From: jenkins-bot Date: Sat, 27 Aug 2016 19:22:27 +0000 (+0000) Subject: Merge "Enable $wgResourceLoaderStorageEnabled by default" X-Git-Tag: 1.31.0-rc.0~5865 X-Git-Url: http://git.cyclocoop.org/%22%20.%20generer_url_ecrire%28%22auteur_infos%22%2C%22id_auteur=%24connect_id_auteur%22%29%20.%20%22?a=commitdiff_plain;h=e14ac4bcb8136332694ce417213b2a6099c44c6f;hp=85eed51f9478733a11d36394df9c6444f0dbafb9;p=lhc%2Fweb%2Fwiklou.git Merge "Enable $wgResourceLoaderStorageEnabled by default" --- diff --git a/Gemfile b/Gemfile index 19d2f52315..8a349bf040 100644 --- a/Gemfile +++ b/Gemfile @@ -1,5 +1,5 @@ source 'https://rubygems.org' -gem 'mediawiki_selenium', '~> 1.7', '>= 1.7.1' +gem 'mediawiki_selenium', '~> 1.7', '>= 1.7.2' gem 'rake', '~> 11.1', '>= 11.1.1' gem 'rubocop', '~> 0.32.1', require: false diff --git a/Gemfile.lock b/Gemfile.lock index 2d6e65594e..982619abde 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -17,16 +17,18 @@ GEM faker (>= 1.1.2) yml_reader (>= 0.6) diff-lcs (1.2.5) - domain_name (0.5.20160310) + domain_name (0.5.20160615) unf (>= 0.0.5, < 1.0.0) - faker (1.6.3) + faker (1.6.6) i18n (~> 0.5) faraday (0.9.2) multipart-post (>= 1.2, < 3) faraday-cookie_jar (0.0.6) faraday (>= 0.7.4) http-cookie (~> 1.0.0) - ffi (1.9.10) + faraday_middleware (0.10.0) + faraday (>= 0.7.4, < 0.10) + ffi (1.9.14) gherkin (2.12.2) multi_json (~> 1.3) headless (2.2.3) @@ -34,14 +36,15 @@ GEM domain_name (~> 0.5) i18n (0.7.0) json (1.8.3) - mediawiki_api (0.6.0) + mediawiki_api (0.7.0) faraday (~> 0.9, >= 0.9.0) faraday-cookie_jar (~> 0.0, >= 0.0.6) - mediawiki_selenium (1.7.1) + faraday_middleware (~> 0.10, >= 0.10.0) + mediawiki_selenium (1.7.2) cucumber (~> 1.3, >= 1.3.20) headless (~> 2.0, >= 2.1.0) json (~> 1.8, >= 1.8.1) - mediawiki_api (~> 0.6, >= 0.6.0) + mediawiki_api (~> 0.7, >= 0.7.0) page-object (~> 1.0) rest-client (~> 1.6, >= 1.6.7) rspec-core (~> 2.14, >= 2.14.4) @@ -53,7 +56,7 @@ GEM multi_test (0.1.2) multipart-post (2.0.0) netrc (0.11.0) - page-object (1.1.1) + page-object (1.2.0) page_navigation (>= 0.9) selenium-webdriver (>= 2.44.0) watir-webdriver (>= 0.6.11) @@ -79,7 +82,7 @@ GEM ruby-progressbar (~> 1.4) ruby-progressbar (1.7.5) rubyzip (1.2.0) - selenium-webdriver (2.53.1) + selenium-webdriver (2.53.4) childprocess (~> 0.5) rubyzip (~> 1.0) websocket (~> 1.0) @@ -88,7 +91,7 @@ GEM unf (0.1.4) unf_ext unf_ext (0.0.7.2) - watir-webdriver (0.9.1) + watir-webdriver (0.9.3) selenium-webdriver (>= 2.46.2) websocket (1.2.3) yml_reader (0.7) @@ -97,9 +100,6 @@ PLATFORMS ruby DEPENDENCIES - mediawiki_selenium (~> 1.7, >= 1.7.1) + mediawiki_selenium (~> 1.7, >= 1.7.2) rake (~> 11.1, >= 11.1.1) rubocop (~> 0.32.1) - -BUNDLED WITH - 1.10.6 diff --git a/RELEASE-NOTES-1.28 b/RELEASE-NOTES-1.28 index 80166ad0e6..1463c6d508 100644 --- a/RELEASE-NOTES-1.28 +++ b/RELEASE-NOTES-1.28 @@ -24,8 +24,11 @@ production. input methods provided by the UniversalLanguageSelector extension. * When $wgPingback is true, MediaWiki will periodically ping https://www.mediawiki.org/beacon with basic information about the local - MediaWiki installation. This data includes, for example, the type of system, + MediaWiki installation. This data includes, for example, the type of system, PHP version, and chosen database backend. This behavior is off by default. +* When $wgEditButtonPublishNotSave is true, MediaWiki will label the button to + store-to-database-and-show-to-others as "Publish page"/"Publish changes"; if + false, the default, they will be "Save page"/"Save changes". === New features in 1.28 === * User::isBot() method for checking if an account is a bot role account. @@ -39,7 +42,8 @@ production. * (T141604) Extensions can now provide a better error message when their maintenance scripts are run without the extension being installed. * (T8948) Numeric sorting in categories is now supported by setting $wgCategoryCollation - to uca-default-u-kn or uca--u-kn. If migrating from another + to 'uca-default-u-kn' or 'uca--u-kn'. If you can't use UCA collations, + a 'numeric' collation is also available. If migrating from another collation, you will need to run the updateCollation.php maintenance script. === External library changes in 1.28 === @@ -52,6 +56,16 @@ production. ==== Removed and replaced external libraries ==== === Bug fixes in 1.28 === +* (T137264) SECURITY: XSS in unclosed internal links +* (T133147) SECURITY: Escape '<' and ']]>' in inline