chore(deps): update dependency pulp-rpm to v3.39.0

[red-hat-konflux]

This PR contains the following updates:

Package	Change	Age	Confidence
pulp-rpm (changelog)	==3.38.5 → ==3.39.0

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Release Notes

pulp/pulp_rpm (pulp-rpm)

v3.39.0

Compare Source

3.39.0 (2026-09-03)

[!NOTE]
Official changes are available on Pulp docs

Bugfixes

• Changed repository-level uniqueness constraint from NEVRA to NVRA, so that packages differing only in epoch are treated as duplicates. The highest epoch is always kept.
  #​4239
• Fixed an IntegrityError that could abort signed_add_and_remove when the same package was signed concurrently by making the RpmPackageSigningResult creation race-safe and reusing the existing result.
  #​4522
• Fixed packages being re-signed on every add when their signature carries only an issuer key ID and no issuer fingerprint subpacket, by comparing the configured fingerprint against the package's signing keys on their key IDs whenever either side lacks a full fingerprint.
  #​4545
• Prevent deletion of metadata/package signing service if it is still in use.
  #​4554
• Fixed queries in the content copy API that could exceed PostgreSQL's 65535 bound-parameter limit.

Misc

---

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.