17134 Commits (8ccb7f08d9868bb0cb96836adb51418d28639090)

 

All Branches   

Search

Author	SHA1	Message	Date
Richard van der Hoff	8ccb7f08d9	Merge branch 'master' into release-v1.17.0	4 years ago
Richard van der Hoff	e66e38bbd7	update changelog	4 years ago
Richard van der Hoff	b1beb3ff59	fix migration, again	4 years ago
Richard van der Hoff	e6fbb0c121	fix changelog	4 years ago
Richard van der Hoff	c9f7c683ae	1.16.1	4 years ago
Richard van der Hoff	cbabcec05c	Drop incorrectly-added table `local_rejections_stream`. (#7816)	4 years ago
Richard van der Hoff	43726783e4	1.17.0rc1	4 years ago
Patrick Cloke	38e1fac886	Fix some spelling mistakes / typos. (#7811)	4 years ago
Richard van der Hoff	53ee214f2f	`update_membership` declaration: now always returns an event id. (#7809)	4 years ago
Richard van der Hoff	8ca39bd2c3	Improve stacktraces from exceptions in background processes (#7808) ... use `Failure()` to fish out the real exception.	4 years ago
Richard van der Hoff	08c5181a8d	Fix `can only concatenate list (not "tuple") to list` exception (#7810) ... It seems auth_events can be either a list or a tuple, depending on Things.	4 years ago
Patrick Cloke	8fa7fdd4cb	Pass original request headers from workers to the main process. (#7797)	4 years ago
Richard van der Hoff	2ab0b021f1	Generate real events when we reject invites (#7804) ... Fixes #2181. The basic premise is that, when we fail to reject an invite via the remote server, we can generate our own out-of-band leave event and persist it as an outlier, so that we have something to send to the client.	4 years ago
Richard van der Hoff	67593b1728	Add `HomeServer.signing_key` property (#7805) ... ... instead of duplicating `config.signing_key[0]` everywhere	4 years ago
Richard van der Hoff	ef5ed5292b	Revert "Update the installation docs on apt-transport-https (#7801)" ... This reverts commit e0c0129693. As discussed at https://github.com/matrix-org/synapse/pull/7801#pullrequestreview-444652786, I don't think this is an improvement.	4 years ago
Patrick Cloke	e7efd8f827	Do not use simplejson in Synapse. (#7800)	4 years ago
Patrick Cloke	ff0680f69d	Stop passing bytes when dumping JSON (#7799)	4 years ago
Dirk Heinrichs	e0c0129693	Update the installation docs on apt-transport-https (#7801) ... * Starting with apt 1.6, https support has moved into the main package and apt-transport-https has become a transitional dummy package. Signed-off-by: Dirk Heinrichs <dirk.heinrichs@altum.de>	4 years ago
Richard van der Hoff	59ddcd790b	Merge branch 'master' into develop	4 years ago
Richard van der Hoff	e7f880ce7e	shuffle changelog slightly	4 years ago
Richard van der Hoff	98894341e7	1.16.0	4 years ago
Nicolai Søborg	96bb01d8ec	Change Caddy links (old is deprecated) (#7789) ... * Change Caddy links Current links points to Caddy v1 which is deprecated. Signed-off-by: Nicolai Søborg <git@xn--sb-lka.org>	4 years ago
Richard van der Hoff	76dbd7b8d6	Stop populating unused table `local_invites`. (#7793) ... This table is no longer used, so we may as well stop populating it. Removing it would prevent people rolling back to older releases of Synapse, so that can happen in a future release.	4 years ago
Erik Johnston	67d7756fcf	Refactor getting replication updates from database v2. (#7740)	4 years ago
Juho Vanhanen	d378c3da78	Add libwebp dependency to Dockerfile (#7791) ... * Add libwebp dependency to Dockerfile Signed-off-by: Juho Vanhanen <juho@vanhanen.io>	4 years ago
Patrick Cloke	2a266f4511	Add documentation for JWT login type and improve sample config. (#7776)	4 years ago
Patrick Cloke	6d687ebba1	Convert the appservice handler to async/await. (#7775)	4 years ago
reivilibre	57feeab364	Don't ignore `set_tweak` actions with no explicit `value`. (#7766) ... * Fix spec compliance; tweaks without values are valid (default to True, which is only concretely specified for `highlight`, but it seems only reasonable to generalise) * Changelog for 7766. * Add documentation to `tweaks_for_actions` May as well tidy up when I'm here. * Add a test for `tweaks_for_actions`	4 years ago
Oliver Kurz	4e118742ca	Allow to use higher versions of prometheus_client (#7780) ... Fixes https://github.com/matrix-org/synapse/issues/7641 The package was pinned to <0.8.0 without an obvious reasoning with 7ad1d7635 in https://github.com/matrix-org/synapse/pull/5636 while the version selection looks to just try to exclude an arbitrary next minor version number that might introduce API breaking changes. Selecting the next minor number might be a good conservative selection. Downstream distributions already reported success patching out the version requirements. This also fixes the integration of upgraded packages into openSUSE packages, e.g. for openSUSE Tumbleweed which already ships prometheus_client >= 0.8 . Signed-off-by: Oliver Kurz <okurz@suse.de> Co-authored-by: Richard van der Hoff <1389908+richvdh@users.noreply.github.com>	4 years ago
Will Hunt	62b1ce8539	isort 5 compatibility (#7786) ... The CI appears to use the latest version of isort, which is a problem when isort gets a major version bump. Rather than try to pin the version, I've done the necessary to make isort5 happy with synapse.	4 years ago
Erik Johnston	5cdca53aa0	Merge different Resource implementation classes (#7732)	4 years ago
Dirk Klimpel	21a212f8e5	Fix inconsistent handling of upper and lower cases of email addresses. (#7021) ... fixes #7016	4 years ago
Alex Kotov	8097659f6e	Allow YAML config file to contain None (#7779) ... Useful when config file is fully commented Signed-off-by: Alex Kotov <kotovalexarian@gmail.com>	4 years ago
Patrick Cloke	f3e0f16240	Synapse 1.16.0rc2 (2020-07-02) ... ============================== Synapse 1.16.0rc2 includes the security fixes released with Synapse 1.15.2. Please see [below](https://github.com/matrix-org/synapse/blob/master/CHANGES.md#synapse-1152-2020-07-02) for more details. Improved Documentation ---------------------- - Update postgres image in example `docker-compose.yaml` to tag `12-alpine`. ([\#7696](https://github.com/matrix-org/synapse/issues/7696)) Internal Changes ---------------- - Add some metrics for inbound and outbound federation latencies: `synapse_federation_server_pdu_process_time` and `synapse_event_processing_lag_by_event`. ([\#7771](https://github.com/matrix-org/synapse/issues/7771)) -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEF3tZXk38tRDFVnUIM/xY9qcRMEgFAl79+qgACgkQM/xY9qcR MEhcaRAAjWLW3ojN1F0DUfE85jziZK2VdnMQC3g+uEOLX6QRbfqFNaNNMjLdK+vl K/+2ZoHkRsg6g8noSPhPmI1z1+hb5xDJaxjltzHxonIipW8XSU8o2PQMkf8O/BAy VS58y3GyLkhEgzWC+/hcII+LBgcqXpLuNM0xrKTHmxclIjdewlwe1v+hxkP+6wsX 9Whhn1f4sNHrCtyFVK9uzMFcVyzcQaiWZRjEDMj2uR7rWT6UbCUifN/G4fWmtGbY xWoNoC4Qv8xiqXOG4U7juPp9T3bRyWMKyjBFM5PWO6Ec2zfafDyFzhBxJhlQhODG g21tS4PowX/dM/pBpJFEOPh1BVrPZzzTD+YMmTcd3NO79HeaQGqEX/+tzFCFUyPp 0daJK3Y85+l5w/M09WU8DDN8CiR3PFJyGDIZp+nweMsiJZkbEbLOkh1tx6TL+5/6 zwewU6cq8nTVGrn53Tn58l8C7Sj4w+Qk+1XDzymAoidyoWqAKW9Y/fw53PaViUSx voDu0rpsEUXR1OzCBG8SAPQCFy9gdEWV04OvIpzHuq2uojkz66f7NAXy+Wz+Occ9 AYb/s6Ei80bGCLgRd5jg+myqavwRbzCyv+LIC6dxpopxZJ3AzrFuD11eXKtrIxOC FZYf3U4KeBk4Q9TV5IFV1xcGFrq5aK36LdmP6WOsEl3PXVT9p/Q= =YaJn -----END PGP SIGNATURE----- Merge tag 'v1.16.0rc2' into develop Synapse 1.16.0rc2 (2020-07-02) ============================== Synapse 1.16.0rc2 includes the security fixes released with Synapse 1.15.2. Please see [below](https://github.com/matrix-org/synapse/blob/master/CHANGES.md#synapse-1152-2020-07-02) for more details. Improved Documentation ---------------------- - Update postgres image in example `docker-compose.yaml` to tag `12-alpine`. ([\#7696](https://github.com/matrix-org/synapse/issues/7696)) Internal Changes ---------------- - Add some metrics for inbound and outbound federation latencies: `synapse_federation_server_pdu_process_time` and `synapse_event_processing_lag_by_event`. ([\#7771](https://github.com/matrix-org/synapse/issues/7771))	4 years ago
Patrick Cloke	6f238a7074	Fix a typo.	4 years ago
Patrick Cloke	1a76cdf8d4	Move 1.15.2 after 1.16.0rc2.	4 years ago
Patrick Cloke	1319e53251	1.16.0rc2	4 years ago
Patrick Cloke	f2bcc6ecbf	Merge branch 'master' into release-v1.16.0	4 years ago
Patrick Cloke	4d978d7db4	Merge branch 'master' into develop	4 years ago
Patrick Cloke	fedb632d0a	Synapse 1.15.2 (2020-07-02) ... =========================== Due to the two security issues highlighted below, server administrators are encouraged to update Synapse. We are not aware of these vulnerabilities being exploited in the wild. Security advisory ----------------- * A malicious homeserver could force Synapse to reset the state in a room to a small subset of the correct state. This affects all Synapse deployments which federate with untrusted servers. ([96e9afe6](96e9afe625)) * HTML pages served via Synapse were vulnerable to clickjacking attacks. This predominantly affects homeservers with single-sign-on enabled, but all server administrators are encouraged to upgrade. ([ea26e9a9](ea26e9a98b)) This was reported by [Quentin Gliech](https://sandhose.fr/). -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEF3tZXk38tRDFVnUIM/xY9qcRMEgFAl799QkACgkQM/xY9qcR MEhKzQ/+JJCbIuaymKQuyZRRt4b2ylXmMjfM8LpYgwk1vEUN2z+NNt4pmbFQtvdJ Q1unHToDIK8b080DMagAc55MEF8GRtl8D411iGgSDeI/AqgVnsBTOW1cd7gDc0LC eEs3jwnL5TYDeZYZUGqu+OfoPbdGnUX8ywQYTXk8y0njELwnoJdMuHSMq8kgsMur eQ1cryevidpJiDQZlZFJQzlGoMrr4Aq94BZHooXfAdJnwCoIR/EVW4iie8GKSaNa OT5tVYg8l4KzBOWZBrtXeeIKVNh7HHie8aJRJVXAGq/3vAEDT8HTAxPNJ6Ru4DA9 2VrflzmuRl9phxybfq2m1G1AvNkOlKu67e21YTSKK9EG/52VJoSXzKEeP9hdMfj5 v/Xfm7v1WqolukZZMc9zyleCoAK2Znu32/0/PYGsgw/vX7wGoCORdP22/vVfuCni ZpUkZPlCA5XyD4QAyegzTVlp94IRI5oCErl6v1mESAaSkKyaGZ5jejTFWzOsKMuo TpyCLLz6ZKLCtxsU6e7nGwDV7dX2iztq8fGf9+8lFsdXCbdI0YsyzAE8reehK9lL rYxzl7fV+m6kzYg+pu3bfjH/YYgkPTvnV4juCOT/LQV7P3sEJAQrYBceIpAzyuS7 t0kCWTfX4UDrt1XbouuWJnvIHAFOG5/o/BEyhkQmW1c3GvDe8Jo= =QQ4B -----END PGP SIGNATURE----- Merge tag 'v1.15.2' Synapse 1.15.2 (2020-07-02) =========================== Due to the two security issues highlighted below, server administrators are encouraged to update Synapse. We are not aware of these vulnerabilities being exploited in the wild. Security advisory ----------------- * A malicious homeserver could force Synapse to reset the state in a room to a small subset of the correct state. This affects all Synapse deployments which federate with untrusted servers. ([96e9afe6](96e9afe625)) * HTML pages served via Synapse were vulnerable to clickjacking attacks. This predominantly affects homeservers with single-sign-on enabled, but all server administrators are encouraged to upgrade. ([ea26e9a9](ea26e9a98b)) This was reported by [Quentin Gliech](https://sandhose.fr/).	4 years ago
Patrick Cloke	244649b7d5	Remove an extraneous space.	4 years ago
Patrick Cloke	5ae0a4cf76	Add links to the fixes.	4 years ago
Patrick Cloke	1d61a24f42	Fix tense in the release notes.	4 years ago
Patrick Cloke	e8c36e527d	1.15.2	4 years ago
Erik Johnston	96e9afe625	Correctly handle outliers as prev events over federation	4 years ago
Patrick Cloke	ea26e9a98b	Ensure that HTML pages served from Synapse include headers to avoid embedding.	4 years ago
reivilibre	e5808c4cfb	Hack to add push priority to push notifications (#7765) ... * Remove obsolete comment about ancient temporary code Signed-off-by: Olivier Wilkinson (reivilibre) <olivier@librepush.net> * Implement hack to set push priority based on whether the tweaks indicate the event might cause effects. * Changelog for 7765 Signed-off-by: Olivier Wilkinson (reivilibre) <olivier@librepush.net> * Antilint * Add tests for push priority Signed-off-by: Olivier Wilkinson (reivilibre) <olivier@librepush.net> * Update synapse/push/httppusher.py Co-authored-by: Brendan Abolivier <babolivier@matrix.org> * Antilint * Remove needless invites from tests. Co-authored-by: Brendan Abolivier <babolivier@matrix.org>	4 years ago
Richard van der Hoff	e866512367	Add early returns to `_check_for_soft_fail` (#7769) ... my editor was complaining about unset variables, so let's add some early returns to fix that and reduce indentation/cognitive load.	4 years ago
Richard van der Hoff	f01e2ca039	Use symbolic names for replication stream names (#7768) ... This makes it much easier to find where streams are referenced.	4 years ago
Richard van der Hoff	a6eae69ffe	Type checking for `FederationHandler` (#7770) ... fix a few things to make this pass mypy.	4 years ago