From 7ebe89402e13d857c5390a922d5dca073be2014b Mon Sep 17 00:00:00 2001 From: timedout Date: Sat, 22 Aug 2026 21:07:55 +0100 Subject: [PATCH] chore: Release v26.8.0 --- CHANGELOG.md | 52 +++++++++++++++++++ Cargo.lock | 24 ++++----- Cargo.toml | 2 +- changelog.d/+18458843.doc.md | 1 - changelog.d/+3ec50619.feature.md | 1 - changelog.d/+4508b6f1.feature.md | 1 - changelog.d/+55af97cf8.feature.md | 1 - changelog.d/+68544237.doc.md | 1 - changelog.d/+7fd21c4a.bugfix.md | 1 - changelog.d/+9026b8d6.misc.md | 1 - changelog.d/+98192112.bugfix.md | 1 - changelog.d/+c648d687.doc.md | 1 - changelog.d/+c9e34885.doc.md | 1 - changelog.d/+cf65f70c.feature.md | 1 - changelog.d/+ee3b3204.bugfix.md | 1 - changelog.d/+ef3d47e3.doc.md | 1 - changelog.d/+left-room-sync.bugfix.md | 1 - .../+local-event-extremities.bugfix.md | 1 - changelog.d/+receipt-packing.bugfix.md | 1 - changelog.d/+space-hierarchy.bugfix.md | 1 - .../+state-res-creator-power.bugfix.md | 1 - changelog.d/+sync-wake-ordering.bugfix.md | 1 - changelog.d/1740.doc | 1 - changelog.d/2033.misc | 1 - changelog.d/2057.bugfix.md | 1 - changelog.d/2063.bugfix.md | 1 - changelog.d/2079.doc | 1 - changelog.d/2082.bugfix.md | 1 - changelog.d/2083.bugfix.md | 1 - changelog.d/2097.feature.md | 1 - changelog.d/2106.bugfix.md | 1 - changelog.d/2107.doc.md | 1 - changelog.d/2110.bugfix.md | 1 - changelog.d/2115.bugfix.md | 1 - changelog.d/2117.doc | 1 - changelog.d/2132.bugfix.md | 1 - changelog.d/2137.bugfix.md | 1 - changelog.d/2164.bugfix.md | 1 - changelog.d/SEC26.bugfix.md | 1 - changelog.d/SEC28.bugfix.md | 1 - 40 files changed, 65 insertions(+), 50 deletions(-) delete mode 100644 changelog.d/+18458843.doc.md delete mode 100644 changelog.d/+3ec50619.feature.md delete mode 100644 changelog.d/+4508b6f1.feature.md delete mode 100644 changelog.d/+55af97cf8.feature.md delete mode 100644 changelog.d/+68544237.doc.md delete mode 100644 changelog.d/+7fd21c4a.bugfix.md delete mode 100644 changelog.d/+9026b8d6.misc.md delete mode 100644 changelog.d/+98192112.bugfix.md delete mode 100644 changelog.d/+c648d687.doc.md delete mode 100644 changelog.d/+c9e34885.doc.md delete mode 100644 changelog.d/+cf65f70c.feature.md delete mode 100644 changelog.d/+ee3b3204.bugfix.md delete mode 100644 changelog.d/+ef3d47e3.doc.md delete mode 100644 changelog.d/+left-room-sync.bugfix.md delete mode 100644 changelog.d/+local-event-extremities.bugfix.md delete mode 100644 changelog.d/+receipt-packing.bugfix.md delete mode 100644 changelog.d/+space-hierarchy.bugfix.md delete mode 100644 changelog.d/+state-res-creator-power.bugfix.md delete mode 100644 changelog.d/+sync-wake-ordering.bugfix.md delete mode 100644 changelog.d/1740.doc delete mode 100644 changelog.d/2033.misc delete mode 100644 changelog.d/2057.bugfix.md delete mode 100644 changelog.d/2063.bugfix.md delete mode 100644 changelog.d/2079.doc delete mode 100644 changelog.d/2082.bugfix.md delete mode 100644 changelog.d/2083.bugfix.md delete mode 100644 changelog.d/2097.feature.md delete mode 100644 changelog.d/2106.bugfix.md delete mode 100644 changelog.d/2107.doc.md delete mode 100644 changelog.d/2110.bugfix.md delete mode 100644 changelog.d/2115.bugfix.md delete mode 100644 changelog.d/2117.doc delete mode 100644 changelog.d/2132.bugfix.md delete mode 100644 changelog.d/2137.bugfix.md delete mode 100644 changelog.d/2164.bugfix.md delete mode 100644 changelog.d/SEC26.bugfix.md delete mode 100644 changelog.d/SEC28.bugfix.md diff --git a/CHANGELOG.md b/CHANGELOG.md index 3fce82778..9c6f6da48 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,3 +1,55 @@ +# Continuwuity v26.8.0 (2026-08-22) + +## Features + +- Added new health tracking to monitor the health of remote servers and intelligently back-off federation globally with automatic stale re-resolution. ([#2097](https://forgejo.ellis.link/continuwuation/continuwuity/pulls/2097)) +- Added [MSC4354](https://github.com/matrix-org/matrix-spec-proposals/pull/4354) sticky events, behind the `allow_sticky_events` config option. Contributed by @eleboucher. +- Added [MSC4480](https://github.com/matrix-org/matrix-spec-proposals/pull/4480) sticky events to simplified sliding sync. Contributed by @eleboucher. +- Added scoped typing updates to simplified Sliding Sync ([MSC4508](https://github.com/matrix-org/matrix-spec-proposals/pull/4508)). Contributed by @eleboucher. +- Fixed [MSC4323](https://github.com/matrix-org/matrix-spec-proposals/pull/4323) suspend/lock admin endpoints: the lock endpoint now locks instead of suspending users, and error codes match the ratified spec. Contributed by @eleboucher. + +## Bugfixes + +- Fixed a vulnerability that enabled the server to leak certain events over federation. Contributed by @eleboucher. (SEC26) +- Fixed an issue that allowed an attacker to take over another account on the same server under certain conditions. ([GHSA-v2x6-m99h-vqxx](https://github.com/continuwuity/continuwuity/security/advisories/GHSA-v2x6-m99h-vqxx)) Contributed by @gingershaped and reported by GlitchedAxiom. (SEC28) +- Re-introduced admin room registration alerts that were accidentally removed in the OAuth2 update. ([#2057](https://forgejo.ellis.link/continuwuation/continuwuity/pulls/2057)) +- Fixed federation PDUs received during remote joins being dropped before their room state was available. Contributed by @eleboucher. ([#2063](https://forgejo.ellis.link/continuwuation/continuwuity/pulls/2063)) +- Resolve membership service by correct name for auto-join. Contributed by @Aranjedeath ([#2082](https://forgejo.ellis.link/continuwuation/continuwuity/pulls/2082)) +- Fixed simplified sliding sync reporting the number of live timeline events. Contributed by @eleboucher. ([#2083](https://forgejo.ellis.link/continuwuation/continuwuity/pulls/2083)) +- Plugged a logic gap that may have been allowing Continuwuity to process events with incorrect room versions under certain conditions. Contributed by @nex. ([#2106](https://forgejo.ellis.link/continuwuation/continuwuity/pulls/2106)) +- The OAuth 2.0 device authorization endpoint now rejects clients which did not register the device code grant type, instead of issuing them a device code. The token endpoint now returns the `unauthorized_client` error code when a client requests a grant type it did not register, instead of `invalid_grant`. Contributed by @mmaudet. ([#2110](https://forgejo.ellis.link/continuwuation/continuwuity/pulls/2110)) +- Events arriving after one of their children has already been backfilled are no longer used as forward extremities. Contributed by @eleboucher. ([#2115](https://forgejo.ellis.link/continuwuation/continuwuity/pulls/2115)) +- Fixed federated space hierarchies omitting rooms restricted to members of private spaces. Contributed by @eleboucher. ([#2132](https://forgejo.ellis.link/continuwuation/continuwuity/pulls/2132)) +- A panic during transaction handling will no longer cause the handle tracker to reference a stale transaction, which caused federation between two servers to fail until continuwuity was restarted. Contributed by @nex. ([#2137](https://forgejo.ellis.link/continuwuation/continuwuity/pulls/2137)) +- Fixed event tracking forgetting to mark soft-failed/rejected events as referenced, which caused a build-up of incorrectly unreferenced events, triggering frequent dummy squashes and associated state resets. ([#2164](https://forgejo.ellis.link/continuwuation/continuwuity/pulls/2164)) +- Added [MSC4186](https://github.com/matrix-org/matrix-spec-proposals/pull/4186) direct, encrypted, and room-type list filters, resolving invited rooms from their stripped invite state. Contributed by @eleboucher. +- Fixed left/banned rooms sometimes not coming down sync. +- Fixed local events dropping forward extremities they did not reference. Contributed by @eleboucher. +- Fixed missed wake-ups and stale responses in legacy and sliding sync long polls. Contributed by @eleboucher. +- Fixed space hierarchy depth limits, child ordering, and non-space child traversal. Contributed by @eleboucher. +- Fixed state resolution ordering room creators as having no power level. Contributed by @eleboucher. +- Fixed sync loops being woken before membership changes are fully committed. +- Fixed typing notifications not interrupting a sync long poll. Contributed by @eleboucher. +- Preserve all users' read receipts when batching room receipt updates. + +## Improved Documentation + +- Refactor TURN docs and remove unsafe setups. Polish LiveKit docs. Add guidance for TURNS-over-443 multiplexing for both LiveKit and legacy calls. Contributed by @stratself ([#1740](https://forgejo.ellis.link/continuwuation/continuwuity/pulls/1740)) +- Updated the docs to reflect the current default User-Agent for URL previews ([#2079](https://forgejo.ellis.link/continuwuation/continuwuity/pulls/2079)) +- Added missing documentation to config parameters. Contributed by @renegadespork ([#2107](https://forgejo.ellis.link/continuwuation/continuwuity/pulls/2107)) +- Generic deployment documentation: Use `/etc/caddy/Caddyfile` instead of `/etc/caddy/conf.d/*` paths, which do not exist on a majority of Caddy installations. ([#2117](https://forgejo.ellis.link/continuwuation/continuwuity/pulls/2117)) +- Add caveat and workaround for container resolution (e.g. for dockerized appservices) when using mounted `/etc/resolv.conf`. Contributed by @stratself +- Livekit docs, troubleshooting section: Advise using `host-gateway` magic address for `lk-jwt-service` container to loop back to host, instead of the other incomplete/incorrect workarounds. Contributed by @stratself +- Livekit docs: `room.auto_create: false` is now included in default `livekit.yaml`, following `lk-jwt-service` recommendation. +- Replace deprecated `docker-compose` commands with `docker compose` to reflect latest Docker changes. +- Update backup instructions: the right paths for `.sst` files are now in `$DATABASE_BACKUP_PATH/private/` path instead of `$DATABASE_BACKUP_PATH/`. Contributed by @stratself + +## Misc + +- #2033 +- Updated Ruma dependencies. Contributed by @eleboucher. + + # Continuwuity v26.8.0-alpha.1 (2026-08-14) ## Features diff --git a/Cargo.lock b/Cargo.lock index dc33ea28a..4a090c3a7 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -822,7 +822,7 @@ dependencies = [ [[package]] name = "conduwuit" -version = "26.8.0-alpha.1" +version = "26.8.0" dependencies = [ "aws-lc-rs", "clap", @@ -860,7 +860,7 @@ dependencies = [ [[package]] name = "conduwuit_admin" -version = "26.8.0-alpha.1" +version = "26.8.0" dependencies = [ "assign", "clap", @@ -886,7 +886,7 @@ dependencies = [ [[package]] name = "conduwuit_api" -version = "26.8.0-alpha.1" +version = "26.8.0" dependencies = [ "assign", "async-trait", @@ -924,7 +924,7 @@ dependencies = [ [[package]] name = "conduwuit_build_metadata" -version = "26.8.0-alpha.1" +version = "26.8.0" dependencies = [ "built", "cargo_metadata", @@ -932,7 +932,7 @@ dependencies = [ [[package]] name = "conduwuit_core" -version = "26.8.0-alpha.1" +version = "26.8.0" dependencies = [ "argon2", "arrayvec", @@ -1000,7 +1000,7 @@ dependencies = [ [[package]] name = "conduwuit_database" -version = "26.8.0-alpha.1" +version = "26.8.0" dependencies = [ "async-channel", "conduwuit_core", @@ -1021,7 +1021,7 @@ dependencies = [ [[package]] name = "conduwuit_macros" -version = "26.8.0-alpha.1" +version = "26.8.0" dependencies = [ "cargo_toml", "itertools 0.15.0", @@ -1032,7 +1032,7 @@ dependencies = [ [[package]] name = "conduwuit_router" -version = "26.8.0-alpha.1" +version = "26.8.0" dependencies = [ "assign", "axum", @@ -1069,7 +1069,7 @@ dependencies = [ [[package]] name = "conduwuit_service" -version = "26.8.0-alpha.1" +version = "26.8.0" dependencies = [ "askama", "assign", @@ -1121,7 +1121,7 @@ dependencies = [ [[package]] name = "conduwuit_web" -version = "26.8.0-alpha.1" +version = "26.8.0" dependencies = [ "askama", "assign", @@ -4771,7 +4771,7 @@ dependencies = [ [[package]] name = "ruminuwuity" -version = "26.8.0-alpha.1" +version = "26.8.0" dependencies = [ "assign", "ruma", @@ -6879,7 +6879,7 @@ dependencies = [ [[package]] name = "xtask" -version = "26.8.0-alpha.1" +version = "26.8.0" dependencies = [ "askama", "cargo_metadata", diff --git a/Cargo.toml b/Cargo.toml index 7e041b63e..9e53bc673 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -12,7 +12,7 @@ license = "Apache-2.0" # See also `rust-toolchain.toml` readme = "README.md" repository = "https://forgejo.ellis.link/continuwuation/continuwuity" -version = "26.8.0-alpha.1" +version = "26.8.0" [workspace.metadata.crane] name = "conduwuit" diff --git a/changelog.d/+18458843.doc.md b/changelog.d/+18458843.doc.md deleted file mode 100644 index bbea527fd..000000000 --- a/changelog.d/+18458843.doc.md +++ /dev/null @@ -1 +0,0 @@ -Update backup instructions: the right paths for `.sst` files are now in `$DATABASE_BACKUP_PATH/private/` path instead of `$DATABASE_BACKUP_PATH/`. Contributed by @stratself diff --git a/changelog.d/+3ec50619.feature.md b/changelog.d/+3ec50619.feature.md deleted file mode 100644 index d1aba9801..000000000 --- a/changelog.d/+3ec50619.feature.md +++ /dev/null @@ -1 +0,0 @@ -Added MSC4480 sticky events to simplified sliding sync. Contributed by @eleboucher. diff --git a/changelog.d/+4508b6f1.feature.md b/changelog.d/+4508b6f1.feature.md deleted file mode 100644 index 9b0b02616..000000000 --- a/changelog.d/+4508b6f1.feature.md +++ /dev/null @@ -1 +0,0 @@ -Added scoped typing updates to simplified Sliding Sync (MSC4508). Contributed by @eleboucher. diff --git a/changelog.d/+55af97cf8.feature.md b/changelog.d/+55af97cf8.feature.md deleted file mode 100644 index ff32dead0..000000000 --- a/changelog.d/+55af97cf8.feature.md +++ /dev/null @@ -1 +0,0 @@ -Fixed MSC4323 suspend/lock admin endpoints: the lock endpoint now locks instead of suspending users, and error codes match the ratified spec. Contributed by @eleboucher. diff --git a/changelog.d/+68544237.doc.md b/changelog.d/+68544237.doc.md deleted file mode 100644 index 60e85f0c2..000000000 --- a/changelog.d/+68544237.doc.md +++ /dev/null @@ -1 +0,0 @@ -Replace deprecated `docker-compose` commands with `docker compose` to reflect latest Docker changes. diff --git a/changelog.d/+7fd21c4a.bugfix.md b/changelog.d/+7fd21c4a.bugfix.md deleted file mode 100644 index 286f6ba3e..000000000 --- a/changelog.d/+7fd21c4a.bugfix.md +++ /dev/null @@ -1 +0,0 @@ -Fixed typing notifications not interrupting a sync long poll. Contributed by @eleboucher. diff --git a/changelog.d/+9026b8d6.misc.md b/changelog.d/+9026b8d6.misc.md deleted file mode 100644 index 7f97f6c2f..000000000 --- a/changelog.d/+9026b8d6.misc.md +++ /dev/null @@ -1 +0,0 @@ -Updated Ruma dependencies. Contributed by @eleboucher. diff --git a/changelog.d/+98192112.bugfix.md b/changelog.d/+98192112.bugfix.md deleted file mode 100644 index 221c6a646..000000000 --- a/changelog.d/+98192112.bugfix.md +++ /dev/null @@ -1 +0,0 @@ -Fixed missed wake-ups and stale responses in legacy and sliding sync long polls. Contributed by @eleboucher. diff --git a/changelog.d/+c648d687.doc.md b/changelog.d/+c648d687.doc.md deleted file mode 100644 index 84867bcf2..000000000 --- a/changelog.d/+c648d687.doc.md +++ /dev/null @@ -1 +0,0 @@ -Livekit docs: `room.auto_create: false` is now included in default `livekit.yaml`, following `lk-jwt-service` recommendation. diff --git a/changelog.d/+c9e34885.doc.md b/changelog.d/+c9e34885.doc.md deleted file mode 100644 index e5507063f..000000000 --- a/changelog.d/+c9e34885.doc.md +++ /dev/null @@ -1 +0,0 @@ -Add caveat and workaround for container resolution (e.g. for dockerized appservices) when using mounted `/etc/resolv.conf`. Contributed by @stratself diff --git a/changelog.d/+cf65f70c.feature.md b/changelog.d/+cf65f70c.feature.md deleted file mode 100644 index 106fa8e30..000000000 --- a/changelog.d/+cf65f70c.feature.md +++ /dev/null @@ -1 +0,0 @@ -Added MSC4354 sticky events, behind the `allow_sticky_events` config option. Contributed by @eleboucher. diff --git a/changelog.d/+ee3b3204.bugfix.md b/changelog.d/+ee3b3204.bugfix.md deleted file mode 100644 index ab9f5e68f..000000000 --- a/changelog.d/+ee3b3204.bugfix.md +++ /dev/null @@ -1 +0,0 @@ -Added MSC4186 direct, encrypted, and room-type list filters, resolving invited rooms from their stripped invite state. Contributed by @eleboucher. diff --git a/changelog.d/+ef3d47e3.doc.md b/changelog.d/+ef3d47e3.doc.md deleted file mode 100644 index 47f402ec8..000000000 --- a/changelog.d/+ef3d47e3.doc.md +++ /dev/null @@ -1 +0,0 @@ -Livekit docs, troubleshooting section: Advise using `host-gateway` magic address for `lk-jwt-service` container to loop back to host, instead of the other incomplete/incorrect workarounds. Contributed by @stratself diff --git a/changelog.d/+left-room-sync.bugfix.md b/changelog.d/+left-room-sync.bugfix.md deleted file mode 100644 index 909b39639..000000000 --- a/changelog.d/+left-room-sync.bugfix.md +++ /dev/null @@ -1 +0,0 @@ -Fixed left/banned rooms sometimes not coming down sync. diff --git a/changelog.d/+local-event-extremities.bugfix.md b/changelog.d/+local-event-extremities.bugfix.md deleted file mode 100644 index 080052f14..000000000 --- a/changelog.d/+local-event-extremities.bugfix.md +++ /dev/null @@ -1 +0,0 @@ -Fixed local events dropping forward extremities they did not reference. Contributed by @eleboucher. diff --git a/changelog.d/+receipt-packing.bugfix.md b/changelog.d/+receipt-packing.bugfix.md deleted file mode 100644 index 7bb10eb0d..000000000 --- a/changelog.d/+receipt-packing.bugfix.md +++ /dev/null @@ -1 +0,0 @@ -Preserve all users' read receipts when batching room receipt updates. diff --git a/changelog.d/+space-hierarchy.bugfix.md b/changelog.d/+space-hierarchy.bugfix.md deleted file mode 100644 index 655d629ae..000000000 --- a/changelog.d/+space-hierarchy.bugfix.md +++ /dev/null @@ -1 +0,0 @@ -Fixed space hierarchy depth limits, child ordering, and non-space child traversal. Contributed by @eleboucher. diff --git a/changelog.d/+state-res-creator-power.bugfix.md b/changelog.d/+state-res-creator-power.bugfix.md deleted file mode 100644 index 5e2f1c3b6..000000000 --- a/changelog.d/+state-res-creator-power.bugfix.md +++ /dev/null @@ -1 +0,0 @@ -Fixed state resolution ordering room creators as having no power level. Contributed by @eleboucher. diff --git a/changelog.d/+sync-wake-ordering.bugfix.md b/changelog.d/+sync-wake-ordering.bugfix.md deleted file mode 100644 index 13bb89c27..000000000 --- a/changelog.d/+sync-wake-ordering.bugfix.md +++ /dev/null @@ -1 +0,0 @@ -Fixed sync loops being woken before membership changes are fully committed. diff --git a/changelog.d/1740.doc b/changelog.d/1740.doc deleted file mode 100644 index 8e663ab41..000000000 --- a/changelog.d/1740.doc +++ /dev/null @@ -1 +0,0 @@ -Refactor TURN docs and remove unsafe setups. Polish LiveKit docs. Add guidance for TURNS-over-443 multiplexing for both LiveKit and legacy calls. Contributed by @stratself diff --git a/changelog.d/2033.misc b/changelog.d/2033.misc deleted file mode 100644 index dfdc688cc..000000000 --- a/changelog.d/2033.misc +++ /dev/null @@ -1 +0,0 @@ -Updated admin command names (list-users -> list, list-rooms -> list, and reload-mods -> reload), old names are now aliases. Contributed by @PerformativeJade diff --git a/changelog.d/2057.bugfix.md b/changelog.d/2057.bugfix.md deleted file mode 100644 index 46379bdd5..000000000 --- a/changelog.d/2057.bugfix.md +++ /dev/null @@ -1 +0,0 @@ -Re-introduced admin room registration alerts that were accidentally removed in the OAuth2 update. diff --git a/changelog.d/2063.bugfix.md b/changelog.d/2063.bugfix.md deleted file mode 100644 index ad6957dce..000000000 --- a/changelog.d/2063.bugfix.md +++ /dev/null @@ -1 +0,0 @@ -Fixed federation PDUs received during remote joins being dropped before their room state was available. Contributed by @eleboucher. diff --git a/changelog.d/2079.doc b/changelog.d/2079.doc deleted file mode 100644 index c971fbc12..000000000 --- a/changelog.d/2079.doc +++ /dev/null @@ -1 +0,0 @@ -Updated the docs to reflect the current default User-Agent for URL previews diff --git a/changelog.d/2082.bugfix.md b/changelog.d/2082.bugfix.md deleted file mode 100644 index 1602597ab..000000000 --- a/changelog.d/2082.bugfix.md +++ /dev/null @@ -1 +0,0 @@ -Resolve membership service by correct name for auto-join. Contributed by @Aranjedeath diff --git a/changelog.d/2083.bugfix.md b/changelog.d/2083.bugfix.md deleted file mode 100644 index df9c01f3a..000000000 --- a/changelog.d/2083.bugfix.md +++ /dev/null @@ -1 +0,0 @@ -Fixed simplified sliding sync reporting the number of live timeline events. Contributed by @eleboucher. diff --git a/changelog.d/2097.feature.md b/changelog.d/2097.feature.md deleted file mode 100644 index 3fd959510..000000000 --- a/changelog.d/2097.feature.md +++ /dev/null @@ -1 +0,0 @@ -Added new health tracking to monitor the health of remote servers and intelligently back-off federation globally with automatic stale re-resolution. diff --git a/changelog.d/2106.bugfix.md b/changelog.d/2106.bugfix.md deleted file mode 100644 index dcb04d219..000000000 --- a/changelog.d/2106.bugfix.md +++ /dev/null @@ -1 +0,0 @@ -Plugged a logic gap that may have been allowing Continuwuity to process events with incorrect room versions under certain conditions. Contributed by @nex. diff --git a/changelog.d/2107.doc.md b/changelog.d/2107.doc.md deleted file mode 100644 index 72138589e..000000000 --- a/changelog.d/2107.doc.md +++ /dev/null @@ -1 +0,0 @@ -Added missing documentation to config parameters. Contributed by @renegadespork diff --git a/changelog.d/2110.bugfix.md b/changelog.d/2110.bugfix.md deleted file mode 100644 index 6ea4c6c6d..000000000 --- a/changelog.d/2110.bugfix.md +++ /dev/null @@ -1 +0,0 @@ -The OAuth 2.0 device authorization endpoint now rejects clients which did not register the device code grant type, instead of issuing them a device code. The token endpoint now returns the `unauthorized_client` error code when a client requests a grant type it did not register, instead of `invalid_grant`. Contributed by @mmaudet. diff --git a/changelog.d/2115.bugfix.md b/changelog.d/2115.bugfix.md deleted file mode 100644 index 351d69869..000000000 --- a/changelog.d/2115.bugfix.md +++ /dev/null @@ -1 +0,0 @@ -Events arriving after one of their children has already been backfilled are no longer used as forward extremities. Contributed by @eleboucher. diff --git a/changelog.d/2117.doc b/changelog.d/2117.doc deleted file mode 100644 index 889f8f5e1..000000000 --- a/changelog.d/2117.doc +++ /dev/null @@ -1 +0,0 @@ -Generic deployment documentation: Use `/etc/caddy/Caddyfile` instead of `/etc/caddy/conf.d/*` paths, which do not exist on a majority of Caddy installations. diff --git a/changelog.d/2132.bugfix.md b/changelog.d/2132.bugfix.md deleted file mode 100644 index 770e486ed..000000000 --- a/changelog.d/2132.bugfix.md +++ /dev/null @@ -1 +0,0 @@ -Fixed federated space hierarchies omitting rooms restricted to members of private spaces. Contributed by @eleboucher. diff --git a/changelog.d/2137.bugfix.md b/changelog.d/2137.bugfix.md deleted file mode 100644 index dd7d5a1a0..000000000 --- a/changelog.d/2137.bugfix.md +++ /dev/null @@ -1 +0,0 @@ -A panic during transaction handling will no longer cause the handle tracker to reference a stale transaction, which caused federation between two servers to fail until continuwuity was restarted. Contributed by @nex. diff --git a/changelog.d/2164.bugfix.md b/changelog.d/2164.bugfix.md deleted file mode 100644 index 59ef5043d..000000000 --- a/changelog.d/2164.bugfix.md +++ /dev/null @@ -1 +0,0 @@ -Fixed event tracking forgetting to mark soft-failed/rejected events as referenced, which caused a build-up of incorrectly unreferenced events, triggering frequent dummy squashes and associated state resets. diff --git a/changelog.d/SEC26.bugfix.md b/changelog.d/SEC26.bugfix.md deleted file mode 100644 index 5bde5ccdc..000000000 --- a/changelog.d/SEC26.bugfix.md +++ /dev/null @@ -1 +0,0 @@ -Fixed a vulnerability that enabled the server to leak certain events over federation. Contributed by @eleboucher. diff --git a/changelog.d/SEC28.bugfix.md b/changelog.d/SEC28.bugfix.md deleted file mode 100644 index 71a68f2a2..000000000 --- a/changelog.d/SEC28.bugfix.md +++ /dev/null @@ -1 +0,0 @@ -Fixed an issue that allowed an attacker to take over another account on the same server under certain conditions. ([GHSA-v2x6-m99h-vqxx](https://github.com/continuwuity/continuwuity/security/advisories/GHSA-v2x6-m99h-vqxx)) Contributed by @gingershaped and reported by GlitchedAxiom.