## Summary Artifact write endpoints for the management API, per [ADR-009](https://handbook.gitlab.com/handbook/engineering/architecture/design-documents/artifact_registry/decisions/009_api_design/#format-specific-artifact-apis): delete, container tag mutations, and bulk delete on the format-specific artifact routes, extending the read surface from gitlab-org/ops/artifact-registry#312+s. ## Scope - Single-artifact delete: images, packages, versions, files - Container tag mutations: tag upsert with a digest body (the same upsert the push path performs) and untag - Bulk delete at every collection boundary ADR-009 names: `DELETE .../images`, `.../images/:image_id/tags`, `.../packages`, `.../versions`, `.../files` ## Gated on - **S20 Lifecycle management** ([&22815](https://gitlab.com/groups/gitlab-org/-/work_items/22815)): the deletion machinery these endpoints invoke. - **Closed-beta deletion scope**: whether closed beta ships soft deletion or permanent delete only is still open ([discussion](https://gitlab.com/gitlab-org/ci-cd/package-stage/unified-artifact-management/-/merge_requests/77#note_3558947838)); it decides these endpoints' semantics. ## Out of scope Quarantine, now tracked in gitlab-org/ops/artifact-registry#482+s. ADR-009 defines it as a per-artifact `PATCH`, not a bulk route, so the bulk surface above is unaffected. This phase patches the [S17 spec](https://gitlab.com/gitlab-org/ops/artifact-registry/-/blob/main/docs/specs/S17-rest-management-api.md) and follows the repo gate: spec MR, plan MR, implementation. Part of [&22341](https://gitlab.com/groups/gitlab-org/-/work_items/22341). ## Workstream status (2026-08-20) The graph is a ledger of work in progress and work to be done: a step's node leaves the graph when its merge request merges, and the Merge request status table below keeps the full step-to-MR record, merged rows included. Reading the colors, green nodes have an open merge request and link to it, amber nodes are being implemented but their merge requests have not opened yet, and grey nodes are planned. Edges are the [plan's dependency graph](https://gitlab.com/gitlab-org/ops/artifact-registry/-/blob/main/docs/plans/2026-08-10-s17-phase4-artifact-writes.md#implementation-steps) among the remaining nodes, so every edge shown is an unsatisfied dependency. Blocking follow-ups join the map when they are filed and carry no plan edges. A follow-up that has no merge request yet stays grey and links to its tracking issue. ### Dependency graph ```mermaid graph TD S38["Step 38: S22 accounting emit (!1754)"] FU764["Follow-up: blob_sha256 delete-probe indexes (#764)"] click S38 "https://gitlab.com/gitlab-org/ops/artifact-registry/-/merge_requests/1754" click FU764 "https://gitlab.com/gitlab-org/ops/artifact-registry/-/work_items/764" classDef stOpen fill:#c8e6c9,stroke:#2e7d32,color:#1b5e20 classDef stInBuild fill:#ffecb3,stroke:#ff8f00,color:#ff6f00 classDef stPlanned fill:#f5f5f5,stroke:#9e9e9e,color:#424242 class S38 stOpen class FU764 stPlanned ``` ### Merge request status | Step | Reviewer | Status | Merge request | | --- | --- | --- | --- | | 1 | vespian_gl, dmeshcharakou | Merged | gitlab-org/ops/artifact-registry!1445+s | | 2 | vespian_gl, dmeshcharakou | Merged | gitlab-org/ops/artifact-registry!1458+s | | 3 | dmeshcharakou | Merged | gitlab-org/ops/artifact-registry!1460+s | | 4 | jdrpereira, dmeshcharakou, suleimiahmed | Merged | gitlab-org/ops/artifact-registry!1457+s | | 5 | dmeshcharakou | Merged | gitlab-org/ops/artifact-registry!1454+s | | 6 | dmeshcharakou | Merged | gitlab-org/ops/artifact-registry!1466+s | | 7 | arpitgogia, jdrpereira | Merged | gitlab-org/ops/artifact-registry!1506+s | | 8 | jdrpereira, suleimiahmed | Merged | gitlab-org/ops/artifact-registry!1452+s | | 9 | vespian_gl, dmeshcharakou | Merged | gitlab-org/ops/artifact-registry!1447+s | | 10 | dmeshcharakou, sylviashen | Merged | gitlab-org/ops/artifact-registry!1450+s | | 11 | radbatnag | Merged into !1450 | gitlab-org/ops/artifact-registry!1459+s | | 12 | vespian_gl, dmeshcharakou | Merged | gitlab-org/ops/artifact-registry!1462+s | | 13 | dmeshcharakou, mkhalifa3 | Merged | gitlab-org/ops/artifact-registry!1461+s | | 14 | dmeshcharakou, mkhalifa3 | Merged | gitlab-org/ops/artifact-registry!1443+s | | 15 | suleimiahmed | Merged into !1450 | gitlab-org/ops/artifact-registry!1463+s | | 16 | arpitgogia | Merged | gitlab-org/ops/artifact-registry!1541+s | | 17 | arpitgogia | Merged | gitlab-org/ops/artifact-registry!1536+s | | 18 | dmeshcharakou | Merged | gitlab-org/ops/artifact-registry!1545+s | | 19 | vespian_gl | Merged | gitlab-org/ops/artifact-registry!1530+s | | 20 | mkhalifa3 | Merged | gitlab-org/ops/artifact-registry!1540+s | | 21 | dmeshcharakou | Merged | gitlab-org/ops/artifact-registry!1531+s | | 22 | jdrpereira, radbatnag | Merged | gitlab-org/ops/artifact-registry!1539+s | | 23 | radbatnag | Merged | gitlab-org/ops/artifact-registry!1532+s | | 24 | vespian_gl | Merged | gitlab-org/ops/artifact-registry!1535+s | | 25 | vespian_gl | Merged | gitlab-org/ops/artifact-registry!1543+s | | 26 | radbatnag | Merged | gitlab-org/ops/artifact-registry!1542+s | | 27 | dmeshcharakou, suleimiahmed | Merged | gitlab-org/ops/artifact-registry!1444+s | | 28 | radbatnag | Merged | gitlab-org/ops/artifact-registry!1446+s | | 29 | dmeshcharakou | Merged | gitlab-org/ops/artifact-registry!1448+s | | 30 | arpitgogia, jdrpereira | Merged | gitlab-org/ops/artifact-registry!1555+s | | 31 | mkhalifa3 | Merged | gitlab-org/ops/artifact-registry!1583+s | | 32 | arpitgogia | Merged | gitlab-org/ops/artifact-registry!1627+s | | 33 | mkhalifa3 | Merged | gitlab-org/ops/artifact-registry!1537+s | | 34 | radbatnag | Merged | gitlab-org/ops/artifact-registry!1626+s | | 35 | mkhalifa3 | Merged | gitlab-org/ops/artifact-registry!1550+s | | 36 | mkhalifa3 | Merged | gitlab-org/ops/artifact-registry!1623+s | | 37 | dmeshcharakou | Merged | gitlab-org/ops/artifact-registry!1631+s | | 38 | vespian_gl | Round-6 triaged, rebased over the train-dropping conflict, re-requested, auto-merge re-armed (push reset the approval) | gitlab-org/ops/artifact-registry!1754+s | | Follow-up | jdrpereira, radbatnag | Merged | gitlab-org/ops/artifact-registry!1453+s | | Follow-up | jdrpereira, radbatnag | Merged | gitlab-org/ops/artifact-registry!1467+s | | Follow-up | dmeshcharakou | Merged | gitlab-org/ops/artifact-registry!1546+s | | Follow-up | jdrpereira, arpitgogia | Merged | gitlab-org/ops/artifact-registry!1560+s | | Follow-up | mkhalifa3 | Merged | gitlab-org/ops/artifact-registry!1622+s | | Follow-up | dmeshcharakou | Merged | gitlab-org/ops/artifact-registry!1624+s | | Follow-up | vespian_gl | Merged | gitlab-org/ops/artifact-registry!1630+s | | Follow-up | dmeshcharakou | Merged | gitlab-org/ops/artifact-registry!1633+s | | Follow-up | radbatnag | Merged | gitlab-org/ops/artifact-registry!1728+s | --- 👋 **Triage note:** This issue has been reviewed by the automated triage assistant and classified as `type::feature` — it describes new API endpoints (artifact write/delete operations) being added to the Artifact Registry management API, which is new functionality rather than a bug fix or maintenance task. The following labels are confirmed present: - `type::feature` - `Category:Artifact Registry` - `devops::package` - `group::package registry` If this classification doesn't look right to you, please feel free to update the labels and leave a comment explaining the change. Thanks! 🙏