Azure DevOps pull request API access for vs-ssh.visualstudio.com is not configured

[brecht-summa]

Describe the issue

So, I'm trying to connect a Azure repository to my self-hosted Weblate in a Docker container. Connecting and pulling the repo from Azure works fine, via HTTPS or via SSH. The issue is when trying to push changes, it does not work.

Via an HTTPS connection: Weblate shows internal server error and I get an error mail
Internal Server Error: /push/gosuite/gosuite/

HTTPError at /push/gosuite/gosuite/
404 Client Error: Not Found for url: ...

Via SSH connection, the push fails with "Azure DevOps pull request API access for vs-ssh.visualstudio.com is not configured"

I have configured the environment variables according to the documentation, with a PAT, the username set as the project etc. There doesn't seem to be anything wrong with the Azure settings, as I can create Pull requests and Weblate commits are authored by my account through the PAT or SSH key. Also the push does work, as the code is pushed to a test branch when this is set as the target, but no pull request is created.

I already tried

• I've read and searched the documentation.
• I've searched for similar filed issues in this repository.

Steps to reproduce the behavior

1. Set the environment variables for Azure devops pull requests in the docker-compose.override.yml file
2. Deploy Weblate using Docker compose (or other installations)
3. Create a new component and connect to an Azure repository
4. Change something in the translations, commit and push

Expected behavior

The pull request should be created as expected. When using HTTPS to connect, Weblate shouldn't throw an internal server error if pushing fails.

Screenshots

No response

Exception traceback

Internal Server Error: /push/gosuite/gosuite/

HTTPError at /push/gosuite/gosuite/
404 Client Error: Not Found for url: https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fsummanv.visualstudio.com%2FLancelot%2F_git%2F_apis%2Fgit%2Frepositories%2FGoSuite%2Fpullrequests&data=05%7C02%7Cbrecht.opstaele%40summa.com%7C813df0fca8734e0792f608ddb3e20c78%7C1661b8f90c72419c94bc308e019baca2%7C0%7C0%7C638864505627018044%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=bf%2FGNBAtTjRpks2f00ImlwqIVcNCA%2FYvM0kX07dsCYI%3D&reserved=0

Request Method: POST
Request URL: http://summa-weblate/push/gosuite/gosuite/
Django Version: 5.2.3
Python Executable: /app/venv/bin/python3
Python Version: 3.13.3
Python Path: ['/', '/', '/app/venv/bin', '/usr/lib/python313.zip', '/usr/lib/python3.13', '/usr/lib/python3.13/lib-dynload', '/app/venv/lib/python3.13/site-packages', '/app/data/python']
Server time: Wed, 25 Jun 2025 12:16:00 +0000
Installed Applications:
['customize',
 'weblate.addons',
 'weblate.auth',
 'weblate.checks',
 'weblate.formats',
 'weblate.glossary',
 'weblate.machinery',
 'weblate.trans',
 'weblate.lang',
 'weblate_language_data',
 'weblate.memory',
 'weblate.screenshots',
 'weblate.fonts',
 'weblate.accounts',
 'weblate.configuration',
 'weblate.utils',
 'weblate.vcs',
 'weblate.wladmin',
 'weblate.metrics',
 'weblate',
 'weblate.gitexport',
 'django.contrib.auth',
 'django.contrib.contenttypes',
 'django.contrib.sessions',
 'django.contrib.messages',
 'django.contrib.staticfiles',
 'django.contrib.admin',
 'django.contrib.sitemaps',
 'django.contrib.humanize',
 'social_django',
 'crispy_forms',
 'crispy_bootstrap3',
 'compressor',
 'rest_framework',
 'rest_framework.authtoken',
 'django_filters',
 'django_celery_beat',
 'corsheaders',
 'django_otp',
 'django_otp.plugins.otp_static',
 'django_otp.plugins.otp_totp',
 'django_otp_webauthn',
 'drf_spectacular',
 'drf_spectacular_sidecar',
 'drf_standardized_errors',
 'django_zxcvbn_password_validator']
Installed Middleware:
['weblate.middleware.RedirectMiddleware',
 'weblate.middleware.ProxyMiddleware',
 'corsheaders.middleware.CorsMiddleware',
 'django.middleware.security.SecurityMiddleware',
 'django.contrib.sessions.middleware.SessionMiddleware',
 'django.middleware.csrf.CsrfViewMiddleware',
 'weblate.accounts.middleware.AuthenticationMiddleware',
 'django_otp.middleware.OTPMiddleware',
 'django.contrib.messages.middleware.MessageMiddleware',
 'django.middleware.clickjacking.XFrameOptionsMiddleware',
 'social_django.middleware.SocialAuthExceptionMiddleware',
 'weblate.accounts.middleware.RequireLoginMiddleware',
 'weblate.api.middleware.ThrottlingMiddleware',
 'weblate.middleware.SecurityMiddleware',
 'weblate.wladmin.middleware.ManageMiddleware']


Traceback (most recent call last):
  File "/app/venv/lib/python3.13/site-packages/requests/models.py", line 976, in json
    return complexjson.loads(self.text, **kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3.13/json/__init__.py", line 346, in loads
    return _default_decoder.decode(s)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3.13/json/decoder.py", line 345, in decode
    obj, end = self.raw_decode(s, idx=_w(s, 0).end())
               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3.13/json/decoder.py", line 363, in raw_decode
    raise JSONDecodeError("Expecting value", s, err.value) from None
    ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

During handling of the above exception (Expecting value: line 1 column 1 (char 0)), another exception occurred:
  File "/app/venv/lib/python3.13/site-packages/weblate/vcs/git.py", line 1224, in request
    response_data = response.json()
                    ^^^^^^^^^^^^^^^
  File "/app/venv/lib/python3.13/site-packages/requests/models.py", line 980, in json
    raise RequestsJSONDecodeError(e.msg, e.doc, e.pos)
    ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

During handling of the above exception (Expecting value: line 1 column 1 (char 0)), another exception occurred:
  File "/app/venv/lib/python3.13/site-packages/django/core/handlers/exception.py", line 55, in inner
    response = get_response(request)
               ^^^^^^^^^^^^^^^^^^^^^
  File "/app/venv/lib/python3.13/site-packages/django/core/handlers/base.py", line 197, in _get_response
    response = wrapped_callback(request, *callback_args, **callback_kwargs)
               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/app/venv/lib/python3.13/site-packages/django/contrib/auth/decorators.py", line 59, in _view_wrapper
    return view_func(request, *args, **kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/app/venv/lib/python3.13/site-packages/django/views/decorators/http.py", line 64, in inner
    return func(request, *args, **kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/app/venv/lib/python3.13/site-packages/weblate/trans/views/git.py", line 83, in push
    return execute_locked(
          
  File "/app/venv/lib/python3.13/site-packages/weblate/trans/views/git.py", line 31, in execute_locked
    result = call(*args, **kwargs)
             ^^^^^^^^^^^^^^^^^^^^^
  File "/app/venv/lib/python3.13/site-packages/weblate/trans/models/component.py", line 218, in on_link_wrapper
    return func(self, *args, **kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/app/venv/lib/python3.13/site-packages/weblate/trans/models/component.py", line 1926, in do_push
    result = self.push_repo(request, retry=retry)
             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/app/venv/lib/python3.13/site-packages/weblate/trans/models/component.py", line 218, in on_link_wrapper
    return func(self, *args, **kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/app/venv/lib/python3.13/site-packages/weblate/trans/models/component.py", line 1835, in push_repo
    self.repository.push(self.push_branch)
    ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/app/venv/lib/python3.13/site-packages/weblate/vcs/git.py", line 1050, in push
    self.create_pull_request(credentials, self.branch, fork_remote, fork_branch)
    ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/app/venv/lib/python3.13/site-packages/weblate/vcs/git.py", line 1445, in create_pull_request
    response_data, response, error_message = self.request(
                                            
  File "/app/venv/lib/python3.13/site-packages/weblate/vcs/git.py", line 1227, in request
    self.raise_for_response(response)
    ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/app/venv/lib/python3.13/site-packages/weblate/vcs/git.py", line 1292, in raise_for_response
    super().raise_for_response(response)
    ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/app/venv/lib/python3.13/site-packages/weblate/vcs/git.py", line 1275, in raise_for_response
    response.raise_for_status()
    ^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/app/venv/lib/python3.13/site-packages/requests/models.py", line 1026, in raise_for_status
    raise HTTPError(http_error_msg, response=self)
    ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Exception Type: HTTPError at /push/gosuite/gosuite/
Exception Value: 404 Client Error: Not Found for url: https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fsummanv.visualstudio.com%2FLancelot%2F_git%2F_apis%2Fgit%2Frepositories%2FGoSuite%2Fpullrequests&data=05%7C02%7Cbrecht.opstaele%40summa.com%7C813df0fca8734e0792f608ddb3e20c78%7C1661b8f90c72419c94bc308e019baca2%7C0%7C0%7C638864505627040143%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=XnzyHbaPCrnagXxIki%2BIQIwQ2%2B7kGTUhBbScitCX0y0%3D&reserved=0
Raised during: weblate.trans.views.git.push
Request information:
USER: Brecht Opstaele

GET: No GET data

POST:
csrfmiddlewaretoken = 'MNnXAXqdQwnh2C6ST341OMTuwEmXNP5Be9dUhj7H0PwKYIUFXPcKZOxmiGRMHcWf'

FILES: No FILES data

COOKIES:
django_language = 'en'
sessionid = '********************'

META:
CONTENT_LENGTH = '84'
CONTENT_TYPE = 'application/x-www-form-urlencoded'
CSRF_COOKIE = 'Cw07RwREktjD6gYXeWiTlcO2WcFZ4x1O'
CSRF_COOKIE_NEEDS_UPDATE = True
HTTP_ACCEPT = 'text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8'
HTTP_ACCEPT_ENCODING = 'gzip, deflate'
HTTP_ACCEPT_LANGUAGE = 'en-US,en;q=0.9'
HTTP_CACHE_CONTROL = 'max-age=0'
HTTP_CONNECTION = 'close'
HTTP_COOKIE = '********************'
HTTP_HOST = 'summa-weblate'
HTTP_ORIGIN = 'http://summa-weblate'
HTTP_REFERER = 'http://summa-weblate/'
HTTP_SEC_GPC = '1'
HTTP_UPGRADE_INSECURE_REQUESTS = '1'
HTTP_USER_AGENT = 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36'
PATH_INFO = '/push/gosuite/gosuite/'
QUERY_STRING = ''
RAW_URI = '/push/gosuite/gosuite/'
REMOTE_ADDR = ''
REQUEST_METHOD = 'POST'
SCRIPT_NAME = ''
SERVER_NAME = 'summa-weblate'
SERVER_PORT = '80'
SERVER_PROTOCOL = 'HTTP/1.0'
SERVER_SOFTWARE = 'gunicorn/23.0.0'
WEBLATE_LANGUAGE = ''
WEBLATE_USER = "'admin'"
WEBLATE_VERSION:Cython = '3.1.2'
WEBLATE_VERSION:Django = '5.2.3'
WEBLATE_VERSION:Git = '2.49.0'
WEBLATE_VERSION:GitPython = '3.1.44'
WEBLATE_VERSION:Mercurial = '7.0.2'
WEBLATE_VERSION:PostgreSQL server = '17.5'
WEBLATE_VERSION:PyGObject = '3.52.3'
WEBLATE_VERSION:Python = '3.13.3'
WEBLATE_VERSION:RapidFuzz = '********************'
WEBLATE_VERSION:Weblate = '5.12.2'
WEBLATE_VERSION:aeidon = '1.15'
WEBLATE_VERSION:ahocorasick_rs = '0.22.2'
WEBLATE_VERSION:borgbackup = '1.4.1'
WEBLATE_VERSION:boto3 = '1.38.40'
WEBLATE_VERSION:celery = '5.5.3'
WEBLATE_VERSION:charset-normalizer = '3.4.2'
WEBLATE_VERSION:cyrtranslit = '1.1.1'
WEBLATE_VERSION:diff-match-patch = '20241021'
WEBLATE_VERSION:django-appconf = '1.1.0'
WEBLATE_VERSION:django-celery-beat = '2.8.1'
WEBLATE_VERSION:django-compressor = '4.5.1'
WEBLATE_VERSION:django-crispy-forms = '2.4'
WEBLATE_VERSION:django-filter = '25.1'
WEBLATE_VERSION:django-redis = '6.0.0'
WEBLATE_VERSION:djangorestframework = '3.16.0'
WEBLATE_VERSION:drf-spectacular = '0.28.0'
WEBLATE_VERSION:filelock = '3.18.0'
WEBLATE_VERSION:git-review = '2.5.0'
WEBLATE_VERSION:git-svn = '2.49.0'
WEBLATE_VERSION:google-cloud-translate = '3.20.3'
WEBLATE_VERSION:hiredis = '3.2.1'
WEBLATE_VERSION:html2text = '2025.4.15'
WEBLATE_VERSION:iniparse = '0.5'
WEBLATE_VERSION:kombu = '5.5.4'
WEBLATE_VERSION:lxml = '5.4.0'
WEBLATE_VERSION:mistletoe = '1.4.0'
WEBLATE_VERSION:mysqlclient = '2.2.7'
WEBLATE_VERSION:nh3 = '0.2.21'
WEBLATE_VERSION:oauthlib = '********************'
WEBLATE_VERSION:openai = '1.88.0'
WEBLATE_VERSION:openpyxl = '3.1.5'
WEBLATE_VERSION:phply = '1.2.6'
WEBLATE_VERSION:pillow = '11.2.1'
WEBLATE_VERSION:psycopg = '3.2.9'
WEBLATE_VERSION:psycopg-binary = '3.2.9'
WEBLATE_VERSION:pycairo = '1.28.0'
WEBLATE_VERSION:pyparsing = '3.2.3'
WEBLATE_VERSION:python-dateutil = '2.9.0.post0'
WEBLATE_VERSION:python-redis-lock = '4.0.0'
WEBLATE_VERSION:requests = '2.32.4'
WEBLATE_VERSION:ruamel.yaml = '0.18.14'
WEBLATE_VERSION:sentry-sdk = '2.30.0'
WEBLATE_VERSION:siphashc = '2.5'
WEBLATE_VERSION:social-auth-app-django = '********************'
WEBLATE_VERSION:social-auth-core = '********************'
WEBLATE_VERSION:tesserocr = '2.8.0'
WEBLATE_VERSION:translate-toolkit = '3.15.5'
WEBLATE_VERSION:translation-finder = '2.22'
WEBLATE_VERSION:user-agents = '2.2.0'
WEBLATE_VERSION:weblate-language-data = '2025.7'
gunicorn.socket = <socket.socket fd=10, family=1, type=1, proto=0, laddr=/run/gunicorn/app/weblate/socket>
wsgi.errors = <gunicorn.http.wsgi.WSGIErrorsWrapper object at 0x7a5e13c6f010>
wsgi.file_wrapper = <class 'gunicorn.http.wsgi.FileWrapper'>
wsgi.input = <gunicorn.http.body.Body object at 0x7a5e11b101d0>
wsgi.input_terminated = True
wsgi.multiprocess = True
wsgi.multithread = True
wsgi.run_once = False
wsgi.url_scheme = 'http'
wsgi.version = '(1, 0)'

How do you run Weblate?

Docker container

Weblate versions

• Weblate: 5.12.2
• Django: 5.2.3
• siphashc: 2.5
• translate-toolkit: 3.15.5
• lxml: 5.4.0
• pillow: 11.2.1
• nh3: 0.2.21
• python-dateutil: 2.9.0.post0
• social-auth-core: 4.6.1
• social-auth-app-django: 5.4.3
• django-crispy-forms: 2.4
• oauthlib: 3.3.1
• django-compressor: 4.5.1
• djangorestframework: 3.16.0
• django-filter: 25.1
• django-appconf: 1.1.0
• user-agents: 2.2.0
• filelock: 3.18.0
• RapidFuzz: 3.13.0
• openpyxl: 3.1.5
• celery: 5.5.3
• django-celery-beat: 2.8.1
• kombu: 5.5.4
• translation-finder: 2.22
• weblate-language-data: 2025.7
• html2text: 2025.4.15
• pycairo: 1.28.0
• PyGObject: 3.52.3
• diff-match-patch: 20241021
• requests: 2.32.4
• django-redis: 6.0.0
• hiredis: 3.2.1
• sentry-sdk: 2.30.0
• Cython: 3.1.2
• mistletoe: 1.4.0
• GitPython: 3.1.44
• borgbackup: 1.4.1
• pyparsing: 3.2.3
• ahocorasick_rs: 0.22.2
• python-redis-lock: 4.0.0
• charset-normalizer: 3.4.2
• cyrtranslit: 1.1.1
• drf-spectacular: 0.28.0
• Python: 3.13.3
• Git: 2.49.0
• psycopg: 3.2.9
• psycopg-binary: 3.2.9
• phply: 1.2.6
• ruamel.yaml: 0.18.14
• tesserocr: 2.8.0
• boto3: 1.38.40
• aeidon: 1.15
• iniparse: 0.5
• mysqlclient: 2.2.7
• google-cloud-translate: 3.20.3
• openai: 1.88.0
• Mercurial: 7.0.2
• git-svn: 2.49.0
• git-review: 2.5.0
• PostgreSQL server: 17.5
• Database backends: django.db.backends.postgresql
• PostgreSQL implementation: psycopg3 (binary)
• Cache backends: default:RedisCache, avatar:FileBasedCache
• Email setup: django.core.mail.backends.smtp.EmailBackend: smtp_relay
• OS encoding: filesystem=utf-8, default=utf-8
• Celery: redis://cache:6379/1, redis://cache:6379/1, regular
• Platform: Linux 6.6.87.1-microsoft-standard-WSL2 (x86_64)

Weblate deploy checks

System check identified some issues:

WARNINGS:
?: (security.W004) You have not set a value for the SECURE_HSTS_SECONDS setting. If your entire site is served only over SSL, you may want to consider setting a value and enabling HTTP Strict Transport Security. Be sure to read the documentation first; enabling HSTS carelessly can cause serious, irreversible problems.
?: (security.W008) Your SECURE_SSL_REDIRECT setting is not set to True. Unless your site should be available over both SSL and non-SSL connections, you may want to either set this setting True or configure a load balancer or reverse-proxy server to redirect all connections to HTTPS.
?: (security.W012) SESSION_COOKIE_SECURE is not set to True. Using a secure-only session cookie makes it more difficult for network traffic sniffers to hijack user sessions.

INFOS:
?: (weblate.I021) Error collection is not set up, it is highly recommended for production use
        HINT: https://docs.weblate.org/en/weblate-5.12.2/admin/install.html#collecting-errors
?: (weblate.I028) Backups are not configured, it is highly recommended for production use
        HINT: https://docs.weblate.org/en/weblate-5.12.2/admin/backup.html

System check identified 5 issues (6 silenced).

Additional context

No response

[nijel]

Via SSH connection, the push fails with "Azure DevOps pull request API access for vs-ssh.visualstudio.com is not configured"

Most likely something is misconfigured. What is your setting for WEBLATE_AZURE_DEVOPS_HOST? It should be set to vs-ssh.visualstudio.com based on this message.

[brecht-summa]

Hi, you're right, for the SSH it should be set to vs-ssh.visualstudio.com. I changed it and now I'm getting the same internal server error over the SSH connection as when connecting via HTTPS.

[nijel]

Azure is a bit complicated because the SSH, HTTPS and API URLs don't match (see #10227). The server logs should give you more insights of what is going on.

[brecht-summa]

I did some more experimenting and with vs-ssh.visualstudio.com as WEBLATE_AZURE_DEVOPS_HOST, the URL to POST the PR to seems wrong, but when trying to omit this by putting the correct value in the environment variable, I get the notification that the pull request API access is not configured