chore(deps): update docker.io/matrixdotorg/synapse docker tag to v1.145.0 #249

Open
renovatebot wants to merge 1 commit from renovate/docker.io-matrixdotorg-synapse-1.x into main
Member

This PR contains the following updates:

Package Update Change
docker.io/matrixdotorg/synapse minor v1.140.0 -> v1.145.0

⚠️ Warning

Some dependencies could not be looked up. Check the warning logs for more information.


Release Notes

element-hq/synapse (docker.io/matrixdotorg/synapse)

v1.145.0

Compare Source

Synapse 1.145.0 (2026-01-13)

No significant changes since 1.145.0rc4.

End of Life of Ubuntu 25.04 Plucky Puffin

Ubuntu 25.04 (Plucky Puffin) will be end of life on Jan 17, 2026. Synapse will stop building packages for Ubuntu 25.04 shortly thereafter.

Updates to Locked Dependencies No Longer Included in Changelog

The "Updates to locked dependencies" section has been removed from the changelog due to lack of use and the maintenance burden. (#​19254)

Synapse 1.145.0rc4 (2026-01-08)

No significant changes since 1.145.0rc3.

This RC contains a fix specifically for openSUSE packaging and no other changes.

Synapse 1.145.0rc3 (2026-01-07)

No significant changes since 1.145.0rc2.

This RC strips out unnecessary files from the wheels that were added when fixing the source distribution packaging in the previous RC.

Synapse 1.145.0rc2 (2026-01-07)

No significant changes since 1.145.0rc1.

This RC fixes the source distribution packaging for uploading to PyPI.

Synapse 1.145.0rc1 (2026-01-06)

Features

  • Add memberships endpoint to the admin API. This is useful for forensics and T&S purposes. (#​19260)
  • Server admins can bypass the quarantine media check when downloading media by setting the admin_unsafely_bypass_quarantine query parameter to true on Client-Server API media download requests. (#​19275)
  • Implemented pagination for the MSC2666 mutual rooms endpoint. Contributed by @​tulir @​ Beeper. (#​19279)
  • Admin API: add worker support to GET /_synapse/admin/v2/users/<user_id>. (#​19281)
  • Improve proxy support for the federation_client.py dev script. Contributed by Denis Kasak (@​dkasak). (#​19300)

Bugfixes

  • Fix sliding sync performance slow down for long lived connections. (#​19206)
  • Fix a bug where Mastodon posts (and possibly other embeds) have the wrong description for URL previews. (#​19231)
  • Fix bug where Duration was logged incorrectly. (#​19267)
  • Fix bug introduced in 1.143.0 that broke support for versions of zope-interface older than 6.2. (#​19274)
  • Transform events with client metadata before serialising in /event response. (#​19340)

Updates to the Docker image

  • Add a way to expose metrics from the Docker image (SYNAPSE_ENABLE_METRICS). (#​19324)

Improved Documentation

  • Document the importance of public_baseurl when configuring OpenID Connect authentication. (#​19270)

Deprecations and Removals

  • Ubuntu 25.04 (Plucky Puffin) will be end of life on Jan 17, 2026. Synapse will stop building packages for Ubuntu 25.04 shortly thereafter.
  • Remove the "Updates to locked dependencies" section from the changelog due to lack of use and the maintenance burden. (#​19254)

Internal Changes

  • Group together dependabot update PRs to reduce the review load. (#​18402)
  • Fix HomeServer.shutdown() failing if the homeserver hasn't been setup yet. (#​19187)
  • Respond with useful error codes with Content-Length header/s are invalid. (#​19212)
  • Fix HomeServer.shutdown() failing if the homeserver failed to start. (#​19232)
  • Switch the build backend from poetry-core to maturin. (#​19234)
  • Raise the limit for concurrently-open non-security @​dependabot PRs from 5 to 10. (#​19253)
  • Require 14 days to pass before pulling in general dependency updates to help mitigate upstream supply chain attacks. (#​19258)
  • Drop the broken netlify documentation workflow until a new one is implemented. (#​19262)
  • Don't include debug logs in Clock unless explicitly enabled. (#​19278)
  • Use uv to test olddeps to ensure all transitive dependencies use minimum versions. (#​19289)
  • Add a config to be able to rate limit search in the user directory. (#​19291)
  • Log the original bind exception when encountering Failed to listen on 0.0.0.0, continuing because listening on [::]. (#​19297)
  • Unpin the version of Rust we use to build Synapse wheels (was 1.82.0) now that MacOS support has been dropped. (#​19302)
  • Make it more clear how shared_extra_conf is combined in our Docker configuration scripts. (#​19323)
  • Update CI to stream Complement progress and format logs in a separate step after all tests are done. (#​19326)
  • Format .github/workflows/tests.yml. (#​19327)

v1.144.0

Compare Source

Synapse 1.144.0 (2025-12-09)

Deprecation of MacOS Python wheels

The team has decided to deprecate and stop publishing python wheels for MacOS as of this release. Synapse docker images will continue to work on MacOS, as will building Synapse from source (though note this requires a Rust compiler).

Unstable mutual rooms endpoint is now behind an experimental feature flag

Admins using the unstable MSC2666 endpoint (/_matrix/client/unstable/uk.half-shot.msc2666/user/mutual_rooms), please check the relevant section in the upgrade notes as this release contains changes that disable that endpoint by default.

No significant changes since 1.144.0rc1.

Synapse 1.144.0rc1 (2025-12-02)

Admins using the unstable MSC2666 endpoint (/_matrix/client/unstable/uk.half-shot.msc2666/user/mutual_rooms), please check the relevant section in the upgrade notes as this release contains changes that disable that endpoint by default.

Features

  • Add experimental implementation of MSC4380 (invite blocking). (#​19203)
  • Allow restarting delayed event timeouts on workers. (#​19207)

Bugfixes

  • Fix a bug in the database function for fetching state deltas that could result in unnecessarily long query times. (#​18960)
  • Fix v12 rooms when running with use_frozen_dicts: True. (#​19235)
  • Fix bug where invalid canonical_alias content would return 500 instead of 400. (#​19240)
  • Fix bug where Duration was logged incorrectly. (#​19267)

Improved Documentation

  • Document in the --config-path help how multiple files are merged - by merging them shallowly. (#​19243)

Deprecations and Removals

  • Stop building release wheels for MacOS. (#​19225)

Internal Changes

  • Improve event filtering for Simplified Sliding Sync. (#​17782)
  • Export SYNAPSE_SUPPORTED_COMPLEMENT_TEST_PACKAGES environment variable from scripts-dev/complement.sh. (#​19208)
  • Refactor scripts-dev/complement.sh logic to avoid exit to facilitate being able to source it from other scripts (composable). (#​19209)
  • Expire sliding sync connections that are too old or have too much pending data. (#​19211)
  • Require an experimental feature flag to be enabled in order for the unstable MSC2666 endpoint (/_matrix/client/unstable/uk.half-shot.msc2666/user/mutual_rooms) to be available. (#​19219)
  • Prevent changelog check CI running on @​dependabot's PRs even when a human has modified the branch. (#​19220)
  • Auto-fix trailing spaces in multi-line strings and comments when running the lint script. (#​19221)
  • Move towards using a dedicated Duration type. (#​19223, #​19229)
  • Improve robustness of the SQL schema linting in CI. (#​19224)
  • Add log to determine whether clients are using /messages as expected. (#​19226)
  • Simplify README and add ESS Getting started section. (#​19228, #​19259)
  • Add a unit test for ensuring associated refresh tokens are erased when a device is deleted. (#​19230)
  • Prompt user to consider adding future deprecations to the changelog in release script. (#​19239)
  • Fix check of the Rust compiled code being outdated when using source checkout and .egg-info. (#​19251)
  • Stop building MacOS wheels in CI pipeline. (#​19263)
Updates to locked dependencies
  • Bump Swatinem/rust-cache from 2.8.1 to 2.8.2. (#​19244)
  • Bump actions/checkout from 5.0.0 to 6.0.0. (#​19213)
  • Bump actions/setup-go from 6.0.0 to 6.1.0. (#​19214)
  • Bump actions/setup-python from 6.0.0 to 6.1.0. (#​19245)
  • Bump attrs from 25.3.0 to 25.4.0. (#​19215)
  • Bump docker/metadata-action from 5.9.0 to 5.10.0. (#​19246)
  • Bump http from 1.3.1 to 1.4.0. (#​19249)
  • Bump pydantic from 2.12.4 to 2.12.5. (#​19250)
  • Bump pyopenssl from 25.1.0 to 25.3.0. (#​19248)
  • Bump rpds-py from 0.28.0 to 0.29.0. (#​19216)
  • Bump rpds-py from 0.29.0 to 0.30.0. (#​19247)
  • Bump sentry-sdk from 2.44.0 to 2.46.0. (#​19218)
  • Bump types-bleach from 6.2.0.20250809 to 6.3.0.20251115. (#​19217)
  • Bump types-jsonschema from 4.25.1.20250822 to 4.25.1.20251009. (#​19252)

v1.143.0

Compare Source

Synapse 1.143.0 (2025-11-25)

Dropping support for PostgreSQL 13

In line with our deprecation policy, we've dropped support for PostgreSQL 13, as it is no longer supported upstream. This release of Synapse requires PostgreSQL 14+.

No significant changes since 1.143.0rc2.

synapse 1.143.0rc2 (2025-11-18)

Internal Changes

  • Fixes docker image creation in the release workflow.

Synapse 1.143.0rc1 (2025-11-18)

Features

  • Support multiple config files in register_new_matrix_user. (#​18784)
  • Remove authentication from POST /_matrix/client/v1/delayed_events, and allow calling this endpoint with the update action to take (send/cancel/restart) in the request path instead of the body. (#​19152)

Bugfixes

  • Fixed a longstanding bug where background updates were only run on the main database. (#​19181)
  • Fixed a bug introduced in v1.142.0 preventing subpaths in MAS endpoints from working. (#​19186)
  • Fix the SQLite-to-PostgreSQL migration script to correctly migrate a boolean column in the delayed_events table. (#​19155)

Improved Documentation

  • Improve documentation around streams, particularly ID generators and adding new streams. (#​18943)

Deprecations and Removals

  • Remove support for PostgreSQL 13. (#​19170)

Internal Changes

  • Provide additional servers with federation room directory results. (#​18970)
  • Add a shortcut return when there are no events to purge. (#​19093)
  • Write union types as X | Y where possible, as per PEP 604, added in Python 3.10. (#​19111)
  • Reduce cardinality of synapse_storage_events_persisted_events_sep_total metric by removing origin_entity label. This also separates out events sent by local application services by changing the origin_type for such events to application_service. The type field also only tracks common event types, and anything else is bucketed under *other*. (#​19133, #​19168)
  • Run trial tests on Python 3.14 for PRs. (#​19135)
  • Update pyproject.toml project metadata to be compatible with standard Python packaging tooling. (#​19137)
  • Minor speed up of processing of inbound replication. (#​19138, #​19145, #​19146)
  • Ignore recent Python language refactors from git blame (.git-blame-ignore-revs). (#​19150)
  • Bump lower bounds of dependencies parameterized to 0.9.0 and idna to 3.3 as those are the first to advertise support for Python 3.10. (#​19167)
  • Point out which event caused the exception when checking MSC4293 redactions. (#​19169)
  • Restore printing sentinel for the log record request when no logcontext is active. (#​19172)
  • Add debug logs to track Clock utilities. (#​19173)
  • Remove explicit python version skips in cibuildwheel config as it's no longer required after #​19137. (#​19177)
  • Fix potential lost logcontext when PerDestinationQueue.shutdown(...) is called. (#​19178)
  • Fix bad deferred logcontext handling across the codebase. (#​19180)
Updates to locked dependencies
  • Bump bytes from 1.10.1 to 1.11.0. (#​19193)
  • Bump click from 8.1.8 to 8.3.1. (#​19195)
  • Bump cryptography from 43.0.3 to 45.0.7. (#​19159)
  • Bump docker/metadata-action from 5.8.0 to 5.9.0. (#​19161)
  • Bump pydantic from 2.12.3 to 2.12.4. (#​19158)
  • Bump pyo3-log from 0.13.1 to 0.13.2. (#​19156)
  • Bump ruff from 0.14.3 to 0.14.5. (#​19196)
  • Bump sentry-sdk from 2.34.1 to 2.43.0. (#​19157)
  • Bump sentry-sdk from 2.43.0 to 2.44.0. (#​19197)
  • Bump tomli from 2.2.1 to 2.3.0. (#​19194)
  • Bump types-netaddr from 1.3.0.20240530 to 1.3.0.20251108. (#​19160)

v1.142.1

Compare Source

Synapse 1.142.1 (2025-11-18)

Bugfixes

  • Fixed a bug introduced in v1.142.0 preventing subpaths in MAS endpoints from working. (#​19186)

v1.142.0

Compare Source

Synapse 1.142.0 (2025-11-11)

Dropped support for Python 3.9

This release drops support for Python 3.9, in line with our dependency deprecation policy, as it is now end of life.

SQLite 3.40.0+ is now required

The minimum supported SQLite version has been increased from 3.27.0 to 3.40.0.

If you use current versions of the matrixorg/synapse Docker images, no action is required.

Deprecation of MacOS Python wheels

The team has decided to deprecate and eventually stop publishing python wheels for MacOS. This is a burden on the team, and we're not aware of any parties that use them. Synapse docker images will continue to work on MacOS, as will building Synapse from source (though note this requires a Rust compiler).

At present, publishing MacOS Python wheels will continue for the next release (1.143.0), but will not be available after that (1.144.0+). If you do make use of these wheels downstream, please reach out to us in #synapse-dev:matrix.org. We'd love to hear from you!

Internal Changes

  • Properly stop building wheels for Python 3.9 and free-threaded CPython. (#​19154)

Synapse 1.142.0rc4 (2025-11-07)

Bugfixes

  • Fix a bug introduced in 1.142.0rc1 where any attempt to configure matrix_authentication_service.secret_path would prevent the homeserver from starting up. (#​19144)

Synapse 1.142.0rc3 (2025-11-04)

Internal Changes

  • Update release scripts to prevent building wheels for free-threaded Python, as Synapse does not currently support it. (#​19140)

Synapse 1.142.0rc2 (2025-11-04)

Internal Changes

  • Manually skip building Python 3.9 wheels, to prevent errors in the release workflow. (#​19119)

Synapse 1.142.0rc1 (2025-11-04)

Features

Bugfixes

  • Fix a bug introduced in 1.111.0 where failed attempts to download authenticated remote media would not be handled correctly. (#​19062)
  • Update the oidc_session_no_samesite cookie to have the Secure attribute, so the only difference between it and the paired oidc_session cookie, is the configuration of the SameSite attribute as described in the comments / cookie names. Contributed by @​kieranlane. (#​19079)
  • Fix a bug introduced in 1.140.0 where lost logcontext warnings would be emitted from timeouts in sync and requests made by Synapse itself. (#​19090)
  • Fix a bug introdued in 1.140.0 where lost logcontext warning were emitted when using HomeServer.shutdown(). (#​19108)

Improved Documentation

  • Update the link to the Debian oldstable package for SQLite. (#​19047)
  • Point out additional Redis configuration options available in the worker docs. Contributed by @​servisbryce. (#​19073)
  • Update the list of Debian releases that the downstream Debian package is maintained for. (#​19100)
  • Add a page to the documentation describing the steps the Synapse team takes to review the release notes before publishing them. (#​19109)

Deprecations and Removals

  • Drop support for Python 3.9. (#​19099)
  • Remove support for SQLite < 3.37.2. (#​19047)

Internal Changes

  • Fix CI linter for schema delta files to correctly handle all types of CREATE TABLE syntax. (#​19020)
  • Use type hinting generics in standard collections, as per PEP 585, added in Python 3.9. (#​19046)
  • Always treat RETURNING as supported by SQL engines, now that the minimum-supported versions of both SQLite and PostgreSQL support it. (#​19047)
  • Move oidc.load_metadata() startup into _base.start(). (#​19056)
  • Remove logcontext problems caused by awaiting raw deferLater(...). (#​19058)
  • Prevent duplicate logging setup when running multiple Synapse instances. (#​19067)
  • Be mindful of other logging context filters in 3rd-party code and avoid overwriting log record fields unless we know the log record is relevant to Synapse. (#​19068)
  • Update pydantic to v2. (#​19071)
  • Update deprecated code in the release script to prevent a warning message from being printed. (#​19080)
  • Update the deprecated poetry development dependencies group name in pyproject.toml. (#​19081)
  • Remove pp38* skip selector from cibuildwheel to silence warning. (#​19085)
  • Don't immediately exit the release script if the checkout is dirty. Instead, allow the user to clear the dirty changes and retry. (#​19088)
  • Update the release script's generated announcement text to include a title and extra text for RC's. (#​19089)
  • Fix lints on main branch. (#​19092)
  • Use cheaper random string function in logcontext utilities. (#​19094)
  • Avoid clobbering other SIGHUP handlers in 3rd-party code. (#​19095)
  • Prevent duplicate GitHub draft releases being created during the Synapse release process. (#​19096)
  • Use Pillow's Image.getexif method instead of the experimental Image._getexif. (#​19098)
  • Prevent uv /usr/local/.lock file from appearing in built Synapse docker images. (#​19107)
  • Allow Synapse's runtime dependency checking code to take packaging markers (i.e. python <= 3.14) into account when checking dependencies. (#​19110)
  • Move exception handling up the stack (avoid exit(1) in our composable functions). (#​19116)
  • Fix a lint error related to lifetimes in Rust 1.90. (#​19118)
  • Refactor and align app entrypoints (avoid exit(1) in our composable functions). (#​19121, #​19131)
  • Speed up pruning of ratelimiters. (#​19129)
Updates to locked dependencies
  • Bump actions/download-artifact from 5.0.0 to 6.0.0. (#​19102)
  • Bump actions/upload-artifact from 4 to 5. (#​19106)
  • Bump hiredis from 3.2.1 to 3.3.0. (#​19103)
  • Bump icu_segmenter from 2.0.0 to 2.0.1. (#​19126)
  • Bump idna from 3.10 to 3.11. (#​19053)
  • Bump ijson from 3.4.0 to 3.4.0.post0. (#​19051)
  • Bump markdown-it-py from 3.0.0 to 4.0.0. (#​19123)
  • Bump msgpack from 1.1.1 to 1.1.2. (#​19050)
  • Bump psycopg2 from 2.9.10 to 2.9.11. (#​19125)
  • Bump pyyaml from 6.0.2 to 6.0.3. (#​19105)
  • Bump regex from 1.11.3 to 1.12.2. (#​19074)
  • Bump reqwest from 0.12.23 to 0.12.24. (#​19077)
  • Bump ruff from 0.12.10 to 0.14.3. (#​19124)
  • Bump sigstore/cosign-installer from 3.10.0 to 4.0.0. (#​19075)
  • Bump stefanzweifel/git-auto-commit-action from 6.0.1 to 7.0.0. (#​19052)
  • Bump tokio from 1.47.1 to 1.48.0. (#​19076)
  • Bump types-psycopg2 from 2.9.21.20250915 to 2.9.21.20251012. (#​19054)

v1.141.0

Compare Source

Synapse 1.141.0 (2025-10-29)

Deprecation of MacOS Python wheels

The team has decided to deprecate and eventually stop publishing python wheels
for MacOS. This is a burden on the team, and we're not aware of any parties
that use them. Synapse docker images will continue to work on MacOS, as will
building Synapse from source (though note this requires a Rust compiler).

Publishing MacOS Python wheels will continue for the next few releases. If you
do make use of these wheels downstream, please reach out to us in
#synapse-dev:matrix.org. We'd love to hear from you!

Docker images now based on Debian trixie with Python 3.13

The Docker images are now based on Debian trixie and use Python 3.13. If you
are using the Docker images as a base image you may need to e.g. adjust the
paths you mount any additional Python packages at.

No significant changes since 1.141.0rc2.

Synapse 1.141.0rc2 (2025-10-28)

Bugfixes

  • Fix users being unable to log in if their password, or the server's configured pepper, was too long. (#​19101)

Synapse 1.141.0rc1 (2025-10-21)

Features

Bugfixes

  • Fix a bug introduced in 1.136.0 that would prevent Synapse from being able to be reload-ed more than once when running under systemd. (#​19060)
  • Fix a bug introduced in 1.140.0 where an internal server error could be raised when hashing user passwords that are too long. (#​19078)

Updates to the Docker image

  • Update docker image to use Debian trixie as the base and thus Python 3.13. (#​19064)

Internal Changes

  • Move unique snowflake homeserver background tasks to start_background_tasks (the standard pattern for this kind of thing). (#​19037)
  • Drop a deprecated field of the PyGitHub dependency in the release script and raise the dependency's minimum version to 1.59.0. (#​19039)
  • Update TODO list of conflicting areas where we encounter metrics being clobbered (ApplicationService). (#​19040)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [docker.io/matrixdotorg/synapse](https://github.com/element-hq/synapse) | minor | `v1.140.0` -> `v1.145.0` | --- > ⚠️ **Warning** > > Some dependencies could not be looked up. Check the warning logs for more information. --- ### Release Notes <details> <summary>element-hq/synapse (docker.io/matrixdotorg/synapse)</summary> ### [`v1.145.0`](https://github.com/element-hq/synapse/releases/tag/v1.145.0) [Compare Source](https://github.com/element-hq/synapse/compare/v1.144.0...v1.145.0) ### Synapse 1.145.0 (2026-01-13) No significant changes since 1.145.0rc4. #### End of Life of Ubuntu 25.04 Plucky Puffin Ubuntu 25.04 (Plucky Puffin) will be end of life on Jan 17, 2026. Synapse will stop building packages for Ubuntu 25.04 shortly thereafter. #### Updates to Locked Dependencies No Longer Included in Changelog The "Updates to locked dependencies" section has been removed from the changelog due to lack of use and the maintenance burden. ([#&#8203;19254](https://github.com/element-hq/synapse/issues/19254)) ### Synapse 1.145.0rc4 (2026-01-08) No significant changes since 1.145.0rc3. This RC contains a fix specifically for openSUSE packaging and no other changes. ### Synapse 1.145.0rc3 (2026-01-07) No significant changes since 1.145.0rc2. This RC strips out unnecessary files from the wheels that were added when fixing the source distribution packaging in the previous RC. ### Synapse 1.145.0rc2 (2026-01-07) No significant changes since 1.145.0rc1. This RC fixes the source distribution packaging for uploading to PyPI. ### Synapse 1.145.0rc1 (2026-01-06) #### Features - Add `memberships` endpoint to the admin API. This is useful for forensics and T\&S purposes. ([#&#8203;19260](https://github.com/element-hq/synapse/issues/19260)) - Server admins can bypass the quarantine media check when downloading media by setting the `admin_unsafely_bypass_quarantine` query parameter to `true` on Client-Server API media download requests. ([#&#8203;19275](https://github.com/element-hq/synapse/issues/19275)) - Implemented pagination for the [MSC2666](https://github.com/matrix-org/matrix-spec-proposals/pull/2666) mutual rooms endpoint. Contributed by [@&#8203;tulir](https://github.com/tulir) @&#8203; Beeper. ([#&#8203;19279](https://github.com/element-hq/synapse/issues/19279)) - Admin API: add worker support to `GET /_synapse/admin/v2/users/<user_id>`. ([#&#8203;19281](https://github.com/element-hq/synapse/issues/19281)) - Improve proxy support for the `federation_client.py` dev script. Contributed by Denis Kasak ([@&#8203;dkasak](https://github.com/dkasak)). ([#&#8203;19300](https://github.com/element-hq/synapse/issues/19300)) #### Bugfixes - Fix sliding sync performance slow down for long lived connections. ([#&#8203;19206](https://github.com/element-hq/synapse/issues/19206)) - Fix a bug where Mastodon posts (and possibly other embeds) have the wrong description for URL previews. ([#&#8203;19231](https://github.com/element-hq/synapse/issues/19231)) - Fix bug where `Duration` was logged incorrectly. ([#&#8203;19267](https://github.com/element-hq/synapse/issues/19267)) - Fix bug introduced in 1.143.0 that broke support for versions of `zope-interface` older than 6.2. ([#&#8203;19274](https://github.com/element-hq/synapse/issues/19274)) - Transform events with client metadata before serialising in /event response. ([#&#8203;19340](https://github.com/element-hq/synapse/issues/19340)) #### Updates to the Docker image - Add a way to expose metrics from the Docker image (`SYNAPSE_ENABLE_METRICS`). ([#&#8203;19324](https://github.com/element-hq/synapse/issues/19324)) #### Improved Documentation - Document the importance of `public_baseurl` when configuring OpenID Connect authentication. ([#&#8203;19270](https://github.com/element-hq/synapse/issues/19270)) #### Deprecations and Removals - Ubuntu 25.04 (Plucky Puffin) will be end of life on Jan 17, 2026. Synapse will stop building packages for Ubuntu 25.04 shortly thereafter. - Remove the "Updates to locked dependencies" section from the changelog due to lack of use and the maintenance burden. ([#&#8203;19254](https://github.com/element-hq/synapse/issues/19254)) #### Internal Changes - Group together dependabot update PRs to reduce the review load. ([#&#8203;18402](https://github.com/element-hq/synapse/issues/18402)) - Fix `HomeServer.shutdown()` failing if the homeserver hasn't been setup yet. ([#&#8203;19187](https://github.com/element-hq/synapse/issues/19187)) - Respond with useful error codes with `Content-Length` header/s are invalid. ([#&#8203;19212](https://github.com/element-hq/synapse/issues/19212)) - Fix `HomeServer.shutdown()` failing if the homeserver failed to `start`. ([#&#8203;19232](https://github.com/element-hq/synapse/issues/19232)) - Switch the build backend from `poetry-core` to `maturin`. ([#&#8203;19234](https://github.com/element-hq/synapse/issues/19234)) - Raise the limit for concurrently-open non-security [@&#8203;dependabot](https://github.com/dependabot) PRs from 5 to 10. ([#&#8203;19253](https://github.com/element-hq/synapse/issues/19253)) - Require 14 days to pass before pulling in general dependency updates to help mitigate upstream supply chain attacks. ([#&#8203;19258](https://github.com/element-hq/synapse/issues/19258)) - Drop the broken netlify documentation workflow until a new one is implemented. ([#&#8203;19262](https://github.com/element-hq/synapse/issues/19262)) - Don't include debug logs in `Clock` unless explicitly enabled. ([#&#8203;19278](https://github.com/element-hq/synapse/issues/19278)) - Use `uv` to test olddeps to ensure all transitive dependencies use minimum versions. ([#&#8203;19289](https://github.com/element-hq/synapse/issues/19289)) - Add a config to be able to rate limit search in the user directory. ([#&#8203;19291](https://github.com/element-hq/synapse/issues/19291)) - Log the original bind exception when encountering `Failed to listen on 0.0.0.0, continuing because listening on [::]`. ([#&#8203;19297](https://github.com/element-hq/synapse/issues/19297)) - Unpin the version of Rust we use to build Synapse wheels (was 1.82.0) now that MacOS support has been dropped. ([#&#8203;19302](https://github.com/element-hq/synapse/issues/19302)) - Make it more clear how `shared_extra_conf` is combined in our Docker configuration scripts. ([#&#8203;19323](https://github.com/element-hq/synapse/issues/19323)) - Update CI to stream Complement progress and format logs in a separate step after all tests are done. ([#&#8203;19326](https://github.com/element-hq/synapse/issues/19326)) - Format `.github/workflows/tests.yml`. ([#&#8203;19327](https://github.com/element-hq/synapse/issues/19327)) ### [`v1.144.0`](https://github.com/element-hq/synapse/releases/tag/v1.144.0) [Compare Source](https://github.com/element-hq/synapse/compare/v1.143.0...v1.144.0) ### Synapse 1.144.0 (2025-12-09) #### Deprecation of MacOS Python wheels The team has decided to deprecate and stop publishing python wheels for MacOS as of this release. Synapse docker images will continue to work on MacOS, as will building Synapse from source (though note this requires a Rust compiler). #### Unstable mutual rooms endpoint is now behind an experimental feature flag Admins using the unstable [MSC2666](https://github.com/matrix-org/matrix-spec-proposals/pull/2666) endpoint (`/_matrix/client/unstable/uk.half-shot.msc2666/user/mutual_rooms`), please check [the relevant section in the upgrade notes](https://github.com/element-hq/synapse/blob/develop/docs/upgrade.md#upgrading-to-v11440) as this release contains changes that disable that endpoint by default. No significant changes since 1.144.0rc1. ### Synapse 1.144.0rc1 (2025-12-02) Admins using the unstable [MSC2666](https://github.com/matrix-org/matrix-spec-proposals/pull/2666) endpoint (`/_matrix/client/unstable/uk.half-shot.msc2666/user/mutual_rooms`), please check [the relevant section in the upgrade notes](https://github.com/element-hq/synapse/blob/develop/docs/upgrade.md#upgrading-to-v11440) as this release contains changes that disable that endpoint by default. #### Features - Add experimental implementation of [MSC4380](https://github.com/matrix-org/matrix-spec-proposals/pull/4380) (invite blocking). ([#&#8203;19203](https://github.com/element-hq/synapse/issues/19203)) - Allow restarting delayed event timeouts on workers. ([#&#8203;19207](https://github.com/element-hq/synapse/issues/19207)) #### Bugfixes - Fix a bug in the database function for fetching state deltas that could result in unnecessarily long query times. ([#&#8203;18960](https://github.com/element-hq/synapse/issues/18960)) - Fix v12 rooms when running with `use_frozen_dicts: True`. ([#&#8203;19235](https://github.com/element-hq/synapse/issues/19235)) - Fix bug where invalid `canonical_alias` content would return 500 instead of 400. ([#&#8203;19240](https://github.com/element-hq/synapse/issues/19240)) - Fix bug where `Duration` was logged incorrectly. ([#&#8203;19267](https://github.com/element-hq/synapse/issues/19267)) #### Improved Documentation - Document in the `--config-path` help how multiple files are merged - by merging them shallowly. ([#&#8203;19243](https://github.com/element-hq/synapse/issues/19243)) #### Deprecations and Removals - Stop building release wheels for MacOS. ([#&#8203;19225](https://github.com/element-hq/synapse/issues/19225)) #### Internal Changes - Improve event filtering for Simplified Sliding Sync. ([#&#8203;17782](https://github.com/element-hq/synapse/issues/17782)) - Export `SYNAPSE_SUPPORTED_COMPLEMENT_TEST_PACKAGES` environment variable from `scripts-dev/complement.sh`. ([#&#8203;19208](https://github.com/element-hq/synapse/issues/19208)) - Refactor `scripts-dev/complement.sh` logic to avoid `exit` to facilitate being able to source it from other scripts (composable). ([#&#8203;19209](https://github.com/element-hq/synapse/issues/19209)) - Expire sliding sync connections that are too old or have too much pending data. ([#&#8203;19211](https://github.com/element-hq/synapse/issues/19211)) - Require an experimental feature flag to be enabled in order for the unstable [MSC2666](https://github.com/matrix-org/matrix-spec-proposals/pull/2666) endpoint (`/_matrix/client/unstable/uk.half-shot.msc2666/user/mutual_rooms`) to be available. ([#&#8203;19219](https://github.com/element-hq/synapse/issues/19219)) - Prevent changelog check CI running on [@&#8203;dependabot](https://github.com/dependabot)'s PRs even when a human has modified the branch. ([#&#8203;19220](https://github.com/element-hq/synapse/issues/19220)) - Auto-fix trailing spaces in multi-line strings and comments when running the lint script. ([#&#8203;19221](https://github.com/element-hq/synapse/issues/19221)) - Move towards using a dedicated `Duration` type. ([#&#8203;19223](https://github.com/element-hq/synapse/issues/19223), [#&#8203;19229](https://github.com/element-hq/synapse/issues/19229)) - Improve robustness of the SQL schema linting in CI. ([#&#8203;19224](https://github.com/element-hq/synapse/issues/19224)) - Add log to determine whether clients are using `/messages` as expected. ([#&#8203;19226](https://github.com/element-hq/synapse/issues/19226)) - Simplify README and add ESS Getting started section. ([#&#8203;19228](https://github.com/element-hq/synapse/issues/19228), [#&#8203;19259](https://github.com/element-hq/synapse/issues/19259)) - Add a unit test for ensuring associated refresh tokens are erased when a device is deleted. ([#&#8203;19230](https://github.com/element-hq/synapse/issues/19230)) - Prompt user to consider adding future deprecations to the changelog in release script. ([#&#8203;19239](https://github.com/element-hq/synapse/issues/19239)) - Fix check of the Rust compiled code being outdated when using source checkout and `.egg-info`. ([#&#8203;19251](https://github.com/element-hq/synapse/issues/19251)) - Stop building MacOS wheels in CI pipeline. ([#&#8203;19263](https://github.com/element-hq/synapse/issues/19263)) ##### Updates to locked dependencies - Bump Swatinem/rust-cache from 2.8.1 to 2.8.2. ([#&#8203;19244](https://github.com/element-hq/synapse/issues/19244)) - Bump actions/checkout from 5.0.0 to 6.0.0. ([#&#8203;19213](https://github.com/element-hq/synapse/issues/19213)) - Bump actions/setup-go from 6.0.0 to 6.1.0. ([#&#8203;19214](https://github.com/element-hq/synapse/issues/19214)) - Bump actions/setup-python from 6.0.0 to 6.1.0. ([#&#8203;19245](https://github.com/element-hq/synapse/issues/19245)) - Bump attrs from 25.3.0 to 25.4.0. ([#&#8203;19215](https://github.com/element-hq/synapse/issues/19215)) - Bump docker/metadata-action from 5.9.0 to 5.10.0. ([#&#8203;19246](https://github.com/element-hq/synapse/issues/19246)) - Bump http from 1.3.1 to 1.4.0. ([#&#8203;19249](https://github.com/element-hq/synapse/issues/19249)) - Bump pydantic from 2.12.4 to 2.12.5. ([#&#8203;19250](https://github.com/element-hq/synapse/issues/19250)) - Bump pyopenssl from 25.1.0 to 25.3.0. ([#&#8203;19248](https://github.com/element-hq/synapse/issues/19248)) - Bump rpds-py from 0.28.0 to 0.29.0. ([#&#8203;19216](https://github.com/element-hq/synapse/issues/19216)) - Bump rpds-py from 0.29.0 to 0.30.0. ([#&#8203;19247](https://github.com/element-hq/synapse/issues/19247)) - Bump sentry-sdk from 2.44.0 to 2.46.0. ([#&#8203;19218](https://github.com/element-hq/synapse/issues/19218)) - Bump types-bleach from 6.2.0.20250809 to 6.3.0.20251115. ([#&#8203;19217](https://github.com/element-hq/synapse/issues/19217)) - Bump types-jsonschema from 4.25.1.20250822 to 4.25.1.20251009. ([#&#8203;19252](https://github.com/element-hq/synapse/issues/19252)) ### [`v1.143.0`](https://github.com/element-hq/synapse/releases/tag/v1.143.0) [Compare Source](https://github.com/element-hq/synapse/compare/v1.142.1...v1.143.0) ### Synapse 1.143.0 (2025-11-25) #### Dropping support for PostgreSQL 13 In line with our [deprecation policy](https://github.com/element-hq/synapse/blob/develop/docs/deprecation_policy.md), we've dropped support for PostgreSQL 13, as it is no longer supported upstream. This release of Synapse requires PostgreSQL 14+. No significant changes since 1.143.0rc2. ### synapse 1.143.0rc2 (2025-11-18) #### Internal Changes - Fixes docker image creation in the release workflow. ### Synapse 1.143.0rc1 (2025-11-18) #### Features - Support multiple config files in `register_new_matrix_user`. ([#&#8203;18784](https://github.com/element-hq/synapse/issues/18784)) - Remove authentication from `POST /_matrix/client/v1/delayed_events`, and allow calling this endpoint with the update action to take (`send`/`cancel`/`restart`) in the request path instead of the body. ([#&#8203;19152](https://github.com/element-hq/synapse/issues/19152)) #### Bugfixes - Fixed a longstanding bug where background updates were only run on the `main` database. ([#&#8203;19181](https://github.com/element-hq/synapse/issues/19181)) - Fixed a bug introduced in v1.142.0 preventing subpaths in MAS endpoints from working. ([#&#8203;19186](https://github.com/element-hq/synapse/issues/19186)) - Fix the SQLite-to-PostgreSQL migration script to correctly migrate a boolean column in the `delayed_events` table. ([#&#8203;19155](https://github.com/element-hq/synapse/issues/19155)) #### Improved Documentation - Improve documentation around streams, particularly ID generators and adding new streams. ([#&#8203;18943](https://github.com/element-hq/synapse/issues/18943)) #### Deprecations and Removals - Remove support for PostgreSQL 13. ([#&#8203;19170](https://github.com/element-hq/synapse/issues/19170)) #### Internal Changes - Provide additional servers with federation room directory results. ([#&#8203;18970](https://github.com/element-hq/synapse/issues/18970)) - Add a shortcut return when there are no events to purge. ([#&#8203;19093](https://github.com/element-hq/synapse/issues/19093)) - Write union types as `X | Y` where possible, as per PEP 604, added in Python 3.10. ([#&#8203;19111](https://github.com/element-hq/synapse/issues/19111)) - Reduce cardinality of `synapse_storage_events_persisted_events_sep_total` metric by removing `origin_entity` label. This also separates out events sent by local application services by changing the `origin_type` for such events to `application_service`. The `type` field also only tracks common event types, and anything else is bucketed under `*other*`. ([#&#8203;19133](https://github.com/element-hq/synapse/issues/19133), [#&#8203;19168](https://github.com/element-hq/synapse/issues/19168)) - Run trial tests on Python 3.14 for PRs. ([#&#8203;19135](https://github.com/element-hq/synapse/issues/19135)) - Update `pyproject.toml` project metadata to be compatible with standard Python packaging tooling. ([#&#8203;19137](https://github.com/element-hq/synapse/issues/19137)) - Minor speed up of processing of inbound replication. ([#&#8203;19138](https://github.com/element-hq/synapse/issues/19138), [#&#8203;19145](https://github.com/element-hq/synapse/issues/19145), [#&#8203;19146](https://github.com/element-hq/synapse/issues/19146)) - Ignore recent Python language refactors from git blame (`.git-blame-ignore-revs`). ([#&#8203;19150](https://github.com/element-hq/synapse/issues/19150)) - Bump lower bounds of dependencies `parameterized` to `0.9.0` and `idna` to `3.3` as those are the first to advertise support for Python 3.10. ([#&#8203;19167](https://github.com/element-hq/synapse/issues/19167)) - Point out which event caused the exception when checking [MSC4293](https://github.com/matrix-org/matrix-spec-proposals/pull/4293) redactions. ([#&#8203;19169](https://github.com/element-hq/synapse/issues/19169)) - Restore printing `sentinel` for the log record `request` when no logcontext is active. ([#&#8203;19172](https://github.com/element-hq/synapse/issues/19172)) - Add debug logs to track `Clock` utilities. ([#&#8203;19173](https://github.com/element-hq/synapse/issues/19173)) - Remove explicit python version skips in `cibuildwheel` config as it's no longer required after [#&#8203;19137](https://github.com/element-hq/synapse/pull/19137). ([#&#8203;19177](https://github.com/element-hq/synapse/issues/19177)) - Fix potential lost logcontext when `PerDestinationQueue.shutdown(...)` is called. ([#&#8203;19178](https://github.com/element-hq/synapse/issues/19178)) - Fix bad deferred logcontext handling across the codebase. ([#&#8203;19180](https://github.com/element-hq/synapse/issues/19180)) ##### Updates to locked dependencies - Bump bytes from 1.10.1 to 1.11.0. ([#&#8203;19193](https://github.com/element-hq/synapse/issues/19193)) - Bump click from 8.1.8 to 8.3.1. ([#&#8203;19195](https://github.com/element-hq/synapse/issues/19195)) - Bump cryptography from 43.0.3 to 45.0.7. ([#&#8203;19159](https://github.com/element-hq/synapse/issues/19159)) - Bump docker/metadata-action from 5.8.0 to 5.9.0. ([#&#8203;19161](https://github.com/element-hq/synapse/issues/19161)) - Bump pydantic from 2.12.3 to 2.12.4. ([#&#8203;19158](https://github.com/element-hq/synapse/issues/19158)) - Bump pyo3-log from 0.13.1 to 0.13.2. ([#&#8203;19156](https://github.com/element-hq/synapse/issues/19156)) - Bump ruff from 0.14.3 to 0.14.5. ([#&#8203;19196](https://github.com/element-hq/synapse/issues/19196)) - Bump sentry-sdk from 2.34.1 to 2.43.0. ([#&#8203;19157](https://github.com/element-hq/synapse/issues/19157)) - Bump sentry-sdk from 2.43.0 to 2.44.0. ([#&#8203;19197](https://github.com/element-hq/synapse/issues/19197)) - Bump tomli from 2.2.1 to 2.3.0. ([#&#8203;19194](https://github.com/element-hq/synapse/issues/19194)) - Bump types-netaddr from 1.3.0.20240530 to 1.3.0.20251108. ([#&#8203;19160](https://github.com/element-hq/synapse/issues/19160)) ### [`v1.142.1`](https://github.com/element-hq/synapse/releases/tag/v1.142.1) [Compare Source](https://github.com/element-hq/synapse/compare/v1.142.0...v1.142.1) ### Synapse 1.142.1 (2025-11-18) #### Bugfixes - Fixed a bug introduced in v1.142.0 preventing subpaths in MAS endpoints from working. ([#&#8203;19186](https://github.com/element-hq/synapse/issues/19186)) ### [`v1.142.0`](https://github.com/element-hq/synapse/releases/tag/v1.142.0) [Compare Source](https://github.com/element-hq/synapse/compare/v1.141.0...v1.142.0) ### Synapse 1.142.0 (2025-11-11) #### Dropped support for Python 3.9 This release drops support for Python 3.9, in line with our [dependency deprecation policy](https://element-hq.github.io/synapse/latest/deprecation_policy.html#platform-dependencies), as it is now [end of life](https://endoflife.date/python). #### SQLite 3.40.0+ is now required The minimum supported SQLite version has been increased from 3.27.0 to 3.40.0. If you use current versions of the [matrixorg/synapse](setup/installation.html#docker-images-and-ansible-playbooks) Docker images, no action is required. #### Deprecation of MacOS Python wheels The team has decided to deprecate and eventually stop publishing python wheels for MacOS. This is a burden on the team, and we're not aware of any parties that use them. Synapse docker images will continue to work on MacOS, as will building Synapse from source (though note this requires a Rust compiler). At present, publishing MacOS Python wheels will continue for the next release (1.143.0), but will not be available after that (1.144.0+). If you do make use of these wheels downstream, please reach out to us in [#synapse-dev:matrix.org](https://matrix.to/#/#synapse-dev:matrix.org). We'd love to hear from you! #### Internal Changes - Properly stop building wheels for Python 3.9 and free-threaded CPython. ([#&#8203;19154](https://github.com/element-hq/synapse/issues/19154)) ### Synapse 1.142.0rc4 (2025-11-07) #### Bugfixes - Fix a bug introduced in 1.142.0rc1 where any attempt to configure `matrix_authentication_service.secret_path` would prevent the homeserver from starting up. ([#&#8203;19144](https://github.com/element-hq/synapse/issues/19144)) ### Synapse 1.142.0rc3 (2025-11-04) #### Internal Changes - Update release scripts to prevent building wheels for free-threaded Python, as Synapse does not currently support it. ([#&#8203;19140](https://github.com/element-hq/synapse/issues/19140)) ### Synapse 1.142.0rc2 (2025-11-04) #### Internal Changes - Manually skip building Python 3.9 wheels, to prevent errors in the release workflow. ([#&#8203;19119](https://github.com/element-hq/synapse/issues/19119)) ### Synapse 1.142.0rc1 (2025-11-04) #### Features - Add support for Python 3.14. ([#&#8203;19055](https://github.com/element-hq/synapse/issues/19055), [#&#8203;19134](https://github.com/element-hq/synapse/issues/19134)) - Add an [Admin API](https://element-hq.github.io/synapse/latest/usage/administration/admin_api/index.html) to allow an admin to fetch the space/room hierarchy for a given space. ([#&#8203;19021](https://github.com/element-hq/synapse/issues/19021)) #### Bugfixes - Fix a bug introduced in 1.111.0 where failed attempts to download authenticated remote media would not be handled correctly. ([#&#8203;19062](https://github.com/element-hq/synapse/issues/19062)) - Update the `oidc_session_no_samesite` cookie to have the `Secure` attribute, so the only difference between it and the paired `oidc_session` cookie, is the configuration of the `SameSite` attribute as described in the comments / cookie names. Contributed by [@&#8203;kieranlane](https://github.com/kieranlane). ([#&#8203;19079](https://github.com/element-hq/synapse/issues/19079)) - Fix a bug introduced in 1.140.0 where lost logcontext warnings would be emitted from timeouts in sync and requests made by Synapse itself. ([#&#8203;19090](https://github.com/element-hq/synapse/issues/19090)) - Fix a bug introdued in 1.140.0 where lost logcontext warning were emitted when using `HomeServer.shutdown()`. ([#&#8203;19108](https://github.com/element-hq/synapse/issues/19108)) #### Improved Documentation - Update the link to the Debian oldstable package for SQLite. ([#&#8203;19047](https://github.com/element-hq/synapse/issues/19047)) - Point out additional Redis configuration options available in the worker docs. Contributed by [@&#8203;servisbryce](https://github.com/servisbryce). ([#&#8203;19073](https://github.com/element-hq/synapse/issues/19073)) - Update the list of Debian releases that the downstream Debian package is maintained for. ([#&#8203;19100](https://github.com/element-hq/synapse/issues/19100)) - Add [a page](https://element-hq.github.io/synapse/latest/development/internal_documentation/release_notes_review_checklist.html) to the documentation describing the steps the Synapse team takes to review the release notes before publishing them. ([#&#8203;19109](https://github.com/element-hq/synapse/issues/19109)) #### Deprecations and Removals - Drop support for Python 3.9. ([#&#8203;19099](https://github.com/element-hq/synapse/issues/19099)) - Remove support for SQLite < 3.37.2. ([#&#8203;19047](https://github.com/element-hq/synapse/issues/19047)) #### Internal Changes - Fix CI linter for schema delta files to correctly handle all types of `CREATE TABLE` syntax. ([#&#8203;19020](https://github.com/element-hq/synapse/issues/19020)) - Use type hinting generics in standard collections, as per [PEP 585](https://peps.python.org/pep-0585/), added in Python 3.9. ([#&#8203;19046](https://github.com/element-hq/synapse/issues/19046)) - Always treat `RETURNING` as supported by SQL engines, now that the minimum-supported versions of both SQLite and PostgreSQL support it. ([#&#8203;19047](https://github.com/element-hq/synapse/issues/19047)) - Move `oidc.load_metadata()` startup into `_base.start()`. ([#&#8203;19056](https://github.com/element-hq/synapse/issues/19056)) - Remove logcontext problems caused by awaiting raw `deferLater(...)`. ([#&#8203;19058](https://github.com/element-hq/synapse/issues/19058)) - Prevent duplicate logging setup when running multiple Synapse instances. ([#&#8203;19067](https://github.com/element-hq/synapse/issues/19067)) - Be mindful of other logging context filters in 3rd-party code and avoid overwriting log record fields unless we know the log record is relevant to Synapse. ([#&#8203;19068](https://github.com/element-hq/synapse/issues/19068)) - Update pydantic to v2. ([#&#8203;19071](https://github.com/element-hq/synapse/issues/19071)) - Update deprecated code in the release script to prevent a warning message from being printed. ([#&#8203;19080](https://github.com/element-hq/synapse/issues/19080)) - Update the deprecated poetry development dependencies group name in `pyproject.toml`. ([#&#8203;19081](https://github.com/element-hq/synapse/issues/19081)) - Remove `pp38*` skip selector from cibuildwheel to silence warning. ([#&#8203;19085](https://github.com/element-hq/synapse/issues/19085)) - Don't immediately exit the release script if the checkout is dirty. Instead, allow the user to clear the dirty changes and retry. ([#&#8203;19088](https://github.com/element-hq/synapse/issues/19088)) - Update the release script's generated announcement text to include a title and extra text for RC's. ([#&#8203;19089](https://github.com/element-hq/synapse/issues/19089)) - Fix lints on main branch. ([#&#8203;19092](https://github.com/element-hq/synapse/issues/19092)) - Use cheaper random string function in logcontext utilities. ([#&#8203;19094](https://github.com/element-hq/synapse/issues/19094)) - Avoid clobbering other `SIGHUP` handlers in 3rd-party code. ([#&#8203;19095](https://github.com/element-hq/synapse/issues/19095)) - Prevent duplicate GitHub draft releases being created during the Synapse release process. ([#&#8203;19096](https://github.com/element-hq/synapse/issues/19096)) - Use Pillow's `Image.getexif` method instead of the experimental `Image._getexif`. ([#&#8203;19098](https://github.com/element-hq/synapse/issues/19098)) - Prevent uv `/usr/local/.lock` file from appearing in built Synapse docker images. ([#&#8203;19107](https://github.com/element-hq/synapse/issues/19107)) - Allow Synapse's runtime dependency checking code to take packaging markers (i.e. `python <= 3.14`) into account when checking dependencies. ([#&#8203;19110](https://github.com/element-hq/synapse/issues/19110)) - Move exception handling up the stack (avoid `exit(1)` in our composable functions). ([#&#8203;19116](https://github.com/element-hq/synapse/issues/19116)) - Fix a lint error related to lifetimes in Rust 1.90. ([#&#8203;19118](https://github.com/element-hq/synapse/issues/19118)) - Refactor and align app entrypoints (avoid `exit(1)` in our composable functions). ([#&#8203;19121](https://github.com/element-hq/synapse/issues/19121), [#&#8203;19131](https://github.com/element-hq/synapse/issues/19131)) - Speed up pruning of ratelimiters. ([#&#8203;19129](https://github.com/element-hq/synapse/issues/19129)) ##### Updates to locked dependencies - Bump actions/download-artifact from 5.0.0 to 6.0.0. ([#&#8203;19102](https://github.com/element-hq/synapse/issues/19102)) - Bump actions/upload-artifact from 4 to 5. ([#&#8203;19106](https://github.com/element-hq/synapse/issues/19106)) - Bump hiredis from 3.2.1 to 3.3.0. ([#&#8203;19103](https://github.com/element-hq/synapse/issues/19103)) - Bump icu\_segmenter from 2.0.0 to 2.0.1. ([#&#8203;19126](https://github.com/element-hq/synapse/issues/19126)) - Bump idna from 3.10 to 3.11. ([#&#8203;19053](https://github.com/element-hq/synapse/issues/19053)) - Bump ijson from 3.4.0 to 3.4.0.post0. ([#&#8203;19051](https://github.com/element-hq/synapse/issues/19051)) - Bump markdown-it-py from 3.0.0 to 4.0.0. ([#&#8203;19123](https://github.com/element-hq/synapse/issues/19123)) - Bump msgpack from 1.1.1 to 1.1.2. ([#&#8203;19050](https://github.com/element-hq/synapse/issues/19050)) - Bump psycopg2 from 2.9.10 to 2.9.11. ([#&#8203;19125](https://github.com/element-hq/synapse/issues/19125)) - Bump pyyaml from 6.0.2 to 6.0.3. ([#&#8203;19105](https://github.com/element-hq/synapse/issues/19105)) - Bump regex from 1.11.3 to 1.12.2. ([#&#8203;19074](https://github.com/element-hq/synapse/issues/19074)) - Bump reqwest from 0.12.23 to 0.12.24. ([#&#8203;19077](https://github.com/element-hq/synapse/issues/19077)) - Bump ruff from 0.12.10 to 0.14.3. ([#&#8203;19124](https://github.com/element-hq/synapse/issues/19124)) - Bump sigstore/cosign-installer from 3.10.0 to 4.0.0. ([#&#8203;19075](https://github.com/element-hq/synapse/issues/19075)) - Bump stefanzweifel/git-auto-commit-action from 6.0.1 to 7.0.0. ([#&#8203;19052](https://github.com/element-hq/synapse/issues/19052)) - Bump tokio from 1.47.1 to 1.48.0. ([#&#8203;19076](https://github.com/element-hq/synapse/issues/19076)) - Bump types-psycopg2 from 2.9.21.20250915 to 2.9.21.20251012. ([#&#8203;19054](https://github.com/element-hq/synapse/issues/19054)) ### [`v1.141.0`](https://github.com/element-hq/synapse/releases/tag/v1.141.0) [Compare Source](https://github.com/element-hq/synapse/compare/v1.140.0...v1.141.0) ### Synapse 1.141.0 (2025-10-29) #### Deprecation of MacOS Python wheels The team has decided to deprecate and eventually stop publishing python wheels for MacOS. This is a burden on the team, and we're not aware of any parties that use them. Synapse docker images will continue to work on MacOS, as will building Synapse from source (though note this requires a Rust compiler). Publishing MacOS Python wheels will continue for the next few releases. If you do make use of these wheels downstream, please reach out to us in [#synapse-dev:matrix.org](https://matrix.to/#/#synapse-dev:matrix.org). We'd love to hear from you! #### Docker images now based on Debian `trixie` with Python 3.13 The Docker images are now based on Debian `trixie` and use Python 3.13. If you are using the Docker images as a base image you may need to e.g. adjust the paths you mount any additional Python packages at. No significant changes since 1.141.0rc2. ### Synapse 1.141.0rc2 (2025-10-28) #### Bugfixes - Fix users being unable to log in if their password, or the server's configured pepper, was too long. ([#&#8203;19101](https://github.com/element-hq/synapse/issues/19101)) ### Synapse 1.141.0rc1 (2025-10-21) #### Features - Allow using [MSC4190](https://github.com/matrix-org/matrix-spec-proposals/pull/4190) behavior without the opt-in registration flag. Contributed by [@&#8203;tulir](https://github.com/tulir) @&#8203; Beeper. ([#&#8203;19031](https://github.com/element-hq/synapse/issues/19031)) - Stabilized support for [MSC4326](https://github.com/matrix-org/matrix-spec-proposals/pull/4326): Device masquerading for appservices. Contributed by [@&#8203;tulir](https://github.com/tulir) @&#8203; Beeper. ([#&#8203;19033](https://github.com/element-hq/synapse/issues/19033)) #### Bugfixes - Fix a bug introduced in 1.136.0 that would prevent Synapse from being able to be `reload`-ed more than once when running under systemd. ([#&#8203;19060](https://github.com/element-hq/synapse/issues/19060)) - Fix a bug introduced in 1.140.0 where an internal server error could be raised when hashing user passwords that are too long. ([#&#8203;19078](https://github.com/element-hq/synapse/issues/19078)) #### Updates to the Docker image - Update docker image to use Debian trixie as the base and thus Python 3.13. ([#&#8203;19064](https://github.com/element-hq/synapse/issues/19064)) #### Internal Changes - Move unique snowflake homeserver background tasks to `start_background_tasks` (the standard pattern for this kind of thing). ([#&#8203;19037](https://github.com/element-hq/synapse/issues/19037)) - Drop a deprecated field of the `PyGitHub` dependency in the release script and raise the dependency's minimum version to `1.59.0`. ([#&#8203;19039](https://github.com/element-hq/synapse/issues/19039)) - Update TODO list of conflicting areas where we encounter metrics being clobbered (`ApplicationService`). ([#&#8203;19040](https://github.com/element-hq/synapse/issues/19040)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xLjAiLCJ1cGRhdGVkSW5WZXIiOiI0Mi4yMS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
renovatebot changed title from chore(deps): update docker.io/matrixdotorg/synapse docker tag to v1.141.0 to chore(deps): update docker.io/matrixdotorg/synapse docker tag to v1.142.0 2025-11-11 05:06:35 -05:00
renovatebot force-pushed renovate/docker.io-matrixdotorg-synapse-1.x from 08026c9761
All checks were successful
ko-build / ko-build (push) Successful in 2m32s
ko-build / ko-build (pull_request) Successful in 3m15s
to f940282f93
All checks were successful
ko-build / ko-build (pull_request) Successful in 2m18s
ko-build / ko-build (push) Successful in 3m14s
2025-11-11 05:06:37 -05:00
Compare
renovatebot changed title from chore(deps): update docker.io/matrixdotorg/synapse docker tag to v1.142.0 to chore(deps): update docker.io/matrixdotorg/synapse docker tag to v1.142.1 2025-11-18 15:06:39 -05:00
renovatebot force-pushed renovate/docker.io-matrixdotorg-synapse-1.x from f940282f93
All checks were successful
ko-build / ko-build (pull_request) Successful in 2m18s
ko-build / ko-build (push) Successful in 3m14s
to 88822e6336
All checks were successful
ko-build / ko-build (push) Successful in 2m30s
ko-build / ko-build (pull_request) Successful in 6m36s
2025-11-18 15:06:41 -05:00
Compare
renovatebot changed title from chore(deps): update docker.io/matrixdotorg/synapse docker tag to v1.142.1 to chore(deps): update docker.io/matrixdotorg/synapse docker tag to v1.143.0 2025-11-25 11:08:30 -05:00
renovatebot force-pushed renovate/docker.io-matrixdotorg-synapse-1.x from 88822e6336
All checks were successful
ko-build / ko-build (push) Successful in 2m30s
ko-build / ko-build (pull_request) Successful in 6m36s
to 1dd823daf1
All checks were successful
ko-build / ko-build (push) Successful in 1m54s
ko-build / ko-build (pull_request) Successful in 1m56s
2025-11-25 11:08:31 -05:00
Compare
renovatebot force-pushed renovate/docker.io-matrixdotorg-synapse-1.x from 1dd823daf1
All checks were successful
ko-build / ko-build (push) Successful in 1m54s
ko-build / ko-build (pull_request) Successful in 1m56s
to c1b295af28
All checks were successful
ko-build / ko-build (push) Successful in 2m16s
ko-build / ko-build (pull_request) Successful in 1m48s
2025-12-09 12:03:20 -05:00
Compare
renovatebot changed title from chore(deps): update docker.io/matrixdotorg/synapse docker tag to v1.143.0 to chore(deps): update docker.io/matrixdotorg/synapse docker tag to v1.144.0 2025-12-09 12:03:20 -05:00
renovatebot force-pushed renovate/docker.io-matrixdotorg-synapse-1.x from c1b295af28
All checks were successful
ko-build / ko-build (push) Successful in 2m16s
ko-build / ko-build (pull_request) Successful in 1m48s
to 9bef3bbaee
All checks were successful
ko-build / ko-build (push) Successful in 2m5s
ko-build / ko-build (pull_request) Successful in 1m33s
2026-01-13 12:03:51 -05:00
Compare
renovatebot changed title from chore(deps): update docker.io/matrixdotorg/synapse docker tag to v1.144.0 to chore(deps): update docker.io/matrixdotorg/synapse docker tag to v1.145.0 2026-01-13 12:03:53 -05:00
All checks were successful
ko-build / ko-build (push) Successful in 2m5s
ko-build / ko-build (pull_request) Successful in 1m33s
This pull request can be merged automatically.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin renovate/docker.io-matrixdotorg-synapse-1.x:renovate/docker.io-matrixdotorg-synapse-1.x
git switch renovate/docker.io-matrixdotorg-synapse-1.x

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch main
git merge --no-ff renovate/docker.io-matrixdotorg-synapse-1.x
git switch renovate/docker.io-matrixdotorg-synapse-1.x
git rebase main
git switch main
git merge --ff-only renovate/docker.io-matrixdotorg-synapse-1.x
git switch renovate/docker.io-matrixdotorg-synapse-1.x
git rebase main
git switch main
git merge --no-ff renovate/docker.io-matrixdotorg-synapse-1.x
git switch main
git merge --squash renovate/docker.io-matrixdotorg-synapse-1.x
git switch main
git merge --ff-only renovate/docker.io-matrixdotorg-synapse-1.x
git switch main
git merge renovate/docker.io-matrixdotorg-synapse-1.x
git push origin main
Sign in to join this conversation.
No reviewers
No labels
news
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
devhack/member-services!249
No description provided.