SECURITY: Disallow loading JS/CSS/Json subpages from unregistered users and log
[lhc/web/wiklou.git] / RELEASE-NOTES-1.31
1 == MediaWiki 1.31.2 ==
2
3 THIS IS NOT A RELEASE YET
4
5 === Changes since MediaWiki 1.31.1 ===
6 * (T204729) WatchedItemStore::countVisitingWatchersMultiple() shouldn't query all
7 titles when asked for none
8 * (T205967) Fix syntax error typo in postgres database upgrade file.
9 * (T200254) Add pear/Net_SMTP 1.7.3 to composer dependencies.
10 * (T206765) Load installer i18n when running update.php.
11 * (T109121) Remove deprecated pear/mail_mime-decode from composer suggested libraries.
12 * (T200595) Fix PHP 7.3 warnings of using "continue" in some scenarios instead
13 of "break".
14 * (T206979) Fix PHP 7.3 warnings of using "compact()" when some variables may
15 not be set.
16 * Fix PHP 7.3 warnings "preg_replace(): [...] invalid range in character class"
17 * (T207540) Include IP address in "Login for $1 succeeded" log entry.
18 * (T207541) Pass email address to mail().
19 * (T207603) User JS may no longer be loaded with mime type text/javascript if
20 there is no account associated with the username.
21
22 == MediaWiki 1.31.1 ==
23
24 This is a security and maintenance release of the MediaWiki 1.31 branch.
25
26 === Changes since MediaWiki 1.31.0 ===
27 * (T169545, CVE-2018-0503) SECURITY: $wgRateLimits entry for 'user' overrides
28 'newbie'.
29 * (T194605, CVE-2018-0505) SECURITY: BotPasswords can bypass CentralAuth's
30 account lock.
31 * (T199029, CVE-2018-13258) SECURITY: Tarball was missing .htaccess files.
32 * (T197229) Bundle Nuke extension, it was accidentally omitted.
33 * (T193995) Fix undefined patchPath() method call in parser tests.
34 * (T198687) Fix various selectFields methods to use the string 'NULL', not null.
35 * Special:BotPasswords now requires reauthentication.
36 * (T191608, T187638) Add 'logid' parameter to Special:Log.
37 * (T193829) Indicate when a Bot Password needs reset.
38 * (T198037) GitInfo: Don't try shelling out if it's disabled.
39 * (T151415) Log email changes.
40 * (T197206) Fix performance regression when multiple DB used without caching.
41 * (T197030) PHPSessionHandler: Suppress headers warnings in initialize().
42 * (T182377, T196793) Exif: Guard against uncountable tag values.
43 * (T200861) Fix total breakage of SQLite web upgrade.
44 * (T200864) Fix pingback over-reporting on non-MySQL databases
45 * (T202550) Unbreak SpecialListusersHeaderForm and SpecialListusersHeader
46 hooks.
47
48 === Changes since MediaWiki 1.31.0-rc.2 ===
49 * (T195783) Initialize PSR-4 namespaces at same stage as normal autoloader.
50 * (T196092) Hide MySQL binary/utf-8 charset option in the installer.
51 * (T196185) Don't allow setting $wgDBmysql5 in the installer.
52 * (T196125) php-memcached 3.0 (provided with PHP 7.0) is now supported.
53 * (T182366) UploadBase::checkXMLEncodingMissmatch() now works on PHP 7.1+
54 * (T118683) Fix exception from &$user deref on HHVM in the TitleMoveComplete hook.
55 * (T196672) The mtime of extension.json files is now able to be zero
56 * (T180403) Validate $length in padleft/padright parser functions.
57 * (T143790) Make $wgEmailConfirmToEdit only affect edit actions.
58
59 === Changes since MediaWiki 1.31.0-rc.0 ===
60 * (T33223) Drop archive.ar_text and ar_flags.
61 * Add default edit rate limit of 90 edits/minute for all users.
62 * (T187645) Use codepoint as tiebreaker when getting first-letters in
63 IcuCollation.
64 * (T191947) Don't shell during the installer if shelling out is disabled.
65 * (T194319) Improve duplicate config setting exception as part of extension
66 registration.
67 * (T195211) Don't require trailing slash in PSR-4 autoloader directory.
68 * (T186565) Fix PHP Notice from `ob_end_flush()` in `FileRepo::streamFile()`.
69 * Do not incorrectly hide namespace input field in the installer.
70 * (T186456) Refactor checks looking for PEAR maik libraries to be clearer.
71
72 === Important pre-upgrade notes for 1.31 ===
73 * If you're using MySQL, SQLite, or MSSQL, are not using update.php to apply
74 schema changes, and cannot have downtime to run migrateArchiveText.php and
75 apply patch-drop-ar_text.sql manually, you'll have to apply a default value
76 to the ar_text and ar_flags columns of the archive table or make those
77 columns nullable before upgrading to MediaWiki 1.31.
78 maintenance/archives/patch-nullable-ar_text.sql shows how to do this for MySQL.
79 * The CologneBlue and Modern skins are no longer bundled with the tarball. You
80 will need to remove the wfLoadSkin() calls from your LocalSettings.php or
81 download them separately
82 (<https://www.mediawiki.org/wiki/Special:SkinDistributor>).
83
84 === Configuration changes in 1.31 ===
85 * $wgEnableAPI and $wgEnableWriteAPI are now deprecated and will be removed in
86 a future version. The API is now considered to be stable, secure and
87 essential.
88 * $wgUsejQueryThree was removed, as it is now the default. This was documented
89 as a temporary variable during the migration period, deprecated since 1.29.
90 * $wgLogoHD has been updated to support svg images and uses $wgLogo where
91 possible for fallback images such as png.
92 * (T44246) $wgFilterLogTypes will no longer ignore 'patrol' when user does not
93 have the right to mark things patrolled.
94 * Wikis that contain imported revisions or CentralAuth global blocks should run
95 maintenance/cleanupUsersWithNoId.php.
96 * The configuration settings $wgResourceLoaderMinifierStatementsOnOwnLine and
97 $wgResourceLoaderMinifierMaxLineLength, deprecated since 1.27, were removed.
98 * (T180921) $wgReferrerPolicy now supports having fallbacks for browsers that
99 are not using the latest version of the Referrer Policy specification.
100 * $wgFragmentMode is now set to [ 'legacy', 'html5' ] by default. This is a
101 first step of migration to human-readable section IDs that will later result
102 in 'html5' being the default mode.
103 * CACHE_ACCEL now only supports APC(u) or WinCache. XCache support was removed
104 as upstream is inactive and has no plans to move to PHP 7.
105 * The old CategorizedRecentChanges feature, including its related configuration
106 option $wgAllowCategorizedRecentChanges, has been removed.
107 * (T188472) The 'comma' value for $wgArticleCountMethod is no longer supported
108 for performance reasons, and installations with this setting will now work as
109 if it was configured with 'any'.
110 * (T185753) MediaWiki now defaults to using RemexHtml to tidy up user input,
111 rather than being off by default. If you wish to disable HTML tidying
112 entirely, set $wgTidyConfig to null; if you wish to use the old, deprecated
113 Tidy external binary, both set $wgTidyConfig to null and $wgUseTidy to true.
114 * $wgLogAutopatrol now defaults to false instead of true.
115 * $wgValidateAllHtml was removed and will be ignored.
116 * $wgScriptExtension, deprecated and ignored since 1.25, was removed. See the
117 1.25 release notes for more information.
118 * $wgUseAjax is now marked as deprecated, just like the deprecated AJAX
119 framework that it enables. Some extensions mistakenly used this to check
120 whether any AJAX functionality at all should be enabled, further making this
121 problematic to retain.
122 * $wgDBmysql5 is now deprecated, and will be removed in a future version. It
123 has been marked as experimental ever since it was introduced.
124
125 === New features in 1.31 ===
126 * (T76554) User sub-pages named ….json are now protected in the same way that
127 ….js and ….css pages are, so that configuration options can safely be placed
128 there.
129 * Wikimedia\Rdbms\IDatabase->select() and similar methods now support joins
130 with parentheses for grouping.
131 * As a first pass in standardizing dialog boxes across the MediaWiki product,
132 Html class now provides helper methods for messageBox, successBox, errorBox
133 and warningBox generation.
134 * (T9240) Imports will now record unknown (and, optionally, known) usernames in
135 a format like "iw>Example".
136 * (T20209) Linker (used on history pages, log pages, and so on) will display
137 usernames formed like "iw>Example" as interwiki links, as if by wikitext like
138 [[iw:User:Example|iw>Example]].
139 * (T111605) The 'ImportHandleUnknownUser' hook allows extensions to auto-create
140 users during an import.
141 * Added a hook, ParserOutputPostCacheTransform, to allow extensions to affect
142 the ParserOutput::getText() post-cache transformations.
143 * Added a hook, UploadForm:getInitialPageText, to allow extensions to alter the
144 initial page text for file uploads.
145 * (T181651) The info page for File pages now displays the file's base-16 SHA1
146 hash value in the table of basic information.
147 * Style tags with a 'data-mw-deduplicate' attribute will be deduplicated as a
148 ParserOutput::getText() post-cache transformation. This may be disabled by
149 passing 'deduplicateStyles' => false to that method.
150 * The identity of the logged-in or IP "actor" for logged actions is being moved
151 into a new actor table, with the rows in tables such as revision and logging
152 referring to the actor ID instead of storing the user ID and name/IP in
153 every row.
154 * This is currently gated by $wgActorTableSchemaMigrationStage. Most wikis
155 can set this to MIGRATION_NEW and run maintenance/migrateActors.php as
156 soon as any necessary extensions are updated.
157 * Most code accessing rows for logged actions from the database should use
158 the relevant getQueryInfo() methods to get the information needed to build
159 the SQL query. The ActorMigration class may also be used to get feature
160 -flagged information needed to access actor-related fields during the
161 migration period.
162 * Added Wikimedia\Rdbms\IDatabase::cancelAtomic(), to roll back an atomic
163 section without having to roll back the whole transaction.
164 * Wikimedia\Rdbms\IDatabase::doAtomicSection(), non-native ::insertSelect(),
165 and non-MySQL ::replace() and ::upsert() no longer roll back the whole
166 transaction on failure.
167 * (T189785) Added a monthly heartbeat ping to the pingback feature.
168 * The CLI installer (maintenance/install.php) learned to detect and include
169 extensions. Pass --with-extensions to enable that feature.
170 * (T184791) rc_patrolled now has three states: "0" for unpatrolled,
171 "1" for manually patrolled and "2" for autopatrolled actions.
172 * Extensions can now set their type to "editor" if they provide an editor or
173 enhance the editing experience.
174 * Extensions can use a PSR-4 autoloader by setting an "AutoloadNamespaces"
175 property in extension.json. See the documentation at
176 <https://mediawiki.org/wiki/Manual:Extension.json/Schema#AutoloadNamespaces>
177 for more details and an example.
178 * (T19099) Tabs which link to pages that don't exist (like those to uncreated
179 discussion pages) now have a tooltip to indicate state, not just colour.
180
181 === External library changes in 1.31 ===
182 * pear/mail, pear/mail_mime and pear/mail_mime-decode have been moved from
183 suggested to required. These packages now must be installed via composer
184 and not via PEAR itself.
185
186 ==== Upgraded external libraries ====
187 * Updated jquery.chosen from v0.9.14 to v1.8.2.
188 * Updated composer/spdx-licenses from 1.1.4 to 1.3.0 (development dependency).
189 * Updated nikic/php-parser from 2.1.0 to 3.1.3 (development dependency).
190 * Updated wikimedia/ip-set from 1.1.0 to 1.2.0.
191 * Updated wikimedia/relpath from 2.0.0 to 2.1.1.
192 * Updated wikimedia/running-stat from 1.1.0 to 1.2.0.
193 * Updated wikimedia/wrappedstring from 2.2.0 to 2.3.0.
194 * Updated mediawiki/at-ease from 1.1.0 to 1.2.0.
195 * Updated wikimedia/php-session-serializer from 1.0.4 to 1.0.6.
196 * Updated wikimedia/remex-html from 1.0.2 to 1.0.3.
197 * Updated wikimedia/html-formatter from 1.0.1 to 1.0.2.
198
199 ==== New external libraries ====
200 * Added wikimedia/object-factory 1.0.0
201
202 ==== Removed and replaced external libraries ====
203 * (T17845) The deprecated 'jquery.badge' module was removed.
204 * The deprecated 'jquery.autoEllipsis' module was removed. Use the CSS
205 text-overflow property instead.
206 * The deprecated 'jquery.placeholder' module was removed.
207 * The deprecated 'jquery.appear' module was removed. Use the
208 'mediawiki.viewport' module instead.
209 * mediawiki/at-ease was replaced with wikimedia/at-ease.
210
211 === Bug fixes in 1.31 ===
212 * (T90902) Non-breaking space in header ID breaks anchor.
213 * (T189375) CSSMin now allows quoted urls in `url()` syntax to start with a
214 space.
215 * (T2087, T10897, T87753, T174639) Whitespace created by category and language
216 links is now stripped rather than leaving blank lines in odd places.
217 * (T3780) Uploads with UTF-8 names now work on PHP7.1+ on Windows servers.
218 * (T182366) UploadBase::checkXMLEncodingMissmatch() now works on PHP 7.1+
219
220 === Action API changes in 1.31 ===
221 * (T185058) The 'name' value to tgprop for action=query&list=tags has been
222 removed. It has never made a difference in the output, the name was always
223 returned regardless.
224 * The 'watch' and 'unwatch' parameters for action=move have been removed. They
225 were deprecated and also accidentally nonfunctional since 1.17 in 2010. Use
226 'watchlist' instead.
227
228 === Action API internal changes in 1.31 ===
229 * ApiBase::getProfileDBTime, deprecated since 1.25, was removed.
230 * ApiBase::getModuleProfileName, deprecated since 1.25, was removed.
231 * ApiBase::getProfileTime, deprecated since 1.25, was removed.
232
233 === Languages updated in 1.31 ===
234 MediaWiki supports over 350 languages. Many localisations are updated
235 regularly. Below only new and removed languages are listed, as well as
236 changes to languages because of Phabricator reports.
237
238 * (T180052) Mirandese (mwl) now supports gendered NS_USER/NS_USER_TALK.
239 * (T182305) New language support: Nyungar (nys).
240 * (T186359) New language support: Siberian Tatar [cебертатар] (sty).
241 * (T186635) New language support: Guianan Creole (gcr).
242 * (T186647) New language support: Kumyk [къумукъ] (kum).
243 * (T187750) New language support: Spanish formal address (es-formal).
244 * (T187824) New language support: Hungarian formal address (hu-formal).
245 * (T189127) New language support: Gorontalo (gor).
246
247 === Breaking changes in 1.31 ===
248 * MessageBlobStore::insertMessageBlob(), deprecated in 1.27, was removed.
249 * The OutputPage class constructor now requires a context parameter.
250 Instantiating without context was deprecated in 1.18.
251 * The mw.page JavaScript singleton, deprecated in 1.30, was removed.
252 * Article::getLastPurgeTimestamp(), WikiPage::getLastPurgeTimestamp(), and the
253 related WikiPage::PURGE_* constants, deprecated in 1.29, were removed.
254 * The Article::selectFields(), ::onArticleCreate(), ::onArticleDelete(), and
255 ::onArticleEdit() methods, deprecated in 1.24, were removed.
256 * Installer::locateExecutable() and ::locateExecutableInDefaultPaths() were
257 removed. Use ExecutableFinder::findInDefaultPaths() instead.
258 * The deprecated MW_DIFF_VERSION constant was removed.
259 DifferenceEngine::MW_DIFF_VERSION should be used instead.
260 * Due to significant refactoring, method ContribsPager::getUserCond() that had
261 no access restriction has been removed.
262 * The Block class will no longer accept usable-but-missing usernames for
263 'byText' or ->setBlocker(). Callers should either ensure the blocker exists
264 locally or use a new interwiki-format username like "iw>Example".
265 * The following methods and constants from the WatchedItem class, which were
266 deprecated in 1.27, have been removed:
267 * WatchedItem::getTitle()
268 * WatchedItem::fromUserTitle()
269 * WatchedItem::addWatch()
270 * WatchedItem::removeWatch()
271 * WatchedItem::isWatched()
272 * WatchedItem::duplicateEntries()
273 * WatchedItem::IGNORE_USER_RIGHTS
274 * WatchedItem::CHECK_USER_RIGHTS
275 * WatchedItem::DEPRECATED_USAGE_TIMESTAMP
276 * The $statementsOnOwnLine parameter of JavaScriptMinifier::minify was removed.
277 $wgResourceLoaderMinifierStatementsOnOwnLine, the corresponding configuration
278 variable, has been deprecated since 1.27 and was removed as well.
279 * The $maxLineLength parameter of JavaScriptMinifier::minify was removed.
280 $wgResourceLoaderMinifierMaxLineLength, the corresponding configuration
281 variable, has been deprecated since 1.27 and was removed as well.
282 * The HtmlFormatter class, deprecated in 1.27, was removed. The namespaced
283 HtmlFormatter\HtmlFormatter class should be used instead.
284 * The driver 'mysql' for MySQL, deprecated in MediaWiki 1.30, has been removed.
285 The driver has been deprecated since PHP 5.5 and was removed in PHP 7.0. The
286 default driver for MySQL has been 'mysqli' since MediaWiki 1.22.
287 * The following properties of PreparedEdit were deprecated in 1.21 and have
288 been removed:
289 * PreparedEdit->newText
290 * PreparedEdit->oldText
291 * PreparedEdit->pst
292 * ParserOutput objects which are generated using a non-default value for
293 ParserOptions::setWrapOutputClass() can no longer be added to the parser
294 cache.
295 * The following deprecated methods from the OutputPage class have been removed:
296 * OutputPage::addExtensionStyle(); deprecated in 1.27
297 * OutputPage::getExtStyle(); deprecated in 1.27
298 * OutputPage::setETag(); deprecated in 1.28 (obsolete no-op)
299 * OutputPage::setSquidMaxage(); deprecated in 1.27
300 * OutputPage::readOnlyPage(); deprecated in 1.25
301 * OutputPage::rateLimited(); deprecated in 1.25
302 * Additionally, the protected OutputPage::$mExtStyles array, only accessed
303 through the above and with no known uses, was removed.
304 * The no-op method Skin::showIPinHeader(), deprecated in 1.27, was removed.
305 * The following variables and methods in EditPage, deprecated in MediaWiki 1.30,
306 were removed:
307 * $isCssJsSubpage — use ::isUserConfigPage()
308 * $isCssSubpage — use ::isUserCssConfigPage()
309 * $isJsSubpage — use ::isUserJsConfigPage()
310 * $isWrongCaseCssJsPage – use ::isWrongCaseUserConfigPage()
311 * ::getSummaryInput() – use ::getSummaryInputWidget()
312 * ::getSummaryInputOOUI() – use ::getSummaryInputWidget()
313 * ::getCheckboxes() – use ::getCheckboxesWidget() or
314 ::getCheckboxesDefinition()
315 * ::getCheckboxesOOUI() – use ::getCheckboxesWidget() or
316 ::getCheckboxesDefinition()
317 * ResourceLoaderModule::getPosition(), deprecated in 1.29, has been removed.
318 * In User, the cookie-related methods which were wrappers for the functions on
319 the response object, and were deprecated in 1.27, have been removed:
320 * ::setCookie()
321 * ::clearCookie()
322 * ::setExtendedLoginCookie()
323 Note that User::setCookies() remains, and is not deprecated.
324 * Also in User, some auth-related methods which were deprecated in 1.27 have
325 been removed:
326 * ::getEditTokenTimestamp() – use MediaWiki\Session\Token::getTimestamp()
327 * ::getPasswordFactory() – create a PasswordFactory directly
328 * ::passwordChangeInputAttribs()
329 * The global functions wfProfileIn and wfProfileOut, deprecated in 1.25, have
330 been removed.
331 * SpecialPageFactory::getList(), deprecated in 1.24, has been removed. You can
332 use ::getNames() instead.
333 * OpenSearch::getOpenSearchTemplate(), deprecated in 1.25, has been removed. You
334 can use ApiOpenSearch::getOpenSearchTemplate() instead.
335 * The global function wfBaseConvert, deprecated in 1.27, has been removed. Use
336 Wikimedia\base_convert() directly.
337 * Calling Database::begin() explicitly during an implicit transaction or when
338 DBO_TRX is set results in an exception. Calling Database::commit() explicitly
339 for an implicit transaction also results in an exception. Previously these
340 were logged as errors. The startAtomic() and endAtomic() methods, or
341 AtomicSectionUpdate should be used instead.
342 * The global function wfOutputHandler() was removed, use the its replacement
343 MediaWiki\OutputHandler::handle() instead. The global function was only
344 sometimes defined. Its replacement is always available via the autoloader.
345 * ChangeTags::listExtensionActivatedTags and ::listExtensionDefinedTags,
346 deprecated in 1.28, have been removed. Use ::listSoftwareActivatedTags() and
347 ::listSoftwareDefinedTags() instead.
348 * Title::getTitleInvalidRegex(), deprecated in 1.25, has been removed. You can
349 use MediaWikiTitleCodec::getTitleInvalidRegex() instead.
350 * HTMLForm & VFormHTMLForm::isVForm(), deprecated in 1.25, have been removed.
351 * The ProfileSection class, deprecated in 1.25 and unused, has been removed.
352 * The ResourceLoaderGetLessVars hook, deprecated in 1.30, has been removed. Use
353 ResourceLoaderModule::getLessVars() to expose local variables instead of
354 global ones.
355 * As part of work to modernise user-generated content clean-up, a config option
356 and some methods related to HTML validity were removed without deprecation.
357 The public methods MWTidy::checkErrors() and the path through which it was
358 called, TidyDriverBase::validate(), are removed, as are the testing methods
359 MediaWikiTestCase::assertValidHtmlSnippet() and ::assertValidHtmlDocument().
360 The $wgValidateAllHtml configuration option is removed and will be ignored.
361 * Execution of external programs using MediaWiki\Shell\Command now applies
362 the RESTRICT_DEFAULT Firejail restriction by default.
363 * The ResourceLoaderModule::getHashMtime() and ::getDefinitionMtime() methods,
364 deprecated in 1.26, were removed.
365 * The deprecated 'mediawiki.widgets.CategorySelector' module alias was removed.
366 Use the 'mediawiki.widgets.CategoryMultiselectWidget' module directly.
367
368 === Deprecations in 1.31 ===
369 * The Revision class was deprecated in favor of RevisionStore, BlobStore, and
370 RevisionRecord and its subclasses.
371 * The global function wfBCP47 is deprecated in favour of LanguageCode::bcp47.
372 * The global function wfCountDown is now deprecated in favor of
373 Maintenance::countDown.
374 * Several methods for returning lists of fields to select from the database
375 have been deprecated in favor of similar methods that also return the tables
376 to select from and the join conditions for those tables.
377 * Block::selectFields() → Block::getQueryInfo()
378 * RecentChange::selectFields() → RecentChange::getQueryInfo()
379 * ArchivedFile::selectFields() → ArchivedFile::getQueryInfo()
380 * LocalFile::selectFields() → LocalFile::getQueryInfo()
381 * LocalFile::getCacheFields() with a prefix no longer works
382 * LocalFile::getLazyCacheFields() with a prefix no longer works
383 * OldLocalFile::selectFields() → OldLocalFile::getQueryInfo()
384 * RecentChange::selectFields() → RecentChange::getQueryInfo()
385 * Revision::userJoinCond() → Revision::getQueryInfo( [ 'user' ] )
386 * Revision::selectUserFields() → Revision::getQueryInfo( [ 'user' ] )
387 * Revision::pageJoinCond() → Revision::getQueryInfo( [ 'page' ] )
388 * Revision::selectPageFields() → Revision::getQueryInfo( [ 'page' ] )
389 * Revision::selectTextFields() → Revision::getQueryInfo( [ 'text' ] )
390 * Revision::selectFields() → Revision::getQueryInfo()
391 * Revision::selectArchiveFields() → Revision::getArchiveQueryInfo()
392 * User::selectFields() → User::getQueryInfo()
393 * WikiPage::selectFields() → WikiPage::getQueryInfo()
394 * Revision::setUserIdAndName() was deprecated.
395 * Access to TitleValue class properties was deprecated, the relevant getters
396 should be used instead.
397 * DifferenceEngine::getDiffBodyCacheKey() is deprecated. Subclasses should
398 override DifferenceEngine::getDiffBodyCacheKeyParams() instead.
399 * Use of Maintenance::error( $err, $die ) to exit script was deprecated. Use
400 Maintenance::fatalError() instead.
401 * Passing a ParserOptions object to OutputPage::parserOptions() is deprecated.
402 * The RevisionInsertComplete hook is now deprecated; use instead the hook
403 RevisionRecordInserted. RevisionInsertComplete is still called, but the second
404 and third parameter will always be null. Hard deprecation is scheduled for 1.32.
405 * The following methods that get and set ParserOutput state are deprecated.
406 Callers should use the new stateless $options parameter to
407 ParserOutput::getText() instead.
408 * ParserOptions::getEditSection()
409 * ParserOptions::setEditSection()
410 * ParserOutput::getEditSectionTokens()
411 * ParserOutput::setEditSectionTokens()
412 * ParserOutput::getTOCEnabled()
413 * ParserOutput::setTOCEnabled()
414 * OutputPage::enableSectionEditLinks()
415 * OutputPage::sectionEditLinksEnabled()
416 * The public ParserOutput state fields $mTOCEnabled and $mEditSectionTokens
417 are also deprecated.
418 * License::getLicenses has been deprecated; use License::getLines instead.
419 * QuickTemplate::setRef() was deprecated in favour of QuickTemplate::set().
420 Setting template variables by reference allowed violating the principle of
421 data being immutable once added to the skin template. In practice, this method
422 was not being used for that. Rather, setRef() existed as memory optimisation
423 for PHP 4.
424 * QuickTemplate::setTranslator() and MediaWikiI18N::set() were deprecated in
425 favour of Skin::msg() parameters.
426 * MediaWikiI18N::translate() was deprecated in favour of Skin::msg() or
427 wfMessage().
428 * Passing false to ParserOptions::setWrapOutputClass() is deprecated. Use the
429 'unwrap' transform to ParserOutput::getText() instead.
430 * \ObjectFactory (no namespace) is deprecated, the namespaced class
431 \Wikimedia\ObjectFactory from the wikimedia/object-factory library should be
432 used instead.
433 * CommentStore::newKey is deprecated. Instead, get an instance from
434 MediaWikiServices.
435 * The following CommentStore methods have had their signatures changed to
436 introduce a $key parameter, usage of the methods on instances retrieved from
437 CommentStore::newKey will remain unchanged but deprecated:
438 * CommentStore::getFields
439 * CommentStore::getJoin
440 * CommentStore::getComment
441 * CommentStore::getCommentLegacy
442 * CommentStore::insert
443 * CommentStore::insertWithTemplate
444 * The following methods in Title have been renamed, and the old ones are
445 deprecated:
446 * Title::getSkinFromCssJsSubpage – use ::getSkinFromConfigSubpage
447 * Title::isCssOrJsPage – use ::isSiteConfigPage
448 * Title::isCssJsSubpage – use ::isUserConfigPage
449 * Title::isCssSubpage – use ::isUserCssConfigPage
450 * Title::isJsSubpage – use ::isUserJsConfigPage
451 * The following methods related to caching of half-parsed HTML were deprecated:
452 * Parser::serializeHalfParsedText()
453 * Parser::unserializeHalfParsedText()
454 * Parser::isValidHalfParsedText()
455 * StripState::getSubState()
456 * StripState::merge()
457 * The DeferredStringifier class is deprecated, use Message::listParam() instead.
458 * The type string for the parameter $lang of DateFormatter::getInstance is
459 deprecated.
460 * Wikimedia\Rdbms\SavepointPostgres is deprecated.
461 * The DO_MAINTENANCE constant is deprecated. RUN_MAINTENANCE_IF_MAIN should be
462 used instead.
463 * The function wfShellWikiCmd() has been deprecated, use
464 MediaWiki\Shell::makeScriptCommand().
465 * In the future, the hooks 'PreferencesFormPreSave' and 'PreferencesGetLegend'
466 will be allowed to provide any HTMLForm object rather than PreferencesForm.
467
468 === Other changes in 1.31 ===
469 * Browser support for Internet Explorer 10 was lowered from Grade A to Grade C.
470 * Browser support for Opera 12 and older was dropped entirely. Opera 15+
471 continues at Grade A.
472 * Multi-content-revision capability was introduced into the storage layer. See
473 <https://mediawiki.org/wiki/Requests_for_comment/Multi-Content_Revisions>.
474 * The "free" CSS class is now only applied to unbracketed URLs in wikitext.
475 Links written using square brackets will get the class "text" not "free".
476 * RFC 157418: Whitespace is trimmed from wikitext headings, wikitext list items,
477 wikitext table captions, wikitext table headings, wikitext table cells. HTML
478 headings, HTML list items, HTML table captions, HTML table headings, HTML
479 table cells will not have this trimming behavior.
480
481 == Compatibility ==
482 MediaWiki 1.31 requires PHP 7.0.0 or later. Although HHVM 3.18.5 or later is
483 supported, it is generally advised to use PHP 7.0.0 or later for long term
484 support.
485
486 MySQL/MariaDB is the recommended DBMS. PostgreSQL or SQLite can also be used,
487 but support for them is somewhat less mature. There is experimental support for
488 Oracle and Microsoft SQL Server.
489
490 The supported versions are:
491
492 * MySQL 5.5.8 or later
493 * PostgreSQL 9.2 or later
494 * SQLite 3.3.7 or later
495 * Oracle 9.0.1 or later
496 * Microsoft SQL Server 2005 (9.00.1399)
497
498 == Upgrading ==
499 1.31 has several database changes since 1.30, and will not work without schema
500 updates. Note that due to changes to some very large tables like the revision
501 table, the schema update may take quite long (minutes on a medium sized site,
502 many hours on a large site).
503
504 Don't forget to always back up your database before upgrading!
505
506 See the file UPGRADE for more detailed upgrade instructions, including
507 important information when upgrading from versions prior to 1.11.
508
509 For notes on 1.30.x and older releases, see HISTORY.
510
511 == Online documentation ==
512 Documentation for both end-users and site administrators is available on
513 MediaWiki.org, and is covered under the GNU Free Documentation License (except
514 for pages that explicitly state that their contents are in the public domain):
515
516 https://www.mediawiki.org/wiki/Special:MyLanguage/Documentation
517
518 == Mailing list ==
519 A mailing list is available for MediaWiki user support and discussion:
520
521 https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
522
523 A low-traffic announcements-only list is also available:
524
525 https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce
526
527 It's highly recommended that you sign up for one of these lists if you're
528 going to run a public MediaWiki, so you can be notified of security fixes.
529
530 == IRC help ==
531 There's usually someone online in #mediawiki on irc.freenode.net.