Adware auf Equifax-Webseite: Unternehmen macht Drittanbieter verantwortlich

heise online Newsticker - 16. Oktober 2017 - 10:00
Schon wieder macht Equifax mit einem Sicherheitsvorfall von sich reden: Diesmal lieferte die Webseite des Unternehmens Adware aus. Auslöser soll allerdings kein Server-Hack, sondern Drittanbieter-Code gewesen sein.

Tolino Select: Eingeschränktes E-Book-Abo vorgestellt

heise online Newsticker - 16. Oktober 2017 - 10:00
Für Tolino-Kunden gibt es nun auch ein eigenes E-Book-Abo. Das funktioniert aber anders als bei der Konkurrenz. Zahlende Kunden dürfen sich jeden Monat aus einer zusammengestellten Liste von 40 Büchern vier zum Lesen auswählen.

Marktwert von im Darknet verkauften Erpressungstrojanern um 2500 Prozent gestiegen

heise online Newsticker - 16. Oktober 2017 - 9:30
Sicherheitsforschern zufolge finden sich auf verschiedenen Online-Schwarzmärkten rund 45.000 Verschlüsselungstrojaner-Angebote. Der durchschnittliche Preis für einen Schädling beträgt rund 10 US-Dollar.

Universal Windows Platform jetzt mit .NET Standard 2.0

heise online Newsticker - 16. Oktober 2017 - 9:15
Die Einbindung der technischen Vorgabe für APIs veröffentlicht Microsoft kurz nach der Meldung, dass Windows 10 Mobile keine Zukunft haben wird.

Kommentar: Schade ist's um Windows Mobile

heise online Newsticker - 16. Oktober 2017 - 9:15
Endlich hat sich mal jemand unmissverständlich zum Schicksal von Windows Mobile geäußert: Microsofts Smartphone-System steht auf dem Abstellgleis und hat keine Zukunft mehr. Ein Abgesang.

Mozilla will Deutschland besser verstehen

heise online Newsticker - 16. Oktober 2017 - 9:00
Das Open-Source-Unternehmen hat mitsamt seiner kompletten Chefetage seine größte europäische Niederlassung in Berlin eröffnet – und seine Agenda deutlich gemacht.

PreviousNext: Update to Drupal core 8.4, a step by step guide

Planet Drupal - 16. Oktober 2017 - 8:24
Share:

Drupal 8.4 is stable! With 8.3 coming to end of life, it's important to update your projects to the latest and greatest. This blog will guide you through upgrading from Drupal core 8.3 to 8.4 while avoiding those nasty and confusing composer dependency errors.

by Adam Bramley / 16 October 2017

The main issues with the upgrade to Drupal core 8.3 are dependency conflicts between Drush and Drupal core. The main conflict being that both Drush 8.1.x and Drupal 8.3 use the 2.x version of Symfony libraries, while Drupal 8.4 has been updated to use Symfony 3.x. This means that when using composer to update Drupal core alone, composer will complain about conflicts in dependencies, since Drush depends on Symfony 2.x

Updating your libraries

Note: If you are using Drush 8.1.15 you will not have these issues as it is now compatible with both Symfony 2.x and 3.x

However, if you are using Drush < 8.1.15 (which a lot of people will be on), running the following command will give you a dependency conflict:

composer update drupal/core --with-dependencies

Resulting in an error message, followed by a composer trace:

Your requirements could not be resolved to an installable set of packages.

The best way to fix this is to update both Drupal core and Drush at the same time. Drush 8.x is not compatible with Drupal 8.4 so you will need to update to Drush 9.x.

composer update drupal/core drush/drush --with-dependencies
composer require "drush/drush:~9.0"

Some people have reported success with simply running a require on both updated versions of Drupal and Drush at the same time, but this did not work for me

composer require "drupal/core:~8.4" "drush/drush:~9.0"

What next?

Great, you're on the latest versions of both core and drush, but what's next? Well, that depends on a lot of things like what contributed and custom modules your project is running, how you're deploying your site, and what automated tests you are running. As I can't possibly cover all bases, I'll go through the main issues we encountered.

First things first, you'll need to get your site's database and configuration updated. I highly recommend running your database update hooks and exporting your site's configuration before proceeding any further.

Next, you'll want to ensure that all of your deployment tools are still working. Here at PreviousNext our CI/CD tools call Make commands which are essentially just wrappers around one or more Drush commands.

For the most part, the core Drush commands (that is, the commands that ship with drush) continued working as expected, with a couple of small caveats:

1. You can no longer pipe a SQL dump into the drush sql-cli (sqlc) command.

Previously, we had:
drush sqlc < /path/to/db.sql
Now we have:
`eval drush sql-connect` < /path/to/db.sql

Note: As of Drush 9.0-beta7 this has now been fixed, meaning the old version will work again!

2. The drush --root option no longer works with relative paths

Previously, our make commands all ran Drush with the --root (or -r) option relative to the repository root:
./bin/drush -r ./app some-command
Now it must be an absolute path, or Drush will complain about not being able to find the Drupal settings:
./bin/drush -r /path/to/app some-command

3. Custom Drush commands

For custom Drush commands, you will need to port them to use the new object oriented style approach and put the command into a dedicated module. Since version 9.0-beta5, Drush has dropped support for the old drush.inc style approach that could be used to add commands to a site without adding a new module.

For an example on this, take a look at our drush_cmi_tools library which provides some great extensions for importing and exporting config. This PR shows how we ported these commands to the new Drush 9 format.

For more information on porting commands to Drush 9, check out Moshe Weitzman's blog on it.

Other gotchas

Following the Drush upgrades, your project will need various other updates based on the modules and libraries it uses. I'll detail some issues I faced when updating the Transport for NSW site below.

1. Stale bundles in the bundle field map key value collection

Added as part of this issue, views now throws warnings similar to "A non-existent config entity name returned by FieldStorageConfigInterface::getBundles(): field name: field_dates, bundle: page" for fields that are in the entity bundle field field map that no longer exist on the site. We had a handful of these fields which threw warnings on every cache clear. To fix this, simply add an update hook which clears out these stale fields from the entity.definitions.bundle_field_map keyvalue collection:

/** * Fix entity.definitions.bundle_field_map key store with old bundles. */ function my_module_update_8001() { /** @var \Drupal\Core\KeyValueStore\KeyValueFactoryInterface $key_value_factory */ $key_value_factory = \Drupal::service('keyvalue'); $field_map_kv_store = $key_value_factory->get('entity.definitions.bundle_field_map'); $node_map = $field_map_kv_store->get('node'); // Remove the field_dates field from the bundle field map for the page bundle. unset($node_map['field_dates']['bundles']['page']); $field_map_kv_store->set('node', $node_map); }

2. Custom entities with external uri relationships throw Fatal errors when delete while menu_link_content is installed

The menu_link_content module now has an entity_predelete hook that looks through an entities uri relationships and tries to find any menu links that link to that specific route, and if so deletes them. When the uri is external, an error is thrown when it tries to get the route name "External URLs do not have an internal route name.". See this issue for more information.

3. Tests that submit a modal dialog window will need to be altered

This is a very edge case issue, but will hopefully help someone! In older versions of jQuery UI, the buttons that were added to the bottom of the modal form for submission had an inner span tag which could be clicked as part of a test. For example, in Linkit's LinkitDialogTest. This span no longer exists, and attempting to "click" any other part of that button in a similar way will throw an error in PhantomJS. To get around that simply change your test to do something similar to the following:

$this->click('.ui-dialog button:contains("Save")');

Kudos to jhedstrom for finding this one. See this issue for more information.

Conclusion

Personally, I found the upgrade to be quite tedious for a minor version upgrade. Thankfully, our project has a large suite of functional/end-to-end tests which really helped tease out the issues and gave us greater confidence that the site was still functioning well post-upgrade. Let me know in the comments what issues you're facing!

Finally, take a look at Lee's blog on some of the major changes in 8.4 for some more insight into what you might need to fix.

Tagged Composer, Drupal 8, drush

Posted by Adam Bramley
Senior Drupal Developer

Dated 16 October 2017

Add new comment

Elektroautos: EU-Kommission dementiert Quote für emissionsfreie Fahrzeuge

heise online Newsticker - 16. Oktober 2017 - 8:00
Die EU-Kommission betont, dass die EU-Gesetzgebung "immer technologieneutral" gewesen sei. Vor diesem Hintergrund werde es keine Quote geben. Stattdessen setzt sie auf die Batteriezellenproduktion.

Love Huria: Time to level up Code Reviews

Planet Drupal - 16. Oktober 2017 - 8:00

Being part of a Code review process is very important for us and trust me we take it very seriously. This is required not just for the team but for an individual learning as well.

Code reviews are very crucial for knowledge transfer and to avoid making small/common mistakes and of course maintaining best practices throughout the dev team. So Let’s take my team for example: we are around 11 developers in the team, all producing code which needs to be reviewed. So basically yeah that’s a whole lot of code!

Why It’s Important?

Pushing code to production is...

Fehler in WSUS-Update: Windows-Clients booten nicht mehr

heise online Newsticker - 16. Oktober 2017 - 7:30
Fehlerhafte Update-Pakete für Windows 10 und Windows Server 2016, die Microsoft am jüngsten Patchday veröffentlicht hat, legten in den vergangenen Tagen Rechner in Unternehmensnetzwerken lahm. Betroffen waren nur Umgebungen mit WSUS und SCCM.

Tiangong 1: Chinesische Raumstation vor unkontrolliertem Absturz

heise online Newsticker - 16. Oktober 2017 - 7:00
Ende des Jahres oder Anfang 2018 wird Tiangong 1 abstürzen, ohne dass absehbar ist, wann genau das passieren wird und wo mögliche Trümmerteile einschlagen könnten. Das wird sich erst kurz vorher abzeichnen. Das Risiko einer Gefährdung sei sehr gering.

#TGIQF: Das Quiz - eine kurze Geschichte von Windows 1.0 bis 10

heise online Newsticker - 16. Oktober 2017 - 7:00
Windows hat von Version 1.0 bis 10 schon einen langen Weg zurückgelegt und die meisten Leser haben mit den unterschiedlichsten Ausprägungen der Microsoft-Betriebssysteme ihre Erfahrungen gemacht. Aber wie gut kennen Sie die Windows-Versionen wirklich?

Lullabot: Behind the Screens with Chris Teitzel

Planet Drupal - 16. Oktober 2017 - 6:00
Chris Teitzel of Cellar Door Media gives us a preview of Security Saturday at BadCamp 2017 and provides some great tips for securing your website. He tells us why we should always say yes to the community; you never know where it's going to lead. Chris also shares some amazing stories about bringing a Drupal-based communications tool developed from the DrupalCon Denver Tropo Hackathon, to Haiti in 2012 to help with relief efforts after their devastating 2010 earthquake.

Bay Area Drupal Camp: BADCamp 2017 starts this Wednesday

Planet Drupal - 16. Oktober 2017 - 5:00
BADCamp 2017 starts this Wednesday Anne Sun, 10/15/2017 - 8:00pm

BADCamp kicks off this Wednesday! We are looking forward to seeing you and are excited to share some logistical details and tips for making the most of your time at BADCamp.

Where do I register and pick up my badge?

Central BADCamp registration opens at 8:15 am each morning. It’s located in the Martin Luther King (MLK) Student Union, on the 3rd Floor in the Kerr Lobby.

Map to Martin Luther King Student Union

2495 Bancroft Way, at Telegraph Avenue

University of California

Berkeley CA 94720

 

If you are attending a summit at the Marsh Art Center, badges will be available for pick up when you arrive.

Map to Marsh Art Center

2120 Allston Way

Berkeley, CA 94704

 

Be sure to come back to BADCamp Expo Hall at MLK Pauley West during breaks. We’ll have coffee, pinball, 15-min relaxation massages and a chance to thank our generous sponsors ... many are hiring!


Here is an overview of what is happening at each venue.

 

Where is everything? Where do I go?
  • Take a look at our Event Timeline to find out what is happening when.

  • Check out the Venues to see what is happening where.

  • Be sure to log in and make your session schedule in advance and then follow along on your mobile device.

 

What’s the 411 on food and beverage?

As always, BADCamp will provide an endless supply of coffee, tea, and water.

 

Wednesday & Thursday

  • All Training & Summits will have light snacks in the morning.

  • For lunch, head outside to discover some of Berkeley’s best food!

  • Stop by the Sponsor Expo on Thursday for specialty coffees.

 

Friday & Saturday

  • The Sponsor Expo will have a waffle bar and specialty coffees.

  • Lunch is sponsored by Acquia on both Friday & Saturday.

 

Parking

Parking at Berkeley can be extremely challenging. Consider taking public transportation whenever possible.  

 

Anything else to know?
  • Wear good shoes! You will do a lot of walking.

  • Bring layers, or donate at the $100 level and get not only an awesome 2017 t-shirt, a solar charger, and a cozy BADCamp hoodie!

  • The Fires. We are keeping an eye on things and will provide any updates if the air quality or anything else impact the event. Stay in touch with BADamp on Twitter.

  • The BADCamp Contribution Lounge is open 24 hours, beginning at 9 am on Wednesday and going until 10 pm on Saturday. We welcome and encourage you to participate!

 

Sponsors

Our sponsors make the magic of BADCamp possible! Stop by to thank them at the event. As an added bonus, many of them are hiring! We’re also sending an extra big virtual hug to Platform.sh, Pantheon & Acquia for sponsoring at the Core level and helping to keep BADCamp AWESOME!

Drupal Planet

Vermessung der Milchstraße: bislang größte Distanz ermittelt

heise online Newsticker - 15. Oktober 2017 - 19:30
Die genaue Form unserer Heimatgalaxie ist nicht so leicht zu ermitteln, da wir nicht von außen auf sie blicken können. Forschern ist nun ein entscheidender Schritt auf dem Weg zu einer vollständigen Vermessung unserer Heimatgalaxie gelungen.

Software-Entwicklung: Google und Partner starten Open-Source-API Grafeas

heise online Newsticker - 15. Oktober 2017 - 19:00
Google, IBM und andere Industriegrößen starten Grafeas, eine Open-Source-API, die die Software-Supply-Chain überwachen und im Griff behalten soll, um den steigenden Anforderungen an die moderne Softwareentwicklungsverwaltung gerecht zu werden.

Apples irisches Rechenzentrum darf endlich gebaut werden

heise online Newsticker - 15. Oktober 2017 - 17:30
Vor gut zweieinhalb Jahren kündigte Apple an, iCloud-Datacenter auf der grünen Insel zu errichten. Nun ist die Planungsphase endlich abgeschlossen – nach Einsprüchen von Bürgern.

Missbrauchsdebatte um Weinstein: Kritik an Twitter als #WomenBoycottTwitter

heise online Newsticker - 15. Oktober 2017 - 17:00
Die Schauspielerin Rose McGowan twittert vehement zur Auseinandersetzung mit den Missbrauchsvorwürfen gegen den einflussreichen Film-Produzenten Harvey Weinstein - und wurde prompt von Twitter gesperrt. Nun richtet sich neuer Protest gegen die Plattform.

Spiele-Engine Unity 2017.2 zielt vor allem auf 2D-Entwicklung und Extended Reality

heise online Newsticker - 15. Oktober 2017 - 15:30
Die Spiele-Engine enthält umfangreiche 2D-Werkzeuge, darunter einen Tilemap-Editor. Außerdem unterstützt sie nun Windows Mixed Reality, Vuforia und OpenVR und soll allgemein die Performance von AR- und VR-Spielen verbessern.

IT-Fachkräfte: 2018 soll es mehr Geld geben

heise online Newsticker - 15. Oktober 2017 - 14:00
2018 erwartet IT-Fachkräfte ein überdurchschnittlich höheres Gehalt. Das geht zumindest aus einer Prognose des Personaldienstleister Robert Half hervor. Insbesondere Softwareentwickler in München sollen profitieren.