[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

gerritbot added a comment. Change 572828 **abandoned** by Tarrow: [mediawiki/extensions/Wikibase@master] TR: Add as dev dependency of Wikibase Reason: https://gerrit.wikimedia.org/r/572828 TASK DETAIL https://phabricator.wikimedia.org/T244001 EMAIL PREFERENCES

[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

gerritbot added a comment. Change 691265 **merged** by jenkins-bot: [mediawiki/extensions/WikibaseManifest@master] Dependabot -> Gerrit, Github Action https://gerrit.wikimedia.org/r/691265 TASK DETAIL https://phabricator.wikimedia.org/T244001 EMAIL PREFERENCES

[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

gerritbot added a comment. Change 602177 **abandoned** by Ladsgroup: [mediawiki/extensions/Wikibase@master] Update wikimedia-stylint-config Reason: Already done. https://gerrit.wikimedia.org/r/602177 TASK DETAIL https://phabricator.wikimedia.org/T244001 EMAIL

[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

gerritbot added a comment. Change 602175 **abandoned** by Ladsgroup: [mediawiki/extensions/Wikibase@master] TR: Update dependencies to pick up security fixes Reason: Already done. https://gerrit.wikimedia.org/r/602175 TASK DETAIL

[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

Addshore closed this task as "Resolved". Addshore added a comment. Investigation is done, state is known, and a potential next step has been explored and will be followed up in another ticket (that I will backlink) TASK DETAIL https://phabricator.wikimedia.org/T244001 EMAIL PREFERENCES

[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

Addshore added a comment. I looked once again at the draft attempt at creating an action for this (was https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Wikibase/+/626687) It is now reimagined in the change above which has been tested. My bot account (Addbot) is currently used.

[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

gerritbot added a comment. Change 691265 had a related patch set uploaded (by Addshore; author: Addshore): [mediawiki/extensions/WikibaseManifest@master] Dependabot -> Gerrit, Github Action https://gerrit.wikimedia.org/r/691265 TASK DETAIL

[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

Addshore claimed this task. TASK DETAIL https://phabricator.wikimedia.org/T244001 EMAIL PREFERENCES https://phabricator.wikimedia.org/settings/panel/emailpreferences/ To: Addshore Cc: Jakob_WMDE, wiese, Tonina_Zhelyazkova_WMDE, Pablo-WMDE, Ladsgroup, Addshore, WMDE-leszek, Aklapper,

[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

Addshore moved this task from backlog to Active on the wdwb-tech-focus board. Addshore edited projects, added wdwb-tech-focus; removed wdwb-tech-focus (backlog). TASK DETAIL https://phabricator.wikimedia.org/T244001 WORKBOARD https://phabricator.wikimedia.org/project/board/3532/ EMAIL

[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

Jakob_WMDE removed Jakob_WMDE as the assignee of this task. Jakob_WMDE moved this task from Doing to Peer Review on the Wikidata-Campsite (Wikidata-Campsite-Iteration-∞) board. Jakob_WMDE added a comment. I went through the list provided in T244001#6904372

[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

Jakob_WMDE claimed this task. Jakob_WMDE moved this task from To Do (prioritised from top to bottom) to Doing on the Wikidata-Campsite (Wikidata-Campsite-Iteration-∞) board. TASK DETAIL https://phabricator.wikimedia.org/T244001 WORKBOARD https://phabricator.wikimedia.org/project/board/3539/

[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

Addshore added a comment. This was picked up on campsite for now with the AC of: > Acceptance criteria ⛺✨ : > Know all of the places that we have package.json files that need to be audited (and their current state in temrs of audit being run) A dump of our repos to consider can

[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

noarave updated the task description. noarave removed the point value for this task. TASK DETAIL https://phabricator.wikimedia.org/T244001 EMAIL PREFERENCES https://phabricator.wikimedia.org/settings/panel/emailpreferences/ To: noarave Cc: wiese, Tonina_Zhelyazkova_WMDE, Pablo-WMDE,

[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

noarave moved this task from Prioritized Tech (prioritised from top to bottom) to Wikidata-Campsite-Iteration-∞ on the Wikidata-Campsite board. noarave edited projects, added Wikidata-Campsite (Wikidata-Campsite-Iteration-∞); removed Wikidata-Campsite. TASK DETAIL

[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

noarave set the point value for this task to "3". TASK DETAIL https://phabricator.wikimedia.org/T244001 EMAIL PREFERENCES https://phabricator.wikimedia.org/settings/panel/emailpreferences/ To: noarave Cc: wiese, Tonina_Zhelyazkova_WMDE, Pablo-WMDE, Ladsgroup, Addshore, WMDE-leszek,

[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

noarave updated the task description. TASK DETAIL https://phabricator.wikimedia.org/T244001 EMAIL PREFERENCES https://phabricator.wikimedia.org/settings/panel/emailpreferences/ To: noarave Cc: wiese, Tonina_Zhelyazkova_WMDE, Pablo-WMDE, Ladsgroup, Addshore, WMDE-leszek, Aklapper, Tarrow,

[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

Addshore updated the task description. TASK DETAIL https://phabricator.wikimedia.org/T244001 EMAIL PREFERENCES https://phabricator.wikimedia.org/settings/panel/emailpreferences/ To: Addshore Cc: wiese, Tonina_Zhelyazkova_WMDE, Pablo-WMDE, Ladsgroup, Addshore, WMDE-leszek, Aklapper, Tarrow,

[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

Addshore updated the task description. TASK DETAIL https://phabricator.wikimedia.org/T244001 EMAIL PREFERENCES https://phabricator.wikimedia.org/settings/panel/emailpreferences/ To: Addshore Cc: wiese, Tonina_Zhelyazkova_WMDE, Pablo-WMDE, Ladsgroup, Addshore, WMDE-leszek, Aklapper, Tarrow,

[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

Addshore moved this task from Incoming to backlog on the wdwb-tech-focus board. Addshore edited projects, added wdwb-tech-focus (backlog); removed wdwb-tech-focus. TASK DETAIL https://phabricator.wikimedia.org/T244001 WORKBOARD https://phabricator.wikimedia.org/project/board/3532/ EMAIL

[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

wiese added a comment. FWIW lerna-audit now (v1.3.1 ) does not show the problems anymore which we encountered earlier (e.g. ) when using it to tend to

[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

Addshore added a comment. In terms of the technical solution, this would only be to serve us a notification, not to do the actual fix. So upon notification then someone would need to go look at the result of the audit and determine what libraries need updating etc. > what is not yet

[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

WMDE-leszek added a comment. Oh, I missed the possible alternative approach, apologies (got too excited this is talking about the "team day" only as the comment mentioned a calendar event) As I will not be able to join the Planning/Story time, my input to the discussion here: If the

[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

Addshore added a comment. In terms of reducing developer toil I think more time would likely be saved for implementing the technical solution rather than having someone manually run npm audit in 20+ places or so ever week or so TASK DETAIL https://phabricator.wikimedia.org/T244001 EMAIL

[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

Addshore added a comment. > If there is no technical/code work involved, I would not see it as a campsite task no more. I think if at estimation the technical solution is small it may be worth it (for more promptly noticing these things). I think the manual solution would need to be

[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

WMDE-leszek added a comment. If the approach boils down to "Patch Tuesday", I'd assign this to management. We've had taken a first stab on introducing this as a "team activity" in the late 2020. Initial implementation failed due to the gallore of other "special" things happening in

[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

Addshore added a comment. We might skip this in story time, as the phrasing of the description now sounds like we just need to make a decision as a team and then write a ticket for doing it (or make a cal event) TASK DETAIL https://phabricator.wikimedia.org/T244001 EMAIL PREFERENCES

[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

Addshore changed the task status from "Stalled" to "Open". Addshore updated the task description. TASK DETAIL https://phabricator.wikimedia.org/T244001 EMAIL PREFERENCES https://phabricator.wikimedia.org/settings/panel/emailpreferences/ To: Addshore Cc: Tonina_Zhelyazkova_WMDE, Pablo-WMDE,

[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

Addshore added a project: wdwb-tech-focus. TASK DETAIL https://phabricator.wikimedia.org/T244001 EMAIL PREFERENCES https://phabricator.wikimedia.org/settings/panel/emailpreferences/ To: Addshore Cc: Tonina_Zhelyazkova_WMDE, Pablo-WMDE, Ladsgroup, Addshore, WMDE-leszek, Aklapper, Tarrow,

[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

WMDE-leszek changed the task status from "Open" to "Stalled". WMDE-leszek added a comment. Potentially will be solved magically by T228527 TASK DETAIL https://phabricator.wikimedia.org/T244001 EMAIL PREFERENCES

[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

Pablo-WMDE added a project: User-Pablo-WMDE. TASK DETAIL https://phabricator.wikimedia.org/T244001 EMAIL PREFERENCES https://phabricator.wikimedia.org/settings/panel/emailpreferences/ To: Pablo-WMDE Cc: Tonina_Zhelyazkova_WMDE, Pablo-WMDE, Ladsgroup, Addshore, WMDE-leszek, Aklapper,

[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

darthmon_wmde edited projects, added Wikidata-Campsite; removed Wikidata-Campsite (Wikidata-Campsite-Iteration-∞). TASK DETAIL https://phabricator.wikimedia.org/T244001 EMAIL PREFERENCES https://phabricator.wikimedia.org/settings/panel/emailpreferences/ To: darthmon_wmde Cc: