Page MenuHomePhabricator
Create Task
Maniphest T295967

Identify if there are changes of Wikibase Suite components that are required to be included in the security/maintenance
Closed, ResolvedPublic
Actions

Description

Excluding Mediawiki and Wikibase changes which we cover elsewhere.
We want to know what changes (likely identified by commit hashes) will be included in the ucpoming security release

We're looking primarily out for changes relevant for the security
This will be likely primarily executed by looking at the history changes (changelog/release notes if provided, VCS history elsewere) and scanning for potential severe issues being fixed.

List of components to check

  • WDQS UI
  • WDQS (will be done by asking WMF Search team by @WMDE-leszek ), including any changes to the configuration of the query service
  • Quickstatements (incl. "magnustools" library)
  • WikibaseLocalMedia

Acceptance criteria

  • Relevant versions of the affected components have been recorded in the wmde2.env file

Related Objects
Search...

Event Timeline

WMDE-leszek created this task.Nov 18 2021, 11:21 AM
WMDE-leszek added a subtask: T295966: Create pre-release packages of the upcoming 1.35.4-wmde.2.
WMDE-leszek updated the task description. (Show Details)Nov 18 2021, 11:52 AM
WMDE-leszek updated the task description. (Show Details)Nov 18 2021, 11:54 AM
WMDE-leszek updated the task description. (Show Details)
• toan mentioned this in T295966: Create pre-release packages of the upcoming 1.35.4-wmde.2.Nov 18 2021, 1:16 PM
Rosalie_WMDE claimed this task.Nov 18 2021, 4:14 PM
Rosalie_WMDE moved this task from Backlog to Doing on the Wikibase Release Strategy (Wikibase 1.35 Maintenance Release) board.
Rosalie_WMDE added a comment.Nov 19 2021, 2:59 PM

The current state of wmde2.env has the relevant version for the security release.

none the less there is a PR with the most recent versions: https://github.com/wmde/wikibase-release-pipeline/pull/237

Rosalie_WMDE moved this task from Doing to Peer Review on the Wikibase Release Strategy (Wikibase 1.35 Maintenance Release) board.Nov 19 2021, 2:59 PM
Rosalie_WMDE moved this task from Peer Review to Doing on the Wikibase Release Strategy (Wikibase 1.35 Maintenance Release) board.Nov 22 2021, 10:06 AM
Rosalie_WMDE moved this task from Doing to Peer Review on the Wikibase Release Strategy (Wikibase 1.35 Maintenance Release) board.Nov 23 2021, 8:35 AM
• toan updated the task description. (Show Details)Nov 23 2021, 1:59 PM
• toan moved this task from Peer Review to Done on the Wikibase Release Strategy (Wikibase 1.35 Maintenance Release) board.
Addshore moved this task from Inbox to Active on the [DEPRECATED] wdwb-tech board.Nov 30 2021, 8:36 AM
WMDE-leszek closed this task as Resolved.Dec 1 2021, 7:45 AM
WMDE-leszek closed subtask T295966: Create pre-release packages of the upcoming 1.35.4-wmde.2 as Resolved.
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL