Dear Wikibase Community,

We’re thrilled to announce the release of WMDE.18, our security release compatible with MediaWiki 1.39.7.

Changes in short:

-

WDQS now checks for allowlist.txt instead of whitelist.txt for allowed SPARQL hosts; please see T355893 https://phabricator.wikimedia.org/T355893 and the relevant pull request https://github.com/wmde/wikibase-release-pipeline/pull/625 for details. -

WDQS Java switched from OpenJDK to the eclipse-temurin JRE, but stays on Java 8. -

WDQS base image switched from Alpine to Debian “bookworm”. -

WDQS service now uses the “blazegraph” user instead of uid 666. -

WDQS front-end base image changed from node 14 Alpine to node 20 “bookworm”. -

MediaWiki 1.39.7 release announcement https://lists.wikimedia.org/hyperkitty/list/wikitech-l@lists.wikimedia.org/thread/V3WXEPXV2DU6WTVEKK4XHW4QXD5OFKD7/ .

Previous changes in the 1.39-based releases:

-

The folder www-data is no longer world-writable. -

MediaWiki 1.39.2 release announcement https://lists.wikimedia.org/hyperkitty/list/wikitech-l@lists.wikimedia.org/message/UJBH5OGW5M5Q22KETIQY4MV2Q6XJPQWG/, 1.39.3 https://lists.wikimedia.org/hyperkitty/list/wikitech-l@lists.wikimedia.org/message/6UQBHI5FWLATD7QO7DI4YS54U7XSSLAN/, 1.39.4 https://lists.wikimedia.org/hyperkitty/list/wikitech-l@lists.wikimedia.org/thread/HVT3U3XYY35PSCIQPHMY4VQNF3Q6MHUO/, 1.39.5 https://lists.wikimedia.org/hyperkitty/list/wikitech-l@lists.wikimedia.org/message/BRWOWACCHMYRIS7JRTT6XD44X3362MVL/, 1.39.6 https://lists.wikimedia.org/hyperkitty/list/wikitech-l@lists.wikimedia.org/message/TDBUBCCOQJUT4SCHJNPHKQNPBUUETY52/ . -

Release notes for Wikibase 1.39 https://gerrit.wikimedia.org/r/plugins/gitiles/mediawiki/extensions/Wikibase/+/refs/tags/wmde.11/RELEASE-NOTES-1.39

Please also note that, as always, the file LocalSettings.php is world-readable. Viewing it from within the container reveals the database password and secret key.

Upgrading your Wikibase

Please note that, starting with Wikibase 1.39 release, the Wikibase extension must be enabled in MediaWiki using the Extension Registration mechanism. If you have been providing your own MediaWiki configuration file (LocalSettings.php) for your Wikibase container, make sure to check these upgrade instructions https://github.com/wmde/wikibase-release-pipeline/blob/f2555b07494c9df691cd7935d24703105df82f33/CHANGES.md?plain=1#L14-L25 .

Are you looking for documentation?

Our Wikibase documentation https://www.mediawiki.org/wiki/Wikibase is the way to go for our installation instructions and FAQ. For Wikibase 1.39 developer documentation, take a look at https://doc.wikimedia.org/Wikibase/REL1_39/ .

Want to know what’s new?

Sign up for our mailing list to follow and participate in discussions about Wikibase development:

https://lists.wikimedia.org/postorius/lists/wikibaseug.lists.wikimedia.org/

Got feedback or questions?

Join our channels on Telegram https://t.me/+WBsf9-C9KPuMZCDT or https://phabricator.wikimedia.org/project/view/5755/.

We can’t wait to hear what you think of the new version!

Best,

Valerie, on behalf of the WMDE Wikibase Suite team

Valerie Wollinger (She/Her) Community Communications Manager Wikibase

Wikimedia Deutschland e. V. | Tempelhofer Ufer 23-24 | 10963 Berlin Phone: +49 (0)30-577 11 62-0https://wikimedia.de

Keep up to date! Current news and exciting stories about Wikimedia, Wikipedia and Free Knowledge in our newsletter (in German): Subscribe now https://www.wikimedia.de/newsletter/.

Imagine a world in which every single human being can freely share in the sum of all knowledge. Help us to achieve our vision!https://spenden.wikimedia.de

Wikimedia Deutschland — Gesellschaft zur Förderung Freien Wissens e. V. Eingetragen im Vereinsregister des Amtsgerichts Charlottenburg, VR 23855 B. Als gemeinnützig anerkannt durch das Finanzamt für Körperschaften I Berlin, Steuernummer 27/029/42207. Geschäftsführende Vorstände: Franziska Heine, Dr. Christian Humborg