RELEASE-NOTES-1.22

   1 Security reminder: MediaWiki does not require PHP's register_globals. If you
   2 have it on, turn it '''off''' if you can.
   3
   4 == MediaWiki 1.22 ==
   5
   6 THIS IS NOT A RELEASE YET
   7
   8 MediaWiki 1.22 is an alpha-quality branch and is not recommended for use in
   9 production.
  10
  11 === Configuration changes in 1.22 ===
  12 * $wgRedirectScript was removed. It was unused.
  13 * Removed $wgLocalMessageCacheSerialized, it is now always true.
  14 * $wgVectorUseIconWatch is now enabled by default.
  15 * $wgCascadingRestrictionLevels was added.
  16 * ftps, ssh, sftp, xmpp, sip, sips, tel, sms, bitcoin, magnet, urn, and geo
  17   have been whitelisted inside of $wgUrlProtocols.
  18 * $wgDocType and $wgDTD have been removed and are no longer used for the DOCTYPE.
  19 * $wgHtml5 is no longer used by core. Setting it to false will no longer disable HTML5.
  20   It is still set to true for extension compatibility but doing so in extensions is deprecated.
  21 * $wgXhtmlDefaultNamespace is no longer used by core. Setting it will no longer change the
  22   xmlns used by MediaWiki. Reliance on this variable by extensions is deprecated.
  23 * $wgHandheldStyle was removed.
  24 * $wgHandheldForIPhone was removed.
  25 * $wgJsMimeType is no longer used by core. Most usage has been removed since
  26   HTML output is now exclusively HTML5.
  27 * $wgDBOracleDRCP added. True enables persistent connection with DRCP on Oracle.
  28 * $wgLogAutopatrol added to allow disabling logging of autopatrol edits in the logging table.
  29   default for $wgLogAutopatrol is true.
  30 * The 'edit' right no longer allows for editing a user's own CSS and JS.
  31 * New rights 'editmyusercss' and 'editmyuserjs' restrict actions that were
  32   formerly allowed by default. They have been added to the default for
  33   $wgGroupPermissions['*'].
  34
  35 === New features in 1.22 ===
  36 * (bug 44525) mediawiki.jqueryMsg can now parse (whitelisted) HTML elements and attributes.
  37 * (bug 33454) Language::sprintfDate now has a timezone parameter, and supports
  38   the "eIOPTZ" formatting characters.
  39 * EditWarning: A warning is shown when an editor leaves the edit form without
  40   saving (enabled by default, users can opt-out via the 'useeditwarning'
  41   preference). This feature was moved from the Vector extension, and is now part
  42   of core for all skins. Take care when upgrading that you don't use an older
  43   version of the Vector extension as this feature may conflict.
  44 * New 'mediawiki.ui' CSS module providing mw-ui-* styles for buttons and a
  45   compact vertical form layout.
  46 * New versions of login (Special:UserLogin) and create account
  47   (Special:UserLogin/signup) forms using the "vform" compact vertical form layout.
  48   These forms use new messages that assume a "Help logging in" link, see
  49   https://www.mediawiki.org/wiki/Manual:Page_customizations;
  50   https://www.mediawiki.org/wiki/Account_creation_user_experience/Strings lists the
  51   message key changes.
  52 * (bug 23343) Implemented ability to apply IP blocks to the contents of X-Forwarded-For headers
  53   by adding a new configuration variable $wgApplyIpBlocksToXff (disabled by default).
  54 * The new hook 'APIGetPossibleErrors' to modify the list of possible errors was
  55   added.
  56 * (bug 25592) LogEventsList::showLogExtract() will now ignore various
  57   Pager-related WebRequest parameters by default, as this is overwhelmingly
  58   likely to be what was intended by users of the method. If any caller wishes
  59   to use these parameters, the new param 'useRequestParams' may be set to true.
  60 * mw.util.addPortletLink: Tooltip is no longer required to be plain (without
  61   an accesskey in it already). As such it now rountrips. Creating a link with a
  62   message as tooltip, grabbing the title attribute and using it to create
  63   another portlet will work as expected.
  64 * (bug 6747) {{ROOTPAGENAME}} introduced, contains the name of the topmost
  65   page without namespace.
  66 * BREAKING CHANGE: (bug 41729) Display editsection links next to headings. Also
  67   change their class name from .editsection to .mw-editsection and place them at
  68   the end of the heading element instead of the beginning. Client-side code and
  69   screen-scrapers will have to be adjusted to handle both cases (old HTML will
  70   still be visible on cached page renders until they are purged); extensions
  71   using the DoEditSectionLink or EditSectionLink hooks might need adjustments as
  72   well.
  73 * (bug 45535) introduced the new 'LanguageLinks' hook for manipulating the
  74   language links associated with a page before display.
  75 * Chosen (http://harvesthq.github.io/chosen/) was added as module 'jquery.chosen'
  76 * HTMLForm will turn multiselect checkboxes into a Chosen interface when setting cssclass 'mw-chosen'
  77 * rebuildLocalisationCache learned --lang option. Let you rebuild l10n caches
  78   of the specified languages instead of all of them.
  79 * New GetNewMessagesAlert hook allowing extensions to disable or modify the new
  80   messages alert
  81 * New wgUserNewMsgRevisionId JS global for logged in users. This will be null
  82   if the user has no new talk page messages. Otherwise it will be set to the
  83   revision ID of the oldest new talk page message. This will allow gadgets and
  84   extensions to create their own new message alerts on the client side.
  85 * mediawiki.log: Added log.warn wrapper (uses console.warn and console.trace).
  86 * mediawiki.log: Implemented log.deprecate. This method defines a property and
  87   uses ES5 getter/setter to emit a warning when they are used.
  88 * $wgCascadingRestrictionLevels was added, allowing one to specify restriction levels
  89   which can be cascading (previously 'sysop' was hard-coded as the only one).
  90 * XHTML5 support has been improved. If you set $wgMimeType = 'application/xhtml+xml'
  91   MediaWiki will try outputting markup acording to XHTML5 rules.
  92 * New hook 'TitleSquidURLs' for manipulating the list of URLs to be purged from
  93   HTTP caches when a page is changed.
  94 * Changed the patrolling system to always show the link for patrolling in case the
  95   current revision is patrollable. This also removed the usage of the rcid URI parameters.
  96 * Oracle DB backend now supports Database Resident Connection Pooling (DRCP).
  97   Can be enabled by setting $wgDBOracleDRCP=true.
  98   Requires Oracle DB 11gR1 or above, enabled DRCP inside the DB itself and a
  99   propper connect string.
 100   More about DRCP can be found at:
 101   http://www.oracle-base.com/articles/11g/database-resident-connection-pool-11gr1.php
 102 * Add a new parameter $patrolFooterShown to hook ArticleViewFooter so the hook
 103   handlers can take further action based on the status of the patrol footer
 104 * LinkCache singleton can now be altered or cleared, letting one to specify
 105   another instance that does not rely on a database backend.
 106 * MediaWiki's PHPUnit tests can now use PHPUnit installed using composer --dev.
 107 * New user rights have been added to increase granularity in rights management
 108   for extensions such as OAuth:
 109 ** editmyusercss controls whether a user may edit their own CSS subpages.
 110 ** editmyuserjs controls whether a user may edit their own JS subpages.
 111 * Add new hook AbortTalkPageEmailNotification, this will be used to determine
 112   whether to send the regular talk page email notification
 113 * (bug 46513) Vector: Add the collapsibleTabs script from the Vector extension.
 114 * Added $wgRecentChangesFlags for defining new flags for RecentChanges and
 115   watchlists.
 116
 117 === Bug fixes in 1.22 ===
 118 * Disable Special:PasswordReset when $wgEnableEmail is false. Previously one
 119   could still navigate to the page by entering the URL directly.
 120 * (bug 47138) Fixed a fatal error when a blocked user tries to automatically
 121   create an account on login due external authentication in some circumstances.
 122 * (bug 23393) HTML <hN> headings containing line breaks are now handled
 123   correctly.
 124 * (bug 45803) Whitespace within == Headline == syntax and within <hN> headings
 125   is now non-significant and not preserved in the HTML output.
 126 * (bug 47218) Special:BlockList now handles correctly user names with spaces
 127   when passed as subpage.
 128 * Pager's properly validate which fields are allowed to be sorted on.
 129 * mw.util.tooltipAccessKeyRegexp: The regex now matches "option-" as well.
 130   Support for Mac "option" was added in 1.16, but the regex was never updated.
 131 * (bug 46768) Usernames of blocking users now display correctly, even if numeric.
 132 * (bug 39590) {{PAGESIZE}} for the current page and self-transclusions now
 133   show the most up to date result always instead of being a revision behind.
 134 * A bias in wfRandomString() toward digits 1-7 has been corrected. Generated
 135   strings will now start with digits 0 and 8-f as often as they should.
 136 * (bug 45371) Removed Parser_LinkHooks and CoreLinkFunctions classes.
 137 * (bug 41545) Allow <kbd>, <samp>, and <var> to be nested like allowed in html.
 138 * PLURAL magic word no longer causes a PHP notice when no matching form exists.
 139 * (bug 36641) Patrol page links no longer show on non-existent revisions.
 140 * (bug 35810) Pages not linked from Special:RecentChanges or Special:NewPages
 141   are patrollable now.
 142 * (bug 30213) JavaScript for search suggestions is now disabled when the API
 143   is disabled, and AJAX patrolling and watching are now disabled when use of
 144   the write API is not allowed.
 145 * (bug 48294) API: Fix chunk upload async mode.
 146 * (bug 46749) Broken files tracking category removed from pages if an image
 147   with that name is uploaded.
 148 * (bug 14176) System messages that are empty were previously incorrectly treated
 149   as non-existent, causing a fallback to the default. This stopped users from
 150   overriding system messages to make them blank.
 151 * (bug 48319) action=parse no longer returns an error if passed none of 'oldid',
 152   'pageid', 'page', 'title', and 'text' (e.g. if only passed 'summary'). A
 153   warning will instead be issued if 'title' is non-default, unless no props are
 154   requested.
 155 * Special:Recentchangeslinked will now include upload log entries
 156
 157 === API changes in 1.22 ===
 158 * (bug 25553) The JSON output formatter now leaves forward slashes unescaped
 159   to improve human readability of URLs and similar strings. Also, a "utf8"
 160   option is now provided to use UTF-8 encoding instead of hex escape codes
 161   for most non-ASCII characters.
 162 * (bug 46626) xmldoublequote parameter was removed. Because of a bug, the
 163   parameter has had no effect since MediaWiki 1.16, and so its removal is
 164   unlikely to impact existing clients.
 165 * (bug 47216) action=query&meta=siteinfo&siprop=skins will now indicate which
 166   skin is the default and which are unusable (e.g. listed in $wgSkipSkins).
 167 * (bug 25325) Added support for wlshow filtering (bots/anon/minor/patrolled)
 168   to action=feedwatchlist.
 169 * WDDX formatted output will actually be formatted (and normal output will no
 170   longer be), and will no longer choke on booleans.
 171 * action=opensearch no longer silently ignores the format parameter.
 172 * action=opensearch now supports format=jsonfm.
 173 * list=usercontribs&ucprop=ids will now include the parent revision id.
 174 * BREAKING CHANGE: action=parse no longer returns all langlinks for the page
 175   with prop=langlinks by default. The new effectivelanglinks parameter will
 176   request that the LanguageLinks hook be called to determine the effective
 177   language links.
 178 * BREAKING CHANGE: list=allpages, list=langbacklinks, and prop=langlinks do not
 179   apply the new LanguageLinks hook, and thus only consider language links
 180   stored in the database.
 181 * (bug 47219) Allow specifying change type of Wikipedia feed items
 182 * prop=imageinfo now allows setting iiurlheight without setting iiurlwidth
 183 * prop=info now adds the content model and page language of the title.
 184 * New upload log entries will now contain information on the relevant
 185   image (sha1 and timestamp).
 186 * (bug 49239) action=parse now can parse in preview and section preview modes.
 187 * (bug 49259) action=patrol now accepts revision ids.
 188 * (bug 48129) list=blocks&bkip= now correctly handles IPv6 CIDR ranges and
 189   honors $wgBlockCIDRLimit. Note any clients passing invalid values to bkip
 190   will now receive an error, rather than the previous behavior listing all
 191   user blocks.
 192 * (bug 48201) action=parse&text=foo now assumes wikitext if no title is given,
 193   rather than using the content model of the page "API".
 194 * action=watch may now return errors.
 195
 196 === Languages updated in 1.22===
 197
 198 MediaWiki supports over 350 languages. Many localisations are updated
 199 regularly. Below only new and removed languages are listed, as well as
 200 changes to languages because of Bugzilla reports.
 201
 202 * Batak Toba (bbc-latn) added.
 203 * (bug 46751) Made Buryat (Russia) (буряад) (bxr) fallback to Russian.
 204
 205 === Other changes in 1.22 ===
 206 * BREAKING CHANGE: Implementation of MediaWiki's JS and JSON value encoding
 207   has changed:
 208 ** MediaWiki no longer supports PHP installations in which the native JSON
 209    extension is missing or disabled.
 210 ** XmlJsCode objects can no longer be nested inside objects or arrays.
 211    (For Xml::encodeJsCall(), this individually applies to each argument.)
 212 ** The sets of characters escaped by default, along with the precise escape
 213    sequences used, have changed (except for the Xml::escapeJsString()
 214    function, which is now deprecated).
 215 * BREAKING CHANGE: The Services_JSON class has been removed. If necessary,
 216   be sure to upgrade affected extensions at the same time (e.g. Collection).
 217 * redirect.php was removed. It was unused.
 218 * ClickTracking integration was dropped from the mediaWiki.user.bucket
 219   JavaScript function. The 'tracked' option is now ignored.
 220 * BREAKING CHANGE: Legacy skins Simple, MySkin, Chick, Standard and Nostalgia
 221   were all removed. (Nostalgia was moved to an extension.) The SkinLegacy and
 222   LegacyTemplate classes that supported them were removed as well and are now a
 223   part of the Nostalgia extension.
 224 * Event namespace used by jquery.makeCollapsible has been changed from
 225   'mw-collapse' to 'mw-collapsible' for consistency with the module name.
 226 * BREAKING CHANGE: The "ExternalAuth" authentication subsystem was removed, along
 227   with its associated globals of $wgExternalAuthType, $wgExternalAuthConf,
 228   $wgAutocreatePolicy and $wgAllowPrefChange. Affected users are encouraged to
 229   use AuthPlugin for external authentication/authorization needs.
 230 * The Quickbar feature of the legacy skin model and the last remnants of it
 231   throughout the code base have been removed.
 232 * Externaledit/externaldiff preference was removed. Very few users used this
 233   feature, and improper configuration can actually prevent a user from editing
 234 * Calling Linker methods using a skin will now output deprecation warnings.
 235 * (bug 46680) "Return to" links are no longer tagged with rel="next".
 236 * BREAKING CHANGE: mw.util.tooltipAccessKeyRegexp: The match group for the
 237   accesskey character is now $6 instead of $5.
 238 * HipHop compiler (hphpc) support was removed. HipHop VM support (hhvm) was
 239   added.
 240 * A new Special:Redirect page was added, providing lookup by revision ID,
 241   user ID, or file name.  The old Special:Filepath page was reimplemented
 242   to redirect through Special:Redirect.
 243 * Monobook: Removed the old conditional stylesheets for Opera 6, 7 and 9.
 244 * Support for XHTML 1.0 has been removed. MediaWiki now only outputs (X)HTML5.
 245 * wikibits: User-agent related globals have been deprecated. The following
 246   properties now default to false and emit mw.log.warn: is_gecko, is_chrome_mac,
 247   is_chrome, webkit_version, is_safari_win, is_safari, webkit_match, is_ff2,
 248   ff2_bugs, is_ff2_win, is_ff2_x11, opera95_bugs, opera7_bugs, opera6_bugs,
 249   is_opera_95, is_opera_preseven, is_opera, and ie6_bugs.
 250 * (bug 48276) MediaWiki will now flash a confirmation message upon successfully
 251   editing a page.
 252 * (bug 40785) mediawiki.legacy.ajax has been marked as deprecated. The following
 253   properties now emit mw.log.warn when accessed: sajax_debug, sajax_init_object,
 254   sajax_do_call and wfSupportsAjax.
 255 * BREAKING CHANGE: meta keywords are no longer supported. A <meta name="keywords"
 256   will no longer be output and OutputPage::addKeyword no longer exists.
 257 * Methods Title::userCanEditCssSubpage and Title::userCanEditJsSubpage,
 258   deprecated since 1.19, have been removed.
 259 * (bug 50134) Hook functions are no longer required to return a value. When a
 260   hook function does not return a value (or when it returns an explicit null),
 261   processing continues. To abort the hook, a hook function must return an
 262   explicit, boolean false or a string error message. Other falsey values are
 263   tantamount to a 'return true' in earlier versions of MediaWiki.
 264
 265 == Compatibility ==
 266
 267 MediaWiki 1.22 requires PHP 5.3.2 or later.
 268
 269 MySQL is the recommended DBMS. PostgreSQL or SQLite can also be used, but
 270 support for them is somewhat less mature. There is experimental support for
 271 Oracle.
 272
 273 The supported versions are:
 274
 275 * MySQL 5.0.2 or later
 276 * PostgreSQL 8.3 or later
 277 * SQLite 3.3.7 or later
 278 * Oracle 9.0.1 or later
 279
 280 == Upgrading ==
 281
 282 1.22 has several database changes since 1.21, and will not work without schema
 283 updates. Note that due to changes to some very large tables like the revision
 284 table, the schema update may take quite long (minutes on a medium sized site,
 285 many hours on a large site).
 286
 287 If upgrading from before 1.11, and you are using a wiki as a commons
 288 repository, make sure that it is updated as well. Otherwise, errors may arise
 289 due to database schema changes.
 290
 291 If upgrading from before 1.7, you may want to run refreshLinks.php to ensure
 292 new database fields are filled with data.
 293
 294 If you are upgrading from MediaWiki 1.4.x or earlier, you should upgrade to
 295 1.5 first. The upgrade script maintenance/upgrade1_5.php has been removed
 296 with MediaWiki 1.21.
 297
 298 Don't forget to always back up your database before upgrading!
 299
 300 See the file UPGRADE for more detailed upgrade instructions.
 301
 302 For notes on 1.21.x and older releases, see HISTORY.
 303
 304 == Online documentation ==
 305
 306 Documentation for both end-users and site administrators is available on
 307 MediaWiki.org, and is covered under the GNU Free Documentation License (except
 308 for pages that explicitly state that their contents are in the public domain):
 309
 310         https://www.mediawiki.org/wiki/Documentation
 311
 312 == Mailing list ==
 313
 314 A mailing list is available for MediaWiki user support and discussion:
 315
 316         https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
 317
 318 A low-traffic announcements-only list is also available:
 319
 320         https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce
 321
 322 It's highly recommended that you sign up for one of these lists if you're
 323 going to run a public MediaWiki, so you can be notified of security fixes.
 324
 325 == IRC help ==
 326
 327 There's usually someone online in #mediawiki on irc.freenode.net.