Backdrop 1.24.2 Release checklist

[jenlampton]

Release scheduled for April 19, 2023 11:30am - 1:30pm PT

Pre-release tasks

• Merge commits @quicksketch
• Create the next bugfix milestone @jenlampton
• Move all unfinished issues to the next bugfix release milestone @jenlampton
• Review all closed issues in milestone: @jenlampton
  • Issue titles should include a complete, but very brief summary of the problem.
  • Issue titles sould be in complete sentences, ending with a period.
  • Bug issue titles should start with Fix or Fixed,
  • New fearure issue titles should start with Add or Added.
  • Each issue should have accurate labels, especially the "type - " labels.
• Close the milestone @jenlampton
• Draft Release notes @jenlampton
  • Include a short, descriptive summary of the release, for example:
    • "Security release for Backdrop CMS. This release fixes 1 security vulnerability:"
    • Include a list of SA's for commits to this release
  • Include a section heading **Notes for updating**
    • Note if any changes were made to files outside the core directory, for example:
      • - No changes have been made to the `.htaccess`, `robots.txt` or default `settings.php` files in this release. Updating customized versions of those files is not necessary.
      • See this example for updates to .htaccess
      • See this example or this example for updates to settings.php
    • Note if updates (update.php) needs to be run, for example:
      • Use the text The database update script does **not** need to be run.
      • or **It will be necessary to run the update script** (located at /update.php) for this release.
  • Include a section heading **Changes since version 1.xx.x** are listed below.
    • Navigate to Actions
    • Select the most recent time "Release Notes Generator" has been run.
    • Download the release-notes artifact attached to the generator.
    • Unzip the file, and copy/pate contents into release notes draft.
    • Remove any square bracets in the titles, and move those issues to their own section.
• Draft Security Advisories @jenlampton

Release tasks

• Update bootstrap.inc with version number @quicksketch
• Tag for release, and push tag to GitHub @quicksketch
• Revert version number back @quicksketch
• Create release notes on GitHub, and publish release @jenlampton
• Publish Security Advisories on b.org @jenlampton
• Mark the release node on b.org as a security release @jenlampton
• N/A Request a CVE - (assign to jenlampton / quicksketch)
• Update the front page download link on b.org @jenlampton
• Tweet that a new release is out @jenlampton
  • Use text like "There is a security release out for #BackdropCMS today, please update when you can. Backdrop core - Critical - Third-party libraries - BACKDROP-SA-CORE-2021-001"

Immediate Post-release tasks

• Update Tugboat @BWpanda
• Update Pantheon @herbdool
• Update Platform.sh @herbdool
• Update Composer @herbdool
• Update Docker @Wylbur
• Update the Wikipedia articles @klonos
  • https://en.wikipedia.org/w/index.php?title=Template:BackdropCMS_version&action=edit -
    • Auto applied to:
      • https://en.wikipedia.org/wiki/Backdrop_CMS
      • https://en.wikipedia.org/wiki/List_of_content_management_systems

Backdrop's Website updates

• backdropcms.org @jenlampton
• beta.backdropcms.org @bugfolder
• docs.backdropcms.org @jenlampton
• events.backdropcms.org @jenlampton
• forum.backdropcms.org @jenlampton
• localize.backdropcms.org @jenlampton

See Also

• Checklist for 1.23.4 release

[jenlampton]

SA is drafted: https://backdropcms.org/security/backdrop-sa-core-2023-005

[jenlampton]

Release notes draft:

Security release for Backdrop CMS. This release fixes 1 security vulnerability:

• Backdrop core - Moderately critical - Access bypass - BACKDROP-SA-CORE-2023-005

This release also includes a handful of bug fixes and other improvements.

Notes for updating

• This release does modify the settings.php file located outside the core directory. Updating your customized copy of this file is recommended, but not necessary. To update, copy the new section onfile_not_normalized_schemes from the latest file to your site's settings.php file.
• It will be necessary to run the update script (located at /core/update.php) for this release.

Changes since version 1.24.1 are listed below.

Bug Fixes

• Fixed: Adjust autocomplete dropdown positioning on iPad and iPhone #6050
• Fixed: "More" link on permissions page should toggle description. #6053
• Fixed: Sanitize text format names in hint below editor #6065
• Fixed: Message type not set properly for deprecated system message #6041
• Fixed: EntityReference invokes deprecated Drupal function instead of Backdrop alternative. #6036

Documentation updates

• Docblocks updated with Proper @return statements. #6042
• Document $require_settings for find_conf_path(). #6002

User experience improvements

• Display container style on rows in flexible layout template builder. #5523

Miscellaneous changes

• Disable the Drupal compatibility layer when running tests. #6037
• Update l() to use the provided arguments instead of a new $variables array. #5996
• Add a GitHub Action to run cspell. #5811
• Remove the position key from hook_menu(). #5903

[quicksketch]

Tag for https://github.com/backdrop/backdrop/releases/tag/1.24.2 is ready to go.

[jenlampton]

Release is out: https://github.com/backdrop/backdrop/releases/tag/1.24.2

[bugfolder]

Changes since version 1.24.3 are listed below.

You mean 1.24.1, right?

[jenlampton]

yes! thank you. Fixing now :)

[jenlampton]

All sites except beta have the security update, and a new release of the borg theme. but now I'm tired so I'm going to take a little break.

[laryn]

Pantheon upstream has been updated.