Formally EOL MW 1.42
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	Reedy
	Mar 19 2025, 12:52 AM

Description

As per https://www.mediawiki.org/wiki/Version_lifecycle, MW 1.42 is EOL at the end of June 2025.

As per the MediaWiki version lifecycle[1], I would like to announce the formal end of life (EOL) of MediaWiki 1.42 as of Monday June 30, 2025.

1.42.7 is expected to be the last release for this branch.

This means that MediaWiki 1.42 will no longer receive maintenance or security backports. It is therefore strongly discouraged that you continue to use it.

It is recommended to upgrade either to the next LTS, 1.43, which will be supported until December 2027, or to the soon to be released MediaWiki 1.44, which will be supported until at least June 2026.

Thanks!

[1] https://www.mediawiki.org/wiki/Version_lifecycle

Previous: T376550: Formally EOL MW 1.41

Details

Due Date: Jun 30 2025, 10:55 PM

Related Changes in Gerrit:

Subject	Repo	Branch	Lines +/-
ExtensionDistributor: Mark 1.44 as stable; remove 1.42 as EOL	operations/mediawiki-config	master	+2 -3
zuul: Drop CI for REL1_42	integration/config	master	+1 -176
autobackport: Remove REL1_42	translatewiki	master	+0 -7
autobackport: Mark REL1_42 as inactive	translatewiki	master	+1 -0

Customize query in gerrit

Related Objects
Search...

Status	Subtype	Assigned	Task
Resolved		Reedy	T389313 Formally EOL MW 1.42
Resolved		Reedy	T389302 Release MediaWiki 1.39.13/1.42.7/1.43.2
			Restricted Task
Resolved	Security	tstarling	T391343 CVE-2025-6589: With MultiBlocks enabled and a user who is suppressed via a MultiBlock, a user without 'hideuser' can see the hidden username in the BlockList
Resolved	Security	Dylsss	T392746 CVE-2025-6590: Complete content leak of private wikis due to PasswordReset Wikitext injection in error message
Resolved	Security	Legoktm	T392276 CVE-2025-6591: HTML injection in API action=feedcontributions output from i18n message
			Restricted Task
Resolved	Security	Michael	T396230 CVE-2025-6593: "{{SITENAME}} registered email address has been changed" email sent to unverified email addresses
Resolved	Security	matmarex	T395063 CVE-2025-6594: XSS in Special:ApiSandbox (User interaction required)
Resolved	Security	Jdrewniak	T394863 CVE-2025-6595: Stored XSS through system messages in MultimediaViewer
Resolved	Security	SomeRandomDeveloper	T396685 CVE-2025-6596: Vector inserts portlet labels as HTML, allowing for stored XSS through system messages
Resolved	Security	Tgr	T389009 CVE-2025-6597: MediaWiki should not consider autocreation as login for the purposes of security reauthentication
Resolved	Security	Lucas_Werkmeister_WMDE	T386175 CVE-2025-32072: HTML injection in feed output from i18n message
Resolved	Security	Tgr	T389010 CVE-2025-6926: SUL3 local login should not count for security reauthentication
Resolved	Security	tstarling	T397595 CVE-2025-6927: Autoblocks from global account suppressions are publicly visible
			Restricted Task
			Restricted Task
			Restricted Task
			Restricted Task
			Restricted Task
			Restricted Task
			Restricted Task
Resolved		Zabe	T389311 Update HISTORY in master after 1.39.13/1.42.7/1.43.2
Resolved		mmartorana	T389312 Write and send supplementary release announcement for extensions and skins with security patches (1.39.13/1.42.7/1.43.2)

Event Timeline

Reedy created this task.Mar 19 2025, 12:52 AM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptMar 19 2025, 12:52 AM

Not yet, but building up task trees...

Reedy added a subtask: T389302: Release MediaWiki 1.39.13/1.42.7/1.43.2.Mar 19 2025, 12:53 AM

Reedy moved this task from Blocker to Process on the MW-1.42-release board.

SomeRandomDeveloper subscribed.Jun 9 2025, 10:45 PM

Reedy updated the task description. (Show Details)Jun 24 2025, 7:58 PM

Reedy updated the task description. (Show Details)Jun 24 2025, 8:01 PM

Reedy updated the task description. (Show Details)Jun 24 2025, 8:04 PM

Reedy changed the task status from Stalled to In Progress.Jun 25 2025, 12:31 AM

Bugreporter updated the task description. (Show Details)Jun 28 2025, 12:13 PM

Reedy updated the task description. (Show Details)Jun 28 2025, 4:40 PM

Change #1165147 had a related patch set uploaded (by Reedy; author: Reedy):

[integration/config@master] zuul: Drop CI for REL1_42

https://gerrit.wikimedia.org/r/1165147

gerritbot added a project: Patch-For-Review.Jun 30 2025, 8:09 PM

Change #1165148 had a related patch set uploaded (by Reedy; author: Reedy):

[translatewiki@master] autobackport: Mark REL1_42 as inactive

https://gerrit.wikimedia.org/r/1165148

Change #1165149 had a related patch set uploaded (by Reedy; author: Reedy):

[translatewiki@master] autobackport: Remove REL1_42

https://gerrit.wikimedia.org/r/1165149

Reedy updated the task description. (Show Details)Jun 30 2025, 9:08 PM

Reedy updated the task description. (Show Details)Jun 30 2025, 11:15 PM

Change #1165148 merged by jenkins-bot:

[translatewiki@master] autobackport: Mark REL1_42 as inactive

https://gerrit.wikimedia.org/r/1165148

Change #1165149 merged by jenkins-bot:

[translatewiki@master] autobackport: Remove REL1_42

https://gerrit.wikimedia.org/r/1165149

Change #1165147 merged by jenkins-bot:

[integration/config@master] zuul: Drop CI for REL1_42

https://gerrit.wikimedia.org/r/1165147

Mentioned in SAL (#wikimedia-releng) [2025-07-01T07:41:33Z] <hashar> Disabled CI for REL1_42 # T389313

Maintenance_bot removed a project: Patch-For-Review.Jul 1 2025, 8:30 AM

A_smart_kitten added a project: MediaWiki-Documentation.Jul 3 2025, 9:18 AM

Change #1166012 had a related patch set uploaded (by Arlolra; author: Arlolra):

[operations/mediawiki-config@master] ExtensionDistributor: Mark 1.44 as stable; remove 1.42 as EOL

https://gerrit.wikimedia.org/r/1166012

gerritbot added a project: Patch-For-Review.Jul 3 2025, 7:12 PM

Change #1166012 merged by jenkins-bot:

[operations/mediawiki-config@master] ExtensionDistributor: Mark 1.44 as stable; remove 1.42 as EOL

https://gerrit.wikimedia.org/r/1166012

Mentioned in SAL (#wikimedia-operations) [2025-07-03T20:38:45Z] <arlolra@deploy1003> Started scap sync-world: Backport for [[gerrit:1166236|Use FallbackContentHandler for undeployed JsonConfig content handlers (T124748)]], [[gerrit:1166012|ExtensionDistributor: Mark 1.44 as stable; remove 1.42 as EOL (T390798 T389313)]]

Mentioned in SAL (#wikimedia-operations) [2025-07-03T20:40:42Z] <arlolra@deploy1003> arlolra, matmarex: Backport for [[gerrit:1166236|Use FallbackContentHandler for undeployed JsonConfig content handlers (T124748)]], [[gerrit:1166012|ExtensionDistributor: Mark 1.44 as stable; remove 1.42 as EOL (T390798 T389313)]] synced to the testservers (see https://wikitech.wikimedia.org/wiki/Mwdebug). Changes can now be verified there.

Mentioned in SAL (#wikimedia-operations) [2025-07-03T20:47:12Z] <arlolra@deploy1003> Finished scap sync-world: Backport for [[gerrit:1166236|Use FallbackContentHandler for undeployed JsonConfig content handlers (T124748)]], [[gerrit:1166012|ExtensionDistributor: Mark 1.44 as stable; remove 1.42 as EOL (T390798 T389313)]] (duration: 08m 27s)