systems/infrastructure

Fork 0

Update matrixdotorg/synapse Docker tag to v1.85.2 #32

Merged

jake merged 1 commit from renovate/matrixdotorg-synapse-1.x into master

2023-06-17 15:42:24 +01:00

renovate commented

2023-06-06 12:00:39 +01:00

Collaborator

This PR contains the following updates:

Package	Update	Change
matrixdotorg/synapse	minor	`v1.84.1` -> `v1.85.2`

Release Notes

matrix-org/synapse

Synapse 1.85.2 (2023-06-08)

Bugfixes

Fix regression where using TLS for HTTP replication between workers did not work. Introduced in v1.85.0. (#15746)

Synapse 1.85.1 (2023-06-07)

Note: this release only fixes a bug that stopped some deployments from upgrading to v1.85.0. There is no need to upgrade to v1.85.1 if successfully running v1.85.0.

Bugfixes

Fix bug in schema delta that broke upgrades for some deployments. Introduced in v1.85.0. (#15738, #15739)

Synapse 1.85.0 (2023-06-06)

No significant changes since 1.85.0rc2.

Security advisory

The following issues are fixed in 1.85.0 (and RCs).

GHSA-26c5-ppr8-f33p / CVE-2023-32682 — Low Severity

It may be possible for a deactivated user to login when using uncommon configurations.
GHSA-98px-6486-j7qc / CVE-2023-32683 — Low Severity

A discovered oEmbed or image URL can bypass the url_preview_url_blacklist setting potentially allowing server side request forgery or bypassing network policies. Impact is limited to IP addresses allowed by the url_preview_ip_range_blacklist setting (by default this only allows public IPs).

See the advisories for more details. If you have any questions, email security@matrix.org.

Synapse 1.85.0rc2 (2023-06-01)

Bugfixes

Fix a performance issue introduced in Synapse v1.83.0 which meant that purging rooms was very slow and database-intensive. (#15693)

Deprecations and Removals

Deprecate calling the /register endpoint with an unspecced user property for application services. (#15703)

Internal Changes

Speed up background jobs populate_full_user_id_user_filters and populate_full_user_id_profiles. (#15700)

Synapse 1.85.0rc1 (2023-05-30)

Features

Improve performance of backfill requests by performing backfill of previously failed requests in the background. (#15585)
Add a new admin API to create a new device for a user. (#15611)
Add Unix socket support for Redis connections. Contributed by Jason Little. (#15644)

Bugfixes

Fix a long-standing bug where setting the read marker could fail when using message retention. Contributed by Nick @ Beeper (@fizzadar). (#15464)
Fix a long-standing bug where the url_preview_url_blacklist configuration setting was not applied to oEmbed or image URLs found while previewing a URL. (#15601)
Fix a long-standing bug where filters with multiple backslashes were rejected. (#15607)
Fix a bug introduced in Synapse 1.82.0 where the error message displayed when validation of the app_service_config_files config option fails would be incorrectly formatted. (#15614)
Fix a long-standing bug where deactivated users were still able to login using the custom org.matrix.login.jwt login type (if enabled). (#15624)
Fix a long-standing bug where deactivated users were able to login in uncommon situations. (#15634)

Improved Documentation

Warn users that at least 3.75GB of space is needed for the nix Synapse development environment. (#15613)
Remove outdated comment from the generated and sample homeserver log configs. (#15648)
Improve contributor docs to make it more clear that Rust is a necessary prerequisite. Contributed by @grantm. (#15668)

Deprecations and Removals

Remove the old version of the R30 (30-day retained users) phone-home metric. (#10428)

Internal Changes

Create dependabot changelogs at release time. (#15481)
Add not null constraint to column full_user_id of tables profiles and user_filters. (#15537)
Allow connecting to HTTP Replication Endpoints by using worker_name when constructing the request. (#15578)
Make the thread_id column on event_push_actions, event_push_actions_staging, and event_push_summary non-null. (#15597)
Run mypy type checking with the minimum supported Python version to catch new usage that isn't backwards-compatible. (#15602)
Fix subscriptable type usage in Python <3.9. (#15604)
Update internal terminology. (#15606, #15620)
Instrument state and state_group storage-related operations to better picture what's happening when tracing. (#15610, #15647)
Trace how many new events from the backfill response we need to process. (#15633)
Re-type config paths in ConfigErrors to be StrSequences instead of Iterable[str]s. (#15615)
Update Mutual Rooms (MSC2666) implementation to match new proposal text. (#15621)
Remove the unstable identifiers from faster joins (MSC3706). (#15625)
Fix the olddeps CI. (#15626)
Remove duplicate timestamp from test logs (_trial_temp/test.log). (#15636)
Fix two memory leaks in trial test runs. (#15630)
Limit the size of the HomeServerConfig cache in trial test runs. (#15646)
Improve type hints. (#15658, #15659)
Add requesting user id parameter to key claim methods in TransportLayerClient. (#15663)
Speed up rebuilding of the user directory for local users. (#15665)
Implement "option 2" for MSC3820: Room version 11. (#15666, #15678)

Updates to locked dependencies

Bump furo from 2023.3.27 to 2023.5.20. (#15642)
Bump log from 0.4.17 to 0.4.18. (#15681)
Bump prometheus-client from 0.16.0 to 0.17.0. (#15682)
Bump pydantic from 1.10.7 to 1.10.8. (#15685)
Bump pygithub from 1.58.1 to 1.58.2. (#15643)
Bump requests from 2.28.2 to 2.31.0. (#15651)
Bump sphinx from 6.1.3 to 6.2.1. (#15641)
Bump types-bleach from 6.0.0.1 to 6.0.0.3. (#15686)
Bump types-pillow from 9.5.0.2 to 9.5.0.4. (#15640)
Bump types-pyyaml from 6.0.12.9 to 6.0.12.10. (#15683)
Bump types-requests from 2.30.0.0 to 2.31.0.0. (#15684)
Bump types-setuptools from 67.7.0.2 to 67.8.0.0. (#15639)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [matrixdotorg/synapse](https://github.com/matrix-org/synapse) | minor | `v1.84.1` -> `v1.85.2` | --- ### Release Notes <details> <summary>matrix-org/synapse</summary> ### [`v1.85.2`](https://github.com/matrix-org/synapse/releases/tag/v1.85.2) [Compare Source](https://github.com/matrix-org/synapse/compare/v1.85.1...v1.85.2) # Synapse 1.85.2 (2023-06-08) ## Bugfixes - Fix regression where using TLS for HTTP replication between workers did not work. Introduced in v1.85.0. ([#15746](https://github.com/matrix-org/synapse/issues/15746)) ### [`v1.85.1`](https://github.com/matrix-org/synapse/releases/tag/v1.85.1) [Compare Source](https://github.com/matrix-org/synapse/compare/v1.85.0...v1.85.1) # Synapse 1.85.1 (2023-06-07) Note: this release only fixes a bug that stopped some deployments from upgrading to v1.85.0. There is no need to upgrade to v1.85.1 if successfully running v1.85.0. ## Bugfixes - Fix bug in schema delta that broke upgrades for some deployments. Introduced in v1.85.0. ([#15738](https://github.com/matrix-org/synapse/issues/15738), [#15739](https://github.com/matrix-org/synapse/issues/15739)) ### [`v1.85.0`](https://github.com/matrix-org/synapse/releases/tag/v1.85.0) [Compare Source](https://github.com/matrix-org/synapse/compare/v1.84.1...v1.85.0) # Synapse 1.85.0 (2023-06-06) No significant changes since 1.85.0rc2. #### Security advisory The following issues are fixed in 1.85.0 (and RCs). - [GHSA-26c5-ppr8-f33p](https://github.com/matrix-org/synapse/security/advisories/GHSA-26c5-ppr8-f33p) / [CVE-2023-32682](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32682) — Low Severity It may be possible for a deactivated user to login when using uncommon configurations. - [GHSA-98px-6486-j7qc](https://github.com/matrix-org/synapse/security/advisories/GHSA-98px-6486-j7qc) / [CVE-2023-32683](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32683) — Low Severity A discovered oEmbed or image URL can bypass the `url_preview_url_blacklist` setting potentially allowing server side request forgery or bypassing network policies. Impact is limited to IP addresses allowed by the `url_preview_ip_range_blacklist` setting (by default this only allows public IPs). See the advisories for more details. If you have any questions, email security@matrix.org. # Synapse 1.85.0rc2 (2023-06-01) ## Bugfixes - Fix a performance issue introduced in Synapse v1.83.0 which meant that purging rooms was very slow and database-intensive. ([#15693](https://github.com/matrix-org/synapse/issues/15693)) ## Deprecations and Removals - Deprecate calling the `/register` endpoint with an unspecced `user` property for application services. ([#15703](https://github.com/matrix-org/synapse/issues/15703)) ## Internal Changes - Speed up background jobs `populate_full_user_id_user_filters` and `populate_full_user_id_profiles`. ([#15700](https://github.com/matrix-org/synapse/issues/15700)) # Synapse 1.85.0rc1 (2023-05-30) ## Features - Improve performance of backfill requests by performing backfill of previously failed requests in the background. ([#15585](https://github.com/matrix-org/synapse/issues/15585)) - Add a new [admin API](https://matrix-org.github.io/synapse/v1.85/usage/administration/admin_api/index.html) to [create a new device for a user](https://matrix-org.github.io/synapse/v1.85/admin_api/user_admin_api.html#create-a-device). ([#15611](https://github.com/matrix-org/synapse/issues/15611)) - Add Unix socket support for Redis connections. Contributed by Jason Little. ([#15644](https://github.com/matrix-org/synapse/issues/15644)) ## Bugfixes - Fix a long-standing bug where setting the read marker could fail when using message retention. Contributed by Nick @ Beeper ([@fizzadar](https://github.com/fizzadar)). ([#15464](https://github.com/matrix-org/synapse/issues/15464)) - Fix a long-standing bug where the `url_preview_url_blacklist` configuration setting was not applied to oEmbed or image URLs found while previewing a URL. ([#15601](https://github.com/matrix-org/synapse/issues/15601)) - Fix a long-standing bug where filters with multiple backslashes were rejected. ([#15607](https://github.com/matrix-org/synapse/issues/15607)) - Fix a bug introduced in Synapse 1.82.0 where the error message displayed when validation of the `app_service_config_files` config option fails would be incorrectly formatted. ([#15614](https://github.com/matrix-org/synapse/issues/15614)) - Fix a long-standing bug where deactivated users were still able to login using the custom `org.matrix.login.jwt` login type (if enabled). ([#15624](https://github.com/matrix-org/synapse/issues/15624)) - Fix a long-standing bug where deactivated users were able to login in uncommon situations. ([#15634](https://github.com/matrix-org/synapse/issues/15634)) ## Improved Documentation - Warn users that at least 3.75GB of space is needed for the nix Synapse development environment. ([#15613](https://github.com/matrix-org/synapse/issues/15613)) - Remove outdated comment from the generated and sample homeserver log configs. ([#15648](https://github.com/matrix-org/synapse/issues/15648)) - Improve contributor docs to make it more clear that Rust is a necessary prerequisite. Contributed by [@grantm](https://github.com/grantm). ([#15668](https://github.com/matrix-org/synapse/issues/15668)) ## Deprecations and Removals - Remove the old version of the R30 (30-day retained users) phone-home metric. ([#10428](https://github.com/matrix-org/synapse/issues/10428)) ## Internal Changes - Create dependabot changelogs at release time. ([#15481](https://github.com/matrix-org/synapse/issues/15481)) - Add not null constraint to column `full_user_id` of tables `profiles` and `user_filters`. ([#15537](https://github.com/matrix-org/synapse/issues/15537)) - Allow connecting to HTTP Replication Endpoints by using `worker_name` when constructing the request. ([#15578](https://github.com/matrix-org/synapse/issues/15578)) - Make the `thread_id` column on `event_push_actions`, `event_push_actions_staging`, and `event_push_summary` non-null. ([#15597](https://github.com/matrix-org/synapse/issues/15597)) - Run mypy type checking with the minimum supported Python version to catch new usage that isn't backwards-compatible. ([#15602](https://github.com/matrix-org/synapse/issues/15602)) - Fix subscriptable type usage in Python <3.9. ([#15604](https://github.com/matrix-org/synapse/issues/15604)) - Update internal terminology. ([#15606](https://github.com/matrix-org/synapse/issues/15606), [#15620](https://github.com/matrix-org/synapse/issues/15620)) - Instrument `state` and `state_group` storage-related operations to better picture what's happening when tracing. ([#15610](https://github.com/matrix-org/synapse/issues/15610), [#15647](https://github.com/matrix-org/synapse/issues/15647)) - Trace how many new events from the backfill response we need to process. ([#15633](https://github.com/matrix-org/synapse/issues/15633)) - Re-type config paths in `ConfigError`s to be `StrSequence`s instead of `Iterable[str]`s. ([#15615](https://github.com/matrix-org/synapse/issues/15615)) - Update Mutual Rooms ([MSC2666](https://github.com/matrix-org/matrix-spec-proposals/pull/2666)) implementation to match new proposal text. ([#15621](https://github.com/matrix-org/synapse/issues/15621)) - Remove the unstable identifiers from faster joins ([MSC3706](https://github.com/matrix-org/matrix-spec-proposals/pull/3706)). ([#15625](https://github.com/matrix-org/synapse/issues/15625)) - Fix the olddeps CI. ([#15626](https://github.com/matrix-org/synapse/issues/15626)) - Remove duplicate timestamp from test logs (`_trial_temp/test.log`). ([#15636](https://github.com/matrix-org/synapse/issues/15636)) - Fix two memory leaks in `trial` test runs. ([#15630](https://github.com/matrix-org/synapse/issues/15630)) - Limit the size of the `HomeServerConfig` cache in trial test runs. ([#15646](https://github.com/matrix-org/synapse/issues/15646)) - Improve type hints. ([#15658](https://github.com/matrix-org/synapse/issues/15658), [#15659](https://github.com/matrix-org/synapse/issues/15659)) - Add requesting user id parameter to key claim methods in `TransportLayerClient`. ([#15663](https://github.com/matrix-org/synapse/issues/15663)) - Speed up rebuilding of the user directory for local users. ([#15665](https://github.com/matrix-org/synapse/issues/15665)) - Implement "option 2" for [MSC3820](https://github.com/matrix-org/matrix-spec-proposals/pull/3820): Room version 11. ([#15666](https://github.com/matrix-org/synapse/issues/15666), [#15678](https://github.com/matrix-org/synapse/issues/15678)) ##### Updates to locked dependencies - Bump furo from 2023.3.27 to 2023.5.20. ([#15642](https://github.com/matrix-org/synapse/issues/15642)) - Bump log from 0.4.17 to 0.4.18. ([#15681](https://github.com/matrix-org/synapse/issues/15681)) - Bump prometheus-client from 0.16.0 to 0.17.0. ([#15682](https://github.com/matrix-org/synapse/issues/15682)) - Bump pydantic from 1.10.7 to 1.10.8. ([#15685](https://github.com/matrix-org/synapse/issues/15685)) - Bump pygithub from 1.58.1 to 1.58.2. ([#15643](https://github.com/matrix-org/synapse/issues/15643)) - Bump requests from 2.28.2 to 2.31.0. ([#15651](https://github.com/matrix-org/synapse/issues/15651)) - Bump sphinx from 6.1.3 to 6.2.1. ([#15641](https://github.com/matrix-org/synapse/issues/15641)) - Bump types-bleach from 6.0.0.1 to 6.0.0.3. ([#15686](https://github.com/matrix-org/synapse/issues/15686)) - Bump types-pillow from 9.5.0.2 to 9.5.0.4. ([#15640](https://github.com/matrix-org/synapse/issues/15640)) - Bump types-pyyaml from 6.0.12.9 to 6.0.12.10. ([#15683](https://github.com/matrix-org/synapse/issues/15683)) - Bump types-requests from 2.30.0.0 to 2.31.0.0. ([#15684](https://github.com/matrix-org/synapse/issues/15684)) - Bump types-setuptools from 67.7.0.2 to 67.8.0.0. ([#15639](https://github.com/matrix-org/synapse/issues/15639)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).

renovate force-pushed renovate/matrixdotorg-synapse-1.x from 88bccb6a67

/ terraform (push) Successful in 1m13s

Details

/ ansible (push) Failing after 1m53s

Details

to 583cc175bd

/ terraform (push) Successful in 1m13s

Details

/ ansible (push) Failing after 1m53s

Details

2023-06-07 14:00:30 +01:00

Compare