Page MenuHomePhabricator

Upgrade globally installed python-mwclient to 0.8.1
Closed, ResolvedPublic

bd808$ python
Python 2.7.6 (default, Jun 22 2015, 17:58:13)
[GCC 4.8.2] on linux2
Type "help", "copyright", "credits" or "license" for more information.
>>> import mwclient
>>> mwclient.__ver__

T105794: Insecure POST traffic will soon break clients that are still using http to access the API and the current shared version of mwclient does not include the upstream commit that changed the default behavior to use of https.

Event Timeline

bd808 created this task.May 24 2016, 4:13 PM
Restricted Application added a project: Cloud-Services. · View Herald TranscriptMay 24 2016, 4:13 PM
Restricted Application added subscribers: Zppix, Aklapper. · View Herald Transcript
bd808 added a comment.May 24 2016, 4:15 PM
$ dpkg-query -s python-mwclient
Package: python-mwclient
Status: install ok installed
Priority: optional
Section: python
Installed-Size: 244
Maintainer: Bryan Tong Minh <>
Architecture: all
Source: mwclient
Version: 0.8.0~dev1-1
Depends: python2.7 | python2.6, python (>= 2.7.1-0ubuntu2), python (<< 2.8), python-requests, python-six, python-ordereddict
Description: MediaWiki API client
 .. image::
    :alt: Build status
 .. image::
    :alt: Test coverage
 .. image::
    :alt: Code health
 .. image::
    :alt: Latest version
 .. image::
    :alt: Downloads

Is this coming from upstream debian or from our repos?

We pull it in from apt.wm.o:

valhallasw@tools-bastion-03:~$ apt-cache madison python-mwclient
python-mwclient | 0.8.0~dev1-1 | trusty-wikimedia/universe amd64 Packages

Iirc @Andrew packaged a new version for T114365: upgrade mwclient (morebots no more log because of MediaWiki semantic versionning).

Andrew claimed this task.May 24 2016, 4:28 PM

Packages are updated in the apt repo for precise, trusty, jessie.

Andrew closed this task as Resolved.May 24 2016, 5:13 PM

And I've run upgrades everywhere with salt.