Skip to content

[PR #1273/4acf7775 backport][3.27] Fix provenance sync for Pulp User publishers#1274

Merged
gerrod3 merged 2 commits into
3.27from
patchback/backports/3.27/4acf7775bac47df59cf0a64e64912e5799e2c7a0/pr-1273
Jul 15, 2026
Merged

[PR #1273/4acf7775 backport][3.27] Fix provenance sync for Pulp User publishers#1274
gerrod3 merged 2 commits into
3.27from
patchback/backports/3.27/4acf7775bac47df59cf0a64e64912e5799e2c7a0/pr-1273

Conversation

@patchback

@patchback patchback Bot commented Jul 14, 2026

Copy link
Copy Markdown

This is a backport of PR #1273 as merged into main (4acf777).

Summary

  • Import Provenance from pulp_python.app.provenance in the sync task instead of pypi_attestations, so sync accepts attestations with Pulp User publishers created during upload
  • Add a functional test that uploads attestations to one repository and syncs provenance from that distribution into another

Test plan

  • Added test_sync_pulp_created_provenance functional test
  • oci-env test functional -p python pulp_python/tests/functional/api/test_attestations.py::test_sync_pulp_created_provenance -v

Assisted-by: Cursor

Made with Cursor

* Fix provenance sync to use Pulp's extended Provenance model

Sync was validating provenance with pypi_attestations.Provenance, which
rejects Pulp User publishers created during upload. Use the extended model
from pulp_python.app.provenance instead.

(cherry picked from commit 4acf777)
gerrod3
gerrod3 previously approved these changes Jul 14, 2026
@gerrod3 gerrod3 enabled auto-merge (rebase) July 14, 2026 19:56
@github-actions github-actions Bot added multi-commit Add to bypass single commit lint check no-changelog labels Jul 14, 2026
Comment thread pulp_python/tests/functional/api/test_pypi_apis.py
Comment thread pulp_python/tests/functional/api/test_crud_content_unit.py Outdated
Run the brittle pypi JSON assertions outside the parallel suite with
delete_orphans_pre so orphaned shelf-reader content cannot cause flaky
failures.

Assisted-by: Cursor
Co-authored-by: Cursor <cursoragent@cursor.com>
@gerrod3 gerrod3 force-pushed the patchback/backports/3.27/4acf7775bac47df59cf0a64e64912e5799e2c7a0/pr-1273 branch from 1e3c506 to 48aa276 Compare July 15, 2026 14:51
@gerrod3 gerrod3 merged commit e5042cb into 3.27 Jul 15, 2026
14 checks passed
@gerrod3 gerrod3 deleted the patchback/backports/3.27/4acf7775bac47df59cf0a64e64912e5799e2c7a0/pr-1273 branch July 15, 2026 17:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

multi-commit Add to bypass single commit lint check no-changelog no-issue

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants