Release 2026-04-20 - (expected chart version 5.30.0)

[zebot]

[2026-04-20] (Chart Release 5.30.0)

Release notes

• Since 5.29 was broken and you should have skipped it, you are about to upgrade from 5.28 to 5.30 in one step. This has been tested and should work. Please consult the release notes from both 5.29 and 5.30 for changes w.r.t. 5.28.

• background-worker now reuses galley's configmap and secrets for cassandra, postgres and federation domain settings. This removes redundant settings and keeps the two services aligned. No operator action is strictly required; however, we advise removing the background-worker value overrides for galley's cassandra, postgres, and federation domain settings, as they are duplicated and no longer needed:

  • background-worker.config.cassandraGalley
  • background-worker.config.postgresql
  • background-worker.secrets.pgPassword
  • background-worker.config.federationDomain (WPB-24072 mount galley.yaml into background-worker #5180)

• Operators upgrading from the previous wire-server chart release, where the service charts were consolidated into the umbrella chart, must now set tags.proxy explicitly again.

  If your currently installed values no longer contain a proxy tag because of that consolidation, add one before upgrading to this release and set it to the intended state:

  • tags.proxy: true to deploy the proxy chart
  • tags.proxy: false to keep the proxy chart disabled (WPB-24481 helm make proxy deployment optional #5161)

• The Restund helm chart and code stops being supported and shipped. If you have not already, please migrate to coturn which continues to be supported. (Sunset restund (and rex) #5162)

Features

• Send team.member-join to all apps in team. ([WPB-24553] Send team.member-join to all apps in team. #5187)

Bug fixes and other updates

• Remove the Server response header value for entire API. (WPB-22293 Remove Server response header value #5179)

• Integration tests for user events when user type is app. Replace redundant app-created event with team.member-join. ([WPB-23764] app events #5139)

• (Un-)suspend apps if en-/disabled in the team. ([WPB-23806] (Un-)suspend apps if en-/disabled in the team. #5177)

• Apps from outside own team do not appear in contact search. ([WPB-23995] fix app access in search, fetch. #5173)

• Fix: apps cannot form connections accross teams. Integration test for cross-team conversations working with apps as expected. ([WPB-23995] app visibility accross teams #5171)

• Prevent password reset for SAML users (WPB-24490 users can escape sso via password reset #5191)

• Remove apps from conversations when apps are disabled in conversation. ([WPB-24569] remove apps from conversations if apps are disabled in conversations #5176)

• Fix: allow removal of bots from conversation after switching it to MLS. ([WPB-24627] Fix: allow removal of bots from conversation after switching it to MLS. #5186)

• Hotfix: handle NULL in brig-cassandra:user.user_type. ([WPB-24871] Hotfix: handle NULL in brig-cassandra:user.user_type. #5193)

• Fix bug where the mls-users tool would crash for users with null supported_protocols (Handle missing supported protocols in mls-users #5190)

Documentation

• Make schema-profunctor schema names derived and avoid name clashes between scopes. (Make schema-profunctor schema names derived and avoid name clashes between scopes. #5151)

Internal changes

• Propagate error from brig on stern API call GET i/domain-registration/:domain (WPB-22293 Remove Server response header value #5179)

• The status code for rate limit responses from nginz and cannon is now configurable and set to 420 per default (WPB-5989 Move verify code action as preparation for polysemy create client subsystem #5154)

• Moved code from galley to ClientSubsystem (WPB-5989 Move verify code action as preparation for polysemy create client subsystem #5154, WPB-5989 Client Subsystem (part 1) #5147, remove brig-types #5157, WPB-5989 polysemy create client subsystem (part 2) #5156, WPB-5989 replace Brig.Federation.Client with FederationAPIAccess #5165, WPB-5989 polysemy create client subsystem (part 4 - final) #5168)

• The defaults in k8ssandra-test-cluster should now work for both a fresh cassandra 4.1 pod as well as an upgrade of an existing previous k8ssandra-test-cluster deployment. We assume k8ssandra-operator helm chart version 1.20.2. (Follow-up to #5072 #5091)

• Use sbomnix to generate SBOMs for Nix-built Docker images and devShells. Adjust Helm chart values for inlined wire-server chart. (Some additions to SBOM creation epic #5167)

• Remove tom-bombadil SBOM creation targets from Makefile. There's a better approach to create SBOMs in place (in Makefile and CI). (remove tom-bombadil usage #5181)