Marketplace Access Token has expired

[fendor]

We can't release without that token :( https://github.com/haskell/vscode-haskell/actions/runs/5893610865

ping @jaspervdj who gave us the token last time.

[jaspervdj]

I don't have access to that anymore since my committee term ended, I just asked them if anyone would like to take this over. I'll keep you updated.

[jaspervdj]

I am working on this with @aaronallen8455. In the meantime, do you have a public GPG key we can use to encrypt the new token before sending it to you?

[fendor]

Does this work? https://keys.openpgp.org/search?q=9849506453CA97E75F505D054EF829564CA34FC8

Public GPG Key:

-----BEGIN PGP PUBLIC KEY BLOCK-----

mQINBGTTSXwBEADOBa09RsJirKAkDnEuG+38Yd/TNSKbMYisVbcQ79Zsf/7KlrPl
aYW5QDoxZwBVryb8ESQfzAiD9NnTEmR8jfQMr6kJKmVUmsi1U0ioYzxhjrKAvEDv
4nU2U0XOd9/+uH3CWRHqhViZzqgti7YAFzutlOfHdeCjLLy14VspIWD/8jJ0xl9i
I72uUT/btezFGcYB986bYeOKxSSyyXEyAScy9RvjAKxjzJLjii9gvOoGInDO0xMt
Ssi+h4eboq34hH3YgDaqjlyoB3jVWvjOokXCNtDebV7Y77kP7Kgn2FvVdTe6048g
dytdZ9YVP+QcT29eUZ/Smm7E43scnb2cv5jIFpJ2jWev5Q7jrRACQBTyePFd0pbZ
FpWHjgBFhW2SfLspxaNuYGE/d7Gi+mJMJ5whkBSnhtB29306kbbDTCQIru8Wy7ZW
z5mfC6MwUE5fGq8rr7sin7+gWe3YDnyyleRECOIa9EwfsZYq6zuaYNVvHkpbde39
d/BGt269qkY8ET8qHg7Q3EG+nBx9No2kBq9NDjueoLAYqNPAWP4d43CFsfOmmnnX
8k7g98aPvptc/7/JlT4rMHqXS0x06Cs2APKRGuuGdEQGhmBprZXExij3maVBMciR
mFsyTow0i1NlhA4bTUzpAjSONzwDnFpRkPgSDwVUFZsSfWHW/fDJdPJQXQARAQAB
tDJIYW5uZXMgU2llYmVuaGFuZGwgPGhhbm5lcy5zaWViZW5oYW5kbEBwb3N0ZW8u
bmV0PokCTgQTAQgAOBYhBJhJUGRTypfnX1BdBU74KVZMo0/IBQJk00l8AhsDBQsJ
CAcCBhUKCQgLAgQWAgMBAh4BAheAAAoJEE74KVZMo0/Iwt8QAJ2nc1KjUbAx7viS
8Quxgp2u+9FpLiUWKSDXYg9yukEiRhUlzKVHmF+q/j4UWWeOmO5Y3jhQN+9z7EBA
zKoJDs7ewGH8iouGCFpzOubtFUsBfAnugCpSy2a4lkib+BBnJE6NPOJcxFUJCi73
LTuLZipghi3KvMp9apez9hI4EYA0KH+r5rMP6GZ4rpyCys6LGMPck9HkBvgrX6+s
di/hof9+nL3TI3YCyY5xrQM3Zl0YcCKMk3eVBhacReh9/F9f/jiRDE9Rkm21oi1C
+IZAOS3UkcWGLSF52IXgAswGAqQCiZ6tnE8mpOApMxR0yuFu//RIs1S3eftzsQut
KIimtweN+01eglx03DaywyeP7sdDZdtnMNZI6FzrPH58kclHgj/j5K3lOAcfCQX0
8yGmpIdUdyZGsVECO2h55gR2Z7lJnI6LgHp9l328J+gTEzM6tgZyBK85xtoWN0vg
jWcbc4ObgrGlSsaHMdbqB1oCjOX+gIfJ6bQ8GhT3TbAXwl8JdPtCMWvBQZwexUHf
4tvCUICOEjomIagIQt6h3/LUY0QH1XVGpTgZZKnuKYWMNai4Oi0UhlSPf/UJGjn/
ZlGlon9sg/p8TPP33cCrF9nk2Dp1IPCy1qE13OjZKziU8o6klM+62d1h7vqtBsEG
sCrbgydI6wMbkRkjBHrAPW4TcIg0uQINBGTTSXwBEAC2QBWzANdkiG211h6vFexH
VbREFDTtjEtpjLiYWYWsnqaCMow3bZ/NEf52uQOUBrA4HmLNoAp2aZ/NpbpqPhqi
uoCShYYvWnmRqBkyk7MELa1JnUTWLQmeYOEg4P7siOLIqpL1Urz9ptnNdXKoGR9Q
HPaENy+CEPV+dnKkfEh9Z3radlzcgM3fid0WjqO3vD7ClDP8hh7PpXbJWuJ0nYy8
mu83qgzbcV77pnCzQ4SImcbyRvRJitVNVabDkNGh4xWGKMU666juVo5fVHZPuzA+
ydjOP5b9YumyTG4dr3G/swC9wpb2oEw6mfcb/4NmW+RbINunRvEohreJZVDg+A02
cXpIep2lw/Win7PysekXhEGOKamF2af696+wr9uJOPgcenuG+HtfhW1CKY+a9bBQ
lJRuF7lQ2mYwq7XzaReyfeT9qF6G3gJdaB7SQe+6lBNs2PFJ3qY/g899GQ0hXe7n
7Su36mJTTJ+ug7s2iztBgCkYiWdLRSeolFk484eDXVrMPzWYECAGYaXSmYfsEA/J
D1NEDrv8QUHQ/FxmcobGADzRhnPQ1og8KpD0Q0AfmMmvaf4pAnv2yQwyu6dhL5dR
ABZY4YeDVcNYRKxOCxkXgHY2ntd2hqHqLIP4v1doQnsGx+EQqOPA1kzUDNOL5IL9
e2tvSdUfxe++tpbkLwheFwARAQABiQI2BBgBCAAgFiEEmElQZFPKl+dfUF0FTvgp
VkyjT8gFAmTTSXwCGwwACgkQTvgpVkyjT8jhgBAAraNDRY2RAMXTbx5LEEdw7o5p
f8dqgb3aye3BpSpBqfKwF80qp5/k/ojtSgin+jGEZEAgccn6NRdh026+aHmEW8fr
T0ZyuSIdDx5FFsmkyo4slQ0GZiVNk8fdIrCL/iMtYiwZ+QsGZNrgfOPF8huJJBlb
t+8L8UTWy+rxIzqFYoVJx5DlcV2DBhUnHjaamWKYdJ8OAVvyGVdznKdbF2KNQV7Z
zjXgoBjSkGfzf5uv/1Kc5fEz9owPFVRNNglr5QQ9yOsGwhAlMkib6YzJkDjB90a2
seUJKgweQaNj7X7OQisSojw2hYuKHXVQj9z6+d3Annhkw4tv9m9ELrK3/0HQwitE
YA9IlF0Fu/Vd3bigUb7Cgrev1cATzKTgNbHm3Q1fLFciBAga/pq0EEGZxll2dJeu
4qEvhDEpQmtBqhp/pi/igrJg+mEoNVtLn8PXSGwXMy2dXb7dOVn25fyo9Qzvc2jV
kmBp6zbBlP3PTDqeSh32tfya/KwOEbshGK8HFdeyAZk+/xu24c/QdGo1kxEGJ460
fC5TZIGPquhbv3s2iqrkw2I+A28+JtfwHCeLqS9SXYRB9ETdHE0fKNt1LVhGb890
y2wjxFYAYWa61B4ZtU2afsP3QKvA2MQEufKW3NM/BE2aYkdbzvSNb+9a2mpTNsX4
wzJeeOHBIPx6v/YBe5c=
=lyaO
-----END PGP PUBLIC KEY BLOCK-----

[jaspervdj]

That should work yes; the new token should now be in the inbox of the email address associated with the GPG key (h***@posteo.net). It expires in a year. It would be good to put some sort of reminder at now+11 months to take care of this again?

[fendor]

Perfect, thank you very much!

[fendor]

I think I need a token for VSCodium Marketplace as well?

Also, is there some email address we can write to next time directly, or is there a group we should ping in an issue?

EDIT: Subject line says Azure Token, is this an access token for the VSCode marketplace?

[jaspervdj]

@fendor I made you an owner of the extension on Open VSX. You need to login there using Github, then you should be able to see "haskell" extension listed here:

https://open-vsx.org/user-settings/extensions

And you should be able to generate a new token here:

https://open-vsx.org/user-settings/tokens

To write to the committee, just use committee@haskell.org, we usually respond pretty fast.

[jaspervdj]

EDIT: Subject line says Azure Token, is this an access token for the VSCode marketplace?

Yes, the VSCode marketplace is part of the Azure dev portal

[jaspervdj]

FWIW, the Open VSX token seems like it's still valid, and the error in the pipeline is only about the VSCode Marketplace, so the Open VSX one may not need refreshing (but probably can't hurt either).

[fendor]

Release was successful, thank you very much for your prompt response!