riot-embedded
                                
                                
                                
                                    riot-embedded copied to clipboard
                            
                            
                            
                        Bump matrix-js-sdk from 1.2.0 to 19.7.0
Bumps matrix-js-sdk from 1.2.0 to 19.7.0.
Release notes
Sourced from matrix-js-sdk's releases.
v19.7.0
🔒 Security
- Fix for CVE-2022-39249
 - Fix for CVE-2022-39250
 - Fix for CVE-2022-39251
 - Fix for CVE-2022-39236
 v19.6.0
✨ Features
- Add a property aggregating all names of a NamespacedValue (#2656).
 - Implementation of MSC3824 to add action= param on SSO login (#2398). Contributed by
 @hughns.- Add invited_count and joined_count to sliding sync room responses. (#2628).
 - Base support for MSC3847: Ignore invites with policy rooms (#2626). Contributed by
 @Yoric.🐛 Bug Fixes
v19.6.0-rc.1
✨ Features
- Add a property aggregating all names of a NamespacedValue (#2656).
 - Implementation of MSC3824 to add action= param on SSO login (#2398). Contributed by
 @hughns.- Add invited_count and joined_count to sliding sync room responses. (#2628).
 - Base support for MSC3847: Ignore invites with policy rooms (#2626). Contributed by
 @Yoric.🐛 Bug Fixes
v19.5.0
🐛 Bug Fixes
- Fix bug in deepCompare which would incorrectly return objects with disjoint keys as equal (#2586). Contributed by
 @3nprob.- Refactor Sync and fix
 initialSyncLimit(#2587).- Use deep equality comparisons when searching for outgoing key requests by target (#2623). Contributed by
 @duxovni.- Fix room membership race with PREPARED event (#2613). Contributed by
 @jotto.v19.5.0-rc.4
🐛 Bug Fixes
- Fix bug in deepCompare which would incorrectly return objects with disjoint keys as equal (#2586). Contributed by
 @3nprob.- Refactor Sync and fix
 initialSyncLimit(#2587).- Use deep equality comparisons when searching for outgoing key requests by target (#2623). Contributed by
 @duxovni.- Fix room membership race with PREPARED event (#2613). Contributed by
 @jotto.v19.5.0-rc.3
🐛 Bug Fixes
- Fix bug in deepCompare which would incorrectly return objects with disjoint keys as equal (#2586). Contributed by
 @3nprob.- Refactor Sync and fix
 initialSyncLimit(#2587).- Use deep equality comparisons when searching for outgoing key requests by target (#2623). Contributed by
 @duxovni.- Fix room membership race with PREPARED event (#2613). Contributed by
 @jotto.v19.5.0-rc.1
🐛 Bug Fixes
... (truncated)
Changelog
Sourced from matrix-js-sdk's changelog.
Changes in 19.7.0 (2022-09-28)
🔒 Security
- Fix for CVE-2022-39249
 - Fix for CVE-2022-39250
 - Fix for CVE-2022-39251
 - Fix for CVE-2022-39236
 Changes in 19.6.0 (2022-09-27)
✨ Features
- Add a property aggregating all names of a NamespacedValue (#2656).
 - Implementation of MSC3824 to add action= param on SSO login (#2398). Contributed by
 @hughns.- Add invited_count and joined_count to sliding sync room responses. (#2628).
 - Base support for MSC3847: Ignore invites with policy rooms (#2626). Contributed by
 @Yoric.🐛 Bug Fixes
Changes in 19.5.0 (2022-09-13)
🐛 Bug Fixes
- Fix bug in deepCompare which would incorrectly return objects with disjoint keys as equal (#2586). Contributed by
 @3nprob.- Refactor Sync and fix
 initialSyncLimit(#2587).- Use deep equality comparisons when searching for outgoing key requests by target (#2623). Contributed by
 @duxovni.- Fix room membership race with PREPARED event (#2613). Contributed by
 @jotto.Changes in 19.4.0 (2022-08-31)
🔒 Security
- Fix for CVE-2022-36059
 Find more details at https://matrix.org/blog/2022/08/31/security-releases-matrix-js-sdk-19-4-0-and-matrix-react-sdk-3-53-0
✨ Features
- Re-emit room state events on rooms (#2607).
 - Add ability to override built in room name generator for an i18n'able one (#2609).
 - Add txn_id support to sliding sync (#2567).
 🐛 Bug Fixes
- Refactor Sync and fix
 initialSyncLimit(#2587).- Use deep equality comparisons when searching for outgoing key requests by target (#2623). Contributed by
 @duxovni.- Fix room membership race with PREPARED event (#2613). Contributed by
 @jotto.- fixed a sliding sync bug which could cause the
 roomIndexToRoomIdmap to be incorrect when a new room is added in the middle of the list or when an existing room is deleted from the middle of the list. (#2610).- Fix: Handle parsing of a beacon info event without asset (#2591). Fixes vector-im/element-web#23078. Contributed by
 @kerryarchibald.- Fix finding event read up to if stable private read receipts is missing (#2585). Fixes vector-im/element-web#23027.
 
... (truncated)
Commits
2d067adv19.7.0418aa3fPrepare changelog for v19.7.0a587d7cResolve multiple CVEsb64a30fv19.6.05451f61Prepare changelog for v19.6.0f34e568v19.6.0-rc.16fd80edPrepare changelog for v19.6.0-rc.19ff11d1test typescriptification - last few unit test files (#2675)41ab333test typescriptification - spec/unit/crypto/verification (#2673)1432e09Update sonarcloud.yml- Additional commits viewable in compare view
 
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)@dependabot use these labelswill set the current labels as the default for future PRs for this repo and language@dependabot use these reviewerswill set the current reviewers as the default for future PRs for this repo and language@dependabot use these assigneeswill set the current assignees as the default for future PRs for this repo and language@dependabot use this milestonewill set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the Security Alerts page.