Page MenuHomePhabricator

Upgrade globally installed python-mwclient to 0.8.1
Closed, ResolvedPublic

bd808$ python
Python 2.7.6 (default, Jun 22 2015, 17:58:13)
[GCC 4.8.2] on linux2
Type "help", "copyright", "credits" or "license" for more information.
>>> import mwclient
>>> mwclient.__ver__

T105794: Insecure POST traffic will soon break clients that are still using http to access the API and the current shared version of mwclient does not include the upstream commit that changed the default behavior to use of https.

Event Timeline

Restricted Application added subscribers: Zppix, Aklapper. · View Herald Transcript
$ dpkg-query -s python-mwclient
Package: python-mwclient
Status: install ok installed
Priority: optional
Section: python
Installed-Size: 244
Maintainer: Bryan Tong Minh <>
Architecture: all
Source: mwclient
Version: 0.8.0~dev1-1
Depends: python2.7 | python2.6, python (>= 2.7.1-0ubuntu2), python (<< 2.8), python-requests, python-six, python-ordereddict
Description: MediaWiki API client
 .. image::
    :alt: Build status
 .. image::
    :alt: Test coverage
 .. image::
    :alt: Code health
 .. image::
    :alt: Latest version
 .. image::
    :alt: Downloads

Is this coming from upstream debian or from our repos?

We pull it in from apt.wm.o:

valhallasw@tools-bastion-03:~$ apt-cache madison python-mwclient
python-mwclient | 0.8.0~dev1-1 | trusty-wikimedia/universe amd64 Packages

Iirc @Andrew packaged a new version for T114365: upgrade mwclient (morebots no more log because of MediaWiki semantic versionning).

Packages are updated in the apt repo for precise, trusty, jessie.

And I've run upgrades everywhere with salt.