v1.134.0

Synapse 1.134.0 (2025-07-15)

No significant changes since 1.134.0rc1.

Synapse 1.134.0rc1 (2025-07-09)

Features

• Support for MSC4235: via query param for hierarchy endpoint. Contributed by Krishan (@kfiven). (#18070)
• Add forget_forced_upon_leave capability as per MSC4267. (#18196)
• Add federated_user_may_invite spam checker callback which receives the entire invite event. Contributed by @tulir @ Beeper. (#18241)

Bugfixes

• Fix KeyError on background updates when using split main/state databases. (#18509)
• Improve performance of device deletion by adding missing index. (#18582)
• Fix avatar_url and displayname being sent on federation profile queries when they are not set. (#18593)
• Respond with 401 & M_USER_LOCKED when a locked user calls POST /login, as per the spec. (#18594)
• Ensure policy servers are not asked to scan policy server change events, allowing rooms to disable the use of a policy server while the policy server is down. (#18605)

Improved Documentation

• Fix documentation of the Delete Room Admin API's status field. (#18519)

Deprecations and Removals

• Stop adding the "origin" field to newly-created events (PDUs). (#18418)

Internal Changes

• Replace PyICU crate with equivalent icu_segmenter Rust crate. (#18553, #18646)
• Improve docstring on simple_upsert_many. (#18573)
• Raise poetry-core version cap to 2.1.3. (#18575)
• Raise setuptools_rust version cap to 1.11.1. (#18576)
• Better handling of ratelimited requests. (#18595, #18600)
• Update to Rust 1.87.0 in CI, and bump the pinned commit of the dtolnay/rust-toolchain GitHub Action to b3b07ba8b418998c39fb20f53e8b695cdcc8de1b. (#18596)
• Speed up bulk device deletion. (#18602)
• Speed up the building of arm-based wheels in CI. (#18618)
• Speed up the building of Docker images in CI. (#18620)
• Add .zed/ directory to .gitignore. (#18623)
• Log the room ID we're purging state for. (#18625)

Updates to locked dependencies

• Bump Swatinem/rust-cache from 2.7.8 to 2.8.0. (#18612)
• Bump attrs from 24.2.0 to 25.3.0. (#18649)
• Bump authlib from 1.5.2 to 1.6.0. (#18642)
• Bump base64 from 0.21.7 to 0.22.1. (#18589)
• Bump base64 from 0.21.7 to 0.22.1. (#18629)
• Bump docker/build-push-action from 6.17.0 to 6.18.0. (#18497)
• Bump docker/setup-buildx-action from 3.10.0 to 3.11.1. (#18587)
• Bump hiredis from 3.1.0 to 3.2.1. (#18638)
• Bump ijson from 3.3.0 to 3.4.0. (#18650)
• Bump jsonschema from 4.23.0 to 4.24.0. (#18630)
• Bump msgpack from 1.1.0 to 1.1.1. (#18651)
• Bump mypy-zope from 1.0.11 to 1.0.12. (#18640)
• Bump phonenumbers from 9.0.2 to 9.0.8. (#18652)
• Bump pillow from 11.2.1 to 11.3.0. (#18624)
• Bump prometheus-client from 0.21.0 to 0.22.1. (#18609)
• Bump pyasn1-modules from 0.4.1 to 0.4.2. (#18495)
• Bump pydantic from 2.11.4 to 2.11.7. (#18639)
• Bump reqwest from 0.12.15 to 0.12.20. (#18590)
• Bump reqwest from 0.12.20 to 0.12.22. (#18627)
• Bump ruff from 0.11.11 to 0.12.1. (#18645)
• Bump ruff from 0.12.1 to 0.12.2. (#18657)
• Bump sentry-sdk from 2.22.0 to 2.32.0. (#18633)
• Bump setuptools-rust from 1.10.2 to 1.11.1. (#18655)
• Bump sigstore/cosign-installer from 3.8.2 to 3.9.0. (#18588)
• Bump sigstore/cosign-installer from 3.9.0 to 3.9.1. (#18608)
• Bump stefanzweifel/git-auto-commit-action from 5.2.0 to 6.0.1. (#18607)
• Bump tokio from 1.45.1 to 1.46.0. (#18628)
• Bump tokio from 1.46.0 to 1.46.1. (#18667)
• Bump treq from 24.9.1 to 25.5.0. (#18610)
• Bump types-bleach from 6.2.0.20241123 to 6.2.0.20250514. (#18634)
• Bump types-jsonschema from 4.23.0.20250516 to 4.24.0.20250528. (#18611)
• Bump types-opentracing from 2.4.10.6 to 2.4.10.20250622. (#18586)
• Bump types-psycopg2 from 2.9.21.20250318 to 2.9.21.20250516. (#18658)
• Bump types-pyyaml from 6.0.12.20241230 to 6.0.12.20250516. (#18643)
• Bump types-setuptools from 75.2.0.20241019 to 80.9.0.20250529. (#18644)
• Bump typing-extensions from 4.12.2 to 4.14.0. (#18654)
• Bump typing-extensions from 4.14.0 to 4.14.1. (#18668)
• Bump urllib3 from 2.2.2 to 2.5.0. (#18572)