Wikitech-l October 2019

wikitech-l@lists.wikimedia.org

53 participants
65 discussions

Being logged out of gerrit
by Amir Sarabadani 13 Oct '19

13 Oct '19

Hello, I'm being logged out from gerrit basically every other day, I'm pretty sure I use "Remember me" and because my passwords are secure, It's cumbersome to login (not that much but it piles up the frustration). Is it just me? My colleagues and some other people I personally know have this issue too but I'm not sure if it's universal. Best -- Amir (he/him)

6 7

MediaWiki Extensions Security Release Supplement
by Scott Bassett 11 Oct '19

11 Oct '19

Greetings- With the security/maintenance release of MediaWiki 1.31.4 / 1.32.4 / 1.33.1 [0], we would also like to provide this supplementary announcement of wmf-deployed extensions [1] with now-public security patches and backports [2]: == MobileFrontend == * (T229541, CVE-2019-14807) - Javascript injection in edit summary on mobile site. <https://gerrit.wikimedia.org/r/q/I0cb918f8148d1782882e104d127f08cbfa23e542> * (T230576, CVE-2019-15124) - XSS in edit summary for ex:MobileFrontend Special:Watchlist <https://gerrit.wikimedia.org/r/q/If4e91093c676de3391e6dde415c8c91c1f582998> == CheckUser == * (T207094 [task to remain private], CVE-2019-16529) - Oversighted edit summaries still visible in CheckUser results <https://gerrit.wikimedia.org/r/q/I3d28bd9f14c1237a34afcd2e4479152f571e29a6> == AbuseFilter == * (T224203 [task to remain private], CVE-2019-16528) - Oversighting the user who performed an edit doesn't hide it from the abuse filter log <https://gerrit.wikimedia.org/r/q/If3d3256404d0f3dbde171831937d1a816b3e2734> The Wikimedia Security Team recommends updating these extensions to the current master branch or supported release branches [3] as soon as possible. As you may have noticed, some of the referenced Phabricator tasks above are still private. Unfortunately, when security issues are reported, sometimes sensitive information is exposed and since Phabricator is historical, we cannot make these tasks public without exposing this sensitive information. If you have any additional questions or concerns, please feel free to contact security(a)wikimedia.org or file a security task within Phabricator. [0] https://lists.wikimedia.org/pipermail/wikitech-l/2019-October/092656.html [1] https://w.wiki/9hi [2] https://phabricator.wikimedia.org/T232113 [3] https://www.mediawiki.org/wiki/Version_lifecycle -- Scott Bassett sbassett(a)wikimedia.org

1 0

Scrum of scrums/2019-10-09
by Željko Filipin 10 Oct '19

10 Oct '19

Hi, for HTML version, see https://www.mediawiki.org/wiki/Scrum_of_scrums/2019-10-09 Željko -- = 2019-10-09 = == Callouts == * DBA SREs bring to your attention that: S5 primary database master will be switched over 15th Oct at 05:00 AM UTC - read only required [[phab:T234303]] == Product == === Editing === * Updates: ** Developing technical proof of concepts for talk pages work: *** Write a comment parser for PHP HTML (task [[phab:T234404]]) ** Addressing errors caused by TreeModifier changes (task [[phab:T234489]]) ** ve.ui.MWDefinedTransclusionContextItem: Fix handling of template names (task [[phab:T234817]]) ** Fix linking to pages in media dialog/media context/internal link context (task [[phab:T233628]]) ** ui.MWSaveDialog: checkbox tracking was getting duplicated on every setup (task [[phab:T232790]]) by David Lynch ** Improve logging for VE API (task [[phab:T233320]]) *** Don't try to use structured data in structured logging, it doesn't work (task [[phab:T233320]]) *** ApiVisualEditorEdit: Add logging for funny etags (task [[phab:T233320]]) *** ApiVisualEditor: Add logging for RESTBase HTTP errors (task [[phab:T233127]]) === Growth === * Updates: ** API module and service abstraction for suggested edits (task [[phab:T234426]]) **Homepage: Don't use flexbox for vertical layouts in mobile start module (task [[phab:T234380]]) ** Fix SuggestedEdits module positioning (task [[phab:T232420]]) ** Add gender to some messages (task [[phab:T234350]]) ** Homepage discovery: adjust avator icon color and size (task [[phab:T225318]]) ** Add SuggestedEdits module skeleton (task [[phab:T232420]]) ** Homepage: add banners for mobile discovery (task [[phab:T224883]]) === iOS native app === * Updates: ** 6.5 in active development - [[phab:project/view/4245]] ***bug fixes *** History & diffs feature **** Core Platform working on Rest APIs for this === Android native app === * Updates: ** Minor release with the survey extended indefinitely ** Most of the work on Suggested edits V3 is over. Android team will be coordinating with PI team to develop and finish the remaining features ** Not blocked on mobile HTML anymore. === Product Infrastructure === * Updates: ** Wikifeeds service is now live and remaining code in PCS is being removed https://github.com/wikimedia/restbase/pull/1199 ** MEP (Modern Event Platform) stream config implementation [[phab:T233634]] === Structured Data === * Blocked by: ** Wikidata/WMDE: [[phab:T229280]], providing alternative to [[gerrit:534536]] * Blocking: ** Wikidata/WMDE: As we're optimizing the use of Resource Loader in the context of Wikibase JS code, we've tried to adapt WikibaseMediaInfo ([[gerrit:541553]], [[gerrit:540403]]) but are failing to adapt test runner helpers. We'd appreciate help with this. * Updates: ** trucking along with MachineVision ** MediaInfo cleanup === Parsing === * Updates: ** Aiming for Parsoid/PHP to be feature complete by end of week -- fingers crossed. ** Two forms of tests are now "green"ish (a) parser tests (b) round trip tests. Ran small-scale (c) visual-diff testing comparing Parsoid/JS & Parsoid/PHP rendering (d) HTML string diffs comparing Parsoid/JS & Parsoid/PHP HTML and fixing bugs. Might roll out a larger-scale string diff testing soon. ** SRE has readied 2 servers in the production cluster with Parsoid/PHP for benchmarking. Awaiting some config patches to be deployed. ** Still aiming for a Parsoid/PHP deployment ot the production cluster in < 2 weeks. This only directs reparse traffic and NO LIVE client traffic. That will come in maybe another 2-3 weeks after this first deployment. ** Waiting for Services (Core Platform Team) to greenlight RESTBase integration in the beta cluster for Parsoid clients (VE, CX, MCS) to run their tests against Parsoid/PHP. === UI Standardization === * Updates: ** OOUI v0.35.0 release on the way https://phabricator.wikimedia.org/diffusion/GOJU/browse/master/History.md, 1 breaking,1 deprecating change, IE 6 fallbacks removal *** Remove deprecated infuse-by-id feature *** icons: Change and rename 'unTrash' to 'restore' *** WikimediaUI theme uses `px` for all properties, where font-scaling is not implied necessity. New CSS approach, that should become standard ** Design Style Guide Components work continuation ** Accessibility statement for wikimediafoundation.org live https://wikimediafoundation.org/accessibility-statement/ *** Worked with Legal and Comms on successful rollout, first of its kind for Foundation == Technology == === Cloud Services === * Blocking: ** Release Engineering: change CPU scaling governor on some of the old cloudvirt (1001-1012) [[phab:T225713#5520691]] === Core Platform === * Updates: ** History API for iOS grinding on ** Kask rollout re-continues ** Echo notification storage ** Out for tech-all meeting === Engineering Productivity === ==== Performance ==== * Updates: ** We have started to do synthetic performance test to more user journeys: Measuring the Obama page coming from Google, from our internal search page and from searching from the header. ** Meeting with Emery Berger (professor from Massachusetts Amherst University) to get feedback if there's a way for us to get more stable performance metrics. ** The performance team will organize a devroom about Web Performance at https://fosdem.org/2020/ ==== Release Engineering ==== * Blocked by: ** Cloud Services: change CPU scaling governor on some of the old cloudvirt (1001-1012) [[phab:T225713#5520691]] ** Site Reliability Engineering: JMX Prometheus exporter for Gerrit. [[phab:T184086]] * Updates: ** Train Health *** Last week: 1.34.0-wmf.25 - [[phab:T220750]] *** This week: 1.35.0-wmf.1 - [[phab:T233849]] *** Next week: 1.35.0-wmf.2 - [[phab:T233850]] ** Introducing Phatality - Streamlined error reporting from Kibana to Phabricator [[phab:phame/post/view/177/introducing_phatality]] ** Quibble 0.0.36 released https://lists.wikimedia.org/pipermail/wikitech-l/2019-October/092658.html ** Quibble 0.0.37 released https://lists.wikimedia.org/pipermail/wikitech-l/2019-October/092660.html ** Selenium documentation updated [[Selenium/Node.js]] === Site Reliability Engineering === * Blocking: ** Release Engineering: JMX Prometheus exporter for Gerrit. [[phab:T184086]] * Updates: ** DBA SREs bring to your attention that: S5 primary database master will be switched over 15th Oct at 05:00 AM UTC - read only required [[phab:T234303]] == Wikimedia DE == === Wikidata === * Blocked by: ** Structured Data: As we're optimizing the use of Resource Loader in the context of Wikibase JS code, we've tried to adapt WikibaseMediaInfo ([[gerrit:541553]], [[gerrit:540403]]) but are failing to adapt test runner helpers. We'd appreciate help with this. * Blocking: ** Structured Data: [[phab:T229280]], providing alternative to [[gerrit:534536]]

1 0

Looking for new projects for New Developers guide
by Srishti Sethi 10 Oct '19

10 Oct '19

Hello everyone, We are looking for new projects which welcome new contributors and offer mentorship to add to the New Developers <https://www.mediawiki.org/wiki/New_Developers> guide. Your project will be a good fit if it meets all the criteria for listing a featured project: https://www.mediawiki.org/wiki/New_Developers/Featured_Projects#How_to_beco… . If you are interested in listing your project, click here to create a task on Phabricator with the title “Make project X a featured project on mw:New Developers” and tag #Developer-Advocacy <https://phabricator.wikimedia.org/maniphest/task/edit/form/1/?projects=Deve…>. We will take it from there :) Looking forward to your participation! Cheers, Srishti *Srishti Sethi* Developer Advocate Wikimedia Foundation <https://wikimediafoundation.org/>

1 0

TechCom Radar 2019-10-09
by Alexandra Paskulin 10 Oct '19

10 Oct '19

Hi all, Here are the minutes from this week's TechCom meeting: * Announcement: Guidelines established by approved RFC Define criteria for setting explicit PHP support target for MediaWiki < https://phabricator.wikimedia.org/T228342> are available at <https://www.mediawiki.org/wiki/Support_policy_for_PHP>. * Last call: Core REST API namespace and version < https://phabricator.wikimedia.org/T232485>. This RFC proposes a namespace and version policy for routes in the MediaWiki REST API. * Discussed: Section header "share" link < https://phabricator.wikimedia.org/T18691>. This RFC aims to make it easier for readers to share links to sections on wiki pages. * Discussed: New Skin for Desktop Improvements Project <https://phabricator.wikimedia.org/T234907>. This RFC discusses the approach for implementing broad UI changes to the desktop interface of Wikimedia projects. * Discussed: Strategy for PHP interface changes < https://phabricator.wikimedia.org/T193613>. This RFC proposes policies and strategies to mitigate problems arising from the need to change PHP interfaces that are implemented by classes defined by extensions. In particular, it proposes a separate policy that defines the stable interface for use by extensions, see <https://www.mediawiki.org/wiki/Stable_Interface_Policy>. * No IRC meeting next week. You can also find our meeting minutes at <https://www.mediawiki.org/wiki/Wikimedia_Technical_Committee/Minutes> See also the TechCom RFC board <https://phabricator.wikimedia.org/tag/mediawiki-rfcs/>. If you prefer you can subscribe to our newsletter here <https://www.mediawiki.org/wiki/Newsletter:TechCom_Radar> Best, - Alex -- Alex Paskulin Technical Writer Wikimedia Foundation

1 0

Quibble 0.0.36 released
by Antoine Musso 09 Oct '19

09 Oct '19

Hello, I have cut a new version of Quibble — version 0.0.36. This will roll out to all CI jobs this week. Two new features are now present: * Quibble sets up a wiki against which to run tests. It can now override configuration set by the MediaWiki installer, which we have done for two items: ** This wiki now allows file uploading ($wgEnableUploads = true), which unblocks people writing integration tests for uploading. – T190829 and T199939 ** This wiki now has $wgSecretKey set (to the value 'supercalifragilisticexpialidocious'), which unblocks people writing integration tests for the job queue. – T230340 * After each test stage, Quibble will report how long it took. The sole bug fix is that errors were previously ignored when processing git clones in parallel. Any errors are now properly raised. T233143 We also now generate and publish a changelog! This means that you can discover more minor new features and miscellaneous changes via: https://doc.wikimedia.org/quibble/changelog.html I will progressively upgrade the CI jobs over the next few days. The new Docker images are: docker-registry.discovery.wmnet/releng/quibble-coverage:0.0.36 docker-registry.discovery.wmnet/releng/quibble-fresnel:0.0.36 docker-registry.discovery.wmnet/releng/quibble-stretch:0.0.36 docker-registry.discovery.wmnet/releng/quibble-stretch-bundle:0.0.36 docker-registry.discovery.wmnet/releng/quibble-stretch-php70:0.0.36 docker-registry.discovery.wmnet/releng/quibble-stretch-php71:0.0.36 docker-registry.discovery.wmnet/releng/quibble-stretch-php72:0.0.36 docker-registry.discovery.wmnet/releng/quibble-stretch-php73:0.0.36 Thank you to Adam Wight, Daniel Kinzler, James Forrester, and Kosta Harlan. -- Antoine "hashar" Musso && James Forrester

2 2

Security and maintenance release: 1.31.4 / 1.32.4 / 1.33.1
by Sam Reed 07 Oct '19

07 Oct '19

1 0

Live Incident: Tools.wmflabs.org
by RhinosF1 - 07 Oct '19

07 Oct '19

Hello all, Please note that all tools.wmflabs.org tools are currently down. See https://phabricator.wikimedia.org/T234834 for live updates. Thanks, RhinosF1 FOSS Developer -- Thanks, RhinosF1 Mediawiki System Administrator Miraheze

1 0

Dropping PHPUnit 4 support
by Daimona 07 Oct '19

07 Oct '19

Hello all, Following our migration away from HHVM, we're now also requiring PHPUnit 6+ [0]. Previously, we were allowing PHPUnit 4 as an option, but that version was EOLed in February 2017 [1]. MediaWiki core provides a backward/forward-compatible layer [2] to allow working with both versions. However, that trait will be emptied and removed soon, partly because we want to move to PHPUnit 8. Hence, if you have a local install of PHPUnit 4, you won't be able to use it anymore. I also invite you to check whether any of your repos has an explicit PHPUnit dependency in composer.json [3]. If it does, you can now remove PHPUnit 4 from it. Thank you for your collaboration! [0] - https://gerrit.wikimedia.org/r/#/c/mediawiki/core/+/426058/ [1] - https://phpunit.de/supported-versions.html [2] - https://gerrit.wikimedia.org/g/mediawiki/core/+/e26299b1d14feb341ff5752696f… [3] - List of repos that do have it: https://codesearch.wmflabs.org/search/?q=%22phpunit%5C%2Fphpunit%22%3A&i=no… -- https://meta.wikimedia.org/wiki/User:Daimona_Eaytoy "Daimona" is not my real name -- he/him

3 3

Wikimedia Technical Conference 2019: Open commenting period around themes and sessions
by Rachel Farrand 04 Oct '19

04 Oct '19

Hello! We are holding a week long public commenting period (ending 11 October) on the proposals for themes and sessions for the Wikimedia Technical Conference 2019 <https://www.mediawiki.org/wiki/Wikimedia_Technical_Conference/2019>which will be taking place in Atlanta, Georgia USA this November and will centered around Developer Productivity. Everyone is welcome to review the plan proposal created by our Program Committee <https://www.mediawiki.org/wiki/Wikimedia_Technical_Conference/2019#Program_…> and provide feedback and suggestions. All proposals can be found here: https://phabricator.wikimedia.org/T234085 Thank you! -- Rachel Farrand Senior Program Manager Events Team Wikimedia Foundation

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

Wikitech-l October 2019