homelab/dc-matrix

Fork 0

chore(deps): update all non-major dependencies #144

Open

renovate wants to merge 1 commit from renovate/all-minor-patch into main

renovate commented

2026-06-04 12:17:55 +00:00

Member

This PR contains the following updates:

Package	Update	Change
dock.mau.dev/mautrix/whatsapp	minor	`v0.2605.0` → `v0.2606.0`
docker.io/matrixdotorg/synapse	minor	`v1.153.0` → `v1.155.0`
ghcr.io/element-hq/matrix-authentication-service	minor	`1.17.0` → `1.19.0`

Release Notes

element-hq/synapse (docker.io/matrixdotorg/synapse)

Synapse 1.155.0 (2026-06-16)

End of Life of Debian 12 Bookworm

The next version of Synapse will not include Debian packages for Debian 12 Bookworm
as it reached end of life on the 10th of June 2026.

Internal Changes

When building releases, don't cancel Debian package builds when one of them fails. (#19842)

Synapse 1.155.0rc1 (2026-06-09)

Bugfixes

Limit the to-device EDU size to a reasonable value to mitigate long queues of to-device messages preventing outgoing federation because of the size of the transaction. (#19617)
Work around bug that sometimes breaks joining restricted rooms that require a remote join. Contributed by @tulir @ Beeper. (#19730)
Update Sliding Sync to return a new response immediately if a room subscription has changed and produced a new response. (#19734, #19792)
Fix the /capabilities endpoint returning a 500 error on non-media workers when MSC4452: Preview URL capabilities API is enabled. (#19839)

Improved Documentation

Document how to see Rust build failure output when using poetry install. (#19818)
Document that the SQLite version included in Ubuntu LTS, aside from ESM-only versions, is included in our support policy. (#19823)

Internal Changes

Port the Python Event classes to Rust. (#19701, #19816, #19817, #19819)
Added tests to ensure that email notification links are sanitized. Contributed by Noah Markert. (#19741)
Add GcpJsonFormatter logging formatter for use with Google Cloud Logging and GKE deployments. (#19775)
Add more logging to the to-device message replication stream. (#19801, #19821)
Port Requester class to Rust. (#19828)

Synapse 1.154.0 (2026-06-04)

No significant changes since 1.154.0rc1.

Synapse 1.154.0rc1 (2026-05-27)

Features

Add support for MSC4452: Preview URL capabilities API which exposes a io.element.msc4452.preview_url capability.
If experimental_features.msc4452_enabled is true, the /_matrix/(client/v1/media|media/v3)/preview_url endpoint
now responds with a 403 status code when the capability is disabled. (#19715)

Bugfixes

Fix a bug in MSC4186: Simplified Sliding Sync that could prevent user avatars from showing if the room had an empty name. (#19468, #19791)
Fix access token cache not being invalidated for sessions using refresh tokens. Contributed by @FrenchGithubUser @ Famedly. (#19483)
Fix bug where Synapse would return 400 (M_BAD_JSON) when sending a message with a mentions field and Synapse module check_event_allowed callback registered (frozen event). Contributed by @gaetan-sbt. (#19634)
Fix long-standing but niche bug with /sync where it could attempt to fetch data with flawed invalid future tokens. (#19644)
Fix /sync failing when MSC4354 Sticky Events are enabled and the sync request filters out Ephemeral Data Units (EDUs). (#19787)
Fix packaging for Fedora and EPEL caused by unnecessary bumping attrs minimum version requirement in pyproject.toml file. Contributed by Oleg Girko. (#19789)
Fix merging signatures when a policy server is running under the same server name as Synapse. The bug was re-introduced in v1.153.0rc1 after being fixed earlier in v1.151.0rc1. Contributed by @tulir @ Beeper. (#19797)

Improved Documentation

Added details about how Synapse syncs the picture claim when update_profile_information setting is true. (#19508)

Internal Changes

Port Event.content field to Rust. (#19725)
Prefer close backfill points (absolute distance). (#19748)
Replace unique quarantined_media waiting patterns with standard wait_for_stream_token(...). (#19764)
Improve Synapse logging around when someone encounters We can't get valid state history. so you can correlate everything by event_id. (#19765)
Tidy up Rust RoomVersion structs. (#19766)
Update WorkerLock tests to better stress the WORKER_LOCK_MAX_RETRY_INTERVAL. (#19772)
Refactor MSC4242: State DAG checks behind a single TypeIs helper to avoid scattered isinstance casts. (#19774)
Use StrCollection for prev_state_events. (#19777)
Fix up the construction of events in tests, ahead of the Rust event port. (#19781)

element-hq/matrix-authentication-service (ghcr.io/element-hq/matrix-authentication-service)

`v1.19.0`

Compare Source

Docker image

Regular image:

Digest:

ghcr.io/element-hq/matrix-authentication-service@sha256:fb25648b12e985d1192ea3dc7b6def38f97ca79bacba262daca5b82532e3a3dd
oci.element.io/matrix-authentication-service@sha256:fb25648b12e985d1192ea3dc7b6def38f97ca79bacba262daca5b82532e3a3dd

Tags:

ghcr.io/element-hq/matrix-authentication-service:1.19.0
ghcr.io/element-hq/matrix-authentication-service:1.19
ghcr.io/element-hq/matrix-authentication-service:1
ghcr.io/element-hq/matrix-authentication-service:sha-c7fd1f9
ghcr.io/element-hq/matrix-authentication-service:latest
oci.element.io/matrix-authentication-service:1.19.0
oci.element.io/matrix-authentication-service:1.19
oci.element.io/matrix-authentication-service:1
oci.element.io/matrix-authentication-service:sha-c7fd1f9
oci.element.io/matrix-authentication-service:latest

Debug variant:

Digest:

ghcr.io/element-hq/matrix-authentication-service@sha256:4aed26ea5d210337c1fa7a61f1d1cbcea4835e1e3d58dc7b2cef434f15cb057d
oci.element.io/matrix-authentication-service@sha256:4aed26ea5d210337c1fa7a61f1d1cbcea4835e1e3d58dc7b2cef434f15cb057d

Tags:

ghcr.io/element-hq/matrix-authentication-service:1.19.0-debug
ghcr.io/element-hq/matrix-authentication-service:1.19-debug
ghcr.io/element-hq/matrix-authentication-service:1-debug
ghcr.io/element-hq/matrix-authentication-service:sha-c7fd1f9-debug
ghcr.io/element-hq/matrix-authentication-service:latest-debug
oci.element.io/matrix-authentication-service:1.19.0-debug
oci.element.io/matrix-authentication-service:1.19-debug
oci.element.io/matrix-authentication-service:1-debug
oci.element.io/matrix-authentication-service:sha-c7fd1f9-debug
oci.element.io/matrix-authentication-service:latest-debug

What's Changed

Documentation

Fix a typo in the Synapse configuration instructions in the documentation by @TuxCoder in #5726
Fix typo in the configuration documentation client_secret_jwk-> client_secret_jwt by @c-bg in #5663

Translations

Translations updates for main by @matrixbot in #5728
Translations updates for v1.19 by @matrixbot in #5739

Internal Changes

Automatic merge back to main by @matrixbot in #5706
Automatic merge back to main by @matrixbot in #5724
Set X-Frame-Options header to DENY for human facing screens by @hughns in #5721
Fix clippy lints on the main branch by @sandhose in #5727

Other Changes

Per-provider registration token requirement by @defaultdino in #5605
Refactor login form to include password input conditionally by @gordnhoo in #5603

New Contributors

@TuxCoder made their first contribution in #5726
@gordnhoo made their first contribution in #5603
@c-bg made their first contribution in #5663

Full Changelog: https://github.com/element-hq/matrix-authentication-service/compare/v1.18.0...v1.19.0

`v1.18.0`

Compare Source

Docker image

Regular image:

Digest:

ghcr.io/element-hq/matrix-authentication-service@sha256:fa0de1cd3d02e07ab65e9730c927ec65155245911c61ac97d564e490bfefe373
oci.element.io/matrix-authentication-service@sha256:fa0de1cd3d02e07ab65e9730c927ec65155245911c61ac97d564e490bfefe373

Tags:

ghcr.io/element-hq/matrix-authentication-service:1.18.0
ghcr.io/element-hq/matrix-authentication-service:1.18
ghcr.io/element-hq/matrix-authentication-service:1
ghcr.io/element-hq/matrix-authentication-service:sha-7b6c5af
ghcr.io/element-hq/matrix-authentication-service:latest
oci.element.io/matrix-authentication-service:1.18.0
oci.element.io/matrix-authentication-service:1.18
oci.element.io/matrix-authentication-service:1
oci.element.io/matrix-authentication-service:sha-7b6c5af
oci.element.io/matrix-authentication-service:latest

Debug variant:

Digest:

ghcr.io/element-hq/matrix-authentication-service@sha256:fcfd806cd9e319e676c9ad5ad543f42bfecea3065abb4a18f8fe4b0ffc6ff186
oci.element.io/matrix-authentication-service@sha256:fcfd806cd9e319e676c9ad5ad543f42bfecea3065abb4a18f8fe4b0ffc6ff186

Tags:

ghcr.io/element-hq/matrix-authentication-service:1.18.0-debug
ghcr.io/element-hq/matrix-authentication-service:1.18-debug
ghcr.io/element-hq/matrix-authentication-service:1-debug
ghcr.io/element-hq/matrix-authentication-service:sha-7b6c5af-debug
ghcr.io/element-hq/matrix-authentication-service:latest-debug
oci.element.io/matrix-authentication-service:1.18.0-debug
oci.element.io/matrix-authentication-service:1.18-debug
oci.element.io/matrix-authentication-service:1-debug
oci.element.io/matrix-authentication-service:sha-7b6c5af-debug
oci.element.io/matrix-authentication-service:latest-debug

What's Changed

New Features

Disable the device code auto-filling by default and match the device authorization grant with the designs by @sandhose in #5704

Changes to the admin API

Admin API - User - Add displayname and avatar url when adding user by @mcalinghee in #5671

Translations

Translations updates for main by @matrixbot in #5705
Translations updates for v1.18 by @matrixbot in #5723

Internal Changes

Automatic merge back to main by @matrixbot in #5669
Automatic merge back to main by @matrixbot in #5690
Split multi-arch Docker build into parallel jobs by @sandhose in #5474

Other Changes

Fix typo in manual: policy.path -> policy.wasm_module by @reivilibre in #5654
Use translation text for "Cancel" button in reauth template by @MadLittleMods in #5666
Add a bit more context for what bind address couldn't be parsed by @MadLittleMods in #5637
Fix client linking to none on policy violation screen by @MadLittleMods in #5667
Update policy violation screen when running into the session/device soft_limit in interactive contexts by @MadLittleMods in #5639
Document how to manually test login flows by @MadLittleMods in #5642
Harden the security of our GitHub Actions by @anoadragon453 in #5664
Add oauth.device_code_grant_enabled configuration option by @hughns in #5612
Fix TestState.reset() to retain mock homeserver in-memory state by @MadLittleMods in #5678
Bump lettre to appease cargo-deny on RUSTSEC-2026-0141 by @sandhose in #5684
Fix the transformation of the Docker build metadata in CI by @sandhose in #5683
Increase dependabot interval from daily to monthly by @hughns in #5686
Remove unused apalis dependabot config by @hughns in #5685
Push MAS docker images to Element OCI Registry by @devonh in #5459
Schedule SyncDevicesJob after dangerous_hard_limit_eviction so the homeserver stays up to date by @MadLittleMods in #5679
Check whether policy evaluation result is valid() when we process_violations_for_compat_login(...) by @MadLittleMods in #5681
Interactive compat m.login.sso test for session soft_limit by @MadLittleMods in #5675
Show session/device limit errors on account page by @MadLittleMods in #5644
Add max_session_threshold configuration (only apply session_limit to people under the threshold) by @MadLittleMods in #5670
Fix compatibility typo in session_limit config by @MadLittleMods in #5692
Switch to pnpm by @sandhose in #5674
Bump most frontend dependencies by @sandhose in #5699
Update Compound to the latest version by @sandhose in #5703
Migrate to Tailwind v4 by @sandhose in #5702
Enforce clippy::allow_attributes (prefer #[expect] over #[allow]) by @MadLittleMods in #5691
Fix a few plurals in the English translations by @sandhose in #5715

Dependency Updates

build(deps-dev): bump postcss from 8.5.8 to 8.5.12 in /frontend by @dependabot[bot] in #5658
build(deps): bump actions/upload-pages-artifact from 4.0.0 to 5.0.0 by @dependabot[bot] in #5626
build(deps): bump softprops/action-gh-release from 2.6.1 to 3.0.0 by @dependabot[bot] in #5627
build(deps): bump peter-evans/create-pull-request from 8.1.0 to 8.1.1 by @dependabot[bot] in #5628
build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by @dependabot[bot] in #5629
Bump the tracing group across 1 directory with 2 updates by @dependabot[bot] in #5676

Full Changelog: https://github.com/element-hq/matrix-authentication-service/compare/v1.17.0...v1.18.0

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | dock.mau.dev/mautrix/whatsapp | minor | `v0.2605.0` → `v0.2606.0` | | [docker.io/matrixdotorg/synapse](https://github.com/element-hq/synapse) | minor | `v1.153.0` → `v1.155.0` | | [ghcr.io/element-hq/matrix-authentication-service](https://github.com/element-hq/matrix-authentication-service) | minor | `1.17.0` → `1.19.0` | --- ### Release Notes <details> <summary>element-hq/synapse (docker.io/matrixdotorg/synapse)</summary> ### [`v1.155.0`](https://github.com/element-hq/synapse/releases/tag/v1.155.0) [Compare Source](https://github.com/element-hq/synapse/compare/v1.154.0...v1.155.0) ### Synapse 1.155.0 (2026-06-16) #### End of Life of Debian 12 Bookworm The next version of Synapse will not include Debian packages for Debian 12 Bookworm as it reached end of life on the 10th of June 2026. #### Internal Changes - When building releases, don't cancel Debian package builds when one of them fails. ([#19842](https://github.com/element-hq/synapse/issues/19842)) ### Synapse 1.155.0rc1 (2026-06-09) #### Bugfixes - Limit the to-device EDU size to a reasonable value to mitigate long queues of to-device messages preventing outgoing federation because of the size of the transaction. ([#19617](https://github.com/element-hq/synapse/issues/19617)) - Work around bug that sometimes breaks joining restricted rooms that require a remote join. Contributed by [@tulir](https://github.com/tulir) @ Beeper. ([#19730](https://github.com/element-hq/synapse/issues/19730)) - Update Sliding Sync to return a new response immediately if a room subscription has changed and produced a new response. ([#19734](https://github.com/element-hq/synapse/issues/19734), [#19792](https://github.com/element-hq/synapse/issues/19792)) - Fix the `/capabilities` endpoint returning a 500 error on non-media workers when [MSC4452: Preview URL capabilities API](https://github.com/matrix-org/matrix-spec-proposals/pull/4452) is enabled. ([#19839](https://github.com/element-hq/synapse/issues/19839)) #### Improved Documentation - Document how to see Rust build failure output when using `poetry install`. ([#19818](https://github.com/element-hq/synapse/issues/19818)) - Document that the SQLite version included in Ubuntu LTS, aside from ESM-only versions, is included in our support policy. ([#19823](https://github.com/element-hq/synapse/issues/19823)) #### Internal Changes - Port the Python Event classes to Rust. ([#19701](https://github.com/element-hq/synapse/issues/19701), [#19816](https://github.com/element-hq/synapse/issues/19816), [#19817](https://github.com/element-hq/synapse/issues/19817), [#19819](https://github.com/element-hq/synapse/issues/19819)) - Added tests to ensure that email notification links are sanitized. Contributed by Noah Markert. ([#19741](https://github.com/element-hq/synapse/issues/19741)) - Add `GcpJsonFormatter` logging formatter for use with Google Cloud Logging and GKE deployments. ([#19775](https://github.com/element-hq/synapse/issues/19775)) - Add more logging to the to-device message replication stream. ([#19801](https://github.com/element-hq/synapse/issues/19801), [#19821](https://github.com/element-hq/synapse/issues/19821)) - Port `Requester` class to Rust. ([#19828](https://github.com/element-hq/synapse/issues/19828)) ### [`v1.154.0`](https://github.com/element-hq/synapse/releases/tag/v1.154.0) [Compare Source](https://github.com/element-hq/synapse/compare/v1.153.0...v1.154.0) ### Synapse 1.154.0 (2026-06-04) No significant changes since 1.154.0rc1. ### Synapse 1.154.0rc1 (2026-05-27) #### Features - Add support for [MSC4452: Preview URL capabilities API](https://github.com/matrix-org/matrix-spec-proposals/pull/4452) which exposes a `io.element.msc4452.preview_url` capability. If `experimental_features.msc4452_enabled` is `true`, the `/_matrix/(client/v1/media|media/v3)/preview_url` endpoint now responds with a 403 status code when the capability is disabled. ([#19715](https://github.com/element-hq/synapse/issues/19715)) #### Bugfixes - Fix a bug in [MSC4186: Simplified Sliding Sync](https://github.com/matrix-org/matrix-spec-proposals/pull/4186) that could prevent user avatars from showing if the room had an empty name. ([#19468](https://github.com/element-hq/synapse/issues/19468), [#19791](https://github.com/element-hq/synapse/issues/19791)) - Fix access token cache not being invalidated for sessions using refresh tokens. Contributed by [@FrenchGithubUser](https://github.com/FrenchGithubUser) @ Famedly. ([#19483](https://github.com/element-hq/synapse/issues/19483)) - Fix bug where Synapse would return 400 (`M_BAD_JSON`) when sending a message with a `mentions` field and Synapse module `check_event_allowed` callback registered (frozen event). Contributed by [@gaetan-sbt](https://github.com/gaetan-sbt). ([#19634](https://github.com/element-hq/synapse/issues/19634)) - Fix long-standing but niche bug with `/sync` where it could attempt to fetch data with flawed invalid future tokens. ([#19644](https://github.com/element-hq/synapse/issues/19644)) - Fix `/sync` failing when [MSC4354 Sticky Events](https://github.com/matrix-org/matrix-spec-proposals/pull/4354) are enabled and the sync request filters out Ephemeral Data Units (EDUs). ([#19787](https://github.com/element-hq/synapse/issues/19787)) - Fix packaging for Fedora and EPEL caused by unnecessary bumping `attrs` minimum version requirement in `pyproject.toml` file. Contributed by Oleg Girko. ([#19789](https://github.com/element-hq/synapse/issues/19789)) - Fix merging signatures when a policy server is running under the same server name as Synapse. The bug was re-introduced in v1.153.0rc1 after being fixed earlier in v1.151.0rc1. Contributed by [@tulir](https://github.com/tulir) @ Beeper. ([#19797](https://github.com/element-hq/synapse/issues/19797)) #### Improved Documentation - Added details about how Synapse syncs the picture claim when `update_profile_information` setting is true. ([#19508](https://github.com/element-hq/synapse/issues/19508)) #### Internal Changes - Port `Event.content` field to Rust. ([#19725](https://github.com/element-hq/synapse/issues/19725)) - Prefer close backfill points (absolute distance). ([#19748](https://github.com/element-hq/synapse/issues/19748)) - Replace unique `quarantined_media` waiting patterns with standard `wait_for_stream_token(...)`. ([#19764](https://github.com/element-hq/synapse/issues/19764)) - Improve Synapse logging around when someone encounters `We can't get valid state history.` so you can correlate everything by `event_id`. ([#19765](https://github.com/element-hq/synapse/issues/19765)) - Tidy up Rust `RoomVersion` structs. ([#19766](https://github.com/element-hq/synapse/issues/19766)) - Update `WorkerLock` tests to better stress the `WORKER_LOCK_MAX_RETRY_INTERVAL`. ([#19772](https://github.com/element-hq/synapse/issues/19772)) - Refactor [MSC4242: State DAG](https://github.com/matrix-org/matrix-spec-proposals/pull/4242) checks behind a single `TypeIs` helper to avoid scattered `isinstance` casts. ([#19774](https://github.com/element-hq/synapse/issues/19774)) - Use `StrCollection` for `prev_state_events`. ([#19777](https://github.com/element-hq/synapse/issues/19777)) - Fix up the construction of events in tests, ahead of the Rust event port. ([#19781](https://github.com/element-hq/synapse/issues/19781)) </details> <details> <summary>element-hq/matrix-authentication-service (ghcr.io/element-hq/matrix-authentication-service)</summary> ### [`v1.19.0`](https://github.com/element-hq/matrix-authentication-service/releases/tag/v1.19.0) [Compare Source](https://github.com/element-hq/matrix-authentication-service/compare/v1.18.0...v1.19.0) ##### Docker image Regular image: - Digest: ``` ghcr.io/element-hq/matrix-authentication-service@sha256:fb25648b12e985d1192ea3dc7b6def38f97ca79bacba262daca5b82532e3a3dd oci.element.io/matrix-authentication-service@sha256:fb25648b12e985d1192ea3dc7b6def38f97ca79bacba262daca5b82532e3a3dd ``` - Tags: ``` ghcr.io/element-hq/matrix-authentication-service:1.19.0 ghcr.io/element-hq/matrix-authentication-service:1.19 ghcr.io/element-hq/matrix-authentication-service:1 ghcr.io/element-hq/matrix-authentication-service:sha-c7fd1f9 ghcr.io/element-hq/matrix-authentication-service:latest oci.element.io/matrix-authentication-service:1.19.0 oci.element.io/matrix-authentication-service:1.19 oci.element.io/matrix-authentication-service:1 oci.element.io/matrix-authentication-service:sha-c7fd1f9 oci.element.io/matrix-authentication-service:latest ``` Debug variant: - Digest: ``` ghcr.io/element-hq/matrix-authentication-service@sha256:4aed26ea5d210337c1fa7a61f1d1cbcea4835e1e3d58dc7b2cef434f15cb057d oci.element.io/matrix-authentication-service@sha256:4aed26ea5d210337c1fa7a61f1d1cbcea4835e1e3d58dc7b2cef434f15cb057d ``` - Tags: ``` ghcr.io/element-hq/matrix-authentication-service:1.19.0-debug ghcr.io/element-hq/matrix-authentication-service:1.19-debug ghcr.io/element-hq/matrix-authentication-service:1-debug ghcr.io/element-hq/matrix-authentication-service:sha-c7fd1f9-debug ghcr.io/element-hq/matrix-authentication-service:latest-debug oci.element.io/matrix-authentication-service:1.19.0-debug oci.element.io/matrix-authentication-service:1.19-debug oci.element.io/matrix-authentication-service:1-debug oci.element.io/matrix-authentication-service:sha-c7fd1f9-debug oci.element.io/matrix-authentication-service:latest-debug ```  #### What's Changed ##### Documentation - Fix a typo in the Synapse configuration instructions in the documentation by [@TuxCoder](https://github.com/TuxCoder) in [#5726](https://github.com/element-hq/matrix-authentication-service/pull/5726) - Fix typo in the configuration documentation `client_secret_jwk`-> `client_secret_jwt` by [@c-bg](https://github.com/c-bg) in [#5663](https://github.com/element-hq/matrix-authentication-service/pull/5663) ##### Translations - Translations updates for main by [@matrixbot](https://github.com/matrixbot) in [#5728](https://github.com/element-hq/matrix-authentication-service/pull/5728) - Translations updates for v1.19 by [@matrixbot](https://github.com/matrixbot) in [#5739](https://github.com/element-hq/matrix-authentication-service/pull/5739) ##### Internal Changes - Automatic merge back to main by [@matrixbot](https://github.com/matrixbot) in [#5706](https://github.com/element-hq/matrix-authentication-service/pull/5706) - Automatic merge back to main by [@matrixbot](https://github.com/matrixbot) in [#5724](https://github.com/element-hq/matrix-authentication-service/pull/5724) - Set X-Frame-Options header to DENY for human facing screens by [@hughns](https://github.com/hughns) in [#5721](https://github.com/element-hq/matrix-authentication-service/pull/5721) - Fix clippy lints on the main branch by [@sandhose](https://github.com/sandhose) in [#5727](https://github.com/element-hq/matrix-authentication-service/pull/5727) ##### Other Changes - Per-provider registration token requirement by [@defaultdino](https://github.com/defaultdino) in [#5605](https://github.com/element-hq/matrix-authentication-service/pull/5605) - Refactor login form to include password input conditionally by [@gordnhoo](https://github.com/gordnhoo) in [#5603](https://github.com/element-hq/matrix-authentication-service/pull/5603) #### New Contributors - [@TuxCoder](https://github.com/TuxCoder) made their first contribution in [#5726](https://github.com/element-hq/matrix-authentication-service/pull/5726) - [@gordnhoo](https://github.com/gordnhoo) made their first contribution in [#5603](https://github.com/element-hq/matrix-authentication-service/pull/5603) - [@c-bg](https://github.com/c-bg) made their first contribution in [#5663](https://github.com/element-hq/matrix-authentication-service/pull/5663) **Full Changelog**: <https://github.com/element-hq/matrix-authentication-service/compare/v1.18.0...v1.19.0> ### [`v1.18.0`](https://github.com/element-hq/matrix-authentication-service/releases/tag/v1.18.0) [Compare Source](https://github.com/element-hq/matrix-authentication-service/compare/v1.17.0...v1.18.0) ##### Docker image Regular image: - Digest: ``` ghcr.io/element-hq/matrix-authentication-service@sha256:fa0de1cd3d02e07ab65e9730c927ec65155245911c61ac97d564e490bfefe373 oci.element.io/matrix-authentication-service@sha256:fa0de1cd3d02e07ab65e9730c927ec65155245911c61ac97d564e490bfefe373 ``` - Tags: ``` ghcr.io/element-hq/matrix-authentication-service:1.18.0 ghcr.io/element-hq/matrix-authentication-service:1.18 ghcr.io/element-hq/matrix-authentication-service:1 ghcr.io/element-hq/matrix-authentication-service:sha-7b6c5af ghcr.io/element-hq/matrix-authentication-service:latest oci.element.io/matrix-authentication-service:1.18.0 oci.element.io/matrix-authentication-service:1.18 oci.element.io/matrix-authentication-service:1 oci.element.io/matrix-authentication-service:sha-7b6c5af oci.element.io/matrix-authentication-service:latest ``` Debug variant: - Digest: ``` ghcr.io/element-hq/matrix-authentication-service@sha256:fcfd806cd9e319e676c9ad5ad543f42bfecea3065abb4a18f8fe4b0ffc6ff186 oci.element.io/matrix-authentication-service@sha256:fcfd806cd9e319e676c9ad5ad543f42bfecea3065abb4a18f8fe4b0ffc6ff186 ``` - Tags: ``` ghcr.io/element-hq/matrix-authentication-service:1.18.0-debug ghcr.io/element-hq/matrix-authentication-service:1.18-debug ghcr.io/element-hq/matrix-authentication-service:1-debug ghcr.io/element-hq/matrix-authentication-service:sha-7b6c5af-debug ghcr.io/element-hq/matrix-authentication-service:latest-debug oci.element.io/matrix-authentication-service:1.18.0-debug oci.element.io/matrix-authentication-service:1.18-debug oci.element.io/matrix-authentication-service:1-debug oci.element.io/matrix-authentication-service:sha-7b6c5af-debug oci.element.io/matrix-authentication-service:latest-debug ```  #### What's Changed ##### New Features - Disable the device code auto-filling by default and match the device authorization grant with the designs by [@sandhose](https://github.com/sandhose) in [#5704](https://github.com/element-hq/matrix-authentication-service/pull/5704) ##### Changes to the admin API - Admin API - User - Add displayname and avatar url when adding user by [@mcalinghee](https://github.com/mcalinghee) in [#5671](https://github.com/element-hq/matrix-authentication-service/pull/5671) ##### Translations - Translations updates for main by [@matrixbot](https://github.com/matrixbot) in [#5705](https://github.com/element-hq/matrix-authentication-service/pull/5705) - Translations updates for v1.18 by [@matrixbot](https://github.com/matrixbot) in [#5723](https://github.com/element-hq/matrix-authentication-service/pull/5723) ##### Internal Changes - Automatic merge back to main by [@matrixbot](https://github.com/matrixbot) in [#5669](https://github.com/element-hq/matrix-authentication-service/pull/5669) - Automatic merge back to main by [@matrixbot](https://github.com/matrixbot) in [#5690](https://github.com/element-hq/matrix-authentication-service/pull/5690) - Split multi-arch Docker build into parallel jobs by [@sandhose](https://github.com/sandhose) in [#5474](https://github.com/element-hq/matrix-authentication-service/pull/5474) ##### Other Changes - Fix typo in manual: policy.path -> policy.wasm\_module by [@reivilibre](https://github.com/reivilibre) in [#5654](https://github.com/element-hq/matrix-authentication-service/pull/5654) - Use translation text for "Cancel" button in `reauth` template by [@MadLittleMods](https://github.com/MadLittleMods) in [#5666](https://github.com/element-hq/matrix-authentication-service/pull/5666) - Add a bit more context for *what* bind address couldn't be parsed by [@MadLittleMods](https://github.com/MadLittleMods) in [#5637](https://github.com/element-hq/matrix-authentication-service/pull/5637) - Fix client linking to `none` on policy violation screen by [@MadLittleMods](https://github.com/MadLittleMods) in [#5667](https://github.com/element-hq/matrix-authentication-service/pull/5667) - Update policy violation screen when running into the session/device `soft_limit` in interactive contexts by [@MadLittleMods](https://github.com/MadLittleMods) in [#5639](https://github.com/element-hq/matrix-authentication-service/pull/5639) - Document how to manually test login flows by [@MadLittleMods](https://github.com/MadLittleMods) in [#5642](https://github.com/element-hq/matrix-authentication-service/pull/5642) - Harden the security of our GitHub Actions by [@anoadragon453](https://github.com/anoadragon453) in [#5664](https://github.com/element-hq/matrix-authentication-service/pull/5664) - Add `oauth`.`device_code_grant_enabled` configuration option by [@hughns](https://github.com/hughns) in [#5612](https://github.com/element-hq/matrix-authentication-service/pull/5612) - Fix `TestState.reset()` to retain mock homeserver in-memory state by [@MadLittleMods](https://github.com/MadLittleMods) in [#5678](https://github.com/element-hq/matrix-authentication-service/pull/5678) - Bump lettre to appease `cargo-deny` on RUSTSEC-2026-0141 by [@sandhose](https://github.com/sandhose) in [#5684](https://github.com/element-hq/matrix-authentication-service/pull/5684) - Fix the transformation of the Docker build metadata in CI by [@sandhose](https://github.com/sandhose) in [#5683](https://github.com/element-hq/matrix-authentication-service/pull/5683) - Increase dependabot interval from daily to monthly by [@hughns](https://github.com/hughns) in [#5686](https://github.com/element-hq/matrix-authentication-service/pull/5686) - Remove unused apalis dependabot config by [@hughns](https://github.com/hughns) in [#5685](https://github.com/element-hq/matrix-authentication-service/pull/5685) - Push MAS docker images to Element OCI Registry by [@devonh](https://github.com/devonh) in [#5459](https://github.com/element-hq/matrix-authentication-service/pull/5459) - Schedule `SyncDevicesJob` after `dangerous_hard_limit_eviction` so the homeserver stays up to date by [@MadLittleMods](https://github.com/MadLittleMods) in [#5679](https://github.com/element-hq/matrix-authentication-service/pull/5679) - Check whether policy evaluation result is `valid()` when we `process_violations_for_compat_login(...)` by [@MadLittleMods](https://github.com/MadLittleMods) in [#5681](https://github.com/element-hq/matrix-authentication-service/pull/5681) - Interactive compat `m.login.sso` test for session `soft_limit` by [@MadLittleMods](https://github.com/MadLittleMods) in [#5675](https://github.com/element-hq/matrix-authentication-service/pull/5675) - Show session/device limit errors on account page by [@MadLittleMods](https://github.com/MadLittleMods) in [#5644](https://github.com/element-hq/matrix-authentication-service/pull/5644) - Add `max_session_threshold` configuration (only apply `session_limit` to people under the threshold) by [@MadLittleMods](https://github.com/MadLittleMods) in [#5670](https://github.com/element-hq/matrix-authentication-service/pull/5670) - Fix `compatibility` typo in `session_limit` config by [@MadLittleMods](https://github.com/MadLittleMods) in [#5692](https://github.com/element-hq/matrix-authentication-service/pull/5692) - Switch to pnpm by [@sandhose](https://github.com/sandhose) in [#5674](https://github.com/element-hq/matrix-authentication-service/pull/5674) - Bump most frontend dependencies by [@sandhose](https://github.com/sandhose) in [#5699](https://github.com/element-hq/matrix-authentication-service/pull/5699) - Update Compound to the latest version by [@sandhose](https://github.com/sandhose) in [#5703](https://github.com/element-hq/matrix-authentication-service/pull/5703) - Migrate to Tailwind v4 by [@sandhose](https://github.com/sandhose) in [#5702](https://github.com/element-hq/matrix-authentication-service/pull/5702) - Enforce `clippy::allow_attributes` (prefer `#[expect]` over `#[allow]`) by [@MadLittleMods](https://github.com/MadLittleMods) in [#5691](https://github.com/element-hq/matrix-authentication-service/pull/5691) - Fix a few plurals in the English translations by [@sandhose](https://github.com/sandhose) in [#5715](https://github.com/element-hq/matrix-authentication-service/pull/5715) ##### Dependency Updates - build(deps-dev): bump postcss from 8.5.8 to 8.5.12 in /frontend by [@dependabot](https://github.com/dependabot)\[bot] in [#5658](https://github.com/element-hq/matrix-authentication-service/pull/5658) - build(deps): bump actions/upload-pages-artifact from 4.0.0 to 5.0.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#5626](https://github.com/element-hq/matrix-authentication-service/pull/5626) - build(deps): bump softprops/action-gh-release from 2.6.1 to 3.0.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#5627](https://github.com/element-hq/matrix-authentication-service/pull/5627) - build(deps): bump peter-evans/create-pull-request from 8.1.0 to 8.1.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#5628](https://github.com/element-hq/matrix-authentication-service/pull/5628) - build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#5629](https://github.com/element-hq/matrix-authentication-service/pull/5629) - Bump the tracing group across 1 directory with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#5676](https://github.com/element-hq/matrix-authentication-service/pull/5676) **Full Changelog**: <https://github.com/element-hq/matrix-authentication-service/compare/v1.17.0...v1.18.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).

renovate added 1 commit

2026-06-04 12:17:55 +00:00

chore(deps): update all non-major dependencies to v1.18.0 64a3aca795

renovate force-pushed renovate/all-minor-patch from 64a3aca795 to f6b94e1d14

2026-06-04 16:07:33 +00:00

Compare

renovate changed title from ~~chore(deps): update all non-major dependencies to v1.18.0~~ to chore(deps): update all non-major dependencies

2026-06-04 16:07:44 +00:00

renovate force-pushed renovate/all-minor-patch from f6b94e1d14 to c29ccfd1b9

2026-06-16 16:05:40 +00:00

Compare

renovate force-pushed renovate/all-minor-patch from c29ccfd1b9 to 3a7a1b2baf

2026-06-17 12:05:07 +00:00

Compare

This pull request can be merged automatically.

You are not authorized to merge this pull request.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin renovate/all-minor-patch:renovate/all-minor-patch

git switch renovate/all-minor-patch

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch main

git merge --no-ff renovate/all-minor-patch

git switch renovate/all-minor-patch

git rebase main

git switch main

git merge --ff-only renovate/all-minor-patch

git switch renovate/all-minor-patch

git rebase main

git switch main

git merge --no-ff renovate/all-minor-patch

git switch main

git merge --squash renovate/all-minor-patch

git switch main

git merge --ff-only renovate/all-minor-patch

git switch main

git merge renovate/all-minor-patch

git push origin main

No reviewers

No labels

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

homelab/dc-matrix!144

No description provided.

Rows
Columns