[dependabot]

Warning

Cooldown could not be applied because no publication date was available from the registry.

Bumps element-hq/element-web from v1.12.32 to v1.12.33.

Release notes

Sourced from element-hq/element-web's releases.

v1.12.33

✨ Features

• Copy changes for "set up recovery" (#35437). Contributed by @​richvdh.
• Fix calls respawning from error screen on room switch. (#35470). Contributed by @​toger5.
• Split ChangeRecoveryKeyBody out of ChangeRecoveryKey (#35403). Contributed by @​kaylendog.
• Use a dialog to prompt the user about their recovery key when logging out (#35398). Contributed by @​kaylendog.
• Remove introductory screen from "create recovery key" flow (#35451). Contributed by @​richvdh.
• Don't allow to skip device verification by default (#35364). Contributed by @​mxandreas.
• Remodel "Can't confirm" dialog to match designs (#35375). Contributed by @​andybalaam.
• Drop support for migrating libolm sessions (#35138). Contributed by @​Half-Shot.
• Update Pill and PillInput design (#35370). Contributed by @​florianduros.
• Offer 'Sign out' on the identity reset page if there is no other option (#35307). Contributed by @​andybalaam.
• Put user status below the avatar (#35328). Contributed by @​dbkr.

🐛 Bug Fixes

• Update Electron to pick up patches (#35573). Contributed by @​t3chguy.
• Expand the device wildcard when a widget sends an encrypted to-device message (#35183). Contributed by @​ara4n.
• Keep opening voice-only calls in PiP when the lobby is skipped (#35495). Contributed by @​Johennes.
• Fix /spoiler command not converting markdown to HTML (#35103). Contributed by @​jasonjose007.
• Open a call that is already in progress maximised, even for voice (#35443). Contributed by @​ara4n.
• Fix guest login in oidc flow (#35432). Contributed by @​florianduros.
• Avoid unhandled promise rejection from CallStore.onReady() (#34861). Contributed by @​hughns.
• Add border around user profile avatar (#35460). Contributed by @​dbkr.
• Fix PiP drag bar when displaying over widgets (#35395). Contributed by @​mgcm.
• Feed thread replies to widgets (#35444). Contributed by @​ara4n.
• Ensure 'Can't confirm?' is primary only if no other options are available (#35406). Contributed by @​andybalaam.
• Fix restricted guest module showing excluded UI elements (#35412). Contributed by @​florianduros.
• Update compound-web to 10.3.1 (#35390). Contributed by @​dbkr.
• Run DeviceListener rechecks one at a time (#35053). Contributed by @​langleyd.
• Keep the new timeline at the bottom when its viewport changes height (#35374). Contributed by @​langleyd.
• Stop writing removed legacy mention rules from the Labs notification settings (#35035). Contributed by @​barodeur.
• Ellipsise long names in widget picture-in-picture view (#35329). Contributed by @​robintown.

Changelog

Sourced from element-hq/element-web's changelog.

Changes in 1.12.33 (2026-10-27)

✨ Features

• Copy changes for "set up recovery" (#35437). Contributed by @​richvdh.
• Fix calls respawning from error screen on room switch. (#35470). Contributed by @​toger5.
• Split ChangeRecoveryKeyBody out of ChangeRecoveryKey (#35403). Contributed by @​kaylendog.
• Use a dialog to prompt the user about their recovery key when logging out (#35398). Contributed by @​kaylendog.
• Remove introductory screen from "create recovery key" flow (#35451). Contributed by @​richvdh.
• Don't allow to skip device verification by default (#35364). Contributed by @​mxandreas.
• Remodel "Can't confirm" dialog to match designs (#35375). Contributed by @​andybalaam.
• Drop support for migrating libolm sessions (#35138). Contributed by @​Half-Shot.
• Update Pill and PillInput design (#35370). Contributed by @​florianduros.
• Offer 'Sign out' on the identity reset page if there is no other option (#35307). Contributed by @​andybalaam.
• Put user status below the avatar (#35328). Contributed by @​dbkr.

🐛 Bug Fixes

• Update Electron to pick up patches (#35573). Contributed by @​t3chguy.
• Expand the device wildcard when a widget sends an encrypted to-device message (#35183). Contributed by @​ara4n.
• Keep opening voice-only calls in PiP when the lobby is skipped (#35495). Contributed by @​Johennes.
• Fix /spoiler command not converting markdown to HTML (#35103). Contributed by @​jasonjose007.
• Open a call that is already in progress maximised, even for voice (#35443). Contributed by @​ara4n.
• Fix guest login in oidc flow (#35432). Contributed by @​florianduros.
• Avoid unhandled promise rejection from CallStore.onReady() (#34861). Contributed by @​hughns.
• Add border around user profile avatar (#35460). Contributed by @​dbkr.
• Fix PiP drag bar when displaying over widgets (#35395). Contributed by @​mgcm.
• Feed thread replies to widgets (#35444). Contributed by @​ara4n.
• Ensure 'Can't confirm?' is primary only if no other options are available (#35406). Contributed by @​andybalaam.
• Fix restricted guest module showing excluded UI elements (#35412). Contributed by @​florianduros.
• Update compound-web to 10.3.1 (#35390). Contributed by @​dbkr.
• Run DeviceListener rechecks one at a time (#35053). Contributed by @​langleyd.
• Keep the new timeline at the bottom when its viewport changes height (#35374). Contributed by @​langleyd.
• Stop writing removed legacy mention rules from the Labs notification settings (#35035). Contributed by @​barodeur.
• Ellipsise long names in widget picture-in-picture view (#35329). Contributed by @​robintown.

Commits

• 45671bc v1.12.33
• c5d4944 Upgrade dependency to matrix-js-sdk@45.0.0
• 2d8460c Update Electron to pick up patches (#35573)
• b5206ac v1.12.33-rc.0
• a6abea4 Upgrade dependency to matrix-js-sdk@45.0.0-rc.0
• 43c93a4 Remove map_style_url from config.sample.json (#35511)
• 8459bb5 Expand the device wildcard when a widget sends an encrypted to-device message...
• c0fb881 [create-pull-request] automated change (#35509)
• fc4d45c Keep opening voice-only calls in PiP when the lobby is skipped (#35495)
• af4ddc9 Add custom lint rule to clean up subscriptions before unmount (#35502)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)