Release 2026-01-26 - (expected chart version 5.26.0)

[zebot]

[2026-01-26] (Chart Release 5.26.0)

Release notes

• Elasticsearch re-indexing requires postgres access now. If you run brig-index directly anywhere, make sure to add the relevant settings. The Elasticsearch index must be refilled from Cassandra in order for the changes to the search results to take effect. See https://docs.wire.com/latest/developer/reference/elastic-search.html?h=index#refill-es-documents-from-cassandra

• Conversation codes can now be migrated to PostgreSQL. For existing installations:

  • Set postgresMigration.conversationCodes: migration-to-postgresql in both galley and background-worker.
  • Run the backfill with migrateConversationCodes: true.
  • Wait for wire_conv_codes_migration_finished to reach 1.0.
  • Switch to postgresMigration.conversationCodes: postgresql and disable migrateConversationCodes. (WPB-22811 migrate conversation codes table to postgres #4961)

• The background-worker defaults for the postgres migration now match galley and point to cassandra (previously postgres). This currenlty only affects the background job, which is not expected to run before postgres is in use. However, if you relied on the defaults after migrating to postgres, please update your config to keep using postgres. (WPB-22901 [fix] background-worker default postgres settings #4965)

• Since the index mapping has been updated, the elastic search index
  needs to be refilled from Cassandra, see
  https://docs.wire.com/latest/developer/reference/elastic-search.html?h=index#refill-es-documents-from-cassandra

• Drop support for kubernetes versions below 1.27 (helm: drop support for ingress below k8s 1.27 #4969)

API changes

• New end-point GET /teams/:tid/apps listing all team apps. ([WPB-22793] GET /teams/:tid/apps #4960)

• Add type field to search results received from GET /search/contacts (WPB-21366: Add user type field to GET /search/contacts #4913)

Features

• nginx-ingress-services: Add federator.tls.issuer option to use a separate ClusterIssuer for federation mTLS certificates. (ingress-nginx chart: add seperate issuer for federator #4964)

• Log changes to IdP configurations made via the IdP REST API to syslog. (Log SAML IdP changes #4935)

• Allow commit bundles to contain one application message. The message must be for the epoch after the commit, and it gets sent after the commit has been accepted. (Application message in commit bundles #4929)

Bug fixes and other updates

• background-worker's default settings for postgresMigration have been correctly set to cassandra. (WPB-22901 [fix] background-worker default postgres settings #4965)

Internal changes

• Circumvent potential performance issue with TVar (Map ...) (WPB-22541 prevent performance issues with TVar Map #4948)

• Migration of conversation codes from cassandra to postgres (WPB-22811 Move CodeStore to wire-subsystems #4959, WPB-22811 migrate conversation codes table to postgres #4961)

• • Test for team and user email templates added
  • Refactoring to make email rendering testable
  • Removed SMS and call templates (WPB-19804 Email template validation #4699)

• Drop cryptobox, handle prekey in pure Haskell. (WPB-19575: Drop Cryptobox #4719)

• Move Feature Flags read to wire-subsystems. (WPB-21964: Add Wire Meetings creation endpoint #4918, WPB-21964 follow-up: moved TeamFeatureStore interpreter to subsystems #4974)

• Federator: Replace Linux-only hinotify with cross-platform fsnotify library
  for certificate file monitoring. This enables native file system watching
  on both Linux and macOS, removing the need for platform-specific stubs. (Add macOS build support and cross-platform fsnotify for federator #4955)

• Simplify and modernize the Nix setup of rusty-jwt-tools. This includes
  updating to version 0.14.0. (Simplify rusty-jwt-tools Nix setup #4952)