Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update matrixdotorg/synapse Docker tag to v1.114.0 #37

Merged
merged 1 commit into from
Sep 14, 2024
Merged

Update matrixdotorg/synapse Docker tag to v1.114.0 #37

merged 1 commit into from
Sep 14, 2024

Conversation

soerenschneider
Copy link
Owner

This PR contains the following updates:

Package Update Change
matrixdotorg/synapse (source) minor v1.105.0 -> v1.114.0

Release Notes

element-hq/synapse (matrixdotorg/synapse)

v1.114.0

Compare Source

Synapse 1.114.0 (2024-09-02)

This release enables support for MSC4186 — Simplified Sliding Sync. This allows using the upcoming releases of the Element X mobile apps without having to run a Sliding Sync Proxy.

Features

Synapse 1.114.0rc3 (2024-08-30)

Bugfixes
  • Fix regression in v1.114.0rc2 that caused workers to fail to start. (#​17626)

Synapse 1.114.0rc2 (2024-08-30)

Features
  • Improve cross-signing upload when using MSC3861 to use a custom UIA flow stage, with web fallback support. (#​17509)
  • Make hash_password script accept password input from stdin. (#​17608)
Bugfixes
  • Fix hierarchy returning 403 when room is accessible through federation. Contributed by Krishan (@​kfiven). (#​17194)
  • Fix content-length on federation /thumbnail responses. (#​17532)
  • Fix authenticated media responses using a wrong limit when following redirects over federation. (#​17543)
Internal Changes
  • MSC3861: load the issuer and account management URLs from OIDC discovery. (#​17407)
  • Refactor sliding sync class into multiple files. (#​17595)
  • Store sliding sync per-connection state in the database. (#​17599)
  • Make the sliding sync PerConnectionState class immutable. (#​17600)
  • Add support to @tag_args for standalone functions. (#​17604)
  • Speed up incremental syncs in sliding sync by adding some more caching. (#​17606)
  • Always return the user's own read receipts in sliding sync. (#​17617)
  • Replace isort and black with ruff. (#​17620)
  • Refactor sliding sync code to move room list logic out into a separate class. (#​17622)
Updates to locked dependencies
  • Bump attrs from 23.2.0 to 24.2.0. (#​17609)
  • Bump cryptography from 42.0.8 to 43.0.0. (#​17584)
  • Bump phonenumbers from 8.13.43 to 8.13.44. (#​17610)
  • Bump pygithub from 2.3.0 to 2.4.0. (#​17612)
  • Bump pyyaml from 6.0.1 to 6.0.2. (#​17611)
  • Bump sentry-sdk from 2.12.0 to 2.13.0. (#​17585)
  • Bump serde from 1.0.206 to 1.0.208. (#​17581)
  • Bump serde from 1.0.208 to 1.0.209. (#​17613)
  • Bump serde_json from 1.0.124 to 1.0.125. (#​17582)
  • Bump serde_json from 1.0.125 to 1.0.127. (#​17614)
  • Bump types-jsonschema from 4.23.0.20240712 to 4.23.0.20240813. (#​17583)
  • Bump types-setuptools from 71.1.0.20240726 to 71.1.0.20240818. (#​17586)

Synapse 1.114.0rc1 (2024-08-20)

Features
  • Add a flag to /versions, org.matrix.simplified_msc3575, to indicate whether experimental sliding sync support has been enabled. (#​17571)
  • Handle changes in timeline_limit in experimental sliding sync. (#​17579)
  • Correctly track read receipts that should be sent down in experimental sliding sync. (#​17575, #​17589, #​17592)
Bugfixes
  • Start handlers for new media endpoints when media resource configured. (#​17483)
  • Fix timeline ordering (using stream_ordering instead of topological ordering) in experimental MSC3575 Sliding Sync /sync endpoint. (#​17510)
  • Fix experimental sliding sync implementation to remember any updates in rooms that were not sent down immediately. (#​17535)
  • Better exclude partially stated rooms if we must await full state in experimental MSC3575 Sliding Sync /sync endpoint. (#​17538)
  • Handle lower-case http headers in _Mulitpart_Parser_Protocol. (#​17545)
  • Fix fetching federation signing keys from servers that omit old_verify_keys. Contributed by @​tulir @​ Beeper. (#​17568)
  • Fix bug where we would respond with an error when a remote server asked for media that had a length of 0, using the new multipart federation media endpoint. (#​17570)
Improved Documentation
Internal Changes
  • Add more tracing to experimental MSC3575 Sliding Sync /sync endpoint. (#​17514)
  • Fixup comment in sliding sync implementation. (#​17531)
  • Replace override of deprecated method HTTPAdapter.get_connection with get_connection_with_tls_context. (#​17536)
  • Fix performance of device lists in /key/changes and sliding sync. (#​17537, #​17548)
  • Bump setuptools from 67.6.0 to 72.1.0. (#​17542)
  • Add a utility function for generating random event IDs. (#​17557)
  • Speed up responding to media requests. (#​17558, #​17561, #​17564, #​17566, #​17567, #​17569)
  • Test github token before running release script steps. (#​17562)
  • Reduce log spam of multipart files. (#​17563)
  • Refactor per-connection state in experimental sliding sync handler. (#​17574)
  • Add histogram metrics for sliding sync processing time. (#​17593)
Updates to locked dependencies
  • Bump bytes from 1.6.1 to 1.7.1. (#​17526)
  • Bump lxml from 5.2.2 to 5.3.0. (#​17550)
  • Bump phonenumbers from 8.13.42 to 8.13.43. (#​17551)
  • Bump regex from 1.10.5 to 1.10.6. (#​17527)
  • Bump sentry-sdk from 2.10.0 to 2.12.0. (#​17553)
  • Bump serde from 1.0.204 to 1.0.206. (#​17556)
  • Bump serde_json from 1.0.122 to 1.0.124. (#​17555)
  • Bump sigstore/cosign-installer from 3.5.0 to 3.6.0. (#​17549)
  • Bump types-pyyaml from 6.0.12.20240311 to 6.0.12.20240808. (#​17552)
  • Bump types-requests from 2.31.0.20240406 to 2.32.0.20240712. (#​17524)

v1.113.0

Compare Source

Synapse 1.113.0 (2024-08-13)

No significant changes since 1.113.0rc1.

Synapse 1.113.0rc1 (2024-08-06)

Features
  • Track which rooms have been sent to clients in the experimental MSC3575 Sliding Sync /sync endpoint. (#​17447)
  • Add Account Data extension support to experimental MSC3575 Sliding Sync /sync endpoint. (#​17477)
  • Add receipts extension support to experimental MSC3575 Sliding Sync /sync endpoint. (#​17489)
  • Add typing notification extension support to experimental MSC3575 Sliding Sync /sync endpoint. (#​17505)
Bugfixes
  • Update experimental MSC3575 Sliding Sync /sync endpoint to handle invite/knock rooms when filtering. (#​17450)
  • Fix a bug introduced in v1.110.0 which caused /keys/query to return incomplete results, leading to high network activity and CPU usage on Matrix clients. (#​17499)
Improved Documentation
Internal Changes
  • Change sliding sync to use their own token format in preparation for storing per-connection state. (#​17452)
  • Ensure we don't send down negative bump_stamp in experimental sliding sync endpoint. (#​17478)
  • Do not send down empty room entries down experimental sliding sync endpoint. (#​17479)
  • Refactor Sliding Sync tests to better utilize the SlidingSyncBase. (#​17481, #​17482)
  • Add some opentracing tags and logging to the experimental sliding sync implementation. (#​17501)
  • Split and move Sliding Sync tests so we have some more sane test file sizes. (#​17504)
  • Update the limited field description in the Sliding Sync response to accurately describe what it actually represents. (#​17507)
  • Easier to understand timeline assertions in Sliding Sync tests. (#​17511)
  • Reset the sliding sync connection if we don't recognize the per-connection state position. (#​17529)
Updates to locked dependencies
  • Bump bcrypt from 4.1.3 to 4.2.0. (#​17495)
  • Bump black from 24.4.2 to 24.8.0. (#​17522)
  • Bump phonenumbers from 8.13.39 to 8.13.42. (#​17521)
  • Bump ruff from 0.5.4 to 0.5.5. (#​17494)
  • Bump serde_json from 1.0.120 to 1.0.121. (#​17493)
  • Bump serde_json from 1.0.121 to 1.0.122. (#​17525)
  • Bump towncrier from 23.11.0 to 24.7.1. (#​17523)
  • Bump types-pyopenssl from 24.1.0.20240425 to 24.1.0.20240722. (#​17496)
  • Bump types-setuptools from 70.1.0.20240627 to 71.1.0.20240726. (#​17497)

v1.112.0

Compare Source

Synapse 1.112.0 (2024-07-30)

This security release is to update our locked dependency on Twisted to 24.7.0rc1, which includes a security fix for CVE-2024-41671 / GHSA-c8m8-j448-xjx7: Disordered HTTP pipeline response in twisted.web, again.

Note that this security fix is also available as Synapse 1.111.1, which does not include the rest of the changes in Synapse 1.112.0.

This issue means that, if multiple HTTP requests are pipelined in the same TCP connection, Synapse can send responses to the wrong HTTP request.
If a reverse proxy was configured to use HTTP pipelining, this could result in responses being sent to the wrong user, severely harming confidentiality.

With that said, despite being a high severity issue, we consider it unlikely that Synapse installations will be affected.
The use of HTTP pipelining in this fashion would cause worse performance for clients (request-response latencies would be increased as users' responses would be artificially blocked behind other users' slow requests). Further, Nginx and Haproxy, two common reverse proxies, do not appear to support configuring their upstreams to use HTTP pipelining and thus would not be affected. For both of these reasons, we consider it unlikely that a Synapse deployment would be set up in such a configuration.

Despite that, we cannot rule out that some installations may exist with this unusual setup and so we are releasing this security update today.

pip users: Note that by default, upgrading Synapse using pip will not automatically upgrade Twisted. Please manually install the new version of Twisted using pip install Twisted==24.7.0rc1. Note also that even the --upgrade-strategy=eager flag to pip install -U matrix-synapse will not upgrade Twisted to a patched version because it is only a release candidate at this time.

Internal Changes
  • Upgrade locked dependency on Twisted to 24.7.0rc1. (#​17502)

Synapse 1.112.0rc1 (2024-07-23)

Please note that this release candidate does not include the security dependency update
included in version 1.111.1 as this version was released before 1.111.1.
The same security fix can be found in the full release of 1.112.0.

Features
  • Add to-device extension support to experimental MSC3575 Sliding Sync /sync endpoint. (#​17416)
  • Populate name/avatar fields in experimental MSC3575 Sliding Sync /sync endpoint. (#​17418)
  • Populate heroes and room summary fields (joined_count, invited_count) in experimental MSC3575 Sliding Sync /sync endpoint. (#​17419)
  • Populate is_dm room field in experimental MSC3575 Sliding Sync /sync endpoint. (#​17429)
  • Add room subscriptions to experimental MSC3575 Sliding Sync /sync endpoint. (#​17432)
  • Prepare for authenticated media freeze. (#​17433)
  • Add E2EE extension support to experimental MSC3575 Sliding Sync /sync endpoint. (#​17454)
Bugfixes
  • Add configurable option to always include offline users in presence sync results. Contributed by @​Michael-Hollister. (#​17231)
  • Fix bug in experimental MSC3575 Sliding Sync /sync endpoint when using room type filters and the user has one or more remote invites. (#​17434)
  • Order heroes by stream_ordering as the Matrix specification states (applies to /sync). (#​17435)
  • Fix rare bug where /sync would break for a user when using workers with multiple stream writers. (#​17438)
Improved Documentation
Internal Changes
  • Make sure we always use the right logic for enabling the media repo. (#​17424)
  • Fix argument documentation for method RateLimiter.record_action. (#​17426)
  • Reduce volume of 'Waiting for current token' logs, which were introduced in v1.109.0. (#​17428)
  • Limit concurrent remote downloads to 6 per IP address, and decrement remote downloads without a content-length from the ratelimiter after the download is complete. (#​17439)
  • Remove unnecessary call to resume producing in fake channel. (#​17449)
  • Update experimental MSC3575 Sliding Sync /sync endpoint to bump room when it is created. (#​17453)
  • Speed up generating sliding sync responses. (#​17458)
  • Add cache to get_rooms_for_local_user_where_membership_is to speed up sliding sync. (#​17460)
  • Speed up fetching room keys from backup. (#​17461)
  • Speed up sorting of the room list in sliding sync. (#​17468)
  • Implement handling of $ME as a state key in sliding sync. (#​17469)
Updates to locked dependencies
  • Bump bytes from 1.6.0 to 1.6.1. (#​17441)
  • Bump hiredis from 2.3.2 to 3.0.0. (#​17464)
  • Bump jsonschema from 4.22.0 to 4.23.0. (#​17444)
  • Bump matrix-org/done-action from 2 to 3. (#​17440)
  • Bump mypy from 1.9.0 to 1.10.1. (#​17445)
  • Bump pyopenssl from 24.1.0 to 24.2.1. (#​17465)
  • Bump ruff from 0.5.0 to 0.5.4. (#​17466)
  • Bump sentry-sdk from 2.6.0 to 2.8.0. (#​17456)
  • Bump sentry-sdk from 2.8.0 to 2.10.0. (#​17467)
  • Bump setuptools from 67.6.0 to 70.0.0. (#​17448)
  • Bump twine from 5.1.0 to 5.1.1. (#​17443)
  • Bump types-jsonschema from 4.22.0.20240610 to 4.23.0.20240712. (#​17446)
  • Bump ulid from 1.1.2 to 1.1.3. (#​17442)
  • Bump zipp from 3.15.0 to 3.19.1. (#​17427)

v1.111.1

Compare Source

Synapse 1.111.1 (2024-07-30)

This security release is to update our locked dependency on Twisted to 24.7.0rc1, which includes a security fix for CVE-2024-41671 / GHSA-c8m8-j448-xjx7: Disordered HTTP pipeline response in twisted.web, again.

This issue means that, if multiple HTTP requests are pipelined in the same TCP connection, Synapse can send responses to the wrong HTTP request.
If a reverse proxy was configured to use HTTP pipelining, this could result in responses being sent to the wrong user, severely harming confidentiality.

With that said, despite being a high severity issue, we consider it unlikely that Synapse installations will be affected.
The use of HTTP pipelining in this fashion would cause worse performance for clients (request-response latencies would be increased as users' responses would be artificially blocked behind other users' slow requests). Further, Nginx and Haproxy, two common reverse proxies, do not appear to support configuring their upstreams to use HTTP pipelining and thus would not be affected. For both of these reasons, we consider it unlikely that a Synapse deployment would be set up in such a configuration.

Despite that, we cannot rule out that some installations may exist with this unusual setup and so we are releasing this security update today.

pip users: Note that by default, upgrading Synapse using pip will not automatically upgrade Twisted. Please manually install the new version of Twisted using pip install Twisted==24.7.0rc1. Note also that even the --upgrade-strategy=eager flag to pip install -U matrix-synapse will not upgrade Twisted to a patched version because it is only a release candidate at this time.

Internal Changes
  • Upgrade locked dependency on Twisted to 24.7.0rc1. (#​17502)

v1.111.0

Compare Source

Synapse 1.111.0 (2024-07-16)

No significant changes since 1.111.0rc2.

Synapse 1.111.0rc2 (2024-07-10)

Bugfixes
  • Fix bug where using synapse.app.media_repository worker configuration would break the new media endpoints. (#​17420)
Improved Documentation
Internal Changes
  • Route authenticated federation media requests to media repository workers in Complement tests. (#​17422)

Synapse 1.111.0rc1 (2024-07-09)

Features
Bugfixes
  • Fix rare race which caused no new to-device messages to be received from remote server. (#​17362)
  • Fix bug in experimental MSC3575 Sliding Sync /sync endpoint when using an old database. (#​17398)
Improved Documentation
  • Clarify that url_preview_url_blacklist is a usability feature. (#​17356)
  • Fix broken links in README. (#​17379)
  • Clarify that changelog content and file extension need to match in order for entries to merge. (#​17399)
Internal Changes
  • Make the release script create a release branch for Complement as well. (#​17318)
  • Fix uploading packages to PyPi. (#​17363)
  • Add CI check for the README. (#​17367)
  • Fix linting errors from new ruff version. (#​17381, #​17411)
  • Fix building debian packages on non-clean checkouts. (#​17390)
  • Finish up work to allow per-user feature flags. (#​17392, #​17410)
  • Allow enabling sliding sync per-user. (#​17393)
Updates to locked dependencies
  • Bump certifi from 2023.7.22 to 2024.7.4. (#​17404)
  • Bump cryptography from 42.0.7 to 42.0.8. (#​17382)
  • Bump ijson from 3.2.3 to 3.3.0. (#​17413)
  • Bump log from 0.4.21 to 0.4.22. (#​17384)
  • Bump mypy-zope from 1.0.4 to 1.0.5. (#​17414)
  • Bump pillow from 10.3.0 to 10.4.0. (#​17412)
  • Bump pydantic from 2.7.1 to 2.8.2. (#​17415)
  • Bump ruff from 0.3.7 to 0.5.0. (#​17381)
  • Bump serde from 1.0.203 to 1.0.204. (#​17409)
  • Bump serde_json from 1.0.117 to 1.0.120. (#​17385, #​17408)
  • Bump types-setuptools from 69.5.0.20240423 to 70.1.0.20240627. (#​17380)

v1.110.0

Compare Source

Synapse 1.110.0 (2024-07-03)

No significant changes since 1.110.0rc3.

Synapse 1.110.0rc3 (2024-07-02)

Bugfixes
  • Fix bug where /sync requests could get blocked indefinitely after an upgrade from Synapse versions before v1.109.0. (#​17386, #​17391)
Internal Changes
  • Limit size of presence EDUs to 50 entries. (#​17371)
  • Fix building debian package for debian sid. (#​17389)

Synapse 1.110.0rc2 (2024-06-26)

Internal Changes
  • Fix uploading packages to PyPi. (#​17363)

Synapse 1.110.0rc1 (2024-06-26)

Features
  • Add initial implementation of an experimental MSC3575 Sliding Sync /sync endpoint. (#​17187, #​17301)
    • Native sliding sync support is coming, but is not yet ready for usage outside of initial client development and testing. Expect to see much more on this feature in the next few Synapse releases.
  • Add experimental support for MSC3823 - Account suspension. (#​17255)
  • Improve ratelimiting in Synapse. (#​17256)
  • Add support for the unstable MSC4151 report room API. (#​17270, #​17296)
  • Filter for public and empty rooms added to Admin-API List Room API. (#​17276)
  • Add is_dm filtering to experimental MSC3575 Sliding Sync /sync endpoint. (#​17277)
  • Add is_encrypted filtering to experimental MSC3575 Sliding Sync /sync endpoint. (#​17281)
  • Include user membership in events served to clients, per MSC4115. (#​17282)
  • Do not require user-interactive authentication for uploading cross-signing keys for the first time, per MSC3967. (#​17284)
  • Add stream_ordering sort to experimental MSC3575 Sliding Sync /sync endpoint. (#​17293)
  • register_new_matrix_user now supports a --password-file flag, which
    is useful for scripting. (#​17294)
  • register_new_matrix_user now supports a --exists-ok flag to allow registration of users that already exist in the database.
    This is useful for scripts that bootstrap user accounts with initial passwords. (#​17304)
  • Add support for via query parameter from MSC4156. (#​17322)
  • Add is_invite filtering to experimental MSC3575 Sliding Sync /sync endpoint. (#​17335)
  • Support MSC3916 by adding a federation /download endpoint. (#​17350)
Bugfixes
  • Fix searching for users with their exact localpart whose ID includes a hyphen. (#​17254)
  • Fix wrong retention policy being used when filtering events. (#​17272)
  • Fix bug where OTKs were not always included in /sync response when using workers. (#​17275)
  • Fix a long-standing bug where an invalid 'from' parameter to /notifications would result in an Internal Server Error. (#​17283)
  • Fix edge case in /sync returning the wrong the state when using sharded event persisters. (#​17295)
  • Fix email notification subject when invited to a space. (#​17336)
Improved Documentation
  • Add missing quotes for example for exclude_rooms_from_sync. (#​17308)
  • Update header in the README to visually fix the the auto-generated table of contents. (#​17329)
  • Fix stale references to the Foundation's Security Disclosure Policy. (#​17341)
  • Add default values for rc_invites.per_issuer to docs. (#​17347)
  • Fix an error in the docs for search_all_users parameter under user_directory. (#​17348)
Internal Changes
  • Remove unused expire_access_token option in the Synapse Docker config file. Contributed by @​AaronDewes. (#​17198)
  • Use fully-qualified PersistedEventPosition when returning RoomsForUser to facilitate proper comparisons and RoomStreamToken generation. (#​17265)
  • Add debug logging for when room keys are uploaded, including whether they are replacing other room keys. (#​17266)
  • Handle OTK uploads off master. (#​17271)
  • Don't try and resync devices for remote users whose servers are marked as down. (#​17273)
  • Re-organize Pydantic models and types used in handlers. (#​17279)
  • Expose the worker instance that persisted the event on event.internal_metadata.instance_name. (#​17300)
  • Update the README with Element branding, improve headers and fix the #synapse:matrix.org support room link rendering. (#​17324)
  • Change path of the experimental MSC3575 Sliding Sync implementation to /org.matrix.simplified_msc3575/sync since our simplified API is slightly incompatible with what's in the current MSC. (#​17331)
  • Handle device lists notifications for large accounts more efficiently in worker mode. (#​17333, #​17358)
  • Do not block event sending/receiving while calculating large event auth chains. (#​17338)
  • Tidy up parse_integer docs and call sites to reflect the fact that they require non-negative integers by default, and bring parse_integer_from_args default in alignment. Contributed by Denis Kasak (@​dkasak). (#​17339)
Updates to locked dependencies
  • Bump authlib from 1.3.0 to 1.3.1. (#​17343)
  • Bump dawidd6/action-download-artifact from 3.1.4 to 5. (#​17289)
  • Bump dawidd6/action-download-artifact from 5 to 6. (#​17313)
  • Bump docker/build-push-action from 5 to 6. (#​17312)
  • Bump jinja2 from 3.1.3 to 3.1.4. (#​17287)
  • Bump lazy_static from 1.4.0 to 1.5.0. (#​17355)
  • Bump msgpack from 1.0.7 to 1.0.8. (#​17317)
  • Bump netaddr from 1.2.1 to 1.3.0. (#​17353)
  • Bump packaging from 24.0 to 24.1. (#​17352)
  • Bump phonenumbers from 8.13.37 to 8.13.39. (#​17315)
  • Bump regex from 1.10.4 to 1.10.5. (#​17290)
  • Bump requests from 2.31.0 to 2.32.2. (#​17345)
  • Bump sentry-sdk from 2.1.1 to 2.3.1. (#​17263)
  • Bump sentry-sdk from 2.3.1 to 2.6.0. (#​17351)
  • Bump tornado from 6.4 to 6.4.1. (#​17344)
  • Bump mypy from 1.8.0 to 1.9.0. (#​17297)
  • Bump types-jsonschema from 4.21.0.20240311 to 4.22.0.20240610. (#​17288)
  • Bump types-netaddr from 1.2.0.20240219 to 1.3.0.20240530. (#​17314)
  • Bump types-pillow from 10.2.0.20240423 to 10.2.0.20240520. (#​17285)
  • Bump types-pyyaml from 6.0.12.12 to 6.0.12.20240311. (#​17316)
  • Bump typing-extensions from 4.11.0 to 4.12.2. (#​17354)
  • Bump urllib3 from 2.0.7 to 2.2.2. (#​17346)

v1.109.0

Compare Source

Synapse 1.109.0 (2024-06-18)

Internal Changes
  • Fix the building of binary wheels for macOS by switching to macOS 12 CI runners. (#​17319)

Synapse 1.109.0rc3 (2024-06-17)

Bugfixes
  • When rolling back to a previous Synapse version and then forwards again to this release, don't require server operators to manually run SQL. (#​17305, #​17309)
Internal Changes
  • Use the release branch for sytest in release-branch PRs. (#​17306)

Synapse 1.109.0rc2 (2024-06-11)

Bugfixes
  • Fix bug where one-time-keys were not always included in /sync response when using workers. Introduced in v1.109.0rc1. (#​17275)
  • Fix bug where /sync could get stuck due to edge case in device lists handling. Introduced in v1.109.0rc1. (#​17292)

Synapse 1.109.0rc1 (2024-06-04)

Features
  • Add the ability to auto-accept invites on the behalf of users. See the auto_accept_invites config option for details. (#​17147)
  • Add experimental MSC3575 Sliding Sync /sync/e2ee endpoint for to-device messages and device encryption info. (#​17167)
  • Support MSC3916 by adding unstable media endpoints to /_matrix/client. (#​17213)
  • Add logging to tasks managed by the task scheduler, showing CPU and database usage. (#​17219)
Bugfixes
  • Fix deduplicating of membership events to not create unused state groups. (#​17164)
  • Fix bug where duplicate events could be sent down sync when using workers that are overloaded. (#​17215)
  • Ignore attempts to send to-device messages to bad users, to avoid log spam when we try to connect to the bad server. (#​17240)
  • Fix handling of duplicate concurrent uploading of device one-time-keys. (#​17241)
  • Fix reporting of default tags to Sentry, such as worker name. Broke in v1.108.0. (#​17251)
  • Fix bug where typing updates would not be sent when using workers after a restart. (#​17252)
Improved Documentation
  • Update the LemonLDAP documentation to say that claims should be explicitly included in the returned id_token, as Synapse won't request them. (#​17204)
Internal Changes
  • Improve DB usage when fetching related events. (#​17083)
  • Log exceptions when failing to auto-join new user according to the auto_join_rooms option. (#​17176)
  • Reduce work of calculating outbound device lists updates. (#​17211)
  • Improve performance of calculating device lists changes in /sync. (#​17216)
  • Move towards using MultiWriterIdGenerator everywhere. (#​17226)
  • Replaces all usages of StreamIdGenerator with MultiWriterIdGenerator. (#​17229)
  • Change the allow_unsafe_locale config option to also apply when setting up new databases. (#​17238)
  • Fix errors in logs about closing incorrect logging contexts when media gets rejected by a module. (#​17239, #​17246)
  • Clean out invalid destinations from device_federation_outbox table. (#​17242)
  • Stop logging errors when receiving invalid User IDs in key querys requests. (#​17250)
Updates to locked dependencies
  • Bump anyhow from 1.0.83 to 1.0.86. (#​17220)
  • Bump bcrypt from 4.1.2 to 4.1.3. (#​17224)
  • Bump lxml from 5.2.1 to 5.2.2. (#​17261)
  • Bump mypy-zope from 1.0.3 to 1.0.4. (#​17262)
  • Bump phonenumbers from 8.13.35 to 8.13.37. (#​17235)
  • Bump prometheus-client from 0.19.0 to 0.20.0. (#​17233)
  • Bump pyasn1 from 0.5.1 to 0.6.0. (#​17223)
  • Bump pyicu from 2.13 to 2.13.1. (#​17236)
  • Bump pyopenssl from 24.0.0 to 24.1.0. (#​17234)
  • Bump serde from 1.0.201 to 1.0.202. (#​17221)
  • Bump serde from 1.0.202 to 1.0.203. (#​17232)
  • Bump twine from 5.0.0 to 5.1.0. (#​17225)
  • Bump types-psycopg2 from 2.9.21.20240311 to 2.9.21.20240417. (#​17222)
  • Bump types-pyopenssl from 24.0.0.20240311 to 24.1.0.20240425. (#​17260)

v1.108.0

Compare Source

Synapse 1.108.0 (2024-05-28)

No significant changes since 1.108.0rc1.

Synapse 1.108.0rc1 (2024-05-21)

Features
  • Add a feature that allows clients to query the configured federation whitelist. Disabled by default. (#​16848, #​17199)
  • Add the ability to allow numeric user IDs with a specific prefix when in the CAS flow. Contributed by Aurélien Grimpard. (#​17098)
Bugfixes
  • Fix bug where push rules would be empty in /sync for some accounts. Introduced in v1.93.0. (#​17142)
  • Add support for optional whitespace around the Federation API's Authorization header's parameter commas. (#​17145)
  • Fix bug where disabling room publication prevented public rooms being created on workers. (#​17177, #​17184)
Improved Documentation
  • Document /v1/make_knock and /v1/send_knock/ federation endpoints as worker-compatible. (#​17058)
  • Update User Admin API with note about prefixing OIDC external_id providers. (#​17139)
  • Clarify the state of the created room when using the autocreate_auto_join_room_preset config option. (#​17150)
  • Update the Admin FAQ with the current libjemalloc version for latest Debian stable. Additionally update the name of the "push_rules" stream in the Workers documentation. (#​17171)
Internal Changes
  • Add note to reflect that MSC3886 is closed but will remain supported for some time. (#​17151)
  • Update dependency PyO3 to 0.21. (#​17162)
  • Fixes linter errors found in PR #​17147. (#​17166)
  • Bump black from 24.2.0 to 24.4.2. (#​17170)
  • Cache literal sync filter validation for performance. (#​17186)
  • Improve performance by fixing a reactor pause. (#​17192)
  • Route /make_knock and /send_knock federation APIs to the federation reader worker in Complement test runs. (#​17195)
  • Prepare sync handler to be able to return different sync responses (SyncVersion). (#​17200)
  • Organize the sync cache key parameter outside of the sync config (separate concerns). (#​17201)
  • Refactor SyncResultBuilder assembly to its own function. (#​17202)
  • Rename to be obvious: joined_rooms -> joined_room_ids. (#​17203, #​17208)
  • Add a short pause when rate-limiting a request. (#​17210)
Updates to locked dependencies
  • Bump cryptography from 42.0.5 to 42.0.7. (#​17180)
  • Bump gitpython from 3.1.41 to 3.1.43. (#​17181)
  • Bump immutabledict from 4.1.0 to 4.2.0. (#​17179)
  • Bump sentry-sdk from 1.40.3 to 2.1.1. (#​17178)
  • Bump serde from 1.0.200 to 1.0.201. (#​17183)
  • Bump s

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@soerenschneider soerenschneider self-assigned this Sep 14, 2024
@soerenschneider soerenschneider merged commit 02c491b into main Sep 14, 2024
4 checks passed
@soerenschneider soerenschneider deleted the renovate/matrixdotorg-synapse-1.x branch September 14, 2024 11:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees

@soerenschneider soerenschneider

Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@soerenschneider @renovate-bot