Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package matrix-synapse for openSUSE:Factory
checked in at 2025-08-26 16:13:44
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/matrix-synapse (Old)
and /work/SRC/openSUSE:Factory/.matrix-synapse.new.30751 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "matrix-synapse"
Tue Aug 26 16:13:44 2025 rev:138 rq:1301417 version:1.137.0
Changes:
--------
--- /work/SRC/openSUSE:Factory/matrix-synapse/matrix-synapse.changes
2025-08-13 16:31:12.110120031 +0200
+++ /work/SRC/openSUSE:Factory/.matrix-synapse.new.30751/matrix-synapse.changes
2025-08-26 16:13:48.951242177 +0200
@@ -1,0 +2,41 @@
+Tue Aug 26 10:47:11 UTC 2025 - Marcus Rueckert <mrueck...@suse.de>
+
+- Update to 1.137.0
+ - Bugfixes
+ - Fix a bug which could corrupt auth chains making it
+ impossible to perform state resolution. (#18746)
+ - Fix error message in register_new_matrix_user utility script
+ for empty registration_shared_secret. (#18780)
+ - Allow enabling MSC4108 when the stable Matrix Authentication
+ Service integration is enabled. (#18832)
+ - Improved Documentation
+ - Include IPv6 networks in denied-peer-ips of coturn setup.
+ Contributed by @litetex. (#18781)
+ - Internal Changes
+ - Update tests to ensure all database tables are emptied when
+ purging a room. (#18794)
+ - Instrument the encode_response part of Sliding Sync requests
+ for more complete traces in Jaeger. (#18815)
+ - Tag Sliding Sync traces when we wait_for_events. (#18816)
+ - Fix portdb CI by hardcoding the new pg_dump restrict key that
+ was added due to CVE-2025-8714. (#18824)
+ - Updates to locked dependencies
+ - Bump actions/add-to-project from
+ 5b1a254a3546aef88e0a7724a77a623fa2e47c36 to
+ 0c37450c4be3b6a7582b2fb013c9ebfd9c8e9300. (#18557)
+ - Bump actions/cache from 4.2.3 to 4.2.4. (#18799)
+ - Bump actions/checkout from 4.2.2 to 4.3.0. (#18800)
+ - Bump actions/download-artifact from 4.3.0 to 5.0.0. (#18801)
+ - Bump docker/metadata-action from 5.7.0 to 5.8.0. (#18773)
+ - Bump mypy from 1.16.1 to 1.17.1. (#18775)
+ - Bump phonenumbers from 9.0.10 to 9.0.11. (#18797)
+ - Bump pygithub from 2.6.1 to 2.7.0. (#18779)
+ - Bump serde_json from 1.0.141 to 1.0.142. (#18776)
+ - Bump slab from 0.4.10 to 0.4.11. (#18809)
+ - Bump tokio from 1.47.0 to 1.47.1. (#18774)
+ - Bump types-pyyaml from 6.0.12.20250516 to 6.0.12.20250809.
+ (#18798)
+ - Bump types-setuptools from 80.9.0.20250529 to
+ 80.9.0.20250809. (#18796)
+
+-------------------------------------------------------------------
Old:
----
matrix-synapse-1.136.0.obscpio
New:
----
matrix-synapse-1.137.0.obscpio
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ matrix-synapse-test.spec ++++++
--- /var/tmp/diff_new_pack.4xqVt2/_old 2025-08-26 16:13:51.723358022 +0200
+++ /var/tmp/diff_new_pack.4xqVt2/_new 2025-08-26 16:13:51.727358190 +0200
@@ -27,7 +27,7 @@
%define pkgname matrix-synapse
Name: %{pkgname}-test
-Version: 1.136.0
+Version: 1.137.0
Release: 0
Summary: Test package for %{pkgname}
License: AGPL-3.0-or-later
++++++ matrix-synapse.spec ++++++
--- /var/tmp/diff_new_pack.4xqVt2/_old 2025-08-26 16:13:51.759359527 +0200
+++ /var/tmp/diff_new_pack.4xqVt2/_new 2025-08-26 16:13:51.763359695 +0200
@@ -37,7 +37,7 @@
%global matrix_common_max_version 2
%global msgpack_version 1.1.0
%global netaddr_version 1.3.0
-%global phonenumbers_version 9.0.10
+%global phonenumbers_version 9.0.11
%global prometheus_client_version 0.20.0
%global psutil_version 2.0.0
%global pyOpenSSL_version 25.0.0
@@ -157,7 +157,7 @@
%define pkgname matrix-synapse
%define eggname matrix_synapse
Name: %{pkgname}
-Version: 1.136.0
+Version: 1.137.0
Release: 0
Summary: Matrix protocol reference homeserver
License: AGPL-3.0-or-later
++++++ _service ++++++
--- /var/tmp/diff_new_pack.4xqVt2/_old 2025-08-26 16:13:51.827362369 +0200
+++ /var/tmp/diff_new_pack.4xqVt2/_new 2025-08-26 16:13:51.831362537 +0200
@@ -4,11 +4,11 @@
<param name="versionformat">@PARENT_TAG@</param>
<param name="url">https://github.com/element-hq/synapse.git</param>
<param name="scm">git</param>
- <param name="revision">v1.136.0</param>
+ <param name="revision">v1.137.0</param>
<param name="versionrewrite-pattern">v(.*)</param>
<param name="versionrewrite-replacement">\1</param>
<!--
- <param name="revision">v1.137.0rc1</param>
+ <param name="revision">v1.138.0rc1</param>
<param name="versionrewrite-pattern">v([\.\d]+)(rc.*)</param>
<param name="versionrewrite-replacement">\1~\2</param>
-->
++++++ matrix-synapse-1.136.0.obscpio -> matrix-synapse-1.137.0.obscpio ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/matrix-synapse-1.136.0/.ci/scripts/test_synapse_port_db.sh
new/matrix-synapse-1.137.0/.ci/scripts/test_synapse_port_db.sh
--- old/matrix-synapse-1.136.0/.ci/scripts/test_synapse_port_db.sh
2025-08-12 14:19:58.000000000 +0200
+++ new/matrix-synapse-1.137.0/.ci/scripts/test_synapse_port_db.sh
2025-08-26 11:23:44.000000000 +0200
@@ -61,7 +61,7 @@
echo "+++ Comparing ported schema with unported schema"
# Ignore the tables that portdb creates. (Should it tidy them up when the
porting is completed?)
psql synapse -c "DROP TABLE port_from_sqlite3;"
-pg_dump --format=plain --schema-only --no-tablespaces --no-acl --no-owner
synapse_unported > unported.sql
-pg_dump --format=plain --schema-only --no-tablespaces --no-acl --no-owner
synapse > ported.sql
+pg_dump --format=plain --schema-only --no-tablespaces --no-acl --no-owner
--restrict-key=TESTING synapse_unported > unported.sql
+pg_dump --format=plain --schema-only --no-tablespaces --no-acl --no-owner
--restrict-key=TESTING synapse > ported.sql
# By default, `diff` returns zero if there are no changes and nonzero otherwise
-diff -u unported.sql ported.sql | tee schema_diff
\ No newline at end of file
+diff -u unported.sql ported.sql | tee schema_diff
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/matrix-synapse-1.136.0/.github/workflows/docker.yml
new/matrix-synapse-1.137.0/.github/workflows/docker.yml
--- old/matrix-synapse-1.136.0/.github/workflows/docker.yml 2025-08-12
14:19:58.000000000 +0200
+++ new/matrix-synapse-1.137.0/.github/workflows/docker.yml 2025-08-26
11:23:44.000000000 +0200
@@ -31,7 +31,7 @@
uses:
docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1
- name: Checkout repository
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #
v4.2.2
+ uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 #
v4.3.0
- name: Extract version from pyproject.toml
# Note: explicitly requesting bash will mean bash is invoked with `-eo
pipefail`, see
@@ -95,7 +95,7 @@
- build
steps:
- name: Download digests
- uses:
actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
+ uses:
actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
with:
path: ${{ runner.temp }}/digests
pattern: digests-*
@@ -123,7 +123,7 @@
uses:
sigstore/cosign-installer@d58896d6a1865668819e1d91763c7751a165e159 # v3.9.2
- name: Calculate docker image tag
- uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804
# v5.7.0
+ uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f
# v5.8.0
with:
images: ${{ matrix.repository }}
flavor: |
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/matrix-synapse-1.136.0/.github/workflows/docs-pr.yaml
new/matrix-synapse-1.137.0/.github/workflows/docs-pr.yaml
--- old/matrix-synapse-1.136.0/.github/workflows/docs-pr.yaml 2025-08-12
14:19:58.000000000 +0200
+++ new/matrix-synapse-1.137.0/.github/workflows/docs-pr.yaml 2025-08-26
11:23:44.000000000 +0200
@@ -13,7 +13,7 @@
name: GitHub Pages
runs-on: ubuntu-latest
steps:
- - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #
v4.2.2
+ - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 #
v4.3.0
with:
# Fetch all history so that the schema_versions script works.
fetch-depth: 0
@@ -50,7 +50,7 @@
name: Check links in documentation
runs-on: ubuntu-latest
steps:
- - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #
v4.2.2
+ - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 #
v4.3.0
- name: Setup mdbook
uses:
peaceiris/actions-mdbook@ee69d230fe19748b7abf22df32acaa93833fad08 # v2.0.0
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/matrix-synapse-1.136.0/.github/workflows/docs.yaml
new/matrix-synapse-1.137.0/.github/workflows/docs.yaml
--- old/matrix-synapse-1.136.0/.github/workflows/docs.yaml 2025-08-12
14:19:58.000000000 +0200
+++ new/matrix-synapse-1.137.0/.github/workflows/docs.yaml 2025-08-26
11:23:44.000000000 +0200
@@ -50,7 +50,7 @@
needs:
- pre
steps:
- - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #
v4.2.2
+ - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 #
v4.3.0
with:
# Fetch all history so that the schema_versions script works.
fetch-depth: 0
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/matrix-synapse-1.136.0/.github/workflows/fix_lint.yaml
new/matrix-synapse-1.137.0/.github/workflows/fix_lint.yaml
--- old/matrix-synapse-1.136.0/.github/workflows/fix_lint.yaml 2025-08-12
14:19:58.000000000 +0200
+++ new/matrix-synapse-1.137.0/.github/workflows/fix_lint.yaml 2025-08-26
11:23:44.000000000 +0200
@@ -18,7 +18,7 @@
steps:
- name: Checkout repository
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #
v4.2.2
+ uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 #
v4.3.0
- name: Install Rust
uses: dtolnay/rust-toolchain@b3b07ba8b418998c39fb20f53e8b695cdcc8de1b
# master
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/matrix-synapse-1.136.0/.github/workflows/latest_deps.yml
new/matrix-synapse-1.137.0/.github/workflows/latest_deps.yml
--- old/matrix-synapse-1.136.0/.github/workflows/latest_deps.yml
2025-08-12 14:19:58.000000000 +0200
+++ new/matrix-synapse-1.137.0/.github/workflows/latest_deps.yml
2025-08-26 11:23:44.000000000 +0200
@@ -42,7 +42,7 @@
if: needs.check_repo.outputs.should_run_workflow == 'true'
runs-on: ubuntu-latest
steps:
- - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #
v4.2.2
+ - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 #
v4.3.0
- name: Install Rust
uses: dtolnay/rust-toolchain@b3b07ba8b418998c39fb20f53e8b695cdcc8de1b
# master
with:
@@ -77,7 +77,7 @@
postgres-version: "14"
steps:
- - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #
v4.2.2
+ - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 #
v4.3.0
- name: Install Rust
uses: dtolnay/rust-toolchain@b3b07ba8b418998c39fb20f53e8b695cdcc8de1b
# master
@@ -152,7 +152,7 @@
BLACKLIST: ${{ matrix.workers && 'synapse-blacklist-with-workers' }}
steps:
- - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #
v4.2.2
+ - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 #
v4.3.0
- name: Install Rust
uses: dtolnay/rust-toolchain@b3b07ba8b418998c39fb20f53e8b695cdcc8de1b
# master
@@ -202,7 +202,7 @@
steps:
- name: Check out synapse codebase
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #
v4.2.2
+ uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 #
v4.3.0
with:
path: synapse
@@ -234,7 +234,7 @@
runs-on: ubuntu-latest
steps:
- - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #
v4.2.2
+ - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 #
v4.3.0
- uses:
JasonEtco/create-an-issue@1b14a70e4d8dc185e5cc76d3bec9eab20257b2c5 # v2.9.2
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/matrix-synapse-1.136.0/.github/workflows/poetry_lockfile.yaml
new/matrix-synapse-1.137.0/.github/workflows/poetry_lockfile.yaml
--- old/matrix-synapse-1.136.0/.github/workflows/poetry_lockfile.yaml
2025-08-12 14:19:58.000000000 +0200
+++ new/matrix-synapse-1.137.0/.github/workflows/poetry_lockfile.yaml
2025-08-26 11:23:44.000000000 +0200
@@ -16,7 +16,7 @@
name: "Check locked dependencies have sdists"
runs-on: ubuntu-latest
steps:
- - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #
v4.2.2
+ - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 #
v4.3.0
- uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 #
v5.6.0
with:
python-version: '3.x'
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/matrix-synapse-1.136.0/.github/workflows/push_complement_image.yml
new/matrix-synapse-1.137.0/.github/workflows/push_complement_image.yml
--- old/matrix-synapse-1.136.0/.github/workflows/push_complement_image.yml
2025-08-12 14:19:58.000000000 +0200
+++ new/matrix-synapse-1.137.0/.github/workflows/push_complement_image.yml
2025-08-26 11:23:44.000000000 +0200
@@ -33,17 +33,17 @@
packages: write
steps:
- name: Checkout specific branch (debug build)
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #
v4.2.2
+ uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 #
v4.3.0
if: github.event_name == 'workflow_dispatch'
with:
ref: ${{ inputs.branch }}
- name: Checkout clean copy of develop (scheduled build)
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #
v4.2.2
+ uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 #
v4.3.0
if: github.event_name == 'schedule'
with:
ref: develop
- name: Checkout clean copy of master (on-push)
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #
v4.2.2
+ uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 #
v4.3.0
if: github.event_name == 'push'
with:
ref: master
@@ -55,7 +55,7 @@
password: ${{ secrets.GITHUB_TOKEN }}
- name: Work out labels for complement image
id: meta
- uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804
# v5.7.0
+ uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f
# v5.8.0
with:
images: ghcr.io/${{ github.repository }}/complement-synapse
tags: |
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/matrix-synapse-1.136.0/.github/workflows/release-artifacts.yml
new/matrix-synapse-1.137.0/.github/workflows/release-artifacts.yml
--- old/matrix-synapse-1.136.0/.github/workflows/release-artifacts.yml
2025-08-12 14:19:58.000000000 +0200
+++ new/matrix-synapse-1.137.0/.github/workflows/release-artifacts.yml
2025-08-26 11:23:44.000000000 +0200
@@ -27,7 +27,7 @@
name: "Calculate list of debian distros"
runs-on: ubuntu-latest
steps:
- - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #
v4.2.2
+ - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 #
v4.3.0
- uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 #
v5.6.0
with:
python-version: "3.x"
@@ -55,7 +55,7 @@
steps:
- name: Checkout
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #
v4.2.2
+ uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 #
v4.3.0
with:
path: src
@@ -66,7 +66,7 @@
install: true
- name: Set up docker layer caching
- uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
+ uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
with:
path: /tmp/.buildx-cache
key: ${{ runner.os }}-buildx-${{ github.sha }}
@@ -132,7 +132,7 @@
os: "ubuntu-24.04-arm"
steps:
- - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #
v4.2.2
+ - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 #
v4.3.0
- uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 #
v5.6.0
with:
@@ -165,7 +165,7 @@
if: ${{ !startsWith(github.ref, 'refs/pull/') }}
steps:
- - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #
v4.2.2
+ - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 #
v4.3.0
- uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 #
v5.6.0
with:
python-version: "3.10"
@@ -191,7 +191,7 @@
runs-on: ubuntu-latest
steps:
- name: Download all workflow run artifacts
- uses:
actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
+ uses:
actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
- name: Build a tarball for the debs
# We need to merge all the debs uploads into one folder, then compress
# that.
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/matrix-synapse-1.136.0/.github/workflows/schema.yaml
new/matrix-synapse-1.137.0/.github/workflows/schema.yaml
--- old/matrix-synapse-1.136.0/.github/workflows/schema.yaml 2025-08-12
14:19:58.000000000 +0200
+++ new/matrix-synapse-1.137.0/.github/workflows/schema.yaml 2025-08-26
11:23:44.000000000 +0200
@@ -14,7 +14,7 @@
name: Ensure Synapse config schema is valid
runs-on: ubuntu-latest
steps:
- - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #
v4.2.2
+ - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 #
v4.3.0
- uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 #
v5.6.0
with:
python-version: "3.x"
@@ -40,7 +40,7 @@
name: Ensure generated documentation is up-to-date
runs-on: ubuntu-latest
steps:
- - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #
v4.2.2
+ - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 #
v4.3.0
- uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 #
v5.6.0
with:
python-version: "3.x"
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/matrix-synapse-1.136.0/.github/workflows/tests.yml
new/matrix-synapse-1.137.0/.github/workflows/tests.yml
--- old/matrix-synapse-1.136.0/.github/workflows/tests.yml 2025-08-12
14:19:58.000000000 +0200
+++ new/matrix-synapse-1.137.0/.github/workflows/tests.yml 2025-08-26
11:23:44.000000000 +0200
@@ -86,7 +86,7 @@
if: ${{ needs.changes.outputs.linting == 'true' }}
steps:
- - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #
v4.2.2
+ - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 #
v4.3.0
- name: Install Rust
uses: dtolnay/rust-toolchain@b3b07ba8b418998c39fb20f53e8b695cdcc8de1b
# master
with:
@@ -106,7 +106,7 @@
if: ${{ needs.changes.outputs.linting == 'true' }}
steps:
- - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #
v4.2.2
+ - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 #
v4.3.0
- uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 #
v5.6.0
with:
python-version: "3.x"
@@ -116,7 +116,7 @@
check-lockfile:
runs-on: ubuntu-latest
steps:
- - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #
v4.2.2
+ - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 #
v4.3.0
- uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 #
v5.6.0
with:
python-version: "3.x"
@@ -129,7 +129,7 @@
steps:
- name: Checkout repository
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #
v4.2.2
+ uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 #
v4.3.0
- name: Setup Poetry
uses:
matrix-org/setup-python-poetry@5bbf6603c5c930615ec8a29f1b5d7d258d905aa4 # v2.0.0
@@ -151,7 +151,7 @@
steps:
- name: Checkout repository
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #
v4.2.2
+ uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 #
v4.3.0
- name: Install Rust
uses: dtolnay/rust-toolchain@b3b07ba8b418998c39fb20f53e8b695cdcc8de1b
# master
@@ -174,7 +174,7 @@
# Cribbed from
#
https://github.com/AustinScola/mypy-cache-github-action/blob/85ea4f2972abed39b33bd02c36e341b28ca59213/src/restore.ts#L10-L17
- name: Restore/persist mypy's cache
- uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
+ uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
with:
path: |
.mypy_cache
@@ -187,7 +187,7 @@
lint-crlf:
runs-on: ubuntu-latest
steps:
- - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #
v4.2.2
+ - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 #
v4.3.0
- name: Check line endings
run: scripts-dev/check_line_terminators.sh
@@ -195,7 +195,7 @@
if: ${{ (github.base_ref == 'develop' || contains(github.base_ref,
'release-')) && github.actor != 'dependabot[bot]' }}
runs-on: ubuntu-latest
steps:
- - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #
v4.2.2
+ - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 #
v4.3.0
with:
ref: ${{ github.event.pull_request.head.sha }}
fetch-depth: 0
@@ -213,7 +213,7 @@
if: ${{ needs.changes.outputs.linting == 'true' }}
steps:
- - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #
v4.2.2
+ - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 #
v4.3.0
with:
ref: ${{ github.event.pull_request.head.sha }}
- name: Install Rust
@@ -233,7 +233,7 @@
if: ${{ needs.changes.outputs.rust == 'true' }}
steps:
- - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #
v4.2.2
+ - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 #
v4.3.0
- name: Install Rust
uses: dtolnay/rust-toolchain@b3b07ba8b418998c39fb20f53e8b695cdcc8de1b
# master
@@ -252,7 +252,7 @@
if: ${{ needs.changes.outputs.rust == 'true' }}
steps:
- - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #
v4.2.2
+ - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 #
v4.3.0
- name: Install Rust
uses: dtolnay/rust-toolchain@b3b07ba8b418998c39fb20f53e8b695cdcc8de1b
# master
@@ -270,7 +270,7 @@
steps:
- name: Checkout repository
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #
v4.2.2
+ uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 #
v4.3.0
- name: Install Rust
uses: dtolnay/rust-toolchain@b3b07ba8b418998c39fb20f53e8b695cdcc8de1b
# master
@@ -306,7 +306,7 @@
if: ${{ needs.changes.outputs.rust == 'true' }}
steps:
- - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #
v4.2.2
+ - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 #
v4.3.0
- name: Install Rust
uses: dtolnay/rust-toolchain@b3b07ba8b418998c39fb20f53e8b695cdcc8de1b
# master
@@ -326,7 +326,7 @@
needs: changes
if: ${{ needs.changes.outputs.linting_readme == 'true' }}
steps:
- - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #
v4.2.2
+ - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 #
v4.3.0
- uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 #
v5.6.0
with:
python-version: "3.x"
@@ -376,7 +376,7 @@
needs: linting-done
runs-on: ubuntu-latest
steps:
- - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #
v4.2.2
+ - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 #
v4.3.0
- uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 #
v5.6.0
with:
python-version: "3.x"
@@ -397,7 +397,7 @@
job: ${{
fromJson(needs.calculate-test-jobs.outputs.trial_test_matrix) }}
steps:
- - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #
v4.2.2
+ - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 #
v4.3.0
- run: sudo apt-get -qq install xmlsec1
- name: Set up PostgreSQL ${{ matrix.job.postgres-version }}
if: ${{ matrix.job.postgres-version }}
@@ -453,7 +453,7 @@
- changes
runs-on: ubuntu-22.04
steps:
- - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #
v4.2.2
+ - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 #
v4.3.0
- name: Install Rust
uses: dtolnay/rust-toolchain@b3b07ba8b418998c39fb20f53e8b695cdcc8de1b
# master
@@ -518,7 +518,7 @@
extras: ["all"]
steps:
- - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #
v4.2.2
+ - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 #
v4.3.0
# Install libs necessary for PyPy to build binary wheels for dependencies
- run: sudo apt-get -qq install xmlsec1 libxml2-dev libxslt-dev
- uses:
matrix-org/setup-python-poetry@5bbf6603c5c930615ec8a29f1b5d7d258d905aa4 # v2.0.0
@@ -568,7 +568,7 @@
job: ${{
fromJson(needs.calculate-test-jobs.outputs.sytest_test_matrix) }}
steps:
- - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #
v4.2.2
+ - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 #
v4.3.0
- name: Prepare test blacklist
run: cat sytest-blacklist .ci/worker-blacklist >
synapse-blacklist-with-workers
@@ -615,7 +615,7 @@
--health-retries 5
steps:
- - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #
v4.2.2
+ - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 #
v4.3.0
- run: sudo apt-get -qq install xmlsec1 postgresql-client
- uses:
matrix-org/setup-python-poetry@5bbf6603c5c930615ec8a29f1b5d7d258d905aa4 # v2.0.0
with:
@@ -659,7 +659,7 @@
--health-retries 5
steps:
- - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #
v4.2.2
+ - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 #
v4.3.0
- name: Add PostgreSQL apt repository
# We need a version of pg_dump that can handle the version of
# PostgreSQL being tested against. The Ubuntu package repository lags
@@ -714,7 +714,7 @@
steps:
- name: Checkout synapse codebase
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #
v4.2.2
+ uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 #
v4.3.0
with:
path: synapse
@@ -750,7 +750,7 @@
- changes
steps:
- - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #
v4.2.2
+ - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 #
v4.3.0
- name: Install Rust
uses: dtolnay/rust-toolchain@b3b07ba8b418998c39fb20f53e8b695cdcc8de1b
# master
@@ -770,7 +770,7 @@
- changes
steps:
- - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #
v4.2.2
+ - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 #
v4.3.0
- name: Install Rust
uses: dtolnay/rust-toolchain@b3b07ba8b418998c39fb20f53e8b695cdcc8de1b
# master
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/matrix-synapse-1.136.0/.github/workflows/triage_labelled.yml
new/matrix-synapse-1.137.0/.github/workflows/triage_labelled.yml
--- old/matrix-synapse-1.136.0/.github/workflows/triage_labelled.yml
2025-08-12 14:19:58.000000000 +0200
+++ new/matrix-synapse-1.137.0/.github/workflows/triage_labelled.yml
2025-08-26 11:23:44.000000000 +0200
@@ -11,7 +11,7 @@
if: >
contains(github.event.issue.labels.*.name, 'X-Needs-Info')
steps:
- - uses: actions/add-to-project@5b1a254a3546aef88e0a7724a77a623fa2e47c36
# main (v1.0.2 + 10 commits)
+ - uses: actions/add-to-project@c0c5949b017d0d4a39f7ba888255881bdac2a823
# v1.0.2
id: add_project
with:
project-url: "https://github.com/orgs/matrix-org/projects/67";
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/matrix-synapse-1.136.0/.github/workflows/twisted_trunk.yml
new/matrix-synapse-1.137.0/.github/workflows/twisted_trunk.yml
--- old/matrix-synapse-1.136.0/.github/workflows/twisted_trunk.yml
2025-08-12 14:19:58.000000000 +0200
+++ new/matrix-synapse-1.137.0/.github/workflows/twisted_trunk.yml
2025-08-26 11:23:44.000000000 +0200
@@ -43,7 +43,7 @@
runs-on: ubuntu-latest
steps:
- - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #
v4.2.2
+ - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 #
v4.3.0
- name: Install Rust
uses: dtolnay/rust-toolchain@b3b07ba8b418998c39fb20f53e8b695cdcc8de1b
# master
@@ -70,7 +70,7 @@
runs-on: ubuntu-latest
steps:
- - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #
v4.2.2
+ - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 #
v4.3.0
- run: sudo apt-get -qq install xmlsec1
- name: Install Rust
@@ -117,7 +117,7 @@
- ${{ github.workspace }}:/src
steps:
- - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #
v4.2.2
+ - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 #
v4.3.0
- name: Install Rust
uses: dtolnay/rust-toolchain@b3b07ba8b418998c39fb20f53e8b695cdcc8de1b
# master
@@ -175,7 +175,7 @@
steps:
- name: Run actions/checkout@v4 for synapse
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #
v4.2.2
+ uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 #
v4.3.0
with:
path: synapse
@@ -217,7 +217,7 @@
runs-on: ubuntu-latest
steps:
- - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #
v4.2.2
+ - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 #
v4.3.0
- uses:
JasonEtco/create-an-issue@1b14a70e4d8dc185e5cc76d3bec9eab20257b2c5 # v2.9.2
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/matrix-synapse-1.136.0/CHANGES.md
new/matrix-synapse-1.137.0/CHANGES.md
--- old/matrix-synapse-1.136.0/CHANGES.md 2025-08-12 14:19:58.000000000
+0200
+++ new/matrix-synapse-1.137.0/CHANGES.md 2025-08-26 11:23:44.000000000
+0200
@@ -1,3 +1,47 @@
+# Synapse 1.137.0 (2025-08-26)
+
+No significant changes since 1.137.0rc1.
+
+
+
+
+# Synapse 1.137.0rc1 (2025-08-19)
+
+### Bugfixes
+
+- Fix a bug which could corrupt auth chains making it impossible to perform
state resolution.
([\#18746](https://github.com/element-hq/synapse/issues/18746))
+- Fix error message in `register_new_matrix_user` utility script for empty
`registration_shared_secret`.
([\#18780](https://github.com/element-hq/synapse/issues/18780))
+- Allow enabling
[MSC4108](https://github.com/matrix-org/matrix-spec-proposals/pull/4108) when
the stable Matrix Authentication Service integration is enabled.
([\#18832](https://github.com/element-hq/synapse/issues/18832))
+
+### Improved Documentation
+
+- Include IPv6 networks in `denied-peer-ips` of coturn setup. Contributed by
@litetex. ([\#18781](https://github.com/element-hq/synapse/issues/18781))
+
+### Internal Changes
+
+- Update tests to ensure all database tables are emptied when purging a room.
([\#18794](https://github.com/element-hq/synapse/issues/18794))
+- Instrument the `encode_response` part of Sliding Sync requests for more
complete traces in Jaeger.
([\#18815](https://github.com/element-hq/synapse/issues/18815))
+- Tag Sliding Sync traces when we `wait_for_events`.
([\#18816](https://github.com/element-hq/synapse/issues/18816))
+- Fix `portdb` CI by hardcoding the new `pg_dump` restrict key that was added
due to [CVE-2025-8714](https://nvd.nist.gov/vuln/detail/cve-2025-8714).
([\#18824](https://github.com/element-hq/synapse/issues/18824))
+
+
+
+### Updates to locked dependencies
+
+* Bump actions/add-to-project from 5b1a254a3546aef88e0a7724a77a623fa2e47c36 to
0c37450c4be3b6a7582b2fb013c9ebfd9c8e9300.
([\#18557](https://github.com/element-hq/synapse/issues/18557))
+* Bump actions/cache from 4.2.3 to 4.2.4.
([\#18799](https://github.com/element-hq/synapse/issues/18799))
+* Bump actions/checkout from 4.2.2 to 4.3.0.
([\#18800](https://github.com/element-hq/synapse/issues/18800))
+* Bump actions/download-artifact from 4.3.0 to 5.0.0.
([\#18801](https://github.com/element-hq/synapse/issues/18801))
+* Bump docker/metadata-action from 5.7.0 to 5.8.0.
([\#18773](https://github.com/element-hq/synapse/issues/18773))
+* Bump mypy from 1.16.1 to 1.17.1.
([\#18775](https://github.com/element-hq/synapse/issues/18775))
+* Bump phonenumbers from 9.0.10 to 9.0.11.
([\#18797](https://github.com/element-hq/synapse/issues/18797))
+* Bump pygithub from 2.6.1 to 2.7.0.
([\#18779](https://github.com/element-hq/synapse/issues/18779))
+* Bump serde_json from 1.0.141 to 1.0.142.
([\#18776](https://github.com/element-hq/synapse/issues/18776))
+* Bump slab from 0.4.10 to 0.4.11.
([\#18809](https://github.com/element-hq/synapse/issues/18809))
+* Bump tokio from 1.47.0 to 1.47.1.
([\#18774](https://github.com/element-hq/synapse/issues/18774))
+* Bump types-pyyaml from 6.0.12.20250516 to 6.0.12.20250809.
([\#18798](https://github.com/element-hq/synapse/issues/18798))
+* Bump types-setuptools from 80.9.0.20250529 to 80.9.0.20250809.
([\#18796](https://github.com/element-hq/synapse/issues/18796))
+
# Synapse 1.136.0 (2025-08-12)
Note: This release includes the security fixes from `1.135.2` and
`1.136.0rc2`, detailed below.
@@ -7,9 +51,7 @@
- Fix bug introduced in 1.135.2 and 1.136.0rc2 where the [Make Room Admin
API](https://element-hq.github.io/synapse/latest/admin_api/rooms.html#make-room-admin-api)
would not treat a room v12's creator power level as the highest in room.
([\#18805](https://github.com/element-hq/synapse/issues/18805))
-
-
-# Synapse 1.136.0rc2 (2025-08-11)
+# Synapse 1.135.2 (2025-08-11)
This is the Synapse portion of the [Matrix coordinated security
release](https://matrix.org/blog/2025/07/security-predisclosure/). This release
includes support for [room version](https://spec.matrix.org/v1.15/rooms/) 12
which fixes a number of security vulnerabilities, including
[CVE-2025-49090](https://www.cve.org/CVERecord?id=CVE-2025-49090).
@@ -26,13 +68,21 @@
### Bugfixes
-- Update MSC4293 redaction logic for room v12.
([\#80](https://github.com/element-hq/synapse/issues/80))
+- Fix invalidation of storage cache that was broken in 1.135.0.
([\#18786](https://github.com/element-hq/synapse/issues/18786))
### Internal Changes
-- Add a parameter to `upgrade_rooms(..)` to allow auto join local users.
([\#83](https://github.com/element-hq/synapse/issues/83))
+- Add a parameter to `upgrade_rooms(..)` to allow auto join local users.
([\#82](https://github.com/element-hq/synapse/issues/82))
+- Speed up upgrading a room with large numbers of banned users.
([\#18574](https://github.com/element-hq/synapse/issues/18574))
+# Synapse 1.136.0rc2 (2025-08-11)
+
+- Update MSC4293 redaction logic for room v12.
([\#80](https://github.com/element-hq/synapse/issues/80))
+
+### Internal Changes
+
+- Add a parameter to `upgrade_rooms(..)` to allow auto join local users.
([\#83](https://github.com/element-hq/synapse/issues/83))
# Synapse 1.136.0rc1 (2025-08-05)
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/matrix-synapse-1.136.0/Cargo.lock
new/matrix-synapse-1.137.0/Cargo.lock
--- old/matrix-synapse-1.136.0/Cargo.lock 2025-08-12 14:19:58.000000000
+0200
+++ new/matrix-synapse-1.137.0/Cargo.lock 2025-08-26 11:23:44.000000000
+0200
@@ -1270,9 +1270,9 @@
[[package]]
name = "serde_json"
-version = "1.0.141"
+version = "1.0.142"
source = "registry+https://github.com/rust-lang/crates.io-index";
-checksum = "30b9eff21ebe718216c6ec64e1d9ac57087aad11efc64e32002bce4a0d4c03d3"
+checksum = "030fedb782600dcbd6f02d479bf0d817ac3bb40d644745b769d6a96bc3afc5a7"
dependencies = [
"itoa",
"memchr",
@@ -1322,9 +1322,9 @@
[[package]]
name = "slab"
-version = "0.4.10"
+version = "0.4.11"
source = "registry+https://github.com/rust-lang/crates.io-index";
-checksum = "04dc19736151f35336d325007ac991178d504a119863a2fcb3758cdb5e52c50d"
+checksum = "7a2ae44ef20feb57a68b23d846850f861394c2e02dc425a50098ae8c90267589"
[[package]]
name = "smallvec"
@@ -1478,9 +1478,9 @@
[[package]]
name = "tokio"
-version = "1.47.0"
+version = "1.47.1"
source = "registry+https://github.com/rust-lang/crates.io-index";
-checksum = "43864ed400b6043a4757a25c7a64a8efde741aed79a056a2fb348a406701bb35"
+checksum = "89e49afdadebb872d3145a5638b59eb0691ea23e46ca484037cfab3b76b95038"
dependencies = [
"backtrace",
"bytes",
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/matrix-synapse-1.136.0/debian/changelog
new/matrix-synapse-1.137.0/debian/changelog
--- old/matrix-synapse-1.136.0/debian/changelog 2025-08-12 14:19:58.000000000
+0200
+++ new/matrix-synapse-1.137.0/debian/changelog 2025-08-26 11:23:44.000000000
+0200
@@ -1,3 +1,15 @@
+matrix-synapse-py3 (1.137.0) stable; urgency=medium
+
+ * New Synapse release 1.137.0.
+
+ -- Synapse Packaging team <packa...@matrix.org> Tue, 26 Aug 2025 10:23:41
+0100
+
+matrix-synapse-py3 (1.137.0~rc1) stable; urgency=medium
+
+ * New Synapse release 1.137.0rc1.
+
+ -- Synapse Packaging team <packa...@matrix.org> Tue, 19 Aug 2025 10:55:22
+0100
+
matrix-synapse-py3 (1.136.0) stable; urgency=medium
* New Synapse release 1.136.0.
@@ -16,6 +28,18 @@
-- Synapse Packaging team <packa...@matrix.org> Tue, 05 Aug 2025 08:13:30
-0600
+matrix-synapse-py3 (1.135.2) stable; urgency=medium
+
+ * New Synapse release 1.135.2.
+
+ -- Synapse Packaging team <packa...@matrix.org> Mon, 11 Aug 2025 11:52:01
-0600
+
+matrix-synapse-py3 (1.135.1) stable; urgency=medium
+
+ * New Synapse release 1.135.1.
+
+ -- Synapse Packaging team <packa...@matrix.org> Mon, 11 Aug 2025 11:13:15
-0600
+
matrix-synapse-py3 (1.135.0) stable; urgency=medium
* New Synapse release 1.135.0.
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/matrix-synapse-1.136.0/docs/setup/turn/coturn.md
new/matrix-synapse-1.137.0/docs/setup/turn/coturn.md
--- old/matrix-synapse-1.136.0/docs/setup/turn/coturn.md 2025-08-12
14:19:58.000000000 +0200
+++ new/matrix-synapse-1.137.0/docs/setup/turn/coturn.md 2025-08-26
11:23:44.000000000 +0200
@@ -88,7 +88,8 @@
denied-peer-ip=172.16.0.0-172.31.255.255
# recommended additional local peers to block, to mitigate external access
to internal services.
- #
https://www.rtcsec.com/article/slack-webrtc-turn-compromise-and-bug-bounty/#how-to-fix-an-open-turn-relay-to-address-this-vulnerability
+ #
https://www.enablesecurity.com/blog/slack-webrtc-turn-compromise-and-bug-bounty/#how-to-fix-an-open-turn-relay-to-address-this-vulnerability
+ #
https://www.enablesecurity.com/blog/cve-2020-26262-bypass-of-coturns-access-control-protection/#further-concerns-what-else
no-multicast-peers
denied-peer-ip=0.0.0.0-0.255.255.255
denied-peer-ip=100.64.0.0-100.127.255.255
@@ -101,6 +102,14 @@
denied-peer-ip=198.51.100.0-198.51.100.255
denied-peer-ip=203.0.113.0-203.0.113.255
denied-peer-ip=240.0.0.0-255.255.255.255
+ denied-peer-ip=::1
+ denied-peer-ip=64:ff9b::-64:ff9b::ffff:ffff
+ denied-peer-ip=::ffff:0.0.0.0-::ffff:255.255.255.255
+ denied-peer-ip=100::-100::ffff:ffff:ffff:ffff
+ denied-peer-ip=2001::-2001:1ff:ffff:ffff:ffff:ffff:ffff:ffff
+ denied-peer-ip=2002::-2002:ffff:ffff:ffff:ffff:ffff:ffff:ffff
+ denied-peer-ip=fc00::-fdff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
+ denied-peer-ip=fe80::-febf:ffff:ffff:ffff:ffff:ffff:ffff:ffff
# special case the turn server itself so that client->TURN->TURN->client
flows work
# this should be one of the turn server's listening IPs
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/matrix-synapse-1.136.0/poetry.lock
new/matrix-synapse-1.137.0/poetry.lock
--- old/matrix-synapse-1.136.0/poetry.lock 2025-08-12 14:19:58.000000000
+0200
+++ new/matrix-synapse-1.137.0/poetry.lock 2025-08-26 11:23:44.000000000
+0200
@@ -442,24 +442,6 @@
]
[[package]]
-name = "deprecated"
-version = "1.2.13"
-description = "Python @deprecated decorator to deprecate old python classes,
functions or methods."
-optional = false
-python-versions = ">=2.7, !=3.0.*, !=3.1.*, !=3.2.*, !=3.3.*"
-groups = ["dev"]
-files = [
- {file = "Deprecated-1.2.13-py2.py3-none-any.whl", hash =
"sha256:64756e3e14c8c5eea9795d93c524551432a0be75629f8f29e67ab8caf076c76d"},
- {file = "Deprecated-1.2.13.tar.gz", hash =
"sha256:43ac5335da90c31c24ba028af536a91d41d53f9e6901ddb021bcc572ce44e38d"},
-]
-
-[package.dependencies]
-wrapt = ">=1.10,<2"
-
-[package.extras]
-dev = ["PyTest (<5) ; python_version < \"3.6\"", "PyTest ; python_version >=
\"3.6\"", "PyTest-Cov (<2.6) ; python_version < \"3.6\"", "PyTest-Cov ;
python_version >= \"3.6\"", "bump2version (<1)", "configparser (<5) ;
python_version < \"3\"", "importlib-metadata (<3) ; python_version < \"3\"",
"importlib-resources (<4) ; python_version < \"3\"", "sphinx (<2)",
"sphinxcontrib-websupport (<2) ; python_version < \"3\"", "tox", "zipp (<2) ;
python_version < \"3\""]
-
-[[package]]
name = "docutils"
version = "0.19"
description = "Docutils -- Python Documentation Utilities"
@@ -1387,44 +1369,50 @@
[[package]]
name = "mypy"
-version = "1.16.1"
+version = "1.17.1"
description = "Optional static typing for Python"
optional = false
python-versions = ">=3.9"
groups = ["dev"]
files = [
- {file = "mypy-1.16.1-cp310-cp310-macosx_10_9_x86_64.whl", hash =
"sha256:b4f0fed1022a63c6fec38f28b7fc77fca47fd490445c69d0a66266c59dd0b88a"},
- {file = "mypy-1.16.1-cp310-cp310-macosx_11_0_arm64.whl", hash =
"sha256:86042bbf9f5a05ea000d3203cf87aa9d0ccf9a01f73f71c58979eb9249f46d72"},
- {file =
"mypy-1.16.1-cp310-cp310-manylinux_2_17_aarch64.manylinux2014_aarch64.manylinux_2_28_aarch64.whl",
hash =
"sha256:ea7469ee5902c95542bea7ee545f7006508c65c8c54b06dc2c92676ce526f3ea"},
- {file =
"mypy-1.16.1-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_28_x86_64.whl",
hash =
"sha256:352025753ef6a83cb9e7f2427319bb7875d1fdda8439d1e23de12ab164179574"},
- {file = "mypy-1.16.1-cp310-cp310-musllinux_1_2_x86_64.whl", hash =
"sha256:ff9fa5b16e4c1364eb89a4d16bcda9987f05d39604e1e6c35378a2987c1aac2d"},
- {file = "mypy-1.16.1-cp310-cp310-win_amd64.whl", hash =
"sha256:1256688e284632382f8f3b9e2123df7d279f603c561f099758e66dd6ed4e8bd6"},
- {file = "mypy-1.16.1-cp311-cp311-macosx_10_9_x86_64.whl", hash =
"sha256:472e4e4c100062488ec643f6162dd0d5208e33e2f34544e1fc931372e806c0cc"},
- {file = "mypy-1.16.1-cp311-cp311-macosx_11_0_arm64.whl", hash =
"sha256:ea16e2a7d2714277e349e24d19a782a663a34ed60864006e8585db08f8ad1782"},
- {file =
"mypy-1.16.1-cp311-cp311-manylinux_2_17_aarch64.manylinux2014_aarch64.manylinux_2_28_aarch64.whl",
hash =
"sha256:08e850ea22adc4d8a4014651575567b0318ede51e8e9fe7a68f25391af699507"},
- {file =
"mypy-1.16.1-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_28_x86_64.whl",
hash =
"sha256:22d76a63a42619bfb90122889b903519149879ddbf2ba4251834727944c8baca"},
- {file = "mypy-1.16.1-cp311-cp311-musllinux_1_2_x86_64.whl", hash =
"sha256:2c7ce0662b6b9dc8f4ed86eb7a5d505ee3298c04b40ec13b30e572c0e5ae17c4"},
- {file = "mypy-1.16.1-cp311-cp311-win_amd64.whl", hash =
"sha256:211287e98e05352a2e1d4e8759c5490925a7c784ddc84207f4714822f8cf99b6"},
- {file = "mypy-1.16.1-cp312-cp312-macosx_10_13_x86_64.whl", hash =
"sha256:af4792433f09575d9eeca5c63d7d90ca4aeceda9d8355e136f80f8967639183d"},
- {file = "mypy-1.16.1-cp312-cp312-macosx_11_0_arm64.whl", hash =
"sha256:66df38405fd8466ce3517eda1f6640611a0b8e70895e2a9462d1d4323c5eb4b9"},
- {file =
"mypy-1.16.1-cp312-cp312-manylinux_2_17_aarch64.manylinux2014_aarch64.manylinux_2_28_aarch64.whl",
hash =
"sha256:44e7acddb3c48bd2713994d098729494117803616e116032af192871aed80b79"},
- {file =
"mypy-1.16.1-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_28_x86_64.whl",
hash =
"sha256:0ab5eca37b50188163fa7c1b73c685ac66c4e9bdee4a85c9adac0e91d8895e15"},
- {file = "mypy-1.16.1-cp312-cp312-musllinux_1_2_x86_64.whl", hash =
"sha256:dedb6229b2c9086247e21a83c309754b9058b438704ad2f6807f0d8227f6ebdd"},
- {file = "mypy-1.16.1-cp312-cp312-win_amd64.whl", hash =
"sha256:1f0435cf920e287ff68af3d10a118a73f212deb2ce087619eb4e648116d1fe9b"},
- {file = "mypy-1.16.1-cp313-cp313-macosx_10_13_x86_64.whl", hash =
"sha256:ddc91eb318c8751c69ddb200a5937f1232ee8efb4e64e9f4bc475a33719de438"},
- {file = "mypy-1.16.1-cp313-cp313-macosx_11_0_arm64.whl", hash =
"sha256:87ff2c13d58bdc4bbe7dc0dedfe622c0f04e2cb2a492269f3b418df2de05c536"},
- {file =
"mypy-1.16.1-cp313-cp313-manylinux_2_17_aarch64.manylinux2014_aarch64.manylinux_2_28_aarch64.whl",
hash =
"sha256:0a7cfb0fe29fe5a9841b7c8ee6dffb52382c45acdf68f032145b75620acfbd6f"},
- {file =
"mypy-1.16.1-cp313-cp313-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_28_x86_64.whl",
hash =
"sha256:051e1677689c9d9578b9c7f4d206d763f9bbd95723cd1416fad50db49d52f359"},
- {file = "mypy-1.16.1-cp313-cp313-musllinux_1_2_x86_64.whl", hash =
"sha256:d5d2309511cc56c021b4b4e462907c2b12f669b2dbeb68300110ec27723971be"},
- {file = "mypy-1.16.1-cp313-cp313-win_amd64.whl", hash =
"sha256:4f58ac32771341e38a853c5d0ec0dfe27e18e27da9cdb8bbc882d2249c71a3ee"},
- {file = "mypy-1.16.1-cp39-cp39-macosx_10_9_x86_64.whl", hash =
"sha256:7fc688329af6a287567f45cc1cefb9db662defeb14625213a5b7da6e692e2069"},
- {file = "mypy-1.16.1-cp39-cp39-macosx_11_0_arm64.whl", hash =
"sha256:5e198ab3f55924c03ead626ff424cad1732d0d391478dfbf7bb97b34602395da"},
- {file =
"mypy-1.16.1-cp39-cp39-manylinux_2_17_aarch64.manylinux2014_aarch64.manylinux_2_28_aarch64.whl",
hash =
"sha256:09aa4f91ada245f0a45dbc47e548fd94e0dd5a8433e0114917dc3b526912a30c"},
- {file =
"mypy-1.16.1-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_28_x86_64.whl",
hash =
"sha256:13c7cd5b1cb2909aa318a90fd1b7e31f17c50b242953e7dd58345b2a814f6383"},
- {file = "mypy-1.16.1-cp39-cp39-musllinux_1_2_x86_64.whl", hash =
"sha256:58e07fb958bc5d752a280da0e890c538f1515b79a65757bbdc54252ba82e0b40"},
- {file = "mypy-1.16.1-cp39-cp39-win_amd64.whl", hash =
"sha256:f895078594d918f93337a505f8add9bd654d1a24962b4c6ed9390e12531eb31b"},
- {file = "mypy-1.16.1-py3-none-any.whl", hash =
"sha256:5fc2ac4027d0ef28d6ba69a0343737a23c4d1b83672bf38d1fe237bdc0643b37"},
- {file = "mypy-1.16.1.tar.gz", hash =
"sha256:6bd00a0a2094841c5e47e7374bb42b83d64c527a502e3334e1173a0c24437bab"},
+ {file = "mypy-1.17.1-cp310-cp310-macosx_10_9_x86_64.whl", hash =
"sha256:3fbe6d5555bf608c47203baa3e72dbc6ec9965b3d7c318aa9a4ca76f465bd972"},
+ {file = "mypy-1.17.1-cp310-cp310-macosx_11_0_arm64.whl", hash =
"sha256:80ef5c058b7bce08c83cac668158cb7edea692e458d21098c7d3bce35a5d43e7"},
+ {file =
"mypy-1.17.1-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl",
hash =
"sha256:c4a580f8a70c69e4a75587bd925d298434057fe2a428faaf927ffe6e4b9a98df"},
+ {file =
"mypy-1.17.1-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl",
hash =
"sha256:dd86bb649299f09d987a2eebb4d52d10603224500792e1bee18303bbcc1ce390"},
+ {file = "mypy-1.17.1-cp310-cp310-musllinux_1_2_x86_64.whl", hash =
"sha256:a76906f26bd8d51ea9504966a9c25419f2e668f012e0bdf3da4ea1526c534d94"},
+ {file = "mypy-1.17.1-cp310-cp310-win_amd64.whl", hash =
"sha256:e79311f2d904ccb59787477b7bd5d26f3347789c06fcd7656fa500875290264b"},
+ {file = "mypy-1.17.1-cp311-cp311-macosx_10_9_x86_64.whl", hash =
"sha256:ad37544be07c5d7fba814eb370e006df58fed8ad1ef33ed1649cb1889ba6ff58"},
+ {file = "mypy-1.17.1-cp311-cp311-macosx_11_0_arm64.whl", hash =
"sha256:064e2ff508e5464b4bd807a7c1625bc5047c5022b85c70f030680e18f37273a5"},
+ {file =
"mypy-1.17.1-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl",
hash =
"sha256:70401bbabd2fa1aa7c43bb358f54037baf0586f41e83b0ae67dd0534fc64edfd"},
+ {file =
"mypy-1.17.1-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl",
hash =
"sha256:e92bdc656b7757c438660f775f872a669b8ff374edc4d18277d86b63edba6b8b"},
+ {file = "mypy-1.17.1-cp311-cp311-musllinux_1_2_x86_64.whl", hash =
"sha256:c1fdf4abb29ed1cb091cf432979e162c208a5ac676ce35010373ff29247bcad5"},
+ {file = "mypy-1.17.1-cp311-cp311-win_amd64.whl", hash =
"sha256:ff2933428516ab63f961644bc49bc4cbe42bbffb2cd3b71cc7277c07d16b1a8b"},
+ {file = "mypy-1.17.1-cp312-cp312-macosx_10_13_x86_64.whl", hash =
"sha256:69e83ea6553a3ba79c08c6e15dbd9bfa912ec1e493bf75489ef93beb65209aeb"},
+ {file = "mypy-1.17.1-cp312-cp312-macosx_11_0_arm64.whl", hash =
"sha256:1b16708a66d38abb1e6b5702f5c2c87e133289da36f6a1d15f6a5221085c6403"},
+ {file =
"mypy-1.17.1-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl",
hash =
"sha256:89e972c0035e9e05823907ad5398c5a73b9f47a002b22359b177d40bdaee7056"},
+ {file =
"mypy-1.17.1-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl",
hash =
"sha256:03b6d0ed2b188e35ee6d5c36b5580cffd6da23319991c49ab5556c023ccf1341"},
+ {file = "mypy-1.17.1-cp312-cp312-musllinux_1_2_x86_64.whl", hash =
"sha256:c837b896b37cd103570d776bda106eabb8737aa6dd4f248451aecf53030cdbeb"},
+ {file = "mypy-1.17.1-cp312-cp312-win_amd64.whl", hash =
"sha256:665afab0963a4b39dff7c1fa563cc8b11ecff7910206db4b2e64dd1ba25aed19"},
+ {file = "mypy-1.17.1-cp313-cp313-macosx_10_13_x86_64.whl", hash =
"sha256:93378d3203a5c0800c6b6d850ad2f19f7a3cdf1a3701d3416dbf128805c6a6a7"},
+ {file = "mypy-1.17.1-cp313-cp313-macosx_11_0_arm64.whl", hash =
"sha256:15d54056f7fe7a826d897789f53dd6377ec2ea8ba6f776dc83c2902b899fee81"},
+ {file =
"mypy-1.17.1-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl",
hash =
"sha256:209a58fed9987eccc20f2ca94afe7257a8f46eb5df1fb69958650973230f91e6"},
+ {file =
"mypy-1.17.1-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl",
hash =
"sha256:099b9a5da47de9e2cb5165e581f158e854d9e19d2e96b6698c0d64de911dd849"},
+ {file = "mypy-1.17.1-cp313-cp313-musllinux_1_2_x86_64.whl", hash =
"sha256:fa6ffadfbe6994d724c5a1bb6123a7d27dd68fc9c059561cd33b664a79578e14"},
+ {file = "mypy-1.17.1-cp313-cp313-win_amd64.whl", hash =
"sha256:9a2b7d9180aed171f033c9f2fc6c204c1245cf60b0cb61cf2e7acc24eea78e0a"},
+ {file = "mypy-1.17.1-cp314-cp314-macosx_10_13_x86_64.whl", hash =
"sha256:15a83369400454c41ed3a118e0cc58bd8123921a602f385cb6d6ea5df050c733"},
+ {file = "mypy-1.17.1-cp314-cp314-macosx_11_0_arm64.whl", hash =
"sha256:55b918670f692fc9fba55c3298d8a3beae295c5cded0a55dccdc5bbead814acd"},
+ {file =
"mypy-1.17.1-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl",
hash =
"sha256:62761474061feef6f720149d7ba876122007ddc64adff5ba6f374fda35a018a0"},
+ {file =
"mypy-1.17.1-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl",
hash =
"sha256:c49562d3d908fd49ed0938e5423daed8d407774a479b595b143a3d7f87cdae6a"},
+ {file = "mypy-1.17.1-cp314-cp314-musllinux_1_2_x86_64.whl", hash =
"sha256:397fba5d7616a5bc60b45c7ed204717eaddc38f826e3645402c426057ead9a91"},
+ {file = "mypy-1.17.1-cp314-cp314-win_amd64.whl", hash =
"sha256:9d6b20b97d373f41617bd0708fd46aa656059af57f2ef72aa8c7d6a2b73b74ed"},
+ {file = "mypy-1.17.1-cp39-cp39-macosx_10_9_x86_64.whl", hash =
"sha256:5d1092694f166a7e56c805caaf794e0585cabdbf1df36911c414e4e9abb62ae9"},
+ {file = "mypy-1.17.1-cp39-cp39-macosx_11_0_arm64.whl", hash =
"sha256:79d44f9bfb004941ebb0abe8eff6504223a9c1ac51ef967d1263c6572bbebc99"},
+ {file =
"mypy-1.17.1-cp39-cp39-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl",
hash =
"sha256:b01586eed696ec905e61bd2568f48740f7ac4a45b3a468e6423a03d3788a51a8"},
+ {file =
"mypy-1.17.1-cp39-cp39-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl",
hash =
"sha256:43808d9476c36b927fbcd0b0255ce75efe1b68a080154a38ae68a7e62de8f0f8"},
+ {file = "mypy-1.17.1-cp39-cp39-musllinux_1_2_x86_64.whl", hash =
"sha256:feb8cc32d319edd5859da2cc084493b3e2ce5e49a946377663cc90f6c15fb259"},
+ {file = "mypy-1.17.1-cp39-cp39-win_amd64.whl", hash =
"sha256:d7598cf74c3e16539d4e2f0b8d8c318e00041553d83d4861f87c7a72e95ac24d"},
+ {file = "mypy-1.17.1-py3-none-any.whl", hash =
"sha256:a9f52c0351c21fe24c21d8c0eb1f62967b262d6729393397b6f443c3b773c3b9"},
+ {file = "mypy-1.17.1.tar.gz", hash =
"sha256:25e01ec741ab5bb3eec8ba9cdb0f769230368a22c959c4937360efb89b7e9f01"},
]
[package.dependencies]
@@ -1543,14 +1531,14 @@
[[package]]
name = "phonenumbers"
-version = "9.0.10"
+version = "9.0.11"
description = "Python version of Google's common library for parsing,
formatting, storing and validating international phone numbers."
optional = false
python-versions = "*"
groups = ["main"]
files = [
- {file = "phonenumbers-9.0.10-py2.py3-none-any.whl", hash =
"sha256:13b12d269be1f2b363c9bc2868656a7e2e8b50f1a1cef629c75005da6c374c6b"},
- {file = "phonenumbers-9.0.10.tar.gz", hash =
"sha256:c2d15a6a9d0534b14a7764f51246ada99563e263f65b80b0251d1a760ac4a1ba"},
+ {file = "phonenumbers-9.0.11-py2.py3-none-any.whl", hash =
"sha256:a8ebb2136f1f14dfdbadb98be01cb71b96f880dea011eb5e0921967fe3a23abf"},
+ {file = "phonenumbers-9.0.11.tar.gz", hash =
"sha256:6573858dcf0a7a2753a071375e154d9fc11791546c699b575af95d2ba7d84a1d"},
]
[[package]]
@@ -1920,22 +1908,21 @@
[[package]]
name = "pygithub"
-version = "2.6.1"
+version = "2.7.0"
description = "Use the full Github API v3"
optional = false
python-versions = ">=3.8"
groups = ["dev"]
files = [
- {file = "PyGithub-2.6.1-py3-none-any.whl", hash =
"sha256:6f2fa6d076ccae475f9fc392cc6cdbd54db985d4f69b8833a28397de75ed6ca3"},
- {file = "pygithub-2.6.1.tar.gz", hash =
"sha256:b5c035392991cca63959e9453286b41b54d83bf2de2daa7d7ff7e4312cebf3bf"},
+ {file = "pygithub-2.7.0-py3-none-any.whl", hash =
"sha256:40ecbfe26dc55cc34ab4b0ffa1d455e6f816ef9a2bc8d6f5ad18ce572f163700"},
+ {file = "pygithub-2.7.0.tar.gz", hash =
"sha256:7cd6eafabb09b5369afba3586d86b1f1ad6f1326d2ff01bc47bb26615dce4cbb"},
]
[package.dependencies]
-Deprecated = "*"
pyjwt = {version = ">=2.4.0", extras = ["crypto"]}
pynacl = ">=1.4.0"
requests = ">=2.14.0"
-typing-extensions = ">=4.0.0"
+typing-extensions = ">=4.5.0"
urllib3 = ">=1.26.0"
[[package]]
@@ -3011,14 +2998,14 @@
[[package]]
name = "types-pyyaml"
-version = "6.0.12.20250516"
+version = "6.0.12.20250809"
description = "Typing stubs for PyYAML"
optional = false
python-versions = ">=3.9"
groups = ["dev"]
files = [
- {file = "types_pyyaml-6.0.12.20250516-py3-none-any.whl", hash =
"sha256:8478208feaeb53a34cb5d970c56a7cd76b72659442e733e268a94dc72b2d0530"},
- {file = "types_pyyaml-6.0.12.20250516.tar.gz", hash =
"sha256:9f21a70216fc0fa1b216a8176db5f9e0af6eb35d2f2932acb87689d03a5bf6ba"},
+ {file = "types_pyyaml-6.0.12.20250809-py3-none-any.whl", hash =
"sha256:032b6003b798e7de1a1ddfeefee32fac6486bdfe4845e0ae0e7fb3ee4512b52f"},
+ {file = "types_pyyaml-6.0.12.20250809.tar.gz", hash =
"sha256:af4a1aca028f18e75297da2ee0da465f799627370d74073e96fee876524f61b5"},
]
[[package]]
@@ -3038,14 +3025,14 @@
[[package]]
name = "types-setuptools"
-version = "80.9.0.20250529"
+version = "80.9.0.20250809"
description = "Typing stubs for setuptools"
optional = false
python-versions = ">=3.9"
groups = ["dev"]
files = [
- {file = "types_setuptools-80.9.0.20250529-py3-none-any.whl", hash =
"sha256:00dfcedd73e333a430e10db096e4d46af93faf9314f832f13b6bbe3d6757e95f"},
- {file = "types_setuptools-80.9.0.20250529.tar.gz", hash =
"sha256:79e088ba0cba2186c8d6499cbd3e143abb142d28a44b042c28d3148b1e353c91"},
+ {file = "types_setuptools-80.9.0.20250809-py3-none-any.whl", hash =
"sha256:7c6539b4c7ac7b4ab4db2be66d8a58fb1e28affa3ee3834be48acafd94f5976a"},
+ {file = "types_setuptools-80.9.0.20250809.tar.gz", hash =
"sha256:e986ba37ffde364073d76189e1d79d9928fb6f5278c7d07589cde353d0218864"},
]
[[package]]
@@ -3118,91 +3105,6 @@
]
[[package]]
-name = "wrapt"
-version = "1.15.0"
-description = "Module for decorators, wrappers and monkey patching."
-optional = false
-python-versions = "!=3.0.*,!=3.1.*,!=3.2.*,!=3.3.*,!=3.4.*,>=2.7"
-groups = ["dev"]
-files = [
- {file = "wrapt-1.15.0-cp27-cp27m-macosx_10_9_x86_64.whl", hash =
"sha256:ca1cccf838cd28d5a0883b342474c630ac48cac5df0ee6eacc9c7290f76b11c1"},
- {file = "wrapt-1.15.0-cp27-cp27m-manylinux1_i686.whl", hash =
"sha256:e826aadda3cae59295b95343db8f3d965fb31059da7de01ee8d1c40a60398b29"},
- {file = "wrapt-1.15.0-cp27-cp27m-manylinux1_x86_64.whl", hash =
"sha256:5fc8e02f5984a55d2c653f5fea93531e9836abbd84342c1d1e17abc4a15084c2"},
- {file = "wrapt-1.15.0-cp27-cp27m-manylinux2010_i686.whl", hash =
"sha256:96e25c8603a155559231c19c0349245eeb4ac0096fe3c1d0be5c47e075bd4f46"},
- {file = "wrapt-1.15.0-cp27-cp27m-manylinux2010_x86_64.whl", hash =
"sha256:40737a081d7497efea35ab9304b829b857f21558acfc7b3272f908d33b0d9d4c"},
- {file = "wrapt-1.15.0-cp27-cp27mu-manylinux1_i686.whl", hash =
"sha256:f87ec75864c37c4c6cb908d282e1969e79763e0d9becdfe9fe5473b7bb1e5f09"},
- {file = "wrapt-1.15.0-cp27-cp27mu-manylinux1_x86_64.whl", hash =
"sha256:1286eb30261894e4c70d124d44b7fd07825340869945c79d05bda53a40caa079"},
- {file = "wrapt-1.15.0-cp27-cp27mu-manylinux2010_i686.whl", hash =
"sha256:493d389a2b63c88ad56cdc35d0fa5752daac56ca755805b1b0c530f785767d5e"},
- {file = "wrapt-1.15.0-cp27-cp27mu-manylinux2010_x86_64.whl", hash =
"sha256:58d7a75d731e8c63614222bcb21dd992b4ab01a399f1f09dd82af17bbfc2368a"},
- {file = "wrapt-1.15.0-cp310-cp310-macosx_10_9_x86_64.whl", hash =
"sha256:21f6d9a0d5b3a207cdf7acf8e58d7d13d463e639f0c7e01d82cdb671e6cb7923"},
- {file = "wrapt-1.15.0-cp310-cp310-macosx_11_0_arm64.whl", hash =
"sha256:ce42618f67741d4697684e501ef02f29e758a123aa2d669e2d964ff734ee00ee"},
- {file =
"wrapt-1.15.0-cp310-cp310-manylinux_2_17_aarch64.manylinux2014_aarch64.whl",
hash =
"sha256:41d07d029dd4157ae27beab04d22b8e261eddfc6ecd64ff7000b10dc8b3a5727"},
- {file =
"wrapt-1.15.0-cp310-cp310-manylinux_2_5_i686.manylinux1_i686.manylinux_2_17_i686.manylinux2014_i686.whl",
hash =
"sha256:54accd4b8bc202966bafafd16e69da9d5640ff92389d33d28555c5fd4f25ccb7"},
- {file =
"wrapt-1.15.0-cp310-cp310-manylinux_2_5_x86_64.manylinux1_x86_64.manylinux_2_17_x86_64.manylinux2014_x86_64.whl",
hash =
"sha256:2fbfbca668dd15b744418265a9607baa970c347eefd0db6a518aaf0cfbd153c0"},
- {file = "wrapt-1.15.0-cp310-cp310-musllinux_1_1_aarch64.whl", hash =
"sha256:76e9c727a874b4856d11a32fb0b389afc61ce8aaf281ada613713ddeadd1cfec"},
- {file = "wrapt-1.15.0-cp310-cp310-musllinux_1_1_i686.whl", hash =
"sha256:e20076a211cd6f9b44a6be58f7eeafa7ab5720eb796975d0c03f05b47d89eb90"},
- {file = "wrapt-1.15.0-cp310-cp310-musllinux_1_1_x86_64.whl", hash =
"sha256:a74d56552ddbde46c246b5b89199cb3fd182f9c346c784e1a93e4dc3f5ec9975"},
- {file = "wrapt-1.15.0-cp310-cp310-win32.whl", hash =
"sha256:26458da5653aa5b3d8dc8b24192f574a58984c749401f98fff994d41d3f08da1"},
- {file = "wrapt-1.15.0-cp310-cp310-win_amd64.whl", hash =
"sha256:75760a47c06b5974aa5e01949bf7e66d2af4d08cb8c1d6516af5e39595397f5e"},
- {file = "wrapt-1.15.0-cp311-cp311-macosx_10_9_x86_64.whl", hash =
"sha256:ba1711cda2d30634a7e452fc79eabcadaffedf241ff206db2ee93dd2c89a60e7"},
- {file = "wrapt-1.15.0-cp311-cp311-macosx_11_0_arm64.whl", hash =
"sha256:56374914b132c702aa9aa9959c550004b8847148f95e1b824772d453ac204a72"},
- {file =
"wrapt-1.15.0-cp311-cp311-manylinux_2_17_aarch64.manylinux2014_aarch64.whl",
hash =
"sha256:a89ce3fd220ff144bd9d54da333ec0de0399b52c9ac3d2ce34b569cf1a5748fb"},
- {file =
"wrapt-1.15.0-cp311-cp311-manylinux_2_5_i686.manylinux1_i686.manylinux_2_17_i686.manylinux2014_i686.whl",
hash =
"sha256:3bbe623731d03b186b3d6b0d6f51865bf598587c38d6f7b0be2e27414f7f214e"},
- {file =
"wrapt-1.15.0-cp311-cp311-manylinux_2_5_x86_64.manylinux1_x86_64.manylinux_2_17_x86_64.manylinux2014_x86_64.whl",
hash =
"sha256:3abbe948c3cbde2689370a262a8d04e32ec2dd4f27103669a45c6929bcdbfe7c"},
- {file = "wrapt-1.15.0-cp311-cp311-musllinux_1_1_aarch64.whl", hash =
"sha256:b67b819628e3b748fd3c2192c15fb951f549d0f47c0449af0764d7647302fda3"},
- {file = "wrapt-1.15.0-cp311-cp311-musllinux_1_1_i686.whl", hash =
"sha256:7eebcdbe3677e58dd4c0e03b4f2cfa346ed4049687d839adad68cc38bb559c92"},
- {file = "wrapt-1.15.0-cp311-cp311-musllinux_1_1_x86_64.whl", hash =
"sha256:74934ebd71950e3db69960a7da29204f89624dde411afbfb3b4858c1409b1e98"},
- {file = "wrapt-1.15.0-cp311-cp311-win32.whl", hash =
"sha256:bd84395aab8e4d36263cd1b9308cd504f6cf713b7d6d3ce25ea55670baec5416"},
- {file = "wrapt-1.15.0-cp311-cp311-win_amd64.whl", hash =
"sha256:a487f72a25904e2b4bbc0817ce7a8de94363bd7e79890510174da9d901c38705"},
- {file = "wrapt-1.15.0-cp35-cp35m-manylinux1_i686.whl", hash =
"sha256:4ff0d20f2e670800d3ed2b220d40984162089a6e2c9646fdb09b85e6f9a8fc29"},
- {file = "wrapt-1.15.0-cp35-cp35m-manylinux1_x86_64.whl", hash =
"sha256:9ed6aa0726b9b60911f4aed8ec5b8dd7bf3491476015819f56473ffaef8959bd"},
- {file = "wrapt-1.15.0-cp35-cp35m-manylinux2010_i686.whl", hash =
"sha256:896689fddba4f23ef7c718279e42f8834041a21342d95e56922e1c10c0cc7afb"},
- {file = "wrapt-1.15.0-cp35-cp35m-manylinux2010_x86_64.whl", hash =
"sha256:75669d77bb2c071333417617a235324a1618dba66f82a750362eccbe5b61d248"},
- {file = "wrapt-1.15.0-cp35-cp35m-win32.whl", hash =
"sha256:fbec11614dba0424ca72f4e8ba3c420dba07b4a7c206c8c8e4e73f2e98f4c559"},
- {file = "wrapt-1.15.0-cp35-cp35m-win_amd64.whl", hash =
"sha256:fd69666217b62fa5d7c6aa88e507493a34dec4fa20c5bd925e4bc12fce586639"},
- {file = "wrapt-1.15.0-cp36-cp36m-macosx_10_9_x86_64.whl", hash =
"sha256:b0724f05c396b0a4c36a3226c31648385deb6a65d8992644c12a4963c70326ba"},
- {file =
"wrapt-1.15.0-cp36-cp36m-manylinux_2_17_aarch64.manylinux2014_aarch64.whl",
hash =
"sha256:bbeccb1aa40ab88cd29e6c7d8585582c99548f55f9b2581dfc5ba68c59a85752"},
- {file =
"wrapt-1.15.0-cp36-cp36m-manylinux_2_5_i686.manylinux1_i686.manylinux_2_17_i686.manylinux2014_i686.whl",
hash =
"sha256:38adf7198f8f154502883242f9fe7333ab05a5b02de7d83aa2d88ea621f13364"},
- {file =
"wrapt-1.15.0-cp36-cp36m-manylinux_2_5_x86_64.manylinux1_x86_64.manylinux_2_17_x86_64.manylinux2014_x86_64.whl",
hash =
"sha256:578383d740457fa790fdf85e6d346fda1416a40549fe8db08e5e9bd281c6a475"},
- {file = "wrapt-1.15.0-cp36-cp36m-musllinux_1_1_aarch64.whl", hash =
"sha256:a4cbb9ff5795cd66f0066bdf5947f170f5d63a9274f99bdbca02fd973adcf2a8"},
- {file = "wrapt-1.15.0-cp36-cp36m-musllinux_1_1_i686.whl", hash =
"sha256:af5bd9ccb188f6a5fdda9f1f09d9f4c86cc8a539bd48a0bfdc97723970348418"},
- {file = "wrapt-1.15.0-cp36-cp36m-musllinux_1_1_x86_64.whl", hash =
"sha256:b56d5519e470d3f2fe4aa7585f0632b060d532d0696c5bdfb5e8319e1d0f69a2"},
- {file = "wrapt-1.15.0-cp36-cp36m-win32.whl", hash =
"sha256:77d4c1b881076c3ba173484dfa53d3582c1c8ff1f914c6461ab70c8428b796c1"},
- {file = "wrapt-1.15.0-cp36-cp36m-win_amd64.whl", hash =
"sha256:077ff0d1f9d9e4ce6476c1a924a3332452c1406e59d90a2cf24aeb29eeac9420"},
- {file = "wrapt-1.15.0-cp37-cp37m-macosx_10_9_x86_64.whl", hash =
"sha256:5c5aa28df055697d7c37d2099a7bc09f559d5053c3349b1ad0c39000e611d317"},
- {file =
"wrapt-1.15.0-cp37-cp37m-manylinux_2_17_aarch64.manylinux2014_aarch64.whl",
hash =
"sha256:3a8564f283394634a7a7054b7983e47dbf39c07712d7b177b37e03f2467a024e"},
- {file =
"wrapt-1.15.0-cp37-cp37m-manylinux_2_5_i686.manylinux1_i686.manylinux_2_17_i686.manylinux2014_i686.whl",
hash =
"sha256:780c82a41dc493b62fc5884fb1d3a3b81106642c5c5c78d6a0d4cbe96d62ba7e"},
- {file =
"wrapt-1.15.0-cp37-cp37m-manylinux_2_5_x86_64.manylinux1_x86_64.manylinux_2_17_x86_64.manylinux2014_x86_64.whl",
hash =
"sha256:e169e957c33576f47e21864cf3fc9ff47c223a4ebca8960079b8bd36cb014fd0"},
- {file = "wrapt-1.15.0-cp37-cp37m-musllinux_1_1_aarch64.whl", hash =
"sha256:b02f21c1e2074943312d03d243ac4388319f2456576b2c6023041c4d57cd7019"},
- {file = "wrapt-1.15.0-cp37-cp37m-musllinux_1_1_i686.whl", hash =
"sha256:f2e69b3ed24544b0d3dbe2c5c0ba5153ce50dcebb576fdc4696d52aa22db6034"},
- {file = "wrapt-1.15.0-cp37-cp37m-musllinux_1_1_x86_64.whl", hash =
"sha256:d787272ed958a05b2c86311d3a4135d3c2aeea4fc655705f074130aa57d71653"},
- {file = "wrapt-1.15.0-cp37-cp37m-win32.whl", hash =
"sha256:02fce1852f755f44f95af51f69d22e45080102e9d00258053b79367d07af39c0"},
- {file = "wrapt-1.15.0-cp37-cp37m-win_amd64.whl", hash =
"sha256:abd52a09d03adf9c763d706df707c343293d5d106aea53483e0ec8d9e310ad5e"},
- {file = "wrapt-1.15.0-cp38-cp38-macosx_10_9_x86_64.whl", hash =
"sha256:cdb4f085756c96a3af04e6eca7f08b1345e94b53af8921b25c72f096e704e145"},
- {file = "wrapt-1.15.0-cp38-cp38-macosx_11_0_arm64.whl", hash =
"sha256:230ae493696a371f1dbffaad3dafbb742a4d27a0afd2b1aecebe52b740167e7f"},
- {file =
"wrapt-1.15.0-cp38-cp38-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash
= "sha256:63424c681923b9f3bfbc5e3205aafe790904053d42ddcc08542181a30a7a51bd"},
- {file =
"wrapt-1.15.0-cp38-cp38-manylinux_2_5_i686.manylinux1_i686.manylinux_2_17_i686.manylinux2014_i686.whl",
hash =
"sha256:d6bcbfc99f55655c3d93feb7ef3800bd5bbe963a755687cbf1f490a71fb7794b"},
- {file =
"wrapt-1.15.0-cp38-cp38-manylinux_2_5_x86_64.manylinux1_x86_64.manylinux_2_17_x86_64.manylinux2014_x86_64.whl",
hash =
"sha256:c99f4309f5145b93eca6e35ac1a988f0dc0a7ccf9ccdcd78d3c0adf57224e62f"},
- {file = "wrapt-1.15.0-cp38-cp38-musllinux_1_1_aarch64.whl", hash =
"sha256:b130fe77361d6771ecf5a219d8e0817d61b236b7d8b37cc045172e574ed219e6"},
- {file = "wrapt-1.15.0-cp38-cp38-musllinux_1_1_i686.whl", hash =
"sha256:96177eb5645b1c6985f5c11d03fc2dbda9ad24ec0f3a46dcce91445747e15094"},
- {file = "wrapt-1.15.0-cp38-cp38-musllinux_1_1_x86_64.whl", hash =
"sha256:d5fe3e099cf07d0fb5a1e23d399e5d4d1ca3e6dfcbe5c8570ccff3e9208274f7"},
- {file = "wrapt-1.15.0-cp38-cp38-win32.whl", hash =
"sha256:abd8f36c99512755b8456047b7be10372fca271bf1467a1caa88db991e7c421b"},
- {file = "wrapt-1.15.0-cp38-cp38-win_amd64.whl", hash =
"sha256:b06fa97478a5f478fb05e1980980a7cdf2712015493b44d0c87606c1513ed5b1"},
- {file = "wrapt-1.15.0-cp39-cp39-macosx_10_9_x86_64.whl", hash =
"sha256:2e51de54d4fb8fb50d6ee8327f9828306a959ae394d3e01a1ba8b2f937747d86"},
- {file = "wrapt-1.15.0-cp39-cp39-macosx_11_0_arm64.whl", hash =
"sha256:0970ddb69bba00670e58955f8019bec4a42d1785db3faa043c33d81de2bf843c"},
- {file =
"wrapt-1.15.0-cp39-cp39-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash
= "sha256:76407ab327158c510f44ded207e2f76b657303e17cb7a572ffe2f5a8a48aa04d"},
- {file =
"wrapt-1.15.0-cp39-cp39-manylinux_2_5_i686.manylinux1_i686.manylinux_2_17_i686.manylinux2014_i686.whl",
hash =
"sha256:cd525e0e52a5ff16653a3fc9e3dd827981917d34996600bbc34c05d048ca35cc"},
- {file =
"wrapt-1.15.0-cp39-cp39-manylinux_2_5_x86_64.manylinux1_x86_64.manylinux_2_17_x86_64.manylinux2014_x86_64.whl",
hash =
"sha256:9d37ac69edc5614b90516807de32d08cb8e7b12260a285ee330955604ed9dd29"},
- {file = "wrapt-1.15.0-cp39-cp39-musllinux_1_1_aarch64.whl", hash =
"sha256:078e2a1a86544e644a68422f881c48b84fef6d18f8c7a957ffd3f2e0a74a0d4a"},
- {file = "wrapt-1.15.0-cp39-cp39-musllinux_1_1_i686.whl", hash =
"sha256:2cf56d0e237280baed46f0b5316661da892565ff58309d4d2ed7dba763d984b8"},
- {file = "wrapt-1.15.0-cp39-cp39-musllinux_1_1_x86_64.whl", hash =
"sha256:7dc0713bf81287a00516ef43137273b23ee414fe41a3c14be10dd95ed98a2df9"},
- {file = "wrapt-1.15.0-cp39-cp39-win32.whl", hash =
"sha256:46ed616d5fb42f98630ed70c3529541408166c22cdfd4540b88d5f21006b0eff"},
- {file = "wrapt-1.15.0-cp39-cp39-win_amd64.whl", hash =
"sha256:eef4d64c650f33347c1f9266fa5ae001440b232ad9b98f1f43dfe7a79435c0a6"},
- {file = "wrapt-1.15.0-py3-none-any.whl", hash =
"sha256:64b1df0f83706b4ef4cfb4fb0e4c2669100fd7ecacfb59e091fad300d4e04640"},
- {file = "wrapt-1.15.0.tar.gz", hash =
"sha256:d06730c6aed78cee4126234cf2d071e01b44b915e725a6cb439a879ec9754a3a"},
-]
-
-[[package]]
name = "xmlschema"
version = "2.4.0"
description = "An XML Schema validator and decoder"
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/matrix-synapse-1.136.0/pyproject.toml
new/matrix-synapse-1.137.0/pyproject.toml
--- old/matrix-synapse-1.136.0/pyproject.toml 2025-08-12 14:19:58.000000000
+0200
+++ new/matrix-synapse-1.137.0/pyproject.toml 2025-08-26 11:23:44.000000000
+0200
@@ -101,7 +101,7 @@
[tool.poetry]
name = "matrix-synapse"
-version = "1.136.0"
+version = "1.137.0"
description = "Homeserver for the Matrix decentralised comms protocol"
authors = ["Matrix.org Team and Contributors <packa...@matrix.org>"]
license = "AGPL-3.0-or-later"
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/matrix-synapse-1.136.0/schema/synapse-config.schema.yaml
new/matrix-synapse-1.137.0/schema/synapse-config.schema.yaml
--- old/matrix-synapse-1.136.0/schema/synapse-config.schema.yaml
2025-08-12 14:19:58.000000000 +0200
+++ new/matrix-synapse-1.137.0/schema/synapse-config.schema.yaml
2025-08-26 11:23:44.000000000 +0200
@@ -1,5 +1,5 @@
$schema: https://element-hq.github.io/synapse/latest/schema/v1/meta.schema.json
-$id:
https://element-hq.github.io/synapse/schema/synapse/v1.136/synapse-config.schema.json
+$id:
https://element-hq.github.io/synapse/schema/synapse/v1.137/synapse-config.schema.json
type: object
properties:
modules:
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/matrix-synapse-1.136.0/synapse/_scripts/register_new_matrix_user.py
new/matrix-synapse-1.137.0/synapse/_scripts/register_new_matrix_user.py
--- old/matrix-synapse-1.136.0/synapse/_scripts/register_new_matrix_user.py
2025-08-12 14:19:58.000000000 +0200
+++ new/matrix-synapse-1.137.0/synapse/_scripts/register_new_matrix_user.py
2025-08-26 11:23:44.000000000 +0200
@@ -30,6 +30,7 @@
import requests
import yaml
+from typing_extensions import Never
_CONFLICTING_SHARED_SECRET_OPTS_ERROR = """\
Conflicting options 'registration_shared_secret' and
'registration_shared_secret_path'
@@ -40,6 +41,10 @@
No 'registration_shared_secret' or 'registration_shared_secret_path' defined
in config.
"""
+_EMPTY_SHARED_SECRET_PATH_OPTS_ERROR = """\
+The secret given via `registration_shared_secret_path` must not be empty.
+"""
+
_DEFAULT_SERVER_URL = "http://localhost:8008";
@@ -170,6 +175,12 @@
)
+def bail(err_msg: str) -> Never:
+ """Prints the given message to stderr and exits."""
+ print(err_msg, file=sys.stderr)
+ sys.exit(1)
+
+
def main() -> None:
logging.captureWarnings(True)
@@ -262,15 +273,20 @@
assert config is not None
secret = config.get("registration_shared_secret")
+ if not isinstance(secret, (str, type(None))):
+ bail("registration_shared_secret is not a string.")
secret_file = config.get("registration_shared_secret_path")
- if secret_file:
- if secret:
- print(_CONFLICTING_SHARED_SECRET_OPTS_ERROR, file=sys.stderr)
- sys.exit(1)
+ if not isinstance(secret_file, (str, type(None))):
+ bail("registration_shared_secret_path is not a string.")
+
+ if not secret and not secret_file:
+ bail(_NO_SHARED_SECRET_OPTS_ERROR)
+ elif secret and secret_file:
+ bail(_CONFLICTING_SHARED_SECRET_OPTS_ERROR)
+ elif not secret and secret_file:
secret = _read_file(secret_file,
"registration_shared_secret_path").strip()
- if not secret:
- print(_NO_SHARED_SECRET_OPTS_ERROR, file=sys.stderr)
- sys.exit(1)
+ if not secret:
+ bail(_EMPTY_SHARED_SECRET_PATH_OPTS_ERROR)
if args.password_file:
password = _read_file(args.password_file, "password-file").strip()
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/matrix-synapse-1.136.0/synapse/config/experimental.py
new/matrix-synapse-1.137.0/synapse/config/experimental.py
--- old/matrix-synapse-1.136.0/synapse/config/experimental.py 2025-08-12
14:19:58.000000000 +0200
+++ new/matrix-synapse-1.137.0/synapse/config/experimental.py 2025-08-26
11:23:44.000000000 +0200
@@ -535,11 +535,15 @@
"msc4108_delegation_endpoint", None
)
+ auth_delegated = self.msc3861.enabled or (
+ config.get("matrix_authentication_service") or {}
+ ).get("enabled", False)
+
if (
self.msc4108_enabled or self.msc4108_delegation_endpoint is not
None
- ) and not self.msc3861.enabled:
+ ) and not auth_delegated:
raise ConfigError(
- "MSC4108 requires MSC3861 to be enabled",
+ "MSC4108 requires MSC3861 or matrix_authentication_service to
be enabled",
("experimental", "msc4108_delegation_endpoint"),
)
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/matrix-synapse-1.136.0/synapse/events/utils.py
new/matrix-synapse-1.137.0/synapse/events/utils.py
--- old/matrix-synapse-1.136.0/synapse/events/utils.py 2025-08-12
14:19:58.000000000 +0200
+++ new/matrix-synapse-1.137.0/synapse/events/utils.py 2025-08-26
11:23:44.000000000 +0200
@@ -26,8 +26,8 @@
Any,
Awaitable,
Callable,
+ Collection,
Dict,
- Iterable,
List,
Mapping,
Match,
@@ -49,6 +49,7 @@
)
from synapse.api.errors import Codes, SynapseError
from synapse.api.room_versions import RoomVersion
+from synapse.logging.opentracing import SynapseTags, set_tag, trace
from synapse.types import JsonDict, Requester
from . import EventBase, StrippedStateEvent, make_event_from_dict
@@ -710,9 +711,10 @@
"m.relations", {}
).update(serialized_aggregations)
+ @trace
async def serialize_events(
self,
- events: Iterable[Union[JsonDict, EventBase]],
+ events: Collection[Union[JsonDict, EventBase]],
time_now: int,
*,
config: SerializeEventConfig = _DEFAULT_SERIALIZE_EVENT_CONFIG,
@@ -731,6 +733,11 @@
Returns:
The list of serialized events
"""
+ set_tag(
+ SynapseTags.FUNC_ARG_PREFIX + "events.length",
+ str(len(events)),
+ )
+
return [
await self.serialize_event(
event,
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/matrix-synapse-1.136.0/synapse/handlers/federation_event.py
new/matrix-synapse-1.137.0/synapse/handlers/federation_event.py
--- old/matrix-synapse-1.136.0/synapse/handlers/federation_event.py
2025-08-12 14:19:58.000000000 +0200
+++ new/matrix-synapse-1.137.0/synapse/handlers/federation_event.py
2025-08-26 11:23:44.000000000 +0200
@@ -1728,6 +1728,9 @@
event,
auth_event_id,
)
+ # Drop the event from the auth_map too, else we may
incorrectly persist
+ # events which depend on this dropped event.
+ auth_map.pop(event.event_id, None)
return
auth.append(ae)
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/matrix-synapse-1.136.0/synapse/handlers/sliding_sync/__init__.py
new/matrix-synapse-1.137.0/synapse/handlers/sliding_sync/__init__.py
--- old/matrix-synapse-1.136.0/synapse/handlers/sliding_sync/__init__.py
2025-08-12 14:19:58.000000000 +0200
+++ new/matrix-synapse-1.137.0/synapse/handlers/sliding_sync/__init__.py
2025-08-26 11:23:44.000000000 +0200
@@ -116,7 +116,7 @@
sync_config: SlidingSyncConfig,
from_token: Optional[SlidingSyncStreamToken] = None,
timeout_ms: int = 0,
- ) -> SlidingSyncResult:
+ ) -> Tuple[SlidingSyncResult, bool]:
"""
Get the sync for a client if we have new data for it now. Otherwise
wait for new data to arrive on the server. If the timeout expires, then
@@ -128,9 +128,16 @@
from_token: The point in the stream to sync from. Token of the end
of the
previous batch. May be `None` if this is the initial sync
request.
timeout_ms: The time in milliseconds to wait for new data to
arrive. If 0,
- we will immediately but there might not be any new data so we
just return an
- empty response.
+ we will respond immediately but there might not be any new
data so we just
+ return an empty response.
+
+ Returns:
+ A tuple containing the `SlidingSyncResult` and whether we waited
for new
+ activity before responding. Knowing whether we waited is useful in
traces
+ to filter out long-running requests where we were just waiting.
"""
+ did_wait = False
+
# If the user is not part of the mau group, then check that limits have
# not been exceeded (if not part of the group by this point, almost
certain
# auth_blocking will occur)
@@ -149,7 +156,7 @@
logger.warning(
"Timed out waiting for worker to catch up. Returning empty
response"
)
- return SlidingSyncResult.empty(from_token)
+ return SlidingSyncResult.empty(from_token), did_wait
# If we've spent significant time waiting to catch up, take it off
# the timeout.
@@ -185,8 +192,9 @@
current_sync_callback,
from_token=from_token.stream_token,
)
+ did_wait = True
- return result
+ return result, did_wait
@trace
async def current_sync_for_user(
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/matrix-synapse-1.136.0/synapse/rest/client/sync.py
new/matrix-synapse-1.137.0/synapse/rest/client/sync.py
--- old/matrix-synapse-1.136.0/synapse/rest/client/sync.py 2025-08-12
14:19:58.000000000 +0200
+++ new/matrix-synapse-1.137.0/synapse/rest/client/sync.py 2025-08-26
11:23:44.000000000 +0200
@@ -994,12 +994,18 @@
extensions=body.extensions,
)
- sliding_sync_results = await
self.sliding_sync_handler.wait_for_sync_for_user(
+ (
+ sliding_sync_results,
+ did_wait,
+ ) = await self.sliding_sync_handler.wait_for_sync_for_user(
requester,
sync_config,
from_token,
timeout,
)
+ # Knowing whether we waited is useful in traces to filter out
long-running
+ # requests where we were just waiting.
+ set_tag("sliding_sync.did_wait", str(did_wait))
# The client may have disconnected by now; don't bother to serialize
the
# response if so.
@@ -1011,6 +1017,7 @@
return 200, response_content
+ @trace_with_opname("sliding_sync.encode_response")
async def encode_response(
self,
requester: Requester,
@@ -1031,6 +1038,7 @@
return response
+ @trace_with_opname("sliding_sync.encode_lists")
def encode_lists(
self, lists: Mapping[str, SlidingSyncResult.SlidingWindowList]
) -> JsonDict:
@@ -1052,6 +1060,7 @@
return serialized_lists
+ @trace_with_opname("sliding_sync.encode_rooms")
async def encode_rooms(
self,
requester: Requester,
@@ -1172,6 +1181,7 @@
return serialized_rooms
+ @trace_with_opname("sliding_sync.encode_extensions")
async def encode_extensions(
self, requester: Requester, extensions: SlidingSyncResult.Extensions
) -> JsonDict:
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/matrix-synapse-1.136.0/synapse/storage/databases/main/purge_events.py
new/matrix-synapse-1.137.0/synapse/storage/databases/main/purge_events.py
--- old/matrix-synapse-1.136.0/synapse/storage/databases/main/purge_events.py
2025-08-12 14:19:58.000000000 +0200
+++ new/matrix-synapse-1.137.0/synapse/storage/databases/main/purge_events.py
2025-08-26 11:23:44.000000000 +0200
@@ -33,6 +33,73 @@
logger = logging.getLogger(__name__)
+purge_room_tables_with_event_id_index = (
+ "event_auth",
+ "event_edges",
+ "event_json",
+ "event_push_actions_staging",
+ "event_relations",
+ "event_to_state_groups",
+ "event_auth_chains",
+ "event_auth_chain_to_calculate",
+ "redactions",
+ "rejections",
+ "state_events",
+)
+"""
+Tables which lack an index on `room_id` but have one on `event_id`
+"""
+
+purge_room_tables_with_room_id_column = (
+ "current_state_events",
+ "destination_rooms",
+ "event_backward_extremities",
+ "event_forward_extremities",
+ "event_push_actions",
+ "event_search",
+ "event_failed_pull_attempts",
+ # Note: the partial state tables have foreign keys between each other, and
to
+ # `events` and `rooms`. We need to delete from them in the right order.
+ "partial_state_events",
+ "partial_state_rooms_servers",
+ "partial_state_rooms",
+ # Note: the _membership(s) tables have foreign keys to the `events` table
+ # so must be deleted first.
+ "local_current_membership",
+ "room_memberships",
+ # Note: the sliding_sync_ tables have foreign keys to the `events` table
+ # so must be deleted first.
+ "sliding_sync_joined_rooms",
+ "sliding_sync_membership_snapshots",
+ "events",
+ "federation_inbound_events_staging",
+ "receipts_graph",
+ "receipts_linearized",
+ "room_aliases",
+ "room_depth",
+ "room_stats_state",
+ "room_stats_current",
+ "room_stats_earliest_token",
+ "stream_ordering_to_exterm",
+ "users_in_public_rooms",
+ "users_who_share_private_rooms",
+ # no useful index, but let's clear them anyway
+ "appservice_room_list",
+ "e2e_room_keys",
+ "event_push_summary",
+ "pusher_throttle",
+ "room_account_data",
+ "room_tags",
+ # "rooms" happens last, to keep the foreign keys in the other tables
+ # happy
+ "rooms",
+)
+"""
+The tables with a `room_id` column regardless of whether they have a useful
index on
+`room_id`.
+"""
+
+
class PurgeEventsStore(StateGroupWorkerStore, CacheInvalidationWorkerStore):
async def purge_history(
self, room_id: str, token: str, delete_local_events: bool
@@ -398,20 +465,8 @@
referenced_chain_id_tuples,
)
- # Now we delete tables which lack an index on room_id but have one on
event_id
- for table in (
- "event_auth",
- "event_edges",
- "event_json",
- "event_push_actions_staging",
- "event_relations",
- "event_to_state_groups",
- "event_auth_chains",
- "event_auth_chain_to_calculate",
- "redactions",
- "rejections",
- "state_events",
- ):
+ # Now we delete tables which lack an index on `room_id` but have one
on `event_id`
+ for table in purge_room_tables_with_event_id_index:
logger.info("[purge] removing from %s", table)
txn.execute(
@@ -424,51 +479,9 @@
(room_id,),
)
- # next, the tables with an index on room_id (or no useful index)
- for table in (
- "current_state_events",
- "destination_rooms",
- "event_backward_extremities",
- "event_forward_extremities",
- "event_push_actions",
- "event_search",
- "event_failed_pull_attempts",
- # Note: the partial state tables have foreign keys between each
other, and to
- # `events` and `rooms`. We need to delete from them in the right
order.
- "partial_state_events",
- "partial_state_rooms_servers",
- "partial_state_rooms",
- # Note: the _membership(s) tables have foreign keys to the
`events` table
- # so must be deleted first.
- "local_current_membership",
- "room_memberships",
- # Note: the sliding_sync_ tables have foreign keys to the `events`
table
- # so must be deleted first.
- "sliding_sync_joined_rooms",
- "sliding_sync_membership_snapshots",
- "events",
- "federation_inbound_events_staging",
- "receipts_graph",
- "receipts_linearized",
- "room_aliases",
- "room_depth",
- "room_stats_state",
- "room_stats_current",
- "room_stats_earliest_token",
- "stream_ordering_to_exterm",
- "users_in_public_rooms",
- "users_who_share_private_rooms",
- # no useful index, but let's clear them anyway
- "appservice_room_list",
- "e2e_room_keys",
- "event_push_summary",
- "pusher_throttle",
- "room_account_data",
- "room_tags",
- # "rooms" happens last, to keep the foreign keys in the other
tables
- # happy
- "rooms",
- ):
+ # next, the tables with a `room_id` column regardless of whether they
have a
+ # useful index on `room_id`
+ for table in purge_room_tables_with_room_id_column:
logger.info("[purge] removing from %s", table)
txn.execute("DELETE FROM %s WHERE room_id=?" % (table,),
(room_id,))
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/matrix-synapse-1.136.0/tests/rest/admin/test_room.py
new/matrix-synapse-1.137.0/tests/rest/admin/test_room.py
--- old/matrix-synapse-1.136.0/tests/rest/admin/test_room.py 2025-08-12
14:19:58.000000000 +0200
+++ new/matrix-synapse-1.137.0/tests/rest/admin/test_room.py 2025-08-26
11:23:44.000000000 +0200
@@ -40,6 +40,10 @@
)
from synapse.rest.client import directory, events, knock, login, room, sync
from synapse.server import HomeServer
+from synapse.storage.databases.main.purge_events import (
+ purge_room_tables_with_event_id_index,
+ purge_room_tables_with_room_id_column,
+)
from synapse.types import UserID
from synapse.util import Clock
from synapse.util.task_scheduler import TaskScheduler
@@ -547,7 +551,7 @@
def _is_purged(self, room_id: str) -> None:
"""Test that the following tables have been purged of all rows related
to the room."""
- for table in PURGE_TABLES:
+ for table in purge_room_tables_with_room_id_column:
count = self.get_success(
self.store.db_pool.simple_select_one_onecol(
table=table,
@@ -556,7 +560,21 @@
desc="test_purge_room",
)
)
+ self.assertEqual(count, 0, msg=f"Rows not purged in {table}")
+ for table in purge_room_tables_with_event_id_index:
+ rows = self.get_success(
+ self.store.db_pool.execute(
+ "find_event_count_for_table",
+ f"""
+ SELECT COUNT(*) FROM {table} WHERE event_id IN (
+ SELECT event_id FROM events WHERE room_id=?
+ )
+ """,
+ room_id,
+ )
+ )
+ count = rows[0][0]
self.assertEqual(count, 0, msg=f"Rows not purged in {table}")
def _assert_peek(self, room_id: str, expect_code: int) -> None:
@@ -1229,7 +1247,7 @@
def _is_purged(self, room_id: str) -> None:
"""Test that the following tables have been purged of all rows related
to the room."""
- for table in PURGE_TABLES:
+ for table in purge_room_tables_with_room_id_column:
count = self.get_success(
self.store.db_pool.simple_select_one_onecol(
table=table,
@@ -1238,7 +1256,21 @@
desc="test_purge_room",
)
)
+ self.assertEqual(count, 0, msg=f"Rows not purged in {table}")
+ for table in purge_room_tables_with_event_id_index:
+ rows = self.get_success(
+ self.store.db_pool.execute(
+ "find_event_count_for_table",
+ f"""
+ SELECT COUNT(*) FROM {table} WHERE event_id IN (
+ SELECT event_id FROM events WHERE room_id=?
+ )
+ """,
+ room_id,
+ )
+ )
+ count = rows[0][0]
self.assertEqual(count, 0, msg=f"Rows not purged in {table}")
def _assert_peek(self, room_id: str, expect_code: int) -> None:
@@ -3177,35 +3209,3 @@
"""Block a room in database"""
self.get_success(self._store.block_room(room_id, self.other_user))
self._is_blocked(room_id, expect=True)
-
-
-PURGE_TABLES = [
- "current_state_events",
- "event_backward_extremities",
- "event_forward_extremities",
- "event_json",
- "event_push_actions",
- "event_search",
- "events",
- "receipts_graph",
- "receipts_linearized",
- "room_aliases",
- "room_depth",
- "room_memberships",
- "room_stats_state",
- "room_stats_current",
- "room_stats_earliest_token",
- "rooms",
- "stream_ordering_to_exterm",
- "users_in_public_rooms",
- "users_who_share_private_rooms",
- "appservice_room_list",
- "e2e_room_keys",
- "event_push_summary",
- "pusher_throttle",
- "room_account_data",
- "room_tags",
- "state_groups",
- "state_groups_state",
- "federation_inbound_events_staging",
-]
++++++ matrix-synapse.obsinfo ++++++
--- /var/tmp/diff_new_pack.4xqVt2/_old 2025-08-26 16:13:54.379469020 +0200
+++ /var/tmp/diff_new_pack.4xqVt2/_new 2025-08-26 16:13:54.387469355 +0200
@@ -1,5 +1,5 @@
name: matrix-synapse
-version: 1.136.0
-mtime: 1755001198
-commit: e8c6cb3d9e4cc5a20c40f9b6d79d5bfdfa73fcab
+version: 1.137.0
+mtime: 1756200224
+commit: f8a44638eb2f7b4e936634fdba43b795e73c1f5f
++++++ vendor.tar.zst ++++++
/work/SRC/openSUSE:Factory/matrix-synapse/vendor.tar.zst
/work/SRC/openSUSE:Factory/.matrix-synapse.new.30751/vendor.tar.zst differ:
char 7, line 1
