[Wikitech-l] Security and maintenance release: 1.31.4 / 1.32.4 / 1.33.1

[Sam Reed]

I would like to announce the release of MediaWiki 1.33.1, 1.32.4 and 1.31.4!

In a change to normal proceedings, the security patches are already merged
to
the various branches. This was due to the low severity of the patches. This
is
therefore the reason no pre-release announcement was sent.

It is noted that these patches are fairly large in comparison to normal,
this is
due to the splitting of some schema change patches from a single file to
multiple files to attempt to mitigate some migration issues identified in
T227662.

This release also serves as a maintenance release for these branches.

== Security fixes ==
* (T230402, CVE-2019-16738) SECURITY: Add permission check for suppressed
  account to Special:Redirect.

== Links to all mentioned tasks ==
* https://phabricator.wikimedia.org/T230402
* https://phabricator.wikimedia.org/T227662

== Release notes ==

Full release notes for 1.31.4:
https://phabricator.wikimedia.org/diffusion/MW/browse/REL1_31/RELEASE-NOTES-1.31
https://www.mediawiki.org/wiki/Release_notes/1.31

Full release notes for 1.32.4:
https://phabricator.wikimedia.org/diffusion/MW/browse/REL1_32/RELEASE-NOTES-1.32
https://www.mediawiki.org/wiki/Release_notes/1.32

Full release notes for 1.33.1:
https://phabricator.wikimedia.org/diffusion/MW/browse/REL1_33/RELEASE-NOTES-1.33
https://www.mediawiki.org/wiki/Release_notes/1.33

For information about how to upgrade, see


**
Download:
https://releases.wikimedia.org/mediawiki/1.31/mediawiki-1.31.4.tar.gz

Download without bundled extensions:
https://releases.wikimedia.org/mediawiki/1.31/mediawiki-core-1.31.4.tar.gz

Patch to previous version (1.31.3):
https://releases.wikimedia.org/mediawiki/1.31/mediawiki-1.31.4.patch.gz

GPG signatures:
https://releases.wikimedia.org/mediawiki/1.31/mediawiki-core-1.31.4.tar.gz.sig
https://releases.wikimedia.org/mediawiki/1.31/mediawiki-1.31.4.tar.gz.sig
https://releases.wikimedia.org/mediawiki/1.31/mediawiki-1.31.4.patch.gz.sig

Public keys:
https://www.mediawiki.org/keys/keys.html

**
Download:
https://releases.wikimedia.org/mediawiki/1.32/mediawiki-1.32.4.tar.gz

Download without bundled extensions:
https://releases.wikimedia.org/mediawiki/1.32/mediawiki-core-1.32.4.tar.gz

Patch to previous version (1.32.3):
https://releases.wikimedia.org/mediawiki/1.32/mediawiki-1.32.4.patch.gz

GPG signatures:
https://releases.wikimedia.org/mediawiki/1.32/mediawiki-core-1.32.4.tar.gz.sig
https://releases.wikimedia.org/mediawiki/1.32/mediawiki-1.32.4.tar.gz.sig
https://releases.wikimedia.org/mediawiki/1.32/mediawiki-1.32.4.patch.gz.sig

Public keys:
https://www.mediawiki.org/keys/keys.html

**
Download:
https://releases.wikimedia.org/mediawiki/1.33/mediawiki-1.33.1.tar.gz

Download without bundled extensions:
https://releases.wikimedia.org/mediawiki/1.33/mediawiki-core-1.33.1.tar.gz

Patch to previous version (1.33.0):
https://releases.wikimedia.org/mediawiki/1.33/mediawiki-1.33.1.patch.gz

GPG signatures:
https://releases.wikimedia.org/mediawiki/1.33/mediawiki-core-1.33.1.tar.gz.sig
https://releases.wikimedia.org/mediawiki/1.33/mediawiki-1.33.1.tar.gz.sig
https://releases.wikimedia.org/mediawiki/1.33/mediawiki-1.33.1.patch.gz.sig

Public keys:
https://www.mediawiki.org/keys/keys.html
___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l

[Wikitech-l] Live Incident: Tools.wmflabs.org

[RhinosF1 -]

Hello all,

Please note that all tools.wmflabs.org tools are currently down.

See https://phabricator.wikimedia.org/T234834 for live updates.

Thanks,
RhinosF1
FOSS Developer
-- 
Thanks,
RhinosF1
Mediawiki System Administrator
Miraheze
___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l

Re: [Wikitech-l] Dropping PHPUnit 4 support

[Brad Jorsch (Anomie)]

On Sun, Oct 6, 2019 at 4:35 AM Daimona  wrote:

> And in turn, this happens because MediaWikiUnitTestCase validates the
> directory structure, but some repos do not comply.


That is not the only reason a test might use PHPUnit\Framework\TestCase.
Another is that libraries (and proto-libraries in core's includes/libs/
directory) intended for use independent of MediaWiki can't use a
MediaWiki-specific test case base class.

-- 
Brad Jorsch (Anomie)
Senior Software Engineer
Wikimedia Foundation
___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l

[Wikitech-l] s1 (enwiki) primary master switchover (read-only required) 14th Nov 05:00 AM UTC

[Manuel Arostegui]

Hello,
We have requested a 30 minutes read-only window for s1 (enwiki) (T234801)
for the 14th November from 05:00-05:30 AM UTC to switchover that section
primary database master (T234800)

db1067 is an old host and out of warranty that will be decommissioned
(T217396). The new master will be db1083

We are going to do this on Thursday 14th Nov from 05:00 to 05:30 AM UTC (we
do not expect to use the 30 minutes window, if everything goes as expected).

Impact: Writes will be blocked on the following wiki:
enwiki

Reads will remain unaffected.

Communication will happen at #wikimedia-operations
If you are around at that time and want to help with the monitoring, please
join us!

Thanks
___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l