Translation update (pt-br)

strict value comparison in auth session check. fixes #4602

Translation update (pt-br)

updated rector and applied it

removed another php 7.4 workaround

removed an old PHP 5 workaround in HTTPClient

remove checks for mbstring.func_overload

This ini setting no longer exists in PHP8, so we don't need to check
for it.

removed php 8 polyfills

declare PrefCookie constant visibility

fix destructuring false returns from changelog functions

The changelog functions can return false when lines are unparsable or
don't exist. The result can no longer be destructured then in newer PHP

fix destructuring false returns from changelog functions

The changelog functions can return false when lines are unparsable or
don't exist. The result can no longer be destructured then in newer PHP
versions. This adds the necessary checks.

It should also handle corrupt lines within a changelog better.

show more ...

avoid using null as cache key

Sometime null is passed as revision to wikiFN. This should not happen
but we're not very strict about the type here. Any falsy value is the
current revision. But using

avoid using null as cache key

Sometime null is passed as revision to wikiFN. This should not happen
but we're not very strict about the type here. Any falsy value is the
current revision. But using null as an array key is deprecated. Also
using different falsy values would also result in different caches, even
though the same revision is meant. So this casts all revisions to
integer and falsy values will be 0 now, solving both issues.

show more ...

Fix deprecation warning in UTF8/Conversion

Original message:

PHP Deprecated: ord(): Providing a string that is not one byte long is deprecated. Use ord($str[0]) instead

update minimum requirement to PHP 8.2

According to https://stitcher.io/blog/php-version-stats-june-2025 most
people are running a newer version anyway. 8.2 still receives security
support til the en

update minimum requirement to PHP 8.2

According to https://stitcher.io/blog/php-version-stats-june-2025 most
people are running a newer version anyway. 8.2 still receives security
support til the end of the year and is the version included in Debian
old-stable (Bookworm).

This patch only increases the minumum version and updates the composer
dependencies. No code has been changed yet.

show more ...

�� Rector and PHPCS fixes

editor a11y: remove tabindex

these do more harm then good

add alt texts for size ctl images

Update session validation checks in auth.php

Refactor session validation to check for user and pass existence.

Translation update (es)

make JWT available in session

When a token authentication was successful, the token is now added to
the user session. This allows other plugins (like twofactor) make use of
it.

TreeBuilder: skip invalid pages and namespaces

This will hide namespace templates or weird folders from listings.
Can be disabled with a flag if needed.

reuse bcrypt default difficulty #2093

Instead of hardcoding our own default, we can use PHP's constant

set explicit referrer-policy

This emits a referrer policy header. It will instruct browsers to send
an abbreviated (host name only) referrer header on cross-origin
requests.

This fixes issues with

set explicit referrer-policy

This emits a referrer policy header. It will instruct browsers to send
an abbreviated (host name only) referrer header on cross-origin
requests.

This fixes issues with YouTube embeds reported at
splitbrain/dokuwiki-plugin-vshare#154

This setting is the default in many browsers, so it doesn't change
behavior for most people.

More info at:

* https://github.com/splitbrain/dokuwiki-plugin-vshare/issues/154
* https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Referrer-Policy

show more ...

�� Rector and PHPCS fixes

minor typo in install.html

Minor typo in install.html, changed "info available on it's own page" to "info available on its own page".

Translation update (ca)