Page MenuHomePhabricator

MW-1.45-notes (1.45.0-wmf.2; 2025-05-20)Milestone
ArchivedPublic

Members

  • This project does not have any members.
  • View All

Watchers

  • This project does not have any watchers.
  • View All

Details

Description

.

Recent Activity

Wed, Aug 20

Jdlrobson-WMF closed T342040: TypeError: undefined is not an object (evaluating 'src[src.length-1].res') as Resolved.
Wed, Aug 20, 10:07 PM · MW-1.45-notes (1.45.0-wmf.2; 2025-05-20), JavaScript, Unstewarded-production-error, TimedMediaHandler, Wikimedia-production-error
Jdlrobson-WMF claimed T342040: TypeError: undefined is not an object (evaluating 'src[src.length-1].res') .

Last error was 22nd May 2025 so this looks fixed to me!

Wed, Aug 20, 10:06 PM · MW-1.45-notes (1.45.0-wmf.2; 2025-05-20), JavaScript, Unstewarded-production-error, TimedMediaHandler, Wikimedia-production-error
thiemowmde moved T389100: VE: Deleting main ref should not orphan existing sub-refs from Sprint Backlog to Tech Review on the WMDE-TechWish-Sprint-2025-08-20-Strawberry-Basil-Icecream board.
Wed, Aug 20, 8:21 AM · WMDE-TechWish-Sprint-2025-08-20-Strawberry-Basil-Icecream, WMDE-TechWish-Sprint-2025-08-06-Kekstazie-Icecream, Cite (Sub-referencing), WMDE-TechWish-Sprint-2025-05-28, MW-1.45-notes (1.45.0-wmf.2; 2025-05-20), WMDE-TechWish-Sprint-2025-05-14, WMDE-TechWish-Sprint-2025-04-30, Story, Sub-referencing (product board)
thiemowmde added a project to T389100: VE: Deleting main ref should not orphan existing sub-refs: WMDE-TechWish-Sprint-2025-08-20-Strawberry-Basil-Icecream.
Wed, Aug 20, 8:20 AM · WMDE-TechWish-Sprint-2025-08-20-Strawberry-Basil-Icecream, WMDE-TechWish-Sprint-2025-08-06-Kekstazie-Icecream, Cite (Sub-referencing), WMDE-TechWish-Sprint-2025-05-28, MW-1.45-notes (1.45.0-wmf.2; 2025-05-20), WMDE-TechWish-Sprint-2025-05-14, WMDE-TechWish-Sprint-2025-04-30, Story, Sub-referencing (product board)

Tue, Aug 19

Dreamy_Jazz closed T394393: CVE-2025-53482: IPInfo: Message key XSS through several IPInfo messages in infobox and popup as Resolved.

I think we can skip QA on this given that it's not happened in around a month.

Tue, Aug 19, 2:49 PM · Trust and Safety Product Sprint (Sprint Princess Tarta (August 18 - September 5)), Essential-Work, affects-Miraheze, MW-1.45-notes (1.45.0-wmf.2; 2025-05-20), SecTeam-Processed, Patch-For-Review, Vuln-XSS, IP Info, Trust and Safety Product Team, Security, Security-Team
Dreamy_Jazz moved T394393: CVE-2025-53482: IPInfo: Message key XSS through several IPInfo messages in infobox and popup from Needs QA to Done on the Trust and Safety Product Sprint (Sprint Princess Tarta (August 18 - September 5)) board.
Tue, Aug 19, 2:49 PM · Trust and Safety Product Sprint (Sprint Princess Tarta (August 18 - September 5)), Essential-Work, affects-Miraheze, MW-1.45-notes (1.45.0-wmf.2; 2025-05-20), SecTeam-Processed, Patch-For-Review, Vuln-XSS, IP Info, Trust and Safety Product Team, Security, Security-Team
lilients_WMDE added a comment to T389100: VE: Deleting main ref should not orphan existing sub-refs.
Tue, Aug 19, 1:27 PM · WMDE-TechWish-Sprint-2025-08-20-Strawberry-Basil-Icecream, WMDE-TechWish-Sprint-2025-08-06-Kekstazie-Icecream, Cite (Sub-referencing), WMDE-TechWish-Sprint-2025-05-28, MW-1.45-notes (1.45.0-wmf.2; 2025-05-20), WMDE-TechWish-Sprint-2025-05-14, WMDE-TechWish-Sprint-2025-04-30, Story, Sub-referencing (product board)
OKryva-WMF moved T394393: CVE-2025-53482: IPInfo: Message key XSS through several IPInfo messages in infobox and popup from Priority Backlog to Needs QA on the Trust and Safety Product Sprint (Sprint Princess Tarta (August 18 - September 5)) board.
Tue, Aug 19, 10:30 AM · Trust and Safety Product Sprint (Sprint Princess Tarta (August 18 - September 5)), Essential-Work, affects-Miraheze, MW-1.45-notes (1.45.0-wmf.2; 2025-05-20), SecTeam-Processed, Patch-For-Review, Vuln-XSS, IP Info, Trust and Safety Product Team, Security, Security-Team
OKryva-WMF edited projects for T394393: CVE-2025-53482: IPInfo: Message key XSS through several IPInfo messages in infobox and popup, added: Trust and Safety Product Sprint (Sprint Princess Tarta (August 18 - September 5)); removed Trust and Safety Product Sprint (Sprint Rum baba (July 28 - August 15)).
Tue, Aug 19, 10:28 AM · Trust and Safety Product Sprint (Sprint Princess Tarta (August 18 - September 5)), Essential-Work, affects-Miraheze, MW-1.45-notes (1.45.0-wmf.2; 2025-05-20), SecTeam-Processed, Patch-For-Review, Vuln-XSS, IP Info, Trust and Safety Product Team, Security, Security-Team

Mon, Aug 18

ppelberg closed T394096: Range highlights overlap context items as Resolved.
Mon, Aug 18, 4:35 PM · Verified, MW-1.45-notes (1.45.0-wmf.2; 2025-05-20), Regression, Editing-team (Kanban Board), VisualEditor
Maintenance_bot removed a project from T389100: VE: Deleting main ref should not orphan existing sub-refs: Patch-For-Review.
Mon, Aug 18, 12:31 PM · WMDE-TechWish-Sprint-2025-08-20-Strawberry-Basil-Icecream, WMDE-TechWish-Sprint-2025-08-06-Kekstazie-Icecream, Cite (Sub-referencing), WMDE-TechWish-Sprint-2025-05-28, MW-1.45-notes (1.45.0-wmf.2; 2025-05-20), WMDE-TechWish-Sprint-2025-05-14, WMDE-TechWish-Sprint-2025-04-30, Story, Sub-referencing (product board)
awight added a comment to T389100: VE: Deleting main ref should not orphan existing sub-refs.

This should also be solved with https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Cite/+/1178850

Mon, Aug 18, 12:25 PM · WMDE-TechWish-Sprint-2025-08-20-Strawberry-Basil-Icecream, WMDE-TechWish-Sprint-2025-08-06-Kekstazie-Icecream, Cite (Sub-referencing), WMDE-TechWish-Sprint-2025-05-28, MW-1.45-notes (1.45.0-wmf.2; 2025-05-20), WMDE-TechWish-Sprint-2025-05-14, WMDE-TechWish-Sprint-2025-04-30, Story, Sub-referencing (product board)
gerritbot added a comment to T389100: VE: Deleting main ref should not orphan existing sub-refs.

Change #1178481 abandoned by Awight:

[mediawiki/extensions/Cite@master] [WIP][POC] Save main ref to reflist when orphaning a subref

https://gerrit.wikimedia.org/r/1178481

Mon, Aug 18, 12:20 PM · WMDE-TechWish-Sprint-2025-08-20-Strawberry-Basil-Icecream, WMDE-TechWish-Sprint-2025-08-06-Kekstazie-Icecream, Cite (Sub-referencing), WMDE-TechWish-Sprint-2025-05-28, MW-1.45-notes (1.45.0-wmf.2; 2025-05-20), WMDE-TechWish-Sprint-2025-05-14, WMDE-TechWish-Sprint-2025-04-30, Story, Sub-referencing (product board)
awight moved T389100: VE: Deleting main ref should not orphan existing sub-refs from Watching / Stalled to Tech Review on the WMDE-TechWish-Sprint-2025-08-06-Kekstazie-Icecream board.
Mon, Aug 18, 12:20 PM · WMDE-TechWish-Sprint-2025-08-20-Strawberry-Basil-Icecream, WMDE-TechWish-Sprint-2025-08-06-Kekstazie-Icecream, Cite (Sub-referencing), WMDE-TechWish-Sprint-2025-05-28, MW-1.45-notes (1.45.0-wmf.2; 2025-05-20), WMDE-TechWish-Sprint-2025-05-14, WMDE-TechWish-Sprint-2025-04-30, Story, Sub-referencing (product board)
awight added a comment to T389100: VE: Deleting main ref should not orphan existing sub-refs.

This is the use case that's currently hard to solve in a general way. Only "C" is looking like a viable way forward, and it will require:

  • Parsoid changes to always include a synthetic LDR when a main+details is present.
  • VE always creates a synthetic LDR when adding a subref.
Mon, Aug 18, 9:45 AM · WMDE-TechWish-Sprint-2025-08-20-Strawberry-Basil-Icecream, WMDE-TechWish-Sprint-2025-08-06-Kekstazie-Icecream, Cite (Sub-referencing), WMDE-TechWish-Sprint-2025-05-28, MW-1.45-notes (1.45.0-wmf.2; 2025-05-20), WMDE-TechWish-Sprint-2025-05-14, WMDE-TechWish-Sprint-2025-04-30, Story, Sub-referencing (product board)

Sun, Aug 17

Maintenance_bot removed a project from T392251: SessionBackend seems to store session changes too often: Patch-For-Review.
Sun, Aug 17, 6:30 PM · MW-1.45-notes (1.45.0-wmf.2; 2025-05-20), Sustainability (Incident Followup), MediaWiki-Platform-Team, MediaWiki-Core-AuthManager
gerritbot added a comment to T392251: SessionBackend seems to store session changes too often.

Change #1143960 abandoned by Gergő Tisza:

[mediawiki/core@master] [DNM] Add stack traces to session write logs

https://gerrit.wikimedia.org/r/1143960

Sun, Aug 17, 6:09 PM · MW-1.45-notes (1.45.0-wmf.2; 2025-05-20), Sustainability (Incident Followup), MediaWiki-Platform-Team, MediaWiki-Core-AuthManager

Thu, Aug 14

Dreamy_Jazz added a project to T394393: CVE-2025-53482: IPInfo: Message key XSS through several IPInfo messages in infobox and popup: Essential-Work.
Thu, Aug 14, 10:31 AM · Trust and Safety Product Sprint (Sprint Princess Tarta (August 18 - September 5)), Essential-Work, affects-Miraheze, MW-1.45-notes (1.45.0-wmf.2; 2025-05-20), SecTeam-Processed, Patch-For-Review, Vuln-XSS, IP Info, Trust and Safety Product Team, Security, Security-Team
WMDE-Fisch updated the task description for T389100: VE: Deleting main ref should not orphan existing sub-refs.
Thu, Aug 14, 8:34 AM · WMDE-TechWish-Sprint-2025-08-20-Strawberry-Basil-Icecream, WMDE-TechWish-Sprint-2025-08-06-Kekstazie-Icecream, Cite (Sub-referencing), WMDE-TechWish-Sprint-2025-05-28, MW-1.45-notes (1.45.0-wmf.2; 2025-05-20), WMDE-TechWish-Sprint-2025-05-14, WMDE-TechWish-Sprint-2025-04-30, Story, Sub-referencing (product board)
WMDE-Fisch updated the task description for T389100: VE: Deleting main ref should not orphan existing sub-refs.
Thu, Aug 14, 8:34 AM · WMDE-TechWish-Sprint-2025-08-20-Strawberry-Basil-Icecream, WMDE-TechWish-Sprint-2025-08-06-Kekstazie-Icecream, Cite (Sub-referencing), WMDE-TechWish-Sprint-2025-05-28, MW-1.45-notes (1.45.0-wmf.2; 2025-05-20), WMDE-TechWish-Sprint-2025-05-14, WMDE-TechWish-Sprint-2025-04-30, Story, Sub-referencing (product board)
WMDE-Fisch moved T389100: VE: Deleting main ref should not orphan existing sub-refs from Doing to Watching / Stalled on the WMDE-TechWish-Sprint-2025-08-06-Kekstazie-Icecream board.
Thu, Aug 14, 8:30 AM · WMDE-TechWish-Sprint-2025-08-20-Strawberry-Basil-Icecream, WMDE-TechWish-Sprint-2025-08-06-Kekstazie-Icecream, Cite (Sub-referencing), WMDE-TechWish-Sprint-2025-05-28, MW-1.45-notes (1.45.0-wmf.2; 2025-05-20), WMDE-TechWish-Sprint-2025-05-14, WMDE-TechWish-Sprint-2025-04-30, Story, Sub-referencing (product board)
WMDE-Fisch merged T397211: [draft] VE should create a list-defined main ref when a regular main ref is deleted but still needed by a subref into T389100: VE: Deleting main ref should not orphan existing sub-refs.
Thu, Aug 14, 7:03 AM · WMDE-TechWish-Sprint-2025-08-20-Strawberry-Basil-Icecream, WMDE-TechWish-Sprint-2025-08-06-Kekstazie-Icecream, Cite (Sub-referencing), WMDE-TechWish-Sprint-2025-05-28, MW-1.45-notes (1.45.0-wmf.2; 2025-05-20), WMDE-TechWish-Sprint-2025-05-14, WMDE-TechWish-Sprint-2025-04-30, Story, Sub-referencing (product board)
WMDE-Fisch moved T389100: VE: Deleting main ref should not orphan existing sub-refs from Waiting / Stalled stories to Tickets in sprint on the Sub-referencing (product board) board.
Thu, Aug 14, 6:58 AM · WMDE-TechWish-Sprint-2025-08-20-Strawberry-Basil-Icecream, WMDE-TechWish-Sprint-2025-08-06-Kekstazie-Icecream, Cite (Sub-referencing), WMDE-TechWish-Sprint-2025-05-28, MW-1.45-notes (1.45.0-wmf.2; 2025-05-20), WMDE-TechWish-Sprint-2025-05-14, WMDE-TechWish-Sprint-2025-04-30, Story, Sub-referencing (product board)

Wed, Aug 13

WMDE-Fisch updated the task description for T389100: VE: Deleting main ref should not orphan existing sub-refs.
Wed, Aug 13, 7:58 PM · WMDE-TechWish-Sprint-2025-08-20-Strawberry-Basil-Icecream, WMDE-TechWish-Sprint-2025-08-06-Kekstazie-Icecream, Cite (Sub-referencing), WMDE-TechWish-Sprint-2025-05-28, MW-1.45-notes (1.45.0-wmf.2; 2025-05-20), WMDE-TechWish-Sprint-2025-05-14, WMDE-TechWish-Sprint-2025-04-30, Story, Sub-referencing (product board)
WMDE-Fisch updated the task description for T389100: VE: Deleting main ref should not orphan existing sub-refs.
Wed, Aug 13, 7:57 PM · WMDE-TechWish-Sprint-2025-08-20-Strawberry-Basil-Icecream, WMDE-TechWish-Sprint-2025-08-06-Kekstazie-Icecream, Cite (Sub-referencing), WMDE-TechWish-Sprint-2025-05-28, MW-1.45-notes (1.45.0-wmf.2; 2025-05-20), WMDE-TechWish-Sprint-2025-05-14, WMDE-TechWish-Sprint-2025-04-30, Story, Sub-referencing (product board)
WMDE-Fisch moved T389100: VE: Deleting main ref should not orphan existing sub-refs from Sprint Backlog to Doing on the WMDE-TechWish-Sprint-2025-08-06-Kekstazie-Icecream board.
Wed, Aug 13, 7:43 PM · WMDE-TechWish-Sprint-2025-08-20-Strawberry-Basil-Icecream, WMDE-TechWish-Sprint-2025-08-06-Kekstazie-Icecream, Cite (Sub-referencing), WMDE-TechWish-Sprint-2025-05-28, MW-1.45-notes (1.45.0-wmf.2; 2025-05-20), WMDE-TechWish-Sprint-2025-05-14, WMDE-TechWish-Sprint-2025-04-30, Story, Sub-referencing (product board)
gerritbot added a project to T389100: VE: Deleting main ref should not orphan existing sub-refs: Patch-For-Review.
Wed, Aug 13, 7:42 PM · WMDE-TechWish-Sprint-2025-08-20-Strawberry-Basil-Icecream, WMDE-TechWish-Sprint-2025-08-06-Kekstazie-Icecream, Cite (Sub-referencing), WMDE-TechWish-Sprint-2025-05-28, MW-1.45-notes (1.45.0-wmf.2; 2025-05-20), WMDE-TechWish-Sprint-2025-05-14, WMDE-TechWish-Sprint-2025-04-30, Story, Sub-referencing (product board)
gerritbot added a comment to T389100: VE: Deleting main ref should not orphan existing sub-refs.

Change #1178481 had a related patch set uploaded (by WMDE-Fisch; author: WMDE-Fisch):

[mediawiki/extensions/Cite@master] [WIP][POC] Save main ref to reflist when orphaning a subref

https://gerrit.wikimedia.org/r/1178481

Wed, Aug 13, 7:42 PM · WMDE-TechWish-Sprint-2025-08-20-Strawberry-Basil-Icecream, WMDE-TechWish-Sprint-2025-08-06-Kekstazie-Icecream, Cite (Sub-referencing), WMDE-TechWish-Sprint-2025-05-28, MW-1.45-notes (1.45.0-wmf.2; 2025-05-20), WMDE-TechWish-Sprint-2025-05-14, WMDE-TechWish-Sprint-2025-04-30, Story, Sub-referencing (product board)
WMDE-Fisch added a project to T389100: VE: Deleting main ref should not orphan existing sub-refs: WMDE-TechWish-Sprint-2025-08-06-Kekstazie-Icecream.
Wed, Aug 13, 7:25 PM · WMDE-TechWish-Sprint-2025-08-20-Strawberry-Basil-Icecream, WMDE-TechWish-Sprint-2025-08-06-Kekstazie-Icecream, Cite (Sub-referencing), WMDE-TechWish-Sprint-2025-05-28, MW-1.45-notes (1.45.0-wmf.2; 2025-05-20), WMDE-TechWish-Sprint-2025-05-14, WMDE-TechWish-Sprint-2025-04-30, Story, Sub-referencing (product board)
WMDE-Fisch updated the task description for T389100: VE: Deleting main ref should not orphan existing sub-refs.
Wed, Aug 13, 11:19 AM · WMDE-TechWish-Sprint-2025-08-20-Strawberry-Basil-Icecream, WMDE-TechWish-Sprint-2025-08-06-Kekstazie-Icecream, Cite (Sub-referencing), WMDE-TechWish-Sprint-2025-05-28, MW-1.45-notes (1.45.0-wmf.2; 2025-05-20), WMDE-TechWish-Sprint-2025-05-14, WMDE-TechWish-Sprint-2025-04-30, Story, Sub-referencing (product board)

Fri, Aug 8

Maintenance_bot removed a project from T389100: VE: Deleting main ref should not orphan existing sub-refs: Patch-For-Review.
Fri, Aug 8, 7:31 PM · WMDE-TechWish-Sprint-2025-08-20-Strawberry-Basil-Icecream, WMDE-TechWish-Sprint-2025-08-06-Kekstazie-Icecream, Cite (Sub-referencing), WMDE-TechWish-Sprint-2025-05-28, MW-1.45-notes (1.45.0-wmf.2; 2025-05-20), WMDE-TechWish-Sprint-2025-05-14, WMDE-TechWish-Sprint-2025-04-30, Story, Sub-referencing (product board)
WMDE-Fisch moved T389100: VE: Deleting main ref should not orphan existing sub-refs from Incoming to MVP on the Cite (Sub-referencing) board.
Fri, Aug 8, 7:23 PM · WMDE-TechWish-Sprint-2025-08-20-Strawberry-Basil-Icecream, WMDE-TechWish-Sprint-2025-08-06-Kekstazie-Icecream, Cite (Sub-referencing), WMDE-TechWish-Sprint-2025-05-28, MW-1.45-notes (1.45.0-wmf.2; 2025-05-20), WMDE-TechWish-Sprint-2025-05-14, WMDE-TechWish-Sprint-2025-04-30, Story, Sub-referencing (product board)
gerritbot added a comment to T389100: VE: Deleting main ref should not orphan existing sub-refs.

Change #1145251 abandoned by WMDE-Fisch:

[mediawiki/extensions/Cite@master] Mein ref deletion doesn't orphan subrefs

Reason:

Duplicate of I5ac7f427376a3a0ab7ef36e470cf387748b15b20

https://gerrit.wikimedia.org/r/1145251

Fri, Aug 8, 7:17 PM · WMDE-TechWish-Sprint-2025-08-20-Strawberry-Basil-Icecream, WMDE-TechWish-Sprint-2025-08-06-Kekstazie-Icecream, Cite (Sub-referencing), WMDE-TechWish-Sprint-2025-05-28, MW-1.45-notes (1.45.0-wmf.2; 2025-05-20), WMDE-TechWish-Sprint-2025-05-14, WMDE-TechWish-Sprint-2025-04-30, Story, Sub-referencing (product board)

Thu, Aug 7

dom_walden closed T392821: Inconsistent behaviour when favouriting redirects and their targets as Resolved.

I cannot reproduce the above bugs on enwiki beta. I do see T394368.

Thu, Aug 7, 1:39 PM · MW-1.45-notes (1.45.0-wmf.2; 2025-05-20), Community-Tech (Fox Squad), Template-Discovery-And-Recall (Allow users to favorite a template)

Mon, Aug 4

WMDE-Fisch moved T389100: VE: Deleting main ref should not orphan existing sub-refs from Dev ready for sprint to Waiting / Stalled stories on the Sub-referencing (product board) board.
Mon, Aug 4, 2:31 PM · WMDE-TechWish-Sprint-2025-08-20-Strawberry-Basil-Icecream, WMDE-TechWish-Sprint-2025-08-06-Kekstazie-Icecream, Cite (Sub-referencing), WMDE-TechWish-Sprint-2025-05-28, MW-1.45-notes (1.45.0-wmf.2; 2025-05-20), WMDE-TechWish-Sprint-2025-05-14, WMDE-TechWish-Sprint-2025-04-30, Story, Sub-referencing (product board)
WMDE-Fisch moved T389100: VE: Deleting main ref should not orphan existing sub-refs from Waiting / Stalled stories to Dev ready for sprint on the Sub-referencing (product board) board.
Mon, Aug 4, 2:30 PM · WMDE-TechWish-Sprint-2025-08-20-Strawberry-Basil-Icecream, WMDE-TechWish-Sprint-2025-08-06-Kekstazie-Icecream, Cite (Sub-referencing), WMDE-TechWish-Sprint-2025-05-28, MW-1.45-notes (1.45.0-wmf.2; 2025-05-20), WMDE-TechWish-Sprint-2025-05-14, WMDE-TechWish-Sprint-2025-04-30, Story, Sub-referencing (product board)

Mon, Jul 28

Dreamy_Jazz moved T394393: CVE-2025-53482: IPInfo: Message key XSS through several IPInfo messages in infobox and popup from Priority Backlog to Needs QA on the Trust and Safety Product Sprint (Sprint Rum baba (July 28 - August 15)) board.
Mon, Jul 28, 6:20 PM · Trust and Safety Product Sprint (Sprint Princess Tarta (August 18 - September 5)), Essential-Work, affects-Miraheze, MW-1.45-notes (1.45.0-wmf.2; 2025-05-20), SecTeam-Processed, Patch-For-Review, Vuln-XSS, IP Info, Trust and Safety Product Team, Security, Security-Team

Fri, Jul 25

Ahoelzl closed T394049: PageMovedEvent should carry article redirect data as Resolved.
Fri, Jul 25, 11:05 PM · MW-1.45-notes (1.45.0-wmf.2; 2025-05-20), Data-Engineering (Q4 2025 April 1st - June 30th), Event-Platform, MediaWiki-DomainEvents, MW-Interfaces-Team
Ahoelzl closed T394046: PagedMovedEvent should carry reason data as Resolved.
Fri, Jul 25, 11:05 PM · MW-1.45-notes (1.45.0-wmf.2; 2025-05-20), Data-Engineering (Q4 2025 April 1st - June 30th), Event-Platform, MW-Interfaces-Team, MediaWiki-DomainEvents
Niharika edited projects for T394393: CVE-2025-53482: IPInfo: Message key XSS through several IPInfo messages in infobox and popup, added: Trust and Safety Product Sprint (Sprint Rum baba (July 28 - August 15)); removed Trust and Safety Product Sprint (Sprint Cannoli (July 7 - July 25)).
Fri, Jul 25, 3:27 PM · Trust and Safety Product Sprint (Sprint Princess Tarta (August 18 - September 5)), Essential-Work, affects-Miraheze, MW-1.45-notes (1.45.0-wmf.2; 2025-05-20), SecTeam-Processed, Patch-For-Review, Vuln-XSS, IP Info, Trust and Safety Product Team, Security, Security-Team

Jul 23 2025

Dreamy_Jazz reopened T394393: CVE-2025-53482: IPInfo: Message key XSS through several IPInfo messages in infobox and popup as "Open".

Re-opening so that we can track QA on this.

Jul 23 2025, 2:23 PM · Trust and Safety Product Sprint (Sprint Princess Tarta (August 18 - September 5)), Essential-Work, affects-Miraheze, MW-1.45-notes (1.45.0-wmf.2; 2025-05-20), SecTeam-Processed, Patch-For-Review, Vuln-XSS, IP Info, Trust and Safety Product Team, Security, Security-Team

Jul 22 2025

thiemowmde closed T396017: VE should save updated main+details main bodies as references list items when converting to Parsoid DOM, a subtask of T389100: VE: Deleting main ref should not orphan existing sub-refs, as Resolved.
Jul 22 2025, 11:53 AM · WMDE-TechWish-Sprint-2025-08-20-Strawberry-Basil-Icecream, WMDE-TechWish-Sprint-2025-08-06-Kekstazie-Icecream, Cite (Sub-referencing), WMDE-TechWish-Sprint-2025-05-28, MW-1.45-notes (1.45.0-wmf.2; 2025-05-20), WMDE-TechWish-Sprint-2025-05-14, WMDE-TechWish-Sprint-2025-04-30, Story, Sub-referencing (product board)
matmarex closed T383996: Migrate Enotif to the new notifications interface as Resolved.
Jul 22 2025, 2:14 AM · MW-1.45-notes (1.45.0-wmf.2; 2025-05-20), MW-1.44-notes (1.44.0-wmf.27; 2025-04-29), MediaWiki-Core-Notifications, Epic, OKR-Work, MediaWiki-Platform-Team (Roadmap)

Jul 18 2025

Dreamy_Jazz updated the task description for T394914: Update emptyUserGroup.php to optionally support creating log entries for removal.
Jul 18 2025, 8:16 AM · MediaWiki-User-management, MW-1.45-notes (1.45.0-wmf.2; 2025-05-20), Trust and Safety Product Sprint (Sprint Key Lime Pie (May 5 - May 23)), Temporary accounts (Major pilot wiki deployment)
Bugreporter merged T242597: emptyUserGroup.php: Add options to log rights removal to Special:Log/rights into T394914: Update emptyUserGroup.php to optionally support creating log entries for removal.
Jul 18 2025, 8:15 AM · MediaWiki-User-management, MW-1.45-notes (1.45.0-wmf.2; 2025-05-20), Trust and Safety Product Sprint (Sprint Key Lime Pie (May 5 - May 23)), Temporary accounts (Major pilot wiki deployment)

Jul 17 2025

matmarex closed T392293: Migrate Echo Hooks that stop ENotif notifications, a subtask of T383996: Migrate Enotif to the new notifications interface, as Resolved.
Jul 17 2025, 8:01 PM · MW-1.45-notes (1.45.0-wmf.2; 2025-05-20), MW-1.44-notes (1.44.0-wmf.27; 2025-04-29), MediaWiki-Core-Notifications, Epic, OKR-Work, MediaWiki-Platform-Team (Roadmap)

Jul 10 2025

lilients_WMDE renamed T389100: VE: Deleting main ref should not orphan existing sub-refs from VE: Deleting main ref does not orphan existing sub-refs to VE: Deleting main ref should not orphan existing sub-refs.
Jul 10 2025, 9:53 AM · WMDE-TechWish-Sprint-2025-08-20-Strawberry-Basil-Icecream, WMDE-TechWish-Sprint-2025-08-06-Kekstazie-Icecream, Cite (Sub-referencing), WMDE-TechWish-Sprint-2025-05-28, MW-1.45-notes (1.45.0-wmf.2; 2025-05-20), WMDE-TechWish-Sprint-2025-05-14, WMDE-TechWish-Sprint-2025-04-30, Story, Sub-referencing (product board)

Jul 8 2025

Maintenance_bot removed a project from T392976: CVE-2025-53481: Denial of service vector on ipinfo/v0/norevision: Patch-For-Review.
Jul 8 2025, 8:30 PM · MW-1.45-notes (1.45.0-wmf.2; 2025-05-20), Trust and Safety Product Sprint (Sprint Key Lime Pie (May 5 - May 23)), Data-Persistence, Vuln-DoS, IP Info, Trust and Safety Product Team, Security, Security-Team
gerritbot added a comment to T392976: CVE-2025-53481: Denial of service vector on ipinfo/v0/norevision.

Change #1165043 abandoned by SBassett:

[mediawiki/extensions/IPInfo@REL1_43] SECURITY: Improve slow queries in AnonymousUserIPLookup->checkIPIsKnown

Reason:

The affected code seems to only be from REL1_44 forward (see also: https://github.com/wikimedia/mediawiki-extensions-IPInfo/tree/REL1_43)

https://gerrit.wikimedia.org/r/1165043

Jul 8 2025, 7:52 PM · MW-1.45-notes (1.45.0-wmf.2; 2025-05-20), Trust and Safety Product Sprint (Sprint Key Lime Pie (May 5 - May 23)), Data-Persistence, Vuln-DoS, IP Info, Trust and Safety Product Team, Security, Security-Team
mmartorana renamed T392976: CVE-2025-53481: Denial of service vector on ipinfo/v0/norevision from Denial of service vector on ipinfo/v0/norevision to CVE-2025-53481: Denial of service vector on ipinfo/v0/norevision.
Jul 8 2025, 5:46 PM · MW-1.45-notes (1.45.0-wmf.2; 2025-05-20), Trust and Safety Product Sprint (Sprint Key Lime Pie (May 5 - May 23)), Data-Persistence, Vuln-DoS, IP Info, Trust and Safety Product Team, Security, Security-Team