peter/homelab-docker-config
1
0
Fork 0
Code Issues Pull Requests 10 Packages Projects Releases Wiki Activity

Update matrixdotorg/synapse Docker tag to v1.139.2 #190

Merged
peter merged 1 commits from renovate/matrix into master 2025-10-10 20:05:07 +02:00
Conversation 0 Commits 1 Files Changed 2 +2 -2
renovate-bot commented 2025-10-08 02:02:45 +02:00
Collaborator
Copy Link

This PR contains the following updates:

Package Update Change
matrixdotorg/synapse (source) patch v1.139.0 -> v1.139.2

Release Notes

element-hq/synapse (matrixdotorg/synapse)

v1.139.2

Compare Source

Synapse 1.139.2 (2025-10-07)
Bugfixes

v1.139.1

Compare Source

Synapse 1.139.1 (2025-10-07)
Security Fixes
  • Fix CVE-2025-61672 / GHSA-fh66-fcv5-jjfr. Lack of validation for device keys in Synapse before 1.139.1 allows an attacker registered on the victim homeserver to degrade federation functionality, unpredictably breaking outbound federation to other homeservers. (#​17097)
Deprecations and Removals
  • Drop support for unstable field names from the long-accepted MSC2732 (Olm fallback keys) proposal. This change allows unit tests to pass following the security patch above. (#​18996)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [matrixdotorg/synapse](https://matrix.org/docs/projects/server/synapse) ([source](https://github.com/element-hq/synapse)) | patch | `v1.139.0` -> `v1.139.2` | --- ### Release Notes <details> <summary>element-hq/synapse (matrixdotorg/synapse)</summary> ### [`v1.139.2`](https://github.com/element-hq/synapse/releases/tag/v1.139.2) [Compare Source](https://github.com/element-hq/synapse/compare/v1.139.1...v1.139.2) ##### Synapse 1.139.2 (2025-10-07) ##### Bugfixes - Fix a bug introduced in 1.139.1 where a client could receive an Internal Server Error if they set `device_keys: null` in the request to [`POST /_matrix/client/v3/keys/upload`](https://spec.matrix.org/v1.16/client-server-api/#post_matrixclientv3keysupload). ([#&#8203;19023](https://github.com/element-hq/synapse/issues/19023)) ### [`v1.139.1`](https://github.com/element-hq/synapse/releases/tag/v1.139.1) [Compare Source](https://github.com/element-hq/synapse/compare/v1.139.0...v1.139.1) ##### Synapse 1.139.1 (2025-10-07) ##### Security Fixes - Fix [CVE-2025-61672](https://www.cve.org/CVERecord?id=CVE-2025-61672) / [GHSA-fh66-fcv5-jjfr](https://github.com/element-hq/synapse/security/advisories/GHSA-fh66-fcv5-jjfr). Lack of validation for device keys in Synapse before 1.139.1 allows an attacker registered on the victim homeserver to degrade federation functionality, unpredictably breaking outbound federation to other homeservers. ([#&#8203;17097](https://github.com/element-hq/synapse/issues/17097)) ##### Deprecations and Removals - Drop support for unstable field names from the long-accepted [MSC2732](https://github.com/matrix-org/matrix-spec-proposals/pull/2732) (Olm fallback keys) proposal. This change allows unit tests to pass following the security patch above. ([#&#8203;18996](https://github.com/element-hq/synapse/issues/18996)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS40Ni42IiwidXBkYXRlZEluVmVyIjoiNDEuNDYuNiIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6W119-->
renovate-bot added 1 commit 2025-10-08 02:02:45 +02:00
Update matrixdotorg/synapse Docker tag to v1.139.2 d1b94da293
peter merged commit c9eefa1314 into master 2025-10-10 20:05:07 +02:00
peter deleted branch renovate/matrix 2025-10-10 20:05:08 +02:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
renovate-bot peter
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: peter/homelab-docker-config#190
Delete Branch "renovate/matrix"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?