[Wikitech-l] [MediaWiki-announce] MediaWiki 1.31.0 now available!

[Chad Horohoe]

Hello everyone,

I am happy to announce the availability of the general release of MediaWiki
1.31!

MediaWiki 1.31 includes all changes released in the smaller 1.31.0-wmf.*
software deployments to Wikimedia sites over six months, totaling over 2100
commits by roughly 130 unique authors. This is a very large release that
contains many new features and bug fixes. It is also an LTS release.

This is a summary of the major changes of interest to users and
administrators:
* https://www.mediawiki.org/wiki/MediaWiki_1.31

You can always consult the RELEASE-NOTES-1.31 file for the full list of
changes in this version.

Full release notes:
*
https://phabricator.wikimedia.org/diffusion/MW/browse/REL1_31/RELEASE-NOTES-1.31
* https://www.mediawiki.org/wiki/Release_notes/1.31

**

Download:
https://releases.wikimedia.org/mediawiki/1.31/mediawiki-1.31.0.tar.gz
https://releases.wikimedia.org/mediawiki/1.31/mediawiki-core-1.31.0.tar.gz

GPG signatures:
https://releases.wikimedia.org/mediawiki/1.31/mediawiki-1.31.0.tar.gz.sig
https://releases.wikimedia.org/mediawiki/1.31/mediawiki-core-1.31.0.tar.gz.sig

Public keys:
https://www.mediawiki.org/keys/keys.html

**

On a personal note, this will be the last release that I shall be handling.
As many probably know I left Wikimedia this month for a new career and as
such I won't have the time to dedicate to releasing MediaWiki anymore.
Whomever picks up the torch will do fantastic. See you all around the
Internet :)

-Chad
___
MediaWiki announcements mailing list
To unsubscribe, go to:
https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce
___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l

[Wikitech-l] [MediaWiki-announce] 1.31.0-rc.2

[Chad Horohoe]

Hi,

I'd like to announce the immediate availability of MediaWiki 1.31.0-rc.2,
the second release candidate for 1.31.x. Links at the end of the e-mail. The
tag has been signed and pushed to Git.

This is not a final release and should not be used for production websites.
There are several major outstanding bugs on the workboard. As always, please
do try out the release candidate in a test environment. It's how we find
bugs that didn't surface in initial development :-)

You'll likely notice that I went from rc.0 to rc.2 with this announcement.
This
was not an oversight. While rc.1 was tagged, signed, and built as a tarball,
prior to announcing it I noticed the version number still referred to rc.0.
Rather than confuse people, I decided to move forward with an rc.2. There's
only
a two commit difference between the tags. If using the patch files, you'll
want
to do it stepwise, moving from rc.0 to rc.1 then on to rc.2.

There have also been schema changes since rc.0, so you will need to run
update.php.

Full release notes:
https://phabricator.wikimedia.org/diffusion/MW/browse/REL1_31/RELEASE-NOTES-1.31
https://www.mediawiki.org/wiki/Release_notes/1.31

**
Download:
https://releases.wikimedia.org/mediawiki/1.31/mediawiki-1.31.0-rc.2.tar.gz
https://releases.wikimedia.org/mediawiki/1.31/mediawiki-core-1.31.0-rc.2.tar.gz
https://releases.wikimedia.org/mediawiki/1.31/mediawiki-1.31.0-rc.2.patch.gz

GPG signatures:
https://releases.wikimedia.org/mediawiki/1.31/mediawiki-1.31.0-rc.2.tar.gz.sig
https://releases.wikimedia.org/mediawiki/1.31/mediawiki-core-1.31.0-rc.2.tar.gz.sig
https://releases.wikimedia.org/mediawiki/1.31/mediawiki-1.31.0-rc.2.patch.gz.sig

Public keys:
https://www.mediawiki.org/keys/keys.html

--
Chad Horohoe
___
MediaWiki announcements mailing list
To unsubscribe, go to:
https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce
___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l

[Wikitech-l] [MediaWiki-announce] MediaWiki 1.31.0-rc.0 now available

[Chad Horohoe]

Hi,

I'd like to announce the immediate availability of MediaWiki 1.31.0-rc.0,
the first release candidate for 1.31.x. Links at the end of the e-mail. The
tag has been signed and pushed to Git.

This is not a final release and should not be used for production websites.
There's several major outstanding bugs on the workboard. As always please
do try out the release candidate in a test environment. It's how we find
bugs that didn't surface in initial development :)

Full release notes:
https://phabricator.wikimedia.org/diffusion/MW/browse/REL1_31/RELEASE-NOTES-1.31
https://www.mediawiki.org/wiki/Release_notes/1.31

**
Download:
https://releases.wikimedia.org/mediawiki/1.31/mediawiki-1.31.0-rc.0.tar.gz

Core only, no extensions:
https://releases.wikimedia.org/mediawiki/1.31/mediawiki-core-1.31.0-rc.0.tar.gz.sig

GPG signatures:
https://releases.wikimedia.org/mediawiki/1.31/mediawiki-core-1.31.0-rc.0.tar.gz.sig
https://releases.wikimedia.org/mediawiki/1.31/mediawiki-1.31.0-rc.0.tar.gz.sig

Public keys:
https://www.mediawiki.org/keys/keys.html

--
Chad Horohoe
___
MediaWiki announcements mailing list
To unsubscribe, go to:
https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce
___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l

[Wikitech-l] Train halted - Cirrus and DB issues

[Chad Horohoe]

Hiya!

I halted the train this afternoon. tl;dr: I rolled wmf.20 to group1 and I
saw a huge spike in DB replag and Cirrus errors. Rolling back made them go
away!

There are tasks:
https://phabricator.wikimedia.org/T186765
https://phabricator.wikimedia.org/T186764

I think Eric/Stas already fixed the Cirrus bug. The other one was
temporally related, but I dunno about causally.

Needs more investigation if we want to roll forward tomorrow!

<3

-Chad
___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l

[Wikitech-l] Gerrit upgrade - Friday 2/2

[Chad Horohoe]

Howdy Gerriters!

On Friday, I'll finally be upgrading Gerrit from 2.13.9 to 2.14.6. Going to
do this from 21:00–23:00 UTC.
It shouldn't take the full two hours, but hey it's Gerrit.

https://phabricator.wikimedia.org/T156120

<3

-Chad
___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l

[Wikitech-l] [MediaWiki-announce] 1.28.x End of Life

[Chad Horohoe]

Hi!

It's November 2017, which means that the 1.28.x branch of MediaWiki has
reached the end of its life. Lets wish it the best as it moves off to the
great big code repository in the sky. All users are encouraged to upgrade
to 1.29.x which is the latest stable branch.

Note: 1.30.0 should be out by the end of the month, we've already branched
and are working on making sure the release is ready-to-go :)

--
Chad Horohoe
___
MediaWiki announcements mailing list
To unsubscribe, go to:
https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce
___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l

[Wikitech-l] [MediaWiki-announce] MediaWiki 1.29 Available!

[Chad Horohoe]

Hello everyone,

I am happy to announce the availability the general release of MediaWiki
1.29!

MediaWiki 1.29 includes all changes released in the smaller 1.29.0-wmf.*
software deployments to Wikimedia sites over six months, totaling
approximately 1640 commits by around 140 authors. This is a large release
that contains many new features and bug fixes.

This is a summary of the major changes of interest to users and
administrators:
* https://www.mediawiki.org/wiki/MediaWiki_1.29

You can always consult the RELEASE-NOTES-1.29 file for the full list of
changes in this version.

Full release notes:
*
https://phabricator.wikimedia.org/diffusion/MW/browse/REL1_29/RELEASE-NOTES-1.29
* https://www.mediawiki.org/wiki/Release_notes/1.29

**
Download:
https://releases.wikimedia.org/mediawiki/1.29/mediawiki-1.29.0.tar.gz
https://releases.wikimedia.org/mediawiki/1.29/mediawiki-core-1.29.0.tar.gz

GPG signatures:
https://releases.wikimedia.org/mediawiki/1.29/mediawiki-1.29.0.tar.gz.sig
https://releases.wikimedia.org/mediawiki/1.29/mediawiki-core-1.29.0.tar.gz.sig

Public keys:
https://www.mediawiki.org/keys/keys.html

-Chad
___
MediaWiki announcements mailing list
To unsubscribe, go to:
https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce
___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l

[Wikitech-l] [MediaWiki-announce] MediaWiki 1.29.0-rc.1 now available

[Chad Horohoe]

Hi all,

First, I'd like apologize for the extreme delay in getting 1.29 out the
door. There's been a bunch of rather nasty bugs that have popped right
around the first release candidate. They've mostly been related to database
transactions and job queue support. As both are kind of crucial I've
decided to hold back the release. As of today, all pending blockers to 1.29
have been resolved. But considering the severity, I'd like to get one last
release candidate in. So without further ado

I'd like to announce the immediate availability of MediaWiki 1.29.0-rc.1,
the second release candidate for 1.29.x. Links at the end of the e-mail.

This is not a final release and should not be used for production websites.
As always please do try out the release candidate in a test environment.
It's how we find bugs that didn't surface in initial development :)

Full release notes:
https://phabricator.wikimedia.org/diffusion/MW/browse/REL1_29/RELEASE-NOTES-1.29
https://www.mediawiki.org/wiki/Release_notes/1.29

**
Download:
https://releases.wikimedia.org/mediawiki/1.29/mediawiki-1.29.0-rc.1.tar.gz

Core only (no extensions):
https://releases.wikimedia.org/mediawiki/1.29/mediawiki-core-1.29.0-rc.1.tar.gz.sig

Patch to previous version (1.29.0-rc.0):
https://releases.wikimedia.org/mediawiki/1.29/mediawiki-1.29.0-rc.1.patch.gz

GPG signatures:
https://releases.wikimedia.org/mediawiki/1.29/mediawiki-1.29.0-rc.1.tar.gz.sig
https://releases.wikimedia.org/mediawiki/1.29/mediawiki-core-1.29.0-rc.1.tar.gz.sig
https://releases.wikimedia.org/mediawiki/1.29/mediawiki-1.29.0-rc.1.patch.gz.sig

Public keys:
https://www.mediawiki.org/keys/keys.html

--
Chad Horohoe
___
MediaWiki announcements mailing list
To unsubscribe, go to:
https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce
___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l

Re: [Wikitech-l] [Ops] Change to version number incrementing for weekly Wikimedia MediaWiki deploys

[Chad Horohoe]

I think a branch that's never deployed is likely to confuse people more,
SWAT
immediately comes to mind (which branches do I port to?)

And while it's fixable, it would mean a non-checked-out branch wouldn't get
automatically cleaned up during our weekly pruning.

All in all: I like this move. It makes "how old is a branch" math much
easier.

-Chad

On Tue, Jul 11, 2017 at 1:31 PM Mukunda Modell 
wrote:

> Maybe we could prevent breaking things by always creating a branch for
> every wmf.XX number. That is, always create a new branch, even on weeks
> with no official branch cut. So in the case of wmf.8, we would simply
> branch off from wmf.7, thus extending wmf.7 for another week but under a
> new name, instead of creating a new branch from master.
>
> On Tue, Jul 11, 2017 at 3:20 PM, Greg Grossmeier 
> wrote:
>
>> Hello all,
>>
>> I failed to send this notice out before when the change was made; mea
>> culpa.
>>
>> Background:
>> * We start a new 1.XX-wmf.XX series after each MW 'tarball' release. For
>>   example right now we're in the 1.30-wmf.XX series now that 1.29 is
>>   nearing release.
>>
>> The change:
>> * Instead of only incrementing the wmf.XX portion when a new branch is
>>   actually deployed to Wikimedia production servers, we will increment
>>   that number each week regardless.
>> ** For example, last week we did not push a new branch out to production
>>due to the short work week. That week would have been 1.30-wmf.8. We
>>thus skipped wmf.8 and are now on wmf.9 this week.
>>
>> Why?
>> We hope to make the creation of the weekly deployment branch
>> (1.XX-wmf.XX) automatic in the near future. This will allow us to put
>> that on a cron and not worry about special cases (another special case
>> being when we hold back the train due to a bad regression). This (every
>> week gets a wmf.XX number) should simplify logic in many places.
>>
>> Thanks!
>>
>> Greg on behalf of the Release Engineering team
>>
>>
>> PS: Yeah, we could have just gone with ISO week numbers, but we didn't
>> want to change too much in the version string to reduce the chance of
>> breaking too many other tools.
>> PPS: And yes, my failure to pre-announce this instead of post-announce
>> caused at least the ReleaseTaggerBot to break this week. Mea cupla.
>>
>> --
>> | Greg GrossmeierGPG: B2FA 27B1 F7EB D327 6B8E |
>> | Release Team ManagerA18D 1138 8E47 FAC8 1C7D |
>>
>> ___
>> Ops mailing list
>> o...@lists.wikimedia.org
>> https://lists.wikimedia.org/mailman/listinfo/ops
>>
>>
> ___
> Ops mailing list
> o...@lists.wikimedia.org
> https://lists.wikimedia.org/mailman/listinfo/ops
>
___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l

[Wikitech-l] [MediaWiki-announce] 1.29.0-rc.0 released, timeline on 1.29.0, EOL of 1.23.x

[Chad Horohoe]

Hi,

I'd like to announce the immediate availability of MediaWiki 1.29.0-rc.0,
the first release candidate for 1.29.x. Links at the end of the e-mail.

This is not a final release and should not be used for production websites.
Notably, there's a few major outstanding bugs related to the job queue. As
always please do try out the release candidate in a test environment. It's
how we find bugs that didn't surface in initial development :)

The timeline for 1.29.0 is a little fuzzy right now, and I apologize. The
outstanding bugs have been pretty hard to isolate and fix, but I see
progress so I hope those working on them will have it all resolved soon.

Finally, per the version lifecycle I'm announcing the End Of Life of
MediaWiki 1.23.x. The final release in this series was 1.23.17. Those
installations using the versions as LTS should upgrade to 1.27.3, as 1.27.x
is the supported LTS branch through June 2019.

Full release notes:
https://phabricator.wikimedia.org/diffusion/MW/browse/REL1_29/RELEASE-NOTES-1.29
https://www.mediawiki.org/wiki/Release_notes/1.29


**
Download:
https://releases.wikimedia.org/mediawiki/1.29/mediawiki-1.29.0-rc.0.tar.gz

Core only, no extensions:
https://releases.wikimedia.org/mediawiki/1.29/mediawiki-core-1.29.0-rc.0.tar.gz.sig

GPG signatures:
https://releases.wikimedia.org/mediawiki/1.29/mediawiki-core-1.29.0-rc.0.tar.gz.sig
https://releases.wikimedia.org/mediawiki/1.29/mediawiki-1.29.0-rc.0.tar.gz.sig

Public keys:
https://www.mediawiki.org/keys/keys.html

--
Chad Horohoe
___
MediaWiki announcements mailing list
To unsubscribe, go to:
https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce
___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l

[Wikitech-l] [MediaWiki-announce] Security release 1.27.3 and 1.28.2

[Chad Horohoe]

Hello!

I would like to announce the immediate availability of security releases
1.27.3
and 1.28.2. Due to a mistake in packaging, the releases 1.27.2 and 1.28.1
did
not contain the fix for SyntaxHighlight_GeSHi. This new release does contain
that fix.

The task in question: https://phabricator.wikimedia.org/T158689

If you are not running this extension, you do not necessarily need to
upgrade.

Thanks, and I apologize for any confusion in the matter.

Full release notes:
https://phabricator.wikimedia.org/diffusion/MW/browse/REL1_27/RELEASE-NOTES-1.27
https://www.mediawiki.org/wiki/Release_notes/1.27

https://phabricator.wikimedia.org/diffusion/MW/browse/REL1_28/RELEASE-NOTES-1.28
https://www.mediawiki.org/wiki/Release_notes/1.28

**
1.27.3
**
Download:
https://releases.wikimedia.org/mediawiki/1.27/mediawiki-1.27.3.tar.gz

Core only, no extensions:
https://releases.wikimedia.org/mediawiki/1.27/mediawiki-core-1.27.3.tar.gz.sig

GPG signatures:
https://releases.wikimedia.org/mediawiki/1.27/mediawiki-1.27.3.tar.gz.sig
https://releases.wikimedia.org/mediawiki/1.27/mediawiki-core-1.27.3.tar.gz.sig

Public keys:
https://www.mediawiki.org/keys/keys.html

**
1.28.2
**
Download:
https://releases.wikimedia.org/mediawiki/1.28/mediawiki-1.28.2.tar.gz

Core only, no extensions:
https://releases.wikimedia.org/mediawiki/1.28/mediawiki-core-1.28.2.tar.gz.sig

GPG signatures:
https://releases.wikimedia.org/mediawiki/1.28/mediawiki-1.28.2.tar.gz.sig
https://releases.wikimedia.org/mediawiki/1.28/mediawiki-core-1.28.2.tar.gz.sig

Public keys:
https://www.mediawiki.org/keys/keys.html
___
MediaWiki announcements mailing list
To unsubscribe, go to:
https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce
___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l

[Wikitech-l] [MediaWiki-announce] 1.23.17 bugfix release

[Chad Horohoe]

Hello!

I would like to announce the release of MediaWiki 1.23.17. There was an
issue
in the 1.23.16 release that prevented it from running on PHP 5.3
installations.
Considering the report wasn't very widespread, I'm guessing most people
haven't
been affected yet. If you are, this release will fix it.

Apologies for any issues you may have encountered during your upgrade. The
updated links can be found below:

Full release notes for 1.23.17:


**
1.23.17
**

Download:
https://releases.wikimedia.org/mediawiki/1.23/mediawiki-1.23.17.tar.gz

Download without bundled extensions:
https://releases.wikimedia.org/mediawiki/1.23/mediawiki-core-1.23.17.tar.gz

Patch to previous version (1.23.16)::
https://releases.wikimedia.org/mediawiki/1.23/mediawiki-1.23.17.patch.gz

GPG signatures:
https://releases.wikimedia.org/mediawiki/1.23/mediawiki-core-1.23.17.tar.gz.sig
https://releases.wikimedia.org/mediawiki/1.23/mediawiki-1.23.17.tar.gz.sig
https://releases.wikimedia.org/mediawiki/1.23/mediawiki-1.23.17.patch.gz.sig

Public keys:
https://www.mediawiki.org/keys/keys.html
___
MediaWiki announcements mailing list
To unsubscribe, go to:
https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce
___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l

[Wikitech-l] [MediaWiki-announce] Security Release: 1.28.1 / 1.27.2 / 1.23.16

[Chad Horohoe]

Hello!

I would like to announce the release of MediaWiki 1.28.1, 1.27.2 and
1.23.16!

These releases fix five security issues in core and one for the extension
SyntaxHighlight_GeSHi. Download links are given at the end of this email.

Please note that next month is the End-Of-Life date for MediaWiki 1.23. This
means that MediaWiki 1.23.16 will be the last security release for that
version, barring any unforeseen issues. We would strongly encourage users of
MediaWiki 1.23 to upgrade to MediaWiki 1.27, released in June 2016, or a yet
newer version as soon as possible. MediaWiki 1.27 will be supported until
June
2019. See  for more
information.

This release also serves as a maintenance release for these branches.

== Security fixes ==
* (T109140) (T122209) Special:UserLogin and Special:Search allow redirect
  to interwiki links. (CVE-2017-0363, CVE-2017-0364)
* (T144845) XSS in SearchHighlighter::highlightText() when
  $wgAdvancedSearchHighlighting is true.  (CVE-2017-0365)
* (T125177) API parameters may now be marked as "sensitive" to keep
  their values out of the logs.  (CVE-2017-0361)
* (T150044) "Mark all pages visited" on the watchlist now requires a CSRF
  token.  (CVE-2017-0362)
* (T156184) Escape content model/format url parameter in message.
  (CVE-2017-0368)
* (T151735) SVG filter evasion using default attribute values in DTD
  declaration. (CVE-2017-0366)
* (T48143) Spam blacklist ineffective on encoded URLs inside file inclusion
  syntax's link parameter. (CVE-2017-0370)
* (T108138) Sysops can undelete pages, although the page is protected
against
  it. (CVE-2017-0369)

The following only affects 1.27 and above and is not included in the 1.23
upgrade:
* (T161453) LocalisationCache will no longer use the temporary directory
  in its fallback chain when trying to work out where to write the cache.
  (CVE-2017-0367)

The following fix is for the SyntaxHighlight extension:
* (T158689) Parameters injection in SyntaxHighlight results in multiple
vulnerabilities.
  (CVE-2017-0372)

== Links to all mentioned tasks ==
https://phabricator.wikimedia.org/T109140
https://phabricator.wikimedia.org/T122209
https://phabricator.wikimedia.org/T144845
https://phabricator.wikimedia.org/T125177
https://phabricator.wikimedia.org/T150044
https://phabricator.wikimedia.org/T156184
https://phabricator.wikimedia.org/T151735
https://phabricator.wikimedia.org/T161453
https://phabricator.wikimedia.org/T48143
https://phabricator.wikimedia.org/T108138
https://phabricator.wikimedia.org/T158689

== Release notes ==

Full release notes for 1.28.1:


Full release notes for 1.27.2:


Full release notes for 1.23.16:


For information about how to upgrade, see


**
1.23.16
**
Download:
https://releases.wikimedia.org/mediawiki/1.23/mediawiki-1.23.16.tar.gz

Download without bundled extensions:
https://releases.wikimedia.org/mediawiki/1.23/mediawiki-core-1.23.16.tar.gz

Patch to previous version (1.23.15), without interface text:
https://releases.wikimedia.org/mediawiki/1.23/mediawiki-1.23.16.patch.gz

Interface text changes:
https://releases.wikimedia.org/mediawiki/1.23/mediawiki-i18n-1.23.16.patch.gz

GPG signatures:
https://releases.wikimedia.org/mediawiki/1.23/mediawiki-core-1.23.16.tar.gz.sig
https://releases.wikimedia.org/mediawiki/1.23/mediawiki-1.23.16.tar.gz.sig
https://releases.wikimedia.org/mediawiki/1.23/mediawiki-1.23.16.patch.gz.sig
https://releases.wikimedia.org/mediawiki/1.23/mediawiki-i18n-1.23.16.patch.gz.sig

Public keys:
https://www.mediawiki.org/keys/keys.html

**
1.27.2
**
Download:
https://releases.wikimedia.org/mediawiki/1.27/mediawiki-1.27.2.tar.gz

Download without bundled extensions:
https://releases.wikimedia.org/mediawiki/1.27/mediawiki-core-1.27.2.tar.gz

Patch to previous version (1.27.1), without interface text:
https://releases.wikimedia.org/mediawiki/1.27/mediawiki-1.27.2.patch.gz

Interface text changes:
https://releases.wikimedia.org/mediawiki/1.27/mediawiki-i18n-1.27.2.patch.gz

GPG signatures:
https://releases.wikimedia.org/mediawiki/1.27/mediawiki-core-1.27.2.tar.gz.sig
https://releases.wikimedia.org/mediawiki/1.27/mediawiki-1.27.2.tar.gz.sig
https://releases.wikimedia.org/mediawiki/1.27/mediawiki-1.27.2.patch.gz.sig
https://releases.wikimedia.org/mediawiki/1.27/mediawiki-i18n-1.27.2.patch.gz.sig

Public keys:
https://www.mediawiki.org/keys/keys.html

**
1.28.1
***

[Wikitech-l] [MediaWiki-announce] Security pre-release announcement: 1.28.1 / 1.27.2 / 1.23.16

[Chad Horohoe]

Hi,

Tomorrow, April 6th we will be performing a security release of MediaWiki
for all supported branches. The new versions will be 1.28.1, 1.27.2 and
1.23.16. This will resolve 9 issues in MediaWiki core, and one in a bundled
extension.

Have a great day,

--
Chad Horohoe & Sam Reed
___
MediaWiki announcements mailing list
To unsubscribe, go to:
https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce
___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l

Re: [Wikitech-l] [Engineering] MediaWiki-Vagrant needs testers for Debian Jessie changes

[Chad Horohoe]

On Tue, Feb 14, 2017 at 6:53 PM Bryan Davis  wrote:

> Give things a try and report issues as children of the tracking task
> for this migration
>

Works for me!

Using OSX 10.12.3 using VirtualBox 5.1.14 and Vagrant 1.8.5

Would test with my Parallels install, but it's out of commission at the
moment.

Major kudos on wrapping this up, been wanting this for awhile.

-Chad
___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l

[Wikitech-l] Gerrit downtime tomorrow evening / early morning

[Chad Horohoe]

Hi,

Doing a (minor) point release upgrade to Gerrit tomorrow evening to deal
with a data loss bug we can potentially hit.
While we're offline, we're going to push out a change that enables logging
to Logstash.

Window is 17:00-19:00 SF time (that's 01:00-03:00 UTC).

Thanks for your patience :)

-Chad
___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l

[Wikitech-l] Gerrit: login issues for some (hopefully only a few)

[Chad Horohoe]

Hi,

We upgraded to Gerrit 2.13.3 today from 2.12.2. However, a couple of users
have reported being unable to login. Based on reports and investigation, I'm
thinking/hoping this is only affecting 11 users.

However, if you find yourself unable to login with the message "Cannot
assign
username  to account ; name already in use," please
do chime in on Phab[0].

Thanks and have a good evening,

[0] https://phabricator.wikimedia.org/T152640
___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l

[Wikitech-l] Gerrit upgrade (w/ short downtime) tomorrow

[Chad Horohoe]

Hi all,

Tomorrow evening (18:30–19:30 UTC) I'll be taking Gerrit offline shortly
for a planned upgrade from 2.12.5 to 2.13.3. It shouldn't take the full
hour, but you never know :)

If you play the deployment game regularly, you'll notice I've cancelled[0]
tomorrow's "SF Morning SWAT" window because it overlaps with the time I
picked ;-)

Thanks!

-Chad

[0]
https://wikitech.wikimedia.org/w/index.php?title=Deployments&type=revision&diff=1088543&oldid=1085547
___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l

Re: [Wikitech-l] [MediaWiki-announce] MediaWiki 1.28 now available!

[Chad Horohoe]

On Mon, Nov 28, 2016 at 12:08 PM Chad Horohoe 
wrote:

> Hello everyone,
>
> I am happy to announce the availability the general release of MediaWiki
> 1.28!
>
>
Hi!

One minor note. The RELEASE-NOTES-1.28 was not updated prior to release and
still mentions that the software is an alpha/beta and not suitable for
production use.

It certainly is, and I apologize for the oversight. This is fixed in the
REL1_28 release branch and will be included in a 1.28.1, if/when it's
announced (I didn't figure a whole release bump was necessary for a
documentation fix).

Sorry if this caused any confusion!

-Chad
___
MediaWiki announcements mailing list
To unsubscribe, go to:
https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce
___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l

[Wikitech-l] [MediaWiki-announce] MediaWiki 1.28 now available!

[Chad Horohoe]

Hello everyone,

I am happy to announce the availability the general release of MediaWiki
1.28!

MediaWiki 1.28 includes all changes released in the smaller 1.28.0-wmf.*
software deployments to Wikimedia sites over six months, totaling
approximately 2100 commits by around 120 authors. This is a large release
that contains many new features and bug fixes.

This is a summary of the major changes of interest to users and
administrators:
* https://www.mediawiki.org/wiki/MediaWiki_1.28

You can always consult the RELEASE-NOTES-1.28 file for the full list of
changes in this version.

Full release notes:
*
https://phabricator.wikimedia.org/diffusion/MW/browse/REL1_28/RELEASE-NOTES-1.28
* https://www.mediawiki.org/wiki/Release_notes/1.28

**
Download:
https://releases.wikimedia.org/mediawiki/1.28/mediawiki-1.28.0.tar.gz
https://releases.wikimedia.org/mediawiki/1.28/mediawiki-core-1.28.0.tar.gz

GPG signatures:
https://releases.wikimedia.org/mediawiki/1.28/mediawiki-1.28.0.tar.gz.sig
https://releases.wikimedia.org/mediawiki/1.28/mediawiki-core-1.28.0.tar.gz.sig

Public keys:
https://www.mediawiki.org/keys/keys.html

-Chad
___
MediaWiki announcements mailing list
To unsubscribe, go to:
https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce
___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l

[Wikitech-l] [MediaWiki-announce] 1.26 EOL announcement

[Chad Horohoe]

Hi,

With the release of MediaWiki 1.28, the lifetime of MediaWiki version
1.26.x has come to an end.

Users still using MediaWiki 1.26.x are advised to upgrade to version
1.28.0, the latest stable version.

-Chad
___
MediaWiki announcements mailing list
To unsubscribe, go to:
https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce
___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l

[Wikitech-l] [MediaWiki-announce] Second release candidate for 1.28 (1.28.0-rc.1)

[Chad Horohoe]

Hiya!

I am happy to announce the availability of the second release candidate of
the new MediaWiki 1.28 series!

Sorry for the delay, it should've been out last week. Other things got in
the
way. There's not been a lot of churn on 1.28-related stuff, so I still
anticipate
doing the final release next week. That means, barring any blockers, there
won't be an RC2.

Full release notes:
*
https://phabricator.wikimedia.org/diffusion/MW/browse/REL1_28/RELEASE-NOTES-1.28
* https://www.mediawiki.org/wiki/Release_notes/1.28

Known issues and final release blockers can be found in Phabricator:
https://phabricator.wikimedia.org/project/board/1982/

-- Chad

**
Download:
https://releases.wikimedia.org/mediawiki/1.28/mediawiki-1.28.0-rc.1.tar.gz
https://releases.wikimedia.org/mediawiki/1.28/mediawiki-core-1.28.0-rc.1.tar.gz
https://releases.wikimedia.org/mediawiki/1.28/mediawiki-1.28.0-rc.1.patch.gz
https://releases.wikimedia.org/mediawiki/1.28/mediawiki-i18n-1.28.0-rc.1.patch.gz

GPG signatures:
https://releases.wikimedia.org/mediawiki/1.28/mediawiki-1.28.0-rc.1.tar.gz.sig
https://releases.wikimedia.org/mediawiki/1.28/mediawiki-core-1.28.0-rc.1.tar.gz.sig
https://releases.wikimedia.org/mediawiki/1.28/mediawiki-1.28.0-rc.1.patch.gz.sig
https://releases.wikimedia.org/mediawiki/1.28/mediawiki-i18n-1.28.0-rc.1.patch.gz.sig

Public keys:
https://www.mediawiki.org/keys/keys.html
___
MediaWiki announcements mailing list
To unsubscribe, go to:
https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce
___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l

Re: [Wikitech-l] [Engineering] Gerrit was down today

[Chad Horohoe]

Heya!

Gonna reboot Gerrit real quick this morning. Turns out "cobalt" did not
have hyperthreading turned on. Services should be back momentarily!

-Chad

On Fri, Oct 7, 2016 at 2:07 PM Daniel Zahn  wrote:

> The Gerrit migration is over. It is back up and served from new server
> "cobalt" now. It feels faster than before as well.  Thanks much to
> Brandon Black for help.
>
> ___
> Engineering mailing list
> engineer...@lists.wikimedia.org
> https://lists.wikimedia.org/mailman/listinfo/engineering
>
___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l

Re: [Wikitech-l] [Engineering] Gerrit was down today

[Chad Horohoe]

Hi!

Sorry for the extended downtime! From what we can tell, it appears as though
the machine that Gerrit is running on (lead) is having some hardware issues
that
are making the CPU misbehave. We've worked around it for now, so things
should
be up (and Zuul is processing CI events just fine).

However, since it appears it's a hardware problem, we're planning to
migrate off
of lead to a new machine (cobalt). The public IP addresses will not be
changing.
The plan right now is to do this migration tomorrow with a scheduled
downtime
at 17:00UTC (10:00 PST).

We'll be keeping a close eye on things in the meantime, so if things
deteriorate
again we can start the migration sooner.

(and yeah, wikitech incident report to follow, I'm a little burnt out right
now though)

Thanks again for bearing with us!

-Chad

On Thu, Oct 6, 2016 at 2:32 PM Greg Grossmeier  wrote:

> (It wasn't just you)
>
> Gerrit was down today starting around 17:49 UTC. It is now back up and
> services are coming back online.
>
> A full investigation into the cause of the outage is still on-going.[0]
>
> Apologies for the downtime.
>
> WMF Release Engineering
>
> [0] https://etherpad.wikimedia.org/p/gerrit-outage-20161006
> But this is missing a lot of the information/discussion that is
> happening in #wikimedia-operations on Freenode. A link to the
> incident report will be pasted into that etherpad when it is
> created.
>
> --
> | Greg GrossmeierGPG: B2FA 27B1 F7EB D327 6B8E |
> | Release Team ManagerA18D 1138 8E47 FAC8 1C7D |
>
> ___
> Engineering mailing list
> engineer...@lists.wikimedia.org
> https://lists.wikimedia.org/mailman/listinfo/engineering
>
___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l

[Wikitech-l] [MediaWiki-announce] Security Release - 1.27.1, 1.26.4, 1.23.15

[Chad Horohoe]

I would like to announce the release of MediaWiki 1.27.1, 1.26.4, 1.23.15!

These releases fix five security issues in core and one for the extension
PdfHandler. Download links are given at the end of this email.

== Security fixes ==

* (T139565) API: Generate head items in the context of the given title
(CVE-2016-6335)
* (T137264) XSS in unclosed internal links (CVE-2016-6334)
* (T133147) Escape '<' and ']]>' in inline 

[Wikitech-l] [MediaWiki-announce] Security Release Pre-Announcement (1.27, 1.26, 1.23)

[Chad Horohoe]

Hi everyone,

I would like to give everyone advance notice of a pending security release
for all supported branches. The release will come out on Monday, August
22nd. There are several security fixes for core and one extension that will
be
included in this release, along with the normal backports that have made it
into the branches already.

The version numbers will be:
1.27.1
1.26.4
1.23.14

Please let me know if you have any other questions. Thanks and have a
great weekend.

-Chad
___
MediaWiki announcements mailing list
To unsubscribe, go to:
https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce
___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l

[Wikitech-l] CI is having issues, hang with us

[Chad Horohoe]

Hi,

Nodepool isn't happy, so our CI is having trouble spinning up new instances
for testing. We're
well aware and working on it.

Since a couple of people have already asked us what they can do to
help...best thing you can do
is avoid pushing changes for review (if they're not urgent) for a bit. And
*definitely* don't run
"recheck" on existing changes for right now.

Thanks for understanding!

-Chad
___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l

Re: [Wikitech-l] Gerrit downtime this Monday!

[Chad Horohoe]

Hi!

So things are back up. Took a tad longer than expected.

Big caveat: something is up with the Phabricator bridge and it's not logging
what's up. I'll look at it first thing after I've gotten a few hours of
sleep :)

Other than that, everything seems to be going great. Zuul is getting along
just
fine with Gerrit so changes are getting their tests run. IRC bot is back
too.

Your SSH connections to Gerrit *might* complain about the host verification.
While the host key has remained the same, the IP address shifted. You can
either delete or update the offending line in your ~/.ssh/known_hosts if
your
client does have trouble with it.

Thanks again to Daniel, Antoine and Jaime for their help today.

-Chad

On Sun, Jul 24, 2016 at 4:02 PM, Chad Horohoe 
wrote:

> Friendly reminder that this is happening in about 2 hours!
>
> -Chad
>
>
> On Thu, Jul 21, 2016 at 8:08 AM, Chad Horohoe 
> wrote:
>
>> Hi,
>>
>> So the time is upon us to finally upgrade Gerrit. I thank everyone in
>> advance for all of your patience
>> and good work testing things out for us. The plan is outlined in detail
>> on Phabricator[0], but I'll give
>> everyone the short version here.
>>
>> The downtime will be on Monday, July 25th from 01:00 to 04:00 UTC; that's
>> Sunday night for those
>> of us who are US-based. This time was picked based because it's one of
>> our lowest traffic times
>> on Gerrit. There's never a *good* time to bring it down, it's always
>> being used, but this looks like it'll
>> impact the fewest number of users. I do not anticipate the process
>> actually taking the full 3 hours,
>> but I'm giving us a lot of extra time just in case.
>>
>> Jaime will be on hand to assist with a final DB snapshot of the old
>> version and possible rollback,
>> and Daniel Z. is going to assist me with the puppet work. Most of this is
>> already prepared so the
>> amount of "change" to do the swap has been kept to a minimum.
>>
>> Gerrit is a critical service to all developers, so the plan includes a
>> generous provision to roll back
>> if things are not operating properly--I'd rather us be on the old version
>> that works on a Monday
>> morning than be stuck broken going into the work week.
>>
>> I'll be sure to send a last minute reminder Sunday night prior to taking
>> services offline.
>>
>> Thanks again!
>>
>> -Chad
>>
>> [0] https://phabricator.wikimedia.org/T70271#2482308
>>
>
>
___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l

Re: [Wikitech-l] Gerrit downtime this Monday!

[Chad Horohoe]

Friendly reminder that this is happening in about 2 hours!

-Chad

On Thu, Jul 21, 2016 at 8:08 AM, Chad Horohoe 
wrote:

> Hi,
>
> So the time is upon us to finally upgrade Gerrit. I thank everyone in
> advance for all of your patience
> and good work testing things out for us. The plan is outlined in detail on
> Phabricator[0], but I'll give
> everyone the short version here.
>
> The downtime will be on Monday, July 25th from 01:00 to 04:00 UTC; that's
> Sunday night for those
> of us who are US-based. This time was picked based because it's one of our
> lowest traffic times
> on Gerrit. There's never a *good* time to bring it down, it's always being
> used, but this looks like it'll
> impact the fewest number of users. I do not anticipate the process
> actually taking the full 3 hours,
> but I'm giving us a lot of extra time just in case.
>
> Jaime will be on hand to assist with a final DB snapshot of the old
> version and possible rollback,
> and Daniel Z. is going to assist me with the puppet work. Most of this is
> already prepared so the
> amount of "change" to do the swap has been kept to a minimum.
>
> Gerrit is a critical service to all developers, so the plan includes a
> generous provision to roll back
> if things are not operating properly--I'd rather us be on the old version
> that works on a Monday
> morning than be stuck broken going into the work week.
>
> I'll be sure to send a last minute reminder Sunday night prior to taking
> services offline.
>
> Thanks again!
>
> -Chad
>
> [0] https://phabricator.wikimedia.org/T70271#2482308
>
___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l

[Wikitech-l] Gerrit downtime this Monday!

[Chad Horohoe]

Hi,

So the time is upon us to finally upgrade Gerrit. I thank everyone in
advance for all of your patience
and good work testing things out for us. The plan is outlined in detail on
Phabricator[0], but I'll give
everyone the short version here.

The downtime will be on Monday, July 25th from 01:00 to 04:00 UTC; that's
Sunday night for those
of us who are US-based. This time was picked based because it's one of our
lowest traffic times
on Gerrit. There's never a *good* time to bring it down, it's always being
used, but this looks like it'll
impact the fewest number of users. I do not anticipate the process actually
taking the full 3 hours,
but I'm giving us a lot of extra time just in case.

Jaime will be on hand to assist with a final DB snapshot of the old version
and possible rollback,
and Daniel Z. is going to assist me with the puppet work. Most of this is
already prepared so the
amount of "change" to do the swap has been kept to a minimum.

Gerrit is a critical service to all developers, so the plan includes a
generous provision to roll back
if things are not operating properly--I'd rather us be on the old version
that works on a Monday
morning than be stuck broken going into the work week.

I'll be sure to send a last minute reminder Sunday night prior to taking
services offline.

Thanks again!

-Chad

[0] https://phabricator.wikimedia.org/T70271#2482308
___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l

Re: [Wikitech-l] [Engineering] Gerrit 2.12.2 test instance - PLEASE TEST

[Chad Horohoe]

On Tue, Jul 12, 2016 at 10:53 PM, Mukunda Modell 
wrote:

> So I'll start by ignoring horrible UI/UX which, IMO, hasn't improved very
> much over the old version.
>
> I've used the test install for various routine activities and so far I've
> only found one bug:
>
> When I click the change-id link in commit messages, it takes me to a 404
> page.
>
>
This is fixed now.

-Chad
___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l

[Wikitech-l] Gerrit 2.12.2 test instance - PLEASE TEST

[Chad Horohoe]

Hi,

Daniel and I have been spending a lot of time in the last week preparing a
smooth upgrade
path for Gerrit to a new (and supported version). The migration will be
coming soon but I could
use your help testing things in the meantime.

https://gerrit-new.wikimedia.org/r/

The database is a snapshot from last week and the git data is up to date as
of a few hours
ago. Please use this opportunity to test the new installation and make sure
it works for you.
Make a change. Do some reviews. Do the things you usually would.

Again, this is snapshot data so: A) Don't worry about messing up the real
install, and B) Don't
expect any changes to persist after the migration.

If nobody identifies any major blockers, we'll go ahead and set an upgrade
time for the
immediate future.

Thanks so much!

-Chad & Daniel
___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l

[Wikitech-l] CI outage - ongoing

[Chad Horohoe]

Hi folks,

Right now our CI infrastructure (Zuul/Jenkins/Nodepool) are having a bad
day and aren't able
to spawn new instances to perform tests. The outage is ongoing and there
isn't an ETA for
restoration of service just yet.

In the meantime: please avoid force-merging (doing the Verified+2 check
yourself) and skipping
Jenkins unless you're dealing with an urgent production issue that must
land today. Doing so
makes Zuul get extra noisy which makes further diagnosis difficult.

Thanks for your patience!

-Chad & rest of RelEng
___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l

[Wikitech-l] [MediaWiki-announce] 1.25 EOL announcement

[Chad Horohoe]

Hi,

With the release of MediaWiki 1.27, the lifetime of MediaWiki version
1.25.x has come to an end.

Users still using MediaWiki 1.25.x are advised to upgrade to version
1.27.0, the latest stable and
LTS version.

--Chad Horohoe
___
MediaWiki announcements mailing list
To unsubscribe, go to:
https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce
___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l

[Wikitech-l] [MediaWiki-announce] MediaWiki 1.27 now available!

[Chad Horohoe]

Hello everyone,

I am happy to announce the availability the general release of MediaWiki
1.27!

MediaWiki 1.27 includes all changes released in the smaller 1.27.0-wmf.*
software deployments
to Wikimedia sites over six months, totaling approximately 2800+ commits by
around 165
authors. This is a large release that contains many new features and bug
fixes.

This will be a LTS release, supported until 2019 with security fixes.

This is a summary of the major changes of interest to users and
administrators:
* https://www.mediawiki.org/wiki/MediaWiki_1.27
Of special note is AuthManager, which I explained in detail with second
release candidate:
*
https://lists.wikimedia.org/pipermail/mediawiki-announce/2016-June/000190.html

You can always consult the RELEASE-NOTES-1.27 file for the full list of
changes in this version.

Full release notes:
*
https://phabricator.wikimedia.org/diffusion/MW/browse/REL1_27/RELEASE-NOTES-1.27
* https://www.mediawiki.org/wiki/Release_notes/1.27

**
Download:
https://releases.wikimedia.org/mediawiki/1.27/mediawiki-1.27.0.tar.gz
https://releases.wikimedia.org/mediawiki/1.27/mediawiki-core-1.27.0.tar.gz

GPG signatures:
https://releases.wikimedia.org/mediawiki/1.27/mediawiki-1.27.0.tar.gz.sig
https://releases.wikimedia.org/mediawiki/1.27/mediawiki-core-1.27.0.tar.gz.sig

Public keys:
https://www.mediawiki.org/keys/keys.html

-Chad
___
MediaWiki announcements mailing list
To unsubscribe, go to:
https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce
___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l

[Wikitech-l] [MediaWiki-announce] Second release candidate for 1.27 (1.27.0-rc.1)

[Chad Horohoe]

Hello everyone,

I am happy to announce the availability of the second release candidate of
the
new MediaWiki 1.27 series!

AuthManager has been backported!!!

Since the first release candidate support for the new authentication/
authorization framework (AuthManager) was merged from master. This is a
large
architectural change, but users should hopefully see few changes. If you
have
extensions that make use of authentication or authorization hooks you will
need to upgrade those as well to their REL1_27 versions or master branch
(both available via Git or Extension Distributor).

For a high level overview please see:
* https://www.mediawiki.org/wiki/Manual:SessionManager_and_AuthManager
If you have an extension that you maintain and will be updating:
*
https://www.mediawiki.org/wiki/Manual:SessionManager_and_AuthManager/Updating_tips

As a result of this large change, I'm going to let the RC.1 stir around in
the
wild for 2 weeks before we do the final release. I know this is a delay for
some, but I really think 1.27 will be a better release as a result. June
28th
sounds like a fun day :)

Now for the usual fun boilerplate:

MediaWiki 1.27 includes all changes released in the smaller 1.27.0-wmf.*
software deployments to Wikimedia sites over six months, totaling
approximately
2800+ commits by around 165 authors. This is a large release that contains
many new features and bug fixes.

This will be a LTS release, supported until 2019 with security fixes.

This is a summary of the major changes of interest to users and
administrators:
https://www.mediawiki.org/wiki/MediaWiki_1.27

You can always consult the RELEASE-NOTES-1.27 file for the full list of
changes
in this version.

Full release notes:
*
https://phabricator.wikimedia.org/diffusion/MW/browse/REL1_27/RELEASE-NOTES-1.27
* https://www.mediawiki.org/wiki/Release_notes/1.27

**
Download:
https://releases.wikimedia.org/mediawiki/1.27/mediawiki-1.27.0-rc.1.tar.gz
https://releases.wikimedia.org/mediawiki/1.27/mediawiki-1.27.0-rc.1.patch.gz
https://releases.wikimedia.org/mediawiki/1.27/mediawiki-core-1.27.0-rc.1.tar.gz

GPG signatures:
https://releases.wikimedia.org/mediawiki/1.27/mediawiki-1.27.0-rc.1.tar.gz.sig
https://releases.wikimedia.org/mediawiki/1.27/mediawiki-1.27.0-rc.1.patch.gz.sig
https://releases.wikimedia.org/mediawiki/1.27/mediawiki-core-1.27.0-rc.1.tar.gz.sig

Public keys:
https://www.mediawiki.org/keys/keys.html

-Chad
___
MediaWiki announcements mailing list
To unsubscribe, go to:
https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce
___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l

[Wikitech-l] [MediaWiki-announce] First release candidate for 1.27 (1.27.0-rc.0)

[Chad Horohoe]

Hello everyone,

I am happy to announce the availability of the first release candidate of
the new MediaWiki 1.27 series!

MediaWiki 1.27 includes all changes released in the smaller 1.27.0-wmf.*
software deployments to Wikimedia sites over six months, totaling
approximately
2800+ commits by around 165 authors. This is a large release that contains
many
new features and bug fixes.

This will be a LTS release, supported until 2019 with security fixes.

This is a summary of the major changes of interest to users and
administrators:

https://www.mediawiki.org/wiki/MediaWiki_1.27

You can always consult the RELEASE-NOTES-1.27 file for the full list of
changes in this version.

Full release notes:
*
https://phabricator.wikimedia.org/diffusion/MW/browse/REL1_27/RELEASE-NOTES-1.27
* https://www.mediawiki.org/wiki/Release_notes/1.27

**
Download:
http://download.wikimedia.org/mediawiki/1.27/mediawiki-1.27.0-rc.0.tar.gz
http://download.wikimedia.org/mediawiki/1.27/mediawiki-core-1.27.0-rc.0.tar.gz

GPG signatures:
http://download.wikimedia.org/mediawiki/1.27/mediawiki-core-1.27.0-rc.0.tar.gz.sig
http://download.wikimedia.org/mediawiki/1.27/mediawiki-1.27.0-rc.0.tar.gz.sig

Public keys:
https://www.mediawiki.org/keys/keys.html

-Chad
___
MediaWiki announcements mailing list
To unsubscribe, go to:
https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce
___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l

Re: [Wikitech-l] [Engineering] 1.28.0-wmf.0 on hold for now

[Chad Horohoe]

On Fri, May 13, 2016 at 6:53 AM, Brad Jorsch (Anomie)  wrote:

> On Thu, May 12, 2016 at 7:33 PM, Erik Bernhardson <
> ebernhard...@wikimedia.org> wrote:
>
>> It looks like the train didn't roll forward today? I was going to swat
>> out a new test that depends on 1.28.0-wmf.1 but 1.27.0-wmf.23 still looks
>> to be running group2
>>
>
> For the record, it appears that group 2 was moved to 1.28.0-wmf.1 about an
> hour after Erik's message was sent.
>
>
Indeed. I rolled out group1 roughly during the window for group2. I waited
a few hours (until after afternoon swat) and rolled out group2.

1.28.0-wmf.1 is everywhere now.

-Chad
___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l

Re: [Wikitech-l] [Engineering] 1.28.0-wmf.0 on hold for now

[Chad Horohoe]

Thanks Roan & Brad! We'll get back on track with wmf.1 deployments today :D

-Chad

On Wed, May 11, 2016 at 11:08 PM, Roan Kattouw 
wrote:

> TLDR: the bug is fixed and the errors have stopped.
>
> I started working around this train hold by backporting the entire Echo
> extension from wmf1 to wmf23, assuming that the bug would be in MW core and
> updating Echo wouldn't affect it. Right after I deployed that, these errors
> started being thrown by wmf1 too.
>
> It turned out that one of the Echo changes I backported stores the integer
> -1 in redis under some circumstances. RedisBagOStuff treats integers
> specially, in order to make incr() work: it stores them as plain numbers
> instead of PHP-serialized data. But when retrieving this value, the code
> didn't recognize -1 as a plain number because it didn't consist solely of
> digits ('-' is not a digit), so it thought it was PHP-serialized data and
> passed it to unserialize(), which caused the error. Apparently no one had
> ever tried to store a negative integer in redis (!) until my Echo change
> exposed the bug.
>
> Brad did all the hard work, diagnosing this and writing up a fix on
> Phabricator. I turned that into a patch and deployed it about an hour ago.
> There haven't been any more errors since then.
>
> On Wed, May 11, 2016 at 1:59 PM, Chad Horohoe 
> wrote:
>
>> Hi,
>>
>> When we deployed the first 1.28 release to the cluster yesterday, we got
>> a new error[0] relating to
>> unserialization of redis data. It's pretty spammy already, so I'm
>> paranoid about deploying wider until
>> we figure out why. Deploying some debugging work soon so we can figure
>> out what's going on.
>>
>> If you've got any information you think would help, please chime in on
>> the bug.
>>
>> -Chad
>>
>> [0] https://phabricator.wikimedia.org/T134923
>>
>> ___
>> Engineering mailing list
>> engineer...@lists.wikimedia.org
>> https://lists.wikimedia.org/mailman/listinfo/engineering
>>
>>
>
___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l

[Wikitech-l] 1.28.0-wmf.0 on hold for now

[Chad Horohoe]

Hi,

When we deployed the first 1.28 release to the cluster yesterday, we got a
new error[0] relating to
unserialization of redis data. It's pretty spammy already, so I'm paranoid
about deploying wider until
we figure out why. Deploying some debugging work soon so we can figure out
what's going on.

If you've got any information you think would help, please chime in on the
bug.

-Chad

[0] https://phabricator.wikimedia.org/T134923
___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l

[Wikitech-l] CirrusSearch on mediawiki.org

[Chad Horohoe]

Hi,

So on Tuesday, August 10th I'm going to go ahead and turn on CirrusSearch
as the
default for mw.org. There's still some bugs[0], and I'm sure people will
find more[1].

Once it's default you can revert to the old lucene backend using
srbackend=LuceneSearch
like you can do now with Cirrus.

-Chad

[0]
https://bugzilla.wikimedia.org/buglist.cgi?list_id=231822&resolution=---&query_format=advanced&component=CirrusSearch&product=MediaWiki%20extensions
[1]
https://bugzilla.wikimedia.org/enter_bug.cgi?product=MediaWiki%20extensions&component=CirrusSearch
___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l

Re: [Wikitech-l] Reminder: Gerrit downtime in 30 minutes

[Chad Horohoe]

Some people have been reporting some intermittent problems this afternoon.
Am investigating.

-Chad
On Sep 4, 2013 5:31 PM, "Chad Horohoe"  wrote:

> On Wed, Sep 4, 2013 at 4:49 PM, Chad Horohoe wrote:
>
>> On Wed, Sep 4, 2013 at 3:30 PM, Chad Horohoe wrote:
>>
>>> Hi all,
>>>
>>> Just a friendly reminder that we're taking down Gerrit in about 30
>>> minutes for a planned
>>> migration to a new (bigger) server. We've allotted an hour for the
>>> changeover but I'm not
>>> expecting it to take that long.
>>>
>>> I'll be sure to let everyone know when it's back up and running.
>>>
>>>
>> We're all squared away on the new box. As always let me know if
>> you run into any problems.
>>
>>
> So I wanted to explain a bit more what we did today and why. We
> moved Gerrit off of its old server of manganese to a new box of
> ytterbium. Other than an IP address change (208.80.154.152 to
> 208.80.154.81), you shouldn't notice much of a difference at first.
>
> We did this for a couple of reasons. Manganese has been a very
> stable box but lacks the resources we need for an ever-growing
> Gerrit installation. The new server has a lot more RAM and CPU
> cores, all 100% dedicated to running Gerrit. As time goes on, I'm
> sure we'll find ways to further tweak the Gerrit config to make use
> of our new hardware. The IP address change is also notable--
> we've changed the setup to make it easier for us to eventually
> implement a long-standing request of removing port 29418 from
> Gerrit operations over SSH (no timeline on that just yet).
>
> As you may have noticed, I've not been doing much with Gerrit
> these days--my efforts have focused on HTTPS and Search. I
> just wanted to let everyone know that I still care about giving
> everyone a fast and stable Gerrit environment :)
>
> -Chad
>
___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l

Re: [Wikitech-l] Reminder: Gerrit downtime in 30 minutes

[Chad Horohoe]

On Wed, Sep 4, 2013 at 4:49 PM, Chad Horohoe  wrote:

> On Wed, Sep 4, 2013 at 3:30 PM, Chad Horohoe wrote:
>
>> Hi all,
>>
>> Just a friendly reminder that we're taking down Gerrit in about 30
>> minutes for a planned
>> migration to a new (bigger) server. We've allotted an hour for the
>> changeover but I'm not
>> expecting it to take that long.
>>
>> I'll be sure to let everyone know when it's back up and running.
>>
>>
> We're all squared away on the new box. As always let me know if
> you run into any problems.
>
>
So I wanted to explain a bit more what we did today and why. We
moved Gerrit off of its old server of manganese to a new box of
ytterbium. Other than an IP address change (208.80.154.152 to
208.80.154.81), you shouldn't notice much of a difference at first.

We did this for a couple of reasons. Manganese has been a very
stable box but lacks the resources we need for an ever-growing
Gerrit installation. The new server has a lot more RAM and CPU
cores, all 100% dedicated to running Gerrit. As time goes on, I'm
sure we'll find ways to further tweak the Gerrit config to make use
of our new hardware. The IP address change is also notable--
we've changed the setup to make it easier for us to eventually
implement a long-standing request of removing port 29418 from
Gerrit operations over SSH (no timeline on that just yet).

As you may have noticed, I've not been doing much with Gerrit
these days--my efforts have focused on HTTPS and Search. I
just wanted to let everyone know that I still care about giving
everyone a fast and stable Gerrit environment :)

-Chad
___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l

Re: [Wikitech-l] Reminder: Gerrit downtime in 30 minutes

[Chad Horohoe]

On Wed, Sep 4, 2013 at 3:30 PM, Chad Horohoe  wrote:

> Hi all,
>
> Just a friendly reminder that we're taking down Gerrit in about 30 minutes
> for a planned
> migration to a new (bigger) server. We've allotted an hour for the
> changeover but I'm not
> expecting it to take that long.
>
> I'll be sure to let everyone know when it's back up and running.
>
>
We're all squared away on the new box. As always let me know if
you run into any problems.

-Chad
___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l

[Wikitech-l] Reminder: Gerrit downtime in 30 minutes

[Chad Horohoe]

Hi all,

Just a friendly reminder that we're taking down Gerrit in about 30 minutes
for a planned
migration to a new (bigger) server. We've allotted an hour for the
changeover but I'm not
expecting it to take that long.

I'll be sure to let everyone know when it's back up and running.

-Chad
___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l