mockbuild also fails locally, due to a GPG key issue. I am assuming that is caused by the branching from rawhide to F39, which is currently ongoing. Building the package with fedpkg --release f38 mockbuild succeeds.

My COPR builds have been failing today with same GPG errors, too. Let's wait a day or two until Rawhide branching has finished.

you just need the latest mock and mock-core-config to make mock work, branching is fine.

@adamwill Fedora CI scratch builds are failing with incorrect/missing GPG signatures for fedora-release 40 package:

DEBUG: ================================================================================
DEBUG:  Package                           Arch       Version          Repository  Size
DEBUG: ================================================================================
DEBUG: Upgrading:
DEBUG:  fedora-gpg-keys                   noarch     40-0.1           fedora     130 k
DEBUG:  fedora-release                    noarch     40-0.2           fedora     7.2 k
DEBUG:  fedora-release-common             noarch     40-0.2           fedora      17 k
DEBUG:  fedora-release-identity-basic     noarch     40-0.2           fedora     8.0 k
DEBUG:  fedora-repos                      noarch     40-0.1           fedora     9.4 k
DEBUG:  fedora-repos-rawhide              noarch     40-0.1           fedora     9.0 k
DEBUG:  grep                              x86_64     3.11-4.fc40      fedora     298 k
DEBUG:  systemd-libs                      x86_64     254.1-2.fc40     fedora     688 k
DEBUG: Transaction Summary
DEBUG: ================================================================================
DEBUG: Upgrade  8 Packages
DEBUG: Total size: 1.1 M
DEBUG: Downloading Packages:
DEBUG: [SKIPPED] fedora-gpg-keys-40-0.1.noarch.rpm: Already downloaded                
DEBUG: [SKIPPED] fedora-release-40-0.2.noarch.rpm: Already downloaded                 
DEBUG: [SKIPPED] fedora-release-common-40-0.2.noarch.rpm: Already downloaded          
DEBUG: [SKIPPED] fedora-release-identity-basic-40-0.2.noarch.rpm: Already downloaded  
DEBUG: [SKIPPED] fedora-repos-40-0.1.noarch.rpm: Already downloaded                   
DEBUG: [SKIPPED] fedora-repos-rawhide-40-0.1.noarch.rpm: Already downloaded           
DEBUG: [SKIPPED] grep-3.11-4.fc40.x86_64.rpm: Already downloaded                      
DEBUG: [SKIPPED] systemd-libs-254.1-2.fc40.x86_64.rpm: Already downloaded             
DEBUG: fedora                                          1.6 MB/s | 1.6 kB     00:00    
DEBUG: GPG key at file:///usr/share/distribution-gpg-keys/fedora/RPM-GPG-KEY-fedora-39-primary (0x18B8E74C) is already installed
DEBUG: fedora                                          1.6 MB/s | 1.6 kB     00:00    
DEBUG: GPG key at file:///usr/share/distribution-gpg-keys/fedora/RPM-GPG-KEY-fedora-39-primary (0x18B8E74C) is already installed
DEBUG: fedora                                          1.6 MB/s | 1.6 kB     00:00    
DEBUG: GPG key at file:///usr/share/distribution-gpg-keys/fedora/RPM-GPG-KEY-fedora-38-primary (0xEB10B464) is already installed
DEBUG: The GPG keys listed for the "fedora" repository are already installed but they are not correct for this package.
DEBUG: Check that the correct key URLs are configured for this repository.. Failing package is: fedora-gpg-keys-40-0.1.noarch
DEBUG:  GPG Keys are configured as: file:///usr/share/distribution-gpg-keys/fedora/RPM-GPG-KEY-fedora-39-primary, file:///usr/share/distribution-gpg-keys/fedora/RPM-GPG-KEY-fedora-39-primary, file:///usr/share/distribution-gpg-keys/fedora/RPM-GPG-KEY-fedora-38-primary
DEBUG: Public key for fedora-release-40-0.2.noarch.rpm is not installed. Failing package is: fedora-release-40-0.2.noarch
DEBUG:  GPG Keys are configured as: file:///usr/share/distribution-gpg-keys/fedora/RPM-GPG-KEY-fedora-39-primary, file:///usr/share/distribution-gpg-keys/fedora/RPM-GPG-KEY-fedora-39-primary, file:///usr/share/distribution-gpg-keys/fedora/RPM-GPG-KEY-fedora-38-primary
DEBUG: Public key for fedora-release-common-40-0.2.noarch.rpm is not installed. Failing package is: fedora-release-common-40-0.2.noarch

By the way, does Fedora CI support the side-tag: syntax like CentOS Stream Zuul CI? Is there an easier way to retrigger CI than opening and closing a PR? https://docs.fedoraproject.org/en-US/ci/pull-requests/ does neither mention side-tag nor commands like !retest.

Ah, I see; the CI job is running on EL 8, by the looks of it, which means it needs https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-a5c155a6c0 , but that is still in updates-testing . @mvadkert can you pull that in before it goes stable, perhaps?

I don't know about your other question, sorry. Miro might.

Would it be possible to get the PR landed rather sooner than later? I just got a CVE bug assigned for cryptography >= 40, < 41.0.2. It affects F39 and Rawhide, https://bugzilla.redhat.com/show_bug.cgi?id=2231271 . The updates builds in COPR, https://copr.fedorainfracloud.org/coprs/cheimes/python-cryptography

After you have merged the fix into Rawhide and backported it to f39, please build the updates in my side tags:
- fedpkg build --target=f39-build-side-71396
- fedpkg build --target=f40-build-side-71372
and leave a comment here. I'll attach the updates to my Bodhi updates https://bodhi.fedoraproject.org/updates/FEDORA-2023-11f1c85512 and https://bodhi.fedoraproject.org/updates/FEDORA-2023-31d5d51a2d . Thanks!

@pwouters thanks! can you merge to f39 and build there too? We need it on both.