Project

Profile

Help

Task #5196

Updated by daviddavis over 4 years ago

Recently, Pulp 3 package installs were broken by a new version of DRF which necessitated a new release of pulpcore (RC4)[0]. Our releases are fragile and unstable because they don't pin versions of dependencies. 

 Instead, pin pulpcore's dependencies to specific y release versions and use dependabot[1] to notify us of new updates for pulpcore dependencies. 

 This was the outcome of a discussion on pulp-dev[2]. 

 .. [0] https://www.redhat.com/archives/pulp-dev/2019-July/msg00076.html 
 .. [1] https://dependabot.com/ 
 .. [2] https://www.redhat.com/archives/pulp-dev/2019-July/msg00088.html

Back