Synapse 1.137.0rc1 (2025-08-19)

Bugfixes

• Fix a bug which could corrupt auth chains making it impossible to perform state resolution. (#18746)
• Fix error message in register_new_matrix_user utility script for empty registration_shared_secret. (#18780)
• Allow enabling MSC4108 when the stable Matrix Authentication Service integration is enabled. (#18832)

Improved Documentation

• Include IPv6 networks in denied-peer-ips of coturn setup. Contributed by @litetex. (#18781)

Internal Changes

• Update tests to ensure all database tables are emptied when purging a room. (#18794)
• Instrument the encode_response part of Sliding Sync requests for more complete traces in Jaeger. (#18815)
• Tag Sliding Sync traces when we wait_for_events. (#18816)
• Fix portdb CI by hardcoding the new pg_dump restrict key that was added due to CVE-2025-8714. (#18824)

Updates to locked dependencies

• Bump actions/add-to-project from 5b1a254a3546aef88e0a7724a77a623fa2e47c36 to 0c37450c4be3b6a7582b2fb013c9ebfd9c8e9300. (#18557)
• Bump actions/cache from 4.2.3 to 4.2.4. (#18799)
• Bump actions/checkout from 4.2.2 to 4.3.0. (#18800)
• Bump actions/download-artifact from 4.3.0 to 5.0.0. (#18801)
• Bump docker/metadata-action from 5.7.0 to 5.8.0. (#18773)
• Bump mypy from 1.16.1 to 1.17.1. (#18775)
• Bump phonenumbers from 9.0.10 to 9.0.11. (#18797)
• Bump pygithub from 2.6.1 to 2.7.0. (#18779)
• Bump serde_json from 1.0.141 to 1.0.142. (#18776)
• Bump slab from 0.4.10 to 0.4.11. (#18809)
• Bump tokio from 1.47.0 to 1.47.1. (#18774)
• Bump types-pyyaml from 6.0.12.20250516 to 6.0.12.20250809. (#18798)
• Bump types-setuptools from 80.9.0.20250529 to 80.9.0.20250809. (#18796)