Task #5196
Updated by daviddavis over 5 years ago
Recently, Pulp 3 package installs were broken by a new version of DRF which necessitated a new release of pulpcore (RC4)[0]. Our releases are fragile and unstable because they don't pin versions of dependencies. Instead, pin pulpcore's dependencies to specific y release versions and use dependabot[1] to notify us of new updates for pulpcore dependencies. This was the outcome of a discussion on pulp-dev[2]. .. [0] https://www.redhat.com/archives/pulp-dev/2019-July/msg00076.html .. [1] https://dependabot.com/ .. [2] https://www.redhat.com/archives/pulp-dev/2019-July/msg00088.html