MediaWiki 1.37.3
1 July 2022
MediaWiki version 1.37.3 is now available (security release).
Upgrading to MediaWiki 1.37.3
MediaWiki 1.37.3 can be upgraded to (or installed) using any of Installatron's products. Use Installatron's optional Automatic Update feature to automatically apply MediaWiki updates as new versions are released, or use Installatron's Clone feature to duplicate an existing MediaWiki install to test the 1.37.3 upgrade prior to applying it live. Get started managing your MediaWiki installations with Installatron
What's New in MediaWiki 1.37.3
Security
- (T308471) SECURITY: Escape welcomeuser message passed to showSuccessPage().
- (T308473) SECURITY: Escape contributions-title msg for use within page title.
- (T311384, CVE-2022-27776) Updated guzzlehttp/guzzle from 7.2.0 to 7.4.5.
Bug fixes and Changes
- Localisation updates.
- (T289879) Type hints for ArrayAccess and JsonSerializable.
- (T304783) TemplateParser: avoid warnings when called by NoLocalSettings.
- Rebuilt vendor with composer 2.3.3.
- Fix old_name in UserLogoutComplete hook.
- (T289879) Address some deprecations for PHP 8.1.
- (T193565) UserGroupManager: Fix dbDomain in addUserToGroup() deferred update.
- (T309114) LocalFile::prerenderThumbnails: Limit the number of thumbnail jobs triggered.
- (T307982) Updated wikimedia/parsoid from v0.14.0 to v0.14.1.
- (T311272) Call parent constructor of AddSite maintenance script first.
- MediaWiki: Don't eagerly initialize action name.
- Updated wikimedia/shellbox from v2.0.0 to v2.1.1.
- (T289926) Avoid passing null to trim() in SkinTemplate.
- (T311473) rollbackEdits: Pass user identity to RollbackPage.
- (T307282) Avoid passing null to strcasecmp(), for PHP 8.1.
- (T311551) ShellboxClientFactory::getUrl(): Check if $this->key is null.
- (T311552) ChangesListSpecialPage: Don't pass null to FormatJson::decode().
- (T311569) FileBackend::isStoragePath() Handle being passed null.
- (T311544) Pass int to ApiUsageException::newWithMessage()'s $httpCode param.
- (T311678) SpecialEditWatchlist: Prevent passing null to strtolower().
- (T281741) ChangeTags: Fix adding CSS classes for hidden tags.
- (T296642) changetags: Fix management of a '0' tag.
- (T311554) ChangeTags: Return early in formatSummaryRow() if $tags === null.
- (T303033) Handle null in ChangeTags::modifyDisplayQuery.
- Updated wikimedia/common-passwords from 0.3.0 to 0.4.0.