---
title: "Upload a file (a name sent again replaces it)"
description: "The body is the file's bytes, with Content-Length (411 without it):\nat most 100,000,000 bytes (413), 20 files a release (409\ntoo_many_files). Pando computes its SHA-256; send X-Pando-Sha256 to\nhave a mismatch refused (422 sha256_mismatch).\n"
---

> Documentation Index
> Fetch the complete documentation index at: https://docs.gitpando.com/llms.txt
> Use this file to discover all available pages before exploring further.

Path: Pando API › releases

`PUT /v1/monorepos/{owner}/{monorepo}/repos/{repo}/releases/{tag}/files/{name}`

The body is the file's bytes, with Content-Length (411 without it):
at most 100,000,000 bytes (413), 20 files a release (409
too_many_files). Pando computes its SHA-256; send X-Pando-Sha256 to
have a mismatch refused (422 sha256_mismatch).

## Authentication

Requires one of the following:

- `credential`, http, header `Authorization`
- `session`, apiKey, in cookie

## Path parameters

- `uploadReleaseFile.path.owner` (string, required) — The monorepo's owner, a namespace (a person's login or an organization). Matched without case.
  - pattern `^[a-z0-9](?:[a-z0-9]|-(?=[a-z0-9])){0,38}$`
- `uploadReleaseFile.path.monorepo` (string, required) — The monorepo's name within its owner (or an old name). Matched without case.
  - pattern `^[a-z0-9](?:[a-z0-9._]|-(?!-)){0,38}$`
- `uploadReleaseFile.path.repo` (string, required) — The repo's `name` (`projects-web`).
- `uploadReleaseFile.path.tag` (string, required)
- `uploadReleaseFile.path.name` (string, required) — Letters, digits, '.', '_', '+' and '-', starting with a letter or digit; at most 200 characters.

## Request body

_Required._

## Example request

```text
string
```

## Code samples

### cURL

```curl
curl --request PUT \
  --url https://app.gitpando.com/v1/monorepos/string/string/repos/string/releases/string/files/string \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/octet-stream' \
  --data string
```

### TypeScript

```typescript
const url = 'https://app.gitpando.com/v1/monorepos/string/string/repos/string/releases/string/files/string';
const options = {
  method: 'PUT',
  headers: {'Content-Type': 'application/octet-stream', Authorization: 'Bearer <token>'},
  body: 'string'
};

fetch(url, options)
  .then(res => res.json())
  .then(json => console.log(json))
  .catch(err => console.error(err));
```

### Python

```python
import requests

url = "https://app.gitpando.com/v1/monorepos/string/string/repos/string/releases/string/files/string"

payload = "string"
headers = {
    "Content-Type": "application/octet-stream",
    "Authorization": "Bearer <token>"
}

response = requests.put(url, data=payload, headers=headers)

print(response.text)
```

## Responses

### 201

Added (200 when it replaced a file)

#### Example

```json
{
  "repo": "string",
  "tag": "string",
  "sha": "string",
  "title": "string",
  "notes": "string",
  "draft": true,
  "forced": true,
  "created_by": "string",
  "created_at": "2019-08-24T14:15:22Z",
  "updated_at": "2019-08-24T14:15:22Z",
  "published_by": "string",
  "published_at": "2019-08-24T14:15:22Z",
  "files": [
    {
      "name": "string",
      "size": 0,
      "sha256": "string",
      "content_type": "string",
      "uploaded_by": "string",
      "uploaded_at": "2019-08-24T14:15:22Z"
    }
  ],
  "checks": {
    "sha": "string",
    "state": "success",
    "required": [
      "string"
    ],
    "checks_unknown": "string",
    "missing": [
      "string"
    ],
    "statuses": [
      {
        "sha": "string",
        "context": "string",
        "state": "pending",
        "target_url": "string",
        "description": "string",
        "creator": "string",
        "app": "string",
        "created_at": "2019-08-24T14:15:22Z"
      }
    ]
  }
}
```

- `uploadReleaseFile.response.201.repo` (string, required)
- `uploadReleaseFile.response.201.tag` (string, required)
- `uploadReleaseFile.response.201.sha` (string, required) — Its commit
- `uploadReleaseFile.response.201.title` (string, required)
- `uploadReleaseFile.response.201.notes` (string, required) — Markdown
- `uploadReleaseFile.response.201.draft` (boolean, required)
- `uploadReleaseFile.response.201.forced` (boolean, required) — Published past red or missing required checks.
- `uploadReleaseFile.response.201.created_by` (string, required)
- `uploadReleaseFile.response.201.created_at` (string, required)
  - format `date-time`
- `uploadReleaseFile.response.201.updated_at` (string, required)
  - format `date-time`
- `uploadReleaseFile.response.201.published_by` (string | null, required)
- `uploadReleaseFile.response.201.published_at` (string | null, required)
  - format `date-time`
- `uploadReleaseFile.response.201.files` (array<object>, required)
  - `uploadReleaseFile.response.201.files.name` (string, required)
  - `uploadReleaseFile.response.201.files.size` (integer, required)
  - `uploadReleaseFile.response.201.files.sha256` (string, required)
  - `uploadReleaseFile.response.201.files.content_type` (string, required)
  - `uploadReleaseFile.response.201.files.uploaded_by` (string, required)
  - `uploadReleaseFile.response.201.files.uploaded_at` (string, required)
    - format `date-time`
- `uploadReleaseFile.response.201.checks` (object, optional) — Its commit's checks; on getRelease only.
  - `uploadReleaseFile.response.201.checks.sha` (string | null, required)
  - `uploadReleaseFile.response.201.checks.state` (string, required) — `success` when the merge gate passes; `missing` when a required context has not reported; `unknown` while the required checks are (an unforced merge is refused).
    - one of `"success"`, `"pending"`, `"failure"`, `"error"`, `"missing"`, `"unknown"`
  - `uploadReleaseFile.response.201.checks.required` (array | null, required) — Null while unknown.
  - `uploadReleaseFile.response.201.checks.checks_unknown` (string | null, required) — Why the required checks are unknown, in plain words: "Pando couldn't read this monorepo's required checks; try again", or "pando.toml line 3: expected comma or end of structure; fix it on main, or merge with force". Null otherwise.
  - `uploadReleaseFile.response.201.checks.statuses` (array<object>, required) — The latest status per context.
    - `uploadReleaseFile.response.201.checks.statuses.sha` (string, required)
    - `uploadReleaseFile.response.201.checks.statuses.context` (string, required)
    - `uploadReleaseFile.response.201.checks.statuses.state` (string, required)
      - one of `"pending"`, `"success"`, `"failure"`, `"error"`
    - `uploadReleaseFile.response.201.checks.statuses.created_at` (string, required)
      - format `date-time`
    - `uploadReleaseFile.response.201.checks.statuses.target_url` (string | null, optional)
    - `uploadReleaseFile.response.201.checks.statuses.description` (string | null, optional)
    - `uploadReleaseFile.response.201.checks.statuses.creator` (string, optional) — The member who posted it (a login); `app:<slug>` for a status posted with a status token or by a CI integration; `hook:<hook id>` for a status token from a web hook with no app.
    - `uploadReleaseFile.response.201.checks.statuses.app` (string | null, optional) — The CI service that reported it (`buildkite`, `github-actions`, ...), stamped by Pando from a status token or a CI integration, never from the body or `target_url`. Null when a member posted it with their own credential. The web shows the service's mark for a slug it knows.
  - `uploadReleaseFile.response.201.checks.missing` (array<string>, optional)


Source: https://docs.gitpando.com/api/releases/uploadReleaseFile/index.md