Signed-off-by: Christian Heusel <christian@heusel.eu>

Change this to the noreply mail but also add a wiki tag to it so it can
more easily be filtered in mail programs.

Fixes #563



Signed-off-by: Christian Heusel <christian@heusel.eu>

Up until now the captcha has depended on the exact output of the pacman
version command which could lead to multiple problematic scenarios:

    a) User uses testing repos (user pacman newer)
    b) Server is not instantly updated (user pacman newer)
    c) User system is not updated (user pacman older)

Circumvent this problem by switching to a time based captcha instead.

Signed-off-by: Christian Heusel <christian@heusel.eu>

Signed-off-by: Christian Heusel <christian@heusel.eu>

Jakub Klinkovský authored 1 year ago and Christian Heusel committed 1 year ago

Related to #557

Jakub Klinkovský authored 1 year ago and Christian Heusel committed 1 year ago

- The /index.php? rule disallows all URLs with this prefix, so using
  longer prefixes does not make sense.
- Allow indexing of the Help: namespace which contains relevant text.
- Keep the intention of disallowing special namespaces, including the
  File: alias for Image: and using the /title/ path and colon separator
  for the namespace prefix.

https://phabricator.wikimedia.org/T353985



Signed-off-by: Christian Heusel <christian@heusel.eu>

This also switches from Extension:NativeSVGHandler to the now builtin
$wgSVGNativeRendering which was introduced in version 1.41.0.

Signed-off-by: Christian Heusel <christian@heusel.eu>

Trusted Users are now called Package Maintainers.
See the discussion in https://wiki.archlinux.org/title/ArchWiki_talk:Requests#Trusted_User_name_change

Once this is deployed, the users need to be migrated to the new group
by running:

    php ./maintenance/migrateUserGroup.php archtu archpackager

Related to #533

This includes several minor ui fixes.

Signed-off-by: Christian Heusel <christian@heusel.eu>

- fix crash when $wgFooterIcons.poweredby is no set
- account for Extension:Renameuser being bundeled with 1.40
- enable the nosniff header for /images
- switch to running maintenance scripts via run.php

Signed-off-by: Christian Heusel <christian@heusel.eu>

Adding the extension was discussed here:
https://wiki.archlinux.org/index.php?title=ArchWiki_talk:Maintenance_Team&oldid=788677#Replace_PNG_images_with_SVG



Signed-off-by: Christian Heusel <christian@heusel.eu>

This also enables the Extension:VisualEditor on user pages.

Addition was positively discussed here:
https://wiki.archlinux.org/index.php?oldid=788677#Enable_the_DiscussionTools_extension



Signed-off-by: Christian Heusel <christian@heusel.eu>

this has been positively discussed here:
https://wiki.archlinux.org/index.php?oldid=788677#Enable_the_Thanks_extension



Signed-off-by: Christian Heusel <christian@heusel.eu>

Add "noqa no-changed-when" tags to handlers using the command module.
Perhaps it is wrong of ansible-lint to flag these, since handlers are
not the best place to have conditional execution.

The daemon_reload is specific to systemd and produce a warning in
ansible-lint

Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>

This fixes the unexpanded magic words in mails that we sometimes see.

Enable $wgVectorLanguageInMainPageHeader, so that the main page is consistent with other pages.
See https://www.mediawiki.org/wiki/Skin:Vector/2022#$wgVectorLanguageInMainPageHeader.

Compare: https://wiki.archlinux.org/?languageinmainpageheader=1 vs https://wiki.archlinux.org/?languageinmainpageheader=0

Discussed in https://wiki.archlinux.org/title/MediaWiki_talk:Common.css#Main_page_columns_and_Vector_2022_language_links.

Not sure why this is needed but whatever. 

https://github.com/ansible/schemas/discussions/227

Fixes: 26f289b7 ("Capitalize the first letter of all task names")

ansible-lint 6.5.0 complains about:

  name: All names should start with an
        uppercase letter. (name[casing])

This allows to retain all default hardening options that memcached@.service has.

* Remove www. from archlinux.org,
* Use HTTPS for the license link,
* Update $wgGitRepositoryViewers,
* Update comments referencing paths and URLs.

Adding/removing pages from the whitelist when using the Vector skin requires the write API now.
Without this, regular users get this error:

    You're not allowed to edit this wiki through the API.

Jakub Klinkovský authored 2 years ago and Kristian Klausen committed 2 years ago

- $wgScriptExtension was removed in MW 1.31
- $wgDBmysql5 was removed in MW 1.33
- $wgShowIPinHeader was removed in MW 1.27
- $wgUseETag was removed in MW 1.28
- $wgEnableWriteAPI was removed in MW 1.32
- $wgShowSQLErrors was removed in MW 1.37

Jakub Klinkovský authored 2 years ago and Kristian Klausen committed 2 years ago

$wgFragmentMode = [ 'html5', 'legacy' ]; is the default value since
MediaWiki 1.37:
https://www.mediawiki.org/wiki/Special:MyLanguage/Manual:$wgFragmentMode

Jakub Klinkovský authored 2 years ago and Kristian Klausen committed 2 years ago

These were fixed in MediaWiki 1.38

Jakub Klinkovský authored 2 years ago and Kristian Klausen committed 2 years ago

Also updated some settings:

- The $wgShellLocale setting was removed from MediaWiki, see
  https://www.mediawiki.org/wiki/Special:MyLanguage/MediaWiki_1.38
- The "new" Vector skin got a name "vector-2022" and can be set simply
  by $wgDefaultSkin = 'vector-2022'; see
  https://www.mediawiki.org/wiki/Skin:Vector/2022#Note_about_1.38_release

This restores public access to recent changes, page history etc. which
was disabled in September 2019 due to misbehaving crawlers - see commits
https://github.com/archlinux/archwiki/commit/f2c518d3df94e9ad6898fdd03cac982902f8ac36
and https://github.com/archlinux/archwiki/commit/8595e8d66141e608db794f1deef3e52cb36e5e78.

Let's hope that our robots.txt has been improved since then and the
server load will not increase much. If it proves to be still a problem,
this commit can be reverted and we will figure out better solution.

These are used to signal the start of the document in a stream of many
documents. As Ansible only supports one YAML document per file this is
unnecessary. About a third of our YAML documents already lacked these.

Tweaking access to the abuse filter[1].

[1] https://github.com/archlinux/archwiki/pull/52