Unstable build

This is an automatically updated unstable release containing the latest builds from the main branch.

⚠️ Warning: These are development builds and may be unstable.

Last updated: 2025-12-05T15:28:12+01:00
Commit: 9629c31

Docker image

Regular image:

• Digest:

  ghcr.io/element-hq/matrix-authentication-service@sha256:1921169527f1914f8322866da95a2395d617ead1b9f0592f27f7c777a2b0c8d1
  

• Tags:

  ghcr.io/element-hq/matrix-authentication-service:main
  ghcr.io/element-hq/matrix-authentication-service:sha-9629c31
  

Debug variant:

• Digest:

  ghcr.io/element-hq/matrix-authentication-service@sha256:476774647d38600185891c4a413b1cd44d363de0fa7a96957a410184907d1845
  

• Tags:

  ghcr.io/element-hq/matrix-authentication-service:main-debug
  ghcr.io/element-hq/matrix-authentication-service:sha-9629c31-debug
  

v1.8.0-rc.0

Docker image

Regular image:

• Digest:

  ghcr.io/element-hq/matrix-authentication-service@sha256:6b4c4d1d8b47f8cbaf34455fb4af226c798c9be0b4366c41f2c76c171d07b97e
  

• Tags:

  ghcr.io/element-hq/matrix-authentication-service:1.8.0-rc.0
  ghcr.io/element-hq/matrix-authentication-service:sha-736d9fe
  

Debug variant:

• Digest:

  ghcr.io/element-hq/matrix-authentication-service@sha256:e60413cd1ccdf95a8d65916d6911d5e1cd31c2fd21c63dd69446558c9207a9a3
  

• Tags:

  ghcr.io/element-hq/matrix-authentication-service:1.8.0-rc.0-debug
  ghcr.io/element-hq/matrix-authentication-service:sha-736d9fe-debug
  

What's Changed

New Features

• Allow linking upstream accounts to matching users without confirmation by @sandhose in #5293
• Add more options to deal with localpart conflicts on upstream OAuth 2.0 logins by @sandhose in #5295
• Option to skip confirmation when registering through an upstream OAuth provider by @sandhose in #5296
• Simplify the consent screen by @sandhose in #5310

Documentation

• Fix documentation of --usage-limit and --unlimited parameters on issue-user-registration-token command. by @reivilibre in #5285
• Add Shibboleth sample configuration to SSO documentation by @Copilot in #5294

Translations

• Translations updates for main by @matrixbot in #5322

Internal Changes

• Automatic merge back to main by @matrixbot in #5270
• Automatic merge back to main by @matrixbot in #5290

Other Changes

• templates check: Add --stabilise flag to make renders reproducible by @reivilibre in #5214
• Add experimental and preliminary policy-driven session limiting when logging in OAuth 2 sessions. by @reivilibre in #5221
• Modify Nginx compatibility-layer location block to forward not just client stuff to matrix-synapse by @marrobHD in #5240
• Unify registrations for local passwords and upstream OAuth registrations by @sandhose in #5281
• Add 'IF NOT EXISTS' to all 'CREATE INDEX CONCURRENTLY' statements to avoid deadlocks by @benbz in #5297
• Revert "Add 'IF NOT EXISTS' to all 'CREATE INDEX CONCURRENTLY' statements to avoid deadlocks (#5297)" by @reivilibre in #5299
• Add experimental and preliminary policy-driven session limiting when logging in compatibility sessions. by @reivilibre in #5287
• Fix mockLocale for vitest 4.x spyOn breaking change by @Copilot in #5303
• Explain the purpose of signing keys in the config documentation. by @reivilibre in #5286

Dependency Updates

• build(deps-dev): bump vite from 7.2.2 to 7.2.4 in /frontend in the vite group by @dependabot[bot] in #5272
• build(deps): bump the i18next group in /frontend with 2 updates by @dependabot[bot] in #5273
• build(deps-dev): bump the graphql-codegen group in /frontend with 2 updates by @dependabot[bot] in #5278
• build(deps-dev): bump @biomejs/biome from 2.3.2 to 2.3.7 in /frontend by @dependabot[bot] in #5280
• build(deps-dev): bump msw-storybook-addon from 2.0.5 to 2.0.6 in /frontend by @dependabot[bot] in #5279
• build(deps): bump peter-evans/create-pull-request from 7.0.8 to 7.0.9 by @dependabot[bot] in #5283
• build(deps): bump EmbarkStudios/cargo-deny-action from 2.0.13 to 2.0.14 by @dependabot[bot] in #5288
• build(deps): bump valibot from 1.1.0 to 1.2.0 in /frontend by @dependabot[bot] in #5291
• build(deps): bump docker/bake-action from 6.9.0 to 6.10.0 by @dependabot[bot] in #5292
• build(deps): bump actions/checkout from 5 to 6 by @dependabot[bot] in #5277
• build(deps): bump convert_case from 0.8.0 to 0.9.0 by @dependabot[bot] in #5275
• build(deps-dev): bump the vitest group in /frontend with 2 updates by @dependabot[bot] in #5190
• build(deps-dev): bump the storybook group in /frontend with 3 updates by @dependabot[bot] in #5306
• build(deps): bump the i18next group in /frontend with 2 updates by @dependabot[bot] in #5308
• build(deps): bump softprops/action-gh-release from 2.4.2 to 2.5.0 by @dependabot[bot] in #5305
• build(deps): bump docker/metadata-action from 5.9.0 to 5.10.0 by @dependabot[bot] in #5304
• build(deps): bump the sentry group with 3 updates by @dependabot[bot] in #5309
• build(deps-dev): bump vite from 7.2.4 to 7.2.6 in /frontend in the vite group by @dependabot[bot] in #5307
• build(deps-dev): bump i18next-cli from 1.28.3 to 1.29.3 in /frontend in the i18next group by @dependabot[bot] in #5315
• build(deps-dev): bump the vitest group in /frontend with 2 updates by @dependabot[bot] in #5314
• build(deps): bump the tanstack-query group in /frontend with 2 updates by @dependabot[bot] in #5316
• build(deps-dev): bump @types/react from 19.2.6 to 19.2.7 in /frontend in the types group by @dependabot[bot] in #5317
• build(deps): bump tracing-appender from 0.2.3 to 0.2.4 in the tracing group by @dependabot[bot] in #5318

New Contributors

• @marrobHD made their first contribution in #5240
• @Copilot made their first contribution in #5294
• @benbz made their first contribution in #5297

Full Changelog: v1.7.0...v1.8.0-rc.0

v1.7.0

Docker image

Regular image:

• Digest:

  ghcr.io/element-hq/matrix-authentication-service@sha256:83c5da4bd06772b4b98b18b7702485aefc26f1ce4787110687f1358a4291c7a3
  

• Tags:

  ghcr.io/element-hq/matrix-authentication-service:1.7.0
  ghcr.io/element-hq/matrix-authentication-service:1.7
  ghcr.io/element-hq/matrix-authentication-service:1
  ghcr.io/element-hq/matrix-authentication-service:sha-c281492
  ghcr.io/element-hq/matrix-authentication-service:latest
  

Debug variant:

• Digest:

  ghcr.io/element-hq/matrix-authentication-service@sha256:64ecd5db935b03f1dd47cc234a84a51f78e1700f6967e6d5f56993fa4ff9cca9
  

• Tags:

  ghcr.io/element-hq/matrix-authentication-service:1.7.0-debug
  ghcr.io/element-hq/matrix-authentication-service:1.7-debug
  ghcr.io/element-hq/matrix-authentication-service:1-debug
  ghcr.io/element-hq/matrix-authentication-service:sha-c281492-debug
  ghcr.io/element-hq/matrix-authentication-service:latest-debug
  

What's Changed

New Features

• Add upstream_oauth2.providers.[].client_secret_file config option by @networkException in #4882
• Add secrets.keys_dir config option. by @V02460 in #4877
• Interactively help users choosing a username by @sandhose in #5258

Documentation

• Add basic documentation for personal sessions by @reivilibre in #5187

Translations

• Minor grammatical fix by @anoadragon453 in #5268
• Translations updates for main by @matrixbot in #5269
• Translations updates for v1.7 by @matrixbot in #5289

Internal Changes

• Automatic merge back to main by @matrixbot in #5218
• Only allow C-S device scopes when the C-S API scope has been requested by @reivilibre in #5215
• Fix broken link in rustdoc by @reivilibre in #5222
• Upgrade schemars to 0.9 by @sandhose in #4682
• Automatic merge back to main by @matrixbot in #5235
• Fix the building of the docs with mdbook 0.5 by @sandhose in #5261

Dependency Updates

• build(deps): bump docker/metadata-action from 5.8.0 to 5.9.0 by @dependabot[bot] in #5220
• build(deps-dev): bump @biomejs/biome from 2.2.5 to 2.3.2 in /frontend by @dependabot[bot] in #5213
• build(deps-dev): bump knip from 5.64.2 to 5.66.4 in /frontend by @dependabot[bot] in #5211
• build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by @dependabot[bot] in #5204
• build(deps): bump actions/download-artifact from 5 to 6 by @dependabot[bot] in #5203
• build(deps-dev): bump the vite group across 1 directory with 2 updates by @dependabot[bot] in #5199
• build(deps): bump rustls from 0.23.32 to 0.23.34 by @dependabot[bot] in #5193
• build(deps): bump react-i18next from 16.1.4 to 16.1.5 in /frontend in the i18next group by @dependabot[bot] in #5192
• build(deps-dev): bump the storybook group in /frontend with 3 updates by @dependabot[bot] in #5224
• build(deps-dev): bump vite from 7.1.12 to 7.2.1 in /frontend in the vite group by @dependabot[bot] in #5226
• build(deps-dev): bump @graphql-codegen/client-preset from 5.1.0 to 5.1.1 in /frontend in the graphql-codegen group by @dependabot[bot] in #5227
• Use Node 24 in CI and for building the frontend by @sandhose in #5229
• build(deps): bump the i18next group across 1 directory with 2 updates by @dependabot[bot] in #5236
• build(deps): bump @tanstack/react-query from 5.90.5 to 5.90.7 in /frontend in the tanstack-query group by @dependabot[bot] in #5233
• build(deps): bump softprops/action-gh-release from 2.4.1 to 2.4.2 by @dependabot[bot] in #5230
• Update opa-wasm to 0.1.8 & bump wasmtime by @sandhose in #5245
• build(deps-dev): bump the storybook group in /frontend with 3 updates by @dependabot[bot] in #5231
• build(deps): bump csv from 1.3.1 to 1.4.0 by @dependabot[bot] in #5246
• build(deps-dev): bump the storybook group in /frontend with 3 updates by @dependabot[bot] in #5248
• build(deps): bump psl from 2.1.148 to 2.1.162 by @dependabot[bot] in #5250
• build(deps-dev): bump @vitejs/plugin-react from 5.1.0 to 5.1.1 in /frontend in the vite group by @dependabot[bot] in #5249
• build(deps): bump rustls-pki-types from 1.12.0 to 1.13.0 by @dependabot[bot] in #5247
• build(deps): bump rustls from 0.23.34 to 0.23.35 by @dependabot[bot] in #5244
• build(deps): bump js-yaml from 4.1.0 to 4.1.1 in /frontend by @dependabot[bot] in #5242
• build(deps): bump glob and i18next-cli in /frontend by @dependabot[bot] in #5259
• build(deps-dev): bump the graphql-codegen group in /frontend with 2 updates by @dependabot[bot] in #5252
• build(deps): bump @tanstack/react-query from 5.90.7 to 5.90.10 in /frontend in the tanstack-query group by @dependabot[bot] in #5253
• build(deps): bump bitflags from 2.9.4 to 2.10.0 by @dependabot[bot] in #5254
• build(deps): bump the i18next group across 1 directory with 3 updates by @dependabot[bot] in #5262
• build(deps-dev): bump the types group in /frontend with 3 updates by @dependabot[bot] in #5263
• build(deps): bump hyper-util from 0.1.17 to 0.1.18 by @dependabot[bot] in #5266
• build(deps): bump @vector-im/compound-web from 8.2.4 to 8.2.5 in /frontend by @dependabot[bot] in #5265
• build(deps): bump @vector-im/compound-design-tokens from 6.0.0 to 6.4.0 in /frontend by @dependabot[bot] in #5264

Full Changelog: v1.6.0...v1.7.0

v1.7.0-rc.0

Docker image

Regular image:

• Digest:

  ghcr.io/element-hq/matrix-authentication-service@sha256:302b51bee1783ee42251e91d81e92f1510136f09be22aafc1dd789ac50bcfd12
  

• Tags:

  ghcr.io/element-hq/matrix-authentication-service:1.7.0-rc.0
  ghcr.io/element-hq/matrix-authentication-service:sha-fe5f8c4
  

Debug variant:

• Digest:

  ghcr.io/element-hq/matrix-authentication-service@sha256:178d39b1aaefe1d317550190184399e6097319f2ccab20efe2755880519a0c10
  

• Tags:

  ghcr.io/element-hq/matrix-authentication-service:1.7.0-rc.0-debug
  ghcr.io/element-hq/matrix-authentication-service:sha-fe5f8c4-debug
  

What's Changed

New Features

• Add upstream_oauth2.providers.[].client_secret_file config option by @networkException in #4882
• Add secrets.keys_dir config option. by @V02460 in #4877
• Interactively help users choosing a username by @sandhose in #5258

Translations

• Polish is now a supported language.
• Minor grammatical fix by @anoadragon453 in #5268
• Translations updates for main by @matrixbot in #5269

Internal Changes

• Automatic merge back to main by @matrixbot in #5218
• Fix broken link in rustdoc by @reivilibre in #5222
• Automatic merge back to main by @matrixbot in #5235
• Fix the building of the docs with mdbook 0.5 by @sandhose in #5261

Other Changes

• Only allow C-S device scopes when the C-S API scope has been requested by @reivilibre in #5215
• Add basic documentation for personal sessions by @reivilibre in #5187
• Upgrade schemars to 0.9 by @sandhose in #4682

Dependency Updates

• build(deps): bump docker/metadata-action from 5.8.0 to 5.9.0 by @dependabot[bot] in #5220
• build(deps-dev): bump @biomejs/biome from 2.2.5 to 2.3.2 in /frontend by @dependabot[bot] in #5213
• build(deps-dev): bump knip from 5.64.2 to 5.66.4 in /frontend by @dependabot[bot] in #5211
• build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by @dependabot[bot] in #5204
• build(deps): bump actions/download-artifact from 5 to 6 by @dependabot[bot] in #5203
• build(deps-dev): bump the vite group across 1 directory with 2 updates by @dependabot[bot] in #5199
• build(deps): bump rustls from 0.23.32 to 0.23.34 by @dependabot[bot] in #5193
• build(deps): bump react-i18next from 16.1.4 to 16.1.5 in /frontend in the i18next group by @dependabot[bot] in #5192
• build(deps-dev): bump the storybook group in /frontend with 3 updates by @dependabot[bot] in #5224
• build(deps-dev): bump vite from 7.1.12 to 7.2.1 in /frontend in the vite group by @dependabot[bot] in #5226
• build(deps-dev): bump @graphql-codegen/client-preset from 5.1.0 to 5.1.1 in /frontend in the graphql-codegen group by @dependabot[bot] in #5227
• Use Node 24 in CI and for building the frontend by @sandhose in #5229
• build(deps): bump the i18next group across 1 directory with 2 updates by @dependabot[bot] in #5236
• build(deps): bump @tanstack/react-query from 5.90.5 to 5.90.7 in /frontend in the tanstack-query group by @dependabot[bot] in #5233
• build(deps): bump softprops/action-gh-release from 2.4.1 to 2.4.2 by @dependabot[bot] in #5230
• Update opa-wasm to 0.1.8 & bump wasmtime by @sandhose in #5245
• build(deps-dev): bump the storybook group in /frontend with 3 updates by @dependabot[bot] in #5231
• build(deps): bump csv from 1.3.1 to 1.4.0 by @dependabot[bot] in #5246
• build(deps-dev): bump the storybook group in /frontend with 3 updates by @dependabot[bot] in #5248
• build(deps): bump psl from 2.1.148 to 2.1.162 by @dependabot[bot] in #5250
• build(deps-dev): bump @vitejs/plugin-react from 5.1.0 to 5.1.1 in /frontend in the vite group by @dependabot[bot] in #5249
• build(deps): bump rustls-pki-types from 1.12.0 to 1.13.0 by @dependabot[bot] in #5247
• build(deps): bump rustls from 0.23.34 to 0.23.35 by @dependabot[bot] in #5244
• build(deps): bump js-yaml from 4.1.0 to 4.1.1 in /frontend by @dependabot[bot] in #5242
• build(deps): bump glob and i18next-cli in /frontend by @dependabot[bot] in #5259
• build(deps-dev): bump the graphql-codegen group in /frontend with 2 updates by @dependabot[bot] in #5252
• build(deps): bump @tanstack/react-query from 5.90.7 to 5.90.10 in /frontend in the tanstack-query group by @dependabot[bot] in #5253
• build(deps): bump bitflags from 2.9.4 to 2.10.0 by @dependabot[bot] in #5254
• build(deps): bump the i18next group across 1 directory with 3 updates by @dependabot[bot] in #5262
• build(deps-dev): bump the types group in /frontend with 3 updates by @dependabot[bot] in #5263
• build(deps): bump hyper-util from 0.1.17 to 0.1.18 by @dependabot[bot] in #5266
• build(deps): bump @vector-im/compound-web from 8.2.4 to 8.2.5 in /frontend by @dependabot[bot] in #5265
• build(deps): bump @vector-im/compound-design-tokens from 6.0.0 to 6.4.0 in /frontend by @dependabot[bot] in #5264

Full Changelog: v1.6.0...v1.7.0-rc.0

v1.6.0

Docker image

Regular image:

• Digest:

  ghcr.io/element-hq/matrix-authentication-service@sha256:15fdb4665aa339261d4352c058c221470d040a04cd59117c3956994d9e8edc27
  

• Tags:

  ghcr.io/element-hq/matrix-authentication-service:1.6.0
  ghcr.io/element-hq/matrix-authentication-service:1.6
  ghcr.io/element-hq/matrix-authentication-service:1
  ghcr.io/element-hq/matrix-authentication-service:sha-3dd362a
  ghcr.io/element-hq/matrix-authentication-service:latest
  

Debug variant:

• Digest:

  ghcr.io/element-hq/matrix-authentication-service@sha256:3e8d5eb58733dd7c65ce4ed008ca228533a793d11860dd118346467ba8f01bae
  

• Tags:

  ghcr.io/element-hq/matrix-authentication-service:1.6.0-debug
  ghcr.io/element-hq/matrix-authentication-service:1.6-debug
  ghcr.io/element-hq/matrix-authentication-service:1-debug
  ghcr.io/element-hq/matrix-authentication-service:sha-3dd362a-debug
  ghcr.io/element-hq/matrix-authentication-service:latest-debug
  

What's Changed

Bug Fixes

• Fix spurious "Failed to set parent context on span" error by @sandhose in #5228

Translations

• Translations updates for main by @matrixbot in #5217
• Translations updates for v1.6 by @matrixbot in #5234

Internal Changes

• Automatic merge back to main by @matrixbot in #5186
• Automatic merge back to main by @matrixbot in #5197
• Add mas-maintainers github team to CODEOWNERS by @reivilibre in #5188
• Automatic merge back to main by @matrixbot in #5210

Other Changes

• templates: Be strict about undefined variables by @reivilibre in #5201
• templates check command: Allow saving rendered samples by @reivilibre in #5202

Full Changelog: v1.5.0...v1.6.0

v1.6.0-rc.0

Docker image

Regular image:

• Digest:

  ghcr.io/element-hq/matrix-authentication-service@sha256:ae1f198143199457c68f664ef29a6ba86f408eed7aa0810cb31f397bb33154f4
  

• Tags:

  ghcr.io/element-hq/matrix-authentication-service:1.6.0-rc.0
  ghcr.io/element-hq/matrix-authentication-service:sha-99a5ebe
  

Debug variant:

• Digest:

  ghcr.io/element-hq/matrix-authentication-service@sha256:f8755a5046e6d53331f7ad7f0bd19b6864e42480d70c08646920ee1553957402
  

• Tags:

  ghcr.io/element-hq/matrix-authentication-service:1.6.0-rc.0-debug
  ghcr.io/element-hq/matrix-authentication-service:sha-99a5ebe-debug
  

What's Changed

Translations

• Translations updates for main by @matrixbot in #5217

Internal Changes

• Automatic merge back to main by @matrixbot in #5186
• Automatic merge back to main by @matrixbot in #5197
• Add mas-maintainers github team to CODEOWNERS by @reivilibre in #5188
• Automatic merge back to main by @matrixbot in #5210

Other Changes

• templates: Be strict about undefined variables by @reivilibre in #5201
• templates check command: Allow saving rendered samples by @reivilibre in #5202

Full Changelog: v1.5.0...v1.6.0-rc.0

v1.5.0

Docker image

Regular image:

• Digest:

  ghcr.io/element-hq/matrix-authentication-service@sha256:6c4ecc128668ae3cbf9cb319ee45ad45c0f01a96adca4841d10e662dd4a7fdc1
  

• Tags:

  ghcr.io/element-hq/matrix-authentication-service:1.5.0
  ghcr.io/element-hq/matrix-authentication-service:1.5
  ghcr.io/element-hq/matrix-authentication-service:1
  ghcr.io/element-hq/matrix-authentication-service:sha-dc3fdd6
  ghcr.io/element-hq/matrix-authentication-service:latest
  

Debug variant:

• Digest:

  ghcr.io/element-hq/matrix-authentication-service@sha256:8809ab9c22c5cfed682fbf5de79190cf15e2ee8607d3f83d69859c01744aba97
  

• Tags:

  ghcr.io/element-hq/matrix-authentication-service:1.5.0-debug
  ghcr.io/element-hq/matrix-authentication-service:1.5-debug
  ghcr.io/element-hq/matrix-authentication-service:1-debug
  ghcr.io/element-hq/matrix-authentication-service:sha-dc3fdd6-debug
  ghcr.io/element-hq/matrix-authentication-service:latest-debug
  

What's Changed

Bug Fixes

• Fix UNIQUE constraint on active personal access tokens per session by @reivilibre in #5196

New Features

• Add storage for Personal Access Tokens by @reivilibre in #5106
• Accept personal access tokens on the Admin API by @reivilibre in #5183
• When adding or revoking personal sessions, schedule device synchronisation by @reivilibre in #5182
• Revoke personal sessions when users are deactivated by @reivilibre in #5181

Changes to the admin API

• Personal Sessions: add create, list, get, revoke, regenerate Admin APIs by @reivilibre in #5141

Documentation

• docs: add missing --reactivate option to unlock-user subcommand by @teutat3s in #5162

Translations

• Translations updates for main by @matrixbot in #5185
• Translations updates for v1.5 by @matrixbot in #5209

Internal Changes

• Automatic merge back to main by @matrixbot in #5119
• Automatic merge back to main by @matrixbot in #5130
• Automatic merge back to main by @matrixbot in #5149
• Automatic merge back to main by @matrixbot in #5156
• Highlight dangerous scopes when consenting to them by @sandhose in #5180

Dependency Updates

• build(deps): bump swagger-ui-dist from 5.29.1 to 5.29.3 in /frontend by @dependabot[bot] in #5122
• build(deps-dev): bump tailwindcss from 3.4.17 to 3.4.18 in /frontend by @dependabot[bot] in #5123
• build(deps-dev): bump knip from 5.64.1 to 5.64.2 in /frontend by @dependabot[bot] in #5121
• build(deps-dev): bump typescript from 5.9.2 to 5.9.3 in /frontend by @dependabot[bot] in #5120
• build(deps): bump psl from 2.1.147 to 2.1.148 by @dependabot[bot] in #5127
• build(deps): bump lettre from 0.11.18 to 0.11.19 by @dependabot[bot] in #5126
• build(deps): bump softprops/action-gh-release from 2.4.0 to 2.4.1 by @dependabot[bot] in #5137
• build(deps): bump socket2 from 0.6.0 to 0.6.1 by @dependabot[bot] in #5140
• build(deps): bump actions/setup-node from 5.0.0 to 6.0.0 by @dependabot[bot] in #5142
• build(deps-dev): bump the types group across 1 directory with 2 updates by @dependabot[bot] in #5144
• build(deps): bump tokio from 1.47.1 to 1.48.0 by @dependabot[bot] in #5145
• build(deps): bump regex from 1.11.3 to 1.12.2 by @dependabot[bot] in #5146
• build(deps-dev): bump happy-dom from 19.0.2 to 20.0.4 in /frontend by @dependabot[bot] in #5159
• build(deps): bump sigstore/cosign-installer from 3.10.0 to 4.0.0 by @dependabot[bot] in #5158
• build(deps): bump the i18next group across 1 directory with 2 updates by @dependabot[bot] in #5143
• build(deps-dev): bump vite from 7.1.9 to 7.1.11 in /frontend in the vite group by @dependabot[bot] in #5167
• build(deps): bump the sentry group with 3 updates by @dependabot[bot] in #5166
• build(deps): bump @tanstack/react-query from 5.90.2 to 5.90.5 in /frontend in the tanstack-query group by @dependabot[bot] in #5165
• build(deps): bump ruma-common from 0.15.4 to 0.16.0 by @dependabot[bot] in #5169
• build(deps-dev): bump msw from 2.11.3 to 2.11.6 in /frontend by @dependabot[bot] in #5164
• build(deps): bump swagger-ui-dist from 5.29.3 to 5.29.5 in /frontend by @dependabot[bot] in #5160
• Support personal access tokens for introspection by @reivilibre in #5171
• build(deps): bump clap from 4.5.48 to 4.5.50 by @dependabot[bot] in #5177
• build(deps-dev): bump the storybook group in /frontend with 3 updates by @dependabot[bot] in #5172
• build(deps): bump react-i18next from 16.1.0 to 16.1.3 in /frontend in the i18next group by @dependabot[bot] in #5173
• build(deps): bump reqwest from 0.12.23 to 0.12.24 by @dependabot[bot] in #5178
• build(deps-dev): bump @types/node from 24.8.1 to 24.9.1 in /frontend in the types group by @dependabot[bot] in #5176
• build(deps-dev): bump @graphql-codegen/cli from 6.0.0 to 6.0.1 in /frontend in the graphql-codegen group by @dependabot[bot] in #5175

New Contributors

• @teutat3s made their first contribution in #5162

Full Changelog: v1.4.1...v1.5.0

v1.5.0-rc.1

Docker image

Regular image:

• Digest:

  ghcr.io/element-hq/matrix-authentication-service@sha256:351ccd59722cffe0d5a81ee36f6967ec898af775c089266d2976d401fec12696
  

• Tags:

  ghcr.io/element-hq/matrix-authentication-service:1.5.0-rc.1
  ghcr.io/element-hq/matrix-authentication-service:sha-2f94de2
  

Debug variant:

• Digest:

  ghcr.io/element-hq/matrix-authentication-service@sha256:c7bee17e8c9ff2dc43c8747887cb571908f581623cf2ca74dca8badd7402ff8d
  

• Tags:

  ghcr.io/element-hq/matrix-authentication-service:1.5.0-rc.1-debug
  ghcr.io/element-hq/matrix-authentication-service:sha-2f94de2-debug
  

What's Changed

Bug Fixes

• Fix UNIQUE constraint on active personal access tokens per session by @reivilibre in #5196

Full Changelog: v1.5.0-rc.0...v1.5.0-rc.1

v1.5.0-rc.0

Docker image

Regular image:

• Digest:

  ghcr.io/element-hq/matrix-authentication-service@sha256:1ac533a5c1d88f4484fef1e5883b3ed4e2d5111fe5ce9aacfa5852823c7406b6
  

• Tags:

  ghcr.io/element-hq/matrix-authentication-service:1.5.0-rc.0
  ghcr.io/element-hq/matrix-authentication-service:sha-6d2ed5a
  

Debug variant:

• Digest:

  ghcr.io/element-hq/matrix-authentication-service@sha256:a6002fdea6d0ec58bed4c45817b1f1eb0b21b5e512946222c8030c6c5cefa25a
  

• Tags:

  ghcr.io/element-hq/matrix-authentication-service:1.5.0-rc.0-debug
  ghcr.io/element-hq/matrix-authentication-service:sha-6d2ed5a-debug
  

What's Changed

New Features

• Add storage for Personal Access Tokens by @reivilibre in #5106
• Accept personal access tokens on the Admin API by @reivilibre in #5183
• When adding or revoking personal sessions, schedule device synchronisation by @reivilibre in #5182
• Revoke personal sessions when users are deactivated by @reivilibre in #5181

Changes to the admin API

• Personal Sessions: add create, list, get, revoke, regenerate Admin APIs by @reivilibre in #5141

Documentation

• docs: add missing --reactivate option to unlock-user subcommand by @teutat3s in #5162

Translations

• Translations updates for main by @matrixbot in #5185

Internal Changes

• Automatic merge back to main by @matrixbot in #5119
• Automatic merge back to main by @matrixbot in #5130
• Automatic merge back to main by @matrixbot in #5149
• Automatic merge back to main by @matrixbot in #5156
• Highlight dangerous scopes when consenting to them by @sandhose in #5180

Dependency Updates

• build(deps): bump swagger-ui-dist from 5.29.1 to 5.29.3 in /frontend by @dependabot[bot] in #5122
• build(deps-dev): bump tailwindcss from 3.4.17 to 3.4.18 in /frontend by @dependabot[bot] in #5123
• build(deps-dev): bump knip from 5.64.1 to 5.64.2 in /frontend by @dependabot[bot] in #5121
• build(deps-dev): bump typescript from 5.9.2 to 5.9.3 in /frontend by @dependabot[bot] in #5120
• build(deps): bump psl from 2.1.147 to 2.1.148 by @dependabot[bot] in #5127
• build(deps): bump lettre from 0.11.18 to 0.11.19 by @dependabot[bot] in #5126
• build(deps): bump softprops/action-gh-release from 2.4.0 to 2.4.1 by @dependabot[bot] in #5137
• build(deps): bump socket2 from 0.6.0 to 0.6.1 by @dependabot[bot] in #5140
• build(deps): bump actions/setup-node from 5.0.0 to 6.0.0 by @dependabot[bot] in #5142
• build(deps-dev): bump the types group across 1 directory with 2 updates by @dependabot[bot] in #5144
• build(deps): bump tokio from 1.47.1 to 1.48.0 by @dependabot[bot] in #5145
• build(deps): bump regex from 1.11.3 to 1.12.2 by @dependabot[bot] in #5146
• build(deps-dev): bump happy-dom from 19.0.2 to 20.0.4 in /frontend by @dependabot[bot] in #5159
• build(deps): bump sigstore/cosign-installer from 3.10.0 to 4.0.0 by @dependabot[bot] in #5158
• build(deps): bump the i18next group across 1 directory with 2 updates by @dependabot[bot] in #5143
• build(deps-dev): bump vite from 7.1.9 to 7.1.11 in /frontend in the vite group by @dependabot[bot] in #5167
• build(deps): bump the sentry group with 3 updates by @dependabot[bot] in #5166
• build(deps): bump @tanstack/react-query from 5.90.2 to 5.90.5 in /frontend in the tanstack-query group by @dependabot[bot] in #5165
• build(deps): bump ruma-common from 0.15.4 to 0.16.0 by @dependabot[bot] in #5169
• build(deps-dev): bump msw from 2.11.3 to 2.11.6 in /frontend by @dependabot[bot] in #5164
• build(deps): bump swagger-ui-dist from 5.29.3 to 5.29.5 in /frontend by @dependabot[bot] in #5160
• Support personal access tokens for introspection by @reivilibre in #5171
• build(deps): bump clap from 4.5.48 to 4.5.50 by @dependabot[bot] in #5177
• build(deps-dev): bump the storybook group in /frontend with 3 updates by @dependabot[bot] in #5172
• build(deps): bump react-i18next from 16.1.0 to 16.1.3 in /frontend in the i18next group by @dependabot[bot] in #5173
• build(deps): bump reqwest from 0.12.23 to 0.12.24 by @dependabot[bot] in #5178
• build(deps-dev): bump @types/node from 24.8.1 to 24.9.1 in /frontend in the types group by @dependabot[bot] in #5176
• build(deps-dev): bump @graphql-codegen/cli from 6.0.0 to 6.0.1 in /frontend in the graphql-codegen group by @dependabot[bot] in #5175

New Contributors

• @teutat3s made their first contribution in #5162

Full Changelog: v1.4.1...v1.5.0-rc.0

v1.4.1

Security release

This is a security release which includes a fix for CVE-2025-62425 / GHSA-6wfp-jq3r-j9xh, which affects servers using the local password database, starting MAS 0.20.0 and later. See the advisory for details.

Docker image

Regular image:

• Digest:

  ghcr.io/element-hq/matrix-authentication-service@sha256:af3c8e1207d5b6ef575454a0211dab07ba816be219607f6568a52ab42978c23c
  

• Tags:

  ghcr.io/element-hq/matrix-authentication-service:1.4.1
  ghcr.io/element-hq/matrix-authentication-service:1.4
  ghcr.io/element-hq/matrix-authentication-service:1
  ghcr.io/element-hq/matrix-authentication-service:sha-2427205
  ghcr.io/element-hq/matrix-authentication-service:latest
  

Debug variant:

• Digest:

  ghcr.io/element-hq/matrix-authentication-service@sha256:87067d4dd8397b3dc86bcdc8b377c331f04645bf3134ec850a4afc8c61be53aa
  

• Tags:

  ghcr.io/element-hq/matrix-authentication-service:1.4.1-debug
  ghcr.io/element-hq/matrix-authentication-service:1.4-debug
  ghcr.io/element-hq/matrix-authentication-service:1-debug
  ghcr.io/element-hq/matrix-authentication-service:sha-2427205-debug
  ghcr.io/element-hq/matrix-authentication-service:latest-debug
  

Full Changelog: v1.4.0...v1.4.1