Maniphest T404610

Release MediaWiki 1.39.16/1.43.6/1.44.3/1.45.1
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	Reedy
	Sep 15 2025, 4:25 PM

Project Tags

Referenced Files

None

Subscribers

Jdforrester-WMF

Description

Previous release work: {T397766}

Tracking for activities actually pertaining to making the release of MediaWiki 1.39.16/1.43.6/1.44.3/1.45.1

Related Objects
Search...

		Status	Subtype	Assigned	Task
		Resolved		Daimona	T395470 Drop deprecated phpunit.php and suite.xml
		Resolved		Reedy	T403199 Formally EOL MW 1.39
		Resolved		Reedy	T404610 Release MediaWiki 1.39.16/1.43.6/1.44.3/1.45.1
					Restricted Task
					Restricted Task
					Restricted Task
		Resolved	Security	SomeRandomDeveloper	T406639 CVE-2025-67477: Stored XSS through a system message in Special:ApiSandbox
					Restricted Task
		Resolved	Security	cscott	T407131 CVE-2025-67479: Magic word replacement in legacy parser allows using reserved data attributes through wikitext
		Resolved	Security	Catrope	T401053 CVE-2025-67480: list=allrevisions can be used to bypass Extension:Lockdown
		Resolved	Security	sbassett	T405790 CVE-2025-67481: jQueryMsg style sanitizer regex can be bypassed using character escapes
		Resolved	Security	matmarex	T251032 CVE-2025-67481: mw.message(…).parse() doesn't output safe HTML, but it's being used as if it does
					Restricted Task
					Restricted Task
		Resolved		Atieno	T401987 Consider deprecating/removing the xslt option from the action api
					Restricted Task
					Restricted Task
					Restricted Task
					Restricted Task
					Restricted Task
					Restricted Task
		Resolved		None	T404617 Update onwiki release notes for 1.39.16/1.43.6/1.44.3/1.45.1
					Restricted Task
		Resolved		Zabe	T404619 Update HISTORY in master after 1.39.16/1.43.6/1.44.3/1.45.1
		Resolved		mmartorana	T404620 Write and send supplementary release announcement for extensions and skins with security patches (1.39.16/1.43.6/1.44.3/1.45.1)

Event Timeline

Reedy added projects: Security, MediaWiki-Releasing.Sep 15 2025, 4:25 PM

Reedy subscribed.

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptSep 15 2025, 4:25 PM

Reedy added subtasks: Restricted Task, Restricted Task, Restricted Task, Restricted Task, Restricted Task, Restricted Task, T404617: Update onwiki release notes for 1.39.16/1.43.6/1.44.3/1.45.1, Restricted Task, T404619: Update HISTORY in master after 1.39.16/1.43.6/1.44.3/1.45.1, T404620: Write and send supplementary release announcement for extensions and skins with security patches (1.39.16/1.43.6/1.44.3/1.45.1).Sep 15 2025, 4:25 PM

Reedy updated the task description. (Show Details)Sep 15 2025, 4:26 PM

Reedy added a parent task: T403199: Formally EOL MW 1.39.Sep 23 2025, 10:46 AM

Reedy renamed this task from Release MediaWiki 1.39.15/1.43.5/1.44.2/1.45.0 to Release MediaWiki 1.39.16/1.43.6/1.44.3/1.45.0.Oct 3 2025, 1:18 PM

Reedy updated the task description. (Show Details)

sbassett changed the status of subtask T404620: Write and send supplementary release announcement for extensions and skins with security patches (1.39.16/1.43.6/1.44.3/1.45.1) from Open to In Progress.Oct 27 2025, 7:28 PM

Reedy renamed this task from Release MediaWiki 1.39.16/1.43.6/1.44.3/1.45.0 to Release MediaWiki 1.39.16/1.43.6/1.44.3/1.45.1.Dec 8 2025, 8:41 PM

Reedy updated the task description. (Show Details)

Reedy closed subtask Restricted Task as Resolved.Dec 8 2025, 11:43 PM

Reedy changed the status of subtask Restricted Task from Open to In Progress.Dec 9 2025, 10:22 PM

Reedy closed subtask Restricted Task as Resolved.Dec 10 2025, 10:41 PM

Reedy closed subtask Restricted Task as Resolved.Dec 16 2025, 5:47 PM

Reedy closed subtask Restricted Task as Resolved.

Reedy closed subtask Restricted Task as Resolved.Dec 16 2025, 6:12 PM

Reedy closed subtask Restricted Task as Resolved.

Zabe closed subtask T404619: Update HISTORY in master after 1.39.16/1.43.6/1.44.3/1.45.1 as Resolved.Jan 3 2026, 12:27 AM

Is this Resolved?

mmartorana closed subtask T404620: Write and send supplementary release announcement for extensions and skins with security patches (1.39.16/1.43.6/1.44.3/1.45.1) as Resolved.Jan 9 2026, 6:03 PM

Zabe closed subtask T404617: Update onwiki release notes for 1.39.16/1.43.6/1.44.3/1.45.1 as Resolved.Jan 9 2026, 6:07 PM

Reedy closed this task as Resolved.Jan 21 2026, 9:02 PM

Reedy claimed this task.

Zabe changed the visibility from "acl*security (Project)" to "Public (No Login Required)".Jan 21 2026, 9:03 PM

Zabe changed the edit policy from "acl*security (Project)" to "All Users".