Releases: element-hq/synapse
v1.118.0rc1
Synapse 1.118.0rc1 (2024-10-22)
Python 3.8 support will be dropped in the next release
Python 3.8 is now end-of-life. As per our Deprecation Policy for Platform Dependencies, Synapse will be dropping support for Python 3.8 in the next release; Synapse 1.119.0.
Synapse 1.118.x will be the final release to support Python 3.8. If you are running Synapse with Python 3.8, please upgrade before the 1.119.0 release, due in less than one month.
Python 3.13 and PostgreSQL 17 support
On the other end of the spectrum, Synapse 1.118.0 is the first release to support Python 3.13! PostgreSQL 17 is also supported as of this release.
Features
- Added the
display_name_claim
option to the JWT configuration. This option allows specifying the claim key that contains the user's display name in the JWT payload. (#17708) - Implement MSC4210: Remove legacy mentions. Contributed by @tulir @ Beeper. (#17783)
Bugfixes
- Fix saving of PNG thumbnails, when the original image is in the CMYK color space. (#17736)
- Fix bug with sliding sync where the server would not return state that was added to the
required_state
config. (#17785, #17805) - Fix a bug in MSC4186 Sliding Sync that would cause rooms to stay forgotten and hidden even after rejoining. (#17835)
Improved Documentation
- Clarify when the
user_may_invite
anduser_may_send_3pid_invite
module callbacks are called. (#17627) - Correct documentation to refer to the
--config-path
argument instead of--config-file
. (#17802) - Fix typo in
target_cache_memory_usage
docs. (#17825)
Internal Changes
- Slight optimization when fetching state/events for Sliding Sync. (#17718)
- Add Python 3.13 and Postgres 17 to the test matrix. (#17752)
- Test github token before running release script steps. (#17803)
- Build debian packages for new Ubuntu versions, and stop building for no longer supported versions. (#17824)
- Enable the
.org.matrix.msc4028.encrypted_event
push rule by default in accordance with MSC4028. Note that the corresponding experimental feature must still be switched on for this push rule to have any effect. (#17826) - Fix some typing issues uncovered by upgrading mypy to 1.11.x. (#17842)
Updates to locked dependencies
- Bump mypy from 1.10.1 to 1.11.2. (#17842)
- Bump mypy-zope from 1.0.5 to 1.0.7. (#17827)
- Bump phonenumbers from 8.13.46 to 8.13.47. (#17797)
- Bump psycopg2 from 2.9.9 to 2.9.10. (#17843)
- Bump ruff from 0.6.8 to 0.6.9. (#17794)
- Bump sentry-sdk from 2.14.0 to 2.15.0. (#17795)
- Bump sentry-sdk from 2.15.0 to 2.16.0. (#17829)
- Bump sentry-sdk from 2.16.0 to 2.17.0. (#17844)
- Bump sigstore/cosign-installer from 3.6.0 to 3.7.0. (#17798)
- Bump tomli from 2.0.1 to 2.0.2. (#17796)
- Bump types-requests from 2.32.0.20240914 to 2.32.0.20241016. (#17841)
- Bump types-setuptools from 75.1.0.20240917 to 75.1.0.20241014. (#17828)
v1.117.0
Synapse 1.117.0 (2024-10-15)
No significant changes since 1.117.0rc1.
Synapse 1.117.0rc1 (2024-10-08)
Features
- Add config option
redis.password_path
. (#17717)
Bugfixes
- Fix a rare bug introduced in v1.29.0 where invalidating a user's access token from a worker could raise an error. (#17779)
- In the response to
GET /_matrix/client/versions
, set theunstable_features
flag for MSC4140 tofalse
when server configuration disables support for delayed events. (#17780) - Improve input validation and room membership checks in admin redaction API. (#17792)
Improved Documentation
- Clarify the docstring of
test_forget_when_not_left
. (#17628) - Add documentation note about PYTHONMALLOC for accurate jemalloc memory tracking. Contributed by @hensg. (#17709)
- Remove spurious "TODO UPDATE ALL THIS" note in the Debian installation docs. (#17749)
- Explain how load balancing works for
federation_sender_instances
. (#17776)
Internal Changes
- Minor performance increase for large accounts using sliding sync. (#17751)
- Increase performance of the notifier when there are many syncing users. (#17765, #17766)
- Fix performance of streams that don't change often. (#17767)
- Improve performance of sliding sync connections that do not ask for any rooms. (#17768)
- Reduce overhead of sliding sync E2EE loops. (#17771)
- Sliding sync minor performance speed up using new table. (#17787)
- Sliding sync minor performance improvement by omitting unchanged data from incremental responses. (#17788)
- Speed up sliding sync when there are many active subscriptions. (#17789)
- Add missing license headers on new source files. (#17799)
Updates to locked dependencies
v1.117.0rc1
Synapse 1.117.0rc1 (2024-10-08)
Features
- Add config option
redis.password_path
. (#17717)
Bugfixes
- Fix a rare bug introduced in v1.29.0 where invalidating a user's access token from a worker could raise an error. (#17779)
- In the response to
GET /_matrix/client/versions
, set theunstable_features
flag for MSC4140 tofalse
when server configuration disables support for delayed events. (#17780) - Improve input validation and room membership checks in admin redaction API. (#17792)
Improved Documentation
- Clarify the docstring of
test_forget_when_not_left
. (#17628) - Add documentation note about PYTHONMALLOC for accurate jemalloc memory tracking. Contributed by @hensg. (#17709)
- Remove spurious "TODO UPDATE ALL THIS" note in the Debian installation docs. (#17749)
- Explain how load balancing works for
federation_sender_instances
. (#17776)
Internal Changes
- Minor performance increase for large accounts using sliding sync. (#17751)
- Increase performance of the notifier when there are many syncing users. (#17765, #17766)
- Fix performance of streams that don't change often. (#17767)
- Improve performance of sliding sync connections that do not ask for any rooms. (#17768)
- Reduce overhead of sliding sync E2EE loops. (#17771)
- Sliding sync minor performance speed up using new table. (#17787)
- Sliding sync minor performance improvement by omitting unchanged data from incremental responses. (#17788)
- Speed up sliding sync when there are many active subscriptions. (#17789)
- Add missing license headers on new source files. (#17799)
Updates to locked dependencies
v1.116.0
Synapse 1.116.0 (2024-10-01)
No significant changes since 1.116.0rc2.
Synapse 1.116.0rc2 (2024-09-26)
Features
Synapse 1.116.0rc1 (2024-09-25)
Features
- Add initial implementation of delayed events as proposed by MSC4140. (#17326)
- Add an asynchronous Admin API endpoint to redact all a user's events,
and an endpoint to check on the status of that redaction task. (#17506) - Add support for the
tags
andnot_tags
filters for MSC4186 Sliding Sync. (#17662) - Guests can use the new media endpoints to download media, as described by MSC4189. (#17675)
- Add config option
turn_shared_secret_path
. (#17690) - Return room tags in MSC4186 Sliding Sync account data extension. (#17707)
Bugfixes
- Make sure we get up-to-date state information when using the new MSC4186 Sliding Sync tables to derive room membership. (#17692)
- Fix bug where room account data would not correctly be sent down MSC4186 Sliding Sync for old rooms. (#17695)
- Fix a bug in MSC4186 Sliding Sync which could prevent /sync from working for certain user accounts. (#17727, #17733)
- Ignore invites from ignored users in Sliding Sync. (#17729)
- Fix bug in MSC4186 Sliding Sync where the server would incorrectly return a negative bump stamp, which caused Element X apps to stop syncing. (#17748)
Internal Changes
- Import pydantic objects from the
_pydantic_compat
module.
This allowscheck_pydantic_models.py
to mock those pydantic objects
only in the synapse module, and not interfere with pydantic objects in
external dependencies. (#17667) - Use MSC4186 Sliding Sync tables as a bulk shortcut for getting the max
event_stream_ordering
of rooms. (#17693) - Speed up MSC4186 sliding sync requests a bit where there are many room changes. (#17696)
- Refactor MSC4186 sliding sync filter unit tests so the sliding sync API has better test coverage. (#17703)
- Fetch
bump_stamp
s more efficiently in MSC4186 Sliding Sync. (#17723) - Shortcut for checking if certain background updates have completed (utilized in MSC4186 Sliding Sync). (#17724)
- More efficiently fetch rooms for MSC4186 Sliding Sync. (#17725)
- Fix
_bulk_get_max_event_pos
being inefficient. (#17728) - Add cache to
get_tags_for_room(...)
. (#17730) - Small performance improvement in speeding up MSC4186 Sliding Sync. (#17731)
- Minor speed up of initial MSC4186 sliding sync requests. (#17734)
- Remove usage of the deprecated
cgi
module, deprecated in Python 3.11 and removed in Python 3.13. (#17741) - Fix typing of a variable that is not
Unknown
anymore after updatingtreq
. (#17744)
Updates to locked dependencies
- Bump anyhow from 1.0.86 to 1.0.89. (#17685, #17716)
- Bump bytes from 1.7.1 to 1.7.2. (#17743)
- Bump cryptography from 43.0.0 to 43.0.1. (#17689)
- Bump idna from 3.8 to 3.10. (#17758)
- Bump msgpack from 1.0.8 to 1.1.0. (#17759)
- Bump phonenumbers from 8.13.44 to 8.13.45. (#17762)
- Bump prometheus-client from 0.20.0 to 0.21.0. (#17746)
- Bump pyasn1 from 0.6.0 to 0.6.1. (#17714)
- Bump pyasn1-modules from 0.4.0 to 0.4.1. (#17747)
- Bump pydantic from 2.8.2 to 2.9.2. (#17756)
- Bump python-multipart from 0.0.9 to 0.0.10. (#17745)
- Bump ruff from 0.6.4 to 0.6.7. (#17715, #17760)
- Bump sentry-sdk from 2.13.0 to 2.14.0. (#17712)
- Bump serde from 1.0.209 to 1.0.210. (#17686)
- Bump serde_json from 1.0.127 to 1.0.128. (#17687)
- Bump treq from 23.11.0 to 24.9.1. (#17744)
- Bump types-pyyaml from 6.0.12.20240808 to 6.0.12.20240917. (#17755)
- Bump types-requests from 2.32.0.20240712 to 2.32.0.20240914. (#17713)
- Bump types-setuptools from 74.1.0.20240907 to 75.1.0.20240917. (#17757)
v1.116.0rc2
v1.116.0rc1
Synapse 1.116.0rc1 (2024-09-25)
Features
- Add initial implementation of delayed events as proposed by MSC4140. (#17326)
- Add an asynchronous Admin API endpoint to redact all a user's events,
and an endpoint to check on the status of that redaction task. (#17506) - Add support for the
tags
andnot_tags
filters for MSC4186 Sliding Sync. (#17662) - Guests can use the new media endpoints to download media, as described by MSC4189. (#17675)
- Add config option
turn_shared_secret_path
. (#17690) - Return room tags in MSC4186 Sliding Sync account data extension. (#17707)
Bugfixes
- Make sure we get up-to-date state information when using the new MSC4186 Sliding Sync tables to derive room membership. (#17692)
- Fix bug where room account data would not correctly be sent down MSC4186 Sliding Sync for old rooms. (#17695)
- Fix a bug in MSC4186 Sliding Sync which could prevent /sync from working for certain user accounts. (#17727, #17733)
- Ignore invites from ignored users in Sliding Sync. (#17729)
- Fix bug in MSC4186 Sliding Sync where the server would incorrectly return a negative bump stamp, which caused Element X apps to stop syncing. (#17748)
Internal Changes
- Import pydantic objects from the
_pydantic_compat
module.
This allowscheck_pydantic_models.py
to mock those pydantic objects
only in the synapse module, and not interfere with pydantic objects in
external dependencies. (#17667) - Use MSC4186 Sliding Sync tables as a bulk shortcut for getting the max
event_stream_ordering
of rooms. (#17693) - Speed up MSC4186 sliding sync requests a bit where there are many room changes. (#17696)
- Refactor MSC4186 sliding sync filter unit tests so the sliding sync API has better test coverage. (#17703)
- Fetch
bump_stamp
s more efficiently in MSC4186 Sliding Sync. (#17723) - Shortcut for checking if certain background updates have completed (utilized in MSC4186 Sliding Sync). (#17724)
- More efficiently fetch rooms for MSC4186 Sliding Sync. (#17725)
- Fix
_bulk_get_max_event_pos
being inefficient. (#17728) - Add cache to
get_tags_for_room(...)
. (#17730) - Small performance improvement in speeding up MSC4186 Sliding Sync. (#17731)
- Minor speed up of initial MSC4186 sliding sync requests. (#17734)
- Remove usage of the deprecated
cgi
module, deprecated in Python 3.11 and removed in Python 3.13. (#17741) - Fix typing of a variable that is not
Unknown
anymore after updatingtreq
. (#17744)
Updates to locked dependencies
- Bump anyhow from 1.0.86 to 1.0.89. (#17685, #17716)
- Bump bytes from 1.7.1 to 1.7.2. (#17743)
- Bump cryptography from 43.0.0 to 43.0.1. (#17689)
- Bump idna from 3.8 to 3.10. (#17758)
- Bump msgpack from 1.0.8 to 1.1.0. (#17759)
- Bump phonenumbers from 8.13.44 to 8.13.45. (#17762)
- Bump prometheus-client from 0.20.0 to 0.21.0. (#17746)
- Bump pyasn1 from 0.6.0 to 0.6.1. (#17714)
- Bump pyasn1-modules from 0.4.0 to 0.4.1. (#17747)
- Bump pydantic from 2.8.2 to 2.9.2. (#17756)
- Bump python-multipart from 0.0.9 to 0.0.10. (#17745)
- Bump ruff from 0.6.4 to 0.6.7. (#17715, #17760)
- Bump sentry-sdk from 2.13.0 to 2.14.0. (#17712)
- Bump serde from 1.0.209 to 1.0.210. (#17686)
- Bump serde_json from 1.0.127 to 1.0.128. (#17687)
- Bump treq from 23.11.0 to 24.9.1. (#17744)
- Bump types-pyyaml from 6.0.12.20240808 to 6.0.12.20240917. (#17755)
- Bump types-requests from 2.32.0.20240712 to 2.32.0.20240914. (#17713)
- Bump types-setuptools from 74.1.0.20240907 to 75.1.0.20240917. (#17757)
v1.115.0
Synapse 1.115.0 (2024-09-17)
No significant changes since 1.115.0rc2.
Synapse 1.115.0rc2 (2024-09-12)
Internal Changes
- Pre-populate room data used in experimental MSC3575 Sliding Sync
/sync
endpoint for quick filtering/sorting. (#17652) - Speed up sliding sync by reducing amount of data pulled out of the database for large rooms. (#17683)
Synapse 1.115.0rc1 (2024-09-10)
Features
- Improve cross-signing upload when using MSC3861 to use a custom UIA flow stage, with web fallback support. (#17509)
Bugfixes
- Return
400 M_BAD_JSON
upon attempting to complete various room actions with a non-local user ID and unknown room ID, rather than an internal server error. (#17607) - Fix authenticated media responses using a wrong limit when following redirects over federation. (#17626)
- Fix bug where we returned the wrong
bump_stamp
for invites in sliding sync response, causing incorrect ordering of invites in the room list. (#17674)
Improved Documentation
- Clarify that the admin api resource is only loaded on the main process and not workers. (#17590)
- Fixed typo in
saml2_config
config example. (#17594)
Deprecations and Removals
- Stabilise MSC4156 by removing the
msc4156_enabled
config setting and defaulting it totrue
. (#17650)
Internal Changes
- Update MSC3861 implementation: load the issuer and account management URLs from OIDC discovery. (#17407)
- Pre-populate room data used in experimental MSC3575 Sliding Sync
/sync
endpoint for quick filtering/sorting. (#17512, #17632, #17633, #17634, #17635, #17636, #17641, #17654, #17673) - Store sliding sync per-connection state in the database. (#17599, #17631)
- Make the sliding sync
PerConnectionState
class immutable. (#17600) - Replace
isort
andblack
withruff
. (#17620, #17643) - Sliding Sync: Split up
get_room_membership_for_user_at_to_token
. (#17629) - Use new database tables for sliding sync. (#17630, #17649)
- Prevent duplicate tags being added to Sliding Sync traces. (#17655)
- Get
bump_stamp
from new sliding sync tables which should be faster. (#17658) - Speed up incremental Sliding Sync requests by avoiding extra work. (#17665)
- Small performance improvement in speeding up sliding sync. (#17666, #17670, #17672)
- Speed up sliding sync by reducing number of database calls. (#17684)
- Speed up sync by pulling out fewer events from the database. (#17688)
Updates to locked dependencies
- Bump authlib from 1.3.1 to 1.3.2. (#17679)
- Bump idna from 3.7 to 3.8. (#17682)
- Bump ruff from 0.6.2 to 0.6.4. (#17680)
- Bump towncrier from 24.7.1 to 24.8.0. (#17645)
- Bump twisted from 24.7.0rc1 to 24.7.0. (#17647)
- Bump types-pillow from 10.2.0.20240520 to 10.2.0.20240822. (#17644)
- Bump types-psycopg2 from 2.9.21.20240417 to 2.9.21.20240819. (#17646)
- Bump types-setuptools from 71.1.0.20240818 to 74.1.0.20240907. (#17681)
v1.115.0rc2
v1.115.0rc1
Synapse 1.115.0rc1 (2024-09-10)
Features
- Improve cross-signing upload when using MSC3861 to use a custom UIA flow stage, with web fallback support. (#17509)
Bugfixes
- Return
400 M_BAD_JSON
upon attempting to complete various room actions with a non-local user ID and unknown room ID, rather than an internal server error. (#17607) - Fix authenticated media responses using a wrong limit when following redirects over federation. (#17626)
- Fix bug where we returned the wrong
bump_stamp
for invites in sliding sync response, causing incorrect ordering of invites in the room list. (#17674)
Improved Documentation
- Clarify that the admin api resource is only loaded on the main process and not workers. (#17590)
- Fixed typo in
saml2_config
config example. (#17594)
Deprecations and Removals
- Stabilise MSC4156 by removing the
msc4156_enabled
config setting and defaulting it totrue
. (#17650)
Internal Changes
- Update MSC3861 implementation: load the issuer and account management URLs from OIDC discovery. (#17407)
- Pre-populate room data used in experimental MSC3575 Sliding Sync
/sync
endpoint for quick filtering/sorting. (#17512, #17632, #17633, #17634, #17635, #17636, #17641, #17654, #17673) - Store sliding sync per-connection state in the database. (#17599, #17631)
- Make the sliding sync
PerConnectionState
class immutable. (#17600) - Replace
isort
andblack
withruff
. (#17620, #17643) - Sliding Sync: Split up
get_room_membership_for_user_at_to_token
. (#17629) - Use new database tables for sliding sync. (#17630, #17649)
- Prevent duplicate tags being added to Sliding Sync traces. (#17655)
- Get
bump_stamp
from new sliding sync tables which should be faster. (#17658) - Speed up incremental Sliding Sync requests by avoiding extra work. (#17665)
- Small performance improvement in speeding up sliding sync. (#17666, #17670, #17672)
- Speed up sliding sync by reducing number of database calls. (#17684)
- Speed up sync by pulling out fewer events from the database. (#17688)
Updates to locked dependencies
- Bump authlib from 1.3.1 to 1.3.2. (#17679)
- Bump idna from 3.7 to 3.8. (#17682)
- Bump ruff from 0.6.2 to 0.6.4. (#17680)
- Bump towncrier from 24.7.1 to 24.8.0. (#17645)
- Bump twisted from 24.7.0rc1 to 24.7.0. (#17647)
- Bump types-pillow from 10.2.0.20240520 to 10.2.0.20240822. (#17644)
- Bump types-psycopg2 from 2.9.21.20240417 to 2.9.21.20240819. (#17646)
- Bump types-setuptools from 71.1.0.20240818 to 74.1.0.20240907. (#17681)
v1.114.0
Synapse 1.114.0 (2024-09-02)
This release enables support for MSC4186 — Simplified Sliding Sync. This allows using the upcoming releases of the Element X mobile apps without having to run a Sliding Sync Proxy.
Features
Synapse 1.114.0rc3 (2024-08-30)
Bugfixes
- Fix regression in v1.114.0rc2 that caused workers to fail to start. (#17626)
Synapse 1.114.0rc2 (2024-08-30)
Features
- Improve cross-signing upload when using MSC3861 to use a custom UIA flow stage, with web fallback support. (#17509)
- Make
hash_password
script accept password input from stdin. (#17608)
Bugfixes
- Fix hierarchy returning 403 when room is accessible through federation. Contributed by Krishan (@kfiven). (#17194)
- Fix content-length on federation
/thumbnail
responses. (#17532) - Fix authenticated media responses using a wrong limit when following redirects over federation. (#17543)
Internal Changes
- MSC3861: load the issuer and account management URLs from OIDC discovery. (#17407)
- Refactor sliding sync class into multiple files. (#17595)
- Store sliding sync per-connection state in the database. (#17599)
- Make the sliding sync
PerConnectionState
class immutable. (#17600) - Add support to
@tag_args
for standalone functions. (#17604) - Speed up incremental syncs in sliding sync by adding some more caching. (#17606)
- Always return the user's own read receipts in sliding sync. (#17617)
- Replace
isort
andblack
withruff
. (#17620) - Refactor sliding sync code to move room list logic out into a separate class. (#17622)
Updates to locked dependencies
- Bump attrs from 23.2.0 to 24.2.0. (#17609)
- Bump cryptography from 42.0.8 to 43.0.0. (#17584)
- Bump phonenumbers from 8.13.43 to 8.13.44. (#17610)
- Bump pygithub from 2.3.0 to 2.4.0. (#17612)
- Bump pyyaml from 6.0.1 to 6.0.2. (#17611)
- Bump sentry-sdk from 2.12.0 to 2.13.0. (#17585)
- Bump serde from 1.0.206 to 1.0.208. (#17581)
- Bump serde from 1.0.208 to 1.0.209. (#17613)
- Bump serde_json from 1.0.124 to 1.0.125. (#17582)
- Bump serde_json from 1.0.125 to 1.0.127. (#17614)
- Bump types-jsonschema from 4.23.0.20240712 to 4.23.0.20240813. (#17583)
- Bump types-setuptools from 71.1.0.20240726 to 71.1.0.20240818. (#17586)
Synapse 1.114.0rc1 (2024-08-20)
Features
- Add a flag to
/versions
,org.matrix.simplified_msc3575
, to indicate whether experimental sliding sync support has been enabled. (#17571) - Handle changes in
timeline_limit
in experimental sliding sync. (#17579) - Correctly track read receipts that should be sent down in experimental sliding sync. (#17575, #17589, #17592)
Bugfixes
- Start handlers for new media endpoints when media resource configured. (#17483)
- Fix timeline ordering (using
stream_ordering
instead of topological ordering) in experimental MSC3575 Sliding Sync/sync
endpoint. (#17510) - Fix experimental sliding sync implementation to remember any updates in rooms that were not sent down immediately. (#17535)
- Better exclude partially stated rooms if we must await full state in experimental MSC3575 Sliding Sync
/sync
endpoint. (#17538) - Handle lower-case http headers in
_Mulitpart_Parser_Protocol
. (#17545) - Fix fetching federation signing keys from servers that omit
old_verify_keys
. Contributed by @tulir @ Beeper. (#17568) - Fix bug where we would respond with an error when a remote server asked for media that had a length of 0, using the new multipart federation media endpoint. (#17570)
Improved Documentation
- Clarify default behaviour of the
auto_accept_invites.worker_to_run_on
option. (#17515) - Improve docstrings for profile methods. (#17559)
Internal Changes
- Add more tracing to experimental MSC3575 Sliding Sync
/sync
endpoint. (#17514) - Fixup comment in sliding sync implementation. (#17531)
- Replace override of deprecated method
HTTPAdapter.get_connection
withget_connection_with_tls_context
. (#17536) - Fix performance of device lists in
/key/changes
and sliding sync. (#17537, #17548) - Bump setuptools from 67.6.0 to 72.1.0. (#17542)
- Add a utility function for generating random event IDs. (#17557)
- Speed up responding to media requests. (#17558, #17561, #17564, #17566, #17567, #17569)
- Test github token before running release script steps. (#17562)
- Reduce log spam of multipart files. (#17563)
- Refactor per-connection state in experimental sliding sync handler. (#17574)
- Add histogram metrics for sliding sync processing time. (#17593)
Updates to locked dependencies
- Bump bytes from 1.6.1 to 1.7.1. (#17526)
- Bump lxml from 5.2.2 to 5.3.0. (#17550)
- Bump phonenumbers from 8.13.42 to 8.13.43. (#17551)
- Bump regex from 1.10.5 to 1.10.6. (#17527)
- Bump sentry-sdk from 2.10.0 to 2.12.0. (#17553)
- Bump serde from 1.0.204 to 1.0.206. (#17556)
- Bump serde_json from 1.0.122 to 1.0.124. (#17555)
- Bump sigstore/cosign-installer from 3.5.0 to 3.6.0. (#17549)
- Bump types-pyyaml from 6.0.12.20240311 to 6.0.12.20240808. (#17552)
- Bump types-requests from 2.31.0.20240406 to 2.32.0.20240712. (#17524)