Release 11.5.7
General guidelines
- Be sure to follow the Security Releases general information and Security Releases as Release Manager.
- Always work on https://dev.gitlab.org/. Do not push anything to https://gitlab.com
- Deployment tasks (staging, production canary VMs, and production) should be done only if the patch is for the latest version. Feel free to delete those sections if they don't apply.
Preparation
-
Picked into respective stable
branches from thedev/security
branch. Use the https://gitlab.com/gitlab-org/gitlab-ce/issues/56211 as a guideline of what MR's should be picked. -
Push ce/11-5-stable
todev
only:git push dev 11-5-stable
-
Push ee/11-5-stable-ee
todev
only:git push dev 11-5-stable-ee
-
Merge ce/11-5-stable
intoee/11-5-stable-ee
Packaging
-
Make sure omnibus-gitlab/11-5-stable
CHANGELOG.md has an entry for each introduced change on Omnibus CE stable branch -
Make sure omnibus-gitlab/11-5-stable-ee
CHANGELOG.md has an entry for each introduced change on Omnibus EE stable branch -
Push omnibus-gitlab/11-5-stable
todev
only:git push dev 11-5-stable
-
Push omnibus-gitlab/11-5-stable-ee
todev
only:git push dev 11-5-stable-ee
-
Ping the Security Engineers so they can get started with the blog post. The blog post should also be done on https://dev.gitlab.org/ in a private snippet: https://dev.gitlab.org/gitlab/www-gitlab-com/merge_requests/54 -
Ensure tests are green on CE -
Ensure tests are green on EE -
Tag the 11.5.7
version using thetag
command:# In Slack: /chatops run tag --security 11.5.7
-
Check that EE packages are built and CE packages are built
Release
-
This section should be done in coordination with the Security team, so make sure to confirm with them before proceeding -
Publish the packages via ChatOps: # In Slack: /chatops run publish 11.5.7
-
Create the 11.5.7
version on version.gitlab.com. Be sure to mark it as a security release. -
Push ce/11-5-stable
to all remotes -
Push ee/11-5-stable-ee
to all remotes -
Push omnibus/11-5-stable
andomnibus/11-5-stable-ee
to all remotes -
Push CE, EE and omnibus tags to all remotes -
Tweet (prepare the Tweet text below or paste the tweet URL instead) in the #releases
channel:!tweet "GitLab 11.5.7 is released! BLOG_POST_URL DESCRIPTION OF THE CHANGES"
-
Merge the MR's targeting master
and push to all remotes -
Add omnibus-gitlab/11.5.7+ce.0
CHANGELOG.md items toomnibus-gitlab/master
CHANGELOG.md
For references: