chore(deps): bump maunium.net/go/mautrix from 0.17.0 to 0.25.1

[dependabot]

Bumps maunium.net/go/mautrix from 0.17.0 to 0.25.1.

Release notes

Sourced from maunium.net/go/mautrix's releases.

v0.25.1

• (client) Fixed HTTP method of delete devices API call (thanks to @​fmseals in #393).
• (client) Added wrappers for MSC4323: User suspension & locking endpoints (thanks to @​nexy7574 in #407).
• (client) Stabilized support for extensible profiles.
• (client) Stabilized support for state_after in sync.
• (client) Removed deprecated MSC2716 requests.
• (crypto) Added fallback to ensure m.relates_to is always copied even if the content struct doesn't implement Relatable.
• (crypto) Changed olm unwedging to ignore newly created sessions if they haven't been used successfully in either direction.
• (federation) Added utilities for generating, parsing, validating and authorizing PDUs.
  • Note: the new PDU code depends on GOEXPERIMENT=jsonv2
• (event) Added is_animated flag from MSC4230 to file info.
• (event) Added types for MSC4332: In-room bot commands.
• (event) Added missing poll end event type for MSC3381.
• (appservice) Fixed URLs not being escaped properly when using unix socket for homeserver connections.
• (format) Added more helpers for forming markdown links.
• (event,bridgev2) Added support for Beeper's disappearing message state event.
• (bridgev2) Redesigned group creation interface and added support in commands and provisioning API.
• (bridgev2) Added GetEvent to Matrix interface to allow network connectors to get an old event. The method is best effort only, as some configurations don't allow fetching old events.
• (bridgev2) Added shared logic for provisioning that can be reused by the API, commands and other sources.
• (bridgev2) Fixed mentions and URL previews not being copied over when caption and media are merged.
• (bridgev2) Removed config option to change provisioning API prefix, which had already broken in the previous release.

v0.25.0

• Bumped minimum Go version to 1.24.
• Breaking change (appservice,bridgev2,federation) Replaced gorilla/mux with standard library ServeMux.
• (client,bridgev2) Added support for creator power in room v12.
• (client) Added option to not set User-Agent header for improved Wasm compatibility.
• (bridgev2) Added support for following tombstones.
• (bridgev2) Added interface for getting arbitrary state event from Matrix.
• (bridgev2) Added batching to disappearing message queue to ensure it doesn't use too many resources even if there are a large number of messages.
• (bridgev2/commands) Added support for canceling QR login with cancel command.
• (client) Added option to override HTTP client used for .well-known resolution.
• (crypto/backup) Added method for encrypting key backup session without private keys.
• (event->id) Moved room version type and constants to id package.
• (bridgev2) Bots in DM portals will now be added to the functional members state event to hide them from the room name calculation.
• (bridgev2) Changed message delete handling to ignore "delete for me" events if there are multiple Matrix users in the room.
• (format/htmlparser) Changed text processing to collapse multiple spaces into one when outside pre/code tags.
• (format/htmlparser) Removed link suffix in plaintext output when link text is only missing protocol part of href.
  • e.g. <a href="https://example.com">example.com</a> will turn into example.com rather than example.com (https://example.com)
• (appservice) Switched appservice websockets from gorilla/websocket to coder/websocket.
• (bridgev2/matrix) Fixed encryption key sharing not ignoring ghosts properly.
• (crypto/attachments) Fixed hash check when decrypting file streams.
• (crypto) Removed unnecessary AlreadyShared error in ShareGroupSession. The function will now act as if it was successful instead.

v0.24.2

... (truncated)

Changelog

Sourced from maunium.net/go/mautrix's changelog.

v0.25.1 (2025-09-16)

• (client) Fixed HTTP method of delete devices API call (thanks to @​fmseals in #393).
• (client) Added wrappers for [MSC4323]: User suspension & locking endpoints (thanks to [@​nexy7574] in #407).
• (client) Stabilized support for extensible profiles.
• (client) Stabilized support for state_after in sync.
• (client) Removed deprecated MSC2716 requests.
• (crypto) Added fallback to ensure m.relates_to is always copied even if the content struct doesn't implement Relatable.
• (crypto) Changed olm unwedging to ignore newly created sessions if they haven't been used successfully in either direction.
• (federation) Added utilities for generating, parsing, validating and authorizing PDUs.
  • Note: the new PDU code depends on GOEXPERIMENT=jsonv2
• (event) Added is_animated flag from [MSC4230] to file info.
• (event) Added types for [MSC4332]: In-room bot commands.
• (event) Added missing poll end event type for [MSC3381].
• (appservice) Fixed URLs not being escaped properly when using unix socket for homeserver connections.
• (format) Added more helpers for forming markdown links.
• (event,bridgev2) Added support for Beeper's disappearing message state event.
• (bridgev2) Redesigned group creation interface and added support in commands and provisioning API.
• (bridgev2) Added GetEvent to Matrix interface to allow network connectors to get an old event. The method is best effort only, as some configurations don't allow fetching old events.
• (bridgev2) Added shared logic for provisioning that can be reused by the API, commands and other sources.
• (bridgev2) Fixed mentions and URL previews not being copied over when caption and media are merged.
• (bridgev2) Removed config option to change provisioning API prefix, which had already broken in the previous release.

#393: mautrix/go#393 #407: mautrix/go#407 [MSC3381]: matrix-org/matrix-spec-proposals#3381 [MSC4230]: matrix-org/matrix-spec-proposals#4230 [MSC4323]: matrix-org/matrix-spec-proposals#4323 [MSC4332]: matrix-org/matrix-spec-proposals#4332

v0.25.0 (2025-08-16)

• Bumped minimum Go version to 1.24.
• Breaking change (appservice,bridgev2,federation) Replaced gorilla/mux with standard library ServeMux.
• (client,bridgev2) Added support for creator power in room v12.
• (client) Added option to not set User-Agent header for improved Wasm

... (truncated)

Commits

• c37ddcc Bump version to v0.25.1
• b5bec2e client: stabilize support for state_after
• 717c8c3 bridgev2/database: normalize disappearing settings before insert
• 3a6f20b crypto/sqlstore: ignore unused sessions in olm unwedging
• 4603a34 event: add org.matrix.msc3381.poll.end type (#412)
• 5dbab3a crypto/machine: don't clear account on Destroy()
• 87fe127 crypto/decryptolm: retry prekey decryption with goolm
• c716f30 crypto/register: don't use init in *olm packages
• 84e5d6b crypto/machine: allow canceling background context
• 69869f7 crypto: log active driver
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)