Bump matrix-synapse from 1.10.1 to 1.30.1 in /requirements

[dependabot]

Bumps matrix-synapse from 1.10.1 to 1.30.1.

Release notes

Sourced from matrix-synapse's releases.

v1.30.1

Synapse 1.30.1 (2021-03-26)

This release is identical to Synapse 1.30.0, with the exception of explicitly setting a minimum version of Python's Cryptography library to ensure that users of Synapse are protected from the recent OpenSSL security advisories, especially CVE-2021-3449.

Note that Cryptography defaults to bundling its own statically linked copy of OpenSSL, which means that you may not be protected by your operating system's security updates.

It's also worth noting that Cryptography no longer supports Python 3.5, so admins deploying to older environments may not be protected against this or future vulnerabilities. Synapse will be dropping support for Python 3.5 at the end of March.

Updates to the Docker image

• Ensure that the docker container has up to date versions of openssl. (#9697)

Internal Changes

• Enforce that cryptography dependency is up to date to ensure it has the most recent openssl patches. (#9697)

v1.30.0

Synapse 1.30.0 (2021-03-22)

Note that this release deprecates the ability for appservices to call POST /_matrix/client/r0/register without the body parameter type. Appservice developers should use a type value of m.login.application_service as per the spec. In future releases, calling this endpoint with an access token - but without a m.login.application_service type - will fail.

No significant changes.

Synapse 1.30.0rc1 (2021-03-16)

Features

• Add prometheus metrics for number of users successfully registering and logging in. (#9510, #9511, #9573)
• Add synapse_federation_last_sent_pdu_time and synapse_federation_last_received_pdu_time prometheus metrics, which monitor federation delays by reporting the timestamps of messages sent and received to a set of remote servers. (#9540)
• Add support for generating JSON Web Tokens dynamically for use as OIDC client secrets. (#9549)
• Optimise handling of incomplete room history for incoming federation. (#9601)
• Finalise support for allowing clients to pick an SSO Identity Provider (MSC2858). (#9617)
• Tell spam checker modules about the SSO IdP a user registered through if one was used. (#9626)

Bugfixes

• Fix long-standing bug when generating thumbnails for some images with transparency: TypeError: cannot unpack non-iterable int object. (#9473)
• Purge chain cover indexes for events that were purged prior to Synapse v1.29.0. (#9542, #9583)
• Fix bug where federation requests were not correctly retried on 5xx responses. (#9567)
• Fix re-activating an account via the admin API when local passwords are disabled. (#9587)

... (truncated)

Changelog

Sourced from matrix-synapse's changelog.

Synapse 1.30.1 (2021-03-26)

This release is identical to Synapse 1.30.0, with the exception of explicitly setting a minimum version of Python's Cryptography library to ensure that users of Synapse are protected from the recent OpenSSL security advisories, especially CVE-2021-3449.

Note that Cryptography defaults to bundling its own statically linked copy of OpenSSL, which means that you may not be protected by your operating system's security updates.

It's also worth noting that Cryptography no longer supports Python 3.5, so admins deploying to older environments may not be protected against this or future vulnerabilities. Synapse will be dropping support for Python 3.5 at the end of March.

Updates to the Docker image

• Ensure that the docker container has up to date versions of openssl. (#9697)

Internal Changes

• Enforce that cryptography dependency is up to date to ensure it has the most recent openssl patches. (#9697)

Synapse 1.30.0 (2021-03-22)

Note that this release deprecates the ability for appservices to call POST /_matrix/client/r0/register without the body parameter type. Appservice developers should use a type value of m.login.application_service as per the spec. In future releases, calling this endpoint with an access token - but without a m.login.application_service type - will fail.

No significant changes.

Synapse 1.30.0rc1 (2021-03-16)

Features

... (truncated)

Commits

• 262ed05 Update cahngelog
• 548c4a6 Update cahngelog
• c6f8e80 1.30.1
• 12d6184 Explicitly upgrade openssl in docker file and enforce new version of cryptogr...
• e2904f7 1.30.0
• 45ef73f Fix jemalloc changelog entry wording
• e3bc0e6 Changelog typo
• ad5d2e7 Pull up appservice login deprecation notice
• d315e96 1.30.0rc1
• 847ecdd Pass SSO IdP information to spam checker's registration function (#9626)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #30.