Matrix (Synapse/Element) - Package Updates

[nebulon]

[1.23.2]

• Update Synapse to 1.33.2
• This release fixes a denial of service attack (CVE-2021-29471) against Synapse's push rules implementation.

[girish]

Element [1.5.6]

• Update Element to 1.7.27

[girish]

[1.24.0]

• Update Synapse to 1.34.0
• Full changelog
• Add support for DELETE /_synapse/admin/v1/rooms/<room_id>. (#9889)
• Improve performance after joining a large room when presence is enabled. (#9910, #9916)
• Support stable identifiers for MSC1772 Spaces. m.space.child events will now be taken into account when populating the experimental spaces summary response. Please see the upgrade notes if you have customised room_invite_state_types in your configuration. (#9915, #9966)
• Improve performance of backfilling in large rooms. (#9935)

[girish]

Element [1.5.7]

• Update Element to 1.7.28

[girish]

Element [1.5.8]

• Update Element to 1.7.29

[girish]

Synapse [1.25.0]

• Update Synapse to 1.35.0
• Full changelog
• Add experimental support to allow a user who could join a restricted room to view it in the spaces summary. (#9922, #10007, #10038)
• Reduce memory usage when joining very large rooms over federation. (#9958)
• Add a configuration option which allows enabling opentracing by user id. (#9978)
• Enable experimental support for MSC2946 (spaces summary API) and MSC3083 (restricted join rules) by default. (#10011)

[nebulon]

[1.25.1]

• Update Synapse to 1.35.1
• Fix a bug introduced in v1.35.0 where invite-only rooms would be shown to all users in a space, regardless of if the user had access to it. (#10109)

[girish]

Element [1.5.9]

• Update Element to 1.7.30
• Upgrade to React SDK 3.23.0 and JS SDK 11.2.0

[girish]

Synapse [1.26.0]

• Update Synapse to 1.36.0
• Full changelog

[nebulon]

Element [1.5.10]

• Update Element to 1.7.31
• Upgrade to React SDK 3.24.0 and JS SDK 12.0.0

[nebulon]

Element [1.5.11]

• Update Element to 1.7.32

[girish]

Element [1.5.12]

• Set "branding" to Element

[girish]

Element [1.5.13]

• Update Element to 1.7.33

[girish]

For those asking about the recent releases, there's been a regression somewhere in Synapse with how auth providers are handled. You can read up here - https://github.com/matrix-org/synapse/issues/10171 . I opened https://github.com/matrix-org/matrix-synapse-ldap3/issues/123 and https://github.com/matrix-org/matrix-synapse-ldap3/issues/124 . Luckily, there is a workaround, so we can fix things in the package.

[girish]

[1.27.0]

• Update Synapse to 1.38.0
• Full changelog
• Implement refresh tokens as specified by MSC2918. (#9450)
• Add support for evicting cache entries based on last access time. (#10205)
• Omit empty fields from the /sync response. Contributed by @deepbluev7. (#10214)
• Improve validation on federation send_{join,leave,knock} endpoints. (#10225, #10243)
• Mark events received over federation which fail a spam check as "soft-failed". (#10263)
• Add metrics for new inbound federation staging area. (#10284)
• Add script to print information about recently registered users. (#10290)

[girish]

[1.27.1]

• Update Synapse to 1.38.1
• Full changelog

[nebulon]

[1.28.0]

• Update Synapse to 1.39.0
• Full changelog

[girish]

Element [1.5.14]

• Update Element to 1.7.34

[girish]

Synapse [1.29.0]

• Update Synapse to 1.40.0
• Full changelog

[girish]

Element [1.6.0]

• Update Element to 1.8.0
• Full changelog
• Show how long a call was on call tiles (#6570). Fixes #18405. Contributed by SimonBrandner.
• Add regional indicators to emoji picker (#6490). Fixes #14963. Contributed by robintown.
• Make call control buttons accessible to screen reader users (#6181). Fixes #18358. Contributed by pvagner.
• Skip sending a thumbnail if it is not a sufficient saving over the original (#6559). Fixes #17906.
• Increase PiP snapping speed (#6539). Fixes #18371. Contributed by SimonBrandner.
• Improve and move the incoming call toast (#6470). Fixes #17912. Contributed by SimonBrandner.
• Allow all of the URL schemes that Firefox allows (#6457). Contributed by aaronraimist.
• Improve bubble layout colors (#6452). Fixes #18081. Contributed by SimonBrandner.
• Spaces let users switch between Home and All Rooms behaviours (#6497). Fixes #18093.
• Support for MSC2285 (hidden read receipts) (#6390). Contributed by SimonBrandner.
• Group pinned message events with MELS (#6349). Fixes #17938. Contributed by SimonBrandner.
• Make version copiable (#6227). Fixes #17603 and #18329. Contributed by SimonBrandner.

[nebulon]

[1.6.1]

• Update Element to 1.8.1
• Full changelog
• Fix multiple VoIP regressions (matrix-org/matrix-js-sdk#1860).

[girish]

Synapse [1.30.0]

• Update Synapse to 1.41.0
• Full changelog

[girish]

[1.30.1]

• Send logs to the console
• Fix postinstall message about federation

[girish]

Element [1.6.2]

• Update Element to 1.8.2
• Full changelog
• Add a warning on E2EE rooms if you try to make them public (#5698). Contributed by SimonBrandner.
• Allow pagination of the space hierarchy and use new APIs (#6507). Fixes #18089 and #18427.
• Improve emoji in composer (#6650). Fixes #18593 and #18593. Contributed by SimonBrandner.
• Allow playback of replied-to voice message (#6629). Fixes #18599 and #18599. Contributed by SimonBrandner.
• Format autocomplete suggestions vertically (#6620). Fixes #17574 and #17574. Contributed by SimonBrandner.
• Remember last MemberList search query per-room (#6640). Fixes #18613 and #18613. Contributed by SimonBrandner.

[girish]

Synapse [1.30.2]

• Update Synapse to 1.41.1
• Full changelog
• GHSA-3x4c-pq33-4w3q / CVE-2021-39164: Enumerating a private room's list of members and their display names.
• GHSA-jj53-8fmw-f2w2 / CVE-2021-39163: Disclosing a private room's name, avatar, topic, and number of members.

[nebulon]

[1.31.0]

• Update Synapse to 1.42.0
• Full changelog
• Support room version 9 from MSC3375. (#10747)
• Add support for MSC3231: Token authenticated registration. Users can be required to submit a token during registration to authenticate themselves. Contributed by Callum Brown. (#10142)
• Add support for MSC3283: Expose enable_set_displayname in capabilities. (#10452)
• Port the PresenceRouter module interface to the new generic interface. (#10524)
• Add pagination to the spaces summary based on updates to MSC2946. (#10613, #10725)

[nebulon]

[1.6.3]

• Update Element to 1.8.4
• Full changelog
• Fix a security issue with message key sharing. See https://matrix.org/blog/2021/09/13/vulnerability-disclosure-key-sharing for details.

[girish]

[1.6.4]

• Update Element to 1.8.5
• Full changelog
• Add bubble highlight styling (#6582). Fixes #18295 and #18295. Contributed by SimonBrandner.
• Create narrow mode for Composer (#6682). Fixes #18533 and #18533.
• Prefer matrix.to alias links over room id in spaces & share (#6745). Fixes #18796 and #18796.
• Stop automatic playback of voice messages if a non-voice message is encountered (#6728). Fixes #18850 and #18850.
• Show call length during a call (#6700). Fixes #18566 and #18566. Contributed by SimonBrandner.
• Serialize and retry mass-leave when leaving space (#6737). Fixes #18789 and #18789.
• Improve form handling in and around space creation (#6739). Fixes #18775 and #18775.
• Split autoplay GIFs and videos into different settings (#6726). Fixes #5771 and #5771. Contributed by SimonBrandner.
• Add autoplay for voice messages (#6710). Fixes #18804, #18715, #18714 #17961 and #18804.
• Allow to use basic html to format invite messages (#6703). Fixes #15738 and #15738. Contributed by skolmer.

[nebulon]

[1.32.0]

• Update Synapse to 1.43.0
• Full changelog

[nebulon]

[1.7.0]

• Update Element to 1.9.0
• Full changelog

[girish]

[1.33.0]

• Update Synapse to 1.44.0
• Full changelog
• Only allow the MSC2716 /batch_send?chunk_id=xxx endpoint to connect to an already existing insertion event. (#10776)
• Improve oEmbed URL previews by processing the author name, photo, and video information. (#10814, #10819)
• Speed up responding with large JSON objects to requests. (#10868, #10905)
• Add a user_may_create_room_with_invites spam checker callback to allow modules to allow or deny a room creation request based on the invites and/or 3PID invites it includes. (#10898)

[nebulon]

[1.7.1]

• Update Element to 1.9.1
• Full changelog
• Decrease profile button touch target (#6900). Contributed by ColonisationCaptain.
• Don't let click events propagate out of context menus (#6892).
• Allow closing Dropdown via its chevron (#6885). Fixes #19030 and #19030.
• Improve AUX panel behaviour (#6699). Fixes #18787 and #18787. Contributed by SimonBrandner.
• A nicer opening animation for the Image View (#6454). Fixes #18186 and #18186. Contributed by SimonBrandner.

[nebulon]

[1.7.2]

• Update Element to 1.9.2
• Full changelog
• Upgrade to matrix-js-sdk#14.0.1

[nebulon]

[1.34.0]

• Update Synapse to 1.45.0
• Full changelog
• Fix a long-standing bug when using multiple event persister workers where events were not correctly sent down /sync due to a race. (#11045)
• Fix a bug introduced in Synapse 1.45.0rc1 where the user directory would stop updating if it processed an event from a user not in the users table. (#11053)
• Fix a bug introduced in Synapse 1.44.0 when logging errors during oEmbed processing. (#11061)

[nebulon]

[1.34.1]

• Update Synapse to 1.45.1
• Full changelog
• Revert change to counting of deactivated users towards the monthly active users limit, introduced in 1.45.0rc1. (#11127)

[girish]

[1.7.3]

• Update Element to 1.9.3
• Full changelog
• Convert the "Cryptography" settings panel to an HTML table to assist screen reader users. (#6968). Contributed by andybalaam.
• Swap order of private space creation and tweak copy (#6967). Fixes #18768 and #18768.
• Add spacing to Room settings - Notifications subsection (#6962). Contributed by CicadaCinema.
• Use HTML tables for some tabular user interface areas, to assist with screen reader use (#6955). Contributed by andybalaam.
• Fix space invite edge cases (#6884). Fixes #19010 #17345 and #19010.
• Allow options to cascade kicks/bans throughout spaces (#6829). Fixes #18969 and #18969.
• Hide kick & ban options in UserInfo when looking at own profile (#6911). Fixes #19066 and #19066.

[nebulon]

[1.35.0]

• Update Synapse to 1.46.0
• Full changelog
• Fix a bug introduced in v1.46.0rc1 where URL previews of some XML documents would fail. (#11196)

[girish]

Element [1.7.4]

• Update Element to 1.9.4

[nebulon]

[1.36.0]

• Update Synapse to 1.47.0
• Full changelog
• Fix a bug introduced in 1.47.0rc1 which caused worker processes to not halt startup in the presence of outstanding database migrations. (#11346)
• Fix a bug introduced in 1.47.0rc1 which prevented the 'remove deleted devices from device_inbox column' background process from running when updating from a recent Synapse version. (#11303, #11353)

[nebulon]

[1.7.5]

• Update Element to 1.9.5
• Full changelog

[nebulon]

[1.36.1]

• Update Synapse to 1.47.1
• Full changelog
• GHSA-3hfw-x7gx-437c / CVE-2021-41281: Path traversal when downloading remote media.

[nebulon]

[1.37.0]

• Update Synapse to 1.48.0
• Full changelog

[nebulon]

[1.7.6]

• Update Element to 1.9.6
• Full changelog

[girish]

Element [1.7.7]

• Update Element to 1.9.7
• Full changelog

[nebulon]

[1.38.0]

• Update Synapse to 1.49.0
• Full changelog

[girish]

Element [1.7.8]

• Update Element to 1.9.8
• Full changelog

[girish]

Synapse [1.38.1]

• Update Synapse to 1.49.2
• Full changelog

[nebulon]

Synapse [1.38.2]

• Update Synapse to 1.50.1
• Full changelog

[girish]

Element [1.7.9]

• Update Element to 1.9.9
• Full changelog
• Add permission dropdown for sending reactions (#7492). Fixes #20450.
• Ship maximised widgets and remove feature flag (#7509).
• Properly maintain aspect ratio of inline images (#7503).
• Add zoom buttons to the location view (#7482).
• Remove bubble from around location events (#7459). Fixes #20323.
• Disable "Publish this room" option in invite only rooms (#7441). Fixes #6596. Contributed by @aaronraimist.

[nebulon]

[1.38.3]

• Update Synapse to 1.50.2
• Full changelog
• Fix a bug introduced in Synapse 1.40.0 that caused Synapse to fail to process incoming federation traffic after handling a large amount of events in a v1 room. (#11806)

[nebulon]

[1.38.4]

• Update Synapse to 1.51.0
• Full changelog

[nebulon]

[1.7.10]

• Update Element to 1.10.0
• Full changelog

[nebulon]

[1.7.11]

• Update Element to 1.10.1
• Full changelog
• Fix the sticker picker (#7692). Fixes vector-im/element-web#20797.
• Ensure UserInfo can be rendered without a room (#7687). Fixes vector-im/element-web#20830.
• Fix publishing address wrongly demanding the alias be available (#7690). Fixes vector-im/element-web#12013 and vector-im/element-web#20833.

[nebulon]

[1.38.5]

• Update Synapse to 1.52.0
• Full changelog
• Remove account data (including client config, push rules and ignored users) upon user deactivation. (#11621, #11788, #11789)
• Add an admin API to reset connection timeouts for remote server. (#11639)
• Add an admin API to get a list of rooms that federate with a given remote homeserver. (#11658)
• Add a config flag to inhibit M_USER_IN_USE during registration. (#11743)
• Add a module callback to set username at registration. (#11790)
• Allow configuring a maximum file size as well as a list of allowed content types for avatars. (#11846)

[nebulon]

[1.7.12]

• Update Element to 1.10.2
• Full changelog

[nebulon]

[1.7.13]

• Update Element to 1.10.3
• Full changelog
• Add map tile URL for location sharing maps to sample config

[nebulon]

[1.7.14]

• Update Element to 1.10.4
• Full changelog
• Fix bug where badge colour on encrypted rooms may not be correct until anothe rmessage is sent

[nebulon]

[1.38.6]

• Update Synapse to 1.53.0
• Full changelog
• Add experimental support for sending to-device messages to application services, as specified by MSC2409. (#11215, #11966)
• Add a background database update to purge account data for deactivated users. (#11655)
• Experimental support for MSC3666: including bundled aggregations in server side search results. (#11837)
• Enable cache time-based expiry by default. The expiry_time config flag has been superseded by expire_caches and cache_entry_ttl. (#11849)
• Add a callback to allow modules to allow or forbid a 3PID (email address, phone number) from being associated to a local account. (#11854)
• Stabilize support and remove unstable endpoints for MSC3231. Clients must switch to the stable identifier and endpoint. See the upgrade notes for more information. (#11867)
• Allow modules to retrieve the current instance's server name and worker name. (#11868)
• Use a dedicated configurable rate limiter for 3PID invites. (#11892)
• Support the stable API endpoint for MSC3283: new settings in /capabilities endpoint. (#11933, #11989)
• Support the dir parameter on the /relations endpoint, per MSC3715. (#11941)
• Experimental implementation of MSC3706: extensions to /send_join to support reduced response size. (#11967)

[nebulon]

[1.7.15]

• Update Element to 1.10.5
• Full changelog

[nebulon]

[1.7.16]

• Update Element to 1.10.6
• Full changelog
• Fix some crashes in the right panel