Matrix (Synapse/Element) - Package Updates

[Package Updates]

[1.10.15]

• Update element-web to 1.11.110
• Full Changelog
• Hide recovery key when re-entering it while creating or changing it (#30499). Contributed by @andybalaam.
• Add ?no_universal_links=true to OIDC url so EX doesn't try to handle it (#29439). Contributed by @t3chguy.
• Show a blue lock for unencrypted rooms and hide the grey shield for encrypted rooms (#30440). Contributed by @langleyd.
• Add support for Module API 1.4 (#30185). Contributed by @t3chguy.
• MVVM - Introduce some helpers for snapshot management (#30398). Contributed by @MidhunSureshR.
• A11y: move focus to right panel when opened (#30553). Contributed by @florianduros.
• Fix e2e warning icon should be white (#30539). Contributed by @florianduros.
• Remove NoOneHere disabled reason. (#30524). Contributed by @toger5.
• Fix downloading files with authenticated media API (#30520). Contributed by @t3chguy.
• Fix call permissions check confusion around element call (#30521). Contributed by @t3chguy.

[Package Updates]

[1.119.0]

• Update synapse to 1.138.0
• Full Changelog
• Support for the stable endpoint and scopes of MSC3861 & co. (#18549)
• Improve database performance of MSC4293 - Redact on Kick/Ban. (#18851)
• Do not throw an error when fetching a rejected delayed state event on startup. (#18858)
• Fix worker documentation incorrectly indicating all room Admin API requests were capable of being handled by workers. (#18853)
• Instrument _ByteProducer with tracing to measure potential dead time while writing bytes to the request. (#18804)
• Switch to OpenTracing's ContextVarsScopeManager instead of our own custom LogContextScopeManager. (#18849)
• Trace how much work is being done while "recursively fetching redactions". (#18854)
• Link upstream Twisted bug tracking the problem that explains why we have to use a Producer to write bytes to the request. (#18855)
• Introduce EventPersistencePair type. (#18857)

[Package Updates]

[1.10.16]

• Update element-web to 1.11.111
• Full Changelog
• Do not hide media from your own user by default (#29797). Contributed by @Half-Shot.
• Remember whether sidebar is shown for calls when switching rooms (#30262). Contributed by @bojidar-bg.
• Open the proper integration settings on integrations disabled error (#30538). Contributed by @Half-Shot.
• Show a "progress" dialog while invites are being sent (#30561). Contributed by @richvdh.
• Move the room list to the new ListView(backed by react-virtuoso) (#30515). Contributed by @langleyd.
• [Backport staging] Ensure container starts if it is mounted with an empty /modules directory. (#30705). Contributed by @RiotRobot.
• Fix room joining over federation not specifying vias or using aliases (#30641). Contributed by @t3chguy.
• Fix stable-suffixed MSC4133 support (#30649). Contributed by @dbkr.
• Fix i18n of message when a setting is disabled (#30646). Contributed by @dbkr.
• ListView should not handle the arrow keys if there is a modifier applied (#30633). Contributed by @langleyd.

[Package Updates]

[1.10.17]

• Update element-web to 1.11.112
• Full Changelog
• Fix CVE-2025-59161 / GHSA-m6c8-98f4-75rr

[Package Updates]

[1.119.1]

• Update synapse to 1.138.2
• Full Changelog
• Drop support for Ubuntu 24.10 Oracular Oriole, and add support for Ubuntu 25.04 Plucky Puffin. This change was applied on top of 1.138.1. (#​18962)

[Package Updates]

[1.120.0]

• Update synapse to 1.139.0
• Full Changelog
• /register requests from old application service implementations may break when using MAS

[Package Updates]

[1.120.1]

• Update synapse to 1.139.1
• Full Changelog
• Fix CVE-2025-61672 / GHSA-fh66-fcv5-jjfr. Lack of validation for device keys in Synapse before 1.139.1 allows an attacker registered on the victim homeserver to degrade federation functionality, unpredictably breaking outbound federation to other homeservers. (#17097)
• Drop support for unstable field names from the long-accepted MSC2732 (Olm fallback keys) proposal. This change allows unit tests to pass following the security patch above. (#18996)

[Package Updates]

[1.11.1]

• Update element-web to 1.12.1
• Full Changelog
• New Room List: Change the order of filters to match those on mobile (#​30905). Contributed by @​langleyd.
• New Room List: Don't clear filters on space change (#​30903). Contributed by @​langleyd.
• Add release announcement for the sounds (#​30900). Contributed by @​langleyd.
• Rich Text Editor: Add emoji suggestion support (#​30873). Contributed by @​langleyd.
• feat: Disable session lock when running in element-desktop (#​30643). Contributed by @​kaylendog.
• Improve invite dialog ui - Part 1 (#​30764). Contributed by @​florianduros.
• Update Message Sound for Element (#​30804). Contributed by @​beatdemon.
• Add new and improved ringtone (#​30761). Contributed by @​Half-Shot.
• Disable RTE formatting buttons when the content contains a slash command (#​30802). Contributed by @​langleyd.
• New Room List: Improve robustness of keyboard navigation (#​30888). Contributed by @​langleyd.

[Package Updates]

[1.120.2]

• Update synapse to 1.139.2

[Package Updates]

[1.120.3]

• Update synapse-s3-storage-provider to 1.6.0

[Package Updates]

[1.121.0]

• Update synapse to 1.140.0
• Full Changelog
• Add a new Media Query by ID Admin API that allows server admins to query and investigate the metadata of local or cached remote media via the origin/media_id identifier found in a Matrix Content URI. (#18911)
• Add a new Fetch Event Admin API to fetch an event by ID. (#18963)
• Update MSC4284: Policy Servers implementation to support signatures when available. (#18934)
• Add experimental implementation of the GET /_matrix/client/v1/rtc/transports endpoint for the latest draft of MSC4143: MatrixRTC. (#18967)
• Expose a defer_to_threadpool function in the Synapse Module API that allows modules to run a function on a separate thread in a custom threadpool. (#19032)

[Package Updates]

[1.11.2]

• Update element-web to 1.12.2
• Full Changelog
• Room List: Extend the viewport to avoid so many black spots when scrolling the room list (#​30867). Contributed by @​langleyd.
• Hide calling buttons in room header before a room is created (#​30816). Contributed by @​Half-Shot.
• Improve invite dialog ui - Part 2 (#​30836). Contributed by @​florianduros.
• Fix platform settings race condition and make auto-launch tri-state (#​30977). Contributed by @​t3chguy.
• Fix: member count in header and member list (#​30982). Contributed by @​florianduros.
• Fix duration of voice message in timeline (#​30973). Contributed by @​florianduros.
• Fix voice notes rendering at 00:00 when playback had not begun. (#​30961). Contributed by @​Half-Shot.
• Improve handling of animated images, add support for AVIF animations (#​30932). Contributed by @​t3chguy.
• Update key storage toggle when key storage status changes (#​30934). Contributed by @​uhoreg.
• Fix jitsi widget popout (#​30908). Contributed by @​dbkr.

[Package Updates]

[1.122.0]

• Update synapse to 1.141.0
• Full Changelog

[Package Updates]

[1.11.3]

• Update element-web to 1.12.3
• Full Changelog
• Remove allowVoipWithNoMedia feature flag (#31087). Contributed by @Half-Shot.
• Change module API to be an instance getter (#31025). Contributed by @dbkr.
• Show hover elements when keyboard focus is within an event tile (#31078). Contributed by @t3chguy.
• Ensure toolbar navigation pattern works in MessageActionBar (#31080). Contributed by @t3chguy.
• Ensure sent markers are hidden when showing thread summary. (#31076). Contributed by @Half-Shot.
• Fix translation in dev mode (#31045). Contributed by @florianduros.
• Fix sort order in space hierarchy (#30975). Contributed by @t3chguy.
• New Room list: don't display message preview of thread (#31043). Contributed by @florianduros.
• Revert "A11y: move focus to right panel when opened" (#30999). Contributed by @florianduros.
• Fix highlights in messages (or search results) breaking links (#30264). Contributed by @bojidar-bg.

[Package Updates]

[1.123.0]

• Update synapse to 1.142.0
• Full Changelog
• Dropped support for Python 3.9
• SQLite 3.40.0+ is now required
• Deprecation of MacOS Python wheels
• Properly stop building wheels for Python 3.9 and free-threaded CPython. (#19154)

[Package Updates]

[1.123.1]

• Update synapse to 1.142.1
• Full Changelog
• Fixed a bug introduced in v1.142.0 preventing subpaths in MAS endpoints from working. (#19186)

[Package Updates]

[1.11.4]

• Update element-web to 1.12.4
• Full Changelog
• Apply aria-hidden to emoji in SAS verification (#​31204). Contributed by @​t3chguy.
• Add options to hide header and composer of room view for the module api (#​31095). Contributed by @​florianduros.
• Experimental Module API Additions (#​30863). Contributed by @​dbkr.
• Change polls to use fieldset/legend markup (#​31160). Contributed by @​langleyd.
• Use compound Button styles for Jitsi button (#​31159). Contributed by @​Half-Shot.
• Add FocusLock to emoji picker (#​31146). Contributed by @​langleyd.
• Move room name, avatar, and topic to IOpts. (#​30981). Contributed by @​kaylendog.
• Add a devtool for looking at users and their devices (#​30983). Contributed by @​uhoreg.
• Fix room list handling of membership changes (#​31197). Contributed by @​t3chguy.
• Fix room list unable to be resized when displayed after a module (#​31186). Contributed by @​florianduros.