RELEASE-NOTES-1.31

   1 == MediaWiki 1.31.6 ==
   2
   3 THIS IS NOT A RELEASE YET
   4
   5 === Changes since MediaWiki 1.31.5 ===
   6 * (T181658) Do not insert page titles into querycache.qc_value.
   7
   8 == MediaWiki 1.31.5 ==
   9
  10 This is a maintenance release of the MediaWiki 1.31 branch.
  11
  12 === Changes since MediaWiki 1.31.4 ===
  13 * Fix extra newlines in installer.
  14 * Followup T230402, PermissionManager doesn't exist until 1.33, so fix the
  15   backported patches to use User::isAllowed() instead.
  16
  17 == MediaWiki 1.31.4 ==
  18
  19 This is a security and maintenance release of the MediaWiki 1.31 branch.
  20
  21 === Changes since MediaWiki 1.31.3 ===
  22 * (T207100) Updated LanguageTr for dotted and dotless I in PHP 7.3.
  23 * The ImgAuthModifyHeaders hook was added to img_auth.php to allow modification
  24   of headers in private wikis.
  25 * (T230402) SECURITY: Add permission check for suppressed account to
  26   Special:Redirect.
  27 * Add helper for HTTPFileStreamer header syntax.
  28 * (T118799) Fix XMP parser errors due to trailing nullchar.
  29 * (T233119) Improve documentation for the MinimumPasswordLengthToLogin policy.
  30 * (T202183) Give more specific error messages on Special:Redirect.
  31 * Cache redirects from Special:Redirect.
  32 * (T231386) dispatchUser() should use a 302 http status code.
  33 * (T227662) Split down patch-comment-table.sql and patch-actor-table.sql into
  34   separate files to help allieviate potential migration problems.
  35 * Make SQLite's patch-add-3d.sql a no-op to prevent clobbering other database
  36   updates.
  37
  38 == MediaWiki 1.31.3 ==
  39
  40 This is a maintenance release of the MediaWiki 1.31 branch.
  41
  42 === Changes since MediaWiki 1.31.2 ===
  43 * (T225558) Update installer link to PHP intl.
  44 * (T225496) Detect APC for MainCacheType in CLI installer.
  45 * (T226766) Remove jetbrains/phpstorm-stubs from composer dev dependancies.
  46 * (T202211) Fix SQLite patch-(image|page|template)links-fix-pk.sql column order.
  47
  48 == MediaWiki 1.31.2 ==
  49
  50 This is a security and maintenance release of the MediaWiki 1.31 branch.
  51
  52 Required PHP version has been increased from 7.0.0 to 7.0.13.
  53
  54 === Changes since MediaWiki 1.31.1 ===
  55 * (T204729) WatchedItemStore::countVisitingWatchersMultiple() shouldn't query all
  56   titles when asked for none.
  57 * (T205967) Fix syntax error typo in postgres database upgrade file.
  58 * (T200254) Add pear/Net_SMTP 1.7.3 to composer dependencies.
  59 * (T206765) Load installer i18n when running update.php.
  60 * (T109121) Remove deprecated pear/mail_mime-decode from composer suggested libraries.
  61   [Also in the bundled composer /vendor directory.]
  62 * Various PHP 7.2 and 7.3 compatibility fixes:
  63   * (T200595, T206974) Fix PHP 7.3 warnings of using "continue" in some scenarios instead
  64     of "break".
  65     * (T206976, T206977) Also in the bundled LocalisationUpdate and ParserFunctions extensions.
  66   * (T206979) Fix PHP 7.3 warnings of using "compact()" when some variables may
  67     not be set.
  68   * (T215632) FormatMetadata and UploadStash regexes fixed to be PHP 7.3-compatible.
  69   * Fix PHP warnings "preg_replace(): [...] invalid range in character class.
  70   * Avoid PHP 7.2 warnings in DBConRefTest about count() on non-Countable.
  71   * Suppress "Headers already sent" in PHP 7.2 too.
  72   * (T206476) Output only to stderr in unit tests.
  73   * (T207112) Add session_write_close() calls to SessionManager tests.
  74   * oyejorge/less.php replaced with our fork wikimedia/less.php
  75   * (T209756) Updated wikimedia/ip-set from 1.2.0 to 1.3.0.
  76   * (T213489) Avoid session double-start in Setup.php.
  77   * (T206975) Switch to our fork of less.php.
  78 * (T207540) Include IP address in "Login for $1 succeeded" log entry.
  79 * (T201781) Database: Allow selectFieldValues() to accept SQL fragments.
  80 * (T205765) installer: Don't link to the obsolete "Extension Matrix" page.
  81 * (T206013) Update ImportableUploadRevisionImporter for interwiki usernames.
  82 * (T207541) Pass an email address, not a MailAddress, to mail().
  83 * (T207603) SECURITY: User JS may no longer be loaded with mime type text/javascript if
  84   there is no account associated with the username.
  85 * (T112937, T113042) SECURITY: Do not allow loading pages raw with a text/javascript MIME
  86   type if non-admins can edit the page.
  87 * (T17491) <ins>/<del> elements can be phrasing or flow.
  88 * (T200827) RemexCompatMunger: Don't call endTag() in case B/b
  89 * (T207088) Upgrade wikimedia/remex-html to 2.0.1.
  90   [Also in the bundled composer /vendor directory.]
  91 * (T194052) Updated wikimedia/base-convert from 1.0.1 to 2.0.0.
  92   [Also in the bundled composer /vendor directory.]
  93 * (T199494) Fix notices in maintenance/removeUnusuedAccounts.php.
  94 * Require ext-fileinfo in composer.json, per PHPVersionCheck.
  95 * (T176390) Bundled LocalisationUpdate extension: Handle exceptions from GitHubFetcher.
  96 * (T208255) Completion search should not change the search query.
  97 * (T209870) Fix SQL syntax error in MS-SQL initialisation file for new wikis.
  98 * (T185049) LogFormatter: Fail softer when trying to link an invalid titles.
  99 * (T210998) Properly set $wgLanguageCode in the generated LocalSettings.php
 100   if --lang is used with the command-line installer (install.php).
 101 * (T211061) ImageListPager: Actor migration for buildQueryConds().
 102 * (T209335) Clarify the default sidebar 'Help' link is about MediaWiki itself.
 103 * Fix addition of ug_expiry column to user_groups table on MSSQL.
 104 * (T204767) Add join conditions to ActiveUsersPager.
 105 * (T210621) User: Bypass repeatable-read when creating an actor_id.
 106 * (T204531) rdbms: reduce LoadBalancer replication log spam.
 107 * (T195525) Fix db error outage page.
 108 * (T208871) The hard-coded Google search form on the database error page was
 109   removed.
 110 * (T176097) Fix flaky MessageBlobStoreTest assertion failures.
 111 * (T209423) Update required PHP version to 7.0.13.
 112 * (T209885) Prevent populateSearchIndex.php from breaking once actor migration
 113   has been started.
 114 * (T216968) Return pageid as int in both list=iwbacklinks and list=langbacklinks.
 115 * (T215169) Fix for Database::update() with IGNORE option fails on PostgreSQL.
 116 * (T204423) Backport support for hyphenated DB names in JobQueueGroup.
 117 * (T199474) Fix typo in rebuildrecentchanges.php resulting in rogue flags.
 118 * (T218608) SECURITY: Fix an issue that prevents Extension:OAuth working when
 119   $wgBlockDisablesLogin is true.
 120 * (T216029) Chrome redirects to Special:BadTitle after editing a section with
 121   a non-Latin name on a page with non-Latin characters in title.
 122 * (T219728) Added support for new Japanese era name "Reiwa".
 123 * (T25227) SECURITY: action=logout now requires to be posted and have a csrf token.
 124 * Updated cssjanus/cssjanus from 1.2.0 to 1.3.0.
 125 * (T222385) resourceloader: Use AND instead of OR for upsert conds in
 126   saveFileDependencies().
 127 * (T224374) Fix message parameters so that the message that says SQLite is out of date
 128   makes sense.
 129 * SpecialPage::checkLoginSecurityLevel() will now preserve POST data when
 130   reauthenticating.
 131 * FormSpecialPage::execute() will now call checkLoginSecurityLevel() if
 132   getLoginSecurityLevel() returns non-false.
 133 * (T197279) SECURITY: Fix reauth in Special:ChangeEmail.
 134 * (T208881) SECURITY: blacklist CSS var().
 135 * (T209794) SECURITY: rate-limit and prevent blocked users from changing email.
 136 * (T199540) SECURITY: API: Respect $wgBlockCIDRLimit in action=block.
 137 * (T212118) SECURITY: Fix cache mode for (un)patrolled recent changes query.
 138 * (T222036, T222038) SECURITY: Add permission check for user is permitted to
 139   view the log type.
 140 * (T221739) SECURITY: resources: Patch jQuery 3.2.1 for CVE-2019-11358.
 141
 142 == MediaWiki 1.31.1 ==
 143
 144 This is a security and maintenance release of the MediaWiki 1.31 branch.
 145
 146 === Changes since MediaWiki 1.31.0 ===
 147 * (T169545, CVE-2018-0503) SECURITY: $wgRateLimits entry for 'user' overrides
 148   'newbie'.
 149 * (T194605, CVE-2018-0505) SECURITY: BotPasswords can bypass CentralAuth's
 150   account lock.
 151 * (T199029, CVE-2018-13258) SECURITY: Tarball was missing .htaccess files.
 152 * (T197229) Bundle Nuke extension, it was accidentally omitted.
 153 * (T193995) Fix undefined patchPath() method call in parser tests.
 154 * (T198687) Fix various selectFields methods to use the string 'NULL', not null.
 155 * Special:BotPasswords now requires reauthentication.
 156 * (T191608, T187638) Add 'logid' parameter to Special:Log.
 157 * (T193829) Indicate when a Bot Password needs reset.
 158 * (T198037) GitInfo: Don't try shelling out if it's disabled.
 159 * (T151415) Log email changes.
 160 * (T197206) Fix performance regression when multiple DB used without caching.
 161 * (T197030) PHPSessionHandler: Suppress headers warnings in initialize().
 162 * (T182377, T196793) Exif: Guard against uncountable tag values.
 163 * (T200861) Fix total breakage of SQLite web upgrade.
 164 * (T200864) Fix pingback over-reporting on non-MySQL databases
 165 * (T202550) Unbreak SpecialListusersHeaderForm and SpecialListusersHeader
 166   hooks.
 167
 168 === Changes since MediaWiki 1.31.0-rc.2 ===
 169 * (T195783) Initialize PSR-4 namespaces at same stage as normal autoloader.
 170 * (T196092) Hide MySQL binary/utf-8 charset option in the installer.
 171 * (T196185) Don't allow setting $wgDBmysql5 in the installer.
 172 * (T196125) php-memcached 3.0 (provided with PHP 7.0) is now supported.
 173 * (T182366) UploadBase::checkXMLEncodingMissmatch() now works on PHP 7.1+
 174 * (T118683) Fix exception from &$user deref on HHVM in the TitleMoveComplete hook.
 175 * (T196672) The mtime of extension.json files is now able to be zero
 176 * (T180403) Validate $length in padleft/padright parser functions.
 177 * (T143790) Make $wgEmailConfirmToEdit only affect edit actions.
 178
 179 === Changes since MediaWiki 1.31.0-rc.0 ===
 180 * (T33223) Drop archive.ar_text and ar_flags.
 181 * Add default edit rate limit of 90 edits/minute for all users.
 182 * (T187645) Use codepoint as tiebreaker when getting first-letters in
 183   IcuCollation.
 184 * (T191947) Don't shell during the installer if shelling out is disabled.
 185 * (T194319) Improve duplicate config setting exception as part of extension
 186   registration.
 187 * (T195211) Don't require trailing slash in PSR-4 autoloader directory.
 188 * (T186565) Fix PHP Notice from `ob_end_flush()` in `FileRepo::streamFile()`.
 189 * Do not incorrectly hide namespace input field in the installer.
 190 * (T186456) Refactor checks looking for PEAR maik libraries to be clearer.
 191
 192 === Important pre-upgrade notes for 1.31 ===
 193 * If you're using MySQL, SQLite, or MSSQL, are not using update.php to apply
 194   schema changes, and cannot have downtime to run migrateArchiveText.php and
 195   apply patch-drop-ar_text.sql manually, you'll have to apply a default value
 196   to the ar_text and ar_flags columns of the archive table or make those
 197   columns nullable before upgrading to MediaWiki 1.31.
 198   maintenance/archives/patch-nullable-ar_text.sql shows how to do this for MySQL.
 199 * The CologneBlue and Modern skins are no longer bundled with the tarball. You
 200   will need to remove the wfLoadSkin() calls from your LocalSettings.php or
 201   download them separately
 202   (<https://www.mediawiki.org/wiki/Special:SkinDistributor>).
 203
 204 === Configuration changes in 1.31 ===
 205 * $wgEnableAPI and $wgEnableWriteAPI are now deprecated and will be removed in
 206   a future version. The API is now considered to be stable, secure and
 207   essential.
 208 * $wgUsejQueryThree was removed, as it is now the default. This was documented
 209   as a temporary variable during the migration period, deprecated since 1.29.
 210 * $wgLogoHD has been updated to support svg images and uses $wgLogo where
 211   possible for fallback images such as png.
 212 * (T44246) $wgFilterLogTypes will no longer ignore 'patrol' when user does not
 213   have the right to mark things patrolled.
 214 * Wikis that contain imported revisions or CentralAuth global blocks should run
 215   maintenance/cleanupUsersWithNoId.php.
 216 * The configuration settings $wgResourceLoaderMinifierStatementsOnOwnLine and
 217   $wgResourceLoaderMinifierMaxLineLength, deprecated since 1.27, were removed.
 218 * (T180921) $wgReferrerPolicy now supports having fallbacks for browsers that
 219   are not using the latest version of the Referrer Policy specification.
 220 * $wgFragmentMode is now set to [ 'legacy', 'html5' ] by default. This is a
 221   first step of migration to human-readable section IDs that will later result
 222   in 'html5' being the default mode.
 223 * CACHE_ACCEL now only supports APC(u) or WinCache. XCache support was removed
 224   as upstream is inactive and has no plans to move to PHP 7.
 225 * The old CategorizedRecentChanges feature, including its related configuration
 226   option $wgAllowCategorizedRecentChanges, has been removed.
 227 * (T188472) The 'comma' value for $wgArticleCountMethod is no longer supported
 228   for performance reasons, and installations with this setting will now work as
 229   if it was configured with 'any'.
 230 * (T185753) MediaWiki now defaults to using RemexHtml to tidy up user input,
 231   rather than being off by default. If you wish to disable HTML tidying
 232   entirely, set $wgTidyConfig to null; if you wish to use the old, deprecated
 233   Tidy external binary, both set $wgTidyConfig to null and $wgUseTidy to true.
 234 * $wgLogAutopatrol now defaults to false instead of true.
 235 * $wgValidateAllHtml was removed and will be ignored.
 236 * $wgScriptExtension, deprecated and ignored since 1.25, was removed. See the
 237   1.25 release notes for more information.
 238 * $wgUseAjax is now marked as deprecated, just like the deprecated AJAX
 239   framework that it enables. Some extensions mistakenly used this to check
 240   whether any AJAX functionality at all should be enabled, further making this
 241   problematic to retain.
 242 * $wgDBmysql5 is now deprecated, and will be removed in a future version. It
 243   has been marked as experimental ever since it was introduced.
 244 * Fix $magicWords for the Sanskrit language
 245
 246 === New features in 1.31 ===
 247 * (T76554) User sub-pages named ….json are now protected in the same way that
 248   ….js and ….css pages are, so that configuration options can safely be placed
 249   there.
 250 * Wikimedia\Rdbms\IDatabase->select() and similar methods now support joins
 251   with parentheses for grouping.
 252 * As a first pass in standardizing dialog boxes across the MediaWiki product,
 253   Html class now provides helper methods for messageBox, successBox, errorBox
 254   and warningBox generation.
 255 * (T9240) Imports will now record unknown (and, optionally, known) usernames in
 256   a format like "iw>Example".
 257 * (T20209) Linker (used on history pages, log pages, and so on) will display
 258   usernames formed like "iw>Example" as interwiki links, as if by wikitext like
 259   [[iw:User:Example|iw>Example]].
 260 * (T111605) The 'ImportHandleUnknownUser' hook allows extensions to auto-create
 261   users during an import.
 262 * Added a hook, ParserOutputPostCacheTransform, to allow extensions to affect
 263   the ParserOutput::getText() post-cache transformations.
 264 * Added a hook, UploadForm:getInitialPageText, to allow extensions to alter the
 265   initial page text for file uploads.
 266 * (T181651) The info page for File pages now displays the file's base-16 SHA1
 267   hash value in the table of basic information.
 268 * Style tags with a 'data-mw-deduplicate' attribute will be deduplicated as a
 269   ParserOutput::getText() post-cache transformation. This may be disabled by
 270   passing 'deduplicateStyles' => false to that method.
 271 * The identity of the logged-in or IP "actor" for logged actions is being moved
 272   into a new actor table, with the rows in tables such as revision and logging
 273   referring to the actor ID instead of storing the user ID and name/IP in
 274   every row.
 275   * This is currently gated by $wgActorTableSchemaMigrationStage. Most wikis
 276     can set this to MIGRATION_NEW and run maintenance/migrateActors.php as
 277     soon as any necessary extensions are updated.
 278   * Most code accessing rows for logged actions from the database should use
 279     the relevant getQueryInfo() methods to get the information needed to build
 280     the SQL query. The ActorMigration class may also be used to get feature
 281     -flagged information needed to access actor-related fields during the
 282     migration period.
 283 * Added Wikimedia\Rdbms\IDatabase::cancelAtomic(), to roll back an atomic
 284   section without having to roll back the whole transaction.
 285 * Wikimedia\Rdbms\IDatabase::doAtomicSection(), non-native ::insertSelect(),
 286   and non-MySQL ::replace() and ::upsert() no longer roll back the whole
 287   transaction on failure.
 288 * (T189785) Added a monthly heartbeat ping to the pingback feature.
 289 * The CLI installer (maintenance/install.php) learned to detect and include
 290   extensions. Pass --with-extensions to enable that feature.
 291 * (T184791) rc_patrolled now has three states: "0" for unpatrolled,
 292   "1" for manually patrolled and "2" for autopatrolled actions.
 293 * Extensions can now set their type to "editor" if they provide an editor or
 294   enhance the editing experience.
 295 * Extensions can use a PSR-4 autoloader by setting an "AutoloadNamespaces"
 296   property in extension.json. See the documentation at
 297   <https://mediawiki.org/wiki/Manual:Extension.json/Schema#AutoloadNamespaces>
 298   for more details and an example.
 299 * (T19099) Tabs which link to pages that don't exist (like those to uncreated
 300   discussion pages) now have a tooltip to indicate state, not just colour.
 301
 302 === External library changes in 1.31 ===
 303 * pear/mail, pear/mail_mime and pear/mail_mime-decode have been moved from
 304   suggested to required. These packages now must be installed via composer
 305   and not via PEAR itself.
 306
 307 ==== Upgraded external libraries ====
 308 * Updated jquery.chosen from v0.9.14 to v1.8.2.
 309 * Updated composer/spdx-licenses from 1.1.4 to 1.3.0 (development dependency).
 310 * Updated nikic/php-parser from 2.1.0 to 3.1.3 (development dependency).
 311 * Updated wikimedia/ip-set from 1.1.0 to 1.2.0.
 312 * Updated wikimedia/relpath from 2.0.0 to 2.1.1.
 313 * Updated wikimedia/running-stat from 1.1.0 to 1.2.0.
 314 * Updated wikimedia/wrappedstring from 2.2.0 to 2.3.0.
 315 * Updated mediawiki/at-ease from 1.1.0 to 1.2.0.
 316 * Updated wikimedia/php-session-serializer from 1.0.4 to 1.0.6.
 317 * Updated wikimedia/remex-html from 1.0.2 to 1.0.3.
 318 * Updated wikimedia/html-formatter from 1.0.1 to 1.0.2.
 319
 320 ==== New external libraries ====
 321 * Added wikimedia/object-factory 1.0.0
 322
 323 ==== Removed and replaced external libraries ====
 324 * (T17845) The deprecated 'jquery.badge' module was removed.
 325 * The deprecated 'jquery.autoEllipsis' module was removed. Use the CSS
 326   text-overflow property instead.
 327 * The deprecated 'jquery.placeholder' module was removed.
 328 * The deprecated 'jquery.appear' module was removed. Use the
 329   'mediawiki.viewport' module instead.
 330 * mediawiki/at-ease was replaced with wikimedia/at-ease.
 331
 332 === Bug fixes in 1.31 ===
 333 * (T90902) Non-breaking space in header ID breaks anchor.
 334 * (T189375) CSSMin now allows quoted urls in `url()` syntax to start with a
 335   space.
 336 * (T2087, T10897, T87753, T174639) Whitespace created by category and language
 337   links is now stripped rather than leaving blank lines in odd places.
 338 * (T3780) Uploads with UTF-8 names now work on PHP7.1+ on Windows servers.
 339 * (T182366) UploadBase::checkXMLEncodingMissmatch() now works on PHP 7.1+
 340
 341 === Action API changes in 1.31 ===
 342 * (T185058) The 'name' value to tgprop for action=query&list=tags has been
 343   removed. It has never made a difference in the output, the name was always
 344   returned regardless.
 345 * The 'watch' and 'unwatch' parameters for action=move have been removed. They
 346   were deprecated and also accidentally nonfunctional since 1.17 in 2010. Use
 347   'watchlist' instead.
 348
 349 === Action API internal changes in 1.31 ===
 350 * ApiBase::getProfileDBTime, deprecated since 1.25, was removed.
 351 * ApiBase::getModuleProfileName, deprecated since 1.25, was removed.
 352 * ApiBase::getProfileTime, deprecated since 1.25, was removed.
 353
 354 === Languages updated in 1.31 ===
 355 MediaWiki supports over 350 languages. Many localisations are updated
 356 regularly. Below only new and removed languages are listed, as well as
 357 changes to languages because of Phabricator reports.
 358
 359 * (T180052) Mirandese (mwl) now supports gendered NS_USER/NS_USER_TALK.
 360 * (T182305) New language support: Nyungar (nys).
 361 * (T186359) New language support: Siberian Tatar [cебертатар] (sty).
 362 * (T186635) New language support: Guianan Creole (gcr).
 363 * (T186647) New language support: Kumyk [къумукъ] (kum).
 364 * (T187750) New language support: Spanish formal address (es-formal).
 365 * (T187824) New language support: Hungarian formal address (hu-formal).
 366 * (T189127) New language support: Gorontalo (gor).
 367
 368 === Breaking changes in 1.31 ===
 369 * MessageBlobStore::insertMessageBlob(), deprecated in 1.27, was removed.
 370 * The OutputPage class constructor now requires a context parameter.
 371   Instantiating without context was deprecated in 1.18.
 372 * The mw.page JavaScript singleton, deprecated in 1.30, was removed.
 373 * Article::getLastPurgeTimestamp(), WikiPage::getLastPurgeTimestamp(), and the
 374   related WikiPage::PURGE_* constants, deprecated in 1.29, were removed.
 375 * The Article::selectFields(), ::onArticleCreate(), ::onArticleDelete(), and
 376   ::onArticleEdit() methods, deprecated in 1.24, were removed.
 377 * Installer::locateExecutable() and ::locateExecutableInDefaultPaths() were
 378   removed. Use ExecutableFinder::findInDefaultPaths() instead.
 379 * The deprecated MW_DIFF_VERSION constant was removed.
 380   DifferenceEngine::MW_DIFF_VERSION should be used instead.
 381 * Due to significant refactoring, method ContribsPager::getUserCond() that had
 382   no access restriction has been removed.
 383 * The Block class will no longer accept usable-but-missing usernames for
 384   'byText' or ->setBlocker(). Callers should either ensure the blocker exists
 385   locally or use a new interwiki-format username like "iw>Example".
 386 * The following methods and constants from the WatchedItem class, which were
 387   deprecated in 1.27, have been removed:
 388   * WatchedItem::getTitle()
 389   * WatchedItem::fromUserTitle()
 390   * WatchedItem::addWatch()
 391   * WatchedItem::removeWatch()
 392   * WatchedItem::isWatched()
 393   * WatchedItem::duplicateEntries()
 394   * WatchedItem::IGNORE_USER_RIGHTS
 395   * WatchedItem::CHECK_USER_RIGHTS
 396   * WatchedItem::DEPRECATED_USAGE_TIMESTAMP
 397 * The $statementsOnOwnLine parameter of JavaScriptMinifier::minify was removed.
 398   $wgResourceLoaderMinifierStatementsOnOwnLine, the corresponding configuration
 399   variable, has been deprecated since 1.27 and was removed as well.
 400 * The $maxLineLength parameter of JavaScriptMinifier::minify was removed.
 401   $wgResourceLoaderMinifierMaxLineLength, the corresponding configuration
 402   variable, has been deprecated since 1.27 and was removed as well.
 403 * The HtmlFormatter class, deprecated in 1.27, was removed. The namespaced
 404   HtmlFormatter\HtmlFormatter class should be used instead.
 405 * The driver 'mysql' for MySQL, deprecated in MediaWiki 1.30, has been removed.
 406   The driver has been deprecated since PHP 5.5 and was removed in PHP 7.0. The
 407   default driver for MySQL has been 'mysqli' since MediaWiki 1.22.
 408 * The following properties of PreparedEdit were deprecated in 1.21 and have
 409   been removed:
 410   * PreparedEdit->newText
 411   * PreparedEdit->oldText
 412   * PreparedEdit->pst
 413 * ParserOutput objects which are generated using a non-default value for
 414   ParserOptions::setWrapOutputClass() can no longer be added to the parser
 415   cache.
 416 * The following deprecated methods from the OutputPage class have been removed:
 417   * OutputPage::addExtensionStyle(); deprecated in 1.27
 418   * OutputPage::getExtStyle(); deprecated in 1.27
 419   * OutputPage::setETag(); deprecated in 1.28 (obsolete no-op)
 420   * OutputPage::setSquidMaxage(); deprecated in 1.27
 421   * OutputPage::readOnlyPage(); deprecated in 1.25
 422   * OutputPage::rateLimited(); deprecated in 1.25
 423   * Additionally, the protected OutputPage::$mExtStyles array, only accessed
 424     through the above and with no known uses, was removed.
 425 * The no-op method Skin::showIPinHeader(), deprecated in 1.27, was removed.
 426 * The following variables and methods in EditPage, deprecated in MediaWiki 1.30,
 427   were removed:
 428   * $isCssJsSubpage — use ::isUserConfigPage()
 429   * $isCssSubpage — use ::isUserCssConfigPage()
 430   * $isJsSubpage — use ::isUserJsConfigPage()
 431   * $isWrongCaseCssJsPage – use ::isWrongCaseUserConfigPage()
 432   * ::getSummaryInput() – use ::getSummaryInputWidget()
 433   * ::getSummaryInputOOUI() – use ::getSummaryInputWidget()
 434   * ::getCheckboxes() – use ::getCheckboxesWidget() or
 435       ::getCheckboxesDefinition()
 436   * ::getCheckboxesOOUI() – use ::getCheckboxesWidget() or
 437       ::getCheckboxesDefinition()
 438 * ResourceLoaderModule::getPosition(), deprecated in 1.29, has been removed.
 439 * In User, the cookie-related methods which were wrappers for the functions on
 440   the response object, and were deprecated in 1.27, have been removed:
 441   * ::setCookie()
 442   * ::clearCookie()
 443   * ::setExtendedLoginCookie()
 444   Note that User::setCookies() remains, and is not deprecated.
 445 * Also in User, some auth-related methods which were deprecated in 1.27 have
 446   been removed:
 447   * ::getEditTokenTimestamp() – use MediaWiki\Session\Token::getTimestamp()
 448   * ::getPasswordFactory() – create a PasswordFactory directly
 449   * ::passwordChangeInputAttribs()
 450 * The global functions wfProfileIn and wfProfileOut, deprecated in 1.25, have
 451   been removed.
 452 * SpecialPageFactory::getList(), deprecated in 1.24, has been removed. You can
 453   use ::getNames() instead.
 454 * OpenSearch::getOpenSearchTemplate(), deprecated in 1.25, has been removed. You
 455   can use ApiOpenSearch::getOpenSearchTemplate() instead.
 456 * The global function wfBaseConvert, deprecated in 1.27, has been removed. Use
 457   Wikimedia\base_convert() directly.
 458 * Calling Database::begin() explicitly during an implicit transaction or when
 459   DBO_TRX is set results in an exception. Calling Database::commit() explicitly
 460   for an implicit transaction also results in an exception. Previously these
 461   were logged as errors. The startAtomic() and endAtomic() methods, or
 462   AtomicSectionUpdate should be used instead.
 463 * The global function wfOutputHandler() was removed, use the its replacement
 464   MediaWiki\OutputHandler::handle() instead. The global function was only
 465   sometimes defined. Its replacement is always available via the autoloader.
 466 * ChangeTags::listExtensionActivatedTags and ::listExtensionDefinedTags,
 467   deprecated in 1.28, have been removed. Use ::listSoftwareActivatedTags() and
 468   ::listSoftwareDefinedTags() instead.
 469 * Title::getTitleInvalidRegex(), deprecated in 1.25, has been removed. You can
 470   use MediaWikiTitleCodec::getTitleInvalidRegex() instead.
 471 * HTMLForm & VFormHTMLForm::isVForm(), deprecated in 1.25, have been removed.
 472 * The ProfileSection class, deprecated in 1.25 and unused, has been removed.
 473 * The ResourceLoaderGetLessVars hook, deprecated in 1.30, has been removed. Use
 474   ResourceLoaderModule::getLessVars() to expose local variables instead of
 475   global ones.
 476 * As part of work to modernise user-generated content clean-up, a config option
 477   and some methods related to HTML validity were removed without deprecation.
 478   The public methods MWTidy::checkErrors() and the path through which it was
 479   called, TidyDriverBase::validate(), are removed, as are the testing methods
 480   MediaWikiTestCase::assertValidHtmlSnippet() and ::assertValidHtmlDocument().
 481   The $wgValidateAllHtml configuration option is removed and will be ignored.
 482 * Execution of external programs using MediaWiki\Shell\Command now applies
 483   the RESTRICT_DEFAULT Firejail restriction by default.
 484 * The ResourceLoaderModule::getHashMtime() and ::getDefinitionMtime() methods,
 485   deprecated in 1.26, were removed.
 486 * The deprecated 'mediawiki.widgets.CategorySelector' module alias was removed.
 487   Use the 'mediawiki.widgets.CategoryMultiselectWidget' module directly.
 488
 489 === Deprecations in 1.31 ===
 490 * The Revision class was deprecated in favor of RevisionStore, BlobStore, and
 491   RevisionRecord and its subclasses.
 492 * The global function wfBCP47 is deprecated in favour of LanguageCode::bcp47.
 493 * The global function wfCountDown is now deprecated in favor of
 494   Maintenance::countDown.
 495 * Several methods for returning lists of fields to select from the database
 496   have been deprecated in favor of similar methods that also return the tables
 497   to select from and the join conditions for those tables.
 498   * Block::selectFields() → Block::getQueryInfo()
 499   * RecentChange::selectFields() → RecentChange::getQueryInfo()
 500   * ArchivedFile::selectFields() → ArchivedFile::getQueryInfo()
 501   * LocalFile::selectFields() → LocalFile::getQueryInfo()
 502   * LocalFile::getCacheFields() with a prefix no longer works
 503   * LocalFile::getLazyCacheFields() with a prefix no longer works
 504   * OldLocalFile::selectFields() → OldLocalFile::getQueryInfo()
 505   * RecentChange::selectFields() → RecentChange::getQueryInfo()
 506   * Revision::userJoinCond() → Revision::getQueryInfo( [ 'user' ] )
 507   * Revision::selectUserFields() → Revision::getQueryInfo( [ 'user' ] )
 508   * Revision::pageJoinCond() → Revision::getQueryInfo( [ 'page' ] )
 509   * Revision::selectPageFields() → Revision::getQueryInfo( [ 'page' ] )
 510   * Revision::selectTextFields() → Revision::getQueryInfo( [ 'text' ] )
 511   * Revision::selectFields() → Revision::getQueryInfo()
 512   * Revision::selectArchiveFields() → Revision::getArchiveQueryInfo()
 513   * User::selectFields() → User::getQueryInfo()
 514   * WikiPage::selectFields() → WikiPage::getQueryInfo()
 515 * Revision::setUserIdAndName() was deprecated.
 516 * Access to TitleValue class properties was deprecated, the relevant getters
 517   should be used instead.
 518 * DifferenceEngine::getDiffBodyCacheKey() is deprecated. Subclasses should
 519   override DifferenceEngine::getDiffBodyCacheKeyParams() instead.
 520 * Use of Maintenance::error( $err, $die ) to exit script was deprecated. Use
 521   Maintenance::fatalError() instead.
 522 * Passing a ParserOptions object to OutputPage::parserOptions() is deprecated.
 523 * The RevisionInsertComplete hook is now deprecated; use instead the hook
 524   RevisionRecordInserted. RevisionInsertComplete is still called, but the second
 525   and third parameter will always be null. Hard deprecation is scheduled for 1.32.
 526 * The following methods that get and set ParserOutput state are deprecated.
 527   Callers should use the new stateless $options parameter to
 528   ParserOutput::getText() instead.
 529   * ParserOptions::getEditSection()
 530   * ParserOptions::setEditSection()
 531   * ParserOutput::getEditSectionTokens()
 532   * ParserOutput::setEditSectionTokens()
 533   * ParserOutput::getTOCEnabled()
 534   * ParserOutput::setTOCEnabled()
 535   * OutputPage::enableSectionEditLinks()
 536   * OutputPage::sectionEditLinksEnabled()
 537   * The public ParserOutput state fields $mTOCEnabled and $mEditSectionTokens
 538     are also deprecated.
 539 * License::getLicenses has been deprecated; use License::getLines instead.
 540 * QuickTemplate::setRef() was deprecated in favour of QuickTemplate::set().
 541   Setting template variables by reference allowed violating the principle of
 542   data being immutable once added to the skin template. In practice, this method
 543   was not being used for that. Rather, setRef() existed as memory optimisation
 544   for PHP 4.
 545 * QuickTemplate::setTranslator() and MediaWikiI18N::set() were deprecated in
 546   favour of Skin::msg() parameters.
 547 * MediaWikiI18N::translate() was deprecated in favour of Skin::msg() or
 548   wfMessage().
 549 * Passing false to ParserOptions::setWrapOutputClass() is deprecated. Use the
 550   'unwrap' transform to ParserOutput::getText() instead.
 551 * \ObjectFactory (no namespace) is deprecated, the namespaced class
 552   \Wikimedia\ObjectFactory from the wikimedia/object-factory library should be
 553   used instead.
 554 * CommentStore::newKey is deprecated. Instead, get an instance from
 555   MediaWikiServices.
 556 * The following CommentStore methods have had their signatures changed to
 557   introduce a $key parameter, usage of the methods on instances retrieved from
 558   CommentStore::newKey will remain unchanged but deprecated:
 559   * CommentStore::getFields
 560   * CommentStore::getJoin
 561   * CommentStore::getComment
 562   * CommentStore::getCommentLegacy
 563   * CommentStore::insert
 564   * CommentStore::insertWithTemplate
 565 * The following methods in Title have been renamed, and the old ones are
 566   deprecated:
 567   * Title::getSkinFromCssJsSubpage – use ::getSkinFromConfigSubpage
 568   * Title::isCssOrJsPage – use ::isSiteConfigPage
 569   * Title::isCssJsSubpage – use ::isUserConfigPage
 570   * Title::isCssSubpage – use ::isUserCssConfigPage
 571   * Title::isJsSubpage – use ::isUserJsConfigPage
 572 * The following methods related to caching of half-parsed HTML were deprecated:
 573   * Parser::serializeHalfParsedText()
 574   * Parser::unserializeHalfParsedText()
 575   * Parser::isValidHalfParsedText()
 576   * StripState::getSubState()
 577   * StripState::merge()
 578 * The DeferredStringifier class is deprecated, use Message::listParam() instead.
 579 * The type string for the parameter $lang of DateFormatter::getInstance is
 580   deprecated.
 581 * Wikimedia\Rdbms\SavepointPostgres is deprecated.
 582 * The DO_MAINTENANCE constant is deprecated. RUN_MAINTENANCE_IF_MAIN should be
 583   used instead.
 584 * The function wfShellWikiCmd() has been deprecated, use
 585   MediaWiki\Shell::makeScriptCommand().
 586 * In the future, the hooks 'PreferencesFormPreSave' and 'PreferencesGetLegend'
 587   will be allowed to provide any HTMLForm object rather than PreferencesForm.
 588
 589 === Other changes in 1.31 ===
 590 * Browser support for Internet Explorer 10 was lowered from Grade A to Grade C.
 591 * Browser support for Opera 12 and older was dropped entirely. Opera 15+
 592   continues at Grade A.
 593 * Multi-content-revision capability was introduced into the storage layer. See
 594   <https://mediawiki.org/wiki/Requests_for_comment/Multi-Content_Revisions>.
 595 * The "free" CSS class is now only applied to unbracketed URLs in wikitext.
 596   Links written using square brackets will get the class "text" not "free".
 597 * RFC 157418: Whitespace is trimmed from wikitext headings, wikitext list items,
 598   wikitext table captions, wikitext table headings, wikitext table cells. HTML
 599   headings, HTML list items, HTML table captions, HTML table headings, HTML
 600   table cells will not have this trimming behavior.
 601
 602 == Compatibility ==
 603 MediaWiki 1.31 requires PHP 7.0.13 or later. Although HHVM 3.18.5 or later is
 604 supported, it is generally advised to use PHP 7.0.13 or later for long term
 605 support. MediaWiki requires that the mbstring, xml, ctype, json, iconv and
 606 fileinfo PHP extensions are loaded to work.
 607
 608 MySQL/MariaDB is the recommended DBMS. PostgreSQL or SQLite can also be used,
 609 but support for them is somewhat less mature. There is experimental support for
 610 Oracle and Microsoft SQL Server.
 611
 612 The supported versions are:
 613
 614 * MySQL 5.5.8 or later
 615 * PostgreSQL 9.2 or later
 616 * SQLite 3.3.7 or later
 617 * Oracle 9.0.1 or later
 618 * Microsoft SQL Server 2005 (9.00.1399)
 619
 620 == Upgrading ==
 621 1.31 has several database changes since 1.30, and will not work without schema
 622 updates. Note that due to changes to some very large tables like the revision
 623 table, the schema update may take quite long (minutes on a medium sized site,
 624 many hours on a large site).
 625
 626 Don't forget to always back up your database before upgrading!
 627
 628 See the file UPGRADE for more detailed upgrade instructions, including
 629 important information when upgrading from versions prior to 1.11.
 630
 631 For notes on 1.30.x and older releases, see HISTORY.
 632
 633 == Online documentation ==
 634 Documentation for both end-users and site administrators is available on
 635 MediaWiki.org, and is covered under the GNU Free Documentation License (except
 636 for pages that explicitly state that their contents are in the public domain):
 637
 638        https://www.mediawiki.org/wiki/Special:MyLanguage/Documentation
 639
 640 == Mailing list ==
 641 A mailing list is available for MediaWiki user support and discussion:
 642
 643        https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
 644
 645 A low-traffic announcements-only list is also available:
 646
 647        https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce
 648
 649 It's highly recommended that you sign up for one of these lists if you're
 650 going to run a public MediaWiki, so you can be notified of security fixes.
 651
 652 == IRC help ==
 653 There's usually someone online in #mediawiki on irc.freenode.net.