Pypi deploy error:

Summary

Deploy jobs that were previously successful are now failing with a deprecation error :

Username/Password authentication is no longer supported. Migrate to API

However between last friday & today the ci configuration hasn't been modified..

What is the current bug behavior?

Deploy job fails.

What is the expected correct behavior?

Deploy job should be successful & push the .whl on pypi

Priority

• Urgent
• High
• Medium
• Low

Severity

• Blocker
• Major
• Normal
• Low

Impact

This bug seems harmless but it is currently blocking the planned release we are doing.

changed the description

added IT-priorityhigh IT-severitynormal service:CI service:GitLab service:external statetodo team:releng labels

added statewip label and removed statetodo label

assigned to @pstankie

@gregkub I've found no changes at our end.

But I noticed big change in python twine module.

Working job had twine 5.1.1 and also logged:

INFO     password set by command options                                        
INFO     username: __token__                                                    
INFO     password: <hidden>         

Not working job has twine '6.0.x` and also logged:

INFO     username set by command options                                        
INFO     password set by command options                                        
INFO     username: [MASKED]                                            
INFO     password: <hidden> 

And also documentation states __token__ should be used for token based pypi auth.

I suggest to test this by overriding username with __token__ in job configuration.

added Awaiting Feedback label

mentioned in commit eclipse/aidge/gitlab_shared_files@551db6da

You have to switch to API tokens or trusted publishing when uploading to PyPI. Trusted publishing will not work for our own gitlab instance, so using API tokens is the way to go, see https://pypi.org/help/#apitoken

Setting the username to token is ok, but you will need to create an API token and add it as secret to use.

Thanks for the tip ! After seeing the changelog of twine, I saw that now you need to either not specify username or set it to __token__ I changed it and pipelines pass again. Thank you and have a good day !

fixed pipeline here

closed

removed statewip label

mentioned in merge request eclipse/aidge/aidge_core!277 (merged)