Hello Roy- I don't believe there is any release or deployment process for userJS on the projects, certainly nothing formal or standardized. In some way, Gadgets 2.0/3.0 was designed with these issues in mind, but that project is currently stalled, as far as I know. What you're doing is likely what I and other WMF folks would recommend (version control, tests if feasible, careful deployment with an announcement to users if you have some channel of communication, etc). If you'd ever like a quick security review of the code or possibly some aggregated data on its usage, feel free to create a task in Phabricator. On Mon, Oct 26, 2020 at 11:27 AM Roy Smith <roy(a)panix.com> wrote: -- Scott Bassett sbassett(a)wikimedia.org _______________________________________________ Wikitech-l mailing list Wikitech-l(a)lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l

2020. 11. 1. 21:03, Gergo Tisza <gtisza(a)wikimedia.org> 작성:  There is some discussion in T71445 and T187749 but nothing usable. I think some frwiki editors had plans for a bot but I don't know if anything came out of it. The closest tool I'm aware of is Dibabel but that copies the code from another wiki, not Github. (Also, it's meant for Lua code, which does not pose similar security risks.) Updating the page from a CI script is not too hard but rather scary security-wise. Writing a deploy script in Pywikibot or some similar framework seems pretty straightforward though, reasonably secure, and not too inconvenient to do an extra CLI command for deploying. _______________________________________________ Wikitech-l mailing list Wikitech-l(a)lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l