Xqt added a comment.
I propose not to have an intermediate release dropping Py2.7.6 or Py2.7.8
only but to desupport Python 2 as a whole in next few weeks or months after the
next stable release when the tests passes. See parent task for this.
TASK DETAIL
gerritbot added a comment.
Change 508093 **merged** by jenkins-bot:
[pywikibot/core@master] Show deprecation warning for Python 2
https://gerrit.wikimedia.org/r/508093
TASK DETAIL
https://phabricator.wikimedia.org/T203471
EMAIL PREFERENCES
gerritbot added a comment.
Change 508093 had a related patch set uploaded (by Xqt; owner: Xqt):
[pywikibot/core@master] Show deprecation warning for Python 2
https://gerrit.wikimedia.org/r/508093
TASK DETAIL
https://phabricator.wikimedia.org/T203471
EMAIL PREFERENCES
Xqt added a comment.
This release also shows a security warning:
urllib3\util\ssl_.py:160: InsecurePlatformWarning: A true SSLContext object is not available. This prevents urllib3 from configuring SSL appropriately and may cause certain SSL connections to fail. You can upgrade to a newer version
Xqt added a comment.
I do not see any reason on code base to drop these releases other that we have found in 2.7.2 an 2.7.3 and propose to decline this request at this time. Maybe it could come back in any future when we have good reasons to do it .TASK
Dvorapa added a comment.
@Multichill Per my point of view there are two possibilities:
Depend on vulnerable version of Cryptography package
Drop py2.7.6
PS: I would suggest to slowly move from Trusty, because in April 2019 the maintenance support period end is expected.TASK
MarcoAurelio added a comment.
I think that encouraging people to use updated versions that do not depend on vulnerable dependencies is a good idea. While I agree it can be hard or annoying to go system by system to do so, I feel this is not something we should wait a couple of years to accomplish.
Multichill added a comment.
I checked several systems and both run 2.7.6. . This task is way too soon. Come back in a couple of years. You're going way too fast on this dropping campaign.TASK DETAILhttps://phabricator.wikimedia.org/T203471EMAIL
