[14:16:46] <jfolv>	 That polyfill supply chain attack doesn't affect MediaWiki, right? I noticed MediaWiki utilizes symfony polyfill, but as far as I can tell, that's an unrelated library. Just want to cover my bases.
[14:21:09] <James_F>	 jfolv: We don't use polyfill.io, no, and we pin our dependencies to avoid upstream changes having these risks.
[14:22:40] <James_F>	 The only reference to polyfill.io is in a comment in one of our polyfills that mentions that it is a source of other polyfills: https://gerrit.wikimedia.org/g/mediawiki/core/+/HEAD/resources/lib/intersection-observer/README.md#171
[14:23:26] <James_F>	 Theoretically you might have a custom extension/skin using them, but nothing in our world.
[14:45:19] <jfolv>	 James_F: That's what I figured, thanks. Again, just wanted to cover my bases.