Release 3.12.10

Author: pulpbot

CHANGES.md

@@ -8,6 +8,15 @@
 
 [//]: # (towncrier release notes start)
 
+## 3.12.10 (2026-10-08) {: #3.12.10 }
+
+#### Bugfixes {: #3.12.10-bugfix }
+
+- Fixed quoting mistake in simple html detail pages that can lead to a possible XSS attack.
+- Fixed quoting mistake in simple html index pages that can lead to a possible XSS attack given a carefully crafted package name. CVE-2026-103871
+
+---
+
 ## 3.12.9 (2026-04-01) {: #3.12.9 }
 
 #### Bugfixes {: #3.12.9-bugfix }

CHANGES/+simple_detail_html_xss.bugfix

@@ -12,7 +12,7 @@ class PulpPythonPluginAppConfig(PulpPluginAppConfig):
 
     name = "pulp_python.app"
     label = "python"
-    version = "3.12.10.dev"
+    version = "3.12.10"
     python_package_name = "pulp-python"
     domain_compatible = True
 

CHANGES/+simple_html_xss.bugfix

@@ -34,7 +34,7 @@ ignore = [
 [tool.bumpversion]
 # This section is managed by the plugin template. Do not edit manually.
 
-current_version = "3.12.10.dev"
+current_version = "3.12.10"
 commit = false
 tag = false
 parse = "(?P<major>\\d+)\\.(?P<minor>\\d+)\\.(?P<alpha>0a)?(?P<patch>\\d+)(\\.(?P<release>[a-z]+))?"

pulp_python/app/__init__.py

@@ -10,7 +10,7 @@
 
 setup(
     name="pulp-python",
-    version="3.12.10.dev",
+    version="3.12.10",
     description="pulp-python plugin for the Pulp Project",
     long_description=long_description,
     long_description_content_type="text/markdown",