Backdrop 1.17.4 Release checklist

[jenlampton]

Release scheduled for Nov 25th, 2020 5pm - 7pm PT

Pre-release tasks

• Merge commits @BWpanda
• Create the next bugfix milestone @jenlampton
• Move all unfinished issues to the next bugfix release milestone @jenlampton
• Draft Release notes @jenlampton
  • Include a short, descriptive summary of the release, for example:
    • Maintenance release for Backdrop CMS. This update contains bug fixes and usability improvements only.
  • Include a section containing Notes for updating
    • Note if any changes were made to files outside the core directory, for example:
      • No changes have been made to the .htaccess, robots.txt or default settings.php files in this release. Updating customized versions of those files is not necessary.
    • Note if updates (update.php) needs to be run, for example:
      • Use the text "The database update script does not need to be run."
      • or "It will be necessary to run the update script (located at /update.php) for this release."
  • Include changelog since last version
    • This changelog can be generated with drush rn [oldtag] [newtag], but you need to be on the minor version branch, for example, 1.15.x

• Draft Security Advisories @jenlampton

Release tasks

• Update bootstrap.inc with version number @BWpanda
• Tag for release, and push tag to GitHub @BWpanda
• Revert version number back @BWpanda
• Create release notes on GitHub, and publish release @jenlampton
• Update the front page download link on b.org @jenlampton
• Tweet that a new release is out @jenlampton
  • Use text ""

• Publish Security Advisories on b.org @jenlampton
• Mark the release node on b.org as a security release @jenlampton
• N/A Request a CVE

Post-release tasks

If this release does NOT accompany a minor release:

• Update Tugboat @BWpanda
• Update Pantheon @quicksketch
• Update Platform.sh @herbdool
• Update Composer @herbdool
• Update Docker @herbdool
• Update the Wikipedia articles @klonos
  • https://en.wikipedia.org/wiki/Backdrop_CMS
  • https://en.wikipedia.org/wiki/List_of_content_management_systems

• N/A Update the Security Advisory with CVE

Backdrop Website updates

• backdropcms.org @jenlampton
• api.backdropcms.org @jenlampton
• forum.backdropcms.org @jenlampton
• localize.backdropcms.org @jenlampton

See Also

• Checklist for 1.16.6 release

[jenlampton]

SA draft: https://backdropcms.org/security/backdrop-sa-core-2020-008

[jenlampton]

Release notes draft:

Security release for Backdrop CMS. This release fixes 1 security vulnerability:

• Backdrop core - Critical - Arbitrary PHP code execution - BACKDROP-SA-CORE-2020-008

Notes for updating

• No changes have been made to the .htaccess, robots.txt or default settings.php files in this release. Updating customized versions of those files is not necessary.
• The database update script does not need to be run.

Changes since 1.17.3

• BACKDROP-SA-CORE-2020-08 Archive Tar filename manipulation fix.
• Issue #4770: Replace double dashes with middot in Taxonomy fields.

[jenlampton]

https://github.com/backdrop/backdrop/releases/tag/1.17.4 is out

[jenlampton]

@herbdool I've marked some of the externals for you, but they are not urgent. Please enjoy time with your family this week/weekend and do those only when you have time :) (or, if you know you won't have time please let us know!)

[quicksketch]

Pantheon upstream updated.

Thanks @BWpanda for taking the lead on core committer tasks this release!