Accepting request 854249 from home:darix:apps

- Update to 1.24.0

OBS-URL: https://build.opensuse.org/request/show/854249
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=154

_service

@@ -4,7 +4,7 @@
     <param name="versionformat">@PARENT_TAG@</param>
     <param name="url">https://github.com/matrix-org/synapse.git</param>
     <param name="scm">git</param>
-    <param name="revision">v1.23.0</param>
+    <param name="revision">v1.24.0</param>
     <param name="versionrewrite-pattern">v(.*)</param>
     <param name="versionrewrite-replacement">\1</param>
     <!--

matrix-synapse-1.23.0.obscpio

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:ddc0f58dcd1daa5a2075781d84ac3c5d364f7415ce135b781ddbac721f14b0ba
-size 28859917

matrix-synapse-1.24.0.obscpio

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:2b762205ddb67cb50a76f0579a7247b98682d2a81953979fb7b075e30167f93d
+size 28951565

matrix-synapse-test.spec

@@ -32,7 +32,7 @@
 
 %define         pkgname matrix-synapse
 Name:           %{pkgname}-test
-Version:        1.23.0
+Version:        1.24.0
 Release:        0
 Summary:        Test package for %{pkgname}
 License:        Apache-2.0

matrix-synapse.changes

@@ -1,3 +1,122 @@
+-------------------------------------------------------------------
+Wed Dec  9 11:34:37 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
+
+- Update to 1.24.0
+
+  Due to the two security issues highlighted below, server
+  administrators are encouraged to update Synapse. We are not aware
+  of these vulnerabilities being exploited in the wild.
+
+  - Security
+    - There is a denial of service attack (CVE-2020-26257) against
+      the federation APIs in which future events will not be
+      correctly sent to other servers over federation. This affects
+      all servers that participate in open federation. (Fixed in
+      #8776).
+    - Synapse may be affected by OpenSSL CVE-2020-1971.
+      Synapse administrators should ensure that they have the
+      latest versions of the cryptography Python package installed.
+  - Features
+    - Add admin API for logging in as a user. (#8617)
+    - Allow specification of the SAML IdP if the metadata returns
+      multiple IdPs. (#8630)
+    - Add support for re-trying generation of a localpart for
+      OpenID Connect mapping providers. (#8801, #8855)
+    - Allow the Date header through CORS. Contributed by Nicolas
+      Chamo. (#8804)
+    - Add a config option, push.group_by_unread_count, which
+      controls whether unread message counts in push notifications
+      are defined as "the number of rooms with unread messages" or
+      "total unread messages". (#8820)
+    - Add force_purge option to delete-room admin api. (#8843)
+  - Bugfixes
+    - Fix a regression in v1.24.0rc1 which failed to allow SAML
+      mapping providers which were unable to redirect users to an
+      additional page. (#8878)
+    - Fix a bug where appservices may be sent an excessive amount
+      of read receipts and presence. Broke in v1.22.0. (#8744)
+    - Fix a bug in some federation APIs which could lead to
+      unexpected behaviour if different parameters were set in the
+      URI and the request body. (#8776)
+    - Fix a bug where synctl could spawn duplicate copies of a
+      worker. Contributed by Waylon Cude. (#8798)
+    - Allow per-room profiles to be used for the server notice
+      user. (#8799)
+    - Fix a bug where logging could break after a call to SIGHUP.
+      (#8817)
+    - Fix register_new_matrix_user failing with "Bad Request" when
+      trailing slash is included in server URL. Contributed by
+      @angdraug. (#8823)
+    - Fix a minor long-standing bug in login, where we would offer
+      the password login type if a custom auth provider supported
+      it, even if password login was disabled. (#8835)
+    - Fix a long-standing bug which caused Synapse to require
+      unspecified parameters during user-interactive
+      authentication. (#8848)
+    - Fix a bug introduced in v1.20.0 where the user-agent and IP
+      address reported during user registration for CAS, OpenID
+      Connect, and SAML were of the wrong form. (#8784)
+  - Improved Documentation
+    - Clarify the usecase for a msisdn delegate. Contributed by
+      Adrian Wannenmacher. (#8734)
+    - Remove extraneous comma from JSON example in User Admin API
+      docs. (#8771)
+    - Update turn-howto.md with troubleshooting notes. (#8779)
+    - Fix the example on how to set the Content-Type header in
+      nginx for the Client Well-Known URI. (#8793)
+    - Improve the documentation for the admin API to list all media
+      in a room with respect to encrypted events. (#8795)
+    - Update the formatting of the push section of the homeserver
+      config file to better align with the code style guidelines.
+      (#8818)
+    - Improve documentation how to configure prometheus for
+      workers. (#8822)
+    - Update example prometheus console. (#8824)
+  - Deprecations and Removals
+    - Remove old /_matrix/client/*/admin endpoints which were
+      deprecated since Synapse 1.20.0. (#8785)
+    - Disable pretty printing JSON responses for curl. Users who
+      want pretty-printed output should use jq in combination with
+      curl. Contributed by @tulir. (#8833)
+  - Internal Changes
+    - Add a maximum version for pysaml2 on Python 3.5. (#8898)
+    - Add support for the prometheus_client newer than 0.9.0.
+      Contributed by Jordan Bancino. (#8875)
+    - Simplify the way the HomeServer object caches its internal
+      attributes. (#8565, #8851)
+    - Add an example and documentation for clock skew to the SAML2
+      sample configuration to allow for clock/time difference
+      between the homserver and IdP. Contributed by @localguru.
+      (#8731)
+    - Generalise RoomMemberHandler._locally_reject_invite to apply
+      to more flows than just invite. (#8751)
+    - Generalise RoomStore.maybe_store_room_on_invite to handle
+      other, non-invite membership events. (#8754)
+    - Refactor test utilities for injecting HTTP requests. (#8757,
+      #8758, #8759, #8760, #8761, #8777)
+    - Consolidate logic between the OpenID Connect and SAML code.
+      (#8765)
+    - Use TYPE_CHECKING instead of magic MYPY variable. (#8770)
+    - Add a commandline script to sign arbitrary json objects.
+      (#8772)
+    - Minor log line improvements for the SSO mapping code used to
+      generate Matrix IDs from SSO IDs. (#8773)
+    - Add additional error checking for OpenID Connect and SAML
+      mapping providers. (#8774, #8800)
+    - Add type hints to HTTP abstractions. (#8806, #8812)
+    - Remove unnecessary function arguments and add typing to
+      several membership replication classes. (#8809)
+    - Optimise the lookup for an invite from another homeserver
+      when trying to reject it. (#8815)
+    - Add tests for password_auth_providers. (#8819)
+    - Drop redundant database index on event_json. (#8845)
+    - Simplify uk.half-shot.msc2778.login.application_service login
+      handler. (#8847)
+    - Refactor password_auth_provider support code. (#8849)
+    - Add missing ordering to background database updates. (#8850)
+    - Allow for specifying a room version when creating a room in
+      unit tests via RestHelper.create_room_as. (#8854)
+
 -------------------------------------------------------------------
 Wed Nov 18 13:59:26 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
 

matrix-synapse.obsinfo

@@ -1,5 +1,5 @@
 name: matrix-synapse
-version: 1.23.0
+version: 1.24.0
-mtime: 1605701048
+mtime: 1607512044
-commit: 244bff4edd620998abd033050922994e74294c16
+commit: 9b26a4ac87cead4846c5bada73927cc2a6353a90
 

matrix-synapse.spec

@@ -48,7 +48,7 @@
 %define         modname synapse
 %define         pkgname matrix-synapse
 Name:           %{pkgname}
-Version:        1.23.0
+Version:        1.24.0
 Release:        0
 Summary:        Matrix protocol reference homeserver
 License:        Apache-2.0
@@ -106,7 +106,7 @@ BuildRequires:  python3-netaddr >= 0.7.18
 %requires_eq    python3-netaddr
 BuildRequires:  python3-phonenumbers >= 8.2.0
 %requires_eq    python3-phonenumbers
-BuildRequires:  (python3-prometheus_client >= 0.4.0 with python3-prometheus_client < 0.9.0)
+BuildRequires:  python3-prometheus_client >= 0.4.0
 %requires_eq    python3-prometheus_client
 BuildRequires:  python3-psutil >= 2.0.0
 %requires_eq    python3-psutil