#1144682 qa.debian.org: DDPO error 401 for VCS watch

Package:
qa.debian.org
Source:
qa.debian.org
Submitter:
Martin-Éric Racine
Date:
2026-09-28 15:31:00 UTC
Severity:
normal
#1144682#5
Date:
2026-08-18 06:54:45 UTC
From:
To:
FYI, since the start of summer, DDPO's VCS watch has failed with an error 401.

Cheers!
Martin-Éric
#1144682#10
Date:
2026-08-22 08:49:35 UTC
From:
To:
request failed: 401 Unauthorized at
/srv/qa.debian.org/data/vcswatch/vcswatch line 410.

Martin-Éric
#1144682#15
Date:
2026-08-23 11:46:13 UTC
From:
To:
Retitling to better clarify the scope - it's not specific to DDPO, but instead its a failure in the vcswatch [1] script, and also shows up in tracker.d.o:

https://qa.debian.org/cgi-bin/vcswatch?package=libloc
    Error: https://salsa.debian.org/api/v4/projects/debian%2Flibloc API request failed: 401 Unauthorized at /srv/qa.debian.org/data/vcswatch/vcswatch line 410.

Affects every Salsa-hosted package, not just dhcpcd.

Seems to be a recurrence of #1081461 [2] from Sep 2024. The bug was closed with no clarification, but original report suspects that Salsa API token in use by vcswatch expired. If nothing monitors the
expiry, then this will keep regressing.

To note, it's only the Salsa project enrichment (avatar, number of open issues and merge requests) that fails. Git checks are working as expected and changelog/commit data gets updated.

[1]: https://salsa.debian.org/qa/qa/-/blob/5dd29f778d50223a03fe3c7bbfbd95205e89cd21/data/vcswatch/vcswatch#L410
[2]: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1081461
#1144682#22
Date:
2026-09-28 13:23:32 UTC
From:
To:
Re: Valters Jansons

Hi,

thanks for the reminder. I had completely forgotten about the token.
Probably because there is automation to auto-renew it, but maybe that
stops working after two years? The last problem was also in September.

For the record, on quantz.d.o, there is a file
/home/qa/qa-guest.salsatoken.README documenting the renewal:

https://salsa.debian.org/-/user_settings/personal_access_tokens
   * Add new "legacy" token
   * Scopes:
      read_api
      self_rotate
      read_repository

   Also automatically rotated via /srv/qa.debian.org/data/cronjobs/salsa-rotate-token

I put a new token in place and it seems to be working again.

Christoph
#1144682#23
Date:
2026-09-28 13:36:09 UTC
From:
To:
ma 28.9.2026 klo 16.23 Christoph Berg (myon@debian.org) kirjoitti:

Ditto for all my other packages.

Martin-Éric
#1144682#24
Date:
2026-09-28 13:59:49 UTC
From:
To:
Re: Martin-Éric Racine

I did not re-run 20k packages within the 15min I was looking at it.
Wait for the re-scan, or click the "Scan now" button.

It worked for cups-pdf when I did it now.

Christoph
#1144682#25
Date:
2026-09-28 15:29:12 UTC
From:
To:
ma 28.9.2026 klo 16.59 Christoph Berg (myon@debian.org) kirjoitti:

Confirmed. Clicking "Scan now" and waiting a while fixed it. Thanks!

Martin-Éric