Update all dependencies #23
Open
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
18.0-alpine3.22→18.1-alpine3.22v1.141.0→v1.146.0Release Notes
element-hq/synapse (ghcr.io/element-hq/synapse)
v1.146.0Compare Source
Synapse 1.146.0 (2026-01-27)
No significant changes since 1.146.0rc1.
Deprecations and Removals
Synapse 1.146.0rc1 (2026-01-20)
Features
enable_local_media_storagewhich controls whether media is additionally stored locally when using configuredmedia_storage_providers. Setting this tofalseallows off-site media storage without a local cache. Contributed by Patrice Brend'amour @dr.allgood. (#19204)m.oauthUser-Interactive Auth stage for resetting cross-signing identity with the OAuth 2.0 API. The old, unstable name (org.matrix.cross_signing_reset) is now deprecated and will be removed in a future release. (#19273)server_namelabel (instead ofinstance). (#19337)Bugfixes
/_matrix/media/v1/createbeing ratelimited for appservices even ifrate_limited: falsewas set in the registration. Contributed by @tulir @ Beeper. (#19335)InFlightGaugetyping to allow upgrading toprometheus_client0.24. (#19379)Updates to the Docker image
docker/Dockerfile-workersimage (see the Metrics section of our Docker testing docs). (#19336)Improved Documentation
Internal Changes
cancel_taskAPI to the task scheduler. (#19310)auth_types_for_eventandget_catchup_room_event_ids. (#19320)assertEqualswithassertEqualin unit test code. (#19345)mdbookfrom 0.4.17 to 0.5.2 and remove our custom table-of-contents plugin in favour of the new default functionality. (#19356)GitRelease.titlewith.namein release script. (#19358)ProxiedReactorused in worker Complement tests. (#19385)v1.145.0Compare Source
Synapse 1.145.0 (2026-01-13)
No significant changes since 1.145.0rc4.
End of Life of Ubuntu 25.04 Plucky Puffin
Ubuntu 25.04 (Plucky Puffin) will be end of life on Jan 17, 2026. Synapse will stop building packages for Ubuntu 25.04 shortly thereafter.
Updates to Locked Dependencies No Longer Included in Changelog
The "Updates to locked dependencies" section has been removed from the changelog due to lack of use and the maintenance burden. (#19254)
Synapse 1.145.0rc4 (2026-01-08)
No significant changes since 1.145.0rc3.
This RC contains a fix specifically for openSUSE packaging and no other changes.
Synapse 1.145.0rc3 (2026-01-07)
No significant changes since 1.145.0rc2.
This RC strips out unnecessary files from the wheels that were added when fixing the source distribution packaging in the previous RC.
Synapse 1.145.0rc2 (2026-01-07)
No significant changes since 1.145.0rc1.
This RC fixes the source distribution packaging for uploading to PyPI.
Synapse 1.145.0rc1 (2026-01-06)
Features
membershipsendpoint to the admin API. This is useful for forensics and T&S purposes. (#19260)admin_unsafely_bypass_quarantinequery parameter totrueon Client-Server API media download requests. (#19275)GET /_synapse/admin/v2/users/<user_id>. (#19281)federation_client.pydev script. Contributed by Denis Kasak (@dkasak). (#19300)Bugfixes
Durationwas logged incorrectly. (#19267)zope-interfaceolder than 6.2. (#19274)Updates to the Docker image
SYNAPSE_ENABLE_METRICS). (#19324)Improved Documentation
public_baseurlwhen configuring OpenID Connect authentication. (#19270)Deprecations and Removals
Internal Changes
HomeServer.shutdown()failing if the homeserver hasn't been setup yet. (#19187)Content-Lengthheader/s are invalid. (#19212)HomeServer.shutdown()failing if the homeserver failed tostart. (#19232)poetry-coretomaturin. (#19234)Clockunless explicitly enabled. (#19278)uvto test olddeps to ensure all transitive dependencies use minimum versions. (#19289)Failed to listen on 0.0.0.0, continuing because listening on [::]. (#19297)shared_extra_confis combined in our Docker configuration scripts. (#19323).github/workflows/tests.yml. (#19327)v1.144.0Compare Source
Synapse 1.144.0 (2025-12-09)
Deprecation of MacOS Python wheels
The team has decided to deprecate and stop publishing python wheels for MacOS as of this release. Synapse docker images will continue to work on MacOS, as will building Synapse from source (though note this requires a Rust compiler).
Unstable mutual rooms endpoint is now behind an experimental feature flag
Admins using the unstable MSC2666 endpoint (
/_matrix/client/unstable/uk.half-shot.msc2666/user/mutual_rooms), please check the relevant section in the upgrade notes as this release contains changes that disable that endpoint by default.No significant changes since 1.144.0rc1.
Synapse 1.144.0rc1 (2025-12-02)
Admins using the unstable MSC2666 endpoint (
/_matrix/client/unstable/uk.half-shot.msc2666/user/mutual_rooms), please check the relevant section in the upgrade notes as this release contains changes that disable that endpoint by default.Features
Bugfixes
use_frozen_dicts: True. (#19235)canonical_aliascontent would return 500 instead of 400. (#19240)Durationwas logged incorrectly. (#19267)Improved Documentation
--config-pathhelp how multiple files are merged - by merging them shallowly. (#19243)Deprecations and Removals
Internal Changes
SYNAPSE_SUPPORTED_COMPLEMENT_TEST_PACKAGESenvironment variable fromscripts-dev/complement.sh. (#19208)scripts-dev/complement.shlogic to avoidexitto facilitate being able to source it from other scripts (composable). (#19209)/_matrix/client/unstable/uk.half-shot.msc2666/user/mutual_rooms) to be available. (#19219)Durationtype. (#19223, #19229)/messagesas expected. (#19226).egg-info. (#19251)Updates to locked dependencies
v1.143.0Compare Source
Synapse 1.143.0 (2025-11-25)
Dropping support for PostgreSQL 13
In line with our deprecation policy, we've dropped support for PostgreSQL 13, as it is no longer supported upstream. This release of Synapse requires PostgreSQL 14+.
No significant changes since 1.143.0rc2.
synapse 1.143.0rc2 (2025-11-18)
Internal Changes
Synapse 1.143.0rc1 (2025-11-18)
Features
register_new_matrix_user. (#18784)POST /_matrix/client/v1/delayed_events, and allow calling this endpoint with the update action to take (send/cancel/restart) in the request path instead of the body. (#19152)Bugfixes
maindatabase. (#19181)delayed_eventstable. (#19155)Improved Documentation
Deprecations and Removals
Internal Changes
X | Ywhere possible, as per PEP 604, added in Python 3.10. (#19111)synapse_storage_events_persisted_events_sep_totalmetric by removingorigin_entitylabel. This also separates out events sent by local application services by changing theorigin_typefor such events toapplication_service. Thetypefield also only tracks common event types, and anything else is bucketed under*other*. (#19133, #19168)pyproject.tomlproject metadata to be compatible with standard Python packaging tooling. (#19137).git-blame-ignore-revs). (#19150)parameterizedto0.9.0andidnato3.3as those are the first to advertise support for Python 3.10. (#19167)sentinelfor the log recordrequestwhen no logcontext is active. (#19172)Clockutilities. (#19173)cibuildwheelconfig as it's no longer required after #19137. (#19177)PerDestinationQueue.shutdown(...)is called. (#19178)Updates to locked dependencies
v1.142.1Compare Source
Synapse 1.142.1 (2025-11-18)
Bugfixes
v1.142.0Compare Source
Synapse 1.142.0 (2025-11-11)
Dropped support for Python 3.9
This release drops support for Python 3.9, in line with our dependency deprecation policy, as it is now end of life.
SQLite 3.40.0+ is now required
The minimum supported SQLite version has been increased from 3.27.0 to 3.40.0.
If you use current versions of the matrixorg/synapse Docker images, no action is required.
Deprecation of MacOS Python wheels
The team has decided to deprecate and eventually stop publishing python wheels for MacOS. This is a burden on the team, and we're not aware of any parties that use them. Synapse docker images will continue to work on MacOS, as will building Synapse from source (though note this requires a Rust compiler).
At present, publishing MacOS Python wheels will continue for the next release (1.143.0), but will not be available after that (1.144.0+). If you do make use of these wheels downstream, please reach out to us in #synapse-dev:matrix.org. We'd love to hear from you!
Internal Changes
Synapse 1.142.0rc4 (2025-11-07)
Bugfixes
matrix_authentication_service.secret_pathwould prevent the homeserver from starting up. (#19144)Synapse 1.142.0rc3 (2025-11-04)
Internal Changes
Synapse 1.142.0rc2 (2025-11-04)
Internal Changes
Synapse 1.142.0rc1 (2025-11-04)
Features
to allow an admin to fetch the space/room hierarchy for a given space. (#19021)
Bugfixes
oidc_session_no_samesitecookie to have theSecureattribute, so the only difference between it and the pairedoidc_sessioncookie, is the configuration of theSameSiteattribute as described in the comments / cookie names. Contributed by @kieranlane. (#19079)HomeServer.shutdown(). (#19108)Improved Documentation
Deprecations and Removals
Internal Changes
CREATE TABLEsyntax. (#19020)RETURNINGas supported by SQL engines, now that the minimum-supported versions of both SQLite and PostgreSQL support it. (#19047)oidc.load_metadata()startup into_base.start(). (#19056)deferLater(...). (#19058)pyproject.toml. (#19081)pp38*skip selector from cibuildwheel to silence warning. (#19085)SIGHUPhandlers in 3rd-party code. (#19095)Image.getexifmethod instead of the experimentalImage._getexif. (#19098)/usr/local/.lockfile from appearing in built Synapse docker images. (#19107)python <= 3.14) into account when checking dependencies. (#19110)exit(1)in our composable functions). (#19116)exit(1)in our composable functions). (#19121, #19131)Updates to locked dependencies
Configuration
📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Renovate Bot.