Matrix (Synapse/Element) - Package Updates

[Package Updates]

[1.120.1]

• Update synapse to 1.139.1
• Full Changelog
• Fix CVE-2025-61672 / GHSA-fh66-fcv5-jjfr. Lack of validation for device keys in Synapse before 1.139.1 allows an attacker registered on the victim homeserver to degrade federation functionality, unpredictably breaking outbound federation to other homeservers. (#17097)
• Drop support for unstable field names from the long-accepted MSC2732 (Olm fallback keys) proposal. This change allows unit tests to pass following the security patch above. (#18996)

[Package Updates]

[1.11.1]

• Update element-web to 1.12.1
• Full Changelog
• New Room List: Change the order of filters to match those on mobile (#​30905). Contributed by @​langleyd.
• New Room List: Don't clear filters on space change (#​30903). Contributed by @​langleyd.
• Add release announcement for the sounds (#​30900). Contributed by @​langleyd.
• Rich Text Editor: Add emoji suggestion support (#​30873). Contributed by @​langleyd.
• feat: Disable session lock when running in element-desktop (#​30643). Contributed by @​kaylendog.
• Improve invite dialog ui - Part 1 (#​30764). Contributed by @​florianduros.
• Update Message Sound for Element (#​30804). Contributed by @​beatdemon.
• Add new and improved ringtone (#​30761). Contributed by @​Half-Shot.
• Disable RTE formatting buttons when the content contains a slash command (#​30802). Contributed by @​langleyd.
• New Room List: Improve robustness of keyboard navigation (#​30888). Contributed by @​langleyd.

[Package Updates]

[1.120.2]

• Update synapse to 1.139.2

[Package Updates]

[1.120.3]

• Update synapse-s3-storage-provider to 1.6.0

[Package Updates]

[1.121.0]

• Update synapse to 1.140.0
• Full Changelog
• Add a new Media Query by ID Admin API that allows server admins to query and investigate the metadata of local or cached remote media via the origin/media_id identifier found in a Matrix Content URI. (#18911)
• Add a new Fetch Event Admin API to fetch an event by ID. (#18963)
• Update MSC4284: Policy Servers implementation to support signatures when available. (#18934)
• Add experimental implementation of the GET /_matrix/client/v1/rtc/transports endpoint for the latest draft of MSC4143: MatrixRTC. (#18967)
• Expose a defer_to_threadpool function in the Synapse Module API that allows modules to run a function on a separate thread in a custom threadpool. (#19032)

[Package Updates]

[1.11.2]

• Update element-web to 1.12.2
• Full Changelog
• Room List: Extend the viewport to avoid so many black spots when scrolling the room list (#​30867). Contributed by @​langleyd.
• Hide calling buttons in room header before a room is created (#​30816). Contributed by @​Half-Shot.
• Improve invite dialog ui - Part 2 (#​30836). Contributed by @​florianduros.
• Fix platform settings race condition and make auto-launch tri-state (#​30977). Contributed by @​t3chguy.
• Fix: member count in header and member list (#​30982). Contributed by @​florianduros.
• Fix duration of voice message in timeline (#​30973). Contributed by @​florianduros.
• Fix voice notes rendering at 00:00 when playback had not begun. (#​30961). Contributed by @​Half-Shot.
• Improve handling of animated images, add support for AVIF animations (#​30932). Contributed by @​t3chguy.
• Update key storage toggle when key storage status changes (#​30934). Contributed by @​uhoreg.
• Fix jitsi widget popout (#​30908). Contributed by @​dbkr.

[Package Updates]

[1.122.0]

• Update synapse to 1.141.0
• Full Changelog

[Package Updates]

[1.11.3]

• Update element-web to 1.12.3
• Full Changelog
• Remove allowVoipWithNoMedia feature flag (#31087). Contributed by @Half-Shot.
• Change module API to be an instance getter (#31025). Contributed by @dbkr.
• Show hover elements when keyboard focus is within an event tile (#31078). Contributed by @t3chguy.
• Ensure toolbar navigation pattern works in MessageActionBar (#31080). Contributed by @t3chguy.
• Ensure sent markers are hidden when showing thread summary. (#31076). Contributed by @Half-Shot.
• Fix translation in dev mode (#31045). Contributed by @florianduros.
• Fix sort order in space hierarchy (#30975). Contributed by @t3chguy.
• New Room list: don't display message preview of thread (#31043). Contributed by @florianduros.
• Revert "A11y: move focus to right panel when opened" (#30999). Contributed by @florianduros.
• Fix highlights in messages (or search results) breaking links (#30264). Contributed by @bojidar-bg.

[Package Updates]

[1.123.0]

• Update synapse to 1.142.0
• Full Changelog
• Dropped support for Python 3.9
• SQLite 3.40.0+ is now required
• Deprecation of MacOS Python wheels
• Properly stop building wheels for Python 3.9 and free-threaded CPython. (#19154)

[Package Updates]

[1.123.1]

• Update synapse to 1.142.1
• Full Changelog
• Fixed a bug introduced in v1.142.0 preventing subpaths in MAS endpoints from working. (#19186)

[Package Updates]

[1.11.4]

• Update element-web to 1.12.4
• Full Changelog
• Apply aria-hidden to emoji in SAS verification (#​31204). Contributed by @​t3chguy.
• Add options to hide header and composer of room view for the module api (#​31095). Contributed by @​florianduros.
• Experimental Module API Additions (#​30863). Contributed by @​dbkr.
• Change polls to use fieldset/legend markup (#​31160). Contributed by @​langleyd.
• Use compound Button styles for Jitsi button (#​31159). Contributed by @​Half-Shot.
• Add FocusLock to emoji picker (#​31146). Contributed by @​langleyd.
• Move room name, avatar, and topic to IOpts. (#​30981). Contributed by @​kaylendog.
• Add a devtool for looking at users and their devices (#​30983). Contributed by @​uhoreg.
• Fix room list handling of membership changes (#​31197). Contributed by @​t3chguy.
• Fix room list unable to be resized when displayed after a module (#​31186). Contributed by @​florianduros.

[Package Updates]

[1.124.0]

• Update synapse to 1.143.0
• Full Changelog

[Package Updates]

[1.11.5]

• Update element-web to 1.12.5
• Full Changelog
• Update Emojibase to v17 (#​31307). Contributed by @​t3chguy.
• Adds tooltip for compose menu (#​31122). Contributed by @​byteplow.
• Add option to hide pinned message banner in room view (#​31296). Contributed by @​florianduros.
• update twemoji to not monochromise emoji with BLACK in their name (#​31281). Contributed by @​ara4n.
• upgrade to twemoji 17.0.2 and fix #​14695 (#​31267). Contributed by @​ara4n.
• Add options to hide right panel in room view (#​31252). Contributed by @​florianduros.
• Delayed event management: split endpoints, no auth (#​31183). Contributed by @​AndrewFerr.
• Support using Element Call for voice calls in DMs (#​30817). Contributed by @​Half-Shot.
• Improve screen reader accessibility of auth pages (#​31236). Contributed by @​t3chguy.
• Add posthog tracking for key backup toasts (#​31195). Contributed by @​Half-Shot.

[nebulon]

[1.11.6]

• Update element-web to 1.12.6
• Full Changelog
• This release fixes a bug where 1:1 calling was incorrectly not available if no Element Call focus was set.
• Add option to pick call options for voice calls. (#​31413).

[Package Updates]

[1.125.0]

• Update synapse to 1.144.0
• Full Changelog
• Deprecation of MacOS Python wheels
• Unstable mutual rooms endpoint is now behind an experimental feature flag

[Package Updates]

[1.11.7]

• Update element-web to 1.12.7
• Full Changelog
• Replace legacy icons with compound (#31424). Contributed by @t3chguy.
• Update polls UX to match EX Mobile and improve accessibility (#31245). Contributed by @langleyd.
• Add option to enable read receipt and marker when user interact with UI (#31353). Contributed by @florianduros.
• Introduce a hook to auto dispose view models (#31178). Contributed by @MidhunSureshR.
• Update settings toggles to use consistent design across app. (#30169). Contributed by @Half-Shot.
• Add ability to the room view to hide widgets (#31400). Contributed by @langleyd.
• call: Pass the echo cancellation and noise suppression settings to EC (#31317). Contributed by @BillCarsonFr.
• Tweak rendering of icons for a11y (#31358). Contributed by @t3chguy.
• Implement new renderNotificationDecoration from module API (#31389). Contributed by @MidhunSureshR.
• Replace more icons with compound (#31381). Contributed by @t3chguy.

[Package Updates]

[1.11.8]

• Update element-web to 1.12.8
• Full Changelog
• Remove element_call.participant_limit config and associated code. (#​31638). Contributed by @​Half-Shot.
• Switch to rendering svg icons rather than masking them (#​31557). Contributed by @​t3chguy.
• Update history visibility UX (#​31635). Contributed by @​langleyd.
• Show correct call icon for joining a call. (#​31489). Contributed by @​Half-Shot.
• Update StopGapWidgetDriver to support sticky events (#​31205). Contributed by @​Half-Shot.
• Remove release announcements for new sounds & room list (#​31544). Contributed by @​t3chguy.
• Add button to restore from backup into /devtools (#​31581). Contributed by @​mxandreas.
• Switch to non-solid compound icons for room settings & composer (#​31561). Contributed by @​t3chguy.
• Support encrypted state events MSC4362 (#​31513). Contributed by @​andybalaam.
• Update prop type & documentation for HistoryVisibleBanner and VM. (#​31545). Contributed by @​kaylendog.

[Package Updates]

[1.126.0]

• Update synapse to 1.146.0
• Full Changelog
• MSC2697 (Dehydrated devices) has been removed, as the MSC is closed. Developers should migrate to MSC3814. (#19346)
• Support for Ubuntu 25.04 (Plucky Puffin) has been dropped. Synapse no longer builds debian packages for Ubuntu 25.04.
• Add a new config option enable_local_media_storage which controls whether media is additionally stored locally when using configured media_storage_providers. Setting this to false allows off-site media storage without a local cache. Contributed by Patrice Brend'amour @dr.allgood. (#19204)
• Stabilise support for MSC4312's m.oauth User-Interactive Auth stage for resetting cross-signing identity with the OAuth 2.0 API. The old, unstable name (org.matrix.cross_signing_reset) is now deprecated and will be removed in a future release. (#19273)
• Refactor Grafana dashboard to use server_name label (instead of instance). (#19337)
• Fix joining a restricted v12 room locally when no local room creator is present but local users with sufficient power levels are. Contributed by @nexy7574. (#19321)
• Fixed parallel calls to /_matrix/media/v1/create being ratelimited for appservices even if rate_limited: false was set in the registration. Contributed by @tulir @ Beeper. (#19335)
• Fix a bug introduced in 1.61.0 where a user's membership in a room was accidentally ignored when considering access to historical state events in rooms with the "shared" history visibility. Contributed by Lukas Tautz. (#19353)
• MSC4140: Store the JSON content of scheduled delayed events as text instead of a byte array. This fixes the inability to schedule a delayed event with non-ASCII characters in its content. (#19360)
• Always rollback database transactions when retrying (avoid orphaned connections). (#19372)

[Package Updates]

[1.126.1]

• install s3-storage from github again

[Package Updates]

[1.126.2]

• Allow to override the user profile mapping for OIDC