search

pypa / gh-action-pypi-publish

The blessed :octocat: GitHub Action, for publishing your :package: distribution files to PyPI, the tokenless way: https://github.com/marketplace/actions/pypi-publish
https://packaging.python.org/guides/publishing-package-distribution-releases-using-github-actions-ci-cd-workflows/
BSD 3-Clause "New" or "Revised" License
954 stars 89 forks source link

502 Bad Gateway #263

Closed danking closed 2 months ago

danking commented 2 months ago

I'm not sure if I should report here or on some PyPI specific place, but every time this action is triggered, we get a 502. I am able to publish (the exact same wheels) using twine from my laptop.

This is the whole GitHub Action output with debug logs. I can get you the wheels if that's useful. Are you able to see the GitHub Action page?

Run pypa/gh-action-pypi-publish@release/v1
  with:
    attestations: true
    verbose: true
    user: __token__
    repository_url: https://upload.pypi.org/legacy/
    packages_dir: dist
    verify_metadata: true
    skip_existing: false
    print_hash: false
/usr/bin/docker run --name fda6c328b802e0b14f4bf7a10a67ba3c8f48d8_7faaba --label fda6c3 --workdir /github/workspace --rm -e "INPUT_ATTESTATIONS" -e "INPUT_VERBOSE" -e "INPUT_USER" -e "INPUT_PASSWORD" -e "INPUT_REPOSITORY-URL" -e "INPUT_REPOSITORY_URL" -e "INPUT_PACKAGES-DIR" -e "INPUT_PACKAGES_DIR" -e "INPUT_VERIFY-METADATA" -e "INPUT_VERIFY_METADATA" -e "INPUT_SKIP-EXISTING" -e "INPUT_SKIP_EXISTING" -e "INPUT_PRINT-HASH" -e "INPUT_PRINT_HASH" -e "HOME" -e "GITHUB_JOB" -e "GITHUB_REF" -e "GITHUB_SHA" -e "GITHUB_REPOSITORY" -e "GITHUB_REPOSITORY_OWNER" -e "GITHUB_REPOSITORY_OWNER_ID" -e "GITHUB_RUN_ID" -e "GITHUB_RUN_NUMBER" -e "GITHUB_RETENTION_DAYS" -e "GITHUB_RUN_ATTEMPT" -e "GITHUB_REPOSITORY_ID" -e "GITHUB_ACTOR_ID" -e "GITHUB_ACTOR" -e "GITHUB_TRIGGERING_ACTOR" -e "GITHUB_WORKFLOW" -e "GITHUB_HEAD_REF" -e "GITHUB_BASE_REF" -e "GITHUB_EVENT_NAME" -e "GITHUB_SERVER_URL" -e "GITHUB_API_URL" -e "GITHUB_GRAPHQL_URL" -e "GITHUB_REF_NAME" -e "GITHUB_REF_PROTECTED" -e "GITHUB_REF_TYPE" -e "GITHUB_WORKFLOW_REF" -e "GITHUB_WORKFLOW_SHA" -e "GITHUB_WORKSPACE" -e "GITHUB_ACTION" -e "GITHUB_EVENT_PATH" -e "GITHUB_ACTION_REPOSITORY" -e "GITHUB_ACTION_REF" -e "GITHUB_PATH" -e "GITHUB_ENV" -e "GITHUB_STEP_SUMMARY" -e "GITHUB_STATE" -e "GITHUB_OUTPUT" -e "RUNNER_OS" -e "RUNNER_ARCH" -e "RUNNER_NAME" -e "RUNNER_ENVIRONMENT" -e "RUNNER_TOOL_CACHE" -e "RUNNER_TEMP" -e "RUNNER_WORKSPACE" -e "ACTIONS_RUNTIME_URL" -e "ACTIONS_RUNTIME_TOKEN" -e "ACTIONS_CACHE_URL" -e "ACTIONS_ID_TOKEN_REQUEST_URL" -e "ACTIONS_ID_TOKEN_REQUEST_TOKEN" -e "ACTIONS_RESULTS_URL" -e GITHUB_ACTIONS=true -e CI=true -v "/var/run/docker.sock":"/var/run/docker.sock" -v "/home/runner/work/_temp/_github_home":"/github/home" -v "/home/runner/work/_temp/_github_workflow":"/github/workflow" -v "/home/runner/work/_temp/_runner_file_commands":"/github/file_commands" -v "/home/runner/work/vortex/vortex":"/github/workspace" fda6c3:28b802e0b14f4bf7a10a67ba3c8f48d8  "__token__" "" "" "" "" "" "true" "" "true"
Checking 
dist/vortex_array-0.10.1-cp311-abi3-macosx_10_12_x86_64.macosx_11_0_arm64.macosx
_10_12_universal2.whl: PASSED
Checking dist/vortex_array-0.10.1-cp311-abi3-macosx_10_12_x86_64.whl: PASSED
Checking dist/vortex_array-0.10.1-cp311-abi3-macosx_11_0_arm64.whl: PASSED
Checking 
dist/vortex_array-0.10.1-cp311-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.w
hl: PASSED
Checking dist/vortex_array-0.10.1.tar.gz: PASSED
Notice: Generating and uploading digital attestations
Fulcio client using URL: https://fulcio.sigstore.dev/
TUF metadata: /root/.local/share/sigstore-python/tuf/https%3A%2F%2Ftuf-repo-cdn.sigstore.dev
TUF targets cache: /root/.cache/sigstore-python/tuf/https%3A%2F%2Ftuf-repo-cdn.sigstore.dev
Found and verified trusted root
Generating ephemeral keys...
Requesting ephemeral certificate...
Retrieving signed certificate...
Found <Name(O=sigstore.dev,CN=sigstore-intermediate)> as issuer, verifying if it is a ca
attempting to verify SCT with key ID dd3d306ac6c7113263191e1c99673702a24a5eb8de3cadff878a72802f29ee8e
Successfully verified SCT...
DSSE PAE: b'DSSEv1 28 application/vnd.in-toto+json 261 {"_type":"https://in-toto.io/Statement/v1","subject":[{"name":"vortex_array-0.10.1.tar.gz","digest":{"sha256":"1520d374202b1e7909011054e2922e0fe2d117f5345d59d613ff2f9b90a44c75"}}],"predicateType":"https://docs.pypi.org/attestations/publish/v1","predicate":null}'
proposed: {"apiVersion": "0.0.1", "kind": "dsse", "spec": {"proposedContent": {"envelope": "{\"payload\": \"eyJfdHlwZSI6Imh0dHBzOi8vaW4tdG90by5pby9TdGF0ZW1lbnQvdjEiLCJzdWJqZWN0IjpbeyJuYW1lIjoidm9ydGV4X2FycmF5LTAuMTAuMS50YXIuZ3oiLCJkaWdlc3QiOnsic2hhMjU2IjoiMTUyMGQzNzQyMDJiMWU3OTA5MDExMDU0ZTI5MjJlMGZlMmQxMTdmNTM0NWQ1OWQ2MTNmZjJmOWI5MGE0NGM3NSJ9fV0sInByZWRpY2F0ZVR5cGUiOiJodHRwczovL2RvY3MucHlwaS5vcmcvYXR0ZXN0YXRpb25zL3B1Ymxpc2gvdjEiLCJwcmVkaWNhdGUiOm51bGx9\", \"payloadType\": \"application/vnd.in-toto+json\", \"signatures\": [{\"sig\": \"MEUCIQCZbJjmi+MouRRorVofo2GC+s+imKR323D9yVq8A3mfhgIgAfUxJc5MCcDARCXUouG6abOkhVwnGaD49HUYmtob0Wg=\"}]}", "verifiers": ["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"]}, "signatures": null, "envelopeHash": null, "payloadHash": null}}
integrated: {'108e9186e8c5677af6501df3378d443d5f16467206d218169ba8e085044f7580dac36d94cc4df546': {'body': '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', 'integratedTime': 1726851106, 'logID': 'c0d23d6ad406973f9559f3ba2d1ca01f84147d8ffc5b8445c224f98b9591801d', 'logIndex': 132521127, 'verification': {'inclusionProof': {'checkpoint': 'rekor.sigstore.dev - 1193050959916656506\n10616867\nB4hQ4tTfYuOTeDhxXJlf9NlGSK0QzZXHZGH1nws3gME=\n\n— rekor.sigstore.dev wNI9ajBEAiAx+J15spAZbi/hue6IOVtmd4vwwZSJ0umAMoC0ckUMiAIgfmg2/4BQc0AQIBySB7Ov+Rtm3mopsgLmmMTeNxmEaHc=\n', 'hashes': ['fa87621a4608dc4653358fb01aaf8185f952a88d96928cd892d6118ecb032868', 'eb3392ef793b49d65d7b54ac8fbac605eb279b5e3a437ed15b21827dc673ed41', 'c9a04d3a05b469ec6b0dd9d15dff5448baace7a305f53f774d04c170bc9c2f46', 'e2cec125bb53eff2d0dfdeb5b70e6dcbf1966d90516f60567718baf299434264', 'bcefa85da5d4fc7db244f1bf9fd6fc502028b8294b90ada0dd387b9dea81e280', '9bc8e601d7371c40caaafbc82a61a1aa88a502fa81c5986c92d5e65e1e7c5a20'], 'logIndex': 10616865, 'rootHash': '078850e2d4df62e3937838715c995ff4d94648ad10cd95c76461f59f0b3780c1', 'treeSize': 10616867}, 'signedEntryTimestamp': 'MEUCIQCJ2FsQTjTD5j8+6nMYpv1PUPsl4qZ8iE2UsJuZq4leUgIgdaysXZR7zBFmB50iRiC41O8+WGIhLuu1bMQZcs0lYrE='}}}
Transparency log entry created with index: 132521127
DSSE PAE: b'DSSEv1 28 application/vnd.in-toto+json 287 {"_type":"https://in-toto.io/Statement/v1","subject":[{"name":"vortex_array-0.10.1-cp311-abi3-macosx_11_0_arm64.whl","digest":{"sha256":"512f43f89677b5950c02f8283c3de183fb0b5899ce08a433ca79d410e6c77dc1"}}],"predicateType":"https://docs.pypi.org/attestations/publish/v1","predicate":null}'
proposed: {"apiVersion": "0.0.1", "kind": "dsse", "spec": {"proposedContent": {"envelope": "{\"payload\": \"eyJfdHlwZSI6Imh0dHBzOi8vaW4tdG90by5pby9TdGF0ZW1lbnQvdjEiLCJzdWJqZWN0IjpbeyJuYW1lIjoidm9ydGV4X2FycmF5LTAuMTAuMS1jcDMxMS1hYmkzLW1hY29zeF8xMV8wX2FybTY0LndobCIsImRpZ2VzdCI6eyJzaGEyNTYiOiI1MTJmNDNmODk2NzdiNTk1MGMwMmY4MjgzYzNkZTE4M2ZiMGI1ODk5Y2UwOGE0MzNjYTc5ZDQxMGU2Yzc3ZGMxIn19XSwicHJlZGljYXRlVHlwZSI6Imh0dHBzOi8vZG9jcy5weXBpLm9yZy9hdHRlc3RhdGlvbnMvcHVibGlzaC92MSIsInByZWRpY2F0ZSI6bnVsbH0=\", \"payloadType\": \"application/vnd.in-toto+json\", \"signatures\": [{\"sig\": \"MEQCIHBbcnqXz4Nv4o8yDH5emwedhwjwWsNTIPx4poKd1W4MAiBz2HOiQcHIg703X5taU0dsHwXdcy56FOzWrjeA7en3BA==\"}]}", "verifiers": ["LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUd2akNDQmtTZ0F3SUJBZ0lVQ2I5Q0RwdTZuWk9UaFQyOXZZZE13YTV2S0J3d0NnWUlLb1pJemowRUF3TXcKTnpFVk1CTUdBMVVFQ2hNTWMybG5jM1J2Y21VdVpHVjJNUjR3SEFZRFZRUURFeFZ6YVdkemRHOXlaUzFwYm5SbApjbTFsWkdsaGRHVXdIaGNOTWpRd09USXdNVFkxTVRRMldoY05NalF3T1RJd01UY3dNVFEyV2pBQU1Ga3dFd1lICktvWkl6ajBDQVFZSUtvWkl6ajBEQVFjRFFnQUU4eEpOZlIwVUcvdVBVU1FvNTUzK0pkSmNBaWZFelMzdDJpdkkKM042eTBwSGYvKzM2M1kva2VFbjBnRXpweXJ5djJkWWtibmhGQmFyVFg2TWtxYSthL2FPQ0JXTXdnZ1ZmTUE0RwpBMVVkRHdFQi93UUVBd0lIZ0RBVEJnTlZIU1VFRERBS0JnZ3JCZ0VGQlFjREF6QWRCZ05WSFE0RUZnUVU0c2YwCkhRZ3JvQ1B1R1dqRFNuRko2RUV2d21jd0h3WURWUjBqQkJnd0ZvQVUzOVBwejFZa0VaYjVxTmpwS0ZXaXhpNFkKWkQ4d2FBWURWUjBSQVFIL0JGNHdYSVphYUhSMGNITTZMeTluYVhSb2RXSXVZMjl0TDNOd2FYSmhiR1JpTDNadgpjblJsZUM4dVoybDBhSFZpTDNkdmNtdG1iRzkzY3k5d2RXSnNhWE5vTFhadmNuUmxlQzU1Yld4QWNtVm1jeTlvClpXRmtjeTlrWlhabGJHOXdNRGtHQ2lzR0FRUUJnNzh3QVFFRUsyaDBkSEJ6T2k4dmRHOXJaVzR1WVdOMGFXOXUKY3k1bmFYUm9kV0oxYzJWeVkyOXVkR1Z1ZEM1amIyMHdFZ1lLS3dZQkJBR0R2ekFCQWdRRWNIVnphREEyQmdvcgpCZ0VFQVlPL01BRURCQ2hoTnpnME1XTTVOVEZoTlRkak5qQTNaVFZtTW1JNE16ZzBZV0UxWWpRM01EQmtORFk0CllURTRNQmtHQ2lzR0FRUUJnNzh3QVFRRUMxSmxiR1ZoYzJVdGNHeDZNQjBHQ2lzR0FRUUJnNzh3QVFVRUQzTncKYVhKaGJHUmlMM1p2Y25SbGVEQWdCZ29yQmdFRUFZTy9NQUVHQkJKeVpXWnpMMmhsWVdSekwyUmxkbVZzYjNBdwpPd1lLS3dZQkJBR0R2ekFCQ0FRdERDdG9kSFJ3Y3pvdkwzUnZhMlZ1TG1GamRHbHZibk11WjJsMGFIVmlkWE5sCmNtTnZiblJsYm5RdVkyOXRNR29HQ2lzR0FRUUJnNzh3QVFrRVhBeGFhSFIwY0hNNkx5OW5hWFJvZFdJdVkyOXQKTDNOd2FYSmhiR1JpTDNadmNuUmxlQzh1WjJsMGFIVmlMM2R2Y210bWJHOTNjeTl3ZFdKc2FYTm9MWFp2Y25SbAplQzU1Yld4QWNtVm1jeTlvWldGa2N5OWtaWFpsYkc5d01EZ0dDaXNHQVFRQmc3OHdBUW9FS2d3b1lUYzROREZqCk9UVXhZVFUzWXpZd04yVTFaakppT0RNNE5HRmhOV0kwTnpBd1pEUTJPR0V4T0RBZEJnb3JCZ0VFQVlPL01BRUwKQkE4TURXZHBkR2gxWWkxb2IzTjBaV1F3TWdZS0t3WUJCQUdEdnpBQkRBUWtEQ0pvZEhSd2N6b3ZMMmRwZEdoMQpZaTVqYjIwdmMzQnBjbUZzWkdJdmRtOXlkR1Y0TURnR0Npc0dBUVFCZzc4d0FRMEVLZ3dvWVRjNE5ERmpPVFV4CllUVTNZell3TjJVMVpqSmlPRE00TkdGaE5XSTBOekF3WkRRMk9HRXhPREFpQmdvckJnRUVBWU8vTUFFT0JCUU0KRW5KbFpuTXZhR1ZoWkhNdlpHVjJaV3h2Y0RBWkJnb3JCZ0VFQVlPL01BRVBCQXNNQ1RjMk5EQXlNRGsyT1RBcgpCZ29yQmdFRUFZTy9NQUVRQkIwTUcyaDBkSEJ6T2k4dloybDBhSFZpTG1OdmJTOXpjR2x5WVd4a1lqQVpCZ29yCkJnRUVBWU8vTUFFUkJBc01DVEV4T1RrNE16SXdNakJuQmdvckJnRUVBWU8vTUFFU0JGa01WMmgwZEhCek9pOHYKWjJsMGFIVmlMbU52YlM5emNHbHlZV3hrWWk5MmIzSjBaWGd2TG1kcGRHaDFZaTkzYjNKclpteHZkM012Y21WcwpaV0Z6WlMxd2JIb3VlVzFzUUhKbFpuTXZhR1ZoWkhNdlpHVjJaV3h2Y0RBNEJnb3JCZ0VFQVlPL01BRVRCQ29NCktHRTNPRFF4WXprMU1XRTFOMk0yTURkbE5XWXlZamd6T0RSaFlUVmlORGN3TUdRME5qaGhNVGd3RkFZS0t3WUIKQkFHRHZ6QUJGQVFHREFSd2RYTm9NRllHQ2lzR0FRUUJnNzh3QVJVRVNBeEdhSFIwY0hNNkx5OW5hWFJvZFdJdQpZMjl0TDNOd2FYSmhiR1JpTDNadmNuUmxlQzloWTNScGIyNXpMM0oxYm5Ndk1UQTVOakkzTlRJMk1UQXZZWFIwClpXMXdkSE12TVRBV0Jnb3JCZ0VFQVlPL01BRVdCQWdNQm5CMVlteHBZekNCaWdZS0t3WUJCQUhXZVFJRUFnUjgKQkhvQWVBQjJBTjA5TUdyR3h4RXlZeGtlSEpsbk53S2lTbDY0M2p5dC80ZUtjb0F2S2U2T0FBQUJraEJZeGVvQQpBQVFEQUVjd1JRSWhBSUhzelRkWjRrTkRHbjU4cXk2Wm12NTdZZG54OFZKNmpQNVMya2lCY2FReUFpQlRLQkpaCmVQR3JucFN6N1BKbFRWTG5VaGZQclRkREplMm5oT0lJUm9UNHFUQUtCZ2dxaGtqT1BRUURBd05vQURCbEFqRUEKOHBsMTlxTzZJOFhzM0NhMUp0b3k5RW5BazlJOGgxYmdubzdLOTVUUGZza1ArTGV0UG9IOHlVUVFzcTA0d2ttdQpBakJKMDIrK3dnblQyb0cvSUx3QlVwTktjVUtxbTU0YVp1MXR5SGlvMkpHc3pHOTlQbytCbUU5ZENRL0dMSThZCjhXUT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo="]}, "signatures": null, "envelopeHash": null, "payloadHash": null}}
integrated: {'108e9186e8c5677a04dbc0172e34d7f7f067010897e905579cc6835c50ed959a7793abacde746105': {'body': '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', 'integratedTime': 1726851106, 'logID': 'c0d23d6ad406973f9559f3ba2d1ca01f84147d8ffc5b8445c224f98b9591801d', 'logIndex': 132521129, 'verification': {'inclusionProof': {'checkpoint': 'rekor.sigstore.dev - 1193050959916656506\n10616869\n80HdCGGxGCrEzrZFTn24o1jcJjKTp4HCl0RiOTymBZY=\n\n— rekor.sigstore.dev wNI9ajBFAiEAw6BDOdXuI0W9sGvEpMfppUd+HjmtRhx8N64zrUhMNa4CIAzSoMUH1vpE2Q9g/ziwfOna3gXaomWZ66eZl9MPfVek\n', 'hashes': ['eb3392ef793b49d65d7b54ac8fbac605eb279b5e3a437ed15b21827dc673ed41', '180d1c2605cfc1a281e4d85dc342b560968fb94ebcb114ba7deb9276554b57ca', 'b30dfd60215682e4b9042b56e97294ce514e1947760fa416f3589ae85faab65b', 'c9a04d3a05b469ec6b0dd9d15dff5448baace7a305f53f774d04c170bc9c2f46', 'e2cec125bb53eff2d0dfdeb5b70e6dcbf1966d90516f60567718baf299434264', 'bcefa85da5d4fc7db244f1bf9fd6fc502028b8294b90ada0dd387b9dea81e280', '9bc8e601d7371c40caaafbc82a61a1aa88a502fa81c5986c92d5e65e1e7c5a20'], 'logIndex': 10616867, 'rootHash': 'f341dd0861b1182ac4ceb6454e7db8a358dc263293a781c2974462393ca60596', 'treeSize': 10616869}, 'signedEntryTimestamp': 'MEYCIQCmfKjODP0X7yVU63Rf+BvSjXIHAEkude644ti57Ko76wIhAMrY/0XcEcdZ8Cs6z+opoi5OzAhY/c1C1qfrM5fjYwxw'}}}
Transparency log entry created with index: 132521129
DSSE PAE: b'DSSEv1 28 application/vnd.in-toto+json 312 {"_type":"https://in-toto.io/Statement/v1","subject":[{"name":"vortex_array-0.10.1-cp311-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","digest":{"sha256":"154584dd8489f5dc91c42b9353507013cecb2a4607ce7eaa7b795e07bc6896af"}}],"predicateType":"https://docs.pypi.org/attestations/publish/v1","predicate":null}'
proposed: {"apiVersion": "0.0.1", "kind": "dsse", "spec": {"proposedContent": {"envelope": "{\"payload\": \"eyJfdHlwZSI6Imh0dHBzOi8vaW4tdG90by5pby9TdGF0ZW1lbnQvdjEiLCJzdWJqZWN0IjpbeyJuYW1lIjoidm9ydGV4X2FycmF5LTAuMTAuMS1jcDMxMS1hYmkzLW1hbnlsaW51eDIwMTRfeDg2XzY0Lm1hbnlsaW51eF8yXzE3X3g4Nl82NC53aGwiLCJkaWdlc3QiOnsic2hhMjU2IjoiMTU0NTg0ZGQ4NDg5ZjVkYzkxYzQyYjkzNTM1MDcwMTNjZWNiMmE0NjA3Y2U3ZWFhN2I3OTVlMDdiYzY4OTZhZiJ9fV0sInByZWRpY2F0ZVR5cGUiOiJodHRwczovL2RvY3MucHlwaS5vcmcvYXR0ZXN0YXRpb25zL3B1Ymxpc2gvdjEiLCJwcmVkaWNhdGUiOm51bGx9\", \"payloadType\": \"application/vnd.in-toto+json\", \"signatures\": [{\"sig\": \"MEQCIEwXOHh6IyYh1cpyOFXlh4b+4EjuimmT+rSlarpn1V46AiApc1v6ClZCgqYPc5PGGMC2VF/A6ueV/f12VsUOXW4v/w==\"}]}", "verifiers": ["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"]}, "signatures": null, "envelopeHash": null, "payloadHash": null}}
integrated: {'108e9186e8c5677a79cc7fb10bee7f66b8ff585307561ddd8d6be5bee06d1bae2ee75afe88031789': {'body': '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', 'integratedTime': 1726851107, 'logID': 'c0d23d6ad406973f9559f3ba2d1ca01f84147d8ffc5b8445c224f98b9591801d', 'logIndex': 132521131, 'verification': {'inclusionProof': {'checkpoint': 'rekor.sigstore.dev - 1193050959916656506\n10616870\njQURpsxe+Ipx0CmN7e8YeNrc22hdhcO/3TN+E/PhdrM=\n\n— rekor.sigstore.dev wNI9ajBGAiEAxWGRIW6PEaI2LBi8g5KVsx19OREYQxCN3btTXdBJ7iICIQDGyTW7sCVfFz6cMJoySPJRumYRzyS3Btqx8U1doTY/qQ==\n', 'hashes': ['b30dfd60215682e4b9042b56e97294ce514e1947760fa416f3589ae85faab65b', '75d1bf01f16bd85e64cba0af54658113cb200aec5f4cdc54875605371497018d', 'c9a04d3a05b469ec6b0dd9d15dff5448baace7a305f53f774d04c170bc9c2f46', 'e2cec125bb53eff2d0dfdeb5b70e6dcbf1966d90516f60567718baf299434264', 'bcefa85da5d4fc7db244f1bf9fd6fc502028b8294b90ada0dd387b9dea81e280', '9bc8e601d7371c40caaafbc82a61a1aa88a502fa81c5986c92d5e65e1e7c5a20'], 'logIndex': 10616869, 'rootHash': '8d0511a6cc5ef88a71d0298dedef1878dadcdb685d85c3bfdd337e13f3e176b3', 'treeSize': 10616870}, 'signedEntryTimestamp': 'MEUCICruMvELWeUrTPvfPFpZ8uiLxEMPQr+B8kiVtKsHXX4kAiEA3a3rBztD7nO96kUMitqNupKf1wadVFmjyps3EBwMXus='}}}
Transparency log entry created with index: 132521131
DSSE PAE: b'DSSEv1 28 application/vnd.in-toto+json 289 {"_type":"https://in-toto.io/Statement/v1","subject":[{"name":"vortex_array-0.10.1-cp311-abi3-macosx_10_12_x86_64.whl","digest":{"sha256":"4b69f068bde9967a15e0736109bb4860b0bc9864a2510a889da2e6514fdda926"}}],"predicateType":"https://docs.pypi.org/attestations/publish/v1","predicate":null}'
proposed: {"apiVersion": "0.0.1", "kind": "dsse", "spec": {"proposedContent": {"envelope": "{\"payload\": \"eyJfdHlwZSI6Imh0dHBzOi8vaW4tdG90by5pby9TdGF0ZW1lbnQvdjEiLCJzdWJqZWN0IjpbeyJuYW1lIjoidm9ydGV4X2FycmF5LTAuMTAuMS1jcDMxMS1hYmkzLW1hY29zeF8xMF8xMl94ODZfNjQud2hsIiwiZGlnZXN0Ijp7InNoYTI1NiI6IjRiNjlmMDY4YmRlOTk2N2ExNWUwNzM2MTA5YmI0ODYwYjBiYzk4NjRhMjUxMGE4ODlkYTJlNjUxNGZkZGE5MjYifX1dLCJwcmVkaWNhdGVUeXBlIjoiaHR0cHM6Ly9kb2NzLnB5cGkub3JnL2F0dGVzdGF0aW9ucy9wdWJsaXNoL3YxIiwicHJlZGljYXRlIjpudWxsfQ==\", \"payloadType\": \"application/vnd.in-toto+json\", \"signatures\": [{\"sig\": \"MEYCIQDGtiDbuKMd0jnIcGrp/TE3bqjbCUj0n5kB7BZ0kTDsEwIhAMh9smMaEFXquGIxZJ0hDs3M9SZJs3CV39J53s6xG8WV\"}]}", "verifiers": ["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"]}, "signatures": null, "envelopeHash": null, "payloadHash": null}}
integrated: {'108e9186e8c5677a1e2dae54a047b1c9f0f31e5b25165711120cd4bc1013d3828a831ea47a9f393d': {'body': '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', 'integratedTime': 1726851107, 'logID': 'c0d23d6ad406973f9559f3ba2d1ca01f84147d8ffc5b8445c224f98b9591801d', 'logIndex': 132521132, 'verification': {'inclusionProof': {'checkpoint': 'rekor.sigstore.dev - 1193050959916656506\n10616871\nifKH4XYXKDnsgjA2L2NBTNDd3EacLWdbv60ilDthHQY=\n\n— rekor.sigstore.dev wNI9ajBEAiAsx+osmkIGqw0NE7BO3Wr4Fnd1UNTAYrtyJTQGOHXF0gIgBtASeH5hYRV8qWlGPA/a6YR3q1CFzrxC5uMA/aMH16M=\n', 'hashes': ['1964db9abe6a6ebb2e024602bbe66b2ac53ab4917ef95f82daab7a1a94cc04db', '75d1bf01f16bd85e64cba0af54658113cb200aec5f4cdc54875605371497018d', 'c9a04d3a05b469ec6b0dd9d15dff5448baace7a305f53f774d04c170bc9c2f46', 'e2cec125bb53eff2d0dfdeb5b70e6dcbf1966d90516f60567718baf299434264', 'bcefa85da5d4fc7db244f1bf9fd6fc502028b8294b90ada0dd387b9dea81e280', '9bc8e601d7371c40caaafbc82a61a1aa88a502fa81c5986c92d5e65e1e7c5a20'], 'logIndex': 10616870, 'rootHash': '89f287e176172839ec8230362f63414cd0dddc469c2d675bbfad22943b611d06', 'treeSize': 10616871}, 'signedEntryTimestamp': 'MEUCIQC6CQ22yAbsNm4E9okAVhmuaXznxskURt4Wd8xfgvZARQIgb8nlxEX7sFLxRjKSs+07CHR1yUNfIiIf9S6tM36CZRg='}}}
Transparency log entry created with index: 132521132
DSSE PAE: b'DSSEv1 28 application/vnd.in-toto+json 331 {"_type":"https://in-toto.io/Statement/v1","subject":[{"name":"vortex_array-0.10.1-cp311-abi3-macosx_10_12_universal2.macosx_10_12_x86_64.macosx_11_0_arm64.whl","digest":{"sha256":"9980d7ba0fd086fdc4af28bdc3c54b6b20e73ac1582e6f05ad6bbd5fb425fc3c"}}],"predicateType":"https://docs.pypi.org/attestations/publish/v1","predicate":null}'
proposed: {"apiVersion": "0.0.1", "kind": "dsse", "spec": {"proposedContent": {"envelope": "{\"payload\": \"eyJfdHlwZSI6Imh0dHBzOi8vaW4tdG90by5pby9TdGF0ZW1lbnQvdjEiLCJzdWJqZWN0IjpbeyJuYW1lIjoidm9ydGV4X2FycmF5LTAuMTAuMS1jcDMxMS1hYmkzLW1hY29zeF8xMF8xMl91bml2ZXJzYWwyLm1hY29zeF8xMF8xMl94ODZfNjQubWFjb3N4XzExXzBfYXJtNjQud2hsIiwiZGlnZXN0Ijp7InNoYTI1NiI6Ijk5ODBkN2JhMGZkMDg2ZmRjNGFmMjhiZGMzYzU0YjZiMjBlNzNhYzE1ODJlNmYwNWFkNmJiZDVmYjQyNWZjM2MifX1dLCJwcmVkaWNhdGVUeXBlIjoiaHR0cHM6Ly9kb2NzLnB5cGkub3JnL2F0dGVzdGF0aW9ucy9wdWJsaXNoL3YxIiwicHJlZGljYXRlIjpudWxsfQ==\", \"payloadType\": \"application/vnd.in-toto+json\", \"signatures\": [{\"sig\": \"MEUCIQDbuV+9o2T9Ck1MX8+wsUBDmAjDdJHGZvpI8LgAIz777QIgAnZN4av/4mg1jbY2nh3EWrbiwEf9Io+61lvTLFvfGxI=\"}]}", "verifiers": ["LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUd2akNDQmtTZ0F3SUJBZ0lVQ2I5Q0RwdTZuWk9UaFQyOXZZZE13YTV2S0J3d0NnWUlLb1pJemowRUF3TXcKTnpFVk1CTUdBMVVFQ2hNTWMybG5jM1J2Y21VdVpHVjJNUjR3SEFZRFZRUURFeFZ6YVdkemRHOXlaUzFwYm5SbApjbTFsWkdsaGRHVXdIaGNOTWpRd09USXdNVFkxTVRRMldoY05NalF3T1RJd01UY3dNVFEyV2pBQU1Ga3dFd1lICktvWkl6ajBDQVFZSUtvWkl6ajBEQVFjRFFnQUU4eEpOZlIwVUcvdVBVU1FvNTUzK0pkSmNBaWZFelMzdDJpdkkKM042eTBwSGYvKzM2M1kva2VFbjBnRXpweXJ5djJkWWtibmhGQmFyVFg2TWtxYSthL2FPQ0JXTXdnZ1ZmTUE0RwpBMVVkRHdFQi93UUVBd0lIZ0RBVEJnTlZIU1VFRERBS0JnZ3JCZ0VGQlFjREF6QWRCZ05WSFE0RUZnUVU0c2YwCkhRZ3JvQ1B1R1dqRFNuRko2RUV2d21jd0h3WURWUjBqQkJnd0ZvQVUzOVBwejFZa0VaYjVxTmpwS0ZXaXhpNFkKWkQ4d2FBWURWUjBSQVFIL0JGNHdYSVphYUhSMGNITTZMeTluYVhSb2RXSXVZMjl0TDNOd2FYSmhiR1JpTDNadgpjblJsZUM4dVoybDBhSFZpTDNkdmNtdG1iRzkzY3k5d2RXSnNhWE5vTFhadmNuUmxlQzU1Yld4QWNtVm1jeTlvClpXRmtjeTlrWlhabGJHOXdNRGtHQ2lzR0FRUUJnNzh3QVFFRUsyaDBkSEJ6T2k4dmRHOXJaVzR1WVdOMGFXOXUKY3k1bmFYUm9kV0oxYzJWeVkyOXVkR1Z1ZEM1amIyMHdFZ1lLS3dZQkJBR0R2ekFCQWdRRWNIVnphREEyQmdvcgpCZ0VFQVlPL01BRURCQ2hoTnpnME1XTTVOVEZoTlRkak5qQTNaVFZtTW1JNE16ZzBZV0UxWWpRM01EQmtORFk0CllURTRNQmtHQ2lzR0FRUUJnNzh3QVFRRUMxSmxiR1ZoYzJVdGNHeDZNQjBHQ2lzR0FRUUJnNzh3QVFVRUQzTncKYVhKaGJHUmlMM1p2Y25SbGVEQWdCZ29yQmdFRUFZTy9NQUVHQkJKeVpXWnpMMmhsWVdSekwyUmxkbVZzYjNBdwpPd1lLS3dZQkJBR0R2ekFCQ0FRdERDdG9kSFJ3Y3pvdkwzUnZhMlZ1TG1GamRHbHZibk11WjJsMGFIVmlkWE5sCmNtTnZiblJsYm5RdVkyOXRNR29HQ2lzR0FRUUJnNzh3QVFrRVhBeGFhSFIwY0hNNkx5OW5hWFJvZFdJdVkyOXQKTDNOd2FYSmhiR1JpTDNadmNuUmxlQzh1WjJsMGFIVmlMM2R2Y210bWJHOTNjeTl3ZFdKc2FYTm9MWFp2Y25SbAplQzU1Yld4QWNtVm1jeTlvWldGa2N5OWtaWFpsYkc5d01EZ0dDaXNHQVFRQmc3OHdBUW9FS2d3b1lUYzROREZqCk9UVXhZVFUzWXpZd04yVTFaakppT0RNNE5HRmhOV0kwTnpBd1pEUTJPR0V4T0RBZEJnb3JCZ0VFQVlPL01BRUwKQkE4TURXZHBkR2gxWWkxb2IzTjBaV1F3TWdZS0t3WUJCQUdEdnpBQkRBUWtEQ0pvZEhSd2N6b3ZMMmRwZEdoMQpZaTVqYjIwdmMzQnBjbUZzWkdJdmRtOXlkR1Y0TURnR0Npc0dBUVFCZzc4d0FRMEVLZ3dvWVRjNE5ERmpPVFV4CllUVTNZell3TjJVMVpqSmlPRE00TkdGaE5XSTBOekF3WkRRMk9HRXhPREFpQmdvckJnRUVBWU8vTUFFT0JCUU0KRW5KbFpuTXZhR1ZoWkhNdlpHVjJaV3h2Y0RBWkJnb3JCZ0VFQVlPL01BRVBCQXNNQ1RjMk5EQXlNRGsyT1RBcgpCZ29yQmdFRUFZTy9NQUVRQkIwTUcyaDBkSEJ6T2k4dloybDBhSFZpTG1OdmJTOXpjR2x5WVd4a1lqQVpCZ29yCkJnRUVBWU8vTUFFUkJBc01DVEV4T1RrNE16SXdNakJuQmdvckJnRUVBWU8vTUFFU0JGa01WMmgwZEhCek9pOHYKWjJsMGFIVmlMbU52YlM5emNHbHlZV3hrWWk5MmIzSjBaWGd2TG1kcGRHaDFZaTkzYjNKclpteHZkM012Y21WcwpaV0Z6WlMxd2JIb3VlVzFzUUhKbFpuTXZhR1ZoWkhNdlpHVjJaV3h2Y0RBNEJnb3JCZ0VFQVlPL01BRVRCQ29NCktHRTNPRFF4WXprMU1XRTFOMk0yTURkbE5XWXlZamd6T0RSaFlUVmlORGN3TUdRME5qaGhNVGd3RkFZS0t3WUIKQkFHRHZ6QUJGQVFHREFSd2RYTm9NRllHQ2lzR0FRUUJnNzh3QVJVRVNBeEdhSFIwY0hNNkx5OW5hWFJvZFdJdQpZMjl0TDNOd2FYSmhiR1JpTDNadmNuUmxlQzloWTNScGIyNXpMM0oxYm5Ndk1UQTVOakkzTlRJMk1UQXZZWFIwClpXMXdkSE12TVRBV0Jnb3JCZ0VFQVlPL01BRVdCQWdNQm5CMVlteHBZekNCaWdZS0t3WUJCQUhXZVFJRUFnUjgKQkhvQWVBQjJBTjA5TUdyR3h4RXlZeGtlSEpsbk53S2lTbDY0M2p5dC80ZUtjb0F2S2U2T0FBQUJraEJZeGVvQQpBQVFEQUVjd1JRSWhBSUhzelRkWjRrTkRHbjU4cXk2Wm12NTdZZG54OFZKNmpQNVMya2lCY2FReUFpQlRLQkpaCmVQR3JucFN6N1BKbFRWTG5VaGZQclRkREplMm5oT0lJUm9UNHFUQUtCZ2dxaGtqT1BRUURBd05vQURCbEFqRUEKOHBsMTlxTzZJOFhzM0NhMUp0b3k5RW5BazlJOGgxYmdubzdLOTVUUGZza1ArTGV0UG9IOHlVUVFzcTA0d2ttdQpBakJKMDIrK3dnblQyb0cvSUx3QlVwTktjVUtxbTU0YVp1MXR5SGlvMkpHc3pHOTlQbytCbUU5ZENRL0dMSThZCjhXUT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo="]}, "signatures": null, "envelopeHash": null, "payloadHash": null}}
integrated: {'108e9186e8c5677af90841097f4933417c9eb5c06324ce36e3c4bed8ad09a4f8680e67a18bd7e984': {'body': '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', 'integratedTime': 1726851107, 'logID': 'c0d23d6ad406973f9559f3ba2d1ca01f84147d8ffc5b8445c224f98b9591801d', 'logIndex': 132521133, 'verification': {'inclusionProof': {'checkpoint': 'rekor.sigstore.dev - 1193050959916656506\n10616872\npI3keW8bHnQCP6LmlO8WRVIvnZ/bMv9OgWYG/sQstU0=\n\n— rekor.sigstore.dev wNI9ajBGAiEA+DrWTQ2IP3ijW4+pyyYsdLGq4ku/64aPscztryTPRcMCIQCQWqCgQAVI4u5Eb0U+2H2f5Pxmfz1NjfxOlXWutH4esA==\n', 'hashes': ['1e2dae54a047b1c9f0f31e5b25165711120cd4bc1013d3828a831ea47a9f393d', '1964db9abe6a6ebb2e024602bbe66b2ac53ab4917ef95f82daab7a1a94cc04db', '75d1bf01f16bd85e64cba0af54658113cb200aec5f4cdc54875605371497018d', 'c9a04d3a05b469ec6b0dd9d15dff5448baace7a305f53f774d04c170bc9c2f46', 'e2cec125bb53eff2d0dfdeb5b70e6dcbf1966d90516f60567718baf299434264', 'bcefa85da5d4fc7db244f1bf9fd6fc502028b8294b90ada0dd387b9dea81e280', '9bc8e601d7371c40caaafbc82a61a1aa88a502fa81c5986c92d5e65e1e7c5a20'], 'logIndex': 10616871, 'rootHash': 'a48de4796f1b1e74023fa2e694ef1645522f9d9fdb32ff4e816606fec42cb54d', 'treeSize': 10616872}, 'signedEntryTimestamp': 'MEUCIHc4q15EU2uD3uRWb0Mg5GDs9LWFAAIYyU7tEmQ3vwn4AiEA7LhdWyFx9Kh9d/TBaSYh8cLU5wQmIm36hf1P2jheJUQ='}}}
Transparency log entry created with index: 132521133
Showing hash values of files to be uploaded:
/github/workspace/dist/vortex_array-0.10.1-cp311-abi3-macosx_11_0_arm64.whl.publish.attestation

SHA256: 1e9f5aca8eacf9f188ada7b88a49c63b76885c257e2c9cf8868919b301ab7d52
MD5: 780de6c4efe5d1e2cc4441340ec37077
BLAKE2-256: cd9ec99839b3b898c1f4d0cbb16bee86b9aa8ad95c833d14e5a33b03198e2c82

/github/workspace/dist/vortex_array-0.10.1-cp311-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl.publish.attestation

SHA256: 41b0d92264354af5842b7edb986754518f8de1f10422f7ee7b505014ce1bd4fa
MD5: 04dd693c4dddf98b133560edc044484b
BLAKE2-256: c1844964463b99dc5a4ffa282eefaff8f15b376dec1cd59e65b9cc4399f50519

/github/workspace/dist/vortex_array-0.10.1-cp311-abi3-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl.publish.attestation

SHA256: 497d348f96bee8b40ae51f3e245a93c9db513dadcd4e4c1242fb0e3c4fad33ed
MD5: 8574108e2a63da91502f393c17f6d1f4
BLAKE2-256: 8795c6c37f2658573d732273096e52cd5912fe9a049807efa055f5b1ae453950

/github/workspace/dist/vortex_array-0.10.1.tar.gz.publish.attestation

SHA256: c8e0c36ded66c0fc9c6263ebba276fa9d52fe687e94ae15579fbc992de7a9b15
MD5: 57f765451dee78d8d38e9ce7b030f35d
BLAKE2-256: 973bb3e5fc4f0fb43956770a03682ee0ef447241722eb595e90ac0d27f0723c1

/github/workspace/dist/vortex_array-0.10.1-cp311-abi3-macosx_10_12_x86_64.whl.publish.attestation

SHA256: ef98ae9241c86b3b940eaf0956ed4940fd17fe9acc69d09d010a831ba7c108c3
MD5: d1c14d77034a7cc80dee23f9c0498789
BLAKE2-256: e01a228314b7cc1519290d8518cd371802bc11c394d715feccf1636efb71bf63

/github/workspace/dist/vortex_array-0.10.1-cp311-abi3-macosx_11_0_arm64.whl

SHA256: 512f43f89677b5950c02f8283c3de183fb0b5899ce08a433ca79d410e6c77dc1
MD5: 720c16a46a372ab4b56855cc54272376
BLAKE2-256: fa9bf273725eb1eed4f3a8c0f8e7d3bb9934579c9ba96073061d9cac8ea7b875

/github/workspace/dist/vortex_array-0.10.1-cp311-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl

SHA256: 154584dd8489f5dc91c42b9353507013cecb2a4607ce7eaa7b795e07bc6896af
MD5: cc6a0b7956c5f881359eea47eabd983e
BLAKE2-256: 1e87948922934c6dbf6464a55ddc2f9708e09406a63fec69e7a0c587b426ecc7

/github/workspace/dist/vortex_array-0.10.1-cp311-abi3-macosx_10_12_x86_64.whl

SHA256: 4b69f068bde9967a15e0736109bb4860b0bc9864a2510a889da2e6514fdda926
MD5: 38e88ec80bd858c589754a21fb4d0ee7
BLAKE2-256: f2d6138bff0e69495d1f52c9c1d5a53097d09fa40dd8216bc7bb10e9d08a9ead

/github/workspace/dist/vortex_array-0.10.1-cp311-abi3-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl

SHA256: 9980d7ba0fd086fdc4af28bdc3c54b6b20e73ac1582e6f05ad6bbd5fb425fc3c
MD5: bcaa20bd2103a4886b5d08649adfe4c9
BLAKE2-256: 356bee03b124a85a915481a794bdbc9870950c1c27fed6763bb0af33403479c5

/github/workspace/dist/vortex_array-0.10.1.tar.gz

SHA256: 1520d374202b1e7909011054e2922e0fe2d117f5345d59d613ff2f9b90a44c75
MD5: 9f9e456276ba90d82da9f9f530340b9b
BLAKE2-256: ca2c1ee059cbf8c2409007392968d3b97e80d0005caa8fbffbe1ea32719386c0

Uploading distributions to https://upload.pypi.org/legacy/
INFO     dist/vortex_array-0.10.1-cp311-abi3-macosx_10_12_x86_64.macosx_11_0_arm
         64.macosx_10_12_universal2.whl (8.6 MB)                                
INFO     dist/vortex_array-0.10.1-cp311-abi3-macosx_10_12_x86_64.whl (4.4 MB)   
INFO     dist/vortex_array-0.10.1-cp311-abi3-macosx_11_0_arm64.whl (4.2 MB)     
INFO     dist/vortex_array-0.10.1-cp311-abi3-manylinux_2_17_x86_64.manylinux2014
         _x86_64.whl (5.2 MB)                                                   
INFO     dist/vortex_array-0.10.1.tar.gz (301.9 KB)                             
INFO     password set by command options                                        
INFO     username: __token__                                                    
INFO     password: <hidden>                                                     
Uploading 
vortex_array-0.10.1-cp311-abi3-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_1
2_universal2.whl
WARNING  Received "502: Bad Gateway"                                            
         Package upload appears to have failed. Retry 1 of 5.                   
Uploading 
vortex_array-0.10.1-cp311-abi3-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_1
2_universal2.whl
WARNING  Received "502: Bad Gateway"                                            
         Package upload appears to have failed. Retry 2 of 5.                   
Uploading 
vortex_array-0.10.1-cp311-abi3-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_1
2_universal2.whl
WARNING  Received "502: Bad Gateway"                                            
         Package upload appears to have failed. Retry 3 of 5.                   
Uploading 
vortex_array-0.10.1-cp311-abi3-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_1
2_universal2.whl
WARNING  Received "502: Bad Gateway"                                            
         Package upload appears to have failed. Retry 4 of 5.                   
Uploading 
vortex_array-0.10.1-cp311-abi3-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_1
2_universal2.whl
WARNING  Received "502: Bad Gateway"                                            
         Package upload appears to have failed. Retry 5 of 5.                   
INFO     Response from https://upload.pypi.org/legacy/:                         
         502 Bad Gateway                                                        
INFO     <html>                                                                 
         <head><title>502 Bad Gateway</title></head>                            
         <body>                                                                 
         <center><h1>502 Bad Gateway</h1></center>                              
         <hr><center>nginx</center>                                             
         </body>                                                                
         </html>                                                                

ERROR    HTTPError: 502 Bad Gateway from https://upload.pypi.org/legacy/        
         Bad Gateway
henryiii commented 2 months ago

Same issue with pyproject-metadata. I'm guessing this is due to attestations: true (since scikit-build-core just released with no issues), maybe due to the attestation change that was merged at https://github.com/pypi/warehouse/pull/16757 but is still pending here at https://github.com/pypa/gh-action-pypi-publish/pull/262 ? Not a very helpful error if that's the case.

webknjaz commented 2 months ago

cc @woodruffw @di ^

webknjaz commented 2 months ago

@danking that looks like a PyPI issue so we need to wait for the Warehouse maintainers to take a look. Meanwhile, if Henry is right, disabling the attestations might be a workaround for you.

webknjaz commented 2 months ago

I missed #262 in my notification. Thanks for pointing it out! I'll go ahead and merge it just in case that's it..

webknjaz commented 2 months ago

@danking could you try the commit from William's fork?

webknjaz commented 2 months ago

@danking restarting your workflow should pick up the new release. Let me know if #262 fixed it…

henryiii commented 2 months ago

I don't see a release? https://github.com/pypa/gh-action-pypi-publish/releases

robert3005 commented 2 months ago

I work with @danking . Just rerun it https://github.com/spiraldb/vortex/actions/runs/10962752610/job/30454969277. I see pypi-attestations~=0.0.12 but the response is an error (though not 502) 

INFO     Response from https://upload.pypi.org/legacy/:                         
         400 Could not verify the uploaded artifact using the included          
         attestation: Verification failed: 0 of 2 policies succeeded            
INFO     <html>                                                                 
          <head>                                                                
           <title>400 Could not verify the uploaded artifact using the included 
         attestation: Verification failed: 0 of 2 policies succeeded</title>    
          </head>                                                               
          <body>                                                                
           <h1>400 Could not verify the uploaded artifact using the included    
         attestation: Verification failed: 0 of 2 policies succeeded</h1>       
           The server could not comply with the request since it is either      
         malformed or otherwise incorrect.<br/><br/>                            
         Could not verify the uploaded artifact using the included attestation: 
         Verification failed: 0 of 2 policies succeeded                         

          </body>                                                               
         </html>                                                                
ERROR    HTTPError: 400 Bad Request from https://upload.pypi.org/legacy/        
         Could not verify the uploaded artifact using the included attestation: 
         Verification failed: 0 of 2 policies succeeded
henryiii commented 2 months ago

Ahh, it was pushed to the release branch. Better error at least!

webknjaz commented 2 months ago 
uses: ./.....

@robert3005 @danking reusable workflows are still unsupported: https://github.com/pypa/gh-action-pypi-publish/discussions/255#discussioncomment-10630881. That's what you're hitting. Follow the issue mentioned there to get notified when it's implemented.

henryiii commented 2 months ago

I've already uploaded the pyproject-metadata wheel manually, so I can't test quickly. I can see if there are any I can quickly check.

webknjaz commented 2 months ago

I don't see a release?

@henryiii I currently push a signed tag (and branches updates) from my laptop, and only then I fill out the GH release semi-manually. That's why you're seeing it appearing a bit later.

I can see if there are any I can quickly check.

Thanks! I suppose if there's a bigger problem, we'll get more reports.

I also checked that https://github.com/pypi/warehouse/pull/16757 was merged yesterday and since this is the first report we're seeing, my best guess is that this report is not related to that PR.

robert3005 commented 2 months ago

At least some closure. I can refactor and inline our workflows

danking commented 2 months ago

Hmm. @webknjaz, I did anticipate that reusable workflows would complicate the situation and actually granted both workflows (the caller and callee) trusted status. Regardless, I'll inline the workflow.

webknjaz commented 2 months ago

@danking reusable workflows sometimes work for some people in some narrow cases, but that's mostly by accident. Warehouse still needs to implement this properly. IIRC, you need to have both workflows in the same repository and use secrets: inherit. But that's just off the top of my head, I'm not using this approach and waiting until it's implemented officially. I just know that I saw it work somewhere, somehow.

henryiii commented 2 months ago

Worked here: https://github.com/henryiii/validate-pyproject-schema-store/actions/runs/10966878928/job/30455645466

:tada:

webknjaz commented 2 months ago

Thanks for verifying!

henryiii commented 2 months ago

Why does the changelog say "nah, that wasn't it?" It did fix the issue, which was affecting every user with attestations: true; the secondary issue about reusable workflows is separate.

webknjaz commented 2 months ago

I was under the impression that it was just a coincidence.. Perhaps I was wrong. I thought so because there were no reports for like a day after the Warehouse change.

woodruffw commented 2 months ago

Yep, that was indeed the fix! I think the reason no other reports occurred (thankfully) is because most people haven't flipped the attestations: switch 😄

di commented 2 months ago

I'm not sure I follow why the difference in pypi-attestations version caused a 500-level error here, @woodruffw do you know? I also didn't see these errors surface in our error reporting either, I think.

woodruffw commented 2 months ago

Hmm, you're right -- it should have caused solely a 400-level error, since the change in pypi-attestations was purely a fix to the Pydantic models (which, when validation fails, get surfaced via 4xx).

502 suggests a transient Fastly or other edge routing failure, possibly?

di commented 2 months ago

Yes, that is generally what I would expect to be the cause of a 502.

danking commented 2 months ago

FWIW, from 2024-09-20 14:33 UTC until around 2024-09-20 21:51 UTC, we ran the GitHub Action to submit to PyPI ten times. Each time it retries five times, each time receiving 502 Bad Gateway. I'm not sure exactly from which attempt the first log came.

We likewise assumed it was transient, which is why we retried for a few hours before reporting. Seems like maybe something between us and the PyPI servers misinterpreted the attestation failure as a 502?

woodruffw commented 2 months ago

Weird. There was a Fastly incident right around then, but it looks like it was in an unrelated service + was already being resolved by the time you began seeing the 502s here: https://www.fastlystatus.com/incident/376938

henryiii commented 2 months ago

I pushed several releases during that time, and the ones with attestations all failed. The ones without all succeeded.

Most packages aren't using attestations: true, as it's new and states its a beta feature.

henryiii commented 2 months ago

Easy way to test: just pin the old one and try it. :)

webknjaz commented 2 months ago

@woodruffw @di is it possible that Warehouse was responding with a 4xx and Fastly was turning that into a 502 by mistake as Dan suggested?

di commented 2 months ago

I don't see any way that that would happen, no.

henryiii commented 1 month ago

Pinning 1.10.1 absolutely does still produce a 502:

https://github.com/henryiii/validate-pyproject-schema-store/actions/runs/11224641446/job/31201797202

Uploading distributions to https://upload.pypi.org/legacy/
Uploading validate_pyproject_schema_store-2024.10.7-py3-none-any.whl
WARNING  Received "502: Bad Gateway"                                            
         Package upload appears to have failed. Retry 1 of 5.                   
Uploading validate_pyproject_schema_store-2024.10.7-py3-none-any.whl
WARNING  Received "502: Bad Gateway"                                            
         Package upload appears to have failed. Retry 2 of 5.                   
Uploading validate_pyproject_schema_store-2024.10.7-py3-none-any.whl
WARNING  Received "502: Bad Gateway"                                            
         Package upload appears to have failed. Retry 3 of 5.                   
Uploading validate_pyproject_schema_store-2024.10.7-py3-none-any.whl
WARNING  Received "502: Bad Gateway"                                            
         Package upload appears to have failed. Retry 4 of 5.                   
Uploading validate_pyproject_schema_store-2024.10.7-py3-none-any.whl
WARNING  Received "502: Bad Gateway"                                            
         Package upload appears to have failed. Retry 5 of 5.                   
WARNING  Error during upload. Retry with the --verbose option for more details. 
ERROR    HTTPError: 502 Bad Gateway from https://upload.pypi.org/legacy/        
         Bad Gateway

And unpinning fixes it:

https://github.com/henryiii/validate-pyproject-schema-store/actions/runs/11224728491/job/31202070560

Uploading distributions to https://upload.pypi.org/legacy/
Uploading validate_pyproject_schema_store-2024.10.7-py3-none-any.whl
Uploading validate_pyproject_schema_store-2024.10.7.tar.gz

View at:
https://pypi.org/project/validate-pyproject-schema-store/2024.10.7/

So I think the changelog should be re-edited to say this indeed fixed it.

webknjaz commented 1 month ago

@henryiii thank you! fixed.

di commented 1 month ago

That's surprising, @woodruffw we should probably figure out why that's happening...

woodruffw commented 1 month ago

That's surprising, @woodruffw we should probably figure out why that's happening...

I suspect it's the base64 change that caused us to do that point release in the first place, although I'm confused as to how it got surfaced as a 502. I'll look into it!

woodruffw commented 1 month ago

I'm confused as to how it got surfaced as a 502. I'll look into it!

I looked into it a bit, and I don't have a great working theory for why this is a 502 instead of a 40x. The only thing I can really think of is that the upload endpoint is on the forklift domain (i.e. upload.pypi.org) instead of pypi.org, so maybe there's some default exception processing that's being suppressed. I'll keep looking at it, though, since that doesn't seem very likely (I can't find anything in Warehouse or the infra routing that would suggest that theory).