Bump maunium.net/go/mautrix from 0.27.0 to 0.28.0

[dependabot]

Bumps maunium.net/go/mautrix from 0.27.0 to 0.28.0.

Release notes

Sourced from maunium.net/go/mautrix's releases.

v0.28.0

• Breaking change (federation) Changed NewClient to take HTTP client settings as an extra parameter.
• (federation) Changed client to block requests to private IPs by default.
  • The AllowIP method can be changed to adjust the blocking behavior.
• (federation) Added DownloadMedia method.
• (event) Added Extra field to FileInfo to allow easily adding custom fields.
• (event) Added sticker source info to events (both [MSC4459] and a custom format for bridges).
• (client) Added support for server parameter in /publicRooms (thanks to @​zluudg in #497).
• (client) Added RequestRetryTrigger event, which can be used to force all in-flight requests to be interrupted and retried (e.g. in case the network connection changed).
• (crypto) Added support for bundled device keys in Olm messages introduced in Matrix v1.15.
• (crypto/canonicaljson) Added jsonv2-based implementation, which replaces the old gjson/sjson-based implementation when jsonv2 is enabled.
• (bridgev2) Added interface for importing image packs from remote networks.
• (bridgev2) Added more detail to "not logged in" error messages.
• (bridgev2) Expanded bridge_matrix_leave option to cover invite rejections in addition to actual leaves.
• (bridgev2) Changed group creation error messages to be clearer when there aren't enough members to create a group.
• (bridgev2/matrix) Changed message sending to never send unencrypted messages if encryption.require is set true even if the room is unencrypted.
• (crypto) Changed trust resolution to not trust own cross-signing master key unless the private key is available or the public key is signed by the device key.
• (bridgev2) Fixed event power levels being set incorrectly in some cases if events_default or state_default is changed in the same event.
• (bridgev2) Fixed portal deletion always failing due to context cancellation.
• (bridgev2) Fixed per-message profile fallbacks being added for events that shouldn't have it, like stickers.
• (bridgev2) Fixed some cases where backfill would start from a non-latest message.
• (crypto) Fixed dehydrated devices not passing device key validation.
• (federation/pdu) Fixed canonicalizing JSON which contains keys with code points between \uF000 and \uFFFF by switching to the crypto/canonicaljson package instead of jsonv2's standard RFC 8785 canonicalization.
• (federation/eventauth) Fixed restricted join checks (thanks to @​timedoutuk in #491).
• (federation/eventauth) Fixed creator join check in v10 rooms (thanks to @​timedoutuk in #496).
• (crypto/goolm) Fixed various small issues.

Changelog

Sourced from maunium.net/go/mautrix's changelog.

v0.28.0 (2026-05-16)

• Breaking change (federation) Changed NewClient to take HTTP client settings as an extra parameter.
• (federation) Changed client to block requests to private IPs by default.
  • The AllowIP method can be changed to adjust the blocking behavior.
• (federation) Added DownloadMedia method.
• (event) Added Extra field to FileInfo to allow easily adding custom fields.
• (event) Added sticker source info to events (both [MSC4459] and a custom format for bridges).
• (client) Added support for server parameter in /publicRooms (thanks to [@​zluudg] in #497).
• (client) Added RequestRetryTrigger event, which can be used to force all in-flight requests to be interrupted and retried (e.g. in case the network connection changed).
• (crypto) Added support for bundled device keys in Olm messages introduced in Matrix v1.15.
• (crypto/canonicaljson) Added jsonv2-based implementation, which replaces the old gjson/sjson-based implementation when jsonv2 is enabled.
• (bridgev2) Added interface for importing image packs from remote networks.
• (bridgev2) Added more detail to "not logged in" error messages.
• (bridgev2) Expanded bridge_matrix_leave option to cover invite rejections in addition to actual leaves.
• (bridgev2) Changed group creation error messages to be clearer when there aren't enough members to create a group.
• (bridgev2/matrix) Changed message sending to never send unencrypted messages if encryption.require is set true even if the room is unencrypted.
• (crypto) Changed trust resolution to not trust own cross-signing master key unless the private key is available or the public key is signed by the device key.
• (bridgev2) Fixed event power levels being set incorrectly in some cases if events_default or state_default is changed in the same event.
• (bridgev2) Fixed portal deletion always failing due to context cancellation.
• (bridgev2) Fixed per-message profile fallbacks being added for events that shouldn't have it, like stickers.
• (bridgev2) Fixed some cases where backfill would start from a non-latest message.
• (crypto) Fixed dehydrated devices not passing device key validation.
• (federation/pdu) Fixed canonicalizing JSON which contains keys with code points between \uF000 and \uFFFF by switching to the crypto/canonicaljson package instead of jsonv2's standard RFC 8785 canonicalization.
• (federation/eventauth) Fixed restricted join checks (thanks to [@​timedoutuk] in #491).
• (federation/eventauth) Fixed creator join check in v10 rooms (thanks to [@​timedoutuk] in #496).
• (crypto/goolm) Fixed various small issues.

#491: mautrix/go#491

... (truncated)

Commits

• a616b2b Bump version to v0.28.0
• c1f0359 crypto/sqlstore: add option to drop message index table for migration
• 05c4399 crypto/canonicaljson: disable old code entirely when jsonv2 is enabled
• aa12073 client: Rework network request retries (#492)
• 5fba7e3 bridgev2/matrix: skip state store query if encryption is required
• 1fb5b3c statestore: add warning log if join rules has unknown content
• de69846 crypto/devicelist: preserve existing trust state in database when revalidating
• 97d3c74 crypto/decryptmegolm: don't treat own indirect keys as implicitly trusted
• 4786197 crypto/keysharing: no-op HandleBeeperRoomKeyAck if deleting isn't enabled
• 7c09863 crypto/olm: disable cross-library tests for goolm-only builds
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Looks like maunium.net/go/mautrix is up-to-date now, so this is no longer needed.