Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[5.1] Add update channel reset to Joomla Update Component #43717

Conversation

richard67
Copy link
Member

@richard67 richard67 commented Jun 28, 2024

Pull Request for Issue #43591 .

Summary of Changes

This pull request (PR) adds a function to the Joomla Update Component to automatically reset the update source (update channel) to "Default" in the component's options at the end of each CMS core update when it was set to "Joomla Next" before the update.

The reset is done for both the backend and the CLI core update.

The user is notified about the reset, and it is logged in the Joomla Update log file.

If an error happens with the reset, a warning is shown to the user and logged in the Joomla Update log file, but the update is still considered as successful if that was the only error during the update.

There is one difference between the update in the Administrator and the CLI:

  • The Administrator uses the updated code AFTER the update, so it does not need to have this PR applied before the update. The reset will happen when necessary with the updated code of the update model.
  • The CLI uses still the old code so the reset does not happen when updating to 5.1.2 with the CLI, but it will happen with future updates with the CLI when necessary.

The reason for the reset is that with the change to TUF-based updates in 5.1.0, the update channels are handled differently to how it was done before (and still is done with 4.4).

  • With the old XML update sites we could have a particular update several times in different channels so there was no need to switch back.
  • With TUF the update site URL is the same for the two update sources „Default“ and „Joomla Next“, and they are mapped to channels with JVERSION . '.x' for the "Default" and JVERSION+1 . '.x' for "Joomla Next".
    So when you update e.g. from 5.1 to a 6.0 nightly build, "Default" is mapped to channel "5.x" and "Joomla Next" is mapped to channel "6.x" before the update, but after the update "Default" is mapped to channel "6.x" and "Joomla Next" is mapped to channel "7.x".

And when your update source was "Joomla Next" before the update you can only have come from the previous major version. E.g. when you have updated to 5.1 with "Joomla Next" you for sure came from 4.4, and when you have updated to 6.0 with "Joomla Next" you for sure came from the latest 5.x (currently 5.2. but will be 5.4 at the end of the 5.x cycle).

Therefore we can reset from "Joomla Next" to "Default" after every update, there is no need for additional version checks.

The language string COM_JOOMLAUPDATE_VIEW_DEFAULT_UPDATES_INFO_NEXT is changed so it doesn't tell about updates for the current major version, which was wrong since the introduction of the TUF-based updates.

Testing Instructions

Test 1: Administrator Live Update - Successful Reset

  1. On a current 5.1 nightly build or the current 5.1-dev branch or a 5.1.1 without the changes from this PR applied, edit file administrator/components/com_joomlaupdate/src/Model/UpdateModel.php and change line 115 from
    $updateURL = 'https://update.joomla.org/cms/';
    to
    $updateURL = 'https://artifacts.joomla.org/drone/joomla/joomla-cms/5.1-dev/43717/downloads/77094/pr_list.xml';
    so the update site is the one created by Drone for this PR.
  2. Go to the Joomla Update Component's settings and change the update source to "Joomla Next".
  3. If no update is found yet, use the "Check for Updates" button.
  4. Perform the update.
  5. Check the result.
  6. Check the update source in Joomla Update Component's settings.

Test 2: Administrator Upload & Update - Successful Reset

  1. On a current 5.1 nightly build or the current 5.1-dev branch or a 5.1.1 without the changes from this PR applied, go to the Joomla Update Component's settings and change the update source to "Joomla Next".
  2. Update the CMS core by uploading in the Joomla Update Component the patched zip package created by Drone for this PR.
    You can download that package here: https://artifacts.joomla.org/drone/joomla/joomla-cms/5.1-dev/43717/downloads/77094/Joomla_5.1.2-rc2-dev+pr.43717-Development-Update_Package.zip
  3. Check the result.
  4. Check the update source in Joomla Update Component's settings.

Test 3: Administrator Live Update - Error on Reset

  1. On a current 5.1 nightly build or the current 5.1-dev branch or a 5.1.1 without the changes from this PR applied, edit file administrator/components/com_joomlaupdate/src/Model/UpdateModel.php and change line 115 from
    $updateURL = 'https://update.joomla.org/cms/';
    to
    $updateURL = 'https://test5.richard-fath.de/pr-43717-test-error_list.xml';
    This makes the update site point to a modified update package which provokes a database error at the reset of the update source. Besides that the package is equal to the one created by Drone for this PR.
  2. Go to the Joomla Update Component's settings and change the update source to "Joomla Next".
  3. If no update is found yet, use the "Check for Updates" button.
  4. Perform the update.
  5. Check the result.
  6. Check the update source in Joomla Update Component's settings.

Test 4: Administrator Upload & Update - Error on Reset

  1. On a current 5.1 nightly build or the current 5.1-dev branch or a 5.1.1 without the changes from this PR applied, go to the Joomla Update Component's settings and change the update source to "Joomla Next".
  2. Update the CMS core by uploading in the Joomla Update Component a modified update package which provokes a database error at the reset of the update source.
    You can download that package here: https://test5.richard-fath.de/Joomla_5.1.2-rc2-dev+pr.43717-Development-Update_Package_error.zip
  3. Check the result.
  4. Check the update source in Joomla Update Component's settings.

Test 5: Administrator Live Update - No Reset Needed

  1. On a current 5.1 nightly build or the current 5.1-dev branch or a 5.1.1 without the changes from this PR applied, edit file administrator/components/com_joomlaupdate/src/Model/UpdateModel.php and change line 115 from
    $updateURL = 'https://update.joomla.org/cms/';
    to
    $updateURL = 'https://artifacts.joomla.org/drone/joomla/joomla-cms/5.1-dev/43717/downloads/77094/pr_list.xml';
    so the update site is the one created by Drone for this PR.
  2. Go to the Joomla Update Component's settings and change the update source to "Default".
  3. If no update is found yet, use the "Check for Updates" button.
  4. Perform the update.
  5. Check the result.
  6. Check the update source in Joomla Update Component's settings.

Repeat the test but this time change the update source to "Custom URL" in step 2, and use the custom URL created by Drone for this PR: https://artifacts.joomla.org/drone/joomla/joomla-cms/5.1-dev/43717/downloads/77094/pr_list.xml

The result should be the same.

Test 6: Administrator Upload & Update - No Reset Needed

  1. On a current 5.1 nightly build or the current 5.1-dev branch or a 5.1.1 without the changes from this PR applied, go to the Joomla Update Component's settings and change the update source to "Default".
  2. Update the CMS core by uploading in the Joomla Update Component the patched zip package created by Drone for this PR.
    You can download that package here: https://artifacts.joomla.org/drone/joomla/joomla-cms/5.1-dev/43717/downloads/77094/Joomla_5.1.2-rc2-dev+pr.43717-Development-Update_Package.zip
  3. Check the result.
  4. Check the update source in Joomla Update Component's settings.

Repeat the test but this time change the update source to "Custom URL" in step 1, and use the custom URL created by Drone for this PR: https://artifacts.joomla.org/drone/joomla/joomla-cms/5.1-dev/43717/downloads/77094/pr_list.xml

The result should be the same.

Test 7: CLI - Successful Reset

  1. On a current 5.1 nightly build or the current 5.1-dev branch or a 5.1.1, apply the changes from this PR.
  2. Edit file administrator/components/com_joomlaupdate/src/Model/UpdateModel.php and change line 115 from
    $updateURL = 'https://update.joomla.org/cms/';
    to
    $updateURL = 'https://artifacts.joomla.org/drone/joomla/joomla-cms/5.1-dev/43717/downloads/77094/pr_list.xml';
    so the update site is the one created by Drone for this PR.
  3. If you have applied this PR by using the custom update URL or the patched package created by Drone for this PR, you have to edit file libraries/src/Version.php and change line 69 from
    public const EXTRA_VERSION = 'rc2-dev+pr.43717';
    to
    public const EXTRA_VERSION = 'rc2-dev';
    so that an update will be found.
    If you have used Patchtester to apply the PR you don't need to do that.
  4. Go to the Joomla Update Component's settings and change the update source to "Joomla Next".
  5. If no update is found yet, use the "Check for Updates" button.
  6. Perform the update using the CLI:
    php ./cli/joomla.php core:update`
  7. Check the result.
  8. Check the update source in Joomla Update Component's settings.

Test 8: CLI - Error on Reset

  1. On a current 5.1 nightly build or the current 5.1-dev branch or a 5.1.1, apply the changes from this PR.
  2. Edit file administrator/components/com_joomlaupdate/src/Model/UpdateModel.php and change line 115 from
    $updateURL = 'https://update.joomla.org/cms/';
    to
    $updateURL = 'https://test5.richard-fath.de/pr-43717-test-error_list.xml';
    This makes the update site point to a modified update package which provokes a database error at the reset of the update source. Besides that the package is equal to the one created by Drone for this PR.
  3. In the same file, change line 2055 from
    ->set($db->quoteName('params') . ' = :params')
    to
    ->set($db->quoteName('paramsx') . ' = :params')
    This will provoke an SQL error when trying to reset the update source.
  4. If you have applied this PR by using the custom update URL or the patched package created by Drone for this PR, you have to edit file libraries/src/Version.php and change line 69 from
    public const EXTRA_VERSION = 'rc2-dev+pr.43717';
    to
    public const EXTRA_VERSION = 'rc2-dev';
    so that an update will be found.
    If you have used Patchtester to apply the PR you don't need to do that.
  5. Go to the Joomla Update Component's settings and change the update source to "Joomla Next".
  6. If no update is found yet, use the "Check for Updates" button.
  7. Perform the update using the CLI:
    php ./cli/joomla.php core:update
  8. Check the result.
  9. Check the update source in Joomla Update Component's settings.

Test 9: CLI - No Reset Needed

  1. On a current 5.1 nightly build or the current 5.1-dev branch or a 5.1.1, apply the changes from this PR.
  2. Edit file administrator/components/com_joomlaupdate/src/Model/UpdateModel.php and change line 115 from
    $updateURL = 'https://update.joomla.org/cms/';
    to
    $updateURL = 'https://artifacts.joomla.org/drone/joomla/joomla-cms/5.1-dev/43717/downloads/77094/pr_list.xml';
    so the update site is the one created by Drone for this PR.
  3. If you have applied this PR by using the custom update URL or the patched package created by Drone for this PR, you have to edit file libraries/src/Version.php and change line 69 from
    public const EXTRA_VERSION = 'rc2-dev+pr.43717';
    to
    public const EXTRA_VERSION = 'rc2-dev';
    so that an update will be found.
    If you have used Patchtester to apply the PR you don't need to do that.
  4. Go to the Joomla Update Component's settings and change the update source to "Default".
  5. If no update is found yet, use the "Check for Updates" button.
  6. Perform the update using the CLI:
    php ./cli/joomla.php core:update
  7. Check the result.
  8. Check the update source in Joomla Update Component's settings.

Repeat the test but this time change the update source to "Custom URL" in step 4, and use the custom URL created by Drone for this PR: https://artifacts.joomla.org/drone/joomla/joomla-cms/5.1-dev/43717/downloads/77094/pr_list.xml

The result should be the same.

Test 10: Check information on "Joomla Next" update channel

With the changes from this PR applied, check the text shown about the update channel in the update component.

Actual result BEFORE applying this Pull Request

When you are still on the "Joomla Next" update channel after an update from 4.4 to 5.1, there will not be any update found for the CMS core until 6.0.0-alpha1 will be released, and then only updates to 6.0 releases will be found, so you will miss any further updates for 5.1 until that time has come.

There is no notification about that and no automatic reset after the update.

When being on the "Joomla Next" update source, the information shown about the update channel contains wrong information (see red underlined part):
update-channel-next-text-wrong

Expected result AFTER applying this Pull Request

Tests 1 and 2: Administrator - Successful Reset

When having the update source (update channel) set to "Joomla Next" in the Joomla Update Component's options before that update, the update source is rest to "Default" at the end of the update, and a success message is shown about that:
test-core-update-reset-ok

The Joomla Update log administrator/logs/joomla_update.php contains an information log about the reset:

2024-07-06T12:46:46+00:00	INFO 192.168.98.1	update	Deleting removed files and folders.
2024-07-06T12:46:51+00:00	INFO 192.168.98.1	update	The update channel has been reset from "Joomla Next" to "Default".
2024-07-06T12:46:51+00:00	INFO 192.168.98.1	update	Cleaning up after installation.
2024-07-06T12:46:52+00:00	INFO 192.168.98.1	update	Update to version 5.1.2-rc2-dev+pr.43717 is complete.

Tests 3 and 4: Administrator - Error on Reset

When having the update source (update channel) set to "Joomla Next" in the Joomla Update Component's options before that update and an error happens with reset of the update source, e.g. due to a database problem, a warning message is shown at the top, telling the user to manually reset the update source, but if there was no other error the update is still shown as successful:
test-core-update-reset-error

The Joomla Update log administrator/logs/joomla_update.php contains a warning log about the error details and another one about the failed reset:

2024-07-06T13:09:39+00:00	INFO 192.168.98.1	update	Deleting removed files and folders.
2024-07-06T13:09:46+00:00	WARNING 192.168.98.1	update	An error has occurred while running "resetUpdateSource". Code: 1054. Message: Unknown column 'paramsx' in 'field list'.
2024-07-06T13:09:46+00:00	WARNING 192.168.98.1	update	Failed to reset the update channel from "Joomla Next" to "Default". Please change it in the Joomla Update Component's options so you don't miss future updates.
2024-07-06T13:09:47+00:00	INFO 192.168.98.1	update	Cleaning up after installation.
2024-07-06T13:09:47+00:00	INFO 192.168.98.1	update	Update to version 5.1.2-rc2-dev+pr.43717 is complete.

Tests 5 and 6: Administrator - No Reset Needed

When the update source is not "Joomla Next" so it is "Default" or "Custom URL", the update source is not changed, and the update of the CMS core works as it does without this PR:
test-core-update-no-reset

The Joomla Update log administrator/logs/joomla_update.php does not show anything about reset of the update source:

2024-07-06T12:49:08+00:00	INFO 192.168.98.1	update	Deleting removed files and folders.
2024-07-06T12:49:13+00:00	INFO 192.168.98.1	update	Cleaning up after installation.
2024-07-06T12:49:13+00:00	INFO 192.168.98.1	update	Update to version 5.1.2-rc2-dev+pr.43717 is complete.

Test 7: CLI - Successful Reset

When having the update source (update channel) set to "Joomla Next" in the Joomla Update Component's options before that update, the update source is rest to "Default" at the end of the update, and a success message is shown about that:
test-core-update-reset-ok-cli

The Joomla Update log administrator/logs/joomla_update.php contains an information log about the reset:

2024-07-06T13:58:54+00:00	INFO -	update	Deleting removed files and folders.
2024-07-06T13:58:55+00:00	INFO -	update	The update channel has been reset from "Joomla Next" to "Default".

Test 8: CLI - Error on Reset

When having the update source (update channel) set to "Joomla Next" in the Joomla Update Component's options before that update and an error happens with reset of the update source, e.g. due to a database problem, a warning message is shown, telling the user to manually reset the update source, but if there was no other error the update is still shown as successful:
test-core-update-reset-error-cli
The Joomla Update log administrator/logs/joomla_update.php contains a warning log about the error details and another one about the failed reset:

2024-07-06T14:04:42+00:00	INFO -	update	Deleting removed files and folders.
2024-07-06T14:04:43+00:00	WARNING -	update	An error has occurred while running "resetUpdateSource". Code: 1054. Message: Unknown column 'paramsx' in 'field list'.
2024-07-06T14:04:43+00:00	WARNING -	update	Failed to reset the update channel from "Joomla Next" to "Default". Please change it in the Joomla Update Component's options so you don't miss future updates.

Test 9: CLI - No Reset Needed

When the update source is not "Joomla Next" so it is "Default" or "Custom URL", the update source is not changed, and the update of the CMS core works as it does without this PR:
test-core-update-no-reset-cli

The Joomla Update log administrator/logs/joomla_update.php does not show anything about reset of the update source:

2024-07-06T14:02:59+00:00	INFO -	update	Deleting removed files and folders.

Test 10: Check information on "Joomla Next" update channel

update-channel-next-text-ok

Link to documentations

Please select:

  • No documentation changes for docs.joomla.org needed

  • No documentation changes for manual.joomla.org needed

@brianteeman
Copy link
Contributor

If we can offer the updates in the same way as before then do we really need to even update the update component?

@richard67
Copy link
Member Author

If we can offer the updates in the same way as before then do we really need to even update the update component?

@brianteeman Like I wrote in the description:

The reset after each update provided with part 1 of the other PR or with this PR here makes still sense, except if we want to provide updates on both channels in parallel also in the future and not only this one time to fix the issue.

@brianteeman
Copy link
Contributor

The reset after each update provided with part 1 of the other PR or with this PR here makes still sense, except if we want to provide updates on both channels in parallel also in the future and not only this one time to fix the issue.

that doesnt answer my question. never mind. i obviously speak a different language to everyone else and cannot express myself

@richard67
Copy link
Member Author

@brianteeman It does answer your question. When updates will always be provided on both channels then this PR is not necessary. But I doubt that will be the case, I think it will be only done this time. Anyway that’s not my decision.

@richard67
Copy link
Member Author

P.S. And as described, this PR here doesn’t include the part from the other PR which requires the extra component update.

@brianteeman
Copy link
Contributor

@brianteeman It does answer your question. When updates will always be provided on both channels then this PR is not necessary. But I doubt that will be the case, I think it will be only done this time. Anyway that’s not my decision.

Why not - it has been that way for ages and if it has now been established that it can be done that way again why change. I just dont see the reason for the change.

I am on holiday now so cant check but what happens when you update from the cli

@richard67
Copy link
Member Author

@brianteeman Sorry, you were right, I misunderstood your question first.

Why not - it has been that way for ages and if it has now been established that it can be done that way again why change. I just dont see the reason for the change.

Yes, that would be the best. But it might require some additional work for those who deploy the updates to TUF - I am not involved in that so I don’t know if that is the way to go.

I am on holiday now so cant check but what happens when you update from the cli

I haven’t checked that either so it would be good if someone could check.

@brianteeman
Copy link
Contributor

I am having some issues testing this but so far I have observed that the error page is
administrator/index.php?option=com_joomlaupdate&view=joomlaupdate&layout=complete&tmpl=component

This produces a "naked" page
image

Should the error page url not be
administrator/index.php?option=com_joomlaupdate&view=joomlaupdate&layout=complete

So that you get a fully styled page
image

@richard67
Copy link
Member Author

@brianteeman That in case of error the component layout is used is nothing new from my PR. It was once introduced by Fedir when he improved error reporting and logging of the update component.

@HLeithner
Copy link
Member

to test the update with the update server please change the 115 line in
administrator/components/com_joomlaupdate/src/Model/UpdateModel.php
from
$updateURL = 'https://update.joomla.org/cms/';
to
$updateURL = 'https://update.joomla.org/alpha/';

then change the channel in the update component options form stable to next

(with stable and next channel) you should get version 5.1.2 stable offered for version 5.1.0 and 5.1.1

this might only work today till the original update server does an timestamp update and the updater might refuse an outdated / different update information depending on the status of the data cached.

@HLeithner
Copy link
Member

I have tested this item ✅ successfully on 45e1091

works with tuf alpha update from 5.1.1


This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/43717.

@brianteeman
Copy link
Contributor

I have tested this item 🔴 unsuccessfully on 45e1091


This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/43717.

@brianteeman
Copy link
Contributor

I set the channel to Next
I edited the file as per @HLeithner instructions
I performed the update.

image

@HLeithner
Copy link
Member

which version was the installed one?

@brianteeman
Copy link
Contributor

which version was the installed one?

2024-07-02T12:27:13+00:00	INFO 127.0.0.1	update	Test logging
2024-07-02T12:27:13+00:00	INFO 127.0.0.1	update	Update started by user admin (132). Old version is 5.1.2-dev+pr.43717.
2024-07-02T12:27:15+00:00	INFO 127.0.0.1	update	Downloading update file from https://artifacts.joomla.org/drone/joomla/joomla-cms/5.1-dev/43717/downloads/76941/Joomla_5.1.2-dev+pr.43717-Development-Update_Package.zip.
2024-07-02T12:27:21+00:00	INFO 127.0.0.1	update	File Joomla_5.1.2-dev+pr.43717-Development-Update_Package.zip downloaded.
2024-07-02T12:27:21+00:00	INFO 127.0.0.1	update	Starting installation of new version.
2024-07-02T12:27:39+00:00	INFO 127.0.0.1	update	Finalising installation.
2024-07-02T12:27:39+00:00	INFO 127.0.0.1	update	Start of SQL updates.
2024-07-02T12:27:39+00:00	INFO 127.0.0.1	update	The current database version (schema) is 5.1.1-2024-04-18.
2024-07-02T12:27:39+00:00	INFO 127.0.0.1	update	End of SQL updates.
2024-07-02T12:27:39+00:00	INFO 127.0.0.1	update	Uninstalling extensions
2024-07-02T12:27:39+00:00	INFO 127.0.0.1	update	Deleting removed files and folders.
2024-07-02T12:27:40+00:00	INFO 127.0.0.1	update	Cleaning up after installation.
2024-07-02T12:27:40+00:00	INFO 127.0.0.1	update	Update to version 5.1.2-dev+pr.43717 is complete.

@HLeithner
Copy link
Member

strange are you sure this wasn't an error message form before?

@brianteeman
Copy link
Contributor

I do however ask again that as you have demonstrated that the Joomla Next channel can show the next joomla 5 release why do we need to have this PR to change to the Stable channel AND if production insists that this change must be done then it is incomplete as the language string below will now give incorrect information

COM_JOOMLAUPDATE_VIEW_DEFAULT_UPDATES_INFO_NEXT="You are on the "%s" update channel. Through this channel you'll receive notifications for all updates of the current Joomla release (5.x) and you will also be notified when the future major release (6.x) will be available. Before upgrading to 6.x you'll need to assess its compatibility with your environment."

@richard67
Copy link
Member Author

I will provide an update later. Changing to draft meanwhile.

@richard67 richard67 marked this pull request as ready for review July 6, 2024 16:02
@richard67
Copy link
Member Author

Ready for testing again.

@brianteeman
Copy link
Contributor

Without an additional change to COM_JOOMLAUPDATE_VIEW_DEFAULT_UPDATES_INFO_NEXT this PR is incomplete

@richard67
Copy link
Member Author

Without an additional change to COM_JOOMLAUPDATE_VIEW_DEFAULT_UPDATES_INFO_NEXT this PR is incomplete

@brianteeman Done. Wrong information removed from the language string.

@richard67
Copy link
Member Author

richard67 commented Jul 6, 2024

Hmm, in the backend the warning which is shown when the reset fails has the right colour, but it maybe has the wrong icon (check mark).

@brianteeman Should it be something else? Do you know which one?

Update: I just see when there is an other error it uses the same check mark icon, class="icon-check-circle":
https://github.com/joomla/joomla-cms/pull/43717/files#diff-04325b3920b8a824d5085b5e5dd8e85cc8e7e5110355829ca178c417e48b860cR44
... so if that should be fixed it might be something for another PR.

Copy link
Contributor

@tecpromotion tecpromotion left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

That sounded very clumsy.
@brianteeman can you please take another look at it.Thank you.

@richard67
Copy link
Member Author

@brianteeman Could you check @tecpromotion 's suggested change on the language string? Would be good to have a native speaker instead of 2 Germans 😄

@brianteeman
Copy link
Contributor

@brianteeman Could you check @tecpromotion 's suggested change on the language string? Would be good to have a native speaker instead of 2 Germans 😄

done

@richard67
Copy link
Member Author

Thanks

@brianteeman
Copy link
Contributor

The more I look at this the more I see it as the wrong thing to do.

@richard67
Copy link
Member Author

richard67 commented Jul 7, 2024

The more I look at this the more I see it as the wrong thing to do.

@brianteeman I understand your point.

To all readers: Personally I would also prefer if things could work like in past before the change to TUF so it would not need this PR at all.

I was asked by other maintainers if I can make a pull request like this one now, and that's what I did. But I'm not the one to decide which way it should go.

@brianteeman
Copy link
Contributor

The more I look at this the more I see it as the wrong thing to do.

@brianteeman I understand your point.

To all readers: Personally I would also prefer if things could work like in past before the change to TUF so it would not need this PR at all.

I was asked by other maintainers if I can make a pull request like this one now, and that's what I did. But I'm not the one to decide which way it should go.

Surprised the maintainers didnt also ask the people who forced these changes to also look at fixing it.

@richard67
Copy link
Member Author

Surprised the maintainers didnt also ask the people who forced these changes to also look at fixing it.

@brianteeman Sometimes people are busy with private life or job and don't have enough time when needed, so I stepped in to help.

@brianteeman
Copy link
Contributor

I need to write more clearly.

This is a major issue that has a serious impact. There is no urgent need to make a release so better to spend the time to make the correct fix than settle on something we both agree is not an ideal solution.

@LadySolveig
Copy link
Contributor

Thank you @richard67 for your work!
For me, additional security through the Next Channel only makes sense if it is a conscious decision that I make as a user before the update and not months before and possibly forgotten again by the next major update. This PR ensures that no permanent workaround of the TUF updates is necessary and provides additional security for the end user.
Improvements are always welcome if they still need to be made.

@LadySolveig LadySolveig merged commit b6f4dfd into joomla:5.1-dev Jul 7, 2024
3 checks passed
@LadySolveig
Copy link
Contributor

Thank you @richard67 and also for suggestions, review and testing to all involved!

@brianteeman
Copy link
Contributor

I have no idea at all what you are referring to when you say security

@brianteeman
Copy link
Contributor

Why was this merged without a single successful test

image

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Language Change This is for Translators PR-5.1-dev
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

8 participants