Matrix (Synapse/Element) - Package Updates

[nebulon]

[1.8.32]

• Update Element to 1.11.32
• Full changelog
• Redirect to the SSO page if sso_redirect_options.on_welcome_page is enabled and the URL hash is empty (#25495). Contributed by @dhenneke.
• vector/index.html: Allow fetching blob urls (#25336). Contributed by @SuperKenVery.
• When joining room in sub-space join the parents too (#11011).
• Include thread replies in message previews (#10631). Fixes #23920.
• Use semantic headings in space preferences (#11021). Contributed by @kerryarchibald.
• Use semantic headings in user settings - Ignored users (#11006). Contributed by @kerryarchibald.
• Use semantic headings in user settings - profile (#10973). Fixes #25461. Contributed by @kerryarchibald.
• Use semantic headings in user settings - account (#10972). Contributed by @kerryarchibald.
• Support Insert from iPhone or iPad in Safari (#10851). Fixes #25327. Contributed by @SuperKenVery.
• Specify supportedStages for User Interactive Auth (#10975). Fixes #19605.
• Pass device id to widgets (#10209). Contributed by @Fox32.
• Use semantic headings in user settings - discovery (#10838). Contributed by @kerryarchibald.
• Use semantic headings in user settings - Notifications (#10948). Contributed by @kerryarchibald.
• Use semantic headings in user settings - spellcheck and language (#10959). Contributed by @kerryarchibald.
• Use semantic headings in user settings Appearance (#10827). Contributed by @kerryarchibald.
• Use semantic heading in user settings Sidebar & Voip (#10782). Contributed by @kerryarchibald.
• Use semantic headings in user settings Security (#10774). Contributed by @kerryarchibald.
• Use semantic headings in user settings - integrations and account deletion (#10837). Fixes #25378. Contributed by @kerryarchibald.
• Use semantic headings in user settings Preferences (#10794). Contributed by @kerryarchibald.
• Use semantic headings in user settings Keyboard (#10793). Contributed by @kerryarchibald.
• RTE plain text mentions as pills (#10852). Contributed by @alunturner.
• Allow welcome.html logo to be replaced by config (#25339). Fixes #8636.
• Use semantic headings in user settings Labs (#10773). Contributed by @kerryarchibald.
• Use semantic list elements for menu lists and tab lists (#10902). Fixes #24928.
• Fix aria-required-children axe violation (#10900). Fixes #25342.
• Enable pagination for overlay timelines (#10757). Fixes vector-im/voip-internal#107.
• Add tooltip to disabled invite button due to lack of permissions (#10869). Fixes #9824.
• Respect configured auth_header_logo_url for default Welcome page (#10870).
• Specify lazy loading for avatars (#10866). Fixes #1983.
• Room and user mentions for plain text editor (#10665). Contributed by @alunturner.
• Add audible notifcation on broadcast error (#10654). Fixes #25132.
• Fall back from server generated thumbnail to original image (#10853).
• Use semantically correct elements for room sublist context menu (#10831). Fixes vector-im/customer-retainer#46.
• Avoid calling prepareToEncrypt onKeyDown (#10828).
• Allows search to recognize full room links (#8275). Contributed by @bolu-tife.
• "Show rooms with unread messages first" should not be on by default for new users (#10820). Fixes #25304. Contributed by @kerryarchibald.
• Fix emitter handler leak in ThreadView (#10803).
• Add better error for email invites without identity server (#10739). Fixes #16893.
• Move reaction message previews out of labs (#10601). Fixes #25083.
• Sort muted rooms to the bottom of their section of the room list (#10592). Fixes #25131. Contributed by @kerryarchibald.
• Use semantic headings in user settings Help & About (#10752). Contributed by @kerryarchibald.
• use ExternalLink components for external links (#10758). Contributed by @kerryarchibald.
• Use semantic headings in space settings (#10751). Contributed by @kerryarchibald.
• Use semantic headings for room settings content (#10734). Contributed by @kerryarchibald.

[girish]

[1.68.0]

• Update Synapse to 1.85.0
• Full changelog
• GHSA-26c5-ppr8-f33p / CVE-2023-32682 — Low Severity
• GHSA-98px-6486-j7qc / CVE-2023-32683 — Low Severity
• Fix a performance issue introduced in Synapse v1.83.0 which meant that purging rooms was very slow and database-intensive. (#15693)
• Improve performance of backfill requests by performing backfill of previously failed requests in the background. (#15585)

[girish]

[1.68.1]

• Update Synapse to 1.85.1
• Full changelog
• Fix bug in schema delta that broke upgrades for some deployments. Introduced in v1.85.0. (#15738, #15739)

[girish]

[1.68.2]

• Update Synapse to 1.85.2
• Full changelog
• Fix regression where using TLS for HTTP replication between workers did not work. Introduced in v1.85.0. (#15746)

[girish]

[1.8.33]

• Update Element to 1.11.33
• Full changelog
• Bump matrix-react-sdk to v3.73.1 for matrix-js-sdk v26.0.1. Fixes #25526.

[nebulon]

[1.8.34]

• Update Element to 1.11.34
• Full changelog
• OIDC: add delegatedauthentication to validated server config (#11053). Contributed by @kerryarchibald.
• Allow image pasting in plain mode in RTE (#11056). Contributed by @alunturner.
• Show room options menu if "UIComponent.roomOptionsMenu" is enabled (#10365). Contributed by @maheichyk.
• Allow image pasting in rich text mode in RTE (#11049). Contributed by @alunturner.
• Update voice broadcast redaction to use MSC3912 with_rel_type instead of with_relations (#11014). Fixes #25471.
• Add config to skip widget_build_url for DM rooms (#11044). Fixes vector-im/customer-retainer#74.
• Inhibit interactions on forward dialog message previews (#11025). Fixes #23459.
• Removed DecryptionFailureBar.tsx (#11027). Fixes vector-im/element-meta#1358. Contributed by @florianduros.
• Fix translucent TextualEvent on search results panel (#10810). Fixes #25292. Contributed by @luixxiul.
• Matrix matrix scheme permalink constructor not stripping query params (#11060). Fixes #25535.
• Fix: "manually verify by text" does nothing (#11059). Fixes #25375. Contributed by @kerryarchibald.
• Make group calls respect the ICE fallback setting (#11047). Fixes vector-im/voip-internal#65.
• Align list items on the tooltip to the start (#11041). Fixes #25355. Contributed by @luixxiul.
• Clear thread panel event permalink when changing rooms (#11024). Fixes #25484.
• Fix spinner placement on pinned widgets being reloaded (#10970). Fixes #25431. Contributed by @luixxiul.

[nebulon]

[1.69.0]

• Update Synapse to 1.86.0
• Full changelog
• Fix an error when having workers of different versions running. (#15774)
• Stable support for MSC3882 to allow an existing device/session to generate a login token for use on a new device/session. (#15388)
• Support resolving a room's canonical alias via the module API. (#15450)
• Enable support for MSC3952: intentional mentions. (#15520)
• Experimental MSC3861 support: delegate auth to an OIDC provider. (#15582)
• Add Synapse version deploy annotations to Grafana dashboard which enables easy correlation between behavior changes witnessed in a graph to a certain Synapse version and nail down regressions. (#15674)
• Add a catch-all * to the supported relation types when redacting an event and its related events. This is an update to MSC3912 implementation. (#15705)
• Speed up /messages by backfilling in the background when there are no backward extremities where we are directly paginating. (#15710)
• Expose a metric reporting the database background update status. (#15740)
• Correctly clear caches when we delete a room. (#15609)
• Check permissions for enabling encryption earlier during room creation to avoid creating broken rooms. (#15695)

[girish]

[1.8.35]

• Update Element to 1.11.35
• Full changelog
• Don't setup keys on login when encryption is force disabled (#11125). Contributed by @kerryarchibald.
• OIDC: attempt dynamic client registration (#11074). Fixes #25468 and #25467. Contributed by @kerryarchibald.
• OIDC: Check static client registration and add login flow (#11088). Fixes #25467. Contributed by @kerryarchibald.
• Improve message body output from plain text editor (#11124). Contributed by @alunturner.
• Disable encryption toggle in room settings when force disabled (#11122). Contributed by @kerryarchibald.
• Add .well-known config option to force disable encryption on room creation (#11120). Contributed by @kerryarchibald.
• Handle permalinks in room topic (#11115). Fixes #23395.
• Add at room avatar for RTE (#11106). Contributed by @alunturner.
• Remove new room breadcrumbs (#11104).

[girish]

Synapse [1.70.0]

• Update Synapse to 1.87.0
• Full changelog
• Improve /messages response time by avoiding backfill when we already have messages to return. (#15737)
• Add spam checker module API for logins. (#15838)
• Fix a long-standing bug where media files were served in an unsafe manner. Contributed by @joshqou. (#15680)
• Avoid invalidating a cache that was just prefilled. (#15758)
• Fix requesting multiple keys at once over federation, related to MSC3983. (#15770)
• Fix joining rooms through aliases where the alias server isn't a real homeserver. Contributed by @tulir @ Beeper. (#15776)

[girish]

[1.70.1]

• Add workaround for broken thumbnailing
• Update s3 storage provider

[nebulon]

[1.8.36]

• Update Element to 1.11.36
• Full changelog
• Fixes for CVE-2023-37259 / GHSA-c9vx-2g7w-rp65
• Deprecate customisations in favour of Module API (#25736). Fixes #25733.
• OIDC: store initial screen in session storage (#25688). Fixes #25656. Contributed by @kerryarchibald.
• Allow default_server_config as a fallback config (#25682). Contributed by @ShadowRZ.
• OIDC: remove auth params from url after login attempt (#25664). Contributed by @kerryarchibald.
• feat(faq): remove keyboard shortcuts button (#9342). Fixes #22625. Contributed by @gefgu.
• GYU: Update banner (#11211). Fixes #25530. Contributed by @justjanne.
• Linkify mxc:// URLs as links to your media repo (#11213). Fixes #6942.
• OIDC: Log in (#11199). Fixes #25657. Contributed by @kerryarchibald.
• Handle all permitted url schemes in linkify (#11215). Fixes #4457 and #8720.
• Autoapprove Element Call oidc requests (#11209). Contributed by @toger5.
• Allow creating knock rooms (#11182). Contributed by @charlynguyen.
• Expose and pre-populate thread ID in devtools dialog (#10953).
• Hide URL preview if it will be empty (#9029).
• Change wording from avatar to profile picture (#7015). Fixes vector-im/element-meta#1331. Contributed by @aaronraimist.
• Quick and dirty devtool to explore state history (#11197).
• Consider more user inputs when calculating zxcvbn score (#11180).
• GYU: Account Notification Settings (#11008). Fixes #24567. Contributed by @justjanne.
• Compound Typography pass (#11103). Fixes #25548.
• OIDC: navigate to authorization endpoint (#11096). Fixes #25574. Contributed by @kerryarchibald.
• Fix read receipt sending behaviour around thread roots (#3600).
• Fix missing metaspace notification badges (#11269). Fixes #25679.
• Make checkboxes less rounded (#11224). Contributed by @andybalaam.
• GYU: Fix issues with audible keywords without activated mentions (#11218). Contributed by @justjanne.
• PosthogAnalytics unwatch settings on logout (#11207). Fixes #25703.
• Avoid trying to set room account data for pinned events as guest (#11216). Fixes #6300.
• GYU: Disable sound for DMs checkbox when DM notifications are disabled (#11210). Contributed by @justjanne.
• force to allow calls without video and audio in embedded mode (#11131). Contributed by @EnricoSchw.
• Fix room tile text clipping (#11196). Fixes #25718.
• Handle newlines in user pills (#11166). Fixes #10994.
• Limit width of user menu in space panel (#11192). Fixes #22627.
• Add isLocation to ComposerEvent analytics events (#11187). Contributed by @andybalaam.
• Fix: hide unsupported login elements (#11185). Fixes #25711. Contributed by @kerryarchibald.
• Scope smaller font size to user info panel (#11178). Fixes #25683.
• Apply i18n to strings in the html export (#11176).
• Inhibit url previews on MXIDs containing slashes same as those without (#11160).
• Make event info size consistent with state events (#11181).
• Fix markdown content spacing (#11177). Fixes #25685.
• Fix font-family definition for emojis (#11170). Fixes #25686.
• Fix spurious error sending receipt in thread errors (#11157).
• Consider the empty push rule actions array equiv to deprecated dont_notify (#11155). Fixes #25674.
• Only trap escape key for cancel reply if there is a reply (#11140). Fixes #25640.
• Update linkify to 4.1.1 (#11132). Fixes #23806.

[nebulon]

[1.71.0]

• Update Synapse to 1.88.0
• Full changelog
• Add not_user_type param to the list accounts admin API. (#15844)
• Pin pydantic to ^=1.7.4 to avoid backwards-incompatible API changes from the 2.0.0 release.
• Contributed by @PaarthShah. (#15862)
• Correctly resize thumbnails with pillow version >=10. (#15876)

[nebulon]

[1.72.0]

• Update Synapse to 1.89.0
• Full changelog
• Add Unix Socket support for HTTP Replication Listeners. Document and provide usage instructions for utilizing Unix sockets in Synapse. Contributed by Jason Little. (#15708, #15924)
• Allow + in Matrix IDs, per MSC4009. (#15911)
• Support room version 11 from MSC3820. (#15912)
• Allow configuring the set of workers to proxy outbound federation traffic through via outbound_federation_restricted_to. (#15913, #15969)
• Implement MSC3814, dehydrated devices v2/shrivelled sessions and move MSC2697 behind a config flag. Contributed by Nico from Famedly, H-Shay and poljar. (#15929)
• Fix a long-standing bug where remote invites weren't correctly pushed. (#15820)
• Fix background schema updates failing over a large upgrade gap. (#15887)
• Fix a bug introduced in 1.86.0 where Synapse starting with an empty experimental_features configuration setting. (#15925)
• Fixed deploy annotations in the provided Grafana dashboard config, so that it shows for any homeserver and not just matrix.org. Contributed by @wrjlewis. (#15957)
• Ensure a long state res does not starve CPU by occasionally yielding to the reactor. (#15960)
• Properly handle redactions of creation events. (#15973)
• Fix a bug where resyncing stale device lists could block responding to federation transactions, and thus delay receiving new data from the remote server. (#15975)

[nebulon]

[1.8.37]

• Update Element to 1.11.37
• Full changelog
• Do not show "Forget room" button in Room View header for guest users (#10898). Contributed by @spantaleev.
• Switch to updating presence via /sync calls instead of PUT /presence (#11223). Fixes #20809 #13877 and #4813.
• Fix blockquote colour contrast (#11299). Fixes matrix-org/element-web-rageshakes#21800.
• Don't hide room header buttons in video rooms and rooms with a call (#9712). Fixes #23900.
• OIDC: Persist details in session storage, create store (#11302). Fixes #25710. Contributed by @kerryarchibald.
• Allow setting room join rule to knock (#11248). Contributed by @charlynguyen.
• Retry joins on 524 (Cloudflare timeout) also (#11296). Fixes #8776.
• Make sure users returned by the homeserver search API are displayed. Don't silently drop any. (#9556). Fixes #24422. Contributed by @maxmalek.
• Offer to unban user during invite if inviter has sufficient permissions (#11256). Fixes #3222.
• Split join and goto slash commands, the latter shouldn't auto_join (#11259). Fixes #10128.
• Integration work for rich text editor 2.3.1 (#11172). Contributed by @alunturner.
• Compound color pass (#11079). Fixes vector-im/element-internal#450 and #25547.
• Warn when demoting self via /op and /deop slash commands (#11214). Fixes #13726.

[nebulon]

[1.8.38]

• Update Element to 1.11.38
• Full changelog
• Package release builds of element-web in package.element.io debs (#25198).
• Revert to using the /presence API for presence (#11366)

[nebulon]

[1.73.0]

• Update Synapse to 1.90.0
• Full changelog
• Scope transaction IDs to devices (implement MSC3970). (#15629)
• Remove old rows from the cache_invalidation_stream_by_instance table automatically (this table is unused in SQLite). (#15868)
• Fix a long-standing bug where purging history and paginating simultaneously could lead to database corruption when using workers. (#15791)
• Fix a long-standing bug where profile endpoint returned a 404 when the user's display name was empty. (#16012)
• Fix a long-standing bug where the synapse_port_db failed to configure sequences for application services and partial stated rooms. (#16043)
• Fix long-standing bug with deletion in dehydrated devices v2. (#16046)

[nebulon]

[1.8.39]

• Update Element to 1.11.39
• Full changelog
• Deprecate camelCase config options (#25800).
• Deprecate customisations in favour of Module API (#25736). Fixes #25733.
• Update labs.md for knock rooms (#25923). Contributed by @charlynguyen.
• Package release builds of element-web in package.element.io debs (#25198).
• Allow knocking rooms (#11353). Contributed by @charlynguyen.
• Support adding space-restricted joins on rooms not members of those spaces (#9017). Fixes #19213.
• Clear requiresClient and show pop-out if widget-api fails to ready (#11321). Fixes vector-im/customer-retainer#73.
• Bump pagination sizes due to hidden events (#11342).
• Remove display of key backup signatures from backup settings (#11333).
• Use PassphraseFields in ExportE2eKeysDialog to enforce minimum passphrase complexity (#11222). Fixes #9478.
• Fix "Export chat" not respecting configured time format in plain text mode (#10696). Fixes #23838. Contributed by @rashmitpankhania.
• Fix some missing 1-count pluralisations around event list summaries (#11371). Fixes #25925.
• Fix create subspace dialog not working for public space creation (#11367). Fixes #25916.
• Search for users on paste (#11304). Fixes #17523. Contributed by @peterscheu-aceart.
• Fix AppTile context menu not always showing up when it has options (#11358). Fixes #25914.
• Fix clicking on home all rooms space notification not working (#11337). Fixes #22844.
• Fix joining a suggested room switching space away (#11347). Fixes #25838.
• Fix home/all rooms context menu in space panel (#11350). Fixes #25896.
• Make keyboard handling in and out of autocomplete completions consistent (#11344). Fixes #25878.
• De-duplicate reactions by sender to account for faulty/malicious servers (#11340). Fixes #25872.
• Fix disable_3pid_login being ignored for the email field (#11335). Fixes #25863.
• Upgrade wysiwyg editor for ctrl+backspace windows fix (#11324). Fixes vector-im/verticals-internal#102.
• Unhide the view source event toggle - it works well enough (#11336). Fixes #25861.

[girish]

[1.74.0]

• Turn addon can be optionally enabled/disabled

[nebulon]

[1.8.40]

• Update Element to 1.11.40
• Full changelog
• Hide account deactivation for externally managed accounts (#11445). Fixes #26022. Contributed by @kerryarchibald.
• OIDC: Redirect to delegated auth provider when signing out (#11432). Fixes #26000. Contributed by @kerryarchibald.
• Disable 3pid fields in settings when m.3pid_changes capability is disabled (#11430). Fixes #25995. Contributed by @kerryarchibald.
• OIDC: disable multi session signout for OIDC-aware servers in session manager (#11431). Contributed by @kerryarchibald.
• Implement updated open dialog method of the Module API (#11395). Contributed by @dhenneke.
• Polish & delabs Exploring public spaces feature (#11423).
• Treat lists with a single empty item as plain text, not Markdown. (#6833). Fixes vector-im/element-meta#1265.
• Allow managing room knocks (#11404). Contributed by @charlynguyen.
• Pin the action buttons to the bottom of the scrollable dialogs (#11407). Contributed by @dhenneke.
• Support Matrix 1.1 (drop legacy r0 versions) (#9819).
• Fix path separator for Windows based systems (#25997).
• Fix instances of double translation and guard translation calls using typescript (#11443).
• Fix export type "Current timeline" to match its behaviour to its name (#11426). Fixes #25988.
• Fix Room Settings > Notifications file upload input being shown superfluously (#11415). Fixes #18392.
• Simplify registration with email validation (#11398). Fixes #25832 #23601 and #22297.
• correct home server URL (#11391). Fixes #25931. Contributed by @NSV1991.
• Include non-matching DMs in Spotlight recent conversations when the DM's userId is part of the search API results (#11374). Contributed by @mgcm.
• Fix useRoomMembers missing updates causing incorrect membership counts (#11392). Fixes #17096.
• Show error when searching public rooms fails (#11378).

[nebulon]

[1.75.1]

• Update Synapse to 1.91.1
• Full changelog
• Fix a performance regression introduced in Synapse 1.91.0 where event persistence would cause an excessive linear growth in CPU usage. (#16220)