Page MenuHomePhabricator
Create Task
Maniphest T266421

Rebuild mediawiki-vendor on composer 2.0
Closed, ResolvedPublic
Actions

Description

At some point, we'll want to rebuild MediaWiki-Vendor using composer 2.0, and update the README.md as appropriate (saying to use a 2.0 version)

Details

SubjectRepoBranchLines +/-
Allow composer-plugin-api ^2.0 for migrationmediawiki/vendorwmf/1.38.0-wmf.2+3 -3
Build vendor on composer 2.1mediawiki/vendorREL1_35+4 K -2 K
Build vendor on composer 2.1mediawiki/vendorREL1_37+4 K -3 K
Build vendor on composer 2.1mediawiki/vendorREL1_36+4 K -3 K
Build vendor on composer 2.1mediawiki/vendormaster+10 K -7 K
Allow composer-plugin-api ^2.0 for migrationmediawiki/vendormaster+3 -3
Customize query in gerrit

Related Objects
Search...

StatusSubtypeAssignedTask
 ResolvedReedyT266419 Composer 2.0 updates and support
 ResolvedReedyT266421 Rebuild mediawiki-vendor on composer 2.0
 ResolvedReedyT275824 Bump wikimedia/composer-merge-plugin in vendor
 ResolvedtstarlingT248908 composer-merge-plugin support for composer 2.0
 ResolvedJdforrester-WMFT279857 Re-build CI containers with Composer 2.x
 ResolvedJdforrester-WMFT281294 Drop CI for REL1_31 branch once it's EOL
 ResolvedReedyT279858 Formally EOL REL1_31
 ResolvedReedyT279859 Announce upcoming formal EOL of REL1_31
 ResolvedReedyT285404 Release MediaWiki 1.31.16/1.35.4/1.36.2
 ResolvedReedyT285405 Tracking bug for MediaWiki 1.31.16/1.35.4/1.36.2
 ResolvedSecurityZabeT285515 CVE-2021-41798: XSS vulnerability in Special:Search
Restricted Task
 ResolvedBUG REPORTLadsgroupT290379 2021-09-04 enwiki was down at 10:44 (UTC)
Restricted Task
Restricted Task
 ResolvedReedyT285407 Write and send pre-release announcements for MediaWiki 1.31.16/1.35.4/1.36.2
 ResolvedReedyT285408 Write and send release announcements for MediaWiki 1.31.16/1.35.4/1.36.2
 ResolvedReedyT285409 Tag 1.31.16/1.35.4/1.36.2
 ResolvedReedyT285410 Update onwiki news and Module:Version
 ResolvedReedyT285411 Update onwiki release notes for 1.31.16/1.35.4/1.36.2
 ResolvedReedyT285412 Update Wikidata Q83
 ResolvedReedyT285413 Update HISTORY in master after 1.31.16/1.35.4/1.36.2
 ResolvedMstylesT285414 Write and send supplementary release announcement for extensions and skins with security patches (1.31.16/1.35.4/1.36.2)
 ResolvedSecuritysbassettT286376 Add DataDump CVE-2021-32774 to extensions security announcement
 ResolvedSecurityRhinosF1T279090 CVE-2021-41801: ReplaceText continues performing actions if the user no longer has the correct permission (such as by being blocked)
Restricted Task
 ResolvedSecurityLegoktmT289385 Modified HTTP headers allow XSS in SecurePoll (CVE-2021-42045)
 ResolvedSecurityDannyS712T286385 XSS in GlobalWatchlist (CVE-2021-42046)
 ResolvedSecurityUrbanecm_WMFT289063 Mentor dashboard: Permanent XSS exploitable by wiki admins (server-side part) (CVE-2021-42047)
 ResolvedSecurity• mewophT289064 Newcomer homepage Impact module: Permanent XSS exploitable by admins for new accounts (CVE-2021-42048)
 ResolvedSecurityUrbanecm_WMFT289408 Mentor dashboard: Permanent XSS exploitable by wiki admins (client-side part) (CVE-2021-42044)
 ResolvedSecurityUrbanecm_WMFT290692 Permanent XSS exploitable by wiki admins in SpecialEditGrowthConfig (CVE-2021-42042)
 ResolvedSecurityTheVoidwalkerT287347 Loops can cause php-fpm exhaustion (CVE-2021-42040)
 ResolvedReedyT292036 Write and send formal EOL email for REL1_31

Event Timeline

Reedy created this task.Oct 26 2020, 12:16 AM
Ricordisamoa subscribed.Dec 16 2020, 8:06 PM
Reedy added a subtask: T248908: composer-merge-plugin support for composer 2.0.Feb 2 2021, 1:59 AM
Reedy moved this task from Backlog to Features/Improvements on the Composer board.Feb 2 2021, 2:26 AM
Reedy closed subtask T248908: composer-merge-plugin support for composer 2.0 as Resolved.Feb 24 2021, 5:09 PM
Reedy removed a subtask: T248908: composer-merge-plugin support for composer 2.0.Feb 25 2021, 10:45 PM
Reedy closed subtask T275824: Bump wikimedia/composer-merge-plugin in vendor as Resolved.Feb 26 2021, 2:57 AM
gerritbot added a comment.Feb 26 2021, 2:58 AM

Change 667051 had a related patch set uploaded (by Reedy; owner: Reedy):
[mediawiki/vendor@master] WIP: Build vendor on composer 2

https://gerrit.wikimedia.org/r/667051

gerritbot added a project: Patch-For-Review.Feb 26 2021, 2:58 AM
Reedy mentioned this in T275834: Make sure MW platform checks run before composer platform checks.Feb 26 2021, 3:13 AM
Addshore subscribed.Mar 17 2021, 11:51 AM
cscott subscribed.Aug 13 2021, 3:54 PM
Zabe subscribed.Sep 25 2021, 12:16 PM
gerritbot added a comment.Sep 30 2021, 9:59 PM

Change 725122 had a related patch set uploaded (by Reedy; author: Reedy):

[mediawiki/vendor@master] Allow composer-plugin-api ^2.0 for migration

https://gerrit.wikimedia.org/r/725122

gerritbot added a comment.Sep 30 2021, 10:36 PM

Change 725122 merged by jenkins-bot:

[mediawiki/vendor@master] Allow composer-plugin-api ^2.0 for migration

https://gerrit.wikimedia.org/r/725122

ReleaseTaggerBot added a project: MW-1.38-notes (1.38.0-wmf.3; 2021-10-05).Oct 1 2021, 5:21 PM
Jdforrester-WMF changed the status of subtask T279857: Re-build CI containers with Composer 2.x from Open to In Progress.Oct 4 2021, 4:26 PM
Jdforrester-WMF closed subtask T279857: Re-build CI containers with Composer 2.x as Resolved.Oct 6 2021, 7:13 PM
gerritbot added a comment.Oct 7 2021, 12:14 AM

Change 667051 merged by jenkins-bot:

[mediawiki/vendor@master] Build vendor on composer 2.1

https://gerrit.wikimedia.org/r/667051

gerritbot added a comment.Oct 7 2021, 12:45 AM

Change 726999 had a related patch set uploaded (by Reedy; author: Reedy):

[mediawiki/vendor@REL1_37] Build vendor on composer 2.1

https://gerrit.wikimedia.org/r/726999

gerritbot added a comment.Oct 7 2021, 12:45 AM

Change 727000 had a related patch set uploaded (by Reedy; author: Reedy):

[mediawiki/vendor@REL1_36] Build vendor on composer 2.1

https://gerrit.wikimedia.org/r/727000

gerritbot added a comment.Oct 7 2021, 12:47 AM

Change 727001 had a related patch set uploaded (by Reedy; author: Reedy):

[mediawiki/vendor@REL1_35] Build vendor on composer 2.1

https://gerrit.wikimedia.org/r/727001

ReleaseTaggerBot edited projects, added MW-1.38-notes (1.38.0-wmf.4; 2021-10-12); removed MW-1.38-notes (1.38.0-wmf.3; 2021-10-05).Oct 7 2021, 1:00 AM
gerritbot added a comment.Oct 7 2021, 1:22 AM

Change 727000 merged by Jforrester:

[mediawiki/vendor@REL1_36] Build vendor on composer 2.1

https://gerrit.wikimedia.org/r/727000

gerritbot added a comment.Oct 7 2021, 1:22 AM

Change 726999 merged by Jforrester:

[mediawiki/vendor@REL1_37] Build vendor on composer 2.1

https://gerrit.wikimedia.org/r/726999

gerritbot added a comment.Oct 7 2021, 1:22 AM

Change 727001 merged by Jforrester:

[mediawiki/vendor@REL1_35] Build vendor on composer 2.1

https://gerrit.wikimedia.org/r/727001

Reedy closed this task as Resolved.Oct 7 2021, 1:57 AM
Reedy claimed this task.
gerritbot added a comment.Oct 7 2021, 2:35 AM

Change 726963 had a related patch set uploaded (by Jforrester; author: Reedy):

[mediawiki/vendor@wmf/1.38.0-wmf.2] Allow composer-plugin-api ^2.0 for migration

https://gerrit.wikimedia.org/r/726963

gerritbot added a comment.Oct 7 2021, 3:27 PM

Change 726963 merged by Ladsgroup:

[mediawiki/vendor@wmf/1.38.0-wmf.2] Allow composer-plugin-api ^2.0 for migration

https://gerrit.wikimedia.org/r/726963

ReleaseTaggerBot edited projects, added MW-1.38-notes (1.38.0-wmf.2; 2021-09-28); removed MW-1.38-notes (1.38.0-wmf.4; 2021-10-12).Oct 7 2021, 4:00 PM
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL · Credits