Legoktm <legoktm@member.fsf.org> committed rMW6ae820548384: Remove htmlspecialchars for Html::hidden (authored by Fomafix <fomafix@googlemail.com>).

Reedy <reedy@wikimedia.org> committed rMW090c3b3697fd: SECURITY: Do not reveal if user exists during login failure (authored by Brian Wolff <bawolff+wn@gmail.com>).

Reedy <reedy@wikimedia.org> committed rMW7b0f209ec5c9: SECURITY: Add throttling for BotPasswords authentication attempts (authored by Brad Jorsch <bjorsch@wikimedia.org>).

Legoktm <legoktm@member.fsf.org> committed rMW5636c3602ce8: PostgreSQL: Use correct PK name so patch-site_stats-pk.sql isn't run when not… (authored by Brad Jorsch <bjorsch@wikimedia.org>).

MaxSem <maxsem.wiki@gmail.com> committed rMWa4e747d87fa7: Escape single quotes in attributes (authored by Max Semenik <maxsem.wiki@gmail.com>).

Reedy <reedy@wikimedia.org> committed rMWd6ce87ca2c89: Suggest running composer (install|update) with --no-dev.

Reedy <reedy@wikimedia.org> committed rMW316ff416f2a9: Updated dev dependancy phpunit/phpunit from v4.8.35 to v4.8.36.

Legoktm <legoktm@member.fsf.org> committed rMWbe799cadda2f: DifferenceEngine: Fix wikidiff2 version check (authored by Kunal Mehta <legoktm@member.fsf.org>).

EddieGP <wikimedia.org@eddie-sh.de> committed rMWd83820efd983: Add primary keys to site_stats (authored by Eddie Greiner-Petter <git@eddie-sh.de>).

MaxSem <maxsem.wiki@gmail.com> committed rMWf302d81e711e: Removed Toki Pona localization files (authored by zoranzoki21 <zorandori4444@gmail.com>).

Gerrit Code Review <gerrit@wikimedia.org> committed rMW977e946cd85f: Merge "Add primary keys to site_stats" into REL1_30 (authored by jenkins-bot <jenkins-bot@gerrit.wikimedia.org>).

Jforrester <jforrester@wikimedia.org> committed rMW5c2b6bb3e2a4: resources: Deprecate the 'jquery.badge' module (authored by James D. Forrester <jforrester@wikimedia.org>).

Gerrit Code Review <gerrit@wikimedia.org> committed rMW8218c03c5480: Merge "Removed Toki Pona localization files" into REL1_30 (authored by jenkins-bot <jenkins-bot@gerrit.wikimedia.org>).

Gerrit Code Review <gerrit@wikimedia.org> committed rMWf686ca53c940: Merge "LocalFile: Fix copy-paste error" into REL1_30 (authored by jenkins-bot <jenkins-bot@gerrit.wikimedia.org>).

Legoktm <legoktm@member.fsf.org> committed rMWd5720a4664d2: Fix case of SpecialRecentChanges class (authored by Umherirrender <umherirrender_de.wp@web.de>).

Legoktm <legoktm@member.fsf.org> committed rMW622c374f3564: LocalFile: Fix copy-paste error (authored by Brad Jorsch <bjorsch@wikimedia.org>).

Legoktm <legoktm@member.fsf.org> committed rMWb9073582cf3a: Check minimum database server version when running update.php (authored by Kunal Mehta <legoktm@member.fsf.org>).

Paladox <thomasmulhall410@yahoo.com> committed rMW9a86fe38bcaa: Replace /r/p/ with /r/ to fix submodules.

Gerrit Code Review <gerrit@wikimedia.org> committed rMWb33280a51c2c: Merge "Replace /r/p/ with /r/ to fix submodules" into REL1_30 (authored by Chad <chadh@wikimedia.org>).

Gerrit Code Review <gerrit@wikimedia.org> committed rMW01cf3d72b20c: Update git submodules (authored by James D. Forrester <jforrester@wikimedia.org>).

Cicalese <ccicalese@wikimedia.org> committed rMWe1e152b36bdc: Fix login button label to accept RawMessage. (authored by Cicalese <cindom@gmail.com>).

Gerrit Code Review <gerrit@wikimedia.org> committed rMWb5927c094733: Update git submodules (authored by James D. Forrester <jforrester@wikimedia.org>).

Gerrit Code Review <gerrit@wikimedia.org> committed rMW710938f161e0: Merge "Fix login button label to accept RawMessage." into REL1_30 (authored by jenkins-bot <jenkins-bot@gerrit.wikimedia.org>).

Kunal Mehta <legoktm@member.fsf.org> committed rMW8837415116ab: Introduce Shell\CommandFactory (authored by Max Semenik <maxsem.wiki@gmail.com>).

Gerrit Code Review <gerrit@wikimedia.org> committed rMWbaf8b0dccba2: Update git submodules (authored by James D. Forrester <jforrester@wikimedia.org>).

Chad Horohoe <chadh@wikimedia.org> committed rMW664178a795fa: Updating submodules to latest REL1_30.

Gerrit Code Review <gerrit@wikimedia.org> committed rMW37efe30caa45: Merge "Updating submodules to latest REL1_30" into REL1_30 (authored by jenkins-bot <jenkins-bot@gerrit.wikimedia.org>).

Legoktm <legoktm@member.fsf.org> committed rMW7a4e6e5ccbd3: Don't trigger PHP errors for unused Shell\Command (authored by Max Semenik <maxsem.wiki@gmail.com>).

Gerrit Code Review <gerrit@wikimedia.org> committed rMW11832da3b655: Merge "Shell\Command: Better walltime fallback" into REL1_30 (authored by jenkins-bot <jenkins-bot@gerrit.wikimedia.org>).

Anomie <bjorsch@wikimedia.org> committed rMWb559f73e54a3: Fix PostgreSQL patch-add-3d.sql by replacing it (authored by Brad Jorsch <bjorsch@wikimedia.org>).

Anomie <bjorsch@wikimedia.org> committed rMWa4fa7812a9a4: Have CommentStore limit the maximum character length of comments (authored by Brad Jorsch <bjorsch@wikimedia.org>).

Gerrit Code Review <gerrit@wikimedia.org> committed rMW4e01d6cd984c: Merge "Have CommentStore limit the maximum character length of comments" into… (authored by jenkins-bot <jenkins-bot@gerrit.wikimedia.org>).

Krinkle <krinklemail@gmail.com> committed rMW76e38be330b8: Ensure only strings are passed to mysql_real_escape_string() (authored by Alexander Mashin <alex.mashin@gmail.com>).

Legoktm <legoktm@member.fsf.org> committed rMWa112c1752fa7: Shell\Command: Better walltime fallback (authored by Max Semenik <maxsem.wiki@gmail.com>).

Legoktm <legoktm@member.fsf.org> committed rMW246b80610a9e: Get rid of $IP in Command (authored by Max Semenik <maxsem.wiki@gmail.com>).

Legoktm <legoktm@member.fsf.org> committed rMW5af7d712ad14: Inject dependencies into Shell\Command (authored by Max Semenik <maxsem.wiki@gmail.com>).

Umherirrender <umherirrender_de.wp@web.de> committed rMW0f940a7672bf: Don't attempt to copy to ip_changes in PageArchive class. (authored by MusikAnimal <musikanimal@gmail.com>).

Gerrit Code Review <gerrit@wikimedia.org> committed rMW0601cbaca81e: Merge "ContribsPager: Check if target is an IP range outside foreach loop" into… (authored by jenkins-bot <jenkins-bot@gerrit.wikimedia.org>).

Legoktm <legoktm@member.fsf.org> committed rMW5569287350c7: RCFilters: Avoid adding raw filter and group objects to js vars (authored by Stephane Bisson <sbisson@wikimedia.org>).

Legoktm <legoktm@member.fsf.org> committed rMWe8c4e7f23227: Clean up wiki ID and DB domain ID handling (authored by Aaron Schulz <aschulz@wikimedia.org>).

Legoktm <legoktm@member.fsf.org> committed rMWd498a9940ec7: WikiPage: Hard deprecate second arg of prepareContentForEdit() as an int (authored by Kunal Mehta <legoktm@member.fsf.org>).

Legoktm <legoktm@member.fsf.org> committed rMWa2c89878bb8c: ContribsPager: Check if target is an IP range outside foreach loop (authored by MusikAnimal <musikanimal@gmail.com>).

Kunal Mehta <legoktm@member.fsf.org> committed rMW76d1a08422ee: RCFilters: Don't grey out results area when initializing, unless there's a… (authored by Roan Kattouw <roan.kattouw@gmail.com>).

Gerrit Code Review <gerrit@wikimedia.org> committed rMW66e8e3be3308: Merge "RCFilters: Don't grey out results area when initializing, unless there's… (authored by jenkins-bot <jenkins-bot@gerrit.wikimedia.org>).

Jforrester <jforrester@wikimedia.org> committed rMW1065ecc6bfa6: SpecialRecentchangeslinked: Unconditionally join on the page table (authored by Roan Kattouw <roan.kattouw@gmail.com>).

Gerrit Code Review <gerrit@wikimedia.org> committed rMW53f28ba4b609: Merge "SpecialRecentchangeslinked: Unconditionally join on the page table" into… (authored by jenkins-bot <jenkins-bot@gerrit.wikimedia.org>).

Jforrester <jforrester@wikimedia.org> committed rMWe4b0a1f3fc94: RCFilters: Redo the way spinners and ready/loading states are managed (authored by Roan Kattouw <roan.kattouw@gmail.com>).

Gerrit Code Review <gerrit@wikimedia.org> committed rMWcdaa0ea04a97: Merge "RCFilters: Redo the way spinners and ready/loading states are managed"… (authored by jenkins-bot <jenkins-bot@gerrit.wikimedia.org>).

Kunal Mehta <legoktm@member.fsf.org> committed rMWbdb47a482f80: Fix ip_changes insert counting (authored by Max Semenik <maxsem.wiki@gmail.com>).

Kunal Mehta <legoktm@member.fsf.org> committed rMW010c20548284: Improve populateIpChanges.php reporting (authored by Max Semenik <maxsem.wiki@gmail.com>).

Gerrit Code Review <gerrit@wikimedia.org> committed rMW028e66dfd1a7: Merge "SpecialSearch: Fix unintended `margin` when zoom level is above 100%"… (authored by jenkins-bot <jenkins-bot@gerrit.wikimedia.org>).

Kunal Mehta <legoktm@member.fsf.org> committed rMW841928b53f74: Remove duplicate release note for $wgOOUIEditPage removal.

Kunal Mehta <legoktm@member.fsf.org> committed rMW3dcdea124a73: Attempt to fix populateIpChanges maintenance script (authored by MusikAnimal <musikanimal@gmail.com>).

Legoktm <legoktm@member.fsf.org> committed rMW70d7aab32dcf: SpecialSearch: Fix unintended `margin` when zoom level is above 100% (authored by Volker E <volker.e@wikimedia.org>).

Legoktm <legoktm@member.fsf.org> committed rMW7eccf0963c5b: registration: Fix typo in validator (authored by Kunal Mehta <legoktm@member.fsf.org>).

Kunal Mehta <legoktm@member.fsf.org> committed rMWb2f33d67e0c9: Yet another attempt to fix the populateIpChanges script (authored by MusikAnimal <musikanimal@gmail.com>).

Kunal Mehta <legoktm@member.fsf.org> committed rMW5ca7e8e5c770: EditPage: Don't allow clients that mangle unicode to edit (authored by Max Semenik <maxsem.wiki@gmail.com>).

Kunal Mehta <legoktm@member.fsf.org> committed rMW3df1c0ceb3e0: Add release notes for EditPage changes in 1.30.

Kunal Mehta <legoktm@member.fsf.org> committed rMW92f36230781f: EditPage: Deprecate public isCssJsSubpage related member variables.

Kunal Mehta <legoktm@member.fsf.org> committed rMW7a518e922162: EditPage: Mark getSubmitButtonLabel() as @since 1.30.

Kunal Mehta <legoktm@member.fsf.org> committed rMWea461ff28aaa: EditPage: Deprecate $mArticle and $mTitle for public usage.

Kunal Mehta <legoktm@member.fsf.org> committed rMW2383fd13225a: EditPage: Avoid unnecessary calls to Article::getContext().

Kunal Mehta <legoktm@member.fsf.org> committed rMWc52bf8123741: EditPage: Stop using globals for configuration in non-static functions.

Kunal Mehta <legoktm@member.fsf.org> committed rMWdefa135d2cd2: EditPage: Don't use $wgRequest.

Kunal Mehta <legoktm@member.fsf.org> committed rMW552ccdb91faf: EditPage: Try to avoid using $wgTitle.

Chad Horohoe <chadh@wikimedia.org> committed rMWd96e2075ea94: Adding submodules of bundled REL1_30 extensions/skins/vendor.

Diffusion added a reverting change for rMWc3a0f25c040e: Creating new WMF 1.30.0-wmf.19 branch: rMWc5c7140017e8: Revert "Creating new WMF 1.30.0-wmf.19 branch".

Chad Horohoe <chadh@wikimedia.org> committed rMWc5c7140017e8: Revert "Creating new WMF 1.30.0-wmf.19 branch".

Gerrit Code Review <gerrit@wikimedia.org> committed rMWc787c0fa4f89: Merge "Bump branch number for eventual rc.0" into REL1_30 (authored by jenkins-bot <jenkins-bot@gerrit.wikimedia.org>).

Chad Horohoe <chadh@wikimedia.org> committed rMWe855363d312b: Bump branch number for eventual rc.0.

Chad Horohoe <chadh@wikimedia.org> committed rMWc3a0f25c040e: Creating new WMF 1.30.0-wmf.19 branch.

Reedy <reedy@wikimedia.org> committed rMW98b6635895c7: SECURITY: Handle -{}- syntax in attributes safely (authored by Brian Wolff <bawolff+wn@gmail.com>).

Jforrester <jforrester@wikimedia.org> committed rMW58bdef3984e7: Fix warning in DifferenceEngine (authored by Brad Jorsch <bjorsch@wikimedia.org>).

Elliott Eggleston <ejegg@ejegg.com> committed rMW210cb37d9973: Merge branch 'REL1_27' into fundraising/REL1_27.

Reedy <reedy@wikimedia.org> committed rMWa8064762ac3f: Bump 1.27.4.

Reedy <reedy@wikimedia.org> committed rMWedd5b5d2f673: SECURITY: Add throttling for BotPasswords authentication attempts (authored by Brad Jorsch <bjorsch@wikimedia.org>).

Reedy <reedy@wikimedia.org> committed rMW6330d557c0fc: SECURITY: XSS in langconverter when regex hits pcre.backtrack_limit (authored by Brian Wolff <bawolff+wn@gmail.com>).

Reedy <reedy@wikimedia.org> committed rMWf04e4d2d3108: SECURITY: Escape internal error message (authored by Brian Wolff <bawolff+wn@gmail.com>).

Reedy <reedy@wikimedia.org> committed rMWc6c580a00563: SECURITY: Make anchor for headlines escape > and < (authored by Max Semenik <maxsem.wiki@gmail.com>).

Reedy <reedy@wikimedia.org> committed rMWc465b63541c3: SECURITY: Create a .htaccess in /vendor after composer runs (authored by Kunal Mehta <legoktm@member.fsf.org>).

Reedy <reedy@wikimedia.org> committed rMWf335a62531be: SECURITY: Do not reveal if user exists during login failure (authored by Brian Wolff <bawolff+wn@gmail.com>).

Reedy <reedy@wikimedia.org> committed rMW0b07b085c877: SECURITY: update.php: Remove eval-stdin.php if necessary (authored by Kunal Mehta <legoktm@member.fsf.org>).

Reedy <reedy@wikimedia.org> committed rMWd48b7445acc0: SECURITY: Ensure Message::rawParams can't lead to XSS (authored by Brian Wolff <bawolff+wn@gmail.com>).

Reedy <reedy@wikimedia.org> committed rMWa79b1810ac3d: SECURITY: API: Avoid some silliness with browser-guessed filenames (authored by Brad Jorsch <bjorsch@wikimedia.org>).

Elliott Eggleston <ejegg@ejegg.com> committed rMW162f0c1890e0: Update DonationInterface for vendor .htaccess.

Elliott Eggleston <ejegg@ejegg.com> committed rMW8bdce45baf7b: Update vendor submodule for .htaccess.

Elliott Eggleston <ejegg@ejegg.com> committed rMW80bdf4ae5cdc: update.php: Remove eval-stdin.php if necessary (authored by Kunal Mehta <legoktm@member.fsf.org>).

Elliott Eggleston <ejegg@ejegg.com> committed rMWd9b0aec682ee: Update FundraisingEmailUnsubscribe submodule.

Elliott Eggleston <ejegg@ejegg.com> committed rMW897e7ad0da07: SECURITY: Handle -{}- syntax in attributes safely (authored by Brian Wolff <bawolff+wn@gmail.com>).

Elliott Eggleston <ejegg@ejegg.com> committed rMW9aec6e30429a: SECURITY: Escape internal error message.

Elliott Eggleston <ejegg@ejegg.com> committed rMW279734c95a82: Create a .htaccess in /vendor after composer runs (authored by Kunal Mehta <legoktm@member.fsf.org>).

Elliott Eggleston <ejegg@ejegg.com> committed rMW0bc9919a21d6: SECURITY: Add throttling for BotPasswords authentication attempts (authored by Brad Jorsch <bjorsch@wikimedia.org>).

Elliott Eggleston <ejegg@ejegg.com> committed rMW21f7dcf3d9fb: Merge branch 'REL1_27' into fundraising/REL1_27.

Elliott Eggleston <ejegg@ejegg.com> committed rMW9bf2c01ea238: SECURITY: API: Avoid some silliness with browser-guessed filenames (authored by Brad Jorsch <bjorsch@wikimedia.org>).

Elliott Eggleston <ejegg@ejegg.com> committed rMW31041e4557c2: Make anchor for headlines escape > and < (authored by Max Semenik <maxsem.wiki@gmail.com>).

Elliott Eggleston <ejegg@ejegg.com> committed rMW7b9630e6eca0: SECURITY: Do not reveal if user exists during login failure (authored by Brian Wolff <bawolff+wn@gmail.com>).

Elliott Eggleston <ejegg@ejegg.com> committed rMWdee264126f15: XSS in langconverter when regex hits pcre.backtrack_limit (authored by Brian Wolff <bawolff+wn@gmail.com>).

Elliott Eggleston <ejegg@ejegg.com> committed rMW815aff89dea8: SECURITY: Ensure Message::rawParams can't lead to XSS (authored by Brian Wolff <bawolff+wn@gmail.com>).

Reedy <reedy@wikimedia.org> committed rMW17b26044ddcb: Suggest running composer (install|update) with --no-dev.

Reedy <reedy@wikimedia.org> committed rMWec54644fa667: Fix login API for users with @ in their usernames (authored by Gergő Tisza <gtisza@wikimedia.org>).