2.26.15

2.26.15 (2026-06-02)

Note

Official changes are available on Pulp docs

Bugfixes

• Readded backwards compatibility for manifests that haven't been migrated to new data field. Sync will try to update them to the new format and repair manifests that are missing their artifact, but it is recommended that you run the pulpcore-manager container-handle-image-data command to fix all manifests at once. The command has been updated to report broken manifests by repository. Broken manifests in pushed repositories need to be deleted and re-pushed.

---

2.28.0

2.28.0 (2026-05-29)

Note

Official changes are available on Pulp docs

Features

• Added support for syncing manifests by digest through new includes field on the remote.
  #1909
• Manifest data is now served directly from the registry API instead of issuing a redirect to the content app.
  #1974
• Added pulp_labels field to ContainerNamespace for labeling and organizing namespaces
  #2139
• Add a signature fingerprint to the ManifestSignature model for improved forwards compatibility with OpenPGP v6
  #2261
• When token auth is disabled, container registry API views now include
  DEFAULT_AUTHENTICATION_CLASSES alongside RegistryAuthentication, allowing
  deployments to use custom authentication backends.
  #2362

Bugfixes

• Fix "Manifest matching query does not exist" error on container repo import.
  #2041

• Altered several id-fields and their related sequences.

  INTEGER AutoField sequences can "run out" on large/old instances, update to BIGINT.
  #2080

• Fixed syncing of cosign signatures, attestations, and SBOMs (stored as companion tags) being silently skipped when include_tags was set on the remote.
  #2096

• Fixed the status code on successful PATCH on blob partial updates to be 202
  as requested by the OCI spec.
  #2199

• Made plaform optional for manifests in the JSON schema for vnd.oci.image.index.v1+json.
  #2200

• Don't blow up on encountering PQC signatures.
  #2237

• Changed the use of raw hashlib to pulp_hashlib to prevent UnsupportedDigestmodError on FIPS-enabled systems.
  #2256

• Fixed OS and architecture filters being silently ignored when filtering manifest lists in the flatpak index.

• Fixed a cache key collision in the flatpak static index that could serve incorrect results across domains.

• Fixed a serialization issue with the FlatpakIndex cache.

• Fixed flatpak index response to include the domain prefix in image names when domains are enabled.

• Fixed memory usage when pushing large images with monolithic upload.

• Fixed the registry host in the flatpak index response when CONTENT_ORIGIN=None.

• Support "atomic" replications in pulpcore 3.107

• Take advantage of pulpcore's ResourceBudget feature which enables the sync pipeline to keep disk usage down without an excessive performance hit.

Deprecations and Removals

• Renamed include_tags and exclude_tags to includes and excludes on the remote.

---

2.27.9

2.27.9 (2026-05-14)

Note

Official changes are available on Pulp docs

Bugfixes

• Fixed syncing of cosign signatures, attestations, and SBOMs (stored as companion tags) being silently skipped when include_tags was set on the remote.
  #2096

---

2.26.14

2.26.14 (2026-05-14)

Note

Official changes are available on Pulp docs

Bugfixes

• Fixed syncing of cosign signatures, attestations, and SBOMs (stored as companion tags) being silently skipped when include_tags was set on the remote.
  #2096

---

2.24.11

2.24.11 (2026-04-29)

Note

Official changes are available on Pulp docs

Bugfixes

• Fixed OS and architecture filters being silently ignored when filtering manifest lists in the flatpak index.
• Fixed a cache key collision in the flatpak static index that could serve incorrect results across domains.
• Fixed a serialization issue with the FlatpakIndex cache.
• Fixed the registry host in the flatpak index response when CONTENT_ORIGIN=None.

---

2.27.8

2.27.8 (2026-04-28)

Note

Official changes are available on Pulp docs

Bugfixes

• Fixed OS and architecture filters being silently ignored when filtering manifest lists in the flatpak index.
• Fixed a cache key collision in the flatpak static index that could serve incorrect results across domains.
• Fixed a serialization issue with the FlatpakIndex cache.
• Fixed flatpak index response to include the domain prefix in image names when domains are enabled.
• Fixed the registry host in the flatpak index response when CONTENT_ORIGIN=None.

---

2.26.13

2.26.13 (2026-04-28)

Note

Official changes are available on Pulp docs

Bugfixes

• Fixed OS and architecture filters being silently ignored when filtering manifest lists in the flatpak index.
• Fixed a cache key collision in the flatpak static index that could serve incorrect results across domains.
• Fixed a serialization issue with the FlatpakIndex cache.
• Fixed flatpak index response to include the domain prefix in image names when domains are enabled.
• Fixed the registry host in the flatpak index response when CONTENT_ORIGIN=None.

---

2.27.7

2.27.7 (2026-04-24)

Note

Official changes are available on Pulp docs

No significant changes.

---

2.26.12

2.26.12 (2026-04-24)

Note

Official changes are available on Pulp docs

No significant changes.

---

2.24.10

2.24.10 (2026-04-24)

Note

Official changes are available on Pulp docs

No significant changes.

---