Changed TinyMCE init to run only on demand. Highly experimental.

Added modal dialog support for page editor; added customizability for breadcrumbs (thanks to Manoj for idea)

Implemented password reset (albeit hackishly) into the new login API; added dummy window.console object to hopefully reduce errors when Firebug isn't around; fixed the longstanding ACL dismiss/close button bug; fixed a couple undefined variables in mailer; fixed PHP error on attempted opening of /dev/(u)random in rijndael.php; clarified documentation for PageProcessor::update_page(); fixed some logic problems in theme ACL code; disabled CAPTCHA debug

Implemented all security features on theme disabling and ACLs; added clean_key mode to login API to clean unused encryption keys

[minor] fix version number on license block comment in common.php

Oops. Forgot to add the themepreview.png file which is a dummy icon for themes that don't include screenshots. Also in last commit several changes weren't documented, including: Moved several page manipulation functions from PageUtils to PageProcess. Fixed debug message in l10n.js. Started switchover to new rollback API and log_id column replacing time_id as key.

Fixed the fact that cron just didn't work at all (brain fart that day or something)

Modifed EnanoMath layer by segregating it into its own file; got support for big_int PHP extension backend working

Fixed improper serializing of IP that could allow reusing of key from multiple IP addresses.

Finished theme manager to the point where it's in a working state in Firefox and hopefully IE.

Documented includes/plugins.php to try and help plugin developers a little.

Fixed some bugs with $paths->getParam() and $paths->get_pageid_from_url() when slashes are in the namespace prefix. Result of testing on Windows Vista + Apache 2.2. Using TortoiseHG

Minor standards-compliance fix in Request_HTTP

Fixed a number of IE6 bugs

Merging in changes from Nighthawk

Upgraded tinyMCE to 3.0.1 in hopes of fixing IE race conditions. Fixed a couple minor syntax errors in Javascript objects declared in various places.

Merging fixes and updates from stable branch

Fixed: RenderMan::getPage() failing with access denial when fetching template and view_source results in deny

Made all captcha fields case-insensitive (thanks pkeating)

Merging scribus and nighthawk branches

Fixed special pages being returned with subpage information inappropriately from $paths->get_pageid_from_url()

Fixed jBox menus failing to appear when window scrolled down

Fixed case where HTML comments were getting stripped when opening tag not followed by whitespace (<!--foo--> was stripped, <!-- foo --> was not, neither is stripped now)

Re-applying the revision with the comment fix (bad merge a couple revs back)

Fixed case where HTML comments were getting stripped when opening tag not followed by whitespace (<!--foo--> was stripped, <!-- foo --> was not, neither is stripped now)

Merging in a couple revisions from Nighthawk

Fixed broken regenCaptcha() in Special:Register

Not sure if $taboo was getting sanitized or not. Possibly an SQL injection vulnerability that allows maliciously crafted group names to inject SQL at a later date when the group CP is loaded. Unconfirmed, theoretical fix.