feat(container): update image ghcr.io/element-hq/synapse ( v1.154.0 → v1.156.0 ) by renovate[bot] · Pull Request #2993 · mglants/gitops

renovate · 2026-06-16T19:18:43Z

This PR contains the following updates:

Package	Update	Change
ghcr.io/element-hq/synapse	minor	`v1.154.0` → `v1.156.0`

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

element-hq/synapse (ghcr.io/element-hq/synapse)

`v1.156.0`

Compare Source

Synapse 1.156.0 (2026-07-07)

No significant changes since 1.156.0rc1.

Synapse 1.156.0rc1 (2026-06-30)

Features

Expose MSC4354 Sticky Events over MSC4186 (Simplified) Sliding Sync. (#19591)
Stabilize support for sending ephemeral events to application services, as per MSC2409. Contributed by @jason-famedly @ Famedly. (#19758)
Include allowed_room_ids in the /summary client-server API response for rooms with restricted join rules, as required by Matrix 1.15.
Contributed by @FrenchGithubUser @Famedly. (#19762)
MSC4140: Cancellable delayed events: Allow authentication on delayed event management endpoints (such as /restart) to bypass ratelimits for unauthenticated requests based on the client IP address. (#19794)
Add new metric synapse_non_deactivated_user_count which tracks the number of non-deactivated users in the database, split by app_service. (#19848)
The GET /_matrix/client/unstable/org.matrix.msc1763/retention/configuration endpoint is now provided when retention
is enabled and experimental_features.msc1763_enabled is enabled, based on
MSC1763. (#19853)
Add experimental support for MSC4491: Invite reasons in room creation. (#19874)

Bugfixes

Provide remote servers a way to find out about an event created during the remote join handshake. Contributed by @FrenchGithubUser and @jason-famedly @ Famedly. (#19390, #19855, #19856)
Advertise org.matrix.msc4143 in unstable_features when msc4143_enabled is set. (#19646)
Fix a long-standing bug where the badge notification count for a room could become permanently inflated if a read receipt was sent before the room's notification counts were first summarised. (#19785)
Fix startup listener logging to report the actual bound TCP port, so listeners configured with port 0 no longer log Synapse now listening on TCP port 0. (#19810)
Fix notification counts being inflated after a /purge_history when notifications had already been rotated into the summary table. (#19834)
Fix /sync caching transient errors for the sync_response_cache_duration. (#19845)
Fix local events being deleted by the Purge History admin API despite delete_local_events being set to false, in room versions other than 1 and 2. (#19850)
Fix a bug where a user's dehydrated device (MSC3814) was deleted when their device list was synced from Matrix Authentication Service (e.g. upon logging out their last device), breaking offline key delivery. (#19892)

Improved Documentation

Update auto_join_rooms config documentation to cover requirements for auto-joining invite-only rooms. (#19660)
Add stable endpoint for MSC3266: Room summary API into worker docs. Contributed by @olmari. (#19788)
Tweak wording of Rust crate dependency update policy. (#19829)
Fixed the Admin API user endpoint documentation examples to use JSON booleans (true/false) instead of numeric (0/1) values. (#19847)

Internal Changes

Make simple_select_one_onecol_txn() more helpful by naming the table of the select - as all other query wrapper functions already did. (#19869)
Refactor get_user_which_could_invite logic to reuse get_users_which_can_issue_invite. Contributed by Noah Markert. (#19732)
Fix a flaky test (twisted.protocols.amp.TooLong error under trial -jN) caused by an oversized debug log line. (#19832)
Upload Complement test logs as CI artifacts instead of printing the raw output to the build log. (#19840)
Fix release script considering any workflow completion as successful. (#19843)
Force keyword-args for clear default_config(server_name="test") usage in test utilities. (#19849)
Add .ruff_cache/ directory to .gitignore. (#19854)
Bump poetry in CI from 2.2.1 to 2.4.1. (#19866, #19877)
Split out deferred and tokio_runtime to their own Rust modules. (#19868)
Prevent the cargo-test and cargo-bench CI jobs from being skipped, even on PRs that have Rust changes. (#19883)

`v1.155.0`

Compare Source

Synapse 1.155.0 (2026-06-16)

End of Life of Debian 12 Bookworm

The next version of Synapse will not include Debian packages for Debian 12 Bookworm
as it reached end of life on the 10th of June 2026.

Internal Changes

When building releases, don't cancel Debian package builds when one of them fails. (#19842)

Synapse 1.155.0rc1 (2026-06-09)

Bugfixes

Limit the to-device EDU size to a reasonable value to mitigate long queues of to-device messages preventing outgoing federation because of the size of the transaction. (#19617)
Work around bug that sometimes breaks joining restricted rooms that require a remote join. Contributed by @tulir @ Beeper. (#19730)
Update Sliding Sync to return a new response immediately if a room subscription has changed and produced a new response. (#19734, #19792)
Fix the /capabilities endpoint returning a 500 error on non-media workers when MSC4452: Preview URL capabilities API is enabled. (#19839)

Improved Documentation

Document how to see Rust build failure output when using poetry install. (#19818)
Document that the SQLite version included in Ubuntu LTS, aside from ESM-only versions, is included in our support policy. (#19823)

Internal Changes

Port the Python Event classes to Rust. (#19701, #19816, #19817, #19819)
Added tests to ensure that email notification links are sanitized. Contributed by Noah Markert. (#19741)
Add GcpJsonFormatter logging formatter for use with Google Cloud Logging and GKE deployments. (#19775)
Add more logging to the to-device message replication stream. (#19801, #19821)
Port Requester class to Rust. (#19828)

Configuration

📅 Schedule: (in timezone Europe/Moscow)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

mglants-bot · 2026-06-16T19:20:31Z

--- kubernetes/subterra/apps/matrix/synapse/app Kustomization: flux-system/cluster-apps-synapse HelmRelease: matrix/synapse

+++ kubernetes/subterra/apps/matrix/synapse/app Kustomization: flux-system/cluster-apps-synapse HelmRelease: matrix/synapse

@@ -77,13 +77,13 @@

       - ::1/128
       - fe80::/64
       - fc00::/7
     image:
       pullPolicy: IfNotPresent
       repository: ghcr.io/element-hq/synapse
-      tag: v1.154.0
+      tag: v1.156.0
     ingress:
       annotations:
         cert-manager.io/cluster-issuer: letsencrypt-prod
         external-dns.alpha.kubernetes.io/target: ingress.ur30.ru
         nginx.ingress.kubernetes.io/cors-allow-origin: '*'
         nginx.ingress.kubernetes.io/enable-cors: 'true'

mglants-bot · 2026-06-16T19:20:33Z

--- HelmRelease: matrix/synapse Deployment: matrix/synapse-matrix-synapse

+++ HelmRelease: matrix/synapse Deployment: matrix/synapse-matrix-synapse

@@ -17,13 +17,13 @@

       app.kubernetes.io/name: matrix-synapse
       app.kubernetes.io/instance: synapse
       app.kubernetes.io/component: synapse
   template:
     metadata:
       annotations:
-        checksum/secrets: 7b528b5ba819fedc6b43532bcddfb407d90ae3ae9bc86aba14be213ef5cfca75
+        checksum/secrets: d21678f85a5e4def58f2a7bebed3feff19d1479b0843d49b005e205a5d3129c1
         setGateway: 'true'
       labels:
         app.kubernetes.io/name: matrix-synapse
         app.kubernetes.io/instance: synapse
         app.kubernetes.io/component: synapse
     spec:
@@ -53,13 +53,13 @@

               key: password
         - name: REDIS_PASSWORD
           valueFrom:
             secretKeyRef:
               name: synapse-secret
               key: redis-password
-        image: ghcr.io/element-hq/synapse:v1.154.0
+        image: ghcr.io/element-hq/synapse:v1.156.0
         imagePullPolicy: IfNotPresent
         securityContext: {}
         ports:
         - name: http
           containerPort: 8008
           protocol: TCP
--- HelmRelease: matrix/synapse Deployment: matrix/synapse-appservice

+++ HelmRelease: matrix/synapse Deployment: matrix/synapse-appservice

@@ -18,13 +18,13 @@

       app.kubernetes.io/instance: synapse
       app.kubernetes.io/component: appservice
   template:
     metadata:
       annotations:
         checksum/worker-config: 9dda7d287ce417476bd36431d9fde1f4cbdbf6e410df6bbc3c80bdc0ecd41247
-        checksum/secrets: ce83fee38735ac1c391a11ca5c65b43c475effb6d095da600a7ac9f875ad1fc4
+        checksum/secrets: 26e50b0c01beb7f91b9e6203e26dc103ec11e32420c750e2590b50c5acb771d7
       labels:
         app.kubernetes.io/name: matrix-synapse
         app.kubernetes.io/instance: synapse
         app.kubernetes.io/component: appservice
     spec:
       serviceAccountName: default
@@ -53,13 +53,13 @@

         - name: REDIS_PASSWORD
           valueFrom:
             secretKeyRef:
               name: synapse-secret
               key: redis-password
         securityContext: {}
-        image: ghcr.io/element-hq/synapse:v1.154.0
+        image: ghcr.io/element-hq/synapse:v1.156.0
         imagePullPolicy: IfNotPresent
         ports:
         - name: metrics
           containerPort: 9090
           protocol: TCP
         livenessProbe:
--- HelmRelease: matrix/synapse Deployment: matrix/synapse-federation-reader

+++ HelmRelease: matrix/synapse Deployment: matrix/synapse-federation-reader

@@ -18,13 +18,13 @@

       app.kubernetes.io/instance: synapse
       app.kubernetes.io/component: federation-reader
   template:
     metadata:
       annotations:
         checksum/worker-config: 9dda7d287ce417476bd36431d9fde1f4cbdbf6e410df6bbc3c80bdc0ecd41247
-        checksum/secrets: 7fac1ee16b8ddb8c1b025c2bf4c5940b4caf9c8450ceaa0e21628faaf2c89477
+        checksum/secrets: 193f3cbbce50c16f59ddb74e7dd1e42dca4454fdebd74e1ac0f2b4961a3a4047
         setGateway: 'true'
       labels:
         app.kubernetes.io/name: matrix-synapse
         app.kubernetes.io/instance: synapse
         app.kubernetes.io/component: federation-reader
     spec:
@@ -54,13 +54,13 @@

         - name: REDIS_PASSWORD
           valueFrom:
             secretKeyRef:
               name: synapse-secret
               key: redis-password
         securityContext: {}
-        image: ghcr.io/element-hq/synapse:v1.154.0
+        image: ghcr.io/element-hq/synapse:v1.156.0
         imagePullPolicy: IfNotPresent
         ports:
         - name: metrics
           containerPort: 9090
           protocol: TCP
         - name: listener
--- HelmRelease: matrix/synapse Deployment: matrix/synapse-federation-sender

+++ HelmRelease: matrix/synapse Deployment: matrix/synapse-federation-sender

@@ -18,13 +18,13 @@

       app.kubernetes.io/instance: synapse
       app.kubernetes.io/component: federation-sender
   template:
     metadata:
       annotations:
         checksum/worker-config: 9dda7d287ce417476bd36431d9fde1f4cbdbf6e410df6bbc3c80bdc0ecd41247
-        checksum/secrets: 39d5c081083e28d2c5007c8ea4d0534f13a63010dbcea9d3249d503cdac4825b
+        checksum/secrets: c6f3715b1c44c8ac1f5c5869abb4046c1bd6a12903e3893e6a1710ca2820dd26
         setGateway: 'true'
       labels:
         app.kubernetes.io/name: matrix-synapse
         app.kubernetes.io/instance: synapse
         app.kubernetes.io/component: federation-sender
     spec:
@@ -54,13 +54,13 @@

         - name: REDIS_PASSWORD
           valueFrom:
             secretKeyRef:
               name: synapse-secret
               key: redis-password
         securityContext: {}
-        image: ghcr.io/element-hq/synapse:v1.154.0
+        image: ghcr.io/element-hq/synapse:v1.156.0
         imagePullPolicy: IfNotPresent
         ports:
         - name: metrics
           containerPort: 9090
           protocol: TCP
         livenessProbe:
--- HelmRelease: matrix/synapse Deployment: matrix/synapse-frontend-proxy

+++ HelmRelease: matrix/synapse Deployment: matrix/synapse-frontend-proxy

@@ -18,13 +18,13 @@

       app.kubernetes.io/instance: synapse
       app.kubernetes.io/component: frontend-proxy
   template:
     metadata:
       annotations:
         checksum/worker-config: 9dda7d287ce417476bd36431d9fde1f4cbdbf6e410df6bbc3c80bdc0ecd41247
-        checksum/secrets: 0ec51b1bbaea3c7276388445874bd98cba9804b921fb3edab3b6ff926ec8b0d5
+        checksum/secrets: 41e6809057bd48adaa9b4ebb89af0466d966fdcfb3ca204a7822c35d88d5869c
       labels:
         app.kubernetes.io/name: matrix-synapse
         app.kubernetes.io/instance: synapse
         app.kubernetes.io/component: frontend-proxy
     spec:
       serviceAccountName: default
@@ -53,13 +53,13 @@

         - name: REDIS_PASSWORD
           valueFrom:
             secretKeyRef:
               name: synapse-secret
               key: redis-password
         securityContext: {}
-        image: ghcr.io/element-hq/synapse:v1.154.0
+        image: ghcr.io/element-hq/synapse:v1.156.0
         imagePullPolicy: IfNotPresent
         ports:
         - name: metrics
           containerPort: 9090
           protocol: TCP
         - name: listener
--- HelmRelease: matrix/synapse Deployment: matrix/synapse-generic-worker

+++ HelmRelease: matrix/synapse Deployment: matrix/synapse-generic-worker

@@ -18,13 +18,13 @@

       app.kubernetes.io/instance: synapse
       app.kubernetes.io/component: generic-worker
   template:
     metadata:
       annotations:
         checksum/worker-config: 9dda7d287ce417476bd36431d9fde1f4cbdbf6e410df6bbc3c80bdc0ecd41247
-        checksum/secrets: 2c0a6d52e99c96fd0316962bb7a3d937e15e6ef68de9b69933336fa82a9b4c34
+        checksum/secrets: f96b17bdbc335a83e40fc408560dae15209fac90fbfeafae1fbcbe3f4b441167
       labels:
         app.kubernetes.io/name: matrix-synapse
         app.kubernetes.io/instance: synapse
         app.kubernetes.io/component: generic-worker
     spec:
       serviceAccountName: default
@@ -53,13 +53,13 @@

         - name: REDIS_PASSWORD
           valueFrom:
             secretKeyRef:
               name: synapse-secret
               key: redis-password
         securityContext: {}
-        image: ghcr.io/element-hq/synapse:v1.154.0
+        image: ghcr.io/element-hq/synapse:v1.156.0
         imagePullPolicy: IfNotPresent
         ports:
         - name: metrics
           containerPort: 9090
           protocol: TCP
         - name: listener
--- HelmRelease: matrix/synapse Deployment: matrix/synapse-messages

+++ HelmRelease: matrix/synapse Deployment: matrix/synapse-messages

@@ -18,13 +18,13 @@

       app.kubernetes.io/instance: synapse
       app.kubernetes.io/component: messages
   template:
     metadata:
       annotations:
         checksum/worker-config: 9dda7d287ce417476bd36431d9fde1f4cbdbf6e410df6bbc3c80bdc0ecd41247
-        checksum/secrets: a791bab7ae2aa328e25d9909d4bb9902d7a26601e66070e98a912b859565d643
+        checksum/secrets: 15f7431fe4be2ad9d3e4e8beb8b6866fd62c0f620d3e9e664c5bdc296a728719
       labels:
         app.kubernetes.io/name: matrix-synapse
         app.kubernetes.io/instance: synapse
         app.kubernetes.io/component: messages
     spec:
       serviceAccountName: default
@@ -53,13 +53,13 @@

         - name: REDIS_PASSWORD
           valueFrom:
             secretKeyRef:
               name: synapse-secret
               key: redis-password
         securityContext: {}
-        image: ghcr.io/element-hq/synapse:v1.154.0
+        image: ghcr.io/element-hq/synapse:v1.156.0
         imagePullPolicy: IfNotPresent
         ports:
         - name: metrics
           containerPort: 9090
           protocol: TCP
         - name: listener
--- HelmRelease: matrix/synapse Deployment: matrix/synapse-pusher

+++ HelmRelease: matrix/synapse Deployment: matrix/synapse-pusher

@@ -18,13 +18,13 @@

       app.kubernetes.io/instance: synapse
       app.kubernetes.io/component: pusher
   template:
     metadata:
       annotations:
         checksum/worker-config: 9dda7d287ce417476bd36431d9fde1f4cbdbf6e410df6bbc3c80bdc0ecd41247
-        checksum/secrets: e3c36a37ec885e96b9ce36776240ff9e7b5ed7d820f7a63a28e0d76570a0095b
+        checksum/secrets: 298264c249661c7e7e7e8728e4e4c7da389f8b1d44bf8e9464787cf19588cef1
       labels:
         app.kubernetes.io/name: matrix-synapse
         app.kubernetes.io/instance: synapse
         app.kubernetes.io/component: pusher
     spec:
       serviceAccountName: default
@@ -53,13 +53,13 @@

         - name: REDIS_PASSWORD
           valueFrom:
             secretKeyRef:
               name: synapse-secret
               key: redis-password
         securityContext: {}
-        image: ghcr.io/element-hq/synapse:v1.154.0
+        image: ghcr.io/element-hq/synapse:v1.156.0
         imagePullPolicy: IfNotPresent
         ports:
         - name: metrics
           containerPort: 9090
           protocol: TCP
         livenessProbe:
--- HelmRelease: matrix/synapse Deployment: matrix/synapse-sso

+++ HelmRelease: matrix/synapse Deployment: matrix/synapse-sso

@@ -18,13 +18,13 @@

       app.kubernetes.io/instance: synapse
       app.kubernetes.io/component: sso
   template:
     metadata:
       annotations:
         checksum/worker-config: 9dda7d287ce417476bd36431d9fde1f4cbdbf6e410df6bbc3c80bdc0ecd41247
-        checksum/secrets: 221124ea681173dfdf334b96536b77a65439d2a422b755672122b5dff7686cc0
+        checksum/secrets: 68651712650e240c6eec22838ca817eec735ec43da409bc6a319b13aca1af6bd
       labels:
         app.kubernetes.io/name: matrix-synapse
         app.kubernetes.io/instance: synapse
         app.kubernetes.io/component: sso
     spec:
       serviceAccountName: default
@@ -53,13 +53,13 @@

         - name: REDIS_PASSWORD
           valueFrom:
             secretKeyRef:
               name: synapse-secret
               key: redis-password
         securityContext: {}
-        image: ghcr.io/element-hq/synapse:v1.154.0
+        image: ghcr.io/element-hq/synapse:v1.156.0
         imagePullPolicy: IfNotPresent
         ports:
         - name: metrics
           containerPort: 9090
           protocol: TCP
         - name: listener
--- HelmRelease: matrix/synapse Deployment: matrix/synapse-synchrotron

+++ HelmRelease: matrix/synapse Deployment: matrix/synapse-synchrotron

@@ -18,13 +18,13 @@

       app.kubernetes.io/instance: synapse
       app.kubernetes.io/component: synchrotron
   template:
     metadata:
       annotations:
         checksum/worker-config: 9dda7d287ce417476bd36431d9fde1f4cbdbf6e410df6bbc3c80bdc0ecd41247
-        checksum/secrets: 299a580e9a076b0bc53a56e405fc83ac5c058fac2b6310b8d328490dbafbf6be
+        checksum/secrets: cb514c08afe8099ab5ade354e1b7d9ccb8822c3bb5ad0f81e461e82b5eea6f78
       labels:
         app.kubernetes.io/name: matrix-synapse
         app.kubernetes.io/instance: synapse
         app.kubernetes.io/component: synchrotron
     spec:
       serviceAccountName: default
@@ -53,13 +53,13 @@

         - name: REDIS_PASSWORD
           valueFrom:
             secretKeyRef:
               name: synapse-secret
               key: redis-password
         securityContext: {}
-        image: ghcr.io/element-hq/synapse:v1.154.0
+        image: ghcr.io/element-hq/synapse:v1.156.0
         imagePullPolicy: IfNotPresent
         ports:
         - name: metrics
           containerPort: 9090
           protocol: TCP
         - name: listener

… v1.156.0 ) | datasource | package | from | to | | ---------- | -------------------------- | -------- | -------- | | docker | ghcr.io/element-hq/synapse | v1.154.0 | v1.156.0 |

renovate Bot added renovate/container type/minor labels Jun 16, 2026

mglants-bot Bot added area/kubernetes cluster/subterra labels Jun 16, 2026

renovate Bot force-pushed the renovate/ghcr.io-element-hq-synapse-1.x branch from 26eb403 to 69345f5 Compare June 22, 2026 17:53

feat(container): update image ghcr.io/element-hq/synapse ( v1.154.0 →…

5e3e648

… v1.156.0 ) | datasource | package | from | to | | ---------- | -------------------------- | -------- | -------- | | docker | ghcr.io/element-hq/synapse | v1.154.0 | v1.156.0 |

renovate Bot force-pushed the renovate/ghcr.io-element-hq-synapse-1.x branch from 69345f5 to 5e3e648 Compare July 7, 2026 15:04

renovate Bot changed the title ~~feat(container): update image ghcr.io/element-hq/synapse ( v1.154.0 → v1.155.0 )~~ feat(container): update image ghcr.io/element-hq/synapse ( v1.154.0 → v1.156.0 ) Jul 7, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat(container): update image ghcr.io/element-hq/synapse ( v1.154.0 → v1.156.0 )#2993

feat(container): update image ghcr.io/element-hq/synapse ( v1.154.0 → v1.156.0 )#2993
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/ghcr.io-element-hq-synapse-1.x

renovate Bot commented Jun 16, 2026 •

edited

Loading

Uh oh!

mglants-bot Bot commented Jun 16, 2026 •

edited

Loading

Uh oh!

mglants-bot Bot commented Jun 16, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Jun 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v1.156.0

Synapse 1.156.0 (2026-07-07)

Synapse 1.156.0rc1 (2026-06-30)

Features

Bugfixes

Improved Documentation

Internal Changes

v1.155.0

Synapse 1.155.0 (2026-06-16)

End of Life of Debian 12 Bookworm

Internal Changes

Synapse 1.155.0rc1 (2026-06-09)

Bugfixes

Improved Documentation

Internal Changes

Configuration

Uh oh!

mglants-bot Bot commented Jun 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

mglants-bot Bot commented Jun 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Jun 16, 2026 •

edited

Loading

`v1.156.0`

`v1.155.0`

mglants-bot Bot commented Jun 16, 2026 •

edited

Loading

mglants-bot Bot commented Jun 16, 2026 •

edited

Loading