← Back to all sparks
S

Synapse

COMMS
Velocity5.0

Open-source Matrix homeserver for secure decentralized real-time messaging

Synapse alternates release candidates with security patches on a tight two-week cycle

matrix-protocolfederationhomeserversecurity-releasesmsc-implementation
Current state
The feed is a straight release stream on a roughly two-week rhythm: a release candidate, a final, then point releases as needed. Recent substance sits in 1.157.0 — limits on scheduled delayed events, backward movement of fully read markers, time filters on the user-redaction admin API, and a configuration option to stop presence routing between users who merely share a room. 1.157.2 followed as a security release covering eleven advisories, six of them high severity.
Where it's heading
Development is tracking the Matrix specification process rather than a product roadmap of its own — most features arrive as implementations of numbered MSCs, several contributed from outside. The operational theme underneath is load and blast radius: presence exclusion, caps on delayed events, and locked sliding-sync connections all reduce what a busy homeserver has to carry. Security handling is centralized and batched, shipped as one patch release rather than trickled out.
Prediction
Expect 1.159.0 to follow its release candidate within roughly a week, continuing the MSC-implementation pattern. The recent removal of deprecated auth delegation suggests more cleanup of experimental configuration in the coming releases.

Recent moves

  1. 7d ago

    v1.159.0rc1

    A release candidate whose entry carries nothing but a link to the changelog. It marks the start of the 1.159 cycle without describing what is in it.

    View source ↗
  2. 14d ago

    v1.158.0

    The 1.158.0 final, published with only a changelog link in the body. The release is real but this feed entry describes none of it.

    View source ↗
  3. 19d ago

    v1.158.0rc1

    The release candidate that preceded 1.158.0, also contentless. It pairs with the final as one release, not two.

    View source ↗
  4. 21d ago

    Synapse 1.157.2 patches 11 security advisories, six high severity

    A security release fixing eleven advisories, six rated high severity, flagged as urgent for homeservers in open federation or with untrusted local users. Consequential for operators, but it hardens what exists rather than changing where the project is going.

    View source ↗
  5. 27d ago

    Synapse 1.157.1 fixes falsy experimental_features config regression

    A single-bugfix point release restoring acceptance of falsy experimental_features config. A regression repair from the previous release.

    View source ↗
  6. 28d ago

    Synapse 1.157.0 adds delayed-event limits and QR sign-in support

    The 1.157.0 final, unchanged from its candidate, carrying caps on scheduled delayed events, backward read-marker movement, admin API time filters, and an option to exclude shared rooms from presence routing. Steady MSC implementation with a load-reduction bent.

    View source ↗