chore: upgrade synapse v1.155.0, nginx 1.31.2, MAS 1.19.0 #4

Closed

autonomic-bot wants to merge 0 commits from upgrade-7.2.1+v1.155.0 into main

pull from: upgrade-7.2.1+v1.155.0

merge into: :main

:main

:upgrade-c04a858

:upgrade-essential-v1.157.1

:upgrade-7.2.1+v1.155.0

:upgrade-7.2.0+v1.154.0

:upgrade-7.3.0+v1.154.0

:upgrade-7.2.0+v1.153.0

Conversation 8 Commits - Files Changed -

+3 -3

autonomic-bot commented 2026-06-16 23:50:58 +00:00

Owner

Copy Link

Copy Source

matrix-synapse upgrade: v1.154.0 → v1.155.0 + MAS 1.18.0 → 1.19.0 + nginx 1.31.2

Image tag changes

service	image	old	new
app	matrixdotorg/synapse	v1.154.0	v1.155.0
mas	ghcr.io/element-hq/matrix-authentication-service	1.18.0	1.19.0
web	nginx	1.31.1	1.31.2

Upstream release notes

Upstream release notes: synapse v1.154.0→v1.155.0: https://github.com/element-hq/synapse/releases/tag/v1.155.0
Upstream release notes: matrix-authentication-service 1.18.0→1.19.0: https://github.com/element-hq/matrix-authentication-service/releases/tag/v1.19.0
Upstream release notes: nginx 1.31.1→1.31.2: https://nginx.org/en/CHANGES

What changed

• synapse v1.155.0: Bugfix release — sliding sync fix, to-device EDU size limits, non-media worker fix for MSC4452. No breaking changes, no config/migration changes.
• MAS 1.19.0: Minor release — per-provider registration token support, X-Frame-Options: DENY security hardening. No breaking changes, no DB migrations, no config file changes.
• nginx 1.31.2: Security release fixing 3 CVEs (CVE-2026-42530 use-after-free HTTP/3, CVE-2026-42055 heap overflow HTTP/2, CVE-2026-48142 heap overread charset). Upgrade recommended.

Deferred (separate PRs)

• mautrix/signal v0.8.7 → v26.02.2 (CalVer scheme change; requires fresh install or manual pg dump/restore — deferred)
• mautrix/telegram v0.15.3 → v0.2606.0 (CalVer scheme change — deferred)
• signaldb/telegramdb postgres 13→17 (deferred along with bridge upgrades)

Recommended release

abra recipe release matrix-synapse -z

(patch bump: v1.155.0 is a bugfix/security release, MAS 1.19.0 minor features, nginx security patch)

Nothing merged — for operator review.

Tested green on the cc-ci recipe CI server (full suite, cold, against this PR head). NOT merged — for operator review.

cc @trav @notplants

## matrix-synapse upgrade: v1.154.0 → v1.155.0 + MAS 1.18.0 → 1.19.0 + nginx 1.31.2 ### Image tag changes | service | image | old | new | |---------|-------|-----|-----| | app | matrixdotorg/synapse | v1.154.0 | v1.155.0 | | mas | ghcr.io/element-hq/matrix-authentication-service | 1.18.0 | 1.19.0 | | web | nginx | 1.31.1 | 1.31.2 | ### Upstream release notes **Upstream release notes:** synapse v1.154.0→v1.155.0: https://github.com/element-hq/synapse/releases/tag/v1.155.0 **Upstream release notes:** matrix-authentication-service 1.18.0→1.19.0: https://github.com/element-hq/matrix-authentication-service/releases/tag/v1.19.0 **Upstream release notes:** nginx 1.31.1→1.31.2: https://nginx.org/en/CHANGES ### What changed - **synapse v1.155.0**: Bugfix release — sliding sync fix, to-device EDU size limits, non-media worker fix for MSC4452. No breaking changes, no config/migration changes. - **MAS 1.19.0**: Minor release — per-provider registration token support, X-Frame-Options: DENY security hardening. No breaking changes, no DB migrations, no config file changes. - **nginx 1.31.2**: Security release fixing 3 CVEs (CVE-2026-42530 use-after-free HTTP/3, CVE-2026-42055 heap overflow HTTP/2, CVE-2026-48142 heap overread charset). Upgrade recommended. ### Deferred (separate PRs) - mautrix/signal v0.8.7 → v26.02.2 (CalVer scheme change; requires fresh install or manual pg dump/restore — deferred) - mautrix/telegram v0.15.3 → v0.2606.0 (CalVer scheme change — deferred) - signaldb/telegramdb postgres 13→17 (deferred along with bridge upgrades) ### Recommended release ``` abra recipe release matrix-synapse -z ``` (patch bump: v1.155.0 is a bugfix/security release, MAS 1.19.0 minor features, nginx security patch) Nothing merged — for operator review. Tested green on the cc-ci recipe CI server (full suite, cold, against this PR head). NOT merged — for operator review. cc @trav @notplants

autonomic-bot added 1 commit 2026-06-16 23:50:59 +00:00

chore: upgrade to 7.2.1+v1.155.0 f00725de2c

autonomic-bot requested review from trav 2026-06-16 23:50:59 +00:00

autonomic-bot requested review from notplants 2026-06-16 23:50:59 +00:00

autonomic-bot commented 2026-06-17 01:58:04 +00:00

Author

Owner

Copy Link

Copy Source

!testme

!testme

autonomic-bot commented 2026-06-17 01:58:05 +00:00

Author

Owner

Copy Link

Copy Source

🌻 cc-ci — matrix-synapse @ f00725de ✅ passed

full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `matrix-synapse` @ `f00725de` ✅ **passed** [](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/725) [](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/725) [full logs](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/725) · [dashboard](https://ci.commoninternet.net/)

autonomic-bot changed title from chore: upgrade to 7.2.1+v1.155.0 to chore: upgrade nginx to 1.31.2 and MAS to 1.19.0 2026-06-19 03:23:36 +00:00

autonomic-bot added 1 commit 2026-06-19 03:23:36 +00:00

chore: upgrade nginx to 1.31.2 and MAS to 1.19.0 64a7129e26

autonomic-bot commented 2026-06-19 03:27:10 +00:00

Author

Owner

Copy Link

Copy Source

!testme

!testme

autonomic-bot commented 2026-06-19 03:27:40 +00:00

Author

Owner

Copy Link

Copy Source

🌻 cc-ci — matrix-synapse @ 64a7129e ✅ passed

full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `matrix-synapse` @ `64a7129e` ✅ **passed** [](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/936) [](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/936) [full logs](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/936) · [dashboard](https://ci.commoninternet.net/)

autonomic-bot changed title from chore: upgrade nginx to 1.31.2 and MAS to 1.19.0 to chore: upgrade synapse v1.155.0, nginx 1.31.2, MAS 1.19.0 2026-06-19 03:31:11 +00:00

autonomic-bot force-pushed upgrade-7.2.1+v1.155.0 from 64a7129e26 to 4e620c81bc 2026-06-22 16:23:41 +00:00 Compare

autonomic-bot commented 2026-06-22 17:53:40 +00:00

Author

Owner

Copy Link

Copy Source

!testme

!testme

autonomic-bot commented 2026-06-22 17:54:01 +00:00

Author

Owner

Copy Link

Copy Source

🌻 cc-ci — matrix-synapse @ 4e620c81 ❌ failure

full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `matrix-synapse` @ `4e620c81` ❌ **failure** [](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/941) [](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/941) [full logs](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/941) · [dashboard](https://ci.commoninternet.net/)

autonomic-bot force-pushed upgrade-7.2.1+v1.155.0 from 4e620c81bc to 53c6bab5c4 2026-06-22 18:13:50 +00:00 Compare

autonomic-bot commented 2026-06-22 18:14:01 +00:00

Author

Owner

Copy Link

Copy Source

!testme

!testme

autonomic-bot commented 2026-06-22 18:14:16 +00:00

Author

Owner

Copy Link

Copy Source

🌻 cc-ci — matrix-synapse @ 53c6bab5 ✅ passed

full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `matrix-synapse` @ `53c6bab5` ✅ **passed** [](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/942) [](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/942) [full logs](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/942) · [dashboard](https://ci.commoninternet.net/)

notplants closed this pull request 2026-06-22 18:38:24 +00:00

Pull request closed

Please reopen this pull request to perform a merge.

Sign in to join this conversation.

Reviewers

No Reviewers

notplants

trav

Labels

No items

No labels

Milestone

No items

No Milestone

Projects

Clear projects

No projects

Assignees

Clear assignees

autonomic autonomic-bot kawaiipunk (KawaiiPunk) notplants trav (Trav Fryer)

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: recipe-maintainers/matrix-synapse#4