Summary of changes from May 14, 2018 to May 18, 2018.
| Codebase | Repository | {icon lock} | HEAD | Activity |
|----------|------------|--|------|----------|
| Phabricator | rP | | rPde999af61 | 8 commits |
| Arcanist | rARC | | rARCd581c453 | 0 commits |
| libphutil | rPHU | | rPHU20eff1c | 0 commits |
| Instances (SAAS) | rSAAS | {icon lock} | rSAASfdd4cee | 0 commits |
| Services (SAAS) | rSERVICES | {icon lock} | rSERVICES0b2b879 | 0 commits |
| Core (SAAS) | rCORE | {icon lock} | rCOREd1ff2e4 | 0 commits |
- These changes were promoted to `stable`.
General
=======
- [{icon tint, color=sky}] In Differential, when you view a diff-of-diffs, files which have not been further modified in the updated diff are no longer shown. This is intended to make it easier to review changes which affect many files but tend to receive only small tweaks during review, like changes which refactor several dozen callsites of some method. See T13137 for some discussion.
Security
========
- (Via HackerOne) Fixed a bypassable MFA check on the user creation flow. See T13138 for some context and discussion.
- See T13143 for some largely theoretical discussion around attackers using very large changes to bypass security-focused Herald rules which examine file content.
Migrations
==========
- //No migrations in this period.//
Upgrading / Compatibility
=========================
- [{icon tint, color=sky}] The "enormous change" limit is now 250MB, down from 1GB. See T13142. See also T13143.
Minor
=====
- [{icon tint, color=sky}] Viewing a dashboard you don't have permission to see now raises a proper permission error rather than fataling.
- [{icon tint, color=sky}] Recent versions of Subversion add one extra legal but unusual space character to one hard-coded command on the wire protocol. We now handle this extra space properly. See T13140.
- [{icon tint, color=sky}] Changeset metadata can now be rebuilt with `bin/differential rebuild-changes`. This is mostly useful while developing Phabricator.
- Some database exceptions raise more helpful text during initial setup.
- Pushing large changes to servers with little available memory should now succeed more often.
//The [{icon tint, color=sky}] icon indicates a change backed by support mana.//