Drupal.org changes for the sprint from 28 Jan to 08 Feb 2019

85 views

Skip to first unread message

Drupal.org change notifications

unread,

Jan 28, 2019, 5:00:07 PM1/28/19

to Drupal.org change notifications

Software related change records:

https://www.drupal.org/list-changes/drupalorg

Infrastructure related change records:

https://www.drupal.org/list-changes/infrastructure

Announcements

Updates to Community Working Group Charter (CWG)

Per last board meeting on December 5, 2018, the proposed changes were voted on and approved. You can find the full text of the charter here: https://www.drupal.org/node/2850603

Proposed Changes: https://www.drupal.org/project/drupal_cwg/issues/3011215

Board Meeting Minutes from December 5, 2018: https://www.drupal.org/association/board/minutes

Please review changes to changes to git remotes

Git Protocols for Authentication

Completed and Deployed: Please note that that only SSH and HTTPS protocols are supported. The git:// protocol may have worked in the past, but is now an unsupported method and will not work with the transition to GitLab.

For more detailed instructions please review: https://drupal.org/gitauth

For more information about why we're making this change: https://www.drupal.org/drupalorg/blog/developer-tools-initiative-part-5-gitlab-partnership

Please review security releases:

Drupal core - Critical - Arbitrary PHP code execution - SA-CORE-2019-002

Date: 2019-January-16

A remote code execution vulnerability exists in PHP's built-in phar stream wrapper when performing file operations on an untrusted phar:// URI.

Drupal core - Critical - Third Party Libraries - SA-CORE-2019-001

Date: 2019-January-16

Drupal core uses the third-party PEAR Archive_Tar library. This library has released a security update which impacts some Drupal configurations. Refer to CVE-2018-1000888 for details.

Previous Sprint Changes

Updates to events.drupal.org: speaker profile pictures

We’ve updated speaker profiles to sync with their profile picture on drupal.org. Speakers can update their picture directly on their drupal.org account.

Status: Deployed

Project syncing in production

In preparation for the GitLab phase 1 migration, projects on drupal.org have been sync’d with GitLab.

Status: Deployed

Upcoming Changes

Scheduling Phase 1 of the GitLab migration

We recently announced our partnership with GitLab to power the developer tools on Drupal.org. This will be a multi-phase process. In the first phase we'll be replacing the current Git backend as well as the code viewing tools with GitLab. The team is currently evaluating the latest release of GitLab and testing our migration process, before scheduling a migration window.

For more information about the upcoming changes, check out this video:

https://www.youtube.com/watch?v=q06taaJPGDw

Change record: https://www.drupal.org/node/3002828

Issue: https://www.drupal.org/project/infrastructure/issues/3002827

Status: Provisionally scheduled for the week of Feb 18 or Feb 25, we will put out further messaging as we firm the migration date.

Change the issue credit attribution to default to crediting commenters (maintainers must deselect commenters to remove credit attribution)

A number of maintainers and contributors from the core and contrib spaces have suggested that we change the Issue Credit Attribution process, so that commenters are credited by default, instead of having to be manually credited by the maintainer.

Change record: https://www.drupal.org/node/2974366

Issue: https://www.drupal.org/project/drupalorg/issues/2972225

Status: In progress, this will likely be deployed in the next couple of days.

Ongoing Changes

Importing existing donation and membership data to new membership system

If you've ever needed to look up a history of your donations to the DA for tax purposes, you'll be happy for this one. Now you will see the full history of donations, not including memberships, on your Drupal.org profile.

Change record: https://www.drupal.org/node/2956455

Issue: https://www.drupal.org/project/drupalorg/issues/2934492

Status: In progress

Implementing Open Demographics Initiative on Drupal.org

To improve the inclusiveness of our community, we want to provide better tools for understanding our community, and for allowing members of our community (at their choice) to positively affirm their identity and expression.

There are a number of important axes of identity and expression, however. We are evaluating making a module to include the Open Demographics Initiative, by @drnikki, with input from @sagesharp, @rachel_norfolk, @justafish, among others.

Change record: https://www.drupal.org/node/2944177

Issue: https://www.drupal.org/project/drupalorg/issues/2938949

Status: We have submitted a pull request to provide all of the questions and answers from ODI in a JSON format: https://github.com/drnikki/open-demographics/pull/48 further reviews are welcome!