feat(container): update image ghcr.io/element-hq/synapse ( v1.148.0 → v1.153.0 )#2881
Open
renovate[bot] wants to merge 1 commit into
Open
feat(container): update image ghcr.io/element-hq/synapse ( v1.148.0 → v1.153.0 )#2881renovate[bot] wants to merge 1 commit into
renovate[bot] wants to merge 1 commit into
Conversation
--- kubernetes/subterra/apps/matrix/synapse/app Kustomization: flux-system/cluster-apps-synapse HelmRelease: matrix/synapse
+++ kubernetes/subterra/apps/matrix/synapse/app Kustomization: flux-system/cluster-apps-synapse HelmRelease: matrix/synapse
@@ -77,13 +77,13 @@
- ::1/128
- fe80::/64
- fc00::/7
image:
pullPolicy: IfNotPresent
repository: ghcr.io/element-hq/synapse
- tag: v1.148.0
+ tag: v1.153.0
ingress:
annotations:
cert-manager.io/cluster-issuer: letsencrypt-prod
external-dns.alpha.kubernetes.io/target: ingress.ur30.ru
nginx.ingress.kubernetes.io/cors-allow-origin: '*'
nginx.ingress.kubernetes.io/enable-cors: 'true' |
--- HelmRelease: matrix/synapse Deployment: matrix/synapse-matrix-synapse
+++ HelmRelease: matrix/synapse Deployment: matrix/synapse-matrix-synapse
@@ -17,13 +17,13 @@
app.kubernetes.io/name: matrix-synapse
app.kubernetes.io/instance: synapse
app.kubernetes.io/component: synapse
template:
metadata:
annotations:
- checksum/secrets: 10c63c41ec6518f856c30a37ff4f3f7390badd03363d28bc4dd0d7a279a9dda9
+ checksum/secrets: 06d52a7fbeb3624d4f8624a5624ad7a3c803323fd3725ba87dfd50c1ead0c72a
setGateway: 'true'
labels:
app.kubernetes.io/name: matrix-synapse
app.kubernetes.io/instance: synapse
app.kubernetes.io/component: synapse
spec:
@@ -53,13 +53,13 @@
key: password
- name: REDIS_PASSWORD
valueFrom:
secretKeyRef:
name: synapse-secret
key: redis-password
- image: ghcr.io/element-hq/synapse:v1.148.0
+ image: ghcr.io/element-hq/synapse:v1.153.0
imagePullPolicy: IfNotPresent
securityContext: {}
ports:
- name: http
containerPort: 8008
protocol: TCP
--- HelmRelease: matrix/synapse Deployment: matrix/synapse-appservice
+++ HelmRelease: matrix/synapse Deployment: matrix/synapse-appservice
@@ -18,13 +18,13 @@
app.kubernetes.io/instance: synapse
app.kubernetes.io/component: appservice
template:
metadata:
annotations:
checksum/worker-config: a848cdf3febe7310880eb2671d2341b0bb05e0c9de6e3a391740e6cf3751ce3b
- checksum/secrets: e9269fcf06edccb46d5da2ddd2ddb780a54ea864ea12c34adb4056bbd40b40e1
+ checksum/secrets: 2253bb01e8fa175150cb7d6a2c9a30b18a47b35283b8b07218690907b504ad0c
labels:
app.kubernetes.io/name: matrix-synapse
app.kubernetes.io/instance: synapse
app.kubernetes.io/component: appservice
spec:
serviceAccountName: default
@@ -53,13 +53,13 @@
- name: REDIS_PASSWORD
valueFrom:
secretKeyRef:
name: synapse-secret
key: redis-password
securityContext: {}
- image: ghcr.io/element-hq/synapse:v1.148.0
+ image: ghcr.io/element-hq/synapse:v1.153.0
imagePullPolicy: IfNotPresent
ports:
- name: metrics
containerPort: 9090
protocol: TCP
livenessProbe:
--- HelmRelease: matrix/synapse Deployment: matrix/synapse-federation-reader
+++ HelmRelease: matrix/synapse Deployment: matrix/synapse-federation-reader
@@ -18,13 +18,13 @@
app.kubernetes.io/instance: synapse
app.kubernetes.io/component: federation-reader
template:
metadata:
annotations:
checksum/worker-config: a848cdf3febe7310880eb2671d2341b0bb05e0c9de6e3a391740e6cf3751ce3b
- checksum/secrets: a916d6bc8e64203d614c5247e8c52026dc15b536733bf60d7d3a9065c330d362
+ checksum/secrets: bb36b309379e95fec34a125f55fa13fb60be86f95030c599411ab2598f07262d
setGateway: 'true'
labels:
app.kubernetes.io/name: matrix-synapse
app.kubernetes.io/instance: synapse
app.kubernetes.io/component: federation-reader
spec:
@@ -54,13 +54,13 @@
- name: REDIS_PASSWORD
valueFrom:
secretKeyRef:
name: synapse-secret
key: redis-password
securityContext: {}
- image: ghcr.io/element-hq/synapse:v1.148.0
+ image: ghcr.io/element-hq/synapse:v1.153.0
imagePullPolicy: IfNotPresent
ports:
- name: metrics
containerPort: 9090
protocol: TCP
- name: listener
--- HelmRelease: matrix/synapse Deployment: matrix/synapse-federation-sender
+++ HelmRelease: matrix/synapse Deployment: matrix/synapse-federation-sender
@@ -18,13 +18,13 @@
app.kubernetes.io/instance: synapse
app.kubernetes.io/component: federation-sender
template:
metadata:
annotations:
checksum/worker-config: a848cdf3febe7310880eb2671d2341b0bb05e0c9de6e3a391740e6cf3751ce3b
- checksum/secrets: 5f264348002a8ece168631e56fd558b668c03c35283d12342790eaf1ea40b308
+ checksum/secrets: f16cafdf19d4b65c290ee64553eb3cc7496698cecfb0d819ef252f7cd9a593e1
setGateway: 'true'
labels:
app.kubernetes.io/name: matrix-synapse
app.kubernetes.io/instance: synapse
app.kubernetes.io/component: federation-sender
spec:
@@ -54,13 +54,13 @@
- name: REDIS_PASSWORD
valueFrom:
secretKeyRef:
name: synapse-secret
key: redis-password
securityContext: {}
- image: ghcr.io/element-hq/synapse:v1.148.0
+ image: ghcr.io/element-hq/synapse:v1.153.0
imagePullPolicy: IfNotPresent
ports:
- name: metrics
containerPort: 9090
protocol: TCP
livenessProbe:
--- HelmRelease: matrix/synapse Deployment: matrix/synapse-frontend-proxy
+++ HelmRelease: matrix/synapse Deployment: matrix/synapse-frontend-proxy
@@ -18,13 +18,13 @@
app.kubernetes.io/instance: synapse
app.kubernetes.io/component: frontend-proxy
template:
metadata:
annotations:
checksum/worker-config: a848cdf3febe7310880eb2671d2341b0bb05e0c9de6e3a391740e6cf3751ce3b
- checksum/secrets: a442ac6efe75d93c2c9874137f4ca17a3d06b83877b5a6a3f87663315018e04b
+ checksum/secrets: 0f7a549a73c01ab0a83fcb65c3d6d9aaaeaea0dab0136e719f4196eeabd2c62f
labels:
app.kubernetes.io/name: matrix-synapse
app.kubernetes.io/instance: synapse
app.kubernetes.io/component: frontend-proxy
spec:
serviceAccountName: default
@@ -53,13 +53,13 @@
- name: REDIS_PASSWORD
valueFrom:
secretKeyRef:
name: synapse-secret
key: redis-password
securityContext: {}
- image: ghcr.io/element-hq/synapse:v1.148.0
+ image: ghcr.io/element-hq/synapse:v1.153.0
imagePullPolicy: IfNotPresent
ports:
- name: metrics
containerPort: 9090
protocol: TCP
- name: listener
--- HelmRelease: matrix/synapse Deployment: matrix/synapse-generic-worker
+++ HelmRelease: matrix/synapse Deployment: matrix/synapse-generic-worker
@@ -18,13 +18,13 @@
app.kubernetes.io/instance: synapse
app.kubernetes.io/component: generic-worker
template:
metadata:
annotations:
checksum/worker-config: a848cdf3febe7310880eb2671d2341b0bb05e0c9de6e3a391740e6cf3751ce3b
- checksum/secrets: 7ca5a1f2a560277bcf2d965e48c6e71d2ad8b0988ee2e56e142176c20ea6f983
+ checksum/secrets: 79a20e5399c401fc7460e5a32f691e98382882e73da93df62316be292e36d82b
labels:
app.kubernetes.io/name: matrix-synapse
app.kubernetes.io/instance: synapse
app.kubernetes.io/component: generic-worker
spec:
serviceAccountName: default
@@ -53,13 +53,13 @@
- name: REDIS_PASSWORD
valueFrom:
secretKeyRef:
name: synapse-secret
key: redis-password
securityContext: {}
- image: ghcr.io/element-hq/synapse:v1.148.0
+ image: ghcr.io/element-hq/synapse:v1.153.0
imagePullPolicy: IfNotPresent
ports:
- name: metrics
containerPort: 9090
protocol: TCP
- name: listener
--- HelmRelease: matrix/synapse Deployment: matrix/synapse-messages
+++ HelmRelease: matrix/synapse Deployment: matrix/synapse-messages
@@ -18,13 +18,13 @@
app.kubernetes.io/instance: synapse
app.kubernetes.io/component: messages
template:
metadata:
annotations:
checksum/worker-config: a848cdf3febe7310880eb2671d2341b0bb05e0c9de6e3a391740e6cf3751ce3b
- checksum/secrets: 3a650969e5ef13408aeeb3544e4ed00aa16374f6b3d4780213a6f9de030caf79
+ checksum/secrets: 3ee23c85d040646fd37901bd07c757938ee43b3caec9cd986e002c5f1a69e281
labels:
app.kubernetes.io/name: matrix-synapse
app.kubernetes.io/instance: synapse
app.kubernetes.io/component: messages
spec:
serviceAccountName: default
@@ -53,13 +53,13 @@
- name: REDIS_PASSWORD
valueFrom:
secretKeyRef:
name: synapse-secret
key: redis-password
securityContext: {}
- image: ghcr.io/element-hq/synapse:v1.148.0
+ image: ghcr.io/element-hq/synapse:v1.153.0
imagePullPolicy: IfNotPresent
ports:
- name: metrics
containerPort: 9090
protocol: TCP
- name: listener
--- HelmRelease: matrix/synapse Deployment: matrix/synapse-pusher
+++ HelmRelease: matrix/synapse Deployment: matrix/synapse-pusher
@@ -18,13 +18,13 @@
app.kubernetes.io/instance: synapse
app.kubernetes.io/component: pusher
template:
metadata:
annotations:
checksum/worker-config: a848cdf3febe7310880eb2671d2341b0bb05e0c9de6e3a391740e6cf3751ce3b
- checksum/secrets: efba8c00fbb136ad151d3ee2addad8d4c262ecee1c94b508f2463c1c76b8c34c
+ checksum/secrets: 8ffd29ffc2b7da873708624baf184e452a6470eebbb114a102fabe284ffd76ab
labels:
app.kubernetes.io/name: matrix-synapse
app.kubernetes.io/instance: synapse
app.kubernetes.io/component: pusher
spec:
serviceAccountName: default
@@ -53,13 +53,13 @@
- name: REDIS_PASSWORD
valueFrom:
secretKeyRef:
name: synapse-secret
key: redis-password
securityContext: {}
- image: ghcr.io/element-hq/synapse:v1.148.0
+ image: ghcr.io/element-hq/synapse:v1.153.0
imagePullPolicy: IfNotPresent
ports:
- name: metrics
containerPort: 9090
protocol: TCP
livenessProbe:
--- HelmRelease: matrix/synapse Deployment: matrix/synapse-sso
+++ HelmRelease: matrix/synapse Deployment: matrix/synapse-sso
@@ -18,13 +18,13 @@
app.kubernetes.io/instance: synapse
app.kubernetes.io/component: sso
template:
metadata:
annotations:
checksum/worker-config: a848cdf3febe7310880eb2671d2341b0bb05e0c9de6e3a391740e6cf3751ce3b
- checksum/secrets: 78ea58381ccc3c0c39ea13ded3312d49e413cb3c2a3eb091b6e3f8706ce17699
+ checksum/secrets: 922a99582940ac5883b47e1dc09b287e2fe32a6a83713f3283ae8fa26bf94d9a
labels:
app.kubernetes.io/name: matrix-synapse
app.kubernetes.io/instance: synapse
app.kubernetes.io/component: sso
spec:
serviceAccountName: default
@@ -53,13 +53,13 @@
- name: REDIS_PASSWORD
valueFrom:
secretKeyRef:
name: synapse-secret
key: redis-password
securityContext: {}
- image: ghcr.io/element-hq/synapse:v1.148.0
+ image: ghcr.io/element-hq/synapse:v1.153.0
imagePullPolicy: IfNotPresent
ports:
- name: metrics
containerPort: 9090
protocol: TCP
- name: listener
--- HelmRelease: matrix/synapse Deployment: matrix/synapse-synchrotron
+++ HelmRelease: matrix/synapse Deployment: matrix/synapse-synchrotron
@@ -18,13 +18,13 @@
app.kubernetes.io/instance: synapse
app.kubernetes.io/component: synchrotron
template:
metadata:
annotations:
checksum/worker-config: a848cdf3febe7310880eb2671d2341b0bb05e0c9de6e3a391740e6cf3751ce3b
- checksum/secrets: 0458fb40c8a1e5ea296e9e8372b9400d04486cf164fed7f8a728a8afb174af98
+ checksum/secrets: c913c0159cf5337982a75ad527e84e59a5567fb1f50e296d147cd86787cddb39
labels:
app.kubernetes.io/name: matrix-synapse
app.kubernetes.io/instance: synapse
app.kubernetes.io/component: synchrotron
spec:
serviceAccountName: default
@@ -53,13 +53,13 @@
- name: REDIS_PASSWORD
valueFrom:
secretKeyRef:
name: synapse-secret
key: redis-password
securityContext: {}
- image: ghcr.io/element-hq/synapse:v1.148.0
+ image: ghcr.io/element-hq/synapse:v1.153.0
imagePullPolicy: IfNotPresent
ports:
- name: metrics
containerPort: 9090
protocol: TCP
- name: listener |
renovate
Bot
force-pushed
the
renovate/ghcr.io-element-hq-synapse-1.x
branch
from
9ce7954 to
dc94841
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/ghcr.io-element-hq-synapse-1.x
branch
from
dc94841 to
144298b
Compare
renovate
Bot
force-pushed
the
renovate/ghcr.io-element-hq-synapse-1.x
branch
from
144298b to
0f5ce11
Compare
renovate
Bot
changed the title
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/ghcr.io-element-hq-synapse-1.x
branch
from
0f5ce11 to
c48db27
Compare
renovate
Bot
force-pushed
the
renovate/ghcr.io-element-hq-synapse-1.x
branch
from
c48db27 to
9101dcf
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/ghcr.io-element-hq-synapse-1.x
branch
from
9101dcf to
de32542
Compare
renovate
Bot
force-pushed
the
renovate/ghcr.io-element-hq-synapse-1.x
branch
from
de32542 to
fe48510
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/ghcr.io-element-hq-synapse-1.x
branch
from
fe48510 to
f060507
Compare
… v1.153.0 ) | datasource | package | from | to | | ---------- | -------------------------- | -------- | -------- | | docker | ghcr.io/element-hq/synapse | v1.148.0 | v1.153.0 |
renovate
Bot
force-pushed
the
renovate/ghcr.io-element-hq-synapse-1.x
branch
from
f060507 to
90a5976
Compare
renovate
Bot
changed the title
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v1.148.0→v1.153.0Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
element-hq/synapse (ghcr.io/element-hq/synapse)
v1.153.0Compare Source
Synapse 1.153.0 (2026-05-19)
No significant changes since 1.153.0rc3.
Synapse 1.153.0rc3 (2026-05-15)
Bugfixes
Synapse 1.153.0rc2 (2026-05-13)
Bugfixes
unsignedfield of events. The bug was introduced in 1.153.0rc1. (#19769)Synapse 1.153.0rc1 (2026-05-08)
Features
msc3266_enabled. Contributed by @dasha-uwu. (#19720)m.room.createis now a required part of strippedinvite_state/knock_state. Contributed by @FrenchGithubUser @Famedly. (#19722)tombstonedandreplacement_roomin room details on admin API endpointGET /_synapse/admin/v1/rooms/<room_id>. Contributed by Noah Markert. (#19737)Bugfixes
authlibminimum version requirement inpyproject.tomlfile. Contributed by Oleg Girko. (#19742)Improved Documentation
use_frozen_dicts. (#19711)Internal Changes
Event.signaturesfield to Rust. (#19706)Event.unsignedfield to Rust. (#19708)WORKER_LOCK_MAX_RETRY_INTERVALto 5 seconds to reduce idle time after lock is released. (#19755)Durationso time units have to be specified. (#19756)v1.152.1Compare Source
Synapse 1.152.1 (2026-05-07)
Security Fixes
WorkerLocktime out interval to a maximum of 60 seconds. Contributed by Famedly. (#19394, ELEMENTSEC-2026-1706, GHSA-8q93-326v-3m7g, CVE-2026-45078)v1.152.0Compare Source
Synapse 1.152.0 (2026-04-28)
No significant changes since 1.152.0rc1.
Configuration changes needed for deployments using workers
For deployments using workers, please note that this version introduces a new
quarantined_media_changesstream writer, which may require configuration changes.Please see the the relevant section in the upgrade notes for details.
Without configuring this new stream writer, only the main process will be able to handle the
/media/quarantineadmin API endpoints for quarantining media.Synapse 1.152.0rc1 (2026-04-22)
Features
unstable_features. (#19642)list, fetch and delete user reports. (#19657)
device_lists_changes_in_room. (#19473, #19709)Bugfixes
device_keys: nullin the request toPOST /_matrix/client/v3/keys/upload, as per the spec. This was temporarily allowed as a workaround for misbehaving clients. (#19637)SQLITE_DBCONFIG_DEFENSIVEby default, such as macOS. (#19690)Improved Documentation
_setup_sequence(...)inportdb. (#19675)Internal Changes
limitargument in_maybe_backfill_inner(...). (#19630)spam_checker_spammyinternal event metadata. (#19453)FilteredEventclass that saves us copying events. (#19640)EventInternalMetadatato useArc<RwLock<_>>. (#19669)v1.151.0Compare Source
Synapse 1.151.0 (2026-04-07)
Bugfixes
KNOWN_ROOM_VERSIONS.__contains__raisingTypeErrorfor non-string keys, which could cause/syncto fail for rooms with aNULLroom version in the database. Bug introduced in #19589 as part of v1.151.0rc1. (#19649)Synapse 1.151.0rc1 (2026-03-31)
Features
room_versionandencryptionfields in the space/room/hierarchyAPI (part of MSC3266). (#19576)Bugfixes
org.matrix.msc4284.policyandm.room.policystate events. (#19503)Build and push complement imageCI job not havingpoetryavailable for the Complement runner script. (#19578)Deprecations and Removals
Internal Changes
demo/start.shscript. (#19538)RoomVersionattributes. (#19577)redacted_becausefrom internal unsigned. (#19581)RoomVersionto Rust. (#19589)./scripts-dev/complement.sh. (#19592)HomeserverTestCase.pump()docstring to demystify behavior (Twisted reactor/clock). (#19602)HomeserverTestCase.pump()in favor of more directHomeserverTestCase.reactor.advance(...)usage. (#19602)statement_timeoutto 10m (previously 1h). (#19604)v1.150.0Compare Source
Synapse 1.150.0 (2026-03-24)
No significant changes since 1.150.0rc1.
Upgrade notes
Please read the upgrade notes as this release includes a few changes that may affect your deployment.
Synapse 1.150.0rc1 (2026-03-17)
Features
GET /extremitiesendpoint. (#19314)delay_idin the event'sunsignedsection in/syncresponses to the event sender. (#19479)Bugfixes
Build and push complement imageCI job pointing to non-existent image. (#19523)Improved Documentation
/<param>instead of as/$param. (#19307)outbound_federation_restricted_tocan also be used with the Secure Border Gateway (SBG). (#19517)Internal Changes
devdependencies to PEP 735 dependency groups. (#19490)systemd-pythondependency and thesystemdextra on thesynapsepackage. (#19491)/versionsand/auth_metadatapublic endpoints. (#19530)Processed requestlogs. (#19548)v1.149.1Compare Source
Synapse 1.149.1 (2026-03-11)
Internal Changes
matrix-synapse-ldap3to0.4.0to supportsetuptools>=82.0.0. Fixes #19541. (#19543)v1.149.0Compare Source
Synapse 1.149.0 (2026-03-10)
No significant changes since 1.149.0rc1.
Synapse 1.149.0rc1 (2026-03-03)
Features
Bugfixes
/syncmissing membership event instate_after(experimental MSC4222 implementation) in some scenarios. (#19460)Internal Changes
JoinRoomAliasServletwith tracing. (#19461)docker system infoin CI so we have a plain record of how GitHub runners evolve over time. (#19480)test_disconnecttest helper so that pytest doesn't see it as a test. (#19486)Content-Lengthwith the Rust HTTP client. (#19498)Configuration
📅 Schedule: (in timezone Europe/Moscow)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR was generated by Mend Renovate. View the repository job log.