Commit graph

207 commits

Author SHA1 Message Date
7f5298a532 fix(redis-authentik): Remove loglevel restriction 2024-10-29 23:21:16 +01:00
efacb24865 fix(redis): Add setup step to set memory overcommit (fixes #73) 2024-10-29 22:45:50 +01:00
26074448a4 fix(matrix): Add missing macaroon key (fixes #71) 2024-10-29 22:25:36 +01:00
d34bbc123e fix(eturnal): Fix failed query on startup (fixes #72) 2024-10-29 20:34:39 +01:00
b7df942929 fix(setup): Add needed package for docker-compose install (#85) 2024-10-29 19:47:52 +01:00
5301ef0cb3 docs(setup): Add manual install of docker-compose (fixes #85) 2024-10-29 19:46:19 +01:00
87c39ae778 docs: Update some outdated docs, move backup config into setup 2024-10-29 19:26:50 +01:00
9baac4e669 docs(games): Fix link to used docker image and readme 2024-10-29 18:46:42 +01:00
ddda6b11b6 config: Add git town config 2024-10-29 18:46:42 +01:00
c190f0f29b chore(deps): update ghcr.io/dani-garcia/vaultwarden docker tag to v1.32.3 (#87)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/dani-garcia/vaultwarden](https://github.com/dani-garcia/vaultwarden) | patch | `1.32.2-alpine` -> `1.32.3-alpine` |

---

### Release Notes

<details>
<summary>dani-garcia/vaultwarden (ghcr.io/dani-garcia/vaultwarden)</summary>

### [`v1.32.3`](https://github.com/dani-garcia/vaultwarden/releases/tag/1.32.3)

[Compare Source](https://github.com/dani-garcia/vaultwarden/compare/1.32.2...1.32.3)

#### Notable changes

-   Email template for org invites was updated again. The URL got HTML Encoded which resulted in a sometimes non-working URL ([#&#8203;5100](https://github.com/dani-garcia/vaultwarden/issues/5100))
-   Fixed SMTP issues with some providers which send erroneous response to `QUIT` messages (Like QQ) (Thanks to [@&#8203;paolobarbolini](https://github.com/paolobarbolini))
-   Fixed a long standing collection management issue where collections were not able to be managed via the **Password Manager** overview

#### What's Changed

-   Fix iOS sync by converting field types to int by [@&#8203;BlackDex](https://github.com/BlackDex) in https://github.com/dani-garcia/vaultwarden/pull/5081
-   Fix field type to actually be hidden by [@&#8203;BlackDex](https://github.com/BlackDex) in https://github.com/dani-garcia/vaultwarden/pull/5082
-   Fix org invite url being html encoded by [@&#8203;BlackDex](https://github.com/BlackDex) in https://github.com/dani-garcia/vaultwarden/pull/5100
-   Update Rust to 1.82.0 by [@&#8203;dfunkt](https://github.com/dfunkt) in https://github.com/dani-garcia/vaultwarden/pull/5099
-   Fix collection management and match some json output by [@&#8203;BlackDex](https://github.com/BlackDex) in https://github.com/dani-garcia/vaultwarden/pull/5095
-   Add `extension-refresh` feature flag by [@&#8203;dfunkt](https://github.com/dfunkt) in https://github.com/dani-garcia/vaultwarden/pull/5106
-   Hide user name on invite status by [@&#8203;BlackDex](https://github.com/BlackDex) in https://github.com/dani-garcia/vaultwarden/pull/5110
-   Add documentation for the `extension-refresh` feature flag by [@&#8203;dfunkt](https://github.com/dfunkt) in https://github.com/dani-garcia/vaultwarden/pull/5112
-   Update crates and fix Mail issue by [@&#8203;BlackDex](https://github.com/BlackDex) in https://github.com/dani-garcia/vaultwarden/pull/5125

**Full Changelog**: https://github.com/dani-garcia/vaultwarden/compare/1.32.2...1.32.3

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xMzIuMSIsInVwZGF0ZWRJblZlciI6IjM4LjEzMi4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #87
Co-authored-by: Renovate Bot <renovate@git.csprung.de>
Co-committed-by: Renovate Bot <renovate@git.csprung.de>
2024-10-29 18:17:07 +01:00
d617e9b698 chore(deps): update amir20/dozzle docker tag to v8.7.1 (#88)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [amir20/dozzle](https://github.com/amir20/dozzle) | minor | `v8.6.2` -> `v8.7.1` |

---

### Release Notes

<details>
<summary>amir20/dozzle (amir20/dozzle)</summary>

### [`v8.7.1`](https://github.com/amir20/dozzle/releases/tag/v8.7.1)

[Compare Source](https://github.com/amir20/dozzle/compare/v8.7.0...v8.7.1)

#####    🐞 Bug Fixes

-   Fix base ANSI convertor colors  -  by [@&#8203;amir20](https://github.com/amir20) and **Jérémy Touati** in https://github.com/amir20/dozzle/issues/3353 [<samp>(c6339)</samp>](https://github.com/amir20/dozzle/commit/c6339eff)

#####     [View changes on GitHub](https://github.com/amir20/dozzle/compare/v8.7.0...v8.7.1)

### [`v8.7.0`](https://github.com/amir20/dozzle/releases/tag/v8.7.0)

[Compare Source](https://github.com/amir20/dozzle/compare/v8.6.2...v8.7.0)

#####    🚀 Features

-   Updates logo  -  by [@&#8203;amir20](https://github.com/amir20) in https://github.com/amir20/dozzle/issues/3340 [<samp>(96fbe)</samp>](https://github.com/amir20/dozzle/commit/96fbee9e)

#####    🐞 Bug Fixes

-   Fixes timeout flag  -  by [@&#8203;amir20](https://github.com/amir20) in https://github.com/amir20/dozzle/issues/3345 [<samp>(36a5d)</samp>](https://github.com/amir20/dozzle/commit/36a5d7e6)
-   Limit default SQL log entries to 100  -  by [@&#8203;yubiuser](https://github.com/yubiuser) in https://github.com/amir20/dozzle/issues/3346 [<samp>(cd63b)</samp>](https://github.com/amir20/dozzle/commit/cd63b5de)
-   Unfound fields are shown by default instead of hidden  -  by [@&#8203;amir20](https://github.com/amir20) in https://github.com/amir20/dozzle/issues/3342 [<samp>(c1d31)</samp>](https://github.com/amir20/dozzle/commit/c1d31313)
-   Fixes toggle all when fields have not been set for JSON  -  by [@&#8203;amir20](https://github.com/amir20) in https://github.com/amir20/dozzle/issues/3349 [<samp>(cce2e)</samp>](https://github.com/amir20/dozzle/commit/cce2e8a8)
-   **deps**: Update all non-major dependencies  -  in https://github.com/amir20/dozzle/issues/3348 [<samp>(00da1)</samp>](https://github.com/amir20/dozzle/commit/00da15c2)

#####     [View changes on GitHub](https://github.com/amir20/dozzle/compare/v8.6.2...v8.7.0)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xMzIuMSIsInVwZGF0ZWRJblZlciI6IjM4LjEzMi4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #88
Co-authored-by: Renovate Bot <renovate@git.csprung.de>
Co-committed-by: Renovate Bot <renovate@git.csprung.de>
2024-10-29 18:16:46 +01:00
4143cb66d1 fix(forgejo): Fix allowed webhook hosts 2024-10-27 00:43:03 +02:00
b888cf6771 fix(games): Change to amp-dockerized to fix license missing issue (#74) (#86)
Reviewed-on: #86
2024-10-26 16:49:22 +02:00
52ca5ebfb0 feat(task): Add temp sudo convenience task 2024-10-26 16:33:21 +02:00
080833641e fix(proxy,forgejo): Limit login redirect to GET request 2024-10-26 00:23:57 +02:00
851bad94b4 chore(config): migrate renovate config (#84)
The Renovate config in this repository needs migrating. Typically this is because one or more configuration options you are using have been renamed.

  You don't need to merge this PR right away, because Renovate will continue to migrate these fields internally each time it runs. But later some of these fields may be fully deprecated and the migrations removed. So it's a good idea to merge this migration PR soon.

🔕 **Ignore**: Close this PR and you won't be reminded about config migration again, but one day your current config may no longer be valid.

 Got questions? Does something look wrong to you? Please don't hesitate to [request help here](https://github.com/renovatebot/renovate/discussions).

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).

Reviewed-on: #84
Co-authored-by: Renovate Bot <renovate@git.csprung.de>
Co-committed-by: Renovate Bot <renovate@git.csprung.de>
2024-10-25 23:56:33 +02:00
8ebde2577f feat(proxy): Remove home proxy 2024-10-25 23:20:58 +02:00
c73ead1526 feat(services): Add dozzle 2024-10-25 23:20:20 +02:00
7310868563 fix(services): Fix money 2024-10-25 23:19:51 +02:00
3340fc088b feat(task): add headlog task with given containers 2024-10-25 23:17:20 +02:00
0b4dc97422 feat(proxy,forgejo): Add SSO redirect on login page 2024-10-25 23:17:16 +02:00
6d06453a6a chore(deps): update codeberg.org/forgejo/forgejo docker tag to v9 (#83)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [codeberg.org/forgejo/forgejo](https://forgejo.org) ([source](https://codeberg.org/forgejo/forgejo)) | major | `8.0` -> `9.0` |

---

### Release Notes

<details>
<summary>forgejo/forgejo (codeberg.org/forgejo/forgejo)</summary>

### [`v9.0`](https://codeberg.org/forgejo/forgejo/blob/HEAD/RELEASE-NOTES.md#900)

The Forgejo v9.0.0 release notes are [available in the v9.0.0 milestone](https://codeberg.org/forgejo/forgejo/milestone/7235).

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xMTkuMCIsInVwZGF0ZWRJblZlciI6IjM4LjExOS4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #83
Co-authored-by: Renovate Bot <renovate@git.csprung.de>
Co-committed-by: Renovate Bot <renovate@git.csprung.de>
2024-10-25 23:17:09 +02:00
20b44ecd7b chore(deps): update ghcr.io/element-hq/synapse docker tag to v1.117.0 (#82)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/element-hq/synapse](https://matrix.org/docs/projects/server/synapse) ([source](https://github.com/element-hq/synapse)) | minor | `v1.116.0` -> `v1.117.0` |

---

### Release Notes

<details>
<summary>element-hq/synapse (ghcr.io/element-hq/synapse)</summary>

### [`v1.117.0`](https://github.com/element-hq/synapse/releases/tag/v1.117.0)

[Compare Source](https://github.com/element-hq/synapse/compare/v1.116.0...v1.117.0)

### Synapse 1.117.0 (2024-10-15)

No significant changes since 1.117.0rc1.

### Synapse 1.117.0rc1 (2024-10-08)

##### Features

-   Add config option `redis.password_path`. ([#&#8203;17717](https://github.com/element-hq/synapse/issues/17717))

##### Bugfixes

-   Fix a rare bug introduced in v1.29.0 where invalidating a user's access token from a worker could raise an error. ([#&#8203;17779](https://github.com/element-hq/synapse/issues/17779))
-   In the response to `GET /_matrix/client/versions`, set the `unstable_features` flag for [MSC4140](https://github.com/matrix-org/matrix-spec-proposals/pull/4140) to `false` when server configuration disables support for delayed events. ([#&#8203;17780](https://github.com/element-hq/synapse/issues/17780))
-   Improve input validation and room membership checks in admin redaction API. ([#&#8203;17792](https://github.com/element-hq/synapse/issues/17792))

##### Improved Documentation

-   Clarify the docstring of `test_forget_when_not_left`. ([#&#8203;17628](https://github.com/element-hq/synapse/issues/17628))
-   Add documentation note about PYTHONMALLOC for accurate jemalloc memory tracking. Contributed by [@&#8203;hensg](https://github.com/hensg). ([#&#8203;17709](https://github.com/element-hq/synapse/issues/17709))
-   Remove spurious "TODO UPDATE ALL THIS" note in the Debian installation docs. ([#&#8203;17749](https://github.com/element-hq/synapse/issues/17749))
-   Explain how load balancing works for `federation_sender_instances`. ([#&#8203;17776](https://github.com/element-hq/synapse/issues/17776))

##### Internal Changes

-   Minor performance increase for large accounts using sliding sync. ([#&#8203;17751](https://github.com/element-hq/synapse/issues/17751))
-   Increase performance of the notifier when there are many syncing users. ([#&#8203;17765](https://github.com/element-hq/synapse/issues/17765), [#&#8203;17766](https://github.com/element-hq/synapse/issues/17766))
-   Fix performance of streams that don't change often. ([#&#8203;17767](https://github.com/element-hq/synapse/issues/17767))
-   Improve performance of sliding sync connections that do not ask for any rooms. ([#&#8203;17768](https://github.com/element-hq/synapse/issues/17768))
-   Reduce overhead of sliding sync E2EE loops. ([#&#8203;17771](https://github.com/element-hq/synapse/issues/17771))
-   Sliding sync minor performance speed up using new table. ([#&#8203;17787](https://github.com/element-hq/synapse/issues/17787))
-   Sliding sync minor performance improvement by omitting unchanged data from incremental responses. ([#&#8203;17788](https://github.com/element-hq/synapse/issues/17788))
-   Speed up sliding sync when there are many active subscriptions. ([#&#8203;17789](https://github.com/element-hq/synapse/issues/17789))
-   Add missing license headers on new source files. ([#&#8203;17799](https://github.com/element-hq/synapse/issues/17799))

##### Updates to locked dependencies

-   Bump phonenumbers from 8.13.45 to 8.13.46. ([#&#8203;17773](https://github.com/element-hq/synapse/issues/17773))
-   Bump python-multipart from 0.0.10 to 0.0.12. ([#&#8203;17772](https://github.com/element-hq/synapse/issues/17772))
-   Bump regex from 1.10.6 to 1.11.0. ([#&#8203;17770](https://github.com/element-hq/synapse/issues/17770))
-   Bump ruff from 0.6.7 to 0.6.8. ([#&#8203;17774](https://github.com/element-hq/synapse/issues/17774))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xMTkuMCIsInVwZGF0ZWRJblZlciI6IjM4LjExOS4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #82
Co-authored-by: Renovate Bot <renovate@git.csprung.de>
Co-committed-by: Renovate Bot <renovate@git.csprung.de>
2024-10-25 23:17:00 +02:00
4a98d05c54 chore(deps): update ghcr.io/dani-garcia/vaultwarden docker tag to v1.32.2 (#81)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/dani-garcia/vaultwarden](https://github.com/dani-garcia/vaultwarden) | patch | `1.32.1-alpine` -> `1.32.2-alpine` |

---

### Release Notes

<details>
<summary>dani-garcia/vaultwarden (ghcr.io/dani-garcia/vaultwarden)</summary>

### [`v1.32.2`](https://github.com/dani-garcia/vaultwarden/releases/tag/1.32.2)

[Compare Source](https://github.com/dani-garcia/vaultwarden/compare/1.32.1...1.32.2)

#### Notable changes

-   Fixed collection management for managers

#### What's Changed

-   Fix compiling for Windows targets by [@&#8203;BlackDex](https://github.com/BlackDex) in https://github.com/dani-garcia/vaultwarden/pull/5053
-   Updates and collection management fixes by [@&#8203;BlackDex](https://github.com/BlackDex) in https://github.com/dani-garcia/vaultwarden/pull/5072
-   Fix `--version` from failing without config by [@&#8203;BlackDex](https://github.com/BlackDex) in https://github.com/dani-garcia/vaultwarden/pull/5055

**Full Changelog**: https://github.com/dani-garcia/vaultwarden/compare/1.32.1...1.32.2

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xMTkuMCIsInVwZGF0ZWRJblZlciI6IjM4LjExOS4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #81
Co-authored-by: Renovate Bot <renovate@git.csprung.de>
Co-committed-by: Renovate Bot <renovate@git.csprung.de>
2024-10-25 23:16:51 +02:00
0a80fc8430 chore(deps): update ghcr.io/dani-garcia/vaultwarden docker tag to v1.32.1 (#79)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/dani-garcia/vaultwarden](https://github.com/dani-garcia/vaultwarden) | patch | `1.32.0-alpine` -> `1.32.1-alpine` |

---

### Release Notes

<details>
<summary>dani-garcia/vaultwarden (ghcr.io/dani-garcia/vaultwarden)</summary>

### [`v1.32.1`](https://github.com/dani-garcia/vaultwarden/releases/tag/1.32.1)

[Compare Source](https://github.com/dani-garcia/vaultwarden/compare/1.32.0...1.32.1)

#### Notable changes

-   Fixed syncing/login with native mobile clients
-   Added CLI option to backup SQLite database
-   Email Template changes regarding invites, 2FA Incomplete logins, and new logins

#### What's Changed

-   Update GitHub Action Workflows by [@&#8203;BlackDex](https://github.com/BlackDex) in https://github.com/dani-garcia/vaultwarden/pull/4849
-   Fix Duo Redirect not using path by [@&#8203;BlackDex](https://github.com/BlackDex) in https://github.com/dani-garcia/vaultwarden/pull/4862
-   Fix manager in web-vault v2024.6.2 for collections by [@&#8203;BlackDex](https://github.com/BlackDex) in https://github.com/dani-garcia/vaultwarden/pull/4860
-   Update email footer padding values by [@&#8203;dfunkt](https://github.com/dfunkt) in https://github.com/dani-garcia/vaultwarden/pull/4838
-   Remove unecessary email normalization by [@&#8203;Timshel](https://github.com/Timshel) in https://github.com/dani-garcia/vaultwarden/pull/4840
-   Fix Vaultwarden Admin page error messages by [@&#8203;BlackDex](https://github.com/BlackDex) in https://github.com/dani-garcia/vaultwarden/pull/4869
-   Update issue template by [@&#8203;BlackDex](https://github.com/BlackDex) in https://github.com/dani-garcia/vaultwarden/pull/4876
-   remove overzealous sanity check by [@&#8203;stefan0xC](https://github.com/stefan0xC) in https://github.com/dani-garcia/vaultwarden/pull/4879
-   Fix Login with device by [@&#8203;BlackDex](https://github.com/BlackDex) in https://github.com/dani-garcia/vaultwarden/pull/4878
-   Switch to Whitelisting in .dockerignore by [@&#8203;Timshel](https://github.com/Timshel) in https://github.com/dani-garcia/vaultwarden/pull/4856
-   Remove `version` from server config info by [@&#8203;zacknewman](https://github.com/zacknewman) in https://github.com/dani-garcia/vaultwarden/pull/4885
-   Update issue template by [@&#8203;BlackDex](https://github.com/BlackDex) in https://github.com/dani-garcia/vaultwarden/pull/4882
-   Update crates (GHSA-wq9x-qwcq-mmgf) by [@&#8203;BlackDex](https://github.com/BlackDex) in https://github.com/dani-garcia/vaultwarden/pull/4889
-   Updated security readme by [@&#8203;BlackDex](https://github.com/BlackDex) in https://github.com/dani-garcia/vaultwarden/pull/4892
-   Allow custom umask setting by [@&#8203;BlackDex](https://github.com/BlackDex) in https://github.com/dani-garcia/vaultwarden/pull/4896
-   Allow Org Master-Pw policy enforcement by [@&#8203;BlackDex](https://github.com/BlackDex) in https://github.com/dani-garcia/vaultwarden/pull/4899
-   Allow enforcing Single Org with pw reset policy by [@&#8203;BlackDex](https://github.com/BlackDex) in https://github.com/dani-garcia/vaultwarden/pull/4903
-   Add a CLI feature to backup the SQLite DB by [@&#8203;BlackDex](https://github.com/BlackDex) in https://github.com/dani-garcia/vaultwarden/pull/4906
-   Update web-vault, crates and gha by [@&#8203;BlackDex](https://github.com/BlackDex) in https://github.com/dani-garcia/vaultwarden/pull/4909
-   Add orgUserHasExistingUser parameters to org invite by [@&#8203;Timshel](https://github.com/Timshel) in https://github.com/dani-garcia/vaultwarden/pull/4827
-   Update Rust version & crates by [@&#8203;dfunkt](https://github.com/dfunkt) in https://github.com/dani-garcia/vaultwarden/pull/4928
-   Fix sync with new native clients by [@&#8203;BlackDex](https://github.com/BlackDex) in https://github.com/dani-garcia/vaultwarden/pull/4932
-   Fix collection update from native client by [@&#8203;BlackDex](https://github.com/BlackDex) in https://github.com/dani-garcia/vaultwarden/pull/4937
-   fix invitation link via /admin by [@&#8203;stefan0xC](https://github.com/stefan0xC) in https://github.com/dani-garcia/vaultwarden/pull/4950
-   Fix Pw History null dates by [@&#8203;BlackDex](https://github.com/BlackDex) in https://github.com/dani-garcia/vaultwarden/pull/4966
-   fix 2fa policy check on registration by [@&#8203;stefan0xC](https://github.com/stefan0xC) in https://github.com/dani-garcia/vaultwarden/pull/4956
-   Actually use Device Type for mails by [@&#8203;dfunkt](https://github.com/dfunkt) in https://github.com/dani-garcia/vaultwarden/pull/4916
-   remove backtics from postgresql migrations by [@&#8203;stefan0xC](https://github.com/stefan0xC) in https://github.com/dani-garcia/vaultwarden/pull/4968
-   Fix Device Type column for 2FA migration by [@&#8203;BlackDex](https://github.com/BlackDex) in https://github.com/dani-garcia/vaultwarden/pull/4971
-   Fix encrypted lastUsedDate by [@&#8203;BlackDex](https://github.com/BlackDex) in https://github.com/dani-garcia/vaultwarden/pull/4972
-   Fix keyword collision in Rust 2024 and add new api/config value by [@&#8203;dani-garcia](https://github.com/dani-garcia) in https://github.com/dani-garcia/vaultwarden/pull/4975
-   Add extra linting by [@&#8203;BlackDex](https://github.com/BlackDex) in https://github.com/dani-garcia/vaultwarden/pull/4977

#### New Contributors

-   [@&#8203;zacknewman](https://github.com/zacknewman) made their first contribution in https://github.com/dani-garcia/vaultwarden/pull/4885

**Full Changelog**: https://github.com/dani-garcia/vaultwarden/compare/1.32.0...1.32.1

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xMDEuMCIsInVwZGF0ZWRJblZlciI6IjM4LjEwMS4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #79
Co-authored-by: Renovate Bot <renovate@git.csprung.de>
Co-committed-by: Renovate Bot <renovate@git.csprung.de>
2024-10-12 23:45:03 +02:00
b2bbc1de7d chore(deps): update ghcr.io/actualbudget/actual-server docker tag to v24.10.1 (#80)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| ghcr.io/actualbudget/actual-server | minor | `24.9.0-alpine` -> `24.10.1-alpine` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xMDEuMCIsInVwZGF0ZWRJblZlciI6IjM4LjExMC4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #80
Co-authored-by: Renovate Bot <renovate@git.csprung.de>
Co-committed-by: Renovate Bot <renovate@git.csprung.de>
2024-10-12 23:44:33 +02:00
31295659e9 chore(deps): update ghcr.io/element-hq/synapse docker tag to v1.116.0 (#78)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/element-hq/synapse](https://matrix.org/docs/projects/server/synapse) ([source](https://github.com/element-hq/synapse)) | minor | `v1.115.0` -> `v1.116.0` |

---

### Release Notes

<details>
<summary>element-hq/synapse (ghcr.io/element-hq/synapse)</summary>

### [`v1.116.0`](https://github.com/element-hq/synapse/releases/tag/v1.116.0)

[Compare Source](https://github.com/element-hq/synapse/compare/v1.115.0...v1.116.0)

### Synapse 1.116.0 (2024-10-01)

No significant changes since 1.116.0rc2.

### Synapse 1.116.0rc2 (2024-09-26)

##### Features

-   Add implementation of restricting who can overwrite a state event as proposed by [MSC3757](https://github.com/matrix-org/matrix-spec-proposals/pull/3757). ([#&#8203;17513](https://github.com/element-hq/synapse/issues/17513))

### Synapse 1.116.0rc1 (2024-09-25)

##### Features

-   Add initial implementation of delayed events as proposed by [MSC4140](https://github.com/matrix-org/matrix-spec-proposals/pull/4140). ([#&#8203;17326](https://github.com/element-hq/synapse/issues/17326))
-   Add an asynchronous Admin API endpoint [to redact all a user's events](https://element-hq.github.io/synapse/v1.116/admin_api/user_admin_api.html#redact-all-the-events-of-a-user),
    and [an endpoint to check on the status of that redaction task](https://element-hq.github.io/synapse/v1.116/admin_api/user_admin_api.html#check-the-status-of-a-redaction-process). ([#&#8203;17506](https://github.com/element-hq/synapse/issues/17506))
-   Add support for the `tags` and `not_tags` filters for [MSC4186](https://github.com/matrix-org/matrix-spec-proposals/pull/4186) Sliding Sync. ([#&#8203;17662](https://github.com/element-hq/synapse/issues/17662))
-   Guests can use the new media endpoints to download media, as described by [MSC4189](https://github.com/matrix-org/matrix-spec-proposals/pull/4189). ([#&#8203;17675](https://github.com/element-hq/synapse/issues/17675))
-   Add config option `turn_shared_secret_path`. ([#&#8203;17690](https://github.com/element-hq/synapse/issues/17690))
-   Return room tags in [MSC4186](https://github.com/matrix-org/matrix-spec-proposals/pull/4186) Sliding Sync account data extension. ([#&#8203;17707](https://github.com/element-hq/synapse/issues/17707))

##### Bugfixes

-   Make sure we get up-to-date state information when using the new [MSC4186](https://github.com/matrix-org/matrix-spec-proposals/pull/4186) Sliding Sync tables to derive room membership. ([#&#8203;17692](https://github.com/element-hq/synapse/issues/17692))
-   Fix bug where room account data would not correctly be sent down [MSC4186](https://github.com/matrix-org/matrix-spec-proposals/pull/4186) Sliding Sync for old rooms. ([#&#8203;17695](https://github.com/element-hq/synapse/issues/17695))
-   Fix a bug in [MSC4186](https://github.com/matrix-org/matrix-spec-proposals/pull/4186) Sliding Sync which could prevent /sync from working for certain user accounts. ([#&#8203;17727](https://github.com/element-hq/synapse/issues/17727), [#&#8203;17733](https://github.com/element-hq/synapse/issues/17733))
-   Ignore invites from ignored users in Sliding Sync. ([#&#8203;17729](https://github.com/element-hq/synapse/issues/17729))
-   Fix bug in [MSC4186](https://github.com/matrix-org/matrix-spec-proposals/pull/4186) Sliding Sync where the server would incorrectly return a negative bump stamp, which caused Element X apps to stop syncing. ([#&#8203;17748](https://github.com/element-hq/synapse/issues/17748))

##### Internal Changes

-   Import pydantic objects from the `_pydantic_compat` module.
    This allows `check_pydantic_models.py` to mock those pydantic objects
    only in the synapse module, and not interfere with pydantic objects in
    external dependencies. ([#&#8203;17667](https://github.com/element-hq/synapse/issues/17667))
-   Use [MSC4186](https://github.com/matrix-org/matrix-spec-proposals/pull/4186) Sliding Sync tables as a bulk shortcut for getting the max `event_stream_ordering` of rooms. ([#&#8203;17693](https://github.com/element-hq/synapse/issues/17693))
-   Speed up [MSC4186](https://github.com/matrix-org/matrix-spec-proposals/pull/4186) sliding sync requests a bit where there are many room changes. ([#&#8203;17696](https://github.com/element-hq/synapse/issues/17696))
-   Refactor [MSC4186](https://github.com/matrix-org/matrix-spec-proposals/pull/4186) sliding sync filter unit tests so the sliding sync API has better test coverage. ([#&#8203;17703](https://github.com/element-hq/synapse/issues/17703))
-   Fetch `bump_stamp`s more efficiently in [MSC4186](https://github.com/matrix-org/matrix-spec-proposals/pull/4186) Sliding Sync. ([#&#8203;17723](https://github.com/element-hq/synapse/issues/17723))
-   Shortcut for checking if certain background updates have completed (utilized in [MSC4186](https://github.com/matrix-org/matrix-spec-proposals/pull/4186) Sliding Sync). ([#&#8203;17724](https://github.com/element-hq/synapse/issues/17724))
-   More efficiently fetch rooms for [MSC4186](https://github.com/matrix-org/matrix-spec-proposals/pull/4186) Sliding Sync. ([#&#8203;17725](https://github.com/element-hq/synapse/issues/17725))
-   Fix `_bulk_get_max_event_pos` being inefficient. ([#&#8203;17728](https://github.com/element-hq/synapse/issues/17728))
-   Add cache to `get_tags_for_room(...)`. ([#&#8203;17730](https://github.com/element-hq/synapse/issues/17730))
-   Small performance improvement in speeding up [MSC4186](https://github.com/matrix-org/matrix-spec-proposals/pull/4186) Sliding Sync. ([#&#8203;17731](https://github.com/element-hq/synapse/issues/17731))
-   Minor speed up of initial [MSC4186](https://github.com/matrix-org/matrix-spec-proposals/pull/4186) sliding sync requests. ([#&#8203;17734](https://github.com/element-hq/synapse/issues/17734))
-   Remove usage of the deprecated `cgi` module, deprecated in Python 3.11 and removed in Python 3.13. ([#&#8203;17741](https://github.com/element-hq/synapse/issues/17741))
-   Fix typing of a variable that is not `Unknown` anymore after updating `treq`. ([#&#8203;17744](https://github.com/element-hq/synapse/issues/17744))

##### Updates to locked dependencies

-   Bump anyhow from 1.0.86 to 1.0.89. ([#&#8203;17685](https://github.com/element-hq/synapse/issues/17685), [#&#8203;17716](https://github.com/element-hq/synapse/issues/17716))
-   Bump bytes from 1.7.1 to 1.7.2. ([#&#8203;17743](https://github.com/element-hq/synapse/issues/17743))
-   Bump cryptography from 43.0.0 to 43.0.1. ([#&#8203;17689](https://github.com/element-hq/synapse/issues/17689))
-   Bump idna from 3.8 to 3.10. ([#&#8203;17758](https://github.com/element-hq/synapse/issues/17758))
-   Bump msgpack from 1.0.8 to 1.1.0. ([#&#8203;17759](https://github.com/element-hq/synapse/issues/17759))
-   Bump phonenumbers from 8.13.44 to 8.13.45. ([#&#8203;17762](https://github.com/element-hq/synapse/issues/17762))
-   Bump prometheus-client from 0.20.0 to 0.21.0. ([#&#8203;17746](https://github.com/element-hq/synapse/issues/17746))
-   Bump pyasn1 from 0.6.0 to 0.6.1. ([#&#8203;17714](https://github.com/element-hq/synapse/issues/17714))
-   Bump pyasn1-modules from 0.4.0 to 0.4.1. ([#&#8203;17747](https://github.com/element-hq/synapse/issues/17747))
-   Bump pydantic from 2.8.2 to 2.9.2. ([#&#8203;17756](https://github.com/element-hq/synapse/issues/17756))
-   Bump python-multipart from 0.0.9 to 0.0.10. ([#&#8203;17745](https://github.com/element-hq/synapse/issues/17745))
-   Bump ruff from 0.6.4 to 0.6.7. ([#&#8203;17715](https://github.com/element-hq/synapse/issues/17715), [#&#8203;17760](https://github.com/element-hq/synapse/issues/17760))
-   Bump sentry-sdk from 2.13.0 to 2.14.0. ([#&#8203;17712](https://github.com/element-hq/synapse/issues/17712))
-   Bump serde from 1.0.209 to 1.0.210. ([#&#8203;17686](https://github.com/element-hq/synapse/issues/17686))
-   Bump serde_json from 1.0.127 to 1.0.128. ([#&#8203;17687](https://github.com/element-hq/synapse/issues/17687))
-   Bump treq from 23.11.0 to 24.9.1. ([#&#8203;17744](https://github.com/element-hq/synapse/issues/17744))
-   Bump types-pyyaml from 6.0.12.20240808 to 6.0.12.20240917. ([#&#8203;17755](https://github.com/element-hq/synapse/issues/17755))
-   Bump types-requests from 2.32.0.20240712 to 2.32.0.20240914. ([#&#8203;17713](https://github.com/element-hq/synapse/issues/17713))
-   Bump types-setuptools from 74.1.0.20240907 to 75.1.0.20240917. ([#&#8203;17757](https://github.com/element-hq/synapse/issues/17757))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xMDEuMCIsInVwZGF0ZWRJblZlciI6IjM4LjEwMS4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #78
Co-authored-by: Renovate Bot <renovate@git.csprung.de>
Co-committed-by: Renovate Bot <renovate@git.csprung.de>
2024-10-02 10:44:33 +02:00
ffe976aca5 feat(setup): Add docker logging config (#75) 2024-09-30 19:45:22 +02:00
32b52b8efd feat(service): Add cartracker LubeLogger (#77)
Reviewed-on: #77
2024-09-30 19:33:36 +02:00
767913c95c fix(mail): Fix missing hostname for postfix startup 2024-09-30 19:18:26 +02:00
43102fc8cd feat(tasks): Add headlogs task 2024-09-30 17:58:20 +02:00
c88aded868 feat(mail): Uodate spam score 2024-09-30 17:54:14 +02:00
7f5755b537 fix: Remove hostnames from docker-compose configs (#76)
- [x] This fixes services being not reachable from inside their own container
- [x] Container name must be different to URL hostname

Reviewed-on: #76
2024-09-30 17:27:30 +02:00
c3d4bbd4a7 chore(deps): update nextcloud docker tag to v30 (#69)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| nextcloud | major | `29` -> `30` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC43OS4wIiwidXBkYXRlZEluVmVyIjoiMzguNzkuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Reviewed-on: #69
Co-authored-by: Renovate Bot <renovate@git.csprung.de>
Co-committed-by: Renovate Bot <renovate@git.csprung.de>
2024-09-26 20:44:18 +02:00
c75c2a9e1d chore(deps): update ghcr.io/element-hq/synapse docker tag to v1.115.0 (#68)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/element-hq/synapse](https://matrix.org/docs/projects/server/synapse) ([source](https://github.com/element-hq/synapse)) | minor | `v1.114.0` -> `v1.115.0` |

---

### Release Notes

<details>
<summary>element-hq/synapse (ghcr.io/element-hq/synapse)</summary>

### [`v1.115.0`](https://github.com/element-hq/synapse/releases/tag/v1.115.0)

[Compare Source](https://github.com/element-hq/synapse/compare/v1.114.0...v1.115.0)

### Synapse 1.115.0 (2024-09-17)

No significant changes since 1.115.0rc2.

### Synapse 1.115.0rc2 (2024-09-12)

##### Internal Changes

-   Pre-populate room data used in experimental [MSC3575](https://github.com/matrix-org/matrix-spec-proposals/pull/3575) Sliding Sync `/sync` endpoint for quick filtering/sorting. ([#&#8203;17652](https://github.com/element-hq/synapse/issues/17652))
-   Speed up sliding sync by reducing amount of data pulled out of the database for large rooms. ([#&#8203;17683](https://github.com/element-hq/synapse/issues/17683))

### Synapse 1.115.0rc1 (2024-09-10)

##### Features

-   Improve cross-signing upload when using [MSC3861](https://github.com/matrix-org/matrix-spec-proposals/pull/3861) to use a custom UIA flow stage, with web fallback support. ([#&#8203;17509](https://github.com/element-hq/synapse/issues/17509))

##### Bugfixes

-   Return `400 M_BAD_JSON` upon attempting to complete various room actions with a non-local user ID and unknown room ID, rather than an internal server error. ([#&#8203;17607](https://github.com/element-hq/synapse/issues/17607))
-   Fix authenticated media responses using a wrong limit when following redirects over federation. ([#&#8203;17626](https://github.com/element-hq/synapse/issues/17626))
-   Fix bug where we returned the wrong `bump_stamp` for invites in sliding sync response, causing incorrect ordering of invites in the room list. ([#&#8203;17674](https://github.com/element-hq/synapse/issues/17674))

##### Improved Documentation

-   Clarify that the admin api resource is only loaded on the main process and not workers. ([#&#8203;17590](https://github.com/element-hq/synapse/issues/17590))
-   Fixed typo in `saml2_config` config [example](https://element-hq.github.io/synapse/latest/usage/configuration/config_documentation.html#saml2\_config). ([#&#8203;17594](https://github.com/element-hq/synapse/issues/17594))

##### Deprecations and Removals

-   Stabilise [MSC4156](https://github.com/matrix-org/matrix-spec-proposals/pull/4156) by removing the `msc4156_enabled` config setting and defaulting it to `true`. ([#&#8203;17650](https://github.com/element-hq/synapse/issues/17650))

##### Internal Changes

-   Update [MSC3861](https://github.com/matrix-org/matrix-spec-proposals/pull/3861) implementation: load the issuer and account management URLs from OIDC discovery. ([#&#8203;17407](https://github.com/element-hq/synapse/issues/17407))
-   Pre-populate room data used in experimental [MSC3575](https://github.com/matrix-org/matrix-spec-proposals/pull/3575) Sliding Sync `/sync` endpoint for quick filtering/sorting. ([#&#8203;17512](https://github.com/element-hq/synapse/issues/17512), [#&#8203;17632](https://github.com/element-hq/synapse/issues/17632), [#&#8203;17633](https://github.com/element-hq/synapse/issues/17633), [#&#8203;17634](https://github.com/element-hq/synapse/issues/17634), [#&#8203;17635](https://github.com/element-hq/synapse/issues/17635), [#&#8203;17636](https://github.com/element-hq/synapse/issues/17636), [#&#8203;17641](https://github.com/element-hq/synapse/issues/17641), [#&#8203;17654](https://github.com/element-hq/synapse/issues/17654), [#&#8203;17673](https://github.com/element-hq/synapse/issues/17673))
-   Store sliding sync per-connection state in the database. ([#&#8203;17599](https://github.com/element-hq/synapse/issues/17599), [#&#8203;17631](https://github.com/element-hq/synapse/issues/17631))
-   Make the sliding sync `PerConnectionState` class immutable. ([#&#8203;17600](https://github.com/element-hq/synapse/issues/17600))
-   Replace `isort` and `black` with `ruff`. ([#&#8203;17620](https://github.com/element-hq/synapse/issues/17620), [#&#8203;17643](https://github.com/element-hq/synapse/issues/17643))
-   Sliding Sync: Split up `get_room_membership_for_user_at_to_token`. ([#&#8203;17629](https://github.com/element-hq/synapse/issues/17629))
-   Use new database tables for sliding sync. ([#&#8203;17630](https://github.com/element-hq/synapse/issues/17630), [#&#8203;17649](https://github.com/element-hq/synapse/issues/17649))
-   Prevent duplicate tags being added to Sliding Sync traces. ([#&#8203;17655](https://github.com/element-hq/synapse/issues/17655))
-   Get `bump_stamp` from [new sliding sync tables](https://github.com/element-hq/synapse/pull/17512) which should be faster. ([#&#8203;17658](https://github.com/element-hq/synapse/issues/17658))
-   Speed up incremental Sliding Sync requests by avoiding extra work. ([#&#8203;17665](https://github.com/element-hq/synapse/issues/17665))
-   Small performance improvement in speeding up sliding sync. ([#&#8203;17666](https://github.com/element-hq/synapse/issues/17666), [#&#8203;17670](https://github.com/element-hq/synapse/issues/17670), [#&#8203;17672](https://github.com/element-hq/synapse/issues/17672))
-   Speed up sliding sync by reducing number of database calls. ([#&#8203;17684](https://github.com/element-hq/synapse/issues/17684))
-   Speed up sync by pulling out fewer events from the database. ([#&#8203;17688](https://github.com/element-hq/synapse/issues/17688))

##### Updates to locked dependencies

-   Bump authlib from 1.3.1 to 1.3.2. ([#&#8203;17679](https://github.com/element-hq/synapse/issues/17679))
-   Bump idna from 3.7 to 3.8. ([#&#8203;17682](https://github.com/element-hq/synapse/issues/17682))
-   Bump ruff from 0.6.2 to 0.6.4. ([#&#8203;17680](https://github.com/element-hq/synapse/issues/17680))
-   Bump towncrier from 24.7.1 to 24.8.0. ([#&#8203;17645](https://github.com/element-hq/synapse/issues/17645))
-   Bump twisted from 24.7.0rc1 to 24.7.0. ([#&#8203;17647](https://github.com/element-hq/synapse/issues/17647))
-   Bump types-pillow from 10.2.0.20240520 to 10.2.0.20240822. ([#&#8203;17644](https://github.com/element-hq/synapse/issues/17644))
-   Bump types-psycopg2 from 2.9.21.20240417 to 2.9.21.20240819. ([#&#8203;17646](https://github.com/element-hq/synapse/issues/17646))
-   Bump types-setuptools from 71.1.0.20240818 to 74.1.0.20240907. ([#&#8203;17681](https://github.com/element-hq/synapse/issues/17681))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC43OS4wIiwidXBkYXRlZEluVmVyIjoiMzguNzkuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Reviewed-on: #68
Co-authored-by: Renovate Bot <renovate@git.csprung.de>
Co-committed-by: Renovate Bot <renovate@git.csprung.de>
2024-09-26 19:40:43 +02:00
d79aabb55d services(hedgedoc): Allow setting note guest permissions, add hint to fix folder permissions 2024-09-14 16:03:21 +02:00
1a0dc28320 chore(deps): update ghcr.io/actualbudget/actual-server docker tag to v24.9.0 (#65)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| ghcr.io/actualbudget/actual-server | minor | `24.8.0-alpine` -> `24.9.0-alpine` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy40NDAuNyIsInVwZGF0ZWRJblZlciI6IjM3LjQ0MC43IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #65
Co-authored-by: Renovate Bot <renovate@git.csprung.de>
Co-committed-by: Renovate Bot <renovate@git.csprung.de>
2024-09-08 14:31:47 +02:00
1d800e9b2c chore(deps): update ghcr.io/goauthentik/server docker tag to v2024.8 (#66)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/goauthentik/server](https://goauthentik.io) ([source](https://github.com/goauthentik/authentik)) | minor | `2024.6` -> `2024.8` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy40NDAuNyIsInVwZGF0ZWRJblZlciI6IjM3LjQ0MC43IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #66
Co-authored-by: Renovate Bot <renovate@git.csprung.de>
Co-committed-by: Renovate Bot <renovate@git.csprung.de>
2024-09-08 14:31:09 +02:00
fad2ddef49 chore(deps): update woodpeckerci to v2.7.1 (#67)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [woodpeckerci/woodpecker-agent](https://github.com/woodpecker-ci/woodpecker) | patch | `v2.7.0-alpine` -> `v2.7.1-alpine` |
| [woodpeckerci/woodpecker-server](https://github.com/woodpecker-ci/woodpecker) | patch | `v2.7.0-alpine` -> `v2.7.1-alpine` |

---

### Release Notes

<details>
<summary>woodpecker-ci/woodpecker (woodpeckerci/woodpecker-agent)</summary>

### [`v2.7.1`](https://github.com/woodpecker-ci/woodpecker/releases/tag/v2.7.1): 2.7.1

[Compare Source](https://github.com/woodpecker-ci/woodpecker/compare/v2.7.0...v2.7.1)

##### [2.7.1](https://github.com/woodpecker-ci/woodpecker/releases/tag/v2.7.1) - 2024-09-07

##### ❤️ Thanks to all contributors! ❤️

[@&#8203;6543](https://github.com/6543), [@&#8203;anbraten](https://github.com/anbraten), [@&#8203;j04n-f](https://github.com/j04n-f), [@&#8203;qwerty287](https://github.com/qwerty287), [@&#8203;dvjn](https://github.com/dvjn)

##### 🔒 Security

-   Lint privileged plugin match and allow to be set empty \[[#&#8203;4084](https://github.com/woodpecker-ci/woodpecker/pull/4084)]
-   Allow admins to specify privileged plugins by name **and tag** \[[#&#8203;4076](https://github.com/woodpecker-ci/woodpecker/pull/4076)]
-   Warn if using secrets/env with plugin \[[#&#8203;4039](https://github.com/woodpecker-ci/woodpecker/pull/4039)]

##### 🐛 Bug Fixes

-   Set refspec for gitlab MR \[[#&#8203;4021](https://github.com/woodpecker-ci/woodpecker/pull/4021)]
-   Change Bitbucket PR hook to point the source branch, commit & ref \[[#&#8203;3965](https://github.com/woodpecker-ci/woodpecker/pull/3965)]
-   Add updated, merged and declined events to bb webhook activation \[[#&#8203;3963](https://github.com/woodpecker-ci/woodpecker/pull/3963)]
-   Fix login via navbar \[[#&#8203;3962](https://github.com/woodpecker-ci/woodpecker/pull/3962)]
-   Fix panic if forge is unreachable \[[#&#8203;3944](https://github.com/woodpecker-ci/woodpecker/pull/3944)]
-   Fix org settings page \[[#&#8203;4093](https://github.com/woodpecker-ci/woodpecker/pull/4093)]

##### Misc

-   Bump github.com/docker/docker from v24.0.9 to v24.0.9+30 \[[#&#8203;4077](https://github.com/woodpecker-ci/woodpecker/pull/4077)]

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these updates again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy40NDAuNyIsInVwZGF0ZWRJblZlciI6IjM3LjQ0MC43IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #67
Co-authored-by: Renovate Bot <renovate@git.csprung.de>
Co-committed-by: Renovate Bot <renovate@git.csprung.de>
2024-09-08 14:28:32 +02:00
0b0472eeba feat(proxy): Misc caddyfile (#64)
+ Update forward for actualbudget
+ Add headers to make godot web exports work
+ add hackmd redirect

Reviewed-on: #64
2024-09-03 23:33:08 +02:00
685041e7c4 chore: Fix typo 2024-09-03 23:27:34 +02:00
15e39593a5 chore(deps): update ghcr.io/element-hq/synapse docker tag to v1.114.0 (#62)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/element-hq/synapse](https://matrix.org/docs/projects/server/synapse) ([source](https://github.com/element-hq/synapse)) | minor | `v1.113.0` -> `v1.114.0` |

---

### Release Notes

<details>
<summary>element-hq/synapse (ghcr.io/element-hq/synapse)</summary>

### [`v1.114.0`](https://github.com/element-hq/synapse/releases/tag/v1.114.0)

[Compare Source](https://github.com/element-hq/synapse/compare/v1.113.0...v1.114.0)

### Synapse 1.114.0 (2024-09-02)

This release enables support for
[MSC4186](https://github.com/matrix-org/matrix-spec-proposals/pull/4186) —
Simplified Sliding Sync. This allows using the upcoming releases of the Element
X mobile apps without having to run a Sliding Sync Proxy.

##### Features

-   Enable native sliding sync support ([MSC3575](https://github.com/matrix-org/matrix-spec-proposals/pull/3575) and [MSC4186](https://github.com/matrix-org/matrix-spec-proposals/pull/4186)) by default. ([#&#8203;17648](https://github.com/element-hq/synapse/issues/17648))

### Synapse 1.114.0rc3 (2024-08-30)

##### Bugfixes

-   Fix regression in v1.114.0rc2 that caused workers to fail to start. ([#&#8203;17626](https://github.com/element-hq/synapse/issues/17626))

### Synapse 1.114.0rc2 (2024-08-30)

##### Features

-   Improve cross-signing upload when using [MSC3861](https://github.com/matrix-org/matrix-spec-proposals/pull/3861) to use a custom UIA flow stage, with web fallback support. ([#&#8203;17509](https://github.com/element-hq/synapse/issues/17509))
-   Make `hash_password` script accept password input from stdin. ([#&#8203;17608](https://github.com/element-hq/synapse/issues/17608))

##### Bugfixes

-   Fix hierarchy returning 403 when room is accessible through federation. Contributed by Krishan ([@&#8203;kfiven](https://github.com/kfiven)). ([#&#8203;17194](https://github.com/element-hq/synapse/issues/17194))
-   Fix content-length on federation `/thumbnail` responses. ([#&#8203;17532](https://github.com/element-hq/synapse/issues/17532))
-   Fix authenticated media responses using a wrong limit when following redirects over federation. ([#&#8203;17543](https://github.com/element-hq/synapse/issues/17543))

##### Internal Changes

-   MSC3861: load the issuer and account management URLs from OIDC discovery. ([#&#8203;17407](https://github.com/element-hq/synapse/issues/17407))
-   Refactor sliding sync class into multiple files. ([#&#8203;17595](https://github.com/element-hq/synapse/issues/17595))
-   Store sliding sync per-connection state in the database. ([#&#8203;17599](https://github.com/element-hq/synapse/issues/17599))
-   Make the sliding sync `PerConnectionState` class immutable. ([#&#8203;17600](https://github.com/element-hq/synapse/issues/17600))
-   Add support to `@tag_args` for standalone functions. ([#&#8203;17604](https://github.com/element-hq/synapse/issues/17604))
-   Speed up incremental syncs in sliding sync by adding some more caching. ([#&#8203;17606](https://github.com/element-hq/synapse/issues/17606))
-   Always return the user's own read receipts in sliding sync. ([#&#8203;17617](https://github.com/element-hq/synapse/issues/17617))
-   Replace `isort` and `black` with `ruff`. ([#&#8203;17620](https://github.com/element-hq/synapse/issues/17620))
-   Refactor sliding sync code to move room list logic out into a separate class. ([#&#8203;17622](https://github.com/element-hq/synapse/issues/17622))

##### Updates to locked dependencies

-   Bump attrs from 23.2.0 to 24.2.0. ([#&#8203;17609](https://github.com/element-hq/synapse/issues/17609))
-   Bump cryptography from 42.0.8 to 43.0.0. ([#&#8203;17584](https://github.com/element-hq/synapse/issues/17584))
-   Bump phonenumbers from 8.13.43 to 8.13.44. ([#&#8203;17610](https://github.com/element-hq/synapse/issues/17610))
-   Bump pygithub from 2.3.0 to 2.4.0. ([#&#8203;17612](https://github.com/element-hq/synapse/issues/17612))
-   Bump pyyaml from 6.0.1 to 6.0.2. ([#&#8203;17611](https://github.com/element-hq/synapse/issues/17611))
-   Bump sentry-sdk from 2.12.0 to 2.13.0. ([#&#8203;17585](https://github.com/element-hq/synapse/issues/17585))
-   Bump serde from 1.0.206 to 1.0.208. ([#&#8203;17581](https://github.com/element-hq/synapse/issues/17581))
-   Bump serde from 1.0.208 to 1.0.209. ([#&#8203;17613](https://github.com/element-hq/synapse/issues/17613))
-   Bump serde_json from 1.0.124 to 1.0.125. ([#&#8203;17582](https://github.com/element-hq/synapse/issues/17582))
-   Bump serde_json from 1.0.125 to 1.0.127. ([#&#8203;17614](https://github.com/element-hq/synapse/issues/17614))
-   Bump types-jsonschema from 4.23.0.20240712 to 4.23.0.20240813. ([#&#8203;17583](https://github.com/element-hq/synapse/issues/17583))
-   Bump types-setuptools from 71.1.0.20240726 to 71.1.0.20240818. ([#&#8203;17586](https://github.com/element-hq/synapse/issues/17586))

### Synapse 1.114.0rc1 (2024-08-20)

##### Features

-   Add a flag to `/versions`, `org.matrix.simplified_msc3575`, to indicate whether experimental sliding sync support has been enabled. ([#&#8203;17571](https://github.com/element-hq/synapse/issues/17571))
-   Handle changes in `timeline_limit` in experimental sliding sync. ([#&#8203;17579](https://github.com/element-hq/synapse/issues/17579))
-   Correctly track read receipts that should be sent down in experimental sliding sync. ([#&#8203;17575](https://github.com/element-hq/synapse/issues/17575), [#&#8203;17589](https://github.com/element-hq/synapse/issues/17589), [#&#8203;17592](https://github.com/element-hq/synapse/issues/17592))

##### Bugfixes

-   Start handlers for new media endpoints when media resource configured. ([#&#8203;17483](https://github.com/element-hq/synapse/issues/17483))
-   Fix timeline ordering (using `stream_ordering` instead of topological ordering) in experimental [MSC3575](https://github.com/matrix-org/matrix-spec-proposals/pull/3575) Sliding Sync `/sync` endpoint. ([#&#8203;17510](https://github.com/element-hq/synapse/issues/17510))
-   Fix experimental sliding sync implementation to remember any updates in rooms that were not sent down immediately. ([#&#8203;17535](https://github.com/element-hq/synapse/issues/17535))
-   Better exclude partially stated rooms if we must await full state in experimental [MSC3575](https://github.com/matrix-org/matrix-spec-proposals/pull/3575) Sliding Sync `/sync` endpoint. ([#&#8203;17538](https://github.com/element-hq/synapse/issues/17538))
-   Handle lower-case http headers in `_Mulitpart_Parser_Protocol`. ([#&#8203;17545](https://github.com/element-hq/synapse/issues/17545))
-   Fix fetching federation signing keys from servers that omit `old_verify_keys`. Contributed by [@&#8203;tulir](https://github.com/tulir) @&#8203; Beeper. ([#&#8203;17568](https://github.com/element-hq/synapse/issues/17568))
-   Fix bug where we would respond with an error when a remote server asked for media that had a length of 0, using the new multipart federation media endpoint. ([#&#8203;17570](https://github.com/element-hq/synapse/issues/17570))

##### Improved Documentation

-   Clarify default behaviour of the
    [`auto_accept_invites.worker_to_run_on`](https://element-hq.github.io/synapse/develop/usage/configuration/config_documentation.html#auto-accept-invites)
    option. ([#&#8203;17515](https://github.com/element-hq/synapse/issues/17515))
-   Improve docstrings for profile methods. ([#&#8203;17559](https://github.com/element-hq/synapse/issues/17559))

##### Internal Changes

-   Add more tracing to experimental [MSC3575](https://github.com/matrix-org/matrix-spec-proposals/pull/3575) Sliding Sync `/sync` endpoint. ([#&#8203;17514](https://github.com/element-hq/synapse/issues/17514))
-   Fixup comment in sliding sync implementation. ([#&#8203;17531](https://github.com/element-hq/synapse/issues/17531))
-   Replace override of deprecated method `HTTPAdapter.get_connection` with `get_connection_with_tls_context`. ([#&#8203;17536](https://github.com/element-hq/synapse/issues/17536))
-   Fix performance of device lists in `/key/changes` and sliding sync. ([#&#8203;17537](https://github.com/element-hq/synapse/issues/17537), [#&#8203;17548](https://github.com/element-hq/synapse/issues/17548))
-   Bump setuptools from 67.6.0 to 72.1.0. ([#&#8203;17542](https://github.com/element-hq/synapse/issues/17542))
-   Add a utility function for generating random event IDs. ([#&#8203;17557](https://github.com/element-hq/synapse/issues/17557))
-   Speed up responding to media requests. ([#&#8203;17558](https://github.com/element-hq/synapse/issues/17558), [#&#8203;17561](https://github.com/element-hq/synapse/issues/17561), [#&#8203;17564](https://github.com/element-hq/synapse/issues/17564), [#&#8203;17566](https://github.com/element-hq/synapse/issues/17566), [#&#8203;17567](https://github.com/element-hq/synapse/issues/17567), [#&#8203;17569](https://github.com/element-hq/synapse/issues/17569))
-   Test github token before running release script steps. ([#&#8203;17562](https://github.com/element-hq/synapse/issues/17562))
-   Reduce log spam of multipart files. ([#&#8203;17563](https://github.com/element-hq/synapse/issues/17563))
-   Refactor per-connection state in experimental sliding sync handler. ([#&#8203;17574](https://github.com/element-hq/synapse/issues/17574))
-   Add histogram metrics for sliding sync processing time. ([#&#8203;17593](https://github.com/element-hq/synapse/issues/17593))

##### Updates to locked dependencies

-   Bump bytes from 1.6.1 to 1.7.1. ([#&#8203;17526](https://github.com/element-hq/synapse/issues/17526))
-   Bump lxml from 5.2.2 to 5.3.0. ([#&#8203;17550](https://github.com/element-hq/synapse/issues/17550))
-   Bump phonenumbers from 8.13.42 to 8.13.43. ([#&#8203;17551](https://github.com/element-hq/synapse/issues/17551))
-   Bump regex from 1.10.5 to 1.10.6. ([#&#8203;17527](https://github.com/element-hq/synapse/issues/17527))
-   Bump sentry-sdk from 2.10.0 to 2.12.0. ([#&#8203;17553](https://github.com/element-hq/synapse/issues/17553))
-   Bump serde from 1.0.204 to 1.0.206. ([#&#8203;17556](https://github.com/element-hq/synapse/issues/17556))
-   Bump serde_json from 1.0.122 to 1.0.124. ([#&#8203;17555](https://github.com/element-hq/synapse/issues/17555))
-   Bump sigstore/cosign-installer from 3.5.0 to 3.6.0. ([#&#8203;17549](https://github.com/element-hq/synapse/issues/17549))
-   Bump types-pyyaml from 6.0.12.20240311 to 6.0.12.20240808. ([#&#8203;17552](https://github.com/element-hq/synapse/issues/17552))
-   Bump types-requests from 2.31.0.20240406 to 2.32.0.20240712. ([#&#8203;17524](https://github.com/element-hq/synapse/issues/17524))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy40NDAuNyIsInVwZGF0ZWRJblZlciI6IjM3LjQ0MC43IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #62
Co-authored-by: Renovate Bot <renovate@git.csprung.de>
Co-committed-by: Renovate Bot <renovate@git.csprung.de>
2024-09-03 22:52:41 +02:00
4b10fc858d chore(deps): update quay.io/hedgedoc/hedgedoc docker tag to v1.10.0 (#63)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [quay.io/hedgedoc/hedgedoc](https://hedgedoc.org) ([source](https://github.com/hedgedoc/container)) | minor | `1.9.9-alpine` -> `1.10.0-alpine` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy40NDAuNyIsInVwZGF0ZWRJblZlciI6IjM3LjQ0MC43IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #63
Co-authored-by: Renovate Bot <renovate@git.csprung.de>
Co-committed-by: Renovate Bot <renovate@git.csprung.de>
2024-09-03 22:52:22 +02:00
6e9d028c1c chore(deps): update codeberg.org/forgejo/forgejo docker tag to v8 (#58)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [codeberg.org/forgejo/forgejo](https://forgejo.org) ([source](https://codeberg.org/forgejo/forgejo)) | major | `7.0` -> `8.0` |

---

### Release Notes

<details>
<summary>forgejo/forgejo (codeberg.org/forgejo/forgejo)</summary>

### [`v8.0`](https://codeberg.org/forgejo/forgejo/blob/HEAD/RELEASE-NOTES.md#801)

The Forgejo v8.0.1 release notes are [available in the v8.0.1 milestone](https://codeberg.org/forgejo/forgejo/milestone/7682).

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy40NDAuNyIsInVwZGF0ZWRJblZlciI6IjM3LjQ0MC43IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #58
Co-authored-by: Renovate Bot <renovate@git.csprung.de>
Co-committed-by: Renovate Bot <renovate@git.csprung.de>
2024-08-29 17:22:38 +02:00
57939efedf chore(deps): update ghcr.io/element-hq/synapse docker tag to v1.113.0 (#61)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/element-hq/synapse](https://matrix.org/docs/projects/server/synapse) ([source](https://github.com/element-hq/synapse)) | minor | `v1.112.0` -> `v1.113.0` |

---

### Release Notes

<details>
<summary>element-hq/synapse (ghcr.io/element-hq/synapse)</summary>

### [`v1.113.0`](https://github.com/element-hq/synapse/releases/tag/v1.113.0)

[Compare Source](https://github.com/element-hq/synapse/compare/v1.112.0...v1.113.0)

### Synapse 1.113.0 (2024-08-13)

No significant changes since 1.113.0rc1.

### Synapse 1.113.0rc1 (2024-08-06)

##### Features

-   Track which rooms have been sent to clients in the experimental [MSC3575](https://github.com/matrix-org/matrix-spec-proposals/pull/3575) Sliding Sync `/sync` endpoint. ([#&#8203;17447](https://github.com/element-hq/synapse/issues/17447))
-   Add Account Data extension support to experimental [MSC3575](https://github.com/matrix-org/matrix-spec-proposals/pull/3575) Sliding Sync `/sync` endpoint. ([#&#8203;17477](https://github.com/element-hq/synapse/issues/17477))
-   Add receipts extension support to experimental [MSC3575](https://github.com/matrix-org/matrix-spec-proposals/pull/3575) Sliding Sync `/sync` endpoint. ([#&#8203;17489](https://github.com/element-hq/synapse/issues/17489))
-   Add typing notification extension support to experimental [MSC3575](https://github.com/matrix-org/matrix-spec-proposals/pull/3575) Sliding Sync `/sync` endpoint. ([#&#8203;17505](https://github.com/element-hq/synapse/issues/17505))

##### Bugfixes

-   Update experimental [MSC3575](https://github.com/matrix-org/matrix-spec-proposals/pull/3575) Sliding Sync `/sync` endpoint to handle invite/knock rooms when filtering. ([#&#8203;17450](https://github.com/element-hq/synapse/issues/17450))
-   Fix a bug introduced in v1.110.0 which caused `/keys/query` to return incomplete results, leading to high network activity and CPU usage on Matrix clients. ([#&#8203;17499](https://github.com/element-hq/synapse/issues/17499))

##### Improved Documentation

-   Update the [`allowed_local_3pids`](https://element-hq.github.io/synapse/v1.112/usage/configuration/config_documentation.html#allowed_local\_3pids) config option's msisdn address to a working example. ([#&#8203;17476](https://github.com/element-hq/synapse/issues/17476))

##### Internal Changes

-   Change sliding sync to use their own token format in preparation for storing per-connection state. ([#&#8203;17452](https://github.com/element-hq/synapse/issues/17452))
-   Ensure we don't send down negative `bump_stamp` in experimental sliding sync endpoint. ([#&#8203;17478](https://github.com/element-hq/synapse/issues/17478))
-   Do not send down empty room entries down experimental sliding sync endpoint. ([#&#8203;17479](https://github.com/element-hq/synapse/issues/17479))
-   Refactor Sliding Sync tests to better utilize the `SlidingSyncBase`. ([#&#8203;17481](https://github.com/element-hq/synapse/issues/17481), [#&#8203;17482](https://github.com/element-hq/synapse/issues/17482))
-   Add some opentracing tags and logging to the experimental sliding sync implementation. ([#&#8203;17501](https://github.com/element-hq/synapse/issues/17501))
-   Split and move Sliding Sync tests so we have some more sane test file sizes. ([#&#8203;17504](https://github.com/element-hq/synapse/issues/17504))
-   Update the `limited` field description in the Sliding Sync response to accurately describe what it actually represents. ([#&#8203;17507](https://github.com/element-hq/synapse/issues/17507))
-   Easier to understand `timeline` assertions in Sliding Sync tests. ([#&#8203;17511](https://github.com/element-hq/synapse/issues/17511))
-   Reset the sliding sync connection if we don't recognize the per-connection state position. ([#&#8203;17529](https://github.com/element-hq/synapse/issues/17529))

##### Updates to locked dependencies

-   Bump bcrypt from 4.1.3 to 4.2.0. ([#&#8203;17495](https://github.com/element-hq/synapse/issues/17495))
-   Bump black from 24.4.2 to 24.8.0. ([#&#8203;17522](https://github.com/element-hq/synapse/issues/17522))
-   Bump phonenumbers from 8.13.39 to 8.13.42. ([#&#8203;17521](https://github.com/element-hq/synapse/issues/17521))
-   Bump ruff from 0.5.4 to 0.5.5. ([#&#8203;17494](https://github.com/element-hq/synapse/issues/17494))
-   Bump serde_json from 1.0.120 to 1.0.121. ([#&#8203;17493](https://github.com/element-hq/synapse/issues/17493))
-   Bump serde_json from 1.0.121 to 1.0.122. ([#&#8203;17525](https://github.com/element-hq/synapse/issues/17525))
-   Bump towncrier from 23.11.0 to 24.7.1. ([#&#8203;17523](https://github.com/element-hq/synapse/issues/17523))
-   Bump types-pyopenssl from 24.1.0.20240425 to 24.1.0.20240722. ([#&#8203;17496](https://github.com/element-hq/synapse/issues/17496))
-   Bump types-setuptools from 70.1.0.20240627 to 71.1.0.20240726. ([#&#8203;17497](https://github.com/element-hq/synapse/issues/17497))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy40NDAuNyIsInVwZGF0ZWRJblZlciI6IjM3LjQ0MC43IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #61
Co-authored-by: Renovate Bot <renovate@git.csprung.de>
Co-committed-by: Renovate Bot <renovate@git.csprung.de>
2024-08-16 22:59:29 +02:00
f52019a1e7 chore(deps): update ghcr.io/dani-garcia/vaultwarden docker tag to v1.32.0 (#60)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/dani-garcia/vaultwarden](https://github.com/dani-garcia/vaultwarden) | minor | `1.31.0-alpine` -> `1.32.0-alpine` |

---

### Release Notes

<details>
<summary>dani-garcia/vaultwarden (ghcr.io/dani-garcia/vaultwarden)</summary>

### [`v1.32.0`](https://github.com/dani-garcia/vaultwarden/releases/tag/1.32.0)

[Compare Source](https://github.com/dani-garcia/vaultwarden/compare/1.31.0...1.32.0)

#### Security Fixes

This release has several CVE Reports fixed and we recommend everybody to update to the latest version as soon as possible.

-   [CVE-2024-39924](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39924) Fixed via [#&#8203;4715](https://github.com/dani-garcia/vaultwarden/issues/4715)
-   [CVE-2024-39925](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39925) Fixed via [#&#8203;4837](https://github.com/dani-garcia/vaultwarden/issues/4837)
-   [CVE-2024-39926](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39926) Fixed via [#&#8203;4737](https://github.com/dani-garcia/vaultwarden/issues/4737)

#### Other changes

-   Updated web-vault to v2024.6.2
-   Fixed issues with password reset enrollment by rolling back a web-vault commit

#### What's Changed

-   use a custom plan of enterprise tier to fix limits by [@&#8203;stefan0xC](https://github.com/stefan0xC) in https://github.com/dani-garcia/vaultwarden/pull/4726
-   chore: Dockerfile to Remove port 3012 by [@&#8203;calvin-li-developer](https://github.com/calvin-li-developer) in https://github.com/dani-garcia/vaultwarden/pull/4725
-   Fix bug where secureNotes is empty by [@&#8203;cobyge](https://github.com/cobyge) in https://github.com/dani-garcia/vaultwarden/pull/4730
-   Improved HTTP client by [@&#8203;dani-garcia](https://github.com/dani-garcia) in https://github.com/dani-garcia/vaultwarden/pull/4740
-   Update admin interface by [@&#8203;BlackDex](https://github.com/BlackDex) in https://github.com/dani-garcia/vaultwarden/pull/4737
-   Fix for RSA Keys which are read only by [@&#8203;BlackDex](https://github.com/BlackDex) in https://github.com/dani-garcia/vaultwarden/pull/4744
-   Fix Email 2FA login on native app by [@&#8203;BlackDex](https://github.com/BlackDex) in https://github.com/dani-garcia/vaultwarden/pull/4762
-   Update crates & fix crate vulnerability by [@&#8203;dfunkt](https://github.com/dfunkt) in https://github.com/dani-garcia/vaultwarden/pull/4771
-   Fix Dockerfile linter warnings by [@&#8203;dfunkt](https://github.com/dfunkt) in https://github.com/dani-garcia/vaultwarden/pull/4763
-   allow re-invitations of existing users by [@&#8203;stefan0xC](https://github.com/stefan0xC) in https://github.com/dani-garcia/vaultwarden/pull/4768
-   Allow to override log level for specific target by [@&#8203;Timshel](https://github.com/Timshel) in https://github.com/dani-garcia/vaultwarden/pull/4305
-   Add support for MFA with Duo's Universal Prompt by [@&#8203;0x0fbc](https://github.com/0x0fbc) in https://github.com/dani-garcia/vaultwarden/pull/4637
-   Allow to increase the note size to 100\_000 by [@&#8203;BlackDex](https://github.com/BlackDex) in https://github.com/dani-garcia/vaultwarden/pull/4772
-   Update Rust, Crates and GHA by [@&#8203;BlackDex](https://github.com/BlackDex) in https://github.com/dani-garcia/vaultwarden/pull/4783
-   Duo: use the formatted db email by [@&#8203;Timshel](https://github.com/Timshel) in https://github.com/dani-garcia/vaultwarden/pull/4779
-   Update rust-toolchain.toml to 1.80.0 by [@&#8203;dfunkt](https://github.com/dfunkt) in https://github.com/dani-garcia/vaultwarden/pull/4784
-   fix issue with adding ciphers to organizations on native ios app by [@&#8203;stefan0xC](https://github.com/stefan0xC) in https://github.com/dani-garcia/vaultwarden/pull/4800
-   Rewrite the Push Notifications section in the configuration template by [@&#8203;dfunkt](https://github.com/dfunkt) in https://github.com/dani-garcia/vaultwarden/pull/4805
-   Secure send file uploads by [@&#8203;BlackDex](https://github.com/BlackDex) in https://github.com/dani-garcia/vaultwarden/pull/4810
-   make access_all optional by [@&#8203;stefan0xC](https://github.com/stefan0xC) in https://github.com/dani-garcia/vaultwarden/pull/4812
-   Remove lowercase conversion for featureStates by [@&#8203;dfunkt](https://github.com/dfunkt) in https://github.com/dani-garcia/vaultwarden/pull/4820
-   Fix mail::send_incomplete\_2fa_login panic issue by [@&#8203;dfunkt](https://github.com/dfunkt) in https://github.com/dani-garcia/vaultwarden/pull/4792
-   Update crates, web-vault and fixes by [@&#8203;BlackDex](https://github.com/BlackDex) in https://github.com/dani-garcia/vaultwarden/pull/4823
-   Updated web-vault to v2024.6.2b by [@&#8203;BlackDex](https://github.com/BlackDex) in https://github.com/dani-garcia/vaultwarden/pull/4826
-   Update Rust to 1.80.1 by [@&#8203;dfunkt](https://github.com/dfunkt) in https://github.com/dani-garcia/vaultwarden/pull/4831
-   Fix data disclosure on organization endpoints by [@&#8203;BlackDex](https://github.com/BlackDex) in https://github.com/dani-garcia/vaultwarden/pull/4837

#### New Contributors

-   [@&#8203;cobyge](https://github.com/cobyge) made their first contribution in https://github.com/dani-garcia/vaultwarden/pull/4730
-   [@&#8203;0x0fbc](https://github.com/0x0fbc) made their first contribution in https://github.com/dani-garcia/vaultwarden/pull/4637

**Full Changelog**: https://github.com/dani-garcia/vaultwarden/compare/1.31.0...1.32.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy40NDAuNyIsInVwZGF0ZWRJblZlciI6IjM3LjQ0MC43IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #60
Co-authored-by: Renovate Bot <renovate@git.csprung.de>
Co-committed-by: Renovate Bot <renovate@git.csprung.de>
2024-08-16 22:58:23 +02:00
16c4155db8 chore(deps): update ghcr.io/actualbudget/actual-server docker tag to v24.8.0 (#59)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| ghcr.io/actualbudget/actual-server | minor | `24.7.0-alpine` -> `24.8.0-alpine` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy40NDAuNyIsInVwZGF0ZWRJblZlciI6IjM3LjQ0MC43IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #59
Co-authored-by: Renovate Bot <renovate@git.csprung.de>
Co-committed-by: Renovate Bot <renovate@git.csprung.de>
2024-08-11 20:56:05 +02:00
08ac8e5733 chore(deps): update ghcr.io/element-hq/synapse docker tag to v1.112.0 (#57)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/element-hq/synapse](https://matrix.org/docs/projects/server/synapse) ([source](https://github.com/element-hq/synapse)) | minor | `v1.111.0` -> `v1.112.0` |

---

### Release Notes

<details>
<summary>element-hq/synapse (ghcr.io/element-hq/synapse)</summary>

### [`v1.112.0`](https://github.com/element-hq/synapse/releases/tag/v1.112.0)

[Compare Source](https://github.com/element-hq/synapse/compare/v1.111.1...v1.112.0)

### Synapse 1.112.0 (2024-07-30)

This security release is to update our locked dependency on Twisted to 24.7.0rc1, which includes a security fix for [CVE-2024-41671 / GHSA-c8m8-j448-xjx7: Disordered HTTP pipeline response in twisted.web, again](https://github.com/twisted/twisted/security/advisories/GHSA-c8m8-j448-xjx7).

Note that this security fix is also available as **Synapse 1.111.1**, which does not include the rest of the changes in Synapse 1.112.0.

This issue means that, if multiple HTTP requests are pipelined in the same TCP connection, Synapse can send responses to the wrong HTTP request.
If a reverse proxy was configured to use HTTP pipelining, this could result in responses being sent to the wrong user, severely harming confidentiality.

With that said, despite being a high severity issue, **we consider it unlikely that Synapse installations will be affected**.
The use of HTTP pipelining in this fashion would cause worse performance for clients (request-response latencies would be increased as users' responses would be artificially blocked behind other users' slow requests). Further, Nginx and Haproxy, two common reverse proxies, do not appear to support configuring their upstreams to use HTTP pipelining and thus would not be affected. For both of these reasons, we consider it unlikely that a Synapse deployment would be set up in such a configuration.

Despite that, we cannot rule out that some installations may exist with this unusual setup and so we are releasing this security update today.

**pip users:** Note that by default, upgrading Synapse using pip will not automatically upgrade Twisted. **Please manually install the new version of Twisted** using `pip install Twisted==24.7.0rc1`. Note also that even the `--upgrade-strategy=eager` flag to `pip install -U matrix-synapse` will not upgrade Twisted to a patched version because it is only a release candidate at this time.

##### Internal Changes

-   Upgrade locked dependency on Twisted to 24.7.0rc1. ([#&#8203;17502](https://github.com/element-hq/synapse/issues/17502))

### Synapse 1.112.0rc1 (2024-07-23)

Please note that this release candidate does not include the security dependency update
included in version 1.111.1 as this version was released before 1.111.1.
The same security fix can be found in the full release of 1.112.0.

##### Features

-   Add to-device extension support to experimental [MSC3575](https://github.com/matrix-org/matrix-spec-proposals/pull/3575) Sliding Sync `/sync` endpoint. ([#&#8203;17416](https://github.com/element-hq/synapse/issues/17416))
-   Populate `name`/`avatar` fields in experimental [MSC3575](https://github.com/matrix-org/matrix-spec-proposals/pull/3575) Sliding Sync `/sync` endpoint. ([#&#8203;17418](https://github.com/element-hq/synapse/issues/17418))
-   Populate `heroes` and room summary fields (`joined_count`, `invited_count`) in experimental [MSC3575](https://github.com/matrix-org/matrix-spec-proposals/pull/3575) Sliding Sync `/sync` endpoint. ([#&#8203;17419](https://github.com/element-hq/synapse/issues/17419))
-   Populate `is_dm` room field in experimental [MSC3575](https://github.com/matrix-org/matrix-spec-proposals/pull/3575) Sliding Sync `/sync` endpoint. ([#&#8203;17429](https://github.com/element-hq/synapse/issues/17429))
-   Add room subscriptions to experimental [MSC3575](https://github.com/matrix-org/matrix-spec-proposals/pull/3575) Sliding Sync `/sync` endpoint. ([#&#8203;17432](https://github.com/element-hq/synapse/issues/17432))
-   Prepare for authenticated media freeze. ([#&#8203;17433](https://github.com/element-hq/synapse/issues/17433))
-   Add E2EE extension support to experimental [MSC3575](https://github.com/matrix-org/matrix-spec-proposals/pull/3575) Sliding Sync `/sync` endpoint. ([#&#8203;17454](https://github.com/element-hq/synapse/issues/17454))

##### Bugfixes

-   Add configurable option to always include offline users in presence sync results. Contributed by [@&#8203;Michael-Hollister](https://github.com/Michael-Hollister). ([#&#8203;17231](https://github.com/element-hq/synapse/issues/17231))
-   Fix bug in experimental [MSC3575](https://github.com/matrix-org/matrix-spec-proposals/pull/3575) Sliding Sync `/sync` endpoint when using room type filters and the user has one or more remote invites. ([#&#8203;17434](https://github.com/element-hq/synapse/issues/17434))
-   Order `heroes` by `stream_ordering` as the Matrix specification states (applies to `/sync`). ([#&#8203;17435](https://github.com/element-hq/synapse/issues/17435))
-   Fix rare bug where `/sync` would break for a user when using workers with multiple stream writers. ([#&#8203;17438](https://github.com/element-hq/synapse/issues/17438))

##### Improved Documentation

-   Update the readme image to have a white background, so that it is readable in dark mode. ([#&#8203;17387](https://github.com/element-hq/synapse/issues/17387))
-   Add Red Hat Enterprise Linux and Rocky Linux 8 and 9 installation instructions. ([#&#8203;17423](https://github.com/element-hq/synapse/issues/17423))
-   Improve documentation for the [`default_power_level_content_override`](https://element-hq.github.io/synapse/latest/usage/configuration/config_documentation.html#default_power_level_content_override) config option. ([#&#8203;17451](https://github.com/element-hq/synapse/issues/17451))

##### Internal Changes

-   Make sure we always use the right logic for enabling the media repo. ([#&#8203;17424](https://github.com/element-hq/synapse/issues/17424))
-   Fix argument documentation for method `RateLimiter.record_action`. ([#&#8203;17426](https://github.com/element-hq/synapse/issues/17426))
-   Reduce volume of 'Waiting for current token' logs, which were introduced in v1.109.0. ([#&#8203;17428](https://github.com/element-hq/synapse/issues/17428))
-   Limit concurrent remote downloads to 6 per IP address, and decrement remote downloads without a content-length from the ratelimiter after the download is complete. ([#&#8203;17439](https://github.com/element-hq/synapse/issues/17439))
-   Remove unnecessary call to resume producing in fake channel. ([#&#8203;17449](https://github.com/element-hq/synapse/issues/17449))
-   Update experimental [MSC3575](https://github.com/matrix-org/matrix-spec-proposals/pull/3575) Sliding Sync `/sync` endpoint to bump room when it is created. ([#&#8203;17453](https://github.com/element-hq/synapse/issues/17453))
-   Speed up generating sliding sync responses. ([#&#8203;17458](https://github.com/element-hq/synapse/issues/17458))
-   Add cache to `get_rooms_for_local_user_where_membership_is` to speed up sliding sync. ([#&#8203;17460](https://github.com/element-hq/synapse/issues/17460))
-   Speed up fetching room keys from backup. ([#&#8203;17461](https://github.com/element-hq/synapse/issues/17461))
-   Speed up sorting of the room list in sliding sync. ([#&#8203;17468](https://github.com/element-hq/synapse/issues/17468))
-   Implement handling of `$ME` as a state key in sliding sync. ([#&#8203;17469](https://github.com/element-hq/synapse/issues/17469))

##### Updates to locked dependencies

-   Bump bytes from 1.6.0 to 1.6.1. ([#&#8203;17441](https://github.com/element-hq/synapse/issues/17441))
-   Bump hiredis from 2.3.2 to 3.0.0. ([#&#8203;17464](https://github.com/element-hq/synapse/issues/17464))
-   Bump jsonschema from 4.22.0 to 4.23.0. ([#&#8203;17444](https://github.com/element-hq/synapse/issues/17444))
-   Bump matrix-org/done-action from 2 to 3. ([#&#8203;17440](https://github.com/element-hq/synapse/issues/17440))
-   Bump mypy from 1.9.0 to 1.10.1. ([#&#8203;17445](https://github.com/element-hq/synapse/issues/17445))
-   Bump pyopenssl from 24.1.0 to 24.2.1. ([#&#8203;17465](https://github.com/element-hq/synapse/issues/17465))
-   Bump ruff from 0.5.0 to 0.5.4. ([#&#8203;17466](https://github.com/element-hq/synapse/issues/17466))
-   Bump sentry-sdk from 2.6.0 to 2.8.0. ([#&#8203;17456](https://github.com/element-hq/synapse/issues/17456))
-   Bump sentry-sdk from 2.8.0 to 2.10.0. ([#&#8203;17467](https://github.com/element-hq/synapse/issues/17467))
-   Bump setuptools from 67.6.0 to 70.0.0. ([#&#8203;17448](https://github.com/element-hq/synapse/issues/17448))
-   Bump twine from 5.1.0 to 5.1.1. ([#&#8203;17443](https://github.com/element-hq/synapse/issues/17443))
-   Bump types-jsonschema from 4.22.0.20240610 to 4.23.0.20240712. ([#&#8203;17446](https://github.com/element-hq/synapse/issues/17446))
-   Bump ulid from 1.1.2 to 1.1.3. ([#&#8203;17442](https://github.com/element-hq/synapse/issues/17442))
-   Bump zipp from 3.15.0 to 3.19.1. ([#&#8203;17427](https://github.com/element-hq/synapse/issues/17427))

### [`v1.111.1`](https://github.com/element-hq/synapse/releases/tag/v1.111.1)

[Compare Source](https://github.com/element-hq/synapse/compare/v1.111.0...v1.111.1)

### Synapse 1.111.1 (2024-07-30)

This security release is to update our locked dependency on Twisted to 24.7.0rc1, which includes a security fix for [CVE-2024-41671 / GHSA-c8m8-j448-xjx7: Disordered HTTP pipeline response in twisted.web, again](https://github.com/twisted/twisted/security/advisories/GHSA-c8m8-j448-xjx7).

This issue means that, if multiple HTTP requests are pipelined in the same TCP connection, Synapse can send responses to the wrong HTTP request.
If a reverse proxy was configured to use HTTP pipelining, this could result in responses being sent to the wrong user, severely harming confidentiality.

With that said, despite being a high severity issue, **we consider it unlikely that Synapse installations will be affected**.
The use of HTTP pipelining in this fashion would cause worse performance for clients (request-response latencies would be increased as users' responses would be artificially blocked behind other users' slow requests). Further, Nginx and Haproxy, two common reverse proxies, do not appear to support configuring their upstreams to use HTTP pipelining and thus would not be affected. For both of these reasons, we consider it unlikely that a Synapse deployment would be set up in such a configuration.

Despite that, we cannot rule out that some installations may exist with this unusual setup and so we are releasing this security update today.

**pip users:** Note that by default, upgrading Synapse using pip will not automatically upgrade Twisted. **Please manually install the new version of Twisted** using `pip install Twisted==24.7.0rc1`. Note also that even the `--upgrade-strategy=eager` flag to `pip install -U matrix-synapse` will not upgrade Twisted to a patched version because it is only a release candidate at this time.

##### Internal Changes

-   Upgrade locked dependency on Twisted to 24.7.0rc1. ([#&#8203;17502](https://github.com/element-hq/synapse/issues/17502))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy40NDAuNyIsInVwZGF0ZWRJblZlciI6IjM3LjQ0MC43IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #57
Co-authored-by: Renovate Bot <renovate@git.csprung.de>
Co-committed-by: Renovate Bot <renovate@git.csprung.de>
2024-07-31 23:48:14 +02:00
7fd5a9c079 chore(deps): update woodpeckerci to v2.7.0 (#56)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [woodpeckerci/woodpecker-agent](https://github.com/woodpecker-ci/woodpecker) | minor | `v2.6.0-alpine` -> `v2.7.0-alpine` |
| [woodpeckerci/woodpecker-server](https://github.com/woodpecker-ci/woodpecker) | minor | `v2.6.0-alpine` -> `v2.7.0-alpine` |

---

### Release Notes

<details>
<summary>woodpecker-ci/woodpecker (woodpeckerci/woodpecker-agent)</summary>

### [`v2.7.0`](https://github.com/woodpecker-ci/woodpecker/releases/tag/v2.7.0): 2.7.0

[Compare Source](https://github.com/woodpecker-ci/woodpecker/compare/v2.6.1...v2.7.0)

##### [2.7.0](https://github.com/woodpecker-ci/woodpecker/releases/tag/v2.7.0) - 2024-07-18

##### ❤️ Thanks to all contributors! ❤️

[@&#8203;6543](https://github.com/6543), [@&#8203;anbraten](https://github.com/anbraten), [@&#8203;dvjn](https://github.com/dvjn), [@&#8203;hhamalai](https://github.com/hhamalai), [@&#8203;lafriks](https://github.com/lafriks), [@&#8203;pat-s](https://github.com/pat-s), [@&#8203;qwerty287](https://github.com/qwerty287), [@&#8203;smainz](https://github.com/smainz), [@&#8203;tongjicoder](https://github.com/tongjicoder), [@&#8203;zc-devs](https://github.com/zc-devs)

##### ❤️ Special thanks the security researchers and those who fixed it ❤️

-   [Daniel Kilimnik](https://kilimnik) [@&#8203;D_K_Dev](https://x.com/D_K_Dev) (Neodyme AG) *reporting the bugs and orchestrating the communication*
-   Felipe Custodio Romero [@&#8203;*localo*](https://x.com/\_localo\_) (Neodyme AG) *finding the bugs*
-   [@&#8203;6543](https://github.com/6543) *fixing the bugs and orchestrating the communication*

##### 🔒 Security

-   Add blocklist of environment variables who could alter execution of plugins \[[#&#8203;3934](https://github.com/woodpecker-ci/woodpecker/pull/3934)]
-   Make sure plugins only mount the workspace base in a predefinde location \[[#&#8203;3933](https://github.com/woodpecker-ci/woodpecker/pull/3933)]
-   Disallow to set arbitrary environments for plugins \[[#&#8203;3909](https://github.com/woodpecker-ci/woodpecker/pull/3909)]
-   Use proper oauth state \[[#&#8203;3847](https://github.com/woodpecker-ci/woodpecker/pull/3847)]
-   Enhance token checking \[[#&#8203;3842](https://github.com/woodpecker-ci/woodpecker/pull/3842)]
-   Bump github.com/hashicorp/go-retryablehttp v0.7.5 -> v0.7.7 \[[#&#8203;3834](https://github.com/woodpecker-ci/woodpecker/pull/3834)]

#####  Features

-   Gracefully shutdown server \[[#&#8203;3896](https://github.com/woodpecker-ci/woodpecker/pull/3896)]
-   Gracefully shutdown agent \[[#&#8203;3895](https://github.com/woodpecker-ci/woodpecker/pull/3895)]
-   Convert urls in logs to links  \[[#&#8203;3904](https://github.com/woodpecker-ci/woodpecker/pull/3904)]
-   Allow login using multiple forges \[[#&#8203;3822](https://github.com/woodpecker-ci/woodpecker/pull/3822)]
-   Global and organization registries \[[#&#8203;1672](https://github.com/woodpecker-ci/woodpecker/pull/1672)]
-   Cli get repo from git remote \[[#&#8203;3830](https://github.com/woodpecker-ci/woodpecker/pull/3830)]
-   Add api for forges \[[#&#8203;3733](https://github.com/woodpecker-ci/woodpecker/pull/3733)]

##### 📈 Enhancement

-   Cli fix pipeline logs \[[#&#8203;3913](https://github.com/woodpecker-ci/woodpecker/pull/3913)]
-   Migrate to github.com/urfave/cli/v3 \[[#&#8203;2951](https://github.com/woodpecker-ci/woodpecker/pull/2951)]
-   Allow to change the working directory also for plugins and services \[[#&#8203;3914](https://github.com/woodpecker-ci/woodpecker/pull/3914)]
-   Remove `unplugin-icons` \[[#&#8203;3809](https://github.com/woodpecker-ci/woodpecker/pull/3809)]
-   Release windows binaries as zip file \[[#&#8203;3906](https://github.com/woodpecker-ci/woodpecker/pull/3906)]
-   Convert to openapi 3.0 \[[#&#8203;3897](https://github.com/woodpecker-ci/woodpecker/pull/3897)]
-   Enhance pipeline list \[[#&#8203;3898](https://github.com/woodpecker-ci/woodpecker/pull/3898)]
-   Add user registries UI \[[#&#8203;3888](https://github.com/woodpecker-ci/woodpecker/pull/3888)]
-   Sort users by login \[[#&#8203;3891](https://github.com/woodpecker-ci/woodpecker/pull/3891)]
-   Exclude dummy backend in production \[[#&#8203;3877](https://github.com/woodpecker-ci/woodpecker/pull/3877)]
-   Fix deploy task env \[[#&#8203;3878](https://github.com/woodpecker-ci/woodpecker/pull/3878)]
-   Get default branch and show message in pipeline list \[[#&#8203;3867](https://github.com/woodpecker-ci/woodpecker/pull/3867)]
-   Add timestamp for last work done by agent \[[#&#8203;3844](https://github.com/woodpecker-ci/woodpecker/pull/3844)]
-   Adjust logger types \[[#&#8203;3859](https://github.com/woodpecker-ci/woodpecker/pull/3859)]
-   Cleanup state reporting \[[#&#8203;3850](https://github.com/woodpecker-ci/woodpecker/pull/3850)]
-   Unify DB tables/columns \[[#&#8203;3806](https://github.com/woodpecker-ci/woodpecker/pull/3806)]
-   Let webhook pass on pipeline parsing error \[[#&#8203;3829](https://github.com/woodpecker-ci/woodpecker/pull/3829)]
-   Exclude mocks from release build \[[#&#8203;3831](https://github.com/woodpecker-ci/woodpecker/pull/3831)]
-   K8s secrets reference from step \[[#&#8203;3655](https://github.com/woodpecker-ci/woodpecker/pull/3655)]

##### 🐛 Bug Fixes

-   Handle empty repositories in gitea when listing PRs \[[#&#8203;3925](https://github.com/woodpecker-ci/woodpecker/pull/3925)]
-   Update alpine package dep for docker images \[[#&#8203;3917](https://github.com/woodpecker-ci/woodpecker/pull/3917)]
-   Don't report error if agent was terminated gracefully \[[#&#8203;3894](https://github.com/woodpecker-ci/woodpecker/pull/3894)]
-   Let agents continuously report their health \[[#&#8203;3893](https://github.com/woodpecker-ci/woodpecker/pull/3893)]
-   Ignore warnings for cli exec \[[#&#8203;3868](https://github.com/woodpecker-ci/woodpecker/pull/3868)]
-   Correct favicon states \[[#&#8203;3832](https://github.com/woodpecker-ci/woodpecker/pull/3832)]
-   Cleanup of the login flow and tests \[[#&#8203;3810](https://github.com/woodpecker-ci/woodpecker/pull/3810)]
-   Fix newlines in logs \[[#&#8203;3808](https://github.com/woodpecker-ci/woodpecker/pull/3808)]
-   Fix authentication error handling \[[#&#8203;3807](https://github.com/woodpecker-ci/woodpecker/pull/3807)]

##### 📚 Documentation

-   Streamline docs for new users \[[#&#8203;3803](https://github.com/woodpecker-ci/woodpecker/pull/3803)]
-   Add mastodon verification \[[#&#8203;3843](https://github.com/woodpecker-ci/woodpecker/pull/3843)]
-   chore(deps): update docs npm deps non-major \[[#&#8203;3837](https://github.com/woodpecker-ci/woodpecker/pull/3837)]
-   fix(deps): update docs npm deps non-major \[[#&#8203;3824](https://github.com/woodpecker-ci/woodpecker/pull/3824)]
-   Add openSUSE package \[[#&#8203;3800](https://github.com/woodpecker-ci/woodpecker/pull/3800)]
-   chore(deps): update docs npm deps non-major \[[#&#8203;3798](https://github.com/woodpecker-ci/woodpecker/pull/3798)]
-   Add "Docker Tags" Plugin \[[#&#8203;3796](https://github.com/woodpecker-ci/woodpecker/pull/3796)]
-   chore(deps): update dependency marked to v13 \[[#&#8203;3792](https://github.com/woodpecker-ci/woodpecker/pull/3792)]
-   chore: fix some comments \[[#&#8203;3788](https://github.com/woodpecker-ci/woodpecker/pull/3788)]

##### Misc

-   chore(deps): update web npm deps non-major \[[#&#8203;3930](https://github.com/woodpecker-ci/woodpecker/pull/3930)]
-   chore(deps): update dependency vitest to v2 \[[#&#8203;3905](https://github.com/woodpecker-ci/woodpecker/pull/3905)]
-   fix(deps): update module github.com/google/go-github/v62 to v63 \[[#&#8203;3910](https://github.com/woodpecker-ci/woodpecker/pull/3910)]
-   chore(deps): update docker.io/woodpeckerci/plugin-docker-buildx docker tag to v4.1.0 \[[#&#8203;3908](https://github.com/woodpecker-ci/woodpecker/pull/3908)]
-   Update plugin-git and add renovate trigger \[[#&#8203;3901](https://github.com/woodpecker-ci/woodpecker/pull/3901)]
-   chore(deps): update docker.io/mstruebing/editorconfig-checker docker tag to v3.0.3 \[[#&#8203;3903](https://github.com/woodpecker-ci/woodpecker/pull/3903)]
-   fix(deps): update golang-packages \[[#&#8203;3875](https://github.com/woodpecker-ci/woodpecker/pull/3875)]
-   chore(deps): lock file maintenance \[[#&#8203;3876](https://github.com/woodpecker-ci/woodpecker/pull/3876)]
-   \[pre-commit.ci] pre-commit autoupdate \[[#&#8203;3862](https://github.com/woodpecker-ci/woodpecker/pull/3862)]
-   Add dummy backend \[[#&#8203;3820](https://github.com/woodpecker-ci/woodpecker/pull/3820)]
-   chore(deps): update dependency replace-in-file to v8 \[[#&#8203;3852](https://github.com/woodpecker-ci/woodpecker/pull/3852)]
-   Update forgejo sdk \[[#&#8203;3840](https://github.com/woodpecker-ci/woodpecker/pull/3840)]
-   chore(deps): lock file maintenance \[[#&#8203;3838](https://github.com/woodpecker-ci/woodpecker/pull/3838)]
-   Allow to set dist dir using env var \[[#&#8203;3814](https://github.com/woodpecker-ci/woodpecker/pull/3814)]
-   chore(deps): lock file maintenance \[[#&#8203;3805](https://github.com/woodpecker-ci/woodpecker/pull/3805)]
-   chore(deps): update docker.io/lycheeverse/lychee docker tag to v0.15.1 \[[#&#8203;3797](https://github.com/woodpecker-ci/woodpecker/pull/3797)]

### [`v2.6.1`](https://github.com/woodpecker-ci/woodpecker/releases/tag/v2.6.1): 2.6.1

[Compare Source](https://github.com/woodpecker-ci/woodpecker/compare/v2.6.0...v2.6.1)

##### [2.6.1](https://github.com/woodpecker-ci/woodpecker/releases/tag/v2.6.1) - 2024-07-18

##### 🔒 Security

-   Add blocklist of environment variables who could alter execution of plugins \[[#&#8203;3934](https://github.com/woodpecker-ci/woodpecker/pull/3934)]
-   Make sure plugins only mount the workspace base in a predefinde location \[[#&#8203;3933](https://github.com/woodpecker-ci/woodpecker/pull/3933)]
-   Disalow to set arbitrary environments for plugins \[[#&#8203;3909](https://github.com/woodpecker-ci/woodpecker/pull/3909)]
-   Bump trivy plugin version and remove unused variable \[[#&#8203;3833](https://github.com/woodpecker-ci/woodpecker/pull/3833)]

##### 🐛 Bug Fixes

-   Let webhook pass on pipeline parsion error \[[#&#8203;3829](https://github.com/woodpecker-ci/woodpecker/pull/3829)]
-   Fix newlines in logs \[[#&#8203;3808](https://github.com/woodpecker-ci/woodpecker/pull/3808)]

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these updates again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy40MzEuNCIsInVwZGF0ZWRJblZlciI6IjM3LjQzMS40IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #56
Co-authored-by: Renovate Bot <renovate@git.csprung.de>
Co-committed-by: Renovate Bot <renovate@git.csprung.de>
2024-07-21 21:55:37 +02:00
3424004910 chore(deps): update ghcr.io/element-hq/synapse docker tag to v1.111.0 (#55)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/element-hq/synapse](https://matrix.org/docs/projects/server/synapse) ([source](https://github.com/element-hq/synapse)) | minor | `v1.110.0` -> `v1.111.0` |

---

### Release Notes

<details>
<summary>element-hq/synapse (ghcr.io/element-hq/synapse)</summary>

### [`v1.111.0`](https://github.com/element-hq/synapse/releases/tag/v1.111.0)

[Compare Source](https://github.com/element-hq/synapse/compare/v1.110.0...v1.111.0)

### Synapse 1.111.0 (2024-07-16)

No significant changes since 1.111.0rc2.

### Synapse 1.111.0rc2 (2024-07-10)

##### Bugfixes

-   Fix bug where using `synapse.app.media_repository` worker configuration would break the new media endpoints. ([#&#8203;17420](https://github.com/element-hq/synapse/issues/17420))

##### Improved Documentation

-   Document the new federation media worker endpoints in the [upgrade notes](https://element-hq.github.io/synapse/v1.111/upgrade.html) and [worker docs](https://element-hq.github.io/synapse/v1.111/workers.html). ([#&#8203;17421](https://github.com/element-hq/synapse/issues/17421))

##### Internal Changes

-   Route authenticated federation media requests to media repository workers in Complement tests. ([#&#8203;17422](https://github.com/element-hq/synapse/issues/17422))

### Synapse 1.111.0rc1 (2024-07-09)

##### Features

-   Add `rooms` data to experimental [MSC3575](https://github.com/matrix-org/matrix-spec-proposals/pull/3575) Sliding Sync `/sync` endpoint. ([#&#8203;17320](https://github.com/element-hq/synapse/issues/17320))
-   Add `room_types`/`not_room_types` filtering to experimental [MSC3575](https://github.com/matrix-org/matrix-spec-proposals/pull/3575) Sliding Sync `/sync` endpoint. ([#&#8203;17337](https://github.com/element-hq/synapse/issues/17337))
-   Return "required state" in experimental [MSC3575](https://github.com/matrix-org/matrix-spec-proposals/pull/3575) Sliding Sync `/sync` endpoint. ([#&#8203;17342](https://github.com/element-hq/synapse/issues/17342))
-   Support [MSC3916](https://github.com/matrix-org/matrix-spec-proposals/blob/main/proposals/3916-authentication-for-media.md) by adding [`_matrix/client/v1/media/download`](https://spec.matrix.org/v1.11/client-server-api/#get_matrixclientv1mediadownloadservernamemediaid) endpoint. ([#&#8203;17365](https://github.com/element-hq/synapse/issues/17365))
-   Support [MSC3916](https://github.com/matrix-org/matrix-spec-proposals/blob/rav/authentication-for-media/proposals/3916-authentication-for-media.md)
    by adding [`_matrix/client/v1/media/thumbnail`](https://spec.matrix.org/v1.11/client-server-api/#get_matrixclientv1mediathumbnailservernamemediaid), [`_matrix/federation/v1/media/thumbnail`](https://spec.matrix.org/v1.11/server-server-api/#get_matrixfederationv1mediathumbnailmediaid) endpoints and stabilizing the
    remaining [`_matrix/client/v1/media`](https://spec.matrix.org/v1.11/client-server-api/#get_matrixclientv1mediaconfig) endpoints. ([#&#8203;17388](https://github.com/element-hq/synapse/issues/17388))
-   Add `rooms.bump_stamp` for easier client-side sorting in experimental [MSC3575](https://github.com/matrix-org/matrix-spec-proposals/pull/3575) Sliding Sync `/sync` endpoint. ([#&#8203;17395](https://github.com/element-hq/synapse/issues/17395))
-   Forget all of a user's rooms upon deactivation, preventing local room purges from being blocked on deactivated users. ([#&#8203;17400](https://github.com/element-hq/synapse/issues/17400))
-   Declare support for [Matrix 1.11](https://matrix.org/blog/2024/06/20/matrix-v1.11-release/). ([#&#8203;17403](https://github.com/element-hq/synapse/issues/17403))
-   [MSC3861](https://github.com/matrix-org/matrix-spec-proposals/pull/3861): allow overriding the introspection endpoint. ([#&#8203;17406](https://github.com/element-hq/synapse/issues/17406))

##### Bugfixes

-   Fix rare race which caused no new to-device messages to be received from remote server. ([#&#8203;17362](https://github.com/element-hq/synapse/issues/17362))
-   Fix bug in experimental [MSC3575](https://github.com/matrix-org/matrix-spec-proposals/pull/3575) Sliding Sync `/sync` endpoint when using an old database. ([#&#8203;17398](https://github.com/element-hq/synapse/issues/17398))

##### Improved Documentation

-   Clarify that `url_preview_url_blacklist` is a usability feature. ([#&#8203;17356](https://github.com/element-hq/synapse/issues/17356))
-   Fix broken links in README. ([#&#8203;17379](https://github.com/element-hq/synapse/issues/17379))
-   Clarify that changelog content *and file extension* need to match in order for entries to merge. ([#&#8203;17399](https://github.com/element-hq/synapse/issues/17399))

##### Internal Changes

-   Make the release script create a release branch for Complement as well. ([#&#8203;17318](https://github.com/element-hq/synapse/issues/17318))
-   Fix uploading packages to PyPi. ([#&#8203;17363](https://github.com/element-hq/synapse/issues/17363))
-   Add CI check for the README. ([#&#8203;17367](https://github.com/element-hq/synapse/issues/17367))
-   Fix linting errors from new `ruff` version. ([#&#8203;17381](https://github.com/element-hq/synapse/issues/17381), [#&#8203;17411](https://github.com/element-hq/synapse/issues/17411))
-   Fix building debian packages on non-clean checkouts. ([#&#8203;17390](https://github.com/element-hq/synapse/issues/17390))
-   Finish up work to allow per-user feature flags. ([#&#8203;17392](https://github.com/element-hq/synapse/issues/17392), [#&#8203;17410](https://github.com/element-hq/synapse/issues/17410))
-   Allow enabling sliding sync per-user. ([#&#8203;17393](https://github.com/element-hq/synapse/issues/17393))

##### Updates to locked dependencies

-   Bump certifi from 2023.7.22 to 2024.7.4. ([#&#8203;17404](https://github.com/element-hq/synapse/issues/17404))
-   Bump cryptography from 42.0.7 to 42.0.8. ([#&#8203;17382](https://github.com/element-hq/synapse/issues/17382))
-   Bump ijson from 3.2.3 to 3.3.0. ([#&#8203;17413](https://github.com/element-hq/synapse/issues/17413))
-   Bump log from 0.4.21 to 0.4.22. ([#&#8203;17384](https://github.com/element-hq/synapse/issues/17384))
-   Bump mypy-zope from 1.0.4 to 1.0.5. ([#&#8203;17414](https://github.com/element-hq/synapse/issues/17414))
-   Bump pillow from 10.3.0 to 10.4.0. ([#&#8203;17412](https://github.com/element-hq/synapse/issues/17412))
-   Bump pydantic from 2.7.1 to 2.8.2. ([#&#8203;17415](https://github.com/element-hq/synapse/issues/17415))
-   Bump ruff from 0.3.7 to 0.5.0. ([#&#8203;17381](https://github.com/element-hq/synapse/issues/17381))
-   Bump serde from 1.0.203 to 1.0.204. ([#&#8203;17409](https://github.com/element-hq/synapse/issues/17409))
-   Bump serde_json from 1.0.117 to 1.0.120. ([#&#8203;17385](https://github.com/element-hq/synapse/issues/17385), [#&#8203;17408](https://github.com/element-hq/synapse/issues/17408))
-   Bump types-setuptools from 69.5.0.20240423 to 70.1.0.20240627. ([#&#8203;17380](https://github.com/element-hq/synapse/issues/17380))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy40MzEuNCIsInVwZGF0ZWRJblZlciI6IjM3LjQzMS40IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #55
Co-authored-by: Renovate Bot <renovate@git.csprung.de>
Co-committed-by: Renovate Bot <renovate@git.csprung.de>
2024-07-21 21:52:54 +02:00