Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package python-devpi-server for
openSUSE:Factory checked in at 2026-05-17 18:57:09
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/python-devpi-server (Old)
and /work/SRC/openSUSE:Factory/.python-devpi-server.new.1966 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python-devpi-server"
Sun May 17 18:57:09 2026 rev:21 rq:1353590 version:6.20.1
Changes:
--------
--- /work/SRC/openSUSE:Factory/python-devpi-server/python-devpi-server.changes
2026-05-04 12:58:02.320645210 +0200
+++
/work/SRC/openSUSE:Factory/.python-devpi-server.new.1966/python-devpi-server.changes
2026-05-17 18:57:28.293886167 +0200
@@ -1,0 +2,7 @@
+Sun May 17 13:54:43 UTC 2026 - Dirk Müller <[email protected]>
+
+- update to 6.20.1:
+ * Pass through request headers when streaming .metadata from
+ mirror. Refs #1018
+
+-------------------------------------------------------------------
Old:
----
devpi_server-6.20.0.tar.gz
New:
----
devpi_server-6.20.1.tar.gz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ python-devpi-server.spec ++++++
--- /var/tmp/diff_new_pack.M3egEZ/_old 2026-05-17 18:57:28.785906242 +0200
+++ /var/tmp/diff_new_pack.M3egEZ/_new 2026-05-17 18:57:28.785906242 +0200
@@ -26,7 +26,7 @@
%{?sle15_python_module_pythons}
Name: python-devpi-server
-Version: 6.20.0
+Version: 6.20.1
Release: 0
Summary: Private PyPI caching server
License: MIT
++++++ devpi_server-6.20.0.tar.gz -> devpi_server-6.20.1.tar.gz ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/devpi_server-6.20.0/CHANGELOG
new/devpi_server-6.20.1/CHANGELOG
--- old/devpi_server-6.20.0/CHANGELOG 2026-04-30 11:01:49.000000000 +0200
+++ new/devpi_server-6.20.1/CHANGELOG 2026-05-11 08:58:04.000000000 +0200
@@ -2,6 +2,15 @@
.. towncrier release notes start
+6.20.1 (2026-05-11)
+===================
+
+Bug Fixes
+---------
+
+- Pass through request headers when streaming .metadata from mirror. Refs #1018
+
+
6.20.0 (2026-04-30)
===================
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/devpi_server-6.20.0/CHANGELOG.short.rst
new/devpi_server-6.20.1/CHANGELOG.short.rst
--- old/devpi_server-6.20.0/CHANGELOG.short.rst 2026-04-30 11:02:47.000000000
+0200
+++ new/devpi_server-6.20.1/CHANGELOG.short.rst 2026-05-11 08:58:56.000000000
+0200
@@ -9,6 +9,15 @@
.. towncrier release notes start
+6.20.1 (2026-05-11)
+===================
+
+Bug Fixes
+---------
+
+- Pass through request headers when streaming .metadata from mirror. Refs #1018
+
+
6.20.0 (2026-04-30)
===================
@@ -66,32 +75,3 @@
- Always allow replicas to access deleted releases to get the proper ``410
Gone`` instead of ``403 Forbidden`` when ``devpi-lockdown`` is in use.
-
-6.19.0 (2026-02-06)
-===================
-
-Features
---------
-
-- Add ``--autocreate-users`` server option.
- Automatically creates users that don't exist in devpi, but have successfully
authenticated via an authentication plugin.
- A typical example of when to enable this would be when authenticating via an
LDAP directory.
- Automatically created users do not have passwords, and have no password hash
to prevent local authentication.
-
-- Add ``replica-files-in-sync-at``, ``replica-init-queue-finished-at`` and
``replica-metadata-in-sync-at`` to status view, the existing
``replica-in-sync-at`` is now a combination of all three instead of just
metadata.
-
-- Warn when an unknown option is found in config file to detect typos. Be
aware that some commands don't use all the options, that is why this only warns
instead of exiting.
-
-- Add new ``devpiserver_user_created`` hook which can be used to create
default indexes or other setup for newly created users.
-
-Bug Fixes
----------
-
-- Fix ``+status`` json encoding errors by making sure the
``FatalResponse.url`` attribute is a string.
-
-- Ignore existing unknown index options from uninstalled plugins when patching
other options with ``+=`` and ``-=``.
-
-- Fix removal with ``-=`` of index options with default values from
``devpiserver_indexconfig_defaults`` hooks.
-
-- Fix #1110: a list for the ``listen`` option in a config file stopped working
in 6.18.0.
-
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/devpi_server-6.20.0/PKG-INFO
new/devpi_server-6.20.1/PKG-INFO
--- old/devpi_server-6.20.0/PKG-INFO 2026-04-30 11:02:47.852710000 +0200
+++ new/devpi_server-6.20.1/PKG-INFO 2026-05-11 08:58:56.883684600 +0200
@@ -1,6 +1,6 @@
Metadata-Version: 2.4
Name: devpi-server
-Version: 6.20.0
+Version: 6.20.1
Summary: devpi-server: backend for hosting private package indexes and PyPI
on-demand mirrors
Maintainer-email: Florian Schulze <[email protected]>
License-Expression: MIT
@@ -121,6 +121,15 @@
.. towncrier release notes start
+6.20.1 (2026-05-11)
+===================
+
+Bug Fixes
+---------
+
+- Pass through request headers when streaming .metadata from mirror. Refs #1018
+
+
6.20.0 (2026-04-30)
===================
@@ -178,32 +187,3 @@
- Always allow replicas to access deleted releases to get the proper ``410
Gone`` instead of ``403 Forbidden`` when ``devpi-lockdown`` is in use.
-
-6.19.0 (2026-02-06)
-===================
-
-Features
---------
-
-- Add ``--autocreate-users`` server option.
- Automatically creates users that don't exist in devpi, but have successfully
authenticated via an authentication plugin.
- A typical example of when to enable this would be when authenticating via an
LDAP directory.
- Automatically created users do not have passwords, and have no password hash
to prevent local authentication.
-
-- Add ``replica-files-in-sync-at``, ``replica-init-queue-finished-at`` and
``replica-metadata-in-sync-at`` to status view, the existing
``replica-in-sync-at`` is now a combination of all three instead of just
metadata.
-
-- Warn when an unknown option is found in config file to detect typos. Be
aware that some commands don't use all the options, that is why this only warns
instead of exiting.
-
-- Add new ``devpiserver_user_created`` hook which can be used to create
default indexes or other setup for newly created users.
-
-Bug Fixes
----------
-
-- Fix ``+status`` json encoding errors by making sure the
``FatalResponse.url`` attribute is a string.
-
-- Ignore existing unknown index options from uninstalled plugins when patching
other options with ``+=`` and ``-=``.
-
-- Fix removal with ``-=`` of index options with default values from
``devpiserver_indexconfig_defaults`` hooks.
-
-- Fix #1110: a list for the ``listen`` option in a config file stopped working
in 6.18.0.
-
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/devpi_server-6.20.0/devpi_server/__init__.py
new/devpi_server-6.20.1/devpi_server/__init__.py
--- old/devpi_server-6.20.0/devpi_server/__init__.py 2026-04-30
11:01:49.000000000 +0200
+++ new/devpi_server-6.20.1/devpi_server/__init__.py 2026-05-11
08:58:04.000000000 +0200
@@ -1 +1 @@
-__version__ = "6.20.0"
+__version__ = "6.20.1"
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/devpi_server-6.20.0/devpi_server/views.py
new/devpi_server-6.20.1/devpi_server/views.py
--- old/devpi_server-6.20.0/devpi_server/views.py 2026-04-30
11:01:49.000000000 +0200
+++ new/devpi_server-6.20.1/devpi_server/views.py 2026-05-11
08:58:04.000000000 +0200
@@ -20,6 +20,7 @@
from .model import ReadonlyIndex
from .model import RemoveValue
from .normalized import normalize_name
+from .proxy import clean_request_headers
from .proxy import clean_response_headers
from .readonly import get_mutable_deepcopy
from collections import defaultdict
@@ -1585,7 +1586,9 @@
return apireturn(404, "mirror_provides_core_metadata disabled")
url = url.replace(path=f"{url.path}.metadata")
try:
- app_iter = iter_stream_remote_file(stage, url)
+ app_iter = iter_stream_remote_file(
+ stage, url, clean_request_headers(request)
+ )
headers = next(app_iter)
except BadGateway as e:
if e.code == 404:
@@ -1901,9 +1904,12 @@
raise err
-def iter_stream_remote_file(stage, url):
+def iter_stream_remote_file(stage, url, headers):
with contextlib.ExitStack() as cstack:
- r = stage.http.stream(cstack, "GET", url, allow_redirects=True)
+ headers.pop("User-Agent", None)
+ r = stage.http.stream(
+ cstack, "GET", url, allow_redirects=True, extra_headers=headers
+ )
if r.status_code != 200:
r.close()
msg = f"error {r.status_code} getting {url}"
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/devpi_server-6.20.0/devpi_server.egg-info/PKG-INFO
new/devpi_server-6.20.1/devpi_server.egg-info/PKG-INFO
--- old/devpi_server-6.20.0/devpi_server.egg-info/PKG-INFO 2026-04-30
11:02:47.000000000 +0200
+++ new/devpi_server-6.20.1/devpi_server.egg-info/PKG-INFO 2026-05-11
08:58:56.000000000 +0200
@@ -1,6 +1,6 @@
Metadata-Version: 2.4
Name: devpi-server
-Version: 6.20.0
+Version: 6.20.1
Summary: devpi-server: backend for hosting private package indexes and PyPI
on-demand mirrors
Maintainer-email: Florian Schulze <[email protected]>
License-Expression: MIT
@@ -121,6 +121,15 @@
.. towncrier release notes start
+6.20.1 (2026-05-11)
+===================
+
+Bug Fixes
+---------
+
+- Pass through request headers when streaming .metadata from mirror. Refs #1018
+
+
6.20.0 (2026-04-30)
===================
@@ -178,32 +187,3 @@
- Always allow replicas to access deleted releases to get the proper ``410
Gone`` instead of ``403 Forbidden`` when ``devpi-lockdown`` is in use.
-
-6.19.0 (2026-02-06)
-===================
-
-Features
---------
-
-- Add ``--autocreate-users`` server option.
- Automatically creates users that don't exist in devpi, but have successfully
authenticated via an authentication plugin.
- A typical example of when to enable this would be when authenticating via an
LDAP directory.
- Automatically created users do not have passwords, and have no password hash
to prevent local authentication.
-
-- Add ``replica-files-in-sync-at``, ``replica-init-queue-finished-at`` and
``replica-metadata-in-sync-at`` to status view, the existing
``replica-in-sync-at`` is now a combination of all three instead of just
metadata.
-
-- Warn when an unknown option is found in config file to detect typos. Be
aware that some commands don't use all the options, that is why this only warns
instead of exiting.
-
-- Add new ``devpiserver_user_created`` hook which can be used to create
default indexes or other setup for newly created users.
-
-Bug Fixes
----------
-
-- Fix ``+status`` json encoding errors by making sure the
``FatalResponse.url`` attribute is a string.
-
-- Ignore existing unknown index options from uninstalled plugins when patching
other options with ``+=`` and ``-=``.
-
-- Fix removal with ``-=`` of index options with default values from
``devpiserver_indexconfig_defaults`` hooks.
-
-- Fix #1110: a list for the ``listen`` option in a config file stopped working
in 6.18.0.
-
