* Support freezing media on the unauthenticated endpoints

* changelog

* Log errors from remotes

* Serialize the content

* Try nil content

* Process `content` more safely

* Ignore empty lines in Synapse signing keys

* changelog

* Add support for MSC3916

* Add changelog

* Add tests for preview_url and config authenticated endpoints

* Add placeholder tests for downloads and thumbnails

* Test X-Matrix auth header stuff

* Validate signing keys more correctly

* Add early documentation for what this setup will look like

* Fix imports

* Update tests

* Add resolvematrix.dev tests

* Fix URL preview test

* Support receiving `/versions` and enabling MSC3916 support

* Remove placeholder docs

* Make outbound federation requests using MSC3916

* Validate X-Matrix destination correctly

* Factor out signing key generation

* Allow overriding the auth header in tests

* Print signing key path when printing domains

* Configure test MMR instances with a signing key

* Allow lazy ServeFile implementations

* Add federation download test

* Re-add merge conflicts in changelog

* Support http-only federation for tests

* Strip Go-added URI segments

* Fix test shutdown

* Remove unused test

* Enable failing tests

* Ensure signing keys exist inside container

* Fix signing key alignment between dependencies

* Ensure signing key information is carried into the config object

* Generally treat homeserver config a bite more safely

* Support and use new 3916v2 federation download URL

* Fix signing key permissions?

* Fix routing

* Update redirect-supporting behaviour

* Support redirects

* Finish tests

* Mark test function as deprecated to discourage use

* Avoid testcontainers tests from overwriting the config concurrently.

* host.docker.internal doesn't exist on linux

* Temporarily disable upload tests

* Support federation thumbnails again

* Fix tests for auth header

* Switch to stable endpoints

* Maybe use the correct stable endpoint too

* Revert "Temporarily disable upload tests"

This reverts commit e21fa0135b8fa880af7bbb7690e147a12946c28e.

* Try fixing tests

* Hardcode `host.docker.internal` again

* Fix redirect behaviour on federation

* Move endpoints to correct package

* Maybe remove the dev code

Bumps [golang.org/x/image](https://github.com/golang/image) from 0.15.0 to 0.18.0.
- [Commits](https://github.com/golang/image/compare/v0.15.0...v0.18.0

)

---
updated-dependencies:
- dependency-name: golang.org/x/image
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Use a leaky bucket algorithm to limit download requests

* changelog

* Ensure thumbnail readers are cleaned up/read upon error

* Changelog

* Fix directory permissions in import_to_synapse

The directory permissions 0655 map to rw-r-x-rx, which excludes the owner
from accessing created directories, which the creation of directories in
the media store.

* changelog

---------

Co-authored-by: Martin Weinelt <hexa@helix.lossy.network>
Co-authored-by: Travis Ralston <travis@t2bot.io>

* Use consistent thumbnail extensions for common media types

* changelog

Bumps [golang.org/x/net](https://github.com/golang/net) from 0.22.0 to 0.23.0.
- [Commits](https://github.com/golang/net/compare/v0.22.0...v0.23.0

)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Support `HEAD` on `/download`, per MSC4120

https://github.com/matrix-org/matrix-spec-proposals/pull/4120

* Changelog

Bumps [github.com/docker/docker](https://github.com/docker/docker) from 25.0.4+incompatible to 25.0.5+incompatible.
- [Release notes](https://github.com/docker/docker/releases)
- [Commits](https://github.com/docker/docker/compare/v25.0.4...v25.0.5

)

---
updated-dependencies:
- dependency-name: github.com/docker/docker
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

`m.origin <> ANY(array[]:text[])` doesn't seem to work (or matches zero records). We need to check if the array is empty using `cardinality`. In testing, `array_length` didn't work, and since we're only ever using a one dimensional array, cardinality is fine.

Fixes https://github.com/t2bot/matrix-media-repo/issues/564

Fixes https://github.com/t2bot/matrix-media-repo/issues/572