Synapse 1.139.0rc2 (2025-09-23)

Internal Changes

Drop support for Ubuntu 24.10 Oracular Oriole, and add support for Ubuntu 25.04 Plucky Puffin. (#18962)

Add experimental support for MSC4308: Thread Subscriptions extension to Sliding Sync when MSC4306: Thread Subscriptions and MSC4186: Simplified Sliding Sync are enabled. (#18695)
Update push rules for experimental MSC4306: Thread Subscriptions to follow a newer draft. (#18846)
Add get_media_upload_limits_for_user and on_media_upload_limit_exceeded module API callbacks to the media repository. (#18848)
Support MSC4169 for backwards-compatible redaction sending using the /send endpoint. Contributed by @SpiritCroc @ Beeper. (#18898)
Add an in-memory cache to _get_e2e_cross_signing_signatures_for_devices to reduce DB load. (#18899)
Update MSC4190 support to return correct errors and allow appservices to reset cross-signing keys without user-interactive authentication. Contributed by @tulir @ Beeper. (#18946)

Ensure all PDUs sent via /send pass canonical JSON checks. (#18641)
Fix bug where we did not send invite revocations over federation. (#18823)
Fix prefixed support for MSC4133. (#18875)
Fix open redirect in legacy SSO flow with the idp query parameter. (#18909)
Fix a performance regression related to the experimental Delayed Events (MSC4140) feature. (#18926)

Suppress "Applying schema" log noise bulk when SYNAPSE_LOG_TESTING is set. (#18878)

Clarify Python dependency constraints in our deprecation policy. (#18856)
Clarify necessary jwt_config parameter in OIDC documentation for authentik. Contributed by @maxkratz. (#18931)

Fix LaterGauge metrics to collect from all servers. (#18791)
Configure Synapse to run MSC4306: Thread Subscriptions Complement tests. (#18819)
Remove sentinel logcontext usage where we log in setup, start and exit. (#18870)
Use the Enum's value for the dictionary key when responding to an admin request for experimental features. (#18874)
Start background tasks after we fork the process (daemonize). (#18886)
Better explain how we manage the logcontext in run_in_background(...) and run_as_background_process(...). (#18900, #18906)
Remove sentinel logcontext usage in Clock utilities like looping_call and call_later. (#18907)
Replace usages of the deprecated pkg_resources interface in preparation of setuptools dropping it soon. (#18910)
Split loading config from homeserver setup. (#18933)
Fix run_in_background not being awaited properly in some tests causing LoggingContext problems. (#18937)
Fix run_as_background_process not being awaited properly causing LoggingContext problems in experimental MSC4140: Delayed events implementation. (#18938)
Introduce Clock.call_when_running(...) to wrap startup code in a logcontext, ensuring we can identify which server generated the logs. (#18944)
Introduce Clock.add_system_event_trigger(...) to wrap system event callback code in a logcontext, ensuring we can identify which server generated the logs. (#18945)