Summary of changes from March 9, 2018. to March 16, 2018.
| Codebase | Repository | {icon lock} | HEAD | Activity |
|----------|------------|--|------|----------|
| Phabricator | rP | | rP2fa904921 | 23 commits |
| Arcanist | rARC | | rARCdcd7ef66 | 0 commits |
| libphutil | rPHU | | rPHU1ad4249 | 2 commits |
| Instances (SAAS) | rSAAS | {icon lock} | rSAASd983b95 | 0 commits |
| Services (SAAS) | rSERVICES | {icon lock} | rSERVICES6b3fb8d | 0 commits |
| Core (SAAS) | rCORE | {icon lock} | rCORE5c1b3be | 5 commits |
- These changes were promoted to `stable`.
General
=======
There are no substantial user-facing changes in this release.
Security
========
- //No notes in this period.//
Migrations
==========
| Migration | Risk | Duration | Notes |
|-----------|------|----------|-------|
| 20180312.reviewers.01.options.sql | | 857 ms |
| 20180312.reviewers.02.optionsdefault.sql | | 682 ms |
//"Duration" is the duration for this install, and may not be representative.//
Upgrading / Compatibility
=========================
[{icon tint, color=sky}] This release includes new setup guidance which will instruct you to install "MySQL Native Driver" if you're using the older client driver.
In most cases, this means you're running some flavor of Ubuntu and installing `php5-mysql`. If so, resolve this by installing `php5-mysqlnd` instead. The latter package should install over the former package cleanly and fix the issue.
The install instructions previously recommended `php5-mysql` but should have recommended `php5-mysqlnd` instead. This has been corrected.
The major immediate advantage of this change is that queries can be subjected to an application timeout with the native driver. This is likely to enable better attacks on T12678 in the future, too.
Minor
=====
- [{icon tint, color=sky}] When a header in a remarkup document references an object like `T123`, the table of contents no longer generates improperly with a placeholder `x`.
- The "Desktop Only" notification setting now functions correctly.
- [{icon tint, color=sky}] If a revision has a build plan which isn't visible, "Build Status" now breaks less abruptly. This is a mitigation that will be refined in the future.
- [{icon tint, color=sky}] The `project.search` Conduit API method now supports querying by `slugs`.
- [{icon tint, color=sky}] Draft revisions can now be commandeered.
- [{icon tint, color=sky}] The "Mail Stamps" documentation now recommends quoting filters for Gmail.
- Corrected an issue where the "Visible To: Subscribers" policy wouldn't give access to everyone that it should if the subscribers included projects without direct membership (parent projects and milestones).
- [{icon tint, color=sky}] When a build has been restarted, Harbormaster now shows you past runs and allows you to review them. This element is currently very basic.
- Corrected an issue where animated GIFs with transparency could be composited incorrectly, causing all the frames to "pile up" on one another.
- [{icon tint, color=sky}] When you mention another user on a draft revision (or change subscribers), you're now prompted with a reminder that drafts don't send email or notifications.
- [{icon tint, color=sky}] Favicons are now composited dynamically and are customizable. This is almost entirely undocumented but T13103 has some hints about how it works.
Internal/Developer
==================
- The "Analyze Query Plans" button in the Services tab in DarkConsole now also collects stack traces for each query.
- Some of the query pathways for fetching project data now issue a less-egregious number of queries.
- [{icon tint, color=sky}] Fixed a Content-Security-Policy issue with a very old inline Javascript handler in DarkConsole.
- [{icon tint, color=sky}] Doorkeeper can now render both short and full references to external objects.
//The [{icon tint, color=sky}] icon indicates a change backed by support mana.//