Release 2026-01-13 - (expected chart version 5.25.0)

[zebot]

[2026-01-13] (Chart Release 5.25.0)

Release notes

• Operators: if you override galley.settings.featureFlags.cells in your Helm values, update your override to include the newly required cells config fields (channels/groups/one2one/users/collabora/publicLinks/storage/metadata); if you use the chart defaults, no action is needed. (WPB-22170 backend additional config values in cells feature flag #4903)

API changes

• Create new API version V15 and finalize API version V14 (WPB-22702 Finalize API version v14 #4942)

• The PUT /teams/:tid/features/cells endpoint has changed in API version V14 and requires additional config values. (WPB-22170 backend additional config values in cells feature flag #4903)

• Add new fields to apps: category, description, creator (WPB-21294: Add fields to apps: category, description, creator; WPB-21295: Add "get app" endpoint #4879)

• Add "get app" endpoint to Brig (GET /teams/:tid/apps/:id) (WPB-21294: Add fields to apps: category, description, creator; WPB-21295: Add "get app" endpoint #4879)

• Add pagination to SCIM groups in Spar /scim/v2/Groups

Features

• Add meetingsPremium feature flag to distinguish premium teams from trial teams. Meetings created by premium team members are marked as non-trial. Public endpoints: GET/PUT /teams/:tid/features/meetingsPremium. Internal endpoints: GET/PUT/PATCH /i/teams/:tid/features/meetingsPremium and lock status management.

  Add meetings feature flag to control access to the meetings API. When disabled, all meetings endpoints return 403 Forbidden. The feature is enabled and unlocked by default. Public endpoints: GET/PUT /teams/:tid/features/meetings. Internal endpoints: GET/PUT/PATCH /i/teams/:tid/features/meetings and lock status management. (WPB-21964: introduce Wire Meetings feature flags #4915)

• New team feature config cellsInternal (WPB-22168 backend new feature flag cells internal #4889, WPB-22168 [fix-up] set the defaults of the cells feature correctly #4907, WPB-22654 Update CellsInternal Feature Flag #4940)

• The cells feature flag now contains a set of additional configuration values (WPB-22170 backend additional config values in cells feature flag #4903)

• nginx-ingress-services chart: Add support for cert-manager Certificate
  privateKey rotation policy configuration. This allows preserving private
  keys across certificate renewals for client key pinning scenarios.

  Configuration options:

  • tls.privateKey.rotationPolicy - for ingress certificates
  • federator.tls.privateKey.rotationPolicy - for federator certificate

  Setting rotationPolicy to "Never" preserves the private key, enabling
  scenarios where clients pin the server's public key rather than the
  certificate itself. (nginx-ingress-services: enable RotationPolicy setting for cert key pinning #4945)

• Allow configuring page size and parallelism for conversation migration to
  PostgreSQL. This can be configured like this:

  background-worker:
    config:
      migrateConversationsOptions:
        pageSize: 10000
        parallelism: 2

  (Allow configuring page size and parallelism for conversation migration to PostgreSQL #4904)

• Introduce new metrics for better tracking of conversation migration to postgresql:

  1. wire_local_convs_migration_failed
  2. wire_user_remote_convs_migration_failed

  If any of these become 1, it means the migration has failed. The logs would
  contain the error. In order to restart the migration, the background-worker must
  be restarted. (ConversationStore.Migration: log and emit metric if a migration fails #4891)

• Commits with a broken group info are now let through if the group was already broken (Skip group info mismatch error for broken groups #4883)

• When a SAML IdP is created on a multi-ingress domain (implying that
  multi-ingress domains are configured in Spar) the domain is added as domain
  field to that IdP's extraInfo (WireIdP type in Haskell.) To avoid confusion
  in later lookups, at most one IdP can be configured per multi-ingress domain.
  If multi-ingress is not configured or it's not configured for the specific
  domain, no domain field gets added to the IdP. This guards against creating
  multiple IdPs and then assigning them to multi-ingress domains. Thus, users who
  don't use multi-ingress don't observe any change. This feature only opens the
  door to later provide an IdP for a multi-ingress domain. (Add multi-ingress domains to SCIM IdPs #4778)

Bug fixes and other updates

• Fixed notification endpoint returning an empty page with hasMore=true ([WPB-21706] empty notification page with has_more = True #4871)

• Fix SCIM groups endpoint to only return SCIM-managed groups, not wire-managed groups (WPB-22101: fix SCIM groups endpoint to only return SCIM-managed groups, not wire-managed groups #4906)

• Fixed: change user idp, external_id or emails via scim (scim user update / patch failed to update parts of ValidScimId). ([WPB-22154] fix: move user between SCIM tokens #4887)

• Add <?xml version="1.0" encoding="UTF-8"?> to SAML/XML output. ([WPB-22287] fix saml xml headers #4898)

• Make Swagger schema instances for GET /search/results and GET /teams/{tid}/search distinct (WPB-22297: Fix ToSchema instance for SearchResult #4921)

• Fix swagger docs for GET and POST on /conversations/{cnv}/code to show
  that the response will always include the uri field. (Move code URI from ConversationCode to ConversationCodeInfo #4911)

• Reduce gc_grace_period for all conversation related tables to 1 day. This will
  help restart the postgresql migration after a day, if it fails mid way. Lowering
  it too much runs the risk of offline nodes resurrecting deleted data. (Reduce gc_grace_period for all conversation related tables to 1 day #4899)

• Make underlying users for apps findable from GET /search/contacts (Find apps from GET /search/contacts #4920)

• Reject messages in MLS groups while in epoch 0. (reject MLS messages while in epoch 0 #4811)

• Optimize Postgresql queries for getting conversation members (Optimize Postgresql queries for getting converstaion members #4896, Optimize Postgresql queries for getting converstaion members #4896)

• Since 5.23.23 (5866bab) RabbitMQ settings are
  mandatory for Brig in both, federated and non-federated setups. Unfortunately,
  this wasn't reflected in Brig's Helm chart. So, non-federated deployments were
  failing. (Fix: brig always requires rabbitmq #4886)

Internal changes

• Upgrade nixpkgs and dependencies (icluding GHC from 9.8 to 9.10) (WPB-16262 update nix packages #4909)

• Upgrade ormolu to match GHC 9.10. (WPB-22515: upgrade ormolu #4923)

• Fix postgres migrations on CI test runs (WPB-22577 Postgres migration for backendA fails on CI #4931)

• Add mls-users tool to list all active users that don't support MLS. (List active users that don't support MLS #4888)

• Add a golden test for IdP (de-) serialization to ensure the format doesn't change due to future developments. (Add IdP golden test #4927)

• Explain MultiIngressSSO test helper functions a bit better. (Explain MultiIngressSSO test helpers #4882)

• Use nix flakes instead of niv and manually pinned git dependencies (Use nix flakes instead of niv and manually pinned git dependencies #4933)