PyPI 429 blocks new-addon publication during ocabot merge (connector-shopify#1)

[sawirricardo]

/ocabot merge nobump on OCA/connector-shopify#1 has failed four times today at the PyPI publication step, always with HTTP 429 from upload.pypi.org:

Uploading odoo_addon_shopify_connector-19.0.1.0.0.5-py3-none-any.whl
ERROR    HTTPError: 429 Too Many Requests from https://upload.pypi.org/legacy/
         Too Many Requests

Failure timestamps (UTC): 12:13, 12:35, 13:47, 16:53 — so it does not resolve within the retry windows we gave it (20 min, 1 h, 3 h).

Context:

• The PR adds three new addons. The first attempts successfully created odoo-addon-shopify-connector-account and odoo-addon-shopify-connector-pos on PyPI; every attempt since then 429s while creating the remaining new project odoo-addon-shopify-connector.
• PyPI's newest-packages feed shows project creation working globally, so this looks like the OCA account's new-project rate limit being exhausted (shared across all OCA repos) rather than a general PyPI incident.
• All CI on the PR is green; the merge itself never finalizes because the upload aborts it.

Questions:

1. Is this a known/current limitation of the OCA PyPI account, and is there a quota that can be raised with PyPI?
2. Is there a manual publication path for the remaining wheel so the merge can finalize, or should we simply keep retrying daily?

Happy to provide any further detail. Thanks for maintaining the bot!

[sawirricardo]

Update: a fifth attempt on 2026-07-31 (~19 hours after the previous one) failed with the identical 429 on the same wheel (odoo_addon_shopify_connector-19.0.1.0.0.5). A gap that long makes a rolling hourly/daily quota unlikely — this looks like the account's new-project creation being blocked in a way that needs manual intervention (manual twine upload of the remaining wheel by someone with the OCA PyPI credentials, or a quota request to PyPI admins). The other two wheels from the same PR uploaded fine, so scoped-token upload to existing projects is unaffected.

[sawirricardo]

@sbidoul sorry for the direct ping — flagging this because it fully blocks merging the initial addons into the new connector-shopify repo (created via repo-maintainer-conf#158 this week). Five ocabot merge attempts over two days all fail on PyPI 429 while creating the last of three new projects; two sibling packages from the same PR uploaded fine. If someone with the OCA PyPI credentials could manually upload the remaining wheel (odoo_addon_shopify_connector) or advise on the account's project-creation limit, the merge should finalize on the next ocabot run. Happy to help however I can.

[sbidoul]

When this happens, please ping me on the failing PR.