#known 2019-04-13

2019-04-13 UTC
[eddie], [tantek], [Rose], [Ignacio], mapkyca, egoexpress and jbove joined the channel
#
jbove
mapkyca Is there a document available with a list of steps and measures needed to harden / make more secure the Known application? I'm on version 0.9.9-a.
seekr, egoexpress, [kevinmarks], [stefp], [eddie], [Rose], [chrisaldrich], [dougbeal] and travis-ci joined the channel
#
travis-ci
idno/known#5211 (master - c44c4be : Marcus Povey): The build has errored.
travis-ci left the channel
[dougbeal] and travis-ci joined the channel
travis-ci left the channel
#
travis-ci
mapkyca/idno#414 (master - c44c4be : Marcus Povey): The build has errored.
#
travis-ci
idno/known#5213 (master - ea25919 : Marcus Povey): The build has errored.
travis-ci joined the channel; travis-ci left the channel
#
mapkyca
jbove No, no documents specifically dealing with Known. I'd follow the standard recomendations for securing any web app
travis-ci joined the channel
#
travis-ci
mapkyca/idno#415 (master - ea25919 : Marcus Povey): The build has errored.
travis-ci left the channel
travis-ci joined the channel
#
travis-ci
idno/known#5216 (master - d4651a0 : Marcus Povey): The build has errored.
jbove joined the channel; travis-ci left the channel
#
travis-ci
mapkyca/idno#416 (master - d4651a0 : Marcus Povey): The build passed.
travis-ci joined the channel; travis-ci left the channel
travis-ci joined the channel
#
travis-ci
idno/known#5218 (master - ae82fc8 : Marcus Povey): The build passed.
travis-ci left the channel
travis-ci joined the channel
#
travis-ci
idno/known#5219 (master - 49f396e : Marcus Povey): The build passed.
travis-ci left the channel
#
@mapkyca
Whole bunch of @withknown changes just merged. Update and kick the tires!
(twitter.com/_/status/1117136736881131521)
[tantek], chrisaldrich and [stefp] joined the channel
#
[stefp]
Could you explain a bit more about updating with Composer? I go into my Known directory, type ‘composer update’, and it says ‘Nothing to install or update Generating autoload files’.
#
mapkyca
if you've got nothing to install, that should mean you've got no updates necessary. There were a few dependency modules pushed in the recent updates, but it should be relatively rare
#
aaronpk
`composer update` is just to update dependencies, not for updating known itself
#
mapkyca
Ahh yes, wot 'e said
#
[stefp]
Thanks. It says in Diagnostics that my build is behind the github version. Can I update the old way by overwriting?
#
mapkyca
Eventually it may be possible to install via composor projects, but that's a little ways off
#
mapkyca
Yes, with an if. You need to make sure the /vendor dependencies are uploaded as well. A straight git checkout won't get you everything
#
[stefp]
Okay. So if I update Known should I run ‘composer update’ after that to get dependency updates?
#
mapkyca
yep, that should be it.
#
[stefp]
Thanks
[dougbeal], [Rose], jbove and [kimberlyhirsh] joined the channel