Zum Inhalt springen.
Sympa Menü

it-securitynotifies - [IT-SecNots] [MediaWiki-announce] Announcing MediaWiki 1.45.0

it-securitynotifies AT lists.piratenpartei.de

Betreff: Sicherheitsankündigungen

Listenarchiv

[IT-SecNots] [MediaWiki-announce] Announcing MediaWiki 1.45.0


Chronologisch Thread  
  • From: Mateus Santos <msantos AT wikimedia.org>
  • To: Wikimedia developers <wikitech-l AT lists.wikimedia.org>, mediawiki-announce AT lists.wikimedia.org, mediawiki-l AT lists.wikimedia.org
  • Subject: [IT-SecNots] [MediaWiki-announce] Announcing MediaWiki 1.45.0
  • Date: Mon, 8 Dec 2025 18:01:47 +0100
  • Archived-at: <https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce AT lists.wikimedia.org/message/TVI3VMUX3LEK554OKQSOZOET7HCVRZFZ/>
  • Authentication-results: lists.piratenpartei.de; dkim=pass header.d=lists.wikimedia.org header.s=wikimedia header.b=goDyD455; dmarc=pass (policy=none) header.from=wikimedia.org; spf=pass (lists.piratenpartei.de: domain of mediawiki-announce-bounces AT lists.wikimedia.org designates 2620:0:861:3:208:80:154:81 as permitted sender) smtp.mailfrom=mediawiki-announce-bounces AT lists.wikimedia.org
  • List-archive: <https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce AT lists.wikimedia.org/>
  • List-id: MediaWiki update and security announcements list <mediawiki-announce.lists.wikimedia.org>

I am happy to announce the availability of the general release of MediaWiki
1.45!

Tarballs have already been uploaded, and the git tag has been pushed.

Thanks to everyone who helped out with this release, especially thanks to
those who tested out the release candidate and provided feedback, as well
as the developers who worked on fixes for the 1.45 final release. To see
what's changed in 1.45, see the release notes file.[0] If you encounter any
issues, please file a task.[1] You can see open tasks for the branch on
Phabricator.[2]

MediaWiki 1.45 is due to be supported until the end of December 2026.

It is noted that MediaWiki 1.39 is due to become end-of-life at the end of
December 31st 2025. A formal announcement will be made soon, and will
co-incide with the next security and maintenance release.

=== Changes since MediaWiki 1.45.0-rc.0 ===
* (T411580) REST: add explicit cast to sitemapSize calcuation to avoid
warning
* UserGroupManager: Remove unused $recursionMap
* (T351953) findBadBlobs: Fix the --scan-to option
* (T411199) initEditCount: Fix count for users with no edits
* (T406374) htmlform: Load ooui before infusing field cloner buttons
* (T391882) HTMLFormFieldCloner: Fix multiple bugs related to conditional
states
* (T296188) MessagesZh*.php: Restore missing special page aliases
* (T411214) ApiResult: Fix "ord(): Providing a string that is not one byte
long is deprecated."
* (T358666) Drop PHP 8.1 support
* (T410914) Language: Fix PHP 8.5 warnings for NAN/INF string coercion in
parseFormattedNumber
* (T410914) Language: Fix PHP 8.5 warnings for NAN/INF string coercion in
formatNumInternal
* (T411018) IndexPager: Set '' as default value for 'order'
* (T409718) Remove SpecialUserRightsChangeableGroups hook
* (T411075) Api: Initialise reference variable
* Api: Avoid re-stashing on publish with warnings via action=upload
* RELEASE-NOTES-1.45: Add entry for jqueryMsg self-closing tag support
* (T295568) mediawiki.jqueryMsg: Support self-closing HTML tags
* (T411016) Upgrading wikimedia/cldr-plural-rule-parser (v2.0.0 => v3.0.0)
* (T410963) Upgrade wikimedia/xmp-reader from 0.10.1 to 0.10.2
* tests: Fix @covers of MediaWiki\Languages to MediaWiki\Language
* (T410920) Language: Prevent passing '' to ord() in lcfirst()
* (T410912) Language: Fix "ord(): Providing a string that is not one byte
long is deprecated."
* (T410920) Language: Prevent passing '' to ord() in ucfirst()
* (T410912) MessageCache: Fix "ord(): Providing a string that is not one
byte long is deprecated."
* (T405450) session: Use fresh MW services container in CLI mode (take 2)
* (T405450) session: Use fresh MW services container in CLI mode
* (T410934) Remove noop xml_parser_free() calls
* (T401995) SECURITY: Disable xslt option by default
* (T410928) resourceloader: Fix null offset in ClientHtml module sorting
* (T410913) SpecialVersion: Fix "Cannot use bool as array" warning

Release notes:
[0]
https://gerrit.wikimedia.org/r/plugins/gitiles/mediawiki/core/+/refs/heads/REL1_45/RELEASE-NOTES-1.45

Bug report form:
[1]
https://phabricator.wikimedia.org/maniphest/task/edit/form/1/?tags=MW-1.45-Release

Open Bugs:
[2] https://phabricator.wikimedia.org/tag/mw-1.45-release/

**********************************************************************
Download:
https://releases.wikimedia.org/mediawiki/1.45/mediawiki-1.45.0.tar.gz
https://releases.wikimedia.org/mediawiki/1.45/mediawiki-1.45.0.zip

Download without bundled extensions:
https://releases.wikimedia.org/mediawiki/1.45/mediawiki-core-1.45.0.tar.gz
https://releases.wikimedia.org/mediawiki/1.45/mediawiki-core-1.45.0.zip

Patch to previous version (1.45.0-rc.0):
https://releases.wikimedia.org/mediawiki/1.45/mediawiki-1.45.0.patch.gz
https://releases.wikimedia.org/mediawiki/1.45/mediawiki-1.45.0.patch.zip

GPG signatures for the above:
https://releases.wikimedia.org/mediawiki/1.45/mediawiki-core-1.45.0.tar.gz.sig
https://releases.wikimedia.org/mediawiki/1.45/mediawiki-core-1.45.0.zip.sig
https://releases.wikimedia.org/mediawiki/1.45/mediawiki-1.45.0.tar.gz.sig
https://releases.wikimedia.org/mediawiki/1.45/mediawiki-1.45.0.zip.sig
https://releases.wikimedia.org/mediawiki/1.45/mediawiki-1.45.0.patch.gz.sig
https://releases.wikimedia.org/mediawiki/1.45/mediawiki-1.45.0.patch.zip.sig

Public keys:
https://www.mediawiki.org/keys/keys.html
_______________________________________________
MediaWiki-announce mailing list -- mediawiki-announce AT lists.wikimedia.org
To unsubscribe send an email to mediawiki-announce-leave AT lists.wikimedia.org


  • [IT-SecNots] [MediaWiki-announce] Announcing MediaWiki 1.45.0, Mateus Santos, 08.12.2025

Archiv bereitgestellt durch MHonArc 2.6.19+.

Seitenanfang