1 Security reminder: MediaWiki does not require PHP's register_globals. If you
2 have it on, turn it '''off''' if you can.
6 THIS IS NOT A RELEASE YET
8 MediaWiki 1.21 is an alpha-quality branch and is not recommended for use in
11 === Configuration changes in 1.21 ===
12 * (bug 29374) $wgVectorUseSimpleSearch is now enabled by default.
13 * Deprecated $wgAllowRealName is removed. Use $wgHiddenPrefs[] = 'realname'
15 * (bug 39957) Added $wgUnwatchedPageThreshold, specifying minimum count
16 of page watchers required for the number to be accessible to users
17 without the unwatchedpages permission.
18 * $wgBug34832TransitionalRollback has been removed.
19 * (bug 29472) $wgUseDynamicDates has been removed and its functionality
22 === New features in 1.21 ===
23 * (bug 38110) Schema changes (adding or dropping tables, indices and
24 fields) can be now be done separately from from other changes that
25 update.php makes. This is useful in environments that use database
26 permissions to restrict schema changes but allow the DB user that
27 MediaWiki normally runs as to perform other changes that update.php
28 makes. Schema changes can be run separately. See the file UPGRADE
30 * (bug 34876) jquery.makeCollapsible has been improved in performance.
31 * Added ContentHandler facility to allow extensions to support other content
32 than wikitext. See docs/contenthandler.txt for details.
33 * New feature was developed for showing high-DPI thumbnails for high-DPI mobile
34 and desktop displays (configurable with $wgResponsiveImages).
35 * Added new backend to represent and store information about sites and site
36 specific configuration.
37 * jQuery upgraded from 1.8.2 to 1.8.3.
38 * jQuery UI upgraded from 1.8.23 to 1.8.24.
39 * Added separate fa_sha1 field to filearchive table. This allows sha1
40 searches with the api in miser mode for deleted files.
41 * Add initial and programmatic sorting for tablesorter.
42 * Add the event "sortEnd.tablesorter", triggered after sorting has completed.
43 * The Job system was refactored to allow for different backing stores for
44 queues as well as cross-wiki access to queues, among other things. The schema
45 for the DB queue was changed to support better concurrency and reduce
47 * Added ApiQueryORM class to facilitate creation of query API modules based on
48 tables that have a corresponding ORMTable class.
49 * (bug 40876) Icon for PSD (Adobe Photoshop) file types.
50 * (bug 40641) Implemented Special:Version/Credits with a list of contributors.
51 * (bug 7851) Implemented one-click AJAX patrolling.
52 * The <data>, <time>, <meta>, and <link> elements are allowed within WikiText
53 for use with Microdata.
54 * The HTML5 <mark> tag has been whitelisted.
55 * Added ParserCloned hook for when the Parser object is cloned.
56 * Added AlternateEditPreview hook to allow extensions to replace the page
57 preview from the edit page.
58 * Added EditPage::showStandardInputs:options hook to allow extensions to add
59 new fields to the "editOptions" area of the edit form.
60 * Upload stash DB schema altered to improve upload performance.
61 * The following global functions are now reporting deprecated warnings in
62 debug mode: wfMsg, wfMsgNoTrans, wfMsgForContent, wfMsgForContentNoTrans,
63 wfMsgReal, wfMsgGetKey, wfMsgHtml, wfMsgWikiHtml, wfMsgExt, wfEmptyMsg. Use
64 the Message class, or the global method wfMessage.
65 * Added $wgEnableCanonicalServerLink, off by default. If enabled, a
66 <link rel=canonical> tag is added to every page indicating the correct server
68 * Debug message emitted by wfDebugLog() will now be prefixed with the group
69 name when its logged to the default log file. That is the case whenever the
70 group has no key in wgDebugLogGroups, that will help triage the default log.
71 * (bug 24620) Add types to LogFormatter.
72 * jQuery JSON upgraded from 2.3 to 2.4.0.
73 * Added GetDoubleUnderscoreIDs hook, for modifying the list of magic words.
74 * DatabaseUpdater class has two new methods to ease extensions schema changes:
75 dropExtensionIndex and renameExtensionIndex.
76 * New preference type - 'api'. Preferences of this type are not shown on
77 Special:Preferences, but are still available via the action=options API.
78 * (bug 39397) Hide rollback link if a user is the only contributor of the page.
79 * $wgPageInfoTransclusionLimit limits the list size of transcluded articles
80 on the info action. Default is 50.
81 * Added action=createaccount to allow user account creation.
82 * (bug 40124) action=options API also allows for setting of arbitrary
83 preferences, provided that their names are prefixed with 'userjs-'. This
84 officially reenables the feature that was undocumented and defective
85 in MW 1.20 (saving preferences using Special:Preferences cleared any
86 additional fields) and which has been disabled in 1.20.1 as a part of
87 a security fix (bug 42202).
88 * Added option to specify "others" as author in extension credits using
90 * Added the ability to limit the wall clock time used by shell processes,
91 as well as the CPU time. Configurable with $wgMaxShellWallClockTime.
92 * Allow memory of shell subprocesses to be limited using Linux cgroups
93 instead of ulimit -v, which tends to cause deadlocks in recent versions
94 of ImageMagick. Configurable with $wgShellCgroup.
95 * Added $wgWhitelistReadRegexp for regex whitelisting.
96 * (bug 5346) Categories that are redirects will be displayed italic in
97 the category links section at the bottom of a page.
98 * (bug 43915) New maintenance script deleteEqualMessages.php.
99 * You can now create checkbox option matrices through the HTMLCheckMatrix
100 subclass in HTMLForm.
101 * WikiText now permits the use of WAI-ARIA's role="presentation" inside of
102 html elements and tables. This allows presentational markup, especially
103 tables. To be marked up as such.
104 * maintenance/sql.php learned the --cluster option. Let you run the script
105 on some external cluster instead of the primary cluster for a given wiki.
106 * (bug 20281) test the parsing of inline URLs.
107 * Added Special:PagesWithProp, which lists pages using a particular page property.
108 * Implemented language-specific collations for category sorting for 67 languages
109 based in latin, greek and cyrillic alphabets. This allows one to *finally* get
110 articles to be correctly sorted on category pages. They are named
111 'uca-<langcode>', where <langcode> is one of: af, ast, az, be, bg, br, bs, ca,
112 co, cs, cy, da, de, dsb, el, en, eo, es, et, eu, fi, fo, fr, fur, fy, ga, gd,
113 gl, hr, hsb, hu, is, it, kk, kl, ku, ky, la, lb, lt, lv, mk, mo, mt, nl, no,
114 oc, pl, pt, rm, ro, ru, rup, sco, sk, sl, smn, sq, sr, sv, tk, tl, tr, tt, uk,
116 * Added 'CategoryAfterPageAdded' and 'CategoryAfterPageRemoved' hooks.
117 * Added 'HistoryRevisionTools' and 'DiffRevisionTools' hooks.
118 * (bug 33186) Add image rotation api "imagerotate"
119 * (bug 34040) Add "User rights management" link on user page toolbox.
120 * (bug 45526) Add QUnit assertion helper "QUnit.assert.htmlEqual" for asserting
121 structual equality of HTML (ignoring insignificant differences like
122 quotmarks, order and whitespace in the attribute list).
124 === Bug fixes in 1.21 ===
125 * (bug 42649) PHP Fatal error: Call to a member function isLocal() on a
126 non-object in Title.php
127 * (bug 46493) Special:ProtectedPages results in whitepage when a bad title is protected
128 * (bug 40617) Installer can now customize the logo in LocalSettings.php
129 * (bug 40353) SpecialDoubleRedirect should support interwiki redirects.
130 * (bug 40352) fixDoubleRedirects.php should support interwiki redirects.
131 * (bug 9237) SpecialBrokenRedirect should not list interwiki redirects.
132 * (bug 34960) Drop unused fields rc_moved_to_ns and rc_moved_to_title from
134 * (bug 32951) Do not register internal externals with absolute protocol,
135 when server has relative protocol.
136 * (bug 39005) When purging proxies listed in $wgSquidServers using HTTP PURGE
137 method requests, we now send a Host header by default, for Varnish
138 compatibility. This also works with Squid in reverse-proxy mode. If you wish
139 to support Squid configured in forward-proxy mode, set
140 $wgSquidPurgeUseHostHeader to false.
141 * (bug 37020) sql.php with readline eats semicolon.
142 * (bug 11748) Properly handle optionally-closed HTML tags when Tidy is
143 disabled, and don't wrap HTML-syntax definition lists in paragraphs.
144 * (bug 41409) Diffs while editing an old revision should again diff against the
146 * (bug 41494) Honor $wgLogExceptionBacktrace when logging non-API exceptions
147 caught during API execution.
148 * (bug 37963) Fixed loading process for user options.
149 * (bug 26995) Update filename field on Upload page after having sanitized it.
150 * (bug 41793) Contribution links to users with 0 edits on Special:ListUsers
152 * (bug 41899) A PHP notice no longer occurs when using the "rvcontinue" API
154 * (bug 42036) Account creation emails now contain canonical (not
155 protocol-relative) URLs.
156 * (bug 41990) Fix regression: API edit with redirect=true and lacking
157 starttimestamp and basetimestamp should not cause an edit conflict.
158 * (bug 41706) EditPage: Preloaded page should be converted if possible and
160 * (bug 41886) Rowspans are no longer exploded by tablesorter until the table is
162 * (bug 2865) User interface HTML elements don't use lang attribute.
163 (completed the fix by adding the lang attribute to firstHeading).
164 * (bug 42173) Removed namespace prefixes on Special:UncategorizedCategories.
165 * (bug 36053) Log in "returnto" feature forgets query parameters if no
166 title parameter was specified.
167 * (bug 42410) API action=edit now returns correct timestamp for the new edit.
168 * (bug 14901) Email notification mistakes log action for new page creation.
169 Enotif no longer sends "page has been created" notifications for some log
170 actions. The following events now have a correct message: page creation,
171 deletion, move, restore (undeletion), change (edit). Parameter
172 $CHANGEDORCREATED is deprecated in 'enotif_body' and scheduled for removal in
174 * (bug 457) In the sidebar of Vector, CologneBlue, Monobook, and Monobook-based
175 skins, the heading levels have been changed from (variously per skin)
176 <h4>, <h5> or <h6> to only <h3>s, with a <h2> hidden heading above them.
177 If you are styling or scripting the headings in a custom way, this change
178 will require updates to your site's CSS or JS.
179 * (bug 41342) jquery.suggestions should cancel any active (async) fetches
180 before it triggers another fetch.
181 * (bug 42184) $wgUploadSizeWarning missing second variable.
182 * (bug 34581) removeUnusedAccounts.php maintenance script now ignores newuser
183 log when determining whether an account is used.
184 * (bug 43379) Gracefully fail if rev_len is unavailable for a revision on the
186 * (bug 42949) API no longer assumes all exceptions are MWException.
187 * (bug 41733) Hide "New user message" (.usermessage) element from printable view.
188 * (bug 39062) Special:Contributions will display changes that don't have
189 a parent id instead of just an empty bullet item.
190 * (bug 37209) "LinkCache doesn't currently know about this title" error fixed.
191 * wfMerge() now works if $wgDiff3 contains spaces
192 * (bug 43052) mediawiki.action.view.dblClickEdit.dblClickEdit should trigger
193 ca-edit click instead opening URL directly.
194 * (bug 43964) Invalid value of "link" parameter in <gallery> no longer produces
196 * (bug 44775) The username field is not pre-filled when creating an account.
197 * (bug 45069) wfParseUrl() no longer produces a PHP notice if passed a "mailto:"
199 * (bug 45012) Creating an account by e-mail can no longer show a
200 "password mismatch" error.
201 * (bug 44599) On Special:Version, HEADs for submodule checkouts (e.g. for
202 extensions) performed using Git 1.7.8+ should now appear.
203 * (bug 42184) $wgUploadSizeWarning missing second variable
204 * (bug 40326) Check if files exist with a different extension during uploading
205 * (bug 34798) Updated CSS for Atom/RSS recent changes feeds to match on-wiki diffs.
206 * (bug 42430) Calling numRows on MySQL no longer propagates unrelated errors.
207 * (bug 44719) Removed mention of non-existing maintenance/migrateCurStubs.php
208 script in includes/DefaultSettings.php
209 * (bug 45143) jquery.badge: Treat non-Latin variants of zero as zero as well.
210 * (bug 46151) mwdocgen.php should not ignore exit code of doxygen command.
211 * (bug 41889) Fix $.tablesorter rowspan exploding for complex cases.
213 === API changes in 1.21 ===
214 * prop=revisions can now report the contentmodel and contentformat.
215 See docs/contenthandler.txt.
216 * action=edit and action=parse now support contentmodel and contentformat
217 parameters to control the interpretation of page content.
218 See docs/contenthandler.txt for details.
219 * (bug 35693) ApiQueryImageInfo now suppresses errors when unserializing metadata.
220 * (bug 40111) Disable minor edit for page/section creation by API.
221 * (bug 41042) Revert change to action=parse&page=... behavior when the page
223 * (bug 27202) Add timestamp sort to list=allimages.
224 * (bug 43137) Don't return the sha1 of revisions through the API if the content is
226 * ApiQueryImageInfo now also returns imageinfo for redirects.
227 * list=alltransclusions added to enumerate every instance of page embedding
228 * list=alllinks & alltransclusions now allow both 'from' and 'continue' in
229 the same query. When both are present, 'from' is simply ignored.
230 * list=alllinks & alltransclusions now allow 'unique' in generators, to yield
231 a list of all link/template target pages instead of source pages.
232 * BREAKING CHANGE: list=logevents output format changed for details of some log
233 types. Specifically, details that were formerly reported under a key like
234 "4::foo" will now be reported under a key of simply "foo".
235 * BREAKING CHANGE: '??_badcontinue' error code was changed to '??badcontinue'
236 for all query modules.
237 * ApiQueryBase adds 'badcontinue' error code if module has 'continue' parameter.
238 * (bug 35885) Removed version parameter and all getVersion() methods.
239 * action=options now takes a "resetkinds" option, which allows only resetting
240 certain types of preferences when the "reset" option is set.
241 * (bug 36751) ApiQueryImageInfo now returns imageinfo for the redirect target
242 when queried with &redirects=.
243 * (bug 31849) ApiQueryImageInfo no longer gets confused when asked for info on
244 a redirect and its target.
245 * (bug 43849) ApiQueryImageInfo no longer throws exceptions with ForeignDBRepo
247 * On error, any warnings generated before that error will be shown in the result.
248 * action=help supports generalized submodules (modules=query+value), querymodules obsolete
249 * ApiQueryImageInfo continuation is more reliable. The only major change is
250 that the imagerepository property will no longer be set on page objects not
251 processed in the current query (i.e. non-images or those skipped due to
253 * Add supports for all pageset capabilities - generators, redirects, converttitles to
254 action=purge and action=setnotificationtimestamp.
255 * (bug 43251) prop=pageprops&ppprop= now accepts multiple props to query.
256 * ApiQueryImageInfo will now limit the number of calls to File::transform made
257 in any one query. If there are too many, iicontinue will be returned.
258 * action=query&meta=siteinfo&siprop=general will now return the regexes used for
259 link trails and link prefixes. Added for Parsoid support.
260 * Added an API query module list=pageswithprop, which lists pages using a
261 particular page property.
262 * Added an API query module list=pagepropnames, which lists all page prop names
263 currently in use on the wiki.
264 * (bug 44921) ApiMain::execute() will now return after the CORS check for an
265 HTTP OPTIONS request.
266 * (bug 44923) action=upload works correctly if the entire file is uploaded in
268 * Added 'continue=' parameter to streamline client iteration over complex query results
269 * (bug 44909) API parameters may now be marked as type "upload", which is now
270 used for action=upload's 'file' and 'chunk' parameters. This type will raise
271 an error during parameter validation if the parameter is given but not
272 recognized as an uploaded file.
273 * (bug 44244) prop=info may now return the number of people watching each page.
274 * (bug 33304) list=allpages will no longer return duplicate entries when
276 * (bug 33304) list=allpages will now find really old indefinite protections.
277 * (bug 45937) meta=allmessages will report a syntactically invalid lang as a
278 proper error instead of as an uncaught exception.
279 * The JSON output formatter now leaves forward slashes unescaped to improve human
280 readability of URLs and similar strings. Also, a "utf8" option is now provided
281 to use UTF-8 encoding instead of hex escape codes for most non-ASCII characters.
283 === API internal changes in 1.21 ===
284 * For debugging only, a new global $wgDebugAPI removes many API restrictions when true.
285 Never use on the production servers, as this flag introduces security holes.
286 Whenever enabled, a warning will also be added to all output.
287 * ApiModuleManager now handles all submodules (actions,props,lists) and instantiation
288 * Query stores prop/list/meta as submodules
289 * ApiPageSet can now be used in any action to process titles/pageids/revids or any generator.
290 * BREAKING CHANGE: ApiPageSet constructor now has two params instead of three, with only the
291 first one keeping its meaning. ApiPageSet is now derived from ApiBase.
292 * BREAKING CHANGE: ApiQuery::newGenerator() and executeGeneratorModule() were deleted.
293 * ApiQueryGeneratorBase::setGeneratorMode() now requires a pageset param.
294 * $wgAPIGeneratorModules is now obsolete and will be ignored.
295 * Added flags ApiResult::OVERRIDE and ADD_ON_TOP to setElement() and addValue()
296 * Internal API calls will now include <warnings> in case of unused parameters
298 === Languages updated in 1.21 ===
300 MediaWiki supports over 350 languages. Many localisations are updated
301 regularly. Below only new and removed languages are listed, as well as
302 changes to languages because of Bugzilla reports.
304 * South Azerbaijani (azb) added.
305 * (bug 30040) Autonym for nds-nl is now 'Nedersaksies' (was 'Nedersaksisch').
306 * (bug 45436) Autonym for pi (Pali) is now 'पालि' (was ''पाळि').
307 * (bug 34977) Now formatted numbers in Spanish use space as separator
308 for thousands, as mandated by the Real Academia Española.
309 * (bug 35031) Kurdish formatted numbers now use period and comma
310 as separators for thousands and decimals respectively.
312 === Other changes in 1.21 ===
313 * BREAKING CHANGE: (bug 44385) Removed the jquery.collapsibleTabs module and
314 moved it to the Vector extension. It was entirely Vector-extension-specific,
315 deeply interconnected with the extension, and this functionality really
316 belongs to the extension instead of the skin anyway. In the unlikely case you
317 were using it, you have to either copy it to your extension, or install the
318 Vector extension (and possibly disable its features using config settings if
319 you don't want them).
320 * Experimental IBM DB2 support was removed due to lack of interest and maintainership.
321 * BREAKING CHANGE: Filenames of maintenance scripts were standardized into
322 lowerCamelCase format, and made more explicit:
323 - clear_stats.php -> clearCacheStats.php
324 - clear_interwiki_cache.php -> clearInterwikiCache.php
325 - initStats.php -> initSiteStats.php
326 - proxy_check.php -> proxyCheck.php
327 - stats.php -> showCacheStats.php
328 - showStats.php -> showSiteStats.php.
329 Class names were renamed accordingly:
330 - clear_stats -> ClearCacheStats
331 - InitStats -> InitSiteStats
332 - CacheStats -> ShowCacheStats
333 - ShowStats -> ShowSiteStats.
334 * BREAKING CHANGE: (bug 38244) Removed the mediawiki.api.titleblacklist module
335 and moved it to the TitleBlacklist extension.
336 * BREAKING CHANGE: Implementation of MediaWiki's JS and JSON value encoding
338 ** MediaWiki no longer supports PHP installations in which the native JSON
339 extension is missing or disabled.
340 ** XmlJsCode objects can no longer be nested inside objects or arrays.
341 (For Xml::encodeJsCall(), this individually applies to each argument.)
342 ** The sets of characters escaped by default, along with the precise escape
343 sequences used, have changed (except for the Xml::escapeJsString()
344 function, which is now deprecated).
345 * BREAKING CHANGE: The Services_JSON class has been removed. If necessary,
346 be sure to upgrade affected extensions at the same time (e.g. Collection).
350 MediaWiki 1.21 requires PHP 5.3.2 or later.
352 MySQL is the recommended DBMS. PostgreSQL or SQLite can also be used, but
353 support for them is somewhat less mature. There is experimental support for
356 The supported versions are:
358 * MySQL 5.0.2 or later
359 * PostgreSQL 8.3 or later
360 * SQLite 3.3.7 or later
361 * Oracle 9.0.1 or later
365 1.21 has several database changes since 1.20, and will not work without schema
366 updates. Note that due to changes to some very large tables like the revision
367 table, the schema update may take quite long (minutes on a medium sized site,
368 many hours on a large site).
370 If upgrading from before 1.11, and you are using a wiki as a commons
371 repository, make sure that it is updated as well. Otherwise, errors may arise
372 due to database schema changes.
374 If upgrading from before 1.7, you may want to run refreshLinks.php to ensure
375 new database fields are filled with data.
377 If you are upgrading from MediaWiki 1.4.x or earlier, you should upgrade to
378 1.5 first. The upgrade script maintenance/upgrade1_5.php has been removed
381 Don't forget to always back up your database before upgrading!
383 See the file UPGRADE for more detailed upgrade instructions.
385 For notes on 1.19.x and older releases, see HISTORY.
387 == Online documentation ==
389 Documentation for both end-users and site administrators is available on
390 MediaWiki.org, and is covered under the GNU Free Documentation License (except
391 for pages that explicitly state that their contents are in the public domain):
393 https://www.mediawiki.org/wiki/Documentation
397 A mailing list is available for MediaWiki user support and discussion:
399 https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
401 A low-traffic announcements-only list is also available:
403 https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce
405 It's highly recommended that you sign up for one of these lists if you're
406 going to run a public MediaWiki, so you can be notified of security fixes.
410 There's usually someone online in #mediawiki on irc.freenode.net.