Releases: element-hq/matrix-authentication-service
Unstable build
This is an automatically updated unstable release containing the latest builds from the main branch.
Last updated: 2025-10-30T14:00:01Z
Commit: ab52f7e
Docker image
Regular image:
- Digest:
ghcr.io/element-hq/matrix-authentication-service@sha256:0809c1870789e6c24f1344006b60d8bc9f8ca26f4ae4ba0d7957a1caf77e2be3 - Tags:
ghcr.io/element-hq/matrix-authentication-service:main ghcr.io/element-hq/matrix-authentication-service:sha-ab52f7e 
Debug variant:
- Digest:
ghcr.io/element-hq/matrix-authentication-service@sha256:e6da33295210df0184e9e033a590973730a06cbbe341f31681705f97a6f0d6b1 - Tags:
ghcr.io/element-hq/matrix-authentication-service:main-debug ghcr.io/element-hq/matrix-authentication-service:sha-ab52f7e-debug 
v1.5.0
Docker image
Regular image:
- Digest:
ghcr.io/element-hq/matrix-authentication-service@sha256:6c4ecc128668ae3cbf9cb319ee45ad45c0f01a96adca4841d10e662dd4a7fdc1 - Tags:
ghcr.io/element-hq/matrix-authentication-service:1.5.0 ghcr.io/element-hq/matrix-authentication-service:1.5 ghcr.io/element-hq/matrix-authentication-service:1 ghcr.io/element-hq/matrix-authentication-service:sha-dc3fdd6 ghcr.io/element-hq/matrix-authentication-service:latest 
Debug variant:
- Digest:
ghcr.io/element-hq/matrix-authentication-service@sha256:8809ab9c22c5cfed682fbf5de79190cf15e2ee8607d3f83d69859c01744aba97 - Tags:
ghcr.io/element-hq/matrix-authentication-service:1.5.0-debug ghcr.io/element-hq/matrix-authentication-service:1.5-debug ghcr.io/element-hq/matrix-authentication-service:1-debug ghcr.io/element-hq/matrix-authentication-service:sha-dc3fdd6-debug ghcr.io/element-hq/matrix-authentication-service:latest-debug 
What's Changed
Bug Fixes
- Fix UNIQUE constraint on active personal access tokens per session by @reivilibre in #5196
 
New Features
- Add storage for Personal Access Tokens by @reivilibre in #5106
 - Accept personal access tokens on the Admin API by @reivilibre in #5183
 - When adding or revoking personal sessions, schedule device synchronisation by @reivilibre in #5182
 - Revoke personal sessions when users are deactivated by @reivilibre in #5181
 
Changes to the admin API
- Personal Sessions: add create, list, get, revoke, regenerate Admin APIs by @reivilibre in #5141
 
Documentation
Translations
- Translations updates for main by @matrixbot in #5185
 - Translations updates for v1.5 by @matrixbot in #5209
 
Internal Changes
- Automatic merge back to main by @matrixbot in #5119
 - Automatic merge back to main by @matrixbot in #5130
 - Automatic merge back to main by @matrixbot in #5149
 - Automatic merge back to main by @matrixbot in #5156
 - Highlight dangerous scopes when consenting to them by @sandhose in #5180
 
Dependency Updates
- build(deps): bump swagger-ui-dist from 5.29.1 to 5.29.3 in /frontend by @dependabot[bot] in #5122
 - build(deps-dev): bump tailwindcss from 3.4.17 to 3.4.18 in /frontend by @dependabot[bot] in #5123
 - build(deps-dev): bump knip from 5.64.1 to 5.64.2 in /frontend by @dependabot[bot] in #5121
 - build(deps-dev): bump typescript from 5.9.2 to 5.9.3 in /frontend by @dependabot[bot] in #5120
 - build(deps): bump psl from 2.1.147 to 2.1.148 by @dependabot[bot] in #5127
 - build(deps): bump lettre from 0.11.18 to 0.11.19 by @dependabot[bot] in #5126
 - build(deps): bump softprops/action-gh-release from 2.4.0 to 2.4.1 by @dependabot[bot] in #5137
 - build(deps): bump socket2 from 0.6.0 to 0.6.1 by @dependabot[bot] in #5140
 - build(deps): bump actions/setup-node from 5.0.0 to 6.0.0 by @dependabot[bot] in #5142
 - build(deps-dev): bump the types group across 1 directory with 2 updates by @dependabot[bot] in #5144
 - build(deps): bump tokio from 1.47.1 to 1.48.0 by @dependabot[bot] in #5145
 - build(deps): bump regex from 1.11.3 to 1.12.2 by @dependabot[bot] in #5146
 - build(deps-dev): bump happy-dom from 19.0.2 to 20.0.4 in /frontend by @dependabot[bot] in #5159
 - build(deps): bump sigstore/cosign-installer from 3.10.0 to 4.0.0 by @dependabot[bot] in #5158
 - build(deps): bump the i18next group across 1 directory with 2 updates by @dependabot[bot] in #5143
 - build(deps-dev): bump vite from 7.1.9 to 7.1.11 in /frontend in the vite group by @dependabot[bot] in #5167
 - build(deps): bump the sentry group with 3 updates by @dependabot[bot] in #5166
 - build(deps): bump @tanstack/react-query from 5.90.2 to 5.90.5 in /frontend in the tanstack-query group by @dependabot[bot] in #5165
 - build(deps): bump ruma-common from 0.15.4 to 0.16.0 by @dependabot[bot] in #5169
 - build(deps-dev): bump msw from 2.11.3 to 2.11.6 in /frontend by @dependabot[bot] in #5164
 - build(deps): bump swagger-ui-dist from 5.29.3 to 5.29.5 in /frontend by @dependabot[bot] in #5160
 - Support personal access tokens for introspection by @reivilibre in #5171
 - build(deps): bump clap from 4.5.48 to 4.5.50 by @dependabot[bot] in #5177
 - build(deps-dev): bump the storybook group in /frontend with 3 updates by @dependabot[bot] in #5172
 - build(deps): bump react-i18next from 16.1.0 to 16.1.3 in /frontend in the i18next group by @dependabot[bot] in #5173
 - build(deps): bump reqwest from 0.12.23 to 0.12.24 by @dependabot[bot] in #5178
 - build(deps-dev): bump @types/node from 24.8.1 to 24.9.1 in /frontend in the types group by @dependabot[bot] in #5176
 - build(deps-dev): bump @graphql-codegen/cli from 6.0.0 to 6.0.1 in /frontend in the graphql-codegen group by @dependabot[bot] in #5175
 
New Contributors
Full Changelog: v1.4.1...v1.5.0
v1.5.0-rc.1
Docker image
Regular image:
- Digest:
ghcr.io/element-hq/matrix-authentication-service@sha256:351ccd59722cffe0d5a81ee36f6967ec898af775c089266d2976d401fec12696 - Tags:
ghcr.io/element-hq/matrix-authentication-service:1.5.0-rc.1 ghcr.io/element-hq/matrix-authentication-service:sha-2f94de2 
Debug variant:
- Digest:
ghcr.io/element-hq/matrix-authentication-service@sha256:c7bee17e8c9ff2dc43c8747887cb571908f581623cf2ca74dca8badd7402ff8d - Tags:
ghcr.io/element-hq/matrix-authentication-service:1.5.0-rc.1-debug ghcr.io/element-hq/matrix-authentication-service:sha-2f94de2-debug 
What's Changed
Bug Fixes
- Fix UNIQUE constraint on active personal access tokens per session by @reivilibre in #5196
 
Full Changelog: v1.5.0-rc.0...v1.5.0-rc.1
v1.5.0-rc.0
Docker image
Regular image:
- Digest:
ghcr.io/element-hq/matrix-authentication-service@sha256:1ac533a5c1d88f4484fef1e5883b3ed4e2d5111fe5ce9aacfa5852823c7406b6 - Tags:
ghcr.io/element-hq/matrix-authentication-service:1.5.0-rc.0 ghcr.io/element-hq/matrix-authentication-service:sha-6d2ed5a 
Debug variant:
- Digest:
ghcr.io/element-hq/matrix-authentication-service@sha256:a6002fdea6d0ec58bed4c45817b1f1eb0b21b5e512946222c8030c6c5cefa25a - Tags:
ghcr.io/element-hq/matrix-authentication-service:1.5.0-rc.0-debug ghcr.io/element-hq/matrix-authentication-service:sha-6d2ed5a-debug 
What's Changed
New Features
- Add storage for Personal Access Tokens by @reivilibre in #5106
 - Accept personal access tokens on the Admin API by @reivilibre in #5183
 - When adding or revoking personal sessions, schedule device synchronisation by @reivilibre in #5182
 - Revoke personal sessions when users are deactivated by @reivilibre in #5181
 
Changes to the admin API
- Personal Sessions: add create, list, get, revoke, regenerate Admin APIs by @reivilibre in #5141
 
Documentation
Translations
- Translations updates for main by @matrixbot in #5185
 
Internal Changes
- Automatic merge back to main by @matrixbot in #5119
 - Automatic merge back to main by @matrixbot in #5130
 - Automatic merge back to main by @matrixbot in #5149
 - Automatic merge back to main by @matrixbot in #5156
 - Highlight dangerous scopes when consenting to them by @sandhose in #5180
 
Dependency Updates
- build(deps): bump swagger-ui-dist from 5.29.1 to 5.29.3 in /frontend by @dependabot[bot] in #5122
 - build(deps-dev): bump tailwindcss from 3.4.17 to 3.4.18 in /frontend by @dependabot[bot] in #5123
 - build(deps-dev): bump knip from 5.64.1 to 5.64.2 in /frontend by @dependabot[bot] in #5121
 - build(deps-dev): bump typescript from 5.9.2 to 5.9.3 in /frontend by @dependabot[bot] in #5120
 - build(deps): bump psl from 2.1.147 to 2.1.148 by @dependabot[bot] in #5127
 - build(deps): bump lettre from 0.11.18 to 0.11.19 by @dependabot[bot] in #5126
 - build(deps): bump softprops/action-gh-release from 2.4.0 to 2.4.1 by @dependabot[bot] in #5137
 - build(deps): bump socket2 from 0.6.0 to 0.6.1 by @dependabot[bot] in #5140
 - build(deps): bump actions/setup-node from 5.0.0 to 6.0.0 by @dependabot[bot] in #5142
 - build(deps-dev): bump the types group across 1 directory with 2 updates by @dependabot[bot] in #5144
 - build(deps): bump tokio from 1.47.1 to 1.48.0 by @dependabot[bot] in #5145
 - build(deps): bump regex from 1.11.3 to 1.12.2 by @dependabot[bot] in #5146
 - build(deps-dev): bump happy-dom from 19.0.2 to 20.0.4 in /frontend by @dependabot[bot] in #5159
 - build(deps): bump sigstore/cosign-installer from 3.10.0 to 4.0.0 by @dependabot[bot] in #5158
 - build(deps): bump the i18next group across 1 directory with 2 updates by @dependabot[bot] in #5143
 - build(deps-dev): bump vite from 7.1.9 to 7.1.11 in /frontend in the vite group by @dependabot[bot] in #5167
 - build(deps): bump the sentry group with 3 updates by @dependabot[bot] in #5166
 - build(deps): bump @tanstack/react-query from 5.90.2 to 5.90.5 in /frontend in the tanstack-query group by @dependabot[bot] in #5165
 - build(deps): bump ruma-common from 0.15.4 to 0.16.0 by @dependabot[bot] in #5169
 - build(deps-dev): bump msw from 2.11.3 to 2.11.6 in /frontend by @dependabot[bot] in #5164
 - build(deps): bump swagger-ui-dist from 5.29.3 to 5.29.5 in /frontend by @dependabot[bot] in #5160
 - Support personal access tokens for introspection by @reivilibre in #5171
 - build(deps): bump clap from 4.5.48 to 4.5.50 by @dependabot[bot] in #5177
 - build(deps-dev): bump the storybook group in /frontend with 3 updates by @dependabot[bot] in #5172
 - build(deps): bump react-i18next from 16.1.0 to 16.1.3 in /frontend in the i18next group by @dependabot[bot] in #5173
 - build(deps): bump reqwest from 0.12.23 to 0.12.24 by @dependabot[bot] in #5178
 - build(deps-dev): bump @types/node from 24.8.1 to 24.9.1 in /frontend in the types group by @dependabot[bot] in #5176
 - build(deps-dev): bump @graphql-codegen/cli from 6.0.0 to 6.0.1 in /frontend in the graphql-codegen group by @dependabot[bot] in #5175
 
New Contributors
Full Changelog: v1.4.1...v1.5.0-rc.0
v1.4.1
Security release
This is a security release which includes a fix for CVE-2025-62425 / GHSA-6wfp-jq3r-j9xh, which affects servers using the local password database, starting MAS 0.20.0 and later. See the advisory for details.
Docker image
Regular image:
- Digest:
ghcr.io/element-hq/matrix-authentication-service@sha256:af3c8e1207d5b6ef575454a0211dab07ba816be219607f6568a52ab42978c23c - Tags:
ghcr.io/element-hq/matrix-authentication-service:1.4.1 ghcr.io/element-hq/matrix-authentication-service:1.4 ghcr.io/element-hq/matrix-authentication-service:1 ghcr.io/element-hq/matrix-authentication-service:sha-2427205 ghcr.io/element-hq/matrix-authentication-service:latest 
Debug variant:
- Digest:
ghcr.io/element-hq/matrix-authentication-service@sha256:87067d4dd8397b3dc86bcdc8b377c331f04645bf3134ec850a4afc8c61be53aa - Tags:
ghcr.io/element-hq/matrix-authentication-service:1.4.1-debug ghcr.io/element-hq/matrix-authentication-service:1.4-debug ghcr.io/element-hq/matrix-authentication-service:1-debug ghcr.io/element-hq/matrix-authentication-service:sha-2427205-debug ghcr.io/element-hq/matrix-authentication-service:latest-debug 
Full Changelog: v1.4.0...v1.4.1
v1.4.0
Docker image
Regular image:
- Digest:
ghcr.io/element-hq/matrix-authentication-service@sha256:5983acb727971c298b3b08fe04383b820d1fc6cf60fb08aad3e7edfe9ea485b4 - Tags:
ghcr.io/element-hq/matrix-authentication-service:1.4.0 ghcr.io/element-hq/matrix-authentication-service:1.4 ghcr.io/element-hq/matrix-authentication-service:1 ghcr.io/element-hq/matrix-authentication-service:sha-341ac89 ghcr.io/element-hq/matrix-authentication-service:latest 
Debug variant:
- Digest:
ghcr.io/element-hq/matrix-authentication-service@sha256:8f3f505deef6bb214ce507f56fd7e20b04133a1ce4853fad9a5901ec2318b17d - Tags:
ghcr.io/element-hq/matrix-authentication-service:1.4.0-debug ghcr.io/element-hq/matrix-authentication-service:1.4-debug ghcr.io/element-hq/matrix-authentication-service:1-debug ghcr.io/element-hq/matrix-authentication-service:sha-341ac89-debug ghcr.io/element-hq/matrix-authentication-service:latest-debug 
What's Changed
Bug Fixes
- Admin API: make sure the meta fields are nullable by @sandhose in #5084
 - Always initialize OpenTelemetry even if no exporter is configured by @sandhose in #5128
 
New Features
Changes to the admin API
- Add explicit pagination cursors in the admin API by @sandhose in #5062
 - Admin API: add control over the page & total count in the list endpoints by @sandhose in #5065
 - Admin API: add endpoint to get an Upstream OAuth Provider by ID by @sandhose in #5083
 - Admin API to get the version of the service by @sandhose in #5102
 - Add admin APIs to finish individual sessions by @sandhose in #5091
 
Translations
- Translations updates for main by @matrixbot in #5107
 - Translations updates for main by @matrixbot in #5118
 - Translations updates for v1.4 by @matrixbot in #5129
 - Translations updates for v1.4 by @matrixbot in #5148
 
Internal Changes
- Automatic merge back to main by @matrixbot in #5033
 - Automatic merge back to main by @matrixbot in #5056
 
Dependency Updates
- build(deps-dev): bump the vite group across 1 directory with 3 updates by @dependabot[bot] in #5041
 - build(deps): bump tokio-rustls from 0.26.2 to 0.26.3 by @dependabot[bot] in #5038
 - build(deps): bump rustls from 0.23.31 to 0.23.32 by @dependabot[bot] in #5046
 - build(deps): bump indexmap from 2.11.3 to 2.11.4 by @dependabot[bot] in #5047
 - build(deps-dev): bump the types group across 1 directory with 2 updates by @dependabot[bot] in #5068
 - build(deps): bump serde from 1.0.225 to 1.0.228 by @dependabot[bot] in #5067
 - build(deps): bump docker/login-action from 3.5.0 to 3.6.0 by @dependabot[bot] in #5066
 - build(deps): bump psl from 2.1.141 to 2.1.145 by @dependabot[bot] in #5063
 - build(deps): bump clap from 4.5.47 to 4.5.48 by @dependabot[bot] in #5051
 - build(deps): bump anyhow from 1.0.99 to 1.0.100 by @dependabot[bot] in #5053
 - build(deps-dev): bump the storybook group in /frontend with 3 updates by @dependabot[bot] in #5044
 - build(deps): bump the fontsource group in /frontend with 2 updates by @dependabot[bot] in #5035
 - build(deps-dev): bump the graphql-codegen group in /frontend with 2 updates by @dependabot[bot] in #4997
 - build(deps-dev): bump the vite group in /frontend with 2 updates by @dependabot[bot] in #5064
 - build(deps): bump the axum group with 2 updates by @dependabot[bot] in #5071
 - build(deps): bump the tanstack-query group in /frontend with 2 updates by @dependabot[bot] in #5072
 - build(deps-dev): bump the types group in /frontend with 2 updates by @dependabot[bot] in #5073
 - build(deps): bump tokio-rustls from 0.26.3 to 0.26.4 by @dependabot[bot] in #5075
 - build(deps): bump camino from 1.2.0 to 1.2.1 by @dependabot[bot] in #5076
 - build(deps-dev): bump @graphql-codegen/client-preset from 5.0.1 to 5.0.2 in /frontend in the graphql-codegen group by @dependabot[bot] in #5070
 - build(deps-dev): bump knip from 5.63.1 to 5.64.1 in /frontend by @dependabot[bot] in #5078
 - build(deps-dev): bump happy-dom from 18.0.1 to 19.0.2 in /frontend by @dependabot[bot] in #5079
 - build(deps): bump regex from 1.11.2 to 1.11.3 by @dependabot[bot] in #5080
 - build(deps): bump psl from 2.1.145 to 2.1.146 by @dependabot[bot] in #5082
 - build(deps): bump zeroize from 1.8.1 to 1.8.2 by @dependabot[bot] in #5081
 - build(deps-dev): bump msw from 2.11.2 to 2.11.3 in /frontend by @dependabot[bot] in #5077
 - build(deps): bump react-i18next from 15.7.3 to 16.0.0 in /frontend in the i18next group by @dependabot[bot] in #5069
 - build(deps): bump the axum group with 2 updates by @dependabot[bot] in #5088
 - build(deps): bump thiserror from 2.0.16 to 2.0.17 by @dependabot[bot] in #5089
 - build(deps): bump swagger-ui-dist from 5.29.0 to 5.29.1 in /frontend by @dependabot[bot] in #5087
 - build(deps-dev): bump the storybook group in /frontend with 3 updates by @dependabot[bot] in #5085
 - build(deps): bump psl from 2.1.146 to 2.1.147 by @dependabot[bot] in #5095
 - build(deps-dev): bump the storybook group in /frontend with 3 updates by @dependabot[bot] in #5096
 - build(deps): bump i18next from 25.5.2 to 25.5.3 in /frontend in the i18next group by @dependabot[bot] in #5097
 - build(deps-dev): bump @types/node from 24.6.0 to 24.6.1 in /frontend in the types group by @dependabot[bot] in #5098
 - build(deps-dev): bump @testing-library/jest-dom from 6.8.0 to 6.9.1 in /frontend by @dependabot[bot] in #5100
 - build(deps): bump pest from 2.8.2 to 2.8.3 by @dependabot[bot] in #5103
 - build(deps): bump softprops/action-gh-release from 2.3.3 to 2.4.0 by @dependabot[bot] in #5108
 - build(deps): bump the opentelemetry group with 2 updates by @dependabot[bot] in #5074
 - build(deps-dev): bump vite from 7.1.7 to 7.1.9 in /frontend in the vite group by @dependabot[bot] in #5113
 - build(deps-dev): bump @biomejs/biome from 2.2.4 to 2.2.5 in /frontend by @dependabot[bot] in #5116
 - build(deps): bump pest_derive from 2.8.2 to 2.8.3 by @dependabot[bot] in #5117
 - build(deps-dev): bump @graphql-codegen/client-preset from 5.0.2 to 5.1.0 in /frontend in the graphql-codegen group by @depen...
 
v1.4.0-rc.1
Docker image
Regular image:
- Digest:
ghcr.io/element-hq/matrix-authentication-service@sha256:fca02a070c3c79a40ae6a748ee77fe2352b8bf4d955d77f5338faac10222a3d8 - Tags:
ghcr.io/element-hq/matrix-authentication-service:1.4.0-rc.1 ghcr.io/element-hq/matrix-authentication-service:sha-e0f62cb 
Debug variant:
- Digest:
ghcr.io/element-hq/matrix-authentication-service@sha256:4313d18039f0270dd7d9e2661a230536cbf83283361830695ee561aec58a335a - Tags:
ghcr.io/element-hq/matrix-authentication-service:1.4.0-rc.1-debug ghcr.io/element-hq/matrix-authentication-service:sha-e0f62cb-debug 
What's Changed
Bug fixes
Translations
- Translations updates for v1.4 by @matrixbot in #5129
 
Full Changelog: v1.4.0-rc.0...v1.4.0-rc.1
v1.4.0-rc.0
Docker image
Regular image:
- Digest:
ghcr.io/element-hq/matrix-authentication-service@sha256:8601ef4c1b493639f8354a5a760c203bfd0095333037f20ca60069cf09e2adfb - Tags:
ghcr.io/element-hq/matrix-authentication-service:1.4.0-rc.0 ghcr.io/element-hq/matrix-authentication-service:sha-be707c9 
Debug variant:
- Digest:
ghcr.io/element-hq/matrix-authentication-service@sha256:dea1799aa0ccf0917358a43aac650b406f95e50e79b28af8948b1294120f9967 - Tags:
ghcr.io/element-hq/matrix-authentication-service:1.4.0-rc.0-debug ghcr.io/element-hq/matrix-authentication-service:sha-be707c9-debug 
What's Changed
Bug Fixes
New Features
Changes to the admin API
- Add explicit pagination cursors in the admin API by @sandhose in #5062
 - Admin API: add control over the page & total count in the list endpoints by @sandhose in #5065
 - Admin API: add endpoint to get an Upstream OAuth Provider by ID by @sandhose in #5083
 - Admin API to get the version of the service by @sandhose in #5102
 - Add admin APIs to finish individual sessions by @sandhose in #5091
 
Translations
- Translations updates for main by @matrixbot in #5107
 - Translations updates for main by @matrixbot in #5118
 
Internal Changes
- Automatic merge back to main by @matrixbot in #5033
 - Automatic merge back to main by @matrixbot in #5056
 
Dependency Updates
- build(deps-dev): bump the vite group across 1 directory with 3 updates by @dependabot[bot] in #5041
 - build(deps): bump tokio-rustls from 0.26.2 to 0.26.3 by @dependabot[bot] in #5038
 - build(deps): bump rustls from 0.23.31 to 0.23.32 by @dependabot[bot] in #5046
 - build(deps): bump indexmap from 2.11.3 to 2.11.4 by @dependabot[bot] in #5047
 - build(deps-dev): bump the types group across 1 directory with 2 updates by @dependabot[bot] in #5068
 - build(deps): bump serde from 1.0.225 to 1.0.228 by @dependabot[bot] in #5067
 - build(deps): bump docker/login-action from 3.5.0 to 3.6.0 by @dependabot[bot] in #5066
 - build(deps): bump psl from 2.1.141 to 2.1.145 by @dependabot[bot] in #5063
 - build(deps): bump clap from 4.5.47 to 4.5.48 by @dependabot[bot] in #5051
 - build(deps): bump anyhow from 1.0.99 to 1.0.100 by @dependabot[bot] in #5053
 - build(deps-dev): bump the storybook group in /frontend with 3 updates by @dependabot[bot] in #5044
 - build(deps): bump the fontsource group in /frontend with 2 updates by @dependabot[bot] in #5035
 - build(deps-dev): bump the graphql-codegen group in /frontend with 2 updates by @dependabot[bot] in #4997
 - build(deps-dev): bump the vite group in /frontend with 2 updates by @dependabot[bot] in #5064
 - build(deps): bump the axum group with 2 updates by @dependabot[bot] in #5071
 - build(deps): bump the tanstack-query group in /frontend with 2 updates by @dependabot[bot] in #5072
 - build(deps-dev): bump the types group in /frontend with 2 updates by @dependabot[bot] in #5073
 - build(deps): bump tokio-rustls from 0.26.3 to 0.26.4 by @dependabot[bot] in #5075
 - build(deps): bump camino from 1.2.0 to 1.2.1 by @dependabot[bot] in #5076
 - build(deps-dev): bump @graphql-codegen/client-preset from 5.0.1 to 5.0.2 in /frontend in the graphql-codegen group by @dependabot[bot] in #5070
 - build(deps-dev): bump knip from 5.63.1 to 5.64.1 in /frontend by @dependabot[bot] in #5078
 - build(deps-dev): bump happy-dom from 18.0.1 to 19.0.2 in /frontend by @dependabot[bot] in #5079
 - build(deps): bump regex from 1.11.2 to 1.11.3 by @dependabot[bot] in #5080
 - build(deps): bump psl from 2.1.145 to 2.1.146 by @dependabot[bot] in #5082
 - build(deps): bump zeroize from 1.8.1 to 1.8.2 by @dependabot[bot] in #5081
 - build(deps-dev): bump msw from 2.11.2 to 2.11.3 in /frontend by @dependabot[bot] in #5077
 - build(deps): bump react-i18next from 15.7.3 to 16.0.0 in /frontend in the i18next group by @dependabot[bot] in #5069
 - build(deps): bump the axum group with 2 updates by @dependabot[bot] in #5088
 - build(deps): bump thiserror from 2.0.16 to 2.0.17 by @dependabot[bot] in #5089
 - build(deps): bump swagger-ui-dist from 5.29.0 to 5.29.1 in /frontend by @dependabot[bot] in #5087
 - build(deps-dev): bump the storybook group in /frontend with 3 updates by @dependabot[bot] in #5085
 - build(deps): bump psl from 2.1.146 to 2.1.147 by @dependabot[bot] in #5095
 - build(deps-dev): bump the storybook group in /frontend with 3 updates by @dependabot[bot] in #5096
 - build(deps): bump i18next from 25.5.2 to 25.5.3 in /frontend in the i18next group by @dependabot[bot] in #5097
 - build(deps-dev): bump @types/node from 24.6.0 to 24.6.1 in /frontend in the types group by @dependabot[bot] in #5098
 - build(deps-dev): bump @testing-library/jest-dom from 6.8.0 to 6.9.1 in /frontend by @dependabot[bot] in #5100
 - build(deps): bump pest from 2.8.2 to 2.8.3 by @dependabot[bot] in #5103
 - build(deps): bump softprops/action-gh-release from 2.3.3 to 2.4.0 by @dependabot[bot] in #5108
 - build(deps): bump the opentelemetry group with 2 updates by @dependabot[bot] in #5074
 - build(deps-dev): bump vite from 7.1.7 to 7.1.9 in /frontend in the vite group by @dependabot[bot] in #5113
 - build(deps-dev): bump @biomejs/biome from 2.2.4 to 2.2.5 in /frontend by @dependabot[bot] in #5116
 - build(deps): bump pest_derive from 2.8.2 to 2.8.3 by @dependabot[bot] in #5117
 - build(deps-dev): bump @graphql-codegen/client-preset from 5.0.2 to 5.1.0 in /frontend in the graphql-codegen group by @dependabot[bot] in #5115
 - build(deps): bump the react group in /frontend with 2 updates by @dependabot[bot] in #5114
 
Full Changelog: v1.3.0...v1.4.0-rc.0
v1.3.0
Docker image
Regular image:
- Digest:
ghcr.io/element-hq/matrix-authentication-service@sha256:259fc942dcdab00ef3a429e002cba21b80520d7f6cbcc176eeeb416a1d088ba9 - Tags:
ghcr.io/element-hq/matrix-authentication-service:1.3.0 ghcr.io/element-hq/matrix-authentication-service:1.3 ghcr.io/element-hq/matrix-authentication-service:1 ghcr.io/element-hq/matrix-authentication-service:sha-e1398a5 ghcr.io/element-hq/matrix-authentication-service:latest 
Debug variant:
- Digest:
ghcr.io/element-hq/matrix-authentication-service@sha256:2159d8a35459f73915acf357362bee18526a94f0daff10ac1aa15d43bf73c0ec - Tags:
ghcr.io/element-hq/matrix-authentication-service:1.3.0-debug ghcr.io/element-hq/matrix-authentication-service:1.3-debug ghcr.io/element-hq/matrix-authentication-service:1-debug ghcr.io/element-hq/matrix-authentication-service:sha-e1398a5-debug ghcr.io/element-hq/matrix-authentication-service:latest-debug 
What's Changed
Bug Fixes
- Make 
token_endpoint_auth_signing_alg_values_supportedoptional in upstream OIDC providers metadata by @LeonWilzer in #4984 - Trim the secret read by the 
matrix.secret_fileconfiguration option by @mweinelt in #4961 
New Features
Changes to the admin API
- Admin API to expose a few configuration values by @sandhose in #5010
 - Expose the legacy guest/non-guest flag on users in the admin API by @sandhose in #5014
 - Admin API filter to search users by username by @sandhose in #5015
 - Admin API to list upstream OAuth 2.0 providers by @sandhose in #5043
 
Documentation
- Documentation: update links to policy files by @AndrewFerr in #4976
 - Request a refresh token in the 
device-code-grant.shhelper script by @Twi1ightSparkle in #4974 
Translations
- Translations updates for main by @matrixbot in #5032
 - Translations updates for v1.3 by @matrixbot in #5055
 
Internal Changes
- Automatic merge back to main by @matrixbot in #4966
 - Automatic merge back to main by @matrixbot in #4988
 - Remove the codecov vite plugin by @sandhose in #4994
 - Update dependencies in the Dockerfile by @sandhose in #4995
 - Allow more characters in redirect URI paths by @AndrewFerr in #4975
 - Switch to 
opentelemetry-prometheus-text-exporterby @sandhose in #4901 - Add references to MSCs for account management account= query param by @hughns in #5016
 
Dependency Updates
- build(deps): bump softprops/action-gh-release from 2.3.2 to 2.3.3 by @dependabot[bot] in #4985
 - build(deps): bump psl from 2.1.136 to 2.1.140 by @dependabot[bot] in #4986
 - build(deps-dev): bump vite from 6.3.5 to 6.3.6 in /frontend in the npm_and_yarn group across 1 directory by @dependabot[bot] in #4991
 - build(deps-dev): bump the storybook group in /frontend with 3 updates by @dependabot[bot] in #4972
 - build(deps): bump uuid from 1.18.0 to 1.18.1 by @dependabot[bot] in #4971
 - build(deps): bump camino from 1.1.11 to 1.1.12 by @dependabot[bot] in #4968
 - build(deps): bump bitflags from 2.9.3 to 2.9.4 by @dependabot[bot] in #4967
 - build(deps): bump actions/setup-node from 4.4.0 to 5.0.0 by @dependabot[bot] in #4978
 - build(deps): bump actions/github-script from 7.0.1 to 8.0.0 by @dependabot[bot] in #4981
 - build(deps): bump codecov/codecov-action from 5.5.0 to 5.5.1 by @dependabot[bot] in #4982
 - build(deps): bump the i18next group across 1 directory with 2 updates by @dependabot[bot] in #4979
 - build(deps-dev): bump @biomejs/biome from 2.1.2 to 2.2.4 in /frontend by @dependabot[bot] in #4992
 - build(deps): bump @fontsource/inconsolata from 5.2.6 to 5.2.7 in /frontend in the fontsource group by @dependabot[bot] in #4996
 - build(deps): bump the tanstack-router group in /frontend with 3 updates by @dependabot[bot] in #4998
 - build(deps): bump psl from 2.1.140 to 2.1.141 by @dependabot[bot] in #4999
 - build(deps): bump pest from 2.8.1 to 2.8.2 by @dependabot[bot] in #5001
 - build(deps): bump clap from 4.5.46 to 4.5.47 by @dependabot[bot] in #5002
 - build(deps): bump indexmap from 2.11.0 to 2.11.1 by @dependabot[bot] in #5000
 - build(deps-dev): bump the vite group across 1 directory with 3 updates by @dependabot[bot] in #4721
 - build(deps-dev): bump the types group in /frontend with 3 updates by @dependabot[bot] in #5004
 - build(deps): bump the tanstack-query group in /frontend with 2 updates by @dependabot[bot] in #5003
 - build(deps): bump chrono from 0.4.41 to 0.4.42 by @dependabot[bot] in #5006
 - build(deps): bump pest_derive from 2.8.1 to 2.8.2 by @dependabot[bot] in #5007
 - build(deps): bump insta from 1.43.1 to 1.43.2 by @dependabot[bot] in #5008
 - build(deps-dev): bump msw from 2.11.1 to 2.11.2 in /frontend by @dependabot[bot] in #5005
 - build(deps): bump @vector-im/compound-design-tokens from 5.0.2 to 6.0.0 in /frontend by @dependabot[bot] in #4828
 - build(deps): bump serde from 1.0.219 to 1.0.223 by @dependabot[bot] in #5024
 - build(deps): bump hyper-util from 0.1.16 to 0.1.17 by @dependabot[bot] in #5023
 - build(deps): bump camino from 1.1.12 to 1.2.0 by @dependabot[bot] in #5022
 - build(deps-dev): bump the types group in /frontend with 2 updates by @dependabot[bot] in #5021
 - build(deps): bump the tanstack-router group in /frontend with 3 updates by @dependabot[bot] in #5020
 - build(deps): bump @fontsource/inter from 5.2.6 to 5.2.7 in /frontend in the fontsource group by @dependabot[bot] in #5019
 - build(deps-dev): bump the storybook group in /frontend with 3 updates by @dependabot[bot] in #5018
 - build(deps): bump sigstore/cosign-installer from 3.9.2 to 3.10.0 by @dependabot[bot] in #5017
 - build(deps): bump serde_json from 1.0.143 to 1.0.145 by @dependabot[bot] in #5025
 - build(deps): bump indexmap from 2.11.1 to 2.11.3 by @dependabot[bot] in #5030
 - build(deps): bump serde from 1.0.223 to 1.0.225 by @dependabot[bot] in #5029
 - Bump locked dependencies by @sandhose in #5031
 - build(deps-dev): bump @types/node from 24.4.0 to 24.5.0 in /frontend in the types group by @dependabot[bot] in #5028
 - build(deps): bump the tanstack-query group in /frontend with 2 updates b...
 
v1.3.0-rc.0
Docker image
Regular image:
- Digest:
ghcr.io/element-hq/matrix-authentication-service@sha256:3fc4c0d4499c48866785584ae6509e0e5f4a29555d1be40f77fed2b0c63c7792 - Tags:
ghcr.io/element-hq/matrix-authentication-service:1.3.0-rc.0 ghcr.io/element-hq/matrix-authentication-service:sha-fb8c2a7 
Debug variant:
- Digest:
ghcr.io/element-hq/matrix-authentication-service@sha256:5c14bafdea5e308db0e70b542ed9867a66713701988532d0a7ab62b9cc5bf6a3 - Tags:
ghcr.io/element-hq/matrix-authentication-service:1.3.0-rc.0-debug ghcr.io/element-hq/matrix-authentication-service:sha-fb8c2a7-debug 
What's Changed
Bug Fixes
- Make 
token_endpoint_auth_signing_alg_values_supportedoptional in upstream OIDC providers metadata by @LeonWilzer in #4984 - Trim the secret read by the 
matrix.secret_fileconfiguration option by @mweinelt in #4961 
New Features
Changes to the admin API
- Admin API to expose a few configuration values by @sandhose in #5010
 - Expose the legacy guest/non-guest flag on users in the admin API by @sandhose in #5014
 - Admin API filter to search users by username by @sandhose in #5015
 
Documentation
- Documentation: update links to policy files by @AndrewFerr in #4976
 - Request a refresh token in the 
device-code-grant.shhelper script by @Twi1ightSparkle in #4974 
Translations
- Translations updates for main by @matrixbot in #5032
 
Internal Changes
- Automatic merge back to main by @matrixbot in #4966
 - Automatic merge back to main by @matrixbot in #4988
 - Remove the codecov vite plugin by @sandhose in #4994
 - Update dependencies in the Dockerfile by @sandhose in #4995
 - Allow more characters in redirect URI paths by @AndrewFerr in #4975
 - Switch to 
opentelemetry-prometheus-text-exporterby @sandhose in #4901 - Add references to MSCs for account management account= query param by @hughns in #5016
 
Dependency Updates
- build(deps): bump softprops/action-gh-release from 2.3.2 to 2.3.3 by @dependabot[bot] in #4985
 - build(deps): bump psl from 2.1.136 to 2.1.140 by @dependabot[bot] in #4986
 - build(deps-dev): bump vite from 6.3.5 to 6.3.6 in /frontend in the npm_and_yarn group across 1 directory by @dependabot[bot] in #4991
 - build(deps-dev): bump the storybook group in /frontend with 3 updates by @dependabot[bot] in #4972
 - build(deps): bump uuid from 1.18.0 to 1.18.1 by @dependabot[bot] in #4971
 - build(deps): bump camino from 1.1.11 to 1.1.12 by @dependabot[bot] in #4968
 - build(deps): bump bitflags from 2.9.3 to 2.9.4 by @dependabot[bot] in #4967
 - build(deps): bump actions/setup-node from 4.4.0 to 5.0.0 by @dependabot[bot] in #4978
 - build(deps): bump actions/github-script from 7.0.1 to 8.0.0 by @dependabot[bot] in #4981
 - build(deps): bump codecov/codecov-action from 5.5.0 to 5.5.1 by @dependabot[bot] in #4982
 - build(deps): bump the i18next group across 1 directory with 2 updates by @dependabot[bot] in #4979
 - build(deps-dev): bump @biomejs/biome from 2.1.2 to 2.2.4 in /frontend by @dependabot[bot] in #4992
 - build(deps): bump @fontsource/inconsolata from 5.2.6 to 5.2.7 in /frontend in the fontsource group by @dependabot[bot] in #4996
 - build(deps): bump the tanstack-router group in /frontend with 3 updates by @dependabot[bot] in #4998
 - build(deps): bump psl from 2.1.140 to 2.1.141 by @dependabot[bot] in #4999
 - build(deps): bump pest from 2.8.1 to 2.8.2 by @dependabot[bot] in #5001
 - build(deps): bump clap from 4.5.46 to 4.5.47 by @dependabot[bot] in #5002
 - build(deps): bump indexmap from 2.11.0 to 2.11.1 by @dependabot[bot] in #5000
 - build(deps-dev): bump the vite group across 1 directory with 3 updates by @dependabot[bot] in #4721
 - build(deps-dev): bump the types group in /frontend with 3 updates by @dependabot[bot] in #5004
 - build(deps): bump the tanstack-query group in /frontend with 2 updates by @dependabot[bot] in #5003
 - build(deps): bump chrono from 0.4.41 to 0.4.42 by @dependabot[bot] in #5006
 - build(deps): bump pest_derive from 2.8.1 to 2.8.2 by @dependabot[bot] in #5007
 - build(deps): bump insta from 1.43.1 to 1.43.2 by @dependabot[bot] in #5008
 - build(deps-dev): bump msw from 2.11.1 to 2.11.2 in /frontend by @dependabot[bot] in #5005
 - build(deps): bump @vector-im/compound-design-tokens from 5.0.2 to 6.0.0 in /frontend by @dependabot[bot] in #4828
 - build(deps): bump serde from 1.0.219 to 1.0.223 by @dependabot[bot] in #5024
 - build(deps): bump hyper-util from 0.1.16 to 0.1.17 by @dependabot[bot] in #5023
 - build(deps): bump camino from 1.1.12 to 1.2.0 by @dependabot[bot] in #5022
 - build(deps-dev): bump the types group in /frontend with 2 updates by @dependabot[bot] in #5021
 - build(deps): bump the tanstack-router group in /frontend with 3 updates by @dependabot[bot] in #5020
 - build(deps): bump @fontsource/inter from 5.2.6 to 5.2.7 in /frontend in the fontsource group by @dependabot[bot] in #5019
 - build(deps-dev): bump the storybook group in /frontend with 3 updates by @dependabot[bot] in #5018
 - build(deps): bump sigstore/cosign-installer from 3.9.2 to 3.10.0 by @dependabot[bot] in #5017
 - build(deps): bump serde_json from 1.0.143 to 1.0.145 by @dependabot[bot] in #5025
 - build(deps): bump indexmap from 2.11.1 to 2.11.3 by @dependabot[bot] in #5030
 - build(deps): bump serde from 1.0.223 to 1.0.225 by @dependabot[bot] in #5029
 - Bump locked dependencies by @sandhose in #5031
 - build(deps-dev): bump @types/node from 24.4.0 to 24.5.0 in /frontend in the types group by @dependabot[bot] in #5028
 - build(deps): bump the tanstack-query group in /frontend with 2 updates by @dependabot[bot] in #5027
 
New Contributors
- @LeonWilzer made their first contribution in #4984
 - @mweinelt made their first contribution in #4961
 - @Twi1ightSparkle made their first contribution in #4974
 
Full Changelog: v1.2.0...v1.3.0-rc.0