Support Semantic MediaWiki 7.0

.github/workflows/ci.yaml

@@ -17,39 +17,32 @@ jobs:
     strategy:
       matrix:
         include:
-          - mediawiki_version: '1.39'
+          - mediawiki_version: '1.43'
             smw_version: dev-master
             php_version: 8.1
             database_type: mysql
-            database_image: "mariadb:10"
+            database_image: "mariadb:10.11"
             coverage: false
             experimental: false
-          - mediawiki_version: '1.40'
+          - mediawiki_version: '1.43'
             smw_version: dev-master
-            php_version: 8.1
+            php_version: 8.2
             database_type: mysql
-            database_image: "mariadb:11.2"
+            database_image: "mariadb:11.4"
             coverage: true
             experimental: false
-          - mediawiki_version: '1.41'
-            smw_version: dev-master
-            php_version: 8.1
-            database_type: mysql
-            database_image: "mariadb:11.2"
-            coverage: false
-            experimental: false
-          - mediawiki_version: '1.42'
+          - mediawiki_version: '1.44'
             smw_version: dev-master
-            php_version: 8.1
+            php_version: 8.3
             database_type: mysql
-            database_image: "mariadb:11.2"
+            database_image: "mariadb:11.8"
             coverage: false
             experimental: false
-          - mediawiki_version: '1.43'
+          - mediawiki_version: '1.45'
             smw_version: dev-master
-            php_version: 8.1
+            php_version: 8.4
             database_type: mysql
-            database_image: "mariadb:11.2"
+            database_image: "mariadb:12.3"
             coverage: false
             experimental: false
 
@@ -60,13 +53,12 @@ jobs:
       DB_TYPE: ${{ matrix.database_type }}
       DB_IMAGE: ${{ matrix.database_image }}
 
-
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           submodules: recursive
-                   
+
       - name: Update submodules
         run: git submodule update --init --remote
 
@@ -79,7 +71,7 @@ jobs:
         if: matrix.coverage == true
 
       - name: Upload code coverage
-        uses: codecov/codecov-action@v4
+        uses: codecov/codecov-action@v6
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
           files: coverage/php/coverage.xml

.phpcs.xml

@@ -30,7 +30,10 @@
 	</rule>
 	<rule ref="MediaWiki.NamingConventions.ValidGlobalName">
 		<properties>
-			<property name="allowedPrefixes" type="array" value="eg,wg" />
+			<property name="allowedPrefixes" type="array">
+				<element value="eg"/>
+				<element value="wg"/>
+			</property>
 		</properties>
 	</rule>
 	<rule ref="MediaWiki.Commenting.FunctionComment.ObjectTypeHintReturn">

Makefile

@@ -11,10 +11,10 @@ endif
 EXTENSION=SemanticExternalQueryLookup
 
 # docker images
-MW_VERSION?=1.39
+MW_VERSION?=1.43
 PHP_VERSION?=8.1
 DB_TYPE?=mysql
-DB_IMAGE?="mariadb:10"
+DB_IMAGE?="mariadb:11.4"
 
 # extensions
 SMW_VERSION?=dev-master

RELEASE-NOTES.md

@@ -1,5 +1,11 @@
 This file contains the RELEASE-NOTES of the Semantic External Query Lookup (a.k.a. SEQL) extension.
 
+### 2.0.0 (2026-??-??)
+
+- Added support for Semantic MediaWiki 7.0
+- Raised the minimum requirements to MediaWiki 1.43 and Semantic MediaWiki 7.0
+- Replaced the `mediawiki/http-request` dependency with MediaWiki core's `HttpRequestFactory`
+
 ### 1.0.0 (2016-??-??)
 
 - Initial release

SECURITY.md

@@ -0,0 +1,51 @@
+# Security Policy
+
+## Supported versions
+
+Security fixes are provided for the latest major version of Semantic External
+Query Lookup. Please upgrade to the current release before reporting an issue.
+Fixes ship in a new release rather than as backports to older versions.
+
+## Reporting a vulnerability
+
+Please do **not** report security vulnerabilities through public GitHub issues,
+pull requests, the mailing list, or the project wiki.
+
+Instead, report them privately using GitHub's
+[private vulnerability reporting](https://github.com/SemanticMediaWiki/SemanticExternalQueryLookup/security/advisories/new).
+Please include the affected version, steps to reproduce, and the potential
+impact.
+
+A maintainer will respond to your report, keep you informed of the progress
+towards a fix, and may ask for additional information.
+
+## Disclosure process
+
+To minimise the risk of exploitation, please give us a reasonable opportunity to
+release a fix before any public disclosure. After a report is submitted, we aim
+to:
+
+- Acknowledge the report within 15 days.
+- Confirm the issue and assess its severity and impact.
+- Prepare and release a fix, prioritised by severity, keeping the reporter
+  informed of progress.
+- Publish a security advisory once a fix is available, crediting the reporter
+  unless they prefer to remain anonymous.
+
+Remediation time depends on the severity and complexity of the issue. For
+coordinated disclosure we aim to release a fix within 90 days where feasible.
+
+Because the repository is public and can be watched by potential attackers,
+please avoid describing the vulnerability in public channels, including commit
+messages and issue comments, until a fix has been released.
+
+## Vulnerabilities in MediaWiki or Semantic MediaWiki
+
+Semantic External Query Lookup is an extension to MediaWiki that builds on
+Semantic MediaWiki. If the issue is actually in one of those rather than in
+Semantic External Query Lookup itself, please report it there instead:
+
+- For Semantic MediaWiki, use its
+  [private vulnerability reporting](https://github.com/SemanticMediaWiki/SemanticMediaWiki/security/advisories/new).
+- For MediaWiki core or another extension, contact the
+  [Wikimedia security team](https://www.mediawiki.org/wiki/Reporting_security_bugs).

SemanticExternalQueryLookup.php

@@ -17,7 +17,7 @@ class SemanticExternalQueryLookup {
 	 * @since 1.0
 	 */
 	public static function onExtensionFunction() {
-		define( 'SEQL_VERSION', '1.0.0-alpha' );
+		define( 'SEQL_VERSION', '2.0.0-alpha' );
 		class_alias( 'SEQL\ByHttpRequestQueryLookup', 'SMWExternalQueryLookup' ); // deprecated
 		class_alias( 'SEQL\ByHttpRequestQueryLookup', 'SMWExternalAskQueryLookup' );
 

codecov.yml

@@ -1,2 +1,12 @@
+coverage:
+  status:
+    project:
+      default:
+        informational: true
+        removed_code_behavior: adjust_base
+    patch:
+      default:
+        informational: true
+
 fixes:
   - "/var/www/html/extensions/SemanticExternalQueryLookup/::"

composer.json

@@ -26,18 +26,17 @@
 	},
 	"require": {
 		"php": ">=8.1.0",
-		"composer/installers": ">=1.0.1",
-		"mediawiki/http-request": "~2.0|~1.1"
+		"composer/installers": ">=1.0.1"
 	},
 	"require-dev": {
-		"mediawiki/mediawiki-codesniffer": "43.0.0",
+		"mediawiki/mediawiki-codesniffer": "48.0.0",
 		"mediawiki/minus-x": "1.1.3",
 		"php-parallel-lint/php-console-highlighter": "1.0.0",
 		"php-parallel-lint/php-parallel-lint": "1.4.0"
 	},
 	"extra": {
 		"branch-alias": {
-			"dev-master": "1.x-dev"
+			"dev-master": "2.x-dev"
 		}
 	},
 	"config": {
@@ -67,10 +66,11 @@
 		"phpunit": "php ${MW_INSTALL_PATH:-../..}/tests/phpunit/phpunit.php -c phpunit.xml.dist",
 		"phpunit-coverage": "php ${MW_INSTALL_PATH:-../..}/tests/phpunit/phpunit.php -c phpunit.xml.dist --testdox --coverage-text --coverage-html coverage/php --coverage-clover coverage/php/coverage.xml",
 		"post-test-coverage": [
-			"sed -i 's|/var/www/html/extensions/SemanticResultFormats/||g' coverage/php/coverage.xml",
+			"sed -i 's|/var/www/html/extensions/SemanticExternalQueryLookup/||g' coverage/php/coverage.xml",
 			"find coverage/php -type f -name '*.html' -exec sed -i 's|/var/www/html/extensions/||g' {} +"
 		],
-		"integration": "composer phpunit -- --testsuite=semantic-result-formats-integration",
+		"unit": "composer phpunit -- --testsuite=semantic-external-query-lookup-unit",
+		"integration": "composer phpunit -- --testsuite=semantic-external-query-lookup-integration",
 		"phpcs": "phpcs -ps -d memory_limit=2G",
 		"phpcs-fix": "phpcbf -p",
 		"lint": "parallel-lint . --exclude vendor --exclude node_modules --exclude extensions",

extension.json

@@ -1,6 +1,6 @@
 {
 	"name": "SemanticExternalQueryLookup",
-	"version": "1.1.0-alpha",
+	"version": "2.0.0-alpha",
 	"author": [
 		"James Hong Kong"
 	],
@@ -9,9 +9,9 @@
 	"license-name": "GPL-2.0-or-later",
 	"type": "semantic",
 	"requires": {
-		"MediaWiki": ">= 1.39",
+		"MediaWiki": ">= 1.43",
 		"extensions": {
-			"SemanticMediaWiki": ">= 4.2"
+			"SemanticMediaWiki": ">= 7.0"
 		}
 	},
 	"MessagesDirs": {