Created attachment 208091 [details]
net-im/py-matrix-synapse: 1.2.1 to 1.4.0 diff
This is a simple bump for py-matrix-synapse from 1.2.1 to 1.4.0. I've updated the dependencies in accordance with the upstream dep list and bumped the version. The package has been running fine on my homeserver for the last few days, so I don't expect any problems.
I've also been thinking of making the dependency on postgres the default in the future. The synapse maintainers strongly recommend postgres for basically anything but a very limited test or lab setup. I'm happy for suggestions in this regard. :)
A commit references this bug:
Date: Sun Oct 6 11:17:51 UTC 2019
New revision: 513882
Update to upstream version 1.4.0
Submitted by: firstname.lastname@example.org (maintainer)
There are no security issues mentioned in the changelog, thus you do not plan to request MFH, correct?
(In reply to Thomas Zander from comment #2)
I'm a bit uncertain about this. There are always bugfixes present in each release, but as far as I'm aware there were no security relevant fixed between 1.2.1 and 1.4.0.
The 1.4.0 realease is however particularly noteworthy as it changes the way things like email addresses/password resets can be handled. This *shouldn't* (even according to upstream) directly affect 1.2.1 users in the immediate future, so I think MFH isn't strictly necessary, but I'd leave the final decision to you.