warehouse

warehouse copied to clipboard

`502: Bad Gateway` on upload when `Provides-Dist` metadata is invalid instead of error messages

2

I am getting bad gateway errors the past 14 hours, only from my GitHub actions runs. Wondering if this could be related to the cause of #9151 since everything else...

rjdbcm

**Describe the bug** The recovery codes password confirm keeps looping to itself https://github.com/user-attachments/assets/f0eecdfb-a90f-4dcf-b4fc-653fd323dd33 **Expected behavior** Should generate recovery codes **To Reproduce** https://pypi.org/manage/account/recovery-codes/generate **Additional context** I have the same name on...

WiktorProj

Avoid n+1 queries on Release.description

1

@miketheman noticed that the file upload view was executing a query for every single existing version that the uploading project has ever released. For projects that have been around awhile,...

dstufft

Translations update from [Hosted Weblate](https://hosted.weblate.org) for [pypa/warehouse](https://hosted.weblate.org/projects/pypa/warehouse/). Current translation status: 

weblate

Fixes https://github.com/pypi/warehouse/issues/16194 This PR uses a Redis cache to keep JWT token identifiers in memory until their expiration. It then prevents reusing an already used JWT to mint a new...

DarkaMaul

"Start Account Recovery" Process Doesn't Update to Alternate Email Address

2

**What's the problem this feature will solve?** Currently, when a user with existing projects requests an email update/change, as part of the account verification process, the "start account recovery" function...

Thespi-Brain

Improve PendingPublisher UX when project already exists

10

Currently, when an owner attempts to create a "Pending Publisher" for a project that already exists and that they already own, they get the same error as when they _don't_...

songololo

Store attestations for PEP740

1

# Context This PR follows #16063 and https://github.com/pypi/warehouse/pull/15952 and build on them. After verifying attestations, this PR introduces their storage and retrieval when needed. # Main changes ## At upload...

DarkaMaul

Fixed #16190 -- Added missing JSON API reference information on metad…

1

…ata 2.2 and 2.3 fields

samjove

Bumps [ddtrace](https://github.com/DataDog/dd-trace-py) from 2.10.3 to 2.10.4. Release notes Sourced from ddtrace's releases. 2.10.4 Bug Fixes SSI: This fixes incorrect file permissions on lib-injection images for 2.10.x releases. profiling: show lock...

dependabot[bot]