Release 2026-06-12 - (expected chart version 5.33.0)#5265
Merged
Conversation
Master->Develop after release
* Upgrade all hasql ecosystem libraries * Wire.Postgres: Detect posgresql server restarts and reset the conn pool * Fix connection string for postgres * UserGroupStore.Postgres: Fix expected types of count hasql is more strict in parsing data now * TeamCollaboratorsStore.Postgres: Use returning instead of rows affected Rows affected actually works here, but according to docs it should only be used for update and delete statements. * Make retrying sessions and transactions an explicit choice Both sessions and transactions implement 'MonadIO' hence they can have arbitrary effects, so the user must make an explicit choice to retry these. The pipelines and statements can always be retried. * MeetingStore.Postgres: Use helpers from Wire.Postgres * UserGroupStore.Postgres: Use helpers from Wire.Postgres * TeamCollaboratorsStore.Postgres: Use helpers from Wire.Postgres * MeetingsStore.Postgres: Use helpers from Wire.Postgres
(Already fixed in https://github.com/wireapp/wire-server/releases, #5225.) Helm charts are deep-merged, so if the `domainRegistration` field is missing, the default will be used.
… and fixes" This reverts commit cfef8e6.
Update configure-federation with coturn cert guide link and fixes
…o-add-_-remove-members-to-_-from-team-if-they-are-are-conversation-admins Allow regular team members to list collaborators. Add openapi3 docs for collaborator permissions.
…-app_-end-point-_use-_post-_list-users_-instead_ Deprecate redundant "get-apps" end-point.
… pending deletes (#5234) Previous code was using 1 session per user id and conv id.
* adding support for federator-specific cert-manager issuers * ci trigger * ci trigger
--------- Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
* nix: Remove dependency on hercules-ci/gitignore.nix This is not needed since nix flakes was enabled. The pinned commit is deleted from the upstream repository so the build was broken. * flake: Update to latest nixpkgs 25.11 For dealing with rust-lang/crates.io#13482 * Regenerate outdated test certificates Set their expiry to 100 years. This fixes a failing test. --------- Co-authored-by: Sven Tennie <sven.tennie@wire.com>
This introduces the gitignoreSource Nix fix.
* UserStore.Postgres: Implement the interpreter for UserStore * brig: Allow selecting postgres storage for user * UserStore.Postgres: Allow getting deleted users * UserStore.Postgres: Make sure lookupStatus returns Deleted for deleted users * UserStore.Postgres: Makes no sense to say a deleted user is activated This makes postgres behave differently from Cassandra, but this is more correct. * UserStore.Postgres: Keep track of team id of a deleted user * Test 6 letter passwords in unit tests * More fixes for queries * UserStore.Postgres: Log when inconsistency is found between wire_user and deleted_user tables * integration: Add assertions for updates to actually happen, add some cases for locale update * Add failing test to ensure reindexing deletes missed deletes * brig-index: Allow providing page size for reindex operations Use the page size parameter to actually test pagination --------- Co-authored-by: Sven Tennie <sven.tennie@wire.com>
If there is stderr output in the expression to get devshell_names, these were cluttered. Fix that by keeping the streams separate.
zebot
added
the
ok-to-test
blackheaven
approved these changes
Jun 12, 2026
blackheaven
left a comment
blackheaven
left a comment
Contributor
There was a problem hiding this comment.
The best PR I've ever seen!
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
9 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
[2026-06-12] (Chart Release 5.33.0)
Release notes
The background-worker migration timeout configuration was renamed from
migrateConversationsOptionstomigrationOptions. The old key is no longer read, so update any custom Helm overrides to the new name to avoid unexpected defaults. (WPB-25915 add timeout and duration metric for conversation migration #5244)Add public
/meetingsendpoints to galley nginz routing (WPB-26338). (WPB-26338: Add /meetings endpoints to nginz routing #5258)Support for the kyber based hybrid post quantum ciphersuite was removed, because it is not supported by wire branch of openmls. (chore: remove unsupported ciphersuite #5224)
API changes
In API version V16
DELETE /conversations/:domain/:cid/members/:domain/:uidmay return a new error 403adminless-conversation(WPB-25313 adminless check on leave endpoint #5254)Remove redundant "get-app" end-point (use
POST /list-usersinstead). (#PR_NOT_FOUND)Finalize API version v16 and create new dev version v17. (WPB-26312: Finalize API version V16 #5257)
Features
Enforced history client invariants for conversation history sharing: enabled requires exactly one history client, disabled requires none. (WPB-20806 Require history client when history sharing is enabled #5217)
Prevent adminless groups (WPB-25313 adminless check on leave endpoint #5254, WPB-25328 autopromotion for adminless groups #5256)
Added a team feature to configure adminless group prevention. (WPB-25314 team feature:
preventAdminlessGroups#5233)Added a team feature flag for background effects. (WPB-25919: Added a team feature flag for background effects #5246)
nginx-ingress-services: allow a federator-only cert-manager issuer (e.g. AWS Private CA via AWSPCAClusterIssuer) by setting federator.tls.issuer.{name,kind,group} without having to enable the global tls.useCertManager flag. The wildcard-backed federator-certificate-secret is suppressed in that case so cert-manager can own the secret. (adding support for federator-specific cert-manager issuers #5249)
Allow storing user data in PostgreSQL.
This is currently not the default and is experimental. The migration path from Cassandra is yet to be implemented.
However, new installations can use this by configuring the wire-server Helm chart like this:
(Add postgres interpreter for UserStore #4951)
Bug fixes and other updates
Reset the MLS group info on conversation reset (WPB-20754 fix: resetting an MLS conversation returns inconsistent group info #5229)
Refresh ES index after app update, emit event. ([WPB-23765] Refresh ES index after app update, emit event. #5231)
Allow team members with role
Memberto browse collaborators. (#PR_NOT_FOUND)Make migration locks release safely on failure (WPB-25906 make migration locks release safely on failure #5238)
Reduce connection usage and number of SQL queries for checking for pending PostgreSQL migration cleanup. (ConversationStore.Migration: Use fewer connections while checking for pending deletes #5234)
Reconnect and retry queries when the PostgreSQL server restarts (Reset all connections with PostgreSQL when the server restarts #5216)
Internal changes
Add meeting cleaner job in
background-worker. (WPB-24076: Add meeting cleaner job inbackground-worker#5207)Integration test comparing different team-search end-points. ([WPB-25667] Integration test comparing different team-search end-points. #5230)
Add timeout and duration metrics to Cassandra-to-PostgreSQL migration options (WPB-25915 add timeout and duration metric for conversation migration #5244)
Internal
/i/domain-registrationAPI made available for testing (internal: make domain-registration available for test env #5245)Bump wire-server-enterprise submodule (introduces gitignoreSource Nix fix) (bump wire-server-enterprise #5253)
Fix SBOM generation scripts: stop merging stderr into stdout, which polluted the devShell and image name lists with nix warnings (Fix concourse SBOM jobs #5264)
wire-ingress chart: Add a ALPN ClienTrafficPolicy (wire-ingress chart: Add ALPN ClientTrafficPolicy #5228)