properly as per #3869.
    [#4351](https://github.com/pulp/pulpcore/issues/4351)
-   Fix encrypted fields to use json instead of repr/eval and make them fit for `bulk_update`.
    This solves an issue with `pulpcore-manager rotate-db-key` corrupting data.
    [#4359](https://github.com/pulp/pulpcore/issues/4359)

### Plugin API

No significant changes.

## 3.28.12 (2023-08-22) {: #3.28.12 }

### REST API

#### Bugfixes

-   Improved the performance when looking up content for repository versions.
    [#3969](https://github.com/pulp/pulpcore/issues/3969)
-   Taught pulp-import to be able to use a subset of available worker-threads.
    [#4068](https://github.com/pulp/pulpcore/issues/4068)
-   Fixed bug where incorrect error message presented in relation to content-import
    [#4294](https://github.com/pulp/pulpcore/issues/4294)

### Plugin API

#### Features

-   Added memoized `system_id` function to the plugin api.
    [#4276](https://github.com/pulp/pulpcore/issues/4276)

## 3.28.11 (2023-08-15) {: #3.28.11 }

### REST API

#### Bugfixes

-   Taught downloader to correctly handle plugin-specified headers for object-storage backends.
    [#4028](https://github.com/pulp/pulpcore/issues/4028)

### Plugin API

No significant changes.

## 3.28.10 (2023-08-08) {: #3.28.10 }

### REST API

#### Bugfixes

-   Fixed bug where tls_validation, client_key, and client_cert were not getting set on replication remotes.
    [#4247](https://github.com/pulp/pulpcore/issues/4247)

### Plugin API

No significant changes.

## 3.28.9 (2023-08-03) {: #3.28.9 }

### REST API

No significant changes.

### Plugin API

No significant changes.

## 3.28.8 (2023-08-01) {: #3.28.8 }

### REST API

#### Bugfixes

-   Fixed a bug where replication remotes did not have their URLs updated on subsequent runs.
    [#4218](https://github.com/pulp/pulpcore/issues/4218)
-   Fixed a bug where ca_cert was not getting set for replication remotes.
    [#4219](https://github.com/pulp/pulpcore/issues/4219)
-   Correctly fixed pulp_rpm-export-edgecase - fix #4210 was incomplete.
    [#4231](https://github.com/pulp/pulpcore/issues/4231)

### Plugin API

No significant changes.

## 3.28.7 (2023-07-31) {: #3.28.7 }

### REST API

#### Bugfixes

-   Fix a subtle export bug introduced from the optimizations in #4159.
    [#4210](https://github.com/pulp/pulpcore/issues/4210)

### Plugin API

No significant changes.

## 3.28.6 (2023-07-29) {: #3.28.6 }

### REST API

#### Bugfixes

-   Made reclaim space task more tolerant in the face of artifact shared between two content units.
    [#3610](https://github.com/pulp/pulpcore/issues/3610)

-   Fixed a bug with the replicate API not handling Upstream Pulp API over HTTPS.
    [#3910](https://github.com/pulp/pulpcore/issues/3910)

-   Updated the downloader's fetch method to comply with Python 3.11.
    [#4107](https://github.com/pulp/pulpcore/issues/4107)

-   Fixed a bug where repositories were getting deleted accross domains.
    [#4158](https://github.com/pulp/pulpcore/issues/4158)

-   Taught the Artifact.json of an export to hold minimum-unique-set of Artifact entries.

    In highly-duplicated-content export scenarios, this can mean a significant decrease
    in export-size, and significant improvement in import-performance.
    [#4159](https://github.com/pulp/pulpcore/issues/4159)

-   Fixed bug where the Task Group for replication would be marked as fully dispatched after just one
    replicator.
    [#4175](https://github.com/pulp/pulpcore/issues/4175)

#### Misc

-   [#3923](https://github.com/pulp/pulpcore/issues/3923)

### Plugin API

No significant changes.

## 3.28.5 (2023-07-25) {: #3.28.5 }

### REST API

#### Bugfixes

-   Resolved a memory leak that could occur while making large repeated queries against the API service.
    [#2250](https://github.com/pulp/pulpcore/issues/2250)
-   Fixed a 500 error for Upstream Pulp Replicate API when domains are enabled.
    [#4119](https://github.com/pulp/pulpcore/issues/4119)
-   Fixed the OpenAPI schema for the 'replicate' operation response.
    [#4121](https://github.com/pulp/pulpcore/issues/4121)

### Plugin API

No significant changes.

## 3.28.4 (2023-07-19) {: #3.28.4 }

### REST API

#### Bugfixes

-   Fixed duplicate OpenAPI operation ids when using domains.
    [#3977](https://github.com/pulp/pulpcore/issues/3977)
-   Updates file system exporter to correctly account the start_repository_version for pass_through publications
    [#4051](https://github.com/pulp/pulpcore/issues/4051)

### Plugin API

#### Bugfixes

-   Fixed the import path for `pulpcore.plugin.pulp_hashlib`.
    [#4006](https://github.com/pulp/pulpcore/issues/4006)

## 3.28.3 (2023-07-14) {: #3.28.3 }

### REST API

#### Bugfixes

-   Pinned importlib-metadata to 6.0.1 given pip is unable to solve an opentelemetry dependency version correctly.
    [#4042](https://github.com/pulp/pulpcore/issues/4042)

### Plugin API

No significant changes.

## 3.28.2 (2023-07-12) {: #3.28.2 }

### REST API

#### Bugfixes

-   Fix api schema of the upstream_pulp_replicate operation requiring no body.
    [#3995](https://github.com/pulp/pulpcore/issues/3995)

### Plugin API

No significant changes.

## 3.28.1 (2023-06-27) {: #3.28.1 }

### REST API

#### Bugfixes

-   Fixed error when downloading pull-through content that already exists in Pulp.
    [#3945](https://github.com/pulp/pulpcore/issues/3945)
-   Fixed circular imports caused by get_user_model calls.
    [#3957](https://github.com/pulp/pulpcore/issues/3957)

### Plugin API

No significant changes.

## 3.28.0 (2023-06-14) {: #3.28.0 }

### REST API

#### Bugfixes

-   Taught PulpImport to be more robust in the face of previous failed attempts.
    [#3737](https://github.com/pulp/pulpcore/issues/3737)
-   Exports now use gzip compression level 1 rather than compression level 9. Exported archives will
    now be slightly larger, but exports should be much faster. This is considered to be a more
    optimal balance of space/time for the export operation.
    [#3869](https://github.com/pulp/pulpcore/issues/3869)
-   Fixed the method for displaying the representation of `MasterModel` objects.
    [#3898](https://github.com/pulp/pulpcore/issues/3898)

#### Improved Documentation

-   Removes leftover documentation referring to the deprecated Ansible based installer.
    [#3834](https://github.com/pulp/pulpcore/issues/3834)

### Plugin API

#### Features

-   Added support to pull-through caching for streaming metadata files.

    `Remote.get_remote_artifact_content_type` can now return `None` to inform the content app that
    the requested path is a metadata file that should be streamed and not saved for the pull-through
    caching feature.
    [#3817](https://github.com/pulp/pulpcore/issues/3817)

-   Added support to pull-through caching for plugins with multi-artifact content types.

    `Content.init_from_artifact_and_relative_path` can now return a tuple of the new content unit
    and a dict containing the mapping of that content's artifacts and their relative paths.
    [#3818](https://github.com/pulp/pulpcore/issues/3818)

-   Added Distribution.content_headers_for() to let plugins affect content-app response headers.

    This can be useful, for example, when it's desirable for specific files to
    be served with Cache-control: no-cache.
    [#3897](https://github.com/pulp/pulpcore/issues/3897)

## 3.27.2 (2023-07-14) {: #3.27.2 }

### REST API

#### Bugfixes

-   Fixed circular imports caused by get_user_model calls.
    [#3957](https://github.com/pulp/pulpcore/issues/3957)
-   Pinned importlib-metadata to 6.0.1 given pip is unable to solve an opentelemetry dependency version correctly.
    [#4042](https://github.com/pulp/pulpcore/issues/4042)

### Plugin API

No significant changes.

## 3.27.1 (2023-06-05) {: #3.27.1 }

### REST API

#### Bugfixes

-   Taught PulpImport to be more robust in the face of previous failed attempts.
    [#3737](https://github.com/pulp/pulpcore/issues/3737)
-   Fixed the method for displaying the representation of `MasterModel` objects.
    [#3898](https://github.com/pulp/pulpcore/issues/3898)

### Plugin API

No significant changes.

## 3.27.0 (2023-05-31) {: #3.27.0 }

### REST API

#### Features

-   Expose user who dispatched a Task under new field `created_by`.
    [#1917](https://github.com/pulp/pulpcore/issues/1917)
-   Added `hidden` field to Distributions that toggles visibility in Content app directory listing.
    [#3538](https://github.com/pulp/pulpcore/issues/3538)

#### Bugfixes

-   Taught repair task to remove unrepairable corrupted files.
    [#1947](https://github.com/pulp/pulpcore/issues/1947)
-   Taught repair task to continue when encountering a 404 during the repair process.
    [#3611](https://github.com/pulp/pulpcore/issues/3611)
-   Serialized global reclaim space, global repair artifacts tasks with respect to each other
    to prevent them from failing.
    [#3786](https://github.com/pulp/pulpcore/issues/3786)

#### Improved Documentation

-   Release-process documentation is now more explicit about which branches are tested by CI.
    [#3841](https://github.com/pulp/pulpcore/issues/3841)
-   Added the instructions needed to enable OpenTelemetry on `pulp-api` application.
    [#3867](https://github.com/pulp/pulpcore/issues/3867)

#### Misc

-   [#3873](https://github.com/pulp/pulpcore/issues/3873)

### Plugin API

#### Features

-   Added async version of `cast` as `acast`.
    [#3873](https://github.com/pulp/pulpcore/issues/3873)

#### Bugfixes

-   Fixed potential unnecessary database calls executed after matching distributions in the content
    application.
    [#3876](https://github.com/pulp/pulpcore/issues/3876)

## 3.26.2 (2023-07-14) {: #3.26.2 }

### REST API

#### Bugfixes

-   Taught PulpImport to be more robust in the face of previous failed attempts.
    [#3737](https://github.com/pulp/pulpcore/issues/3737)
-   Pinned importlib-metadata to 6.0.1 given pip is unable to solve an opentelemetry dependency version correctly.
    [#4042](https://github.com/pulp/pulpcore/issues/4042)

### Plugin API

No significant changes.

## 3.26.1 (2023-05-25) {: #3.26.1 }

### REST API

No significant changes.

### Plugin API

#### Bugfixes

-   Fixed potential unnecessary database calls executed after matching distributions in the content
    application.
    [#3876](https://github.com/pulp/pulpcore/issues/3876)

## 3.26.0 (2023-05-16) {: #3.26.0 }

### REST API

#### Features

-   Added a pre-delete hook to domains in order to stop orphaned content preventing the deletion.
    [#3800](https://github.com/pulp/pulpcore/issues/3800)
-   Enabled OpenTelemetry metrics and tracing for the pulp-api app.
    [#3835](https://github.com/pulp/pulpcore/issues/3835)

#### Improved Documentation

-   Updated examples and fixed some typos in Domains workflow doc.
    [#3825](https://github.com/pulp/pulpcore/issues/3825)

### Plugin API

No significant changes.

## 3.25.1 (2023-05-25) {: #3.25.1 }

### REST API

No significant changes.

### Plugin API

#### Bugfixes

-   Fixed potential unnecessary database calls executed after matching distributions in the content
    application.
    [#3876](https://github.com/pulp/pulpcore/issues/3876)

## 3.25.0 (2023-05-10) {: #3.25.0 }

### REST API

#### Features

-   Added filters `with_content` and `latest_with_content` to Repository list endpoint.
    [#2865](https://github.com/pulp/pulpcore/issues/2865)
-   Updated Django version to 4.2 LTS branch.
    [#3660](https://github.com/pulp/pulpcore/issues/3660)

#### Bugfixes

-   Fixed representation of domains in created_resources on task list and show.
    [#3783](https://github.com/pulp/pulpcore/issues/3783)
-   Deferred artifact file deletion to after committing the database transaction.
    [#3807](https://github.com/pulp/pulpcore/issues/3807)

#### Misc

-   [#2993](https://github.com/pulp/pulpcore/issues/2993)

### Plugin API

#### Features

-   Created a wrapper type for UUID generation so that the implementation can potentially be
    switched in the future. UUIDs are just 128-bit integers - as long as they don't overlap
    there is no explicit need to stick with any particular implementation. Plugin writers may
    notice a migration created due to this change depending on how they have written the
    plugin.
    [#3117](https://github.com/pulp/pulpcore/issues/3117)
-   Bumped the database backend from psycopg2 to psycopg3.
    [#3792](https://github.com/pulp/pulpcore/issues/3792)

#### Removals

-   Removed `NamedModelViewSet.extract_pk` in favor of `pulpcore.plugin.util.extract_pk` and
    `raise_for_unknown_content_units` from `pulpcore.plugin.actions`, which moved to
    `pulpcore.plugin.util`.
    [#3613](https://github.com/pulp/pulpcore/issues/3613)
-   Removed the deprecated verify_signature. Use gpg_verify instead.
    [#3614](https://github.com/pulp/pulpcore/issues/3614)
-   Removed `LabelsField`, `Label`, and `LabelSelectFilter`.
    [#3615](https://github.com/pulp/pulpcore/issues/3615)
-   Updated Django version to 4.2 LTS branch. This may introduce some breaking changes to plugins.
    [#3660](https://github.com/pulp/pulpcore/issues/3660)

## 3.24.1 (2023-05-03) {: #3.24.1 }

### REST API

#### Bugfixes

-   Fixed representation of domains in created_resources on task list and show.
    [#3783](https://github.com/pulp/pulpcore/issues/3783)

### Plugin API

No significant changes.

## 3.24.0 (2023-05-02) {: #3.24.0 }

### REST API

#### Features

-   Added commands and documentation for db encryption key rotation.
    [#2048](https://github.com/pulp/pulpcore/issues/2048)
-   Added ability to filter resources by list of HREFs or IDs with `pulp_href__in` and `pulp_id__in`.
    [#2975](https://github.com/pulp/pulpcore/issues/2975)
-   Added ability to sort by type on generic list endpoints with `pulp_type__in`.
    [#3408](https://github.com/pulp/pulpcore/issues/3408)
-   Added file size to the content app listing.
    [#3656](https://github.com/pulp/pulpcore/issues/3656)
-   Changed most of the update and delete tasks to allow for immediate execution if not contested by
    other running tasks.
    [#3661](https://github.com/pulp/pulpcore/issues/3661)

#### Bugfixes

-   Fixed some deprecations in preparation to 3.25 being a breaking change release.
    [#3023](https://github.com/pulp/pulpcore/issues/3023)
-   Task purge now continues when encountering a task that could not be deleted. The user is informed
    about any such tasks.
    [#3530](https://github.com/pulp/pulpcore/issues/3530)
-   Fixed package timestamp on content app to reflect time package was added to the repository.
    [#3653](https://github.com/pulp/pulpcore/issues/3653)
-   Fixed import/export in the presence of the domains work.
    [#3663](https://github.com/pulp/pulpcore/issues/3663)
-   Fixed a regular expression used when listing directories.
    [#3673](https://github.com/pulp/pulpcore/issues/3673)
-   Optimized queries needed when listing Tasks.
    [#3711](https://github.com/pulp/pulpcore/issues/3711)
-   Optimized DB queries for content, distribution, publication, remote, repository, and repository-version list endpoints.
    [#3714](https://github.com/pulp/pulpcore/issues/3714)
-   Downloader will now attempt to keep the filename of the requested URL intact if one exists.
    [#3715](https://github.com/pulp/pulpcore/issues/3715)
-   Fixed returned error codes for unauthenticated users. Pulp now returns HTTP 401 errors instead of
    HTTP 403 errors which were default return types for `SessionAuthentication`.
    [#3730](https://github.com/pulp/pulpcore/issues/3730)
-   Fixed issue with deleting export tasks via purge.
    [#3741](https://github.com/pulp/pulpcore/issues/3741)
-   Closed the window for a race condition in content creation.
    [#3754](https://github.com/pulp/pulpcore/issues/3754)

#### Improved Documentation

-   Updated contributor docs to point to the `oci-env` for the developer environment.
    [#3444](https://github.com/pulp/pulpcore/issues/3444)
-   Fixed infinite loading when searching for specific terms.
    [#3667](https://github.com/pulp/pulpcore/issues/3667)

#### Misc

-   [#3247](https://github.com/pulp/pulpcore/issues/3247)

### Plugin API

#### Features

-   Added flags `immediate` and `deferred` to `dispatch` to allow specifying whether a task can
    be attempted to run synchronously and whether it can be deferred.
    [#3661](https://github.com/pulp/pulpcore/issues/3661)

## 3.23.24 (2024-01-09) {: #3.23.24 }

### REST API

No significant changes.

### Plugin API

No significant changes.

---

## 3.23.23 (2023-11-29) {: #3.23.23 }

### REST API

#### Bugfixes

-   Removed a workaround to force close all tcp connections in sync leading to an exhaustion of port
    numbers and their reuse while in time_wait state.
    [#4452](https://github.com/pulp/pulpcore/issues/4452)

### Plugin API

No significant changes.

## 3.23.22 (2023-11-23) {: #3.23.22 }

### REST API

#### Bugfixes

-   Fix <file://> syncs deleting the original files.
    [#4681](https://github.com/pulp/pulpcore/issues/4681)

### Plugin API

No significant changes.

## 3.23.21 (2023-11-14) {: #3.23.21 }

### REST API

#### Bugfixes

-   Resolved a sync-time performance regression.
    [#4591](https://github.com/pulp/pulpcore/issues/4591)

### Plugin API

No significant changes.

## 3.23.20 (2023-10-16) {: #3.23.20 }

### REST API

#### Bugfixes

-   Improve performance during export operations.
    [#4551](https://github.com/pulp/pulpcore/issues/4551)
-   Taught ContentArtifactResource import to cache content results to improve performance.
    [#4564](https://github.com/pulp/pulpcore/issues/4564)

### Plugin API

No significant changes.

## 3.23.19 (2023-10-05) {: #3.23.19 }

### REST API

#### Bugfixes

-   Removed compression from exports (using gzip level 0). For most users of export functionality it seems to be a poor tradeoff.
    [#4434](https://github.com/pulp/pulpcore/issues/4434)
-   Added `format` param to `DEFAULT_FILTERS` in `BaseFilterSet` to fix django api format.
    [#4450](https://github.com/pulp/pulpcore/issues/4450)

### Plugin API

No significant changes.

## 3.23.18 (2023-09-27) {: #3.23.18 }

### REST API

#### Bugfixes

-   Fixed sync not deleting temporary files when WORKING_DIRECTORY is not a sub-directory of MEDIA_ROOT
    or when using a non-filesystem storage backend.
    [#1936](https://github.com/pulp/pulpcore/issues/1936)
-   Ensure non-chunked exports also use gzip `compressionlevel=1`
    [#4411](https://github.com/pulp/pulpcore/issues/4411)
-   Fixed the return value of `get_users_with_perms_attached_roles` to give proper role names.
    [#4478](https://github.com/pulp/pulpcore/issues/4478)

### Plugin API

No significant changes.

## 3.23.17 (2023-09-06) {: #3.23.17 }

### REST API

#### Bugfixes

-   Ensure the compression level is reliably set properly as per #3869.
    [#4351](https://github.com/pulp/pulpcore/issues/4351)
-   Fix encrypted fields to use json instead of repr/eval and make them fit for `bulk_update`.
    This solves an issue with `pulpcore-manager rotate-db-key` corrupting data.
    [#4359](https://github.com/pulp/pulpcore/issues/4359)

### Plugin API

No significant changes.

## 3.23.16 (2023-08-23) {: #3.23.16 }

### REST API

#### Bugfixes

-   Improved the performance when looking up content for repository versions.
    [#3969](https://github.com/pulp/pulpcore/issues/3969)
-   Fixed bug where incorrect error message presented in relation to content-import
    [#4294](https://github.com/pulp/pulpcore/issues/4294)

### Plugin API

No significant changes.

## 3.23.15 (2023-08-08) {: #3.23.15 }

### REST API

#### Bugfixes

-   Fixed bug where tls_validation, client_key, and client_cert were not getting set on replication remotes.
    [#4247](https://github.com/pulp/pulpcore/issues/4247)

### Plugin API

No significant changes.

## 3.23.14 (2023-08-01) {: #3.23.14 }

### REST API

#### Bugfixes

-   Fixed a bug where replication remotes did not have their URLs updated on subsequent runs.
    [#4218](https://github.com/pulp/pulpcore/issues/4218)
-   Fixed a bug where ca_cert was not getting set for replication remotes.
    [#4219](https://github.com/pulp/pulpcore/issues/4219)
-   Correctly fixed pulp_rpm-export-edgecase - fix #4210 was incomplete.
    [#4231](https://github.com/pulp/pulpcore/issues/4231)

### Plugin API

No significant changes.

## 3.23.13 (2023-07-31) {: #3.23.13 }

### REST API

#### Bugfixes

-   Taught PulpImport to be more robust in the face of previous failed attempts.
    [#3737](https://github.com/pulp/pulpcore/issues/3737)
-   Made the incremental file export include all published metadata.
    [#3941](https://github.com/pulp/pulpcore/issues/3941)
-   Updates file system exporter to correctly account the start_repository_version for pass_through publications
    [#4051](https://github.com/pulp/pulpcore/issues/4051)
-   Fix a subtle export bug introduced from the optimizations in #4159.
    [#4210](https://github.com/pulp/pulpcore/issues/4210)

### Plugin API

No significant changes.

## 3.23.12 (2023-07-29) {: #3.23.12 }

### REST API

#### Bugfixes

-   Made reclaim space task more tolerant in the face of artifact shared between two content units.
    [#3610](https://github.com/pulp/pulpcore/issues/3610)

-   Fixed a bug with the replicate API not handling Upstream Pulp API over HTTPS.
    [#3910](https://github.com/pulp/pulpcore/issues/3910)

-   Taught pulp-import to be able to use a subset of available worker-threads.
    [#4068](https://github.com/pulp/pulpcore/issues/4068)

-   Updated the downloader's fetch method to comply with Python 3.11.
    [#4107](https://github.com/pulp/pulpcore/issues/4107)

-   Fixed a bug where repositories were getting deleted accross domains.
    [#4158](https://github.com/pulp/pulpcore/issues/4158)

-   Taught the Artifact.json of an export to hold minimum-unique-set of Artifact entries.

    In highly-duplicated-content export scenarios, this can mean a significant decrease
    in export-size, and significant improvement in import-performance.
    [#4159](https://github.com/pulp/pulpcore/issues/4159)

-   Fixed bug where the Task Group for replication would be marked as fully dispatched after just one
    replicator.
    [#4175](https://github.com/pulp/pulpcore/issues/4175)

#### Misc

-   [#3923](https://github.com/pulp/pulpcore/issues/3923)

### Plugin API

No significant changes.

## 3.23.11 (2023-07-25) {: #3.23.11 }

### REST API

#### Bugfixes

-   Fixed a 500 error for Upstream Pulp Replicate API when domains are enabled.
    [#4119](https://github.com/pulp/pulpcore/issues/4119)
-   Fixed the OpenAPI schema for the 'replicate' operation response.
    [#4121](https://github.com/pulp/pulpcore/issues/4121)

### Plugin API

No significant changes.

## 3.23.10 (2023-07-22) {: #3.23.10 }

### REST API

#### Bugfixes

-   Resolved a memory leak that could occur while making large repeated queries against the API service.
    [#2250](https://github.com/pulp/pulpcore/issues/2250)
-   Taught repair task to be tolerant in the face of any artifact download failure.
    [#4111](https://github.com/pulp/pulpcore/issues/4111)

### Plugin API

No significant changes.

## 3.23.9 (2023-07-19) {: #3.23.9 }

### REST API

#### Bugfixes

-   Fixed duplicate OpenAPI operation ids when using domains.
    [#3977](https://github.com/pulp/pulpcore/issues/3977)

### Plugin API

No significant changes.

## 3.23.8 (2023-07-12) {: #3.23.8 }

### REST API

#### Bugfixes

-   Fix api schema of the upstream_pulp_replicate operation requiring no body.
    [#3995](https://github.com/pulp/pulpcore/issues/3995)

### Plugin API

No significant changes.

## 3.23.7 (2023-06-14) {: #3.23.7 }

### REST API

#### Bugfixes

-   Exports now use gzip compression level 1 rather than compression level 9. Exported archives will
    now be slightly larger, but exports should be much faster. This is considered to be a more
    optimal balance of space/time for the export operation.
    [#3869](https://github.com/pulp/pulpcore/issues/3869)

### Plugin API

No significant changes.

## 3.23.6 (2023-05-30) {: #3.23.6 }

### REST API

#### Bugfixes

-   Taught repair task to remove unrepairable corrupted files.
    [#1947](https://github.com/pulp/pulpcore/issues/1947)
-   Taught repair task to continue when encountering a 404 during the repair process.
    [#3611](https://github.com/pulp/pulpcore/issues/3611)

### Plugin API

No significant changes.

## 3.23.5 (2023-05-23) {: #3.23.5 }

### REST API

#### Bugfixes

-   Serialized global reclaim space, global repair artifacts tasks with respect to each other
    to prevent them from failing.
    [#3786](https://github.com/pulp/pulpcore/issues/3786)

### Plugin API

No significant changes.

## 3.23.4 (2023-05-10) {: #3.23.4 }

### REST API

#### Bugfixes

-   Task purge now continues when encountering a task that could not be deleted. The user is informed
    about any such tasks.
    [#3530](https://github.com/pulp/pulpcore/issues/3530)
-   Closed the window for a race condition in content creation.
    [#3754](https://github.com/pulp/pulpcore/issues/3754)

### Plugin API

No significant changes.

## 3.23.3 (2023-04-18) {: #3.23.3 }

### REST API

No significant changes.

### Plugin API

No significant changes.

## 3.23.2 (2023-04-11) {: #3.23.2 }

### REST API

#### Bugfixes

-   Fixed package timestamp on content app to reflect time package was added to the repository.
    [#3653](https://github.com/pulp/pulpcore/issues/3653)
-   Downloader will now attempt to keep the filename of the requested URL intact if one exists.
    [#3715](https://github.com/pulp/pulpcore/issues/3715)

### Plugin API

No significant changes.

## 3.23.1 (2023-03-27) {: #3.23.1 }

### REST API

#### Bugfixes

-   Fixed import/export in the presence of the domains work.
    [#3663](https://github.com/pulp/pulpcore/issues/3663)
-   Fixed a regular expression used when listing directories.
    [#3673](https://github.com/pulp/pulpcore/issues/3673)

### Plugin API

No significant changes.

## 3.23.0 (2023-03-14) {: #3.23.0 }

### REST API

#### Features

-   Added a repository exact and in filters to the Distributions API.
    [#3394](https://github.com/pulp/pulpcore/issues/3394)
-   Added a new optional multi-tenancy namespacing feature: Domains. See workflow documentation for more
    information on this tech-preview feature.
    [#3403](https://github.com/pulp/pulpcore/issues/3403)
-   Add GCP support
    [#3424](https://github.com/pulp/pulpcore/issues/3424)
-   Added `retain_repo_versions` filter to Repository endpoint.
    [#3507](https://github.com/pulp/pulpcore/issues/3507)
-   Pass correlation id to signing script through ENV variable
    [#3522](https://github.com/pulp/pulpcore/issues/3522)
-   Added ability to replicate distributions/repositories from another Pulp.
    [#3566](https://github.com/pulp/pulpcore/issues/3566)
-   Started to collect statistics about RBAC (amd domain) usage.
    [#3639](https://github.com/pulp/pulpcore/issues/3639)

#### Bugfixes

-   Bump dynaconf version to 3.1.12 given it fixes a bug to handle failures when pwd does not exist.
    [#3310](https://github.com/pulp/pulpcore/issues/3310)

-   Added validation to the repository modify endpoint.
    [#3326](https://github.com/pulp/pulpcore/issues/3326)

-   Addressed a possible N+1 query performance issue within reclaim_space task.
    [#3404](https://github.com/pulp/pulpcore/issues/3404)

-   Added repeating logic to signalling a task worker subprocess. This should fix a bug where the
    task refuses to be terminated easily.
    [#3407](https://github.com/pulp/pulpcore/issues/3407)

-   Added a `start_repository_version` parameter to the file system exporter.

    If specified, it will export only content units that differed between two repository versions.
    [#3413](https://github.com/pulp/pulpcore/issues/3413)

-   Fixed the label migration code for not null constraint errors when objects with and without labels
    are migrated.
    [#3495](https://github.com/pulp/pulpcore/issues/3495)

-   Added int64 format to integer fields in api schema.
    [#3590](https://github.com/pulp/pulpcore/issues/3590)

-   Fixed a bug that caused Pulp to return duplicate content when a user was logged in as a
    non-superuser while the content was part of multiple repositories.
    [#3641](https://github.com/pulp/pulpcore/issues/3641)

-   Added missing validation to the `repair` endpoint.
    [#3645](https://github.com/pulp/pulpcore/issues/3645)

-   Fixed bug related to pulpcore-content serving content from a remote (pull-through-cache).
    [#3654](https://github.com/pulp/pulpcore/issues/3654)

#### Improved Documentation

-   Revisited features in tech preview (e.g., ACS, RBAC, metadata signing, import/export) and marked
    them production ready.
    [#3429](https://github.com/pulp/pulpcore/issues/3429)
-   Documented PostgreSQL version compatibility and incompatibility with transaction based connection
    pooling.
    [#3505](https://github.com/pulp/pulpcore/issues/3505)
-   Updated the release-process doc to be more complete.
    [#3514](https://github.com/pulp/pulpcore/issues/3514)
-   Added links to the Containerfiles used for building the pulp and pulp-minimal OCI images.
    [#3627](https://github.com/pulp/pulpcore/issues/3627)

#### Removals

-   Removed the PROFILE_STAGES_API setting along with the dependent code.
    [#3595](https://github.com/pulp/pulpcore/issues/3595)

#### Misc

-   [#3446](https://github.com/pulp/pulpcore/issues/3446), [#3541](https://github.com/pulp/pulpcore/issues/3541), [#3569](https://github.com/pulp/pulpcore/issues/3569), [#3574](https://github.com/pulp/pulpcore/issues/3574), [#3584](https://github.com/pulp/pulpcore/issues/3584), [#3638](https://github.com/pulp/pulpcore/issues/3638)

### Plugin API

#### Features

-   Refactored `ArtifactDownloader` stage logic into base class `GenericDownloader` and allow for
    the progress reports message and code to be customized by subclasses.
    [#1931](https://github.com/pulp/pulpcore/issues/1931)
-   Added version information to the worker records in the database.
    [#3365](https://github.com/pulp/pulpcore/issues/3365)
-   Added new config option `domain_compatible` to `PluginAppConfig` to specify Domains feature
    compatibility within a plugin. See Domains compatibility documentation in plugin-writer section for
    more information.
    [#3403](https://github.com/pulp/pulpcore/issues/3403)
-   Exported `TaskSerializer` in `pulpcore.plugin.serializers`
    [#3506](https://github.com/pulp/pulpcore/issues/3506)
-   Added Replicator class that plugins can implement to enable distribution/repository replication.
    [#3566](https://github.com/pulp/pulpcore/issues/3566)
-   Exposed a function for extracting PKs from URIs and a function for validating content units
    (`pulpcore.plugin.util.extract_pk`, `pulpcore.plugin.util.raise_for_unknown_content_units`).
    [#3604](https://github.com/pulp/pulpcore/issues/3604)
-   Add `label_field_name` arg to `LabelFilter()` filter that allows plugin devs to
    customize the model field that `LabelFilter` filters on.
    [#3631](https://github.com/pulp/pulpcore/issues/3631)

#### Bugfixes

-   Added HiddenFieldsMixin to the plugin API.
    [#3520](https://github.com/pulp/pulpcore/issues/3520)
-   Exported `LabelFilter` to the plugin api as a replacement for the deprecated
    `LabelSelectFilter`.
    [#3570](https://github.com/pulp/pulpcore/issues/3570)

#### Improved Documentation

-   Adds docs that plugin writers tasks must be backwards compatible until the next major Pulp version.
    [#3368](https://github.com/pulp/pulpcore/issues/3368)
-   Adds docs on the need and possible options for writing migrations in a way that they could be
    applied to a running Pulp system.
    [#3443](https://github.com/pulp/pulpcore/issues/3443)

#### Deprecations

-   Deprecated `NamedModelViewSet.extract_pk` in favour of `pulpcore.plugin.util.extract_pk`.
    Deprecated `pulpcore.plugin.actions.raise_for_unknown_content_units` in favour of
    `pulpcore.plugin.util.raise_for_unknown_content_units`.
    [#3604](https://github.com/pulp/pulpcore/issues/3604)

## 3.22.35 (2025-01-08) {: #3.22.35 }

### REST API {: #3.22.35-rest-api }

No significant changes.

### Plugin API {: #3.22.35-plugin-api }

No significant changes.

---

## 3.22.34 (2024-11-26) {: #3.22.34 }

### REST API {: #3.22.34-rest-api }

No significant changes.

### Plugin API {: #3.22.34-plugin-api }

No significant changes.

---

## 3.22.33 (2024-11-13) {: #3.22.33 }

### REST API {: #3.22.33-rest-api }

No significant changes.

### Plugin API {: #3.22.33-plugin-api }

No significant changes.

---

## 3.22.32 (2024-11-06) {: #3.22.32 }

### REST API {: #3.22.32-rest-api }

#### Bugfixes {: #3.22.32-rest-api-bugfix }

- Fixed the JSONField specification so it doesn't break ruby bindings.
  See context [here](https://github.com/pulp/pulp_rpm/issues/3639).

### Plugin API {: #3.22.32-plugin-api }

No significant changes.

---

## 3.22.31 (2024-10-01) {: #3.22.31 }

### REST API {: #3.22.31-rest-api }

#### Bugfixes {: #3.22.31-rest-api-bugfix }

- Fixed a bug that caused Pulp to return duplicate content when a user was logged in as a
  non-superuser while the content was part of multiple repositories.
  [#3641](https://github.com/pulp/pulpcore/issues/3641)

### Plugin API {: #3.22.31-plugin-api }

No significant changes.

---

## 3.22.30 (2024-08-10) {: #3.22.30 }

### REST API {: #3.22.30-rest-api }

#### Bugfixes {: #3.22.30-rest-api-bugfix }

- Fixed RBAC permissions being incorrectly assigned in tasks that create objects.
  https://access.redhat.com/security/cve/cve-2024-7143
  [#5683](https://github.com/pulp/pulpcore/issues/5683)

### Plugin API {: #3.22.30-plugin-api }

No significant changes.

---

## 3.22.29 (2024-07-16) {: #3.22.29 }


### REST API {: #3.22.29-rest-api }

#### Bugfixes {: #3.22.29-rest-api-bugfix }

- Browsable HREFs now have clickable links again.
  [#5563](https://github.com/pulp/pulpcore/issues/5563)

### Plugin API {: #3.22.29-plugin-api }

No significant changes.

---

## 3.22.28 (2024-06-24) {: #3.22.28 }


### REST API {: #3.22.28-rest-api }

#### Bugfixes {: #3.22.28-rest-api-bugfix }

- Fixed openapi command where plugins relied on CONTENT_ORIGIN to be set.
  [#5510](https://github.com/pulp/pulpcore/issues/5510)

### Plugin API {: #3.22.28-plugin-api }

No significant changes.

---

## 3.22.27 (2024-06-18) {: #3.22.27 }


### REST API {: #3.22.27-rest-api }

#### Misc {: #3.22.27-rest-api-misc }

- [#5462](https://github.com/pulp/pulpcore/issues/5462)

### Plugin API {: #3.22.27-plugin-api }

No significant changes.

---

!!! warning
    Until Role-Based Access Control is added to Pulp, REST API is not safe for multi-user use.
    Sensitive credentials can be read by any user, e.g. `Remote.password`, `Remote.client_key`.

## 3.22.26 (2024-05-14) {: #3.22.26 }

### REST API

#### Bugfixes

-   Stopped deleting content and artifacts presumably created by later failed or canceled tasks.
    Deleting these lies solely in the responsibility of orphan cleanup.
    [#5363](https://github.com/pulp/pulpcore/issues/5363)

### Plugin API

No significant changes.

---

## 3.22.25 (2024-04-17) {: #3.22.25 }

### REST API

No significant changes.

### Plugin API

No significant changes.

---

## 3.22.24 (2024-03-26) {: #3.22.24 }

### REST API

#### Misc

-   [#3574](https://github.com/pulp/pulpcore/issues/3574)

### Plugin API

No significant changes.

---

## 3.22.23 (2024-03-26) {: #3.22.23 }

### REST API

No significant changes.

### Plugin API

No significant changes.

---

## 3.22.22 (2024-01-30) {: #3.22.22 }

### REST API

#### Bugfixes

-   Fixed a warning that gets raised when cache is enabled: `RuntimeWarning: coroutine 'AsyncCache.delete' was never awaited`.
    [#4967](https://github.com/pulp/pulpcore/issues/4967)

### Plugin API

No significant changes.

---

## 3.22.21 (2024-01-09) {: #3.22.21 }

### REST API

No significant changes.

### Plugin API

No significant changes.

---

## 3.22.20 (2023-11-30) {: #3.22.20 }

### REST API

#### Bugfixes

-   Removed a workaround to force close all tcp connections in sync leading to an exhaustion of port
    numbers and their reuse while in time_wait state.
    [#4452](https://github.com/pulp/pulpcore/issues/4452)

### Plugin API

No significant changes.

## 3.22.19 (2023-11-15) {: #3.22.19 }

### REST API

#### Bugfixes

-   Fix <file://> syncs deleting the original files.
    [#4681](https://github.com/pulp/pulpcore/issues/4681)

### Plugin API

No significant changes.

## 3.22.18 (2023-11-03) {: #3.22.18 }

### REST API

#### Bugfixes

-   Resolved a sync-time performance regression.
    [#4591](https://github.com/pulp/pulpcore/issues/4591)

### Plugin API

No significant changes.

## 3.22.17 (2023-10-16) {: #3.22.17 }

### REST API

#### Bugfixes

-   Improve performance during export operations.
    [#4551](https://github.com/pulp/pulpcore/issues/4551)
-   Taught ContentArtifactResource import to cache content results to improve performance.
    [#4564](https://github.com/pulp/pulpcore/issues/4564)

### Plugin API

No significant changes.

## 3.22.16 (2023-09-27) {: #3.22.16 }

### REST API

#### Bugfixes

-   Fixed sync not deleting temporary files when WORKING_DIRECTORY is not a sub-directory of MEDIA_ROOT
    or when using a non-filesystem storage backend.
    [#1936](https://github.com/pulp/pulpcore/issues/1936)

#### Misc

-   [#4436](https://github.com/pulp/pulpcore/issues/4436)

### Plugin API

No significant changes.

## 3.22.15 (2023-09-20) {: #3.22.15 }

### REST API

#### Bugfixes

-   Ensure non-chunked exports and chunked exports use the same compression level.
    [#4411](https://github.com/pulp/pulpcore/issues/4411)
-   Removed compression from exports (using gzip level 0). For most users of export functionality it seems to be a poor tradeoff.
    [#4434](https://github.com/pulp/pulpcore/issues/4434)

### Plugin API

No significant changes.

## 3.22.14 (2023-09-06) {: #3.22.14 }

### REST API

#### Bugfixes

-   Ensure the compression level is reliably set properly as per #3869.
    [#4351](https://github.com/pulp/pulpcore/issues/4351)

### Plugin API

No significant changes.

## 3.22.13 (2023-08-23) {: #3.22.13 }

### REST API

#### Bugfixes

-   Improved the performance when looking up content for repository versions.
    [#3969](https://github.com/pulp/pulpcore/issues/3969)
-   Fixed bug where incorrect error message presented in relation to content-import
    [#4294](https://github.com/pulp/pulpcore/issues/4294)

### Plugin API

No significant changes.

## 3.22.12 (2023-08-01) {: #3.22.12 }

### REST API

#### Bugfixes

-   Correctly fixed pulp_rpm-export-edgecase - fix #4210 was incomplete.
    [#4231](https://github.com/pulp/pulpcore/issues/4231)

### Plugin API

No significant changes.

## 3.22.11 (2023-07-31) {: #3.22.11 }

### REST API

#### Bugfixes

-   Fix a subtle export bug introduced from the optimizations in #4159.
    [#4210](https://github.com/pulp/pulpcore/issues/4210)

### Plugin API

No significant changes.

## 3.22.10 (2023-07-29) {: #3.22.10 }

### REST API

#### Bugfixes

-   Made reclaim space task more tolerant in the face of artifact shared between two content units.
    [#3610](https://github.com/pulp/pulpcore/issues/3610)

-   Taught pulp-import to be able to use a subset of available worker-threads.
    [#4068](https://github.com/pulp/pulpcore/issues/4068)

-   Updated the downloader's fetch method to comply with Python 3.11.
    [#4107](https://github.com/pulp/pulpcore/issues/4107)

-   Taught the Artifact.json of an export to hold minimum-unique-set of Artifact entries.

    In highly-duplicated-content export scenarios, this can mean a significant decrease
    in export-size, and significant improvement in import-performance.
    [#4159](https://github.com/pulp/pulpcore/issues/4159)

### Plugin API

No significant changes.

## 3.22.9 (2023-07-22) {: #3.22.9 }

### REST API

#### Bugfixes

-   Resolved a memory leak that could occur while making large repeated queries against the API service.
    [#2250](https://github.com/pulp/pulpcore/issues/2250)
-   Added repeating logic to signalling a task worker subprocess. This should fix a bug where the
    task refuses to be terminated easily.
    [#3407](https://github.com/pulp/pulpcore/issues/3407)
-   Taught repair task to be tolerant in the face of any artifact download failure.
    [#4111](https://github.com/pulp/pulpcore/issues/4111)

### Plugin API

No significant changes.

## 3.22.8 (2023-07-19) {: #3.22.8 }

### REST API

#### Bugfixes

-   Made the incremental file export include all published metadata.
    [#3941](https://github.com/pulp/pulpcore/issues/3941)
-   Updates file system exporter to correctly account the start_repository_version for pass_through publications
    [#4051](https://github.com/pulp/pulpcore/issues/4051)

### Plugin API

No significant changes.

## 3.22.7 (2023-06-14) {: #3.22.7 }

### REST API

#### Bugfixes

-   Exports now use gzip compression level 1 rather than compression level 9. Exported archives will
    now be slightly larger, but exports should be much faster. This is considered to be a more
    optimal balance of space/time for the export operation.
    [#3869](https://github.com/pulp/pulpcore/issues/3869)

### Plugin API

No significant changes.

## 3.22.6 (2023-06-07) {: #3.22.6 }

### REST API

#### Bugfixes

-   Taught PulpImport to be more robust in the face of previous failed attempts.
    [#3737](https://github.com/pulp/pulpcore/issues/3737)

### Plugin API

No significant changes.

## 3.22.5 (2023-05-30) {: #3.22.5 }

### REST API

#### Bugfixes

-   Taught repair task to remove unrepairable corrupted files.
    [#1947](https://github.com/pulp/pulpcore/issues/1947)
-   Taught repair task to continue when encountering a 404 during the repair process.
    [#3611](https://github.com/pulp/pulpcore/issues/3611)

### Plugin API

No significant changes.

## 3.22.4 (2023-04-11) {: #3.22.4 }

### REST API

#### Bugfixes

-   Fixed package timestamp on content app to reflect time package was added to the repository.
    [#3653](https://github.com/pulp/pulpcore/issues/3653)
-   Downloader will now attempt to keep the filename of the requested URL intact if one exists.
    [#3715](https://github.com/pulp/pulpcore/issues/3715)

### Plugin API

No significant changes.

## 3.22.3 (2023-03-06) {: #3.22.3 }

### REST API

No significant changes.

### Plugin API

No significant changes.

## 3.22.2 (2023-02-02) {: #3.22.2 }

### REST API

#### Bugfixes

-   Added a `start_repository_version` parameter to the file system exporter.

    If specified, it will export only content units that differed between two repository versions.
    [#3413](https://github.com/pulp/pulpcore/issues/3413)

### Plugin API

No significant changes.

## 3.22.1 (2023-01-20) {: #3.22.1 }

### REST API

#### Bugfixes

-   Fixed the label migration code for not null constraint errors when objects with and without labels
    are migrated.
    [#3495](https://github.com/pulp/pulpcore/issues/3495)

### Plugin API

No significant changes.

## 3.22.0 (2022-12-18) {: #3.22.0 }

### REST API

#### Features

-   Added dates to the HTML pages listing the content of distributions. The timestamp is of when the
    content was created in Pulp.
    [#2054](https://github.com/pulp/pulpcore/issues/2054)
-   Create HiddenFieldsMixin serializer and add hidden_fields to RemoteSerializer and UserSerializer.
    [#2825](https://github.com/pulp/pulpcore/issues/2825)
-   Added `pulpcore-manager` command called `remove-signing-service` for removing specified signing services.
    [#2967](https://github.com/pulp/pulpcore/issues/2967)
-   Added the option HIDE_GUARDED_DISTRIBUTIONS to allow hiding the content guard protected
    distributions from the listing page.
    [#3061](https://github.com/pulp/pulpcore/issues/3061)
-   Added "content_settings" stanza to the /status/ output.
    [#3138](https://github.com/pulp/pulpcore/issues/3138)
-   Added expiry to preauthenticated URLs from ContentRedirectingContentGuard.
    [#3238](https://github.com/pulp/pulpcore/issues/3238)
-   Added `reserved_resources`, `reserved_resources__in`, `exclusive_resources`,
    `exclusive_resources__in`, `shared_resources` and `shared_resources__in` filter to task
    list endpoint.
    [#3280](https://github.com/pulp/pulpcore/issues/3280)
-   The postgresql version is now included in analytics data posted. The payload looks like:
    `` {`'postgresqlVersion': 90200} ``. The integer value is the raw format postgresql reports its
    version as.
    [#3396](https://github.com/pulp/pulpcore/issues/3396)
-   The new `ANALYTICS` setting replaced the `TELEMETRY` setting to avoid confusion with
    application metrics that will be exposed using OpenTelemetry.
    [#3417](https://github.com/pulp/pulpcore/issues/3417)

#### Bugfixes

-   Fixed the fs exporter to handle the case where there are pre-existing files in the location that FileSystem attempts to export to you get a FileExistsError.
    [#1949](https://github.com/pulp/pulpcore/issues/1949)
-   The logging_cid field of a task can no longer be an empty string.
    [#3016](https://github.com/pulp/pulpcore/issues/3016)
-   Fixed content-disposition header which is used in the object storage backends.
    [#3124](https://github.com/pulp/pulpcore/issues/3124)
-   Fixed the fs exporter to handle the case where hardlink method was requested but pulp and export locations are in different partitions so can't share the same inode.
    [#3187](https://github.com/pulp/pulpcore/issues/3187)
-   Another guardrail added around content-stages to address deadlock in a specific usecase.
    [#3192](https://github.com/pulp/pulpcore/issues/3192)
-   Fixed bug where installations with at least one pre-release plugin installed were posting to the
    production analytics site instead of the developer analytics site.
    [#3213](https://github.com/pulp/pulpcore/issues/3213)
-   Fixed the worker__in filter for Tasks API.
    [#3235](https://github.com/pulp/pulpcore/issues/3235)
-   Do not expose artifact digest via content-disposition header when using Azure backend.
    [#3244](https://github.com/pulp/pulpcore/issues/3244)
-   Fixed a bug that disallowed non-admin users to purge completed tasks.
    [#3263](https://github.com/pulp/pulpcore/issues/3263)
-   Made ordering consistent between all list API endpoints.
    [#3266](https://github.com/pulp/pulpcore/issues/3266)
-   Another step on closing the deadlock-window when syncing overlapping content.
    [#3284](https://github.com/pulp/pulpcore/issues/3284)
-   Fixed an occasional 500 error when viewing a repository version content summary while performing a content deletion task.
    [#3299](https://github.com/pulp/pulpcore/issues/3299)
-   Fixed an error when raising `UnexportableArtifactException`.
    [#3313](https://github.com/pulp/pulpcore/issues/3313)
-   Hardened the state transition for tasks and ensured a canceled task will have finished_at set.
    [#3319](https://github.com/pulp/pulpcore/issues/3319)
-   Made sure PulpImport's use of tar.extractall() is safe.
    [#3323](https://github.com/pulp/pulpcore/issues/3323)
-   Fixed content disposition header value when content is stored in Azure.
    [#3342](https://github.com/pulp/pulpcore/issues/3342)
-   Fixes schema generation to use proper type uri for `HyperlinkRelatedFilter`.
    [#3351](https://github.com/pulp/pulpcore/issues/3351)
-   Insured that pulp-export correctly locks repos-being-exported.
    [#3370](https://github.com/pulp/pulpcore/issues/3370)
-   Fixed the update of default access policies when fields are missing.
    [#3391](https://github.com/pulp/pulpcore/issues/3391)
-   Fixed the openapi spec of "fields" and "exclude_fields" querystring parameters.
    [#3398](https://github.com/pulp/pulpcore/issues/3398)
-   Fixed label querying performance issues.
    In case some labels could not be migrated properly, a `datarepair-labels` command was added.
    [#3400](https://github.com/pulp/pulpcore/issues/3400)
-   Fix migrating Remotes with @ in path
    [#3409](https://github.com/pulp/pulpcore/issues/3409)
-   Fixed the broken link on the root page served by pulpcore-content.
    [#3436](https://github.com/pulp/pulpcore/issues/3436)

#### Improved Documentation

-   Improvements clarifying how to specify settings and which settings are required.
    [#2417](https://github.com/pulp/pulpcore/issues/2417)
-   Documented Pulpcore and Plugin release processes.
    [#3204](https://github.com/pulp/pulpcore/issues/3204)
-   Separated the user plugin listing from the plugin developer docs more clearly.
    [#3260](https://github.com/pulp/pulpcore/issues/3260)
-   Remove the ansible collection from the recommendation
    [#3430](https://github.com/pulp/pulpcore/issues/3430)

#### Deprecations

-   `` TELEMETRY` setting was deprecated in favor of ``ANALYTICS`.
    #3417 <[https://github.com/pulp/pulpcore/issues/3417](https://github.com/pulp/pulpcore/issues/3417)>`__

#### Misc

-   [#3232](https://github.com/pulp/pulpcore/issues/3232), [#3333](https://github.com/pulp/pulpcore/issues/3333), [#3334](https://github.com/pulp/pulpcore/issues/3334), [#3461](https://github.com/pulp/pulpcore/issues/3461)

### Plugin API

#### Features

-   Added `get_artifact_url` to emit preauthed urls to existing artifacts.
    [#2785](https://github.com/pulp/pulpcore/issues/2785)
-   The upload feature was changed to accept already existing content. This allows multiple users
    to own identical content when working with plugins that implement the 'retrieve' method
    inside their `ContentUpload` serializers.
    [#3081](https://github.com/pulp/pulpcore/issues/3081)
-   Exposed `ArtifactResponse` at `pulpcore.plugin.responses`.
    [#3340](https://github.com/pulp/pulpcore/issues/3340)
-   Exposed the `get_url` util function.
    [#3468](https://github.com/pulp/pulpcore/issues/3468)

#### Bugfixes

-   Added `BaseFilterSet` to `NamedModelViewSet` to allow ordering on all list endpoints even
    without specifying a custom filterset class.
    [#3266](https://github.com/pulp/pulpcore/issues/3266)

#### Improved Documentation

-   Added documentation for plugin writers on declaring dependencies.
    [#2997](https://github.com/pulp/pulpcore/issues/2997)

#### Removals

-   Deprecated model `Label` and serializer field `LabelField` and `LabelSelectFilter` for
    removal in 3.25.
    [#3400](https://github.com/pulp/pulpcore/issues/3400)

## 3.21.36 (2024-11-13) {: #3.21.36 }

### REST API {: #3.21.36-rest-api }

No significant changes.

### Plugin API {: #3.21.36-plugin-api }

No significant changes.

---

## 3.21.35 (2024-10-31) {: #3.21.35 }

### REST API {: #3.21.35-rest-api }

#### Bugfixes {: #3.21.35-rest-api-bugfix }

- Fixed the JSONField specification so it doesn't break ruby bindings.
  See context [here](https://github.com/pulp/pulp_rpm/issues/3639).

### Plugin API {: #3.21.35-plugin-api }

No significant changes.

---

## 3.21.34 (2024-10-01) {: #3.21.34 }

### REST API {: #3.21.34-rest-api }

#### Bugfixes {: #3.21.34-rest-api-bugfix }

- Fixed a bug that caused Pulp to return duplicate content when a user was logged in as a
  non-superuser while the content was part of multiple repositories.
  [#3641](https://github.com/pulp/pulpcore/issues/3641)

### Plugin API {: #3.21.34-plugin-api }

No significant changes.

---

## 3.21.33 (2024-08-12) {: #3.21.33 }

### REST API {: #3.21.33-rest-api }

#### Bugfixes {: #3.21.33-rest-api-bugfix }

- Fixed RBAC permissions being incorrectly assigned in tasks that create objects.
  https://access.redhat.com/security/cve/cve-2024-7143
  [#5683](https://github.com/pulp/pulpcore/issues/5683)

### Plugin API {: #3.21.33-plugin-api }

No significant changes.

---

## 3.21.32 (2024-07-16) {: #3.21.32 }


### REST API {: #3.21.32-rest-api }

#### Bugfixes {: #3.21.32-rest-api-bugfix }

- Browsable HREFs now have clickable links again.
  [#5563](https://github.com/pulp/pulpcore/issues/5563)

### Plugin API {: #3.21.32-plugin-api }

No significant changes.

---

## 3.21.31 (2024-06-24) {: #3.21.31 }


### REST API {: #3.21.31-rest-api }

#### Bugfixes {: #3.21.31-rest-api-bugfix }

- Fixed openapi command where plugins relied on CONTENT_ORIGIN to be set.
  [#5510](https://github.com/pulp/pulpcore/issues/5510)

### Plugin API {: #3.21.31-plugin-api }

No significant changes.

---

## 3.21.30 (2024-06-18) {: #3.21.30 }


### REST API {: #3.21.30-rest-api }

#### Misc {: #3.21.30-rest-api-misc }

- [#5462](https://github.com/pulp/pulpcore/issues/5462)

### Plugin API {: #3.21.30-plugin-api }

No significant changes.

---

!!! warning
    Until Role-Based Access Control is added to Pulp, REST API is not safe for multi-user use.
    Sensitive credentials can be read by any user, e.g. `Remote.password`, `Remote.client_key`.

## 3.21.29 (2024-05-14) {: #3.21.29 }

### REST API

#### Bugfixes

-   Stopped deleting content and artifacts presumably created by later failed or canceled tasks.
    Deleting these lies solely in the responsibility of orphan cleanup.
    [#5363](https://github.com/pulp/pulpcore/issues/5363)

### Plugin API

No significant changes.

---

## 3.21.28 (2024-03-26) {: #3.21.28 }

### REST API

#### Misc

-   [#3574](https://github.com/pulp/pulpcore/issues/3574)

### Plugin API

No significant changes.

---

## 3.21.27 (2024-03-26) {: #3.21.27 }

### REST API

No significant changes.

### Plugin API

No significant changes.

---

## 3.21.26 (2024-01-30) {: #3.21.26 }

### REST API

#### Bugfixes

-   Fixed a warning that gets raised when cache is enabled: `RuntimeWarning: coroutine 'AsyncCache.delete' was never awaited`.
    [#4967](https://github.com/pulp/pulpcore/issues/4967)

### Plugin API

No significant changes.

---

## 3.21.25 (2024-01-09) {: #3.21.25 }

### REST API

No significant changes.

### Plugin API

No significant changes.

---

## 3.21.24 (2023-11-30) {: #3.21.24 }

### REST API

#### Bugfixes

-   Removed a workaround to force close all tcp connections in sync leading to an exhaustion of port
    numbers and their reuse while in time_wait state.
    [#4452](https://github.com/pulp/pulpcore/issues/4452)

### Plugin API

No significant changes.

## 3.21.23 (2023-11-23) {: #3.21.23 }

### REST API

#### Bugfixes

-   Fix <file://> syncs deleting the original files.
    [#4681](https://github.com/pulp/pulpcore/issues/4681)

### Plugin API

No significant changes.

## 3.21.22 (2023-11-14) {: #3.21.22 }

### REST API

#### Bugfixes

-   Resolved a sync-time performance regression.
    [#4591](https://github.com/pulp/pulpcore/issues/4591)

### Plugin API

No significant changes.

## 3.21.21 (2023-10-16) {: #3.21.21 }

### REST API

#### Bugfixes

-   Improve performance during export operations.
    [#4551](https://github.com/pulp/pulpcore/issues/4551)
-   Taught ContentArtifactResource import to cache content results to improve performance.
    [#4564](https://github.com/pulp/pulpcore/issues/4564)

### Plugin API

No significant changes.

## 3.21.20 (2023-10-05) {: #3.21.20 }

### REST API

#### Bugfixes

-   Made sure PulpImport's use of tar.extractall() is safe.
    [#3323](https://github.com/pulp/pulpcore/issues/3323)

### Plugin API

No significant changes.

## 3.21.19 (2023-09-27) {: #3.21.19 }

### REST API

#### Bugfixes

-   Fixed sync not deleting temporary files when WORKING_DIRECTORY is not a sub-directory of MEDIA_ROOT
    or when using a non-filesystem storage backend.
    [#1936](https://github.com/pulp/pulpcore/issues/1936)

#### Misc

-   [#4436](https://github.com/pulp/pulpcore/issues/4436)

### Plugin API

No significant changes.

## 3.21.18 (2023-09-25) {: #3.21.18 }

### REST API

#### Bugfixes

-   Ensure non-chunked exports and chunked exports use the same compression level.
    [#4411](https://github.com/pulp/pulpcore/issues/4411)
-   Removed compression from exports (using gzip level 0). For most users of export functionality it seems to be a poor tradeoff.
    [#4434](https://github.com/pulp/pulpcore/issues/4434)

### Plugin API

No significant changes.

## 3.21.17 (2023-09-06) {: #3.21.17 }

### REST API

#### Bugfixes

-   Ensure the compression level is reliably set properly as per #3869.
    [#4351](https://github.com/pulp/pulpcore/issues/4351)

### Plugin API

No significant changes.

## 3.21.16 (2023-08-23) {: #3.21.16 }

### REST API

#### Bugfixes

-   Added repeating logic to signalling a task worker subprocess. This should fix a bug where the
    task refuses to be terminated easily.
    [#3407](https://github.com/pulp/pulpcore/issues/3407)
-   Improved the performance when looking up content for repository versions.
    [#3969](https://github.com/pulp/pulpcore/issues/3969)
-   Fixed bug where incorrect error message presented in relation to content-import
    [#4294](https://github.com/pulp/pulpcore/issues/4294)

### Plugin API

No significant changes.

## 3.21.15 (2023-08-01) {: #3.21.15 }

### REST API

#### Bugfixes

-   Correctly fixed pulp_rpm-export-edgecase - fix #4210 was incomplete.
    [#4231](https://github.com/pulp/pulpcore/issues/4231)

### Plugin API

No significant changes.

## 3.21.14 (2023-07-31) {: #3.21.14 }

### REST API

#### Bugfixes

-   Fix a subtle export bug introduced from the optimizations in #4159.
    [#4210](https://github.com/pulp/pulpcore/issues/4210)

### Plugin API

No significant changes.

## 3.21.13 (2023-07-29) {: #3.21.13 }

### REST API

#### Bugfixes

-   Made reclaim space task more tolerant in the face of artifact shared between two content units.
    [#3610](https://github.com/pulp/pulpcore/issues/3610)

-   Taught pulp-import to be able to use a subset of available worker-threads.
    [#4068](https://github.com/pulp/pulpcore/issues/4068)

-   Updated the downloader's fetch method to comply with Python 3.11.
    [#4107](https://github.com/pulp/pulpcore/issues/4107)

-   Taught the Artifact.json of an export to hold minimum-unique-set of Artifact entries.

    In highly-duplicated-content export scenarios, this can mean a significant decrease
    in export-size, and significant improvement in import-performance.
    [#4159](https://github.com/pulp/pulpcore/issues/4159)

### Plugin API

No significant changes.

## 3.21.12 (2023-07-22) {: #3.21.12 }

### REST API

#### Bugfixes

-   Resolved a memory leak that could occur while making large repeated queries against the API service.
    [#2250](https://github.com/pulp/pulpcore/issues/2250)
-   Taught repair task to be tolerant in the face of any artifact download failure.
    [#4111](https://github.com/pulp/pulpcore/issues/4111)

### Plugin API

No significant changes.

## 3.21.11 (2023-07-19) {: #3.21.11 }

### REST API

#### Bugfixes

-   Made the incremental file export include all published metadata.
    [#3941](https://github.com/pulp/pulpcore/issues/3941)
-   Updates file system exporter to correctly account the start_repository_version for pass_through publications
    [#4051](https://github.com/pulp/pulpcore/issues/4051)

### Plugin API

No significant changes.

## 3.21.10 (2023-06-14) {: #3.21.10 }

### REST API

#### Bugfixes

-   Exports now use gzip compression level 1 rather than compression level 9. Exported archives will
    now be slightly larger, but exports should be much faster. This is considered to be a more
    optimal balance of space/time for the export operation.
    [#3869](https://github.com/pulp/pulpcore/issues/3869)

### Plugin API

No significant changes.

## 3.21.9 (2023-06-06) {: #3.21.9 }

### REST API

#### Bugfixes

-   Taught PulpImport to be more robust in the face of previous failed attempts.
    [#3737](https://github.com/pulp/pulpcore/issues/3737)

### Plugin API

No significant changes.

## 3.21.8 (2023-05-30) {: #3.21.8 }

### REST API

#### Bugfixes

-   Taught repair task to remove unrepairable corrupted files.
    [#1947](https://github.com/pulp/pulpcore/issues/1947)
-   Taught repair task to continue when encountering a 404 during the repair process.
    [#3611](https://github.com/pulp/pulpcore/issues/3611)

### Plugin API

No significant changes.

## 3.21.7 (2023-04-11) {: #3.21.7 }

### REST API

#### Bugfixes

-   Downloader will now attempt to keep the filename of the requested URL intact if one exists.
    [#3715](https://github.com/pulp/pulpcore/issues/3715)

### Plugin API

No significant changes.

## 3.21.6 (2023-03-29) {: #3.21.6 }

### REST API

#### Bugfixes

-   Fixed an error when raising `UnexportableArtifactException`.
    [#3313](https://github.com/pulp/pulpcore/issues/3313)
-   Fixed the openapi spec of "fields" and "exclude_fields" querystring parameters.
    [#3398](https://github.com/pulp/pulpcore/issues/3398)

### Plugin API

No significant changes.

## 3.21.5 (2023-02-02) {: #3.21.5 }

### REST API

#### Bugfixes

-   Added a `start_repository_version` parameter to the file system exporter.

    If specified, it will export only content units that differed between two repository versions.
    [#3413](https://github.com/pulp/pulpcore/issues/3413)

### Plugin API

No significant changes.

## 3.21.4 (2023-01-20) {: #3.21.4 }

### REST API

#### Bugfixes

-   Fixed an occasional 500 error when viewing a repository version content summary while performing a content deletion task.
    [#3299](https://github.com/pulp/pulpcore/issues/3299)
-   Fix migrating Remotes with @ in path
    [#3409](https://github.com/pulp/pulpcore/issues/3409)

### Plugin API

No significant changes.

## 3.21.3 (2022-11-15) {: #3.21.3 }

### REST API

#### Bugfixes

-   Adjust the dependency on `cryptography` to suite more versions of `pulp-certguard`.
    [#3269](https://github.com/pulp/pulpcore/issues/3269)
-   Insured that pulp-export correctly locks repos-being-exported.
    [#3370](https://github.com/pulp/pulpcore/issues/3370)
-   Fixed the update of default access policies when fields are missing.
    [#3391](https://github.com/pulp/pulpcore/issues/3391)

### Plugin API

No significant changes.

## 3.21.2 (2022-10-24) {: #3.21.2 }

### REST API

#### Bugfixes

-   Another step on closing the deadlock-window when syncing overlapping content.
    [#3284](https://github.com/pulp/pulpcore/issues/3284)
-   Fixed content disposition header value when content is stored in Azure.
    [#3342](https://github.com/pulp/pulpcore/issues/3342)

### Plugin API

No significant changes.

## 3.21.1 (2022-10-18) {: #3.21.1 }

### REST API

#### Bugfixes

-   Fixed the fs exporter to handle the case where there are pre-existing files in the location that FileSystem attempts to export to you get a FileExistsError.
    [#1949](https://github.com/pulp/pulpcore/issues/1949)
-   Fixed content-disposition header which is used in the object storage backends.
    [#3124](https://github.com/pulp/pulpcore/issues/3124)
-   Fixed the fs exporter to handle the case where hardlink method was requested but pulp and export locations are in different partitions so can't share the same inode.
    [#3187](https://github.com/pulp/pulpcore/issues/3187)
-   Another guardrail added around content-stages to address deadlock in a specific usecase.
    [#3192](https://github.com/pulp/pulpcore/issues/3192)
-   Fixed bug where installations with at least one pre-release plugin installed were posting to the
    production telemetry site instead of the developer telemetry site.
    [#3213](https://github.com/pulp/pulpcore/issues/3213)
-   Do not expose artifact digest via content-disposition header when using Azure backend.
    [#3244](https://github.com/pulp/pulpcore/issues/3244)

### Plugin API

No significant changes.

## 3.21.0 (2022-09-08) {: #3.21.0 }

### REST API

#### Features

-   Added an option for automatically creating repositories on the fly during an import procedure. The
    option is disabled by default. Enable it by setting the field `create_repositories` to `True`
    via the REST API.
    [#1920](https://github.com/pulp/pulpcore/issues/1920)

-   Content app now groups distributions in a directory structure on the landing page.
    [#1951](https://github.com/pulp/pulpcore/issues/1951)

-   Added RBAC protection to upload objects.
    [#2362](https://github.com/pulp/pulpcore/issues/2362)

-   New endpoint to list all Remote objects is now available at /pulp/api/v3/remotes/.
    [#2530](https://github.com/pulp/pulpcore/issues/2530)

-   `HyperlinkRelatedFilter` can now be filtered by object types and NULL values.

    Repositories can now be filtered by Remotes.
    [#2864](https://github.com/pulp/pulpcore/issues/2864)

-   Introduced the `with_content` query parameter that filters distributions by the specified content
    unit.
    [#2952](https://github.com/pulp/pulpcore/issues/2952)

-   Add a debug log to see where is file downloaded from.
    [#3088](https://github.com/pulp/pulpcore/issues/3088)

-   Introduces anonymous telemetry data posting to <https://analytics.pulpproject.org/>. This is
    enabled by default, and can be disabled by setting the `TELEMETRY` setting to `False`. See the
    *telemetry docs* for more info on exactly what is posted along with an example.
    [#3115](https://github.com/pulp/pulpcore/issues/3115)

#### Bugfixes

-   Fixed the value of the Content-Type header returned for .xml.gz files.
    [#2811](https://github.com/pulp/pulpcore/issues/2811)
-   Improve content app performance on head requests
    [#2924](https://github.com/pulp/pulpcore/issues/2924)
-   Use published relative paths for FS Exporter.
    [#2933](https://github.com/pulp/pulpcore/issues/2933)
-   Configured aiohttp to avoid rewriting redirect URLs, as some web servers (e.g. Amazon CloudFront) can be tempermental about the encoding of the URL.
    [#2964](https://github.com/pulp/pulpcore/issues/2964)
-   Fixed inaccurate 404 error message for content app.
    [#2977](https://github.com/pulp/pulpcore/issues/2977)
-   Fixed variable referenced before assignment error in `django-admin dump-permissions`.
    [#3011](https://github.com/pulp/pulpcore/issues/3011)
-   Do not create telemetry TaskSchedule for production systems.
    [#3015](https://github.com/pulp/pulpcore/issues/3015)
-   Serialized orphan cleanup tasks with respect to each other to prevent them from failing.
    [#3030](https://github.com/pulp/pulpcore/issues/3030)
-   Fixed 500 error when 'range' header starts with a negative value for 'on-demand' content.
    [#3052](https://github.com/pulp/pulpcore/issues/3052)
-   Fixed bug where 'range' header with a start value greater than size of on-demand content would produce an incomplete response.
    [#3054](https://github.com/pulp/pulpcore/issues/3054)
-   Fixed a bug where Content-Length header value was wrong when on-demand content was requested with
    a Range header that has an end value greater than the size of the content.
    [#3055](https://github.com/pulp/pulpcore/issues/3055)
-   Fixed a bug in the routing logic, where generic base class viewsets were served on actual urls.
    [#3056](https://github.com/pulp/pulpcore/issues/3056)
-   Fixed a bug in import code where all objects imported would also be added to the target repository
    by their UUID. In case of a UUID-collision with content, unwanted content may have ended up being
    in the next repository version.
    [#3064](https://github.com/pulp/pulpcore/issues/3064)
-   Fixed a bug that caused the import machinery to import the same content multiple times in a row.
    [#3075](https://github.com/pulp/pulpcore/issues/3075)
-   Limited access policy reset to viewsets with a default one. This will solve 500 errors when
    trying to reset an access policy whose viewset name is repeated by an abstract base class.
    Stopped reporting on unmodified access policies when migrating.
    [#3080](https://github.com/pulp/pulpcore/issues/3080)
-   Fixed another rare deadlock for high-concurrency/overlapping-content syncs.
    [#3111](https://github.com/pulp/pulpcore/issues/3111)
-   Fixed the progress report counter for imported content units.
    [#3113](https://github.com/pulp/pulpcore/issues/3113)
-   Moved telemetry setup to the pulpcore-worker startup sequence. This will prevent orm calls before
    all apps are ready.
    [#3122](https://github.com/pulp/pulpcore/issues/3122)

#### Improved Documentation

-   docs: Update the architecture diagram to reflect the fact that both API and workers talk to redis.
    [#3000](https://github.com/pulp/pulpcore/issues/3000)
-   Multiple updates to the PyPI (manual) install instructions.
    [#3051](https://github.com/pulp/pulpcore/issues/3051)

#### Misc

-   [#2445](https://github.com/pulp/pulpcore/issues/2445), [#2890](https://github.com/pulp/pulpcore/issues/2890), [#3063](https://github.com/pulp/pulpcore/issues/3063), [#3091](https://github.com/pulp/pulpcore/issues/3091)

### Plugin API

#### Features

-   Exposed the `RepositoryResource` class to enable plugin writers to customize the way of
    importing/exporting of particular repository types. Repositories should be now a part of exported
    resources to enable automatic creation of missing repositories.
    [#1920](https://github.com/pulp/pulpcore/issues/1920)
-   Added a global access condition `has_upload_param_model_or_obj_perms` to enforce permissions
    on the upload parameter.
    [#2362](https://github.com/pulp/pulpcore/issues/2362)
-   Extended the interface of `verify_signature` as a new function `gpg_verify` to support file
    like objects in addition to a file path and also return the `python-gnupg` `verify` object.
    [#2930](https://github.com/pulp/pulpcore/issues/2930)
-   Added new field `info` to the `RepositoryVersion`. This will allow to store additional information for a specific version.
    [#2998](https://github.com/pulp/pulpcore/issues/2998)
-   Added pulpcore.plugin.models.EncryptedTextField to plugin api.
    #3157 <[https://github.com/pulp/pulpcore/issues/3157](https://github.com/pulp/pulpcore/issues/3157)>`__

#### Improved Documentation

-   Adds Master/Detail pattern overview and usage documentation to the Plugin writer docs.
    [#2981](https://github.com/pulp/pulpcore/issues/2981)
-   Documented the use of `RolesMixin` in the plugin writer concepts section.
    [#3085](https://github.com/pulp/pulpcore/issues/3085)

#### Deprecations

-   Deprecated `verify_signature` in favor of `gpg_verify` for removal in 3.25.
    [#2930](https://github.com/pulp/pulpcore/issues/2930)

## 3.20.0 (2022-06-21) {: #3.20.0 }

### REST API

#### Features

-   Added a repository filter to publications.
    [#1912](https://github.com/pulp/pulpcore/issues/1912)

-   The status API endpoint now shows the python package name that provides a given plugin.
    [#1982](https://github.com/pulp/pulpcore/issues/1982)

-   Queryset scoping can be customized by the user using the new field `queryset_scoping` on a
    ViewSet's AccessPolicy.
    [#2114](https://github.com/pulp/pulpcore/issues/2114)

-   Enabled administrators to work with a customized GnuPG home directory and keyring during the
    creation of a signing service. The introduced optional arguments `--gnupghome` and `--keyring`
    are available under the `pulpcore-manager add-signing-service` command.
    [#2476](https://github.com/pulp/pulpcore/issues/2476)

-   Added the setting `REDIRECT_TO_OBJECT_STORAGE` to allow using cloud storage with or without
    redirecting urls.

    Added support for sftp storage via the `pulpcore.app.models.storage.PulpSFTPStorage` class.
    [#2537](https://github.com/pulp/pulpcore/issues/2537)

-   Added more details to an error message that is shown when none of the allowed content checksums
    hashers could be used.
    [#2550](https://github.com/pulp/pulpcore/issues/2550)

-   Add contains_permission query parameter to the roles API that allows clients to get back a list
    of roles that have any permission in a list of permissions.
    [#2715](https://github.com/pulp/pulpcore/issues/2715)

-   Master Content endpoint, `/pulp/api/v3/content/`, has a new access policy that allows any
    authenticated user to view content. The endpoint now scopes the content based on repositories
    the user can see.
    [#2724](https://github.com/pulp/pulpcore/issues/2724)

-   New AccessPolicies have been added to ContentGuard, Distribution, Publication, Repository,
    and RepositoryVersions master ViewSets. Queryset scoping has been enabled for each ViewSet.
    [#2725](https://github.com/pulp/pulpcore/issues/2725)

-   New AccessPolicy for ContentRedirectContentGuard ViewSet has been added.
    [#2726](https://github.com/pulp/pulpcore/issues/2726)

-   Added dump-permissions management command to list deprecated permissions not yet translated into
    roles. This is the only way to get to this information after the 3.20 release.
    [#2741](https://github.com/pulp/pulpcore/issues/2741)

-   Add ?for_object_type query parameter to Roles API that accepts an object HREF and returns a list
    of roles that only contain permissions for the given object type.
    [#2747](https://github.com/pulp/pulpcore/issues/2747)

-   Add role description and permissions to group and user role serializer.
    [#2765](https://github.com/pulp/pulpcore/issues/2765)

#### Bugfixes

-   Leading and trailing whitespace characters are no longer trimmed in passwords within remotes.
    [#2068](https://github.com/pulp/pulpcore/issues/2068)

-   Fixed generation of the redirect url to the object storage
    [#2075](https://github.com/pulp/pulpcore/issues/2075)

-   Taught PulpImport to stream imports rather than reading files into memory in one chunk.

    This largely alleviates the memory-pressure that results from importing multiple
    large repositories in parallel.
    [#2307](https://github.com/pulp/pulpcore/issues/2307)

-   Made the API root endpoint accessible for anonymous users once again.
    [#2340](https://github.com/pulp/pulpcore/issues/2340)

-   Removed il8n from the logs written so they will always show up in English for speedy resolution of
    error messages. All user facing strings are still expected to be il8n.
    [#2477](https://github.com/pulp/pulpcore/issues/2477)

-   Replaced "//" with "/" in base_url when CONTENT_PATH_PREFIX is "" or "/".
    [#2553](https://github.com/pulp/pulpcore/issues/2553)

-   Fixed does_batch method in sync pipeline to allow waiting on content that is already resolved.
    [#2557](https://github.com/pulp/pulpcore/issues/2557)

-   Fixed OOM error after uploading large chunked files.
    [#2573](https://github.com/pulp/pulpcore/issues/2573)

-   Ensure downloader resets file on retry.
    [#2576](https://github.com/pulp/pulpcore/issues/2576)

-   Taught PulpImport to retry more than once in the event of creation-collisions.

    This fixes a rare import-failure during high-concurrency, high-content-overlap imports.
    [#2589](https://github.com/pulp/pulpcore/issues/2589)

-   Improved the error message when HTTP proxies reject requests from Pulp.
    [#2654](https://github.com/pulp/pulpcore/issues/2654)

-   Fix ?ordering=role on user and group role apis so that it sorts results by role name.
    [#2703](https://github.com/pulp/pulpcore/issues/2703)

-   Add options to the role_util functions to make them work the same as guardian did.
    [#2739](https://github.com/pulp/pulpcore/issues/2739)

-   Fixed a bug that disallowed administrators to create a signing service via the pulpcore-manager
    utility.
    [#2798](https://github.com/pulp/pulpcore/issues/2798)

-   Reduced duplicate SQL queries for `AccessPolicy` when accessing any view.
    [#2802](https://github.com/pulp/pulpcore/issues/2802)

-   Fixed docs regarding the default for orphan protection time.
    [#2810](https://github.com/pulp/pulpcore/issues/2810)

-   Started showing errors when users try to export remote artifacts.
    [#2817](https://github.com/pulp/pulpcore/issues/2817)

-   Restore multiple-retry logic for PulpImport.
    [#2854](https://github.com/pulp/pulpcore/issues/2854)

#### Improved Documentation

-   Cleared out some of the paragraphs from the "Pull Request Walkthrough" section.
    [#1852](https://github.com/pulp/pulpcore/issues/1852)
-   Added a troubleshooting section that includes information on how to enable DEBUG logging.
    [#1944](https://github.com/pulp/pulpcore/issues/1944)
-   Removed some out of date references to Redmine (the previous issue tracker). We use Github Issues
    now.
    [#2642](https://github.com/pulp/pulpcore/issues/2642)
-   Added a note about explicitly setting `content_object` to null when assigning model-level
    permissions.
    [#2758](https://github.com/pulp/pulpcore/issues/2758)
-   Fixed `extlinks` use in docs to be Sphinx==5.0.0 compatible.
    [#2782](https://github.com/pulp/pulpcore/issues/2782)
-   Update installation instructions about "User and database configuration" for the Database setup to point to a matching Django documentation.
    [#2877](https://github.com/pulp/pulpcore/issues/2877)

#### Deprecations

-   Deprecated creation hook interface was removed. Creation hook need to be registered with the view
    set by the plugin writer before being used. Creation hooks can no longer be added with the
    deprecated name `permission_assignments`.
    [#2559](https://github.com/pulp/pulpcore/issues/2559)

#### Removals

-   Removed the group permission endpoints `api/v3/groups/:id/model_permissions/` and
    `api/v3/groups/:id/object_permissions/`. Permissions should be managed via roles exclusively.
    [#2050](https://github.com/pulp/pulpcore/issues/2050)
-   Removed django-guardian from the stack. The `guardian.backends.ObjectPermissionBackend` should
    not be used anymore.
    [#2051](https://github.com/pulp/pulpcore/issues/2051)

#### Misc

-   [#2070](https://github.com/pulp/pulpcore/issues/2070), [#2244](https://github.com/pulp/pulpcore/issues/2244), [#2605](https://github.com/pulp/pulpcore/issues/2605), [#2643](https://github.com/pulp/pulpcore/issues/2643)

### Plugin API

#### Features

-   Plugins are required to provide the `python_package_name` as a string attribute on their subclass
    of `PulpPluginAppConfig`.
    [#1982](https://github.com/pulp/pulpcore/issues/1982)

-   Exposed the method `raise_for_unknown_content_units` which raises `ValidationError` for content
    units that were not found in the database.
    [#2052](https://github.com/pulp/pulpcore/issues/2052)

-   Plugins now have to enable default queryset scoping by setting the `queryset_scoping` field on the
    AccessPolicy to `{"function": "scope_queryset"}`.

    Default queryset scoping behavior can be changed by supplying a new `scope_queryset` method.

    Extra queryset scoping functions can be declared on plugin ViewSets and used by setting the
    AccessPolicy's `queryset_scoping` field.
    [#2114](https://github.com/pulp/pulpcore/issues/2114)

-   DeclarativeArtifact now accepts a `urls` option which permits multiple URLs
    to be provided for a single artifact. If multiple URLs are provided, the download
    stage will try each of them in turn upon encountering failures.
    [#2175](https://github.com/pulp/pulpcore/issues/2175)

-   Exposed the function `pulpcore.plugin.util.verify_signature` for verifying signatures created
    by signing services.
    [#2476](https://github.com/pulp/pulpcore/issues/2476)

-   Added `pulpcore.plugin.content.ArtifactResponse` to plugin API. Use this response to stream an
    artifact from the object storage if redirecting is impossible.
    [#2537](https://github.com/pulp/pulpcore/issues/2537)

-   Queryset scoping is now performed when the ViewSet's AccessPolicy field `scope_queryset` is set to
    a function on the ViewSet.

    `NamedModelViewSet` now has default scoping method `scope_queryset` that will scope the request
    off of `queryset_filtering_required_permission` if present. If ViewSet is a master ViewSet then
    scoping will be performed by calling each child's scoping method if present.
    [#2723](https://github.com/pulp/pulpcore/issues/2723)

-   Content ViewSets default `scope_queryset` method will scope based on repositories the user can see.
    [#2724](https://github.com/pulp/pulpcore/issues/2724)

-   Added the ability to specify an upload for the single shot upload serializer. This allows to
    upload files in chunks and attach them with content in repositories without creating orphans.
    [#2786](https://github.com/pulp/pulpcore/issues/2786)

-   Added new access condition `has_required_repo_perms_on_upload` for RBAC plugins to use to require
    users to specify a repository when uploading content. If not used when uploading content, non-admin
    users will not be able to see their uploaded content if queryset scoping is enabled.
    [#2796](https://github.com/pulp/pulpcore/issues/2796)

#### Bugfixes

-   Reworked the ordering framework to use django-filters.

    Plugins should not declare filter-backends on viewsets.
    [#2703](https://github.com/pulp/pulpcore/issues/2703)

#### Improved Documentation

-   Updated plugin writers RBAC guide to explain more roles and less permissions. Removed mentions of
    django-guardian.
    [#2463](https://github.com/pulp/pulpcore/issues/2463)
-   Added docs on the expectation that all user-facing strings are i8ln wrapped with gettext, but log
    messages are not.
    [#2477](https://github.com/pulp/pulpcore/issues/2477)

#### Removals

-   The `pulpcore.plugin.exceptions.MissingResource` object has been removed. Instead let 404
    errors propagate upwards for DRF to handle, or use the DRF exception `NotFound`.
    [#1812](https://github.com/pulp/pulpcore/issues/1812)
-   Removed django-guardian from the stack. This includes the removal of `AutoDeleteObjPermsMixin`
    from the plugin api.
    [#2051](https://github.com/pulp/pulpcore/issues/2051)
-   Removed the `custom_file_object` argument to `pulpcore.plugin.download.BaseDownloader`. Now all
    downloaded data will be written to a random file in the current working directory. Further
    customization of where downloaded data can be written to can be done through subclassing.
    [#2137](https://github.com/pulp/pulpcore/issues/2137)
-   Constructor signature of DigestValidationError and SizeValidationError has changed - the
    "actual" and "expected" values are now required and "url" which was previously a positional
    argument is now a keyword argument.
    [#2244](https://github.com/pulp/pulpcore/issues/2244)
-   The pulpcore.plugin.constants.API_ROOT has been removed. Use the `V3_API_ROOT` and
    `V3_API_ROOT_NO_FRONT_SLASH` settings instead.
    [#2556](https://github.com/pulp/pulpcore/issues/2556)
-   Plugins using the `SingleArtifactContentUploadSerializer` must place a super call when
    overwriting `deferred_validate`. They can only assume the existance of the `Artifact` in the
    database, after this call.
    [#2786](https://github.com/pulp/pulpcore/issues/2786)

#### Misc

-   [#2634](https://github.com/pulp/pulpcore/issues/2634), [#2742](https://github.com/pulp/pulpcore/issues/2742)

## 3.19.1 (2022-07-11) {: #3.19.1 }

### REST API

#### Bugfixes

-   Taught PulpImport to stream imports rather than reading files into memory in one chunk.

    This largely alleviates the memory-pressure that results from importing multiple
    large repositories in parallel.
    [#2307](https://github.com/pulp/pulpcore/issues/2307)

-   Fixed does_batch method in sync pipeline to allow waiting on content that is already resolved.
    [#2557](https://github.com/pulp/pulpcore/issues/2557)

-   Ensure downloader resets file on retry.
    [#2576](https://github.com/pulp/pulpcore/issues/2576)

-   Taught PulpImport to retry more than once in the event of creation-collisions.

    This fixes a rare import-failure during high-concurrency, high-content-overlap imports.
    [#2589](https://github.com/pulp/pulpcore/issues/2589)

-   Improved the error message when HTTP proxies reject requests from Pulp.
    [#2654](https://github.com/pulp/pulpcore/issues/2654)

-   Restore multiple-retry logic for PulpImport.
    [#2854](https://github.com/pulp/pulpcore/issues/2854)

-   Improve content app performance on head requests
    [#2924](https://github.com/pulp/pulpcore/issues/2924)

#### Improved Documentation

-   Removed some out of date references to Redmine (the previous issue tracker). We use Github Issues
    now.
    [#2642](https://github.com/pulp/pulpcore/issues/2642)
-   Fixed `extlinks` use in docs to be Sphinx==5.0.0 compatible.
    [#2782](https://github.com/pulp/pulpcore/issues/2782)

#### Misc

-   [#2605](https://github.com/pulp/pulpcore/issues/2605)

### Plugin API

No significant changes.

## 3.19.0 (2022-04-12) {: #3.19.0 }

### REST API

#### Features

-   Content app now logs where it gets on-demand and streamed content from.
    [#2059](https://github.com/pulp/pulpcore/issues/2059)
-   Reclaim disk space can now accept ["*"] for `repo_hrefs` to specify all repositories for reclaim.
    [#2065](https://github.com/pulp/pulpcore/issues/2065)
-   Added a filter to allow searching for user roles by their description.
    [#2276](https://github.com/pulp/pulpcore/issues/2276)
-   Add swagger view and make OpenAPI human readable
    [#2291](https://github.com/pulp/pulpcore/issues/2291)
-   Adds a `TASK_DIAGNOSTICS` setting which will enable each task to write out diagnostic information
    such as memory usage of the task to a data file in `/var/tmp/pulp/<task_UUID>/`. This is disabled
    by default.
    [#2329](https://github.com/pulp/pulpcore/issues/2329)
-   Added a `/pulp/api/v3/distributions/` endpoint to list all distributions.
    [#2379](https://github.com/pulp/pulpcore/issues/2379)

#### Bugfixes

-   Added reason for 404 error when accessing distributions without a publication.
    [#1910](https://github.com/pulp/pulpcore/issues/1910)

-   Fixed validation order of required settings to occur before plugin settings are loaded.
    [#1968](https://github.com/pulp/pulpcore/issues/1968)

-   Fix delete repository version causing "duplicate key value violates unique constraint" error.
    [#2047](https://github.com/pulp/pulpcore/issues/2047)

-   Fixed two instances of Pulp not writing to the task worker's temporary directory.
    [#2061](https://github.com/pulp/pulpcore/issues/2061)

-   Reduced memory usage during tasks like sync by holding fewer objects in-memory unnecessarily.
    [#2069](https://github.com/pulp/pulpcore/issues/2069)

-   Fixed migration 0064_add_new_style_task_columns to purge extraneous ReservedResource and
    TaskReservedResource entries, which could block sync and publish tasks post-upgrade.

    Also taught the migration to bulk-update the Task changes. In large installations, this
    should have a positive impact on the time it takes to apply the migration.
    [#2101](https://github.com/pulp/pulpcore/issues/2101)

-   Taught task-purge to process tasks in batches of 1000. This prevents large purges from using
    large amounts of memory as a result of reading all the affected Tasks into memory at once.
    [#2215](https://github.com/pulp/pulpcore/issues/2215)

-   This fix prevents the lost track of a content removed version when deleting a repository version that deletes a content that is added back in the subsequent version, but deleted again in a later version.
    [#2267](https://github.com/pulp/pulpcore/issues/2267)

-   Added transactions around repository version operations to prevent data loss.
    [#2268](https://github.com/pulp/pulpcore/issues/2268)

-   Loosened the version-restrictions on PulpImport to only require X.Y matching.
    [#2269](https://github.com/pulp/pulpcore/issues/2269)

-   Fix a mistake in a previous migration which may have caused improperly encrypted remote fields.
    [#2327](https://github.com/pulp/pulpcore/issues/2327)

-   Fixed improper fields being listed in `RepositoryVersion` repair API.
    [#2330](https://github.com/pulp/pulpcore/issues/2330)

-   Fixes duplicate key error `Key (content_artifact_id, remote_id)` when creating `RemoteArtifacts`
    during syncs in pulp_container and possibly other plugins.
    [#2381](https://github.com/pulp/pulpcore/issues/2381)

-   Declared proper dependency on user model in migration 0040.
    [#2403](https://github.com/pulp/pulpcore/issues/2403)

-   Fixed a rare deadlock when sync'ing overlapping content in high-concurrency envs.
    [#2420](https://github.com/pulp/pulpcore/issues/2420)

-   Fixed a (rare) deadlock around bulk_update() during syncs with overlapping content.
    [#2430](https://github.com/pulp/pulpcore/issues/2430)

-   Fixed a bug where notifications to workers may go unnoticed. This may lead to idle workers while
    there are tasks waiting.
    [#2506](https://github.com/pulp/pulpcore/issues/2506)

#### Improved Documentation

-   Updates and revises docs on webserver based authentication.
    [#2260](https://github.com/pulp/pulpcore/issues/2260)
-   Adds docs on recording and building graphs from the memory data saved by the `TASK_DIAGNOSTICS`
    setting.
    [#2329](https://github.com/pulp/pulpcore/issues/2329)

#### Removals

-   Removed the Django UI Admin site. It was added to provide RBAC permissions management before there
    were APIs that could provide that. It was tech preview and now there are APIs for user and group
    management, along with role and permission assignment. It is being removed because the direct DB
    access it provides has caused some issues for users, especially since its not integrated with the
    validation provided by Django Rest Framework, which Pulp uses.
    [#2374](https://github.com/pulp/pulpcore/issues/2374)

### Plugin API

#### Features

-   Exposed the `PulpRemoteUserAuthentication` class to plugin writers. This will allow the use of
    remote authentication methods when building protected endpoints.
    [#2262](https://github.com/pulp/pulpcore/issues/2262)
-   Added new global access conditions `has_publication_param_model_or_obj_perms` and
    `has_repo_or_repo_ver_param_model_or_obj_perms` for RBAC checks.
    [#2364](https://github.com/pulp/pulpcore/issues/2364)
-   Changed the `reusable_conditions` module configuration for access policies to being a list to
    enable plugins to add custom modules to it.
    [#2495](https://github.com/pulp/pulpcore/issues/2495)

#### Bugfixes

-   Adjusted the default size of the queues between pipelines to be 1 instead of 1000. The batchers in
    the stage will still accumulate up to 500 (by default) items so batching is still in-effect there
    where it matters.
    [#2069](https://github.com/pulp/pulpcore/issues/2069)

## 3.18.36 (2024-03-26) {: #3.18.36 }

### REST API

No significant changes.

### Plugin API

No significant changes.

---

## 3.18.35 (2024-01-30) {: #3.18.35 }

### REST API

#### Bugfixes

-   Fixed a warning that gets raised when cache is enabled: `RuntimeWarning: coroutine 'AsyncCache.delete' was never awaited`.
    [#4967](https://github.com/pulp/pulpcore/issues/4967)

### Plugin API

No significant changes.

---

## 3.18.34 (2024-01-09) {: #3.18.34 }

### REST API

No significant changes.

### Plugin API

No significant changes.

---

## 3.18.33 (2023-12-01) {: #3.18.33 }

### REST API

#### Bugfixes

-   Removed a workaround to force close all tcp connections in sync leading to an exhaustion of port
    numbers and their reuse while in time_wait state.
    [#4452](https://github.com/pulp/pulpcore/issues/4452)

### Plugin API

No significant changes.

---

## 3.18.32 (2023-11-14) {: #3.18.32 }

### REST API

#### Bugfixes

-   Resolved a sync-time performance regression.
    [#4591](https://github.com/pulp/pulpcore/issues/4591)

### Plugin API

No significant changes.

## 3.18.31 (2023-10-16) {: #3.18.31 }

### REST API

#### Bugfixes

-   Improve performance during export operations.
    [#4551](https://github.com/pulp/pulpcore/issues/4551)
-   Taught ContentArtifactResource import to cache content results to improve performance.
    [#4564](https://github.com/pulp/pulpcore/issues/4564)

### Plugin API

No significant changes.

## 3.18.30 (2023-10-05) {: #3.18.30 }

### REST API

#### Bugfixes

-   Made sure PulpImport's use of tar.extractall() is safe.
    [#3323](https://github.com/pulp/pulpcore/issues/3323)

### Plugin API

No significant changes.

## 3.18.29 (2023-09-27) {: #3.18.29 }

### REST API

#### Improved Documentation

-   Adds docs on recording and building graphs from the memory data saved by the `TASK_DIAGNOSTICS`
    setting.
    [#2329](https://github.com/pulp/pulpcore/issues/2329)

#### Misc

-   [#2329](https://github.com/pulp/pulpcore/issues/2329), [#4436](https://github.com/pulp/pulpcore/issues/4436)

### Plugin API

No significant changes.

## 3.18.28 (2023-09-20) {: #3.18.28 }

### REST API

#### Bugfixes

-   Improved the performance when looking up content for repository versions.
    [#3969](https://github.com/pulp/pulpcore/issues/3969)
-   Ensure non-chunked exports and chunked exports use the same compression level.
    [#4411](https://github.com/pulp/pulpcore/issues/4411)
-   Removed compression from exports (using gzip level 0). For most users of export functionality it seems to be a poor tradeoff.
    [#4434](https://github.com/pulp/pulpcore/issues/4434)

### Plugin API

No significant changes.

## 3.18.27 (2023-09-06) {: #3.18.27 }

### REST API

#### Bugfixes

-   Ensure the compression level is reliably set properly as per #3869.
    [#4351](https://github.com/pulp/pulpcore/issues/4351)

### Plugin API

No significant changes.

## 3.18.26 (2023-08-23) {: #3.18.26 }

### REST API

#### Bugfixes

-   Fixed bug where incorrect error message presented in relation to content-import
    [#4294](https://github.com/pulp/pulpcore/issues/4294)

### Plugin API

No significant changes.

## 3.18.25 (2023-08-01) {: #3.18.25 }

### REST API

#### Bugfixes

-   Correctly fixed pulp_rpm-export-edgecase - fix #4210 was incomplete.
    [#4231](https://github.com/pulp/pulpcore/issues/4231)

### Plugin API

No significant changes.

## 3.18.24 (2023-07-31) {: #3.18.24 }

### REST API

#### Bugfixes

-   Fix a subtle export bug introduced from the optimizations in #4159.
    [#4210](https://github.com/pulp/pulpcore/issues/4210)

### Plugin API

No significant changes.

## 3.18.23 (2023-07-29) {: #3.18.23 }

### REST API

#### Bugfixes

-   Made reclaim space task more tolerant in the face of artifact shared between two content units.
    [#3610](https://github.com/pulp/pulpcore/issues/3610)

-   Taught pulp-import to be able to use a subset of available worker-threads.
    [#4068](https://github.com/pulp/pulpcore/issues/4068)

-   Updated the downloader's fetch method to comply with Python 3.11.
    [#4107](https://github.com/pulp/pulpcore/issues/4107)

-   Taught the Artifact.json of an export to hold minimum-unique-set of Artifact entries.

    In highly-duplicated-content export scenarios, this can mean a significant decrease
    in export-size, and significant improvement in import-performance.
    [#4159](https://github.com/pulp/pulpcore/issues/4159)

### Plugin API

No significant changes.

## 3.18.22 (2023-07-25) {: #3.18.22 }

### REST API

#### Bugfixes

-   Taught repair task to be tolerant in the face of any artifact download failure.
    [#4111](https://github.com/pulp/pulpcore/issues/4111)

### Plugin API

No significant changes.

## 3.18.21 (2023-07-19) {: #3.18.21 }

### REST API

#### Bugfixes

-   Made the incremental file export include all published metadata.
    [#3941](https://github.com/pulp/pulpcore/issues/3941)
-   Updates file system exporter to correctly account the start_repository_version for pass_through publications
    [#4051](https://github.com/pulp/pulpcore/issues/4051)

### Plugin API

No significant changes.

## 3.18.20 (2023-06-14) {: #3.18.20 }

### REST API

#### Bugfixes

-   Exports now use gzip compression level 1 rather than compression level 9. Exported archives will
    now be slightly larger, but exports should be much faster. This is considered to be a more
    optimal balance of space/time for the export operation.
    [#3869](https://github.com/pulp/pulpcore/issues/3869)

### Plugin API

No significant changes.

## 3.18.19 (2023-06-06) {: #3.18.19 }

### REST API

#### Bugfixes

-   Taught PulpImport to be more robust in the face of previous failed attempts.
    [#3737](https://github.com/pulp/pulpcore/issues/3737)

### Plugin API

No significant changes.

## 3.18.18 (2023-05-30) {: #3.18.18 }

### REST API

#### Bugfixes

-   Taught repair task to remove unrepairable corrupted files.
    [#1947](https://github.com/pulp/pulpcore/issues/1947)
-   Taught repair task to continue when encountering a 404 during the repair process.
    [#3611](https://github.com/pulp/pulpcore/issues/3611)

### Plugin API

No significant changes.

## 3.18.17 (2023-04-11) {: #3.18.17 }

### REST API

#### Bugfixes

-   Downloader will now attempt to keep the filename of the requested URL intact if one exists.
    [#3715](https://github.com/pulp/pulpcore/issues/3715)

### Plugin API

No significant changes.

## 3.18.16 (2023-03-29) {: #3.18.16 }

### REST API

#### Bugfixes

-   Fixed an error when raising `UnexportableArtifactException`.
    [#3313](https://github.com/pulp/pulpcore/issues/3313)

### Plugin API

No significant changes.

## 3.18.15 (2023-03-09) {: #3.18.15 }

### REST API

#### Bugfixes

-   Added a `start_repository_version` parameter to the file system exporter.

    If specified, it will export only content units that differed between two repository versions.
    [#3413](https://github.com/pulp/pulpcore/issues/3413)

### Plugin API

No significant changes.

## 3.18.14 (2023-02-23) {: #3.18.14 }

### REST API

#### Bugfixes

-   Fixed a bug that caused the import machinery to import the same content multiple times in a row.
    [#3075](https://github.com/pulp/pulpcore/issues/3075)

### Plugin API

No significant changes.

## 3.18.13 (2023-01-20) {: #3.18.13 }

### REST API

#### Bugfixes

-   Fixed an occasional 500 error when viewing a repository version content summary while performing a content deletion task.
    [#3299](https://github.com/pulp/pulpcore/issues/3299)

### Plugin API

No significant changes.

## 3.18.12 (2023-01-10) {: #3.18.12 }

### REST API

#### Bugfixes

-   Insured that pulp-export correctly locks repos-being-exported.
    [#3370](https://github.com/pulp/pulpcore/issues/3370)
-   Fix migrating Remotes with @ in path
    [#3409](https://github.com/pulp/pulpcore/issues/3409)

### Plugin API

No significant changes.

## 3.18.11 (2022-11-02) {: #3.18.11 }

### REST API

#### Bugfixes

-   Fixed the fs exporter to handle the case where there are pre-existing files in the location that FileSystem attempts to export to you get a FileExistsError.
    [#1949](https://github.com/pulp/pulpcore/issues/1949)
-   Fixed the fs exporter to handle the case where hardlink method was requested but pulp and export locations are in different partitions so can't share the same inode.
    [#3187](https://github.com/pulp/pulpcore/issues/3187)
-   Another step on closing the deadlock-window when syncing overlapping content.
    [#3284](https://github.com/pulp/pulpcore/issues/3284)

### Plugin API

No significant changes.

## 3.18.10 (2022-09-14) {: #3.18.10 }

### REST API

#### Bugfixes

-   Another guardrail added around content-stages to address deadlock in a specific usecase.
    [#3192](https://github.com/pulp/pulpcore/issues/3192)

### Plugin API

No significant changes.

## 3.18.9 (2022-09-01) {: #3.18.9 }

### REST API

#### Bugfixes

-   Fixed the value of the Content-Type header returned for .xml.gz files.
    [#2811](https://github.com/pulp/pulpcore/issues/2811)
-   Fixed another rare deadlock for high-concurrency/overlapping-content syncs.
    [#3111](https://github.com/pulp/pulpcore/issues/3111)

### Plugin API

No significant changes.

## 3.18.8 (2022-08-16) {: #3.18.8 }

### REST API

No significant changes.

### Plugin API

No significant changes.

## 3.18.7 (2022-08-15) {: #3.18.7 }

### REST API

#### Bugfixes

-   Serialized orphan cleanup tasks with respect to each other to prevent them from failing.
    [#3030](https://github.com/pulp/pulpcore/issues/3030)

### Plugin API

No significant changes.

## 3.18.6 (2022-08-03) {: #3.18.6 }

### REST API

#### Bugfixes

-   Restore multiple-retry logic for PulpImport.
    [#2854](https://github.com/pulp/pulpcore/issues/2854)
-   Improve content app performance on head requests
    [#2924](https://github.com/pulp/pulpcore/issues/2924)
-   Use published relative paths for FS Exporter.
    [#2933](https://github.com/pulp/pulpcore/issues/2933)
-   Configured aiohttp to avoid rewriting redirect URLs, as some web servers (e.g. Amazon CloudFront) can be tempermental about the encoding of the URL.
    [#2964](https://github.com/pulp/pulpcore/issues/2964)

#### Improved Documentation

-   Removed some out of date references to Redmine (the previous issue tracker). We use Github Issues
    now.
    [#2642](https://github.com/pulp/pulpcore/issues/2642)
-   Fixed `extlinks` use in docs to be Sphinx==5.0.0 compatible.
    [#2782](https://github.com/pulp/pulpcore/issues/2782)

### Plugin API

No significant changes.

## 3.18.5 (2022-05-10) {: #3.18.5 }

### REST API

#### Bugfixes

-   Taught PulpImport to stream imports rather than reading files into memory in one chunk.

    This largely alleviates the memory-pressure that results from importing multiple
    large repositories in parallel.
    [#2307](https://github.com/pulp/pulpcore/issues/2307)

-   Fixed does_batch method in sync pipeline to allow waiting on content that is already resolved.
    [#2557](https://github.com/pulp/pulpcore/issues/2557)

-   Ensure downloader resets file on retry.
    [#2576](https://github.com/pulp/pulpcore/issues/2576)

-   Taught PulpImport to retry more than once in the event of creation-collisions.

    This fixes a rare import-failure during high-concurrency, high-content-overlap imports.
    [#2589](https://github.com/pulp/pulpcore/issues/2589)

-   Improved the error message when HTTP proxies reject requests from Pulp.
    [#2654](https://github.com/pulp/pulpcore/issues/2654)

### Plugin API

No significant changes.

## 3.18.4 (2022-04-12) {: #3.18.4 }

### REST API

#### Bugfixes

-   Fixed two instances of Pulp not writing to the task worker's temporary directory.
    [#2061](https://github.com/pulp/pulpcore/issues/2061)
-   Taught task-purge to process tasks in batches of 1000. This prevents large purges from using
    large amounts of memory as a result of reading all the affected Tasks into memory at once.
    [#2215](https://github.com/pulp/pulpcore/issues/2215)
-   Loosened the version-restrictions on PulpImport to only require X.Y matching.
    [#2269](https://github.com/pulp/pulpcore/issues/2269)
-   Fixed a (rare) deadlock around bulk_update() during syncs with overlapping content.
    [#2430](https://github.com/pulp/pulpcore/issues/2430)
-   Fixed a bug where notifications to workers may go unnoticed. This may lead to idle workers while
    there are tasks waiting.
    [#2506](https://github.com/pulp/pulpcore/issues/2506)

### Plugin API

No significant changes.

## 3.18.3 (2022-03-25) {: #3.18.3 }

### REST API

#### Bugfixes

-   Reduced memory usage during tasks like sync by holding fewer objects in-memory unnecessarily.
    [#2069](https://github.com/pulp/pulpcore/issues/2069)
-   Fixes duplicate key error `Key (content_artifact_id, remote_id)` when creating `RemoteArtifacts`
    during syncs in pulp_container and possibly other plugins.
    [#2381](https://github.com/pulp/pulpcore/issues/2381)
-   Declared proper dependency on user model in migration 0040.
    [#2403](https://github.com/pulp/pulpcore/issues/2403)
-   Fixed a rare deadlock when sync'ing overlapping content in high-concurrency envs.
    [#2420](https://github.com/pulp/pulpcore/issues/2420)

### Plugin API

#### Bugfixes

-   Adjusted the default size of the queues between pipelines to be 1 instead of 1000. The batchers in
    the stage will still accumulate up to 500 (by default) items so batching is still in-effect there
    where it matters.
    [#2069](https://github.com/pulp/pulpcore/issues/2069)

## 3.18.2 (2022-03-18) {: #3.18.2 }

### REST API

#### Bugfixes

-   Fix delete repository version causing "duplicate key value violates unique constraint" error.
    [#2047](https://github.com/pulp/pulpcore/issues/2047)

-   Fixed migration 0064_add_new_style_task_columns to purge extraneous ReservedResource and
    TaskReservedResource entries, which could block sync and publish tasks post-upgrade.

    Also taught the migration to bulk-update the Task changes. In large installations, this
    should have a positive impact on the time it takes to apply the migration.
    [#2101](https://github.com/pulp/pulpcore/issues/2101)

-   This fix prevents the lost track of a content removed version when deleting a repository version that deletes a content that is added back in the subsequent version, but deleted again in a later version.
    [#2267](https://github.com/pulp/pulpcore/issues/2267)

-   Fix a mistake in a previous migration which may have caused improperly encrypted remote fields.
    [#2327](https://github.com/pulp/pulpcore/issues/2327)

### Plugin API

No significant changes.

## 3.18.1 (2022-03-01) {: #3.18.1 }

### REST API

#### Bugfixes

-   Added transactions around repository version operations to prevent data loss.
    [#2268](https://github.com/pulp/pulpcore/issues/2268)

### Plugin API

No significant changes.

## 3.18.0 (2022-02-22) {: #3.18.0 }

### REST API

#### Features

-   Added a pulpcore-manager command remove-plugin to remove a Pulp plugin.
    [#1945](https://github.com/pulp/pulpcore/issues/1945)

-   Implemented the Redis caching machinery that can be used within the synchronous context.
    [#2003](https://github.com/pulp/pulpcore/issues/2003)

-   Add a "current_task" field to workers so that you can easily see which workers are currently active.
    [#2034](https://github.com/pulp/pulpcore/issues/2034)

-   Allowed Pulp to install without Redis.
    [#2057](https://github.com/pulp/pulpcore/issues/2057)

-   Added `has_repository_obj_perms` and `has_repository_model_or_obj_perms` as access conditions
    that can be used by viewsets nested beneath repository viewsets.
    [#2076](https://github.com/pulp/pulpcore/issues/2076)

-   Queryset scoping can now be disabled by changing the `DEFAULT_PERMISSION_CLASSES`.
    [#2115](https://github.com/pulp/pulpcore/issues/2115)

-   Specifying a different value for `DEFAULT_PERMISSION_CLASSES` will now automatically disable the
    permission assignment provided by the `creation_hooks` portion of an `AccessPolicyFromDB`.
    [#2116](https://github.com/pulp/pulpcore/issues/2116)

-   The Pulp API can now be rerooted using the new `API_ROOT` setting. By default it is set to
    `/pulp/`. Pulp appends the string `api/v3/` onto the value of `API_ROOT`.
    [#2148](https://github.com/pulp/pulpcore/issues/2148)

-   Added a redirecting content guard that can be employed by plugins to forward from a REST call to
    the content app.
    [#2151](https://github.com/pulp/pulpcore/issues/2151)

-   Added a new analyze-publication management command to facilitate debugging.
    [#2200](https://github.com/pulp/pulpcore/issues/2200)

-   Added a read-only task schedule view for configured tasks schedules.

    NOTE: This feature is in tech-preview and may change in backwards incompatible ways in the future.
    [#2204](https://github.com/pulp/pulpcore/issues/2204)

#### Bugfixes

-   Fix import and export OOM error.
    [#2072](https://github.com/pulp/pulpcore/issues/2072)

-   Fixed downloader retry logic with partially written files.
    [#2078](https://github.com/pulp/pulpcore/issues/2078)

-   Fix content summary showing incorrect count after previous version deletion.
    [#2084](https://github.com/pulp/pulpcore/issues/2084)

-   Fixed issue with listing repository versions after deleting previous versions.
    [#2085](https://github.com/pulp/pulpcore/issues/2085)

-   Fixed file descriptior leak during upload.
    [#2087](https://github.com/pulp/pulpcore/issues/2087)

-   Fixed an api schema bug where both `permission_assignment` and `creation_hooks` were required
    by the `AccessPolicy` serializer.
    [#2089](https://github.com/pulp/pulpcore/issues/2089)

-   Fixed migration 0081 to be compatible with custom User models.
    [#2090](https://github.com/pulp/pulpcore/issues/2090)

-   Fixed PulpImport to correctly save relative to MEDIA_ROOT.
    [#2091](https://github.com/pulp/pulpcore/issues/2091)

-   Added proper logging around certain ways a task could fail.
    [#2093](https://github.com/pulp/pulpcore/issues/2093)

-   Taught PulpImport to retry in the event of a concurrency-collision on ContentArtifact.
    [#2102](https://github.com/pulp/pulpcore/issues/2102)

-   Fixed an edge case where the first (streamed) response from an repo synced as "on_demand" could be incorrect.
    [#2119](https://github.com/pulp/pulpcore/issues/2119)

-   Fixed bug where retries of partially downloaded files failed digest and size validation.
    [#2135](https://github.com/pulp/pulpcore/issues/2135)

-   Fixed the calculation of response range headers in streaming answers from the content app.
    [#2147](https://github.com/pulp/pulpcore/issues/2147)

-   Fixed potential deadlock-window in touch() path.
    [#2157](https://github.com/pulp/pulpcore/issues/2157)

-   Fixed reporting tasks being canceled before being picked up by a worker as canceled instead of
    failed.
    [#2183](https://github.com/pulp/pulpcore/issues/2183)

-   Return a concise message exception on 500 in case file is missing on the FS.
    [#2187](https://github.com/pulp/pulpcore/issues/2187)

-   Fixed import/export of repositories with sub-content.

    An example would be the sub-repositories in pulp_rpm
    DistributionTrees.
    [#2192](https://github.com/pulp/pulpcore/issues/2192)

-   touch() now uses standard Django instead of raw-sql to update.
    [#2229](https://github.com/pulp/pulpcore/issues/2229)

#### Misc

-   [#2086](https://github.com/pulp/pulpcore/issues/2086), [#2094](https://github.com/pulp/pulpcore/issues/2094), [#2173](https://github.com/pulp/pulpcore/issues/2173), [#2202](https://github.com/pulp/pulpcore/issues/2202)

### Plugin API

#### Features

-   The `AutoAddObjPermsMixin` now calls a `handle_creation_hooks` interface on the configured DRF
    permission class, e.g. the default `AccessPolicyFromDB`.
    [#2116](https://github.com/pulp/pulpcore/issues/2116)
-   Added a redirecting content guard that can be employed by plugins to generate preauthenticated URLs
    that forward from a REST call to the content app. Added the `GetOrCreateSerializerMixin` to
    `get_or_create` objects still validating them through the serializer.
    [#2151](https://github.com/pulp/pulpcore/issues/2151)
-   Exposed synchronous and asynchronous caching machinery. The classes `AsyncContentCache` and
    `SyncContentCache` can be now managed by plugin writers.
    [#8806](https://github.com/pulp/pulpcore/issues/8806)

#### Bugfixes

-   Started using a plugin provided serializer in has_remote_param_obj_perms and
    has_remote_param_model_or_obj_perms to solve the Unexpected field error during sync by
    a non-admin user.
    [#2088](https://github.com/pulp/pulpcore/issues/2088)
-   Exposed adjust_roles in the plugin api.
    [#2092](https://github.com/pulp/pulpcore/issues/2092)
-   Expose Roles model in plugin api.
    [#2185](https://github.com/pulp/pulpcore/issues/2185)

#### Deprecations

-   Deprecate the the use of `custom_file_object` parameter in `BaseDownloader`.
    [#2123](https://github.com/pulp/pulpcore/issues/2123)
-   The `API_ROOT` constant has been deprecated and turned into a setting. Its removal is scheduled
    for 3.20. Please use the setting with the same name instead.
    [#2148](https://github.com/pulp/pulpcore/issues/2148)
-   The `ACCESS_POLICY_VIEWSET_NAME` attribute is no longer expected to be present on models. The
    RBAC machinery no longer uses this, and if present a deprecation warning will be emitted.
    [#2209](https://github.com/pulp/pulpcore/issues/2209)

## 3.17.8 (2022-05-10) {: #3.17.8 }

### REST API

#### Bugfixes

-   Taught PulpImport to stream imports rather than reading files into memory in one chunk.

    This largely alleviates the memory-pressure that results from importing multiple
    large repositories in parallel.
    [#2307](https://github.com/pulp/pulpcore/issues/2307)

-   Fixed does_batch method in sync pipeline to allow waiting on content that is already resolved.
    [#2557](https://github.com/pulp/pulpcore/issues/2557)

-   Ensure downloader resets file on retry.
    [#2576](https://github.com/pulp/pulpcore/issues/2576)

-   Taught PulpImport to retry more than once in the event of creation-collisions.

    This fixes a rare import-failure during high-concurrency, high-content-overlap imports.
    [#2589](https://github.com/pulp/pulpcore/issues/2589)

-   Improved the error message when HTTP proxies reject requests from Pulp.
    [#2654](https://github.com/pulp/pulpcore/issues/2654)

### Plugin API

No significant changes.

## 3.17.7 (2022-04-12) {: #3.17.7 }

### REST API

#### Bugfixes

-   Fixed two instances of Pulp not writing to the task worker's temporary directory.
    [#2061](https://github.com/pulp/pulpcore/issues/2061)
-   Taught task-purge to process tasks in batches of 1000. This prevents large purges from using
    large amounts of memory as a result of reading all the affected Tasks into memory at once.
    [#2215](https://github.com/pulp/pulpcore/issues/2215)
-   Loosened the version-restrictions on PulpImport to only require X.Y matching.
    [#2269](https://github.com/pulp/pulpcore/issues/2269)
-   Fixed a (rare) deadlock around bulk_update() during syncs with overlapping content.
    [#2430](https://github.com/pulp/pulpcore/issues/2430)
-   Fixed a bug where notifications to workers may go unnoticed. This may lead to idle workers while
    there are tasks waiting.
    [#2506](https://github.com/pulp/pulpcore/issues/2506)

### Plugin API

No significant changes.

## 3.17.6 (2022-03-25) {: #3.17.6 }

### REST API

#### Bugfixes

-   Reduced memory usage during tasks like sync by holding fewer objects in-memory unnecessarily.
    [#2069](https://github.com/pulp/pulpcore/issues/2069)
-   Fixes duplicate key error `Key (content_artifact_id, remote_id)` when creating `RemoteArtifacts`
    during syncs in pulp_container and possibly other plugins.
    [#2381](https://github.com/pulp/pulpcore/issues/2381)
-   Declared proper dependency on user model in migration 0040.
    [#2403](https://github.com/pulp/pulpcore/issues/2403)
-   Fixed a rare deadlock when sync'ing overlapping content in high-concurrency envs.
    [#2420](https://github.com/pulp/pulpcore/issues/2420)

### Plugin API

#### Bugfixes

-   Adjusted the default size of the queues between pipelines to be 1 instead of 1000. The batchers in
    the stage will still accumulate up to 500 (by default) items so batching is still in-effect there
    where it matters.
    [#2069](https://github.com/pulp/pulpcore/issues/2069)

## 3.17.5 (2022-03-18) {: #3.17.5 }

### REST API

#### Bugfixes

-   Fix delete repository version causing "duplicate key value violates unique constraint" error.
    [#2047](https://github.com/pulp/pulpcore/issues/2047)

-   Fixed migration 0064_add_new_style_task_columns to purge extraneous ReservedResource and
    TaskReservedResource entries, which could block sync and publish tasks post-upgrade.

    Also taught the migration to bulk-update the Task changes. In large installations, this
    should have a positive impact on the time it takes to apply the migration.
    [#2101](https://github.com/pulp/pulpcore/issues/2101)

-   Taught PulpImport to retry in the event of a concurrency-collision on ContentArtifact.
    [#2102](https://github.com/pulp/pulpcore/issues/2102)

-   This fix prevents the lost track of a content removed version when deleting a repository version that deletes a content that is added back in the subsequent version, but deleted again in a later version.
    [#2267](https://github.com/pulp/pulpcore/issues/2267)

-   Fix a mistake in a previous migration which may have caused improperly encrypted remote fields.
    [#2327](https://github.com/pulp/pulpcore/issues/2327)

### Plugin API

No significant changes.

## 3.17.4 (2022-03-01) {: #3.17.4 }

### REST API

#### Bugfixes

-   Fix import and export OOM error.
    [#2072](https://github.com/pulp/pulpcore/issues/2072)

-   Fixed downloader retry logic with partially written files.
    [#2078](https://github.com/pulp/pulpcore/issues/2078)

-   Fix content summary showing incorrect count after previous version deletion.
    [#2084](https://github.com/pulp/pulpcore/issues/2084)

-   Fixed issue with listing repository versions after deleting previous versions.
    [#2085](https://github.com/pulp/pulpcore/issues/2085)

-   Fixed file descriptior leak during upload.
    [#2087](https://github.com/pulp/pulpcore/issues/2087)

-   Added proper logging around certain ways a task could fail.
    [#2093](https://github.com/pulp/pulpcore/issues/2093)

-   Make checksum mismatches a retryable error.
    [#2094](https://github.com/pulp/pulpcore/issues/2094)

-   Fixed an edge case where the first (streamed) response from an repo synced as "on_demand" could be incorrect.
    [#2119](https://github.com/pulp/pulpcore/issues/2119)

-   Fixed bug where retries of partially downloaded files failed digest and size validation.
    [#2135](https://github.com/pulp/pulpcore/issues/2135)

-   Fixed the calculation of response range headers in streaming answers from the content app.
    [#2147](https://github.com/pulp/pulpcore/issues/2147)

-   Fixed potential deadlock-window in touch() path.
    [#2157](https://github.com/pulp/pulpcore/issues/2157)

-   Fixed reporting tasks being canceled before being picked up by a worker as canceled instead of
    failed.
    [#2183](https://github.com/pulp/pulpcore/issues/2183)

-   Fixed import/export of repositories with sub-content.

    An example would be the sub-repositories in pulp_rpm
    DistributionTrees.
    [#2192](https://github.com/pulp/pulpcore/issues/2192)

-   touch() now uses standard Django instead of raw-sql to update.
    [#2229](https://github.com/pulp/pulpcore/issues/2229)

-   Added transactions around repository version operations to prevent data loss.
    [#2268](https://github.com/pulp/pulpcore/issues/2268)

### Plugin API

No significant changes.

## 3.17.3 (2022-01-12) {: #3.17.3 }

### REST API

No significant changes.

### Plugin API

#### Bugfixes

-   Exposed adjust_roles in the plugin api.
    (backported from #9665)
    [#9668](https://pulp.plan.io/issues/9668)

## 3.17.2 (2022-01-06) {: #3.17.2 }

### REST API

#### Bugfixes

-   Fixed PulpImport to correctly save relative to MEDIA_ROOT.
    (backported from #9660)
    [#9664](https://pulp.plan.io/issues/9664)

### Plugin API

No significant changes.

## 3.17.1 (2021-12-21) {: #3.17.1 }

### REST API

#### Bugfixes

-   Fixed migration 0081 to be compatible with custom User models.
    [#9654](https://pulp.plan.io/issues/9654)

### Plugin API

No significant changes.

## 3.17.0 (2021-12-14) {: #3.17.0 }

### REST API

#### Features

-   Added a `/tasks/purge/` API to do bulk-deletion of old tasks.

    Over time, the database can fill with task-records. This API allows
    an installation to bulk-remove records based on their completion
    timestamps.

    NOTE: this endpoint is in tech-preview and may change in backwards
    incompatible ways in the future.
    [#8554](https://pulp.plan.io/issues/8554)

-   Added a role model to support RBAC and the utility functions `assign_role` and `remove_role`.

    The field `permissions_assignment` of access policies has been renamed to `creation_hooks`. A
    compatibility patch has been added to be removed with pulpcore=3.20.

    The `permissions` argument to `creation_hooks` has been deprecated to be removed with
    pulpcore=3.20.
    [#9411](https://pulp.plan.io/issues/9411)

-   Added views to assign model and object level roles to users and groups.
    [#9413](https://pulp.plan.io/issues/9413)

-   Rewrote existing access policies on viewsets to use roles.
    [#9415](https://pulp.plan.io/issues/9415)

-   Added validation to prevent credentials in remote urls. Also added data migration to move
    credentials out of remote url and into remote username/password fields for existing remotes.
    [#9459](https://pulp.plan.io/issues/9459)

-   Reworked RBAC Content Guards to now use roles. Added new endpoints `{list, add, remove}_roles` and `my_permissions` to the RBAC content guard viewset.
    [#9498](https://pulp.plan.io/issues/9498)

-   Content-type and Content-disposition headers are now sent in the AzureStorage.url.
    [#9518](https://pulp.plan.io/issues/9518)

-   SigningService scripts can now access the public key fingerprint using the `PULP_SIGNING_KEY_FINGERPRINT` environment variable.
    This allows for more generic scripts, that do not need to "guess" (hardcode) what key they should use.
    [#9532](https://pulp.plan.io/issues/9532)

-   Added object specific endpoints `{list,add}_roles`, `remove_roles` and `my_permissions` to tasks and groups viewsets.
    [#9604](https://pulp.plan.io/issues/9604)

-   Added a `reset` endpoint to the access policy viewset to revert to the provided default uncustomized access policy.
    [#9606](https://pulp.plan.io/issues/9606)

#### Bugfixes

-   PulpImporter now unpacks into the task-worker's working directory rather than /tmp. Unpacking
    large files into /tmp could cause the operation to fail, or even cause stability issues for
    Pulp instance, due to running /tmp out of space.
    [#8610](https://pulp.plan.io/issues/8610)
-   Missing worker records are now kept in the database for seven days allowing time for post-mortem
    analysis of them. The user-facing data in the status API remains unmodified.
    [#8988](https://pulp.plan.io/issues/8988)
-   Made Pulp to be fault-tolerant to Redis server connection issues.
    [#8997](https://pulp.plan.io/issues/8997)
-   Cache is now properly invalidated after reclaim disk task.
    [#9215](https://pulp.plan.io/issues/9215)
-   Fixed bug where the content app would stop working after a brief loss of connection to the database.
    [#9276](https://pulp.plan.io/issues/9276)
-   Improved messaging around timeout requests.
    [#9301](https://pulp.plan.io/issues/9301)
-   Updated the distribution validation to properly handle the use of `repository` / `repository_version` / `publication`.
    [#9434](https://pulp.plan.io/issues/9434)
-   Fixed issue with listing repository versions while running orphan cleanup task.
    [#9481](https://pulp.plan.io/issues/9481)
-   Fixed erroneous ordering filters from appearing in HTML views and causing 500 errors when used.
    [#9496](https://pulp.plan.io/issues/9496)
-   Fixed bug where Artifacts were being downloaded even if they were already saved in Pulp.
    [#9542](https://pulp.plan.io/issues/9542)
-   Fixed a bug in pulpcore-worker, where wakeup and cancel signals could be lost due to a race
    condition.
    [#9549](https://pulp.plan.io/issues/9549)
-   Fixed bug where chunked uploads were being assembled in /tmp.
    [#9550](https://pulp.plan.io/issues/9550)
-   Created a proxy model for Groups to allow using creation_hooks with them.
    [#9588](https://pulp.plan.io/issues/9588)
-   Fixed permission errors on artifact retrieval from object storage when redis caching is enabled.
    [#9595](https://pulp.plan.io/issues/9595)

#### Improved Documentation

-   Adjusted the RBAC documentation for the roles framework.
    [#9411](https://pulp.plan.io/issues/9411)
-   Added documentation for `DB_ENCRYPTION_KEY` setting.
    [#9495](https://pulp.plan.io/issues/9495)
-   Fixed the path to uploaded artifacts.
    [#9527](https://pulp.plan.io/issues/9527)

#### Removals

-   The `pulpcore-worker` binary no longer accepts the `--resource-manager` flag. There is no
    resource manager anymore, so this flag is no longer needed.
    [#9327](https://pulp.plan.io/issues/9327)
-   Removed tech previewed `assign_permission` and `remove_permission` endpoints from RBAC content guard viewset.
    [#9498](https://pulp.plan.io/issues/9498)

#### Misc

-   [#9353](https://pulp.plan.io/issues/9353), [#9354](https://pulp.plan.io/issues/9354), [#9506](https://pulp.plan.io/issues/9506)

### Plugin API

#### Features

-   Added `get_objects_for_user` to support queryset filtering by roles.
    Added hooks in `AutoAddObjPermsMixin` to support auto-assignment of roles.

    Changed the lookup for creation hooks so hooks need to be registered in
    `REGISTERED_CREATION_HOOKS` on the model to be used. The signature for creation hooks that are
    registered must match the exploded version of the dict parameters from the access policy.
    Unregistered creation hooks are deprecated and support will be dropped in pulpcore 3.20.
    [#9411](https://pulp.plan.io/issues/9411)

-   Made RepositoryAddRemoveContentSerializer available for plugin writers.
    [#9504](https://pulp.plan.io/issues/9504)

-   Added ability to pass headers through the AzureStorage.url.
    [#9518](https://pulp.plan.io/issues/9518)

-   `Remote.get_remote_artifact_url` now accepts a `request` parameter.
    [#9554](https://pulp.plan.io/issues/9554)

-   Added `initialize_new_version` function to `Repository` model.
    [#9579](https://pulp.plan.io/issues/9579)

-   DownloaderFactory.user_agent() method is now available if plugin needs to generate User-Agent header value to use in their custom (subclasssed) downloader factory.
    [#9591](https://pulp.plan.io/issues/9591)

-   Added ability to use a custom download factory. Remote.get_downloader now accepts a download_factory parameter.
    [#9592](https://pulp.plan.io/issues/9592)

-   `Handler._serve_content_artifact` method accepts new positional argument `request`.
    [#9595](https://pulp.plan.io/issues/9595)

-   Added Group model to plugin api.
    Added `RolesMixin` to for viewsets to allow managing object roles based on permissions.
    [#9604](https://pulp.plan.io/issues/9604)

-   Added new async sign method `asign` to the `SigningService` model.
    [#9615](https://pulp.plan.io/issues/9615)

-   `SigningService.sign` and `SigningService.asign` now accepts a `env_var` parameter that makes
    it possible to pass environment variables to the signing script.
    [#9621](https://pulp.plan.io/issues/9621)

#### Bugfixes

-   Include additional information about which AccessPolicy is using deprecated policy features.
    [#9608](https://pulp.plan.io/issues/9608)

## 3.16.24 (2023-10-30) {: #3.16.24 }

### REST API

#### Bugfixes

-   Resolved a sync-time performance regression.
    [#4591](https://github.com/pulp/pulpcore/issues/4591)

### Plugin API

No significant changes.

## 3.16.23 (2023-10-16) {: #3.16.23 }

### REST API

#### Bugfixes

-   Improve performance during export operations.
    [#4551](https://github.com/pulp/pulpcore/issues/4551)
-   Taught ContentArtifactResource import to cache content results to improve performance.
    [#4564](https://github.com/pulp/pulpcore/issues/4564)

### Plugin API

No significant changes.

## 3.16.22 (2023-10-05) {: #3.16.22 }

### REST API

#### Bugfixes

-   Made sure PulpImport's use of tar.extractall() is safe.
    [#3323](https://github.com/pulp/pulpcore/issues/3323)

### Plugin API

No significant changes.

## 3.16.21 (2023-09-27) {: #3.16.21 }

### REST API

#### Improved Documentation

-   Adds docs on recording and building graphs from the memory data saved by the `TASK_DIAGNOSTICS`
    setting.
    [#2329](https://github.com/pulp/pulpcore/issues/2329)

#### Misc

-   [#2329](https://github.com/pulp/pulpcore/issues/2329), [#4436](https://github.com/pulp/pulpcore/issues/4436)

### Plugin API

No significant changes.

## 3.16.20 (2023-09-20) {: #3.16.20 }

### REST API

#### Bugfixes

-   Removed compression from exports (using gzip level 0). For most users of export functionality it seems to be a poor tradeoff.
    [#4434](https://github.com/pulp/pulpcore/issues/4434)

### Plugin API

No significant changes.

## 3.16.19 (2023-09-13) {: #3.16.19 }

### REST API

#### Bugfixes

-   Taught PulpImport to be more robust in the face of previous failed attempts.
    [#3737](https://github.com/pulp/pulpcore/issues/3737)

-   Exports now use gzip compression level 1 rather than compression level 9. Exported archives will
    now be slightly larger, but exports should be much faster. This is considered to be a more
    optimal balance of space/time for the export operation.
    [#3869](https://github.com/pulp/pulpcore/issues/3869)

-   Improved the performance when looking up content for repository versions.
    [#3969](https://github.com/pulp/pulpcore/issues/3969)

-   Taught the Artifact.json of an export to hold minimum-unique-set of Artifact entries.

    In highly-duplicated-content export scenarios, this can mean a significant decrease
    in export-size, and significant improvement in import-performance.
    [#4159](https://github.com/pulp/pulpcore/issues/4159)

-   Fix a subtle export bug introduced from the optimizations in #4159.
    [#4210](https://github.com/pulp/pulpcore/issues/4210)

-   Correctly fixed pulp_rpm-export-edgecase - fix #4210 was incomplete.
    [#4231](https://github.com/pulp/pulpcore/issues/4231)

-   Ensure the compression level is reliably set properly as per #3869.
    [#4351](https://github.com/pulp/pulpcore/issues/4351)

-   Ensure non-chunked exports also use gzip `compressionlevel=1`
    [#4411](https://github.com/pulp/pulpcore/issues/4411)

### Plugin API

No significant changes.

## 3.16.18 (2023-08-01) {: #3.16.18 }

### REST API

#### Bugfixes

-   Updated the downloader's fetch method to comply with Python 3.11.
    [#4107](https://github.com/pulp/pulpcore/issues/4107)

### Plugin API

No significant changes.

## 3.16.17 (2023-04-11) {: #3.16.17 }

### REST API

#### Bugfixes

-   Downloader will now attempt to keep the filename of the requested URL intact if one exists.
    [#3715](https://github.com/pulp/pulpcore/issues/3715)

### Plugin API

No significant changes.

## 3.16.16 (2023-02-23) {: #3.16.16 }

### REST API

#### Bugfixes

-   Fixed a bug that caused the import machinery to import the same content multiple times in a row.
    [#3075](https://github.com/pulp/pulpcore/issues/3075)
-   Insured that pulp-export correctly locks repos-being-exported.
    [#3370](https://github.com/pulp/pulpcore/issues/3370)

### Plugin API

No significant changes.

## 3.16.15 (2022-11-02) {: #3.16.15 }

### REST API

#### Bugfixes

-   Fixed the fs exporter to handle the case where there are pre-existing files in the location that FileSystem attempts to export to you get a FileExistsError.
    [#1949](https://github.com/pulp/pulpcore/issues/1949)
-   Fixed the fs exporter to handle the case where hardlink method was requested but pulp and export locations are in different partitions so can't share the same inode.
    [#3187](https://github.com/pulp/pulpcore/issues/3187)
-   Another step on closing the deadlock-window when syncing overlapping content.
    [#3284](https://github.com/pulp/pulpcore/issues/3284)

### Plugin API

No significant changes.

## 3.16.14 (2022-09-13) {: #3.16.14 }

### REST API

#### Bugfixes

-   Fixed the value of the Content-Type header returned for .xml.gz files.
    [#2811](https://github.com/pulp/pulpcore/issues/2811)
-   Another guardrail added around content-stages to address deadlock in a specific usecase.
    [#3192](https://github.com/pulp/pulpcore/issues/3192)

### Plugin API

No significant changes.

## 3.16.13 (2022-09-01) {: #3.16.13 }

### REST API

#### Bugfixes

-   Fixed another rare deadlock for high-concurrency/overlapping-content syncs.
    [#3111](https://github.com/pulp/pulpcore/issues/3111)

### Plugin API

No significant changes.

## 3.16.12 (2022-08-05) {: #3.16.12 }

### REST API

#### Bugfixes

-   Use published relative paths for FS Exporter.
    [#2933](https://github.com/pulp/pulpcore/issues/2933)
-   Serialized orphan cleanup tasks with respect to each other to prevent them from failing.
    [#3030](https://github.com/pulp/pulpcore/issues/3030)

### Plugin API

No significant changes.

## 3.16.11 (2022-07-14) {: #3.16.11 }

### REST API

#### Bugfixes

-   Improve content app performance on head requests
    [#2924](https://github.com/pulp/pulpcore/issues/2924)
-   Configured aiohttp to avoid rewriting redirect URLs, as some web servers (e.g. Amazon CloudFront) can be tempermental about the encoding of the URL.
    [#2964](https://github.com/pulp/pulpcore/issues/2964)

### Plugin API

No significant changes.

## 3.16.10 (2022-06-16) {: #3.16.10 }

### REST API

#### Bugfixes

-   Restore multiple-retry logic for PulpImport.
    [#2854](https://github.com/pulp/pulpcore/issues/2854)

### Plugin API

No significant changes.

## 3.16.9 (2022-06-15) {: #3.16.9 }

### REST API

#### Bugfixes

-   Started showing errors when users try to export remote artifacts.
    [#2817](https://github.com/pulp/pulpcore/issues/2817)

#### Misc

-   [#2816](https://github.com/pulp/pulpcore/issues/2816)

### Plugin API

No significant changes.

## 3.16.8 (2022-05-10) {: #3.16.8 }

### REST API

#### Bugfixes

-   Taught PulpImport to stream imports rather than reading files into memory in one chunk.

    This largely alleviates the memory-pressure that results from importing multiple
    large repositories in parallel.
    [#2307](https://github.com/pulp/pulpcore/issues/2307)

-   Fixed does_batch method in sync pipeline to allow waiting on content that is already resolved.
    [#2557](https://github.com/pulp/pulpcore/issues/2557)

-   Ensure downloader resets file on retry.
    [#2576](https://github.com/pulp/pulpcore/issues/2576)

-   Taught PulpImport to retry more than once in the event of creation-collisions.

    This fixes a rare import-failure during high-concurrency, high-content-overlap imports.
    [#2589](https://github.com/pulp/pulpcore/issues/2589)

-   Improved the error message when HTTP proxies reject requests from Pulp.
    [#2654](https://github.com/pulp/pulpcore/issues/2654)

### Plugin API

No significant changes.

## 3.16.7 (2022-04-12) {: #3.16.7 }

### REST API

#### Bugfixes

-   Fixed two instances of Pulp not writing to the task worker's temporary directory.
    [#2061](https://github.com/pulp/pulpcore/issues/2061)
-   Fixed file descriptior leak during upload.
    [#2087](https://github.com/pulp/pulpcore/issues/2087)
-   Fixed a bug in pulpcore-worker, where wakeup and cancel signals could be lost due to a race
    condition.
    [#2144](https://github.com/pulp/pulpcore/issues/2144)
-   Loosened the version-restrictions on PulpImport to only require X.Y matching.
    [#2269](https://github.com/pulp/pulpcore/issues/2269)
-   Fixed a (rare) deadlock around bulk_update() during syncs with overlapping content.
    [#2430](https://github.com/pulp/pulpcore/issues/2430)
-   Fixed a bug where notifications to workers may go unnoticed. This may lead to idle workers while
    there are tasks waiting.
    [#2506](https://github.com/pulp/pulpcore/issues/2506)

### Plugin API

No significant changes.

## 3.16.6 (2022-03-25) {: #3.16.6 }

### REST API

#### Bugfixes

-   Reduced memory usage during tasks like sync by holding fewer objects in-memory unnecessarily.
    [#2069](https://github.com/pulp/pulpcore/issues/2069)
-   Fixes duplicate key error `Key (content_artifact_id, remote_id)` when creating `RemoteArtifacts`
    during syncs in pulp_container and possibly other plugins.
    [#2381](https://github.com/pulp/pulpcore/issues/2381)
-   Declared proper dependency on user model in migration 0040.
    [#2403](https://github.com/pulp/pulpcore/issues/2403)
-   Fixed a rare deadlock when sync'ing overlapping content in high-concurrency envs.
    [#2420](https://github.com/pulp/pulpcore/issues/2420)
-   Fixed secure proxy support by updating aiohttp version to ~=3.8.1.
    [#2423](https://github.com/pulp/pulpcore/issues/2423)

### Plugin API

#### Bugfixes

-   Adjusted the default size of the queues between pipelines to be 1 instead of 1000. The batchers in
    the stage will still accumulate up to 500 (by default) items so batching is still in-effect there
    where it matters.
    [#2069](https://github.com/pulp/pulpcore/issues/2069)

## 3.16.5 (2022-03-17) {: #3.16.5 }

### REST API

#### Bugfixes

-   Fix delete repository version causing "duplicate key value violates unique constraint" error.
    [#2047](https://github.com/pulp/pulpcore/issues/2047)

-   Fixed migration 0064_add_new_style_task_columns to purge extraneous ReservedResource and
    TaskReservedResource entries, which could block sync and publish tasks post-upgrade.

    Also taught the migration to bulk-update the Task changes. In large installations, this
    should have a positive impact on the time it takes to apply the migration.
    [#2101](https://github.com/pulp/pulpcore/issues/2101)

-   Taught PulpImport to retry in the event of a concurrency-collision on ContentArtifact.
    [#2102](https://github.com/pulp/pulpcore/issues/2102)

-   This fix prevents the lost track of a content removed version when deleting a repository version that deletes a content that is added back in the subsequent version, but deleted again in a later version.
    [#2267](https://github.com/pulp/pulpcore/issues/2267)

-   Fix a mistake in a previous migration which may have caused improperly encrypted remote fields.
    [#2327](https://github.com/pulp/pulpcore/issues/2327)

### Plugin API

No significant changes.

## 3.16.4 (2022-03-01) {: #3.16.4 }

### REST API

#### Bugfixes

-   Fix content summary showing incorrect count after previous version deletion.
    [#2084](https://github.com/pulp/pulpcore/issues/2084)

-   Fixed issue with listing repository versions after deleting previous versions.
    [#2085](https://github.com/pulp/pulpcore/issues/2085)

-   Fixed potential deadlock-window in touch() path.
    [#2157](https://github.com/pulp/pulpcore/issues/2157)

-   Fixed import/export of repositories with sub-content.

    An example would be the sub-repositories in pulp_rpm
    DistributionTrees.
    [#2192](https://github.com/pulp/pulpcore/issues/2192)

-   touch() now uses standard Django instead of raw-sql to update.
    [#2229](https://github.com/pulp/pulpcore/issues/2229)

-   PulpImporter now unpacks into the task-worker's working directory rather than /tmp. Unpacking
    large files into /tmp could cause the operation to fail, or even cause stability issues for
    Pulp instance, due to running /tmp out of space.
    [#2247](https://github.com/pulp/pulpcore/issues/2247)

-   Added transactions around repository version operations to prevent data loss.
    [#2268](https://github.com/pulp/pulpcore/issues/2268)

### Plugin API

No significant changes.

## 3.16.3 (2022-02-08) {: #3.16.3 }

### REST API

#### Bugfixes

-   Fix import and export OOM error.
    [#2072](https://github.com/pulp/pulpcore/issues/2072)
-   Fixed downloader retry logic with partially written files.
    [#2078](https://github.com/pulp/pulpcore/issues/2078)
-   Fixed bug where retries of partially downloaded files failed digest and size validation.
    [#2135](https://github.com/pulp/pulpcore/issues/2135)
-   Fixed the calculation of response range headers in streaming answers from the content app.
    [#2147](https://github.com/pulp/pulpcore/issues/2147)
-   Improved messaging around timeout requests.
    [#2169](https://github.com/pulp/pulpcore/issues/2169)
-   Fixed reporting tasks being canceled before being picked up by a worker as canceled instead of
    failed.
    [#2183](https://github.com/pulp/pulpcore/issues/2183)

#### Misc

-   [#2094](https://github.com/pulp/pulpcore/issues/2094)

### Plugin API

No significant changes.

## 3.16.2 (2022-01-07) {: #3.16.2 }

### REST API

#### Bugfixes

-   Fixed PulpImport to correctly save relative to MEDIA_ROOT.
    (backported from #9660)
    [#9663](https://pulp.plan.io/issues/9663)

### Plugin API

No significant changes.

## 3.16.1 (2021-12-02) {: #3.16.1 }

### REST API

#### Bugfixes

-   Fixed bug where Artifacts were being downloaded even if they were already saved in Pulp.
    (backported from #9542)
    [#9596](https://pulp.plan.io/issues/9596)
-   Fixed bug where the content app would stop working after a brief loss of connection to the database.
    (backported from #9276)
    [#9598](https://pulp.plan.io/issues/9598)

### Plugin API

No significant changes.

## 3.16.0 (2021-10-05) {: #3.16.0 }

### REST API

#### Features

-   Prioritize remote content provided by Alternate Content Sources over regular content in the content
    app.
    [#8749](https://pulp.plan.io/issues/8749)
-   Marked readonly task resources as shared for concurrent use.
    [#9326](https://pulp.plan.io/issues/9326)
-   Added validation for the remote type that can be used with the ACS.
    [#9375](https://pulp.plan.io/issues/9375)

#### Bugfixes

-   Ordered several ContentStages paths to fix deadlocks in high-concurrency scenarios.
    [#8750](https://pulp.plan.io/issues/8750)
-   Fixed a bug where `pulpcore-content` decompressed data while incorrectly advertising to clients
    it was still compressed via the `Content-Encoding: gzip` header.
    [#9213](https://pulp.plan.io/issues/9213)
-   Changed the pulpcore-worker to mark abandoned tasks as "failed" instead of "canceled".
    [#9247](https://pulp.plan.io/issues/9247)
-   Fixed the repository modify endpoint performance problems.
    [#9266](https://pulp.plan.io/issues/9266)
-   `RBACContentGuard` assign/remove permission endpoints now properly return 201 instead of 200
    [#9314](https://pulp.plan.io/issues/9314)
-   Fixed bug where some Openshift environments could not start workers due to a strange Python runtime
    import issue.
    [#9338](https://pulp.plan.io/issues/9338)
-   PATCH/PUT/DELETE calls for the ACS are asynchronous and trigger a task.
    [#9374](https://pulp.plan.io/issues/9374)
-   Fixed update call for the ACS so paths are not silenty removed when other fields are being updated.
    [#9376](https://pulp.plan.io/issues/9376)
-   Fixed an issue where on_demand content might not be downloaded properly if the remote URL was changed (even if re-synced).
    [#9395](https://pulp.plan.io/issues/9395)
-   Fixed a bug, where natural key calculations on content performed superfluous database calls.
    [#9409](https://pulp.plan.io/issues/9409)
-   Ensured that with the removal of ACS its' hidden repositories are removed as well.
    [#9417](https://pulp.plan.io/issues/9417)
-   Taught a remote-artifact error path to not assume 'filename' was valid for all content.
    [#9427](https://pulp.plan.io/issues/9427)
-   Taught several more codepaths to order-before-update to avoid deadlocks.
    [#9441](https://pulp.plan.io/issues/9441)

#### Improved Documentation

-   Added an architecture diagram to the components page.
    [#7692](https://pulp.plan.io/issues/7692)
-   Fixed a note saying where to find versioning details.
    [#8859](https://pulp.plan.io/issues/8859)
-   Removed deprecated uses of `MEDIA_ROOT`.
    [#9100](https://pulp.plan.io/issues/9100)
-   Updated ACS docs to use CLI commands.
    [#9251](https://pulp.plan.io/issues/9251)
-   Document Azure storage needs to set `MEDIA_ROOT`
    [#9428](https://pulp.plan.io/issues/9428)
-   Corrected a fact that Redis is needed by the tasking system in the installation section.
    [#9436](https://pulp.plan.io/issues/9436)

#### Removals

-   Removed the legacy tasking system and the `USE_NEW_WORKER_TYPE` setting.
    [#9157](https://pulp.plan.io/issues/9157)
-   Removed OpenAPI browsable API
    [#9322](https://pulp.plan.io/issues/9322)
-   Updated the pulp import creation endpoint to return a task group instead of a task.
    [#9382](https://pulp.plan.io/issues/9382)

#### Misc

-   [#9432](https://pulp.plan.io/issues/9432), [#9443](https://pulp.plan.io/issues/9443)

### Plugin API

#### Features

-   Added optional stage for Alternate Content Source support.
    [#8748](https://pulp.plan.io/issues/8748)
-   `AlternateContentSource` has a new class variable `REMOTE_TYPES` that it will use to validate
    the type of remote set on the ACS.
    [#9375](https://pulp.plan.io/issues/9375)
-   Added `pulpcore.plugin.viewset.TaskGroupResponse` which can be used to return a reference to a
    task group created in a viewset. Added `pulpcore.plugin.serializers.TaskGroupResponseSerializer`
    which can be used to indicate the serializer response format of viewsets that will use
    `TaskGroupResponse` similar to how `AsyncOperationResponseSerializer` is used.
    [#9380](https://pulp.plan.io/issues/9380)
-   Added the `pulpcore.plugin.tasking.general_multi_delete` that deletes a list of model instances
    in a transaction.
    [#9417](https://pulp.plan.io/issues/9417)
-   Exposed tasks `general_create`, `general_create_from_temp_file`, `general_delete`,
    `general_update`, `orphan_cleanup`, and `reclaim_space` in the plugin api.
    [#9418](https://pulp.plan.io/issues/9418)
-   ALLOW_SHARED_TASK_RESOURCES is now enabled by default. If all goes smoothly, this will become permanent and the setting will be removed in the next release.
    [#9474](https://pulp.plan.io/issues/9474)

#### Bugfixes

-   Set the default widget type to `JSONWidget` for `JSONFields` for Model Resources to fix
    django-import-export bug where `django.db.models.JSONFields` weren't properly handled.
    [#9307](https://pulp.plan.io/issues/9307)
-   PATCH/PUT/DELETE calls for the ACS are asynchronous and trigger a task.
    [#9374](https://pulp.plan.io/issues/9374)

#### Removals

-   Removed the deprecated `reserved_resources_record__resource` filter for Task. Use
    `reserved_resources_record__contains` instead.
    [#9157](https://pulp.plan.io/issues/9157)
-   Removed drf-access-policy workaround for condition/condition_expession.
    [#9163](https://pulp.plan.io/issues/9163)
-   Removed ACS path validation. Plugins should now define `validate_paths` on their ACS serializer to
    validate paths.
    [#9340](https://pulp.plan.io/issues/9340)
-   Renamed `TaskGroupResponse` to `TaskGroupOperationResponse` and `TaskGroupResponseSerializer`
    to `TaskGroupOperationResponseSerializer` in order to avoid conflicts with responses from task
    groups endpoints.
    [#9425](https://pulp.plan.io/issues/9425)
-   The resources argument of dispatch() has been removed. exclusive_resources and shared_resources should be used instead.
    [#9477](https://pulp.plan.io/issues/9477)
-   ContentSaver._pre_save() and ContentSaver._post_save() must now be implemented as synchronous functions rather than coroutines.
    [#9478](https://pulp.plan.io/issues/9478)

## 3.15.9 (2022-06-28) {: #3.15.9 }

### REST API

#### Bugfixes

-   Restore multiple-retry logic for PulpImport.
    [#2854](https://github.com/pulp/pulpcore/issues/2854)

#### Misc

-   [#2856](https://github.com/pulp/pulpcore/issues/2856)

### Plugin API

No significant changes.

## 3.15.8 (2022-04-12) {: #3.15.8 }

### REST API

#### Bugfixes

-   Fixed file descriptior leak during upload.
    [#2087](https://github.com/pulp/pulpcore/issues/2087)
-   Fixed a bug in pulpcore-worker, where wakeup and cancel signals could be lost due to a race
    condition.
    [#2144](https://github.com/pulp/pulpcore/issues/2144)
-   Fixed a bug where notifications to workers may go unnoticed. This may lead to idle workers while
    there are tasks waiting.
    [#2506](https://github.com/pulp/pulpcore/issues/2506)
-   Changed the pulpcore-worker to mark abandoned tasks as "failed" instead of "canceled".
    [#2532](https://github.com/pulp/pulpcore/issues/2532)

### Plugin API

No significant changes.

## 3.15.7 (2022-03-25) {: #3.15.7 }

### REST API

#### Bugfixes

-   Reduced memory usage during tasks like sync by holding fewer objects in-memory unnecessarily.
    [#2069](https://github.com/pulp/pulpcore/issues/2069)
-   Fixes duplicate key error `Key (content_artifact_id, remote_id)` when creating `RemoteArtifacts`
    during syncs in pulp_container and possibly other plugins.
    [#2381](https://github.com/pulp/pulpcore/issues/2381)
-   Declared proper dependency on user model in migration 0040.
    [#2403](https://github.com/pulp/pulpcore/issues/2403)
-   Fixed a rare deadlock when sync'ing overlapping content in high-concurrency envs.
    [#2420](https://github.com/pulp/pulpcore/issues/2420)

### Plugin API

#### Bugfixes

-   Adjusted the default size of the queues between pipelines to be 1 instead of 1000. The batchers in
    the stage will still accumulate up to 500 (by default) items so batching is still in-effect there
    where it matters.
    [#2069](https://github.com/pulp/pulpcore/issues/2069)

## 3.15.6 (2022-03-22) {: #3.15.6 }

### REST API

#### Bugfixes

-   Fix a mistake in a previous migration which may have caused improperly encrypted remote fields.
    [#2327](https://github.com/pulp/pulpcore/issues/2327)

### Plugin API

No significant changes.

## 3.15.5 (2022-03-15) {: #3.15.5 }

### REST API

#### Bugfixes

-   Fix delete repository version causing "duplicate key value violates unique constraint" error.
    [#2047](https://github.com/pulp/pulpcore/issues/2047)

-   Fix content summary showing incorrect count after previous version deletion.
    [#2084](https://github.com/pulp/pulpcore/issues/2084)

-   Fixed issue with listing repository versions after deleting previous versions.
    [#2085](https://github.com/pulp/pulpcore/issues/2085)

-   Fixed migration 0064_add_new_style_task_columns to purge extraneous ReservedResource and
    TaskReservedResource entries, which could block sync and publish tasks post-upgrade.

    Also taught the migration to bulk-update the Task changes. In large installations, this
    should have a positive impact on the time it takes to apply the migration.
    [#2101](https://github.com/pulp/pulpcore/issues/2101)

-   Taught PulpImport to retry in the event of a concurrency-collision on ContentArtifact.
    [#2102](https://github.com/pulp/pulpcore/issues/2102)

-   Fixed potential deadlock-window in touch() path.
    [#2157](https://github.com/pulp/pulpcore/issues/2157)

-   Fixed reporting tasks being canceled before being picked up by a worker as canceled instead of
    failed.
    [#2183](https://github.com/pulp/pulpcore/issues/2183)

-   Fixed import/export of repositories with sub-content.

    An example would be the sub-repositories in pulp_rpm
    DistributionTrees.
    [#2192](https://github.com/pulp/pulpcore/issues/2192)

-   touch() now uses standard Django instead of raw-sql to update.
    [#2229](https://github.com/pulp/pulpcore/issues/2229)

-   PulpImporter now unpacks into the task-worker's working directory rather than /tmp. Unpacking
    large files into /tmp could cause the operation to fail, or even cause stability issues for
    Pulp instance, due to running /tmp out of space.
    [#2247](https://github.com/pulp/pulpcore/issues/2247)

-   This fix prevents the lost track of a content removed version when deleting a repository version that deletes a content that is added back in the subsequent version, but deleted again in a later version.
    [#2267](https://github.com/pulp/pulpcore/issues/2267)

-   Added transactions around repository version operations to prevent data loss.
    [#2268](https://github.com/pulp/pulpcore/issues/2268)

-   Fixed bug where the content app would stop working after a brief loss of connection to the database.
    [#2293](https://github.com/pulp/pulpcore/issues/2293)

### Plugin API

No significant changes.

## 3.15.4 (2022-01-28) {: #3.15.4 }

### REST API

#### Bugfixes

-   Fixed downloader retry logic with partially written files.
    [#2078](https://github.com/pulp/pulpcore/issues/2078)
-   Fixed bug where retries of partially downloaded files failed digest and size validation.
    [#2135](https://github.com/pulp/pulpcore/issues/2135)
-   Fixed the calculation of response range headers in streaming answers from the content app.
    [#2147](https://github.com/pulp/pulpcore/issues/2147)
-   Improved messaging around timeout requests.
    [#2169](https://github.com/pulp/pulpcore/issues/2169)

#### Misc

-   [#2094](https://github.com/pulp/pulpcore/issues/2094)

### Plugin API

No significant changes.

## 3.15.3 (2021-11-30) {: #3.15.3 }

### REST API

#### Bugfixes

-   Fixed bug where Artifacts were being downloaded even if they were already saved in Pulp.
    (backported from #9542)
    [#9584](https://pulp.plan.io/issues/9584)

### Plugin API

No significant changes.

## 3.15.2 (2021-09-02) {: #3.15.2 }

### REST API

#### Bugfixes

-   Fixed bug where some Openshift environments could not start workers due to a strange Python runtime
    import issue.
    (backported from #9338)
    [#9342](https://pulp.plan.io/issues/9342)

### Plugin API

No significant changes.

## 3.15.1 (2021-08-31) {: #3.15.1 }

### REST API

#### Bugfixes

-   `RBACContentGuard` assign/remove permission endpoints now properly return 201 instead of 200
    (backported from #9314)
    [#9323](https://pulp.plan.io/issues/9323)

### Plugin API

#### Bugfixes

-   Set the default widget type to `JSONWidget` for `JSONFields` for Model Resources to fix
    django-import-export bug where `django.db.models.JSONFields` weren't properly handled.
    (backported from #9307)
    [#9324](https://pulp.plan.io/issues/9324)

## 3.15.0 (2021-08-26) {: #3.15.0 }

### REST API

#### Features

-   Added encryption in the database for `Remote` fields `username`, `password`,
    `proxy_username`, `proxy_password`, and `client_key`.
    [#8192](https://pulp.plan.io/issues/8192)
-   Added feature to reclaim disk space for a list of repositories.
    [#8459](https://pulp.plan.io/issues/8459)
-   Added `method` field to filesystem exporters to customize how they export files. Users can now
    export files by writing them to the filesystem, using hardlinks, or using symlinks.
    [#8695](https://pulp.plan.io/issues/8695)
-   Changed orphan cleanup task to be a non-blocking task that can be run at any time. Added a
    `ORPHAN_PROTECTION_TIME` setting that can be configured for how long orphan Content and
    Artifacts are kept before becoming candidates for deletion by the orphan cleanup task.
    [#8824](https://pulp.plan.io/issues/8824)
-   Added a `/v3/exporters/core/filesystem/` endpoint for exporting publications or repository
    versions to the filesystem.
    [#8860](https://pulp.plan.io/issues/8860)
-   Added a periodical cleanup to the pulpcore-worker class to keep the Worker table clean.
    [#8931](https://pulp.plan.io/issues/8931)
-   Added new content guard that uses RBAC policies to protect content
    [#8940](https://pulp.plan.io/issues/8940)
-   Added authentication to the content app.
    [#8951](https://pulp.plan.io/issues/8951)
-   A new setting `ALLOW_SHARED_TASK_RESOURCES` was temporarily added to allow plugins to use specific
    resources concurrently, during task execution. It defaults to `False`. It will switch to `True`
    with 3.16 and will eventually be removed.
    [#9148](https://pulp.plan.io/issues/9148)

#### Bugfixes

-   In stages-pipeline and new-version sanity-checks, added full error-info on path-problems.
    [#8133](https://pulp.plan.io/issues/8133)
-   Improved disk usage during the synchronization.
    [#8295](https://pulp.plan.io/issues/8295)
-   Fixed an internal server error that was raised when a user provided invalid parameters while
    assigning new permissions to an object.
    [#8500](https://pulp.plan.io/issues/8500)
-   Fixed a bug, where new tasks were assigned to dead workers.
    [#8779](https://pulp.plan.io/issues/8779)
-   Fixed bug where content app would not respond to `Range` HTTP Header in requests when
    `remote.policy` was either `on_demand` or `streamed`. For example this request is used by
    Anaconda clients.
    [#8865](https://pulp.plan.io/issues/8865)
-   Unpublished content can no longer be accessed from content app if publication based-plugin has
    defined their distributions as publication serving
    [#8870](https://pulp.plan.io/issues/8870)
-   Fixed a bug that caused a serializer to ignore form data for `pulp_labels`.
    [#8954](https://pulp.plan.io/issues/8954)
-   Fixed inability for users to disable RBAC at the settings level by changing the
    `DEFAULT_PERMISSION_CLASSES` like any user configuring a DRF project expects to.
    [#8974](https://pulp.plan.io/issues/8974)
-   Fixed signal handling to properly kill a task when double ctrl-c is used to shut down a worker fast.
    [#8986](https://pulp.plan.io/issues/8986)
-   Added an attempt to cancel a task if a worker needed to abort it on graceful shutdown.
    [#8987](https://pulp.plan.io/issues/8987)
-   Fixed a bug where on-demand downloads would fill up `/var/run/` by not deleting downloaded files.
    [#9000](https://pulp.plan.io/issues/9000)
-   Fixed a regression preventing syncs from <file://> urls.
    [#9003](https://pulp.plan.io/issues/9003)
-   Removed ambiguity from the OpenAPI schema for Exports. The exported_resources are now a list of URI strings.
    [#9008](https://pulp.plan.io/issues/9008)
-   Use proxy auth from Remote config to download content from a remote repository.
    [#9024](https://pulp.plan.io/issues/9024)
-   Fixed the behavior of setting "repository" on a distribution for publication-based plugins.
    [#9039](https://pulp.plan.io/issues/9039)
-   Set Redis connection information in status to null unless it's used. Redis is
    needed for RQ tasking or content caching.
    [#9070](https://pulp.plan.io/issues/9070)
-   Fixed server error when accessing invalid files from content app base directory
    [#9074](https://pulp.plan.io/issues/9074)
-   Fixed improper validation of remotes' URLs.
    [#9080](https://pulp.plan.io/issues/9080)
-   Artifacts are now being properly updated for Content after switching from 'on_demand' to 'immediate'.
    [#9101](https://pulp.plan.io/issues/9101)
-   Made all database queries run serially using a single connection to the database.
    [#9129](https://pulp.plan.io/issues/9129)
-   Move files to artifact storage only when they originate from WORKING_DIRECTORY.
    Copy files from all other sources.
    [#9146](https://pulp.plan.io/issues/9146)
-   Content app now properly sets Content-Type header for artifacts being served from S3
    [#9216](https://pulp.plan.io/issues/9216)
-   Fixed repository sync performance regression introduced in pulpcore 3.14.
    [#9243](https://pulp.plan.io/issues/9243)
-   Stop using insecure hash function blake2s for calculating 64 bit lock identifier from uuid.
    [#9249](https://pulp.plan.io/issues/9249)
-   Fixed another occurence of the HTTP 500 error and connection already closed in the logs while accessing content.
    [#9275](https://pulp.plan.io/issues/9275)

#### Removals

-   Dropped support for Python 3.6 and 3.7. Pulp now supports Python 3.8+.
    [#8855](https://pulp.plan.io/issues/8855)
-   Renamed the `retained_versions` field on repositories to `retain_repo_versions`.
    [#9030](https://pulp.plan.io/issues/9030)

#### Deprecations

-   The traditional tasking system (formerly the default in `pulpcore<=3.13`) is deprecated and
    will be removed in `pulpcore==3.16`. If you are using the `USE_NEW_WORKER_TYPE=False` that
    will no longer give you the traditional tasking system starting with `pulpcore==3.16`.
    [#9159](https://pulp.plan.io/issues/9159)

#### Misc

-   [#5582](https://pulp.plan.io/issues/5582), [#8996](https://pulp.plan.io/issues/8996), [#9010](https://pulp.plan.io/issues/9010), [#9056](https://pulp.plan.io/issues/9056), [#9112](https://pulp.plan.io/issues/9112), [#9120](https://pulp.plan.io/issues/9120), [#9171](https://pulp.plan.io/issues/9171), [#9174](https://pulp.plan.io/issues/9174)

### Plugin API

#### Features

-   Content model has a new boolean class constant `PROTECTED_FROM_RECLAIM` for plugins to enable the
    reclaim disk space feature provided by core.
    [#8459](https://pulp.plan.io/issues/8459)
-   Added endpoints for managing Alternate Content Sources.
    [#8607](https://pulp.plan.io/issues/8607)
-   Orphan cleanup task has a new optional parameter `orphan_protection_time` that decides for how
    long Pulp will hold orphan Content and Artifacts before they become candidates for deletion for this
    particular orphan cleanup task.
    [#8824](https://pulp.plan.io/issues/8824)
-   Distribution model has a new boolean class variable `SERVE_FROM_PUBLICATION` for plugins to declare
    whether their distributions serve from publications or directly from repository versions
    [#8870](https://pulp.plan.io/issues/8870)
-   The settings file switched `DEFAULT_PERMISSION_CLASSES` to use `AccessPolicyFromDB` instead of
    `IsAdminUser` with a fallback to a behavior of `IsAdminUser`. With this feature plugin writers
    no longer need to declare `permission_classes` on their Views or Viewsets to use
    `AccessPolicyFromDB`.
    [#8974](https://pulp.plan.io/issues/8974)
-   Upgraded django from 2.2 to 3.2.
    [#9018](https://pulp.plan.io/issues/9018)
-   pulpcore.plugin.models.ProgressReport now has async interfaces: asave(), aincrease_by(),
    aincrement(), __aenter__(), _aexit__(). Plugins should switch to the async interfaces in their
    Stages.
    pulpcore.plugin.sync.sync_to_async_iterator is a utility method to synchronize the database
    queries generated when a QuerySet is iterated.
    [#9129](https://pulp.plan.io/issues/9129)
-   Added `shared_resources` to the `dispatch` call, so tasks can run concurrently if they need overlapping resources for read only.
    [#9148](https://pulp.plan.io/issues/9148)
-   Added `touch` to Artifact and Content query sets for bulk operation.
    [#9234](https://pulp.plan.io/issues/9234)
-   Added ContentManager to the plugin API - all subclasses of Content that add their own custom manager should have the manager subclass ContentManager.
    [#9269](https://pulp.plan.io/issues/9269)

#### Bugfixes

-   Added kwarg to RemoteArtifactSaver init to allow enabling handling of rare error edge-case.

    fix_mismatched_remote_artifacts=True enables workaround for a failure-scenario that
    (so far) is only encountered by pulp_rpm. Current behavior is the default.
    [#8133](https://pulp.plan.io/issues/8133)

#### Removals

-   Removed the `pulpcore.plugin.viewsets.NewDistributionFilter`. Instead use
    `pulpcore.plugin.viewsets.DistributionFilter`.
    [#8479](https://pulp.plan.io/issues/8479)
-   Removed `FilesystemExporterSerializer` and `PublicationExportSerializer` from the plugin api.
    Filesystem exports are now handled by pulpcore.
    [#8860](https://pulp.plan.io/issues/8860)
-   The `pulpcore.plugin.download.http_giveup` method has been removed from the plugin API. Plugins
    used to have to use this to wrap the `_run` method defined on subclasses of `HttpDownloader`,
    but starting with pulpcore 3.14 the backoff is implemented directly in the `HttpDownloader.run()`
    method which subclasses do not override. Due to `pulpcore` implementing it, it is no longer needed
    or available for plugins to use.
    [#8913](https://pulp.plan.io/issues/8913)

#### Deprecations

-   ContentSaver._pre_save() and ContentSaver._post_save() hooks are no longer coroutines. They should
    be implemented as synchronous functions.
    [#9129](https://pulp.plan.io/issues/9129)
-   Deprecate the compatibility layer for access policies. As of pulpcore 3.16, all plugins should
    properly use the "condition" and "condition_expression" fields in the access policy statements.
    [#9160](https://pulp.plan.io/issues/9160)
-   Deprecate the `resources` argument of `dispatch` in favor of `exclusive_resources` and `shared_resources`.
    [#9257](https://pulp.plan.io/issues/9257)

#### Misc

-   [#8606](https://pulp.plan.io/issues/8606), [#9160](https://pulp.plan.io/issues/9160)

## 3.14.19 (2023-02-09) {: #3.14.19 }

### REST API

#### Bugfixes

-   Fixed another rare deadlock for high-concurrency/overlapping-content syncs.
    [#3111](https://github.com/pulp/pulpcore/issues/3111)
-   Another step on closing the deadlock-window when syncing overlapping content.
    [#3284](https://github.com/pulp/pulpcore/issues/3284)

### Plugin API

No significant changes.

## 3.14.18 (2022-07-14) {: #3.14.18 }

### REST API

#### Bugfixes

-   Started showing errors when users try to export remote artifacts.
    [#2817](https://github.com/pulp/pulpcore/issues/2817)
-   Restore multiple-retry logic for PulpImport.
    [#2854](https://github.com/pulp/pulpcore/issues/2854)
-   Configured aiohttp to avoid rewriting redirect URLs, as some web servers (e.g. Amazon CloudFront) can be tempermental about the encoding of the URL.
    [#2964](https://github.com/pulp/pulpcore/issues/2964)

### Plugin API

No significant changes.

## 3.14.17 (2022-05-09) {: #3.14.17 }

### REST API

#### Bugfixes

-   Loosened the version-restrictions on PulpImport to only require X.Y matching.
    [#2269](https://github.com/pulp/pulpcore/issues/2269)

-   Taught PulpImport to stream imports rather than reading files into memory in one chunk.

    This largely alleviates the memory-pressure that results from importing multiple
    large repositories in parallel.
    [#2307](https://github.com/pulp/pulpcore/issues/2307)

-   Ensure downloader resets file on retry.
    [#2576](https://github.com/pulp/pulpcore/issues/2576)

-   Taught PulpImport to retry more than once in the event of creation-collisions.

    This fixes a rare import-failure during high-concurrency, high-content-overlap imports.
    [#2589](https://github.com/pulp/pulpcore/issues/2589)

### Plugin API

No significant changes.

## 3.14.16 (2022-04-12) {: #3.14.16 }

### REST API

#### Bugfixes

-   Fixed two instances of Pulp not writing to the task worker's temporary directory.
    [#2061](https://github.com/pulp/pulpcore/issues/2061)
-   Fixed a (rare) deadlock around bulk_update() during syncs with overlapping content.
    [#2430](https://github.com/pulp/pulpcore/issues/2430)
-   Fixed a bug where notifications to workers may go unnoticed. This may lead to idle workers while
    there are tasks waiting.
    [#2506](https://github.com/pulp/pulpcore/issues/2506)

### Plugin API

No significant changes.

## 3.14.15 (2022-03-25) {: #3.14.15 }

### REST API

#### Bugfixes

-   Fix delete repository version causing "duplicate key value violates unique constraint" error.
    [#2047](https://github.com/pulp/pulpcore/issues/2047)
-   Reduced memory usage during tasks like sync by holding fewer objects in-memory unnecessarily.
    [#2069](https://github.com/pulp/pulpcore/issues/2069)
-   This fix prevents the lost track of a content removed version when deleting a repository version that deletes a content that is added back in the subsequent version, but deleted again in a later version.
    [#2267](https://github.com/pulp/pulpcore/issues/2267)
-   Fixes duplicate key error `Key (content_artifact_id, remote_id)` when creating `RemoteArtifacts`
    during syncs in pulp_container and possibly other plugins.
    [#2381](https://github.com/pulp/pulpcore/issues/2381)
-   Declared proper dependency on user model in migration 0040.
    [#2403](https://github.com/pulp/pulpcore/issues/2403)
-   Fixed a rare deadlock when sync'ing overlapping content in high-concurrency envs.
    [#2420](https://github.com/pulp/pulpcore/issues/2420)

### Plugin API

#### Bugfixes

-   Adjusted the default size of the queues between pipelines to be 1 instead of 1000. The batchers in
    the stage will still accumulate up to 500 (by default) items so batching is still in-effect there
    where it matters.
    [#2069](https://github.com/pulp/pulpcore/issues/2069)

## 3.14.14 (2022-03-10) {: #3.14.14 }

### REST API

#### Bugfixes

-   Fixed migration 0064_add_new_style_task_columns to purge extraneous ReservedResource and
    TaskReservedResource entries, which could block sync and publish tasks post-upgrade.

    Also taught the migration to bulk-update the Task changes. In large installations, this
    should have a positive impact on the time it takes to apply the migration.
    [#2101](https://github.com/pulp/pulpcore/issues/2101)

### Plugin API

No significant changes.

## 3.14.13 (2022-03-08) {: #3.14.13 }

### REST API

#### Bugfixes

-   Taught PulpImport to retry in the event of a concurrency-collision on ContentArtifact.
    [#2102](https://github.com/pulp/pulpcore/issues/2102)

-   Fixed import/export of repositories with sub-content.

    An example would be the sub-repositories in pulp_rpm
    DistributionTrees.
    [#2192](https://github.com/pulp/pulpcore/issues/2192)

-   touch() now uses standard Django instead of raw-sql to update.
    [#2229](https://github.com/pulp/pulpcore/issues/2229)

-   PulpImporter now unpacks into the task-worker's working directory rather than /tmp. Unpacking
    large files into /tmp could cause the operation to fail, or even cause stability issues for
    Pulp instance, due to running /tmp out of space.
    [#2247](https://github.com/pulp/pulpcore/issues/2247)

## 3.14.12 (2022-02-11) {: #3.14.12 }

### REST API

#### Bugfixes

-   Fixed potential deadlock-window in touch() path.
    [#2157](https://github.com/pulp/pulpcore/issues/2157)
-   Fixed reporting tasks being canceled before being picked up by a worker as canceled instead of
    failed.
    [#2183](https://github.com/pulp/pulpcore/issues/2183)

### Plugin API

No significant changes.

## 3.14.11 (2022-01-27) {: #3.14.11 }

### REST API

#### Bugfixes

-   Fix import and export OOM error.
    [#2072](https://github.com/pulp/pulpcore/issues/2072)
-   Fixed downloader retry logic with partially written files.
    [#2078](https://github.com/pulp/pulpcore/issues/2078)
-   Fix content summary showing incorrect count after previous version deletion.
    [#2084](https://github.com/pulp/pulpcore/issues/2084)
-   Fixed issue with listing repository versions after deleting previous versions.
    [#2085](https://github.com/pulp/pulpcore/issues/2085)
-   Fixed file descriptior leak during upload.
    [#2087](https://github.com/pulp/pulpcore/issues/2087)
-   Added proper logging around certain ways a task could fail.
    [#2093](https://github.com/pulp/pulpcore/issues/2093)
-   Make checksum mismatches a retryable error.
    [#2094](https://github.com/pulp/pulpcore/issues/2094)
-   Fixed an edge case where the first (streamed) response from an repo synced as "on_demand" could be incorrect.
    [#2119](https://github.com/pulp/pulpcore/issues/2119)
-   Fixed bug where retries of partially downloaded files failed digest and size validation.
    [#2135](https://github.com/pulp/pulpcore/issues/2135)
-   Fixed a bug in pulpcore-worker, where wakeup and cancel signals could be lost due to a race
    condition.
    [#2144](https://github.com/pulp/pulpcore/issues/2144)
-   Fixed the calculation of response range headers in streaming answers from the content app.
    [#2147](https://github.com/pulp/pulpcore/issues/2147)

### Plugin API

No significant changes.

## 3.14.10 (2022-01-07) {: #3.14.10 }

### REST API

#### Bugfixes

-   Fixed PulpImport to correctly save relative to MEDIA_ROOT.
    (backported from #9660)
    [#9662](https://pulp.plan.io/issues/9662)

### Plugin API

No significant changes.

## 3.14.9 (2021-11-05) {: #3.14.9 }

### REST API

#### Bugfixes

-   Fixed a bug where the /pulp/content/ page would return a 500 error after the database connection
    was closed due to a network problem or a database restart.
    [#9515](https://pulp.plan.io/issues/9515)
-   Fixed bug where chunked uploads were being assembled in /tmp.
    [#9556](https://pulp.plan.io/issues/9556)

### Plugin API

No significant changes.

## 3.14.8 (2021-10-06) {: #3.14.8 }

### REST API

#### Bugfixes

-   Improved messaging around timeout requests. (Backported from [#9301](https://pulp.plan.io/issues/9301)).
    [#9491](https://pulp.plan.io/issues/9491)

### Plugin API

No significant changes.

## 3.14.7 (2021-09-29) {: #3.14.7 }

### REST API

#### Bugfixes

-   Added a periodical cleanup to the pulpcore-worker class to keep the Worker table clean.
    (backported from #8931)
    [#9462](https://pulp.plan.io/issues/9462)
-   Ordered several ContentStages paths to fix deadlocks in high-concurrency scenarios.
    (backported from #8750)
    [#9379](https://pulp.plan.io/issues/9379)
-   Fixed an issue where on_demand content might not be downloaded properly if the remote URL was changed (even if re-synced).
    (backported from #9395)
    [#9400](https://pulp.plan.io/issues/9400)
-   Fixed the repository modify endpoint performance problems.
    (backported from #9266)
    [#9401](https://pulp.plan.io/issues/9401)
-   Taught a remote-artifact error path to not assume 'filename' was valid for all content.
    (backported from #9427)
    [#9440](https://pulp.plan.io/issues/9440)
-   Taught several more codepaths to order-before-update to avoid deadlocks.
    (backported from #9441)
    [#9445](https://pulp.plan.io/issues/9445)
-   Changed the pulpcore-worker to mark abandoned tasks as "failed" instead of "canceled".
    (backported from #9247)
    [#9453](https://pulp.plan.io/issues/9453)

### Plugin API

No significant changes.

## 3.14.6 (2021-09-02) {: #3.14.6 }

### REST API

#### Bugfixes

-   Stop using insecure hash function blake2s for calculating 64 bit lock identifier from uuid.
    (backported from #9249)
    [#9288](https://pulp.plan.io/issues/9288)
-   Fixed a bug where `pulpcore-content` decompressed data while incorrectly advertising to clients
    it was still compressed via the `Content-Encoding: gzip` header.
    (backported from #9213)
    [#9325](https://pulp.plan.io/issues/9325)
-   Fixed bug where some Openshift environments could not start workers due to a strange Python runtime
    import issue.
    (backported from #9338)
    [#9339](https://pulp.plan.io/issues/9339)

### Plugin API

No significant changes.

## 3.14.5 (2021-08-24) {: #3.14.5 }

### REST API

#### Bugfixes

-   Content app now properly sets Content-Type header for artifacts being served from S3
    (backported from #9216)
    [#9244](https://pulp.plan.io/issues/9244)
-   Artifacts are now being properly updated for Content after switching from 'on_demand' to 'immediate'.
    (backported from #9101)
    [#9261](https://pulp.plan.io/issues/9261)
-   Fixed repository sync performance regression introduced in pulpcore 3.14.
    (backported from #9243)
    [#9264](https://pulp.plan.io/issues/9264)
-   Fixed another occurence of the HTTP 500 error and connection already closed in the logs while accessing content.
    (backported from #9275)
    [#9282](https://pulp.plan.io/issues/9282)

#### Misc

-   [#9265](https://pulp.plan.io/issues/9265)

### Plugin API

#### Misc

-   [#9268](https://pulp.plan.io/issues/9268), [#9273](https://pulp.plan.io/issues/9273)

## 3.14.4 (2021-08-10) {: #3.14.4 }

### REST API

#### Bugfixes

-   Unpublished content can no longer be accessed from content app if publication based-plugin has
    defined their distributions as publication serving
    (backported from #8870)
    [#9126](https://pulp.plan.io/issues/9126)
-   In stages-pipeline and new-version sanity-checks, added full error-info on path-problems.
    (backported from #8133)
    [#9130](https://pulp.plan.io/issues/9130)
-   Move files to artifact storage only when they originate from WORKING_DIRECTORY.
    Copy files from all other sources.
    (backported from #9146)
    [#9202](https://pulp.plan.io/issues/9202)

#### Misc

-   [#9179](https://pulp.plan.io/issues/9179)

### Plugin API

#### Features

-   Distribution model has a new boolean class variable `SERVE_FROM_PUBLICATION` for plugins to declare
    whether their distributions serve from publications or directly from repository versions
    (backported from #8870)
    [#9126](https://pulp.plan.io/issues/9126)

#### Bugfixes

-   Added kwarg to RemoteArtifactSaver init to allow enabling handling of rare error edge-case.

    fix_mismatched_remote_artifacts=True enables workaround for a failure-scenario that
    (so far) is only encountered by pulp_rpm. Current behavior is the default.
    (backported from #8133)
    [#9130](https://pulp.plan.io/issues/9130)

## 3.14.3 (2021-07-23) {: #3.14.3 }

### REST API

#### Bugfixes

-   Fixed improper validation of remotes' URLs.
    (backported from #9080)
    [#9083](https://pulp.plan.io/issues/9083)
-   Set Redis connection information in status to null unless it's used. Redis is
    needed for RQ tasking or content caching.
    (backported from #9070)
    [#9085](https://pulp.plan.io/issues/9085)
-   Fixed signal handling to properly kill a task when double ctrl-c is used to shut down a worker fast.
    (backported from #8986)
    [#9086](https://pulp.plan.io/issues/9086)
-   Improved disk usage during the synchronization.
    (backported from #8295)
    [#9103](https://pulp.plan.io/issues/9103)
-   Fixed a bug where on-demand downloads would fill up `/var/run/` by not deleting downloaded files.
    (backported from #9000)
    [#9110](https://pulp.plan.io/issues/9110)
-   Fixed a bug, where new tasks were assigned to dead workers.
    (backported from #8779)
    [#9116](https://pulp.plan.io/issues/9116)

### Plugin API

No significant changes.

## 3.14.2 (2021-07-13) {: #3.14.2 }

### REST API

#### Bugfixes

-   Fixed bug where content app would not respond to `Range` HTTP Header in requests when
    `remote.policy` was either `on_demand` or `streamed`. For example this request is used by
    Anaconda clients.
    (backported from #8865)
    [#9057](https://pulp.plan.io/issues/9057)
-   Fixed a bug that caused a serializer to ignore form data for `pulp_labels`.
    (backported from #8954)
    [#9058](https://pulp.plan.io/issues/9058)
-   Fixed the behavior of setting "repository" on a distribution for publication-based plugins.
    (backported from #9039)
    [#9059](https://pulp.plan.io/issues/9059)
-   Use proxy auth from Remote config to download content from a remote repository.
    (backported from #9024)
    [#9068](https://pulp.plan.io/issues/9068)
-   Fixed server error when accessing invalid files from content app base directory
    (backported from #9074)
    [#9077](https://pulp.plan.io/issues/9077)

#### Misc

-   [#9063](https://pulp.plan.io/issues/9063)

### Plugin API

No significant changes.

## 3.14.1 (2021-07-07) {: #3.14.1 }

### REST API

#### Bugfixes

-   Fixed a regression preventing syncs from <file://> urls.
    (backported from #9003)
    [#9015](https://pulp.plan.io/issues/9015)
-   Removed ambiguity from the OpenAPI schema for Exports. The exported_resources are now a list of URI strings.
    (backported from #9008)
    [#9025](https://pulp.plan.io/issues/9025)

### Plugin API

No significant changes.

## 3.14.0 (2021-07-01) {: #3.14.0 }

### REST API

#### Features

-   Introduce new worker style. (tech-preview)
    [#8501](https://pulp.plan.io/issues/8501)

-   Added new endpoint `/pulp/api/v3/orphans/cleanup/`. When called with `POST` and no parameters
    it is equivalent to calling `DELETE /pulp/api/v3/orphans/`. Additionally the optional parameter
    `content_hrefs` can be specified and must contain a list of content hrefs. When `content_hrefs`
    is specified, only those content units will be considered to be removed by orphan cleanup.
    [#8658](https://pulp.plan.io/issues/8658)

-   Content app responses are now smartly cached in Redis.
    [#8805](https://pulp.plan.io/issues/8805)

-   Downloads from remote sources will now be retried on more kinds of errors, such as HTTP 500 or socket errors.
    [#8881](https://pulp.plan.io/issues/8881)

-   Add a correlation id filter to the task list endpoint.
    [#8891](https://pulp.plan.io/issues/8891)

-   Where before `download_concurrency` would previously be set to a default value upon creation, it will now be set NULL (but a default value will still be used).
    [#8897](https://pulp.plan.io/issues/8897)

-   Added graceful shutdown to pulpcore workers.
    [#8930](https://pulp.plan.io/issues/8930)

-   Activate the new task worker type by default.

    !!! warning
        If you intend to stick with the old tasking system, you should configure the
        `USE_NEW_WORKER_TYPE` setting to false before upgrade

    [#8948](https://pulp.plan.io/issues/8948)

#### Bugfixes

-   Fixed race condition where a task could clean up reserved resources shared with another task.
    [#8637](https://pulp.plan.io/issues/8637)

-   Altered redirect URL escaping, preventing invalidation of signed URLs for artifacts using cloud storage.
    [#8670](https://pulp.plan.io/issues/8670)

-   Add an update row lock on in task dispatching for `ReservedResource` to prevent a race where an
    object was deleted that was supposed to be reused. This prevents a condition where tasks ended up in
    waiting state forever.
    [#8708](https://pulp.plan.io/issues/8708)

-   Retry downloads on `ClientConnectorSSLError`, which appears to be spuriously returned by some CDNs.
    [#8867](https://pulp.plan.io/issues/8867)

-   Fixed OpenAPI schema tag generation for resources that are nested more than 2 levels.

    This change is most evident in client libraries generated from the OpenAPI schema.

    Prior to this change, the API client for a resource located at
    [/api/v3/pulp/exporters/core/pulp/<uuid>/exports/]{.title-ref} was named ExportersCoreExportsApi.

    After this change, the API client for a resource located at
    [/api/v3/pulp/exporters/core/pulp/<uuid>/exports/]{.title-ref} is named ExportersPulpExportsApi.
    [#8868](https://pulp.plan.io/issues/8868)

-   Fixed request schema for `/pulp/api/v3/repair/`, which did identify any arguments. This also fixes
    the bindings.
    [#8869](https://pulp.plan.io/issues/8869)

-   Update default access policies in the database if they were unmodified by the administrator.
    [#8883](https://pulp.plan.io/issues/8883)

-   Pinning to psycopg2 < 2.9 as psycopg 2.9 doesn't work with django 2.2. More info at
    <https://github.com/django/django/commit/837ffcfa681d0f65f444d881ee3d69aec23770be>.
    [#8926](https://pulp.plan.io/issues/8926)

-   Fixed bug where artifacts and content were not always saved in Pulp with each
    on_demand request serviced by content app.
    [#8980](https://pulp.plan.io/issues/8980)

#### Improved Documentation

-   Fixed a number of link-problems in the installation/ section of docs.
    [#6837](https://pulp.plan.io/issues/6837)
-   Added a troubleshooting section to the docs explaining how to find stuck tasks.
    [#8774](https://pulp.plan.io/issues/8774)
-   Moved existing basic auth docs to a new top-level section named Authentication.
    [#8800](https://pulp.plan.io/issues/8800)
-   Moved `Webserver Authentication` docs under the top-level `Authentication` section.
    [#8801](https://pulp.plan.io/issues/8801)
-   Provide instructions to use Keycloak authenication using Python Social Aauth
    [#8803](https://pulp.plan.io/issues/8803)
-   Updated the docs.pulpproject.org to provide some immediate direction for better user orientation.
    [#8946](https://pulp.plan.io/issues/8946)
-   Separated hardware and Filesystem information from the Architecture section and added them to the Installation section.
    [#8947](https://pulp.plan.io/issues/8947)
-   Added sub-headings and simplified language of Pulp concept section.
    [#8949](https://pulp.plan.io/issues/8949)

#### Deprecations

-   Deprecated the `DELETE /pulp/api/v3/orphans/` call. Instead use the
    `POST /pulp/api/v3/orphans/cleanup/` call.
    [#8876](https://pulp.plan.io/issues/8876)

#### Misc

-   [#8821](https://pulp.plan.io/issues/8821), [#8827](https://pulp.plan.io/issues/8827), [#8975](https://pulp.plan.io/issues/8975)

### Plugin API

#### Features

-   Added the `pulpcore.plugin.viewsets.DistributionFilter`. This should be used instead of
    `pulpcore.plugin.viewsets.NewDistributionFilter`.
    [#8480](https://pulp.plan.io/issues/8480)
-   Added `user_hidden` field to `Repository` to hide repositories from users.
    [#8487](https://pulp.plan.io/issues/8487)
-   Added a `timestamp_of_interest` field to Content and Artifacts. This field can be updated by
    calling a new method `touch()` on Artifacts and Content. Plugin writers should call this method
    whenever they deal with Content or Artifacts. For example, this includes places where Content is
    uploaded or added to Repository Versions. This will prevent Content and Artifacts from being cleaned
    up when orphan cleanup becomes a non-blocking task in pulpcore 3.15.
    [#8823](https://pulp.plan.io/issues/8823)
-   Exposed `AsyncUpdateMixin` through `pulpcore.plugin.viewsets`.
    [#8844](https://pulp.plan.io/issues/8844)
-   Added a field `DEFAULT_MAX_RETRIES` to the `Remote` base class - plugin writers can override the default number of retries attempted when file downloads failed for each type of remote. The default value is 3.
    [#8881](https://pulp.plan.io/issues/8881)
-   Added a field `DEFAULT_DOWNLOAD_CONCURRENCY` to the Remote base class - plugin writers can override the number of concurrent downloads for each type of remote. The default value is 10.
    [#8897](https://pulp.plan.io/issues/8897)

#### Bugfixes

-   Fixed OpenAPI schema tag generation for resources that are nested more than 2 levels.

    This change is most evident in client libraries generated from the OpenAPI schema.

    Prior to this change, the API client for a resource located at
    [/api/v3/pulp/exporters/core/pulp/<uuid>/exports/]{.title-ref} was named ExportersCoreExportsApi.

    After this change, the API client for a resource located at
    [/api/v3/pulp/exporters/core/pulp/<uuid>/exports/]{.title-ref} is named ExportersPulpExportsApi.
    [#8868](https://pulp.plan.io/issues/8868)

#### Removals

-   The usage of non-JSON serializable types of `args` and `kwargs` to tasks is no longer supported.
    `uuid.UUID` objects however will silently be converted to `str`.
    [#8501](https://pulp.plan.io/issues/8501)
-   Removed the `versions_containing_content` method from the
    pulpcore.plugin.models.RepositoryVersion object. Instead use
    RepositoryVersion.objects.with_content().
    #8729 <<https://pulp.plan.io/issues/8729>>`__
-   Removed pulpcore.plugin.stages.ContentUnassociation from the plugin API.
    [#8827](https://pulp.plan.io/issues/8827)

#### Deprecations

-   The `pulpcore.plugin.viewsets.NewDistributionFilter` is deprecated and will be removed from a
    future release. Instead use `pulpcore.plugin.viewsets.DistributionFilter`.
    [#8480](https://pulp.plan.io/issues/8480)
-   Deprecate the use of the reserved_resources_record__resource in favor of reserved_resources_record__contains.
    Tentative removal release is pulpcore==3.15.
    [#8501](https://pulp.plan.io/issues/8501)
-   Plugin writers who create custom downloaders by subclassing `HttpDownloader` no longer need to wrap the `_run()` method with a `backoff` decorator. Consequntly the `http_giveup` handler the sake of the `backoff` decorator is no longer needed and has been deprecated. It is likely to be removed in pulpcore 3.15.
    [#8881](https://pulp.plan.io/issues/8881)

## 3.13.0 (2021-05-25) {: #3.13.0 }

### REST API

#### Features

-   Added two views to identify content which belongs to repository_version or publication.
    [#4832](https://pulp.plan.io/issues/4832)
-   Added repository field to repository version endpoints.
    [#6068](https://pulp.plan.io/issues/6068)
-   Added ability for users to limit how many repo versions Pulp retains by setting
    `retained_versions` on repository.
    [#8368](https://pulp.plan.io/issues/8368)
-   Added the `add-signing-service` management command.
    Notice that it is still in tech-preview and can change without further notice.
    [#8609](https://pulp.plan.io/issues/8609)
-   Added a `pulpcore-worker` entrypoint to simplify and unify the worker command.
    [#8721](https://pulp.plan.io/issues/8721)
-   Content app auto-distributes latest publication if distribution's `repository` field is set
    [#8760](https://pulp.plan.io/issues/8760)

#### Bugfixes

-   Fixed cleanup of UploadChunks when their corresponding Upload is deleted.
    [#7316](https://pulp.plan.io/issues/7316)
-   Fixed an issue that caused the request's context to be ignored in the serializers.
    [#8396](https://pulp.plan.io/issues/8396)
-   Fixed missing `REDIS_SSL` parameter in RQ config.
    [#8525](https://pulp.plan.io/issues/8525)
-   Fixed bug where using forms submissions to create resources (e.g. `Remotes`) raised exception
    about the format of `pulp_labels`.
    [#8541](https://pulp.plan.io/issues/8541)
-   Fixed bug where publications sometimes fail with the error '[Errno 39] Directory not empty'.
    [#8595](https://pulp.plan.io/issues/8595)
-   Handled a tasking race condition where cleaning up resource reservations sometimes raised an IntegrityError.
    [#8603](https://pulp.plan.io/issues/8603)
-   Fixed on-demand sync/migration of repositories that don't have sha256 checksums.
    [#8625](https://pulp.plan.io/issues/8625)
-   Taught pulp-export to validate chunk-size to be <= 1TB.
    [#8628](https://pulp.plan.io/issues/8628)
-   Addressed a race-condition in PulpImport that could fail with unique-constraint violations.
    [#8633](https://pulp.plan.io/issues/8633)
-   Content app now properly lists all distributions present
    [#8636](https://pulp.plan.io/issues/8636)
-   Fixed ability to specify custom headers on a Remote.
    [#8689](https://pulp.plan.io/issues/8689)
-   Fixed compatibility with Django 2.2 LTS. Pulp now requires Django~=2.2.23
    [#8691](https://pulp.plan.io/issues/8691)
-   Skip allowed content checks on collectstatic
    [#8711](https://pulp.plan.io/issues/8711)
-   Fixed a bug in the retained versions code where content wasn't being properly moved to newer repo
    versions when old versions were cleaned up.
    [#8793](https://pulp.plan.io/issues/8793)

#### Improved Documentation

-   Added docs on how to list the effective settings using `dynaconf list`.
    [#6235](https://pulp.plan.io/issues/6235)
-   Added anti-instructions, that users should never run pulpcore-manager makemigrations[, but file a bug instead.
    ]{.title-ref}#6703 <<https://pulp.plan.io/issues/6703>>`__
-   Clarified repositories are typed in concepts page
    [#6990](https://pulp.plan.io/issues/6990)
-   Added UTF-8 character set encoding as a requirement for PostgreSQL
    [#7019](https://pulp.plan.io/issues/7019)
-   Fixed typo s/comtrol/control
    [#7715](https://pulp.plan.io/issues/7715)
-   Removed the PUP references from the docs.
    [#7747](https://pulp.plan.io/issues/7747)
-   Updated plugin writers' guide to not use settings directly in the model fields.
    [#7776](https://pulp.plan.io/issues/7776)
-   Make the reference to the Pulp installer documentation more explicit.
    [#8477](https://pulp.plan.io/issues/8477)
-   Removed example Ansible installer playbook from the pulpcore docs so that Pulp users would have a single source of truth in the pulp-installer docs.
    [#8550](https://pulp.plan.io/issues/8550)
-   Added security disclosures ref to homepage
    [#8584](https://pulp.plan.io/issues/8584)
-   Add sequential steps for storage docs
    [#8597](https://pulp.plan.io/issues/8597)
-   Updated signing service workflow. Removed old deprecation warning.
    [#8609](https://pulp.plan.io/issues/8609)
-   Add an example of how to specify an array value and a dict key in the auth methods section
    [#8668](https://pulp.plan.io/issues/8668)
-   Fixed docs build errors reported by autodoc.
    [#8784](https://pulp.plan.io/issues/8784)

#### Misc

-   [#8524](https://pulp.plan.io/issues/8524), [#8656](https://pulp.plan.io/issues/8656), [#8761](https://pulp.plan.io/issues/8761)

### Plugin API

#### Features

-   Undeprecated the use of `uuid.UUID` in task arguments. With this, primary keys do not need to be explicitely cast to `str`.
    [#8723](https://pulp.plan.io/issues/8723)

#### Bugfixes

-   Added RepositoryVersionRelatedField to the plugin API.
    [#8578](https://pulp.plan.io/issues/8578)
-   Fixed auto-distribute w/ retained_versions tests
    [#8792](https://pulp.plan.io/issues/8792)

#### Removals

-   Removed deprecated `pulpcore.plugin.tasking.WorkingDirectory`.
    [#8354](https://pulp.plan.io/issues/8354)
-   Removed `BaseDistribution`, `PublicationDistribution`, and `RepositoryVersionDistribution`
    models. Removed `BaseDistributionSerializer`, `PublicationDistributionSerializer`, and
    `RepositoryVersionDistributionSerializer` serializers. Removed `BaseDistributionViewSet` and
    `DistributionFilter`.
    [#8386](https://pulp.plan.io/issues/8386)
-   Removed `pulpcore.plugin.tasking.enqueue_with_reservation`.
    [#8497](https://pulp.plan.io/issues/8497)

#### Deprecations

-   RepositoryVersion method "versions_containing_content" is deprecated now.
    [#4832](https://pulp.plan.io/issues/4832)
-   The usage of the pulpcore.plugin.stages.ContentUnassociation stage has been deprecated. A future update will remove it from the plugin API.
    [#8635](https://pulp.plan.io/issues/8635)

## 3.12.2 (2021-04-29) {: #3.12.2 }

### REST API

#### Bugfixes

-   Backported a fix for on-demand sync/migration of repositories that don't have sha256 checksums.
    [#8652](https://pulp.plan.io/issues/8652)

### Plugin API

No significant changes.

## 3.12.1 (2021-04-20) {: #3.12.1 }

### REST API

No significant changes.

### Plugin API

#### Bugfixes

-   Added RepositoryVersionRelatedField to the plugin API.
    [#8580](https://pulp.plan.io/issues/8580)

## 3.12.0 (2021-04-08) {: #3.12.0 }

### REST API

#### Features

-   Add support for automatic publishing and distributing.
    [#7626](https://pulp.plan.io/issues/7626)
-   Add a warning at startup time if there are remote artifacts with checksums but no allowed checksums.
    [#7985](https://pulp.plan.io/issues/7985)
-   Added support in content app for properly handling unknown or forbidden digest errors.
    [#7989](https://pulp.plan.io/issues/7989)
-   Added sync check that raises error when only forbidden checksums are found for on-demand content.
    [#8423](https://pulp.plan.io/issues/8423)
-   Added ability for users to delete repo version 0 as long as they still have at least one repo
    version for their repo.
    [#8454](https://pulp.plan.io/issues/8454)

#### Bugfixes

-   Added asynchronous tasking to the Update and Delete endpoints of PulpExporter to provide proper locking on resources.
    [#7438](https://pulp.plan.io/issues/7438)
-   Fixed a scenario where canceled tasks could be marked failed.
    [#7980](https://pulp.plan.io/issues/7980)
-   Taught `PulpImport` correct way to find and import `RepositoryVersions`. Previous
    implementation only worked for `RepositoryVersions` that were the 'current' version
    of the exported `Repository`.
    [#8116](https://pulp.plan.io/issues/8116)
-   Fixed a race condition that sometimes surfaced during handling of reserved resources.
    [#8352](https://pulp.plan.io/issues/8352)
-   Made digest and size sync erros more helpful by logging url of the requested files.
    [#8357](https://pulp.plan.io/issues/8357)
-   Fixed artifact-stage to handle an edge-case when multiple multi-artifact content, from different remotes, is in a single batch.
    [#8377](https://pulp.plan.io/issues/8377)
-   Fixed Azure artifacts download.
    [#8427](https://pulp.plan.io/issues/8427)
-   Fixed bug during sync where a unique constraint violation for `Content` would raise an "X matching
    query does not exist" error.
    [#8430](https://pulp.plan.io/issues/8430)
-   Fix artifact checksum check to not check on-demand content.
    [#8445](https://pulp.plan.io/issues/8445)
-   Fixed a bug where the existence of PublishedMetadata caused `LookupError` when querying `/pulp/api/v3/content/`
    [#8447](https://pulp.plan.io/issues/8447)
-   Distributions are now viewable again at the base url of the content app
    [#8475](https://pulp.plan.io/issues/8475)
-   Fixed a path in artifact_stages that could lead to sync-failures in pulp_container.
    [#8489](https://pulp.plan.io/issues/8489)

#### Improved Documentation

-   Update docs with guide how to change 'ALLOWED_CONTENT_CHECKSUMS' setting using 'pulpcore-manager handle-artifact-checksums --report' if needed.
    [#8325](https://pulp.plan.io/issues/8325)

#### Removals

-   The Update and Delete endpoints of Exporters changed to now return 202 with tasks.
    [#7438](https://pulp.plan.io/issues/7438)
-   Deprecation warnings are now being logged by default if the log level includes WARNING. This can be
    disabled by adjusting the log level of `pulpcore.deprecation`. See the deprecation docs for more
    information.
    [#8499](https://pulp.plan.io/issues/8499)

#### Misc

-   [#8450](https://pulp.plan.io/issues/8450)

### Plugin API

#### Features

-   Added a new callback method to `Repository` named `on_new_version()`, which runs when a new repository version has been created. This can be used for e.g. automatically publishing or distributing a new repository version after it has been created.
    [#7626](https://pulp.plan.io/issues/7626)

-   Added url as optional argument to `DigestValidationError` and `SizeValidationError` exceptions to log urls in the exception message.
    [#8357](https://pulp.plan.io/issues/8357)

-   Added the following new objects related to a new `Distribution` MasterModel:

    * `pulpcore.plugin.models.Distribution` - A new MasterModel `Distribution` which replaces the
    `pulpcore.plugin.models.BaseDistribution`. This now contains the `repository`,
    `repository_version`, and `publication` fields on the MasterModel instead of on the detail
    models as was done with `pulpcore.plugin.models.BaseDistribution`.

    * `pulpcore.plugin.serializer.DistributionSerializer` - A serializer plugin writers should use
    with the new `pulpcore.plugin.models.Distribution`.

    * `pulpcore.plugin.viewset.DistributionViewSet` - The viewset that replaces the deprecated
    `pulpcore.plugin.viewset.BaseDistributionViewSet`.

    * `pulpcore.plugin.viewset.NewDistributionFilter` - The filter that pairs with the
    `Distribution` model.
    [#8384](https://pulp.plan.io/issues/8384)

-   Added checksum type enforcement to `pulpcore.plugin.download.BaseDownloader`.
    [#8435](https://pulp.plan.io/issues/8435)

-   Adds the `pulpcore.plugin.tasking.dispatch` interface which replaces the
    `pulpcore.plugin.tasking.enqueue_with_reservation` interface. It is the same except:

    -   It returns a `pulpcore.plugin.models.Task` instead of an RQ object
    -   It does not support the `options` keyword argument

    Additionally the `pulpcore.plugin.viewsets.OperationPostponedResponse` was updated to support both
    the `dispatch` and `enqueue_with_reservation` interfaces.
    [#8496](https://pulp.plan.io/issues/8496)

#### Bugfixes

-   Allow plugins to unset the `queryset_filtering_required_permission` attribute in `NamedModelViewSet`.
    [#8438](https://pulp.plan.io/issues/8438)

#### Removals

-   Removed checksum type filtering from `pulpcore.plugin.models.Remote.get_downloader` and `pulpcore.plugin.stages.DeclarativeArtifact.download`.
    [#8435](https://pulp.plan.io/issues/8435)

#### Deprecations

-   The following objects were deprecated:

    * `pulpcore.plugin.models.BaseDistribution` -- Instead use
    `pulpcore.plugin.models.Distribution`.

    * `pulpcore.plugin.viewset.BaseDistributionViewSet` -- Instead use
    `pulpcore.plugin.viewset.DistributionViewSet`.

    * `pulpcore.plugin.serializer.BaseDistributionSerializer` -- Instead use
    `pulpcore.plugin.serializer.DistributionSerializer`.

    * `pulpcore.plugin.serializer.PublicationDistributionSerializer` -- Instead use define the
    `publication` field directly on your detail distribution object. See the docstring for
    `pulpcore.plugin.serializer.DistributionSerializer` for an example.

    * `pulpcore.plugin.serializer.RepositoryVersionDistributionSerializer` -- Instead use define the
    `repository_version` field directly on your detail distribution object. See the docstring for
    `pulpcore.plugin.serializer.DistributionSerializer` for an example.

    * `pulpcore.plugin.viewset.DistributionFilter` -- Instead use
    `pulpcore.plugin.viewset.NewDistributionFilter`.

    !!! note
        You will have to define a migration to move your data from
        `pulpcore.plugin.models.BaseDistribution` to `pulpcore.plugin.models.Distribution`. See the
        pulp_file migration 0009 as a reference example.

    [#8385](https://pulp.plan.io/issues/8385)

-   Deprecated the `pulpcore.plugin.tasking.enqueue_with_reservation`. Instead use the
    `pulpcore.plugin.tasking.dispatch` interface.
    [#8496](https://pulp.plan.io/issues/8496)

-   The usage of non-JSON serializable types of `args` and `kwargs` to tasks is deprecated. Future
    releases of pulpcore may discontinue accepting complex argument types. Note, UUID objects are not
    JSON serializable. A deprecated warning is logged if a non-JSON serializable is used.
    [#8505](https://pulp.plan.io/issues/8505)

## 3.11.2 (2021-05-25) {: #3.11.2 }

### REST API

#### Bugfixes

-   Skip allowed content checks on collectstatic
    (backported from #8711)
    [#8712](https://pulp.plan.io/issues/8712)
-   Fixed cleanup of UploadChunks when their corresponding Upload is deleted.
    (backported from #7316)
    [#8757](https://pulp.plan.io/issues/8757)
-   Fixed compatibility with Django 2.2 LTS. Pulp now requires Django~=2.2.23
    (backported from #8691)
    [#8758](https://pulp.plan.io/issues/8758)
-   Pinned click~=7.1.2 to ensure RQ is compatible with it.
    [#8767](https://pulp.plan.io/issues/8767)

### Plugin API

No significant changes.

## 3.11.1 (2021-04-29) {: #3.11.1 }

### REST API

#### Bugfixes

-   Fixed a race condition that sometimes surfaced during handling of reserved resources.
    [#8632](https://pulp.plan.io/issues/8632)
-   Handled a tasking race condition where cleaning up resource reservations sometimes raised an IntegrityError.
    [#8648](https://pulp.plan.io/issues/8648)

### Plugin API

#### Bugfixes

-   Allow plugins to unset the `queryset_filtering_required_permission` attribute in `NamedModelViewSet`.
    [#8444](https://pulp.plan.io/issues/8444)

## 3.11.0 (2021-03-15) {: #3.11.0 }

### REST API

#### Features

-   Raise error when syncing content with a checksum not included in `ALLOWED_CONTENT_CHECKSUMS`.
    [#7854](https://pulp.plan.io/issues/7854)
-   User can evaluate how many content units are affected with checksum type change with 'pulpcore-manager handle-artifact-checksums --report'.
    [#7986](https://pulp.plan.io/issues/7986)
-   The fields `proxy_username` and `proxy_password` have been added to remotes.
    Credentials can no longer be specified as part of the `proxy_url`.
    A data migration will move the proxy auth information on existing remotes to the new fields.
    [#8167](https://pulp.plan.io/issues/8167)
-   Added the `WORKER_TTL` setting, that specifies the interval a worker is considered missing after its last heartbeat.
    [#8291](https://pulp.plan.io/issues/8291)
-   Due to the removal of `md5` and `sha1` from the `ALLOWED_CONTENT_CHECKSUMS` setting, every
    system that had any Artifacts synced in in prior to 3.11 will have to run the `pulpcore-manager handle-content-checksums` command. A data migration is provided with 3.11 that will run this
    automatically as part of the `pulpcore-manager migrate` command all upgrades must run anyway.
    [#8322](https://pulp.plan.io/issues/8322)

#### Bugfixes

-   Fixed a bug experienced by the migration plugin where all content objects are assumed to have a
    remote associated with them.
    [#7876](https://pulp.plan.io/issues/7876)

-   Restored inadvertently-changed content-guards API to its correct endpoint.

    In the process of adding generic list-endpoints, the /pulp/api/v3/contentguards
    API was inadvertently rehomed to /pulp/api/v3/content_guards. This change restores
    it to its published value.
    [#8283](https://pulp.plan.io/issues/8283)

-   Added headers field to the list of fields in the `RemoteSerializer` base class and marked it optional to make it accessible via the REST api.
    [#8330](https://pulp.plan.io/issues/8330)

-   Fixed AccessPolicy AttributeError.
    [#8395](https://pulp.plan.io/issues/8395)

#### Improved Documentation

-   Removed correlation id feature from tech preview.
    [#7927](https://pulp.plan.io/issues/7927)

-   Removed 'tech preview' label from `handle-artifact-checksums` command.

    `handle-artifact-checksums` is now a fully-supported part of Pulp3.
    [#7928](https://pulp.plan.io/issues/7928)

-   Added a warning banner to the `ALLOWED_CONTENT_CHECKSUMS` setting section indicating the setting
    is not fully enforcing in `pulpcore` code and various plugins.
    [#8342](https://pulp.plan.io/issues/8342)

#### Removals

-   The `component` field of the `versions` section of the status API `` `/pulp/api/v3/status/ `` now
    lists the Django app name, not the Python package name. Similarly the OpenAPI schema at
    `/pulp/api/v3` does also.
    [#8198](https://pulp.plan.io/issues/8198)
-   Removed sensitive fields `username`, `password`, and `client_key` from Remote responses. These
    fields can still be set and updated but will no longer be readable.
    [#8202](https://pulp.plan.io/issues/8202)
-   Adjusted the `ALLOWED_CONTENT_CHECKSUMS` setting to remove `md5` and `sha1` since they are
    insecure. Now, by default, the `ALLOWED_CONTENT_CHECKSUMS` contain `sha224`, `sha256`,
    `sha384`, and `sha512`.
    [#8246](https://pulp.plan.io/issues/8246)

#### Misc

-   [#7797](https://pulp.plan.io/issues/7797), [#7984](https://pulp.plan.io/issues/7984), [#8315](https://pulp.plan.io/issues/8315)

### Plugin API

#### Features

-   Allow developers to use more than one WorkingDirectory() within a task, including nested calls. Tasks will also now use a temporary working directory by default.
    [#7815](https://pulp.plan.io/issues/7815)
-   Added the `pulpcore.app.pulp_hashlib` module which provides the `new` function and ensures only
    allowed hashers listed in `ALLOWED_CONTENT_CHECKSUMS` can be instantiated. Plugin writers should
    use this instead of `hashlib.new` to generate checksum hashers.
    [#7984](https://pulp.plan.io/issues/7984)
-   Add a `get_content` method to `pulpcore.plugin.models.RepositoryVersion` that accepts a
    queryset and returns a list of content in that repository using the given queryset.
    This allows for specific content type to be returned by executing
    `repo_version.get_content(content_qs=MyContentType.objects)`.
    [#8375](https://pulp.plan.io/issues/8375)

#### Improved Documentation

-   Added docs identifying plugin writers to use the `pulpcore.app.pulp_hashlib` module which provides
    the `new` function and ensures only allowed hashers can be instantiated. This should be used in
    place of `hashlib.new`.
    [#7984](https://pulp.plan.io/issues/7984)
-   The use of `tempdir.TemporaryDirectory` in tasks has been documented.
    [#8231](https://pulp.plan.io/issues/8231)

#### Removals

-   Adjusted the `ALLOWED_CONTENT_CHECKSUMS` setting to remove `md5` and `sha1` since they are
    insecure. Now, by default, the `ALLOWED_CONTENT_CHECKSUMS` contain `sha224`, `sha256`,
    `sha384`, and `sha512`.
    [#8246](https://pulp.plan.io/issues/8246)
-   Removed unused get_plugin_storage_path method.
    [#8343](https://pulp.plan.io/issues/8343)
-   It is not longer possible to address AccessPolicy via the viewset's classname. Viewset's urlpattern should be used instead.
    [#8397](https://pulp.plan.io/issues/8397)
-   Removed deprecated key field returned by the signing service.
    Plugin writers must now refer directly to the public_key field on the signing service object.
    [#8398](https://pulp.plan.io/issues/8398)

#### Deprecations

-   `pulpcore.plugin.tasking.WorkingDirectory` has been deprecated.
    [#8231](https://pulp.plan.io/issues/8231)

## 3.10.0 (2021-02-04) {: #3.10.0 }

### REST API

#### Features

-   Change the default deployment layout

    This changes the default deployment layout. The main change is that MEDIA_ROOT gets its own
    directory. This allows limiting the file permissions in a shared Pulp 2 + Pulp 3 deployment and the
    SELinux file contexts. Another benefit is compatibility with django_extensions' unreferenced_files
    command which lists all files in MEDIA_ROOT that are not in the database.

    Other paths are kept on the same absolute paths. The documentation is updated to show the latest
    best practices.
    [#7178](https://pulp.plan.io/issues/7178)

-   Added general endpoints to list `Content`, `ContentGuards`, and `Repositories`.
    [#7204](https://pulp.plan.io/issues/7204)

-   Added /importers/core/pulp/import-check/ to validate import-parameters.
    [#7549](https://pulp.plan.io/issues/7549)

-   Added a new field called public_key to SigningService. This field preserves the value of the public
    key. In addition to that, the field fingerprint was introduced as well. This field identifies the
    public key.
    [#7700](https://pulp.plan.io/issues/7700)

-   Added possibility to filter users and groups by various fields.
    [#7975](https://pulp.plan.io/issues/7975)

-   Added pulp_labels to allow users to add key/value data to objects.
    [#8065](https://pulp.plan.io/issues/8065)

-   Added `pulp_label_select` filter to allow users to filter by labels.
    [#8067](https://pulp.plan.io/issues/8067)

-   Added optional headers field to the aiohttp ClientSession.
    [#8083](https://pulp.plan.io/issues/8083)

-   Allow querying names on the api using name__icontains, name__contains and name__startswith query parameters.
    [#8094](https://pulp.plan.io/issues/8094)

-   Added RBAC to the endpoint for managing groups.
    [#8159](https://pulp.plan.io/issues/8159)

-   Added RBAC to the endpoint for managing group users.
    [#8160](https://pulp.plan.io/issues/8160)

-   Added the `AccessPolicy.customized` field which if `True` indicates a user has modified the
    default AccessPolicy.
    [#8182](https://pulp.plan.io/issues/8182)

-   Added filtering for access policies.
    [#8189](https://pulp.plan.io/issues/8189)

-   As an authenticated user I can create and view artifacts.
    [#8193](https://pulp.plan.io/issues/8193)

#### Bugfixes

-   Fixed bug where duplicate artifact error message was nondeterministic in displaying different error
    messages with different checksum types. Also, updated duplicate artifact error message to be more
    descriptive.
    [#3387](https://pulp.plan.io/issues/3387)
-   Fixed Pulp import/export bug that occurs when sha384 or sha512 is not in `ALLOWED_CONTENT_CHECKSUMS`.
    [#7836](https://pulp.plan.io/issues/7836)
-   X-CSRFToken is not sent through ajax requests (PUT) in api.html. Fixed by setting the right value in
    the JS code.
    [#7888](https://pulp.plan.io/issues/7888)
-   Provide a mechanism to automatically resolve issues and prevent deadlocks when Redis experiences data loss (such as a restart).
    [#7912](https://pulp.plan.io/issues/7912)
-   Silence unnecessary log messages from django_guid which were spamming up the logs.
    [#7982](https://pulp.plan.io/issues/7982)
-   Changed the default permission class to `IsAdminUser` to protect endpoints not yet guarded by an access policy from users without permission.
    [#8018](https://pulp.plan.io/issues/8018)
-   Fixed apidoc bug, where model and object permissions on groups overlapped.
    [#8033](https://pulp.plan.io/issues/8033)
-   Fixed the viewset_name used by access policy for the cases when parent_viewset is involved.
    [#8152](https://pulp.plan.io/issues/8152)
-   Made the viewset_name property of access policies read only.
    [#8185](https://pulp.plan.io/issues/8185)

#### Improved Documentation

-   Added a description of the common filesystem layout in the deployment section.
    [#7750](https://pulp.plan.io/issues/7750)
-   Updated the reference to the new location of pulplift at the installer repository in the development section.
    [#7878](https://pulp.plan.io/issues/7878)
-   Add links to plugin docs into docs.pulpproject.org.
    [#8131](https://pulp.plan.io/issues/8131)
-   Added documentation for labels.
    [#8157](https://pulp.plan.io/issues/8157)

#### Misc

-   [#8203](https://pulp.plan.io/issues/8203)

### Plugin API

#### Features

-   Add `rate_limit` option to `Remote`
    [#7965](https://pulp.plan.io/issues/7965)
-   Made DistributionFilter accessible to plugin writers.
    [#8059](https://pulp.plan.io/issues/8059)
-   Adding `Label` and `LabelSerializer` to the plugin api.
    [#8065](https://pulp.plan.io/issues/8065)
-   Added `LabelSelectFilter` to filter resources by labels.
    [#8067](https://pulp.plan.io/issues/8067)
-   Added ReadOnlyRepositoryViewset to the plugin API.
    [#8103](https://pulp.plan.io/issues/8103)
-   Added NAME_FILTER_OPTIONS to the plugin API to gain more consistency across plugins when filter by name or similar CharFields.
    [#8117](https://pulp.plan.io/issues/8117)
-   Added has_repo_attr_obj_perms and has_repo_attr_model_or_obj_perms to the global access checks available to all plugins to use.
    [#8161](https://pulp.plan.io/issues/8161)

#### Removals

-   Plugins are required to define a `version` attribute on their subclass of
    `PulpPluginAppConfig`. Starting with pulpcore==3.10, if undefined while Pulp loads, Pulp will
    refuse to start.
    [#7930](https://pulp.plan.io/issues/7930)
-   Changed the default permission class to from `IsAuthenticated` to `IsAdminUser`.
    Any endpoints that should be accessible by all known to the system users need to specify the permission_classes accordingly.
    [#8018](https://pulp.plan.io/issues/8018)
-   `pulpcore.plugin.models.UnsupportedDigestValidationError` has been removed. Plugins should
    look for this at `pulpcore.plugin.exceptions.UnsupportedDigestValidationError` instead.
    [#8169](https://pulp.plan.io/issues/8169)

#### Deprecations

-   Access to the path of the public key of a signing service was deprecated. The value of the public
    key is now expected to be saved in the model instance as `SigningService.public_key`.
    [#7700](https://pulp.plan.io/issues/7700)
-   The `pulpcore.plugin.storage.get_plugin_storage_path()` method has been deprecated.
    [#7935](https://pulp.plan.io/issues/7935)

## 3.9.1 (2021-01-21) {: #3.9.1 }

### REST API

#### Removals

-   CHUNKED_UPLOAD_DIR was converted to a relative path inside MEDIA_ROOT.
    [#8099](https://pulp.plan.io/issues/8099)

### Plugin API

No significant changes.

## 3.9.0 (2020-12-07) {: #3.9.0 }

### REST API

#### Features

-   Made uploaded chunks to be stored as separate files in the default storage. This feature removes
    the need for a share storage of pulp api nodes, as the chunks are now stored individually in the
    shared storage and are therefore accessible by all nodes.
    [#4498](https://pulp.plan.io/issues/4498)

-   Add support for logging messages with a correlation id that can either be autogenerated or passed in
    with a `Correlation-ID` header. This feature is provided as a tech preview in pulpcore 3.9.
    [#4689](https://pulp.plan.io/issues/4689)

-   Added progress reporting for pulp imports.
    [#6559](https://pulp.plan.io/issues/6559)

-   Exposed `aiohttp.ClientTimeout` fields in `Remote` as `connect_timeout`,
    `sock_connect_timeout`, `sock_read_timeout`, and `total_timeout`.

    This replaces the previous hard-coded 600 second timeout for sock_connect and sock_read,
    giving per-`Remote` control of all four `ClientTimeout` fields to the user.
    [#7201](https://pulp.plan.io/issues/7201)

-   Enabled users to add checksums to ALLOWED_CONTENT_CHECKSUMS by allowing them to populate checksums
    with handle-artifact-checksums command.
    [#7561](https://pulp.plan.io/issues/7561)

-   Added version information to api docs.
    [#7569](https://pulp.plan.io/issues/7569)

-   Made signing services to be immutable. This requires content signers to create a new signing
    service explicitly when a change occurs.
    [#7701](https://pulp.plan.io/issues/7701)

-   Added support for repairing Pulp by detecting and redownloading missing or corrupted artifact files. Sending a POST request to `/pulp/api/v3/repair/` will trigger a task that scans all artifacts for missing and corrupted files in Pulp storage, and will attempt to redownload them from the original remote. Specifying `verify_checksums=False` when POSTing to the same endpoint will skip checking the hashes of the files (corruption detection) and will instead just look for missing files.

    The `verify_checksums` POST parameter was added to the existing "repository version repair" endpoint as well.
    [#7755](https://pulp.plan.io/issues/7755)

-   Added check to prevent Pulp to start if there are Artifacts with forbidden checksums.
    [#7914](https://pulp.plan.io/issues/7914)

#### Bugfixes

-   Fixed a serious bug data integrity bug where some Artifact files could be silently deleted from storage in specific circumstances.
    [#7676](https://pulp.plan.io/issues/7676)
-   Moved the initial creation of access_policies to post_migrate signal.
    This enforces their existance both with migrate and flush.
    [#7710](https://pulp.plan.io/issues/7710)
-   Fixed incremental export to happen if start_version provided, even if last_export is null.
    [#7716](https://pulp.plan.io/issues/7716)
-   Fixed a file descriptor leak during repository version repair operations.
    [#7735](https://pulp.plan.io/issues/7735)
-   Fixed bug where exporter directory existed and was writable but not owned by worker process and thus
    not chmod-able.
    [#7829](https://pulp.plan.io/issues/7829)
-   Properly namespaced the viewset_name in AccessPolicy to avoid naming conflicts in plugins.
    [#7845](https://pulp.plan.io/issues/7845)
-   Update jquery version from 3.3.1 to 3.5.1 in API.html template. It is the version provided by djangorestframework~=3.12.2
    [#7850](https://pulp.plan.io/issues/7850)
-   Prevented a Redis failure scenario from causing the tasking system to back up due to "tasking system
    locks" not being released, even on worker restart.
    [#7907](https://pulp.plan.io/issues/7907)
-   Use subclassed plugin downloaders during the pulp repair.
    [#7909](https://pulp.plan.io/issues/7909)

#### Improved Documentation

-   Added requirement to record a demo with PRs of substantial change.
    [#7703](https://pulp.plan.io/issues/7703)
-   Removed outdated reference stating Pulp did not have an SELinux policy.
    [#7793](https://pulp.plan.io/issues/7793)

#### Removals

-   The local file system directory used for uploaded chunks is specified by the setting
    CHUNKED_UPLOAD_DIR. Users are encouraged to remove all uncommitted uploaded files before
    applying this change.
    [#4498](https://pulp.plan.io/issues/4498)

#### Misc

-   [#7690](https://pulp.plan.io/issues/7690), [#7753](https://pulp.plan.io/issues/7753), [#7902](https://pulp.plan.io/issues/7902), [#7890](https://pulp.plan.io/issues/7890)

### Plugin API

#### Features

-   Added pre_save hook to Artifact to enforce checksum rules implied by ALLOWED_CONTENT_CHECKSUMS.
    [#7696](https://pulp.plan.io/issues/7696)
-   Enabled plugin writers to retrieve a request object from a serializer when look ups are
    performed from within the task serializer.
    [#7718](https://pulp.plan.io/issues/7718)
-   Expose ProgressReportSerializer through pulpcore.plugin
    [#7759](https://pulp.plan.io/issues/7759)
-   Allowed plugin writers to access the models Upload and UploadChunk
    [#7833](https://pulp.plan.io/issues/7833)
-   Exposed `pulpcore.plugin.constants.ALL_KNOWN_CONTENT_CHECKSUMS`.
    [#7897](https://pulp.plan.io/issues/7897)
-   Added `UnsupportedDigestValidationError` to `pulpcore.plugins.exceptions`. Going
    forward, plugin authors can expect to find all unique exceptions under
    `pulpcore.plugin.exceptions`.
    [#7908](https://pulp.plan.io/issues/7908)

#### Deprecations

-   Plugins are encouraged to define a `version` attribute on their subclass of
    `PulpPluginAppConfig`. If undefined while Pulp loads a warning is now shown to encourage plugin
    writers to implement this attribute, which will be required starting in pulpcore==3.10.
    [#6671](https://pulp.plan.io/issues/6671)

-   Using the ViewSet's classname to identify its AccessPolicy has been deprecated and is slated for removal in 3.10.
    Instead the urlpattern is supposed to be used.

    Plugins with existing AccessPolicies should add a data migration to rename their AccessPolicies:

    ::

    :   access_policy = AccessPolicy.get(viewset_name="MyViewSet")
        access_policy.viewset_name = "objectclass/myplugin/myclass"
        access_policy.save()

    [#7845](https://pulp.plan.io/issues/7845)

-   The `pulpcore.plugin.models.UnsupportedDigestValidationError` is being deprecated and
    will be removed in 3.10.

    It can now be found at `pulpcore.plugin.exceptions.UnsupportedDigestValidationError`
    instead; please change any code that imports it to access it from its new location.
    [#7908](https://pulp.plan.io/issues/7908)

## 3.8.1 (2020-10-30) {: #3.8.1 }

### REST API

#### Bugfixes

-   Fixed a serious bug data integrity bug where some Artifact files could be silently deleted from storage in specific circumstances. (Backported from [#7676](https://pulp.plan.io/issues/7676))
    [#7758](https://pulp.plan.io/issues/7758)

### Plugin API

No significant changes.

## 3.8.0 (2020-10-20) {: #3.8.0 }

### REST API

#### Features

-   Added check to prevent users from adding checksums to `ALLOWED_CONTENT_CHECKSUMS` if there are
    Artifacts without those checksums.
    [#7487](https://pulp.plan.io/issues/7487)
-   Django admin site URL is configurable via ADMIN_SITE_URL settings parameter.
    [#7637](https://pulp.plan.io/issues/7637)
-   Always set a default for DJANGO_SETTINGS_MODULE. This means the services files don't need to.
    [#7720](https://pulp.plan.io/issues/7720)

#### Bugfixes

-   Fix a warning inappropriately logged when cancelling a task.
    [#4559](https://pulp.plan.io/issues/4559)
-   When a task is canceled, we now set the state of all incomplete "progress reports" to canceled as well.
    [#4921](https://pulp.plan.io/issues/4921)
-   Properly handle duplicate content during synchronization and migration from Pulp 2 to 3.
    [#7147](https://pulp.plan.io/issues/7147)
-   Enable content streaming for RepositoryVersionDistribution
    [#7568](https://pulp.plan.io/issues/7568)
-   Change dropped DRF filter to django urlize.
    [#7634](https://pulp.plan.io/issues/7634)
-   Added some more files to MANIFEST.in.
    [#7656](https://pulp.plan.io/issues/7656)
-   Updated dynaconf requirement to prevent use of older buggy versions.
    [#7682](https://pulp.plan.io/issues/7682)

#### Improved Documentation

-   Updated examples of auto-distribution.
    [#5247](https://pulp.plan.io/issues/5247)
-   Improved testing section in Pulp contributor docs.
    Mentioned prestart, pminio, pfixtures and phelp.
    [#7475](https://pulp.plan.io/issues/7475)
-   Fix an erroneous API endpoint in the "upload and publish" workflow documentation.
    [#7655](https://pulp.plan.io/issues/7655)
-   Documented that we don't support backporting migrations.
    [#7657](https://pulp.plan.io/issues/7657)

### Plugin API

#### Improved Documentation

-   Removed mentions of semver in the plugin API docs, and replaced them with a link to the deprecation policy where appropriate.
    [#7555](https://pulp.plan.io/issues/7555)

## 3.7.9 (2021-11-30) {: #3.7.9 }

### REST API

#### Bugfixes

-   Prevented a Redis failure scenario from causing the tasking system to back up due to "tasking system
    locks" not being released, even on worker restart.
    (backported from #7907)
    [#9547](https://pulp.plan.io/issues/9547)
-   Prevent proxy credentials to be passed to aiohttp, so they no longer appear in stack traces.
    This is a rewritten backport of #8167.
    [#9573](https://pulp.plan.io/issues/9573)

### Plugin API

No significant changes.

## 3.7.8 (2021-08-24) {: #3.7.8 }

### REST API

#### Bugfixes

-   In stages-pipeline and new-version sanity-checks, added full error-info on path-problems.
    (backported from #8133)
    [#9227](https://pulp.plan.io/issues/9227)

### Plugin API

#### Bugfixes

-   Added kwarg to RemoteArtifactSaver init to allow enabling handling of rare error edge-case.

    fix_mismatched_remote_artifacts=True enables workaround for a failure-scenario that
    (so far) is only encountered by pulp_rpm. Current behavior is the default.
    (backported from #8133)
    [#9227](https://pulp.plan.io/issues/9227)

## 3.7.7 (2021-07-26) {: #3.7.7 }

### REST API

#### Bugfixes

-   Fixed a bug, where new tasks were assigned to dead workers.
    (backported from #8779)
    [#9118](https://pulp.plan.io/issues/9118)

### Plugin API

No significant changes.

## 3.7.6 (2021-04-29) {: #3.7.6 }

### REST API

#### Bugfixes

-   Backported a fix for on-demand sync/migration of repositories that don't have sha256 checksums.
    [#8651](https://pulp.plan.io/issues/8651)

### Plugin API

No significant changes.

## 3.7.5 (2021-04-12) {: #3.7.5 }

### REST API

#### Bugfixes

-   Backported fixes for artifact handling important for pulp-2to3-migration plugin use cases.
    [#8485](https://pulp.plan.io/issues/8485)
-   Allowed to use PyYAML 5.4 which contains a patch for [CVE-2020-14343 <https://nvd.nist.gov/vuln/detail/CVE-2020-14343]{.title-ref}.
    [#8540](https://pulp.plan.io/issues/8540)

### Plugin API

No significant changes.

## 3.7.4 (2021-03-15) {: #3.7.4 }

### REST API

#### Bugfixes

-   No longer load .env files. They are not used by Pulp but potentially can break the setup.
    [#8373](https://pulp.plan.io/issues/8373)

### Plugin API

No significant changes.

## 3.7.3 (2020-10-28) {: #3.7.3 }

### REST API

#### Bugfixes

-   Fixed a serious bug data integrity bug where some Artifact files could be silently deleted from storage in specific circumstances. (Backported from [#7676](https://pulp.plan.io/issues/7676))
    [#7757](https://pulp.plan.io/issues/7757)

### Plugin API

No significant changes.

## 3.7.2 (2020-10-21) {: #3.7.2 }

### REST API

#### Bugfixes

-   Properly handle duplicate content during synchronization and migration from Pulp 2 to 3.
    [#7702](https://pulp.plan.io/issues/7702)
-   Fixed incremental export to happen if start_version provided, even if last_export is null.
    [#7725](https://pulp.plan.io/issues/7725)

### Plugin API

No significant changes.

## 3.7.1 (2020-09-29) {: #3.7.1 }

### REST API

#### Bugfixes

-   Including functest_requirements.txt on MANIFEST.in
    [#7610](https://pulp.plan.io/issues/7610)

### Plugin API

No significant changes.

## 3.7.0 (2020-09-22) {: #3.7.0 }

### REST API

#### Features

-   Added setting ALLOWED_CONTENT_CHECKSUMS to support limiting the checksum-algorithms Pulp uses.
    [#5216](https://pulp.plan.io/issues/5216)
-   Added progress-reports to the PulpExport task.
    [#6541](https://pulp.plan.io/issues/6541)
-   Improve performance and memory consumption of orphan cleanup.
    [#6581](https://pulp.plan.io/issues/6581)
-   Extra require: s3, azure, prometheus and test
    [#6844](https://pulp.plan.io/issues/6844)
-   Added the toc_info attribute with filename/sha256sum to PulpExport, to enable direct access to the export-TOC.
    [#7221](https://pulp.plan.io/issues/7221)
-   Taught export-process to clean up broken files if the export fails.
    [#7246](https://pulp.plan.io/issues/7246)
-   Added the django-cleanup handlers for removing files stored within FileField
    [#7316](https://pulp.plan.io/issues/7316)
-   Added deprecations section to the changelog.
    [#7415](https://pulp.plan.io/issues/7415)

#### Bugfixes

-   Address some problems with stuck tasks when connection to redis is interrupted.
    [#6449](https://pulp.plan.io/issues/6449)
-   Fixed a bug where creating an incomplete repository version (via canceled or failed task) could cause future operations to fail.
    [#6463](https://pulp.plan.io/issues/6463)
-   Added validation for unknown serializers' fields
    [#7245](https://pulp.plan.io/issues/7245)
-   Fixed: PulpTemporaryFile stored in the wrong location
    [#7319](https://pulp.plan.io/issues/7319)
-   Fixed an edge case where canceled tasks might sometimes be processed and marked completed.
    [#7389](https://pulp.plan.io/issues/7389)
-   Fixed pulp-export scenario where specifying full= could fail silently.
    [#7403](https://pulp.plan.io/issues/7403)
-   Fixed OpenAPI creation response status code to 201
    [#7444](https://pulp.plan.io/issues/7444)
-   The `AccessPolicy.permissions_assignment` can now be null, which some viewset endpoints may
    require.
    [#7448](https://pulp.plan.io/issues/7448)
-   Taught export to insure export-dir was writeable by group as well as owner.
    [#7459](https://pulp.plan.io/issues/7459)
-   Fixed orphan cleanup for subrepositories (e.g. an add-on repository in RPM distribution tree repository).
    [#7460](https://pulp.plan.io/issues/7460)
-   Fixed issue with reserved resources not being displayed for waiting tasks.
    [#7497](https://pulp.plan.io/issues/7497)
-   Fixed broken bindings resulting from drf-spectacular 0.9.13 release.
    [#7510](https://pulp.plan.io/issues/7510)
-   Fix filesystem exports failing due to undefinied `validate_path` method.
    [#7521](https://pulp.plan.io/issues/7521)
-   Fix a bug that prevented users from adding permissions for models have conflicting names across different django apps.
    [#7541](https://pulp.plan.io/issues/7541)

#### Improved Documentation

-   Added pulp 2 obsolete concepts (consumers, applicability).
    [#6255](https://pulp.plan.io/issues/6255)

#### Misc

-   [#7508](https://pulp.plan.io/issues/7508)

### Plugin API

#### Features

-   Enabled the automatic removal of files, which are stored in FileField, when a corresponding
    model's delete() method is invoked
    [#7316](https://pulp.plan.io/issues/7316)
-   Add add_and_remove task to pulpcore.plugin.tasking
    [#7351](https://pulp.plan.io/issues/7351)
-   Added deprecations section to the plugin api changelog.
    [#7415](https://pulp.plan.io/issues/7415)

#### Bugfixes

-   The `AccessPolicy.permissions_assignment` can now be null, which some viewset endpoints may
    require.
    [#7448](https://pulp.plan.io/issues/7448)

#### Improved Documentation

-   Added an example how to use a serializer to create validated objects.
    [#5927](https://pulp.plan.io/issues/5927)
-   Document the URLField OpenAPI issue
    [#6828](https://pulp.plan.io/issues/6828)
-   Added all exported models to the autogenerated API reference.
    [#7045](https://pulp.plan.io/issues/7045)
-   Updated docs recommending plugins to rely on a 1-release deprecation process for backwards
    incompatible changes in the `pulpcore.plugin`.
    [#7413](https://pulp.plan.io/issues/7413)
-   Adds plugin writer docs on how to ship snippets which override default webserver routes provided by
    the installer.
    [#7471](https://pulp.plan.io/issues/7471)
-   Revises the "installation plugin custom tasks" documentation to reflect that plugin writers can
    contribute their custom installation needs directly to the installer.
    [#7523](https://pulp.plan.io/issues/7523)

#### Misc

-   [#7270](https://pulp.plan.io/issues/7270)

## 3.6.5 (2020-10-28) {: #3.6.5 }

### REST API

#### Bugfixes

-   Fixed a bug where creating an incomplete repository version (via canceled or failed task) could cause future operations to fail. (Backported from [#6463](https://pulp.plan.io/issues/6463))
    [#7737](https://pulp.plan.io/issues/7737)

### Plugin API

No significant changes.

## 3.6.4 (2020-09-23) {: #3.6.4 }

### REST API

#### Bugfixes

-   Fixed broken bindings resulting from drf-spectacular 0.9.13 release.
    [#7510](https://pulp.plan.io/issues/7510)

### Plugin API

No significant changes.

## 3.6.3 (2020-09-04) {: #3.6.3 }

### REST API

#### Misc

-   [#7450](https://pulp.plan.io/issues/7450)

### Plugin API

No significant changes.

## 3.6.2 (2020-09-02) {: #3.6.2 }

### REST API

No significant changes.

### Plugin API

#### Bugfixes

-   Remove customized operation_id from OrphansView
    [#7446](https://pulp.plan.io/issues/7446)

## 3.6.1 (2020-09-01) {: #3.6.1 }

### REST API

#### Bugfixes

-   Fixing groups API validation
    [#7329](https://pulp.plan.io/issues/7329)

#### Improved Documentation

-   Updated Pypi installation step.
    [#6305](https://pulp.plan.io/issues/6305)
-   Added hardware requirements.
    [#6856](https://pulp.plan.io/issues/6856)

#### Misc

-   [#7229](https://pulp.plan.io/issues/7229)

### Plugin API

#### Bugfixes

-   Fix custom operation_id's from OpenAPI
    [#7341](https://pulp.plan.io/issues/7341)
-   OpenAPI: do not discard components without properties
    [#7347](https://pulp.plan.io/issues/7347)

## 3.6.0 (2020-08-13) {: #3.6.0 }

### REST API

#### Features

-   Added table-of-contents to export and gave import a toc= to find/reassemble pieces on import.
    [#6737](https://pulp.plan.io/issues/6737)

-   Added ability to associate a Remote with a Repository so users no longer have to specify Remote when
    syncing.
    [#7015](https://pulp.plan.io/issues/7015)

-   The /pulp/api/v3/access_policies/ endpoint is available for reading and modifying the AccessPolicy
    used for Role Based Access Control for all Pulp endpoints. This allows for complete customization
    of the Authorization policies.

    NOTE: this endpoint is in tech-preview and may change in backwards incompatible ways in the future.
    [#7160](https://pulp.plan.io/issues/7160)

-   The /pulp/api/v3/access_policies/ endpoint also includes a permissions_assignment section which
    customizes the permissions assigned to new objects. This allows for complete customization for how
    new objects work with custom define Authorization policies.
    [#7210](https://pulp.plan.io/issues/7210)

-   The /pulp/api/v3/users/ endpoint is available for reading the Users, Group membership, and
    Permissions.

    NOTE: this endpoint is in tech-preview and may change in backwards incompatible ways in the future.
    [#7231](https://pulp.plan.io/issues/7231)

-   The /pulp/api/v3/groups/ endpoint is available for reading the Groups, membership, and
    Permissions.

    NOTE: this endpoint is in tech-preview and may change in backwards incompatible ways in the future.
    [#7232](https://pulp.plan.io/issues/7232)

-   The /pulp/api/v3/tasks/ endpoint now provides a user-isolation behavior for non-admin users. This
    policy is controllable at the /pulp/api/v3/access_policies/ endpoint.

    NOTE: The user-isolation behavior is in "tech preview" and production systems are recommended to
    continue using the build-in `admin` user only.
    [#7301](https://pulp.plan.io/issues/7301)

-   Extended endpoint /pulp/api/v3/groups/:pk/users to add and remove users from a group.

    NOTE: this endpoint is in tech-preview and may change in backwards incompatible ways in the future.
    [#7310](https://pulp.plan.io/issues/7310)

-   Extended endpoints /pulp/api/v3/groups/:pk/model_permissions and
    /pulp/api/v3/groups/:pk/object_permissions to add and remove permissions from a group.

    NOTE: this endpoint is in tech-preview and may change in backwards incompatible ways in the future.
    [#7311](https://pulp.plan.io/issues/7311)

#### Bugfixes

-   WorkerDirectory.delete() no longer recursively trys to delete itself when encountering a permission error
    [#6504](https://pulp.plan.io/issues/6504)
-   Stopped preventing removal of PulpExport/Exporter when last-export existed.
    [#6555](https://pulp.plan.io/issues/6555)
-   First time on demand content requests appear in the access log.
    [#7002](https://pulp.plan.io/issues/7002)
-   Fixed denial of service caused by extra slashes in content urls.
    [#7066](https://pulp.plan.io/issues/7066)
-   Set a default DJANGO_SETTINGS_MODULE env var in content app
    [#7179](https://pulp.plan.io/issues/7179)
-   Added plugin namespace to openapi href identifier.
    [#7209](https://pulp.plan.io/issues/7209)
-   By default, html in field descriptions filtered out in REST API docs unless 'include_html' is set.
    [#7299](https://pulp.plan.io/issues/7299)
-   Fixed plugin filtering in bindings to work independently from "bindings" parameter.
    [#7306](https://pulp.plan.io/issues/7306)

#### Improved Documentation

-   Made password variable consistent with Ansible installer example playbook
    [#7065](https://pulp.plan.io/issues/7065)
-   Fixed various docs bugs in the pulpcore docs.
    [#7090](https://pulp.plan.io/issues/7090)
-   Adds documentation about SSL configuration requirements for reverse proxies.
    [#7285](https://pulp.plan.io/issues/7285)
-   Fixed REST API docs.
    [#7292](https://pulp.plan.io/issues/7292)

#### Deprecations and Removals

-   Removed unnecessary fields from the import/export transfer.
    [#6515](https://pulp.plan.io/issues/6515)

-   Upgrading the api documentation from OpenAPI v2 to OpenAPI v3.

    - Methods signatures for bindings may change.
    [#7108](https://pulp.plan.io/issues/7108)

-   Changed default `download_concurrency` on Remotes from 20 to 10 to avoid connection problems. Also
    updated existing Remotes with `download_concurrency` of 20 to 10.
    [#7212](https://pulp.plan.io/issues/7212)

#### Misc

-   [#6807](https://pulp.plan.io/issues/6807), [#7142](https://pulp.plan.io/issues/7142), [#7196](https://pulp.plan.io/issues/7196)

### Plugin API

#### Features

-   Adding PulpTemporaryFile for handling temporary files between the viewset and triggered tasks
    [#6749](https://pulp.plan.io/issues/6749)

-   `RepositorySyncURLSerializer` will now check remote on the repository before it raises an
    exception if the remote param is not set.
    [#7015](https://pulp.plan.io/issues/7015)

-   Added a hook on `Repository` called `artifacts_for_version()` that plugins can override to
    modify the logic behind `RepositoryVersion.artifacts`. For now, this is used when exporting
    artifacts.
    [#7021](https://pulp.plan.io/issues/7021)

-   Enabling plugin writers to have more control on HttpDownloader response codes 400+
    by subclassing HttpDownloader and overwriting raise_for_status method
    [#7117](https://pulp.plan.io/issues/7117)

-   BaseModel now inherits from LifecycleModel provided by django-lifecycle allowing any subclass
    to also use it instead of signals.
    [#7151](https://pulp.plan.io/issues/7151)

-   A new pulpcore.plugin.models.AutoDeleteObjPermsMixin object can be added to models to
    automatically delete all user and group permissions for an object just before the object is deleted.
    This provides an easy cleanup mechanism and can be added to models as a mixin. Note that your model
    must support django-lifecycle to use this mixin.
    [#7157](https://pulp.plan.io/issues/7157)

-   A new model pulpcore.plugin.models.AccessPolicy is available to store AccessPolicy statements in
    the database. The model's statements field stores the list of policy statements as a JSON field.
    The name field stores the name of the Viewset the AccessPolicy is protecting.

    Additionally, the pulpcore.plugin.access_policy.AccessPolicyFromDB is a drf-access-policy which
    viewsets can use to protect their viewsets with. See the *viewset_enforcement* for more
    information on this.
    [#7158](https://pulp.plan.io/issues/7158)

-   Adds the TaskViewSet and TaskGroupViewSet objects to the plugin api.
    [#7187](https://pulp.plan.io/issues/7187)

-   Enabled plugin writers to create immutable repository ViewSets
    [#7191](https://pulp.plan.io/issues/7191)

-   A new pulpcore.plugin.models.AutoAddObjPermsMixin object can be added to models to automatically
    add permissions for an object just after the object is created. This is controlled by data saved in
    the permissions_assignment attribute of the pulpcore.plugin.models.AccessPolicy allowing users
    to control what permissions are created. Note that your model must support django-lifecycle to use
    this mixin.
    [#7210](https://pulp.plan.io/issues/7210)

-   Added ability for plugin writers to set a `content_mapping` property on content resources to
    provide a custom mapping of content to repositories.
    [#7252](https://pulp.plan.io/issues/7252)

-   Automatically excluding `pulp_id`, `pulp_created`, and `pulp_last_updated` for
    `QueryModelResources`.
    [#7277](https://pulp.plan.io/issues/7277)

-   Viewsets that subclass `` pulpcore.plugin.viewsets.NamedModelViewSet` can declare the ``queryset_filtering_required_permission`[ class attribute naming the permission required to view
    an object. See the *queryset_scoping* documentation for more information.
    ]{.title-ref}#7300 <<https://pulp.plan.io/issues/7300>>`__

#### Bugfixes

-   Making operation_id unique
    [#7233](https://pulp.plan.io/issues/7233)
-   Making ReDoc OpenAPI summary human readable
    [#7237](https://pulp.plan.io/issues/7237)
-   OpenAPI schema generation from CLI
    [#7258](https://pulp.plan.io/issues/7258)
-   Allow pulpcore.plugin.models.AutoAddObjPermsMixin.add_for_object_creator to skip assignment of
    permissions if there is no known user. This allows endpoints that do not use authorization but still
    create objects in the DB to execute without error.
    [#7312](https://pulp.plan.io/issues/7312)

#### Improved Documentation

-   Omit a view/viewset from the OpenAPI schema
    [#7133](https://pulp.plan.io/issues/7133)
-   Added plugin writer docs for `BaseContentResource`.
    [#7296](https://pulp.plan.io/issues/7296)

#### Deprecations and Removals

-   Newlines in certificate string (ca_cert, client_cert, client_key) on Remotes are not required to be escaped.
    [#6735](https://pulp.plan.io/issues/6735)

-   Replaced drf-yasg with drf-spectacular.

    -   This updates the api documentation to openapi v3.
    -   Plugins may require changes.

    - Methods signatures for bindings may change.
    [#7108](https://pulp.plan.io/issues/7108)

-   Moving containers from pulpcore to pulp-operator
    [#7171](https://pulp.plan.io/issues/7171)

## 3.5.0 (2020-07-08) {: #3.5.0 }

### REST API

#### Features

-   Added start_versions= to export to allow for arbitrary incremental exports.
    [#6763](https://pulp.plan.io/issues/6763)
-   Added GroupProgressReport to track progress in a TaskGroup.
    [#6858](https://pulp.plan.io/issues/6858)
-   Provide a user agent string with all aiohttp requests by default.
    [#6954](https://pulp.plan.io/issues/6954)

#### Bugfixes

-   Fixed 'integer out of range' error during sync by changing RemoteArtifact size field to BigIntegerField.
    [#6717](https://pulp.plan.io/issues/6717)
-   Added a more descriptive error message that is shown when CONTENT_ORIGIN is not properly configured
    [#6771](https://pulp.plan.io/issues/6771)
-   Including requirements.txt on MANIFEST.in
    [#6888](https://pulp.plan.io/issues/6888)
-   Corrected a number of filters to be django-filter-2.3.0-compliant.
    [#6915](https://pulp.plan.io/issues/6915)
-   Locked Content table to prevent import-deadlock.
    [#7073](https://pulp.plan.io/issues/7073)

#### Improved Documentation

-   Updating installation docs
    [#6836](https://pulp.plan.io/issues/6836)
-   Fixed a number of typos in the import/export workflow docs.
    [#6919](https://pulp.plan.io/issues/6919)
-   Fixed docs which claim that admin user has a default password.
    [#6992](https://pulp.plan.io/issues/6992)
-   Fixed broken link to content plugins web page
    [#7017](https://pulp.plan.io/issues/7017)

#### Deprecations and Removals

-   Removes the Write models from the OpenAPI schema.
    Brings back the models that were accidentally removed from the OpenAPI schema in 3.4.0 release.
    [#7087](https://pulp.plan.io/issues/7087)

#### Misc

-   [#6483](https://pulp.plan.io/issues/6483), [#6925](https://pulp.plan.io/issues/6925)

### Plugin API

#### Features

-   Views can specify the tag name with pulp_tag_name
    [#6832](https://pulp.plan.io/issues/6832)
-   Added GroupProgressReport to track progress in a TaskGroup.
    [#6858](https://pulp.plan.io/issues/6858)
-   Exported the symbols serializers.SingleContentArtifactField and files.PulpTemporaryUploadedFile.
    [#7088](https://pulp.plan.io/issues/7088)

---

## 3.4.1 (2020-06-03) {: #3.4.1 }

### REST API

#### Bugfixes

-   Including requirements.txt on MANIFEST.in
    [#6888](https://pulp.plan.io/issues/6888)

### Plugin API

No significant changes.

---

## 3.4.0 (2020-05-27) {: #3.4.0 }

### REST API

#### Features

-   Implemented incremental-exporting for PulpExport.
    [#6136](https://pulp.plan.io/issues/6136)
-   Added support for S3 and other non-filesystem storage options to pulp import/export functionality.
    [#6456](https://pulp.plan.io/issues/6456)
-   Optimized imports by having repository versions processed using child tasks.
    [#6484](https://pulp.plan.io/issues/6484)
-   Added repository type check during Pulp imports.
    [#6532](https://pulp.plan.io/issues/6532)
-   Added version checking to import process.
    [#6558](https://pulp.plan.io/issues/6558)
-   Taught PulpExport to export by RepositoryVersions if specified.
    [#6566](https://pulp.plan.io/issues/6566)
-   Task groups now have an 'all_tasks_dispatched' field which denotes that no more tasks will spawn
    as part of this group.
    [#6591](https://pulp.plan.io/issues/6591)
-   Taught export how to split export-file into chunk_size bytes.
    [#6736](https://pulp.plan.io/issues/6736)

#### Bugfixes

-   Remote fields username and password show up in:
    REST docs, API responses, and are available in the bindings.
    [#6346](https://pulp.plan.io/issues/6346)
-   Fixed a bug, where the attempt to cancel a completed task lead to a strange response.
    [#6465](https://pulp.plan.io/issues/6465)
-   Fixed KeyError during OpenAPI schema generation.
    [#6468](https://pulp.plan.io/issues/6468)
-   Added a missing trailing slash to distribution's base_url
    [#6507](https://pulp.plan.io/issues/6507)
-   Fixed a bug where the wrong kind of error was being raised for href parameters of mismatched types.
    [#6521](https://pulp.plan.io/issues/6521)
-   containers: Fix pulp_rpm 3.3.0 install by replacing the python3-createrepo_c RPM with its build-dependencies, so createrep_c gets installed & built from PyPI
    [#6523](https://pulp.plan.io/issues/6523)
-   Fixed OpenAPI schema for importer and export APIs.
    [#6556](https://pulp.plan.io/issues/6556)
-   Normalized export-file-path for PulpExports.
    [#6564](https://pulp.plan.io/issues/6564)
-   Changed repository viewset to use the general_update and general_delete tasks.
    This fixes a bug where updating specialized fields of a repository was impossible due to using the wrong serializer.
    [#6569](https://pulp.plan.io/issues/6569)
-   Only uses multipart OpenAPI Schema when dealing with file fields
    [#6702](https://pulp.plan.io/issues/6702)
-   Fixed a bug that prevented write_only fields from being present in the API docs and bindings
    [#6775](https://pulp.plan.io/issues/6775)
-   Added proper headers for index.html pages served by content app.
    [#6802](https://pulp.plan.io/issues/6802)
-   Removed Content-Encoding header from pulpcore-content responses.
    [#6831](https://pulp.plan.io/issues/6831)

#### Improved Documentation

-   Adding docs for importing and exporting from Pulp to Pulp.
    [#6364](https://pulp.plan.io/issues/6364)
-   Add some documentation around TaskGroups.
    [#6641](https://pulp.plan.io/issues/6641)
-   Introduced a brief explanation about pulp_installer
    [#6674](https://pulp.plan.io/issues/6674)
-   Added a warning that the REST API is not safe for multi-user use until RBAC is implemented.
    [#6692](https://pulp.plan.io/issues/6692)
-   Updated the required roles names
    [#6758](https://pulp.plan.io/issues/6758)

#### Deprecations and Removals

-   Changed repositories field on `/pulp/api/v3/exporters/core/pulp/` from UUIDs to hrefs.
    [#6457](https://pulp.plan.io/issues/6457)
-   Imports now spawn child tasks which can be fetched via the `child_tasks` field of the import task.
    [#6484](https://pulp.plan.io/issues/6484)
-   Content of ssl certificates and keys changed to be return their full value instead of sha256 through REST API.
    [#6691](https://pulp.plan.io/issues/6691)
-   Replaced PulpExport filename/sha256 fields, with output_info_file, a '<filename>': '<hash>' dictionary.
    [#6736](https://pulp.plan.io/issues/6736)

#### Misc

-   [#5020](https://pulp.plan.io/issues/5020), [#6421](https://pulp.plan.io/issues/6421), [#6477](https://pulp.plan.io/issues/6477), [#6539](https://pulp.plan.io/issues/6539), [#6542](https://pulp.plan.io/issues/6542), [#6544](https://pulp.plan.io/issues/6544), [#6572](https://pulp.plan.io/issues/6572), [#6583](https://pulp.plan.io/issues/6583), [#6695](https://pulp.plan.io/issues/6695), [#6803](https://pulp.plan.io/issues/6803), [#6804](https://pulp.plan.io/issues/6804)

### Plugin API

#### Features

-   Added new NoArtifactContentUploadSerializer and NoArtifactContentUploadViewSet to enable plugin
    writers to upload content without storing an Artifact
    [#6281](https://pulp.plan.io/issues/6281)
-   Added view_name_pattern to DetailRelatedField and DetailIdentityField to properly identify wrong resource types.
    [#6521](https://pulp.plan.io/issues/6521)
-   Added support for Distributions to provide non-Artifact content via a content_handler.
    [#6570](https://pulp.plan.io/issues/6570)
-   Added constants to the plugin API at `pulpcore.plugin.constants`.
    [#6579](https://pulp.plan.io/issues/6579)
-   TaskGroups now have an 'all_tasks_dispatched' field that can be used to notify systems that no
    further tasks will be dispatched for a TaskGroup. Plugin writers should call ".finish()" on all
    TaskGroups created once they are done using them to set this field.
    [#6591](https://pulp.plan.io/issues/6591)

#### Bugfixes

-   Added `RemoteFilter` to the plugin API as it was missing but used by plugin_template.
    [#6563](https://pulp.plan.io/issues/6563)

#### Deprecations and Removals

-   Fields: username and password will be returned to the rest API user requesting a Remote
    [#6346](https://pulp.plan.io/issues/6346)
-   Rehomed QueryModelResource to pulpcore.plugin.importexport.
    [#6514](https://pulp.plan.io/issues/6514)
-   The pulpcore.content.handler.Handler.list_directory function now returns a set of strings where it returned a string of HTML before.
    [#6570](https://pulp.plan.io/issues/6570)

---

## 3.3.1 (2020-05-07) {: #3.3.1 }

### REST API

#### Bugfixes

-   Fixed partial and general update calls for SecretCharField on the Remote.
    [#6565](https://pulp.plan.io/issues/6565)
-   Fixed bug where `TaskGroup` was showing up as null for `created_resources` in tasks.
    [#6573](https://pulp.plan.io/issues/6573)

### Plugin API

#### Features

-   Add TaskGroup to the plugin API.
    [#6603](https://pulp.plan.io/issues/6603)

---

## 3.3.0 (2020-04-15) {: #3.3.0 }

### REST API

#### Features

-   Added support for repairing a RepositoryVersion by redownloading corrupted artifact files.
    Sending a POST request to
    `/pulp/api/v3/repositories/<plugin>/<type>/<repository-uuid>/versions/<version-number>/repair/`
    will trigger a task that scans all associated artfacts and attempts to fetch missing or corrupted ones again.
    [#5613](https://pulp.plan.io/issues/5613)
-   Added support for exporting pulp-repo-versions. POSTing to an exporter using the
    `/pulp/api/v3/exporters/core/pulp/<exporter-uuid>/exports/` API will instantiate a
    PulpExport entity, which will generate an export-tar.gz file at
    `<exporter.path>/export-<export-uuid>-YYYYMMDD_hhMM.tar.gz`
    [#6135](https://pulp.plan.io/issues/6135)
-   Added API for importing Pulp Exports at `POST /importers/core/pulp/<uuid>/imports/`.
    [#6137](https://pulp.plan.io/issues/6137)
-   Added the new setting CHUNKED_UPLOAD_DIR for configuring a default directory used for uploads
    [#6253](https://pulp.plan.io/issues/6253)
-   Exported SigningService in plugin api
    [#6256](https://pulp.plan.io/issues/6256)
-   Added name filter for SigningService
    [#6257](https://pulp.plan.io/issues/6257)
-   Relationships between tasks that spawn other tasks will be shown in the Task API.
    [#6282](https://pulp.plan.io/issues/6282)
-   Added a new APIs for PulpExporters and Exports at `/exporters/core/pulp/` and
    `/exporters/core/pulp/<uuid>/exports/`.
    [#6328](https://pulp.plan.io/issues/6328)
-   Added PulpImporter API at `/pulp/api/v3/importers/core/pulp/`. PulpImporters are used for
    importing exports from Pulp.
    [#6329](https://pulp.plan.io/issues/6329)
-   Added an `ALLOWED_EXPORT_PATHS` setting with list of filesystem locations that exporters can export to.
    [#6335](https://pulp.plan.io/issues/6335)
-   Indroduced ordering keyword, which orders the results by specified field.
    Pulp objects will by default be ordered by pulp_created if that field exists.
    [#6347](https://pulp.plan.io/issues/6347)
-   Task Groups added -- Plugin writers can spawn tasks as part of a "task group",
    which facilitates easier monitoring of related tasks.
    [#6414](https://pulp.plan.io/issues/6414)

#### Bugfixes

-   Improved the overall performance while syncing very large repositories
    [#6121](https://pulp.plan.io/issues/6121)
-   Made chunked uploads to be stored in a local file system instead of a default file storage
    [#6253](https://pulp.plan.io/issues/6253)
-   Fixed 500 error when calling modify on nonexistent repo.
    [#6284](https://pulp.plan.io/issues/6284)
-   Fixed bug where user could delete repository version 0 but not recreate it by preventing users from
    deleting repo version 0.
    [#6308](https://pulp.plan.io/issues/6308)
-   Fixed non unique content units on content list
    [#6347](https://pulp.plan.io/issues/6347)
-   Properly sort endpoints during generation of the OpenAPI schema.
    [#6372](https://pulp.plan.io/issues/6372)
-   Improved resync performance by up to 2x with a change to the content stages.
    [#6373](https://pulp.plan.io/issues/6373)
-   Fixed bug where 'secret' fields would be set to the sha256 checksum of the original value.
    [#6402](https://pulp.plan.io/issues/6402)
-   Fixed pulp containers not allowing commands to be run via absolute path.
    [#6420](https://pulp.plan.io/issues/6420)

#### Improved Documentation

-   Documented bindings installation for a dev environment
    [#6221](https://pulp.plan.io/issues/6221)
-   Added documentation for how to write changelog messages.
    [#6336](https://pulp.plan.io/issues/6336)
-   Cleared up a line in the database settings documentation that was ambiguous.
    [#6384](https://pulp.plan.io/issues/6384)
-   Updated docs to reflect that S3/Azure are supported and no longer tech preview.
    [#6443](https://pulp.plan.io/issues/6443)
-   Added tech preview note to docs for importers/exporters.
    [#6454](https://pulp.plan.io/issues/6454)
-   Renamed ansible-pulp to pulp_installer (to avoid confusion with pulp-ansible)
    [#6461](https://pulp.plan.io/issues/6461)
-   Fixed missing terms in documentation.
    [#6485](https://pulp.plan.io/issues/6485)

#### Deprecations and Removals

-   Changing STATIC_URL from /static/ to /assets/ for avoiding conflicts
    [#6128](https://pulp.plan.io/issues/6128)
-   Exporting now requires the configuration of the `ALLOWED_EXPORT_PATHS` setting. Without this
    configuration, Pulp will not export content to the filesystem.
    [#6335](https://pulp.plan.io/issues/6335)

#### Misc

-   [#5826](https://pulp.plan.io/issues/5826), [#6155](https://pulp.plan.io/issues/6155), [#6357](https://pulp.plan.io/issues/6357), [#6450](https://pulp.plan.io/issues/6450), [#6451](https://pulp.plan.io/issues/6451), [#6481](https://pulp.plan.io/issues/6481), [#6482](https://pulp.plan.io/issues/6482)

### Plugin API

#### Features

-   Tasks can now be spawned from inside other tasks, and these relationships can be explored
    via the "parent_task" field and "child_tasks" related name on the Task model.
    [#6282](https://pulp.plan.io/issues/6282)
-   Added a new Export model, serializer, and viewset.
    [#6328](https://pulp.plan.io/issues/6328)
-   Added models Import and Importer (as well as serializers and viewsets) that can be used for
    importing data into Pulp.
    [#6329](https://pulp.plan.io/issues/6329)
-   NamedModelViewSet uses a default ordering of -pulp_created using the StableOrderingFilter.
    Users using the ordering keyword will be the primary ordering used when specified.
    [#6347](https://pulp.plan.io/issues/6347)
-   Added two new repo validation methods (validate_repo_version and validate_duplicate_content).
    [#6362](https://pulp.plan.io/issues/6362)
-   enqueue_with_reservation() provides a new optional argument for "task_group".
    [#6414](https://pulp.plan.io/issues/6414)

#### Bugfixes

-   Fixed bug where RepositoryVersion.artifacts returns None.
    [#6439](https://pulp.plan.io/issues/6439)

#### Improved Documentation

-   Add plugin writer docs on adding MANIFEST.in entry to include `webserver_snippets` in the Python
    package.
    [#6249](https://pulp.plan.io/issues/6249)
-   Updated the metadata signing plugin writers documentation.
    [#6342](https://pulp.plan.io/issues/6342)

#### Deprecations and Removals

-   Changed master model from FileSystemExporter to Exporter. Plugins will still need to extend
    FileSystemExporter but the master table is now core_exporter. This will require that plugins drop
    and recreate their filesystem exporter tables.
    [#6328](https://pulp.plan.io/issues/6328)
-   RepositoryVersion add_content no longer checks for duplicate content.
    [#6362](https://pulp.plan.io/issues/6362)

#### Misc

-   [#6342](https://pulp.plan.io/issues/6342)

---

## 3.2.1 (2020-03-17) {: #3.2.1 }

### REST API

#### Misc

-   [#6244](https://pulp.plan.io/issues/6244)

### Plugin API

No significant changes.

---

## 3.2.0 (2020-02-26) {: #3.2.0 }

### REST API

#### Features

-   Added a `pulpcore-manager` script that is `django-admin` only configured with
    `DJANGO_SETTINGS_MODULE="pulpcore.app.settings"`. This can be used for things like applying
    database migrations or collecting static media.
    [#5859](https://pulp.plan.io/issues/5859)
-   Resolve DNS faster with aiodns
    [#6190](https://pulp.plan.io/issues/6190)

#### Bugfixes

-   Considering base version when removing duplicates
    [#5964](https://pulp.plan.io/issues/5964)
-   Renames /var/lib/pulp/static/ to /var/lib/pulp/assets/.
    [#5995](https://pulp.plan.io/issues/5995)
-   Disabled the trimming of leading and trailing whitespace characters which led to a situation where
    a hash of a certificate computed in Pulp was not equal to a hash generated locally
    [#6025](https://pulp.plan.io/issues/6025)
-   Repository.latest_version() considering deleted versions
    [#6147](https://pulp.plan.io/issues/6147)
-   Stopped HttpDownloader sending basic auth credentials to redirect location if domains don't match.
    [#6227](https://pulp.plan.io/issues/6227)

#### Improved Documentation

-   Updated docs to suggest to use `pulpcore-manager` command instead of `django-admin` directly.
    [#5859](https://pulp.plan.io/issues/5859)

#### Deprecations and Removals

-   Renaming Repository.last_version to Repository.next_version
    [#6147](https://pulp.plan.io/issues/6147)

#### Misc

-   [#6038](https://pulp.plan.io/issues/6038), [#6202](https://pulp.plan.io/issues/6202)

### Plugin API

#### Features

-   Adding not equal lookup to model field filters.
    [#5868](https://pulp.plan.io/issues/5868)

#### Improved Documentation

-   Adds plugin writer docs on adding custom url routes and having the installer configure the reverse
    proxy to route them.
    [#6209](https://pulp.plan.io/issues/6209)

---

## 3.1.1 (2020-02-17) {: #3.1.1 }

### REST API

#### Bugfixes

-   Content with duplicate repo_key_fields raises an error
    [#5567](https://pulp.plan.io/issues/5567)
-   Resolve content app errors `django.db.utils.InterfaceError: connection already closed`.
    [#6045](https://pulp.plan.io/issues/6045)
-   Fix a bug that could cause an inability to detect an invalid signing script during the validation
    [#6077](https://pulp.plan.io/issues/6077)
-   Fixing broken S3 redirect
    [#6154](https://pulp.plan.io/issues/6154)
-   Pin idna==2.8 to avoid a version conflict caused by the idna 2.9 release.
    #6169 <<https://pulp.plan.io/issues/6169>>`__

### Plugin API

#### Features

-   A new method `_reset_db_connection` has been added to `content.Handler`. It can be called before
    accessing the db to ensure that the db connection is alive.
    [#6045](https://pulp.plan.io/issues/6045)

---

## 3.1.0 (2020-01-30) {: #3.1.0 }

### REST API

#### Features

-   Allow administrators to add a signing service
    [#5943](https://pulp.plan.io/issues/5943)
-   Adds `pulpcore.app.authentication.PulpDoNotCreateUsersRemoteUserBackend` which can be used to
    verify authentication in the webserver, but will not automatically create users like
    `django.contrib.auth.backends.RemoteUserBackend` does.
    [#5949](https://pulp.plan.io/issues/5949)
-   Allow Azure blob storage to be used as DEFAULT_FILE_STORAGE for Pulp
    [#5954](https://pulp.plan.io/issues/5954)
-   Allow to filter publications by `repository_version` and `pulp_created`
    [#5968](https://pulp.plan.io/issues/5968)
-   Adds the `ALLOWED_IMPORT_PATHS` setting which can specify the file path prefix that `file:///`
    remote paths can import from.
    [#5974](https://pulp.plan.io/issues/5974)
-   Allow the same artifact to be published at multiple relative paths in the same publication.
    [#6037](https://pulp.plan.io/issues/6037)

#### Bugfixes

-   Files stored on S3 and Azure now download with the correct filename.
    [#4733](https://pulp.plan.io/issues/4733)
-   Adds operation_summary to the OpenAPI schema definition of repository modify operation
    [#6002](https://pulp.plan.io/issues/6002)
-   Temporarily pinned redis-py version to avoid a task locking issue.
    [#6038](https://pulp.plan.io/issues/6038)

#### Improved Documentation

-   Rewrote the Authentication page for more clarity on how to configure Pulp's authentication.
    [#5949](https://pulp.plan.io/issues/5949)

#### Deprecations and Removals

-   Removed the `django.contrib.auth.backends.RemoteUserBackend` as a default configured backend in
    `settings.AUTHENTICATION_BACKENDS`. Also removed
    `pulpcore.app.authentication.PulpRemoteUserAuthentication` from the DRF configuration of
    `DEFAULT_AUTHENTICATION_CLASSES`.
    [#5949](https://pulp.plan.io/issues/5949)
-   Importing from <file:///> now requires the configuration of the `ALLOWED_IMPORT_PATHS` setting.
    Without this configuration, Pulp will not import content from `file:///` locations correctly.
    [#5974](https://pulp.plan.io/issues/5974)

#### Misc

-   [#5795](https://pulp.plan.io/issues/5795)

### Plugin API

#### Features

-   Allow awaiting for resolution on DeclarativeContent.
    [#5668](https://pulp.plan.io/issues/5668)
-   Add a previous() method to RepositoryVersion.
    [#5734](https://pulp.plan.io/issues/5734)
-   Enable plugin writers to sign selected content with signing scripts provided by administrators
    [#5946](https://pulp.plan.io/issues/5946)
-   Add a batching content iterator `content_batch_qs()` to `RepositoryVersion`.
    [#6024](https://pulp.plan.io/issues/6024)

#### Deprecations and Removals

-   The `` `Handler._handle_file_response` has been removed. It was renamed to ``_serve_content_artifact`` and has the following signature:

        def _serve_content_artifact(self, content_artifact, headers):

    [#4733](https://pulp.plan.io/issues/4733)

-   Remove get_or_create_future and does_batch from DeclarativeContent. Replaced by awaiting for
    resolution on the DeclarativeContent itself.
    [#5668](https://pulp.plan.io/issues/5668)

---

## 3.0.1 (2020-01-15) {: #3.0.1 }

### REST API

#### Bugfixes

-   Fix bug where content shows as being added and removed in the same version.
    [#5707](https://pulp.plan.io/issues/5707)
-   Fix bug where calling Repository new_version() outside of task raises exception.
    [#5894](https://pulp.plan.io/issues/5894)
-   Adjusts setup.py classifier to show 3.0 as Production/Stable.
    [#5896](https://pulp.plan.io/issues/5896)
-   Importing from <file:///> paths no longer destroys the source repository.
    [#5941](https://pulp.plan.io/issues/5941)
-   Webserver auth no longer prompts for csrf incorrectly.
    [#5955](https://pulp.plan.io/issues/5955)

#### Deprecations and Removals

-   Removed `pulpcore.app.middleware.PulpRemoteUserMiddleware` from the default middleware section.
    Also replaced `rest_framework.authentication.RemoteUserAuthentication` with
    `pulpcore.app.authentication.PulpRemoteUserAuthentication` in the Django Rest Framework portion
    of the config.
    [#5955](https://pulp.plan.io/issues/5955)

#### Misc

-   [#5833](https://pulp.plan.io/issues/5833), [#5867](https://pulp.plan.io/issues/5867), [#5870](https://pulp.plan.io/issues/5870), [#5873](https://pulp.plan.io/issues/5873)

### Plugin API

#### Features

-   Added an optional parameter base_version to RepositoryVersion add() and removed() methods.
    [#5706](https://pulp.plan.io/issues/5706)

#### Deprecations and Removals

-   Saving an Artifact from a source that is outside of settings.MEDIA_ROOT will copy the file instead
    of moving the file as it did in previous versions. This causes data imported from <file:///> sources
    to be left in tact.
    [#5941](https://pulp.plan.io/issues/5941)

---

## 3.0.0 (2019-12-11) {: #3.0.0 }

!!! note
    Task names, e.g. `pulpcore.app.tasks.orphan.orphan_cleanup`, are subject to change in future
    releases 3.y releases. These are represented in the Task API as the "name" attribute. Please
    check future release notes to see when these names will be considered stable. Otherwise, the
    REST API pulpcore provides is considered semantically versioned.

### REST API

#### Features

-   Pulp will do validation that a new repository version contains only content which is supported by
    the Repository type. Using the same a-priori knowledge of content types, increase performance of
    duplicate removal.
    [#5701](https://pulp.plan.io/issues/5701)

#### Bugfixes

-   Improve speed and memory performance.
    [#5688](https://pulp.plan.io/issues/5688)

#### Improved Documentation

-   Fix an incorrect license claim in the docs. Pulp is GPLv2+.
    [#4592](https://pulp.plan.io/issues/4592)
-   Labeling 3.0 features as tech preview.
    [#5563](https://pulp.plan.io/issues/5563)
-   Simplified docs index page.
    [#5714](https://pulp.plan.io/issues/5714)
-   Add text to Promotion page.
    [#5721](https://pulp.plan.io/issues/5721)
-   Fixes and updates to the glossry page.
    [#5726](https://pulp.plan.io/issues/5726)

### Plugin API

#### Features

-   Added a new required field called CONTENT_TYPES to the Repository model.
    [#5701](https://pulp.plan.io/issues/5701)