Backdrop 1.21.4 Release checklist

[jenlampton]

Release scheduled for Mar 16, 2022 2pm - 4pm PT

Pre-release tasks

• Merge commits @quicksketch
• Create the next bugfix milestone @jenlampton
• Move all unfinished issues to the next bugfix release milestone @jenlampton
• Review all closed issues in milestone: @jenlampton
  • Issue titles should include a complete, but very brief summary of the problem.
  • Issue titles sould be in complete sentences, ending with a period.
  • Bug issue titles should start with Fix or Fixed,
  • New fearure issue titles should start with Add or Added.
  • Each issue should have accurate labels, especially the "type - " labels.
• Close the milestone @jenlampton
• Draft Release notes @jenlampton
  • Include a short, descriptive summary of the release, for example:
    • "Security release for Backdrop CMS. This release fixes 1 security vulnerability:"
    • Include a list of SA's for commits to this release
  • Include a section heading **Notes for updating**
    • Note if any changes were made to files outside the core directory, for example:
      • No changes have been made to the .htaccess, robots.txt or default settings.php files in this release. Updating customized versions of those files is not necessary.
      • See this example for updates to .htaccess
      • See this example or this example for updates to settings.php
    • Note if updates (update.php) needs to be run, for example:
      • Use the text The database update script does **not** need to be run.
      • or **It will be necessary to run the update script** (located at /update.php) for this release.
  • Include a section heading **Changes since version 1.xx.x** are listed below.
    • Navigate to Actions
    • Select the most recent time "Release Notes Generator" has been run.
    • Download the release-notes artifact attached to the generator.
    • Unzip the file, and copy/pate contents into release notes draft.
    • Remove any square bracets in the titles, and move those issues to their own section.
• Draft Security Advisories @jenlampton

Release tasks

• Update bootstrap.inc with version number @quicksketch
• Tag for release, and push tag to GitHub @quicksketch
• Revert version number back @quicksketch
• Create release notes on GitHub, and publish release @jenlampton
• Publish Security Advisories on b.org @jenlampton
• Mark the release node on b.org as a security release @jenlampton
• N/A Request a CVE - (assign to jenlampton / quicksketch)
• Update the front page download link on b.org @jenlampton
• Tweet that a new release is out @jenlampton
  • Use text like "There is a security release out for #BackdropCMS today, please update when you can. Backdrop core - Critical - Third-party libraries - BACKDROP-SA-CORE-2021-001"

Immediate Post-release tasks

If this release does NOT accompany a minor release:

• Update Tugboat @bwpanda
• Update Pantheon @herbdool
• Update Platform.sh @herbdool
• Update Composer @herbdool
• Update Docker @Wylbur
• Update the Wikipedia articles @kleomash
  • https://en.wikipedia.org/wiki/Backdrop_CMS
  • https://en.wikipedia.org/wiki/List_of_content_management_systems
• Update the Security Advisory with CVE (assign to jenlampton / quicksketch)

Backdrop's Website updates

• backdropcms.org @jenlampton
• docs.backdropcms.org @jenlampton
• events.backdropcms.org @jenlampton
• forum.backdropcms.org @jenlampton
• N/A localize.backdropcms.org - no matching security update for D7.

See Also

• Checklist for 1.20.7 release

[jenlampton]

Draft release notes:

---

Security release for Backdrop CMS. This release includes several bug fixes, and fixes 1 security vulnerability:

• SA-BACKDROP-CORE-2022-003

Notes for updating

• No changes have been made to the .htaccess, robots.txt or default settings.php files in this release. Updating customized versions of those files is not necessary.
• The database update script does not need to be run.

Changes since version 1.21.3 are listed below.

• Fixed: Administrator Role form saves wrong value on sites with numeric role machine name #5528
• Fixed: Cached anonymous page and "background fetch" cause site rendering issues for LiteSpeed server #5525
• Fixed grammar error in Views row class description text #5143
• Fixed TaxonomyTerm Not Creating Term Hierarchy Reference #5540
• Fixed: Detect LightSpeed/OpenLightSpeed and IIS servers for telemetry data #5524
• [UX] Moved the 'Clear log messages' button to the bottom of the page #5484
• Removed duplicate selectors in Seven's Vertical Tabs CSS file #4834

[jenlampton]

SA and release notes ready for review.

[quicksketch]

Reviewed the SA and the tag is cut: https://github.com/backdrop/backdrop/releases/tag/1.21.4

Release notes look good 👍

[jenlampton]

Release is out: https://github.com/backdrop/backdrop/releases/tag/1.21.4

[Wylbur]

Docker Image pull request in process

[Wylbur]

Docker image has been updated.

[ghost]

Closing in favour of #5617