matrix-rust-sdk

# Changelog

All notable changes to this project will be documented in this file.

<!-- changelog start -->

## [0.18.0](https://github.com/matrix-org/matrix-rust-sdk/tree/0.18.0) - 2026-06-02

### Added

- Add `Client::tile_server` and a `TileServerInfo` struct to expose the

  homeserver-advertised map tile server (`tile_server` field of the matrix

  client well-known,

  [MSC3488](https://github.com/matrix-org/matrix-spec-proposals/pull/3488)).

  Returns `None` when the homeserver hasn't advertised one or the well-known is

  unavailable.

  ([#6610](https://github.com/matrix-org/matrix-rust-sdk/pulls/6610))

### Changed

- [**breaking**] `RumaApiError` is now a type alias for `UiaaResponse`, because

  they have similar variants containing the same data. The `ClientApi` variant

  is now `MatrixError`, and the `Uiaa` variant is `AuthResponse`.

  ([#6574](https://github.com/matrix-org/matrix-rust-sdk/pulls/6574))

- [**breaking**] `Pusher::set` now takes an `append: bool` parameter, forwarded

  to the homeserver on `POST /_matrix/client/v3/pushers/set`. Pass `true` to

  keep an existing pusher with the same `app_id` and `pushkey` registered for

  other users (e.g. multi-profile clients on a single device); pass `false` to

  preserve the previous default behaviour.

  ([#6600](https://github.com/matrix-org/matrix-rust-sdk/pulls/6600))

### Fixed

- Upgrade Ruma to 0.16.0, fixing a deserialization issue for

  `m.key.verification.accept` events.

  ([#6628](https://github.com/matrix-org/matrix-rust-sdk/pulls/6628))

- A cyclic reference of `Client` has been detected in

  `ThreadSubscriptionCatchup`, preventing `Client` to drop correctly. This is

  now fixed, removing a memory leak about `Client`.

  ([#6594](https://github.com/matrix-org/matrix-rust-sdk/pulls/6594))

- Fix a panic due to non-deterministic sorting of pinned events.

  ([#6595](https://github.com/matrix-org/matrix-rust-sdk/pulls/6595))

## [0.17.0] - 2026-05-08

### Features

- [**breaking**] `Room::is_dm` was renamed to `Room::compute_is_dm` to match its

  behavior, since it'll now compute and cache the result. A new _synchronous_

  `Room::is_dm` function was added which centralizes the logic of checking if

  something is a DM based on that cached value and the provided

  `DmRoomDefinition`. `Room::sync_members` will also now compute active service

  members. ([#6537](https://github.com/matrix-org/matrix-rust-sdk/pull/6537))

- [**breaking**] Enforce atomic and synchronized updates to `RoomInfo`. Requires

  `StateStore::save_changes` to acquire state store lock and replaces

  `Room::set_room_info` with an atomic version, `Room::update_room_info`, which

  is also synchronized by the state store lock.

  ([#6478](https://github.com/matrix-org/matrix-rust-sdk/pull/6478))

- Added `beacon` and `beacon_info` fields to `RoomPowerLevelChanges`, allowing

  callers to read and update the power levels required to send beacon (live

  location) message events and beacon info state events respectively.

  ([#6540](https://github.com/matrix-org/matrix-rust-sdk/pull/6540))

- Added `DmRoomDefinition` as a parameter of `ClientBuilder` so we can specify

  it when creating a Client. Also added a `Room::is_dm` method and added some

  logic to use the new DM definitions in `Client::get_dm_rooms` and when using

  message search.

  ([#6490](https://github.com/matrix-org/matrix-rust-sdk/pull/6490))

- Sharing encrypted history on room invite, per

  [MSC4268](https://github.com/matrix-org/matrix-spec-proposals/pull/4268) is

  now enabled by default (though can still be disabled via

  `ClientBuilder::with_enable_share_history_on_invite`).

  ([#6497](https://github.com/matrix-org/matrix-rust-sdk/pull/6497))

- Add `Client::get_dm_rooms` function to get an iterator with the DMs for the

  provided user id.

  ([#6487](https://github.com/matrix-org/matrix-rust-sdk/pull/6487))

- Support the stable `m.key_backup` prefix for MSC4287: Sharing key backup

  preference between clients.

  ([#6410](https://github.com/matrix-org/matrix-rust-sdk/pull/6410))

- Add new high-level search helpers in `matrix_sdk_ui::search` to perform

  searches for messages in a room or across all rooms.

  ([#6394](https://github.com/matrix-org/matrix-rust-sdk/pull/6394))

- Latest Event does not emit an update when it computes the same value as the

  previous Latest Event.

  ([#6396](https://github.com/matrix-org/matrix-rust-sdk/pull/6396))

- Add support for pushing the backup key to other clients, and receiving a

  pushed backup key from other clients

  ([MSC4385](https://github.com/matrix-org/matrix-spec-proposals/pull/4385)),

  gated behind the `experimental-push-secrets` feature.

  ([#6432](https://github.com/matrix-org/matrix-rust-sdk/pull/6432))

- Add `room_versions()` & `account_moderation()` to `HomeserverCapabilities`.

  ([#6413](https://github.com/matrix-org/matrix-rust-sdk/pull/6413))

- Enable sending redaction events through the send queue via

  `RoomSendQueue::redact`. This includes local echoes for redaction events

  through the new `LocalEchoContent::Redaction` variant.

  ([#6250](https://github.com/matrix-org/matrix-rust-sdk/pull/6250))

- [**breaking**] Remove support for `native-tls` and remove all feature

  flags for selecting TLS backend, as `rustls` is the now the only supported

  TLS backend.

  ([#6409](https://github.com/matrix-org/matrix-rust-sdk/pull/6409))

- [**breaking**] Added `HomeserverCapabilities` and

  `Client::homeserver_capabilities()` to get the capabilities of the homeserver.

  This replaces `Client::get_capabilities()`.

  ([#6371](https://github.com/matrix-org/matrix-rust-sdk/pull/6371))

- [**breaking**] `matrix_sdk::error::Error` has a new variant `Timeout` which

  occurs when a cross-signing reset does not succeed after some period of time.

  ([#6325](https://github.com/matrix-org/matrix-rust-sdk/pull/6325))

- The `beacon_info` start event

  ([MSC3672](https://github.com/matrix-org/matrix-spec-proposals/pull/3672)) is

  now included when computing the latest event for a room, so live location

  sharing sessions can be surfaced as a room's most recent activity.

  ([#6295](https://github.com/matrix-org/matrix-rust-sdk/pull/6295))

- [**breaking**] The `EventCacheError` is now `Clone`able, which implied marking

  a few other error types as `Clone`able, and wrapping a few other error

  variants with `Arc`.

  ([#6305](https://github.com/matrix-org/matrix-rust-sdk/pull/6305))

- [**breaking**]: The unread count computation has now moved from the sliding

  sync processing, to the event cache. As a result, it is necessary to enable

  the event cache if you want to keep a precise unread counts, using

  `Client::event_cache().subscribe()`. The unread counts will now also be

  available even if you used a previous version of sync (v2), as long as you've

  enabled the event cache beforehand.

  ([#6253](https://github.com/matrix-org/matrix-rust-sdk/pull/6253))

- [**breaking**] `room::reply::Event` has a new field `add_mentions` which is

  passed forward in `room::reply::make_reply_event`.

  ([#6270](https://github.com/matrix-org/matrix-rust-sdk/pull/6270))

- Add `Recovery::recover_and_fix_backup` to automatically fix key storage backup

  if the private backup decryption key is missing, invalid or inconsistent with

  the public key.

  ([#6252](https://github.com/matrix-org/matrix-rust-sdk/pull/6252))

- Attempt to import stored room key bundles for rooms awaiting bundles at

  client startup.

  ([#6215](https://github.com/matrix-org/matrix-rust-sdk/pull/6215))

- Add `OAuth::cached_server_metadata()` that caches the authorization server

  metadata for a while.

  ([#6217](https://github.com/matrix-org/matrix-rust-sdk/pull/6217))

- Add `QRCodeGrantLoginError::SecureChannel` for secure channel errors

  ([#6141](https://github.com/matrix-org/matrix-rust-sdk/pull/6141)

- Add `QRCodeGrantLoginError::UnexpectedMessage` for protocol message errors

  ([#6141](https://github.com/matrix-org/matrix-rust-sdk/pull/6141)

- Add `QRCodeGrantLoginError::LoginFailure` for login failure errors received

  from the other device

  ([#6141](https://github.com/matrix-org/matrix-rust-sdk/pull/6141)

- Add `QRCodeGrantLoginError::DeviceNotFound` for when the requested device was

  not returned by the homeserver

  ([#6141](https://github.com/matrix-org/matrix-rust-sdk/pull/6141)

- Add `Client::subscribe_to_duplicate_key_upload_errors` for listening to

  duplicate key upload errors from `/keys/upload`.

  ([#6135](https://github.com/matrix-org/matrix-rust-sdk/pull/6135/))

- Add `Room::pin_event` and `Room::unpin_event`, which allow pinning and

  unpinning events from a room. These were extracted from the `matrix_sdk_ui`

  crate, with no changes in functionality.

  ([#6106](https://github.com/matrix-org/matrix-rust-sdk/pull/6106))

- `LatestEventValue::RemoteInvite` is added to handle a Latest Event for invite

  room. ([#6056](https://github.com/matrix-org/matrix-rust-sdk/pull/6056))

- Add `Room::set_own_member_display_name` to set the current user's display name

  within only the one single room (can be used for /myroomnick functionality).

  [#5981](https://github.com/matrix-org/matrix-rust-sdk/pull/5981)

- Sending `MessageLike` and `RawMessageLike` events through a `Room` now returns

  the used `EncryptionInfo`, if any.

  ([#5936](https://github.com/matrix-org/matrix-rust-sdk/pull/5936))

- [**breaking**]: The new Latest Event API replaces the old API. All the

  `new_` prefixes have been removed, thus `Room::new_latest_event` becomes

  and overwrites the `Room::latest_event` value. The new Latest Event values

  stored in `RoomInfo` are also erased once during the first update of the

  SDK. The new values will be re-calculated. The following types or functions

  are removed: `PossibleLatestEvent`, `is_suitable_for_latest_event`, and

  `LatestEvent` (replaced by `LatestEventValue`). See the documentation of

  `matrix_sdk::latest_event` to learn about the new API.

  ([#5624](https://github.com/matrix-org/matrix-rust-sdk/pull/5624/))

- Expose a new method `RoomEventCache::find_event_relations` for loading

  events relating to a specific event ID from the cache.

  ([#5930](https://github.com/matrix-org/matrix-rust-sdk/pull/5930/))

- Replace in-memory stores with IndexedDB implementations when initializing

  `Client` with `BuilderStoreConfig::IndexedDb`.

  ([#5946](https://github.com/matrix-org/matrix-rust-sdk/pull/5946))

- Call: Add support for the new Intents for voice only calls

  `Intent.StartCallDmVoice` and `Intent.JoinExistingDmVoice`.

  ([#6003](https://github.com/matrix-org/matrix-rust-sdk/pull/6003))

- Add `SlidingSync::unsubscribe_to_rooms` and

  `SlidingSync::clear_and_subscribe_to_rooms`.

  ([#6012](https://github.com/matrix-org/matrix-rust-sdk/pull/6012))

- [**breaking**] Sliding Sync has a new `PollTimeout` type, used by

  `SlidingSyncBuilder::requires_timeout`.

  ([#6005](https://github.com/matrix-org/matrix-rust-sdk/pull/6005))

- Inviting a user to a room with `Client::enable_share_history_on_invite` set

  to true will now trigger a download of all historical keys for the room in

  question from the client's key backup.

  ([#6017](https://github.com/matrix-org/matrix-rust-sdk/pull/6017))

- Add widget partial support for MSC4039. Allows widgets to download

  non-encrypted files from the content repository (like avatars).

  ([#6354](https://github.com/matrix-org/matrix-rust-sdk/pull/6354))

### Breaking changes

- [**breaking**] `LiveLocationShares` has been renamed to

  `LiveLocationsObserver` and `Room::live_location_shares` to

  `Room::live_locations_observer`.

  ([#6446](https://github.com/matrix-org/matrix-rust-sdk/pull/6446))

- `Room::observe_live_location_shares` has been replaced by

  `Room::live_locations_observer`. The new API returns a `LiveLocationsObserver`

  struct with a `subscribe()` method that provides an initial snapshot

  (`Vector<LiveLocationShare>`) and a batched stream of `VectorDiff` updates,

  instead of emitting individual `LiveLocationShare` items as beacon events

  arrive. The initial snapshot is loaded from the event cache on creation,

  includes the own user's shares (previously excluded), and properly handles

  share start/stop by listening to beacon_info state events.

  ([#6385](https://github.com/matrix-org/matrix-rust-sdk/pull/6385))

### Bugfix

- Add the `session` key in `OAuthCrossSigningResetInfo`, allowing to provide

  `AuthData::OAuth` in `CrossSigningResetHandle::auth()`, to match the behavior

  described in the Matrix spec.

  ([#6525](https://github.com/matrix-org/matrix-rust-sdk/pull/6525))

- When threads are enabled, a focused event timeline is used and the focused

  event is not part of a thread, hide other threaded events by default like it

  happens on the live focus timeline.

  ([#6519](https://github.com/matrix-org/matrix-rust-sdk/pull/6519))

- Add a recursion limit attribute that raises it from the default value of 128

  to 256. ([#6489](https://github.com/matrix-org/matrix-rust-sdk/pull/6489))

- Reject invalid edits as candidates for the latest event.

  ([#6454](https://github.com/matrix-org/matrix-rust-sdk/pull/6454))

- Fix an infinite loop when loading pinned events from the storage.

  ([#6453](https://github.com/matrix-org/matrix-rust-sdk/pull/6453))

- `beacon_info` stop events (`live: false`,

  [MSC3672](https://github.com/matrix-org/matrix-spec-proposals/pull/3672)) are

  now also eligible as the latest event for a room, preventing the live location

  sharing item from disappearing from the room list summary once the session

  ends. ([#6373](https://github.com/matrix-org/matrix-rust-sdk/pull/6373))

- Android: add back custom certificates and disabling SSL verification options

  in `ClientBuilder` using the previous `webkpi` verifier instead of platform

  verifier, otherwise these features will fail.

  ([#6328](https://github.com/matrix-org/matrix-rust-sdk/pull/6328))

- Room keys are now rotated whenever the client receives an `m.room.member`

  event not belonging to the current user with non-`join` membership in order to

  prevent

  [MSC4268](https://github.com/matrix-org/matrix-spec-proposals/pull/4268) from

  leaking room keys in an unintuitive manner.

  ([#6292](https://github.com/matrix-org/matrix-rust-sdk/pull/6292))

  ([#6457](https://github.com/matrix-org/matrix-rust-sdk/pull/6457))

- Only share historic room keys on invite if the current room history is shared.

  ([#6275](https://github.com/matrix-org/matrix-rust-sdk/pull/6275))

- The event cache's thread subscriptions background task won't enable if the

  server doesn't advertise support for the experimental thread subscription

  feature. In the past, this would result in sending spurious requests that

  aren't supported by the user's homeserver.

  ([#6245](https://github.com/matrix-org/matrix-rust-sdk/pull/6245))

- Handle race between send queue update and remote echo in latest event

  computation.

  ([#6220](https://github.com/matrix-org/matrix-rust-sdk/pull/6220))

- Return `QRCodeGrantLoginError::DeviceNotFound` instead of

  `QRCodeGrantLoginError::DeviceIDAlreadyInUse` for when the new device is not

  returned by the homeserver.

  ([#6141](https://github.com/matrix-org/matrix-rust-sdk/pull/6141)

- Latest Event is correctly computed when multiple edits exist for the same

  event candidate.

  ([#6096](https://github.com/matrix-org/matrix-rust-sdk/pull/6096))

- Restrict which `m.room.member` can be a `LatestEventValue` candidate by

  relying on `MembershipChange` for more control.

  ([#6143](https://github.com/matrix-org/matrix-rust-sdk/pull/6143))

- Add manual WAL checkpoints when opening Sqlite DBs and when vacuuming them,

  since the WAL files aren't automatically shrinking.

  ([#6004](https://github.com/matrix-org/matrix-rust-sdk/pull/6004))

- Use the server name extracted from the user id in

  `Client::fetch_client_well_known` as a fallback value. Otherwise, sometimes

  the server name is not available and we can't reload the well-known contents.

  ([#5996](https://github.com/matrix-org/matrix-rust-sdk/pull/5996))

- Latest Event is lazier: a `RoomLatestEvents` can be registered even if its

  associated `RoomEventCache` isn't created yet.

  ([#5947](https://github.com/matrix-org/matrix-rust-sdk/pull/5947))

- Allow granting of QR login to a new client whose device ID is not a base64

  encoded Curve25519 public key.

  ([#5940](https://github.com/matrix-org/matrix-rust-sdk/pull/5940))

- Remove an unwrap in `SlidingSync::send_sync_request` when an asynchronous task

  panics or is cancelled.

  ([#6316](https://github.com/matrix-org/matrix-rust-sdk/pull/6316))

### Refactor

- [**breaking**] Upgrade Ruma to 0.15.1.

  ([#6503](https://github.com/matrix-org/matrix-rust-sdk/pull/6503))

- Revert back to to determining lock dirtiness in

  `Encryption::{spin_lock_store, try_lock_once_store}` through logic defined in

  `OlmMachine`, rather than `CrossProcessLock`.

  ([#6496](https://github.com/matrix-org/matrix-rust-sdk/pull/6496))

- [**breaking**] Update `Encryption::{spin_lock_store, try_lock_once_store}` so

  that lock dirtiness is determined entirely by `CrossProcessLock`, rather than

  logic defined by `OlmMachine`. Also enforce that lock generation is opaque by

  removing `CrossProcessLockStoreGuardWithGeneration`.

  ([#6326](https://github.com/matrix-org/matrix-rust-sdk/pull/6326))

- [**breaking**] The `EventCache` now owns pagination tasks, and will run them

  to completion, even if a manual caller stopped polling the called future.

  ([#6304](https://github.com/matrix-org/matrix-rust-sdk/pull/6304))

- [**breaking**] `RoomEventCache::thread_pagination` is now async and fallible.

  ([#6280](https://github.com/matrix-org/matrix-rust-sdk/pull/6280))

- [**breaking**] The `UrlOrQuery` enum was moved from the

  `authentication::oauth` module to the `utils` module. It can also be converted

  from a `QueryString`.

  ([#6224](https://github.com/matrix-org/matrix-rust-sdk/pull/6224))

- [**breaking**] `MatrixAuth::login_with_sso_callback()` takes a `UrlOrQuery`

  instead of a `Url`, to make it more convenient to use with

  `LocalServerBuilder` / `LocalServerRedirectHandle`.

  ([#6224](https://github.com/matrix-org/matrix-rust-sdk/pull/6224))

- [**breaking**] `Room::report_content()` no longer takes a `score` argument,

  because it was removed from the Matrix specification. The

  `ReportedContentScore` type was removed too.

  ([#6256](https://github.com/matrix-org/matrix-rust-sdk/pull/6256))

- [**breaking**] `Client::enabled_thread_subscriptions()` is now async and

  fallible, as it will check for both static enablement of the thread

  subscription feature as well as dynamically checking that the user's

  homeserver supports it.

- [**breaking**] `SessionChange::UnknownToken` is now a tuple variant containing

  an `UnknownTokenErrorData`.

  ([#6241](https://github.com/matrix-org/matrix-rust-sdk/pull/6241))

- [**breaking**] `EventCacheError::BackPaginationError` has been renamed

  `PaginationError`.

  ([#6239](https://github.com/matrix-org/matrix-rust-sdk/pull/6239))

- [**breaking**] The functions on the `OAuth` API to access the account

  management URL and its actions were removed. The methods available on the

  `AuthorizationServerMetadata` should be used instead.

  ([#6217](https://github.com/matrix-org/matrix-rust-sdk/pull/6217))

- [**breaking**] `QRCodeGrantLoginError::UnableToCreateDevice` has been removed

  ([#6141](https://github.com/matrix-org/matrix-rust-sdk/pull/6141)

- The `RoomEventCache::paginate_thread_backwards` method is replaced by

  `RoomEventCache::thread_pagination` which returns a new `ThreadPagination`

  type, similar to `RoomPagination`.

  ([#6174](https://github.com/matrix-org/matrix-rust-sdk/pull/6174))

  Before:

  ```rust

  room_event_cache.paginate_thread_backwards(thread_id, 42).await

  ```

  After:

  ```rust

  room_event_cache.thread_pagination(thread_id).run_backwards_once(42).await

  ```

- `RoomPaginationStatus` is renamed to `PaginationStatus`.

  ([#6174](https://github.com/matrix-org/matrix-rust-sdk/pull/6174/))

- [**breaking**] Replaced `ClientBuilder::cross_process_store_locks_holder_name`

  with `ClientBuilder::cross_process_store_config` to allow specifying the

  configuration for the cross-process lock and whether it should act as a no-op

  (client used in a single process) or we should keep the previous behavior

  (client used in multiple processes).

  ([#6160](https://github.com/matrix-org/matrix-rust-sdk/pull/6160))

## [0.16.1] - 2026-05-08

- Add a recursion limit attribute that raises it from the default value of 128

  to 256. ([#6489](https://github.com/matrix-org/matrix-rust-sdk/pull/6489))

- Reject invalid edits as candidates for the latest event.

  ([#6454](https://github.com/matrix-org/matrix-rust-sdk/pull/6454))

## [0.16.0] - 2025-12-04

### Features

- Add `Client::get_store_sizes()` so to query the size of the existing stores,

  if available.

  ([#5911](https://github.com/matrix-org/matrix-rust-sdk/pull/5911))

- Add `QRCodeLoginError::NotFound` for non-existing / expired rendezvous

  sessions ([#5898](https://github.com/matrix-org/matrix-rust-sdk/pull/5898))

- Add `QRCodeGrantLoginError::NotFound` for non-existing / expired rendezvous

  sessions ([#5898](https://github.com/matrix-org/matrix-rust-sdk/pull/5898))

- Improve logging around key history bundles when joining a room.

  ([#5866](https://github.com/matrix-org/matrix-rust-sdk/pull/5866))

- Expose the power level required to modify `m.space.child` on

  `room::power_levels::RoomPowerLevelChanges`.

  ([#5857](https://github.com/matrix-org/matrix-rust-sdk/pull/5857))

- Add the `Client::server_versions_cached()` method.

  ([#5853](https://github.com/matrix-org/matrix-rust-sdk/pull/5853))

- Extend `authentication::oauth::OAuth::grant_login_with_qr_code` to support

  granting login by scanning a QR code on the existing device.

  ([#5818](https://github.com/matrix-org/matrix-rust-sdk/pull/5818))

- Add a new `RequestConfig::skip_auth()` option. This is useful to ensure that

  certain request won't ever include an authorization header.

  ([#5822](https://github.com/matrix-org/matrix-rust-sdk/pull/5822))

- Add support for extended profile fields with

  `Account::fetch_profile_field_of()`,

  `Account::fetch_profile_field_of_static()`, `Account::set_profile_field()` and

  `Account::delete_profile_field()`.

  ([#5771](https://github.com/matrix-org/matrix-rust-sdk/pull/5771))

- [**breaking**] Remove the `matrix-sdk-crypto` re-export.

  ([#5769](https://github.com/matrix-org/matrix-rust-sdk/pull/5769))

- Allow `Client::get_dm_room()` to be called without the `e2e-encryption` crate

  feature. ([#5787](https://github.com/matrix-org/matrix-rust-sdk/pull/5787))

- [**breaking**] Add

  `encryption::secret_storage::SecretStorageError::ImportError` to indicate an

  error that occurred when importing a secret from secret storage.

  ([#5647](https://github.com/matrix-org/matrix-rust-sdk/pull/5647))

- [**breaking**] Add

  `authentication::oauth::qrcode::login::LoginProgress::SyncingSecrets` to

  indicate that secrets are being synced between the two devices.

  ([#5760](https://github.com/matrix-org/matrix-rust-sdk/pull/5760))

- Add `authentication::oauth::OAuth::grant_login_with_qr_code` to reciprocate a

  login by generating a QR code on the existing device.

  ([#5801](https://github.com/matrix-org/matrix-rust-sdk/pull/5801))

- [**breaking**] `OAuth::login_with_qr_code` now returns a builder that allows

  performing the flow with either the current device scanning or generating the

  QR code. Additionally, new errors `SecureChannelError::CannotReceiveCheckCode`

  and `QRCodeLoginError::ServerReset` were added.

  ([#5711](https://github.com/matrix-org/matrix-rust-sdk/pull/5711))

- [**breaking**] `ThreadedEventsLoader::new` now takes optional `tokens`

  parameter to customise where the pagination begins

  ([#5678](https://github.com/matrix-org/matrix-rust-sdk/pull/5678).

- Make `PaginationTokens` `pub`, as well as its `previous` and `next` tokens so

  they can be assigned from other files

  ([#5678](https://github.com/matrix-org/matrix-rust-sdk/pull/5678).

- Add new API to decline calls

  ([MSC4310](https://github.com/matrix-org/matrix-spec-proposals/pull/4310)):

  `Room::make_decline_call_event` and `Room::subscribe_to_call_decline_events`

  ([#5614](https://github.com/matrix-org/matrix-rust-sdk/pull/5614))

- Use `StateStore::upsert_thread_subscriptions()` to bulk process thread

  subscription updates received via the sync response or from the MSC4308

  companion endpoint.

  ([#5848](https://github.com/matrix-org/matrix-rust-sdk/pull/5848))

### Refactor

- [**breaking**]: `Client::server_vendor_info()` requires to enable the

  `federation-api` feature.

  ([#5912](https://github.com/matrix-org/matrix-rust-sdk/pull/5912))

- [**breaking**]: `Client::reset_server_info()` has been split into

  `reset_supported_versions()` and `reset_well_known()`.

  ([#5910](https://github.com/matrix-org/matrix-rust-sdk/pull/5910))

- [**breaking**]: `Client::send()` has extra bounds where

  `Request::Authentication: AuthScheme<Input<'a> = SendAccessToken<'a>>` and

  `Request::PathBuilder: SupportedPathBuilder`. This method should still work

  for any request to the Client-Server API. This allows to drop the

  `HttpError::NotClientRequest` error in favor of a compile-time error.

  ([#5781](https://github.com/matrix-org/matrix-rust-sdk/pull/5781),

  [#5789](https://github.com/matrix-org/matrix-rust-sdk/pull/5789),

  [#5815](https://github.com/matrix-org/matrix-rust-sdk/pull/5815))

- [**breaking**]: The `waveform` field was moved from `AttachmentInfo::Voice` to

  `BaseAudioInfo`, allowing to set it for any audio message. Its format also

  changed, and it is now a list of `f32` between 0 and 1.

  ([#5732](https://github.com/matrix-org/matrix-rust-sdk/pull/5732))

- [**breaking**] The `caption` and `formatted_caption` fields and methods of

  `AttachmentConfig`, `GalleryConfig` and `GalleryItemInfo` have been merged

  into a single field that uses `TextMessageEventContent`.

  ([#5733](https://github.com/matrix-org/matrix-rust-sdk/pull/5733))

- The Matrix SDK crate now uses the 2024 edition of Rust.

  ([#5677](https://github.com/matrix-org/matrix-rust-sdk/pull/5677))

- [**breaking**] Make `LoginProgress::EstablishingSecureChannel` generic in

  order to reuse it for the currently missing QR login flow.

  ([#5750](https://github.com/matrix-org/matrix-rust-sdk/pull/5750))

- [**breaking**] The `new_virtual_element_call_widget` now uses a `props` and a

  `config` parameter instead of only `props`. This splits the configuration of

  the widget into required properties ("widget_id", "parent_url"...) so the

  widget can work and optional config parameters ("skip_lobby", "header",

  "..."). The config option should in most cases only provide the `"intent"`

  property. All other config options will then be chosen by EC based on platform

  - `intent`.

  Before:

  ```rust

  new_virtual_element_call_widget(

    VirtualElementCallWidgetProperties {

      widget_id: "my_widget_id", // required property

      skip_lobby: Some(true), // optional configuration

      preload: Some(true), // optional configuration

      // ...

    }

  )

  ```

  Now:

  ```rust

  new_virtual_element_call_widget(

    VirtualElementCallWidgetProperties {

      widget_id: "my_widget_id", // required property

      // ... only required properties

    },

    VirtualElementCallWidgetConfig {

      intend: Intend.StartCallDM, // defines the default values for all other configuration

      skip_lobby: Some(false), // overwrite a specific default value

      ..VirtualElementCallWidgetConfig::default() // set all other config options to `None`. Use defaults from intent.

    }

  )

  ```

  ([#5560](https://github.com/matrix-org/matrix-rust-sdk/pull/5560))

### Bugfix

- A new local `LatestEventValue` was always created as `LocalIsSending`. It

  must be created as `LocalCannotBeSent` if a previous local `LatestEventValue`

  exists and is `LocalCannotBeSent`.

  ([#5908](https://github.com/matrix-org/matrix-rust-sdk/pull/5908))

- Switch QR login implementation from `std::time::Instant` to

  `ruma::time::Instant` which is compatible with Wasm.

  ([#5889](https://github.com/matrix-org/matrix-rust-sdk/pull/5889))

## [0.14.0] - 2025-09-04

### Features

- `Client::fetch_thread_subscriptions` implements support for the companion

  endpoint of the experimental MSC4308, allowing to fetch thread subscriptions

  for a given range, as specified by the MSC.

  ([#5590](https://github.com/matrix-org/matrix-rust-sdk/pull/5590))

- Add a `Client::joined_space_rooms` method that allows retrieving the list of

  joined spaces.

  ([#5592](https://github.com/matrix-org/matrix-rust-sdk/pull/5592))

- `Room::enable_encryption` and

  `Room::enable_encryption_with_state_event_encryption` will poll the encryption

  state for up to 3 seconds, rather than checking once after a single sync has

  completed. ([#5559](https://github.com/matrix-org/matrix-rust-sdk/pull/5559))

- Add `Room::enable_encryption_with_state` to enable E2E encryption with

  encrypted state event support, gated behind the

  `experimental-encrypted-state-events` feature.

  ([#5557](https://github.com/matrix-org/matrix-rust-sdk/pull/5557))

- Add `ignore_timeout_on_first_sync` to the `SyncSettings`, which should allow

  to have a quicker first response when using one of the `sync`,

  `sync_with_callback`, `sync_with_result_callback` or `sync_stream` methods on

  `Client`, if the response is empty.

  ([#5481](https://github.com/matrix-org/matrix-rust-sdk/pull/5481))

- The methods to use the `/v3/sync` endpoint set the `use_state_after` field,

  which means that, if the server supports it, the response will contain the

  state changes between the last sync and the end of the timeline.

  ([#5488](https://github.com/matrix-org/matrix-rust-sdk/pull/5488))

- Add experimental support for

  [MSC4306](https://github.com/matrix-org/matrix-spec-proposals/pull/4306), with

  the `Room::fetch_thread_subscription()`, `Room::subscribe_thread()` and

  `Room::unsubscribe_thread()` methods.

  ([#5439](https://github.com/matrix-org/matrix-rust-sdk/pull/5439))

- [**breaking**] `RoomMemberRole` has a new `Creator` variant, that

  differentiates room creators with infinite power levels, as introduced in room

  version 12.

  ([#5436](https://github.com/matrix-org/matrix-rust-sdk/pull/5436))

- Add `Account::fetch_account_data_static` to fetch account data from the server

  with a statically-known type, with a signature similar to

  `Account::account_data`.

  ([#5424](https://github.com/matrix-org/matrix-rust-sdk/pull/5424))

- Add support to accept historic room key bundles that arrive out of order, i.e.

  the bundle arrives after the invite has already been accepted.

  ([#5322](https://github.com/matrix-org/matrix-rust-sdk/pull/5322))

- [**breaking**] `OAuth::login` now allows requesting additional scopes for the

  authorization code grant.

  ([#5395](https://github.com/matrix-org/matrix-rust-sdk/pull/5395))

### Refactor

- [**breaking**] Upgrade ruma to 0.13.0

  ([#5623](https://github.com/matrix-org/matrix-rust-sdk/pull/5623))

- [**breaking**] `SyncSettings` token is now `SyncToken` enum type which has

  default behaviour of `SyncToken::ReusePrevious` token. This breaks

  `Client::sync_once`. For old behaviour, set the token to `SyncToken::NoToken`

  with the usual `SyncSettings::token` setter.

  ([#5522](https://github.com/matrix-org/matrix-rust-sdk/pull/5522))

- [**breaking**] Change the upload_encrypted_file and make it clone the client

  instead of owning it. The lifetime of the `UploadEncryptedFile` request

  returned by `Client::upload_encrypted_file()` only depends on the request

  lifetime now.

  ([#5470](https://github.com/matrix-org/matrix-rust-sdk/pull/5470))

- [**breaking**] Add an `IsPrefix = False` bound to the `account_data()` and

  `fetch_account_data_static()` methods of `Account`. These methods only worked

  for events where the full event type is statically-known, and this is now

  enforced at compile-time. `account_data_raw()` and `fetch_account_data()`

  respectively can be used instead for event types with a variable suffix.

  ([#5444](https://github.com/matrix-org/matrix-rust-sdk/pull/5444))

- [**breaking**] `RoomMemberRole::suggested_role_for_power_level()` and

  `RoomMemberRole::suggested_power_level()` now use `UserPowerLevel` to

  represent power levels instead of `i64` to differentiate the infinite power

  level of creators, as introduced in room version 12.

  ([#5436](https://github.com/matrix-org/matrix-rust-sdk/pull/5436))

- [**breaking**] The `reason` argument of `Room::report_room()` is now required,

  due to a clarification in the spec.

  ([#5337](https://github.com/matrix-org/matrix-rust-sdk/pull/5337))

- [**breaking**] The `join_rule` field of `RoomPreview` is now a

  `JoinRuleSummary`. It has the same variants as `SpaceRoomJoinRule` but

  contains as summary of the allow rules for the restricted variants.

  ([#5337](https://github.com/matrix-org/matrix-rust-sdk/pull/5337))

- [**breaking**] The MSRV has been bumped to Rust 1.88.

  ([#5431](https://github.com/matrix-org/matrix-rust-sdk/pull/5431))

- [**breaking**] `Room::send_call_notification` and

  `Room::send_call_notification_if_needed` have been removed, since the event

  type they send is outdated, and `Client` is not actually supposed to be able

  to join MatrixRTC sessions (yet). In practice, users of these methods probably

  already rely on another MatrixRTC implementation to participate in sessions,

  and such an implementation should be capable of sending notifications itself.

  ([#5452](https://github.com/matrix-org/matrix-rust-sdk/pull/5452))

### Bugfix

- The event handlers APIs now properly support events whose type is not fully

  statically-known. Before, those events would never trigger an event handler.

  ([#5444](https://github.com/matrix-org/matrix-rust-sdk/pull/5444))

- All HTTP requests now have a default `read_timeout` of 60s, which means

  they'll disconnect if the connection stalls.

`RequestConfig::timeout` is now optional and can be disabled on a per-request

basis. This will be done for the requests used to download media, so they don't

get cancelled after the default 30s timeout for no good reason.

([#5437](https://github.com/matrix-org/matrix-rust-sdk/pull/5437))

## [0.13.0] - 2025-07-10

### Security fixes

- Fix SQL injection vulnerability in `EventCache`

  ([d0c0100](https://github.com/matrix-org/matrix-rust-sdk/commit/d0c01006e4808db5eb96ad5c496416f284d8bd3c),

  Moderate, [CVE-2025-53549](https://www.cve.org/CVERecord?id=CVE-2025-53549),

  [GHSA-275g-g844-73jh](https://github.com/matrix-org/matrix-rust-sdk/security/advisories/GHSA-275g-g844-73jh))

### Bug fixes

- `Room.leave()` will now attempt to leave all reachable predecessors too.

  ([#5381](https://github.com/matrix-org/matrix-rust-sdk/pull/5381))

- When joining a room via `Client::join_room_by_id()`, if the client has

  `enable_share_history_on_invite` enabled, we will correctly check for received

  room key bundles. Previously this was only done when calling `Room::join`.

  ([#5043](https://github.com/matrix-org/matrix-rust-sdk/pull/5043))

- `m.room.avatar` has been added as required state for sliding sync until

  [the existing backend issue](https://github.com/element-hq/synapse/issues/18598)

causing deleted room avatars to not be flagged is fixed.

([#5293](https://github.com/matrix-org/matrix-rust-sdk/pull/5293))

### Features

- Add `Client::supported_versions()`, which returns the results of both

  `Client::server_versions()` and `Client::unstable_features()` with a single

  call. ([#5357](https://github.com/matrix-org/matrix-rust-sdk/pull/5357))

- `WidgetDriver::send_to_device` Now supports sending encrypted to-device

  messages. ([#5252](https://github.com/matrix-org/matrix-rust-sdk/pull/5252))

- `Client::add_event_handler`: Set `Option<EncryptionInfo>` in

  `EventHandlerData` for to-device messages. If the to-device message was

  encrypted, the `EncryptionInfo` will be set. If it is `None` the message was

  sent in clear.

  ([#5099](https://github.com/matrix-org/matrix-rust-sdk/pull/5099))

- `EventCache::subscribe_to_room_generic_updates` is added to subscribe to _all_

  room updates without having to subscribe to all rooms individually

  ([#5247](https://github.com/matrix-org/matrix-rust-sdk/pull/5247))