extensions/views/api.py

@@ -7,6 +7,7 @@ from rest_framework.views import APIView
 from rest_framework.permissions import IsAuthenticated
 from drf_spectacular.utils import OpenApiParameter, extend_schema
 from django.core.exceptions import ValidationError
+from django.db import transaction
 
 from common.compare import is_in_version_range, version
 from extensions.models import Extension, Platform, Version
@@ -207,18 +208,19 @@ class UploadExtensionVersionView(APIView):
             if not form.is_valid():
                 return Response({'message': form.errors}, status=status.HTTP_400_BAD_REQUEST)
 
-            # Create the file instance
-            file_instance = form.save(commit=False)
-            file_instance.user = user
-            file_instance.save()
+            with transaction.atomic():
+                # Create the file instance
+                file_instance = form.save(commit=False)
+                file_instance.user = user
+                file_instance.save()
 
-            # Create the version from the file
-            version = Version.objects.update_or_create(
-                extension=extension,
-                file=file_instance,
-                release_notes=release_notes,
-                **file_instance.parsed_version_fields,
-            )[0]
+                # Create the version from the file
+                version = Version.objects.update_or_create(
+                    extension=extension,
+                    file=file_instance,
+                    release_notes=release_notes,
+                    **file_instance.parsed_version_fields,
+                )[0]
 
             return Response(
                 {