chore(deps): bump maunium.net/go/mautrix from 0.23.3 to 0.25.0

[dependabot]

Bumps maunium.net/go/mautrix from 0.23.3 to 0.25.0.

Release notes

Sourced from maunium.net/go/mautrix's releases.

v0.25.0

• Bumped minimum Go version to 1.24.
• Breaking change (appservice,bridgev2,federation) Replaced gorilla/mux with standard library ServeMux.
• (client,bridgev2) Added support for creator power in room v12.
• (client) Added option to not set User-Agent header for improved Wasm compatibility.
• (bridgev2) Added support for following tombstones.
• (bridgev2) Added interface for getting arbitrary state event from Matrix.
• (bridgev2) Added batching to disappearing message queue to ensure it doesn't use too many resources even if there are a large number of messages.
• (bridgev2/commands) Added support for canceling QR login with cancel command.
• (client) Added option to override HTTP client used for .well-known resolution.
• (crypto/backup) Added method for encrypting key backup session without private keys.
• (event->id) Moved room version type and constants to id package.
• (bridgev2) Bots in DM portals will now be added to the functional members state event to hide them from the room name calculation.
• (bridgev2) Changed message delete handling to ignore "delete for me" events if there are multiple Matrix users in the room.
• (format/htmlparser) Changed text processing to collapse multiple spaces into one when outside pre/code tags.
• (format/htmlparser) Removed link suffix in plaintext output when link text is only missing protocol part of href.
  • e.g. <a href="https://example.com">example.com</a> will turn into example.com rather than example.com (https://example.com)
• (appservice) Switched appservice websockets from gorilla/websocket to coder/websocket.
• (bridgev2/matrix) Fixed encryption key sharing not ignoring ghosts properly.
• (crypto/attachments) Fixed hash check when decrypting file streams.
• (crypto) Removed unnecessary AlreadyShared error in ShareGroupSession. The function will now act as if it was successful instead.

v0.24.2

• (bridgev2) Added support for return values from portal event handlers. Note that the return value will always be "queued" unless the event buffer is disabled.
• (bridgev2) Added support for MSC4144 per-message profile passthrough in relay mode.
• (bridgev2) Added option to auto-reconnect logins after a certain period if they hit an UNKNOWN_ERROR state.
• (bridgev2) Added analytics for event handler panics.
• (bridgev2) Changed new room creation to hardcode room v11 to avoid v12 rooms being created before proper support for them can be added.
• (bridgev2) Changed queuing events to block instead of dropping events if the buffer is full.
• (bridgev2) Fixed assumption that replies to unknown messages are cross-room.
• (id) Fixed server name validation not including ports correctly (thanks to @​krombel in #392).
• (federation) Fixed base64 algorithm in signature generation.
• (event) Fixed MSC4144 fallbacks not being removed from edits.

v0.24.1

• (commands) Added framework for using reactions as buttons that execute command handlers.
• (client) Added wrapper for /relations endpoints.
• (client) Added support for stable version of room summary endpoint.
• (client) Fixed parsing URL preview responses where width/height are strings.
• (federation) Fixed bugs in server auth.
• (id) Added utilities for validating server names.
• (event) Fixed incorrect empty entity field when sending hashed moderation policy events.
• (event) Added [MSC4293] redact events field to member events.
• (event) Added support for fallbacks in MSC4144 per-message profiles.
• (format) Added MarkdownLink and MarkdownMention utility functions for generating properly escaped markdown.
• (synapseadmin) Added support for synchronous (v1) room delete endpoint.
• (synapseadmin) Changed Client struct to not embed the mautrix.Client. This is a breaking change if you were relying on accessing non-admin functions from the admin client.
• (bridgev2/provisioning) Fixed /display_and_wait not passing through errors from the network connector properly.

... (truncated)

Changelog

Sourced from maunium.net/go/mautrix's changelog.

v0.25.0 (2025-08-16)

• Bumped minimum Go version to 1.24.
• Breaking change (appservice,bridgev2,federation) Replaced gorilla/mux with standard library ServeMux.
• (client,bridgev2) Added support for creator power in room v12.
• (client) Added option to not set User-Agent header for improved Wasm compatibility.
• (bridgev2) Added support for following tombstones.
• (bridgev2) Added interface for getting arbitrary state event from Matrix.
• (bridgev2) Added batching to disappearing message queue to ensure it doesn't use too many resources even if there are a large number of messages.
• (bridgev2/commands) Added support for canceling QR login with cancel command.
• (client) Added option to override HTTP client used for .well-known resolution.
• (crypto/backup) Added method for encrypting key backup session without private keys.
• (event->id) Moved room version type and constants to id package.
• (bridgev2) Bots in DM portals will now be added to the functional members state event to hide them from the room name calculation.
• (bridgev2) Changed message delete handling to ignore "delete for me" events if there are multiple Matrix users in the room.
• (format/htmlparser) Changed text processing to collapse multiple spaces into one when outside pre/code tags.
• (format/htmlparser) Removed link suffix in plaintext output when link text is only missing protocol part of href.
  • e.g. <a href="https://example.com">example.com</a> will turn into example.com rather than example.com (https://example.com)
• (appservice) Switched appservice websockets from gorilla/websocket to coder/websocket.
• (bridgev2/matrix) Fixed encryption key sharing not ignoring ghosts properly.
• (crypto/attachments) Fixed hash check when decrypting file streams.
• (crypto) Removed unnecessary AlreadyShared error in ShareGroupSession. The function will now act as if it was successful instead.

v0.24.2 (2025-07-16)

• (bridgev2) Added support for return values from portal event handlers. Note that the return value will always be "queued" unless the event buffer is disabled.
• (bridgev2) Added support for [MSC4144] per-message profile passthrough in relay mode.
• (bridgev2) Added option to auto-reconnect logins after a certain period if they hit an UNKNOWN_ERROR state.
• (bridgev2) Added analytics for event handler panics.
• (bridgev2) Changed new room creation to hardcode room v11 to avoid v12 rooms being created before proper support for them can be added.
• (bridgev2) Changed queuing events to block instead of dropping events if the buffer is full.

... (truncated)

Commits

• 0bbfafe Bump version to v0.25.0
• cd022c9 client: don't set user-agent header on wasm
• ee869b9 dependencies: update
• 809333f verificationhelper: use static format strings (#390)
• 7dcd45e changelog: update
• 5d84bdd crypto/attachments: hash correct data while decrypting
• 23df81f crypto/attachments: fix hash check when decrypting
• 78aea00 format/htmlparser: collapse spaces when parsing html
• 6ea2337 event: add policy server spammy flag to unsigned
• 87d599c crypto: remove group session already shared error
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #23.