[01:32:30] Appearently OWASPs mediawiki server was hacked https://owasp.org/blog/2024/03/29/OWASP-data-breach-notification.html [01:32:42] Reading between the lines, it sounds like not mediawiki's fault [01:38:30] "OWASP has already removed your information from the Internet, so no immediate action on your part is required." i don't think that's how the internet works [01:38:41] lol [02:15:28] "We have disabled directory browsing" heh [05:54:52] MediaWiki docker [05:55:45] mediawiki docker install [08:34:37] bawolff, taavi: slides are at https://commons.wikimedia.org/wiki/File:Cool_new_things_in_PHP_%E2%80%93_Wikimedia_Hackathon_2023.pdf – split into a section we can use already and another one we can’t use yet until we use a newer PHP in production ;) [13:30:12] How is the LibUp-bot configured to know which dependencies are used? https://phabricator.wikimedia.org/T361469 [13:31:01] https://gerrit.wikimedia.org/r/plugins/gitiles/labs/libraryupgrader/config/+/refs/heads/master/monitoring.json [13:32:50] Ah I see, legoktm added us in https://gerrit.wikimedia.org/r/plugins/gitiles/labs/libraryupgrader/config/+/867e92d709b53020bcddb5a8a299db45b3175736%5E%21/#F0 [13:44:07] Also I think it would be awesome if we could change https://github.com/wikimedia/mediawiki-docker away from considering itself a fork since its the canonical upstream nowadays [13:47:40] gromit: What change do you want? :P [13:52:06] Reedy: I'm not sure if github is able to do that, but right now if I create a PR it tries to compare against benhutchins/docker-mediawiki since that is where it was forked from [13:52:32] so in a sense it would be good to "unlink" it from the old upstream, but I didn't find any setting for that in my own repo [13:53:00] https://docs.github.com/en/pull-requests/collaborating-with-pull-requests/working-with-forks/detaching-a-fork [13:53:05] >You can delete a fork and recreate the same repository, without the connection to the original network. [13:53:13] srsly github? [13:54:24] We can definitely do that, but we'd lose some of the repo history, I guess? [13:54:34] specifically, PR stuff [13:55:14] Oh wow 🤔 [13:57:26] We can move this to another name, and create a new one in its place... [14:06:52] idk if thats worth the hassle .. Maybe legoktm also has some input [14:07:29] Do we have to have it on github? [14:13:43] Reedy: what would be the alternative? Phabricator? [14:13:54] gerrit or gitlab [14:14:17] we can still replicate to github (like we do with other repos)