Stewards' noticeboard
- This is not the place for stewards requests. To make a new request, see steward requests and requests and proposals.
- For illustration of steward policies and use, see the steward handbook.
- See also: Access to nonpublic personal data policy noticeboard.
- This page is automatically archived by SpBot. Threads older than 30 days will be moved to the archive.
 |
SpBot archives all sections tagged with {{Section resolved|1=~~~~}} after 2 days and sections whose most recent comment is older than 30 days.
|
New local inactivity policy for English Wikiquote
[edit](notification only) Hello. As of today, the English Wikiquote has developed a local inactivity policy per q:en:Wikiquote:Village pump#Create a local inactivity policy?. The policy states that administrators who are inactive for one year (i.e. no edits and no logged actions) will be listed under the removal section of q:en:Wikiquote:Requests for adminship, where inactive admins are given one week to respond if they wish to retain their rights, unless they specify otherwise. After one week passes and no response is received, a user will add a request for removal under SRP for the inactive administrator.
However, for the last sentence above, this could change eventually as I might start an English Wikiquote proposal to allow bureaucrats to remove administrator permissions locally.
On behalf of the English Wikiquote, Codename Noreste (talk • contribs) 16:08, 17 February 2026 (UTC)
- I updated the AAR set accordingly, see Special:Permalink/30093043. As for the latter point, even though it's not within the stewards' remit, allowing local bureaucrats to remove sysop flags is generally only granted to large communities and I don't think enwikiquote would be considered large enough per Limits to configuration changes. EPIC (talk) 16:27, 17 February 2026 (UTC)
- I did not realize that the English Wikiquote is considered a small wiki (despite having 15 local administrators). Thank you for explaining; I have crossed out (reconsidered) the last point accordingly. Codename Noreste (talk • contribs) 17:12, 17 February 2026 (UTC)
Statement on Meta about today's user script security incident
[edit]Earlier today (March 5, 2026), Wikimedia Foundation staff were conducting a security review of user-authored code across Wikimedia projects. During that review, we inadvertently activated dormant code that was then quickly identified to be malicious.
The code was active for a 23-minute period. This caused page deletions on Meta-Wiki that have since been restored. To prevent the script from spreading further while we investigated, Wikimedia projects were set to read-only for about 2 hours, and all user JavaScript was temporarily disabled for most of the day.
Affected pages have since been restored, and we believe no permanent damage has occurred as a result of this code. We have no reason to believe that Wikipedia was actively under attack or that personal information was breached as part of this incident.
At this point, the impact of the malicious code has been cleaned up, and user JavaScript has been re-enabled. We are actively developing further security mitigations for user JavaScript in consultation with the community, to make incidents of this kind much more difficult to happen in the future.
EMill-WMF (talk) 00:38, 6 March 2026 (UTC)
New RFC
[edit]Dear stewards, I have proposed a slight policy change to our RFC that might interest you at Requests for comment/Proposal for change in RFC policy. Thank you. :)--BRP ever 06:03, 8 March 2026 (UTC)