Update all dependencies

[missingcharacter]

This PR contains the following updates:

Package	Update	Change
ghcr.io/element-hq/synapse	minor	v1.155.0 → v1.156.0
traefik	patch	v3.7.6 → v3.7.7

---

Release Notes

element-hq/synapse (ghcr.io/element-hq/synapse)

v1.156.0

Compare Source

Synapse 1.156.0 (2026-07-07)

No significant changes since 1.156.0rc1.

Synapse 1.156.0rc1 (2026-06-30)

Features

• Expose MSC4354 Sticky Events over MSC4186 (Simplified) Sliding Sync. (#​19591)
• Stabilize support for sending ephemeral events to application services, as per MSC2409. Contributed by @​jason-famedly @​ Famedly. (#​19758)
• Include allowed_room_ids in the /summary client-server API response for rooms with restricted join rules, as required by Matrix 1.15.
  Contributed by @​FrenchGithubUser @​Famedly. (#​19762)
• MSC4140: Cancellable delayed events: Allow authentication on delayed event management endpoints (such as /restart) to bypass ratelimits for unauthenticated requests based on the client IP address. (#​19794)
• Add new metric synapse_non_deactivated_user_count which tracks the number of non-deactivated users in the database, split by app_service. (#​19848)
• The GET /_matrix/client/unstable/org.matrix.msc1763/retention/configuration endpoint is now provided when retention
  is enabled and experimental_features.msc1763_enabled is enabled, based on
  MSC1763. (#​19853)
• Add experimental support for MSC4491: Invite reasons in room creation. (#​19874)

Bugfixes

• Provide remote servers a way to find out about an event created during the remote join handshake. Contributed by @​FrenchGithubUser and @​jason-famedly @​ Famedly. (#​19390, #​19855, #​19856)
• Advertise org.matrix.msc4143 in unstable_features when msc4143_enabled is set. (#​19646)
• Fix a long-standing bug where the badge notification count for a room could become permanently inflated if a read receipt was sent before the room's notification counts were first summarised. (#​19785)
• Fix startup listener logging to report the actual bound TCP port, so listeners configured with port 0 no longer log Synapse now listening on TCP port 0. (#​19810)
• Fix notification counts being inflated after a /purge_history when notifications had already been rotated into the summary table. (#​19834)
• Fix /sync caching transient errors for the sync_response_cache_duration. (#​19845)
• Fix local events being deleted by the Purge History admin API despite delete_local_events being set to false, in room versions other than 1 and 2. (#​19850)
• Fix a bug where a user's dehydrated device (MSC3814) was deleted when their device list was synced from Matrix Authentication Service (e.g. upon logging out their last device), breaking offline key delivery. (#​19892)

Improved Documentation

• Update auto_join_rooms config documentation to cover requirements for auto-joining invite-only rooms. (#​19660)
• Add stable endpoint for MSC3266: Room summary API into worker docs. Contributed by @​olmari. (#​19788)
• Tweak wording of Rust crate dependency update policy. (#​19829)
• Fixed the Admin API user endpoint documentation examples to use JSON booleans (true/false) instead of numeric (0/1) values. (#​19847)

Internal Changes

• Make simple_select_one_onecol_txn() more helpful by naming the table of the select - as all other query wrapper functions already did. (#​19869)
• Refactor get_user_which_could_invite logic to reuse get_users_which_can_issue_invite. Contributed by Noah Markert. (#​19732)
• Fix a flaky test (twisted.protocols.amp.TooLong error under trial -jN) caused by an oversized debug log line. (#​19832)
• Upload Complement test logs as CI artifacts instead of printing the raw output to the build log. (#​19840)
• Fix release script considering any workflow completion as successful. (#​19843)
• Force keyword-args for clear default_config(server_name="test") usage in test utilities. (#​19849)
• Add .ruff_cache/ directory to .gitignore. (#​19854)
• Bump poetry in CI from 2.2.1 to 2.4.1. (#​19866, #​19877)
• Split out deferred and tokio_runtime to their own Rust modules. (#​19868)
• Prevent the cargo-test and cargo-bench CI jobs from being skipped, even on PRs that have Rust changes. (#​19883)

containous/traefik (traefik)

v3.7.7

Compare Source

All Commits

Bug fixes:

• [middleware, k8s/ingress-nginx] Add app-root middleware with nginx variable interpolation (#​13398 @​dfeinblatt)
• [rules] Fix consistency between HostSNI() and Host() (#​13460 @​juliens)
• [k8s, k8s/gatewayapi] Fix ExtensionRef filters on backendRefs to resolve against the HTTPRoute namespace (#​13462 @​gndz07)
• [middleware] Fix handle empty unknown-length bodies in mirroring (#​13399 @​amazon7737)
• [k8s/crd] Fix cross-provider ref check for TCP ServersTransport in Kubernetes CRD provider (#​13458 @​gndz07)
• [middleware] Sanitize replaced path in ReplacePathRegex middleware (#​13466 @​kevinpollet)
• [acme] Bump software.sslmate.com/src/go-pkcs12 to v0.7.3 (#​13477 @​rtribotte)
• [otel] Bump go.opentelemetry.io/otel to v1.44.0 (#​13478 @​rtribotte)
• [k8s] Fix panic when endpointslice port value or name is nil (#​13481 @​kevinpollet)

Documentation:

• Fix version in migration guide (#​13434 @​kevinpollet)
• Fix changelog v2.11.51 (#​13430 @​mmatur)
• Add v3.7 to supported version docs (#​13118 @​jnoordsij)
• Fix some function names in comments (#​13443 @​blackflytech)
• Add @​nandorKollar as a current maintainer (#​13451 @​emilevauge)
• Add @​amazon7737 as a current maintainer (#​13450 @​emilevauge)
• [middleware] Clarify buffering middleware defaults (#​13401 @​amazon7737)
• Fix grammar in TLS, TCP service, and routing reference docs (#​13461 @​almightymoon)
• Fix X-Forwarded-Prefix documentation for dashboard redirection (#​13472 @​kevinpollet)

v3.7.7

Compare Source

All Commits

Bug fixes:

• [middleware, k8s/ingress-nginx] Add app-root middleware with nginx variable interpolation (#​13398 @​dfeinblatt)
• [rules] Fix consistency between HostSNI() and Host() (#​13460 @​juliens)
• [k8s, k8s/gatewayapi] Fix ExtensionRef filters on backendRefs to resolve against the HTTPRoute namespace (#​13462 @​gndz07)
• [middleware] Fix handle empty unknown-length bodies in mirroring (#​13399 @​amazon7737)
• [k8s/crd] Fix cross-provider ref check for TCP ServersTransport in Kubernetes CRD provider (#​13458 @​gndz07)
• [middleware] Sanitize replaced path in ReplacePathRegex middleware (#​13466 @​kevinpollet)
• [acme] Bump software.sslmate.com/src/go-pkcs12 to v0.7.3 (#​13477 @​rtribotte)
• [otel] Bump go.opentelemetry.io/otel to v1.44.0 (#​13478 @​rtribotte)
• [k8s] Fix panic when endpointslice port value or name is nil (#​13481 @​kevinpollet)

Documentation:

• Fix version in migration guide (#​13434 @​kevinpollet)
• Fix changelog v2.11.51 (#​13430 @​mmatur)
• Add v3.7 to supported version docs (#​13118 @​jnoordsij)
• Fix some function names in comments (#​13443 @​blackflytech)
• Add @​nandorKollar as a current maintainer (#​13451 @​emilevauge)
• Add @​amazon7737 as a current maintainer (#​13450 @​emilevauge)
• [middleware] Clarify buffering middleware defaults (#​13401 @​amazon7737)
• Fix grammar in TLS, TCP service, and routing reference docs (#​13461 @​almightymoon)
• Fix X-Forwarded-Prefix documentation for dashboard redirection (#​13472 @​kevinpollet)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM (* 0-3 * * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.