This is again a security update targeted at mitigating [CVE-2023-4863](…

…https://cve.org/CVERecord?id=CVE-2023-4863).

It turns out that libwebp is bundled statically in Pillow wheels so we need to update this dependency instead of
libwebp package at the OS level.

Unlike what was advertised in 1.92.2 changelog this release also impacts PyPI wheels and Debian packages from matrix.org.

We encourage admins to upgrade as soon as possible.

- Pillow 10.0.1 is now mandatory because of libwebp CVE-2023-4863, since Pillow provides libwebp in the wheels. ([\matrix-org#16347](matrix-org#16347))

* Bump pillow from 10.0.0 to 10.0.1. ([\matrix-org#16344](matrix-org#16344))

This is a Docker-only update to mitigate [CVE-2023-4863](https://cve.…

…org/CVERecord?id=CVE-2023-4863), a critical vulnerability in `libwebp`. Server admins not using Docker should ensure that their `libwebp` is up to date (if installed). We encourage admins to upgrade as soon as possible.

- Update docker image to use Debian bookworm as the base. ([\matrix-org#16324](matrix-org#16324))

Stop building Ubuntu Kinetic since it is EOL and repos seem to be dead.

- Revert [MSC3861](matrix-org/matrix-spec-proposals#3861) introspecti…

…on cache, admin impersonation and account lock. ([\matrix-org#16258](matrix-org#16258))

- Fix incorrect docstring for `Ratelimiter`. ([\matrix-org#16255](matrix-org#16255))
- Update the release script to work on macOS. ([\matrix-org#16266](matrix-org#16266))

- Add configuration setting for CAS protocol version. Contributed by Aurélien Grimpard. ([\matrix-org#15816](matrix-org#15816))
- Suppress notifications from message edits per [MSC3958](matrix-org/matrix-spec-proposals#3958). ([\matrix-org#16113](matrix-org#16113))
- Experimental support for [MSC4041](matrix-org/matrix-spec-proposals#4041): return a `Retry-After` header with `M_LIMIT_EXCEEDED` error responses. ([\matrix-org#16136](matrix-org#16136))
- Add `last_seen_ts` to the [admin users API](https://matrix-org.github.io/synapse/latest/admin_api/user_admin_api.html). ([\matrix-org#16218](matrix-org#16218))
- Improve resource usage when sending data to a large number of remote hosts that are marked as "down". ([\matrix-org#16223](matrix-org#16223))

- Fix IPv6-related bugs on SMTP settings, adding groundwork to fix similar issues. Contributed by @evilham and @telmich (ungleich.ch). ([\matrix-org#16155](matrix-org#16155))
- Fix a spec compliance issue where requests to the `/publicRooms` federation API would specify `include_all_networks` as a string. ([\matrix-org#16185](matrix-org#16185))
- Fix inaccurate error message while attempting to ban or unban a user with the same or higher PL by spliting the conditional statements. Contributed by @leviosacz. ([\matrix-org#16205](matrix-org#16205))
- Fix a rare bug that broke looping calls, which could lead to e.g. linearly increasing memory usage. Introduced in v1.90.0. ([\matrix-org#16210](matrix-org#16210))
- Fix a long-standing bug where uploading images would fail if we could not generate thumbnails for them. ([\matrix-org#16211](matrix-org#16211))
- Fix a long-standing bug where we did not correctly back off from servers that had "gone" if they returned 4xx series error codes. ([\matrix-org#16221](matrix-org#16221))

- Update links to the [matrix.org blog](https://matrix.org/blog/). ([\matrix-org#16008](matrix-org#16008))
- Document which [admin APIs](https://matrix-org.github.io/synapse/latest/usage/administration/admin_api/index.html) are disabled when experimental [MSC3861](matrix-org/matrix-spec-proposals#3861) support is enabled. ([\matrix-org#16168](matrix-org#16168))
- Document [`exclude_rooms_from_sync`](https://matrix-org.github.io/synapse/v1.92/usage/configuration/config_documentation.html#exclude_rooms_from_sync) configuration option. ([\matrix-org#16178](matrix-org#16178))

- Prepare unit tests for Python 3.12. ([\matrix-org#16099](matrix-org#16099))
- Fix nightly CI jobs. ([\matrix-org#16121](matrix-org#16121), [\matrix-org#16213](matrix-org#16213))
- Describe which rate limiter was hit in logs. ([\matrix-org#16135](matrix-org#16135))
- Simplify presence code when using workers. ([\matrix-org#16170](matrix-org#16170))
- Track per-device information in the presence code. ([\matrix-org#16171](matrix-org#16171), [\matrix-org#16172](matrix-org#16172))
- Stop using the `event_txn_id` table. ([\matrix-org#16175](matrix-org#16175))
- Use `AsyncMock` instead of custom code. ([\matrix-org#16179](matrix-org#16179), [\matrix-org#16180](matrix-org#16180))
- Improve error reporting of invalid data passed to `/_matrix/key/v2/query`. ([\matrix-org#16183](matrix-org#16183))
- Task scheduler: add replication notify for new task to launch ASAP. ([\matrix-org#16184](matrix-org#16184))
- Improve type hints. ([\matrix-org#16186](matrix-org#16186), [\matrix-org#16188](matrix-org#16188), [\matrix-org#16201](matrix-org#16201))
- Bump black version to 23.7.0. ([\matrix-org#16187](matrix-org#16187))
- Log the details of background update failures. ([\matrix-org#16212](matrix-org#16212))
- Cache device resync requests over replication. ([\matrix-org#16241](matrix-org#16241))

* Bump anyhow from 1.0.72 to 1.0.75. ([\matrix-org#16141](matrix-org#16141))
* Bump furo from 2023.7.26 to 2023.8.19. ([\matrix-org#16238](matrix-org#16238))
* Bump phonenumbers from 8.13.18 to 8.13.19. ([\matrix-org#16237](matrix-org#16237))
* Bump psycopg2 from 2.9.6 to 2.9.7. ([\matrix-org#16196](matrix-org#16196))
* Bump regex from 1.9.3 to 1.9.4. ([\matrix-org#16195](matrix-org#16195))
* Bump ruff from 0.0.277 to 0.0.286. ([\matrix-org#16198](matrix-org#16198))
* Bump sentry-sdk from 1.29.2 to 1.30.0. ([\matrix-org#16236](matrix-org#16236))
* Bump serde from 1.0.184 to 1.0.188. ([\matrix-org#16194](matrix-org#16194))
* Bump serde_json from 1.0.104 to 1.0.105. ([\matrix-org#16140](matrix-org#16140))
* Bump types-psycopg2 from 2.9.21.10 to 2.9.21.11. ([\matrix-org#16200](matrix-org#16200))
* Bump types-pyyaml from 6.0.12.10 to 6.0.12.11. ([\matrix-org#16199](matrix-org#16199))

- Revert [MSC3861](matrix-org/matrix-spec-proposals#3861) introspecti…

…on cache, admin impersonation and account lock. ([\matrix-org#16258](matrix-org#16258))

- Add configuration setting for CAS protocol version. Contributed by …

…Aurélien Grimpard. ([\matrix-org#15816](matrix-org#15816))

- Suppress notifications from message edits per [MSC3958](matrix-org/matrix-spec-proposals#3958). ([\matrix-org#16113](matrix-org#16113))
- Return a `Retry-After` with `M_LIMIT_EXCEEDED` error responses. ([\matrix-org#16136](matrix-org#16136))
- Add `last_seen_ts` to the [admin users API](https://matrix-org.github.io/synapse/latest/admin_api/user_admin_api.html). ([\matrix-org#16218](matrix-org#16218))
- Improve resource usage when sending data to a large number of remote hosts that are marked as "down". ([\matrix-org#16223](matrix-org#16223))

- Fix IPv6-related bugs on SMTP settings, adding groundwork to fix similar issues. Contributed by @evilham and @telmich (ungleich.ch). ([\matrix-org#16155](matrix-org#16155))
- Fix a spec compliance issue where requests to the `/publicRooms` federation API would specify `include_all_networks` as a string. ([\matrix-org#16185](matrix-org#16185))
- Fix inaccurate error message while attempting to ban or unban a user with the same or higher PL by spliting the conditional statements. Contributed by @leviosacz. ([\matrix-org#16205](matrix-org#16205))
- Fix a rare bug that broke looping calls, which could lead to e.g. linearly increasing memory usage. Introduced in v1.90.0. ([\matrix-org#16210](matrix-org#16210))
- Fix a long-standing bug where uploading images would fail if we could not generate thumbnails for them. ([\matrix-org#16211](matrix-org#16211))
- Fix a long-standing bug where we did not correctly back off from servers that had "gone" if they returned 4xx series error codes. ([\matrix-org#16221](matrix-org#16221))

- Update links to the [matrix.org blog](https://matrix.org/blog/). ([\matrix-org#16008](matrix-org#16008))
- Document which [admin APIs](https://matrix-org.github.io/synapse/latest/usage/administration/admin_api/index.html) are disabled when experimental [MSC3861](matrix-org/matrix-spec-proposals#3861) support is enabled. ([\matrix-org#16168](matrix-org#16168))
- Document [`exclude_rooms_from_sync`](https://matrix-org.github.io/synapse/v1.92/usage/configuration/config_documentation.html#exclude_rooms_from_sync) configuration option. ([\matrix-org#16178](matrix-org#16178))

- Prepare unit tests for Python 3.12. ([\matrix-org#16099](matrix-org#16099))
- Fix nightly CI jobs. ([\matrix-org#16121](matrix-org#16121), [\matrix-org#16213](matrix-org#16213))
- Describe which rate limiter was hit in logs. ([\matrix-org#16135](matrix-org#16135))
- Simplify presence code when using workers. ([\matrix-org#16170](matrix-org#16170))
- Track per-device information in the presence code. ([\matrix-org#16171](matrix-org#16171), [\matrix-org#16172](matrix-org#16172))
- Stop using the `event_txn_id` table. ([\matrix-org#16175](matrix-org#16175))
- Use `AsyncMock` instead of custom code. ([\matrix-org#16179](matrix-org#16179), [\matrix-org#16180](matrix-org#16180))
- Improve error reporting of invalid data passed to `/_matrix/key/v2/query`. ([\matrix-org#16183](matrix-org#16183))
- Task scheduler: add replication notify for new task to launch ASAP. ([\matrix-org#16184](matrix-org#16184))
- Improve type hints. ([\matrix-org#16186](matrix-org#16186), [\matrix-org#16188](matrix-org#16188), [\matrix-org#16201](matrix-org#16201))
- Bump black version to 23.7.0. ([\matrix-org#16187](matrix-org#16187))
- Log the details of background update failures. ([\matrix-org#16212](matrix-org#16212))
- Cache device resync requests over replication. ([\matrix-org#16241](matrix-org#16241))

* Bump anyhow from 1.0.72 to 1.0.75. ([\matrix-org#16141](matrix-org#16141))
* Bump furo from 2023.7.26 to 2023.8.19. ([\matrix-org#16238](matrix-org#16238))
* Bump phonenumbers from 8.13.18 to 8.13.19. ([\matrix-org#16237](matrix-org#16237))
* Bump psycopg2 from 2.9.6 to 2.9.7. ([\matrix-org#16196](matrix-org#16196))
* Bump regex from 1.9.3 to 1.9.4. ([\matrix-org#16195](matrix-org#16195))
* Bump ruff from 0.0.277 to 0.0.286. ([\matrix-org#16198](matrix-org#16198))
* Bump sentry-sdk from 1.29.2 to 1.30.0. ([\matrix-org#16236](matrix-org#16236))
* Bump serde from 1.0.184 to 1.0.188. ([\matrix-org#16194](matrix-org#16194))
* Bump serde_json from 1.0.104 to 1.0.105. ([\matrix-org#16140](matrix-org#16140))
* Bump types-psycopg2 from 2.9.21.10 to 2.9.21.11. ([\matrix-org#16200](matrix-org#16200))
* Bump types-pyyaml from 6.0.12.10 to 6.0.12.11. ([\matrix-org#16199](matrix-org#16199))

- Fix a performance regression introduced in Synapse 1.91.0 where eve…

…nt persistence would cause an excessive linear growth in CPU usage. ([\matrix-org#16220](matrix-org#16220))

No significant changes since 1.91.0rc1.

- Implements an admin API to lock an user without deactivating them. Based on [MSC3939](matrix-org/matrix-spec-proposals#3939). ([\matrix-org#15870](matrix-org#15870))
- Implements a task scheduler for	resumable potentially long running tasks. ([\matrix-org#15891](matrix-org#15891))
- Allow specifying `client_secret_path` as alternative to `client_secret` for OIDC providers. This avoids leaking the client secret in the homeserver config. Contributed by @Ma27. ([\matrix-org#16030](matrix-org#16030))
- Allow customising the IdP display name, icon, and brand for SAML and CAS providers (in addition to OIDC provider). ([\matrix-org#16094](matrix-org#16094))
- Add an `admins` query parameter to the [List Accounts](https://matrix-org.github.io/synapse/v1.91/admin_api/user_admin_api.html#list-accounts) [admin API](https://matrix-org.github.io/synapse/v1.91/usage/administration/admin_api/index.html), to include only admins or to exclude admins in user queries. ([\matrix-org#16114](matrix-org#16114))

- Fix long-standing bug where concurrent requests to change a user's push rules could cause a deadlock. Contributed by Nick @ Beeper (@Fizzadar). ([\matrix-org#16052](matrix-org#16052))
- Fix a long-standing bu in `/sync` where timeout=0 does not skip caching, resulting in slow calls in cases where there are no new changes. Contributed by @PlasmaIntec. ([\matrix-org#16080](matrix-org#16080))
- Fix performance of state resolutions for large, old rooms that did not have the full auth chain persisted. ([\matrix-org#16116](matrix-org#16116))
- Filter out user agent references to the sliding sync proxy and rust-sdk from the user_daily_visits table to ensure that Element X can be represented fully. ([\matrix-org#16124](matrix-org#16124))
- User constent and 3-PID changes capability cannot be enabled when using experimental [MSC3861](matrix-org/matrix-spec-proposals#3861) support. ([\matrix-org#16127](matrix-org#16127), [\matrix-org#16134](matrix-org#16134))
- Fix a rare race that could block new events from being sent for up to two minutes. Introduced in v1.90.0. ([\matrix-org#16133](matrix-org#16133), [\matrix-org#16169](matrix-org#16169))
- Fix performance degredation when there are a lot of in-flight replication requests. ([\matrix-org#16148](matrix-org#16148))
- Fix a bug introduced in 1.87 where synapse would send an excessive amount of federation requests to servers which have been offline for a long time. Contributed by Nico. ([\matrix-org#16156](matrix-org#16156), [\matrix-org#16164](matrix-org#16164))

- Structured logging docs: add a link to explain the ELK stack ([\matrix-org#16091](matrix-org#16091))

- Update dehydrated devices implementation. ([\matrix-org#16010](matrix-org#16010))
- Fix database performance of read/write worker locks. ([\matrix-org#16061](matrix-org#16061))
- Fix building the nix development environment on MacOS systems. ([\matrix-org#16063](matrix-org#16063))
- Override global statement timeout when creating indexes in Postgres. ([\matrix-org#16085](matrix-org#16085))
- Fix the type annotation on `run_db_interaction` in the Module API. ([\matrix-org#16089](matrix-org#16089))
- Clean-up the presence code. ([\matrix-org#16092](matrix-org#16092))
- Run `pyupgrade` for Python 3.8+. ([\matrix-org#16110](matrix-org#16110))
- Rename pagination and purge locks and add comments to explain why they exist and how they work. ([\matrix-org#16112](matrix-org#16112))
- Attempt to fix the twisted trunk job. ([\matrix-org#16115](matrix-org#16115))
- Cache token introspection response from OIDC provider. ([\matrix-org#16117](matrix-org#16117))
- Add cache to `get_server_keys_json_for_remote`. ([\matrix-org#16123](matrix-org#16123))
- Add an admin endpoint to allow authorizing server to signal token revocations. ([\matrix-org#16125](matrix-org#16125))
- Add response time metrics for introspection requests for delegated auth. ([\matrix-org#16131](matrix-org#16131))
- MSC3861: allow impersonation by an admin user using `_oidc_admin_impersonate_user_id` query parameter. ([\matrix-org#16132](matrix-org#16132))
- Increase performance of read/write locks. ([\matrix-org#16149](matrix-org#16149))
- Improve presence tests. ([\matrix-org#16150](matrix-org#16150), [\matrix-org#16151](matrix-org#16151), [\matrix-org#16158](matrix-org#16158))
- Raised the poetry-core version cap to 1.7.0. ([\matrix-org#16152](matrix-org#16152))
- Fix assertion in user directory unit tests. ([\matrix-org#16157](matrix-org#16157))
- Reduce scope of locks when paginating to alleviate DB contention. ([\matrix-org#16159](matrix-org#16159))
- Reduce DB contention on worker locks. ([\matrix-org#16160](matrix-org#16160))
- Task scheduler: mark task as active if we are scheduling as soon as possible. ([\matrix-org#16165](matrix-org#16165))

* Bump click from 8.1.6 to 8.1.7. ([\matrix-org#16145](matrix-org#16145))
* Bump gitpython from 3.1.31 to 3.1.32. ([\matrix-org#16103](matrix-org#16103))
* Bump ijson from 3.2.1 to 3.2.3. ([\matrix-org#16143](matrix-org#16143))
* Bump isort from 5.11.5 to 5.12.0. ([\matrix-org#16108](matrix-org#16108))
* Bump log from 0.4.19 to 0.4.20. ([\matrix-org#16109](matrix-org#16109))
* Bump pygithub from 1.59.0 to 1.59.1. ([\matrix-org#16144](matrix-org#16144))
* Bump sentry-sdk from 1.28.1 to 1.29.2. ([\matrix-org#16142](matrix-org#16142))
* Bump serde from 1.0.183 to 1.0.184. ([\matrix-org#16139](matrix-org#16139))
* Bump txredisapi from 1.4.9 to 1.4.10. ([\matrix-org#16107](matrix-org#16107))
* Bump types-bleach from 6.0.0.3 to 6.0.0.4. ([\matrix-org#16106](matrix-org#16106))
* Bump types-pillow from 10.0.0.1 to 10.0.0.2. ([\matrix-org#16105](matrix-org#16105))
* Bump types-pyopenssl from 23.2.0.1 to 23.2.0.2. ([\matrix-org#16146](matrix-org#16146))

- Implements an admin API to lock an user without deactivating them. Based on [MSC3939](matrix-org/matrix-spec-proposals#3939). ([\matrix-org#15870](matrix-org#15870))
- Allow specifying `client_secret_path` as alternative to `client_secret` for OIDC providers. This avoids leaking the client secret in the homeserver config. Contributed by @Ma27. ([\matrix-org#16030](matrix-org#16030))
- Allow customising the IdP display name, icon, and brand for SAML and CAS providers (in addition to OIDC provider). ([\matrix-org#16094](matrix-org#16094))
- Add an `admins` query parameter to the [List Accounts](https://matrix-org.github.io/synapse/v1.91/admin_api/user_admin_api.html#list-accounts) [admin API](https://matrix-org.github.io/synapse/v1.91/usage/administration/admin_api/index.html), to include only admins or to exclude admins in user queries. ([\matrix-org#16114](matrix-org#16114))

- Fix long-standing bug where concurrent requests to change a user's push rules could cause a deadlock. Contributed by Nick @ Beeper (@Fizzadar). ([\matrix-org#16052](matrix-org#16052))
- Fix a long-standing bug in `/sync` where timeout=0 does not skip caching, resulting in slow calls in cases where there are no new changes. Contributed by @PlasmaIntec. ([\matrix-org#16080](matrix-org#16080))
- Fix performance of state resolutions for large, old rooms that did not have the full auth chain persisted. ([\matrix-org#16116](matrix-org#16116))
- Filter out user agent references to the sliding sync proxy and rust-sdk from the `user_daily_visits` table to ensure that Element X can be represented fully. ([\matrix-org#16124](matrix-org#16124))
- User constent and third-party ID changes capability cannot be enabled when using experimental [MSC3861](matrix-org/matrix-spec-proposals#3861) support. ([\matrix-org#16127](matrix-org#16127), [\matrix-org#16134](matrix-org#16134))
- Fix a rare race that could block new events from being sent for up to two minutes. Introduced in v1.90.0. ([\matrix-org#16133](matrix-org#16133), [\matrix-org#16169](matrix-org#16169))
- Fix performance degredation when there are a lot of in-flight replication requests. ([\matrix-org#16148](matrix-org#16148))
- Fix a bug introduced in 1.87 where synapse would send an excessive amount of federation requests to servers which have been offline for a long time. Contributed by Nico. ([\matrix-org#16156](matrix-org#16156), [\matrix-org#16164](matrix-org#16164))

- Structured logging docs: add a link to explain the ELK stack ([\matrix-org#16091](matrix-org#16091))

- Update dehydrated devices implementation. ([\matrix-org#16010](matrix-org#16010))
- Fix database performance of read/write worker locks. ([\matrix-org#16061](matrix-org#16061))
- Fix building the nix development environment on MacOS systems. ([\matrix-org#16063](matrix-org#16063))
- Override global statement timeout when creating indexes in Postgres. ([\matrix-org#16085](matrix-org#16085))
- Fix the type annotation on `run_db_interaction` in the Module API. ([\matrix-org#16089](matrix-org#16089))
- Clean-up the presence code. ([\matrix-org#16092](matrix-org#16092))
- Run `pyupgrade` for Python 3.8+. ([\matrix-org#16110](matrix-org#16110))
- Rename pagination and purge locks and add comments to explain why they exist and how they work. ([\matrix-org#16112](matrix-org#16112))
- Attempt to fix the twisted trunk job. ([\matrix-org#16115](matrix-org#16115))
- Cache token introspection response from OIDC provider. ([\matrix-org#16117](matrix-org#16117))
- Add cache to `get_server_keys_json_for_remote`. ([\matrix-org#16123](matrix-org#16123))
- Add an admin endpoint to allow authorizing server to signal token revocations. ([\matrix-org#16125](matrix-org#16125))
- Add response time metrics for introspection requests for delegated auth. ([\matrix-org#16131](matrix-org#16131))
- [MSC3861](matrix-org/matrix-spec-proposals#3861): allow impersonation by an admin user using `_oidc_admin_impersonate_user_id` query parameter. ([\matrix-org#16132](matrix-org#16132))
- Increase performance of read/write locks. ([\matrix-org#16149](matrix-org#16149))
- Improve presence tests. ([\matrix-org#16150](matrix-org#16150), [\matrix-org#16151](matrix-org#16151), [\matrix-org#16158](matrix-org#16158))
- Raised the poetry-core version cap to 1.7.0. ([\matrix-org#16152](matrix-org#16152))
- Fix assertion in user directory unit tests. ([\matrix-org#16157](matrix-org#16157))
- Reduce scope of locks when paginating to alleviate DB contention. ([\matrix-org#16159](matrix-org#16159))
- Reduce DB contention on worker locks. ([\matrix-org#16160](matrix-org#16160))
- Task scheduler: mark task as active if we are scheduling as soon as possible. ([\matrix-org#16165](matrix-org#16165))
- Implements a task scheduler for	resumable potentially long running tasks. ([\matrix-org#15891](matrix-org#15891))

* Bump click from 8.1.6 to 8.1.7. ([\matrix-org#16145](matrix-org#16145))
* Bump gitpython from 3.1.31 to 3.1.32. ([\matrix-org#16103](matrix-org#16103))
* Bump ijson from 3.2.1 to 3.2.3. ([\matrix-org#16143](matrix-org#16143))
* Bump isort from 5.11.5 to 5.12.0. ([\matrix-org#16108](matrix-org#16108))
* Bump log from 0.4.19 to 0.4.20. ([\matrix-org#16109](matrix-org#16109))
* Bump pygithub from 1.59.0 to 1.59.1. ([\matrix-org#16144](matrix-org#16144))
* Bump sentry-sdk from 1.28.1 to 1.29.2. ([\matrix-org#16142](matrix-org#16142))
* Bump serde from 1.0.183 to 1.0.184. ([\matrix-org#16139](matrix-org#16139))
* Bump txredisapi from 1.4.9 to 1.4.10. ([\matrix-org#16107](matrix-org#16107))
* Bump types-bleach from 6.0.0.3 to 6.0.0.4. ([\matrix-org#16106](matrix-org#16106))
* Bump types-pillow from 10.0.0.1 to 10.0.0.2. ([\matrix-org#16105](matrix-org#16105))
* Bump types-pyopenssl from 23.2.0.1 to 23.2.0.2. ([\matrix-org#16146](matrix-org#16146))

- Implements an admin API to lock an user without deactivating them. …

…Based on [MSC3939](matrix-org/matrix-spec-proposals#3939). ([\matrix-org#15870](matrix-org#15870))

- Implements a task scheduler for	resumable potentially long running tasks. ([\matrix-org#15891](matrix-org#15891))
- Allow specifying `client_secret_path` as alternative to `client_secret` for OIDC providers. This avoids leaking the client secret in the homeserver config. Contributed by @Ma27. ([\matrix-org#16030](matrix-org#16030))
- Allow customising the IdP display name, icon, and brand for SAML and CAS providers (in addition to OIDC provider). ([\matrix-org#16094](matrix-org#16094))
- Add an `admins` query parameter to the [List Accounts](https://matrix-org.github.io/synapse/v1.91/admin_api/user_admin_api.html#list-accounts) [admin API](https://matrix-org.github.io/synapse/v1.91/usage/administration/admin_api/index.html), to include only admins or to exclude admins in user queries. ([\matrix-org#16114](matrix-org#16114))

- Fix long-standing bug where concurrent requests to change a user's push rules could cause a deadlock. Contributed by Nick @ Beeper (@Fizzadar). ([\matrix-org#16052](matrix-org#16052))
- Fix a long-standing bu in `/sync` where timeout=0 does not skip caching, resulting in slow calls in cases where there are no new changes. Contributed by @PlasmaIntec. ([\matrix-org#16080](matrix-org#16080))
- Fix performance of state resolutions for large, old rooms that did not have the full auth chain persisted. ([\matrix-org#16116](matrix-org#16116))
- Filter out user agent references to the sliding sync proxy and rust-sdk from the user_daily_visits table to ensure that Element X can be represented fully. ([\matrix-org#16124](matrix-org#16124))
- User constent and 3-PID changes capability cannot be enabled when using experimental [MSC3861](matrix-org/matrix-spec-proposals#3861) support. ([\matrix-org#16127](matrix-org#16127), [\matrix-org#16134](matrix-org#16134))
- Fix a rare race that could block new events from being sent for up to two minutes. Introduced in v1.90.0. ([\matrix-org#16133](matrix-org#16133), [\matrix-org#16169](matrix-org#16169))
- Fix performance degredation when there are a lot of in-flight replication requests. ([\matrix-org#16148](matrix-org#16148))
- Fix a bug introduced in 1.87 where synapse would send an excessive amount of federation requests to servers which have been offline for a long time. Contributed by Nico. ([\matrix-org#16156](matrix-org#16156), [\matrix-org#16164](matrix-org#16164))

- Structured logging docs: add a link to explain the ELK stack ([\matrix-org#16091](matrix-org#16091))

- Update dehydrated devices implementation. ([\matrix-org#16010](matrix-org#16010))
- Fix database performance of read/write worker locks. ([\matrix-org#16061](matrix-org#16061))
- Fix building the nix development environment on MacOS systems. ([\matrix-org#16063](matrix-org#16063))
- Override global statement timeout when creating indexes in Postgres. ([\matrix-org#16085](matrix-org#16085))
- Fix the type annotation on `run_db_interaction` in the Module API. ([\matrix-org#16089](matrix-org#16089))
- Clean-up the presence code. ([\matrix-org#16092](matrix-org#16092))
- Run `pyupgrade` for Python 3.8+. ([\matrix-org#16110](matrix-org#16110))
- Rename pagination and purge locks and add comments to explain why they exist and how they work. ([\matrix-org#16112](matrix-org#16112))
- Attempt to fix the twisted trunk job. ([\matrix-org#16115](matrix-org#16115))
- Cache token introspection response from OIDC provider. ([\matrix-org#16117](matrix-org#16117))
- Add cache to `get_server_keys_json_for_remote`. ([\matrix-org#16123](matrix-org#16123))
- Add an admin endpoint to allow authorizing server to signal token revocations. ([\matrix-org#16125](matrix-org#16125))
- Add response time metrics for introspection requests for delegated auth. ([\matrix-org#16131](matrix-org#16131))
- MSC3861: allow impersonation by an admin user using `_oidc_admin_impersonate_user_id` query parameter. ([\matrix-org#16132](matrix-org#16132))
- Increase performance of read/write locks. ([\matrix-org#16149](matrix-org#16149))
- Improve presence tests. ([\matrix-org#16150](matrix-org#16150), [\matrix-org#16151](matrix-org#16151), [\matrix-org#16158](matrix-org#16158))
- Raised the poetry-core version cap to 1.7.0. ([\matrix-org#16152](matrix-org#16152))
- Fix assertion in user directory unit tests. ([\matrix-org#16157](matrix-org#16157))
- Reduce scope of locks when paginating to alleviate DB contention. ([\matrix-org#16159](matrix-org#16159))
- Reduce DB contention on worker locks. ([\matrix-org#16160](matrix-org#16160))
- Task scheduler: mark task as active if we are scheduling as soon as possible. ([\matrix-org#16165](matrix-org#16165))

* Bump click from 8.1.6 to 8.1.7. ([\matrix-org#16145](matrix-org#16145))
* Bump gitpython from 3.1.31 to 3.1.32. ([\matrix-org#16103](matrix-org#16103))
* Bump ijson from 3.2.1 to 3.2.3. ([\matrix-org#16143](matrix-org#16143))
* Bump isort from 5.11.5 to 5.12.0. ([\matrix-org#16108](matrix-org#16108))
* Bump log from 0.4.19 to 0.4.20. ([\matrix-org#16109](matrix-org#16109))
* Bump pygithub from 1.59.0 to 1.59.1. ([\matrix-org#16144](matrix-org#16144))
* Bump sentry-sdk from 1.28.1 to 1.29.2. ([\matrix-org#16142](matrix-org#16142))
* Bump serde from 1.0.183 to 1.0.184. ([\matrix-org#16139](matrix-org#16139))
* Bump txredisapi from 1.4.9 to 1.4.10. ([\matrix-org#16107](matrix-org#16107))
* Bump types-bleach from 6.0.0.3 to 6.0.0.4. ([\matrix-org#16106](matrix-org#16106))
* Bump types-pillow from 10.0.0.1 to 10.0.0.2. ([\matrix-org#16105](matrix-org#16105))
* Bump types-pyopenssl from 23.2.0.1 to 23.2.0.2. ([\matrix-org#16146](matrix-org#16146))

- Implements an admin API to lock an user without deactivating them. Based on [MSC3939](matrix-org/matrix-spec-proposals#3939). ([\matrix-org#15870](matrix-org#15870))
- Allow specifying `client_secret_path` as alternative to `client_secret` for OIDC providers. This avoids leaking the client secret in the homeserver config. Contributed by @Ma27. ([\matrix-org#16030](matrix-org#16030))
- Allow customising the IdP display name, icon, and brand for SAML and CAS providers (in addition to OIDC provider). ([\matrix-org#16094](matrix-org#16094))
- Add an `admins` query parameter to the [List Accounts](https://matrix-org.github.io/synapse/v1.91/admin_api/user_admin_api.html#list-accounts) [admin API](https://matrix-org.github.io/synapse/v1.91/usage/administration/admin_api/index.html), to include only admins or to exclude admins in user queries. ([\matrix-org#16114](matrix-org#16114))

- Fix long-standing bug where concurrent requests to change a user's push rules could cause a deadlock. Contributed by Nick @ Beeper (@Fizzadar). ([\matrix-org#16052](matrix-org#16052))
- Fix a long-standing bug in `/sync` where timeout=0 does not skip caching, resulting in slow calls in cases where there are no new changes. Contributed by @PlasmaIntec. ([\matrix-org#16080](matrix-org#16080))
- Fix performance of state resolutions for large, old rooms that did not have the full auth chain persisted. ([\matrix-org#16116](matrix-org#16116))
- Filter out user agent references to the sliding sync proxy and rust-sdk from the `user_daily_visits` table to ensure that Element X can be represented fully. ([\matrix-org#16124](matrix-org#16124))
- User constent and third-party ID changes capability cannot be enabled when using experimental [MSC3861](matrix-org/matrix-spec-proposals#3861) support. ([\matrix-org#16127](matrix-org#16127), [\matrix-org#16134](matrix-org#16134))
- Fix a rare race that could block new events from being sent for up to two minutes. Introduced in v1.90.0. ([\matrix-org#16133](matrix-org#16133), [\matrix-org#16169](matrix-org#16169))
- Fix performance degredation when there are a lot of in-flight replication requests. ([\matrix-org#16148](matrix-org#16148))
- Fix a bug introduced in 1.87 where synapse would send an excessive amount of federation requests to servers which have been offline for a long time. Contributed by Nico. ([\matrix-org#16156](matrix-org#16156), [\matrix-org#16164](matrix-org#16164))

- Structured logging docs: add a link to explain the ELK stack ([\matrix-org#16091](matrix-org#16091))

- Update dehydrated devices implementation. ([\matrix-org#16010](matrix-org#16010))
- Fix database performance of read/write worker locks. ([\matrix-org#16061](matrix-org#16061))
- Fix building the nix development environment on MacOS systems. ([\matrix-org#16063](matrix-org#16063))
- Override global statement timeout when creating indexes in Postgres. ([\matrix-org#16085](matrix-org#16085))
- Fix the type annotation on `run_db_interaction` in the Module API. ([\matrix-org#16089](matrix-org#16089))
- Clean-up the presence code. ([\matrix-org#16092](matrix-org#16092))
- Run `pyupgrade` for Python 3.8+. ([\matrix-org#16110](matrix-org#16110))
- Rename pagination and purge locks and add comments to explain why they exist and how they work. ([\matrix-org#16112](matrix-org#16112))
- Attempt to fix the twisted trunk job. ([\matrix-org#16115](matrix-org#16115))
- Cache token introspection response from OIDC provider. ([\matrix-org#16117](matrix-org#16117))
- Add cache to `get_server_keys_json_for_remote`. ([\matrix-org#16123](matrix-org#16123))
- Add an admin endpoint to allow authorizing server to signal token revocations. ([\matrix-org#16125](matrix-org#16125))
- Add response time metrics for introspection requests for delegated auth. ([\matrix-org#16131](matrix-org#16131))
- [MSC3861](matrix-org/matrix-spec-proposals#3861): allow impersonation by an admin user using `_oidc_admin_impersonate_user_id` query parameter. ([\matrix-org#16132](matrix-org#16132))
- Increase performance of read/write locks. ([\matrix-org#16149](matrix-org#16149))
- Improve presence tests. ([\matrix-org#16150](matrix-org#16150), [\matrix-org#16151](matrix-org#16151), [\matrix-org#16158](matrix-org#16158))
- Raised the poetry-core version cap to 1.7.0. ([\matrix-org#16152](matrix-org#16152))
- Fix assertion in user directory unit tests. ([\matrix-org#16157](matrix-org#16157))
- Reduce scope of locks when paginating to alleviate DB contention. ([\matrix-org#16159](matrix-org#16159))
- Reduce DB contention on worker locks. ([\matrix-org#16160](matrix-org#16160))
- Task scheduler: mark task as active if we are scheduling as soon as possible. ([\matrix-org#16165](matrix-org#16165))
- Implements a task scheduler for	resumable potentially long running tasks. ([\matrix-org#15891](matrix-org#15891))

* Bump click from 8.1.6 to 8.1.7. ([\matrix-org#16145](matrix-org#16145))
* Bump gitpython from 3.1.31 to 3.1.32. ([\matrix-org#16103](matrix-org#16103))
* Bump ijson from 3.2.1 to 3.2.3. ([\matrix-org#16143](matrix-org#16143))
* Bump isort from 5.11.5 to 5.12.0. ([\matrix-org#16108](matrix-org#16108))
* Bump log from 0.4.19 to 0.4.20. ([\matrix-org#16109](matrix-org#16109))
* Bump pygithub from 1.59.0 to 1.59.1. ([\matrix-org#16144](matrix-org#16144))
* Bump sentry-sdk from 1.28.1 to 1.29.2. ([\matrix-org#16142](matrix-org#16142))
* Bump serde from 1.0.183 to 1.0.184. ([\matrix-org#16139](matrix-org#16139))
* Bump txredisapi from 1.4.9 to 1.4.10. ([\matrix-org#16107](matrix-org#16107))
* Bump types-bleach from 6.0.0.3 to 6.0.0.4. ([\matrix-org#16106](matrix-org#16106))
* Bump types-pillow from 10.0.0.1 to 10.0.0.2. ([\matrix-org#16105](matrix-org#16105))
* Bump types-pyopenssl from 23.2.0.1 to 23.2.0.2. ([\matrix-org#16146](matrix-org#16146))

No significant changes since 1.90.0rc1.

- Scope transaction IDs to devices (implement [MSC3970](matrix-org/matrix-spec-proposals#3970)). ([\matrix-org#15629](matrix-org#15629))
- Remove old rows from the `cache_invalidation_stream_by_instance` table automatically (this table is unused in SQLite). ([\matrix-org#15868](matrix-org#15868))

- Fix a long-standing bug where purging history and paginating simultaneously could lead to database corruption when using workers. ([\matrix-org#15791](matrix-org#15791))
- Fix a long-standing bug where profile endpoint returned a 404 when the user's display name was empty. ([\matrix-org#16012](matrix-org#16012))
- Fix a long-standing bug where the `synapse_port_db` failed to configure sequences for application services and partial stated rooms. ([\matrix-org#16043](matrix-org#16043))
- Fix long-standing bug with deletion in dehydrated devices v2. ([\matrix-org#16046](matrix-org#16046))

- Add `org.opencontainers.image.version` labels to Docker containers [published by Matrix.org](https://hub.docker.com/r/matrixdotorg/synapse). Contributed by Mo Balaa. ([\matrix-org#15972](matrix-org#15972), [\matrix-org#16009](matrix-org#16009))

- Add a internal documentation page describing the ["streams" used within Synapse](https://matrix-org.github.io/synapse/v1.90/development/synapse_architecture/streams.html). ([\matrix-org#16015](matrix-org#16015))
- Clarify comment on the keys/upload over replication enpoint. ([\matrix-org#16016](matrix-org#16016))
- Do not expose Admin API in caddy reverse proxy example. Contributed by @NilsIrl. ([\matrix-org#16027](matrix-org#16027))

- Remove support for legacy application service paths. ([\matrix-org#15964](matrix-org#15964))
- Move support for application service query parameter authorization behind a configuration option. ([\matrix-org#16017](matrix-org#16017))

- Update SQL queries to inline boolean parameters as supported in SQLite 3.27. ([\matrix-org#15525](matrix-org#15525))
- Allow for the configuration of the backoff algorithm for federation destinations. ([\matrix-org#15754](matrix-org#15754))
- Allow modules to check whether the current worker is configured to run background tasks. ([\matrix-org#15991](matrix-org#15991))
- Update support for [MSC3958](matrix-org/matrix-spec-proposals#3958) to match the latest revision of the MSC. ([\matrix-org#15992](matrix-org#15992))
- Allow modules to schedule delayed background calls. ([\matrix-org#15993](matrix-org#15993))
- Properly overwrite the `redacts` content-property for forwards-compatibility with room versions 1 through 10. ([\matrix-org#16013](matrix-org#16013))
- Fix building the nix development environment on MacOS systems. ([\matrix-org#16019](matrix-org#16019))
- Remove leading and trailing spaces when setting a display name. ([\matrix-org#16031](matrix-org#16031))
- Combine duplicated code. ([\matrix-org#16023](matrix-org#16023))
- Collect additional metrics from `ResponseCache` for eviction. ([\matrix-org#16028](matrix-org#16028))
- Fix endpoint improperly declaring support for MSC3814. ([\matrix-org#16068](matrix-org#16068))
- Drop backwards compat hack for event serialization. ([\matrix-org#16069](matrix-org#16069))

* Update PyYAML to 6.0.1. ([\matrix-org#16011](matrix-org#16011))
* Bump cryptography from 41.0.2 to 41.0.3. ([\matrix-org#16048](matrix-org#16048))
* Bump furo from 2023.5.20 to 2023.7.26. ([\matrix-org#16077](matrix-org#16077))
* Bump immutabledict from 2.2.4 to 3.0.0. ([\matrix-org#16034](matrix-org#16034))
* Update certifi to 2023.7.22 and pygments to 2.15.1. ([\matrix-org#16044](matrix-org#16044))
* Bump jsonschema from 4.18.3 to 4.19.0. ([\matrix-org#16081](matrix-org#16081))
* Bump phonenumbers from 8.13.14 to 8.13.18. ([\matrix-org#16076](matrix-org#16076))
* Bump regex from 1.9.1 to 1.9.3. ([\matrix-org#16073](matrix-org#16073))
* Bump serde from 1.0.171 to 1.0.175. ([\matrix-org#15982](matrix-org#15982))
* Bump serde from 1.0.175 to 1.0.179. ([\matrix-org#16033](matrix-org#16033))
* Bump serde from 1.0.179 to 1.0.183. ([\matrix-org#16074](matrix-org#16074))
* Bump serde_json from 1.0.103 to 1.0.104. ([\matrix-org#16032](matrix-org#16032))
* Bump service-identity from 21.1.0 to 23.1.0. ([\matrix-org#16038](matrix-org#16038))
* Bump types-commonmark from 0.9.2.3 to 0.9.2.4. ([\matrix-org#16037](matrix-org#16037))
* Bump types-jsonschema from 4.17.0.8 to 4.17.0.10. ([\matrix-org#16036](matrix-org#16036))
* Bump types-netaddr from 0.8.0.8 to 0.8.0.9. ([\matrix-org#16035](matrix-org#16035))
* Bump types-opentracing from 2.4.10.5 to 2.4.10.6. ([\matrix-org#16078](matrix-org#16078))
* Bump types-setuptools from 68.0.0.0 to 68.0.0.3. ([\matrix-org#16079](matrix-org#16079))