Topic on Project:Support desk

hi please could someone update http://git.wikimedia.org from 1.4.0 to 1.5.1 please.

Version 1.4.0 of what exactly? And why update? Reasons are welcome.

I think he mean gitblit. The only critical thing i see in release notes is a major security fix for authentication using external sources: http://gitblit.com/releases.html

Hi version 1.6.0 includes tickets and also adds ssh support. Please upgrade to 1.6.0 or 1.7.0 please. It now requires java 7.

Version 1.7.0 does not exist so how can you ask for upgrading to it? Also, 1.6.0 does NOT add ssh support as you stated. It does add a web UI for SSH key management instead. In any case, you need to make very compelling cases what the exact advantages are and why they are relevant to a lot of people. Maintainers do not upgrade server software just because a new version has been released. Upgrades can break things. There is a saying "Never change a running system" - you might get the idea.

1.7.0 does because I think it is an alpha software because dev.gitblit.com has it. And ok. But 1.6.0 add the ticket system and plus 1.4.1 is a security update so I think we should upgrade to 1.6,0 please.

I asked for compelling reasons; you provided none. Good that this is cleared now. :)

Ähm, the ticket system is useless for us, if i understand this system right? We have bugzilla where we handle all bug tickets (or maybe trello and mingle in some projects) and gerrit for review and "pull requests". So, i think AKlapper is right ;)

Ok. but why not upgrade to 1.4.1 then because that fixes a security hole. it also Add closed status for milestones and abandoned status for tickets

With the security fix you mean this?

> Fix major authentication security hole when using external authentication providers

Maybe i can't see this, but git.wikimedia.org doesn't provide any authentication, becauseit's only a mirror for the gerrit hit's :)

I use git.wikimedia.org not very often so i must ask: Does our gitblit installation provide a ticket and/or milestone system? I think no, because for this we have bugzilla :)

oh ok.