Hello folks,
service-template-node v0.4.0 has just been released~[1]. The new version represents an important security and feature upgrade from v0.3.2 and you are urged to update as soon as possible~[2].
On the feature side, this release brings out-of-the-box support for sending metrics for all requests made against a service, which means that after upgrading you will be able to set up your own grafana dashboard with relevant metrics~[3] very easily.
Security-wise, there were some possible RegEx exploits in one of the node module dependencies. This has been mitigated by updating the relevant modules to a version that does not have the deficiency. Additionally, from now on a node-module-security scan is being run every time the service is tested to ensure our infrastructure is kept safe.
Please update as soon as possible if you have a service based on the service template running in WMF production. And, as always, should you have any questions or concerns, feel free to reach out to me.
Cheers, Marko
[1] https://github.com/wikimedia/service-template-node/tree/v0.4.0 [2] you can follow the guide on https://www.mediawiki.org/wiki/ServiceTemplateNode/Updating [3] dashboards a la https://grafana.wikimedia.org/dashboard/db/restbase?panelId=16&fullscree...