From 848949a727ccd0273f75e01e4b9dc6149ead8ede Mon Sep 17 00:00:00 2001 From: Devon Hudson Date: Mon, 11 Aug 2025 11:14:00 -0600 Subject: [PATCH] 1.135.1 --- CHANGES.md | 25 +++++++++++++++++++++++++ changelog.d/18574.misc | 1 - changelog.d/18786.bugfix | 1 - changelog.d/82.misc | 1 - debian/changelog | 6 ++++++ pyproject.toml | 2 +- 6 files changed, 32 insertions(+), 4 deletions(-) delete mode 100644 changelog.d/18574.misc delete mode 100644 changelog.d/18786.bugfix delete mode 100644 changelog.d/82.misc diff --git a/CHANGES.md b/CHANGES.md index 4b59032a88..1b88c08d58 100644 --- a/CHANGES.md +++ b/CHANGES.md @@ -1,3 +1,28 @@ +# Synapse 1.135.1 (2025-08-11) + +This is the Synapse portion of the [Matrix coordinated security release](https://matrix.org/blog/2025/07/security-predisclosure/). This release includes support for [room version](https://spec.matrix.org/v1.15/rooms/) 12 which fixes a number of security vulnerabilities, including [CVE-2025-49090](https://www.cve.org/CVERecord?id=CVE-2025-49090). + +The default room version is not changed. Not all clients will support room version 12 immediately, and not all users will be using the latest version of their clients. Large, public rooms are advised to wait a few weeks before upgrading to room version 12 to allow users throughout the Matrix ecosystem to update their clients. + +Two patched Synapse releases are now available: + +* `1.135.1`: stable release comprised of `1.135.0` + security patches + * Upgrade to this release **if you are currently running 1.135.0 or below**. +* `1.136.0rc2`: unstable release candidate comprised of `1.136.0rc1` + security patches. + * Upgrade to this release **only if you are on 1.136.0rc1**. + +### Bugfixes + +- Fix invalidation of storage cache that was broken in 1.135.0. ([\#18786](https://github.com/element-hq/synapse/issues/18786)) + +### Internal Changes + +- Add a parameter to `upgrade_rooms(..)` to allow auto join local users. ([\#82](https://github.com/element-hq/synapse/issues/82)) +- Speed up upgrading a room with large numbers of banned users. ([\#18574](https://github.com/element-hq/synapse/issues/18574)) + + + + # Synapse 1.135.0 (2025-08-01) No significant changes since 1.135.0rc2. diff --git a/changelog.d/18574.misc b/changelog.d/18574.misc deleted file mode 100644 index 5b223f5a93..0000000000 --- a/changelog.d/18574.misc +++ /dev/null @@ -1 +0,0 @@ -Speed up upgrading a room with large numbers of banned users. diff --git a/changelog.d/18786.bugfix b/changelog.d/18786.bugfix deleted file mode 100644 index 8dee972e1e..0000000000 --- a/changelog.d/18786.bugfix +++ /dev/null @@ -1 +0,0 @@ -Fix invalidation of storage cache that was broken in 1.135.0. \ No newline at end of file diff --git a/changelog.d/82.misc b/changelog.d/82.misc deleted file mode 100644 index fad525272f..0000000000 --- a/changelog.d/82.misc +++ /dev/null @@ -1 +0,0 @@ -Add a parameter to `upgrade_rooms(..)` to allow auto join local users. diff --git a/debian/changelog b/debian/changelog index cf2840ed1e..ff4dd8a4ad 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,9 @@ +matrix-synapse-py3 (1.135.1) stable; urgency=medium + + * New Synapse release 1.135.1. + + -- Synapse Packaging team Mon, 11 Aug 2025 11:13:15 -0600 + matrix-synapse-py3 (1.135.0) stable; urgency=medium * New Synapse release 1.135.0. diff --git a/pyproject.toml b/pyproject.toml index 4fbf0931c4..e1dfc957ce 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -101,7 +101,7 @@ module-name = "synapse.synapse_rust" [tool.poetry] name = "matrix-synapse" -version = "1.135.0" +version = "1.135.1" description = "Homeserver for the Matrix decentralised comms protocol" authors = ["Matrix.org Team and Contributors "] license = "AGPL-3.0-or-later"