RELEASE-NOTES-1.25

   1 Security reminder: If you have PHP's register_globals option set, you must
   2 turn it off. MediaWiki will not work with it enabled.
   3
   4 == MediaWiki 1.25 ==
   5
   6 THIS IS NOT A RELEASE YET
   7
   8 MediaWiki 1.25 is an alpha-quality branch and is not recommended for use in
   9 production.
  10
  11 === Configuration changes in 1.25 ===
  12 * $wgPageShowWatchingUsers was removed.
  13 * $wgLocalVirtualHosts has been added to replace $wgConf->localVHosts.
  14 * $wgAntiLockFlags was removed.
  15 * $wgJavaScriptTestConfig was removed.
  16 * Edit tokens returned from User::getEditToken may change on every call. Token
  17   validity must be checked by passing the user-supplied token to
  18   User::matchEditToken rather than by testing for equality with a
  19   newly-generated token.
  20 * (T74951) The UserGetLanguageObject hook may be passed any IContextSource
  21   for its $context parameter. Formerly it was documented as receiving a
  22   RequestContext specifically.
  23 * Profiling was restructured and $wgProfiler now requires an 'output' parameter.
  24   See StartProfiler.sample for details.
  25 * $wgMangleFlashPolicy was added to make MediaWiki's mangling of anything that
  26   might be a flash policy directive configurable.
  27 * ApiOpenSearch now supports XML output. The OpenSearchXml extension should no
  28   longer be used. If extracts and page images are desired, the TextExtracts and
  29   PageImages extensions are required.
  30 * $wgOpenSearchTemplate is deprecated in favor of $wgOpenSearchTemplates.
  31 * Edits are now prepared via AJAX as users type edit summaries. This behavior
  32   can be disabled via $wgAjaxEditStash.
  33 * (T46740) The temporary option $wgIncludejQueryMigrate was removed, along
  34   with the jQuery Migrate library, as indicated when this option was provided in
  35   MediaWiki 1.24.
  36 * ProfilerStandard and ProfilerSimpleTrace were removed. Make sure that any
  37   StartProfiler.php config is updated to reflect this. Xhprof is available
  38   for zend/hhvm. Also, for hhvm, one can consider using its xenon profiler.
  39
  40 === New features in 1.25 ===
  41 * (T64861) Updated plural rules to CLDR 26. Includes incompatible changes
  42   for plural forms in Russian, Prussian, Tagalog, Manx and several languages
  43   that fall back to Russian.
  44 * (T60139) ResourceLoaderFileModule now supports language fallback
  45   for 'languageScripts'.
  46 * Added a new hook, "ContentAlterParserOutput", to allow extensions to modify the
  47   parser output for a content object before links update.
  48 * (T37785) Enhanced recent changes and extended watchlist are now default.
  49   Documentation: https://meta.wikimedia.org/wiki/Help:Enhanced_recent_changes
  50   and https://www.mediawiki.org/wiki/Manual:$wgDefaultUserOptions.
  51 * (T69341) SVG images will no longer be base64-encoded when being embedded
  52   in CSS. This results in slight size increase before gzip compression (due to
  53   percent-encoding), but up to 20% decrease after it.
  54 * Update jStorage to v0.4.12.
  55 * MediaWiki now natively supports page status indicators: icons (or short text
  56   snippets) usually displayed in the top-right corner of the page. They have
  57   been in use on Wikipedia for a long time, implemented using templates and CSS
  58   absolute positioning.
  59   - Basic wikitext syntax: <indicator name="foo">[[File:Foo.svg|20px]]</indicator>
  60   - Usage instructions: https://www.mediawiki.org/wiki/Help:Page_status_indicators
  61   - Adjusting custom skins to support indicators:
  62     https://www.mediawiki.org/wiki/Manual:Skinning#Page_status_indicators
  63 * Edit tokens may now be time-limited: passing a maximum age to
  64   User::matchEditToken will reject any older tokens.
  65 * The debug logging internals have been overhauled, and are now using the
  66   PSR-3 interfaces.
  67 * Update CSSJanus to v1.1.1.
  68 * Update lessphp to v0.5.0.
  69 * Added a hook, "ApiOpenSearchSuggest", to allow extensions to provide extracts
  70   and images for ApiOpenSearch output. The semantics are identical to the
  71   "OpenSearchXml" hook provided by the OpenSearchXml extension.
  72 * PrefixSearchBackend hook now has an $offset parameter. Combined with $limit,
  73   this allows for pagination of prefix results. Extensions using this hook
  74   should implement supporting behavior. Not doing so can result in undefined
  75   behavior from API clients trying to continue through prefix results.
  76 * Update jQuery from v1.11.1 to v1.11.2.
  77 * External libraries installed via composer will now be displayed
  78   on Special:Version in their own section. Extensions or skins that are
  79   installed via composer will not be shown in this section as it is assumed
  80   they will add the proper credits to the skins or extensions section.
  81 * Update QUnit from v1.14.0 to v1.16.0.
  82 * Update Moment.js from v2.8.3 to v2.8.4.
  83
  84 ==== External libraries ====
  85 * MediaWiki now requires certain external libraries to be installed. In the past
  86   these were bundled inside the Git repository of MediaWiki core, but now they
  87   need to be installed separately. For users using the tarball, this will be taken
  88   care of and no action will be required. Users using Git will either need to use
  89   composer to fetch dependencies or use the mediawiki/vendor repository which includes
  90   all dependencies for MediaWiki core and ones used in Wikimedia deployment. Detailed
  91   instructions can be found at:
  92   https://www.mediawiki.org/wiki/Download_from_Git#Fetch_external_libraries
  93 * The following libraries are now required:
  94 ** psr/log
  95    This library provides the interfaces set by the PSR-3 standard (http://www.php-fig.org/psr/psr-3/)
  96    which are used by MediaWiki internally via the MWLoggerFactory class.
  97    See the structured logging RfC (https://www.mediawiki.org/wiki/Requests_for_comment/Structured_logging)
  98    for more background information.
  99 ** cssjanus/cssjanus
 100    This library was formerly bundled with MediaWiki core and has been removed.
 101    It automatically flips CSS for RTL support.
 102 ** leafo/lessphp
 103    This library was formerly bundled with MediaWiki core and has been removed.
 104    It compiles LESS files into CSS.
 105 ** wikimedia/cdb
 106    This library was formerly a part of MediaWiki core, and has been moved into a separate library.
 107    It provides CDB functions which are used in the Interwiki and Localization caches.
 108    More information about the library can be found at https://www.mediawiki.org/wiki/CDB.
 109
 110 === Bug fixes in 1.25 ===
 111 * (T73003) No additional code will be generated to try to load CSS-embedded
 112   SVG images in Internet Explorer 6 and 7, as they don't support them anyway.
 113 * (T69021) On Special:BookSources, corrected validation of ISBNs (both
 114   10- and 13-digit forms) containing "X".
 115 * Page moving was refactored into a MovePage class. As part of that:
 116 ** The AbortMove hook was removed.
 117 ** MovePageIsValidMove is for extensions to specify whether a page
 118    cannot be moved for technical reasons, and should not be overridden.
 119 ** MovePageCheckPermissions is for checking whether the given user is
 120    allowed to make the move.
 121 ** Title::moveNoAuth() was deprecated. Use the MovePage class instead.
 122 ** Title::moveTo() was deprecated. Use the MovePage class instead.
 123 ** Title::isValidMoveOperation() broken down into MovePage::isValidMove()
 124    and MovePage::checkPermissions().
 125 * (T18530) Multiple autocomments are now formatted in an edit summary.
 126 * (T70361) Autocomments containing "/*" are parsed correctly.
 127 * The Special:WhatLinksHere page linked from 'Number of redirects to this page'
 128   on action=info about a file page does not list file links anymore.
 129 * (T78637) Search bar is not autofocused unless it is empty so that proper scrolling using arrow keys is possible.
 130 * (T50853) Database::makeList() modified to handle 'NULL' separately when building IN clause
 131 * (T85192) Captcha position modified in Usercreate template. As a result:
 132 ** extrafields parameter added to Usercreate.php to insert additional data
 133 ** 'extend' method added to QuickTemplate to append additional values to any field of data array
 134 * (T86974) Several Title methods now load from the database when necessary
 135   (instead of returning incorrect results) even when the page ID is known.
 136
 137 === Action API changes in 1.25 ===
 138 * (T67403) XML tag highlighting is now only performed for formats
 139   "xmlfm" and "wddxfm".
 140 * action=paraminfo supports generalized submodules (modules=query+value),
 141   querymodules and formatmodules are deprecated
 142 * action=paraminfo no longer outputs descriptions and other help text by
 143   default. If needed, it may be requested using the new 'helpformat' parameter.
 144 * action=help has been completely rewritten, and outputs help in HTML
 145   rather than plain text.
 146 * Hitting api.php without specifying an action now displays only the help for
 147   the main module, with links to submodule help.
 148 * API help is no longer displayed on errors.
 149 * 'uselang' is now a recognized API parameter; "uselang=user" may be used to
 150   explicitly select the language from the current user's preferences, and
 151   "uselang=content" may be used to select the wiki's content language.
 152 * Default output format for the API is now jsonfm.
 153 * Simplified continuation will return a "batchcomplete" property in the result
 154   when a batch of pages is complete.
 155 * Pretty-printed HTML output now has nicer formatting and (if available)
 156   better syntax highlighting.
 157 * Deprecated list=deletedrevs in favor of newly-added prop=deletedrevisions and
 158   list=alldeletedrevisions.
 159 * prop=revisions will gracefully continue when given too many revids or titles,
 160   rather than just ignoring the extras.
 161 * prop=revisions will no longer die if rvcontentformat doesn't match a
 162   revision's content model; it will instead warn and omit the content.
 163 * If the user has the 'deletedhistory' right, action=query's revids parameter
 164   will now recognize deleted revids.
 165 * prop=revisions may be used as a generator, generating revids.
 166 * (T68776) format=json results will no longer be corrupted when
 167   $wgMangleFlashPolicy is in effect. format=php results will cleanly return an
 168   error instead of returning invalid serialized data.
 169 * Generators may now return data for the generated pages when used with
 170   action=query.
 171 * Query page data for generator=search and generator=prefixsearch will now
 172   include an "index" field, which may be used by the client for sorting the
 173   search results.
 174 * ApiOpenSearch now supports XML output.
 175 * ApiOpenSearch will now output descriptions and URLs as array indexes 2 and 3
 176   in JSON format.
 177 * (T76051) list=tags will now continue correctly.
 178 * (T76052) list=tags can now indicate whether a tag is defined.
 179 * (T75522) list=prefixsearch now supports continuation
 180 * (T78737) action=expandtemplates can now return page properties.
 181 * (T78690) list=allimages now accepts multiple pipe-separated values
 182   for the 'aimime' parameter.
 183 * prop=info with inprop=protections will now return applicable protection types
 184   with the 'restrictiontypes' key.
 185 * (T85417) When resolving redirects, ApiPageSet will now add the targets of
 186   interwiki redirects to the list of interwiki titles.
 187 * (T85417) When outputting the list of redirect titles, a 'tointerwiki'
 188   property (like the existing 'tofragment' property) will be set.
 189
 190 === Action API internal changes in 1.25 ===
 191 * ApiHelp has been rewritten to support i18n and paginated HTML output.
 192   Most existing modules should continue working without changes, but should do
 193   the following:
 194   * Add an i18n message "apihelp-{$moduleName}-description" to replace getDescription().
 195   * Add i18n messages "apihelp-{$moduleName}-param-{$param}" for each parameter
 196     to replace getParamDescription(). If necessary, the settings array returned
 197     by getParams() can use the new ApiBase::PARAM_HELP_MSG key to override the
 198     message.
 199   * Implement getExamplesMessages() to replace getExamples().
 200 * Modules with submodules (like action=query) must have their submodules
 201   override ApiBase::getParent() to return the correct parent object.
 202 * The 'APIGetDescription' and 'APIGetParamDescription' hooks are deprecated,
 203   and will have no effect for modules using i18n messages. Use
 204   'APIGetDescriptionMessages' and 'APIGetParamDescriptionMessages' instead.
 205 * Api formatters will no longer be asked to display the help screen on errors.
 206 * ApiMain::getCredits() was removed. The credits are available in the
 207   'api-credits' i18n message.
 208 * ApiFormatBase has been changed to support i18n and syntax highlighting via
 209   extensions with the new 'ApiFormatHighlight' hook. Core syntax highlighting
 210   has been removed.
 211 * ApiFormatBase now always buffers. Output is done when
 212   ApiFormatBase::closePrinter is called.
 213 * Much of the logic in ApiQueryRevisions has been split into ApiQueryRevisionsBase.
 214 * The 'revids' parameter supplied by ApiPageSet will now count deleted
 215   revisions as "good" if the user has the 'deletedhistory' right. New methods
 216   ApiPageSet::getLiveRevisionIDs() and ApiPageSet::getDeletedRevisionIDs() are
 217   provided to access just the live or just the deleted revids.
 218 * Added ApiPageSet::setGeneratorData() and ApiPageSet::populateGeneratorData()
 219   to allow generators to include data in the action=query result.
 220 * The following methods have been deprecated and may be removed in a future
 221   release:
 222   * ApiBase::getDescription
 223   * ApiBase::getParamDescription
 224   * ApiBase::getExamples
 225   * ApiBase::makeHelpMsg
 226   * ApiBase::makeHelpArrayToString
 227   * ApiBase::makeHelpMsgParameters
 228   * ApiFormatBase::setUnescapeAmps
 229   * ApiFormatBase::getWantsHelp
 230   * ApiFormatBase::setHelp
 231   * ApiFormatBase::formatHTML
 232   * ApiFormatBase::setBufferResult
 233   * ApiFormatBase::getDescription
 234   * ApiMain::setHelp
 235   * ApiMain::reallyMakeHelpMsg
 236   * ApiMain::makeHelpMsgHeader
 237   * ApiQueryImageInfo::getPropertyDescriptions
 238 * The following classes have been deprecated and may be removed in a future
 239   release:
 240   * ApiQueryDeletedrevs
 241
 242 === Languages updated in 1.25 ===
 243
 244 MediaWiki supports over 350 languages. Many localisations are updated
 245 regularly. Below only new and removed languages are listed, as well as
 246 changes to languages because of Bugzilla reports.
 247
 248 * (T66440) Kazakh (kk) wikis should no longer forcefully reset the user's
 249   interface language to kk where unexpected.
 250
 251 === Other changes in 1.25 ===
 252 * The skin autodiscovery mechanism, deprecated in MediaWiki 1.23, has been
 253   removed. See https://www.mediawiki.org/wiki/Manual:Skin_autodiscovery for
 254   migration guide for creators and users of custom skins that relied on it.
 255 * Javascript variable 'wgFileCanRotate' and 'wgFileExtensions' now only
 256   available on Special:Upload.
 257 * (T58257) Set site logo from mediawiki.skinning.interface module instead of
 258   inline styles in the HTML.
 259 * Removed ApiQueryUsers::getAutoGroups(). (deprecated since 1.20)
 260 * Removed XmlDumpWriter::schemaVersion(). (deprecated since 1.20)
 261 * Removed LogEventsList::getDisplayTitle(). (deprecated since 1.20)
 262 * Removed Preferences::trySetUserEmail(). (deprecated since 1.20)
 263 * Removed mw.user.name() and mw.user.anonymous() methods. (deprecated since 1.20)
 264 * Removed 'ok' and 'err' parameters in the mediawiki.api modules. (deprecated
 265   since 1.20)
 266 * Removed 'async' parameter from the  mw.Api#getCategories() method. (deprecated
 267   since 1.20)
 268 * Removed 'jquery.json' module. (deprecated since 1.24)
 269   Use the 'json' module and global JSON object instead.
 270 * Deprecated OutputPage::readOnlyPage() and OutputPage::rateLimited().
 271   Also, the former will now throw an MWException if called with one or more
 272   arguments.
 273 * Removed hitcounters and associated code.
 274 * The "temp" zone of the upload respository is now considered private. If it
 275   already exists (such as under the images/ directory), please make sure that
 276   the directory is not web readable (e.g. via a .htaccess file).
 277 * BREAKING CHANGE: In the XML dump format used by Special:Export and
 278   dumpBackup.php, the <model> and <format> tags now apprear before the <text>
 279   tag, instead of after the <text> and <sha1> tags.
 280   The new schema version is 0.10, the new schema URI is:
 281   https://www.mediawiki.org/xml/export-0.10.xsd
 282 * MWFunction::call() and MWFunction::callArray() were removed, having being
 283   deprecated in 1.22.
 284 * Deprecated the getInternalLinkAttributes, getInternalLinkAttributesObj,
 285   and getInternalLinkAttributes methods in Linker, and removed
 286   getExternalLinkAttributes method, which was deprecated in MediaWiki 1.18.
 287 * Removed Sites class, which was deprecated in 1.21 and replaced by SiteSQLStore.
 288 * The mw.api.getToken() method now uses action=query?meta=tokens. This will now
 289   fail for custom tokens registered only via the deprecated ApiTokensGetTokenTypes
 290   hook. The ApiQueryTokensRegisterTypes hook should be used for this to work.
 291 * Added wgRelevantArticleId to the client-side config, for use on special pages.
 292 * Deprecated the TitleIsCssOrJsPage hook. Superseded by the
 293   ContentHandlerDefaultModelFor hook since MediaWiki 1.21.
 294 * Deprecated the TitleIsWikitextPage hook. Superseded by the
 295   ContentHandlerDefaultModelFor hook since MediaWiki 1.21.
 296 * Changed parsing of variables in schema (.sql) files:
 297 ** The substituted values are no longer parsed. (Formerly, several passes
 298    were made for each variable, so depending on the order in which variables
 299    were defined, variables might have been found inside encoded values. This
 300    is no longer the case.)
 301 ** Variables are no longer string encoded when the /*$var*/ syntax is used.
 302    If string encoding is necessary, use the '{$var}' syntax instead.
 303 ** Variable names must only consist of one or more of the characters
 304    "A-Za-z0-9_".
 305 ** In source text of the form '{$A}'{$B}' or `{$A}`{$B}`, where variable A
 306    does not exist yet variable B does, the latter may not be replaced.
 307    However, this difference is unlikely to arise in practice.
 308 * (T67278) RFC, PMID, and ISBN "magic links" must be surrounded by non-word
 309   characters on both sides.
 310 * The FormatAutocomments hook will now receive $pre and $post as booleans,
 311   rather than as strings that must be prepended or appended to $comment.
 312 * (T30950, T31025) RFC, PMID, and ISBN "magic links" can no longer contain
 313   newlines; but they can contain &nbsp; and other non-newline whitespace.
 314 * The 'mediawiki.action.edit' ResourceLoader module no longer generates the edit
 315   toolbar, which has been moved to a separate 'mediawiki.toolbar' module. If you
 316   relied on this behavior, update your scripts' dependencies.
 317 * HTMLForm's 'vform' display style has been separated to a subclass. Therefore:
 318   * HTMLForm::isVForm() is now deprecated.
 319   * You can no longer do this:
 320       $form = new HTMLForm( … );
 321       $form->setDisplayFormat( 'vform' ); // throws exception
 322     Instead, do this:
 323       $form = HTMLForm::factory( 'vform', … );
 324 * Deprecated Revision methods getRawUser(), getRawUserText() and getRawComment().
 325
 326 == Compatibility ==
 327
 328 MediaWiki 1.25 requires PHP 5.3.3 or later. There is experimental support for
 329 HHVM 3.3.0.
 330
 331 MySQL is the recommended DBMS. PostgreSQL or SQLite can also be used, but
 332 support for them is somewhat less mature. There is experimental support for
 333 Oracle and Microsoft SQL Server.
 334
 335 The supported versions are:
 336
 337 * MySQL 5.0.2 or later
 338 * PostgreSQL 8.3 or later
 339 * SQLite 3.3.7 or later
 340 * Oracle 9.0.1 or later
 341 * Microsoft SQL Server 2005 (9.00.1399)
 342
 343 == Upgrading ==
 344
 345 1.25 has several database changes since 1.24, and will not work without schema
 346 updates. Note that due to changes to some very large tables like the revision
 347 table, the schema update may take quite long (minutes on a medium sized site,
 348 many hours on a large site).
 349
 350 If upgrading from before 1.11, and you are using a wiki as a commons
 351 repository, make sure that it is updated as well. Otherwise, errors may arise
 352 due to database schema changes.
 353
 354 If upgrading from before 1.7, you may want to run refreshLinks.php to ensure
 355 new database fields are filled with data.
 356
 357 If you are upgrading from MediaWiki 1.4.x or earlier, you should upgrade to
 358 1.5 first. The upgrade script maintenance/upgrade1_5.php has been removed
 359 with MediaWiki 1.21.
 360
 361 Don't forget to always back up your database before upgrading!
 362
 363 See the file UPGRADE for more detailed upgrade instructions.
 364
 365 For notes on 1.24.x and older releases, see HISTORY.
 366
 367 == Online documentation ==
 368
 369 Documentation for both end-users and site administrators is available on
 370 MediaWiki.org, and is covered under the GNU Free Documentation License (except
 371 for pages that explicitly state that their contents are in the public domain):
 372
 373         https://www.mediawiki.org/wiki/Documentation
 374
 375 == Mailing list ==
 376
 377 A mailing list is available for MediaWiki user support and discussion:
 378
 379         https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
 380
 381 A low-traffic announcements-only list is also available:
 382
 383         https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce
 384
 385 It's highly recommended that you sign up for one of these lists if you're
 386 going to run a public MediaWiki, so you can be notified of security fixes.
 387
 388 == IRC help ==
 389
 390 There's usually someone online in #mediawiki on irc.freenode.net.