mirrors/synapse
1
0
Fork 0
mirror of https://github.com/element-hq/synapse.git synced 2025-12-05 01:10:13 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
develop
synapse/CHANGES.md
Devon Hudson 989c4d2585 Update changelog
2025-12-02 13:11:50 -07:00

121 KiB
Raw Permalink Blame History

Synapse 1.144.0rc1 (2025-12-02)

Admins using the unstable MSC2666 endpoint (/_matrix/client/unstable/uk.half-shot.msc2666/user/mutual_rooms), please check the relevant section in the upgrade notes as this release contains changes that disable that endpoint by default.

Features

  • Add experimentatal implememntation of MSC4380 (invite blocking). (#19203)
  • Allow restarting delayed event timeouts on workers. (#19207)

Bugfixes

  • Fix a bug in the database function for fetching state deltas that could result in unnecessarily long query times. (#18960)
  • Fix v12 rooms when running with use_frozen_dicts: True. (#19235)
  • Fix bug where invalid canonical_alias content would return 500 instead of 400. (#19240)
  • Fix bug where Duration was logged incorrectly. (#19267)

Improved Documentation

  • Document in the --config-path help how multiple files are merged - by merging them shallowly. (#19243)

Deprecations and Removals

  • Stop building release wheels for MacOS. (#19225)

Internal Changes

  • Improve event filtering for Simplified Sliding Sync. (#17782)
  • Export SYNAPSE_SUPPORTED_COMPLEMENT_TEST_PACKAGES environment variable from scripts-dev/complement.sh. (#19208)
  • Refactor scripts-dev/complement.sh logic to avoid exit to facilitate being able to source it from other scripts (composable). (#19209)
  • Expire sliding sync connections that are too old or have too much pending data. (#19211)
  • Require an experimental feature flag to be enabled in order for the unstable MSC2666 endpoint (/_matrix/client/unstable/uk.half-shot.msc2666/user/mutual_rooms) to be available. (#19219)
  • Prevent changelog check CI running on @dependabot's PRs even when a human has modified the branch. (#19220)
  • Auto-fix trailing spaces in multi-line strings and comments when running the lint script. (#19221)
  • Move towards using a dedicated Duration type. (#19223, #19229)
  • Improve robustness of the SQL schema linting in CI. (#19224)
  • Add log to determine whether clients are using /messages as expected. (#19226)
  • Simplify README and add ESS Getting started section. (#19228, #19259)
  • Add a unit test for ensuring associated refresh tokens are erased when a device is deleted. (#19230)
  • Prompt user to consider adding future deprecations to the changelog in release script. (#19239)
  • Fix check of the Rust compiled code being outdated when using source checkout and .egg-info. (#19251)
  • Stop building macos wheels in CI pipeline. (#19263)

Updates to locked dependencies

  • Bump Swatinem/rust-cache from 2.8.1 to 2.8.2. (#19244)
  • Bump actions/checkout from 5.0.0 to 6.0.0. (#19213)
  • Bump actions/setup-go from 6.0.0 to 6.1.0. (#19214)
  • Bump actions/setup-python from 6.0.0 to 6.1.0. (#19245)
  • Bump attrs from 25.3.0 to 25.4.0. (#19215)
  • Bump docker/metadata-action from 5.9.0 to 5.10.0. (#19246)
  • Bump http from 1.3.1 to 1.4.0. (#19249)
  • Bump pydantic from 2.12.4 to 2.12.5. (#19250)
  • Bump pyopenssl from 25.1.0 to 25.3.0. (#19248)
  • Bump rpds-py from 0.28.0 to 0.29.0. (#19216)
  • Bump rpds-py from 0.29.0 to 0.30.0. (#19247)
  • Bump sentry-sdk from 2.44.0 to 2.46.0. (#19218)
  • Bump types-bleach from 6.2.0.20250809 to 6.3.0.20251115. (#19217)
  • Bump types-jsonschema from 4.25.1.20250822 to 4.25.1.20251009. (#19252)

Synapse 1.143.0 (2025-11-25)

Dropping support for PostgreSQL 13

In line with our deprecation policy, we've dropped support for PostgreSQL 13, as it is no longer supported upstream. This release of Synapse requires PostgreSQL 14+.

No significant changes since 1.143.0rc2.

Synapse 1.143.0rc2 (2025-11-18)

Dropping support for PostgreSQL 13

In line with our deprecation policy, we've dropped support for PostgreSQL 13, as it is no longer supported upstream. This release of Synapse requires PostgreSQL 14+.

Internal Changes

  • Fixes docker image creation in the release workflow.

Synapse 1.143.0rc1 (2025-11-18)

Features

  • Support multiple config files in register_new_matrix_user. (#18784)
  • Remove authentication from POST /_matrix/client/v1/delayed_events, and allow calling this endpoint with the update action to take (send/cancel/restart) in the request path instead of the body. (#19152)

Bugfixes

  • Fixed a longstanding bug where background updates were only run on the main database. (#19181)
  • Fixed a bug introduced in v1.142.0 preventing subpaths in MAS endpoints from working. (#19186)
  • Fix the SQLite-to-PostgreSQL migration script to correctly migrate a boolean column in the delayed_events table. (#19155)

Improved Documentation

  • Improve documentation around streams, particularly ID generators and adding new streams. (#18943)

Deprecations and Removals

  • Remove support for PostgreSQL 13. (#19170)

Internal Changes

  • Provide additional servers with federation room directory results. (#18970)
  • Add a shortcut return when there are no events to purge. (#19093)
  • Write union types as X | Y where possible, as per PEP 604, added in Python 3.10. (#19111)
  • Reduce cardinality of synapse_storage_events_persisted_events_sep_total metric by removing origin_entity label. This also separates out events sent by local application services by changing the origin_type for such events to application_service. The type field also only tracks common event types, and anything else is bucketed under *other*. (#19133, #19168)
  • Run trial tests on Python 3.14 for PRs. (#19135)
  • Update pyproject.toml project metadata to be compatible with standard Python packaging tooling. (#19137)
  • Minor speed up of processing of inbound replication. (#19138, #19145, #19146)
  • Ignore recent Python language refactors from git blame (.git-blame-ignore-revs). (#19150)
  • Bump lower bounds of dependencies parameterized to 0.9.0 and idna to 3.3 as those are the first to advertise support for Python 3.10. (#19167)
  • Point out which event caused the exception when checking MSC4293 redactions. (#19169)
  • Restore printing sentinel for the log record request when no logcontext is active. (#19172)
  • Add debug logs to track Clock utilities. (#19173)
  • Remove explicit python version skips in cibuildwheel config as it's no longer required after #19137. (#19177)
  • Fix potential lost logcontext when PerDestinationQueue.shutdown(...) is called. (#19178)
  • Fix bad deferred logcontext handling across the codebase. (#19180)

Updates to locked dependencies

  • Bump bytes from 1.10.1 to 1.11.0. (#19193)
  • Bump click from 8.1.8 to 8.3.1. (#19195)
  • Bump cryptography from 43.0.3 to 45.0.7. (#19159)
  • Bump docker/metadata-action from 5.8.0 to 5.9.0. (#19161)
  • Bump pydantic from 2.12.3 to 2.12.4. (#19158)
  • Bump pyo3-log from 0.13.1 to 0.13.2. (#19156)
  • Bump ruff from 0.14.3 to 0.14.5. (#19196)
  • Bump sentry-sdk from 2.34.1 to 2.43.0. (#19157)
  • Bump sentry-sdk from 2.43.0 to 2.44.0. (#19197)
  • Bump tomli from 2.2.1 to 2.3.0. (#19194)
  • Bump types-netaddr from 1.3.0.20240530 to 1.3.0.20251108. (#19160)

Synapse 1.142.1 (2025-11-18)

Bugfixes

  • Fixed a bug introduced in v1.142.0 preventing subpaths in MAS endpoints from working. (#19186)

Synapse 1.142.0 (2025-11-11)

Dropped support for Python 3.9

This release drops support for Python 3.9, in line with our dependency deprecation policy, as it is now end of life.

SQLite 3.40.0+ is now required

The minimum supported SQLite version has been increased from 3.27.0 to 3.40.0.

If you use current versions of the matrixorg/synapse Docker images, no action is required.

Deprecation of MacOS Python wheels

The team has decided to deprecate and eventually stop publishing python wheels for MacOS. This is a burden on the team, and we're not aware of any parties that use them. Synapse docker images will continue to work on MacOS, as will building Synapse from source (though note this requires a Rust compiler).

At present, publishing MacOS Python wheels will continue for the next release (1.143.0), but will not be available after that (1.144.0+). If you do make use of these wheels downstream, please reach out to us in #synapse-dev:matrix.org. We'd love to hear from you!

Internal Changes

  • Properly stop building wheels for Python 3.9 and free-threaded CPython. (#19154)

Synapse 1.142.0rc4 (2025-11-07)

Bugfixes

  • Fix a bug introduced in 1.142.0rc1 where any attempt to configure matrix_authentication_service.secret_path would prevent the homeserver from starting up. (#19144)

Synapse 1.142.0rc3 (2025-11-04)

Internal Changes

  • Update release scripts to prevent building wheels for free-threaded Python, as Synapse does not currently support it. (#19140)

Synapse 1.142.0rc2 (2025-11-04)

Internal Changes

  • Manually skip building Python 3.9 wheels, to prevent errors in the release workflow. (#19119)

Synapse 1.142.0rc1 (2025-11-04)

Features

  • Add support for Python 3.14. (#19055, #19134)
  • Add an Admin API to allow an admin to fetch the space/room hierarchy for a given space. (#19021)

Bugfixes

  • Fix a bug introduced in 1.111.0 where failed attempts to download authenticated remote media would not be handled correctly. (#19062)
  • Update the oidc_session_no_samesite cookie to have the Secure attribute, so the only difference between it and the paired oidc_session cookie, is the configuration of the SameSite attribute as described in the comments / cookie names. Contributed by @kieranlane. (#19079)
  • Fix a bug introduced in 1.140.0 where lost logcontext warnings would be emitted from timeouts in sync and requests made by Synapse itself. (#19090)
  • Fix a bug introdued in 1.140.0 where lost logcontext warning were emitted when using HomeServer.shutdown(). (#19108)

Improved Documentation

  • Update the link to the Debian oldstable package for SQLite. (#19047)
  • Point out additional Redis configuration options available in the worker docs. Contributed by @servisbryce. (#19073)
  • Update the list of Debian releases that the downstream Debian package is maintained for. (#19100)
  • Add a page to the documentation describing the steps the Synapse team takes to review the release notes before publishing them. (#19109)

Deprecations and Removals

  • Drop support for Python 3.9. (#19099)
  • Remove support for SQLite < 3.37.2. (#19047)

Internal Changes

  • Fix CI linter for schema delta files to correctly handle all types of CREATE TABLE syntax. (#19020)
  • Use type hinting generics in standard collections, as per PEP 585, added in Python 3.9. (#19046)
  • Always treat RETURNING as supported by SQL engines, now that the minimum-supported versions of both SQLite and PostgreSQL support it. (#19047)
  • Move oidc.load_metadata() startup into _base.start(). (#19056)
  • Remove logcontext problems caused by awaiting raw deferLater(...). (#19058)
  • Prevent duplicate logging setup when running multiple Synapse instances. (#19067)
  • Be mindful of other logging context filters in 3rd-party code and avoid overwriting log record fields unless we know the log record is relevant to Synapse. (#19068)
  • Update pydantic to v2. (#19071)
  • Update deprecated code in the release script to prevent a warning message from being printed. (#19080)
  • Update the deprecated poetry development dependencies group name in pyproject.toml. (#19081)
  • Remove pp38* skip selector from cibuildwheel to silence warning. (#19085)
  • Don't immediately exit the release script if the checkout is dirty. Instead, allow the user to clear the dirty changes and retry. (#19088)
  • Update the release script's generated announcement text to include a title and extra text for RC's. (#19089)
  • Fix lints on main branch. (#19092)
  • Use cheaper random string function in logcontext utilities. (#19094)
  • Avoid clobbering other SIGHUP handlers in 3rd-party code. (#19095)
  • Prevent duplicate GitHub draft releases being created during the Synapse release process. (#19096)
  • Use Pillow's Image.getexif method instead of the experimental Image._getexif. (#19098)
  • Prevent uv /usr/local/.lock file from appearing in built Synapse docker images. (#19107)
  • Allow Synapse's runtime dependency checking code to take packaging markers (i.e. python <= 3.14) into account when checking dependencies. (#19110)
  • Move exception handling up the stack (avoid exit(1) in our composable functions). (#19116)
  • Fix a lint error related to lifetimes in Rust 1.90. (#19118)
  • Refactor and align app entrypoints (avoid exit(1) in our composable functions). (#19121, #19131)
  • Speed up pruning of ratelimiters. (#19129)

Updates to locked dependencies

  • Bump actions/download-artifact from 5.0.0 to 6.0.0. (#19102)
  • Bump actions/upload-artifact from 4 to 5. (#19106)
  • Bump hiredis from 3.2.1 to 3.3.0. (#19103)
  • Bump icu_segmenter from 2.0.0 to 2.0.1. (#19126)
  • Bump idna from 3.10 to 3.11. (#19053)
  • Bump ijson from 3.4.0 to 3.4.0.post0. (#19051)
  • Bump markdown-it-py from 3.0.0 to 4.0.0. (#19123)
  • Bump msgpack from 1.1.1 to 1.1.2. (#19050)
  • Bump psycopg2 from 2.9.10 to 2.9.11. (#19125)
  • Bump pyyaml from 6.0.2 to 6.0.3. (#19105)
  • Bump regex from 1.11.3 to 1.12.2. (#19074)
  • Bump reqwest from 0.12.23 to 0.12.24. (#19077)
  • Bump ruff from 0.12.10 to 0.14.3. (#19124)
  • Bump sigstore/cosign-installer from 3.10.0 to 4.0.0. (#19075)
  • Bump stefanzweifel/git-auto-commit-action from 6.0.1 to 7.0.0. (#19052)
  • Bump tokio from 1.47.1 to 1.48.0. (#19076)
  • Bump types-psycopg2 from 2.9.21.20250915 to 2.9.21.20251012. (#19054)

Synapse 1.141.0 (2025-10-29)

Deprecation of MacOS Python wheels

The team has decided to deprecate and eventually stop publishing python wheels for MacOS. This is a burden on the team, and we're not aware of any parties that use them. Synapse docker images will continue to work on MacOS, as will building Synapse from source (though note this requires a Rust compiler).

Publishing MacOS Python wheels will continue for the next few releases. If you do make use of these wheels downstream, please reach out to us in #synapse-dev:matrix.org. We'd love to hear from you!

Docker images now based on Debian trixie with Python 3.13

The Docker images are now based on Debian trixie and use Python 3.13. If you are using the Docker images as a base image you may need to e.g. adjust the paths you mount any additional Python packages at.

No significant changes since 1.141.0rc2.

Synapse 1.141.0rc2 (2025-10-28)

Bugfixes

  • Fix users being unable to log in if their password, or the server's configured pepper, was too long. (#19101)

Synapse 1.141.0rc1 (2025-10-21)

Features

  • Allow using MSC4190 behavior without the opt-in registration flag. Contributed by @tulir @ Beeper. (#19031)
  • Stabilized support for MSC4326: Device masquerading for appservices. Contributed by @tulir @ Beeper. (#19033)

Bugfixes

  • Fix a bug introduced in 1.136.0 that would prevent Synapse from being able to be reload-ed more than once when running under systemd. (#19060)
  • Fix a bug introduced in 1.140.0 where an internal server error could be raised when hashing user passwords that are too long. (#19078)

Updates to the Docker image

  • Update docker image to use Debian trixie as the base and thus Python 3.13. (#19064)

Internal Changes

  • Move unique snowflake homeserver background tasks to start_background_tasks (the standard pattern for this kind of thing). (#19037)
  • Drop a deprecated field of the PyGitHub dependency in the release script and raise the dependency's minimum version to 1.59.0. (#19039)
  • Update TODO list of conflicting areas where we encounter metrics being clobbered (ApplicationService). (#19040)

Synapse 1.140.0 (2025-10-14)

Compatibility notice for users of synapse-s3-storage-provider

Deployments that make use of the synapse-s3-storage-provider module must upgrade to v1.6.0. Using older versions of the module with this release of Synapse will prevent users from being able to upload or download media.

No significant changes since 1.140.0rc1.

Synapse 1.140.0rc1 (2025-10-10)

Features

Bugfixes

  • Fix room upgrade room_config argument and documentation for user_may_create_room spam-checker callback. (#18721)
  • Compute a user's last seen timestamp from their devices' last seen timestamps instead of IPs, because the latter are automatically cleared according to user_ips_max_age. (#18948)
  • Fix bug where ephemeral events were not filtered by room ID. Contributed by @frastefanini. (#19002)
  • Update Synapse main process version string to include git info. (#19011)

Improved Documentation

  • Explain how Deferred callbacks interact with logcontexts. (#18914)
  • Fix documentation for rc_room_creation and rc_reports to clarify that a per_user rate limit is not supported. (#18998)

Deprecations and Removals

  • Remove deprecated LoggingContext.set_current_context/LoggingContext.current_context methods which already have equivalent bare methods in synapse.logging.context. (#18989)
  • Drop support for unstable field names from the long-accepted MSC2732 (Olm fallback keys) proposal. (#18996)

Internal Changes

  • Cleanly shutdown SynapseHomeServer object, allowing artifacts of embedded small hosts to be properly garbage collected. (#18828)
  • Update OEmbed providers to use 'X' instead of 'Twitter' in URL previews, following a rebrand. Contributed by @HammyHavoc. (#18767)
  • Fix server_name in logging context for multiple Synapse instances in one process. (#18868)
  • Wrap the Rust HTTP client with make_deferred_yieldable so it follows Synapse logcontext rules. (#18903)
  • Fix the GitHub Actions workflow that moves issues labeled "X-Needs-Info" to the "Needs info" column on the team's internal triage board. (#18913)
  • Disconnect background process work from request trace. (#18932)
  • Reduce overall number of calls to _get_e2e_cross_signing_signatures_for_devices by increasing the batch size of devices the query is called with, reducing DB load. (#18939)
  • Update error code used when an appservice tries to masquerade as an unknown device using MSC4326. Contributed by @tulir @ Beeper. (#18947)
  • Fix no active span when trying to log tracing error on startup (when OpenTracing is enabled). (#18959)
  • Fix run_coroutine_in_background(...) incorrectly handling logcontext. (#18964)
  • Add debug logs wherever we change current logcontext. (#18966)
  • Update dockerfile metadata to fix broken link; point to documentation website. (#18971)
  • Note that the code is additionally licensed under the Element Commercial license in SPDX expression field configs. (#18973)
  • Fix logcontext handling in timeout_deferred tests. (#18974)
  • Remove internal ReplicationUploadKeysForUserRestServlet as a follow-up to the work in https://github.com/element-hq/synapse/pull/18581 that moved device changes off the main process. (#18988)
  • Switch task scheduler from raw logcontext manipulation to using the dedicated logcontext utils. (#18990)
  • Remove MockClock() in tests. (#18992)
  • Switch back to our own custom LogContextScopeManager instead of OpenTracing's ContextVarsScopeManager which was causing problems when using the experimental SYNAPSE_ASYNC_IO_REACTOR option with tracing enabled. (#19007)
  • Remove version_string argument from HomeServer since it's always the same. (#19012)
  • Remove duplicate call to hs.start_background_tasks() introduced from a bad merge. (#19013)
  • Split homeserver creation (create_homeserver) and setup (setup). (#19015)
  • Swap near-end-of-life macos-13 GitHub Actions runner for the macos-15-intel variant. (#19025)
  • Introduce RootConfig.validate_config() which can be subclassed in HomeServerConfig to do cross-config class validation. (#19027)
  • Allow any command of the release.py script to accept a --gh-token argument. (#19035)

Updates to locked dependencies

  • Bump Swatinem/rust-cache from 2.8.0 to 2.8.1. (#18949)
  • Bump actions/cache from 4.2.4 to 4.3.0. (#18983)
  • Bump anyhow from 1.0.99 to 1.0.100. (#18950)
  • Bump authlib from 1.6.3 to 1.6.4. (#18957)
  • Bump authlib from 1.6.4 to 1.6.5. (#19019)
  • Bump bcrypt from 4.3.0 to 5.0.0. (#18984)
  • Bump docker/login-action from 3.5.0 to 3.6.0. (#18978)
  • Bump lxml from 6.0.0 to 6.0.2. (#18979)
  • Bump phonenumbers from 9.0.13 to 9.0.14. (#18954)
  • Bump phonenumbers from 9.0.14 to 9.0.15. (#18991)
  • Bump prometheus-client from 0.22.1 to 0.23.1. (#19016)
  • Bump pydantic from 2.11.9 to 2.11.10. (#19017)
  • Bump pygithub from 2.7.0 to 2.8.1. (#18952)
  • Bump regex from 1.11.2 to 1.11.3. (#18981)
  • Bump serde from 1.0.224 to 1.0.226. (#18953)
  • Bump serde from 1.0.226 to 1.0.228. (#18982)
  • Bump setuptools-rust from 1.11.1 to 1.12.0. (#18980)
  • Bump twine from 6.1.0 to 6.2.0. (#18985)
  • Bump types-pyyaml from 6.0.12.20250809 to 6.0.12.20250915. (#19018)
  • Bump types-requests from 2.32.4.20250809 to 2.32.4.20250913. (#18951)
  • Bump typing-extensions from 4.14.1 to 4.15.0. (#18956)

Synapse 1.139.2 (2025-10-07)

Bugfixes

Synapse 1.139.1 (2025-10-07)

Security Fixes

  • Fix CVE-2025-61672 / GHSA-fh66-fcv5-jjfr. Lack of validation for device keys in Synapse before 1.139.1 allows an attacker registered on the victim homeserver to degrade federation functionality, unpredictably breaking outbound federation to other homeservers. (#17097)

Deprecations and Removals

  • Drop support for unstable field names from the long-accepted MSC2732 (Olm fallback keys) proposal. This change allows unit tests to pass following the security patch above. (#18996)

Synapse 1.138.4 (2025-10-07)

Bugfixes

Synapse 1.138.3 (2025-10-07)

Security Fixes

  • Fix CVE-2025-61672 / GHSA-fh66-fcv5-jjfr. Lack of validation for device keys in Synapse before 1.139.1 allows an attacker registered on the victim homeserver to degrade federation functionality, unpredictably breaking outbound federation to other homeservers. (#17097)

Deprecations and Removals

  • Drop support for unstable field names from the long-accepted MSC2732 (Olm fallback keys) proposal. This change allows unit tests to pass following the security patch above. (#18996)

Synapse 1.139.0 (2025-09-30)

/register requests from old application service implementations may break when using MAS

If you are using Matrix Authentication Service (MAS), as of this release any Application Services that do not set inhibit_login=true when calling POST /_matrix/client/v3/register will receive the error IO.ELEMENT.MSC4190.M_APPSERVICE_LOGIN_UNSUPPORTED in response. Please see the upgrade notes for more information.

No significant changes since 1.139.0rc3.

Synapse 1.139.0rc3 (2025-09-25)

Bugfixes

  • Fix a bug introduced in 1.139.0rc1 where run_coroutine_in_background(...) incorrectly handled logcontexts, resulting in partially broken logging. (#18964)

Synapse 1.139.0rc2 (2025-09-23)

Internal Changes

  • Drop support for Ubuntu 24.10 Oracular Oriole, and add support for Ubuntu 25.04 Plucky Puffin. This change was applied on top of 1.139.0rc1. (#18962)

Synapse 1.139.0rc1 (2025-09-23)

Features

Bugfixes

  • Ensure all PDUs sent via /send pass canonical JSON checks. (#18641)
  • Fix bug where we did not send invite revocations over federation. (#18823)
  • Fix prefixed support for MSC4133. (#18875)
  • Fix open redirect in legacy SSO flow with the idp query parameter. (#18909)
  • Fix a performance regression related to the experimental Delayed Events (MSC4140) feature. (#18926)

Updates to the Docker image

  • Suppress "Applying schema" log noise bulk when SYNAPSE_LOG_TESTING is set. (#18878)

Improved Documentation

  • Clarify Python dependency constraints in our deprecation policy. (#18856)
  • Clarify necessary jwt_config parameter in OIDC documentation for authentik. Contributed by @maxkratz. (#18931)

Deprecations and Removals

  • Remove obsolete and experimental /sync/e2ee endpoint. (#18583)

Internal Changes

  • Fix LaterGauge metrics to collect from all servers. (#18791)
  • Configure Synapse to run MSC4306: Thread Subscriptions Complement tests. (#18819)
  • Remove sentinel logcontext usage where we log in setup, start and exit. (#18870)
  • Use the Enum's value for the dictionary key when responding to an admin request for experimental features. (#18874)
  • Start background tasks after we fork the process (daemonize). (#18886)
  • Better explain how we manage the logcontext in run_in_background(...) and run_as_background_process(...). (#18900, #18906)
  • Remove sentinel logcontext usage in Clock utilities like looping_call and call_later. (#18907)
  • Replace usages of the deprecated pkg_resources interface in preparation of setuptools dropping it soon. (#18910)
  • Split loading config from homeserver setup. (#18933)
  • Fix run_in_background not being awaited properly in some tests causing LoggingContext problems. (#18937)
  • Fix run_as_background_process not being awaited properly causing LoggingContext problems in experimental MSC4140: Delayed events implementation. (#18938)
  • Introduce Clock.call_when_running(...) to wrap startup code in a logcontext, ensuring we can identify which server generated the logs. (#18944)
  • Introduce Clock.add_system_event_trigger(...) to wrap system event callback code in a logcontext, ensuring we can identify which server generated the logs. (#18945)

Updates to locked dependencies

  • Bump actions/setup-go from 5.5.0 to 6.0.0. (#18891)
  • Bump actions/setup-python from 5.6.0 to 6.0.0. (#18890)
  • Bump authlib from 1.6.1 to 1.6.3. (#18921)
  • Bump jsonschema from 4.25.0 to 4.25.1. (#18897)
  • Bump log from 0.4.27 to 0.4.28. (#18892)
  • Bump phonenumbers from 9.0.12 to 9.0.13. (#18893)
  • Bump pydantic from 2.11.7 to 2.11.9. (#18922)
  • Bump serde from 1.0.219 to 1.0.223. (#18920)
  • Bump serde_json from 1.0.143 to 1.0.145. (#18919)
  • Bump sigstore/cosign-installer from 3.9.2 to 3.10.0. (#18917)
  • Bump towncrier from 24.8.0 to 25.8.0. (#18894)
  • Bump types-psycopg2 from 2.9.21.20250809 to 2.9.21.20250915. (#18918)
  • Bump types-requests from 2.32.4.20250611 to 2.32.4.20250809. (#18895)
  • Bump types-setuptools from 80.9.0.20250809 to 80.9.0.20250822. (#18924)

Synapse 1.138.2 (2025-09-24)

Internal Changes

  • Drop support for Ubuntu 24.10 Oracular Oriole, and add support for Ubuntu 25.04 Plucky Puffin. This change was applied on top of 1.138.1. (#18962)

Synapse 1.138.1 (2025-09-24)

Bugfixes

  • Fix a performance regression related to the experimental Delayed Events (MSC4140) feature. (#18926)

Synapse 1.138.0 (2025-09-09)

No significant changes since 1.138.0rc1.

Synapse 1.138.0rc1 (2025-09-02)

Features

  • Support for the stable endpoint and scopes of MSC3861 & co. (#18549)

Bugfixes

  • Improve database performance of MSC4293 - Redact on Kick/Ban. (#18851)
  • Do not throw an error when fetching a rejected delayed state event on startup. (#18858)

Improved Documentation

  • Fix worker documentation incorrectly indicating all room Admin API requests were capable of being handled by workers. (#18853)

Internal Changes

  • Instrument _ByteProducer with tracing to measure potential dead time while writing bytes to the request. (#18804)
  • Switch to OpenTracing's ContextVarsScopeManager instead of our own custom LogContextScopeManager. (#18849)
  • Trace how much work is being done while "recursively fetching redactions". (#18854)
  • Link upstream Twisted bug tracking the problem that explains why we have to use a Producer to write bytes to the request. (#18855)
  • Introduce EventPersistencePair type. (#18857)

Updates to locked dependencies

  • Bump actions/add-to-project from c0c5949b017d0d4a39f7ba888255881bdac2a823 to 4515659e2b458b27365e167605ac44f219494b66. (#18863)
  • Bump actions/checkout from 4.3.0 to 5.0.0. (#18834)
  • Bump anyhow from 1.0.98 to 1.0.99. (#18841)
  • Bump docker/login-action from 3.4.0 to 3.5.0. (#18835)
  • Bump dtolnay/rust-toolchain from b3b07ba8b418998c39fb20f53e8b695cdcc8de1b to e97e2d8cc328f1b50210efc529dca0028893a2d9. (#18862)
  • Bump phonenumbers from 9.0.11 to 9.0.12. (#18837)
  • Bump regex from 1.11.1 to 1.11.2. (#18864)
  • Bump reqwest from 0.12.22 to 0.12.23. (#18842)
  • Bump ruff from 0.12.7 to 0.12.10. (#18865)
  • Bump serde_json from 1.0.142 to 1.0.143. (#18866)
  • Bump types-bleach from 6.2.0.20250514 to 6.2.0.20250809. (#18838)
  • Bump types-jsonschema from 4.25.0.20250720 to 4.25.1.20250822. (#18867)
  • Bump types-psycopg2 from 2.9.21.20250718 to 2.9.21.20250809. (#18836)

Synapse 1.137.0 (2025-08-26)

No significant changes since 1.137.0rc1.

Synapse 1.137.0rc1 (2025-08-19)

Bugfixes

  • Fix a bug which could corrupt auth chains making it impossible to perform state resolution. (#18746)
  • Fix error message in register_new_matrix_user utility script for empty registration_shared_secret. (#18780)
  • Allow enabling MSC4108 when the stable Matrix Authentication Service integration is enabled. (#18832)

Improved Documentation

  • Include IPv6 networks in denied-peer-ips of coturn setup. Contributed by @litetex. (#18781)

Internal Changes

  • Update tests to ensure all database tables are emptied when purging a room. (#18794)
  • Instrument the encode_response part of Sliding Sync requests for more complete traces in Jaeger. (#18815)
  • Tag Sliding Sync traces when we wait_for_events. (#18816)
  • Fix portdb CI by hardcoding the new pg_dump restrict key that was added due to CVE-2025-8714. (#18824)

Updates to locked dependencies

  • Bump actions/add-to-project from 5b1a254a3546aef88e0a7724a77a623fa2e47c36 to 0c37450c4be3b6a7582b2fb013c9ebfd9c8e9300. (#18557)
  • Bump actions/cache from 4.2.3 to 4.2.4. (#18799)
  • Bump actions/checkout from 4.2.2 to 4.3.0. (#18800)
  • Bump actions/download-artifact from 4.3.0 to 5.0.0. (#18801)
  • Bump docker/metadata-action from 5.7.0 to 5.8.0. (#18773)
  • Bump mypy from 1.16.1 to 1.17.1. (#18775)
  • Bump phonenumbers from 9.0.10 to 9.0.11. (#18797)
  • Bump pygithub from 2.6.1 to 2.7.0. (#18779)
  • Bump serde_json from 1.0.141 to 1.0.142. (#18776)
  • Bump slab from 0.4.10 to 0.4.11. (#18809)
  • Bump tokio from 1.47.0 to 1.47.1. (#18774)
  • Bump types-pyyaml from 6.0.12.20250516 to 6.0.12.20250809. (#18798)
  • Bump types-setuptools from 80.9.0.20250529 to 80.9.0.20250809. (#18796)

Synapse 1.136.0 (2025-08-12)

Note: This release includes the security fixes from 1.135.2 and 1.136.0rc2, detailed below.

Bugfixes

  • Fix bug introduced in 1.135.2 and 1.136.0rc2 where the Make Room Admin API would not treat a room v12's creator power level as the highest in room. (#18805)

Synapse 1.135.2 (2025-08-11)

This is the Synapse portion of the Matrix coordinated security release. This release includes support for room version 12 which fixes a number of security vulnerabilities, including CVE-2025-49090.

The default room version is not changed. Not all clients will support room version 12 immediately, and not all users will be using the latest version of their clients. Large, public rooms are advised to wait a few weeks before upgrading to room version 12 to allow users throughout the Matrix ecosystem to update their clients.

Note: release 1.135.1 was skipped due to issues discovered during the release process.

Two patched Synapse releases are now available:

  • 1.135.2: stable release comprised of 1.135.0 + security patches
    • Upgrade to this release if you are currently running 1.135.0 or below.
  • 1.136.0rc2: unstable release candidate comprised of 1.136.0rc1 + security patches.
    • Upgrade to this release only if you are on 1.136.0rc1.

Bugfixes

  • Fix invalidation of storage cache that was broken in 1.135.0. (#18786)

Internal Changes

  • Add a parameter to upgrade_rooms(..) to allow auto join local users. (#82)
  • Speed up upgrading a room with large numbers of banned users. (#18574)

Synapse 1.136.0rc2 (2025-08-11)

  • Update MSC4293 redaction logic for room v12. (#80)

Internal Changes

  • Add a parameter to upgrade_rooms(..) to allow auto join local users. (#83)

Synapse 1.136.0rc1 (2025-08-05)

Please check the relevant section in the upgrade notes as this release contains changes to MAS support, metrics labels and the module API which may require your attention when upgrading.

Features

  • Add configurable rate limiting for the creation of rooms. (#18514)
  • Add support for MSC4293 - Redact on Kick/Ban. (#18540)
  • When admins enable themselves to see soft-failed events, they will also see if the cause is due to the policy server flagging them as spam via unsigned. (#18585)
  • Add ability to configure forward/outbound proxy via homeserver config instead of environment variables. See http_proxy, https_proxy, no_proxy_hosts. (#18686)
  • Advertise experimental support for MSC4306 (Thread Subscriptions) through /_matrix/clients/versions if enabled. (#18722)
  • Stabilise support for delegating authentication to Matrix Authentication Service. (#18759)
  • Implement the push rules for experimental MSC4306: Thread Subscriptions. (#18762)

Bugfixes

  • Allow return code 403 (allowed by C2S Spec since v1.2) when fetching profiles via federation. (#18696)
  • Register the MSC4306 (Thread Subscriptions) endpoints in the CS API when the experimental feature is enabled. (#18726)
  • Fix a long-standing bug where suspended users could not have server notices sent to them (a 403 was returned to the admin). (#18750)
  • Fix an issue that could cause logcontexts to be lost on rate-limited requests. Found by @realtyem. (#18763)
  • Fix invalidation of storage cache that was broken in 1.135.0. (#18786)

Improved Documentation

  • Minor improvements to README. (#18700)
  • Document that there can be multiple workers handling the receipts stream. (#18760)
  • Improve worker documentation for some device paths. (#18761)

Deprecations and Removals

Internal Changes

  • Add debug logging for HMAC digest verification failures when using the admin API to register users. (#18474)
  • Speed up upgrading a room with large numbers of banned users. (#18574)
  • Fix config documentation generation script on Windows by enforcing UTF-8. (#18580)
  • Refactor cache, background process, Counter, LaterGauge, GaugeBucketCollector, Histogram, and Gauge metrics to be homeserver-scoped. (#18656, #18714, #18715, #18724, #18753, #18725, #18670, #18748, #18751)
  • Reduce database usage in Sliding Sync by not querying for background update completion after the update is known to be complete. (#18718)
  • Improve order of validation and ratelimiting in room creation. (#18723)
  • Bump minimum version bound on Twisted to 21.2.0. (#18727, #18729)
  • Use twisted.internet.testing module in tests instead of deprecated twisted.test.proto_helpers. (#18728)
  • Remove obsolete /send_event replication endpoint. (#18730)
  • Update metrics linting to be able to handle custom metrics. (#18733)
  • Work around twisted.protocols.amp.TooLong error by reducing logging in some tests. (#18736)
  • Prevent "Move labelled issues to correct projects" GitHub Actions workflow from failing when an issue is already on the project board. (#18755)
  • Bump minimum supported Rust version (MSRV) to 1.82.0. Missed in #18553 (released in Synapse 1.134.0). (#18757)
  • Make Clock.sleep(...) return a coroutine, so that mypy can catch places where we don't await on it. (#18772)
  • Update implementation of MSC4306: Thread Subscriptions to include automatic subscription conflict prevention as introduced in later drafts. (#18756)

Updates to locked dependencies

  • Bump gitpython from 3.1.44 to 3.1.45. (#18743)
  • Bump mypy-zope from 1.0.12 to 1.0.13. (#18744)
  • Bump phonenumbers from 9.0.9 to 9.0.10. (#18741)
  • Bump ruff from 0.12.4 to 0.12.5. (#18742)
  • Bump sentry-sdk from 2.32.0 to 2.33.2. (#18745)
  • Bump tokio from 1.46.1 to 1.47.0. (#18740)
  • Bump types-jsonschema from 4.24.0.20250708 to 4.25.0.20250720. (#18703)
  • Bump types-psycopg2 from 2.9.21.20250516 to 2.9.21.20250718. (#18706)

Synapse 1.135.0 (2025-08-01)

No significant changes since 1.135.0rc2.

Synapse 1.135.0rc2 (2025-07-30)

Bugfixes

  • Fix user failing to deactivate with MAS when /_synapse/mas is handled by a worker. (#18716)

Internal Changes

  • Fix performance regression introduced in #18238 by adding a cache to is_server_admin. (#18747)

Synapse 1.135.0rc1 (2025-07-22)

Features

  • Add recaptcha_private_key_path and recaptcha_public_key_path config option. (#17984, #18684)
  • Add plain-text handling for rich-text topics as per MSC3765. (#18195)
  • If enabled by the user, server admins will see soft failed events over the Client-Server API. (#18238)
  • Add experimental support for MSC4277: Harmonizing the reporting endpoints. (#18263)
  • Add ability to limit amount of media uploaded by a user in a given time period. (#18527)
  • Enable workers to write directly to the device lists stream and handle device list updates, reducing load on the main process. (#18581)
  • Support arbitrary profile fields. Contributed by @clokep. (#18635)
  • Advertise support for Matrix v1.12. (#18647)
  • Add an option to issue redactions as an admin user via the admin redaction endpoint. (#18671)
  • Add experimental and incomplete support for MSC4306: Thread Subscriptions. (#18674)
  • Include event_id when getting state with ?format=event. Contributed by @tulir @ Beeper. (#18675)

Bugfixes

  • Fix CPU and database spinning when retrying sending events to servers whilst at the same time purging those events. (#18499)
  • Don't allow creation of tags with names longer than 255 bytes, as per the spec. (#18660)
  • Fix sliding_sync_connections-related errors when porting from SQLite to Postgres. (#18677)
  • Fix the MAS integration not working when Synapse is started with --daemonize or using synctl. (#18691)

Improved Documentation

  • Document that some config options for the user directory are in violation of the Matrix spec. (#18548)
  • Update rc_delayed_event_mgmt docs to the actual nesting level. Contributed by @HarHarLinks. (#18692)

Internal Changes

  • Add a dedicated internal API for Matrix Authentication Service to Synapse communication. (#18520)
  • Allow user registrations to be done on workers. (#18552)
  • Remove unnecessary HTTP replication calls. (#18564)
  • Refactor Measure block metrics to be homeserver-scoped. (#18601)
  • Refactor cache metrics to be homeserver-scoped. (#18604)
  • Unbreak "Latest dependencies" workflow by using the --without dev poetry option instead of removed --no-dev. (#18617)
  • Update URL Preview code to work with lxml 6.0.0+. (#18622)
  • Use markdown-it-py instead of commonmark in the release script. (#18637)
  • Fix typing errors with upgraded mypy version. (#18653)
  • Add doc comment explaining that config files are shallowly merged. (#18664)
  • Minor speed up of insertion into stream_positions table. (#18672)
  • Remove unused allow_no_prev_events option when creating an event. (#18676)
  • Clean up MetricsResource and Prometheus hacks. (#18687)
  • Fix dirty Cargo.lock changes appearing after install (base64). (#18689)
  • Prevent dirty Cargo.lock changes from install. (#18693)
  • Correct spelling of 'Admin token used' log line. (#18697)
  • Reduce log spam when client stops downloading media while it is being streamed to them. (#18699)

Updates to locked dependencies

  • Bump authlib from 1.6.0 to 1.6.1. (#18704)
  • Bump base64 from 0.21.7 to 0.22.1. (#18666)
  • Bump jsonschema from 4.24.0 to 4.25.0. (#18707)
  • Bump lxml from 5.4.0 to 6.0.0. (#18631)
  • Bump mypy from 1.13.0 to 1.16.1. (#18653)
  • Bump once_cell from 1.19.0 to 1.21.3. (#18710)
  • Bump phonenumbers from 9.0.8 to 9.0.9. (#18681)
  • Bump ruff from 0.12.2 to 0.12.5. (#18683, #18705)
  • Bump serde_json from 1.0.140 to 1.0.141. (#18709)
  • Bump sigstore/cosign-installer from 3.9.1 to 3.9.2. (#18708)
  • Bump types-jsonschema from 4.24.0.20250528 to 4.24.0.20250708. (#18682)

Synapse 1.134.0 (2025-07-15)

No significant changes since 1.134.0rc1.

Synapse 1.134.0rc1 (2025-07-09)

Features

  • Support for MSC4235: via query param for hierarchy endpoint. Contributed by Krishan (@kfiven). (#18070)
  • Add forget_forced_upon_leave capability as per MSC4267. (#18196)
  • Add federated_user_may_invite spam checker callback which receives the entire invite event. Contributed by @tulir @ Beeper. (#18241)

Bugfixes

  • Fix KeyError on background updates when using split main/state databases. (#18509)
  • Improve performance of device deletion by adding missing index. (#18582)
  • Fix avatar_url and displayname being sent on federation profile queries when they are not set. (#18593)
  • Respond with 401 & M_USER_LOCKED when a locked user calls POST /login, as per the spec. (#18594)
  • Ensure policy servers are not asked to scan policy server change events, allowing rooms to disable the use of a policy server while the policy server is down. (#18605)

Improved Documentation

  • Fix documentation of the Delete Room Admin API's status field. (#18519)

Deprecations and Removals

  • Stop adding the "origin" field to newly-created events (PDUs). (#18418)

Internal Changes

  • Replace PyICU crate with equivalent icu_segmenter Rust crate. (#18553, #18646)
  • Improve docstring on simple_upsert_many. (#18573)
  • Raise poetry-core version cap to 2.1.3. (#18575)
  • Raise setuptools_rust version cap to 1.11.1. (#18576)
  • Better handling of ratelimited requests. (#18595, #18600)
  • Update to Rust 1.87.0 in CI, and bump the pinned commit of the dtolnay/rust-toolchain GitHub Action to b3b07ba8b418998c39fb20f53e8b695cdcc8de1b. (#18596)
  • Speed up bulk device deletion. (#18602)
  • Speed up the building of arm-based wheels in CI. (#18618)
  • Speed up the building of Docker images in CI. (#18620)
  • Add .zed/ directory to .gitignore. (#18623)
  • Log the room ID we're purging state for. (#18625)

Updates to locked dependencies

  • Bump Swatinem/rust-cache from 2.7.8 to 2.8.0. (#18612)
  • Bump attrs from 24.2.0 to 25.3.0. (#18649)
  • Bump authlib from 1.5.2 to 1.6.0. (#18642)
  • Bump base64 from 0.21.7 to 0.22.1. (#18589)
  • Bump base64 from 0.21.7 to 0.22.1. (#18629)
  • Bump docker/build-push-action from 6.17.0 to 6.18.0. (#18497)
  • Bump docker/setup-buildx-action from 3.10.0 to 3.11.1. (#18587)
  • Bump hiredis from 3.1.0 to 3.2.1. (#18638)
  • Bump ijson from 3.3.0 to 3.4.0. (#18650)
  • Bump jsonschema from 4.23.0 to 4.24.0. (#18630)
  • Bump msgpack from 1.1.0 to 1.1.1. (#18651)
  • Bump mypy-zope from 1.0.11 to 1.0.12. (#18640)
  • Bump phonenumbers from 9.0.2 to 9.0.8. (#18652)
  • Bump pillow from 11.2.1 to 11.3.0. (#18624)
  • Bump prometheus-client from 0.21.0 to 0.22.1. (#18609)
  • Bump pyasn1-modules from 0.4.1 to 0.4.2. (#18495)
  • Bump pydantic from 2.11.4 to 2.11.7. (#18639)
  • Bump reqwest from 0.12.15 to 0.12.20. (#18590)
  • Bump reqwest from 0.12.20 to 0.12.22. (#18627)
  • Bump ruff from 0.11.11 to 0.12.1. (#18645)
  • Bump ruff from 0.12.1 to 0.12.2. (#18657)
  • Bump sentry-sdk from 2.22.0 to 2.32.0. (#18633)
  • Bump setuptools-rust from 1.10.2 to 1.11.1. (#18655)
  • Bump sigstore/cosign-installer from 3.8.2 to 3.9.0. (#18588)
  • Bump sigstore/cosign-installer from 3.9.0 to 3.9.1. (#18608)
  • Bump stefanzweifel/git-auto-commit-action from 5.2.0 to 6.0.1. (#18607)
  • Bump tokio from 1.45.1 to 1.46.0. (#18628)
  • Bump tokio from 1.46.0 to 1.46.1. (#18667)
  • Bump treq from 24.9.1 to 25.5.0. (#18610)
  • Bump types-bleach from 6.2.0.20241123 to 6.2.0.20250514. (#18634)
  • Bump types-jsonschema from 4.23.0.20250516 to 4.24.0.20250528. (#18611)
  • Bump types-opentracing from 2.4.10.6 to 2.4.10.20250622. (#18586)
  • Bump types-psycopg2 from 2.9.21.20250318 to 2.9.21.20250516. (#18658)
  • Bump types-pyyaml from 6.0.12.20241230 to 6.0.12.20250516. (#18643)
  • Bump types-setuptools from 75.2.0.20241019 to 80.9.0.20250529. (#18644)
  • Bump typing-extensions from 4.12.2 to 4.14.0. (#18654)
  • Bump typing-extensions from 4.14.0 to 4.14.1. (#18668)
  • Bump urllib3 from 2.2.2 to 2.5.0. (#18572)

Synapse 1.133.0 (2025-07-01)

Pre-built wheels are now built using the manylinux_2_28 base, which is expected to be compatible with distros using glibc 2.28 or later, including:

  • Debian 10+
  • Ubuntu 18.10+
  • Fedora 29+
  • CentOS/RHEL 8+

Previously, wheels were built using the manylinux2014 base, which was expected to be compatible with distros using glibc 2.17 or later.

Bugfixes

  • Bump cibuildwheel to 3.0.0 to fix the manylinux wheel builds. (#18615)

Synapse 1.133.0rc1 (2025-06-24)

Features

Bugfixes

  • Fix an issue where, during state resolution for v11 rooms, Synapse would incorrectly calculate the power level of the creator when there was no power levels event in the room. (#18534, #18547)
  • Fix long-standing bug where sliding sync did not honour the room_id_to_include config option. (#18535)
  • Fix an issue where "Lock timeout is getting excessive" warnings would be logged even when the lock timeout was <10 minutes. (#18543)
  • Fix an issue where Synapse could calculate the wrong power level for the creator of the room if there was no power levels event. (#18545)

Improved Documentation

  • Generate config documentation from JSON Schema file. (#18528)
  • Fix typo in user type documentation. (#18568)

Internal Changes

  • Increase performance of introspecting access tokens when using delegated auth. (#18357, #18561)
  • Log user deactivations. (#18541)
  • Enable flake8-logging and flake8-logging-format rules in Ruff and fix related issues throughout the codebase. (#18542)
  • Clean up old, unused rows from the device_federation_inbox table. (#18546)
  • Run config schema CI on develop and release branches. (#18551)
  • Add support for Twisted 25.5.0+ releases. (#18577)
  • Update PyO3 to version 0.25. (#18578)

Updates to locked dependencies

  • Bump actions/setup-python from 5.5.0 to 5.6.0. (#18555)
  • Bump base64 from 0.21.7 to 0.22.1. (#18559)
  • Bump dawidd6/action-download-artifact from 9 to 11. (#18556)
  • Bump headers from 0.4.0 to 0.4.1. (#18529)
  • Bump requests from 2.32.2 to 2.32.4. (#18533)
  • Bump types-requests from 2.32.0.20250328 to 2.32.4.20250611. (#18558)

Synapse 1.132.0 (2025-06-17)

Improved Documentation

  • Improvements to generate config documentation from JSON Schema file. (#18522)

Synapse 1.132.0rc1 (2025-06-10)

Features

  • Add support for MSC4155 Invite Filtering. (#18288)
  • Add experimental user_may_send_state_event module API callback. (#18455)
  • Add experimental get_media_config_for_user and is_user_allowed_to_upload_media_of_size module API callbacks that allow overriding of media repository maximum upload size. (#18457)
  • Add experimental get_ratelimit_override_for_user module API callback that allows overriding of per-user ratelimits. (#18458)
  • Pass room_config argument to user_may_create_room spam checker module callback. (#18486)
  • Support configuration of default and extra user types. (#18456)
  • Successful requests to /_matrix/app/v1/ping will now force Synapse to reattempt delivering transactions to appservices. (#18521)
  • Support the import of the RatelimitOverride type from synapse.module_api in modules and rename messages_per_second to per_second. (#18513)

Bugfixes

  • Remove destinations from sending if not whitelisted. (#18484)
  • Fixed room summary API incorrectly returning that a room is private in the room summary response when the join rule is omitted by the remote server. Contributed by @nexy7574. (#18493)
  • Prevent users from adding themselves to their own user ignore list. (#18508)

Improved Documentation

  • Generate config documentation from JSON Schema file. (#17892)
  • Mention CAP_NET_BIND_SERVICE as an alternative to running Synapse as root in order to bind to a privileged port. (#18408)
  • Surface hidden Admin API documentation regarding fetching of scheduled tasks. (#18516)
  • Mark the new module APIs in this release as experimental. (#18536)

Internal Changes

  • Mark dehydrated devices in the List All User Devices Admin API. (#18252)
  • Reduce disk wastage by cleaning up received_transactions older than 1 day, rather than 30 days. (#18310)
  • Distinguish all vs local events being persisted in the "Event Send Time Quantiles" graph (Grafana). (#18510)

Synapse 1.131.0 (2025-06-03)

No significant changes since 1.131.0rc1.

Synapse 1.131.0rc1 (2025-05-28)

Features

  • Add msc4263_limit_key_queries_to_users_who_share_rooms config option as per MSC4263. (#18180)
  • Add option to allow registrations that begin with _. Contributed by _ (@hex5f). (#18262)
  • Include room ID in response to the Room Deletion Status Admin API. (#18318)
  • Add support for calling Policy Servers (MSC4284) to mark events as spam. (#18387)

Bugfixes

  • Prevent race-condition in _maybe_retry_device_resync entrance. (#18391)
  • Fix the tests.handlers.test_worker_lock.WorkerLockTestCase.test_lock_contention test which could spuriously time out on RISC-V architectures due to performance differences. (#18430)
  • Fix admin redaction endpoint not redacting encrypted messages. (#18434)

Improved Documentation

  • Update room_list_publication_rules docs to consider defaults that changed in v1.126.0. Contributed by @HarHarLinks. (#18286)
  • Add advice for upgrading between major PostgreSQL versions to the database documentation. (#18445)

Internal Changes

  • Fix a memory leak in _NotifierUserStream. (#18380)
  • Fix a couple type annotations in the RootConfig/Config. (#18409)
  • Explicitly enable PyPy builds in cibuildwheels config to avoid it being disabled on a future upgrade to cibuildwheel v3. (#18417)
  • Update the PR review template to remove an erroneous line break from the final bullet point. (#18419)
  • Explain why we flush_buffer() for Python print(...) output. (#18420)
  • Add lint to ensure we don't add a CREATE/DROP INDEX in a schema delta. (#18440)
  • Allow checking only for the existence of a field in an SSO provider's response, rather than requiring the value(s) to check. (#18454)
  • Add unit tests for homeserver usage statistics. (#18463)
  • Don't move invited users to new room when shutting down room. (#18471)

Updates to locked dependencies

  • Bump actions/setup-python from 5.5.0 to 5.6.0. (#18398)
  • Bump authlib from 1.5.1 to 1.5.2. (#18452)
  • Bump docker/build-push-action from 6.15.0 to 6.17.0. (#18397, #18449)
  • Bump lxml from 5.3.0 to 5.4.0. (#18480)
  • Bump mypy-zope from 1.0.9 to 1.0.11. (#18428)
  • Bump pyo3 from 0.23.5 to 0.24.2. (#18460)
  • Bump pyo3-log from 0.12.3 to 0.12.4. (#18453)
  • Bump pyopenssl from 25.0.0 to 25.1.0. (#18450)
  • Bump ruff from 0.7.3 to 0.11.11. (#18451, #18482)
  • Bump tornado from 6.4.2 to 6.5.0. (#18459)
  • Bump setuptools from 72.1.0 to 78.1.1. (#18461)
  • Bump types-jsonschema from 4.23.0.20241208 to 4.23.0.20250516. (#18481)
  • Bump types-requests from 2.32.0.20241016 to 2.32.0.20250328. (#18427)

Synapse 1.130.0 (2025-05-20)

Bugfixes

  • Fix startup being blocked on creating a new index that was introduced in v1.130.0rc1. (#18439)
  • Fix the ordering of local messages in rooms that were affected by GHSA-v56r-hwv5-mxg6. (#18447)

Synapse 1.130.0rc1 (2025-05-13)

Features

  • Add an Admin API endpoint GET /_synapse/admin/v1/scheduled_tasks to fetch scheduled tasks. (#18214)
  • Add config option user_directory.exclude_remote_users which, when enabled, excludes remote users from user directory search results. (#18300)
  • Add support for handling GET /devices/ on workers. (#18355)

Bugfixes

  • Fix a longstanding bug where Synapse would immediately retry a failing push endpoint when a new event is received, ignoring any backoff timers. (#18363)
  • Pass leave from remote invite rejection down Sliding Sync. (#18375)

Updates to the Docker image

  • In configure_workers_and_start.py, use the same absolute path of Python in the interpreter shebang, and invoke child Python processes with sys.executable. (#18291)
  • Optimize the build of the workers image. (#18292)
  • In start_for_complement.sh, replace some external program calls with shell builtins. (#18293)
  • When generating container scripts from templates, don't add a leading newline so that their shebangs may be handled correctly. (#18295)

Improved Documentation

  • Improve formatting of the README file. (#18218)
  • Add documentation for configuring Pocket ID as an OIDC provider. (#18237)
  • Fix typo in docs about the push config option. Contributed by @HarHarLinks. (#18320)
  • Add /_matrix/federation/v1/version to list of federation endpoints that can be handled by workers. (#18377)
  • Add an Admin API endpoint GET /_synapse/admin/v1/scheduled_tasks to fetch scheduled tasks. (#18384)

Internal Changes

  • Return specific error code when adding an email address / phone number to account is not supported (MSC4178). (#17578)
  • Stop auto-provisionning missing users & devices when delegating auth to Matrix Authentication Service. Requires MAS 0.13.0 or later. (#18181)
  • Apply file hashing and existing quarantines to media downloaded for URL previews. (#18297)
  • Allow a few admin APIs used by matrix-authentication-service to run on workers. (#18313)
  • Apply should_drop_federated_event to federation invites. (#18330)
  • Allow /rooms/ admin API to be run on workers. (#18360)
  • Minor performance improvements to the notifier. (#18367)
  • Slight performance increase when using the ratelimiter. (#18369)
  • Don't validate the at_hash (access token hash) field in OIDC ID Tokens if we don't end up actually using the OIDC Access Token. (#18374, #18385)
  • Fixed test failures when using authlib 1.5.2. (#18390)
  • Refactor MSC4186 Simplified Sliding Sync room list tests to cover both new and fallback logic paths. (#18399)

Updates to locked dependencies

  • Bump actions/add-to-project from 280af8ae1f83a494cfad2cb10f02f6d13529caa9 to 5b1a254a3546aef88e0a7724a77a623fa2e47c36. (#18365)
  • Bump actions/download-artifact from 4.2.1 to 4.3.0. (#18364)
  • Bump actions/setup-go from 5.4.0 to 5.5.0. (#18426)
  • Bump anyhow from 1.0.97 to 1.0.98. (#18336)
  • Bump packaging from 24.2 to 25.0. (#18393)
  • Bump pillow from 11.1.0 to 11.2.1. (#18429)
  • Bump pydantic from 2.10.3 to 2.11.4. (#18394)
  • Bump pyo3-log from 0.12.2 to 0.12.3. (#18317)
  • Bump pyopenssl from 24.3.0 to 25.0.0. (#18315)
  • Bump sha2 from 0.10.8 to 0.10.9. (#18395)
  • Bump sigstore/cosign-installer from 3.8.1 to 3.8.2. (#18366)
  • Bump softprops/action-gh-release from 1 to 2. (#18264)
  • Bump stefanzweifel/git-auto-commit-action from 5.1.0 to 5.2.0. (#18354)
  • Bump txredisapi from 1.4.10 to 1.4.11. (#18392)
  • Bump types-jsonschema from 4.23.0.20240813 to 4.23.0.20241208. (#18305)
  • Bump types-psycopg2 from 2.9.21.20250121 to 2.9.21.20250318. (#18316)

Synapse 1.129.0 (2025-05-06)

No significant changes since 1.129.0rc2.

Synapse 1.129.0rc2 (2025-04-30)

Synapse 1.129.0rc1 was never formally released due to regressions discovered during the release process. 1.129.0rc2 fixes those regressions by reverting the affected PRs.

Internal Changes

  • Revert the slow background update introduced by #18068 in v1.128.0. (#18372)
  • Revert "Add total event, unencrypted message, and e2ee event counts to stats reporting", added in v1.129.0rc1. (#18373)

Synapse 1.129.0rc1 (2025-04-15)

Features

  • Add passthrough_authorization_parameters in OIDC configuration to allow passing parameters to the authorization grant URL. (#18232)
  • Add total_event_count, total_message_count, and total_e2ee_event_count fields to the homeserver usage statistics. (#18260)

Bugfixes

  • Fix force_tracing_for_users config when using delegated auth. (#18334)
  • Fix the token introspection cache logging access tokens when MAS integration is in use. (#18335)
  • Stop caching introspection failures when delegating auth to MAS. (#18339)
  • Fix ExternalIDReuse exception after migrating to MAS on workers with a high traffic. (#18342)
  • Fix minor performance regression caused by tracking of room participation. Regressed in v1.128.0. (#18345)

Updates to the Docker image

  • Optimize the build of the complement-synapse image. (#18294)

Internal Changes

  • Disable statement timeout during room purge. (#18133)
  • Add cache to storage functions used to auth requests when using delegated auth. (#18337)

Synapse 1.128.0 (2025-04-08)

No significant changes since 1.128.0rc1.

Synapse 1.128.0rc1 (2025-04-01)

Features

  • Add an access token introspection cache to make Matrix Authentication Service integration (MSC3861) more efficient. (#18231)
  • Add background job to clear unreferenced state groups. (#18254)
  • Hashes of media files are now tracked by Synapse. Media quarantines will now apply to all files with the same hash. (#18277, #18302, #18296)

Bugfixes

  • Add index to sliding sync (MSC4186) membership snapshot table, to fix a performance issue. (#18074)

Updates to the Docker image

  • Specify the architecture of installed packages via an APT config option, which is more reliable than appending package names with :{arch}. (#18271)
  • Always specify base image debian versions with a build argument. (#18272)
  • Allow passing arguments to start_for_complement.sh (to be sent to configure_workers_and_start.py). (#18273)
  • Make some improvements to the prefix-log script in the workers image. (#18274)
  • Use uv pip to install supervisor in the worker image. (#18275)
  • Avoid needing to download & use rsync in a build layer. (#18287)

Improved Documentation

  • Fix how to obtain access token and change naming from riot to element (#18225)
  • Correct a small typo in the SSO mapping providers documentation. (#18276)
  • Add docs for how to clear out the Poetry wheel cache. (#18283)

Internal Changes

  • Add a column participant to room_memberships table. (#18068)
  • Update Poetry to 2.1.1, including updating the lock file version. (#18251)
  • Pin GitHub Actions dependencies by commit hash. (#18255)
  • Add DB delta to remove the old state group deletion job. (#18284)

Updates to locked dependencies

  • Bump actions/add-to-project from f5473ace9aeee8b97717b281e26980aa5097023f to 280af8ae1f83a494cfad2cb10f02f6d13529caa9. (#18303)
  • Bump actions/cache from 4.2.2 to 4.2.3. (#18266)
  • Bump actions/download-artifact from 4.2.0 to 4.2.1. (#18268)
  • Bump actions/setup-python from 5.4.0 to 5.5.0. (#18298)
  • Bump actions/upload-artifact from 4.6.1 to 4.6.2. (#18304)
  • Bump authlib from 1.4.1 to 1.5.1. (#18306)
  • Bump dawidd6/action-download-artifact from 8 to 9. (#18204)
  • Bump jinja2 from 3.1.5 to 3.1.6. (#18223)
  • Bump log from 0.4.26 to 0.4.27. (#18267)
  • Bump phonenumbers from 8.13.50 to 9.0.2. (#18299)
  • Bump pygithub from 2.5.0 to 2.6.1. (#18243)
  • Bump pyo3-log from 0.12.1 to 0.12.2. (#18269)

Synapse 1.127.1 (2025-03-26)

Security

Synapse 1.127.0 (2025-03-25)

No significant changes since 1.127.0rc1.

Synapse 1.127.0rc1 (2025-03-18)

Features

  • Update MSC4140 implementation to no longer cancel a user's own delayed state events with an event type & state key that match a more recent state event sent by that user. (#17810)

Improved Documentation

  • Fixed a minor typo in the Synapse documentation. Contributed by @karuto12. (#18224)

Internal Changes

  • Remove undocumented SYNAPSE_USE_FROZEN_DICTS environment variable. (#18123)
  • Fix detection of workflow failures in the release script. (#18211)
  • Add caching support to media endpoints. (#18235)

Updates to locked dependencies

  • Bump anyhow from 1.0.96 to 1.0.97. (#18201)
  • Bump bcrypt from 4.2.1 to 4.3.0. (#18207)
  • Bump bytes from 1.10.0 to 1.10.1. (#18227)
  • Bump http from 1.2.0 to 1.3.1. (#18245)
  • Bump sentry-sdk from 2.19.2 to 2.22.0. (#18205)
  • Bump serde from 1.0.218 to 1.0.219. (#18228)
  • Bump serde_json from 1.0.139 to 1.0.140. (#18202)
  • Bump ulid from 1.2.0 to 1.2.1. (#18246)

Synapse 1.126.0 (2025-03-11)

Administrators using the Debian/Ubuntu packages from packages.matrix.org, please check the relevant section in the upgrade notes as we have recently updated the expiry date on the repository's GPG signing key. The old version of the key will expire on 2025-03-15.

No significant changes since 1.126.0rc3.

Synapse 1.126.0rc3 (2025-03-07)

Bugfixes

  • Revert the background job to clear unreferenced state groups (that was introduced in v1.126.0rc1), due to a suspected issue that causes increased disk usage. (#18222)

Synapse 1.126.0rc2 (2025-03-05)

Internal Changes

  • Fix wheel building configuration in CI by installing libatomic1. (#18212, #18213)

Synapse 1.126.0rc1 (2025-03-04)

Synapse 1.126.0rc1 was not fully released due to an error in CI.

Features

  • Define ratelimit configuration for delayed event management. (#18019)
  • Add form_secret_path config option. (#18090)
  • Add the --no-secrets-in-config command line option. (#18092)
  • Add background job to clear unreferenced state groups. (#18154)
  • Add support for specifying/overriding id_token_signing_alg_values_supported for an OpenID identity provider. (#18177)
  • Add worker_replication_secret_path config option. (#18191)
  • Add support for specifying/overriding redirect_uri in the authorization and token requests against an OpenID identity provider. (#18197)

Bugfixes

  • Make sure we advertise registration as disabled when MSC3861 is enabled. (#17661)
  • Prevent suspended users from sending encrypted messages. (#18157)
  • Cleanup deleted state group references. (#18165)
  • Fix MSC4108 QR-code login not working with some reverse-proxy setups. (#18178)
  • Support device IDs that can't be represented in a scope when delegating auth to Matrix Authentication Service 0.15.0+. (#18174)

Updates to the Docker image

  • Speed up the building of the Docker image. (#18038)

Improved Documentation

  • Move incorrectly placed version indicator in User Event Redaction Admin API docs. (#18152)
  • Document suspension Admin API. (#18162)

Deprecations and Removals

  • Disable room list publication by default. (#18175)

Updates to locked dependencies

  • Bump anyhow from 1.0.95 to 1.0.96. (#18187)
  • Bump authlib from 1.4.0 to 1.4.1. (#18190)
  • Bump click from 8.1.7 to 8.1.8. (#18189)
  • Bump log from 0.4.25 to 0.4.26. (#18184)
  • Bump pyo3-log from 0.12.0 to 0.12.1. (#18046)
  • Bump serde from 1.0.217 to 1.0.218. (#18183)
  • Bump serde_json from 1.0.138 to 1.0.139. (#18186)
  • Bump sigstore/cosign-installer from 3.8.0 to 3.8.1. (#18185)
  • Bump types-psycopg2 from 2.9.21.20241019 to 2.9.21.20250121. (#18188)

Synapse 1.125.0 (2025-02-25)

No significant changes since 1.125.0rc1.

Synapse 1.125.0rc1 (2025-02-18)

Features

  • Add functionality to be able to use multiple values in SSO feature attribute_requirements. (#17949)
  • Add experimental config options admin_token_path and client_secret_path for MSC3861. (#18004)
  • Add get_current_time_msec() method to the module API for sound time comparisons with Synapse. (#18144)

Bugfixes

  • Update the response when a client attempts to add an invalid email address to the user's account from a 500, to a 400 with error text. (#18125)
  • Fix user directory search when using a legacy module with a check_username_for_spam callback. Broke in v1.122.0. (#18135)

Updates to the Docker image

  • Add SYNAPSE_HTTP_PROXY/SYNAPSE_HTTPS_PROXY/SYNAPSE_NO_PROXY environment variables to pass through specifically to the Synapse process (instead of needing to apply http_proxy/https_proxy/no_proxy globally). (#18158)

Improved Documentation

  • Add Oracle Linux 8 and 9 installation instructions. (#17436)
  • Document missing server config options (daemonize, print_pidfile, user_agent_suffix, use_frozen_dicts, manhole). (#18122)
  • Document consequences of replacing secrets. (#18138)
  • Make burst_count field an integer in rc_presence config documentation example. (#18159)

Internal Changes

  • Overload DatabasePool.simple_select_one_txn to return non-None when the allow_none parameter is False. (#17616)
  • Python 3.8 EOL: compile native extensions with the 3.9 ABI and use typing hints from the standard library. (#17967)
  • Add log message when worker lock timeouts get large. (#18124)
  • Make it explicit that you can buy an AGPL-alternative commercial license from Element. (#18134)
  • Fix the 'Fix linting' GitHub Actions workflow. (#18136)
  • Do not log at the exception-level when clients provide empty since token to /sync API. (#18139)
  • Reduce database load of user search when using large search terms. (#18172)

Updates to locked dependencies

  • Bump bcrypt from 4.2.0 to 4.2.1. (#18127)
  • Bump bytes from 1.9.0 to 1.10.0. (#18149)
  • Bump gitpython from 3.1.43 to 3.1.44. (#18128)
  • Bump hiredis from 3.0.0 to 3.1.0. (#18169)
  • Bump serde_json from 1.0.137 to 1.0.138. (#18129)
  • Bump service-identity from 24.1.0 to 24.2.0. (#18171)
  • Bump sigstore/cosign-installer from 3.7.0 to 3.8.0. (#18147)
  • Bump twine from 6.0.1 to 6.1.0. (#18170)
  • Bump types-pyyaml from 6.0.12.20240917 to 6.0.12.20241230. (#18097)
  • Bump ulid from 1.1.4 to 1.2.0. (#18148)

Synapse 1.124.0 (2025-02-11)

No significant changes since 1.124.0rc3.

Synapse 1.124.0rc3 (2025-02-07)

Bugfixes

  • Fix regression in performance of sending events due to superfluous reads and locks. Introduced in v1.124.0rc1. (#18141)

Synapse 1.124.0rc2 (2025-02-05)

Bugfixes

  • Fix regression where persisting events in some rooms could fail after a previous unclean shutdown. Introduced in v1.124.0rc1. (#18137)

Synapse 1.124.0rc1 (2025-02-04)

Bugfixes

  • Add rate limit rc_presence.per_user. This prevents load from excessive presence updates sent by clients via sync api. Also rate limit /_matrix/client/v3/presence as per the spec. Contributed by @rda0. (#18000)
  • Deactivated users will no longer automatically accept an invite when auto_accept_invites is enabled. (#18073)
  • Fix join being denied after being invited over federation. Also fixes other out-of-band membership transitions. (#18075)
  • Updates contributed docker-compose.yml file to PostgreSQL v15, as v12 is no longer supported by Synapse. Contributed by @maxkratz. (#18089)
  • Fix rare edge case where state groups could be deleted while we are persisting new events that reference them. (#18107, #18130, #18131)
  • Raise an error if someone is using an incorrect suffix in a config duration string. (#18112)
  • Fix a bug where the Delete Room Admin API would fail if the block parameter was set to true and a worker other than the main process was configured to handle background tasks. (#18119)

Internal Changes

  • Increase the length of the generated nonce parameter when perfoming OIDC logins to comply with the TI-Messenger spec. (#18109)

Updates to locked dependencies

  • Bump dawidd6/action-download-artifact from 7 to 8. (#18108)
  • Bump log from 0.4.22 to 0.4.25. (#18098)
  • Bump python-multipart from 0.0.18 to 0.0.20. (#18096)
  • Bump serde_json from 1.0.135 to 1.0.137. (#18099)
  • Bump types-bleach from 6.1.0.20240331 to 6.2.0.20241123. (#18082)

Synapse 1.123.0 (2025-01-28)

No significant changes since 1.123.0rc1.

Synapse 1.123.0rc1 (2025-01-21)

Features

Bugfixes

  • Fix membership caches not updating in state reset scenarios. (#17732)
  • Fix rare race where on upgrade to v1.122.0 a long running database upgrade could lock out new events from being received or sent. (#18091)

Improved Documentation

  • Document tls option for a worker instance in instance_map. (#18064)

Deprecations and Removals

Internal Changes

  • Increase invite rate limits (rc_invites.per_issuer) for Complement. (#18072)

Updates to locked dependencies

  • Bump jinja2 from 3.1.4 to 3.1.5. (#18067)
  • Bump mypy from 1.12.1 to 1.13.0. (#18083)
  • Bump pillow from 11.0.0 to 11.1.0. (#18084)
  • Bump pyo3 from 0.23.3 to 0.23.4. (#18079)
  • Bump pyopenssl from 24.2.1 to 24.3.0. (#18062)
  • Bump serde_json from 1.0.134 to 1.0.135. (#18081)
  • Bump ulid from 1.1.3 to 1.1.4. (#18080)

Synapse 1.122.0 (2025-01-14)

Please note that this version of Synapse drops support for PostgreSQL 11 and 12. The minimum version of PostgreSQL supported is now version 13.

No significant changes since 1.122.0rc1.

Synapse 1.122.0rc1 (2025-01-07)

Deprecations and Removals

  • Remove support for PostgreSQL 11 and 12. Contributed by @clokep. (#18034)

Features

  • Added the email.tlsname config option. This allows specifying the domain name used to validate the SMTP server's TLS certificate separately from the email.smtp_host to connect to. (#17849)
  • Module developers will have access to the user ID of the requester when adding check_username_for_spam callbacks to spam_checker_module_callbacks. Contributed by Wilson@Pangea.chat. (#17916)
  • Add endpoints to the Admin API to fetch the number of invites the provided user has sent after a given timestamp, fetch the number of rooms the provided user has joined after a given timestamp, and get report IDs of event reports against a provided user (i.e. where the user was the sender of the reported event). (#17948)
  • Support stable account suspension from MSC3823. (#17964)
  • Add macaroon_secret_key_path config option. (#17983)

Bugfixes

  • Fix bug when rejecting withdrew invite with a third_party_rules module, where the invite would be stuck for the client. (#17930)
  • Properly purge state groups tables when purging a room with the Admin API. (#18024)
  • Fix a bug preventing the admin redaction endpoint from working on messages from remote users. (#18029, #18043)

Improved Documentation

  • Update synapse.app.generic_worker documentation to only recommend GET requests for stream writer routes by default, unless the worker is also configured as a stream writer. Contributed by @evoL. (#17954)
  • Add documentation for the previously-undocumented last_seen_ts query parameter to the query user Admin API. (#17976)
  • Improve documentation for the TaskScheduler class. (#17992)
  • Fix example in reverse proxy docs to include server port. (#17994)
  • Update Alpine Linux Synapse Package Maintainer within the installation instructions. (#17846)

Internal Changes

  • Add RoomID & EventID rust types. (#17996)
  • Fix various type errors across the codebase. (#17998)
  • Disable DB statement timeout when doing a room purge since it can be quite long. (#18017)
  • Remove some remaining uses of twisted.internet.defer.returnValue. Contributed by Colin Watson. (#18020)
  • Refactor get_profile to no longer include fields with a value of None. (#18063)

Updates to locked dependencies

  • Bump anyhow from 1.0.93 to 1.0.95. (#18012, #18045)
  • Bump authlib from 1.3.2 to 1.4.0. (#18048)
  • Bump dawidd6/action-download-artifact from 6 to 7. (#17981)
  • Bump http from 1.1.0 to 1.2.0. (#18013)
  • Bump mypy from 1.11.2 to 1.12.1. (#17999)
  • Bump mypy-zope from 1.0.8 to 1.0.9. (#18047)
  • Bump pillow from 10.4.0 to 11.0.0. (#18015)
  • Bump pydantic from 2.9.2 to 2.10.3. (#18014)
  • Bump pyicu from 2.13.1 to 2.14. (#18060)
  • Bump pyo3 from 0.23.2 to 0.23.3. (#18001)
  • Bump python-multipart from 0.0.16 to 0.0.18. (#17985)
  • Bump sentry-sdk from 2.17.0 to 2.19.2. (#18061)
  • Bump serde from 1.0.215 to 1.0.217. (#18031, #18059)
  • Bump serde_json from 1.0.133 to 1.0.134. (#18044)
  • Bump twine from 5.1.1 to 6.0.1. (#18049)

Changelogs for older versions can be found here.

Reference in New Issue View Git Blame Copy Permalink