X-Git-Url: https://git.heureux-cyclage.org/?p=lhc%2Fweb%2Fwiklou.git;a=blobdiff_plain;f=RELEASE-NOTES-1.34;h=229fda407cf314842ab55d1ea015a0334a27bbba;hp=c9c96c29ed2703be1f7d3c4d0ad301efbd94530b;hb=28d9e60182f33c507147f48b15566c653b890a3c;hpb=0c0676c34eeced65847f20b896049070a766a532 diff --git a/RELEASE-NOTES-1.34 b/RELEASE-NOTES-1.34 index c9c96c29ed..229fda407c 100644 --- a/RELEASE-NOTES-1.34 +++ b/RELEASE-NOTES-1.34 @@ -26,6 +26,13 @@ For notes on 1.33.x and older releases, see HISTORY. === Configuration changes for system administrators in 1.34 === +In an effort to enforce best practices for passwords, MediaWiki will now warn +users, and suggest that they change their password, if it is in the list of +100,000 commonly used passwords that are considered bad passwords. If you want +to disable this for your users, please add the following to your local settings: + +$wgPasswordPolicy['policies']['default']['PasswordNotInLargeBlacklist'] = false; + ==== New configuration ==== * $wgAllowExternalReqID (T201409) - This configuration setting controls whether Mediawiki accepts the request ID set by the incoming request via the @@ -66,6 +73,7 @@ For notes on 1.33.x and older releases, see HISTORY. which was deprecated in 1.30, no longer works. Instead, $wgProxyList should be an array with IP addresses as the values, or a string path to a file containing one IP address per line. +* $wgCookieSetOnAutoblock and $wgCookieSetOnIpBlock are now enabled by default. * … ==== Removed configuration ==== @@ -117,7 +125,8 @@ For notes on 1.33.x and older releases, see HISTORY. ==== Changed external libraries ==== * Updated Mustache from 1.0.0 to v3.0.1. -* Updated OOUI from v0.31.3 to v0.33.4. +* Updated OOUI from v0.31.3 to v0.34.0. +* Updated OOjs from v2.2.2 to v3.0.0. * Updated composer/semver from 1.4.2 to 1.5.0. * Updated composer/spdx-licenses from 1.4.0 to 1.5.1 (dev-only). * Updated mediawiki/codesniffer from 25.0.0 to 26.0.0 (dev-only). @@ -418,6 +427,8 @@ because of Phabricator reports. * ResourceLoaderContext::getConfig and ResourceLoaderContext::getLogger have been deprecated. Inside ResourceLoaderModule subclasses, use the local methods instead. Elsewhere, use the methods from the ResourceLoader class. +* The 'jquery.accessKeyLabel' module has been deprecated. This jQuery + plugin is now ships as part of the 'mediawiki.util' module bundle. * The Profiler::setTemplated and Profiler::getTemplated methods have been deprecated. Use Profiler::setAllowOutput and Profiler::getAllowOutput instead.