We've now seen this issue twice, where content that depends upon expanded wikitext was cached using page_latest for cache invalidation instead of page_touched, meaning template and other updates aren't causing invalidation, leading to some not-so-nice vandalism staying around.
- rETEX36d1b4f3c4ed: Use page_touched in cache key instead of page_latest
- rEMFR4d8976c43be4: API: Use page_touched for cache invalidation
A/C
Audit the usage of cache in the following extensions to make sure any cache that stores expanded or rendered wikitext is using page_touched and not page_latest for caching:
- Hovercards
- MobileFrontend
- QuickSurveys
- RelatedArticles