3.11

Changelog for the 3.11.x release builds.
This version mainly focuses on improving memory usage, code, security and introduces a fair set of new features like: customization of CSI filtering options via Adhoc commands add queuing of message payloads, loading of MAM caches on demand to greatly reduce memory usage, refactoring of the SASL API (some changes are not backward compatible) and authentication backends, implementation of SCRAM with channel binding and SHA-256/384/512 digesting algorithms variants. Seemless automatic Bookmarks (XEP-0048) conversion between Private Storage and PEP. Implement “Security Labels in XMPP” (XEP-0258) and related customizable Access Control Decision Function policies. Introduce new session / host handling Module API functions.

Other notable changes or fixes:

Add in house keeping for overly inactive persistent rooms
Add redirection tombstoning for destroyed room with an alternative room provided
Allow MUC superusers to list hidden rooms via Service Discovery
Fix data disclosure security related bugs in mod_privacy and mod_pep whitelist access model
Attempt preventing all possible out-of-order processing cases in CSI
Add smarter logics to prevent routing of unwanted messages in SM/Carbons etc to CSI inactive resources
Add administration adhoc command to change the mail address associated to an account by the Registration API
Implement affiliation retrieval and management in mod_pep
Implement #publish-options in mod_pubsub also make node auto-creation on publish the default

Changes, improvements:

Update modules to new API and also remove datamanger calls where applicable.
Completely refactor mod_sec_labels and ACDF library.
Add support to add ESS Mime Labels.
Fix mail address sanity check pattern.
Partially pair featureset between PubSub and PEP and also rework some defaults.
Fix long time completely broken XMPP Websocket support.
Fix handling of Offline stores in MAM.
Add placemarker when popping entries in the middle of the archive.
Backport mod_http_upload_external from Prosody Modules.
Clean WebSocket sessions properly from net.http.server.
Add hits threshold callback override in mod_gate_guard.
Fix S2S exception when network is unreacheable.
Add conn level filter logic to gate guard’s black list/protect list.
Improve mod_gate_guard host’s reloadability.
Finish implementing XEP-307.
Simplify tokens used in Metronome (Register API, SPIM Block).
Stop sending PEP notifications on every presence change.
Uniform and shorten generated UIDs in Metronome.
Rework GDPR compliance module inner workings.
Add missing SCRAM backends exports in SASL auxiliary library.
Fix timers not being properly cleared in mod_muc on unload.
Add persistence of MUC occupants list across restarts.
Prevent SPIM challenge enumeration by forcing form retrieval.
Fix timers not being properly cleared in mod_muc on unload.
Add persistence of MUC occupants list across restarts.
Prevent SPIM challenge enumeration by forcing form retrieval.
Protect SPIM Blocking form with reCAPTCHA.
Correct PEP notifications leak during service bootstrap.
Correct possible ID spoofing in some modules IQ result processing.
Have mod_iq fire “iq-result/to_type” as two argument events (event, id).