Skip to content

MSC4284: Policy Servers - #4284

Merged
turt2live merged 33 commits into
mainfrom
travis/msc/placeholder/00-apr072025
Feb 22, 2026
Merged

MSC4284: Policy Servers#4284
turt2live merged 33 commits into
mainfrom
travis/msc/placeholder/00-apr072025

Conversation

@turt2live

@turt2live turt2live commented Apr 7, 2025

Copy link
Copy Markdown
Member

Rendered

Disclosure: I am Director of Standards Development at The Matrix.org Foundation C.I.C., Matrix Spec Core Team (SCT) member, employed by Element, and operate the t2bot.io service. This proposal is written and published as a Trust & Safety team member allocated in full to the Foundation.


SCT Stuff:

MSC Checklist

FCP tickyboxes

@turt2live turt2live added proposal A matrix spec change proposal. Process state. kind:core MSC which is critical to the protocol's success needs-implementation This MSC does not have a qualifying implementation for the SCT to review. The MSC cannot enter FCP. A-Safety labels Apr 7, 2025
@turt2live turt2live changed the title [WIP] MSC4284: Placeholder [WIP] MSC4284: Policy Servers Apr 16, 2025
@turt2live turt2live added A-Federation Server-to-Server API (federation) A-Client Server Client-Server API proposal A matrix spec change proposal. Process state. and removed proposal A matrix spec change proposal. Process state. labels Apr 16, 2025
Comment thread proposals/4284-policy-servers.md
Comment thread proposals/4284-policy-servers.md
Comment thread proposals/4284-policy-servers.md Outdated
Comment thread proposals/4284-policy-servers.md Outdated
Comment thread proposals/4284-policy-servers.md Outdated
Comment thread proposals/4284-policy-servers.md Outdated
Comment thread proposals/4284-policy-servers.md
Comment thread proposals/4284-policy-servers.md Outdated
Comment thread proposals/4284-policy-servers.md Outdated
Comment thread proposals/4284-policy-servers.md Outdated
@mimi89999

This comment was marked as duplicate.

Comment thread proposals/4284-policy-servers.md
Comment thread proposals/4284-policy-servers.md Outdated
@vindicatorr

This comment was marked as duplicate.

Comment thread proposals/4284-policy-servers.md Outdated
Comment thread proposals/4284-policy-servers.md
Comment thread proposals/4284-policy-servers.md Outdated
Comment thread proposals/4284-policy-servers.md Outdated
@turt2live
turt2live deleted the travis/msc/placeholder/00-apr072025 branch February 22, 2026 18:59
@turt2live turt2live added spec-pr-missing MSC is accepted, but missing spec PR. Process state. and removed finished-final-comment-period FCP has finished. Process state. labels Feb 22, 2026
@turt2live turt2live moved this from In FCP to Requires spec writing in Spec Core Team Workflow Feb 22, 2026
@turt2live turt2live self-assigned this Feb 22, 2026
@turt2live

Copy link
Copy Markdown
Member Author

Spec PR: matrix-org/matrix-spec#2332

@turt2live turt2live added spec-pr-in-review A proposal which has been PR'd against the spec and is in review and removed spec-pr-missing MSC is accepted, but missing spec PR. Process state. labels Mar 9, 2026
@turt2live turt2live moved this from Requires spec writing to Requires spec PR review in Spec Core Team Workflow Mar 9, 2026
@turt2live

Copy link
Copy Markdown
Member Author

Merged 🎉

@turt2live turt2live added merged A proposal whose PR has merged into the spec! Process state. and removed spec-pr-in-review A proposal which has been PR'd against the spec and is in review labels Mar 18, 2026
@turt2live turt2live moved this from Requires spec PR review to Merged/Done in Spec Core Team Workflow Mar 18, 2026
msk pushed a commit to msk/pkgsrc that referenced this pull request May 11, 2026
Builds on NetBSD 10 amd64, and builds/tests-ok on NetBSD 9 amd64 using
dependencies from 2025Q2.

NB: A security update to synapse is scheduled for July 22.  Consult
  https://matrix.org/blog/2025/07/security-predisclosure/
for further details.

Those running synapse in production may wish to update to 1.134.0 to
reduce the magnitude of change when updating to the July 22 version
(although that will be a big update regardless).  Note that the usual
pkgsrc pre-commit test is upgrading from the current pkgsrc version
and briefly checking operation.  Therefore, not upgrading has a
theoretical risk of encountering a 1.127.1 to 1.135.0 update bug when
1.127.1 to 134.0 and 1.134.0 to 1.135.0 are ok.

# Synapse 1.134.0 (2025-07-15)

- Support for [MSC4235](matrix-org/matrix-spec-proposals#4235): `via` query param for hierarchy endpoint. Contributed by Krishan (@kfiven). ([\#18070](element-hq/synapse#18070))
- Add `forget_forced_upon_leave` capability as per [MSC4267](matrix-org/matrix-spec-proposals#4267). ([\#18196](element-hq/synapse#18196))
- Add `federated_user_may_invite` spam checker callback which receives the entire invite event. Contributed by @tulir @ Beeper. ([\#18241](element-hq/synapse#18241))

# Synapse 1.133.0 (2025-07-01)

- Add support for the [MSC4260 user report API](matrix-org/matrix-spec-proposals#4260). ([\#18120](element-hq/synapse#18120))

# Synapse 1.132.0 (2025-06-17)

- Add support for [MSC4155](matrix-org/matrix-spec-proposals#4155) Invite Filtering. ([\#18288](element-hq/synapse#18288))
- Add experimental `user_may_send_state_event` module API callback. ([\#18455](element-hq/synapse#18455))
- Add experimental `get_media_config_for_user` and `is_user_allowed_to_upload_media_of_size` module API callbacks that allow overriding of media repository maximum upload size. ([\#18457](element-hq/synapse#18457))
- Add experimental `get_ratelimit_override_for_user` module API callback that allows overriding of per-user ratelimits. ([\#18458](element-hq/synapse#18458))
- Pass `room_config` argument to `user_may_create_room` spam checker module callback. ([\#18486](element-hq/synapse#18486))
- Support configuration of default and extra user types. ([\#18456](element-hq/synapse#18456))
- Successful requests to `/_matrix/app/v1/ping` will now force Synapse to reattempt delivering transactions to appservices. ([\#18521](element-hq/synapse#18521))
- Support the import of the `RatelimitOverride` type from `synapse.module_api` in modules and rename `messages_per_second` to `per_second`. ([\#18513](element-hq/synapse#18513))

# Synapse 1.131.0 (2025-06-03)

- Add `msc4263_limit_key_queries_to_users_who_share_rooms` config option as per [MSC4263](matrix-org/matrix-spec-proposals#4263). ([\#18180](element-hq/synapse#18180))
- Add option to allow registrations that begin with `_`. Contributed by `_` (@hex5f). ([\#18262](element-hq/synapse#18262))
- Include room ID in response to the [Room Deletion Status Admin API](https://element-hq.github.io/synapse/latest/admin_api/rooms.html#status-of-deleting-rooms). ([\#18318](element-hq/synapse#18318))
- Add support for calling Policy Servers ([MSC4284](matrix-org/matrix-spec-proposals#4284)) to mark events as spam. ([\#18387](element-hq/synapse#18387))

# Synapse 1.130.0 (2025-05-20)

- Add an Admin API endpoint `GET /_synapse/admin/v1/scheduled_tasks`  to fetch scheduled tasks. ([\#18214](element-hq/synapse#18214))
- Add config option `user_directory.exclude_remote_users` which, when enabled, excludes remote users from user directory search results. ([\#18300](element-hq/synapse#18300))
- Add support for handling `GET /devices/` on workers. ([\#18355](element-hq/synapse#18355))


# Synapse 1.129.0 (2025-05-06)

- Add `passthrough_authorization_parameters` in OIDC configuration to allow passing parameters to the authorization grant URL. ([\#18232](element-hq/synapse#18232))
- Add `total_event_count`, `total_message_count`, and `total_e2ee_event_count` fields to the homeserver usage statistics. ([\#18260](element-hq/synapse#18260))

# Synapse 1.128.0 (2025-04-08)

- Add an access token introspection cache to make Matrix Authentication Service integration ([MSC3861](matrix-org/matrix-spec-proposals#3861)) more efficient. ([\#18231](element-hq/synapse#18231))
- Add background job to clear unreferenced state groups. ([\#18254](element-hq/synapse#18254))
- Hashes of media files are now tracked by Synapse. Media quarantines will now apply to all files with the same hash. ([\#18277](element-hq/synapse#18277), [\#18302](element-hq/synapse#18302), [\#18296](element-hq/synapse#18296))
netbsd-srcmastr pushed a commit to NetBSD/pkgsrc that referenced this pull request May 13, 2026
chat/matrix-synapse: Update package in anticipation of security fix

Revisions pulled up:
- chat/matrix-synapse/Makefile                                  1.112
- chat/matrix-synapse/PLIST                                     1.59
- chat/matrix-synapse/cargo-depends.mk                          1.27
- chat/matrix-synapse/distinfo                                  1.80

---
   Module Name:    pkgsrc
   Committed By:   gdt
   Date:           Thu Jul 17 11:24:44 UTC 2025

   Modified Files:
           pkgsrc/chat/matrix-synapse: Makefile PLIST cargo-depends.mk distinfo

   Log Message:
   chat/matrix-synapse: Update to 1.134.0

   Builds on NetBSD 10 amd64, and builds/tests-ok on NetBSD 9 amd64 using
   dependencies from 2025Q2.

   NB: A security update to synapse is scheduled for July 22.  Consult
     https://matrix.org/blog/2025/07/security-predisclosure/
   for further details.

   Those running synapse in production may wish to update to 1.134.0 to
   reduce the magnitude of change when updating to the July 22 version
   (although that will be a big update regardless).  Note that the usual
   pkgsrc pre-commit test is upgrading from the current pkgsrc version
   and briefly checking operation.  Therefore, not upgrading has a
   theoretical risk of encountering a 1.127.1 to 1.135.0 update bug when
   1.127.1 to 134.0 and 1.134.0 to 1.135.0 are ok.

   # Synapse 1.134.0 (2025-07-15)

   - Support for [MSC4235](matrix-org/matrix-spec-proposals#4235): `via` query param for hierarchy endpoint. Contributed by Krishan (@kfiven).
   ([\#18070](element-hq/synapse#18070))
   - Add `forget_forced_upon_leave` capability as per [MSC4267](matrix-org/matrix-spec-proposals#4267). ([\#18196](element-hq/synapse#18196))
   - Add `federated_user_may_invite` spam checker callback which receives the entire invite event. Contributed by @tulir @ Beeper. ([\#18241](element-hq/synapse#18241))

   # Synapse 1.133.0 (2025-07-01)

   - Add support for the [MSC4260 user report API](matrix-org/matrix-spec-proposals#4260). ([\#18120](element-hq/synapse#18120))

   # Synapse 1.132.0 (2025-06-17)

   - Add support for [MSC4155](matrix-org/matrix-spec-proposals#4155) Invite Filtering. ([\#18288](element-hq/synapse#18288))
   - Add experimental `user_may_send_state_event` module API callback. ([\#18455](element-hq/synapse#18455))
   - Add experimental `get_media_config_for_user` and `is_user_allowed_to_upload_media_of_size` module API callbacks that allow overriding of media repository maximum upload size.
   ([\#18457](element-hq/synapse#18457))
   - Add experimental `get_ratelimit_override_for_user` module API callback that allows overriding of per-user ratelimits. ([\#18458](element-hq/synapse#18458))
   - Pass `room_config` argument to `user_may_create_room` spam checker module callback. ([\#18486](element-hq/synapse#18486))
   - Support configuration of default and extra user types. ([\#18456](element-hq/synapse#18456))
   - Successful requests to `/_matrix/app/v1/ping` will now force Synapse to reattempt delivering transactions to appservices. ([\#18521](element-hq/synapse#18521))
   - Support the import of the `RatelimitOverride` type from `synapse.module_api` in modules and rename `messages_per_second` to `per_second`.
   ([\#18513](element-hq/synapse#18513))

   # Synapse 1.131.0 (2025-06-03)

   - Add `msc4263_limit_key_queries_to_users_who_share_rooms` config option as per [MSC4263](matrix-org/matrix-spec-proposals#4263).
   ([\#18180](element-hq/synapse#18180))
   - Add option to allow registrations that begin with `_`. Contributed by `_` (@hex5f). ([\#18262](element-hq/synapse#18262))
   - Include room ID in response to the [Room Deletion Status Admin API](https://element-hq.github.io/synapse/latest/admin_api/rooms.html#status-of-deleting-rooms).
   ([\#18318](element-hq/synapse#18318))
   - Add support for calling Policy Servers ([MSC4284](matrix-org/matrix-spec-proposals#4284)) to mark events as spam.
   ([\#18387](element-hq/synapse#18387))

   # Synapse 1.130.0 (2025-05-20)

   - Add an Admin API endpoint `GET /_synapse/admin/v1/scheduled_tasks`  to fetch scheduled tasks. ([\#18214](element-hq/synapse#18214))
   - Add config option `user_directory.exclude_remote_users` which, when enabled, excludes remote users from user directory search results. ([\#18300](element-hq/synapse#18300))
   - Add support for handling `GET /devices/` on workers. ([\#18355](element-hq/synapse#18355))

   # Synapse 1.129.0 (2025-05-06)

   - Add `passthrough_authorization_parameters` in OIDC configuration to allow passing parameters to the authorization grant URL. ([\#18232](element-hq/synapse#18232))
   - Add `total_event_count`, `total_message_count`, and `total_e2ee_event_count` fields to the homeserver usage statistics. ([\#18260](element-hq/synapse#18260))

   # Synapse 1.128.0 (2025-04-08)

   - Add an access token introspection cache to make Matrix Authentication Service integration ([MSC3861](matrix-org/matrix-spec-proposals#3861)) more efficient.
   ([\#18231](element-hq/synapse#18231))
   - Add background job to clear unreferenced state groups. ([\#18254](element-hq/synapse#18254))
   - Hashes of media files are now tracked by Synapse. Media quarantines will now apply to all files with the same hash. ([\#18277](element-hq/synapse#18277),
   [\#18302](element-hq/synapse#18302), [\#18296](element-hq/synapse#18296))
jperkin pushed a commit to TritonDataCenter/pkgsrc that referenced this pull request May 14, 2026
Builds on NetBSD 10 amd64, and builds/tests-ok on NetBSD 9 amd64 using
dependencies from 2025Q2.

NB: A security update to synapse is scheduled for July 22.  Consult
  https://matrix.org/blog/2025/07/security-predisclosure/
for further details.

Those running synapse in production may wish to update to 1.134.0 to
reduce the magnitude of change when updating to the July 22 version
(although that will be a big update regardless).  Note that the usual
pkgsrc pre-commit test is upgrading from the current pkgsrc version
and briefly checking operation.  Therefore, not upgrading has a
theoretical risk of encountering a 1.127.1 to 1.135.0 update bug when
1.127.1 to 134.0 and 1.134.0 to 1.135.0 are ok.

# Synapse 1.134.0 (2025-07-15)

- Support for [MSC4235](matrix-org/matrix-spec-proposals#4235): `via` query param for hierarchy endpoint. Contributed by Krishan (@kfiven). ([\#18070](element-hq/synapse#18070))
- Add `forget_forced_upon_leave` capability as per [MSC4267](matrix-org/matrix-spec-proposals#4267). ([\#18196](element-hq/synapse#18196))
- Add `federated_user_may_invite` spam checker callback which receives the entire invite event. Contributed by @tulir @ Beeper. ([\#18241](element-hq/synapse#18241))

# Synapse 1.133.0 (2025-07-01)

- Add support for the [MSC4260 user report API](matrix-org/matrix-spec-proposals#4260). ([\#18120](element-hq/synapse#18120))

# Synapse 1.132.0 (2025-06-17)

- Add support for [MSC4155](matrix-org/matrix-spec-proposals#4155) Invite Filtering. ([\#18288](element-hq/synapse#18288))
- Add experimental `user_may_send_state_event` module API callback. ([\#18455](element-hq/synapse#18455))
- Add experimental `get_media_config_for_user` and `is_user_allowed_to_upload_media_of_size` module API callbacks that allow overriding of media repository maximum upload size. ([\#18457](element-hq/synapse#18457))
- Add experimental `get_ratelimit_override_for_user` module API callback that allows overriding of per-user ratelimits. ([\#18458](element-hq/synapse#18458))
- Pass `room_config` argument to `user_may_create_room` spam checker module callback. ([\#18486](element-hq/synapse#18486))
- Support configuration of default and extra user types. ([\#18456](element-hq/synapse#18456))
- Successful requests to `/_matrix/app/v1/ping` will now force Synapse to reattempt delivering transactions to appservices. ([\#18521](element-hq/synapse#18521))
- Support the import of the `RatelimitOverride` type from `synapse.module_api` in modules and rename `messages_per_second` to `per_second`. ([\#18513](element-hq/synapse#18513))

# Synapse 1.131.0 (2025-06-03)

- Add `msc4263_limit_key_queries_to_users_who_share_rooms` config option as per [MSC4263](matrix-org/matrix-spec-proposals#4263). ([\#18180](element-hq/synapse#18180))
- Add option to allow registrations that begin with `_`. Contributed by `_` (@hex5f). ([\#18262](element-hq/synapse#18262))
- Include room ID in response to the [Room Deletion Status Admin API](https://element-hq.github.io/synapse/latest/admin_api/rooms.html#status-of-deleting-rooms). ([\#18318](element-hq/synapse#18318))
- Add support for calling Policy Servers ([MSC4284](matrix-org/matrix-spec-proposals#4284)) to mark events as spam. ([\#18387](element-hq/synapse#18387))

# Synapse 1.130.0 (2025-05-20)

- Add an Admin API endpoint `GET /_synapse/admin/v1/scheduled_tasks`  to fetch scheduled tasks. ([\#18214](element-hq/synapse#18214))
- Add config option `user_directory.exclude_remote_users` which, when enabled, excludes remote users from user directory search results. ([\#18300](element-hq/synapse#18300))
- Add support for handling `GET /devices/` on workers. ([\#18355](element-hq/synapse#18355))


# Synapse 1.129.0 (2025-05-06)

- Add `passthrough_authorization_parameters` in OIDC configuration to allow passing parameters to the authorization grant URL. ([\#18232](element-hq/synapse#18232))
- Add `total_event_count`, `total_message_count`, and `total_e2ee_event_count` fields to the homeserver usage statistics. ([\#18260](element-hq/synapse#18260))

# Synapse 1.128.0 (2025-04-08)

- Add an access token introspection cache to make Matrix Authentication Service integration ([MSC3861](matrix-org/matrix-spec-proposals#3861)) more efficient. ([\#18231](element-hq/synapse#18231))
- Add background job to clear unreferenced state groups. ([\#18254](element-hq/synapse#18254))
- Hashes of media files are now tracked by Synapse. Media quarantines will now apply to all files with the same hash. ([\#18277](element-hq/synapse#18277), [\#18302](element-hq/synapse#18302), [\#18296](element-hq/synapse#18296))
netbsd-srcmastr pushed a commit to NetBSD/pkgsrc that referenced this pull request Jul 7, 2026
Tested on NetBSD 10 amd64 with 2026Q2 environment.

# Synapse 1.156.0 (2026-07-07)

## Features

- Expose [MSC4354 Sticky Events](matrix-org/matrix-spec-proposals#4354) over [MSC4186 (Simplified) Sliding Sync](matrix-org/matrix-spec-proposals#4186). ([\#19591](element-hq/synapse#19591))
- Stabilize support for sending ephemeral events to application services, as per [MSC2409](matrix-org/matrix-spec-proposals#2409). Contributed by @jason-famedly @ Famedly. ([\#19758](element-hq/synapse#19758))
- Include `allowed_room_ids` in the `/summary` client-server API response for rooms with restricted join rules, as required by Matrix 1.15.
  Contributed by @FrenchGithubUser @famedly. ([\#19762](element-hq/synapse#19762))
- [MSC4140: Cancellable delayed events](matrix-org/matrix-spec-proposals#4140): Allow authentication on delayed event management endpoints (such as `/restart`) to bypass ratelimits for unauthenticated requests based on the client IP address. ([\#19794](element-hq/synapse#19794))
- Add new metric `synapse_non_deactivated_user_count` which tracks the number of non-deactivated users in the database, split by `app_service`. ([\#19848](element-hq/synapse#19848))
- The `GET /_matrix/client/unstable/org.matrix.msc1763/retention/configuration` endpoint is now provided when retention
  is enabled and `experimental_features.msc1763_enabled` is enabled, based on
  [MSC1763](matrix-org/matrix-spec-proposals#1763). ([\#19853](element-hq/synapse#19853))
- Add experimental support for [MSC4491: Invite reasons in room creation](matrix-org/matrix-spec-proposals#4491). ([\#19874](element-hq/synapse#19874))


# Synapse 1.155.0 (2026-06-16)


# Synapse 1.154.0 (2026-06-04)

## Features

- Add support for [MSC4452: Preview URL capabilities API](matrix-org/matrix-spec-proposals#4452) which exposes a `io.element.msc4452.preview_url` capability.
  If `experimental_features.msc4452_enabled` is `true`, the `/_matrix/(client/v1/media|media/v3)/preview_url` endpoint
  now responds with a 403 status code when the capability is disabled. ([\#19715](element-hq/synapse#19715))


# Synapse 1.153.0 (2026-05-19)

## Features

- Make ACLs apply to EDUs per [MSC4163](matrix-org/matrix-spec-proposals#4163). ([\#18475](element-hq/synapse#18475))
- Stabilize [MSC3266: Room summary API](matrix-org/matrix-spec-proposals#3266), removing the experimental config flag `msc3266_enabled`. Contributed by @dasha-uwu. ([\#19720](element-hq/synapse#19720))
- Partial [MSC4311](matrix-org/matrix-spec-proposals#4311) implementation: `m.room.create` is now a required part of stripped `invite_state`/`knock_state` . Contributed by @FrenchGithubUser @famedly. ([\#19722](element-hq/synapse#19722))
- Expose `tombstoned` and `replacement_room` in room details on admin API endpoint `GET /_synapse/admin/v1/rooms/<room_id>`. Contributed by Noah Markert. ([\#19737](element-hq/synapse#19737))


# Synapse 1.152.1 (2026-05-07)


# Synapse 1.152.0 (2026-04-28)

## Features

- Add a ["Listing quarantined media changes" Admin API](https://element-hq.github.io/synapse/latest/admin_api/media_admin_api.html#listing-quarantined-media-changes) for retrieving a paginated record of when media became (un)quarantined. ([\#19558](element-hq/synapse#19558), [\#19677](element-hq/synapse#19677), [\#19694](element-hq/synapse#19694))
- Advertise [MSC4445](matrix-org/matrix-spec-proposals#4445) sync timeline order in `unstable_features`. ([\#19642](element-hq/synapse#19642))
- Report the Rust compiler version used in the Prometheus metrics. Contributed by Noah Markert. ([\#19643](element-hq/synapse#19643))
- Passthrough 'article' and 'profile' OpenGraph metadata on URL preview requests. ([\#19659](element-hq/synapse#19659))
- Add a way to re-sign local events with a new signing key. ([\#19668](element-hq/synapse#19668))
- Support [MSC4450: Identity Provider selection for User-Interactive Authentication with Legacy Single Sign-On](matrix-org/matrix-spec-proposals#4450). ([\#19693](element-hq/synapse#19693))
- Add experimental support for [MSC4242](matrix-org/matrix-spec-proposals#4242): State DAGs. Excludes federation support. ([\#19424](element-hq/synapse#19424))
- Adds [Admin API](https://element-hq.github.io/synapse/latest/usage/administration/admin_api/index.html) endpoints to
  list, fetch and delete user reports. ([\#19657](element-hq/synapse#19657))
- Reduce database disk space usage by pruning old rows from `device_lists_changes_in_room`. ([\#19473](element-hq/synapse#19473), [\#19709](element-hq/synapse#19709))


# Synapse 1.151.0 (2026-04-07)

## Features

- Add stable support for [MSC4284](matrix-org/matrix-spec-proposals#4284) Policy Servers. ([\#19503](element-hq/synapse#19503))
- Update and stabilize support for [MSC2666](matrix-org/matrix-spec-proposals#2666): Get rooms in common with another user. Contributed by @tulir @ Beeper. ([\#19511](element-hq/synapse#19511))
- Updated experimental support for [MSC4388: Secure out-of-band channel for sign in with QR](matrix-org/matrix-spec-proposals#4388). ([\#19573](element-hq/synapse#19573))
- Stabilize `room_version` and `encryption` fields in the space/room `/hierarchy` API (part of [MSC3266](matrix-org/matrix-spec-proposals#3266)). ([\#19576](element-hq/synapse#19576))
- Introduce a [configuration option](https://element-hq.github.io/synapse/latest/usage/configuration/config_documentation.html#matrix_authentication_service) to allow using HTTP/2 over plaintext when Synapse connects to Matrix Authentication Service. ([\#19586](element-hq/synapse#19586))

## Deprecations and Removals

- Remove support for [MSC3852: Expose user agent information on Device](matrix-org/matrix-spec-proposals#3852) as the MSC was closed. ([\#19430](element-hq/synapse#19430))


# Synapse 1.150.0 (2026-03-24)

## Features

- Add experimental support for the [MSC4370](matrix-org/matrix-spec-proposals#4370) Federation API `GET /extremities` endpoint. ([\#19314](element-hq/synapse#19314))
- [MSC4140: Cancellable delayed events](matrix-org/matrix-spec-proposals#4140): When persisting a delayed event to the timeline, include its `delay_id` in the event's `unsigned` section in `/sync` responses to the event sender. ([\#19479](element-hq/synapse#19479))
- Expose [MSC4354 Sticky Events](matrix-org/matrix-spec-proposals#4354) over the legacy (v3) /sync API. ([\#19487](element-hq/synapse#19487))
- When Matrix Authentication Service (MAS) integration is enabled, allow MAS to set the user locked status in Synapse. ([\#19554](element-hq/synapse#19554))
eleboucher pushed a commit to eleboucher/homelab that referenced this pull request Jul 12, 2026
…inuwuity (v0.5.10 ➔ v26.6.1) (#1541)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [forgejo.ellis.link/continuwuation/continuwuity](https://forgejo.ellis.link/continuwuation/continuwuity) | major | `v0.5.10-maxperf` → `v26.6.1-maxperf` |

---

### Release Notes

<details>
<summary>continuwuation/continuwuity (forgejo.ellis.link/continuwuation/continuwuity)</summary>

### [`v26.6.1`](https://forgejo.ellis.link/continuwuation/continuwuity/releases/tag/v26.6.1)

[Compare Source](https://forgejo.ellis.link/continuwuation/continuwuity/compare/v26.6.0...v26.6.1)

*Continuwuity is a community-driven Matrix chat server, designed to be efficient and easy to run*

> EDU stands for Evil Data Unit

That time again, already? This is a **bugfix release** that hashes over some bugs that were found shortly after releasing [v26.6.0](https://forgejo.ellis.link/continuwuation/continuwuity/releases/tag/v26.6.0). It is recommended all deployments update as soon as possible, especially if they are using OIDC.

##### Features

- Added enforcement for new federated invite checks and corrected a bunch of related spec compliance issues along the way. Contributed by [@&#8203;nex](https://github.com/nex). ([#&#8203;1952](https://github.com/continuwuation/continuwuity/issues/1952))

##### Bugfixes

- Fixed existing accounts failing to link when logging in with OIDC if `prompt_for_localpart` was `false`. ([#&#8203;1942](https://github.com/continuwuation/continuwuity/issues/1942))
- Authentication is no longer required on the `/_matrix/client/v3/account/3pid/email/requestToken` endpoint. ([#&#8203;1953](https://github.com/continuwuation/continuwuity/issues/1953))
- Fixed newly created rooms failing to sync properly in clients using legacy sync.
- Stopped appservice users from being erroneously marked as deactivated during a 26.6 database migration.
- Whitespace will now automatically be trimmed from the start and end of the `global.oauth.oidc.client_secret_file`.

##### Incompatible changes

- The new validation checks performed as part of [#&#8203;1952](https://github.com/continuwuation/continuwuity/issues/1952) will prevent any Continuwuity server that is not up to date from sending federated invites to up-to-date servers due to spec compliance issues in prior versions. If this causes problems for you, you should downgrade or just remain on the previous version. Local invites are unaffected.

<small>woof</small>

### [`v26.6.0`](https://forgejo.ellis.link/continuwuation/continuwuity/releases/tag/v26.6.0)

[Compare Source](https://forgejo.ellis.link/continuwuation/continuwuity/compare/v0.5.10...v26.6.0)

<img src="/attachments/d394b702-29fd-481b-b11e-87d516d0d1be" height=200>
<br><br>

*Continuwuity is a community-driven Matrix chat server, designed to be efficient and easy to run*

> this PR makes performance and stability WORSE. we did this because we are EVIL.

Hello friends! It's been a while. Almost three months, in fact, but we've been busy. I'm not sure how to convey how major this release is, and how excited we are for you all to get to play with it. We've changed more than thirty five thousand lines of code - a third of the codebase - and brought you some incredible features since our last release, including some of our most highly requested features ever. To mark this milestone, we've changed our versioning scheme! Continuwuity is officially out of the zerover tarpit.

In compatible clients, you'll notice a new login and registration screen. This is our newly introduced support for OAuth login, also referred to as next-generation authentication. This means it's finally possible to register new accounts in Element X! We've also [**added support for Single Sign On**](https://continuwuity.org/guides/oidc) using OpenID Connect-compatible identity providers, and **have removed support for LDAP** per [#&#8203;1701](https://forgejo.ellis.link/continuwuation/continuwuity/issues/1701).

We've fixed a longstanding design flaw with our legacy sync code which should massively reduce database sizes for old deployments and slow database growth for new ones.

We've also got an incredible amount of invisible improvements! Many improvements have been made to federation to make it faster and more reliable. You're much less likely to experience a state reset. Room upgrades are smoother and more reliable. Synchronisation with clients is more correct and reliable. Unable to Decrypt errors should be less likely when you recive lots of messages while offline. Policy server support has been updated.

Server administrators may wish to configure the new `request_ip_source` option to set how Continuwuity determines the client's IP address.

Thanks to [@&#8203;julian45](https://github.com/julian45), our Fedora RPM packages have been replaced by packages in the [Terra](https://terrapkg.com/) repository and the [OpenSUSE Build Service](https://build.opensuse.org/package/show/home:julian45/continuwuity). This means that Continuwuity is now available for EL and OpenSUSE distributions. To use these packages, please follow [the new RPM guide](https://continuwuity.org/deploying/rpm.html). **Users on the old `forgejo.ellis.link` RPM repositories must migrate to the new packages**.

> \[!NOTE]
> Updating to this release is one-way, as it includes database migrations that make it incompatible with the 0.5.x series.

##### Features

- Added support for linking an external identity provider with OIDC. Contributed by [@&#8203;ginger](https://github.com/ginger). ([#&#8203;765](https://github.com/continuwuation/continuwuity/issues/765))
- Updated [MSC4284: Policy Servers](matrix-org/matrix-spec-proposals#4284) implementation to support the newly stabilised proposal. Contributed by [@&#8203;nex](https://github.com/nex). ([#&#8203;1487](https://github.com/continuwuation/continuwuity/issues/1487))
- Added config option for default room ACLs. Contributed by [@&#8203;eve](https://github.com/eve). ([#&#8203;1691](https://github.com/continuwuation/continuwuity/issues/1691))
- Added support for fallback encryption keys. ([#&#8203;1710](https://github.com/continuwuation/continuwuity/issues/1710))
- Add `!admin users reject-all-invites` to clean invite spam ([#&#8203;1741](https://github.com/continuwuation/continuwuity/issues/1741))
- Implemented event rejection, which should resolve and prevent future netsplits of the kinds observed
  within some Continuwuity rooms.
  Also resolved several bugs related to both soft-failing events, and event backfilling, which should
  improve state resolution stability.
  The `!admin debug get-pdu` command was updated to disambiguate event acceptance status, and
  `!admin debug show-auth-chain` was added to visually display event auth chains, which may assist
  developers in debugging strangely complex events.

  Contributed by [@&#8203;nex](https://github.com/nex). ([#&#8203;1747](https://github.com/continuwuation/continuwuity/issues/1747))
- Added full support for [MSC4168: Update `m.space.*` state on room upgrade](matrix-org/matrix-spec-proposals#4168). Contributed by [@&#8203;nex](https://github.com/nex). ([#&#8203;1807](https://github.com/continuwuation/continuwuity/issues/1807))
- Improved the performance and reliability of fetching missing events, improving network partition recovery. Contributed
  by [@&#8203;nex](https://github.com/nex). ([#&#8203;1818](https://github.com/continuwuation/continuwuity/issues/1818))
- Added static builds using Nix, allowing for Continuwuity on musl. During this, we also introduced a `max-perf-haswell` package, separating it from `max-perf`, so you may want to swap to this if you are on NixOS. Contributed by [@&#8203;Henry-Hiles](https://github.com/Henry-Hiles) (QuadRadical). ([#&#8203;1853](https://github.com/continuwuation/continuwuity/issues/1853))
- Added support for MSC4380 invite blocking, which has become part of the Matrix specification in v1.18. Contributed by [@&#8203;nex](https://github.com/nex). ([#&#8203;1875](https://github.com/continuwuation/continuwuity/issues/1875))
- Added `!admin debug get-state-at` command ([#&#8203;1877](https://github.com/continuwuation/continuwuity/issues/1877))
- Added a configuration option to allow choosing a client IP source that is not the TCP connecting IP. Contributed by [@&#8203;nex](https://github.com/nex). ([#&#8203;1931](https://github.com/continuwuation/continuwuity/issues/1931))
- Added support for MSC4466, which allows clients to customize how changes to a user's global profile are propagated. Contributed by [@&#8203;ginger](https://github.com/ginger).
- Added support for Matrix 1.16's `state_after` feature, allowing clients which understand it to sync room state changes more reliably. Contributed by [@&#8203;ginger](https://github.com/ginger).
- Added support for authenticating clients using the new OAuth 2.0 login API. Contributed by [@&#8203;ginger](https://github.com/ginger).
- Appservice device management as outlined in MSC4190 (part of Matrix 1.17) is now fully supported. Contributed by [@&#8203;ginger](https://github.com/ginger).
- Users may now be forbidden from deactivating their own accounts with the new `allow_deactivation` config option. Contributed by [@&#8203;ginger](https://github.com/ginger).

##### Bugfixes

- Adjusted legacy sync logic to allow the `roomsynctoken_shortstatehash` database column to be dropped, massively reducing database sizes, especially for old deployments. Contributed by [@&#8203;ginger](https://github.com/ginger). ([#&#8203;917](https://github.com/continuwuation/continuwuity/issues/917))
- Fixed a bug that caused the server to drop events during processing if several events for the same room were sent in a singular transaction. Contributed by [@&#8203;nex](https://github.com/nex). ([#&#8203;1711](https://github.com/continuwuation/continuwuity/issues/1711))
- fix `!admin query account-data account-data-get` not returning the content ([#&#8203;1742](https://github.com/continuwuation/continuwuity/issues/1742))
- Fixed an issue where Continuwuity would only advertise support for the unstable endpoint for Mutual Rooms (MSC2666), despite only supporting the stable endpoint. Contributed by [@&#8203;Henry-Hiles](https://github.com/Henry-Hiles) (QuadRadical) ([#&#8203;1752](https://github.com/continuwuation/continuwuity/issues/1752))
- Fixed admin commands being ignored when they had leading whitespace before admin commands. Contributed by [@&#8203;kitvonsnookerz](https://github.com/kitvonsnookerz). ([#&#8203;1804](https://github.com/continuwuation/continuwuity/issues/1804))
- Fixed several bugs in the `POST /_matrix/client/v3/rooms/{roomId}/upgrade` endpoint. Contributed by [@&#8203;nex](https://github.com/nex). ([#&#8203;1807](https://github.com/continuwuation/continuwuity/issues/1807))
- Devices which set their presence as "offline" will no longer be considered for presence updates. Contributed by [@&#8203;timedout](https://github.com/timedout).
- Improved invite and join reliability in clients using legacy sync. Contributed by [@&#8203;ginger](https://github.com/ginger)
- The invite recipient's membership event is now included in invite stripped state, which should fix flaky invite display in some clients. Contributed by [@&#8203;ginger](https://github.com/ginger)

##### Improved Documentation

- Add performance tuning documentation. Contributed by [@&#8203;stratself](https://github.com/stratself). ([#&#8203;1498](https://github.com/continuwuation/continuwuity/issues/1498))
- Explain accessing Continuwuity's server console when deployed via Docker. ([#&#8203;1671](https://github.com/continuwuation/continuwuity/issues/1671))
- Clarified in the config that `max_request_size` affects federated media as well. ([#&#8203;1706](https://github.com/continuwuation/continuwuity/issues/1706))
- Added example configuration using caddy-docker-proxy in the livekit setup section of the docs. Contributed by [@&#8203;Cease](https://github.com/Cease) ([#&#8203;1762](https://github.com/continuwuation/continuwuity/issues/1762))
- Updated deployment docs to account for new RPM package availability across more distros. Contributed by [@&#8203;julian45](https://github.com/julian45). ([#&#8203;1912](https://github.com/continuwuation/continuwuity/issues/1912))

##### Deprecations and Removals

- Removed support for LDAP. ([#&#8203;1701](https://github.com/continuwuation/continuwuity/issues/1701))
- Removed support for guest user registration, a little-used and deprecated approach to room previews.
- Removed the `/_conduwuit/` versions of the `local_user_count` and `version` routes. These routes are still accessible under the `/_continuwuity` prefix.
- Support for server-side blurhashing (part of MSC2448) has been removed.
- The deprecated `well_known.rtc_focus_server_urls` config option has been removed. MatrixRTC foci should be configured using the `matrix_rtc.foci` config option.

##### Misc

- [#&#8203;1505](https://github.com/continuwuation/continuwuity/issues/1505), [#&#8203;1829](https://github.com/continuwuation/continuwuity/issues/1829), [#&#8203;1927](https://github.com/continuwuation/continuwuity/issues/1927), [#&#8203;1933](https://github.com/continuwuation/continuwuity/issues/1933), [#&#8203;1934](https://github.com/continuwuation/continuwuity/issues/1934)
- Switched from Continuwuity's fork of Ruma back to upstream Ruma. Contributed by [@&#8203;ginger](https://github.com/ginger).
- The version of Debian that the Docker-based build process uses has been upgraded from Bookworm to Trixie, meaning that standalone binaries now have a minimum glibc of 2.41, and can no longer be used on distro versions from before 2025-01-30

***

##### Get Continuwuity

##### Docker Images

- Forgejo: `forgejo.ellis.link/continuwuation/continuwuity:v26.6.0`

Mirrors (may be outdated):

- Docker Hub: `docker.io/jadedblueeyes/continuwuity:v26.6.0`
- GitHub: `ghcr.io/continuwuity/continuwuity:v26.6.0`
- GitLab: `registry.gitlab.com/continuwuity/continuwuity:v26.6.0`

You can also use the `latest` tag for the most recent release, or `v26.6` for the most recent release in the v26.6 series.

##### First-party Packages

- [Debian packages](https://forgejo.ellis.link/continuwuation/-/packages/debian/continuwuity/26.6.0)

##### Community Packages

[![Packaging status](https://repology.org/badge/vertical-allrepos/continuwuity.svg?minversion=26.6.0)](https://repology.org/project/continuwuity/versions)

##### Binaries

Plain binaries are distributed below. They require glibc and liburing to work - most distributions already have these installed.

Static binaries are built with musl, and will work on any Linux distribution.

##### From Source

See our [deployment documentation](https://continuwuity.org/deploying.html) for instructions on building from source.

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these updates again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDEuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEwMS4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL21ham9yIl19-->

Reviewed-on: https://git.erwanleboucher.dev/eleboucher/homelab/pulls/1541
hbjydev pushed a commit to hbjydev/phoebe that referenced this pull request Jul 13, 2026
…inuwuity (v0.5.10 → v26.6.2) (#255)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [forgejo.ellis.link/continuwuation/continuwuity](https://forgejo.ellis.link/continuwuation/continuwuity) | major | `v0.5.10-maxperf` → `v26.6.2-maxperf` |

---

### Release Notes

<details>
<summary>continuwuation/continuwuity (forgejo.ellis.link/continuwuation/continuwuity)</summary>

### [`v26.6.2`](https://forgejo.ellis.link/continuwuation/continuwuity/releases/tag/v26.6.2)

[Compare Source](https://forgejo.ellis.link/continuwuation/continuwuity/compare/v26.6.1...v26.6.2)

*Continuwuity is a community-driven Matrix chat server, designed to be efficient and easy to run*

> EVERY TIME I FIX AN ERROR TEN MORE APPEAR

One more time for the people in the back! This is a **bugfix release** that fixes a further late-arriving issue with OIDC, as well as some issues which were supposed to be fixed in the previous release but were lost because of a forge hiccup. It is recommended all deployments update as soon as possible, especially if they are using OIDC.

##### Bugfixes

- Fixed the server returning 500 errors if `admin_console_automatic` is enabled and no TTY is available. Contributed by [@&#8203;s1lv3r](https://github.com/s1lv3r). ([#&#8203;1975](https://github.com/continuwuation/continuwuity/issues/1975))
- Fixed `global.oauth.compatibility_mode` being required, despite being ignored, when the `[global.oauth.oidc]` config section is provided.
- Fixed an issue with a migration that could cause user accounts imported from an identity provider to be marked as deactivated when the server started. If you have accounts affected by this issue, use `!admin users reset-password --convert-to-local-account` to reactivate them.

***

##### Get Continuwuity

##### Docker Images

- Forgejo: `forgejo.ellis.link/continuwuation/continuwuity:v26.6.2`

Mirrors (may be outdated):

- Docker Hub: `docker.io/jadedblueeyes/continuwuity:v26.6.2`
- GitHub: `ghcr.io/continuwuity/continuwuity:v26.6.2`
- GitLab: `registry.gitlab.com/continuwuity/continuwuity:v26.6.2`

You can also use the `latest` tag for the most recent release, or `v26.6` for the most recent release in the v26.6 series.

##### First-party Packages

- [Debian packages](https://forgejo.ellis.link/continuwuation/-/packages/debian/continuwuity/26.6.2)

##### Community Packages

[![Packaging status](https://repology.org/badge/vertical-allrepos/continuwuity.svg?minversion=26.6.2)](https://repology.org/project/continuwuity/versions)

##### Binaries

Plain binaries are distributed below. They require glibc and liburing to work - most distributions already have these installed.

Static binaries are built with musl, and will work on any Linux distribution.

##### From Source

See our [deployment documentation](https://continuwuity.org/deploying.html) for instructions on building from source.

### [`v26.6.1`](https://forgejo.ellis.link/continuwuation/continuwuity/releases/tag/v26.6.1)

[Compare Source](https://forgejo.ellis.link/continuwuation/continuwuity/compare/v26.6.0...v26.6.1)

*Continuwuity is a community-driven Matrix chat server, designed to be efficient and easy to run*

> EDU stands for Evil Data Unit

That time again, already? This is a **bugfix release** that hashes over some bugs that were found shortly after releasing [v26.6.0](https://forgejo.ellis.link/continuwuation/continuwuity/releases/tag/v26.6.0). It is recommended all deployments update as soon as possible, especially if they are using OIDC.

##### Features

- Added enforcement for new federated invite checks and corrected a bunch of related spec compliance issues along the way. Contributed by [@&#8203;nex](https://github.com/nex). ([#&#8203;1952](https://github.com/continuwuation/continuwuity/issues/1952))

##### Bugfixes

- Fixed existing accounts failing to link when logging in with OIDC if `prompt_for_localpart` was `false`. ([#&#8203;1942](https://github.com/continuwuation/continuwuity/issues/1942))
- Authentication is no longer required on the `/_matrix/client/v3/account/3pid/email/requestToken` endpoint. ([#&#8203;1953](https://github.com/continuwuation/continuwuity/issues/1953))
- Fixed newly created rooms failing to sync properly in clients using legacy sync.
- Stopped appservice users from being erroneously marked as deactivated during a 26.6 database migration.
- Whitespace will now automatically be trimmed from the start and end of the `global.oauth.oidc.client_secret_file`.

##### Incompatible changes

- The new validation checks performed as part of [#&#8203;1952](https://github.com/continuwuation/continuwuity/issues/1952) will prevent any Continuwuity server that is not up to date from sending federated invites to up-to-date servers due to spec compliance issues in prior versions. If this causes problems for you, you should downgrade or just remain on the previous version. Local invites are unaffected.

<small>woof</small>

### [`v26.6.0`](https://forgejo.ellis.link/continuwuation/continuwuity/releases/tag/v26.6.0)

[Compare Source](https://forgejo.ellis.link/continuwuation/continuwuity/compare/v0.5.10...v26.6.0)

<img src="/attachments/d394b702-29fd-481b-b11e-87d516d0d1be" height=200>
<br><br>

*Continuwuity is a community-driven Matrix chat server, designed to be efficient and easy to run*

> this PR makes performance and stability WORSE. we did this because we are EVIL.

Hello friends! It's been a while. Almost three months, in fact, but we've been busy. I'm not sure how to convey how major this release is, and how excited we are for you all to get to play with it. We've changed more than thirty five thousand lines of code - a third of the codebase - and brought you some incredible features since our last release, including some of our most highly requested features ever. To mark this milestone, we've changed our versioning scheme! Continuwuity is officially out of the zerover tarpit.

In compatible clients, you'll notice a new login and registration screen. This is our newly introduced support for OAuth login, also referred to as next-generation authentication. This means it's finally possible to register new accounts in Element X! We've also [**added support for Single Sign On**](https://continuwuity.org/guides/oidc) using OpenID Connect-compatible identity providers, and **have removed support for LDAP** per [#&#8203;1701](https://forgejo.ellis.link/continuwuation/continuwuity/issues/1701).

We've fixed a longstanding design flaw with our legacy sync code which should massively reduce database sizes for old deployments and slow database growth for new ones.

We've also got an incredible amount of invisible improvements! Many improvements have been made to federation to make it faster and more reliable. You're much less likely to experience a state reset. Room upgrades are smoother and more reliable. Synchronisation with clients is more correct and reliable. Unable to Decrypt errors should be less likely when you recive lots of messages while offline. Policy server support has been updated.

Server administrators may wish to configure the new `request_ip_source` option to set how Continuwuity determines the client's IP address.

Thanks to [@&#8203;julian45](https://github.com/julian45), our Fedora RPM packages have been replaced by packages in the [Terra](https://terrapkg.com/) repository and the [OpenSUSE Build Service](https://build.opensuse.org/package/show/home:julian45/continuwuity). This means that Continuwuity is now available for EL and OpenSUSE distributions. To use these packages, please follow [the new RPM guide](https://continuwuity.org/deploying/rpm.html). **Users on the old `forgejo.ellis.link` RPM repositories must migrate to the new packages**.

> \[!NOTE]
> Updating to this release is one-way, as it includes database migrations that make it incompatible with the 0.5.x series.

##### Features

- Added support for linking an external identity provider with OIDC. Contributed by [@&#8203;ginger](https://github.com/ginger). ([#&#8203;765](https://github.com/continuwuation/continuwuity/issues/765))
- Updated [MSC4284: Policy Servers](matrix-org/matrix-spec-proposals#4284) implementation to support the newly stabilised proposal. Contributed by [@&#8203;nex](https://github.com/nex). ([#&#8203;1487](https://github.com/continuwuation/continuwuity/issues/1487))
- Added config option for default room ACLs. Contributed by [@&#8203;eve](https://github.com/eve). ([#&#8203;1691](https://github.com/continuwuation/continuwuity/issues/1691))
- Added support for fallback encryption keys. ([#&#8203;1710](https://github.com/continuwuation/continuwuity/issues/1710))
- Add `!admin users reject-all-invites` to clean invite spam ([#&#8203;1741](https://github.com/continuwuation/continuwuity/issues/1741))
- Implemented event rejection, which should resolve and prevent future netsplits of the kinds observed
  within some Continuwuity rooms.
  Also resolved several bugs related to both soft-failing events, and event backfilling, which should
  improve state resolution stability.
  The `!admin debug get-pdu` command was updated to disambiguate event acceptance status, and
  `!admin debug show-auth-chain` was added to visually display event auth chains, which may assist
  developers in debugging strangely complex events.

  Contributed by [@&#8203;nex](https://github.com/nex). ([#&#8203;1747](https://github.com/continuwuation/continuwuity/issues/1747))
- Added full support for [MSC4168: Update `m.space.*` state on room upgrade](matrix-org/matrix-spec-proposals#4168). Contributed by [@&#8203;nex](https://github.com/nex). ([#&#8203;1807](https://github.com/continuwuation/continuwuity/issues/1807))
- Improved the performance and reliability of fetching missing events, improving network partition recovery. Contributed
  by [@&#8203;nex](https://github.com/nex). ([#&#8203;1818](https://github.com/continuwuation/continuwuity/issues/1818))
- Added static builds using Nix, allowing for Continuwuity on musl. During this, we also introduced a `max-perf-haswell` package, separating it from `max-perf`, so you may want to swap to this if you are on NixOS. Contributed by [@&#8203;Henry-Hiles](https://github.com/Henry-Hiles) (QuadRadical). ([#&#8203;1853](https://github.com/continuwuation/continuwuity/issues/1853))
- Added support for MSC4380 invite blocking, which has become part of the Matrix specification in v1.18. Contributed by [@&#8203;nex](https://github.com/nex). ([#&#8203;1875](https://github.com/continuwuation/continuwuity/issues/1875))
- Added `!admin debug get-state-at` command ([#&#8203;1877](https://github.com/continuwuation/continuwuity/issues/1877))
- Added a configuration option to allow choosing a client IP source that is not the TCP connecting IP. Contributed by [@&#8203;nex](https://github.com/nex). ([#&#8203;1931](https://github.com/continuwuation/continuwuity/issues/1931))
- Added support for MSC4466, which allows clients to customize how changes to a user's global profile are propagated. Contributed by [@&#8203;ginger](https://github.com/ginger).
- Added support for Matrix 1.16's `state_after` feature, allowing clients which understand it to sync room state changes more reliably. Contributed by [@&#8203;ginger](https://github.com/ginger).
- Added support for authenticating clients using the new OAuth 2.0 login API. Contributed by [@&#8203;ginger](https://github.com/ginger).
- Appservice device management as outlined in MSC4190 (part of Matrix 1.17) is now fully supported. Contributed by [@&#8203;ginger](https://github.com/ginger).
- Users may now be forbidden from deactivating their own accounts with the new `allow_deactivation` config option. Contributed by [@&#8203;ginger](https://github.com/ginger).

##### Bugfixes

- Adjusted legacy sync logic to allow the `roomsynctoken_shortstatehash` database column to be dropped, massively reducing database sizes, especially for old deployments. Contributed by [@&#8203;ginger](https://github.com/ginger). ([#&#8203;917](https://github.com/continuwuation/continuwuity/issues/917))
- Fixed a bug that caused the server to drop events during processing if several events for the same room were sent in a singular transaction. Contributed by [@&#8203;nex](https://github.com/nex). ([#&#8203;1711](https://github.com/continuwuation/continuwuity/issues/1711))
- fix `!admin query account-data account-data-get` not returning the content ([#&#8203;1742](https://github.com/continuwuation/continuwuity/issues/1742))
- Fixed an issue where Continuwuity would only advertise support for the unstable endpoint for Mutual Rooms (MSC2666), despite only supporting the stable endpoint. Contributed by [@&#8203;Henry-Hiles](https://github.com/Henry-Hiles) (QuadRadical) ([#&#8203;1752](https://github.com/continuwuation/continuwuity/issues/1752))
- Fixed admin commands being ignored when they had leading whitespace before admin commands. Contributed by [@&#8203;kitvonsnookerz](https://github.com/kitvonsnookerz). ([#&#8203;1804](https://github.com/continuwuation/continuwuity/issues/1804))
- Fixed several bugs in the `POST /_matrix/client/v3/rooms/{roomId}/upgrade` endpoint. Contributed by [@&#8203;nex](https://github.com/nex). ([#&#8203;1807](https://github.com/continuwuation/continuwuity/issues/1807))
- Devices which set their presence as "offline" will no longer be considered for presence updates. Contributed by [@&#8203;timedout](https://github.com/timedout).
- Improved invite and join reliability in clients using legacy sync. Contributed by [@&#8203;ginger](https://github.com/ginger)
- The invite recipient's membership event is now included in invite stripped state, which should fix flaky invite display in some clients. Contributed by [@&#8203;ginger](https://github.com/ginger)

##### Improved Documentation

- Add performance tuning documentation. Contributed by [@&#8203;stratself](https://github.com/stratself). ([#&#8203;1498](https://github.com/continuwuation/continuwuity/issues/1498))
- Explain accessing Continuwuity's server console when deployed via Docker. ([#&#8203;1671](https://github.com/continuwuation/continuwuity/issues/1671))
- Clarified in the config that `max_request_size` affects federated media as well. ([#&#8203;1706](https://github.com/continuwuation/continuwuity/issues/1706))
- Added example configuration using caddy-docker-proxy in the livekit setup section of the docs. Contributed by [@&#8203;Cease](https://github.com/Cease) ([#&#8203;1762](https://github.com/continuwuation/continuwuity/issues/1762))
- Updated deployment docs to account for new RPM package availability across more distros. Contributed by [@&#8203;julian45](https://github.com/julian45). ([#&#8203;1912](https://github.com/continuwuation/continuwuity/issues/1912))

##### Deprecations and Removals

- Removed support for LDAP. ([#&#8203;1701](https://github.com/continuwuation/continuwuity/issues/1701))
- Removed support for guest user registration, a little-used and deprecated approach to room previews.
- Removed the `/_conduwuit/` versions of the `local_user_count` and `version` routes. These routes are still accessible under the `/_continuwuity` prefix.
- Support for server-side blurhashing (part of MSC2448) has been removed.
- The deprecated `well_known.rtc_focus_server_urls` config option has been removed. MatrixRTC foci should be configured using the `matrix_rtc.foci` config option.

##### Misc

- [#&#8203;1505](https://github.com/continuwuation/continuwuity/issues/1505), [#&#8203;1829](https://github.com/continuwuation/continuwuity/issues/1829), [#&#8203;1927](https://github.com/continuwuation/continuwuity/issues/1927), [#&#8203;1933](https://github.com/continuwuation/continuwuity/issues/1933), [#&#8203;1934](https://github.com/continuwuation/continuwuity/issues/1934)
- Switched from Continuwuity's fork of Ruma back to upstream Ruma. Contributed by [@&#8203;ginger](https://github.com/ginger).
- The version of Debian that the Docker-based build process uses has been upgraded from Bookworm to Trixie, meaning that standalone binaries now have a minimum glibc of 2.41, and can no longer be used on distro versions from before 2025-01-30

***

##### Get Continuwuity

##### Docker Images

- Forgejo: `forgejo.ellis.link/continuwuation/continuwuity:v26.6.0`

Mirrors (may be outdated):

- Docker Hub: `docker.io/jadedblueeyes/continuwuity:v26.6.0`
- GitHub: `ghcr.io/continuwuity/continuwuity:v26.6.0`
- GitLab: `registry.gitlab.com/continuwuity/continuwuity:v26.6.0`

You can also use the `latest` tag for the most recent release, or `v26.6` for the most recent release in the v26.6 series.

##### First-party Packages

- [Debian packages](https://forgejo.ellis.link/continuwuation/-/packages/debian/continuwuity/26.6.0)

##### Community Packages

[![Packaging status](https://repology.org/badge/vertical-allrepos/continuwuity.svg?minversion=26.6.0)](https://repology.org/project/continuwuity/versions)

##### Binaries

Plain binaries are distributed below. They require glibc and liburing to work - most distributions already have these installed.

Static binaries are built with musl, and will work on any Linux distribution.

##### From Source

See our [deployment documentation](https://continuwuity.org/deploying.html) for instructions on building from source.

</details>

---

### Configuration

📅 **Schedule**: (in timezone Europe/London)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these updates again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNTcuNSIsInVwZGF0ZWRJblZlciI6IjQzLjI1Ny41IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL21ham9yIl19-->

Reviewed-on: https://forgejo.hayden.moe/hayden/phoebe/pulls/255
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

A-Client Server Client-Server API A-Federation Server-to-Server API (federation) A-Safety kind:core MSC which is critical to the protocol's success merged A proposal whose PR has merged into the spec! Process state. proposal A matrix spec change proposal. Process state.

Projects

Status: Merged/Done

Development

Successfully merging this pull request may close these issues.