From a58285fd06c8113c45377c655dd43cef6337e815 Mon Sep 17 00:00:00 2001 From: Pierre Schmitz Date: Thu, 11 Jan 2007 19:06:07 +0000 Subject: Aktualisierung auf MediaWiki 1.9.0 --- RELEASE-NOTES | 1055 +++++++++++++++++++++++++++++++++++++++------------------ 1 file changed, 717 insertions(+), 338 deletions(-) (limited to 'RELEASE-NOTES') diff --git a/RELEASE-NOTES b/RELEASE-NOTES index 82eb053b..24d90c1f 100644 --- a/RELEASE-NOTES +++ b/RELEASE-NOTES @@ -3,18 +3,29 @@ Security reminder: MediaWiki does not require PHP's register_globals setting since version 1.2.0. If you have it on, turn it *off* if you can. -== MediaWiki 1.8.3 == +== MediaWiki 1.9 == -January 9, 2007 +January 10, 2007 + +This is the quarterly release snapshot for Winter 2007. While the code +has been running on Wikipedia for some time, installation and upgrade +bits may be less well tested. Bug fix releases may follow in the coming +days or weeks. + + +MediaWiki is now using a "continuous integration" development model with +quarterly snapshot releases. The latest development code is always kept +"ready to run", and in fact runs our own sites on Wikipedia. + +Release branches will continue to receive security updates for about a year +from first release, but nonessential bugfixes and feature development happen +will be made on the development trunk and appear in the next quarterly release. + +Those wishing to use the latest code instead of a branch release can obtain +it from source control: http://www.mediawiki.org/wiki/Download_from_SVN -MediaWiki 1.8.3 fixes several issues in the Fall 2006 snapshot release: -* (bug 7831) Regression in AutoAuthenticate hook -* Run PHP install version checks on update.php so command-line updaters see - new version requirements -* Do a check for the PHP 5.0.x 64-bit bug, since this is much more disruptive - as of MW 1.8 than it used to be. Install or upgrade now aborts with a - warning and a request to upgrade. -* XSS fix in AJAX module + +== Security fixes == An XSS injection vulnerability was located in the AJAX support module, affecting MediaWiki 1.6.x and up when the optional setting $wgUseAjax @@ -22,7 +33,7 @@ is enabled. There is no danger in the default configuration, with $wgUseAjax off. -If you are using an extension based on the optional AJAX module, +If you are using an extension based on the optional Ajax module, either disable it or upgrade to a version containing the fix: * 1.9: fixed in 1.9.0rc2 @@ -31,368 +42,736 @@ either disable it or upgrade to a version containing the fix: * 1.6: fixed in 1.6.9 -== MediaWiki 1.8.2 == +== Compatibility changes == -October 13, 2006 +=== Zend Optimizer === -MediaWiki 1.8.2 fixes several issues in the Fall 2006 snapshot release: +A bug in some versions of PHP 5 and Zend Optimizer which was triggered under +MediaWiki 1.8.x has been worked around by disabling some internal debugging +features when Zend Optimizer is loaded. This should solve some common +"blank page" problems. -* (bug 7565) Fixed typos in German localisation -* (bug 7562) Fix non-ASCII namespaces on Windows/XAMPP servers +=== PHP 5.0 64-bit === +MediaWiki now checks for a condition where PHP 5.0.x corrupts array data +on 64-bit systems and warns you to upgrade PHP to solve the problem. This +bug causes Special: pages to fail on affected systems under MediaWiki 1.8 +and higher, and subtler data corruption on earlier versions. -== MediaWiki 1.8.1 == +The only known workaround is to upgrade PHP to 5.1 or later, which you +probably should do anyway for security reasons! -October 11, 2006 +=== MySQL 5 === -MediaWiki 1.8.1 fixes several issues in the Fall 2006 snapshot release: +MediaWiki should now install and run correctly on MySQL 5.0 and higher when +MySQL's "strict mode" is enabled. (This is now the default for many Windows +installations, though it seems to remain off by default on Unix.) -* Fix PHP notice and estimates for dumpBackup.php and friends -* Improved register_globals paranoia checks -* (bug 7545) Fix PHP version check on install -* Experimental web API disabled by default -* Disable PHP exception backtrace printing unless $wgShowExceptionDetails - is set. Backtraces may contain sensitive information in function call - parameters. +This fixes errors about "cannot default default value for BLOB/TEXT fields". +=== ImageMagick === -== MediaWiki 1.8.0 == +Note that ImageMagick older than 6.x may no longer work for image resizing +due to use of the -thumbnail option. -October 10, 2006 -This is the quarterly release snapshot for Fall 2006. While the code -has been running on Wikipedia for some time, installation and upgrade -bits may be less well tested. Bug fix releases may follow in the coming -days or weeks. +== Behavior changes == +=== Localized special pages === -MediaWiki is now using a "continuous integration" development model with -quarterly snapshot releases. The latest development code is always kept -"ready to run", and in fact runs our own sites on Wikipedia. +The names of Special: pages can now be localized, so links and URLs to them +are more legible in languages that aren't English. -Release branches will continue to receive security updates for about a year -from first release, but nonessential bugfixes and feature development happen -will be made on the development trunk and appear in the next quarterly release. +Not all languages have included localized names yet. -Those wishing to use the latest code instead of a branch release can obtain -it from source control: http://www.mediawiki.org/wiki/Download_from_SVN +=== E-mail password === + +Users are now required to set a new password for themselves when they first +log in with a newly generated e-mailed password. + +Requesting passwords frequently is prevented to reduce abusive mailbombing. + +=== Undo revision === + +An "undo" link now appears in diff view for easier reverting of older edits. +When GNU diff3 is available for edit conflict merging, this can make it much +easier to "undo" the changes of an older edit when there are surrounding +changes elsewhere in the page. + +The changes must be manually reviewed and approved, as with conventional +full-revision reverts. + +=== Blocking === + +User blocks can be set to disable the automatic blocking of IP addresses the +account logs in with. + + +== Database changes == + +* new 'redirect' table stores data on page redirects +* new 'querycachetwo' table used for some cached special pages +* 'ipblocks' table adds 'ipb_enable_autoblock' +* 'recentchanges' table adds 'rc_old_len', 'rc_new_len' for size tracking +* 'user' table has added 'user_newpass_time' and 'user_editcount' fields +* some indexes have been updated on 'recentchanges' == Configuration changes == -* $wgUseETag, to enable/disable sending of HTTP ETag headers - (default: disabled) -* $wgLegalTitleChars now includes '+' by default for better compatibility - with importing data dumps from Wikipedia -* $wgDefaultUserOptions now includes all default option settings instead - of only overrides. - - -== Major new features == - -* (bug 7098) Add an option to disable/enable sending of HTTP ETag headers, - as it seems to result in broken behaviour in combination with Squid 2.6 - (disabled by default). -* (bug 550) Allow blocks on anonymous users only. -* (bug 6420) Render thumbnails for DJVU images, support multipage DJVU display - on image pages. Added new 'page=' thumbnail option to select a page from a - multipage djvu for thumbnail generation. -* Full Postgres support is now enabled. It requires version 8.1 or better, and - needs to have both plpgsql and tsearch2 already installed. -* (bug 6386) fix grammatical errors in danish naming of talk namespaces. - -== Changes since 1.7 == - -* Introduced AjaxResponse object, superceding AjaxCachePolicy -* Changes to sajax_do_call: optionally accept an element to fill instead of a - callback function; take the target function or element as a third parameter; - pass the full XMLHttpRequest object to the handler function, instead of just - the resultText value; use HTTP response codes to report errors. -* (bug 6562) Removed unmaintained ParserXml.php for now -* History paging overlap bug fixed -* (bug 6586) Regression in "unblocked" subtitle -* Don't put empty-page message into view-source when page text is blank -* (bug 6587) Remove redundant "allnonarticles" message -* Block improvements: Allow blocks on anonymous users only. Optionally allow - or disallow account creation from blocked IP addresses. Prevent duplicate - blocks. Fixed the problem of expiry and unblocking erroneously affecting - multiple blocks. Fixed confusing lack of error message when a blocked user - attempts to create an account. Fixed inefficiency of Special:Ipblocklist in - the presence of large numbers of blocks; added indexes and implemented an - indexed pager. -* (bug 6448) Allow filtering of Special:Newpages according to username -* (bug 6618) Improve permissions/error detection in Special:Lockdb -* Quick hack for extension testing: parser test doesn't create new message - cache object. -* (bug 6299) Maintain parser's revision ID across recursive calls to fix - {{REVISIONID}} when Cite extension is used -* (bug 6622) Removed deprecated function Image::newFromTitle -* (bug 6627) Fix regression in Special:Ipblocklist with table prefix -* Removed forced dereferencements (new() returns a reference in PHP5) -* Note about $wgUploadSizeWarning using byte -* (bug 6592) Add most viewed pages summary to Special:Statistics -* Pre-strip characters ignored in IDNs from URLs so they can't be used - to break the blacklists for regular URLs -* Fix regression in blocking of user accounts -* (bug 6635) Fix regression searching for range blocks on Ipblocklist -* Fix regression searching Ipblocklist with ugly URLs -* (bug 6639) Use a consistent default for upload directories -* Preserve entered reason when reporting unconfirmed lock on Special:Lockdb -* (bug 6642) Don't offer to unlock the database when it isn't locked -* cleanupTitles.php changed from --dry-run option to --fix, so default - behavior is now a non-invasive check as with namespaceDupes.php -* (bug 6660) Fix behaviour of EditPage::blockedPage() when the article does - not exist; now doesn't show the source box if the user hasn't provided it - (blocked mid-edit) and the page doesn't exist -* Improve default value of "blockedtext" -* (bug 6680) Added localisation for Dutch bookstore list (nl) -* Renamed maintainace script redundanttrans.php to unusedMessages.php - clearer usage -* Fix regression which allowed some blocked users to create additional accounts -* (bug 6657) Fix Hungarian linktrail -* (bug 6751) Fix preview of blanked section with edit on first preview option -* (bug 5456) Separate MediaWiki:Search into messages for both noun and verb, - introduced 'MediaWiki:Searchbutton' -* Made lines from initialiseMessages() appear as list items during installation -* Moved the bulk of the localisation data from the Language*.php files to the - Messages*.php files. Deleted most of the Languages*.php files. -* Introduced "stub global" framework to provide deferred initialisation of core - modules. -* Removed placeholder values for $wgTitle and $wgArticle, these variables will - now be null during the initialisation process, until they are set by index.php - or another entry point. -* Added DBA cache type, for BDB-style caches. -* Removed custom date format functions, replacing them with a format string in - the style of PHP's date(). Used string identifiers instead of integer - identifiers, in both the language files and user preferences. Migration should - be transparent in most cases. -* Simplified the initialisation API for LoadBalancer objects. -* Removed the broken altencoding feature. -* Moved default user options and toggles from Language to User. Language objects - are still able to define default preference overrides and extra user toggles, - via a slightly different interface. -* Don't include the date option in the parser cache rendering hash unless - $wgUseDynamicDates is enabled. -* Merged LanguageUtf8 with Language. Removed LanguageUtf8.php. -* Removed inclusion of language files from the bottom of Language.php. This is - now consistently done from Language::factory(). -* Add the name of the executing maintenance script to the debug log. Start the - profiler during maintenance scripts. -* Added "serialized" directory, for storing precompiled data in serialized form. -* Fix regression in auto-set NS_PROJECT_TALK namespace -* Fix regression in ordering of namespaces -* (bug 6806, 6030) Added several global JS variables for article path, user name, - page title, etc. -* hooks registered with addOnloadHook are now called at the one of the html body - by all skins. -* Split ajax aided search from core ajax framework. Use wgUseAjax to enable the - framework and wgAjaxSearch to enable the suggest feature for the search box. -* Added experimental installer for extensions. - See maintenance/installExtension.php -* Added Tajic (tg) language file. -* (bug 6903) Added Cantonese localisation (zh-yue) -* Fix regression in Korean and Japanese date formatting (day of week) -* (bug 6919) Add English alias magic words for Tatar (tt) language file. -* (bug 6753) Fixed broken Kazakh linktrail (kk) -* (bug 6700) Added Kazakh language variants to Names.php -* (bug 6827) some i18n specific maintenance scripts fails after merge of localisation-work branch -* Throwed an exception for the deprecated functions OutputPage::sysopRequired and - OutputPage::developerRequired - use OutputPage::permissionRequired instead. -* Removed the deprecated functions User::isSysop, User::isBureaucrat and User::isDeveloper - - use User::isAllowed instead. -* (bug 769) OutputPage::permissionRequired() should suggest groups with the needed permission -* (bug 6971) Fix regression in Special:Export history view -* Revamped Special:Imagelist -* (bug 7000) updated MessagesPl.php -* (bug 6946) Fix unexpected behavior change with GET hits to Special:Export -* (bug 1866) Improve navigation on Special:Listusers; user now a starting - point as with Special:Allpages, rather than a pure limit. -* Clean up tab order on Special:Blockip -* (bug 5969) Clean up tab order on Special:Userlogin forms -* (bug 3512) namespaceDupes now handles spaces and initial caps properly -* (bug 7037) Fix regression in login tab order -* (bug 7031) Report missing email on 'email password' instead of false success -* (bug 7010) Don't send email notifications for watched talk pages when user - has selected to receive only updates for their own talk page -* Added {{CURRENTHOUR}} -* Added [[:Image:Foo.png]] style links to the pagelinks table -* Avoid duplicate revision imports with Special:Import -* (bug 7054) Validate email address before sending email confirmation message -* (bug 7061) Format title on "from (page)" links on Special:Allpages -* (bug 7044) Introduce "padleft" and "padright" colon functions -* Pass page title as parameters to "linkshere" and "nolinkshere" and update - default message text -* Allows to upload from publicy accessible URL. Set $wgAllowCopyUploads = true ; in LocalSettings.php - Limited to $wgMaxUploadSize (default:100MB); URL upload is limited to sysops by default, and displayed as a second line if appropriate -* (bug 832) Return to user page after emailing a user -* (bug 366) Add local-system-timezone equivalents for date/time variables -* (bug 7109) Fix Atom feed version number in header links -* (bug 7075) List registered parser function hooks on Special:Version -* (bug 7059) Introduce "anchorencode" colon function -* Include SVN revision number in {{CURRENTVERSION}} output, where applicable -* Fix bug in wfRunHooks which caused corruption of objects in the hook list -* (bug 4979) Use simplified email addresses when running on Windows -* (bug 4434) Show block log fragment on Special:Blockip -* [[MediaWiki:Disambiguationspage]] may optionally contain wiki links to any number - of disambiguation templates. -* [[Special:Disambiguations]] now shows pages in NS:0 that link to any pages that embed - any of the templates listed at [[MediaWiki:Disambiguationspage]]. -* Fix formatting of titles on Special:Undelete -* (bug 7026) Fix action=raw&templates=expand -* (bug 6976) Add namespace and direction classes to classic skins -* (bug 7144) Don't "return to main" from OutputPage::loginToUse() if the the user can't - read the main page in the first place -* (bug 7188) Fix minor borkage in HTMLForm -* (bug 6675) Replaced message 'watchthis' with new message 'watchthisupload in Special:Upload -* Add a quickie script dumpSisterSites.php for generating a page list in the - format for WSR-1 SisterSites support -* (bug 7223) Monobook.js is used for site content, should not be localized -* Set default disabled values for DjVu render options -* Added Xml::option() for generating