- Add functionality to be able to use multiple values in SSO feature `attribute_requirements`. ([\#17949](https://github.com/element-hq/synapse/issues/17949))

- Add experimental config options `admin_token_path` and `client_secret_path` for [MSC3861](https://github.com/matrix-org/matrix-spec-proposals/pull/3861). ([\#18004](https://github.com/element-hq/synapse/issues/18004))
- Add `get_current_time_msec()` method to the [module API](https://matrix-org.github.io/synapse/latest/modules/writing_a_module.html) for sound time comparisons with Synapse. ([\#18144](https://github.com/element-hq/synapse/issues/18144))

- Update the response when a client attempts to add an invalid email address to the user's account from a 500, to a 400 with error text. ([\#18125](https://github.com/element-hq/synapse/issues/18125))
- Fix user directory search when using a legacy module with a `check_username_for_spam` callback. Broke in v1.122.0. ([\#18135](https://github.com/element-hq/synapse/issues/18135))

- Add `SYNAPSE_HTTP_PROXY`/`SYNAPSE_HTTPS_PROXY`/`SYNAPSE_NO_PROXY` environment variables to pass through specifically to the Synapse process (instead of needing to apply [`http_proxy`/`https_proxy`/`no_proxy`](https://element-hq.github.io/synapse/latest/setup/forward_proxy.html) globally). ([\#18158](https://github.com/element-hq/synapse/issues/18158))

- Add Oracle Linux 8 and 9 installation instructions. ([\#17436](https://github.com/element-hq/synapse/issues/17436))
- Document missing server config options (`daemonize`, `print_pidfile`, `user_agent_suffix`, `use_frozen_dicts`, `manhole`). ([\#18122](https://github.com/element-hq/synapse/issues/18122))
- Document consequences of replacing secrets. ([\#18138](https://github.com/element-hq/synapse/issues/18138))
- Make `burst_count` field an integer in `rc_presence` config documentation example. ([\#18159](https://github.com/element-hq/synapse/issues/18159))

- Overload `DatabasePool.simple_select_one_txn` to return non-`None` when the `allow_none` parameter is `False`. ([\#17616](https://github.com/element-hq/synapse/issues/17616))
- Python 3.8 EOL: compile native extensions with the 3.9 ABI and use typing hints from the standard library. ([\#17967](https://github.com/element-hq/synapse/issues/17967))
- Add log message when worker lock timeouts get large. ([\#18124](https://github.com/element-hq/synapse/issues/18124))
- Make it explicit that you can buy an AGPL-alternative commercial license from Element. ([\#18134](https://github.com/element-hq/synapse/issues/18134))
- Fix the 'Fix linting' GitHub Actions workflow. ([\#18136](https://github.com/element-hq/synapse/issues/18136))
- Do not log at the exception-level when clients provide empty `since` token to `/sync` API. ([\#18139](https://github.com/element-hq/synapse/issues/18139))
- Reduce database load of user search when using large search terms. ([\#18172](https://github.com/element-hq/synapse/issues/18172))

* Bump bcrypt from 4.2.0 to 4.2.1. ([\#18127](https://github.com/element-hq/synapse/issues/18127))
* Bump bytes from 1.9.0 to 1.10.0. ([\#18149](https://github.com/element-hq/synapse/issues/18149))
* Bump gitpython from 3.1.43 to 3.1.44. ([\#18128](https://github.com/element-hq/synapse/issues/18128))
* Bump hiredis from 3.0.0 to 3.1.0. ([\#18169](https://github.com/element-hq/synapse/issues/18169))
* Bump serde_json from 1.0.137 to 1.0.138. ([\#18129](https://github.com/element-hq/synapse/issues/18129))
* Bump service-identity from 24.1.0 to 24.2.0. ([\#18171](https://github.com/element-hq/synapse/issues/18171))
* Bump sigstore/cosign-installer from 3.7.0 to 3.8.0. ([\#18147](https://github.com/element-hq/synapse/issues/18147))
* Bump twine from 6.0.1 to 6.1.0. ([\#18170](https://github.com/element-hq/synapse/issues/18170))
* Bump types-pyyaml from 6.0.12.20240917 to 6.0.12.20241230. ([\#18097](https://github.com/element-hq/synapse/issues/18097))
* Bump ulid from 1.1.4 to 1.2.0. ([\#18148](https://github.com/element-hq/synapse/issues/18148))
-----BEGIN PGP SIGNATURE-----
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=9haT
-----END PGP SIGNATURE-----