v1.22.0

Docker image

Regular image:

• Digest:

  ghcr.io/element-hq/matrix-authentication-service@sha256:8cb319ec41706adc1ed8b5b63e1de2f067073cc33a304686226f658f5e83c8b3
  oci.element.io/matrix-authentication-service@sha256:8cb319ec41706adc1ed8b5b63e1de2f067073cc33a304686226f658f5e83c8b3
  

• Tags:

  ghcr.io/element-hq/matrix-authentication-service:1.22.0
  ghcr.io/element-hq/matrix-authentication-service:1.22
  ghcr.io/element-hq/matrix-authentication-service:1
  ghcr.io/element-hq/matrix-authentication-service:sha-f28451c
  ghcr.io/element-hq/matrix-authentication-service:latest
  oci.element.io/matrix-authentication-service:1.22.0
  oci.element.io/matrix-authentication-service:1.22
  oci.element.io/matrix-authentication-service:1
  oci.element.io/matrix-authentication-service:sha-f28451c
  oci.element.io/matrix-authentication-service:latest
  

Debug variant:

• Digest:

  ghcr.io/element-hq/matrix-authentication-service@sha256:beb6c2e50af088414202232f1c5c4ab5ff7c005d2cbc6f19aba8c39d44fa574c
  oci.element.io/matrix-authentication-service@sha256:beb6c2e50af088414202232f1c5c4ab5ff7c005d2cbc6f19aba8c39d44fa574c
  

• Tags:

  ghcr.io/element-hq/matrix-authentication-service:1.22.0-debug
  ghcr.io/element-hq/matrix-authentication-service:1.22-debug
  ghcr.io/element-hq/matrix-authentication-service:1-debug
  ghcr.io/element-hq/matrix-authentication-service:sha-f28451c-debug
  ghcr.io/element-hq/matrix-authentication-service:latest-debug
  oci.element.io/matrix-authentication-service:1.22.0-debug
  oci.element.io/matrix-authentication-service:1.22-debug
  oci.element.io/matrix-authentication-service:1-debug
  oci.element.io/matrix-authentication-service:sha-f28451c-debug
  oci.element.io/matrix-authentication-service:latest-debug
  

What's Changed

Bug Fixes

• Accept [ and ~ in OAuth 2.0 scope tokens by @sandhose in #5881
• Keep the auth action context when changing accounts by @sandhose in #5843

New Features

• Add password_file config variant for email and database by @networkException in #5449
• Replace Unix socket on startup & allow setting permissions by @sandhose in #5858
• Expose a logged_out variable to upstream authorization parameter templates by @sandhose in #5859

Changes to the admin API

• Admin API: allow searching in upstream OAuth links on 'human account name' by @sandhose in #5869

Translations

• Translations updates for main by @matrixbot in #5883
• Translations updates for v1.22 by @matrixbot in #5904

Internal Changes

• Automatic merge back to main by @matrixbot in #5865
• Automatic merge back to main by @matrixbot in #5870
• Automatic merge back to main by @matrixbot in #5872
• Speed up builds by using thin LTO and default codegen-units for release builds by @sandhose in #5879
• Speed up the ESS test CI job by @sandhose in #5877
• Ignore RUSTSEC-2026-0222 as we are not affected by it by @sandhose in #5903

Other Changes

• Move "Full release process" section higher up by @MadLittleMods in #5866
• Defer session creation to token exchange time by @defaultdino in #5606
• Allow setting a client_uri for static clients in the config by @V02460 in #5874
• Fix time-dependent snapshot test in account sessions page by @sandhose in #5876

Full Changelog: v1.21.0...v1.22.0