[Cloud] Fwd: [GitHub API] Deprecation notice for authentication via URL query parameters

[Zoran Dori]

Hello,
I have a Cloud VPS project called srwiki-dev. I have set cron which
automatically updates Mediawiki (core, extensions, skins) also and
composer/npm dependencies. It happens each Thursday. But, I don't know why
GitHub sends me this mail below.

Best regards,
Zoran Dori
Volunteer on Wikimedia Foundation's projects
E: zorandori4...@gmail.com
W: kizule.tk
I: iamkizule 


-- Forwarded message -
Од: GitHub 
Date: чет, 13. авг 2020. у 22:00
Subject: [GitHub API] Deprecation notice for authentication via URL query
parameters
To: Zoran Dori 


Hi @zoranzoki21,

On August 13th, 2020 at 20:00 (UTC) your personal access token (Composer on
discordwiki 2020-03-25 2307) using Composer/1.8.4 (Linux; 4.19.0-8-amd64;
PHP 7.3.19) was used as part of a query parameter to access an endpoint
through the GitHub API:

https://api.github.com/repositories/14212481/zipball/d1e4107e1c4f4ca0139a4ac936cb4f64ec8dc7fc

Please use the Authorization HTTP header instead, as using the
`access_token` query parameter is deprecated. If this token is being used
by an app you don't have control over, be aware that it may stop working as
a result of this deprecation.

Depending on your API usage, we'll be sending you this email reminder on a
monthly basis for each token and User-Agent used in API calls made on your
behalf.
Just one URL that was accessed with a token and User-Agent combination will
be listed in the email reminder, not all.

Visit
https://developer.github.com/changes/2020-02-10-deprecating-auth-through-query-param
for more information about suggested workarounds and removal dates.

Thanks,
The GitHub Team
___
Wikimedia Cloud Services mailing list
Cloud@lists.wikimedia.org (formerly lab...@lists.wikimedia.org)
https://lists.wikimedia.org/mailman/listinfo/cloud

Re: [Cloud] Fwd: [GitHub API] Deprecation notice for authentication via URL query parameters

[Bryan Davis]

On Thu, Aug 13, 2020 at 2:39 PM Zoran Dori  wrote:
>
> Hello,
> I have a Cloud VPS project called srwiki-dev. I have set cron which 
> automatically updates Mediawiki (core, extensions, skins) also and 
> composer/npm dependencies. It happens each Thursday. But, I don't know why 
> GitHub sends me this mail below.

The version of composer installed on your
discordwiki.srwiki-dev.eqiad.wmflabs instance is: Composer 1.8.4
2019-02-11 10:52:10

You need Composer 1.9.3 or later to comply with the upstream API
change at GitHub ().

Bryan
-- 
Bryan Davis  Technical Engagement  Wikimedia Foundation
Principal Software Engineer   Boise, ID USA
[[m:User:BDavis_(WMF)]]  irc: bd808

___
Wikimedia Cloud Services mailing list
Cloud@lists.wikimedia.org (formerly lab...@lists.wikimedia.org)
https://lists.wikimedia.org/mailman/listinfo/cloud

Re: [Cloud] Fwd: [GitHub API] Deprecation notice for authentication via URL query parameters

[Zoran Dori]

Thanks, but how I can update composer on my instances, as tutorial from
DigitalOcean [1] no works. Can you provide it on mirrors.wikimedia.org?

Best regards,
Zoran Dori
Volunteer on Wikimedia Foundation's projects
E: zorandori4...@gmail.com
W: kizule.tk
I: iamkizule 

[1]
https://www.digitalocean.com/community/tutorials/how-to-install-and-use-composer-on-debian-10
___
Wikimedia Cloud Services mailing list
Cloud@lists.wikimedia.org (formerly lab...@lists.wikimedia.org)
https://lists.wikimedia.org/mailman/listinfo/cloud

Re: [Cloud] Fwd: [GitHub API] Deprecation notice for authentication via URL query parameters

[Bryan Davis]

On Thu, Aug 13, 2020 at 4:49 PM Zoran Dori  wrote:
>
> Thanks, but how I can update composer on my instances, as tutorial from 
> DigitalOcean [1] no works.
> [1] 
> https://www.digitalocean.com/community/tutorials/how-to-install-and-use-composer-on-debian-10

Maybe try going to the actual upstream for instructions?
. You did not provide any
information about how the tutorial failed you so it is hard to help
you work around any problems that may be in those 3rd party
instructions.

I would personally recommend the direct approach of downloading a phar
file from https://getcomposer.org/download/ to bootstrap composer
locally and then keeping up with version bumps by occasionally running
`composer self-update`. Downloading the phar file is what Wikimedia's
CI system does these days. We used to maintain a gerrit repo for this
(it's still there, but being deprecated), but in T249461 we switched
to just fetching the phar file from getcomposer.org and verifying its
published sha256 hash.

Bryan
-- 
Bryan Davis  Technical Engagement  Wikimedia Foundation
Principal Software Engineer   Boise, ID USA
[[m:User:BDavis_(WMF)]]  irc: bd808

___
Wikimedia Cloud Services mailing list
Cloud@lists.wikimedia.org (formerly lab...@lists.wikimedia.org)
https://lists.wikimedia.org/mailman/listinfo/cloud

Re: [Cloud] Fwd: [GitHub API] Deprecation notice for authentication via URL query parameters

[Zoran Dori]

Hello again,
it was failing on verifying hash, but I have downloaded a file from
getcomposer.org and made it working now.

Best regards,
Zoran Dori
Volunteer on Wikimedia Foundation's projects
E: zorandori4...@gmail.com
W: kizule.tk
I: iamkizule 
___
Wikimedia Cloud Services mailing list
Cloud@lists.wikimedia.org (formerly lab...@lists.wikimedia.org)
https://lists.wikimedia.org/mailman/listinfo/cloud