Page MenuHomePhabricator

l10n-bot cannot create GitLab merge requests due to gitlab-ssh migration
Closed, ResolvedPublic2 Estimated Story Points

Description

I just happened to notice that https://gitlab.wikimedia.org/toolforge-repos/lexeme-forms/ has a twn branch (commit author date 20 July), but as far as I can tell, no merge request was opened for it (the last one is from 18 June). Can someone take a look what’s wrong?

MR to GitLab are failing with the following error:

Unable to create a pull request for wikidata-lexeme-forms: cURL error 60: SSL: no alternative certificate subject name matches target hostname 'gitlab-ssh.wikimedia.org'

QA Plan

On exports, merge requests should be created for projects like https://gitlab.wikimedia.org/toolforge-repos/lexeme-forms/. Exports from translatewiki.net run on Monday and Thursday.

Event Timeline

I see, thanks! (I just noticed that Wikidata Image Positions has the same issue, but you also mentioned that in the comment over there.)

I think there might still be a problem – the twn branch was just updated (Thu Jul 23 14:30:58 2026 +0200) but there’s still no merge request.

Yes I was just looking at the same thing:

Unable to create a pull request for wikidata-lexeme-forms: cURL error 60: SSL: no alternative certificate subject name matches target hostname 'gitlab-ssh.wikimedia.org'

Which makes me sad. The MR creation should go over https.

LucasWerkmeister renamed this task from l10n-bot pushed a twn branch for Wikidata Lexeme Forms but did not create a merge request to l10n-bot cannot create GitLab merge requests due to gitlab-ssh migration.Jul 23 2026, 12:57 PM
abi_ set the point value for this task to 2.

Change #1323831 had a related patch set uploaded (by Abijeet Patro; author: Abijeet Patro):

[translatewiki@master] Use read URL for pull request creation, not export URL

https://gerrit.wikimedia.org/r/1323831

Change #1323831 merged by jenkins-bot:

[translatewiki@master] Use read URL for pull request creation, not export URL

https://gerrit.wikimedia.org/r/1323831

Implemented this functionality in 1323831: Use read URL for pull request creation, not export URL | https://gerrit.wikimedia.org/r/c/translatewiki/+/1323831; waiting for exports to happen tomorrow

Failed due to:

Unable to create a pull request for cite-unseen: Environment variable L10NBOT_TOKEN_gitlab_wikimedia_org is not defined
Unable to create a pull request for cite-unseen: Environment variable L10NBOT_TOKEN_gitlab_wikimedia_org is not defined

Probably because it was renamed to L10NBOT_TOKEN_gitlab_ssh_wikimedia_org in T430530#12137712? (I’m just guessing here.)

I've renamed the variable back.

Lets see if the MR gets created today.

Mentioned in SAL (#wikimedia-cloud) [2026-08-17T17:08:02Z] <wmbot~lucaswerkmeister@tools-bastion-15> deployed b6485e5984 (l10n updates: el, fa, fi, ga, gl, ja, lb, ms, nb, sl, tr – a few had queued up due to T432838) [actually deployed R2362:bb18af2eb1c8, temporary T431146 branch rebased on top of that]

Something seems to be broken again – Wikidata Lexeme Forms has a twn branch with a commit from 20 August, but no corresponding merge request.

(Side note: is there an existing task / feature request somewhere for not making translatewiki produce edits like changing вы to {{GENDER:$2|вы}} in the first place? To me it just seems like a waste of resources, including translator time, but I was told in the past that the software insists on the variable being “used” in this way.)

At least last export skipped some merge requests because another project was failing to create a commit.

is there an existing task / feature request somewhere for not making translatewiki produce edits like changing вы to {{GENDER:$2|вы}}

Software does not do it, but we display warnings for unused variables so translators. It's possible but bit laborious to keep exclusion list of variables that can be unused.