summaryrefslogtreecommitdiff
path: root/chat
AgeCommit message (Collapse)AuthorFilesLines
2022-08-11prosody: support Lua 5.4 and improve securitykhorben1-6/+6
The changes here are: * prosody can be built with Lua 5.4 (as recommended since the 0.12 series), also thanks to lua-unbound being available for Lua 5.4 * the prosody user's home directory is back to the default /nonexistent (prosody finds its own data directory nonetheless, as it is a compile-time option) * the corresponding directories created (data directory, PID directory, logging) do not seem to actually require write access (or not anymore) These last two changes together get rid of the security report "user prosody home directory is group writable" from the daily insecurity checks on NetBSD. Tested on NetBSD/amd64.
2022-08-11Bump all dependent packages of wayland (belatedly)gutteridge5-10/+10
The package changed with the addition of its libepoll-shim dependency. Otherwise, we can get: ERROR: libepoll-shim>=0.0.20210418 is not installed; can't buildlink files.
2022-08-08chat/ircd-hybrid: Update to 8.2.41fox3-7/+8
Changes since 8.2.40: -- Noteworthy changes in version 8.2.41 (2022-07-15) * Fixed issue where WHO didn't work on channel names with two or more consequent asterisk characters * IRCv3 WHOX has been implemented. See doc/who.txt for more information about the new WHO options and features. * Clients that are connected via TLS are now flagged with the letter S in the who reply
2022-07-28swirc: update to 3.3.5.fcambus2-6/+6
## [3.3.5] - 2022-07-28 ## - **Added** command `/cap` - **Added** config option `iconv_conversion` (bool) - **Added** config option `mouse_events` - **Added** new translations - **Added** usage of `noexcept` and installed a terminate handler - **Changed** the startup screen to show the current language - **Fixed** C style casts in C++ - **Fixed** SASLprep by switching to usage of `stringprep_profile()`. Prep now works on Windows too! - **Fixed** memory leaks - **Fixed** unhandled exceptions - Improved memory handling - Improved the contents of `/help` - Completed translating everything to Swedish - **Made** config option `mouse` change take affect at once - **Made** improvements to `events/cap.c` - **Made** small optimizations - **Made** the dot mo files available for read operations with `unveil()` - Updated the TODO :-)
2022-07-27prosody: update to 0.12.1khorben3-9/+8
Summary of changes in this release: Fixes and improvements * mod_http (and dependent modules): Make CORS opt-in by default (#1731) * mod_http: Reintroduce support for disabling or limiting CORS (#1730) * net.unbound: Disable use of hosts file by default (fixes #1737) * MUC: Allow kicking users with the same affiliation as the kicker (fixes #1724 and improves Jitsi Meet compatibility) * mod_tombstones: Add caching to improve performance on busy servers (fixes #1728: mod_tombstone: inefficient I/O with internal storage) Minor changes * prosodyctl check config: Report paths of loaded configuration files (#1729) * prosodyctl about: Report version of lua-readline * prosodyctl: check config: Skip bare JID components in orphan check * prosodyctl: check turn: Fail with error if our own address is supplied for the ping test * prosodyctl: check turn: warn about external port mismatches behind NAT * mod_turn_external: Update status and friendlier handling of missing secret option (#1727) * prosodyctl: Pass server when listing (outdated) plugins (fix #1738: prosodyctl list --outdated does not handle multiple versions of a module) * util.prosodyctl: check turn: ensure a result is always returned from a check (thanks eTaurus) * util.prosodyctl: check turn: Report lack of TURN services as a problem #1749 * util.random: Ensure that native random number generator works before using it, falling back to /dev/urandom (#1734) * mod_storage_xep0227: Fix mapping of nodes without explicit configuration * mod_admin_shell: Fix error in ‘module:info()’ when statistics is not enabled (#1754) * mod_admin_socket: Compat for luasocket prior to unix datagram support * mod_admin_socket: Improve error reporting when socket can’t be created (#1719) * mod_cron: Record last time a task runs to ensure correct intervals (#1751) * core.moduleapi, core.modulemanager: Fix internal flag affecting logging in in some global modules, like mod_http (#1736, #1748) * core.certmanager: Expand debug messages about cert lookups in index * configmanager: Clearer errors when providing unexpected values after VirtualHost (#1735) * mod_storage_xep0227: Support basic listing of PEP nodes in absence of pubsub#admin data * mod_storage_xep0227: Handle missing {pubsub#owner}pubsub element (fixes #1740: mod_storage_xep0227 tracebacks reading non-existent PEP store) * mod_storage_xep0227: Fix conversion of SCRAM into internal format (#1741) * mod_external_services: Move error message to correct place (fix #1725: mod_external_services: Misplaced textual error message) * mod_smacks: Fix handling of unhandled stanzas on disconnect (#1759) * mod_smacks: Fix counting of handled stanzas * mod_smacks: Fix bounce of stanzas directed to full JID on unclean disconnect * mod_pubsub: Don’t attempt to use server actor as publisher (#1723) * mod_s2s: Improve robustness of outgoing s2s certificate verification * mod_invites_adhoc: Fall back to generic allow_user_invites for role-less users * mod_invites_register: Push invitee contact entry to inviter * util.startup: Show error for unrecognized command-line arguments passed to ‘prosody’ (#1722) * util.jsonpointer: Add tests, compat improvements and minor fixes * util.jsonschema: Lua version compat improvements
2022-07-25*: remove pkg-config from tools where no buildlink3.mk file is includedwiz1-2/+1
Bulk build on NetBSD of these packages had the same result as before (build succeeds, no PLIST change).
2022-07-25chat/prosody: always create the directory for the PID filekhorben2-4/+15
The RC script for prosody now always creates the corresponding sub-directory for prosody's PID file. This is inspired by the RC script for mdnsd in NetBSD, and for dbus in pkgsrc; thanks spz@ for the suggestion! Bumps PKGREVISION. Tested on NetBSD/amd64. XXX pull-up to pkgsrc-2022Q2 (completes request 6649)
2022-07-22*: recursive bump for graphics/graphviz 5.0.0micha3-6/+6
2022-07-21chat/matrix-synapse: Update to 1.63.1gdt3-7/+12
Upstream relevant changes: Add a rate limit for local users sending invites. (#13125) Implement MSC3827: Filtering of /publicRooms by room type. (#13031) Improve validation logic in the account data REST endpoints. (#13148) Remove obsolete and for 8 years unused RoomEventsStoreTestCase. Contributed by @arkamar. (#13200)
2022-07-21chat/matrix-synapse: Update to 1.62.0gdt4-14/+22
Upstream relevant changes: Port the spam-checker API callbacks to a new, richer API. This is part of an ongoing change to let spam-checker modules inform users of the reason their event or operation is rejected. (#12857, #13047) Allow server admins to customise the response of the /.well-known/matrix/client endpoint. (#13035) Add metrics measuring the CPU and DB time spent in state resolution. (#13036) Speed up fetching of device list changes in /sync and /keys/changes. (#13045, #13098) Improve URL previews for sites which only provide Twitter Card metadata, e.g. LWN.net. (#13056) Remove the unspecced DELETE /directory/list/room/{roomId} endpoint, which hid rooms from the public room directory. Instead, PUT to the same URL with a visibility of "private". (#13123)
2022-07-21chat/py-matrix-common: Update to 1.2.1gdt2-6/+6
Upstream changes relevant for pkgsrc users, less bugfixes: Changes in 1.2.1 Use os.path.dirname like the docstring suggests by @DMRobertson in #26 Changes in 1.2.0 Move to src layout by @V02460 in #23 Optionally allow a cwd for get_distribution_version_string by @DMRobertson in #25
2022-07-20libpurple, finch, pidgin: update to 2.14.10khorben8-17/+14
This notably fixes security issues (CVE-2012-1257, CVE-2022-26491). Tested on NetBSD/amd64. XXX pull-up to the pkgsrc-2022Q2 branch The complete changelog for the new versions is reproduced here: version 2.14.10 (06/02/2022): General: * Audit and correct the COPYRIGHT file. (RR 1425) (Richard Laager) * Fix a spelling error in a debug message for proxies. (RR 1426) (Richard Laager) * Install some emojis already in the theme but not being installed. (RR 1428) (Richard Laager) * Drop the QQ smileys as we don't ship QQ anymore. (PIDGIN-14385) (RR 1429) (Richard Laager) * Modernize the desktop file. (RR 1433) (Richard Laager) * Modernize the appdata file. (RR 1431) (Richard Laager) * Make privacy settings persist. (PIDGIN-17137) (RR 1463) (Belgin Știrbu) Pidgin: * Fix a use after free that was introduced in 2.14.9. (RR 1488) (ivanhoe) IRC: * Fix a crash if the server sends a short form JOIN message. (PIDGIN-17375) (RR 1484) (Belgin Știrbu) XMPP: * Fix a regression from 2.14.9 where XMPP accounts state would get lost after failing to connect. (PIDGIN-17621) (RR 1455) (Belgin Știrbu) * Fix a crash when requesting your own info in an XMPP conference. (RR 1465) (Belgin Știrbu) * Fix hang when completing a file transfer over XMPP. (RR 1466) (Belgin Știrbu) * Fix updating custom smileys. (PIDGIN-17153) (RR 1477) (Belgin Știrbu) * Fix unblocking users. (PIDGIN-16414) (RR 1479) (Belgin Știrbu) * Fix a crash when cancelling a file transfer. (PIDGIN-17189) (RR 1485) (Belgin Știrbu) version 2.14.9 (04/28/2022): Security: * Remove _xmppconnect support. (RR 1357) (CVE-2022-26491) (Gary Kramlich) libpurple: * Fix a GLib CRITICAL message with typing time outs. (RR 1123) (Mohammed Sadiq) * Fix an issue where the unit tests for purple_str_to_time would fail. (GENTOO-819774) (RR 1238) (Gary Kramlich) Pidgin: * Fix a memory leak in pidgin_conversations_set_tab_colors. (RR 1244) (ivanhoe) * Fixed the majority of the infinite resizing issues in the input box. (PIDGIN-16753, PIDGIN-16999, PIDGIN-17287, PIDGIN-17413, PIDGIN-17430, PIDGIN-17568, PIDGIN-17602) (RR 1342) (Belgin Știrbu) * Add transient-buddy back which is used to show some context menus and other things. (PIDGIN-17523) (RR 1381) (Belgin Știrbu) Windows: * Fix the download of dictionaries in the Windows installer. (PIDGIN-14618, PIDGIN-15648, PIDGIN-15540, PIDGIN-14612, PIDGIN-14893) (RR 1303) (Gary Kramlich) Translations: * Fix a typo in the German translations. (PIDGIN-17575) (RR 1242) (ivanhoe) * Synced all of the translations with Transifex. IRC: * Fix IRC file transfers on Windows. (PIDGIN-17175) (RR 1382) (Belgin Știrbu) * Fix file transfers failing at 99% on IRC. (PIDGIN-15893) (RR 1385) (Belgin Știrbu) * Default realname and ident name in IRC to the username (nickname) of the account. (PIDGIN-17610) (RR 1386) (Belgin Știrbu) * Add an advanced account option to IRC accounts for explicitly setting the SASL login name. (PIDGIN-15451) (RR 1388) (Belgin Știrbu) * Added a rate limiter that should make it impossible to excess flood. (RR 1391) (Gary Kramlich) SIMPLE: * Fix an issue with the CSeq numbers in SIMPLE. (PIDGIN-9675) (RR 1379) (dohmniq) XMPP: * Fix XMPP attention messages being sent to incorrect JIDs. (PIDGIN-14714) (RR 1387) (itsnotabigtruck, Belgin Știrbu)
2022-07-17*: bump for gsasl shlib major bumpwiz1-2/+2
2022-07-13Revbump all Go packages after go118 updatebsiegert3-6/+6
2022-07-11ctrlproxy: Various build fixes.jperkin3-2/+24
2022-07-10srain: restrict to python 3wiz1-4/+6
2022-07-09mautrix-telegram: remove upper bound to fix pbulkwiz1-2/+2
This probably needs fixing inside its code as well.
2022-07-07*: Update my MAINTAINER email address.jperkin1-2/+2
2022-07-07prosody: make sure pidfile always matches PROSODY_RUN in the RC scriptkhorben2-3/+4
This concludes my investigation on the correct path for the PID file. No changes to the final binary if PROSODY_RUN is set to its default value. Tested on NetBSD/amd64. XXX pull-up to pkgsrc-2022Q2
2022-07-07prosody: fix the path to the PID file in the RC scriptkhorben2-5/+6
PROSODY_RUN is set to eg /var/run/prosody/prosody.pid instead of just /var/run/prosody.pid, which is a good thing (tm) since prosody's user needs the access rights to write to the corresponding directory. Unfortunately, the directory is not automatically created nor the right permissions set yet, but this is progress. While there, appease pkglint(1). Bumps PKGREVISION. Tested on NetBSD/amd64. XXX pull-up to pkgsrc-2022Q2 once the complete solution is in place
2022-07-05chat/ircd-hybrid: Updates to 8.2.40fox3-12/+13
Changes since 8.2.39: -- Noteworthy changes in version 8.2.40 (2022-07-02) * 'channel::disable_fake_channels' now also blocks strikethrough text (0x1E (30)) * 'KNOCK' can now be used on private channels. Channel mode 'K' may be used instead to control whether or not 'KNOCK' is allowed on a channel. * Support for '/dev/poll' has been dropped * 'INFO' now also reports configured values of 'channel::default_join_flood_count' and 'channel::default_join_flood_time' * The founder 'q' and admin 'a' channel prefix modes have been implemented. These are optional and can be enabled with the new 'channel::enable_owner' and 'channel::enable_admin' configuration directives. * Channel half-ops may now kick other half-ops * Extban '$K' of type acting has been implemented. This extban prevents matching users from using the 'KNOCK' command. * Server-side channel mode locking 'MLOCK' has been implemented * Fixed server name leak in 'WHOWAS' with 'serverhide::hide_services' enabled
2022-07-02*: Recursive revbump from audio/pulseaudioryoon4-8/+8
2022-07-01chat/matrix-synapse: Update to 1.60.1gdt2-7/+6
Synapse 1.61.1 (2022-06-28) =========================== This patch release fixes a security issue regarding URL previews, affecting all prior versions of Synapse. Server administrators are encouraged to update Synapse as soon as possible. We are not aware of these vulnerabilities being exploited in the wild. Server administrators who are unable to update Synapse may use the workarounds described in the linked GitHub Security Advisory below. ## Security advisory The following issue is fixed in 1.61.1. * [GHSA-22p3-qrh9-cx32](https://github.com/matrix-org/synapse/security/advisories/GHSA-22p3-qrh9-cx32) / [CVE-2022-31052](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31052) Synapse instances with the [`url_preview_enabled`](https://matrix-org.github.io/synapse/v1.61/usage/configuration/config_documentation.html#media-store) homeserver config option set to `true` are affected. URL previews of some web pages can lead to unbounded recursion, causing the request to either fail, or in some cases crash the running Synapse process. Requesting URL previews requires authentication. Nevertheless, it is possible to exploit this maliciously, either by malicious users on the homeserver, or by remote users sending URLs that a local user's client may automatically request a URL preview for. Homeservers with the `url_preview_enabled` configuration option set to `false` (the default) are unaffected. Instances with the `enable_media_repo` configuration option set to `false` are also unaffected, as this also disables URL preview functionality. Fixed by [fa1308061802ac7b7d20e954ba7372c5ac292333](https://github.com/matrix-org/synapse/commit/fa1308061802ac7b7d20e954ba7372c5ac292333).
2022-06-30*: Revbump packages that use Python at runtime without a PKGNAME prefixnia17-29/+34
2022-06-28chat/element-web: Update to 1.10.15gdt3-131/+133
Upstream NEWS, omitting bugfixes and minor improvements. * v1.10.14 ** Features Configure custom home.html via .well-known/matrix/client["io.element.embedded_pages"]["home_url"] for all your element-web/desktop users (#7790). Contributed by @johannes-krude. Live location sharing - open location in OpenStreetMap (#8695). Contributed by @kerryarchibald. Add public room directory hook (#8626). * v1.10.13 ** Features Go to space landing page when clicking on a selected space (#6442). Fixes #20296. Improve welcome screen, add opt-out analytics (#8474). Fixes #21946. Remove some labs features which don't get used or create maintenance burden: custom status, multiple integration managers, and do not disturb (#8521). Improve UI/UX in calls (#7791). Fixes #19937. Add ability to change audio and video devices during a call (#7173). Fixes #15595. * v1.10.12 ** Features Read Receipts: never show +1, if it’s just 4, show all of them (#8428). Fixes #21935. Add opt-in analytics to onboarding tasks (#8409). Fixes #21705. Allow user to control if they are signed out of all devices when changing password (#8259). Fixes #2671. Implement new Read Receipt design (#8389). Fixes #20574. Persist audio and video mute state in video rooms (#8376). Forcefully disconnect from video rooms on logout and tab close (#8375). Add local echo of connected devices in video rooms (#8368). * v1.10.11 ** Features Handle forced disconnects from Jitsi (#21697). Fixes #21517.
2022-06-28*: recursive bump for perl 5.36wiz32-62/+64
2022-06-27*: drop maintainership for packages not related to toolchains and ELF.fcambus1-2/+2
2022-06-16chat/matrix-synapse: Update to 1.61.0gdt4-38/+25
Upstream NEWS, less bugfixes and minor improvements: Synapse 1.61.0 (2022-06-14) =========================== This release removes support for the non-standard feature known both as 'groups' and as 'communities', which have been superseded by *Spaces*. Synapse 1.61.0rc1 (2022-06-07) ============================== Features -------- - Add new `media_retention` options to the homeserver config for routinely cleaning up non-recently accessed media. ([\#12732](https://github.com/matrix-org/synapse/issues/12732), [\#12972](https://github.com/matrix-org/synapse/issues/12972), [\#12977](https://github.com/matrix-org/synapse/issues/12977)) - Experimental support for [MSC3772](https://github.com/matrix-org/matrix-spec-proposals/pull/3772): Push rule for mutually related events. ([\#12740](https://github.com/matrix-org/synapse/issues/12740), [\#12859](https://github.com/matrix-org/synapse/issues/12859)) - Update to the `check_event_for_spam` module callback: Deprecate the current callback signature, replace it with a new signature that is both less ambiguous (replacing booleans with explicit allow/block) and more powerful (ability to return explicit error codes). ([\#12808](https://github.com/matrix-org/synapse/issues/12808)) - Add storage and module API methods to get monthly active users (and their corresponding appservices) within an optionally specified time range. ([\#12838](https://github.com/matrix-org/synapse/issues/12838), [\#12917](https://github.com/matrix-org/synapse/issues/12917)) - Support the new error code `ORG.MATRIX.MSC3823.USER_ACCOUNT_SUSPENDED` from [MSC3823](https://github.com/matrix-org/matrix-spec-proposals/pull/3823). ([\#12845](https://github.com/matrix-org/synapse/issues/12845), [\#12923](https://github.com/matrix-org/synapse/issues/12923)) - Add a configurable background job to delete stale devices. ([\#12855](https://github.com/matrix-org/synapse/issues/12855)) - Allow updating a user's password using the admin API without logging out their devices. Contributed by @jcgruenhage. ([\#12952](https://github.com/matrix-org/synapse/issues/12952)) Deprecations and Removals ------------------------- - Remove support for the non-standard groups/communities feature from Synapse. ([\#12553](https://github.com/matrix-org/synapse/issues/12553), [\#12558](https://github.com/matrix-org/synapse/issues/12558), [\#12563](https://github.com/matrix-org/synapse/issues/12563), [\#12895](https://github.com/matrix-org/synapse/issues/12895), [\#12897](https://github.com/matrix-org/synapse/issues/12897), [\#12899](https://github.com/matrix-org/synapse/issues/12899), [\#12900](https://github.com/matrix-org/synapse/issues/12900), [\#12936](https://github.com/matrix-org/synapse/issues/12936), [\#12966](https://github.com/matrix-org/synapse/issues/12966)) - Remove contributed `kick_users.py` script. This is broken under Python 3, and is not added to the environment when `pip install`ing Synapse. ([\#12908](https://github.com/matrix-org/synapse/issues/12908)) Synapse 1.60.0 (2022-05-31) =========================== This release of Synapse adds a unique index to the `state_group_edges` table, in order to prevent accidentally introducing duplicate information (for example, because a database backup was restored multiple times). If your Synapse database already has duplicate rows in this table, this could fail with an error and require manual remediation. Additionally, the signature of the `check_event_for_spam` module callback has changed. The previous signature has been deprecated and remains working for now. Module authors should update their modules to use the new signature where possible. Synapse 1.60.0rc2 (2022-05-27) ============================== Features -------- - Add an option allowing users to use their password to reauthenticate for privileged actions even though password login is disabled. ([\#12883](https://github.com/matrix-org/synapse/issues/12883)) Synapse 1.60.0rc1 (2022-05-24) ============================== Features -------- - Measure the time taken in spam-checking callbacks and expose those measurements as metrics. ([\#12513](https://github.com/matrix-org/synapse/issues/12513)) - Add a `default_power_level_content_override` config option to set default room power levels per room preset. ([\#12618](https://github.com/matrix-org/synapse/issues/12618)) - Add support for [MSC3787: Allowing knocks to restricted rooms](https://github.com/matrix-org/matrix-spec-proposals/pull/3787). ([\#12623](https://github.com/matrix-org/synapse/issues/12623)) - Send `USER_IP` commands on a different Redis channel, in order to reduce traffic to workers that do not process these commands. ([\#12672](https://github.com/matrix-org/synapse/issues/12672), [\#12809](https://github.com/matrix-org/synapse/issues/12809)) - Synapse will now reload [cache config](https://matrix-org.github.io/synapse/latest/usage/configuration/config_documentation.html#caching) when it receives a [SIGHUP](https://en.wikipedia.org/wiki/SIGHUP) signal. ([\#12673](https://github.com/matrix-org/synapse/issues/12673)) - Add a config options to allow for auto-tuning of caches. ([\#12701](https://github.com/matrix-org/synapse/issues/12701)) - Update [MSC2716](https://github.com/matrix-org/matrix-spec-proposals/pull/2716) implementation to process marker events from the current state to avoid markers being lost in timeline gaps for federated servers which would cause the imported history to be undiscovered. ([\#12718](https://github.com/matrix-org/synapse/issues/12718)) - Add a `drop_federated_event` callback to `SpamChecker` to disregard inbound federated events before they take up much processing power, in an emergency. ([\#12744](https://github.com/matrix-org/synapse/issues/12744)) - Implement [MSC3818: Copy room type on upgrade](https://github.com/matrix-org/matrix-spec-proposals/pull/3818). ([\#12786](https://github.com/matrix-org/synapse/issues/12786), [\#12792](https://github.com/matrix-org/synapse/issues/12792)) - Update to the `check_event_for_spam` module callback. Deprecate the current callback signature, replace it with a new signature that is both less ambiguous (replacing booleans with explicit allow/block) and more powerful (ability to return explicit error codes). ([\#12808](https://github.com/matrix-org/synapse/issues/12808)) Deprecations and Removals ------------------------- - Require a body in POST requests to `/rooms/{roomId}/receipt/{receiptType}/{eventId}`, as required by the [Matrix specification](https://spec.matrix.org/v1.2/client-server-api/#post_matrixclientv3roomsroomidreceiptreceipttypeeventid). This breaks compatibility with Element Android 1.2.0 and earlier: users of those clients will be unable to send read receipts. ([\#12709](https://github.com/matrix-org/synapse/issues/12709)) Synapse 1.59.1 (2022-05-18) =========================== This release fixes a long-standing issue which could prevent Synapse's user directory for updating properly. Synapse 1.59.0 (2022-05-17) =========================== Synapse 1.59 makes several changes that server administrators should be aware of: - Device name lookup over federation is now disabled by default. ([\#12616](https://github.com/matrix-org/synapse/issues/12616)) - The `synapse.app.appservice` and `synapse.app.user_dir` worker application types are now deprecated. ([\#12452](https://github.com/matrix-org/synapse/issues/12452), [\#12654](https://github.com/matrix-org/synapse/issues/12654)) Additionally, this release removes the non-standard `m.login.jwt` login type from Synapse. It can be replaced with `org.matrix.login.jwt` for identical behaviour. This is only used if `jwt_config.enabled` is set to `true` in the configuration. ([\#12597](https://github.com/matrix-org/synapse/issues/12597)) Synapse 1.59.0rc2 (2022-05-16) ============================== Synapse 1.59.0rc1 (2022-05-10) ============================== Features -------- - Support [MSC3266](https://github.com/matrix-org/matrix-doc/pull/3266) room summaries over federation. ([\#11507](https://github.com/matrix-org/synapse/issues/11507)) - Implement [changes](https://github.com/matrix-org/matrix-spec-proposals/pull/2285/commits/4a77139249c2e830aec3c7d6bd5501a514d1cc27) to [MSC2285 (hidden read receipts)](https://github.com/matrix-org/matrix-spec-proposals/pull/2285). Contributed by @SimonBrandner. ([\#12168](https://github.com/matrix-org/synapse/issues/12168), [\#12635](https://github.com/matrix-org/synapse/issues/12635), [\#12636](https://github.com/matrix-org/synapse/issues/12636), [\#12670](https://github.com/matrix-org/synapse/issues/12670)) - Extend the [module API](https://github.com/matrix-org/synapse/blob/release-v1.59/synapse/module_api/__init__.py) to allow modules to change actions for existing push rules of local users. ([\#12406](https://github.com/matrix-org/synapse/issues/12406)) - Add the `notify_appservices_from_worker` configuration option (superseding `notify_appservices`) to allow a generic worker to be designated as the worker to send traffic to Application Services. ([\#12452](https://github.com/matrix-org/synapse/issues/12452)) - Add the `update_user_directory_from_worker` configuration option (superseding `update_user_directory`) to allow a generic worker to be designated as the worker to update the user directory. ([\#12654](https://github.com/matrix-org/synapse/issues/12654)) - Add new `enable_registration_token_3pid_bypass` configuration option to allow registrations via token as an alternative to verifying a 3pid. ([\#12526](https://github.com/matrix-org/synapse/issues/12526)) - Implement [MSC3786](https://github.com/matrix-org/matrix-spec-proposals/pull/3786): Add a default push rule to ignore `m.room.server_acl` events. ([\#12601](https://github.com/matrix-org/synapse/issues/12601)) - Add new `mau_appservice_trial_days` configuration option to specify a different trial period for users registered via an appservice. ([\#12619](https://github.com/matrix-org/synapse/issues/12619)) Deprecations and Removals ------------------------- - Remove unstable identifiers from [MSC3069](https://github.com/matrix-org/matrix-doc/pull/3069). ([\#12596](https://github.com/matrix-org/synapse/issues/12596)) - Remove the unspecified `m.login.jwt` login type and the unstable `uk.half-shot.msc2778.login.application_service` from [MSC2778](https://github.com/matrix-org/matrix-doc/pull/2778). ([\#12597](https://github.com/matrix-org/synapse/issues/12597)) - Synapse now requires at least Python 3.7.1 (up from 3.7.0), for compatibility with the latest Twisted trunk. ([\#12613](https://github.com/matrix-org/synapse/issues/12613))
2022-06-16chat/matrix-synapse: Update to 1.58.1gdt5-563/+49
Change to wheel/poetry from egg. Port remediation of upstream's cryptography version demands to new build system. Upstream no longer installs synmark. Upstream NEWS, less bugfixes and minor updates: Synapse 1.58.1 (2022-05-05) =========================== [Debian packaging bugfix] Synapse 1.58.0 (2022-05-03) =========================== As of this release, the groups/communities feature in Synapse is now disabled by default. See [\#11584](https://github.com/matrix-org/synapse/issues/11584) for details. As mentioned in [the upgrade notes](https://github.com/matrix-org/synapse/blob/develop/docs/upgrade.md#upgrading-to-v1580), this feature will be removed in Synapse 1.61. Synapse 1.58.0rc1 (2022-04-26) ============================== Features -------- - Implement [MSC3383](https://github.com/matrix-org/matrix-spec-proposals/pull/3383) for including the destination in server-to-server authentication headers. Contributed by @Bubu and @jcgruenhage for Famedly. ([\#11398](https://github.com/matrix-org/synapse/issues/11398)) - Docker images and Debian packages from matrix.org now contain a locked set of Python dependencies, greatly improving build reproducibility. ([Board](https://github.com/orgs/matrix-org/projects/54), [\#11537](https://github.com/matrix-org/synapse/issues/11537)) - Enable processing of device list updates asynchronously. ([\#12365](https://github.com/matrix-org/synapse/issues/12365), [\#12465](https://github.com/matrix-org/synapse/issues/12465)) - Implement [MSC2815](https://github.com/matrix-org/matrix-spec-proposals/pull/2815) to allow room moderators to view redacted event content. Contributed by @tulir @ Beeper. ([\#12427](https://github.com/matrix-org/synapse/issues/12427)) - Build Debian packages for Ubuntu 22.04 "Jammy Jellyfish". ([\#12543](https://github.com/matrix-org/synapse/issues/12543)) Improved Documentation ---------------------- - Strongly recommend [Poetry](https://python-poetry.org/) for development. ([\#12475](https://github.com/matrix-org/synapse/issues/12475)) Deprecations and Removals ------------------------- - The groups/communities feature in Synapse is now disabled by default. ([\#12344](https://github.com/matrix-org/synapse/issues/12344)) - Remove unstable identifiers from [MSC3440](https://github.com/matrix-org/matrix-doc/pull/3440). ([\#12382](https://github.com/matrix-org/synapse/issues/12382))
2022-06-16chat/matrix-synapse: Update to 1.57.0gdt4-29/+22
Upstream NEWS, less bugfixes and minor improvements: * Synapse 1.57.0 (2022-04-19) This version includes a change to the way transaction IDs are managed for application services. If your deployment uses a dedicated worker for application service traffic, it must be stopped when the database is upgraded (which normally happens when the main process is upgraded), to ensure the change is made safely without any risk of reusing transaction IDs. * Synapse 1.57.0rc1 (2022-04-12) ** Features Add a module callback to react to new 3PID (email address, phone number) associations. (#12302) Add a configuration option to remove a specific set of rooms from sync responses. (#12310) Add a module callback to react to account data changes. (#12327) Allow setting user admin status using the module API. Contributed by Famedly. (#12341) Update /messages to use historic pagination tokens if no from query parameter is given. (#12370) Add a module API for reading and writing global account data. (#12391) Support the stable v1 endpoint for /relations, per MSC2675. (#12403) Include bundled aggregations in search results. (MSC3666). (#12436) ** Deprecations and Removals Remove the unused and unstable /aggregations endpoint which was removed from MSC2675. (#12293)
2022-06-02Revbump all Go packages after go118 updatebsiegert3-6/+6
2022-05-22libstrophe: add PLIST (fix build)gutteridge1-0/+4
Issue reported by @Jajauma on GitHub.
2022-05-15profanity: update to 0.11.1nia3-21/+18
Changes: Fix resetting colors when loading invalid theme Use correct color for nick of others in history Fix a segfault when uploading or downloading files Fix logging of text chatlogs Simplification of tab completion code Add Alt/Ctrl-arrows combinations for GNU Screen Make all existing input functions bindable from config Cleanup Improve man pages Fix race condition on resize
2022-05-15chat: add libstrophenia6-1/+63
libstrophe is a minimal XMPP library written in C. It has almost no external dependencies, only an XML parsing library (expat or libxml are both supported). It is designed for both POSIX and Windows systems.
2022-05-14Bump all elisp packages for the CONFLICTS change.dholland5-10/+10
2022-05-13hexchat: adapt libpci option for pciutils 3.8.0wiz5-50/+3
default-off, so no PKGREVISION bump
2022-05-11Revbump all Go packages after go118 updatebsiegert3-6/+6
2022-05-08prosody: update to 0.12.0khorben10-204/+105
New in this release: Modules * mod_mimicking: Prevent address spoofing * mod_s2s_bidi: Bi-directional server-to-server connections (XEP-0288) * mod_external_services: Generic XEP-0215 support * mod_turn_external: Easy setup of XEP-0215 for STUN/TURN for audio/video calls * mod_http_file_share: File sharing via HTTP (XEP-0363) * mod_http_openmetrics: Expose metrics to Prometheus and compatible monitoring systems * mod_smacks: Stream management and resumption (XEP-0198) * mod_auth_ldap: LDAP authentication * mod_cron: One module to rule all the periodic tasks * mod_admin_shell: New home of the Console admin interface * mod_admin_socket: Enable secure connections to the Console * mod_tombstones: Prevent re-registration of deleted accounts * mod_invites: Create and manage invites * mod_invites_register: Allow registering accounts using invites * mod_invites_adhoc: Create invites via ad-hoc command * mod_bookmarks: Synchronise open rooms between clients Security and authentication * Unencrypted HTTP port (5280) restricted to loopback by default * require_encryption options default to true if unspecified * Authentication module defaults to internal_hashed if unspecified * SNI support (including automatic certificate selection) * ALPN support in mod_net_multiplex * DANE support in low-level network layer * Direct TLS support (c2s and s2s) * SCRAM-SHA-256 * Direct TLS (including https) certificates are now updated on reload * Pluggable authorization providers (mod_authz_*) * Easy use of Mozilla TLS recommendations presets HTTP * CORS handling now provided by mod_http * Built-in HTTP server now handles HEAD requests * Uploads can be handled incrementally API * Module statuses (API change) * util.error for encapsulating errors * Promise based API for sending queries * API for adding periodic tasks * More APIs supporting ES6 Promises * Async can be used during shutdown Other * Plugin installer * MUC presence broadcast controls * MUC: support for XEP-0421 occupant identifiers * prosodyctl check connectivity via observe.jabber.network * STUN/TURN server tests in prosodyctl check * libunbound for DNS queries * The POSIX poll() API used by server_epoll on *nix other than Linux Changed in this release * Improved rules for mobile optimizations in mod_csi_simple * Improved rules for what messages should be archived in mod_mam * mod_limits: Support for exempt JIDs * mod_server_contact_info now loaded on components if enabled * Statistics now based on OpenMetrics * Statistics scheduling can be done by plugin * Offline messages aren't sent to MAM clients * Archive quotas (maximum limit on items in an archive store) * Rewritten migrator with archive support * Improved automatic certificate locating and selecting * Logging to syslog no longer missing startup messages * Graceful shutdown sequence that closes ports first and waits for connections to close Removed in this release * daemonize option deprecated * SASL DIGEST-MD5 removed * mod_auth_cyrus (older LDAP support) * Network backend server_select deprecated (not actually removed yet)
2022-05-06prosody: update to 0.11.13khorben2-6/+6
From the release notes: This is a(nother!) release for our stable branch to fix a memory leak caused by the security fix. Deployments using websockets, SQL storage and possibly other configurations may have noticed increasing memory usage after upgrading to 0.11.12. This is resolved by this new release. Minor changes: * util.xml: Break reference to help the GC (fixes #1711) * util.xml: Deduplicate handlers for restricted XML
2022-05-05swirc: update to 3.3.4.fcambus2-6/+6
## [3.3.4] - 2022-05-04 ## - **Added** a TLS server (to be used in a future version) - **Added** config option `mouse` (defaults to **no**) - **Added** config option `server_cipher_suite` - **Added** creation of OpenSSL scripts - **Added** event 335 (`RPL_WHOISBOT`) - **Added** global hashfunctions - **Added** preprogrammed IRC network [AlphaChat](https://www.alphachat.net/) - **Added** scrolling using the mouse - **Added** theme item: - `nicklist_my_nick_color` - `whois_bot` - **Added** translations - **Changed** the statusbar to display readline stats - **Converted** - `commands/services.c` -> `commands/services.cpp` - `config.c` -> `config.cpp` - **Defined** `SLASH` once - **Defined** and made use of: - `UNUSED_PARAM()` - `UNUSED_VAR()` - `colorarray_t` - `g_beginthread_failed` - `g_received_welcome` - `usage_t` - **Fixed** bugs discovered with protocol fuzzing - Handle PRIVMSGs from "my" server - Handle truncation of ICB messages, i.e. allow longer messages than `ICB_MESSAGE_MAX`. - Improved scrolling - Made refactoring to multiple files - Moved the names hash table modify API - Print PRIVMSGs to irc channels from users that aren't in them. (No lookup error.) - Reduced code duplication - Reformatted and reindented files
2022-05-03swift: use COMPILER_RPATH_FLAGnia1-2/+2
2022-05-03swift: Update to 4.0.2. Fixes build with latest version of Qt/Boost.nia11-37/+189
2022-04-24swift: add CHECK_PORTABILITY_SKIPtnn1-1/+3
2022-04-24unrealircd6: update to 6.0.3nia2-6/+6
UnrealIRCd 6.0.3 ================= A number of serious issues were discovered in UnrealIRCd 6. Among these is an issue which will likely crash the IRCd sooner or later if you /REHASH with any active clients connected. We suggest everyone who is running UnrealIRCd 6 to upgrade to 6.0.3. If you are already running UnrealIRCd 6 then read below. Otherwise, jump straight to the [summary about UnrealIRCd 6](#Summary) to learn more about UnrealIRCd 6. Fixes: * Crash in `WATCH` if the IRCd has been rehashed at least once. After doing a `REHASH` with active clients it will likely corrupt memory. It may take several days until after the rehash for the crash to occur, or even weeks/months on smaller networks (accidental triggering, that is). * A `REHASH` with certain remote includes setups could cause a crash or other weird and confusing problems such as complaining about unable to open an ipv6-database or missing snomask configuration. This only affected some people with remote includes, not all. * Potential out-of-bounds write in sending code. In practice it seems harmless on most servers but this cannot be 100% guaranteed. * Unlikely triggered log message would log uninitialized stack data to the log file or send it to ircops. * Channel ops could not remove halfops from a user (`-h`). * After using the `RESTART` command (not recommended) the new IRCd was often no longer writing to log files. * Fix compile problem if you choose to use cURL remote includes but don't have cURL on the system and ask UnrealIRCd to compile cURL. Enhancements: * The default text log format on disk changed. It now includes the server name where the event was generated. Without this, it was sometimes difficult to trace problems, since previously it sometimes looked like there was a problem on your server when it was actually another server on the network. * Old log format: `[DATE TIME] subsystem.EVENT_ID loglevel: ........` * New log format: `[DATE TIME] servername subsystem.EVENT_ID loglevel: ........` Changes: * Any MOTD lines added by services via [`SVSMOTD`](https://www.unrealircd.org/docs/MOTD_and_Rules#SVSMOTD) are now shown at the end of the MOTD-on-connect (unless using a shortmotd). Previously the lines were only shown if you manually ran the `MOTD` command. Developers and protocol: * `LIST C<xx` now means: filter on channels that are created less than `xx` minutes ago. This is the opposite of what we had earlier. `LIST T<xx` is now supported as well (topic changed in last xx minutes), it was already advertised in ELIST but support was not enabled previously.
2022-04-23Update chat/mautrix-telegram to 0.11.3js3-15/+33
# v0.11.3 (2022-04-17) **N.B.** This release drops support for old homeservers which don't support the new `/v3` API endpoints. Synapse 1.48+, Dendrite 0.6.5+ and Conduit 0.4.0+ are supported. Legacy `r0` API support can be temporarily re-enabled with `pip install mautrix==0.16.0`. However, this option will not be available in future releases. ### Added * Added `list-invite-links` command to list invite links in a chat. * Added option to use [MSC2246] async media uploads. * Provisioning API for listing contacts and starting private chats. ### Improved * Dropped Python 3.7 support. * Telegram->Matrix message formatter will now replace `t.me/c/chatid/messageid` style links with a link to the bridged Matrix event (in addition to the previously supported `t.me/username/messageid` links). * Updated formatting converter to keep newlines in code blocks as `\n` instead of converting them to `<br/>`. * Removed `max_document_size` option. The bridge will now fetch the max size automatically using the media repo config endpoint. * Removed redundant `msgtype` field in sticker events sent to Matrix. * Disabled file logging in Docker image by default. * If you want to enable it, set the `filename` in the file log handler to a path that is writable, then add `"file"` back to `logging.root.handlers`. * Reactions are now marked as read when bridging read receipts from Matrix. ### Fixed * Fixed `!tg bridge` throwing error if the parameter is not an integer * Fixed `!tg bridge` failing if the command had been previously run with an incorrectly prefixed chat ID (e.g. `!tg bridge -1234567` followed by `!tg bridge -1001234567`). * Fixed `bridge_matrix_leave` config option not actually being used correctly. * Fixed public channel mentions always bridging into a user mention on Matrix rather than a room mention. * The bridge will now make room mentions if the portal exists and fall back to user mentions otherwise. * Fixed newlines being lost in unformatted forwarded messages. [MSC2246]: https://github.com/matrix-org/matrix-spec-proposals/pull/2246 # v0.11.2 (2022-02-14) **N.B.** This will be the last release to support Python 3.7. Future versions will require Python 3.8 or higher. In general, the mautrix bridges will only support the lowest Python version in the latest Debian or Ubuntu LTS. ### Added * Added simple fallback message for live location and venue messages from Telegram. * Added support for `t.me/+code` style invite links in `!tg join`. * Added support for showing channel profile when users send messages as a channel. * Added "user joined Telegram" message when Telegram auto-creates a DM chat for a new user. ### Improved * Added option for adding a random prefix to relayed user displaynames to help distinguish them on the Telegram side. * Improved syncing profile info to room info when using encryption and/or the `private_chat_profile_meta` config option. * Removed legacy `community_id` config option. ### Fixed * Fixed newlines disappearing when bridging channel messages with signatures. * Fixed login throwing an error if a previous login code expired. * Fixed bug in v0.11.0 that broke `!tg create`.
2022-04-23chat/py-mautrix: Fix PKGNAMEjs1-2/+2
2022-04-23Update chat/py-tulir-telethon to 1.25.0a7js2-6/+6
Upstream provides no change log.
2022-04-23chat/py-mautrix: Mark Python 3.7 as incompatiblejs1-2/+2
2022-04-23Update chat/py-mautrix to 0.16.3js3-26/+31
## v0.16.3 (2022-04-21) * Changed `set_thread_parent` to have an explicit option for disabling the thread-as-reply fallback. ## v0.16.2 (2022-04-21) * Added `get_thread_parent` and `set_thread_parent` helper methods for `MessageEventContent`. * Increased timeout for `MessageSendCheckpoint.send`. ## v0.16.1 (2022-04-17) * **Breaking change** Removed `r0` path support. * The new `v3` paths are implemented since Synapse 1.48, Dendrite 0.6.5, and Conduit 0.4.0. Servers older than these are no longer supported. ## v0.16.0 (2022-04-11) * **Breaking change *(types)*** Removed custom `REPLY` relation type and changed `RelatesTo` structure to match the actual event content. * Applications using `content.get_reply_to()` and `content.set_reply()` will keep working with no changes. * *(types)* Added `THREAD` relation type and `is_falling_back` field to `RelatesTo`. ## v0.15.8 (2022-04-08) * *(client.api)* Added experimental prometheus metric for file upload speed. * *(util.async_db)* Improved type hints for `UpgradeTable.register` * *(util.async_db)* Changed connection string log to redact database password. ## v0.15.7 (2022-04-05) * *(api)* Added `file_name` parameter to `HTTPAPI.get_download_url`. ## v0.15.6 (2022-03-30) * *(types)* Fixed removing nested (i.e. malformed) reply fallbacks generated by some clients. * *(types)* Added automatic reply fallback trimming to `set_reply()` to prevent accidentally creating nested reply fallbacks. ## v0.15.5 (2022-03-28) * *(crypto)* Changed default behavior of OlmMachine to ignore instead of reject key requests from other users. * Fixed some type hints ## v0.15.3 & v0.15.4 (2022-03-25) * *(client.api)* Fixed incorrect HTTP methods in async media uploads. ## v0.15.2 (2022-03-25) * *(client.api)* Added support for async media uploads ([MSC2246]). * Moved `async_getter_lock` decorator to `mautrix.util` (from `mautrix.bridge`). * The old import path will keep working. [MSC2246]: https://github.com/matrix-org/matrix-spec-proposals/pull/2246 ## v0.15.1 (2022-03-23) * *(types)* Added `ensure_has_html` method for `TextMessageEventContent` to generate a HTML `formatted_body` from the plaintext `body` correctly (i.e. escaping HTML and replacing newlines). ## v0.15.0 (2022-03-16) * **Breaking change** Removed Python 3.7 support. * **Breaking change *(api)*** Removed `r0` from default path builders in order to update to `v3` and per-endpoint versioning. * The client API modules have been updated to specify v3 in the paths, other direct usage of `Path`, `ClientPath` and `MediaPath` will have to be updated manually. `UnstableClientPath` no longer exists and should be replaced with `Path.unstable`. * There's a temporary hacky backwards-compatibility layer which replaces /v3 with /r0 if the server doesn't advertise support for Matrix v1.1 or higher. It can be activated by calling the `.versions()` method in `ClientAPI`. The bridge module calls that method automatically. * **Breaking change *(util.formatter)*** Removed lxml-based HTML parser. * The parsed data format is still compatible with lxml, so it is possible to use lxml with `MatrixParser` by setting `lxml.html.fromstring` as the `read_html` method. * **Breaking change *(crypto)*** Moved `TrustState`, `DeviceIdentity`, `OlmEventKeys` and `DecryptedOlmEvent` dataclasses from `crypto.types` into `types.crypto`. * **Breaking change *(bridge)*** Made `User.get_puppet` abstract and added new abstract `User.get_portal_with` and `Portal.get_dm_puppet` methods. * Added a redundant `__all__` to various `__init__.py` files to appease pyright. * *(api)* Reduced aiohttp memory usage when uploading large files by making an in-memory async iterable instead of passing the bytes directly. * *(bridge)* Removed legacy community utilities. * *(bridge)* Added support for creating DM portals with minimal bridge-specific code. * *(util.async_db)* Fixed counting number of db upgrades. * *(util.async_db)* Added support for schema migrations that jump versions. * *(util.async_db)* Added system for preventing using the same database for multiple programs. * To enable it, provide an unique program name as the `owner_name` parameter in `Database.create`. * Additionally, if `ignore_foreign_tables` is set to `True`, it will check for tables of some known software like Synapse and Dendrite. * The `bridge` module enables both options by default. * *(util.db)* Module deprecated. The async_db module is recommended. However, the SQLAlchemy helpers will remain until maubot has switched to asyncpg. * *(util.magic)* Allowed `bytearray` as an input type for the `mimetype` method. * *(crypto.attachments)* Added method to encrypt a `bytearray` in-place to avoid unnecessarily duplicating data in memory. ## v0.14.10 (2022-02-01) * *(bridge)* Fixed accidentally broken Python 3.7 compatibility. ## v0.14.9 (2022-02-01) * *(client.api)* Added `reason` field to `leave_room` and `invite_user` methods. ## v0.14.8 (2022-01-31) * *(util.formatter)* Deprecated the lxml-based HTML parser and made the htmlparser-based parser the default. The lxml-based parser will be removed in v0.15. * *(client.api)* Fixed `filter_json` parameter in `get_messages` not being sent to the server correctly. * *(bridge)* Added utilities for implementing disappearing messages. ## v0.14.7 (2022-01-29) * *(client)* Fixed error inviting users with custom member event content if the server had disabled fetching profiles. * *(util.utf16_surrogate)* Added utilities for adding/removing unicode surrogate pairs in strings. * *(util.magic)* Added check to make sure the parameter to `mimetype()` is either `bytes` or `str`. ## v0.14.6 (2022-01-26) * **Breaking change *(util.message_send_checkpoint)*** Changed order of `send` parameters to match `BridgeState.send` (this is not used by most software, which is why the breaking change is in a patch release). * *(util.async_db)* Changed the default size of the aiosqlite thread pool to 1, as it doesn't reliably work with higher values. * *(util.async_db)* Added logging for database queries that take a long time (>1 second). * *(client)* Added logging for sync requests that take a long time (>40 seconds, with the timeout being 30 seconds). * *(util.variation_selector)* Fixed variation selectors being incorrectly added even if the emoji had a skin tone selector. * *(bridge)* Fixed the process getting stuck if a config error caused the bridge to stop itself without stopping the SQLite thread. * Added pre-commit hooks to run black, isort and some other checks.
2022-04-20Remove chat/maubotjs5-253/+1
This is quite outdated and no plugins have ever been packaged, meaning it was never useful.
generated by cgit v1.2.3 (git 2.39.1) at 2025-04-06 23:12:04 +0000