valid bootstrap issue：GET returned 429 Too Many Requests

[sunxr]

INFO: Repository boringssl instantiated at:
/Users/jamessun/Desktop/valdi/test_valdi/WORKSPACE:21:24: in
/private/var/tmp/_bazel_jamessun/7c6d97620daed444968d7121f5353ee3/external/valdi/bzl/workspace_prepare.bzl:5:23: in valdi_prepare_workspace
/private/var/tmp/_bazel_jamessun/7c6d97620daed444968d7121f5353ee3/external/valdi/bzl/dependencies.bzl:176:17: in setup_dependencies
Repository rule http_archive defined at:
/private/var/tmp/_bazel_jamessun/7c6d97620daed444968d7121f5353ee3/external/bazel_tools/tools/build_defs/repo/http.bzl:382:31: in
ERROR: An error occurred during the fetch of repository 'boringssl':
Traceback (most recent call last):
File "/private/var/tmp/_bazel_jamessun/7c6d97620daed444968d7121f5353ee3/external/bazel_tools/tools/build_defs/repo/http.bzl", line 131, column 45, in _http_archive_impl
download_info = ctx.download_and_extract(
Error in download_and_extract: java.io.IOException: Error downloading [https://boringssl.googlesource.com/boringssl/+archive/82f9853fc7d7360ae44f1e1357a6422c5244bbd8.tar.gz] to /private/var/tmp/_bazel_jamessun/7c6d97620daed444968d7121f5353ee3/external/boringssl/temp12605984111393629039/82f9853fc7d7360ae44f1e1357a6422c5244bbd8.tar.gz: GET returned 429 Too Many Requests
ERROR: no such package '@@boringssl//': java.io.IOException: Error downloading [https://boringssl.googlesource.com/boringssl/+archive/82f9853fc7d7360ae44f1e1357a6422c5244bbd8.tar.gz] to /private/var/tmp/_bazel_jamessun/7c6d97620daed444968d7121f5353ee3/external/boringssl/temp12605984111393629039/82f9853fc7d7360ae44f1e1357a6422c5244bbd8.tar.gz: GET returned 429 Too Many Requests
ERROR: /private/var/tmp/_bazel_jamessun/7c6d97620daed444968d7121f5353ee3/external/valdi/valdi/BUILD.bazel:125:11: @@valdi//valdi:valdi_runtime depends on @@boringssl//:crypto in repository @@boringssl which failed to fetch. no such package '@@boringssl//': java.io.IOException: Error downloading [https://boringssl.googlesource.com/boringssl/+archive/82f9853fc7d7360ae44f1e1357a6422c5244bbd8.tar.gz] to /private/var/tmp/_bazel_jamessun/7c6d97620daed444968d7121f5353ee3/external/boringssl/temp12605984111393629039/82f9853fc7d7360ae44f1e1357a6422c5244bbd8.tar.gz: GET returned 429 Too Many Requests
ERROR: Analysis of target '//modules/validDemo:validDemo_projectsync' failed; build aborted: Analysis failed
INFO: Elapsed time: 24.096s, Critical Path: 0.01s
INFO: 1 process: 1 internal.
ERROR: Build did NOT complete successfully
FAILED:
Fetching repository @@nodejs_darwin_arm64; starting 22s
Fetching repository @@skia; starting 22s
Fetching repository @@boost; starting 22s
Fetching https://archives.boost.io/...1_78_0.tar.bz2; 43.9 MiB (41.6%) 22s
Fetching https://github.com/...e865940f99cdf60ce21.zip; 5.5 MiB (7.9%) 20s
Fetching https://nodejs.org/...0-darwin-arm64.tar.gz; 25.2 MiB (54.5%) 14s
Fetching repository @@valdi_npm__readable-stream__3.6.2; starting
Fetching ..._babel_helper-string-parser__7.27.1; starting ... (14 fetches)
Failed to build targets: //modules/validDemo:validDemo_projectsync

[c4nzin]

before

  http_archive(
        name = "boringssl",
        url = "https://boringssl.googlesource.com/boringssl/+archive/82f9853fc7d7360ae44f1e1357a6422c5244bbd8.tar.gz",
    )

after

 http_archive(
        name = "boringssl",
        urls = [
            "https://boringssl.googlesource.com/boringssl/+archive/82f9853fc7d7360ae44f1e1357a6422c5244bbd8.tar.gz",
            "https://github.com/google/boringssl/releases/download/0.20251110.0/boringssl-0.20251110.0.tar.gz",
        ],
    )

https://github.com/google/boringssl/archive/82f9853fc7d7360ae44f1e1357a6422c5244bbd8.tar.gz

add github as fallback url

im not sure if this actually solves the issue but its just an idea that came to mind at first glance... maybe the developer team will see it and find the fix useful

[rFlex]

I think changing the URLs to point to github archives would be great, we need to make sure they are the same version as what we have checked in however

[c4nzin]

I think changing the URLs to point to github archives would be great, we need to make sure they are the same version as what we have checked in however

updated the urls both use the same hash

pr : #31

[YahyaMokhlis]

Google’s BoringSSL server returned a 429 (Too Many Requests).
This happens when Bazel downloads many dependencies at once and hits the rate limit.

Workarounds you can try:

Clean Bazel cache and rebuild with fewer parallel downloads:

bazel clean --expunge
bazel build --jobs=2 //modules/validDemo:validDemo_projectsync

Or download the BoringSSL archive manually and point WORKSPACE to a local file.

You can also use:

--repository_fetch_retry_attempts=5

This is not a Valdi bug — it’s a rate-limit issue from googlesource.