Page MenuHomePhabricator

1.46.0-wmf.19 deployment blockers
Closed, ResolvedPublic5 Estimated Story PointsRelease

Details

Backup Train Conductor
jeena
Release Version
1.46.0-wmf.19
Release Date
Mar 9 2026, 12:00 AM

2026 week 11 1.46-wmf.19 Changes wmf/1.46.0-wmf.19

This MediaWiki Train Deployment is scheduled for the week of Monday, March 9th:

Monday March 9thTuesday, March 10thWednesday, March 11thThursday, March 12thFriday
Backports only.Branch wmf.19 and deploy to Group 0 Wikis.Deploy wmf.19 to Group 1 Wikis.Deploy wmf.19 to all Wikis.No deployments on fridays

How this works

  • Any serious bugs affecting wmf.19 should be added as subtasks beneath this one.
  • Any open subtask(s) block the train from moving forward. This means no further deployments until the blockers are resolved.
  • If something is serious enough to warrant a rollback then you should bring it to the attention of deployers on the #wikimedia-operations IRC channel.
  • If you have a risky change in this week's train add a comment to this task using the Risky patch template
  • For more info about deployment blockers, see Holding the train.

Related Links

Other Deployments

Previous: 1.46.0-wmf.18
Next: 1.46.0-wmf.20
Related Changes in Gerrit:

Event Timeline

thcipriani triaged this task as Medium priority.
thcipriani updated Other Assignee, added: jeena.
thcipriani set the point value for this task to 5.

Change #1249511 had a related patch set uploaded (by TrainBranchBot; author: trainbranchbot):

[mediawiki/core@wmf/1.46.0-wmf.19] Branch commit for wmf/1.46.0-wmf.19

https://gerrit.wikimedia.org/r/1249511

You might want to backport Upgrading web-auth/webauthn-lib (5.2.3 => 5.2.4) (1249922) · Gerrit Code Review before group 1, since it is addressing a security vulnerability.

Jenkins says during CI:

Root composer.json requires web-auth/webauthn-lib 5.2.3 (exact version match: 5.2.3 or 5.2.3.0), found web-auth/webauthn-lib[5.2.3] but these were not loaded, because they are affected by security advisories. To ignore the advisories, add ("PKSA-n72g-8zd8-6dm2") to the audit "ignore" config. To turn the feature off entirely, you can set "block-insecure" to false in your "audit" config.

(nevermind, looks like you're on top of it: T419497)

Change #1249511 merged by jenkins-bot:

[mediawiki/core@wmf/1.46.0-wmf.19] Branch commit for wmf/1.46.0-wmf.19

https://gerrit.wikimedia.org/r/1249511

Change #1250025 had a related patch set uploaded (by TrainBranchBot; author: SpiderPig jobrunner/apiserver):

[operations/mediawiki-config@master] testwikis to 1.46.0-wmf.19

https://gerrit.wikimedia.org/r/1250025

Change #1250025 merged by jenkins-bot:

[operations/mediawiki-config@master] testwikis to 1.46.0-wmf.19

https://gerrit.wikimedia.org/r/1250025

Mentioned in SAL (#wikimedia-operations) [2026-03-10T18:13:39Z] <brennen@deploy2002> Started scap sync-world: testwikis to 1.46.0-wmf.19 refs T413810

I believe T419497 should be resolved. With an assist from Reedy and James_F the branch seems to be in the correct shape and should be on testwikis soon, after which I can deal with backport for T419294.

As a follow up, it would be good to know why we didn't see a failure notification from the branch cut job. (Or at least I didn't.) Pure user error: Unsynced IMAP folder after a local mail client upgrade. I am very good at computers.

Mentioned in SAL (#wikimedia-operations) [2026-03-10T18:52:13Z] <brennen@deploy2002> Finished scap sync-world: testwikis to 1.46.0-wmf.19 refs T413810 (duration: 38m 34s)

Change #1250052 had a related patch set uploaded (by TrainBranchBot; author: SpiderPig jobrunner/apiserver):

[operations/mediawiki-config@master] group0 to 1.46.0-wmf.19

https://gerrit.wikimedia.org/r/1250052

Change #1250052 merged by jenkins-bot:

[operations/mediawiki-config@master] group0 to 1.46.0-wmf.19

https://gerrit.wikimedia.org/r/1250052

Mentioned in SAL (#wikimedia-operations) [2026-03-10T19:16:17Z] <brennen@deploy2002> rebuilt and synchronized wikiversions files: group0 to 1.46.0-wmf.19 refs T413810

Change #1250655 had a related patch set uploaded (by TrainBranchBot; author: SpiderPig jobrunner/apiserver):

[operations/mediawiki-config@master] group1 to 1.46.0-wmf.19

https://gerrit.wikimedia.org/r/1250655

Change #1250655 merged by jenkins-bot:

[operations/mediawiki-config@master] group1 to 1.46.0-wmf.19

https://gerrit.wikimedia.org/r/1250655

Mentioned in SAL (#wikimedia-operations) [2026-03-11T18:49:27Z] <brennen@deploy2002> rebuilt and synchronized wikiversions files: group1 to 1.46.0-wmf.19 refs T413810

Change #1251151 had a related patch set uploaded (by TrainBranchBot; author: SpiderPig jobrunner/apiserver):

[operations/mediawiki-config@master] group2 to 1.46.0-wmf.19

https://gerrit.wikimedia.org/r/1251151

Change #1251151 merged by jenkins-bot:

[operations/mediawiki-config@master] group2 to 1.46.0-wmf.19

https://gerrit.wikimedia.org/r/1251151

Mentioned in SAL (#wikimedia-operations) [2026-03-12T18:34:13Z] <brennen@deploy2002> rebuilt and synchronized wikiversions files: group2 to 1.46.0-wmf.19 refs T413810