"Use packages.sury.org/php instead"

[strarsis]

Summary

Just encountered this prompt today during ansible provision, I then manually invoked apt update:

E: Repository 'https://ppa.launchpadcontent.net/ondrej/php/ubuntu noble InRelease' changed its 'Label' value from 'PPA for PHP' to 'Use packages.sury.org/php instead'
N: This must be accepted explicitly before updates for this repository can be applied. See apt-secure(8) manpage for details.
Do you want to accept these changes and continue updating from this repository? [y/N]

Additional context

No response

[swalkinshaw]

Confirmed I got the same thing. I'm wondering if it's a bug or something temporary. But I did manage to fix it with this:

diff --git roles/php/tasks/main.yml roles/php/tasks/main.yml
index 164aeffdb3..0ebc9189b3 100644
--- roles/php/tasks/main.yml
+++ roles/php/tasks/main.yml
@@ -1,7 +1,7 @@
 ---
 - name: Add PHP PPA
   apt_repository:
-    repo: "ppa:ondrej/php"
+    repo: "deb [signed-by=/usr/share/keyrings/debsuryorg-archive-keyring.gpg] https://packages.sury.org/php/ {{ ansible_distribution_release }} main"
     update_cache: yes
   register: result
   until: result is success

[retlehs]

https://codeberg.org/oerdnj/deb.sury.org/issues/73

[strarsis]

• repo: "ppa:ondrej/php"

• repo: "deb [signed-by=/usr/share/keyrings/debsuryorg-archive-keyring.gpg] https://packages.sury.org/php/ {{ ansible_distribution_release }} main"

apt complains about the key:

Failed to update apt cache: W:GPG error: https://packages.sury.org/php noble InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY B188E2B695BD4743, E:The repository 'https://packages.sury.org/php noble InRelease' is not signed., W:Updating from such a repository can't be done securely, and is therefore disabled by default., W:See apt-secure(8) manpage for repository creation and user configuration details., W:https://ppa.launchpadcontent.net/ondrej/php/ubuntu/dists/noble/InRelease: Signature by key 14AA40EC0831756756D7F66C4F4EA0AAE5267A6C uses weak algorithm (rsa1024)

- name: Add PHP repository GPG key (Legacy Method)
  ansible.builtin.apt_key:
    url: "https://packages.sury.org/php/apt.gpg"
    state: present

- name: Add PHP PPA
  apt_repository:
    repo: "deb [signed-by=/usr/share/keyrings/debsuryorg-archive-keyring.gpg] https://packages.sury.org/php/ {{ ansible_distribution_release }} main"
    update_cache: yes
  register: result
  until: result is success
  retries: 3
  delay: 5