Update git submodules
[lhc/web/wiklou.git] / RELEASE-NOTES-1.31
1 == MediaWiki 1.31 ==
2
3 THIS IS NOT A RELEASE YET
4
5 MediaWiki 1.31 is an alpha-quality branch and is not recommended for use in
6 production.
7
8 === Configuration changes in 1.31 ===
9 * $wgEnableAPI and $wgEnableWriteAPI are now deprecated and will be removed in
10 a future version. The API is now considered to be stable, secure and
11 essential.
12 * $wgUsejQueryThree was removed, as it is now the default. This was documented as a
13 temporary variable during the migration period, deprecated since 1.29.
14 * $wgLogoHD has been updated to support svg images and uses $wgLogo where
15 possible for fallback images such as png.
16 * (T44246) $wgFilterLogTypes will no longer ignore 'patrol' when user does
17 not have the right to mark things patrolled.
18 * Wikis that contain imported revisions or CentralAuth global blocks should run
19 maintenance/cleanupUsersWithNoId.php.
20 * $wgResourceLoaderMinifierStatementsOnOwnLine and $wgResourceLoaderMinifierMaxLineLength
21 were removed (deprecated since 1.27).
22 * (T180921) $wgReferrerPolicy now supports having fallbacks for browsers that are not
23 using the latest version of the Referrer Policy specification.
24 * $wgFragmentMode is now set to [ 'legacy', 'html5' ] by default. This is a first step of
25 migration to human-readable section IDs that will later result in 'html5' being the
26 default mode.
27 * CACHE_ACCEL now only supports APC(u) or WinCache. XCache support was removed
28 as upstream is inactive and has no plans to move to PHP 7.
29 * The old CategorizedRecentChanges feature, including its related configuration
30 option $wgAllowCategorizedRecentChanges, has been removed.
31 * (T188472) The 'comma' value for $wgArticleCountMethod is no longer supported for
32 performance reasons, and installations with this setting will now work as if it
33 was configured with 'any'.
34 * (T185753) MediaWiki now defaults to using RemexHtml to tidy up user input, rather than
35 being off by default. If you wish to disable HTML tidying entirely, set $wgTidyConfig
36 to null; if you wish to use the old, deprecated Tidy external binary, both
37 set $wgTidyConfig to null and also set $wgUseTidy to true.
38 * $wgLogAutopatrol now defaults to false instead of true.
39 * $wgValidateAllHtml was removed and will be ignored.
40 * $wgScriptExtension was removed (deprecated and ignored since 1.25).
41 See 1.25 release notes for more information.
42 * $wgUseAjax is now marked as deprecated, just like the deprecated AJAX
43 framework that it enables. Some extensions mistakenly used this to check
44 whether any AJAX functionality at all should be enabled, further making this
45 problematic to retain.
46
47 === New features in 1.31 ===
48 * (T76554) User sub-pages named ….json are now protected in the same way that ….js
49 and ….css pages are, so that configuration options can safely be placed there.
50 * Wikimedia\Rdbms\IDatabase->select() and similar methods now support
51 joins with parentheses for grouping.
52 * As a first pass in standardizing dialog boxes across the MediaWiki product,
53 Html class now provides helper methods for messageBox, successBox, errorBox and
54 warningBox generation.
55 * (T9240) Imports will now record unknown (and, optionally, known) usernames in
56 a format like "iw>Example".
57 * (T20209) Linker (used on history pages, log pages, and so on) will display
58 usernames formed like "iw>Example" as interwiki links, as if by wikitext like
59 [[iw:User:Example|iw>Example]].
60 * (T111605) The 'ImportHandleUnknownUser' hook allows extensions to auto-create
61 users during an import.
62 * Added a hook, ParserOutputPostCacheTransform, to allow extensions to affect
63 the ParserOutput::getText() post-cache transformations.
64 * Added a hook, UploadForm:getInitialPageText, to allow extensions to alter the
65 initial page text for file uploads.
66 * (T181651) The info page for File pages now displays the file's base-16 SHA1
67 hash value in the table of basic information.
68 * Style tags with a 'data-mw-deduplicate' attribute will be deduplicated as a
69 ParserOutput::getText() post-cache transformation. This may be disabled by
70 passing 'deduplicateStyles' => false to that method.
71 * The identity of the logged-in or IP "actor" for logged actions is being moved
72 into a new actor table, with the rows in tables such as revision and logging
73 referring to the actor ID instead of storing the user ID and name/IP in
74 every row.
75 * This is currently gated by $wgActorTableSchemaMigrationStage. Most wikis
76 can set this to MIGRATION_NEW and run maintenance/migrateActors.php as
77 soon as any necessary extensions are updated.
78 * Most code accessing rows for logged actions from the database should use
79 the relevant getQueryInfo() methods to get the information needed to build
80 the SQL query. The ActorMigration class may also be used to get feature-flagged
81 information needed to access actor-related fields during the migration
82 period.
83 * Added Wikimedia\Rdbms\IDatabase::cancelAtomic(), to roll back an atomic
84 section without having to roll back the whole transaction.
85 * Wikimedia\Rdbms\IDatabase::doAtomicSection(), non-native ::insertSelect(),
86 and non-MySQL ::replace() and ::upsert() no longer roll back the whole
87 transaction on failure.
88 * (T189785) Added a monthly heartbeat ping to the pingback feature.
89 * The CLI installer (maintenance/install.php) learned to detect and include
90 extensions. Pass --with-extensions to enable that feature.
91 * (T184791) rc_patrolled now has three states: "0" for unpatrolled,
92 "1" for manually patrolled and "2" for autopatrolled actions.
93 * Extensions can now set their type to "editor" if they provide an editor
94 or enhance the editing experience.
95 * Extensions can use a PSR-4 autoloader by setting an "AutoloadNamespaces" property
96 in extension.json. See
97 <https://www.mediawiki.org/wiki/Manual:Extension.json/Schema#AutoloadNamespaces>
98 for more details and an example.
99
100 === External library changes in 1.31 ===
101
102 ==== Upgraded external libraries ====
103 * Updated jquery.chosen from v0.9.14 to v1.8.2.
104 * Updated composer/spdx-licenses from 1.1.4 to
105 1.3.0 (development dependency).
106 * Updated nikic/php-parser from 2.1.0 to 3.1.3
107 (development dependency).
108 * Updated wikimedia/ip-set from 1.1.0 to 1.2.0.
109 * Updated wikimedia/relpath from 2.0.0 to 2.1.1.
110 * Updated wikimedia/running-stat from 1.1.0 to 1.2.0.
111 * Updated wikimedia/wrappedstring from 2.2.0 to 2.3.0.
112 * Updated mediawiki/at-ease from 1.1.0 to 1.2.0.
113 * Updated wikimedia/php-session-serializer from 1.0.4 to 1.0.6.
114 * Updated wikimedia/remex-html from 1.0.2 to 1.0.3.
115 * Updated wikimedia/html-formatter from 1.0.1 to 1.0.2.
116 * …
117
118 ==== New external libraries ====
119 * Added wikimedia/object-factory 1.0.0
120 * …
121
122 ==== Removed and replaced external libraries ====
123 * (T17845) The deprecated 'jquery.badge' module was removed.
124 * The deprecated 'jquery.autoEllipsis' module was removed. Use the CSS
125 text-overflow property instead.
126 * The deprecated 'jquery.placeholder' module was removed.
127 * The deprecated 'jquery.appear' module was removed. Use the
128 'mediawiki.viewport' module instead.
129 * The deprecated 'mediawiki.widgets.CategorySelector' module alias was removed.
130 Use the 'mediawiki.widgets.CategoryMultiselectWidget' module directly instead.
131 * mediawiki/at-ease was replaced with wikimedia/at-ease.
132
133 === Bug fixes in 1.31 ===
134 * (T90902) Non-breaking space in header ID breaks anchor.
135 * (T189375) CSSMin now allows quoted urls in `url()` syntax to start with a space.
136
137 === Action API changes in 1.31 ===
138 * (T185058) The 'name' value to tgprop for action=query&list=tags has been
139 removed. It has never made a difference in the output, the name was always
140 returned regardless.
141 * The 'watch' and 'unwatch' parameters for action=move have been removed. They
142 were deprecated and also accidentally nonfunctional since 1.17 in 2010. Use
143 'watchlist' instead.
144
145 === Action API internal changes in 1.31 ===
146 * ApiBase::getProfileDBTime was removed (deprecated since 1.25)
147 * ApiBase::getModuleProfileName was removed (deprecated since 1.25)
148 * ApiBase::getProfileTime was removed (deprecated since 1.25)
149
150 === Languages updated in 1.31 ===
151 MediaWiki supports over 350 languages. Many localisations are updated
152 regularly. Below only new and removed languages are listed, as well as
153 changes to languages because of Phabricator reports.
154
155 * (T180052) Mirandese (mwl) now supports gendered NS_USER/NS_USER_TALK namespaces.
156 * (T182305) New language support: Nyungar (nys).
157 * (T186359) New language support: Siberian Tatar [cебертатар] (sty).
158 * (T186635) New language support: Guianan Creole (gcr).
159 * (T186647) New language support: Kumyk [къумукъ] (kum).
160 * (T187750) New language support: Spanish formal address (es-formal).
161 * (T187824) New language support: Hungarian formal address (hu-formal).
162
163 === Breaking changes in 1.31 ===
164 * MessageBlobStore::insertMessageBlob() (deprecated in 1.27) was removed.
165 * The OutputPage class constructor now requires a context parameter,
166 (instantiating without context was deprecated in 1.18)
167 * The mw.page JavaScript singleton (deprecated in 1.30) was removed.
168 * Article::getLastPurgeTimestamp(), WikiPage::getLastPurgeTimestamp(), and the
169 related WikiPage::PURGE_* constants, deprecated in 1.29, were removed.
170 * The Article::selectFields(), Article::onArticleCreate(),
171 Article::onArticleDelete(), and Article::onArticleEdit() methods, deprecated
172 in 1.24, were removed.
173 * Installer::locateExecutable() and Installer::locateExecutableInDefaultPaths()
174 were removed, use ExecutableFinder::findInDefaultPaths() instead.
175 * The deprecated MW_DIFF_VERSION constant was removed.
176 DifferenceEngine::MW_DIFF_VERSION should be used instead.
177 * Due to significant refactoring, method ContribsPager::getUserCond() that had
178 no access restriction has been removed.
179 * The Block class will no longer accept usable-but-missing usernames for
180 'byText' or ->setBlocker(). Callers should either ensure the blocker exists
181 locally or use a new interwiki-format username like "iw>Example".
182 * The following methods and constants from the WatchedItem class, which were deprecated in
183 1.27, have been removed.
184 * WatchedItem::getTitle()
185 * WatchedItem::fromUserTitle()
186 * WatchedItem::addWatch()
187 * WatchedItem::removeWatch()
188 * WatchedItem::isWatched()
189 * WatchedItem::duplicateEntries()
190 * WatchedItem::IGNORE_USER_RIGHTS
191 * WatchedItem::CHECK_USER_RIGHTS
192 * WatchedItem::DEPRECATED_USAGE_TIMESTAMP
193 * The $statementsOnOwnLine parameter of JavaScriptMinifier::minify was removed.
194 The corresponding configuration variable ($wgResourceLoaderMinifierStatementsOnOwnLine)
195 has been deprecated since 1.27 and was removed as well.
196 * The $maxLineLength parameter of JavaScriptMinifier::minify was removed.
197 The corresponding configuration variable ($wgResourceLoaderMinifierMaxLineLength)
198 has been deprecated since 1.27 and was removed as well.
199 * The HtmlFormatter class was removed (deprecated in 1.27). The namespaced
200 HtmlFormatter\HtmlFormatter class should be used instead.
201 * The driver 'mysql' for MySQL, deprecated in MediaWiki 1.30, has been removed.
202 The driver has been deprecated since PHP 5.5 and was removed in PHP 7.0. The
203 default driver for MySQL has been 'mysqli' since MediaWiki 1.22.
204 * The following properties of PreparedEdit were deprecated in 1.21 and have been removed:
205 * PreparedEdit->newText
206 * PreparedEdit->oldText
207 * PreparedEdit->pst
208 * ParserOutput objects generated using a non-default value for
209 ParserOptions::setWrapOutputClass() can no longer be added to the parser cache.
210 * The following deprecated methods from the OutputPage class have been removed:
211 * OutputPage::addExtensionStyle(); deprecated in 1.27
212 * OutputPage::getExtStyle(); deprecated in 1.27
213 * OutputPage::setETag(); deprecated in 1.28 (obsolete no-op)
214 * OutputPage::setSquidMaxage(); deprecated in 1.27
215 * OutputPage::readOnlyPage(); deprecated in 1.25
216 * OutputPage::rateLimited(); deprecated in 1.25
217 * Additionally, the protected OutputPage::$mExtStyles array, only accessed through
218 the above and with no known uses, was removed.
219 * The no-op method Skin::showIPinHeader(), deprecated in 1.27, was removed.
220 * The following variables and methods in EditPage, deprecated in MediaWiki 1.30, were removed:
221 * $isCssJsSubpage — use ::isUserConfigPage()
222 * $isCssSubpage — use ::isUserCssConfigPage()
223 * $isJsSubpage — use ::isUserJsConfigPage()
224 * $isWrongCaseCssJsPage – use ::isWrongCaseUserConfigPage()
225 * ::getSummaryInput() – use ::getSummaryInputWidget()
226 * ::getSummaryInputOOUI() – use ::getSummaryInputWidget()
227 * ::getCheckboxes() – use ::getCheckboxesWidget() or ::getCheckboxesDefinition()
228 * ::getCheckboxesOOUI() – use ::getCheckboxesWidget() or ::getCheckboxesDefinition()
229 * The method ResourceLoaderModule::getPosition(), deprecated in 1.29, has been removed.
230 * In User, the cookie-related methods which were wrappers for the functions on the response
231 object, and were deprecated in 1.27, have been removed:
232 * ::setCookie()
233 * ::clearCookie()
234 * ::setExtendedLoginCookie()
235 Note that User::setCookies() remains, and is not deprecated.
236 * Also in User, some auth-related methods which were deprecated in 1.27, have been removed:
237 * ::getEditTokenTimestamp() – use MediaWiki\Session\Token::getTimestamp()
238 * ::getPasswordFactory() – create a PasswordFactory directly
239 * ::passwordChangeInputAttribs()
240 * The global functions wfProfileIn and wfProfileOut, deprecated in 1.25, have been removed.
241 * SpecialPageFactory::getList(), deprecated in 1.24, has been removed. You can
242 use ::getNames() instead.
243 * OpenSearch::getOpenSearchTemplate(), deprecated in 1.25, has been removed. You
244 can use ApiOpenSearch::getOpenSearchTemplate() instead.
245 * The global function wfBaseConvert, deprecated in 1.27, has been removed. Use
246 Wikimedia\base_convert() directly.
247 * Calling Database::begin() explicitly during an implicit transaction or when DBO_TRX
248 is set results in an exception. Calling Database::commit() explicitly for an implicit
249 transaction also results in an exception. Previously these were logged as errors.
250 The startAtomic() and endAtomic() methods, or AtomicSectionUpdate should be used
251 instead.
252 * The global function wfOutputHandler() was removed, use the its replacement
253 MediaWiki\OutputHandler::handle() instead. The global function was only sometimes defined.
254 Its replacement is always available via the autoloader.
255 * ChangeTags::listExtensionActivatedTags and ::listExtensionDefinedTags, deprecated
256 in 1.28, have been removed. Use ::listSoftwareActivatedTags() and
257 ::listSoftwareDefinedTags() instead.
258 * Title::getTitleInvalidRegex(), deprecated in 1.25, has been removed. You
259 can use MediaWikiTitleCodec::getTitleInvalidRegex() instead.
260 * HTMLForm & VFormHTMLForm::isVForm(), deprecated in 1.25, have been removed.
261 * The ProfileSection class, deprecated in 1.25 and unused, has been removed.
262 * The ResourceLoaderGetLessVars hook, deprecated in 1.30, has been removed.
263 Use ResourceLoaderModule::getLessVars() to expose local variables instead
264 of global ones.
265 * As part of work to modernise user-generated content clean-up, a config option and some
266 methods related to HTML validity were removed without deprecation. The public methods
267 MWTidy::checkErrors() and its callee TidyDriverBase::validate() are removed, as are
268 MediaWikiTestCase::assertValidHtmlSnippet() and ::assertValidHtmlDocument(). The
269 $wgValidateAllHtml configuration option is removed and will be ignored.
270 * Execution of external programs using MediaWiki\Shell\Command now applies RESTRICT_DEFAULT
271 Firejail restriction by default.
272 * The ResourceLoaderModule::getHashMtime() and ::getDefinitionMtime() methods,
273 deprecated in 1.26, were removed.
274
275 === Deprecations in 1.31 ===
276 * The Revision class was deprecated in favor of RevisionStore, BlobStore, and
277 RevisionRecord and its subclasses.
278 * The global function wfBCP47 is deprecated in favour of LanguageCode::bcp47.
279 * The global function wfCountDown is now deprecated in favor of Maintenance::countDown.
280 * Several methods for returning lists of fields to select from the database
281 have been deprecated in favor of similar methods that also return the tables
282 to select from and the join conditions for those tables.
283 * Block::selectFields() → Block::getQueryInfo()
284 * RecentChange::selectFields() → RecentChange::getQueryInfo()
285 * ArchivedFile::selectFields() → ArchivedFile::getQueryInfo()
286 * LocalFile::selectFields() → LocalFile::getQueryInfo()
287 * LocalFile::getCacheFields() with a prefix no longer works
288 * LocalFile::getLazyCacheFields() with a prefix no longer works
289 * OldLocalFile::selectFields() → OldLocalFile::getQueryInfo()
290 * RecentChange::selectFields() → RecentChange::getQueryInfo()
291 * Revision::userJoinCond() → Revision::getQueryInfo( [ 'user' ] )
292 * Revision::selectUserFields() → Revision::getQueryInfo( [ 'user' ] )
293 * Revision::pageJoinCond() → Revision::getQueryInfo( [ 'page' ] )
294 * Revision::selectPageFields() → Revision::getQueryInfo( [ 'page' ] )
295 * Revision::selectTextFields() → Revision::getQueryInfo( [ 'text' ] )
296 * Revision::selectFields() → Revision::getQueryInfo()
297 * Revision::selectArchiveFields() → Revision::getArchiveQueryInfo()
298 * User::selectFields() → User::getQueryInfo()
299 * WikiPage::selectFields() → WikiPage::getQueryInfo()
300 * Revision::setUserIdAndName() was deprecated.
301 * Access to TitleValue class properties was deprecated, the relevant getters
302 should be used instead.
303 * DifferenceEngine::getDiffBodyCacheKey() is deprecated. Subclasses should
304 override DifferenceEngine::getDiffBodyCacheKeyParams() instead.
305 * Use of Maintenance::error( $err, $die ) to exit script was deprecated. Use
306 Maintenance::fatalError() instead.
307 * Passing a ParserOptions object to OutputPage::parserOptions() is deprecated.
308 * The RevisionInsertComplete hook is now deprecated, use RevisionRecordInserted instead.
309 RevisionInsertComplete is still called, but the second and third parameter will always be null.
310 Hard deprecation is scheduled for 1.32.
311 * The following methods that get and set ParserOutput state are deprecated.
312 Callers should use the new stateless $options parameter to
313 ParserOutput::getText() instead.
314 * ParserOptions::getEditSection()
315 * ParserOptions::setEditSection()
316 * ParserOutput::getEditSectionTokens()
317 * ParserOutput::setEditSectionTokens()
318 * ParserOutput::getTOCEnabled()
319 * ParserOutput::setTOCEnabled()
320 * OutputPage::enableSectionEditLinks()
321 * OutputPage::sectionEditLinksEnabled()
322 * The public ParserOutput state fields $mTOCEnabled and $mEditSectionTokens are also deprecated.
323 * License::getLicenses has been deprecated; use License::getLines instead.
324 * QuickTemplate::setRef() was deprecated in favour of QuickTemplate::set().
325 Setting template variables by reference allowed violating the principle of data being
326 immutable once added to the skin template. In practice, this method was not being
327 used for that. Rather, setRef() existed as memory optimisation for PHP 4.
328 * QuickTemplate::setTranslator() was deprecated in favour of Skin::msg() parameters.
329 * MediaWikiI18N::set() was deprecated in favour of Skin::msg() parameters.
330 * MediaWikiI18N::translate() was deprecated in favour of Skin::msg() or wfMessage().
331 * Passing false to ParserOptions::setWrapOutputClass() is deprecated. Use the
332 'unwrap' transform to ParserOutput::getText() instead.
333 * \ObjectFactory (no namespace) is deprecated, the namespaced \Wikimedia\ObjectFactory
334 from the wikimedia/object-factory library should be used instead.
335 * CommentStore::newKey is deprecated. Get an instance from MediaWikiServices instead.
336 * The following CommentStore methods have had their signatures changed to introduce a $key parameter,
337 usage of the methods on instances retrieved from CommentStore::newKey will remain unchanged but deprecated:
338 * CommentStore::getFields
339 * CommentStore::getJoin
340 * CommentStore::getComment
341 * CommentStore::getCommentLegacy
342 * CommentStore::insert
343 * CommentStore::insertWithTemplate
344 * The following methods in Title have been renamed, and the old ones are deprecated:
345 * Title::getSkinFromCssJsSubpage – use ::getSkinFromConfigSubpage
346 * Title::isCssOrJsPage – use ::isSiteConfigPage
347 * Title::isCssJsSubpage – use ::isUserConfigPage
348 * Title::isCssSubpage – use ::isUserCssConfigPage
349 * Title::isJsSubpage – use ::isUserJsConfigPage
350 * The following methods related to caching of half-parsed HTML were deprecated:
351 * Parser::serializeHalfParsedText()
352 * Parser::unserializeHalfParsedText()
353 * Parser::isValidHalfParsedText()
354 * StripState::getSubState()
355 * StripState::merge()
356 * The DeferredStringifier class is deprecated, use Message::listParam() instead.
357 * The type string for the parameter $lang of DateFormatter::getInstance is
358 deprecated.
359 * Wikimedia\Rdbms\SavepointPostgres is deprecated.
360 * The DO_MAINTENANCE constant is deprecated. RUN_MAINTENANCE_IF_MAIN should be
361 used instead.
362 * The function wfShellWikiCmd() has been deprecated, use
363 MediaWiki\Shell::makeScriptCommand().
364
365 === Other changes in 1.31 ===
366 * Browser support for Internet Explorer 10 was lowered from Grade A to Grade C.
367 * Browser support for Opera 12 and older was removed. Opera 15+ continues at Grade A.
368 * Introducing multi-content-revision capability into the storage layer. For details,
369 see <https://www.mediawiki.org/wiki/Requests_for_comment/Multi-Content_Revisions>.
370 * The "free" CSS class is now only applied to unbracketed URLs in wikitext. Links
371 written using square brackets will get the class "text" not "free".
372 * RFC 157418: Whitespace is trimmed from wikitext headings, wikitext list items,
373 wikitext table captions, wikitext table headings, wikitext table cells. HTML
374 headings, HTML list items, HTML table captions, HTML table headings, HTML table cells
375 will not have this trimming behavior.
376
377 == Compatibility ==
378 MediaWiki 1.31 requires PHP 7.0.0 or later. Although HHVM 3.18.5 or later is supported,
379 it is generally advised to use PHP 7.0.0 or later for long term support.
380
381 MySQL/MariaDB is the recommended DBMS. PostgreSQL or SQLite can also be used,
382 but support for them is somewhat less mature. There is experimental support for
383 Oracle and Microsoft SQL Server.
384
385 The supported versions are:
386
387 * MySQL 5.5.8 or later
388 * PostgreSQL 9.2 or later
389 * SQLite 3.3.7 or later
390 * Oracle 9.0.1 or later
391 * Microsoft SQL Server 2005 (9.00.1399)
392
393 == Upgrading ==
394 1.31 has several database changes since 1.30, and will not work without schema
395 updates. Note that due to changes to some very large tables like the revision
396 table, the schema update may take quite long (minutes on a medium sized site,
397 many hours on a large site).
398
399 Don't forget to always back up your database before upgrading!
400
401 See the file UPGRADE for more detailed upgrade instructions, including
402 important information when upgrading from versions prior to 1.11.
403
404 For notes on 1.30.x and older releases, see HISTORY.
405
406 == Online documentation ==
407 Documentation for both end-users and site administrators is available on
408 MediaWiki.org, and is covered under the GNU Free Documentation License (except
409 for pages that explicitly state that their contents are in the public domain):
410
411 https://www.mediawiki.org/wiki/Special:MyLanguage/Documentation
412
413 == Mailing list ==
414 A mailing list is available for MediaWiki user support and discussion:
415
416 https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
417
418 A low-traffic announcements-only list is also available:
419
420 https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce
421
422 It's highly recommended that you sign up for one of these lists if you're
423 going to run a public MediaWiki, so you can be notified of security fixes.
424
425 == IRC help ==
426 There's usually someone online in #mediawiki on irc.freenode.net.