Wikitech-l June 2026

wikitech-l@lists.wikimedia.org

18 participants
21 discussions

GitLab SSH is moving to gitlab-ssh.wikimedia.org
by Arnaud Bran 13 Jul '26

13 Jul '26

Hi all, Heads up: as part of putting GitLab behind a CDN (T425441 <https://phabricator.wikimedia.org/T425441>), SSH access for git commands is moving to a dedicated hostname: gitlab-ssh.wikimedia.org. This only affects SSH git access. HTTPS clones are unaffected. - The new hostname is available now. - Starting tomorrow (June 23rd) morning, GitLab will advertise it <https://gerrit.wikimedia.org/r/c/operations/puppet/+/1300763> on new git clone commands, so new clones will use it automatically. - gitlab.wikimedia.org will stay reachable over SSH for git commands until GitLab moves behind the CDN. We'll announce the change before it happens. After that, gitlab.wikimedia.org will no longer be reachable via SSH. The quickest way to switch remotes all at once would be: git config --global url."git(a)gitlab-ssh.wikimedia.org:".insteadOf " git(a)gitlab.wikimedia.org:" Per-repo rewrites, CI jobs and ~/.ssh/config are covered in the migration guide <https://wikitech.wikimedia.org/wiki/GitLab/Migration>. wmf-laptop <https://wikitech.wikimedia.org/wiki/Wmf-laptop> has been updated, so wmf-update-known-hosts-production and wmf-update-ssh-config will reflect the change. Questions and feedback welcome on the task <https://phabricator.wikimedia.org/T425441>. Thanks! -- *Arnaud Bran* (he/him) Senior Site Reliability Engineer Wikimedia Foundation <https://wikimediafoundation.org/>

3 3

June 3rd maintenance of CI servers
by Daniel Zahn 07 Jul '26

07 Jul '26

Hello developers, in a week, on June 3rd 2026, between 15:00 and 16:00 UTC (8am - 9am PST) we are going to perform maintenance on our Continuous Integration servers. We are switching Jenkins CI to a new host and will upgrade Java on integration nodes. While we are trying to keep the period as short as possible please expect some downtime to CI and getting patches verified. The maintenance has been added to the deployment calendar. Best, SRE collaboration services & Release Engineering teams -- Daniel Zahn <dzahn(a)wikimedia.org> Site Reliability Engineer

1 2

Announcing MediaWiki 1.46.0
by Mateus Santos 01 Jul '26

01 Jul '26

I am happy to announce the availability of the general release of MediaWiki 1.46! Tarballs have already been uploaded, and the git tag has been pushed. Thanks to everyone who helped out with this release, especially thanks to those who tested out the release candidate and provided feedback, as well as the developers who worked on fixes for the 1.46 final release. To see what's changed in 1.46, see the release notes file.[0] If you encounter any issues, please file a task.[1] You can see open tasks for the branch on Phabricator.[2] MediaWiki 1.46 is due to be supported until the end of July 2026. It's important to note that 1.46.0 is shipped with the changes released on the current security and maintenance release. === Changes since MediaWiki 1.46.0-rc.0 === * (T422244, CVE-2026-58025) SECURITY: Safely unserialize log entry parameters [CVE-2026-58025] * (T422995, CVE-2026-58037) SECURITY: LogFormatter: 'raw' parameter format is no longer raw HTML [CVE-2026-58037] * (T422676, CVE-2026-58029) SECURITY: Check for editmyprivateinfo right in more places [CVE-2026-58029] * (T422085, CVE-2026-58024) SECURITY: Restrict interwiki user lookup in ApiUserrights [CVE-2026-58024] * (T299359, CVE-2026-58026) SECURITY: Make sure the actual title that's being transcluded is includable [CVE-2026-58026] * (T426867, CVE-2026-58032) SECURITY: mw.Api.getErrorMessage: Treat formatversion=1 as text [CVE-2026-58032] * (T427235, CVE-2026-58033) SECURITY: Exclude rev-deleted usernames from distinct authors query [CVE-2026-58033] * (T422306, CVE-2026-58028) SECURITY: Disallow user JS in pretty-print api.php responses [CVE-2026-58028] * (T425406, CVE-2026-58036) SECURITY: Fix ApiQueryUsers leaking status of private user conditions for user [CVE-2026-58036] * (T428809, CVE-2026-58035) SECURITY: Parse message using v-i18n-html instead of using v-html * (T423617) Check the target url for redirects are allowed * (T383047) Mail: Log PHP mail() send failures with recipient count * (T429720) FileRepo: Fix typos in schema compatibility checks * (T383047) Mail: Extract sendWithMailFunction() from UserMailer::send() * (T429965) Updated guzzlehttp/guzzle from 7.12.1 to 7.12.3 * (T429826) Updated guzzlehttp/guzzle from 7.10.0 to 7.12.1 * (T428406) LocalFileMoveBatch: Also update fr_archive_name when moving file * (T424462) tests: Limit ResourcesTest::testRespond to general-purpose skins * (T424462) tests: loop modules inside ResourcesTest::testRespond * (T428289) Email confirmation banner: Remove Test Kitchen A/B test scaffolding * (T421366) Email confirmation banner: Remove obsolete arm_b variant * (T427622) Store indicators in ContentHolder: forward compatibility * changePassword: Add reason option for password change * (T425818) changePassword: Log password change to authentication log Release notes: [0] https://gerrit.wikimedia.org/r/plugins/gitiles/mediawiki/core/+/refs/heads/… Bug report form: [1] https://phabricator.wikimedia.org/maniphest/task/edit/form/1/?tags=MW-1.46-… Open Bugs: [2] https://phabricator.wikimedia.org/tag/mw-1.46-release/ ********************************************************************** Download: https://releases.wikimedia.org/mediawiki/1.46/mediawiki-1.46.0.tar.gz https://releases.wikimedia.org/mediawiki/1.46/mediawiki-1.46.0.zip Download without bundled extensions: https://releases.wikimedia.org/mediawiki/1.46/mediawiki-core-1.46.0.tar.gz https://releases.wikimedia.org/mediawiki/1.46/mediawiki-core-1.46.0.zip Patch to previous version (1.46.0-rc.0): https://releases.wikimedia.org/mediawiki/1.46/mediawiki-1.46.0.patch.gz https://releases.wikimedia.org/mediawiki/1.46/mediawiki-1.46.0.patch.zip GPG signatures for the above: https://releases.wikimedia.org/mediawiki/1.46/mediawiki-core-1.46.0.tar.gz.… https://releases.wikimedia.org/mediawiki/1.46/mediawiki-core-1.46.0.zip.sig https://releases.wikimedia.org/mediawiki/1.46/mediawiki-1.46.0.tar.gz.sig https://releases.wikimedia.org/mediawiki/1.46/mediawiki-1.46.0.zip.sig https://releases.wikimedia.org/mediawiki/1.46/mediawiki-1.46.0.patch.gz.sig https://releases.wikimedia.org/mediawiki/1.46/mediawiki-1.46.0.patch.zip.sig Public keys: https://www.mediawiki.org/keys/keys.html

1 1

Security and maintenance release: 1.43.9 / 1.44.6 / 1.45.4
by Sam Reed 29 Jun '26

29 Jun '26

I would like to announce the release of MediaWiki 1.43.9, 1.44.6 and 1.45.4! These releases serve as security and maintenance releases for these branches. The tarballs have already been uploaded as of this email, and the git tags have been pushed. A "MediaWiki Extensions Security Release Supplement" e-mail will follow this one, covering security updates for non-bundled extensions. Reports of bugs with PHP 8.1 to 8.5 support are particularly welcome, and fixes will be back-ported when possible. If you find issues that haven't been backported, please report these too, referring to the relevant supported release. PHP 8.x workboards: * https://phabricator.wikimedia.org/tag/php_8.1_support/ * https://phabricator.wikimedia.org/tag/php_8.2_support/ * https://phabricator.wikimedia.org/tag/php_8.3_support/ * https://phabricator.wikimedia.org/tag/php_8.4_support/ * https://phabricator.wikimedia.org/tag/php_8.5_support/ As a reminder, MediaWiki 1.39 became EOL in December 2025 and MediaWiki 1.42 became EOL in June 2025. MediaWiki 1.44 becomes EOL at the end of July 2026. MediaWiki 1.46 is due to be released following this security release. == Security fixes == === MediaWiki Core === T422244 - LogItem RCE When importing log entries (a right only given to sysops by default), due to insecure deserialization, it is possible to use a specially crafted XML file to trigger both arbitrary file write vulnerability (if insecure file permissions allow [3]) and also a Remote Code Execution vulnerability in MediaWiki core. After upgrading, you can remove these lines from your LocalSettings.php: $wgRevokePermissions['*']['importupload'] = true; $wgRevokePermissions['*']['import'] = true; * (T425406, CVE-2026-58036) SECURITY: Fix ApiQueryUsers leaking status of private user conditions for user. * (T422306, CVE-2026-58028) SECURITY: Disallow user JS in pretty-print api.php responses. * (T427235, CVE-2026-58033) SECURITY: Exclude rev-deleted usernames from distinct authors query. * (T426867, CVE-2026-58032) SECURITY: mw.Api.getErrorMessage: Treat formatversion=1 as text. * (T299359, CVE-2026-58026) SECURITY: Make sure the actual title that's being transcluded is includable. * (T422085, CVE-2026-58024) SECURITY: Restrict interwiki user lookup in ApiUserrights. * (T422676, CVE-2026-58029) SECURITY: Check for editmyprivateinfo right in more places. * (T422995, CVE-2026-58037) SECURITY: LogFormatter: 'raw' parameter format is no longer raw HTML. * (T422244, CVE-2026-58025) SECURITY: Safely unserialize log entry parameters. === AbuseFilter === * (T406954, CVE-2026-58027) SECURITY: Hide hit count for private/protected filters in API. === SyntaxHighlight_GeSHi === * (T427167, CVE-2026-58030) SECURITY: Escape linelinks argument before passing it on to Pygments. === Timeline === As per the pre-release email, while it is not bundled with the release, the Timeline issues are included because it is used by Wikimedia wikis and is also widely used across the MediaWiki installation ecosystem. You can re-enable the extension after you have updated the extension. Non-bundled extension security issues: T426631 - RCE A Remote Code Execution vulnerability exists in the perl script that EasyTimeline executes to render the timelines. If you run EasyTimeline in a similar fashion to Wikimedia Production, where EasyTimeline’s perl scripts are executed in a remote shellbox (vm or kubernetes), exposure is more limited. T427611 - Stored XSS in SVG file output It is possible to store an XSS in the SVG files generated by timeline. These aren’t used by MediaWiki by default (though they may be used for RTL timelines), but these files would still be hosted by your wiki, and could be hot linked elsewhere. * (T426631, CVE-2026-8857) SECURITY: EasyTimeline: Harden against script injection via TextData. * (T426631, CVE-2026-8857) SECURITY: EasyTimeline: Strip newlines from BarData and Scale text. * (T427611, CVE-2026-58038) SECURITY: Run timeline generated SVG through MW upload checks. == Links to all mentioned tasks == * https://phabricator.wikimedia.org/T299359 * https://phabricator.wikimedia.org/T406954 * https://phabricator.wikimedia.org/T422085 * https://phabricator.wikimedia.org/T422244 * https://phabricator.wikimedia.org/T422306 * https://phabricator.wikimedia.org/T422676 * https://phabricator.wikimedia.org/T422995 * https://phabricator.wikimedia.org/T425406 * https://phabricator.wikimedia.org/T426631 * https://phabricator.wikimedia.org/T426867 * https://phabricator.wikimedia.org/T427167 * https://phabricator.wikimedia.org/T427235 * https://phabricator.wikimedia.org/T427611 == Release notes == Full release notes for 1.43.9: https://phabricator.wikimedia.org/diffusion/MW/browse/REL1_43/RELEASE-NOTES… https://www.mediawiki.org/wiki/Release_notes/1.43 Full release notes for 1.44.6: https://phabricator.wikimedia.org/diffusion/MW/browse/REL1_44/RELEASE-NOTES… https://www.mediawiki.org/wiki/Release_notes/1.44 Full release notes for 1.45.4: https://phabricator.wikimedia.org/diffusion/MW/browse/REL1_45/RELEASE-NOTES… https://www.mediawiki.org/wiki/Release_notes/1.45 For information about how to upgrade, see <https://www.mediawiki.org/wiki/Manual:Upgrading> ********************************************************************** Download: https://releases.wikimedia.org/mediawiki/1.43/mediawiki-1.43.9.tar.gz https://releases.wikimedia.org/mediawiki/1.43/mediawiki-1.43.9.zip Download without bundled extensions: https://releases.wikimedia.org/mediawiki/1.43/mediawiki-core-1.43.9.tar.gz https://releases.wikimedia.org/mediawiki/1.43/mediawiki-core-1.43.9.zip Patch to previous version (1.43.8): https://releases.wikimedia.org/mediawiki/1.43/mediawiki-1.43.9.patch.gz https://releases.wikimedia.org/mediawiki/1.43/mediawiki-1.43.9.patch.zip GPG signatures: https://releases.wikimedia.org/mediawiki/1.43/mediawiki-core-1.43.9.tar.gz.… https://releases.wikimedia.org/mediawiki/1.43/mediawiki-core-1.43.9.zip.sig https://releases.wikimedia.org/mediawiki/1.43/mediawiki-1.43.9.tar.gz.sig https://releases.wikimedia.org/mediawiki/1.43/mediawiki-1.43.9.zip.sig https://releases.wikimedia.org/mediawiki/1.43/mediawiki-1.43.9.patch.gz.sig https://releases.wikimedia.org/mediawiki/1.43/mediawiki-1.43.9.patch.zip.sig Public keys: https://www.mediawiki.org/keys/keys.html ********************************************************************** Download: https://releases.wikimedia.org/mediawiki/1.44/mediawiki-1.44.6.tar.gz https://releases.wikimedia.org/mediawiki/1.44/mediawiki-1.44.6.zip Download without bundled extensions: https://releases.wikimedia.org/mediawiki/1.44/mediawiki-core-1.44.6.tar.gz https://releases.wikimedia.org/mediawiki/1.44/mediawiki-core-1.44.6.zip Patch to previous version (1.44.5): https://releases.wikimedia.org/mediawiki/1.44/mediawiki-1.44.6.patch.gz https://releases.wikimedia.org/mediawiki/1.44/mediawiki-1.44.6.patch.zip GPG signatures: https://releases.wikimedia.org/mediawiki/1.44/mediawiki-core-1.44.6.tar.gz.… https://releases.wikimedia.org/mediawiki/1.44/mediawiki-core-1.44.6.zip.sig https://releases.wikimedia.org/mediawiki/1.44/mediawiki-1.44.6.tar.gz.sig https://releases.wikimedia.org/mediawiki/1.44/mediawiki-1.44.6.zip.sig https://releases.wikimedia.org/mediawiki/1.44/mediawiki-1.44.6.patch.gz.sig https://releases.wikimedia.org/mediawiki/1.44/mediawiki-1.44.6.patch.zip.sig Public keys: https://www.mediawiki.org/keys/keys.html ********************************************************************** Download: https://releases.wikimedia.org/mediawiki/1.45/mediawiki-1.45.4.tar.gz https://releases.wikimedia.org/mediawiki/1.45/mediawiki-1.45.4.zip Download without bundled extensions: https://releases.wikimedia.org/mediawiki/1.45/mediawiki-core-1.45.4.tar.gz https://releases.wikimedia.org/mediawiki/1.45/mediawiki-core-1.45.4.zip Patch to previous version (1.45.3): https://releases.wikimedia.org/mediawiki/1.45/mediawiki-1.45.4.patch.gz https://releases.wikimedia.org/mediawiki/1.45/mediawiki-1.45.4.patch.zip GPG signatures: https://releases.wikimedia.org/mediawiki/1.45/mediawiki-core-1.45.4.tar.gz.… https://releases.wikimedia.org/mediawiki/1.45/mediawiki-core-1.45.4.zip.sig https://releases.wikimedia.org/mediawiki/1.45/mediawiki-1.45.4.tar.gz.sig https://releases.wikimedia.org/mediawiki/1.45/mediawiki-1.45.4.zip.sig https://releases.wikimedia.org/mediawiki/1.45/mediawiki-1.45.4.patch.gz.sig https://releases.wikimedia.org/mediawiki/1.45/mediawiki-1.45.4.patch.zip.sig Public keys: https://www.mediawiki.org/keys/keys.html

1 0

Tech News 2026 - Issue 27
by Sandister Tei 29 Jun '26

29 Jun '26

1 0

Security pre-release announcement: 1.43.9 / 1.44.6 / 1.45.4
by Sam Reed 26 Jun '26

26 Jun '26

Hi all, On Monday (2026-06-29) we will be issuing a security and maintenance release to all supported branches of MediaWiki. Due to the complexity of various patches that will be released as part of this, they will be made public in Gerrit before the tarballs and git tags are made. We have therefore referenced mitigations for some high severity issues both in the referenced tickets and below. It is strongly recommended to apply the mitigations to your MediaWiki installs ASAP, before the patches are released. While Timeline/EasyTimeline[2] is *not* a MW Bundled extension, it is used on Wikimedia wikis and is also widely used across the MediaWiki installation ecosystem; it is therefore flagged for your attention due to the issues found. If you do not have this extension installed, you do not need to do anything for that mitigation. The new releases will be: - 1.43.9 - 1.44.6 - 1.45.4 These security issues will also be included in 1.46.0, which is due to be released afterwards. Security issues: MediaWiki Core: https://phabricator.wikimedia.org/T422244 - RCE Mitigation patch: Making use of $wgRevokePermissions [4], the following lines can be added to your LocalSettings.php; it will temporarily disable all importing and therefore prevent malicious files being imported by any user: $wgRevokePermissions['*']['importupload'] = true; $wgRevokePermissions['*']['import'] = true; You will want to remove these lines once you have applied the security patches/upgraded to the latest point release versions. We recommend that you restrict imports to trusted users. Non-bundled extension security issues: Timeline: https://phabricator.wikimedia.org/T426631 - RCE A Remote Code Execution vulnerability exists in the perl script that EasyTimeline executes to render the timelines. If you run EasyTimeline in a similar fashion to Wikimedia Production, where EasyTimeline’s perl scripts are executed in a remote shellbox (vm or kubernetes), exposure is more limited. Mitigation: Disable timeline (EasyTimeline) extension until patches are released, especially if you do not run the execution in a remote shellbox. Or if you have access to the security tasks, apply the patch from the task. Timeline: https://phabricator.wikimedia.org/T427611 - Stored XSS in SVG file output It is possible to store an XSS in the SVG files generated by timeline. These aren’t used by MediaWiki by default (though they may be used for RTL timelines), but these files would still be hosted by your wiki, and could be hot linked elsewhere. Mitigation: Disable timeline (EasyTimeline) extension until patches are released, especially if you do not run the execution in a remote shellbox. Or if you have access to the security tasks, apply the patch from the task. Appropriate CSP configuration can also help prevent XSS vectors such as this. — This release will also resolve security issues in bundled extensions, along with bug fixes included for maintenance reasons. These security issues also affect many unsupported versions of MediaWiki. We will make the fixes available in the respective release branches and master in git. Tarballs will be available for the above mentioned point releases as well. A summary of some of the security fixes that have gone into non-bundled MediaWiki extensions will also follow later. As a reminder, MediaWiki 1.39 became EOL in December 2025 and MediaWiki 1.42 became EOL in June 2025. MediaWiki 1.44 becomes EOL at the end of July 2026. MediaWiki 1.46 is due to be released following this security release. More information on these timelines can be viewed on the version lifecycle page at [1]. Thank you, Wikimedia Foundation, Product Safety and Integrity security-help(a)wikimedia.org [1] https://www.mediawiki.org/wiki/Version_lifecycle [2] https://www.mediawiki.org/wiki/Extension:EasyTimeline [3] https://www.mediawiki.org/wiki/Manual:Security#File_permissions [4] https://www.mediawiki.org/wiki/Manual:$wgRevokePermissions

1 0

🌱 Fresh 26.06 released
by Krinkle 25 Jun '26

25 Jun '26

TLDR: fresh-node24 is now the default. Get started: https://gerrit.wikimedia.org/g/fresh#fresh-environment Detailed changelog: https://gerrit.wikimedia.org/g/fresh/+/HEAD/CHANGELOG.md Commits: https://gerrit.wikimedia.org/r/q/project:fresh+is:merged *What's new?* The fresh-node24 command uses the same "node24-test-browser" Docker image that is also available to Jenkins jobs in WMF CI. As of May 2026, most repositories in Gerrit have upgraded their Node-jobs to use Node.js 24. https://phabricator.wikimedia.org/T395926 As such, fresh-node24 has been promoted to be the default when you run the "fresh-node" alias. This release adds a new "--help" option to all fresh-node commands which explains the available options and how to use them. This was previously limited to a doc block in the source code. Thanks to @LazyShrey for contributing this! https://phabricator.wikimedia.org/T424867 The fresh-node20, fresh-node22, and fresh-node24 commands were updated to reflect their latest WMF CI counterparts including: minor Node.js updates, and minor updates from Debian packages such as Firefox 128 to 140 and Chromium 140 to 147. To report issues or browse tasks, find us on Phabricator at https://phabricator.wikimedia.org/tag/fresh/ *What is Fresh?* Fresh is a fast way to launch isolated environments from your terminal. These can be used to work more securely and responsibly <https://timotijhof.net/posts/2019/protect-yourself-from-npm/> with Node.js-based developer tools, especially those installed from npm such as ESLint, QUnit, Grunt, Webdriver, and more. Example guide: https://www.mediawiki.org/wiki/Manual:JavaScript_unit_testing. Get started https://gerrit.wikimedia.org/g/fresh#fresh-environment -- Timo Tijhof

1 0

Tech News 2026 - Issue 26
by Benoît Evellin (Trizek) 23 Jun '26

23 Jun '26

1 0

June Global GLAM Call
by Connor Benedict 18 Jun '26

18 Jun '26

Hello, Next week on tuesday, 23 June, at 8:00UTC is the next Global GLAM Call. Please be sure to register in advance to receive the Zoom link in time to join the call. This month we’re very happy to count on simulatenous interpretation in Arabic, French, and Kiswahili! Spread the word. On the agenda we have info about the Wikimania Hackathon, a GLAM Tool Hospital, Spatial Reconstruction, info about Event Registration extension from WMF, and a preview of the new Content Partnerships Hub visual identity! Hope to see you online. https://meta.wikimedia.org/wiki/Event:Global_GLAM_call_2026-06-23#Introduct… Best, Connor

1 0

Tech News 2026 - Issue 25
by Uzoma Ozurumba 16 Jun '26

16 Jun '26

Latest *tech news <https://meta.wikimedia.org/wiki/Special:MyLanguage/Tech/News>* from the Wikimedia technical community. Please tell other users about these changes. Not all changes will affect you. Translations <https://meta.wikimedia.org/wiki/Special:MyLanguage/Tech/News/2026/25> are available. *Weekly highlight* - The Reader Growth team <https://www.mediawiki.org/wiki/Special:MyLanguage/Readers/Reader_Growth> has launched an Image Browsing <https://www.mediawiki.org/wiki/Special:MyLanguage/Readers/Reader_Growth/Ima…> beta feature on the mobile web version of all Wikipedias. The feature shows an image carousel at the top of articles with 3 or more images. Editors can configure this feature with the following controls: to hide a specific image from a page, either use class=notpageimage excluding it from thumbnail previews, or class=noviewer excluding it from MediaViewer. The carousel can also be disabled from a page entirely, with the magic word __NOMEDIAVIEWERCAROUSEL__. To submit feedback or flag bugs, please visit the project page <https://www.mediawiki.org/wiki/Talk:Readers/Reader_Growth/Image_Browsing> . - Wikitables <https://www.mediawiki.org/wiki/Special:MyLanguage/Help:Tables#class=%22wiki…> can now be sorted in descending order <https://www.mediawiki.org/wiki/Special:MyLanguage/Help:Sortable_tables#Forc…> on the first click by adding data-sort-order="desc" to the header cell. Previously, by default, clicking a column header for the first time sorts it in ascending order. This addition to a Wikitable gives it more control and flexibility, while the default behavior for subsequent clicks remains unchanged. [1] <https://phabricator.wikimedia.org/T398416> *Updates for editors* - The Article guidance <https://www.mediawiki.org/wiki/Special:MyLanguage/Article_guidance> feature is currently being tested with some editors creating new articles on the Simple English, French, and Turkish Wikipedias. The experiment will soon begin on the Arabic and Bangla Wikipedias as well. This feature <https://en.wikipedia.org/wiki/simple:Special:NewArticle> gives editors community-curated guidance to help them create articles that follow community standards. Experienced editors can continue creating or adapting outlines for specific article types that are commonly created by less experienced contributors. The outlines guide less experienced editors in creating high-quality articles. A quick guide to markups used in outlines can be found on this page <https://www.mediawiki.org/wiki/Special:MyLanguage/Article_guidance/Test_fea…> . Example outlines <https://en.wikipedia.org/wiki/simple:Wikipedia:Article_Guidance> that can be adapted and instructions for how to adapt them are on this section <https://www.mediawiki.org/wiki/Special:MyLanguage/Article_guidance#Adapting…> of the project page. - Wikis that wish to replace the "indefinitely" button in Special:Block for temporary accounts (for example, wikis that block temporary users only until account expiration) will be able to do so by creating MediaWiki:ipb-indefinite-expiry-temporary-account <https://meta.wikimedia.org/wiki/MediaWiki:Ipb-indefinite-expiry-temporary-a…> with the block duration they want. [2] <https://phabricator.wikimedia.org/T427125> - View all 41 community-submitted tasks that were resolved last week <https://meta.wikimedia.org/wiki/Special:MyLanguage/Tech/News/Recently_resol…> . *Updates for technical contributors* - By the end of June, a valid user-agent string will be required for automated dumps downloads from the dumps.wikimedia.org website. Automated requests that provide a generic or empty user-agent will be blocked. This extends enforcement <https://phabricator.wikimedia.org/T400119> of the long standing user-agent policy <https://foundation.wikimedia.org/wiki/Special:MyLanguage/Policy:Wikimedia_F…>. Access to dumps through Wikimedia Cloud Services will not change. - The roll out of global API rate limits <https://www.mediawiki.org/wiki/Wikimedia_APIs/Rate_limits> is now complete, with limits enforced across all APIs and at the documented levels for all groups. Bots running in Toolforge/WMCS or with the bot user right on any wiki remain exempt. All bots should continue to follow the documented best practices to avoid being rate limited. - The API Portal wiki <https://api.wikimedia.org/wiki/Main_Page> will be read only starting this week (June 15-18). The following week (June 22-25), all API Portal wiki URLs will redirect to Wikimedia APIs on mediawiki.org <https://www.mediawiki.org/wiki/Wikimedia_APIs>. Learn more on the project page <https://wikitech.wikimedia.org/wiki/API_Portal/Deprecation>. - Detailed code updates later this week: MediaWiki <https://www.mediawiki.org/wiki/MediaWiki_1.47/wmf.7> *Meetings and events* - On June 17th at 6pm UTC the WMF will be holding Discord call focused on a code review. We've heard through the Developer Satisfaction Survey <https://www.mediawiki.org/wiki/Special:MyLanguage/Developer_Satisfaction_Su…> that volunteers are struggling with code review and we'd like to discuss these experiences with the goal of surfacing workable solutions. You can join the call via the Wikimedia Community Discord server <https://discord.gg/wikipedia?event=1514727511102062664>. - The Latin American Wikimedia Conference <https://meta.wikimedia.org/wiki/Special:MyLanguage/Conferencia_Wikimedia_de…> will host a regional hackathon that will bring together the Wikimedia movement’s technical community including developers, system administrators, data scientists, and users with extended rights. Interested technical contributors can apply for a scholarship <https://docs.google.com/forms/d/e/1FAIpQLSf4osJzTHBJjQbYJk7TMVEJjTEQv7IgtsU…> to participate until June 21 at midnight (Bolivia time, UTC-4). - Sign up for Wikimania Team Challenges to join this special event. The Team challenges will take place online and in person from July 21 to 22, before Wikimania conference. Everyone is welcome, regardless of skills or Wikimania registration. Teams will work on 10 important challenges supporting the Wikimedia community. For details, visit the Team Challenges page <https://wikimania.wikimedia.org/wiki/Special:MyLanguage/2026:Team_challenges> and register there <https://wikimedia.eventyay.com/wm/teamchallenges/>. Registration closes on June 20th at 11pm UTC. *Tech news <https://meta.wikimedia.org/wiki/Special:MyLanguage/Tech/News> prepared by Tech News writers <https://meta.wikimedia.org/wiki/Special:MyLanguage/Tech/News/Writers> and posted by bot <https://meta.wikimedia.org/wiki/Special:MyLanguage/User:MediaWiki_message_d…> • Contribute <https://meta.wikimedia.org/wiki/Special:MyLanguage/Tech/News#contribute> • Translate <https://meta.wikimedia.org/wiki/Special:MyLanguage/Tech/News/2026/25> • Get help <https://meta.wikimedia.org/wiki/Tech> • Give feedback <https://meta.wikimedia.org/wiki/Talk:Tech/News> • Subscribe or unsubscribe <https://meta.wikimedia.org/wiki/Global_message_delivery/Targets/Tech_ambass…>.* -- Uzoma Ozurumba (She/her) Movement Communications Specialist (Product and Tech) meta.wikimedia.org/wiki/User:UOzurumba_(WMF)

2 1

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

Wikitech-l June 2026