element-hq/matrix-authentication-service v1.18.0

on GitHub

Docker image

Regular image:

• Digest:

  ghcr.io/element-hq/matrix-authentication-service@sha256:fa0de1cd3d02e07ab65e9730c927ec65155245911c61ac97d564e490bfefe373
  oci.element.io/matrix-authentication-service@sha256:fa0de1cd3d02e07ab65e9730c927ec65155245911c61ac97d564e490bfefe373
  

• Tags:

  ghcr.io/element-hq/matrix-authentication-service:1.18.0
  ghcr.io/element-hq/matrix-authentication-service:1.18
  ghcr.io/element-hq/matrix-authentication-service:1
  ghcr.io/element-hq/matrix-authentication-service:sha-7b6c5af
  ghcr.io/element-hq/matrix-authentication-service:latest
  oci.element.io/matrix-authentication-service:1.18.0
  oci.element.io/matrix-authentication-service:1.18
  oci.element.io/matrix-authentication-service:1
  oci.element.io/matrix-authentication-service:sha-7b6c5af
  oci.element.io/matrix-authentication-service:latest
  

Debug variant:

• Digest:

  ghcr.io/element-hq/matrix-authentication-service@sha256:fcfd806cd9e319e676c9ad5ad543f42bfecea3065abb4a18f8fe4b0ffc6ff186
  oci.element.io/matrix-authentication-service@sha256:fcfd806cd9e319e676c9ad5ad543f42bfecea3065abb4a18f8fe4b0ffc6ff186
  

• Tags:

  ghcr.io/element-hq/matrix-authentication-service:1.18.0-debug
  ghcr.io/element-hq/matrix-authentication-service:1.18-debug
  ghcr.io/element-hq/matrix-authentication-service:1-debug
  ghcr.io/element-hq/matrix-authentication-service:sha-7b6c5af-debug
  ghcr.io/element-hq/matrix-authentication-service:latest-debug
  oci.element.io/matrix-authentication-service:1.18.0-debug
  oci.element.io/matrix-authentication-service:1.18-debug
  oci.element.io/matrix-authentication-service:1-debug
  oci.element.io/matrix-authentication-service:sha-7b6c5af-debug
  oci.element.io/matrix-authentication-service:latest-debug
  

What's Changed

New Features

• Disable the device code auto-filling by default and match the device authorization grant with the designs by @sandhose in #5704

Changes to the admin API

• Admin API - User - Add displayname and avatar url when adding user by @mcalinghee in #5671

Translations

• Translations updates for main by @matrixbot in #5705
• Translations updates for v1.18 by @matrixbot in #5723

Internal Changes

• Automatic merge back to main by @matrixbot in #5669
• Automatic merge back to main by @matrixbot in #5690
• Split multi-arch Docker build into parallel jobs by @sandhose in #5474

Other Changes

• Fix typo in manual: policy.path -> policy.wasm_module by @reivilibre in #5654
• Use translation text for "Cancel" button in reauth template by @MadLittleMods in #5666
• Add a bit more context for what bind address couldn't be parsed by @MadLittleMods in #5637
• Fix client linking to none on policy violation screen by @MadLittleMods in #5667
• Update policy violation screen when running into the session/device soft_limit in interactive contexts by @MadLittleMods in #5639
• Document how to manually test login flows by @MadLittleMods in #5642
• Harden the security of our GitHub Actions by @anoadragon453 in #5664
• Add oauth.device_code_grant_enabled configuration option by @hughns in #5612
• Fix TestState.reset() to retain mock homeserver in-memory state by @MadLittleMods in #5678
• Bump lettre to appease cargo-deny on RUSTSEC-2026-0141 by @sandhose in #5684
• Fix the transformation of the Docker build metadata in CI by @sandhose in #5683
• Increase dependabot interval from daily to monthly by @hughns in #5686
• Remove unused apalis dependabot config by @hughns in #5685
• Push MAS docker images to Element OCI Registry by @devonh in #5459
• Schedule SyncDevicesJob after dangerous_hard_limit_eviction so the homeserver stays up to date by @MadLittleMods in #5679
• Check whether policy evaluation result is valid() when we process_violations_for_compat_login(...) by @MadLittleMods in #5681
• Interactive compat m.login.sso test for session soft_limit by @MadLittleMods in #5675
• Show session/device limit errors on account page by @MadLittleMods in #5644
• Add max_session_threshold configuration (only apply session_limit to people under the threshold) by @MadLittleMods in #5670
• Fix compatibility typo in session_limit config by @MadLittleMods in #5692
• Switch to pnpm by @sandhose in #5674
• Bump most frontend dependencies by @sandhose in #5699
• Update Compound to the latest version by @sandhose in #5703
• Migrate to Tailwind v4 by @sandhose in #5702
• Enforce clippy::allow_attributes (prefer #[expect] over #[allow]) by @MadLittleMods in #5691
• Fix a few plurals in the English translations by @sandhose in #5715

Dependency Updates

• build(deps-dev): bump postcss from 8.5.8 to 8.5.12 in /frontend by @dependabot[bot] in #5658
• build(deps): bump actions/upload-pages-artifact from 4.0.0 to 5.0.0 by @dependabot[bot] in #5626
• build(deps): bump softprops/action-gh-release from 2.6.1 to 3.0.0 by @dependabot[bot] in #5627
• build(deps): bump peter-evans/create-pull-request from 8.1.0 to 8.1.1 by @dependabot[bot] in #5628
• build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by @dependabot[bot] in #5629
• Bump the tracing group across 1 directory with 2 updates by @dependabot[bot] in #5676

Full Changelog: v1.17.0...v1.18.0