Matrix (Synapse/Element) - Package Updates

Package Updates

[1.11.29]

Update element-web to 1.12.27
Full Changelog
Timeline MVVM 2 - RoomTimelineViewModel (#34683). Contributed by @langleyd.
Promote Custom Themes labs feature to devtools (#34703). Contributed by @Half-Shot.
Update bundled URL preview implementation to reflect MSC updates (#34764). Contributed by @Half-Shot.
Render knock membership events in notifications (#34268). Contributed by @ara4n.
Room list: add room selection on section creation/edition (#34387). Contributed by @florianduros.
Room list: add settings to consider activity as unread (#34748). Contributed by @florianduros.
[Backport staging] Fix bug where manually set status would get lost (#34828). Contributed by @RiotRobot.
Fix user levels being edited when going into room setting role tab (#34783). Contributed by @florianduros.
Always show the current room, even when the Unread filter is active (#34228). Contributed by @andybalaam.
Avoid destroying a still-valid session when the OS keychain is temporarily unreadable (#33986). Contributed by @hayaksi1.

Package Updates

[1.142.0]

Package Updates

[1.143.0]

Package Updates

[1.11.30]

Update element-web to 1.12.28
Full Changelog
Add analytics for uploads (#33846). Contributed by @Half-Shot.
Module API for overriding URL Preview results (#34877). Contributed by @Half-Shot.
Room list: add an Invites section (#34736). Contributed by @florianduros.
Room list: collapse sections when a room is dragged (#34290). Contributed by @florianduros.
Add warning the public rooms are open for users outside the organisation (#34876). Contributed by @mxandreas.
Don't restart the app when clearing data (#34972). Contributed by @dbkr.
Fix module composer upload options appearing twice (#34920). Contributed by @Half-Shot.
Fix space hierarchy checkboxes not working on click (#34860). Contributed by @t3chguy.
Stop blaming permissions when the homeserver refuses an invite (#34590). Contributed by @hayaksi1.
Say when a spotlight search found nothing instead of selecting a filter (#34641). Contributed by @hayaksi1.

Package Updates

[1.11.31]

Package Updates

[1.144.0]

Package Updates

[1.11.32]

Update element-web to 1.12.30
Full Changelog
Remove legacy Module & Customisation API (#33941). Contributed by @t3chguy.
List the shortcut of the room list resizer in the settings (#35130). Contributed by @florianduros.
Disable user status UI when offline (#35106). Contributed by @dbkr.
Handle M_INVITE_BLOCKED when an invite is rejected (#35128). Contributed by @Half-Shot.
New timeline panel in the room view (labs) (#34859). Contributed by @langleyd.
Do not make a thread bright red when mentioned. (#35132). Contributed by @Half-Shot.
Restore spacing between message text and URL previews (#35127). Contributed by @ZacksBot.
Fix autocomplete/formatting bar being hidden when editing a message (#35126). Contributed by @Half-Shot.
Fix OAuth logout bug if started offline (#34918). Contributed by @dbkr.
Fix crash on Windows/macOS when keychain access is denied (#34922). Contributed by @kaylendog.

Package Updates

[1.11.33]

Update element-web to 1.12.31
Full Changelog
Do not allow skip device verification by default (#35259). Contributed by @mxandreas.
Add a Markdown viewer for .md attachments in the right panel (#35203). Contributed by @ZacksBot.
Render PDFs in a usercontent iframe (#35067). Contributed by @ZacksBot.
[Backport staging] Fix blank maps by bundling the maplibre-gl worker explicitly (#35442). Contributed by @RiotRobot.
[Backport staging] Revert "Do not allow skip device verification by default (#35259)" (#35345). Contributed by @RiotRobot.
Fix message draft getting lost when a call ends (#35261). Contributed by @t3chguy.
Fix clicks on pills closing the RoomView (#35266). Contributed by @t3chguy.
Fix thread panel actions incorrectly triggering thread open (#35263). Contributed by @t3chguy.
Keep an incoming call ringing when a call in another room ends (#35222). Contributed by @ara4n.
Notify when you are invited to a room (#34665). Contributed by @hayaksi1.

Package Updates

[1.145.0]

Package Updates

[1.145.1]

Package Updates

[1.11.34]

Update element-web to 1.12.32
Full Changelog
Remove support for NEB starter links in messages. Fixes GHSA-x2rg-2g77-mx2w
Remove support for guest_access_token & guest_user_id. Fixes GHSA-c88w-7h6p-27xr
Fix crash when preview room is under the fold (#35500).

Package Updates

[1.146.0]

Package Updates

[1.146.1]

Update synapse to 1.163.2
Full Changelog
Bump pillow to 13.0.0 to address critical security vulnerabilties. You must use Python >= 3.11 to take advantage of this version bump. (#20398)
Update certifi to 2026.10.19 to address GHSA-6q48-6c7w-9gw2. This only affects TLS connections made by the Sentry SDK when sentry is configured, SAML, and a couple utility scripts; federation and Synapse's other outbound HTTP requests use the system trust store. (#20387)
Bump rustls-webpki to 0.103.16 to actively distrust compromised eMudhra intermediate CA certificates. (#20392)

Package Updates

[1.147.0]

Update synapse to 1.164.0
Full Changelog
Advertise support for Matrix v1.16. (#20333)
Advertise support for Matrix v1.17. (#20334)
MSC4140: Add a dedicated endpoint for scheduling delayed events. (#19354)
Require authentication for the MSC4140 delayed event management endpoints, restrict them to the requesting user's own delayed events, and allow guests to use them. (#20257)
MSC4140: Reject requests to schedule a delayed event that the sender could not send at that time, such as in a room they are not joined to, unless the event changes their own membership. (#20266)
Stabilise MSC4222: support the stable use_state_after query parameter and state_after response field on /sync, as per Matrix v1.16, and remove the msc4222_enabled experimental config flag. (#20170)

Package Updates

[1.147.1]

Update synapse to 1.164.1
Full Changelog
Fix clearing user status for clients that send a null profile field value.
When include_profile_updates_in_sync is enabled, Synapse will continue to accept null custom profile field values until clients have had a sufficient time to change their behaviour. This special casing is tracked in this issue. (#20422)
Bump msgpack from 1.2.1 to 1.2.4 to address GHSA-j586-36cw-2gc2 which can cause memory exhaustion problems when malformed tokens are used with the public room list API's. (#20421)

Cloudron Forum