build(deps): bump maunium.net/go/mautrix from 0.24.2-0.20250630223442-4f6d4d7c63f3 to 0.26.0

[dependabot]

Bumps maunium.net/go/mautrix from 0.24.2-0.20250630223442-4f6d4d7c63f3 to 0.26.0.

Release notes

Sourced from maunium.net/go/mautrix's releases.

v0.26.0

• (client,appservice) Deprecated SendMassagedStateEvent as SendStateEvent has been able to do the same for a while now.
• (client,federation) Added size limits for responses to make it safer to send requests to untrusted servers.
• (client) Added wrapper for /admin/whois client API (thanks to @​nexy7574 in #411).
• (synapseadmin) Added force_purge option to DeleteRoom (thanks to @​nexy7574 in #420).
• (statestore) Added saving join rules for rooms.
• (bridgev2) Added optional automatic rollback of room state if bridging the change to the remote network fails.
• (bridgev2) Added management room notices if transient disconnect state doesn't resolve within 3 minutes.
• (bridgev2) Added interface to signal that certain participants couldn't be invited when creating a group.
• (bridgev2) Added select type for user input fields in login.
• (bridgev2) Added interface to let network connector customize personal filtering space.
• (bridgev2/matrix) Added checks to avoid sending error messages in reply to other bots.
• (bridgev2/matrix) Switched to using MSC4169 to send redactions whenever possible.
• (bridgev2/publicmedia) Added support for custom path prefixes, file names, and encrypted files.
• (bridgev2/commands) Added command to resync a single portal.
• (bridgev2/commands) Added create group command.
• (bridgev2/config) Added option to limit maximum number of logins.
• (bridgev2) Changed ghost joining to skip unnecessary invite if portal room is public.
• (bridgev2/disappear) Changed read receipt handling to only start disappearing timers for messages up to the read message (note: may not work in all cases if the read receipt points at an unknown event).
• (event/reply) Changed plaintext reply fallback removal to only happen when an HTML reply fallback is removed successfully.
• (bridgev2/matrix) Fixed unnecessary sleep after registering bot on first run.
• (crypto/goolm) Fixed panic when processing certain malformed Olm messages.
• (federation) Fixed HTTP method for sending transactions (thanks to @​nexy7574 in #426).
• (federation) Fixed response body being closed even when using DontReadBody parameter.
• (federation) Fixed validating auth for requests with query params.
• (federation/eventauth) Fixed typo causing restricted joins to not work.

v0.25.2

• Breaking change (id) Split UserID.ParseAndValidate into ParseAndValidateRelaxed and ParseAndValidateStrict. Strict is the old behavior, but most users likely want the relaxed version, as there are real users whose user IDs aren't valid under the strict rules.
• (crypto) Added helper methods for generating and verifying with recovery keys.
• (bridgev2/matrix) Added config option to automatically generate a recovery key for the bridge bot and self-sign the bridge's device.
• (bridgev2/matrix) Added initial support for using appservice/MSC3202 mode for encryption with standard servers like Synapse.
• (bridgev2) Added optional support for implicit read receipts.
• (bridgev2) Added interface for deleting chats on remote network.
• (bridgev2) Added local enforcement of media duration and size limits.
• (bridgev2) Extended event duration logging to log any event taking too long.
• (bridgev2) Improved validation in group creation provisioning API.
• (event) Added event type constant for poll end events.
• (client) Added wrapper for searching user directory.
• (client) Improved support for managing MSC4140 delayed events.
• (crypto/helper) Changed default sync handling to not block on waiting for decryption keys. On initial sync, keys won't be requested at all by default.
• (crypto) Fixed olm unwedging not working (regressed in v0.25.1).
• (bridgev2) Fixed various bugs with migrating to split portals.
• (event) Fixed poll start events having incorrect null m.relates_to.
• (client) Fixed RespUserProfile losing standard fields when re-marshaling.
• (federation) Fixed various bugs in event auth.

v0.25.1

... (truncated)

Changelog

Sourced from maunium.net/go/mautrix's changelog.

v0.26.0 (2025-11-16)

• (client,appservice) Deprecated SendMassagedStateEvent as SendStateEvent has been able to do the same for a while now.
• (client,federation) Added size limits for responses to make it safer to send requests to untrusted servers.
• (client) Added wrapper for /admin/whois client API (thanks to [@​nexy7574] in #411).
• (synapseadmin) Added force_purge option to DeleteRoom (thanks to [@​nexy7574] in #420).
• (statestore) Added saving join rules for rooms.
• (bridgev2) Added optional automatic rollback of room state if bridging the change to the remote network fails.
• (bridgev2) Added management room notices if transient disconnect state doesn't resolve within 3 minutes.
• (bridgev2) Added interface to signal that certain participants couldn't be invited when creating a group.
• (bridgev2) Added select type for user input fields in login.
• (bridgev2) Added interface to let network connector customize personal filtering space.
• (bridgev2/matrix) Added checks to avoid sending error messages in reply to other bots.
• (bridgev2/matrix) Switched to using [MSC4169] to send redactions whenever possible.
• (bridgev2/publicmedia) Added support for custom path prefixes, file names, and encrypted files.
• (bridgev2/commands) Added command to resync a single portal.
• (bridgev2/commands) Added create group command.
• (bridgev2/config) Added option to limit maximum number of logins.
• (bridgev2) Changed ghost joining to skip unnecessary invite if portal room is public.
• (bridgev2/disappear) Changed read receipt handling to only start disappearing timers for messages up to the read message (note: may not work in all cases if the read receipt points at an unknown event).
• (event/reply) Changed plaintext reply fallback removal to only happen when an HTML reply fallback is removed successfully.
• (bridgev2/matrix) Fixed unnecessary sleep after registering bot on first run.
• (crypto/goolm) Fixed panic when processing certain malformed Olm messages.
• (federation) Fixed HTTP method for sending transactions (thanks to [@​nexy7574] in #426).
• (federation) Fixed response body being closed even when using DontReadBody parameter.
• (federation) Fixed validating auth for requests with query params.
• (federation/eventauth) Fixed typo causing restricted joins to not work.

#411: redirect.github.com/mautrix/go/pull/411 #420: redirect.github.com/mautrix/go/pull/420 #426: redirect.github.com/mautrix/go/pull/426

... (truncated)

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)