Trying to release a new version of a package

[Kenneth Goldman]

Evidently my notes are wrong (or something else). I don't do this too often.

I cloned the repo: git clone https://src.fedoraproject.org/rpms/tss2.git
updated the .spec file
tested with fedpkg --release rawhide --name tss2 mockbuild
    (did f43 and f44 as well)

How do I push the changes?

In the past, I used:

fedpkg --release f43 --name tss2 new-sources ibmtss2.5.0.tar.gz

Output is:

Uploading: ibmtss2.5.0.tar.gz to
https://src.fedoraproject.org/repo/pkgs/upload.cgi
Could not execute new sources: Fail to upload files. Server returns status
403

and

git push origin rawhide

Output is:

fatal: Authentication failed for
'https://src.fedoraproject.org/rpms/tss2.git/'

I think my user name and password are ok since 'koji moshimoshi' succeeds.

--
Work 1-914-945-2415

--
Work 1-914-945-2415

[Leigh Scott]

Maybe an expired token

set-pagure-token    Updates the fedpkg.pagure API token in ~/.config/rpkg/fedpkg.conf file. Tokens are of length 64 and
                        contain only uppercase and numerical values. The new API token. Can be generated at:
                        https://pagure.io/settings/token/new

get the new token from the url

fedpkg set-pagure-token <new-token>

[Leigh Scott]

Also it's easier to clone with fedpkg

fedpkg co tss2

[Fabio Valentini]

On Mon, Jun 22, 2026 at 8:37 PM Kenneth Goldman  wrote:
> Evidently my notes are wrong (or something else). I don’t do this too often.
>
> I cloned the repo: git clone https://src.fedoraproject.org/rpms/tss2.git

I would recommend to clone with "fedpkg clone".

Using "https" remotes will cause issues with authentication on "push"
(as you note later).
> updated the .spec file
>
> tested with fedpkg --release rawhide --name tss2 mockbuild
>     (did f43 and f44 as well)
>
> How do I push the changes?
>
> In the past, I used:
>
> fedpkg --release f43 --name tss2 new-sources ibmtss2.5.0.tar.gz

This should be OK (though the "--release" and "--name" arguments
should be unnecessary, especially if you're running it inside the git
checkout).
> Output is:
>
> Uploading: ibmtss2.5.0.tar.gz to https://src.fedoraproject.org/repo/pkgs/upload.cgi
>
> Could not execute new sources: Fail to upload files. Server returns status 403

This might have been a transient server error, it sometimes happens. Try again?
> and
>
> git push origin rawhide
>
> Output is:
>
> fatal: Authentication failed for 'https://src.fedoraproject.org/rpms/tss2.git/'
>
> I think my user name and password are ok since ‘koji moshimoshi’ succeeds.

This is because pushing over https is not set up by default.
You either need to clone / push over ssh, *or* use "fedpkg push"
instead of plain "git push" which sets up authentication for you when
pushing over https.

Fabio

[Kevin Fenzi]

On Tue, Jun 23, 2026 at 11:51:24PM +0200, Fabio Valentini wrote:
> This is because pushing over https is not set up by default.
> You either need to clone / push over ssh, *or* use "fedpkg push"
> instead of plain "git push" which sets up authentication for you when
> pushing over https.

You just need to use fedpkg for _either_ clone (fedpkg clone -a) or
push (fedpkg push). Either way fedpkg will setup the token for you when
you push.

kevin