Page MenuHomePhabricator

Write and send release announcements for MediaWiki 1.31.7/1.33.3/1.34.1
Closed, ResolvedPublic

Description

Previous T233497

I would like to announce the release of MediaWiki 1.34.1, 1.33.3 and 1.31.7!

These releases also serve as a maintenance release for these branches.

We've noted that these issues are minor, and as such you don't need to apply them as quickly as with other security releases, if you're unable to do so. We therefore decided to continue with getting the security (and maintenance) release out for this quarter as planned, even with the global situation as is.

While tarballs have already been uploaded, git tags will follow later on today.

An "MediaWiki Extensions Security Release Supplement" email will follow this one.

Note that T232932 only applies to 1.34.0. T246602 applies to 1.31.6, 1.33.2 and 1.34.0.

== Security fixes ==
* (T232932) User content can redirect the logout button to different URL.
* (T246602) jquery.makeCollapsible allows applying event handler to any CSS selector.

== Links to all mentioned tasks ==
* https://phabricator.wikimedia.org/T232932
* https://phabricator.wikimedia.org/T246602

== Release notes ==

Full release notes for 1.31.7:
https://phabricator.wikimedia.org/diffusion/MW/browse/REL1_31/RELEASE-NOTES-1.31
https://www.mediawiki.org/wiki/Release_notes/1.31

Full release notes for 1.33.3:
https://phabricator.wikimedia.org/diffusion/MW/browse/REL1_33/RELEASE-NOTES-1.33
https://www.mediawiki.org/wiki/Release_notes/1.33

Full release notes for 1.34.1:
https://phabricator.wikimedia.org/diffusion/MW/browse/REL1_34/RELEASE-NOTES-1.34
https://www.mediawiki.org/wiki/Release_notes/1.34

For information about how to upgrade, see
<https://www.mediawiki.org/wiki/Manual:Upgrading>

**********************************************************************
Download:
https://releases.wikimedia.org/mediawiki/1.31/mediawiki-1.31.7.tar.gz

Download without bundled extensions:
https://releases.wikimedia.org/mediawiki/1.31/mediawiki-core-1.31.7.tar.gz

Patch to previous version (1.31.6):
https://releases.wikimedia.org/mediawiki/1.31/mediawiki-1.31.7.patch.gz

GPG signatures:
https://releases.wikimedia.org/mediawiki/1.31/mediawiki-core-1.31.7.tar.gz.sig
https://releases.wikimedia.org/mediawiki/1.31/mediawiki-1.31.7.tar.gz.sig
https://releases.wikimedia.org/mediawiki/1.31/mediawiki-1.31.7.patch.gz.sig

Public keys:
https://www.mediawiki.org/keys/keys.html

**********************************************************************
Download:
https://releases.wikimedia.org/mediawiki/1.33/mediawiki-1.33.3.tar.gz

Download without bundled extensions:
https://releases.wikimedia.org/mediawiki/1.33/mediawiki-core-1.33.3.tar.gz

Patch to previous version (1.33.2):
https://releases.wikimedia.org/mediawiki/1.33/mediawiki-1.33.3.patch.gz

GPG signatures:
https://releases.wikimedia.org/mediawiki/1.33/mediawiki-core-1.33.3.tar.gz.sig
https://releases.wikimedia.org/mediawiki/1.33/mediawiki-1.33.3.tar.gz.sig
https://releases.wikimedia.org/mediawiki/1.33/mediawiki-1.33.3.patch.gz.sig

Public keys:
https://www.mediawiki.org/keys/keys.html

**********************************************************************
Download:
https://releases.wikimedia.org/mediawiki/1.34/mediawiki-1.34.1.tar.gz

Download without bundled extensions:
https://releases.wikimedia.org/mediawiki/1.34/mediawiki-core-1.34.1.tar.gz

Patch to previous version (1.34.0):
https://releases.wikimedia.org/mediawiki/1.34/mediawiki-1.34.1.patch.gz

GPG signatures:
https://releases.wikimedia.org/mediawiki/1.34/mediawiki-core-1.34.1.tar.gz.sig
https://releases.wikimedia.org/mediawiki/1.34/mediawiki-1.34.1.tar.gz.sig
https://releases.wikimedia.org/mediawiki/1.34/mediawiki-1.34.1.patch.gz.sig

Public keys:
https://www.mediawiki.org/keys/keys.html

Details

Due Date
Mar 26 2020, 12:00 PM

Event Timeline

Reedy triaged this task as Medium priority.Dec 10 2019, 11:02 PM
Reedy renamed this task from Write and send release announcements for MediaWiki 1.31.7/1.32.7/1.33.3/1.34.1 to Write and send release announcements for MediaWiki 1.31.7/1.33.3/1.34.1.Jan 23 2020, 1:09 PM
Reedy set Due Date to Mar 26 2020, 12:00 PM.Mar 10 2020, 2:15 PM
Reedy updated the task description. (Show Details)

Not sure what we want to do about T234104, re: mentioning it as part of the release announcement.

Reedy updated the task description. (Show Details)
Reedy changed the visibility from "Custom Policy" to "Public (No Login Required)".Mar 26 2020, 5:40 PM