Skip to content

chore(deps): bump str0m from 0.20.0 to 0.21.0#44

Open
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/cargo/dev/str0m-0.21.0
Open

chore(deps): bump str0m from 0.20.0 to 0.21.0#44
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/cargo/dev/str0m-0.21.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 1, 2026

Copy link
Copy Markdown

Bumps str0m from 0.20.0 to 0.21.0.

Changelog

Sourced from str0m's changelog.

0.21.0

  • Upgrade to dimpl 0.7.0 (breaking)
  • Handle SctpAssociation as Event::Closed #986
  • Reject SDP payload types > 127 instead of panicking when claiming PTs #983
  • Add RTCP PSFB FMT=15 (AppSpecificFeedback) send/receive via Direct API #981
  • Add H266/VVC RTP packetizer and depacketizer #971
  • Negotiate SCTP max message size for data channels #852
  • Expose the negotiated DTLS protocol version #979
  • Make MTU size configurable #967
  • Add optional drv feature for using public identity types as drv::Input #974 #975
  • Send DTLS close_notify on Rtc::close() #956
  • Fix Simulcast::add_recv_layer to push to recv instead of send #968
  • Accept any non-empty SDP session name (s=), not just s=- #969
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [str0m](https://github.com/algesten/str0m) from 0.20.0 to 0.21.0.
- [Changelog](https://github.com/algesten/str0m/blob/main/CHANGELOG.md)
- [Commits](algesten/str0m@0.20.0...0.21.0)

---
updated-dependencies:
- dependency-name: str0m
  dependency-version: 0.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jul 1, 2026
DRHATL95 added a commit that referenced this pull request Jul 3, 2026
Consolidates the CI-green, low-risk Dependabot updates into one verified
change (avoids intra-ecosystem lockfile rebase churn across 6 PRs):

- tokio 1.48.0 -> 1.50.0 (cargo)
- anyhow 1.0.102 -> 1.0.103 (cargo dev-dep)
- vite 8.0.16 -> 8.1.2 (ui dev)
- svelte-check 4.6.0 -> 4.7.1 (ui dev)
- svelte 5.56.3 -> 5.56.4 (ui)
- @tauri-apps/api 2.11.0 -> 2.11.1 (ui)

Supersedes #43,#45,#46,#47,#48,#50.

Deliberately NOT included:
- #49 reqwest 0.12->0.13: reqwest 0.13 removed RequestBuilder::form()
  used in auth.rs (Cargo.toml pins 0.12 on purpose) — closing it.
- #44 str0m, #42 libloading: native-webrtc-feature-gated deps; default
  CI doesn't build them, so a bump could silently break the 1.1 native
  engine build. Defer to the native-engine work.
- #40 checkout->v7, #41 setup-node->v6: major GitHub Action bumps;
  checkout is used in release.yml on the self-hosted Node-22 runner that
  just cut 1.0 — defer until runner Node compatibility is confirmed.

Verified: cargo test 133; svelte-check 0; vitest 307; all green.

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
@DRHATL95

DRHATL95 commented Jul 3, 2026

Copy link
Copy Markdown
Owner

Deferred: str0m is native-webrtc-feature-gated (not built by default CI), so this 0.20→0.21 bump would land unvalidated and could break the 1.1 native engine. Will bump deliberately as part of the native-engine work (with the feature build + WSL validation).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant