Drupal.org changes for the sprint from 24 July to 28 July 2019

6 views

Skip to first unread message

Drupal.org change notifications

unread,

Jul 6, 2019, 5:30:35 PM7/6/19

to Drupal.org change notifications

Software related change records:

https://www.drupal.org/list-changes/drupalorg

Infrastructure related change records:

https://www.drupal.org/list-changes/infrastructure

Announcements

Please review security releases:

Drupal core - Moderately critical - Third-party libraries - SA-CORE-2019-007

Date:

2019-May-08

Security risk:

Moderately critical 14∕25 AC:Complex/A:Admin/CI:All/II:All/E:Theoretical/TD:Uncommon

CVE IDs:

CVE-2019-11831

This security release fixes third-party dependencies included in or required by Drupal core. As described in TYPO3-PSA-2019-007: By-passing protection of Phar Stream Wrapper Interceptor:

In order to intercept file invocations like file_exists or stat on compromised Phar archives the base name has to be determined and checked before allowing to be handled by PHP Phar stream handling. [...]

Previous Sprint Changes

Dispatcher Maintenance

We have completed the migration of our production Jenkins instance to: Debian 9 - environment for stability. Legacy jobs will be located at: https://dispatcher-legacy.drupalci.org/ and the oldest jobs reaching six months from June 27, 2019 will be purged. Once the last six month job has been purged, legacy will be retired.

Status: Completed

DrupalCon Registration System

The Drupal Association Events and Engineering team is currently in the process of integrating a new registration system for DrupalCon US 2020. The registration system will streamline various process and improve staff workflow.

Status: In progress

New Case Study Format

As mentioned during DrupalCon Seattle 2019, we are launching a new case study format: https://www.youtube.com/watch?v=Nf_aD3dTloY&feature=youtu.be&t=639 targeted to the end user audience. We are currently in the deployment and quality assurance process.

Status: In progress

Join/Renew as an Individual Member - Chargify Migration

We have implemented Chargify to handle our Subscription Relationship Management. This will allow users to purchase a membership on Drupal.org and the option to automatically renew their membership yearly. We have completed Individual USD and working on EUR memberships. To learn more about becoming an Individual Member and its benefits: https://www.drupal.org/association/individual-membership.

Status: in progress

Ongoing Changes

Importing existing donation and membership data to new membership system

If you've ever needed to look up a history of your donations to the DA for tax purposes, you'll be happy for this one. Now you will see the full history of donations, not including memberships, on your Drupal.org profile.

Change record: https://www.drupal.org/node/2956455

Issue: https://www.drupal.org/project/drupalorg/issues/2934492

Status: In progress

Implementing Open Demographics Initiative on Drupal.org

To improve the inclusiveness of our community, we want to provide better tools for understanding our community, and for allowing members of our community (at their choice) to positively affirm their identity and expression.

There are a number of important axes of identity and expression, however. We are evaluating making a module to include the Open Demographics Initiative, by @drnikki, with input from @sagesharp, @rachel_norfolk, @justafish, among others.

Change record: https://www.drupal.org/node/2944177

Issue: https://www.drupal.org/project/drupalorg/issues/2938949

Status: We have submitted a pull request to provide all of the questions and answers from ODI in a JSON format: https://github.com/drnikki/open-demographics/pull/48 further reviews are welcome!