Version 1.16.0

CHANGELOG

@@ -231,3 +231,67 @@
 [1.12.1]
 * Updat Synapse to 1.21.1
 * [Full changelog](https://github.com/matrix-org/synapse/releases/tag/v1.21.1)
+
+[1.12.2]
+* Update Synapse to 1.21.2
+* [Full changelog](https://github.com/matrix-org/synapse/releases/tag/v1.21.2)
+* Security: HTML pages served via Synapse were vulnerable to cross-site scripting (XSS) attacks. All server administrators are encouraged to upgrade
+* Fix rare bug where sending an event would fail due to a racey assertion. (#8530)
+
+[1.13.0]
+* Update Synapse to 1.22.0
+* [Full changelog](https://github.com/matrix-org/synapse/releases/tag/v1.22.0)
+* Add ability for ThirdPartyEventRules modules to query and manipulate whether a room is in the public rooms directory. (#8292, #8467)
+* Add support for olm fallback keys (MSC2732). (#8312, #8501)
+* Add support for running background tasks in a separate worker process. (#8369, #8458, #8489, #8513, #8544, #8599)
+* Add support for device dehydration (MSC2697). (#8380)
+* Add support for MSC2409, which allows sending typing, read receipts, and presence events to appservices. (#8437, #8590)
+* Change default room version to "6", per MSC2788. (#8461)
+* Add the ability to send non-membership events into a room via the ModuleApi. (#8479)
+* Increase default upload size limit from 10M to 50M. Contributed by @Akkowicz. (#8502)
+* Add support for modifying event content in ThirdPartyRules modules. (#8535, #8564)
+
+[1.13.1]
+* Update Synapse to 1.22.1
+* [Full changelog](https://github.com/matrix-org/synapse/releases/tag/v1.22.1)
+* Fix a bug where an appservice may not be forwarded events for a room it was recently invited to. Broke in v1.22.0. (#8676)
+* Fix Object of type frozendict is not JSON serializable exceptions when using third-party event rules. Broke in v1.22.0. (#8678)
+
+[1.14.0]
+* Update Synapse to 1.23.0
+* [Full changelog](https://github.com/matrix-org/synapse/releases/tag/v1.23.0)
+* Add a push rule that highlights when a jitsi conference is created in a room. (#8286)
+* Add an admin api to delete a single file or files that were not used for a defined time from server. Contributed by @dklimpel. (#8519)
+* Split admin API for reported events (GET /_synapse/admin/v1/event_reports) into detail and list endpoints. This is a breaking change to #8217 which was introduced in Synapse v1.21.0. Those who already use this API should check their scripts. Contributed by @dklimpel. (#8539)
+* Support generating structured logs via the standard logging configuration. (#8607, #8685)
+* Add an admin API to allow server admins to list users' pushers. Contributed by @dklimpel. (#8610, #8689)
+* Add an admin API GET /_synapse/admin/v1/users/<user_id>/media to get information about uploaded media. Contributed by @dklimpel. (#8647)
+* Add an admin API for local user media statistics. Contributed by @dklimpel. (#8700)
+* Add displayname to Shared-Secret Registration for admins. (#8722)
+
+[1.14.1]
+* Update Synapse to 1.23.1
+* [Full changelog](https://github.com/matrix-org/synapse/releases/tag/v1.23.1)
+* There is a denial of service attack (CVE-2020-26257) against the federation APIs in which future events will not be correctly sent to other servers over federation. This affects all servers that participate in open federation. (Fixed in #8776).
+
+[1.15.0]
+* Update Synapse to 1.24.0
+* [Full changelog](https://github.com/matrix-org/synapse/releases/tag/v1.24.0)
+* Add a maximum version for pysaml2 on Python 3.5
+
+[1.16.0]
+* Update Synapse to 1.25.0
+* [Full changelog](https://github.com/matrix-org/synapse/releases/tag/v1.25.0)
+* Add an admin API that lets server admins get power in rooms in which local users have power. (#8756)
+* Add optional HTTP authentication to replication endpoints. (#8853)
+* Improve the error messages printed as a result of configuration problems for extension modules. (#8874)
+* Add the number of local devices to Room Details Admin API. Contributed by @dklimpel. (#8886)
+* Add X-Robots-Tag header to stop web crawlers from indexing media. Contributed by Aaron Raimist. (#8887)
+* Spam-checkers may now define their methods as async. (#8890)
+* Add support for allowing users to pick their own user ID during a single-sign-on login. (#8897, #8900, #8911, #8938, #8941, #8942, #8951)
+* Add an email.invite_client_location configuration option to send a web client location to the invite endpoint on the identity server which allows customisation of the email template. (#8930)
+* The search term in the list room and list user Admin APIs is now treated as case-insensitive. (#8931)
+* Apply an IP range blacklist to push and key revocation requests. (#8821, #8870, #8954)
+* Add an option to allow re-use of user-interactive authentication sessions for a period of time. (#8970)
+* Allow running the redact endpoint on workers. (#8994)
+

CloudronManifest.json

@@ -5,7 +5,7 @@
   "description": "file://DESCRIPTION.md",
   "changelog": "file://CHANGELOG",
   "tagline": "Secure & decentralized communication",
-  "version": "1.12.1",
+  "version": "1.16.0",
   "healthCheckPath": "/",
   "httpPort": 8008,
   "memoryLimit": 536870912,
@@ -21,7 +21,7 @@
   "contactEmail": "support@cloudron.io",
   "icon": "file://logo.png",
   "tags": [
-    "im", "collaboration", "voip", "videochat", "chat", "slack", "zulip"
+    "im", "collaboration", "voip", "videochat", "chat", "slack", "zulip", "federated"
   ],
   "mediaLinks": [
     "https://screenshots.cloudron.io/org.matrix.synapse/1.png",

DESCRIPTION.md

@@ -1,4 +1,4 @@
-This app packages Synapse <upstream>1.21.1</upstream>.
+This app packages Synapse <upstream>1.25.0</upstream>.
 
 **This package only provides the Matrix backend. A variety of clients are available
 [here](https://matrix.org/clients/). Riot is a popular web frontend for Matrix and

Dockerfile

@@ -4,7 +4,7 @@ RUN mkdir -p /app/pkg
 
 WORKDIR /app/code
 
-ARG VERSION=v1.21.1
+ARG VERSION=v1.25.0
 
 # https://pythonspeed.com/articles/activate-virtualenv-dockerfile/
 RUN virtualenv -p python3 /app/code/env

test/package-lock.json

@@ -52,9 +52,9 @@
       "integrity": "sha512-tHq6qdbT9U1IRSGf14CL0pUlULksvY9OZ+5eEgl1N7t+OA3tGvNpxJCzuKQlsNgCVwbAs670L1vcVQi8j9HjnA=="
     },
     "@types/node": {
-      "version": "14.11.1",
-      "resolved": "https://registry.npmjs.org/@types/node/-/node-14.11.1.tgz",
-      "integrity": "sha512-oTQgnd0hblfLsJ6BvJzzSL+Inogp3lq9fGgqRkMB/ziKMgEUaFl801OncOzUmalfzt14N0oPHMK47ipl+wbTIw=="
+      "version": "14.11.8",
+      "resolved": "https://registry.npmjs.org/@types/node/-/node-14.11.8.tgz",
+      "integrity": "sha512-KPcKqKm5UKDkaYPTuXSx8wEP7vE9GnuaXIZKijwRYcePpZFDVuy2a57LarFKiORbHOuTOOwYzxVxcUzsh2P2Pw=="
     },
     "@types/yauzl": {
       "version": "2.9.1",
@@ -234,9 +234,9 @@
       }
     },
     "chromedriver": {
-      "version": "85.0.1",
-      "resolved": "https://registry.npmjs.org/chromedriver/-/chromedriver-85.0.1.tgz",
-      "integrity": "sha512-z8je3U4tXFZnx7AloRabM4Ep1lpFJvHxLoGuRvLg33Qy0UKk/z6OXmHUO2z6DKE0Oe6CFpjj/bdhuQ8dfvq9ug==",
+      "version": "86.0.0",
+      "resolved": "https://registry.npmjs.org/chromedriver/-/chromedriver-86.0.0.tgz",
+      "integrity": "sha512-byLJWhAfuYOmzRYPDf4asJgGDbI4gJGHa+i8dnQZGuv+6WW1nW1Fg+8zbBMOfLvGn7sKL41kVdmCEVpQHn9oyg==",
       "requires": {
         "@testim/chrome-version": "^1.0.7",
         "axios": "^0.19.2",

test/package.json

@@ -9,7 +9,7 @@
   "author": "",
   "license": "ISC",
   "dependencies": {
-    "chromedriver": "^85.0.1",
+    "chromedriver": "^86.0.0",
     "ejs": "^3.1.5",
     "expect.js": "^0.3.1",
     "mkdirp": "^1.0.4",