WikiReleaseTeam/Release log/2014-10-01

This is the internal log mglaser uses to produce tarballs

Versions to be released

It's best to have each REL branch in a separate checkout. Switching between branches will surely produce confusion.

• 1.19.20
• 1.22.12
• 1.23.5

Preparation

Fix security bugs

Patches and respective backports must be available as patch files and reviewed.

Howto:

git reset --hard origin/master
git apply --check path/to/patch
git am path/to/patch

Status:

PATCH - REVIEWED - LOCAL GIT

Bug 1

• master - PATCH - REVIEWED - LOCAL GIT
• 1.19.20 - PATCH - REVIEWED - LOCAL GIT
• 1.22.12 - PATCH - REVIEWED - LOCAL GIT
• 1.23.5 - PATCH - REVIEWED - LOCAL GIT

Release notes

Update release notes and DefaultSettings.php

Status:

LOCAL GIT

• 1.19.20 - LOCAL GIT
• 1.22.12 - LOCAL GIT
• 1.23.5 - LOCAL GIT

Prepare Announcement

Status:

OK

• 1.19.20 - OK
• 1.22.12 - OK
• 1.23.5 - OK

Produce the tarball

From here on, combined security and maintenance releases are time critical, as this discloses the security issues.

Disclosure @ 9:01 PM UTC

Push to gerrit and merge

Howto:

git review

Status: - GERRIT - MERGED

• master - GERRIT - MERGED
  • https://gerrit.wikimedia.org/r/164224
• 1.19.20 - GERRIT - MERGED
  • https://gerrit.wikimedia.org/r/164231
  • https://gerrit.wikimedia.org/r/164232
• 1.22.12 - GERRIT - MERGED
  • https://gerrit.wikimedia.org/r/164226
  • https://gerrit.wikimedia.org/r/164227
• 1.23.5 - GERRIT - MERGED
  • https://gerrit.wikimedia.org/r/164228
  • https://gerrit.wikimedia.org/r/164229

Tag versions

Howto

(git checkout BRANCH, git pull, git tag)

Status

OK

• 1.19.20 - OK

git tag -a 1.19.20 -m "Security release 1.19.20"

• 1.22.12 - OK

git tag -a 1.22.12 -m "Security release 1.22.12"

• 1.23.5 - OK

git tag -a 1.23.5 -m "Security release 1.23.5"
git push --tags

Watch Jenkins

Jenkins tarball build jobs are triggered by new tags

https://integration.wikimedia.org/ci/view/MediaWiki/job/mediawiki-core-release/

Note: Login to rerun jobs

Status:

JOB <NR> - OK

• 1.19.20 - 148 - OK
• 1.22.12 - 150 - OK
• 1.23.5 - 149 - OK

Get tarball and patch file

Status

OK

• 1.19.20 - OK
• 1.22.12 - OK
• 1.23.5 - OK

Final checks

Howto:

• install works
• test folder is not included
• extension versions are right
• empty patch files: put a notice

Status:

OK

• 1.19.20 - OK
• 1.22.12 - OK
• 1.23.5 - OK

Sign tarball and patch files

Status:

OK

• 1.19.20 - OK
• 1.22.12 - OK
• 1.23.5 - OK

Upload to DL-server

Status:

OK

• 1.19.20 - OK
• 1.22.12 - OK
• 1.23.5 - OK

Send announcement

Status

OK

• 1.19.20 - OK
• 1.22.12 - OK
• 1.23.5 - OK

Announcement @ 00:01 UTC

Post release

This is no longer time critical.

Update mediawiki.org

Status

OK

• 1.19.20 - OK
• 1.22.12 - OK
• 1.23.5 - OK