Skip to content

2.28.0

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 29 May 18:16
· 3 commits to main since this release
2.28.0
802d079

2.28.0 (2026-05-29)

Note

Official changes are available on Pulp docs

Features

  • Added support for syncing manifests by digest through new includes field on the remote.
    #1909
  • Manifest data is now served directly from the registry API instead of issuing a redirect to the content app.
    #1974
  • Added pulp_labels field to ContainerNamespace for labeling and organizing namespaces
    #2139
  • Add a signature fingerprint to the ManifestSignature model for improved forwards compatibility with OpenPGP v6
    #2261
  • When token auth is disabled, container registry API views now include
    DEFAULT_AUTHENTICATION_CLASSES alongside RegistryAuthentication, allowing
    deployments to use custom authentication backends.
    #2362

Bugfixes

  • Fix "Manifest matching query does not exist" error on container repo import.
    #2041

  • Altered several id-fields and their related sequences.

    INTEGER AutoField sequences can "run out" on large/old instances, update to BIGINT.
    #2080

  • Fixed syncing of cosign signatures, attestations, and SBOMs (stored as companion tags) being silently skipped when include_tags was set on the remote.
    #2096

  • Fixed the status code on successful PATCH on blob partial updates to be 202
    as requested by the OCI spec.
    #2199

  • Made plaform optional for manifests in the JSON schema for vnd.oci.image.index.v1+json.
    #2200

  • Don't blow up on encountering PQC signatures.
    #2237

  • Changed the use of raw hashlib to pulp_hashlib to prevent UnsupportedDigestmodError on FIPS-enabled systems.
    #2256

  • Fixed OS and architecture filters being silently ignored when filtering manifest lists in the flatpak index.

  • Fixed a cache key collision in the flatpak static index that could serve incorrect results across domains.

  • Fixed a serialization issue with the FlatpakIndex cache.

  • Fixed flatpak index response to include the domain prefix in image names when domains are enabled.

  • Fixed memory usage when pushing large images with monolithic upload.

  • Fixed the registry host in the flatpak index response when CONTENT_ORIGIN=None.

  • Support "atomic" replications in pulpcore 3.107

  • Take advantage of pulpcore's ResourceBudget feature which enables the sync pipeline to keep disk usage down without an excessive performance hit.

Deprecations and Removals

  • Renamed include_tags and exclude_tags to includes and excludes on the remote.
Assets 2
Loading