Version 1.5.0

CHANGELOG

@@ -142,3 +142,9 @@
 * Add support for generating thumbnails for WebP images. Previously, users would see an empty box instead of preview image. Contributed by @WGH-. (#7586)
 * Support the standardized m.login.sso user-interactive authentication flow. (#7630)
 
+[1.5.0]
+* Update Synapse to 1.15.2
+* [Full changelog](https://github.com/matrix-org/synapse/releases/tag/v1.15.2)
+* A malicious homeserver could force Synapse to reset the state in a room to a small subset of the correct state. This affects all Synapse deployments which federate with untrusted servers. (96e9afe6)
+* HTML pages served via Synapse were vulnerable to clickjacking attacks. This predominantly affects homeservers with single-sign-on enabled, but all server administrators are encouraged to upgrade. (ea26e9a9)
+

CloudronManifest.json

@@ -5,7 +5,7 @@
   "description": "file://DESCRIPTION.md",
   "changelog": "file://CHANGELOG",
   "tagline": "Secure & decentralized communication",
-  "version": "1.4.0",
+  "version": "1.5.0",
   "healthCheckPath": "/",
   "httpPort": 8008,
   "memoryLimit": 536870912,
@@ -19,9 +19,9 @@
   "manifestVersion": 2,
   "website": "https://matrix.org",
   "contactEmail": "support@cloudron.io",
-  "icon": "logo.png",
+  "icon": "file://logo.png",
   "tags": [
-    "im", "collaboration", "voip", "videochat", "chat"
+    "im", "collaboration", "voip", "videochat", "chat", "slack"
   ],
   "mediaLinks": [
     "https://cloudron-app-screenshots.s3.amazonaws.com/org.matrix.synapse/606cd9d4ccc3bee11a49f91444a2dad8947cbc7c/1.png",
@@ -30,7 +30,8 @@
   ],
   "changelog": "file://CHANGELOG",
   "postInstallMessage": "file://POSTINSTALL.md",
-  "minBoxVersion": "5.1.4",
+  "minBoxVersion": "5.3.0",
+  "forumUrl": "https://forum.cloudron.io/category/50/matrix-synapse-riot",
   "documentationUrl": "https://cloudron.io/documentation/apps/synapse/",
   "optionalSso": true
 }

DESCRIPTION.md

@@ -1,4 +1,4 @@
-This app packages Synapse <upstream>1.15.1</upstream>.
+This app packages Synapse <upstream>1.15.2</upstream>.
 
 **This package only provides the Matrix backend. A variety of clients are available
 [here](https://matrix.org/clients/). Riot is a popular web frontend for Matrix and

Dockerfile

@@ -4,7 +4,7 @@ RUN mkdir -p /app/pkg
 
 WORKDIR /app/code
 
-ARG VERSION=v1.15.1
+ARG VERSION=v1.15.2
 
 # https://pythonspeed.com/articles/activate-virtualenv-dockerfile/
 RUN virtualenv -p python3 /app/code/env

POSTINSTALL.md

@@ -1,8 +1,8 @@
-<sso>
+Account ids are created with the username and the second level domain under which the
-This app integrates with the Cloudron User Management. Cloudron users can register
+app is installed e.g. `@username@domain.com`.
-themselves using any client and use Matrix Synapse.
-</sso>
 
-**IMPORTANT: See the [docs](https://cloudron.io/documentation/apps/synapse/) on
+For federation to work, the second level domain has to be configured to serve up the
-how to complete setup and start using this app.**
+`.well-known/domain.com/matrix` URI. See the 
+[federation docs](https://cloudron.io/documentation/apps/synapse/) on
+how to do this.