Kunal Mehta @legoktm@mastodon.technology

New blog post: What it takes to parse #MediaWiki page titles...in #Rust

https://blog.legoktm.com/2021/12/23/what-it-takes-to-parse-mediawiki-page-titlesin-rust.html

Goes over the new "mwtitle" library myself and Erutuon have been working on for a few weeks and just published the 0.1 version of!

Today's #MediaWiki security release fixes a pretty bad wiki-leak: https://w.wiki/4ZAe

There's a pretty simple mitigation that can be applied via configuration in LocalSettings.php if you can't patch immediately.

Fixes are out for Debian packages, the "official" Docker image, and should land in my Ubuntu PPA for focal/bionic shortly...

I wrote for the #Wikipedia Signpost this month about how #MediaWiki details with file uploads on the backend: https://en.wikipedia.org/wiki/Wikipedia:Wikipedia_Signpost/2021-11-29/Technology_report

This week we fixed 3 different '0' is falsey in #PHP bugs in #MediaWiki

ahhhhhhhhhhhhhhhhhh

I wrote about mwapi_responses, a #Rust project that autogenerates structs for #MediaWiki API responses: https://blog.legoktm.com/2021/11/01/generating-rust-types-for-mediawiki-api-responses.html

I released 0.2.0 yesterday and I think it's ready for some real world testing.

It's official, #Wikimedia is moving to #LiberaChat / @liberachat

I've set up most of #mediawiki (still missing one bot), which, according to ChanServ, was originally created on Freenode by @eloquence on Jan 02 20:06:07 2004 (17y 20w 2d ago)!!

I'm "legoktm" on @liberachat

Looking forward to chatting with people in #wikimedia, #mediawiki, #wikipedia and more :)

The latest #MediaWiki security release is now in #Debian stable/buster, time to update: https://lists.debian.org/debian-security-announce/2021/msg00070.html

Updated packages for buster-backports, bullseye and my Ubuntu PPA will be available shortly.

The latest #MediaWiki security update is now available for #Debian users, time to apt update && apt upgrade!

Special shoutout to Reedy for coordinating and putting out today's release.

https://lists.debian.org/debian-security-announce/2020/msg00223.html

The latest #MediaWiki security release is now available in #Debian https://lists.debian.org/debian-security-announce/2020/msg00174.html

I also updated the packages in my PPA as well.

The newest stable release, 1.35, should be ready for unstable later today or tomorrow.

New #Rust project: https://gitlab.com/legoktm/mwapi_responses POC to provide strict typing for dynamic #MediaWiki API queries.

Discussion at https://github.com/magnusmanske/mediawiki_rust/issues/19

I just tagged the 1.4.0 release of uprightdiff, a utility to diff browser screenshots used for testing visual differences caused by changes to #MediaWiki's parser.

The new version is now officially compatible with opencv4.

https://www.mediawiki.org/wiki/Uprightdiff

New #MediaWiki code search beta UI: https://codesearch-beta.wmcloud.org/ - please give it a try!

Written fully in #Rust and compiled to WebAssembly. Blog post to follow soon!

Latest #MediaWiki security release is in #Debian unstable now: https://tracker.debian.org/news/1155620/accepted-mediawiki-11318-1-source-into-unstable/

We're not planning to issue a security update for this given that it's not exploitable using the set of extensions available in Debian. It'll get bundled with the next one...

#MediaWiki packages for the latest #Ubuntu 20.04 LTS release are now available: https://blog.legoktm.com/2020/05/12/mediawiki-packages-for-ubuntu-2004-focal-available.html

The latest #MediaWiki security update has hit #Debian - https://lists.debian.org/debian-security-announce/2020/msg00053.html

Only buster users need to update as stretch did not contain the vulnerable code (yay?).

End of an era, #MediaWiki will no longer silently accept "A potato" as part of a valid timestamp: https://lists.wikimedia.org/pipermail/mediawiki-api-announce/2019-June/000146.html

(Don't worry, PHP will still take it!)

There's a new #MediaWiki security release out today. 11 security issues in total, plus plenty of bug fixes.

Updated #Debian packages will be available shortly for stretch, and buster. I've already updated sid/unstable and my Ubuntu PPA: https://launchpad.net/~legoktm/+archive/ubuntu/mediawiki-lts

This is the official end of upstream support for the 1.27.x LTS, but I'll be backporting patches for the entire lifetime of stretch. More details to come.

First performance production testing of PHP 7 vs HHVM: https://phabricator.wikimedia.org/T206341#4750994

Looking good so far!

#MediaWiki #HHVM #PHP

Tim is working on a new profiler for PHP, since there are issues with xhprof/tideways that really aren't worth dealing with...and that we can do better in profiling. He's written up some details on https://phabricator.wikimedia.org/T205059, and there's some initial code in our Gerrit.

I've done the initial Debian packaging at https://salsa.debian.org/mediawiki-team/php-excimer - my goal will be to have it in NEW by the end of the month.

#MediaWiki #profiling #PHP