Skip to content

build(deps): bump matrix-js-sdk from 24.1.0 to 38.3.0#609

Closed
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot-npm_and_yarn-matrix-js-sdk-38.3.0
Closed

build(deps): bump matrix-js-sdk from 24.1.0 to 38.3.0#609
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot-npm_and_yarn-matrix-js-sdk-38.3.0

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 29, 2025

Bumps matrix-js-sdk from 24.1.0 to 38.3.0.

Release notes

Sourced from matrix-js-sdk's releases.

v38.3.0

🐛 Bug Fixes

v38.3.0-rc.0

🐛 Bug Fixes

v38.2.0

Fix CVE-2025-59160 / GHSA-mp7c-m3rh-r56v

v38.1.0

✨ Features

  • Remove custom org.matrix.msc4075.rtc.notification.parent relation type (#4979). Contributed by @​toger5.
  • MatrixRTC: Add RTC decline event (#4978). Contributed by @​toger5.
  • Make a MatrixRTCSession emit once the RTCNotification is sent (#4976). Contributed by @​toger5.
  • Use hydra semantics for unknown room versions (#4957). Contributed by @​dbkr.
  • Expose the StatusChanged event through the RTCSession (#4974). Contributed by @​toger5.
  • Add probablyLeft event to the MatrixRTCSession (#4962). Contributed by @​toger5.

🐛 Bug Fixes

v38.1.0-rc.0

✨ Features

  • Remove custom org.matrix.msc4075.rtc.notification.parent relation type (#4979). Contributed by @​toger5.
  • MatrixRTC: Add RTC decline event (#4978). Contributed by @​toger5.
  • Make a MatrixRTCSession emit once the RTCNotification is sent (#4976). Contributed by @​toger5.
  • Use hydra semantics for unknown room versions (#4957). Contributed by @​dbkr.
  • Expose the StatusChanged event through the RTCSession (#4974). Contributed by @​toger5.
  • Add probablyLeft event to the MatrixRTCSession (#4962). Contributed by @​toger5.

🐛 Bug Fixes

v38.0.0

🚨 BREAKING CHANGES

  • Release tranche of breaking changes (#4975).

... (truncated)

Changelog

Sourced from matrix-js-sdk's changelog.

Changes in 38.3.0 (2025-09-23)

🐛 Bug Fixes

Changes in 38.2.0 (2025-09-16)

Fix CVE-2025-59160 / GHSA-mp7c-m3rh-r56v

Changes in 38.1.0 (2025-09-09)

✨ Features

  • Remove custom org.matrix.msc4075.rtc.notification.parent relation type (#4979). Contributed by @​toger5.
  • MatrixRTC: Add RTC decline event (#4978). Contributed by @​toger5.
  • Make a MatrixRTCSession emit once the RTCNotification is sent (#4976). Contributed by @​toger5.
  • Use hydra semantics for unknown room versions (#4957). Contributed by @​dbkr.
  • Expose the StatusChanged event through the RTCSession (#4974). Contributed by @​toger5.
  • Add probablyLeft event to the MatrixRTCSession (#4962). Contributed by @​toger5.

🐛 Bug Fixes

Changes in 38.0.0 (2025-08-27)

🚨 BREAKING CHANGES

  • Release tranche of breaking changes (#4975).
  • Remove support for FetchHttpApi onlyData = false
  • Remove deprecated IJoinRoomOpts.syncRoom
  • Remove deprecated methods which are unsupported in rust crypto
  • Remove deprecated getAuthIssuer method
  • Remove deprecated beginKeyVerification method
  • Remove deprecated isEncryptedDisabledForUnverifiedDevices getter
  • Remove deprecated UndecryptableToDeviceEvent MatrixClient emit
  • Remove deprecated defer utility method
  • Remove deprecated UIAResponse dummy type
  • Remove deprecated MatrixRTCSession MembershipConfig fields
  • Remove deprecated findVerificationRequestDMInProgress and storeSessionBackupPrivateKey methods in favour of overloads

✨ Features

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 29, 2025
@github-actions github-actions bot enabled auto-merge September 29, 2025 23:51
Bumps [matrix-js-sdk](https://github.com/matrix-org/matrix-js-sdk) from 24.1.0 to 38.3.0.
- [Release notes](https://github.com/matrix-org/matrix-js-sdk/releases)
- [Changelog](https://github.com/matrix-org/matrix-js-sdk/blob/develop/CHANGELOG.md)
- [Commits](matrix-org/matrix-js-sdk@v24.1.0...v38.3.0)

---
updated-dependencies:
- dependency-name: matrix-js-sdk
  dependency-version: 38.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot-npm_and_yarn-matrix-js-sdk-38.3.0 branch from 57264fa to 1c5bce6 Compare October 7, 2025 12:41
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 13, 2025

Superseded by #619.

@dependabot dependabot bot closed this Oct 13, 2025
auto-merge was automatically disabled October 13, 2025 23:05

Pull request was closed

@dependabot dependabot bot deleted the dependabot-npm_and_yarn-matrix-js-sdk-38.3.0 branch October 13, 2025 23:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants