Set final cutoff date for projects using SSH keys with write access (#12536)

Ref:

- readthedocs/readthedocs-corporate#2049
- readthedocs/meta#196

---------

Co-authored-by: Copilot <[email protected]>
Co-authored-by: stsewd <[email protected]>

Author: stsewd

readthedocs/doc_builder/director.py

@@ -8,6 +8,7 @@
 * fetching instructions etc.
 """
 
+import datetime
 import os
 import tarfile
 
@@ -216,12 +217,20 @@ def checkout(self):
                 self.data.api_client.project(self.data.project.pk).patch(
                     {"has_ssh_key_with_write_access": has_ssh_key_with_write_access}
                 )
+
+            now = datetime.datetime.now(tz=datetime.timezone.utc)
+            hard_failure = now >= datetime.datetime(
+                2025, 12, 1, 0, 0, 0, tzinfo=datetime.timezone.utc
+            )
             if has_ssh_key_with_write_access:
-                self.attach_notification(
-                    attached_to=f"project/{self.data.project.pk}",
-                    message_id=MESSAGE_PROJECT_SSH_KEY_WITH_WRITE_ACCESS,
-                    dismissable=True,
-                )
+                if hard_failure and settings.RTD_ENFORCE_BROWNOUTS_FOR_DEPRECATIONS:
+                    raise BuildUserError(BuildUserError.SSH_KEY_WITH_WRITE_ACCESS)
+                else:
+                    self.attach_notification(
+                        attached_to=f"project/{self.data.project.pk}",
+                        message_id=MESSAGE_PROJECT_SSH_KEY_WITH_WRITE_ACCESS,
+                        dismissable=True,
+                    )
 
         identifier = self.data.build_commit or self.data.version.identifier
         log.info("Checking out.", identifier=identifier)

readthedocs/notifications/messages.py

@@ -226,7 +226,7 @@ def get_rendered_body(self):
                 """
                 This build has failed because the current deploy key on the repository was created with write permission.
                 For protection against abuse we've restricted use of these deploy keys.
-                A read-only deploy key will need to be set up <b>before July 31, 2025</b> to continue building this project.
+                A read-only deploy key will need to be set up <b>before December 1st, 2025</b> to continue building this project.
                 Read more about this in our <a href="https://about.readthedocs.com/blog/2025/07/ssh-keys-with-write-access/">blog post</a>.
                 """
             ).strip(),

readthedocs/projects/notifications.py

@@ -187,7 +187,7 @@
                 """
                 This project has a deploy key with write access to the repository.
                 For protection against abuse we've restricted use of these deploy keys.
-                A read-only deploy key will need to be set up <b>before July 31, 2025</b> to continue building this project.
+                A read-only deploy key will need to be set up <b>before December 1st, 2025</b> to continue building this project.
                 Read more about this in our <a href="https://about.readthedocs.com/blog/2025/07/ssh-keys-with-write-access/">blog post</a>.
                 """
             ).strip(),