Matrix (Synapse/Element) - Package Updates

[Package Updates]

[1.144.0]

• Update synapse to 1.162.0
• Full Changelog

[Package Updates]

[1.11.32]

• Update element-web to 1.12.30
• Full Changelog
• Remove legacy Module & Customisation API (#33941). Contributed by @t3chguy.
• List the shortcut of the room list resizer in the settings (#35130). Contributed by @florianduros.
• Disable user status UI when offline (#35106). Contributed by @dbkr.
• Handle M_INVITE_BLOCKED when an invite is rejected (#35128). Contributed by @Half-Shot.
• New timeline panel in the room view (labs) (#34859). Contributed by @langleyd.
• Do not make a thread bright red when mentioned. (#35132). Contributed by @Half-Shot.
• Restore spacing between message text and URL previews (#35127). Contributed by @ZacksBot.
• Fix autocomplete/formatting bar being hidden when editing a message (#35126). Contributed by @Half-Shot.
• Fix OAuth logout bug if started offline (#34918). Contributed by @dbkr.
• Fix crash on Windows/macOS when keychain access is denied (#34922). Contributed by @kaylendog.

[Package Updates]

[1.11.33]

• Update element-web to 1.12.31
• Full Changelog
• Do not allow skip device verification by default (#35259). Contributed by @mxandreas.
• Add a Markdown viewer for .md attachments in the right panel (#35203). Contributed by @ZacksBot.
• Render PDFs in a usercontent iframe (#35067). Contributed by @ZacksBot.
• [Backport staging] Fix blank maps by bundling the maplibre-gl worker explicitly (#35442). Contributed by @RiotRobot.
• [Backport staging] Revert "Do not allow skip device verification by default (#35259)" (#35345). Contributed by @RiotRobot.
• Fix message draft getting lost when a call ends (#35261). Contributed by @t3chguy.
• Fix clicks on pills closing the RoomView (#35266). Contributed by @t3chguy.
• Fix thread panel actions incorrectly triggering thread open (#35263). Contributed by @t3chguy.
• Keep an incoming call ringing when a call in another room ends (#35222). Contributed by @ara4n.
• Notify when you are invited to a room (#34665). Contributed by @hayaksi1.

[Package Updates]

[1.145.0]

• Update synapse to 1.163.0
• Full Changelog

[Package Updates]

[1.145.1]

• Fix startup crash with url_preview_enabled on Synapse 1.163.0

[Package Updates]

[1.11.34]

• Update element-web to 1.12.32
• Full Changelog
• Remove support for NEB starter links in messages. Fixes GHSA-x2rg-2g77-mx2w
• Remove support for guest_access_token & guest_user_id. Fixes GHSA-c88w-7h6p-27xr
• Fix crash when preview room is under the fold (#35500).

[Package Updates]

[1.146.0]

• Update python-base | final to 3.14-20261023
• security: fix eMudhra cert compromise

[Package Updates]

[1.146.1]

• Update synapse to 1.163.2
• Full Changelog
• Bump pillow to 13.0.0 to address critical security vulnerabilties. You must use Python >= 3.11 to take advantage of this version bump. (#20398)
• Update certifi to 2026.10.19 to address GHSA-6q48-6c7w-9gw2. This only affects TLS connections made by the Sentry SDK when sentry is configured, SAML, and a couple utility scripts; federation and Synapse's other outbound HTTP requests use the system trust store. (#20387)
• Bump rustls-webpki to 0.103.16 to actively distrust compromised eMudhra intermediate CA certificates. (#20392)

[Package Updates]

[1.147.0]

• Update synapse to 1.164.0
• Full Changelog
• Advertise support for Matrix v1.16. (#20333)
• Advertise support for Matrix v1.17. (#20334)
• MSC4140: Add a dedicated endpoint for scheduling delayed events. (#19354)
• Require authentication for the MSC4140 delayed event management endpoints, restrict them to the requesting user's own delayed events, and allow guests to use them. (#20257)
• MSC4140: Reject requests to schedule a delayed event that the sender could not send at that time, such as in a room they are not joined to, unless the event changes their own membership. (#20266)
• Stabilise MSC4222: support the stable use_state_after query parameter and state_after response field on /sync, as per Matrix v1.16, and remove the msc4222_enabled experimental config flag. (#20170)

[Package Updates]

[1.147.1]

• Update synapse to 1.164.1
• Full Changelog
• Fix clearing user status for clients that send a null profile field value.
• When include_profile_updates_in_sync is enabled, Synapse will continue to accept null custom profile field values until clients have had a sufficient time to change their behaviour. This special casing is tracked in this issue. (#20422)
• Bump msgpack from 1.2.1 to 1.2.4 to address GHSA-j586-36cw-2gc2 which can cause memory exhaustion problems when malformed tokens are used with the public room list API's. (#20421)