mirror of
https://forgejo.ellis.link/continuwuation/continuwuity.git
synced 2026-11-12 19:56:48 +00:00
chore: Release v26.8.0
This commit is contained in:
40 files changed
+65
-50
No files matched your search
@@ -1,3 +1,55 @@
|
||||
# Continuwuity v26.8.0 (2026-08-22)
|
||||
|
||||
## Features
|
||||
|
||||
- Added new health tracking to monitor the health of remote servers and intelligently back-off federation globally with automatic stale re-resolution. ([#2097](https://forgejo.ellis.link/continuwuation/continuwuity/pulls/2097))
|
||||
- Added [MSC4354](https://github.com/matrix-org/matrix-spec-proposals/pull/4354) sticky events, behind the `allow_sticky_events` config option. Contributed by @eleboucher.
|
||||
- Added [MSC4480](https://github.com/matrix-org/matrix-spec-proposals/pull/4480) sticky events to simplified sliding sync. Contributed by @eleboucher.
|
||||
- Added scoped typing updates to simplified Sliding Sync ([MSC4508](https://github.com/matrix-org/matrix-spec-proposals/pull/4508)). Contributed by @eleboucher.
|
||||
- Fixed [MSC4323](https://github.com/matrix-org/matrix-spec-proposals/pull/4323) suspend/lock admin endpoints: the lock endpoint now locks instead of suspending users, and error codes match the ratified spec. Contributed by @eleboucher.
|
||||
|
||||
## Bugfixes
|
||||
|
||||
- Fixed a vulnerability that enabled the server to leak certain events over federation. Contributed by @eleboucher. (SEC26)
|
||||
- Fixed an issue that allowed an attacker to take over another account on the same server under certain conditions. ([GHSA-v2x6-m99h-vqxx](https://github.com/continuwuity/continuwuity/security/advisories/GHSA-v2x6-m99h-vqxx)) Contributed by @gingershaped and reported by GlitchedAxiom. (SEC28)
|
||||
- Re-introduced admin room registration alerts that were accidentally removed in the OAuth2 update. ([#2057](https://forgejo.ellis.link/continuwuation/continuwuity/pulls/2057))
|
||||
- Fixed federation PDUs received during remote joins being dropped before their room state was available. Contributed by @eleboucher. ([#2063](https://forgejo.ellis.link/continuwuation/continuwuity/pulls/2063))
|
||||
- Resolve membership service by correct name for auto-join. Contributed by @Aranjedeath ([#2082](https://forgejo.ellis.link/continuwuation/continuwuity/pulls/2082))
|
||||
- Fixed simplified sliding sync reporting the number of live timeline events. Contributed by @eleboucher. ([#2083](https://forgejo.ellis.link/continuwuation/continuwuity/pulls/2083))
|
||||
- Plugged a logic gap that may have been allowing Continuwuity to process events with incorrect room versions under certain conditions. Contributed by @nex. ([#2106](https://forgejo.ellis.link/continuwuation/continuwuity/pulls/2106))
|
||||
- The OAuth 2.0 device authorization endpoint now rejects clients which did not register the device code grant type, instead of issuing them a device code. The token endpoint now returns the `unauthorized_client` error code when a client requests a grant type it did not register, instead of `invalid_grant`. Contributed by @mmaudet. ([#2110](https://forgejo.ellis.link/continuwuation/continuwuity/pulls/2110))
|
||||
- Events arriving after one of their children has already been backfilled are no longer used as forward extremities. Contributed by @eleboucher. ([#2115](https://forgejo.ellis.link/continuwuation/continuwuity/pulls/2115))
|
||||
- Fixed federated space hierarchies omitting rooms restricted to members of private spaces. Contributed by @eleboucher. ([#2132](https://forgejo.ellis.link/continuwuation/continuwuity/pulls/2132))
|
||||
- A panic during transaction handling will no longer cause the handle tracker to reference a stale transaction, which caused federation between two servers to fail until continuwuity was restarted. Contributed by @nex. ([#2137](https://forgejo.ellis.link/continuwuation/continuwuity/pulls/2137))
|
||||
- Fixed event tracking forgetting to mark soft-failed/rejected events as referenced, which caused a build-up of incorrectly unreferenced events, triggering frequent dummy squashes and associated state resets. ([#2164](https://forgejo.ellis.link/continuwuation/continuwuity/pulls/2164))
|
||||
- Added [MSC4186](https://github.com/matrix-org/matrix-spec-proposals/pull/4186) direct, encrypted, and room-type list filters, resolving invited rooms from their stripped invite state. Contributed by @eleboucher.
|
||||
- Fixed left/banned rooms sometimes not coming down sync.
|
||||
- Fixed local events dropping forward extremities they did not reference. Contributed by @eleboucher.
|
||||
- Fixed missed wake-ups and stale responses in legacy and sliding sync long polls. Contributed by @eleboucher.
|
||||
- Fixed space hierarchy depth limits, child ordering, and non-space child traversal. Contributed by @eleboucher.
|
||||
- Fixed state resolution ordering room creators as having no power level. Contributed by @eleboucher.
|
||||
- Fixed sync loops being woken before membership changes are fully committed.
|
||||
- Fixed typing notifications not interrupting a sync long poll. Contributed by @eleboucher.
|
||||
- Preserve all users' read receipts when batching room receipt updates.
|
||||
|
||||
## Improved Documentation
|
||||
|
||||
- Refactor TURN docs and remove unsafe setups. Polish LiveKit docs. Add guidance for TURNS-over-443 multiplexing for both LiveKit and legacy calls. Contributed by @stratself ([#1740](https://forgejo.ellis.link/continuwuation/continuwuity/pulls/1740))
|
||||
- Updated the docs to reflect the current default User-Agent for URL previews ([#2079](https://forgejo.ellis.link/continuwuation/continuwuity/pulls/2079))
|
||||
- Added missing documentation to config parameters. Contributed by @renegadespork ([#2107](https://forgejo.ellis.link/continuwuation/continuwuity/pulls/2107))
|
||||
- Generic deployment documentation: Use `/etc/caddy/Caddyfile` instead of `/etc/caddy/conf.d/*` paths, which do not exist on a majority of Caddy installations. ([#2117](https://forgejo.ellis.link/continuwuation/continuwuity/pulls/2117))
|
||||
- Add caveat and workaround for container resolution (e.g. for dockerized appservices) when using mounted `/etc/resolv.conf`. Contributed by @stratself
|
||||
- Livekit docs, troubleshooting section: Advise using `host-gateway` magic address for `lk-jwt-service` container to loop back to host, instead of the other incomplete/incorrect workarounds. Contributed by @stratself
|
||||
- Livekit docs: `room.auto_create: false` is now included in default `livekit.yaml`, following `lk-jwt-service` recommendation.
|
||||
- Replace deprecated `docker-compose` commands with `docker compose` to reflect latest Docker changes.
|
||||
- Update backup instructions: the right paths for `.sst` files are now in `$DATABASE_BACKUP_PATH/private/<number>` path instead of `$DATABASE_BACKUP_PATH/<number>`. Contributed by @stratself
|
||||
|
||||
## Misc
|
||||
|
||||
- #2033
|
||||
- Updated Ruma dependencies. Contributed by @eleboucher.
|
||||
|
||||
|
||||
# Continuwuity v26.8.0-alpha.1 (2026-08-14)
|
||||
|
||||
## Features
|
||||
|
||||
Generated
+12
-12
@@ -822,7 +822,7 @@ dependencies = [
|
||||
|
||||
[[package]]
|
||||
name = "conduwuit"
|
||||
version = "26.8.0-alpha.1"
|
||||
version = "26.8.0"
|
||||
dependencies = [
|
||||
"aws-lc-rs",
|
||||
"clap",
|
||||
@@ -860,7 +860,7 @@ dependencies = [
|
||||
|
||||
[[package]]
|
||||
name = "conduwuit_admin"
|
||||
version = "26.8.0-alpha.1"
|
||||
version = "26.8.0"
|
||||
dependencies = [
|
||||
"assign",
|
||||
"clap",
|
||||
@@ -886,7 +886,7 @@ dependencies = [
|
||||
|
||||
[[package]]
|
||||
name = "conduwuit_api"
|
||||
version = "26.8.0-alpha.1"
|
||||
version = "26.8.0"
|
||||
dependencies = [
|
||||
"assign",
|
||||
"async-trait",
|
||||
@@ -924,7 +924,7 @@ dependencies = [
|
||||
|
||||
[[package]]
|
||||
name = "conduwuit_build_metadata"
|
||||
version = "26.8.0-alpha.1"
|
||||
version = "26.8.0"
|
||||
dependencies = [
|
||||
"built",
|
||||
"cargo_metadata",
|
||||
@@ -932,7 +932,7 @@ dependencies = [
|
||||
|
||||
[[package]]
|
||||
name = "conduwuit_core"
|
||||
version = "26.8.0-alpha.1"
|
||||
version = "26.8.0"
|
||||
dependencies = [
|
||||
"argon2",
|
||||
"arrayvec",
|
||||
@@ -1000,7 +1000,7 @@ dependencies = [
|
||||
|
||||
[[package]]
|
||||
name = "conduwuit_database"
|
||||
version = "26.8.0-alpha.1"
|
||||
version = "26.8.0"
|
||||
dependencies = [
|
||||
"async-channel",
|
||||
"conduwuit_core",
|
||||
@@ -1021,7 +1021,7 @@ dependencies = [
|
||||
|
||||
[[package]]
|
||||
name = "conduwuit_macros"
|
||||
version = "26.8.0-alpha.1"
|
||||
version = "26.8.0"
|
||||
dependencies = [
|
||||
"cargo_toml",
|
||||
"itertools 0.15.0",
|
||||
@@ -1032,7 +1032,7 @@ dependencies = [
|
||||
|
||||
[[package]]
|
||||
name = "conduwuit_router"
|
||||
version = "26.8.0-alpha.1"
|
||||
version = "26.8.0"
|
||||
dependencies = [
|
||||
"assign",
|
||||
"axum",
|
||||
@@ -1069,7 +1069,7 @@ dependencies = [
|
||||
|
||||
[[package]]
|
||||
name = "conduwuit_service"
|
||||
version = "26.8.0-alpha.1"
|
||||
version = "26.8.0"
|
||||
dependencies = [
|
||||
"askama",
|
||||
"assign",
|
||||
@@ -1121,7 +1121,7 @@ dependencies = [
|
||||
|
||||
[[package]]
|
||||
name = "conduwuit_web"
|
||||
version = "26.8.0-alpha.1"
|
||||
version = "26.8.0"
|
||||
dependencies = [
|
||||
"askama",
|
||||
"assign",
|
||||
@@ -4771,7 +4771,7 @@ dependencies = [
|
||||
|
||||
[[package]]
|
||||
name = "ruminuwuity"
|
||||
version = "26.8.0-alpha.1"
|
||||
version = "26.8.0"
|
||||
dependencies = [
|
||||
"assign",
|
||||
"ruma",
|
||||
@@ -6879,7 +6879,7 @@ dependencies = [
|
||||
|
||||
[[package]]
|
||||
name = "xtask"
|
||||
version = "26.8.0-alpha.1"
|
||||
version = "26.8.0"
|
||||
dependencies = [
|
||||
"askama",
|
||||
"cargo_metadata",
|
||||
|
||||
+1
-1
@@ -12,7 +12,7 @@ license = "Apache-2.0"
|
||||
# See also `rust-toolchain.toml`
|
||||
readme = "README.md"
|
||||
repository = "https://forgejo.ellis.link/continuwuation/continuwuity"
|
||||
version = "26.8.0-alpha.1"
|
||||
version = "26.8.0"
|
||||
|
||||
[workspace.metadata.crane]
|
||||
name = "conduwuit"
|
||||
|
||||
@@ -1 +0,0 @@
|
||||
Update backup instructions: the right paths for `.sst` files are now in `$DATABASE_BACKUP_PATH/private/<number>` path instead of `$DATABASE_BACKUP_PATH/<number>`. Contributed by @stratself
|
||||
@@ -1 +0,0 @@
|
||||
Added MSC4480 sticky events to simplified sliding sync. Contributed by @eleboucher.
|
||||
@@ -1 +0,0 @@
|
||||
Added scoped typing updates to simplified Sliding Sync (MSC4508). Contributed by @eleboucher.
|
||||
@@ -1 +0,0 @@
|
||||
Fixed MSC4323 suspend/lock admin endpoints: the lock endpoint now locks instead of suspending users, and error codes match the ratified spec. Contributed by @eleboucher.
|
||||
@@ -1 +0,0 @@
|
||||
Replace deprecated `docker-compose` commands with `docker compose` to reflect latest Docker changes.
|
||||
@@ -1 +0,0 @@
|
||||
Fixed typing notifications not interrupting a sync long poll. Contributed by @eleboucher.
|
||||
@@ -1 +0,0 @@
|
||||
Updated Ruma dependencies. Contributed by @eleboucher.
|
||||
@@ -1 +0,0 @@
|
||||
Fixed missed wake-ups and stale responses in legacy and sliding sync long polls. Contributed by @eleboucher.
|
||||
@@ -1 +0,0 @@
|
||||
Livekit docs: `room.auto_create: false` is now included in default `livekit.yaml`, following `lk-jwt-service` recommendation.
|
||||
@@ -1 +0,0 @@
|
||||
Add caveat and workaround for container resolution (e.g. for dockerized appservices) when using mounted `/etc/resolv.conf`. Contributed by @stratself
|
||||
@@ -1 +0,0 @@
|
||||
Added MSC4354 sticky events, behind the `allow_sticky_events` config option. Contributed by @eleboucher.
|
||||
@@ -1 +0,0 @@
|
||||
Added MSC4186 direct, encrypted, and room-type list filters, resolving invited rooms from their stripped invite state. Contributed by @eleboucher.
|
||||
@@ -1 +0,0 @@
|
||||
Livekit docs, troubleshooting section: Advise using `host-gateway` magic address for `lk-jwt-service` container to loop back to host, instead of the other incomplete/incorrect workarounds. Contributed by @stratself
|
||||
@@ -1 +0,0 @@
|
||||
Fixed left/banned rooms sometimes not coming down sync.
|
||||
@@ -1 +0,0 @@
|
||||
Fixed local events dropping forward extremities they did not reference. Contributed by @eleboucher.
|
||||
@@ -1 +0,0 @@
|
||||
Preserve all users' read receipts when batching room receipt updates.
|
||||
@@ -1 +0,0 @@
|
||||
Fixed space hierarchy depth limits, child ordering, and non-space child traversal. Contributed by @eleboucher.
|
||||
@@ -1 +0,0 @@
|
||||
Fixed state resolution ordering room creators as having no power level. Contributed by @eleboucher.
|
||||
@@ -1 +0,0 @@
|
||||
Fixed sync loops being woken before membership changes are fully committed.
|
||||
@@ -1 +0,0 @@
|
||||
Refactor TURN docs and remove unsafe setups. Polish LiveKit docs. Add guidance for TURNS-over-443 multiplexing for both LiveKit and legacy calls. Contributed by @stratself
|
||||
@@ -1 +0,0 @@
|
||||
Updated admin command names (list-users -> list, list-rooms -> list, and reload-mods -> reload), old names are now aliases. Contributed by @PerformativeJade
|
||||
@@ -1 +0,0 @@
|
||||
Re-introduced admin room registration alerts that were accidentally removed in the OAuth2 update.
|
||||
@@ -1 +0,0 @@
|
||||
Fixed federation PDUs received during remote joins being dropped before their room state was available. Contributed by @eleboucher.
|
||||
@@ -1 +0,0 @@
|
||||
Updated the docs to reflect the current default User-Agent for URL previews
|
||||
@@ -1 +0,0 @@
|
||||
Resolve membership service by correct name for auto-join. Contributed by @Aranjedeath
|
||||
@@ -1 +0,0 @@
|
||||
Fixed simplified sliding sync reporting the number of live timeline events. Contributed by @eleboucher.
|
||||
@@ -1 +0,0 @@
|
||||
Added new health tracking to monitor the health of remote servers and intelligently back-off federation globally with automatic stale re-resolution.
|
||||
@@ -1 +0,0 @@
|
||||
Plugged a logic gap that may have been allowing Continuwuity to process events with incorrect room versions under certain conditions. Contributed by @nex.
|
||||
@@ -1 +0,0 @@
|
||||
Added missing documentation to config parameters. Contributed by @renegadespork
|
||||
@@ -1 +0,0 @@
|
||||
The OAuth 2.0 device authorization endpoint now rejects clients which did not register the device code grant type, instead of issuing them a device code. The token endpoint now returns the `unauthorized_client` error code when a client requests a grant type it did not register, instead of `invalid_grant`. Contributed by @mmaudet.
|
||||
@@ -1 +0,0 @@
|
||||
Events arriving after one of their children has already been backfilled are no longer used as forward extremities. Contributed by @eleboucher.
|
||||
@@ -1 +0,0 @@
|
||||
Generic deployment documentation: Use `/etc/caddy/Caddyfile` instead of `/etc/caddy/conf.d/*` paths, which do not exist on a majority of Caddy installations.
|
||||
@@ -1 +0,0 @@
|
||||
Fixed federated space hierarchies omitting rooms restricted to members of private spaces. Contributed by @eleboucher.
|
||||
@@ -1 +0,0 @@
|
||||
A panic during transaction handling will no longer cause the handle tracker to reference a stale transaction, which caused federation between two servers to fail until continuwuity was restarted. Contributed by @nex.
|
||||
@@ -1 +0,0 @@
|
||||
Fixed event tracking forgetting to mark soft-failed/rejected events as referenced, which caused a build-up of incorrectly unreferenced events, triggering frequent dummy squashes and associated state resets.
|
||||
@@ -1 +0,0 @@
|
||||
Fixed a vulnerability that enabled the server to leak certain events over federation. Contributed by @eleboucher.
|
||||
@@ -1 +0,0 @@
|
||||
Fixed an issue that allowed an attacker to take over another account on the same server under certain conditions. ([GHSA-v2x6-m99h-vqxx](https://github.com/continuwuity/continuwuity/security/advisories/GHSA-v2x6-m99h-vqxx)) Contributed by @gingershaped and reported by GlitchedAxiom.
|
||||
Reference in new issue
Block a user