{
  "canonical_id": "mediawiki--a7589e254a",
  "system_id": "mediawiki",
  "display_name": "MediaWiki",
  "category": "cms",
  "advisory_mode": "core",
  "title": "[MediaWiki-announce] Re: MediaWiki 1.44-beta has been branched",
  "summary": "Correction:\n\nFrom now on, patches that land in the main development branch of MediaWiki\n> and its bundled extensions and skins will be slated for the *MediaWiki\n> 1.45 release*, unless specifically backported [1].\n\n\nOn Tue, May 6, 2025 at 9:12\u202fPM Mateus Santos <msantos\uff20wikimedia.org> wrote:\n\n> Hey all,\n>\n> This is a quick note to highlight that we've created the REL1_44 branch\n> for MediaWiki core and each of the extensions and skins in Wikimedia git\n> [0]. This is the first step in the release process for MediaWiki 1.44.0,\n> which should be out in June 2025, approximately six months after MediaWiki\n> 1.43.0.\n>\n> The branches reflect the code as of the last 'alpha' branch for the\n> release, 1.44.0-wmf.28, which is being deployed to Wikimedia wikis this\n> week for MediaWiki itself and those extensions and skins available there.\n>\n> From now on, patches that land in the main development branch of MediaWiki\n> and its bundled extensions and skins will be slated for the MediaWiki 1.44\n> release, unless specifically backported [1].\n>\n> If you are working on a critical bug fix that will affect the code in the\n> release, once the patch has been merged into the development branch, you\n> should propose it for backporting by cherry-picking to the REL1_44 branch.\n>\n> If you are working on a new feature, that should now not be backported. If\n> you have an urgent case where the work should block release for everyone\n> else, please file a task against the `mw 1.44-release` project on\n> Phabricator [2].\n>\n> If you have tickets that are tagged for `mw-1.44-release`, please finish\n> them, untag them, or reach out to get them resolved in the next few days.\n>\n> We hope to issue the first release candidate, 1.44.0-rc.0, in two weeks'\n> time, and if all goes well, to then release MediaWiki 1.44.0 a few weeks\n> after that.\n>\n> [0]: https://www.mediawiki.org/wiki/Bundled_extensions_and_skins [1]:\n> https://www.mediawiki.org/wiki/Backporting_fixes [2]:\n> https://phabricator.wikimedia.org/tag/mw-1.44-release/\n>\n> Best regards, -- Mateus Santos (he/him) Product Manager MediaWiki\n> Engineering Group\n>",
  "published_at": "Wed, 07 May 2025 07:47:35 +0000",
  "updated_at": "Wed, 07 May 2025 07:47:35 +0000",
  "severity": "unknown",
  "cvss_score": null,
  "exploit_status": "unknown",
  "source_confidence": "official",
  "official_source_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/OSOQWK75KKTMRUCKJBWG4U7P7XC7OBFF/",
  "secondary_source_urls": [],
  "aliases": [],
  "cve_ids": [],
  "ghsa_ids": [],
  "osv_ids": [],
  "affected_versions": [],
  "fixed_versions": [],
  "package_name": null,
  "render_markdown": false,
  "case_path": null,
  "secure_code_topics": [
    "xss-output-encoding",
    "authz-server-side-recheck",
    "file-upload-validation",
    "plugin-extension-trust-policy"
  ],
  "status": "triage",
  "triage_reasons": [
    "missing affected/fixed version details"
  ],
  "verification_status": "triage-manual",
  "verification_mode": "synthetic",
  "last_verified_at": null,
  "last_run_id": null,
  "evidence_bundle": null,
  "historical_status": null,
  "latest_status": null,
  "browser_evidence": {
    "required": false,
    "present": false,
    "refs": []
  },
  "repro_profile_id": "xss-generic",
  "artifact_mode": "synthetic",
  "blocked_reason": null,
  "metadata": {
    "source_names": [
      "MediaWiki Announce RSS"
    ],
    "source_kinds": [
      "rss-feed"
    ],
    "candidate_count": 1
  }
}