Merge branch 'release-v1.145' into develop

2026-01-11 19:56:31 +00:00 · 2026-01-07 10:34:01 -07:00 · 2026-01-07 10:34:01 -07:00 · cbc5469113
commit cbc5469113
parent 7ea78671a3 ecd67df49d
33 changed files with 93 additions and 39 deletions
--- a/CHANGES.md
+++ b/CHANGES.md
@ -1,3 +1,72 @@
+# Synapse 1.145.0rc2 (2026-01-07)
+
+No significant changes since 1.145.0rc1.
+
+This RC fixes the source distribution packaging for uploading to PyPI.
+
+
+
+# Synapse 1.145.0rc1 (2026-01-06)
+
+## End of Life of Ubuntu 25.04 Plucky Puffin
+
+Ubuntu 25.04 (Plucky Puffin) will be end of life on Jan 17, 2026. Synapse will stop building packages for Ubuntu 25.04 shortly thereafter.
+
+## Updates to Locked Dependencies No Longer Included in Changelog
+
+The "Updates to locked dependencies" section has been removed from the changelog due to lack of use and the maintenance burden. ([\#19254](https://github.com/element-hq/synapse/issues/19254))
+
+## Features
+
+- Add `memberships` endpoint to the admin API. This is useful for forensics and T&S purpose. ([\#19260](https://github.com/element-hq/synapse/issues/19260))
+- Server admins can bypass the quarantine media check when downloading media by setting the `admin_unsafely_bypass_quarantine` query parameter to `true` on Client-Server API media download requests. ([\#19275](https://github.com/element-hq/synapse/issues/19275))
+- Implemented pagination for the [MSC2666](https://github.com/matrix-org/matrix-spec-proposals/pull/2666) mutual rooms endpoint. Contributed by @tulir @ Beeper. ([\#19279](https://github.com/element-hq/synapse/issues/19279))
+- Admin API: add worker support to `GET /_synapse/admin/v2/users/<user_id>`. ([\#19281](https://github.com/element-hq/synapse/issues/19281))
+- Improve proxy support for the `federation_client.py` dev script. Contributed by Denis Kasak (@dkasak). ([\#19300](https://github.com/element-hq/synapse/issues/19300))
+
+## Bugfixes
+
+- Fix sliding sync performance slow down for long lived connections. ([\#19206](https://github.com/element-hq/synapse/issues/19206))
+- Fix a bug where Mastodon posts (and possibly other embeds) have the wrong description for URL previews. ([\#19231](https://github.com/element-hq/synapse/issues/19231))
+- Fix bug where `Duration` was logged incorrectly. ([\#19267](https://github.com/element-hq/synapse/issues/19267))
+- Fix bug introduced in 1.143.0 that broke support for versions of `zope-interface` older than 6.2. ([\#19274](https://github.com/element-hq/synapse/issues/19274))
+- Transform events with client metadata before serialising in /event response. ([\#19340](https://github.com/element-hq/synapse/issues/19340))
+
+## Updates to the Docker image
+
+- Add a way to expose metrics from the Docker image (`SYNAPSE_ENABLE_METRICS`). ([\#19324](https://github.com/element-hq/synapse/issues/19324))
+
+## Improved Documentation
+
+- Document the importance of `public_baseurl` when configuring OpenID Connect authentication. ([\#19270](https://github.com/element-hq/synapse/issues/19270))
+
+## Deprecations and Removals
+
+- Ubuntu 25.04 (Plucky Puffin) will be end of life on Jan 17, 2026. Synapse will stop building packages for Ubuntu 25.04 shortly thereafter.
+- Remove the "Updates to locked dependencies" section from the changelog due to lack of use and the maintenance burden. ([\#19254](https://github.com/element-hq/synapse/issues/19254))
+
+## Internal Changes
+
+- Group together dependabot update PRs to reduce the review load. ([\#18402](https://github.com/element-hq/synapse/issues/18402))
+- Fix `HomeServer.shutdown()` failing if the homeserver hasn't been setup yet. ([\#19187](https://github.com/element-hq/synapse/issues/19187))
+- Respond with useful error codes with `Content-Length` header/s are invalid. ([\#19212](https://github.com/element-hq/synapse/issues/19212))
+- Fix `HomeServer.shutdown()` failing if the homeserver failed to `start`. ([\#19232](https://github.com/element-hq/synapse/issues/19232))
+- Switch the build backend from `poetry-core` to `maturin`. ([\#19234](https://github.com/element-hq/synapse/issues/19234))
+- Raise the limit for concurrently-open non-security @dependabot PRs from 5 to 10. ([\#19253](https://github.com/element-hq/synapse/issues/19253))
+- Require 14 days to pass before pulling in general dependency updates to help mitigate upstream supply chain attacks. ([\#19258](https://github.com/element-hq/synapse/issues/19258))
+- Drop the broken netlify documentation workflow until a new one is implemented. ([\#19262](https://github.com/element-hq/synapse/issues/19262))
+- Don't include debug logs in `Clock` unless explicitly enabled. ([\#19278](https://github.com/element-hq/synapse/issues/19278))
+- Use `uv` to test olddeps to ensure all transitive dependencies use minimum versions. ([\#19289](https://github.com/element-hq/synapse/issues/19289))
+- Add a config to be able to rate limit search in the user directory. ([\#19291](https://github.com/element-hq/synapse/issues/19291))
+- Log the original bind exception when encountering `Failed to listen on 0.0.0.0, continuing because listening on [::]`. ([\#19297](https://github.com/element-hq/synapse/issues/19297))
+- Unpin the version of Rust we use to build Synapse wheels (was 1.82.0) now that MacOS support has been dropped. ([\#19302](https://github.com/element-hq/synapse/issues/19302))
+- Make it more clear how `shared_extra_conf` is combined in our Docker configuration scripts. ([\#19323](https://github.com/element-hq/synapse/issues/19323))
+- Update CI to stream Complement progress and format logs in a separate step after all tests are done. ([\#19326](https://github.com/element-hq/synapse/issues/19326))
+- Format `.github/workflows/tests.yml`. ([\#19327](https://github.com/element-hq/synapse/issues/19327))
+
+
+
+
 # Synapse 1.144.0 (2025-12-09)

 ## Deprecation of MacOS Python wheels
--- a/changelog.d/18402.misc
+++ b/changelog.d/18402.misc
@ -1 +0,0 @@
-Group together dependabot update PRs to reduce the review load.
--- a/changelog.d/19187.misc
+++ b/changelog.d/19187.misc
@ -1 +0,0 @@
-Fix `HomeServer.shutdown()` failing if the homeserver hasn't been setup yet.
--- a/changelog.d/19206.bugfix
+++ b/changelog.d/19206.bugfix
@ -1 +0,0 @@
-Fix sliding sync performance slow down for long lived connections.
--- a/changelog.d/19212.misc
+++ b/changelog.d/19212.misc
@ -1 +0,0 @@
-Respond with useful error codes with `Content-Length` header/s are invalid.
--- a/changelog.d/19231.bugfix
+++ b/changelog.d/19231.bugfix
@ -1 +0,0 @@
-Fix a bug where Mastodon posts (and possibly other embeds) have the wrong description for URL previews.
--- a/changelog.d/19232.misc
+++ b/changelog.d/19232.misc
@ -1 +0,0 @@
-Fix `HomeServer.shutdown()` failing if the homeserver failed to `start`.
--- a/changelog.d/19234.misc
+++ b/changelog.d/19234.misc
@ -1 +0,0 @@
-Switch the build backend from `poetry-core` to `maturin`.
--- a/changelog.d/19253.misc
+++ b/changelog.d/19253.misc
@ -1 +0,0 @@
-Raise the limit for concurrently-open non-security @dependabot PRs from 5 to 10.
--- a/changelog.d/19254.removal
+++ b/changelog.d/19254.removal
@ -1 +0,0 @@
-Remove the "Updates to locked dependencies" section from the changelog due to lack of use and the maintenance burden.
--- a/changelog.d/19258.misc
+++ b/changelog.d/19258.misc
@ -1 +0,0 @@
-Require 14 days to pass before pulling in general dependency updates to help mitigate upstream supply chain attacks.
--- a/changelog.d/19260.feature
+++ b/changelog.d/19260.feature
@ -1 +0,0 @@
-Add `memberships` endpoint to the admin API. This is useful for forensics and T&S purpose.
--- a/changelog.d/19262.misc
+++ b/changelog.d/19262.misc
@ -1 +0,0 @@
-Drop the broken netlify documentation workflow until a new one is implemented.
--- a/changelog.d/19267.bugfix
+++ b/changelog.d/19267.bugfix
@ -1 +0,0 @@
-Fix bug where `Duration` was logged incorrectly.
--- a/changelog.d/19270.doc
+++ b/changelog.d/19270.doc
@ -1 +0,0 @@
-Document the importance of `public_baseurl` when configuring OpenID Connect authentication.
--- a/changelog.d/19274.bugfix
+++ b/changelog.d/19274.bugfix
@ -1 +0,0 @@
-Fix bug introduced in 1.143.0 that broke support for versions of `zope-interface` older than 6.2.
--- a/changelog.d/19275.feature
+++ b/changelog.d/19275.feature
@ -1 +0,0 @@
-Server admins can bypass the quarantine media check when downloading media by setting the `admin_unsafely_bypass_quarantine` query parameter to `true` on Client-Server API media download requests.
--- a/changelog.d/19278.misc
+++ b/changelog.d/19278.misc
@ -1 +0,0 @@
-Don't include debug logs in `Clock` unless explicitly enabled.
--- a/changelog.d/19279.feature
+++ b/changelog.d/19279.feature
@ -1 +0,0 @@
-Implemented pagination for the [MSC2666](https://github.com/matrix-org/matrix-spec-proposals/pull/2666) mutual rooms endpoint. Contributed by @tulir @ Beeper.
--- a/changelog.d/19281.feature
+++ b/changelog.d/19281.feature
@ -1 +0,0 @@
-Admin API: add worker support to `GET /_synapse/admin/v2/users/<user_id>`.
--- a/changelog.d/19289.misc
+++ b/changelog.d/19289.misc
@ -1 +0,0 @@
-Use `uv` to test olddeps to ensure all transitive dependencies use minimum versions.
--- a/changelog.d/19291.misc
+++ b/changelog.d/19291.misc
@ -1 +0,0 @@
-Add a config to be able to rate limit search in the user directory.
--- a/changelog.d/19297.misc
+++ b/changelog.d/19297.misc
@ -1 +0,0 @@
-Log the original bind exception when encountering `Failed to listen on 0.0.0.0, continuing because listening on [::]`.
--- a/changelog.d/19300.feature
+++ b/changelog.d/19300.feature
@ -1 +0,0 @@
-Improve proxy support for the `federation_client.py` dev script. Contributed by Denis Kasak (@dkasak).
--- a/changelog.d/19302.misc
+++ b/changelog.d/19302.misc
@ -1 +0,0 @@
-Unpin the version of Rust we use to build Synapse wheels (was 1.82.0) now that MacOS support has been dropped.
--- a/changelog.d/19323.misc
+++ b/changelog.d/19323.misc
@ -1 +0,0 @@
-Make it more clear how `shared_extra_conf` is combined in our Docker configuration scripts.
--- a/changelog.d/19324.docker
+++ b/changelog.d/19324.docker
@ -1 +0,0 @@
-Add a way to expose metrics from the Docker image (`SYNAPSE_ENABLE_METRICS`).
--- a/changelog.d/19326.misc
+++ b/changelog.d/19326.misc
@ -1 +0,0 @@
-Update CI to stream Complement progress and format logs in a separate step after all tests are done.
--- a/changelog.d/19327.misc
+++ b/changelog.d/19327.misc
@ -1 +0,0 @@
-Format `.github/workflows/tests.yml`.
--- a/changelog.d/19340.bugfix
+++ b/changelog.d/19340.bugfix
@ -1 +0,0 @@
-Transform events with client metadata before serialising in /event response.
--- a/debian/changelog
+++ b/debian/changelog
@ -1,3 +1,15 @@
+matrix-synapse-py3 (1.145.0~rc2) stable; urgency=medium
+
+  * New Synapse release 1.145.0rc2.
+
+ -- Synapse Packaging team <packages@matrix.org>  Wed, 07 Jan 2026 10:10:07 -0700
+
+matrix-synapse-py3 (1.145.0~rc1) stable; urgency=medium
+
+  * New Synapse release 1.145.0rc1.
+
+ -- Synapse Packaging team <packages@matrix.org>  Tue, 06 Jan 2026 09:29:39 -0700
+
 matrix-synapse-py3 (1.144.0) stable; urgency=medium

  * New Synapse release 1.144.0.
--- a/pyproject.toml
+++ b/pyproject.toml
@ -1,6 +1,6 @@
 [project]
 name = "matrix-synapse"
-version = "1.144.0"
+version = "1.145.0rc2"
 description = "Homeserver for the Matrix decentralised comms protocol"
 readme = "README.rst"
 authors = [
@ -415,20 +415,22 @@ line-ending = "auto"
 manifest-path = "rust/Cargo.toml"
 module-name = "synapse.synapse_rust"
 python-source = "."
-sdist-include = [
+include = [
    "AUTHORS.rst",
    "book.toml",
-    "changelog.d",
+    "changelog.d/**/*",
    "CHANGES.md",
    "CONTRIBUTING.md",
-    "demo",
-    "docs",
+    "demo/**/*",
+    "docs/**/*",
    "INSTALL.md",
+    "LICENSE-AGPL-3.0",
+    "LICENSE-COMMERCIAL",
    "mypy.ini",
-    "scripts-dev",
-    "synmark",
+    "scripts-dev/**/*",
+    "synmark/**/*",
    "sytest-blacklist",
-    "tests",
+    "tests/**/*",
    "UPGRADE.rst",
    "Cargo.toml",
    "Cargo.lock",
@ -436,7 +438,7 @@ sdist-include = [
    "rust/build.rs",
    "rust/src/**",
 ]
-sdist-exclude = ["synapse/*.so"]
+exclude = ["synapse/*.so"]

 [build-system]
 # The upper bounds here are defensive, intended to prevent situations like
--- a/schema/synapse-config.schema.yaml
+++ b/schema/synapse-config.schema.yaml
@ -1,5 +1,5 @@
 $schema: https://element-hq.github.io/synapse/latest/schema/v1/meta.schema.json
-$id: https://element-hq.github.io/synapse/schema/synapse/v1.144/synapse-config.schema.json
+$id: https://element-hq.github.io/synapse/schema/synapse/v1.145/synapse-config.schema.json
 type: object
 properties:
  modules:
				`@ -1 +0,0 @@`
				`Group together dependabot update PRs to reduce the review load.`
				`@ -1 +0,0 @@`
				Fix `HomeServer.shutdown()` failing if the homeserver hasn't been setup yet.
				`@ -1 +0,0 @@`
				`Fix sliding sync performance slow down for long lived connections.`
				`@ -1 +0,0 @@`
				Respond with useful error codes with `Content-Length` header/s are invalid.
				`@ -1 +0,0 @@`
				`Fix a bug where Mastodon posts (and possibly other embeds) have the wrong description for URL previews.`
				`@ -1 +0,0 @@`
				Switch the build backend from `poetry-core` to `maturin`.
				`@ -1 +0,0 @@`
				`Raise the limit for concurrently-open non-security @dependabot PRs from 5 to 10.`
				`@ -1 +0,0 @@`
				`Remove the "Updates to locked dependencies" section from the changelog due to lack of use and the maintenance burden.`
				`@ -1 +0,0 @@`
				`Require 14 days to pass before pulling in general dependency updates to help mitigate upstream supply chain attacks.`
				`@ -1 +0,0 @@`
				Add `memberships` endpoint to the admin API. This is useful for forensics and T&S purpose.