WikiReleaseTeam/Release log/2014-07-30

This is the internal log mglaser uses to produce tarballs

Versions to be released
It's best to have each REL branch in a separate checkout. Switching between branches will surely produce confusion.
 * 1.19.18
 * 1.22.9
 * 1.23.2

Fix security bugs
Patches and respective backports must be available as patch files and reviewed.

Howto: git reset --hard origin/master git apply --check path/to/patch git am path/to/patch Status: PATCH - REVIEWED - LOCAL GIT

Bug 68187

 * master - PATCH - REVIEWED - LOCAL GIT
 * 1.19.18 - PATCH - REVIEWED - LOCAL GIT
 * 1.22.9 - PATCH - REVIEWED - LOCAL GIT
 * 1.23.2 - PATCH - REVIEWED - LOCAL GIT

Bug 66608

 * master - PATCH - REVIEWED - LOCAL GIT
 * 1.22.9 - PATCH - REVIEWED - LOCAL GIT
 * 1.23.2 - PATCH - REVIEWED - LOCAL GIT

Bug 65778

 * master - PATCH - REVIEWED - LOCAL GIT
 * 1.19.18 - PATCH - REVIEWED - LOCAL GIT
 * 1.22.9 - PATCH - REVIEWED - LOCAL GIT
 * 1.23.2 - PATCH - REVIEWED - LOCAL GIT

Release notes
Update release notes and DefaultSettings.php

Status: LOCAL GIT
 * 1.19.18 - LOCAL GIT
 * 1.22.9 - LOCAL GIT
 * 1.23.2 - LOCAL GIT

Prepare Announcement
Status: OK
 * 1.19.18 - OK
 * 1.22.9 - OK
 * 1.23.2 - OK

Produce the tarball
From here on, combined security and maintenance releases are time critical, as this discloses the security issues.
 * Disclosure @ 18:30 UTC

Push to gerrit and merge
Howto: git review Status: GERRIT - MERGED Link to gerrit Links to gerrit
 * master
 * https://gerrit.wikimedia.org/r/150605 - GERRIT - MERGED
 * https://gerrit.wikimedia.org/r/150606 - GERRIT - MERGED
 * https://gerrit.wikimedia.org/r/150607 - GERRIT - MERGED
 * 1.19.18
 * https://gerrit.wikimedia.org/r/150616 - GERRIT - MERGED
 * https://gerrit.wikimedia.org/r/150617 - GERRIT - MERGED
 * https://gerrit.wikimedia.org/r/150618 - GERRIT - MERGED
 * 1.22.9
 * https://gerrit.wikimedia.org/r/150612 - GERRIT - MERGED
 * https://gerrit.wikimedia.org/r/150613 - GERRIT - MERGED
 * https://gerrit.wikimedia.org/r/150614 - GERRIT - MERGED
 * https://gerrit.wikimedia.org/r/150615 - GERRIT - MERGED
 * 1.23.2
 * https://gerrit.wikimedia.org/r/150608 - GERRIT - MERGED
 * https://gerrit.wikimedia.org/r/150609 - GERRIT - MERGED
 * https://gerrit.wikimedia.org/r/150610 - GERRIT - MERGED
 * https://gerrit.wikimedia.org/r/150611 - GERRIT - MERGED

Tag versions
Howto (git checkout BRANCH, git pull, git tag) Status OK git tag -a 1.22.9 -m "Security and maintenance release 1.22.9" git push --tags
 * 1.19.18 - OK
 * 1.22.9 - OK
 * 1.23.2 - OK

Watch Jenkins
Jenkins tarball build jobs are triggered by new tags

https://integration.wikimedia.org/ci/view/MediaWiki/job/mediawiki-core-release/

Note: Login to rerun jobs

Status: JOB  - OK
 * 1.19.18 - JOB 141 -
 * 1.22.9 - JOB 142 -
 * 1.23.2 - JOB 140 -

Get tarball and patch file
Status OK
 * 1.19.18
 * 1.22.9
 * 1.23.2

Final checks
Howto: Status: OK
 * install works
 * test folder is not included
 * extension versions are right
 * empty patch files: put a notice
 * 1.19.18
 * 1.22.9
 * 1.23.2

Sign tarball and patch files
Status: OK
 * 1.19.18
 * 1.22.9
 * 1.23.2

Upload to DL-server
Status: OK
 * 1.19.18
 * 1.22.9
 * 1.23.2

Send announcement
Status OK
 * 1.19.18
 * 1.22.9
 * 1.23.2

Post release
This is no longer time critical.

Update mediawiki.org
Status OK
 * branches