I switched to all, and got the following output. With an error even after generating and entering the GitHub token…
upcp
Updating to v3.2.48
Previous HEAD position was 6b1dcb3e8 SEC: Weak visibility on unauthenticated login controller allows open query to siteinfo,email. Researched by Curtis @ https://terabit.io/ (Login)
HEAD is now at daed3b835 CHG: bump (migrations)
Installing dependencies from lock file (including require-dev)
Verifying lock file contents can be installed on current platform.
Package operations: 1 install, 53 updates, 2 removals
- Downloading chillerlan/php-authenticator (4.3.1)
- Downloading chillerlan/php-qrcode (5.0.3)
- Downloading maxmind-db/reader (v1.12.0)
- Downloading league/event (2.2.0)
- Downloading mike-roetgers/dependency-graph (0.4.0)
- Downloading pear/net_dns2 (v1.5.4)
- Downloading php-webdriver/webdriver (1.15.2)
- Downloading sebastian/recursion-context (4.0.5)
- Downloading sebastian/global-state (5.0.7)
- Downloading sebastian/exporter (4.0.6)
- Downloading sebastian/comparator (4.0.8)
- Downloading theseer/tokenizer (1.2.3)
- Downloading myclabs/deep-copy (1.13.0)
- Downloading phpunit/phpunit (9.6.22)
- Downloading sabre/vobject (4.5.6)
- Downloading sabre/http (5.1.12)
Failed to download mike-roetgers/dependency-graph from dist: The "https://api.github.com/repos/MikeRoetgers/dependency-graph/zipball/46b6bf207d0655dee1fd5a8a97a7449300f285f3" file could not be downloaded (HTTP/2 404 ):
{"message":"Not Found","documentation_url":"https://docs.github.com/rest/repos/contents#download-a-repository-archive-zip","status":"404"}
Now trying to download from source
- Syncing mike-roetgers/dependency-graph (0.4.0) into cache
Cloning failed using an ssh key for authentication, enter your GitHub credentials to access private repos
When working with _public_ GitHub repositories only, head here to retrieve a token:
https://github.com/settings/tokens/new?scopes=&description=Composer+on+henk.babafla.com+2026-05-11+1125
This token will have read-only permission for public information only.
When you need to access _private_ GitHub repositories as well, go to:
https://github.com/settings/tokens/new?scopes=repo&description=Composer+on+henk.babafla.com+2026-05-11+1125
Note that such tokens have broad read/write permissions on your behalf, even if not needed by Composer.
Tokens will be stored in plain text in "/usr/local/apnscp/storage/.composer/auth.json" for future use by Composer.
For additional information, check https://getcomposer.org/doc/articles/authentication-for-private-packages.md#github-oauth
Token (hidden):
Token stored successfully.
In Git.php line 472:
Failed to execute git clone --mirror -- 'https://ghp...vg3:x-oauth-basic@github.com/MikeRoetgers/dependency-graph.git' '/usr/local/apnscp/storage
/.composer/cache/vcs/https---github.com-MikeRoetgers-dependency-graph.git/'
Cloning into bare repository '/usr/local/apnscp/storage/.composer/cache/vcs/https---github.com-MikeRoetgers-dependency-graph.git'...
remote: Repository not found.
fatal: repository 'https://github.com/MikeRoetgers/dependency-graph.git/' not found
install [--prefer-source] [--prefer-dist] [--prefer-install PREFER-INSTALL] [--dry-run] [--download-only] [--dev] [--no-suggest] [--no-dev] [--no-autoloader] [--no-progress] [--no-install] [--audit] [--audit-format AUDIT-FORMAT] [-v|vv|vvv|--verbose] [-o|--optimize-autoloader] [-a|--classmap-authoritative] [--apcu-autoloader] [--apcu-autoloader-prefix APCU-AUTOLOADER-PREFIX] [--ignore-platform-req IGNORE-PLATFORM-REQ] [--ignore-platform-reqs] [--] [<packages>...]
Compiled services and packages files removed!
Job for apnscp.service failed because the control process exited with error code.
See "systemctl status apnscp.service" and "journalctl -xe" for details.
Nothing to migrate.
Nothing to migrate.
Updating to v3.2.48.1
Previous HEAD position was daed3b835 CHG: bump (migrations)
HEAD is now at 908e8a14c CHG: bump (migrations)
Compiled services and packages files removed!
Job for apnscp.service failed because the control process exited with error code.
See "systemctl status apnscp.service" and "journalctl -xe" for details.
Nothing to migrate.
Nothing to migrate.
Updating to v3.2.48.2
Previous HEAD position was 908e8a14c CHG: bump (migrations)
HEAD is now at 242aa3512 FIX: full certificate chain is required for deep inspection (Let's Encrypt) CHG: get_certificate()- when $name is omitted, the full certificate including chain is returned (ssl)
Compiled services and packages files removed!
Job for apnscp.service failed because the control process exited with error code.
See "systemctl status apnscp.service" and "journalctl -xe" for details.
Nothing to migrate.
Nothing to migrate.
Updating to v3.2.48.3
Previous HEAD position was 242aa3512 FIX: full certificate chain is required for deep inspection (Let's Encrypt) CHG: get_certificate()- when $name is omitted, the full certificate including chain is returned (ssl)
HEAD is now at 50eca27bd Backport 59a2ba9b, f5912c6b, f6ddaa10
Compiled services and packages files removed!
Nothing to migrate.
Nothing to migrate.
Updating to v3.2.48.4
Previous HEAD position was 50eca27bd Backport 59a2ba9b, f5912c6b, f6ddaa10
HEAD is now at ca92487ad CHG: Use release with bundled React assets (Invoiceninja)
Compiled services and packages files removed!
Nothing to migrate.
Nothing to migrate.
Updating to v3.2.48.5
Previous HEAD position was ca92487ad CHG: Use release with bundled React assets (Invoiceninja)
HEAD is now at 68aab86e5 CHG: add Passenger-based apps, maildrop LDA rules (migrations)
Compiled services and packages files removed!
Nothing to migrate.
Nothing to migrate.
Updating to v3.2.48.6
Previous HEAD position was 68aab86e5 CHG: add Passenger-based apps, maildrop LDA rules (migrations)
HEAD is now at 8d431715f SEC: Weak visibility on unauthenticated login controller allows open query to siteinfo,email. Researched by Curtis @ https://terabit.io/ (Login)
Compiled services and packages files removed!
Nothing to migrate.
Nothing to migrate.`
After this, I still encounter this error:
[11-May-2026 11:28:19 Europe/Amsterdam] (ac4f5557-8081-5032-9938-a05eb64fd178 Illuminate\View\ViewException) EXCEPTION: fatal(): Invalid worker name `' (View: /usr/local/apnscp/apps/php-pools/views/index.blade.php) (View: /usr/local/apnscp/resources/views/partials/app/content.blade.php) (View: /usr/local/apnscp/resources/views/partials/app/content.blade.php) (View: /usr/local/apnscp/resources/views/partials/app/content.blade.php)
[/usr/local/apnscp/lib/error_reporter.php:708]
0. Illuminate\View\Engines\CompilerEngine->handleViewException(Illuminate\View\ViewException, 1)
[/usr/local/apnscp/vendor/laravel/framework/src/Illuminate/View/Engines/PhpEngine.php:43]
1. Illuminate\View\Engines\PhpEngine->evaluatePath("/usr/local/apnscp/storage/framework/cache/abbee3a8670a7ff514f44c04bde78dc24c73fd48.php", [__env:Illuminate\View\Factory, app:Illuminate\Container\Container, [], Page:apps\php_pools\Page, [is_postback:false], []])
[/usr/local/apnscp/vendor/laravel/framework/src/Illuminate/View/Engines/CompilerEngine.php:57]
2. Illuminate\View\Engines\CompilerEngine->get("/usr/local/apnscp/resources/views/layout.blade.php", [__env:Illuminate\View\Factory, app:Illuminate\Container\Container, [], Page:apps\php_pools\Page, [is_postback:false], []])
[/usr/local/apnscp/vendor/laravel/framework/src/Illuminate/View/View.php:139]
3. Illuminate\View\View->getContents()
[/usr/local/apnscp/vendor/laravel/framework/src/Illuminate/View/View.php:122]
4. Illuminate\View\View->renderContents()
[/usr/local/apnscp/vendor/laravel/framework/src/Illuminate/View/View.php:91]
5. Illuminate\View\View->render()
[/usr/local/apnscp/lib/BladeLite.php:212]
6. BladeLite->render("layout", [Page:apps\php_pools\Page, [is_postback:false], []])
[/usr/local/apnscp/lib/html/page_container.php:805]
7. Page_Container->render()
[/usr/local/apnscp/lib/html/page_container.php:1074]
8. Page_Container->handle_request()
[/usr/local/apnscp/public/index.php:101]
Finally
EditDomain --reconfig --all --force
fixed the problems, sites back online (the --force was really needed!)
My question is now, is my installation (in the long-term) now dependent on the validity of the GitHub token? Or was this only a one-off requirement to progress through the updates?
)