Backdrop 1.28.2 Release checklist

[jenlampton]

Release scheduled for July 3, 2024 3pm - 5pm PT

Pre-release tasks

• [x] Merge commits @laryn
• [x] Create the next bugfix milestone @jenlampton
• [x] Move all unfinished issues to the next bugfix release milestone @jenlampton
• [x] Review all closed issues in milestone: @jenlampton
  • Issue titles should include a complete, but very brief summary of the problem.
  • Issue titles should be in complete sentences, ending with a period.
  • Bug issue titles should start with Fix or Fixed,
  • New feature issue titles should start with Add or Added.
  • Each issue should have accurate labels, especially the "type - " labels.
• [x] Close the milestone @jenlampton
• [x] Draft Release notes @jenlampton
  • [x] Include a short, descriptive summary of the release, for example:
  • "Security release for Backdrop CMS. This release fixes 1 security vulnerability:"
  • Include a list of SA's for commits to this release
  • [x] Include a section heading **Notes for updating**
  • [x] Note if any changes were made to files outside the core directory, for example:
    • - No changes have been made to the `.htaccess`, `robots.txt` or default `settings.php` files in this release. Updating customized versions of those files is not necessary.
    • See this example for updates to .htaccess
    • See this example or this example for updates to settings.php
  • [x] Note if updates (update.php) needs to be run, for example:
    • Use the text The database update script does **not** need to be run.
    • or **It will be necessary to run the update script** (located at /core/update.php) for this release.
  • [x] Include a section heading **Changes since version 1.xx.x** are listed below.
  • Navigate to Actions
  • Select the most recent time "Release Notes Generator" has been run.
  • Download the release-notes artifact attached to the generator.
  • Unzip the file, and copy/pate contents into release notes draft.
  • Remove any square brackets in the titles, and move those issues to their own section.
• [x] Draft Security Advisories @jenlampton

Release tasks

Assigned to quicksketch / herbdool / laryn / hosef

• [x] Update bootstrap.inc with version number @laryn
• [x] Tag for release, and push tag to GitHub @laryn
• [x] Revert version number back @laryn
• [x] Create release notes on GitHub, and publish release @jenlampton
• [x] Publish Security Advisories on b.org @klonos
• [x] Mark the release node on b.org as a security release @klonos
• [ ] Request a CVE - @jenlampton
• [x] Update the front page download link on b.org @klonos
• [ ] Tweet that a new release is out @stpaultim
  • Use text like "There is a security release out for #BackdropCMS today, please update when you can. Backdrop core - Critical - Third-party libraries - BACKDROP-SA-CORE-2021-001"

Immediate Post-release tasks

• [x] Update Tugboat @klonos
• [x] Update Pantheon @herbdool
• [ ] Update Platform.sh @herbdool
• [ ] Update Composer @herbdool
• [ ] Update Docker @wylbur
• [ ] Update the Wikipedia articles @klonos
  • [ ] https://en.wikipedia.org/w/index.php?title=Template:BackdropCMS_version&action=edit -
  • Auto applied to:
    • https://en.wikipedia.org/wiki/Backdrop_CMS
    • https://en.wikipedia.org/wiki/List_of_content_management_systems

Backdrop's Website updates

• [ ] backdropcms.org @jenlampton
• [x] beta.backdropcms.org @bugfolder
• [ ] docs.backdropcms.org @jenlampton
• [ ] events.backdropcms.org @jenlampton
• [ ] forum.backdropcms.org @jenlampton
• [ ] localize.backdropcms.org @jenlampton

See Also

• [Checklist for 1.27.3 release]()

[jenlampton]

Release notes draft:

Security release for Backdrop CMS. This release fixes 1 security vulnerability:

• BACKDROP-SA-CORE-2024-001

Notes for updating

• No changes have been made to the .htaccess, robots.txt or default settings.php files in this release. Updating customized versions of those files is not necessary.
• It is not necessary to run the update script (located at /core/update.php) for this release.

Other changes since version 1.28.1 are listed below.

Bug fixes

• Fixed: telemetry_cron() should wait for the interval rather than running with every cron run. #6632
• Fixed: Field aliases break the Views "Add Field" functionality. #6630
• Fixed: Restore missing help text from Admin Bar settings. #6640

Miscellaneous changes

• Add a "Drupal 7 upgrade" state. #6633

[argiepiano]

The release notes include a link to the wrong issue. Issue 66 (php 4?) instead of Issue 6632. This is in the Bug Fixes section

[klonos]

Thanks for picking that @argiepiano 🙏🏼 ...fixed.

@jenlampton #6640 wasn't a UX improvement - it was a bug (regression) fix. I've amended that.

[jenlampton]

I've added a link to the SA into the release notes. Starting on notes for 1.27.3 now :)

[jenlampton]

The 1.28.2 release is cut! 🎉 https://github.com/backdrop/backdrop/releases/tag/1.28.2

[findlabnet]

It will be necessary to run the update script

But I do not see a call for an update.

[laryn]

I've updated the Pantheon upstream.

[klonos]

But I do not see a call for an update.

That's correct @findlabnet 👍🏼 ...if I compare https://github.com/backdrop/backdrop/compare/1.28.1...1.28.2 there's no indication of any update hook.

Unfortunately, I do not have edit access for releases, so it will need to be done either by one of our @backdrop/core-committers or @jenlampton.

[quicksketch]

@findlabnet Thanks, I fixed the release description!

[quicksketch]

Thank you @laryn, @jenlampton, @klonos, and @argiepiano for coordinating today's release!