Hello, I have a Cloud VPS project called srwiki-dev. I have set cron which automatically updates Mediawiki (core, extensions, skins) also and composer/npm dependencies. It happens each Thursday. But, I don't know why GitHub sends me this mail below.
Best regards, Zoran Dori Volunteer on Wikimedia Foundation's projects E: zorandori4444@gmail.com W: kizule.tk I: iamkizule https://instagram.com/iamkizule
---------- Forwarded message --------- Од: GitHub noreply@github.com Date: чет, 13. авг 2020. у 22:00 Subject: [GitHub API] Deprecation notice for authentication via URL query parameters To: Zoran Dori zorandori4444@gmail.com
Hi @zoranzoki21,
On August 13th, 2020 at 20:00 (UTC) your personal access token (Composer on discordwiki 2020-03-25 2307) using Composer/1.8.4 (Linux; 4.19.0-8-amd64; PHP 7.3.19) was used as part of a query parameter to access an endpoint through the GitHub API:
https://api.github.com/repositories/14212481/zipball/d1e4107e1c4f4ca0139a4ac...
Please use the Authorization HTTP header instead, as using the `access_token` query parameter is deprecated. If this token is being used by an app you don't have control over, be aware that it may stop working as a result of this deprecation.
Depending on your API usage, we'll be sending you this email reminder on a monthly basis for each token and User-Agent used in API calls made on your behalf. Just one URL that was accessed with a token and User-Agent combination will be listed in the email reminder, not all.
Visit https://developer.github.com/changes/2020-02-10-deprecating-auth-through-que... for more information about suggested workarounds and removal dates.
Thanks, The GitHub Team
On Thu, Aug 13, 2020 at 2:39 PM Zoran Dori zorandori4444@gmail.com wrote:
Hello, I have a Cloud VPS project called srwiki-dev. I have set cron which automatically updates Mediawiki (core, extensions, skins) also and composer/npm dependencies. It happens each Thursday. But, I don't know why GitHub sends me this mail below.
The version of composer installed on your discordwiki.srwiki-dev.eqiad.wmflabs instance is: Composer 1.8.4 2019-02-11 10:52:10
You need Composer 1.9.3 or later to comply with the upstream API change at GitHub (https://github.com/composer/composer/issues/8586).
Bryan
Thanks, but how I can update composer on my instances, as tutorial from DigitalOcean [1] no works. Can you provide it on mirrors.wikimedia.org?
Best regards, Zoran Dori Volunteer on Wikimedia Foundation's projects E: zorandori4444@gmail.com W: kizule.tk I: iamkizule https://instagram.com/iamkizule
[1] https://www.digitalocean.com/community/tutorials/how-to-install-and-use-comp...
On Thu, Aug 13, 2020 at 4:49 PM Zoran Dori zorandori4444@gmail.com wrote:
Thanks, but how I can update composer on my instances, as tutorial from DigitalOcean [1] no works. [1] https://www.digitalocean.com/community/tutorials/how-to-install-and-use-comp...
Maybe try going to the actual upstream for instructions? https://getcomposer.org/download/. You did not provide any information about how the tutorial failed you so it is hard to help you work around any problems that may be in those 3rd party instructions.
I would personally recommend the direct approach of downloading a phar file from https://getcomposer.org/download/ to bootstrap composer locally and then keeping up with version bumps by occasionally running `composer self-update`. Downloading the phar file is what Wikimedia's CI system does these days. We used to maintain a gerrit repo for this (it's still there, but being deprecated), but in T249461 we switched to just fetching the phar file from getcomposer.org and verifying its published sha256 hash.
Bryan
Hello again, it was failing on verifying hash, but I have downloaded a file from getcomposer.org and made it working now.
Best regards, Zoran Dori Volunteer on Wikimedia Foundation's projects E: zorandori4444@gmail.com W: kizule.tk I: iamkizule https://instagram.com/iamkizule