Log message:
chat/matrix-synapse: Update to 1.143.0
(This update is overdue and should have been in 2025Q4, but was
delayed due to incorrect pydantic packaging.)
Upstream NEWS content:
* Synapse 1.143.0 (2025-11-25)
Features
    Support multiple config files in
    register_new_matrix_user. (#18784)
    Remove authentication from POST /_matrix/client/v1/delayed_events,
    and allow calling this endpoint with the update action to take
    (send/cancel/restart) in the request path instead of the
    body. (#19152)
* Synapse 1.142.0 (2025-11-11)
Features
    Add an Admin API to allow an admin to fetch the space/room
    hierarchy for a given space. (#19021)
* Synapse 1.141.0 (2025-10-29)
Features
    Allow using MSC4190 behavior without the opt-in registration
    flag. Contributed by @tulir @ Beeper. (#19031)
    Stabilized support for MSC4326: Device masquerading for
    appservices. Contributed by @tulir @ Beeper. (#19033)

Log message:
chat/matrix-synapse: Update to 1.140.0
Upstream NEWS:
* Features
    Add a new Media Query by ID Admin API that allows server admins to query and \ 
investigate the metadata of local or cached remote media via
    the origin/media_id identifier found in a Matrix Content URI. (#18911)
    Add a new Fetch Event Admin API to fetch an event by ID. (#18963)
    Update MSC4284: Policy Servers implementation to support signatures when \ 
available. (#18934)
    Add experimental implementation of the GET /_matrix/client/v1/rtc/transports \ 
endpoint for the latest draft of MSC4143: MatrixRTC. (#18967)
    Expose a defer_to_threadpool function in the Synapse Module API that allows \ 
modules to run a function on a separate thread in a custom threadpool. (#19032)
* Deprecations and Removals
    Remove deprecated \ 
LoggingContext.set_current_context/LoggingContext.current_context methods which \ 
already have equivalent bare methods in synapse.logging.context. (#18989)
    Drop support for unstable field names from the long-accepted MSC2732 (Olm \ 
fallback keys) proposal. (#18996)

Log message:
chat/matrix-synapse: Update to 1.139.2
Upstream NEWS:
Security Fixes
    Fix CVE-2025-61672 / GHSA-fh66-fcv5-jjfr. Lack of validation for
    device keys in Synapse before 1.139.1 allows an attacker
    registered on the victim homeserver to degrade federation
    functionality, unpredictably breaking outbound federation to other
    homeservers. (#17097)
Deprecations and Removals
    Drop support for unstable field names from the long-accepted
    MSC2732 (Olm fallback keys) proposal. This change allows unit
    tests to pass following the security patch above. (#18996)

Log message:
chat/matrix-synapse: Update to 1.139.0
# Synapse 1.139.0 (2025-09-30)
## Features
- Add experimental support for [MSC4308: Thread Subscriptions extension to \ 
Sliding Sync](https://github.com/matrix-org/matrix-spec-proposals/pull/4308) \ 
when [MSC4306: Thread \ 
Subscriptions](https://github.com/matrix-org/matrix-spec-proposals/pull/4306) \ 
and [MSC4186: Simplified Sliding \ 
Sync](https://github.com/matrix-org/matrix-spec-proposals/pull/4186) are \ 
enabled. ([\#18695](https://github.com/element-hq/synapse/issues/18695))
- Update push rules for experimental [MSC4306: Thread \ 
Subscriptions](https://github.com/matrix-org/matrix-doc/issues/4306) to follow a \ 
newer draft. ([\#18846](https://github.com/element-hq/synapse/issues/18846))
- Add `get_media_upload_limits_for_user` and `on_media_upload_limit_exceeded` \ 
module API callbacks to the media repository. \ 
([\#18848](https://github.com/element-hq/synapse/issues/18848))
- Support \ 
[MSC4169](https://github.com/matrix-org/matrix-spec-proposals/pull/4169) for \ 
backwards-compatible redaction sending using the `/send` endpoint. Contributed \ 
by @SpiritCroc @ Beeper. \ 
([\#18898](https://github.com/element-hq/synapse/issues/18898))
- Add an in-memory cache to `_get_e2e_cross_signing_signatures_for_devices` to \ 
reduce DB load. ([\#18899](https://github.com/element-hq/synapse/issues/18899))
- Update \ 
[MSC4190](https://github.com/matrix-org/matrix-spec-proposals/pull/4190) support \ 
to return correct errors and allow appservices to reset cross-signing keys \ 
without user-interactive authentication. Contributed by @tulir @ Beeper. \ 
([\#18946](https://github.com/element-hq/synapse/issues/18946))
## Deprecations and Removals
- Remove obsolete and experimental `/sync/e2ee` endpoint. \ 
([\#18583](https://github.com/element-hq/synapse/issues/18583))
# Synapse 1.138.0 (2025-09-09)
## Features
- Support for the stable endpoint and scopes of \ 
[MSC3861](https://github.com/matrix-org/matrix-spec-proposals/pull/3861) & \ 
co. ([\#18549](https://github.com/element-hq/synapse/issues/18549))

Log message:
chat/matrix-synapse: Cope with poetry instability

Log message:
chat/matrix-synapse: Update to 1.137.0
Upstream changes since 1.135.2: bugfixes and minor improvements.

Log message:
chat/matrix-synapse: Update to 1.135.2
(There was no 1.135.1.)
pkgsrc:
  - Drop room creator power level patch, overtaken by upstream changes
    in this release.
# Synapse 1.135.2 (2025-08-11)
This is the Synapse portion of the
[Matrix coordinated security \ 
release](https://matrix.org/blog/2025/07/security-predisclosure/).
This release includes support for
[room version](https://spec.matrix.org/v1.15/rooms/)
12 which fixes a number of security vulnerabilities, including
[CVE-2025-49090](https://www.cve.org/CVERecord?id=CVE-2025-49090).
The default room version is not changed. Not all clients will support
room version 12 immediately, and not all users will be using the
latest version of their clients. Large, public rooms are advised to
wait a few weeks before upgrading to room version 12 to allow users
throughout the Matrix ecosystem to update their clients.
### Bugfixes
- Fix invalidation of storage cache that was broken in 1.135.0.
  ([\#18786](https://github.com/element-hq/synapse/issues/18786))
### Internal Changes
- Add a parameter to `upgrade_rooms(..)` to allow auto join local users.
  ([\#82](https://github.com/element-hq/synapse/issues/82))
- Speed up upgrading a room with large numbers of banned users.
  ([\#18574](https://github.com/element-hq/synapse/issues/18574))

Log message:
chat/matrix-synapase: Update to 1.135.0
Tested on NetBSD 9 amd64 (federation, multiple clients)
# Synapse 1.135.0 (2025-08-01)
## Features
- Add `recaptcha_private_key_path` and `recaptcha_public_key_path` config \ 
option. ([\#17984](https://github.com/element-hq/synapse/issues/17984), \ 
[\#18684](https://github.com/element-hq/synapse/issues/18684))
- Add plain-text handling for rich-text topics as per \ 
[MSC3765](https://github.com/matrix-org/matrix-spec-proposals/pull/3765). \ 
([\#18195](https://github.com/element-hq/synapse/issues/18195))
- If enabled by the user, server admins will see [soft \ 
failed](https://spec.matrix.org/v1.13/server-server-api/#soft-failure) events \ 
over the Client-Server API. \ 
([\#18238](https://github.com/element-hq/synapse/issues/18238))
- Add experimental support for [MSC4277: Harmonizing the reporting \ 
endpoints](https://github.com/matrix-org/matrix-spec-proposals/pull/4277). \ 
([\#18263](https://github.com/element-hq/synapse/issues/18263))
- Add ability to limit amount of media uploaded by a user in a given time \ 
period. ([\#18527](https://github.com/element-hq/synapse/issues/18527))
- Enable workers to write directly to the device lists stream and handle device \ 
list updates, reducing load on the main process. \ 
([\#18581](https://github.com/element-hq/synapse/issues/18581))
- Support arbitrary profile fields. Contributed by @clokep. \ 
([\#18635](https://github.com/element-hq/synapse/issues/18635))
- Advertise support for Matrix v1.12. \ 
([\#18647](https://github.com/element-hq/synapse/issues/18647))
- Add an option to issue redactions as an admin user via the [admin redaction \ 
endpoint](https://element-hq.github.io/synapse/latest/admin_api/user_admin_api.html#redact-all-the-events-of-a-user). \ 
([\#18671](https://github.com/element-hq/synapse/issues/18671))
- Add experimental and incomplete support for [MSC4306: Thread \ 
Subscriptions](https://github.com/matrix-org/matrix-spec-proposals/blob/rei/msc_thread_subscriptions/proposals/4306-thread-subscriptions.md). \ 
([\#18674](https://github.com/element-hq/synapse/issues/18674))
- Include `event_id` when getting state with `?format=event`. Contributed by \ 
@tulir @ Beeper. ([\#18675](https://github.com/element-hq/synapse/issues/18675))