1.45.0-wmf.19 deployment blockers
Closed, ResolvedPublic5 Estimated Story PointsRelease
Actions

Assigned To

Authored By

	thcipriani
	Jun 9 2025, 3:56 PM

Details

Backup Train Conductor: dduvall
Release Version: 1.45.0-wmf.19
Release Date: Sep 15 2025, 12:00 AM

2025 week 38 1.45-wmf.19 Changes wmf/1.45.0-wmf.19

This MediaWiki Train Deployment is scheduled for the week of Monday, September 15th:

Monday September 15th	Tuesday, September 16th	Wednesday, September 17th	Thursday, September 18th	Friday
Backports only.	Branch `wmf.19` and deploy to Group 0 Wikis.	Deploy `wmf.19` to Group 1 Wikis.	Deploy `wmf.19` to all Wikis.	No deployments on fridays

See https://wikitech.wikimedia.org/wiki/Deployments for full schedule.

How this works

Any serious bugs affecting wmf.19 should be added as subtasks beneath this one.
- Use this form to create one.
Any open subtask(s) block the train from moving forward. This means no further deployments until the blockers are resolved.
If something is serious enough to warrant a rollback then you should bring it to the attention of deployers on the #wikimedia-operations IRC channel.
If you have a risky change in this week's train add a comment to this task using the Risky patch template
For more info about deployment blockers, see Holding the train.

Other Deployments

Previous: 1.45.0-wmf.18

Next: 1.45.0-wmf.20

Related Changes in Gerrit:

Subject	Repo	Branch	Lines +/-
group2 to 1.45.0-wmf.19	operations/mediawiki-config	master	+341 -341
group1 to 1.45.0-wmf.19	operations/mediawiki-config	master	+573 -573
group0 to 1.45.0-wmf.19	operations/mediawiki-config	master	+140 -140
testwikis to 1.45.0-wmf.19	operations/mediawiki-config	master	+3 -3
Branch commit for wmf/1.45.0-wmf.19	mediawiki/core	wmf/1.45.0-wmf.19	+1 K -3

Customize query in gerrit

Related Objects
Search...

Status	Subtype	Assigned	Task
Resolved	Release	jeena	T396380 1.45.0-wmf.19 deployment blockers
Resolved	Security	dcausse	T401220 CVE-2025-62666: CirrusSearch: DoS vector through the cirrusbuilddoc query API
Resolved	PRODUCTION ERROR	ihurbain	T404902 Wikimedia\Assert\InvariantException: Invariant failed: getBasePageBundle called on non-Parsoid ContentHolder

Event Timeline

thcipriani created this task.Jun 9 2025, 3:56 PM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptJun 9 2025, 3:56 PM

SecurityPatchBot added a subtask: T403289: CVE-2025-61650: UserInfoCard is vulnerable to message key stored XSS.Sep 10 2025, 11:55 PM

SecurityPatchBot mentioned this in T403289: CVE-2025-61650: UserInfoCard is vulnerable to message key stored XSS.

mszwarc removed a subtask: T403289: CVE-2025-61650: UserInfoCard is vulnerable to message key stored XSS.Sep 11 2025, 9:02 AM

thcipriani assigned this task to jeena.Sep 11 2025, 11:45 PM

thcipriani triaged this task as Medium priority.

thcipriani updated Other Assignee, added: dduvall.

thcipriani set the point value for this task to 5.

thcipriani added projects: Release-Engineering-Team (Doing 😎), Essential-Work.

SecurityPatchBot changed the status of subtask T404392: Arbitrary HTML injection through error display on Wikifunctions from In Progress to Open.Sep 12 2025, 11:54 PM

SecurityPatchBot added a subtask: T404392: Arbitrary HTML injection through error display on Wikifunctions.

SecurityPatchBot mentioned this in T404392: Arbitrary HTML injection through error display on Wikifunctions.

sbassett changed the status of subtask T404392: Arbitrary HTML injection through error display on Wikifunctions from Open to In Progress.Sep 13 2025, 1:08 AM

SecurityPatchBot changed the status of subtask T404392: Arbitrary HTML injection through error display on Wikifunctions from In Progress to Open.Sep 13 2025, 11:53 PM

Jdforrester-WMF removed a subtask: T404392: Arbitrary HTML injection through error display on Wikifunctions.Sep 15 2025, 1:51 PM

SecurityPatchBot changed the status of subtask T401220: CVE-2025-62666: CirrusSearch: DoS vector through the cirrusbuilddoc query API from In Progress to Open.Sep 15 2025, 11:54 PM

SecurityPatchBot added a subtask: T401220: CVE-2025-62666: CirrusSearch: DoS vector through the cirrusbuilddoc query API.

SecurityPatchBot mentioned this in T401220: CVE-2025-62666: CirrusSearch: DoS vector through the cirrusbuilddoc query API.

Change #1188486 had a related patch set uploaded (by TrainBranchBot; author: trainbranchbot):

[mediawiki/core@wmf/1.45.0-wmf.19] Branch commit for wmf/1.45.0-wmf.19

https://gerrit.wikimedia.org/r/1188486

gerritbot added a project: Patch-For-Review.Sep 16 2025, 1:08 AM

Change #1188486 merged by jenkins-bot:

[mediawiki/core@wmf/1.45.0-wmf.19] Branch commit for wmf/1.45.0-wmf.19

https://gerrit.wikimedia.org/r/1188486

Maintenance_bot removed a project: Patch-For-Review.Sep 16 2025, 1:32 AM

OSleger-WMF mentioned this in T404447: CTT tasks week of 2025-09-12.Sep 16 2025, 2:10 PM

Change #1188861 had a related patch set uploaded (by TrainBranchBot; author: SpiderPig jobrunner/apiserver):

[operations/mediawiki-config@master] testwikis to 1.45.0-wmf.19

https://gerrit.wikimedia.org/r/1188861

Change #1188861 merged by jenkins-bot:

[operations/mediawiki-config@master] testwikis to 1.45.0-wmf.19

https://gerrit.wikimedia.org/r/1188861

Mentioned in SAL (#wikimedia-operations) [2025-09-16T18:54:43Z] <jhuneidi@deploy1003> Started scap sync-world: testwikis to 1.45.0-wmf.19 refs T396380

Maintenance_bot removed a project: Patch-For-Review.Sep 16 2025, 7:30 PM

Mentioned in SAL (#wikimedia-operations) [2025-09-16T19:36:46Z] <jhuneidi@deploy1003> Finished scap sync-world: testwikis to 1.45.0-wmf.19 refs T396380 (duration: 42m 03s)

Change #1188872 had a related patch set uploaded (by TrainBranchBot; author: SpiderPig jobrunner/apiserver):

[operations/mediawiki-config@master] group0 to 1.45.0-wmf.19

https://gerrit.wikimedia.org/r/1188872

Change #1188872 merged by jenkins-bot:

[operations/mediawiki-config@master] group0 to 1.45.0-wmf.19

https://gerrit.wikimedia.org/r/1188872

Mentioned in SAL (#wikimedia-operations) [2025-09-16T19:52:47Z] <jhuneidi@deploy1003> rebuilt and synchronized wikiversions files: group0 to 1.45.0-wmf.19 refs T396380

Maintenance_bot removed a project: Patch-For-Review.Sep 16 2025, 8:31 PM

Reedy closed subtask T401220: CVE-2025-62666: CirrusSearch: DoS vector through the cirrusbuilddoc query API as Resolved.Sep 17 2025, 2:05 PM

Change #1189270 had a related patch set uploaded (by TrainBranchBot; author: SpiderPig jobrunner/apiserver):

[operations/mediawiki-config@master] group1 to 1.45.0-wmf.19

https://gerrit.wikimedia.org/r/1189270

Change #1189270 merged by jenkins-bot:

[operations/mediawiki-config@master] group1 to 1.45.0-wmf.19

https://gerrit.wikimedia.org/r/1189270

Mentioned in SAL (#wikimedia-operations) [2025-09-17T18:17:06Z] <jhuneidi@deploy1003> rebuilt and synchronized wikiversions files: group1 to 1.45.0-wmf.19 refs T396380

dduvall added a subtask: T404902: Wikimedia\Assert\InvariantException: Invariant failed: getBasePageBundle called on non-Parsoid ContentHolder.Sep 17 2025, 6:28 PM

Maintenance_bot removed a project: Patch-For-Review.Sep 17 2025, 6:31 PM

ihurbain closed subtask T404902: Wikimedia\Assert\InvariantException: Invariant failed: getBasePageBundle called on non-Parsoid ContentHolder as Resolved.Sep 18 2025, 12:11 PM

Jdrewniak mentioned this in T404973: Verify 1.45.0-wmf.19 deployment.Sep 18 2025, 1:29 PM

Change #1189551 had a related patch set uploaded (by TrainBranchBot; author: SpiderPig jobrunner/apiserver):

[operations/mediawiki-config@master] group2 to 1.45.0-wmf.19

https://gerrit.wikimedia.org/r/1189551

Change #1189551 merged by jenkins-bot:

[operations/mediawiki-config@master] group2 to 1.45.0-wmf.19

https://gerrit.wikimedia.org/r/1189551

Mentioned in SAL (#wikimedia-operations) [2025-09-18T18:45:06Z] <jhuneidi@deploy1003> rebuilt and synchronized wikiversions files: group2 to 1.45.0-wmf.19 refs T396380

Maintenance_bot removed a project: Patch-For-Review.Sep 18 2025, 7:31 PM

thcipriani closed this task as Resolved.Sep 19 2025, 4:37 PM

DAlangi_WMF mentioned this in T407114: "Account on central wiki is not attached (this shouldn't happen)".Oct 14 2025, 10:59 AM

1.45.0-wmf.19 deployment blockersClosed, ResolvedPublic5 Estimated Story PointsReleaseActions