[16:58:13] <anomie>	 bd808: Have time to help me get css-sanitizer on packagist?
[17:00:53] <bd808>	 anomie: sure
[17:01:02] <bd808>	 it's on github already right?
[17:01:14] <anomie>	 https://github.com/wikimedia/css-sanitizer
[17:01:43] <Reedy>	 anomie: I think https://github.com/wikimedia/css-sanitizer/blob/master/composer.json needs a version?
[17:01:54] <Reedy>	 And you need to tag a release
[17:02:07] <bd808>	 version comes from the tag
[17:02:16] <Reedy>	 yeah, just noticed that
[17:02:26] <bd808>	 but we can register it without needing a tagged release
[17:02:40] <bd808>	 jsut will need one to tie into core's composer.json
[17:03:16] * anomie does `git tag v1.0.0`, now what?
[17:03:22] <legoktm>	 git push --tags
[17:03:24] <Reedy>	 ^
[17:03:33] <bd808>	 https://packagist.org/packages/wikimedia/css-sanitizer
[17:03:45] <legoktm>	 anomie: did you gpg sign the tag?
[17:04:12] <anomie>	 legoktm: Uhh, probably not.
[17:04:46] <legoktm>	 it's fine for now, but in the future it's best practice to do so
[17:06:18] <anomie>	 I suppose to do that I have to set up gpg in some manner?
[17:06:36] <bd808>	 :)
[17:06:47] * anomie doesn't see "how to set up gpg for this" on https://www.mediawiki.org/wiki/Manual:Developing_libraries
[17:07:02] <bd808>	 legoktm is assuming that you are the kind of nerd who already does that
[17:07:57] <bd808>	 anomie: if you have a packagist account I can add you as a maintainer for the package there. If not no worries
[17:08:12] <anomie>	 bd808: Nope, no account there at the moment.
[17:08:41] <bd808>	 *nod* if you ever decide you want co-maintainer rights just poke me
[17:14:13] <anomie>	 bd808: Thanks for the help
[17:14:28] <bd808>	 yw
[21:35:15] <TimStarling>	 speaking of tagged releases, there are no tags for today's MW core releases in gerrit
[21:37:22] <TimStarling>	 RainbowSprinkles: ^
[21:37:31] <RainbowSprinkles>	 I know, tags come after patches all land
[21:38:03] <RainbowSprinkles>	 Order is: tarball / announce....gerrit.....tag
[21:39:43] <Reedy>	 jerkins is quite busy
[21:39:56] <Reedy>	 REL1_23 was pushed directly
[21:40:00] <RainbowSprinkles>	 I will say, pushing with CR+2 attached *did* reduce the time to merge
[21:40:07] <RainbowSprinkles>	 Ah, yeah I can go ahead and tag 1.23.16
[21:40:07] <Reedy>	 but there's still nearly 30 patches to do
[21:42:10] <RainbowSprinkles>	 1.23.16 signed and tagged
[22:53:36] <paladox>	 I think 1.28.1 can be tagged in gerrit now :)
[22:53:41] <paladox>	 and 1.27.x too
[22:58:16] <Reedy>	 1.27 can't
[22:58:20] <Reedy>	 And neither can 1.28.1
[22:58:24] <Reedy>	 1 patch to merge for 1.28
[22:58:41] <Reedy>	 7 for 1.27
[23:07:11] <Reedy>	 That's 1.28 done now
[23:09:58] <paladox>	 Oh