Open main menu

Contents

Identify outdated extensions from a web interfaceEdit

I would like to be able to identify extensions that have updates available from a web interface. Extensions that have known security issues would be highlighted in some way. Legoktm (talk) 06:00, 16 May 2018 (UTC)

EndorsementsEdit

CommentsEdit

One concern that was mentioned at the Wikimedia hackathon session on this rfc was that this may end up being a security concern as Special:Version is a public page that would be broadcasting that a particular installation is using out-of-date-extensions.TCipriani (WMF) (talk) 17:52, 19 May 2018 (UTC)

I don't think there's any requirement to use Special:Version to provide this interface, or even make it public. It's just that I, as a wiki sysadmin, want some web interface that shows me the status of my extensions. Whether it requires a specific user right or some other access control is an issue for implementation IMO. Legoktm (talk) 18:07, 19 May 2018 (UTC)
  • This should be behind a user right. Somethimes updates are a must sometime they are not, e.g. new features vs. security fixes. Also these updates shoudl be trackt on a branch basis or if a new version tag is available as opposed to a rel tag. --[[kgh]] (talk) 14:43, 20 June 2018 (UTC)

Channels to subscribeEdit

There should be channels like latest-lts, 1-27-lts, 1-31-lts and latest-stable. This way the consumer does not have to care about versions. He is just choosing the desired channel and the catalogue provides the appropriate versions. The channel could also be set implicitly, based on the actual version of MW the consumer is using. Osnard (talk) 07:54, 20 May 2018 (UTC)

EndorsementsEdit

CommentsEdit

  • Isn't this just a specific suggestion on how to implement the former suggestion? --[[kgh]] (talk) 14:44, 20 June 2018 (UTC)

...