Drupal.org changes for the sprint from 20 May to 30 May 2019
Drupal.org change notifications
Software related change records:
https://www.drupal.org/list-changes/drupalorg
Infrastructure related change records:
https://www.drupal.org/list-changes/infrastructure
Announcements
Please review security releases:
Drupal core - Moderately critical - Third-party libraries - SA-CORE-2019-007
Date:
2019-May-08
Security risk:
Moderately critical 14∕25 AC:Complex/A:Admin/CI:All/II:All/E:Theoretical/TD:Uncommon
CVE IDs:
CVE-2019-11831
This security release fixes third-party dependencies included in or required by Drupal core. As described in TYPO3-PSA-2019-007: By-passing protection of Phar Stream Wrapper Interceptor:
In order to intercept file invocations like file_exists or stat on compromised Phar archives the base name has to be determined and checked before allowing to be handled by PHP Phar stream handling. [...]
Previous Sprint Changes
New Case Study Format
As mentioned during DrupalCon Seattle 2019, we are launching a new case study format: https://www.youtube.com/watch?v=Nf_aD3dTloY&feature=youtu.be&t=639 targeted to the end user audience. We are currently developing new fields, permissions, branding and styling.
Status: in progress
Join/Renew as an Individual Member - Chargify Migration
We have implemented Chargify to handle our Subscription Relationship Management. This will allow users to purchase a membership on Drupal.org and the option to automatically renew their membership yearly. We have completed Individual USD and working on EUR memberships. To learn more about becoming an Individual Member and its benefits: https://www.drupal.org/association/individual-membership.
Status: in progress / completed USD
DrupalCon Registration System Evaluation
The Drupal Association Events and Engineering team is currently evaluating new software to handle events.drupal.org - DrupalCon registrations.
Status: evaluation
Dispatcher Maintenance
We are currently in the process of preparing to migrate Jenkins to a Debian 9 environment for stability. We will make a planned outage announcement via Twitter once we are closer to scheduling a date and time.
Status: In progress
GitLab phase 1
Please review our FAQ’s about GitLab at: https://www.drupal.org/drupalorg/docs/gitlab-integration/gitlab-frequently-asked-questions
If you have questions, please join us in Drupal Slack on channel #gitlab.
Status: Deployed/Completed
Ongoing Changes
Importing existing donation and membership data to new membership system
If you've ever needed to look up a history of your donations to the DA for tax purposes, you'll be happy for this one. Now you will see the full history of donations, not including memberships, on your Drupal.org profile.
Change record: https://www.drupal.org/node/2956455
Issue: https://www.drupal.org/project/drupalorg/issues/2934492