The additional sha1 tagged builds in docker hub are messy,
so instead tag the build with the SHA1 version.

We were doing max(version) which does not do what we wanted
on a column of type TEXT.

…rsions_are_numbers

Signed-off-by: Aaron Raimist <aaron@raim.ist>

Signed-off-by: Aaron Raimist <aaron@raim.ist>

https://help.github.com/articles/adding-support-resources-to-your-project/

Signed-off-by: Aaron Raimist <aaron@raim.ist>

…rsions_are_numbers

Make e2e backup versions numeric in the DB

…sent

Fix an internal server error when viewing the public privacy policy

Update README for matrix-org#1491 fix

…atrix-org#4183)

By setting the config value directly, we skip the block that adds the slash automatically for us.

…-urls

Remove duplicate slashes in generated consent URLs

Signed-off-by: Ashe Connor <ashe@kivikakk.ee>

add jpeg to OpenBSD prereq list

People keep asking why their database hasn't gotten smaller after using this API.

Signed-off-by: Aaron Raimist <aaron@raim.ist>

Signed-off-by: Aaron Raimist <aaron@raim.ist>

Add a note saying you need to manually reclaim disk space

…plate

Add a pull request template and add multiple issue templates

Features
--------

- Include flags to optionally add `m.login.terms` to the registration flow when consent tracking is enabled.
([\matrix-org#4004](matrix-org#4004), [\matrix-org#4133](matrix-org#4133),
[\matrix-org#4142](matrix-org#4142), [\matrix-org#4184](matrix-org#4184))
- Support for replacing rooms with new ones ([\matrix-org#4091](matrix-org#4091), [\matrix-org#4099](matrix-org#4099),
[\matrix-org#4100](matrix-org#4100), [\matrix-org#4101](matrix-org#4101))

Bugfixes
--------

- Fix exceptions when using the email mailer on Python 3. ([\matrix-org#4095](matrix-org#4095))
- Fix e2e key backup with more than 9 backup versions ([\matrix-org#4113](matrix-org#4113))
- Searches that request profile info now no longer fail with a 500. ([\matrix-org#4122](matrix-org#4122))
- fix return code of empty key backups ([\matrix-org#4123](matrix-org#4123))
- If the typing stream ID goes backwards (as on a worker when the master restarts), the worker's typing handler will no longer erroneously report rooms containing new
typing events. ([\matrix-org#4127](matrix-org#4127))
- Fix table lock of device_lists_remote_cache which could freeze the application ([\matrix-org#4132](matrix-org#4132))
- Fix exception when using state res v2 algorithm ([\matrix-org#4135](matrix-org#4135))
- Generating the user consent URI no longer fails on Python 3. ([\matrix-org#4140](matrix-org#4140),
[\matrix-org#4163](matrix-org#4163))
- Loading URL previews from the DB cache on Postgres will no longer cause Unicode type errors when responding to the request, and URL previews will no longer fail if
the remote server returns a Content-Type header with the chartype in quotes. ([\matrix-org#4157](matrix-org#4157))
- The hash_password script now works on Python 3. ([\matrix-org#4161](matrix-org#4161))
- Fix noop checks when updating device keys, reducing spurious device list update notifications. ([\matrix-org#4164](matrix-org#4164))

Deprecations and Removals
-------------------------

- The disused and un-specced identicon generator has been removed. ([\matrix-org#4106](matrix-org#4106))
- The obsolete and non-functional /pull federation endpoint has been removed. ([\matrix-org#4118](matrix-org#4118))
- The deprecated v1 key exchange endpoints have been removed. ([\matrix-org#4119](matrix-org#4119))
- Synapse will no longer fetch keys using the fallback deprecated v1 key exchange method and will now always use v2.
([\matrix-org#4120](matrix-org#4120))

Internal Changes
----------------

- Fix build of Docker image with docker-compose ([\matrix-org#3778](matrix-org#3778))
- Delete unreferenced state groups during history purge ([\matrix-org#4006](matrix-org#4006))
- The "Received rdata" log messages on workers is now logged at DEBUG, not INFO. ([\matrix-org#4108](matrix-org#4108))
- Reduce replication traffic for device lists ([\matrix-org#4109](matrix-org#4109))
- Fix `synapse_replication_tcp_protocol_*_commands` metric label to be full command name, rather than just the first character
([\matrix-org#4110](matrix-org#4110))
- Log some bits about room creation ([\matrix-org#4121](matrix-org#4121))
- Fix `tox` failure on old systems ([\matrix-org#4124](matrix-org#4124))
- Add STATE_V2_TEST room version ([\matrix-org#4128](matrix-org#4128))
- Clean up event accesses and tests ([\matrix-org#4137](matrix-org#4137))
- The default logging config will now set an explicit log file encoding of UTF-8. ([\matrix-org#4138](matrix-org#4138))
- Add helpers functions for getting prev and auth events of an event ([\matrix-org#4139](matrix-org#4139))
- Add some tests for the HTTP pusher. ([\matrix-org#4149](matrix-org#4149))
- add purge_history.sh and purge_remote_media.sh scripts to contrib/ ([\matrix-org#4155](matrix-org#4155))
- HTTP tests have been refactored to contain less boilerplate. ([\matrix-org#4156](matrix-org#4156))
- Drop incoming events from federation for unknown rooms ([\matrix-org#4165](matrix-org#4165))

…k_fixes

Fix some logcontext leaks

…lt configuration (matrix-org#4207)

element-hq/element-web#1977 --> element-hq/element-web#1977
And mention of Vector as a client replaced with Riot.

Now that we use py3, compiled python ends up in __pycache__ rather than *.pyc.

Ignore __pycache__ directories in schema delta dir

* Some words about garbage collections and logcontexts

* Do a GC after each test to fix logcontext leaks

This feels like an awful hack, but...

* changelog

* Add better diagnostics to flakey keyring test

* fix interpolation fail

* Check logcontexts before and after each test

* update changelog

* update changelog

* Clean up the CSS for the fallback login form

I was finding this hard to work with, so simplify a bunch of things. Each
flow is now a form inside a div of class login_flow.

The login_flow class now has a fixed width, as that looks much better than each
flow having a differnt width.

* Support m.login.sso

MSC1721 renames m.login.cas to m.login.sso. This implements the change
(retaining support for m.login.cas for older clients).

* changelog

* fix transaction wrapping bug that caused get_user_id_by_threepid_txn to fail

* towncrier

* white space

* Fix auto join failures for servers that require user consent

* Fix auto join failures for servers that require user consent

Signed-off-by: Aaron Raimist <aaron@raim.ist>

Signed-off-by: Aaron Raimist <aaron@raim.ist>

It turns out that we accept events with non-ascii IDs, which would later cause
an explosion during state res.

Fixes matrix-org#4226

Signed-off-by: Aaron Raimist <aaron@raim.ist>

This should fix some "Starting db connection from sentinel context" warnings,
and will mean we get metrics for these processes.

Add a basic .editorconfig

…ove-py3

Fix removing pushers on python 3

…#4205)

Drop sent_transactions

…trix-org#4253)

This is a bit of a half-assed effort at fixing matrix-org#4252. Fundamentally the right answer is to drop support for Python 2.

…or (matrix-org#4234)

…dentity servers (matrix-org#4224)

* Add note to UPGRADE.rst about removing riot.im from list of trusted identity servers

Signed-off-by: Aaron Raimist <aaron@raim.ist>

* Add changelog

Signed-off-by: Aaron Raimist <aaron@raim.ist>

…rested in it (matrix-org#4230)

This is useful for homeservers not intended for users, such as bot-only homeservers or ones that only process IoT data.

Replace mentions of Vector with Riot

…g#3831)

…o_docker_label

Use labels to tag builds with their SHA1 version.

These aren't used, because we have a `log_config` setting.

…log_file

Remove obsolete settings from docker homeserver.yaml

Notes on upgrading to python3, and README updates.

Sometimes it's useful for synapse to generate its own .well-known file.

It turns out we were relying on dateutil being pulled in transitively by
pysaml2. There's no need for that bloat.

* Rip out half-implemented m.login.saml2 support

This was implemented in an odd way that left most of the work to the client, in
a way that I really didn't understand. It's going to be a pain to maintain, so
let's start by ripping it out.

* drop undocumented dependency on dateutil

It turns out we were relying on dateutil being pulled in transitively by
pysaml2. There's no need for that bloat.

This is mostly factoring out the post-CAS-login code to somewhere we can reuse
it for other SSO flows, but it also fixes the userid mapping while we're at it.

This implements both a SAML2 metadata endpoint (at
`/_matrix/saml2/metadata.xml`), and a SAML2 response receiver (at
`/_matrix/saml2/authn_response`). If the SAML2 response matches what's been
configured, we complete the SSO login flow by redirecting to the client url
(aka `RelayState` in SAML2 jargon) with a login token.

What we don't yet have is anything to build a SAML2 request and redirect the
user to the identity provider. That is left as an exercise for the reader.

If you're installing as a system package, the system package should have set up
the systemd config, so it's more useful to give an example of running in a
virtualenv here.

When we register a new user from SAML2 data, initialise their displayname
correctly.

https://www.kernel.org/doc/Documentation/SubmittingPatches returns a simple page indicating that it's moved to: "process/submitting-patches.rst".

I believe the new link contains the same information as what was previously linked to.