3.24.0

3.24.0 (2026-01-20) {: #3.24.0 }

Features {: #3.24.0-feature }

• Added core metadata to Simple API (PEP 714)
  #997
• Added data-requires-python to Simple HTML API.
  #1054

Bugfixes {: #3.24.0-bugfix }

• Fixed migration error in 0019_create_missing_metadata_artifacts.
  #1067

---

3.23.1

3.23.1 (2026-01-20) {: #3.23.1 }

Bugfixes {: #3.23.1-bugfix }

• Fixed migration error in 0019_create_missing_metadata_artifacts.
  #1067

---

3.23.0

3.23.0 (2026-01-06) {: #3.23.0 }

Features {: #3.23.0-feature }

• Added exposure of metadata file to Simple API (PEP 658)
  #1047
• Bump pulpcore upperbound to <3.115.

Bugfixes {: #3.23.0-bugfix }

• Fixed edge-case migration error in 0017_pythonpackagecontent_size.
  #1042
• Added missing Provenance content package and sha256 filters.

---

3.22.2

3.22.2 (2026-01-06) {: #3.22.2 }

Bugfixes {: #3.22.2-bugfix }

• Added missing Provenance content package and sha256 filters.

---

3.22.1

3.22.1 (2025-12-10) {: #3.22.1 }

Bugfixes {: #3.22.1-bugfix }

• Fixed edge-case migration error in 0017_pythonpackagecontent_size.
  #1042

---

3.22.0

3.22.0 (2025-12-09) {: #3.22.0 }

Features {: #3.22.0-feature }

• Added attestations field to package upload that will create a PEP 740 Provenance object for that content.
  #984
• Added the ability to upload PEP 740 Provenance files to repositories.

Bugfixes {: #3.22.0-bugfix }

• Added some sanity validation checks to twine upload endpoint.

---

3.21.0

3.21.0 (2025-11-18) {: #3.21.0 }

Features {: #3.21.0-feature }

• Added ability to serve a specific repository version of a PyPI index.
  #982
• Implemented PEP 700 support, adding versions, size and upload-time to the Simple JSON API.
  #996
• Added the new /scan endpoint to the RepositoryVersion viewset to generate vulnerability reports.
  #1012

Bugfixes {: #3.21.0-bugfix }

• Fixed pull-through caching not checking the repository if package was not present on remote.
  #1004

---

3.20.1

3.20.1 (2025-11-18) {: #3.20.1 }

Bugfixes {: #3.20.1-bugfix }

• Fixed pull-through caching not checking the repository if package was not present on remote.
  #1004

---

3.12.8

3.12.8 (2025-11-18) {: #3.12.8 }

No significant changes.

---

3.11.7

3.11.7 (2025-11-18) {: #3.11.7 }

No significant changes.

---