Matrix (Synapse/Element) - Package Updates

[girish]

Element [1.6.2]

• Update Element to 1.8.2
• Full changelog
• Add a warning on E2EE rooms if you try to make them public (#5698). Contributed by SimonBrandner.
• Allow pagination of the space hierarchy and use new APIs (#6507). Fixes #18089 and #18427.
• Improve emoji in composer (#6650). Fixes #18593 and #18593. Contributed by SimonBrandner.
• Allow playback of replied-to voice message (#6629). Fixes #18599 and #18599. Contributed by SimonBrandner.
• Format autocomplete suggestions vertically (#6620). Fixes #17574 and #17574. Contributed by SimonBrandner.
• Remember last MemberList search query per-room (#6640). Fixes #18613 and #18613. Contributed by SimonBrandner.

[girish]

Synapse [1.30.2]

• Update Synapse to 1.41.1
• Full changelog
• GHSA-3x4c-pq33-4w3q / CVE-2021-39164: Enumerating a private room's list of members and their display names.
• GHSA-jj53-8fmw-f2w2 / CVE-2021-39163: Disclosing a private room's name, avatar, topic, and number of members.

[nebulon]

[1.31.0]

• Update Synapse to 1.42.0
• Full changelog
• Support room version 9 from MSC3375. (#10747)
• Add support for MSC3231: Token authenticated registration. Users can be required to submit a token during registration to authenticate themselves. Contributed by Callum Brown. (#10142)
• Add support for MSC3283: Expose enable_set_displayname in capabilities. (#10452)
• Port the PresenceRouter module interface to the new generic interface. (#10524)
• Add pagination to the spaces summary based on updates to MSC2946. (#10613, #10725)

[nebulon]

[1.6.3]

• Update Element to 1.8.4
• Full changelog
• Fix a security issue with message key sharing. See https://matrix.org/blog/2021/09/13/vulnerability-disclosure-key-sharing for details.

[girish]

[1.6.4]

• Update Element to 1.8.5
• Full changelog
• Add bubble highlight styling (#6582). Fixes #18295 and #18295. Contributed by SimonBrandner.
• Create narrow mode for Composer (#6682). Fixes #18533 and #18533.
• Prefer matrix.to alias links over room id in spaces & share (#6745). Fixes #18796 and #18796.
• Stop automatic playback of voice messages if a non-voice message is encountered (#6728). Fixes #18850 and #18850.
• Show call length during a call (#6700). Fixes #18566 and #18566. Contributed by SimonBrandner.
• Serialize and retry mass-leave when leaving space (#6737). Fixes #18789 and #18789.
• Improve form handling in and around space creation (#6739). Fixes #18775 and #18775.
• Split autoplay GIFs and videos into different settings (#6726). Fixes #5771 and #5771. Contributed by SimonBrandner.
• Add autoplay for voice messages (#6710). Fixes #18804, #18715, #18714 #17961 and #18804.
• Allow to use basic html to format invite messages (#6703). Fixes #15738 and #15738. Contributed by skolmer.

[nebulon]

[1.32.0]

• Update Synapse to 1.43.0
• Full changelog

[nebulon]

[1.7.0]

• Update Element to 1.9.0
• Full changelog

[girish]

[1.33.0]

• Update Synapse to 1.44.0
• Full changelog
• Only allow the MSC2716 /batch_send?chunk_id=xxx endpoint to connect to an already existing insertion event. (#10776)
• Improve oEmbed URL previews by processing the author name, photo, and video information. (#10814, #10819)
• Speed up responding with large JSON objects to requests. (#10868, #10905)
• Add a user_may_create_room_with_invites spam checker callback to allow modules to allow or deny a room creation request based on the invites and/or 3PID invites it includes. (#10898)

[nebulon]

[1.7.1]

• Update Element to 1.9.1
• Full changelog
• Decrease profile button touch target (#6900). Contributed by ColonisationCaptain.
• Don't let click events propagate out of context menus (#6892).
• Allow closing Dropdown via its chevron (#6885). Fixes #19030 and #19030.
• Improve AUX panel behaviour (#6699). Fixes #18787 and #18787. Contributed by SimonBrandner.
• A nicer opening animation for the Image View (#6454). Fixes #18186 and #18186. Contributed by SimonBrandner.

[nebulon]

[1.7.2]

• Update Element to 1.9.2
• Full changelog
• Upgrade to matrix-js-sdk#14.0.1

[nebulon]

[1.34.0]

• Update Synapse to 1.45.0
• Full changelog
• Fix a long-standing bug when using multiple event persister workers where events were not correctly sent down /sync due to a race. (#11045)
• Fix a bug introduced in Synapse 1.45.0rc1 where the user directory would stop updating if it processed an event from a user not in the users table. (#11053)
• Fix a bug introduced in Synapse 1.44.0 when logging errors during oEmbed processing. (#11061)

[nebulon]

[1.34.1]

• Update Synapse to 1.45.1
• Full changelog
• Revert change to counting of deactivated users towards the monthly active users limit, introduced in 1.45.0rc1. (#11127)

[girish]

[1.7.3]

• Update Element to 1.9.3
• Full changelog
• Convert the "Cryptography" settings panel to an HTML table to assist screen reader users. (#6968). Contributed by andybalaam.
• Swap order of private space creation and tweak copy (#6967). Fixes #18768 and #18768.
• Add spacing to Room settings - Notifications subsection (#6962). Contributed by CicadaCinema.
• Use HTML tables for some tabular user interface areas, to assist with screen reader use (#6955). Contributed by andybalaam.
• Fix space invite edge cases (#6884). Fixes #19010 #17345 and #19010.
• Allow options to cascade kicks/bans throughout spaces (#6829). Fixes #18969 and #18969.
• Hide kick & ban options in UserInfo when looking at own profile (#6911). Fixes #19066 and #19066.

[nebulon]

[1.35.0]

• Update Synapse to 1.46.0
• Full changelog
• Fix a bug introduced in v1.46.0rc1 where URL previews of some XML documents would fail. (#11196)

[girish]

Element [1.7.4]

• Update Element to 1.9.4

[nebulon]

[1.36.0]

• Update Synapse to 1.47.0
• Full changelog
• Fix a bug introduced in 1.47.0rc1 which caused worker processes to not halt startup in the presence of outstanding database migrations. (#11346)
• Fix a bug introduced in 1.47.0rc1 which prevented the 'remove deleted devices from device_inbox column' background process from running when updating from a recent Synapse version. (#11303, #11353)

[nebulon]

[1.7.5]

• Update Element to 1.9.5
• Full changelog

[nebulon]

[1.36.1]

• Update Synapse to 1.47.1
• Full changelog
• GHSA-3hfw-x7gx-437c / CVE-2021-41281: Path traversal when downloading remote media.

[nebulon]

[1.37.0]

• Update Synapse to 1.48.0
• Full changelog

[nebulon]

[1.7.6]

• Update Element to 1.9.6
• Full changelog

[girish]

Element [1.7.7]

• Update Element to 1.9.7
• Full changelog

[nebulon]

[1.38.0]

• Update Synapse to 1.49.0
• Full changelog

[girish]

Element [1.7.8]

• Update Element to 1.9.8
• Full changelog

[girish]

Synapse [1.38.1]

• Update Synapse to 1.49.2
• Full changelog

[nebulon]

Synapse [1.38.2]

• Update Synapse to 1.50.1
• Full changelog

[girish]

Element [1.7.9]

• Update Element to 1.9.9
• Full changelog
• Add permission dropdown for sending reactions (#7492). Fixes #20450.
• Ship maximised widgets and remove feature flag (#7509).
• Properly maintain aspect ratio of inline images (#7503).
• Add zoom buttons to the location view (#7482).
• Remove bubble from around location events (#7459). Fixes #20323.
• Disable "Publish this room" option in invite only rooms (#7441). Fixes #6596. Contributed by @aaronraimist.

[nebulon]

[1.38.3]

• Update Synapse to 1.50.2
• Full changelog
• Fix a bug introduced in Synapse 1.40.0 that caused Synapse to fail to process incoming federation traffic after handling a large amount of events in a v1 room. (#11806)

[nebulon]

[1.38.4]

• Update Synapse to 1.51.0
• Full changelog

[nebulon]

[1.7.10]

• Update Element to 1.10.0
• Full changelog

[nebulon]

[1.7.11]

• Update Element to 1.10.1
• Full changelog
• Fix the sticker picker (#7692). Fixes vector-im/element-web#20797.
• Ensure UserInfo can be rendered without a room (#7687). Fixes vector-im/element-web#20830.
• Fix publishing address wrongly demanding the alias be available (#7690). Fixes vector-im/element-web#12013 and vector-im/element-web#20833.

[nebulon]

[1.38.5]

• Update Synapse to 1.52.0
• Full changelog
• Remove account data (including client config, push rules and ignored users) upon user deactivation. (#11621, #11788, #11789)
• Add an admin API to reset connection timeouts for remote server. (#11639)
• Add an admin API to get a list of rooms that federate with a given remote homeserver. (#11658)
• Add a config flag to inhibit M_USER_IN_USE during registration. (#11743)
• Add a module callback to set username at registration. (#11790)
• Allow configuring a maximum file size as well as a list of allowed content types for avatars. (#11846)

[nebulon]

[1.7.12]

• Update Element to 1.10.2
• Full changelog

[nebulon]

[1.7.13]

• Update Element to 1.10.3
• Full changelog
• Add map tile URL for location sharing maps to sample config

[nebulon]

[1.7.14]

• Update Element to 1.10.4
• Full changelog
• Fix bug where badge colour on encrypted rooms may not be correct until anothe rmessage is sent

[nebulon]

[1.38.6]

• Update Synapse to 1.53.0
• Full changelog
• Add experimental support for sending to-device messages to application services, as specified by MSC2409. (#11215, #11966)
• Add a background database update to purge account data for deactivated users. (#11655)
• Experimental support for MSC3666: including bundled aggregations in server side search results. (#11837)
• Enable cache time-based expiry by default. The expiry_time config flag has been superseded by expire_caches and cache_entry_ttl. (#11849)
• Add a callback to allow modules to allow or forbid a 3PID (email address, phone number) from being associated to a local account. (#11854)
• Stabilize support and remove unstable endpoints for MSC3231. Clients must switch to the stable identifier and endpoint. See the upgrade notes for more information. (#11867)
• Allow modules to retrieve the current instance's server name and worker name. (#11868)
• Use a dedicated configurable rate limiter for 3PID invites. (#11892)
• Support the stable API endpoint for MSC3283: new settings in /capabilities endpoint. (#11933, #11989)
• Support the dir parameter on the /relations endpoint, per MSC3715. (#11941)
• Experimental implementation of MSC3706: extensions to /send_join to support reduced response size. (#11967)

[nebulon]

[1.7.15]

• Update Element to 1.10.5
• Full changelog

[nebulon]

[1.7.16]

• Update Element to 1.10.6
• Full changelog
• Fix some crashes in the right panel

[nebulon]

[1.39.0]

• Update Synapse to 1.54.0
• Full changelog
• Fix a bug introduced in Synapse 1.54.0rc1 preventing the new module callbacks introduced in this release from being registered by modules. (#12141)
• Fix a bug introduced in Synapse 1.54.0rc1 where runtime dependency version checks would mistakenly check development dependencies if they were present and would not accept pre-release versions of dependencies. (#12129, #12177)

[girish]

[1.7.17]

• Update Element to 1.10.7
• Full changelog
• Security: Fix a bug where URL previews could be enabled in right panel timelines when they should not have been.
• Add unexposed account setting for hiding poll creation (#7972).
• Allow pinning polls (#7922). Fixes #20152.
• Make trailing : into a setting (#6711). Fixes #16682. Contributed by @SimonBrandner.
• Location sharing > back button (#7958).
• use LocationAssetType (#7965).

[girish]

Synapse [1.40.0]

• Update Synapse to 1.55.0
• Full changelog
• Add third-party rules callbacks check_can_shutdown_room and check_can_deactivate_user. (#12028)
• Improve performance of logging in for large accounts. (#12132)
• Support the stable identifiers from MSC3440: threads. (#12151)
• Add a new Jinja2 template filter to extract the local part of an email address. (#12212)

[girish]

[1.40.1]

• Update Synapse to 1.55.1
• Full changelog
• Remove uses of the long-deprecated jinja2.Markup which would prevent Synapse from starting with Jinja 3.1.0 or above installed. (#12289)

[nebulon]

[1.7.18]

• Update Element to 1.10.8
• Full changelog

[girish]

[1.41.0]

• Update Synapse to 1.56.0
• Full changelog
• Allow modules to store already existing 3PID associations. (#12195)
• Allow registering server administrators using the module API. Contributed by Famedly. (#12250)
• Fix a long-standing bug where events from ignored users would still be considered for relations. (#12227, #12232, #12285)
• Refuse to start if registration is enabled without email, captcha, or token-based verification unless the new config flag enable_registration_without_verification is set to true

[nebulon]

[1.7.19]

• Update Element to 1.10.9
• Full changelog
• Release threads as a beta feature (#8081). Fixes #21351.
• More video rooms design updates (#8222).
• Update video rooms to new design specs (#8207). Fixes #21515, #21516 #21519 and #21526.
• Live Location Sharing - left panel warning with error (#8201).
• Live location sharing - Stop publishing location to beacons with consecutive errors (#8194).
• Live location sharing: allow retry when stop sharing fails (#8193).
• Allow voice messages to be scrubbed in the timeline (#8079). Fixes #18713.

[nebulon]

[1.7.20]

• Update Element to 1.10.10
• Full changelog
• Fixes around threads beta in degraded mode (#8319). Fixes #21762.

[girish]

[1.41.1]

• Update Synapse to 1.57.1
• Full changelog

[nebulon]

[1.7.21]

• Update Element to 1.10.11
• Full changelog
• Handle forced disconnects from Jitsi (#21697). Fixes #21517.
• Improve performance of switching to rooms with lots of servers and ACLs (#8347).
• Avoid a reflow when setting caret position on an empty composer (#8348).
• Add message right-click context menu as a labs feature (#5672).
• Live location sharing - basic maximised beacon map (#8310).
• Live location sharing - render users own beacons in timeline (#8296).
• Improve Threads beta around degraded mode (#8318).
• Live location sharing - beacon in timeline happy path (#8285).
• Add copy button to View Source screen (#8278). Fixes #21482. Contributed by @olivialivia.
• Add heart effect (#6188). Contributed by @CicadaCinema.
• Update new room icon (#8239).

[nebulon]

[1.42.0]

• Update Synapse to 1.58.0
• Full changelog
• Implement MSC3383 for including the destination in server-to-server authentication headers. Contributed by @Bubu and @jcgruenhage for Famedly. (#11398)
• Enable processing of device list updates asynchronously. (#12365, #12465)
• Implement MSC2815 to allow room moderators to view redacted event content. Contributed by @tulir @ Beeper. (#12427)

[girish]

Synapse 1.58.1 hangs on startup . https://github.com/matrix-org/synapse/issues/12649 is the upstream issue (which, in turn, is caused by https://github.com/python-jsonschema/jsonschema/issues/941)

[nebulon]

[1.7.22]

• Update Element to 1.10.12
• Full changelog
• Made the location map change the cursor to a pointer so it looks like it's clickable (https (#8451). Fixes #21991. Contributed by @Odyssey346.
• Implement improved spacing for the thread list and timeline (#8337). Fixes #21759. Contributed by @luixxiul.
• LLS: expose way to enable live sharing labs flag from location dialog (#8416).
• Fix source text boxes in View Source modal should have full width (#8425). Fixes #21938. Contributed by @EECvision.
• Read Receipts: never show +1, if it’s just 4, show all of them (#8428). Fixes #21935.
• Add opt-in analytics to onboarding tasks (#8409). Fixes #21705.

[nebulon]

[1.43.0]

• Update Synapse to 1.59.0
• Full changelog

[girish]

[1.43.1]

• Update Synapse to 1.59.1
• Full changelog

[nebulon]

[1.7.23]

• Update Element to 1.10.13
• Full changelog
• Lots of fixes and new features!

[girish]

[1.44.0]

• Update Synapse to 1.60.0
• Full changelog
• Add an option allowing users to use their password to reauthenticate for privileged actions even though password login is disabled. (#12883)
• Explicitly close ijson coroutines once we are done with them, instead of leaving the garbage collector to close them. (#12875)
• Improve URL previews by not including the content of media tags in the generated description. (#12887)

[nebulon]

[1.7.24]

• Update Element to 1.10.14
• Full changelog
• Make Lao translation available (#22358). Fixes #22327.
• Configure custom home.html via .well-known/matrix/client["io.element.embedded_pages"]["home_url"] for all your element-web/desktop users (#7790). Contributed by @johannes-krude.
• Live location sharing - open location in OpenStreetMap (#8695). Contributed by @kerryarchibald.
• Show a dialog when Jitsi encounters an error (#8701). Fixes #22284.
• Add support for setting the avatar_url of widgets by integration managers. (#8550). Contributed by @Fox32.
• Add an option to ignore (block) a user when reporting their events (#8471).
• Add the option to disable hardware acceleration (#8655). Contributed by @novocaine.
• Slightly better presentation of read receipts to screen reader users (#8662). Fixes #22293. Contributed by @pvagner.
• Add jump to related event context menu item (#6775). Fixes #19883.
• Add public room directory hook (#8626).

[girish]

[1.7.25]

• Update Element to 1.10.15
• Full changelog
• Fix missing element desktop preferences (#8798). Contributed by @t3chguy.

[girish]

[1.45.0]

• Update Synapse to 1.61.0
• Full changelog
• Add new media_retention options to the homeserver config for routinely cleaning up non-recently accessed media. (#12732, #12972, #12977)
• Experimental support for MSC3772: Push rule for mutually related events. (#12740, #12859)
• Update to the check_event_for_spam module callback: Deprecate the current callback signature, replace it with a new signature that is both less ambiguous (replacing booleans with explicit allow/block) and more powerful (ability to return explicit error codes). (#12808)
• Add storage and module API methods to get monthly active users (and their corresponding appservices) within an optionally specified time range. (#12838, #12917)
• Support the new error code ORG.MATRIX.MSC3823.USER_ACCOUNT_SUSPENDED from MSC3823. (#12845, #12923)
• Add a configurable background job to delete stale devices. (#12855)
• Improve URL previews for pages with empty elements. (#12951)
• Allow updating a user's password using the admin API without logging out their devices. Contributed by @jcgruenhage. (#12952)

[girish]

[1.45.1]

• Add s3 storage provider module

[nebulon]

[1.45.2]

• Update Synapse to 1.61.1
• Full changelog
• Linkify GHSA commit

[nebulon]

[1.46.0]

• Update Synapse to 1.62.0
• Full changelog