1.163.0rc1

2026-10-23 08:43:27 +00:00 · 2026-10-06 10:12:33 -05:00
1 parent d92b0b4a5c
commit 61c1f96011
@@ -1,3 +1,61 @@
+# Synapse 1.163.0rc1 (2026-10-06)
+
+## Features
+
+- Advertise support for Matrix v1.14. Contributed by @famedly. ([\#20137](https://github.com/element-hq/synapse/issues/20137))
+- Catch up [MSC4354 Sticky Events](https://github.com/matrix-org/matrix-spec-proposals/pull/4354) to remote homeservers that have missed them. ([\#20165](https://github.com/element-hq/synapse/issues/20165))
+- Add push rules for MSC4075: MatrixRTC invites and notifications. ([\#20227](https://github.com/element-hq/synapse/issues/20227))
+- Make the task scheduler concurrency configurable via `task_scheduler.max_concurrent_tasks`, defaulting to 5. ([\#20230](https://github.com/element-hq/synapse/issues/20230))
+- Cancel a user's scheduled [MSC4140](https://github.com/matrix-org/matrix-spec-proposals/pull/4140) delayed events when their account is deactivated. ([\#20247](https://github.com/element-hq/synapse/issues/20247))
+- Advertise support for Matrix v1.15. ([\#20286](https://github.com/element-hq/synapse/issues/20286))
+
+## Bugfixes
+
+- Fix a bug where read receipts could be permanently skipped and never sent to application services if more than 100 read receipts arrived in a single stream update. ([\#20108](https://github.com/element-hq/synapse/issues/20108))
+- Use sharded tokens in [MSC4354: Sticky Events] sync and sliding sync, preventing events appearing in multiple sync responses. ([\#20186](https://github.com/element-hq/synapse/issues/20186))
+- Tell clients to remove local profile information for users after leaving the last room shared with them. ([\#20203](https://github.com/element-hq/synapse/issues/20203))
+- Do not include `og:image` in responses to `/preview_url` when the media was automatically quarantined by hash matching. ([\#20211](https://github.com/element-hq/synapse/issues/20211))
+- Requires `require_auth_for_profile_requests` to be enabled to enable `limit_profile_requests_to_users_who_share_rooms`. ([\#20231](https://github.com/element-hq/synapse/issues/20231))
+- Prevent [MSC4354 Sticky Events](https://github.com/matrix-org/matrix-spec-proposals/pull/4354) being sticky when they were redacted prior to persistence. ([\#20232](https://github.com/element-hq/synapse/issues/20232))
+- Send all of a room's [MSC4354 Sticky Events](https://github.com/matrix-org/matrix-spec-proposals/pull/4354) down legacy `/sync` when a user joins it. ([\#20233](https://github.com/element-hq/synapse/issues/20233))
+- Fix a bug where push badge counts could ignore notifications in one room based on another room's summarised counts. ([\#20237](https://github.com/element-hq/synapse/issues/20237))
+- Reject user creation via the Admin API when Synapse is delegating authentication to MAS. ([\#20241](https://github.com/element-hq/synapse/issues/20241))
+- Fix spurious `Closing scope ... which is not the currently-active one` errors being logged when writing large responses with tracing enabled. ([\#20246](https://github.com/element-hq/synapse/issues/20246))
+- Prevent `trial` tests from hanging when running with Twisted 26.4.0 against Postgres. ([\#20272](https://github.com/element-hq/synapse/issues/20272))
+- Fix a bug where sending a `null` or non-object `auth` to an endpoint requiring user-interactive authentication returned a 500 error. Contributed by @ankit373. ([\#20274](https://github.com/element-hq/synapse/issues/20274))
+- Fix bug where membership events would not be returned in `/sync` when using lazy-loaded members and using an old token for `since`. ([\#20289](https://github.com/element-hq/synapse/issues/20289))
+
+## Updates to the Docker image
+
+- Add worker support to the endpoint for retrieving a single [MSC4140](https://github.com/matrix-org/matrix-spec-proposals/pull/4140) delayed event. ([\#20262](https://github.com/element-hq/synapse/issues/20262))
+
+## Improved Documentation
+
+- Update ESS support link to point to the new customer portal domain. ([\#19070](https://github.com/element-hq/synapse/issues/19070))
+- Clarify the `--exists-ok` help text in `register_new_matrix_user`. ([\#20263](https://github.com/element-hq/synapse/issues/20263))
+
+## Deprecations and Removals
+
+- Remove the ability to send state events that are sticky, as this feature was removed from [MSC4354: Sticky Events](https://github.com/matrix-org/matrix-spec-proposals/pull/4354). ([\#20256](https://github.com/element-hq/synapse/issues/20256))
+
+## Internal Changes
+
+- Switch to `beautifulsoup4` from `lxml` for URL previews. Contributed by @clokep. ([\#19301](https://github.com/element-hq/synapse/issues/19301))
+- Add a `synapse_notifier_wait_for_stream_token_timeouts` metric, counting the times a request gave up waiting for a worker to catch up to a stream token, labelled by the lagging stream. ([\#20095](https://github.com/element-hq/synapse/issues/20095))
+- Avoid taking the GIL on Tokio worker threads when completing Rust futures. ([\#20252](https://github.com/element-hq/synapse/issues/20252))
+- Bump `cryptography` from `46.0.7` to `50.0.1` to resolve `CVE-2026-69248`, `CVE-2026-69249` and `CVE-2026-69247`, none of which affected Synapse. Also bump `pyOpenSSL` from `26.0.0` to `26.4.0` for compatibility with newer `cryptography` versions. ([\#20253](https://github.com/element-hq/synapse/issues/20253))
+- Switch dependabot version upgrades to monthly "big bang" upgrades in a single PR per ecosystem to reduce team maintenance burden. Security update PRs remain individual and active. ([\#20255](https://github.com/element-hq/synapse/issues/20255))
+- Add type annotations for `RestServlet.PATTERNS` to prevent misuse. ([\#20258](https://github.com/element-hq/synapse/issues/20258))
+- Bump `Twisted` in `poetry.lock` from `25.5.0` to `26.4.0`. ([\#20259](https://github.com/element-hq/synapse/issues/20259))
+- Stop taking the GIL on Tokio worker threads when calling into Python from Rust. ([\#20267](https://github.com/element-hq/synapse/issues/20267))
+- Keep in-repo Complement go dependencies up to date with dependabot. ([\#20270](https://github.com/element-hq/synapse/issues/20270))
+- Ignore suspended users failing to join new room when using the `new_room_user_id` option with the admin API to delete a room. ([\#20283](https://github.com/element-hq/synapse/issues/20283))
+- Prune `user_ips` less frequently (less stress on the database). ([\#20285](https://github.com/element-hq/synapse/issues/20285))
+- Fix the `sytest` job failing on the Twisted trunk workflow due to missing build backend dependencies. ([\#20293](https://github.com/element-hq/synapse/issues/20293))
+
+
+
+
 # Synapse 1.162.0 (2026-09-29)

 No significant changes since 1.162.0rc1.
@@ -1 +0,0 @@
-Update ESS support link to point to the new customer portal domain.
@@ -1 +0,0 @@
-Switch to `beautifulsoup4` from `lxml` for URL previews. Contributed by @clokep.
@@ -1 +0,0 @@
-Add a `synapse_notifier_wait_for_stream_token_timeouts` metric, counting the times a request gave up waiting for a worker to catch up to a stream token, labelled by the lagging stream.
@@ -1 +0,0 @@
-Fix a bug where read receipts could be permanently skipped and never sent to application services if more than 100 read receipts arrived in a single stream update.
@@ -1 +0,0 @@
-Advertise support for Matrix v1.14. Contributed by @famedly.
@@ -1 +0,0 @@
-Catch up [MSC4354 Sticky Events](https://github.com/matrix-org/matrix-spec-proposals/pull/4354) to remote homeservers that have missed them.
@@ -1 +0,0 @@
-Use sharded tokens in [MSC4354: Sticky Events] sync and sliding sync, preventing events appearing in multiple sync responses.
@@ -1 +0,0 @@
-Tell clients to remove local profile information for users after leaving the last room shared with them.
@@ -1 +0,0 @@
-Do not include `og:image` in responses to `/preview_url` when the media was automatically quarantined by hash matching.
@@ -1 +0,0 @@
-Add push rules for MSC4075: MatrixRTC invites and notifications.
@@ -1 +0,0 @@
-Make the task scheduler concurrency configurable via `task_scheduler.max_concurrent_tasks`, defaulting to 5.
@@ -1 +0,0 @@
-Requires `require_auth_for_profile_requests` to be enabled to enable `limit_profile_requests_to_users_who_share_rooms`.
@@ -1 +0,0 @@
-Prevent [MSC4354 Sticky Events](https://github.com/matrix-org/matrix-spec-proposals/pull/4354) being sticky when they were redacted prior to persistence.
@@ -1 +0,0 @@
-Send all of a room's [MSC4354 Sticky Events](https://github.com/matrix-org/matrix-spec-proposals/pull/4354) down legacy `/sync` when a user joins it.
@@ -1 +0,0 @@
-Fix a bug where push badge counts could ignore notifications in one room based on another room's summarised counts.
@@ -1 +0,0 @@
-Reject user creation via the Admin API when Synapse is delegating authentication to MAS.
@@ -1 +0,0 @@
-Fix spurious `Closing scope ... which is not the currently-active one` errors being logged when writing large responses with tracing enabled.
@@ -1 +0,0 @@
-Cancel a user's scheduled [MSC4140](https://github.com/matrix-org/matrix-spec-proposals/pull/4140) delayed events when their account is deactivated.
@@ -1 +0,0 @@
-Avoid taking the GIL on Tokio worker threads when completing Rust futures.
@@ -1 +0,0 @@
-Bump `cryptography` from `46.0.7` to `50.0.1` to resolve `CVE-2026-69248`, `CVE-2026-69249` and `CVE-2026-69247`, none of which affected Synapse. Also bump `pyOpenSSL` from `26.0.0` to `26.4.0` for compatibility with newer `cryptography` versions.
@@ -1 +0,0 @@
-Switch dependabot version upgrades to monthly "big bang" upgrades in a single PR per ecosystem to reduce team maintenance burden. Security update PRs remain individual and active.
@@ -1 +0,0 @@
-Remove the ability to send state events that are sticky, as this feature was removed from [MSC4354: Sticky Events](https://github.com/matrix-org/matrix-spec-proposals/pull/4354).
@@ -1,2 +0,0 @@
-Add type annotations for `RestServlet.PATTERNS` to prevent misuse.
-
@@ -1 +0,0 @@
-Bump `Twisted` in `poetry.lock` from `25.5.0` to `26.4.0`.
@@ -1 +0,0 @@
-Add worker support to the endpoint for retrieving a single [MSC4140](https://github.com/matrix-org/matrix-spec-proposals/pull/4140) delayed event.
@@ -1 +0,0 @@
-Clarify the `--exists-ok` help text in `register_new_matrix_user`.
@@ -1 +0,0 @@
-Stop taking the GIL on Tokio worker threads when calling into Python from Rust.
@@ -1 +0,0 @@
-Keep in-repo Complement go dependencies up to date with dependabot.
@@ -1 +0,0 @@
-Prevent `trial` tests from hanging when running with Twisted 26.4.0 against Postgres.
@@ -1 +0,0 @@
-Fix a bug where sending a `null` or non-object `auth` to an endpoint requiring user-interactive authentication returned a 500 error. Contributed by @ankit373.
@@ -1 +0,0 @@
-Ignore suspended users failing to join new room when using the `new_room_user_id` option with the admin API to delete a room.
@@ -1 +0,0 @@
-Prune `user_ips` less frequently (less stress on the database).
@@ -1 +0,0 @@
-Advertise support for Matrix v1.15.
@@ -1 +0,0 @@
-Fix bug where membership events would not be returned in `/sync` when using lazy-loaded members and using an old token for `since`.
@@ -1 +0,0 @@
-Fix the `sytest` job failing on the Twisted trunk workflow due to missing build backend dependencies.
@@ -1,3 +1,9 @@
+matrix-synapse-py3 (1.163.0~rc1) stable; urgency=medium
+
+  * New synapse release 1.163.0rc1.
+
+ -- Synapse Packaging team <packages@matrix.org>  Tue, 06 Oct 2026 15:12:01 +0000
+
 matrix-synapse-py3 (1.162.0) stable; urgency=medium

  * New synapse release 1.162.0.
@@ -1,6 +1,6 @@
 [project]
 name = "matrix-synapse"
-version = "1.162.0"
+version = "1.163.0rc1"
 description = "Homeserver for the Matrix decentralised comms protocol"
 readme = "README.rst"
 authors = [
@@ -1,5 +1,5 @@
 $schema: https://element-hq.github.io/synapse/latest/schema/v1/meta.schema.json
-$id: https://element-hq.github.io/synapse/schema/synapse/v1.162/synapse-config.schema.json
+$id: https://element-hq.github.io/synapse/schema/synapse/v1.163/synapse-config.schema.json
 type: object
 properties:
  modules:
				`@@ -1 +0,0 @@`
				`Update ESS support link to point to the new customer portal domain.`
				`@@ -1 +0,0 @@`
				Switch to `beautifulsoup4` from `lxml` for URL previews. Contributed by @clokep.
				`@@ -1 +0,0 @@`
				Add a `synapse_notifier_wait_for_stream_token_timeouts` metric, counting the times a request gave up waiting for a worker to catch up to a stream token, labelled by the lagging stream.
				`@@ -1 +0,0 @@`
				`Fix a bug where read receipts could be permanently skipped and never sent to application services if more than 100 read receipts arrived in a single stream update.`
				`@@ -1 +0,0 @@`
				`Advertise support for Matrix v1.14. Contributed by @famedly.`
				`@@ -1 +0,0 @@`
				`Catch up [MSC4354 Sticky Events](https://github.com/matrix-org/matrix-spec-proposals/pull/4354) to remote homeservers that have missed them.`
				`@@ -1 +0,0 @@`
				`Use sharded tokens in [MSC4354: Sticky Events] sync and sliding sync, preventing events appearing in multiple sync responses.`
				`@@ -1 +0,0 @@`
				`Tell clients to remove local profile information for users after leaving the last room shared with them.`
				`@@ -1 +0,0 @@`
				Do not include `og:image` in responses to `/preview_url` when the media was automatically quarantined by hash matching.
				`@@ -1 +0,0 @@`
				`Add push rules for MSC4075: MatrixRTC invites and notifications.`