Merge "Disable magic links by default"

diff --combined RELEASE-NOTES-1.28
index 4e445a5,b70074b..e04bb17
--- 1/RELEASE-NOTES-1.28
--- 2/RELEASE-NOTES-1.28
+++ b/RELEASE-NOTES-1.28
@@@ -34,6 -34,12 +34,12 @@@ production
    instead of just administrators ('sysop'). Documentation for this feature is
    available at <https://www.mediawiki.org/wiki/Help:ChangeContentModel>.
  * $wgRevisionCacheExpiry is now set to one week by default instead of being disabled.
+ * Magic links are now disabled by default, and can be re-enabled by modifying the value
+   of $wgEnableMagicLinks. Their usage is discouraged, but if they are manually enabled,
+   a tracking category will be added to help identify usage and make it easier to migrate
+   away from. If you depend upon magic link functionality, it is requested that you comment
+   on <https://www.mediawiki.org/wiki/Requests_for_comment/Future_of_magic_links> and
+   explain your use case(s).
  
  === New features in 1.28 ===
  * User::isBot() method for checking if an account is a bot role account.
@@@ -223,6 -229,8 +229,6 @@@ changes to languages because of Phabric
    Instead of --keep-uploads, use the same option to parserTests.php, but you
    must specify a directory with --upload-dir.
  * The 'jquery.arrowSteps' ResourceLoader module is now deprecated.
 -* (T62604) Core parser functions returning a number now format the number according
 -  to the page content language, not wiki content language.
  * IP::isConfiguredProxy() and IP::isTrustedProxy() were removed. Callers should
    migrate to using the same functions on a ProxyLookup instance, obtainable from
    MediaWikiServices.