3.23.0

3.23.0 (2026-01-06) {: #3.23.0 }

Features {: #3.23.0-feature }

• Added exposure of metadata file to Simple API (PEP 658)
  #1047
• Bump pulpcore upperbound to <3.115.

Bugfixes {: #3.23.0-bugfix }

• Fixed edge-case migration error in 0017_pythonpackagecontent_size.
  #1042
• Added missing Provenance content package and sha256 filters.

---

3.22.2

3.22.2 (2026-01-06) {: #3.22.2 }

Bugfixes {: #3.22.2-bugfix }

• Added missing Provenance content package and sha256 filters.

---

3.22.1

3.22.1 (2025-12-10) {: #3.22.1 }

Bugfixes {: #3.22.1-bugfix }

• Fixed edge-case migration error in 0017_pythonpackagecontent_size.
  #1042

---

3.22.0

3.22.0 (2025-12-09) {: #3.22.0 }

Features {: #3.22.0-feature }

• Added attestations field to package upload that will create a PEP 740 Provenance object for that content.
  #984
• Added the ability to upload PEP 740 Provenance files to repositories.

Bugfixes {: #3.22.0-bugfix }

• Added some sanity validation checks to twine upload endpoint.

---

3.21.0

3.21.0 (2025-11-18) {: #3.21.0 }

Features {: #3.21.0-feature }

• Added ability to serve a specific repository version of a PyPI index.
  #982
• Implemented PEP 700 support, adding versions, size and upload-time to the Simple JSON API.
  #996
• Added the new /scan endpoint to the RepositoryVersion viewset to generate vulnerability reports.
  #1012

Bugfixes {: #3.21.0-bugfix }

• Fixed pull-through caching not checking the repository if package was not present on remote.
  #1004

---

3.20.1

3.20.1 (2025-11-18) {: #3.20.1 }

Bugfixes {: #3.20.1-bugfix }

• Fixed pull-through caching not checking the repository if package was not present on remote.
  #1004

---

3.12.8

3.12.8 (2025-11-18) {: #3.12.8 }

No significant changes.

---

3.11.7

3.11.7 (2025-11-18) {: #3.11.7 }

No significant changes.

---

3.10.2

3.10.2 (2025-11-18)

No significant changes.

---

3.20.0

3.20.0 (2025-11-07) {: #3.20.0 }

Features {: #3.20.0-feature }

• Added JSON-based Simple API (PEP 691).
  #625
• Updated tasks to always return JSON-serializable value.
  #972

Bugfixes {: #3.20.0-bugfix }

• Fixed publication error when package's dists contain differing versions of its name.
  #907

---