Sender | Message | Time |
---|---|---|
5 Feb 2025 | ||
oh congrats then! | 00:07:57 | |
ok yeah, it just look like the whatapp bridge doesn't automatically pickup config from environment variables | 00:08:04 | |
* i just noticed that it uses envsubt unlike the telegram module | 00:08:20 | |
11 Feb 2025 | ||
I've gone ahead and removed myself from the matrix team and added myself as an explicit maintainer on Synapse. I also updated the tests related to matrix-synapse to reference the maintainers of the package itself as well. https://github.com/NixOS/nixpkgs/pull/381232 | 17:30:25 | |
12 Feb 2025 | ||
19:59:43 | ||
15 Feb 2025 | ||
10:19:28 | ||
10:43:21 | ||
26 Feb 2025 | ||
The
It appears that the async tests are not working properly. How was this not detected before, and does anyone know how Python packaging works well enough to go fix it? I've tried, but I couldn't figure out how to fix the issue. | 19:46:53 | |
2 Mar 2025 | ||
00:15:36 | ||
8 Mar 2025 | ||
what happened to pkgs.matrix-synapse-tools.rust-synapse-compress-state ? it seems to have disappeared from 24.11 | 08:25:10 | |
apologies, it was my fault given I merged the PR that did not only clean up a few synapse packages, but also renamed this attribute by accident | 08:26:25 | |
Try rust-synapse-state-compress for now, I filed a PR a few days ago that I'll merge in a minute | 08:27:10 | |
thanks | 08:27:26 | |
fixed now on 24.11 and master (the wrong alias is kept in aliases.nix to not break folks again who already updated) | 10:36:26 | |
apologies for the inconvenience! | 10:36:38 | |
26 Mar 2025 | ||
https://github.com/element-hq/synapse/releases/tag/v1.127.1 was just released which contains a critical security fix for CVE-2025-30355. I updated https://github.com/NixOS/nixpkgs/pull/393086 to bump to the patched version. Can I get some eyes on it and a committer to merge? | 21:44:12 | |
deploying it rn. | 21:51:58 | |
Given the apparent severity I'm willing to make an exception and merge right away. | 21:52:16 | |
perhaps a good idea to get someone to kick the channel? | 21:53:04 | |
I think that's the right call. I've been running 1.127.0 for a few days and it's been fine, and the diff to 1.127.1 is not too large. | 21:53:51 | |
from what I understand, this vulnerability is why matrix.org has been having issues today | 21:54:08 | |
what do we do for backports? | 21:54:19 | |
21:54:25 | ||
we backport all synapse updates anyways | 21:54:28 | |
21:54:28 | ||
so same procedure as every bump imho | 21:54:42 | |
the diff looks like DoS at a glance, maybe not channel-kicking levels of severe (though of course that could be misleading) | 21:55:26 | |
21:56:08 | ||
ty :) | 21:56:19 | |
oh, https://github.com/element-hq/synapse/commit/2277df2a1eb685f85040ef98fa21d41aa4cdd389 explicitly says DoS | 21:56:24 |