CHANGES.md



To find the state of this project's repository at the time of any of these versions, check out the tags.


Synapse 1.21.0rc2 (2020-10-02)

Bugfixes

Fix a regression in v1.21.0rc1 which broke thumbnails of remote media. (#8438)
Do not expose the experimental uk.half-shot.msc2778.login.application_service flow in the login API. (#8440)
Fix malformed log line in new federation "catch up" logic. (#8442)
Convert additional templates from inline HTML to Jinja2 templates. (#8444)
Fix DB query on startup for negative streams which caused long start up times. Introduced in #8374. (#8447)


Synapse 1.21.0rc1 (2020-10-01)

Features

Require the user to confirm that their password should be reset after clicking the email confirmation link. (#8004)
Add an admin API GET /_synapse/admin/v1/event_reports to read entries of table event_reports. Contributed by @dklimpel. (#8217)
Consolidate the SSO error template across all configuration. (#8248, #8405)
Add a configuration option to specify a whitelist of domains that a user can be redirected to after validating their email or phone number. (#8275, #8417)
Add experimental support for sharding event persister. (#8294, #8387, #8396, #8419)
Add the room topic and avatar to the room details admin API. (#8305)
Add an admin API for querying rooms where a user is a member. Contributed by @dklimpel. (#8306)
Add uk.half-shot.msc2778.login.application_service login type to allow appservices to login. (#8320)
Add a configuration option that allows existing users to log in with OpenID Connect. Contributed by @BBBSnowball and @OmmyZhang. (#8345)
Add prometheus metrics for replication requests. (#8406)
Support passing additional single sign-on parameters to the client. (#8413)
Add experimental reporting of metrics on expensive rooms for state-resolution. (#8420)
Add experimental prometheus metric to track numbers of "large" rooms for state resolutiom. (#8425)
Add prometheus metrics to track federation delays. (#8430)


Bugfixes

Fix a bug in the media repository where remote thumbnails with the same size but different crop methods would overwrite each other. Contributed by @deepbluev7. (#7124)
Fix inconsistent handling of non-existent push rules, and stop tracking the enabled state of removed push rules. (#7796)
Fix a longstanding bug when storing a media file with an empty upload_name. (#7905)
Fix messages not being sent over federation until an event is sent into the same room. (#8230, #8247, #8258, #8272, #8322)
Fix a longstanding bug where files that could not be thumbnailed would result in an Internal Server Error. (#8236, #8435)
Upgrade minimum version of canonicaljson to version 1.4.0, to fix an unicode encoding issue. (#8262)
Fix longstanding bug which could lead to incomplete database upgrades on SQLite. (#8265)
Fix stack overflow when stderr is redirected to the logging system, and the logging system encounters an error. (#8268)
Fix a bug which cause the logging system to report errors, if DEBUG was enabled and no context filter was applied. (#8278)
Fix edge case where push could get delayed for a user until a later event was pushed. (#8287)
Fix fetching malformed events from remote servers. (#8324)
Fix UnboundLocalError from occuring when appservices send a malformed register request. (#8329)
Don't send push notifications to expired user accounts. (#8353)
Fix a regression in v1.19.0 with reactivating users through the admin API. (#8362)
Fix a bug where during device registration the length of the device name wasn't limited. (#8364)
Include guest_access in the fields that are checked for null bytes when updating room_stats_state. Broke in v1.7.2. (#8373)
Fix theoretical race condition where events are not sent down /sync if the synchrotron worker is restarted without restarting other workers. (#8374)
Fix a bug which could cause errors in rooms with malformed membership events, on servers using sqlite. (#8385)
Fix "Re-starting finished log context" warning when receiving an event we already had over federation. (#8398)
Fix incorrect handling of timeouts on outgoing HTTP requests. (#8400)
Fix a regression in v1.20.0 in the synapse_port_db script regarding the ui_auth_sessions_ips table. (#8410)
Remove unnecessary 3PID registration check when resetting password via an email address. Bug introduced in v0.34.0rc2. (#8414)


Improved Documentation

Add /_synapse/client to the reverse proxy documentation. (#8227)
Add note to the reverse proxy settings documentation about disabling Apache's mod_security2. Contributed by Julian Fietkau (@jfietkau). (#8375)
Improve description of server_name config option in homserver.yaml. (#8415)


Deprecations and Removals

Drop support for prometheus_client older than 0.4.0. (#8426)


Internal Changes

Fix tests on distros which disable TLSv1.0. Contributed by @danc86. (#8208)
Simplify the distributor code to avoid unnecessary work. (#8216)
Remove the populate_stats_process_rooms_2 background job and restore functionality to populate_stats_process_rooms. (#8243)
Clean up type hints for PaginationConfig. (#8250, #8282)
Track the latest event for every destination and room for catch-up after federation outage. (#8256)
Fix non-user visible bug in implementation of MultiWriterIdGenerator.get_current_token_for_writer. (#8257)
Switch to the JSON implementation from the standard library. (#8259)
Add type hints to synapse.util.async_helpers. (#8260)
Simplify tests that mock asynchronous functions. (#8261)
Add type hints to StreamToken and RoomStreamToken classes. (#8279)
Change StreamToken.room_key to be a RoomStreamToken instance. (#8281)
Refactor notifier code to correctly use the max event stream position. (#8288)
Use slotted classes where possible. (#8296)
Support testing the local Synapse checkout against the Complement homeserver test suite. (#8317)
Update outdated usages of metaclass to python 3 syntax. (#8326)
Move lint-related dependencies to package-extra field, update CONTRIBUTING.md to utilise this. (#8330, #8377)
Use the admin_patterns helper in additional locations. (#8331)
Fix test logging to allow braces in log output. (#8335)
Remove __future__ imports related to Python 2 compatibility. (#8337)
Simplify super() calls to Python 3 syntax. (#8344)
Fix bad merge from release-v1.20.0 branch to develop. (#8354)
Factor out a _send_dummy_event_for_room method. (#8370)
Improve logging of state resolution. (#8371)
Add type annotations to SimpleHttpClient. (#8372)
Refactor ID generators to use async with syntax. (#8383)
Add EventStreamPosition type. (#8388)
Create a mechanism for marking tests "logcontext clean". (#8399)
A pair of tiny cleanups in the federation request code. (#8401)
Add checks on startup that PostgreSQL sequences are consistent with their associated tables. (#8402)
Do not include appservice users when calculating the total MAU for a server. (#8404)
Typing fixes for synapse.handlers.federation. (#8422)
Various refactors to simplify stream token handling. (#8423)
Make stream token serializing/deserializing async. (#8427)


Synapse 1.20.1 (2020-09-24)

Bugfixes

Fix a bug introduced in v1.20.0 which caused the synapse_port_db script to fail. (#8386)
Fix a bug introduced in v1.20.0 which caused variables to be incorrectly escaped in Jinja2 templates. (#8394)


Synapse 1.20.0 (2020-09-22)
No significant changes since v1.20.0rc5.

Removal warning
Historically, the Synapse Admin
API has been
accessible under the /_matrix/client/api/v1/admin,
/_matrix/client/unstable/admin, /_matrix/client/r0/admin and
/_synapse/admin prefixes. In a future release, we will be dropping support
for accessing Synapse's Admin API using the /_matrix/client/* prefixes. This
makes it easier for homeserver admins to lock down external access to the Admin
API endpoints.

Synapse 1.20.0rc5 (2020-09-18)
In addition to the below, Synapse 1.20.0rc5 also includes the bug fix that was included in 1.19.3.

Features

Add flags to the /versions endpoint for whether new rooms default to using E2EE. (#8343)


Bugfixes

Fix rate limiting of federation /send requests. (#8342)
Fix a longstanding bug where back pagination over federation could get stuck if it failed to handle a received event. (#8349)


Internal Changes

Blacklist MSC2753 SyTests until it is implemented. (#8285)


Synapse 1.19.3 (2020-09-18)

Bugfixes

Partially mitigate bug where newly joined servers couldn't get past events in a room when there is a malformed event. (#8350)


Synapse 1.20.0rc4 (2020-09-16)
Synapse 1.20.0rc4 is identical to 1.20.0rc3, with the addition of the security fix that was included in 1.19.2.

Synapse 1.19.2 (2020-09-16)
Due to the issue below server admins are encouraged to upgrade as soon as possible.

Bugfixes

Fix joining rooms over federation that include malformed events. (#8324)


Synapse 1.20.0rc3 (2020-09-11)

Bugfixes

Fix a bug introduced in v1.20.0rc1 where the wrong exception was raised when invalid JSON data is encountered. (#8291)


Synapse 1.20.0rc2 (2020-09-09)

Bugfixes

Fix a bug introduced in v1.20.0rc1 causing some features related to notifications to misbehave following the implementation of unread counts. (#8280)


Synapse 1.20.0rc1 (2020-09-08)

Removal warning
Some older clients used a disallowed character (:) in the client_secret parameter of various endpoints. The incorrect behaviour was allowed for backwards compatibility, but is now being removed from Synapse as most users have updated their client. Further context can be found at #6766.

Features

Add an endpoint to query your shared rooms with another user as an implementation of MSC2666. (#7785)
Iteratively encode JSON to avoid blocking the reactor. (#8013, #8116)
Add support for shadow-banning users (ignoring any message send requests). (#8034, #8092, #8095, #8142, #8152, #8157, #8158, #8176)
Use the default template file when its equivalent is not found in a custom template directory. (#8037, #8107, #8252)
Add unread messages count to sync responses, as specified in MSC2654. (#8059, #8254, #8270, #8274)
Optimise /federation/v1/user/devices/ API by only returning devices with encryption keys. (#8198)


Bugfixes

Fix a memory leak by limiting the length of time that messages will be queued for a remote server that has been unreachable. (#7864)
Fix Re-starting finished log context PUT-nnnn warning when event persistence failed. (#8081)
Synapse now correctly enforces the valid characters in the client_secret parameter used in various endpoints. (#8101)
Fix a bug introduced in v1.7.2 impacting message retention policies that would allow federated homeservers to dictate a retention period that's lower than the configured minimum allowed duration in the configuration file. (#8104)
Fix a long-standing bug where invalid JSON would be accepted by Synapse. (#8106)
Fix a bug introduced in Synapse v1.12.0 which could cause /sync requests to fail with a 404 if you had a very old outstanding room invite. (#8110)
Return a proper error code when the rooms of an invalid group are requested. (#8129)
Fix a bug which could cause a leaked postgres connection if synapse was set to daemonize. (#8131)
Clarify the error code if a user tries to register with a numeric ID. This bug was introduced in v1.15.0. (#8135)
Fix a bug where appservices with ratelimiting disabled would still be ratelimited when joining rooms. This bug was introduced in v1.19.0. (#8139)
Fix logging in via OpenID Connect with a provider that uses integer user IDs. (#8190)
Fix a longstanding bug where user directory updates could break when unexpected profile data was included in events. (#8223)
Fix a longstanding bug where stats updates could break when unexpected profile data was included in events. (#8226)
Fix slow start times for large servers by removing a table scan of the users table from startup code. (#8271)


Updates to the Docker image

Fix builds of the Docker image on non-x86 platforms. (#8144)
Added curl for healthcheck support and readme updates for the change. Contributed by @maquis196. (#8147)


Improved Documentation

Link to matrix-synapse-rest-password-provider in the password provider documentation. (#8111)
Updated documentation to note that Synapse does not follow HTTP 308 redirects due to an upstream library not supporting them. Contributed by Ryan Cole. (#8120)
Explain better what GDPR-erased means when deactivating a user. (#8189)


Internal Changes

Add filter name to the /users admin API, which filters by user ID or displayname. Contributed by Awesome Technologies Innovationslabor GmbH. (#7377, #8163)
Reduce run times of some unit tests by advancing the reactor a fewer number of times. (#7757)
Don't fail /submit_token requests on incorrect session ID if request_token_inhibit_3pid_errors is turned on. (#7991)
Convert various parts of the codebase to async/await. (#8071, #8072, #8074, #8075, #8076, #8087, #8100, #8119, #8121, #8133, #8156, #8162, #8166, #8168, #8173, #8191, #8192, #8193, #8194, #8195, #8197, #8199, #8200, #8201, #8202, #8207, #8213, #8214)
Remove some unused database functions. (#8085)
Add type hints to various parts of the codebase. (#8090, #8127, #8187, #8241, #8140, #8183, #8232, #8235, #8237, #8244)
Return the previous stream token if a non-member event is a duplicate. (#8093, #8112)
Separate get_current_token into two since there are two different use cases for it. (#8113)
Remove ChainedIdGenerator. (#8123)
Reduce the amount of whitespace in JSON stored and sent in responses. (#8124)
Update the test federation client to handle streaming responses. (#8130)
Micro-optimisations to get_auth_chain_ids. (#8132)
Refactor StreamIdGenerator and MultiWriterIdGenerator to have the same interface. (#8161)
Add functions to MultiWriterIdGen used by events stream. (#8164, #8179)
Fix tests that were broken due to the merge of 1.19.1. (#8167)
Make SlavedIdTracker.advance have the same interface as MultiWriterIDGenerator. (#8171)
Remove unused is_guest parameter from, and add safeguard to, MessageHandler.get_room_data. (#8174, #8181)
Standardize the mypy configuration. (#8175)
Refactor some of LoginRestServlet's helper methods, and move them to AuthHandler for easier reuse. (#8182)
Fix wait_for_stream_position to allow multiple waiters on same stream ID. (#8196)
Make MultiWriterIDGenerator work for streams that use negative values. (#8203)
Refactor queries for device keys and cross-signatures. (#8204, #8205, #8222, #8224, #8225, #8231, #8233, #8234)
Fix type hints for functions decorated with @cached. (#8240)
Remove obsolete order field from federation send queues. (#8245)
Stop sub-classing from object. (#8249)
Add more logging to debug slow startup. (#8264)
Do not attempt to upgrade database schema on worker processes. (#8266, #8276)


Synapse 1.19.1 (2020-08-27)
No significant changes.

Synapse 1.19.1rc1 (2020-08-25)

Bugfixes

Fix a bug introduced in v1.19.0 where appservices with ratelimiting disabled would still be ratelimited when joining rooms. (#8139)
Fix a bug introduced in v1.19.0 that would cause e.g. profile updates to fail due to incorrect application of rate limits on join requests. (#8153)


Synapse 1.19.0 (2020-08-17)
No significant changes since 1.19.0rc1.

Removal warning
As outlined in the previous release, we are no longer publishing Docker images with the -py3 tag suffix. On top of that, we have also removed the latest-py3 tag. Please see the announcement in the upgrade notes for 1.18.0.

Synapse 1.19.0rc1 (2020-08-13)

Features

Add option to allow server admins to join rooms which fail complexity checks. Contributed by @lugino-emeritus. (#7902)
Add an option to purge room or not with delete room admin endpoint (POST /_synapse/admin/v1/rooms/<room_id>/delete). Contributed by @dklimpel. (#7964)
Add rate limiting to users joining rooms. (#8008)
Add a /health endpoint to every configured HTTP listener that can be used as a health check endpoint by load balancers. (#8048)
Allow login to be blocked based on the values of SAML attributes. (#8052)
Allow guest access to the GET /_matrix/client/r0/rooms/{room_id}/members endpoint, according to MSC2689. Contributed by Awesome Technologies Innovationslabor GmbH. (#7314)


Bugfixes

Fix a bug introduced in Synapse v1.7.2 which caused inaccurate membership counts in the room directory. (#7977)
Fix a long standing bug: 'Duplicate key value violates unique constraint "event_relations_id"' when message retention is configured. (#7978)
Fix "no create event in auth events" when trying to reject invitation after inviter leaves. Bug introduced in Synapse v1.10.0. (#7980)
Fix various comments and minor discrepencies in server notices code. (#7996)
Fix a long standing bug where HTTP HEAD requests resulted in a 400 error. (#7999)
Fix a long-standing bug which caused two copies of some log lines to be written when synctl was used along with a MemoryHandler logger. (#8011, #8012)


Updates to the Docker image

We no longer publish Docker images with the -py3 tag suffix, as announced in the upgrade notes. (#8056)


Improved Documentation

Document how to set up a client .well-known file and fix several pieces of outdated documentation. (#7899)
Improve workers docs. (#7990, #8000)
Fix typo in docs/workers.md. (#7992)
Add documentation for how to undo a room shutdown. (#7998, #8010)


Internal Changes

Reduce the amount of whitespace in JSON stored and sent in responses. Contributed by David Vo. (#7372)
Switch to the JSON implementation from the standard library and bump the minimum version of the canonicaljson library to 1.2.0. (#7936, #7979)
Convert various parts of the codebase to async/await. (#7947, #7948, #7949, #7951, #7963, #7973, #7975, #7976, #7981, #7987, #7989, #8003, #8014, #8016, #8027, #8031, #8032, #8035, #8042, #8044, #8045, #8061, #8062, #8063, #8066, #8069, #8070)
Move some database-related log lines from the default logger to the database/transaction loggers. (#7952)
Add a script to detect source code files using non-unix line terminators. (#7965, #7970)
Log the SAML session ID during creation. (#7971)
Implement new experimental push rules for some users. (#7997)
Remove redundant and unreliable signature check for v1 Identity Service lookup responses. (#8001)
Improve the performance of the register endpoint. (#8009)
Reduce less useful output in the newsfragment CI step. Add a link to the changelog section of the contributing guide on error. (#8024)
Rename storage layer objects to be more sensible. (#8033)
Change the default log config to reduce disk I/O and storage for new servers. (#8040)
Add an assertion on prev_events in create_new_client_event. (#8041)
Add a comment to ServerContextFactory about the use of SSLv23_METHOD. (#8043)
Log OPTIONS requests at DEBUG rather than INFO level to reduce amount logged at INFO. (#8049)
Reduce amount of outbound request logging at INFO level. (#8050)
It is no longer necessary to explicitly define filters in the logging configuration. (Continuing to do so is redundant but harmless.) (#8051)
Add and improve type hints. (#8058, #8064, #8060, #8067)


Synapse 1.18.0 (2020-07-30)

Deprecation Warnings

Docker Tags with -py3 Suffix
From 10th August 2020, we will no longer publish Docker images with the -py3 tag suffix. The images tagged with the -py3 suffix have been identical to the non-suffixed tags since release 0.99.0, and the suffix is obsolete.
On 10th August, we will remove the latest-py3 tag. Existing per-release tags (such as v1.18.0-py3) will not be removed, but no new -py3 tags will be added.
Scripts relying on the -py3 suffix will need to be updated.

TCP-based Replication
When setting up worker processes, we now recommend the use of a Redis server for replication. The old direct TCP connection method is deprecated and will be removed in a future release. See docs/workers.md for more details.

Improved Documentation

Update worker docs with latest enhancements. (#7969)


Synapse 1.18.0rc2 (2020-07-28)

Bugfixes

Fix an AssertionError exception introduced in v1.18.0rc1. (#7876)
Fix experimental support for moving typing off master when worker is restarted, which is broken in v1.18.0rc1. (#7967)


Internal Changes

Further optimise queueing of inbound replication commands. (#7876)


Synapse 1.18.0rc1 (2020-07-27)

Features

Include room states on invite events that are sent to application services. Contributed by @Sorunome. (#6455)
Add delete room admin endpoint (POST /_synapse/admin/v1/rooms/<room_id>/delete). Contributed by @dklimpel. (#7613, #7953)
Add experimental support for running multiple federation sender processes. (#7798)
Add the option to validate the iss and aud claims for JWT logins. (#7827)
Add support for handling registration requests across multiple client reader workers. (#7830)
Add an admin API to list the users in a room. Contributed by Awesome Technologies Innovationslabor GmbH. (#7842)
Allow email subjects to be customised through Synapse's configuration. (#7846)
Add the ability to re-activate an account from the admin API. (#7847, #7908)
Add experimental support for running multiple pusher workers. (#7855)
Add experimental support for moving typing off master. (#7869, #7959)
Report CPU metrics to prometheus for time spent processing replication commands. (#7879)
Support oEmbed for media previews. (#7920)
Abort federation requests where the client disconnects before the ratelimiter expires. (#7930)
Cache responses to /_matrix/federation/v1/state_ids to reduce duplicated work. (#7931)


Bugfixes

Fix detection of out of sync remote device lists when receiving events from remote users. (#7815)
Fix bug where Synapse fails to process an incoming event over federation if the server is missing too much of the event's auth chain. (#7817)
Fix a bug causing Synapse to misinterpret the value off for encryption_enabled_by_default_for_room_type in its configuration file(s) if that value isn't surrounded by quotes. This bug was introduced in v1.16.0. (#7822)
Fix bug where we did not always pass in app_name or server_name to email templates, including e.g. for registration emails. (#7829)
Errors which occur while using the non-standard JWT login now return the proper error: 403 Forbidden with an error code of M_FORBIDDEN. (#7844)
Fix "AttributeError: 'str' object has no attribute 'get'" error message when applying per-room message retention policies. The bug was introduced in Synapse 1.7.0. (#7850)
Fix a bug introduced in Synapse 1.10.0 which could cause a "no create event in auth events" error during room creation. (#7854)
Fix a bug which allowed empty rooms to be rejoined over federation. (#7859)
Fix 'Unable to find a suitable guest user ID' error when using multiple client_reader workers. (#7866)
Fix a long standing bug where the tracing of async functions with opentracing was broken. (#7872, #7961)
Fix "TypeError in synapse.notifier" exceptions. (#7880)
Fix deprecation warning due to invalid escape sequences. (#7895)


Updates to the Docker image

Base docker image on Debian Buster rather than Alpine Linux. Contributed by @maquis196. (#7839)


Improved Documentation

Provide instructions on using register_new_matrix_user via docker. (#7885)
Change the sample config postgres user section to use synapse_user instead of synapse to align with the documentation. (#7889)
Reorder database paragraphs to promote postgres over sqlite. (#7933)
Update the dates of ACME v1's end of life in ACME.md. (#7934)


Deprecations and Removals

Remove unused synapse_replication_tcp_resource_invalidate_cache prometheus metric. (#7878)
Remove Ubuntu Eoan from the list of .deb packages that we build as it is now end-of-life. Contributed by @gary-kim. (#7888)


Internal Changes

Switch parts of the codebase from simplejson to the standard library json. (#7802)
Add type hints to the http server code and remove an unused parameter. (#7813)
Add type hints to synapse.api.errors module. (#7820)
Ensure that calls to json.dumps are compatible with the standard library json. (#7836)
Remove redundant retry_on_integrity_error wrapper for event persistence code. (#7848)
Consistently use db_to_json to convert from database values to JSON objects. (#7849)
Convert various parts of the codebase to async/await. (#7851, #7860, #7868, #7871, #7873, #7874, #7884, #7912, #7935, #7939, #7942, #7944)
Add support for handling registration requests across multiple client reader workers. (#7853)
Small performance improvement in typing processing. (#7856)
The default value of filter_timeline_limit was changed from -1 (no limit) to 100. (#7858)
Optimise queueing of inbound replication commands. (#7861)
Add some type annotations to HomeServer and BaseHandler. (#7870)
Clean up PreserveLoggingContext. (#7877)
Change "unknown room version" logging from 'error' to 'warning'. (#7881)
Stop using device_max_stream_id table and just use device_inbox.stream_id. (#7882)
Return an empty body for OPTIONS requests. (#7886)
Fix typo in generated config file. Contributed by @ThiefMaster. (#7890)
Import ABC from collections.abc for Python 3.10 compatibility. (#7892)
Remove unused functions time_function, trace_function, get_previous_frames
and get_previous_frame from synapse.logging.utils module. (#7897)
Lint the contrib/ directory in CI and linting scripts, add synctl to the linting script for consistency with CI. (#7914)
Use Element CSS and logo in notification emails when app name is Element. (#7919)
Optimisation to /sync handling: skip serializing the response if the client has already disconnected. (#7927)
When a client disconnects, don't log it as 'Error processing request'. (#7928)
Add debugging to /sync response generation (disabled by default). (#7929)
Update comments that refer to Deferreds for async functions. (#7945)
Simplify error handling in federation handler. (#7950)


Synapse 1.17.0 (2020-07-13)
Synapse 1.17.0 is identical to 1.17.0rc1, with the addition of the fix that was included in 1.16.1.

Synapse 1.16.1 (2020-07-10)
In some distributions of Synapse 1.16.0, we incorrectly included a database migration which added a new, unused table. This release removes the redundant table.

Bugfixes

Drop table local_rejections_stream which was incorrectly added in Synapse 1.16.0. (#7816, b1beb3ff5)


Synapse 1.17.0rc1 (2020-07-09)

Bugfixes

Fix inconsistent handling of upper and lower case in email addresses when used as identifiers for login, etc. Contributed by @dklimpel. (#7021)
Fix "Tried to close a non-active scope!" error messages when opentracing is enabled. (#7732)
Fix incorrect error message when database CTYPE was set incorrectly. (#7760)
Fix to not ignore set_tweak actions in Push Rules that have no value, as permitted by the specification. (#7766)
Fix synctl to handle empty config files correctly. Contributed by @kotovalexarian. (#7779)
Fixes a long standing bug in worker mode where worker information was saved in the devices table instead of the original IP address and user agent. (#7797)
Fix 'stuck invites' which happen when we are unable to reject a room invite received over federation. (#7804, #7809, #7810)


Updates to the Docker image

Include libwebp in the Docker file to properly handle webp image uploads. (#7791)


Improved Documentation

Improve the documentation of the non-standard JSON web token login type. (#7776)
Update doc links for caddy. Contributed by Nicolai Søborg. (#7789)


Internal Changes

Refactor getting replication updates from database. (#7740)
Send push notifications with a high or low priority depending upon whether they may generate user-observable effects. (#7765)
Use symbolic names for replication stream names. (#7768)
Add early returns to _check_for_soft_fail. (#7769)
Fix up synapse.handlers.federation to pass mypy. (#7770)
Convert the appserver handler to async/await. (#7775)
Allow to use higher versions of prometheus_client <0.9.0 which are expected to introduce no breaking changes. Contributed by Oliver Kurz. (#7780)
Update linting scripts and codebase to be compatible with isort v5. (#7786)
Stop populating unused table local_invites. (#7793)
Ensure that strings (not bytes) are passed into JSON serialization. (#7799)
Switch from simplejson to the standard library json. (#7800)
Add signing_key property to HomeServer to save code duplication. (#7805)
Improve stacktraces from exceptions in background processes. (#7808)
Fix various spelling errors in comments and log lines. (#7811)


Synapse 1.16.0 (2020-07-08)
No significant changes since 1.16.0rc2.
Note that this release deprecates the m.login.jwt login method, renaming it
to org.matrix.login.jwt, as m.login.jwt is not part of the Matrix spec.
Otherwise the behaviour is identical. Synapse will accept both names for now,
but this may change in a future release.

Synapse 1.16.0rc2 (2020-07-02)
Synapse 1.16.0rc2 includes the security fixes released with Synapse 1.15.2.
Please see below for more details.

Improved Documentation

Update postgres image in example docker-compose.yaml to tag 12-alpine. (#7696)


Internal Changes

Add some metrics for inbound and outbound federation latencies: synapse_federation_server_pdu_process_time and synapse_event_processing_lag_by_event. (#7771)


Synapse 1.15.2 (2020-07-02)
Due to the two security issues highlighted below, server administrators are
encouraged to update Synapse. We are not aware of these vulnerabilities being
exploited in the wild.

Security advisory


A malicious homeserver could force Synapse to reset the state in a room to a
small subset of the correct state. This affects all Synapse deployments which
federate with untrusted servers. (96e9afe6)


HTML pages served via Synapse were vulnerable to clickjacking attacks. This
predominantly affects homeservers with single-sign-on enabled, but all server
administrators are encouraged to upgrade. (ea26e9a9)
This was reported by Quentin Gliech.


Synapse 1.16.0rc1 (2020-07-01)

Features

Add an option to enable encryption by default for new rooms. (#7639)
Add support for running multiple media repository workers. See docs/workers.md for instructions. (#7706)
Media can now be marked as safe from quarantined. (#7718)
Expand the configuration options for auto-join rooms. (#7763)


Bugfixes

Remove user_id from the response to GET /_matrix/client/r0/presence/{userId}/status to match the specification. (#7606)
In worker mode, ensure that replicated data has not already been received. (#7648)
Fix intermittent exception during startup, introduced in Synapse 1.14.0. (#7663)
Include a user-agent for federation and well-known requests. (#7677)
Accept the proper field (phone) for the m.id.phone identifier type. The legacy field of number is still accepted as a fallback. Bug introduced in v0.20.0. (#7687)
Fix "Starting db txn 'get_completed_ui_auth_stages' from sentinel context" warning. The bug was introduced in 1.13.0. (#7688)
Compare the URI and method during user interactive authentication (instead of the URI twice). Bug introduced in 1.13.0. (#7689)
Fix a long standing bug where the response to the GET room_keys/version endpoint had the incorrect type for the etag field. (#7691)
Fix logged error during device resync in opentracing. Broke in v1.14.0. (#7698)
Do not break push rule evaluation when receiving an event with a non-string body. This is a long-standing bug. (#7701)
Fixs a long standing bug which resulted in an exception: "TypeError: argument of type 'ObservableDeferred' is not iterable". (#7708)
The synapse_port_db script no longer fails when the ui_auth_sessions table is non-empty. This bug has existed since v1.13.0. (#7711)
Synapse will now fetch media from the proper specified URL (using the r0 prefix instead of the unspecified v1). (#7714)
Fix the tables ignored by synapse_port_db to be in sync the current database schema. (#7717)
Fix missing Content-Length on HTTP responses from the metrics handler. (#7730)
Fix large state resolutions from stalling Synapse for seconds at a time. (#7735, #7746)


Improved Documentation

Spelling correction in sample_config.yaml. (#7652)
Added instructions for how to use Keycloak via OpenID Connect to authenticate with Synapse. (#7659)
Corrected misspelling of PostgreSQL. (#7724)


Deprecations and Removals

Deprecate m.login.jwt login method in favour of org.matrix.login.jwt, as m.login.jwt is not part of the Matrix spec. (#7675)


Internal Changes

Refactor getting replication updates from database. (#7636)
Clean-up the login fallback code. (#7657)
Increase the default SAML session expiry time to 15 minutes. (#7664)
Convert the device message and pagination handlers to async/await. (#7678)
Convert typing handler to async/await. (#7679)
Require parameterized package version to be at least 0.7.0. (#7680)
Refactor handling of listeners configuration settings. (#7681)
Replace uses of six.iterkeys/iteritems/itervalues with keys()/items()/values(). (#7692)
Add support for using rust-python-jaeger-reporter library to reduce jaeger tracing overhead. (#7697)
Make Tox actions work on Debian 10. (#7703)
Replace all remaining uses of six with native Python 3 equivalents. Contributed by @ilmari. (#7704)
Fix broken link in sample config. (#7712)
Speed up state res v2 across large state differences. (#7725)
Convert directory handler to async/await. (#7727)
Move flake8 to the end of scripts-dev/lint.sh as it takes the longest and could cause the script to exit early. (#7738)
Explain the "test" conditional requirement for dependencies is not all of the modules necessary to run the unit tests. (#7751)
Add some metrics for inbound and outbound federation latencies: synapse_federation_server_pdu_process_time and synapse_event_processing_lag_by_event. (#7755)


Synapse 1.15.1 (2020-06-16)

Bugfixes

Fix a bug introduced in v1.15.0 that would crash Synapse on start when using certain password auth providers. (#7684)
Fix a bug introduced in v1.15.0 which meant that some 3PID management endpoints were not accessible on the correct URL. (#7685)


Synapse 1.15.0 (2020-06-11)
No significant changes.

Synapse 1.15.0rc1 (2020-06-09)

Features

Advertise support for Client-Server API r0.6.0 and remove related unstable feature flags. (#6585)
Add an option to disable autojoining rooms for guest accounts. (#6637)
For SAML authentication, add the ability to pass email addresses to be added to new users' accounts via SAML attributes. Contributed by Christopher Cooper. (#7385)
Add admin APIs to allow server admins to manage users' devices. Contributed by @dklimpel. (#7481)
Add support for generating thumbnails for WebP images. Previously, users would see an empty box instead of preview image. Contributed by @WGH-. (#7586)
Support the standardized m.login.sso user-interactive authentication flow. (#7630)


Bugfixes

Allow new users to be registered via the admin API even if the monthly active user limit has been reached. Contributed by @dklimpel. (#7263)
Fix email notifications not being enabled for new users when created via the Admin API. (#7267)
Fix str placeholders in an instance of PrepareDatabaseException. Introduced in Synapse v1.8.0. (#7575)
Fix a bug in automatic user creation during first time login with m.login.jwt. Regression in v1.6.0. Contributed by @olof. (#7585)
Fix a bug causing the cross-signing keys to be ignored when resyncing a device list. (#7594)
Fix metrics failing when there is a large number of active background processes. (#7597)
Fix bug where returning rooms for a group would fail if it included a room that the server was not in. (#7599)
Fix duplicate key violation when persisting read markers. (#7607)
Prevent an entire iteration of the device list resync loop from failing if one server responds with a malformed result. (#7609)
Fix exceptions when fetching events from a remote host fails. (#7622)
Make synctl restart start synapse if it wasn't running. (#7624)
Pass device information through to the login endpoint when using the login fallback. (#7629)
Advertise the m.login.token login flow when OpenID Connect is enabled. (#7631)
Fix bug in account data replication stream. (#7656)


Improved Documentation

Update the OpenBSD installation instructions. (#7587)
Advertise Python 3.8 support in setup.py. (#7602)
Add a link to #synapse:matrix.org in the troubleshooting section of the README. (#7603)
Clarifications to the admin api documentation. (#7647)


Internal Changes

Convert the identity handler to async/await. (#7561)
Improve query performance for fetching state from a PostgreSQL database. Contributed by @ilmari. (#7567)
Speed up processing of federation stream RDATA rows. (#7584)
Add comment to systemd example to show postgresql dependency. (#7591)
Refactor Ratelimiter to limit the amount of expensive config value accesses. (#7595)
Convert groups handlers to async/await. (#7600)
Clean up exception handling in SAML2ResponseResource. (#7614)
Check that all asynchronous tasks succeed and general cleanup of MonthlyActiveUsersTestCase and TestMauLimit. (#7619)
Convert get_user_id_by_threepid to async/await. (#7620)
Switch to upstream dh-virtualenv rather than our fork for Debian package builds. (#7621)
Update CI scripts to check the number in the newsfile fragment. (#7623)
Check if the localpart of a Matrix ID is reserved for guest users earlier in the registration flow, as well as when responding to requests to /register/available. (#7625)
Minor cleanups to OpenID Connect integration. (#7628)
Attempt to fix flaky test: PhoneHomeStatsTestCase.test_performance_100. (#7634)
Fix typos of m.olm.curve25519-aes-sha2 and m.megolm.v1.aes-sha2 in comments, test files. (#7637)
Convert user directory, state deltas, and stats handlers to async/await. (#7640)
Remove some unused constants. (#7644)
Fix type information on assert_*_is_admin methods. (#7645)
Convert registration handler to async/await. (#7649)


Synapse 1.14.0 (2020-05-28)
No significant changes.

Synapse 1.14.0rc2 (2020-05-27)

Bugfixes

Fix cache config to not apply cache factor to event cache. Regression in v1.14.0rc1. (#7578)
Fix bug where ReplicationStreamer was not always started when replication was enabled. Bug introduced in v1.14.0rc1. (#7579)
Fix specifying individual cache factors for caches with special characters in their name. Regression in v1.14.0rc1. (#7580)


Improved Documentation

Fix the OIDC client_auth_method value in the sample config. (#7581)


Synapse 1.14.0rc1 (2020-05-26)

Features

Synapse's cache factor can now be configured in homeserver.yaml by the caches.global_factor setting. Additionally, caches.per_cache_factors controls the cache factors for individual caches. (#6391)
Add OpenID Connect login/registration support. Contributed by Quentin Gliech, on behalf of les Connecteurs. (#7256, #7457)
Add room details admin endpoint. Contributed by Awesome Technologies Innovationslabor GmbH. (#7317)
Allow for using more than one spam checker module at once. (#7435)
Add additional authentication checks for m.room.power_levels event per MSC2209. (#7502)
Implement room version 6 per MSC2240. (#7506)
Add highly experimental option to move event persistence off master. (#7281, #7374, #7436, #7440, #7475, #7490, #7491, #7492, #7493, #7495, #7515, #7516, #7517, #7542)


Bugfixes

Fix a bug where event updates might not be sent over replication to worker processes after the stream falls behind. (#7384)
Allow expired user accounts to log out their device sessions. (#7443)
Fix a bug that would cause Synapse not to resync out-of-sync device lists. (#7453)
Prevent rooms with 0 members or with invalid version strings from breaking group queries. (#7465)
Workaround for an upstream Twisted bug that caused Synapse to become unresponsive after startup. (#7473)
Fix Redis reconnection logic that can result in missed updates over replication if master reconnects to Redis without restarting. (#7482)
When sending m.room.member events, omit displayname and avatar_url if they aren't set instead of setting them to null. Contributed by Aaron Raimist. (#7497)
Fix incorrect method label on synapse_http_matrixfederationclient_{requests,responses} prometheus metrics. (#7503)
Ignore incoming presence events from other homeservers if presence is disabled locally. (#7508)
Fix a long-standing bug that broke the update remote profile background process. (#7511)
Hash passwords as early as possible during password reset. (#7538)
Fix bug where a local user leaving a room could fail under rare circumstances. (#7548)
Fix "Missing RelayState parameter" error when using user interactive authentication with SAML for some SAML providers. (#7552)
Fix exception 'GenericWorkerReplicationHandler' object has no attribute 'send_federation_ack', introduced in v1.13.0. (#7564)

synctl now warns if it was unable to stop Synapse and will not attempt to start Synapse if nothing was stopped. Contributed by Romain Bouyé. (#6598)


Updates to the Docker image

Update docker runtime image to Alpine v3.11. Contributed by @Starbix. (#7398)


Improved Documentation

Update information about mapping providers for SAML and OpenID. (#7458)
Add additional reverse proxy example for Caddy v2. Contributed by Jeff Peeler. (#7463)
Fix copy-paste error in ServerNoticesConfig docstring. Contributed by @ptman. (#7477)
Improve the formatting of reverse_proxy.md. (#7514)
Change the systemd worker service to check that the worker config file exists instead of silently failing. Contributed by David Vo. (#7528)
Minor clarifications to the TURN docs. (#7533)


Internal Changes

Add typing annotations in synapse.federation. (#7382)
Convert the room handler to async/await. (#7396)
Improve performance of get_e2e_cross_signing_key. (#7428)
Improve performance of mark_as_sent_devices_by_remote. (#7429, #7562)
Add type hints to the SAML handler. (#7445)
Remove storage method get_hosts_in_room that is no longer called anywhere. (#7448)
Fix some typos in the notice_expiry templates. (#7449)
Convert the federation handler to async/await. (#7459)
Convert the search handler to async/await. (#7460)
Add type hints to synapse.event_auth. (#7505)
Convert the room member handler to async/await. (#7507)
Add type hints to room member handler. (#7513)
Fix typing annotations in tests.replication. (#7518)
Remove some redundant Python 2 support code. (#7519)
All endpoints now respond with a 200 OK for OPTIONS requests. (#7534, #7560)
Synapse now exports detailed allocator statistics and basic GC timings as Prometheus metrics (pypy_gc_time_seconds_total and pypy_memory_bytes) when run under PyPy. Contributed by Ivan Shapovalov. (#7536)
Remove Ubuntu Cosmic and Disco from the list of distributions which we provide .debs for, due to end-of-life. (#7539)
Make worker processes return a stubbed-out response to GET /presence requests. (#7545)
Optimise some references to hs.config. (#7546)
On upgrade room only send canonical alias once. (#7547)
Fix some indentation inconsistencies in the sample config. (#7550)
Include synapse.http.site in type checking. (#7553)
Fix some test code to not mangle stacktraces, to make it easier to debug errors. (#7554)
Refresh apt cache when building dh_virtualenv docker image. (#7555)
Stop logging some expected HTTP request errors as exceptions. (#7556, #7563)
Convert sending mail to async/await. (#7557)
Simplify reap_monthly_active_users. (#7558)


Synapse 1.13.0 (2020-05-19)
This release brings some potential changes necessary for certain
configurations of Synapse:

If your Synapse is configured to use SSO and have a custom
sso_redirect_confirm_template_dir configuration option set, you will need
to duplicate the new sso_auth_confirm.html, sso_auth_success.html and
sso_account_deactivated.html templates into that directory.
Synapse plugins using the complete_sso_login method of
synapse.module_api.ModuleApi should instead switch to the async/await
version, complete_sso_login_async, which includes additional checks. The
former version is now deprecated.
A bug was introduced in Synapse 1.4.0 which could cause the room directory
to be incomplete or empty if Synapse was upgraded directly from v1.2.1 or
earlier, to versions between v1.4.0 and v1.12.x.

Please review UPGRADE.rst for more details on these changes
and for general upgrade guidance.

Notice of change to the default git branch for Synapse
With the release of Synapse 1.13.0, the default git branch for Synapse has
changed to develop, which is the development tip. This is more consistent with
common practice and modern git usage.
The master branch, which tracks the latest release, is still available. It is
recommended that developers and distributors who have scripts which run builds
using the default branch of Synapse should therefore consider pinning their
scripts to master.

Internal Changes

Update the version of dh-virtualenv we use to build debs, and add focal to the list of target distributions. (#7526)


Synapse 1.13.0rc3 (2020-05-18)

Bugfixes

Hash passwords as early as possible during registration. (#7523)


Synapse 1.13.0rc2 (2020-05-14)

Bugfixes

Fix a long-standing bug which could cause messages not to be sent over federation, when state events with state keys matching user IDs (such as custom user statuses) were received. (#7376)
Restore compatibility with non-compliant clients during the user interactive authentication process, fixing a problem introduced in v1.13.0rc1. (#7483)


Internal Changes

Fix linting errors in new version of Flake8. (#7470)


Synapse 1.13.0rc1 (2020-05-11)

Features

Extend the web_client_location option to accept an absolute URL to use as a redirect. Adds a warning when running the web client on the same hostname as homeserver. Contributed by Martin Milata. (#7006)
Set Referrer-Policy header to no-referrer on media downloads. (#7009)
Add support for running replication over Redis when using workers. (#7040, #7325, #7352, #7401, #7427, #7439, #7446, #7450, #7454)
Admin API POST /_synapse/admin/v1/join/<roomIdOrAlias> to join users to a room like auto_join_rooms for creation of users. (#7051)
Add options to prevent users from changing their profile or associated 3PIDs. (#7096)
Support SSO in the user interactive authentication workflow. (#7102, #7186, #7279, #7343)
Allow server admins to define and enforce a password policy (MSC2000). (#7118)
Improve the support for SSO authentication on the login fallback page. (#7152, #7235)
Always whitelist the login fallback in the SSO configuration if public_baseurl is set. (#7153)
Admin users are no longer required to be in a room to create an alias for it. (#7191)
Require admin privileges to enable room encryption by default. This does not affect existing rooms. (#7230)
Add a config option for specifying the value of the Accept-Language HTTP header when generating URL previews. (#7265)
Allow /requestToken endpoints to hide the existence (or lack thereof) of 3PID associations on the homeserver. (#7315)
Add a configuration setting to tweak the threshold for dummy events. (#7422)


Bugfixes

Don't attempt to use an invalid sqlite config if no database configuration is provided. Contributed by @nekatak. (#6573)
Fix single-sign on with CAS systems: pass the same service URL when requesting the CAS ticket and when calling the proxyValidate URL. Contributed by @Naugrimm. (#6634)
Fix missing field default when fetching user-defined push rules. (#6639)
Improve error responses when accessing remote public room lists. (#6899, #7368)
Transfer alias mappings on room upgrade. (#6946)
Ensure that a user interactive authentication session is tied to a single request. (#7068, #7455)
Fix a bug in the federation API which could cause occasional "Failed to get PDU" errors. (#7089)
Return the proper error (M_BAD_ALIAS) when a non-existant canonical alias is provided. (#7109)
Fix a bug which meant that groups updates were not correctly replicated between workers. (#7117)
Fix starting workers when federation sending not split out. (#7133)
Ensure is_verified is a boolean in responses to GET /_matrix/client/r0/room_keys/keys. Also warn the user if they forgot the version query param. (#7150)
Fix error page being shown when a custom SAML handler attempted to redirect when processing an auth response. (#7151)
Avoid importing sqlite3 when using the postgres backend. Contributed by David Vo. (#7155)
Fix excessive CPU usage by prune_old_outbound_device_pokes job. (#7159)
Fix a bug which could cause outbound federation traffic to stop working if a client uploaded an incorrect e2e device signature. (#7177)
Fix a bug which could cause incorrect 'cyclic dependency' error. (#7178)
Fix a bug that could cause a user to be invited to a server notices (aka System Alerts) room without any notice being sent. (#7199)
Fix some worker-mode replication handling not being correctly recorded in CPU usage stats. (#7203)
Do not allow a deactivated user to login via SSO. (#7240, #7259)
Fix --help command-line argument. (#7249)
Fix room publish permissions not being checked on room creation. (#7260)
Reject unknown session IDs during user interactive authentication instead of silently creating a new session. (#7268)
Fix a SQL query introduced in Synapse 1.12.0 which could cause large amounts of logging to the postgres slow-query log. (#7274)
Persist user interactive authentication sessions across workers and Synapse restarts. (#7302)
Fixed backwards compatibility logic of the first value of trusted_third_party_id_servers being used for account_threepid_delegates.email, which occurs when the former, deprecated option is set and the latter is not. (#7316)
Fix a bug where event updates might not be sent over replication to worker processes after the stream falls behind. (#7337, #7358)
Fix bad error handling that would cause Synapse to crash if it's provided with a YAML configuration file that's either empty or doesn't parse into a key-value map. (#7341)
Fix incorrect metrics reporting for renew_attestations background task. (#7344)
Prevent non-federating rooms from appearing in responses to federated POST /publicRoom requests when a filter was included. (#7367)
Fix a bug which would cause the room durectory to be incorrectly populated if Synapse was upgraded directly from v1.2.1 or earlier to v1.4.0 or later. Note that this fix does not apply retrospectively; see the upgrade notes for more information. (#7387)
Fix bug in EventContext.deserialize. (#7393)


Improved Documentation

Update Debian installation instructions to recommend installing the virtualenv package instead of python3-virtualenv. (#6892)
Improve the documentation for database configuration. (#6988)
Improve the documentation of application service configuration files. (#7091)
Update pre-built package name for FreeBSD. (#7107)
Update postgres docs with login troubleshooting information. (#7119)
Clean up INSTALL.md a bit. (#7141)
Add documentation for running a local CAS server for testing. (#7147)
Improve README.md by being explicit about public IP recommendation for TURN relaying. (#7167)
Fix a small typo in the metrics_flags config option. (#7171)
Update the contributed documentation on managing synapse workers with systemd, and bring it into the core distribution. (#7234)
Add documentation to the password_providers config option. Add known password provider implementations to docs. (#7238, #7248)
Modify suggested nginx reverse proxy configuration to match Synapse's default file upload size. Contributed by @ProCycleDev. (#7251)
Documentation of media_storage_providers options updated to avoid misunderstandings. Contributed by Tristan Lins. (#7272)
Add documentation on monitoring workers with Prometheus. (#7357)
Clarify endpoint usage in the users admin api documentation. (#7361)


Deprecations and Removals

Remove nonfunctional captcha_bypass_secret option from homeserver.yaml. (#7137)


Internal Changes

Add benchmarks for LruCache. (#6446)
Return total number of users and profile attributes in admin users endpoint. Contributed by Awesome Technologies Innovationslabor GmbH. (#6881)
Change device list streams to have one row per ID. (#7010)
Remove concept of a non-limited stream. (#7011)
Move catchup of replication streams logic to worker. (#7024, #7195, #7226, #7239, #7286, #7290, #7318, #7326, #7378, #7421)
Convert some of synapse.rest.media to async/await. (#7110, #7184, #7241)
De-duplicate / remove unused REST code for login and auth. (#7115)
Convert *StreamRow classes to inner classes. (#7116)
Clean up some LoggingContext code. (#7120, #7181, #7183, #7408, #7426)
Add explicit instance_id for USER_SYNC commands and remove implicit conn_id usage. (#7128)
Refactored the CAS authentication logic to a separate class. (#7136)
Run replication streamers on workers. (#7146)
Add tests for outbound device pokes. (#7157)
Fix device list update stream ids going backward. (#7158)
Use stream.current_token() and remove stream_positions(). (#7172)
Move client command handling out of TCP protocol. (#7185)
Move server command handling out of TCP protocol. (#7187)
Fix consistency of HTTP status codes reported in log lines. (#7188)
Only run one background database update at a time. (#7190)
Remove sent outbound device list pokes from the database. (#7192)
Add a background database update job to clear out duplicate device_lists_outbound_pokes. (#7193)
Remove some extraneous debugging log lines. (#7207)
Add explicit Python build tooling as dependencies for the snapcraft build. (#7213)
Add typing information to federation server code. (#7219)
Extend room admin api (GET /_synapse/admin/v1/rooms) with additional attributes. (#7225)
Unblacklist '/upgrade creates a new room' sytest for workers. (#7228)
Remove redundant checks on daemonize from synctl. (#7233)
Upgrade jQuery to v3.4.1 on fallback login/registration pages. (#7236)
Change log line that told user to implement onLogin/onRegister fallback js functions to a warning, instead of an info, so it's more visible. (#7237)
Correct the parameters of a test fixture. Contributed by Isaiah Singletary. (#7243)
Convert auth handler to async/await. (#7261)
Add some unit tests for replication. (#7278)
Improve typing annotations in synapse.replication.tcp.streams.Stream. (#7291)
Reduce log verbosity of url cache cleanup tasks. (#7295)
Fix sample SAML Service Provider configuration. Contributed by @frcl. (#7300)
Fix StreamChangeCache to work with multiple entities changing on the same stream id. (#7303)
Fix an incorrect import in IdentityHandler. (#7319)
Reduce logging verbosity for successful federation requests. (#7321)
Convert some federation handler code to async/await. (#7338)
Fix collation for postgres for unit tests. (#7359)
Convert RegistrationWorkerStore.is_server_admin and dependent code to async/await. (#7363)
Add an instance_name to RDATA and POSITION replication commands. (#7364)
Thread through instance name to replication client. (#7369)
Convert synapse.server_notices to async/await. (#7394)
Convert synapse.notifier to async/await. (#7395)
Fix issues with the Python package manifest. (#7404)
Prevent methods in synapse.handlers.auth from polling the homeserver config every request. (#7420)
Speed up fetching device lists changes when handling /sync requests. (#7423)
Run group attestation renewal in series rather than parallel for performance. (#7442)


Synapse 1.12.4 (2020-04-23)
No significant changes.

Synapse 1.12.4rc1 (2020-04-22)

Features

Always send users their own device updates. (#7160)
Add support for handling GET requests for account_data on a worker. (#7311)


Bugfixes

Fix a bug that prevented cross-signing with users on worker-mode synapses. (#7255)
Do not treat display names as globs in push rules. (#7271)
Fix a bug with cross-signing devices belonging to remote users who did not share a room with any user on the local homeserver. (#7289)


Synapse 1.12.3 (2020-04-03)

Remove the the pin to Pillow 7.0 which was introduced in Synapse 1.12.2, and
correctly fix the issue with building the Debian packages. (#7212)


Synapse 1.12.2 (2020-04-02)
This release works around an issue with building the debian packages.
No other significant changes since 1.12.1.

Synapse 1.12.1 (2020-04-02)
No significant changes since 1.12.1rc1.

Synapse 1.12.1rc1 (2020-03-31)

Bugfixes