Bump and prep 1.34.2

[lhc/web/wiklou.git] / RELEASE-NOTES-1.34

diff --git a/RELEASE-NOTES-1.34 b/RELEASE-NOTES-1.34
index 7ec6717..ed23b62 100644 (file)
--- a/RELEASE-NOTES-1.34
+++ b/RELEASE-NOTES-1.34
@@ -1,8 +1,32 @@
 = MediaWiki 1.34 =
 
 = MediaWiki 1.34 =
 

+== MediaWiki 1.34.2 ==
+
+This is a security and maintenance release of the MediaWiki 1.34 branch.
+
+=== Changes since MediaWiki 1.34.1 ===
+* (T247017) PasswordReset performance improvements.
+* The MultiHttpClient code will fallover to non-curl if curl_multi* is blocked.
+* (T250568) Work around change in SimpleXMLElement behavior introduced in PHP
+  7.3.17.
+* (T251789) Let $wgResourceLoaderMaxQueryLength=-1 fallback to default.
+* Remove some rotten and out of date documentation.
+* (T252311) Improvements to some older SQLite update patches.
+* (T240307) Minor fixes to extension.schema.v2.json and
+  extension.schema.v1.json.
+* (T238043) cleanupUsersWithNoId.php: Handle missing fields.
+* (T199474) Set rc_patrolled to 2 for autopatrolled changes in
+  rebuildrecentchanges.php.
+* (T229461) Update the change_tag table in rebuildrecentchanges.php.
+* (T249730) Password Reset Updates.
+* (T234450) Per-user concurrency in SpecialContributions can now be limited by
+  setting $wgPoolCounterConf['SpecialContributions'] appropriately.
+* (T248947) SECURITY: img_auth.php may leak private extension images into the
+  public cache.
+

 == MediaWiki 1.34.1 ==
 
 == MediaWiki 1.34.1 ==
 

-THIS IS NOT A RELEASE YET
+This is a security and maintenance release of the MediaWiki 1.34 branch.

 
 === Changes since MediaWiki 1.34.0 ===
 * (T211450) User: better error message when getActorId fails.
 
 === Changes since MediaWiki 1.34.0 ===
 * (T211450) User: better error message when getActorId fails.


@@ -16,6 +40,13 @@ THIS IS NOT A RELEASE YET
 * Update comment about PHP versions supported by The PHP Group.
 * (T247215) Fix output of RecountCategories::doWork().
 * Add check for page existence to view.php maintenance script.
 * Update comment about PHP versions supported by The PHP Group.
 * (T247215) Fix output of RecountCategories::doWork().
 * Add check for page existence to view.php maintenance script.

+* (T245149) Fix fetching login token from action=query&meta=tokens on private
+  wikis.
+* (T236509) SECURITY: Fix HTML escaping in UserGroupMembership::getLink().
+* (T232932) SECURITY: User content can redirect the logout button to different
+  URL.
+* (T246602) SECURITY: jquery.makeCollapsible allows applying event handler to
+  any CSS selector.

 
 == MediaWiki 1.34.0 ==
 
 
 == MediaWiki 1.34.0 ==