X-Git-Url: https://git.heureux-cyclage.org/?a=blobdiff_plain;f=RELEASE-NOTES-1.32;h=06b60e41dea365c88ae61cb4fc6c113ca1c804e8;hb=fa04547aca9a1f0615e8d63a60875bab54d24a66;hp=96b1953c70151153a4ff585330bb4b4d019b6d3f;hpb=79d85f47ce49051f2b016047be01cb9c6c8ef5a3;p=lhc%2Fweb%2Fwiklou.git diff --git a/RELEASE-NOTES-1.32 b/RELEASE-NOTES-1.32 index 96b1953c70..06b60e41de 100644 --- a/RELEASE-NOTES-1.32 +++ b/RELEASE-NOTES-1.32 @@ -60,6 +60,10 @@ production. * $wgPopularPasswordFile — The location of the default popular passwords file has been moved to be in line with other non-PHP files used by libraries and classes. +* $wgEnableImageWhitelist is now disabled by default, as it opens up a hole for + potential privacy leaks by administrators. You can check + "MediaWiki:External image whitelist" on your wiki to see whether the feature + was ever used, and whether it needs to be re-enabled. ==== Removed configuration ==== * $wgEnableAPI and $wgEnableWriteAPI – These settings, deprecated in 1.31, @@ -133,28 +137,36 @@ production. === External library changes in 1.32 === ==== New external libraries ==== -* Added wikimedia/xmp-reader 0.6.0. -* Added Add pear/Net_SMTP 1.8.0. +* Added pear/Net_SMTP v1.8.0. +* Added wikimedia/xmp-reader v0.6.0. + +* Added cache/integration-tests v0.16.0 (dev-only). +* Added giorgiosironi/eris v0.10.0 (dev-only). +* Added seld/jsonlint v1.7.1 (dev-only). + * Added EasyDeflate (unversioned). ==== Changed external libraries ==== -* Updated qunitjs from 2.4.0 to 2.6.2. -* Updated wikimedia/scoped-callback from 1.0.0 to 2.0.0. +* Updated OOUI from v0.26.3 to v0.29.2. +* Updated wikimedia/base-convert from v1.0.1 to v2.0.0. +* Updated wikimedia/remex-html from v1.0.3 to v2.0.1. +* Updated wikimedia/scoped-callback from v1.0.0 to v2.0.0. ** ScopedCallback objects can no longer be serialized. -* Updated wikimedia/wrappedstring from 2.3.0 to 3.0.1. -* Updated mediawiki/mediawiki-codesniffer from v20.0.0 to v21.0.0. -* Updated composer/spdx-licenses from 1.3.0 to 1.4.0. -* Updated jquery.i18n from 1.0.4 to 1.0.5. -* Updated wikimedia/timestamp from 1.0.0 to 2.2.0. -* Updated wikimedia/remex-html from 1.0.3 to 2.0.1. -* Updated jquery from 3.2.1 to 3.3.1. -* Updated wikimedia/base-convert from 1.0.1 to 2.0.0 -* Updated OOjs from 2.2.0 to 2.2.2 -* Updated mustache.js from 0.8.2-d9aa703 to 1.0.0 -* Updated sinonjs from 1.17.3 to 1.17.7 -* Updated OOUI from 0.26.3 to 0.29.2 -* Updated CLDRPluralRuleParser from 0.1.0 to 1.3.2-pre -* Updated jquery.client from 2.0.0 to 2.0.1. +* Updated wikimedia/timestamp from v1.0.0 to v2.2.0. +* Updated wikimedia/wrappedstring from v2.3.0 to v3.0.1. + +* Updated composer/spdx-licenses from v1.3.0 to v1.4.0 (dev-only). +* Updated mediawiki/mediawiki-codesniffer from v18.0.0 to v22.0.0 (dev-only). +* Updated psy/psysh from v0.8.11 to v0.9.6 (dev-only). + +* Updated CLDRPluralRuleParser from v0.1.0 to v1.3.2-pre. +* Updated jquery from v3.2.1 to v3.3.1. +* Updated jquery.client from v2.0.0 to v2.0.1. +* Updated jquery.i18n from v1.0.4 to v1.0.5. +* Updated mustache.js from v0.8.2-d9aa703 to v1.0.0. +* Updated OOjs from v2.2.0 to v2.2.2. +* Updated qunitjs from v2.4.0 to v2.6.2. +* Updated sinonjs from v1.17.3 to v1.17.7. ==== Removed external libraries ==== * pear/mail_mime-decode was removed. @@ -426,6 +438,26 @@ because of Phabricator reports. * ApiUsageException::getCodeString() (deprecated in 1.29) * ApiUsageException::getMessageArray() (deprecated in 1.29) * Class UsageException, deprecated in 1.29, has been removed. +* MediaWiki no longer has a 'JavaScript-powered' wikitext toolbar built in. The + old "bulletin board style toolbar", known as "the 2006 wikitext editor", has + been removed, and instead sysadmins will be required to choose one (or more) + of the several extensions available for this purpose if they need the + functionality. The MediaWiki "tarball" releases have included the replacement + extension for this, the WikiEditor extension aka "the 2010 wikitext editor", + for many years now. As part of this, several parts of MediaWiki have been + removed or simplified: + * The user option 'showtoolbar' (shown as "Show edit toolbar") is no longer + available; if an extension adds a toolbar via the EditPageBeforeEditToolbar + hook, it will be shown; extensions should provide a specific user preference + to disable themselves as needed. + * The public methods Language::getImageFile() and ::getImageFiles(), and the + related specification of $imageFiles within individual languages' code file, + as well as the referenced static media assets, all of which were only used + inside MediaWiki itself for providing the icons for the old toolbar, have + been removed without explicit deprecation. + * The internal ResourceLoader module "mediawiki.toolbar", which is unused + except by MediaWiki itself and back-compatibility code, has been removed. + * The internal ResourceLoaderEditToolbarModule class has been removed. === Deprecations in 1.32 === * HTMLForm::setSubmitProgressive() is deprecated. No need to call it. Submit @@ -566,6 +598,7 @@ because of Phabricator reports. $wgTidyConfig instead. * All Tidy configurations other than Remex have been hard deprecated; future parsers will not emit compatible output for these configurations. + In particular, running MediaWiki with tidy disabled has been deprecated. * (T198214) OutputPage::addWikiText(), OutputPage::addWikiTextWithTitle(), and OutputPage::addWikiTextTitle() have been deprecated, since they can result in untidy output. In addition OutputPage::addWikiTextTidy() @@ -574,6 +607,11 @@ because of Phabricator reports. OutputPage::addWikiTextAsContent() instead, which ensures the output is tidy and clarifies whether content-language specific postprocessing should be done on the text. +* OutputPage::parse() and OutputPage::parseInline() have been deprecated + due to untidy output and inconsistent handling of wrapper divs and + interface/content language defaults. Use OutputPage::parseAsContent(), + OutputPage::parseAsInterface(), or OutputPage::parseInlineAsInterface() + as appropriate. * QuickTemplate::msgHtml() and BaseTemplate::msgHtml() have been deprecated as they promote bad practises. I18n messages should always be properly escaped. @@ -619,15 +657,16 @@ because of Phabricator reports. yet for creating or managing content in slots beides the main slot. See for more information. -* The image_comment_temp database table is merged into the image table and - deprecated. Since access should be mediated by the CommentStore class, this - change shouldn't affect external code. +* The image_comment_temp database table has been removed. Since all access + should be mediated by the CommentStore class, this change shouldn't affect + external code. * (T206147) Database::close() will no longer commit any open transactions. == Compatibility == MediaWiki 1.32 requires PHP 7.0.0 or later. Although HHVM 3.18.5 or later is supported, it is generally advised to use PHP 7.0.0 or later for long term -support. +support. MediaWiki requires that the mbstring, xml, ctype, json, iconv and +fileinfo PHP extensions are loaded to work. MySQL/MariaDB is the recommended DBMS. PostgreSQL or SQLite can also be used, but support for them is somewhat less mature. There is experimental support for