Matrix (Synapse/Element) - Package Updates

[nebulon]

[1.9.19]

• Update Element to 1.11.61
• Full changelog
• Update @vector-im/compound-design-tokens in package.json (#12340).

[girish]

[1.90.0]

• Update Synapse to 1.103.0
• Full changelog
• Add a new List Accounts v3 Admin API with improved deactivated user filtering capabilities. (#16874)
• Include Retry-After header by default per MSC4041. Contributed by @clokep. (#16947)
• Fix joining remote rooms when a module uses the on_new_event callback. This callback may now pass partial state events instead of the full state for remote rooms. Introduced in v1.76.0. (#16973)
• Fix performance issue when joining very large rooms that can cause the server to lock up. Introduced in v1.100.0. Contributed by @ggogel. (#16968)

[nebulon]

[1.9.20]

• Update Element to 1.11.62
• Full changelog
• Change user permission by using a new apply button (#12346). Contributed by @florianduros.
• Mark as Unread (#12254). Contributed by @dbkr.
• Refine the colors of some more components (#12343). Contributed by @robintown.
• TAC: Order rooms by most recent after notification level (#12329). Contributed by @florianduros.
• Make EC widget theme reactive - Update widget url when the theme changes (#12295). Contributed by @toger5.
• Refine styles of menus, toasts, popovers, and modals (#12332). Contributed by @robintown.
• Element Call: fix widget shown while its still loading (waitForIframeLoad=false) (#12292). Contributed by @toger5.
• Improve Forward Dialog a11y by switching to roving tab index interactions (#12306). Contributed by @t3chguy.
• Call guest access link creation to join calls as a non registered user via the EC SPA (#12259). Contributed by @toger5.
• Use strong element to semantically denote visually emphasised content (#12320). Contributed by @t3chguy.
• Handle up/down arrow keys as well as left/right for horizontal toolbars for improved a11y (#12305). Contributed by @t3chguy.
• [Backport staging] Remove the glass border from modal spinners (#12369). Contributed by @RiotRobot.
• Fix incorrect check for private read receipt support (#12348). Contributed by @tulir.
• TAC: Fix hover state when expanded (#12337). Contributed by @florianduros.
• Fix the image view (#12341). Contributed by @robintown.
• Use correct push rule to evaluate room-wide mentions (#12318). Contributed by @t3chguy.
• Reset power selector on API failure to prevent state mismatch (#12319). Contributed by @t3chguy.
• Fix spotlight opening in TAC (#12315). Contributed by @florianduros.

[nebulon]

[1.9.21]

• Update Element to 1.11.63
• Full changelog
• Revert "Make EC widget theme reactive - Update widget url when the theme changes" (#12383) in order to fix widgets that require authentication.
• Update to hotfixed js-sdk to fix an issue where Element could try to set a push rule in a loop.

[nebulon]

[1.91.0]

• Update Synapse to 1.104.0
• Full changelog
• Fix regression when using OIDC provider. Introduced in v1.104.0rc1. (#17031)
• Add an OIDC config to specify extra parameters for the authorization grant URL. IT can be useful to pass an ACR value for example. (#16971)
• Add support for OIDC provider returning JWT. (#16972, #17031)
• Fix a bug which meant that, under certain circumstances, we might never retry sending events or to-device messages over federation after a failure. (#16925)
• Fix various long-standing bugs which could cause incorrect state to be returned from /sync in certain situations. (#16949)
• Fix case in which m.fully_read marker would not get updated. Contributed by @SpiritCroc. (#16990)
• Fix bug which did not retract a user's pending knocks at rooms when their account was deactivated. Contributed by @hanadi92. (#17010)

[nebulon]

[1.9.22]

• Update Element to 1.11.64
• Full changelog
• Mark all threads as read button (#12378). Contributed by @dbkr.
• Video call meta space (#12297). Contributed by @toger5.
• Add leave room warning for last admin (#9452). Contributed by @Arnei.
• Iterate styles around Link new device via QR (#12356). Contributed by @t3chguy.
• Improve code-splitting of highlight.js and maplibre-gs libs (#12349). Contributed by @t3chguy.
• Use data-mx-color for rainbows (#12325). Contributed by @tulir.
• Fix external guest access url for unencrypted rooms (#12345). Contributed by @toger5.
• Fix video rooms not showing share link button (#12374). Contributed by @toger5.
• Fix space topic jumping on hover/focus (#12377). Contributed by @t3chguy.
• Allow popping out a Jitsi widget to respect Desktop web_base_url config (#12376). Contributed by @t3chguy.
• Remove the Lazy Loading InvalidStoreError Dialogs (#12358). Contributed by @langleyd.
• Improve readability of badges and pills (#12360). Contributed by @robintown.

[nebulon]

[1.91.1]

• Update Synapse to 1.105.0
• Full changelog
• Stabilize support for MSC4010 which clarifies the interaction of push rules and account data. Contributed by @clokep. (#17022)
• Stabilize support for MSC3981: /relations recursion. Contributed by @clokep. (#17023)
• Add support for moving /pushrules off of main process. (#17037, #17038)
• Fix various long-standing bugs which could cause incorrect state to be returned from /sync in certain situations. (#16930, #16932, #16942, #17064, #17065, #17066)
• Fix server notice rooms not always being created as unencrypted rooms, even when encryption_enabled_by_default_for_room_type is in use (server notices are always unencrypted). (#17033)
• Fix the .m.rule.encrypted_room_one_to_one and .m.rule.room_one_to_one default underride push rules being in the wrong order. Contributed by @Sumpy1. (#17043)

[nebulon]

[1.9.23]

• Update Element to 1.11.65
• Full changelog
• Make empty state copy for TAC depend on the value of the setting (#12419). Contributed by @dbkr.
• Linkify User Interactive Authentication errors (#12271). Contributed by @t3chguy.
• Add support for device dehydration v2 (#12316). Contributed by @uhoreg.
• Replace SecurityCustomisations with CryptoSetupExtension (#12342). Contributed by @thoraj.
• Add activity toggle for TAC (#12413). Contributed by @dbkr.
• Humanize spell check language labels (#12409). Contributed by @t3chguy.
• Call Guest Access, give user the option to change the acces level so they can generate a call link. (#12401). Contributed by @toger5.
• TAC: Release Announcement (#12380). Contributed by @florianduros.
• Show the call and share button if the user can create a guest link. (#12385). Contributed by @toger5.
• Add analytics for mark all threads unread (#12384). Contributed by @dbkr.
• Add EventType.RoomEncryption to the auto approve capabilities of Element Call widgets (#12386). Contributed by @toger5.
• Fix link modal not shown after access upgrade (#12411). Contributed by @toger5.
• Fix thread navigation in timeline (#12412). Contributed by @florianduros.
• Fix inability to join a knock room via space hierarchy view (#12404). Contributed by @t3chguy.
• Focus the thread panel when clicking on an item in the TAC (#12410). Contributed by @dbkr.
• Fix space hierarchy tile busy state being stuck after join error (#12405). Contributed by @t3chguy.
• Fix room topic in-app links not being handled correctly on topic dialog (#12406). Contributed by @t3chguy.

[girish]

[1.91.2]

• Update Synapse to 1.105.1
• Full changelog
• GHSA-3h7q-rfh9-xm4v / CVE-2024-31208 — High Severity . Weakness in auth chain indexing allows DoS from remote room members through disk fill and high CPU usage.

[nebulon]

[1.92.0]

• Update Synapse to 1.106.0
• Full changelog
• Send an email if the address is already bound to an user account. (#16819)
• Implement the rendezvous mechanism described by MSC4108. (#17056)
• Support delegating the rendezvous mechanism described MSC4108 to an external implementation. (#17086)
• Add validation to ensure that the limit parameter on /publicRooms is non-negative. (#16920)
• Return 400 M_NOT_JSON upon receiving invalid JSON in query parameters across various client and admin endpoints, rather than an internal server error. (#16923)
• Make the CSAPI endpoint /keys/device_signing/upload idempotent. (#16943)
• Redact membership events if the user requested erasure upon deactivating. (#17076)

[nebulon]

[1.9.24]

• Update Element to 1.11.66
• Full changelog
• Use a different error message for UTDs when you weren't in the room. (#12453). Contributed by @uhoreg.
• Take the Threads Activity Centre out of labs (#12439). Contributed by @dbkr.
• Expected UTDs: use a different message for UTDs sent before login (#12391). Contributed by @richvdh.
• Add Tooltip to AccessibleButton (#12443). Contributed by @florianduros.
• Add analytics to activity toggles (#12418). Contributed by @dbkr.
• Decrypt events in reverse order without copying the array (#12445). Contributed by @Johennes.
• Use new compound tooltip (#12416). Contributed by @florianduros.
• Expected UTDs: report a different Posthog code (#12389). Contributed by @richvdh.
• TAC: Fix accessibility issue when the Release announcement is displayed (#12484). Contributed by @RiotRobot.
• TAC: Close Release Announcement when TAC button is clicked (#12485). Contributed by @florianduros.
• MenuItem: fix caption usage (#12455). Contributed by @florianduros.
• Show the local echo in previews (#12451). Contributed by @langleyd.
• Fixed the drag and drop of X #27186 (#12450). Contributed by @asimdelvi.
• Move the TAC to above the button (#12438). Contributed by @dbkr.
• Use the same logic in previews as the timeline to hide events that should be hidden (#12434). Contributed by @langleyd.
• Fix selector so maths support doesn't mangle divs (#12433). Contributed by @uhoreg.

[nebulon]

[1.93.0]

• Update Synapse to 1.107.0
• Full changelog
• Add preliminary support for MSC3823: Account Suspension. (#17051)
• Declare support for Matrix v1.10. Contributed by @clokep. (#17082)
• Add support for MSC4115: membership metadata on events. (#17104, #17137)
• Fixed search feature of Element Android on homesevers using SQLite by returning search terms as search highlights. (#17000)
• Fixes a bug introduced in v1.52.0 where the destination query parameter for the Destination Rooms Admin API failed to actually filter returned rooms. (#17077)
• For MSC3266 room summaries, support queries at the recommended endpoint of /_matrix/client/unstable/im.nheko.summary/summary/{roomIdOrAlias}. The existing endpoint of /_matrix/client/unstable/im.nheko.summary/rooms/{roomIdOrAlias}/summary is deprecated. (#17078)
• Apply user email & picture during OIDC registration if present & selected. (#17120)
• Improve error message for cross signing reset with MSC3861 enabled. (#17121)
• Fix a bug which meant that to-device messages received over federation could be dropped when the server was under load or networking problems caused problems between Synapse processes or the database. (#17127)
• Fix bug where StreamChangeCache would not respect configured cache factors. (#17152)

[nebulon]

[1.9.25]

• Update Element to 1.11.67
• Full changelog
• Tooltip: Improve the accessibility of the composer and the rich text editor (#12459). Contributed by @florianduros.
• Allow explicit configuration of OIDC dynamic registration metadata (#12514). Contributed by @t3chguy.
• Tooltip: improve accessibility for messages (#12487). Contributed by @florianduros.
• Collapse UserSettings tabs to just icons on narrow screens (#12505). Contributed by @dbkr.
• Add room topic to right panel room info (#12503). Contributed by @t3chguy.
• OIDC: pass id_token via id_token_hint on Manage Account interaction (#12499). Contributed by @t3chguy.
• Tooltip: improve accessibility in room (#12493). Contributed by @florianduros.
• Tooltip: improve accessibility for call and voice messages (#12489). Contributed by @florianduros.
• Move the active tab in user settings to the dialog title (#12481). Contributed by @dbkr.
• Tooltip: improve accessibility of spaces (#12497). Contributed by @florianduros.
• Tooltip: improve accessibility of the right panel (#12490). Contributed by @florianduros.
• MSC3575 (Sliding Sync) add well-known proxy support (#12307). Contributed by @EdGeraghty.
• Reuse single PlaybackWorker between Playback instances (#12520). Contributed by @t3chguy.
• Fix well-known lookup for sliding sync labs check (#12519). Contributed by @t3chguy.
• Fix element-desktop-ssoid being included in OIDC Authorization call (#12495). Contributed by @t3chguy.
• Fix beta notifications reconciliation for intentional mentions push rules (#12510). Contributed by @t3chguy.
• fix avatar stretched on 1:1 call (#12494). Contributed by @I-lander.
• Check native sliding sync support against an unstable feature flag (#12498). Contributed by @turt2live.
• Use OPTIONS for sliding sync detection poke (#12492). Contributed by @turt2live.
• TAC: hide tooltip when the release announcement is displayed (#12472). Contributed by @florianduros.

[girish]

[1.94.0]

• Update Synapse to 1.108.0
• Full changelog
• Add a feature that allows clients to query the configured federation whitelist. Disabled by default. (#16848, #17199)
• Add the ability to allow numeric user IDs with a specific prefix when in the CAS flow. Contributed by Aurélien Grimpard. (#17098)
• Fix bug where push rules would be empty in /sync for some accounts. Introduced in v1.93.0. (#17142)
• Add support for optional whitespace around the Federation API's Authorization header's parameter commas. (#17145)
• Fix bug where disabling room publication prevented public rooms being created on workers. (#17177, #17184)

[girish]

[1.9.26]

• Update Element to 1.11.68
• Full changelog
• Tooltip: Improve accessibility for context menus (#12462). Contributed by @florianduros.
• Tooltip: Improve accessibility of space panel (#12525). Contributed by @florianduros.

[nebulon]

[1.95.0]

• Update Synapse to 1.109.0
• Full changelog

[nebulon]

[1.9.27]

• Update Element to 1.11.69
• Full changelog

[nebulon]

[1.96.0]

• Update Synapse to 1.110.0
• Full changelog

[nebulon]

[1.9.28]

• Update Element to 1.11.70
• Full changelog

[Package Updates]

[1.97.0]

• Update Synapse to 1.111.0
• Full changelog