Version 1.14.1

CHANGELOG

@@ -231,3 +231,46 @@
 [1.12.1]
 * Updat Synapse to 1.21.1
 * [Full changelog](https://github.com/matrix-org/synapse/releases/tag/v1.21.1)
+
+[1.12.2]
+* Update Synapse to 1.21.2
+* [Full changelog](https://github.com/matrix-org/synapse/releases/tag/v1.21.2)
+* Security: HTML pages served via Synapse were vulnerable to cross-site scripting (XSS) attacks. All server administrators are encouraged to upgrade
+* Fix rare bug where sending an event would fail due to a racey assertion. (#8530)
+
+[1.13.0]
+* Update Synapse to 1.22.0
+* [Full changelog](https://github.com/matrix-org/synapse/releases/tag/v1.22.0)
+* Add ability for ThirdPartyEventRules modules to query and manipulate whether a room is in the public rooms directory. (#8292, #8467)
+* Add support for olm fallback keys (MSC2732). (#8312, #8501)
+* Add support for running background tasks in a separate worker process. (#8369, #8458, #8489, #8513, #8544, #8599)
+* Add support for device dehydration (MSC2697). (#8380)
+* Add support for MSC2409, which allows sending typing, read receipts, and presence events to appservices. (#8437, #8590)
+* Change default room version to "6", per MSC2788. (#8461)
+* Add the ability to send non-membership events into a room via the ModuleApi. (#8479)
+* Increase default upload size limit from 10M to 50M. Contributed by @Akkowicz. (#8502)
+* Add support for modifying event content in ThirdPartyRules modules. (#8535, #8564)
+
+[1.13.1]
+* Update Synapse to 1.22.1
+* [Full changelog](https://github.com/matrix-org/synapse/releases/tag/v1.22.1)
+* Fix a bug where an appservice may not be forwarded events for a room it was recently invited to. Broke in v1.22.0. (#8676)
+* Fix Object of type frozendict is not JSON serializable exceptions when using third-party event rules. Broke in v1.22.0. (#8678)
+
+[1.14.0]
+* Update Synapse to 1.23.0
+* [Full changelog](https://github.com/matrix-org/synapse/releases/tag/v1.23.0)
+* Add a push rule that highlights when a jitsi conference is created in a room. (#8286)
+* Add an admin api to delete a single file or files that were not used for a defined time from server. Contributed by @dklimpel. (#8519)
+* Split admin API for reported events (GET /_synapse/admin/v1/event_reports) into detail and list endpoints. This is a breaking change to #8217 which was introduced in Synapse v1.21.0. Those who already use this API should check their scripts. Contributed by @dklimpel. (#8539)
+* Support generating structured logs via the standard logging configuration. (#8607, #8685)
+* Add an admin API to allow server admins to list users' pushers. Contributed by @dklimpel. (#8610, #8689)
+* Add an admin API GET /_synapse/admin/v1/users/<user_id>/media to get information about uploaded media. Contributed by @dklimpel. (#8647)
+* Add an admin API for local user media statistics. Contributed by @dklimpel. (#8700)
+* Add displayname to Shared-Secret Registration for admins. (#8722)
+
+[1.14.1]
+* Update Synapse to 1.23.1
+* [Full changelog](https://github.com/matrix-org/synapse/releases/tag/v1.23.1)
+* There is a denial of service attack (CVE-2020-26257) against the federation APIs in which future events will not be correctly sent to other servers over federation. This affects all servers that participate in open federation. (Fixed in #8776).
+

CloudronManifest.json

@@ -5,7 +5,7 @@
   "description": "file://DESCRIPTION.md",
   "changelog": "file://CHANGELOG",
   "tagline": "Secure & decentralized communication",
-  "version": "1.12.1",
+  "version": "1.14.1",
   "healthCheckPath": "/",
   "httpPort": 8008,
   "memoryLimit": 536870912,

DESCRIPTION.md

@@ -1,4 +1,4 @@
-This app packages Synapse <upstream>1.21.1</upstream>.
+This app packages Synapse <upstream>1.23.1</upstream>.
 
 **This package only provides the Matrix backend. A variety of clients are available
 [here](https://matrix.org/clients/). Riot is a popular web frontend for Matrix and

Dockerfile

@@ -4,7 +4,7 @@ RUN mkdir -p /app/pkg
 
 WORKDIR /app/code
 
-ARG VERSION=v1.21.1
+ARG VERSION=v1.23.1
 
 # https://pythonspeed.com/articles/activate-virtualenv-dockerfile/
 RUN virtualenv -p python3 /app/code/env

test/package-lock.json

@@ -52,9 +52,9 @@
       "integrity": "sha512-tHq6qdbT9U1IRSGf14CL0pUlULksvY9OZ+5eEgl1N7t+OA3tGvNpxJCzuKQlsNgCVwbAs670L1vcVQi8j9HjnA=="
     },
     "@types/node": {
-      "version": "14.11.1",
-      "resolved": "https://registry.npmjs.org/@types/node/-/node-14.11.1.tgz",
-      "integrity": "sha512-oTQgnd0hblfLsJ6BvJzzSL+Inogp3lq9fGgqRkMB/ziKMgEUaFl801OncOzUmalfzt14N0oPHMK47ipl+wbTIw=="
+      "version": "14.11.8",
+      "resolved": "https://registry.npmjs.org/@types/node/-/node-14.11.8.tgz",
+      "integrity": "sha512-KPcKqKm5UKDkaYPTuXSx8wEP7vE9GnuaXIZKijwRYcePpZFDVuy2a57LarFKiORbHOuTOOwYzxVxcUzsh2P2Pw=="
     },
     "@types/yauzl": {
       "version": "2.9.1",
@@ -234,9 +234,9 @@
       }
     },
     "chromedriver": {
-      "version": "85.0.1",
-      "resolved": "https://registry.npmjs.org/chromedriver/-/chromedriver-85.0.1.tgz",
-      "integrity": "sha512-z8je3U4tXFZnx7AloRabM4Ep1lpFJvHxLoGuRvLg33Qy0UKk/z6OXmHUO2z6DKE0Oe6CFpjj/bdhuQ8dfvq9ug==",
+      "version": "86.0.0",
+      "resolved": "https://registry.npmjs.org/chromedriver/-/chromedriver-86.0.0.tgz",
+      "integrity": "sha512-byLJWhAfuYOmzRYPDf4asJgGDbI4gJGHa+i8dnQZGuv+6WW1nW1Fg+8zbBMOfLvGn7sKL41kVdmCEVpQHn9oyg==",
       "requires": {
         "@testim/chrome-version": "^1.0.7",
         "axios": "^0.19.2",

test/package.json

@@ -9,7 +9,7 @@
   "author": "",
   "license": "ISC",
   "dependencies": {
-    "chromedriver": "^85.0.1",
+    "chromedriver": "^86.0.0",
     "ejs": "^3.1.5",
     "expect.js": "^0.3.1",
     "mkdirp": "^1.0.4",