feat(preprod): Add public build-distribution/latest endpoint by trevor-e · Pull Request #109584 · getsentry/sentry

trevor-e · 2026-02-27T18:03:46Z

Summary

Split from #109377, stacked on #109583.

Replaces the paginated list endpoint at GET /api/0/projects/{org}/{project}/preprodartifacts/build-distribution/latest/ with a single-result endpoint that returns the latest installable build, with optional check-for-updates support.

Two modes:

Latest mode — caller provides appId + platform, gets back the newest installable build (highest semver version, highest build number as tiebreaker).
Check-for-updates mode — caller also provides buildVersion + (buildNumber or mainBinaryIdentifier), gets back both the current and latest builds plus an updateAvailable boolean.

Key behaviors:

Filters by buildConfiguration, codesigningType, and installGroup (repeatable).
In check-for-updates mode, inherits buildConfiguration, codesigningType, and installGroups from the current artifact when not explicitly provided.
Only considers PROCESSED artifacts with an installable app file and build number.
Adds installGroups field to the build response shape.

Response shape:

{
  "latest": { <build> } | null,
  "current": { <build> } | null,
  "updateAvailable": true | false | null
}

Extracted shared helpers (find_current_artifact, find_latest_installable_artifact, build_install_groups_q, get_platform_artifact_type_filter) into build_distribution_utils.py for reuse. Added deprecation comment to the experimental check-for-updates endpoint.

Test plan

24 tests covering: feature flag, validation, latest mode, check-for-updates mode (update available / already on latest / current not found / no builds), platform filtering, build config filtering, codesigning type filtering, install group filtering, inheritance from current artifact, semver comparison, build number tiebreaker, binary identifier matching, non-installable exclusion, project scoping, download counts
Experimental check-for-updates endpoint tests still pass (29/29)
Pre-commit passes on all modified files

- Add organization-scoped public install-details endpoint - Add platform property to PreprodArtifact model - Add ArtifactInstallInfo and get_artifact_install_info utility - Refactor existing install-details endpoint to use shared utility - Refactor size_analysis tasks to use model platform property - Add install info response models and OpenAPI examples

github-actions · 2026-02-27T18:04:06Z

🚨 Warning: This pull request contains Frontend and Backend changes!

It's discouraged to make changes to Sentry's Frontend and Backend in a single pull request. The Frontend and Backend are not atomically deployed. If the changes are interdependent of each other, they must be separated into two pull requests and be made forward or backwards compatible, such that the Backend or Frontend can be safely deployed independently.

Have questions? Please ask in the #discuss-dev-infra channel.

Compare against Platform.APPLE and Platform.ANDROID enum members instead of raw string literals for consistency and type safety. Co-Authored-By: Claude <noreply@anthropic.com>

Uppercase the platform enum value in public endpoint responses for consistency with other enum fields like artifactType. Internal endpoints are unchanged. Co-Authored-By: Claude <noreply@anthropic.com>

Consolidate public build distribution response models into a single file, consistent with how size_analysis.py is organized.

…tails get_artifact_install_info() already computes install_url and download_count. The endpoint was calling the underlying functions a second time, creating an orphaned InstallablePreprodArtifact DB row on every GET request.

Add project-scoped endpoint to list the latest installable builds with filtering by platform, appId, branch, buildVersion, buildConfiguration, prNumber, and installGroup.

src/sentry/preprod/api/endpoints/public/project_preprod_build_distribution_latest.py

src/sentry/preprod/api/models/public/installable_builds.py

src/sentry/preprod/api/validators.py

- Rename response fields to `latestArtifact`/`currentArtifact` for clarity - Rename query param to `installGroups` (plural) and read via getlist - Remove ListField from validator; read installGroups directly from request - Add logging when current artifact not found in check-for-updates mode Co-Authored-By: Claude <noreply@anthropic.com>

Reorganize tests into separate classes by flow: - LatestBuildValidationTest: feature flags and param validation - LatestBuildModeTest: latest-only mode behavior - LatestBuildFilteringTest: explicit filter parameters - CheckForUpdatesTest: check-for-updates mode with filter inheritance Adds coverage for combined filter inheritance, multi-group install groups, and query param arrays to match legacy checkForUpdates endpoint. Co-Authored-By: Claude <noreply@anthropic.com>

src/sentry/preprod/api/endpoints/public/project_preprod_build_distribution_latest.py

github-actions · 2026-03-02T19:21:50Z

Backend Test Failures

Failures on 1f1f9fe in this run:

tests/sentry/preprod/api/endpoints/test_project_preprod_artifact_install_details.py::ProjectPreprodInstallDetailsEndpointTest::test_install_groups_returned

— log

tests/sentry/preprod/api/endpoints/test_project_preprod_artifact_install_details.py:206: in test_install_groups_returned
    assert response.status_code == 200
E   assert 404 == 200
E    +  where 404 = <Response status_code=404, "application/json">.status_code

tests/sentry/preprod/api/endpoints/test_project_preprod_artifact_install_details.py::ProjectPreprodInstallDetailsEndpointTest::test_ios_artifact_success

— log

tests/sentry/preprod/api/endpoints/test_project_preprod_artifact_install_details.py:67: in test_ios_artifact_success
    assert response.status_code == 200
E   assert 404 == 200
E    +  where 404 = <Response status_code=404, "application/json">.status_code

tests/sentry/preprod/api/endpoints/test_project_preprod_artifact_install_details.py::ProjectPreprodInstallDetailsEndpointTest::test_install_groups_null_when_not_set

— log

tests/sentry/preprod/api/endpoints/test_project_preprod_artifact_install_details.py:217: in test_install_groups_null_when_not_set
    assert response.status_code == 200
E   assert 404 == 200
E    +  where 404 = <Response status_code=404, "application/json">.status_code

tests/sentry/preprod/api/endpoints/test_project_preprod_artifact_install_details.py::ProjectPreprodInstallDetailsEndpointTest::test_android_artifact_success

— log

tests/sentry/preprod/api/endpoints/test_project_preprod_artifact_install_details.py:104: in test_android_artifact_success
    assert response.status_code == 200
E   assert 404 == 200
E    +  where 404 = <Response status_code=404, "application/json">.status_code

Match the legacy checkForUpdates endpoint by requiring project:distribution scope and adding a 100 req/min org rate limit. Co-Authored-By: Claude <noreply@anthropic.com>

src/sentry/preprod/api/endpoints/public/project_preprod_build_distribution_latest.py

src/sentry/preprod/api/endpoints/project_preprod_artifact_install_details.py

- Move logger after all imports to avoid splitting import blocks - Use consistent truthiness check for build_version parameter - Revert stricter installability check on deprecated endpoint to preserve backward compatibility Co-Authored-By: Claude <noreply@anthropic.com>

src/sentry/preprod/build_distribution_utils.py

Add org-level rate limiting (100 req/min) to the public install details endpoint to match the latest build endpoint. Co-Authored-By: Claude <noreply@anthropic.com>

trevor-e · 2026-03-02T20:08:20Z

src/sentry/preprod/api/endpoints/public/organization_preprod_artifact_install_details.py

    publish_status = {
        "GET": ApiPublishStatus.PUBLIC,
    }
+    rate_limits = RateLimitConfig(


Forgot to add this

src/sentry/preprod/build_distribution_utils.py

cursor · 2026-03-02T20:20:02Z

src/sentry/preprod/build_distribution_utils.py

+                if highest_version is None or parsed_version > parse_version(highest_version):
+                    highest_version = version
+            except Exception:
+                continue


Redundant re-parsing of highest_version each loop iteration

Low Severity

In find_latest_installable_artifact, parse_version(highest_version) is called on every loop iteration when comparing against the current best version. The parsed result of highest_version could be cached in a local variable and updated only when highest_version changes, avoiding redundant reparsing for every version string in the queryset.

The DB column stores an integer, so validate it as IntegerField in the serializer rather than silently returning None on non-numeric input. Also updates the function signature and OpenAPI param type to match. Co-Authored-By: Claude <noreply@anthropic.com>

src/sentry/preprod/api/endpoints/public/project_preprod_build_distribution_latest.py

…test build lookup find_latest_installable_artifact() could return an XCARCHIVE with an invalid code signature as the "latest installable build". Now iterates through candidates and skips Apple artifacts where is_code_signature_valid is not set in extras. Co-Authored-By: Claude <noreply@anthropic.com>

src/sentry/preprod/api/validators.py

github-actions · 2026-03-02T20:50:42Z

Backend Test Failures

Failures on fa1f935 in this run:

tests/sentry/preprod/api/endpoints/test_project_preprod_artifact_install_details.py::ProjectPreprodInstallDetailsEndpointTest::test_android_artifact_success

— log

tests/sentry/preprod/api/endpoints/test_project_preprod_artifact_install_details.py:111: in test_android_artifact_success
    assert "?response_format=plist" not in data["install_url"]
E   TypeError: argument of type 'NoneType' is not iterable

tests/sentry/preprod/api/endpoints/test_project_preprod_artifact_install_details.py::ProjectPreprodInstallDetailsEndpointTest::test_ios_artifact_success

— log

tests/sentry/preprod/api/endpoints/test_project_preprod_artifact_install_details.py:77: in test_ios_artifact_success
    assert "?response_format=plist" in data["install_url"]
E   TypeError: argument of type 'NoneType' is not iterable

Filter out empty strings from installGroups query param so that ?installGroups= is treated the same as omitting the param. Use `build_number is None` instead of `not build_number` in the cross-field validator so that buildNumber=0 is accepted as valid. Co-Authored-By: Claude <noreply@anthropic.com>

cursor

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

cursor · 2026-03-02T21:19:46Z

src/sentry/preprod/build_distribution_utils.py

+    try:
+        return (
+            PreprodArtifact.objects.select_related(
+                "project", "build_configuration", "commit_comparison", "mobile_app_info"


Missing project__organization in select_related causes extra queries

Medium Severity

Both find_current_artifact and find_latest_installable_artifact use select_related("project", ...) but omit "project__organization". The returned artifacts are passed to create_install_info_dict, which calls get_download_url_for_artifact, which accesses artifact.project.organization.slug (line 130). This triggers an additional lazy-loaded DB query per installable artifact. The existing OrganizationPreprodArtifactPublicInstallDetailsEndpoint correctly includes "project__organization" in its select_related for the same reason.

Additional Locations (1)

src/sentry/preprod/build_distribution_utils.py#L295-L297

github-actions · 2026-03-02T21:37:41Z

Backend Test Failures

Failures on 19c1fa1 in this run:

tests/sentry/preprod/api/endpoints/test_project_preprod_artifact_install_details.py::ProjectPreprodInstallDetailsEndpointTest::test_ios_artifact_success

— log

tests/sentry/preprod/api/endpoints/test_project_preprod_artifact_install_details.py:77: in test_ios_artifact_success
    assert "?response_format=plist" in data["install_url"]
E   TypeError: argument of type 'NoneType' is not iterable

tests/sentry/preprod/api/endpoints/test_project_preprod_artifact_install_details.py::ProjectPreprodInstallDetailsEndpointTest::test_android_artifact_success

— log

tests/sentry/preprod/api/endpoints/test_project_preprod_artifact_install_details.py:111: in test_android_artifact_success
    assert "?response_format=plist" not in data["install_url"]
E   TypeError: argument of type 'NoneType' is not iterable

trevor-e requested review from a team as code owners February 27, 2026 18:03

github-actions bot added Scope: Frontend Automatically applied to PRs that change frontend components Scope: Backend Automatically applied to PRs that change backend components labels Feb 27, 2026

vercel bot deployed to Preview February 27, 2026 18:05 View deployment

ref(preprod): Restore Platform enum and use it in model property

f2744af

trevor-e force-pushed the telkins/public-bd-apis-latest branch from 3786bbf to 62e6912 Compare February 27, 2026 18:37

vercel bot deployed to Preview February 27, 2026 18:40 View deployment

ref(preprod): Mark ProjectPreprodInstallDetailsEndpoint as deprecated

12b6f00

trevor-e force-pushed the telkins/public-bd-apis-latest branch from 8ee58aa to ce905bd Compare February 27, 2026 19:09

vercel bot deployed to Preview February 27, 2026 19:12 View deployment

trevor-e force-pushed the telkins/public-bd-apis-latest branch from ce905bd to 7149f64 Compare February 27, 2026 19:37

vercel bot deployed to Preview February 27, 2026 19:40 View deployment

trevor-e force-pushed the telkins/public-bd-apis-install-details branch from 8d99752 to 12b6f00 Compare February 27, 2026 20:03

trevor-e and others added 2 commits February 27, 2026 15:14

ref(preprod): Use Platform enum values instead of string literals

c3f64ed

Compare against Platform.APPLE and Platform.ANDROID enum members instead of raw string literals for consistency and type safety. Co-Authored-By: Claude <noreply@anthropic.com>

ref(preprod): Uppercase platform field in public API responses

637f58a

Uppercase the platform enum value in public endpoint responses for consistency with other enum fields like artifactType. Internal endpoints are unchanged. Co-Authored-By: Claude <noreply@anthropic.com>

vercel bot deployed to Preview February 27, 2026 21:06 View deployment

vercel bot deployed to Preview February 27, 2026 21:14 View deployment

trevor-e added 4 commits February 27, 2026 16:15

ref(preprod): Rename install_info.py to installable_builds.py

7933478

Consolidate public build distribution response models into a single file, consistent with how size_analysis.py is organized.

feat(preprod): Add public build-distribution/latest endpoint

15c3207

Add project-scoped endpoint to list the latest installable builds with filtering by platform, appId, branch, buildVersion, buildConfiguration, prNumber, and installGroup.

fix

ba4f67d

trevor-e force-pushed the telkins/public-bd-apis-latest branch from e165283 to ba4f67d Compare February 27, 2026 21:18

vercel bot deployed to Preview February 27, 2026 21:21 View deployment

sentry-warden bot reviewed Feb 27, 2026

View reviewed changes

src/sentry/preprod/api/endpoints/public/project_preprod_build_distribution_latest.py Show resolved Hide resolved

cursor bot reviewed Feb 27, 2026

View reviewed changes

src/sentry/preprod/api/models/public/installable_builds.py Outdated Show resolved Hide resolved

src/sentry/preprod/api/validators.py Outdated Show resolved Hide resolved

vercel bot deployed to Preview February 27, 2026 21:46 View deployment

fix(preprod): Clarify mainBinaryIdentifier help text

d5f2a11

vercel bot deployed to Preview February 28, 2026 00:06 View deployment

vercel bot deployed to Preview February 28, 2026 00:15 View deployment

Merge branch 'master' into telkins/public-bd-apis-latest

f7a968d

vercel bot deployed to Preview March 2, 2026 19:02 View deployment

cursor bot reviewed Mar 2, 2026

View reviewed changes

src/sentry/preprod/api/endpoints/public/project_preprod_build_distribution_latest.py Outdated Show resolved Hide resolved

feat(preprod): Add ProjectDistributionPermission and rate limiting

f17d9bd

Match the legacy checkForUpdates endpoint by requiring project:distribution scope and adding a 100 req/min org rate limit. Co-Authored-By: Claude <noreply@anthropic.com>

vercel bot deployed to Preview March 2, 2026 19:28 View deployment

cursor bot reviewed Mar 2, 2026

View reviewed changes

src/sentry/preprod/api/endpoints/public/project_preprod_build_distribution_latest.py Show resolved Hide resolved

src/sentry/preprod/api/endpoints/project_preprod_artifact_install_details.py Outdated Show resolved Hide resolved

vercel bot deployed to Preview March 2, 2026 19:54 View deployment

sentry bot reviewed Mar 2, 2026

View reviewed changes

src/sentry/preprod/build_distribution_utils.py Outdated Show resolved Hide resolved

feat(preprod): Add rate limiting to install details endpoint

6b5ee25

Add org-level rate limiting (100 req/min) to the public install details endpoint to match the latest build endpoint. Co-Authored-By: Claude <noreply@anthropic.com>

trevor-e commented Mar 2, 2026

View reviewed changes

vercel bot deployed to Preview March 2, 2026 20:10 View deployment

sentry bot reviewed Mar 2, 2026

View reviewed changes

src/sentry/preprod/build_distribution_utils.py Outdated Show resolved Hide resolved

cursor bot reviewed Mar 2, 2026

View reviewed changes

vercel bot deployed to Preview March 2, 2026 20:23 View deployment

sentry bot reviewed Mar 2, 2026

View reviewed changes

src/sentry/preprod/api/endpoints/public/project_preprod_build_distribution_latest.py Outdated Show resolved Hide resolved

vercel bot deployed to Preview March 2, 2026 20:29 View deployment

cursor bot reviewed Mar 2, 2026

View reviewed changes

src/sentry/preprod/api/validators.py Outdated Show resolved Hide resolved

vercel bot deployed to Preview March 2, 2026 21:11 View deployment

cursor bot reviewed Mar 2, 2026

View reviewed changes

Uh oh!

Conversation

trevor-e commented Feb 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Test plan

Uh oh!

github-actions bot commented Feb 27, 2026

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

github-actions bot commented Mar 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Backend Test Failures

Uh oh!

Uh oh!

Uh oh!

Uh oh!

trevor-e Mar 2, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

cursor bot Mar 2, 2026

Choose a reason for hiding this comment

Redundant re-parsing of highest_version each loop iteration

Uh oh!

Uh oh!

Uh oh!

github-actions bot commented Mar 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Backend Test Failures

Uh oh!

cursor bot left a comment

Choose a reason for hiding this comment

Uh oh!

cursor bot Mar 2, 2026

Choose a reason for hiding this comment

Missing project__organization in select_related causes extra queries

Uh oh!

github-actions bot commented Mar 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Backend Test Failures

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

trevor-e commented Feb 27, 2026 •

edited

Loading

github-actions bot commented Mar 2, 2026 •

edited

Loading

github-actions bot commented Mar 2, 2026 •

edited

Loading

Missing `project__organization` in `select_related` causes extra queries

github-actions bot commented Mar 2, 2026 •

edited

Loading