releng

#11098 Unable to push to module branch 'mainline' to fix nginx CVEs
Closed: It's all good by humaton. Opened by heffer.

Closed: It's all good
Reopen Issue
  • Describe the issue

I need to update the nginx mainline modular branch to push a fix for CVE-2022-41741, CVE-2022-41742. For this I need to push to the 'mainline' branch of the nginx modulemd repo.
Looks like I'm getting hit by an overzealous regex intended to prevent me from pushing to the main branch.

Error message:

remote: Unspecified ref refs/heads/mainline is blocked
remote: Denied push for ref 'refs/heads/mainline' for user 'heffer'
remote: All changes have been rejected
remote: error: hook declined to update refs/heads/mainline
To ssh://pkgs.fedoraproject.org/modules/nginx
 ! [remote rejected] mainline -> mainline (hook declined)
error: failed to push some refs to 'ssh://pkgs.fedoraproject.org/modules/nginx'

  • When do you need this? (YYYY/MM/DD)
    ASAP

  • If we cannot complete your request, what is the impact?
    The nginx mainline module branch will remain on 1.23.1 and vulnerable.

Metadata Update from @phsmoura:
- Issue tagged with: high-gain, high-trouble, ops

Metadata Update from @phsmoura:
- Issue private status set to: True

Metadata Update from @humaton:
- Issue private status set to: False (was: True)

This is somewhere on your side of things, do you have the right ssh key?
I have committed an empty line at the end of the module definition without any problems.
https://src.fedoraproject.org/modules/nginx/commits/mainline

Metadata Update from @humaton:
- Issue close_status updated to: It's all good
- Issue status updated to: Closed (was: Open)

Thanks for checking this. The issue did in fact resolve itself suggesting it was indeed a problem on my side. Sorry for the noise.

What was weird was that I could push to f35, f36 and main branches without problems but f37 and mainline failed in the above mentioned way. This is why I maybe thought it wasn't an issue on my side.
Thanks again for looking into it.

I had this same exact issue/error message a couple hours before @heffer reported it. I had to run git push thrice until it finally worked.

I got something similar trying to push to rawhide for gnome-control-center:

[adamw@toolbox gnome-control-center (rawhide %)]$ fedpkg push
Total 0 (delta 0), reused 0 (delta 0), pack-reused 0
remote: Unspecified ref refs/heads/rawhide is blocked
remote: Denied push for ref 'refs/heads/rawhide' for user 'adamwill'
remote: All changes have been rejected
remote: error: hook declined to update refs/heads/rawhide
To ssh://pkgs.fedoraproject.org/rpms/gnome-control-center
 ! [remote rejected] rawhide -> rawhide (hook declined)
error: failed to push some refs to 'ssh://pkgs.fedoraproject.org/rpms/gnome-control-center'
Could not execute push: Failed to execute command.

I then pushed to main and it worked. Not sure if the branch change was significant or it was just a luck/timing thing and a third try to push to rawhide would also have worked. This was about 5-10 minutes ago.
Metadata
None

high-gain high-trouble ops

None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.