mediawiki (1:1.31.7-1) unstable; urgency=medium

  * New upstream version 1.31.7, fixing CVE-2020-10960.
    CVE-2020-10960 does not affect this version of MediaWiki.
  * A hardening fix was included for the OATHAuth extension to
    limit access of user-controlled JavaScript.
  * Standards-Version: 4.5.0, no changes needed

 -- Kunal Mehta <legoktm@debian.org>  Thu, 26 Mar 2020 15:30:16 -0700

mediawiki (1:1.31.6-1) unstable; urgency=medium

  * New upstream version 1.31.6, fixing CVE-2019-19709.
    * Drop Postgres patches merged upstream
  * Suppress a bunch of lintian warnings that are ignored on purpose
  * Sync d/upstream/signing-key.asc with upstream
  * autopkgtests: set allow-stderr for all tests that use sudo. Thanks
    to Mathieu Trudel-Lapierre for reporting and fixing in Ubuntu.
    (Closes: #946665)

 -- Kunal Mehta <legoktm@debian.org>  Thu, 19 Dec 2019 13:20:56 -0800

mediawiki (1:1.31.5-3) unstable; urgency=medium

  * In autopkgtests, skip testing against mysql-server if it
    isn't available, such as in Debian testing
  * Move packaging git repository to Salsa and update relevant
    documentation
  * Set up and configure Salsa CI
  * Sync d/upstream/signing-key.asc with upstream

 -- Kunal Mehta <legoktm@debian.org>  Mon, 25 Nov 2019 00:59:49 -0800

mediawiki (1:1.31.5-2) unstable; urgency=medium

  * Add extra debugging information to autopkgtests
  * Backport patches from upstream for Postgresql 12 compatibility
    (Closes: #944650)

 -- Kunal Mehta <legoktm@debian.org>  Fri, 15 Nov 2019 15:28:16 -0800

mediawiki (1:1.31.5-1) unstable; urgency=medium

  * New upstream version 1.31.5
  * Incorporate MySQL autopkgtest improvements from Lars Tangvald
    and Robie Basak from Ubuntu:
    * Use a different method besides MySQL 8.0's default authentication
      because PHP doesn't currently support it.
    * Explicitly test MySQL and MariaDB regardless of which one is the
      default.
  * Standards-Version: 4.4.1, no changes needed

 -- Kunal Mehta <legoktm@debian.org>  Sat, 26 Oct 2019 18:01:59 -0700

mediawiki (1:1.31.4-1) unstable; urgency=medium

  * New upstream version 1.31.4 (security release), fixing
    CVE-2019-16738.

 -- Kunal Mehta <legoktm@debian.org>  Fri, 11 Oct 2019 14:47:07 -0700

mediawiki (1:1.31.2-1) unstable; urgency=medium

  [ Kunal Mehta ]
  * New upstream version 1.31.2 (security release), fixing
    CVE-2019-12466, CVE-2019-12467, CVE-2019-12468, CVE-2019-12469,
    CVE-2019-12470, CVE-2019-12471, CVE-2019-12472, CVE-2019-12473,
    CVE-2019-12474. The bundled jQuery was also updated, fixing
    CVE-2019-11358.
  * Fix regex that was breaking file uploads in PHP 7.3
    (Closes: #928716).
  * Sync upstream/signing-key.asc with mediawiki.org.
  * Drop patch merged upstream.
  * Revert "Temporarily add allow-stderr restriction to autopkgtests",
    as it was fixed upstream.

  [ Mark A. Hershberger ]
  * Fix indentation in README.Debian

 -- Kunal Mehta <legoktm@debian.org>  Wed, 05 Jun 2019 22:40:28 -0400

mediawiki (1:1.31.1-4) unstable; urgency=medium

  * Update my email address
  * Temporarily add allow-stderr restriction to autopkgtests (Closes: #911829)

 -- Kunal Mehta <legoktm@debian.org>  Thu, 25 Oct 2018 23:19:40 -0700

mediawiki (1:1.31.1-3) unstable; urgency=medium

  * Document removal of CologneBlue and Modern in NEWS (Closes: #909589)
  * Document filesystem structure in README.Debian

 -- Kunal Mehta <legoktm@member.fsf.org>  Wed, 26 Sep 2018 20:41:24 -0700

mediawiki (1:1.31.1-2) unstable; urgency=medium

  * Fix SQLite autopkgtests.
  * Remove bogus version dependency upon php-common.
  * Fix some package-contains-documentation-outside-usr-share-doc issues.

 -- Kunal Mehta <legoktm@member.fsf.org>  Sat, 22 Sep 2018 16:16:02 -0700

# For older changelog entries, run 'apt-get changelog mediawiki-classes'
