Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Jan 13, 2026

This PR contains the following updates:

Package Update Change
ghcr.io/element-hq/synapse minor v1.144.0v1.146.0

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

element-hq/synapse (ghcr.io/element-hq/synapse)

v1.146.0

Compare Source

Synapse 1.146.0 (2026-01-27)

No significant changes since 1.146.0rc1.

Deprecations and Removals

  • MSC2697 (Dehydrated devices) has been removed, as the MSC is closed. Developers should migrate to MSC3814. (#​19346)
  • Support for Ubuntu 25.04 (Plucky Puffin) has been dropped. Synapse no longer builds debian packages for Ubuntu 25.04.

Synapse 1.146.0rc1 (2026-01-20)

Features

  • Add a new config option enable_local_media_storage which controls whether media is additionally stored locally when using configured media_storage_providers. Setting this to false allows off-site media storage without a local cache. Contributed by Patrice Brend'amour @​dr.allgood. (#​19204)
  • Stabilise support for MSC4312's m.oauth User-Interactive Auth stage for resetting cross-signing identity with the OAuth 2.0 API. The old, unstable name (org.matrix.cross_signing_reset) is now deprecated and will be removed in a future release. (#​19273)
  • Refactor Grafana dashboard to use server_name label (instead of instance). (#​19337)

Bugfixes

  • Fix joining a restricted v12 room locally when no local room creator is present but local users with sufficient power levels are. Contributed by @​nexy7574. (#​19321)
  • Fixed parallel calls to /_matrix/media/v1/create being ratelimited for appservices even if rate_limited: false was set in the registration. Contributed by @​tulir @​ Beeper. (#​19335)
  • Fix a bug introduced in 1.61.0 where a user's membership in a room was accidentally ignored when considering access to historical state events in rooms with the "shared" history visibility. Contributed by Lukas Tautz. (#​19353)
  • MSC4140: Store the JSON content of scheduled delayed events as text instead of a byte array. This fixes the inability to schedule a delayed event with non-ASCII characters in its content. (#​19360)
  • Always rollback database transactions when retrying (avoid orphaned connections). (#​19372)
  • Fix InFlightGauge typing to allow upgrading to prometheus_client 0.24. (#​19379)

Updates to the Docker image

Improved Documentation

  • Remove docs on legacy metric names (no longer in the codebase since 2022-12-06). (#​19341)
  • Clarify how the estimated value of room complexity is calculated internally. (#​19384)

Internal Changes

  • Add an internal cancel_task API to the task scheduler. (#​19310)
  • Tweak docstrings and signatures of auth_types_for_event and get_catchup_room_event_ids. (#​19320)
  • Replace usage of deprecated assertEquals with assertEqual in unit test code. (#​19345)
  • Drop support for Ubuntu 25.04 'Plucky Puffin', add support for Ubuntu 25.10 'Questing Quokka'. (#​19348)
  • Revert "Add an Admin API endpoint for listing quarantined media (#​19268)". (#​19351)
  • Bump mdbook from 0.4.17 to 0.5.2 and remove our custom table-of-contents plugin in favour of the new default functionality. (#​19356)
  • Replace deprecated usage of PyGitHub's GitRelease.title with .name in release script. (#​19358)
  • Update the Element logo in Synapse's README to be an absolute URL, allowing it to render on other sites (such as PyPI). (#​19368)
  • Apply minor tweaks to v1.145.0 changelog. (#​19376)
  • Update Grafana dashboard syntax to use the latest from importing/exporting with Grafana 12.3.1. (#​19381)
  • Warn about skipping reactor metrics when using unknown reactor type. (#​19383)
  • Add support for reactor metrics with the ProxiedReactor used in worker Complement tests. (#​19385)

v1.145.0

Compare Source

Synapse 1.145.0 (2026-01-13)

No significant changes since 1.145.0rc4.

End of Life of Ubuntu 25.04 Plucky Puffin

Ubuntu 25.04 (Plucky Puffin) will be end of life on Jan 17, 2026. Synapse will stop building packages for Ubuntu 25.04 shortly thereafter.

Updates to Locked Dependencies No Longer Included in Changelog

The "Updates to locked dependencies" section has been removed from the changelog due to lack of use and the maintenance burden. (#​19254)

Synapse 1.145.0rc4 (2026-01-08)

No significant changes since 1.145.0rc3.

This RC contains a fix specifically for openSUSE packaging and no other changes.

Synapse 1.145.0rc3 (2026-01-07)

No significant changes since 1.145.0rc2.

This RC strips out unnecessary files from the wheels that were added when fixing the source distribution packaging in the previous RC.

Synapse 1.145.0rc2 (2026-01-07)

No significant changes since 1.145.0rc1.

This RC fixes the source distribution packaging for uploading to PyPI.

Synapse 1.145.0rc1 (2026-01-06)

Features

  • Add memberships endpoint to the admin API. This is useful for forensics and T&S purposes. (#​19260)
  • Server admins can bypass the quarantine media check when downloading media by setting the admin_unsafely_bypass_quarantine query parameter to true on Client-Server API media download requests. (#​19275)
  • Implemented pagination for the MSC2666 mutual rooms endpoint. Contributed by @​tulir @​ Beeper. (#​19279)
  • Admin API: add worker support to GET /_synapse/admin/v2/users/<user_id>. (#​19281)
  • Improve proxy support for the federation_client.py dev script. Contributed by Denis Kasak (@​dkasak). (#​19300)

Bugfixes

  • Fix sliding sync performance slow down for long lived connections. (#​19206)
  • Fix a bug where Mastodon posts (and possibly other embeds) have the wrong description for URL previews. (#​19231)
  • Fix bug where Duration was logged incorrectly. (#​19267)
  • Fix bug introduced in 1.143.0 that broke support for versions of zope-interface older than 6.2. (#​19274)
  • Transform events with client metadata before serialising in /event response. (#​19340)

Updates to the Docker image

  • Add a way to expose metrics from the Docker image (SYNAPSE_ENABLE_METRICS). (#​19324)

Improved Documentation

  • Document the importance of public_baseurl when configuring OpenID Connect authentication. (#​19270)

Deprecations and Removals

  • Ubuntu 25.04 (Plucky Puffin) will be end of life on Jan 17, 2026. Synapse will stop building packages for Ubuntu 25.04 shortly thereafter.
  • Remove the "Updates to locked dependencies" section from the changelog due to lack of use and the maintenance burden. (#​19254)

Internal Changes

  • Group together dependabot update PRs to reduce the review load. (#​18402)
  • Fix HomeServer.shutdown() failing if the homeserver hasn't been setup yet. (#​19187)
  • Respond with useful error codes with Content-Length header/s are invalid. (#​19212)
  • Fix HomeServer.shutdown() failing if the homeserver failed to start. (#​19232)
  • Switch the build backend from poetry-core to maturin. (#​19234)
  • Raise the limit for concurrently-open non-security @​dependabot PRs from 5 to 10. (#​19253)
  • Require 14 days to pass before pulling in general dependency updates to help mitigate upstream supply chain attacks. (#​19258)
  • Drop the broken netlify documentation workflow until a new one is implemented. (#​19262)
  • Don't include debug logs in Clock unless explicitly enabled. (#​19278)
  • Use uv to test olddeps to ensure all transitive dependencies use minimum versions. (#​19289)
  • Add a config to be able to rate limit search in the user directory. (#​19291)
  • Log the original bind exception when encountering Failed to listen on 0.0.0.0, continuing because listening on [::]. (#​19297)
  • Unpin the version of Rust we use to build Synapse wheels (was 1.82.0) now that MacOS support has been dropped. (#​19302)
  • Make it more clear how shared_extra_conf is combined in our Docker configuration scripts. (#​19323)
  • Update CI to stream Complement progress and format logs in a separate step after all tests are done. (#​19326)
  • Format .github/workflows/tests.yml. (#​19327)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@mglants-bot
Copy link

mglants-bot bot commented Jan 13, 2026

--- kubernetes/subterra/apps/matrix/synapse/app Kustomization: flux-system/cluster-apps-synapse HelmRelease: matrix/synapse

+++ kubernetes/subterra/apps/matrix/synapse/app Kustomization: flux-system/cluster-apps-synapse HelmRelease: matrix/synapse

@@ -77,13 +77,13 @@

       - ::1/128
       - fe80::/64
       - fc00::/7
     image:
       pullPolicy: IfNotPresent
       repository: ghcr.io/element-hq/synapse
-      tag: v1.144.0
+      tag: v1.146.0
     ingress:
       annotations:
         cert-manager.io/cluster-issuer: letsencrypt-prod
         external-dns.alpha.kubernetes.io/target: ingress.ur30.ru
         nginx.ingress.kubernetes.io/cors-allow-origin: '*'
         nginx.ingress.kubernetes.io/enable-cors: 'true'

@mglants-bot
Copy link

mglants-bot bot commented Jan 13, 2026

--- HelmRelease: matrix/synapse Deployment: matrix/synapse-matrix-synapse

+++ HelmRelease: matrix/synapse Deployment: matrix/synapse-matrix-synapse

@@ -17,13 +17,13 @@

       app.kubernetes.io/name: matrix-synapse
       app.kubernetes.io/instance: synapse
       app.kubernetes.io/component: synapse
   template:
     metadata:
       annotations:
-        checksum/secrets: 59d6c41836eeb9718eb4ec31b87248aefdbd11fc9bed28ab1f7535cd5f975a02
+        checksum/secrets: b56c6f7a58ee1f908726f1bfd66cc27842ef17365d8feb911ed55aa276aea71e
         setGateway: 'true'
       labels:
         app.kubernetes.io/name: matrix-synapse
         app.kubernetes.io/instance: synapse
         app.kubernetes.io/component: synapse
     spec:
@@ -53,13 +53,13 @@

               key: password
         - name: REDIS_PASSWORD
           valueFrom:
             secretKeyRef:
               name: synapse-secret
               key: redis-password
-        image: ghcr.io/element-hq/synapse:v1.144.0
+        image: ghcr.io/element-hq/synapse:v1.146.0
         imagePullPolicy: IfNotPresent
         securityContext: {}
         ports:
         - name: http
           containerPort: 8008
           protocol: TCP
--- HelmRelease: matrix/synapse Deployment: matrix/synapse-appservice

+++ HelmRelease: matrix/synapse Deployment: matrix/synapse-appservice

@@ -18,13 +18,13 @@

       app.kubernetes.io/instance: synapse
       app.kubernetes.io/component: appservice
   template:
     metadata:
       annotations:
         checksum/worker-config: 411ea6990eddfcad501f1bca1677b7fe97e455f0e8230a4e79263c1a324e3bdd
-        checksum/secrets: 3724c1f641317e7e995a2cde188185afd453a4b6c1adbe084137cae795eb26ce
+        checksum/secrets: 92a1707ed0f7825e8b86f5027402fba5b5c6f2bb76d6eb83e7c550b120b6da82
       labels:
         app.kubernetes.io/name: matrix-synapse
         app.kubernetes.io/instance: synapse
         app.kubernetes.io/component: appservice
     spec:
       serviceAccountName: default
@@ -53,13 +53,13 @@

         - name: REDIS_PASSWORD
           valueFrom:
             secretKeyRef:
               name: synapse-secret
               key: redis-password
         securityContext: {}
-        image: ghcr.io/element-hq/synapse:v1.144.0
+        image: ghcr.io/element-hq/synapse:v1.146.0
         imagePullPolicy: IfNotPresent
         ports:
         - name: metrics
           containerPort: 9090
           protocol: TCP
         livenessProbe:
--- HelmRelease: matrix/synapse Deployment: matrix/synapse-federation-reader

+++ HelmRelease: matrix/synapse Deployment: matrix/synapse-federation-reader

@@ -18,13 +18,13 @@

       app.kubernetes.io/instance: synapse
       app.kubernetes.io/component: federation-reader
   template:
     metadata:
       annotations:
         checksum/worker-config: 411ea6990eddfcad501f1bca1677b7fe97e455f0e8230a4e79263c1a324e3bdd
-        checksum/secrets: 86dd5336c5893b5a38d9875e7e6b14ceef88c1c22392e0e6db746c7a8f9b31a3
+        checksum/secrets: 1470c6e1a00064c8063b3925d3ef0042493e9c37a76dbc2c582a47ddea26f74c
         setGateway: 'true'
       labels:
         app.kubernetes.io/name: matrix-synapse
         app.kubernetes.io/instance: synapse
         app.kubernetes.io/component: federation-reader
     spec:
@@ -54,13 +54,13 @@

         - name: REDIS_PASSWORD
           valueFrom:
             secretKeyRef:
               name: synapse-secret
               key: redis-password
         securityContext: {}
-        image: ghcr.io/element-hq/synapse:v1.144.0
+        image: ghcr.io/element-hq/synapse:v1.146.0
         imagePullPolicy: IfNotPresent
         ports:
         - name: metrics
           containerPort: 9090
           protocol: TCP
         - name: listener
--- HelmRelease: matrix/synapse Deployment: matrix/synapse-federation-sender

+++ HelmRelease: matrix/synapse Deployment: matrix/synapse-federation-sender

@@ -18,13 +18,13 @@

       app.kubernetes.io/instance: synapse
       app.kubernetes.io/component: federation-sender
   template:
     metadata:
       annotations:
         checksum/worker-config: 411ea6990eddfcad501f1bca1677b7fe97e455f0e8230a4e79263c1a324e3bdd
-        checksum/secrets: b742baab06c3f3d952512031a03794558135e19ec064c70ce0c8f0bfa6daec92
+        checksum/secrets: 84a25e31a826fb5f7ad08a9c54a05d9eed146192c183325ed5322bb037f61a4c
         setGateway: 'true'
       labels:
         app.kubernetes.io/name: matrix-synapse
         app.kubernetes.io/instance: synapse
         app.kubernetes.io/component: federation-sender
     spec:
@@ -54,13 +54,13 @@

         - name: REDIS_PASSWORD
           valueFrom:
             secretKeyRef:
               name: synapse-secret
               key: redis-password
         securityContext: {}
-        image: ghcr.io/element-hq/synapse:v1.144.0
+        image: ghcr.io/element-hq/synapse:v1.146.0
         imagePullPolicy: IfNotPresent
         ports:
         - name: metrics
           containerPort: 9090
           protocol: TCP
         livenessProbe:
--- HelmRelease: matrix/synapse Deployment: matrix/synapse-frontend-proxy

+++ HelmRelease: matrix/synapse Deployment: matrix/synapse-frontend-proxy

@@ -18,13 +18,13 @@

       app.kubernetes.io/instance: synapse
       app.kubernetes.io/component: frontend-proxy
   template:
     metadata:
       annotations:
         checksum/worker-config: 411ea6990eddfcad501f1bca1677b7fe97e455f0e8230a4e79263c1a324e3bdd
-        checksum/secrets: 6010e840d169b587e373950505eed7309a4a8063752b6e1ae7797f14e11b6ab0
+        checksum/secrets: 689ffe588e6aa8eaf07ee7d12b459b90e0be36c822b269c02092479c35cb9ebd
       labels:
         app.kubernetes.io/name: matrix-synapse
         app.kubernetes.io/instance: synapse
         app.kubernetes.io/component: frontend-proxy
     spec:
       serviceAccountName: default
@@ -53,13 +53,13 @@

         - name: REDIS_PASSWORD
           valueFrom:
             secretKeyRef:
               name: synapse-secret
               key: redis-password
         securityContext: {}
-        image: ghcr.io/element-hq/synapse:v1.144.0
+        image: ghcr.io/element-hq/synapse:v1.146.0
         imagePullPolicy: IfNotPresent
         ports:
         - name: metrics
           containerPort: 9090
           protocol: TCP
         - name: listener
--- HelmRelease: matrix/synapse Deployment: matrix/synapse-generic-worker

+++ HelmRelease: matrix/synapse Deployment: matrix/synapse-generic-worker

@@ -18,13 +18,13 @@

       app.kubernetes.io/instance: synapse
       app.kubernetes.io/component: generic-worker
   template:
     metadata:
       annotations:
         checksum/worker-config: 411ea6990eddfcad501f1bca1677b7fe97e455f0e8230a4e79263c1a324e3bdd
-        checksum/secrets: cd06ac025ca50ec7797c65f21665f8e37270ebe61ce196c62feaaf218a28f447
+        checksum/secrets: 3d2bbb94597ea3b52ce595e5eabbe7df876341402b07fede8dc50a4c9f03f456
       labels:
         app.kubernetes.io/name: matrix-synapse
         app.kubernetes.io/instance: synapse
         app.kubernetes.io/component: generic-worker
     spec:
       serviceAccountName: default
@@ -53,13 +53,13 @@

         - name: REDIS_PASSWORD
           valueFrom:
             secretKeyRef:
               name: synapse-secret
               key: redis-password
         securityContext: {}
-        image: ghcr.io/element-hq/synapse:v1.144.0
+        image: ghcr.io/element-hq/synapse:v1.146.0
         imagePullPolicy: IfNotPresent
         ports:
         - name: metrics
           containerPort: 9090
           protocol: TCP
         - name: listener
--- HelmRelease: matrix/synapse Deployment: matrix/synapse-messages

+++ HelmRelease: matrix/synapse Deployment: matrix/synapse-messages

@@ -18,13 +18,13 @@

       app.kubernetes.io/instance: synapse
       app.kubernetes.io/component: messages
   template:
     metadata:
       annotations:
         checksum/worker-config: 411ea6990eddfcad501f1bca1677b7fe97e455f0e8230a4e79263c1a324e3bdd
-        checksum/secrets: 756084bcfda706c57d250358b8b03507baae1359923f73bde052d079622549f6
+        checksum/secrets: 67d4d275fffebcbcb24e8e521c7d8e4f916e1a11f249727bcb2c42f9f569f7e4
       labels:
         app.kubernetes.io/name: matrix-synapse
         app.kubernetes.io/instance: synapse
         app.kubernetes.io/component: messages
     spec:
       serviceAccountName: default
@@ -53,13 +53,13 @@

         - name: REDIS_PASSWORD
           valueFrom:
             secretKeyRef:
               name: synapse-secret
               key: redis-password
         securityContext: {}
-        image: ghcr.io/element-hq/synapse:v1.144.0
+        image: ghcr.io/element-hq/synapse:v1.146.0
         imagePullPolicy: IfNotPresent
         ports:
         - name: metrics
           containerPort: 9090
           protocol: TCP
         - name: listener
--- HelmRelease: matrix/synapse Deployment: matrix/synapse-pusher

+++ HelmRelease: matrix/synapse Deployment: matrix/synapse-pusher

@@ -18,13 +18,13 @@

       app.kubernetes.io/instance: synapse
       app.kubernetes.io/component: pusher
   template:
     metadata:
       annotations:
         checksum/worker-config: 411ea6990eddfcad501f1bca1677b7fe97e455f0e8230a4e79263c1a324e3bdd
-        checksum/secrets: 9f7d922e6f9c2b55126db1d5db884bd6469a175d5a786b9fd828717b4040bf61
+        checksum/secrets: 622a255e300eeea0baeecb4197311098b60f9590bdef59fc8b29eed46a055715
       labels:
         app.kubernetes.io/name: matrix-synapse
         app.kubernetes.io/instance: synapse
         app.kubernetes.io/component: pusher
     spec:
       serviceAccountName: default
@@ -53,13 +53,13 @@

         - name: REDIS_PASSWORD
           valueFrom:
             secretKeyRef:
               name: synapse-secret
               key: redis-password
         securityContext: {}
-        image: ghcr.io/element-hq/synapse:v1.144.0
+        image: ghcr.io/element-hq/synapse:v1.146.0
         imagePullPolicy: IfNotPresent
         ports:
         - name: metrics
           containerPort: 9090
           protocol: TCP
         livenessProbe:
--- HelmRelease: matrix/synapse Deployment: matrix/synapse-sso

+++ HelmRelease: matrix/synapse Deployment: matrix/synapse-sso

@@ -18,13 +18,13 @@

       app.kubernetes.io/instance: synapse
       app.kubernetes.io/component: sso
   template:
     metadata:
       annotations:
         checksum/worker-config: 411ea6990eddfcad501f1bca1677b7fe97e455f0e8230a4e79263c1a324e3bdd
-        checksum/secrets: 7d519a359127ac87e2c2b0ea0470982eb7b70c4f7498cf64b6569e923ed97f8a
+        checksum/secrets: 84c128520fd39af17501b17c313b925c7d28b12ef5c5c37b0964eda0938bcb3e
       labels:
         app.kubernetes.io/name: matrix-synapse
         app.kubernetes.io/instance: synapse
         app.kubernetes.io/component: sso
     spec:
       serviceAccountName: default
@@ -53,13 +53,13 @@

         - name: REDIS_PASSWORD
           valueFrom:
             secretKeyRef:
               name: synapse-secret
               key: redis-password
         securityContext: {}
-        image: ghcr.io/element-hq/synapse:v1.144.0
+        image: ghcr.io/element-hq/synapse:v1.146.0
         imagePullPolicy: IfNotPresent
         ports:
         - name: metrics
           containerPort: 9090
           protocol: TCP
         - name: listener
--- HelmRelease: matrix/synapse Deployment: matrix/synapse-synchrotron

+++ HelmRelease: matrix/synapse Deployment: matrix/synapse-synchrotron

@@ -18,13 +18,13 @@

       app.kubernetes.io/instance: synapse
       app.kubernetes.io/component: synchrotron
   template:
     metadata:
       annotations:
         checksum/worker-config: 411ea6990eddfcad501f1bca1677b7fe97e455f0e8230a4e79263c1a324e3bdd
-        checksum/secrets: 82b582e7d3322a5bf857c801b9fa583c60b38b7b4a7716a89c29b703af5b185e
+        checksum/secrets: a37bc852b9a17276170c5956b05381f2dc41c5420f3ffbda1a728db75597a484
       labels:
         app.kubernetes.io/name: matrix-synapse
         app.kubernetes.io/instance: synapse
         app.kubernetes.io/component: synchrotron
     spec:
       serviceAccountName: default
@@ -53,13 +53,13 @@

         - name: REDIS_PASSWORD
           valueFrom:
             secretKeyRef:
               name: synapse-secret
               key: redis-password
         securityContext: {}
-        image: ghcr.io/element-hq/synapse:v1.144.0
+        image: ghcr.io/element-hq/synapse:v1.146.0
         imagePullPolicy: IfNotPresent
         ports:
         - name: metrics
           containerPort: 9090
           protocol: TCP
         - name: listener

@renovate renovate bot force-pushed the renovate/ghcr.io-element-hq-synapse-1.x branch 2 times, most recently from f22c77c to a0c12b9 Compare January 27, 2026 18:43
@renovate renovate bot changed the title feat(container): update image ghcr.io/element-hq/synapse ( v1.144.0 → v1.145.0 ) feat(container): update image ghcr.io/element-hq/synapse ( v1.144.0 → v1.146.0 ) Jan 27, 2026
… v1.146.0 )

| datasource | package                    | from     | to       |
| ---------- | -------------------------- | -------- | -------- |
| docker     | ghcr.io/element-hq/synapse | v1.144.0 | v1.146.0 |
@renovate renovate bot force-pushed the renovate/ghcr.io-element-hq-synapse-1.x branch from a0c12b9 to cebed20 Compare February 2, 2026 20:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants