Matrix (Synapse/Element) - Package Updates

[nebulon]

[1.9.1]

• Update Element to 1.11.42
• Full changelog
• Update Compound to fix Firefox-specific avatar regression (#11604). Fixes #26155.

[girish]

[1.9.2]

• Update Element to 1.11.43
• Full changelog

[girish]

[1.76.1]

• Update Synapse to 1.92.2
• Full changelog

[nebulon]

[1.76.2]

• Update Synapse to 1.92.3
• Full changelog
• Pillow 10.0.1 is now mandatory because of libwebp CVE-2023-4863, since Pillow provides libwebp in the wheels. (#16347)

[nebulon]

[1.9.3]

• Update Element to 1.11.44
• Full changelog
• Make video & voice call buttons pin conference widget if unpinned (#11576). Fixes vector-im/customer-retainer#72.
• OIDC: persist refresh token (#11249). Contributed by @kerryarchibald.
• ElementR: Cross user verification (#11364). Fixes #25752. Contributed by @florianduros.
• Default intentional mentions (#11602).
• Notify users about denied access on ask-to-join rooms (#11480). Contributed by @nurjinjafar.
• Allow setting knock room directory visibility (#11529). Contributed by @charlynguyen.

[girish]

[1.77.0]

• Update Synapse to 1.93.0
• Full changelog
• GHSA-4f74-84v3-j9q5 / CVE-2023-41335 — Low Severity Temporary storage of plaintext passwords during password changes.
• GHSA-7565-cq32-vx2x / CVE-2023-42453 — Low Severity Improper validation of receipts allows forged read receipts.
• Add automatic purge after all users have forgotten a room. (#15488)
• Restore room purge/shutdown after a Synapse restart. (#15488)
• Support resolving homeservers using matrix-fed DNS SRV records from MSC4040. (#16137)
• Add the ability to use G (GiB) and T (TiB) suffixes in configuration options that refer to numbers of bytes. (#16219)
• Add span information to requests sent to appservices. Contributed by MTRNord. (#16227)
• Add the ability to enable/disable registrations when using CAS. Contributed by Aurélien Grimpard. (#16262)
• Allow the /notifications endpoint to be routed to workers. (#16265)

[nebulon]

[1.9.4]

• Update Element to 1.11.45
• Full changelog
• Fix Emoji font on Safari 17 (#11673).

[girish]

[1.78.0]

• Update base image to 4.2.0

[girish]

[1.9.5]

• Update Element to 1.11.46
• Full changelog
• Use .well-known to discover a default rendezvous server for use with Sign in with QR (#11655). Contributed by @hughns.
• Message layout will update according to the selected style (#10170). Fixes #21782. Contributed by @manancodes.
• Implement MSC4039: Add an MSC for a new Widget API action to upload files into the media repository (#11311). Contributed by @dhenneke.
• Render space pills with square corners to match new avatar (#11632). Fixes #26056.

[girish]

[1.79.0]

• Update Synapse to 1.94.0
• Full changelog
• Render plain, CSS, CSV, JSON and common image formats in the browser (inline) when requested through the /download endpoint. (#15988)
• Add experimental support for MSC4028 to push all encrypted events to clients. (#16361)
• Minor performance improvement when sending presence to federated servers. (#16385)
• Minor performance improvement by caching server ACL checking. (#16360)

[girish]

[1.9.6]

• Update Element to 1.11.47
• Full changelog
• Iterate io.element.late_event decoration (#11760). Fixes #26384.
• Render timeline separator for late event groups (#11739).
• OIDC: revoke tokens on logout (#11718). Fixes #25394. Contributed by @kerryarchibald.
• Show io.element.late_event in MessageTimestamp when known (#11733).
• Show all labs flags if developerMode enabled (#11746). Fixes #24571 and #8498.
• Use Compound tooltips on MessageTimestamp to improve UX of date time discovery (#11732). Fixes #25913.
• Consolidate 4s passphrase input fields and use stable IDs (#11743). Fixes #26228.
• Disable upgraderoom command without developer mode enabled (#11744). Fixes #17620.

[girish]

[1.80.0]

• Update Synapse to 1.95.0
• Full changelog
• Remove legacy unspecced knock_state_events field returned in some responses. (#16403)
• Fix a bug introduced in Synapse 1.81.0 where an AttributeError would be raised when _matrix/client/v3/account/whoami is called over a unix socket. Contributed by @Sir-Photch. (#16404)
• Properly return inline media when content types have parameters. (#16440)
• Prevent the purging of large rooms from timing out when Postgres is in use. The timeout which causes this issue was introduced in Synapse 1.88.0. (#16455)
• Improve the performance of purging rooms, particularly encrypted rooms. (#16457)
• Fix a bug introduced in Synapse 1.59.0 where servers could be incorrectly marked as available after an error response was received. (#16506)

[girish]

[1.80.1]

• Update Synapse to 1.95.1
• Full changelog
• GHSA-mp92-3jfm-3575 / CVE-2023-43796 — Moderate Severity

[girish]

[1.9.7]

• Update Element to 1.11.48
• Full changelog
• Correctly fill window.matrixChat even when a Wrapper module is active (#26395). Contributed by @dhenneke.
• Knock on a ask-to-join room if a module wants to join the room when navigating to a room (#11787). Contributed by @dhenneke.
• Element-R: Include crypto info in sentry (#11798). Contributed by @florianduros.
• Element-R: Include crypto info in rageshake (#11797). Contributed by @florianduros.
• Element-R: Add current version of the rust-sdk and vodozemac (#11785). Contributed by @florianduros.

[girish]

[1.9.8]

• Update Element to 1.11.49
• Full changelog
• Ensure setUserCreator is called when a store is assigned (#3867). Fixes #26520

[girish]

[1.81.0]

• Update Synapse to 1.96.1
• Full changelog
• Add experimental support to allow multiple workers to write to receipts stream. (#16432)
• Add a new module API for controller presence. (#16544)
• Add a new module API callback that allows adding extra fields to events' unsigned section when sent down to clients. (#16549)
• Improve the performance of claiming encryption keys. (#16565, #16570)

[nebulon]

[1.9.9]

• Update Element to 1.11.50
• Full changelog
• Ship element-web as a debian package (#26533). Contributed by @t3chguy.
• Update room summary card header (#11823). Contributed by @germain-gg.
• Add feature flag for disabling encryption in Element Call (#11837). Contributed by @toger5.
• Adapt the rendering of extra icons in the room header (#11835). Contributed by @charlynguyen.
• Implement new unreachable state and fix broken string ref (#11748). Contributed by @MidhunSureshR.
• Allow adding extra icons to the room header (#11799). Contributed by @charlynguyen.
• Room header: do not collapse avatar or facepile (#11866). Contributed by @kerryarchibald.
• New right panel: fix button alignment in memberlist (#11861). Contributed by @kerryarchibald.
• Use the correct video call icon variant (#11859). Contributed by @robintown.
• fix broken warning icon (#11862). Contributed by @ara4n.
• Fix rightpanel hiding scrollbar (#11831). Contributed by @kerryarchibald.
• Switch to updating presence via /sync calls instead of PUT /presence (#11824). Contributed by @t3chguy.

[girish]

[1.82.0]

• Switch LDAP authentication to OIDC login

[girish]

[1.83.0]

• Update Synapse to 1.97.0
• Full changelog
• Add support for asynchronous uploads as defined by MSC2246. Contributed by @sumnerevans at @beeper. (#15503)
• Improve the performance of some operations in multi-worker deployments. (#16613, #16616)
• Fix a long-standing bug where some queries updated the same row twice. Introduced in Synapse 1.57.0. (#16609)
• Fix a long-standing bug where Synapse would not unbind third-party identifiers for Application Service users when deactivated and would not emit a compliant response. (#16617)
• Fix sending out of order POSITION over replication, causing additional database load. (#16639)

[nebulon]

[1.9.10]

• Update Element to 1.11.51
• Full changelog
• Improve debian package and docs (#26618). Contributed by @t3chguy.
• Remove Quote from MessageContextMenu as it is unsupported by WYSIWYG (#11914). Contributed by @t3chguy.
• Always allow call.member events on new rooms (#11948). Contributed by @toger5.
• Right panel: view third party invite info without clearing history (#11934). Contributed by @kerryarchibald.
• Allow switching to system emoji font (#11925). Contributed by @t3chguy.
• Update open in other tab message (#11916). Contributed by @weeman1337.
• Add menu for legacy and element call in 1:1 rooms (#11910). Contributed by @toger5.
• Add ringing for matrixRTC (#11870). Contributed by @toger5.
• Keep device language when it has been previosuly set, after a successful delegated authentication flow that clears localStorage (#11902). Contributed by @mgcm.
• Fix misunderstanding of functional members (#11918). Contributed by @toger5.
• Fix: Video Room Chat Header Button Removed (#11911). Contributed by @kerryarchibald.
• Fix "not attempting encryption" warning (#11899). Contributed by @richvdh.