X-Git-Url: https://git.heureux-cyclage.org/?a=blobdiff_plain;f=RELEASE-NOTES-1.27;h=def80ea8460ebbc180365ff3dc30d0b8cbbdc701;hb=18d790c863ea29211ee3638595fbc92212888688;hp=b1a4ccbf9ce860acd541d06af9497a791d601a33;hpb=d6668812dc888e84aa54024558ecaf1cc95ee340;p=lhc%2Fweb%2Fwiklou.git diff --git a/RELEASE-NOTES-1.27 b/RELEASE-NOTES-1.27 index b1a4ccbf9c..def80ea846 100644 --- a/RELEASE-NOTES-1.27 +++ b/RELEASE-NOTES-1.27 @@ -53,14 +53,39 @@ production. * (T48998) $wgArticlePath must now be either a full url, or start with a "/". * $wgRateLimitLog was removed; use $wgDebugLogGroups['ratelimit'] instead. * Deprecated API formats dbg, txt, and yaml have been removed. -* CLDRPluralRule* classes have been replaced with wikimedia/cldr-plural-rule-parser. +* CLDRPluralRule* classes have been replaced with + wikimedia/cldr-plural-rule-parser. * Removed $wgProfilePerHost, $wgUDPProfilerHost, $wgUDPProfilerPort, - $wgUDPProfilerFormatString, $wgStatsMethod, $wgAggregateStatsID, $wgStatsFormatString, - and $wgProfileCallTree (deprecated since 1.20). + $wgUDPProfilerFormatString, $wgStatsMethod, $wgAggregateStatsID, + $wgStatsFormatString, and $wgProfileCallTree (deprecated since 1.20). * For proper operation of LocalIdLookup with shared user tables, ensure that $wgSharedDB and $wgSharedTables are properly set even on the "central" wiki that all others are sharing from and that $wgLocalDatabases is set to the full list of sharing wikis on all those wikis. +* Massive overhaul to session handling: +** $wgSessionsInObjectCache is no longer supported and must be true, due to + MediaWiki\Session\SessionManager. $wgSessionHandler is similarly no longer + used. +** ObjectCacheSessionHandler is removed, replaced with + MediaWiki\Session\PhpSessionHandler. +** PHP session handling in general ($_SESSION, session_id(), and so on) is + deprecated. Use MediaWiki\Session\SessionManager instead. A new config + variable, $wgPHPSessionHandling, is available to cause use of $_SESSION to + issue a deprecation warning or to cause most PHP session handling to throw + exceptions. +** Deprecated UserSetCookies hook. Session-handling extensions should generally + be creating a custom subclass of CookieSessionProvider. Other extensions + messing with cookies can no longer count on user data being saved in cookies + versus other methods. +** Deprecated UserLoadFromSession hook, extensions should create a + MediaWiki\Session\SessionProvider. +** The User cannot be loaded from session until after Setup.php completes. + Attempts to do so will be ignored and the User will remain unloaded. +* MediaWiki will now auto-create users as necessary, removing the need for + extensions to do so. An 'autocreateaccount' right is added to allow + auto-creation when 'createaccount' is not granted to all users. +* Deprecated AuthPluginAutoCreate hook in favor of LocalUserCreated. +* Most cookie-handling methods in User are deprecated. === New features in 1.27 === * $wgDataCenterId and $wgDataCenterRoles where added, which will serve as @@ -96,11 +121,32 @@ production. authentication extensions. * $wgMaxUserDBWriteDuration added to limit huge user-generated transactions. Regular web request transactions that takes longer than this are aborted. -* Added a new hook, 'TitleMoveCompleting', which runs before a page move is committed. +* Added a new hook, 'TitleMoveCompleting', which runs before a page move is + committed. * $wgCdnReboundPurgeDelay was added to provide secondary delayed purges of URLs from CDN to mitigate DB replication lag and WAN cache purge lag. +* (T49162) Installer will default to setting CACHE_ACCEL as the main cache type + if it is available. +* It is now possible to patrol file uploads (both for new files and new versions + of existing files). Special:NewFiles has gained an option to filter by patrol + status. This functionality can be disabled using $wgUseFilePatrol. +* MediaWiki\Session infrastructure allows for easier use of session mechanisms + other than the usual cookies. +** SessionMetadata and SessionCheckInfo hooks allow for setting and checking + custom session metadata. +* Added MWGrants and associated configuration settings $wgGrantPermissions and + $wgGrantPermissionGroups to hold configuration for authentication features + such as OAuth that want to allow restricting the user rights a user may make + use of. +** If you're already using the OAuth extension, these new variables are + identical to (and will replace) $wgMWOAuthGrantPermissions and + $wgMWOAuthGrantPermissionGroups. +* Added MWRestrictions as a class to check restrictions on a WebRequest, e.g. + to assert that the request comes from a particular IP range. +* Added bot passwords, a rights-restricted login mechanism for API-using bots. === External library changes in 1.27 === + ==== Upgraded external libraries ==== * Updated oojs/oojs-ui from v0.12.12 to v0.13.3. * Updated composer/semver from v1.0.0 to v1.2.0. @@ -111,6 +157,7 @@ production. * Added wikimedia/cldr-plural-rule-parser v1.0.0. * Added wikimedia/relpath v1.0.3. * Added wikimedia/running-stat v1.1.0. +* Added wikimedia/php-session-serializer v1.0.3. ==== Removed and replaced external libraries ==== @@ -133,6 +180,9 @@ production. * The following response properties from action=login are deprecated, and may be removed in the future: lgtoken, cookieprefix, sessionid. Clients should handle cookies to properly manage session state. +* action=login transparently allows login using bot passwords. Clients should + merely need to change the username and password used after setting up a bot + password. === Action API internal changes in 1.27 === * ApiQueryORM removed. @@ -144,6 +194,8 @@ production. ApiQueryBase::keyPartToTitle() all removed (deprecated since 1.24). * ApiQueryBase::checkRowCount() was removed (deprecated since 1.24). * ApiQueryBase::getDirectionDescription() was removed (deprecated since 1.25). +* ApiQuery::getModules() was removed (deprecated since 1.21). +* ApiMain::getModules() was removed (deprecated since 1.21). === Languages updated in 1.27 === @@ -159,14 +211,15 @@ changes to languages because of Phabricator reports. ignore the 2nd and 3rd arguments (formerly $id and $commit). * Removed "loaderScripts" option from ResourceLoaderFileModule class. * Removed ORM-like wrapper added in 1.20. -* LinkCache::getGoodLinks and LinkCache::getBadLinks were removed (deprecated in 1.26). +* LinkCache::getGoodLinks and LinkCache::getBadLinks were removed + (deprecated in 1.26). * WikiPage::doQuickEdit() was removed (deprecated since 1.21). * Removed SiteObject and SiteArray classes (deprecated in 1.21). * MessageBlobStore::getInstance() was removed (deprecated since 1.25). * (T84937) Free external links ("autolinked" urls) will now be terminated by   and HTML entity encodings of  , <, and >. -* (T36948) The default file revert message's timestamp is now in $wgLocaltimezone, - instead of UTC. +* (T36948) The default file revert message's timestamp is now in + $wgLocaltimezone, instead of UTC. * The default name of the 'suppress' group page has been changed from 'Project:Oversight' to 'Project:Suppress'. * DatabaseBase::resultObject() is now protected (use outside Database classes @@ -175,7 +228,8 @@ changes to languages because of Phabricator reports. ResourceLoaderContext instance is deprecated. * ResourceLoader::getLessCompiler() now takes an optional parameter of additional LESS variables to set for the compiler. -* wfBaseConvert() marked as deprecated, use Wikimedia\base_convert() directly instead. +* wfBaseConvert() marked as deprecated, use Wikimedia\base_convert() directly + instead. * Obsolete maintenance scripts clearCacheStats.php and showCacheStats.php were removed. The underlying data is sent to StatsD (see $wgStatsdServer). * Removed msg_resource_links database table and associated code. @@ -197,11 +251,47 @@ changes to languages because of Phabricator reports. * The maintenance/backupTextPass.inc file was deleted. You should include maintenance/dumpTextPass.php instead. * WikiPage::getUsedTemplates() was removed (deprecated since 1.19). +* wfEmptyMsg() was removed (deprecated since 1.18). +* OutputPage::permissionRequired() was removed (deprecated since 1.18). +* OutputPage::blockedPage() was removed (deprecated since 1.18). +* User::getSkin() was removed (deprecated since 1.18). +* OutputPage::includeJQuery() was removed (deprecated since 1.17). +* WikiPage::updateRestrictions() was removed (deprecated since 1.19). +* WikiPage::testPreSaveTransform() was removed (deprecated since 1.19). +* LogPage::logName() was removed (deprecated since 1.19). +* LogPage::logHeader() was removed (deprecated since 1.19). +* wfCheckLimits() was removed (deprecated since 1.24). +* Linker::makeKnownLinkObj() was removed (deprecated since 1.16). +* Linker::makeLinkObj() was removed (deprecated since 1.16). +* wfMsgForContentNoTrans() was removed (deprecated since 1.18). +* ChangesList::usePatrol was removed (deprecated since 1.22). +* wfMsgNoTrans() was removed (deprecated since 1.18). +* Linker::makeImageLink2 was removed (deprecated since 1.20). +* Title::userIsWatching() was removed (deprecated since 1.20). +* Removed WaitForSlave maintenance script; use SELECT MASTER_POS_WAIT() + database function directly instead. +* wfMsg() was removed (deprecated since 1.18). +* wfMsgForContent() was removed (deprecated since 1.18). +* wfMsgReal() was removed (deprecated since 1.18). +* wfMsgGetKey() was removed (deprecated since 1.18). +* wfMsgHtml() was removed (deprecated since 1.18). +* wfMsgWikiHtml() was removed (deprecated since 1.18). +* wfMsgExt() was removed (deprecated since 1.18). +* Language::armourMath() was removed (deprecated since 1.22). +* LanguageConverter::armourMath() was removed (deprecated since 1.22). +* FakeConverter::armourMath() was removed (deprecated since 1.22). +* The unused jquery.validate ResourceLoader module was removed. +* FileRepo::getRootUrl() was removed (deprecated since 1.20). +* User::generateToken() was removed (deprecated since 1.20). +* WikiPage::getRawText() was removed (deprecated since 1.21). +* ParserOutput::hasCustomDataUpdates() was removed (deprecated since 1.25). +* ParserOutput::addSecondaryDataUpdate() was removed (deprecated since 1.25). +* ParserOutput::getSecondaryDataUpdates() was removed (deprecated since 1.25). == Compatibility == MediaWiki 1.27 requires PHP 5.3.3 or later. There is experimental support for -HHVM 3.3.0. +HHVM 3.6.5 or later. MySQL is the recommended DBMS. PostgreSQL or SQLite can also be used, but support for them is somewhat less mature. There is experimental support for