Matrix (Synapse/Element) - Package Updates

[Package Updates]

[1.10.13]

• Update element-web to 1.11.108
• Full Changelog
• [Backport staging] Fix downloaded attachments not being decrypted (#​30434). Contributed by @​RiotRobot.

[Package Updates]

[1.116.0]

• Update synapse to 1.135.0
• Full Changelog

[Package Updates]

[1.10.14]

• Update element-web to 1.11.109
• Full Changelog
• This release supports the upcoming v12 ("hydra") Matrix room version and is necessary to view and participate in these rooms.
• [Backport staging] Allow /upgraderoom command without developer mode enabled (#30529). Contributed by @RiotRobot.
• [Backport staging] Support for creator/owner power level (#30526). Contributed by @RiotRobot.
• New room list: change icon and label of menu item for to start a DM (#30470). Contributed by @florianduros.
• Implement the member list with virtuoso (#29869). Contributed by @langleyd.
• Add labs option for history sharing on invite (#30313). Contributed by @richvdh.
• Bump wysiwyg to 2.39.0 adding support for pasting rich text content in the Rich Text Edtior (#30421). Contributed by @langleyd.
• Support EventShieldReason.MISMATCHED_SENDER (#30403). Contributed by @richvdh.
• Change unencrypted and public pills to blue (#30399). Contributed by @florianduros.
• Change color of public room icon (#30390). Contributed by @florianduros.

[Package Updates]

[1.116.1]

• Update synapse to 1.135.2
• Full Changelog
• Fix invalidation of storage cache that was broken in 1.135.0. (#​18786)
• Add a parameter to upgrade_rooms(..) to allow auto join local users. (#​82)
• Speed up upgrading a room with large numbers of banned users. (#​18574)

[Package Updates]

[1.117.0]

• Update synapse to 1.136.0
• Full Changelog
• Fix bug introduced in 1.135.2 and 1.136.0rc2 where the Make Room Admin API would not treat a room v12's creator power level as the highest in room. (#​18805)

[Package Updates]

[1.118.0]

• Update synapse to 1.137.0
• Full Changelog
• Fix a bug which could corrupt auth chains making it impossible to perform state resolution. (#18746)
• Fix error message in register_new_matrix_user utility script for empty registration_shared_secret. (#18780)
• Allow enabling MSC4108 when the stable Matrix Authentication Service integration is enabled. (#18832)
• Include IPv6 networks in denied-peer-ips of coturn setup. Contributed by @litetex. (#18781)

[Package Updates]

[1.10.15]

• Update element-web to 1.11.110
• Full Changelog
• Hide recovery key when re-entering it while creating or changing it (#30499). Contributed by @andybalaam.
• Add ?no_universal_links=true to OIDC url so EX doesn't try to handle it (#29439). Contributed by @t3chguy.
• Show a blue lock for unencrypted rooms and hide the grey shield for encrypted rooms (#30440). Contributed by @langleyd.
• Add support for Module API 1.4 (#30185). Contributed by @t3chguy.
• MVVM - Introduce some helpers for snapshot management (#30398). Contributed by @MidhunSureshR.
• A11y: move focus to right panel when opened (#30553). Contributed by @florianduros.
• Fix e2e warning icon should be white (#30539). Contributed by @florianduros.
• Remove NoOneHere disabled reason. (#30524). Contributed by @toger5.
• Fix downloading files with authenticated media API (#30520). Contributed by @t3chguy.
• Fix call permissions check confusion around element call (#30521). Contributed by @t3chguy.

[Package Updates]

[1.119.0]

• Update synapse to 1.138.0
• Full Changelog
• Support for the stable endpoint and scopes of MSC3861 & co. (#18549)
• Improve database performance of MSC4293 - Redact on Kick/Ban. (#18851)
• Do not throw an error when fetching a rejected delayed state event on startup. (#18858)
• Fix worker documentation incorrectly indicating all room Admin API requests were capable of being handled by workers. (#18853)
• Instrument _ByteProducer with tracing to measure potential dead time while writing bytes to the request. (#18804)
• Switch to OpenTracing's ContextVarsScopeManager instead of our own custom LogContextScopeManager. (#18849)
• Trace how much work is being done while "recursively fetching redactions". (#18854)
• Link upstream Twisted bug tracking the problem that explains why we have to use a Producer to write bytes to the request. (#18855)
• Introduce EventPersistencePair type. (#18857)

[Package Updates]

[1.10.16]

• Update element-web to 1.11.111
• Full Changelog
• Do not hide media from your own user by default (#29797). Contributed by @Half-Shot.
• Remember whether sidebar is shown for calls when switching rooms (#30262). Contributed by @bojidar-bg.
• Open the proper integration settings on integrations disabled error (#30538). Contributed by @Half-Shot.
• Show a "progress" dialog while invites are being sent (#30561). Contributed by @richvdh.
• Move the room list to the new ListView(backed by react-virtuoso) (#30515). Contributed by @langleyd.
• [Backport staging] Ensure container starts if it is mounted with an empty /modules directory. (#30705). Contributed by @RiotRobot.
• Fix room joining over federation not specifying vias or using aliases (#30641). Contributed by @t3chguy.
• Fix stable-suffixed MSC4133 support (#30649). Contributed by @dbkr.
• Fix i18n of message when a setting is disabled (#30646). Contributed by @dbkr.
• ListView should not handle the arrow keys if there is a modifier applied (#30633). Contributed by @langleyd.

[Package Updates]

[1.10.17]

• Update element-web to 1.11.112
• Full Changelog
• Fix CVE-2025-59161 / GHSA-m6c8-98f4-75rr

[Package Updates]

[1.119.1]

• Update synapse to 1.138.2
• Full Changelog
• Drop support for Ubuntu 24.10 Oracular Oriole, and add support for Ubuntu 25.04 Plucky Puffin. This change was applied on top of 1.138.1. (#​18962)

[Package Updates]

[1.120.0]

• Update synapse to 1.139.0
• Full Changelog
• /register requests from old application service implementations may break when using MAS

[Package Updates]

[1.120.1]

• Update synapse to 1.139.1
• Full Changelog
• Fix CVE-2025-61672 / GHSA-fh66-fcv5-jjfr. Lack of validation for device keys in Synapse before 1.139.1 allows an attacker registered on the victim homeserver to degrade federation functionality, unpredictably breaking outbound federation to other homeservers. (#17097)
• Drop support for unstable field names from the long-accepted MSC2732 (Olm fallback keys) proposal. This change allows unit tests to pass following the security patch above. (#18996)

[Package Updates]

[1.11.1]

• Update element-web to 1.12.1
• Full Changelog
• New Room List: Change the order of filters to match those on mobile (#​30905). Contributed by @​langleyd.
• New Room List: Don't clear filters on space change (#​30903). Contributed by @​langleyd.
• Add release announcement for the sounds (#​30900). Contributed by @​langleyd.
• Rich Text Editor: Add emoji suggestion support (#​30873). Contributed by @​langleyd.
• feat: Disable session lock when running in element-desktop (#​30643). Contributed by @​kaylendog.
• Improve invite dialog ui - Part 1 (#​30764). Contributed by @​florianduros.
• Update Message Sound for Element (#​30804). Contributed by @​beatdemon.
• Add new and improved ringtone (#​30761). Contributed by @​Half-Shot.
• Disable RTE formatting buttons when the content contains a slash command (#​30802). Contributed by @​langleyd.
• New Room List: Improve robustness of keyboard navigation (#​30888). Contributed by @​langleyd.

[Package Updates]

[1.120.2]

• Update synapse to 1.139.2

[Package Updates]

[1.120.3]

• Update synapse-s3-storage-provider to 1.6.0

[Package Updates]

[1.121.0]

• Update synapse to 1.140.0
• Full Changelog
• Add a new Media Query by ID Admin API that allows server admins to query and investigate the metadata of local or cached remote media via the origin/media_id identifier found in a Matrix Content URI. (#18911)
• Add a new Fetch Event Admin API to fetch an event by ID. (#18963)
• Update MSC4284: Policy Servers implementation to support signatures when available. (#18934)
• Add experimental implementation of the GET /_matrix/client/v1/rtc/transports endpoint for the latest draft of MSC4143: MatrixRTC. (#18967)
• Expose a defer_to_threadpool function in the Synapse Module API that allows modules to run a function on a separate thread in a custom threadpool. (#19032)

[Package Updates]

[1.11.2]

• Update element-web to 1.12.2
• Full Changelog
• Room List: Extend the viewport to avoid so many black spots when scrolling the room list (#​30867). Contributed by @​langleyd.
• Hide calling buttons in room header before a room is created (#​30816). Contributed by @​Half-Shot.
• Improve invite dialog ui - Part 2 (#​30836). Contributed by @​florianduros.
• Fix platform settings race condition and make auto-launch tri-state (#​30977). Contributed by @​t3chguy.
• Fix: member count in header and member list (#​30982). Contributed by @​florianduros.
• Fix duration of voice message in timeline (#​30973). Contributed by @​florianduros.
• Fix voice notes rendering at 00:00 when playback had not begun. (#​30961). Contributed by @​Half-Shot.
• Improve handling of animated images, add support for AVIF animations (#​30932). Contributed by @​t3chguy.
• Update key storage toggle when key storage status changes (#​30934). Contributed by @​uhoreg.
• Fix jitsi widget popout (#​30908). Contributed by @​dbkr.

[Package Updates]

[1.122.0]

• Update synapse to 1.141.0
• Full Changelog