Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Jan 13, 2026

This PR contains the following updates:

Package Update Change
ghcr.io/element-hq/synapse minor v1.144.0v1.145.0

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

element-hq/synapse (ghcr.io/element-hq/synapse)

v1.145.0

Compare Source

Synapse 1.145.0 (2026-01-13)

No significant changes since 1.145.0rc4.

End of Life of Ubuntu 25.04 Plucky Puffin

Ubuntu 25.04 (Plucky Puffin) will be end of life on Jan 17, 2026. Synapse will stop building packages for Ubuntu 25.04 shortly thereafter.

Updates to Locked Dependencies No Longer Included in Changelog

The "Updates to locked dependencies" section has been removed from the changelog due to lack of use and the maintenance burden. (#​19254)

Synapse 1.145.0rc4 (2026-01-08)

No significant changes since 1.145.0rc3.

This RC contains a fix specifically for openSUSE packaging and no other changes.

Synapse 1.145.0rc3 (2026-01-07)

No significant changes since 1.145.0rc2.

This RC strips out unnecessary files from the wheels that were added when fixing the source distribution packaging in the previous RC.

Synapse 1.145.0rc2 (2026-01-07)

No significant changes since 1.145.0rc1.

This RC fixes the source distribution packaging for uploading to PyPI.

Synapse 1.145.0rc1 (2026-01-06)
Features
  • Add memberships endpoint to the admin API. This is useful for forensics and T&S purposes. (#​19260)
  • Server admins can bypass the quarantine media check when downloading media by setting the admin_unsafely_bypass_quarantine query parameter to true on Client-Server API media download requests. (#​19275)
  • Implemented pagination for the MSC2666 mutual rooms endpoint. Contributed by @​tulir @​ Beeper. (#​19279)
  • Admin API: add worker support to GET /_synapse/admin/v2/users/<user_id>. (#​19281)
  • Improve proxy support for the federation_client.py dev script. Contributed by Denis Kasak (@​dkasak). (#​19300)
Bugfixes
  • Fix sliding sync performance slow down for long lived connections. (#​19206)
  • Fix a bug where Mastodon posts (and possibly other embeds) have the wrong description for URL previews. (#​19231)
  • Fix bug where Duration was logged incorrectly. (#​19267)
  • Fix bug introduced in 1.143.0 that broke support for versions of zope-interface older than 6.2. (#​19274)
  • Transform events with client metadata before serialising in /event response. (#​19340)
Updates to the Docker image
  • Add a way to expose metrics from the Docker image (SYNAPSE_ENABLE_METRICS). (#​19324)
Improved Documentation
  • Document the importance of public_baseurl when configuring OpenID Connect authentication. (#​19270)
Deprecations and Removals
  • Ubuntu 25.04 (Plucky Puffin) will be end of life on Jan 17, 2026. Synapse will stop building packages for Ubuntu 25.04 shortly thereafter.
  • Remove the "Updates to locked dependencies" section from the changelog due to lack of use and the maintenance burden. (#​19254)
Internal Changes
  • Group together dependabot update PRs to reduce the review load. (#​18402)
  • Fix HomeServer.shutdown() failing if the homeserver hasn't been setup yet. (#​19187)
  • Respond with useful error codes with Content-Length header/s are invalid. (#​19212)
  • Fix HomeServer.shutdown() failing if the homeserver failed to start. (#​19232)
  • Switch the build backend from poetry-core to maturin. (#​19234)
  • Raise the limit for concurrently-open non-security @​dependabot PRs from 5 to 10. (#​19253)
  • Require 14 days to pass before pulling in general dependency updates to help mitigate upstream supply chain attacks. (#​19258)
  • Drop the broken netlify documentation workflow until a new one is implemented. (#​19262)
  • Don't include debug logs in Clock unless explicitly enabled. (#​19278)
  • Use uv to test olddeps to ensure all transitive dependencies use minimum versions. (#​19289)
  • Add a config to be able to rate limit search in the user directory. (#​19291)
  • Log the original bind exception when encountering Failed to listen on 0.0.0.0, continuing because listening on [::]. (#​19297)
  • Unpin the version of Rust we use to build Synapse wheels (was 1.82.0) now that MacOS support has been dropped. (#​19302)
  • Make it more clear how shared_extra_conf is combined in our Docker configuration scripts. (#​19323)
  • Update CI to stream Complement progress and format logs in a separate step after all tests are done. (#​19326)
  • Format .github/workflows/tests.yml. (#​19327)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@mglants-bot
Copy link

mglants-bot bot commented Jan 13, 2026

--- kubernetes/subterra/apps/matrix/synapse/app Kustomization: flux-system/cluster-apps-synapse HelmRelease: matrix/synapse

+++ kubernetes/subterra/apps/matrix/synapse/app Kustomization: flux-system/cluster-apps-synapse HelmRelease: matrix/synapse

@@ -77,13 +77,13 @@

       - ::1/128
       - fe80::/64
       - fc00::/7
     image:
       pullPolicy: IfNotPresent
       repository: ghcr.io/element-hq/synapse
-      tag: v1.144.0
+      tag: v1.145.0
     ingress:
       annotations:
         cert-manager.io/cluster-issuer: letsencrypt-prod
         external-dns.alpha.kubernetes.io/target: ingress.ur30.ru
         nginx.ingress.kubernetes.io/cors-allow-origin: '*'
         nginx.ingress.kubernetes.io/enable-cors: 'true'

@mglants-bot
Copy link

mglants-bot bot commented Jan 13, 2026

--- HelmRelease: matrix/synapse Deployment: matrix/synapse-matrix-synapse

+++ HelmRelease: matrix/synapse Deployment: matrix/synapse-matrix-synapse

@@ -17,13 +17,13 @@

       app.kubernetes.io/name: matrix-synapse
       app.kubernetes.io/instance: synapse
       app.kubernetes.io/component: synapse
   template:
     metadata:
       annotations:
-        checksum/secrets: feff16da5a2d266ddc5db697e1d28da921841ae8483537d657abb5666aad9766
+        checksum/secrets: 79999bb8bfc01fb0d05a69000b15ade51b2df083f70a882c7b58986f11f5726e
         setGateway: 'true'
       labels:
         app.kubernetes.io/name: matrix-synapse
         app.kubernetes.io/instance: synapse
         app.kubernetes.io/component: synapse
     spec:
@@ -53,13 +53,13 @@

               key: password
         - name: REDIS_PASSWORD
           valueFrom:
             secretKeyRef:
               name: synapse-secret
               key: redis-password
-        image: ghcr.io/element-hq/synapse:v1.144.0
+        image: ghcr.io/element-hq/synapse:v1.145.0
         imagePullPolicy: IfNotPresent
         securityContext: {}
         ports:
         - name: http
           containerPort: 8008
           protocol: TCP
--- HelmRelease: matrix/synapse Deployment: matrix/synapse-appservice

+++ HelmRelease: matrix/synapse Deployment: matrix/synapse-appservice

@@ -18,13 +18,13 @@

       app.kubernetes.io/instance: synapse
       app.kubernetes.io/component: appservice
   template:
     metadata:
       annotations:
         checksum/worker-config: 411ea6990eddfcad501f1bca1677b7fe97e455f0e8230a4e79263c1a324e3bdd
-        checksum/secrets: 1ce3b22650803d1340a384ea2be049fffdee4fb69b163e71611bb7c4f31e0521
+        checksum/secrets: 181b75b241df382cb2af5e395e179798c5ab8a803dab62475a59a60ca20b610d
       labels:
         app.kubernetes.io/name: matrix-synapse
         app.kubernetes.io/instance: synapse
         app.kubernetes.io/component: appservice
     spec:
       serviceAccountName: default
@@ -53,13 +53,13 @@

         - name: REDIS_PASSWORD
           valueFrom:
             secretKeyRef:
               name: synapse-secret
               key: redis-password
         securityContext: {}
-        image: ghcr.io/element-hq/synapse:v1.144.0
+        image: ghcr.io/element-hq/synapse:v1.145.0
         imagePullPolicy: IfNotPresent
         ports:
         - name: metrics
           containerPort: 9090
           protocol: TCP
         livenessProbe:
--- HelmRelease: matrix/synapse Deployment: matrix/synapse-federation-reader

+++ HelmRelease: matrix/synapse Deployment: matrix/synapse-federation-reader

@@ -18,13 +18,13 @@

       app.kubernetes.io/instance: synapse
       app.kubernetes.io/component: federation-reader
   template:
     metadata:
       annotations:
         checksum/worker-config: 411ea6990eddfcad501f1bca1677b7fe97e455f0e8230a4e79263c1a324e3bdd
-        checksum/secrets: b365b84bdc08833bddffd30c752698a176d215df562e8a198a1dc48c6e448b49
+        checksum/secrets: 23a8f04a661a32c44e61c32aee449096abbf935e6268d1433df11b58f1e11f44
         setGateway: 'true'
       labels:
         app.kubernetes.io/name: matrix-synapse
         app.kubernetes.io/instance: synapse
         app.kubernetes.io/component: federation-reader
     spec:
@@ -54,13 +54,13 @@

         - name: REDIS_PASSWORD
           valueFrom:
             secretKeyRef:
               name: synapse-secret
               key: redis-password
         securityContext: {}
-        image: ghcr.io/element-hq/synapse:v1.144.0
+        image: ghcr.io/element-hq/synapse:v1.145.0
         imagePullPolicy: IfNotPresent
         ports:
         - name: metrics
           containerPort: 9090
           protocol: TCP
         - name: listener
--- HelmRelease: matrix/synapse Deployment: matrix/synapse-federation-sender

+++ HelmRelease: matrix/synapse Deployment: matrix/synapse-federation-sender

@@ -18,13 +18,13 @@

       app.kubernetes.io/instance: synapse
       app.kubernetes.io/component: federation-sender
   template:
     metadata:
       annotations:
         checksum/worker-config: 411ea6990eddfcad501f1bca1677b7fe97e455f0e8230a4e79263c1a324e3bdd
-        checksum/secrets: 2a4dcebb5d18ff959cbb812a6d1b31a2c8d3c4b588f2e62f140a3c95b776a20d
+        checksum/secrets: 0438067c30fe7f5ba4516b6a5cf95847599893040ac4c2f1a3fbe6e885444a2a
         setGateway: 'true'
       labels:
         app.kubernetes.io/name: matrix-synapse
         app.kubernetes.io/instance: synapse
         app.kubernetes.io/component: federation-sender
     spec:
@@ -54,13 +54,13 @@

         - name: REDIS_PASSWORD
           valueFrom:
             secretKeyRef:
               name: synapse-secret
               key: redis-password
         securityContext: {}
-        image: ghcr.io/element-hq/synapse:v1.144.0
+        image: ghcr.io/element-hq/synapse:v1.145.0
         imagePullPolicy: IfNotPresent
         ports:
         - name: metrics
           containerPort: 9090
           protocol: TCP
         livenessProbe:
--- HelmRelease: matrix/synapse Deployment: matrix/synapse-frontend-proxy

+++ HelmRelease: matrix/synapse Deployment: matrix/synapse-frontend-proxy

@@ -18,13 +18,13 @@

       app.kubernetes.io/instance: synapse
       app.kubernetes.io/component: frontend-proxy
   template:
     metadata:
       annotations:
         checksum/worker-config: 411ea6990eddfcad501f1bca1677b7fe97e455f0e8230a4e79263c1a324e3bdd
-        checksum/secrets: 46578abc0c52c5a076055385492be10fa2ba1f2841349f8ba3641a4c3d881931
+        checksum/secrets: c2bddacf0b19355d2e994d36e5f5b3010c16adc459d27fd2c0565572ec1b6d25
       labels:
         app.kubernetes.io/name: matrix-synapse
         app.kubernetes.io/instance: synapse
         app.kubernetes.io/component: frontend-proxy
     spec:
       serviceAccountName: default
@@ -53,13 +53,13 @@

         - name: REDIS_PASSWORD
           valueFrom:
             secretKeyRef:
               name: synapse-secret
               key: redis-password
         securityContext: {}
-        image: ghcr.io/element-hq/synapse:v1.144.0
+        image: ghcr.io/element-hq/synapse:v1.145.0
         imagePullPolicy: IfNotPresent
         ports:
         - name: metrics
           containerPort: 9090
           protocol: TCP
         - name: listener
--- HelmRelease: matrix/synapse Deployment: matrix/synapse-generic-worker

+++ HelmRelease: matrix/synapse Deployment: matrix/synapse-generic-worker

@@ -18,13 +18,13 @@

       app.kubernetes.io/instance: synapse
       app.kubernetes.io/component: generic-worker
   template:
     metadata:
       annotations:
         checksum/worker-config: 411ea6990eddfcad501f1bca1677b7fe97e455f0e8230a4e79263c1a324e3bdd
-        checksum/secrets: 6281efe338dc0f2af10d44ad697a6915633a0ae268518ae86d6cbcbbe25c8aa2
+        checksum/secrets: b96014f201d3230b01201aa41f450c67129cece63b627519f1dc7df022fe43d3
       labels:
         app.kubernetes.io/name: matrix-synapse
         app.kubernetes.io/instance: synapse
         app.kubernetes.io/component: generic-worker
     spec:
       serviceAccountName: default
@@ -53,13 +53,13 @@

         - name: REDIS_PASSWORD
           valueFrom:
             secretKeyRef:
               name: synapse-secret
               key: redis-password
         securityContext: {}
-        image: ghcr.io/element-hq/synapse:v1.144.0
+        image: ghcr.io/element-hq/synapse:v1.145.0
         imagePullPolicy: IfNotPresent
         ports:
         - name: metrics
           containerPort: 9090
           protocol: TCP
         - name: listener
--- HelmRelease: matrix/synapse Deployment: matrix/synapse-messages

+++ HelmRelease: matrix/synapse Deployment: matrix/synapse-messages

@@ -18,13 +18,13 @@

       app.kubernetes.io/instance: synapse
       app.kubernetes.io/component: messages
   template:
     metadata:
       annotations:
         checksum/worker-config: 411ea6990eddfcad501f1bca1677b7fe97e455f0e8230a4e79263c1a324e3bdd
-        checksum/secrets: a5a5f6de994292c4cfe7c7777ae7bc46b502bb476b1163c2a05fa155a562d639
+        checksum/secrets: 9be3937ada4ba9e2a594e9c382ed57a476bc2cff89b772f3ed0d12c12ae814dd
       labels:
         app.kubernetes.io/name: matrix-synapse
         app.kubernetes.io/instance: synapse
         app.kubernetes.io/component: messages
     spec:
       serviceAccountName: default
@@ -53,13 +53,13 @@

         - name: REDIS_PASSWORD
           valueFrom:
             secretKeyRef:
               name: synapse-secret
               key: redis-password
         securityContext: {}
-        image: ghcr.io/element-hq/synapse:v1.144.0
+        image: ghcr.io/element-hq/synapse:v1.145.0
         imagePullPolicy: IfNotPresent
         ports:
         - name: metrics
           containerPort: 9090
           protocol: TCP
         - name: listener
--- HelmRelease: matrix/synapse Deployment: matrix/synapse-pusher

+++ HelmRelease: matrix/synapse Deployment: matrix/synapse-pusher

@@ -18,13 +18,13 @@

       app.kubernetes.io/instance: synapse
       app.kubernetes.io/component: pusher
   template:
     metadata:
       annotations:
         checksum/worker-config: 411ea6990eddfcad501f1bca1677b7fe97e455f0e8230a4e79263c1a324e3bdd
-        checksum/secrets: 8b16e045916a4cecb6553ec2940b67a2faebde749c2313b6c150025a0ee3f644
+        checksum/secrets: 20474ce58c045abb705792c4d5761bf528124947f1a602a0b73cf599c8b4edb9
       labels:
         app.kubernetes.io/name: matrix-synapse
         app.kubernetes.io/instance: synapse
         app.kubernetes.io/component: pusher
     spec:
       serviceAccountName: default
@@ -53,13 +53,13 @@

         - name: REDIS_PASSWORD
           valueFrom:
             secretKeyRef:
               name: synapse-secret
               key: redis-password
         securityContext: {}
-        image: ghcr.io/element-hq/synapse:v1.144.0
+        image: ghcr.io/element-hq/synapse:v1.145.0
         imagePullPolicy: IfNotPresent
         ports:
         - name: metrics
           containerPort: 9090
           protocol: TCP
         livenessProbe:
--- HelmRelease: matrix/synapse Deployment: matrix/synapse-sso

+++ HelmRelease: matrix/synapse Deployment: matrix/synapse-sso

@@ -18,13 +18,13 @@

       app.kubernetes.io/instance: synapse
       app.kubernetes.io/component: sso
   template:
     metadata:
       annotations:
         checksum/worker-config: 411ea6990eddfcad501f1bca1677b7fe97e455f0e8230a4e79263c1a324e3bdd
-        checksum/secrets: 34585f7247781b2232cb5a01d4855261d842cbe4be8bd47047e3b226b2ec1b9c
+        checksum/secrets: 2c527616f8187bbabd2f729a92646770bdfb1c961004ce84634767b25ce5712b
       labels:
         app.kubernetes.io/name: matrix-synapse
         app.kubernetes.io/instance: synapse
         app.kubernetes.io/component: sso
     spec:
       serviceAccountName: default
@@ -53,13 +53,13 @@

         - name: REDIS_PASSWORD
           valueFrom:
             secretKeyRef:
               name: synapse-secret
               key: redis-password
         securityContext: {}
-        image: ghcr.io/element-hq/synapse:v1.144.0
+        image: ghcr.io/element-hq/synapse:v1.145.0
         imagePullPolicy: IfNotPresent
         ports:
         - name: metrics
           containerPort: 9090
           protocol: TCP
         - name: listener
--- HelmRelease: matrix/synapse Deployment: matrix/synapse-synchrotron

+++ HelmRelease: matrix/synapse Deployment: matrix/synapse-synchrotron

@@ -18,13 +18,13 @@

       app.kubernetes.io/instance: synapse
       app.kubernetes.io/component: synchrotron
   template:
     metadata:
       annotations:
         checksum/worker-config: 411ea6990eddfcad501f1bca1677b7fe97e455f0e8230a4e79263c1a324e3bdd
-        checksum/secrets: 7fb359482e824e2192a4b5eee513f420ac23b2e3248e1c443c23a87dc37161df
+        checksum/secrets: c48d0dba29f1455330de8b10718879b0fc2f4cf51a950f713149c9edd0a31964
       labels:
         app.kubernetes.io/name: matrix-synapse
         app.kubernetes.io/instance: synapse
         app.kubernetes.io/component: synchrotron
     spec:
       serviceAccountName: default
@@ -53,13 +53,13 @@

         - name: REDIS_PASSWORD
           valueFrom:
             secretKeyRef:
               name: synapse-secret
               key: redis-password
         securityContext: {}
-        image: ghcr.io/element-hq/synapse:v1.144.0
+        image: ghcr.io/element-hq/synapse:v1.145.0
         imagePullPolicy: IfNotPresent
         ports:
         - name: metrics
           containerPort: 9090
           protocol: TCP
         - name: listener

… v1.145.0 )

| datasource | package                    | from     | to       |
| ---------- | -------------------------- | -------- | -------- |
| docker     | ghcr.io/element-hq/synapse | v1.144.0 | v1.145.0 |
@renovate renovate bot force-pushed the renovate/ghcr.io-element-hq-synapse-1.x branch from 9574d94 to f22c77c Compare January 23, 2026 19:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant