All Versions
327
Latest Version
Avg Release Cycle
7 days
Latest Release
518 days ago

Changelog History
Page 8

  • v1.35.0.rc2 Changes

    May 27, 2021

    ๐Ÿ›  Bugfixes

    • ๐Ÿ›  Fix a bug introduced in v1.35.0rc1 when calling the spaces summary API via a GET request. (#10079)
  • v1.35.0.rc1 Changes

    May 25, 2021

    ๐Ÿ”‹ Features

    • โž• Add experimental support to allow a user who could join a restricted room to view it in the spaces summary. (#9922, #10007, #10038)
    • โฌ‡๏ธ Reduce memory usage when joining very large rooms over federation. (#9958)
    • โž• Add a configuration option which allows enabling opentracing by user id. (#9978)
    • 0๏ธโƒฃ Enable experimental support for MSC2946 (spaces summary API) and MSC3083 (restricted join rules) by default. (#10011)

    ๐Ÿ›  Bugfixes

    • Fix a bug introduced in v1.26.0 which meant that synapse_port_db would not correctly initialise some postgres sequences, requiring manual updates afterwards. (#9991)
    • ๐Ÿ›  Fix synctl's --no-daemonize parameter to work correctly with worker processes. (#9995)
    • ๐Ÿ›  Fix a validation bug introduced in v1.34.0 in the ordering of spaces in the space summary API. (#10002)
    • ๐Ÿ›  Fixed deletion of new presence stream states from database. (#10014, #10033)
    • ๐Ÿ›  Fixed a bug with very high resolution image uploads throwing internal server errors. (#10029)

    โšก๏ธ Updates to the Docker image

    • ๐Ÿ›  Fix bug introduced in Synapse 1.33.0 which caused a Permission denied: '/homeserver.log' error when starting Synapse with the generated log configuration. Contributed by Sergio Miguรฉns Iglesias. (#10045)

    ๐Ÿ‘Œ Improved Documentation

    • โž• Add hardened systemd files as proposed in #9760 and added them to contrib/. Change the docs to reflect the presence of these files. (#9803)
    • ๐Ÿ“š Clarify documentation around SSO mapping providers generating unique IDs and localparts. (#9980)
    • ๐Ÿ“š Updates to the PostgreSQL documentation (postgres.md). (#9988, #9989)
    • ๐Ÿ›  Fix broken link in user directory documentation. Contributed by @junquera. (#10016)
    • โž• Add missing room state entry to the table of contents of room admin API. (#10043)

    ๐Ÿ—„ Deprecations and Removals

    • โœ‚ Removed support for the deprecated tls_fingerprints configuration setting. Contributed by Jerin J Titus. (#9280)

    Internal Changes

    • Allow sending full presence to users via workers other than the one that called ModuleApi.send_local_online_presence_to. (#9823)
    • โšก๏ธ Update comments in the space summary handler. (#9974)
    • Minor enhancements to the @cachedList descriptor. (#9975)
    • Split multipart email sending into a dedicated handler. (#9977)
    • โš™ Run black on files in the scripts directory. (#9981)
    • โž• Add missing type hints to synapse.util module. (#9982)
    • Simplify a few helper functions. (#9984, #9985, #9986)
    • โœ‚ Remove unnecessary property from SQLBaseStore. (#9987)
    • โœ‚ Remove keylen param on LruCache. (#9993)
    • โšก๏ธ Update the Grafana dashboard in contrib/. (#10001)
    • โž• Add a batching queue implementation. (#10017)
    • โฌ‡๏ธ Reduce memory usage when verifying signatures on large numbers of events at once. (#10018)
    • Properly invalidate caches for destination retry timings every (instead of expiring entries every 5 minutes). (#10036)
    • ๐Ÿ›  Fix running complement tests with Synapse workers. (#10039)
    • Fix typo in get_state_ids_for_event docstring where the return type was incorrect. (#10050)

    Synapse 1.34.0 (2021-05-17)

    This release deprecates the room_invite_state_types configuration setting. See the upgrade notes for instructions on updating your configuration file to use the new room_prejoin_state setting.

    This release also deprecates the POST /_synapse/admin/v1/rooms/<room_id>/delete admin API route. Server administrators are encouraged to update their scripts to use the new DELETE /_synapse/admin/v1/rooms/<room_id> route instead.

    No significant changes since v1.34.0rc1.

  • v1.34.0.rc1 Changes

    May 12, 2021

    ๐Ÿ”‹ Features

    • โž• Add experimental option to track memory usage of the caches. (#9881)
    • Add support for DELETE /_synapse/admin/v1/rooms/<room_id>. (#9889)
    • โž• Add limits to how often Synapse will GC, ensuring that large servers do not end up GC thrashing if gc_thresholds has not been correctly set. (#9902)
    • ๐Ÿ‘Œ Improve performance of sending events for worker-based deployments using Redis. (#9905, #9950, #9951)
    • ๐Ÿ‘Œ Improve performance after joining a large room when presence is enabled. (#9910, #9916)
    • Support stable identifiers for MSC1772 Spaces. m.space.child events will now be taken into account when populating the experimental spaces summary response. Please see the upgrade notes if you have customised room_invite_state_types in your configuration. (#9915, #9966)
    • ๐Ÿ‘Œ Improve performance of backfilling in large rooms. (#9935)
    • โž• Add a config option to allow you to prevent device display names from being shared over federation. Contributed by @aaronraimist. (#9945)
    • โšก๏ธ Update support for MSC2946: Spaces Summary. (#9947, #9954)

    ๐Ÿ›  Bugfixes

    • ๐Ÿ›  Fix a bug introduced in v1.32.0 where the associated connection was improperly logged for SQL logging statements. (#9895)
    • Correct the type hint for the user_may_create_room_alias method of spam checkers. It is provided a RoomAlias, not a str. (#9896)
    • ๐Ÿ›  Fix bug where user directory could get out of sync if room visibility and membership changed in quick succession. (#9910)
    • Include the origin_server_ts property in the experimental MSC2946 support to allow clients to properly sort rooms. (#9928)
    • ๐Ÿ›  Fix bugs introduced in v1.23.0 which made the PostgreSQL port script fail when run with a newly-created SQLite database. (#9930)
    • Fix a bug introduced in Synapse 1.29.0 which caused m.room_key_request to-device messages sent from one user to another to be dropped. (#9961, #9965)
    • ๐Ÿ›  Fix a bug introduced in v1.27.0 preventing users and appservices exempt from ratelimiting from creating rooms with many invitees. (#9968)

    โšก๏ธ Updates to the Docker image

    • โž• Add startup_delay to docker healthcheck to reduce waiting time for coming online and update the documentation with extra options. Contributed by @Maquis196. (#9913)

    ๐Ÿ‘Œ Improved Documentation

    • โž• Add port argument to the Postgres database sample config section. (#9911)

    ๐Ÿ—„ Deprecations and Removals

    • Mark as deprecated POST /_synapse/admin/v1/rooms/<room_id>/delete. (#9889)

    Internal Changes

    • โฌ‡๏ธ Reduce the length of Synapse's access tokens. (#5588)
    • Export jemalloc stats to Prometheus if it is being used. (#9882)
    • โž• Add type hints to presence handler. (#9885)
    • โฌ‡๏ธ Reduce memory usage of the LRU caches. (#9886)
    • โž• Add type hints to the synapse.handlers module. (#9896)
    • Time response time for external cache requests. (#9904)
    • Minor fixes to the make_full_schema.sh script. (#9931)
    • ๐Ÿšš Move database schema files into a common directory. (#9932)
    • โž• Add debug logging for lost/delayed to-device messages. (#9959)

    Synapse 1.33.2 (2021-05-11)

    โšก๏ธ Due to the security issue highlighted below, server administrators are encouraged to update Synapse. We are not aware of these vulnerabilities being exploited in the wild.

    ๐Ÿ”’ Security advisory

    ๐Ÿš€ This release fixes a denial of service attack (CVE-2021-29471) against Synapse's push rules implementation. Server admins are encouraged to upgrade.

    Internal Changes

    • Unpin attrs dependency. (#9946)

    Synapse 1.33.1 (2021-05-06)

    ๐Ÿ›  Bugfixes

    • ๐Ÿ›  Fix bug where /sync would break if using the latest version of attrs dependency, by pinning to a previous version. (#9937)

    Synapse 1.33.0 (2021-05-05)

    ๐Ÿ”‹ Features

    • ๐Ÿ— Build Debian packages for Ubuntu 21.04 (Hirsute Hippo). (#9909)
  • v1.33.0.rc2 Changes

    April 29, 2021

    ๐Ÿ›  Bugfixes

    • ๐Ÿ›  Fix tight loop when handling presence replication when using workers. Introduced in v1.33.0rc1. (#9900)
  • v1.33.0.rc1 Changes

    April 28, 2021

    ๐Ÿ”‹ Features

    • โšก๏ธ Update experimental support for MSC3083: restricting room access via group membership. (#9800, #9814)
    • โž• Add experimental support for handling presence on a worker. (#9819, #9820, #9828, #9850)
    • Return a new template when an user attempts to renew their account multiple times with the same token, stating that their account is set to expire. This replaces the invalid token template that would previously be shown in this case. This change concerns the optional account validity feature. (#9832)

    ๐Ÿ›  Bugfixes

    • ๐Ÿ›  Fixes the OIDC SSO flow when using a public_baseurl value including a non-root URL path. (#9726)
    • ๐Ÿ›  Fix thumbnail generation for some sites with non-standard content types. Contributed by @rkfg. (#9788)
    • โž• Add some sanity checks to identity server passed to 3PID bind/unbind endpoints. (#9802)
    • Limit the size of HTTP responses read over federation. (#9833)
    • ๐Ÿ›  Fix a bug which could cause Synapse to get stuck in a loop of resyncing device lists. (#9867)
    • ๐Ÿ›  Fix a long-standing bug where errors from federation did not propagate to the client. (#9868)

    ๐Ÿ‘Œ Improved Documentation

    • โž• Add a note to the docker docs mentioning that we mirror upstream's supported Docker platforms. (#9801)

    Internal Changes

    • โž• Add a dockerfile for running Synapse in worker-mode under Complement. (#9162)
    • โฌ†๏ธ Apply pyupgrade across the codebase. (#9786)
    • ๐Ÿšš Move some replication processing out of generic_worker. (#9796)
    • Replace HomeServer.get_config() with inline references. (#9815)
    • ๐Ÿ“‡ Rename some handlers and config modules to not duplicate the top-level module. (#9816)
    • Fix a long-standing bug which caused max_upload_size to not be correctly enforced. (#9817)
    • โฌ‡๏ธ Reduce CPU usage of the user directory by reusing existing calculated room membership. (#9821)
    • Small speed up for joining large remote rooms. (#9825)
    • ๐Ÿ‘• Introduce flake8-bugbear to the test suite and fix some of its lint violations. (#9838)
    • Only store the raw data in the in-memory caches, rather than objects that include references to e.g. the data stores. (#9845)
    • Limit length of accepted email addresses. (#9855)
    • โœ‚ Remove redundant synapse.types.Collection type definition. (#9856)
    • ๐Ÿ– Handle recently added rate limits correctly when using --no-rate-limit with the demo scripts. (#9858)
    • โœ… Disable invite rate-limiting by default when running the unit tests. (#9871)
    • โœ… Pass a reactor into SynapseSite to make testing easier. (#9874)
    • ๐Ÿ‘‰ Make DomainSpecificString an attrs class. (#9875)
    • โž• Add type hints to synapse.api.auth and synapse.api.auth_blocking modules. (#9876)
    • โœ‚ Remove redundant _PushHTTPChannel test class. (#9878)
    • โœ‚ Remove backwards-compatibility code for Python versions < 3.6. (#9879)
    • ๐ŸŽ Small performance improvement around handling new local presence updates. (#9887)

    Synapse 1.32.2 (2021-04-22)

    ๐Ÿš€ This release includes a fix for a regression introduced in 1.32.0.

    ๐Ÿ›  Bugfixes

    • ๐Ÿ›  Fix a regression in Synapse 1.32.0 and 1.32.1 which caused LoggingContext errors in plugins. (#9857)

    Synapse 1.32.1 (2021-04-21)

    ๐Ÿš€ This release fixes a regression in Synapse 1.32.0 that caused connected Prometheus instances to become unstable.

    ๐Ÿš€ However, as this release is still subject to the LoggingContext change in 1.32.0, โฌ‡๏ธ it is recommended to remain on or downgrade to 1.31.0.

    ๐Ÿ›  Bugfixes

    • ๐Ÿ›  Fix a regression in Synapse 1.32.0 which caused Synapse to report large numbers of Prometheus time series, potentially overwhelming Prometheus instances. (#9854)

    Synapse 1.32.0 (2021-04-20)

    Note: This release introduces a regression that can overwhelm connected Prometheus instances. This issue was not present in โฌ‡๏ธ 1.32.0rc1. If affected, it is recommended to downgrade to 1.31.0 in the meantime, and follow these instructions ๐Ÿ”Š to clean up any excess writeahead logs.

    Note: This release also mistakenly included a change that may affected Synapse ๐ŸŒฒ modules that import synapse.logging.context.LoggingContext, such as synapse-s3-storage-provider. ๐Ÿ›  This will be fixed in a later Synapse version.

    Note: This release requires Python 3.6+ and Postgres 9.6+ or SQLite 3.22+.

    This release removes the deprecated GET /_synapse/admin/v1/users/<user_id> admin API. Please use the v2 API instead, which has improved capabilities.

    This release requires Application Services to use type m.login.application_service when registering users via the /_matrix/client/r0/register endpoint to comply with the spec. Please ensure your Application Services are up to date.

    ๐Ÿ“ฆ If you are using the packages.matrix.org Debian repository for Synapse packages, โšก๏ธ note that we have recently updated the expiry date on the gpg signing key. If you see an error similar to The following signatures were invalid: EXPKEYSIG F473DD4473365DE1, you will need to get a fresh copy of the keys. You can do so with:

    sudo wget -O /usr/share/keyrings/matrix-org-archive-keyring.gpg https://packages.matrix.org/debian/matrix-org-archive-keyring.gpg
    

    ๐Ÿ›  Bugfixes

    • ๐Ÿ›  Fix the log lines of nested logging contexts. Broke in 1.32.0rc1. (#9829)
  • v1.32.0.rc1 Changes

    April 13, 2021

    Note: This release requires Python 3.6+ and Postgres 9.6+ or SQLite 3.22+.

    This release removes the deprecated GET /_synapse/admin/v1/users/<user_id> admin API. Please use the v2 API instead, which has improved capabilities.

    This release requires Application Services to use type m.login.application_services when registering users via the /_matrix/client/r0/register endpoint to comply with the spec. Please ensure your Application Services are up to date.

    ๐Ÿ”‹ Features

    • โž• Add a Synapse module for routing presence updates between users. (#9491)
    • โž• Add an admin API to manage ratelimit for a specific user. (#9648)
    • ๐ŸŒฒ Include request information in structured logging output. (#9654)
    • Add order_by to the admin API GET /_synapse/admin/v2/users. Contributed by @dklimpel. (#9691)
    • Replace the room_invite_state_types configuration setting with room_prejoin_state. (#9700)
    • โž• Add experimental support for MSC3083: restricting room access via group membership. (#9717, #9735)
    • โšก๏ธ Update experimental support for Spaces: include m.room.create in the room state sent with room-invites. (#9710)
    • Synapse now requires Python 3.6 or later. It also requires Postgres 9.6 or later or SQLite 3.22 or later. (#9766)

    ๐Ÿ›  Bugfixes

    • Prevent synapse_forward_extremities and synapse_excess_extremity_events Prometheus metrics from initially reporting zero-values after startup. (#8926)
    • ๐Ÿ›  Fix recently added ratelimits to correctly honour the application service rate_limited flag. (#9711)
    • Fix longstanding bug which caused duplicate key value violates unique constraint "remote_media_cache_thumbnails_media_origin_media_id_thumbna_key" errors. (#9725)
    • ๐Ÿ›  Fix bug where sharded federation senders could get stuck repeatedly querying the DB in a loop, using lots of CPU. (#9770)
    • ๐Ÿ›  Fix duplicate logging of exceptions thrown during federation transaction processing. (#9780)

    โšก๏ธ Updates to the Docker image

    • ๐Ÿณ Move opencontainers labels to the final Docker image such that users can inspect them. (#9765)

    ๐Ÿ‘Œ Improved Documentation

    • Make the allowed_local_3pids regex example in the sample config stricter. (#9719)

    ๐Ÿ—„ Deprecations and Removals

    • Remove old admin API GET /_synapse/admin/v1/users/<user_id>. (#9401)
    • Make /_matrix/client/r0/register expect a type of m.login.application_service when an Application Service registers a user, to align with the relevant spec. (#9548)

    Internal Changes

    • ๐Ÿ—„ Replace deprecated imp module with successor importlib. Contributed by Cristina Muรฑoz. (#9718)
    • Experiment with GitHub Actions for CI. (#9661)
    • ๐Ÿ‘• Introduce flake8-bugbear to the test suite and fix some of its lint violations. (#9682)
    • โšก๏ธ Update scripts-dev/complement.sh to use a local checkout of Complement, allow running a subset of tests and have it use Synapse's Complement test blacklist. (#9685)
    • ๐Ÿ‘Œ Improve Jaeger tracing for to_device messages. (#9686)
    • โž• Add release helper script for automating part of the Synapse release process. (#9713)
    • โž• Add type hints to expiring cache. (#9730)
    • โœ… Convert various testcases to HomeserverTestCase. (#9736)
    • Start linting mypy with no_implicit_optional. (#9742)
    • โž• Add missing type hints to federation handler and server. (#9743)
    • โœ… Check that a ConfigError is raised, rather than simply Exception, when appropriate in homeserver config file generation tests. (#9753)
    • ๐Ÿ›  Fix incompatibility with tox 2.5. (#9769)
    • โœ… Enable Complement tests for MSC2946: Spaces Summary API. (#9771)
    • ๐Ÿ“ฆ Use mock from the standard library instead of a separate package. (#9772)
    • โšก๏ธ Update Black configuration to target Python 3.6. (#9781)
    • โž• Add option to skip unit tests when building Debian packages. (#9793)

    Synapse 1.31.0 (2021-04-06)

    Note: As announced in v1.25.0, and in line with the deprecation policy for platform dependencies, this is the last release to support Python 3.5 and PostgreSQL 9.5. Future versions of Synapse will require Python 3.6+ and PostgreSQL 9.6+, as per our [deprecation policy](docs/deprecation_policy.md).

    ๐Ÿš€ This is also the last release that the Synapse team will be publishing packages for Debian Stretch and Ubuntu Xenial.

    ๐Ÿ‘Œ Improved Documentation

    • โž• Add a document describing the deprecation policy for platform dependencies. (#9723)

    Internal Changes

    • ๐Ÿ‘• Revert using dmypy run in lint script. (#9720)
    • ๐Ÿ“Œ Pin flake8-bugbear's version. (#9734)
  • v1.31.0.rc1 Changes

    March 30, 2021

    ๐Ÿ”‹ Features

    • โž• Add support to OpenID Connect login for requiring attributes on the userinfo response. Contributed by Hubbe King. (#9609)
    • โž• Add initial experimental support for a "space summary" API. (#9643, #9652, #9653)
    • โž• Add support for the busy presence state as described in MSC3026. (#9644)
    • โž• Add support for credentials for proxy authentication in the HTTPS_PROXY environment variable. (#9657)

    ๐Ÿ›  Bugfixes

    • ๐Ÿ›  Fix a longstanding bug that could cause issues when editing a reply to a message. (#9585)
    • ๐Ÿ›  Fix the /capabilities endpoint to return m.change_password as disabled if the local password database is not used for authentication. Contributed by @dklimpel. (#9588)
    • Check if local passwords are enabled before setting them for the user. (#9636)
    • ๐Ÿ›  Fix a bug where federation sending can stall due to concurrent access database exceptions when it falls behind. (#9639)
    • ๐Ÿ›  Fix a bug introduced in Synapse 1.30.1 which meant the suggested pip incantation to install an updated cryptography was incorrect. (#9699)

    โšก๏ธ Updates to the Docker image

    • ๐Ÿ— Speed up Docker builds and make it nicer to test against Complement while developing (install all dependencies before copying the project). (#9610)
    • ๐Ÿณ Include opencontainers labels in the Docker image. (#9612)

    ๐Ÿ‘Œ Improved Documentation

    • ๐Ÿ†• Clarify that register_new_matrix_user is present also when installed via non-pip package. (#9074)
    • ๐Ÿ“š Update source install documentation to mention platform prerequisites before the source install steps. (#9667)
    • ๐Ÿ‘Œ Improve worker documentation for fallback/web auth endpoints. (#9679)
    • โšก๏ธ Update the sample configuration for OIDC authentication. (#9695)

    Internal Changes

    • Preparatory steps for removing redundant outlier data from event_json.internal_metadata column. (#9411)
    • โž• Add type hints to the caching module. (#9442)
    • ๐Ÿ‘• Introduce flake8-bugbear to the test suite and fix some of its lint violations. (#9499, #9659)
    • โž• Add additional type hints to the Homeserver object. (#9631, #9638, #9675, #9681)
    • Only save remote cross-signing and device keys if they're different from the current ones. (#9634)
    • ๐Ÿ“‡ Rename storage function to fix spelling and not conflict with another function's name. (#9637)
    • ๐Ÿ‘Œ Improve performance of federation catch up by sending the latest events in the room to the remote, rather than just the last event sent by the local server. (#9640, #9664)
    • โœ… In the federation_client commandline client, stop automatically adding the URL prefix, so that servlets on other prefixes can be tested. (#9645)
    • In the federation_client commandline client, handle inline signing_keys in homeserver.yaml. (#9647)
    • ๐Ÿ›  Fixed some antipattern issues to improve code quality. (#9649)
    • โž• Add a storage method for pulling all current user presence state from the database. (#9650)
    • Import HomeServer from the proper module. (#9665)
    • 0๏ธโƒฃ Increase default join ratelimiting burst rate. (#9674)
    • โž• Add type hints to third party event rules and visibility modules. (#9676)
    • โฌ†๏ธ Bump mypy-zope to 0.2.13 to fix "Cannot determine consistent method resolution order (MRO)" errors when running mypy a second time. (#9678)
    • ๐Ÿ‘‰ Use interpreter from $PATH via /usr/bin/env instead of absolute paths in various scripts. (#9689)
    • ๐Ÿ‘‰ Make it possible to use dmypy. (#9692)
    • Suppress "CryptographyDeprecationWarning: int_from_bytes is deprecated". (#9698)
    • ๐ŸŽ Use dmypy run in lint script for improved performance in type-checking while developing. (#9701)
    • ๐Ÿ›  Fix undetected mypy error when using Python 3.6. (#9703)
    • ๐Ÿ›  Fix type-checking CI on develop. (#9709)

    Synapse 1.30.1 (2021-03-26)

    ๐Ÿš€ This release is identical to Synapse 1.30.0, with the exception of explicitly setting a minimum version of Python's Cryptography library to ensure that users ๐Ÿ”’ of Synapse are protected from the recent OpenSSL security advisories, especially CVE-2021-3449.

    0๏ธโƒฃ Note that Cryptography defaults to bundling its own statically linked copy of OpenSSL, which means that you may not be protected by your operating system's โšก๏ธ security updates.

    ๐Ÿ‘ It's also worth noting that Cryptography no longer supports Python 3.5, so ๐Ÿš€ admins deploying to older environments may not be protected against this or ๐Ÿ‘ future vulnerabilities. Synapse will be dropping support for Python 3.5 at the end of March.

    โšก๏ธ Updates to the Docker image

    • ๐Ÿณ Ensure that the docker container has up to date versions of openssl. (#9697)

    Internal Changes

    • Enforce that cryptography dependency is up to date to ensure it has the most recent openssl patches. (#9697)

    Synapse 1.30.0 (2021-03-22)

    ๐Ÿš€ Note that this release deprecates the ability for appservices to call POST /_matrix/client/r0/register without the body parameter type. Appservice developers should use a type value of m.login.application_service as ๐Ÿ’… per the spec. ๐Ÿš€ In future releases, calling this endpoint with an access token - but without a m.login.application_service type - will fail.

    No significant changes.

  • v1.30.0.rc1 Changes

    March 16, 2021

    ๐Ÿ”‹ Features

    • โž• Add prometheus metrics for number of users successfully registering and logging in. (#9510, #9511, #9573)
    • Add synapse_federation_last_sent_pdu_time and synapse_federation_last_received_pdu_time prometheus metrics, which monitor federation delays by reporting the timestamps of messages sent and received to a set of remote servers. (#9540)
    • โž• Add support for generating JSON Web Tokens dynamically for use as OIDC client secrets. (#9549)
    • Optimise handling of incomplete room history for incoming federation. (#9601)
    • ๐Ÿ‘ Finalise support for allowing clients to pick an SSO Identity Provider (MSC2858). (#9617)
    • Tell spam checker modules about the SSO IdP a user registered through if one was used. (#9626)

    ๐Ÿ›  Bugfixes

    • ๐Ÿ›  Fix long-standing bug when generating thumbnails for some images with transparency: TypeError: cannot unpack non-iterable int object. (#9473)
    • Purge chain cover indexes for events that were purged prior to Synapse v1.29.0. (#9542, #9583)
    • ๐Ÿ›  Fix bug where federation requests were not correctly retried on 5xx responses. (#9567)
    • ๐Ÿ›  Fix re-activating an account via the admin API when local passwords are disabled. (#9587)
    • ๐Ÿ›  Fix a bug introduced in Synapse 1.20 which caused incoming federation transactions to stack up, causing slow recovery from outages. (#9597)
    • ๐Ÿ›  Fix a bug introduced in v1.28.0 where the OpenID Connect callback endpoint could error with a MacaroonInitException. (#9620)
    • Fix Internal Server Error on GET /_synapse/client/saml2/authn_response request. (#9623)

    โšก๏ธ Updates to the Docker image

    • ๐Ÿณ Make use of an improved malloc implementation (jemalloc) in the docker image. (#8553)

    ๐Ÿ‘Œ Improved Documentation

    • โž• Add relayd entry to reverse proxy example configurations. (#9508)
    • ๐Ÿ‘Œ Improve the SAML2 upgrade notes for 1.27.0. (#9550)
    • ๐Ÿ”— Link to the "List user's media" admin API from the media admin API docs. (#9571)
    • ๐Ÿ“š Clarify the spam checker modules documentation example to mention that parse_config is a required method. (#9580)
    • ๐Ÿ”ง Clarify the sample configuration for stats settings. (#9604)

    ๐Ÿ—„ Deprecations and Removals

    • The synapse_federation_last_sent_pdu_age and synapse_federation_last_received_pdu_age prometheus metrics have been removed. They are replaced by synapse_federation_last_sent_pdu_time and synapse_federation_last_received_pdu_time. (#9540)
    • ๐Ÿš€ Registering an Application Service user without using the m.login.application_service login type will be unsupported in an upcoming Synapse release. (#9559)

    Internal Changes

    • โž• Add tests to ResponseCache. (#9458)
    • โž• Add type hints to purge room and server notice admin API. (#9520)
    • โž• Add extra logging to ObservableDeferred when callbacks throw exceptions. (#9523)
    • ๐Ÿ›  Fix incorrect type hints. (#9528, #9543, #9591, #9608, #9618)
    • โž• Add an additional test for purging a room. (#9541)
    • โž• Add a .git-blame-ignore-revs file with the hashes of auto-formatting. (#9560)
    • Increase the threshold before which outbound federation to a server goes into "catch up" mode, which is expensive for the remote server to handle. (#9561)
    • ๐Ÿ›  Fix spurious errors reported by the config-lint.sh script. (#9562)
    • ๐Ÿ›  Fix type hints and tests for BlacklistingAgentWrapper and BlacklistingReactorWrapper. (#9563)
    • Do not have mypy ignore type hints from unpaddedbase64. (#9568)
    • ๐Ÿ‘Œ Improve efficiency of calculating the auth chain in large rooms. (#9576)
    • Convert synapse.types.Requester to an attrs class. (#9586)
    • โž• Add logging for redis connection setup. (#9590)
    • ๐Ÿ‘Œ Improve logging when processing incoming transactions. (#9596)
    • โœ‚ Remove unused stats.retention setting, and emit a warning if stats are disabled. (#9604)
    • Prevent attempting to bundle aggregations for state events in /context APIs. (#9619)

    Synapse 1.29.0 (2021-03-08)

    โฌ†๏ธ Note that synapse now expects an X-Forwarded-Proto header when used with a reverse proxy. Please see the [upgrade notes](docs/upgrade.md#upgrading-to-v1290) for more details on this change.

    No significant changes.

  • v1.29.0.rc1 Changes

    March 04, 2021

    ๐Ÿ”‹ Features

    • โž• Add rate limiters to cross-user key sharing requests. (#8957)
    • Add order_by to the admin API GET /_synapse/admin/v1/users/<user_id>/media. Contributed by @dklimpel. (#8978)
    • โž• Add some configuration settings to make users' profile data more private. (#9203)
    • The no_proxy and NO_PROXY environment variables are now respected in proxied HTTP clients with the lowercase form taking precedence if both are present. Additionally, the lowercase https_proxy environment variable is now respected in proxied HTTP clients on top of existing support for the uppercase HTTPS_PROXY form and takes precedence if both are present. Contributed by Timothy Leung. (#9372)
    • Add a configuration option, user_directory.prefer_local_users, which when enabled will make it more likely for users on the same server as you to appear above other users. (#9383, #9385)
    • โž• Add support for regenerating thumbnails if they have been deleted but the original image is still stored. (#9438)
    • โž• Add support for X-Forwarded-Proto header when using a reverse proxy. (#9472, #9501, #9512, #9539)

    ๐Ÿ›  Bugfixes

    • ๐Ÿ›  Fix a bug where users' pushers were not all deleted when they deactivated their account. (#9285, #9516)
    • ๐Ÿ›  Fix a bug where a lot of unnecessary presence updates were sent when joining a room. (#9402)
    • ๐Ÿ›  Fix a bug that caused multiple calls to the experimental shared_rooms endpoint to return stale results. (#9416)
    • ๐Ÿ›  Fix a bug in single sign-on which could cause a "No session cookie found" error. (#9436)
    • ๐Ÿ›  Fix bug introduced in v1.27.0 where allowing a user to choose their own username when logging in via single sign-on did not work unless an idp_icon was defined. (#9440)
    • Fix a bug introduced in v1.26.0 where some sequences were not properly configured when running synapse_port_db. (#9449)
    • ๐Ÿ›  Fix deleting pushers when using sharded pushers. (#9465, #9466, #9479, #9536)
    • ๐Ÿ›  Fix missing startup checks for the consistency of certain PostgreSQL sequences. (#9470)
    • ๐Ÿ›  Fix a long-standing bug where the media repository could leak file descriptors while previewing media. (#9497)
    • Properly purge the event chain cover index when purging history. (#9498)
    • ๐Ÿ›  Fix missing chain cover index due to a schema delta not being applied correctly. Only affected servers that ran development versions. (#9503)
    • ๐Ÿ›  Fix a bug introduced in v1.25.0 where /_synapse/admin/join/ would fail when given a room alias. (#9506)
    • ๐Ÿ‘ท Prevent presence background jobs from running when presence is disabled. (#9530)
    • ๐Ÿ›  Fix rare edge case that caused a background update to fail if the server had rejected an event that had duplicate auth events. (#9537)

    ๐Ÿ‘Œ Improved Documentation

    • โšก๏ธ Update the example systemd config to propagate reloads to individual units. (#9463)

    Internal Changes

    • โž• Add documentation and type hints to parse_duration. (#9432)
    • โœ‚ Remove vestiges of uploads_path configuration setting. (#9462)
    • โž• Add a comment about systemd-python. (#9464)
    • โœ… Test that we require validated email for email pushers. (#9496)
    • ๐Ÿ‘ Allow python to generate bytecode for synapse. (#9502)
    • ๐Ÿ›  Fix incorrect type hints. (#9515, #9518)
    • โž• Add type hints to device and event report admin API. (#9519)
    • โž• Add type hints to user admin API. (#9521)
    • โฌ†๏ธ Bump the versions of mypy and mypy-zope used for static type checking. (#9529)

    Synapse 1.28.0 (2021-02-25)

    ๐Ÿš€ Note that this release drops support for ARMv7 in the official Docker images, due to repeated problems building for ARMv7 (and the associated maintenance burden this entails).

    ๐Ÿ“š This release also fixes the documentation included in v1.27.0 around the callback URI for SAML2 identity providers. If your server is configured to use single sign-on via a SAML2 IdP, you may need to make configuration changes. Please review the [upgrade notes](docs/upgrade.md) for more details on these changes.

    Internal Changes

    • โช Revert change in v1.28.0rc1 to remove the deprecated SAML endpoint. (#9474)
  • v1.28.0.rc1 Changes

    February 19, 2021

    โš  Removal warning

    ๐Ÿš€ The v1 list accounts API is deprecated and will be removed in a future release. This API was undocumented and misleading. It can be replaced by the v2 list accounts API, which has been available since Synapse 1.7.0 (2019-12-13).

    Please check if you're using any scripts which use the admin API and replace GET /_synapse/admin/v1/users/<user_id> with GET /_synapse/admin/v2/users.

    ๐Ÿ”‹ Features

    • ๐Ÿ†• New admin API to get the context of an event: /_synapse/admin/rooms/{roomId}/context/{eventId}. (#9150)
    • Further improvements to the user experience of registration via single sign-on. (#9300, #9301)
    • โž• Add hook to spam checker modules that allow checking file uploads and remote downloads. (#9311)
    • โž• Add support for receiving OpenID Connect authentication responses via form POSTs rather than GETs. (#9376)
    • โž• Add the shadow-banning status to the admin API for user info. (#9400)

    ๐Ÿ›  Bugfixes

    • ๐Ÿ›  Fix long-standing bug where sending email notifications would fail for rooms that the server had since left. (#9257)
    • ๐Ÿ›  Fix bug introduced in Synapse 1.27.0rc1 which meant the "session expired" error page during SSO registration was badly formatted. (#9296)
    • Assert a maximum length for some parameters for spec compliance. (#9321, #9393)
    • ๐Ÿ›  Fix additional errors when previewing URLs: "AttributeError 'NoneType' object has no attribute 'xpath'" and "ValueError: Unicode strings with encoding declaration are not supported. Please use bytes input or XML fragments without declaration.". (#9333)
    • ๐Ÿ›  Fix a bug causing Synapse to impose the wrong type constraints on fields when processing responses from appservices to /_matrix/app/v1/thirdparty/user/{protocol}. (#9361)
    • ๐Ÿ›  Fix bug where Synapse would occasionally stop reconnecting to Redis after the connection was lost. (#9391)
    • ๐Ÿ›  Fix a long-standing bug when upgrading a room: "TypeError: '>' not supported between instances of 'NoneType' and 'int'". (#9395)
    • Reduce the amount of memory used when generating the URL preview of a file that is larger than the max_spider_size. (#9421)
    • ๐Ÿ›  Fix a long-standing bug in the deduplication of old presence, resulting in no deduplication. (#9425)
    • The ui_auth.session_timeout config option can now be specified in terms of number of seconds/minutes/etc/. Contributed by Rishabh Arya. (#9426)
    • ๐Ÿ›  Fix a bug introduced in v1.27.0: "TypeError: int() argument must be a string, a bytes-like object or a number, not 'NoneType." related to the user directory. (#9428)

    โšก๏ธ Updates to the Docker image

    • โฌ‡๏ธ Drop support for ARMv7 in Docker images. (#9433)

    ๐Ÿ‘Œ Improved Documentation

    • Reorganize CHANGELOG.md. (#9281)
    • Add note to auto_join_rooms config option explaining existing rooms must be publicly joinable. (#9291)
    • Correct name of Synapse's service file in TURN howto. (#9308)
    • ๐Ÿ›  Fix the braces in the oidc_providers section of the sample config. (#9317)
    • โšก๏ธ Update installation instructions on Fedora. (#9322)
    • โž• Add HTTP/2 support to the nginx example configuration. Contributed by David Vo. (#9390)
    • โšก๏ธ Update docs for using Gitea as OpenID provider. (#9404)
    • Document that pusher instances are shardable. (#9407)
    • ๐Ÿ›  Fix erroneous documentation from v1.27.0 about updating the SAML2 callback URL. (#9434)

    ๐Ÿ—„ Deprecations and Removals

    • Deprecate old admin API GET /_synapse/admin/v1/users/<user_id>. (#9429)

    Internal Changes

    • ๐Ÿ›  Fix 'object name reserved for internal use' errors with recent versions of SQLite. (#9003)
    • โž• Add experimental support for running Synapse with PyPy. (#9123)
    • 0๏ธโƒฃ Deny access to additional IP addresses by default. (#9240)
    • โšก๏ธ Update the Cursor type hints to better match PEP 249. (#9299)
    • โž• Add debug logging for SRV lookups. Contributed by @Bubu. (#9305)
    • ๐Ÿ‘Œ Improve logging for OIDC login flow. (#9307)
    • Share the code for handling required attributes between the CAS and SAML handlers. (#9326)
    • ๐Ÿ“‡ Clean up the code to load the metadata for OpenID Connect identity providers. (#9362)
    • โœ… Convert tests to use HomeserverTestCase. (#9377, #9396)
    • โšก๏ธ Update the version of black used to 20.8b1. (#9381)
    • ๐Ÿ‘ Allow OIDC config to override discovered values. (#9384)
    • โœ‚ Remove some dead code from the acceptance of room invites path. (#9394)
    • Clean up an unused method in the presence handler code. (#9408)

    Synapse 1.27.0 (2021-02-16)

    ๐Ÿš€ Note that this release includes a change in Synapse to use Redis as a cache โ”€ as well as a pub/sub mechanism โ”€ if Redis support is enabled for workers. No action is needed by server administrators, and we do not expect resource usage of the Redis instance to change dramatically.

    ๐Ÿš€ This release also changes the callback URI for OpenID Connect (OIDC) and SAML2 identity providers. If your server is configured to use single sign-on via an OIDC/OAuth2 or SAML2 IdP, you may need to make configuration changes. Please review the [upgrade notes](docs/upgrade.md) for more details on these changes.

    ๐Ÿš€ This release also changes escaping of variables in the HTML templates for SSO or email notifications. If you have customised these templates, please review the [upgrade notes](docs/upgrade.md) for more details on these changes.

    ๐Ÿ›  Bugfixes

    • ๐Ÿ›  Fix building Docker images for armv7. (#9405)