Bug #109160 provide single sources download page
Submitted: 22 Nov 2022 11:58 Modified: 23 Nov 2022 2:03
Reporter: Dmitry Smirnov Email Updates:
Status: Verified Impact on me:
None 
Category:MySQL Package Repos Severity:S2 (Serious)
Version: OS:Debian
Assigned to: CPU Architecture:Any

[22 Nov 2022 11:58] Dmitry Smirnov 
Description:
Downstream GNU+Linux distro maintainers need one page with ALL source releases for automated download -- e.g. what https://www.mirrorservice.org/sites/ftp.mysql.com/Downloads/MySQLGUITools/ used to be.

Due to ridiculous recent changes to downloads, a new download page [1] now requires javascript and presents ONLY the current release, while archive page [2] list previous releases (except current release) in drop-down list.
All that makes detection of new releases needlessly complicated, and download of source tarballs (with tools like `uscan`) quite difficult.

[1]: https://dev.mysql.com/downloads/workbench/
[2]: https://downloads.mysql.com/archives/workbench/

How to repeat:
Recent releases [8.0.30, 8.0.31] are missing from https://www.mirrorservice.org/sites/ftp.mysql.com/Downloads/MySQLGUITools/

Suggested fix:
Please make a single, static, browseable page where all source tarballs can be found, like it used to be. Thanks.
[22 Nov 2022 12:23] MySQL Verification Team 
Hello Dmitry,

Thank you for the report and feedback!

Thanks,
Umesh
[22 Nov 2022 15:00] Terje Røsten 
FYI: seems like release-monitoring guys were able to detect new releases correctly:

Workbench:
 https://release-monitoring.org/project/2041/

MySQL:
 https://release-monitoring.org/project/334/

Fedora uses this backend to alert bugzilla about new releases.

I guess you can the API:
 https://release-monitoring.org/static/docs/index.html

to find new releases of wanted products?
[23 Nov 2022 2:03] Dmitry Smirnov 
Yeah, probably after doing something like this: https://salsa.debian.org/debian/mysql-workbench/-/commit/f529ffbf8b522da7f573f98c6c690e08b...
which took me hours(!) to stage.

Besides, detecting new release is easier than extracting download URL from the page, as well as GPG signature file (.asc).