SearchIndex: extract Collection base class hierarchy

Introduce AbstractCollection as the shared base for all index
collections, with FrequencyCollection and LookupCollection as
the two abstract subc

SearchIndex: extract Collection base class hierarchy

Introduce AbstractCollection as the shared base for all index
collections, with FrequencyCollection and LookupCollection as
the two abstract subclasses differing only in how tokens are
counted (frequency vs dedup).

Key design decisions:
- splitByLength is a constructor parameter on AbstractCollection
controlling whether token/frequency indexes use length-based
file splitting. This is independent of the collection type.
- The reverse index format is self-describing: entries with *
have a group prefix (split), entries without don't (non-split).
No branching needed in parse/format methods.
- addEntity, resolveTokens, updateIndexes, and reverse index
handling all live in AbstractCollection. Subclasses only
implement countTokens().

Concrete collections: PageFulltextCollection (frequency, split),
MediaCollection and ReferencesCollection (lookup, non-split).

Renames FulltextCollection -> PageFulltextCollection and
FulltextCollectionSearch -> FrequencyCollectionSearch.

show more ...

feat: add diff to disableactions config option

Add 'diff' as a checkbox option in the disableactions configuration
setting, allowing admins to disable the diff action separately from
other actions l

feat: add diff to disableactions config option

Add 'diff' as a checkbox option in the disableactions configuration
setting, allowing admins to disable the diff action separately from
other actions like revisions or edit.

When diff is disabled, diff icon links in revision lists and recent
changes are hidden, and the "compare" submit button on page and media
revision pages is removed.

Fixes #4504

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

show more ...

Translation update (pt-br)

strict value comparison in auth session check. fixes #4602

Translation update (pt-br)

updated rector and applied it

removed another php 7.4 workaround

removed an old PHP 5 workaround in HTTPClient

remove checks for mbstring.func_overload

This ini setting no longer exists in PHP8, so we don't need to check
for it.

removed php 8 polyfills

declare PrefCookie constant visibility

fix destructuring false returns from changelog functions

The changelog functions can return false when lines are unparsable or
don't exist. The result can no longer be destructured then in newer PHP

fix destructuring false returns from changelog functions

The changelog functions can return false when lines are unparsable or
don't exist. The result can no longer be destructured then in newer PHP
versions. This adds the necessary checks.

It should also handle corrupt lines within a changelog better.

show more ...

avoid using null as cache key

Sometime null is passed as revision to wikiFN. This should not happen
but we're not very strict about the type here. Any falsy value is the
current revision. But using

avoid using null as cache key

Sometime null is passed as revision to wikiFN. This should not happen
but we're not very strict about the type here. Any falsy value is the
current revision. But using null as an array key is deprecated. Also
using different falsy values would also result in different caches, even
though the same revision is meant. So this casts all revisions to
integer and falsy values will be 0 now, solving both issues.

show more ...

Fix deprecation warning in UTF8/Conversion

Original message:

PHP Deprecated: ord(): Providing a string that is not one byte long is deprecated. Use ord($str[0]) instead

update minimum requirement to PHP 8.2

According to https://stitcher.io/blog/php-version-stats-june-2025 most
people are running a newer version anyway. 8.2 still receives security
support til the en

update minimum requirement to PHP 8.2

According to https://stitcher.io/blog/php-version-stats-june-2025 most
people are running a newer version anyway. 8.2 still receives security
support til the end of the year and is the version included in Debian
old-stable (Bookworm).

This patch only increases the minumum version and updates the composer
dependencies. No code has been changed yet.

show more ...

�� Rector and PHPCS fixes

editor a11y: remove tabindex

these do more harm then good

add alt texts for size ctl images

Update session validation checks in auth.php

Refactor session validation to check for user and pass existence.

Translation update (es)

make JWT available in session

When a token authentication was successful, the token is now added to
the user session. This allows other plugins (like twofactor) make use of
it.

TreeBuilder: skip invalid pages and namespaces

This will hide namespace templates or weird folders from listings.
Can be disabled with a flag if needed.

reuse bcrypt default difficulty #2093

Instead of hardcoding our own default, we can use PHP's constant

add custom client_ip_header

set explicit referrer-policy

This emits a referrer policy header. It will instruct browsers to send
an abbreviated (host name only) referrer header on cross-origin
requests.

This fixes issues with

set explicit referrer-policy

This emits a referrer policy header. It will instruct browsers to send
an abbreviated (host name only) referrer header on cross-origin
requests.

This fixes issues with YouTube embeds reported at
splitbrain/dokuwiki-plugin-vshare#154

This setting is the default in many browsers, so it doesn't change
behavior for most people.

More info at:

* https://github.com/splitbrain/dokuwiki-plugin-vshare/issues/154
* https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Referrer-Policy

show more ...