Log Message:
chat/matrix-synapse: Update to 1.91.0

packaging changes

  - avoid pydantic 2, as upstream has not yet coped with pydantic upstream \ 
instability
  - upstream dropped 3.7 after pkgsrc, so no action required

Upstream news

* 1.91.1

Features

    Implements an admin API to lock an user without deactivating them. Based on \ 
MSC3939. (#15870)
    Allow specifying client_secret_path as alternative to client_secret for OIDC \ 
providers. This avoids leaking the client secret in the homeserver config. \ 
Contributed by @Ma27. (#16030)
    Allow customising the IdP display name, icon, and brand for SAML and CAS \ 
providers (in addition to OIDC provider). (#16094)
    Add an admins query parameter to the List Accounts admin API, to include \ 
only admins or to exclude admins in user queries. (#16114)

Bugfixes

    [most omitted but the next line is very serious]
    Fix a bug introduced in 1.87 where synapse would send an excessive amount of \ 
federation requests to servers which have been offline for a long time. \ 
Contributed by Nico. (#16156, #16164)

* 1.90.0

Features

    Scope transaction IDs to devices (implement MSC3970). (#15629)
    Remove old rows from the cache_invalidation_stream_by_instance table \ 
automatically (this table is unused in SQLite). (#15868)

Deprecations and Removals

    Remove support for legacy application service paths. (#15964)
    Move support for application service query parameter authorization behind a \ 
configuration option. (#16017)

* 1.89.0

Features

    Add Unix Socket support for HTTP Replication Listeners. Document and provide \ 
usage instructions for utilizing Unix sockets in Synapse. Contributed by Jason \ 
Little. (#15708, #15924)
    Allow + in Matrix IDs, per MSC4009. (#15911)
    Support room version 11 from MSC3820. (#15912)
    Allow configuring the set of workers to proxy outbound federation traffic \ 
through via outbound_federation_restricted_to. (#15913, #15969)
    Implement MSC3814, dehydrated devices v2/shrivelled sessions and move \ 
MSC2697 behind a config flag. Contributed by Nico from Famedly, H-Shay and \ 
poljar. (#15929)

Deprecations and Removals

    Remove support for calling the /register endpoint with an unspecced user \ 
property for application services. (#15928)

* 1.88.0

Breaking Changes

    raises the minimum supported version of Python to 3.8, as Python 3.7 is now \ 
end-of-life, and
    removes deprecated config options related to worker deployment.

Features

    Add not_user_type param to the list accounts admin API. (#15844)

Deprecations and Removals

    Remove deprecated worker_replication_host, worker_replication_http_port and \ 
worker_replication_http_tls configuration options. See the upgrade notes for \ 
more details. (#15860)
    Remove support for Python 3.7 and hence for Debian Buster. (#15851, #15892, \ 
#15893, #15917)

* 1.87.0

Features

    Improve /messages response time by avoiding backfill when we already have \ 
messages to return. (#15737)
    Add spam checker module API for logins. (#15838)

Deprecations and Removals

    Remove experimental MSC2716 implementation to incrementally import history \ 
into existing rooms. (#15748)