Matrix (Synapse/Element) - Package Updates

[Package Updates]

[1.9.43]

• Update element-web to 1.11.85
• Full Changelog
• Fixes for CVE-2024-51750 / GHSA-w36j-v56h-q9pc
• Fixes for CVE-2024-51749 / GHSA-5486-384g-mcx2
• Update JS SDK with the fixes for CVE-2024-50336 / GHSA-xvg8-m4x3-w6xr

[Package Updates]

[1.99.0]

• Update synapse to 1.119.0
• Full Changelog
• Support MSC4151's stable report room API. (#​17374)
• Add experimental support for MSC4222 (Adding state_after to sync v2). (#​17888)
• Fix bug with sliding sync where $LAZY-loading room members would not return required_state membership in incremental syncs. (#​17809)
• Check if user has membership in a room before tagging it. Contributed by Lama Alosaimi. (#​17839)
• Fix a bug in the admin redact endpoint where the background task would not run if a worker was specified in
• Fix bug where some presence and typing timeouts can expire early. (#​17850)
• Fix detection when the built Rust library was outdated when using source installations. (#​17861)
• Fix a long-standing bug in Synapse which could cause one-time keys to be issued in the incorrect order, causing message decryption failures. (#​17903)
• Fix experimental support for MSC4222 (Adding state_after to sync v2) where we would return the full state on incremental syncs when using lazy loaded members and there were no new events in the timeline. (#​17915)
• Remove support for python 3.8. (#​17908)
• Add a test for downloading and thumbnailing a CMYK JPEG. (#​17786)
• Refactor database calls to remove Generator usage. (#​17813, #​17814, #​17815, #​17816, #​17817, #​17818, #​17890)
• Include the destination in the error of 'Destination mismatch' on federation requests. (#​17830)
• The nix flake inside the repository no longer tracks nixpkgs/master to not catch the latest bugs from a MR merged 5 minutes ago. (#​17852)
• Minor speed-up of sliding sync by computing extensions results in parallel. (#​17884)
• Bump the default Python version in the Synapse Dockerfile from 3.11 -> 3.12. (#​17887)
• Remove usage of internal header encoding API. (#​17894)
• Use unique name for each os.arch variant when uploading Wheel artifacts. (#​17905)
• Fix tests to run with latest Twisted. (#​17906, #​17907, #​17911)
• Update version constraint to allow the latest poetry-core 1.9.1. (#​17902)
• Update the portdb CI to use Python 3.13 and Postgres 17 as latest dependencies. (#​17909)
• Add an index to current_state_delta_stream table. (#​17912)
• Fix building and attaching release artifacts during the release process. (#​17921)

[Package Updates]

[1.9.44]

• Update element-web to 1.11.86
• Full Changelog
• Deduplicate icons using Compound Design Tokens (#​28419). Contributed by @​t3chguy.
• Let widget driver send error details (#​28357). Contributed by @​AndrewFerr.
• Deduplicate icons using Compound Design Tokens (#​28381). Contributed by @​t3chguy.
• Auto approvoce io.element.call.reaction capability for element call widgets (#​28401). Contributed by @​toger5.
• Show message type prefix in thread root & reply previews (#​28361). Contributed by @​t3chguy.
• Support sending encrypted to device messages from widgets (#​28315). Contributed by @​hughns.

[Package Updates]

[1.100.0]

• Update synapse to 1.120.0
• Full Changelog
• Fix a bug introduced in Synapse v1.120rc1 which would cause the newly-introduced delete_old_otks job to fail in worker-mode deployments. (#​17960)

[Package Updates]

[1.100.1]

• Update synapse to 1.120.2
• Full Changelog

[Package Updates]

[1.9.45]

• Update element-web to 1.11.87
• Full Changelog
• Send and respect MSC4230 is_animated flag (#​28513). Contributed by @​t3chguy.
• Display a warning when an unverified user's identity changes (#​28211). Contributed by @​uhoreg.
• Swap out Twitter link for Mastodon on auth footer (#​28508). Contributed by @​t3chguy.
• Consider org.matrix.msc3417.call as video room in create room dialog (#​28497). Contributed by @​t3chguy.
• Standardise icons using Compound Design Tokens (#​28217). Contributed by @​t3chguy.
• Start sending stable m.marked_unread events (#​28478). Contributed by @​tulir.
• Upgrade to compound-design-tokens v2 (#​28471). Contributed by @​t3chguy.
• Standardise icons using Compound Design Tokens (#​28286). Contributed by @​t3chguy.
• Remove reply fallbacks as per merged MSC2781 (#​28406). Contributed by @​t3chguy.
• Use React Suspense when rendering async modals (#​28386). Contributed by @​t3chguy.
• Add spinner when room encryption is loading in room settings (#​28535). Contributed by @​florianduros.
• Fix getOidcCallbackUrl for Element Desktop (#​28521). Contributed by @​t3chguy.
• Filter out redacted poll votes to avoid crashing the Poll widget (#​28498). Contributed by @​t3chguy.
• Fix force tab complete not working since switching to React 18 createRoot API (#​28505). Contributed by @​t3chguy.
• Fix media captions in bubble layout (#​28480). Contributed by @​tulir.
• Reset cross-signing before backup when resetting both (#​28402). Contributed by @​uhoreg.
• Listen to events so that encryption icon updates when status changes (#​28407). Contributed by @​uhoreg.
• Check that the file the user chose has a MIME type of image/* (#​28467). Contributed by @​t3chguy.
• Fix download button size in message action bar (#​28472). Contributed by @​t3chguy.
• Allow tab completing users in brackets (#​28460). Contributed by @​t3chguy.
• Fix React 18 strict mode breaking spotlight dialog (#​28452). Contributed by @​MidhunSureshR.

[Package Updates]

[1.9.46]

• Update element-web to 1.11.88
• Full Changelog
• Allow trusted Element Call widget to send and receive media encryption key to-device messages (#​28316). Contributed by @​hughns.
• increase ringing timeout from 10 seconds to 90 seconds (#​28630). Contributed by @​fkwp.
• Add Close tooltip to dialog (#​28617). Contributed by @​florianduros.
• New UX for Share dialog (#​28598). Contributed by @​florianduros.
• Improve performance of RoomContext in RoomHeader (#​28574). Contributed by @​t3chguy.
• Remove Features.RustCrypto flag (#​28582). Contributed by @​florianduros.
• Add Modernizr warning when running in non-secure context (#​28581). Contributed by @​t3chguy.
• Fix jumpy timeline when the pinned message banner is displayed (#​28654). Contributed by @​florianduros.
• Fix font & spaces in settings subsection (#​28631). Contributed by @​florianduros.
• Remove manual device verification which is not supported by the new cryptography stack (#​28588). Contributed by @​florianduros.
• Fix code block highlighting not working reliably with many code blocks (#​28613). Contributed by @​t3chguy.
• Remove remaining reply fallbacks code (#​28610). Contributed by @​t3chguy.

[Package Updates]

[1.9.47]

• Update element-web to 1.11.89
• Full Changelog
• Upgrade matrix-sdk-crypto-wasm to 1.11.0 (https://github.com/matrix-org/matrix-js-sdk/pull/4593)
• Fix url preview display (#​28766).

[Package Updates]

[1.101.0]

• Update synapse to 1.121.1
• Full Changelog
• Support for MSC4190: device management for Application Services. (#17705)
• Update MSC4186 Sliding Sync to include invite, ban, kick, targets when $LAZY-loading room members. (#17947)
• Use stable M_USER_LOCKED error code for locked accounts, as per Matrix 1.12. (#17965)
• MSC4076: Add disable_badge_count to pusher configuration. (#17975)

[Package Updates]

[1.101.1]

• CLOUDRON_OIDC_PROVIDER_NAME implemented

[Package Updates]

[1.102.0]

• Update synapse to 1.122.0
• Full Changelog

[Package Updates]

[1.9.48]

• Update element-web to 1.11.90
• Full Changelog
• Docker: run as non-root (#​28849). Contributed by @​richvdh.
• Docker: allow configuration of HTTP listen port via env var (#​28840). Contributed by @​richvdh.
• Update matrix-wysiwyg to consume WASM asset (#​28838). Contributed by @​t3chguy.
• OIDC settings tweaks (#​28787). Contributed by @​t3chguy.
• Delabs native OIDC support (#​28615). Contributed by @​t3chguy.

[Package Updates]

[1.103.0]

• Update synapse to 1.123.0
• Full Changelog

[Package Updates]

[1.9.49]

• Update element-web to 1.11.91
• Full Changelog
• Implement changes to memberlist from feedback (#​29029). Contributed by @​MidhunSureshR.
• Add toast for recovery keys being out of sync (#​28946). Contributed by @​dbkr.
• Refactor LegacyCallHandler event emitter to use TypedEventEmitter (#​29008). Contributed by @​t3chguy.
• Add Recovery section in the new user settings Encryption tab (#​28673). Contributed by @​florianduros.
• Retry loading chunks to make the app more resilient (#​29001). Contributed by @​t3chguy.
• Clear account idb table on logout (#​28996). Contributed by @​t3chguy.
• Implement new memberlist design with MVVM architecture (#​28874). Contributed by @​MidhunSureshR.
• [Backport staging] Switch to secure random strings (#​29035). Contributed by @​RiotRobot.
• React to MatrixEvent sender/target being updated for rendering state events (#​28947). Contributed by @​t3chguy.

[Package Updates]

[1.9.50]

• Update element-web to 1.11.92
• Full Changelog
• [Backport staging] Log when we show, and hide, encryption setup toasts (#​29238). Contributed by @​richvdh.
• Make profile header section match the designs (#​29163). Contributed by @​MidhunSureshR.
• Always show back button in the right panel (#​29128). Contributed by @​MidhunSureshR.
• Schedule dehydration on reload if the dehydration key is already cached locally (#​29021). Contributed by @​uhoreg.
• update to twemoji 15.1.0 (#​29115). Contributed by @​ara4n.
• Update matrix-widget-api (#​29112). Contributed by @​toger5.
• Allow navigating through the memberlist using up/down keys (#​28949). Contributed by @​MidhunSureshR.
• Style room header icons and facepile for toggled state (#​28968). Contributed by @​MidhunSureshR.
• Move threads header below base card header (#​28969). Contributed by @​MidhunSureshR.
• Add Advanced section to the user settings encryption tab (#​28804). Contributed by @​florianduros.
• Fix outstanding UX issues with replies/mentions/keyword notifs (#​28270). Contributed by @​taffyko.
• Distinguish room state and timeline events when dealing with widgets (#​28681). Contributed by @​robintown.
• Switch OIDC primarily to new /auth_metadata API (#​29019). Contributed by @​t3chguy.
• More memberlist changes (#​29069). Contributed by @​MidhunSureshR.
• [Backport staging] Wire up the "Forgot recovery key" button for the "Key storage out of sync" toast (#​29190). Contributed by @​RiotRobot.
• Encryption tab: hide Advanced section when the key storage is out of sync (#​29129). Contributed by @​florianduros.
• Fix share button in discovery settings being disabled incorrectly (#​29151). Contributed by @​t3chguy.
• Ensure switching rooms does not wrongly focus timeline search (#​29153). Contributed by @​t3chguy.
• Stop showing a dialog prompting the user to enter an old recovery key (#​29143). Contributed by @​richvdh.
• Make themed widgets reflect the effective theme (#​28342). Contributed by @​robintown.
• support non-VS16 emoji ligatures in TwemojiMozilla (#​29100). Contributed by @​ara4n.
• e2e test: Verify session with the encryption tab instead of the security & privacy tab (#​29090). Contributed by @​florianduros.
• Work around cloudflare R2 / aws client incompatability (#​29086). Contributed by @​dbkr.
• Fix identity server settings visibility (#​29083). Contributed by @​dbkr.

[Package Updates]

[1.104.0]

• Update synapse to 1.124.0
• Full Changelog

[Package Updates]

[1.9.51]

• Update element-web to 1.11.93
• Full Changelog
• [backport] Dynamically load Element Web modules in Docker entrypoint (#​29358). Contributed by @​t3chguy.
• ChangeRecoveryKey: error handling (#​29262). Contributed by @​richvdh.
• Dehydration: enable dehydrated device on "Set up recovery" (#​29265). Contributed by @​richvdh.
• Render reason for invite rejection. (#​29257). Contributed by @​Half-Shot.
• New room list: add search section (#​29251). Contributed by @​florianduros.
• New room list: hide favourites and people meta spaces (#​29241). Contributed by @​florianduros.
• New Room List: Create new labs flag (#​29239). Contributed by @​MidhunSureshR.
• Stop URl preview from covering message box (#​29215). Contributed by @​edent.
• Rename "security key" into "recovery key" (#​29217). Contributed by @​florianduros.

[Package Updates]

[1.105.0]

• Update synapse to 1.125.0
• Full Changelog
• Add functionality to be able to use multiple values in SSO feature attribute_requirements. (#17949)
• Add experimental config options admin_token_path and client_secret_path for MSC3861. (#18004)
• Add get_current_time_msec() method to the module API for sound time comparisons with Synapse. (#18144)
• Update the response when a client attempts to add an invalid email address to the user's account from a 500, to a 400 with error text. (#18125)
• Fix user directory search when using a legacy module with a check_username_for_spam callback. Broke in v1.122.0. (#18135)

[Package Updates]

[1.9.52]

• Update element-web to 1.11.94
• Full Changelog
• [Backport staging] fix: /tmp/element-web-config may already exist preventing the container from booting up (#​29377). Contributed by @​RiotRobot.

[Package Updates]

[1.106.0]

• Update synapse to 1.126.0
• Full Changelog
• Define ratelimit configuration for delayed event management. (#18019)
• Add form_secret_path config option. (#18090)
• Add the --no-secrets-in-config command line option. (#18092)
• Add background job to clear unreferenced state groups. (#18154)
• Add support for specifying/overriding id_token_signing_alg_values_supported for an OpenID identity provider. (#18177)
• Add worker_replication_secret_path config option. (#18191)
• Add support for specifying/overriding redirect_uri in the authorization and token requests against an OpenID identity provider. (#18197)