Skip to content

v2.5.3
Compare
Choose a tag to compare
@H-Shay H-Shay released this 02 Mar 18:45
· 27 commits to main since this release
v2.5.3
This tag was signed with the committer’s verified signature.
H-Shay Shay
GPG key ID: D5804497C6468FC1
Learn about vigilant mode.
110a40b

Sydent 2.5.3 (2023-03-02)

Features

  • Add ratelimiting to MSISDN request token endpoint. (#521, #522)
  • Add email.third_party_invite_homeserver_blocklist and email.third_party_invite_room_blocklist config options to block invites from a list of homeservers or for a list of rooms. (#530)
  • Support Matrix v1.1. (#542)

Bugfixes

  • Respond with a 429 instead of 500 when exceeding invite rate limit. (#529)
  • Fix a bug where Sydent would not retry attempts to inform homeservers of a successful bind after an initial failure. (#552)

Updates to the Docker image

  • Add prometheus-client and sentry-sdk into the Docker image. (#519)

Improved Documentation

  • Document a way to serve identity service APIs over HTTPS. (#518)

Internal Changes

  • Update README to describe how to install from source with poetry. (#505)
  • Fix a typechecking error introduced in #501. (#506)
  • Ensure CI runs tests on main branch. (#507)
  • Bump twisted from 22.1.0 to 22.2.0. (#508)
  • Add a 'tests-done' Github Actions job. (#509)
  • Allow the newsfile job to be skipped. (#514)
  • Remove support for the unstable identifier from MSC3288. (#515)
  • Avoid spurious warnings in tests. (#516)
  • (Dependabot) Bump Twisted to 22.4.0. (#517)
  • Add ratelimiting to email sending. (#526)
  • Add some prometheus metrics and make prometheus_client dependency mandatory. (#527)
  • Limit length of room names in third party invites. (#528)
  • Limit length of sender display name in third party invites. (#531)
  • Add a config option to drop emails if user-supplied content contains a given keyword. (#535, #536)
  • (Dependabot) Bump certifi to 2022.12.7. (#537)
  • Fix a typo to properly allow the newsfile job to be skipped. (#538)
  • Refactor creation of servlets. (#541)
  • Use ruff instead of flake8. (#543, #544)
  • Don't block invites containing web_client_location when using "http" in the keyword block list. (#545)
  • Build using Poetry 1.2.2, for better dependabot compatability. (#548)
Assets 2