CVS commit: pkgsrc/chat/matrix-synapse

["Greg Troxel" <gdt%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   gdt
Date:           Mon Feb  2 21:07:36 UTC 2026

Modified Files:
        pkgsrc/chat/matrix-synapse: Makefile PLIST cargo-depends.mk distinfo
            options.mk

Log Message:
chat/matrix-synapse: Update to 1.146.0

Switch to maturin from poetry.

Rototill deps to match pyproject.toml, and then adjust at least
somewhat to reality.

Tested on NetBSD 9 amd64.

Synapse 1.146.0 (2026-01-27)

Deprecations and Removals

    MSC2697 (Dehydrated devices) has been removed, as the MSC is closed. Developers should migrate to MSC3814. (#19346)
    Support for Ubuntu 25.04 (Plucky Puffin) has been dropped. Synapse no longer builds debian packages for Ubuntu 25.04.

Features

    Add a new config option enable_local_media_storage which controls whether media is additionally stored locally when using configured media_storage_providers. Setting this to false allows off-site 
media storage without a local cache. Contributed by Patrice Brend'amour @dr.allgood. (#19204)
    Stabilise support for MSC4312's m.oauth User-Interactive Auth stage for resetting cross-signing identity with the OAuth 2.0 API. The old, unstable name (org.matrix.cross_signing_reset) is now 
deprecated and will be removed in a future release. (#19273)
    Refactor Grafana dashboard to use server_name label (instead of instance). (#19337)

Synapse 1.145.0 (2026-01-13)

Features

    Add memberships endpoint to the admin API. This is useful for forensics and T&S purposes. (#19260)
    Server admins can bypass the quarantine media check when downloading media by setting the admin_unsafely_bypass_quarantine query parameter to true on Client-Server API media download requests. 
(#19275)
    Implemented pagination for the MSC2666 mutual rooms endpoint. Contributed by @tulir @ Beeper. (#19279)
    Admin API: add worker support to GET /_synapse/admin/v2/users/<user_id>. (#19281)
    Improve proxy support for the federation_client.py dev script. Contributed by Denis Kasak (@dkasak). (#19300)


To generate a diff of this commit:
cvs rdiff -u -r1.121 -r1.122 pkgsrc/chat/matrix-synapse/Makefile
cvs rdiff -u -r1.66 -r1.67 pkgsrc/chat/matrix-synapse/PLIST
cvs rdiff -u -r1.33 -r1.34 pkgsrc/chat/matrix-synapse/cargo-depends.mk
cvs rdiff -u -r1.88 -r1.89 pkgsrc/chat/matrix-synapse/distinfo
cvs rdiff -u -r1.5 -r1.6 pkgsrc/chat/matrix-synapse/options.mk

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/chat/matrix-synapse/Makefile
diff -u pkgsrc/chat/matrix-synapse/Makefile:1.121 pkgsrc/chat/matrix-synapse/Makefile:1.122
--- pkgsrc/chat/matrix-synapse/Makefile:1.121   Mon Dec 29 23:05:25 2025
+++ pkgsrc/chat/matrix-synapse/Makefile Mon Feb  2 21:07:36 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.121 2025/12/29 23:05:25 gdt Exp $
+# $NetBSD: Makefile,v 1.122 2026/02/02 21:07:36 gdt Exp $
 
-DISTNAME=      matrix-synapse-1.144.0
+DISTNAME=      matrix-synapse-1.146.0
 #PKGREVISION=  0
 CATEGORIES=    chat
 MASTER_SITES=  ${MASTER_SITE_GITHUB:=element-hq/}
@@ -13,55 +13,128 @@ HOMEPAGE=  https://github.com/element-hq/
 COMMENT=       Reference homeserver for the Matrix decentralised comms protocol
 LICENSE=       gnu-agpl-v3
 
+# \todo Verify.
+USE_LANGUAGES=         c
+USE_CC_FEATURES=       c99
+
+# Dependency management in synapse is quite troubled, with a
+# pyproject.toml that is often confusing and sometimes wrong.  This
+# list attempts to follow the order and contents.
+
+# NB: synapse needs features missing in NetBSD base system sqlite3,
+# and probably missing in other builds.  This package does not attempt
+# to make sqlite3 work -- use postgresql instead.  This comment is in
+# lieu of requiring enough sqlite3.
+
 # Build tools:
-TOOL_DEPENDS+= ${PYPKGPREFIX}-poetry>=2.1.4:../../devel/py-poetry
-TOOL_DEPENDS+= ${PYPKGPREFIX}-setuptools-rust>=1.3:../../devel/py-setuptools-rust
+TOOL_DEPENDS+= ${PYPKGPREFIX}-maturin>=1.0:../../devel/py-maturin
+# poetry is used for some dev things, but not for building, despite
+# the comments in pyproject.toml.
 
-# Dependencies as defined by synapse's build system (in theory):
+# Dependencies as expressed in pyproject.toml
+DEPENDS+=      ${PYPKGPREFIX}-jsonschema>=3.0.0:../../textproc/py-jsonschema
+# rpds for python 3.14 only?
+DEPENDS+=      ${PYPKGPREFIX}-immutabledict>=2.0:../../devel/py-immutabledict
+DEPENDS+=      ${PYPKGPREFIX}-unpaddedbase64>=2.1.0:../../devel/py-unpaddedbase64
+DEPENDS+=      ${PYPKGPREFIX}-canonicaljson>=2.0.0:../../devel/py-canonicaljson
+DEPENDS+=      ${PYPKGPREFIX}-signedjson>=1.1.0:../../security/py-signedjson
+DEPENDS+=      ${PYPKGPREFIX}-service_identity>=18.1.0:../../security/py-service_identity
+DEPENDS+=      ${PYPKGPREFIX}-twisted>=18.9.0:../../net/py-twisted
+DEPENDS+=      ${PYPKGPREFIX}-treq>=15.1:../../devel/py-treq
 DEPENDS+=      ${PYPKGPREFIX}-OpenSSL>=16.0.0:../../security/py-OpenSSL
-DEPENDS+=      ${PYPKGPREFIX}-Pillow>=10.0.1:../../graphics/py-Pillow
+DEPENDS+=      ${PYPKGPREFIX}-yaml>=3.13:../../textproc/py-yaml
 DEPENDS+=      ${PYPKGPREFIX}-asn1>=0.1.9:../../security/py-asn1
 DEPENDS+=      ${PYPKGPREFIX}-asn1-modules>=0.0.7:../../security/py-asn1-modules
-DEPENDS+=      ${PYPKGPREFIX}-attrs>=21.1.1:../../devel/py-attrs
 DEPENDS+=      ${PYPKGPREFIX}-bcrypt>=3.1.7:../../security/py-bcrypt
-DEPENDS+=      ${PYPKGPREFIX}-bleach>=1.4.3:../../www/py-bleach
-DEPENDS+=      ${PYPKGPREFIX}-canonicaljson>=2.0.0:../../devel/py-canonicaljson
-DEPENDS+=      ${PYPKGPREFIX}-cryptography>=3.4.7:../../security/py-cryptography
-DEPENDS+=      ${PYPKGPREFIX}-ijson>=3.1.4:../../devel/py-ijson
-DEPENDS+=      ${PYPKGPREFIX}-immutabledict>=2.0:../../devel/py-immutabledict
-DEPENDS+=      ${PYPKGPREFIX}-jinja2>=3.0:../../textproc/py-jinja2
-DEPENDS+=      ${PYPKGPREFIX}-jsonschema>=3.0.0:../../textproc/py-jsonschema
+DEPENDS+=      ${PYPKGPREFIX}-Pillow>=10.0.1:../../graphics/py-Pillow
+DEPENDS+=      ${PYPKGPREFIX}-sortedcontainers>=1.5.2:../../devel/py-sortedcontainers
 DEPENDS+=      ${PYPKGPREFIX}-macaroons>=0.13.0:../../devel/py-macaroons
-DEPENDS+=      ${PYPKGPREFIX}-matrix-common>=1.3.0:../../chat/py-matrix-common
 DEPENDS+=      ${PYPKGPREFIX}-msgpack>=0.5.2:../../devel/py-msgpack
-DEPENDS+=      ${PYPKGPREFIX}-netaddr>=0.7.18:../../net/py-netaddr
-DEPENDS+=      ${PYPKGPREFIX}-packaging>=20.0:../../devel/py-packaging
 DEPENDS+=      ${PYPKGPREFIX}-phonenumbers>=8.2.0:../../textproc/py-phonenumbers
 DEPENDS+=      ${PYPKGPREFIX}-prometheus_client>=0.4.0:../../net/py-prometheus_client
-DEPENDS+=      ${PYPKGPREFIX}-pydantic>=1.7.4<3:../../devel/py-pydantic
-DEPENDS+=      ${PYPKGPREFIX}-service_identity>=18.1.0:../../security/py-service_identity
-DEPENDS+=      ${PYPKGPREFIX}-signedjson>=1.1.0:../../security/py-signedjson
-DEPENDS+=      ${PYPKGPREFIX}-sortedcontainers>=1.5.2:../../devel/py-sortedcontainers
-DEPENDS+=      ${PYPKGPREFIX}-treq>=15.1:../../devel/py-treq
-DEPENDS+=      ${PYPKGPREFIX}-twisted>=18.9.0:../../net/py-twisted
+DEPENDS+=      ${PYPKGPREFIX}-attrs>=21.1.1:../../devel/py-attrs
+DEPENDS+=      ${PYPKGPREFIX}-netaddr>=0.7.18:../../net/py-netaddr
+DEPENDS+=      ${PYPKGPREFIX}-jinja2>=3.0:../../textproc/py-jinja2
+DEPENDS+=      ${PYPKGPREFIX}-bleach>=1.4.3:../../www/py-bleach
 DEPENDS+=      ${PYPKGPREFIX}-typing-extensions>=4.0:../../devel/py-typing-extensions
-DEPENDS+=      ${PYPKGPREFIX}-unpaddedbase64>=2.1.0:../../devel/py-unpaddedbase64
-DEPENDS+=      ${PYPKGPREFIX}-yaml>=3.13:../../textproc/py-yaml
+DEPENDS+=      ${PYPKGPREFIX}-cryptography>=3.4.7:../../security/py-cryptography
+DEPENDS+=      ${PYPKGPREFIX}-ijson>=3.1.4:../../devel/py-ijson
+DEPENDS+=      ${PYPKGPREFIX}-matrix-common>=1.3.0:../../chat/py-matrix-common
+DEPENDS+=      ${PYPKGPREFIX}-packaging>=20.0:../../devel/py-packaging
+DEPENDS+=      ${PYPKGPREFIX}-pydantic>=2.12:../../devel/py-pydantic
+# Upstream documents that this is needed for poetry, but the explanation is highly confused,
+# and, experimentally, it is needed at runtime, as of 1.146.0
+DEPENDS+=      ${PYPKGPREFIX}-setuptools-rust>=1.3:../../devel/py-setuptools-rust
 DEPENDS+=      ${PYPKGPREFIX}-python-multipart>=0.0.9:../../www/py-python-multipart
-# jwt/oidc
-DEPENDS+=      ${PYPKGPREFIX}-authlib>=0.15.1:../../security/py-authlib
-# postgres
+
+# Upstream does NOT document a dependency on pyrsistent, but synapse
+# crashes if it is not present, because it ends up in
+# /usr/pkg/lib/python3.13/site-packages/matrix_synapse-1.146.0.dist-info/METADATA
+# The version is taken from METADATA.  However, I can find no actual usage.
+DEPENDS+= ${PYPKGPREFIX}-pyrsistent>=0.18.0:../../devel/py-pyrsistent
+
+# A separate issue is that upstream claims pyrsistent is required via
+# jsonschema, but the pkgsrc jsonschema package and its pyproject.toml
+# do not reference pyrsistent at all.
+# DEPENDS+= ${PYPKGPREFIX}-pyrsistent>=0.20.0:../../devel/py-pyrsistent
+
+# Upstream lists "transitive dependency constraints". The theory is
+# that they are required by something that synapse depends on, and
+# that synapse doesn't actually use them.  Yet somehow, a version that
+# is older than the one listed here, but new enough for the other
+# required package, will somehow cause that package to misbehave when
+# used by synapse.
+# We ignore this for now, as a quantum superposition of not making
+# sense and it being likely the pkgsrc versions are adequately up to
+# date.
+
+# cffi > 1.15
+# pynacl >= 1.3
+# pyparsing >= 2.4
+# pyrsistent >= 0.18.0
+# requests >= 2.16.0
+# urllib3 >= 1.26.5
+# zope-interface >= 5.2
+
+## OPTIONS
+#
+# For each, we either just require the dependencies so all synapse
+# builds have the option, require none so the builds don't, or turn it
+# into a real option.
+
+# matrix-synapse-ldap3: \todo
+
+# postgres: always on
 DEPENDS+=      ${PYPKGPREFIX}-psycopg2>=2.8:../../databases/py-psycopg2
-# url-preview
+# ?
+#    "psycopg2cffi>=2.8;platform_python_implementation == 'PyPy'",
+#    "psycopg2cffi-compat==1.1;platform_python_implementation == 'PyPy'",
+
+# saml2: see options.mk
+
+# oidc: always on
+DEPENDS+=      ${PYPKGPREFIX}-authlib>=0.15.1:../../security/py-authlib
+
+# systemd: never
+
+# url-preview: always on
 DEPENDS+=      ${PYPKGPREFIX}-lxml>=4.2.0:../../textproc/py-lxml
-# NB: synapse needs features missing in NetBSD base system sqlite, and probably
-# missing in other builds.
-TEST_DEPENDS+= ${PYPKGPREFIX}-idna-[0-9]*:../../www/py-idna
-TEST_DEPENDS+= ${PYPKGPREFIX}-parameterized-[0-9]*:../../devel/py-parameterized
 
-PYTHON_VERSIONS_INCOMPATIBLE=  27
+# sentry: never
 
-USE_CC_FEATURES=       c99
+# opentracing: never
+
+# jwt: ignored, but same dep as oidc, with no version requirement
+
+# redis: \todo
+
+# cache-memory: \todo
+
+# test: enabled when testing
+TEST_DEPENDS+= ${PYPKGPREFIX}-parameterized>=0.9.0:../../devel/py-parameterized
+TEST_DEPENDS+= ${PYPKGPREFIX}-idna>=3.3:../../www/py-idna
+
+PYTHON_VERSIONS_INCOMPATIBLE=  27
 
 REPLACE_PYTHON+=       synapse/_scripts/*.py
 
@@ -119,9 +192,6 @@ post-install:
 update-cargo:
        make extract && make print-cargo-depends > cargo-depends.mk && make distinfo
 
-# guide says "Prepend .include "cargo-depends.mk" to any other .includes."
-# To start:
-#   make CARGO_ARGS="build --release" build && make print-cargo-depends > cargo-depends.mk
 .include "cargo-depends.mk"
 
 .include "../../lang/python/batteries-included.mk"

Index: pkgsrc/chat/matrix-synapse/PLIST
diff -u pkgsrc/chat/matrix-synapse/PLIST:1.66 pkgsrc/chat/matrix-synapse/PLIST:1.67
--- pkgsrc/chat/matrix-synapse/PLIST:1.66       Mon Dec 29 23:05:25 2025
+++ pkgsrc/chat/matrix-synapse/PLIST    Mon Feb  2 21:07:36 2026
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.66 2025/12/29 23:05:25 gdt Exp $
+@comment $NetBSD: PLIST,v 1.67 2026/02/02 21:07:36 gdt Exp $
 bin/export_signing_key
 bin/generate_config
 bin/generate_log_config
@@ -117,6 +117,9 @@ ${PYSITELIB}/synapse/app/appservice.pyo
 ${PYSITELIB}/synapse/app/client_reader.py
 ${PYSITELIB}/synapse/app/client_reader.pyc
 ${PYSITELIB}/synapse/app/client_reader.pyo
+${PYSITELIB}/synapse/app/complement_fork_proxied_reactor.py
+${PYSITELIB}/synapse/app/complement_fork_proxied_reactor.pyc
+${PYSITELIB}/synapse/app/complement_fork_proxied_reactor.pyo
 ${PYSITELIB}/synapse/app/complement_fork_starter.py
 ${PYSITELIB}/synapse/app/complement_fork_starter.pyc
 ${PYSITELIB}/synapse/app/complement_fork_starter.pyo
@@ -1985,7 +1988,11 @@ ${PYSITELIB}/synapse/storage/schema/main
 ${PYSITELIB}/synapse/storage/schema/main/delta/92/09_thread_subscriptions_update.sql
 ${PYSITELIB}/synapse/storage/schema/main/delta/92/09_thread_subscriptions_update.sql.postgres
 ${PYSITELIB}/synapse/storage/schema/main/delta/93/01_add_delayed_events.sql
+${PYSITELIB}/synapse/storage/schema/main/delta/93/02_sliding_sync_members.sql
 ${PYSITELIB}/synapse/storage/schema/main/delta/93/03_sss_pos_last_used.sql
+${PYSITELIB}/synapse/storage/schema/main/delta/93/04_make_delayed_event_content_text.py
+${PYSITELIB}/synapse/storage/schema/main/delta/93/04_make_delayed_event_content_text.pyc
+${PYSITELIB}/synapse/storage/schema/main/delta/93/04_make_delayed_event_content_text.pyo
 ${PYSITELIB}/synapse/storage/schema/main/full_schemas/72/full.sql.postgres
 ${PYSITELIB}/synapse/storage/schema/main/full_schemas/72/full.sql.sqlite
 ${PYSITELIB}/synapse/storage/schema/state/delta/23/drop_state_index.sql

Index: pkgsrc/chat/matrix-synapse/cargo-depends.mk
diff -u pkgsrc/chat/matrix-synapse/cargo-depends.mk:1.33 pkgsrc/chat/matrix-synapse/cargo-depends.mk:1.34
--- pkgsrc/chat/matrix-synapse/cargo-depends.mk:1.33    Mon Dec 29 23:05:25 2025
+++ pkgsrc/chat/matrix-synapse/cargo-depends.mk Mon Feb  2 21:07:36 2026
@@ -1,4 +1,4 @@
-# $NetBSD: cargo-depends.mk,v 1.33 2025/12/29 23:05:25 gdt Exp $
+# $NetBSD: cargo-depends.mk,v 1.34 2026/02/02 21:07:36 gdt Exp $
 
 CARGO_CRATE_DEPENDS+=  aho-corasick-1.1.3
 CARGO_CRATE_DEPENDS+=  anyhow-1.0.100
@@ -73,7 +73,7 @@ CARGO_CRATE_DEPENDS+= lazy_static-1.5.0
 CARGO_CRATE_DEPENDS+=  libc-0.2.174
 CARGO_CRATE_DEPENDS+=  libm-0.2.15
 CARGO_CRATE_DEPENDS+=  litemap-0.8.0
-CARGO_CRATE_DEPENDS+=  log-0.4.28
+CARGO_CRATE_DEPENDS+=  log-0.4.29
 CARGO_CRATE_DEPENDS+=  lru-slab-0.1.2
 CARGO_CRATE_DEPENDS+=  memchr-2.7.5
 CARGO_CRATE_DEPENDS+=  memoffset-0.9.1
@@ -106,7 +106,7 @@ CARGO_CRATE_DEPENDS+=       rand_core-0.9.3
 CARGO_CRATE_DEPENDS+=  regex-1.12.2
 CARGO_CRATE_DEPENDS+=  regex-automata-0.4.13
 CARGO_CRATE_DEPENDS+=  regex-syntax-0.8.5
-CARGO_CRATE_DEPENDS+=  reqwest-0.12.24
+CARGO_CRATE_DEPENDS+=  reqwest-0.12.26
 CARGO_CRATE_DEPENDS+=  ring-0.17.14
 CARGO_CRATE_DEPENDS+=  rustc-hash-2.1.1
 CARGO_CRATE_DEPENDS+=  rustls-0.23.31
@@ -145,7 +145,7 @@ CARGO_CRATE_DEPENDS+=       tokio-1.48.0
 CARGO_CRATE_DEPENDS+=  tokio-rustls-0.26.2
 CARGO_CRATE_DEPENDS+=  tokio-util-0.7.15
 CARGO_CRATE_DEPENDS+=  tower-0.5.2
-CARGO_CRATE_DEPENDS+=  tower-http-0.6.6
+CARGO_CRATE_DEPENDS+=  tower-http-0.6.8
 CARGO_CRATE_DEPENDS+=  tower-layer-0.3.3
 CARGO_CRATE_DEPENDS+=  tower-service-0.3.3
 CARGO_CRATE_DEPENDS+=  tracing-0.1.41

Index: pkgsrc/chat/matrix-synapse/distinfo
diff -u pkgsrc/chat/matrix-synapse/distinfo:1.88 pkgsrc/chat/matrix-synapse/distinfo:1.89
--- pkgsrc/chat/matrix-synapse/distinfo:1.88    Mon Dec 29 23:05:25 2025
+++ pkgsrc/chat/matrix-synapse/distinfo Mon Feb  2 21:07:36 2026
@@ -1,4 +1,4 @@
-$NetBSD: distinfo,v 1.88 2025/12/29 23:05:25 gdt Exp $
+$NetBSD: distinfo,v 1.89 2026/02/02 21:07:36 gdt Exp $
 
 BLAKE2s (aho-corasick-1.1.3.crate) = 36150b5dacb72fa7cd0d33aee15e14857914224878f0af76eabcb9daa68e3ae0
 SHA512 (aho-corasick-1.1.3.crate) = ba422a54688c4678fcf16e34fdf3ed06c333e6e3fc8b75af9272a215add494d43ebaef319021134b61327fd5d3572aec0dc655b714ffb3bc71ba3c265c9ebb69
@@ -219,15 +219,15 @@ Size (libm-0.2.15.crate) = 156108 bytes
 BLAKE2s (litemap-0.8.0.crate) = 6654e32bfb2cad87e06ab618a5c8da54ecbd27cd8d32fea67e43ffea66aff33f
 SHA512 (litemap-0.8.0.crate) = 61162bd55b28540ec2d61262698045a78efbfadc7e2fa248d9e0215fd7d3ce53a8c50ea0487f2f7df41149e41c0131849e507737e3bbae29cb69ea41dcb8e2d9
 Size (litemap-0.8.0.crate) = 34344 bytes
-BLAKE2s (log-0.4.28.crate) = ac7f11a003627df0bd605547768108fab3f4e9effa8c3757c245e01df250ffb2
-SHA512 (log-0.4.28.crate) = cea74c92c80f291360a7cdf022e3ce2f509b9051b415840ab2a159585384f3fe606289da00a6def0c3d666416c5fcda865e2ae4ad48df07618818e8486cd0209
-Size (log-0.4.28.crate) = 51131 bytes
+BLAKE2s (log-0.4.29.crate) = f4b8325b35fee411fa94521c97c0395b7f7566379491012fce21387017116c98
+SHA512 (log-0.4.29.crate) = 31bcf1669c27980f0a8500082c4d0cc500f6cc943518a3dacacc3ad4d8a0c238517f23c2c1969e5a22dbb5d25614adbf4e914c0557e45e1ebc8e7385b2ed14b3
+Size (log-0.4.29.crate) = 51515 bytes
 BLAKE2s (lru-slab-0.1.2.crate) = aa3f3674478a76b09b52e1c77b3fc8382ad771a643b4184baf095d0dd7f35d1b
 SHA512 (lru-slab-0.1.2.crate) = eb93796ffaccafd2e2530efeaf60dab1eeb17fe61652a9299c220cea4dd9099239eb549ae1259ac272c5aa807eebfaec6db4dc5efc95ee59365d3fd1d413f60f
 Size (lru-slab-0.1.2.crate) = 9090 bytes
-BLAKE2s (matrix-synapse-1.144.0.tar.gz) = 18e841b4cc33f87e92404453b0bf238bef0eff650e934c0df09f9ccfb7ff8912
-SHA512 (matrix-synapse-1.144.0.tar.gz) = 87961796797ee1bba68b70c9e4dc04bd07ceab82f02a5c503adb34a66963b385081e30be68eb7f0ca218e66b1f350edd1b0650b19a481c3bc5e8503fe238ec8b
-Size (matrix-synapse-1.144.0.tar.gz) = 9204917 bytes
+BLAKE2s (matrix-synapse-1.146.0.tar.gz) = 16d62221ebd9a26e8c1b3b32e6a28e7f25ba0b8671156d8cd85e7ef14c766cc4
+SHA512 (matrix-synapse-1.146.0.tar.gz) = 0b365ad45b181fc09fa543fe7ada07313880268be553de31f75d9910c8914368bca89298e080c88b2531d20561c5162a4037d85cbf7bcc89aed5e414b936aa64
+Size (matrix-synapse-1.146.0.tar.gz) = 9234403 bytes
 BLAKE2s (memchr-2.7.5.crate) = 741834638b9ed49c5a8ab61a0aeac280a8d91d104fafe3c7219d313131694001
 SHA512 (memchr-2.7.5.crate) = 2606ee16a7dc02db95dac17cebd2cac9deb2e23d7ea62972cdb19145c06eaf75631347a49c4e6ceeff89fb6e90e992f9bca0a9c955eb5130f89ba2bd865936e1
 Size (memchr-2.7.5.crate) = 97603 bytes
@@ -321,9 +321,9 @@ Size (regex-automata-0.4.13.crate) = 625
 BLAKE2s (regex-syntax-0.8.5.crate) = a64af5c9a6aceb9d4e37b662d7c8b599d4179b3642f92cb8b511ba3f650b93e5
 SHA512 (regex-syntax-0.8.5.crate) = 549d8d130fea9ec0d5806126f57f31d433f50e9328c5532ad417c44bb5488ec0d20acb0983dbe54dabaa0b453cbea4533cf7baac7144df119e8f78dfe55c5ab8
 Size (regex-syntax-0.8.5.crate) = 357541 bytes
-BLAKE2s (reqwest-0.12.24.crate) = 28e802a9f15e78def2987bd5fe90bb8266575f147f5e15dabc40d0cd41aeaf7f
-SHA512 (reqwest-0.12.24.crate) = fa029c0f9acdd1511ea8b65e1b1c83d9c1de8f9495a587b5b143666902a1ec4f2a8f28b28b535ef12c5e92c12e540f7cdb23f7cc253b1574c4a88dd695c004e8
-Size (reqwest-0.12.24.crate) = 159974 bytes
+BLAKE2s (reqwest-0.12.26.crate) = 9fd2fbc9d8466fc39cb9877b04f4668b500d62e8c2ec63f90d4b88e50303380a
+SHA512 (reqwest-0.12.26.crate) = 9b563b177131f7a97a47a7e05b09e0f9291b1222a1719ea10b158f52daf5a4f01da830876821cb4deb00dec3207d0dd76514087bcb9b623deb33b37ed0b62780
+Size (reqwest-0.12.26.crate) = 156458 bytes
 BLAKE2s (ring-0.17.14.crate) = 1480ea4de12099a897e831682ebaf48ed6e688e06f58e79e496a06e227ed58bd
 SHA512 (ring-0.17.14.crate) = 88d38205dc1a1f89bd4ae887ec5c168e68a4b749b3ac0612674092331e99d14a9b8d0f4a98d72c1a3853bcc9da420402336da3ee053bedcfd598da8de93afa14
 Size (ring-0.17.14.crate) = 1502610 bytes
@@ -438,9 +438,9 @@ Size (tokio-util-0.7.15.crate) = 124255 
 BLAKE2s (tower-0.5.2.crate) = 32c2e183ca114cd536a9a13e65df642fb1f358229385095a832027aa0e9e87c8
 SHA512 (tower-0.5.2.crate) = e89c4ffd83fec3566334a4c4e9151ddeabfd3437269afc8bffb46201391bc1cdc82cbb97c69643a30f8873e87c511ad9aefc6c081241a4419fe315c99c61ffce
 Size (tower-0.5.2.crate) = 109417 bytes
-BLAKE2s (tower-http-0.6.6.crate) = c4fde0bf57009634350dd9ce22d308c4c37234726966ca3bffff45d2cebae271
-SHA512 (tower-http-0.6.6.crate) = 30352ffd99f5679c858ca2ce518035ad1fda674040e1fdc09e3d4df3db4caef3a4d1a917574b3c1b5181a41955414d2a87d3bc14ff169b244006430af47dbea2
-Size (tower-http-0.6.6.crate) = 133515 bytes
+BLAKE2s (tower-http-0.6.8.crate) = bac8a8491fb4a03d3a3457f60a8693a9b6db318ace0bc95d811bb65e166f8f97
+SHA512 (tower-http-0.6.8.crate) = 6ed83fe61b74a6e168710200a0c01f98f0b559afae6d98b77aaec8b4e8c737d2d18b534d4e1dde5efb78f53854521a759770521cebe56adb863d76f4ba34a5c5
+Size (tower-http-0.6.8.crate) = 135827 bytes
 BLAKE2s (tower-layer-0.3.3.crate) = c24a4a09a3879906630fd1abe5d197f3c17154afe54e82117ed6f668285c3d3e
 SHA512 (tower-layer-0.3.3.crate) = edf36671076cd29bb32c29351b648afbf3e7134316988a697c7807db62de7a63cb0339e4db7c0f36ed60d8aced7f3e493318cccc272070c037b01e2dd189b934
 Size (tower-layer-0.3.3.crate) = 6180 bytes

Index: pkgsrc/chat/matrix-synapse/options.mk
diff -u pkgsrc/chat/matrix-synapse/options.mk:1.5 pkgsrc/chat/matrix-synapse/options.mk:1.6
--- pkgsrc/chat/matrix-synapse/options.mk:1.5   Mon Oct 14 06:45:32 2024
+++ pkgsrc/chat/matrix-synapse/options.mk       Mon Feb  2 21:07:36 2026
@@ -1,4 +1,4 @@
-# $NetBSD: options.mk,v 1.5 2024/10/14 06:45:32 wiz Exp $
+# $NetBSD: options.mk,v 1.6 2026/02/02 21:07:36 gdt Exp $
 
 PKG_OPTIONS_VAR=       PKG_OPTIONS.matrix-synapse
 PKG_SUPPORTED_OPTIONS= saml2
@@ -10,7 +10,7 @@ PKG_SUGGESTED_OPTIONS=        #
 # SAML2 Single Sign-On support
 #
 .if !empty(PKG_OPTIONS:Msaml2)
-DEPENDS+=      ${PYPKGPREFIX}-pysaml2-[0-9]*:../../www/py-pysaml2
-DEPENDS+=      ${PYPKGPREFIX}-defusedxml-[0-9]*:../../textproc/py-defusedxml
-DEPENDS+=      ${PYPKGPREFIX}-xmlschema-[0-9]*:../../textproc/py-xmlschema
+DEPENDS+=      ${PYPKGPREFIX}-pysaml2>=4.5.0:../../www/py-pysaml2
+DEPENDS+=      ${PYPKGPREFIX}-defusedxml>=0.7.1:../../textproc/py-defusedxml
+DEPENDS+=      ${PYPKGPREFIX}-xmlschema>=2018.3:../../textproc/py-xmlschema
 .endif