Not sure whether I should make this task as resolved and public, but it's done on our side now, so moving on the Cosmos workboard.
Feed All Stories
Oct 17 2020
Oct 17 2020
SamanthaNguyen claimed T265440: Cosmos skin: Mix used of wfMessage() calls with no output mode and Html::rawElement (CVE-2020-27620).
gerritbot added a comment to T262955: Fix PHPUnit deprecation warnings in DonationInterface tests.
Change 627977 merged by jenkins-bot:
[mediawiki/extensions/DonationInterface@master] Fix usages of deprecated PHPUnit methods
Iniquity added a comment to T248418: Roll out videojs as the only video/audio player on all Wikimedia wikis.
Aklapper added a comment to T248418: Roll out videojs as the only video/audio player on all Wikimedia wikis.
@Iniquity: If you run into specific bugs, then please file specific bug reports with clear steps to reproduce (URLs, web browser and version and operating system, etc) as specific bug reports are off-topic here (this task is about deploying a piece of software instead). Thanks.
Catrope added a comment to T258017: Variant D: difficulty overlay in onboarding.
Catrope added a comment to T258016: Variant C: onboarding.
While working on the big 24px->16px change mentioned in T258019#6557184, I noticed that the text in the difficulty banner in the variant C onboarding dialog was vertically centered on desktop, but should instead be top-aligned according to the mocks. The attached patch fixes that in both variant A and variant C.
SamanthaNguyen added a comment to T265440: Cosmos skin: Mix used of wfMessage() calls with no output mode and Html::rawElement (CVE-2020-27620).
Patches rolled-out to master, REL1_35, and REL1_34:
gerritbot added a comment to T258016: Variant C: onboarding.
Change 634755 had a related patch set uploaded (by Catrope; owner: Catrope):
[mediawiki/extensions/GrowthExperiments@master] StartEditingDialog: Make image in difficulty banner top aligned, fix padding
gerritbot added a comment to T258017: Variant D: difficulty overlay in onboarding.
Change 634755 had a related patch set uploaded (by Catrope; owner: Catrope):
[mediawiki/extensions/GrowthExperiments@master] StartEditingDialog: Make image in difficulty banner top aligned, fix padding
notconfusing updated the task description for T264825: backend extras.
notconfusing updated the task description for T264825: backend extras.
SamanthaNguyen closed T265537: Document process on how to contribute to the Cosmos skin as Resolved.
SamanthaNguyen added a comment to T265807: CI failures related to SocialProfile affecting other repositories for patches being submitted on the REL1_34 and REL1_35 branch, but not master.
UploadAvatar extends UploadFromFile, which extends UploadBase, which defines the performUpload() function. Since 1.35, it introduces the $watchlistExpiry parameter, so the method signatures don't match now; this causes a PHP exception to throw.
gerritbot added a comment to T263461: Openstack Glance: add ceph backend.
Change 634754 merged by Andrew Bogott:
[operations/puppet@production] wmcs admin scripts: added wmcs-imageusage
gerritbot added a comment to T263461: Openstack Glance: add ceph backend.
Change 634754 had a related patch set uploaded (by Andrew Bogott; owner: Andrew Bogott):
[operations/puppet@production] wmcs admin scripts: added wmcs-imageusage
SamanthaNguyen added a comment to T265807: CI failures related to SocialProfile affecting other repositories for patches being submitted on the REL1_34 and REL1_35 branch, but not master.
So this database column was dropped in master branch, but not in the REL1_34 branch, however last time I worked on SocialProfile, the master branch was the branch that users were expected to use and is expected to be stable with the latest stable version of MediaWiki.
gerritbot added a comment to T176711: jQueryMsg should generate external links with 'external' CSS class.
Change 634753 had a related patch set uploaded (by He7d3r; owner: He7d3r):
[mediawiki/core@master] Add 'external' class to links generated by jQueryMsg
Gerrit Code Review <gerrit@wikimedia.org> committed rSCOS3a2ee92ae65b: Merge "Hooks: Use new hook registration system introduced in 1.35" (authored by jenkins-bot).
Merge "Hooks: Use new hook registration system introduced in 1.35"
SamanthaNguyen added a comment to T265807: CI failures related to SocialProfile affecting other repositories for patches being submitted on the REL1_34 and REL1_35 branch, but not master.
Looks like this column was dropped in the SQL patch at https://github.com/wikimedia/mediawiki-extensions-SocialProfile/blob/master/UserGifts/sql/patches/actor/drop-gift_creator_user_id.sql but there's still code trying to access this SQL column
Gerrit Code Review <gerrit@wikimedia.org> committed rSCOS4dfd6e29dc95: Merge "README: Explain how to contribute and properly a report a security issue" (authored by jenkins-bot).
Merge "README: Explain how to contribute and properly a report a security issue"
gerritbot added a comment to T265537: Document process on how to contribute to the Cosmos skin.
Change 634742 merged by jenkins-bot:
[mediawiki/skins/Cosmos@master] README: Explain how to contribute and properly a report a security issue
Apathyash added a comment to T265799: Diff button on watchlist does not work in Safari iOS app.
Hi @Aklapper,
This issue is occurring on mobile, using the safari iOS app, not on the web browser. As I indicated in the steps I laid out, you have to go to https://en.m.wikipedia.org/wiki/Main_Page with Safari for iOS 14.0.1.
DannyS712 added a comment to T202989: Administrators can no longer view deleted history of js/css pages.
Tgr added a comment to T265726: Assign oathauth-verify-user to bureaucrats on WMF wikis.
2FA logins are global, so this would mean someone taking over an xywiki bureaucrat account could check which valuable accounts on large wikis are easy targets. Once T150898: Force OATHAuth (2FA) for certain user groups in Wikimedia production gets enforced, that might be an acceptable risk, as account takeover is not terribly damaging for non-sensitive accounts; for now, I'm not sure it is a good idea.
gerritbot added a comment to T265665: MovePage::moveToInternal() should use Title::getArticleId() not Title::exists().
Change 634341 merged by jenkins-bot:
[mediawiki/core@master] Use Title::getArticleID instead of Title::exists for internal check
[IMPR] fix type in docstring
Iniquity added a comment to T248418: Roll out videojs as the only video/audio player on all Wikimedia wikis.
Buttons overlap each other, how can it works? :)
kaldari added a comment to T248418: Roll out videojs as the only video/audio player on all Wikimedia wikis.
The UX still works fine for me, including for audio files. I guess we'll have to agree to disagree.
Toluwani7 added a comment to T263874: Outreachy Application Task: Tutorial for Wikipedia Page Protection Data.
Please I don't know what I did wrong.
Izno added a project to T244890: cite button is generating incorrect isbn data for isbn 978-3-443-01063-8: Citoid.
Izno moved T264183: Move visualeditor-cite-tool-definition.json to cite-tool-definition.json from Unsorted backlog to External on the Cite board.
Ux-nerd added a comment to T263646: Develop an approach to infer which countries are associated with a given Wikipedia article.
Hi everyone. I'm Lola, an Outreachy applicant; a little late to the party I'm afraid. But I'd really love to contribute to this interesting project.
Multichill added a comment to T225897: Cannot access wikitext of some old revisions on Commons, only get a comparison.
Iniquity added a comment to T248418: Roll out videojs as the only video/audio player on all Wikimedia wikis.
Multichill added a comment to T245349: wbeditentity doesn't trigger page update on Wikimedia Commons.
Guycn2 awarded T107119: Provide a Lua method mw.templatedata.load() a Like token.
gerritbot added a comment to T191231: RFC: Abstract schemas and schema changes.
Change 634748 had a related patch set uploaded (by Ammarpad; owner: Ammarpad):
[mediawiki/core@master] Expand DoctrineSchemaBuilderTest
Oct 17 2020, 7:56 PM · User-Ladsgroup, MW-1.36-notes (1.36.0-wmf.38; 2021-04-06), Patch-For-Review, MW-1.35-notes (1.35.0-wmf.32; 2020-05-12), Platform Team Workboards (Initiatives), Platform Team Initiatives (Abstract Schema), TechCom-RFC (TechCom-RFC-Closed), MediaWiki-Installer, User-Addshore, SQLite, Oracle Database, MSSQL, PostgreSQL, Epic
Amamgbu added a comment to T263874: Outreachy Application Task: Tutorial for Wikipedia Page Protection Data.
@Amamgbu that is correct and @Vanevela pointed to the appropriate prior discussion about this. More details: the restrictiontypes field is just what restrictions could be applied to the page, not which ones are applied -- a fuller description of what you could find in that field can be found here. For most pages, you'll see edit and move and can verify this by choosing a random page without restrictions and querying the API. I'd suggest ignoring the field as it won't tell you much.
Amorymeltzer added a comment to T202989: Administrators can no longer view deleted history of js/css pages.
Aklapper closed T258317: LOOMIO decision making software (also for discussing and concensus) as Declined.
(Removing Design Research tools and infrastructure as per its description. Also removing task subscribers added without an obvious reason (please avoid).)
Christian1985 awarded T30258: texvc should support commutative diagrams via XY-packet a Love token.
TmY_e12 added a project to T265416: Put DoubleWiki local javascript on tr.wikisource: Turkish-Sites.
Glrx added a comment to T154237: SVG image wikisyntax can't use "lang=zh-hant".
SVG language name handling is a mess on many levels.
Xaosflux added a comment to T202989: Administrators can no longer view deleted history of js/css pages.
For WMF wikis, we should probably expand the suppression policy to specifically allow for this type of removal. Feedback is welcome at https://meta.wikimedia.org/wiki/Talk:Oversight_policy#Expand_for_malicious_code_removal
Aklapper removed members for Research-Archive: • Capt_Swing, • schana, • ezachte, • DarTar, • ellery.
Aklapper removed members for Discovery-ARCHIVED: • Mathew.onipe, • chelsyx, • Rdicerb, • Jdouglas, • Manybubbles.
valerio.bozzolan added a comment to T265698: Fix renewal issues on WMIT domains in server fabula.
Note that smssolidale.wikimedia.it is a redirect to a domain that is not handled by this server. So, replaced:
Aklapper removed members for Design Research and product team collaboration: • aripstra, • SBecker, • pizzzacat, • Capt_Swing.
Lonaowna added a comment to T245167: Re-purposing MediaWiki-Docker and friends.
I think it's quite confusing that the Docker-Hub-MediaWiki repository is at https://github.com/wikimedia/mediawiki-docker. This suggest that it is related to MediaWiki-Docker.
valerio.bozzolan updated the task description for T265698: Fix renewal issues on WMIT domains in server fabula.
Aklapper removed members for Design Research tools and infrastructure: • aripstra, • SBecker, • pizzzacat, • Capt_Swing.
valerio.bozzolan added a comment to T265698: Fix renewal issues on WMIT domains in server fabula.
Note that monzaebrianza.wikilovesmonuments.it is a redirect to a domain that is not handled by this server. So, replaced:
Aklapper closed T144018: learn about new editors via conversations with new editors on social media as Declined.
Nobody can answer this anymore, I guess, and no links either.
Aklapper removed members for Design Research generative research: • pizzzacat, • SBecker, • aripstra, • Capt_Swing.
Aklapper removed members for Wikimedia-Design: • PDrouin-WMF, • Capt_Swing, • Nirzar, • violetto, • MSyed, • Jaredzimmerman-WMF, • aripstra.
Aklapper removed members for Contributors-Team: • lindseyanne, • ferdbold, • Mattflaschen-WMF, • Nirzar, • JAufrecht, • TrevorParscal.
valerio.bozzolan updated the task description for T265698: Fix renewal issues on WMIT domains in server fabula.
valerio.bozzolan added a comment to T265698: Fix renewal issues on WMIT domains in server fabula.
$ sudo certbot certonly --webroot --webroot-path=/var/www/wmw/worddona -d dona.wikimedia.it Saving debug log to /var/log/letsencrypt/letsencrypt.log Plugins selected: Authenticator webroot, Installer None Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org Obtaining a new certificate
Aklapper removed members for Wikipedia-iOS-App-Backlog: • AMroczkowski, • NHarateh_WMF, • Nirzar, • BGerstle-WMF.
Aklapper removed members for Community-Resources: • egalvezwmf, • Shouston_WMF, • HaithamS, • TFlanagan-WMF.
Mpaa added a comment to T265800: pywikibot sitelinks have changed?.
Aklapper removed members for Education-Program-Dashboard: • Capt_Swing, • FloorKoudijs, • TFlanagan-WMF, • AKoval_WMF.
Aklapper removed members for acl*Batch-Editors: • Tim_WMDE, • Matthias_Geisler_WMDE, • chasemp, • Jonas, • TBolliger, • DarTar, • NHarateh_WMF, • Mattflaschen-WMF, • AlexMonk-WMF, • atgo, • JAufrecht, • jhobs, • DFoy, • RobLa-WMF, • werdna, • TrevorParscal.
Aklapper removed members for VisualEditor: • Marlbollo, • AlexMonk-WMF, • lindseyanne, • ferdbold, • JAufrecht, • Rdicerb, • TrevorParscal.
valerio.bozzolan updated the task description for T265698: Fix renewal issues on WMIT domains in server fabula.
valerio.bozzolan added a comment to T265698: Fix renewal issues on WMIT domains in server fabula.
Note that valledaosta.wikilovesmonuments.it is a redirect to a domain that is not handled by this server. So, replaced:
Aklapper removed members for Wikipedia-Store-Theme: • goenning, • Nirzar, • MNguyen, • vshchepakina, • violetto.
Aklapper removed members for Project-Admins: • Jonas, • JAufrecht, • TFlanagan-WMF, • samuwmde, • DarTar, • Spage, • Mattflaschen-WMF, • RobLa-WMF, • atgo, • Jdouglas, • kevinator, • chasemp.
SamanthaNguyen lowered the priority of T265108: Cosmos skin: Fix all remaining PHPCS issues from Medium to Low.
Not as high of a priority now, since most are done. (not all are done yet, just two left)
Jayprakash12345 awarded T265802: Indic-TechCom: Create July-Sep 2020 Report a Love token.
Wikimedia-India mailing list: https://lists.wikimedia.org/pipermail/wikimediaindia-l/2020-October/014767.html
MediaWiki-India mailing list: https://lists.wikimedia.org/pipermail/mediawiki-india/2020-October/000105.html
SamanthaNguyen moved T265537: Document process on how to contribute to the Cosmos skin from Incoming / Backlog to In Progress on the Cosmos board.
gerritbot added a project to T265537: Document process on how to contribute to the Cosmos skin: Patch-For-Review.
gerritbot added a comment to T265537: Document process on how to contribute to the Cosmos skin.
Change 634742 had a related patch set uploaded (by SamanthaNguyen; owner: SamanthaNguyen):
[mediawiki/skins/Cosmos@master] README: Explain how to contribute and properly a report a security issue
Thanks. Closing as resolved via the Add Action... → Change Status dropdown.
valerio.bozzolan updated the task description for T265698: Fix renewal issues on WMIT domains in server fabula.