Relnotes/RELEASE-NOTES-1.27

 made by MediaWiki via a proxy. Relying on the http_proxy environment
 variable is no longer supported.

 the top file

 permissions

 now always enabled. If you use RDFa on your wiki, you now have to explicitly
 set $wgHtml5Version to 'HTML+RDFa 1.0' or 'XHTML+RDFa 1.0'.

 $wgResourceLoaderMinifierMaxLineLength, because there was little value in
 making the behavior configurable. The default values (`false` for the former,
 1000 for the latter) are now hard-coded.

 custom Wikimedia patches against Squid 2.x that probably noone uses in
 production anymore. There is now $wgUseKeyHeader that provides similar
 functionality but instead of the MediaWiki-specific X-Vary-Options header,
 uses the draft Key header standard.

 deprecation notice in the release notes for version 1.25 for advice on how to
 preserve support for '.php5' entry points via URL rewriting.

 removed, pending the future introduction of AuthManager. In particular:

  getPasswordExpired() have been removed. They were unused outside of core.

  now private and will be removed in the future.

  BadMethodCallException and will be removed in the future.

  removed. The only users of it seem to have been using it to set invalid
  passwords, and so shouldn't be greatly affected.

  deprecated, pending the introduction of AuthManager.

  PasswordFactory::generateRandomPasswordString()

  PasswordFactory themselves.

  creation of passwordless "system" users for logged actions.

 downloading originals and thumbnailing them locally. This allows wikis to save
 on CPU and bandwidth while reducing time to first byte for pages, even without
 a thumbnail handler. See $wgForeignFileRepos documentation for tweaks.

 wikimedia/cldr-plural-rule-parser.

 $wgUDPProfilerFormatString, $wgStatsMethod, $wgAggregateStatsID,
 $wgStatsFormatString, and $wgProfileCallTree (deprecated since 1.20).

 $wgSharedDB and $wgSharedTables are properly set even on the "central" wiki
 that all others are sharing from and that $wgLocalDatabases is set to the
 full list of sharing wikis on all those wikis.

  MediaWiki\Session\SessionManager. $wgSessionHandler is similarly no longer
  used.

  MediaWiki\Session\PhpSessionHandler.

  deprecated. Use MediaWiki\Session\SessionManager instead. A new config
  variable, $wgPHPSessionHandling, is available to cause use of $_SESSION to
  issue a deprecation warning or to cause most PHP session handling to throw
  exceptions.

  be creating a custom subclass of CookieSessionProvider. Other extensions
  messing with cookies can no longer count on user data being saved in cookies
  versus other methods.

  MediaWiki\Session\SessionProvider.

  Attempts to do so will be ignored and the User will remain unloaded.

  the MediaWiki\Session\Token class.

 extensions to do so. An 'autocreateaccount' right is added to allow
 auto-creation when 'createaccount' is not granted to all users.

 experimental feature that has never worked.

 return a MediaWiki\Session\Token, and tokens must be checked using that
 class's methods.

 extension should no longer be used.

 Extensions, skins, gadgets and scripts that use the mediawiki.util module must
 express a dependency on it.

 Extensions, skins, gadgets and scripts that need the mediawiki.legacy.wikibits
 module should express a dependency on it.

 $wgFooterIcons['copyright']['copyright'] instead.

 session storage (used for login) will raise an exception. This exception may
 be bypassed by setting $wgSessionInsecureSecrets = true.

  static LoginForm methods should be converted into authentication providers.

  those via the web UI. Use UserLoggedIn if you need to do something on all
  logins.

 sticks to the primary DC (via cookies) after they make changes to the site.

 of an email. This is similar to the EmailUser hook but applies to all mail
 sent via UserMailer.

 of an emai after MIME encoding.

 emailed separately (ie. there is a single address in the To: field) so
 user-specific changes to the email can be applied safely.

 when any load balancer uses a DB that is lagged beyond the 'max lag'
 setting in the relevant section of $wgLBFactoryConf.

 "system" users for logged actions from scripts and extensions.

 preventing user actions using 'getUserPermissionsErrors' and similar hooks
 by using ApiMessage instances instead of strings for the $result value.

 becomes too high.

 and .flex(@grow: 1, @shrink: 1, @width: auto, @order: 1)) in Less to create
 cross-browser-compatible FlexBox rules. Users will still need to add fallback
 float rules or the like for compatibility with IE9- separately.

 string, if available. To localize this string, see the comments of
 $wgLocaltimezone in includes/DefaultSettings.php.

 "central" users to get that without having to know about specific central
 authentication extensions.

 Regular web request transactions that takes longer than this are aborted.

 committed.

 from CDN to mitigate DB replication lag and WAN cache purge lag.

 if it is available.

 of existing files). Special:NewFiles has gained an option to filter by patrol
 status. This functionality can be disabled using $wgUseFilePatrol.

 other than the usual cookies.

  custom session metadata.

 $wgGrantPermissionGroups to hold configuration for authentication features
 such as OAuth that want to allow restricting the user rights a user may make
 use of.

  identical to (and will replace) $wgMWOAuthGrantPermissions and
  $wgMWOAuthGrantPermissionGroups.

 to assert that the request comes from a particular IP range.

 aria-describedby, aria-flowto, aria-label, aria-labelledby, aria-owns.

 All values are now allowed for the role attribute.

 appropriate ContentHandler subclass.

 user_token database field from being exposed in cookies. Setting this would
 be a good idea, but will log out all current sessions.

 specifically for reliable CDN url purges.

 MediaWiki is behind Apache+mod_unique_id or something similar) or a randomly-
 generated 24-character string. This request ID is used to annotate log records
 and error messages. It is available client-side via mw.config.get( 'wgRequestId' ).
 The request ID supplants exception IDs. Accordingly, MWExceptionHandler::getLogId()
 is deprecated.

 to API-based upload tools.

 thumbnails created via ImageMagick. Defaults to 'yuv420', providing bandwidth
 savings versus the previous behavior on many files.

 configuration of multiple authentication pieces that was possible with
 AuthPlugin. For example, it's now easy to plug in second-factor
 authentication, or add additional checks to the login process, or to support
 multiple login methods at once, or to support non-password-based login methods.

  AuthManager-related special pages.

  AuthManager-related authentication requests.

  AuthManager-related authentication data changes.

  for requiring a recent login before taking security-sensitive operations
  like changing a password.

  can be used to prevent the web UI and the API changing certain authentication data.

 can now be configured using $wgUploadDialog.

 under HHVM (T116347).

 the section being edited, rather than the whole revision. This reverts the
 change made in MediaWiki 1.22.

 modules to define how generator data for a redirect source gets merged
 into the redirect destination.

 "was-deleted" warning.

 the text before diffing it.

 be removed in the future: lgtoken, cookieprefix, sessionid. Clients should
 handle cookies to properly manage session state.

 merely need to change the username and password used after setting up a bot
 password.

  action=login.

 ApiQueryBase::keyPartToTitle() all removed (deprecated since 1.24).

 It is planned to incrementally move MediaWiki code towards using DI, using the
 service locator (SL) pattern as a stepping stone.

 ignore the 2nd and 3rd arguments (formerly $id and $commit).

 (deprecated in 1.26).

 by   and HTML entity encodings of &nbsp, <, and >.

 $wgLocaltimezone, instead of UTC.

 'Project:Oversight' to 'Project:Suppress'.

 not necessary since 1.11).

 ResourceLoaderContext instance is deprecated.

 additional LESS variables to set for the compiler.

 instead.

 were removed. The underlying data is sent to StatsD (see $wgStatsdServer).

 any useful purpose since 1.22.

 TextPassDumper classes have been removed.

 maintenance/dumpTextPass.php instead.

 database function directly instead.

 together but instead pick the final one, similar to image syntax.

 rather than consume everything until the end of the page.

 a user forgot password/account was stolen.

 CategoryMembershipChangeJob updates are skipped for content that
 does not support categories.

 to upgrade to wikidiff2 which is actively maintained and has better package availability.

  User::IGNORE_USER_RIGHTS and User::CHECK_USER_RIGHTS were introduced.

 way. Run `composer install` to install it and other dev dependencies to run unit tests.

 1.21).

 as the 6th. These must be passed in the options array now.

 performance on complex changes. $wgExternalDiffEngine = 'wikidiff3' therefore
 makes no difference now. Users are still recommended to use wikidiff2 if possible,
 though.

 were removed.

 mw-config/overrides/README for details.

      https://www.mediawiki.org/wiki/Documentation

      https://lists.wikimedia.org/mailman/listinfo/mediawiki-l

      https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce

Relnotes/RELEASE-NOTES-1.27

目次

MediaWiki 1.27.1

Changes since 1.27.0

MediaWiki 1.27

PHP version requirement

Configuration changes in 1.27

New features in 1.27

External library changes in 1.27

Upgraded external libraries

New external libraries

Removed and replaced external libraries

Bug fixes in 1.27

Action API changes in 1.27

Action API internal changes in 1.27

Languages updated in 1.27

Other changes in 1.27

Compatibility

Upgrading

Online documentation

Mailing list

IRC help

案内メニュー