[WPB-21261] Release 2025-10-21 - (expected chart version 5.23.0)

[zebot]

[2025-10-21] (Chart Release 5.23.0)

Release notes

• Team user search role filter has been fixed and results now include each member's team role. Note: existing search index documents will only show roles after a reindex or when users get updated; newly created or updated users populate their role automatically. (WPB-19693 fix role filter in team search endpoint #4728)

• Elasticsearch/OpenSearch mapping updated for team user search to support filtering by unverified email addresses. For the new filter email=verified|unverified on GET /teams/{tid}/search to work as intended, it is necessary to create a new index and re-index the data either by migrating to a new index or by recreating the index.

• Allow storing conversation data in postgres.

  This is currently not the default and is experimental.
  The migration path from Cassandra is yet to be programmed.

  However, new installations can use this by configuring the wire-server helm
  chart like this:

  galley:
    config:
      postgresqlMigration:
        conversation: postgresql
  ``` (#4764)
  
  

API changes

• Stub endpoints for enterprise provisioning (only in V13) (WPB-19807 User Group and Channel API stubs #4743)

• Finalize API Version V12, start new develop version V13. ([WPB-21259] Finalize API Version V12 #4817)

• The blocked domains feature
  (optSettings.setCustomerExtensions.domainsBlockedForRegistration) is now
  more strict: It is not only forbidden to register users with these domains in
  their email addresses, but also to change a user's email address to one of
  these domains.

  This affects the endpoints:

  • /register (as before)
  • /activate/send
  • /users/{uid}/email
  • /i/self/email (internal endpoint)
  • /access/self/email
  • /i/teams/{tid}/invitations (internal endpoint)
  • /teams/{tid}/invitations (disallow email change to blocked domain #4624)

Features

• Allow collaborator to be removed from a team. (WPB-18190: Add route to delete collaborator from team #4694)

• Add PodDisruptionBudget for Backoffice (feat: add pdb to backoffice #4751)

• Implement user-groups channels association (/user-groups/{gid}/channels). (WPB-19712: Allow team admin to update the channels to user-group association #4783)

• Implement channels and channelsCount in user-groups endpoints. (WPB-19713: Implement channels and channelsCount in user-groups endpoints #4776)

• Add entreprise-provisioning, a CLI to batch provision various entities, currently, creates and associate channels to existing user-groups. (WPB-19716: Batch create Channels and Map them to User Groups #4790)

• Brig: Add optional email query parameter to GET /teams/{tid}/search ("browse-team"). (WPB-19730 add email verified unverified filter in team search endpoint #4774)

• Add feature flag for "simplified user connection requests" QR codes
  (simplifiedUserConnectionRequestQRCode). As it has been implicitly enabled
  before - there was no way to turn it off - it's enabled by default. (Simplified user connecting qr code feature flag #4763)

• Added user group endpoints to nginz config (WPB-19933 Add nginz config for new user group endpoints #4744)

• New endpoint to update the users of a user group (WPB-20003 update and replace user group members #4768)

• Include total count in user group list/search responses (WPB-20183 Include total count in user group list/search responses #4773)

• Allow updates of SCIM users by SCIM even if E2EID is enabled (WPB-20203 backend updating user attributes via SCIM should be possible when E2EID is enabled #4772)

• Add global AssetAuditLog feature flag (WPB-20206 create a new feature flag asset audit log #4779)

• cargohold: add asset audit logging (WPB-20207 add audit logging and metadata storage to asset upload #4782, WPB-20208 Audit log on asset download #4784, WPB-20209 Forward IP address by federator #4787)

• Add searchable field to users, users who have it set to false won't be found by the public endpoint.
  Add POST /users/:uid/searchable endpoint where team admin can change it for user.
  Add /teams/:tid/search?searchable=false, where the query parameter makes it return only non-searchable users. (WPB-20214: Add member searchability #4786)

• Add user group ids to team member search result (WPB-20764 add user group ids to team member search result  #4809)

• Add endpoint for a team admin to get a new app cookie (Refresh app cookie #4769)

• Introduce apps and the corresponding creation endpoint POST /teams/:tid/apps. (Create apps table #4696)

• Add stealthUsers feature flag (Add stealth users feature flag #4803)

• Remove user from all user groups on deletion (Update user groups on user deletion #4781)

• Add type field to user profiles. The possible values are "regular" for regular users, "bot" for services and "app" for apps. (Add a type field to users #4758)

Bug fixes and other updates

• The role filter of the team search is fixed (WPB-19693 fix role filter in team search endpoint #4728)

• Changed Swagger data type Pict from {} which is interpreted as string to
  {"type":"object"}. Also, static Swagger specifications of earlier API versions
  have been adapted. (add type to Pict data type in Swagger #4785)

• Added nginz rules for missing endpoints (add nginz rules for missing endpoints #4808)

Documentation

• add documentation on setting up federated calling (Wpb 20733 federation calling docs #4796)

• Update multi-ingress deeplink documentation to have a better example (WPB-20718: update multi-ingress deeplink doc #4807)

Internal changes

• Add a preStopHook to gundeck helm chart to avoid spurious 500s on gundeck restarts. (charts/gundeck: add prestop hook #4730)

• Add hls.json to .gitignore. It's only useful in specific editor setups. (ignore hls.json #4747)

• New make rule and python script for creating /postgres-schema.sql. (not hooked into CI yet) (Make rule and python script for creating /postgres-schema.sql. #4760)

• Add postgres dynamic query builder (Introduce query builder DSL #4812)

• charts/{redis-ephemeral,reaper}: switch away from non-working bitnami registry (charts/{redis-ephemeral,reaper}: switch away from non-working bitnami… #4792)

• Update kubectl, restund, redis-cluster, and rabbitmq images to use bitnamilegacy registry (chore: update bitnami image registry for the charts required by offline bundle #4791)

• Switch reaper and restund kubectl images to bitnamilegacy registry to ensure shell access compatibility (Align kubectl images with available tags #4801)

[stefanwire]

There's a #PR_NOT_FOUND to be fixed.