Repository navigation
fix wrong PTS and wrong playback of alwaysAvailableFile (#5436) - #5960
Merged
Merged
Conversation
PTS offset of samples was not properly considered, and sleep between samples was PTS-based instead of being DTS-based.
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #5960 +/- ##
==========================================
- Coverage 62.41% 62.40% -0.01%
==========================================
Files 247 247
Lines 21421 21422 +1
==========================================
Hits 13369 13369
+ Misses 6927 6925 -2
- Partials 1125 1128 +3 ☔ View full report in Codecov by Harness. 🚀 New features to boost your workflow:
|
Contributor
|
This issue is mentioned in release v1.19.3 🚀 |
dclasen-qd
added a commit
to qvest-digital/dmf-mf-mediamtx
that referenced
this pull request
Aug 26, 2026
* bump golangci-lint to 2.12.2 (#5727) * docs: update (#5747) * build(deps): bump github.com/datarhei/gosrt from 0.10.0 to 0.11.0 (#5749) Bumps [github.com/datarhei/gosrt](https://github.com/datarhei/gosrt) from 0.10.0 to 0.11.0. - [Commits](https://github.com/datarhei/gosrt/compare/v0.10.0...v0.11.0) --- updated-dependencies: - dependency-name: github.com/datarhei/gosrt dependency-version: 0.11.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump golang.org/x/crypto from 0.50.0 to 0.51.0 (#5752) Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.50.0 to 0.51.0. - [Commits](https://github.com/golang/crypto/compare/v0.50.0...v0.51.0) --- updated-dependencies: - dependency-name: golang.org/x/crypto dependency-version: 0.51.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump golang.org/x/net from 0.53.0 to 0.54.0 (#5751) Bumps [golang.org/x/net](https://github.com/golang/net) from 0.53.0 to 0.54.0. - [Commits](https://github.com/golang/net/compare/v0.53.0...v0.54.0) --- updated-dependencies: - dependency-name: golang.org/x/net dependency-version: 0.54.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * webrtc: fix checking POST responses (#5758) * webrtc: support interacting with servers with no trickle ICE (#5273) (#5757) * bump mediamtx-rpicamera to v2.5.7 (#5761) * build(deps): bump code.cloudfoundry.org/bytefmt from 0.71.0 to 0.72.0 (#5760) Bumps [code.cloudfoundry.org/bytefmt](https://github.com/cloudfoundry/bytefmt) from 0.71.0 to 0.72.0. - [Release notes](https://github.com/cloudfoundry/bytefmt/releases) - [Commits](https://github.com/cloudfoundry/bytefmt/compare/v0.71.0...v0.72.0) --- updated-dependencies: - dependency-name: code.cloudfoundry.org/bytefmt dependency-version: 0.72.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * rpi: support changing text overlay dynamically (#5270) (#5748) * build(deps): bump github.com/matthewhartstonge/argon2 (#5768) Bumps [github.com/matthewhartstonge/argon2](https://github.com/matthewhartstonge/argon2) from 1.5.2 to 1.5.3. - [Release notes](https://github.com/matthewhartstonge/argon2/releases) - [Changelog](https://github.com/matthewhartstonge/argon2/blob/main/CHANGELOG.md) - [Commits](https://github.com/matthewhartstonge/argon2/compare/v1.5.2...v1.5.3) --- updated-dependencies: - dependency-name: github.com/matthewhartstonge/argon2 dependency-version: 1.5.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * bump Ubuntu to 24.04 (#5769) * docs: update (#5756) * build(deps): bump github.com/bluenviron/gortmplib from 0.3.1 to 0.3.2 (#5771) Bumps [github.com/bluenviron/gortmplib](https://github.com/bluenviron/gortmplib) from 0.3.1 to 0.3.2. - [Commits](https://github.com/bluenviron/gortmplib/compare/v0.3.1...v0.3.2) --- updated-dependencies: - dependency-name: github.com/bluenviron/gortmplib dependency-version: 0.3.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump github.com/bluenviron/gortsplib/v5 from 5.5.2 to 5.5.3 (#5773) Bumps [github.com/bluenviron/gortsplib/v5](https://github.com/bluenviron/gortsplib) from 5.5.2 to 5.5.3. - [Commits](https://github.com/bluenviron/gortsplib/compare/v5.5.2...v5.5.3) --- updated-dependencies: - dependency-name: github.com/bluenviron/gortsplib/v5 dependency-version: 5.5.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump github.com/bluenviron/gohlslib/v2 from 2.3.1 to 2.3.2 (#5772) Bumps [github.com/bluenviron/gohlslib/v2](https://github.com/bluenviron/gohlslib) from 2.3.1 to 2.3.2. - [Commits](https://github.com/bluenviron/gohlslib/compare/v2.3.1...v2.3.2) --- updated-dependencies: - dependency-name: github.com/bluenviron/gohlslib/v2 dependency-version: 2.3.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * webrtc: support WHIP ICE restarts (#5183) (#5770) * bump mediamtx-rpicamera to v2.6.0 (#5780) * build(deps): bump code.cloudfoundry.org/bytefmt from 0.72.0 to 0.73.0 (#5783) Bumps [code.cloudfoundry.org/bytefmt](https://github.com/cloudfoundry/bytefmt) from 0.72.0 to 0.73.0. - [Release notes](https://github.com/cloudfoundry/bytefmt/releases) - [Commits](https://github.com/cloudfoundry/bytefmt/compare/v0.72.0...v0.73.0) --- updated-dependencies: - dependency-name: code.cloudfoundry.org/bytefmt dependency-version: 0.73.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump github.com/go-git/go-git/v5 from 5.19.0 to 5.19.1 (#5785) Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) from 5.19.0 to 5.19.1. - [Release notes](https://github.com/go-git/go-git/releases) - [Changelog](https://github.com/go-git/go-git/blob/main/HISTORY.md) - [Commits](https://github.com/go-git/go-git/compare/v5.19.0...v5.19.1) --- updated-dependencies: - dependency-name: github.com/go-git/go-git/v5 dependency-version: 5.19.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump github.com/abema/go-mp4 from 1.5.0 to 1.6.0 (#5784) Bumps [github.com/abema/go-mp4](https://github.com/abema/go-mp4) from 1.5.0 to 1.6.0. - [Release notes](https://github.com/abema/go-mp4/releases) - [Commits](https://github.com/abema/go-mp4/compare/v1.5.0...v1.6.0) --- updated-dependencies: - dependency-name: github.com/abema/go-mp4 dependency-version: 1.6.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * add --check-version command line flag (#5786) this allows to check whether a new version is available without upgrading. * use file name suffix for OS-specific code wherever possible (#5787) * rtmp: support reading and writing FLAC (#5778) (#5789) * hls: support reading and publishing FLAC (#5778) (#5791) * build(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 (#5793) Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.51.0 to 0.52.0. - [Commits](https://github.com/golang/crypto/compare/v0.51.0...v0.52.0) --- updated-dependencies: - dependency-name: golang.org/x/crypto dependency-version: 0.52.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump github.com/pion/webrtc/v4 from 4.2.12 to 4.2.13 (#5794) Bumps [github.com/pion/webrtc/v4](https://github.com/pion/webrtc) from 4.2.12 to 4.2.13. - [Release notes](https://github.com/pion/webrtc/releases) - [Commits](https://github.com/pion/webrtc/compare/v4.2.12...v4.2.13) --- updated-dependencies: - dependency-name: github.com/pion/webrtc/v4 dependency-version: 4.2.13 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump golang.org/x/sys from 0.44.0 to 0.45.0 (#5795) Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.44.0 to 0.45.0. - [Commits](https://github.com/golang/sys/compare/v0.44.0...v0.45.0) --- updated-dependencies: - dependency-name: golang.org/x/sys dependency-version: 0.45.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump golang.org/x/net from 0.54.0 to 0.55.0 (#5796) Bumps [golang.org/x/net](https://github.com/golang/net) from 0.54.0 to 0.55.0. - [Commits](https://github.com/golang/net/compare/v0.54.0...v0.55.0) --- updated-dependencies: - dependency-name: golang.org/x/net dependency-version: 0.55.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * webrtc: make JavaScript internal variables private (#5804) * webrtc: make handleError accept strings only (#5805) * build(deps): bump github.com/matthewhartstonge/argon2 (#5802) Bumps [github.com/matthewhartstonge/argon2](https://github.com/matthewhartstonge/argon2) from 1.5.3 to 1.5.4. - [Release notes](https://github.com/matthewhartstonge/argon2/releases) - [Changelog](https://github.com/matthewhartstonge/argon2/blob/main/CHANGELOG.md) - [Commits](https://github.com/matthewhartstonge/argon2/compare/v1.5.3...v1.5.4) --- updated-dependencies: - dependency-name: github.com/matthewhartstonge/argon2 dependency-version: 1.5.4 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * hls: remove redundant JavaScript argument (#5806) * apply prettier to the entire repository (#5799) * build(deps): bump code.cloudfoundry.org/bytefmt from 0.73.0 to 0.74.0 (#5807) Bumps [code.cloudfoundry.org/bytefmt](https://github.com/cloudfoundry/bytefmt) from 0.73.0 to 0.74.0. - [Release notes](https://github.com/cloudfoundry/bytefmt/releases) - [Commits](https://github.com/cloudfoundry/bytefmt/compare/v0.73.0...v0.74.0) --- updated-dependencies: - dependency-name: code.cloudfoundry.org/bytefmt dependency-version: 0.74.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump github.com/pion/transport/v4 from 4.0.1 to 4.0.2 (#5809) Bumps [github.com/pion/transport/v4](https://github.com/pion/transport) from 4.0.1 to 4.0.2. - [Release notes](https://github.com/pion/transport/releases) - [Commits](https://github.com/pion/transport/compare/v4.0.1...v4.0.2) --- updated-dependencies: - dependency-name: github.com/pion/transport/v4 dependency-version: 4.0.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump github.com/pion/ice/v4 from 4.2.5 to 4.2.6 (#5812) Bumps [github.com/pion/ice/v4](https://github.com/pion/ice) from 4.2.5 to 4.2.6. - [Release notes](https://github.com/pion/ice/releases) - [Commits](https://github.com/pion/ice/compare/v4.2.5...v4.2.6) --- updated-dependencies: - dependency-name: github.com/pion/ice/v4 dependency-version: 4.2.6 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * modernize code (#5814) * webrtc: rename incoming/outgoing into inbound/outbound (#5816) * fix two hot reloading cases (#5817) * reload SRT server when metrics server is reloaded * reload API server when RTMPS server is reloaded * Add user agent field to RTMP, RTSP, WebRTC, and HLS (#5753) Surface user agent in the auth HTTP webhook payload as "userAgent" and in the API structs for RTMP, RTSP, WebRTC and HLS connections. --------- Co-authored-by: aler9 <46489434+aler9@users.noreply.github.com> * build(deps): bump github.com/bluenviron/gohlslib/v2 (#5823) Bumps [github.com/bluenviron/gohlslib/v2](https://github.com/bluenviron/gohlslib) from 2.3.3-0.20260521124246-e949956f870d to 2.4.0. - [Commits](https://github.com/bluenviron/gohlslib/commits/v2.4.0) --- updated-dependencies: - dependency-name: github.com/bluenviron/gohlslib/v2 dependency-version: 2.4.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump github.com/bluenviron/gortmplib (#5820) Bumps [github.com/bluenviron/gortmplib](https://github.com/bluenviron/gortmplib) from 0.3.3-0.20260520213319-89bf8b0c2c7f to 0.4.0. - [Commits](https://github.com/bluenviron/gortmplib/commits/v0.4.0) --- updated-dependencies: - dependency-name: github.com/bluenviron/gortmplib dependency-version: 0.4.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * webrtc: fix connectivity after network changes (#5097) (#5818) * build(deps): bump github.com/bluenviron/gortsplib/v5 from 5.5.3 to 5.5.4 (#5822) * build(deps): bump github.com/bluenviron/gortsplib/v5 from 5.5.3 to 5.5.4 Bumps [github.com/bluenviron/gortsplib/v5](https://github.com/bluenviron/gortsplib) from 5.5.3 to 5.5.4. - [Commits](https://github.com/bluenviron/gortsplib/compare/v5.5.3...v5.5.4) --- updated-dependencies: - dependency-name: github.com/bluenviron/gortsplib/v5 dependency-version: 5.5.4 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> * additional changes --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: aler9 <46489434+aler9@users.noreply.github.com> * build(deps): bump github.com/pion/webrtc/v4 from 4.2.13 to 4.2.14 (#5824) Bumps [github.com/pion/webrtc/v4](https://github.com/pion/webrtc) from 4.2.13 to 4.2.14. - [Release notes](https://github.com/pion/webrtc/releases) - [Commits](https://github.com/pion/webrtc/compare/v4.2.13...v4.2.14) --- updated-dependencies: - dependency-name: github.com/pion/webrtc/v4 dependency-version: 4.2.14 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * support reading and publishing with Media-over-QUIC (#5815) Media-over-QUIC is a streaming protocol built upon cutting edge protocols (QUIC, HTTP3) and browser APIs (WebTransport, WebCodecs). It's slightly faster than WebRTC, has an advanced data recovery mechanism (placed at the frame level and not at the packet level), it supports additional codecs (FLAC) and is less complicated to route. * build(deps): bump github.com/quic-go/quic-go from 0.59.0 to 0.59.1 (#5829) Bumps [github.com/quic-go/quic-go](https://github.com/quic-go/quic-go) from 0.59.0 to 0.59.1. - [Release notes](https://github.com/quic-go/quic-go/releases) - [Commits](https://github.com/quic-go/quic-go/compare/v0.59.0...v0.59.1) --- updated-dependencies: - dependency-name: github.com/quic-go/quic-go dependency-version: 0.59.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * support using regexp groups in every part of a source URL (#5766) (#5779) Co-authored-by: aler9 <46489434+aler9@users.noreply.github.com> * build(deps): bump code.cloudfoundry.org/bytefmt from 0.74.0 to 0.75.0 (#5833) Bumps [code.cloudfoundry.org/bytefmt](https://github.com/cloudfoundry/bytefmt) from 0.74.0 to 0.75.0. - [Release notes](https://github.com/cloudfoundry/bytefmt/releases) - [Commits](https://github.com/cloudfoundry/bytefmt/compare/v0.74.0...v0.75.0) --- updated-dependencies: - dependency-name: code.cloudfoundry.org/bytefmt dependency-version: 0.75.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * moq: fix race condition when closing server (#5836) some sessions were hanging if they were concurrently being closed by the remote peer. * restore pion/ice (#5837) * replace errors.As with modern errors.AsType (#5834) * improve anti-brute force mechanism (#5835) delay authentication failure responses by a random amount of time, use the same anti-brute force mechanism with all users. * rtmp, rtsp: support PROXY protocol (#5754) Support PROXY protocol v1/v2 on RTMP, RTMPS, RTSP, and RTSPS TCP listeners so real client IPs are visible when running behind L4 proxies (nginx stream, HAProxy, AWS NLB). --------- Co-authored-by: aler9 <46489434+aler9@users.noreply.github.com> * hls: fix race condition in tests (#5842) * restrict GitHub Actions workflow permissions (#5840) * build(deps): bump github.com/pion/webrtc/v4 from 4.2.14 to 4.2.15 (#5844) Bumps [github.com/pion/webrtc/v4](https://github.com/pion/webrtc) from 4.2.14 to 4.2.15. - [Release notes](https://github.com/pion/webrtc/releases) - [Commits](https://github.com/pion/webrtc/compare/v4.2.14...v4.2.15) --- updated-dependencies: - dependency-name: github.com/pion/webrtc/v4 dependency-version: 4.2.15 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump github.com/quic-go/quic-go from 0.59.1 to 0.60.0 (#5843) Bumps [github.com/quic-go/quic-go](https://github.com/quic-go/quic-go) from 0.59.1 to 0.60.0. - [Release notes](https://github.com/quic-go/quic-go/releases) - [Commits](https://github.com/quic-go/quic-go/compare/v0.59.1...v0.60.0) --- updated-dependencies: - dependency-name: github.com/quic-go/quic-go dependency-version: 0.60.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * moq: rename moqHTTPS2Address into moqHTTP2Address, moqHTTPS3Address into moqHTTP3Address (#5841) * build(deps): bump code.cloudfoundry.org/bytefmt from 0.75.0 to 0.76.0 (#5852) Bumps [code.cloudfoundry.org/bytefmt](https://github.com/cloudfoundry/bytefmt) from 0.75.0 to 0.76.0. - [Release notes](https://github.com/cloudfoundry/bytefmt/releases) - [Commits](https://github.com/cloudfoundry/bytefmt/compare/v0.75.0...v0.76.0) --- updated-dependencies: - dependency-name: code.cloudfoundry.org/bytefmt dependency-version: 0.76.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump codecov/codecov-action from 6 to 7 (#5851) Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 6 to 7. - [Release notes](https://github.com/codecov/codecov-action/releases) - [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/codecov/codecov-action/compare/v6...v7) --- updated-dependencies: - dependency-name: codecov/codecov-action dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0 (#5847) Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.52.0 to 0.53.0. - [Commits](https://github.com/golang/crypto/compare/v0.52.0...v0.53.0) --- updated-dependencies: - dependency-name: golang.org/x/crypto dependency-version: 0.53.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * rtsp: use ServerStream.ReloadDesc to propagate description changes to RTSP servers (#5856) * build(deps): bump golang.org/x/net from 0.55.0 to 0.56.0 (#5855) Bumps [golang.org/x/net](https://github.com/golang/net) from 0.55.0 to 0.56.0. - [Commits](https://github.com/golang/net/compare/v0.55.0...v0.56.0) --- updated-dependencies: - dependency-name: golang.org/x/net dependency-version: 0.56.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * rtsp: restore support for H264 packetization-mode 0 (#5846) (#5857) H264 streams with packetization-mode=0 cannot be routed with UDP since packets are too big. Inbound streams with packetization-mode=0 are blocked by the server since v1.19.0 but this caused compatibility issues with some cameras. The server is now able to receive such streams with TCP, and automatically remuxes them in streams with packetization-mode=1, which can be routed freely. * limit size of HTTP requests shown in debug logs (#5858) * print body of selected HTTP responses when log level is debug (#5859) * build(deps): bump github.com/bluenviron/gortsplib/v5 (#5860) Bumps [github.com/bluenviron/gortsplib/v5](https://github.com/bluenviron/gortsplib) from 5.5.5-0.20260610215215-4cff4156075d to 5.6.0. - [Commits](https://github.com/bluenviron/gortsplib/commits/v5.6.0) --- updated-dependencies: - dependency-name: github.com/bluenviron/gortsplib/v5 dependency-version: 5.6.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump github.com/matthewhartstonge/argon2 (#5866) Bumps [github.com/matthewhartstonge/argon2](https://github.com/matthewhartstonge/argon2) from 1.5.4 to 1.5.5. - [Release notes](https://github.com/matthewhartstonge/argon2/releases) - [Changelog](https://github.com/matthewhartstonge/argon2/blob/main/CHANGELOG.md) - [Commits](https://github.com/matthewhartstonge/argon2/compare/v1.5.4...v1.5.5) --- updated-dependencies: - dependency-name: github.com/matthewhartstonge/argon2 dependency-version: 1.5.5 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * playback: fix panic when MP4 muxer flushes with no samples (#5867) Co-authored-by: Arturo2511 <arturomozzon@gmail.com> * remove redundant copy operation (#5862) Since #5856, OrigDesc of Streams is never changed, so there's no reason to clone offlineDesc before putting it into OrigDesc. * bump NodeJS to 24 (#5872) * bump Alpine to 3.24 (#5853) * restore quic-go/webtransport-go (#5876) * build(deps): bump code.cloudfoundry.org/bytefmt from 0.76.0 to 0.77.0 (#5879) Bumps [code.cloudfoundry.org/bytefmt](https://github.com/cloudfoundry/bytefmt) from 0.76.0 to 0.77.0. - [Release notes](https://github.com/cloudfoundry/bytefmt/releases) - [Commits](https://github.com/cloudfoundry/bytefmt/compare/v0.76.0...v0.77.0) --- updated-dependencies: - dependency-name: code.cloudfoundry.org/bytefmt dependency-version: 0.77.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump actions/checkout from 6 to 7 (#5883) Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v6...v7) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump github.com/abema/go-mp4 from 1.6.0 to 1.7.1 (#5880) Bumps [github.com/abema/go-mp4](https://github.com/abema/go-mp4) from 1.6.0 to 1.7.1. - [Release notes](https://github.com/abema/go-mp4/releases) - [Commits](https://github.com/abema/go-mp4/compare/v1.6.0...v1.7.1) --- updated-dependencies: - dependency-name: github.com/abema/go-mp4 dependency-version: 1.7.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * redact sensitive headers in HTTP debug logs (#5873) * move Content-Types to log in a map (#5875) * fix(recordstore): decode timezone offset minutes correctly (#5884) timeLocationDecode multiplied the minutes field of a %z token by 3600 instead of 60, and did not apply the sign to the minutes term. As a result, any non-whole-hour timezone offset (e.g. +0530, +0545, +0330, -0330) was decoded incorrectly: +0530 produced 126000s instead of 19800s. This broke the round-trip between Path.Encode and Path.Decode for fractional-hour timezones. The encode side already used off/60/60 and (off/60)%60 correctly, so this change makes the two consistent. Add round-trip test cases with fractional-hour offsets (+0530, +0545, -0330) to cover the previously untested code path. * improve HTTP server performance (#5886) log incoming requests without cloning. * rtsp: add rtspScale parameter to inject Scale header on PLAY (#5800) Co-authored-by: aler9 <46489434+aler9@users.noreply.github.com> * webrtc: skip unresolvable webrtcAdditionalHosts entries instead of aborting (#5845) Since #4866, hostnames in webrtcAdditionalHosts are resolved server-side via net.LookupIP, and a resolution failure aborts the entire WHEP/WHIP session. A single entry that can't be resolved on the server (e.g. air-gapped networks without DNS, or a name that only resolves on the client) therefore takes down all WebRTC playback, even when the other entries are valid. Log a warning and skip the unresolvable entry instead of returning an error, so the remaining valid candidates are still offered. Signed-off-by: suMin <sumin77123@gmail.com> * build(deps): bump github.com/pion/sdp/v3 from 3.0.18 to 3.0.19 (#5889) Bumps [github.com/pion/sdp/v3](https://github.com/pion/sdp) from 3.0.18 to 3.0.19. - [Release notes](https://github.com/pion/sdp/releases) - [Commits](https://github.com/pion/sdp/compare/v3.0.18...v3.0.19) --- updated-dependencies: - dependency-name: github.com/pion/sdp/v3 dependency-version: 3.0.19 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump code.cloudfoundry.org/bytefmt from 0.77.0 to 0.78.0 (#5891) Bumps [code.cloudfoundry.org/bytefmt](https://github.com/cloudfoundry/bytefmt) from 0.77.0 to 0.78.0. - [Release notes](https://github.com/cloudfoundry/bytefmt/releases) - [Commits](https://github.com/cloudfoundry/bytefmt/compare/v0.77.0...v0.78.0) --- updated-dependencies: - dependency-name: code.cloudfoundry.org/bytefmt dependency-version: 0.78.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * rpi: exclude additional code from non-arm builds (#5893) * rpi: add unified rpiCameraH264Profile, rpiCameraH264Level params (#5894) These replace rpiCameraHardwareH264Profile, rpiCameraHardwareH264Level, rpiCameraSoftwareH264Profile, rpiCameraSoftwareH264Level. * rpicamera: support encoding primary stream with MJPEG (2/2) (#5892) * support encoding secondary stream with H264 (2/2) (#4485) (#5898) * build(deps): bump github.com/bluenviron/gortsplib/v5 from 5.6.0 to 5.6.1 (#5900) Bumps [github.com/bluenviron/gortsplib/v5](https://github.com/bluenviron/gortsplib) from 5.6.0 to 5.6.1. - [Commits](https://github.com/bluenviron/gortsplib/compare/v5.6.0...v5.6.1) --- updated-dependencies: - dependency-name: github.com/bluenviron/gortsplib/v5 dependency-version: 5.6.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * prevent truncation of 64-bit values on 32-bit platforms (#5902) * docs: change suggested hls.js CDN (#5903) * docs: fix MoQ read URL (#5904) * build(deps): bump github.com/pires/go-proxyproto from 0.12.0 to 0.14.0 (#5914) Bumps [github.com/pires/go-proxyproto](https://github.com/pires/go-proxyproto) from 0.12.0 to 0.14.0. - [Release notes](https://github.com/pires/go-proxyproto/releases) - [Commits](https://github.com/pires/go-proxyproto/compare/v0.12.0...v0.14.0) --- updated-dependencies: - dependency-name: github.com/pires/go-proxyproto dependency-version: 0.14.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump github.com/pion/rtcp from 1.2.16 to 1.2.17 (#5910) Bumps [github.com/pion/rtcp](https://github.com/pion/rtcp) from 1.2.16 to 1.2.17. - [Release notes](https://github.com/pion/rtcp/releases) - [Commits](https://github.com/pion/rtcp/compare/v1.2.16...v1.2.17) --- updated-dependencies: - dependency-name: github.com/pion/rtcp dependency-version: 1.2.17 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump code.cloudfoundry.org/bytefmt from 0.78.0 to 0.79.0 (#5911) Bumps [code.cloudfoundry.org/bytefmt](https://github.com/cloudfoundry/bytefmt) from 0.78.0 to 0.79.0. - [Release notes](https://github.com/cloudfoundry/bytefmt/releases) - [Commits](https://github.com/cloudfoundry/bytefmt/compare/v0.78.0...v0.79.0) --- updated-dependencies: - dependency-name: code.cloudfoundry.org/bytefmt dependency-version: 0.79.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump github.com/pion/webrtc/v4 from 4.2.15 to 4.2.16 (#5907) Bumps [github.com/pion/webrtc/v4](https://github.com/pion/webrtc) from 4.2.15 to 4.2.16. - [Release notes](https://github.com/pion/webrtc/releases) - [Commits](https://github.com/pion/webrtc/compare/v4.2.15...v4.2.16) --- updated-dependencies: - dependency-name: github.com/pion/webrtc/v4 dependency-version: 4.2.16 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump github.com/pion/rtp from 1.10.2 to 1.10.3 (#5917) Bumps [github.com/pion/rtp](https://github.com/pion/rtp) from 1.10.2 to 1.10.3. - [Release notes](https://github.com/pion/rtp/releases) - [Commits](https://github.com/pion/rtp/compare/v1.10.2...v1.10.3) --- updated-dependencies: - dependency-name: github.com/pion/rtp dependency-version: 1.10.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * api: generate most of OpenAPI automatically (#5918) enums and structs are now generated automatically. This eliminates some inconsistencies and makes development easier. * fix error message (#5922) 'all' is a synonym for 'all_others' * build(deps): bump github.com/quic-go/webtransport-go (#5929) Bumps [github.com/quic-go/webtransport-go](https://github.com/quic-go/webtransport-go) from 0.11.0 to 0.11.1. - [Release notes](https://github.com/quic-go/webtransport-go/releases) - [Commits](https://github.com/quic-go/webtransport-go/compare/v0.11.0...v0.11.1) --- updated-dependencies: - dependency-name: github.com/quic-go/webtransport-go dependency-version: 0.11.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump code.cloudfoundry.org/bytefmt from 0.79.0 to 0.80.0 (#5930) Bumps [code.cloudfoundry.org/bytefmt](https://github.com/cloudfoundry/bytefmt) from 0.79.0 to 0.80.0. - [Release notes](https://github.com/cloudfoundry/bytefmt/releases) - [Commits](https://github.com/cloudfoundry/bytefmt/compare/v0.79.0...v0.80.0) --- updated-dependencies: - dependency-name: code.cloudfoundry.org/bytefmt dependency-version: 0.80.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump golang.org/x/term from 0.44.0 to 0.45.0 (#5937) Bumps [golang.org/x/term](https://github.com/golang/term) from 0.44.0 to 0.45.0. - [Commits](https://github.com/golang/term/compare/v0.44.0...v0.45.0) --- updated-dependencies: - dependency-name: golang.org/x/term dependency-version: 0.45.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump github.com/pion/ice/v4 (#5947) Bumps [github.com/pion/ice/v4](https://github.com/pion/ice) from 4.2.8-0.20260604162030-72f5001c4596 to 4.3.0. - [Release notes](https://github.com/pion/ice/releases) - [Commits](https://github.com/pion/ice/commits/v4.3.0) --- updated-dependencies: - dependency-name: github.com/pion/ice/v4 dependency-version: 4.3.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump actions/setup-go from 6 to 7 (#5952) Bumps [actions/setup-go](https://github.com/actions/setup-go) from 6 to 7. - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](https://github.com/actions/setup-go/compare/v6...v7) --- updated-dependencies: - dependency-name: actions/setup-go dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump github.com/pires/go-proxyproto from 0.14.0 to 0.15.0 (#5946) Bumps [github.com/pires/go-proxyproto](https://github.com/pires/go-proxyproto) from 0.14.0 to 0.15.0. - [Release notes](https://github.com/pires/go-proxyproto/releases) - [Commits](https://github.com/pires/go-proxyproto/compare/v0.14.0...v0.15.0) --- updated-dependencies: - dependency-name: github.com/pires/go-proxyproto dependency-version: 0.15.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 (#5945) Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.53.0 to 0.54.0. - [Commits](https://github.com/golang/crypto/compare/v0.53.0...v0.54.0) --- updated-dependencies: - dependency-name: golang.org/x/crypto dependency-version: 0.54.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump golang.org/x/sync from 0.21.0 to 0.22.0 (#5939) Bumps [golang.org/x/sync](https://github.com/golang/sync) from 0.21.0 to 0.22.0. - [Commits](https://github.com/golang/sync/compare/v0.21.0...v0.22.0) --- updated-dependencies: - dependency-name: golang.org/x/sync dependency-version: 0.22.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump golang.org/x/net from 0.56.0 to 0.57.0 (#5944) Bumps [golang.org/x/net](https://github.com/golang/net) from 0.56.0 to 0.57.0. - [Commits](https://github.com/golang/net/compare/v0.56.0...v0.57.0) --- updated-dependencies: - dependency-name: golang.org/x/net dependency-version: 0.57.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * fix clearing lists with environment variables (#5410) (#5924) MTX_AUTHINTERNALUSERS_0_IPS, MTX_LOGDESTINATIONS and MTX_RTSPTRANSPORTS can now be used to clear their corresponding list by setting them to an empty value. * build(deps): bump github.com/matthewhartstonge/argon2 (#5954) Bumps [github.com/matthewhartstonge/argon2](https://github.com/matthewhartstonge/argon2) from 1.5.5 to 1.5.6. - [Release notes](https://github.com/matthewhartstonge/argon2/releases) - [Changelog](https://github.com/matthewhartstonge/argon2/blob/main/CHANGELOG.md) - [Commits](https://github.com/matthewhartstonge/argon2/compare/v1.5.5...v1.5.6) --- updated-dependencies: - dependency-name: github.com/matthewhartstonge/argon2 dependency-version: 1.5.6 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump code.cloudfoundry.org/bytefmt from 0.80.0 to 0.81.0 (#5955) Bumps [code.cloudfoundry.org/bytefmt](https://github.com/cloudfoundry/bytefmt) from 0.80.0 to 0.81.0. - [Release notes](https://github.com/cloudfoundry/bytefmt/releases) - [Commits](https://github.com/cloudfoundry/bytefmt/compare/v0.80.0...v0.81.0) --- updated-dependencies: - dependency-name: code.cloudfoundry.org/bytefmt dependency-version: 0.81.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump github.com/alecthomas/kong from 1.15.0 to 1.16.0 (#5953) Bumps [github.com/alecthomas/kong](https://github.com/alecthomas/kong) from 1.15.0 to 1.16.0. - [Commits](https://github.com/alecthomas/kong/compare/v1.15.0...v1.16.0) --- updated-dependencies: - dependency-name: github.com/alecthomas/kong dependency-version: 1.16.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * add runOnOnline / runOnOffline hooks (#5399) (#5956) These are triggered and a stream is online (i.e. not just provided by an offline segment). * rename runOnReady into runOnAvailable, runOnNotReady into runOnUnavailable (#5957) * srt: fix compatibility with StreamToStudio app (#5414) (#5928) * rtsp: restrict UDP port range to 32768-60999 (#5398) (#5958) this is the default Linux ephemeral port range. * fix wrong PTS and wrong playback of alwaysAvailableFile (#5436) (#5960) PTS offset of samples was not properly considered, and sleep between samples was PTS-based instead of being DTS-based. * avoid potential timing attack when validating SHA256 credentials (#5961) The == operator is vulnerable to timing attacks as it short-circuits on a mismatch. Use ConstantTimeCompare to avoid this vector. Co-authored-by: Tristan Matthews <tmatth@videolan.org> * normalize authentication error messages (#5421) (#5959) Log authentication errors as soon as possible, use the "warn" level, use the same message whatever the author or protocol. * adjust code to prevent security scan false positives (#5963) ... about string escaping. * moq: fix race condition during startup (#5965) allocate the HTTP server only after the MoQ server has been initialized. * moq: fix several panics and OOM errors (#5964) Check for limits before allocating memory by using sizes passed from the remote peer. Also add fuzzing to all MoQ primitives. * ask for credentials only in case of protocols that support it (#5966) When clients connect with some protocols (SRT, RTMP), they are unable to provide credentials even if they are asked to. In this case, it's useless to wait for credentials, and it's better to immediately log authentication errors and apply the anti-brute force algorithm. * docs: add fail2ban integration (#5016) (#5967) * moq: support draft-19 of the specification (#5968) * support draft-19 of the specification * support subscribing the same track multiple times * build(deps): bump github.com/pion/webrtc/v4 from 4.2.16 to 4.2.17 (#5970) Bumps [github.com/pion/webrtc/v4](https://github.com/pion/webrtc) from 4.2.16 to 4.2.17. - [Release notes](https://github.com/pion/webrtc/releases) - [Commits](https://github.com/pion/webrtc/compare/v4.2.16...v4.2.17) --- updated-dependencies: - dependency-name: github.com/pion/webrtc/v4 dependency-version: 4.2.17 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump github.com/pion/interceptor from 0.1.45 to 0.1.46 (#5971) Bumps [github.com/pion/interceptor](https://github.com/pion/interceptor) from 0.1.45 to 0.1.46. - [Release notes](https://github.com/pion/interceptor/releases) - [Commits](https://github.com/pion/interceptor/compare/v0.1.45...v0.1.46) --- updated-dependencies: - dependency-name: github.com/pion/interceptor dependency-version: 0.1.46 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump code.cloudfoundry.org/bytefmt from 0.81.0 to 0.82.0 (#5972) Bumps [code.cloudfoundry.org/bytefmt](https://github.com/cloudfoundry/bytefmt) from 0.81.0 to 0.82.0. - [Release notes](https://github.com/cloudfoundry/bytefmt/releases) - [Commits](https://github.com/cloudfoundry/bytefmt/compare/v0.81.0...v0.82.0) --- updated-dependencies: - dependency-name: code.cloudfoundry.org/bytefmt dependency-version: 0.82.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * add comment to prevent security scan false positives (#5973) * moq: prevent excessive CPU consumption in reorderer (#5976) do not iterate by maxGroupID (passed by user) but iterate by internal pending packets (uncontrolled by user). * rtsp: use session ID in requests to the external authentication server (#5977) Co-authored-by: Cycle1337 <Cycle1337@outlook.com> * build(deps): bump github.com/pion/rtp from 1.10.4 to 1.10.5 (#5974) Bumps [github.com/pion/rtp](https://github.com/pion/rtp) from 1.10.4 to 1.10.5. - [Release notes](https://github.com/pion/rtp/releases) - [Commits](https://github.com/pion/rtp/compare/v1.10.4...v1.10.5) --- updated-dependencies: - dependency-name: github.com/pion/rtp dependency-version: 1.10.5 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * hls, webrtc: prevent cross-origin unauthorized access (#5975) when a user had previously inserted credentials into a MediaMTX instance through a browser, and AllowOrigins was set to a wildcard, third-party websites visited by the user were allowed to read streams without restrictions. This is now prevented by returning "*" in Access-Control-Allow-Origins when AllowOrigins is a wildcard, a behavior that prevents browsers from sharing credentials with third-party websites. * build(deps): bump github.com/bluenviron/gohlslib/v2 from 2.4.0 to 2.4.1 (#5978) Bumps [github.com/bluenviron/gohlslib/v2](https://github.com/bluenviron/gohlslib) from 2.4.0 to 2.4.1. - [Commits](https://github.com/bluenviron/gohlslib/compare/v2.4.0...v2.4.1) --- updated-dependencies: - dependency-name: github.com/bluenviron/gohlslib/v2 dependency-version: 2.4.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump github.com/bluenviron/gortmplib from 0.4.0 to 0.4.1 (#5979) Bumps [github.com/bluenviron/gortmplib](https://github.com/bluenviron/gortmplib) from 0.4.0 to 0.4.1. - [Commits](https://github.com/bluenviron/gortmplib/compare/v0.4.0...v0.4.1) --- updated-dependencies: - dependency-name: github.com/bluenviron/gortmplib dependency-version: 0.4.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump github.com/bluenviron/gortsplib/v5 from 5.6.1 to 5.6.2 (#5981) * build(deps): bump github.com/bluenviron/gortsplib/v5 from 5.6.1 to 5.6.2 Bumps [github.com/bluenviron/gortsplib/v5](https://github.com/bluenviron/gortsplib) from 5.6.1 to 5.6.2. - [Commits](https://github.com/bluenviron/gortsplib/compare/v5.6.1...v5.6.2) --- updated-dependencies: - dependency-name: github.com/bluenviron/gortsplib/v5 dependency-version: 5.6.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> * additional changes --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: aler9 <46489434+aler9@users.noreply.github.com> * docs: add missing MoQ ports (#5983) * improve documentation (#5985) * build(deps): bump github.com/go-git/go-billy/v5 from 5.9.0 to 5.9.1 (#5987) Bumps [github.com/go-git/go-billy/v5](https://github.com/go-git/go-billy) from 5.9.0 to 5.9.1. - [Release notes](https://github.com/go-git/go-billy/releases) - [Commits](https://github.com/go-git/go-billy/compare/v5.9.0...v5.9.1) --- updated-dependencies: - dependency-name: github.com/go-git/go-billy/v5 dependency-version: 5.9.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * srt: improve log clarity (#5990) use message 'passphrase not provided by client' when clients do not provide passphrases. * webrtc: sort tracks in a deterministic way (#5988) (#5989) When ingesting tracks with WebRTC, track order was randomized, preventing multi-track always-available streams from working reliably, since they require tracks to be ordered in a precise way. WebRTC tracks are not ordered by MID, RID, trackID and streamID respectively. * webrtc: fix packet corruption when reading G722 (#6000) Co-authored-by: aler9 <46489434+aler9@users.noreply.github.com> * build(deps): bump github.com/pion/ice/v4 from 4.3.0 to 4.4.0 (#5995) Bumps [github.com/pion/ice/v4](https://github.com/pion/ice) from 4.3.0 to 4.4.0. - [Release notes](https://github.com/pion/ice/releases) - [Commits](https://github.com/pion/ice/compare/v4.3.0...v4.4.0) --- updated-dependencies: - dependency-name: github.com/pion/ice/v4 dependency-version: 4.4.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump github.com/MicahParks/keyfunc/v3 from 3.8.0 to 3.8.1 (#5997) Bumps [github.com/MicahParks/keyfunc/v3](https://github.com/MicahParks/keyfunc) from 3.8.0 to 3.8.1. - [Release notes](https://github.com/MicahParks/keyfunc/releases) - [Commits](https://github.com/MicahParks/keyfunc/compare/v3.8.0...v3.8.1) --- updated-dependencies: - dependency-name: github.com/MicahParks/keyfunc/v3 dependency-version: 3.8.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * fix inability to read some AV1 streams with RTSP (#6001) (#6006) Since v1.16.0, temporal unit delimiters were not stripped from AV1 streams anymore. This has been restored, healing AV1 streams read with RTSP. * build(deps): bump github.com/MicahParks/jwkset from 0.11.1 to 0.11.2 (#5996) Bumps [github.com/MicahParks/jwkset](https://github.com/MicahParks/jwkset) from 0.11.1 to 0.11.2. - [Release notes](https://github.com/MicahParks/jwkset/releases) - [Commits](https://github.com/MicahParks/jwkset/compare/v0.11.1...v0.11.2) --- updated-dependencies: - dependency-name: github.com/MicahParks/jwkset dependency-version: 0.11.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump github.com/pion/interceptor from 0.1.46 to 0.1.47 (#5994) Bumps [github.com/pion/interceptor](https://github.com/pion/interceptor) from 0.1.46 to 0.1.47. - [Release notes](https://github.com/pion/interceptor/releases) - [Commits](https://github.com/pion/interceptor/compare/v0.1.46...v0.1.47) --- updated-dependencies: - dependency-name: github.com/pion/interceptor dependency-version: 0.1.47 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump github.com/go-git/go-git/v5 from 5.19.1 to 5.19.2 (#6010) Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) from 5.19.1 to 5.19.2. - [Release notes](https://github.com/go-git/go-git/releases) - [Changelog](https://github.com/go-git/go-git/blob/main/HISTORY.md) - [Commits](https://github.com/go-git/go-git/compare/v5.19.1...v5.19.2) --- updated-dependencies: - dependency-name: github.com/go-git/go-git/v5 dependency-version: 5.19.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump github.com/pion/webrtc/v4 from 4.2.17 to 4.2.18 (#6009) Bumps [github.com/pion/webrtc/v4](https://github.com/pion/webrtc) from 4.2.17 to 4.2.18. - [Release notes](https://github.com/pion/webrtc/releases) - [Commits](https://github.com/pion/webrtc/compare/v4.2.17...v4.2.18) --- updated-dependencies: - dependency-name: github.com/pion/webrtc/v4 dependency-version: 4.2.18 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump code.cloudfoundry.org/bytefmt from 0.82.0 to 0.83.0 (#6008) --- updated-dependencies: - dependency-name: code.cloudfoundry.org/bytefmt dependency-version: 0.83.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump github.com/quic-go/webtransport-go from 0.11.1 to 0.12.0 (#6011) * build(deps): bump github.com/quic-go/webtransport-go Bumps [github.com/quic-go/webtransport-go](https://github.com/quic-go/webtransport-go) from 0.11.1 to 0.12.0. - [Release notes](https://github.com/quic-go/webtransport-go/releases) - [Commits](https://github.com/quic-go/webtransport-go/compare/v0.11.1...v0.12.0) --- updated-dependencies: - dependency-name: github.com/quic-go/webtransport-go dependency-version: 0.12.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> * additional changes --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: aler9 <46489434+aler9@users.noreply.github.com> * Add OpenAPI definition of the Playback server (#5546) Co-authored-by: aler9 <46489434+aler9@users.noreply.github.com> * build(deps): bump actions/attest from 4 to 4.2.0 (#6017) Bumps [actions/attest](https://github.com/actions/attest) from 4 to 4.2.0. - [Release notes](https://github.com/actions/attest/releases) - [Changelog](https://github.com/actions/attest/blob/main/RELEASE.md) - [Commits](https://github.com/actions/attest/compare/v4...v4.2.0) --- updated-dependencies: - dependency-name: actions/attest dependency-version: 4.2.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * use black-box testing where possible (#6016) * sync golangci-lint settings (#6020) * webrtc: reset recomputed audio PTS if it drifts too much (#6021) * rtsp: log write errors (#6023) * docs: update (#6022) * webrtc: fix race condition in tests (#6025) * metrics: fix race condition in tests (#6026) * hls: prevent some CodeQL warnings (#6024) * prevent some CodeQL warnings (#6027) * fix some CodeQL warnings (#6029) * build(deps): bump actions/attest from 4.2.0 to 4.2.1 (#6028) Bumps [actions/attest](https://github.com/actions/attest) from 4.2.0 to 4.2.1. - [Release notes](https://github.com/actions/attest/releases) - [Changelog](https://github.com/actions/attest/blob/main/RELEASE.md) - [Commits](https://github.com/actions/attest/compare/v4.2.0...v4.2.1) --- updated-dependencies: - dependency-name: actions/attest dependency-version: 4.2.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * srt: show stream ID in logs (#6018) * bump Ubuntu in E2E tests (#6035) * add more black-box tests (#6032) * fix support for regexp groups greater than 10 (#6033) * webrtc: fix "packet lost" error when routing streams from WebRTC (#6034) Chrome sometimes sends empty packets, that are discarded by the server, but the sequence number of following packets is not recomputed, leading downstream packet loss detectors to emit errors. This is fixed. * support forwarding streams natively (#5558) It is now possible to define forward destinations for each path configuration. For each destination, the server will create a client that will forward the stream to the intended destination. Supported protocols are RTSP, RTMP, SRT. API and metrics have also been improved to allow monitoring the new forwarding system. --------- Co-authored-by: aler9 <46489434+aler9@users.noreply.github.com> * srt: close sources immediately when path is closed (#6038) * moq: support publishing and reading through native QUIC (#6039) * moq: support draft-17 (#6040) * format imports (#6041) * build(deps): bump github.com/MicahParks/jwkset from 0.11.2 to 0.11.3 (#6036) Bumps [github.com/MicahParks/jwkset](https://github.com/MicahParks/jwkset) from 0.11.2 to 0.11.3. - [Release notes](https://github.com/MicahParks/jwkset/releases) - [Commits](https://github.com/MicahParks/jwkset/compare/v0.11.2...v0.11.3) --- updated-dependencies: - dependency-name: github.com/MicahParks/jwkset dependency-version: 0.11.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * bump dependencies (#6042) * moq: increase max namespace field count to 32 (#6043) * moq: link primitives to draft-17 sections (#6044) * moq: support draft-16 (#6045) * bump hls.js to v1.6.17 (#6046) * webrtc: fix warning when IPv6 is disabled (#5733) (#6048) * build(deps): bump github.com/pion/transport/v4 from 4.0.2 to 4.1.0 (#6053) Bumps [github.com/pion/transport/v4](https://github.com/pion/transport) from 4.0.2 to 4.1.0. - [Release notes](https://github.com/pion/transport/releases) - [Commits](https://github.com/pion/transport/compare/v4.0.2...v4.1.0) --- updated-dependencies: - dependency-name: github.com/pion/transport/v4 dependency-version: 4.1.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump code.cloudfoundry.org/bytefmt from 0.83.0 to 0.84.0 (#6052) --- updated-dependencies: - dependency-name: code.cloudfoundry.org/bytefmt dependency-version: 0.84.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump actions/attest from 4.2.1 to 4.2.2 (#6054) Bumps [actions/attest](https://github.com/actions/attest) from 4.2.1 to 4.2.2. - [Release notes](https://github.com/actions/attest/releases) - [Changelog](https://github.com/actions/attest/blob/main/RELEASE.md) - [Commits](https://github.com/actions/attest/compare/v4.2.1...v4.2.2) --- updated-dependencies: - dependency-name: actions/attest dependency-version: 4.2.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * prevent spamming of 'stream is closed' error during shutdown (#6062) * rpi: fix crash when secondary stream is enabled (#6060) (#6061) * webrtc: improve performance by ignoring mDNS candidates (#4963) (#6064) mDNS candidates sometimes require a large CPU portion, they are not involved in any connectivity method mentioned in the documentation, they work in local networks only. * build(deps): bump github.com/pion/ice/v4 from 4.4.0 to 4.4.1 (#6066) Bumps [github.com/pion/ice/v4](https://github.com/pion/ice) from 4.4.0 to 4.4.1. - [Release notes](https://github.com/pion/ice/releases) - [Commits](https://github.com/pion/ice/compare/v4.4.0...v4.4.1) --- updated-dependencies: - dependency-name: github.com/pion/ice/v4 dependency-version: 4.4.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * restore datarhei/gosrt (#6068) * bump hls.js to v1.7.0 (#6071) * build(deps): bump github.com/alecthomas/kong from 1.16.0 to 1.16.1 (#6070) Bumps [github.com/alecthomas/kong](https://github.com/alecthomas/kong) from 1.16.0 to 1.16.1. - [Commits](https://github.com/alecthomas/kong/compare/v1.16.0...v1.16.1) --- updated-dependencies: - dependency-name: github.com/alecthomas/kong dependency-version: 1.16.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * rtmp: inform about authentication failures (#5657) (#6072) Reply with NetStream.Play.Failed or NetStream.Publish.Unauthorized when a client is not authorized to play or publish. This makes clients like OBS to stop recreating the connection in case of authentication failures. * build(deps): bump code.cloudfoundry.org/bytefmt from 0.84.0 to 0.85.0 (#6076) Bumps [code.cloudfoundry.org/bytefmt](https://github.com/cloudfoundry/bytefmt) from 0.84.0 to 0.85.0. - [Release notes](https://github.com/cloudfoundry/bytefmt/releases) - [Commits](https://github.com/cloudfoundry/bytefmt/compare/v0.84.0...v0.85.0) --- updated-dependencies: - dependency-name: code.cloudfoundry.org/bytefmt dependency-version: 0.85.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * rpi: prevent invalid MJPEG sizes (#6080) width and height of MJPEG frames must be multiple of 8 and less than 2048, otherwise they cannot be routed with RTP/RTSP. * remove useless JPEG checks from recorder (#6083) MJPEG frames are already validated before reaching the recorder, there's no need to validate them twice. * moq: do not accept empty payloads (#6085) * impose a minimum value to clock rate of always-available tracks (#6086) Clock rates below 10 caused the emission of empty samples. Fix the issue by imposing a minimum value of 8khz, that rises to 22khz in case of AAC. * moq: limit maximum amount of published tracks (#6087) this prevents clients from consuming an excessive amount of memory. * hls: prefer hls.js on iOS too (#6090) In the embedded HLS reader, use hls.js on iOS, that was previously disabled due to compatibility issues that should have been solved. * docs: suggest using playsinline in video tags (#6091) * hls: unlock the session-in-query+iOS combination (#6088) this was previously blocked because the session in query was meant to be dynamic, therefore incompatible with static playlists required by iOS. It is not anymore, so we can support that. * hls: stop using cookies with plain HTTP (#6089) in case of plain HTTP, fall back to query parameters, which are safer than HTTP cookies because they are not shared between different pages/domains, although they are visible in the URL. * document payload requirements (#6094) * fix race condition during sub-stream creation (#6075) (#6095) When a stream with always-available turned on switches from offline to online, or from a publisher to another, the reader mutex was not acquired during writing of codec parameters. This is now fixed. * build(deps): bump golang.org/x/crypto from 0.54.0 to 0.55.0 (#6093) Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.54.0 to 0.55.0. - [Commits](https://github.com/golang/crypto/compare/v0.54.0...v0.55.0) --- updated-dependencies: …
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Fixes #5436
PTS offset of samples was not properly considered, and sleep between samples was PTS-based instead of being DTS-based.