Page MenuHomePhabricator
Create Task
Maniphest T332786

Prepare wmde.13 (1.39.4) minor / security release
Closed, InvalidPublic5 Estimated Story PointsRelease
Actions

Description

Last Wikibase Suite release (wmde11) was compatible with mw 1.39.1. Since last security release mw 1.39.3 and mw1.39.4 are out (as per 1 and 2 announcements on wikitech. We are making a new release to support the latter version.

Acceptance criteria

  • Container images of Wikibase Suite compatible with MediaWiki 1.39.4 have been prepared, tested and published to Docker hub
  • Tarball packages of Wikibase Suite compatible with MediaWiki 1.39.4 have been prepared, tested and published to releases.wikimedia.org

Releasing checklist (copied from T322407)

  • Create a task on phabricator with this template
  • Collect subtasks that need to be included in the release, adding this task as a parent (including security tasks)
  • Review open backports for Wikimedia controlled Gerrit extensions included in the release, merging where appropriate link (check that all extensions are included in the search and the correct REL1_39 version is used)
  • Create a draft PR for the new release in the releasing repository
    • Make the pipeline build the new release by changing env_file in .github/workflows/built_and_test.yml
    • When doing a new "major" release for a new "major" version of MediaWiki, make sure there is an upgrade path. See test_upgrade_base and test_upgrade_bundle in .github/workflows/built_and_test.yml
  • Make the draft PR green
  • Prepare the final round of patches
    • Release notes for Wikibase.git
    • Any security patches for any codebases
  • Prepare communication with ComCom & Technical Writer
  • Merge final patches
    • Release notes
  • Update any needed commit hashes in the release env file
  • Merge the release PR
  • Test and verify RC candidates
  • Publish release candidates https://github.com/wmde/wikibase-release-pipeline/blob/main/docs/topics/publishing.md
    • dockerhub
    • releases.wikimedia.org
    • Update and merge PR for docker-compose example in release-pipeline repository
    • Tags
    • Dxocs
      • mw.org
      • docker-compose example references
    • Record build meta data
  • Communication

Details

Related Objects
Search...

Event Timeline

darthmon_wmde created this task.Mar 22 2023, 2:42 PM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptMar 22 2023, 2:42 PM
darthmon_wmde updated the task description. (Show Details)Mar 22 2023, 2:50 PM
darthmon_wmde updated the task description. (Show Details)Mar 22 2023, 3:00 PM
Addshore subscribed.Mar 23 2023, 2:22 PM
darthmon_wmde renamed this task from Prepare wmde.12 (1.39.2) minor / security release to Prepare wmde.12 (1.39.3) minor / security release.Apr 13 2023, 1:16 PM
darthmon_wmde updated the task description. (Show Details)
darthmon_wmde renamed this task from Prepare wmde.12 (1.39.3) minor / security release to Prepare wmde.13 (1.39.3) minor / security release.Apr 15 2023, 10:49 AM
darthmon_wmde updated the task description. (Show Details)
darthmon_wmde added a subscriber: WMDE-leszek.
darthmon_wmde updated the task description. (Show Details)Apr 15 2023, 12:35 PM
darthmon_wmde updated the task description. (Show Details)
roti_WMDE subscribed.May 9 2023, 2:38 PM
darthmon_wmde added a comment.May 26 2023, 3:34 PM

PR: https://github.com/wmde/wikibase-release-pipeline/pull/416

darthmon_wmde added a comment.May 26 2023, 4:12 PM

CI not passing - Error: (same as in T334778)

» /specs/repo/extensions/wikibase-manifest.js
[Chrome Headless 93.0.4577.82 linux #0-16] WikibaseManifest
[Chrome Headless 93.0.4577.82 linux #0-16] ✖ Should have rest endpoint and data
[Chrome Headless 93.0.4577.82 linux #0-16]
[Chrome Headless 93.0.4577.82 linux #0-16] 1 failing (138ms)
[Chrome Headless 93.0.4577.82 linux #0-16]
[Chrome Headless 93.0.4577.82 linux #0-16] 1) WikibaseManifest Should have rest endpoint and data
[Chrome Headless 93.0.4577.82 linux #0-16] Request failed with status code 403
[Chrome Headless 93.0.4577.82 linux #0-16] Error: Request failed with status code 403
[Chrome Headless 93.0.4577.82 linux #0-16] at createError (/usr/src/app/node_modules/axios/lib/core/createError.js:16:15)
[Chrome Headless 93.0.4577.82 linux #0-16] at settle (/usr/src/app/node_modules/axios/lib/core/settle.js:17:12)
[Chrome Headless 93.0.4577.82 linux #0-16] at IncomingMessage.handleStreamEnd (/usr/src/app/node_modules/axios/lib/adapters/http.js:260:11)
[Chrome Headless 93.0.4577.82 linux #0-16] at endReadableNT (internal/streams/readable.js:1333:12)
[Chrome Headless 93.0.4577.82 linux #0-16] at processTicksAndRejections (internal/process/task_queues.js:82:21)
[Chrome Headless 93.0.4577.82 linux #0-16] at Browser.makeRequest (/usr/src/app/node_modules/@wdio/utils/build/shim.js:239:24)
[Chrome Headless 93.0.4577.82 linux #0-16] at Browser.next [as makeRequest] (/usr/src/app/node_modules/@wdio/utils/build/monad.js:149:33)
[Chrome Headless 93.0.4577.82 linux #0-16] at Context.<anonymous> (/usr/src/app/specs/repo/extensions/wikibase-

Lucas_Werkmeister_WMDE mentioned this in T339260: CVE-2023-45366: FederatedPropertiesError shows label as unescaped HTML.Jun 16 2023, 11:07 AM
roti_WMDE updated the task description. (Show Details)Jun 23 2023, 10:08 AM
Michael subscribed.Jun 28 2023, 7:25 AM
darthmon_wmde renamed this task from Prepare wmde.13 (1.39.3) minor / security release to Prepare wmde.13 (1.39.4) minor / security release.Jul 3 2023, 5:36 PM
darthmon_wmde claimed this task.
darthmon_wmde updated the task description. (Show Details)
darthmon_wmde moved this task from Backlog (prioritised) to Doing on the Wikibase Suite Team (Maintenance Releases) board.
darthmon_wmde mentioned this in T340938: 1.39.4.Jul 3 2023, 5:39 PM
roti_WMDE added a comment.EditedJul 4 2023, 9:34 AM

blocked by https://github.com/wikimedia/mediawiki-docker/pull/123

done. merged

roti_WMDE added a comment.EditedJul 4 2023, 9:39 AM

blocked by https://github.com/docker-library/official-images/pull/14985

merged. 1.39.4 is available as official docker hub image now.

darthmon_wmde added a comment.Jul 4 2023, 4:48 PM

PR: T332786: wmde13 security release for mw1.39.4 #416

Addshore unsubscribed.Jul 4 2023, 7:42 PM
roti_WMDE updated the task description. (Show Details)Jul 6 2023, 12:54 PM

pipeline is green \o/

roti_WMDE added a project: Release.Jul 10 2023, 9:27 AM
roti_WMDE mentioned this in T340939: wmde.14 (1.40.1) major release.Jul 14 2023, 8:41 AM
darthmon_wmde mentioned this in T343433: Automate the wbSuite Release Process.Aug 3 2023, 10:45 AM
darthmon_wmde added a project: wbSuite Release Pipeline Analysis.Aug 8 2023, 10:36 AM
darthmon_wmde moved this task from Inbox (no prioritisation) to ReleasePipelineAnalysis-Sprint-5 on the wbSuite Release Pipeline Analysis board.
darthmon_wmde edited projects, added wbSuite Release Pipeline Analysis (ReleasePipelineAnalysis-Sprint-5); removed wbSuite Release Pipeline Analysis.
darthmon_wmde moved this task from To do to In Review on the wbSuite Release Pipeline Analysis (ReleasePipelineAnalysis-Sprint-5) board.
darthmon_wmde moved this task from Doing to In Review on the Wikibase Suite Team (Maintenance Releases) board.Aug 9 2023, 3:13 PM
darthmon_wmde updated the task description. (Show Details)Aug 9 2023, 5:24 PM
darthmon_wmde moved this task from In Review to Product Verification (only for certain tasks) on the wbSuite Release Pipeline Analysis (ReleasePipelineAnalysis-Sprint-5) board.Aug 14 2023, 10:53 AM
darthmon_wmde edited projects, added Product Verification, Wikibase Suite Team (Sprint-∞); removed Wikibase Suite Team (Maintenance Releases).Aug 15 2023, 9:21 AM
darthmon_wmde moved this task from Product Verification (only for certain tasks) to In Review on the wbSuite Release Pipeline Analysis (ReleasePipelineAnalysis-Sprint-5) board.
darthmon_wmde moved this task from To do (prio from top to bottom) to In Review on the Wikibase Suite Team (Sprint-∞) board.
darthmon_wmde set the point value for this task to 5.Aug 15 2023, 11:04 AM
roti_WMDE moved this task from In Review to Doing on the Wikibase Suite Team (Sprint-∞) board.Aug 28 2023, 9:37 AM
darthmon_wmde changed the task status from Open to In Progress.Sep 13 2023, 12:24 PM
roti_WMDE added a comment.Sep 28 2023, 3:55 PM

1.39.5 is coming

https://lists.wikimedia.org/hyperkitty/list/wikitech-l@lists.wikimedia.org/thread/QTRFMDRQAL7QK4RN53URX5YBBV744AWI/

Frostly changed the subtype of this task from "Task" to "Release".Oct 2 2023, 3:09 AM
darthmon_wmde added a comment.EditedOct 11 2023, 9:14 AM

We need to update (again!!) since a newer version (1.39.5) is out as announced here.

Since our main branch has changed a lot and the PR that we had started for this is very outdated I will close the open PR and this ticket. I will then open another ticket for the security release 1.39.5

darthmon_wmde closed this task as Invalid.Oct 11 2023, 9:22 AM
darthmon_wmde added a parent task: T348616: Prepare wmde.13 (1.39.5) minor / security release.

newer version is out - also newer ticket (T348616) - that makes this ticket obsolete

roti_WMDE moved this task from Sprint-∞ to Archive (closed) on the Wikibase Suite Team board.Oct 11 2023, 1:34 PM
roti_WMDE edited projects, added Wikibase Suite Team; removed Wikibase Suite Team (Sprint-∞), wbSuite Release Pipeline Analysis (ReleasePipelineAnalysis-Sprint-5).
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL · Credits