Matrix (Synapse/Element) - Package Updates
-
[1.8.36]
- Update Element to 1.11.36
- Full changelog
- Fixes for CVE-2023-37259 / GHSA-c9vx-2g7w-rp65
- Deprecate customisations in favour of Module API (#25736). Fixes #25733.
- OIDC: store initial screen in session storage (#25688). Fixes #25656. Contributed by @kerryarchibald.
- Allow default_server_config as a fallback config (#25682). Contributed by @ShadowRZ.
- OIDC: remove auth params from url after login attempt (#25664). Contributed by @kerryarchibald.
- feat(faq): remove keyboard shortcuts button (#9342). Fixes #22625. Contributed by @gefgu.
- GYU: Update banner (#11211). Fixes #25530. Contributed by @justjanne.
- Linkify mxc:// URLs as links to your media repo (#11213). Fixes #6942.
- OIDC: Log in (#11199). Fixes #25657. Contributed by @kerryarchibald.
- Handle all permitted url schemes in linkify (#11215). Fixes #4457 and #8720.
- Autoapprove Element Call oidc requests (#11209). Contributed by @toger5.
- Allow creating knock rooms (#11182). Contributed by @charlynguyen.
- Expose and pre-populate thread ID in devtools dialog (#10953).
- Hide URL preview if it will be empty (#9029).
- Change wording from avatar to profile picture (#7015). Fixes vector-im/element-meta#1331. Contributed by @aaronraimist.
- Quick and dirty devtool to explore state history (#11197).
- Consider more user inputs when calculating zxcvbn score (#11180).
- GYU: Account Notification Settings (#11008). Fixes #24567. Contributed by @justjanne.
- Compound Typography pass (#11103). Fixes #25548.
- OIDC: navigate to authorization endpoint (#11096). Fixes #25574. Contributed by @kerryarchibald.
- Fix read receipt sending behaviour around thread roots (#3600).
- Fix missing metaspace notification badges (#11269). Fixes #25679.
- Make checkboxes less rounded (#11224). Contributed by @andybalaam.
- GYU: Fix issues with audible keywords without activated mentions (#11218). Contributed by @justjanne.
- PosthogAnalytics unwatch settings on logout (#11207). Fixes #25703.
- Avoid trying to set room account data for pinned events as guest (#11216). Fixes #6300.
- GYU: Disable sound for DMs checkbox when DM notifications are disabled (#11210). Contributed by @justjanne.
- force to allow calls without video and audio in embedded mode (#11131). Contributed by @EnricoSchw.
- Fix room tile text clipping (#11196). Fixes #25718.
- Handle newlines in user pills (#11166). Fixes #10994.
- Limit width of user menu in space panel (#11192). Fixes #22627.
- Add isLocation to ComposerEvent analytics events (#11187). Contributed by @andybalaam.
- Fix: hide unsupported login elements (#11185). Fixes #25711. Contributed by @kerryarchibald.
- Scope smaller font size to user info panel (#11178). Fixes #25683.
- Apply i18n to strings in the html export (#11176).
- Inhibit url previews on MXIDs containing slashes same as those without (#11160).
- Make event info size consistent with state events (#11181).
- Fix markdown content spacing (#11177). Fixes #25685.
- Fix font-family definition for emojis (#11170). Fixes #25686.
- Fix spurious error sending receipt in thread errors (#11157).
- Consider the empty push rule actions array equiv to deprecated dont_notify (#11155). Fixes #25674.
- Only trap escape key for cancel reply if there is a reply (#11140). Fixes #25640.
- Update linkify to 4.1.1 (#11132). Fixes #23806.
-
[1.71.0]
- Update Synapse to 1.88.0
- Full changelog
- Add not_user_type param to the list accounts admin API. (#15844)
- Pin pydantic to ^=1.7.4 to avoid backwards-incompatible API changes from the 2.0.0 release.
- Contributed by @PaarthShah. (#15862)
- Correctly resize thumbnails with pillow version >=10. (#15876)
-
[1.72.0]
- Update Synapse to 1.89.0
- Full changelog
- Add Unix Socket support for HTTP Replication Listeners. Document and provide usage instructions for utilizing Unix sockets in Synapse. Contributed by Jason Little. (#15708, #15924)
- Allow + in Matrix IDs, per MSC4009. (#15911)
- Support room version 11 from MSC3820. (#15912)
- Allow configuring the set of workers to proxy outbound federation traffic through via outbound_federation_restricted_to. (#15913, #15969)
- Implement MSC3814, dehydrated devices v2/shrivelled sessions and move MSC2697 behind a config flag. Contributed by Nico from Famedly, H-Shay and poljar. (#15929)
- Fix a long-standing bug where remote invites weren't correctly pushed. (#15820)
- Fix background schema updates failing over a large upgrade gap. (#15887)
- Fix a bug introduced in 1.86.0 where Synapse starting with an empty experimental_features configuration setting. (#15925)
- Fixed deploy annotations in the provided Grafana dashboard config, so that it shows for any homeserver and not just matrix.org. Contributed by @wrjlewis. (#15957)
- Ensure a long state res does not starve CPU by occasionally yielding to the reactor. (#15960)
- Properly handle redactions of creation events. (#15973)
- Fix a bug where resyncing stale device lists could block responding to federation transactions, and thus delay receiving new data from the remote server. (#15975)
-
[1.8.37]
- Update Element to 1.11.37
- Full changelog
- Do not show "Forget room" button in Room View header for guest users (#10898). Contributed by @spantaleev.
- Switch to updating presence via /sync calls instead of PUT /presence (#11223). Fixes #20809 #13877 and #4813.
- Fix blockquote colour contrast (#11299). Fixes matrix-org/element-web-rageshakes#21800.
- Don't hide room header buttons in video rooms and rooms with a call (#9712). Fixes #23900.
- OIDC: Persist details in session storage, create store (#11302). Fixes #25710. Contributed by @kerryarchibald.
- Allow setting room join rule to knock (#11248). Contributed by @charlynguyen.
- Retry joins on 524 (Cloudflare timeout) also (#11296). Fixes #8776.
- Make sure users returned by the homeserver search API are displayed. Don't silently drop any. (#9556). Fixes #24422. Contributed by @maxmalek.
- Offer to unban user during invite if inviter has sufficient permissions (#11256). Fixes #3222.
- Split join and goto slash commands, the latter shouldn't auto_join (#11259). Fixes #10128.
- Integration work for rich text editor 2.3.1 (#11172). Contributed by @alunturner.
- Compound color pass (#11079). Fixes vector-im/element-internal#450 and #25547.
- Warn when demoting self via /op and /deop slash commands (#11214). Fixes #13726.
-
[1.8.38]
- Update Element to 1.11.38
- Full changelog
- Package release builds of element-web in package.element.io debs (#25198).
- Revert to using the /presence API for presence (#11366)
-
[1.73.0]
- Update Synapse to 1.90.0
- Full changelog
- Scope transaction IDs to devices (implement MSC3970). (#15629)
- Remove old rows from the cache_invalidation_stream_by_instance table automatically (this table is unused in SQLite). (#15868)
- Fix a long-standing bug where purging history and paginating simultaneously could lead to database corruption when using workers. (#15791)
- Fix a long-standing bug where profile endpoint returned a 404 when the user's display name was empty. (#16012)
- Fix a long-standing bug where the synapse_port_db failed to configure sequences for application services and partial stated rooms. (#16043)
- Fix long-standing bug with deletion in dehydrated devices v2. (#16046)
-
[1.8.39]
- Update Element to 1.11.39
- Full changelog
- Deprecate camelCase config options (#25800).
- Deprecate customisations in favour of Module API (#25736). Fixes #25733.
- Update labs.md for knock rooms (#25923). Contributed by @charlynguyen.
- Package release builds of element-web in package.element.io debs (#25198).
- Allow knocking rooms (#11353). Contributed by @charlynguyen.
- Support adding space-restricted joins on rooms not members of those spaces (#9017). Fixes #19213.
- Clear requiresClient and show pop-out if widget-api fails to ready (#11321). Fixes vector-im/customer-retainer#73.
- Bump pagination sizes due to hidden events (#11342).
- Remove display of key backup signatures from backup settings (#11333).
- Use PassphraseFields in ExportE2eKeysDialog to enforce minimum passphrase complexity (#11222). Fixes #9478.
- Fix "Export chat" not respecting configured time format in plain text mode (#10696). Fixes #23838. Contributed by @rashmitpankhania.
- Fix some missing 1-count pluralisations around event list summaries (#11371). Fixes #25925.
- Fix create subspace dialog not working for public space creation (#11367). Fixes #25916.
- Search for users on paste (#11304). Fixes #17523. Contributed by @peterscheu-aceart.
- Fix AppTile context menu not always showing up when it has options (#11358). Fixes #25914.
- Fix clicking on home all rooms space notification not working (#11337). Fixes #22844.
- Fix joining a suggested room switching space away (#11347). Fixes #25838.
- Fix home/all rooms context menu in space panel (#11350). Fixes #25896.
- Make keyboard handling in and out of autocomplete completions consistent (#11344). Fixes #25878.
- De-duplicate reactions by sender to account for faulty/malicious servers (#11340). Fixes #25872.
- Fix disable_3pid_login being ignored for the email field (#11335). Fixes #25863.
- Upgrade wysiwyg editor for ctrl+backspace windows fix (#11324). Fixes vector-im/verticals-internal#102.
- Unhide the view source event toggle - it works well enough (#11336). Fixes #25861.
-
[1.8.40]
- Update Element to 1.11.40
- Full changelog
- Hide account deactivation for externally managed accounts (#11445). Fixes #26022. Contributed by @kerryarchibald.
- OIDC: Redirect to delegated auth provider when signing out (#11432). Fixes #26000. Contributed by @kerryarchibald.
- Disable 3pid fields in settings when m.3pid_changes capability is disabled (#11430). Fixes #25995. Contributed by @kerryarchibald.
- OIDC: disable multi session signout for OIDC-aware servers in session manager (#11431). Contributed by @kerryarchibald.
- Implement updated open dialog method of the Module API (#11395). Contributed by @dhenneke.
- Polish & delabs Exploring public spaces feature (#11423).
- Treat lists with a single empty item as plain text, not Markdown. (#6833). Fixes vector-im/element-meta#1265.
- Allow managing room knocks (#11404). Contributed by @charlynguyen.
- Pin the action buttons to the bottom of the scrollable dialogs (#11407). Contributed by @dhenneke.
- Support Matrix 1.1 (drop legacy r0 versions) (#9819).
- Fix path separator for Windows based systems (#25997).
- Fix instances of double translation and guard translation calls using typescript (#11443).
- Fix export type "Current timeline" to match its behaviour to its name (#11426). Fixes #25988.
- Fix Room Settings > Notifications file upload input being shown superfluously (#11415). Fixes #18392.
- Simplify registration with email validation (#11398). Fixes #25832 #23601 and #22297.
- correct home server URL (#11391). Fixes #25931. Contributed by @NSV1991.
- Include non-matching DMs in Spotlight recent conversations when the DM's userId is part of the search API results (#11374). Contributed by @mgcm.
- Fix useRoomMembers missing updates causing incorrect membership counts (#11392). Fixes #17096.
- Show error when searching public rooms fails (#11378).
-
[1.9.0]
- Update Element to 1.11.41
- Full changelog
- Make SVGR icons use forward ref (#26082).
- Add support for rendering a custom wrapper around Element (#25537). Contributed by @maheichyk.
- Allow creating public knock rooms (#11481). Contributed by @charlynguyen.
- Render custom images in reactions according to MSC4027 (#11087). Contributed by @sumnerevans.
- Introduce room knocks bar (#11475). Contributed by @charlynguyen.
- Room header UI updates (#11507). Fixes #25892.
-
[1.9.3]
- Update Element to 1.11.44
- Full changelog
- Make video & voice call buttons pin conference widget if unpinned (#11576). Fixes vector-im/customer-retainer#72.
- OIDC: persist refresh token (#11249). Contributed by @kerryarchibald.
- ElementR: Cross user verification (#11364). Fixes #25752. Contributed by @florianduros.
- Default intentional mentions (#11602).
- Notify users about denied access on ask-to-join rooms (#11480). Contributed by @nurjinjafar.
- Allow setting knock room directory visibility (#11529). Contributed by @charlynguyen.
-
[1.77.0]
- Update Synapse to 1.93.0
- Full changelog
- GHSA-4f74-84v3-j9q5 / CVE-2023-41335 — Low Severity Temporary storage of plaintext passwords during password changes.
- GHSA-7565-cq32-vx2x / CVE-2023-42453 — Low Severity Improper validation of receipts allows forged read receipts.
- Add automatic purge after all users have forgotten a room. (#15488)
- Restore room purge/shutdown after a Synapse restart. (#15488)
- Support resolving homeservers using matrix-fed DNS SRV records from MSC4040. (#16137)
- Add the ability to use G (GiB) and T (TiB) suffixes in configuration options that refer to numbers of bytes. (#16219)
- Add span information to requests sent to appservices. Contributed by MTRNord. (#16227)
- Add the ability to enable/disable registrations when using CAS. Contributed by Aurélien Grimpard. (#16262)
- Allow the /notifications endpoint to be routed to workers. (#16265)
