#1144682 qa.debian.org: DDPO error 401 for VCS watch

Package:
qa.debian.org
Source:
qa.debian.org
Submitter:
Martin-Éric Racine
Date:
2026-08-23 11:51:01 UTC
Severity:
normal
#1144682#5
Date:
2026-08-18 06:54:45 UTC
From:
To:
FYI, since the start of summer, DDPO's VCS watch has failed with an error 401.

Cheers!
Martin-Éric
#1144682#10
Date:
2026-08-22 08:49:35 UTC
From:
To:
request failed: 401 Unauthorized at
/srv/qa.debian.org/data/vcswatch/vcswatch line 410.

Martin-Éric
#1144682#15
Date:
2026-08-23 11:46:13 UTC
From:
To:
Retitling to better clarify the scope - it's not specific to DDPO, but instead its a failure in the vcswatch [1] script, and also shows up in tracker.d.o:

https://qa.debian.org/cgi-bin/vcswatch?package=libloc
    Error: https://salsa.debian.org/api/v4/projects/debian%2Flibloc API request failed: 401 Unauthorized at /srv/qa.debian.org/data/vcswatch/vcswatch line 410.

Affects every Salsa-hosted package, not just dhcpcd.

Seems to be a recurrence of #1081461 [2] from Sep 2024. The bug was closed with no clarification, but original report suspects that Salsa API token in use by vcswatch expired. If nothing monitors the
expiry, then this will keep regressing.

To note, it's only the Salsa project enrichment (avatar, number of open issues and merge requests) that fails. Git checks are working as expected and changelog/commit data gets updated.

[1]: https://salsa.debian.org/qa/qa/-/blob/5dd29f778d50223a03fe3c7bbfbd95205e89cd21/data/vcswatch/vcswatch#L410
[2]: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1081461