Include bot password app ID in audit data
[lhc/web/wiklou.git] / RELEASE-NOTES-1.33
1 == MediaWiki 1.33 ==
2
3 THIS IS NOT A RELEASE YET
4
5 MediaWiki 1.33 is an alpha-quality branch and is not recommended for use in
6 production.
7
8 === Configuration changes in 1.33 ===
9
10 ==== New configuration ====
11 * $wgEnablePartialBlocks – This enables the Partial Blocks feature, which gives
12 accounts with block permissions the ability to block users, IPs, and IP ranges
13 from editing specific pages, while allowing them to edit the rest of the wiki.
14 * $wgMediaInTargetLanguage – whether multilingual images should be dispalyed in
15 the current parse language where available.
16
17 ==== Changed configuration ====
18 * Some external link searches will not work correctly until update.php (or
19 refreshExternallinksIndex.php) is run. These include searches for links using
20 IP addresses, internationalized domain names, and possibly mailto links.
21 * (T193868) $wgChangeTagsSchemaMigrationStage — This temporary setting, added in
22 MediaWiki 1.32, now defaults to MIGRATION_NEW instead of MIGRATION_WRITE_BOTH.
23 * …
24
25 ==== Removed configuration ====
26 * (T199334) $wgTagStatisticsNewTable — This temporary setting, added in
27 MediaWiki 1.32, has now been removed. When loading Special:Tags, MediaWiki
28 will now always use the `change_tag_def` instead of the `change_tag` table.
29 * MediaWiki now always tidies user output, and most related
30 configuration has been removed. Thus $wgUseTidy, $wgTidyBin,
31 $wgTidyConf, $wgTidyOpts, $wgTidyInternal, and $wgDebugTidy, all
32 deprecated since 1.26, have now all been removed. The $wgTidyConfig
33 setting remains only for Remex experimental features or debugging.
34 * …
35
36 === New features in 1.33 ===
37 * (T96041) __EXPECTUNUSEDCATEGORY__ on a category page causes the category
38 to be hidden on Special:UnusedCategories.
39 * Add PasswordPolicy to check the password isn't in the large blacklist.
40 * The AuthManagerLoginAuthenticateAudit hook has a new parameter for
41 additional information about the authentication event.
42 * …
43
44 === External library changes in 1.33 ===
45
46 ==== New external libraries ====
47 * Added wikimedia/password-blacklist 0.1.4.
48 * …
49 * Added guzzlehttp/guzzle 6.3.3 and dependents:
50 * guzzlehttp/promises 1.3.1
51 * guzzlehttp/psr7 1.5.0
52 * psr/http-message 1.0.1
53 * ralouphie/getallheaders 2.0.5
54
55 ==== Changed external libraries ====
56 * Updated wikimedia/xmp-reader from 0.6.0 to 0.6.1.
57 * Updated wikimedia/scoped-callback from 2.0.0 to 3.0.0.
58 * …
59
60 ==== Removed external libraries ====
61 * …
62
63 === Bug fixes in 1.33 ===
64 * …
65
66 === Action API changes in 1.33 ===
67 * (T198913) Added 'ApiOptions' hook.
68 * The JSON formatversion=2 is no longer experimental.
69 * Internal API errors (those with code beginning "internal_api_error") will
70 include the exception class name in a data field named "errorclass".
71 * Class names are not guaranteed to remain stable, and in particular database
72 exceptions will now include the "Wikimedia\Rdbms\" prefix in the class name.
73 * The code including an exception class name is deprecated. In the future,
74 all internal errors will use code "internal_api_error".
75 * …
76
77 === Action API internal changes in 1.33 ===
78 * A number of deprecated methods for API documentation, intended for overriding
79 by extensions, are no longer called by MediaWiki, and will emit deprecation
80 notices if your extension attempts to use them:
81 * ApiBase::getDescription() (deprecated in 1.25)
82 * ApiBase::getParamDescription() (deprecated in 1.25)
83 * ApiBase::getExamples() (deprecated in 1.25)
84 * ApiBase::getDescriptionMessage() (deprecated in 1.30)
85 Additionally, the 'APIGetDescription' and 'APIGetParamDescription' hooks have
86 been removed, as their only use was to let extensions override values returned
87 by getDescription() and getParamDescription(), respectively.
88 * API error codes may only contain ASCII letters, numbers, underscore, and
89 hyphen. Methods such as ApiBase::dieWithError() and
90 ApiMessageTrait::setApiCode() will throw an InvalidArgumentException if
91 passed a bad code.
92 * …
93
94 === Languages updated in 1.33 ===
95 MediaWiki supports over 350 languages. Many localisations are updated regularly.
96 Below only new and removed languages are listed, as well as changes to languages
97 because of Phabricator reports.
98
99 * (T203908) Added language support for Eastern Pwo (kjp).
100
101 === Breaking changes in 1.33 ===
102 * The parameteter $lang in DifferenceEngine::setTextLanguage must be of type
103 Language. Other types are deprecated since 1.32.
104 * Skin::doEditSectionLink requires type Language for the parameter $lang.
105 The parameters $tooltip and $lang are mandatory. Omitting the parameters is
106 deprecated since 1.32.
107 * Language::truncate(), deprecated in 1.31, has been removed.
108 * UtfNormal, deprecated in 1.25, was removed. Use UtfNormal\Validator directly
109 instead.
110 * (T197179) In OOUI HTMLForm fields, the parameters 'notice', 'notice-messages',
111 and 'notice-message', which were deprecated in 1.32, were removed. Instead,
112 use 'help', 'help-message', and 'help-messages'.
113 * (T197179) HTMLFormField::getNotices(), deprecated in 1.32, was removed.
114 * The "Parsoid v1" compatibility mappings in ParsoidVirtualRESTService and
115 RestbaseVirtualRESTService, deprecated since 1.26, have been removed.
116 Use the RESTBase v1 or Parsoid v3 API instead.
117 * ParserOptions defaults 'tidy' to true now, since the untidy modes of the
118 parser are being deprecated and ParserOptions::getCanonicalOverrides()
119 has always been true at any rate.
120 * Support for disabling tidy and external tidy implementations has been removed.
121 This was deprecated in 1.32. The pure PHP Remex tidy implementation is now
122 used and no configuration is necessary.
123 * A number of deprecated methods for API documentation, intended for overriding
124 by extensions, are no longer called by MediaWiki, and will emit deprecation
125 notices if your extension attempts to use them:
126 * ApiBase::getDescription() (deprecated in 1.25)
127 * ApiBase::getParamDescription() (deprecated in 1.25)
128 * ApiBase::getExamples() (deprecated in 1.25)
129 * ApiBase::getDescriptionMessage() (deprecated in 1.30)
130 Additionally, the 'APIGetDescription' and 'APIGetParamDescription' hooks have
131 been removed, as their only use was to let extensions override values returned
132 by getDescription() and getParamDescription(), respectively.
133 * The authentication hooks 'AbortAutoAccount' 'AbortNewAccount', 'AbortLogin',
134 'LoginUserMigrated', 'UserCreateForm', and 'UserLoginForm', all deprecated by
135 the creation of AuthManager in 1.27, have been removed. This also means that
136 the FakeAuthTemplate and LoginForm classes are removed, that FakeAuthTemplate
137 is no longer passed into LoginSignupSpecialPage->getFieldDefinitions(), and
138 that LoginSignupSpecialPage->getBCFieldDefinitions() is removed.
139 * The 'jquery.localize' module, deprecated in 1.32, has been removed. Instead,
140 use 'jquery.i18n'.
141 * The hooks LanguageGetSpecialPageAliases and LanguageGetMagic, deprecated since
142 1.16, have now been removed. Instead, use $specialPageAliases or $magicWords
143 respectively in a $wgExtensionMessagesFiles file.
144 * The following methods of the Preferences class, deprecated in 1.31, have been
145 removed:
146 * getSaveBlacklist()
147 * loadPreferenceValues()
148 * getOptionFromUser()
149 * profilePreferences()
150 * skinPreferences()
151 * filesPreferences()
152 * datetimePreferences()
153 * renderingPreferences()
154 * editingPreferences()
155 * rcPreferences()
156 * watchlistPreferences()
157 * searchPreferences()
158 * miscPreferences()
159 * generateSkinOptions()
160 * getDateOptions()
161 * getImageSizes()
162 * getThumbSizes()
163 * validateSignature()
164 * cleanSignature()
165 * getTimezoneOptions()
166 * filterIntval()
167 * filterTimezoneInput()
168 * getTimeZoneList()
169 * mw.util.jsMessage(), deprecated in 1.20, was removed. Use mw.notify instead.
170 * (T61113) User::EDIT_TOKEN_SUFFIX was removed. It was deprecated since 1.27.
171
172 === Deprecations in 1.33 ===
173 * The configuration option $wgUseESI has been deprecated, and is expected
174 to be removed in a future release.
175 * The configuration option $wgSquidPurgeUseHostHeader has been deprecated,
176 and is expected to be removed in a future release.
177 * The configuration options $wgFixArabicUnicode and $wgFixMalayalamUnicode,
178 introduced in MW 1.17, have been deprecated. These fixes will always be
179 applied for Arabic and Malayalam in the future. Please enable these on
180 your local wiki (if you have them explicitly set to false) and run
181 maintenance/cleanupTitles.php to fix any existing page titles.
182 * The LegacyHookPreAuthenticationProvider class, deprecated since its creation
183 in 1.27 as part of the AuthManager re-write, now emits deprecation warnings.
184 This will help identify the issue if you added it to $wgAuthManagerConfig.
185 * wfSplitWikiId() is now deprecated. Cache key generation should have the wiki
186 domain ID as a key component and use makeGlobalKey().
187 * …
188
189 === Other changes in 1.33 ===
190 * (T208871) The hard-coded Google search form on the database error page was
191 removed.
192 * …
193
194 == Compatibility ==
195 MediaWiki 1.33 requires PHP 7.0.0 or later. Although HHVM 3.18.5 or later is
196 supported, it is generally advised to use PHP 7.0.0 or later for long term
197 support.
198
199 MySQL/MariaDB is the recommended DBMS. PostgreSQL or SQLite can also be used,
200 but support for them is somewhat less mature. There is experimental support for
201 Oracle and Microsoft SQL Server.
202
203 The supported versions are:
204
205 * MySQL 5.5.8 or later
206 * PostgreSQL 9.2 or later
207 * SQLite 3.3.7 or later
208 * Oracle 9.0.1 or later
209 * Microsoft SQL Server 2005 (9.00.1399)
210
211 == Upgrading ==
212 1.33 has several database changes since 1.32, and will not work without schema
213 updates. Note that due to changes to some very large tables like the revision
214 table, the schema update may take quite long (minutes on a medium sized site,
215 many hours on a large site).
216
217 Don't forget to always back up your database before upgrading!
218
219 See the file UPGRADE for more detailed upgrade instructions, including
220 important information when upgrading from versions prior to 1.11.
221
222 For notes on 1.32.x and older releases, see HISTORY.
223
224 == Online documentation ==
225 Documentation for both end-users and site administrators is available on
226 MediaWiki.org, and is covered under the GNU Free Documentation License (except
227 for pages that explicitly state that their contents are in the public domain):
228
229 https://www.mediawiki.org/wiki/Special:MyLanguage/Documentation
230
231 == Mailing list ==
232 A mailing list is available for MediaWiki user support and discussion:
233
234 https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
235
236 A low-traffic announcements-only list is also available:
237
238 https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce
239
240 It's highly recommended that you sign up for one of these lists if you're
241 going to run a public MediaWiki, so you can be notified of security fixes.
242
243 == IRC help ==
244 There's usually someone online in #mediawiki on irc.freenode.net.