Update docker.io/matrixdotorg/synapse Docker tag to v1.105.1
This MR contains the following updates:
Package | Update | Change |
---|---|---|
docker.io/matrixdotorg/synapse (source) | minor |
v1.104.0 -> v1.105.1
|
Release Notes
element-hq/synapse (docker.io/matrixdotorg/synapse)
v1.105.1
Synapse 1.105.1 (2024-04-23)
Security advisory
The following issues are fixed in 1.105.1.
-
GHSA-3h7q-rfh9-xm4v / CVE-2024-31208 — High Severity
Weakness in auth chain indexing allows DoS from remote room members through disk fill and high CPU usage.
See the advisories for more details. If you have any questions, email security@element.io.
v1.105.0
Synapse 1.105.0 (2024-04-16)
No significant changes since 1.105.0rc1.
Synapse 1.105.0rc1 (2024-04-11)
Features
- Stabilize support for MSC4010 which clarifies the interaction of push rules and account data. Contributed by @clokep. (#17022)
- Stabilize support for MSC3981:
/relations
recursion. Contributed by @clokep. (#17023) - Add support for moving
/pushrules
off of main process. (#17037, #17038)
Bugfixes
- Fix various long-standing bugs which could cause incorrect state to be returned from
/sync
in certain situations. (#16930, #16932, #16942, #17064, #17065, #17066) - Fix server notice rooms not always being created as unencrypted rooms, even when
encryption_enabled_by_default_for_room_type
is in use (server notices are always unencrypted). (#17033) - Fix the
.m.rule.encrypted_room_one_to_one
and.m.rule.room_one_to_one
default underride push rules being in the wrong order. Contributed by @Sumpy1. (#17043)
Internal Changes
- Refactor auth chain fetching to reduce duplication. (#17044)
- Improve database performance by adding a missing index to
access_tokens.refresh_token_id
. (#17045, #17054) - Improve database performance by reducing number of receipts fetched when sending push notifications. (#17049)
Updates to locked dependencies
- Bump packaging from 23.2 to 24.0. (#17027)
- Bump regex from 1.10.3 to 1.10.4. (#17028)
- Bump ruff from 0.3.2 to 0.3.5. (#17060)
- Bump serde_json from 1.0.114 to 1.0.115. (#17041)
- Bump types-pillow from 10.2.0.20240125 to 10.2.0.20240406. (#17061)
- Bump types-requests from 2.31.0.20240125 to 2.31.0.20240406. (#17063)
- Bump typing-extensions from 4.9.0 to 4.11.0. (#17062)
Configuration
-
If you want to rebase/retry this MR, check this box
This MR has been generated by Renovate Bot.