WikiReleaseTeam/Release log/2014-10-01

This is the internal log mglaser uses to produce tarballs

Versions to be released
It's best to have each REL branch in a separate checkout. Switching between branches will surely produce confusion.
 * 1.19.20
 * 1.22.12
 * 1.23.5

Fix security bugs
Patches and respective backports must be available as patch files and reviewed.

Howto: git reset --hard origin/master git apply --check path/to/patch git am path/to/patch Status: PATCH - REVIEWED - LOCAL GIT

Bug 1

 * master - PATCH - REVIEWED - LOCAL GIT
 * 1.19.20 - PATCH - REVIEWED - LOCAL GIT
 * 1.22.12 - PATCH - REVIEWED - LOCAL GIT
 * 1.23.5 - PATCH - REVIEWED - LOCAL GIT

Release notes
Update release notes and DefaultSettings.php

Status: LOCAL GIT
 * 1.19.20 - LOCAL GIT
 * 1.22.12 - LOCAL GIT
 * 1.23.5 - LOCAL GIT

Prepare Announcement
Status: OK
 * 1.19.20 - OK
 * 1.22.12 - OK
 * 1.23.5 - OK

Produce the tarball
From here on, combined security and maintenance releases are time critical, as this discloses the security issues.

Disclosure @ 9:01 PM UTC

Push to gerrit and merge
Howto: git review Status: - GERRIT - MERGED
 * master - GERRIT - MERGED
 * https://gerrit.wikimedia.org/r/164224
 * 1.19.20 - GERRIT - MERGED
 * https://gerrit.wikimedia.org/r/164231
 * https://gerrit.wikimedia.org/r/164232
 * 1.22.12 - GERRIT - MERGED
 * https://gerrit.wikimedia.org/r/164226
 * https://gerrit.wikimedia.org/r/164227
 * 1.23.5 - GERRIT - MERGED
 * https://gerrit.wikimedia.org/r/164228
 * https://gerrit.wikimedia.org/r/164229

Tag versions
Howto (git checkout BRANCH, git pull, git tag) Status OK git tag -a 1.19.20 -m "Security release 1.19.20" git tag -a 1.22.12 -m "Security release 1.22.12" git tag -a 1.23.5 -m "Security release 1.23.5" git push --tags
 * 1.19.20 - OK
 * 1.22.12 - OK
 * 1.23.5 - OK

Watch Jenkins
Jenkins tarball build jobs are triggered by new tags

https://integration.wikimedia.org/ci/view/MediaWiki/job/mediawiki-core-release/

Note: Login to rerun jobs

Status: JOB  - OK
 * 1.19.20 - 148 - OK
 * 1.22.12 - 150 - OK
 * 1.23.5 - 149 - OK

Get tarball and patch file
Status OK
 * 1.19.20 - OK
 * 1.22.12 - OK
 * 1.23.5 - OK

Final checks
Howto: Status: OK
 * install works
 * test folder is not included
 * extension versions are right
 * empty patch files: put a notice
 * 1.19.20 - OK
 * 1.22.12 - OK
 * 1.23.5 - OK

Sign tarball and patch files
Status: OK
 * 1.19.20 - OK
 * 1.22.12 - OK
 * 1.23.5 - OK

Upload to DL-server
Status: OK
 * 1.19.20 - OK
 * 1.22.12 - OK
 * 1.23.5 - OK

Send announcement
Status OK
 * 1.19.20 - OK
 * 1.22.12 - OK
 * 1.23.5 - OK

Announcement @ 00:01 UTC

Post release
This is no longer time critical.

Update mediawiki.org
Status OK
 * 1.19.20 - OK
 * 1.22.12 - OK
 * 1.23.5 - OK