Update go deps by renovate[bot] · Pull Request #365 · livekit/sip

renovate · 2025-05-19T10:02:19Z

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/emiago/sipgo	`v1.4.0` → `v1.4.3`
github.com/pion/rtp	`v1.10.2` → `v1.10.3`
github.com/pion/sdp/v3	`v3.0.18` → `v3.0.19`
github.com/pion/webrtc/v4	`v4.2.14` → `v4.2.16`
github.com/urfave/cli/v3	`v3.9.0` → `v3.10.1`
google.golang.org/grpc	`v1.81.1` → `v1.82.0`

Release Notes

emiago/sipgo (github.com/emiago/sipgo)

`v1.4.3`

Compare Source

Full Changelog: emiago/sipgo@v1.4.2...v1.4.3

Security fix for DOS websocket frame Issue Thanks @arkark for reporting.

`v1.4.2`

Compare Source

Full Changelog: emiago/sipgo@v1.4.1...v1.4.2

SECURITY FEATURE

sip.ValidateRequest and sip.ValidateResponse added as way for user to Validate Req/Response from CRLF injection. -> Thanks @arkark for reporting it

`v1.4.1`

Compare Source

What's Changed

fix(transaction): release connection reference when a server transaction terminates by @simonrakcsg in #309
fix(dialog): ACK to 2xx must not copy Route from INVITE by @ddas-rt in #311

New Contributors

@simonrakcsg made their first contribution in #309
@ddas-rt made their first contribution in #311

Security

DOS prevent DOS allocation on stream parser with large Content length Issue - Thanks to report from @arkark

Full Changelog: emiago/sipgo@v1.4.0...v1.4.1

pion/rtp (github.com/pion/rtp)

`v1.10.3`

Compare Source

Changelog

ac0f586 Skip allocations when reusing VP9 packets (#364)

pion/sdp (github.com/pion/sdp/v3)

`v3.0.19`

Compare Source

Changelog

Update CI configs to v0.12.0
Update CI configs to v0.12.2
Export GetCodecMap for efficient payload type lookups

Full Changelog: pion/sdp@v3.0.18...v3.0.19

pion/webrtc (github.com/pion/webrtc/v4)

`v4.2.16`

Compare Source

Changelog

3acb04c Add the ability to write tracks OpusTags
b1b0614 Add multi-track ogg writing API
5636863 Update module github.com/pion/sctp to v1.10.3
43b3d65 Fix flaky test detach race
7a223a6 Add StartContext to ICE and DTLS Transport (#3371)
979fc84 Update module github.com/pion/sctp to v1.10.2 (#3457)
7306350 Update module github.com/pion/datachannel to v1.6.2 (#3456)
0b2fda9 Update module github.com/pion/sctp to v1.10.1 (#3455)
7a9d72c Update module github.com/pion/stun/v3 to v3.1.6 (#3452)
7991a3a Update module github.com/pion/sdp/v3 to v3.0.19 (#3454)
ea2897f Update module github.com/pion/srtp/v3 to v3.0.12 (#3448)
7c9521b Update module github.com/pion/datachannel to v1.6.1 (#3451)
3a57b45 Fix wasm null JS event handlers before release (#3432)
ec1dd73 Fix bundle-only data channel startup (#3447)
6a5d2f8 Update module github.com/pion/turn/v5 to v5.0.10 (#3444)

`v4.2.15`

Compare Source

Changelog

a323cae Upgrade dtls to fix compatibility with firefox
bb1c684 SNAP: fix renegotiation bug (#3443)
898d90d Remove redundant lock guarding atomic

urfave/cli (github.com/urfave/cli/v3)

`v3.10.1`

Compare Source

What's Changed

chore(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in #2371
fix: align gfmrun example counter with actual runnable count by @dearchap in #2369
v3: yield the version flag's -v alias to a user-defined flag by @c-tonneslan in #2330
fix: keep completion subcommand order deterministic in help output by @suzuki-shunsuke in #2374
fix: allow DefaultCommand to handle its own flags by @lihan3238 in #2322

New Contributors

@lihan3238 made their first contribution in #2322

Full Changelog: urfave/cli@v3.10.0...v3.10.1

`v3.10.0`

Compare Source

What's Changed

feat: add Flag.SchemaType() and Flag.SchemaItemsType() for JSON Schema introspection by @dearchap in #2368
feat: add Command.Walk() and Command.Path() convenience methods by @dearchap in #2353
fix: let --help flag take precedence over parse errors by @dearchap in #2360
fix: resolve remaining help invocation inconsistencies by @dearchap in #2361
fix: skip After hook when help is displayed on subcommand by @dearchap in #2363
fix: show GLOBAL OPTIONS in SubcommandHelpTemplate by @dearchap in #2359
fix: resolve broken links in CHANGELOG.md by @dearchap in #2357
docs: document what happened to build tags in v3 migration guide by @dearchap in #2358
Various docs updates and dependency bumps

Full Changelog: urfave/cli@v3.9.1...v3.10.0

`v3.9.1`

Compare Source

What's Changed

fix: inherit Reader/Writer/ErrWriter from parent on subcommand setup by @c-tonneslan in #2329
fix: correct greedy colon parsing in bash completion script by @TimSoethout in #2336
fix: Honor env sources on duplicated flags by @ibobgunardi in #2355
fix: Remove incorrect flag check by @MohitPanchariya in #2280
fix: let completion command use normal flag parsing pipeline by @suzuki-shunsuke in #2279
fix: bash completion spacing by @cyphercodes in #2337
fix: fish custom completion arguments by @puneetdixit200 in #2338
fix: empty positional arg after a flag regression test by @c-tonneslan in #2328
docs: document build tags in v3 migration guide by @dearchap in #2358
chore(deps): bump mkdocs-git-revision-date-localized-plugin by @dependabot in #2347
Fix typos by @myfloss in #2339

Full Changelog: urfave/cli@v3.9.0...v3.9.1

grpc/grpc-go (google.golang.org/grpc)

`v1.82.0`: Release 1.82.0

Compare Source

Behavior Changes

server: Remove support for GRPC_GO_EXPERIMENTAL_DISABLE_STRICT_PATH_CHECKING environment varibale. Strict incoming RPC path validation (which has been the default since v1.79.3) can no longer be disabled. (#9112)
transport: Add environment variable to change the default max header list size from 16MB to 8KB. This may be enabled by setting GRPC_GO_EXPERIMENTAL_ENABLE_8KB_DEFAULT_HEADER_LIST_SIZE=true. This will be enabled by default in a subsequent release. (#9019)
balancer: Load Balancing policy registry is now case-sensitive. Set GRPC_GO_EXPERIMENTAL_CASE_SENSITIVE_BALANCER_REGISTRIES=false (and file an issue) to revert to case-insensitive behavior. (#9017)

New Features

experimental/stats: Expose a new API, NewContextWithLabelCallback, to register a callback that is invoked when telemetry labels are added. (#8877)
- Special Thanks: @seth-epps
client: Return a portion of the response body in the error message, when the client receives an unexpected non-gRPC HTTP response, to make debugging easier. (#8929)
- Special Thanks: @chengxilo
server: Add environment variable GRPC_GO_SERVER_GOROUTINE_LABELS that controls setting runtime/pprof.Labels on goroutines spawned by the server. Set GRPC_GO_SERVER_GOROUTINE_LABELS=grpc.method=true to add the grpc.method label on goroutines spawned to handle incoming requests. (#9082)
- Special Thanks: @dfinkel

Bug Fixes

xds/server: Fix a memory leak of HTTP filter instances occurring when route configurations are updated in-place during a Route Discovery Service (RDS) update. (#9138)
grpc: In the deprecated gzip Compressor (used via the deprecated WithCompressor dial option), enforce the MaxRecvMsgSize limit on the decompressed message buffer, preventing excessive memory allocation from highly compressed payloads. (#9114)
- Special Thanks: @evilgensec
stats/opentelemetry: Record retry attempts, grpc.previous-rpc-attempts, at the call level and not the attempt level. (#8923)
encoding: Ensure Close() is always called on readers returned from Compressor.Decompress if possible. (#9135)
channelz: Fix the LastMessageSentTimestamp and LastMessageReceivedTimestamp fields in SocketMetrics to ensure they contain correct timestamp values. (#9109)

Configuration

📅 Schedule: (UTC)

Branch creation
- "before 9am on monday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2025-06-06T22:57:56Z

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

12 additional dependencies were updated

Details:

Package	Change
`golang.org/x/mod`	`v0.29.0` -> `v0.31.0`
`github.com/pion/dtls/v3`	`v3.0.7` -> `v3.0.8`
`github.com/pion/ice/v4`	`v4.0.10` -> `v4.0.13`
`github.com/pion/mdns/v2`	`v2.0.7` -> `v2.1.0`
`github.com/pion/rtcp`	`v1.2.15` -> `v1.2.16`
`github.com/pion/sctp`	`v1.8.40` -> `v1.8.41`
`github.com/pion/srtp/v3`	`v3.0.8` -> `v3.0.9`
`github.com/pion/stun/v3`	`v3.0.0` -> `v3.0.2`
`github.com/pion/transport/v3`	`v3.0.8` -> `v3.1.1`
`github.com/pion/turn/v4`	`v4.1.1` -> `v4.1.3`
`github.com/prometheus/common`	`v0.64.0` -> `v0.66.1`
`golang.org/x/sync`	`v0.18.0` -> `v0.19.0`

devin-ai-integration

✅ Devin Review: No Issues Found

Devin Review analyzed this PR and found no bugs or issues to report.

renovate · 2026-07-11T21:40:57Z

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

5 additional dependencies were updated

Details:

Package	Change
`github.com/pion/datachannel`	`v1.6.0` -> `v1.6.2`
`github.com/pion/sctp`	`v1.10.0` -> `v1.10.3`
`github.com/pion/srtp/v3`	`v3.0.11` -> `v3.0.12`
`github.com/pion/stun/v3`	`v3.1.4` -> `v3.1.6`
`github.com/pion/turn/v5`	`v5.0.8` -> `v5.0.10`

Generated by renovateBot

renovate Bot requested a review from a team as a code owner May 19, 2025 10:02

renovate Bot force-pushed the renovate/go-deps branch 2 times, most recently from 547b647 to 1b46580 Compare May 20, 2025 12:13

renovate Bot changed the title ~~Update module github.com/pion/webrtc/v4 to v4.1.1~~ Update go deps May 20, 2025

renovate Bot force-pushed the renovate/go-deps branch from 1b46580 to c122d47 Compare May 23, 2025 03:05

psyonic-jnguyen approved these changes May 24, 2025

View reviewed changes

renovate Bot force-pushed the renovate/go-deps branch 4 times, most recently from 57a6b66 to a16e9b4 Compare June 2, 2025 06:09

renovate Bot force-pushed the renovate/go-deps branch 3 times, most recently from 23b1b59 to 5506979 Compare June 6, 2025 22:57

renovate Bot force-pushed the renovate/go-deps branch from 5506979 to 369930a Compare June 9, 2025 05:46

renovate Bot changed the title ~~Update go deps~~ fix(deps): update go deps Jun 10, 2025

renovate Bot force-pushed the renovate/go-deps branch 4 times, most recently from bfff7dc to c516763 Compare June 14, 2025 12:42

renovate Bot force-pushed the renovate/go-deps branch 3 times, most recently from 86a55eb to 8d30233 Compare June 23, 2025 08:13

renovate Bot force-pushed the renovate/go-deps branch 2 times, most recently from c3c7fb8 to c1c4787 Compare July 1, 2025 05:37

renovate Bot force-pushed the renovate/go-deps branch 4 times, most recently from 95d415f to 1b8b5f4 Compare July 15, 2025 19:27

renovate Bot force-pushed the renovate/go-deps branch from 1b8b5f4 to 73f3057 Compare July 17, 2025 20:26

renovate Bot force-pushed the renovate/go-deps branch 5 times, most recently from 6cefd98 to e39e505 Compare August 26, 2025 23:25

renovate Bot requested a review from a team as a code owner August 26, 2025 23:25

renovate Bot force-pushed the renovate/go-deps branch 4 times, most recently from 283e7f2 to ebdf827 Compare September 2, 2025 23:54

renovate Bot force-pushed the renovate/go-deps branch 5 times, most recently from 7ef0e1f to 562c0c4 Compare September 9, 2025 10:33

renovate Bot force-pushed the renovate/go-deps branch from 562c0c4 to 6781bd6 Compare September 11, 2025 10:51

renovate Bot force-pushed the renovate/go-deps branch 4 times, most recently from 03aed22 to e776524 Compare September 25, 2025 22:22

renovate Bot force-pushed the renovate/go-deps branch 7 times, most recently from 23eff5d to fd05a5c Compare October 4, 2025 01:01

devin-ai-integration Bot reviewed Jul 9, 2026

View reviewed changes

Update go deps

bca9fa8

Generated by renovateBot

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Update go deps#365

Update go deps#365
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/go-deps

renovate Bot commented May 19, 2025 •

edited

Loading

Uh oh!

renovate Bot commented Jun 6, 2025 •

edited

Loading

Uh oh!

devin-ai-integration Bot left a comment

Uh oh!

renovate Bot commented Jul 11, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

renovate Bot commented May 19, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

SECURITY FEATURE

What's Changed

New Contributors

Security

Changelog

Changelog

Changelog

Changelog

What's Changed

New Contributors

What's Changed

What's Changed

v1.82.0: Release 1.82.0

Behavior Changes

New Features

Bug Fixes

Configuration

Uh oh!

renovate Bot commented Jun 6, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ Artifact update notice

File name: go.mod

Uh oh!

devin-ai-integration Bot left a comment

Choose a reason for hiding this comment

✅ Devin Review: No Issues Found

Uh oh!

renovate Bot commented Jul 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ️ Artifact update notice

File name: go.mod

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

renovate Bot commented May 19, 2025 •

edited

Loading

`v1.82.0`: Release 1.82.0

renovate Bot commented Jun 6, 2025 •

edited

Loading

renovate Bot commented Jul 11, 2026 •

edited

Loading