https://redmine.documentfoundation.org/https://redmine.documentfoundation.org/favicon.ico?16960560022019-04-01T22:11:33ZThe Document Foundation RedmineInfrastructure - Task #2852: Upgrade Gerrit to recent versionhttps://redmine.documentfoundation.org/issues/2852?journal_id=165202019-04-01T22:11:33ZGuilhem Moulinguilhem@libreoffice.org
<ul></ul><p>David Ostrovsky wrote:</p>
<blockquote>
<p>New Gerrit versions has fixed critical bugs […]</p>
</blockquote>
<p>Critical bugs that haven't been backported to other <em>supported</em> branches?</p> Infrastructure - Task #2852: Upgrade Gerrit to recent versionhttps://redmine.documentfoundation.org/issues/2852?journal_id=165212019-04-02T05:41:36ZDavid Ostrovskyd.ostrovsky@gmx.de
<ul></ul><p>Guilhem Moulin wrote:</p>
<blockquote>
<p>David Ostrovsky wrote:</p>
<blockquote>
<p>New Gerrit versions has fixed critical bugs […]</p>
</blockquote>
<p>Critical bugs that haven't been backported to other <em>supported</em> branches?</p>
</blockquote>
<p>Let's call it just bugs. Only severe problems and major security vulnerabilities are backported to very old stable branches. Also Gerrit transitive dependencies: JGit, Apache SSHD, Eclipse Jetty and Apache Lucene only updated in recent versions and those updates are not back ported.</p>
<p>David Ostrovsky wrote:</p>
<blockquote>
<p>[...] and introduced many new features, like new backend NoteDb (replacement of ReviewDb), new Polymer based PolyGerrit UI (replacement of GWT UI) and new build tool: Bazel (replacement of Buck).</p>
</blockquote>
<p>I would also add that PolyGerrit feature: "Diff on single page for all changed files" was always requested by so many users.</p> Infrastructure - Task #2852: Upgrade Gerrit to recent versionhttps://redmine.documentfoundation.org/issues/2852?journal_id=167992019-05-08T13:49:05ZFlorian Effenbergerfloeff@documentfoundation.org
<ul></ul><p>IIRC, there was an upgrade planned in the near future, also because of a required plugin<br />Guilhem, can you share the details on what's planned and when?<br />There's some urgent things in between, but sharing upfront here what's planned and when is a good idea, I think!</p> Infrastructure - Task #2852: Upgrade Gerrit to recent versionhttps://redmine.documentfoundation.org/issues/2852?journal_id=168212019-05-09T02:23:16ZGuilhem Moulinguilhem@libreoffice.org
<ul></ul><p>Florian Effenberger wrote:</p>
<blockquote>
<p>IIRC, there was an upgrade planned in the near future, also because of a required plugin<br />Guilhem, can you share the details on what's planned and when?</p>
</blockquote>
<p>Would have been good (meaning saved a few mails) to have the request here rather than on hostmaster then :-)</p>
<p>Mike and Olivier would like a 2.16 <strong>test</strong> instance for the CodeMirror plugin. While I was able to build the plugin against 2.13, I was unable to make it work, I guess to changes in the JS API. I'll deploy a 2.16 <strong>test</strong> instance on vm178 along with our (2.13) <strong>stage</strong> instance. Upgrading the production instance to >2.13, given the sweat we have throw at upgrade paths, is unlikely to happen in 2019. (This was mentioned to Mike, in the infra call minutes, and on IRC several times already.) Unless an EOL is announced for 2.13, that is.</p> Infrastructure - Task #2852: Upgrade Gerrit to recent versionhttps://redmine.documentfoundation.org/issues/2852?journal_id=168322019-05-09T08:45:59ZFlorian Effenbergerfloeff@documentfoundation.org
<ul></ul><blockquote>
<p>Mike and Olivier would like a 2.16 <strong>test</strong> instance for the CodeMirror <br />plugin. While I was able to build the plugin against 2.13, I was unable <br />to make it work, I guess to changes in the JS API. I'll deploy a 2.16 <br /><strong>test</strong> instance on vm178 along with our (2.13) <strong>stage</strong> instance. <br />Upgrading the production instance to >2.13, given the sweat we have <br />throw at upgrade paths, is unlikely to happen in 2019. (This was <br />mentioned to Mike, in the infra call minutes, and on IRC several times <br />already.) Unless an EOL is announced for 2.13, that is.</p>
</blockquote>
<p>Sorry for the confusion then, seems I got this one wrong. What we should <br />discuss then however is when the CodeMirror plugin should go live, if <br />that's bound to 2.16 - IMHO the plan was to have that in 2019 too, but <br />let's talk this through in the next infra call or team meeting, before I <br />do more wild guesses here that end up wrong ;-)</p> Infrastructure - Task #2852: Upgrade Gerrit to recent versionhttps://redmine.documentfoundation.org/issues/2852?journal_id=172362019-07-25T12:45:47ZFlorian Effenbergerfloeff@documentfoundation.org
<ul><li><strong>Target version</strong> set to <i>Qlater</i></li></ul> Infrastructure - Task #2852: Upgrade Gerrit to recent versionhttps://redmine.documentfoundation.org/issues/2852?journal_id=174732019-09-05T05:53:26ZDavid Ostrovskyd.ostrovsky@gmx.de
<ul></ul><p>FWIW, OpenStack infrastructure members attended recent Gerrit<br />Hackathon and User Conference and here their report: [1],[2],<br />also related to the upgrade sequence from:<br />2.13 -> 2.14 -> 2.15 -> 2.16 -> Migration from ReviewDb to NoteDb happens here -> 3.0.</p>
<p>[1] <a class="external" href="https://groups.google.com/d/topic/repo-discuss/Hqe2S6-Ex_E/discussion">https://groups.google.com/d/topic/repo-discuss/Hqe2S6-Ex_E/discussion</a><br />[2] <a class="external" href="http://lists.openstack.org/pipermail/openstack-infra/2019-September/006475.html">http://lists.openstack.org/pipermail/openstack-infra/2019-September/006475.html</a></p> Infrastructure - Task #2852: Upgrade Gerrit to recent versionhttps://redmine.documentfoundation.org/issues/2852?journal_id=174962019-09-05T17:00:25ZGuilhem Moulinguilhem@libreoffice.org
<ul></ul><p>Interesting timing, I tested that same upgrade path (up to 2.16) earlier this week on the stage instance. Unsurprisingly the fact that accounts are now (since 2.15) stored in NoteDb breaks our user management scripts… We can of course change the script to make it push to All-Users's ‘refs/meta/external-ids’, but that's not so smooth because the migration didn't resolve conflicts nor collisions. MediaWiki folks stumbled upon the same problem: <a class="external" href="https://phabricator.wikimedia.org/T197192">https://phabricator.wikimedia.org/T197192</a> .</p>
<p>At this point I'd say that it makes sense to sync the upgrade path with the migration to TDF's IdP for Single-Sign On authentication, and deprecate all other authentication methods to Gerrit's web frontend. On our 2.16 stage I forked your OAuth2 plugin to make it work with our provider (LemonLDAP::NG — like for other IdP it's only a matter of choosing the right paths to the various endpoints and then map the JSON object to an account).</p> Infrastructure - Task #2852: Upgrade Gerrit to recent versionhttps://redmine.documentfoundation.org/issues/2852?journal_id=174972019-09-06T07:09:50ZDavid Ostrovskyd.ostrovsky@gmx.de
<ul></ul><blockquote>
<p>At this point I'd say that it makes sense to sync the upgrade path with the migration to TDF's IdP for Single-Sign On authentication, and deprecate all other authentication methods to Gerrit's web frontend.</p>
</blockquote>
<p>I totally agree on this, and expected that gerrit is going to be moved to LDAP auth scheme, before upgrading to 2.15. I even had a discussion with migration steps with Norbert years ago, from OpenID/OAuth to LDAP.</p>
<blockquote>
<p>On our 2.16 stage I forked your OAuth2 plugin to make it work with our provider (LemonLDAP::NG — like for other IdP it's only a matter of choosing the right paths to the various endpoints and then map the JSON object to an account).</p>
</blockquote>
<p>I would happily review your changes and would merge them upstream. Could you please upload your changes to oauth-plugin project in gerrit-review: [1]?</p>
<p>Another option would be to use: saml plugin, that I recently moved to gerrit-review and adapted to work against most recent gerrit versions: [2]. With saml plugin the real SSO should work out of the box and some enterprise customers already successful use this plugin in production.</p>
<p>[1] <a class="external" href="https://gerrit-review.googlesource.com/admin/repos/plugins/oauth">https://gerrit-review.googlesource.com/admin/repos/plugins/oauth</a><br />[2] <a class="external" href="https://gerrit-review.googlesource.com/admin/repos/plugins/saml">https://gerrit-review.googlesource.com/admin/repos/plugins/saml</a></p> Infrastructure - Task #2852: Upgrade Gerrit to recent versionhttps://redmine.documentfoundation.org/issues/2852?journal_id=174982019-09-06T09:35:25ZGuilhem Moulinguilhem@libreoffice.org
<ul></ul><p>David Ostrovsky wrote:</p>
<blockquote><blockquote>
<p>At this point I'd say that it makes sense to sync the upgrade path with the migration to TDF's IdP for Single-Sign On authentication, and deprecate all other authentication methods to Gerrit's web frontend.</p>
</blockquote>
<p>I totally agree on this, and expected that gerrit is going to be moved to LDAP auth scheme, before upgrading to 2.15. I even had a discussion with migration steps with Norbert years ago, from OpenID/OAuth to LDAP.</p>
</blockquote>
<p>Changing the authentication method to LDAP provides shared credentials not Single Sign-On. It also increases the attack surface as the service can access said shared credentials. Like for other services at TDF I have <strong>no plan</strong> to use LDAP authentication but instead use a proper WebSSO solution using for instance SAML 2.0 or Auth2 (we're using both).</p>
<blockquote><blockquote>
<p>On our 2.16 stage I forked your OAuth2 plugin to make it work with our provider (LemonLDAP::NG — like for other IdP it's only a matter of choosing the right paths to the various endpoints and then map the JSON object to an account).</p>
</blockquote>
<p>I would happily review your changes and would merge them upstream. Could you please upload your changes to oauth-plugin project in gerrit-review: [1]?</p>
<p>Another option would be to use: saml plugin, that I recently moved to gerrit-review and adapted to work against most recent gerrit versions: [2]. With saml plugin the real SSO should work out of the box and some enterprise customers already successful use this plugin in production.</p>
</blockquote>
<p>Ah cool, I'll test the SAML plugin also, LemonLDAP::NG has a SAML IdP and this shouldn't require fiddling around with the code.</p> Infrastructure - Task #2852: Upgrade Gerrit to recent versionhttps://redmine.documentfoundation.org/issues/2852?journal_id=183532019-12-26T17:42:59ZDavid Ostrovskyd.ostrovsky@gmx.de
<ul></ul><p>This is done now and can be closed.</p>
<p>Also, adding the reference to the question about generic OAuth2 provider using<br />gerrit-oauth plugin: [1]. And of course I am still interested to add support for the<br />LemonLDAP::NG to the gerrit-oauth plugin. Is the source available in any publicly<br />accessible repository? I could pick it up myself and upload to the canonical plugin<br />repository: [2].</p>
<p>[1] <a class="external" href="https://github.com/davido/gerrit-oauth-provider/issues/134">https://github.com/davido/gerrit-oauth-provider/issues/134</a><br />[2] <a class="external" href="https://gerrit.googlesource.com/plugins/oauth">https://gerrit.googlesource.com/plugins/oauth</a></p> Infrastructure - Task #2852: Upgrade Gerrit to recent versionhttps://redmine.documentfoundation.org/issues/2852?journal_id=183542019-12-26T20:10:53ZGuilhem Moulinguilhem@libreoffice.org
<ul><li><strong>File</strong> <a href="/attachments/2791">tdf-oauth.patch</a> <a class="icon-only icon-download" title="Download" href="/attachments/download/2791/tdf-oauth.patch">tdf-oauth.patch</a> added</li><li><strong>Status</strong> changed from <i>New</i> to <i>Closed</i></li></ul><p>Closing, and attaching patch against v2.16.1. The new LL::NG provider is trivially derived from your code for GitLab. I guess LEMONLDAP_PROVIDER_PREFIX should be changed to "llng-oauth:" though. Unfortunately, this means one can't use multiple LL::NG providers with the plugin — like for GitLab — but that's not something we care about anymore as we dropped support for third-party IdPs on Dec 25.</p> Infrastructure - Task #2852: Upgrade Gerrit to recent versionhttps://redmine.documentfoundation.org/issues/2852?journal_id=183552019-12-26T23:49:21ZDavid Ostrovskyd.ostrovsky@gmx.de
<ul></ul><blockquote>
<p>Closing, and attaching patch against v2.16.1.</p>
</blockquote>
<p>Thanks! Unrelated to this issue, but could you also upload gitiles-plugin patch for marking diff chunks you applied to gitiles-plugin on gerrit.libreoffice.org site?</p> Infrastructure - Task #2852: Upgrade Gerrit to recent versionhttps://redmine.documentfoundation.org/issues/2852?journal_id=187562020-02-23T09:37:32ZDavid Ostrovskyd.ostrovsky@gmx.de
<ul></ul><blockquote>
<p>Closing, and attaching patch against v2.16.1. The new LL::NG provider is trivially derived from your code for GitLab.</p>
</blockquote>
<p>I uploaded this CL for review: [1]. Note, that oauth plugin was<br />bumped to the latest version of scribejava library to address<br />this issue: [2].</p>
<p>I don't know whether or not LL::NG provider supports bearer token<br />signature and basic authentication scheme, so that I commented out<br />new auth and signature ways in the code. If you can figure out,<br />whether or not new auth schemes are supported (or not), we can fix<br />those comments: [3], [4].</p>
<blockquote>
<p>I guess LEMONLDAP_PROVIDER_PREFIX should be changed to "llng-oauth:" though.</p>
</blockquote>
<p>Right, I've changed the prefix as you have suggested to: "llng-oauth:".</p>
<blockquote>
<p>Unrelated to this issue, but could you also upload gitiles-plugin patch for marking diff chunks you applied to gitiles-plugin on gerrit.libreoffice.org site?</p>
</blockquote>
<p>Moreover, there was another request for highlighting of in line<br />differences in Gitiles in this thread: [5] and I commented, that<br />TDF infra team patched Gitiles and it would be great if this patch<br />could be upstreamed. That's how truly open source driven projects<br />work. So, please, consider to give your valuable contribution back<br />to the Gerrit community. Thank you in advance.</p>
<p>[1] <a class="external" href="https://gerrit-review.googlesource.com/c/plugins/oauth/+/256231">https://gerrit-review.googlesource.com/c/plugins/oauth/+/256231</a><br />[2] <a class="external" href="https://github.com/davido/gerrit-oauth-provider/issues/135">https://github.com/davido/gerrit-oauth-provider/issues/135</a><br />[3] <a class="external" href="https://gerrit-review.googlesource.com/c/plugins/oauth/+/256231/1/src/main/java/com/googlesource/gerrit/plugins/oauth/LemonLDAPApi.java#42">https://gerrit-review.googlesource.com/c/plugins/oauth/+/256231/1/src/main/java/com/googlesource/gerrit/plugins/oauth/LemonLDAPApi.java#42</a><br />[4] <a class="external" href="https://gerrit-review.googlesource.com/c/plugins/oauth/+/256231/1/src/main/java/com/googlesource/gerrit/plugins/oauth/LemonLDAPApi.java#49">https://gerrit-review.googlesource.com/c/plugins/oauth/+/256231/1/src/main/java/com/googlesource/gerrit/plugins/oauth/LemonLDAPApi.java#49</a><br />[5] <a class="external" href="https://groups.google.com/d/msg/repo-discuss/TJmjeelXG1E/7f5ndn6HGAAJ">https://groups.google.com/d/msg/repo-discuss/TJmjeelXG1E/7f5ndn6HGAAJ</a></p> Infrastructure - Task #2852: Upgrade Gerrit to recent versionhttps://redmine.documentfoundation.org/issues/2852?journal_id=187572020-02-23T16:17:16ZGuilhem Moulinguilhem@libreoffice.org
<ul><li><strong>Target version</strong> changed from <i>Qlater</i> to <i>Q1/2020</i></li></ul><blockquote>
<p>I don't know whether or not LL::NG provider supports bearer token signature and basic authentication scheme, so that I commented out new auth and signature ways in the code.</p>
</blockquote>
<p>Dunno either. Will try to figure it out when we upgrade the service.</p>
<blockquote>
<p>Moreover, there was another request for highlighting of in line differences in Gitiles in this thread: [5] and I commented, that TDF infra team patched Gitiles and it would be great if this patch could be upstreamed.</p>
</blockquote>
<p>Ah right, there is too much sidetrack in that ticket… You're welcome to pick it up at <a class="external" href="https://git.libreoffice.org/gitiles/commit/e08d0507ae31c38db1d8302ab4d4d15141d909ef">https://git.libreoffice.org/gitiles/commit/e08d0507ae31c38db1d8302ab4d4d15141d909ef</a> . I consider that to be a crude hack though, ideally JGit's would extend its diff interface to offer something more fine-grained than line-based. IIRC what I do right now is to use JGit's EditList to build back hunks of RawTexts (in a non line-oriented fashion), then throw Neil Fraser's diff-match-patch at the substrings to get the fine-grained list of changes. Would make more sense to integrate that in JGit than in gitiles IMHO. (Also the submodule clutters the build system even more now that gitiles is a core plugin.)</p>
<p>Another patch you might be interested in: <a class="external" href="https://git.libreoffice.org/gitiles/commit/39626517c4671eec46f5a2b7fbb6243c622f176e">https://git.libreoffice.org/gitiles/commit/39626517c4671eec46f5a2b7fbb6243c622f176e</a> . This is another ugly hack though, with some monkeypatching to access the raw content back. I'm not a Java programmer, so please bear with me :-P</p> Infrastructure - Task #2852: Upgrade Gerrit to recent versionhttps://redmine.documentfoundation.org/issues/2852?journal_id=187582020-02-23T16:18:11ZGuilhem Moulinguilhem@libreoffice.org
<ul></ul><p>(And if you wonder, yes I just created <a class="external" href="https://git.libreoffice.org/gitiles">https://git.libreoffice.org/gitiles</a> .)</p> Infrastructure - Task #2852: Upgrade Gerrit to recent versionhttps://redmine.documentfoundation.org/issues/2852?journal_id=187622020-02-23T20:36:40ZDavid Ostrovskyd.ostrovsky@gmx.de
<ul></ul><blockquote>
<p>You're welcome to pick it up at <a class="external" href="https://git.libreoffice.org/gitiles/commit/e08d0507ae31c38db1d8302ab4d4d15141d909ef">https://git.libreoffice.org/gitiles/commit/e08d0507ae31c38db1d8302ab4d4d15141d909ef</a> .</p>
</blockquote>
<p>Thanks. I conducted a custom release: [1] for the diff-match-patch<br />library and adapted the patch to fetch it on the fly using<br />Bazel's http_file() rule: [2]. It would be great, if you could<br />create account on gerrit-review and sign the ACL, I would change<br />the author in this CL: [2] to your name.</p>
<p>[1] <a class="external" href="https://github.com/davido/diff-match-patch/releases/tag/v1.0.0">https://github.com/davido/diff-match-patch/releases/tag/v1.0.0</a><br />[2] <a class="external" href="https://gerrit-review.googlesource.com/c/gitiles/+/256512">https://gerrit-review.googlesource.com/c/gitiles/+/256512</a></p> Infrastructure - Task #2852: Upgrade Gerrit to recent versionhttps://redmine.documentfoundation.org/issues/2852?journal_id=187632020-02-23T21:37:33ZGuilhem Moulinguilhem@libreoffice.org
<ul></ul><blockquote>
<p>I conducted a custom release: [1] for the diff-match-patch library and adapted the patch to fetch it on the fly using Bazel's http_file() rule: [2].</p>
</blockquote>
<p>Neat, thanks!</p>
<blockquote>
<p>It would be great, if you could create account on gerrit-review and sign the ACL</p>
</blockquote>
<p>I'm afraid I don't have a Google account :-P I suppose they don't offer non-Googley authentication methods?</p> Infrastructure - Task #2852: Upgrade Gerrit to recent versionhttps://redmine.documentfoundation.org/issues/2852?journal_id=198602020-07-04T19:31:17ZGuilhem Moulinguilhem@libreoffice.org
<ul></ul><p>David Ostrovsky wrote:</p>
<blockquote>
<p>I don't know whether or not LL::NG provider supports bearer token<br />signature and basic authentication scheme, so that I commented out<br />new auth and signature ways in the code. If you can figure out,<br />whether or not new auth schemes are supported (or not), we can fix<br />those comments: [3], [4].</p>
<blockquote>
<p>I guess LEMONLDAP_PROVIDER_PREFIX should be changed to "llng-oauth:" though.</p>
</blockquote>
<p>Right, I've changed the prefix as you have suggested to: "llng-oauth:".</p>
</blockquote>
<p>Unrelated to this issue but I didn't forget to back after the LL::NG resp. gerrit upgrade :-)</p>
<p>The version we're running at the moment can be found at <a class="external" href="https://git.libreoffice.org/infra/gerrit-oauth/+log/refs/tags/v3.1.3+tdf">https://git.libreoffice.org/infra/gerrit-oauth/+log/refs/tags/v3.1.3+tdf</a> . There are some minors modifications to your code:</p>
<pre>
57e5804 LemonLDAP::NG: Remove getBearerSignature() override
1367d2b LemonLDAP::NG: Fix default scope name
420273f LemonLDAP::NG: Set username claim name in accordance with specs
</pre>
<p>(420273f allows automatic username provisioning for SSH and HTTP.)</p> Infrastructure - Task #2852: Upgrade Gerrit to recent versionhttps://redmine.documentfoundation.org/issues/2852?journal_id=198662020-07-05T14:54:36ZDavid Ostrovskyd.ostrovsky@gmx.de
<ul></ul><p>Guilhem Moulin wrote:</p>
<blockquote>
<p>David Ostrovsky wrote:</p>
<blockquote>
<p>I don't know whether or not LL::NG provider supports bearer token<br />signature and basic authentication scheme, so that I commented out<br />new auth and signature ways in the code. If you can figure out,<br />whether or not new auth schemes are supported (or not), we can fix<br />those comments: [3], [4].</p>
<blockquote>
<p>I guess LEMONLDAP_PROVIDER_PREFIX should be changed to "llng-oauth:" though.</p>
</blockquote>
<p>Right, I've changed the prefix as you have suggested to: "llng-oauth:".</p>
</blockquote>
<p>Unrelated to this issue but I didn't forget to back after the LL::NG resp. gerrit upgrade :-)</p>
<p>The version we're running at the moment can be found at <a class="external" href="https://git.libreoffice.org/infra/gerrit-oauth/+log/refs/tags/v3.1.3+tdf">https://git.libreoffice.org/infra/gerrit-oauth/+log/refs/tags/v3.1.3+tdf</a> . There are some minors modifications to your code:</p>
<p>57e5804 LemonLDAP::NG: Remove getBearerSignature() override<br />1367d2b LemonLDAP::NG: Fix default scope name<br />420273f LemonLDAP::NG: Set username claim name in accordance with specs</p>
</blockquote>
<p>Cool, I have uploaded all your fixes:</p>
<pre><code><a class="external" href="https://gerrit-review.googlesource.com/c/plugins/oauth/+/274444">https://gerrit-review.googlesource.com/c/plugins/oauth/+/274444</a> LemonLDAP::NG: Set username claim name in accordance with specs [NEW]<br /> <a class="external" href="https://gerrit-review.googlesource.com/c/plugins/oauth/+/274445">https://gerrit-review.googlesource.com/c/plugins/oauth/+/274445</a> LemonLDAP::NG: Fix default scope <br /> <a class="external" href="https://gerrit-review.googlesource.com/c/plugins/oauth/+/274446">https://gerrit-review.googlesource.com/c/plugins/oauth/+/274446</a> LemonLDAP::NG: Remove getBearerSignature() override [NEW]</code></pre>
<p>Hopefully, you could switch to upstream once they are merged ;-)</p>
<p>Also note, that you wouldn't have to build them yourself, but could download from the GerritForge CI: [1].</p>
<p>[1] <a class="external" href="https://gerrit-ci.gerritforge.com/view/Plugins-stable-3.1/job/plugin-cfoauth-bazel-master-stable-3.1">https://gerrit-ci.gerritforge.com/view/Plugins-stable-3.1/job/plugin-cfoauth-bazel-master-stable-3.1</a></p> Infrastructure - Task #2852: Upgrade Gerrit to recent versionhttps://redmine.documentfoundation.org/issues/2852?journal_id=198672020-07-05T15:02:11ZGuilhem Moulinguilhem@libreoffice.org
<ul></ul><p>David Ostrovsky wrote:</p>
<blockquote>
<p>Cool, I have uploaded all your fixes:</p>
</blockquote>
<p>Thanks!</p>
<blockquote>
<p>Hopefully, you could switch to upstream once they are merged ;-)</p>
<p>Also note, that you wouldn't have to build them yourself, but could download from the GerritForge CI: [1].</p>
</blockquote>
<p>Yup that's what we did before the switch to our own IdP :-) Eliminating the delta between the upstream version and what we run would indeed be welcome.</p> Infrastructure - Task #2852: Upgrade Gerrit to recent versionhttps://redmine.documentfoundation.org/issues/2852?journal_id=198682020-07-05T15:26:56ZDavid Ostrovskyd.ostrovsky@gmx.de
<ul></ul><p>Guilhem Moulin wrote:</p>
<blockquote>
<p>David Ostrovsky wrote:</p>
<blockquote>
<p>Cool, I have uploaded all your fixes:</p>
</blockquote>
<p>Thanks!</p>
<blockquote>
<p>Hopefully, you could switch to upstream once they are merged ;-)</p>
<p>Also note, that you wouldn't have to build them yourself, but could download from the GerritForge CI: [1].</p>
</blockquote>
<p>Yup that's what we did before the switch to our own IdP :-) Eliminating the delta between the upstream version and what we run would indeed be welcome.</p>
</blockquote>
<p>All CLs are merged now, and CI build is green as well: [1].</p>
<p>[1] <a class="external" href="https://gerrit-ci.gerritforge.com/view/Plugins-stable-3.1/job/plugin-oauth-bazel-stable-3.1/19">https://gerrit-ci.gerritforge.com/view/Plugins-stable-3.1/job/plugin-oauth-bazel-stable-3.1/19</a></p>