automation: Update matrix-elementweb Docker tag to v1.11.89

This MR contains the following updates:

Package	Update	Change
matrix-elementweb	patch	v1.11.84 -> v1.11.89

---

Release Notes

element-hq/element-web (matrix-elementweb)

v1.11.89

Compare Source

This is a patch release to fix a bug which could prevent loading stored crypto state from storage, and also to fix URL previews when switching back to a room.

🐛 Bug Fixes

• Upgrade matrix-sdk-crypto-wasm to 11.1.0 (https://github.com/matrix-org/matrix-js-sdk/pull/4593)
• Fix url preview display (#​28766).

v1.11.88

Compare Source

✨ Features

• Allow trusted Element Call widget to send and receive media encryption key to-device messages (#​28316). Contributed by @​hughns.
• increase ringing timeout from 10 seconds to 90 seconds (#​28630). Contributed by @​fkwp.
• Add Close tooltip to dialog (#​28617). Contributed by @​florianduros.
• New UX for Share dialog (#​28598). Contributed by @​florianduros.
• Improve performance of RoomContext in RoomHeader (#​28574). Contributed by @​t3chguy.
• Remove Features.RustCrypto flag (#​28582). Contributed by @​florianduros.
• Add Modernizr warning when running in non-secure context (#​28581). Contributed by @​t3chguy.

🐛 Bug Fixes

• Fix jumpy timeline when the pinned message banner is displayed (#​28654). Contributed by @​florianduros.
• Fix font & spaces in settings subsection (#​28631). Contributed by @​florianduros.
• Remove manual device verification which is not supported by the new cryptography stack (#​28588). Contributed by @​florianduros.
• Fix code block highlighting not working reliably with many code blocks (#​28613). Contributed by @​t3chguy.
• Remove remaining reply fallbacks code (#​28610). Contributed by @​t3chguy.
• Provide a way to activate GIFs via the keyboard for a11y (#​28611). Contributed by @​t3chguy.
• Fix format bar position (#​28591). Contributed by @​florianduros.
• Fix room taking long time to load (#​28579). Contributed by @​florianduros.
• Show the correct shield status in tooltip for more conditions (#​28476). Contributed by @​uhoreg.

v1.11.87

Compare Source

✨ Features

• Send and respect MSC4230 is_animated flag (#​28513). Contributed by @​t3chguy.
• Display a warning when an unverified user's identity changes (#​28211). Contributed by @​uhoreg.
• Swap out Twitter link for Mastodon on auth footer (#​28508). Contributed by @​t3chguy.
• Consider org.matrix.msc3417.call as video room in create room dialog (#​28497). Contributed by @​t3chguy.
• Standardise icons using Compound Design Tokens (#​28217). Contributed by @​t3chguy.
• Start sending stable m.marked_unread events (#​28478). Contributed by @​tulir.
• Upgrade to compound-design-tokens v2 (#​28471). Contributed by @​t3chguy.
• Standardise icons using Compound Design Tokens (#​28286). Contributed by @​t3chguy.
• Remove reply fallbacks as per merged MSC2781 (#​28406). Contributed by @​t3chguy.
• Use React Suspense when rendering async modals (#​28386). Contributed by @​t3chguy.

🐛 Bug Fixes

• Add spinner when room encryption is loading in room settings (#​28535). Contributed by @​florianduros.
• Fix getOidcCallbackUrl for Element Desktop (#​28521). Contributed by @​t3chguy.
• Filter out redacted poll votes to avoid crashing the Poll widget (#​28498). Contributed by @​t3chguy.
• Fix force tab complete not working since switching to React 18 createRoot API (#​28505). Contributed by @​t3chguy.
• Fix media captions in bubble layout (#​28480). Contributed by @​tulir.
• Reset cross-signing before backup when resetting both (#​28402). Contributed by @​uhoreg.
• Listen to events so that encryption icon updates when status changes (#​28407). Contributed by @​uhoreg.
• Check that the file the user chose has a MIME type of image/* (#​28467). Contributed by @​t3chguy.
• Fix download button size in message action bar (#​28472). Contributed by @​t3chguy.
• Allow tab completing users in brackets (#​28460). Contributed by @​t3chguy.
• Fix React 18 strict mode breaking spotlight dialog (#​28452). Contributed by @​MidhunSureshR.

v1.11.86

Compare Source

✨ Features

• Deduplicate icons using Compound Design Tokens (#​28419). Contributed by @​t3chguy.
• Let widget driver send error details (#​28357). Contributed by @​AndrewFerr.
• Deduplicate icons using Compound Design Tokens (#​28381). Contributed by @​t3chguy.
• Auto approvoce io.element.call.reaction capability for element call widgets (#​28401). Contributed by @​toger5.
• Show message type prefix in thread root & reply previews (#​28361). Contributed by @​t3chguy.
• Support sending encrypted to device messages from widgets (#​28315). Contributed by @​hughns.

🐛 Bug Fixes

• Feed events to widgets as they are decrypted (even if out of order) (#​28376). Contributed by @​robintown.
• Handle authenticated media when downloading from ImageView (#​28379). Contributed by @​t3chguy.
• Ignore m.3pid_changes for Identity service 3PID changes (#​28375). Contributed by @​t3chguy.
• Fix markdown escaping wrongly passing html through (#​28363). Contributed by @​t3chguy.
• Remove "Upgrade your encryption" flow in CreateSecretStorageDialog (#​28290). Contributed by @​florianduros.

v1.11.85

Compare Source

Security

• Fixes for CVE-2024-51750 / GHSA-w36j-v56h-q9pc
• Fixes for CVE-2024-51749 / GHSA-5486-384g-mcx2
• Update JS SDK with the fixes for CVE-2024-50336 / GHSA-xvg8-m4x3-w6xr

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about this update again.

---

• If you want to rebase/retry this MR, check this box

---

This MR has been generated by Renovate Bot. The local configuration can be found in the local Renovate Bot repository.