Drupal.org changes for the sprint from 11 Feb to 22 Feb 2019

35 views

Skip to first unread message

Drupal.org change notifications

unread,

Feb 8, 2019, 7:49:14 PM2/8/19

to Drupal.org change notifications

Software related change records:

https://www.drupal.org/list-changes/drupalorg

Infrastructure related change records:

https://www.drupal.org/list-changes/infrastructure

Announcements

Please review changes to changes to git remotes

Git Protocols for Authentication

Completed and Deployed: Please note that that only SSH and HTTPS protocols are supported. The git:// protocol may have worked in the past, but is now an unsupported method and will not work with the transition to GitLab.

For more detailed instructions please review: https://drupal.org/gitauth

For more information about why we're making this change: https://www.drupal.org/drupalorg/blog/developer-tools-initiative-part-5-gitlab-partnership

Please review security releases:

Drupal core - Critical - Arbitrary PHP code execution - SA-CORE-2019-002

Date: 2019-January-16

A remote code execution vulnerability exists in PHP's built-in phar stream wrapper when performing file operations on an untrusted phar:// URI.

Drupal core - Critical - Third Party Libraries - SA-CORE-2019-001

Date: 2019-January-16

Drupal core uses the third-party PEAR Archive_Tar library. This library has released a security update which impacts some Drupal configurations. Refer to CVE-2018-1000888 for details.

Previous Sprint Changes

GitLab phase 1 production readiness

The Engineering Team has been working on our pre and post deployment checklist for phase 1. We are in the process of testing our disaster recovery plans, maintaining our staging servers and planning routine upgrades.

Status: In progress

Search by reservation code on events.drupal.org

In order to better search for issues regarding reservation codes not working, we are implementing a tool for DA staff to search registrations by reservation code.

Status: In progress

Upcoming Changes

Scheduling Phase 1 of the GitLab migration

We recently announced our partnership with GitLab to power the developer tools on Drupal.org. This will be a multi-phase process. In the first phase we'll be replacing the current Git backend as well as the code viewing tools with GitLab. The team is currently evaluating the latest release of GitLab and testing our migration process, before scheduling a migration window.

For more information about the upcoming changes, check out this video:

https://www.youtube.com/watch?v=q06taaJPGDw

Change record: https://www.drupal.org/node/3002828

Issue: https://www.drupal.org/project/infrastructure/issues/3002827

Status: Provisionally scheduled for the week of Feb 25 or March 4, we will put out further messaging as we firm the migration date.

Change the issue credit attribution to default to crediting commenters (maintainers must deselect commenters to remove credit attribution)

A number of maintainers and contributors from the core and contrib spaces have suggested that we change the Issue Credit Attribution process, so that commenters are credited by default, instead of having to be manually credited by the maintainer.

Change record: https://www.drupal.org/node/2974366

Issue: https://www.drupal.org/project/drupalorg/issues/2972225

Status: Deployed

Ongoing Changes

Importing existing donation and membership data to new membership system

If you've ever needed to look up a history of your donations to the DA for tax purposes, you'll be happy for this one. Now you will see the full history of donations, not including memberships, on your Drupal.org profile.

Change record: https://www.drupal.org/node/2956455

Issue: https://www.drupal.org/project/drupalorg/issues/2934492

Status: In progress

Implementing Open Demographics Initiative on Drupal.org

To improve the inclusiveness of our community, we want to provide better tools for understanding our community, and for allowing members of our community (at their choice) to positively affirm their identity and expression.

There are a number of important axes of identity and expression, however. We are evaluating making a module to include the Open Demographics Initiative, by @drnikki, with input from @sagesharp, @rachel_norfolk, @justafish, among others.

Change record: https://www.drupal.org/node/2944177

Issue: https://www.drupal.org/project/drupalorg/issues/2938949

Status: We have submitted a pull request to provide all of the questions and answers from ODI in a JSON format: https://github.com/drnikki/open-demographics/pull/48 further reviews are welcome!