Update dependency element-hq/matrix-authentication-service to v1.22.0

[renovate]

This PR contains the following updates:

Package	Update	Change
element-hq/matrix-authentication-service	minor	1.19.0 → 1.22.0

---

Pre-merge checks

• The Release Notes do not describe any breaking changes.

---

Release Notes

element-hq/matrix-authentication-service (element-hq/matrix-authentication-service)

v1.22.0

Compare Source

Docker image

Regular image:

• Digest:

  ghcr.io/element-hq/matrix-authentication-service@sha256:8cb319ec41706adc1ed8b5b63e1de2f067073cc33a304686226f658f5e83c8b3
  oci.element.io/matrix-authentication-service@sha256:8cb319ec41706adc1ed8b5b63e1de2f067073cc33a304686226f658f5e83c8b3
  

• Tags:

  ghcr.io/element-hq/matrix-authentication-service:1.22.0
  ghcr.io/element-hq/matrix-authentication-service:1.22
  ghcr.io/element-hq/matrix-authentication-service:1
  ghcr.io/element-hq/matrix-authentication-service:sha-f28451c
  ghcr.io/element-hq/matrix-authentication-service:latest
  oci.element.io/matrix-authentication-service:1.22.0
  oci.element.io/matrix-authentication-service:1.22
  oci.element.io/matrix-authentication-service:1
  oci.element.io/matrix-authentication-service:sha-f28451c
  oci.element.io/matrix-authentication-service:latest
  

Debug variant:

• Digest:

  ghcr.io/element-hq/matrix-authentication-service@sha256:beb6c2e50af088414202232f1c5c4ab5ff7c005d2cbc6f19aba8c39d44fa574c
  oci.element.io/matrix-authentication-service@sha256:beb6c2e50af088414202232f1c5c4ab5ff7c005d2cbc6f19aba8c39d44fa574c
  

• Tags:

  ghcr.io/element-hq/matrix-authentication-service:1.22.0-debug
  ghcr.io/element-hq/matrix-authentication-service:1.22-debug
  ghcr.io/element-hq/matrix-authentication-service:1-debug
  ghcr.io/element-hq/matrix-authentication-service:sha-f28451c-debug
  ghcr.io/element-hq/matrix-authentication-service:latest-debug
  oci.element.io/matrix-authentication-service:1.22.0-debug
  oci.element.io/matrix-authentication-service:1.22-debug
  oci.element.io/matrix-authentication-service:1-debug
  oci.element.io/matrix-authentication-service:sha-f28451c-debug
  oci.element.io/matrix-authentication-service:latest-debug
  

What's Changed

Bug Fixes

• Accept [ and ~ in OAuth 2.0 scope tokens by @​sandhose in #​5881
• Keep the auth action context when changing accounts by @​sandhose in #​5843

New Features

• Add password_file config variant for email and database by @​networkException in #​5449
• Replace Unix socket on startup & allow setting permissions by @​sandhose in #​5858
• Expose a logged_out variable to upstream authorization parameter templates by @​sandhose in #​5859

Changes to the admin API

• Admin API: allow searching in upstream OAuth links on 'human account name' by @​sandhose in #​5869

Translations

• Translations updates for main by @​matrixbot in #​5883
• Translations updates for v1.22 by @​matrixbot in #​5904

Internal Changes

• Automatic merge back to main by @​matrixbot in #​5865
• Automatic merge back to main by @​matrixbot in #​5870
• Automatic merge back to main by @​matrixbot in #​5872
• Speed up builds by using thin LTO and default codegen-units for release builds by @​sandhose in #​5879
• Speed up the ESS test CI job by @​sandhose in #​5877
• Ignore RUSTSEC-2026-0222 as we are not affected by it by @​sandhose in #​5903

Other Changes

• Move "Full release process" section higher up by @​MadLittleMods in #​5866
• Defer session creation to token exchange time by @​defaultdino in #​5606
• Allow setting a client_uri for static clients in the config by @​V02460 in #​5874
• Fix time-dependent snapshot test in account sessions page by @​sandhose in #​5876

Full Changelog: element-hq/matrix-authentication-service@v1.21.0...v1.22.0

v1.21.0

Compare Source

Docker image

Regular image:

• Digest:

  ghcr.io/element-hq/matrix-authentication-service@sha256:73bb86fb8f412082829e603417b2df3e351bbda79bedaa46beb0f3f533bdcc1c
  oci.element.io/matrix-authentication-service@sha256:73bb86fb8f412082829e603417b2df3e351bbda79bedaa46beb0f3f533bdcc1c
  

• Tags:

  ghcr.io/element-hq/matrix-authentication-service:1.21.0
  ghcr.io/element-hq/matrix-authentication-service:1.21
  ghcr.io/element-hq/matrix-authentication-service:1
  ghcr.io/element-hq/matrix-authentication-service:sha-49bc736
  ghcr.io/element-hq/matrix-authentication-service:latest
  oci.element.io/matrix-authentication-service:1.21.0
  oci.element.io/matrix-authentication-service:1.21
  oci.element.io/matrix-authentication-service:1
  oci.element.io/matrix-authentication-service:sha-49bc736
  oci.element.io/matrix-authentication-service:latest
  

Debug variant:

• Digest:

  ghcr.io/element-hq/matrix-authentication-service@sha256:2c5bb411bbff1e3078af7a8116b42ec825cb8343dd0f70730ed2378f5490862f
  oci.element.io/matrix-authentication-service@sha256:2c5bb411bbff1e3078af7a8116b42ec825cb8343dd0f70730ed2378f5490862f
  

• Tags:

  ghcr.io/element-hq/matrix-authentication-service:1.21.0-debug
  ghcr.io/element-hq/matrix-authentication-service:1.21-debug
  ghcr.io/element-hq/matrix-authentication-service:1-debug
  ghcr.io/element-hq/matrix-authentication-service:sha-49bc736-debug
  ghcr.io/element-hq/matrix-authentication-service:latest-debug
  oci.element.io/matrix-authentication-service:1.21.0-debug
  oci.element.io/matrix-authentication-service:1.21-debug
  oci.element.io/matrix-authentication-service:1-debug
  oci.element.io/matrix-authentication-service:sha-49bc736-debug
  oci.element.io/matrix-authentication-service:latest-debug
  

What's Changed

Bug Fixes

• Fix the HTTP client not setting the ALPN extension by @​sandhose in #​5758
• Fix the password complexity calculation always returning 0, preventing password changes by @​sandhose in #​5867

Documentation

• Align the configuration reference documentation, document missing options by @​sandhose in #​5748

Translations

• Automatically deprecate translation strings removed from the source code by @​sandhose in #​5860
• Translations updates for main by @​matrixbot in #​5861
• Translations updates for v1.21 by @​matrixbot in #​5868

Internal Changes

• Automatic merge back to main by @​matrixbot in #​5760
• Upgrade aide, schemars and axum by @​sandhose in #​5752
• Bump all frontend dependencies by @​sandhose in #​5842
• Don't show client URI on consent screen for Device Authorization Grant by @​hughns in #​5602
• Automatic merge back to main by @​matrixbot in #​5857

Other Changes

• Merge back v1.20 into main to fix CI by @​sandhose in #​5772

Dependency Updates

• build(deps-dev): bump the graphql-codegen group with 2 updates by @​dependabot[bot] in #​5774
• build(deps): bump base64ct from 1.8.0 to 1.8.3 by @​dependabot[bot] in #​5754
• build(deps): bump the i18next group across 1 directory with 2 updates by @​dependabot[bot] in #​5771
• build(deps): bump actions/checkout from 6.0.2 to 7.0.0 by @​dependabot[bot] in #​5768
• build(deps): bump codecov/codecov-action from 6.0.0 to 7.0.0 by @​dependabot[bot] in #​5764
• build(deps): bump docker/metadata-action from 6.0.0 to 6.1.0 by @​dependabot[bot] in #​5766
• build(deps): bump sigstore/cosign-installer from 4.1.1 to 4.1.2 by @​dependabot[bot] in #​5767
• build(deps): bump docker/login-action from 4.1.0 to 4.2.0 by @​dependabot[bot] in #​5765
• build(deps-dev): bump storybook from 10.4.1 to 10.4.6 in the storybook group across 1 directory by @​dependabot[bot] in #​5769
• build(deps-dev): bump vite-plugin-graphql-codegen from 3.9.1 to 4.0.1 in the vite group across 1 directory by @​dependabot[bot] in #​5770
• build(deps): bump the react group across 1 directory with 2 updates by @​dependabot[bot] in #​5773
• Upgrade ICU crates to 2.x by @​sandhose in #​5761
• build(deps): bump EmbarkStudios/cargo-deny-action from 2.0.16 to 2.0.20 by @​dependabot[bot] in #​5775
• build(deps): bump taiki-e/install-action from 2.79.2 to 2.82.0 by @​dependabot[bot] in #​5777
• build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by @​dependabot[bot] in #​5779
• build(deps): bump chrono from 0.4.42 to 0.4.45 by @​dependabot[bot] in #​5782
• build(deps): bump docker/bake-action from 7.1.0 to 7.2.0 by @​dependabot[bot] in #​5776
• build(deps): bump rustls-pki-types from 1.13.0 to 1.14.1 by @​dependabot[bot] in #​5781
• build(deps): bump pnpm/action-setup from 6.0.5 to 6.0.9 by @​dependabot[bot] in #​5778
• build(deps-dev): bump the storybook group with 2 updates by @​dependabot[bot] in #​5780
• build(deps): bump arc-swap from 1.8.1 to 1.9.1 by @​dependabot[bot] in #​5783
• build(deps): bump crc from 3.3.0 to 3.4.0 by @​dependabot[bot] in #​5784
• build(deps-dev): bump @​types/node from 25.9.1 to 25.9.3 in the types group across 1 directory by @​dependabot[bot] in #​5787
• build(deps): bump the tanstack-query group across 1 directory with 2 updates by @​dependabot[bot] in #​5786
• build(deps): bump tailscale/github-action from 4.1.1 to 4.1.2 by @​dependabot[bot] in #​5789
• build(deps): bump the tanstack-router group across 1 directory with 2 updates by @​dependabot[bot] in #​5785
• build(deps): bump serde_with from 3.14.0 to 3.21.0 by @​dependabot[bot] in #​5794
• build(deps): bump docker/setup-buildx-action from 4.0.0 to 4.1.0 by @​dependabot[bot] in #​5790
• build(deps): bump cookie_store from 0.22.0 to 0.22.1 by @​dependabot[bot] in #​5791
• build(deps): bump valibot from 1.4.0 to 1.4.1 by @​dependabot[bot] in #​5793
• build(deps-dev): bump knip from 6.14.2 to 6.17.1 by @​dependabot[bot] in #​5797
• build(deps): bump date-fns from 4.3.0 to 4.4.0 by @​dependabot[bot] in #​5795
• build(deps-dev): bump tailwindcss from 4.3.0 to 4.3.1 by @​dependabot[bot] in #​5798
• build(deps): bump socket2 from 0.6.2 to 0.6.4 by @​dependabot[bot] in #​5799
• build(deps): bump @​zxcvbn-ts/core from 3.0.4 to 4.1.2 by @​dependabot[bot] in #​5802
• build(deps): bump sd-notify from 0.4.5 to 0.5.0 by @​dependabot[bot] in #​5796
• build(deps): bump schemars from 1.1.0 to 1.2.1 by @​dependabot[bot] in #​5803
• build(deps): bump bytes from 1.11.1 to 1.12.0 by @​dependabot[bot] in #​5804
• build(deps): bump hyper-util from 0.1.18 to 0.1.20 by @​dependabot[bot] in #​5806
• build(deps): bump camino from 1.2.1 to 1.2.3 by @​dependabot[bot] in #​5808
• build(deps-dev): bump tinyglobby from 0.2.16 to 0.2.17 by @​dependabot[bot] in #​5805
• build(deps-dev): bump happy-dom from 20.9.0 to 20.10.6 by @​dependabot[bot] in #​5809
• build(deps): bump governor from 0.10.1 to 0.10.4 by @​dependabot[bot] in #​5810
• build(deps): bump tokio-stream from 0.1.17 to 0.1.18 by @​dependabot[bot] in #​5813
• build(deps-dev): bump @​biomejs/biome from 2.4.15 to 2.5.0 by @​dependabot[bot] in #​5814
• build(deps): bump compact_str from 0.9.0 to 0.9.1 by @​dependabot[bot] in #​5815
• build(deps): bump itertools from 0.14.0 to 0.15.0 by @​dependabot[bot] in #​5811
• build(deps): bump @​vector-im/compound-design-tokens from 10.2.0 to 10.2.2 by @​dependabot[bot] in #​5812
• build(deps): bump console from 0.15.11 to 0.16.3 by @​dependabot[bot] in #​5755
• build(deps): bump @​vector-im/compound-web from 9.3.0 to 9.4.1 by @​dependabot[bot] in #​5807
• build(deps): bump regex from 1.12.2 to 1.12.4 by @​dependabot[bot] in #​5820
• build(deps): bump futures-util from 0.3.31 to 0.3.32 by @​dependabot[bot] in #​5816
• build(deps): bump async-graphql from 7.0.17 to 7.2.1 by @​dependabot[bot] in #​5819
• build(deps-dev): bump semver from 7.8.1 to 7.8.4 by @​dependabot[bot] in #​5826
• build(deps): bump tokio-util from 0.7.16 to 0.7.18 by @​dependabot[bot] in #​5821
• build(deps): bump serde_json from 1.0.145 to 1.0.150 by @​dependabot[bot] in #​5823
• build(deps-dev): bump @​types/node from 25.9.3 to 26.0.0 in the types group by @​dependabot[bot] in #​5824
• build(deps-dev): bump @​localazy/cli from 2.0.10 to 2.0.11 by @​dependabot[bot] in #​5827
• build(deps): bump pest from 2.8.3 to 2.8.6 by @​dependabot[bot] in #​5828
• build(deps): bump bitflags from 2.10.0 to 2.13.0 by @​dependabot[bot] in #​5829
• build(deps): bump cron from 0.15.0 to 0.17.0 by @​dependabot[bot] in #​5822
• build(deps-dev): bump @​tailwindcss/vite from 4.3.0 to 4.3.1 by @​dependabot[bot] in #​5825
• build(deps): bump hyper-rustls from 0.27.7 to 0.27.9 by @​dependabot[bot] in #​5831
• build(deps): bump v_htmlescape from 0.15.8 to 0.17.0 by @​dependabot[bot] in #​5830
• build(deps): bump rustc-hash from 2.1.1 to 2.1.2 by @​dependabot[bot] in #​5836
• build(deps): bump pin-project-lite from 0.2.16 to 0.2.17 by @​dependabot[bot] in #​5835
• build(deps): bump zxcvbn from 3.1.0 to 3.1.1 by @​dependabot[bot] in #​5834
• build(deps): bump thiserror from 2.0.17 to 2.0.18 by @​dependabot[bot] in #​5833
• build(deps): bump ruma-common from 0.16.0 to 0.19.0 by @​dependabot[bot] in #​5832
• build(deps): bump zeroize from 1.8.2 to 1.9.0 by @​dependabot[bot] in #​5838
• build(deps): bump url from 2.5.7 to 2.5.8 by @​dependabot[bot] in #​5837
• build(deps): bump minijinja from 2.15.1 to 2.21.0 by @​dependabot[bot] in #​5839
• Update crossbeam-epoch to 0.9.20 to fix RUSTSEC-2026-0204 by @​sandhose in #​5849
• build(deps): bump tower from 0.5.2 to 0.5.3 by @​dependabot[bot] in #​5848
• build(deps): bump pest_derive from 2.8.3 to 2.8.6 by @​dependabot[bot] in #​5847
• build(deps): bump tokio from 1.48.0 to 1.50.0 by @​dependabot[bot] in #​5844
• build(deps): bump hyper from 1.8.1 to 1.10.1 by @​dependabot[bot] in #​5846
• build(deps): bump uuid from 1.18.1 to 1.23.3 by @​dependabot[bot] in #​5852
• build(deps): bump psl from 2.1.162 to 2.1.214 by @​dependabot[bot] in #​5853
• build(deps): bump convert_case from 0.9.0 to 0.11.0 by @​dependabot[bot] in #​5854

Full Changelog: element-hq/matrix-authentication-service@v1.20.0...v1.21.0

v1.20.0

Compare Source

Docker image

Regular image:

• Digest:

  ghcr.io/element-hq/matrix-authentication-service@sha256:1b0cc87ca6bd6186172a123228cfc3be4c94522d5ecc71e7baeaf23e48ce883a
  oci.element.io/matrix-authentication-service@sha256:1b0cc87ca6bd6186172a123228cfc3be4c94522d5ecc71e7baeaf23e48ce883a
  

• Tags:

  ghcr.io/element-hq/matrix-authentication-service:1.20.0
  ghcr.io/element-hq/matrix-authentication-service:1.20
  ghcr.io/element-hq/matrix-authentication-service:1
  ghcr.io/element-hq/matrix-authentication-service:sha-20a1f66
  ghcr.io/element-hq/matrix-authentication-service:latest
  oci.element.io/matrix-authentication-service:1.20.0
  oci.element.io/matrix-authentication-service:1.20
  oci.element.io/matrix-authentication-service:1
  oci.element.io/matrix-authentication-service:sha-20a1f66
  oci.element.io/matrix-authentication-service:latest
  

Debug variant:

• Digest:

  ghcr.io/element-hq/matrix-authentication-service@sha256:50c281a5ea2355ee45eb8805f4a825bd4bbb4dc5dbba026252c49dc38ecc3350
  oci.element.io/matrix-authentication-service@sha256:50c281a5ea2355ee45eb8805f4a825bd4bbb4dc5dbba026252c49dc38ecc3350
  

• Tags:

  ghcr.io/element-hq/matrix-authentication-service:1.20.0-debug
  ghcr.io/element-hq/matrix-authentication-service:1.20-debug
  ghcr.io/element-hq/matrix-authentication-service:1-debug
  ghcr.io/element-hq/matrix-authentication-service:sha-20a1f66-debug
  ghcr.io/element-hq/matrix-authentication-service:latest-debug
  oci.element.io/matrix-authentication-service:1.20.0-debug
  oci.element.io/matrix-authentication-service:1.20-debug
  oci.element.io/matrix-authentication-service:1-debug
  oci.element.io/matrix-authentication-service:sha-20a1f66-debug
  oci.element.io/matrix-authentication-service:latest-debug
  

What's Changed

Bug Fixes

• Fix the compat session API definition in the admin API spec by @​sandhose in #​5714

New Features

• Allow passing arbitrary values from clients down to upstream OAuth providers by @​sandhose in #​5677
• Track and log the client IP address by @​sandhose in #​5734
• Log the GraphQL operation type and name by @​sandhose in #​5736
• Record and log the requester on the request log line by @​sandhose in #​5735
• Track and log database statistics for every request and job by @​sandhose in #​5745
• Infer an initial name for the device for the device auth grant by @​sandhose in #​5750

Changes to the admin API

• Admin API: allow filtering OAuth 2.0 sessions by multiple clients by @​sandhose in #​5708
• Admin API: allow filtering of sessions by creation and last-activity time by @​sandhose in #​5709
• Admin API: filter users based on client usage by @​sandhose in #​5707
• Admin API: allow listing and viewing of OAuth 2.0 clients by @​sandhose in #​5710

Documentation

• Document the request log line by @​sandhose in #​5741

Translations

• Translations updates for main by @​matrixbot in #​5751
• Translations updates for main by @​matrixbot in #​5759
• Translations updates for v1.20 by @​matrixbot in #​5855

Internal Changes

• Automatic merge back to main by @​matrixbot in #​5729
• Automatic merge back to main by @​matrixbot in #​5740
• Bump Rust to 1.96.0 and fix clippy lints by @​sandhose in #​5733
• Use the public registry hostname in release notes by @​sandhose in #​5725
• Fix ESS test CI job by pinning the setup-ess-cluster-action to the latest version by @​sandhose in #​5743
• Decouple ULID generations from its own rand dependency by @​sandhose in #​5747
• deps: upgrade sea-query to 1.0, switch sea-query-binder -> sea-query-sqlx by @​sandhose in #​5744
• CI: Move from styrainc/setup-regal to open-policy-agent/setup-regal by @​sandhose in #​5762

Other Changes

• CI: Test against ESS by @​gaelgatelement in #​5582
• Trim value when reading client_secret_file by @​networkException in #​5456
• Update Authelia Sample for OIDC upstream by @​andrepintorj in #​5672
• Document what user data is stored and how long it is kept by @​sandhose in #​5673
• Backport #​5849: Update crossbeam-epoch to 0.9.20 to fix RUSTSEC-2026-0204 by @​sandhose in #​5856

Dependency Updates

• Bump hashicorp/vault-action from 3.4.0 to 4.0.0 by @​dependabot[bot] in #​5717
• Bump taiki-e/install-action from 2.77.0 to 2.79.2 by @​dependabot[bot] in #​5716
• Bump actions/setup-node from 6.3.0 to 6.4.0 by @​dependabot[bot] in #​5718
• Bump mozilla-actions/sccache-action from 0.0.9 to 0.0.10 by @​dependabot[bot] in #​5719
• Bump vite from 8.0.14 to 8.0.16 by @​dependabot[bot] in #​5738
• deps: upgrade reqwest 0.13, sentry 0.48, opentelemetry 0.32 by @​sandhose in #​5742
• build(deps): bump actions/github-script from 8.0.0 to 9.0.0 by @​dependabot[bot] in #​5622
• Update anyhow from 1.0.102 to 1.0.103 by @​sandhose in #​5756

New Contributors

• @​gaelgatelement made their first contribution in #​5582
• @​andrepintorj made their first contribution in #​5672

Full Changelog: element-hq/matrix-authentication-service@v1.19.0...v1.20.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Only on Sunday and Saturday (* * * * 0,6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.