Olivier 'reivilibre
2dc4fff90f
build(deps): bump docker/build-push-action from 7.3.0 to 7.4.0 ( #6009 )
2026-10-05 11:15:07 +01:00
Olivier 'reivilibre
38beccd9a3
build(deps): bump regex from 1.12.4 to 1.13.1 ( #6016 )
2026-10-05 11:14:09 +01:00
Olivier 'reivilibre
470a56de4b
build(deps): bump the react group with 2 updates ( #6021 )
2026-10-05 11:13:29 +01:00
dependabot[bot]
4b3e5a7191
build(deps): bump the react group with 2 updates
...
Bumps the react group with 2 updates: [react](https://github.com/react/react/tree/HEAD/packages/react ) and [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom ).
Updates `react` from 19.2.7 to 19.3.0
- [Release notes](https://github.com/react/react/releases )
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md )
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react )
Updates `react-dom` from 19.2.7 to 19.3.0
- [Release notes](https://github.com/react/react/releases )
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md )
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom )
---
updated-dependencies:
- dependency-name: react
dependency-version: 19.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: react
- dependency-name: react-dom
dependency-version: 19.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: react
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-01 14:13:21 +00:00
dependabot[bot]
1234b79c6f
build(deps): bump regex from 1.12.4 to 1.13.1
...
Bumps [regex](https://github.com/rust-lang/regex ) from 1.12.4 to 1.13.1.
- [Release notes](https://github.com/rust-lang/regex/releases )
- [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md )
- [Commits](https://github.com/rust-lang/regex/compare/1.12.4...1.13.1 )
---
updated-dependencies:
- dependency-name: regex
dependency-version: 1.13.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-01 13:57:21 +00:00
dependabot[bot]
442724fecb
build(deps): bump docker/build-push-action from 7.3.0 to 7.4.0
...
Bumps [docker/build-push-action](https://github.com/docker/build-push-action ) from 7.3.0 to 7.4.0.
- [Release notes](https://github.com/docker/build-push-action/releases )
- [Commits](https://github.com/docker/build-push-action/compare/53b7df96c91f9c12dcc8a07bcb9ccacbed38856a...c3c9e263c25d99ce0380d002d59b67737d91b0dc )
---
updated-dependencies:
- dependency-name: docker/build-push-action
dependency-version: 7.4.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-01 13:54:52 +00:00
Eric Eastwood
19fa53b9ac
Automatic merge back to main ( #6005 )
2026-09-29 13:49:04 -05:00
Eric Eastwood
6d0c41e626
Merge branch 'main' into ref-merge/f36b2766821b3b8f4a92e99dd7994f93dafe07f7
2026-09-29 12:52:11 -05:00
github-actions[bot]
f36b276682
1.26.0
v1.26.0
2026-09-29 17:09:41 +00:00
Eric Eastwood
655e41d591
Translations updates for v1.26 ( #6004 )
2026-09-29 12:07:19 -05:00
github-actions[bot]
a3ea612459
Translations updates
2026-09-29 16:11:53 +00:00
Quentin Gliech
5b8d456a72
Remember which username was chosen when doing a registration through a social-login provider ( #5969 )
2026-09-28 20:16:53 +00:00
Quentin Gliech
acb6270690
Merge main into quenting/register-form-post
2026-09-25 18:46:14 +02:00
Quentin Gliech
5dd989212a
Tighten the comments on carrying the username through the upstream flow
2026-09-25 18:46:14 +02:00
ElementBot
bdb108f764
Automatic merge back to main ( #5998 )
2026-09-22 20:50:49 +01:00
github-actions[bot]
263a24addd
1.26.0-rc.0
v1.26.0-rc.0
2026-09-22 19:33:54 +00:00
ElementBot
97ae55b1bf
Translations updates for main ( #5997 )
2026-09-22 20:15:22 +01:00
github-actions[bot]
b67a480af8
Translations updates
2026-09-22 19:00:00 +00:00
Quentin Gliech
56a0c2bb63
Show the reason on the policy violation page for admin scopes and disallowed clients ( #5996 )
2026-09-22 17:34:22 +02:00
Quentin Gliech
52f9a11d78
Show the reason on the policy violation page for admin scopes and disallowed clients
...
Violations from the `authorization_grant` policy for `urn:synapse:admin:*` and `urn:mas:admin` now carry the `admin-scope-not-allowed` code, and `client-not-allowed` is reserved for policies which reject the client itself (used by the Pro policies). The policy violation pages render a specific reason for each code under a shared headline, instead of the generic explanation.
Fixes #5995
2026-09-22 17:06:11 +02:00
Eric Eastwood
1cb886d21b
Update release instructions to link to CI from @ElementBot ( #5990 )
...
We switched from @matrixbot to @ElementBot, see https://github.com/element-hq/matrix-authentication-service/issues/5271
2026-09-21 17:43:25 -05:00
Eric Eastwood
738f384e09
Automatic merge back to main ( #5993 )
2026-09-21 17:42:14 -05:00
Eric Eastwood
dc80a9aa6e
Merge branch 'main' into ref-merge/97945cd9e7869bc5cdc4322bfc26cef552f11157
...
Conflicts:
translations/en.json
2026-09-21 17:12:04 -05:00
github-actions[bot]
97945cd9e7
1.25.1
v1.25.1
2026-09-21 20:56:31 +00:00
Quentin Gliech
6b21b389b2
Fix the rendering of the password registration page when a CAPTCHA provider is configured ( #5992 )
2026-09-21 22:46:09 +02:00
Quentin Gliech
c565685989
Update translations by running sh misc/update.sh
2026-09-21 22:34:30 +02:00
Quentin Gliech
dfda70dd8e
Fix the CAPTCHA component failing to render because of an undefined translation function
...
Macros close over the context of the template that imports them, at import time. Importing the CAPTCHA component from a child template ran before `base.html` defined `_`, so the noscript translation inside the macro failed with an undefined-not-callable error. Import it from `base.html` like every other component.
2026-09-21 22:15:29 +02:00
Quentin Gliech
a6de208d83
Render the templates with a CAPTCHA config in the template checks
2026-09-21 22:15:29 +02:00
Eric Eastwood
763d82b24c
Automatic merge back to main ( #5989 )
2026-09-21 11:49:10 -05:00
Eric Eastwood
8898c7ba79
Link [translations-download workflow]
2026-09-21 11:16:44 -05:00
Eric Eastwood
1296cb5440
Link to CI from @ElementBot
2026-09-21 11:16:05 -05:00
github-actions[bot]
57bb1b0512
1.25.0
v1.25.0
2026-09-21 15:50:40 +00:00
Eric Eastwood
2f72435233
Translations updates for v1.25 ( #5988 )
2026-09-21 10:48:59 -05:00
github-actions[bot]
8a8266d409
Translations updates
2026-09-21 15:07:45 +00:00
Quentin Gliech
2fd050decf
Translations updates for v1.25 ( #5987 )
2026-09-21 16:48:20 +02:00
Quentin Gliech
474e67b5a6
Start upstream OAuth 2.0 flows with a form POST from the registration page
...
A POST is what lets the username typed on the page travel with the
request. It also lets the whole registration form become a single
component later on.
2026-09-18 18:11:15 +02:00
Quentin Gliech
877e279fbf
Carry the username typed on the registration page through the upstream OAuth 2.0 flow
...
It is stashed in the upstream sessions cookie and used as the localpart
when the user comes back, unless the provider forces or requires its
own.
2026-09-18 18:11:15 +02:00
Quentin Gliech
b6c6e97461
Extract a helper to start an upstream OAuth 2.0 authorization flow
...
The registration page is about to start these flows from a form POST, so
minting the session, the cookie and the authorization URL has to be
callable from outside the `/upstream/authorize/:id` handler.
2026-09-18 18:11:15 +02:00
Hugh Nimmo-Smith
01f7b9ceb5
Improve usability of user code during device code flow ( #5974 )
2026-09-18 17:02:35 +01:00
Hugh Nimmo-Smith
ada65be990
Doc clarifications
2026-09-18 16:06:21 +01:00
Hugh Nimmo-Smith
ba3e869566
Rest of merge
2026-09-18 15:41:14 +01:00
Hugh Nimmo-Smith
e580a1b1b1
Merge branch 'main' into hughns/crockford-user-code
2026-09-18 15:21:52 +01:00
Quentin Gliech
86f327652b
Add MSC4198 login_hint_types_supported discovery metadata ( #5981 )
2026-09-17 17:53:42 +02:00
Tonkku
49ea27f8c7
Add MSC4198 login_hint_types_supported discovery metadata
2026-09-17 09:57:00 +00:00
Quentin Gliech
8cda28a734
Add a shared boot helper for React islands ( #5975 )
2026-09-16 10:56:12 +02:00
Quentin Gliech
899a49f055
Extract the password complexity feedback out of the double-password input component ( #5978 )
2026-09-16 10:14:45 +02:00
github-actions[bot]
5dbef45e9f
Translations updates
2026-09-15 14:59:01 +00:00
Quentin Gliech
05d2f37423
Add a shared boot helper for React islands
...
The helper parses the mount node's dataset, waits for the i18n setup
before the first render, and swaps the page to a server-rendered error
notice when booting fails. This fixes the account app staying on its
loading screen forever when fetching the locale data fails, and gives
upcoming server-rendered pages with React islands a common entry point.
Waiting on the setup requires `setupI18n` to return the initialisation
promise, so it now does.
2026-09-15 15:08:00 +02:00
Quentin Gliech
179f1f9b1d
Extract the password complexity feedback out of PasswordCreationDoubleInput
...
The strength meter, the improvement hints and the too-weak error move to
a `PasswordComplexityFeedback` component backed by a
`usePasswordComplexity` hook, so that forms which lay out their password
fields differently can reuse them. `PasswordCreationDoubleInput` takes
the minimum complexity as a plain number instead of a `SiteConfig`
fragment; its two callers already query `siteConfig`, so they pass the
field directly.
2026-09-15 15:08:00 +02:00
Quentin Gliech
23286d57a9
Update rustls to 0.23.45 to fix RUSTSEC-2026-0285 ( #5976 )
2026-09-15 15:07:37 +02:00