25494 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
Erik Johnston	b74c29f694	Move towards a dedicated Duration class (#19223) ... We have various constants to try and avoid mistyping of durations, e.g. `ONE_HOUR_SECONDS * MILLISECONDS_PER_SECOND`, however this can get a little verbose and doesn't help with typing. Instead, let's move towards a dedicated `Duration` class (basically a [`timedelta`](https://docs.python.org/3/library/datetime.html#timedelta-objects) with helper methods). This PR introduces the new types and converts all usages of the existing constants with it. Future PRs may work to move the clock methods to also use it (e.g. `call_later` and `looping_call`). Reviewable commit-by-commit.	2025-11-26 10:56:59 +00:00
Andrew Morgan	2741ead569	Stop building wheels for MacOS (#19225)	2025-11-26 10:32:39 +00:00
Andrew Morgan	ba65d8c351	Put MSC2666 endpoint behind an experimental flag (#19219)	2025-11-25 18:03:33 +00:00
Devon Hudson	ae98771fea	Merge branch 'master' into develop	2025-11-25 09:58:11 -07:00
Devon Hudson	87d6e27057	Capitalize Synapse in changelog	2025-11-25 08:48:42 -07:00
Devon Hudson	2eb76b4741	1.143.0	2025-11-25 08:48:04 -07:00
Andrew Morgan	b7e592a88c	Allow ruff to auto-fix trailing spaces in multi-line comments (#19221)	2025-11-25 14:09:48 +00:00
Erik Johnston	db975ea10d	Expire sliding sync connections (#19211) ... We add some logic to expire sliding sync connections if they get old or if there is too much pending data to return. The values of the constants are picked fairly arbitrarily, these are currently: 1. More than 100 rooms with pending events if the connection hasn't been used in over an hour 2. The connection hasn't been used for over a week Reviewable commit-by-commit --------- Co-authored-by: Eric Eastwood <erice@element.io>	2025-11-25 10:20:47 +00:00
dependabot[bot]	8b79583643	Bump sentry-sdk from 2.44.0 to 2.46.0 (#19218) ... Bumps [sentry-sdk](https://github.com/getsentry/sentry-python) from 2.44.0 to 2.46.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/getsentry/sentry-python/releases">sentry-sdk's releases</a>.</em></p> <blockquote> <h2>2.46.0</h2> <h3>Various fixes &amp; improvements</h3> <ul> <li>Preserve metadata on wrapped coroutines (<a href="https://redirect.github.com/getsentry/sentry-python/issues/5105">#5105</a>) by <a href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a></li> <li>Make imports defensive to avoid <code>ModuleNotFoundError</code> in Pydantic AI integration (<a href="https://redirect.github.com/getsentry/sentry-python/issues/5135">#5135</a>) by <a href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a></li> <li>Fix OpenAI agents integration mistakenly enabling itself (<a href="https://redirect.github.com/getsentry/sentry-python/issues/5132">#5132</a>) by <a href="https://github.com/sentrivana"><code>@​sentrivana</code></a></li> <li>Add instrumentation to embedding functions for various backends (<a href="https://redirect.github.com/getsentry/sentry-python/issues/5120">#5120</a>) by <a href="https://github.com/constantinius"><code>@​constantinius</code></a></li> <li>Improve embeddings support for OpenAI (<a href="https://redirect.github.com/getsentry/sentry-python/issues/5121">#5121</a>) by <a href="https://github.com/constantinius"><code>@​constantinius</code></a></li> <li>Enhance input handling for embeddings in LiteLLM integration (<a href="https://redirect.github.com/getsentry/sentry-python/issues/5127">#5127</a>) by <a href="https://github.com/constantinius"><code>@​constantinius</code></a></li> <li>Expect exceptions when re-raised (<a href="https://redirect.github.com/getsentry/sentry-python/issues/5125">#5125</a>) by <a href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a></li> <li>Remove <code>MagicMock</code> from mocked <code>ModelResponse</code> (<a href="https://redirect.github.com/getsentry/sentry-python/issues/5126">#5126</a>) by <a href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a></li> </ul> <h2>2.45.0</h2> <h3>Various fixes &amp; improvements</h3> <ul> <li> <p>OTLPIntegration (<a href="https://redirect.github.com/getsentry/sentry-python/issues/4877">#4877</a>) by <a href="https://github.com/sl0thentr0py"><code>@​sl0thentr0py</code></a></p> <p>Enable the new OTLP integration with the code snippet below, and your OpenTelemetry instrumentation will be automatically sent to Sentry's OTLP ingestion endpoint.</p> <pre lang="python"><code> import sentry_sdk from sentry_sdk.integrations.otlp import OTLPIntegration <p>sentry_sdk.init(<br /> dsn=&quot;&lt;your-dsn&gt;&quot;,<br /> # Add data like inputs and responses;<br /> # see <a href="https://docs.sentry.io/platforms/python/data-management/data-collected/">https://docs.sentry.io/platforms/python/data-management/data-collected/</a> for more info<br /> send_default_pii=True,<br /> integrations=[<br /> OTLPIntegration(),<br /> ],<br /> )<br /> </code></pre></p> <p>Under the hood, this will setup:</p> <ul> <li>A <code>SpanExporter</code> that will automatically set up the OTLP ingestion endpoint from your DSN</li> <li>A <code>Propagator</code> that ensures Distributed Tracing works</li> <li>Trace/Span linking for all other Sentry events such as Errors, Logs, Crons and Metrics</li> </ul> <p>If you were using the <code>SentrySpanProcessor</code> before, we recommend migrating over to <code>OTLPIntegration</code> since it's a much simpler setup.</p> </li> <li> <p>feat(integrations): implement context management for invoke_agent spans (<a href="https://redirect.github.com/getsentry/sentry-python/issues/5089">#5089</a>) by <a href="https://github.com/constantinius"><code>@​constantinius</code></a></p> </li> <li> <p>feat(loguru): Capture extra (<a href="https://redirect.github.com/getsentry/sentry-python/issues/5096">#5096</a>) by <a href="https://github.com/sentrivana"><code>@​sentrivana</code></a></p> </li> <li> <p>feat: Attach <code>server.address</code> to metrics (<a href="https://redirect.github.com/getsentry/sentry-python/issues/5113">#5113</a>) by <a href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a></p> </li> <li> <p>fix: Cast message and detail attributes before appending exception notes (<a href="https://redirect.github.com/getsentry/sentry-python/issues/5114">#5114</a>) by <a href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a></p> </li> <li> <p>fix(integrations): ensure that GEN_AI_AGENT_NAME is properly set for GEN_AI spans under an invoke_agent span (<a href="https://redirect.github.com/getsentry/sentry-python/issues/5030">#5030</a>) by <a href="https://github.com/constantinius"><code>@​constantinius</code></a></p> </li> <li> <p>fix(logs): Update <code>sentry.origin</code> (<a href="https://redirect.github.com/getsentry/sentry-python/issues/5112">#5112</a>) by <a href="https://github.com/sentrivana"><code>@​sentrivana</code></a></p> </li> <li> <p>chore: Deprecate description truncation option for Redis spans (<a href="https://redirect.github.com/getsentry/sentry-python/issues/5073">#5073</a>) by <a href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a></p> </li> <li> <p>chore: Deprecate <code>max_spans</code> LangChain parameter (<a href="https://redirect.github.com/getsentry/sentry-python/issues/5074">#5074</a>) by <a href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a></p> </li> <li> <p>chore(toxgen): Check availability of pip and add detail to exceptions (<a href="https://redirect.github.com/getsentry/sentry-python/issues/5076">#5076</a>) by <a href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a></p> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md">sentry-sdk's changelog</a>.</em></p> <blockquote> <h2>2.46.0</h2> <h3>Various fixes &amp; improvements</h3> <ul> <li>Preserve metadata on wrapped coroutines (<a href="https://redirect.github.com/getsentry/sentry-python/issues/5105">#5105</a>) by <a href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a></li> <li>Make imports defensive to avoid <code>ModuleNotFoundError</code> in Pydantic AI integration (<a href="https://redirect.github.com/getsentry/sentry-python/issues/5135">#5135</a>) by <a href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a></li> <li>Fix OpenAI agents integration mistakenly enabling itself (<a href="https://redirect.github.com/getsentry/sentry-python/issues/5132">#5132</a>) by <a href="https://github.com/sentrivana"><code>@​sentrivana</code></a></li> <li>Add instrumentation to embedding functions for various backends (<a href="https://redirect.github.com/getsentry/sentry-python/issues/5120">#5120</a>) by <a href="https://github.com/constantinius"><code>@​constantinius</code></a></li> <li>Improve embeddings support for OpenAI (<a href="https://redirect.github.com/getsentry/sentry-python/issues/5121">#5121</a>) by <a href="https://github.com/constantinius"><code>@​constantinius</code></a></li> <li>Enhance input handling for embeddings in LiteLLM integration (<a href="https://redirect.github.com/getsentry/sentry-python/issues/5127">#5127</a>) by <a href="https://github.com/constantinius"><code>@​constantinius</code></a></li> <li>Expect exceptions when re-raised (<a href="https://redirect.github.com/getsentry/sentry-python/issues/5125">#5125</a>) by <a href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a></li> <li>Remove <code>MagicMock</code> from mocked <code>ModelResponse</code> (<a href="https://redirect.github.com/getsentry/sentry-python/issues/5126">#5126</a>) by <a href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a></li> </ul> <h2>2.45.0</h2> <h3>Various fixes &amp; improvements</h3> <ul> <li> <p>OTLPIntegration (<a href="https://redirect.github.com/getsentry/sentry-python/issues/4877">#4877</a>) by <a href="https://github.com/sl0thentr0py"><code>@​sl0thentr0py</code></a></p> <p>Enable the new OTLP integration with the code snippet below, and your OpenTelemetry instrumentation will be automatically sent to Sentry's OTLP ingestion endpoint.</p> <pre lang="python"><code> import sentry_sdk from sentry_sdk.integrations.otlp import OTLPIntegration <p>sentry_sdk.init(<br /> dsn=&quot;&lt;your-dsn&gt;&quot;,<br /> # Add data like inputs and responses;<br /> # see <a href="https://docs.sentry.io/platforms/python/data-management/data-collected/">https://docs.sentry.io/platforms/python/data-management/data-collected/</a> for more info<br /> send_default_pii=True,<br /> integrations=[<br /> OTLPIntegration(),<br /> ],<br /> )<br /> </code></pre></p> <p>Under the hood, this will setup:</p> <ul> <li>A <code>SpanExporter</code> that will automatically set up the OTLP ingestion endpoint from your DSN</li> <li>A <code>Propagator</code> that ensures Distributed Tracing works</li> <li>Trace/Span linking for all other Sentry events such as Errors, Logs, Crons and Metrics</li> </ul> <p>If you were using the <code>SentrySpanProcessor</code> before, we recommend migrating over to <code>OTLPIntegration</code> since it's a much simpler setup.</p> </li> <li> <p>feat(integrations): implement context management for invoke_agent spans (<a href="https://redirect.github.com/getsentry/sentry-python/issues/5089">#5089</a>) by <a href="https://github.com/constantinius"><code>@​constantinius</code></a></p> </li> <li> <p>feat(loguru): Capture extra (<a href="https://redirect.github.com/getsentry/sentry-python/issues/5096">#5096</a>) by <a href="https://github.com/sentrivana"><code>@​sentrivana</code></a></p> </li> <li> <p>feat: Attach <code>server.address</code> to metrics (<a href="https://redirect.github.com/getsentry/sentry-python/issues/5113">#5113</a>) by <a href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a></p> </li> <li> <p>fix: Cast message and detail attributes before appending exception notes (<a href="https://redirect.github.com/getsentry/sentry-python/issues/5114">#5114</a>) by <a href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a></p> </li> <li> <p>fix(integrations): ensure that GEN_AI_AGENT_NAME is properly set for GEN_AI spans under an invoke_agent span (<a href="https://redirect.github.com/getsentry/sentry-python/issues/5030">#5030</a>) by <a href="https://github.com/constantinius"><code>@​constantinius</code></a></p> </li> <li> <p>fix(logs): Update <code>sentry.origin</code> (<a href="https://redirect.github.com/getsentry/sentry-python/issues/5112">#5112</a>) by <a href="https://github.com/sentrivana"><code>@​sentrivana</code></a></p> </li> <li> <p>chore: Deprecate description truncation option for Redis spans (<a href="https://redirect.github.com/getsentry/sentry-python/issues/5073">#5073</a>) by <a href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a></p> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="d3375bc37b"><code>d3375bc</code></a> Update CHANGELOG.md</li> <li><a href="23abfe2996"><code>23abfe2</code></a> release: 2.46.0</li> <li><a href="ca19d6300f"><code>ca19d63</code></a> feat: Preserve metadata on wrapped coroutines (<a href="https://redirect.github.com/getsentry/sentry-python/issues/5105">#5105</a>)</li> <li><a href="cf165e332b"><code>cf165e3</code></a> build(deps): bump actions/checkout from 5.0.0 to 6.0.0 (<a href="https://redirect.github.com/getsentry/sentry-python/issues/5136">#5136</a>)</li> <li><a href="b8d6a57d78"><code>b8d6a57</code></a> build(deps): bump actions/create-github-app-token from 2.1.4 to 2.2.0 (<a href="https://redirect.github.com/getsentry/sentry-python/issues/5137">#5137</a>)</li> <li><a href="c0c28b842d"><code>c0c28b8</code></a> build(deps): bump supercharge/redis-github-action from 1.8.0 to 1.8.1 (<a href="https://redirect.github.com/getsentry/sentry-python/issues/5138">#5138</a>)</li> <li><a href="fb18c2164e"><code>fb18c21</code></a> fix(pydantic-ai): Make imports defensive to avoid <code>ModuleNotFoundError</code> (<a href="https://redirect.github.com/getsentry/sentry-python/issues/5135">#5135</a>)</li> <li><a href="f945e382ee"><code>f945e38</code></a> Fix openai-agents import (<a href="https://redirect.github.com/getsentry/sentry-python/issues/5132">#5132</a>)</li> <li><a href="8596f89490"><code>8596f89</code></a> fix(integrations): enhance input handling for embeddings in LiteLLM integrati...</li> <li><a href="0e6e808882"><code>0e6e808</code></a> test(openai-agents): Remove <code>MagicMock</code> from mocked <code>ModelResponse</code> (<a href="https://redirect.github.com/getsentry/sentry-python/issues/5126">#5126</a>)</li> <li>Additional commits viewable in <a href="https://github.com/getsentry/sentry-python/compare/2.44.0...2.46.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-11-24 18:04:07 +00:00
dependabot[bot]	9fb2b1731b	Bump actions/checkout from 5.0.0 to 6.0.0 (#19213) ... Bumps [actions/checkout](https://github.com/actions/checkout) from 5.0.0 to 6.0.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/checkout/releases">actions/checkout's releases</a>.</em></p> <blockquote> <h2>v6.0.0</h2> <h2>What's Changed</h2> <ul> <li>Update README to include Node.js 24 support details and requirements by <a href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2248">actions/checkout#2248</a></li> <li>Persist creds to a separate file by <a href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2286">actions/checkout#2286</a></li> <li>v6-beta by <a href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2298">actions/checkout#2298</a></li> <li>update readme/changelog for v6 by <a href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2311">actions/checkout#2311</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/checkout/compare/v5.0.0...v6.0.0">https://github.com/actions/checkout/compare/v5.0.0...v6.0.0</a></p> <h2>v6-beta</h2> <h2>What's Changed</h2> <p>Updated persist-credentials to store the credentials under <code>$RUNNER_TEMP</code> instead of directly in the local git config.</p> <p>This requires a minimum Actions Runner version of <a href="https://github.com/actions/runner/releases/tag/v2.329.0">v2.329.0</a> to access the persisted credentials for <a href="https://docs.github.com/en/actions/tutorials/use-containerized-services/create-a-docker-container-action">Docker container action</a> scenarios.</p> <h2>v5.0.1</h2> <h2>What's Changed</h2> <ul> <li>Port v6 cleanup to v5 by <a href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2301">actions/checkout#2301</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/checkout/compare/v5...v5.0.1">https://github.com/actions/checkout/compare/v5...v5.0.1</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/actions/checkout/blob/main/CHANGELOG.md">actions/checkout's changelog</a>.</em></p> <blockquote> <h1>Changelog</h1> <h2>V6.0.0</h2> <ul> <li>Persist creds to a separate file by <a href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2286">actions/checkout#2286</a></li> <li>Update README to include Node.js 24 support details and requirements by <a href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2248">actions/checkout#2248</a></li> </ul> <h2>V5.0.1</h2> <ul> <li>Port v6 cleanup to v5 by <a href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2301">actions/checkout#2301</a></li> </ul> <h2>V5.0.0</h2> <ul> <li>Update actions checkout to use node 24 by <a href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2226">actions/checkout#2226</a></li> </ul> <h2>V4.3.1</h2> <ul> <li>Port v6 cleanup to v4 by <a href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2305">actions/checkout#2305</a></li> </ul> <h2>V4.3.0</h2> <ul> <li>docs: update README.md by <a href="https://github.com/motss"><code>@​motss</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1971">actions/checkout#1971</a></li> <li>Add internal repos for checking out multiple repositories by <a href="https://github.com/mouismail"><code>@​mouismail</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1977">actions/checkout#1977</a></li> <li>Documentation update - add recommended permissions to Readme by <a href="https://github.com/benwells"><code>@​benwells</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2043">actions/checkout#2043</a></li> <li>Adjust positioning of user email note and permissions heading by <a href="https://github.com/joshmgross"><code>@​joshmgross</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2044">actions/checkout#2044</a></li> <li>Update README.md by <a href="https://github.com/nebuk89"><code>@​nebuk89</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2194">actions/checkout#2194</a></li> <li>Update CODEOWNERS for actions by <a href="https://github.com/TingluoHuang"><code>@​TingluoHuang</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2224">actions/checkout#2224</a></li> <li>Update package dependencies by <a href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2236">actions/checkout#2236</a></li> </ul> <h2>v4.2.2</h2> <ul> <li><code>url-helper.ts</code> now leverages well-known environment variables by <a href="https://github.com/jww3"><code>@​jww3</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1941">actions/checkout#1941</a></li> <li>Expand unit test coverage for <code>isGhes</code> by <a href="https://github.com/jww3"><code>@​jww3</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1946">actions/checkout#1946</a></li> </ul> <h2>v4.2.1</h2> <ul> <li>Check out other refs/* by commit if provided, fall back to ref by <a href="https://github.com/orhantoy"><code>@​orhantoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1924">actions/checkout#1924</a></li> </ul> <h2>v4.2.0</h2> <ul> <li>Add Ref and Commit outputs by <a href="https://github.com/lucacome"><code>@​lucacome</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1180">actions/checkout#1180</a></li> <li>Dependency updates by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>- <a href="https://redirect.github.com/actions/checkout/pull/1777">actions/checkout#1777</a>, <a href="https://redirect.github.com/actions/checkout/pull/1872">actions/checkout#1872</a></li> </ul> <h2>v4.1.7</h2> <ul> <li>Bump the minor-npm-dependencies group across 1 directory with 4 updates by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1739">actions/checkout#1739</a></li> <li>Bump actions/checkout from 3 to 4 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1697">actions/checkout#1697</a></li> <li>Check out other refs/* by commit by <a href="https://github.com/orhantoy"><code>@​orhantoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1774">actions/checkout#1774</a></li> <li>Pin actions/checkout's own workflows to a known, good, stable version. by <a href="https://github.com/jww3"><code>@​jww3</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1776">actions/checkout#1776</a></li> </ul> <h2>v4.1.6</h2> <ul> <li>Check platform to set archive extension appropriately by <a href="https://github.com/cory-miller"><code>@​cory-miller</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1732">actions/checkout#1732</a></li> </ul> <h2>v4.1.5</h2> <ul> <li>Update NPM dependencies by <a href="https://github.com/cory-miller"><code>@​cory-miller</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1703">actions/checkout#1703</a></li> <li>Bump github/codeql-action from 2 to 3 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1694">actions/checkout#1694</a></li> <li>Bump actions/setup-node from 1 to 4 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1696">actions/checkout#1696</a></li> <li>Bump actions/upload-artifact from 2 to 4 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1695">actions/checkout#1695</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="1af3b93b68"><code>1af3b93</code></a> update readme/changelog for v6 (<a href="https://redirect.github.com/actions/checkout/issues/2311">#2311</a>)</li> <li><a href="71cf2267d8"><code>71cf226</code></a> v6-beta (<a href="https://redirect.github.com/actions/checkout/issues/2298">#2298</a>)</li> <li><a href="069c695914"><code>069c695</code></a> Persist creds to a separate file (<a href="https://redirect.github.com/actions/checkout/issues/2286">#2286</a>)</li> <li><a href="ff7abcd0c3"><code>ff7abcd</code></a> Update README to include Node.js 24 support details and requirements (<a href="https://redirect.github.com/actions/checkout/issues/2248">#2248</a>)</li> <li>See full diff in <a href="08c6903cd8...1af3b93b68">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-11-24 16:37:55 +00:00
dependabot[bot]	f3975ce247	Bump actions/setup-go from 6.0.0 to 6.1.0 (#19214) ... Bumps [actions/setup-go](https://github.com/actions/setup-go) from 6.0.0 to 6.1.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/setup-go/releases">actions/setup-go's releases</a>.</em></p> <blockquote> <h2>v6.1.0</h2> <h2>What's Changed</h2> <h3>Enhancements</h3> <ul> <li>Fall back to downloading from go.dev/dl instead of storage.googleapis.com/golang by <a href="https://github.com/nicholasngai"><code>@​nicholasngai</code></a> in <a href="https://redirect.github.com/actions/setup-go/pull/665">actions/setup-go#665</a></li> <li>Add support for .tool-versions file and update workflow by <a href="https://github.com/priya-kinthali"><code>@​priya-kinthali</code></a> in <a href="https://redirect.github.com/actions/setup-go/pull/673">actions/setup-go#673</a></li> <li>Add comprehensive breaking changes documentation for v6 by <a href="https://github.com/mahabaleshwars"><code>@​mahabaleshwars</code></a> in <a href="https://redirect.github.com/actions/setup-go/pull/674">actions/setup-go#674</a></li> </ul> <h3>Dependency updates</h3> <ul> <li>Upgrade eslint-config-prettier from 10.0.1 to 10.1.8 and document breaking changes in v6 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/actions/setup-go/pull/617">actions/setup-go#617</a></li> <li>Upgrade actions/publish-action from 0.3.0 to 0.4.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/actions/setup-go/pull/641">actions/setup-go#641</a></li> <li>Upgrade semver and <code>@​types/semver</code> by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/actions/setup-go/pull/652">actions/setup-go#652</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/nicholasngai"><code>@​nicholasngai</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-go/pull/665">actions/setup-go#665</a></li> <li><a href="https://github.com/priya-kinthali"><code>@​priya-kinthali</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-go/pull/673">actions/setup-go#673</a></li> <li><a href="https://github.com/mahabaleshwars"><code>@​mahabaleshwars</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-go/pull/674">actions/setup-go#674</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/setup-go/compare/v6...v6.1.0">https://github.com/actions/setup-go/compare/v6...v6.1.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="4dc6199c7b"><code>4dc6199</code></a> Bump semver and <code>@​types/semver</code> (<a href="https://redirect.github.com/actions/setup-go/issues/652">#652</a>)</li> <li><a href="f3787be646"><code>f3787be</code></a> Add comprehensive breaking changes documentation for v6 (<a href="https://redirect.github.com/actions/setup-go/issues/674">#674</a>)</li> <li><a href="3a0c2c8245"><code>3a0c2c8</code></a> Bump actions/publish-action from 0.3.0 to 0.4.0 (<a href="https://redirect.github.com/actions/setup-go/issues/641">#641</a>)</li> <li><a href="faf52423ec"><code>faf5242</code></a> Add support for .tool-versions file in setup-go, update workflow (<a href="https://redirect.github.com/actions/setup-go/issues/673">#673</a>)</li> <li><a href="7bc60db215"><code>7bc60db</code></a> Fall back to downloading from go.dev/dl instead of storage.googleapis.com/gol...</li> <li><a href="c0137caad7"><code>c0137ca</code></a> Bump eslint-config-prettier from 10.0.1 to 10.1.8 and document breaking chang...</li> <li>See full diff in <a href="4469467582...4dc6199c7b">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-11-24 16:30:41 +00:00
dependabot[bot]	1b78f0318a	Bump rpds-py from 0.28.0 to 0.29.0 (#19216) ... Bumps [rpds-py](https://github.com/crate-py/rpds) from 0.28.0 to 0.29.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/crate-py/rpds/releases">rpds-py's releases</a>.</em></p> <blockquote> <h2>v0.29.0</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <ul> <li>Bump actions/download-artifact from 5 to 6 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/crate-py/rpds/pull/195">crate-py/rpds#195</a></li> <li>Bump github/codeql-action from 4.30.9 to 4.31.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/crate-py/rpds/pull/194">crate-py/rpds#194</a></li> <li>Bump actions/upload-artifact from 4 to 5 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/crate-py/rpds/pull/192">crate-py/rpds#192</a></li> <li>Bump astral-sh/setup-uv from 7.1.1 to 7.1.2 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/crate-py/rpds/pull/193">crate-py/rpds#193</a></li> <li>Bump github/codeql-action from 4.31.0 to 4.31.2 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/crate-py/rpds/pull/196">crate-py/rpds#196</a></li> <li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a>[bot] in <a href="https://redirect.github.com/crate-py/rpds/pull/199">crate-py/rpds#199</a></li> <li>Bump softprops/action-gh-release from 2.4.1 to 2.4.2 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/crate-py/rpds/pull/198">crate-py/rpds#198</a></li> <li>Bump rpds from 1.1.2 to 1.2.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/crate-py/rpds/pull/197">crate-py/rpds#197</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/crate-py/rpds/compare/v0.28.0...v0.29.0">https://github.com/crate-py/rpds/compare/v0.28.0...v0.29.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="5fb6f35abb"><code>5fb6f35</code></a> Prepare for 0.29.0</li> <li><a href="d17dbd1d84"><code>d17dbd1</code></a> Add rpds's Stack.</li> <li><a href="74707afd0c"><code>74707af</code></a> Follow the rpds API more closely for Queue.</li> <li><a href="41455f3794"><code>41455f3</code></a> -&gt; native uv for dpeendency groups.</li> <li><a href="e93532daa5"><code>e93532d</code></a> Use 3.14 by default in nox.</li> <li><a href="020c41fb88"><code>020c41f</code></a> Remove dead hooks.</li> <li><a href="6e08b759e4"><code>6e08b75</code></a> Accept zizmor's cooldown suggestions for dependabot.</li> <li><a href="a5d40a9fd3"><code>a5d40a9</code></a> Merge pull request <a href="https://redirect.github.com/crate-py/rpds/issues/197">#197</a> from crate-py/dependabot/cargo/rpds-1.2.0</li> <li><a href="b830be1416"><code>b830be1</code></a> Merge pull request <a href="https://redirect.github.com/crate-py/rpds/issues/198">#198</a> from crate-py/dependabot/github_actions/softprops/act...</li> <li><a href="e7ac33078a"><code>e7ac330</code></a> Merge pull request <a href="https://redirect.github.com/crate-py/rpds/issues/199">#199</a> from crate-py/pre-commit-ci-update-config</li> <li>Additional commits viewable in <a href="https://github.com/crate-py/rpds/compare/v0.28.0...v0.29.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-11-24 16:30:09 +00:00
dependabot[bot]	a5d946bfcb	Bump types-bleach from 6.2.0.20250809 to 6.3.0.20251115 (#19217) ... Bumps [types-bleach](https://github.com/typeshed-internal/stub_uploader) from 6.2.0.20250809 to 6.3.0.20251115. <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/typeshed-internal/stub_uploader/commits">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-11-24 16:29:32 +00:00
dependabot[bot]	ea3e08c49c	Bump attrs from 25.3.0 to 25.4.0 (#19215) ... Bumps [attrs](https://github.com/sponsors/hynek) from 25.3.0 to 25.4.0. <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/sponsors/hynek/commits">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-11-24 15:58:26 +00:00
Eric Eastwood	54c93a1372	Export SYNAPSE_SUPPORTED_COMPLEMENT_TEST_PACKAGES from scripts-dev/complement.sh (#19208) ... This is useful as someone downstream can source the `scripts-dev/complement.sh` script and run the same set of tests as Synapse: ```bash # Grab the test packages supported by Synapse. # # --fast: Skip rebuilding the docker images, # --build-only: Will only build Docker images but because we also used `--fast`, it won't do anything. # `>/dev/null` to redirect stdout to `/dev/null` to get rid of the `echo` logs from the script. test_packages=$(source ${SYNAPSE_DIR}/scripts-dev/complement.sh --fast --build-only >/dev/null && echo "$SYNAPSE_SUPPORTED_COMPLEMENT_TEST_PACKAGES") echo $test_packages ``` This is spawning from wanting to run the same set of Complement tests in the https://github.com/element-hq/synapse-rust-apps project.	2025-11-21 19:01:43 -06:00
Eric Eastwood	e39fba61a7	Refactor scripts-dev/complement.sh logic to avoid exit (#19209) ... This is useful so that the script can be sourced by other scripts without exiting the calling subshell (composable). This is split out from https://github.com/element-hq/synapse/pull/19208 to make easy to understand PR's and build up to where we want to go.	2025-11-21 10:51:19 -06:00
Andrew Morgan	3779c59d1b	move postgres 13 deprecation note to top of changelog	2025-11-19 11:37:57 +00:00
Devon Hudson	7a9660367a	Capitalize Synapse in CHANGES.md	2025-11-18 18:04:26 -07:00
Devon Hudson	b631bf7c2a	1.143.0rc2	2025-11-18 17:38:04 -07:00
Devon Hudson	2cffd755f2	Fix duplicate poetry version from merging patch release	2025-11-18 17:31:55 -07:00
Devon Hudson	f5bf02eff6	1.143.0rc1	2025-11-18 13:20:59 -07:00
Devon Hudson	1b24a145c1	Merge branch 'master' into develop	2025-11-18 13:04:25 -07:00
Devon Hudson	46efbae4c3	1.142.1	2025-11-18 12:26:53 -07:00
Devon Hudson	d01a8abc45	Allow subpaths in MAS endpoints (#19186) ... Fixes #19184 ### Pull Request Checklist <!-- Please read https://element-hq.github.io/synapse/latest/development/contributing_guide.html before submitting your pull request --> * [X] Pull request is based on the develop branch * [X] Pull request includes a [changelog file](https://element-hq.github.io/synapse/latest/development/contributing_guide.html#changelog). The entry should: - Be a short description of your change which makes sense to users. "Fixed a bug that prevented receiving messages from other servers." instead of "Moved X method from `EventStore` to `EventWorkerStore`.". - Use markdown where necessary, mostly for `code blocks`. - End with either a period (.) or an exclamation mark (!). - Start with a capital letter. - Feel free to credit yourself, by adding a sentence "Contributed by @github_username." or "Contributed by [Your Name]." to the end of the entry. * [X] [Code style](https://element-hq.github.io/synapse/latest/code_style.html) is correct (run the [linters](https://element-hq.github.io/synapse/latest/development/contributing_guide.html#run-the-linters))	2025-11-18 12:05:41 -07:00
Devon Hudson	bc42899008	Allow subpaths in MAS endpoints (#19186) ... Fixes #19184 ### Pull Request Checklist <!-- Please read https://element-hq.github.io/synapse/latest/development/contributing_guide.html before submitting your pull request --> * [X] Pull request is based on the develop branch * [X] Pull request includes a [changelog file](https://element-hq.github.io/synapse/latest/development/contributing_guide.html#changelog). The entry should: - Be a short description of your change which makes sense to users. "Fixed a bug that prevented receiving messages from other servers." instead of "Moved X method from `EventStore` to `EventWorkerStore`.". - Use markdown where necessary, mostly for `code blocks`. - End with either a period (.) or an exclamation mark (!). - Start with a capital letter. - Feel free to credit yourself, by adding a sentence "Contributed by @github_username." or "Contributed by [Your Name]." to the end of the entry. * [X] [Code style](https://element-hq.github.io/synapse/latest/code_style.html) is correct (run the [linters](https://element-hq.github.io/synapse/latest/development/contributing_guide.html#run-the-linters))	2025-11-18 18:45:33 +00:00
Devon Hudson	322481cd2d	Run background updates on all databases (#19181) ... Fixes #18322 This PR changes synapse startup to run background updates against all databases instead of just the "main" database. This follows [what the admin api does](https://github.com/element-hq/synapse/blob/develop/synapse/rest/admin/background_updates.py#L71-L77). See the above linked issue for further details of why this is beneficial. ### Pull Request Checklist <!-- Please read https://element-hq.github.io/synapse/latest/development/contributing_guide.html before submitting your pull request --> * [X] Pull request is based on the develop branch * [X] Pull request includes a [changelog file](https://element-hq.github.io/synapse/latest/development/contributing_guide.html#changelog). The entry should: - Be a short description of your change which makes sense to users. "Fixed a bug that prevented receiving messages from other servers." instead of "Moved X method from `EventStore` to `EventWorkerStore`.". - Use markdown where necessary, mostly for `code blocks`. - End with either a period (.) or an exclamation mark (!). - Start with a capital letter. - Feel free to credit yourself, by adding a sentence "Contributed by @github_username." or "Contributed by [Your Name]." to the end of the entry. * [X] [Code style](https://element-hq.github.io/synapse/latest/code_style.html) is correct (run the [linters](https://element-hq.github.io/synapse/latest/development/contributing_guide.html#run-the-linters))	2025-11-17 15:32:21 +00:00
dependabot[bot]	34d93c96ed	Bump click from 8.1.8 to 8.3.1 (#19195) ... Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-11-17 12:09:49 +00:00
dependabot[bot]	ce65b5c8ba	Bump sentry-sdk from 2.43.0 to 2.44.0 (#19197) ... Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-11-17 12:09:38 +00:00
dependabot[bot]	26ddedb753	Bump ruff from 0.14.3 to 0.14.5 (#19196) ... Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-11-17 12:09:26 +00:00
dependabot[bot]	fca80e2eaa	Bump tomli from 2.2.1 to 2.3.0 (#19194) ... Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-11-17 11:40:03 +00:00
dependabot[bot]	19251fc4cf	Bump bytes from 1.10.1 to 1.11.0 (#19193) ... Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-11-17 11:38:35 +00:00
Eric Eastwood	edc0de9fa0	Fix bad deferred logcontext handling (#19180) ... These aren't really something personally experienced but I just went around the codebase looking for all of the Deferred `.callback`, `.errback`, and `.cancel` and wrapped them with `PreserveLoggingContext()` Spawning from wanting to solve https://github.com/element-hq/synapse/issues/19165 but unconfirmed whether this has any effect. To explain the fix, see the [*Deferred callbacks*](3b59ac3b69/docs/log_contexts.md (deferred-callbacks)) section of our logcontext docs for more info (specifically using solution 2).	2025-11-14 11:21:15 -06:00
Andrew Morgan	8da8d4b4f5	Remove explicit python 3.8/9 skips (#19177) ... Co-authored-by: Devon Hudson <devon.dmytro@gmail.com>	2025-11-14 11:38:39 +00:00
Eric Eastwood	408a05ebbc	Fix potential lost logcontext when PerDestinationQueue.shutdown(...) (#19178) ... Spawning from looking at the logs in https://github.com/element-hq/synapse/issues/19165#issuecomment-3527452941 which mention the `federation_transaction_transmission_loop`. I don't think it's the source of the lost logcontext that person in the issue is experiencing because this only applies when you try to `shutdown` the homeserver. Problem code introduced in https://github.com/element-hq/synapse/pull/18828 To explain the fix, see the [*Deferred callbacks*](3b59ac3b69/docs/log_contexts.md (deferred-callbacks)) section of our logcontext docs for more info (specifically using solution 2).	2025-11-13 15:17:15 -06:00
Devon Hudson	5d545d1626	Remove support for PostgreSQL 13 (#19170) ... This PR removes support for PostgreSQL 13 as it is deprecated (tomorrow). Uses https://github.com/element-hq/synapse/pull/18034 as a reference of where to look, and also found a few other places that needed updating. I didn't see anywhere in Complement that needs updating. There is a companion Sytest PR deprecating psql13 over there: https://github.com/matrix-org/sytest/pull/1418 ### Pull Request Checklist <!-- Please read https://element-hq.github.io/synapse/latest/development/contributing_guide.html before submitting your pull request --> * [X] Pull request is based on the develop branch * [X] Pull request includes a [changelog file](https://element-hq.github.io/synapse/latest/development/contributing_guide.html#changelog). The entry should: - Be a short description of your change which makes sense to users. "Fixed a bug that prevented receiving messages from other servers." instead of "Moved X method from `EventStore` to `EventWorkerStore`.". - Use markdown where necessary, mostly for `code blocks`. - End with either a period (.) or an exclamation mark (!). - Start with a capital letter. - Feel free to credit yourself, by adding a sentence "Contributed by @github_username." or "Contributed by [Your Name]." to the end of the entry. * [X] [Code style](https://element-hq.github.io/synapse/latest/code_style.html) is correct (run the [linters](https://element-hq.github.io/synapse/latest/development/contributing_guide.html#run-the-linters))	2025-11-13 19:38:59 +00:00
Andrew Ferrazzutti	9e23cded8f	MSC4140: Remove auth from delayed event management endpoints (#19152) ... As per recent proposals in MSC4140, remove authentication for restarting/cancelling/sending a delayed event, and give each of those actions its own endpoint. (The original consolidated endpoint is still supported for backwards compatibility.) ### Pull Request Checklist <!-- Please read https://element-hq.github.io/synapse/latest/development/contributing_guide.html before submitting your pull request --> * [x] Pull request is based on the develop branch * [x] Pull request includes a [changelog file](https://element-hq.github.io/synapse/latest/development/contributing_guide.html#changelog). The entry should: - Be a short description of your change which makes sense to users. "Fixed a bug that prevented receiving messages from other servers." instead of "Moved X method from `EventStore` to `EventWorkerStore`.". - Use markdown where necessary, mostly for `code blocks`. - End with either a period (.) or an exclamation mark (!). - Start with a capital letter. - Feel free to credit yourself, by adding a sentence "Contributed by @github_username." or "Contributed by [Your Name]." to the end of the entry. * [x] [Code style](https://element-hq.github.io/synapse/latest/code_style.html) is correct (run the [linters](https://element-hq.github.io/synapse/latest/development/contributing_guide.html#run-the-linters)) --------- Co-authored-by: Half-Shot <will@half-shot.uk>	2025-11-13 18:56:17 +00:00
Eric Eastwood	4494cc0694	Point out which event caused the exception when checking MSC4293 redactions (#19169) ... Spawning from looking at the stack trace in https://github.com/element-hq/synapse/issues/19128 which has no useful information on how to dig in deeper.	2025-11-13 12:08:22 -06:00
Eric Eastwood	47d24bd234	Add debug logs to track Clock callbacks (#19173) ... Spawning from wanting to find the source of a `Clock.call_later()` callback, https://github.com/element-hq/synapse/issues/19165	2025-11-13 12:07:23 -06:00
Eric Eastwood	b9dda0ff22	Restore printing sentinel for log_record.request (#19172) ... This was unintentionally changed in https://github.com/element-hq/synapse/pull/19068. There is no real bug here. Without this PR, we just printed an empty string for the `sentinel` logcontext whereas the prior art behavior was to print `sentinel` which this PR restores. Found while staring at the logs in https://github.com/element-hq/synapse/issues/19165 ### Reproduction strategy 1. Configure Synapse with [logging](df802882bb/docs/sample_log_config.yaml) 1. Start Synapse: `poetry run synapse_homeserver --config-path homeserver.yaml` 1. Notice the `asyncio - 64 - DEBUG - - Using selector: EpollSelector` log line (notice empty string `- -`) 1. With this PR, the log line will be `asyncio - 64 - DEBUG - sentinel - Using selector: EpollSelector` (notice `sentinel`)	2025-11-13 09:57:56 -06:00
reivilibre	938c97416d	Add a shortcut return when there are no events to purge. (#19093) ... Fixes: #13417 --------- Signed-off-by: Olivier 'reivilibre <oliverw@matrix.org>	2025-11-13 14:26:37 +00:00
Jason Volk	e67ba69f20	Provide same servers list in s2s alias results as c2s. (#18970) ... Signed-off-by: Jason Volk <jason@zemos.net> Co-authored-by: dasha_uwu <dasha@linuxping.win>	2025-11-13 11:12:03 +00:00
Erik Johnston	df802882bb	Further reduce cardinality of metrics on event persister (#19168) ... Follow on from #19133 to only track a subset of event types.	2025-11-12 16:40:38 +00:00
Andrew Ferrazzutti	97cc05d1d8	Bump lower bounds of unit test exclusive dependencies for Python 3.10 support (#19167) ... Co-authored-by: Andrew Morgan <andrew@amorgan.xyz> Co-authored-by: Andrew Morgan <1342360+anoadragon453@users.noreply.github.com>	2025-11-12 16:37:14 +00:00
Erik Johnston	3ba3c7fe7d	Reduce cardinality of metrics on event persister (#19133) ... This reduces the size of metrics by ~80%. Responding with the metrics takes significant amounts of time.	2025-11-12 13:41:58 +00:00
Andrew Morgan	9722e05479	Update pyproject.toml to be compatible with other standard Python packaging tools (#19137)	2025-11-12 12:37:42 +00:00
Andrew Morgan	2c91896070	Run trial tests on Python 3.14 in PRs (#19135)	2025-11-12 12:02:50 +00:00
Andrew Morgan	9c67666eb8	Merge branch 'master' of github.com:element-hq/synapse into develop	2025-11-11 10:36:56 +00:00
Andrew Morgan	8feb862ff6	1.142.0	2025-11-11 09:46:48 +00:00
dependabot[bot]	03e873e77a	Bump cryptography from 43.0.3 to 45.0.7 (#19159) ... Bumps [cryptography](https://github.com/pyca/cryptography) from 43.0.3 to 45.0.7. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst">cryptography's changelog</a>.</em></p> <blockquote> <p>45.0.7 - 2025-09-01</p> <pre><code> * Added a function to support an upcoming ``pyOpenSSL`` release. <p>.. _v45-0-6:</p> <p>45.0.6 - 2025-08-05<br /> </code></pre></p> <ul> <li>Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.5.2.</li> </ul> <p>.. _v45-0-5:</p> <p>45.0.5 - 2025-07-02</p> <pre><code> * Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.5.1. <p>.. _v45-0-4:</p> <p>45.0.4 - 2025-06-09<br /> </code></pre></p> <ul> <li>Fixed decrypting PKCS#8 files encrypted with SHA1-RC4. (This is not considered secure, and is supported only for backwards compatibility.)</li> </ul> <p>.. _v45-0-3:</p> <p>45.0.3 - 2025-05-25</p> <pre><code> * Fixed decrypting PKCS#8 files encrypted with long salts (this impacts keys encrypted by Bouncy Castle). * Fixed decrypting PKCS#8 files encrypted with DES-CBC-MD5. While wildly insecure, this remains prevalent. <p>.. _v45-0-2:</p> <p>45.0.2 - 2025-05-17<br /> </code></pre></p> <ul> <li>Fixed using <code>mypy</code> with <code>cryptography</code> on older versions of Python.</li> </ul> <p>.. _v45-0-1:</p> <p>45.0.1 - 2025-05-17</p> <pre><code> * Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.5.0. &lt;/tr&gt;&lt;/table&gt; </code></pre> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="f52a3e1496"><code>f52a3e1</code></a> prep for a 45.0.7 release (<a href="https://redirect.github.com/pyca/cryptography/issues/13378">#13378</a>)</li> <li><a href="66198c23c9"><code>66198c2</code></a> Bump for release (<a href="https://redirect.github.com/pyca/cryptography/issues/13249">#13249</a>)</li> <li><a href="3e53a233b6"><code>3e53a23</code></a> Bump for 45.0.5 release (<a href="https://redirect.github.com/pyca/cryptography/issues/13135">#13135</a>)</li> <li><a href="678c0c59f7"><code>678c0c5</code></a> prepare for 45.0.4 release (<a href="https://redirect.github.com/pyca/cryptography/issues/13058">#13058</a>)</li> <li><a href="5038495987"><code>5038495</code></a> backports for 45.0.3 release (<a href="https://redirect.github.com/pyca/cryptography/issues/12979">#12979</a>)</li> <li><a href="f81c07535d"><code>f81c075</code></a> Backport mypy fixes for release (<a href="https://redirect.github.com/pyca/cryptography/issues/12930">#12930</a>)</li> <li><a href="8ea28e0bc7"><code>8ea28e0</code></a> bump for 45.0.1 (<a href="https://redirect.github.com/pyca/cryptography/issues/12922">#12922</a>)</li> <li><a href="67840977c9"><code>6784097</code></a> bump for 45 release (<a href="https://redirect.github.com/pyca/cryptography/issues/12886">#12886</a>)</li> <li><a href="2d9c1c9cbe"><code>2d9c1c9</code></a> bump MSRV to 1.74 (<a href="https://redirect.github.com/pyca/cryptography/issues/12919">#12919</a>)</li> <li><a href="6c18874cc2"><code>6c18874</code></a> Bump BoringSSL, OpenSSL, AWS-LC in CI (<a href="https://redirect.github.com/pyca/cryptography/issues/12918">#12918</a>)</li> <li>Additional commits viewable in <a href="https://github.com/pyca/cryptography/compare/43.0.3...45.0.7">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-11-11 00:01:47 +00:00
dependabot[bot]	2e66cf10e8	Bump types-netaddr from 1.3.0.20240530 to 1.3.0.20251108 (#19160) ... Bumps [types-netaddr](https://github.com/typeshed-internal/stub_uploader) from 1.3.0.20240530 to 1.3.0.20251108. <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/typeshed-internal/stub_uploader/commits">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-11-10 23:39:03 +00:00