15314 Commits

Author SHA1 Message Date
dependabot[bot]
4db393edf7 chore(deps): bump taiki-e/install-action from 2.79.9 to 2.81.1
Bumps [taiki-e/install-action](https://github.com/taiki-e/install-action) from 2.79.9 to 2.81.1.
- [Release notes](https://github.com/taiki-e/install-action/releases)
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md)
- [Commits](8f531eaecd...e49978b799)

---
updated-dependencies:
- dependency-name: taiki-e/install-action
  dependency-version: 2.81.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-09 11:48:02 +02:00
dependabot[bot]
306b00e8a3 chore(deps): bump EmbarkStudios/cargo-deny-action from 2.0.19 to 2.0.20
Bumps [EmbarkStudios/cargo-deny-action](https://github.com/embarkstudios/cargo-deny-action) from 2.0.19 to 2.0.20.
- [Release notes](https://github.com/embarkstudios/cargo-deny-action/releases)
- [Commits](a531616d8c...bb137d7af7)

---
updated-dependencies:
- dependency-name: EmbarkStudios/cargo-deny-action
  dependency-version: 2.0.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-08 18:30:49 +03:00
Jorge Martín
99caed0115 doc: Add changelog entry 2026-06-08 16:54:20 +02:00
Jorge Martín
7169f2ba54 feat(ffi): Expose the TimelineEventFilter changes in the FFI layer 2026-06-08 16:54:20 +02:00
Jorge Martín
13e9550b0e feat(ui): Allow specifying membership states for TimelineEventFilter
This allows us to only include/exclude certain mebership changes
2026-06-08 16:54:20 +02:00
Damir Jelić
f1bea7288b Put the correct security impact for CVE-2026-45057
While we're here also add an entry for the UI crate
2026-06-04 12:09:28 +02:00
Damir Jelić
0e100bfcf2 Move the edit validation changelog entry to the correct place
Now that the advisory is published we can move it to the correct section
and add the relevant security issue info.
2026-06-04 10:51:23 +02:00
dependabot[bot]
e5da03e996 chore(deps): bump taiki-e/install-action from 2.79.1 to 2.79.9
Bumps [taiki-e/install-action](https://github.com/taiki-e/install-action) from 2.79.1 to 2.79.9.
- [Release notes](https://github.com/taiki-e/install-action/releases)
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md)
- [Commits](b550161ef8...8f531eaecd)

---
updated-dependencies:
- dependency-name: taiki-e/install-action
  dependency-version: 2.79.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-03 14:56:00 +02:00
dependabot[bot]
5b10562db7 chore(deps): bump EmbarkStudios/cargo-deny-action from 2.0.18 to 2.0.19
Bumps [EmbarkStudios/cargo-deny-action](https://github.com/embarkstudios/cargo-deny-action) from 2.0.18 to 2.0.19.
- [Release notes](https://github.com/embarkstudios/cargo-deny-action/releases)
- [Commits](6c8f9facfa...a531616d8c)

---
updated-dependencies:
- dependency-name: EmbarkStudios/cargo-deny-action
  dependency-version: 2.0.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-03 14:55:26 +02:00
dependabot[bot]
513ba41c3b chore(deps): bump crate-ci/typos from 1.46.2 to 1.46.3
Bumps [crate-ci/typos](https://github.com/crate-ci/typos) from 1.46.2 to 1.46.3.
- [Release notes](https://github.com/crate-ci/typos/releases)
- [Changelog](https://github.com/crate-ci/typos/blob/master/CHANGELOG.md)
- [Commits](aca895bf05...7b04f660f4)

---
updated-dependencies:
- dependency-name: crate-ci/typos
  dependency-version: 1.46.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-03 10:07:20 +01:00
Damir Jelić
03d8e0d1f6 chore: Mention the Ruma bump in the crypto crate changelog as well 2026-06-03 10:54:53 +02:00
Richard van der Hoff
8a838bd474 Add security links to matrix-sdk-crypto 0.17.0 changelog (#6636) 2026-06-03 06:49:20 +00:00
Paul8711
b1debb3460 fix: resolve room alias to id before evaluating pre-join info 2026-06-02 20:09:49 +02:00
Ivan Enderlin
631af2e7f1 chore(sdk): Replace async_once_cell by tokio::sync::OnceCell.
This patch removes the `async_once_cell` dependency by
`tokio::sync::OnceCell`.
2026-06-02 16:30:57 +02:00
Damir Jelić
3a1e2a11e7 Merge pull request #6633 from matrix-org/poljar/release-prep-0.18.0
Release prep for 0.18.0
2026-06-02 14:45:51 +02:00
Damir Jelić
1c44fb6621 chore: Release matrix-sdk version 0.18.0 matrix-sdk-ffi-0.18.0 matrix-sdk-test-utils-0.18.0 matrix-sdk-ui-0.18.0 matrix-sdk-0.18.0 matrix-sdk-sqlite-0.18.0 matrix-sdk-search-0.18.0 matrix-sdk-indexeddb-0.18.0 matrix-sdk-base-0.18.0 matrix-sdk-store-encryption-0.18.0 matrix-sdk-crypto-0.18.0 matrix-sdk-test-0.18.0 matrix-sdk-test-macros-0.18.0 matrix-sdk-qrcode-0.18.0 matrix-sdk-common-0.18.0 2026-06-02 13:29:09 +02:00
Damir Jelić
56797cb89a chore: Move some changelog fragments to the correct folder 2026-06-02 13:24:02 +02:00
Damir Jelić
cee9dc065c chore: Fix the category of a changelog fragment 2026-06-02 13:19:42 +02:00
Kévin Commaille
3a9fd9f790 Upgrade Ruma
Signed-off-by: Kévin Commaille <zecakeh@tedomum.fr>
2026-06-01 11:35:15 +02:00
Damir Jelić
c0fde339b9 chore: Remove an unused cargo-deny git exception 2026-05-28 15:11:15 +02:00
Damir Jelić
abbb580e33 chore: Bump our rmp version in the lock file
This at last removes the paste crate from our dependency tree.
2026-05-28 15:11:15 +02:00
Damir Jelić
44104f689f chore: Bump our rand versions in the lock file 2026-05-28 11:56:26 +02:00
Yorusaka Miyabi
e4c55a7443 chore(search): Bump tantivy
Signed-off-by: Yorusaka Miyabi <23130178+ShadowRZ@users.noreply.github.com>
2026-05-28 11:22:54 +02:00
Yorusaka Miyabi
9f0471d521 refactor(multiverse): move to ratatui 0.30.0
Signed-off-by: Yorusaka Miyabi <23130178+ShadowRZ@users.noreply.github.com>
2026-05-28 11:22:54 +02:00
Mauro Romito
3a44b50518 docs: changelog added 2026-05-26 12:33:08 +03:00
Mauro Romito
55262807e1 feat (bindings): expose tile_server to FFI 2026-05-26 12:33:08 +03:00
dependabot[bot]
235151de39 chore(deps): bump zizmorcore/zizmor-action from 0.5.3 to 0.5.6
Bumps [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action) from 0.5.3 to 0.5.6.
- [Release notes](https://github.com/zizmorcore/zizmor-action/releases)
- [Commits](b1d7e1fb5d...5f14fd08f7)

---
updated-dependencies:
- dependency-name: zizmorcore/zizmor-action
  dependency-version: 0.5.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-26 10:33:30 +02:00
dependabot[bot]
460dcbbf02 chore(deps): bump crate-ci/typos from 1.46.1 to 1.46.2
Bumps [crate-ci/typos](https://github.com/crate-ci/typos) from 1.46.1 to 1.46.2.
- [Release notes](https://github.com/crate-ci/typos/releases)
- [Changelog](https://github.com/crate-ci/typos/blob/master/CHANGELOG.md)
- [Commits](5374cbf686...aca895bf05)

---
updated-dependencies:
- dependency-name: crate-ci/typos
  dependency-version: 1.46.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-26 10:26:54 +02:00
Jorge Martín
7b6cc76361 Update rpassword to v7.5.1 to fix clippy
This was happening for non-linux targets. Fixed in https://github.com/conradkleinespel/rpassword/pull/128
2026-05-26 10:24:40 +02:00
dependabot[bot]
13247c3201 chore(deps): bump taiki-e/install-action from 2.77.6 to 2.79.1
Bumps [taiki-e/install-action](https://github.com/taiki-e/install-action) from 2.77.6 to 2.79.1.
- [Release notes](https://github.com/taiki-e/install-action/releases)
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md)
- [Commits](c070f87102...b550161ef8)

---
updated-dependencies:
- dependency-name: taiki-e/install-action
  dependency-version: 2.79.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-26 09:43:47 +03:00
Ivan Enderlin
1205c2b212 doc(sdk): Add the changelog file. 2026-05-22 11:23:24 +02:00
Ivan Enderlin
eb6d5c330c test(sdk): Add a test to ensure no Client cyclic reference with ThreadSubscriptionCatchup. 2026-05-22 11:23:24 +02:00
Ivan Enderlin
b01ce21a24 fix(sdk): Remove a cyclic reference of Client in ThreadSubscriptionCatchup.
This patch fixes cyclic reference of `Client` in
`ThreadSubscriptionCatchup`.

`ThreadSubscriptionCatchup` starts a task that call
`thread_subscriptions_catchup_task`. This function captures a clone of
`ThreadSubscriptionCatchup` (why not…) which contains a `WeakClient`,
all good, no cycle here! However, the real task (not the function)
captures `Client` to call `enabled_thread_subscriptions` to know
if the function `thread_subscriptions_catchup_task` must be called.
Consequently, the task captures a clone of `Client`, boom, we have
a cycle.

This patch fixes the problem by spawning the task if and only if
`Client::enabled_thread_subscriptions` returns `Ok(true)`. This check is
done outside the task. It seems saner and avoid creating this cycle.

Consequently, the `ThreadSubscriptionCatchup::new` method becomes
`async`, which is perfectly fine as it was already wrapper inside an
`async` block when initialised by the `Client`.
2026-05-22 11:23:24 +02:00
Michael Goldenberg
b847983dbf refactor(base): hold state store lock while processing sync response
Signed-off-by: Michael Goldenberg <m@mgoldenberg.net>
2026-05-21 12:34:28 +02:00
Daniel Anderson
8675cb2841 feat(ffi): expose append parameter on Client::set_pusher
Forwards the new SDK append flag across the FFI boundary so multi-profile
clients can register pushers without overwriting each other.

Breaking change: Client::set_pusher now takes an append: bool parameter.

Signed-off-by: Daniel Anderson <daniel.anderson@toptal.com>
2026-05-21 12:53:08 +03:00
Daniel Anderson
d3c499ddbc feat(sdk): expose append parameter on Pusher::set
Forwards the Matrix spec's append flag on POST /_matrix/client/v3/pushers/set
through Pusher::set. When true, the homeserver keeps any existing pusher
with the same app_id and pushkey registered for other users instead of
replacing it. Needed for multi-profile clients on a single device.

Breaking change: Pusher::set now takes an append: bool parameter.

Signed-off-by: Daniel Anderson <daniel.anderson@toptal.com>
2026-05-21 12:53:08 +03:00
ganfra
4ca424f5f2 revert "only start with a timeline reset diff if the timeline isn't empty" 2026-05-21 09:40:09 +02:00
Damir Jelić
82c24a891b fix(sdk): Make the pinned events sorting deterministic
The previous sorting logic relied on SystemTime::now, which introduces
non-deterministic behavior which might result in a panic.
2026-05-20 16:54:20 +02:00
Hugh Nimmo-Smith
3372ca3577 test(sdk): explicitly assert homserver URL swap for QR login 2026-05-20 15:56:33 +02:00
Daniel Anderson
10c0a86e99 feat(ffi): expose RoomInfo::fully_read_event_id
`m.fully_read` is now available on the FFI `RoomInfo` record

Signed-off-by: Daniel Anderson <daniel.anderson@toptal.com>
2026-05-20 11:46:20 +03:00
Daniel Anderson
a80fa910da feat(base): expose m.fully_read event ID on RoomInfo
Persist `m.fully_read` on `BaseRoomInfo` and expose it
on `RoomInfo::fully_read_event_id` and `Room::fully_read_event_id`.

The `m.fully_read` response processor now stores the event ID
on the room info and emits `RoomInfoNotableUpdateReasons::FULLY_READ`

Signed-off-by: Daniel Anderson <daniel.anderson@toptal.com>
2026-05-20 11:46:20 +03:00
Daniel Anderson
4b1ae064c7 feat(base): add FULLY_READ notable update reason
Add `RoomInfoNotableUpdateReasons::FULLY_READ`, used for
when the `m.fully_read` marker for a room changes.

Breaking change: the backing bitflag widens from `u8` to `u16`
for the new flag to not alter the existing bit positions.

Signed-off-by: Daniel Anderson <daniel.anderson@toptal.com>
2026-05-20 11:46:20 +03:00
Jorge Martín
4a26af89f2 feat(ffi): Expose SqliteStoreBuilder::key in the FFI layer
This allows clients to provide a raw key instead of a passphrase for the key used to encrypt and decrypt data in the store DBs.

Using a raw key with enough entropy should be safe, and we can skip the key derivation performed in the passphrase, which slows down session restoration (it's now 50% faster in my local tests).
2026-05-19 16:05:15 +02:00
Ivan Enderlin
7677f09099 doc: Update the PR template to match the recent changelog modifications. 2026-05-19 10:49:12 +02:00
dependabot[bot]
80ecdc17c8 chore(deps): bump crate-ci/typos from 1.46.0 to 1.46.1
Bumps [crate-ci/typos](https://github.com/crate-ci/typos) from 1.46.0 to 1.46.1.
- [Release notes](https://github.com/crate-ci/typos/releases)
- [Changelog](https://github.com/crate-ci/typos/blob/master/CHANGELOG.md)
- [Commits](bbaefadf97...5374cbf686)

---
updated-dependencies:
- dependency-name: crate-ci/typos
  dependency-version: 1.46.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-19 09:29:49 +02:00
dependabot[bot]
56a37273c7 chore(deps): bump EmbarkStudios/cargo-deny-action from 2.0.17 to 2.0.18
Bumps [EmbarkStudios/cargo-deny-action](https://github.com/embarkstudios/cargo-deny-action) from 2.0.17 to 2.0.18.
- [Release notes](https://github.com/embarkstudios/cargo-deny-action/releases)
- [Commits](91bf2b620e...6c8f9facfa)

---
updated-dependencies:
- dependency-name: EmbarkStudios/cargo-deny-action
  dependency-version: 2.0.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-19 09:25:36 +02:00
dependabot[bot]
10c98c77fd chore(deps): bump taiki-e/install-action from 2.76.0 to 2.77.6
Bumps [taiki-e/install-action](https://github.com/taiki-e/install-action) from 2.76.0 to 2.77.6.
- [Release notes](https://github.com/taiki-e/install-action/releases)
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md)
- [Commits](711e1c3275...c070f87102)

---
updated-dependencies:
- dependency-name: taiki-e/install-action
  dependency-version: 2.77.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-19 09:25:09 +02:00
dependabot[bot]
3a1806a900 chore(deps): bump CodSpeedHQ/action from 4.15.0 to 4.15.1
Bumps [CodSpeedHQ/action](https://github.com/codspeedhq/action) from 4.15.0 to 4.15.1.
- [Release notes](https://github.com/codspeedhq/action/releases)
- [Changelog](https://github.com/CodSpeedHQ/action/blob/main/CHANGELOG.md)
- [Commits](c381be0bfd...3194d9a39c)

---
updated-dependencies:
- dependency-name: CodSpeedHQ/action
  dependency-version: 4.15.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-19 09:24:47 +02:00
Ivan Enderlin
b6d0f8a0a7 chore: Fix rumdl errors and warnings by hand. 2026-05-18 15:05:52 +02:00
Ivan Enderlin
7d31912f0d chore: Run rumdl check --fix. 2026-05-18 15:05:52 +02:00