Wikitech-l July 2026

wikitech-l@lists.wikimedia.org

23 participants
24 discussions

[Breaking Change] Action API: removal of "extension" tag source in ApiQueryTags
by Aaron Schulz 01 Jul '26

01 Jul '26

Hello, In MediaWiki 1.42, within the list=tag API query module, the tag source type named "extension" was renamed to "software" [1]. The "extension" entries were made to still appear alongside "software" in the tag source list but were deprecated [2][3]. There are plans to remove this compatibility behavior in the next major version of MediaWiki (1.47), so that the "extension" entries will no longer appear. The use of "extension" is misleading because it does not exclusively refer to tags defined by MediaWiki extensions (via the onListDefinedTags hook), but also those defined in MediaWiki core (via ChangeTagsStore::DEFINED_SOFTWARE_TAGS). The distinction isn't really useful to clients anyway. [1] https://phabricator.wikimedia.org/T247552 [2] https://en.wikipedia.org/w/api.php?action=query&list=tags&tgprop=source&tgl… [3] https://lists.wikimedia.org/hyperkitty/list/mediawiki-api-announce@lists.wi…

1 0

Announcing MediaWiki 1.46.0
by Mateus Santos 01 Jul '26

01 Jul '26

I am happy to announce the availability of the general release of MediaWiki 1.46! Tarballs have already been uploaded, and the git tag has been pushed. Thanks to everyone who helped out with this release, especially thanks to those who tested out the release candidate and provided feedback, as well as the developers who worked on fixes for the 1.46 final release. To see what's changed in 1.46, see the release notes file.[0] If you encounter any issues, please file a task.[1] You can see open tasks for the branch on Phabricator.[2] MediaWiki 1.46 is due to be supported until the end of July 2026. It's important to note that 1.46.0 is shipped with the changes released on the current security and maintenance release. === Changes since MediaWiki 1.46.0-rc.0 === * (T422244, CVE-2026-58025) SECURITY: Safely unserialize log entry parameters [CVE-2026-58025] * (T422995, CVE-2026-58037) SECURITY: LogFormatter: 'raw' parameter format is no longer raw HTML [CVE-2026-58037] * (T422676, CVE-2026-58029) SECURITY: Check for editmyprivateinfo right in more places [CVE-2026-58029] * (T422085, CVE-2026-58024) SECURITY: Restrict interwiki user lookup in ApiUserrights [CVE-2026-58024] * (T299359, CVE-2026-58026) SECURITY: Make sure the actual title that's being transcluded is includable [CVE-2026-58026] * (T426867, CVE-2026-58032) SECURITY: mw.Api.getErrorMessage: Treat formatversion=1 as text [CVE-2026-58032] * (T427235, CVE-2026-58033) SECURITY: Exclude rev-deleted usernames from distinct authors query [CVE-2026-58033] * (T422306, CVE-2026-58028) SECURITY: Disallow user JS in pretty-print api.php responses [CVE-2026-58028] * (T425406, CVE-2026-58036) SECURITY: Fix ApiQueryUsers leaking status of private user conditions for user [CVE-2026-58036] * (T428809, CVE-2026-58035) SECURITY: Parse message using v-i18n-html instead of using v-html * (T423617) Check the target url for redirects are allowed * (T383047) Mail: Log PHP mail() send failures with recipient count * (T429720) FileRepo: Fix typos in schema compatibility checks * (T383047) Mail: Extract sendWithMailFunction() from UserMailer::send() * (T429965) Updated guzzlehttp/guzzle from 7.12.1 to 7.12.3 * (T429826) Updated guzzlehttp/guzzle from 7.10.0 to 7.12.1 * (T428406) LocalFileMoveBatch: Also update fr_archive_name when moving file * (T424462) tests: Limit ResourcesTest::testRespond to general-purpose skins * (T424462) tests: loop modules inside ResourcesTest::testRespond * (T428289) Email confirmation banner: Remove Test Kitchen A/B test scaffolding * (T421366) Email confirmation banner: Remove obsolete arm_b variant * (T427622) Store indicators in ContentHolder: forward compatibility * changePassword: Add reason option for password change * (T425818) changePassword: Log password change to authentication log Release notes: [0] https://gerrit.wikimedia.org/r/plugins/gitiles/mediawiki/core/+/refs/heads/… Bug report form: [1] https://phabricator.wikimedia.org/maniphest/task/edit/form/1/?tags=MW-1.46-… Open Bugs: [2] https://phabricator.wikimedia.org/tag/mw-1.46-release/ ********************************************************************** Download: https://releases.wikimedia.org/mediawiki/1.46/mediawiki-1.46.0.tar.gz https://releases.wikimedia.org/mediawiki/1.46/mediawiki-1.46.0.zip Download without bundled extensions: https://releases.wikimedia.org/mediawiki/1.46/mediawiki-core-1.46.0.tar.gz https://releases.wikimedia.org/mediawiki/1.46/mediawiki-core-1.46.0.zip Patch to previous version (1.46.0-rc.0): https://releases.wikimedia.org/mediawiki/1.46/mediawiki-1.46.0.patch.gz https://releases.wikimedia.org/mediawiki/1.46/mediawiki-1.46.0.patch.zip GPG signatures for the above: https://releases.wikimedia.org/mediawiki/1.46/mediawiki-core-1.46.0.tar.gz.… https://releases.wikimedia.org/mediawiki/1.46/mediawiki-core-1.46.0.zip.sig https://releases.wikimedia.org/mediawiki/1.46/mediawiki-1.46.0.tar.gz.sig https://releases.wikimedia.org/mediawiki/1.46/mediawiki-1.46.0.zip.sig https://releases.wikimedia.org/mediawiki/1.46/mediawiki-1.46.0.patch.gz.sig https://releases.wikimedia.org/mediawiki/1.46/mediawiki-1.46.0.patch.zip.sig Public keys: https://www.mediawiki.org/keys/keys.html

1 1

Many Database Connection Errors last night
by Martin Domdey 01 Jul '26

01 Jul '26

Hi! While editing dewiki last night I got many internal_api_error_DBConnectionErrors 200 last night. With this I send you the headers. What was or is the problem? Solution maybe: Isn't it possible, to catch such errors on your side and repeat the api action? Thanks, Martin aka Doc Taxon headers(age) = 12 headers(cache-control) = private, must-revalidate, max-age=0 headers(content-disposition) = inline; filename=api-result.json headers(content-encoding) = gzip headers(content-length) = 200 headers(content-security-policy) = default-src 'self'; script-src 'none'; object-src 'none' headers(content-type) = application/json; charset=utf-8 headers(date) = Wed, 01 Jul 2026 00:26:34 GMT headers(http) = HTTP/2 200 headers(mediawiki-api-error) = internal_api_error_DBConnectionError headers(nel) = { "report_to": "wm_nel", "max_age": 604800, "failure_fraction": 0.0 5, "success_fraction": 0.0} headers(report-to) = { "group": "wm_nel", "max_age": 604800, "endpoints": [{ "url": "htt ps:// intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_erro… ingapi/network_error/1.0.0" }] } headers(server) = mw-api-ext.eqiad.main-694cc968b-j589w headers(server-timing) = cache;desc="pass", host;desc="cp1100" headers(strict-transport-security) = max-age=106384710; includeSubDomains; preload headers(vary) = Accept-Encoding,User-Agent headers(x-cache) = cp1100 pass, cp1100 pass headers(x-cache-status) = pass headers(x-client-ip) = 2a02:ec80:a000:1::2ff headers(x-content-type-options) = nosniff headers(x-frame-options) = DENY headers(x-request-id) = 224a2e3b-1c58-449f-998b-69eadd20f3c5 headers(age) = 8 headers(cache-control) = private, must-revalidate, max-age=0 headers(content-disposition) = inline; filename=api-result.json headers(content-encoding) = gzip headers(content-length) = 200 headers(content-security-policy) = default-src 'self'; script-src 'none'; object-src 'none' headers(content-type) = application/json; charset=utf-8 headers(date) = Wed, 01 Jul 2026 00:26:44 GMT headers(http) = HTTP/2 200 headers(mediawiki-api-error) = internal_api_error_DBConnectionError headers(nel) = { "report_to": "wm_nel", "max_age": 604800, "failure_fraction": 0.0 5, "success_fraction": 0.0} headers(report-to) = { "group": "wm_nel", "max_age": 604800, "endpoints": [{ "url": "htt ps:// intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_erro… ingapi/network_error/1.0.0" }] } headers(server) = mw-api-ext.eqiad.main-694cc968b-g64jn headers(server-timing) = cache;desc="pass", host;desc="cp1100" headers(strict-transport-security) = max-age=106384710; includeSubDomains; preload headers(vary) = Accept-Encoding,User-Agent headers(x-cache) = cp1100 pass, cp1100 pass headers(x-cache-status) = pass headers(x-client-ip) = 2a02:ec80:a000:1::2ff headers(x-content-type-options) = nosniff headers(x-frame-options) = DENY headers(x-request-id) = a166a3d0-5bf1-4254-aa04-ef0df74be70e headers(age) = 6 headers(cache-control) = private, must-revalidate, max-age=0 headers(content-disposition) = inline; filename=api-result.json headers(content-encoding) = gzip headers(content-length) = 199 headers(content-security-policy) = default-src 'self'; script-src 'none'; object-src 'none' headers(content-type) = application/json; charset=utf-8 headers(date) = Wed, 01 Jul 2026 00:26:54 GMT headers(http) = HTTP/2 200 headers(mediawiki-api-error) = internal_api_error_DBConnectionError headers(nel) = { "report_to": "wm_nel", "max_age": 604800, "failure_fraction": 0.0 5, "success_fraction": 0.0} headers(report-to) = { "group": "wm_nel", "max_age": 604800, "endpoints": [{ "url": "htt ps:// intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_erro… ingapi/network_error/1.0.0" }] } headers(server) = mw-api-ext.eqiad.main-694cc968b-256kl headers(server-timing) = cache;desc="pass", host;desc="cp1100" headers(strict-transport-security) = max-age=106384710; includeSubDomains; preload headers(vary) = Accept-Encoding,User-Agent headers(x-cache) = cp1100 pass, cp1100 pass headers(x-cache-status) = pass headers(x-client-ip) = 2a02:ec80:a000:1::2ff headers(x-content-type-options) = nosniff headers(x-frame-options) = DENY headers(x-request-id) = 309edfc8-bdf1-431f-804a-8830208cbe32 headers(age) = 6 headers(cache-control) = private, must-revalidate, max-age=0 headers(content-disposition) = inline; filename=api-result.json headers(content-encoding) = gzip headers(content-length) = 200 headers(content-security-policy) = default-src 'self'; script-src 'none'; object-src 'none' headers(content-type) = application/json; charset=utf-8 headers(date) = Wed, 01 Jul 2026 00:29:14 GMT headers(http) = HTTP/2 200 headers(mediawiki-api-error) = internal_api_error_DBConnectionError headers(nel) = { "report_to": "wm_nel", "max_age": 604800, "failure_fraction": 0.0 5, "success_fraction": 0.0} headers(report-to) = { "group": "wm_nel", "max_age": 604800, "endpoints": [{ "url": "htt ps:// intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_erro… ingapi/network_error/1.0.0" }] } headers(server) = mw-api-ext.eqiad.main-694cc968b-mqqdw headers(server-timing) = cache;desc="pass", host;desc="cp1100" headers(strict-transport-security) = max-age=106384710; includeSubDomains; preload headers(vary) = Accept-Encoding,User-Agent headers(x-cache) = cp1100 pass, cp1100 pass headers(x-cache-status) = pass headers(x-client-ip) = 2a02:ec80:a000:1::2ff headers(x-content-type-options) = nosniff headers(x-frame-options) = DENY headers(x-request-id) = e2bd9fbb-995b-4c57-9281-8a91b7dd8202 headers(age) = 0 headers(cache-control) = private, must-revalidate, max-age=0 headers(content-disposition) = inline; filename=api-result.json headers(content-encoding) = gzip headers(content-length) = 200 headers(content-security-policy) = default-src 'self'; script-src 'none'; object-src 'none' headers(content-type) = application/json; charset=utf-8 headers(date) = Wed, 01 Jul 2026 00:30:31 GMT headers(http) = HTTP/2 200 headers(mediawiki-api-error) = internal_api_error_DBConnectionError headers(nel) = { "report_to": "wm_nel", "max_age": 604800, "failure_fraction": 0.0 5, "success_fraction": 0.0} headers(report-to) = { "group": "wm_nel", "max_age": 604800, "endpoints": [{ "url": "htt ps:// intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_erro… ingapi/network_error/1.0.0" }] } headers(server) = mw-api-ext.eqiad.main-694cc968b-cxl2x headers(server-timing) = cache;desc="pass", host;desc="cp1100" headers(strict-transport-security) = max-age=106384710; includeSubDomains; preload headers(vary) = Accept-Encoding,User-Agent headers(x-cache) = cp1100 pass, cp1100 pass headers(x-cache-status) = pass headers(x-client-ip) = 2a02:ec80:a000:1::2ff headers(x-content-type-options) = nosniff headers(x-frame-options) = DENY headers(x-request-id) = 0bfa35a3-e17f-42e1-8acc-67197f0ed381 headers(age) = 0 headers(cache-control) = private, must-revalidate, max-age=0 headers(content-disposition) = inline; filename=api-result.json headers(content-encoding) = gzip headers(content-length) = 200 headers(content-security-policy) = default-src 'self'; script-src 'none'; object-src 'none' headers(content-type) = application/json; charset=utf-8 headers(date) = Wed, 01 Jul 2026 00:31:31 GMT headers(http) = HTTP/2 200 headers(mediawiki-api-error) = internal_api_error_DBConnectionError headers(nel) = { "report_to": "wm_nel", "max_age": 604800, "failure_fraction": 0.0 5, "success_fraction": 0.0} headers(report-to) = { "group": "wm_nel", "max_age": 604800, "endpoints": [{ "url": "htt ps:// intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_erro… ingapi/network_error/1.0.0" }] } headers(server) = mw-api-ext.eqiad.main-694cc968b-w98b9 headers(server-timing) = cache;desc="pass", host;desc="cp1100" headers(strict-transport-security) = max-age=106384710; includeSubDomains; preload headers(vary) = Accept-Encoding,User-Agent headers(x-cache) = cp1100 pass, cp1100 pass headers(x-cache-status) = pass headers(x-client-ip) = 2a02:ec80:a000:1::2ff headers(x-content-type-options) = nosniff headers(x-frame-options) = DENY headers(x-request-id) = 96cb2aa8-e00f-4895-bcb1-37d93d0d7333 headers(age) = 0 headers(cache-control) = private, must-revalidate, max-age=0 headers(content-disposition) = inline; filename=api-result.json headers(content-encoding) = gzip headers(content-length) = 200 headers(content-security-policy) = default-src 'self'; script-src 'none'; object-src 'none' headers(content-type) = application/json; charset=utf-8 headers(date) = Wed, 01 Jul 2026 00:32:22 GMT headers(http) = HTTP/2 200 headers(mediawiki-api-error) = internal_api_error_DBConnectionError headers(nel) = { "report_to": "wm_nel", "max_age": 604800, "failure_fraction": 0.0 5, "success_fraction": 0.0} headers(report-to) = { "group": "wm_nel", "max_age": 604800, "endpoints": [{ "url": "htt ps:// intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_erro… ingapi/network_error/1.0.0" }] } headers(server) = mw-api-ext.eqiad.main-694cc968b-qk4s7 headers(server-timing) = cache;desc="pass", host;desc="cp1100" headers(strict-transport-security) = max-age=106384710; includeSubDomains; preload headers(vary) = Accept-Encoding,User-Agent headers(x-cache) = cp1100 pass, cp1100 pass headers(x-cache-status) = pass headers(x-client-ip) = 2a02:ec80:a000:1::2ff headers(x-content-type-options) = nosniff headers(x-frame-options) = DENY headers(x-request-id) = 25f90b29-cae6-4436-a696-9314f8e467b8 headers(age) = 0 headers(cache-control) = private, must-revalidate, max-age=0 headers(content-disposition) = inline; filename=api-result.json headers(content-encoding) = gzip headers(content-length) = 200 headers(content-security-policy) = default-src 'self'; script-src 'none'; object-src 'none' headers(content-type) = application/json; charset=utf-8 headers(date) = Wed, 01 Jul 2026 00:35:04 GMT headers(http) = HTTP/2 200 headers(mediawiki-api-error) = internal_api_error_DBConnectionError headers(nel) = { "report_to": "wm_nel", "max_age": 604800, "failure_fraction": 0.0 5, "success_fraction": 0.0} headers(report-to) = { "group": "wm_nel", "max_age": 604800, "endpoints": [{ "url": "htt ps:// intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_erro… ingapi/network_error/1.0.0" }] } headers(server) = mw-api-ext.eqiad.main-694cc968b-zp7bk headers(server-timing) = cache;desc="pass", host;desc="cp1100" headers(strict-transport-security) = max-age=106384710; includeSubDomains; preload headers(vary) = Accept-Encoding,User-Agent headers(x-cache) = cp1100 pass, cp1100 pass headers(x-cache-status) = pass headers(x-client-ip) = 2a02:ec80:a000:1::2ff headers(x-content-type-options) = nosniff headers(x-frame-options) = DENY headers(x-request-id) = d7e8eb8c-04c8-486a-a84a-32acd653e581

2 1

Phabricator monthly statistics - 2026-06
by aklapper＠wikimedia.org 30 Jun '26

30 Jun '26

Hi Community Metrics team, This is your automatic monthly Phabricator statistics mail. Accounts created in (2026-06): 334 Active Maniphest users (any activity) in (2026-06): 1176 Task authors in (2026-06): 622 Users who have closed tasks in (2026-06): 335 Projects which had at least one task moved from one column to another on their workboard in (2026-06): 332 Tasks created in (2026-06): 3015 Tasks closed in (2026-06): 2966 Open and stalled tasks in total: 57704 * Only open tasks in total: 56580 * Only stalled tasks in total: 1124 Median age in days of open tasks by priority: Unbreak now: 14 Needs Triage: 1231 High: 1475 Normal: 2412 Low: 2888 Lowest: 3861 (How long tasks have been open, not how long they have had that priority) To see the names of the most active task authors: * Go to https://development-metrics.wmcloud.org/ * Choose "Phabricator > Overview" from the top bar * Adjust the time frame in the upper right corner to your needs * See the author names in the "Submitters" panel TODO: Numbers which refer to closed tasks might not be correct, as described in https://phabricator.wikimedia.org/T1003 . Yours sincerely, Fab Rick Aytor (via community_metrics.sh on phab1004 at Wed 01 Jul 2026 12:00:43 AM UTC)

1 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

Wikitech-l July 2026