Update ghcr.io/element-hq/synapse Docker tag to v1.136.0 #536
Reference in New Issue
Block a user
No description provided.
Delete Branch "renovate/ghcr.io-element-hq-synapse-1.x"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
This PR contains the following updates:
v1.135.2
->v1.136.0
Release Notes
element-hq/synapse (ghcr.io/element-hq/synapse)
v1.136.0
Compare Source
Synapse 1.136.0 (2025-08-12)
Note: This release includes the security fixes from
1.135.2
and1.136.0rc2
, detailed below.Please also check the relevant section in the upgrade notes for the changes to MAS support, metrics labels and the module API which may require your attention when upgrading.
Bugfixes
Synapse 1.136.0rc2 (2025-08-11)
This is the Synapse portion of the Matrix coordinated security release. This release includes support for room version 12 which fixes a number of security vulnerabilities, including CVE-2025-49090.
The default room version is not changed. Not all clients will support room version 12 immediately, and not all users will be using the latest version of their clients. Large, public rooms are advised to wait a few weeks before upgrading to room version 12 to allow users throughout the Matrix ecosystem to update their clients.
Note: release 1.135.1 was skipped due to issues discovered during the release process.
Two patched Synapse releases are now available:
1.135.2
: stable release comprised of1.135.0
+ security patches1.136.0rc2
: unstable release candidate comprised of1.136.0rc1
+ security patches.Bugfixes
Internal Changes
upgrade_rooms(..)
to allow auto join local users. (#83)Synapse 1.136.0rc1 (2025-08-05)
Features
unsigned
. (#18585)http_proxy
,https_proxy
,no_proxy_hosts
. (#18686)/_matrix/clients/versions
if enabled. (#18722)Bugfixes
Improved Documentation
receipts
stream. (#18760)Deprecations and Removals
run_as_background_process
exported as part of the module API interface in favor ofModuleApi.run_as_background_process
. See the relevant section in the upgrade notes for more information. (#18737)Internal Changes
Counter
,LaterGauge
,GaugeBucketCollector
,Histogram
, andGauge
metrics to be homeserver-scoped. (#18656, #18714, #18715, #18724, #18753, #18725, #18670, #18748, #18751)twisted.internet.testing
module in tests instead of deprecatedtwisted.test.proto_helpers
. (#18728)/send_event
replication endpoint. (#18730)twisted.protocols.amp.TooLong
error by reducing logging in some tests. (#18736)Clock.sleep(...)
return a coroutine, so that mypy can catch places where we don't await on it. (#18772)Updates to locked dependencies
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Renovate Bot.