In response to the message posted to close T480, Brian Wolff gave us
some TODO items in
http://permalink.gmane.org/gmane.science.linguistics.wikipedia.technical/80143

• Clarify "Check for vulnerabilities"
  • Does this mean check which branches need to be patched?
  • Does it mean "verify the exploit doesn't work on newly patched branches"?
  • Does this mean automated testing?

• Add step of running unit tests locally to find failures before Jenkins attempts to run the tests after the fix is public.