Update matrixdotorg/synapse Docker tag to v1.85.2 #10
Loading…
Reference in New Issue
Block a user
No description provided.
Delete Branch "renovate/matrixdotorg-synapse-1.x"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
This PR contains the following updates:
v1.71.0
->v1.85.2
Release Notes
matrix-org/synapse
v1.85.2
Compare Source
Synapse 1.85.2 (2023-06-08)
Bugfixes
v1.85.1
Compare Source
Synapse 1.85.1 (2023-06-07)
Note: this release only fixes a bug that stopped some deployments from upgrading to v1.85.0. There is no need to upgrade to v1.85.1 if successfully running v1.85.0.
Bugfixes
v1.85.0
Compare Source
Synapse 1.85.0 (2023-06-06)
No significant changes since 1.85.0rc2.
Security advisory
The following issues are fixed in 1.85.0 (and RCs).
GHSA-26c5-ppr8-f33p / CVE-2023-32682 — Low Severity
It may be possible for a deactivated user to login when using uncommon configurations.
GHSA-98px-6486-j7qc / CVE-2023-32683 — Low Severity
A discovered oEmbed or image URL can bypass the
url_preview_url_blacklist
setting potentially allowing server side request forgery or bypassing network policies. Impact is limited to IP addresses allowed by theurl_preview_ip_range_blacklist
setting (by default this only allows public IPs).See the advisories for more details. If you have any questions, email security@matrix.org.
Synapse 1.85.0rc2 (2023-06-01)
Bugfixes
Deprecations and Removals
/register
endpoint with an unspecceduser
property for application services. (#15703)Internal Changes
populate_full_user_id_user_filters
andpopulate_full_user_id_profiles
. (#15700)Synapse 1.85.0rc1 (2023-05-30)
Features
Bugfixes
url_preview_url_blacklist
configuration setting was not applied to oEmbed or image URLs found while previewing a URL. (#15601)app_service_config_files
config option fails would be incorrectly formatted. (#15614)org.matrix.login.jwt
login type (if enabled). (#15624)Improved Documentation
Deprecations and Removals
Internal Changes
full_user_id
of tablesprofiles
anduser_filters
. (#15537)worker_name
when constructing the request. (#15578)thread_id
column onevent_push_actions
,event_push_actions_staging
, andevent_push_summary
non-null. (#15597)state
andstate_group
storage-related operations to better picture what's happening when tracing. (#15610, #15647)ConfigError
s to beStrSequence
s instead ofIterable[str]
s. (#15615)_trial_temp/test.log
). (#15636)trial
test runs. (#15630)HomeServerConfig
cache in trial test runs. (#15646)TransportLayerClient
. (#15663)Updates to locked dependencies
v1.84.1
Compare Source
Synapse 1.84.1 (2023-05-26)
This patch release fixes a major issue with homeservers that do not have an
instance_map
defined but which do use workers.If you have already upgraded to Synapse 1.84.0 and your homeserver is working normally, then there is no need to update to this patch release.
Bugfixes
instance_map
was provided. (#15672)Internal Changes
dch
andnotify-send
to the development Nix flake so that the release script can be used. (#15673)v1.84.0
Compare Source
Synapse 1.84.0 (2023-05-23)
The
worker_replication_*
configuration settings have been deprecated in favour of configuring the main process consistently with other instances in theinstance_map
. The deprecated settings will be removed in Synapse v1.88.0, but changing your configuration in advance is recommended. See the upgrade notes for more information.Bugfixes
Synapse 1.84.0rc1 (2023-05-16)
Features
forget_rooms_on_leave
config option to automatically forget rooms when users leave them or are removed from them. (#15224)/_matrix/client/versions
. (#15559)Bugfixes
"m.push_rules"
via account data. (#15554, #15555)Deprecations and Removals
worker_replication_*
based settings in worker configuration yaml by placing this data directly on theinstance_map
instead. (#15491)Updates to the Docker image
Improved Documentation
statistics/database/rooms
admin API in documentation. (#15560)Internal Changes
Client
for use with HTTP Replication between workers. Contributed by Jason Little. (#15470)event_push_actions
. (#15531)xmlsec
andmdbook
packages and switch back to the upstream cachix/devenv repo in the nix development environment. (#15532, #15533, #15545)"dont_notify"
from the list of actions in default push rules. (#15534)/user/devices
federation queries to application services for MSC3984. (#15539)is_mine_server_name
method. (#15542)PODMAN
environment variable toscripts-dev/complement.sh
. (#15543)org.matrix.msc3981
info to/_matrix/client/versions
. (#15558)/_matrix/client/versions
if the experimental implementation is enabled. (#15562)pip install
to use setuptools_rust 1.6.0 when building Synapse. (#15570)run_as_background_process
from the module API. (#15577)v1.83.0
Compare Source
Synapse 1.83.0 (2023-05-09)
No significant changes since 1.83.0rc1.
Synapse 1.83.0rc1 (2023-05-02)
Features
Bugfixes
Improved Documentation
Internal Changes
full_user_id
to tablesprofiles
anduser_filters
. (#15458)/keys/claim
request. (#15462)v1.82.0
Compare Source
Synapse 1.82.0 (2023-04-25)
No significant changes since 1.82.0rc1.
Synapse 1.82.0rc1 (2023-04-18)
Features
/directory/room/{roomAlias}
endpoint on workers. (#15333)instance_map
configuration loading. (#15431)/capabilities
endpoint on workers. (#15436)Bugfixes
on_logged_out
module hooks will be called before the deletion of pushers. (#15410)app_service_config_files
is not a list. (#15425)RefreshTokenServlet
(/_matrix/client/(r0|v3|unstable)/refresh
) on workers. (#15428)Improved Documentation
delete_stale_devices_after
background job always runs on the main process. (#15452)Deprecations and Removals
Internal Changes
stream_ordering_to_exterm
. (#15382, #15429)creator
to create events. (#15394)redacts
key to acontent
property. (#15395)SimpleHttpClient
to pull out a base class. (#15427)TestSSOHandler
. (#15433)/_matrix/static/
. (#15438)v1.81.0
Compare Source
Synapse 1.81.0 (2023-04-11)
Synapse now attempts the versioned appservice paths before falling back to the legacy paths. Usage of the legacy routes should be considered deprecated.
Additionally, Synapse has supported sending the application service access token via the
Authorization
header since v1.70.0. For backwards compatibility it is also sent as theaccess_token
query parameter. This is insecure and should be considered deprecated.A future version of Synapse (v1.88.0 or later) will remove support for legacy application service routes and query parameter authorization.
No significant changes since 1.81.0rc2.
Synapse 1.81.0rc2 (2023-04-06)
Bugfixes
set_device_id_for_pushers_txn
background update crash. (#15391)Internal Changes
Synapse 1.81.0rc1 (2023-04-04)
Features
/password_policy
endpoint on workers. (#15331)Bugfixes
m.room.message
events would not be correctly bundled. (#15295)to ensure that the sqlite database passed to the script exists before trying to port from it. (#15306)
_INT_STREAM_POS
key. (#15309)Improved Documentation
Internal Changes
immutabledict
instead offrozendict
. (#15113)device_id
instead of theaccess_token_id
for various operations. (#15280)e12eda5
tofc32530
. (#15304)TRUNCATE
on Postgres when clearing the user directory tables. (#15316).gitignore
rule for the Complement source tarball downloaded automatically bycomplement.sh
. (#15319)v1.80.0
Compare Source
Synapse 1.80.0 (2023-03-28)
No significant changes since 1.80.0rc2.
Synapse 1.80.0rc2 (2023-03-22)
Bugfixes
POST /_matrix/client/v3/rooms/{roomId}/report/{eventId}
endpoint would return the wrong error if the user did not have permission to view the event. This aligns Synapse's implementation with MSC2249. (#15298, #15300)would fail to open the SQLite database. (#15301)
Synapse 1.80.0rc1 (2023-03-21)
Features
event_property_contains
push condition. (#15187)/register/available
endpoint on workers. (#15268)Bugfixes
Updates to the Docker image
cryptography
wheel. (#15239)ghcr.io/matrix-org/synapse
). (#15281, #15282)Improved Documentation
Internal Changes
Synapse-Trace-Id
toaccess-control-expose-headers
header. (#14974)HttpTransactionCache
use theRequester
in addition of the just theRequest
to build the transaction key. (#15200)destinations
anddestination_rooms
tables. (#15247)_set_destination_retry_timings_emulated
. (#15266)configure_workers_and_start
script used in Complement tests compatible with older versions of Python. (#15275)/versions
flag for MSC3952. (#15293)v1.79.0
Compare Source
Synapse 1.79.0 (2023-03-14)
No significant changes since 1.79.0rc2.
Synapse 1.79.0rc2 (2023-03-13)
Bugfixes
on_remove_user_third_party_identifier
module API callback would be a no-op. (#15227)Internal Changes
filter_events_for_server
. (#15240)Synapse 1.79.0rc1 (2023-03-07)
Features
on_add_user_third_party_identifier
andon_remove_user_third_party_identifier
. (#15044)/filter
Client-Server APIs on workers. (#15134)event_property_is
push condition. (#15185)Bugfixes
transaction_id
in the events included in many endpoints' responses. (#15174)405
error. (#15180)Updates to the Docker image
Improved Documentation
on_new_event
module API callback runs on. (#15071)federation_verify_certificates
in configuration documentation. (#15139)MatrixFederationHttpClient
methods. (#15148)registration_shared_secret_path
on startup. (#15168)Deprecations and Removals
on_threepid_bind
module callback, to be replaced byon_add_user_third_party_identifier
. See upgrade notes. (#15044)room_alias
field from the/createRoom
response. (#15093)PUT
on the/knock/{roomIdOrAlias}
endpoint. (#15189)type
parameter to the/thumbnail
endpoint. (#15137)PUT
method on the unstable/rooms/<room_id>/batch_send
endpoint. (#15199)Internal Changes
FileExfiltrationWriter
. (#15095)get_event_report
andget_event_reports_paginate
fromRoomStore
toRoomWorkerStore
. (#15165)get_next_txn
method toStreamIdGenerator
to matchMultiWriterIdGenerator
. (#15191)AbstractStreamIdTracker
andAbstractStreamIdGenerator
. (#15192)ruff
. (#15194)test_icu_word_boundary_punctuation
so that it passes with the ICU versions available in Alpine and macOS. (#15177)Locked dependency updates
v1.78.0
Compare Source
Synapse 1.78.0 (2023-02-28)
Bugfixes
Synapse 1.78.0rc1 (2023-02-21)
Features
exact_event_match
push rule condition from MSC3758. (#14964)exact_event_property_contains
push rule condition from MSC3966. (#15045)dont_notify
action from the defaults for the.m.rule.reaction
pushrule. (#15073)Bugfixes
health
listener was configured. (#15096)Improved Documentation
Internal Changes
UnpersistedEventContext
to allow for the batching up of storing state groups. (#14675)_is_local_room_accessible
as part of room visibility in/hierarchy
to clarify the condition for a room being visible. (#14834)WARNING: there is already a transaction in progress
lines appearing in PostgreSQL's logs on some occasions. (#14840)StrCollection
to avoid potential bugs withCollection[str]
. (#14929)/sync
in a few situations. (#14973)contrib
, to make it easier for IDEs to interrogate Synapse's database schema. (#14982)get_user_devices_from_cache
. (#15040)_generate_sync_entry_for_account_data
. (#15047)try_unbind_threepid
and_try_unbind_threepid_with_id_server
to not use dictionaries. (#15053)Locked dependency updates
9cd00a8
to25dc93b
. (#15060)25dc93b
toe12eda5
. (#15101)v1.77.0
Compare Source
Synapse 1.77.0 (2023-02-14)
No significant changes since 1.77.0rc2.
Synapse 1.77.0rc2 (2023-02-10)
Bugfixes
Internal Changes
Synapse 1.77.0rc1 (2023-02-07)
Features
Bugfixes
next_batch
tokens from/sync
could not be used with the/relations
endpoint. (#14866)send_local_online_presence_to
would fail to send presence updates over federation. (#14880)@room
notification levels set tonull
in their (malformed) power levels. (#14942)Internal Changes
StrCollection
to avoid potential bugs withCollection[str]
. (#14922)/sync
in a few situations. (#14908, #14970)/contrib/lnav
. (#14953)v2/send_join/
requests to indicate if they served a partial join response. (#14950)cargo
without theextension-module
option. (#14965)_flatten_dict
. (#14981, #15002)Dependabot updates
e645b0c
to9cd00a8
. (#14968)v1.76.0
Compare Source
Synapse 1.76.0 (2023-01-31)
The 1.76 release is the first to enable faster joins (MSC3706 and MSC3902) by default. Admins can opt-out: see the upgrade notes for more details.
The upgrade from 1.75 to 1.76 changes the account data replication streams in a backwards-incompatible manner. Server operators running a multi-worker deployment should consult the upgrade notes.
Those who are
poetry install
ing from source using our lockfile should ensure their poetry version is 1.3.2 or higher; see upgrade notes.Notes on faster joins
The faster joins project sees the most benefit when joining a room with a large number of members (joined or historical). We expect it to be particularly useful for joining large public rooms like the Matrix HQ or Synapse Admins rooms.
After a faster join, Synapse considers that room "partially joined". In this state, you should be able to
Synapse has to spend more effort to complete the join in the background. Once this finishes, you will be able to
Improved Documentation
Synapse 1.76.0rc2 (2023-01-27)
Bugfixes
Internal Changes
Synapse 1.76.0rc1 (2023-01-25)
Features
set_displayname()
method to the module API for setting a user's display name. (#14629)health
endpoint. (#14747)Bugfixes
/timestamp_to_event
endpoint used for jumping to a specific date in the timeline of a room. (#14799)populate_room_stats
background job could fail on broken rooms. (#14873)Updates to the Docker image
Improved Documentation
x_forwarded
entry in the HTTP listener example configs and remove the remainingworker_main_http_uri
entries. (#14667)tag
tolisteners
section. (#14803)user_directory.search_all_users
. (#14818)worker_manhole
to configuration manual. (#14824)id
field in application service documentation. (#14845)Deprecations and Removals
poetry install
ing from source. (#14860)Internal Changes
Keyring
class for readability. (#14804)poetry.toml
) to.gitignore
. (#14807)cargo fmt
andcargo clippy
to the lint script. (#14822)presence
. (#14825)wait_for_stream_position
to correctly wait for the right instance to advance its token. (#14856, #14872)/state
ids. (#14912)v1.75.0
Compare Source
Synapse 1.75.0 (2023-01-17)
No significant changes since 1.75.0rc2.
Synapse 1.75.0rc2 (2023-01-12)
Bugfixes
/members
or/state
with anat
parameter could fail for newly created rooms, when using multiple workers. (#14817)Synapse 1.75.0rc1 (2023-01-10)
Features
cached
function tosynapse.module_api
that returns a decorator to cache return values of functions. (#14663)/sync
when filtering all rooms, message types, or senders. (#14786)/hierarchy
endpoint. (#14263)Bugfixes
job
name for the workers of a Synapse deployment. (#14644)UNIQUE constraint failed
errors in therotate_notifs
background job. (#14669)device
field from/pushrules
responses. (#14727)picture_claim
configured underoidc_providers
was unused (the default value of"picture"
was used instead). (#14751)Improved Documentation
target_memory_usage
being used in the description for the actualcache_autotune
sub-optiontarget_cache_memory_usage
. (#14674)email
to Server section in config file documentation. (#14730)htmltest
to check links in the Synapse documentation. (#14743)Internal Changes
handle_new_client_event
signature so that a 429 does not reach clients onPartialStateConflictError
, and internally retry when needed instead. (#14665)compute_state_after_events
consistent with other state-fetching functions that take aStateFilter
. (#14676)CachedFunction
. (#14685).direnv/
directory to .gitignore to prevent local state generated by the direnv development tool from being committed. (#14707)msgid
s of any to-device messages that are returned over/sync
. (#14724)dh-virtualenv
to work around an upstream Python 3.11 incompatibility. (#14774)Dependabot updates
v1.74.0
Compare Source
Synapse 1.74.0 (2022-12-20)
Improved Documentation
Synapse 1.74.0rc1 (2022-12-13)
Features
keyIds
parameter when calling/_matrix/key/v2/server
. (#14490, #14525)push.enabled
config option to allow opting out of push notification calculation. (#14551, #14619)/_matrix/client/versions
. (#14576)Bugfixes
POST /rooms/<room_id>/<membership>/
,POST /join/<room_id_or_alias
, or the unspeccedPUT /join/<room_id_or_alias>/<txn_id>
receive an empty HTTP request body. (#14600)register_new_matrix_user
script failing. (#14637)Improved Documentation
pusher
andfederation_sender
functionality. (#14493)turn_allow_guests
example value to lowercasetrue
. (#14634)Internal Changes
ClientRestResource
for both workers and the main process. (#14528)--editable
flag tocomplement.sh
which uses an editable install of Synapse for faster turn-around times whilst developing iteratively. (#14548)gotestfmt
template in CI. (#14611)StateFilter
tosynapse.types
. (#14668)v1.73.0
Compare Source
Synapse 1.73.0 (2022-12-06)
Please note that legacy Prometheus metric names have been removed in this release; see the upgrade notes for more details.
No significant changes since 1.73.0rc2.
Synapse 1.73.0rc2 (2022-12-01)
Bugfixes
Synapse 1.73.0rc1 (2022-11-29)
Features
/messages
withfilter_events_for_client
optimizations. (#14527)device_lists_changes_in_room
. (#14534)/timestamp_to_event
endpoints to stablev1
location (/_matrix/client/v1/rooms/<roomID>/timestamp_to_event?ts=<timestamp>&dir=<direction>
,/_matrix/federation/v1/timestamp_to_event/<roomID>?ts=<timestamp>&dir=<direction>
). (#14471)org.matrix.msc1767.10
) via MSC1767, MSC3931, MSC3932, and MSC3933. (#14520, #14521, #14524)Bugfixes
org.matrix.msc3026.busy
would mistakenly be set toonline
when calling/sync
or/events
on a worker process. (#14393)org.matrix.msc3202.device_one_time_key_counts
key, include a duplicate key oforg.matrix.msc3202.device_one_time_keys_count
to match the name proposed by MSC3202. (#14565)Improved Documentation
Deprecations and Removals
Internal Changes
worker_main_http_uri
configuration setting. This is now handled via internal replication. (#14400, #14476)federation_sender
andpusher
configuration loading. (#14496)(#14509, #14573)
send_join
(potentially updated with received membership events) inassert_host_in_room
. (#14515)scripts-dev/federation_client
: Fix routing on servers with.well-known
files. (#14479)(stream ID, room ID)
position instead of updating theconverted_to_destinations
flag on every row. (#14516).pyi
files. (#14526)Cargo.lock
changes. This is particularly useful for dependabot updates. (#14571)create_new_client_event
. (#14575)poetry.lock
file and in CI scripts. (#14557, #14559, #14560, #14500, #14501, #14502, #14503, #14504, #14505).v1.72.0
Compare Source
Synapse 1.72.0 (2022-11-22)
Please note that Synapse now only supports PostgreSQL 11+, because PostgreSQL 10 has reached end-of-life, c.f. our Deprecation Policy.
Bugfixes
Synapse 1.72.0rc1 (2022-11-16)
Features
Bugfixes
/sync
filter, instead of ignoring it for forward compatibility. (#14369)event_search
table, taking a long time and a large amount of IO. (#14409)Updates to the Docker image
configure_workers_and_start.py
. (#14197)Improved Documentation
Deprecations and Removals
Internal Changes
complement.sh
command line script to request certain types of workers. (#14324)/messages
by relation type) in complement. (#14339)prev_events
. (#14346)get_partial_state_events_batch
does not just give you completely arbitrary partial-state events. (#14417)attrs
andgitpython
. (#14433)PushRuleEvaluator.run
. (#14451)/context
in large rooms. (#14461)Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Renovate Bot.