Path to this page:
Subject: CVS commit: pkgsrc/chat/element-web
From: Jonathan Schleifer
Date: 2023-07-20 21:57:08
Message id: 20230720195708.2DD2CFBDB@cvs.NetBSD.org
Log Message:
Update chat/element-web to 1.11.36
Contains important security updates.
Changes in \
[1.11.36](https://github.com/vector-im/element-web/releases/tag/v1.11.36) \
(2023-07-18)
================================================================================ \
=================
## 🔒 Security
* Fixes for \
[CVE-2023-37259](https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=CVE-2023-37259) \
/ \
[GHSA-c9vx-2g7w-rp65](https://github.com/matrix-org/matrix-react-sdk/security/advisories/GHSA-c9vx-2g7w-rp65)
## 🦖 Deprecations
* Deprecate customisations in favour of Module API \
([\#25736](https://github.com/vector-im/element-web/pull/25736)). Fixes #25733.
## ✨ Features
* OIDC: store initial screen in session storage \
([\#25688](https://github.com/vector-im/element-web/pull/25688)). Fixes #25656. \
Contributed by @kerryarchibald.
* Allow default_server_config as a fallback config \
([\#25682](https://github.com/vector-im/element-web/pull/25682)). Contributed by \
@ShadowRZ.
* OIDC: remove auth params from url after login attempt \
([\#25664](https://github.com/vector-im/element-web/pull/25664)). Contributed by \
@kerryarchibald.
* feat(faq): remove keyboard shortcuts button \
([\#9342](https://github.com/matrix-org/matrix-react-sdk/pull/9342)). Fixes \
#22625. Contributed by @gefgu.
* GYU: Update banner \
([\#11211](https://github.com/matrix-org/matrix-react-sdk/pull/11211)). Fixes \
#25530. Contributed by @justjanne.
* Linkify mxc:// URLs as links to your media repo \
([\#11213](https://github.com/matrix-org/matrix-react-sdk/pull/11213)). Fixes \
#6942.
* OIDC: Log in \
([\#11199](https://github.com/matrix-org/matrix-react-sdk/pull/11199)). Fixes \
#25657. Contributed by @kerryarchibald.
* Handle all permitted url schemes in linkify \
([\#11215](https://github.com/matrix-org/matrix-react-sdk/pull/11215)). Fixes \
#4457 and #8720.
* Autoapprove Element Call oidc requests \
([\#11209](https://github.com/matrix-org/matrix-react-sdk/pull/11209)). \
Contributed by @toger5.
* Allow creating knock rooms \
([\#11182](https://github.com/matrix-org/matrix-react-sdk/pull/11182)). \
Contributed by @charlynguyen.
* Expose and pre-populate thread ID in devtools dialog \
([\#10953](https://github.com/matrix-org/matrix-react-sdk/pull/10953)).
* Hide URL preview if it will be empty \
([\#9029](https://github.com/matrix-org/matrix-react-sdk/pull/9029)).
* Change wording from avatar to profile picture \
([\#7015](https://github.com/matrix-org/matrix-react-sdk/pull/7015)). Fixes \
vector-im/element-meta#1331. Contributed by @aaronraimist.
* Quick and dirty devtool to explore state history \
([\#11197](https://github.com/matrix-org/matrix-react-sdk/pull/11197)).
* Consider more user inputs when calculating zxcvbn score \
([\#11180](https://github.com/matrix-org/matrix-react-sdk/pull/11180)).
* GYU: Account Notification Settings \
([\#11008](https://github.com/matrix-org/matrix-react-sdk/pull/11008)). Fixes \
#24567. Contributed by @justjanne.
* Compound Typography pass \
([\#11103](https://github.com/matrix-org/matrix-react-sdk/pull/11103)). Fixes \
#25548.
* OIDC: navigate to authorization endpoint \
([\#11096](https://github.com/matrix-org/matrix-react-sdk/pull/11096)). Fixes \
#25574. Contributed by @kerryarchibald.
## 🐛 Bug Fixes
* Fix read receipt sending behaviour around thread roots \
([\#3600](https://github.com/matrix-org/matrix-js-sdk/pull/3600)).
* Fix missing metaspace notification badges \
([\#11269](https://github.com/matrix-org/matrix-react-sdk/pull/11269)). Fixes \
#25679.
* Make checkboxes less rounded \
([\#11224](https://github.com/matrix-org/matrix-react-sdk/pull/11224)). \
Contributed by @andybalaam.
* GYU: Fix issues with audible keywords without activated mentions \
([\#11218](https://github.com/matrix-org/matrix-react-sdk/pull/11218)). \
Contributed by @justjanne.
* PosthogAnalytics unwatch settings on logout \
([\#11207](https://github.com/matrix-org/matrix-react-sdk/pull/11207)). Fixes \
#25703.
* Avoid trying to set room account data for pinned events as guest \
([\#11216](https://github.com/matrix-org/matrix-react-sdk/pull/11216)). Fixes \
#6300.
* GYU: Disable sound for DMs checkbox when DM notifications are disabled \
([\#11210](https://github.com/matrix-org/matrix-react-sdk/pull/11210)). \
Contributed by @justjanne.
* force to allow calls without video and audio in embedded mode \
([\#11131](https://github.com/matrix-org/matrix-react-sdk/pull/11131)). \
Contributed by @EnricoSchw.
* Fix room tile text clipping \
([\#11196](https://github.com/matrix-org/matrix-react-sdk/pull/11196)). Fixes \
#25718.
* Handle newlines in user pills \
([\#11166](https://github.com/matrix-org/matrix-react-sdk/pull/11166)). Fixes \
#10994.
* Limit width of user menu in space panel \
([\#11192](https://github.com/matrix-org/matrix-react-sdk/pull/11192)). Fixes \
#22627.
* Add isLocation to ComposerEvent analytics events \
([\#11187](https://github.com/matrix-org/matrix-react-sdk/pull/11187)). \
Contributed by @andybalaam.
* Fix: hide unsupported login elements \
([\#11185](https://github.com/matrix-org/matrix-react-sdk/pull/11185)). Fixes \
#25711. Contributed by @kerryarchibald.
* Scope smaller font size to user info panel \
([\#11178](https://github.com/matrix-org/matrix-react-sdk/pull/11178)). Fixes \
#25683.
* Apply i18n to strings in the html export \
([\#11176](https://github.com/matrix-org/matrix-react-sdk/pull/11176)).
* Inhibit url previews on MXIDs containing slashes same as those without \
([\#11160](https://github.com/matrix-org/matrix-react-sdk/pull/11160)).
* Make event info size consistent with state events \
([\#11181](https://github.com/matrix-org/matrix-react-sdk/pull/11181)).
* Fix markdown content spacing \
([\#11177](https://github.com/matrix-org/matrix-react-sdk/pull/11177)). Fixes \
#25685.
* Fix font-family definition for emojis \
([\#11170](https://github.com/matrix-org/matrix-react-sdk/pull/11170)). Fixes \
#25686.
* Fix spurious error sending receipt in thread errors \
([\#11157](https://github.com/matrix-org/matrix-react-sdk/pull/11157)).
* Consider the empty push rule actions array equiv to deprecated dont_notify \
([\#11155](https://github.com/matrix-org/matrix-react-sdk/pull/11155)). Fixes \
#25674.
* Only trap escape key for cancel reply if there is a reply \
([\#11140](https://github.com/matrix-org/matrix-react-sdk/pull/11140)). Fixes \
#25640.
* Update linkify to 4.1.1 \
([\#11132](https://github.com/matrix-org/matrix-react-sdk/pull/11132)). Fixes \
#23806.
Changes in \
[1.11.35](https://github.com/vector-im/element-web/releases/tag/v1.11.35) \
(2023-07-04)
================================================================================ \
=================
## 🦖 Deprecations
* Remove `feature_favourite_messages` as it is has been abandoned for now \
([\#11097](https://github.com/matrix-org/matrix-react-sdk/pull/11097)). Fixes \
#25555.
## ✨ Features
* Don't setup keys on login when encryption is force disabled \
([\#11125](https://github.com/matrix-org/matrix-react-sdk/pull/11125)). \
Contributed by @kerryarchibald.
* OIDC: attempt dynamic client registration \
([\#11074](https://github.com/matrix-org/matrix-react-sdk/pull/11074)). Fixes \
#25468 and #25467. Contributed by @kerryarchibald.
* OIDC: Check static client registration and add login flow \
([\#11088](https://github.com/matrix-org/matrix-react-sdk/pull/11088)). Fixes \
#25467. Contributed by @kerryarchibald.
* Improve message body output from plain text editor \
([\#11124](https://github.com/matrix-org/matrix-react-sdk/pull/11124)). \
Contributed by @alunturner.
* Disable encryption toggle in room settings when force disabled \
([\#11122](https://github.com/matrix-org/matrix-react-sdk/pull/11122)). \
Contributed by @kerryarchibald.
* Add .well-known config option to force disable encryption on room creation \
([\#11120](https://github.com/matrix-org/matrix-react-sdk/pull/11120)). \
Contributed by @kerryarchibald.
* Handle permalinks in room topic \
([\#11115](https://github.com/matrix-org/matrix-react-sdk/pull/11115)). Fixes \
#23395.
* Add at room avatar for RTE \
([\#11106](https://github.com/matrix-org/matrix-react-sdk/pull/11106)). \
Contributed by @alunturner.
* Remove new room breadcrumbs \
([\#11104](https://github.com/matrix-org/matrix-react-sdk/pull/11104)).
* Update rich text editor dependency and associated changes \
([\#11098](https://github.com/matrix-org/matrix-react-sdk/pull/11098)). \
Contributed by @alunturner.
* Implement new model, hooks and reconcilation code for new GYU notification \
settings ([\#11089](https://github.com/matrix-org/matrix-react-sdk/pull/11089)). \
Contributed by @justjanne.
* Allow maintaining a different right panel width for thread panels \
([\#11064](https://github.com/matrix-org/matrix-react-sdk/pull/11064)). Fixes \
#25487.
* Make AppPermission pane scrollable \
([\#10954](https://github.com/matrix-org/matrix-react-sdk/pull/10954)). Fixes \
#25438 and #25511. Contributed by @luixxiul.
* Integrate compound design tokens \
([\#11091](https://github.com/matrix-org/matrix-react-sdk/pull/11091)). Fixes \
vector-im/internal-planning#450.
* Don't warn about the effects of redacting state events when redacting \
non-state-events \
([\#11071](https://github.com/matrix-org/matrix-react-sdk/pull/11071)). Fixes \
#8478.
* Allow specifying help URLs in config.json \
([\#11070](https://github.com/matrix-org/matrix-react-sdk/pull/11070)). Fixes \
#15268.
## 🐛 Bug Fixes
* Fix error when generating error for polling for updates \
([\#25609](https://github.com/vector-im/element-web/pull/25609)).
* Fix spurious notifications on non-live events \
([\#11133](https://github.com/matrix-org/matrix-react-sdk/pull/11133)). Fixes \
#24336.
* Prevent auto-translation within composer \
([\#11114](https://github.com/matrix-org/matrix-react-sdk/pull/11114)). Fixes \
#25624.
* Fix caret jump when backspacing into empty line at beginning of editor \
([\#11128](https://github.com/matrix-org/matrix-react-sdk/pull/11128)). Fixes \
#22335.
* Fix server picker not allowing you to switch from custom to default \
([\#11127](https://github.com/matrix-org/matrix-react-sdk/pull/11127)). Fixes \
#25650.
* Consider the unthreaded read receipt for Unread dot state \
([\#11117](https://github.com/matrix-org/matrix-react-sdk/pull/11117)). Fixes \
#24229.
* Increase RTE resilience \
([\#11111](https://github.com/matrix-org/matrix-react-sdk/pull/11111)). Fixes \
#25277. Contributed by @alunturner.
* Fix RoomView ignoring alias lookup errors due to them not knowing the roomId \
([\#11099](https://github.com/matrix-org/matrix-react-sdk/pull/11099)). Fixes \
#24783 and #25562.
* Fix style inconsistencies on SecureBackupPanel \
([\#11102](https://github.com/matrix-org/matrix-react-sdk/pull/11102)). Fixes \
#25615. Contributed by @luixxiul.
* Remove unknown MXIDs from invite suggestions \
([\#11055](https://github.com/matrix-org/matrix-react-sdk/pull/11055)). Fixes \
#25446.
* Reduce volume of ring sounds to normalised levels \
([\#9143](https://github.com/matrix-org/matrix-react-sdk/pull/9143)). \
Contributed by @JMoVS.
* Fix slash commands not being enabled in certain cases \
([\#11090](https://github.com/matrix-org/matrix-react-sdk/pull/11090)). Fixes \
#25572.
* Prevent escape in threads from sending focus to main timeline composer \
([\#11061](https://github.com/matrix-org/matrix-react-sdk/pull/11061)). Fixes \
#23397.
Files: