--- a/ansible/deploy-mozreview-dev.yml
+++ b/ansible/deploy-mozreview-dev.yml
@@ -27,20 +27,20 @@
       - rsyslog
       - tar
 
   - name: download Mozilla rpms
     get_url: url=https://s3-us-west-2.amazonaws.com/moz-packages/CentOS6/{{ item.path }}
              dest=/var/tmp/{{ item.path }}
              sha256sum={{ item.sha256 }}
     with_items:
-      - { path: mercurial-3.6.2-1.x86_64.rpm, sha256: ecb4848807c1fe0ce059de079c235ba22885c4cc900dcbff9165cb10ec4ad885 }
+      - { path: mercurial-3.7.2-1.x86_64.rpm, sha256: cc67d5809571e706268a675d6bae9d1dc6baa2f4fda0d94dd2b90b8f8421d510 }
 
   - name: install Mozilla rpms
-    command: yum localinstall -y /var/tmp/mercurial-3.6.2-1.x86_64.rpm
+    command: yum localinstall -y /var/tmp/mercurial-3.7.2-1.x86_64.rpm
 
   - name: create virtualenv for hgweb
     include: tasks/virtualenv.yml
              venv=/repo/hg/venv_hgweb
              requirements=../roles/hg-reviewboard/files/requirements-hgweb.txt
 
   - name: create virtualenv for pash
     include: tasks/virtualenv.yml

--- a/ansible/roles/docker-hg-web/files/requirements-mozbuild.txt
+++ b/ansible/roles/docker-hg-web/files/requirements-mozbuild.txt
@@ -1,11 +1,11 @@
 jsmin==2.1.2 \
     --hash=sha256:5e710e9db14f210dfd55ebec43bca5c812d34c5b6179dbcba2e61d9f965bf4e1
 
-Mercurial==3.6.2 \
-    --hash=sha256:09c567049c3e30f791db0cf5937346c7ff3568deadf4eb1d4e2f7c80001cb3d6
+Mercurial==3.7.2 \
+    --hash=sha256:5ba9438d6ab0db93f7b0786ba632138eb64a9dc0d93e30dde2b17b328fdc6d7a
 
 mozbuild==0.2 \
     --hash=sha256:24227608fc3c735fbb5c629d0540a600368c1d5e57013dd39272a0a5c9cccb13
 
 mozfile==1.2 \
     --hash=sha256:d3b00f336c6a89449bd78dd3ae65d74eb98497438d1ccfec07af0a736d20e957

--- a/ansible/roles/hg-reviewboard/files/requirements-hgweb.txt
+++ b/ansible/roles/hg-reviewboard/files/requirements-hgweb.txt
@@ -1,15 +1,15 @@
 # We need RBTools in the hgweb venv because we support pushing via HTTP.
 # This is different from hg.mozilla.org's configuration.
 
 --find-links https://downloads.reviewboard.org/releases/RBTools/0.7/
 
-Mercurial==3.6.2 \
-    --hash=sha256:09c567049c3e30f791db0cf5937346c7ff3568deadf4eb1d4e2f7c80001cb3d6
+Mercurial==3.7.2 \
+    --hash=sha256:5ba9438d6ab0db93f7b0786ba632138eb64a9dc0d93e30dde2b17b328fdc6d7a
 
 mod-wsgi==4.4.11 \
     --hash=sha256:7dd9540db9797f2a5b491eaff6344643050553ebcbb62f775762cbe3a0343c25
 
 Pygments==2.1.1 \
     --hash=sha256:05aee25c433d6155defbfbcb6c2e2b0ebf29d28138604867b62a304bd6bbb41d
 
 python-ldap==2.4.20 \

--- a/ansible/roles/hg-reviewboard/files/requirements-pash.txt
+++ b/ansible/roles/hg-reviewboard/files/requirements-pash.txt
@@ -1,12 +1,12 @@
 --find-links https://downloads.reviewboard.org/releases/RBTools/0.7/
 
-Mercurial==3.6.2 \
-    --hash=sha256:09c567049c3e30f791db0cf5937346c7ff3568deadf4eb1d4e2f7c80001cb3d6
+Mercurial==3.7.2 \
+    --hash=sha256:5ba9438d6ab0db93f7b0786ba632138eb64a9dc0d93e30dde2b17b328fdc6d7a
 
 python-ldap==2.4.20 \
     --hash=sha256:4b8891539a3171d993cf7896b632ff088a4c707ae85ac3c77db1454f7949f3e2
 
 RBTools==0.7.5 \
     --hash=sha256:28809def27e530ba5c13d37be8eb9ca31a24786cc0d0bd6d682f0009d94891a4
 
 six==1.9.0 \

--- a/ansible/roles/hg-reviewboard/tasks/main.yml
+++ b/ansible/roles/hg-reviewboard/tasks/main.yml
@@ -7,17 +7,17 @@
 
 # yum will incur network traffic when URLs are specified. Download the
 # package locally first so we can run offline after initial bootstrap.
 - name: download RPMs
   get_url: url=https://s3-us-west-2.amazonaws.com/moz-packages/CentOS6/{{ item.path }}
            dest=/var/tmp/{{ item.path }}
            sha256sum={{ item.sha256 }}
   with_items:
-    - { path: mercurial-3.6.2-1.x86_64.rpm, sha256: ecb4848807c1fe0ce059de079c235ba22885c4cc900dcbff9165cb10ec4ad885 }
+    - { path: mercurial-3.7.2-1.x86_64.rpm, sha256: cc67d5809571e706268a675d6bae9d1dc6baa2f4fda0d94dd2b90b8f8421d510 }
 
 - name: system packages installed
   yum: name={{ item }} state=present
   with_items:
     - httpd
     # To build mod_wsgi from source.
     - httpd-devel
     # Used for validating Bugzilla API keys through HTTP pushes.
@@ -27,17 +27,17 @@
     - python27
     - python27-devel
     # Used by pash, since it doesn't yet run from Python 2.7 / virtualenv.
     - python-ldap
     - rsyslog
     - sudo
 
 - name: local RPMs installed
-  command: /usr/bin/yum -y localinstall /var/tmp/mercurial-3.6.2-1.x86_64.rpm
+  command: /usr/bin/yum -y localinstall /var/tmp/mercurial-3.7.2-1.x86_64.rpm
 
 - name: Source code groups
   group: name={{ item.name }} gid={{ item.gid }}
   with_items:
     - { name: 'scm_level_1', gid: 673 }
     - { name: 'scm_level_2', gid: 685 }
     - { name: 'scm_level_3', gid: 679 }
     - { name: 'scm_l10n', gid: 678 }

--- a/ansible/roles/hg-ssh/files/requirements-pash.txt
+++ b/ansible/roles/hg-ssh/files/requirements-pash.txt
@@ -1,11 +1,11 @@
 kafka-python==0.9.4 \
     --hash=sha256:6cd463b688d98fec1c1f602e316eb7745aef0e55dc57fe9ff2f203cf0865c8c7
 
-Mercurial==3.6.2 \
-    --hash=sha256:09c567049c3e30f791db0cf5937346c7ff3568deadf4eb1d4e2f7c80001cb3d6
+Mercurial==3.7.2 \
+    --hash=sha256:5ba9438d6ab0db93f7b0786ba632138eb64a9dc0d93e30dde2b17b328fdc6d7a
 
 python-ldap==2.4.20 \
     --hash=sha256:4b8891539a3171d993cf7896b632ff088a4c707ae85ac3c77db1454f7949f3e2
 
 six==1.9.0 \
     --hash=sha256:418a93c397a7edab23e5588dbc067ac74a723edb3d541bd4936f79476e7645da

--- a/ansible/roles/hg-ssh/files/requirements-tools.txt
+++ b/ansible/roles/hg-ssh/files/requirements-tools.txt
@@ -2,16 +2,16 @@ boto==2.38.0 \
     --hash=sha256:758498c77f16e26b8b61af26f8d0dbb119b713f2d8d166681ec892311f3520c4
 
 futures==3.0.3 \
     --hash=sha256:04afa2a06ab7dcca9d81717b420a7a14826061e9b2614a5c77dd24c75ccf97e4
 
 kafka-python==0.9.4 \
     --hash=sha256:6cd463b688d98fec1c1f602e316eb7745aef0e55dc57fe9ff2f203cf0865c8c7
 
-Mercurial==3.6.2 \
-    --hash=sha256:09c567049c3e30f791db0cf5937346c7ff3568deadf4eb1d4e2f7c80001cb3d6
+Mercurial==3.7.2 \
+    --hash=sha256:5ba9438d6ab0db93f7b0786ba632138eb64a9dc0d93e30dde2b17b328fdc6d7a
 
 six==1.9.0 \
     --hash=sha256:418a93c397a7edab23e5588dbc067ac74a723edb3d541bd4936f79476e7645da
 
 tabulate==0.7.5 \
     --hash=sha256:9071aacbd97a9a915096c1aaf0dc684ac2672904cd876db5904085d6dac9810e

--- a/ansible/roles/hg-ssh/tasks/main.yml
+++ b/ansible/roles/hg-ssh/tasks/main.yml
@@ -17,20 +17,20 @@
 
 # yum will incur network traffic when URLs are specified. Download the
 # package locally first so we can run offline after initial bootstrap.
 - name: download Mozilla rpms
   get_url: url=https://s3-us-west-2.amazonaws.com/moz-packages/CentOS6/{{ item.path }}
            dest=/var/tmp/{{ item.path }}
            sha256sum={{ item.sha256 }}
   with_items:
-    - { path: mercurial-3.6.2-1.x86_64.rpm, sha256: ecb4848807c1fe0ce059de079c235ba22885c4cc900dcbff9165cb10ec4ad885 }
+    - { path: mercurial-3.7.2-1.x86_64.rpm, sha256: cc67d5809571e706268a675d6bae9d1dc6baa2f4fda0d94dd2b90b8f8421d510 }
 
 - name: install Mozilla rpms
-  command: yum localinstall -y /var/tmp/mercurial-3.6.2-1.x86_64.rpm
+  command: yum localinstall -y /var/tmp/mercurial-3.7.2-1.x86_64.rpm
 
 - name: install global ssh config
   copy: src=ssh_config
         dest=/etc/ssh/ssh_config
         owner=root
         group=root
         mode=0640
 

--- a/ansible/roles/hg-web/files/requirements-hgweb.txt
+++ b/ansible/roles/hg-web/files/requirements-hgweb.txt
@@ -1,11 +1,11 @@
 ipaddress==1.0.16 \
     --hash=sha256:935712800ce4760701d89ad677666cd52691fd2f6f0b340c8b4239a3c17988a5
 
-Mercurial==3.6.2 \
-    --hash=sha256:09c567049c3e30f791db0cf5937346c7ff3568deadf4eb1d4e2f7c80001cb3d6
+Mercurial==3.7.2 \
+    --hash=sha256:5ba9438d6ab0db93f7b0786ba632138eb64a9dc0d93e30dde2b17b328fdc6d7a
 
 mod-wsgi==4.4.11 \
     --hash=sha256:7dd9540db9797f2a5b491eaff6344643050553ebcbb62f775762cbe3a0343c25
 
 Pygments==2.1.1 \
     --hash=sha256:05aee25c433d6155defbfbcb6c2e2b0ebf29d28138604867b62a304bd6bbb41d

--- a/ansible/roles/hg-web/files/requirements-replication.txt
+++ b/ansible/roles/hg-web/files/requirements-replication.txt
@@ -1,13 +1,13 @@
 kafka-python==0.9.4 \
     --hash=sha256:6cd463b688d98fec1c1f602e316eb7745aef0e55dc57fe9ff2f203cf0865c8c7
 
-Mercurial==3.6.2 \
-    --hash=sha256:09c567049c3e30f791db0cf5937346c7ff3568deadf4eb1d4e2f7c80001cb3d6
+Mercurial==3.7.2 \
+    --hash=sha256:5ba9438d6ab0db93f7b0786ba632138eb64a9dc0d93e30dde2b17b328fdc6d7a
 
 python-hglib==1.9 \
     --hash=sha256:f4302892b2b8287cf326586c7280b9eadfc3d0c7cd3feba957429a8d9b1a60ce
 
 PyYAML==3.11 \
     --hash=sha256:c36c938a872e5ff494938b33b14aaa156cb439ec67548fcab3535bb78b0846e8
 
 six==1.9.0 \

--- a/ansible/roles/hg-web/files/requirements-tools.txt
+++ b/ansible/roles/hg-web/files/requirements-tools.txt
@@ -1,8 +1,8 @@
 futures==3.0.3 \
     --hash=sha256:04afa2a06ab7dcca9d81717b420a7a14826061e9b2614a5c77dd24c75ccf97e4
 
-Mercurial==3.6.2 \
-    --hash=sha256:09c567049c3e30f791db0cf5937346c7ff3568deadf4eb1d4e2f7c80001cb3d6
+Mercurial==3.7.2 \
+    --hash=sha256:5ba9438d6ab0db93f7b0786ba632138eb64a9dc0d93e30dde2b17b328fdc6d7a
 
 tabulate==0.7.5 \
     --hash=sha256:9071aacbd97a9a915096c1aaf0dc684ac2672904cd876db5904085d6dac9810e

--- a/ansible/roles/hg-web/tasks/main.yml
+++ b/ansible/roles/hg-web/tasks/main.yml
@@ -31,20 +31,20 @@
 # Some packages aren't available on an public yum repo. Fetch them from
 # a public server and install them manually. This is a bit hacky, but it
 # gets the job done.
 - name: download Mozilla rpms
   get_url: url=https://s3-us-west-2.amazonaws.com/moz-packages/CentOS6/{{ item.path }}
            dest=/var/tmp/{{ item.path}}
            sha256sum={{ item.sha256 }}
   with_items:
-    - { path: mercurial-3.6.2-1.x86_64.rpm, sha256: ecb4848807c1fe0ce059de079c235ba22885c4cc900dcbff9165cb10ec4ad885 }
+    - { path: mercurial-3.7.2-1.x86_64.rpm, sha256: cc67d5809571e706268a675d6bae9d1dc6baa2f4fda0d94dd2b90b8f8421d510 }
 
 - name: install Mozilla rpms
-  command: yum localinstall -y /var/tmp/mercurial-3.6.2-1.x86_64.rpm
+  command: yum localinstall -y /var/tmp/mercurial-3.7.2-1.x86_64.rpm
 
 - name: install global ssh config
   copy: src=ssh_config
         dest=/etc/ssh/ssh_config
         owner=root
         group=root
         mode=0640
 

--- a/ansible/roles/mercurial-yum/tasks/main.yml
+++ b/ansible/roles/mercurial-yum/tasks/main.yml
@@ -1,15 +1,15 @@
 ---
 
 # yum will incur network traffic when URLs are specified. Download the
 # package locally first so we can run offline after initial bootstrap.
 - name: download Mercurial package
-  get_url: url=https://s3-us-west-2.amazonaws.com/moz-packages/CentOS6/mercurial-3.6.2-1.x86_64.rpm
-           dest=/var/tmp/mercurial-3.6.2-1.x86_64.rpm
-           sha256sum=ecb4848807c1fe0ce059de079c235ba22885c4cc900dcbff9165cb10ec4ad885
+  get_url: url=https://s3-us-west-2.amazonaws.com/moz-packages/CentOS6/mercurial-3.7.2-1.x86_64.rpm
+           dest=/var/tmp/mercurial-3.7.2-1.x86_64.rpm
+           sha256sum=cc67d5809571e706268a675d6bae9d1dc6baa2f4fda0d94dd2b90b8f8421d510
 
 - name: Install patch package
   yum: name=patch state=present
 
 # The yum module is slow. Run commands manually.
 - name: installed Mercurial
-  command: /usr/bin/yum localinstall -y /var/tmp/mercurial-3.6.2-1.x86_64.rpm
+  command: /usr/bin/yum localinstall -y /var/tmp/mercurial-3.7.2-1.x86_64.rpm

--- a/ansible/roles/mozreview-virtualenv/files/requirements.txt
+++ b/ansible/roles/mozreview-virtualenv/files/requirements.txt
@@ -49,18 +49,18 @@ importlib==1.0.3 \
     --hash=sha256:7cbb514a352f821c69b8e8bdaa6b2e59728547a8965503c758652c2826d157b5
 
 kombu==3.0.30 \
     --hash=sha256:fecb34edf4852064f385dbf53969047b22353d3608a576497dd05f71b943fae6
 
 Markdown==2.4.1 \
     --hash=sha256:812ec5249f45edc31330b7fb06e52aaf6ab2d83aa27047df7cb6837ef2d269b6
 
-Mercurial==3.6.2 \
-    --hash=sha256:09c567049c3e30f791db0cf5937346c7ff3568deadf4eb1d4e2f7c80001cb3d6
+Mercurial==3.7.2 \
+    --hash=sha256:5ba9438d6ab0db93f7b0786ba632138eb64a9dc0d93e30dde2b17b328fdc6d7a
 
 mimeparse==0.1.3 \
     --hash=sha256:534ff6feefe1cd03984f444e6415aacc79c0a85f3b868ec41a2fd5003004c31e
 
 mod-wsgi==4.4.11 \
     --hash=sha256:7dd9540db9797f2a5b491eaff6344643050553ebcbb62f775762cbe3a0343c25
 
 MozillaPulse==1.0.1 \

--- a/testing/docker/builder-hgrpm/Dockerfile
+++ b/testing/docker/builder-hgrpm/Dockerfile
@@ -3,19 +3,19 @@
 # file, You can obtain one at http://mozilla.org/MPL/2.0/.
 
 # This is a Docker container for building Mercurial RPMs.
 
 FROM secure:mozsecure:centos6:sha256 88cc1475bd58f6ff6f41d50b813c9998c4d3a7167a8a45f8bd0b4a8342dec0db:https://s3-us-west-2.amazonaws.com/moz-packages/docker-images/centos-6-20150615_2019-docker.tar.xz
 
 RUN yum install -y createrepo gcc gettext make mercurial python-devel python-docutils rpm-build tar
 
-RUN hg clone http://selenic.com/repo/hg /hg
+RUN hg clone https://selenic.com/repo/hg /hg
 RUN mkdir /hg-packages
 
-ENV HG_VERSIONS 3.6.2
+ENV HG_VERSIONS 3.7.2
 
 ADD entrypoint.sh /entrypoint.sh
 ADD rpmserver.py /rpmserver.py
 
 ENTRYPOINT ["/entrypoint.sh"]
 EXPOSE 80
 CMD ["/usr/bin/python", "/rpmserver.py"]

--- a/testing/docker/builder-hgweb-chroot/requirements.txt
+++ b/testing/docker/builder-hgweb-chroot/requirements.txt
@@ -1,11 +1,11 @@
 jsmin==2.1.2 \
     --hash=sha256:5e710e9db14f210dfd55ebec43bca5c812d34c5b6179dbcba2e61d9f965bf4e1
 
-Mercurial==3.6.2 \
-    --hash=sha256:09c567049c3e30f791db0cf5937346c7ff3568deadf4eb1d4e2f7c80001cb3d6
+Mercurial==3.7.2 \
+    --hash=sha256:5ba9438d6ab0db93f7b0786ba632138eb64a9dc0d93e30dde2b17b328fdc6d7a
 
 mozbuild==0.2 \
     --hash=sha256:24227608fc3c735fbb5c629d0540a600368c1d5e57013dd39272a0a5c9cccb13
 
 mozfile==1.2 \
-    --hash=sha256:d3b00f336c6a89449bd78dd3ae65d74eb98497438d1ccfec07af0a736d20e957
\ No newline at end of file
+    --hash=sha256:d3b00f336c6a89449bd78dd3ae65d74eb98497438d1ccfec07af0a736d20e957