CHANGES.md



To find the state of this project's repository at the time of any of these versions, check out the tags.


Synapse 1.22.1 (2020-10-30)

Bugfixes

Fix a bug where an appservice may not be forwarded events for a room it was recently invited to. Broke in v1.22.0. (#8676)
Fix Object of type frozendict is not JSON serializable exceptions when using third-party event rules. Broke in v1.22.0. (#8678)


Synapse 1.22.0 (2020-10-27)
No significant changes.

Synapse 1.22.0rc2 (2020-10-26)

Bugfixes

Fix bugs where ephemeral events were not sent to appservices. Broke in v1.22.0rc1. (#8648, #8656)
Fix user_daily_visits table to not have duplicate rows per user/device due to multiple user agents. Broke in v1.22.0rc1. (#8654)


Synapse 1.22.0rc1 (2020-10-22)

Features

Add a configuration option for always using the "userinfo endpoint" for OpenID Connect. This fixes support for some identity providers, e.g. GitLab. Contributed by Benjamin Koch. (#7658)
Add ability for ThirdPartyEventRules modules to query and manipulate whether a room is in the public rooms directory. (#8292, #8467)
Add support for olm fallback keys (MSC2732). (#8312, #8501)
Add support for running background tasks in a separate worker process. (#8369, #8458, #8489, #8513, #8544, #8599)
Add support for device dehydration (MSC2697). (#8380)
Add support for MSC2409, which allows sending typing, read receipts, and presence events to appservices. (#8437, #8590)
Change default room version to "6", per MSC2788. (#8461)
Add the ability to send non-membership events into a room via the ModuleApi. (#8479)
Increase default upload size limit from 10M to 50M. Contributed by @Akkowicz. (#8502)
Add support for modifying event content in ThirdPartyRules modules. (#8535, #8564)


Bugfixes

Fix a longstanding bug where invalid ignored users in account data could break clients. (#8454)
Fix a bug where backfilling a room with an event that was missing the redacts field would break. (#8457)
Don't attempt to respond to some requests if the client has already disconnected. (#8465)
Fix message duplication if something goes wrong after persisting the event. (#8476)
Fix incremental sync returning an incorrect prev_batch token in timeline section, which when used to paginate returned events that were included in the incremental sync. Broken since v0.16.0. (#8486)
Expose the uk.half-shot.msc2778.login.application_service to clients from the login API. This feature was added in v1.21.0, but was not exposed as a potential login flow. (#8504)
Fix error code for /profile/{userId}/displayname to be M_BAD_JSON. (#8517)
Fix a bug introduced in v1.7.0 that could cause Synapse to insert values from non-state m.room.retention events into the room_retention database table. (#8527)
Fix not sending events over federation when using sharded event writers. (#8536)
Fix a long standing bug where email notifications for encrypted messages were blank. (#8545)
Fix increase in the number of There was no active span... errors logged when using OpenTracing. (#8567)
Fix a bug that prevented errors encountered during execution of the synapse_port_db from being correctly printed. (#8585)
Fix appservice transactions to only include a maximum of 100 persistent and 100 ephemeral events. (#8606)


Updates to the Docker image

Added multi-arch support (arm64,arm/v7) for the docker images. Contributed by @maquis196. (#7921)
Add support for passing commandline args to the synapse process. Contributed by @samuel-p. (#8390)


Improved Documentation

Update the directions for using the manhole with coroutines. (#8462)
Improve readme by adding new shield.io badges. (#8493)
Added note about docker in manhole.md regarding which ip address to bind to. Contributed by @Maquis196. (#8526)
Document the new behaviour of the allowed_lifetime_min and allowed_lifetime_max settings in the room retention configuration. (#8529)


Deprecations and Removals

Drop unused device_max_stream_id table. (#8589)


Internal Changes

Check for unreachable code with mypy. (#8432)
Add unit test for event persister sharding. (#8433)
Allow events to be sent to clients sooner when using sharded event persisters. (#8439, #8488, #8496, #8499)
Configure public_baseurl when using demo scripts. (#8443)
Add SQL logging on queries that happen during startup. (#8448)
Speed up unit tests when using PostgreSQL. (#8450)
Remove redundant database loads of stream_ordering for events we already have. (#8452)
Reduce inconsistencies between codepaths for membership and non-membership events. (#8463)
Combine SpamCheckerApi with the more generic ModuleApi. (#8464)
Additional testing for ThirdPartyEventRules. (#8468)
Add -d option to ./scripts-dev/lint.sh to lint files that have changed since the last git commit. (#8472)
Unblacklist some sytests. (#8474)
Include the log level in the phone home stats. (#8477)
Remove outdated sphinx documentation, scripts and configuration. (#8480)
Clarify error message when plugin config parsers raise an error. (#8492)
Remove the deprecated Handlers object. (#8494)
Fix a threadsafety bug in unit tests. (#8497)
Add user agent to user_daily_visits table. (#8503)
Add type hints to various parts of the code base. (#8407, #8505, #8507, #8547, #8562, #8609)
Remove unused code from the test framework. (#8514)
Apply some internal fixes to the HomeServer class to make its code more idiomatic and statically-verifiable. (#8515)
Factor out common code between RoomMemberHandler._locally_reject_invite and EventCreationHandler.create_event. (#8537)
Improve database performance by executing more queries without starting transactions. (#8542)
Rename Cache to DeferredCache, to better reflect its purpose. (#8548)
Move metric registration code down into LruCache. (#8561, #8591)
Replace DeferredCache with the lighter-weight LruCache where possible. (#8563)
Add virtualenv-generated folders to .gitignore. (#8566)
Add get_immediate method to DeferredCache. (#8568)
Fix mypy not properly checking across the codebase, additionally, fix a typing assertion error in handlers/auth.py. (#8569)
Fix synmark benchmark runner. (#8571)
Modify DeferredCache.get() to return Deferreds instead of ObservableDeferreds. (#8572)
Adjust a protocol-type definition to fit sqlite3 assertions. (#8577)
Support macOS on the synmark benchmark runner. (#8578)
Update mypy static type checker to 0.790. (#8583, #8600)
Re-organize the structured logging code to separate the TCP transport handling from the JSON formatting. (#8587)
Remove extraneous unittest logging decorators from unit tests. (#8592)
Minor optimisations in caching code. (#8593, #8594)


Synapse 1.21.2 (2020-10-15)
Debian packages and Docker images have been rebuilt using the latest versions of dependency libraries, including authlib 0.15.1. Please see bugfixes below.

Security advisory


HTML pages served via Synapse were vulnerable to cross-site scripting (XSS)
attacks. All server administrators are encouraged to upgrade.
(#8444)
(CVE-2020-26891)
This fix was originally included in v1.21.0 but was missing a security advisory.
This was reported by Denis Kasak.


Bugfixes

Fix rare bug where sending an event would fail due to a racey assertion. (#8530)
An updated version of the authlib dependency is included in the Docker and Debian images to fix an issue using OpenID Connect. See #8534 for details.


Synapse 1.21.1 (2020-10-13)
This release fixes a regression in v1.21.0 that prevented debian packages from being built.
It is otherwise identical to v1.21.0.

Synapse 1.21.0 (2020-10-12)
No significant changes since v1.21.0rc3.
As noted in
v1.20.0,
a future release will drop support for accessing Synapse's
Admin API under the
/_matrix/client/* endpoint prefixes. At that point, the Admin API will only
be accessible under /_synapse/admin.

Synapse 1.21.0rc3 (2020-10-08)

Bugfixes

Fix duplication of events on high traffic servers, caused by PostgreSQL could not serialize access due to concurrent update errors. (#8456)


Internal Changes

Add Groovy Gorilla to the list of distributions we build .debs for. (#8475)


Synapse 1.21.0rc2 (2020-10-02)

Features

Convert additional templates from inline HTML to Jinja2 templates. (#8444)


Bugfixes

Fix a regression in v1.21.0rc1 which broke thumbnails of remote media. (#8438)
Do not expose the experimental uk.half-shot.msc2778.login.application_service flow in the login API, which caused a compatibility problem with Element iOS. (#8440)
Fix malformed log line in new federation "catch up" logic. (#8442)
Fix DB query on startup for negative streams which caused long start up times. Introduced in #8374. (#8447)


Synapse 1.21.0rc1 (2020-10-01)

Features

Require the user to confirm that their password should be reset after clicking the email confirmation link. (#8004)
Add an admin API GET /_synapse/admin/v1/event_reports to read entries of table event_reports. Contributed by @dklimpel. (#8217)
Consolidate the SSO error template across all configuration. (#8248, #8405)
Add a configuration option to specify a whitelist of domains that a user can be redirected to after validating their email or phone number. (#8275, #8417)
Add experimental support for sharding event persister. (#8294, #8387, #8396, #8419)
Add the room topic and avatar to the room details admin API. (#8305)
Add an admin API for querying rooms where a user is a member. Contributed by @dklimpel. (#8306)
Add uk.half-shot.msc2778.login.application_service login type to allow appservices to login. (#8320)
Add a configuration option that allows existing users to log in with OpenID Connect. Contributed by @BBBSnowball and @OmmyZhang. (#8345)
Add prometheus metrics for replication requests. (#8406)
Support passing additional single sign-on parameters to the client. (#8413)
Add experimental reporting of metrics on expensive rooms for state-resolution. (#8420)
Add experimental prometheus metric to track numbers of "large" rooms for state resolutiom. (#8425)
Add prometheus metrics to track federation delays. (#8430)


Bugfixes

Fix a bug in the media repository where remote thumbnails with the same size but different crop methods would overwrite each other. Contributed by @deepbluev7. (#7124)
Fix inconsistent handling of non-existent push rules, and stop tracking the enabled state of removed push rules. (#7796)
Fix a longstanding bug when storing a media file with an empty upload_name. (#7905)
Fix messages not being sent over federation until an event is sent into the same room. (#8230, #8247, #8258, #8272, #8322)
Fix a longstanding bug where files that could not be thumbnailed would result in an Internal Server Error. (#8236, #8435)
Upgrade minimum version of canonicaljson to version 1.4.0, to fix an unicode encoding issue. (#8262)
Fix longstanding bug which could lead to incomplete database upgrades on SQLite. (#8265)
Fix stack overflow when stderr is redirected to the logging system, and the logging system encounters an error. (#8268)
Fix a bug which cause the logging system to report errors, if DEBUG was enabled and no context filter was applied. (#8278)
Fix edge case where push could get delayed for a user until a later event was pushed. (#8287)
Fix fetching malformed events from remote servers. (#8324)
Fix UnboundLocalError from occuring when appservices send a malformed register request. (#8329)
Don't send push notifications to expired user accounts. (#8353)
Fix a regression in v1.19.0 with reactivating users through the admin API. (#8362)
Fix a bug where during device registration the length of the device name wasn't limited. (#8364)
Include guest_access in the fields that are checked for null bytes when updating room_stats_state. Broke in v1.7.2. (#8373)
Fix theoretical race condition where events are not sent down /sync if the synchrotron worker is restarted without restarting other workers. (#8374)
Fix a bug which could cause errors in rooms with malformed membership events, on servers using sqlite. (#8385)
Fix "Re-starting finished log context" warning when receiving an event we already had over federation. (#8398)
Fix incorrect handling of timeouts on outgoing HTTP requests. (#8400)
Fix a regression in v1.20.0 in the synapse_port_db script regarding the ui_auth_sessions_ips table. (#8410)
Remove unnecessary 3PID registration check when resetting password via an email address. Bug introduced in v0.34.0rc2. (#8414)


Improved Documentation

Add /_synapse/client to the reverse proxy documentation. (#8227)
Add note to the reverse proxy settings documentation about disabling Apache's mod_security2. Contributed by Julian Fietkau (@jfietkau). (#8375)
Improve description of server_name config option in homserver.yaml. (#8415)


Deprecations and Removals

Drop support for prometheus_client older than 0.4.0. (#8426)


Internal Changes

Fix tests on distros which disable TLSv1.0. Contributed by @danc86. (#8208)
Simplify the distributor code to avoid unnecessary work. (#8216)
Remove the populate_stats_process_rooms_2 background job and restore functionality to populate_stats_process_rooms. (#8243)
Clean up type hints for PaginationConfig. (#8250, #8282)
Track the latest event for every destination and room for catch-up after federation outage. (#8256)
Fix non-user visible bug in implementation of MultiWriterIdGenerator.get_current_token_for_writer. (#8257)
Switch to the JSON implementation from the standard library. (#8259)
Add type hints to synapse.util.async_helpers. (#8260)
Simplify tests that mock asynchronous functions. (#8261)
Add type hints to StreamToken and RoomStreamToken classes. (#8279)
Change StreamToken.room_key to be a RoomStreamToken instance. (#8281)
Refactor notifier code to correctly use the max event stream position. (#8288)
Use slotted classes where possible. (#8296)
Support testing the local Synapse checkout against the Complement homeserver test suite. (#8317)
Update outdated usages of metaclass to python 3 syntax. (#8326)
Move lint-related dependencies to package-extra field, update CONTRIBUTING.md to utilise this. (#8330, #8377)
Use the admin_patterns helper in additional locations. (#8331)
Fix test logging to allow braces in log output. (#8335)
Remove __future__ imports related to Python 2 compatibility. (#8337)
Simplify super() calls to Python 3 syntax. (#8344)
Fix bad merge from release-v1.20.0 branch to develop. (#8354)
Factor out a _send_dummy_event_for_room method. (#8370)
Improve logging of state resolution. (#8371)
Add type annotations to SimpleHttpClient. (#8372)
Refactor ID generators to use async with syntax. (#8383)
Add EventStreamPosition type. (#8388)
Create a mechanism for marking tests "logcontext clean". (#8399)
A pair of tiny cleanups in the federation request code. (#8401)
Add checks on startup that PostgreSQL sequences are consistent with their associated tables. (#8402)
Do not include appservice users when calculating the total MAU for a server. (#8404)
Typing fixes for synapse.handlers.federation. (#8422)
Various refactors to simplify stream token handling. (#8423)
Make stream token serializing/deserializing async. (#8427)


Synapse 1.20.1 (2020-09-24)

Bugfixes

Fix a bug introduced in v1.20.0 which caused the synapse_port_db script to fail. (#8386)
Fix a bug introduced in v1.20.0 which caused variables to be incorrectly escaped in Jinja2 templates. (#8394)


Synapse 1.20.0 (2020-09-22)
No significant changes since v1.20.0rc5.

Removal warning
Historically, the Synapse Admin
API has been
accessible under the /_matrix/client/api/v1/admin,
/_matrix/client/unstable/admin, /_matrix/client/r0/admin and
/_synapse/admin prefixes. In a future release, we will be dropping support
for accessing Synapse's Admin API using the /_matrix/client/* prefixes.
From that point, the Admin API will only be accessible under /_synapse/admin.
This makes it easier for homeserver admins to lock down external access to the
Admin API endpoints.

Synapse 1.20.0rc5 (2020-09-18)
In addition to the below, Synapse 1.20.0rc5 also includes the bug fix that was included in 1.19.3.

Features

Add flags to the /versions endpoint for whether new rooms default to using E2EE. (#8343)


Bugfixes

Fix rate limiting of federation /send requests. (#8342)
Fix a longstanding bug where back pagination over federation could get stuck if it failed to handle a received event. (#8349)


Internal Changes

Blacklist MSC2753 SyTests until it is implemented. (#8285)


Synapse 1.19.3 (2020-09-18)

Bugfixes

Partially mitigate bug where newly joined servers couldn't get past events in a room when there is a malformed event. (#8350)


Synapse 1.20.0rc4 (2020-09-16)
Synapse 1.20.0rc4 is identical to 1.20.0rc3, with the addition of the security fix that was included in 1.19.2.

Synapse 1.19.2 (2020-09-16)
Due to the issue below server admins are encouraged to upgrade as soon as possible.

Bugfixes

Fix joining rooms over federation that include malformed events. (#8324)


Synapse 1.20.0rc3 (2020-09-11)

Bugfixes

Fix a bug introduced in v1.20.0rc1 where the wrong exception was raised when invalid JSON data is encountered. (#8291)


Synapse 1.20.0rc2 (2020-09-09)

Bugfixes

Fix a bug introduced in v1.20.0rc1 causing some features related to notifications to misbehave following the implementation of unread counts. (#8280)


Synapse 1.20.0rc1 (2020-09-08)

Removal warning
Some older clients used a disallowed character (:) in the client_secret parameter of various endpoints. The incorrect behaviour was allowed for backwards compatibility, but is now being removed from Synapse as most users have updated their client. Further context can be found at #6766.

Features

Add an endpoint to query your shared rooms with another user as an implementation of MSC2666. (#7785)
Iteratively encode JSON to avoid blocking the reactor. (#8013, #8116)
Add support for shadow-banning users (ignoring any message send requests). (#8034, #8092, #8095, #8142, #8152, #8157, #8158, #8176)
Use the default template file when its equivalent is not found in a custom template directory. (#8037, #8107, #8252)
Add unread messages count to sync responses, as specified in MSC2654. (#8059, #8254, #8270, #8274)
Optimise /federation/v1/user/devices/ API by only returning devices with encryption keys. (#8198)


Bugfixes

Fix a memory leak by limiting the length of time that messages will be queued for a remote server that has been unreachable. (#7864)
Fix Re-starting finished log context PUT-nnnn warning when event persistence failed. (#8081)
Synapse now correctly enforces the valid characters in the client_secret parameter used in various endpoints. (#8101)
Fix a bug introduced in v1.7.2 impacting message retention policies that would allow federated homeservers to dictate a retention period that's lower than the configured minimum allowed duration in the configuration file. (#8104)
Fix a long-standing bug where invalid JSON would be accepted by Synapse. (#8106)
Fix a bug introduced in Synapse v1.12.0 which could cause /sync requests to fail with a 404 if you had a very old outstanding room invite. (#8110)
Return a proper error code when the rooms of an invalid group are requested. (#8129)
Fix a bug which could cause a leaked postgres connection if synapse was set to daemonize. (#8131)
Clarify the error code if a user tries to register with a numeric ID. This bug was introduced in v1.15.0. (#8135)
Fix a bug where appservices with ratelimiting disabled would still be ratelimited when joining rooms. This bug was introduced in v1.19.0. (#8139)
Fix logging in via OpenID Connect with a provider that uses integer user IDs. (#8190)
Fix a longstanding bug where user directory updates could break when unexpected profile data was included in events. (#8223)
Fix a longstanding bug where stats updates could break when unexpected profile data was included in events. (#8226)
Fix slow start times for large servers by removing a table scan of the users table from startup code. (#8271)


Updates to the Docker image

Fix builds of the Docker image on non-x86 platforms. (#8144)
Added curl for healthcheck support and readme updates for the change. Contributed by @maquis196. (#8147)


Improved Documentation

Link to matrix-synapse-rest-password-provider in the password provider documentation. (#8111)
Updated documentation to note that Synapse does not follow HTTP 308 redirects due to an upstream library not supporting them. Contributed by Ryan Cole. (#8120)
Explain better what GDPR-erased means when deactivating a user. (#8189)


Internal Changes

Add filter name to the /users admin API, which filters by user ID or displayname. Contributed by Awesome Technologies Innovationslabor GmbH. (#7377, #8163)
Reduce run times of some unit tests by advancing the reactor a fewer number of times. (#7757)
Don't fail /submit_token requests on incorrect session ID if request_token_inhibit_3pid_errors is turned on. (#7991)
Convert various parts of the codebase to async/await. (#8071, #8072, #8074, #8075, #8076, #8087, #8100, #8119, #8121, #8133, #8156, #8162, #8166, #8168, #8173, #8191, #8192, #8193, #8194, #8195, #8197, #8199, #8200, #8201, #8202, #8207, #8213, #8214)
Remove some unused database functions. (#8085)
Add type hints to various parts of the codebase. (#8090, #8127, #8187, #8241, #8140, #8183, #8232, #8235, #8237, #8244)
Return the previous stream token if a non-member event is a duplicate. (#8093, #8112)
Separate get_current_token into two since there are two different use cases for it. (#8113)
Remove ChainedIdGenerator. (#8123)
Reduce the amount of whitespace in JSON stored and sent in responses. (#8124)
Update the test federation client to handle streaming responses. (#8130)
Micro-optimisations to get_auth_chain_ids. (#8132)
Refactor StreamIdGenerator and MultiWriterIdGenerator to have the same interface. (#8161)
Add functions to MultiWriterIdGen used by events stream. (#8164, #8179)
Fix tests that were broken due to the merge of 1.19.1. (#8167)
Make SlavedIdTracker.advance have the same interface as MultiWriterIDGenerator. (#8171)
Remove unused is_guest parameter from, and add safeguard to, MessageHandler.get_room_data. (#8174, #8181)
Standardize the mypy configuration. (#8175)
Refactor some of LoginRestServlet's helper methods, and move them to AuthHandler for easier reuse. (#8182)
Fix wait_for_stream_position to allow multiple waiters on same stream ID. (#8196)
Make MultiWriterIDGenerator work for streams that use negative values. (#8203)
Refactor queries for device keys and cross-signatures. (#8204, #8205, #8222, #8224, #8225, #8231, #8233, #8234)
Fix type hints for functions decorated with @cached. (#8240)
Remove obsolete order field from federation send queues. (#8245)
Stop sub-classing from object. (#8249)
Add more logging to debug slow startup. (#8264)
Do not attempt to upgrade database schema on worker processes. (#8266, #8276)


Synapse 1.19.1 (2020-08-27)
No significant changes.

Synapse 1.19.1rc1 (2020-08-25)

Bugfixes

Fix a bug introduced in v1.19.0 where appservices with ratelimiting disabled would still be ratelimited when joining rooms. (#8139)
Fix a bug introduced in v1.19.0 that would cause e.g. profile updates to fail due to incorrect application of rate limits on join requests. (#8153)


Synapse 1.19.0 (2020-08-17)
No significant changes since 1.19.0rc1.

Removal warning
As outlined in the previous release, we are no longer publishing Docker images with the -py3 tag suffix. On top of that, we have also removed the latest-py3 tag. Please see the announcement in the upgrade notes for 1.18.0.

Synapse 1.19.0rc1 (2020-08-13)

Features

Add option to allow server admins to join rooms which fail complexity checks. Contributed by @lugino-emeritus. (#7902)
Add an option to purge room or not with delete room admin endpoint (POST /_synapse/admin/v1/rooms/<room_id>/delete). Contributed by @dklimpel. (#7964)
Add rate limiting to users joining rooms. (#8008)
Add a /health endpoint to every configured HTTP listener that can be used as a health check endpoint by load balancers. (#8048)
Allow login to be blocked based on the values of SAML attributes. (#8052)
Allow guest access to the GET /_matrix/client/r0/rooms/{room_id}/members endpoint, according to MSC2689. Contributed by Awesome Technologies Innovationslabor GmbH. (#7314)


Bugfixes

Fix a bug introduced in Synapse v1.7.2 which caused inaccurate membership counts in the room directory. (#7977)
Fix a long standing bug: 'Duplicate key value violates unique constraint "event_relations_id"' when message retention is configured. (#7978)
Fix "no create event in auth events" when trying to reject invitation after inviter leaves. Bug introduced in Synapse v1.10.0. (#7980)
Fix various comments and minor discrepencies in server notices code. (#7996)
Fix a long standing bug where HTTP HEAD requests resulted in a 400 error. (#7999)
Fix a long-standing bug which caused two copies of some log lines to be written when synctl was used along with a MemoryHandler logger. (#8011, #8012)


Updates to the Docker image

We no longer publish Docker images with the -py3 tag suffix, as announced in the upgrade notes. (#8056)


Improved Documentation

Document how to set up a client .well-known file and fix several pieces of outdated documentation. (#7899)
Improve workers docs. (#7990, #8000)
Fix typo in docs/workers.md. (#7992)
Add documentation for how to undo a room shutdown. (#7998, #8010)


Internal Changes

Reduce the amount of whitespace in JSON stored and sent in responses. Contributed by David Vo. (#7372)
Switch to the JSON implementation from the standard library and bump the minimum version of the canonicaljson library to 1.2.0. (#7936, #7979)
Convert various parts of the codebase to async/await. (#7947, #7948, #7949, #7951, #7963, #7973, #7975, #7976, #7981, #7987, #7989, #8003, #8014, #8016, #8027, #8031, #8032, #8035, #8042, #8044, #8045, #8061, #8062, #8063, #8066, #8069, #8070)
Move some database-related log lines from the default logger to the database/transaction loggers. (#7952)
Add a script to detect source code files using non-unix line terminators. (#7965, #7970)
Log the SAML session ID during creation. (#7971)
Implement new experimental push rules for some users. (#7997)
Remove redundant and unreliable signature check for v1 Identity Service lookup responses. (#8001)
Improve the performance of the register endpoint. (#8009)
Reduce less useful output in the newsfragment CI step. Add a link to the changelog section of the contributing guide on error. (#8024)
Rename storage layer objects to be more sensible. (#8033)
Change the default log config to reduce disk I/O and storage for new servers. (#8040)
Add an assertion on prev_events in create_new_client_event. (#8041)
Add a comment to ServerContextFactory about the use of SSLv23_METHOD. (#8043)
Log OPTIONS requests at DEBUG rather than INFO level to reduce amount logged at INFO. (#8049)
Reduce amount of outbound request logging at INFO level. (#8050)
It is no longer necessary to explicitly define filters in the logging configuration. (Continuing to do so is redundant but harmless.) (#8051)
Add and improve type hints. (#8058, #8064, #8060, #8067)


Synapse 1.18.0 (2020-07-30)

Deprecation Warnings

Docker Tags with -py3 Suffix
From 10th August 2020, we will no longer publish Docker images with the -py3 tag suffix. The images tagged with the -py3 suffix have been identical to the non-suffixed tags since release 0.99.0, and the suffix is obsolete.
On 10th August, we will remove the latest-py3 tag. Existing per-release tags (such as v1.18.0-py3) will not be removed, but no new -py3 tags will be added.
Scripts relying on the -py3 suffix will need to be updated.

TCP-based Replication
When setting up worker processes, we now recommend the use of a Redis server for replication. The old direct TCP connection method is deprecated and will be removed in a future release. See docs/workers.md for more details.

Improved Documentation

Update worker docs with latest enhancements. (#7969)


Synapse 1.18.0rc2 (2020-07-28)

Bugfixes

Fix an AssertionError exception introduced in v1.18.0rc1. (#7876)
Fix experimental support for moving typing off master when worker is restarted, which is broken in v1.18.0rc1. (#7967)


Internal Changes

Further optimise queueing of inbound replication commands. (#7876)


Synapse 1.18.0rc1 (2020-07-27)

Features

Include room states on invite events that are sent to application services. Contributed by @Sorunome. (#6455)
Add delete room admin endpoint (POST /_synapse/admin/v1/rooms/<room_id>/delete). Contributed by @dklimpel. (#7613, #7953)
Add experimental support for running multiple federation sender processes. (#7798)
Add the option to validate the iss and aud claims for JWT logins. (#7827)
Add support for handling registration requests across multiple client reader workers. (#7830)
Add an admin API to list the users in a room. Contributed by Awesome Technologies Innovationslabor GmbH. (#7842)
Allow email subjects to be customised through Synapse's configuration. (#7846)
Add the ability to re-activate an account from the admin API. (#7847, #7908)
Add experimental support for running multiple pusher workers. (#7855)
Add experimental support for moving typing off master. (#7869, #7959)
Report CPU metrics to prometheus for time spent processing replication commands. (#7879)
Support oEmbed for media previews. (#7920)
Abort federation requests where the client disconnects before the ratelimiter expires. (#7930)
Cache responses to /_matrix/federation/v1/state_ids to reduce duplicated work. (#7931)


Bugfixes

Fix detection of out of sync remote device lists when receiving events from remote users. (#7815)
Fix bug where Synapse fails to process an incoming event over federation if the server is missing too much of the event's auth chain. (#7817)
Fix a bug causing Synapse to misinterpret the value off for encryption_enabled_by_default_for_room_type in its configuration file(s) if that value isn't surrounded by quotes. This bug was introduced in v1.16.0. (#7822)
Fix bug where we did not always pass in app_name or server_name to email templates, including e.g. for registration emails. (#7829)
Errors which occur while using the non-standard JWT login now return the proper error: 403 Forbidden with an error code of M_FORBIDDEN. (#7844)
Fix "AttributeError: 'str' object has no attribute 'get'" error message when applying per-room message retention policies. The bug was introduced in Synapse 1.7.0. (#7850)
Fix a bug introduced in Synapse 1.10.0 which could cause a "no create event in auth events" error during room creation. (#7854)
Fix a bug which allowed empty rooms to be rejoined over federation. (#7859)
Fix 'Unable to find a suitable guest user ID' error when using multiple client_reader workers. (#7866)
Fix a long standing bug where the tracing of async functions with opentracing was broken. (#7872, #7961)
Fix "TypeError in synapse.notifier" exceptions. (#7880)
Fix deprecation warning due to invalid escape sequences. (#7895)


Updates to the Docker image

Base docker image on Debian Buster rather than Alpine Linux. Contributed by @maquis196. (#7839)


Improved Documentation