Update package version to 1.120.2

| datasource      | package            | from    | to      |
| --------------- | ------------------ | ------- | ------- |
| github-releases | element-hq/synapse | 1.139.1 | 1.139.2 |

CHANGELOG.md

@@ -1475,3 +1475,6 @@
 * Fix [CVE-2025-61672](https://www.cve.org/CVERecord?id=CVE-2025-61672) / [GHSA-fh66-fcv5-jjfr](https://github.com/element-hq/synapse/security/advisories/GHSA-fh66-fcv5-jjfr). Lack of validation for device keys in Synapse before 1.139.1 allows an attacker registered on the victim homeserver to degrade federation functionality, unpredictably breaking outbound federation to other homeservers. ([#17097](https://github.com/element-hq/synapse/issues/17097))
 * Drop support for unstable field names from the long-accepted [MSC2732](https://github.com/matrix-org/matrix-spec-proposals/pull/2732) (Olm fallback keys) proposal. This change allows unit tests to pass following the security patch above. ([#18996](https://github.com/element-hq/synapse/issues/18996))
 
+[1.120.2]
+* Update synapse to 1.139.2
+

CloudronManifest.json

@@ -5,8 +5,8 @@
   "description": "file://DESCRIPTION.md",
   "changelog": "file://CHANGELOG.md",
   "tagline": "Secure & decentralized communication",
-  "version": "1.120.1",
+  "version": "1.120.2",
-  "upstreamVersion": "1.139.1",
+  "upstreamVersion": "1.139.2",
   "healthCheckPath": "/",
   "httpPort": 8008,
   "memoryLimit": 536870912,

Dockerfile

@@ -8,7 +8,7 @@ WORKDIR /app/code
 RUN python3 -m venv /app/code/env
 
 # renovate: datasource=github-releases depName=element-hq/synapse versioning=semver extractVersion=^v(?<version>.+)$
-ARG SYNAPSE_VERSION=1.139.1
+ARG SYNAPSE_VERSION=1.139.2
 
 # renovate: datasource=github-releases depName=matrix-org/synapse-s3-storage-provider versioning=semver extractVersion=^v(?<version>.+)$
 ARG S3PROVIDER_VERSION=1.5.0

test/package-lock.json

@@ -9,7 +9,7 @@
       "version": "1.0.0",
       "license": "ISC",
       "dependencies": {
-        "chromedriver": "^141.0.0",
+        "chromedriver": "^141.0.1",
         "expect.js": "^0.3.1",
         "mocha": "^11.7.4",
         "selenium-webdriver": "^4.36.0"
@@ -259,9 +259,9 @@
       }
     },
     "node_modules/chromedriver": {
-      "version": "141.0.0",
+      "version": "141.0.1",
-      "resolved": "https://registry.npmjs.org/chromedriver/-/chromedriver-141.0.0.tgz",
+      "resolved": "https://registry.npmjs.org/chromedriver/-/chromedriver-141.0.1.tgz",
-      "integrity": "sha512-w0U5jyWlLaRHV+dhaSikDz4x0qOwZcbles2HBu4oRdd+Eq7M43Uns4eoP/6dKu9Uc5ppcK9gA/E9GHROGXhgPg==",
+      "integrity": "sha512-BvBP/wlZDU/oDSQ7cbolKE2DI/PP2T2qDWN75+QiPkW5bUs/pd5uz4LYREl1fyoIerhLGhS0OSmMxpUfDbP4Tg==",
       "hasInstallScript": true,
       "license": "Apache-2.0",
       "dependencies": {

test/package.json

@@ -9,7 +9,7 @@
   "author": "",
   "license": "ISC",
   "dependencies": {
-    "chromedriver": "^141.0.0",
+    "chromedriver": "^141.0.1",
     "expect.js": "^0.3.1",
     "mocha": "^11.7.4",
     "selenium-webdriver": "^4.36.0"