From: Renaud Allard <renaud@allard.it>
Subject: [security] net/synapse 1.135.2
To: ports@openbsd.org
Date: Mon, 11 Aug 2025 23:54:35 +0200

Hello,

Here is a diff for net/synapse 1.135.2. It fixes CVE-2025-49090 and some 
other vulnerabilities.

Tested on amd64. Builds and runs fine on 7.7-stable too.
make test as usual: skips=402, failures=3, successes=3861

Best Regards
Index: Makefile
===================================================================
RCS file: /cvs/ports/net/synapse/Makefile,v
diff -u -p -r1.103 Makefile
--- Makefile	5 Aug 2025 06:32:46 -0000	1.103
+++ Makefile	11 Aug 2025 21:49:32 -0000
@@ -1,6 +1,6 @@
 COMMENT =	open network for secure, decentralized communication
 
-MODPY_DISTV =	1.135.0
+MODPY_DISTV =	1.135.2
 
 GH_ACCOUNT =	element-hq
 GH_PROJECT =	synapse
Index: distinfo
===================================================================
RCS file: /cvs/ports/net/synapse/distinfo,v
diff -u -p -r1.79 distinfo
--- distinfo	5 Aug 2025 06:32:46 -0000	1.79
+++ distinfo	11 Aug 2025 21:49:32 -0000
@@ -214,7 +214,7 @@ SHA256 (cargo/zerovec-0.10.4.tar.gz) = q
 SHA256 (cargo/zerovec-0.11.2.tar.gz) = SgXrCA4BW6OcyeI7vl5/sE1fsEA1D5nzTjONX90pRCg=
 SHA256 (cargo/zerovec-derive-0.10.3.tar.gz) = bq+m37F1hOo+K9bnbgzBWtevErCavdHKVZYb7ZsQY8Y=
 SHA256 (cargo/zerovec-derive-0.11.1.tar.gz) = W5YjfvoMh4xkvYnENvZhvk5GsvPv8eu5dvfvIyHS9Y8=
-SHA256 (synapse-1.135.0.tar.gz) = mHLDPOFEmbNmJTMfc7ZpWsZ/FuC4Zf4VSaacaeeo954=
+SHA256 (synapse-1.135.2.tar.gz) = wd9GFx2MAlx9LPMLl8X9hu3dR1GcviUhx2tNppkZQFc=
 SIZE (cargo/addr2line-0.24.2.tar.gz) = 39015
 SIZE (cargo/adler2-2.0.0.tar.gz) = 13529
 SIZE (cargo/aho-corasick-1.1.3.tar.gz) = 183311
@@ -431,4 +431,4 @@ SIZE (cargo/zerovec-0.10.4.tar.gz) = 126
 SIZE (cargo/zerovec-0.11.2.tar.gz) = 124500
 SIZE (cargo/zerovec-derive-0.10.3.tar.gz) = 19438
 SIZE (cargo/zerovec-derive-0.11.1.tar.gz) = 21294
-SIZE (synapse-1.135.0.tar.gz) = 9056065
+SIZE (synapse-1.135.2.tar.gz) = 9076454