[dependabot]

Bumps the go-modules group with 2 updates: github.com/livekit/protocol and github.com/pion/webrtc/v4.

Updates github.com/livekit/protocol from 1.52.1 to 1.53.0

Release notes

Sourced from github.com/livekit/protocol's releases.

@​livekit/protocol@​1.53.0

Minor Changes

• Agent threads, the durable conversation an agent has with a person across channels (agent/livekit_agent_thread.proto): AgentThread (the thread, its items as ChatContext.ChatItem) and AgentTask (background work an agent runs in it); the conversation tables in livekit/agent/thread_schema_v1.sql; auth.AgentThreadGrant under the agentThread claim (list and create by scope, read, write and delete by thread id, or every thread of the project with all); the AT_ (thread) and AST_ (agent stream) id prefixes in utils/guid. - #1841 (@​theomonnom)

  The agent-db and thread services are internal gRPC in cloud-protocol, so AgentDBService and its Twirp code are removed; the public API is public-api-server. A database lives in its project's data region: AgentDB.CreateRequest.region is removed, DumpRequest/DumpResponse are now ExportRequest/ExportResponse, and AgentDB times are google.protobuf.Timestamp / Duration. A batch answers one result per statement, tagged with its 0-based statement index on Columns, ColumnBatch and ExecResult.

Patch Changes

• Add AgentEndpointGrant, scoping calls to an agent's non-public HTTP endpoints - #1728 (@​theomonnom)

• configutil.Observable gains ObserveCurrent, which replays the current config to late subscribers ordered against reloads; NewAtomic* use it. Implementations outside this package must add the method - #1869 (@​paulwe)

• Report full CPU load in hwstats.GetCPULoad when idle is 0 - #1835 (@​boks1971)

• Add data track packet client extensions - #1834 (@​ladvoc)

• egressobs.GetAudioOnly reports true for v2 egress and replay requests with a MediaSource that has no video selector - #1848 (@​milos-lk)

• egressobs.GetAudioOnly reports true for TrackComposite egress requests without a video track - #1859 (@​erikhortsch)

• RTPForwarderState.dependency_descriptor_forwarder (DependencyDescriptorForwarderState) carries the last dependency descriptor frame number a forwarder sent, so a migrated subscriber's frame numbers continue. - #1855 (@​boks1971)

• FunctionCall.extra (map<string, string>, like ChatMessage.extra): a function call's extra metadata, such as a delegation's task id and endpoint, survives the threads service. - #1853 (@​theomonnom)

• Add fixed IDs for negotiated data channels - #1871 (@​cnderrauber)

• Keep loggers derived from medialogutils.OverrideLogger wrapped, so they still demote errors to warnings and report the right caller - #1842 (@​anunaym14)

• Data track extension ID collision: intermediate step. - #1825 (@​boks1971)

• Add ringing_timeout_status to SIPInboundTrunkInfo & EvaluateSIPDispatchRulesResponse - #1819 (@​alexlivekit)

• agent_simulation: rename SimulationRun.Sampling to SimulationRun.SamplingOptions. Wire-compatible; the sampling fields keep their names and numbers. - #1832 (@​u9g)

• Add sip.IsEmergencyNumber and provider_info on InternalCreateSIPParticipantRequest - #1850 (@​genseric-ghiro)

• Add ParseSIPNameAddr, which validates a name-addr value and returns its user part, replacing sip.URIUser - #1864 (@​genseric-ghiro)

• AgentThread.GetItemsRequest.sort_order (AgentThread.SortOrder): DESC lists a thread's items from the latest back, so a chat view can load its last page first and page up through older items. Thread listings page like the other lists: page_token, limit and next_page_token (strings: livekit.agent cannot use TokenPagination) replace before/after, and GetTasks pages too. In thread_schema_v1.sql, items and tasks gain pos INTEGER PRIMARY KEY AUTOINCREMENT (insertion order, never reused, so a page token never skips a row), items an index on (lane, pos); id and task_id stay the upsert keys as TEXT NOT NULL UNIQUE. - #1851 (@​theomonnom)

• Fix ResourceURLNotifier.QueueNotify keeping its lock after an error - #1831 (@​boks1971)

Changelog

Sourced from github.com/livekit/protocol's changelog.

1.53.0

Minor Changes

• Agent threads, the durable conversation an agent has with a person across channels (agent/livekit_agent_thread.proto): AgentThread (the thread, its items as ChatContext.ChatItem) and AgentTask (background work an agent runs in it); the conversation tables in livekit/agent/thread_schema_v1.sql; auth.AgentThreadGrant under the agentThread claim (list and create by scope, read, write and delete by thread id, or every thread of the project with all); the AT_ (thread) and AST_ (agent stream) id prefixes in utils/guid. - #1841 (@​theomonnom)

  The agent-db and thread services are internal gRPC in cloud-protocol, so AgentDBService and its Twirp code are removed; the public API is public-api-server. A database lives in its project's data region: AgentDB.CreateRequest.region is removed, DumpRequest/DumpResponse are now ExportRequest/ExportResponse, and AgentDB times are google.protobuf.Timestamp / Duration. A batch answers one result per statement, tagged with its 0-based statement index on Columns, ColumnBatch and ExecResult.

Patch Changes

• Add AgentEndpointGrant, scoping calls to an agent's non-public HTTP endpoints - #1728 (@​theomonnom)

• configutil.Observable gains ObserveCurrent, which replays the current config to late subscribers ordered against reloads; NewAtomic* use it. Implementations outside this package must add the method - #1869 (@​paulwe)

• Report full CPU load in hwstats.GetCPULoad when idle is 0 - #1835 (@​boks1971)

• Add data track packet client extensions - #1834 (@​ladvoc)

• egressobs.GetAudioOnly reports true for v2 egress and replay requests with a MediaSource that has no video selector - #1848 (@​milos-lk)

• egressobs.GetAudioOnly reports true for TrackComposite egress requests without a video track - #1859 (@​erikhortsch)

• RTPForwarderState.dependency_descriptor_forwarder (DependencyDescriptorForwarderState) carries the last dependency descriptor frame number a forwarder sent, so a migrated subscriber's frame numbers continue. - #1855 (@​boks1971)

• FunctionCall.extra (map<string, string>, like ChatMessage.extra): a function call's extra metadata, such as a delegation's task id and endpoint, survives the threads service. - #1853 (@​theomonnom)

• Add fixed IDs for negotiated data channels - #1871 (@​cnderrauber)

• Keep loggers derived from medialogutils.OverrideLogger wrapped, so they still demote errors to warnings and report the right caller - #1842 (@​anunaym14)

• Data track extension ID collision: intermediate step. - #1825 (@​boks1971)

• Add ringing_timeout_status to SIPInboundTrunkInfo & EvaluateSIPDispatchRulesResponse - #1819 (@​alexlivekit)

• agent_simulation: rename SimulationRun.Sampling to SimulationRun.SamplingOptions. Wire-compatible; the sampling fields keep their names and numbers. - #1832 (@​u9g)

• Add sip.IsEmergencyNumber and provider_info on InternalCreateSIPParticipantRequest - #1850 (@​genseric-ghiro)

• Add ParseSIPNameAddr, which validates a name-addr value and returns its user part, replacing sip.URIUser - #1864 (@​genseric-ghiro)

• AgentThread.GetItemsRequest.sort_order (AgentThread.SortOrder): DESC lists a thread's items from the latest back, so a chat view can load its last page first and page up through older items. Thread listings page like the other lists: page_token, limit and next_page_token (strings: livekit.agent cannot use TokenPagination) replace before/after, and GetTasks pages too. In thread_schema_v1.sql, items and tasks gain pos INTEGER PRIMARY KEY AUTOINCREMENT (insertion order, never reused, so a page token never skips a row), items an index on (lane, pos); id and task_id stay the upsert keys as TEXT NOT NULL UNIQUE. - #1851 (@​theomonnom)

• Fix ResourceURLNotifier.QueueNotify keeping its lock after an error - #1831 (@​boks1971)

Commits

• 5f3bf01 Version Packages (#1820)
• 8a409de Negotiated data channel ids (#1871)
• c45251b Update module go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp...
• 8aef254 Update module go.opentelemetry.io/otel/exporters/otlp/otlptrace to v1.45.0 [S...
• f9fe21d Update dependency brace-expansion to v5.0.12 [SECURITY] (#1836)
• 8c96a95 configutil: add ObserveCurrent so late subscribers get the current config (#1...
• 29d4cf6 Consolidating validate and extract sip URI into one util function (#1864)
• a9a1bff TEL-1120 Adding provider info to InternalCreateSIPParticipantRequest (#1850)
• 41f6356 Clean up data track extension ID assignment. (#1861)
• 4ebc7a9 egressobs: report audio_only for TrackComposite without a video track (#1859)
• Additional commits viewable in compare view

Updates github.com/pion/webrtc/v4 from 4.2.23 to 4.2.24

Release notes

Sourced from github.com/pion/webrtc/v4's releases.

v4.2.24

Changelog

• b9a559ec69fd146fc0db2c9537f35fc46d0ac26e Update dtls@v3 to fix some issues
• 254a2de73cf5893bfc5db0f646642c388813e7a6 Update module github.com/pion/dtls/v3 to v3.1.12 (#3624)
• 2a514ff46414e67870efe29e133b6b7b85465893 Update module github.com/pion/dtls/v3 to v3.1.11 (#3623)

Commits

• b9a559e Update dtls@v3 to fix some issues
• 254a2de Update module github.com/pion/dtls/v3 to v3.1.12 (#3624)
• 2a514ff Update module github.com/pion/dtls/v3 to v3.1.11 (#3623)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	github.com/​pion/​webrtc/​v4@​v4.2.23 ⏵ v4.2.24
	github.com/​livekit/​protocol@​v1.52.1 ⏵ v1.53.0	+1

View full report