275.md (17100B)
1 # PR #275 Bump matrix-js-sdk from 16.0.1 to 19.7.0 2 3 - **Status:** closed 4 - **Author:** @dependabot[bot] 5 - **Created:** 2023-01-03T17:36:44Z 6 - **Branch:** dependabot/npm_and_yarn/matrix-js-sdk-19.7.0 → main 7 - **Closed:** 2023-01-03T17:37:18Z 8 - **Labels:** dependencies, javascript 9 - **Assignees:** @MTRNord 10 - **Reviewers:** @MTRNord 11 - **Diff:** [275.diff](./275.diff) 12 13 --- 14 15 Bumps [matrix-js-sdk](https://github.com/matrix-org/matrix-js-sdk) from 16.0.1 to 19.7.0. 16 <details> 17 <summary>Release notes</summary> 18 <p><em>Sourced from <a href="https://github.com/matrix-org/matrix-js-sdk/releases">matrix-js-sdk's releases</a>.</em></p> 19 <blockquote> 20 <h2>v19.7.0</h2> 21 <h2>🔒 Security</h2> 22 <ul> 23 <li>Fix for <a href="https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=CVE%2D2022%2D39249">CVE-2022-39249</a></li> 24 <li>Fix for <a href="https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=CVE%2D2022%2D39250">CVE-2022-39250</a></li> 25 <li>Fix for <a href="https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=CVE%2D2022%2D39251">CVE-2022-39251</a></li> 26 <li>Fix for <a href="https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=CVE%2D2022%2D39236">CVE-2022-39236</a></li> 27 </ul> 28 <h2>v19.6.0</h2> 29 <h2>✨ Features</h2> 30 <ul> 31 <li>Add a property aggregating all names of a NamespacedValue (<a href="https://github-redirect.dependabot.com/matrix-org/matrix-js-sdk/pull/2656">#2656</a>).</li> 32 <li>Implementation of MSC3824 to add action= param on SSO login (<a href="https://github-redirect.dependabot.com/matrix-org/matrix-js-sdk/pull/2398">#2398</a>). Contributed by <a href="https://github.com/hughns"><code>@hughns</code></a>.</li> 33 <li>Add invited_count and joined_count to sliding sync room responses. (<a href="https://github-redirect.dependabot.com/matrix-org/matrix-js-sdk/pull/2628">#2628</a>).</li> 34 <li>Base support for MSC3847: Ignore invites with policy rooms (<a href="https://github-redirect.dependabot.com/matrix-org/matrix-js-sdk/pull/2626">#2626</a>). Contributed by <a href="https://github.com/Yoric"><code>@Yoric</code></a>.</li> 35 </ul> 36 <h2>🐛 Bug Fixes</h2> 37 <ul> 38 <li>Fix handling of remote echoes doubling up (<a href="https://github-redirect.dependabot.com/matrix-org/matrix-js-sdk/pull/2639">#2639</a>). Fixes <a href="https://github-redirect.dependabot.com/matrix-org/matrix-js-sdk/issues/2618">#2618</a>.</li> 39 </ul> 40 <h2>v19.6.0-rc.1</h2> 41 <h2>✨ Features</h2> 42 <ul> 43 <li>Add a property aggregating all names of a NamespacedValue (<a href="https://github-redirect.dependabot.com/matrix-org/matrix-js-sdk/pull/2656">#2656</a>).</li> 44 <li>Implementation of MSC3824 to add action= param on SSO login (<a href="https://github-redirect.dependabot.com/matrix-org/matrix-js-sdk/pull/2398">#2398</a>). Contributed by <a href="https://github.com/hughns"><code>@hughns</code></a>.</li> 45 <li>Add invited_count and joined_count to sliding sync room responses. (<a href="https://github-redirect.dependabot.com/matrix-org/matrix-js-sdk/pull/2628">#2628</a>).</li> 46 <li>Base support for MSC3847: Ignore invites with policy rooms (<a href="https://github-redirect.dependabot.com/matrix-org/matrix-js-sdk/pull/2626">#2626</a>). Contributed by <a href="https://github.com/Yoric"><code>@Yoric</code></a>.</li> 47 </ul> 48 <h2>🐛 Bug Fixes</h2> 49 <ul> 50 <li>Fix handling of remote echoes doubling up (<a href="https://github-redirect.dependabot.com/matrix-org/matrix-js-sdk/pull/2639">#2639</a>). Fixes <a href="https://github-redirect.dependabot.com/matrix-org/matrix-js-sdk/issues/2618">#2618</a>.</li> 51 </ul> 52 <h2>v19.5.0</h2> 53 <h2>🐛 Bug Fixes</h2> 54 <ul> 55 <li>Fix bug in deepCompare which would incorrectly return objects with disjoint keys as equal (<a href="https://github-redirect.dependabot.com/matrix-org/matrix-js-sdk/pull/2586">#2586</a>). Contributed by <a href="https://github.com/3nprob"><code>@3nprob</code></a>.</li> 56 <li>Refactor Sync and fix <code>initialSyncLimit</code> (<a href="https://github-redirect.dependabot.com/matrix-org/matrix-js-sdk/pull/2587">#2587</a>).</li> 57 <li>Use deep equality comparisons when searching for outgoing key requests by target (<a href="https://github-redirect.dependabot.com/matrix-org/matrix-js-sdk/pull/2623">#2623</a>). Contributed by <a href="https://github.com/duxovni"><code>@duxovni</code></a>.</li> 58 <li>Fix room membership race with PREPARED event (<a href="https://github-redirect.dependabot.com/matrix-org/matrix-js-sdk/pull/2613">#2613</a>). Contributed by <a href="https://github.com/jotto"><code>@jotto</code></a>.</li> 59 </ul> 60 <h2>v19.5.0-rc.4</h2> 61 <h2>🐛 Bug Fixes</h2> 62 <ul> 63 <li>Fix bug in deepCompare which would incorrectly return objects with disjoint keys as equal (<a href="https://github-redirect.dependabot.com/matrix-org/matrix-js-sdk/pull/2586">#2586</a>). Contributed by <a href="https://github.com/3nprob"><code>@3nprob</code></a>.</li> 64 <li>Refactor Sync and fix <code>initialSyncLimit</code> (<a href="https://github-redirect.dependabot.com/matrix-org/matrix-js-sdk/pull/2587">#2587</a>).</li> 65 <li>Use deep equality comparisons when searching for outgoing key requests by target (<a href="https://github-redirect.dependabot.com/matrix-org/matrix-js-sdk/pull/2623">#2623</a>). Contributed by <a href="https://github.com/duxovni"><code>@duxovni</code></a>.</li> 66 <li>Fix room membership race with PREPARED event (<a href="https://github-redirect.dependabot.com/matrix-org/matrix-js-sdk/pull/2613">#2613</a>). Contributed by <a href="https://github.com/jotto"><code>@jotto</code></a>.</li> 67 </ul> 68 <h2>v19.5.0-rc.3</h2> 69 <h2>🐛 Bug Fixes</h2> 70 <ul> 71 <li>Fix bug in deepCompare which would incorrectly return objects with disjoint keys as equal (<a href="https://github-redirect.dependabot.com/matrix-org/matrix-js-sdk/pull/2586">#2586</a>). Contributed by <a href="https://github.com/3nprob"><code>@3nprob</code></a>.</li> 72 <li>Refactor Sync and fix <code>initialSyncLimit</code> (<a href="https://github-redirect.dependabot.com/matrix-org/matrix-js-sdk/pull/2587">#2587</a>).</li> 73 <li>Use deep equality comparisons when searching for outgoing key requests by target (<a href="https://github-redirect.dependabot.com/matrix-org/matrix-js-sdk/pull/2623">#2623</a>). Contributed by <a href="https://github.com/duxovni"><code>@duxovni</code></a>.</li> 74 <li>Fix room membership race with PREPARED event (<a href="https://github-redirect.dependabot.com/matrix-org/matrix-js-sdk/pull/2613">#2613</a>). Contributed by <a href="https://github.com/jotto"><code>@jotto</code></a>.</li> 75 </ul> 76 <h2>v19.5.0-rc.1</h2> 77 <h2>🐛 Bug Fixes</h2> 78 <ul> 79 <li>Fix bug in deepCompare which would incorrectly return objects with disjoint keys as equal (<a href="https://github-redirect.dependabot.com/matrix-org/matrix-js-sdk/pull/2586">#2586</a>). Contributed by <a href="https://github.com/3nprob"><code>@3nprob</code></a>.</li> 80 <li>Refactor Sync and fix <code>initialSyncLimit</code> (<a href="https://github-redirect.dependabot.com/matrix-org/matrix-js-sdk/pull/2587">#2587</a>).</li> 81 </ul> 82 <!-- raw HTML omitted --> 83 </blockquote> 84 <p>... (truncated)</p> 85 </details> 86 <details> 87 <summary>Changelog</summary> 88 <p><em>Sourced from <a href="https://github.com/matrix-org/matrix-js-sdk/blob/develop/CHANGELOG.md">matrix-js-sdk's changelog</a>.</em></p> 89 <blockquote> 90 <h1>Changes in <a href="https://github.com/matrix-org/matrix-js-sdk/releases/tag/v19.7.0">19.7.0</a> (2022-09-28)</h1> 91 <h2>🔒 Security</h2> 92 <ul> 93 <li>Fix for <a href="https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=CVE%2D2022%2D39249">CVE-2022-39249</a></li> 94 <li>Fix for <a href="https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=CVE%2D2022%2D39250">CVE-2022-39250</a></li> 95 <li>Fix for <a href="https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=CVE%2D2022%2D39251">CVE-2022-39251</a></li> 96 <li>Fix for <a href="https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=CVE%2D2022%2D39236">CVE-2022-39236</a></li> 97 </ul> 98 <h1>Changes in <a href="https://github.com/matrix-org/matrix-js-sdk/releases/tag/v19.6.0">19.6.0</a> (2022-09-27)</h1> 99 <h2>✨ Features</h2> 100 <ul> 101 <li>Add a property aggregating all names of a NamespacedValue (<a href="https://github-redirect.dependabot.com/matrix-org/matrix-js-sdk/pull/2656">#2656</a>).</li> 102 <li>Implementation of MSC3824 to add action= param on SSO login (<a href="https://github-redirect.dependabot.com/matrix-org/matrix-js-sdk/pull/2398">#2398</a>). Contributed by <a href="https://github.com/hughns"><code>@hughns</code></a>.</li> 103 <li>Add invited_count and joined_count to sliding sync room responses. (<a href="https://github-redirect.dependabot.com/matrix-org/matrix-js-sdk/pull/2628">#2628</a>).</li> 104 <li>Base support for MSC3847: Ignore invites with policy rooms (<a href="https://github-redirect.dependabot.com/matrix-org/matrix-js-sdk/pull/2626">#2626</a>). Contributed by <a href="https://github.com/Yoric"><code>@Yoric</code></a>.</li> 105 </ul> 106 <h2>🐛 Bug Fixes</h2> 107 <ul> 108 <li>Fix handling of remote echoes doubling up (<a href="https://github-redirect.dependabot.com/matrix-org/matrix-js-sdk/pull/2639">#2639</a>). Fixes <a href="https://github-redirect.dependabot.com/matrix-org/matrix-js-sdk/issues/2618">#2618</a>.</li> 109 </ul> 110 <h1>Changes in <a href="https://github.com/matrix-org/matrix-js-sdk/releases/tag/v19.5.0">19.5.0</a> (2022-09-13)</h1> 111 <h2>🐛 Bug Fixes</h2> 112 <ul> 113 <li>Fix bug in deepCompare which would incorrectly return objects with disjoint keys as equal (<a href="https://github-redirect.dependabot.com/matrix-org/matrix-js-sdk/pull/2586">#2586</a>). Contributed by <a href="https://github.com/3nprob"><code>@3nprob</code></a>.</li> 114 <li>Refactor Sync and fix <code>initialSyncLimit</code> (<a href="https://github-redirect.dependabot.com/matrix-org/matrix-js-sdk/pull/2587">#2587</a>).</li> 115 <li>Use deep equality comparisons when searching for outgoing key requests by target (<a href="https://github-redirect.dependabot.com/matrix-org/matrix-js-sdk/pull/2623">#2623</a>). Contributed by <a href="https://github.com/duxovni"><code>@duxovni</code></a>.</li> 116 <li>Fix room membership race with PREPARED event (<a href="https://github-redirect.dependabot.com/matrix-org/matrix-js-sdk/pull/2613">#2613</a>). Contributed by <a href="https://github.com/jotto"><code>@jotto</code></a>.</li> 117 </ul> 118 <h1>Changes in <a href="https://github.com/matrix-org/matrix-js-sdk/releases/tag/v19.4.0">19.4.0</a> (2022-08-31)</h1> 119 <h2>🔒 Security</h2> 120 <ul> 121 <li>Fix for <a href="https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=CVE%2D2022%2D36059">CVE-2022-36059</a></li> 122 </ul> 123 <p>Find more details at <a href="https://matrix.org/blog/2022/08/31/security-releases-matrix-js-sdk-19-4-0-and-matrix-react-sdk-3-53-0">https://matrix.org/blog/2022/08/31/security-releases-matrix-js-sdk-19-4-0-and-matrix-react-sdk-3-53-0</a></p> 124 <h2>✨ Features</h2> 125 <ul> 126 <li>Re-emit room state events on rooms (<a href="https://github-redirect.dependabot.com/matrix-org/matrix-js-sdk/pull/2607">#2607</a>).</li> 127 <li>Add ability to override built in room name generator for an i18n'able one (<a href="https://github-redirect.dependabot.com/matrix-org/matrix-js-sdk/pull/2609">#2609</a>).</li> 128 <li>Add txn_id support to sliding sync (<a href="https://github-redirect.dependabot.com/matrix-org/matrix-js-sdk/pull/2567">#2567</a>).</li> 129 </ul> 130 <h2>🐛 Bug Fixes</h2> 131 <ul> 132 <li>Refactor Sync and fix <code>initialSyncLimit</code> (<a href="https://github-redirect.dependabot.com/matrix-org/matrix-js-sdk/pull/2587">#2587</a>).</li> 133 <li>Use deep equality comparisons when searching for outgoing key requests by target (<a href="https://github-redirect.dependabot.com/matrix-org/matrix-js-sdk/pull/2623">#2623</a>). Contributed by <a href="https://github.com/duxovni"><code>@duxovni</code></a>.</li> 134 <li>Fix room membership race with PREPARED event (<a href="https://github-redirect.dependabot.com/matrix-org/matrix-js-sdk/pull/2613">#2613</a>). Contributed by <a href="https://github.com/jotto"><code>@jotto</code></a>.</li> 135 <li>fixed a sliding sync bug which could cause the <code>roomIndexToRoomId</code> map to be incorrect when a new room is added in the middle of the list or when an existing room is deleted from the middle of the list. (<a href="https://github-redirect.dependabot.com/matrix-org/matrix-js-sdk/pull/2610">#2610</a>).</li> 136 <li>Fix: Handle parsing of a beacon info event without asset (<a href="https://github-redirect.dependabot.com/matrix-org/matrix-js-sdk/pull/2591">#2591</a>). Fixes <a href="https://github-redirect.dependabot.com/vector-im/element-web/issues/23078">vector-im/element-web#23078</a>. Contributed by <a href="https://github.com/kerryarchibald"><code>@kerryarchibald</code></a>.</li> 137 <li>Fix finding event read up to if stable private read receipts is missing (<a href="https://github-redirect.dependabot.com/matrix-org/matrix-js-sdk/pull/2585">#2585</a>). Fixes <a href="https://github-redirect.dependabot.com/vector-im/element-web/issues/23027">vector-im/element-web#23027</a>.</li> 138 </ul> 139 <!-- raw HTML omitted --> 140 </blockquote> 141 <p>... (truncated)</p> 142 </details> 143 <details> 144 <summary>Commits</summary> 145 <ul> 146 <li><a href="https://github.com/matrix-org/matrix-js-sdk/commit/2d067ad95778b26aed24b801be0951e215c3ac8c"><code>2d067ad</code></a> v19.7.0</li> 147 <li><a href="https://github.com/matrix-org/matrix-js-sdk/commit/418aa3ff6acffdd9ba375095f7eee14400c7de72"><code>418aa3f</code></a> Prepare changelog for v19.7.0</li> 148 <li><a href="https://github.com/matrix-org/matrix-js-sdk/commit/a587d7c36026fe1fcf93dfff63588abee359be76"><code>a587d7c</code></a> Resolve multiple CVEs</li> 149 <li><a href="https://github.com/matrix-org/matrix-js-sdk/commit/b64a30f0ad35022b342ef8142e526fe12f43673a"><code>b64a30f</code></a> v19.6.0</li> 150 <li><a href="https://github.com/matrix-org/matrix-js-sdk/commit/5451f6139a250083d8728165ba6adc30e5186227"><code>5451f61</code></a> Prepare changelog for v19.6.0</li> 151 <li><a href="https://github.com/matrix-org/matrix-js-sdk/commit/f34e568a98b44b48a10da6231877ecbf0019274f"><code>f34e568</code></a> v19.6.0-rc.1</li> 152 <li><a href="https://github.com/matrix-org/matrix-js-sdk/commit/6fd80ed3edf832766d9f56ebf3bceb5a11821597"><code>6fd80ed</code></a> Prepare changelog for v19.6.0-rc.1</li> 153 <li><a href="https://github.com/matrix-org/matrix-js-sdk/commit/9ff11d1f325fe53f81e9609a44ca07509fe2a5da"><code>9ff11d1</code></a> test typescriptification - last few unit test files (<a href="https://github-redirect.dependabot.com/matrix-org/matrix-js-sdk/issues/2675">#2675</a>)</li> 154 <li><a href="https://github.com/matrix-org/matrix-js-sdk/commit/41ab3337b532b632ba0d7572635be14bfd9cc923"><code>41ab333</code></a> test typescriptification - spec/unit/crypto/verification (<a href="https://github-redirect.dependabot.com/matrix-org/matrix-js-sdk/issues/2673">#2673</a>)</li> 155 <li><a href="https://github.com/matrix-org/matrix-js-sdk/commit/1432e094c26338d23dfe24456b48829ef0473f42"><code>1432e09</code></a> Update sonarcloud.yml</li> 156 <li>Additional commits viewable in <a href="https://github.com/matrix-org/matrix-js-sdk/compare/v16.0.1...v19.7.0">compare view</a></li> 157 </ul> 158 </details> 159 <br /> 160 161 162 [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) 163 164 Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. 165 166 [//]: # (dependabot-automerge-start) 167 [//]: # (dependabot-automerge-end) 168 169 --- 170 171 <details> 172 <summary>Dependabot commands and options</summary> 173 <br /> 174 175 You can trigger Dependabot actions by commenting on this PR: 176 - `@dependabot rebase` will rebase this PR 177 - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it 178 - `@dependabot merge` will merge this PR after your CI passes on it 179 - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it 180 - `@dependabot cancel merge` will cancel a previously requested merge and block automerging 181 - `@dependabot reopen` will reopen this PR if it is closed 182 - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually 183 - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) 184 - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) 185 - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) 186 You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/MTRNord/matrix-art/network/alerts). 187 188 </details> 189 190 <!-- Replace --> 191 ---- 192 ⌛ Deploy Preview - Build in Progress 193 <!-- Replace --> 194 195 196 197 ## Comments 198 199 ### @dependabot[bot] — 2023-01-03T17:37:18Z 200 201 Superseded by #276. 202