Synapse 1.135.0 (2025-08-01)

No significant changes since 1.135.0rc2.

Synapse 1.135.0rc2 (2025-07-30)

Fix user failing to deactivate with MAS when /_synapse/mas is handled by a worker. (#18716)

Fix performance regression introduced in #18238 by adding a cache to is_server_admin. (#18747)

Add recaptcha_private_key_path and recaptcha_public_key_path config option. (#17984, #18684)
Add plain-text handling for rich-text topics as per MSC3765. (#18195)
If enabled by the user, server admins will see soft failed events over the Client-Server API. (#18238)
Add experimental support for MSC4277: Harmonizing the reporting endpoints. (#18263)
Add ability to limit amount of media uploaded by a user in a given time period. (#18527)
Enable workers to write directly to the device lists stream and handle device list updates, reducing load on the main process. (#18581)
Support arbitrary profile fields. Contributed by @clokep. (#18635)
Advertise support for Matrix v1.12. (#18647)
Add an option to issue redactions as an admin user via the admin redaction endpoint. (#18671)
Add experimental and incomplete support for MSC4306: Thread Subscriptions. (#18674)
Include event_id when getting state with ?format=event. Contributed by @tulir @ Beeper. (#18675)

Fix CPU and database spinning when retrying sending events to servers whilst at the same time purging those events. (#18499)
Don't allow creation of tags with names longer than 255 bytes, as per the spec. (#18660)
Fix sliding_sync_connections-related errors when porting from SQLite to Postgres. (#18677)
Fix the MAS integration not working when Synapse is started with --daemonize or using synctl. (#18691)

Document that some config options for the user directory are in violation of the Matrix spec. (#18548)
Update rc_delayed_event_mgmt docs to the actual nesting level. Contributed by @HarHarLinks. (#18692)

Add a dedicated internal API for Matrix Authentication Service to Synapse communication. (#18520)
Allow user registrations to be done on workers. (#18552)
Remove unnecessary HTTP replication calls. (#18564)
Refactor Measure block metrics to be homeserver-scoped. (#18601)
Refactor cache metrics to be homeserver-scoped. (#18604)
Unbreak "Latest dependencies" workflow by using the --without dev poetry option instead of removed --no-dev. (#18617)
Update URL Preview code to work with lxml 6.0.0+. (#18622)
Use markdown-it-py instead of commonmark in the release script. (#18637)
Fix typing errors with upgraded mypy version. (#18653)
Add doc comment explaining that config files are shallowly merged. (#18664)
Minor speed up of insertion into stream_positions table. (#18672)
Remove unused allow_no_prev_events option when creating an event. (#18676)
Clean up MetricsResource and Prometheus hacks. (#18687)
Fix dirty Cargo.lock changes appearing after install (base64). (#18689)
Prevent dirty Cargo.lock changes from install. (#18693)
Correct spelling of 'Admin token used' log line. (#18697)
Reduce log spam when client stops downloading media while it is being streamed to them. (#18699)