chore(deps): update synapse docker tag to v1.139.2 #406

Open

barista-bot wants to merge 1 commit from renovate/synapse-1.x into main

barista-bot commented

2025-10-07 14:03:40 +02:00

Collaborator

This PR contains the following updates:

Package	Update	Change
synapse (source)	patch	`v1.139.0` -> `v1.139.2`

Release Notes

element-hq/synapse (synapse)

Synapse 1.139.2 (2025-10-07)

Bugfixes

Fix a bug introduced in 1.139.1 where a client could receive an Internal Server Error if they set device_keys: null in the request to POST /_matrix/client/v3/keys/upload. (#19023)

Synapse 1.139.1 (2025-10-07)

Security Fixes

Fix CVE-2025-61672 / GHSA-fh66-fcv5-jjfr. Lack of validation for device keys in Synapse before 1.139.1 allows an attacker registered on the victim homeserver to degrade federation functionality, unpredictably breaking outbound federation to other homeservers. (#17097)

Deprecations and Removals

Drop support for unstable field names from the long-accepted MSC2732 (Olm fallback keys) proposal. This change allows unit tests to pass following the security patch above. (#18996)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot. The local configuration can be found in the local Renovate Bot repository.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [synapse](https://matrix.org/docs/projects/server/synapse) ([source](https://github.com/element-hq/synapse)) | patch | `v1.139.0` -> `v1.139.2` | --- ### Release Notes <details> <summary>element-hq/synapse (synapse)</summary> ### [`v1.139.2`](https://github.com/element-hq/synapse/releases/tag/v1.139.2) [Compare Source](https://github.com/element-hq/synapse/compare/v1.139.1...v1.139.2) ### Synapse 1.139.2 (2025-10-07) #### Bugfixes - Fix a bug introduced in 1.139.1 where a client could receive an Internal Server Error if they set `device_keys: null` in the request to [`POST /_matrix/client/v3/keys/upload`](https://spec.matrix.org/v1.16/client-server-api/#post_matrixclientv3keysupload). ([#19023](https://github.com/element-hq/synapse/issues/19023)) ### [`v1.139.1`](https://github.com/element-hq/synapse/releases/tag/v1.139.1) [Compare Source](https://github.com/element-hq/synapse/compare/v1.139.0...v1.139.1) ### Synapse 1.139.1 (2025-10-07) #### Security Fixes - Fix [CVE-2025-61672](https://www.cve.org/CVERecord?id=CVE-2025-61672) / [GHSA-fh66-fcv5-jjfr](https://github.com/element-hq/synapse/security/advisories/GHSA-fh66-fcv5-jjfr). Lack of validation for device keys in Synapse before 1.139.1 allows an attacker registered on the victim homeserver to degrade federation functionality, unpredictably breaking outbound federation to other homeservers. ([#17097](https://github.com/element-hq/synapse/issues/17097)) #### Deprecations and Removals - Drop support for unstable field names from the long-accepted [MSC2732](https://github.com/matrix-org/matrix-spec-proposals/pull/2732) (Olm fallback keys) proposal. This change allows unit tests to pass following the security patch above. ([#18996](https://github.com/element-hq/synapse/issues/18996)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). The local configuration can be found in the [local Renovate Bot repository](https://git.sipsofcode.dev/renovate/renovate).

barista-bot added 1 commit

2025-10-07 14:03:40 +02:00