Wikitech-l June 2020

wikitech-l@lists.wikimedia.org

66 participants
77 discussions

Security and maintenance release: 1.31.8 / 1.33.4 / 1.34.2
by Sam Reed 24 Jun '20

24 Jun '20

I would like to announce the release of MediaWiki 1.34.2, 1.33.4 and 1.31.8! These releases also serve as a maintenance release for these branches. We've noted that this is minor, and as such you don't need to apply them as quickly as with other security releases, if you're unable to do so, or if you're not running a private wiki. We therefore decided to continue with getting the security (and maintenance) release out for this quarter as planned, even with the global situation as is. While tarballs have already been uploaded, git tags will follow later on today. An "MediaWiki Extensions Security Release Supplement" email will follow this one. As mentioned in the pre-release announcement, this will be the final release of the MediaWiki 1.33 branch, barring any unforeseen issues. If you are currently running 1.33, you are advised to upgrade to a newer, supported version of MediaWiki, which as of writing is MediaWiki 1.34 (as 1.35 has not been released yet). MediaWiki 1.34 will be supported until November 2020. A separate notification of this will be sent out too. == Security fixes == * (T248947) img_auth.php may leak private extension images into the public cache. CVE-2020-15005 == Links to all mentioned tasks == * https://phabricator.wikimedia.org/T248947 == Release notes == Full release notes for 1.31.8: https://phabricator.wikimedia.org/diffusion/MW/browse/REL1_31/RELEASE-NOTES… https://www.mediawiki.org/wiki/Release_notes/1.31 Full release notes for 1.33.4: https://phabricator.wikimedia.org/diffusion/MW/browse/REL1_33/RELEASE-NOTES… https://www.mediawiki.org/wiki/Release_notes/1.33 Full release notes for 1.34.2: https://phabricator.wikimedia.org/diffusion/MW/browse/REL1_34/RELEASE-NOTES… https://www.mediawiki.org/wiki/Release_notes/1.34 For information about how to upgrade, see <https://www.mediawiki.org/wiki/Manual:Upgrading> ********************************************************************** Download: https://releases.wikimedia.org/mediawiki/1.31/mediawiki-1.31.8.tar.gz Download without bundled extensions: https://releases.wikimedia.org/mediawiki/1.31/mediawiki-core-1.31.8.tar.gz Patch to previous version (1.31.7): https://releases.wikimedia.org/mediawiki/1.31/mediawiki-1.31.8.patch.gz GPG signatures: https://releases.wikimedia.org/mediawiki/1.31/mediawiki-core-1.31.8.tar.gz.… https://releases.wikimedia.org/mediawiki/1.31/mediawiki-1.31.8.tar.gz.sig https://releases.wikimedia.org/mediawiki/1.31/mediawiki-1.31.8.patch.gz.sig Public keys: https://www.mediawiki.org/keys/keys.html ********************************************************************** Download: https://releases.wikimedia.org/mediawiki/1.33/mediawiki-1.33.4.tar.gz Download without bundled extensions: https://releases.wikimedia.org/mediawiki/1.33/mediawiki-core-1.33.4.tar.gz Patch to previous version (1.33.3): https://releases.wikimedia.org/mediawiki/1.33/mediawiki-1.33.4.patch.gz GPG signatures: https://releases.wikimedia.org/mediawiki/1.33/mediawiki-core-1.33.4.tar.gz.… https://releases.wikimedia.org/mediawiki/1.33/mediawiki-1.33.4.tar.gz.sig https://releases.wikimedia.org/mediawiki/1.33/mediawiki-1.33.4.patch.gz.sig Public keys: https://www.mediawiki.org/keys/keys.html ********************************************************************** Download: https://releases.wikimedia.org/mediawiki/1.34/mediawiki-1.34.2.tar.gz Download without bundled extensions: https://releases.wikimedia.org/mediawiki/1.34/mediawiki-core-1.34.2.tar.gz Patch to previous version (1.34.1): https://releases.wikimedia.org/mediawiki/1.34/mediawiki-1.34.2.patch.gz GPG signatures: https://releases.wikimedia.org/mediawiki/1.34/mediawiki-core-1.34.2.tar.gz.… https://releases.wikimedia.org/mediawiki/1.34/mediawiki-1.34.2.tar.gz.sig https://releases.wikimedia.org/mediawiki/1.34/mediawiki-1.34.2.patch.gz.sig Public keys: https://www.mediawiki.org/keys/keys.html

1 0

Technical Wishes: Interface for edit conflicts on talk pages
by Max Klemm 24 Jun '20

24 Jun '20

// sorry for cross-posting Hello, A lot of heated discussion occur on talk pages – thus, edit conflicts happen on talk pages a lot. To be able to solve these more effectively, the Technical Wishes team at Wikimedia Germany is designing an additional user interface for this situation. This interface is shown to you when you write on a discussion page and another person writes a discussion post in the same line and saves it before you do. With this additional editing conflict interface you can adjust the order of the comments and edit your comment. If you'd like to know more about this feature, please visit the project page [1]. This interface is created as a result of the Technical Wishes survey [2] in 2015, in which the German Wikipedia community wished for a simpler way to resolve edit conflicts. For regular edit conflicts on article pages, the two column conflict user interface was created, which has been available as a beta feature since November 2018. The plan is to make this additional interface for talk pages available in a few months. We are inviting everyone to have a look at the planned feature and let us know what you think on our central feedback page [3]! -- For the Technical Wishes Team: Max Klemm [1] https://meta.wikimedia.org/wiki/WMDE_Technical_Wishes/Edit_Conflicts#Edit_c… [2] https://de.wikipedia.org/wiki/Wikipedia:Umfragen/Technische_W%C3%BCnsche_20… [3] https://www.mediawiki.org/wiki/Help_talk:Two_Column_Edit_Conflict_View -- Max Klemm Working Student Community Communication for Technical Wishes Wikimedia Deutschland e. V. | Tempelhofer Ufer 23-24 | 10963 Berlin Phone: +49 (0)30 219 158 26-0https://wikimedia.de Imagine a world in which every single human being can freely share in the sum of all knowledge. Help us to achieve our vision!https://spenden.wikimedia.de Wikimedia Deutschland – Gesellschaft zur Förderung Freien Wissens e. V. Eingetragen im Vereinsregister des Amtsgerichts Berlin-Charlottenburg unter der Nummer 23855 B. Als gemeinnützig anerkannt durch das Finanzamt für Körperschaften I Berlin, Steuernummer 27/029/42207.

1 1

1st DBpedia Stack Online-Tutorial, July 1st, 2020
by Sebastian Hellmann 23 Jun '20

23 Jun '20

Apologies for cross-posting Over the last year, the DBpedia core team has consolidated great amount of technology around DBpedia. This tutorial is targeted for developers (in particular of DBpedia Chapters) that wish to learn how to replicate local infrastructure such as loading and hosting an own SPARQL endpoint. A core focus will also be the new DBpedia Stack, which contains several dockerized applications that are automatically loading data from the databus. The tutorial will cover the following topics: - Using Databus collections (Download) - Creating customized Databus collections - Uploading data to the Databus - Using collections in Databus-ready Docker applications - Creating dockerized applications for the DBpedia Stack The first tutorial will be held on July 1st, 2020 at 9:00-10:00 am CEST.The tutorial will be repeated once more at a later time. # Quick Facts - Web URL:https://wiki.dbpedia.org/tutorials/1st-dbpedia-stack-tutorial - When: July 1st, 2020 9:00-10:00 am CEST - Where: The tutorial will be organized online. Registration is required though. - Databus: https://databus.dbpedia.org/ # Registration Attending the DBpedia Stack tutorial is free. Registration is required though. After the registration for the event, you will receive an email with more instructions. Please register here to be part of the meeting: https://docs.google.com/forms/d/e/1FAIpQLSfI3x5YE6bYmxTM57001MBfy5_1EjyjUV5… # Program - Please check the schedule for the upcoming DBpedia Stack Tutorial here: https://wiki.dbpedia.org/tutorials/1st-dbpedia-stack-tutorial # Organisation - Milan Dojchinovski, AKSW/KILT, DBpedia Association - Jan Forberg, AKSW/KILT, DBpedia Association - Sebastian Hellmann, AKSW/KILT, DBpedia Association We are looking forward to meeting you online! With kind regards, The DBpedia Team

1 0

Security pre-release announcement: 1.31.8 / 1.33.4 / 1.34.2
by Sam Reed 23 Jun '20

23 Jun '20

Hi all, Tomorrow we will be issuing a security and maintenance release to all supported branches of MediaWiki. The new releases will be: - 1.34.2 - 1.33.4 - 1.31.8 This will resolve one minor issue in MediaWiki core, and also includes some fixes previously committed to git, including minor security and hardening patches along with bug fixes included for maintenance reasons. We've noted that these issues are minor, and as such you don't need to apply them as quickly as with other security releases, if you're unable to do so. We therefore decided to continue with getting the security (and maintenance) release out for this quarter as planned, even with the global situation as is. We will make the fixes available in these respective release branches, and also master. Tarballs will be available for the above mentioned point releases as well. A summary of some of the security fixes that have gone into non-bundled MediaWiki extensions will also follow. As per the MediaWiki Version lifecycle [1], June 2020 is the scheduled EOL date for the REL1_33. 1.33.4 will therefore be the final release of the MediaWiki 1.33 branch, barring any unforeseen issues. [1] https://www.mediawiki.org/wiki/Version_lifecycle Thanks! Sam

1 0

Etherpad read-only for a few seconds: Thursday 25th 08:00 AM UTC
by Manuel Arostegui 23 Jun '20

23 Jun '20

Hello, We will be switching over m1 database primary master ( https://phabricator.wikimedia.org/T254556#6247415) , which holds the etherpad database. This means that on Thursday 25th at 08:00AM UTC Etherpad will be on read-only for a few seconds. Communication will happen on #wikimedia-operations IRC channel. Sorry for the inconveniences. Manuel.

1 0

Online workshop on writing wikidata queries - June 21 2020 - 9 AM IST
by Shrinivasan T 20 Jun '20

20 Jun '20

Hello all, This is a reminder that the "Writing Wikidata queries" workshop is coming up! It will take place this Sunday, June 21st at 9 am IST on the Zoom platform: https://wikimedia.zoom.us/j/99498586419 More details of the workshop are here: https://meta.wikimedia.org/wiki/SWT_Indic_Workshop_Series_2020/Workshops#Wr… . Remember to bring a computer with you as hands-on activities will be a part of this workshop. We look forward to your participation! :) Cheers, SWT Indic Workshop Series Team

1 0

Newby dev question: extension configuration variable
by Krabina Bernhard 19 Jun '20

19 Jun '20

Hi, in my first attempt at jumping into improving a mediawiki extension, I am failing at a very basic step. I want to make the extension configurable and followed this advice: [ https://www.mediawiki.org/wiki/Manual:Configuration_for_developers | https://www.mediawiki.org/wiki/Manual:Configuration_for_developers ] this is my extension.json I added: "config": { "ShariffServices": { "value": "["twitter","facebook","pinterest"]", "description": "configuration of available services" } }, "ConfigRegistry": { "Shariff": "GlobalVarConfig::newInstance" }, now in the baisc PHP file of the extension, I am trying use MediaWiki\MediaWikiServices; $config = MediaWikiServices::getInstance()->getConfigFactory()->makeConfig( 'Shariff' ); $services = $config->get ('Services'); but the last line leads to [XtqcaewKU0Q3UCukKmZO9AAAABM] /index.php?title=Main_Page Error from line 3061 of ../includes/parser/Parser.php: Call to a member function matchStartAndRemove() on null Backtrace: #0 ..includes/parser/Preprocessor_DOM.php(1277): Parser->braceSubstitution(array, PPFrame_DOM) #1 ../includes/parser/Parser.php(2942): PPFrame_DOM->expand(DOMElement, integer) #2 ../includes/parser/Parser.php(701): Parser->replaceVariables(string, PPFrame_DOM) #3 ../includes/parser/Parser.php(4717): Parser->preprocess(string, Title, ParserOptions) #4 ../includes/cache/MessageCache.php(1089): Parser->transformMsg(string, ParserOptions, Title) #5 ../includes/Message.php(1273): MessageCache->transform(string, boolean, LanguageEn, Title) #6 ../includes/Message.php(874): Message->transformText(string) #7 ../includes/Message.php(934): Message->toString(string) #8 ../includes/OutputPage.php(902): Message->text() #9 /../includes/OutputPage.php(949): OutputPage->setHTMLTitle(Message) #10 ../includes/OutputPage.php(2424): OutputPage->setPageTitle(string) #11 /../includes/exception/MWExceptionRenderer.php(128): OutputPage->prepareErrorPage(string) #12 ../includes/exception/MWExceptionRenderer.php(54): MWExceptionRenderer::reportHTML(ConfigException) #13 ../includes/exception/MWExceptionHandler.php(75): MWExceptionRenderer::output(ConfigException, integer) #14 ../includes/exception/MWExceptionHandler.php(149): MWExceptionHandler::report(ConfigException) #15 ../includes/MediaWiki.php(551): MWExceptionHandler::handleException(ConfigException) #16 ../index.php(42): MediaWiki->run() #17 {main} What am I doing wrong? As far is I understand it, using DefaultSettings.php is outdated, we should be using extension.json. But I can't get it to work. Can anybody point me to a simple extension that uses this mechanism correctly? so long, Bernhard

2 2

(no subject)
by Sarah Ali 18 Jun '20

18 Jun '20

am Sarah Ali recently graduated. Actually I am working on a project where I need to settle mediawiki using CHAMELEON skin. I did everything like settle every directory and created extensions. Everything is done and working perfectly but I am facing a problem which is the last thing of my work. "NAVBAR". as i told chameleon skin has its own navbar with one drop down menu in it attaching "CAPTURE " i am unable to add the other two drop down menus. i just need it to be like "CAPTURE 2". As i am a Computer science graduate i can handle php and javascript but the thing is i couldn't find the file where i need to add code. i used inspect element and tried to find that specific class in the whole skin folder.i tried every single thing for that but i am really helpless i need your help. waiting for your favorable response Regards Saarah

1 0

TechCom Radar 2020-06-17
by Alexandra Paskulin 18 Jun '20

18 Jun '20

Hi all, Here are the minutes from this week's TechCom meeting: * Moved from Phase 2 (Resourcing) to Phase 3 (Explore): Consolidate language metadata into a 'language-data' library and use in MediaWiki < https://phabricator.wikimedia.org/T190129> * Discussed: Should HookRunner be in the service container? < https://phabricator.wikimedia.org/T254271> * Discussed: RFC Hybrid extension management < https://phabricator.wikimedia.org/T250406> * On last call until June 24, 2020 at 20:00 UTC (13:00 PDT, 22:00 CEST): Remove IE 8 from basic support <https://phabricator.wikimedia.org/T248061> * No public RFC discussion next week You can also find our meeting minutes at <https://www.mediawiki.org/wiki/Wikimedia_Technical_Committee/Minutes> See also the TechCom RFC board <https://phabricator.wikimedia.org/tag/mediawiki-rfcs/>. If you prefer you can subscribe to our newsletter here <https://www.mediawiki.org/wiki/Newsletter:TechCom_Radar> -- Alex Paskulin Technical Writer Wikimedia Foundation

1 0

Tool to "convert" timezones for international online events
by Michael Schönitzer 18 Jun '20

18 Jun '20

Hi, due to the global health crisis we nowadays have more online events. This allows for people around the globe to participate but also means easier handling different timezones is more important. Since Wikimedians love to organize and schedule their events onwiki, often on Meta-Wiki, I wrote a tiny userscript and template that allows organizers to set up the conference program with UTC times and users can see them in their local timezone and local date format. It's of course also usable for all other kinds of pages. It works and is useable but so far still in my user namespace: https://meta.wikimedia.org/wiki/User:Michael_Sch%C3%B6nitzer_(WMDE)/timezon… As the next step I would like to move it to the main namespace on meta and convert it to a gadget. (Later it could be copied to other Wikis, when needed.) Before that I wanted to ask for feedback. Is this something you would use? Is there anything esential missing, can you see any negative side effects, or would you like it to be renamed before people start using it? Looking forward to hearing from you. Cheers, M PS: The great idea for this gadget is from Léa Lacroix. -- *M. F. Schönitzer* Community Communication Wikimedia Deutschland e. V. | Tempelhofer Ufer 23-24 | 10963 Berlin Tel. (030) 219 158 26-0 https://wikimedia.de Unsere Vision ist eine Welt, in der alle Menschen am Wissen der Menschheit teilhaben, es nutzen und mehren können. Helfen Sie uns dabei! https://spenden.wikimedia.de Imagine a world in which every single human being can freely share in the sum of all knowledge. Help us to achieve our vision! https://spenden.wikimedia.de Wikimedia Deutschland – Gesellschaft zur Förderung Freien Wissens e. V. Eingetragen im Vereinsregister des Amtsgerichts Berlin-Charlottenburg unter der Nummer 23855 B. Als gemeinnützig anerkannt durch das Finanzamt für Körperschaften I Berlin, Steuernummer 27/029/42207.

4 4

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

Wikitech-l June 2020