Sygnal v0.7.1

Security advisory

This version of Sygnal updates the minimum version of the aioapns dependency
to version 1.10 which addresses a TLS hostname validation bug in aioapns.

Sygnal was vulnerable to a man-in-the-middle attack on APNs data if someone
could spoof your DNS or otherwise redirect your APNs traffic.

This issue affects any Sygnal deployments that make use of APNs certificate
authentication (i.e. those with certfile: something.pem in the configuration).

Administrators are encouraged to upgrade.

Bugfixes

• Update minimum version of aioapns dependency to 1.10, which has security fixes. (#139)

Sygnal v0.7.0

Features

• Use default_payload from the device data for both APNS and GCM payloads. (#127)

Improved Documentation

• Note information about Docker files in release instructions. (#126)

Internal Changes

• Improve logging if a pushkin cannot be created. (#125)

Sygnal v0.6.0

Sygnal 0.6.0 (2020-05-12)

Features

• Report the APNS certificate expiry as a prometheus metric. (#106, #112)
• Change APNS payload to be mutable and include the event_id in payload. (#114)

Bugfixes

• Sygnal will no longer warn about the database config field being not understood. (#100)
• Log errors during start-up and fix the sample logging config. (#122)

Improved Documentation

• Document platform value for APNS apps (#110)

Internal Changes

• Add Dockerfile. (#63)

Sygnal 0.5.0 (2020-04-24)

Sygnal 0.5.0 (2020-04-24)

Features

• Reuse Configurations With asterisk App IDs and Token Based APNS Auth (#108)

Sygnal 0.4.1 (2020-04-02)

Sygnal 0.4.1 (2020-04-02)

Bugfixes

• Fix an issue where using PostgreSQL would cause Sygnal to crash (#95)

Sygnal 0.4.0 (2020-03-31)

NOTE: The config schema has changed. The db config section has been replaced
by database. Example configuration can be found in sygnal.yaml.sample. db will
continue to work, but the section is deprecated and may be removed in a future release.

Features

• Add support for PostgreSQL (#91)

Internal Changes

• Replace occurances of 'assertEquals' with 'assertEqual' to reduce deprecation noise while running tests. (#93)

Sygnal 0.3.0 (2020-03-24)

Features

• Add prometheus metric for the number of requests in flight. (#87)
• Add prometheus metrics to track pushkin things. (#88)

Bugfixes

• Fix warnings about finish() after disconnect. (#84)
• Fix a bug which meant that requests were logged with an invalid timestamp. (#86)

Internal Changes

• Change how we stub out HTTP requests in the tests. (#85)

Sygnal 0.2.3 (2019-08-14)

• Actually fix GCM connection limiting, and exception handling of exceptions
  that occur whilst reading the response body.
• Reduce logging for successful requests.
• Improve TLS performance to reduce CPU usage.
• Add a Prometheus metric that tracks the time taken to handle a /notify request.
• Add a /health endpoint for checking whether Sygnal is up.

Sygnal 0.2.2 (2019-08-12)

• Fix GCM connection limiting.
• Clean up exception handling code.

Sygnal 0.2.1 (2019-08-08)

• Declare sentry-sdk as a dependency.
• Obey GCM maximum connections count.
• Document max_connections config option in GCM.
• Separate Twisted's logging and the access logging.