Update mediawiki to 1.39.7 (#439)

* update wikiman.yaml to mw 1.39.7

wikimedia/mediawiki@ec2d725

* run wikiman

* run sync.sh

* Pin Math extension because of T362027

* run wikiman + re-add patchUrls!!

* run ./sync.sh

* remove mw reporef & use wmf extdist for wikibase

* run wikiman & re-add patchUrls + update rebased Wikibase 943530

* run `./sync.sh`

* remove Math repoRef

* run wikiman

* run ./sync.sh

dist/RELEASE-NOTES-1.39

@@ -5,6 +5,62 @@ PHP 8.1 workboard: https://phabricator.wikimedia.org/tag/php_8.1_support/
 PHP 8.2 workboard: https://phabricator.wikimedia.org/tag/php_8.2_support/
 PHP 8.3 workboard: https://phabricator.wikimedia.org/tag/php_8.3_support/
 
+== MediaWiki 1.39.8 ==
+
+THIS IS NOT A RELEASE YET
+
+=== Changes since 1.39.7 ===
+* Localisation updates.
+
+== MediaWiki 1.39.7 ==
+
+This is a security and maintenance release of the MediaWiki 1.39 branch.
+
+=== Changes since 1.39.6 ===
+* Localisation updates.
+* (T334992) Headings in the license pickers should not be selected.
+* (T353929) ActiveUsersPager: Count actions only once.
+* composer: Use @php instead of php.
+* (T326065) Indent JsonContent using tabs.
+* (T354541) authmanager: Improve AuthenticationRequest docs.
+* (T355017) Add missing space in Special:RecentChangesLinked.
+* (T355003) composer.json Add ext-bcmath and ext-gmp to suggests.
+* PHPVersionCheck: Update text to match currently supported upstream PHP
+  versions (8.1+).
+* (T354045) API: mark HTML output as non-cacheable.
+* (T355530) filerepo: Fix img_major_mime for files with a non-standard
+  extensions.
+* (T355530) MimeAnalyzer: Add @since to isValidMajorMimeType.
+* (T317489, T319202) Mark some parserTests on talk pages Parsoid only on
+  REL1_39.
+* (T350594) Update wikimedia/parsoid to 0.16.3.
+* (T352554) ZhConverter: Fix language variant fallback chain.
+* (T357668) Parser::getExternalLinkAttribs: Don't set rel attribute to null.
+* LockManagerGroupIntegrationTest: Remove test depending on DBLockManager.
+* (T357808) LinkRendererTest: Add missing import for LinkTarget.
+* (T353305) ApiResetPassword: Allow both user and email parameters to be passed
+  for reset.
+* (T358949) updateCollation: Explicitly cast $scale to int.
+* (T359055) api: Improve linking of language codes lists in top level i18n
+  messages.
+* (T359294) Make sure MovePage::isValidFileMove matches UploadBase::getTitle.
+* (T230245) Respect $maxConcurrency when queuing async FileOps.
+* (T352554) Follow-up "ZhConverter: Fix language variant fallback chain".
+* (T292237, T317451) build: Restore Doxygen output for MediaWiki release tags.
+* (T324903) HistoryPager: Add #[AllowDynamicProperties].
+* (T360850) Update Apache config syntax in .htaccess files.
+* (T309714, T354274) mime: Add support for 'font/woff' and 'font/woff2' mime
+  type.
+* (T309714) mime: Make test cases use data provider.
+* (T331608) installer: Bear with schema drift caused by running old updater.
+* docs: Remove use of $IP from mwdocgen.php.
+* (T317451) build: Restore Doxygen output for MediaWiki release tags (take 3).
+* docs: Set stable permalink on markdown files.
+* (T357019) allow maintenance/deleteBatch.php to accept page ID.
+* (T355538 CVE-2024-PENDING) XSS in edit summary parser.
+* (T357760, CVE-2024-PENDING) Denial of service vector via GET request to
+  Special:MovePage on pages with thousands of subpages.
+
 == MediaWiki 1.39.6 ==
 
 This is a security and maintenance release of the MediaWiki 1.39 branch.
@@ -22,7 +78,7 @@ This is a security and maintenance release of the MediaWiki 1.39 branch.
 * Updated wikimedia/timestamp from 4.0.0 to 4.1.1.
 * tests: Provide coverage for StatusValue::__toString.
 * StatusValue: Improve logging/debug output with multibyte characters.
-* (T347726, CVE-2023-PENDING) SECURITY: logging: Fix non-escaped messages
+* (T347726, CVE-2023-51704) SECURITY: logging: Fix non-escaped messages
   used in rights log.
 * Updated wikimedia/parsoid from 0.16.1 to 0.16.2.
 * (T229992) LocalisationCache: Preserve fallback source language info.

dist/cache/.htaccess

@@ -1 +1 @@
-Deny from all
+Require all denied

dist/composer.json

@@ -62,11 +62,11 @@
 		"wikimedia/html-formatter": "4.0.3",
 		"wikimedia/ip-set": "3.1.0",
 		"wikimedia/ip-utils": "4.0.0",
-		"wikimedia/less.php": "3.1.0",
+		"wikimedia/less.php": "3.2.1",
 		"wikimedia/minify": "2.3.0",
 		"wikimedia/normalized-exception": "1.0.1",
 		"wikimedia/object-factory": "4.0.0",
-		"wikimedia/parsoid": "0.16.2",
+		"wikimedia/parsoid": "0.16.4",
 		"wikimedia/php-session-serializer": "2.0.1",
 		"wikimedia/purtle": "1.0.8",
 		"wikimedia/relpath": "3.0.0",
@@ -97,10 +97,10 @@
 		"php-parallel-lint/php-console-highlighter": "0.5",
 		"php-parallel-lint/php-parallel-lint": "1.3.1",
 		"phpunit/phpunit": "^8.5",
-		"psy/psysh": "^0.11.1",
+		"psy/psysh": "^0.12.3",
 		"seld/jsonlint": "1.8.3",
 		"wikimedia/alea": "^0.9.3",
-		"wikimedia/testing-access-wrapper": "~2.0",
+		"wikimedia/testing-access-wrapper": "^3.0.0",
 		"wmde/hamcrest-html-matchers": "^1.0.0"
 	},
 	"replace": {
@@ -109,8 +109,10 @@
 	},
 	"suggest": {
 		"ext-apcu": "Faster web responses overall.",
+		"ext-bcmath": "Increased performance of some operations. Required especially on 32 bit machines. This or ext-gmp are needed for scrambling Temporary Accounts.",
 		"ext-curl": "Faster HTTP services, e.g. when using InstantCommons, Swift, or Etcd.",
 		"ext-gd": "Enable thumbnails for file uploads.",
+		"ext-gmp": "Increased performance of some operations. Required especially on 32 bit machines. This or ext-bcmath are needed for scrambling Temporary Accounts.",
 		"ext-mysqli": "Enable the MySQL and MariaDB database type for MediaWiki.",
 		"ext-openssl": "Encrypt session data (or opt-out via $wgSessionInsecureSecrets).",
 		"ext-pdo": "Enable the SQLite database type for MediaWiki.",
@@ -137,8 +139,8 @@
 		]
 	},
 	"scripts": {
-		"mw-install:sqlite": "php maintenance/install.php --server=http://localhost:4000 --dbtype sqlite --dbpath cache/ --scriptpath '' --pass adminpassword MediaWiki Admin",
-		"serve": "php -S localhost:4000",
+		"mw-install:sqlite": "@php maintenance/install.php --server=http://localhost:4000 --dbtype sqlite --dbpath cache/ --scriptpath '' --pass adminpassword MediaWiki Admin",
+		"serve": "@php -S localhost:4000",
 		"lint": "parallel-lint --exclude node_modules --exclude vendor",
 		"phan": "phan -d . --long-progress-bar",
 		"phpcs": "phpcs -p -s --cache",

dist/extensions/AdvancedSearch/i18n/bew.json

@@ -8,20 +8,20 @@
 	"advancedsearch-options-pane-head": "Penyarian lanjutan:",
 	"advancedsearch-optgroup-text": "Cari di tèks halaman",
 	"advancedsearch-optgroup-structure": "Struktur",
-	"advancedsearch-optgroup-files": "Berekas èn gambar",
+	"advancedsearch-optgroup-files": "Gepokan èn gambar",
 	"advancedsearch-optgroup-sort": "Urutan penyortiran",
 	"advancedsearch-field-plain": "Ni kata",
 	"advancedsearch-field-phrase": "Percis ni kata",
 	"advancedsearch-field-or": "Atu deri ni kata",
 	"advancedsearch-field-not": "Bukan ni kata",
 	"advancedsearch-field-subpageof": "Anakjudul deri ni halaman",
 	"advancedsearch-field-intitle": "Halaman judul ada",
-	"advancedsearch-field-deepcategory": "Halaman di ni katègori",
+	"advancedsearch-field-deepcategory": "Halaman di ni bangsaan",
 	"advancedsearch-field-hastemplate": "Halaman dengen ni sablonan",
 	"advancedsearch-field-inlanguage": "Halaman dalem ni basa",
-	"advancedsearch-field-filetype": "Jenis berekas",
-	"advancedsearch-field-filew": "Lèbar berekas dalem piksel",
-	"advancedsearch-field-fileh": "Tinggi berekas dalem piksel",
+	"advancedsearch-field-filetype": "Jenis gepokan",
+	"advancedsearch-field-filew": "Lèbar gepokan dalem piksel",
+	"advancedsearch-field-fileh": "Tinggi gepokan dalem piksel",
 	"advancedsearch-field-sort": "Urutan penyortiran",
 	"advancedsearch-field-preview-sort": "Sortir berales $1",
 	"advancedsearch-help-plain": ";Jabaran\n:Penyarian ni kata-kata di judul atawa tèks.\n;Peratiin ama ni hal pada\n:* Beberapa kata bisa dimasupin di mari.\n:* Tenger baca èn laèn-laèn lèter bukanhurup-nomer (kecuali titik dua èn koma) bakal dicuèkin.\n:* Barangkali ada hasil nyang kaga' ada atu atawa lebi bagèan deri lu punya penyarian.\n:* Pembongkotan kata diterepin. Tulad: Kalo kata ''puun'' dimasupin, mangka penyarian juga' bakal mertimbangin masupnya juga' akta ''puunan''. Pembongkotan kata entu sipatnya kusus pada atu basa ketentu.\n;Halaman pertulungan\n:[https://www.mediawiki.org/wiki/Special:MyLanguage/Help:CirrusSearch#Full_text_search Penyarian tèks lengkep]\n;Nahwu nyang sepantar di penyarian biasa\n:<code>puun semak duri</code>",
@@ -30,22 +30,22 @@
 	"advancedsearch-help-not": ";Jabaran\n:Kaga' nyerèntain halaman nyang ada ni kata pada deri penyarian.\n;Ati-ati ama ni pada\n:* Pembongkotan kata diterepin. Tulad: Kalo kata ''puun'' dimasupin, mangka penyarian juga' bakal mertimbangin masupnya juga' akta ''puunan''. Pembongkotan kata entu sipatnya kusus pada atu basa ketentu.\n;Halaman pertulungan\n:[https://www.mediawiki.org/wiki/Special:MyLanguage/Help:CirrusSearch#Words.2C_phrases.2C_and_modifiers Kata, bungsel kata, and pendandan]\n;Nahwu nyang sepantar di penyarian biasa\n:Kata-kata dengen <code></code> di depannya, misalnya <code>-gaja</code>.",
 	"advancedsearch-help-intitle": ";Jabaran\n:Nyari halaman nyang ada ni kata pada deri penyarian.\n;Ati-ati ama ni pada\n:* Penyarian nyerèntain pengalihan.\n:* Pembongkotan kata diterepin. Tulad: Kalo kata ''puun'' dimasupin, mangka penyarian juga' bakal mertimbangin masupnya juga' akta ''puunan''. Pembongkotan kata entu sipatnya kusus pada atu basa ketentu.\n;Halaman pertulungan\n:[https://www.mediawiki.org/wiki/Special:MyLanguage/Help:CirrusSearch#Intitle_and_incategory Intitle èn incategory]\n;Nahwu nyang sepantar di penyarian biasa\n:Kata-kata dengen <code>intitle:</code> di depannya, misalnya <code>intitle:ratu</code>.",
 	"advancedsearch-help-subpageof": ";Jabaran\n:Nyari halaman nyang anakhalaman deri ni halaman.\n;Ati-ati ama ni pada\n:* Lu cuman bisa nyari anakhalaman deri atu halaman dalem sekali penyarian.\n:* Jangan lupa nyalain ruang nama nyang lu pèngèn watesin penyariannya di saringan ruang nama.\n:* Jangan serèntain ruang nama di depannya nama halaman kaya' begini: <del><code>{{ns:project}}:Pengalihan</code></del>.\n;Halaman pertulungan\n:[https://www.mediawiki.org/wiki/Special:MyLanguage/Help:CirrusSearch#subpageof Subpageof]\n;Nahwu nyang sepantar di penyarian biasa\n:<code>subpageof:</code> diikutin nama halaman kaya' <code>subpageof:Redirect</code>. Paké penukil rangkep kalo halaman induknya ada apstannya: <code>subpageof:\"Rekès sautan\"</code>.",
-	"advancedsearch-help-deepcategory": ";Jabaran\n: Menyari halaman nyang ada di ni katègori atawa anakkatègori.\n;Ati-ati ama ni pada\n:* Cuman 5 trap anakkatègori pertama doang nyang diserèntain di lu punya penyarian.\n:* Jumblah penyarian kewates cuman ampé 256.\n:* Lu bisa nyari halaman di beberapa katègori.\n;Halaman pertulungan\n:[https://www.mediawiki.org/wiki/Special:MyLanguage/Help:CirrusSearch#Deepcategory Deepcategory]\n;Nahwu nyang sepantar di penyarian biasa: <code>deepcategory:</code> diikutin ama nama katègori kaya' <code>deepcategory:Pertulungan</code>. Paké penukil rangkep kalo kalo namanya ada apstannya: <code>deepcategory:\"Katègori keumpet\"</code>.",
+	"advancedsearch-help-deepcategory": ";Jabaran\n: Menyari halaman nyang ada di ni bangsaan atawa anakbangsaan.\n;Ati-ati ama ni pada\n:* Cuman 5 trap anakbangsaan pertama doang nyang diserèntain di lu punya penyarian.\n:* Jumblah penyarian kewates cuman ampé 256.\n:* Lu bisa nyari halaman di beberapa bangsaan.\n;Halaman pertulungan\n:[https://www.mediawiki.org/wiki/Special:MyLanguage/Help:CirrusSearch#Deepcategory Deepcategory]\n;Nahwu nyang sepantar di penyarian biasa: <code>deepcategory:</code> diikutin ama nama bangsaan kaya' <code>deepcategory:Pertulungan</code>. Paké penukil rangkep kalo kalo namanya ada apstannya: <code>deepcategory:\"Bangsaan keumpet\"</code>.",
 	"advancedsearch-help-hastemplate": ";Jabaran\n:Penyarian halaman nyang ada ni sablonannya percis.\n;Ati-ati ama ni pada\n:* Lu bisa nemuin sablonan keanterserèntaan (sablonan nyang ada sablonan laènnya).\n:* Pungsi nyaranin-sendèwèk cuman bisa nemuin sablonan nyang awalnya sama kaya' lu punya penyarian, misalnya penyarian <code>\"com...\"</code> bakal nyaranin ''\"commons\"'', mar kaga' ''\"nowcommons\"''.\n;Halaman pertulungan\n:[https://www.mediawiki.org/wiki/Special:MyLanguage/Help:CirrusSearch#Hastemplate Hastemplate]\n;Nahwu nyang sepantar di penyarian biasa\n:Kata dalem tenger penukil dengen <code>hastemplate:</code> di depannya kaya' <code>hastemplate:\"pengabaran kaga' ada\"</code>.",
 	"advancedsearch-help-inlanguage": ";Jabaran\n:Cuman bakal nyari dalem basa lu punya pilih.\n;Ati-ati ama ni pada\n:*Lu cuman bisa nyari halaman di atu basa doang.\n:*Ni kotak cuman kiatan di wiki nyang dinyalain ata-été translatewikinya.\n;Halaman pertulungan\n: [https://www.mediawiki.org/wiki/Special:MyLanguage/Help:CirrusSearch#Inlanguage Inlanguage]\n;Nahwu nyang sepantar di penyarian biasa\n:<code>inlanguage:</code> diikutin ama kode basa kaya' <code>inlanguage:es</code>. Lu bisa kaga' nyerèntain beberapa basa dengen nambahin <code>-</code> di depannya tu kata konci, misalnya <code>-inlanguage:en</code>.",
 	"advancedsearch-help-filetype": ";Jabaran\n:Nyari cuman berekas deri jenis nyang dipili.\n;Ati-ati ama ni pada\n:* Lu cuman bisa nyari atu jenis berekas.\n:* Lu cuman bisa mili tu jenis berekas nyang dikasi deri menu mudun-bawah.\n;Halaman pertulungan\n:[https://www.mediawiki.org/wiki/Special:MyLanguage/Help:CirrusSearch#filetype Filetype] èn [https://www.mediawiki.org/wiki/Special:MyLanguage/Help:CirrusSearch#filemime filemime]\n;Nahwu nyang sepantar di penyarian biasa\n:Kata-kata dengen <code>filetype:</code> di depannya kaya' <code>filetype:ogg</code>.",
 	"advancedsearch-help-filew": ";Jabaran\n:Ni kotak ngeboléin lu nentuin lèbarnya tu berekas.\n;Ati-ati ama ni pada\n:* Ni cuman kena keterep ama jenis berekas nyang ada punya lèbar ama tinggi, kaya' dedelengan ama gambar.\n;Halaman pertulungan\n:[https://www.mediawiki.org/wiki/Special:MyLanguage/Help:CirrusSearch#File_measures Filemeasures]\n;Nahwu nyang sepantar di penyarian biasa\n:Angka dengen <code>filew</code> di depannya kaya' <code>filew:>800</code>.",
 	"advancedsearch-help-fileh": ";Jabaran\n:Ni kotak ngeboléin lu nentuin tingginya tu berekas.\n;Ati-ati ama ni pada\n:* Ni cuman kena keterep ama berekas nyang ada punya lèbar ama tinggi, kaya' dedelengan ama gambar.\n;Halaman pertulungan\n:[https://www.mediawiki.org/wiki/Special:MyLanguage/Help:CirrusSearch#File_measures Filemeasures]\n;Nahwu nyang sepantar di penyarian biasa\n:Angka dengen <code>fileh</code> di depannya kaya' <code>fileh:>600</code>.",
-	"advancedsearch-help-sort": ";Jabaran\n:Ngrobah rèndèngan sortir hasil. Pakemnya – halaman nyang paling nyambung ditaroh di atas penyarian.\n;Halaman pertulungan\n: [https://www.mediawiki.org/wiki/Special:MyLanguage/Help:CirrusSearch#Explicit_sort_orders Rèndèngan sortir kesurat]\n;Nahwu nyang sepantar di penyarian biasa\n: Ni keboléan kaga' punya kata konci nyang lu bisa ketik di kotak isian penyarian sebab tu pungsi ditentuin liwat patokan di URL...",
+	"advancedsearch-help-sort": ";Jabaran\n:Ngrobah rèndèngan sortir hasil. Pakemnya – halaman nyang paling nyambung ditaroh di atas penyarian.\n;Halaman pertulungan\n: [https://www.mediawiki.org/wiki/Special:MyLanguage/Help:CirrusSearch#Explicit_sort_orders Rèndèngan sortir kesurat]\n;Nahwu nyang sepantar di penyarian biasa\n: Ni keboléan kaga' punya kata konci nyang lu bisa ketik di kotak isian penyarian bahna tu pungsi ditentuin liwat patokan di URL...",
 	"advancedsearch-placeholder-exact-text": "\"kuda gigit besi\"",
 	"advancedsearch-inlanguage-default": "Pilih basa",
-	"advancedsearch-filetype-section-types": "Jenis berekas umum",
-	"advancedsearch-filetype-section-image": "Bentukan gambar",
-	"advancedsearch-filetype-section-video": "Bentukan dedelengan",
-	"advancedsearch-filetype-section-audio": "Bentukan dedengeran",
-	"advancedsearch-filetype-section-document": "Bentukan warkat",
-	"advancedsearch-filetype-section-other": "Laèn-laèn bentukan",
-	"advancedsearch-filetype-default": "Pilih jenis berekas",
+	"advancedsearch-filetype-section-types": "Jenis gepokan umum",
+	"advancedsearch-filetype-section-image": "Pèpèlan gambar",
+	"advancedsearch-filetype-section-video": "Pèpèlan dedelengan",
+	"advancedsearch-filetype-section-audio": "Pèpèlan dedengeran",
+	"advancedsearch-filetype-section-document": "Pèpèlan warkat",
+	"advancedsearch-filetype-section-other": "Laèn-laèn pèpèlan",
+	"advancedsearch-filetype-default": "Pilih jenis gepokan",
 	"advancedsearch-filetype-bitmap": "Gambar",
 	"advancedsearch-filetype-drawing": "Gambar orèk-orèkan",
 	"advancedsearch-filetype-audio": "Dedengeran",