RELEASE-NOTES

   1 = MediaWiki release notes =
   2
   3 Security reminder: MediaWiki does not require PHP's register_globals
   4 setting since version 1.2.0. If you have it on, turn it *off* if you can.
   5
   6 == MediaWiki 1.14 ==
   7
   8 THIS IS NOT A RELEASE YET
   9
  10 MediaWiki is now using a "continuous integration" development model with
  11 quarterly snapshot releases. The latest development code is always kept
  12 "ready to run", and in fact runs our own sites on Wikipedia.
  13
  14 Release branches will continue to receive security updates for about a year
  15 from first release, but nonessential bugfixes and feature developments
  16 will be made on the development trunk and appear in the next quarterly release.
  17
  18 Those wishing to use the latest code instead of a branch release can obtain
  19 it from source control: http://www.mediawiki.org/wiki/Download_from_SVN
  20
  21 === Configuration changes in 1.14 ===
  22
  23 * $wgExemptFromUserRobotsControl is an array of namespaces to be exempt from
  24   the effect of the new __INDEX__/__NOINDEX__ magic words.  (Default: null, ex-
  25   empt all content namespaces.)
  26 * $wgForwardSearchUrl has been removed entirely. Documented setting since 1.4
  27   has been $wgSearchForwardUrl.
  28 * (bug 15080) $wgOverrideSiteFeed has been added. Setting either
  29   $wgSiteFeed['rss'] or 'atom' to a URL will override the default Recent Changes
  30   feed that appears on all pages.
  31 * $wgSQLiteDataDirMode has been introduced as the default directory mode for
  32   SQLite data directories on creation. Note this setting is separate from
  33   $wgDirectoryMode, which applies to all normal directories created by MediaWiki.
  34 * $wgGroupsAddToSelf and $wgGroupsRemoveFromSelf now work more like
  35   $wgAddGroups and $wgRemoveGroups, where the user must belong to a specified
  36   group in order to add or remove those groups from themselves.
  37   Backwards compatibility is maintained.
  38 * $wgRestrictDisplayTitle controls if the use of the {{DISPLAYTITLE}} magic
  39   word is restricted to titles equivalent to the actual page title. This
  40   is true per default, but can be set to false to allow any title.
  41 * $wgSpamRegex may now be an array of multiple regular expressions.
  42 * $wgAjaxSearch has been removed; use $wgEnableMWSuggest instead.
  43 * Editing the MediaWiki namespace is now unconditionally restricted to people
  44   with the editinterface right, configuring this in $wgNamespaceProtection
  45   is not required.
  46 * $wgAllowExternalImagesFrom may now be an array of multiple strings.
  47 * Introduced $wgEnableImageWhitelist to toggle the on-wiki external image
  48   whitelist on or off.
  49 * Added $wgRenderHashAppend to append some string to the parser cache and the
  50   sitenotice cache keys.
  51 * $wgRCChangedSizeThreshold is now a positive integer by default,
  52
  53 === Migrated extensions ===
  54 The following extensions are migrated into MediaWiki 1.14:
  55
  56 * Special:DeletedContributions to show deleted user contributions (was extension
  57   DeletedContributions)
  58 * Special:Log/newusers recording new users (was extension Newuserlog)
  59 * Special:LinkSearch to search for external links (was extension LinkSearch)
  60 * RenderHash
  61 * NoMoveUserPages
  62 * Poem (patch by Nathaniel Herman)
  63 * UniversalEditButton
  64
  65 === New features in 1.14 ===
  66
  67 * New URL syntaxes for Special:ListUsers - 'Special:ListUsers/USER' and
  68   'Special:ListUsers/GROUP/USER', in addition to the older syntax
  69   'Special:ListUsers/GROUP' where GROUP is a valid group name.
  70 * Configurable per-namespace and per-page notices for the edit form,
  71   respectively MediaWiki:Editnotice-# where # is the namespace number, and
  72   MediaWiki:Editnotice-#-PAGENAME where # is the page's namespace number and
  73   PAGENAME is the page name minus the namespace prefix.
  74 * (bug 8068) New __INDEX__ and __NOINDEX__ magic words allow user control of
  75   search engine indexing on a per-article basis.
  76 * Handheld stylesheet options
  77 * Added 'DoEditSectionLink' hook as a cleaner unified version of the old
  78   'EditSectionLink' and 'EditSectionLinkForOther' hooks.  Note that the
  79   'EditSectionLinkForOther' hook has been removed, but 'EditSectionLink' is
  80   run in all cases instead, so extensions using the old hooks should still work
  81   if they ran roughly the same code for both hooks (as is almost certain).
  82 * Signature (~~~~) "cleaning", i.e. template removal, can be disabled with
  83   $wgCleanSignatures=false
  84 * Extensions can use the SkinBuildSidebar hook to modify the content of the
  85   sidebar and add custom portlets to it
  86 * Added 'MakeGlobalVariablesScript' hook for extensions to be able to add vari-
  87   ables into into the output of Skin::makeVariablesScript
  88 * (bug 13846) Added $wgAddGroups and $wgRemoveGroups display on
  89   Special:ListGroupRights
  90 * (bug 14377) Add a date selector to history pages
  91 * (bug 15007) New 'pagetitle-view-mainpage' message allows the HTML <title> of
  92   the main page to be customized
  93 * Added $wgDisableTitleConversion to disabling the conversion for all pages on
  94   the wiki
  95 * Added 'noconvertlink' toggle that can be set per user preferences, also
  96   added 'convertlink=no|yes' on GET requests whether have the link titles
  97   being converted or not
  98 * (bug 14921) Special:Contributions/: add user name to <title>
  99   Patch by Emufarmers
 100 * Unescape more "safe" characters when producing URLs, for added prettiness
 101 * Introduced a new hook 'SkinAfterContent' that allows extensions to add text
 102   after the page content and article metadata. Updated all skins and skin
 103   templates to work with that hook.
 104 * (bug 14929) removeUnusedAccounts.php now supports 'ignore-touched' and
 105   'ignore-groups'. Patch by Louperivois
 106 * (bug 15127) Work around minor display glitch in Opera.
 107 * By default, reject file uploads that look like ZIP files, to avoid the
 108   so-called GIFAR vulnerability.
 109 * (bug 15141) Give ability to only list protected pages with the cascading
 110   option enabled on Special:ProtectedPages
 111 * (bug 15157) Special:Watchlist has the same options as Special:Watchlist:
 112   Show/Hide logged in users, Show/Hide anonymous, Invert namespace selection
 113 * Added hook 'UserrightsChangeableGroups' to allow modification of what
 114   groups may be added or removed via the Special:UserRights interface.
 115 * HTML entities like &nbsp; now work (are not escaped) in edit summaries.
 116 * (bug 13815) In the comment for page moves, use the colon-separator message
 117   instead of a hardcoded colon.
 118 * Allow <gallery> to accept image names without an Image: prefix
 119 * Add tooltips to rollback and undo links
 120 * BMP images are now displayed as PNG
 121 * (bug 13471) Added NUMBERINGROUP magic word
 122 * (bug 11884) Now support Flash EXIF attribute
 123 * Show thumbnails in the file history list, patch by User:Agbad
 124 * Added support of piped wikilinks using double-width brackets
 125 * Added an on-wiki external image whitelist. Items in this whitelist are
 126   treated as regular expression fragments to match for when possibly
 127   displaying an external image inline.
 128 * (bugs 15405, 15436) Sort more currency types correctly in sortable tables
 129 * (bug 15422) Sort more different types of numbers in sortable tables
 130 * (bug 2889) MediaWiki:Print.css applies to the printable version
 131 * Category counts (e.g. from {{PAGESINCATEGORY:}}) should be more accurate for
 132   small categories
 133 * After logging in, automatically redirect to wherever you logged in from
 134 * (bug 5619) Break messages used in Special:Statistics down further
 135 * (bug 11029) Add link to Special:Listusers?group=sysop etc at
 136   Special:Statistics
 137 * (bug 15514) Setting $wgRightsText without $wgRightsUrl now produces a
 138   plaintext copyright notice. Patch by Juliano F. Ravasi.
 139 * (bug 15551) Deletion log excerpt is now shown whenever a user vists a
 140   deleted page, even if they are unable to edit it.
 141 * Added Wantedfiles special pages, allowing users to find image links with no
 142   image.
 143 * (bug 12650) It is now possible to set different expiration times for different
 144   restriction types on the protection form.
 145 * (bug 8440) Allow preventing blocked users from editing their talk pages
 146 * Improved upload file type detection for OpenDocument formats
 147 * Added the ability to set the target attribute on external links with
 148   $wgExternalLinkTarget
 149 * api.php now sends "Retry-After" and "X-Database-Lag" HTTP headers if the maxlag
 150   check fails, just like index.php does
 151 * Added "link" parameter to image links, to allow images to link to an
 152   arbitrary title or URL. This should replace inaccessible and incomplete
 153   solutions such as CSS-based overlays and ImageMap.
 154 * (bug 368) Don't use caption for alt attribute; allow manual specification
 155   using new "alt=" parameter for images
 156 * (bug 44) The {{ns:}} core parser function now also accepts localized namespace
 157   names and aliases; also, its output now uses spaces instead of underscores to
 158   match the behavior of the {{NAMESPACE}} magic word
 159 * Added the ability to display user edit counts in Special:ListUsers. Off by
 160   default, enabled with $wgEdititis = true (named after the medical condition
 161   marked by unhealthy obsession with edit counts).
 162 * Added a file cache to the parser to improve page rendering time on pages with
 163   several uses of the same image.
 164 * (bug 1250) Users can still use "show preview" and "show changes" even if the
 165   wiki is set to read-only mode.
 166 * Added a call to the 'UnwatchArticleComplete' hook to the watchlist editor.  This
 167         should make it so that ALL user-accessible methods of removing a page from a watchlist
 168   lead to this hook being called (it was previously only called from within Article.php
 169
 170 === Bug fixes in 1.14 ===
 171
 172 * (bug 14907) DatabasePostgres::fieldType now defined.
 173 * (bug 14659) Passing the default limit param to Special:Recentchanges no more
 174   falls back to the user option
 175 * (bug 14954) Fix regression in Modern and Simple skins
 176 * Recursion loop check added to Categoryfinder class
 177 * Fixed few performance troubles of large job queue processing
 178 * Not setting various parameters in Foreign Repos now fails more gracefully
 179 * (bug 2333) Redirects are properly rendered when previewing an edit.
 180 * (bug 14972) Use localized alias of Special:Search on all search forms
 181 * (bug 11035) Special:Search should have descriptive <title>
 182 * Special pages are now not subject to special handling for "self-links"
 183 * (bug 15053) Syntactically incorrect redirects with another link in them
 184   no longer redirect to the second link
 185 * (bug 15049) Fix for CheckUser extension's log search: usernames containing
 186   a "-" were incorrectly turned into bogus IP range searches.
 187   Patch by Max Semenik.
 188 * (bug 15055) Talk page notifications no longer attempt to send mail when
 189   user's e-mail address is invalid or unconfirmed
 190 * (bug 12370) Add throttle on password attempts. Defaults to max 5 attempts in 5
 191   minutes.
 192 * (bug 15016) 'Templates used on this page' list in view source should be
 193   wrapped in a div with class "templatesUsed"
 194 * (bug 14868) Setting $wgFeedDiffCutoff to 0 now disables generation of the diff
 195   entirely, not just the display of it.
 196 * (bug 6387) Introduced new setting $wgCategoryPrefixedDefaultSortkey which
 197   allows having the unprefixed page title as the default category sortkey
 198 * (bug 15079) Add class="ns-talk" / "ns-subject" to <body>. Also added
 199   ns-special to special pages.
 200 * (bug 15052) Skins should add their name as a class in <body>
 201 * (bug 14165, bug 14294) Wikimedia specific configuration in convertGrammar()
 202   for several languages was removed. The settings have been put in extension
 203   WikimediaMessages. Patch for Czech by Danny B.
 204 * (bug 15101) Displaying only bots edits in Special:Recentchanges now works
 205   again
 206 * (bug 13770) Fixed incorrect detection of PHP's DOM module
 207 * (bug 14790) Export of category pages when using Category: prefix now actually
 208   gives results
 209 * Avoid recursive crazy expansions in section edit comments for pages which
 210   contain '/*' in the title
 211 * Fix excessive memory usage when parsing pages with lots of links
 212 * $wgSpamRegex now matches the edit summary and page move descriptions in
 213   addition to body text.
 214 * Navigation links to images available from a shared repository (like Commons)
 215   from their local talk pages no longer appear as redlinks
 216 * Action=purge on ForeignApiFiles now works (purges their thumbnails and
 217   description pages).
 218 * (bug 15303) Title conversion for templates wasn't working in some cases.
 219 * (bug 15264) Underscores in Special:Search/Foo_bar parameters were taken
 220   literally; now converting them to spaces per expectation.
 221 * (bug 15342) "Invert" checkbox now works correctly when selecting main
 222   namespace in Special:Watchlist
 223 * (bug 15172) 'Go' button of Special:Recentchanges now on the same line as the
 224   last input element (like Special:Watchlist too)
 225 * (bug 15351) Fix fatal error for invalid section fragments in autocomments
 226 * Fixed intermittent deadlock errors involving objectcache table queries.
 227   Use a separate database connection for the objectcache table to avoid
 228   long-lasting locks on that table.
 229 * Respect file restrictions in the file history list
 230 * (bug 15399) Odd/even classes on sortable tables' rows could be slow for large
 231   tables, and have been disabled by default.
 232 * (bug 15482) Special:Recentchangeslinked has no longer two submit buttons
 233 * (bug 15292) New message notification for unregistred users now works again
 234 * (bug 14398) mwsuggest.js: Let width of container be configurable
 235 * (bug 15543) Only include user touched timestamp to generated CSS
 236 * (bug 15497) Removed encoding attribute from <?xml ?> tag
 237 * (bug 12284) Special:Preferences now sets a returnto parameter on the link to
 238   Special:Userlogin. Patch by Marooned.
 239 * Fixed the HTTP accept language string detection length in
 240   LanguageConverter.php, instead of the fixed length language codes.
 241 * Special:Recentchangeslinked no longer shows outgoing links for nonexistent pages
 242   even if there are broken link records with source article id 0 in the database
 243 * (bug 15598) Special:Newpages default limit uses user preference for recentchanges
 244   limit instead of hardcoded 50.
 245 * (bug 15617) $wgFeedClassesOutputPage::getHeadLinks() respects $wgFeedClasses,
 246   instead of hardcoding rss and atom. Patch by Juliano F. Ravasi.
 247 * (bug 14638) Special:Blockip now provides a link to the block log if the user
 248   has been blocked more than 10 times. Patch by Matt Johnston.
 249 * (bug 12678) Skins don't show Upload link if the user isn't allowed to upload.
 250 * Fixed incorrect usage of DB_LAST in Special:Export. Deprecated DB_LAST.
 251 * (bug 15642) Blocked sysops can no longer block other users
 252 * Http::request() now respects $wgHTTPtimeout when not using cURL
 253 * (bug 15158) Userinvalidcssjstitle not shown on preview
 254 * (bug 15196) Free external links should be numbered in a localised manner
 255 * (bug 15388) Title of Special:PrefixIndex
 256 * Links with no title but a curid parameter now use the curid to pick a page
 257 * (bug 10323) Special:Undelete should have "inverse selection" button
 258 * (bug 15831) Modern skin RTL support is bugous
 259 * (bug 15869) Nostalgia skin does not show page title in printable mode
 260 * (bug 15795) Special:Userrights is now listed on Special:SpecialPages when the
 261   user can only change his rights
 262 * (bug 15846) Categories "leak" from older revisions in certain circumstances
 263 * (bug 15928) Special pages dropdown should be inline in non-MonoBook skins
 264 * (bug 14178) Some uses of UserLoadFromSession hook cause segfault
 265 * (bug 15925) Postitive bytes added on recentchanges and watchlists are now bolded
 266   if above the threshold, previously it only worked for negatives
 267 * Specify apple-touch-icon before favicon in HTML head section to make the Konqueror
 268   browser correctly use the latter
 269
 270
 271 === API changes in 1.14 ===
 272
 273 * Registration time of users registered before the DB field was created is now
 274   shown as empty instead of the current time.
 275 * API search now falls back to fulltext search by default when using Lucene
 276   or other engine which doesn't support a separate title search function.
 277   This means you can use API search on Wikipedia without explicitly adding
 278   &srwhat=text to the query.
 279 * Added iiprop=bitdepth to imageinfo and aiprop=bitdepth to allimages
 280 * (bug 14713) API-specific permissions (such as 'writeapi' and 'apihighlimits'
 281   are now listed on action=help
 282 * (bug 15044) Added requestid parameter to api.php to facilitate distinguishing
 283   between requests
 284 * (bug 15048) Added limit field for multivalue parameters to action=paraminfo
 285   output.
 286 * When the limit on multivalue parameters is exceeded, a warning is issued
 287 * list=search doesn't list missing pages any more
 288 * (bug 15178) Added clshow to prop=categories to allow filtering for hidden/
 289   non-hidden categories
 290 * (bug 15228) Combining revids= and redirects now throws a warning instead of an
 291   error, and still resolves redirects generated by the generator.
 292 * list={backlinks,embeddedin,imageusage} now return arrays with keys 0, 1, 2,
 293   etc. (AKA lists) instead of arrays with pageIDs as keys (AKA hash tables)
 294   for consistency with other list modules.
 295 * Added action=watch
 296 * (bug 15275) apprefix and related parameters ignore spaces at the end
 297 * action=edit no longer throws unknown error 228  when trying to create an empty
 298   section with section=new
 299 * Database replication lag doesn't cause all action=edit requests to return the
 300   nochange flag any more
 301 * (bug 15392) ApiFormatBase::formatHTML now uses $wgUrlProtocols.
 302 * (bug 15444) action=edit returns "Unknown error: ``AS_END''" where it should
 303   return just "Unknown error"
 304 * (bug 15448) YAML output returns empty values instead of 0
 305 * (bug 15445) Added action=patrol
 306 * (bug 15466) Added action=purge
 307 * (bug 15486) action=block ignores autoblock parameter
 308 * (bug 15492) added rcprop=loginfo to list=recentchanges
 309 * (bug 15527) action=rollback can now revert anonymous editors
 310 * (bug 15535) prop=info&inprop=protection doesn't list pre-1.10 protections
 311   if the page is also protected otherwise (1.10+ style or cascading)
 312 * list=random now has rnredirect parameter, to get random redirects.
 313 * Added APIAfterExecute, APIQueryAfterExecute and APIQueryGeneratorAfterExecute
 314   hooks which allow for extending core modules in a cleaner way
 315 * action=protect checks for invalid protection types and levels
 316 * (bug 15673) Added indentation to format=wddxfm output and improved built-in
 317   WDDX formatter to resemble PHP's more
 318 * (bug 15706) Empty values for apprtype and apprlevel are now silently ignored
 319   rather than causing an exception
 320 * Added uiprop=preferencestoken to meta=userinfo
 321 * (bug 15609) Add inprop=url and inprop=readable to prop=info
 322 * Add ApiDisabled and ApiQueryDisabled classes so individual modules can
 323   be disabled in LocalSettings.php
 324 * (bug 15653) Add prop=duplicatefiles
 325 * (bug 15768) Add list=watchlistraw
 326 * (bug 15647) action=edit with basetimestamp fails if the page has been deleted
 327   and undeleted since the last edit
 328 * (bug 15785) Allow for different expiry times for different protections in
 329   action=protect
 330 * Added allowsduplicates attribute to action=paraminfo output
 331 * (bug 15767) apfilterlanglinks returns duplicate results
 332 * (bug 15845) Added pageid/fromid parameter to action=delete/move, making
 333   manipulation of legacy pages with invalid titles possible
 334 * (bug 15881) Empty or invalid parameters cause database errors
 335 * The maxage and smaxage parameters are now properly validated
 336 * (bug 15945) list=recentchanges doesn't check $wgUseRCPatrol, $wgUseNPPatrol
 337   and patrolmarks right
 338
 339 === Languages updated in 1.14 ===
 340
 341 MediaWiki supports over 300 languages. Many localisations are updated
 342 regularly. Below only new and removed languages are listed.
 343
 344 * Bakhtiari (bqi) (new)
 345 * Fiji Hindi (Devanagari script) (hif-deva) (new)
 346 * Krio (kri) (new)
 347 * Lezghian (lez) (new)
 348 * Laz (lzz) (new)
 349 * Niuean (niu) (new)
 350 * Oromo (om) (new)
 351 * Plautdietsch (pdt) (new)
 352 * Tarantino (roa-tara) (new)
 353 * Serbo-Croatian (sh) (new)
 354 * Tulu (tcy) (new)
 355
 356 == Compatibility ==
 357
 358 MediaWiki 1.14 requires PHP 5 (5.2 recommended). PHP 4 is no longer supported.
 359
 360 PHP 5.0.x fails on 64-bit systems due to serious bugs with array processing:
 361 http://bugs.php.net/bug.php?id=34879
 362 Upgrade affected systems to PHP 5.1 or higher.
 363
 364 MySQL 3.23.x is no longer supported; some older hosts may need to upgrade.
 365 At this time we still recommend 4.0, but 4.1/5.0 will work fine in most cases.
 366
 367
 368 == Upgrading ==
 369
 370 1.14 has several database changes since 1.13, and will not work without schema
 371 updates.
 372
 373 If upgrading from before 1.11, and you are using a wiki as a commons repository,
 374 make sure that it is updated as well. Otherwise, errors may arise due to
 375 database schema changes.
 376
 377 If upgrading from before 1.7, you may want to run refreshLinks.php to ensure
 378 new database fields are filled with data.
 379
 380 If you are upgrading from MediaWiki 1.4.x or earlier, some major database
 381 changes are made, and there is a slightly higher chance that things could
 382 break. Don't forget to always back up your database before upgrading!
 383
 384 See the file UPGRADE for more detailed upgrade instructions.
 385
 386
 387 === Caveats ===
 388
 389 Some output, particularly involving user-supplied inline HTML, may not
 390 produce 100% valid or well-formed XHTML output. Testers are welcome to
 391 set $wgMimeType = "application/xhtml+xml"; to test for remaining problem
 392 cases, but this is not recommended on live sites. (This must be set for
 393 MathML to display properly in Mozilla.)
 394
 395 For notes on 1.13.x and older releases, see HISTORY.
 396
 397
 398 === Online documentation ===
 399
 400 Documentation for both end-users and site administrators is currently being
 401 built up on MediaWiki.org, and is covered under the GNU Free Documentation
 402 License (except for pages that explicitly state that their contents are in
 403 the public domain) :
 404
 405   http://www.mediawiki.org/wiki/Documentation
 406
 407
 408 === Mailing list ===
 409
 410 A MediaWiki-l mailing list has been set up distinct from the Wikipedia
 411 wikitech-l list:
 412
 413   http://lists.wikimedia.org/mailman/listinfo/mediawiki-l
 414
 415 A low-traffic announcements-only list is also available:
 416
 417   http://lists.wikimedia.org/mailman/listinfo/mediawiki-announce
 418
 419 It's highly recommended that you sign up for one of these lists if you're
 420 going to run a public MediaWiki, so you can be notified of security fixes.
 421
 422
 423 === IRC help ===
 424
 425 There's usually someone online in #mediawiki on irc.freenode.net