Halloween #225
freephile
announced in
Announcements
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
-
Changelog since last release: 43.33.2...43.60.6
Commits
HEAD -> dev origin/dev
bd8551e (2025-10-30) Greg Rundlett: Make lint-files.sh script more quiet By default only show warnings and errors.
We introduce a -v or --verbose option if you want to show success
messages too.
Add --help with usage
src/scripts/lint-files.sh979fe60 (2025-10-30) Greg Rundlett: Fix yaml linting errors
.github/workflows/release-notes.ymlsrc/playbooks/create-wiki.ymlsrc/playbooks/debug.ymlsrc/playbooks/migrate-wikis.ymlsrc/roles/configure-wiki/tasks/main.ymlsrc/roles/delete-wiki-wrapper/tasks/main.ymlsrc/roles/imagemagick/tasks/setup-Debian.ymlsrc/roles/imagemagick/tasks/setup-RedHat.yml99d9597 (2025-10-30) Greg Rundlett: Improve linting configuration Ignore 'collections' which is 3rd-party code.
.ansible-lint.yamllintff9e66b (2025-10-30) GitHub Action: Auto-update CHANGELOG and release notes - Updated CHANGELOG with latest commits
CHANGELOGRELEASE_NOTES-HEAD.md51e8d6f (2025-10-30) Greg Rundlett: We don't need no stinkin' badges
README.md1e87757 (2025-10-30) GitHub Action: Auto-update CHANGELOG and release notes - Updated CHANGELOG with latest commits
CHANGELOGRELEASE_NOTES-HEAD.mda6a76f6 (2025-10-30) Greg Rundlett: process the dev branch
.github/workflows/yamllint.yml09a7a3c (2025-10-30) GitHub Action: Auto-update CHANGELOG and release notes - Updated CHANGELOG with latest commits
CHANGELOGRELEASE_NOTES-HEAD.mdThe new create-wiki logging mirrors the deploy logging architecture with both transactional and processing logs.
Transactional log: /opt/data-meza/logs/create-wiki/create-wiki.log (tracks operations with metadata)
Processing log: /opt/data-meza/logs/create-wiki-output/{env}-{timestamp}.log (captures ansible output)
/opt/data-meza/logs/
├── create-wiki/ # Transactional logs
│ └── create-wiki.log # Audit trail
└── create-wiki-output/ # Processing logs
├── demo-2025-10-29_175734.log
└── prod-2025-10-29_180234.log
Added two new commands:
sudo meza create-wiki-tail
sudo meza create-wiki-log
/opt/data-meza/logs/create-wiki-output/monolith-2025-10-29_225319.log
Meza.py uses paths from paths.yml
Verify-wiki enhanced
wiki_id and wiki_name (as well as password) are passed by extra_vars in meza.py when it calls create-wiki-promptless playbook.
create-wiki playbook now prompts for Admin password and passes it on to the 'create-admin-account' task list in verify-wiki.
src/roles/verify-wiki/tasks/import-wiki-sql.yml is enhanced with output about wiki creation status
and the set_fact section was improved to clarify what's happening:
BEFORE the created_new_wiki flag logic was problematic.
Admin Account creation
The admin account creation was hardcoded to only work for wikis with wiki_id == "demo"
Removed wiki_id restriction: Changed from when: wiki_id == "demo" to run for any new wiki
Updated prompts: Made the messages generic to work for any wiki name
Fixes Issue #217
Fixes Issue #220
config/paths.ymlsrc/playbooks/create-wiki-promptless.ymlsrc/playbooks/create-wiki.ymlsrc/roles/create-wiki-wrapper/tasks/main.ymlsrc/roles/mediawiki/tasks/main.ymlsrc/roles/verify-wiki/tasks/create-admin-account.ymlsrc/roles/verify-wiki/tasks/import-wiki-sql.ymlsrc/scripts/meza.py[skip ci] chicken and egg problem
Fixes Issue #219
CHANGELOGsrc/scripts/updateCHANGELOG.shCHANGELOGRELEASE_NOTES-HEAD.mda799fa8 (2025-10-29) Greg Rundlett: Prompt for credentials when creating Admin acct When Meza creates an Admin account, whether for the initial 'demo'
or for any new wiki, prompt for the secure password and do not log it.
This way it is only known to the user, and not a vulnerability.
Note: the way that this is executed in the role hierarchy is that
verify-wiki runs import-wiki-sql tasks for new wikis, which in turn
runs init-wiki tasks. Since 'init-wiki.yml' ONLY creates an Admin account
it was renamed 'create-admin-account.yml'
Fixes Issue #217
src/roles/verify-wiki/tasks/create-admin-account.ymlsrc/roles/verify-wiki/tasks/import-wiki-sql.ymlsrc/roles/verify-wiki/tasks/init-wiki.ymlde0798e (2025-10-24) GitHub Action: Auto-update CHANGELOG and release notes - Updated CHANGELOG with latest commits
CHANGELOGRELEASE_NOTES-HEAD.mdThough GitHub Actions, we integrated automatic Changelog and RELEASE
NOTES generation.
For pull requests and commits.
.github/RELEASE_AUTOMATION.md.github/workflows/advanced-release-management.yml.github/workflows/manual-release-notes.yml.github/workflows/release-notes.ymlsrc/scripts/release-helper.shMeza 43.58.2
manual/meza-cmd/MIGRATION.mdmanual/meza-cmd/help.mdmanual/meza-cmd/install.mdMeza 43.58.1
9071e05 (2025-10-24) Greg Rundlett: Correct help content about deploy command There is no 'install monolith' command.
manual/meza-cmd/MIGRATION.mdmanual/meza-cmd/help.mdmanual/meza-cmd/install.md1effac3 (2025-10-24) Greg Rundlett: Update Changelog and RELEASE NOTES-HEAD
CHANGELOGRELEASE_NOTES-HEAD.mdMeza 43.57.1
d91c7a7 (2025-10-24) Greg Rundlett: Re-enable WatchAnalytics Fixes Issue #214
config/MezaCoreExtensions.yml4541968 (2025-10-24) Greg Rundlett: minor tweaks to Quick Start section (curl not ready yet)
whitespace changes in meza.py
manual/meza-cmd/index.mdsrc/scripts/meza.pyMeza 43.56.1
run-maintenance.ymlUpdate maint command doc
Backward compatibility is retained for invoking cleanupUploadStash
manual/meza-cmd/maint.mdsrc/playbooks/cleanup-upload-stash.ymlsrc/playbooks/run-maintenance.ymlsrc/scripts/meza.pyMeza 43.55.1
config/MezaCoreExtensions.ymlMeza 43.54.4
6eb271e (2025-10-23) Greg Rundlett: Update Changelog and RELEASE NOTES
CHANGELOGRELEASE_NOTES-HEAD.md0fb72fa (2025-10-23) Greg Rundlett: Update Changelog and RELEASE NOTES
CHANGELOGRELEASE_NOTES-HEAD.mdmanual/meza-cmd/index.mdMeza 43.54.3
curl -L https://raw.githubusercontent.com/nasa/meza/master/src/scripts/getmeza.sh | bashFixes Issue #211
manual/meza-cmd/index.mdMeza 43.54.2
c4043ba (2025-10-23) Greg Rundlett: Add in the 'rich' requirement for better console help
requirements-dev.txt0faa71c (2025-10-23) Greg Rundlett: Remove undefined 'destroy' command The meza destroy command was a placeholder for undefined functionality.
Fixes Issue #211
src/scripts/meza.pyMeza 43.54.1
04b98d4 (2025-10-23) Greg Rundlett: Fix help command alignment Intuitive rename of base.md to help.md to follow the pattern where
meza commands have a .md file by the same name.
meza # Shows help.md (general help)
meza --help # Shows help.md (general help)
meza help # Shows help.md (general help)
meza help deploy # Shows deploy.md (deploy command help)
meza help --help # Shows help.md (help for help command itself)
meza deploy --help # Shows deploy.md (deploy command help)
Fixes Issue #211
manual/meza-cmd/MIGRATION.mdR100 manual/meza-cmd/base.md manual/meza-cmd/help.md
src/scripts/meza.py19193c2 (2025-10-23) Greg Rundlett: Add missing newline at end of file
manual/meza-cmd/deploy-notify.mdMeza 43.53.3
This fixes Issue #211
manual/meza-cmd/deploy-notify.mdMeza 43.53.2
Fixes Issue #211
manual/meza-cmd/autodeploy.mdmanual/meza-cmd/config.mdmanual/meza-cmd/debug.mdsrc/roles/logrotate/README.mdR099 manual/meza-cmd/cleanup-backups.md src/scripts/cleanup-backups.md
Meza 43.53.1
manual/meza-cmd/index.mdmanual/meza-cmd/maint.mdsrc/scripts/meza.pyMeza 43.52.2
sharing configured
src/roles/mediawiki/templates/LocalSettings.php.j2Meza 43.52.1
site.yml
logrotate role
cleanup-backups.sh new script
cleanup-backups.md documentation
manual/meza-cmd/cleanup-backups.mdsrc/playbooks/site.ymlsrc/roles/logrotate/README.mdsrc/roles/logrotate/defaults/main.ymlsrc/roles/logrotate/handlers/main.ymlsrc/roles/logrotate/meta/main.ymlsrc/roles/logrotate/tasks/main.ymlsrc/roles/logrotate/templates/cleanup-backups.sh.j2src/roles/logrotate/templates/meza-logs.j2src/scripts/cleanup-backups.shsrc/scripts/meza.pyMeza 43.51.1
role: apache-php
Fixes Issue #212
src/roles/apache-php/tasks/main.ymlsrc/roles/init-controller-config/tasks/main.ymlMeza 43.50.1
src/scripts/meza.pyMeza 43.49.4
dc86566 (2025-10-21) Greg Rundlett: Update CHANGELOG
CHANGELOG9a2be9a (2025-10-20) Greg Rundlett: Remove trailing whitespace in markdown
RELEASE-NOTES.mdRELEASE_NOTES-HEAD.mdMeza 43.49.3
RELEASE-NOTES.mdRELEASE_NOTES-HEAD.mdMeza 43.49.2
RELEASE-NOTES.mdMeza 43.49.1
RELEASE-NOTES.mdRELEASE_NOTES-43.25.11.mdRELEASE_NOTES-43.29.1.mdRELEASE_NOTES-HEAD.mdMeza 43.48.2
manual/meza-cmd/backup.txtmanual/meza-cmd/base.txtmanual/meza-cmd/config.txtmanual/meza-cmd/create.txtmanual/meza-cmd/debug.txtmanual/meza-cmd/delete.txtmanual/meza-cmd/deploy.txtmanual/meza-cmd/docker.txtmanual/meza-cmd/install.txtmanual/meza-cmd/list-wikis.txtmanual/meza-cmd/maint.txtmanual/meza-cmd/migrate-wikis.txtmanual/meza-cmd/prompt.txtmanual/meza-cmd/prompt_default_on_blank.txtmanual/meza-cmd/prompt_secure.txtmanual/meza-cmd/setup.txtMeza 43.48.1
📊 Structured tables for arguments and options
🎨 Syntax-highlighted code blocks
🔗 Cross-references between related commands
📋 Consistent formatting across all files
command documentation is now in markdown files (.md) replacing any
pre-existing .txt files
Added documentation for previously undocumented commands
Improved documentation for meza create wiki and meza delete wiki
new command for list-wikis
meza list-wikisnew general purpose debug command backed by a debug playbook
meza debug monolith m_htdocsnew help system for every meza command
meza --help
Fixes Issue #3
manual/meza-cmd/DELETION.mdmanual/meza-cmd/MIGRATION.mdmanual/meza-cmd/backup.mdmanual/meza-cmd/base.mdmanual/meza-cmd/config.mdmanual/meza-cmd/create.mdmanual/meza-cmd/create.txtmanual/meza-cmd/debug.mdmanual/meza-cmd/debug.txtmanual/meza-cmd/delete.mdmanual/meza-cmd/delete.txtmanual/meza-cmd/deploy-check.mdmanual/meza-cmd/deploy-kill.mdmanual/meza-cmd/deploy-lock.mdmanual/meza-cmd/deploy-log.mdmanual/meza-cmd/deploy-tail.mdmanual/meza-cmd/deploy-unlock.mdmanual/meza-cmd/deploy.mdmanual/meza-cmd/docker.mdmanual/meza-cmd/index.mdmanual/meza-cmd/install.mdmanual/meza-cmd/list-wikis.mdmanual/meza-cmd/list-wikis.txtmanual/meza-cmd/maint.mdmanual/meza-cmd/migrate-wikis.mdmanual/meza-cmd/setup.mdmanual/meza-cmd/update.mdsrc/playbooks/debug.ymlsrc/scripts/meza.pyMeza 43.47.1
meza create wikicould fail as late as during the update.php phase of a subsequent deploy because the .smw.json file was not writable in the symlinked config directory.fixes Issue #48 and Issue #44
src/roles/verify-wiki/tasks/main.ymlMeza 43.46.2
Fixed task key order
Fix shell command issues
Jinja2 spacing
Structure Issues
src/roles/migrate-to-declarative-wikis/tasks/main.ymlMeza 43.46.1
was broken with an undefined variable
The map filter was trying to loop a variable in a non-loop context
so the Jinja2 template logic was wrong
sudo meza migrate-wikis monolithworks nowinstead an 'undefined variable' error
Fixes Issue #101 Use a declarative wiki ID
src/roles/migrate-to-declarative-wikis/tasks/main.ymlMeza 43.45.1
on all ansible commands by using the special 'always' tag.
A task with the always tag will always run, even if you use
--skip-tags always or run the playbook with different tags.
It's useful for critical setup or cleanup tasks.
The 'always' tag is the opposite of the 'never' tag.
Now the core configuration loading (OS-specific, paths, and defaults)
always run regardless of which tags are specified, ensuring that
essential variables are available for any tagged deployment scenario.
src/roles/set-vars/tasks/main.ymlMeza 43.44.2
Also make lint-files.sh executable.
src/scripts/lint-files.shsrc/scripts/meza-sbom.cyclonedx.jsonsrc/scripts/meza-sbom.spdx.jsonsrc/scripts/meza-sbom.txtMeza 43.44.1
Meza produces a wrapper script on deploy which can be used to invoke
MediaWiki's maintenance run.php runJobs for all defined wikis.
You can also selectively pass a wiki ID to the command.
Fixed the script invocation and also uses the declarative wiki approach.
src/scripts/meza.pyMeza 43.43.1
e.g. ansible-playbook /opt/meza/src/playbooks/site.yml --check
src/roles/mediawiki/tasks/main.ymlMeza 43.42.1
database role and the geerlingguy/kibana role for cross-platform
package installation. Also ensure that the ansible variable is
defined so that --check works with narrow playbook execution.
Touches on Issue #42 and Issue #204
src/roles/imagemagick/tasks/main.ymlsrc/roles/imagemagick/tasks/setup-Debian.ymlsrc/roles/imagemagick/tasks/setup-RedHat.ymlMeza 43.41.1
attributes for wikis in YAML. This deprecates the implied or indirect
directory method of creating and identifying wikis.
The deprecated directory method is still supported.
There is a new meza command 'migrate-wikis' that will write the YAML
for you - storing it in your conf-meza/public/public.yml file.
Usage: sudo meza migrate-wikis
e.g. sudo meza migrate-wikis monolith
See config/defaults.yml for example declaration
You can now use Meza commands to 'create' wiki and 'delete' wiki.
However, you can now also simply edit your YAML configuration and
run a meza deploy which will create wikis accordingly.
New:
Modified:
Fixes Issue #101
config/defaults.ymlmanual/meza-cmd/migrate-wikis.txtsrc/playbooks/migrate-wikis.ymlsrc/roles/base-config-scripts/tasks/main.ymlsrc/roles/base-config-scripts/templates/config.sh.j2src/roles/base-config-scripts/templates/wiki-config.php.j2src/roles/configure-wiki/tasks/main.ymlsrc/roles/delete-wiki-wrapper/tasks/main.ymlsrc/roles/mediawiki/tasks/main.ymlsrc/roles/mediawiki/templates/LocalSettings.php.j2src/roles/mediawiki/templates/refresh-links.sh.j2src/roles/mediawiki/templates/smw-rebuild-all.sh.j2src/roles/migrate-to-declarative-wikis/tasks/main.ymlsrc/roles/set-vars/tasks/main.ymlsrc/scripts/meza.pysrc/scripts/unifyUserTables.phpMeza 43.40.1
such as ansible.builtin.file
It is discouraged to use templates in names at all.
If you do use them, at least put them at the end
https://ansible.readthedocs.io/projects/lint/rules/name/
src/roles/init-controller-config/tasks/main.ymlorigin/main
src/roles/mediawiki/templates/refresh-links.sh.j2origin/fix-44-.smw.json
the intention of the code.
Change owner and group to apache
Make ownership of 'wikis' directory recursive
Change
m_config_public_modefrom 0755 to 0775 for dirs 0664 for filesby using Symbolic mode u=rwX,g=rwX,o=rX.
Expand group permissions to be able to write files while reducing
'other' permissions to only be able to read files.
Remove permission to execute files from all users.
Change the
configure-wikirole which only runs on wiki creationto properly create
.smw.jsonas group-owned by apache.Fixes Issue #44
config/paths.ymlsrc/roles/configure-wiki/tasks/main.ymlsrc/roles/init-controller-config/tasks/main.ymlMeza 43.39.5
while enforcing the removal of trailing whitespace!
I also added better USAGE guidelines for the generate-release-notes.sh
script (printed if you invoke it without arguments).
./src/scripts/updateCHANGELOG.shdoes the work without any arguments../src/scripts/generate-release-notes.sh 43.29.1 HEADdoes the latestrelease notes file.
CHANGELOGRELEASE_NOTES-HEAD.mdsrc/scripts/generate-release-notes.shMeza 43.39.4
errors. e.g.
ansible.builtin.set_factinstead of justset_fact.src/roles/essential-vars/tasks/main.ymlMeza 43.39.2 origin/fix-207-essential-vars
And it did not use the
set-varsrole to properly initialize.Now it uses
set-varsand includes the local certbot role.Adds to the fix for Issue #207
src/playbooks/test-certbot.ymlMeza 43.39.1
With a new role 'essential-vars', we set
ansible_userandgroup_wheelwith OS-specific logic.The variables
group_wheelandansible_userwill now be consistentlyavailable throughout all playbooks and roles where they are referenced.
On a RedHat family OS, using 'sudo meza deploy...' we get:
['group_wheel: wheel', 'ansible_user: meza-ansible', 'ansible_env.USER: root']
instead of inline variable definitions.
set-varsrole structure.owner: "{{ ansible_user | default(ansible_env.USER) }}"with owner: "{{ ansible_user | default('meza-ansible') }}"
because when using 'sudo deploy...' $USER evaluates to 'root'!
restrictions can otherwise prevent success. This is especially
important for SSH private keys which must maintain strict security
permissions (
mode: 0600) and proper ownership to function correctly.Fixed the
mediawikirole SSH key copy tasks and thesite.ymlbootstrap section SSH key copy tasks.
explicitly instead of using a variable that could evaluate to
something incorrect.
commit eee92a0 which used 'default(ansible_env.USER)' instead of
the correct "default('meza-ansible')"
as meza-ansible
inventory_hostname == 'localhost'Fixes Issue #207
CONTRIBUTING.mdconfig/paths.ymlsrc/playbooks/site.ymlsrc/roles/ansible-role-certbot-meza/tasks/main.meza.ymlsrc/roles/base/tasks/main.ymlsrc/roles/cron/tasks/main.ymlsrc/roles/database/tasks/secure-installation.ymlsrc/roles/essential-vars/tasks/main.ymlsrc/roles/init-controller-config/tasks/main.ymlsrc/roles/mediawiki/tasks/main.ymlsrc/roles/meza-log/tasks/main.ymlsrc/roles/saml/tasks/main.ymlMeza 43.38.3
of Meza 43.x
See https://phabricator.wikimedia.org/T388462
and the extension page for updates
config/MezaCoreExtensions.ymlMeza 43.38.2
$wgCommentStreamsAllowedNamespaces = -1;
so you MUST use in the page content to enable it
on a per page basis.
If left to the default (null), comment-streams is allowed on all
pages in all content namespaces.
config/MezaCoreExtensions.ymlMeza 43.38.1
bf74c31 (2025-09-23) Rich Evans: Update MezaCoreExtensions.yml Update Extension:CommentStreams to use "mediawiki_default_branch" rather than "master"
config/MezaCoreExtensions.yml4033706 (2025-09-17) Greg Rundlett: Add a new script to update the CHANGELOG updateCHANGELOG.sh simply uses git log --pretty to prepend new git activity into the CHANGELOG The CHANGELOG is a 'raw' version of what is changed.
The RELEASE_NOTES are the more stylized content where the output is
formatted in markdown, links are included for issues and commit SHAs.
CHANGELOGsrc/scripts/updateCHANGELOG.shMeza 43.37.3
Meza.
CONTRIBUTING.mdMeza 43.37.2
the "GET" parameters of the requested URL.
https://www.mediawiki.org/wiki/Extension:UrlGetParameters
config/MezaCoreExtensions.ymlMeza 43.37.1
$wgAllowHTMLEmail = true;
And, we set the UPO over-riding the default of 'plain-text'
$wgDefaultUserOptions['echo-email-format'] = 'html';
src/roles/mediawiki/templates/LocalSettings.php.j2Meza 43.36.2
config/MezaCoreSkins.ymlMeza 43.36.1
All playbooks should do this.
Eliminate specification of owner/group in the test for cache writing by meza-ansible:
because those cause a chmod which is not allowed even though meza-ansible
can write to the cache directory.
Note: although we could get a full shell with
become_flags: '-i'
this is not necessary for testing write permissions in the cache directory
Ensure message display by filtering items to integer with the 'int' jinja filter
Final work following on b3badfc
Fixes Issue #186
src/playbooks/verify-permissions.ymlsrc/roles/verify-permissions/tasks/main.ymlMeza 43.35.1
instead of the MezaCoreExtensions.yml - thus not included in the Meza distribution.
Adds
Fixes Issue #201
config/MezaCoreExtensions.ymlMeza 43.34.1
easier to manage.
Also quote the version "master" for SemanticDependencyUpdater
Fixes Issue #200 exception from SMWDIProperty class not found
config/MezaCoreExtensions.ymlThis discussion was created from the release Halloween.
Beta Was this translation helpful? Give feedback.
All reactions