Fwd: [Infra-private] [GitHub] Deprecation Notice

Description

Is this triggered by the jenkins plugin that needs to be updated?

---------- Forwarded message ---------
From: GitHub <noreply@github.com>
Date: Sun, May 24, 2020 at 9:57 AM
Subject: [Infra-private] [GitHub] Deprecation Notice
To: STD-CI Bot <infra-private@ovirt.org>

Hi @ovirt-infra,

On May 24th, 2020 at 07:57 (UTC) you used a password to access an endpoint
through the GitHub API using Java/1.8.0_191:

https://api.github.com/organizations/18700703/members/github-actions[bot]

Basic authentication using a password to the API is deprecated and will
soon no longer work. Visit
https://developer.github.com/changes/2020-02-14-deprecating-password-auth/
for more information around suggested workarounds and removal dates.

Thanks,
The GitHub Team
_______________________________________________
Infra-private mailing list – infra-private@ovirt.org
To unsubscribe send an email to infra-private-leave@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/infra-private@ovirt.org/message/34QKUWUQDELJ3N56JDOMMLPQ54U3JGYP/


Anton Marchukov
Associate Manager - RHV DevOps - Red Hat

Activity

Show:

Former user August 18, 2020 at 2:16 PM

Here’s the related GH issue for for the Gerrit OAuth plugin, the oldest version including the fix is 2.16:

We run 2.16 on Staging yet I hit issues with the OAuth plugin (see OVIRT-2860) so those need to be fixed first before we move Prod to that version from 2.14.

Former user August 18, 2020 at 1:36 PM
Edited

The call will be removed completely by March 2021 so we need to ensure we move all affected software utilizing GitHub auth (Jenkins, Gerrit, Mailman3) to the new format.

https://developer.github.com/changes/2020-02-10-deprecating-auth-through-query-param/

I know we’re still getting warnings for both Gerrit and MailMan3

Former user June 1, 2020 at 9:06 AM

I know of two similar warning - one for jenkins and one for gerrit. This is the Jenkins one and should be fixable by generating an auth token and setting it up as a credential on Jenkins instead of the user/pass that is used currently.

Details

Assignee

Reporter

Priority

Created May 25, 2020 at 8:21 AM
Updated August 18, 2020 at 2:16 PM