Reedy [Thu, 30 Sep 2021 18:31:22 +0000 (30 19:31 +0100)]
Remove unused use statement
Change-Id: I73a254930966a4d276b286da441fc651e941003c
Follows-Up: I8b7b41a355be265389a4a8c9ea91301d4e23ae1b
Reedy [Thu, 30 Sep 2021 14:30:31 +0000 (30 15:30 +0100)]
Prep 1.31.16
Change-Id: If9fe567779582bfca28fb76b39c4daf7b1774bc2
Chris Danis [Thu, 23 Sep 2021 20:21:05 +0000 (23 16:21 -0400)]
SECURITY: fix PoolCounter protection of Special:Contributions
The call to $pager->getNumRows() itself triggers execution of
the database query backing the page, so, that call must be inside
the callback given to PoolCounterWorkViaCallback.
CVE-2021-41800
Bug: T284419
Change-Id: I8b7b41a355be265389a4a8c9ea91301d4e23ae1b
Amir Sarabadani [Mon, 6 Sep 2021 16:06:44 +0000 (6 16:06 +0000)]
SECURITY: Add straight join to ApiQueryBacklinks
Otherwise, it scans the whole page table instead.
CVE-2021-41799
Bug: T290379
Change-Id: I27e828905c455753ccd2ec2dbb3b3ea716a75f72
Alexander Vorwerk [Thu, 24 Jun 2021 22:37:32 +0000 (25 00:37 +0200)]
SECURITY: Pass escaped HTML to FullSearchResultWidget::buildMeta
CVE-2021-41798
Bug: T285515
Change-Id: I771e44af5641f3065141fa3478f68ab05e31d71f
RhinosF1 [Thu, 30 Sep 2021 17:48:06 +0000 (30 12:48 -0500)]
Update git submodules
* Update extensions/ReplaceText from branch 'REL1_31'
to
d4687e125f50dd87c1002835758e8b4a37bb5683
- SECURITY: Check permissions before job execution
CVE-2021-41801
Bug: T279090
Change-Id: Ibc299edf626ca9aa1cd9d83b888820f5aca9af7c
Reedy [Wed, 29 Sep 2021 01:34:54 +0000 (29 02:34 +0100)]
Update RELEASE-NOTES-1.31
Change-Id: Ie82741df23c9287251f9d377aff6d72ee1d41313
Martin Urbanec [Sun, 5 Sep 2021 23:36:17 +0000 (6 01:36 +0200)]
Update git submodules
* Update extensions/OATHAuth from branch 'REL1_31'
to
7ad254578cd6a16250d90cdd362fbe21c460eb50
- showqrcode-related RL modules should also target mobile devices
Otherwise, the QR code will not be displayed when using
the mobile interface.
Bug: T214986
Change-Id: I08c3f66d836f5fc854d5c7ae2ca580aa896f3f38
libraryupgrader [Sat, 4 Sep 2021 17:41:34 +0000 (4 17:41 +0000)]
Update git submodules
* Update skins/Vector from branch 'REL1_31'
to
a4cd6d061e5a5fbee104d9d4711d4b14e6c255a9
- build: Updating path-parse to 1.0.7
* https://npmjs.com/advisories/1773 (CVE-2021-23343)
Change-Id: Ib2bbff1071119ef4969d9c6986725ea32674593a
libraryupgrader [Sat, 4 Sep 2021 17:35:26 +0000 (4 17:35 +0000)]
Update git submodules
* Update skins/Timeless from branch 'REL1_31'
to
073da525f272adb5e6f6369831bf279b95baebe4
- build: Updating path-parse to 1.0.7
* https://npmjs.com/advisories/1773 (CVE-2021-23343)
Change-Id: I50dfefa5341fc55bcff449f3c290e81730b1d9e5
libraryupgrader [Sat, 4 Sep 2021 17:14:25 +0000 (4 17:14 +0000)]
Update git submodules
* Update skins/MonoBook from branch 'REL1_31'
to
cbde28d193b53b7a129c3e9637ce0bbbda0629ad
- build: Updating path-parse to 1.0.7
* https://npmjs.com/advisories/1773 (CVE-2021-23343)
Change-Id: I039c0fdcf65e8a9e95d330aa0961d0d889f0c0ce
libraryupgrader [Sat, 4 Sep 2021 13:29:37 +0000 (4 13:29 +0000)]
Update git submodules
* Update extensions/WikiEditor from branch 'REL1_31'
to
eb567c4ae4b5c4d728a2a283517c344c648d8589
- build: Updating path-parse to 1.0.7
* https://npmjs.com/advisories/1773 (CVE-2021-23343)
Change-Id: I905fa88c3acdb087b413d5f8d4b070c54bcbac82
libraryupgrader [Sat, 4 Sep 2021 09:23:55 +0000 (4 09:23 +0000)]
Update git submodules
* Update extensions/TitleBlacklist from branch 'REL1_31'
to
631e35ccac53850143d08245e5a6bc2d49e523b0
- build: Updating path-parse to 1.0.7
* https://npmjs.com/advisories/1773 (CVE-2021-23343)
Change-Id: I178bddbdf840e7baaa1edcbed193f6b5ec819c79
libraryupgrader [Sat, 4 Sep 2021 08:09:11 +0000 (4 08:09 +0000)]
Update git submodules
* Update extensions/SyntaxHighlight_GeSHi from branch 'REL1_31'
to
b7e39526c3ecd65417d297448478df2c54e94939
- build: Updating path-parse to 1.0.7
* https://npmjs.com/advisories/1773 (CVE-2021-23343)
Change-Id: I150cc789505ba4b6c0c05abe202bef1c6b943c13
libraryupgrader [Sat, 4 Sep 2021 06:57:07 +0000 (4 06:57 +0000)]
Update git submodules
* Update extensions/SpamBlacklist from branch 'REL1_31'
to
492ff0d2311cff58a718835053fd21b2f19a09f0
- build: Updating path-parse to 1.0.7
* https://npmjs.com/advisories/1773 (CVE-2021-23343)
Change-Id: Ib85ed8d1d8577a41df08fa29b7d38d63bab2d32e
libraryupgrader [Sat, 4 Sep 2021 04:30:31 +0000 (4 04:30 +0000)]
Update git submodules
* Update extensions/ReplaceText from branch 'REL1_31'
to
9739ecb325ff57b86e2fab5cf8eb4fcc5745ee4d
- build: Updating path-parse to 1.0.7
* https://npmjs.com/advisories/1773 (CVE-2021-23343)
Change-Id: Ic02d67464f2e5fb46f1c3fbcdffec0f72df15865
libraryupgrader [Sat, 4 Sep 2021 04:19:51 +0000 (4 04:19 +0000)]
Update git submodules
* Update extensions/Renameuser from branch 'REL1_31'
to
c1db7963faa482004007f7eb39cb060411cd1515
- build: Updating path-parse to 1.0.7
* https://npmjs.com/advisories/1773 (CVE-2021-23343)
Change-Id: I2cafa2db2c28ec6b061ba6f83720018287f1e023
libraryupgrader [Sat, 4 Sep 2021 02:21:57 +0000 (4 02:21 +0000)]
Update git submodules
* Update extensions/Poem from branch 'REL1_31'
to
6875a2417e79a00f1f3bd847d98f07f632883f59
- build: Updating path-parse to 1.0.7
* https://npmjs.com/advisories/1773 (CVE-2021-23343)
Change-Id: I8eeb7ff00d1b353b9455a07f754a2e7c4869f101
libraryupgrader [Sat, 4 Sep 2021 01:25:46 +0000 (4 01:25 +0000)]
Update git submodules
* Update extensions/PdfHandler from branch 'REL1_31'
to
b5162f9fde9c3c09073734d856c493889fff5be3
- build: Updating path-parse to 1.0.7
* https://npmjs.com/advisories/1773 (CVE-2021-23343)
Change-Id: Ic2825a6ef8ebc76e481010d92bd271fb8b9dcd34
libraryupgrader [Sat, 4 Sep 2021 00:20:05 +0000 (4 00:20 +0000)]
Update git submodules
* Update extensions/ParserFunctions from branch 'REL1_31'
to
9186edc4c5e49d218b6b2977b451b2a2218c6231
- build: Updating path-parse to 1.0.7
* https://npmjs.com/advisories/1773 (CVE-2021-23343)
Change-Id: I4e3dd09b2daca99d96cdc90cdbfe9d61d2edfeb9
libraryupgrader [Fri, 3 Sep 2021 18:50:59 +0000 (3 18:50 +0000)]
Update git submodules
* Update extensions/OATHAuth from branch 'REL1_31'
to
5adbab46426a8cf63bd2f6a353e5de73df15facf
- build: Updating path-parse to 1.0.7
* https://npmjs.com/advisories/1773 (CVE-2021-23343)
Change-Id: I933ecb896a303f42b22f0b6d2ffb7a31da642203
libraryupgrader [Fri, 3 Sep 2021 18:21:28 +0000 (3 18:21 +0000)]
Update git submodules
* Update extensions/Nuke from branch 'REL1_31'
to
b63e643aee28cd9c127a6513ce734a547582231e
- build: Updating path-parse to 1.0.7
* https://npmjs.com/advisories/1773 (CVE-2021-23343)
Change-Id: I73d5d70e8562278a9b1794ee151c4085efbf15bc
libraryupgrader [Fri, 3 Sep 2021 12:42:25 +0000 (3 12:42 +0000)]
Update git submodules
* Update extensions/MultimediaViewer from branch 'REL1_31'
to
beeee1d248f62f87f51beadc76b85efa0c607c0f
- build: Updating path-parse to 1.0.7
* https://npmjs.com/advisories/1773 (CVE-2021-23343)
Change-Id: I3f9894659ae642e1cc4be76d66932e1a23026a5c
libraryupgrader [Fri, 3 Sep 2021 09:20:49 +0000 (3 09:20 +0000)]
Update git submodules
* Update extensions/LocalisationUpdate from branch 'REL1_31'
to
6ad580ee68b041e59f12a84fba3c505eea0bf678
- build: Updating path-parse to 1.0.7
* https://npmjs.com/advisories/1773 (CVE-2021-23343)
Additional changes:
* Updated composer IRC support URL to use Libera Chat (T283273)
Change-Id: I7729bb64edf1521fc28e7060a3485e19964aa81a
libraryupgrader [Fri, 3 Sep 2021 07:41:55 +0000 (3 07:41 +0000)]
Update git submodules
* Update extensions/Interwiki from branch 'REL1_31'
to
b61d5d79c31210633d59de0eb07a102b2c43a496
- build: Updating path-parse to 1.0.7
* https://npmjs.com/advisories/1773 (CVE-2021-23343)
Change-Id: I11c293c59016d17c0196b069544402546284a9e2
libraryupgrader [Fri, 3 Sep 2021 07:35:40 +0000 (3 07:35 +0000)]
Update git submodules
* Update extensions/InputBox from branch 'REL1_31'
to
6df45a09afda98aaa961151e247f37db4e40a5d3
- build: Updating path-parse to 1.0.7
* https://npmjs.com/advisories/1773 (CVE-2021-23343)
Change-Id: I1574a31089e51a6dc3a247c938bbb5f694c0036f
libraryupgrader [Fri, 3 Sep 2021 07:02:10 +0000 (3 07:02 +0000)]
Update git submodules
* Update extensions/ImageMap from branch 'REL1_31'
to
0af380e885f0aeb25e0c86480796d34e34a1f133
- build: Updating path-parse to 1.0.7
* https://npmjs.com/advisories/1773 (CVE-2021-23343)
Change-Id: I49514128301fa5df0e049f1b51875fcdb837f856
libraryupgrader [Fri, 3 Sep 2021 03:52:02 +0000 (3 03:52 +0000)]
Update git submodules
* Update extensions/Gadgets from branch 'REL1_31'
to
a44296d34c2dba2b986a820d9f601b6fc987a1c7
- build: Updating path-parse to 1.0.7
* https://npmjs.com/advisories/1773 (CVE-2021-23343)
Change-Id: I29b1e7e1f97761ac05f2d14e2c9000d319695a58
libraryupgrader [Thu, 2 Sep 2021 15:57:55 +0000 (2 15:57 +0000)]
Update git submodules
* Update extensions/ConfirmEdit from branch 'REL1_31'
to
9a15106d31f639338a5e4dc20f591256f5c0c6fb
- build: Updating path-parse to 1.0.7
* https://npmjs.com/advisories/1773 (CVE-2021-23343)
Change-Id: I1f151677ee92e11d11668881ef91076a1bdf4f18
libraryupgrader [Thu, 2 Sep 2021 14:33:33 +0000 (2 14:33 +0000)]
Update git submodules
* Update extensions/CodeEditor from branch 'REL1_31'
to
af53ac06fa588e29f0ba06ce71b5e1ac74c2a77c
- build: Updating path-parse to 1.0.7
* https://npmjs.com/advisories/1773 (CVE-2021-23343)
Change-Id: Ib8163ba459040de0d1c340ed110be9a0d6997dd5
libraryupgrader [Thu, 2 Sep 2021 14:21:07 +0000 (2 14:21 +0000)]
Update git submodules
* Update extensions/CiteThisPage from branch 'REL1_31'
to
a1d19feeef7240e1a366ef01fbe19e2309bf4d35
- build: Updating path-parse to 1.0.7
* https://npmjs.com/advisories/1773 (CVE-2021-23343)
Change-Id: I5d8e4578de73b5ff8167a47d9196fbcc10a3b15e
libraryupgrader [Thu, 2 Sep 2021 14:13:15 +0000 (2 14:13 +0000)]
Update git submodules
* Update extensions/Cite from branch 'REL1_31'
to
411e28a513e93a281a4f1adb97ff33d004b36af0
- build: Updating path-parse to 1.0.7
* https://npmjs.com/advisories/1773 (CVE-2021-23343)
Change-Id: I29c75056b69274b5e9f37e97ceb916f699115ae0
libraryupgrader [Thu, 2 Sep 2021 12:20:42 +0000 (2 12:20 +0000)]
Update git submodules
* Update extensions/CategoryTree from branch 'REL1_31'
to
44f23758f0e78e32ef8768270ef4fcef493e61c6
- build: Updating path-parse to 1.0.7
* https://npmjs.com/advisories/1773 (CVE-2021-23343)
Change-Id: I7c96f3125f600d95a1243a9b502ab4ded5dfa7c1
DannyS712 [Wed, 18 Aug 2021 05:50:52 +0000 (18 05:50 +0000)]
ExtensionProcessor: Remove `loaderScripts` from extension.json schemas
The `loaderScripts` feature of ResourceLoaderFileModule was removed
without replacement a while ago. Use of it would no longer work
correctly and should result in a test failure.
The `position` property was also removed, but made no functional change
to behaviour. Update its documentation to clarify that it is no longer
used (it is simply no longer needed).
Bug: T289108
Change-Id: If3dbbbe95d60803be8df3c9a4d5ee9e01c825ebb
(cherry picked from commit
df6c6129412c63ff43419fff610c1f042a34538b)
libraryupgrader [Thu, 12 Aug 2021 06:42:06 +0000 (12 06:42 +0000)]
build: Updating path-parse to 1.0.7
* https://npmjs.com/advisories/1773 (CVE-2021-23343)
Change-Id: Ieb11ead4839a79f06452a9fd355fa59c2e3a2459
Amir Sarabadani [Wed, 26 May 2021 21:35:42 +0000 (26 23:35 +0200)]
Make postgres IRC channel point to libera.chat
They have migrated to libera.chat:
https://www.postgresql.org/community/irc/
Bug: T283273
Change-Id: I5f14e9079cdac628fa81e6d237f9a5906bf46b6f
(cherry picked from commit
d37ad656c2626280f7f19a530e34784e9f8002bd)
libraryupgrader [Thu, 22 Jul 2021 02:53:42 +0000 (22 02:53 +0000)]
build: Updating postcss to 7.0.36
* https://npmjs.com/advisories/1693 (CVE-2021-23368)
Change-Id: I7e26b3c07758e38a208f92e2c8db9224b7abbf8c
Reedy [Tue, 22 Jun 2021 12:49:11 +0000 (22 13:49 +0100)]
Start 1.31.16
Change-Id: I3aea595212ba27ad5fb38b90dcccfbf2ea153b76
Reedy [Tue, 22 Jun 2021 12:48:29 +0000 (22 13:48 +0100)]
Prep 1.31.15
Change-Id: I1e3e8171eec30ed07105284685bc613d0f94f2db
Reedy [Thu, 15 Apr 2021 11:59:01 +0000 (15 12:59 +0100)]
SECURITY: Prevent blocked users from purging pages
CVE-2021-35197
Bug: T280226
Change-Id: Id783618e885998cddf45a4cfc7b2c19fd0c7e9f5
Reedy [Mon, 21 Jun 2021 14:54:23 +0000 (21 15:54 +0100)]
Update RELEASE-NOTES-1.31
Change-Id: I6acec895a4450a660a4335485fd9e01eca114d0c
MacFan4000 [Thu, 20 May 2021 20:57:48 +0000 (20 20:57 +0000)]
Freenode -> Libera per wikimedia moving from freenode to libera
Bug: T283247
Change-Id: Iebbb13ac53830a8d77b42bf2954cf80d76d78467
(cherry picked from commit
c351c4f06ed1446bfa9474ff3f9bc727dc959b3b)
libraryupgrader [Sun, 16 May 2021 23:11:21 +0000 (16 23:11 +0000)]
Update git submodules
* Update skins/Vector from branch 'REL1_31'
to
299cdce6528ab855486821eb7631bf31e23dd733
- build: Updating dependencies
composer:
* mediawiki/mediawiki-codesniffer: 19.1.0 → 19.4.0
npm:
* grunt: 1.3.0 → 1.4.0
* lodash: 4.17.20 → 4.17.21
* https://npmjs.com/advisories/1673 (CVE-2021-23337)
* hosted-git-info: 2.8.8 → 2.8.9
* https://npmjs.com/advisories/1677 (CVE-2021-23362)
Additional changes:
* Dropped .php5 and .inc files from .phpcs.xml (T200956).
Change-Id: Ie770a39eb7a8540e589bd4c8677f04e82a4693bd
libraryupgrader [Sun, 16 May 2021 22:59:58 +0000 (16 22:59 +0000)]
Update git submodules
* Update skins/Timeless from branch 'REL1_31'
to
3f200429ebfb9c9fcb1eda54fc222cacbefb2660
- build: Updating dependencies
composer:
* mediawiki/mediawiki-codesniffer: 19.1.0 → 19.4.0
The following sniffs now pass and were enabled:
* Squiz.Scope.MemberVarScope.Missing
npm:
* grunt: 1.3.0 → 1.4.0
* lodash: 4.17.20 → 4.17.21
* https://npmjs.com/advisories/1673 (CVE-2021-23337)
* hosted-git-info: 2.8.8 → 2.8.9
* https://npmjs.com/advisories/1677 (CVE-2021-23362)
Additional changes:
* Dropped .php5 and .inc files from .phpcs.xml (T200956).
Change-Id: I2e39f3b71c289d88a029fb1597d01d75d950341c
libraryupgrader [Sun, 16 May 2021 17:19:20 +0000 (16 17:19 +0000)]
Update git submodules
* Update extensions/WikiEditor from branch 'REL1_31'
to
eb26cb381674526ee52148633154d8e3812031d9
- build: Updating dependencies
composer:
* mediawiki/mediawiki-codesniffer: 19.1.0 → 19.4.0
npm:
* grunt: 1.3.0 → 1.4.0
* hosted-git-info: 2.8.8 → 2.8.9
* https://npmjs.com/advisories/1677 (CVE-2021-23362)
Change-Id: I2726121d80ccc0da324ede1c1db56baedfd69df8
libraryupgrader [Sun, 16 May 2021 08:46:48 +0000 (16 08:46 +0000)]
Update git submodules
* Update extensions/LocalisationUpdate from branch 'REL1_31'
to
2e60a93834513348a3902747e7c9d6e4eb6deab9
- build: Updating dependencies
composer:
* mediawiki/mediawiki-codesniffer: 19.1.0 → 19.4.0
npm:
* grunt: 1.3.0 → 1.4.0
* lodash: 4.17.20 → 4.17.21
* https://npmjs.com/advisories/1673 (CVE-2021-23337)
Change-Id: Ifcc09f8be9bdc26c96318c15e78c54ae29aa7e81
libraryupgrader [Fri, 14 May 2021 06:34:33 +0000 (14 06:34 +0000)]
Update git submodules
* Update extensions/TitleBlacklist from branch 'REL1_31'
to
dea6e695576351d075cc6a524da83f1f1c6ec741
- build: Updating dependencies
composer:
* mediawiki/mediawiki-codesniffer: 19.1.0 → 19.4.0
npm:
* grunt: 1.3.0 → 1.4.0
* lodash: 4.17.20 → 4.17.21
* https://npmjs.com/advisories/1673 (CVE-2021-23337)
Additional changes:
* Dropped .php5 and .inc files from .phpcs.xml (T200956).
Change-Id: I410d20fdb56bcec379d004355d033cce2710f0c9
libraryupgrader [Fri, 14 May 2021 04:39:01 +0000 (14 04:39 +0000)]
Update git submodules
* Update extensions/SyntaxHighlight_GeSHi from branch 'REL1_31'
to
c760872d59d087c8a48bc3bd57f598380867e879
- build: Updating dependencies
composer:
* mediawiki/mediawiki-codesniffer: 19.1.0 → 19.4.0
npm:
* grunt: 1.3.0 → 1.4.0
* lodash: 4.17.20 → 4.17.21
* https://npmjs.com/advisories/1673 (CVE-2021-23337)
* hosted-git-info: 2.8.8 → 2.8.9
* https://npmjs.com/advisories/1677 (CVE-2021-23362)
Additional changes:
* Dropped .php5 and .inc files from .phpcs.xml (T200956).
Change-Id: I853367b2cd049a479b5f6156192bddf879f621f8
libraryupgrader [Thu, 13 May 2021 21:48:29 +0000 (13 21:48 +0000)]
Update git submodules
* Update extensions/SpamBlacklist from branch 'REL1_31'
to
cd0ae6b575eec42b1308ea4510dcb3c88ff28b1b
- build: Updating dependencies
composer:
* mediawiki/mediawiki-codesniffer: 19.1.0 → 19.4.0
npm:
* grunt: 1.3.0 → 1.4.0
* lodash: 4.17.20 → 4.17.21
* https://npmjs.com/advisories/1673 (CVE-2021-23337)
Additional changes:
* Dropped .php5 and .inc files from .phpcs.xml (T200956).
Change-Id: I17166b7a13550bc9a6553bfb8120402455ac9b32
libraryupgrader [Thu, 13 May 2021 05:02:44 +0000 (13 05:02 +0000)]
Update git submodules
* Update extensions/ReplaceText from branch 'REL1_31'
to
e59e331890e62c8b0dca1c1873e53dce860999b2
- build: Updating dependencies
composer:
* mediawiki/mediawiki-codesniffer: 19.1.0 → 19.4.0
npm:
* grunt: 1.3.0 → 1.4.0
* lodash: 4.17.20 → 4.17.21
* https://npmjs.com/advisories/1673 (CVE-2021-23337)
* hosted-git-info: 2.8.8 → 2.8.9
* https://npmjs.com/advisories/1677 (CVE-2021-23362)
Change-Id: I1dfb6e726dcfa74f7d4eb0b826fa60f673ef195d
libraryupgrader [Thu, 13 May 2021 04:45:59 +0000 (13 04:45 +0000)]
Update git submodules
* Update extensions/Renameuser from branch 'REL1_31'
to
567baf4e8399f7eeec87260b484d1b771f378f28
- build: Updating dependencies
composer:
* mediawiki/mediawiki-codesniffer: 19.1.0 → 19.4.0
npm:
* grunt: 1.3.0 → 1.4.0
* lodash: 4.17.20 → 4.17.21
* https://npmjs.com/advisories/1673 (CVE-2021-23337)
Change-Id: I943d9095d7119a1ff2c9672391e62acbffc40df1
libraryupgrader [Wed, 12 May 2021 19:22:46 +0000 (12 19:22 +0000)]
Update git submodules
* Update extensions/Poem from branch 'REL1_31'
to
a8e452f07c147bf4a2755bf7ac83b5afef037a4b
- build: Updating dependencies
composer:
* mediawiki/mediawiki-codesniffer: 19.1.0 → 19.4.0
npm:
* grunt: 1.3.0 → 1.4.0
* lodash: 4.17.20 → 4.17.21
* https://npmjs.com/advisories/1673 (CVE-2021-23337)
Change-Id: I634d270048a9b327ab887403326791c850381bcd
libraryupgrader [Wed, 12 May 2021 14:05:54 +0000 (12 14:05 +0000)]
Update git submodules
* Update extensions/PdfHandler from branch 'REL1_31'
to
151d88774bf0bf206700c7fe3c1b578344e09160
- build: Updating dependencies
composer:
* mediawiki/mediawiki-codesniffer: 19.1.0 → 19.4.0
npm:
* grunt: 1.3.0 → 1.4.0
* lodash: 4.17.20 → 4.17.21
* https://npmjs.com/advisories/1673 (CVE-2021-23337)
Change-Id: I0d57c0e0bf5b11446423b7e2cfefaba0e4805e45
libraryupgrader [Wed, 12 May 2021 13:08:58 +0000 (12 13:08 +0000)]
Update git submodules
* Update extensions/ParserFunctions from branch 'REL1_31'
to
d78dbdc2fb10b762cb5d5576f7a1077dbb1ef91e
- build: Updating dependencies
composer:
* mediawiki/mediawiki-codesniffer: 19.1.0 → 19.4.0
npm:
* grunt: 1.3.0 → 1.4.0
* lodash: 4.17.20 → 4.17.21
* https://npmjs.com/advisories/1673 (CVE-2021-23337)
Change-Id: Ic174be0b526e7f1c36439e26d50f89f39654acc4
libraryupgrader [Wed, 12 May 2021 03:26:25 +0000 (12 03:26 +0000)]
Update git submodules
* Update extensions/OATHAuth from branch 'REL1_31'
to
f65e5f91d5b6dd791ff68970a395177e086209a6
- build: Updating dependencies
composer:
* mediawiki/mediawiki-codesniffer: 19.1.0 → 19.4.0
npm:
* grunt: 1.3.0 → 1.4.0
* lodash: 4.17.20 → 4.17.21
* https://npmjs.com/advisories/1673 (CVE-2021-23337)
* hosted-git-info: 2.8.8 → 2.8.9
* https://npmjs.com/advisories/1677 (CVE-2021-23362)
Change-Id: Ifab727bbfd1acafc432c96a2e70206f06ba6e49e
libraryupgrader [Wed, 12 May 2021 02:12:47 +0000 (12 02:12 +0000)]
Update git submodules
* Update extensions/Nuke from branch 'REL1_31'
to
e1050d7aebca3766dae70ac8011334c5b6073c74
- build: Updating dependencies
composer:
* mediawiki/mediawiki-codesniffer: 19.1.0 → 19.4.0
npm:
* grunt: 1.3.0 → 1.4.0
* lodash: 4.17.20 → 4.17.21
* https://npmjs.com/advisories/1673 (CVE-2021-23337)
Change-Id: I5395fbc6e07ed26afc11e93503a3577c3c76166d
libraryupgrader [Tue, 11 May 2021 20:27:45 +0000 (11 20:27 +0000)]
Update git submodules
* Update extensions/MultimediaViewer from branch 'REL1_31'
to
4b9eeba75ca239d1c18a4ee76858174129dcf34b
- build: Updating dependencies
composer:
* mediawiki/mediawiki-codesniffer: 19.1.0 → 19.4.0
npm:
* grunt: 1.3.0 → 1.4.0
* lodash: 4.17.20 → 4.17.21
* https://npmjs.com/advisories/1673 (CVE-2021-23337)
* hosted-git-info: 2.8.8 → 2.8.9
* https://npmjs.com/advisories/1677 (CVE-2021-23362)
Change-Id: I2d5d7ee8b5c4b5ef7c8894f6cb92281c171e2708
libraryupgrader [Tue, 11 May 2021 02:38:07 +0000 (11 02:38 +0000)]
Update git submodules
* Update extensions/Interwiki from branch 'REL1_31'
to
a97dff061a9e9ac07a43e9e524bd85a04867f2eb
- build: Updating dependencies
composer:
* mediawiki/mediawiki-codesniffer: 19.1.0 → 19.4.0
npm:
* grunt: 1.3.0 → 1.4.0
* lodash: 4.17.20 → 4.17.21
* https://npmjs.com/advisories/1673 (CVE-2021-23337)
* hosted-git-info: 2.8.8 → 2.8.9
* https://npmjs.com/advisories/1677 (CVE-2021-23362)
Change-Id: I5630e5d21c3e07a4b74342f0222cde019c75696d
libraryupgrader [Tue, 11 May 2021 02:04:26 +0000 (11 02:04 +0000)]
Update git submodules
* Update extensions/InputBox from branch 'REL1_31'
to
2ea4d2921c159018d3fc388650838f7267e8cb71
- build: Updating dependencies
composer:
* mediawiki/mediawiki-codesniffer: 19.1.0 → 19.4.0
npm:
* grunt: 1.3.0 → 1.4.0
* lodash: 4.17.20 → 4.17.21
* https://npmjs.com/advisories/1673 (CVE-2021-23337)
* hosted-git-info: 2.8.8 → 2.8.9
* https://npmjs.com/advisories/1677 (CVE-2021-23362)
Change-Id: I52e045bcd1e5f1ceb2aba41f6207bc2dcf9d0d90
libraryupgrader [Tue, 11 May 2021 01:33:17 +0000 (11 01:33 +0000)]
Update git submodules
* Update extensions/ImageMap from branch 'REL1_31'
to
ccffa6de389ce9af1e780ee0f6e74f94239d43f4
- build: Updating dependencies
composer:
* mediawiki/mediawiki-codesniffer: 19.1.0 → 19.4.0
npm:
* grunt: 1.3.0 → 1.4.0
* lodash: 4.17.20 → 4.17.21
* https://npmjs.com/advisories/1673 (CVE-2021-23337)
Additional changes:
* Dropped .php5 and .inc files from .phpcs.xml (T200956).
Change-Id: I2e8d3ae2a77271ddedbcd92a42411bc5b26e5809
libraryupgrader [Mon, 10 May 2021 07:30:54 +0000 (10 07:30 +0000)]
Update git submodules
* Update extensions/Gadgets from branch 'REL1_31'
to
24eef4aa6e79a30af1a96e8a59dce755f59c830c
- build: Updating dependencies
composer:
* mediawiki/mediawiki-codesniffer: 19.1.0 → 19.4.0
The following sniffs now pass and were enabled:
* Squiz.Scope.MemberVarScope.Missing
npm:
* grunt: 1.3.0 → 1.4.0
* lodash: 4.17.20 → 4.17.21
* https://npmjs.com/advisories/1673 (CVE-2021-23337)
Change-Id: Id2a7c0992b5897169f18cca9ffeeeba80c5dc002
libraryupgrader [Sun, 9 May 2021 08:58:04 +0000 (9 08:58 +0000)]
Update git submodules
* Update extensions/ConfirmEdit from branch 'REL1_31'
to
c8400013186fa3be9d1f9e5c93b3d0aab8ffc74e
- build: Updating dependencies
composer:
* mediawiki/mediawiki-codesniffer: 19.1.0 → 19.4.0
npm:
* grunt: 1.3.0 → 1.4.0
* lodash: 4.17.20 → 4.17.21
* https://npmjs.com/advisories/1673 (CVE-2021-23337)
* hosted-git-info: 2.8.8 → 2.8.9
* https://npmjs.com/advisories/1677 (CVE-2021-23362)
Additional changes:
* Dropped .php5 and .inc files from .phpcs.xml (T200956).
Change-Id: Ibed0051e7b52c4e9e064a249fac438a56cc1583d
libraryupgrader [Sun, 9 May 2021 05:31:46 +0000 (9 05:31 +0000)]
Update git submodules
* Update extensions/CodeEditor from branch 'REL1_31'
to
f042563e78a2311fabd9b5ceb754af1925bf8ad1
- build: Updating dependencies
composer:
* mediawiki/mediawiki-codesniffer: 19.1.0 → 19.4.0
npm:
* grunt: 1.3.0 → 1.4.0
* lodash: 4.17.20 → 4.17.21
* https://npmjs.com/advisories/1673 (CVE-2021-23337)
* hosted-git-info: 2.8.8 → 2.8.9
* https://npmjs.com/advisories/1677 (CVE-2021-23362)
Change-Id: Idf16ca5bb0a4d0d7ab8fe25d4f31ef5758316aa4
libraryupgrader [Sun, 9 May 2021 04:21:30 +0000 (9 04:21 +0000)]
Update git submodules
* Update extensions/CiteThisPage from branch 'REL1_31'
to
2344516ae5fc462e8d1ee585c9213075f9c8b310
- build: Updating dependencies
composer:
* mediawiki/mediawiki-codesniffer: 19.1.0 → 19.4.0
npm:
* grunt: 1.3.0 → 1.4.0
* lodash: 4.17.20 → 4.17.21
* https://npmjs.com/advisories/1673 (CVE-2021-23337)
* hosted-git-info: 2.8.8 → 2.8.9
* https://npmjs.com/advisories/1677 (CVE-2021-23362)
Change-Id: I41b449f5cc1844a0d3cd63bc30508747c89e47dc
libraryupgrader [Sun, 9 May 2021 04:01:42 +0000 (9 04:01 +0000)]
Update git submodules
* Update extensions/Cite from branch 'REL1_31'
to
ad2fabcc3099ede3844ea49b06d97468842f1d80
- build: Updating dependencies
composer:
* mediawiki/mediawiki-codesniffer: 19.1.0 → 19.4.0
npm:
* grunt: 1.3.0 → 1.4.0
* lodash: 4.17.20 → 4.17.21
* https://npmjs.com/advisories/1673 (CVE-2021-23337)
* hosted-git-info: 2.8.8 → 2.8.9
* https://npmjs.com/advisories/1677 (CVE-2021-23362)
Change-Id: I053f0dbdbd0f9354e72ffdcd8677a7c4eb1cee99
libraryupgrader [Sun, 9 May 2021 01:01:11 +0000 (9 01:01 +0000)]
Update git submodules
* Update extensions/CategoryTree from branch 'REL1_31'
to
dc1a8bd6fa4572474463fbb433e3772c0b62712f
- build: Updating dependencies
composer:
* mediawiki/mediawiki-codesniffer: 19.1.0 → 19.4.0
npm:
* grunt: 1.3.0 → 1.4.0
* lodash: 4.17.20 → 4.17.21
* https://npmjs.com/advisories/1673 (CVE-2021-23337)
* hosted-git-info: 2.8.8 → 2.8.9
* https://npmjs.com/advisories/1677 (CVE-2021-23362)
Change-Id: I11ff045362b219559d2ccf031e4cf85db1a03f46
libraryupgrader [Sat, 8 May 2021 00:01:12 +0000 (8 00:01 +0000)]
build: Updating npm dependencies
* grunt: 1.3.0 → 1.4.0
* lodash: 4.17.20 → 4.17.21
* https://npmjs.com/advisories/1673 (CVE-2021-23337)
* hosted-git-info: 2.8.8 → 2.8.9
* https://npmjs.com/advisories/1677 (CVE-2021-23362)
Additional changes:
* Dropped .php5 and .inc files from .phpcs.xml (T200956).
Change-Id: I27a397e38c0c9701d074ea81c5921dc9531d416e
libraryupgrader [Fri, 7 May 2021 21:22:08 +0000 (7 21:22 +0000)]
Update git submodules
* Update skins/MonoBook from branch 'REL1_31'
to
d74a5d0b5612379bd8f00fe18f91b805bbcec9c0
- build: Updating dependencies
composer:
* mediawiki/mediawiki-codesniffer: 19.1.0 → 19.4.0
npm:
* grunt: 1.3.0 → 1.4.0
* lodash: 4.17.20 → 4.17.21
* https://npmjs.com/advisories/1673 (CVE-2021-23337)
* hosted-git-info: 2.8.8 → 2.8.9
* https://npmjs.com/advisories/1677 (CVE-2021-23362)
Additional changes:
* Dropped .php5 and .inc files from .phpcs.xml (T200956).
Change-Id: I1491637904bd012634ec8a53baef60a884c092bf
libraryupgrader [Fri, 7 May 2021 06:44:55 +0000 (7 06:44 +0000)]
Update git submodules
* Update extensions/WikiEditor from branch 'REL1_31'
to
aa1fb2ad607de968000590e469f2f31fc08c11f4
- build: Updating lodash to 4.17.21
* https://npmjs.com/advisories/1673 (CVE-2021-23337)
Additional changes:
* Dropped .php5 and .inc files from .phpcs.xml (T200956).
Change-Id: I3bd09837fa21619167972177de5d2a098d55e6c9
James D. Forrester [Wed, 5 May 2021 15:06:15 +0000 (5 08:06 -0700)]
WebInstaller: Don't show the announce-l subscribe checkbox temporarily
… whilst we fix auto-subscription. Hopefully.
Bug: T281549
Change-Id: Ifa2e46ee668e51caf87eeca34bec123511595c50
Sébastien Beyou [Tue, 9 Mar 2021 15:41:42 +0000 (9 16:41 +0100)]
Implement JobQueueDB::getAllAbandonedJobs
Bug: T276945
Change-Id: I918356733409dd69ac438b0311ad7120d0b37d40
(cherry picked from commit
dec13460eabcdd41d568de5176528cbc558e5150)
Sébastien Beyou [Tue, 9 Mar 2021 15:50:51 +0000 (9 16:50 +0100)]
Define a batch size in maintenance/manageJobs.php
This is needed to avoid a modulo 0 given there
is a " % $this->getBatchSize() ".
Bug: T276945
Change-Id: Ib2fa6ddb7fb8f2110434fe174774cb12782bbf1f
(cherry picked from commit
781e1b7c2d68c9c1069472bdd8261050c4228984)
Taavi Väänänen [Sun, 11 Apr 2021 15:35:20 +0000 (11 18:35 +0300)]
rdbms: Add DB_PRIMARY to replace DB_MASTER
Bug: T278026
Change-Id: I878d6cacf560a69764cc694b912b39d70f62a292
Reedy [Tue, 13 Apr 2021 03:40:56 +0000 (13 03:40 +0000)]
Fixup issues in SpecialChangeContentModel.php
Bug: T270988
Follows-Up: I2e3b79f36fa7c0a3ec4130de0ae9c68104cb3fdd
Change-Id: I105e6e11705a9642eb75b8a9703a5bc443f7e66b
Reedy [Thu, 8 Apr 2021 20:33:13 +0000 (8 21:33 +0100)]
Start 1.31.15
Change-Id: Ic0f6194fc2b7db68cec8cdf1858df56a5488bbd9
Reedy [Thu, 8 Apr 2021 20:32:15 +0000 (8 21:32 +0100)]
Prep 1.31.14
Change-Id: Ib47a68a818421b44a5ce232c5846480f6d2e2678
Reedy [Thu, 8 Apr 2021 20:23:16 +0000 (8 21:23 +0100)]
Make Title implement IDBAccessObject
Change-Id: I0968d46e7d51b79eb58303fd6e774f69100d098e
Reedy [Thu, 8 Apr 2021 15:20:30 +0000 (8 16:20 +0100)]
Start 1.31.14
Change-Id: I58cf1c4bfb44d5f95a83dd8d6d720418efbb6dee
Reedy [Thu, 8 Apr 2021 15:19:50 +0000 (8 16:19 +0100)]
Prep 1.31.13
Change-Id: I227f1e3557a61b25b7b688566e2bb70da544f773
DannyS712 [Fri, 1 Jan 2021 10:40:41 +0000 (1 12:40 +0200)]
SECURITY: ContentModelChange: Check that user can create pages
Co-authored-by: Taavi Väänänen <hi@tassu.me>
Change-Id: I2e3b79f36fa7c0a3ec4130de0ae9c68104cb3fdd
Tim Starling [Thu, 28 Jan 2021 05:50:00 +0000 (28 05:50 +0000)]
SECURITY: Non-admin deleted enwiki page in fast double move
Bug: T272386
Change-Id: I8bf163e9dd056bccdbe9ad39537c46eb115da01a
Reedy [Mon, 4 Jan 2021 18:06:09 +0000 (4 18:06 +0000)]
SECURITY: Allow user to only apply protection they have right to do so via action=protect
'apierror-protect-invalidlevel' potentially wants updating at a later point as the
message isn't necessarily clear what the error is; the protection may be valid
but the users right to do so is not.
Bug: T270713
Change-Id: I72fe67264baa4123599ec424a7d780192ca54bcc
Kunal Mehta [Thu, 8 Apr 2021 19:48:31 +0000 (8 11:48 -0800)]
Update git submodules
* Update extensions/SyntaxHighlight_GeSHi from branch 'REL1_31'
to
f0dca73bebddd4640a8582425385cd5aac4cc83e
- SECURITY: Disable various lexers because of DoS attacks
It is possible to trigger an infinite loop in "sml", causing a
DoS (CVE-2021-20270).
In "adl", "cadl", "odin", "ceylon", "evoque", "factor", "logos", "matlab"
and "vcl" it is possible to trigger a regex DoS (CVE-2021-27291).
SyntaxHighlight will fall back to displaying the code as <pre> formatted
text instead.
Bug: T276843
Change-Id: Iecdcc98d9d2eb838c7192171bca34d79f031213c
Kunal Mehta [Thu, 8 Apr 2021 16:34:19 +0000 (8 09:34 -0700)]
Add Serhio Magpie to CREDITS
Creator of the new MediaWiki logo, but won't be picked up by the
normal updateCredits.php script.
Change-Id: I44ddd1162bbd4ac11903bf9340040adbe67c7011
(cherry picked from commit
a0249f96425678842173384e37ba7bb6245b4d2a)
Kunal Mehta [Thu, 8 Apr 2021 16:36:04 +0000 (8 09:36 -0700)]
Tweak RELEASE-NOTES a bit
Change-Id: Ic5a95773418a38fffa06d1ec9be1a3fa2fe5e2df
Reedy [Thu, 8 Apr 2021 16:29:12 +0000 (8 17:29 +0100)]
Installer: Fix foundation.wikimedia.org link in config-pingback-help
Change-Id: Iaf0269e9039ad1e00c47b08fc549c926a8f8f912
Kunal Mehta [Sat, 8 Aug 2020 06:10:26 +0000 (7 23:10 -0700)]
Remove package-lock.json from the tarball
Same rationale for excluding package.json.
Change-Id: Ia56c02ac38db29de02c7ea983adc81f9b632a419
(cherry picked from commit
e735fc047989ebb82a5a4ce6ad89c017968ffa87)
DannyS712 [Sun, 4 Apr 2021 22:41:56 +0000 (4 22:41 +0000)]
Fix extra space in RELEASE-NOTES-1.31
Follow-up: I39a98fe08c1cb9020cf0f4d2dfbf1415dacd083d
Change-Id: I057b510c261089b21195ad574c06ffc84cfbc3ee
Reedy [Sun, 4 Apr 2021 22:30:07 +0000 (4 23:30 +0100)]
Add 5 more RELEASE-NOTES-1.31 lines
Change-Id: I39a98fe08c1cb9020cf0f4d2dfbf1415dacd083d
grunny [Fri, 19 Mar 2021 18:46:44 +0000 (20 04:46 +1000)]
Escape mediastatistics-header-* messages on Special:NewFiles
The mediastatistics-header-* messages used on Special:NewFiles currently
allow raw HTML as raw options labels are output as raw HTML in forms. We
could change these to use options-messages with the message keys, but it
looks like this was done so the list could be alphabetised based on the
labels and this wouldn't be in alphabetical order if we sorted on the
message keys.
Bug: T278014
Change-Id: I5f59ccf4c167756255952cfbf31a8d7891463e92
(cherry picked from commit
6fa142a4fafc5ff942011ede63030095901fbe45)
Paladox [Sat, 3 Apr 2021 18:19:10 +0000 (3 18:19 +0000)]
BackupDumper: Add -o as shortcode for --output
Change-Id: I3ff00a19b95a9089e7f710fbcc1e2823c724a324
Reedy [Sat, 3 Apr 2021 10:49:38 +0000 (3 11:49 +0100)]
DefaultSettings: Fix documentation of user-global in $wgRateLimits
Change-Id: I0aa567c69bcf2cf1ca11dfbf4af43734ef2f9e61
Follows-Up: Id680b96be2ea81d29447c4c1abafc8f98a339626
Reedy [Sat, 13 Mar 2021 16:21:39 +0000 (13 16:21 +0000)]
Expand config-pingback-help, link to privacy policy in config-pingback
Bug: T271735
Change-Id: I7a1f59d7274efd8e4c388e0148c0e0632039e8af
Amir Sarabadani [Thu, 4 Mar 2021 00:55:16 +0000 (4 01:55 +0100)]
Use the new mediawiki logos
These logos are approved as part of a community decision making in https://w.wiki/33kx
(Long URL [1]). The rights have been transferred to WMF now.
License: CC-BY-SA 4.0
Author: https://commons.wikimedia.org/wiki/User:Serhio_Magpie
Source: https://commons.wikimedia.org/wiki/Category:MediaWiki_logo_(2020)
[1]: https://www.mediawiki.org/wiki/Project:Proposal_for_changing_logo_of_MediaWiki,_2020
Bug: T268230
Change-Id: Ia588ca79a721f4796e7fe688dd7e538a009f706d
libraryupgrader [Tue, 30 Mar 2021 02:46:25 +0000 (30 02:46 +0000)]
Update git submodules
* Update extensions/Interwiki from branch 'REL1_31'
to
718e96a3db73fd6939c1a1186c01132efe807e79
- build: Updating y18n to 3.2.2
* https://npmjs.com/advisories/1654 (CVE-2020-7774)
Change-Id: If914c006122b2f3314ca9de3858fbf5983d12eb8
Reedy [Mon, 29 Mar 2021 21:49:15 +0000 (29 22:49 +0100)]
RELEASE-NOTES-1.31: Add two more lines
Change-Id: Iacd96b6d0722fc1a741b6da7c09d5c461e531b63
Reedy [Mon, 15 Mar 2021 20:46:03 +0000 (15 20:46 +0000)]
HTMLFormField: Use non namespaced class name rather than static::class
Bug: T277414
Change-Id: I9ba76522932147df098abef48b2a076c2aa81aac
(cherry picked from commit
5bb8d031c085921002c4993bd2d00104d56c868f)
grunny [Sun, 21 Mar 2021 04:35:58 +0000 (21 14:35 +1000)]
Escape rcfilters-filter-* messages on ChangesList pages
The rcfilters-filter-*-label messages are output as raw HTML on
ChangesList pages like RecentChanges and Watchlist. If there is
a wrapping label message, the label is properly escaped, but
when there is not, it is appended as raw HTML. This escapes the
label at output by switching to .text().
Bug: T278058
Change-Id: I7106aedced51343439fc54d5bb91620d8a0362f9
(cherry picked from commit
a1dfb13a1972ff9c2afbaf0d3b082d628a6cd9ee)
Reedy [Mon, 22 Mar 2021 17:25:36 +0000 (22 17:25 +0000)]
Update RELEASE-NOTES-1.31
Change-Id: I34c54cc3f56c15e4b6b5b731851b3f92de88f70a
Reedy [Sat, 20 Mar 2021 21:20:31 +0000 (20 21:20 +0000)]
pageExist.php: Output trailing newlines
Change-Id: Ib4877bd084277fa574b6a9002d4f6b494b421326