ooniprobe-cli v3.23 release process

[DecFox]

Release information

Fill out this information for each release:

Version Number: 3.23.0

Expected Release date: Aug 7, 2024

Summary of changes:

• changes to begin introducing richer-input
• maintenance changes

Link to latest nightly: https://github.com/ooni/probe-cli/releases/tag/rolling

Release checklist

For extended documentation about the process, see probe-cli's releasing.md.

Psiphon

• probe-cli: pin to the latest staging-client commit using ./script/go.bash get -u -v: chore: updated psiphon dependency to latest commit probe-cli#1642
• probe-cli: make sure ./script/go.bash list -json ./cmd/ooniprobe does not include any pinned package in psiphon's go.mod or otherwise ask Psiphon developers whether this is fine: chore: updated psiphon dependency to latest commit probe-cli#1642, checked locally.

Go version

• oocrypto: merge with upstream if needed: chore: update UPSTREAM to go1.21.11 oocrypto#29, chore: update go version probe-cli#1645
• oohttp: merge with upstream if needed: chore: bump UPSTREAM to go1.21.11 oohttp#65, chore: update go version probe-cli#1645
• probe-cli: possibly update .github/workflows/gobash.yml: not required
• probe-cli: update the GOVERSION file if needed: chore: update go version probe-cli#1645
• probe-cli: update the toolchain line inside of go.mod: chore: update go version probe-cli#1645
• probe-cli: update the Go version mentioned in the Readme.md file: chore: update go version probe-cli#1645
• probe-cli: update version specified in TH's Makefile: chore: update go version probe-cli#1645

Android

• probe-cli: update NDKVERSION, and MOBILE/android/ensure if needed: chore: bump NDKVersion and android platforms probe-cli#1643

Dependencies other than Psiphon

• probe-cli: ensure no dependency bumped its major version number using https://github.com/icholy/gomajor: chore: update dependencies probe-cli#1646
• probe-cli: update dependencies with ./script/go.bash get -u -v -d ./...: chore: update dependencies probe-cli#1646
• probe-cli: update C dependencies: chore: update C dependencies probe-cli#1644

Updating assets and definitions

• probe-cli: run ./script/updateminipipeline.bash: chore: update assets and definitions probe-cli#1647
• probe-cli: update github.com/ooni/probe-assets dependency: chore: update assets and definitions probe-cli#1647
• probe-cli: update bundled certs (using ./script/go.bash generate ./...): chore: update assets and definitions probe-cli#1647
• probe-cli: update user-agent at internal/model/http.go: chore: update assets and definitions probe-cli#1647

Maintenance

• probe-cli: sync stunreachability targets with snowflake (see ./internal/stuninput)
• probe-cli: take a look at go report card
• all: check whether to update the release documentation: not required
• probe-cli: address any outstanding TODO in the diff since last release (or create an issue for it): done
• probe-cli: try to address all the issues marked as "releaseBlocker"

QA and alpha releasing

• probe-cli: check warnings emitted by gosec runs: chore: address gosec warnings probe-cli#1648
• probe-cli: ./script/go.bash test -race -count 1 ./... must pass locally: There are failing tests due to: backend-hel.ooni.org is out of sync with backend-fsn.ooni.org devops#86, but local tests pass for the prod host.
• probe-cli: tag an alpha release: https://github.com/ooni/probe-cli/releases/tag/v3.23.0-alpha
• probe-cli: create the release/X.Y branch: https://github.com/ooni/probe-cli/tree/release/3.23
• probe-cli: make sure all workflows are green in the release/X.Y branch: The failing tests are unrelated to the engine and have been documented to be fixed for the infra.
• team: communicate availability of an alpha release

Releasing proper

• probe-cli: update internal/version/version.go in release/X.Y to be a stable release: ooniprobe-cli v3.23 release process #2783 (comment)
• probe-cli: tag a new stable version in the release/X.Y branch: ooniprobe-cli v3.23 release process #2783 (comment)
• probe-cli: update internal/version/version.go in master branch to be the next alpha: chore: update internal version to v3.24.0-alpha probe-cli#1650

Publishing stable packages

• probe-engine: run ./script/autoexport.bash: chore: sync with probe-cli v3.23.0 probe-engine#1211
• android: publish packages: https://s01.oss.sonatype.org/content/repositories/releases/org/ooni/oonimkall/2024.08.08-091959/, https://repo.maven.apache.org/maven2/org/ooni/oonimkall/2024.08.08-091959/
• debian: publish packages

Post-release communication

• iThena: notify about new release