automation: Update docker-matrix_synapse Docker tag to v1.106.0
This MR contains the following updates:
Package | Update | Change |
---|---|---|
docker-matrix_synapse | minor |
v1.101.0 -> v1.106.0
|
⚠ Dependency Lookup Warnings ⚠
Warnings were logged while processing this repo. Please check the Dependency Dashboard for more information.
Release Notes
element-hq/synapse
v1.106.0
Synapse 1.106.0 (2024-04-30)
No significant changes since 1.106.0rc1.
Synapse 1.106.0rc1 (2024-04-25)
Features
- Send an email if the address is already bound to an user account. (#16819)
- Implement the rendezvous mechanism described by MSC4108. (#17056)
- Support delegating the rendezvous mechanism described MSC4108 to an external implementation. (#17086)
Bugfixes
- Add validation to ensure that the
limit
parameter on/publicRooms
is non-negative. (#16920) - Return
400 M_NOT_JSON
upon receiving invalid JSON in query parameters across various client and admin endpoints, rather than an internal server error. (#16923) - Make the CSAPI endpoint
/keys/device_signing/upload
idempotent. (#16943) - Redact membership events if the user requested erasure upon deactivating. (#17076)
Improved Documentation
- Add a prompt in the contributing guide to manually configure icu4c. (#17069)
- Clarify what part of message retention is still experimental. (#17099)
Internal Changes
- Use new receipts column to optimise receipt and push action SQL queries. Contributed by Nick @ Beeper (@fizzadar). (#17032, #17096)
- Fix mypy with latest Twisted release. (#17036)
- Bump minimum supported Rust version to 1.66.0. (#17079)
- Add helpers to transform Twisted requests to Rust http Requests/Responses. (#17081)
- Fix type annotation for
visited_chains
aftermypy
upgrade. (#17125)
Updates to locked dependencies
- Bump anyhow from 1.0.81 to 1.0.82. (#17095)
- Bump peaceiris/actions-gh-pages from 3.9.3 to 4.0.0. (#17087)
- Bump peaceiris/actions-mdbook from 1.2.0 to 2.0.0. (#17089)
- Bump pyasn1-modules from 0.3.0 to 0.4.0. (#17093)
- Bump pygithub from 2.2.0 to 2.3.0. (#17092)
- Bump ruff from 0.3.5 to 0.3.7. (#17094)
- Bump sigstore/cosign-installer from 3.4.0 to 3.5.0. (#17088)
- Bump twine from 4.0.2 to 5.0.0. (#17091)
- Bump types-pillow from 10.2.0.20240406 to 10.2.0.20240415. (#17090)
v1.105.1
Synapse 1.105.1 (2024-04-23)
Security advisory
The following issues are fixed in 1.105.1.
-
GHSA-3h7q-rfh9-xm4v / CVE-2024-31208 — High Severity
Weakness in auth chain indexing allows DoS from remote room members through disk fill and high CPU usage.
See the advisories for more details. If you have any questions, email security@element.io.
v1.105.0
Synapse 1.105.0 (2024-04-16)
No significant changes since 1.105.0rc1.
Synapse 1.105.0rc1 (2024-04-11)
Features
- Stabilize support for MSC4010 which clarifies the interaction of push rules and account data. Contributed by @clokep. (#17022)
- Stabilize support for MSC3981:
/relations
recursion. Contributed by @clokep. (#17023) - Add support for moving
/pushrules
off of main process. (#17037, #17038)
Bugfixes
- Fix various long-standing bugs which could cause incorrect state to be returned from
/sync
in certain situations. (#16930, #16932, #16942, #17064, #17065, #17066) - Fix server notice rooms not always being created as unencrypted rooms, even when
encryption_enabled_by_default_for_room_type
is in use (server notices are always unencrypted). (#17033) - Fix the
.m.rule.encrypted_room_one_to_one
and.m.rule.room_one_to_one
default underride push rules being in the wrong order. Contributed by @Sumpy1. (#17043)
Internal Changes
- Refactor auth chain fetching to reduce duplication. (#17044)
- Improve database performance by adding a missing index to
access_tokens.refresh_token_id
. (#17045, #17054) - Improve database performance by reducing number of receipts fetched when sending push notifications. (#17049)
Updates to locked dependencies
- Bump packaging from 23.2 to 24.0. (#17027)
- Bump regex from 1.10.3 to 1.10.4. (#17028)
- Bump ruff from 0.3.2 to 0.3.5. (#17060)
- Bump serde_json from 1.0.114 to 1.0.115. (#17041)
- Bump types-pillow from 10.2.0.20240125 to 10.2.0.20240406. (#17061)
- Bump types-requests from 2.31.0.20240125 to 2.31.0.20240406. (#17063)
- Bump typing-extensions from 4.9.0 to 4.11.0. (#17062)
v1.104.0
Synapse 1.104.0 (2024-04-02)
Bugfixes
- Fix regression when using OIDC provider. Introduced in v1.104.0rc1. (#17031)
Synapse 1.104.0rc1 (2024-03-26)
Features
- Add an OIDC config to specify extra parameters for the authorization grant URL. IT can be useful to pass an ACR value for example. (#16971)
- Add support for OIDC provider returning JWT. (#16972, #17031)
Bugfixes
- Fix a bug which meant that, under certain circumstances, we might never retry sending events or to-device messages over federation after a failure. (#16925)
- Fix various long-standing bugs which could cause incorrect state to be returned from
/sync
in certain situations. (#16949) - Fix case in which
m.fully_read
marker would not get updated. Contributed by @SpiritCroc. (#16990) - Fix bug which did not retract a user's pending knocks at rooms when their account was deactivated. Contributed by @hanadi92. (#17010)
Updates to the Docker image
- Updated
start.py
to generate config using the correct user ID when running as root (fixes #16824, #15202). (#16978)
Improved Documentation
- Add a query to force a refresh of a remote user's device list to the "Useful SQL for Admins" documentation page. (#16892)
- Minor grammatical corrections to the upgrade documentation. (#16965)
- Fix the sort order for the documentation version picker, so that newer releases appear above older ones. (#16966)
- Remove recommendation for a specific poetry version from contributing guide. (#17002)
Internal Changes
- Improve lock performance when a lot of locks are all waiting for a single lock to be released. (#16840)
- Update power level default for public rooms. (#16907)
- Improve event validation. (#16908)
- Multi-worker-docker-container: disable log buffering. (#16919)
- Refactor state delta calculation in
/sync
handler. (#16929) - Clarify docs for some room state functions. (#16950)
- Specify IP subnets in canonical form. (#16953)
- As done for SAML mapping provider, let's pass the module API to the OIDC one so the mapper can do more logic in its code. (#16974)
- Allow containers building on top of Synapse's Complement container is use the included PostgreSQL cluster. (#16985)
- Raise poetry-core version cap to 1.9.0. (#16986)
- Patch the db conn pool sooner in tests. (#17017)
Updates to locked dependencies
- Bump anyhow from 1.0.80 to 1.0.81. (#17009)
- Bump black from 23.10.1 to 24.2.0. (#16936)
- Bump cryptography from 41.0.7 to 42.0.5. (#16958)
- Bump dawidd6/action-download-artifact from 3.1.1 to 3.1.2. (#16960)
- Bump dawidd6/action-download-artifact from 3.1.2 to 3.1.4. (#17008)
- Bump jinja2 from 3.1.2 to 3.1.3. (#17005)
- Bump log from 0.4.20 to 0.4.21. (#16977)
- Bump mypy from 1.5.1 to 1.8.0. (#16901)
- Bump netaddr from 0.9.0 to 1.2.1. (#17006)
- Bump pydantic from 2.6.0 to 2.6.4. (#17004)
- Bump pyo3 from 0.20.2 to 0.20.3. (#16962)
- Bump ruff from 0.1.14 to 0.3.2. (#16994)
- Bump serde from 1.0.196 to 1.0.197. (#16963)
- Bump serde_json from 1.0.113 to 1.0.114. (#16961)
- Bump types-jsonschema from 4.21.0.20240118 to 4.21.0.20240311. (#17007)
- Bump types-psycopg2 from 2.9.21.16 to 2.9.21.20240311. (#16995)
- Bump types-pyopenssl from 23.3.0.0 to 24.0.0.20240311. (#17003)
v1.103.0
Synapse 1.103.0 (2024-03-19)
No significant changes since 1.103.0rc1.
Synapse 1.103.0rc1 (2024-03-12)
Features
- Add a new List Accounts v3 Admin API with improved deactivated user filtering capabilities. (#16874)
- Include
Retry-After
header by default per MSC4041. Contributed by @clokep. (#16947)
Bugfixes
- Fix joining remote rooms when a module uses the
on_new_event
callback. This callback may now pass partial state events instead of the full state for remote rooms. Introduced in v1.76.0. (#16973) - Fix performance issue when joining very large rooms that can cause the server to lock up. Introduced in v1.100.0. Contributed by @ggogel. (#16968)
Improved Documentation
- Add HAProxy example for single port operation to reverse proxy documentation. Contributed by Georg Pfuetzenreuter (@tacerus). (#16768)
- Improve the documentation around running Complement tests with new configuration parameters. (#16946)
- Add docs on upgrading from a very old version. (#16951)
Updates to locked dependencies
- Bump JasonEtco/create-an-issue from 2.9.1 to 2.9.2. (#16934)
- Bump anyhow from 1.0.79 to 1.0.80. (#16935)
- Bump dawidd6/action-download-artifact from 3.0.0 to 3.1.1. (#16933)
- Bump furo from 2023.9.10 to 2024.1.29. (#16939)
- Bump pyopenssl from 23.3.0 to 24.0.0. (#16937)
- Bump types-netaddr from 0.10.0.20240106 to 1.2.0.20240219. (#16938)
v1.102.0
Synapse 1.102.0 (2024-03-05)
Bugfixes
- Revert https://github.com/element-hq/synapse/pull/16756, which caused incorrect notification counts on mobile clients since v1.100.0. (#16979)
Synapse 1.102.0rc1 (2024-02-20)
Features
- A metric was added for emails sent by Synapse, broken down by type:
synapse_emails_sent_total
. Contributed by Remi Rampin. (#16881)
Bugfixes
- Do not send multiple concurrent requests for keys for the same server. (#16894)
- Fix performance issue when joining very large rooms that can cause the server to lock up. Introduced in v1.100.0. (#16903)
- Always prefer unthreaded receipt when >1 exist (MSC4102). (#16927)
Improved Documentation
- Fix a small typo in the Rooms section of the Admin API documentation. Contributed by @RainerZufall187. (#16857)
Internal Changes
- Don't invalidate the entire event cache when we purge history. (#16905)
- Add experimental config option to not send device list updates for specific users. (#16909)
- Fix incorrect docker hub link in release script. (#16910)
Updates to locked dependencies
Configuration
-
If you want to rebase/retry this MR, check this box
This MR has been generated by Renovate Bot.