RELEASE-NOTES: Make more consistent and useful for sysadmins
[lhc/web/wiklou.git] / RELEASE-NOTES-1.33
1 = MediaWiki 1.33 =
2
3 == MediaWiki 1.33.0-PRERELEASE ==
4
5 THIS IS NOT A RELEASE YET
6
7 MediaWiki 1.33 is an alpha-quality branch and is not recommended for use in
8 production.
9
10 == Upgrading notes for 1.33 ==
11 1.33 has several database changes since 1.32, and will not work without schema
12 updates. Note that due to changes to some very large tables like the revision
13 table, the schema update may take quite long (minutes on a medium sized site,
14 many hours on a large site).
15
16 Don't forget to always back up your database before upgrading!
17
18 See the file UPGRADE for more detailed upgrade instructions, including
19 important information when upgrading from versions prior to 1.11.
20
21 Some specific notes for MediaWiki 1.33 upgrades are below:
22
23 * Some external link searches will not work correctly until update.php (or
24 refreshExternallinksIndex.php) is run. These include searches for links using
25 IP addresses, internationalized domain names, and possibly mailto links.
26 * If you ran migrateActors.php using an older version of MediaWiki and want to
27 run your wiki with $wgActorTableSchemaMigrationStage SCHEMA_COMPAT_READ_OLD,
28 note that log_search rows needed to find revision deletions by target user
29 were incorrectly deleted. See T215464 for details.
30
31 For notes on 1.32.x and older releases, see HISTORY.
32
33 === Configuration changes for system administrators in 1.33 ===
34 ==== New configuration ====
35 * $wgEnablePartialBlocks – This enables the Partial Blocks feature, which gives
36 accounts with block permissions the ability to block users, IPs, and IP ranges
37 from editing specific pages, while allowing them to edit the rest of the wiki.
38 It is a temporary setting for gradual enablement, current default to `false`,
39 and will be set to `true` and then removed once initial development completes.
40
41 ==== Changed configuration ====
42 * $wgChangeTagsSchemaMigrationStage (T193868) — This temporary setting, added in
43 MediaWiki 1.32, now defaults to MIGRATION_NEW instead of MIGRATION_WRITE_BOTH.
44 * $wgPasswordPolicy – There is a new password policy to check that the account's
45 password is not in the large blacklist. This is enabled by default for the
46 built-in user groups bureaucrat, sysop, interface-admin, and bot. To configure
47 this for other user groups, set the `PasswordNotInLargeBlacklist` flag `true`.
48 * wgPasswordDefault – There is a new password type configuration using Argon2
49 password hashing (which requires PHP 7.2 and above). It's designed to resist
50 timing attacks, and (on systems with PHP 7.3+) GPU hacking; if you configure
51 argon2 to be used, by default, it will automatically choose the best available
52 algorithm depending on which version of PHP you have available. To use this,
53 you can set `$wgPasswordDefault = 'argon2';`.
54
55 ==== Removed configuration ====
56 * $wgTagStatisticsNewTable (T199334) — This temporary setting, added in
57 MediaWiki 1.32, has now been removed. When loading Special:Tags, MediaWiki
58 will now always use the `change_tag_def` instead of the `change_tag` table.
59 * $wgUseTidy, $wgTidyBin, $wgTidyConf, $wgTidyOpts, $wgTidyInternal, and
60 $wgDebugTidy – These options, all deprecated since 1.26, have now all been
61 removed, as MediaWiki now always tidies user output. The $wgTidyConfig setting
62 remains only for experimental features and debugging, and should not be used.
63 * $wgEnableParserCache – This setting has been deprecated since 1.26, has now
64 been removed. If you still desire to disable the parser cache, instead you can
65 set `$wgParserCacheType = CACHE_NONE;`.
66 * $wgCommentTableSchemaMigrationStage – This temporary migration setting has now
67 been removed. Code finding it unset should treat it as being MIGRATION_NEW.
68 * $wgAuth – This old setting, deprecated in 1.27, has been removed as part of
69 the removal of AuthPlugin.
70 * $wgSitesCacheFile – This configuration was introduced in 1.25 with the intent
71 to allow sites to configure a file in which to cache the SiteStore database
72 table, but it was never used. SiteStore already caches its information by
73 default using BagOStuff (e.g. Memcached or APC).
74 * $wgClockSkewFudge – This setting was used by User.php to let sites adjust by
75 how much MediaWiki would fudge when trying to minimize the chances of a
76 user.user_touched database update to the "current" timestamp being before the
77 value already there (e.g. due to clock skew between different servers). This
78 is no longer a problem, because the code now ensures the timestamp is always
79 higher than the previous one. The writes are guarded with CAS logic (check
80 and set), which prevents updates that would overlap.
81
82 === New user-facing features in 1.33 ===
83 * (T96041) __EXPECTUNUSEDCATEGORY__ on a category page causes the category
84 to be hidden on Special:UnusedCategories.
85 * (T210814) SVGs are now by default displayed in wiki language on image
86 pages.
87 * Special:CreateAccount now warns the user if their chosen username has to be
88 normalized.
89 * (T205040) Multilingual images are now be displayed in the current parse
90 language where available.
91 * Special:ActiveUsers will no longer filter out users who became inactive since
92 the last time the active users query cache was updated.
93
94 === New developer features in 1.33 ===
95 * The AuthManagerLoginAuthenticateAudit hook has a new parameter for
96 additional information about the authentication event.
97 * TextContent::getText() was introduced as a replacement for
98 Content::getNativeData() for text-based content models.
99 * (T214706) LinksUpdate::getAddedExternalLinks() and
100 LinksUpdate::getRemovedExternalLinks() were introduced.
101
102 === External library changes in 1.33 ===
103 ==== New external libraries ====
104 * Added wikimedia/password-blacklist 0.1.4.
105 * Added guzzlehttp/guzzle 6.3.3.
106 * Added jakub-onderka/php-console-highlighter 0.3.2 explicitly (dev-only).
107
108 ==== Changed external libraries ====
109 * Updated OOUI from v0.29.2 to v0.31.0.
110 * Updated OOjs Router from pre-release to v0.2.0.
111 * Updated moment from v2.19.3 to v2.24.0.
112 * Updated wikimedia/xmp-reader from 0.6.0 to 0.6.2.
113 * Updated wikimedia/scoped-callback from 2.0.0 to 3.0.0.
114 * Updated wikimedia/ip-set from 1.2.0 to 2.0.1.
115 * The deprecated IPSet\IPSet alias was removed, Wikimedia\IPSet must be
116 used instead.
117 * Updated qunitjs from 2.6.2 to 2.9.1.
118 * Updated jquery-client from 2.0.1 to 2.0.2.
119 * Updated psy/psysh from 0.9.6 to 0.9.9 (dev-only).
120 * Updated nikic/php-parser from 3.1.3 to 3.1.5 (dev-only).
121 * Updated pear/net_smtp from 1.8.0 to 1.8.1.
122 * Updated cssjanus/cssjanus from 1.2.0 to 1.2.1.
123 * Updated wikimedia/php-session-serializer from 1.0.6 to 1.0.7.
124
125 ==== Removed external libraries ====
126 * …
127
128 === Bug fixes in 1.33 ===
129 * (T164211) Special:UserRights could sometimes fail with a
130 "conflict detected" error when there weren't any conflicts.
131
132 === Action API changes in 1.33 ===
133 * (T198913) Added 'ApiOptions' hook.
134 * The JSON formatversion=2 is no longer experimental.
135 * Internal API errors (those with code beginning "internal_api_error") will
136 include the exception class name in a data field named "errorclass".
137 * Class names are not guaranteed to remain stable, and in particular database
138 exceptions will now include the "Wikimedia\Rdbms\" prefix in the class name.
139 * The code including an exception class name is deprecated. In the future,
140 all internal errors will use code "internal_api_error".
141 * (T212356) When using action=delete on pages with many revisions, the module
142 may return a boolean-true 'scheduled' and no 'logid'. This signifies that the
143 deletion will be processed via the job queue.
144 * action=setnotificationtimestamp will now update the watchlist asynchronously
145 if entirewatchlist is set, so updates may not be visible immediately
146 * Block info will be added to "blocked" errors from more modules.
147 * (T216245) Autoblocks will now be spread by action=edit and action=move.
148
149 === Action API internal changes in 1.33 ===
150 * A number of deprecated methods for API documentation, intended for overriding
151 by extensions, are no longer called by MediaWiki, and will emit deprecation
152 notices if your extension attempts to use them:
153 * ApiBase::getDescription() (deprecated in 1.25)
154 * ApiBase::getParamDescription() (deprecated in 1.25)
155 * ApiBase::getExamples() (deprecated in 1.25)
156 * ApiBase::getDescriptionMessage() (deprecated in 1.30)
157 Additionally, the 'APIGetDescription' and 'APIGetParamDescription' hooks have
158 been removed, as their only use was to let extensions override values returned
159 by getDescription() and getParamDescription(), respectively.
160 * API error codes may only contain ASCII letters, numbers, underscore, and
161 hyphen. Methods such as ApiBase::dieWithError() and
162 ApiMessageTrait::setApiCode() will throw an InvalidArgumentException if
163 passed a bad code.
164 * ApiBase::checkTitleUserPermissions() now takes an options array as its third
165 parameter. Passing a User object or null is deprecated.
166 * The api-feature-usage log channel now has log context. The text message is
167 deprecated and will be removed in the future.
168
169 === Languages updated in 1.33 ===
170 MediaWiki supports over 350 languages. Many localisations are updated regularly.
171 Below only new and removed languages are listed, as well as changes to languages
172 because of Phabricator reports.
173
174 * (T203908) Added language support for Eastern Pwo (kjp).
175 * (T213717) Fixed a translation error on Goan Konkani (gom-deva) translations
176 for NS_TEMPLATE.
177 * (T212221) Added $digitTransformTable for Santali (sat).
178 * (T216479) Added language support for Saisiyat (xsy).
179
180 === Breaking changes in 1.33 ===
181 * The parameteter $lang in DifferenceEngine::setTextLanguage must be of type
182 Language. Other types are deprecated since 1.32.
183 * Skin::doEditSectionLink requires type Language for the parameter $lang.
184 The parameters $tooltip and $lang are mandatory. Omitting the parameters is
185 deprecated since 1.32.
186 * Language::truncate(), deprecated in 1.31, has been removed.
187 * UtfNormal, deprecated in 1.25, was removed. Use UtfNormal\Validator directly
188 instead.
189 * (T197179) In OOUI HTMLForm fields, the parameters 'notice', 'notice-messages',
190 and 'notice-message', which were deprecated in 1.32, were removed. Instead,
191 use 'help', 'help-message', and 'help-messages'.
192 * (T197179) HTMLFormField::getNotices(), deprecated in 1.32, was removed.
193 * The "Parsoid v1" compatibility mappings in ParsoidVirtualRESTService and
194 RestbaseVirtualRESTService, deprecated since 1.26, have been removed.
195 Use the RESTBase v1 or Parsoid v3 API instead.
196 * ParserOptions defaults 'tidy' to true now, since the untidy modes of the
197 parser are being deprecated and ParserOptions::getCanonicalOverrides()
198 has always been true at any rate.
199 * Support for disabling tidy and external tidy implementations has been removed.
200 This was deprecated in 1.32. The pure PHP Remex tidy implementation is now
201 used and no configuration is necessary.
202 * A number of deprecated methods for API documentation, intended for overriding
203 by extensions, are no longer called by MediaWiki, and will emit deprecation
204 notices if your extension attempts to use them:
205 * ApiBase::getDescription() (deprecated in 1.25)
206 * ApiBase::getParamDescription() (deprecated in 1.25)
207 * ApiBase::getExamples() (deprecated in 1.25)
208 * ApiBase::getDescriptionMessage() (deprecated in 1.30)
209 Additionally, the 'APIGetDescription' and 'APIGetParamDescription' hooks have
210 been removed, as their only use was to let extensions override values returned
211 by getDescription() and getParamDescription(), respectively.
212 * The authentication hooks 'AbortAutoAccount' 'AbortNewAccount', 'AbortLogin',
213 'LoginUserMigrated', 'UserCreateForm', and 'UserLoginForm', all deprecated by
214 the creation of AuthManager in 1.27, have been removed. This also means that
215 the FakeAuthTemplate and LoginForm classes are removed, that FakeAuthTemplate
216 is no longer passed into LoginSignupSpecialPage->getFieldDefinitions(), and
217 that LoginSignupSpecialPage->getBCFieldDefinitions() is removed.
218 * The 'jquery.localize' module, deprecated in 1.32, has been removed. Instead,
219 use 'jquery.i18n'.
220 * The hooks LanguageGetSpecialPageAliases and LanguageGetMagic, deprecated since
221 1.16, have now been removed. Instead, use $specialPageAliases or $magicWords
222 respectively in a $wgExtensionMessagesFiles file.
223 * The following methods of the Preferences class, deprecated in 1.31, have been
224 removed:
225 * getSaveBlacklist()
226 * loadPreferenceValues()
227 * getOptionFromUser()
228 * profilePreferences()
229 * skinPreferences()
230 * filesPreferences()
231 * datetimePreferences()
232 * renderingPreferences()
233 * editingPreferences()
234 * rcPreferences()
235 * watchlistPreferences()
236 * searchPreferences()
237 * miscPreferences()
238 * generateSkinOptions()
239 * getDateOptions()
240 * getImageSizes()
241 * getThumbSizes()
242 * validateSignature()
243 * cleanSignature()
244 * getTimezoneOptions()
245 * filterIntval()
246 * filterTimezoneInput()
247 * getTimeZoneList()
248 * mw.util.jsMessage(), deprecated in 1.20, was removed. Use mw.notify instead.
249 * (T61113) User::EDIT_TOKEN_SUFFIX was removed. It was deprecated since 1.27.
250 * The 'mediawiki.api' module aliases, deprecated in 1.32, have been removed.
251 Specifically: mediawiki.api.category, mediawiki.api.edit,
252 mediawiki.api.login, mediawiki.api.options, mediawiki.api.parse,
253 mediawiki.api.upload, mediawiki.api.user, mediawiki.api.watch,
254 mediawiki.api.messages, and mediawiki.api.rollback.
255 * The 'jquery.byteLimit' module alias for 'jquery.lengthLimit',
256 deprecated in 1.31, was removed.
257 * Revision::fetchRevision(), deprecated in 1.28, was removed.
258 * Class SquidUpdate, deprecated in 1.27, was removed.
259 * Title->getSquidURLs(), deprecated in 1.27, was removed. Instead, use
260 Title->getCdnUrls().
261 * Title::escapeFragmentForURL(), deprecated in 1.30, was removed. Use
262 Sanitizer::escapeIdForLink() or escapeIdForExternalInterwiki() instead.
263 * Title->canTalk(), deprecated in 1.30, was removed. Instead, use
264 Title->canHaveTalkPage().
265 * Title's methods for site and user page related to CSS and JS, deprecated in
266 1.31, were removed:
267 * Title->isCssOrJsPage() — Use Title->isSiteConfigPage()
268 * Title->isCssJsSubpage() – Use Title->isUserConfigPage()
269 * Title->getSkinFromCssJsSubpage() – Use Title->getSkinFromConfigSubpage()
270 * Title->isCssSubpage() – Use Title->isUserCssConfigPage()
271 * Title->isJsSubpage() – Use Title->isUserJsConfigPage()
272 * SiteSQLStore, deprecated in 1.27 and whose only method, ::newInstance(),
273 would return the global SiteStore instance, has been removed. You can get to
274 this via MediaWiki\MediaWikiServices::getInstance()->getSiteStore() directly.
275 * Linker::formatSize, deprecated in 1.28, has been removed (with DummyLinker's).
276 Instead, use Language->formatSize() with the relevant Language object.
277 * Linker::formatTemplates, deprecated in 1.28, has been removed (along with the
278 version in DummyLinker). You can use TemplatesOnThisPageFormatter directly.
279 * EventRelayerGroup::singleton(), deprecated in 1.27, has been removed. You can
280 use MediaWikiServices::getInstance()->getEventRelayerGroup() directly.
281 * LinkCache->addLink(), deprecated in 1.27, has been removed. It is thought to
282 be unused, and is distinct from OutputPage->addLink(), which remains.
283 * JsonContent->getJsonData(), deprecated in 1.25, has been removed. Instead, use
284 JsonContent->getData().
285 * MWExceptionHandler::getLogId(), deprecated in 1.27, has been removed, as the
286 exception ID is the same as the request ID, from WebRequest::getRequestId().
287 * SearchEngine::getNearMatchResultSet(), deprecated in 1.27, has been removed.
288 You can use SearchEngine::getNearMatcher() instead.
289 * EmailNotification::updateWatchlistTimestamp, deprecated in 1.27, has been
290 removed. Instead, use WatchedItemStore::updateNotificationTimestamp directly.
291 * User::getGroupName() and ::getGroupMember(), both deprecated in 1.29, have
292 been removed. Instead, please use UserGroupMembership::getGroupName() and
293 UserGroupMembership::getGroupMemberName().
294 * Backwards compatibility for setting wgSessionsInObjectCache to false or using
295 wgSessionHandler, both of which were deprecated in 1.27 with the introduction
296 of SessionManager, has been removed.
297 * SessionManager::autoCreateUser, deprecated in 1.27, has been removed. Use
298 MediaWiki\Auth\AuthManager::autoCreateUser instead.
299 * The mw.libs.jpegmeta property, deprecated in 1.31, was removed.
300 Use require( 'mediawiki.libs.jpegmeta' ) instead.
301 * The mw.user.stickyRandomId() method, deprecated in 1.32, was removed.
302 Use mw.user.getPageviewToken() instead.
303 * Removed deprecated class property WikiRevision::$importer.
304 * ResourceLoaderFileModule::readStyleFiles() now requires its $context
305 parameter.
306 * The ChangeList::insertArticleLink() method, that was deprecated in 1.27, has
307 been removed.
308 * MessageBlobStore::__construct() now requires its $rl parameter.
309 * Second parameter to Sanitizer::escapeIdReferenceList() (deprecated in 1.31)
310 has been removed.
311 * The 'jquery.xmldom' module has been removed.
312 * The 'jquery.mockjax' module has been removed.
313 * The 'jquery.hidpi' module, deprecated in 1.32, has been removed.
314 * AuthPlugin and related code, deprecated in 1.27, has been removed. Extensions
315 should instead use AuthManager. The following no longer exist:
316 * The AuthPlugin class itself and the related AuthPluginUser class and i18n
317 * The AuthPluginSetup and AuthPluginAutoCreate hooks
318 * The transitional wrapper classes AuthPluginPrimaryAuthenticationProvider,
319 AuthManagerAuthPlugin, and AuthManagerAuthPluginUser.
320 * The $wgAuth configuration setting and its use in Setup.php and unit tests
321 * (T217772) The 'wgAvailableSkins' mw.config key in JavaScript, was removed.
322 * Language::markNoConversion, deprecated in 1.32, has been removed. Use
323 LanguageConverter::markNoConversion instead.
324 * BagOStuff::modifySimpleRelayEvent() method has been removed.
325 * ParserOutput::getLegacyOptions, deprecated in 1.30, has been removed.
326 Use ParserOutput::allCacheVaryingOptions instead.
327 * CdnCacheUpdate::newSimplePurge, deprecated in 1.27, has been removed.
328 Use CdnCacheUpdate::newFromTitles() instead.
329
330 === Deprecations in 1.33 ===
331 * The configuration option $wgUseESI has been deprecated, and is expected
332 to be removed in a future release.
333 * The configuration option $wgSquidPurgeUseHostHeader has been deprecated,
334 and is expected to be removed in a future release.
335 * The configuration options $wgFixArabicUnicode and $wgFixMalayalamUnicode,
336 introduced in MW 1.17, have been deprecated. These fixes will always be
337 applied for Arabic and Malayalam in the future. Please enable these on
338 your local wiki (if you have them explicitly set to false) and run
339 maintenance/cleanupTitles.php to fix any existing page titles.
340 * The LegacyHookPreAuthenticationProvider class, deprecated since its creation
341 in 1.27 as part of the AuthManager re-write, now emits deprecation warnings.
342 This will help identify the issue if you added it to $wgAuthManagerConfig.
343 * wfSplitWikiId() is now deprecated. Cache key generation should have the wiki
344 domain ID as a key component and use makeGlobalKey().
345 * (T202094) Title::getUserCaseDBKey() is deprecated; instead, please use
346 Title::getDBKey(), which doesn't vary case.
347 * User::getPasswordValidity() is now deprecated. User::checkPasswordValidity()
348 returns the same information in a more useful format.
349 * For Linker::generateTOC() and Linker::tocList(), passing strings or booleans
350 as the $lang parameter was deprecated. The same applies to DummyLinker.
351 * The PasswordPolicy 'PasswordCannotBePopular' has been deprecated. To
352 follow best practices, it is reccommended to use 'PasswordNotInLargeBlacklist'
353 instead which blacklists 100,000 commonly used passwords.
354 * (T208862) Action::requiresUnblock() is now called from
355 Title::getUserPermissionsErrors() and Title::userCan(). Previously, the method
356 was only called in Action::checkCanExecute(). Actions should ensure that their
357 requiresUnblock() returns the proper result (the default is `true`).
358 * (T211608) The MediaWiki\Services namespace has been renamed to
359 Wikimedia\Services. The old name is still supported, but deprecated.
360 * (T155582) Content::getNativeData has been deprecated. Please use model-
361 specific getters, such as TextContent::getText().
362 * The class WebInstallerOutput is now marked as @private.
363 * (T209699) The jquery.async module has been deprecated. JavaScript code that
364 needs asynchronous behaviour should use Promises.
365 * Password::equals() is deprecated, use verify().
366 * BaseTemplate::msgWiki() and QuickTemplate::msgWiki() will be removed. Use
367 other means to fetch a properly escaped message string or Message object.
368 * (T126091) The 'ResourceLoaderTestModules' hook, which lets you declare QUnit
369 testing code for your JavaScript modules, is deprecated. Instead, you can now
370 use the new extension registration key 'QUnitTestModule'.
371 * (T213426) The jquery.throttle-debounce module has been deprecated. JavaScript
372 code that needs this behaviour should use OO.ui.debounce/throttle.
373 * The mw.language.specialCharacters property from the
374 'mediawiki.language.specialCharacters' module has been deprecated.
375 Use require( 'mediawiki.language.specialCharacters' ) instead.
376 * ChangeTags::purgeTagUsageCache() has been deprecated, and is expected to be
377 removed in a future release.
378 * Passing a User object or null as the third parameter to
379 ApiBase::checkTitleUserPermissions() has been deprecated. Pass an array
380 [ 'user' => $user ] instead.
381 * (T211578) Block::prevents is deprecated. Use Block::isEmailBlocked,
382 Block::isCreateAccountBlocked and Block::isUsertalkEditAllowed to get and set
383 block properties; use Block::appliesToRight and Block::appliesToUsertalk to
384 check block behaviour.
385 * The api-feature-usage log channel now has log context. The text message is
386 deprecated and will be removed in the future.
387 * The FileBasedSiteLookup class has been deprecated. For a cacheable SiteLookup
388 implementation, use CachingSiteStore instead.
389
390 === Other changes in 1.33 ===
391 * (T201747) Html::openElement() warns if given an element name with a space
392 in it.
393 * The implementation of buildStringCast() in Wikimedia\Rdbms\Database has
394 changed to explicitly cast. Subclasses relying on the base-class
395 implementation should check whether they need to override it now.
396 * BagOStuff::add is now abstract and must explicitly be defined in subclasses.
397
398 == Compatibility ==
399 MediaWiki 1.33 requires PHP 7.0.13 or later. Although HHVM 3.18.5 or later is
400 supported, it is generally advised to use PHP 7.0.13 or later for long term
401 support.
402
403 MySQL/MariaDB is the recommended DBMS. PostgreSQL or SQLite can also be used,
404 but support for them is somewhat less mature. There is experimental support for
405 Oracle and Microsoft SQL Server.
406
407 The supported versions are:
408
409 * MySQL 5.5.8 or later
410 * PostgreSQL 9.2 or later
411 * SQLite 3.8.0 or later
412 * Oracle 9.0.1 or later
413 * Microsoft SQL Server 2005 (9.00.1399)
414
415 == Online documentation ==
416 Documentation for both end-users and site administrators is available on
417 MediaWiki.org, and is covered under the GNU Free Documentation License (except
418 for pages that explicitly state that their contents are in the public domain):
419
420 https://www.mediawiki.org/wiki/Special:MyLanguage/Documentation
421
422 == Mailing list ==
423 A mailing list is available for MediaWiki user support and discussion:
424
425 https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
426
427 A low-traffic announcements-only list is also available:
428
429 https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce
430
431 It's highly recommended that you sign up for one of these lists if you're
432 going to run a public MediaWiki, so you can be notified of security fixes.
433
434 == IRC help ==
435 There's usually someone online in #mediawiki on irc.freenode.net.