X-Git-Url: http://git.cyclocoop.org/?a=blobdiff_plain;f=RELEASE-NOTES-1.34;h=ed23b62e94bb1a9f6684d526585bcf8c489573db;hb=18c2d20c54f9851af639cb24603493ca197baaa8;hp=7dd33918f201dfcb5e0b1b1d852e568b4412d47d;hpb=c59be323ea3cd969d295c42a1a9ece72436a2649;p=lhc%2Fweb%2Fwiklou.git diff --git a/RELEASE-NOTES-1.34 b/RELEASE-NOTES-1.34 index 7dd33918f2..ed23b62e94 100644 --- a/RELEASE-NOTES-1.34 +++ b/RELEASE-NOTES-1.34 @@ -1,9 +1,54 @@ = MediaWiki 1.34 = -THIS IS NOT A RELEASE YET - -MediaWiki 1.34 is an pre-release testing branch, and is not recommended -for use in production. +== MediaWiki 1.34.2 == + +This is a security and maintenance release of the MediaWiki 1.34 branch. + +=== Changes since MediaWiki 1.34.1 === +* (T247017) PasswordReset performance improvements. +* The MultiHttpClient code will fallover to non-curl if curl_multi* is blocked. +* (T250568) Work around change in SimpleXMLElement behavior introduced in PHP + 7.3.17. +* (T251789) Let $wgResourceLoaderMaxQueryLength=-1 fallback to default. +* Remove some rotten and out of date documentation. +* (T252311) Improvements to some older SQLite update patches. +* (T240307) Minor fixes to extension.schema.v2.json and + extension.schema.v1.json. +* (T238043) cleanupUsersWithNoId.php: Handle missing fields. +* (T199474) Set rc_patrolled to 2 for autopatrolled changes in + rebuildrecentchanges.php. +* (T229461) Update the change_tag table in rebuildrecentchanges.php. +* (T249730) Password Reset Updates. +* (T234450) Per-user concurrency in SpecialContributions can now be limited by + setting $wgPoolCounterConf['SpecialContributions'] appropriately. +* (T248947) SECURITY: img_auth.php may leak private extension images into the + public cache. + +== MediaWiki 1.34.1 == + +This is a security and maintenance release of the MediaWiki 1.34 branch. + +=== Changes since MediaWiki 1.34.0 === +* (T211450) User: better error message when getActorId fails. +* (T241340) Don't redefine MW_ENTRY_POINT in thumb.php if already defined. +* (T236444) User: Allow newSystemUser() to create over anonymous actors. +* (T238483) Fix NewPagesPager "hide registered users" option. +* (T245072) mediawiki.language: Rename languageData back to languageNames. +* Use proper SemVer comparison in CheckComposerLockUpToDate. +* (T212738) Add the MW_VERSION constant, global $wgVersion is soft deprecated. +* (T246127) Fix error when initialising updateCollation.php. +* Update comment about PHP versions supported by The PHP Group. +* (T247215) Fix output of RecountCategories::doWork(). +* Add check for page existence to view.php maintenance script. +* (T245149) Fix fetching login token from action=query&meta=tokens on private + wikis. +* (T236509) SECURITY: Fix HTML escaping in UserGroupMembership::getLink(). +* (T232932) SECURITY: User content can redirect the logout button to different + URL. +* (T246602) SECURITY: jquery.makeCollapsible allows applying event handler to + any CSS selector. + +== MediaWiki 1.34.0 == === Changes since MediaWiki 1.34.0-rc.1 === * $wgDiffEngine (T237049) – This configuration can be used to specify which @@ -20,6 +65,14 @@ for use in production. * (T227461) Stop calling deprecated Redis delete functions. * (T239561) Mark options as requiring parameters in addSite.php. * (T232866) Mimic CURLOPT_POST in GuzzleHttpRequest. +* (T239734) Replace deprecated lSize with lLen in Redis code. +* (T192134) SECURITY: Do not allow user scripts on Special:PasswordReset. +* (T239428) ApiEditPage: Test for bad redirect targets. +* (T233342) rdbms: Log debug message traces as 'exception.trace' instead of + 'trace'. +* (T226751) media: Log and fail gracefully on invalid EXIF coordinates. +* (T240924) NewPagesPager: Fix namespace query conditions. +* (T212067) Tests for an old PHP bug in parse_url. == MediaWiki 1.34.0-rc.1 ==