v1.20.0

Docker image

Regular image:

• Digest:

  ghcr.io/element-hq/matrix-authentication-service@sha256:1b0cc87ca6bd6186172a123228cfc3be4c94522d5ecc71e7baeaf23e48ce883a
  oci.element.io/matrix-authentication-service@sha256:1b0cc87ca6bd6186172a123228cfc3be4c94522d5ecc71e7baeaf23e48ce883a
  

• Tags:

  ghcr.io/element-hq/matrix-authentication-service:1.20.0
  ghcr.io/element-hq/matrix-authentication-service:1.20
  ghcr.io/element-hq/matrix-authentication-service:1
  ghcr.io/element-hq/matrix-authentication-service:sha-20a1f66
  ghcr.io/element-hq/matrix-authentication-service:latest
  oci.element.io/matrix-authentication-service:1.20.0
  oci.element.io/matrix-authentication-service:1.20
  oci.element.io/matrix-authentication-service:1
  oci.element.io/matrix-authentication-service:sha-20a1f66
  oci.element.io/matrix-authentication-service:latest
  

Debug variant:

• Digest:

  ghcr.io/element-hq/matrix-authentication-service@sha256:50c281a5ea2355ee45eb8805f4a825bd4bbb4dc5dbba026252c49dc38ecc3350
  oci.element.io/matrix-authentication-service@sha256:50c281a5ea2355ee45eb8805f4a825bd4bbb4dc5dbba026252c49dc38ecc3350
  

• Tags:

  ghcr.io/element-hq/matrix-authentication-service:1.20.0-debug
  ghcr.io/element-hq/matrix-authentication-service:1.20-debug
  ghcr.io/element-hq/matrix-authentication-service:1-debug
  ghcr.io/element-hq/matrix-authentication-service:sha-20a1f66-debug
  ghcr.io/element-hq/matrix-authentication-service:latest-debug
  oci.element.io/matrix-authentication-service:1.20.0-debug
  oci.element.io/matrix-authentication-service:1.20-debug
  oci.element.io/matrix-authentication-service:1-debug
  oci.element.io/matrix-authentication-service:sha-20a1f66-debug
  oci.element.io/matrix-authentication-service:latest-debug
  

What's Changed

Bug Fixes

• Fix the compat session API definition in the admin API spec by @sandhose in #5714

New Features

• Allow passing arbitrary values from clients down to upstream OAuth providers by @sandhose in #5677
• Track and log the client IP address by @sandhose in #5734
• Log the GraphQL operation type and name by @sandhose in #5736
• Record and log the requester on the request log line by @sandhose in #5735
• Track and log database statistics for every request and job by @sandhose in #5745
• Infer an initial name for the device for the device auth grant by @sandhose in #5750

Changes to the admin API

• Admin API: allow filtering OAuth 2.0 sessions by multiple clients by @sandhose in #5708
• Admin API: allow filtering of sessions by creation and last-activity time by @sandhose in #5709
• Admin API: filter users based on client usage by @sandhose in #5707
• Admin API: allow listing and viewing of OAuth 2.0 clients by @sandhose in #5710

Documentation

• Document the request log line by @sandhose in #5741

Translations

• Translations updates for main by @matrixbot in #5751
• Translations updates for main by @matrixbot in #5759
• Translations updates for v1.20 by @matrixbot in #5855

Internal Changes

• Automatic merge back to main by @matrixbot in #5729
• Automatic merge back to main by @matrixbot in #5740
• Bump Rust to 1.96.0 and fix clippy lints by @sandhose in #5733
• Use the public registry hostname in release notes by @sandhose in #5725
• Fix ESS test CI job by pinning the setup-ess-cluster-action to the latest version by @sandhose in #5743
• Decouple ULID generations from its own rand dependency by @sandhose in #5747
• deps: upgrade sea-query to 1.0, switch sea-query-binder -> sea-query-sqlx by @sandhose in #5744
• CI: Move from styrainc/setup-regal to open-policy-agent/setup-regal by @sandhose in #5762

Other Changes

• CI: Test against ESS by @gaelgatelement in #5582
• Trim value when reading client_secret_file by @networkException in #5456
• Update Authelia Sample for OIDC upstream by @andrepintorj in #5672
• Document what user data is stored and how long it is kept by @sandhose in #5673
• Backport #5849: Update crossbeam-epoch to 0.9.20 to fix RUSTSEC-2026-0204 by @sandhose in #5856

Dependency Updates

• Bump hashicorp/vault-action from 3.4.0 to 4.0.0 by @dependabot[bot] in #5717
• Bump taiki-e/install-action from 2.77.0 to 2.79.2 by @dependabot[bot] in #5716
• Bump actions/setup-node from 6.3.0 to 6.4.0 by @dependabot[bot] in #5718
• Bump mozilla-actions/sccache-action from 0.0.9 to 0.0.10 by @dependabot[bot] in #5719
• Bump vite from 8.0.14 to 8.0.16 by @dependabot[bot] in #5738
• deps: upgrade reqwest 0.13, sentry 0.48, opentelemetry 0.32 by @sandhose in #5742
• build(deps): bump actions/github-script from 8.0.0 to 9.0.0 by @dependabot[bot] in #5622
• Update anyhow from 1.0.102 to 1.0.103 by @sandhose in #5756

New Contributors

• @gaelgatelement made their first contribution in #5582
• @andrepintorj made their first contribution in #5672

Full Changelog: v1.19.0...v1.20.0