chore(deps): update dependency element-hq/synapse to v1 #614
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
|
Test coverage for a6bc365 Static code analysis report |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v0.12.0->v1.120.0Release Notes
element-hq/synapse (element-hq/synapse)
v1.120.0Compare Source
Synapse 1.120.0 (2024-11-26)
This release enables the enforcement of authenticated media by default, with exemptions for media that is already present in the
homeserver's media store.
Most homeservers operating in the public federation will not be impacted by this change, given that
the large homeserver
matrix.orgenabled this in September 2024 and therefore most clients and serverswill already have updated as a result.
Some server administrators may still wish to disable this enforcement for the time being, in the interest of compatibility with older clients
and older federated homeservers.
See the upgrade notes for more information.
Bugfixes
delete_old_otksjob to fail in worker-mode deployments. (#17960)Synapse 1.120.0rc1 (2024-11-20)
Features
enable_authenticated_mediatofalse. In a future release of Synapse, this option will be removed and become always-on. (#17889)Improved Documentation
enable_authenticated_mediaconfiguration option. (#17913)Deprecations and Removals
Internal Changes
python-multipart0.0.13 so that distro packagers do not need to work around name conflict with PyPI packagemultipart. (#17932)Updates to locked dependencies
v1.119.0Compare Source
Synapse 1.119.0 (2024-11-13)
No significant changes since 1.119.0rc2.
Python 3.8 support dropped
Python 3.8 is end-of-life and is no longer supported by Synapse. The minimum supported Python version is now 3.9.
If you are running Synapse with Python 3.8, please upgrade to Python 3.9 (or greater) before upgrading Synapse.
Synapse 1.119.0rc2 (2024-11-11)
Note that due to packaging issues there was no v1.119.0rc1.
Features
state_afterto sync v2). (#17888)Bugfixes
$LAZY-loading room members would not returnrequired_statemembership in incremental syncs. (#17809)the config option
run_background_tasks_on. (#17847)state_afterto sync v2) where we would return the full state on incremental syncs when using lazy loaded members and there were no new events in the timeline. (#17915)Internal Changes
Generatorusage. (#17813, #17814, #17815, #17816, #17817, #17818, #17890)current_state_delta_streamtable. (#17912)Updates to locked dependencies
v1.118.0Compare Source
Synapse 1.118.0 (2024-10-29)
No significant changes since 1.118.0rc1.
Python 3.8 support will be dropped in the next release
Python 3.8 is now end-of-life. As per our Deprecation Policy for Platform Dependencies, Synapse will be dropping support for Python 3.8 in the next release; Synapse 1.119.0.
Synapse 1.118.x will be the final release to support Python 3.8. If you are running Synapse with Python 3.8, please upgrade before the 1.119.0 release, due in less than one month.
Python 3.13 and PostgreSQL 17 support
On the other end of the spectrum, Synapse 1.118.0 is the first release to support Python 3.13! PostgreSQL 17 is also supported as of this release.
Synapse 1.118.0rc1 (2024-10-22)
Features
display_name_claimoption to the JWT configuration. This option allows specifying the claim key that contains the user's display name in the JWT payload. (#17708)Bugfixes
required_stateconfig. (#17785, #17805)Improved Documentation
user_may_inviteanduser_may_send_3pid_invitemodule callbacks are called. (#17627)--config-pathargument instead of--config-file. (#17802)target_cache_memory_usagedocs. (#17825)Internal Changes
.org.matrix.msc4028.encrypted_eventpush rule by default in accordance with MSC4028. Note that the corresponding experimental feature must still be switched on for this push rule to have any effect. (#17826)Updates to locked dependencies
v1.117.0Compare Source
Synapse 1.117.0 (2024-10-15)
No significant changes since 1.117.0rc1.
Synapse 1.117.0rc1 (2024-10-08)
Features
redis.password_path. (#17717)Bugfixes
GET /_matrix/client/versions, set theunstable_featuresflag for MSC4140 tofalsewhen server configuration disables support for delayed events. (#17780)Improved Documentation
test_forget_when_not_left. (#17628)federation_sender_instances. (#17776)Internal Changes
Updates to locked dependencies
v1.116.0Compare Source
Synapse 1.116.0 (2024-10-01)
No significant changes since 1.116.0rc2.
Synapse 1.116.0rc2 (2024-09-26)
Features
Synapse 1.116.0rc1 (2024-09-25)
Features
and an endpoint to check on the status of that redaction task. (#17506)
tagsandnot_tagsfilters for MSC4186 Sliding Sync. (#17662)turn_shared_secret_path. (#17690)Bugfixes
Internal Changes
_pydantic_compatmodule.This allows
check_pydantic_models.pyto mock those pydantic objectsonly in the synapse module, and not interfere with pydantic objects in
external dependencies. (#17667)
event_stream_orderingof rooms. (#17693)bump_stamps more efficiently in MSC4186 Sliding Sync. (#17723)_bulk_get_max_event_posbeing inefficient. (#17728)get_tags_for_room(...). (#17730)cgimodule, deprecated in Python 3.11 and removed in Python 3.13. (#17741)Unknownanymore after updatingtreq. (#17744)Updates to locked dependencies
v1.115.0Compare Source
Synapse 1.115.0 (2024-09-17)
No significant changes since 1.115.0rc2.
Synapse 1.115.0rc2 (2024-09-12)
Internal Changes
/syncendpoint for quick filtering/sorting. (#17652)Synapse 1.115.0rc1 (2024-09-10)
Features
Bugfixes
400 M_BAD_JSONupon attempting to complete various room actions with a non-local user ID and unknown room ID, rather than an internal server error. (#17607)bump_stampfor invites in sliding sync response, causing incorrect ordering of invites in the room list. (#17674)Improved Documentation
saml2_configconfig example. (#17594)Deprecations and Removals
msc4156_enabledconfig setting and defaulting it totrue. (#17650)Internal Changes
/syncendpoint for quick filtering/sorting. (#17512, #17632, #17633, #17634, #17635, #17636, #17641, #17654, #17673)PerConnectionStateclass immutable. (#17600)isortandblackwithruff. (#17620, #17643)get_room_membership_for_user_at_to_token. (#17629)bump_stampfrom new sliding sync tables which should be faster. (#17658)Updates to locked dependencies
v1.114.0Compare Source
Synapse 1.114.0 (2024-09-02)
This release enables support for MSC4186 — Simplified Sliding Sync. This allows using the upcoming releases of the Element X mobile apps without having to run a Sliding Sync Proxy.
Features
Synapse 1.114.0rc3 (2024-08-30)
Bugfixes
Synapse 1.114.0rc2 (2024-08-30)
Features
hash_passwordscript accept password input from stdin. (#17608)Bugfixes
/thumbnailresponses. (#17532)Internal Changes
PerConnectionStateclass immutable. (#17600)@tag_argsfor standalone functions. (#17604)isortandblackwithruff. (#17620)Updates to locked dependencies
Synapse 1.114.0rc1 (2024-08-20)
Features
/versions,org.matrix.simplified_msc3575, to indicate whether experimental sliding sync support has been enabled. (#17571)timeline_limitin experimental sliding sync. (#17579)Bugfixes
stream_orderinginstead of topological ordering) in experimental MSC3575 Sliding Sync/syncendpoint. (#17510)/syncendpoint. (#17538)_Mulitpart_Parser_Protocol. (#17545)old_verify_keys. Contributed by @tulir @ Beeper. (#17568)Improved Documentation
auto_accept_invites.worker_to_run_onoption. (#17515)
Internal Changes
/syncendpoint. (#17514)HTTPAdapter.get_connectionwithget_connection_with_tls_context. (#17536)/key/changesand sliding sync. (#17537, #17548)Updates to locked dependencies
v1.113.0Compare Source
Synapse 1.113.0 (2024-08-13)
No significant changes since 1.113.0rc1.
Synapse 1.113.0rc1 (2024-08-06)
Features
/syncendpoint. (#17447)/syncendpoint. (#17477)/syncendpoint. (#17489)/syncendpoint. (#17505)Bugfixes
/syncendpoint to handle invite/knock rooms when filtering. (#17450)/keys/queryto return incomplete results, leading to high network activity and CPU usage on Matrix clients. (#17499)Improved Documentation
allowed_local_3pidsconfig option's msisdn address to a working example. (#17476)Internal Changes
bump_stampin experimental sliding sync endpoint. (#17478)SlidingSyncBase. (#17481, #17482)limitedfield description in the Sliding Sync response to accurately describe what it actually represents. (#17507)timelineassertions in Sliding Sync tests. (#17511)Updates to locked dependencies
v1.112.0Compare Source
Synapse 1.112.0 (2024-07-30)
This security release is to update our locked dependency on Twisted to 24.7.0rc1, which includes a security fix for CVE-2024-41671 / GHSA-c8m8-j448-xjx7: Disordered HTTP pipeline response in twisted.web, again.
Note that this security fix is also available as Synapse 1.111.1, which does not include the rest of the changes in Synapse 1.112.0.
This issue means that, if multiple HTTP requests are pipelined in the same TCP connection, Synapse can send responses to the wrong HTTP request.
If a reverse proxy was configured to use HTTP pipelining, this could result in responses being sent to the wrong user, severely harming confidentiality.
With that said, despite being a high severity issue, we consider it unlikely that Synapse installations will be affected.
The use of HTTP pipelining in this fashion would cause worse performance for clients (request-response latencies would be increased as users' responses would be artificially blocked behind other users' slow requests). Further, Nginx and Haproxy, two common reverse proxies, do not appear to support configuring their upstreams to use HTTP pipelining and thus would not be affected. For both of these reasons, we consider it unlikely that a Synapse deployment would be set up in such a configuration.
Despite that, we cannot rule out that some installations may exist with this unusual setup and so we are releasing this security update today.
pip users: Note that by default, upgrading Synapse using pip will not automatically upgrade Twisted. Please manually install the new version of Twisted using
pip install Twisted==24.7.0rc1. Note also that even the--upgrade-strategy=eagerflag topip install -U matrix-synapsewill not upgrade Twisted to a patched version because it is only a release candidate at this time.Internal Changes
Synapse 1.112.0rc1 (2024-07-23)
Please note that this release candidate does not include the security dependency update
included in version 1.111.1 as this version was released before 1.111.1.
The same security fix can be found in the full release of 1.112.0.
Features
/syncendpoint. (#17416)name/avatarfields in experimental MSC3575 Sliding Sync/syncendpoint. (#17418)heroesand room summary fields (joined_count,invited_count) in experimental MSC3575 Sliding Sync/syncendpoint. (#17419)is_dmroom field in experimental MSC3575 Sliding Sync/syncendpoint. (#17429)/syncendpoint. (#17432)/syncendpoint. (#17454)Bugfixes
/syncendpoint when using room type filters and the user has one or more remote invites. (#17434)heroesbystream_orderingas the Matrix specification states (applies to/sync). (#17435)/syncwould break for a user when using workers with multiple stream writers. (#17438)Improved Documentation
default_power_level_content_overrideconfig option. (#17451)Internal Changes
RateLimiter.record_action. ([#17426](https://redirect.github.com/element-hq/syConfiguration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.