Wikitech-l October 2019

wikitech-l@lists.wikimedia.org

53 participants
70 discussions

December Deployment Freeze
by Tyler Cipriani 16 Oct '19

16 Oct '19

Hi All! tl;dr: December deployment freeze 2019-12-19–2020-01-02. Train resumes 2020-01-06. We're coming up to the time of year where we freeze our production deployments to allow for the holiday season's limited availability as well as to ensure the stability of our holiday fundraising. After talking with the fundraising team we've decided to stick with what we've done in years past[0][1][2][3][4] and freeze for the final week and the first week of the year. For this year that means the final deployment of the calendar year will be on 2019-12-19 and the first deployment of the new year will be on 2020-01-02. Train will resume running the week on 2020-01-06. <3 -- Tyler [0]. <https://wikitech.wikimedia.org/wiki/Deployments/Archive/2018/12> [1]. <https://wikitech.wikimedia.org/wiki/Deployments/Archive/2017/12> [2]. <https://wikitech.wikimedia.org/wiki/Deployments/Archive/2016/12> [3]. <https://wikitech.wikimedia.org/wiki/Deployments/Archive/2015/12> [4]. <https://wikitech.wikimedia.org/wiki/Deployments/Archive/2014/12>

1 0

MediaWiki 1.34.0-rc.0 is ready for testing
by Sam Reed 15 Oct '19

15 Oct '19

I'm pleased to announce the immediate availability of MediaWiki 1.34.0-rc.0, the first release candidate for 1.34.x. Download links at the end of the e-mail. The tag has been signed and pushed to Git. Please note that MediaWiki 1.34 no longer supports HHVM, and also the PHP version requirement has been raised from 7.0.13 in MediaWiki 1.33, to 7.2.9. This is not a final release and should not be used for production websites. Known issues are tracked in Phabricator on the release workboard [1]. As always please do try out the release candidate in a test environment and report any issues that you discover. Please use the #MW-1.34-Release [2] tag in Phabricator when reporting issues specific to this release. It is expected that MediaWiki 1.34 will become final in the second half of November 2019. Preliminary release notes: https://phabricator.wikimedia.org/source/mediawiki/browse/REL1_34/RELEASE-N… https://www.mediawiki.org/wiki/Release_notes/1.34 MediaWiki core with bundled extensions: https://releases.wikimedia.org/mediawiki/1.34/mediawiki-1.34.0-rc.0.tar.gz Core only, no extensions: https://releases.wikimedia.org/mediawiki/1.34/mediawiki-core-1.34.0-rc.0.ta… GPG signatures: https://releases.wikimedia.org/mediawiki/1.34/mediawiki-core-1.34.0-rc.0.ta… https://releases.wikimedia.org/mediawiki/1.34/mediawiki-1.34.0-rc.0.tar.gz.… Public keys: https://www.mediawiki.org/keys/keys.html Open Bugs: [1] https://phabricator.wikimedia.org/project/board/3386/ Bug report form: [2] https://phabricator.wikimedia.org/maniphest/task/edit/form/1/?tags=MW-1.34-… ********************************************************************** Download: https://releases.wikimedia.org/mediawiki/1.34/mediawiki-1.34.0-rc.0.tar.gz Download without bundled extensions: https://releases.wikimedia.org/mediawiki/1.34/mediawiki-core-1.34.0-rc.0.ta… GPG signatures: https://releases.wikimedia.org/mediawiki/1.34/mediawiki-core-1.34.0-rc.0.ta… https://releases.wikimedia.org/mediawiki/1.34/mediawiki-1.34.0-rc.0.tar.gz.… Public keys: https://www.mediawiki.org/keys/keys.html

1 0

Maintenance release: 1.31.5 and 1.32.5
by Sam Reed 15 Oct '19

15 Oct '19

Hi all, I would like to announce the release of MediaWiki 1.32.5 and 1.31.5. These releases primarily fix an issue in the backported security patch for T230402. This wasn't compatible with 1.32 and 1.31 as is, so modifications were required. It was fine for 1.33, hence no followup release for 1.33. Some other minor fixes are also included. == Links to all mentioned tasks == * https://phabricator.wikimedia.org/T230402 == Release notes == Full release notes for 1.31.5: https://phabricator.wikimedia.org/diffusion/MW/browse/REL1_31/RELEASE-NOTES… https://www.mediawiki.org/wiki/Release_notes/1.31 Full release notes for 1.32.5: https://phabricator.wikimedia.org/diffusion/MW/browse/REL1_32/RELEASE-NOTES… https://www.mediawiki.org/wiki/Release_notes/1.32 For information about how to upgrade, see <https://www.mediawiki.org/wiki/Manual:Upgrading> ********************************************************************** Download: https://releases.wikimedia.org/mediawiki/1.32/mediawiki-1.32.5.tar.gz Download without bundled extensions: https://releases.wikimedia.org/mediawiki/1.32/mediawiki-core-1.32.5.tar.gz Patch to previous version (1.32.4): https://releases.wikimedia.org/mediawiki/1.32/mediawiki-1.32.5.patch.gz GPG signatures: https://releases.wikimedia.org/mediawiki/1.32/mediawiki-core-1.32.5.tar.gz.… https://releases.wikimedia.org/mediawiki/1.32/mediawiki-1.32.5.tar.gz.sig https://releases.wikimedia.org/mediawiki/1.32/mediawiki-1.32.5.patch.gz.sig Public keys: https://www.mediawiki.org/keys/keys.html ********************************************************************** Download: https://releases.wikimedia.org/mediawiki/1.31/mediawiki-1.31.5.tar.gz Download without bundled extensions: https://releases.wikimedia.org/mediawiki/1.31/mediawiki-core-1.31.5.tar.gz Patch to previous version (1.31.4): https://releases.wikimedia.org/mediawiki/1.31/mediawiki-1.31.5.patch.gz GPG signatures: https://releases.wikimedia.org/mediawiki/1.31/mediawiki-core-1.31.5.tar.gz.… https://releases.wikimedia.org/mediawiki/1.31/mediawiki-1.31.5.tar.gz.sig https://releases.wikimedia.org/mediawiki/1.31/mediawiki-1.31.5.patch.gz.sig Public keys: https://www.mediawiki.org/keys/keys.html

1 0

s5 primary master switchover (read-only required) 15th October 05:00 AM UTC
by Manuel Arostegui 15 Oct '19

15 Oct '19

Hello, We have requested a 30 minutes read-only window for s5 wikis (T234303) for the 15th October from 05:00-05:30 AM UTC to switchover that section primary database master (T234300) db1070 is an old host and out of warranty that will be decommissioned (T217396). The new master will be db1100. We are going to do this on Tuesday 15th Oct from 05:00 to 05:30 AM UTC (we do not expect to use the 30 minutes window, if everything goes as expected). Impact: Writes will be blocked on the following wikis cebwiki dewiki enwikivoyage mgwiktionary shwiki srwiki Reads will remain unaffected. Communication will happen at #wikimedia-operations If you are around at that time and want to help with the monitoring, please join us! Thanks

1 2

Community Tech: New Format for 2020 Wishlist Survey
by Ilana Fried 14 Oct '19

14 Oct '19

Hello, everyone! My name is Ilana, and I'm the product manager for the Community Tech team. We’re excited to share an update on the Community Tech 2020 Wishlist Survey <https://meta.wikimedia.org/wiki/Community_Wishlist_Survey_2020>. This will be our fifth annual Community Wishlist Survey, and for this year, we’ve decided to take a different approach. In the past, we've invited people to write proposals for any features or fixes that they'd like to see, and the Community Tech team has addressed the top ten wishes with the most support votes. This year, we're just going to focus on the *non-Wikipedia content projects* (i.e. Wikibooks, Wiktionary, Wikiquote, Commons, Wikisource, Wikiversity, Wikispecies, Wikidata, Wikivoyage, and Wikinews), and we're only going to address the top five wishes from this survey. This is a big departure from the typical process. In the following year (2021), we’ll probably return to the traditional structure. So, why this change? We’ve been following the same format for years — and, generally, it has lots of benefits. We build great tools, provide useful improvements, and have an impact on diverse communities. However, the nature of the format tends to prioritize the largest project (Wikipedia). This makes it harder to serve smaller projects, and many of their wishes never make it onto the wishlist. As a community-focused team, we want to support *all* projects. Thus, for 2020, we want to shine a light on non-Wikipedia projects. Furthermore, we’ll be accepting five wishes. Over the years, we’ve taken on larger wishes (like Global Preferences <https://meta.wikimedia.org/wiki/Community_Tech/Global_preferences> or Who Wrote That <https://meta.wikimedia.org/wiki/Community_Tech/Who_Wrote_That_tool>), which are awesome projects. At the same time, they tend to be lengthy endeavors, requiring extra time for research and development. When we looked at the 2019 wishlist, there were still many unresolved wishes. Meanwhile, we wanted to make room for the new 2020 wishes. For this reason, we’ve decided to take on a shortened list, so we can address as many wishes (new and remaining 2019 wishes <https://meta.wikimedia.org/wiki/Community_Wishlist_Survey_2019/Results>) as possible. Overall, we look forward to this year’s survey. We worked with lots of folks (engineering, product management, and others) to think about how we could support underserved projects, all while preserving the dynamic and open nature of the wishlist. *Please let us know your thoughts <https://meta.wikimedia.org/wiki/Talk:Community_Wishlist_Survey_2020>* related to this change. In addition, we’ll begin thinking about the guidelines for this new process, so *we want your feedback <https://meta.wikimedia.org/wiki/Talk:Community_Wishlist_Survey_2020>* (on what sorts of processes/rules we may want to consider). Thank you, and we’re very curious to see the wishes in November! Thanks, Ilana Fried Product Manager, Community Tech <https://meta.wikimedia.org/wiki/Community_Tech>

4 4

Being logged out of gerrit
by Amir Sarabadani 13 Oct '19

13 Oct '19

Hello, I'm being logged out from gerrit basically every other day, I'm pretty sure I use "Remember me" and because my passwords are secure, It's cumbersome to login (not that much but it piles up the frustration). Is it just me? My colleagues and some other people I personally know have this issue too but I'm not sure if it's universal. Best -- Amir (he/him)

6 7

MediaWiki Extensions Security Release Supplement
by Scott Bassett 11 Oct '19

11 Oct '19

Greetings- With the security/maintenance release of MediaWiki 1.31.4 / 1.32.4 / 1.33.1 [0], we would also like to provide this supplementary announcement of wmf-deployed extensions [1] with now-public security patches and backports [2]: == MobileFrontend == * (T229541, CVE-2019-14807) - Javascript injection in edit summary on mobile site. <https://gerrit.wikimedia.org/r/q/I0cb918f8148d1782882e104d127f08cbfa23e542> * (T230576, CVE-2019-15124) - XSS in edit summary for ex:MobileFrontend Special:Watchlist <https://gerrit.wikimedia.org/r/q/If4e91093c676de3391e6dde415c8c91c1f582998> == CheckUser == * (T207094 [task to remain private], CVE-2019-16529) - Oversighted edit summaries still visible in CheckUser results <https://gerrit.wikimedia.org/r/q/I3d28bd9f14c1237a34afcd2e4479152f571e29a6> == AbuseFilter == * (T224203 [task to remain private], CVE-2019-16528) - Oversighting the user who performed an edit doesn't hide it from the abuse filter log <https://gerrit.wikimedia.org/r/q/If3d3256404d0f3dbde171831937d1a816b3e2734> The Wikimedia Security Team recommends updating these extensions to the current master branch or supported release branches [3] as soon as possible. As you may have noticed, some of the referenced Phabricator tasks above are still private. Unfortunately, when security issues are reported, sometimes sensitive information is exposed and since Phabricator is historical, we cannot make these tasks public without exposing this sensitive information. If you have any additional questions or concerns, please feel free to contact security(a)wikimedia.org or file a security task within Phabricator. [0] https://lists.wikimedia.org/pipermail/wikitech-l/2019-October/092656.html [1] https://w.wiki/9hi [2] https://phabricator.wikimedia.org/T232113 [3] https://www.mediawiki.org/wiki/Version_lifecycle -- Scott Bassett sbassett(a)wikimedia.org

1 0

Scrum of scrums/2019-10-09
by Željko Filipin 10 Oct '19

10 Oct '19

Hi, for HTML version, see https://www.mediawiki.org/wiki/Scrum_of_scrums/2019-10-09 Željko -- = 2019-10-09 = == Callouts == * DBA SREs bring to your attention that: S5 primary database master will be switched over 15th Oct at 05:00 AM UTC - read only required [[phab:T234303]] == Product == === Editing === * Updates: ** Developing technical proof of concepts for talk pages work: *** Write a comment parser for PHP HTML (task [[phab:T234404]]) ** Addressing errors caused by TreeModifier changes (task [[phab:T234489]]) ** ve.ui.MWDefinedTransclusionContextItem: Fix handling of template names (task [[phab:T234817]]) ** Fix linking to pages in media dialog/media context/internal link context (task [[phab:T233628]]) ** ui.MWSaveDialog: checkbox tracking was getting duplicated on every setup (task [[phab:T232790]]) by David Lynch ** Improve logging for VE API (task [[phab:T233320]]) *** Don't try to use structured data in structured logging, it doesn't work (task [[phab:T233320]]) *** ApiVisualEditorEdit: Add logging for funny etags (task [[phab:T233320]]) *** ApiVisualEditor: Add logging for RESTBase HTTP errors (task [[phab:T233127]]) === Growth === * Updates: ** API module and service abstraction for suggested edits (task [[phab:T234426]]) **Homepage: Don't use flexbox for vertical layouts in mobile start module (task [[phab:T234380]]) ** Fix SuggestedEdits module positioning (task [[phab:T232420]]) ** Add gender to some messages (task [[phab:T234350]]) ** Homepage discovery: adjust avator icon color and size (task [[phab:T225318]]) ** Add SuggestedEdits module skeleton (task [[phab:T232420]]) ** Homepage: add banners for mobile discovery (task [[phab:T224883]]) === iOS native app === * Updates: ** 6.5 in active development - [[phab:project/view/4245]] ***bug fixes *** History & diffs feature **** Core Platform working on Rest APIs for this === Android native app === * Updates: ** Minor release with the survey extended indefinitely ** Most of the work on Suggested edits V3 is over. Android team will be coordinating with PI team to develop and finish the remaining features ** Not blocked on mobile HTML anymore. === Product Infrastructure === * Updates: ** Wikifeeds service is now live and remaining code in PCS is being removed https://github.com/wikimedia/restbase/pull/1199 ** MEP (Modern Event Platform) stream config implementation [[phab:T233634]] === Structured Data === * Blocked by: ** Wikidata/WMDE: [[phab:T229280]], providing alternative to [[gerrit:534536]] * Blocking: ** Wikidata/WMDE: As we're optimizing the use of Resource Loader in the context of Wikibase JS code, we've tried to adapt WikibaseMediaInfo ([[gerrit:541553]], [[gerrit:540403]]) but are failing to adapt test runner helpers. We'd appreciate help with this. * Updates: ** trucking along with MachineVision ** MediaInfo cleanup === Parsing === * Updates: ** Aiming for Parsoid/PHP to be feature complete by end of week -- fingers crossed. ** Two forms of tests are now "green"ish (a) parser tests (b) round trip tests. Ran small-scale (c) visual-diff testing comparing Parsoid/JS & Parsoid/PHP rendering (d) HTML string diffs comparing Parsoid/JS & Parsoid/PHP HTML and fixing bugs. Might roll out a larger-scale string diff testing soon. ** SRE has readied 2 servers in the production cluster with Parsoid/PHP for benchmarking. Awaiting some config patches to be deployed. ** Still aiming for a Parsoid/PHP deployment ot the production cluster in < 2 weeks. This only directs reparse traffic and NO LIVE client traffic. That will come in maybe another 2-3 weeks after this first deployment. ** Waiting for Services (Core Platform Team) to greenlight RESTBase integration in the beta cluster for Parsoid clients (VE, CX, MCS) to run their tests against Parsoid/PHP. === UI Standardization === * Updates: ** OOUI v0.35.0 release on the way https://phabricator.wikimedia.org/diffusion/GOJU/browse/master/History.md, 1 breaking,1 deprecating change, IE 6 fallbacks removal *** Remove deprecated infuse-by-id feature *** icons: Change and rename 'unTrash' to 'restore' *** WikimediaUI theme uses `px` for all properties, where font-scaling is not implied necessity. New CSS approach, that should become standard ** Design Style Guide Components work continuation ** Accessibility statement for wikimediafoundation.org live https://wikimediafoundation.org/accessibility-statement/ *** Worked with Legal and Comms on successful rollout, first of its kind for Foundation == Technology == === Cloud Services === * Blocking: ** Release Engineering: change CPU scaling governor on some of the old cloudvirt (1001-1012) [[phab:T225713#5520691]] === Core Platform === * Updates: ** History API for iOS grinding on ** Kask rollout re-continues ** Echo notification storage ** Out for tech-all meeting === Engineering Productivity === ==== Performance ==== * Updates: ** We have started to do synthetic performance test to more user journeys: Measuring the Obama page coming from Google, from our internal search page and from searching from the header. ** Meeting with Emery Berger (professor from Massachusetts Amherst University) to get feedback if there's a way for us to get more stable performance metrics. ** The performance team will organize a devroom about Web Performance at https://fosdem.org/2020/ ==== Release Engineering ==== * Blocked by: ** Cloud Services: change CPU scaling governor on some of the old cloudvirt (1001-1012) [[phab:T225713#5520691]] ** Site Reliability Engineering: JMX Prometheus exporter for Gerrit. [[phab:T184086]] * Updates: ** Train Health *** Last week: 1.34.0-wmf.25 - [[phab:T220750]] *** This week: 1.35.0-wmf.1 - [[phab:T233849]] *** Next week: 1.35.0-wmf.2 - [[phab:T233850]] ** Introducing Phatality - Streamlined error reporting from Kibana to Phabricator [[phab:phame/post/view/177/introducing_phatality]] ** Quibble 0.0.36 released https://lists.wikimedia.org/pipermail/wikitech-l/2019-October/092658.html ** Quibble 0.0.37 released https://lists.wikimedia.org/pipermail/wikitech-l/2019-October/092660.html ** Selenium documentation updated [[Selenium/Node.js]] === Site Reliability Engineering === * Blocking: ** Release Engineering: JMX Prometheus exporter for Gerrit. [[phab:T184086]] * Updates: ** DBA SREs bring to your attention that: S5 primary database master will be switched over 15th Oct at 05:00 AM UTC - read only required [[phab:T234303]] == Wikimedia DE == === Wikidata === * Blocked by: ** Structured Data: As we're optimizing the use of Resource Loader in the context of Wikibase JS code, we've tried to adapt WikibaseMediaInfo ([[gerrit:541553]], [[gerrit:540403]]) but are failing to adapt test runner helpers. We'd appreciate help with this. * Blocking: ** Structured Data: [[phab:T229280]], providing alternative to [[gerrit:534536]]

1 0

Looking for new projects for New Developers guide
by Srishti Sethi 10 Oct '19

10 Oct '19

Hello everyone, We are looking for new projects which welcome new contributors and offer mentorship to add to the New Developers <https://www.mediawiki.org/wiki/New_Developers> guide. Your project will be a good fit if it meets all the criteria for listing a featured project: https://www.mediawiki.org/wiki/New_Developers/Featured_Projects#How_to_beco… . If you are interested in listing your project, click here to create a task on Phabricator with the title “Make project X a featured project on mw:New Developers” and tag #Developer-Advocacy <https://phabricator.wikimedia.org/maniphest/task/edit/form/1/?projects=Deve…>. We will take it from there :) Looking forward to your participation! Cheers, Srishti *Srishti Sethi* Developer Advocate Wikimedia Foundation <https://wikimediafoundation.org/>

1 0

TechCom Radar 2019-10-09
by Alexandra Paskulin 10 Oct '19

10 Oct '19

Hi all, Here are the minutes from this week's TechCom meeting: * Announcement: Guidelines established by approved RFC Define criteria for setting explicit PHP support target for MediaWiki < https://phabricator.wikimedia.org/T228342> are available at <https://www.mediawiki.org/wiki/Support_policy_for_PHP>. * Last call: Core REST API namespace and version < https://phabricator.wikimedia.org/T232485>. This RFC proposes a namespace and version policy for routes in the MediaWiki REST API. * Discussed: Section header "share" link < https://phabricator.wikimedia.org/T18691>. This RFC aims to make it easier for readers to share links to sections on wiki pages. * Discussed: New Skin for Desktop Improvements Project <https://phabricator.wikimedia.org/T234907>. This RFC discusses the approach for implementing broad UI changes to the desktop interface of Wikimedia projects. * Discussed: Strategy for PHP interface changes < https://phabricator.wikimedia.org/T193613>. This RFC proposes policies and strategies to mitigate problems arising from the need to change PHP interfaces that are implemented by classes defined by extensions. In particular, it proposes a separate policy that defines the stable interface for use by extensions, see <https://www.mediawiki.org/wiki/Stable_Interface_Policy>. * No IRC meeting next week. You can also find our meeting minutes at <https://www.mediawiki.org/wiki/Wikimedia_Technical_Committee/Minutes> See also the TechCom RFC board <https://phabricator.wikimedia.org/tag/mediawiki-rfcs/>. If you prefer you can subscribe to our newsletter here <https://www.mediawiki.org/wiki/Newsletter:TechCom_Radar> Best, - Alex -- Alex Paskulin Technical Writer Wikimedia Foundation

1 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

Wikitech-l October 2019