Hi all,

On Friday we will be issuing a security and maintenance release to all supported branches of MediaWiki.

The new releases will be:

- 1.35.11
- 1.38.7
- 1.39.4

This will resolve three minor security issues in MediaWiki core, along with bug fixes included for maintenance reasons. This includes various patches for PHP 8.0, PHP 8.1 and PHP 8.2 support.

Due to the low severity of two of the patches, they already exist in the respective release branches in git.

We will make the fixes available in the respective release branches (plus 1.40 which will also be released tomorrow) and master in git. Tarballs will be available for the above mentioned point releases as well.

A summary of some of the security fixes that have gone into non-bundled MediaWiki extensions will also follow later.

As a reminder, 1.38 becomes end of life (EOL) tomorrow, June 30, 2023. 1.38.7 is therefore expected to be the last release for this branch. It is recommended to upgrade to 1.39 (the next LTS after 1.35), which will be supported until November 2025, or the newly released 1.40, which will be supported until June 2024.

[1] https://www.mediawiki.org/wiki/Version_lifecycle