docs(v2): Crowdin source upload token lacks endpoint scope
@taliesin-ai is already working on this.
Since Aug 17, 2026.
- Dominant language
- Go
- Stars
- 36.3k
- Forks
- 1.9k
- Avg merge
- 2d 11h
- Merged PRs (30d)
- 33
Description
Evidence
Upload Source Documents run 31929914829 failed on master after documentation PR #5984 merged. Every Crowdin upload returned:
Permission error: "Endpoint isn't allowed for token scopes."
The workflow exhausted the source-file set and exited 201. Duplicate open and closed issue searches for the workflow name, Crowdin, endpoint scope, and permission text found no existing tracker.
Impact
This failure affects the v2 documentation translation pipeline. .github/workflows/upload-source-documents.yml runs in website/, and website/Taskfile.yml executes npx crowdin push -b v2. V3 does not use Crowdin. The original classification as a v3 Beta/GA documentation blocker was incorrect.
The reported upload failure can leave v2 translation sources out of date; it does not establish a failure in published English documentation.
Acceptance criteria
- Identify whether the Crowdin token, project role, or command endpoint scope changed.
- Restore least-privilege permission for the exact upload operations used by the workflow.
- A dry run or non-destructive probe validates access without exposing the credential.
- A real
Upload Source Documentsrun completes and records the uploaded source set. - Document token ownership/rotation and the failure signal for release operations.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.