Hello folks,

service-template-node v0.4.0 has just been released~[1]. The new version
represents an important security and feature upgrade from v0.3.2 and you
are urged to update as soon as possible~[2].

On the feature side, this release brings out-of-the-box support for sending
metrics for all requests made against a service, which means that after
upgrading you will be able to set up your own grafana dashboard with
relevant metrics~[3] very easily.

Security-wise, there were some possible RegEx exploits in one of the node
module dependencies. This has been mitigated by updating the relevant
modules to a version that does not have the deficiency. Additionally, from
now on a node-module-security scan is being run every time the service is
tested to ensure our infrastructure is kept safe.

Please update as soon as possible if you have a service based on the
service template running in WMF production. And, as always, should you have
any questions or concerns, feel free to reach out to me.


Cheers,
Marko

[1] https://github.com/wikimedia/service-template-node/tree/v0.4.0
[2] you can follow the guide on
https://www.mediawiki.org/wiki/ServiceTemplateNode/Updating
[3] dashboards a la
https://grafana.wikimedia.org/dashboard/db/restbase?panelId=16&fullscreen

-- 
Marko Obrovac, PhD
Senior Services Engineer
Wikimedia Foundation
_______________________________________________
Wikitech-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikitech-l

Reply via email to