Update Matrix #317

Open
renovate-bot wants to merge 1 commit from renovate/matrix into master
Collaborator

This PR contains the following updates:

Package Update Change
ghcr.io/element-hq/lk-jwt-service patch 0.4.30.4.4
ghcr.io/element-hq/matrix-authentication-service minor 1.15.01.16.0
matrixdotorg/synapse minor v1.151.0v1.152.0

Release Notes

element-hq/lk-jwt-service (ghcr.io/element-hq/lk-jwt-service)

v0.4.4

Compare Source

Towards Delegation of Delayed Events

This release updates the service to accept the JSON signature required for the delegation of MatrixRTC membership leave events, as specified in MSC4195.

Note: This update specifically addresses the JSON signature for JWT request. Comprehensive parsing and handling of the additional delegation data are currently in development (PR #​171).

Docker image

The service is available as a Docker image from the GitHub Container Registry.

docker pull ghcr.io/element-hq/lk-jwt-service:0.4.4

Precompiled binaries

The service is available as static precompiled binaries for amd64 and arm64 on linux attached to this release below.

What's Changed

  • Update Docker image version in installation steps by @​her001 in #​175
  • Adapted the lastest JSON signature from MSC4195 for SFURequest by @​fkwp in #​176

New Contributors

Full Changelog: https://github.com/element-hq/lk-jwt-service/compare/v0.4.3...v0.4.4

element-hq/matrix-authentication-service (ghcr.io/element-hq/matrix-authentication-service)

v1.16.0

Compare Source

Docker image

Regular image:

  • Digest:
    ghcr.io/element-hq/matrix-authentication-service@sha256:969d33b20ef4449937ee7bce9e05d159c10d9d1504d9374f2b7d43087bbff924
    
  • Tags:
    ghcr.io/element-hq/matrix-authentication-service:1.16.0
    ghcr.io/element-hq/matrix-authentication-service:1.16
    ghcr.io/element-hq/matrix-authentication-service:1
    ghcr.io/element-hq/matrix-authentication-service:sha-d57ce87
    ghcr.io/element-hq/matrix-authentication-service:latest
    

Debug variant:

  • Digest:
    ghcr.io/element-hq/matrix-authentication-service@sha256:4e95dc94d23d8f9a04833dd86c274a040be3acffb512f3835a17147114def8e4
    
  • Tags:
    ghcr.io/element-hq/matrix-authentication-service:1.16.0-debug
    ghcr.io/element-hq/matrix-authentication-service:1.16-debug
    ghcr.io/element-hq/matrix-authentication-service:1-debug
    ghcr.io/element-hq/matrix-authentication-service:sha-d57ce87-debug
    ghcr.io/element-hq/matrix-authentication-service:latest-debug
    

What's Changed

Documentation
Translations
Internal Changes
Other Changes
Dependency Updates

Full Changelog: https://github.com/element-hq/matrix-authentication-service/compare/v1.15.0...v1.16.0

element-hq/synapse (matrixdotorg/synapse)

v1.152.0

Compare Source

Synapse 1.152.0 (2026-04-28)

No significant changes since 1.152.0rc1.

Configuration changes needed for deployments using workers

For deployments using workers, please note that this version introduces a new quarantined_media_changes stream writer, which may require configuration changes.
Please see the the relevant section in the upgrade notes for details.

Without configuring this new stream writer, only the main process will be able to handle the /media/quarantine admin API endpoints for quarantining media.

Synapse 1.152.0rc1 (2026-04-22)

Features

Bugfixes

  • Reject device_keys: null in the request to POST /_matrix/client/v3/keys/upload, as per the spec. This was temporarily allowed as a workaround for misbehaving clients. (#​19637)
  • Fix database migrations failing on platforms where SQLite is configured with SQLITE_DBCONFIG_DEFENSIVE by default, such as macOS. (#​19690)
  • Fix a bug introduced in v1.145 where a non-admin could bypass admin checks for downloading remote quarantined media. This relied on the media already being previously present on the homeserver. (#​19639)

Improved Documentation

  • Include a workaround for running the unit tests with SQLite under recent versions of MacOS. (#​19615)
  • Fix Docker image link typo in worker docs. (#​19645)
  • Update the developer stream docs for creating a new stream to point out _setup_sequence(...) in portdb. (#​19675)
  • Update the developer stream docs for creating a new stream to highlight places that require documentation updates. (#​19696)

Internal Changes

  • Update CI to use re-usable Complement GitHub CI workflow. (#​19533)
  • Fix docstring for limit argument in _maybe_backfill_inner(...). (#​19630)
  • Document context for why increase timeout for policy server requests. (#​19633)
  • Run lint script to format Complement tests introduced in #​19509. (#​19636)
  • Small simplifications to the events class. (#​19680, #​19712)
  • Introduce spam_checker_spammy internal event metadata. (#​19453)
  • Add a FilteredEvent class that saves us copying events. (#​19640)
  • Convert EventInternalMetadata to use Arc<RwLock<_>>. (#​19669)

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/element-hq/lk-jwt-service](https://github.com/element-hq/lk-jwt-service) | patch | `0.4.3` → `0.4.4` | | [ghcr.io/element-hq/matrix-authentication-service](https://github.com/element-hq/matrix-authentication-service) | minor | `1.15.0` → `1.16.0` | | [matrixdotorg/synapse](https://github.com/element-hq/synapse) | minor | `v1.151.0` → `v1.152.0` | --- ### Release Notes <details> <summary>element-hq/lk-jwt-service (ghcr.io/element-hq/lk-jwt-service)</summary> ### [`v0.4.4`](https://github.com/element-hq/lk-jwt-service/releases/tag/v0.4.4) [Compare Source](https://github.com/element-hq/lk-jwt-service/compare/v0.4.3...v0.4.4) #### Towards Delegation of Delayed Events This release updates the service to accept the JSON signature required for the delegation of MatrixRTC membership leave events, as specified in [MSC4195](https://github.com/matrix-org/matrix-spec-proposals/pull/4195). Note: This update specifically addresses the JSON signature for JWT request. Comprehensive parsing and handling of the additional delegation data are currently in development (PR [#&#8203;171](https://github.com/element-hq/lk-jwt-service/issues/171)). #### Docker image The service is available as a Docker image from the [GitHub Container Registry](https://github.com/element-hq/lk-jwt-service/pkgs/container/lk-jwt-service). ``` docker pull ghcr.io/element-hq/lk-jwt-service:0.4.4 ``` #### Precompiled binaries The service is available as static precompiled binaries for amd64 and arm64 on linux attached to this release below. #### What's Changed - Update Docker image version in installation steps by [@&#8203;her001](https://github.com/her001) in [#&#8203;175](https://github.com/element-hq/lk-jwt-service/pull/175) - Adapted the lastest JSON signature from MSC4195 for SFURequest by [@&#8203;fkwp](https://github.com/fkwp) in [#&#8203;176](https://github.com/element-hq/lk-jwt-service/pull/176) #### New Contributors - [@&#8203;her001](https://github.com/her001) made their first contribution in [#&#8203;175](https://github.com/element-hq/lk-jwt-service/pull/175) **Full Changelog**: <https://github.com/element-hq/lk-jwt-service/compare/v0.4.3...v0.4.4> </details> <details> <summary>element-hq/matrix-authentication-service (ghcr.io/element-hq/matrix-authentication-service)</summary> ### [`v1.16.0`](https://github.com/element-hq/matrix-authentication-service/releases/tag/v1.16.0) [Compare Source](https://github.com/element-hq/matrix-authentication-service/compare/v1.15.0...v1.16.0) ##### Docker image Regular image: - Digest: ``` ghcr.io/element-hq/matrix-authentication-service@sha256:969d33b20ef4449937ee7bce9e05d159c10d9d1504d9374f2b7d43087bbff924 ``` - Tags: ``` ghcr.io/element-hq/matrix-authentication-service:1.16.0 ghcr.io/element-hq/matrix-authentication-service:1.16 ghcr.io/element-hq/matrix-authentication-service:1 ghcr.io/element-hq/matrix-authentication-service:sha-d57ce87 ghcr.io/element-hq/matrix-authentication-service:latest ``` Debug variant: - Digest: ``` ghcr.io/element-hq/matrix-authentication-service@sha256:4e95dc94d23d8f9a04833dd86c274a040be3acffb512f3835a17147114def8e4 ``` - Tags: ``` ghcr.io/element-hq/matrix-authentication-service:1.16.0-debug ghcr.io/element-hq/matrix-authentication-service:1.16-debug ghcr.io/element-hq/matrix-authentication-service:1-debug ghcr.io/element-hq/matrix-authentication-service:sha-d57ce87-debug ghcr.io/element-hq/matrix-authentication-service:latest-debug ``` <!-- Release notes generated using configuration in .github/release.yml at v1.16.0 --> #### What's Changed ##### Documentation - Add some docs for debugging policies by [@&#8203;MadLittleMods](https://github.com/MadLittleMods) in [#&#8203;5620](https://github.com/element-hq/matrix-authentication-service/pull/5620) ##### Translations - Translations updates for main by [@&#8203;matrixbot](https://github.com/matrixbot) in [#&#8203;5632](https://github.com/element-hq/matrix-authentication-service/pull/5632) - Translations updates for v1.16 by [@&#8203;matrixbot](https://github.com/matrixbot) in [#&#8203;5656](https://github.com/element-hq/matrix-authentication-service/pull/5656) ##### Internal Changes - Automatic merge back to main by [@&#8203;matrixbot](https://github.com/matrixbot) in [#&#8203;5593](https://github.com/element-hq/matrix-authentication-service/pull/5593) - Automatic merge back to main by [@&#8203;matrixbot](https://github.com/matrixbot) in [#&#8203;5614](https://github.com/element-hq/matrix-authentication-service/pull/5614) ##### Other Changes - Upgrade `opa-wasm` and `wasmtime` to close a few advisories by [@&#8203;sandhose](https://github.com/sandhose) in [#&#8203;5630](https://github.com/element-hq/matrix-authentication-service/pull/5630) ##### Dependency Updates - build(deps-dev): bump the vitest group across 1 directory with 2 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;5594](https://github.com/element-hq/matrix-authentication-service/pull/5594) - build(deps): bump the i18next group across 1 directory with 3 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;5595](https://github.com/element-hq/matrix-authentication-service/pull/5595) - build(deps): bump the tanstack-router group across 1 directory with 3 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;5596](https://github.com/element-hq/matrix-authentication-service/pull/5596) - build(deps): bump docker/login-action from 4.0.0 to 4.1.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;5604](https://github.com/element-hq/matrix-authentication-service/pull/5604) - build(deps): bump the tanstack-query group in /frontend with 2 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;5597](https://github.com/element-hq/matrix-authentication-service/pull/5597) - build(deps-dev): bump the storybook group in /frontend with 3 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;5617](https://github.com/element-hq/matrix-authentication-service/pull/5617) - build(deps): bump EmbarkStudios/cargo-deny-action from 2.0.15 to 2.0.16 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;5623](https://github.com/element-hq/matrix-authentication-service/pull/5623) - build(deps): bump docker/bake-action from 7.0.0 to 7.1.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;5624](https://github.com/element-hq/matrix-authentication-service/pull/5624) **Full Changelog**: <https://github.com/element-hq/matrix-authentication-service/compare/v1.15.0...v1.16.0> </details> <details> <summary>element-hq/synapse (matrixdotorg/synapse)</summary> ### [`v1.152.0`](https://github.com/element-hq/synapse/releases/tag/v1.152.0) [Compare Source](https://github.com/element-hq/synapse/compare/v1.151.0...v1.152.0) ### Synapse 1.152.0 (2026-04-28) No significant changes since 1.152.0rc1. #### Configuration changes needed for deployments using workers For deployments using workers, please note that this version introduces a new `quarantined_media_changes` stream writer, which may require configuration changes. Please see the [the relevant section in the upgrade notes](https://github.com/element-hq/synapse/blob/develop/docs/upgrade.md#upgrading-to-v11520) for details. Without configuring this new stream writer, only the main process will be able to handle the `/media/quarantine` admin API endpoints for quarantining media. ### Synapse 1.152.0rc1 (2026-04-22) #### Features - Add a ["Listing quarantined media changes" Admin API](https://element-hq.github.io/synapse/latest/admin_api/media_admin_api.html#listing-quarantined-media-changes) for retrieving a paginated record of when media became (un)quarantined. ([#&#8203;19558](https://github.com/element-hq/synapse/issues/19558), [#&#8203;19677](https://github.com/element-hq/synapse/issues/19677), [#&#8203;19694](https://github.com/element-hq/synapse/issues/19694)) - Advertise [MSC4445](https://github.com/matrix-org/matrix-spec-proposals/pull/4445) sync timeline order in `unstable_features`. ([#&#8203;19642](https://github.com/element-hq/synapse/issues/19642)) - Report the Rust compiler version used in the Prometheus metrics. Contributed by Noah Markert. ([#&#8203;19643](https://github.com/element-hq/synapse/issues/19643)) - Passthrough 'article' and 'profile' OpenGraph metadata on URL preview requests. ([#&#8203;19659](https://github.com/element-hq/synapse/issues/19659)) - Add a way to re-sign local events with a new signing key. ([#&#8203;19668](https://github.com/element-hq/synapse/issues/19668)) - Support [MSC4450: Identity Provider selection for User-Interactive Authentication with Legacy Single Sign-On](https://github.com/matrix-org/matrix-spec-proposals/pull/4450). ([#&#8203;19693](https://github.com/element-hq/synapse/issues/19693)) - Add experimental support for [MSC4242](https://github.com/matrix-org/matrix-spec-proposals/pull/4242): State DAGs. Excludes federation support. ([#&#8203;19424](https://github.com/element-hq/synapse/issues/19424)) - Adds [Admin API](https://element-hq.github.io/synapse/latest/usage/administration/admin_api/index.html) endpoints to list, fetch and delete user reports. ([#&#8203;19657](https://github.com/element-hq/synapse/issues/19657)) - Reduce database disk space usage by pruning old rows from `device_lists_changes_in_room`. ([#&#8203;19473](https://github.com/element-hq/synapse/issues/19473), [#&#8203;19709](https://github.com/element-hq/synapse/issues/19709)) #### Bugfixes - Reject `device_keys: null` in the request to [`POST /_matrix/client/v3/keys/upload`](https://spec.matrix.org/v1.16/client-server-api/#post_matrixclientv3keysupload), as per the spec. This was temporarily allowed as a workaround for misbehaving clients. ([#&#8203;19637](https://github.com/element-hq/synapse/issues/19637)) - Fix database migrations failing on platforms where SQLite is configured with `SQLITE_DBCONFIG_DEFENSIVE` by default, such as macOS. ([#&#8203;19690](https://github.com/element-hq/synapse/issues/19690)) - Fix a bug introduced in v1.145 where a non-admin could bypass admin checks for downloading remote quarantined media. This relied on the media already being previously present on the homeserver. ([#&#8203;19639](https://github.com/element-hq/synapse/issues/19639)) #### Improved Documentation - Include a workaround for running the unit tests with SQLite under recent versions of MacOS. ([#&#8203;19615](https://github.com/element-hq/synapse/issues/19615)) - Fix Docker image link typo in worker docs. ([#&#8203;19645](https://github.com/element-hq/synapse/issues/19645)) - Update the developer stream docs for creating a new stream to point out `_setup_sequence(...)` in `portdb`. ([#&#8203;19675](https://github.com/element-hq/synapse/issues/19675)) - Update the developer stream docs for creating a new stream to highlight places that require documentation updates. ([#&#8203;19696](https://github.com/element-hq/synapse/issues/19696)) #### Internal Changes - Update CI to use re-usable Complement GitHub CI workflow. ([#&#8203;19533](https://github.com/element-hq/synapse/issues/19533)) - Fix docstring for `limit` argument in `_maybe_backfill_inner(...)`. ([#&#8203;19630](https://github.com/element-hq/synapse/issues/19630)) - Document context for why increase timeout for policy server requests. ([#&#8203;19633](https://github.com/element-hq/synapse/issues/19633)) - Run lint script to format Complement tests introduced in [#&#8203;19509](https://github.com/element-hq/synapse/pull/19509). ([#&#8203;19636](https://github.com/element-hq/synapse/issues/19636)) - Small simplifications to the events class. ([#&#8203;19680](https://github.com/element-hq/synapse/issues/19680), [#&#8203;19712](https://github.com/element-hq/synapse/issues/19712)) - Introduce `spam_checker_spammy` internal event metadata. ([#&#8203;19453](https://github.com/element-hq/synapse/issues/19453)) - Add a `FilteredEvent` class that saves us copying events. ([#&#8203;19640](https://github.com/element-hq/synapse/issues/19640)) - Convert `EventInternalMetadata` to use `Arc<RwLock<_>>`. ([#&#8203;19669](https://github.com/element-hq/synapse/issues/19669)) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDQuMiIsInVwZGF0ZWRJblZlciI6IjQzLjEwNC4yIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbXX0=-->
renovate-bot changed title from Update ghcr.io/element-hq/lk-jwt-service Docker tag to v0.4.4 to Update Matrix 2026-04-29 00:02:56 +00:00
This pull request can be merged automatically.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin renovate/matrix:renovate/matrix
git switch renovate/matrix

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch master
git merge --no-ff renovate/matrix
git switch renovate/matrix
git rebase master
git switch master
git merge --ff-only renovate/matrix
git switch renovate/matrix
git rebase master
git switch master
git merge --no-ff renovate/matrix
git switch master
git merge --squash renovate/matrix
git switch master
git merge --ff-only renovate/matrix
git switch master
git merge renovate/matrix
git push origin master
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
peter/homelab-docker-config!317
No description provided.