Merge d3fcc122eb into 9c014a9045

Clarify SAS commitment calculation (#2344 )
Signed-off-by: tusooa <tusooa@kazv.moe> Co-authored-by: Richard van der Hoff <1389908+richvdh@users.noreply.github.com>
2026-04-08 04:14:13 +02:00 · 2026-03-31 23:21:19 +01:00 · 2026-03-31 22:20:49 +00:00 · 2026-03-26 11:48:21 -06:00 · 2026-03-26 09:31:21 -06:00 · 2026-03-26 09:29:23 -06:00
60 changed files with 133 additions and 61 deletions
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@ -28,7 +28,7 @@ jobs:

      # Ensure npm 11.5.1 or later is installed
      - name: Update npm
-        run: npm install -g npm@latest
+        run: sudo npm install -g npm@latest

      - name: 🔨 Install dependencies
        run: "yarn install --frozen-lockfile"
--- a/changelogs/appendices/newsfragments/2307.clarification
+++ b/changelogs/appendices/newsfragments/2307.clarification
@ -1 +0,0 @@
-Add identifier pronunciation guidelines. Contributed by @HarHarLinks.
--- a/changelogs/application_service/newsfragments/2330.clarification
+++ b/changelogs/application_service/newsfragments/2330.clarification
@ -1 +0,0 @@
-Fix various typos throughout the specification.
--- a/changelogs/client_server/newsfragments/2270.feature
+++ b/changelogs/client_server/newsfragments/2270.feature
@ -1 +0,0 @@
-Add the account management capabilities for the OAuth 2.0 authentication API, as per [MSC4191](https://github.com/matrix-org/matrix-spec-proposals/pull/4191).
--- a/changelogs/client_server/newsfragments/2272.feature
+++ b/changelogs/client_server/newsfragments/2272.feature
@ -1 +0,0 @@
-Add OAuth 2.0 aware clients, as per [MSC3824](https://github.com/matrix-org/matrix-spec-proposals/pull/3824).
--- a/changelogs/client_server/newsfragments/2277.clarification
+++ b/changelogs/client_server/newsfragments/2277.clarification
@ -1,3 +0,0 @@
-The optional `submit_url` response parameter of the `/requestToken` endpoints uses the same request
-and response parameters and error codes as the Identity Service API's `POST /_matrix/identity/v2/validate/email/submitToken`,
-as per [MSC4183](https://github.com/matrix-org/matrix-spec-proposals/pull/4183).
--- a/changelogs/client_server/newsfragments/2278.feature
+++ b/changelogs/client_server/newsfragments/2278.feature
@ -1 +0,0 @@
-Add administrator endpoints to lock and suspend server-local users and add the `m.account_management` capability, as per [MSC4323](https://github.com/matrix-org/matrix-spec-proposals/pull/4323).
--- a/changelogs/client_server/newsfragments/2278.new.1
+++ b/changelogs/client_server/newsfragments/2278.new.1
@ -1 +0,0 @@
-Add `GET /_matrix/client/v1/admin/suspend/{userId}`, as per [MSC4323](https://github.com/matrix-org/matrix-spec-proposals/pull/4323).
--- a/changelogs/client_server/newsfragments/2278.new.2
+++ b/changelogs/client_server/newsfragments/2278.new.2
@ -1 +0,0 @@
-Add `PUT /_matrix/client/v1/admin/suspend/{userId}`, as per [MSC4323](https://github.com/matrix-org/matrix-spec-proposals/pull/4323).
--- a/changelogs/client_server/newsfragments/2278.new.3
+++ b/changelogs/client_server/newsfragments/2278.new.3
@ -1 +0,0 @@
-Add `GET /_matrix/client/v1/admin/lock/{userId}`, as per [MSC4323](https://github.com/matrix-org/matrix-spec-proposals/pull/4323).
--- a/changelogs/client_server/newsfragments/2278.new.4
+++ b/changelogs/client_server/newsfragments/2278.new.4
@ -1 +0,0 @@
-Add `PUT /_matrix/client/v1/admin/lock/{userId}`, as per [MSC4323](https://github.com/matrix-org/matrix-spec-proposals/pull/4323).
--- a/changelogs/client_server/newsfragments/2280.clarification
+++ b/changelogs/client_server/newsfragments/2280.clarification
@ -1 +0,0 @@
-Update non-historic mentions of matrix-doc repo to matrix-spec/-proposals. Contributed by @HarHarLinks.
--- a/changelogs/client_server/newsfragments/2283.clarification
+++ b/changelogs/client_server/newsfragments/2283.clarification
@ -1 +0,0 @@
-Remove unintended TeX formatting. Contributed by @HarHarLinks.
--- a/changelogs/client_server/newsfragments/2291.feature
+++ b/changelogs/client_server/newsfragments/2291.feature
@ -1 +0,0 @@
-Add `m.recent_emoji` account data event to track recently used emoji as per [MSC4356](https://github.com/matrix-org/matrix-spec-proposals/pull/4356).
--- a/changelogs/client_server/newsfragments/2292.feature
+++ b/changelogs/client_server/newsfragments/2292.feature
@ -1 +0,0 @@
-Add `m.forget_forced_upon_leave` capability for servers to transparently auto-forget rooms that the user leaves as per [MSC4267](https://github.com/matrix-org/matrix-spec-proposals/pull/4267).
--- a/changelogs/client_server/newsfragments/2298.feature
+++ b/changelogs/client_server/newsfragments/2298.feature
@ -1 +0,0 @@
-Add support for `m.room.redaction` events at the `PUT /rooms/{roomId}/send/{eventType}/{txnId}` endpoint, as per [MSC4169](https://github.com/matrix-org/matrix-spec-proposals/pull/4169).
--- a/changelogs/client_server/newsfragments/2299.feature
+++ b/changelogs/client_server/newsfragments/2299.feature
@ -1 +0,0 @@
-Clients supporting the `ol` HTML element must also support the `start` attribute, as per [MSC4313](https://github.com/matrix-org/matrix-spec-proposals/pull/4313).
--- a/changelogs/client_server/newsfragments/2301.feature
+++ b/changelogs/client_server/newsfragments/2301.feature
@ -1 +0,0 @@
-Add recommendation about excluding non-cross-signed devices from encrypted conversations, as per [MSC4153](https://github.com/matrix-org/matrix-spec-proposals/pull/4153).
--- a/changelogs/client_server/newsfragments/2304.clarification
+++ b/changelogs/client_server/newsfragments/2304.clarification
@ -1 +0,0 @@
-Clarify the requiredness of `event_id` in `predecessor`.
--- a/changelogs/client_server/newsfragments/2305.feature
+++ b/changelogs/client_server/newsfragments/2305.feature
@ -1 +0,0 @@
-Add invite blocking, as per [MSC4380](https://github.com/matrix-org/matrix-spec-proposals/pull/4380).
--- a/changelogs/client_server/newsfragments/2306.clarification
+++ b/changelogs/client_server/newsfragments/2306.clarification
@ -1 +0,0 @@
-Clarify terminology for keys in cross-signing module.
--- a/changelogs/client_server/newsfragments/2311.feature
+++ b/changelogs/client_server/newsfragments/2311.feature
@ -1 +0,0 @@
-`/_matrix/client/v3/rooms/{roomId}/report` and `/_matrix/client/v3/rooms/{roomId}/report/{eventId}` may respond with HTTP 200 regardless of the reported subject's existence or add a random delay when generating responses as per [MSC4277](https://github.com/matrix-org/matrix-spec-proposals/pull/4277).
--- a/changelogs/client_server/newsfragments/2311.removal
+++ b/changelogs/client_server/newsfragments/2311.removal
@ -1 +0,0 @@
-The `score` request parameter on `/_matrix/client/v3/rooms/{roomId}/report/{eventId}` was removed as per [MSC4277](https://github.com/matrix-org/matrix-spec-proposals/pull/4277).
--- a/changelogs/client_server/newsfragments/2315.feature
+++ b/changelogs/client_server/newsfragments/2315.feature
@ -1 +0,0 @@
-Add `M_USER_LIMIT_EXCEEDED` common error code, as per [MSC4335](https://github.com/matrix-org/matrix-spec-proposals/pull/4335).
--- a/changelogs/client_server/newsfragments/2316.clarification
+++ b/changelogs/client_server/newsfragments/2316.clarification
@ -1 +0,0 @@
-Add 404 responses to the OpenAPI of `GET /login` and `GET /auth_metadata` endpoints. The responses were already defined in text but not written in OpenAPI.
--- a/changelogs/client_server/newsfragments/2318.clarification
+++ b/changelogs/client_server/newsfragments/2318.clarification
@ -1 +0,0 @@
-Fix various typos throughout the specification. Contributed by @HarHarLinks.
--- a/changelogs/client_server/newsfragments/2320.feature
+++ b/changelogs/client_server/newsfragments/2320.feature
@ -1 +0,0 @@
-Add the OAuth 2.0 Device Authorization Grant (RFC 8628) as a supported grant type, as per [MSC4341](https://github.com/matrix-org/matrix-spec-proposals/pull/4341).
--- a/changelogs/client_server/newsfragments/2324.clarification
+++ b/changelogs/client_server/newsfragments/2324.clarification
@ -1 +0,0 @@
-Clarified attachment encryption to require secure generation of keys and hash verification.
--- a/changelogs/client_server/newsfragments/2328.feature
+++ b/changelogs/client_server/newsfragments/2328.feature
@ -1 +0,0 @@
-Add the `is_animated` flag to the `info` object of the `m.image` msgtype and the `m.sticker` event, as per [MSC4230](https://github.com/matrix-org/matrix-spec-proposals/pull/4230).
--- a/changelogs/client_server/newsfragments/2332.feature
+++ b/changelogs/client_server/newsfragments/2332.feature
@ -1 +0,0 @@
-Add a "Policy Servers" module, as per [MSC4284](https://github.com/matrix-org/matrix-spec-proposals/pull/4284).
--- a/changelogs/client_server/newsfragments/2336.clarification
+++ b/changelogs/client_server/newsfragments/2336.clarification
@ -1 +0,0 @@
-Order the common and other error codes alphabetically and remove duplicate `M_THREEPID_IN_USE` definition.
--- a/changelogs/client_server/newsfragments/2337.clarification
+++ b/changelogs/client_server/newsfragments/2337.clarification
@ -1 +0,0 @@
-Fix various typos throughout the specification.
--- a/changelogs/client_server/newsfragments/2338.feature
+++ b/changelogs/client_server/newsfragments/2338.feature
@ -1 +0,0 @@
-Add the `is_animated` flag to the `info` object of the `m.image` msgtype and the `m.sticker` event, as per [MSC4230](https://github.com/matrix-org/matrix-spec-proposals/pull/4230).
--- a/changelogs/client_server/newsfragments/2344.clarification
+++ b/changelogs/client_server/newsfragments/2344.clarification
@ -0,0 +1 @@
+Clarify SAS commitment calculation for `m.key.verification.accept` messages.
--- a/changelogs/identity_service/newsfragments/2277.clarification
+++ b/changelogs/identity_service/newsfragments/2277.clarification
@ -1,3 +0,0 @@
-Clarify the error codes that can be returned with a 400 HTTP status code by the `POST /_matrix/identity/v2/validate/email/submitToken`
-and `POST /_matrix/identity/v2/validate/msisdn/submitToken` endpoints, introducing the `M_TOKEN_INCORRECT`
-error code, as per [MSC4183](https://github.com/matrix-org/matrix-spec-proposals/pull/4183).
--- a/changelogs/identity_service/newsfragments/2336.clarification
+++ b/changelogs/identity_service/newsfragments/2336.clarification
@ -1 +0,0 @@
-Order the standard error codes alphabetically.
--- a/changelogs/internal/newsfragments/2222.clarification
+++ b/changelogs/internal/newsfragments/2222.clarification
@ -1 +0,0 @@
-Clarify vendor prefixing requirements.
--- a/changelogs/internal/newsfragments/2275.clarification
+++ b/changelogs/internal/newsfragments/2275.clarification
@ -1 +0,0 @@
-Auto-create draft releases when building release tags.
--- a/changelogs/internal/newsfragments/2276.feature
+++ b/changelogs/internal/newsfragments/2276.feature
@ -1 +0,0 @@
-Include the spec release version in the filenames in the tarballs generated by CI.
--- a/changelogs/internal/newsfragments/2282.clarification
+++ b/changelogs/internal/newsfragments/2282.clarification
@ -1 +0,0 @@
-Replace the Twitter link in the footer with our BlueSky and Mastodon socials.
--- a/changelogs/internal/newsfragments/2287.clarification
+++ b/changelogs/internal/newsfragments/2287.clarification
@ -1 +0,0 @@
-Upgrade to docsy v0.13.0.
--- a/changelogs/internal/newsfragments/2289.clarification
+++ b/changelogs/internal/newsfragments/2289.clarification
@ -1 +0,0 @@
-Updates to the release documentation.
--- a/changelogs/internal/newsfragments/2290.clarification
+++ b/changelogs/internal/newsfragments/2290.clarification
@ -1 +0,0 @@
-Remove unused leftover CSS files.
--- a/changelogs/internal/newsfragments/2317.clarification
+++ b/changelogs/internal/newsfragments/2317.clarification
@ -1 +0,0 @@
-Update the footer social links to match matrix.org. Contributed by @HarHarLinks.
--- a/changelogs/internal/newsfragments/2318.clarification
+++ b/changelogs/internal/newsfragments/2318.clarification
@ -1 +0,0 @@
-Fix various typos throughout the specification. Contributed by @HarHarLinks.
--- a/changelogs/internal/newsfragments/2323.clarification
+++ b/changelogs/internal/newsfragments/2323.clarification
@ -1 +0,0 @@
-Render error code sections as definition lists to improve readability.
--- a/changelogs/internal/newsfragments/2343.clarification
+++ b/changelogs/internal/newsfragments/2343.clarification
@ -0,0 +1 @@
+Update and fix GitHub Actions.
--- a/changelogs/room_versions/newsfragments/2297.clarification
+++ b/changelogs/room_versions/newsfragments/2297.clarification
@ -1 +0,0 @@
-Clarify meaning of floating-point powerlevels.
--- a/changelogs/room_versions/newsfragments/2303.clarification
+++ b/changelogs/room_versions/newsfragments/2303.clarification
@ -1 +0,0 @@
-Remove the post-1.16 release note for room version 12.
--- a/changelogs/server_server/newsfragments/2191.clarification
+++ b/changelogs/server_server/newsfragments/2191.clarification
@ -1 +0,0 @@
-Clarify what the `minimum_valid_until_ts` field means when it is set in key queries.
--- a/changelogs/server_server/newsfragments/2284.clarification
+++ b/changelogs/server_server/newsfragments/2284.clarification
@ -1 +0,0 @@
-Specify validation for PDUs passed to and returned from federation membership endpoints.
--- a/changelogs/server_server/newsfragments/2288.clarification
+++ b/changelogs/server_server/newsfragments/2288.clarification
@ -1 +0,0 @@
-Specify that callers of `/_matrix/federation/v1/openid/userinfo` must validate the returned user ID.
--- a/changelogs/server_server/newsfragments/2300.clarification
+++ b/changelogs/server_server/newsfragments/2300.clarification
@ -1 +0,0 @@
-Change `m.signing_update` typo to `m.signing_key_update`. Contributed by @velikopter
--- a/changelogs/server_server/newsfragments/2319.removal
+++ b/changelogs/server_server/newsfragments/2319.removal
@ -1 +0,0 @@
-Remove `/v1/send_join` and `/v1/send_leave`, as per [MSC4376](https://github.com/matrix-org/matrix-spec-proposals/pull/4376).
--- a/changelogs/server_server/newsfragments/2329.clarification
+++ b/changelogs/server_server/newsfragments/2329.clarification
@ -1 +0,0 @@
-Add link to JSON signing algorithm in server-server auth section for clarity. Contributed by @thetayloredman.
--- a/changelogs/server_server/newsfragments/2332.feature
+++ b/changelogs/server_server/newsfragments/2332.feature
@ -1 +0,0 @@
-Add a concept of "Policy Servers", as per [MSC4284](https://github.com/matrix-org/matrix-spec-proposals/pull/4284).
--- a/changelogs/server_server/newsfragments/2338.clarification
+++ b/changelogs/server_server/newsfragments/2338.clarification
@ -1 +0,0 @@
-Fix various typos throughout the specification.
--- a/config/_default/hugo.toml
+++ b/config/_default/hugo.toml
@ -76,7 +76,7 @@ current_version_url = "https://spec.matrix.org/latest"
 # The following is used when status = "stable", and is displayed in various UI elements on a released version
 # of the spec.
 #major = "1"
-#minor = "17"
+#minor = "18"

 [[params.versions]]
 # We must include this parameter to enable docsy's version picker in the navbar. The picker
--- a/content/changelog/v1.18.md
+++ b/content/changelog/v1.18.md
@ -0,0 +1,127 @@
+---
+title: v1.18 Changelog
+linkTitle: v1.18
+type: docs
+layout: changelog
+outputs:
+  - html
+  - checklist
+date: 2026-03-25
+---
+
+## Client-Server API
+
+**New Endpoints**
+
+- Add `GET /_matrix/client/v1/admin/suspend/{userId}`, as per [MSC4323](https://github.com/matrix-org/matrix-spec-proposals/pull/4323). ([#2278](https://github.com/matrix-org/matrix-spec/issues/2278))
+- Add `PUT /_matrix/client/v1/admin/suspend/{userId}`, as per [MSC4323](https://github.com/matrix-org/matrix-spec-proposals/pull/4323). ([#2278](https://github.com/matrix-org/matrix-spec/issues/2278))
+- Add `GET /_matrix/client/v1/admin/lock/{userId}`, as per [MSC4323](https://github.com/matrix-org/matrix-spec-proposals/pull/4323). ([#2278](https://github.com/matrix-org/matrix-spec/issues/2278))
+- Add `PUT /_matrix/client/v1/admin/lock/{userId}`, as per [MSC4323](https://github.com/matrix-org/matrix-spec-proposals/pull/4323). ([#2278](https://github.com/matrix-org/matrix-spec/issues/2278))
+
+**Removed Endpoints**
+
+- The `score` request parameter on `/_matrix/client/v3/rooms/{roomId}/report/{eventId}` was removed as per [MSC4277](https://github.com/matrix-org/matrix-spec-proposals/pull/4277). ([#2311](https://github.com/matrix-org/matrix-spec/issues/2311))
+
+**Backwards Compatible Changes**
+
+- Add the account management capabilities for the OAuth 2.0 authentication API, as per [MSC4191](https://github.com/matrix-org/matrix-spec-proposals/pull/4191). ([#2270](https://github.com/matrix-org/matrix-spec/issues/2270))
+- Add OAuth 2.0 aware clients, as per [MSC3824](https://github.com/matrix-org/matrix-spec-proposals/pull/3824). ([#2272](https://github.com/matrix-org/matrix-spec/issues/2272))
+- Add administrator endpoints to lock and suspend server-local users and add the `m.account_management` capability, as per [MSC4323](https://github.com/matrix-org/matrix-spec-proposals/pull/4323). ([#2278](https://github.com/matrix-org/matrix-spec/issues/2278))
+- Add `m.recent_emoji` account data event to track recently used emoji as per [MSC4356](https://github.com/matrix-org/matrix-spec-proposals/pull/4356). ([#2291](https://github.com/matrix-org/matrix-spec/issues/2291))
+- Add `m.forget_forced_upon_leave` capability for servers to transparently auto-forget rooms that the user leaves as per [MSC4267](https://github.com/matrix-org/matrix-spec-proposals/pull/4267). ([#2292](https://github.com/matrix-org/matrix-spec/issues/2292))
+- Add support for `m.room.redaction` events at the `PUT /rooms/{roomId}/send/{eventType}/{txnId}` endpoint, as per [MSC4169](https://github.com/matrix-org/matrix-spec-proposals/pull/4169). ([#2298](https://github.com/matrix-org/matrix-spec/issues/2298))
+- Clients supporting the `ol` HTML element must also support the `start` attribute, as per [MSC4313](https://github.com/matrix-org/matrix-spec-proposals/pull/4313). ([#2299](https://github.com/matrix-org/matrix-spec/issues/2299))
+- Add recommendation about excluding non-cross-signed devices from encrypted conversations, as per [MSC4153](https://github.com/matrix-org/matrix-spec-proposals/pull/4153). ([#2301](https://github.com/matrix-org/matrix-spec/issues/2301))
+- Add invite blocking, as per [MSC4380](https://github.com/matrix-org/matrix-spec-proposals/pull/4380). ([#2305](https://github.com/matrix-org/matrix-spec/issues/2305))
+- `/_matrix/client/v3/rooms/{roomId}/report` and `/_matrix/client/v3/rooms/{roomId}/report/{eventId}` may respond with HTTP 200 regardless of the reported subject's existence or add a random delay when generating responses as per [MSC4277](https://github.com/matrix-org/matrix-spec-proposals/pull/4277). ([#2311](https://github.com/matrix-org/matrix-spec/issues/2311))
+- Add `M_USER_LIMIT_EXCEEDED` common error code, as per [MSC4335](https://github.com/matrix-org/matrix-spec-proposals/pull/4335). ([#2315](https://github.com/matrix-org/matrix-spec/issues/2315))
+- Add the OAuth 2.0 Device Authorization Grant (RFC 8628) as a supported grant type, as per [MSC4341](https://github.com/matrix-org/matrix-spec-proposals/pull/4341). ([#2320](https://github.com/matrix-org/matrix-spec/issues/2320))
+- Add the `is_animated` flag to the `info` object of the `m.image` msgtype and the `m.sticker` event, as per [MSC4230](https://github.com/matrix-org/matrix-spec-proposals/pull/4230). ([#2328](https://github.com/matrix-org/matrix-spec/issues/2328), [#2338](https://github.com/matrix-org/matrix-spec/issues/2338))
+- Add a "Policy Servers" module, as per [MSC4284](https://github.com/matrix-org/matrix-spec-proposals/pull/4284). ([#2332](https://github.com/matrix-org/matrix-spec/issues/2332))
+
+**Spec Clarifications**
+
+- The optional `submit_url` response parameter of the `/requestToken` endpoints uses the same request and response parameters and error codes as the Identity Service API's `POST /_matrix/identity/v2/validate/email/submitToken`, as per [MSC4183](https://github.com/matrix-org/matrix-spec-proposals/pull/4183). ([#2277](https://github.com/matrix-org/matrix-spec/issues/2277))
+- Update non-historic mentions of matrix-doc repo to matrix-spec/-proposals. Contributed by @HarHarLinks. ([#2280](https://github.com/matrix-org/matrix-spec/issues/2280))
+- Remove unintended TeX formatting. Contributed by @HarHarLinks. ([#2283](https://github.com/matrix-org/matrix-spec/issues/2283))
+- Clarify the requiredness of `event_id` in `predecessor`. ([#2304](https://github.com/matrix-org/matrix-spec/issues/2304))
+- Clarify terminology for keys in cross-signing module. ([#2306](https://github.com/matrix-org/matrix-spec/issues/2306))
+- Add 404 responses to the OpenAPI of `GET /login` and `GET /auth_metadata` endpoints. The responses were already defined in text but not written in OpenAPI. ([#2316](https://github.com/matrix-org/matrix-spec/issues/2316))
+- Fix various typos throughout the specification. Contributed by @HarHarLinks. ([#2318](https://github.com/matrix-org/matrix-spec/issues/2318))
+- Clarified attachment encryption to require secure generation of keys and hash verification. ([#2324](https://github.com/matrix-org/matrix-spec/issues/2324))
+- Order the common and other error codes alphabetically and remove duplicate `M_THREEPID_IN_USE` definition. ([#2336](https://github.com/matrix-org/matrix-spec/issues/2336))
+- Fix various typos throughout the specification. ([#2337](https://github.com/matrix-org/matrix-spec/issues/2337))
+
+
+## Server-Server API
+
+**Removed Endpoints**
+
+- Remove `/v1/send_join` and `/v1/send_leave`, as per [MSC4376](https://github.com/matrix-org/matrix-spec-proposals/pull/4376). ([#2319](https://github.com/matrix-org/matrix-spec/issues/2319))
+
+**Backwards Compatible Changes**
+
+- Add a concept of "Policy Servers", as per [MSC4284](https://github.com/matrix-org/matrix-spec-proposals/pull/4284). ([#2332](https://github.com/matrix-org/matrix-spec/issues/2332))
+
+**Spec Clarifications**
+
+- Clarify what the `minimum_valid_until_ts` field means when it is set in key queries. ([#2191](https://github.com/matrix-org/matrix-spec/issues/2191))
+- Specify validation for PDUs passed to and returned from federation membership endpoints. ([#2284](https://github.com/matrix-org/matrix-spec/issues/2284))
+- Specify that callers of `/_matrix/federation/v1/openid/userinfo` must validate the returned user ID. ([#2288](https://github.com/matrix-org/matrix-spec/issues/2288))
+- Change `m.signing_update` typo to `m.signing_key_update`. Contributed by @velikopter ([#2300](https://github.com/matrix-org/matrix-spec/issues/2300))
+- Add link to JSON signing algorithm in server-server auth section for clarity. Contributed by @thetayloredman. ([#2329](https://github.com/matrix-org/matrix-spec/issues/2329))
+- Fix various typos throughout the specification. ([#2338](https://github.com/matrix-org/matrix-spec/issues/2338))
+
+
+## Application Service API
+
+**Spec Clarifications**
+
+- Fix various typos throughout the specification. ([#2330](https://github.com/matrix-org/matrix-spec/issues/2330))
+
+
+## Identity Service API
+
+**Spec Clarifications**
+
+- Clarify the error codes that can be returned with a 400 HTTP status code by the `POST /_matrix/identity/v2/validate/email/submitToken` and `POST /_matrix/identity/v2/validate/msisdn/submitToken` endpoints, introducing the `M_TOKEN_INCORRECT` error code, as per [MSC4183](https://github.com/matrix-org/matrix-spec-proposals/pull/4183). ([#2277](https://github.com/matrix-org/matrix-spec/issues/2277))
+- Order the standard error codes alphabetically. ([#2336](https://github.com/matrix-org/matrix-spec/issues/2336))
+
+
+## Push Gateway API
+
+No significant changes.
+
+
+## Room Versions
+
+**Spec Clarifications**
+
+- Clarify meaning of floating-point powerlevels. ([#2297](https://github.com/matrix-org/matrix-spec/issues/2297))
+- Remove the post-1.16 release note for room version 12. ([#2303](https://github.com/matrix-org/matrix-spec/issues/2303))
+
+
+## Appendices
+
+**Spec Clarifications**
+
+- Add identifier pronunciation guidelines. Contributed by @HarHarLinks. ([#2307](https://github.com/matrix-org/matrix-spec/issues/2307))
+
+
+## Internal Changes/Tooling
+
+**Backwards Compatible Changes**
+
+- Include the spec release version in the filenames in the tarballs generated by CI. ([#2276](https://github.com/matrix-org/matrix-spec/issues/2276))
+
+**Spec Clarifications**
+
+- Clarify vendor prefixing requirements. ([#2222](https://github.com/matrix-org/matrix-spec/issues/2222))
+- Auto-create draft releases when building release tags. ([#2275](https://github.com/matrix-org/matrix-spec/issues/2275))
+- Replace the Twitter link in the footer with our BlueSky and Mastodon socials. ([#2282](https://github.com/matrix-org/matrix-spec/issues/2282))
+- Upgrade to docsy v0.13.0. ([#2287](https://github.com/matrix-org/matrix-spec/issues/2287))
+- Updates to the release documentation. ([#2289](https://github.com/matrix-org/matrix-spec/issues/2289))
+- Remove unused leftover CSS files. ([#2290](https://github.com/matrix-org/matrix-spec/issues/2290))
+- Update the footer social links to match matrix.org. Contributed by @HarHarLinks. ([#2317](https://github.com/matrix-org/matrix-spec/issues/2317))
+- Fix various typos throughout the specification. Contributed by @HarHarLinks. ([#2318](https://github.com/matrix-org/matrix-spec/issues/2318))
+- Render error code sections as definition lists to improve readability. ([#2323](https://github.com/matrix-org/matrix-spec/issues/2323))
--- a/data/event-schemas/schema/m.key.verification.accept.yaml
+++ b/data/event-schemas/schema/m.key.verification.accept.yaml
@ -44,7 +44,8 @@ properties:
        description: |-
          The hash (encoded as unpadded base64) of the concatenation of the device's
          ephemeral public key (encoded as unpadded base64) and the canonical JSON
-          representation of the `m.key.verification.start` message.
+          representation of the `content` object of the `m.key.verification.start`
+          message.
      m.relates_to:
        $ref: m.key.verification.m.relates_to.yaml
    required:
Author	SHA1	Message	Date
timedout	6a0765a2e4	Merge `d3fcc122eb` into `9c014a9045`	2026-03-31 23:21:19 +01:00
No.	9c014a9045	Clarify SAS commitment calculation (#2344 ) Signed-off-by: tusooa <tusooa@kazv.moe> Co-authored-by: Richard van der Hoff <1389908+richvdh@users.noreply.github.com>	2026-03-31 22:20:49 +00:00
Travis Ralston	2192bfa996	Try to fix npm release (#2343 ) Some checks failed Spec / 🔎 Validate OpenAPI specifications (push) Has been cancelled Details Spec / 🔎 Check Event schema examples (push) Has been cancelled Details Spec / 🔎 Check OpenAPI definitions examples (push) Has been cancelled Details Spec / 🔎 Check JSON Schemas inline examples (push) Has been cancelled Details Spec / ⚙️ Calculate baseURL for later jobs (push) Has been cancelled Details Spec / 📢 Run towncrier for changelog (push) Has been cancelled Details Spell Check / Spell Check with Typos (push) Has been cancelled Details Spec / 🐍 Build OpenAPI definitions (push) Has been cancelled Details Spec / 📖 Build the spec (push) Has been cancelled Details Spec / 🔎 Validate generated HTML (push) Has been cancelled Details Spec / 📖 Build the historical backup spec (push) Has been cancelled Details Spec / Create release (push) Has been cancelled Details * Make npm a sudo * changelog	2026-03-26 11:48:21 -06:00
Travis Ralston	52e5af5f98	become unstable	2026-03-26 09:31:21 -06:00
Travis Ralston	c346686b0d	Matrix 1.18	2026-03-26 09:29:23 -06:00
				`@ -1 +0,0 @@`
				`Add identifier pronunciation guidelines. Contributed by @HarHarLinks.`
				`@ -1 +0,0 @@`
				`Fix various typos throughout the specification.`
				`@ -1 +0,0 @@`
				`Add the account management capabilities for the OAuth 2.0 authentication API, as per [MSC4191](https://github.com/matrix-org/matrix-spec-proposals/pull/4191).`
				`@ -1 +0,0 @@`
				`Add OAuth 2.0 aware clients, as per [MSC3824](https://github.com/matrix-org/matrix-spec-proposals/pull/3824).`
				`@ -1 +0,0 @@`
				Add administrator endpoints to lock and suspend server-local users and add the `m.account_management` capability, as per [MSC4323](https://github.com/matrix-org/matrix-spec-proposals/pull/4323).
				`@ -1 +0,0 @@`
				Add `GET /_matrix/client/v1/admin/suspend/{userId}`, as per [MSC4323](https://github.com/matrix-org/matrix-spec-proposals/pull/4323).
				`@ -1 +0,0 @@`
				Add `PUT /_matrix/client/v1/admin/suspend/{userId}`, as per [MSC4323](https://github.com/matrix-org/matrix-spec-proposals/pull/4323).
				`@ -1 +0,0 @@`
				Add `GET /_matrix/client/v1/admin/lock/{userId}`, as per [MSC4323](https://github.com/matrix-org/matrix-spec-proposals/pull/4323).
				`@ -1 +0,0 @@`
				Add `PUT /_matrix/client/v1/admin/lock/{userId}`, as per [MSC4323](https://github.com/matrix-org/matrix-spec-proposals/pull/4323).