Release notes/1.37

= MediaWiki 1.37 =

MediaWiki 1.37.0-rc.2
THIS IS NOT A RELEASE YET

MediaWiki 1.37 is a pre-release testing branch, and is not recommended for use in production.

Changes since MediaWiki 1.37.0-rc.1
from vendor.
 * (T295173) Re-add wikimedia/normalized-exception to vendor.
 * Remove wikimedia/testing-access-wrapper, psr/simple-cache, psr/http-factory
 * (T295191) ApiQuerySiteinfo: Fix "rightsinfo"/"url" when $wgRightsPage is set.
 * (T212428) Allow populateContentTables to continue when there are bad blobs.

Changes since MediaWiki 1.37.0-rc.0

 * (T294043) checkStorage: pass no parameters to WikiRevision::getContent.
 * (T292763) Do not cache private wiki completion results.
 * (T293783) ApiQueryImageInfo: don't show empty comments as deleted.
 * (T294316) Revert "Mark ApiClientLogin/ApiLogin as requiring write mode".
 * (T294796) JobQueueRedis: Replace deprecated zSize with zCard.
 * Remove duplicate settings from DefaultSettings.
 * (T278037) NoLocalSettings: Pass an EmptyBagOStuff to TemplateParser.

Upgrading notes for 1.37
Don't forget to always back up your database before upgrading!

See the file UPGRADE for more detailed per-version upgrade instructions from the oldest supported upgrading version, MediaWiki 1.27.

Some specific notes for MediaWiki 1.37 upgrades are below: may cause older bots and scripts to fail. Most queries are trivially updateable to using new methods. See the Action API changes section below for more information.
 * (T280806) Deprecated methods of fetching API tokens have been removed. This

For notes on 1.36.x and older releases, see HISTORY.

Configuration changes for system administrators in 1.37

 * (T242768) The PasswordCannotMatchUsername password policy has been removed, please use PasswordCannotBeSubstringInUsername instead. If you have not customised your password policies, there will be nothing to do here.

New configuration

 * $wgBrowserFormatDetection - This setting allows the enabling or disabling of automatic detection of possible phone numbers in a webpage in iOS Safari.
 * $wgParserEnableLegacyMediaDOM - This setting defaults to true, and enables the legacy media HTML structure in the output from the Parser. The alternative modern HTML structure for media is described at https://www.mediawiki.org/wiki/Parsing/Media_structure. In a future release of MediaWiki this option will default to false, so it's a good idea to test this setting on your wiki early and report any issues.

Changed configuration

 * $wgContentHandlerTextFallback - This migration setting, which defines how to react if a plain text version of a non-text Content object is requested using ContentHandler::getContentText, is deprecated.
 * $wgActions – This setting lets sysadmins override which actions can be used. It has been re-worked to support injecting dependencies into Action sub-classes as part of wider work on dependency injection. Previously, $wgActions was an array where the keys were the names of actions, and the values had the following impacts (for a given key 'Foo'):
 * `true`: use the class 'FooAction' unless for a specific page WikiPage::getActionOverrides wants to override that action
 * a string: use the class with that name, and do not allow over-riding on a per-page basis
 * `false`: the action is disabled
 * a callable: use the Action instance returned by invoking that callback, and do not allow overriding on a per-page basis
 * an object: use that specific Action instance, and do not allow overriding on a per-page basis.

As part of T253078, values can now be arrays that are not callables, which are treated as ObjectFactory specs, allowing for services to be injected. Additionally, the distinction between values that allow per-page overrides and those that do not was removed - all actions can now be overridden on a per-page basis using WikiPage::getActionOverrides.
 * $wgShellboxUrl – This setting, new in 1.36 to configure the novel Shellbox encapsulation system, is now deprecated; use $wgShellboxUrls as a mapping of service => URL instead.
 * $wgIncludejQueryMigrate – This setting, introduced in 1.29 to on whether to provide a migration layer for jQuery, has now switched its default value from true to false. This may break gadgets that depended on methods that were removed in jQuery 3 in 2017. See T280944 for more information.
 * A number of settings have been renamed. The former configuration variable names are deprecated, but will be used as the fall back if they are still set, and remain temporarily available for extensions which might try to read them:
 * $wgFileBlacklist is now $wgProhibitedFileExtensions
 * $wgMimeTypeBlacklist is now $wgMimeTypeExclusions
 * $wgEnableUserEmailBlacklist is now $wgEnableUserEmailMuteList
 * $wgShortPagesNamespaceBlacklist is now $wgShortPagesNamespaceExclusions
 * $wgMimeTypeExclusions - As well as being renamed, this configuration array now also prohibits the RFC 4329 form of JavaScript, 'application/javascript', as well as previous MIME types.
 * $wgFragmentMode - This setting, which determines the encoding of section IDs, has now switched its default value from legacy-first to html5-first: both the HTML5 anchor and the legacy percent-encoding-style anchor will still be generated for section titles, but references to them will use the HTML5 version, resulting in human-readable fragments.

Removed configuration

 * $wgLegacyJavaScriptGlobals, deprecated in 1.36.
 * (T274695) $wgAjaxEditStash, deprecated in 1.36.
 * $wgShowDBErrorBacktrace, deprecated and non-functional since 1.32.
 * $wgShowSQLErrors, deprecated and non-functional since 1.32.
 * $wgLangObjCacheSize, without deprecation; the LanguageFactory service now always retains at most 10 objects in its LRU-cache.
 * $wgDjvuToXML, without deprecation; the tool it enables is obsolete and abandoned upstream. Use $wgDjvuDump to use that tool instead.

New user-facing features in 1.37

 * (T161934) MediaWiki now supports JPEG2000 files, to a limited extent.

New external libraries

 * Added symfony/polyfill-php80 1.23.1.
 * Added whatwg-fetch 3.6.2.
 * Added wikimedia/normalized-exception 1.0.1.

Changed external libraries

 * Updated OOjs from v5.0.0 to v6.0.0
 * Updated OOjs-Router from v0.2.0 to v0.3.0
 * Updated OOUI from v0.41.3 to v0.42.0
 * Updated WVUI from v0.1.0 to v0.3.0
 * Updated cssjanus/cssjanus from v1.3.0 to v2.1.0.
 * Updated psr/container from v1.0.0 to v1.1.1.
 * Updated wikimedia/minify from v2.2.2 to v2.2.4.
 * Updated wikimedia/object-factory from v3.0.0 to v3.0.2.
 * Updated wikimedia/parsoid from v0.13.1 to v0.14.0-a19.
 * Updated wikimedia/relpath from v2.1.1 to v3.0.0.
 * Updated wikimedia/remex-html from v2.3.1 to v2.3.2.
 * Updated wikimedia/shellbox from v1.0.4 to v2.0.0.
 * Updated wikimedia/wait-condition-loop from v2.0.1 to v2.0.2.
 * Updated zordius/lightncandy from v1.2.5 to v1.2.6.

Changed development-only external libraries

 * Updated qunit from 2.10.0 to 2.16.0.

Removed external libraries

 * The pimple/pimple development-only library has been removed.

Action API changes in 1.37

 * (T280806) The API methods for fetching tokens which were deprecated in MediaWiki 1.24 have been removed. action=query&meta=tokens&type= should be used instead. Please note some token types no longer exist, and you should just use type=csrf for those instead.
 * action=query&prop=info&intoken -> action=query&meta=tokens&type=csrf
 * action=tokens&type= -> action=query&meta=tokens&type=
 * action=query&list=recentchanges&rctoken -> action=query&meta=tokens&type=csrf
 * action=query&prop=revisions&rvtoken=rollback -> action=query&meta=tokens&type=rollback
 * action=query&meta=userinfo&uiprop=preferencestoken -> action=query&meta=tokens&type=csrf
 * action=query&list=users&ustoken=userrights -> action=query&meta=tokens&type=userrights

Languages updated in 1.37
MediaWiki supports over 350 languages. Many localisations are updated regularly. Below only new and removed languages are listed, as well as changes to languages because of Phabricator reports.


 * (T280435) LRM and RLM characters were removed from names of languages with parentheses in Names.php
 * (T283422) Add namespace name translations and change the autonym of the Kinyarwanda language to "Ikinyarwanda".
 * (T283423) Change the autonym of the Lombard language from "lumbaart" to "lombard".
 * (T279619) Added language support for Dagbani (dag).
 * (T282085) Added language support for Malay in Arabic (Jawi) script (ms-arab).
 * (T283053) Added language support for Ojibwe (ojb).
 * (T283480) Added language support for Wallisian (wls, Fakaʻuvea).
 * (T284002) Added language support for Paiwan (pwn).
 * (T284044) Added language support for Carpathian Romani (rmc).
 * (T286460) Added language support for Gun (guw, Gungbe).
 * (T287345) Added language support for Baoulé (bci).
 * (T290126) Added language support for Kildin Sami (sjd).
 * (T290408) Added language support for Pite Sami (sje).
 * (T25216) Started the renaming of the language code for Norman from nrm to nrf.

Breaking changes in 1.37
- ::newMutableRevisionFromArray - ::loadRevisionFromPageId - ::loadRevisionFromTitle - ::loadRevisionFromTimestamp - ::listRevisionSizes necessarily a User object. There is no known usages in MediaWiki ecosystem that were not satisfied with UserIdentity. supported. Use MergeHistoryFactory instead. MergeHistory::checkPermissions, deprecated since 1.36, was removed. MWDebug::getHTMLDebugLog directly. Previously, the global variable was set at the start of each test, and in ApiTestCase::doApiRequest if a performer was specified $wgUser was updated to match, and if no performer was specified $wgUser was used instead. Now, $wgUser is not updated, and if no performer is specified the reusable TestUser object for the sysop is relied on. Extensions or skins that rely on the global $wgUser variable (which has been deprecated since 1.35) should instead retrieve the acting user from the relevant context source. OutputPage::getRevisionId instead. OutputPage::isRevisionCurrent instead. - The protected ::checkAudience method now returns an Authority instead of a   User instance. - A number of its `@stable to override` methods now accept an Authority instead of a User instance as the $audience parameter. - A number of methods now accept a UserIdentity instead of their User parameter. - The ::localUserFromCentralId method now returns UserIdentity and not necessarily a User object. All extensions that extend this class or use this method were updated to be ready to the new behavior. was removed. ContentHandler::getDeletionUpdates instead. ContentHandler::getSecondaryDataUpdates instead. parameters are no longer supported. made private. use skin registration instead. features were deprecated. Skins should instead select from the features listed on mw:Manual:ResourceLoaderSkinModule. languages where nouns must be capitalized. This class is no longer added to the body tag and must be provided by skins. warnings since 1.36, is no longer supported. You can instead use the explicit formatting methods directly, such as Message::text and Message::escaped. removed. The logic responsible for building the form is being moved to DeleteAction, while the actual deletion logic will be moved to a separate service. use ContentTransformer::preloadTransform. Extensions defining a content model should override ContentHandler::preloadTransform. use ContentTransformer::preSaveTransform instead. Extensions defining a content model should override ContentHandler::preSaveTransform. deprecation warnings since 1.36, now throws an exception. Additionally, WikiPage now implements ProperPageIdentity, rather than just PageIdentity. OutputPage::getBottomScripts. 1.36, was removed. Use CSS property `box-shadow` unprefixed for all basic supported browsers instead. the Flexbox specification; support for the 2012 and modern standard versions remains unchanged. StorageAwareness::ATTR_LOCALITY, and StorageAwareness::QOS_LOCALITY_* constants were removed.
 * The Revision class, emitting deprecation warnings since 1.35, was removed entirely. As part of this, the following hooks that included a Revision object were removed:
 * ArticleRevisionUndeleted - use RevisionUndeleted
 * ArticleRollbackComplete - use RollbackComplete
 * DiffRevisionTools - use DiffTools
 * DiffViewHeader - use DifferenceEngineViewHeader
 * HistoryRevisionTools - use HistoryTools
 * NewRevisionFromEditComplete - use RevisionFromEditComplete
 * PageContentInsertComplete - use PageSaveComplete
 * PageContentSaveComplete - use PageSaveComplete
 * ParserFetchTemplate - use BeforeParserFetchTemplateRevisionRecord
 * RevisionInsertComplete - use RevisionRecordInserted
 * TitleMoveComplete - use PageMoveComplete
 * TitleMoveCompleting - use PageMoveCompleting
 * UndeleteShowRevision - no replacement
 * UserRetrieveNewTalks - no replacement
 * … the following methods and variables have been removed:
 * Article::$mRevision
 * Article::getRevisionFetched
 * ContribsPager::tryToCreateValidRevision
 * EditPage::$mBaseRevision
 * EditPage::getBaseRevision
 * LinksUpdate::getRevision
 * LinksUpdate::setRevision
 * PageArchive::getArchivedRevision
 * PageArchive::getPreviousRevision
 * PageArchive::getRevision
 * Parser::$mRevisionObject
 * Parser::fetchCurrentRevisionOfTitle
 * Parser::getRevisionObject
 * Parser::statelessFetchRevision
 * ParserOptions::getCurrentRevisionCallback
 * ParserOptions::setCurrentRevisionCallback
 * Title::countAuthorsBetween
 * Title::getFirstRevision
 * User::getNewMessageLinks
 * User::getNewMessageRevisionId
 * User::setNewtalk
 * WikiPage::getOldestRevision
 * WikiPage::getRevision
 * WikiPage::getUndoContent
 * WikiPage::updateIfNewerOn
 * … and the following methods no longer accept Revision objects as parameters:
 * CategoryMembershipChange::__construct
 * ContentHandler::getUndoContent
 * DerivedPageDataUpdater::prepareUpdate
 * DifferenceEngine::getRevisionHeader
 * Linker::buildRollbackLink
 * Linker::generateRollback
 * Linker::getRevDeleteLink
 * Linker::getRollbackEditCount
 * Linker::revComment
 * Linker::revUserLink
 * Linker::revUserTools
 * WikiPage::doDeleteUpdates
 * WikiPage::doEditUpdates
 * WikiPage::hasDifferencesOutsideMainSlot
 * WikiPage::onArticleEdit
 * WikiPage::prepareContentForEdit
 * WikiPage::updateRevisionOn
 * The following methods return arrays that formerly included a 'revision' key that would emit deprecation warnings when accessed and return a Revision object. The Revision object has been removed from the arrays, and the 'revision-record' key should be used to get the relevant RevisionRecord instead:
 * PageUpdater::doCreate
 * PageUpdater::doModify
 * Parser::statelessFetchTemplate
 * WikiPage::doEditContent
 * Finally, the ParserOptions `templateCallback` option is a callback that is called in Parser::fetchTemplateAndTitle and should return an array - the 'revision' key to that array used to be a Revision object and was used if no 'revision-record' was returned - is now ignored.
 * Previously, the classes RevisionTestModifyableContent and RevisionTestModifyableContentHandler were loaded for use in tests, but were only used within the tests for the since-removed Revision class. This content and content handler class were removed without deprecation.
 * WANObjectCache::HOLDOFF_NONE, deprecated since 1.35, was removed. Use WANObjectCache::HOLDOFF_TTL_NONE instead.
 * Calling ResourceLoader::makeVersionQuery without $modules parameter, deprecated since MediaWiki 1.34, is no longer supported.
 * LocalFile::recordUpload2, deprecated since 1.35, was removed.
 * The following methods and fields in the Language class, deprecated since 1.35, have been removed:
 * ::classFromCode
 * ::clearCaches
 * ::convertTitle
 * ::findVariantLink
 * ::$mConverter
 * ::updateConversionTable
 * The following methods in the Parser class have been removed after having been deprecated in 1.35:
 * fetchTemplate
 * Title
 * (T273354) When an edit is prevented by an 'EditFilterMergedContent' hook handler without changing the status, the edit form will now be displayed.
 * User::clearNotification, which had been deprecated in 1.35, has been removed. Use WatchlistManager::clearTitleUserNotification instead.
 * User::getNewtalk, which had been deprecated in 1.35, has been removed. Use TalkPageNotificationManager::userHasNewMessages instead.
 * The Autopromote class, deprecated since 1.35, was removed. Use UserGroupManager instead.
 * The CachedAction, SpecialCachedPage, CacheHelper, and ICacheHelper classes, all emitting deprecation warnings since 1.36, have been removed.
 * The hooks BeforeHttpsRedirect, CanIPUseHTTPS and UserRequiresHTTPS, deprecated in 1.35, were removed.
 * The TitleArrayFromResult hook, deprecated in 1.36, was removed.
 * The deprecated "es6-promise" alias ResourceLoader module has been removed. Use the "es6-polyfills" module directly intead.
 * The deprecated "mediawiki.legacy.protect" ResourceLoader module, deprecated since 1.36, has been removed. Use "mediawiki.action.protect" instead.
 * The JavaScript alias $j for references to jQuery, deprecated since 1.23, has been removed. Use $ instead.
 * The AuthenticationProvider interface and the SessionProvider class no longer extend the PSR LoggerAwareInterface concept, so they can't be typehinted as LoggerAwareInterface.
 * User::getGrantName, emitting deprecation warnings since 1.36, has been removed. Use MWGrants::grantName instead.
 * The following ApiBase methods, deprecated since 1.35, have been removed:
 * ApiBase::explodeMultiValue
 * ApiBase::parseMultiValue
 * ApiBase::validateLimit
 * ApiBase::validateTimestamp
 * The User::idCacheByName public static field was removed without deprecation. Instead of using it, get a UserIdentity by name from the UserIdentityLookup service.
 * IDatabase::upsert and IDatabase::replace now only accept a single unique key. Previously, a warning was issued if there were multiple unique keys provided.
 * The MediaWiki:Autoblock_whitelist block exemption control was moved in 1.36 to MediaWiki:Block-autoblock-exemptionlist. The backward-compatibility of reading the old MediaWiki:Autoblock_whitelist page has now been dropped.
 * The following overridable methods in File hierarchy have changed signatures:
 * File::deleteFile - now accepts UserIdentity instead of User
 * File::getDescription - now accepts Authority instead of User
 * File::userCan - now accepts Authority instead of User
 * LocalFile::deleteOldFile - now accepts UserIdentity instead of User
 * The following global methods, each deprecated since 1.36, have been removed:
 * wfAppendToArrayIfNotDefault
 * wfAcceptToPrefs
 * wfConfiguredReadOnlyReason
 * wfDebugMem
 * wfGetPrecompiledData
 * wfNegotiateType
 * The following deprecated methods of the Title class have been removed:
 * ::nameOf, deprecated in 1.36
 * ::getPreviousRevisionID, deprecated in 1.34
 * ::getNextRevisionID, deprecated in 1.34
 * ::getEarliestRevTime, deprecated in 1.35
 * UploadBase::stashFile, deprecated since 1.28, was removed.
 * wfGetRusage, deprecated since 1.35, has been removed.
 * The following CLI options were removed from tests/phpunit.php:
 * use-filebackend
 * use-jobqueue
 * use-bagostuff
 * The following options (inherited from Maintenance) were also removed:
 * conf
 * dbuser
 * dbpass
 * dbdefaultgroup
 * globals
 * memory-limit
 * profiler
 * server
 * The following options were changed to environment variables:
 * wiki => PHPUNIT_WIKI
 * use-normal-tables => PHPUNIT_USE_NORMAL_TABLES
 * use-filebackend => PHPUNIT_USE_FILEBACKEND
 * use-bagostuff => PHPUNIT_USE_BAGOSTUFF
 * use-jobqueue => PHPUNIT_USE_JOBQUEUE
 * This is so that we can use the default PHPUnit entry point (T90875).
 * The PHPUNIT_REUSE_DB / --reuse-db option was removed from the phpunit.php runner. It had been broken for at least three years already. The original use case was speeding up tests on Oracle, but Oracle support was dropped several releases ago.
 * The MediaWikiPHPUnitTest__endTestHook and MediaWikiPHPUnitTest__startTestHook PHPUnit hooks were removed. MediaWikiHooksPHPUnitExtension was also removed.
 * EntryPoint::getTextFormatters was made private without a deprecation period; it had no known external callers.
 * DatabaseBlock::chooseBlock, deprecated since 1.35, was removed.
 * SpecialPageFactory::getRestrictedPages, deprecated since 1.36, was removed.
 * SpecialBlock::validateTarget, deprecated since 1.36, was removed.
 * The PatchFileLocation trait was removed without deprecation.
 * ActorMigrationBase::getExistingActorId and ::getNewActorId, emitting deprecation warnings since 1.36, were removed.
 * Hook handlers implementing the MediaWikiServicesHook hook are now prohibited from having services injected. This is because by definition, this hook runs before the service container is fully initialized.
 * The protected property LocalFile::$metadata was removed without deprecation.
 * WatchedItem::getUser, emitting deprecation warnings since 1.36, has been removed.
 * AuthManager::singleton, emitting deprecation warnings since 1.36, has been removed.
 * The AugmentPageProps class was removed without deprecation. It had no known uses.
 * Html::infobox, deprecated since 1.36, was removed.
 * ParserOptions::__construct now requires that the first parameter is a UserIdentity object - passing `null` used to fallback to the global $wgUser but was deprecated since 1.36.
 * ParserOptions::newCanonical no longer supports the first parameter being null (or omitted entirely), which would fallback to the global $wgUser but was deprecated since 1.35.
 * The SkinTemplatePreventOtherActiveTabs hook, deprecated in 1.35, was removed entirely.
 * The SkinTemplateTabAction hook, deprecated in 1.35, was removed entirely.
 * The SkinTemplateBuildNavUrlsNav_urlsAfterPermalink hook, deprecated in 1.35, was removed entirely.
 * The SkinTemplateToolboxEndHook, deprecated in 1.35, was removed entirely.
 * The following methods of RevisionStore class, formerly emitting deprecation warnings, were removed:
 * LogEntry::getPerformer, deprecated since 1.36, was removed along with methods in sub-classes: DatabaseLogEntry, ManualLogEntry, RCDatabaseLogEntry.
 * Skin::getRelevantUser now returns an instance of UserIdentity, and not
 * Direct construction of MergeHistory class, deprecated since 1.35, is no longer
 * Skin::generateDebugHTML, deprecated since 1.35, was removed. Call
 * The ApiTestCase class no longer interacts with the global $wgUser.
 * SkinTemplate::makeArticleUrlDetails, deprecated since 1.35, was removed.
 * Skin::makeNSUrl, deprecated since 1.35, was removed.
 * Skin::getRevisionId, deprecated since 1.34, was removed. Use
 * Skin::isRevisionCurrent, deprecated since 1.34, was removed. Use
 * AbstractBlock::parseTarget, deprecated since 1.36, was removed.
 * The ArticleEditUpdates hook, deprecated since 1.35, was removed.
 * The `@stable to extend` class CentralIdLookup has following changes:
 * WatchedItemStoreInterface::enqueueWatchlistExpiryJob, deprecated since 1.36,
 * ResultWrapper is now abstract. It cannot be directly constructed (T286694).
 * The SecondaryDataUpdates hook, deprecated in 1.32, was removed entirely.
 * Content::getDeletionUpdates, was removed. Use
 * Content::getSecondaryDataUpdates, was removed. Use
 * wfDiff, deprecated since 1.25, has been removed.
 * Language::$mLangObjCache, deprecated since 1.35, was removed.
 * Language::$transformData, deprecated since 1.35, was removed.
 * Language::transformUsingPairFile was marked @internal. Its deprecated
 * SpecialMute::getTarget, unused outside of the SpecialMute class, was
 * The Skin::setupSkinUserCss method, deprecated in 1.32, was removed. Please
 * The ResourceLoaderSkinModule `legacy`, `content` and `content-thumbnails`
 * ParserCache::getKey and ::getEtag, deprecated since 1.36, were removed.
 * The BaseTemplateToolbox hook, deprecated since 1.35, was removed.
 * Previously a capitalize-all-nouns class was added to the body element of
 * The SkinTemplateOutputPageBeforeExec hook, deprecated since 1.35, was removed.
 * Calling Message::toString without a parameter, which triggered deprecation
 * Article::getContentObject, deprecated since 1.32, was removed.
 * Article::delete, Article::confirmDelete and ImagePage::delete were
 * WikiImporter::debugRevisionHandler, unused and for debug only, was removed.
 * Content::preloadTransform now emits deprecation warnings. Instead, please
 * Content::preSaveTransform now emits deprecation warnings. Instead, please
 * Constructing WikiPage objects from Title instances that cannot exist, emitting
 * The Skin::bottomScripts method is deprecated. Please instead use
 * LinksUpdate::getTriggeringUser now returns ?UserIdentity instead of ?User.
 * The LESS mixin `.box-shadow` (from mediawiki.mixins.less), deprecated since
 * The LESS mixin `.flex` now no longer tries to support the 2009 version of
 * The StorageAwareness::ATTR_SYNCWRITES, StorageAwareness::QOS_SYNCWRITES_*,

Deprecations in 1.37
warnings. Use ::getTargetName and ::getTargetUserIdentity together with ::getType. WatchlistManager::clearTitleUserNotifications is now deprecated. Pass an Authority instead. WatchlistManager::getTitleNotificationTimestamp. Pass PageIdentity instead. ::addWatch have been deprecated. Use corresponding methods in WatchlistManager instead. - ::doWatchOrUnwatch use WatchlistManager::setWatch - ::doWatch -> WatchlistManager::addWatch - ::doUnwatch -> WatchlistManager::removeWatch CsrfTokenSet::getToken. access to a hook container should have one injected instead. Use ::getPage and ::setPage instead. instead. 'master', have been deprecated, with the new ones replacing them as follows: - The DBMasterPos and MySQLMasterPos classes have been respectively renamed to   DBPrimaryPos and MySQLPrimaryPos. - LocalRepo::getMasterDB -> ::getPrimaryDB - ForeignDBRepo::getMasterDB -> ::getPrimaryDB - JobQueueDB::getMasterDB -> ::getPrimaryDB - ForeignDBViaLBRepo::getMasterDB -> ::getPrimaryDB - DBFileJournal::getMasterDB -> ::getPrimaryDB - ILoadBalancer::getMasterPos -> ::getPrimaryPos - IDatabase::getMasterPos -> ::getPrimaryPos - ILoadBalancer::finalizeMasterChanges -> ::finalizePrimaryChanges - ILoadBalancer::approveMasterChanges -> ::approvePrimaryChanges - ILoadBalancer::beginMasterChanges -> ::beginPrimaryChanges - ILBFactory::beginMasterChanges -> ::beginPrimaryChanges - ILoadBalancer::commitMasterChanges -> ::commitPrimaryChanges - ILBFactory::commitMasterChanges -> ::commitPrimaryChanges - IDatabase::getTopologyRootMaster -> ::getTopologyRootPrimary - IDatabase::masterPosWait -> ::primaryPosWait - ILoadBalancer::runMasterTransactionIdleCallbacks -> ::runPrimaryTransactionIdleCallbacks - ILoadBalancer::runMasterTransactionListenerCallbacks -> ::runPrimaryTransactionListenerCallbacks - ILoadBalancer::rollbackMasterChanges -> ::rollbackPrimaryChanges - ILBFactory::rollbackMasterChanges -> ::rollbackPrimaryChanges - ILoadBalancer::flushMasterSnapshots -> ::flushPrimarySnapshots - ILoadBalancer::hasMasterConnection -> ::hasPrimaryConnection - ILoadBalancer::hasMasterChanges -> ::hasPrimaryChanges - ILBFactory::hasMasterChanges -> ::hasPrimaryChanges - ILoadBalancer::lastMasterChangeTimestamp -> ::lastPrimaryChangeTimestamp - ILoadBalancer::hasOrMadeRecentMasterChanges -> ::hasOrMadeRecentPrimaryChanges - ILBFactory::hasOrMadeRecentMasterChanges -> ::hasOrMadeRecentPrimaryChanges - ILoadBalancer::pendingMasterChangeCallers -> ::pendingPrimaryChangeCallers - ILoadBalancer::forEachOpenMasterConnection -> ::forEachOpenPrimaryConnection - ILoadBalancer::waitForMasterPos -> ::waitForPrimaryPos - Database::assertIsWritableMaster -> ::assertIsWritablePrimary - RevDelList::reloadFromMaster -> ::reloadFromPrimary - ExternalStoreDB::getMaster -> ::getPrimary - DatabaseMysqlBase::getMasterServerInfo -> ::getPrimaryServerInfo - MWExceptionHandler::rollbackMasterChangesAndLog -> ::rollbackPrimaryChangesAndLog - ::getTitles, use ::getTargets instead. - ::getGoodTitles, use ::getGoodPages instead. - ::getMissingTitles, use ::getMissingPages instead. - ::getGoodAndMissingTitles, use ::getGoodAndMissingPages instead. - ::getRedirectTitles, use ::getRedirectTargets instead. - ::getSpecialTitles, use ::getSpecialPages instead. deprecation warnings: - ::getOptions - ::isIP - ::isUsableName - ::isCreatableName - ::getCanonicalName - ::addAutopromoteOnceGroups - ::getEffectiveGroups - ::getAutomaticGroups - ::getFormerGroups - ::getIntOption - ::getBoolOption - ::idFromName - use UserIdentityLookup::getUserIdentityByName instead. - ::resetIdByNameCache - in tests, reset service container. No replacement needed in production code. emits deprecation warnings. Instead of getInsertValues, use ActorNormalization::acquireActorId. Instead of getWhere and getJoin, do your own join on the actor table. 'keywordTableMap' are deprecated. Reserved identifiers that are used as table names should be quoted where necessary. warnings. 1.34, now emit deprecation warnings. Use newFromPages instead. ::setHookContainer were deprecated. Use ::init to inject dependencies, or override ::postInitSetup to do any custom post-initialization configuration. and ::setHookContainer now emit deprecation warnings. Use ::init to inject dependencies, or override ::postInitSetup to do any custom post- initialization configuration. the method it wraps, User::isRegistered, instead. 1.35, now emit deprecation warnings. Authority::FOR_XXX constants. Providing a boolean is deprecated. marked as @internal and may be deleted in the future. It should not be necessary to call this method, Authority should be providing all relevant information via a PermissionStatus object. MediaWikiServices::getJobQueueGroup instead. automatically destroyed after tests. corrupting the cache with invalid information. Use addGoodLinkObjFromRow instead. PHPUnit tests must use LinkCacheTestTrait::addGoodLinkObject. deprecation warnings: For both of these, use the 'by' property with UserIdentity value instead. favor of ::getUploader. ::getRawDescription was deprecated in favor of ::getDescription with RAW audience parameter. extra fields not requested by ::getQueryInfo will now trigger deprecation warnings. This is to warn callers that deprefixing and automatic assignment of such fields will not be done in a future version. It wasn't used and job given the purpose of JobSpecification class it is not needed. BacklinkCacheFactory::getBacklinkCache instead. ::getBacklinkCache method in the BacklinkCacheFactory service. deprecated and should no longer be overridden. Instead, sub-classes should override getSizeAndMetadata. ::getMetadataItem and ::getMetadataItems. BaseTemplateAfterPortlet hook, which were deprecated in 1.35, now emit deprecation warnings. deprecated. deprecated. Use CsrfTokenRepository, which is available via IContextSource, instead. ::matchEditTokenNoSuffix was deprecated without replacement. It was introduced to be able to provide custom error message if the token was submitted, but ending slashes were stripped by some ASCII mangling proxy. Use ::matchToken instead, such proxies are much less common now and there's not much benefit in customising the error message. warnings. warnings. warnings. warnings; obtain an instance from MediaWikiServices instead. is now deprecated. $mInterwiki, and $mFragment have been deprecated to not be used directly. Instead, their corresponding accessor methods should be used. ::fieldName, ::freeResult and ::dataSeek are deprecated. Use the corresponding methods in IResultWrapper instead. DatabasePostgres::fieldType each now emit deprecation warnings. an IResultWrapper. To do otherwise will now trigger a deprecation warning. now emit deprecation warnings. deprecation warnings: - ::isMovable - ::isSubject - ::getTalk - ::getSubject - ::getAssociated - ::equals - ::subjectEquals - ::hasTalkNamespace - ::wantSignatures - ::isWatchable - ::getSubjectNamespaces - ::getTalkNamespaces - ::isCapitalized - ::hasGenderDistinction - ::isNonincludable - ::getNamespaceContentModel - ::getRestrictionLevels - ::getCategoryLinkType LogFormatter::styleRestrictedElement - UserLoadOptions: use LoadUserOptions instead. - UserSaveOptions: use SaveUserOptions instead. - UserResetAllOptions: no replacement was provided, the hook is not used. warnings. been deprecated in favor of ::whereUserIds, ::whereUserNames, and ::whereUserNamePrefix. deprecation warnings. Use MovePageFactory instead. - WikiPage::doDeleteArticleReal (soft) - use DeletePage - WikiPage::doDeleteArticleBatched (soft) - no replacement - WikiPage::isBatchedDelete (soft) - use DeletePage - WikiPage::doDeleteUpdates (hard) - no replacement - WikiPage::getDeletionUpdates (hard) - no replacement - Title::isBigDeletion (soft) - no replacement was deprecated. This is now automatically checked if you use DeletePage::deleteIfAllowed. (T288759) getUserPermissionsErrors or getUserPermissionsErrorsExpensive hooks instead. Parser::getUser each now emit deprecation warnings. corresponding methods in the new RestrictionStore service (with different names where indicated): - ::areCascadeProtectionSourcesLoaded - ::areRestrictionsCascading - ::areRestrictionsLoaded - ::getAllRestrictions - ::getCascadeProtectionSources - ::getFilteredRestrictionTypes -> ::listAllRestrictionTypes - ::getRestrictionExpiry - ::getRestrictionTypes -> ::listApplicableRestrictionTypes - ::getRestrictions - ::isCascadeProtected - ::isProtected - ::isSemiProtected - ::loadRestrictionsFromRows replacement: - ::deleteTitleProtection - ::getTitleProtection - ::flushRestrictions - ::loadRestrictions and AbstractBlock::isUsertalkEditAllowed instead. Preprocessor_Hash, as Preprocessor_DOM was removed in 1.35. - PPDPart has been merged into PPDPart_Hash - PPDStack has been merged into PPDStack_Hash - PPDStackElement has been merged into PPDStackElement_Hash StubGlobalUser rather than User, and the first time it is used it will emit deprecation warnings (the $wgUser variable was deprecated in 1.35). For extensions that read from this variable, please use a relevant ContextSource instead, falling back to RequestContext::getMain if none is available. the CollationFactory from MediaWikiServices instead. are no known callers/consumers. deprecation warnings: - LinkRenderer::setStubThreshold and ::getStubThreshold - no replacement. - LinkRendererFactory::createForUser - calling ::create is now sufficient - ParserOptions::setStubThreshold and ::getStubThreshold - no replacement. - User::getStubThreshold - no replacement. PageDelete and PageDeleteComplete instead. - .box-sizing - .transform - .transform-origin - .transition - .transition-transform introduced, `PageUndelete`, that provides handlers with more information and is also called for non-UI requests. The capability of replacing the PageArchive object has been removed, as that violates the laws of nature.
 * JobQueue::getWiki, deprecated in 1.33, now emits deprecation warnings.
 * AbstractBlock::getTargetAndType and ::getTarget now emit deprecation
 * Passing a UserIdentity to WatchlistManager::clearAllUserNotifications and
 * Passing LinkTarget to WatchlistManager::clearTitleUserNotifications and
 * The User class methods ::isWatched, ::isTempWatched, ::removeWatch, and
 * Multiple WatchAction methods have been deprecated in lieu of WatchlistManager:
 * WatchAction::getWatchToken now emits deprecation warnings. Instead use
 * Action::getHookContainer has been marked as internal. Actions that require
 * The ::getTitle and ::setTitle methods in Parser have been deprecated.
 * Title::isWatchable has been deprecated. Use WatchlistManager::isWatchable
 * Methods and classes related to the primary database, previously referred to as
 * wfGetLB, deprecated since 1.27, now emits deprecation warnings.
 * wfLocalFile, deprecated since 1.34, now emits deprecation warnings.
 * wfFindFile, deprecated since 1.34, now emits deprecation warnings.
 * wfIncrStats, deprecated in 1.36, now emits deprecation warnings.
 * wfCanIPUseHTTPS is now deprecated, and always returns true.
 * The UserLoadFromDatabase hook has been deprecated. It had no known uses.
 * The following methods in ApiPageSet have been deprecated:
 * The following methods from the User class, deprecated in 1.35, now each emit
 * The following methods in User were deprecated:
 * Use of ActorMigration for any table except revision, deprecated in 1.34, now
 * DatabasePostgres::remappedTableName and its dependent constructor parameter
 * LinkCache::singleton, deprecated since 1.28, now emits deprecation warnings.
 * MessageCache::singleton, deprecated since 1.34, now emits deprecation
 * LockManagerGroup::singleton and ::destroySingletons, deprecated since
 * HtmlFileCacheUpdate::newFromTitles is now deprecated and emitting warnings.
 * SessionProvider ::setLogger, ::setManager, ::setConfig, and
 * AbstractAuthenticationProvider ::setLogger, ::setManager, ::setConfig,
 * User::isLoggedIn, deprecated since 1.36, now emits deprecation warnings. Use
 * FileBackendGroup::singleton and ::destroySingletons, deprecated since
 * The first parameter of User::getBlock should now be an integer using the
 * ApiBase::addBlockInfoToStatus is deprecated for use by extensions. It is now
 * JobQueueGroup::singleton was deprecated - use
 * JobQueueGroup::destroySingletons was deprecated. JobQueueGroups are now
 * LinkCache::addGoodLinkObj has been deprecated, since it is prone to
 * ContentHandler::getContentText is now deprecated. Use Content::getText instead.
 * LinkCache::addLinkObj has been deprecated, use PageStore::getPageForLink instead.
 * MediaWiki\User\UserNamePrefixSearch::search previously accepted as its first parameter either the string 'public' or a UserIdentity object, to filter results for. It now expects an Authority object instead of UserIdentity, and providing just a UserIdentity will now trigger a deprecation warning.
 * User::getRights, deprecated since 1.34, now emits deprecation warnings.
 * User::changeableGroups and ::changeableByGroup now emit deprecation warnings. Use corresponding methods in UserGroupManager instead.
 * User::incEditCount was deprecated in favor of the new method UserEditTracker::incrementUserEditCount.
 * RepoGroup::singleton, ::destroySingleton and ::setSingleton, deprecated since 1.34, now emit deprecation warnings.
 * RecentChange::getPerformer, deprecated since 1.36, now emits deprecation warnings. Use ::getPerformerIdentity instead.
 * ContentHandler::cleanupHandlersCache, deprecated since 1.35, now emits deprecation warnings.
 * Category::getTitle was deprecated in favor of Category::getPage
 * File::getUser method now emits deprecation warnings, along with its overrides in LocalFile and ForeignApiFile in favor of ::getUploader.
 * SpecialBlock::checkUnblockSelf, deprecated in 1.36, now emits deprecation warnings.
 * (T284179) The mediawiki.viewport ResourceLoader module is deprecated. You can now just use MutationObserver or InterSectionObserver directly, which are widely available in all supported JavaScript browsers.
 * The following constructor options of DatabaseBlock class will now trigger
 * the 'byText' property with blocker's name,
 * the 'by' property with blocker's ID,
 * The BeforeResetNotificationTimestamp hook was deprecated.
 * ArchivedFile::getUser ::getRawUser ::getRawUserText were deprecated in
 * When calling LocalFile::newFromRow or LocalFile::loadFromRow, passing
 * JobSpecification::getTitle was deprecated without providing a replacement.
 * The protected method File::getImageSize is now deprecated.
 * BacklinkCache::get was deprecated, use
 * Title::getBacklinkCache now emits deprecation warnings. Instead, use the
 * MediaHandler::getImageSize, ::getMetadata, and ::isMetadataValid were
 * Deprecated File::getMetadata. Instead use ::getMetadataArray,
 * Message::title has been deprecated; use Message::page instead.
 * BaseTemplate::getAfterPortlet, BaseTemplate::renderAfterPortlet, and the
 * The LocalFile::getHistory hook is deprecated.
 * Calling WikiPage::prepareContentForEdit without a UserIdentity is now
 * User::getEditTokenObject, ::getEditToken, and ::matchEditToken were each
 * ContentHandler::getForTitle, deprecated since 1.35, now emits deprecation
 * User::listOptionKinds, deprecated since 1.35, now emits deprecation
 * WikiPage::doEditContent, deprecated since 1.32, now emits deprecation
 * CentralIdLookup::factory and ::factoryNonLocal now emit deprecation
 * The class RandomPage was renamed to SpecialRandomPage. The class RandomPage
 * BotPassword::invalidateAllPasswordsForCentralId was deprecated.
 * BotPassword::removeAllPasswordsForCentralId was deprecated.
 * The Title class members: $mTextform, $mUrlform, $mDbkeyform, $mNamespace,
 * IDatabase::fetchObject, ::fetchRow, ::numRows, ::numFields,
 * ResultWrapper::unwrap, DatabaseMysqlBase::fieldType and
 * Sub-classes implementing Database::doQuery should return either boolean or
 * User::getOptionKinds and ::resetOptions, both deprecated since 1.35,
 * The following methods in MWNamespace, all deprecated since 1.34, now emit
 * LogFormatter::styleRestricedElement has been deprecated in favor of
 * The following hooks related to user preferences were deprecated:
 * Title::isNamespaceProtected, deprecated in 1.34, now emits deprecation
 * UserSelectQueryBuilder::userIds, ::userNames, and ::userNamePrefix has
 * Manually constructing a MovePage object, deprecated in 1.34, now emits
 * The following deletion-related methods were deprecated:
 * Relying on PermissionManager or Authority to check for big deletions
 * The userCan hook now emits deprecation warnings. Use the
 * Parser::$mUser public access, and the methods ParserOptions::getUser and
 * The following methods in the Title class have been deprecated in favor of the
 * The following Title methods have been deprecated with no direct public
 * User::isAllowUsertalk now emits deprecation warnings. Use User::getBlock
 * Classes used by Preprocessor_DOM have been merged with classes used by
 * By default, the global variable $wgUser is now an instance of the new class
 * Collation::singleton and ::factory were deprecated; obtain an instance of
 * Title::getDefaultNamespace has been deprecated to be removed because there
 * With removal of the stub threshold feature, the following methods now emit
 * The ArticleDelete and ArticleDeleteComplete hooks were deprecated. Use
 * The ArticleUndeleteLogEntry hook was deprecated without replacement.
 * The following LESS mediawiki.mixins have been deprecated:
 * The `UndeleteForm::undelete` hook was deprecated. A new hook was

Other changes in 1.37
which replace User::addWatch, now call the WatchArticle and WatchArticleComplete hooks. WatchlistManager::removeWatchIgnoringRights, which replace User::removeWatch, now call the UnwatchArticle and UnwatchArticleComplete hooks. AbstractAuthenticationProvider class. A provider can override postInitSetup to do any custom post-initialization configuration. class. A provider can override postInitSetup to do any custom post-initialization configuration. Use SessionProvider::getConfig to get a config. should get a load balancer (factory) injected in the constructor instead. Not providing one emitted deprecation warnings since 1.36. and ALF_PRELOAD_EXISTENCE have been removed. They're unused since 1.25. renamed to 'mw-htmlform-autoinfuse'. $data['user_properties'] anymore. This optimization was not used. - SpecialRandompage.php -> SpecialRandomPage.php - SpecialRandomredirect.php -> SpecialRandomRedirect.php - SpecialRandomrootpage.php -> SpecialRandomRootPage.php maintenance script will now have the "mw-server-side-upload" change tag. are only designed for use by skins extended BaseTemplate. You can move calls to instead use BaseTemplate::getPoweredByHTML and ::getCopyrightIconHTML respectively. Starting with 1.37, HTMLTitleTextField has a new parameter, 'interwiki', which can be used to control acceptance of interwiki titles. To provide a transitional period, the default value ('interwiki' => null) ensures MW will have the same behavior as before (logging a deprecation warning). In 1.38, the default behavior will change to "interwiki links aren't allowed".
 * WatchlistManager::addWatch and WatchlistManager::addWatchIgnoringRights,
 * WatchlistManager::removeWatch and
 * The overridable postInitSetup method was added to the
 * The overridable postInitSetup method was added to the SessionProvider
 * The protected getConfig method was added to the SessionProvider class.
 * The DBAccessBase class is deprecated. Classes that used to extend it
 * ActorNormalization::acquireActorId now requires IDatabase parameter.
 * Anti-lock constants ALF_PRELOAD_LINK, ALF_NO_BLOCK_LOCK, ALF_NO_LINK_LOCK
 * (T278036) CSS class 'mw-htmlform-field-autoinfuse' used by some forms has been
 * User::newFromRow does not accept pre-loaded user preferences under
 * The following files change the letter case of the file names:
 * Media files which are uploaded server side using the importImages.php
 * (T284917) The stub threshold feature has been removed.
 * Skin::getPoweredBy and Skin::getCopyrightIcon have been deprecated as they
 * The SkinGetPoweredBy hook is deprecated. No replacement is provided.
 * HTMLTitleTextField didn't support interwiki titles well previously.

Compatibility
MediaWiki 1.37 requires PHP 7.3.19 or later and the following PHP extensions:


 * ctype
 * dom
 * fileinfo
 * iconv
 * intl
 * json
 * mbstring
 * xml

MySQL/MariaDB is the recommended DBMS. PostgreSQL or SQLite can also be used, but support for them is somewhat less mature.

The supported versions are:


 * MySQL 5.5.8 or later
 * PostgreSQL 9.4 or later
 * SQLite 3.8.0 or later

Online documentation
Documentation for both end-users and site administrators is available on MediaWiki.org, and is covered under the GNU Free Documentation License (except for pages that explicitly state that their contents are in the public domain):

https://www.mediawiki.org/wiki/Special:MyLanguage/Documentation

Mailing list
A mailing list is available for MediaWiki user support and discussion:

https://lists.wikimedia.org/mailman/listinfo/mediawiki-l

A low-traffic announcements-only list is also available:

https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce

It's highly recommended that you sign up for one of these lists if you're going to run a public MediaWiki, so you can be notified of security fixes.

IRC help
There's usually someone online in #mediawiki on irc.libera.chat.