Matrix (Synapse/Element) - Package Updates

[nebulon]

[1.65.0]

• Update Synapse to 1.82.0
• Full changelog
• Allow loading the /directory/room/{roomAlias} endpoint on workers. (#15333)
• Add some validation to instance_map configuration loading. (#15431)
• Allow loading the /capabilities endpoint on workers. (#15436)
• Delete server-side backup keys when deactivating an account. (#15181)
• Fix and document untold assumption that on_logged_out module hooks will be called before the deletion of pushers. (#15410)
• Improve robustness when handling a perspective key response by deduplicating received server keys. (#15423)
• Synapse now correctly fails to start if the config option app_service_config_files is not a list. (#15425)
• Disable loading RefreshTokenServlet (/_matrix/client/(r0|v3|unstable)/refresh) on workers. (#15428)

[nebulon]

[1.66.0]

• Update Synapse to 1.83.0
• Full changelog
• Experimental support to recursively provide relations per MSC3981. (#15315)
• Experimental support for MSC3970: Scope transaction IDs to devices. (#15318)
• Add an admin API endpoint to support per-user feature flags. (#15344)
• Add a module API to send an HTTP push notification. (#15387)
• Add an admin API endpoint to query the largest rooms by disk space used in the database. (#15482)
• Disable push rule evaluation for rooms excluded from sync. (#15361)
• Fix a long-standing bug where cached server key results which were directly fetched would not be properly re-used. (#15417)
• Fix a bug introduced in Synapse 1.73.0 where some experimental push rules were returned by default. (#15494)

[nebulon]

[1.8.31]

• Update Element to 1.11.31
• Full changelog
• Improve Content-Security-Policy (#25210).
• Add UIFeature.locationSharing to hide location sharing (#10727).
• Memoize field validation results (#10714).
• Commands for plain text editor (#10567). Contributed by @alunturner.
• Allow 16 lines of text in the rich text editors (#10670). Contributed by @alunturner.
• Bail out of RoomSettingsDialog when room is not found (#10662). Contributed by @kerryarchibald.
• Element-R: Populate device list for right-panel (#10671). Contributed by @florianduros.
• Make existing and new issue URLs configurable (#10710). Fixes #24424.
• Fix usages of ARIA tabpanel (#10628). Fixes #25016.
• Element-R: Starting a DMs with a user (#10673). Contributed by @florianduros.
• ARIA Accessibility improvements (#10675).
• ARIA Accessibility improvements (#10674).
• Add arrow key controls to emoji and reaction pickers (#10637). Fixes #17189.
• Translate credits in help about section (#10676).
• Fix: reveal images when image previews are disabled (#10781). Fixes #25271. Contributed by @kerryarchibald.
• Fix autocomplete not resetting properly on message send (#10741). Fixes #25170.
• Fix start_sso not working with guests disabled (#10720). Fixes #16624.
• Fix soft crash with Element call widgets (#10684).
• Send correct receipt when marking a room as read (#10730). Fixes #25207.
• Offload some more waveform processing onto a worker (#9223). Fixes #19756.
• Consolidate login errors (#10722). Fixes #17520.
• Fix all rooms search generating permalinks to wrong room id (#10625). Fixes #25115.
• Posthog properly handle Analytics ID changing from under us (#10702). Fixes #25187.
• Fix Clock being read as an absolute time rather than duration (#10706). Fixes #22582.
• Properly translate errors in ChangePassword.tsx so they show up translated to the user but not in our logs (#10615). Fixes #9597. Contributed by @MadLittleMods.
• Honour feature toggles in guest mode (#10651). Fixes #24513. Contributed by @andybalaam.
• Fix default content in devtools event sender (#10699). Contributed by @tulir.
• Fix a crash when a call ends while you're in it (#10681). Fixes #25153.
• Fix lack of screen reader indication when triggering auto complete (#10664). Fixes #11011.
• Fix typing tile duplicating users (#10678). Fixes #25165.
• Fix wrong room topic tooltip position (#10667). Fixes #25158.
• Fix create subspace dialog not working (#10652). Fixes #24882.

[nebulon]

[1.67.0]

• Update Synapse to 1.84.0
• Full changelog
• Fix a bug introduced in Synapse 1.84.0rc1 where errors during startup were not reported correctly on Python < 3.10. (#15599)
• Add an option to prevent media downloads from configured domains. (#15197)
• Add forget_rooms_on_leave config option to automatically forget rooms when users leave them or are removed from them. (#15224)
• Add redis TLS configuration options. (#15312)
• Add a config option to delay push notifications by a random amount, to discourage time-based profiling. (#15516)
• Stabilize support for MSC2659: application service ping endpoint. Contributed by Tulir @ Beeper. (#15528)
• Implement MSC4009 to expand the supported characters in Matrix IDs. (#15536)
• Advertise support for Matrix 1.6 on /_matrix/client/versions. (#15559)
• Print full error and stack-trace of any exception that occurs during startup/initialization. (#15569)
• Don't fail on federation over TOR where SRV queries are not supported. Contributed by Zdzichu. (#15523)
• Experimental support for MSC4010 which rejects setting the "m.push_rules" via account data. (#15554, #15555)
• Fix a long-standing bug where an invalid membership event could cause an internal server error. (#15564)
• Require at least poetry-core v1.1.0. (#15566, #15571)

[girish]

[1.67.1]

• Update Synapse to 1.84.1
• Full changelog
• Fix a bug introduced in Synapse v1.84.0 where workers do not start up when no instance_map was provided

[nebulon]

[1.8.32]

• Update Element to 1.11.32
• Full changelog
• Redirect to the SSO page if sso_redirect_options.on_welcome_page is enabled and the URL hash is empty (#25495). Contributed by @dhenneke.
• vector/index.html: Allow fetching blob urls (#25336). Contributed by @SuperKenVery.
• When joining room in sub-space join the parents too (#11011).
• Include thread replies in message previews (#10631). Fixes #23920.
• Use semantic headings in space preferences (#11021). Contributed by @kerryarchibald.
• Use semantic headings in user settings - Ignored users (#11006). Contributed by @kerryarchibald.
• Use semantic headings in user settings - profile (#10973). Fixes #25461. Contributed by @kerryarchibald.
• Use semantic headings in user settings - account (#10972). Contributed by @kerryarchibald.
• Support Insert from iPhone or iPad in Safari (#10851). Fixes #25327. Contributed by @SuperKenVery.
• Specify supportedStages for User Interactive Auth (#10975). Fixes #19605.
• Pass device id to widgets (#10209). Contributed by @Fox32.
• Use semantic headings in user settings - discovery (#10838). Contributed by @kerryarchibald.
• Use semantic headings in user settings - Notifications (#10948). Contributed by @kerryarchibald.
• Use semantic headings in user settings - spellcheck and language (#10959). Contributed by @kerryarchibald.
• Use semantic headings in user settings Appearance (#10827). Contributed by @kerryarchibald.
• Use semantic heading in user settings Sidebar & Voip (#10782). Contributed by @kerryarchibald.
• Use semantic headings in user settings Security (#10774). Contributed by @kerryarchibald.
• Use semantic headings in user settings - integrations and account deletion (#10837). Fixes #25378. Contributed by @kerryarchibald.
• Use semantic headings in user settings Preferences (#10794). Contributed by @kerryarchibald.
• Use semantic headings in user settings Keyboard (#10793). Contributed by @kerryarchibald.
• RTE plain text mentions as pills (#10852). Contributed by @alunturner.
• Allow welcome.html logo to be replaced by config (#25339). Fixes #8636.
• Use semantic headings in user settings Labs (#10773). Contributed by @kerryarchibald.
• Use semantic list elements for menu lists and tab lists (#10902). Fixes #24928.
• Fix aria-required-children axe violation (#10900). Fixes #25342.
• Enable pagination for overlay timelines (#10757). Fixes vector-im/voip-internal#107.
• Add tooltip to disabled invite button due to lack of permissions (#10869). Fixes #9824.
• Respect configured auth_header_logo_url for default Welcome page (#10870).
• Specify lazy loading for avatars (#10866). Fixes #1983.
• Room and user mentions for plain text editor (#10665). Contributed by @alunturner.
• Add audible notifcation on broadcast error (#10654). Fixes #25132.
• Fall back from server generated thumbnail to original image (#10853).
• Use semantically correct elements for room sublist context menu (#10831). Fixes vector-im/customer-retainer#46.
• Avoid calling prepareToEncrypt onKeyDown (#10828).
• Allows search to recognize full room links (#8275). Contributed by @bolu-tife.
• "Show rooms with unread messages first" should not be on by default for new users (#10820). Fixes #25304. Contributed by @kerryarchibald.
• Fix emitter handler leak in ThreadView (#10803).
• Add better error for email invites without identity server (#10739). Fixes #16893.
• Move reaction message previews out of labs (#10601). Fixes #25083.
• Sort muted rooms to the bottom of their section of the room list (#10592). Fixes #25131. Contributed by @kerryarchibald.
• Use semantic headings in user settings Help & About (#10752). Contributed by @kerryarchibald.
• use ExternalLink components for external links (#10758). Contributed by @kerryarchibald.
• Use semantic headings in space settings (#10751). Contributed by @kerryarchibald.
• Use semantic headings for room settings content (#10734). Contributed by @kerryarchibald.

[girish]

[1.68.0]

• Update Synapse to 1.85.0
• Full changelog
• GHSA-26c5-ppr8-f33p / CVE-2023-32682 — Low Severity
• GHSA-98px-6486-j7qc / CVE-2023-32683 — Low Severity
• Fix a performance issue introduced in Synapse v1.83.0 which meant that purging rooms was very slow and database-intensive. (#15693)
• Improve performance of backfill requests by performing backfill of previously failed requests in the background. (#15585)

[girish]

[1.68.1]

• Update Synapse to 1.85.1
• Full changelog
• Fix bug in schema delta that broke upgrades for some deployments. Introduced in v1.85.0. (#15738, #15739)

[girish]

[1.68.2]

• Update Synapse to 1.85.2
• Full changelog
• Fix regression where using TLS for HTTP replication between workers did not work. Introduced in v1.85.0. (#15746)

[girish]

[1.8.33]

• Update Element to 1.11.33
• Full changelog
• Bump matrix-react-sdk to v3.73.1 for matrix-js-sdk v26.0.1. Fixes #25526.

[nebulon]

[1.8.34]

• Update Element to 1.11.34
• Full changelog
• OIDC: add delegatedauthentication to validated server config (#11053). Contributed by @kerryarchibald.
• Allow image pasting in plain mode in RTE (#11056). Contributed by @alunturner.
• Show room options menu if "UIComponent.roomOptionsMenu" is enabled (#10365). Contributed by @maheichyk.
• Allow image pasting in rich text mode in RTE (#11049). Contributed by @alunturner.
• Update voice broadcast redaction to use MSC3912 with_rel_type instead of with_relations (#11014). Fixes #25471.
• Add config to skip widget_build_url for DM rooms (#11044). Fixes vector-im/customer-retainer#74.
• Inhibit interactions on forward dialog message previews (#11025). Fixes #23459.
• Removed DecryptionFailureBar.tsx (#11027). Fixes vector-im/element-meta#1358. Contributed by @florianduros.
• Fix translucent TextualEvent on search results panel (#10810). Fixes #25292. Contributed by @luixxiul.
• Matrix matrix scheme permalink constructor not stripping query params (#11060). Fixes #25535.
• Fix: "manually verify by text" does nothing (#11059). Fixes #25375. Contributed by @kerryarchibald.
• Make group calls respect the ICE fallback setting (#11047). Fixes vector-im/voip-internal#65.
• Align list items on the tooltip to the start (#11041). Fixes #25355. Contributed by @luixxiul.
• Clear thread panel event permalink when changing rooms (#11024). Fixes #25484.
• Fix spinner placement on pinned widgets being reloaded (#10970). Fixes #25431. Contributed by @luixxiul.

[nebulon]

[1.69.0]

• Update Synapse to 1.86.0
• Full changelog
• Fix an error when having workers of different versions running. (#15774)
• Stable support for MSC3882 to allow an existing device/session to generate a login token for use on a new device/session. (#15388)
• Support resolving a room's canonical alias via the module API. (#15450)
• Enable support for MSC3952: intentional mentions. (#15520)
• Experimental MSC3861 support: delegate auth to an OIDC provider. (#15582)
• Add Synapse version deploy annotations to Grafana dashboard which enables easy correlation between behavior changes witnessed in a graph to a certain Synapse version and nail down regressions. (#15674)
• Add a catch-all * to the supported relation types when redacting an event and its related events. This is an update to MSC3912 implementation. (#15705)
• Speed up /messages by backfilling in the background when there are no backward extremities where we are directly paginating. (#15710)
• Expose a metric reporting the database background update status. (#15740)
• Correctly clear caches when we delete a room. (#15609)
• Check permissions for enabling encryption earlier during room creation to avoid creating broken rooms. (#15695)

[girish]

[1.8.35]

• Update Element to 1.11.35
• Full changelog
• Don't setup keys on login when encryption is force disabled (#11125). Contributed by @kerryarchibald.
• OIDC: attempt dynamic client registration (#11074). Fixes #25468 and #25467. Contributed by @kerryarchibald.
• OIDC: Check static client registration and add login flow (#11088). Fixes #25467. Contributed by @kerryarchibald.
• Improve message body output from plain text editor (#11124). Contributed by @alunturner.
• Disable encryption toggle in room settings when force disabled (#11122). Contributed by @kerryarchibald.
• Add .well-known config option to force disable encryption on room creation (#11120). Contributed by @kerryarchibald.
• Handle permalinks in room topic (#11115). Fixes #23395.
• Add at room avatar for RTE (#11106). Contributed by @alunturner.
• Remove new room breadcrumbs (#11104).

[girish]

Synapse [1.70.0]

• Update Synapse to 1.87.0
• Full changelog
• Improve /messages response time by avoiding backfill when we already have messages to return. (#15737)
• Add spam checker module API for logins. (#15838)
• Fix a long-standing bug where media files were served in an unsafe manner. Contributed by @joshqou. (#15680)
• Avoid invalidating a cache that was just prefilled. (#15758)
• Fix requesting multiple keys at once over federation, related to MSC3983. (#15770)
• Fix joining rooms through aliases where the alias server isn't a real homeserver. Contributed by @tulir @ Beeper. (#15776)

[girish]

[1.70.1]

• Add workaround for broken thumbnailing
• Update s3 storage provider

[nebulon]

[1.8.36]

• Update Element to 1.11.36
• Full changelog
• Fixes for CVE-2023-37259 / GHSA-c9vx-2g7w-rp65
• Deprecate customisations in favour of Module API (#25736). Fixes #25733.
• OIDC: store initial screen in session storage (#25688). Fixes #25656. Contributed by @kerryarchibald.
• Allow default_server_config as a fallback config (#25682). Contributed by @ShadowRZ.
• OIDC: remove auth params from url after login attempt (#25664). Contributed by @kerryarchibald.
• feat(faq): remove keyboard shortcuts button (#9342). Fixes #22625. Contributed by @gefgu.
• GYU: Update banner (#11211). Fixes #25530. Contributed by @justjanne.
• Linkify mxc:// URLs as links to your media repo (#11213). Fixes #6942.
• OIDC: Log in (#11199). Fixes #25657. Contributed by @kerryarchibald.
• Handle all permitted url schemes in linkify (#11215). Fixes #4457 and #8720.
• Autoapprove Element Call oidc requests (#11209). Contributed by @toger5.
• Allow creating knock rooms (#11182). Contributed by @charlynguyen.
• Expose and pre-populate thread ID in devtools dialog (#10953).
• Hide URL preview if it will be empty (#9029).
• Change wording from avatar to profile picture (#7015). Fixes vector-im/element-meta#1331. Contributed by @aaronraimist.
• Quick and dirty devtool to explore state history (#11197).
• Consider more user inputs when calculating zxcvbn score (#11180).
• GYU: Account Notification Settings (#11008). Fixes #24567. Contributed by @justjanne.
• Compound Typography pass (#11103). Fixes #25548.
• OIDC: navigate to authorization endpoint (#11096). Fixes #25574. Contributed by @kerryarchibald.
• Fix read receipt sending behaviour around thread roots (#3600).
• Fix missing metaspace notification badges (#11269). Fixes #25679.
• Make checkboxes less rounded (#11224). Contributed by @andybalaam.
• GYU: Fix issues with audible keywords without activated mentions (#11218). Contributed by @justjanne.
• PosthogAnalytics unwatch settings on logout (#11207). Fixes #25703.
• Avoid trying to set room account data for pinned events as guest (#11216). Fixes #6300.
• GYU: Disable sound for DMs checkbox when DM notifications are disabled (#11210). Contributed by @justjanne.
• force to allow calls without video and audio in embedded mode (#11131). Contributed by @EnricoSchw.
• Fix room tile text clipping (#11196). Fixes #25718.
• Handle newlines in user pills (#11166). Fixes #10994.
• Limit width of user menu in space panel (#11192). Fixes #22627.
• Add isLocation to ComposerEvent analytics events (#11187). Contributed by @andybalaam.
• Fix: hide unsupported login elements (#11185). Fixes #25711. Contributed by @kerryarchibald.
• Scope smaller font size to user info panel (#11178). Fixes #25683.
• Apply i18n to strings in the html export (#11176).
• Inhibit url previews on MXIDs containing slashes same as those without (#11160).
• Make event info size consistent with state events (#11181).
• Fix markdown content spacing (#11177). Fixes #25685.
• Fix font-family definition for emojis (#11170). Fixes #25686.
• Fix spurious error sending receipt in thread errors (#11157).
• Consider the empty push rule actions array equiv to deprecated dont_notify (#11155). Fixes #25674.
• Only trap escape key for cancel reply if there is a reply (#11140). Fixes #25640.
• Update linkify to 4.1.1 (#11132). Fixes #23806.

[nebulon]

[1.71.0]

• Update Synapse to 1.88.0
• Full changelog
• Add not_user_type param to the list accounts admin API. (#15844)
• Pin pydantic to ^=1.7.4 to avoid backwards-incompatible API changes from the 2.0.0 release.
• Contributed by @PaarthShah. (#15862)
• Correctly resize thumbnails with pillow version >=10. (#15876)

[nebulon]

[1.72.0]

• Update Synapse to 1.89.0
• Full changelog
• Add Unix Socket support for HTTP Replication Listeners. Document and provide usage instructions for utilizing Unix sockets in Synapse. Contributed by Jason Little. (#15708, #15924)
• Allow + in Matrix IDs, per MSC4009. (#15911)
• Support room version 11 from MSC3820. (#15912)
• Allow configuring the set of workers to proxy outbound federation traffic through via outbound_federation_restricted_to. (#15913, #15969)
• Implement MSC3814, dehydrated devices v2/shrivelled sessions and move MSC2697 behind a config flag. Contributed by Nico from Famedly, H-Shay and poljar. (#15929)
• Fix a long-standing bug where remote invites weren't correctly pushed. (#15820)
• Fix background schema updates failing over a large upgrade gap. (#15887)
• Fix a bug introduced in 1.86.0 where Synapse starting with an empty experimental_features configuration setting. (#15925)
• Fixed deploy annotations in the provided Grafana dashboard config, so that it shows for any homeserver and not just matrix.org. Contributed by @wrjlewis. (#15957)
• Ensure a long state res does not starve CPU by occasionally yielding to the reactor. (#15960)
• Properly handle redactions of creation events. (#15973)
• Fix a bug where resyncing stale device lists could block responding to federation transactions, and thus delay receiving new data from the remote server. (#15975)

[nebulon]

[1.8.37]

• Update Element to 1.11.37
• Full changelog
• Do not show "Forget room" button in Room View header for guest users (#10898). Contributed by @spantaleev.
• Switch to updating presence via /sync calls instead of PUT /presence (#11223). Fixes #20809 #13877 and #4813.
• Fix blockquote colour contrast (#11299). Fixes matrix-org/element-web-rageshakes#21800.
• Don't hide room header buttons in video rooms and rooms with a call (#9712). Fixes #23900.
• OIDC: Persist details in session storage, create store (#11302). Fixes #25710. Contributed by @kerryarchibald.
• Allow setting room join rule to knock (#11248). Contributed by @charlynguyen.
• Retry joins on 524 (Cloudflare timeout) also (#11296). Fixes #8776.
• Make sure users returned by the homeserver search API are displayed. Don't silently drop any. (#9556). Fixes #24422. Contributed by @maxmalek.
• Offer to unban user during invite if inviter has sufficient permissions (#11256). Fixes #3222.
• Split join and goto slash commands, the latter shouldn't auto_join (#11259). Fixes #10128.
• Integration work for rich text editor 2.3.1 (#11172). Contributed by @alunturner.
• Compound color pass (#11079). Fixes vector-im/element-internal#450 and #25547.
• Warn when demoting self via /op and /deop slash commands (#11214). Fixes #13726.

[nebulon]

[1.8.38]

• Update Element to 1.11.38
• Full changelog
• Package release builds of element-web in package.element.io debs (#25198).
• Revert to using the /presence API for presence (#11366)