Skip to content

Update go deps - #445

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/go-deps
Open

Update go deps#445
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/go-deps

Conversation

@renovate

@renovate renovate Bot commented Jul 13, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
github.com/Eyevinn/mp4ff v0.52.0 → v0.54.0 age confidence
github.com/go-gst/go-glib v1.4.1-0.20250303082535-35ebad1471fd → v1.4.1 age confidence
github.com/go-gst/go-gst v1.4.0 → v1.4.1 age confidence
github.com/pion/dtls/v3 v3.1.4 → v3.1.5 age confidence
github.com/pion/rtcp v1.2.16 → v1.2.17 age confidence
github.com/pion/rtp v1.10.2 → v1.10.3 age confidence
github.com/pion/webrtc/v4 v4.2.15 → v4.2.16 age confidence
github.com/urfave/cli/v3 v3.10.0 → v3.10.1 age confidence
golang.org/x/image v0.43.0 → v0.44.0 age confidence

Release Notes

Eyevinn/mp4ff (github.com/Eyevinn/mp4ff)

v0.54.0

Compare Source

Added
  • AV1 bitstream parsing in the av1 package: OBU splitting (SplitOBUs,
    ParseOBUHeader, ReadLEB128), sequence headers (ParseSequenceHeader,
    SequenceHeader, CodecConfRec.SequenceHeader), frame-header decoding
    (FrameHeaderDecoder, FrameHeader) with per-frame resolution and tile layout,
    random-access detection (FrameType, ParseFrameHeaderStart, IsRAPSample) and
    tile-data location (GetTileRanges, verified byte-exact against shaka-packager)
  • AV1 RFC 6381 codecs string: CodecConfRec.CodecString, SequenceHeader.CodecString
    and av1.CodecString; the av1C box Info and mp4ff-pslister now show the
    sequence header, coded resolution, color configuration and codecs string for av01
  • AV1 common encryption (cenc/cbcs): mp4.GetAV1ProtectRanges protects only tile data
    (OBU/frame/tile-group headers and tile-size fields stay clear) per the AV1 ISOBMFF
    binding; mp4ff-encrypt/mp4ff-decrypt support av01 tracks
  • EncryptFragments and FragmentEncryptor (from InitProtectData.NewFragmentEncryptor)
    encrypt a decode sequence with a fresh per-sequence sample protector; InitProtectData is
    immutable and safe to share across goroutines
  • ivf package to read and write the IVF container used for raw VP8/VP9/AV1 bitstreams (the
    VPx/AV1 counterpart of Annex B), and an ivf-to-mp4 example that muxes AV1 and VP9 IVF files
    into fragmented MP4. Supported by av1.OBU.Encode/Size, av1.CodecConfRecFromSequenceHeader
    and mp4.TrakBox.SetAV1Descriptor
  • vp9 package parsing the VP9 uncompressed frame header (key-frame/random-access detection,
    color configuration and picture size) with vpcC level computation, plus
    mp4.TrakBox.SetVPxDescriptor to build vp08/vp09 sample entries from a vpcC box
  • vp8 package parsing the VP8 frame tag and key-frame header (key-frame detection and picture
    size); ivf-to-mp4 now also muxes VP8 IVF into fragmented MP4
Fixed
  • Panic in hevc.ParseSPSNALUnit on malformed input where cpb_cnt_minus1 in
    the sub-layer HRD parameters is 255 (found by fuzzing)

v0.53.0

Compare Source

Added
  • mp4ff-mvhevc command line tool with info and add subcommands to inspect
    MV-HEVC (Multi-View HEVC) files and to mux HEVC (Annex B or mp4) into a
    single-track MV-HEVC mp4 with hvcC/lhvC, oinf/linf sample groups and
    optional Apple spatial-video (vexu/hfov) metadata
  • TrgrBox for the Track Group Box (trgr, ISO/IEC 14496-12 Sec. 8.3.4) and a
    generic TrackGroupTypeBox for its children (registered for the standard
    msrc and ster track group types, and cstg — the complete subset track
    grouping for L-HEVC, ISO/IEC 14496-15 Sec. 9.5.1), with a
    CreateTrackGroupTypeBox helper and a TrakBox.Trgr reference.
    Type-specific data after track_group_id (e.g. the ster left_view_flag)
    is preserved for round-tripping
  • Apple spatial/stereo video metadata boxes in the Video Extended Usage box
    (vexu) family: VexuBox, EyesBox (eyes), CamsBox (cams),
    ProjBox (proj), StriBox (stri), HeroBox (hero), BlinBox
    (blin), PrjiBox (prji) and HfovBox (hfov), with a CreateVexuBox
    helper and VisualSampleEntryBox.Vexu/.Hfov child references (Apple
    "QuickTime and ISO Base Media File Formats and Spatial and Immersive Media")
  • LhvCBox for the L-HEVC configuration box (lhvC, ISO/IEC 14496-15 Ed. 7
    Sec. 9.5.3.1), carrying the L-HEVC decoder configuration record for the
    enhancement layers of a layered HEVC (MV-HEVC/SHVC) stream, with a
    CreateLhvCFromNalus constructor and a VisualSampleEntryBox.LhvC child
    reference
  • Parsing of the HEVC multilayer/multiview VPS extension (vps_extension(),
    ISO/IEC 23008-2 Annex F.7.3.2.1.1) used by MV-HEVC and SHVC, exposed as an
    optional hevc.VPS.Extension (*VPSExtension) with scalability mask,
    per-layer dimension/dependency info, layer profile-tier-levels, output layer
    sets and rep_format() resolutions, plus VPS.GetNumLayers,
    IsMultiLayer, GetNumViews and ScalabilityMaskBits helpers
  • L-HEVC (lhvC) decoder configuration record support in the hevc package:
    DecConfRec.DecodeLHEVCDecConfRec, EncodeLHEVC, EncodeLHEVCSW and
    LHEVCSize (ISO/IEC 14496-15 Ed. 7 Sec. 9.4.3)
  • OinfSampleGroupEntry for the Operating Points Information sample group
    (oinf, ISO/IEC 14496-15 Ed. 7 Sec. 9.6.2) and LinfSampleGroupEntry for
    the Layer Information sample group (linf, Sec. 4.15), used by layered HEVC
    (MV-HEVC/SHVC)
  • BuildOinfFromVPS and BuildLinfFromVPS to derive the oinf and linf
    sample group entries for a layered HEVC track from a parsed multilayer
    hevc.VPS
  • LbliSampleGroupEntry for the L-HEVC external base layer sample group
    (lbli, LhvcExternalBaseLayerInfo, ISO/IEC 14496-15 Ed. 7 Sec. 9.6.1),
    used by L-HEVC tracks that predict from an external base layer in a
    separate track
  • SampleAccessor.ReadMdatData for bulk reading of the raw mdat payload of a
    fragment in a single read, intended for streaming with lazy mdat decoding
  • HDR metadata boxes ClliBox (Content Light Level, clli, ISO/IEC 14496-12
    Sec. 12.1.6) and MdcvBox (Mastering Display Colour Volume, mdcv, ISO/IEC
    14496-12 Sec. 12.1.7), including VisualSampleEntryBox.Clli and .Mdcv
    child references
  • Support for Dolby Vision HEVC sample entries dvh1 and dvhe: box decoding,
    StsdBox.HvcX mapping, TrakBox.SetHEVCDescriptor (dvh1 like hvc1, dvhe like
    hev1), and CENC/CBCS encryption via InitProtect/ExtractInitProtectData
  • DoViConfigurationBox for the Dolby Vision Configuration Box (dvcC for
    dv_profile <= 7, dvvC for 8-9, dvwC for >= 10), carrying the
    DOVIDecoderConfigurationRecord, with a VisualSampleEntryBox.DoViConfig
    child reference
  • Parsing and writing of the recovery point SEI message (type 6) for both AVC
    (RecoveryPointAvcSEI, ISO/IEC 14496-10 D.1.8) and HEVC (RecoveryPointHevcSEI,
    ISO/IEC 23008-2 D.2.8)
  • Exponential Golomb support on the bit-level types used by the sei package:
    ReadExpGolomb/ReadSignedGolomb on bits.Reader and
    WriteExpGolomb/WriteSignedGolomb on bits.FixedSliceWriter
Changed
  • Minimum Go version bumped from 1.17 to 1.19. Fuzz tests require native
    fuzzing (testing.F, Go 1.18), and Go 1.19 fixes fuzz-corpus CRLF handling
    so the seed corpus loads on Windows CI
  • cenc encryption with an 8-byte input IV is now CMAF-conformant
    (ISO/IEC 23000-19 Sec. 8.2.3.1): InitProtect sets
    tenc.DefaultPerSampleIVSize to 8, EncryptFragment writes 8-byte
    per-sample IVs to senc and increments the IV by one per sample
    (ISO/IEC 23001-7 Sec. 9.2), and the returned chaining IV is 8 bytes.
    A 16-byte input IV keeps the previous 16-byte behavior
  • EncryptFragment omits the senc, saiz, and saio boxes when a
    fragment has no sample auxiliary information (full-sample encryption
    with a constant IV, e.g. cbcs audio), as CMAF Sec. 8.2.2.1 recommends
  • SaizBox.AddSampleInfo now returns an error (sample-info sizes above
    255 do not fit the 8-bit sample_info_size) instead of panicking on
    inconsistent sizes, collapses uniform sizes into
    default_sample_info_size, and switches to per-sample sizes when a
    differing size arrives
Fixed
  • DecryptFragment no longer fails on fragments without a senc box
    when the track uses full-sample encryption with a constant IV
  • SencBox keeps its subsample entries aligned with the sample index, so
    a fragment mixing samples with and without subsamples encodes a zero
    subsample count instead of panicking, and saiz sizes match the
    senc layout
  • GetAVCProtectRanges and GetHEVCProtectRanges return an all-clear
    subsample entry for a degenerate sample instead of an empty list
go-gst/go-glib (github.com/go-gst/go-glib)

v1.4.1: Version retraction

Compare Source

golang version retraction only

go-gst/go-gst (github.com/go-gst/go-gst)

v1.4.1: Go Version retraction

Compare Source

pion/dtls (github.com/pion/dtls/v3)

v3.1.5

Compare Source

Changelog

  • 9c642f8 Unblock reads when conn is closed
  • e2959fd Remove the obsolete Go 1.14 build tag
  • 8674b27 Update actions/checkout action to v7
  • 8f512dc Update module github.com/pion/transport/v4 to v4.0.2 (#​836)
  • 1ce56ab Update dtls-1.2 branch name
  • bc02e81 Document main-branch tagging freeze
pion/rtcp (github.com/pion/rtcp)

v1.2.17

Compare Source

Changelog

  • a9b71ae Fixed packet length checks (#​220)
  • d61b52c Update CI configs to v0.12.2
  • 2a11841 Aplly lint upgrades, and missing checks
  • 80c3aac Update CI configs to v0.12.1
  • 06eaa85 Update CI configs to v0.12.0
  • 84e0fcc Update CI configs to v0.11.39
  • 21f160a Update CI configs to v0.11.37
  • 460290b Update CI configs to v0.11.36
  • 603b7c3 Fix gosec slice bounds warnings
  • 99b388f Update CI configs to v0.11.32
pion/rtp (github.com/pion/rtp)

v1.10.3

Compare Source

Changelog

pion/webrtc (github.com/pion/webrtc/v4)

v4.2.16

Compare Source

Changelog

urfave/cli (github.com/urfave/cli/v3)

v3.10.1

Compare Source

What's Changed
New Contributors

Full Changelog: urfave/cli@v3.10.0...v3.10.1

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "before 9am on monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate

renovate Bot commented Jul 13, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor Author

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 7 additional dependencies were updated

Details:

Package Change
github.com/pion/turn/v5 v5.0.9 -> v5.0.10
github.com/pion/datachannel v1.6.0 -> v1.6.2
github.com/pion/sctp v1.10.0 -> v1.10.3
github.com/pion/srtp/v3 v3.0.11 -> v3.0.12
github.com/pion/stun/v3 v3.1.5 -> v3.1.6
golang.org/x/sync v0.21.0 -> v0.22.0
golang.org/x/text v0.38.0 -> v0.40.0

@renovate
renovate Bot requested a review from a team as a code owner July 13, 2026 03:02
@renovate
renovate Bot force-pushed the renovate/go-deps branch 4 times, most recently from 034d9ce to a9fdcf2 Compare July 20, 2026 03:16
@renovate
renovate Bot force-pushed the renovate/go-deps branch 7 times, most recently from ba61627 to 05eba80 Compare July 27, 2026 21:08
@renovate
renovate Bot force-pushed the renovate/go-deps branch from 05eba80 to 3a79f66 Compare July 28, 2026 18:10
@renovate

renovate Bot commented Jul 28, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor Author

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum
Command failed: go get -t ./...
go: downloading github.com/livekit/protocol v1.48.1-0.20260624204523-bd5703442db6
go: downloading github.com/livekit/psrpc v0.7.2
go: downloading github.com/urfave/cli/v3 v3.10.1
go: downloading go.opentelemetry.io/otel v1.44.0
go: downloading google.golang.org/protobuf v1.36.11
go: downloading github.com/livekit/mediatransportutil v0.0.0-20260605212259-862d4a7bcb1e
go: downloading github.com/livekit/server-sdk-go/v2 v2.16.7-0.20260625120102-b6d1838861e7
go: downloading github.com/sirupsen/logrus v1.9.4
go: downloading gopkg.in/yaml.v3 v3.0.1
go: downloading github.com/livekit/gst-go v0.0.0-20250701011214-e7f61abd14cb
go: downloading google.golang.org/grpc v1.82.1
go: downloading github.com/stretchr/testify v1.11.1
go: downloading github.com/frostbyte73/core v0.1.1
go: downloading github.com/pion/interceptor v0.1.45
go: downloading github.com/pion/rtcp v1.2.17
go: downloading github.com/pion/rtp v1.10.3
go: downloading github.com/pion/webrtc/v4 v4.2.16
go: downloading github.com/go-gst/go-glib v1.4.1
go: downloading go.uber.org/atomic v1.11.0
go: downloading github.com/google/go-cmp v0.7.0
go: downloading github.com/livekit/go-rtmp v0.0.0-20251031234730-75a652881771
go: downloading github.com/yutopp/go-flv v0.3.1
go: downloading github.com/prometheus/client_golang v1.23.2
go: downloading github.com/aclements/go-moremath v0.0.0-20241023150245-c8bbc672ef66
go: downloading github.com/Eyevinn/mp4ff v0.54.0
go: downloading github.com/gorilla/mux v1.8.1
go: downloading github.com/livekit/media-sdk v0.0.0-20260623124604-40d3338a7426
go: downloading github.com/pion/dtls/v3 v3.1.5
go: downloading github.com/pion/sdp/v3 v3.0.19
go: downloading golang.org/x/image v0.44.0
go: downloading buf.build/go/protoyaml v0.7.0
go: downloading github.com/dennwc/iters v1.2.2
go: downloading github.com/twitchtv/twirp v8.1.3+incompatible
go: downloading golang.org/x/text v0.40.0
go: downloading github.com/go-logr/logr v1.4.3
go: downloading github.com/puzpuzpuz/xsync/v4 v4.5.0
go: downloading go.uber.org/multierr v1.11.0
go: downloading go.uber.org/zap v1.28.0
go: downloading go.uber.org/zap/exp v0.3.0
go: downloading github.com/redis/go-redis/v9 v9.20.0
go: downloading golang.org/x/exp v0.0.0-20260603202125-055de637280b
go: downloading github.com/livekit/mageutil v0.0.0-20250511045019-0f1ff63f7731
go: downloading github.com/nats-io/nats.go v1.52.0
go: downloading google.golang.org/genproto/googleapis/rpc v0.0.0-20260526163538-3dc84a4a5aaa
go: downloading go.opentelemetry.io/otel/metric v1.44.0
go: downloading go.opentelemetry.io/otel/trace v1.44.0
go: downloading github.com/pion/ice/v4 v4.2.7
go: downloading github.com/pion/stun/v3 v3.1.6
go: downloading github.com/pion/transport/v4 v4.0.2
go: downloading github.com/benbjohnson/clock v1.3.5
go: downloading github.com/fsnotify/fsnotify v1.10.1
go: downloading github.com/gammazero/deque v1.2.1
go: downloading github.com/jxskiss/base62 v1.1.0
go: downloading github.com/bep/debounce v1.2.1
go: downloading github.com/go-logr/stdr v1.2.2
go: downloading github.com/google/uuid v1.6.0
go: downloading github.com/magefile/mage v1.17.2
go: downloading golang.org/x/crypto v0.52.0
go: downloading golang.org/x/sync v0.22.0
go: downloading golang.org/x/sys v0.45.0
go: downloading github.com/go-gst/go-pointer v0.0.0-20241127163939-ba766f075b4c
go: downloading golang.org/x/net v0.55.0
go: downloading github.com/pion/randutil v0.1.0
go: downloading github.com/pion/datachannel v1.6.2
go: downloading github.com/pion/logging v0.2.4
go: downloading github.com/pion/sctp v1.10.3
go: downloading github.com/pion/srtp/v3 v3.0.12
go: downloading github.com/hashicorp/go-multierror v1.1.1
go: downloading github.com/pkg/errors v0.9.1
go: downloading github.com/mitchellh/mapstructure v1.5.0
go: downloading github.com/yutopp/go-amf0 v0.1.1
go: downloading github.com/beorn7/perks v1.0.1
go: downloading github.com/cespare/xxhash/v2 v2.3.0
go: downloading github.com/prometheus/client_model v0.6.2
go: downloading github.com/prometheus/common v0.68.1
go: downloading github.com/prometheus/procfs v0.20.1
go: downloading github.com/mackerelio/go-osstat v0.2.7
go: downloading buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go v1.36.11-20260415201107-50325440f8f2.1
go: downloading buf.build/go/protovalidate v1.2.0
go: downloading go.yaml.in/yaml/v3 v3.0.4
go: downloading github.com/zeebo/xxh3 v1.1.0
go: downloading github.com/klauspost/compress v1.18.6
go: downloading github.com/nats-io/nkeys v0.4.16
go: downloading github.com/nats-io/nuid v1.0.1
go: downloading go.opentelemetry.io/auto/sdk v1.2.1
go: downloading github.com/pion/mdns/v2 v2.1.0
go: downloading github.com/pion/turn/v5 v5.0.10
go: downloading github.com/wlynxg/anet v0.0.5
go: downloading github.com/lithammer/shortuuid/v4 v4.2.0
go: downloading github.com/golang-jwt/jwt/v5 v5.3.1
go: downloading github.com/gorilla/websocket v1.5.4-0.20250319132907-e064f32e3674
go: downloading github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc
go: downloading github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2
go: downloading github.com/hashicorp/errwrap v1.1.0
go: downloading github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822
go: downloading github.com/google/cel-go v0.28.1
go: downloading github.com/klauspost/cpuid/v2 v2.3.0
go: downloading golang.org/x/time v0.15.0
go: downloading cel.dev/expr v0.25.2
go: downloading google.golang.org/genproto/googleapis/api v0.0.0-20260526163538-3dc84a4a5aaa
go: downloading github.com/antlr4-go/antlr/v4 v4.13.1
go: downloading github.com/go-gst/go-glib v0.0.2
go: github.com/livekit/ingress/pkg/media imports
	github.com/go-gst/go-glib/glib: cannot find module providing package github.com/go-gst/go-glib/glib

@renovate
renovate Bot force-pushed the renovate/go-deps branch from 3a79f66 to 3ebc66f Compare July 29, 2026 17:26
@renovate
Update go deps
028dfcc 
Generated by renovateBot
@renovate
renovate Bot force-pushed the renovate/go-deps branch from 3ebc66f to 028dfcc Compare July 29, 2026 21:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

slack-ts:cs-devs:1783911780.740109

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants