Log Message:
Update chat/matrix-synapse to 1.28.0

Synapse 1.28.0 (2021-02-25)
===========================

Note that this release drops support for ARMv7 in the official Docker images, \ 
due to repeated problems building for ARMv7 (and the associated maintenance \ 
burden this entails).

This release also fixes the documentation included in v1.27.0 around the \ 
callback URI for SAML2 identity providers. If your server is configured to use \ 
single sign-on via a SAML2 IdP, you may need to make configuration changes. \ 
Please review [UPGRADE.rst](UPGRADE.rst) for more details on these changes.

Internal Changes
----------------

- Revert change in v1.28.0rc1 to remove the deprecated SAML endpoint. \ 
([\#9474](https://github.com/matrix-org/synapse/issues/9474))

Synapse 1.28.0rc1 (2021-02-19)
==============================

Removal warning
---------------

The v1 list accounts API is deprecated and will be removed in a future release.
This API was undocumented and misleading. It can be replaced by the
[v2 list accounts \ 
API](https://github.com/matrix-org/synapse/blob/release-v1.28.0/docs/admin_api/user_admin_api.rst#list-accounts),
which has been available since Synapse 1.7.0 (2019-12-13).

Please check if you're using any scripts which use the admin API and replace
`GET /_synapse/admin/v1/users/<user_id>` with `GET /_synapse/admin/v2/users`.

Features
--------

- New admin API to get the context of an event: \ 
`/_synapse/admin/rooms/{roomId}/context/{eventId}`. \ 
([\#9150](https://github.com/matrix-org/synapse/issues/9150))
- Further improvements to the user experience of registration via single \ 
sign-on. ([\#9300](https://github.com/matrix-org/synapse/issues/9300), \ 
[\#9301](https://github.com/matrix-org/synapse/issues/9301))
- Add hook to spam checker modules that allow checking file uploads and remote \ 
downloads. ([\#9311](https://github.com/matrix-org/synapse/issues/9311))
- Add support for receiving OpenID Connect authentication responses via form \ 
`POST`s rather than `GET`s. \ 
([\#9376](https://github.com/matrix-org/synapse/issues/9376))
- Add the shadow-banning status to the admin API for user info. \ 
([\#9400](https://github.com/matrix-org/synapse/issues/9400))

Bugfixes
--------

- Fix long-standing bug where sending email notifications would fail for rooms \ 
that the server had since left. \ 
([\#9257](https://github.com/matrix-org/synapse/issues/9257))
- Fix bug introduced in Synapse 1.27.0rc1 which meant the "session \ 
expired" error page during SSO registration was badly formatted. \ 
([\#9296](https://github.com/matrix-org/synapse/issues/9296))
- Assert a maximum length for some parameters for spec compliance. \ 
([\#9321](https://github.com/matrix-org/synapse/issues/9321), \ 
[\#9393](https://github.com/matrix-org/synapse/issues/9393))
- Fix additional errors when previewing URLs: "AttributeError 'NoneType' \ 
object has no attribute 'xpath'" and "ValueError: Unicode strings with \ 
encoding declaration are not supported. Please use bytes input or XML fragments \ 
without declaration.". \ 
([\#9333](https://github.com/matrix-org/synapse/issues/9333))
- Fix a bug causing Synapse to impose the wrong type constraints on fields when \ 
processing responses from appservices to \ 
`/_matrix/app/v1/thirdparty/user/{protocol}`. \ 
([\#9361](https://github.com/matrix-org/synapse/issues/9361))
- Fix bug where Synapse would occasionally stop reconnecting to Redis after the \ 
connection was lost. \ 
([\#9391](https://github.com/matrix-org/synapse/issues/9391))
- Fix a long-standing bug when upgrading a room: "TypeError: '>' not \ 
supported between instances of 'NoneType' and 'int'". \ 
([\#9395](https://github.com/matrix-org/synapse/issues/9395))
- Reduce the amount of memory used when generating the URL preview of a file \ 
that is larger than the `max_spider_size`. \ 
([\#9421](https://github.com/matrix-org/synapse/issues/9421))
- Fix a long-standing bug in the deduplication of old presence, resulting in no \ 
deduplication. ([\#9425](https://github.com/matrix-org/synapse/issues/9425))
- The `ui_auth.session_timeout` config option can now be specified in terms of \ 
number of seconds/minutes/etc/. Contributed by Rishabh Arya. \ 
([\#9426](https://github.com/matrix-org/synapse/issues/9426))
- Fix a bug introduced in v1.27.0: "TypeError: int() argument must be a \ 
string, a bytes-like object or a number, not 'NoneType." related to the \ 
user directory. ([\#9428](https://github.com/matrix-org/synapse/issues/9428))

Updates to the Docker image
---------------------------

- Drop support for ARMv7 in Docker images. \ 
([\#9433](https://github.com/matrix-org/synapse/issues/9433))

Improved Documentation
----------------------

- Reorganize CHANGELOG.md. \ 
([\#9281](https://github.com/matrix-org/synapse/issues/9281))
- Add note to `auto_join_rooms` config option explaining existing rooms must be \ 
publicly joinable. ([\#9291](https://github.com/matrix-org/synapse/issues/9291))
- Correct name of Synapse's service file in TURN howto. \ 
([\#9308](https://github.com/matrix-org/synapse/issues/9308))
- Fix the braces in the `oidc_providers` section of the sample config. \ 
([\#9317](https://github.com/matrix-org/synapse/issues/9317))
- Update installation instructions on Fedora. \ 
([\#9322](https://github.com/matrix-org/synapse/issues/9322))
- Add HTTP/2 support to the nginx example configuration. Contributed by David \ 
Vo. ([\#9390](https://github.com/matrix-org/synapse/issues/9390))
- Update docs for using Gitea as OpenID provider. \ 
([\#9404](https://github.com/matrix-org/synapse/issues/9404))
- Document that pusher instances are shardable. \ 
([\#9407](https://github.com/matrix-org/synapse/issues/9407))
- Fix erroneous documentation from v1.27.0 about updating the SAML2 callback \ 
URL. ([\#9434](https://github.com/matrix-org/synapse/issues/9434))

Deprecations and Removals
-------------------------

- Deprecate old admin API `GET /_synapse/admin/v1/users/<user_id>`. \ 
([\#9429](https://github.com/matrix-org/synapse/issues/9429))

Internal Changes
----------------

- Fix 'object name reserved for internal use' errors with recent versions of \ 
SQLite. ([\#9003](https://github.com/matrix-org/synapse/issues/9003))
- Add experimental support for running Synapse with PyPy. \ 
([\#9123](https://github.com/matrix-org/synapse/issues/9123))
- Deny access to additional IP addresses by default. \ 
([\#9240](https://github.com/matrix-org/synapse/issues/9240))
- Update the `Cursor` type hints to better match PEP 249. \ 
([\#9299](https://github.com/matrix-org/synapse/issues/9299))
- Add debug logging for SRV lookups. Contributed by @Bubu. \ 
([\#9305](https://github.com/matrix-org/synapse/issues/9305))
- Improve logging for OIDC login flow. \ 
([\#9307](https://github.com/matrix-org/synapse/issues/9307))
- Share the code for handling required attributes between the CAS and SAML \ 
handlers. ([\#9326](https://github.com/matrix-org/synapse/issues/9326))
- Clean up the code to load the metadata for OpenID Connect identity providers. \ 
([\#9362](https://github.com/matrix-org/synapse/issues/9362))
- Convert tests to use `HomeserverTestCase`. \ 
([\#9377](https://github.com/matrix-org/synapse/issues/9377), \ 
[\#9396](https://github.com/matrix-org/synapse/issues/9396))
- Update the version of black used to 20.8b1. \ 
([\#9381](https://github.com/matrix-org/synapse/issues/9381))
- Allow OIDC config to override discovered values. \ 
([\#9384](https://github.com/matrix-org/synapse/issues/9384))
- Remove some dead code from the acceptance of room invites path. \ 
([\#9394](https://github.com/matrix-org/synapse/issues/9394))
- Clean up an unused method in the presence handler code. \ 
([\#9408](https://github.com/matrix-org/synapse/issues/9408))

Synapse 1.27.0 (2021-02-16)
===========================

Note that this release includes a change in Synapse to use Redis as a cache ─ \ 
as well as a pub/sub mechanism ─ if Redis support is enabled for workers. No \ 
action is needed by server administrators, and we do not expect resource usage \ 
of the Redis instance to change dramatically.

This release also changes the callback URI for OpenID Connect (OIDC) and SAML2 \ 
identity providers. If your server is configured to use single sign-on via an \ 
OIDC/OAuth2 or SAML2 IdP, you may need to make configuration changes. Please \ 
review [UPGRADE.rst](UPGRADE.rst) for more details on these changes.

This release also changes escaping of variables in the HTML templates for SSO or \ 
email notifications. If you have customised these templates, please review \ 
[UPGRADE.rst](UPGRADE.rst) for more details on these changes.

Bugfixes
--------

- Fix building Docker images for armv7. \ 
([\#9405](https://github.com/matrix-org/synapse/issues/9405))

Synapse 1.27.0rc2 (2021-02-11)
==============================

Features
--------

- Further improvements to the user experience of registration via single \ 
sign-on. ([\#9297](https://github.com/matrix-org/synapse/issues/9297))

Bugfixes
--------

- Fix ratelimiting introduced in v1.27.0rc1 for invites to respect the \ 
`ratelimit` flag on application services. \ 
([\#9302](https://github.com/matrix-org/synapse/issues/9302))
- Do not automatically calculate `public_baseurl` since it can be wrong in some \ 
situations. Reverts behaviour introduced in v1.26.0. \ 
([\#9313](https://github.com/matrix-org/synapse/issues/9313))

Improved Documentation
----------------------

- Clarify the sample configuration for changes made to the template loading \ 
code. ([\#9310](https://github.com/matrix-org/synapse/issues/9310))

Synapse 1.27.0rc1 (2021-02-02)
==============================

Features
--------

- Add an admin API for getting and deleting forward extremities for a room. \ 
([\#9062](https://github.com/matrix-org/synapse/issues/9062))
- Add an admin API for retrieving the current room state of a room. \ 
([\#9168](https://github.com/matrix-org/synapse/issues/9168))
- Add experimental support for allowing clients to pick an SSO Identity Provider \ 
([MSC2858](https://github.com/matrix-org/matrix-doc/pull/2858)). \ 
([\#9183](https://github.com/matrix-org/synapse/issues/9183), \ 
[\#9242](https://github.com/matrix-org/synapse/issues/9242))
- Add an admin API endpoint for shadow-banning users. \ 
([\#9209](https://github.com/matrix-org/synapse/issues/9209))
- Add ratelimits to the 3PID `/requestToken` APIs. \ 
([\#9238](https://github.com/matrix-org/synapse/issues/9238))
- Add support to the OpenID Connect integration for adding the user's email \ 
address. ([\#9245](https://github.com/matrix-org/synapse/issues/9245))
- Add ratelimits to invites in rooms and to specific users. \ 
([\#9258](https://github.com/matrix-org/synapse/issues/9258))
- Improve the user experience of setting up an account via single-sign on. \ 
([\#9262](https://github.com/matrix-org/synapse/issues/9262), \ 
[\#9272](https://github.com/matrix-org/synapse/issues/9272), \ 
[\#9275](https://github.com/matrix-org/synapse/issues/9275), \ 
[\#9276](https://github.com/matrix-org/synapse/issues/9276), \ 
[\#9277](https://github.com/matrix-org/synapse/issues/9277), \ 
[\#9286](https://github.com/matrix-org/synapse/issues/9286), \ 
[\#9287](https://github.com/matrix-org/synapse/issues/9287))
- Add phone home stats for encrypted messages. \ 
([\#9283](https://github.com/matrix-org/synapse/issues/9283))
- Update the redirect URI for OIDC authentication. \ 
([\#9288](https://github.com/matrix-org/synapse/issues/9288))

Bugfixes
--------

- Fix spurious errors in logs when deleting a non-existant pusher. \ 
([\#9121](https://github.com/matrix-org/synapse/issues/9121))
- Fix a long-standing bug where Synapse would return a 500 error when a \ 
thumbnail did not exist (and auto-generation of thumbnails was not enabled). \ 
([\#9163](https://github.com/matrix-org/synapse/issues/9163))
- Fix a long-standing bug where an internal server error was raised when \ 
attempting to preview an HTML document in an unknown character encoding. \ 
([\#9164](https://github.com/matrix-org/synapse/issues/9164))
- Fix a long-standing bug where invalid data could cause errors when calculating \ 
the presentable room name for push. \ 
([\#9165](https://github.com/matrix-org/synapse/issues/9165))
- Fix bug where we sometimes didn't detect that Redis connections had died, \ 
causing workers to not see new data. \ 
([\#9218](https://github.com/matrix-org/synapse/issues/9218))
- Fix a bug where `None` was passed to Synapse modules instead of an empty \ 
dictionary if an empty module `config` block was provided in the homeserver \ 
config. ([\#9229](https://github.com/matrix-org/synapse/issues/9229))
- Fix a bug in the `make_room_admin` admin API where it failed if the admin with \ 
the greatest power level was not in the room. Contributed by Pankaj Yadav. \ 
([\#9235](https://github.com/matrix-org/synapse/issues/9235))
- Prevent password hashes from getting dropped if a client failed threepid \ 
validation during a User Interactive Auth stage. Removes a workaround for an \ 
ancient bug in Riot Web <v0.7.4. \ 
([\#9265](https://github.com/matrix-org/synapse/issues/9265))
- Fix single-sign-on when the endpoints are routed to synapse workers. \ 
([\#9271](https://github.com/matrix-org/synapse/issues/9271))

Improved Documentation
----------------------

- Add docs for using Gitea as OpenID provider. \ 
([\#9134](https://github.com/matrix-org/synapse/issues/9134))
- Add link to Matrix VoIP tester for turn-howto. \ 
([\#9135](https://github.com/matrix-org/synapse/issues/9135))
- Add notes on integrating with Facebook for SSO login. \ 
([\#9244](https://github.com/matrix-org/synapse/issues/9244))

Deprecations and Removals
-------------------------

- The `service_url` parameter in `cas_config` is deprecated in favor of \ 
`public_baseurl`. ([\#9199](https://github.com/matrix-org/synapse/issues/9199))
- Add new endpoint `/_synapse/client/saml2` for SAML2 authentication callbacks, \ 
and deprecate the old endpoint `/_matrix/saml2`. \ 
([\#9289](https://github.com/matrix-org/synapse/issues/9289))

Internal Changes
----------------

- Add tests to `test_user.UsersListTestCase` for List Users Admin API. \ 
([\#9045](https://github.com/matrix-org/synapse/issues/9045))
- Various improvements to the federation client. \ 
([\#9129](https://github.com/matrix-org/synapse/issues/9129))
- Speed up chain cover calculation when persisting a batch of state events at \ 
once. ([\#9176](https://github.com/matrix-org/synapse/issues/9176))
- Add a `long_description_type` to the package metadata. \ 
([\#9180](https://github.com/matrix-org/synapse/issues/9180))
- Speed up batch insertion when using PostgreSQL. \ 
([\#9181](https://github.com/matrix-org/synapse/issues/9181), \ 
[\#9188](https://github.com/matrix-org/synapse/issues/9188))
- Emit an error at startup if different Identity Providers are configured with \ 
the same `idp_id`. ([\#9184](https://github.com/matrix-org/synapse/issues/9184))
- Improve performance of concurrent use of `StreamIDGenerators`. \ 
([\#9190](https://github.com/matrix-org/synapse/issues/9190))
- Add some missing source directories to the automatic linting script. \ 
([\#9191](https://github.com/matrix-org/synapse/issues/9191))
- Precompute joined hosts and store in Redis. \ 
([\#9198](https://github.com/matrix-org/synapse/issues/9198), \ 
[\#9227](https://github.com/matrix-org/synapse/issues/9227))
- Clean-up template loading code. \ 
([\#9200](https://github.com/matrix-org/synapse/issues/9200))
- Fix the Python 3.5 old dependencies build. \ 
([\#9217](https://github.com/matrix-org/synapse/issues/9217))
- Update `isort` to v5.7.0 to bypass a bug where it would disagree with `black` \ 
about formatting. ([\#9222](https://github.com/matrix-org/synapse/issues/9222))
- Add type hints to handlers code. \ 
([\#9223](https://github.com/matrix-org/synapse/issues/9223), \ 
[\#9232](https://github.com/matrix-org/synapse/issues/9232))
- Fix Debian package building on Ubuntu 16.04 LTS (Xenial). \ 
([\#9254](https://github.com/matrix-org/synapse/issues/9254))
- Minor performance improvement during TLS handshake. \ 
([\#9255](https://github.com/matrix-org/synapse/issues/9255))
- Refactor the generation of summary text for email notifications. \ 
([\#9260](https://github.com/matrix-org/synapse/issues/9260))
- Restore PyPy compatibility by not calling CPython-specific GC methods when \ 
under PyPy. ([\#9270](https://github.com/matrix-org/synapse/issues/9270))