MediaWiki 1.30.1
1 October 2018
MediaWiki version 1.30.1 is now available (security release).
Upgrading to MediaWiki 1.30.1
MediaWiki 1.30.1 can be upgraded to (or installed) using any of Installatron's products. Use Installatron's optional Automatic Update feature to automatically apply MediaWiki updates as new versions are released, or use Installatron's Clone feature to duplicate an existing MediaWiki install to test the 1.30.1 upgrade prior to applying it live. Get started managing your MediaWiki installations with Installatron
What's New in MediaWiki 1.30.1
- (T169545, CVE-2018-0503) SECURITY: $wgRateLimits entry for 'user' overrides 'newbie'.
- (T194605, CVE-2018-0505) SECURITY: BotPasswords can bypass CentralAuth's account lock.
- (T87572) Make FormatMetadata::flattenArrayReal() work for an associative array.
- Updated composer/spdx-licenses from 1.1.4 to 1.3.0 (development dependency).
- (T189567) the CLI installer (maintenance/install.php) learned to detect and include extensions. Pass --with-extensions to enable that feature.
- (T190503) Let built-in web server (maintenance/dev) handle .php requests.
- (T167507) selenium: Run Chrome headlessly.
- selenium: Pass -no-sandbox to Chrome under Docker.
- (T179190) selenium: Move logic for running tests from package.json to selenium.sh
- (T192584) Stop incorrectly passing USE INDEX to RecentChange::newFromConds().
- Add default edit rate limit of 90 edits/minute for all users.
- (T186565) Fix PHP Notice from `ob_end_flush()` in `FileRepo::streamFile()`.
- oojs/oojs-ui updated to remove an unnecessary dependancy.
- (T196125) php-memcached 3.0 (provided with PHP 7.0) is now supported.
- (T118683) Fix exception from &$user deref on HHVM in the TitleMoveComplete hook.
- (T196672) The mtime of extension.json files is now able to be zero
- (T180403) Validate $length in padleft/padright parser functions.
- (T143790) Make $wgEmailConfirmToEdit only affect edit actions.
- (T193995) Fix undefined patchPath() method call in parser tests.
- Special:BotPasswords now requires reauthentication.
- (T191608, T187638) Add 'logid' parameter to Special:Log.
- (T193829) Indicate when a Bot Password needs reset.
- (T151415) Log email changes.
- (T200861) Fix total breakage of SQLite web upgrade.
- (T202550) Unbreak SpecialListusersHeaderForm and SpecialListusersHeader hooks.
- (T190539) Explicitly require Postgres 9.1.
- (T118420) Unbreak Oracle installer.