Commit graph

66 commits

Author SHA1 Message Date
Yaron Koren 54b015fc97 Add lines to composer.json to make it valid
Bug: T311321
Change-Id: Idff9f041093e182d5363f6e4e7e2dd5398221e45
2023-06-08 13:11:37 +00:00
libraryupgrader aadc1d5c19 build: Updating dependencies
composer:
* mediawiki/mediawiki-phan-config: 0.12.0 → 0.12.1

npm:
* grunt-eslint: 24.0.0 → 24.0.1

Change-Id: Ib113cafa0d993fd65df3ff6934055d94837262e3
2023-04-29 09:48:29 +00:00
libraryupgrader 134cfc72ca build: Updating mediawiki/mediawiki-codesniffer to 41.0.0
The following sniffs now pass and were enabled:
* MediaWiki.Usage.ExtendClassUsage.FunctionVarUsage

Change-Id: Ic9a9253e8a249e76b9017d7c3214bce219db7682
2023-03-12 09:15:50 +00:00
libraryupgrader ae4efcb361 build: Updating dependencies
composer:
* mediawiki/mediawiki-codesniffer: 38.0.0 → 40.0.1

npm:
* grunt-stylelint: 0.16.0 → 0.18.0
* stylelint-config-wikimedia: 0.11.1 → 0.13.1

Change-Id: I6d7aa02d387497cf5ebadc1165c082b471ce65d5
2022-11-16 14:46:17 +00:00
libraryupgrader 708c7d7ffd build: Updating dependencies
composer:
* mediawiki/mediawiki-phan-config: 0.11.1 → 0.12.0
* php-parallel-lint/php-console-highlighter: 0.5.0 → 1.0.0
* php-parallel-lint/php-parallel-lint: 1.3.1 → 1.3.2

npm:
* grunt: 1.4.0 → 1.5.3
* grunt-banana-checker: 0.9.0 → 0.10.0
* grunt-eslint: 23.0.0 → 24.0.0
* async: 3.2.0 → 3.2.4
  * https://github.com/advisories/GHSA-fwr7-v2mv-hh25
* minimatch: 3.0.4 → 3.0.8
  * https://github.com/advisories/GHSA-f8q6-p94x-37v3
* minimist: 1.2.5 → 1.2.7
  * https://github.com/advisories/GHSA-xvch-5gv4-984h
* nanoid: 3.1.25 → 3.3.4
  * https://github.com/advisories/GHSA-qrpm-p2h7-hrv2

Additional changes:
* Set `name` in package.json.

Change-Id: I1706b77f713c6446c85f96ae4788eaf05de37b2a
2022-11-11 03:31:07 +00:00
Reedy 8d9399b53b Update mediawiki/mediawiki-phan-config to 0.11.1
Bug: T295285
Change-Id: I2f59b1d63573d19a6915034b34c0ca4b4ecf53d9
2022-08-02 02:02:03 +01:00
libraryupgrader 74c352ce14 build: Updating mediawiki/mediawiki-codesniffer to 38.0.0
Change-Id: Iabc5239ca61040b3b0ca3052b033e551b1dfc0c6
2021-10-24 12:13:11 +00:00
libraryupgrader 4f90bb0735 build: Updating ansi-regex to 5.0.1
* https://npmjs.com/advisories/5197 (CVE-2021-3807)

Additional changes:
* composer.json: Updated phpcs command in composer test (T280592).
* composer.json: Added phpcs command to scripts (T280592).

Change-Id: I96dca296476847a677ddd411db8553b78d5409d0
2021-10-05 21:53:19 +00:00
libraryupgrader a765c687c9 build: Updating composer dependencies
* mediawiki/mediawiki-phan-config: 0.10.6 → 0.11.0
* php-parallel-lint/php-parallel-lint: 1.3.0 → 1.3.1

Change-Id: I33ceb173eb7775833a00dd4ae1761df5e4a4c4d0
2021-09-09 18:43:17 +00:00
libraryupgrader 1f04965c46 build: Updating dependencies
composer:
* mediawiki/mediawiki-codesniffer: 36.0.0 → 37.0.0

npm:
* postcss: 7.0.35 → 7.0.36
  * https://npmjs.com/advisories/1693 (CVE-2021-23368)
* glob-parent: 5.1.0 → 5.1.2
  * https://npmjs.com/advisories/1751 (CVE-2020-28469)
* trim-newlines: 3.0.0 → 3.0.1
  * https://npmjs.com/advisories/1753 (CVE-2021-33623)

Change-Id: I94cbb3d72dfffef2cfd97d2814cc125c8f898d2c
2021-07-23 10:25:17 +00:00
libraryupgrader 756212a5c8 build: Updating dependencies
composer:
* mediawiki/mediawiki-codesniffer: 35.0.0 → 36.0.0
* php-parallel-lint/php-parallel-lint: 1.2.0 → 1.3.0

npm:
* grunt: 1.3.0 → 1.4.0
* lodash: 4.17.19 → 4.17.21
  * https://npmjs.com/advisories/1673 (CVE-2021-23337)
* hosted-git-info: 3.0.7 → 3.0.8
  * https://npmjs.com/advisories/1677 (CVE-2021-23362)
* postcss: 7.0.35 → 8.2.15
  * https://npmjs.com/advisories/1693 (CVE-2021-23368)

Change-Id: Ie63a64b73266230d2805383625fbca576d1be83b
2021-05-13 05:12:32 +00:00
Mark A. Hershberger b15a7352d3
Provide phan with stubs for AL* classes
Bug: T279202
Change-Id: Ia1e667935c2553a1bff999516e3ad349d4923e21
2021-04-07 22:14:44 -04:00
libraryupgrader e150d1ca6c build: Updating dependencies
composer:
* mediawiki/mediawiki-codesniffer: 34.0.0 → 35.0.0
* mediawiki/minus-x: 1.1.0 → 1.1.1

npm:
* eslint-config-wikimedia: 0.17.0 → 0.18.1

Change-Id: I65d4f456cb19d45ee6da21d8fb3e61ee87e9d5e5
2021-01-30 09:22:05 +00:00
libraryupgrader 98b0394394 build: Updating mediawiki/mediawiki-phan-config to 0.10.6
Additional changes:
* Added the "composer phan" command to conveniently run phan.

Change-Id: I602428796f6a4fdf6d30b686163e51b6eefdd0c0
2020-12-31 00:57:51 +00:00
libraryupgrader d005dc7c53 build: Updating dependencies
composer:
* mediawiki/mediawiki-phan-config: 0.10.4 → 0.10.5

npm:
* ini: 1.3.5 → 1.3.7
  * https://npmjs.com/advisories/1589

Change-Id: I384d04efce68cd921c5855c57f7877ee0e95be5c
2020-12-11 06:04:12 +00:00
libraryupgrader 68c8eaf232 build: Updating mediawiki/mediawiki-codesniffer to 34.0.0
Change-Id: I37e30a56dbb7afd76660f3c4eca577e13df1f798
2020-12-07 00:11:55 +00:00
libraryupgrader d28651c59e build: Updating mediawiki/mediawiki-phan-config to 0.10.4
Change-Id: I708699bdd60488688cdd06f541e03b54b8d68c01
2020-11-20 14:59:17 +00:00
libraryupgrader 8f054de250 build: Updating mediawiki/mediawiki-codesniffer to 33.0.0
The following sniffs are failing and were disabled:
* Generic.ControlStructures.DisallowYodaConditions.Found
* MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationPrivate
* MediaWiki.Usage.ExtendClassUsage.FunctionConfigUsage
* MediaWiki.Usage.ExtendClassUsage.FunctionVarUsage

Additional changes:
* Dropped .inc files from .phpcs.xml (T200956).
* Added the `wikimedia/mediawiki` profile in .eslintrc.json (T262222).
* Added the `wikimedia/jquery` profile in .eslintrc.json (T262222).
* Removed global `$`, included in the `wikimedia/jquery` profile (T262222).
* Removed global `mw`, included via `wikimedia/mediawiki` profile (T262222).
* Dropped the emtpy global definition in .eslintrc.json.

Change-Id: I4ace90c3162ca94e401d80d9d68f278c6a2e9960
2020-11-04 16:53:49 +00:00
libraryupgrader 59cc9c8a30 build: Updating mediawiki/mediawiki-phan-config to 0.10.3
Additional changes:
* Consolidated .phpcs.xml encoding to "UTF-8" (T200956).
* Dropped .php5 files from .phpcs.xml (T200956).

Change-Id: Ic982aee80d05ea90fd327b1db871376dc9bdd703
2020-09-25 08:19:21 +00:00
libraryupgrader 5cecfe711d build: Updating mediawiki/minus-x to 1.1.0
Change-Id: Ibeea389b080fb661f6091aa23df334dedb5579f5
2020-06-12 01:00:39 +00:00
libraryupgrader 69b926a604 build: Updating mediawiki/mediawiki-phan-config to 0.10.2
Additional changes:
* Removed phan-taint-check-plugin from extra, now inherited from mediawiki-phan-config.

Change-Id: I6748d2720884b7059224e614d686fd3a72d23202
2020-06-02 20:22:06 +00:00
libraryupgrader 43356fdd6e build: Updating composer dependencies
* php-parallel-lint/php-console-highlighter: 0.4.0 → 0.5.0
* php-parallel-lint/php-parallel-lint: 1.0.0 → 1.2.0

Change-Id: Id7069524582847ec9f1d7bf6c8cd9830108d45cb
2020-05-31 12:22:35 +00:00
libraryupgrader 27ffe1f801 build: Updating mediawiki/mediawiki-codesniffer to 31.0.0
The following sniffs now pass and were enabled:
* PSR12.Files.ImportStatement.LeadingSlash

Additional changes:
* Replaced "jakub-onderka" packages with "php-parallel-lint".

Change-Id: I6bcf27f48c26d9e130dbd1ee77bd3badb31805d5
2020-05-30 05:49:00 +00:00
libraryupgrader 6d55508c9a build: Updating dependencies
composer:
* mediawiki/mediawiki-codesniffer: 29.0.0 → 30.0.0

npm:
* eslint-config-wikimedia: 0.15.0 → 0.15.3
* grunt-stylelint: 0.14.0 → 0.15.0
* stylelint-config-wikimedia: 0.9.0 → 0.10.1

Change-Id: Ife8be95455760953ce19fa22e6ea34f25f0c6503
2020-04-22 18:59:31 +00:00
libraryupgrader e436c9ca32 build: Updating composer dependencies
* jakub-onderka/php-console-highlighter: 0.3.2 → 0.4.0
* mediawiki/minus-x: 0.3.2 → 1.0.0
* mediawiki/mediawiki-phan-config: 0.9.0 → 0.9.2

Change-Id: If64306a1352d3daed53b097d5f02457e8b7a2288
2020-02-19 19:52:51 +00:00
libraryupgrader d3479f8ca2 build: Updating mediawiki/mediawiki-codesniffer to 29.0.0
The following sniffs are failing and were disabled:
* MediaWiki.Commenting.FunctionComment.MissingDocumentationPrivate

Change-Id: I48607226707fcc6c30a194e741d367ddd0c2f27b
2020-01-14 19:37:04 +00:00
libraryupgrader bd97827f43 build: Updating npm dependencies
* grunt-stylelint: 0.9.0 → 0.13.0
* stylelint-config-wikimedia: 0.4.2 → 0.8.0

Additional changes:
* Remove direct "stylelint" dependency in favor of "grunt-stylelint".
* Also sorted "composer fix" command to run phpcbf last.

Change-Id: Ic0f66acde9ca9ebf2606b6f5afea25c562ceb828
2020-01-10 16:05:39 +00:00
libraryupgrader 3fe88580cb build: Updating mediawiki/mediawiki-phan-config to 0.9.0
Depends-On: I76cbaf355462a41aec40d239577123de6b04223a
Change-Id: I7780d46c2828947cf753ea2390d3b1dd645b6758
2019-12-28 19:05:28 +00:00
libraryupgrader 6332b4497d build: Updating dependencies
composer:
* mediawiki/minus-x: 0.3.1 → 0.3.2
* mediawiki/mediawiki-codesniffer: 26.0.0 → 28.0.0
  The following sniffs are failing and were disabled:
  * PSR12.Files.ImportStatement.LeadingSlash

  The following sniffs now pass and were enabled:
  * MediaWiki.Usage.DeprecatedGlobalVariables.Deprecated$wgContLang

npm:
* grunt-banana-checker: 0.6.0 → 0.8.1

Additional changes:
* Added .eslintcache to .gitignore.

Change-Id: Ibdd18a68f35644e2a6abea849e47d6a1b284fbd4
2019-12-18 04:29:56 +00:00
Umherirrender dab839001a build: Updating mediawiki/mediawiki-phan-config to 0.8.0
Bug: T235049
Change-Id: I752c89cd13ecc55cbbcbe9c3b94c862c096daf87
2019-11-06 20:02:54 +01:00
libraryupgrader 4e11554699 build: Updating dependencies
composer:
* mediawiki/mediawiki-codesniffer: 24.0.0 → 26.0.0

npm:
* lodash: 4.17.11 → 4.17.15
  * https://npmjs.com/advisories/1065
  * CVE-2019-10744

Additional changes:
* Enable eslint caching.
* Enable eslint's reportUnusedDisableDirectives.

Change-Id: I9fd2dfd545bc927c3e2049c34ad0a8b218a9011a
2019-08-03 04:41:58 +00:00
James D. Forrester 048be08fa5 build: Upgrade phan-taint-check-plugin from 1.5.x to 2.0.1
The method ReplaceTextUtils::link (which is already complicated because
it tries to support ancient MediaWiki) can perform different levels of
escaping depending on whether the HtmlArmor class exists. This is confusing
for taint-check and for humans, and can inevitably lead to errors. Plus
it's bad practice to have a method returning something with a variable
level of taintedness, especially if that depends on something ephemeral
like if a class exists or not.

Thus, the HtmlArmor part is removed, the text is escaped for Linker::link,
and the method now requires non-escaped HTML to be passed in.

Change-Id: I6e2783827580e3d470d316f1d3879679eb67aeda
2019-07-11 14:36:30 +00:00
libraryupgrader edeb9df910 build: Updating mediawiki/mediawiki-phan-config to 0.6.1
Change-Id: I4b08bef5257f973f5cfa90c5e5bc8080976a19e6
2019-06-10 10:33:36 +00:00
James D. Forrester 0b484df6aa build: Upgrade mediawiki/mediawiki-phan-config from 0.5.0 to 0.6.0
Change-Id: Ifbad8b383357ac649154403fb2c3f103159f792a
2019-05-19 18:08:19 -07:00
libraryupgrader 73843895f6 build: Updating mediawiki/mediawiki-phan-config to 0.5.0
Change-Id: I6132f22888b2e63087d9b47fbde2bf5872b87b5b
2019-03-10 22:24:02 -07:00
laasyasree bf89ab371d Upgrade ReplaceText extension to use newer phan
Bug: T216938
Change-Id: I30e9bd108e1196efd822525423ec94d9a1f6a318
2019-03-10 14:19:59 -07:00
libraryupgrader bf538064a8 build: Updating mediawiki/mediawiki-codesniffer to 24.0.0
The following sniffs are failing and were disabled:
* MediaWiki.Usage.DeprecatedGlobalVariables.Deprecated$wgContLang

Change-Id: I56fb225b2f158ed69fed80fe9a1a2066f407064f
2019-02-07 03:44:53 +00:00
libraryupgrader 3f662a5f81 build: Updating mediawiki/mediawiki-codesniffer to 23.0.0
Change-Id: If65a71ec9fa7daf98818d0d26d60aa726d78d9f5
2018-11-16 08:31:06 +00:00
libraryupgrader 0c69da23c1 build: Updating mediawiki/phan-taint-check-plugin to 1.5.0
Change-Id: I7c86b02dde7543af0c6f04644de5c5442209fce1
2018-09-08 05:22:29 +00:00
libraryupgrader 6adf0a0712 build: Updating mediawiki/mediawiki-codesniffer to 22.0.0
The following sniffs are failing and were disabled:
* Squiz.PHP.NonExecutableCode.Unreachable

Change-Id: Ifa593af5d3fb2aa38dea9f73e903a2fb27d1d6e6
2018-09-03 14:30:30 +00:00
libraryupgrader 0741f2a1f5 build: Updating mediawiki/phan-taint-check-plugin to 1.4.0
Change-Id: Idd5962254aef58bd4e13836e0fae29ee22a9a7fb
2018-09-01 13:56:30 +00:00
Kunal Mehta db5e21e1b9 Configure phan-taint-check-plugin
The plugin checks and flags potential security issues (XSS, SQLi, etc.)
using static analysis.

See <https://www.mediawiki.org/wiki/Phan-taint-check-plugin> for more
details.

Change-Id: Ibb8736ac41c05b4eed5655ee89627a8894df4dba
2018-08-20 21:46:31 -07:00
libraryupgrader aa0b1941ed build: Updating mediawiki/mediawiki-codesniffer to 21.0.0
Change-Id: Ib851d00e1c1a418f27f162d661c0a94a7790c86d
2018-07-27 16:30:33 +00:00
libraryupgrader 65abeaba88 build: Updating mediawiki/mediawiki-phan-config to 0.3.0
Change-Id: I9b35b2e447f3dfd5b9cf7f53e6524c4033d781f9
2018-06-08 07:41:53 +00:00
libraryupgrader 0b4b0c7cea build: Updating mediawiki/mediawiki-codesniffer to 20.0.0
Change-Id: I2202a99f3ff7c614e3cc9d17035119107a5fa73e
2018-05-26 06:08:39 +00:00
Kunal Mehta efd15f5058 Add phan configuration
Change-Id: I405d1d86e43c99fbaecf027461781bf57110421e
2018-04-27 01:17:04 +00:00
libraryupgrader dff64af71b build: Updating mediawiki/mediawiki-codesniffer to 18.0.0
Change-Id: I71746209a189b17b8dd21fdbd2ff1bfb6f0573c3
2018-04-14 05:49:56 +00:00
libraryupgrader 301b74fcd4 build: Updating mediawiki/mediawiki-codesniffer to 17.0.0
The following sniffs are failing and were disabled:
* MediaWiki.Commenting.LicenseComment.InvalidLicenseTag

The following sniffs now pass and were enabled:
* MediaWiki.Commenting.FunctionComment.MissingParamComment

Change-Id: Id1c06f59d040ed42e06ae1cfddb40dff6159475f
2018-03-29 05:30:54 +00:00
libraryupgrader 081eed2ed7 build: Updating jakub-onderka/php-parallel-lint to 1.0.0
Change-Id: Ie9cc801f5e2b99dc5ceb39f5d60d5884c4c874de
2018-03-10 03:33:56 +00:00
libraryupgrader 14775513b4 build: Updating mediawiki/mediawiki-codesniffer to 16.0.1
Change-Id: Id01671b0422ecd645b84825fd783fb9fed8271a2
2018-02-25 10:54:21 +00:00