ooniprobe-cli v3.24 release process

[DecFox]

Release information

Version Number: 3.24.0

Expected Release date: Nov 19, 2024

Summary of changes:

• changes to enable echcheck and reduce dnscheck inputs
• changes to enable system resolver for dnscheck
• some improvements in the openvpn experiment
• bug fixes for oonimkall and psiphon tunnel
• general improvements to the engine and cli
• maintenance changes

Link to latest nightly: https://github.com/ooni/probe-cli/releases/tag/rolling

Release checklist

For extended documentation about the process, see probe-cli's releasing.md.

Psiphon

• probe-cli: pin to the latest staging-client commit using ./script/go.bash get -u -v: chore: upgrade psiphon to latest staging-client commit probe-cli#1659
• probe-cli: make sure ./script/go.bash list -json ./cmd/ooniprobe does not include any pinned package in psiphon's go.mod or otherwise ask Psiphon developers whether this is fine

Go version

• oocrypto: merge with upstream if needed: chore: sync fork with upstream oocrypto#30
• oohttp: merge with upstream if needed: chore: sync fork with upstream oohttp#67
• probe-cli: possibly update .github/workflows/gobash.yml: not required
• probe-cli: update the GOVERSION file if needed: chore: upgrade GOVERSION to go1.22.2 probe-cli#1661
• probe-cli: update the toolchain line inside of go.mod: chore: upgrade GOVERSION to go1.22.2 probe-cli#1661
• probe-cli: update the Go version mentioned in the Readme.md file: chore: upgrade GOVERSION to go1.22.2 probe-cli#1661
• probe-cli: update version specified in TH's Makefile: chore: upgrade GOVERSION to go1.22.2 probe-cli#1661

Android

• probe-cli: update NDKVERSION, and MOBILE/android/ensure if needed: chore: upgrade android NDKVERSION probe-cli#1662

Dependencies other than Psiphon

• probe-cli: ensure no dependency bumped its major version number using https://github.com/icholy/gomajor: chore: upgrade dependencies probe-cli#1663
• probe-cli: update dependencies with ./script/go.bash get -u -v -d ./...: chore: upgrade dependencies probe-cli#1663
• probe-cli: update C dependencies: chore: upgrade C dependencies probe-cli#1664, fix: update cdeps version for mobile tests probe-cli#1668

Updating assets and definitions

• probe-cli: run ./script/updateminipipeline.bash: chore: update assets and definitions probe-cli#1665
• probe-cli: update github.com/ooni/probe-assets dependency: chore: update assets and definitions probe-cli#1665
• probe-cli: update bundled certs (using ./script/go.bash generate ./...): chore: update assets and definitions probe-cli#1665
• probe-cli: update user-agent at internal/model/http.go: chore: update assets and definitions probe-cli#1665

Maintenance

• probe-cli: sync stunreachability targets with snowflake (see ./internal/stuninput): not required
• probe-cli: take a look at go report card
• probe-cli: address any outstanding TODO in the diff since last release (or create an issue for it)
• probe-cli: try to address all the issues marked as "releaseBlocker"
• all: check whether to update the release documentation

QA and alpha releasing

• probe-cli: check warnings emitted by gosec runs
• probe-cli: ./script/go.bash test -race -count 1 ./... must pass locally
• probe-cli: tag an alpha release
• probe-cli: create the release/X.Y branch
• probe-cli: make sure all workflows are green in the release/X.Y branch
• team: communicate availability of an alpha release

Releasing proper

• probe-cli: update internal/version/version.go in release/X.Y to be a stable release
• probe-cli: tag a new stable version in the release/X.Y branch
• probe-cli: update internal/version/version.go in master branch to be the next alpha

Publishing stable packages

• probe-engine: run ./script/autoexport.bash
• debian: publish packages
• android: publish packages
• oohelperd: publish docker container

Post-release communication

• iThena: notify about new release
• Update the #ooni-probe-releases slack channel:

@here 🚀 🏎️ OONI Probe Engine v[VERSION_NUMBER] has been released.