Uploaded image for project: 'Dev - Nexus Repo'
  1. Dev - Nexus Repo
  2. NEXUS-34826

Upgrading to 3.41.0 does not generate sha256 for the existing assets for pypi hosted repositories

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Duplicate
    • Affects Version/s: 3.41.0
    • Fix Version/s: None
    • Component/s: PyPI
    • Labels:
    • Notability:
      3

      Description

      SYMPTOM:

      After upgrading from 3.38.0 to 3.41.0, newly uploaded assets into pypi hosted repository have the sha256 values in the Attributes section, however, this new attribute is not displayed for the assets which are already existed before upgrading.

      NOTE: This issue might be only for PostgreSQL/H2 database.

      REPRODUCE STEPS

      1. Install Nexus 3.38.0 with PostgreSQL
      2. Create pypi-hosted repository
      3. With the twine command, upload some dummy component into the pypi-hosted repository, and confirm no sha256 attribute (using "Upload" menu seems to create this sha256 attribute)
      4. Upgrade to 3.41.0, and do not see any sha256 attribute for this dummy component's assets.

      EXPECTED BEHAVIOUR:

      As per the release note below, Nexus users would expect all existing assets would have sha256 attributes.

      As recommended in PEP 503, hosted PyPI repositories now provide SHA256 hashes instead of MD5 in the /simple web interface's href attributes that link to package files being served.

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              Unassigned Unassigned
              Reporter:
              hosako Hajime Osako
              Last Updated By:
              Dawid Sawa Dawid Sawa
              Votes:
              1 Vote for this issue
              Watchers:
              5 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:
                Date of First Response:

                  tigCommentSecurity.panel-title