Matrix (Synapse/Element) - Package Updates

[Package Updates]

[1.9.43]

• Update element-web to 1.11.85
• Full Changelog
• Fixes for CVE-2024-51750 / GHSA-w36j-v56h-q9pc
• Fixes for CVE-2024-51749 / GHSA-5486-384g-mcx2
• Update JS SDK with the fixes for CVE-2024-50336 / GHSA-xvg8-m4x3-w6xr

[Package Updates]

[1.99.0]

• Update synapse to 1.119.0
• Full Changelog
• Support MSC4151's stable report room API. (#​17374)
• Add experimental support for MSC4222 (Adding state_after to sync v2). (#​17888)
• Fix bug with sliding sync where $LAZY-loading room members would not return required_state membership in incremental syncs. (#​17809)
• Check if user has membership in a room before tagging it. Contributed by Lama Alosaimi. (#​17839)
• Fix a bug in the admin redact endpoint where the background task would not run if a worker was specified in
• Fix bug where some presence and typing timeouts can expire early. (#​17850)
• Fix detection when the built Rust library was outdated when using source installations. (#​17861)
• Fix a long-standing bug in Synapse which could cause one-time keys to be issued in the incorrect order, causing message decryption failures. (#​17903)
• Fix experimental support for MSC4222 (Adding state_after to sync v2) where we would return the full state on incremental syncs when using lazy loaded members and there were no new events in the timeline. (#​17915)
• Remove support for python 3.8. (#​17908)
• Add a test for downloading and thumbnailing a CMYK JPEG. (#​17786)
• Refactor database calls to remove Generator usage. (#​17813, #​17814, #​17815, #​17816, #​17817, #​17818, #​17890)
• Include the destination in the error of 'Destination mismatch' on federation requests. (#​17830)
• The nix flake inside the repository no longer tracks nixpkgs/master to not catch the latest bugs from a MR merged 5 minutes ago. (#​17852)
• Minor speed-up of sliding sync by computing extensions results in parallel. (#​17884)
• Bump the default Python version in the Synapse Dockerfile from 3.11 -> 3.12. (#​17887)
• Remove usage of internal header encoding API. (#​17894)
• Use unique name for each os.arch variant when uploading Wheel artifacts. (#​17905)
• Fix tests to run with latest Twisted. (#​17906, #​17907, #​17911)
• Update version constraint to allow the latest poetry-core 1.9.1. (#​17902)
• Update the portdb CI to use Python 3.13 and Postgres 17 as latest dependencies. (#​17909)
• Add an index to current_state_delta_stream table. (#​17912)
• Fix building and attaching release artifacts during the release process. (#​17921)

[Package Updates]

[1.9.44]

• Update element-web to 1.11.86
• Full Changelog
• Deduplicate icons using Compound Design Tokens (#​28419). Contributed by @​t3chguy.
• Let widget driver send error details (#​28357). Contributed by @​AndrewFerr.
• Deduplicate icons using Compound Design Tokens (#​28381). Contributed by @​t3chguy.
• Auto approvoce io.element.call.reaction capability for element call widgets (#​28401). Contributed by @​toger5.
• Show message type prefix in thread root & reply previews (#​28361). Contributed by @​t3chguy.
• Support sending encrypted to device messages from widgets (#​28315). Contributed by @​hughns.

[Package Updates]

[1.100.0]

• Update synapse to 1.120.0
• Full Changelog
• Fix a bug introduced in Synapse v1.120rc1 which would cause the newly-introduced delete_old_otks job to fail in worker-mode deployments. (#​17960)

[Package Updates]

[1.100.1]

• Update synapse to 1.120.2
• Full Changelog

[Package Updates]

[1.9.45]

• Update element-web to 1.11.87
• Full Changelog
• Send and respect MSC4230 is_animated flag (#​28513). Contributed by @​t3chguy.
• Display a warning when an unverified user's identity changes (#​28211). Contributed by @​uhoreg.
• Swap out Twitter link for Mastodon on auth footer (#​28508). Contributed by @​t3chguy.
• Consider org.matrix.msc3417.call as video room in create room dialog (#​28497). Contributed by @​t3chguy.
• Standardise icons using Compound Design Tokens (#​28217). Contributed by @​t3chguy.
• Start sending stable m.marked_unread events (#​28478). Contributed by @​tulir.
• Upgrade to compound-design-tokens v2 (#​28471). Contributed by @​t3chguy.
• Standardise icons using Compound Design Tokens (#​28286). Contributed by @​t3chguy.
• Remove reply fallbacks as per merged MSC2781 (#​28406). Contributed by @​t3chguy.
• Use React Suspense when rendering async modals (#​28386). Contributed by @​t3chguy.
• Add spinner when room encryption is loading in room settings (#​28535). Contributed by @​florianduros.
• Fix getOidcCallbackUrl for Element Desktop (#​28521). Contributed by @​t3chguy.
• Filter out redacted poll votes to avoid crashing the Poll widget (#​28498). Contributed by @​t3chguy.
• Fix force tab complete not working since switching to React 18 createRoot API (#​28505). Contributed by @​t3chguy.
• Fix media captions in bubble layout (#​28480). Contributed by @​tulir.
• Reset cross-signing before backup when resetting both (#​28402). Contributed by @​uhoreg.
• Listen to events so that encryption icon updates when status changes (#​28407). Contributed by @​uhoreg.
• Check that the file the user chose has a MIME type of image/* (#​28467). Contributed by @​t3chguy.
• Fix download button size in message action bar (#​28472). Contributed by @​t3chguy.
• Allow tab completing users in brackets (#​28460). Contributed by @​t3chguy.
• Fix React 18 strict mode breaking spotlight dialog (#​28452). Contributed by @​MidhunSureshR.

[Package Updates]

[1.9.46]

• Update element-web to 1.11.88
• Full Changelog
• Allow trusted Element Call widget to send and receive media encryption key to-device messages (#​28316). Contributed by @​hughns.
• increase ringing timeout from 10 seconds to 90 seconds (#​28630). Contributed by @​fkwp.
• Add Close tooltip to dialog (#​28617). Contributed by @​florianduros.
• New UX for Share dialog (#​28598). Contributed by @​florianduros.
• Improve performance of RoomContext in RoomHeader (#​28574). Contributed by @​t3chguy.
• Remove Features.RustCrypto flag (#​28582). Contributed by @​florianduros.
• Add Modernizr warning when running in non-secure context (#​28581). Contributed by @​t3chguy.
• Fix jumpy timeline when the pinned message banner is displayed (#​28654). Contributed by @​florianduros.
• Fix font & spaces in settings subsection (#​28631). Contributed by @​florianduros.
• Remove manual device verification which is not supported by the new cryptography stack (#​28588). Contributed by @​florianduros.
• Fix code block highlighting not working reliably with many code blocks (#​28613). Contributed by @​t3chguy.
• Remove remaining reply fallbacks code (#​28610). Contributed by @​t3chguy.

[Package Updates]

[1.9.47]

• Update element-web to 1.11.89
• Full Changelog
• Upgrade matrix-sdk-crypto-wasm to 1.11.0 (https://github.com/matrix-org/matrix-js-sdk/pull/4593)
• Fix url preview display (#​28766).

[Package Updates]

[1.101.0]

• Update synapse to 1.121.1
• Full Changelog
• Support for MSC4190: device management for Application Services. (#17705)
• Update MSC4186 Sliding Sync to include invite, ban, kick, targets when $LAZY-loading room members. (#17947)
• Use stable M_USER_LOCKED error code for locked accounts, as per Matrix 1.12. (#17965)
• MSC4076: Add disable_badge_count to pusher configuration. (#17975)

[Package Updates]

[1.101.1]

• CLOUDRON_OIDC_PROVIDER_NAME implemented