[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

[gerritbot]

gerritbot added a comment.


  Change 572828 **abandoned** by Tarrow:
  
  [mediawiki/extensions/Wikibase@master] TR: Add as dev dependency of Wikibase
  
  Reason:
  
  
  
  https://gerrit.wikimedia.org/r/572828

TASK DETAIL
  https://phabricator.wikimedia.org/T244001

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: Addshore, gerritbot
Cc: Jakob_WMDE, wiese, Tonina_Zhelyazkova_WMDE, Pablo-WMDE, Ladsgroup, 
Addshore, WMDE-leszek, Aklapper, Tarrow, Biggs657, Invadibot, Lalamarie69, 
maantietaja, Alter-paule, Beast1978, Un1tY, Akuckartz, Sarai-WMDE, Hook696, 
Iflorez, Kent7301, alaa_wmde, joker88john, CucyNoiD, Nandana, Gaboe420, 
Giuliamocci, Cpaulf30, Lahi, Gq86, Af420, Bsandipan, GoranSMilovanovic, 
QZanden, LawExplorer, Lewizho99, Maathavan, _jensen, rosalieper, Scott_WUaS, 
Jonas, Wikidata-bugs, aude, Lydia_Pintscher, Mbch331
___
Wikidata-bugs mailing list -- wikidata-bugs@lists.wikimedia.org
To unsubscribe send an email to wikidata-bugs-le...@lists.wikimedia.org

[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

[gerritbot]

gerritbot added a comment.


  Change 691265 **merged** by jenkins-bot:
  
  [mediawiki/extensions/WikibaseManifest@master] Dependabot -> Gerrit, Github 
Action
  
  https://gerrit.wikimedia.org/r/691265

TASK DETAIL
  https://phabricator.wikimedia.org/T244001

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: Addshore, gerritbot
Cc: Jakob_WMDE, wiese, Tonina_Zhelyazkova_WMDE, Pablo-WMDE, Ladsgroup, 
Addshore, WMDE-leszek, Aklapper, Tarrow, Biggs657, Invadibot, Lalamarie69, 
maantietaja, Alter-paule, Beast1978, Un1tY, Akuckartz, Sarai-WMDE, Hook696, 
Iflorez, Kent7301, alaa_wmde, joker88john, CucyNoiD, Nandana, Gaboe420, 
Giuliamocci, Cpaulf30, Lahi, Gq86, Af420, Bsandipan, GoranSMilovanovic, 
QZanden, LawExplorer, Lewizho99, Maathavan, _jensen, rosalieper, Scott_WUaS, 
Jonas, Wikidata-bugs, aude, Lydia_Pintscher, Mbch331
___
Wikidata-bugs mailing list -- wikidata-bugs@lists.wikimedia.org
To unsubscribe send an email to wikidata-bugs-le...@lists.wikimedia.org

[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

[gerritbot]

gerritbot added a comment.


  Change 602177 **abandoned** by Ladsgroup:
  
  [mediawiki/extensions/Wikibase@master] Update wikimedia-stylint-config
  
  Reason:
  
  Already done.
  
  https://gerrit.wikimedia.org/r/602177

TASK DETAIL
  https://phabricator.wikimedia.org/T244001

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: Addshore, gerritbot
Cc: Jakob_WMDE, wiese, Tonina_Zhelyazkova_WMDE, Pablo-WMDE, Ladsgroup, 
Addshore, WMDE-leszek, Aklapper, Tarrow, Invadibot, Lalamarie69, maantietaja, 
Alter-paule, Beast1978, Un1tY, Akuckartz, Sarai-WMDE, Hook696, Iflorez, 
Kent7301, alaa_wmde, joker88john, CucyNoiD, Nandana, Gaboe420, Giuliamocci, 
Cpaulf30, Lahi, Gq86, Af420, Bsandipan, GoranSMilovanovic, QZanden, 
LawExplorer, Lewizho99, Maathavan, _jensen, rosalieper, Scott_WUaS, Jonas, 
Wikidata-bugs, aude, Lydia_Pintscher, Mbch331
___
Wikidata-bugs mailing list -- wikidata-bugs@lists.wikimedia.org
To unsubscribe send an email to wikidata-bugs-le...@lists.wikimedia.org

[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

[gerritbot]

gerritbot added a comment.


  Change 602175 **abandoned** by Ladsgroup:
  
  [mediawiki/extensions/Wikibase@master] TR: Update dependencies to pick up 
security fixes
  
  Reason:
  
  Already done.
  
  https://gerrit.wikimedia.org/r/602175

TASK DETAIL
  https://phabricator.wikimedia.org/T244001

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: Addshore, gerritbot
Cc: Jakob_WMDE, wiese, Tonina_Zhelyazkova_WMDE, Pablo-WMDE, Ladsgroup, 
Addshore, WMDE-leszek, Aklapper, Tarrow, Invadibot, Lalamarie69, maantietaja, 
Alter-paule, Beast1978, Un1tY, Akuckartz, Sarai-WMDE, Hook696, Iflorez, 
Kent7301, alaa_wmde, joker88john, CucyNoiD, Nandana, Gaboe420, Giuliamocci, 
Cpaulf30, Lahi, Gq86, Af420, Bsandipan, GoranSMilovanovic, QZanden, 
LawExplorer, Lewizho99, Maathavan, _jensen, rosalieper, Scott_WUaS, Jonas, 
Wikidata-bugs, aude, Lydia_Pintscher, Mbch331
___
Wikidata-bugs mailing list -- wikidata-bugs@lists.wikimedia.org
To unsubscribe send an email to wikidata-bugs-le...@lists.wikimedia.org

[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

[Addshore]

Addshore closed this task as "Resolved".
Addshore added a comment.


  Investigation is done, state is known, and a potential next step has been 
explored and will be followed up in another ticket (that I will backlink)

TASK DETAIL
  https://phabricator.wikimedia.org/T244001

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: Addshore
Cc: Jakob_WMDE, wiese, Tonina_Zhelyazkova_WMDE, Pablo-WMDE, Ladsgroup, 
Addshore, WMDE-leszek, Aklapper, Tarrow, Invadibot, Lalamarie69, maantietaja, 
Alter-paule, Beast1978, Un1tY, Akuckartz, Sarai-WMDE, Hook696, Iflorez, 
Kent7301, alaa_wmde, joker88john, CucyNoiD, Nandana, Gaboe420, Giuliamocci, 
Cpaulf30, Lahi, Gq86, Af420, Bsandipan, GoranSMilovanovic, QZanden, 
LawExplorer, Lewizho99, Maathavan, _jensen, rosalieper, Scott_WUaS, Jonas, 
Wikidata-bugs, aude, Lydia_Pintscher, Mbch331
___
Wikidata-bugs mailing list -- wikidata-bugs@lists.wikimedia.org
To unsubscribe send an email to wikidata-bugs-le...@lists.wikimedia.org

[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

[Addshore]

Addshore added a comment.


  I looked once again at the draft attempt at creating an action for this (was 
https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Wikibase/+/626687)
  It is now reimagined in the change above which has been tested.
  
  My bot account (Addbot) is currently used.
  We can trial this on the WikibaseManifest extension, see how it goes, and 
maybe roll this out more later.

TASK DETAIL
  https://phabricator.wikimedia.org/T244001

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: Addshore
Cc: Jakob_WMDE, wiese, Tonina_Zhelyazkova_WMDE, Pablo-WMDE, Ladsgroup, 
Addshore, WMDE-leszek, Aklapper, Tarrow, Invadibot, Lalamarie69, maantietaja, 
Alter-paule, Beast1978, Un1tY, Akuckartz, Sarai-WMDE, Hook696, Iflorez, 
Kent7301, alaa_wmde, joker88john, CucyNoiD, Nandana, Gaboe420, Giuliamocci, 
Cpaulf30, Lahi, Gq86, Af420, Bsandipan, GoranSMilovanovic, QZanden, 
LawExplorer, Lewizho99, Maathavan, _jensen, rosalieper, Scott_WUaS, Jonas, 
Wikidata-bugs, aude, Lydia_Pintscher, Mbch331
___
Wikidata-bugs mailing list -- wikidata-bugs@lists.wikimedia.org
To unsubscribe send an email to wikidata-bugs-le...@lists.wikimedia.org

[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

[gerritbot]

gerritbot added a comment.


  Change 691265 had a related patch set uploaded (by Addshore; author: 
Addshore):
  
  [mediawiki/extensions/WikibaseManifest@master] Dependabot -> Gerrit, Github 
Action
  
  https://gerrit.wikimedia.org/r/691265

TASK DETAIL
  https://phabricator.wikimedia.org/T244001

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: Addshore, gerritbot
Cc: Jakob_WMDE, wiese, Tonina_Zhelyazkova_WMDE, Pablo-WMDE, Ladsgroup, 
Addshore, WMDE-leszek, Aklapper, Tarrow, Invadibot, Lalamarie69, maantietaja, 
Alter-paule, Beast1978, Un1tY, Akuckartz, Sarai-WMDE, Hook696, Iflorez, 
Kent7301, alaa_wmde, joker88john, CucyNoiD, Nandana, Gaboe420, Giuliamocci, 
Cpaulf30, Lahi, Gq86, Af420, Bsandipan, GoranSMilovanovic, QZanden, 
LawExplorer, Lewizho99, Maathavan, _jensen, rosalieper, Scott_WUaS, Jonas, 
Wikidata-bugs, aude, Lydia_Pintscher, Mbch331
___
Wikidata-bugs mailing list -- wikidata-bugs@lists.wikimedia.org
To unsubscribe send an email to wikidata-bugs-le...@lists.wikimedia.org

[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

[Addshore]

Addshore claimed this task.

TASK DETAIL
  https://phabricator.wikimedia.org/T244001

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: Addshore
Cc: Jakob_WMDE, wiese, Tonina_Zhelyazkova_WMDE, Pablo-WMDE, Ladsgroup, 
Addshore, WMDE-leszek, Aklapper, Tarrow, Invadibot, maantietaja, Alter-paule, 
Beast1978, Un1tY, Akuckartz, Sarai-WMDE, Hook696, Iflorez, Kent7301, alaa_wmde, 
joker88john, CucyNoiD, Nandana, Gaboe420, Giuliamocci, Cpaulf30, Lahi, Gq86, 
Af420, Bsandipan, GoranSMilovanovic, QZanden, LawExplorer, Lewizho99, 
Maathavan, _jensen, rosalieper, Scott_WUaS, Jonas, Wikidata-bugs, aude, 
Lydia_Pintscher, Mbch331
___
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs

[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

[Addshore]

Addshore moved this task from backlog to Active on the wdwb-tech-focus board.
Addshore edited projects, added wdwb-tech-focus; removed wdwb-tech-focus 
(backlog).

TASK DETAIL
  https://phabricator.wikimedia.org/T244001

WORKBOARD
  https://phabricator.wikimedia.org/project/board/3532/

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: Addshore
Cc: Jakob_WMDE, wiese, Tonina_Zhelyazkova_WMDE, Pablo-WMDE, Ladsgroup, 
Addshore, WMDE-leszek, Aklapper, Tarrow, maantietaja, Alter-paule, Beast1978, 
Un1tY, Akuckartz, Sarai-WMDE, Hook696, Iflorez, Kent7301, alaa_wmde, 
joker88john, CucyNoiD, Nandana, Gaboe420, Giuliamocci, Cpaulf30, Lahi, Gq86, 
Af420, Bsandipan, GoranSMilovanovic, QZanden, LawExplorer, Lewizho99, 
Maathavan, _jensen, rosalieper, Scott_WUaS, Jonas, abian, Wikidata-bugs, aude, 
Lydia_Pintscher, Mbch331
___
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs

[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

[Jakob_WMDE]

Jakob_WMDE removed Jakob_WMDE as the assignee of this task.
Jakob_WMDE moved this task from Doing to Peer Review on the Wikidata-Campsite 
(Wikidata-Campsite-Iteration-∞) board.
Jakob_WMDE added a comment.


  I went through the list provided in T244001#6904372 
 and for each of them 
checked whether they contained one or more package.json files and whether the 
dependencies in that file are automatically audited. For the Github ones I only 
checked whether Dependabot is //enabled//. (Not sure if there is a way to have 
it enabled but not do anything useful.) In one case (wikit) I know that it's 
enabled but not auditing nested packages and marked that in the spreadsheet. 
For the gerrit ones I checked 
https://gerrit.wikimedia.org/r/plugins/gitiles/labs/libraryupgrader/config/+/refs/heads/master/repositories.json
 which contained very few of the repositories. I'm not sure whether I'm missing 
something there. https://libraryupgrader2.wmcloud.org/vulns/npm?branch=master 
contains some repositories which aren't the the aforementioned 
repositories.json config.
  
  Spreadsheet: 
https://docs.google.com/spreadsheets/d/1ZAo5o6aTyfSRuMoQWjwoXeWTk-m61Py8_k46VZw_5yM/edit

TASK DETAIL
  https://phabricator.wikimedia.org/T244001

WORKBOARD
  https://phabricator.wikimedia.org/project/board/3539/

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: Jakob_WMDE
Cc: Jakob_WMDE, wiese, Tonina_Zhelyazkova_WMDE, Pablo-WMDE, Ladsgroup, 
Addshore, WMDE-leszek, Aklapper, Tarrow, maantietaja, Alter-paule, Beast1978, 
Un1tY, Akuckartz, Sarai-WMDE, Hook696, Iflorez, Kent7301, alaa_wmde, 
joker88john, CucyNoiD, Nandana, Gaboe420, Giuliamocci, Cpaulf30, Lahi, Gq86, 
Af420, Bsandipan, GoranSMilovanovic, QZanden, LawExplorer, Lewizho99, 
Maathavan, _jensen, rosalieper, Scott_WUaS, Jonas, abian, Wikidata-bugs, aude, 
Lydia_Pintscher, Mbch331
___
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs

[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

[Jakob_WMDE]

Jakob_WMDE claimed this task.
Jakob_WMDE moved this task from To Do (prioritised from top to bottom) to Doing 
on the Wikidata-Campsite (Wikidata-Campsite-Iteration-∞) board.

TASK DETAIL
  https://phabricator.wikimedia.org/T244001

WORKBOARD
  https://phabricator.wikimedia.org/project/board/3539/

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: Jakob_WMDE
Cc: wiese, Tonina_Zhelyazkova_WMDE, Pablo-WMDE, Ladsgroup, Addshore, 
WMDE-leszek, Aklapper, Tarrow, maantietaja, Alter-paule, Beast1978, Un1tY, 
Akuckartz, Sarai-WMDE, Hook696, Iflorez, Kent7301, alaa_wmde, joker88john, 
CucyNoiD, Nandana, Gaboe420, Giuliamocci, Cpaulf30, Lahi, Gq86, Af420, 
Bsandipan, GoranSMilovanovic, QZanden, LawExplorer, Lewizho99, Maathavan, 
_jensen, rosalieper, Scott_WUaS, Jonas, abian, Wikidata-bugs, aude, 
Lydia_Pintscher, Mbch331
___
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs

[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

[Addshore]

Addshore added a comment.


  This was picked up on campsite for now with the AC of:
  
  > Acceptance criteria ⛺✨ :
  >  Know all of the places that we have package.json files that need to be 
audited (and their current state in temrs of audit being run)
  
  A dump of our repos to consider can be found at 
https://phabricator.wikimedia.org/P14784

TASK DETAIL
  https://phabricator.wikimedia.org/T244001

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: Addshore
Cc: wiese, Tonina_Zhelyazkova_WMDE, Pablo-WMDE, Ladsgroup, Addshore, 
WMDE-leszek, Aklapper, Tarrow, maantietaja, Alter-paule, Beast1978, Un1tY, 
Akuckartz, Sarai-WMDE, Hook696, Iflorez, Kent7301, alaa_wmde, joker88john, 
CucyNoiD, Nandana, Gaboe420, Giuliamocci, Cpaulf30, Lahi, Gq86, Af420, 
Bsandipan, GoranSMilovanovic, QZanden, LawExplorer, Lewizho99, Maathavan, 
_jensen, rosalieper, Scott_WUaS, Jonas, abian, Wikidata-bugs, aude, 
Lydia_Pintscher, Mbch331
___
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs

[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

[noarave]

noarave updated the task description.
noarave removed the point value for this task.

TASK DETAIL
  https://phabricator.wikimedia.org/T244001

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: noarave
Cc: wiese, Tonina_Zhelyazkova_WMDE, Pablo-WMDE, Ladsgroup, Addshore, 
WMDE-leszek, Aklapper, Tarrow, maantietaja, Alter-paule, Beast1978, Un1tY, 
Akuckartz, Sarai-WMDE, Hook696, Iflorez, Kent7301, alaa_wmde, joker88john, 
CucyNoiD, Nandana, Gaboe420, Giuliamocci, Cpaulf30, Lahi, Gq86, Af420, 
Bsandipan, GoranSMilovanovic, QZanden, LawExplorer, Lewizho99, Maathavan, 
_jensen, rosalieper, Scott_WUaS, Jonas, abian, Wikidata-bugs, aude, 
Lydia_Pintscher, Mbch331
___
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs

[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

[noarave]

noarave moved this task from Prioritized Tech (prioritised from top to bottom) 
to Wikidata-Campsite-Iteration-∞ on the Wikidata-Campsite board.
noarave edited projects, added Wikidata-Campsite 
(Wikidata-Campsite-Iteration-∞); removed Wikidata-Campsite.

TASK DETAIL
  https://phabricator.wikimedia.org/T244001

WORKBOARD
  https://phabricator.wikimedia.org/project/board/3402/

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: noarave
Cc: wiese, Tonina_Zhelyazkova_WMDE, Pablo-WMDE, Ladsgroup, Addshore, 
WMDE-leszek, Aklapper, Tarrow, maantietaja, Alter-paule, Beast1978, Un1tY, 
Akuckartz, Sarai-WMDE, Hook696, Iflorez, Kent7301, alaa_wmde, joker88john, 
CucyNoiD, Nandana, Gaboe420, Giuliamocci, Cpaulf30, Lahi, Gq86, Af420, 
Bsandipan, GoranSMilovanovic, QZanden, LawExplorer, Lewizho99, Maathavan, 
_jensen, rosalieper, Scott_WUaS, Jonas, abian, Wikidata-bugs, aude, 
Lydia_Pintscher, Mbch331
___
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs

[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

[noarave]

noarave set the point value for this task to "3".

TASK DETAIL
  https://phabricator.wikimedia.org/T244001

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: noarave
Cc: wiese, Tonina_Zhelyazkova_WMDE, Pablo-WMDE, Ladsgroup, Addshore, 
WMDE-leszek, Aklapper, Tarrow, maantietaja, Alter-paule, Beast1978, Un1tY, 
Akuckartz, Sarai-WMDE, Hook696, Kent7301, joker88john, CucyNoiD, Nandana, 
Gaboe420, Giuliamocci, Cpaulf30, Lahi, Gq86, Af420, Bsandipan, 
GoranSMilovanovic, QZanden, LawExplorer, Lewizho99, Maathavan, _jensen, 
rosalieper, Scott_WUaS, Jonas, abian, Wikidata-bugs, aude, Lydia_Pintscher, 
Mbch331
___
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs

[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

[noarave]

noarave updated the task description.

TASK DETAIL
  https://phabricator.wikimedia.org/T244001

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: noarave
Cc: wiese, Tonina_Zhelyazkova_WMDE, Pablo-WMDE, Ladsgroup, Addshore, 
WMDE-leszek, Aklapper, Tarrow, maantietaja, Alter-paule, Beast1978, Un1tY, 
Akuckartz, Sarai-WMDE, Hook696, Kent7301, joker88john, CucyNoiD, Nandana, 
Gaboe420, Giuliamocci, Cpaulf30, Lahi, Gq86, Af420, Bsandipan, 
GoranSMilovanovic, QZanden, LawExplorer, Lewizho99, Maathavan, _jensen, 
rosalieper, Scott_WUaS, Jonas, abian, Wikidata-bugs, aude, Lydia_Pintscher, 
Mbch331
___
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs

[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

[Addshore]

Addshore updated the task description.

TASK DETAIL
  https://phabricator.wikimedia.org/T244001

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: Addshore
Cc: wiese, Tonina_Zhelyazkova_WMDE, Pablo-WMDE, Ladsgroup, Addshore, 
WMDE-leszek, Aklapper, Tarrow, maantietaja, Alter-paule, Beast1978, Un1tY, 
Akuckartz, Sarai-WMDE, Hook696, Kent7301, joker88john, CucyNoiD, Nandana, 
Gaboe420, Giuliamocci, Cpaulf30, Lahi, Gq86, Af420, Bsandipan, 
GoranSMilovanovic, QZanden, LawExplorer, Lewizho99, Maathavan, _jensen, 
rosalieper, Scott_WUaS, Jonas, abian, Wikidata-bugs, aude, Lydia_Pintscher, 
Mbch331
___
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs

[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

[Addshore]

Addshore updated the task description.

TASK DETAIL
  https://phabricator.wikimedia.org/T244001

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: Addshore
Cc: wiese, Tonina_Zhelyazkova_WMDE, Pablo-WMDE, Ladsgroup, Addshore, 
WMDE-leszek, Aklapper, Tarrow, maantietaja, Alter-paule, Beast1978, Un1tY, 
Akuckartz, Sarai-WMDE, Hook696, Kent7301, joker88john, CucyNoiD, Nandana, 
Gaboe420, Giuliamocci, Cpaulf30, Lahi, Gq86, Af420, Bsandipan, 
GoranSMilovanovic, QZanden, LawExplorer, Lewizho99, Maathavan, _jensen, 
rosalieper, Scott_WUaS, Jonas, abian, Wikidata-bugs, aude, Lydia_Pintscher, 
Mbch331
___
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs

[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

[Addshore]

Addshore moved this task from Incoming to backlog on the wdwb-tech-focus board.
Addshore edited projects, added wdwb-tech-focus (backlog); removed 
wdwb-tech-focus.

TASK DETAIL
  https://phabricator.wikimedia.org/T244001

WORKBOARD
  https://phabricator.wikimedia.org/project/board/3532/

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: Addshore
Cc: wiese, Tonina_Zhelyazkova_WMDE, Pablo-WMDE, Ladsgroup, Addshore, 
WMDE-leszek, Aklapper, Tarrow, maantietaja, Alter-paule, Beast1978, Un1tY, 
Akuckartz, Sarai-WMDE, Hook696, Kent7301, joker88john, CucyNoiD, Nandana, 
Gaboe420, Giuliamocci, Cpaulf30, Lahi, Gq86, Af420, Bsandipan, 
GoranSMilovanovic, QZanden, LawExplorer, Lewizho99, Maathavan, _jensen, 
rosalieper, Scott_WUaS, Jonas, abian, Wikidata-bugs, aude, Lydia_Pintscher, 
Mbch331
___
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs

[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

[wiese]

wiese added a comment.


  FWIW lerna-audit now (v1.3.1 
) does not show the 
problems anymore which we encountered earlier (e.g. 
)
 when using it to tend to monorepos.

TASK DETAIL
  https://phabricator.wikimedia.org/T244001

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: wiese
Cc: wiese, Tonina_Zhelyazkova_WMDE, Pablo-WMDE, Ladsgroup, Addshore, 
WMDE-leszek, Aklapper, Tarrow, maantietaja, Alter-paule, Beast1978, Un1tY, 
Akuckartz, Sarai-WMDE, Hook696, Kent7301, joker88john, CucyNoiD, Nandana, 
Gaboe420, Giuliamocci, Cpaulf30, Lahi, Gq86, Af420, Bsandipan, 
GoranSMilovanovic, QZanden, LawExplorer, Lewizho99, Maathavan, _jensen, 
rosalieper, Scott_WUaS, Jonas, abian, Wikidata-bugs, aude, Lydia_Pintscher, 
Mbch331
___
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs

[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

[Addshore]

Addshore added a comment.


  In terms of the technical solution, this would only be to serve us a 
notification, not to do the actual fix.
  So upon notification then someone would need to go look at the result of the 
audit and determine what libraries need updating etc.
  
  > what is not yet defined is what to do in cases where trivial automated fix 
are not sufficient
  
  Thus this bit would be done on a case by case basis.
  
  The jenkins job for the root of wikibase has actually been running for over a 
year now!
  
https://integration.wikimedia.org/ci/job/wikibase-daily-npm-audit-daily-node10-npmaudit-docker
  I actually can't see that it has failed all year (probably because library 
upgrader also runs on the root of the repo updating the easy things that can be)

TASK DETAIL
  https://phabricator.wikimedia.org/T244001

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: Addshore
Cc: Tonina_Zhelyazkova_WMDE, Pablo-WMDE, Ladsgroup, Addshore, WMDE-leszek, 
Aklapper, Tarrow, wiese, Alter-paule, Beast1978, Un1tY, Akuckartz, Sarai-WMDE, 
Hook696, Kent7301, joker88john, CucyNoiD, Nandana, Gaboe420, Giuliamocci, 
Cpaulf30, Lahi, Gq86, Af420, Bsandipan, GoranSMilovanovic, QZanden, 
LawExplorer, Lewizho99, Maathavan, _jensen, rosalieper, Scott_WUaS, Jonas, 
abian, Wikidata-bugs, aude, Lydia_Pintscher, Mbch331
___
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs

[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

[WMDE-leszek]

WMDE-leszek added a comment.


  Oh, I missed the possible alternative approach, apologies (got too excited 
this is talking about the "team day" only as the comment mentioned a calendar 
event)
  
  As I will not be able to join the Planning/Story time, my input to the 
discussion here: If the "implementing the technical solution" is preferred what 
is not yet defined is what to do in cases where trivial automated fix are not 
sufficient (basically the essential reason to actually have really people look 
into those deps)

TASK DETAIL
  https://phabricator.wikimedia.org/T244001

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: WMDE-leszek
Cc: Tonina_Zhelyazkova_WMDE, Pablo-WMDE, Ladsgroup, Addshore, WMDE-leszek, 
Aklapper, Tarrow, wiese, Alter-paule, Beast1978, Un1tY, Akuckartz, Sarai-WMDE, 
Hook696, Kent7301, joker88john, CucyNoiD, Nandana, Gaboe420, Giuliamocci, 
Cpaulf30, Lahi, Gq86, Af420, Bsandipan, GoranSMilovanovic, QZanden, 
LawExplorer, Lewizho99, Maathavan, _jensen, rosalieper, Scott_WUaS, Jonas, 
abian, Wikidata-bugs, aude, Lydia_Pintscher, Mbch331
___
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs

[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

[Addshore]

Addshore added a comment.


  In terms of reducing developer toil I think more time would likely be saved 
for implementing the technical solution rather than having someone manually run 
npm audit in 20+ places or so ever week or so

TASK DETAIL
  https://phabricator.wikimedia.org/T244001

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: Addshore
Cc: Tonina_Zhelyazkova_WMDE, Pablo-WMDE, Ladsgroup, Addshore, WMDE-leszek, 
Aklapper, Tarrow, wiese, Alter-paule, Beast1978, Un1tY, Akuckartz, Sarai-WMDE, 
Hook696, Kent7301, joker88john, CucyNoiD, Nandana, Gaboe420, Giuliamocci, 
Cpaulf30, Lahi, Gq86, Af420, Bsandipan, GoranSMilovanovic, QZanden, 
LawExplorer, Lewizho99, Maathavan, _jensen, rosalieper, Scott_WUaS, Jonas, 
abian, Wikidata-bugs, aude, Lydia_Pintscher, Mbch331
___
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs

[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

[Addshore]

Addshore added a comment.


  > If there is no technical/code work involved, I would not see it as a 
campsite task no more.
  
  I think if at estimation the technical solution is small it may be worth it 
(for more promptly noticing these things).
  I think the manual solution would need to be facilitated with a list (such as 
the one we discussed in a retro today).
  @WMDE-leszek I was going to propose asking the wider team to see if we as a 
whole would be happy with just an email reminder to do it.

TASK DETAIL
  https://phabricator.wikimedia.org/T244001

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: Addshore
Cc: Tonina_Zhelyazkova_WMDE, Pablo-WMDE, Ladsgroup, Addshore, WMDE-leszek, 
Aklapper, Tarrow, wiese, Alter-paule, Beast1978, Un1tY, Akuckartz, Sarai-WMDE, 
Hook696, Kent7301, joker88john, CucyNoiD, Nandana, Gaboe420, Giuliamocci, 
Cpaulf30, Lahi, Gq86, Af420, Bsandipan, GoranSMilovanovic, QZanden, 
LawExplorer, Lewizho99, Maathavan, _jensen, rosalieper, Scott_WUaS, Jonas, 
abian, Wikidata-bugs, aude, Lydia_Pintscher, Mbch331
___
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs

[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

[WMDE-leszek]

WMDE-leszek added a comment.


  If the approach boils down to "Patch Tuesday", I'd assign this to management. 
We've had taken a first stab on introducing this as a "team activity" in the 
late 2020. Initial implementation failed due to the gallore of other "special" 
things happening in Deecember, but kickstarting it again would be easy and 
fairly non controversial.
  If there is no technical/code work involved, I would not see it as a campsite 
task no more.

TASK DETAIL
  https://phabricator.wikimedia.org/T244001

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: WMDE-leszek
Cc: Tonina_Zhelyazkova_WMDE, Pablo-WMDE, Ladsgroup, Addshore, WMDE-leszek, 
Aklapper, Tarrow, wiese, Alter-paule, Beast1978, Un1tY, Akuckartz, Sarai-WMDE, 
Hook696, Kent7301, joker88john, CucyNoiD, Nandana, Gaboe420, Giuliamocci, 
Cpaulf30, Lahi, Gq86, Af420, Bsandipan, GoranSMilovanovic, QZanden, 
LawExplorer, Lewizho99, Maathavan, _jensen, rosalieper, Scott_WUaS, Jonas, 
abian, Wikidata-bugs, aude, Lydia_Pintscher, Mbch331
___
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs

[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

[Addshore]

Addshore added a comment.


  We might skip this in story time, as the phrasing of the description now 
sounds like we just need to make a decision as a team and then write a ticket 
for doing it (or make a cal event)

TASK DETAIL
  https://phabricator.wikimedia.org/T244001

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: Addshore
Cc: Tonina_Zhelyazkova_WMDE, Pablo-WMDE, Ladsgroup, Addshore, WMDE-leszek, 
Aklapper, Tarrow, wiese, Alter-paule, Beast1978, Un1tY, Akuckartz, Sarai-WMDE, 
Hook696, Kent7301, joker88john, CucyNoiD, Nandana, Gaboe420, Giuliamocci, 
Cpaulf30, Lahi, Gq86, Af420, Bsandipan, GoranSMilovanovic, QZanden, 
LawExplorer, Lewizho99, Maathavan, _jensen, rosalieper, Scott_WUaS, Jonas, 
abian, Wikidata-bugs, aude, Lydia_Pintscher, Mbch331
___
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs

[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

[Addshore]

Addshore changed the task status from "Stalled" to "Open".
Addshore updated the task description.

TASK DETAIL
  https://phabricator.wikimedia.org/T244001

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: Addshore
Cc: Tonina_Zhelyazkova_WMDE, Pablo-WMDE, Ladsgroup, Addshore, WMDE-leszek, 
Aklapper, Tarrow, wiese, Alter-paule, Beast1978, Un1tY, Akuckartz, Sarai-WMDE, 
Hook696, Kent7301, joker88john, CucyNoiD, Nandana, Gaboe420, Giuliamocci, 
Cpaulf30, Lahi, Gq86, Af420, Bsandipan, GoranSMilovanovic, QZanden, 
LawExplorer, Lewizho99, Maathavan, _jensen, rosalieper, Scott_WUaS, Jonas, 
abian, Wikidata-bugs, aude, Lydia_Pintscher, Mbch331
___
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs

[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

[Addshore]

Addshore added a project: wdwb-tech-focus.

TASK DETAIL
  https://phabricator.wikimedia.org/T244001

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: Addshore
Cc: Tonina_Zhelyazkova_WMDE, Pablo-WMDE, Ladsgroup, Addshore, WMDE-leszek, 
Aklapper, Tarrow, wiese, Alter-paule, Beast1978, Un1tY, Akuckartz, Sarai-WMDE, 
Hook696, Kent7301, joker88john, CucyNoiD, Nandana, Gaboe420, Giuliamocci, 
Cpaulf30, Lahi, Gq86, Af420, Bsandipan, GoranSMilovanovic, QZanden, 
LawExplorer, Lewizho99, Maathavan, _jensen, rosalieper, Scott_WUaS, Jonas, 
Wikidata-bugs, aude, Lydia_Pintscher, Mbch331
___
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs

[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

[WMDE-leszek]

WMDE-leszek changed the task status from "Open" to "Stalled".
WMDE-leszek added a comment.


  Potentially will be solved magically by T228527 


TASK DETAIL
  https://phabricator.wikimedia.org/T244001

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: WMDE-leszek
Cc: Tonina_Zhelyazkova_WMDE, Pablo-WMDE, Ladsgroup, Addshore, WMDE-leszek, 
Aklapper, Tarrow, Alter-paule, Beast1978, Un1tY, Akuckartz, Sarai-WMDE, 
Hook696, Kent7301, joker88john, CucyNoiD, Nandana, Gaboe420, Giuliamocci, 
Cpaulf30, Lahi, Gq86, Af420, Bsandipan, GoranSMilovanovic, QZanden, 
LawExplorer, Lewizho99, Maathavan, _jensen, rosalieper, Scott_WUaS, Jonas, 
Wikidata-bugs, aude, Lydia_Pintscher, Mbch331
___
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs

[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

[Pablo-WMDE]

Pablo-WMDE added a project: User-Pablo-WMDE.

TASK DETAIL
  https://phabricator.wikimedia.org/T244001

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: Pablo-WMDE
Cc: Tonina_Zhelyazkova_WMDE, Pablo-WMDE, Ladsgroup, Addshore, WMDE-leszek, 
Aklapper, Tarrow, Alter-paule, Beast1978, Un1tY, Akuckartz, Sarai-WMDE, 
Hook696, Kent7301, joker88john, CucyNoiD, Nandana, Gaboe420, Giuliamocci, 
Cpaulf30, Lahi, Gq86, Af420, Bsandipan, GoranSMilovanovic, QZanden, 
LawExplorer, Lewizho99, Maathavan, _jensen, rosalieper, Scott_WUaS, Jonas, 
Wikidata-bugs, aude, Lydia_Pintscher, Mbch331
___
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs

[Wikidata-bugs] [Maniphest] T244001: Investigate reminding people to update `npm audit`

[darthmon_wmde]

darthmon_wmde edited projects, added Wikidata-Campsite; removed 
Wikidata-Campsite (Wikidata-Campsite-Iteration-∞).

TASK DETAIL
  https://phabricator.wikimedia.org/T244001

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: darthmon_wmde
Cc: Tonina_Zhelyazkova_WMDE, Pablo-WMDE, Ladsgroup, Addshore, WMDE-leszek, 
Aklapper, Tarrow, Alter-paule, Beast1978, Un1tY, Akuckartz, Sarai-WMDE, 
Hook696, darthmon_wmde, Kent7301, joker88john, CucyNoiD, Nandana, Gaboe420, 
Giuliamocci, Cpaulf30, Lahi, Gq86, Af420, Bsandipan, GoranSMilovanovic, 
QZanden, LawExplorer, Lewizho99, Maathavan, _jensen, rosalieper, Scott_WUaS, 
Jonas, Wikidata-bugs, aude, Lydia_Pintscher, Mbch331, Iflorez, alaa_wmde
___
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs