From mboxrd@z Thu Jan 1 00:00:00 1970 From: Matt Wette Subject: bug#39511: github tokens being deprecated Date: Sat, 8 Feb 2020 06:50:31 -0800 Message-ID: Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Return-path: Received: from eggs.gnu.org ([2001:470:142:3::10]:60188) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1j0RRo-0003sd-61 for bug-guix@gnu.org; Sat, 08 Feb 2020 09:51:05 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1j0RRm-00007p-QL for bug-guix@gnu.org; Sat, 08 Feb 2020 09:51:04 -0500 Received: from debbugs.gnu.org ([209.51.188.43]:44772) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1j0RRm-00007h-NK for bug-guix@gnu.org; Sat, 08 Feb 2020 09:51:02 -0500 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1j0RRm-0004ZX-Kp for bug-guix@gnu.org; Sat, 08 Feb 2020 09:51:02 -0500 Sender: "Debbugs-submit" Resent-Message-ID: Received: from eggs.gnu.org ([2001:470:142:3::10]:60162) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1j0RRM-0003sM-D8 for bug-guix@gnu.org; Sat, 08 Feb 2020 09:50:37 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1j0RRL-0008G6-8H for bug-guix@gnu.org; Sat, 08 Feb 2020 09:50:36 -0500 Received: from mail-pl1-x62b.google.com ([2607:f8b0:4864:20::62b]:34639) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1j0RRK-0008Er-VZ for bug-guix@gnu.org; Sat, 08 Feb 2020 09:50:35 -0500 Received: by mail-pl1-x62b.google.com with SMTP id j7so985424plt.1 for ; Sat, 08 Feb 2020 06:50:34 -0800 (PST) Received: from [192.168.2.183] (64-52-176-132.championbroadband.com. [64.52.176.132]) by smtp.gmail.com with ESMTPSA id p123sm6893752pfg.84.2020.02.08.06.50.32 for (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Sat, 08 Feb 2020 06:50:32 -0800 (PST) Content-Language: en-US List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+gcggb-bug-guix=m.gmane-mx.org@gnu.org Sender: "bug-Guix" To: 39511@debbugs.gnu.org $ guix refresh ... Backtrace:           12 (apply-smob/1 #) In ice-9/boot-9.scm:     705:2 11 (call-with-prompt _ _ #) In ice-9/eval.scm:     619:8 10 (_ #(#(#))) In guix/ui.scm:   1808:12  9 (run-guix-command _ . _) In ice-9/boot-9.scm:     829:9  8 (catch _ _ # ?)     829:9  7 (catch _ _ # ?) In guix/store.scm:    625:10  6 (call-with-store _)   1848:24  5 (run-with-store # ?) In guix/scripts/refresh.scm:    541:14  4 (_ _) In srfi/srfi-1.scm:     640:9  3 (for-each # ?) In guix/scripts/refresh.scm:     344:2  2 (check-for-package-update # ?) In guix/import/github.scm:    237:25  1 (latest-release #) In unknown file:            0 (scm-error misc-error #f "~A" ("Error downloading rel?") ?) ERROR: In procedure scm-error: Error downloading release information through the GitHub API. This may be fixed by using an access token and setting the environment variable GUIX_GITHUB_TOKEN, for instance one procured from https://github.com/settings/tokens after github token acquired: $ guix refresh ... guix refresh: warning: input 'Carp' of perl-xml-compile is in Perl core gnu/packages/xml.scm:1113:13: tinyxml2 would be upgraded from 7.0.1 to 7.1.0 following redirection to `https://api.github.com/repositories/7715820/releases?access_token=728ec76dc9ea4344b57ba6be86674ed9e0135090'... gnu/packages/xdisorg.scm:1731:13: python-pyperclip would be upgraded from 1.6.4 to 1.7.0 and then an email from github.com: Hi @mwette, On February 8th, 2020 at 14:37 (UTC) your personal access token (guix/bluefin) using GNU Guile was used as part of a query parameter to access an endpoint through the GitHub API: https://api.github.com/repositories/32202720/releases Please use the Authorization HTTP header instead, as using the `access_token` query parameter is deprecated and will be removed July 1st, 2020. Depending on your API usage, we'll be sending you this email reminder once every 3 days for each token and User-Agent used in API calls made on your behalf. Just one URL that was accessed with a token and User-Agent combination will be listed in the email reminder, not all. Visithttps://developer.github.com/changes/2019-11-05-deprecated-passwords-and-authorizations-api/#authenticating-using-query-parameters for more information. Thanks, The GitHub Team