User Details
- User Since
- Jun 10 2021, 03:49 (50 w, 20 h)
- Roles
- Administrator
- Availability
- Available
Tue, May 3
Set up two blogs: Security Announcements and a Release Announcements.
Apr 20 2022
As of right now, we have made no changes to the database and other "internals" - our work has been focused on rebranding as "Phabricator" is a trademarked name. For this reason, a rough migration path would be to check out the master branch of rP, copy the config directory from Phabricator to Phorge, and then point Phorge to your Phabricator database. I have tested it myself locally and it appears to work, however; if you have any issues feel free to ask a question on Ponder here and we can get back to you!
Apr 19 2022
Related to T15090: CVE-2022-24765 - Multi-user Git Privilege Escalation perhaps? Revisions are stored in the database that's why they're viewable, but the main repository page requires a call to git.
@dtf I've added you to the Trusted Contributors project, so you should be able to edit the page now.
Apr 15 2022
Apr 14 2022
We need to cherry-pick and import the changes Evan made into the Phorge repository as well...
Apr 11 2022
Apr 6 2022
Apr 5 2022
As discussed in {E2}, we might add temporary banners to Diviner to state that we are rebranding. This would allow some time for us to handle the code rebrand and address the underlying Diviner issues before we edit everything twice.
As discussed in {E2}, we will be implementing this to control spam for now. If this doesn't work, we will revisit this discussion.
Apr 4 2022
Mar 30 2022
Mar 29 2022
Thanks for your comments! Namespacing might be useful, we would have to figure out what that looked like. I was thinking "/book/group/link" as that would be pretty natural (and is very close to what Diviner does already: "/book/group/filename"). It would also allow for us to eventually make Diviner widely useful, see secure: T4558. However, that is a broader discussion that should probably wait...
I am closing this, future meetings are scheduled now. See March 21, 2022 for more information.
Mar 25 2022
Address code review comments
Mar 24 2022
Thank you for the review, @avivey !
Mar 22 2022
Mar 21 2022
Closing this task now, to prevent it from turning into a perpetual task.
The choice to not allow administrators to edit profiles is a strange one... at the very least, we should probably upstream Mukunda's patch.
Mar 16 2022
Mar 15 2022
Mar 11 2022
Nov 8 2021
Thanks for the ping, @MacFan4000. I am in and out because this is my last full-time semester, but I do see the room and have been checking in on it.
Jul 27 2021
Jul 6 2021
Jul 4 2021
Jul 2 2021
Jul 1 2021
Since there is no objections to the release process here (only discussion around the use of tasks), I'd like to propose that we begin promoting to stable shortly. I'd say let's cut the Monday following the week of the release, so the next release will happen July 5 for version 2021.26 (2021 Week 26).
Jun 28 2021
Per discussion on Zulip.