User:Iritscen/WikiFuture: Difference between revisions

From OniGalore
Jump to navigation Jump to search
(updated 1.35 through latest update)
(updated notes for 1.39, 1.40 and added 1.41)
 
(6 intermediate revisions by the same user not shown)
Line 1: Line 1:
Below are any notable changes that we should look forward to, or watch out for, if upgrading MediaWiki (besides various security fixes). [[mw:Release_notes|(Source)]]
Below are any notable changes that we should look forward to, or watch out for, if upgrading MediaWiki (as well as significant security fixes). [[mw:Release notes|(Source)]]


Oldest LTS version of MediaWiki: 1.35 (supported through September 2023). [[mw:Version_lifecycle|(Source)]]
Oldest maintained LTS version of MediaWiki: 1.39 (supported through November 2025).<br>
Latest LTS version of MediaWiki: 1.39 (supported through November 2025). [[mw:Version lifecycle|(Source)]]


Current version on OniGalore: '''{{CURRENTVERSION}}'''
Current version on OniGalore: '''{{CURRENTVERSION}}'''
Line 9: Line 10:
{{TOCnonum}}
{{TOCnonum}}


==1.33==
==1.39==
:''I have checked the release notes through 1.33.4.''
:''I have checked the release notes through 1.39.6.''
Nothing of interest changed from 1.33.3 to 1.33.4.
*We are currently on the latest version of 1.39.


==1.34==
==1.40==
:''I have checked the release notes through 1.34.4.''
:''I have checked the release notes through 1.40.2.''
*Requires PHP 7.2.9+.
*'''Requires PHP 7.4.3+ and the PHP extensions ctype, dom, fileinfo, iconv, intl, json, mbstring, xml.'''
*Special:Mute has been added as a quick way for users to block unwanted emails from other users originating from Special:EmailUser.
*Special:Search can now show thumbnails for results for titles outside NS_FILE. This is controlled via the new onSearchResultProvideThumbnail hook.
*Special:NewSection has been created as a shortcut to creating a new section on a page.
*A new preference ('search-thumbnail-extra-namespaces') to allow users to control whether to show more thumbnails (per $wgThumbnailNamespaces)
*$wgServer must now always be set in LocalSettings.php. This is most likely the case already for any wiki installed after 1.18. Older wikis may need to update their LocalSettings.php file.
*The preferences page now provides a search bar to find preferences, regardless of the tab on which they appear.
*$wgDiffEngine can be used to specify which difference engine to use. MediaWiki continues to default to automatically choosing the first of $wgExternalDiffEngine, wikidiff2, or php that is usable.
*$wgPasswordPolicies – This setting, which controls what makes for a valid password for wiki accounts, has been adjusted to raise the minimal password length from 1 to 8 characters. The initial limit of 1 has been in place since MediaWiki 1.26. If you wish to allow shorter passwords, you can over-ride it in your LocalSettings following the guidance on MediaWiki.org.
*Added the MW_VERSION constant; global $wgVersion is soft deprecated.
*You should configure your webserver to return the http header 'X-Content-Type-Options: nosniff' for the /images directory. This will instruct browsers to not apply content sniffing when accessing the files. MediaWiki before 1.40 shipped with a content sniffer which disallowed potentially dangerous files at upload time, but this protection has now been removed in favor of this 'X-Content-Type-Options: nosniff' header and the installer will return a warning when it is not in place.
*Added $wgForceHTTPS, which makes the HTTP to HTTPS redirect be unconditional and suppresses various hacks needed to support mixed HTTP/HTTPS wikis.
*Maintenance scripts should now be executed using maintenance/run.php, e.g. maintenance/run.php update not maintenance/update.php as before.
*Five extensions have now been bundled with MediaWiki:
**The [[mw:Extension:DiscussionTools|DiscussionTools]] extension, which provides a forum-like editing experience for wikitext-based discussion pages. This is the dreaded new "forum-like" experience for talk pages that I don't think any of us will want. It seems like it will be on by default so we'll have to change $wgDiscussionToolsEnable to false. Hopefully it doesn't do anything to mess with talk pages immediately upon install.
**The [[mw:Extension:Echo|Echo]] extension, which provides a system of user notifications.
**The [[mw:Extension:Linter|Linter]] extension, which warns about use of deprecated wikitext.
**The [[mw:Extension:LoginNotify|LoginNotify]] extension, which warns users about failed attempted logins.
**The [[mw:Extension:Thanks|Thanks]] extension, which lets users thank editors for edits.
*The Renameuser extension has been moved to MediaWiki core. It is now possible to rename users without installing an extension. The extension had already been bundled with MediaWiki since 1.18.


==1.35==
==1.41==
:''I have checked the release notes through 1.35.10.''
*'''Requires PHP 7.4.3+ and the PHP extensions ctype, dom, fileinfo, iconv, intl, json, mbstring, xml.'''
*Support for PHP 7.2 has been dropped. 7.3.19+ required.
*MediaWiki now requires browsers to support ES6 for them to receive JavaScript, up from ES5. In practice, this primarily means that users of Internet Explorer 11 (EOL in 2022) will no longer get JavaScript tools.
*Totally new content storage schema, with no backward compatibility.
*Some interesting new configuration variables:
*The Visual Editor ([https://upload.wikimedia.org/wikipedia/commons/0/08/VisualEditor_toolbar-en.png this thing]) is bundled with 1.35. Not clear on whether it's the default editor.
**$wgImplicitRights - A list of implicit rights, in addition to the ones defined by the core. Rights in this list are granted implicitly to all users, but rate limits may apply to them.
*Also bundled is [https://www.mediawiki.org/wiki/Extension:SecureLinkFixer SecureLinkFixer], which allows outbound HTTP links to be dynamically rewritten to HTTPS if the linked website requires HTTPS. We won't really need this because [[ValExtLinks]] detects links with that issue.
**$wgInterwikiLogoOverride - List of interwiki logos overrides.
*The extension [https://www.mediawiki.org/wiki/Extension:TemplateData TemplateData] is also provided, which allows a template to contain markup for presenting its parameters in an easy-to-read table.
**$wgSVGNativeRendering - Whether native SVG rendering by the browser agent is allowed
*Special:EditPage, Special:PageHistory, Special:PageInfo, and Special:Purge have been created as shortcuts for each action. Special:EditPage/Foo redirects to title=foo&action=edit, with PageHistory, PageInfo, and Purge corresponding to action= history, info, and purge respectively.
**$wgSVGNativeRenderingSizeLimit - If $wgSVGNativeRendering is set to 'partial', this sets the size limit for an SVG file to be rendered as a PNG instead of directly by the browser.
*$wgWatchlistExpiry — Off by default, but allow users to add pages to their watchlists for a limited period of time.
*$wgSearchMatchRedirectPreference — This configuration setting controls whether users can set a new preference, search-match-redirect, which decides if search should redirect them to exact matches if available. By default, this is set to false, which maintains the previous behaviour without preference bloat.
*$wgLegacyJavaScriptGlobals is off by default. This may affect various old JS code.
*$wgLogos — This new configuration setting combines the now-deprecated $wgLogo and $wgLogoHD settings into a single, associative array. It provides support for a new key, 'wordmark', for setting a horizontal wordmark to show next to the graphical logo.
*A minor exploit allowing editors to perform XSS via Special:Search has been patched as of 1.35.4.
*A serious exploit allowing page actions to be performed without edit rights has been patched as of 1.35.5.
*Another XSS exploit involving the displaying of image dimensions has been patched as of 1.35.6.
*The "Move subpages" checkbox on Special:MovePage will not be re-checked after a warning.
*A DoS exploit involving Special:NewFiles was closed as of 1.35.6.
 
==1.36==
:''I have checked the release notes through 1.36.1.''
*Accounts with the 'bot' right no longer have pages automatically added to the watchlist when making API edits, regardless of their preferences.
*The logo of MediaWiki has changed. This means that the "Powered By MediaWiki" button shown in the skin footer will be different.
*All HTML5 named entities are now accepted in wikitext.
*The file description page's alternate sizes now include 2048px.


[[Category:Userspace]]
[[Category:Userspace]]

Latest revision as of 02:43, 7 January 2024

Below are any notable changes that we should look forward to, or watch out for, if upgrading MediaWiki (as well as significant security fixes). (Source)

Oldest maintained LTS version of MediaWiki: 1.39 (supported through November 2025).
Latest LTS version of MediaWiki: 1.39 (supported through November 2025). (Source)

Current version on OniGalore: 1.39.6

You can browse each version of the MW code HERE.

1.39

I have checked the release notes through 1.39.6.
  • We are currently on the latest version of 1.39.

1.40

I have checked the release notes through 1.40.2.
  • Requires PHP 7.4.3+ and the PHP extensions ctype, dom, fileinfo, iconv, intl, json, mbstring, xml.
  • Special:Search can now show thumbnails for results for titles outside NS_FILE. This is controlled via the new onSearchResultProvideThumbnail hook.
  • A new preference ('search-thumbnail-extra-namespaces') to allow users to control whether to show more thumbnails (per $wgThumbnailNamespaces)
  • The preferences page now provides a search bar to find preferences, regardless of the tab on which they appear.
  • $wgPasswordPolicies – This setting, which controls what makes for a valid password for wiki accounts, has been adjusted to raise the minimal password length from 1 to 8 characters. The initial limit of 1 has been in place since MediaWiki 1.26. If you wish to allow shorter passwords, you can over-ride it in your LocalSettings following the guidance on MediaWiki.org.
  • You should configure your webserver to return the http header 'X-Content-Type-Options: nosniff' for the /images directory. This will instruct browsers to not apply content sniffing when accessing the files. MediaWiki before 1.40 shipped with a content sniffer which disallowed potentially dangerous files at upload time, but this protection has now been removed in favor of this 'X-Content-Type-Options: nosniff' header and the installer will return a warning when it is not in place.
  • Maintenance scripts should now be executed using maintenance/run.php, e.g. maintenance/run.php update not maintenance/update.php as before.
  • Five extensions have now been bundled with MediaWiki:
    • The DiscussionTools extension, which provides a forum-like editing experience for wikitext-based discussion pages. This is the dreaded new "forum-like" experience for talk pages that I don't think any of us will want. It seems like it will be on by default so we'll have to change $wgDiscussionToolsEnable to false. Hopefully it doesn't do anything to mess with talk pages immediately upon install.
    • The Echo extension, which provides a system of user notifications.
    • The Linter extension, which warns about use of deprecated wikitext.
    • The LoginNotify extension, which warns users about failed attempted logins.
    • The Thanks extension, which lets users thank editors for edits.
  • The Renameuser extension has been moved to MediaWiki core. It is now possible to rename users without installing an extension. The extension had already been bundled with MediaWiki since 1.18.

1.41

  • Requires PHP 7.4.3+ and the PHP extensions ctype, dom, fileinfo, iconv, intl, json, mbstring, xml.
  • MediaWiki now requires browsers to support ES6 for them to receive JavaScript, up from ES5. In practice, this primarily means that users of Internet Explorer 11 (EOL in 2022) will no longer get JavaScript tools.
  • Some interesting new configuration variables:
    • $wgImplicitRights - A list of implicit rights, in addition to the ones defined by the core. Rights in this list are granted implicitly to all users, but rate limits may apply to them.
    • $wgInterwikiLogoOverride - List of interwiki logos overrides.
    • $wgSVGNativeRendering - Whether native SVG rendering by the browser agent is allowed
    • $wgSVGNativeRenderingSizeLimit - If $wgSVGNativeRendering is set to 'partial', this sets the size limit for an SVG file to be rendered as a PNG instead of directly by the browser.
Retrieved from "https://wiki.oni2.net/w/index.php?title=User:Iritscen/WikiFuture&oldid=42180"