v1.11.103

Upgrade dependency to matrix-js-sdk@37.8.0
2025-06-10 12:07:31 +00:00 · 2025-06-10 12:02:15 +00:00
3 changed files with 13 additions and 6 deletions
@@ -1,3 +1,10 @@
+Changes in [1.11.103](https://github.com/element-hq/element-web/releases/tag/v1.11.103) (2025-06-10)
+====================================================================================================
+## 🐛 Bug Fixes
+
+ Check the sender of an event matches owner of session, preventing sender spoofing by homeserver owners.
+[13c1d20](https://github.com/matrix-org/matrix-rust-sdk/commit/13c1d2048286bbabf5e7bc6b015aafee98f04d55) (High, [GHSA-x958-rvg6-956w](https://github.com/matrix-org/matrix-rust-sdk/security/advisories/GHSA-x958-rvg6-956w)).
+
 Changes in [1.11.102](https://github.com/element-hq/element-web/releases/tag/v1.11.102) (2025-06-03)
 ====================================================================================================
 ## ✨ Features
@@ -1,6 +1,6 @@
 {
    "name": "element-web",
-    "version": "1.11.102",
+    "version": "1.11.103",
    "description": "Element: the future of secure communication",
    "author": "New Vector Ltd.",
    "repository": {
@@ -130,7 +130,7 @@
        "maplibre-gl": "^5.0.0",
        "matrix-encrypt-attachment": "^1.0.3",
        "matrix-events-sdk": "0.0.1",
-        "matrix-js-sdk": "37.7.0",
+        "matrix-js-sdk": "37.8.0",
        "matrix-widget-api": "^1.10.0",
        "memoize-one": "^6.0.0",
        "mime": "^4.0.4",
@@ -9126,10 +9126,10 @@ matrix-events-sdk@0.0.1:
  resolved "https://registry.yarnpkg.com/matrix-events-sdk/-/matrix-events-sdk-0.0.1.tgz#c8c38911e2cb29023b0bbac8d6f32e0de2c957dd"
  integrity sha512-1QEOsXO+bhyCroIe2/A5OwaxHvBm7EsSQ46DEDn8RBIfQwN5HWBpFvyWWR4QY0KHPPnnJdI99wgRiAl7Ad5qaA==

-matrix-js-sdk@37.7.0:
-  version "37.7.0"
-  resolved "https://registry.yarnpkg.com/matrix-js-sdk/-/matrix-js-sdk-37.7.0.tgz#8106de841188c0b293f05978eab7043ddfd1b5ef"
-  integrity sha512-Lq4k/pbMwHsjsPHavVkiwyX0eId/XdNzYZlSvynwCTOU8VfN+i7/9fQFK0MqYD/95CgeWSI2o7h1bq1vDAzbYw==
+matrix-js-sdk@37.8.0:
+  version "37.8.0"
+  resolved "https://registry.yarnpkg.com/matrix-js-sdk/-/matrix-js-sdk-37.8.0.tgz#c320380ac9bc414eb16b41d71a3033e8daee679d"
+  integrity sha512-so0ugG0j5ufPbiWUARN4DbRJ91le+0ARrQsn8Z1zl5P84RsiYV3qgt2SJF0aQBjuJCfFA5/Ozcri0W/lHN+0WA==
  dependencies:
    "@babel/runtime" "^7.12.5"
    "@matrix-org/matrix-sdk-crypto-wasm" "^14.2.0"
Author	SHA1	Message	Date
RiotRobot	eb7359403f	v1.11.103 Docker / Docker Buildx (push) Failing after 48s Details	2025-06-10 12:07:31 +00:00
RiotRobot	7fe53eac16	Upgrade dependency to matrix-js-sdk@37.8.0	2025-06-10 12:02:15 +00:00