Dendrite 0.14.1

⚠ Important

This is a security release, gomatrixserverlib was vulnerable to server-side request forgery, serving content from a private network it can access, under certain conditions.

Upgrading to this version is highly recommended.

Security

• Support for blocking access to certain networks, fixing CVE-2024-52594 and GHSA-4ff6-858j-r822

Fixes

• Speed-up loading server ACLs on startup, this is mostly noticeable on larger instances with many rooms.

What's Changed

What's Changed

• Speed up loading ACLs on startup by @S7evinK in #3469
• Update DCO in the GH PR template and the docs by @S7evinK in #3496
• Version v0.14.1 by @S7evinK in #3501

Full Changelog: v0.14.0...v0.14.1

helm-dendrite-0.15.1

Dendrite Matrix Homeserver

Dendrite 0.14.0

This is the first release after forking matrix-org/dendrite, this repository is now licensed under AGPLv3.0.

Upgrading to this version is highly recommended, as it fixes several long-standing bugs which could lead to state resets.
It also improves performance and memory usage.

Features

• The required Go version to build Dendrite is now 1.22
• Support for listening and connecting to I2P and Onion services was added (contributed by eyedeekay)
• Add via parameter on join room requests as per MSC4156 (contributed by Johennes)
• Support for fallback keys has been added (contributed by neilalexander)
• Dendrite now supports MSC4225
• Updated dependencies
  • Internal NATS Server has been updated from v2.10.20 to v2.10.23 (contributed by neilalexander)
  • gomatrixserverlib has been updated, which includes several performance improvements

Fixes

• Correctly respond to OPTIONS requests on authed media endpoints (contributed by arenekosreal)
• A long-standing bug which could lead to state resets has been fixed (contributed by neilalexander)
  • Note: While state resets should happen less frequently, they are still part of the Matrix protocol, so they are not entirely fixed.
  • Also, rooms which have been utterly broken may take some time to reconcile, it may be worth to leave, purge and rejoin such rooms.

What's Changed

• Add via parameter on join room requests as per MSC4156 by @Johennes in #3441
• Update dependencies by @neilalexander in #3449
• Add temporary repository flag by @S7evinK in #3453
• Various fixes in fetchAuthEvents by @S7evinK in #3447
• Add dependabot config by @S7evinK in #3450
• Support for fallback keys by @neilalexander in #3451
• Fetch oldest OTKs first (MSC4225) by @S7evinK in #3452
• Add GHA dependabot config, bump codecov action by @S7evinK in #3459
• Bump github.com/dgraph-io/ristretto from 0.1.1 to 0.2.0 by @dependabot in #3457
• Bump github.com/docker/docker from 25.0.6+incompatible to 26.1.0+incompatible by @dependabot in #3458
• Bump github.com/docker/docker from 26.1.0+incompatible to 26.1.5+incompatible by @dependabot in #3466
• Bump github.com/docker/go-connections from 0.4.0 to 0.5.0 by @dependabot in #3465
• Bump github.com/gorilla/websocket from 1.5.0 to 1.5.3 by @dependabot in #3455
• Bump nhooyr.io/websocket from 1.8.7 to 1.8.17 by @dependabot in #3456
• Bump actions/setup-go from 4 to 5 by @dependabot in #3462
• Bump actions/upload-pages-artifact from 1 to 3 by @dependabot in #3461
• Bump actions/setup-python from 4 to 5 by @dependabot in #3460
• Bump helm/chart-testing-action from 2.3.1 to 2.6.1 by @dependabot in #3463
• Bump yokawasa/action-setup-kube-tools from 0.8.2 to 0.11.2 by @dependabot in #3464
• Speedup building docker images in CI by @S7evinK in #3467
• Version 0.14.0 by @S7evinK in #3468

New Contributors

• @Johennes made their first contribution in #3441
• @neilalexander made their first contribution in #3449
• @S7evinK made their first contribution in #3453
• @dependabot made their first contribution in #3457

Full Changelog: https://github.com/element-hq/dendrite/commits/v0.14.0

helm-dendrite-0.15.0

Dendrite Matrix Homeserver