✅ Deploy Preview for numpy-org ready!

Name	Link
🔨 Latest commit	6297bf3
🔍 Latest deploy log	https://app.netlify.com/projects/numpy-org/deploys/695e2fa0ae832a00089aa89d
😎 Deploy Preview	https://deploy-preview-887--numpy-org.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

Hi @stefanv – this should be ready. The CI is failing because the Ubuntu image needs to be updated on the Netlify admin side (the same error we had the other day).

Who has access to numpy.org Netlify? Could you please update the Ubuntu build image to the latest.

Maybe @goanpeca (from #347) knows who is the netlify owner?

Looks like a Netlify bug. There are only two options, Ubuntu Focal (20.04) and Noble (24.04). The latter is the default and is what's selected. But the former is used in CI, says the log:

build-image version: 235a96ed6c11cbdf942eed7e70e6802956f9b464 (focal)

Unless I'm looking at the wrong Netlify Project of course. It doesn't look like I have access to the numpy-org project, only to numpy-preview. The latter no longer seems used. It is likely to be @goanpeca then.

Okay, I deleted my old numpy-preview config to avoid confusion; it was definitely not used. After a lot of digging I found the answer: it's @stefanv that moved the config over and holds the keys. From a Slack DM on 6 Jan 2022:

"I moved Netlify for numpy.org PR previews over to a separate account that we can all hold the keys to. Currently it is on Gonzalo's personal one. Despite de-authorizing Netlify and re-installing it, it still builds Gonzalo's. I reached out to him via email to disable his numpy.org builds, ..." (after which Gonzalo deleted the other config)

I also have an email from Stefan with a GPG-encrypted Netlify key, but we never really used that system and I don't really feel like reverse-engineering it now. So let's just wait for @stefanv to make the change here.

Hah, imagine that. Sorry for the wasted time, Ralf.

We have https://github.com/numpy/vault, but I don't think anyone else here uses GPG, so we should find some other place to store it. When researching options for SPEC 6 I found the 1Password community plan: https://github.com/1Password/for-open-source

I'm happy to apply for that, if folks think that'd be useful.

It may be helpful to write up a document about who has credentials for which services, and what those credentials look like. E.g., what CI tokens do we need on which repos and with what permissions, or who has access to the configuration for various CI services.

Anyway, long story short: I updated the build image.

Preview looks good!

Thanks for resolving it Stefan!

When researching options for SPEC 6 I found the 1Password community plan: https://github.com/1Password/for-open-source

I'm happy to apply for that, if folks think that'd be useful.

That sounds good to me! I think free-easy-and-secure is what we're looking for, and a community plan like that seems to fit the bill.