Synapse 1.81.0rc1 (2023-04-04)

Synapse now attempts the versioned appservice paths before falling back to the legacy paths. Usage of the legacy routes should be considered deprecated.

Additionally, Synapse has supported sending the application service access token via the Authorization header since v1.70.0. For backwards compatibility it is also sent as the access_token query parameter. This is insecure and should be considered deprecated.

A future version of Synapse (v1.88.0 or later) will remove support for legacy application service routes and query parameter authorization.

Features

• Add the ability to enable/disable registrations when in the OIDC flow. (#14978)
• Add a primitive helper script for listing worker endpoints. (#15243)
• Experimental support for passing One Time Key and device key requests to application services (MSC3983 and MSC3984). (#15314, #15321)
• Allow loading /password_policy endpoint on workers. (#15331)
• Add experimental support for Unix sockets. Contributed by Jason Little. (#15353)
• Build Debian packages for Ubuntu 23.04 (Lunar Lobster). (#15381)

Bugfixes

• Fix a long-standing bug where edits of non-m.room.message events would not be correctly bundled. (#15295)
• Fix a bug introduced in Synapse v1.55.0 which could delay remote homeservers being able to decrypt encrypted messages sent by local users. (#15297)
• Add a check to SQLite port_db script
  to ensure that the sqlite database passed to the script exists before trying to port from it. (#15306)
• Fix a bug introduced in Synapse 1.76.0 where responses from worker deployments could include an internal _INT_STREAM_POS key. (#15309)
• Fix a long-standing bug that Synpase only used the legacy appservice routes. (#15317)
• Fix a long-standing bug preventing users from rejoining rooms after being banned and unbanned over federation. Contributed by Nico. (#15323)
• Fix bug in worker mode where on a rolling restart of workers the "typing" worker would consume 100% CPU until it got restarted. (#15332)
• Fix a long-standing bug where some to_device messages could be dropped when using workers. (#15349)
• Fix a bug introduced in Synapse 1.70.0 where the background sync from a faster join could spin for hours when one of the events involved had been marked for backoff. (#15351)
• Fix missing app variable in mail subject for password resets. Contributed by Cyberes. (#15352)
• Fix a rare bug introduced in Synapse 1.66.0 where initial syncs would fail when the user had been kicked from a faster joined room that had not finished syncing. (#15383)

Improved Documentation

• Fix a typo in login requests ratelimit defaults. (#15341)
• Add some clarification to the doc/comments regarding TCP replication. (#15354)
• Note that Synapse 1.74 queued a rebuild of the user directory tables. (#15386)

Internal Changes

• Use immutabledict instead of frozendict. (#15113)
• Add developer documentation for the Federation Sender and add a documentation mechanism using Sphinx. (#15265, #15336)
• Make the pushers rely on the device_id instead of the access_token_id for various operations. (#15280)
• Bump sentry-sdk from 1.15.0 to 1.17.0. (#15285)
• Allow running the Twisted trunk job against other branches. (#15302)
• Remind the releaser to ask for changelog feedback in #synapse-dev. (#15303)
• Bump dtolnay/rust-toolchain from e12eda571dc9a5ee5d58eecf4738ec291c66f295 to fc3253060d0c959bea12a59f10f8391454a0b02d. (#15304)
• Reject events with an invalid "mentions" property per MSC3952. (#15311)
• As an optimisation, use TRUNCATE on Postgres when clearing the user directory tables. (#15316)
• Fix .gitignore rule for the Complement source tarball downloaded automatically by complement.sh. (#15319)
• Bump serde from 1.0.157 to 1.0.158. (#15324)
• Bump regex from 1.7.1 to 1.7.3. (#15325)
• Bump types-pyopenssl from 23.0.0.4 to 23.1.0.0. (#15326)
• Bump furo from 2022.12.7 to 2023.3.23. (#15327)
• Bump ruff from 0.0.252 to 0.0.259. (#15328)
• Bump cryptography from 40.0.0 to 40.0.1. (#15329)
• Bump mypy-zope from 0.9.0 to 0.9.1. (#15330)
• Speed up unit tests when using SQLite3. (#15334)
• Speed up pydantic CI job. (#15339)
• Speed up sample config CI job. (#15340)
• Fix copyright year in SSO footer template. (#15358)
• Bump peaceiris/actions-gh-pages from 3.9.2 to 3.9.3. (#15369)
• Bump serde from 1.0.158 to 1.0.159. (#15370)
• Bump serde_json from 1.0.94 to 1.0.95. (#15371)
• Speed up membership queries for users with forgotten rooms. (#15385)