Change 567241 had a related patch set uploaded (by Jack Phoenix; owner: Jack Phoenix):
[mediawiki/extensions/UserStatus@master] Some quick PostgreSQL fixes

Change 567202 merged by jenkins-bot:
[mediawiki/extensions/Sudo@master] Pass a user to LogPage::addEntry

Hmm, I need help with this:

zoranzoki21@srwiki-dev:/var/www/html$ php maintenance/convertExtensionToRegistration.php extensions/MultimediaPlayer/MultimediaPlayer.php
[1557084502a87a098193d837] [no req]   Error from line 62 of /var/www/html/extensions/MultimediaPlayer/MultimediaPlayer.php: Class 'MultimediaPlayerSources' not found
Backtrace:
#0 /var/www/html/maintenance/convertExtensionToRegistration.php(87): require()
#1 /var/www/html/maintenance/doMaintenance.php(99): ConvertExtensionToRegistration->execute()
#2 /var/www/html/maintenance/convertExtensionToRegistration.php(350): require_once(string)
#3 {main}
zoranzoki21@srwiki-dev:/var/www/html$

Change 567240 had a related patch set uploaded (by Urbanecm; owner: Urbanecm):
[operations/mediawiki-config@master] Assign editautopatrolprotected to hewiki patrollers

In T243608#5831246, @Reedy wrote:

Not just the QR code... We list the secret on the page in clear text

In T243608#5830520, @Urbanecm wrote:

T243608.patch1 KBDownload

Commit summary is a bit odd... "our special pages"

I think after this is deployed, it can go into gerrit, and be backported to REL1_31, REL1_33, REL1_34

What bothers me even more, the attacker could intercept the code the user enters into some of the forms (I personally met a form like this at https://ru.wikipedia.org/w/index.php?title=Special:Manage_Two-factor_authentication&action=disable&module=totp&uselang=en).

This part doesn't feel like so much of an issue. You can't use a scratch token or OTP twice (the library prevents replay)

@Bodhisattwa Ji, Can you review it again? I made the change.

On it

{{Done}} for all repos with a requirement of PHP 7.2+. There are a couple of libs left.

Change 567239 had a related patch set uploaded (by Daimona Eaytoy; owner: Daimona Eaytoy):
[WrappedString@master] Require PHPUnit 8 like MW core

Change 567238 had a related patch set uploaded (by Daimona Eaytoy; owner: Daimona Eaytoy):
[wikimedia/lucene-explain-parser@master] Require PHPUnit 8 like MW core

Change 567237 had a related patch set uploaded (by Daimona Eaytoy; owner: Daimona Eaytoy):
[RelPath@master] Require PHPUnit 8 like MW core

Change 567236 had a related patch set uploaded (by Daimona Eaytoy; owner: Daimona Eaytoy):
[mediawiki/tools/phpunit-patch-coverage@master] Require PHPUnit 8 like MW core

Change 567235 had a related patch set uploaded (by Daimona Eaytoy; owner: Daimona Eaytoy):
[mediawiki/libs/XMPReader@master] Require PHPUnit 8 like MW core

Change 567234 had a related patch set uploaded (by Daimona Eaytoy; owner: Daimona Eaytoy):
[mediawiki/libs/WaitConditionLoop@master] Require PHPUnit 8 like MW core

Change 567233 had a related patch set uploaded (by Daimona Eaytoy; owner: Daimona Eaytoy):
[mediawiki/libs/Timestamp@master] Require PHPUnit 8 like MW core

Change 567232 had a related patch set uploaded (by Daimona Eaytoy; owner: Daimona Eaytoy):
[mediawiki/libs/Services@master] Require PHPUnit 8 like MW core

Change 567231 had a related patch set uploaded (by Daimona Eaytoy; owner: Daimona Eaytoy):
[mediawiki/libs/ScopedCallback@master] Require PHPUnit 8 like MW core

Change 567230 had a related patch set uploaded (by Daimona Eaytoy; owner: Daimona Eaytoy):
[mediawiki/libs/RemexHtml@master] Require PHPUnit 8 like MW core

Change 567229 had a related patch set uploaded (by Daimona Eaytoy; owner: Daimona Eaytoy):
[mediawiki/libs/PasswordBlacklist@master] Require PHPUnit 8 like MW core

Change 567228 had a related patch set uploaded (by Daimona Eaytoy; owner: Daimona Eaytoy):
[mediawiki/libs/ObjectFactory@master] Require PHPUnit 8 like MW core

Change 567227 had a related patch set uploaded (by Daimona Eaytoy; owner: Daimona Eaytoy):
[mediawiki/libs/IPUtils@master] Require PHPUnit 8 like MW core

Change 567226 had a related patch set uploaded (by Daimona Eaytoy; owner: Daimona Eaytoy):
[mediawiki/libs/etcd@master] Require PHPUnit 8 like MW core

Change 567225 had a related patch set uploaded (by Daimona Eaytoy; owner: Daimona Eaytoy):
[mediawiki/libs/Assert@master] Require PHPUnit 8 like MW core

This is happening in core as well as in few other extensions; see T237765. So probably the issue is from core

Change 567211 merged by jenkins-bot:
[css-sanitizer@master] Require PHPUnit 8 like MW core

Change 567224 had a related patch set uploaded (by Daimona Eaytoy; owner: Daimona Eaytoy):
[IPSet@master] Require PHPUnit 8 like MW core

Change 567223 had a related patch set uploaded (by Daimona Eaytoy; owner: Daimona Eaytoy):
[CLDRPluralRuleParser@master] Require PHPUnit 8 like MW core

Change 567222 had a related patch set uploaded (by Daimona Eaytoy; owner: Daimona Eaytoy):
[cdb@master] Require PHPUnit 8 like MW core

In T243313#5830921, @Krinkle wrote:

or the timeout could be formalised as a known failure scenario with a dedicated error code.

Change 567221 had a related patch set uploaded (by Daimona Eaytoy; owner: Daimona Eaytoy):
[base-convert@master] Require PHPUnit 8 like MW core

Change 567220 had a related patch set uploaded (by Daimona Eaytoy; owner: Daimona Eaytoy):
[at-ease@master] Require PHPUnit 8 like MW core

Per above

Change 567219 had a related patch set uploaded (by Daimona Eaytoy; owner: Daimona Eaytoy):
[AhoCorasick@master] Require PHPUnit 8 like MW core

Change 567206 merged by jenkins-bot:
[php-session-serializer@master] Require PHPUnit 8 like MW core

Here you are.

Mentioned in SAL (#wikimedia-operations) [2020-01-25T12:49:45Z] <Urbanecm> Run mwscript extensions/CentralAuth/maintenance/fixStuckGlobalRename.php --wiki=mediawikiwiki --logwiki=metawiki TokyVrpns Mike20LCN (T243668)

Change 567218 had a related patch set uploaded (by Daimona Eaytoy; owner: Daimona Eaytoy):
[mediawiki/oauthclient-php@master] Require PHPUnit 8 like MW core

Probably caused by T230103: Systematize wgRestrictionLevels - hewiki doesn't appear to have been updated

Change 567216 had a related patch set uploaded (by Xqt; owner: Xqt):
[pywikibot/core@master] [tests] Remove X-Amzn-Trace-Id tracker before comparison

In current build, these tests fail with timeout:

Change 567215 merged by jenkins-bot:
[pywikibot/core@master] [tests] Show complete diff with DataBodyParameterTestCase

Change 567215 had a related patch set uploaded (by Xqt; owner: Xqt):
[pywikibot/core@master] [tests] Show complete diff with DataBodyParameterTestCase

The complete diff: