Pywikibot-commits May 2026

pywikibot-commits@lists.wikimedia.org

1 participants
91 discussions

[Gerrit] ...core[master]: GH tests: finally close socket in GitHub workflows
by Xqt (Code Review) 30 May '26

30 May '26

Xqt has submitted this change. ( https://gerrit.wikimedia.org/r/c/pywikibot/core/+/1295541?usp=email ) Change subject: GH tests: finally close socket in GitHub workflows ...................................................................... GH tests: finally close socket in GitHub workflows Change-Id: I8ae9de1f11dffa123dccf3edb469f5fff4fcbe29 --- M .github/workflows/doctest.yml M .github/workflows/login_tests-ci.yml M .github/workflows/oauth_tests-ci.yml M .github/workflows/pywikibot-ci.yml 4 files changed, 43 insertions(+), 1 deletion(-) Approvals: jenkins-bot: Verified Xqt: Looks good to me, approved diff --git a/.github/workflows/doctest.yml b/.github/workflows/doctest.yml index 1d71ba2..a3df52e 100644 --- a/.github/workflows/doctest.yml +++ b/.github/workflows/doctest.yml @@ -84,9 +84,15 @@ coverage run -m pytest pywikibot --doctest-modules --ignore-glob="*gui.py" --ignore-glob="*memento.py" --doctest-wait - name: Close WMCS SOCKS tunnel if: always() + shell: bash run: |- if [ -f ssh.pid ]; then - kill "$(cat ssh.pid)" || true + PID=$(cat ssh.pid) + kill "$PID" || true + echo "SSH tunnel closed (PID $PID)" + rm -f ssh.pid + else + echo "No SSH tunnel PID found" fi - name: Show coverage statistics run: | diff --git a/.github/workflows/login_tests-ci.yml b/.github/workflows/login_tests-ci.yml index 7edffb7..8edfcb1 100644 --- a/.github/workflows/login_tests-ci.yml +++ b/.github/workflows/login_tests-ci.yml @@ -148,6 +148,18 @@ run: | python pwb.py version coverage run -m unittest -vv tests/site_login_logout_tests.py + - name: Close WMCS SOCKS tunnel + if: always() + shell: bash + run: |- + if [ -f ssh.pid ]; then + PID=$(cat ssh.pid) + kill "$PID" || true + echo "SSH tunnel closed (PID $PID)" + rm -f ssh.pid + else + echo "No SSH tunnel PID found" + fi - name: Show coverage statistics run: | coverage combine || true diff --git a/.github/workflows/oauth_tests-ci.yml b/.github/workflows/oauth_tests-ci.yml index 03f427e..3d4c180 100644 --- a/.github/workflows/oauth_tests-ci.yml +++ b/.github/workflows/oauth_tests-ci.yml @@ -137,6 +137,18 @@ run: | python pwb.py version coverage run -m unittest -vv + - name: Close WMCS SOCKS tunnel + if: always() + shell: bash + run: |- + if [ -f ssh.pid ]; then + PID=$(cat ssh.pid) + kill "$PID" || true + echo "SSH tunnel closed (PID $PID)" + rm -f ssh.pid + else + echo "No SSH tunnel PID found" + fi - name: Show coverage statistics run: | coverage combine || true diff --git a/.github/workflows/pywikibot-ci.yml b/.github/workflows/pywikibot-ci.yml index c348a7b..6fc8c64 100644 --- a/.github/workflows/pywikibot-ci.yml +++ b/.github/workflows/pywikibot-ci.yml @@ -159,6 +159,18 @@ else coverage run -m pytest fi + - name: Close WMCS SOCKS tunnel + if: always() + shell: bash + run: |- + if [ -f ssh.pid ]; then + PID=$(cat ssh.pid) + kill "$PID" || true + echo "SSH tunnel closed (PID $PID)" + rm -f ssh.pid + else + echo "No SSH tunnel PID found" + fi - name: Show coverage statistics run: | coverage combine || true -- To view, visit https://gerrit.wikimedia.org/r/c/pywikibot/core/+/1295541?usp=email To unsubscribe, or for help writing mail filters, visit https://gerrit.wikimedia.org/r/settings?usp=email Gerrit-MessageType: merged Gerrit-Project: pywikibot/core Gerrit-Branch: master Gerrit-Change-Id: I8ae9de1f11dffa123dccf3edb469f5fff4fcbe29 Gerrit-Change-Number: 1295541 Gerrit-PatchSet: 1 Gerrit-Owner: Xqt <info(a)gno.de> Gerrit-Reviewer: Xqt <info(a)gno.de> Gerrit-Reviewer: jenkins-bot

1 0

[Gerrit] ...core[master]: GH tests: use WMCS SOCKS tunnel composite action with GitHub actions
by Xqt (Code Review) 30 May '26

30 May '26

Xqt has submitted this change. ( https://gerrit.wikimedia.org/r/c/pywikibot/core/+/1295540?usp=email ) Change subject: GH tests: use WMCS SOCKS tunnel composite action with GitHub actions ...................................................................... GH tests: use WMCS SOCKS tunnel composite action with GitHub actions Also finally close socket in doctest.yml Change-Id: I47e4d814d43976dc2436209eceefbaac60fd1075 --- M .github/workflows/doctest.yml M .github/workflows/login_tests-ci.yml M .github/workflows/oauth_tests-ci.yml M .github/workflows/pywikibot-ci.yml 4 files changed, 18 insertions(+), 72 deletions(-) Approvals: Xqt: Looks good to me, approved jenkins-bot: Verified diff --git a/.github/workflows/doctest.yml b/.github/workflows/doctest.yml index 0b53b10..1d71ba2 100644 --- a/.github/workflows/doctest.yml +++ b/.github/workflows/doctest.yml @@ -82,6 +82,12 @@ python pwb.py version pytest --version coverage run -m pytest pywikibot --doctest-modules --ignore-glob="*gui.py" --ignore-glob="*memento.py" --doctest-wait + - name: Close WMCS SOCKS tunnel + if: always() + run: |- + if [ -f ssh.pid ]; then + kill "$(cat ssh.pid)" || true + fi - name: Show coverage statistics run: | coverage combine || true diff --git a/.github/workflows/login_tests-ci.yml b/.github/workflows/login_tests-ci.yml index 610b50f..7edffb7 100644 --- a/.github/workflows/login_tests-ci.yml +++ b/.github/workflows/login_tests-ci.yml @@ -103,30 +103,10 @@ pip install requests pip install requests[socks] - name: Configure and start WMCS SOCKS tunnel - env: - USER: ${{ secrets.WMCS_USER }} - run: | - mkdir -p ~/.ssh - printf "%s" "${{ secrets.WMCS_SSH_KEY }}" > ~/.ssh/id_ed25519 - chmod 600 ~/.ssh/id_ed25519 - ssh-keygen -lf ~/.ssh/id_ed25519 - ssh-keyscan bastion.wmcloud.org >> ~/.ssh/known_hosts - ssh \ - -o StrictHostKeyChecking=accept-new \ - -o ExitOnForwardFailure=yes \ - -o ServerAliveInterval=30 \ - -o ServerAliveCountMax=3 \ - -o ConnectTimeout=10 \ - -f -N \ - -D 127.0.0.1:1080 \ - -i ~/.ssh/id_ed25519 \ - "$USER(a)bastion.wmcloud.org" - echo "Socket connection:" - echo "Local IP:" - curl -s https://api.ipify.org - echo - echo "Proxy IP:" - curl --proxy socks5h://127.0.0.1:1080 -s https://api.ipify.org + uses: ./.github/actions/wmcs-socks + with: + ssh_user: ${{ secrets.WMCS_USER }} + ssh_key: ${{ secrets.WMCS_SSH_KEY }} - name: Generate family files env: HTTP_PROXY: socks5h://127.0.0.1:1080 diff --git a/.github/workflows/oauth_tests-ci.yml b/.github/workflows/oauth_tests-ci.yml index 03f45a6..03f427e 100644 --- a/.github/workflows/oauth_tests-ci.yml +++ b/.github/workflows/oauth_tests-ci.yml @@ -86,30 +86,10 @@ pip install requests pip install requests[socks] - name: Configure and start WMCS SOCKS tunnel - env: - USER: ${{ secrets.WMCS_USER }} - run: | - mkdir -p ~/.ssh - printf "%s" "${{ secrets.WMCS_SSH_KEY }}" > ~/.ssh/id_ed25519 - chmod 600 ~/.ssh/id_ed25519 - ssh-keygen -lf ~/.ssh/id_ed25519 - ssh-keyscan bastion.wmcloud.org >> ~/.ssh/known_hosts - ssh \ - -o StrictHostKeyChecking=accept-new \ - -o ExitOnForwardFailure=yes \ - -o ServerAliveInterval=30 \ - -o ServerAliveCountMax=3 \ - -o ConnectTimeout=10 \ - -f -N \ - -D 127.0.0.1:1080 \ - -i ~/.ssh/id_ed25519 \ - "$USER(a)bastion.wmcloud.org" - echo "Socket connection:" - echo "Local IP:" - curl -s https://api.ipify.org - echo - echo "Proxy IP:" - curl --proxy socks5h://127.0.0.1:1080 -s https://api.ipify.org + uses: ./.github/actions/wmcs-socks + with: + ssh_user: ${{ secrets.WMCS_USER }} + ssh_key: ${{ secrets.WMCS_SSH_KEY }} - name: Generate family files if: ${{ matrix.family == 'wpbeta' }} env: diff --git a/.github/workflows/pywikibot-ci.yml b/.github/workflows/pywikibot-ci.yml index 68694f7..c348a7b 100644 --- a/.github/workflows/pywikibot-ci.yml +++ b/.github/workflows/pywikibot-ci.yml @@ -104,30 +104,10 @@ if: ${{ (matrix.python-version >= '3.12') || (matrix.os == 'macOS-latest') }} run: pip install setuptools - name: Configure and start WMCS SOCKS tunnel - env: - USER: ${{ secrets.WMCS_USER }} - run: | - mkdir -p ~/.ssh - printf "%s" "${{ secrets.WMCS_SSH_KEY }}" > ~/.ssh/id_ed25519 - chmod 600 ~/.ssh/id_ed25519 - ssh-keygen -lf ~/.ssh/id_ed25519 - ssh-keyscan bastion.wmcloud.org >> ~/.ssh/known_hosts - ssh \ - -o StrictHostKeyChecking=accept-new \ - -o ExitOnForwardFailure=yes \ - -o ServerAliveInterval=30 \ - -o ServerAliveCountMax=3 \ - -o ConnectTimeout=10 \ - -f -N \ - -D 127.0.0.1:1080 \ - -i ~/.ssh/id_ed25519 \ - "$USER(a)bastion.wmcloud.org" - echo "Socket connection:" - echo "Local IP:" - curl -s https://api.ipify.org - echo - echo "Proxy IP:" - curl --proxy socks5h://127.0.0.1:1080 -s https://api.ipify.org + uses: ./.github/actions/wmcs-socks + with: + ssh_user: ${{ secrets.WMCS_USER }} + ssh_key: ${{ secrets.WMCS_SSH_KEY }} - name: Generate family files env: HTTP_PROXY: socks5h://127.0.0.1:1080 -- To view, visit https://gerrit.wikimedia.org/r/c/pywikibot/core/+/1295540?usp=email To unsubscribe, or for help writing mail filters, visit https://gerrit.wikimedia.org/r/settings?usp=email Gerrit-MessageType: merged Gerrit-Project: pywikibot/core Gerrit-Branch: master Gerrit-Change-Id: I47e4d814d43976dc2436209eceefbaac60fd1075 Gerrit-Change-Number: 1295540 Gerrit-PatchSet: 1 Gerrit-Owner: Xqt <info(a)gno.de> Gerrit-Reviewer: Xqt <info(a)gno.de> Gerrit-Reviewer: jenkins-bot

1 0

[Gerrit] ...core[master]: GH tests: refactor workflows to use WMCS SOCKS tunnel composite action
by Xqt (Code Review) 30 May '26

30 May '26

Xqt has submitted this change. ( https://gerrit.wikimedia.org/r/c/pywikibot/core/+/1295539?usp=email ) Change subject: GH tests: refactor workflows to use WMCS SOCKS tunnel composite action ...................................................................... GH tests: refactor workflows to use WMCS SOCKS tunnel composite action Start with doctest.yml Change-Id: I9a981ab3f18224345643a5c0981d6c5cfa507735 --- A .github/actions/wmcs-socks/action.yml M .github/workflows/doctest.yml 2 files changed, 61 insertions(+), 25 deletions(-) Approvals: jenkins-bot: Verified Xqt: Looks good to me, approved diff --git a/.github/actions/wmcs-socks/action.yml b/.github/actions/wmcs-socks/action.yml new file mode 100644 index 0000000..f78cd38 --- /dev/null +++ b/.github/actions/wmcs-socks/action.yml @@ -0,0 +1,57 @@ +--- +name: WMCS SOCKS Tunnel +description: Configure and start WMCS SOCKS proxy tunnel + +inputs: + ssh_user: + description: SSH user for bastion + required: true + ssh_key: + description: Private SSH key + required: true + +runs: + using: composite + steps: + - name: Setup SSH directory + shell: bash + run: | + set -euo pipefail + mkdir -p ~/.ssh + - name: Install SSH key + shell: bash + run: | + set -euo pipefail + printf "%s" "${{ inputs.ssh_key }}" > ~/.ssh/id_ed25519 + chmod 600 ~/.ssh/id_ed25519 + - name: Add known hosts + shell: bash + run: | + set -euo pipefail + ssh-keyscan bastion.wmcloud.org >> ~/.ssh/known_hosts + - name: Start SOCKS tunnel + shell: bash + run: | + set -euo pipefail + ssh \ + -o StrictHostKeyChecking=accept-new \ + -o ExitOnForwardFailure=yes \ + -o ServerAliveInterval=30 \ + -o ServerAliveCountMax=3 \ + -o ConnectTimeout=10 \ + -N \ + -D 127.0.0.1:1080 \ + -i ~/.ssh/id_ed25519 \ + "${{ inputs.ssh_user }}(a)bastion.wmcloud.org" & + echo $! > ssh.pid + echo "SSH tunnel started with PID $(cat ssh.pid)" + - name: Show proxy connection + shell: bash + run: |- + set -euo pipefail + echo "Local IP:" + curl -s https://api.ipify.org + echo + echo "Proxy IP:" + curl --proxy socks5h://127.0.0.1:1080 -s https://api.ipify.org + echo diff --git a/.github/workflows/doctest.yml b/.github/workflows/doctest.yml index d166173..0b53b10 100644 --- a/.github/workflows/doctest.yml +++ b/.github/workflows/doctest.yml @@ -58,31 +58,10 @@ pip install wikitextparser pip install requests[socks] - name: Configure and start WMCS SOCKS tunnel - shell: bash - env: - USER: ${{ secrets.WMCS_USER }} - run: | - mkdir -p ~/.ssh - printf "%s" "${{ secrets.WMCS_SSH_KEY }}" > ~/.ssh/id_ed25519 - chmod 600 ~/.ssh/id_ed25519 - ssh-keygen -lf ~/.ssh/id_ed25519 - ssh-keyscan bastion.wmcloud.org >> ~/.ssh/known_hosts - ssh \ - -o StrictHostKeyChecking=accept-new \ - -o ExitOnForwardFailure=yes \ - -o ServerAliveInterval=30 \ - -o ServerAliveCountMax=3 \ - -o ConnectTimeout=10 \ - -f -N \ - -D 127.0.0.1:1080 \ - -i ~/.ssh/id_ed25519 \ - "$USER(a)bastion.wmcloud.org" - echo "Socket connection:" - echo "Local IP:" - curl -s https://api.ipify.org - echo - echo "Proxy IP:" - curl --proxy socks5h://127.0.0.1:1080 -s https://api.ipify.org + uses: ./.github/actions/wmcs-socks + with: + ssh_user: ${{ secrets.WMCS_USER }} + ssh_key: ${{ secrets.WMCS_SSH_KEY }} - name: Generate user files run: | python -Werror::UserWarning -m pwb generate_user_files -site:wikipedia:test -user:${{ env.PYWIKIBOT_USERNAME }} -v -debug; -- To view, visit https://gerrit.wikimedia.org/r/c/pywikibot/core/+/1295539?usp=email To unsubscribe, or for help writing mail filters, visit https://gerrit.wikimedia.org/r/settings?usp=email Gerrit-MessageType: merged Gerrit-Project: pywikibot/core Gerrit-Branch: master Gerrit-Change-Id: I9a981ab3f18224345643a5c0981d6c5cfa507735 Gerrit-Change-Number: 1295539 Gerrit-PatchSet: 1 Gerrit-Owner: Xqt <info(a)gno.de> Gerrit-Reviewer: Xqt <info(a)gno.de> Gerrit-Reviewer: jenkins-bot

1 0

[Gerrit] ...core[master]: GitHub: remove ss command on all GH workflows
by Xqt (Code Review) 30 May '26

30 May '26

Xqt has submitted this change. ( https://gerrit.wikimedia.org/r/c/pywikibot/core/+/1295538?usp=email ) Change subject: GitHub: remove ss command on all GH workflows ...................................................................... GitHub: remove ss command on all GH workflows ss command is used for debugging the ssh connection only. It does not work for Windows and MacOS. Change-Id: I9e49d1b692df2a9e816a775cdcdcfb8568d17fc8 --- M .github/workflows/doctest.yml M .github/workflows/login_tests-ci.yml M .github/workflows/oauth_tests-ci.yml M .github/workflows/pywikibot-ci.yml 4 files changed, 4 insertions(+), 4 deletions(-) Approvals: jenkins-bot: Verified Xqt: Looks good to me, approved diff --git a/.github/workflows/doctest.yml b/.github/workflows/doctest.yml index 99051d7..d166173 100644 --- a/.github/workflows/doctest.yml +++ b/.github/workflows/doctest.yml @@ -78,9 +78,9 @@ -i ~/.ssh/id_ed25519 \ "$USER(a)bastion.wmcloud.org" echo "Socket connection:" - ss -lntp | grep 1080 || true echo "Local IP:" curl -s https://api.ipify.org + echo echo "Proxy IP:" curl --proxy socks5h://127.0.0.1:1080 -s https://api.ipify.org - name: Generate user files diff --git a/.github/workflows/login_tests-ci.yml b/.github/workflows/login_tests-ci.yml index 0c13664..610b50f 100644 --- a/.github/workflows/login_tests-ci.yml +++ b/.github/workflows/login_tests-ci.yml @@ -122,9 +122,9 @@ -i ~/.ssh/id_ed25519 \ "$USER(a)bastion.wmcloud.org" echo "Socket connection:" - ss -lntp | grep 1080 || true echo "Local IP:" curl -s https://api.ipify.org + echo echo "Proxy IP:" curl --proxy socks5h://127.0.0.1:1080 -s https://api.ipify.org - name: Generate family files diff --git a/.github/workflows/oauth_tests-ci.yml b/.github/workflows/oauth_tests-ci.yml index 9935398..03f45a6 100644 --- a/.github/workflows/oauth_tests-ci.yml +++ b/.github/workflows/oauth_tests-ci.yml @@ -105,9 +105,9 @@ -i ~/.ssh/id_ed25519 \ "$USER(a)bastion.wmcloud.org" echo "Socket connection:" - ss -lntp | grep 1080 || true echo "Local IP:" curl -s https://api.ipify.org + echo echo "Proxy IP:" curl --proxy socks5h://127.0.0.1:1080 -s https://api.ipify.org - name: Generate family files diff --git a/.github/workflows/pywikibot-ci.yml b/.github/workflows/pywikibot-ci.yml index 986e3eb..68694f7 100644 --- a/.github/workflows/pywikibot-ci.yml +++ b/.github/workflows/pywikibot-ci.yml @@ -123,9 +123,9 @@ -i ~/.ssh/id_ed25519 \ "$USER(a)bastion.wmcloud.org" echo "Socket connection:" - ss -lntp | grep 1080 || true echo "Local IP:" curl -s https://api.ipify.org + echo echo "Proxy IP:" curl --proxy socks5h://127.0.0.1:1080 -s https://api.ipify.org - name: Generate family files -- To view, visit https://gerrit.wikimedia.org/r/c/pywikibot/core/+/1295538?usp=email To unsubscribe, or for help writing mail filters, visit https://gerrit.wikimedia.org/r/settings?usp=email Gerrit-MessageType: merged Gerrit-Project: pywikibot/core Gerrit-Branch: master Gerrit-Change-Id: I9e49d1b692df2a9e816a775cdcdcfb8568d17fc8 Gerrit-Change-Number: 1295538 Gerrit-PatchSet: 1 Gerrit-Owner: Xqt <info(a)gno.de> Gerrit-Reviewer: Xqt <info(a)gno.de> Gerrit-Reviewer: jenkins-bot

1 0

[Gerrit] ...core[master]: tests: restrict all workflow permissions to `contents: read`
by Xqt (Code Review) 30 May '26

30 May '26

Xqt has submitted this change. ( https://gerrit.wikimedia.org/r/c/pywikibot/core/+/1295537?usp=email ) Change subject: tests: restrict all workflow permissions to `contents: read` ...................................................................... tests: restrict all workflow permissions to `contents: read` This increases the security level of GitHub Actions runners. Change-Id: Iac7034307adc9a8ee472bab17ddc2ea25e11c7cd --- M .github/workflows/doctest.yml M .github/workflows/graalpy_tests.yml M .github/workflows/login_tests-ci.yml M .github/workflows/oauth_tests-ci.yml M .github/workflows/pre-commit.yml M .github/workflows/pywikibot-ci.yml M .github/workflows/sysop_write_tests-ci.yml M .github/workflows/windows_tests.yml 8 files changed, 25 insertions(+), 3 deletions(-) Approvals: jenkins-bot: Verified Xqt: Looks good to me, approved diff --git a/.github/workflows/doctest.yml b/.github/workflows/doctest.yml index 0c65ec1..99051d7 100644 --- a/.github/workflows/doctest.yml +++ b/.github/workflows/doctest.yml @@ -10,14 +10,15 @@ group: ${{ github.workflow }}-${{ github.ref }} cancel-in-progress: true +permissions: + contents: read + env: PYWIKIBOT_TEST_RUNNING: 1 PYWIKIBOT_USERNAME: Pywikibot-test jobs: build: - permissions: - contents: read runs-on: ${{ matrix.os || 'ubuntu-latest' }} timeout-minutes: 10 strategy: diff --git a/.github/workflows/graalpy_tests.yml b/.github/workflows/graalpy_tests.yml index 0415b54..87f464b 100644 --- a/.github/workflows/graalpy_tests.yml +++ b/.github/workflows/graalpy_tests.yml @@ -10,6 +10,9 @@ group: ${{ github.workflow }}-${{ github.ref }} cancel-in-progress: true +permissions: + contents: read + env: PYWIKIBOT_TEST_RUNNING: 1 PYWIKIBOT_USERNAME: Pywikibot-test diff --git a/.github/workflows/login_tests-ci.yml b/.github/workflows/login_tests-ci.yml index a39a5cc..0c13664 100644 --- a/.github/workflows/login_tests-ci.yml +++ b/.github/workflows/login_tests-ci.yml @@ -8,6 +8,9 @@ branches: [master] types: [completed] +permissions: + contents: read + env: PYWIKIBOT_TEST_RUNNING: 1 PYWIKIBOT_TEST_LOGOUT: 1 diff --git a/.github/workflows/oauth_tests-ci.yml b/.github/workflows/oauth_tests-ci.yml index c82c657..9935398 100644 --- a/.github/workflows/oauth_tests-ci.yml +++ b/.github/workflows/oauth_tests-ci.yml @@ -10,6 +10,9 @@ group: ${{ github.workflow }}-${{ github.ref }} cancel-in-progress: true +permissions: + contents: read + env: PYWIKIBOT_TEST_RUNNING: 1 PYWIKIBOT_USERNAME: Pywikibot-oauth diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml index 6bbf114..3ec3575 100644 --- a/.github/workflows/pre-commit.yml +++ b/.github/workflows/pre-commit.yml @@ -9,15 +9,18 @@ group: ${{ github.workflow }}-${{ github.ref }} cancel-in-progress: true +permissions: + contents: read + env: PYWIKIBOT_TEST_RUNNING: 1 PYWIKIBOT_NO_USER_CONFIG: 2 jobs: pre-commit: - timeout-minutes: 10 runs-on: ${{ matrix.os || 'ubuntu-latest' }} continue-on-error: ${{ matrix.experimental || false }} + timeout-minutes: 10 strategy: fail-fast: false matrix: diff --git a/.github/workflows/pywikibot-ci.yml b/.github/workflows/pywikibot-ci.yml index a37a5cc..986e3eb 100644 --- a/.github/workflows/pywikibot-ci.yml +++ b/.github/workflows/pywikibot-ci.yml @@ -12,6 +12,9 @@ group: ${{ github.workflow }}-${{ github.ref }} cancel-in-progress: true +permissions: + contents: read + env: PYWIKIBOT_TEST_RUNNING: 1 PYWIKIBOT_USERNAME: Pywikibot-test diff --git a/.github/workflows/sysop_write_tests-ci.yml b/.github/workflows/sysop_write_tests-ci.yml index 0070fc8..b77f89b 100644 --- a/.github/workflows/sysop_write_tests-ci.yml +++ b/.github/workflows/sysop_write_tests-ci.yml @@ -10,6 +10,9 @@ group: ${{ github.workflow }}-${{ github.ref }} cancel-in-progress: true +permissions: + contents: read + env: PYWIKIBOT_TEST_RUNNING: 1 PYWIKIBOT_USERNAME: Pywikibot-test diff --git a/.github/workflows/windows_tests.yml b/.github/workflows/windows_tests.yml index 24ef712..7243a8d 100644 --- a/.github/workflows/windows_tests.yml +++ b/.github/workflows/windows_tests.yml @@ -10,6 +10,9 @@ group: ${{ github.workflow }}-${{ github.ref }} cancel-in-progress: true +permissions: + contents: read + env: PYWIKIBOT_TEST_RUNNING: 1 PYWIKIBOT_USERNAME: Pywikibot-test -- To view, visit https://gerrit.wikimedia.org/r/c/pywikibot/core/+/1295537?usp=email To unsubscribe, or for help writing mail filters, visit https://gerrit.wikimedia.org/r/settings?usp=email Gerrit-MessageType: merged Gerrit-Project: pywikibot/core Gerrit-Branch: master Gerrit-Change-Id: Iac7034307adc9a8ee472bab17ddc2ea25e11c7cd Gerrit-Change-Number: 1295537 Gerrit-PatchSet: 1 Gerrit-Owner: Xqt <info(a)gno.de> Gerrit-Reviewer: Xqt <info(a)gno.de> Gerrit-Reviewer: jenkins-bot

1 0

[Gerrit] ...core[master]: tests: set GitHub action persist-credentials to false
by Xqt (Code Review) 30 May '26

30 May '26

Xqt has submitted this change. ( https://gerrit.wikimedia.org/r/c/pywikibot/core/+/1295533?usp=email ) Change subject: tests: set GitHub action persist-credentials to false ...................................................................... tests: set GitHub action persist-credentials to false Also restrict the doctest workflow permissions to `contents: read` for testing purposes. This increases the security level of GitHub Actions runners. Change-Id: Ie63a703b171efe566be3bd570611c4070fc3f25c --- M .github/workflows/doctest.yml M .github/workflows/graalpy_tests.yml M .github/workflows/login_tests-ci.yml M .github/workflows/oauth_tests-ci.yml M .github/workflows/pre-commit.yml M .github/workflows/pywikibot-ci.yml M .github/workflows/sysop_write_tests-ci.yml M .github/workflows/windows_tests.yml 8 files changed, 10 insertions(+), 0 deletions(-) Approvals: Xqt: Looks good to me, approved jenkins-bot: Verified diff --git a/.github/workflows/doctest.yml b/.github/workflows/doctest.yml index 4e48263..0c65ec1 100644 --- a/.github/workflows/doctest.yml +++ b/.github/workflows/doctest.yml @@ -16,6 +16,8 @@ jobs: build: + permissions: + contents: read runs-on: ${{ matrix.os || 'ubuntu-latest' }} timeout-minutes: 10 strategy: @@ -35,6 +37,7 @@ uses: actions/checkout@v6 with: submodules: true + persist-credentials: false - name: Set up Python ${{ matrix.python-version }} uses: actions/setup-python@v6 with: diff --git a/.github/workflows/graalpy_tests.yml b/.github/workflows/graalpy_tests.yml index e0d0672..0415b54 100644 --- a/.github/workflows/graalpy_tests.yml +++ b/.github/workflows/graalpy_tests.yml @@ -31,6 +31,7 @@ uses: actions/checkout@v6 with: submodules: true + persist-credentials: false - name: Set up Python ${{ matrix.python-version }} uses: actions/setup-python@v6 with: diff --git a/.github/workflows/login_tests-ci.yml b/.github/workflows/login_tests-ci.yml index e15a828..a39a5cc 100644 --- a/.github/workflows/login_tests-ci.yml +++ b/.github/workflows/login_tests-ci.yml @@ -83,6 +83,7 @@ uses: actions/checkout@v6 with: submodules: true + persist-credentials: false - name: Set up Python ${{ matrix.python-version }} uses: actions/setup-python@v6 with: diff --git a/.github/workflows/oauth_tests-ci.yml b/.github/workflows/oauth_tests-ci.yml index 550c38a..c82c657 100644 --- a/.github/workflows/oauth_tests-ci.yml +++ b/.github/workflows/oauth_tests-ci.yml @@ -49,6 +49,7 @@ uses: actions/checkout@v6 with: submodules: true + persist-credentials: false - name: Set up Python ${{ matrix.python-version }} uses: actions/setup-python@v6 with: diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml index 6235209..6bbf114 100644 --- a/.github/workflows/pre-commit.yml +++ b/.github/workflows/pre-commit.yml @@ -37,6 +37,7 @@ uses: actions/checkout@v6 with: submodules: true + persist-credentials: false - name: run pre-commit uses: pre-commit/action(a)v3.0.1 env: diff --git a/.github/workflows/pywikibot-ci.yml b/.github/workflows/pywikibot-ci.yml index 0cdd09e..a37a5cc 100644 --- a/.github/workflows/pywikibot-ci.yml +++ b/.github/workflows/pywikibot-ci.yml @@ -76,6 +76,7 @@ uses: actions/checkout@v6 with: submodules: true + persist-credentials: false - name: Set up Python ${{ matrix.python-version }} uses: actions/setup-python@v6 with: diff --git a/.github/workflows/sysop_write_tests-ci.yml b/.github/workflows/sysop_write_tests-ci.yml index 609027e..0070fc8 100644 --- a/.github/workflows/sysop_write_tests-ci.yml +++ b/.github/workflows/sysop_write_tests-ci.yml @@ -30,6 +30,7 @@ uses: actions/checkout@v6 with: submodules: true + persist-credentials: false - name: Set up Python ${{ matrix.python-version }} uses: actions/setup-python@v6 with: diff --git a/.github/workflows/windows_tests.yml b/.github/workflows/windows_tests.yml index 8d5bef1..24ef712 100644 --- a/.github/workflows/windows_tests.yml +++ b/.github/workflows/windows_tests.yml @@ -30,6 +30,7 @@ uses: actions/checkout@v6 with: submodules: true + persist-credentials: false - name: Set up Python ${{ matrix.python-version }} uses: actions/setup-python@v6 with: -- To view, visit https://gerrit.wikimedia.org/r/c/pywikibot/core/+/1295533?usp=email To unsubscribe, or for help writing mail filters, visit https://gerrit.wikimedia.org/r/settings?usp=email Gerrit-MessageType: merged Gerrit-Project: pywikibot/core Gerrit-Branch: master Gerrit-Change-Id: Ie63a703b171efe566be3bd570611c4070fc3f25c Gerrit-Change-Number: 1295533 Gerrit-PatchSet: 3 Gerrit-Owner: Xqt <info(a)gno.de> Gerrit-Reviewer: Xqt <info(a)gno.de> Gerrit-Reviewer: jenkins-bot

1 0

[Gerrit] ...core[master]: tests: Update precommit-hooks
by Xqt (Code Review) 30 May '26

30 May '26

Xqt has submitted this change. ( https://gerrit.wikimedia.org/r/c/pywikibot/core/+/1295535?usp=email ) Change subject: tests: Update precommit-hooks ...................................................................... tests: Update precommit-hooks Change-Id: Ie84c176d858b7c12989535fa4114fc2a591eaf56 --- M .pre-commit-config.yaml 1 file changed, 2 insertions(+), 2 deletions(-) Approvals: jenkins-bot: Verified Xqt: Looks good to me, approved diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml index 6f52916..6435acc 100644 --- a/.pre-commit-config.yaml +++ b/.pre-commit-config.yaml @@ -64,7 +64,7 @@ hooks: - id: yamlfix - repo: https://github.com/astral-sh/ruff-pre-commit - rev: v0.15.13 + rev: v0.15.15 hooks: - id: ruff-check alias: ruff @@ -96,7 +96,7 @@ name: isort (skip future annotations) files: ^(pwb|pywikibot/families/__init__)\.py$ - repo: https://github.com/jshwi/docsig - rev: v0.85.0 + rev: v0.86.0 hooks: - id: docsig exclude: ^(tests|scripts) -- To view, visit https://gerrit.wikimedia.org/r/c/pywikibot/core/+/1295535?usp=email To unsubscribe, or for help writing mail filters, visit https://gerrit.wikimedia.org/r/settings?usp=email Gerrit-MessageType: merged Gerrit-Project: pywikibot/core Gerrit-Branch: master Gerrit-Change-Id: Ie84c176d858b7c12989535fa4114fc2a591eaf56 Gerrit-Change-Number: 1295535 Gerrit-PatchSet: 3 Gerrit-Owner: Xqt <info(a)gno.de> Gerrit-Reviewer: Xqt <info(a)gno.de> Gerrit-Reviewer: jenkins-bot

1 0

[Gerrit] ...core[master]: Revert "tests: Update precommit-hooks"
by Xqt (Code Review) 30 May '26

30 May '26

Xqt has submitted this change. ( https://gerrit.wikimedia.org/r/c/pywikibot/core/+/1295534?usp=email ) Change subject: Revert "tests: Update precommit-hooks" ...................................................................... Revert "tests: Update precommit-hooks" This reverts commit 672db16bedefbd1f74d4a29cd86ff48bbd56f7b1. Reason for revert: i18n inclusion Change-Id: I165d204ad3887936a56887ed77d5feaa8802ad62 --- M .pre-commit-config.yaml M scripts/i18n 2 files changed, 3 insertions(+), 3 deletions(-) Approvals: Xqt: Verified; Looks good to me, approved diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml index 6435acc..6f52916 100644 --- a/.pre-commit-config.yaml +++ b/.pre-commit-config.yaml @@ -64,7 +64,7 @@ hooks: - id: yamlfix - repo: https://github.com/astral-sh/ruff-pre-commit - rev: v0.15.15 + rev: v0.15.13 hooks: - id: ruff-check alias: ruff @@ -96,7 +96,7 @@ name: isort (skip future annotations) files: ^(pwb|pywikibot/families/__init__)\.py$ - repo: https://github.com/jshwi/docsig - rev: v0.86.0 + rev: v0.85.0 hooks: - id: docsig exclude: ^(tests|scripts) diff --git a/scripts/i18n b/scripts/i18n index 2bff304..76aac7c 160000 --- a/scripts/i18n +++ b/scripts/i18n @@ -1 +1 @@ -Subproject commit 2bff304e1b8d3e9e80c7593e7193c70fff3bb0a5 +Subproject commit 76aac7cbce2fb1e7202121436220fdfe3fb80874 -- To view, visit https://gerrit.wikimedia.org/r/c/pywikibot/core/+/1295534?usp=email To unsubscribe, or for help writing mail filters, visit https://gerrit.wikimedia.org/r/settings?usp=email Gerrit-MessageType: merged Gerrit-Project: pywikibot/core Gerrit-Branch: master Gerrit-Change-Id: I165d204ad3887936a56887ed77d5feaa8802ad62 Gerrit-Change-Number: 1295534 Gerrit-PatchSet: 1 Gerrit-Owner: Xqt <info(a)gno.de> Gerrit-Reviewer: Xqt <info(a)gno.de> Gerrit-Reviewer: jenkins-bot

1 0

[Gerrit] ...core[master]: tests: Update precommit-hooks
by Xqt (Code Review) 30 May '26

30 May '26

Xqt has submitted this change. ( https://gerrit.wikimedia.org/r/c/pywikibot/core/+/1295532?usp=email ) Change subject: tests: Update precommit-hooks ...................................................................... tests: Update precommit-hooks Change-Id: I3e80c9fa96814e5eb5b14f529e100b80692b473a --- M .pre-commit-config.yaml M scripts/i18n 2 files changed, 3 insertions(+), 3 deletions(-) Approvals: jenkins-bot: Verified Xqt: Looks good to me, approved diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml index 6f52916..6435acc 100644 --- a/.pre-commit-config.yaml +++ b/.pre-commit-config.yaml @@ -64,7 +64,7 @@ hooks: - id: yamlfix - repo: https://github.com/astral-sh/ruff-pre-commit - rev: v0.15.13 + rev: v0.15.15 hooks: - id: ruff-check alias: ruff @@ -96,7 +96,7 @@ name: isort (skip future annotations) files: ^(pwb|pywikibot/families/__init__)\.py$ - repo: https://github.com/jshwi/docsig - rev: v0.85.0 + rev: v0.86.0 hooks: - id: docsig exclude: ^(tests|scripts) diff --git a/scripts/i18n b/scripts/i18n index 76aac7c..2bff304 160000 --- a/scripts/i18n +++ b/scripts/i18n @@ -1 +1 @@ -Subproject commit 76aac7cbce2fb1e7202121436220fdfe3fb80874 +Subproject commit 2bff304e1b8d3e9e80c7593e7193c70fff3bb0a5 -- To view, visit https://gerrit.wikimedia.org/r/c/pywikibot/core/+/1295532?usp=email To unsubscribe, or for help writing mail filters, visit https://gerrit.wikimedia.org/r/settings?usp=email Gerrit-MessageType: merged Gerrit-Project: pywikibot/core Gerrit-Branch: master Gerrit-Change-Id: I3e80c9fa96814e5eb5b14f529e100b80692b473a Gerrit-Change-Number: 1295532 Gerrit-PatchSet: 1 Gerrit-Owner: Xqt <info(a)gno.de> Gerrit-Reviewer: Xqt <info(a)gno.de> Gerrit-Reviewer: jenkins-bot

1 0

[Gerrit] ...i18n[master]: Localisation updates from https://translatewiki.net.
by jenkins-bot (Code Review) 28 May '26

28 May '26

jenkins-bot has submitted this change. ( https://gerrit.wikimedia.org/r/c/pywikibot/i18n/+/1294968?usp=email ) Change subject: Localisation updates from https://translatewiki.net. ...................................................................... Localisation updates from https://translatewiki.net. Change-Id: I26fe2f2e45ed3f68b823a285b6a4ed9f1ae16a46 --- M interwikidata/id.json 1 file changed, 2 insertions(+), 1 deletion(-) Approvals: jenkins-bot: Verified L10n-bot: Looks good to me, approved diff --git a/interwikidata/id.json b/interwikidata/id.json index 8a22ecb..1cf79f9 100644 --- a/interwikidata/id.json +++ b/interwikidata/id.json @@ -1,9 +1,10 @@ { "@metadata": { "authors": [ + "Bayahiu", "Rachmat.Wahidi", "Rachmat04" ] }, - "interwikidata-clean-summary": "Bot: Merapikan pranala interwiki lama" + "interwikidata-clean-summary": "Bot: Merapikan pranala antarwiki lama" } -- To view, visit https://gerrit.wikimedia.org/r/c/pywikibot/i18n/+/1294968?usp=email To unsubscribe, or for help writing mail filters, visit https://gerrit.wikimedia.org/r/settings?usp=email Gerrit-MessageType: merged Gerrit-Project: pywikibot/i18n Gerrit-Branch: master Gerrit-Change-Id: I26fe2f2e45ed3f68b823a285b6a4ed9f1ae16a46 Gerrit-Change-Number: 1294968 Gerrit-PatchSet: 1 Gerrit-Owner: L10n-bot <l10n-bot(a)translatewiki.net> Gerrit-Reviewer: L10n-bot <l10n-bot(a)translatewiki.net> Gerrit-Reviewer: jenkins-bot

1 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

Pywikibot-commits May 2026