[noissue]: Update pulpcore requirement from <3.70,>=3.49.0 to >=3.49.0,<3.71

[dependabot]

Updates the requirements on pulpcore to permit the latest version.

Changelog

Sourced from pulpcore's changelog.

3.70.0 (2025-02-04) {: #3.70.0 }

REST API {: #3.70.0-rest-api }

Features {: #3.70.0-rest-api-feature }

• Allow CONTENT_ORIGIN to be None. When None, the base_url for Distributions is a relative path. #5931
• Added a login api endpoint to result in an authorization cookie from any other sort of feasible authentication. #5932
• Added the unblocked_at filter for Tasks API. #6165
• Added a check to the basic auth module to respect the X-Requested-With: "XMLHttpRequest" header. In return the signature of the WWW-Authenticate header is changed so browsers will not pop up a password dialog.

Bugfixes {: #3.70.0-rest-api-bugfix }

• Fixed replication failing when the upstream Pulp doesn't have all the same plugins as the downstream. #4509
• Added an extra check to the task unblocking logic to catch a rare case of stuck tasks in running, but never unblocked. Tasks in normal operation should never end in this state, but at least with a specific upgrade it can happen. #6225

Improved Documentation {: #3.70.0-rest-api-doc }

• Expanded docs on correlation id. #6248

Removals {: #3.70.0-rest-api-removal }

• Marked django's DEFAULT_FILE_STORAGE and STATIC_FILE_STORAGE settings to be removed in pulpcore 3.85. Users should upgrade to use the STORAGES setting instead.

  The django-upgrade tool can handle simple cases. If cloud storages are being used, refer to django-storages to adapt their specific storage options. E.g:

  • https://django-storages.readthedocs.io/en/latest/backends/amazon-S3.html
  • https://django-storages.readthedocs.io/en/latest/backends/azure.html #5404

• Updated the OpenAPI generator version used to generate python bindings to 7.10.0. This involves stricter client side validation of api calls when using the bindings.

Plugin API {: #3.70.0-plugin-api }

Features {: #3.70.0-plugin-api-feature }

• Modified the artifact_url method from ArtifactDistribution model to return a relative URL

... (truncated)

Commits

• ac15780 Release 3.70.0
• 21f2c21 Expand docs on correlation id
• 6e333a3 fix minor documentation typo
• fd6c749 Update the tests for CONTENT_ORIGIN being optional
• 115e6c5 Makes CONTENT_ORIGIN not a required setting
• 30b832b Update Changelog
• c031e25 Update gitleaks to ignore example-keys.
• f72af09 Fix replica failing when upstream is missing plugins
• de23809 Delete pulp_label_select field from UpstreamPulp
• 05b8381 Update docs about STORAGES setting
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[mdellweg]

@dependabot ignore this dependency

[dependabot]

OK, I won't notify you about pulpcore again, unless you re-open this PR.