Update matrixdotorg/synapse Docker tag to v1.94.0 #77
Loading…
Reference in a new issue
No description provided.
Delete branch "renovate/matrixdotorg-synapse-1.x"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
This PR contains the following updates:
v1.92.3
->v1.94.0
Release Notes
matrix-org/synapse (matrixdotorg/synapse)
v1.94.0
Compare Source
Synapse 1.94.0 (2023-10-10)
No significant changes since 1.94.0rc1.
However, please take note of the security advisory that follows.
Security advisory
The following issue is fixed in 1.94.0 (and RC).
GHSA-5chr-wjw5-3gq4 / CVE-2023-45129 — Moderate Severity
A malicious server ACL event can impact performance temporarily or permanently leading to a persistent denial of service.
Homeservers running on a closed federation (which presumably do not need to use server ACLs) are not affected.
See the advisory for more details. If you have any questions, email security@matrix.org.
Synapse 1.94.0rc1 (2023-10-03)
Features
Improved Documentation
federation_domain_whitelist
config option to clarify its usage. (#16416)Deprecations and Removals
/_synapse/admin/v1/server_version
. (#16380)Internal Changes
StateGroupBackgroundUpdateStore
. (#16383)Updates to locked dependencies
v1.93.0
Compare Source
Synapse 1.93.0 (2023-09-26)
No significant changes since 1.93.0rc1.
Security advisory
The following issues are fixed in 1.93.0 (and RCs).
GHSA-4f74-84v3-j9q5 / CVE-2023-41335 — Low Severity
Temporary storage of plaintext passwords during password changes.
GHSA-7565-cq32-vx2x / CVE-2023-42453 — Low Severity
Improper validation of receipts allows forged read receipts.
See the advisories for more details. If you have any questions, email security@matrix.org.
Synapse 1.93.0rc1 (2023-09-19)
Features
matrix-fed
DNS SRV records from MSC4040. (#16137)G
(GiB) andT
(TiB) suffixes in configuration options that refer to numbers of bytes. (#16219)/notifications
endpoint to be routed to workers. (#16265)List-Unsubscribe
header. (#16274)locked
in the List Accounts admin API, and exclude locked users by default. (#16328)Bugfixes
to_device
messages would only get messages for one user. (#16251)Improved Documentation
federation_client_minimum_tls_version
documentation examples. Contributed by @jcgruenhage. (#16353)Internal Changes
ruff
can be compiled. (#16090, #16263)setuptools_rust
version cap to 1.7.0. (#16277)execute_values
with Postgres. (#16281)receipts_graph
Postgres transactions to stop error messages. (#16299)get_user_by_id
. (#16316)Updates to locked dependencies
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Renovate Bot.
c70e712e6c
to0919e8d8b2
Update matrixdotorg/synapse Docker tag to v1.93.0to Update matrixdotorg/synapse Docker tag to v1.94.0