Merge "qunit: Disable sinonjs-ie as it breaks the clock sandbox"
[lhc/web/wiklou.git] / RELEASE-NOTES-1.23
1 Security reminder: MediaWiki does not require PHP's register_globals. If you
2 have it on, turn it '''off''' if you can.
3
4 == MediaWiki 1.23 ==
5
6 THIS IS NOT A RELEASE YET
7
8 MediaWiki 1.23 is an alpha-quality branch and is not recommended for use in
9 production.
10
11 === Configuration changes in 1.23 ===
12 * When $wgJobRunRate is higher that zero, jobs are now executed via an
13 asynchronous HTTP request to a MediaWiki entry point. This may require
14 increasing the number of server worker threads.
15 * $wgDebugLogGroups values may be set to an associative array with a
16 'destination' key specifying the log destination. The array may also contain
17 a 'sample' key with a positive integer value N indicating that the log group
18 should be sampled by dispatching one in every N messages on average. The
19 sampling is random.
20 * In addition to the current exception log format, MediaWiki now serializes
21 exception metadata to JSON and logs it to the 'exception-json' log group.
22 This makes MediaWiki easier to integrate with log aggregation and analysis
23 tools.
24 * $wgSquidServersNoPurge now supports the use of Classless Inter-Domain
25 Routing (CIDR) notation to specify contiguous blocks of IPv4 and/or IPv6
26 addresses that should be trusted to provide X-Forwarded-For headers.
27 * Preferences 'watchcreations', 'watchdefault', 'enotifwatchlistpages' ("Add
28 pages I create and files I upload to my watchlist", "Add pages and files I
29 edit to my watchlist", "Email me when a page or file on my watchlist is
30 changed") are now enabled by default. In addition new user accounts' personal
31 and talk pages are now watched by them by default.
32 * $wgLBFactoryConf: Class names have had underscores removed. The configuration
33 should be updated if LBFactory_Simple or LBFactory_Multi is configured.
34 * $wgPasswordSenderName has been removed and is no longer functional. To set a
35 custom mailer name, the system message 'emailsender' should be modified
36 (default: "{{SITENAME}}").
37 * $wgDBAhandler was removed as the only class using it was also removed
38 * The 'max threads' setting was removed from $wgDBservers.
39 * Support for AdminSettings.php has been completely removed. All configuration
40 belongs in LocalSettings.php.
41 * $wgSkipSkin, which has been replaceable by $wgSkipSkins since 2005 (r9249), is
42 now formally deprecated.
43 * Removed deprecated $wgDisabledActions as it is hardly used anywhere.
44 * $wgRateLimitLog has been deprecated and replaced by
45 $wgDebugLogGroup['ratelimit'].
46
47 === New features in 1.23 ===
48 * ResourceLoader can utilize the Web Storage API to cache modules client-side.
49 Compared to the browser cache, caching in Web Storage allows ResourceLoader
50 to be more granular about evicting stale modules from the cache while
51 retaining the ability to retrieve multiple modules in a single HTTP request.
52 This capability can be enabled by setting $wgResourceLoaderStorageEnabled to
53 true. This feature is currently considered experimental and should only be
54 enabled with care.
55 * (bug 6092) Add expensive parser functions {{REVISIONID:}}, {{REVISIONUSER:}}
56 and {{REVISIONTIMESTAMP:}} (with friends).
57 * Add "wgRelevantUserName" to mw.config containing the current
58 Skin::getRelevantUser value.
59 * (bug 56033) Add content model to the page information.
60 * Added Article::MissingArticleConditions hook to give extensions a chance to
61 hide their (unrelated) log entries.
62 * Added LonelyPagesQuery hook to let extensions modify the query used to
63 generate Special:LonelyPages.
64 * Added $wgOpenSearchDefaultLimit defining the default number of entries to show
65 on action=opensearch API call.
66 * For namespaces with $wgNamespaceProtection (including the MediaWiki
67 namespace), the "protect" tab will be shown only if there are restriction
68 levels available that would restrict editing beyond what
69 $wgNamespaceProtection already applies. The protection form will offer only
70 those protection levels.
71 * Added $wgAPIFormatModules, allowing extensions to add additional output
72 formatting modules for the API.
73 * (bug 47812) The MediaWiki:Group-user.{css,js} pages can now be used to add
74 custom CSS or JavaScript enabled only for registered users.
75 * (bug 52005) Special pages RecentChanges, RecentChangesLinked and Watchlist
76 now include a legend describing the symbols used in lists of changes.
77 * Improved the accessibility of the tabs in Special:Preferences.
78 * Added ApiBeforeMain hook, roughly equivalent to the BeforeInitialize hook:
79 it's called after everything is set up but before any major processing
80 happens.
81 * The jquery.client module now performs a component-wise version comparison in
82 its #test method when strings are used in the browser map: version '1.10' is
83 now correctly considered larger than '1.2'. Using numbers in the version map
84 is not affected.
85 * All API modules now support an assert parameter, which can either be
86 'user' or 'bot'. The API will throw an error if the user is not logged
87 in (user) or does not have the 'bot' userright (bot). Based off of the
88 AssertEdit extension by Steve Sanbeg.
89 * WikitextContent will now render redirects with the expected "redirect"
90 header, rather than as an ordered list. Code calling Article::viewRedirect
91 can probably be changed to no longer special-case redirects.
92 * [[Special:Diff]] was added, allowing users to create internal links to
93 revision comparison pages using syntax such as [[Special:Diff/12345]],
94 [[Special:Diff/12345/prev]] or [[Special:Diff/12345/98765]].
95 * New user accounts' personal and talk pages are now watched by them by default.
96 * Added SkinTemplateGetLanguageLink hook to allow changing the html of language
97 links.
98 * Added MessageCache::get hook as a new way to customize messages across
99 multiple sites.
100 * Added jquery.throttle-debounce ResourceLoader module to limit the number of
101 callbacks for frequently occurring events.
102 * Special:ProtectedPages shows now a table. The timestamp, the reason and
103 the protecting user is also shown.
104 * Added experimental support for using Microsoft SQL Server as the database
105 backend.
106 ** Added new Microsoft SQL Server-specific configuration variable
107 $wgDBWindowsAuthentication, which makes the web server authenticate against
108 the database server using Integrated Windows Authentication instead of
109 $wgDBuser/$wgDBpassword.
110 * HTMLForm 'select', 'selectandother', 'selectorother', 'multiselect', and
111 'radio' fields can now use message keys as labels via the 'options-messages'
112 parameter, which overrides the 'options' parameter.
113 * Admins can expire users users passwords manually, or on a schedule using the
114 $wgPasswordExpirationDays configuration setting.
115 * Add new hook SendWatchlistEmailNotification, this will be used to determine
116 whether to send a watchlist email notification.
117 * (bug 42026) Special:Contributions now includes an option to filter page
118 creations, similar to the topOnly option.
119 * Add mediawiki.ui.button styling to all pages so wiki content can use styled
120 buttons.
121 * Special:UserLogin/signup now does AJAX checks for invalid and taken usernames,
122 displaying the error live.
123
124 === Bug fixes in 1.23 ===
125 * (bug 41759) The "updated since last visit" markers (on history pages, recent
126 changes and watchlist) and the talk page message indicator are now correctly
127 updated when the user is viewing old revisions of pages, instead of always
128 acting as if the latest revision was being viewed.
129 * (bug 56443) Special:ConfirmEmail no longer shows a "Mail a confirmation code"
130 when the email address is already confirmed. Also, consistently use
131 "confirmed", rather than "authenticated", when messaging whether or not the
132 user has confirmed an email address.
133 * (bug 56912) Show correct link color on cached result of Special:DeadendPages.
134 * Classes TitleListDependency and TitleDependency have been removed, as they
135 have been found unused in core and extensions for a long time.
136 * (bug 57098) SpecialPasswordReset now obeys returnto parameter
137 * (bug 37812) ResourceLoader will notice when a module's definition changes and
138 recompile it accordingly.
139 * (bug 57201) SpecialRecentChangesFilters hook is now executed for feeds.
140 * (bug 58640) Fixed a compatibility issue with PCRE 8.34 that caused pages
141 to appear blank or with missing text.
142 * (bug 56931) Updated the plural rules to CLDR 24. They are in new format
143 which is detailed in UTS 35 Rev 33. The PHP parser and evaluator as well as
144 the JavaScript evaluator were updated to support the new format. Plural rules
145 for some languages have changed, most notably Russian. Affected software
146 messages have been updated and marked for review at translatewiki.net.
147 * (bug 14323) Redirect pages, when viewed with redirect=no, no longer hide the
148 remaining page content.
149 * (bug 23542) imagelinks now stores both the redirect and target (as
150 templatelinks does).
151 * (bug 58167) The web installer no longer throws an exception when PHP is
152 compiled without support for MySQL yet with support for another DBMS.
153 * (bug 56199) Raw option of parser functions must now match complete word,
154 to take effect.
155 * (bug 60543) Special:PrefixIndex forgot stripprefix=1 for "Next page" link
156 * (bug 29762) Undoing an already-undone edit will now display an appropriate
157 message instead of leading the user to make a null edit.
158 * (bug 52659) mediawiki.notification: Notification area remained visible when
159 empty and thus was stealing pointer events from links on the page.
160 * (bug 26811) When a DBUnexpectedError occurs, DB server hostnames are now
161 hidden unless $wgShowExceptionDetails is true, and $wgShowDBErrorBacktrace
162 no longer applies in such cases.
163 * (bug 60960) Avoid doing file_exist() checks on data: URIs, as they cause
164 warnings to be printed on Windows due to large path length.
165
166 === Web API changes in 1.23 ===
167 * (bug 54884) action=parse&prop=categories now indicates hidden and missing
168 categories.
169 * action=query&meta=filerepoinfo now returns additional information for each
170 repo.
171 * action=parse&prop=languageshtml was deprecated in 1.18 and will be removed in
172 MediaWiki 1.24.
173 * action=parse now has disabletoc flag to disable table of contents in output.
174 * (bug 25702) list=allcategories, list=allimages, list=alllinks, list=allpages,
175 list=deletedrevs and list=filearchive did not handle case-sensitivity
176 properly for all parameters.
177 * ApiQueryBase::titlePartToKey allows an extra parameter that indicates the
178 namespace in order to properly capitalize the title part.
179 * (bug 57874) action=feedcontributions no longer has one item more than limit.
180 * All API modules now support an assert parameter. See the new features section
181 for more details.
182 * Added prop=contributors to fetch the list of contributors to the page.
183 * The following API modules will now return entries where fields have been
184 revision-deleted: list=deletedrevs, list=filearchive, list=recentchanges,
185 list=watchlist. "hidden" indicators will be included, in the same style as is
186 already done for prop=revisions.
187 * The following API modules will now return the content of revision-deleted
188 fields, in addition to the "hidden" indicators, if the querying user has the
189 necessary rights: list=logevents, list=usercontribs, prop=imageinfo,
190 prop=revisions.
191 * The above modules, where applicable, will now return entries filtered by
192 revision-deleted fields if the querying user has the necessary rights. For
193 example, prop=revisions with rvuser or rvexcludeuser will no longer skip
194 revisions where the user was revision-deleted if the current user has the
195 deletedhistory right.
196 * The 'hideuser' right, used when blocking, is no longer necessary or
197 sufficient for seeing contributions with revision-deleted in
198 list=usercontribs.
199 * list=watchlist now uses the querying user's rights rather than the wlowner's
200 rights when checking whether wlprop=patrol is allowed.
201 * (bug 32151) ApiWatch now has pageset capabilities (titles/pageids/generators).
202 Title parameter is now deprecated.
203 * (bug 23005) Added action=revisiondelete.
204 * Added siprop=restrictions to API action=query&meta=siteinfo for querying
205 possible page restriction (protection) levels and types.
206 * Added prop 'limitreportdata' and 'limitreporthtml' to action=parse.
207 * (bug 58627) Provide language names on action=parse&prop=langlinks.
208 * Deprecated llurl= in favour of llprop=url for action=query&prop=langlinks.
209 * Added llprop=langname and llprop=autonym for action=query&prop=langlinks.
210 * prop=redirects is added, to return redirects to the pages in the query.
211 * list=allredirects is added, to list all redirects pointing to a namespace.
212 * (bug 42026) Added ucshow={new,!new,top,!top} to list=usercontribs.
213 Also added newonly to action=feedcontributions.
214 * (bug 42026) Deprecated uctoponly in favor of ucshow=top.
215
216 === Languages updated in 1.23 ===
217
218 MediaWiki supports over 350 languages. Many localisations are updated
219 regularly. Below only new and removed languages are listed, as well as
220 changes to languages because of Bugzilla reports.
221
222 * Support was added for Northern Luri (lrc).
223
224 === Other changes in 1.23 ===
225 * The rc_type field in the recentchanges table has been superseded by a new
226 rc_source field. The rc_source field is a string representation of the
227 change type where rc_type was a numeric constant. This field is not yet
228 queried but will be in a future point release of 1.22.
229 ** Utilize update.php to create and populate this new field. On larger wiki's
230 which do not wish to update recentchanges table in one large update please
231 review the sql and comments in maintenance/archives/patch-rc_source.sql.
232 ** The rc_type field of recentchanges will be deprecated in a future point
233 release.
234 * The global variable $wgArticle has been removed after a lengthy deprecation.
235 * The global functions addButton and insertTags (for mw.toolbar.addButton and
236 mw.toolbar.insertTags) now emits mw.log.warn when accessed.
237 * The ExpandTemplates extension has been moved into MediaWiki core.
238 * (bug 52812) Removed "Disable search suggestions" from Preference.
239 * (bug 52809) Removed "Disable browser page caching" from Preference.
240 * Three new modules intended for use by custom skins were added:
241 'skins.common.elements', 'skins.common.content', and 'skins.common.interface',
242 representing three levels of standard MediaWiki styling. Previously skin
243 creators wishing to use them had to refer to the file names of appropriate
244 files directly, which is now discouraged.
245 * The modules 'skins.vector' and 'skins.monobook' have been renamed to
246 'skins.vector.styles' and 'skins.monobook.styles', respectively,
247 and their definition was changed not to include the common*.css files;
248 the two skins now load the 'skins.common.interface' module instead.
249 * A page_links_updated field has been added to the page table.
250 * SpecialPage::getTitle has been deprecated in favor of
251 SpecialPage::getPageTitle.
252 * BREAKING CHANGE: Two potentially backwards-incompatible changes have been made
253 to the 'SpecialWatchlistQuery' hook's last parameter (array $values) to make
254 the hook more consistent with the 'SpecialRecentChangesQuery' one:
255 ** Several array keys have been renamed: hideMinor → hideminor,
256 hideBots → hidebots, hideAnons → hideanons, hideLiu → hideliu,
257 hidePatrolled → hidepatrolled, hideOwn → hidemyself.
258 ** The parameter value is now a FormOptions object, not a plain array (array
259 access operators should continue to work, as it implements the ArrayAccess
260 interface).
261 * Option to mark hooks as deprecated has been added.
262 * (bug 52811) Preference "Enable section editing via [edit] links" was removed.
263 * (bug 52813) Preference "Show table of contents (for pages with more than
264 3 headings)" was removed.
265 * (bug 52810) Preference "Justify paragraphs" was removed.
266 * OutputPage::showErrorPage raises a notice if arguments are incoherent.
267 * Thumbnails that keep failing to render in thumb.php will be rate-limited
268 againt further render attempts for 1 hour. $wgAttemptFailureEpoch can be
269 altered to reset all rate-limited thumbnails at once.
270 * (bug 56572) Builds of the OOjs and OOjs UI libraries are now available.
271 * mw.loader.go and mw.loader.version have been removed.
272 * (bug 52815) Preference "Enable simplified search bar (Vector skin only)"
273 was removed.
274 * A user_password_expires column has been added to the user table. The User
275 object expects this column to exist. Use update.php to create this new field.
276 * The jquery.delayedBind ResourceLoader module was deprecated in favor of the
277 jquery.throttle-debounce module. It will be removed in MediaWiki 1.24.
278 * mw.user.bucket has been deprecated.
279 * On Special:PrefixIndex, a table#mw-prefixindex-list-table was changed to
280 table.mw-prefixindex-list-table to avoid duplicate ids when the special page
281 is transcluded.
282 * (bug 62198) window.$j has been deprecated.
283 * Preference "Disable link title conversion" was removed.
284
285 ==== Removed classes ====
286 * FakeMemCachedClient (deprecated in 1.18)
287 * RdfMetaData (unused)
288 * TitleDependency (unused)
289 * TitleListDependency (unused)
290 * WikiError (deprecated in 1.17)
291 * WikiXmlError (deprecated in 1.17)
292 * WikiErrorMsg (deprecated in 1.17)
293
294 ==== Renamed classes ====
295 * CdbReader_DBA to CdbReaderDBA
296 * CdbReader_PHP to CdbReaderPHP
297 * CdbWriter_DBA to CdbWriterDBA
298 * CdbWriter_PHP to CdbWriterPHP
299 * DiffOp_Add to DiffOpAdd
300 * DiffOp_Change to DiffOpChange
301 * DiffOp_Copy to DiffOpCopy
302 * DiffOp_Delete to DiffOpDelete
303 * HWLDF_WordAccumulator to HWLDFWordAccumulator
304 * LBFactory_Fake to LBFactoryFake
305 * LBFactory_Multi to LBFactoryMulti
306 * LBFactory_Simple to LBFactorySimple
307 * LBFactory_Single to LBFactorySingle
308 * LCStore_Accel to LCStoreAccel
309 * LCStore_CDB to LCStoreCDB
310 * LCStore_DB to LCStoreDB
311 * LCStore_Null to LCStoreNull
312 * LoadBalancer_Single to LoadBalancerSingle
313 * LoadMonitor_MySQL to LoadMonitorMySQL
314 * LoadMonitor_Null to LoadMonitorNull
315 * LocalisationCache_BulkLoad to LocalisationCacheBulkLoad
316 * csvStatsOutput to CsvStatsOutput
317 * extensionLanguages to ExtensionLanguages
318 * languages to Languages
319 * statsOutput to StatsOutput
320 * textStatsOutput to TextStatsOutput
321 * wikiStatsOutput to WikiStatsOutput
322
323 ==== Removed methods ====
324 * ApiBase::getValidNamespaces() (deprecated in 1.17)
325 * ApiMain::setCachePrivate() (deprecated in 1.17)
326 * ApiMain::setVaryCookie (deprecated in 1.17)
327 * Article::doRedirect() (deprecated in 1.18)
328 * Article::doUnwatch() (deprecated in 1.18)
329 * Article::doWatch() (deprecated in 1.18)
330 * Article::forUpdate() (deprecated in 1.18)
331 * Article::markpatrolled() (deprecated in 1.18)
332 * Article::unwatch() (deprecated in 1.18)
333 * Article::watch() (deprecated in 1.18)
334 * Block::clear() (deprecated in 1.18)
335 * Block::decodeExpiry() (deprecated in 1.18)
336 * Block::encodeExpiry() (deprecated in 1.18)
337 * Block::forUpdate() (deprecated in 1.18)
338 * Block::infinity() (deprecated in 1.18)
339 * Block::load() (deprecated in 1.18)
340 * Block::newFromDB() (deprecated in 1.18)
341 * Block::normaliseRange() (deprecated in 1.18)
342 * Block::parseExpiryInput() (deprecated in 1.18)
343 * CategoryViewer::addSubcategory() (deprecated in 1.17)
344 * EditPage::spamPage() (deprecated since 1.17)
345 * Exif::getFormattedData() (deprecated in 1.18)
346 * Exif::makeFormattedData() (deprecated in 1.18)
347 * in_string (deprecated in 1.21)
348 * Language::convertLinkToAllVariants() (deprecated in 1.17)
349 * LanguageConverter::convertLinkToAllVariants() (deprecated in 1.17)
350 * Linker::makeBrokenLink() (deprecated in 1.16)
351 * Linker::makeBrokenLinkObj() (deprecated in 1.16)
352 * Linker::makeColouredLinkObj() (deprecated in 1.16)
353 * Linker::makeSizeLinkObj() (deprecated in 1.17)
354 * MediaWiki::articleFromTitle() (deprecated in 1.18)
355 * ParserOptions::getkin() (deprecated 1.18)
356 * ProfilerSimple::getCpuTime (deprecated in 1.20)
357 * Revision::revText() (deprecated in 1.17)
358 * SkinTemplate::jstext() (deprecated in 1.21)
359 * SpecialPage::__call() (deprecated in 1.17)
360 * SpecialPage::executePath() (deprecated in 1.18)
361 * SpecialPage::exists() (deprecated in 1.18)
362 * SpecialPage::file() (deprecated in 1.18)
363 * SpecialPage::func() (deprecated in 1.18)
364 * SpecialPage::getGroup() (deprecated in 1.18)
365 * SpecialPage::getPage() (deprecated in 1.18)
366 * SpecialPage::getPageByAlias() (deprecated in 1.18)
367 * SpecialPage::getLocalNameFor() (deprecated in 1.18)
368 * SpecialPage::getRegularPages() (deprecated in 1.18)
369 * SpecialPage::getRestrictedPages() (deprecated in 1.18)
370 * SpecialPage::getTitleForAlias() (deprecated in 1.18)
371 * SpecialPage::getUsablePages() (deprecated in 1.18)
372 * SpecialPage::includable() (deprecated in 1.18)
373 * SpecialPage::init()
374 * SpecialPage::initAliasList() (deprecated in 1.18)
375 * SpecialPage::initList() (deprecated in 1.18)
376 * SpecialPage::name() (deprecated in 1.18)
377 * SpecialPage::removePage() (deprecated in 1.18)
378 * SpecialPage::resolveAlias() (deprecated in 1.18)
379 * SpecialPage::resolveAliasWithSubpage() (deprecated in 1.18)
380 * SpecialPage::restriction() (deprecated in 1.18)
381 * SpecialPage::setGroup() (deprecated in 1.18)
382 * SpecialRecentChanges::feedSetup()
383 * SpecialRevisionDelete::extractBitField() (deprecated in 1.22)
384 * User::getPageRenderingHash() (deprecated in 1.17)
385 * WebRequest::getFileSize() (deprecated in 1.17)
386 * WebRequest::isPathInfoBad() (deprecated in 1.17)
387 * wfGenerateToken (deprecated in 1.20)
388 * wfStreamFile (deprecated in 1.19)
389 * wfUILang (deprecated in 1.18)
390 * WikiPage::createUpdates() (deprecated in 1.18)
391 * WikiPage::quickEdit() (deprecated in 1.18)
392 * WikiPage::useParserCache() (deprecated in 1.18)
393 * WikiPage::viewUpdates() (deprecated in 1.18)
394
395 ==== Removed globals ====
396 * $wgBetterDirectionality (deprecated in 1.18)
397
398 == Compatibility ==
399
400 MediaWiki 1.23 requires PHP 5.3.2 or later.
401
402 MySQL is the recommended DBMS. PostgreSQL or SQLite can also be used, but
403 support for them is somewhat less mature. There is experimental support for
404 Oracle and Microsoft SQL Server.
405
406 The supported versions are:
407
408 * MySQL 5.0.2 or later
409 * PostgreSQL 8.3 or later
410 * SQLite 3.3.7 or later
411 * Oracle 9.0.1 or later
412 * Microsoft SQL Server 2005 (9.00.1399)
413
414 == Upgrading ==
415
416 1.23 has several database changes since 1.22, and will not work without schema
417 updates. Note that due to changes to some very large tables like the revision
418 table, the schema update may take quite long (minutes on a medium sized site,
419 many hours on a large site).
420
421 If upgrading from before 1.11, and you are using a wiki as a commons
422 repository, make sure that it is updated as well. Otherwise, errors may arise
423 due to database schema changes.
424
425 If upgrading from before 1.7, you may want to run refreshLinks.php to ensure
426 new database fields are filled with data.
427
428 If you are upgrading from MediaWiki 1.4.x or earlier, you should upgrade to
429 1.5 first. The upgrade script maintenance/upgrade1_5.php has been removed
430 with MediaWiki 1.21.
431
432 Don't forget to always back up your database before upgrading!
433
434 See the file UPGRADE for more detailed upgrade instructions.
435
436 For notes on 1.21.x and older releases, see HISTORY.
437
438 == Online documentation ==
439
440 Documentation for both end-users and site administrators is available on
441 MediaWiki.org, and is covered under the GNU Free Documentation License (except
442 for pages that explicitly state that their contents are in the public domain):
443
444 https://www.mediawiki.org/wiki/Documentation
445
446 == Mailing list ==
447
448 A mailing list is available for MediaWiki user support and discussion:
449
450 https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
451
452 A low-traffic announcements-only list is also available:
453
454 https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce
455
456 It's highly recommended that you sign up for one of these lists if you're
457 going to run a public MediaWiki, so you can be notified of security fixes.
458
459 == IRC help ==
460
461 There's usually someone online in #mediawiki on irc.freenode.net.