Skip to content

Update go deps - #445

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/go-deps
Open

Update go deps#445
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/go-deps

Conversation

@renovate

@renovate renovate Bot commented Jul 13, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
github.com/Eyevinn/mp4ff v0.52.0v0.54.0 age confidence
github.com/pion/dtls/v3 v3.1.4v3.1.5 age confidence
github.com/pion/rtcp v1.2.16v1.2.17 age confidence
github.com/pion/rtp v1.10.2v1.10.3 age confidence
github.com/pion/webrtc/v4 v4.2.15v4.2.16 age confidence
github.com/urfave/cli/v3 v3.10.0v3.10.1 age confidence
golang.org/x/image v0.43.0v0.44.0 age confidence

Release Notes

Eyevinn/mp4ff (github.com/Eyevinn/mp4ff)

v0.54.0

Compare Source

Added
  • AV1 bitstream parsing in the av1 package: OBU splitting (SplitOBUs,
    ParseOBUHeader, ReadLEB128), sequence headers (ParseSequenceHeader,
    SequenceHeader, CodecConfRec.SequenceHeader), frame-header decoding
    (FrameHeaderDecoder, FrameHeader) with per-frame resolution and tile layout,
    random-access detection (FrameType, ParseFrameHeaderStart, IsRAPSample) and
    tile-data location (GetTileRanges, verified byte-exact against shaka-packager)
  • AV1 RFC 6381 codecs string: CodecConfRec.CodecString, SequenceHeader.CodecString
    and av1.CodecString; the av1C box Info and mp4ff-pslister now show the
    sequence header, coded resolution, color configuration and codecs string for av01
  • AV1 common encryption (cenc/cbcs): mp4.GetAV1ProtectRanges protects only tile data
    (OBU/frame/tile-group headers and tile-size fields stay clear) per the AV1 ISOBMFF
    binding; mp4ff-encrypt/mp4ff-decrypt support av01 tracks
  • EncryptFragments and FragmentEncryptor (from InitProtectData.NewFragmentEncryptor)
    encrypt a decode sequence with a fresh per-sequence sample protector; InitProtectData is
    immutable and safe to share across goroutines
  • ivf package to read and write the IVF container used for raw VP8/VP9/AV1 bitstreams (the
    VPx/AV1 counterpart of Annex B), and an ivf-to-mp4 example that muxes AV1 and VP9 IVF files
    into fragmented MP4. Supported by av1.OBU.Encode/Size, av1.CodecConfRecFromSequenceHeader
    and mp4.TrakBox.SetAV1Descriptor
  • vp9 package parsing the VP9 uncompressed frame header (key-frame/random-access detection,
    color configuration and picture size) with vpcC level computation, plus
    mp4.TrakBox.SetVPxDescriptor to build vp08/vp09 sample entries from a vpcC box
  • vp8 package parsing the VP8 frame tag and key-frame header (key-frame detection and picture
    size); ivf-to-mp4 now also muxes VP8 IVF into fragmented MP4
Fixed
  • Panic in hevc.ParseSPSNALUnit on malformed input where cpb_cnt_minus1 in
    the sub-layer HRD parameters is 255 (found by fuzzing)

v0.53.0

Compare Source

Added
  • mp4ff-mvhevc command line tool with info and add subcommands to inspect
    MV-HEVC (Multi-View HEVC) files and to mux HEVC (Annex B or mp4) into a
    single-track MV-HEVC mp4 with hvcC/lhvC, oinf/linf sample groups and
    optional Apple spatial-video (vexu/hfov) metadata
  • TrgrBox for the Track Group Box (trgr, ISO/IEC 14496-12 Sec. 8.3.4) and a
    generic TrackGroupTypeBox for its children (registered for the standard
    msrc and ster track group types, and cstg — the complete subset track
    grouping for L-HEVC, ISO/IEC 14496-15 Sec. 9.5.1), with a
    CreateTrackGroupTypeBox helper and a TrakBox.Trgr reference.
    Type-specific data after track_group_id (e.g. the ster left_view_flag)
    is preserved for round-tripping
  • Apple spatial/stereo video metadata boxes in the Video Extended Usage box
    (vexu) family: VexuBox, EyesBox (eyes), CamsBox (cams),
    ProjBox (proj), StriBox (stri), HeroBox (hero), BlinBox
    (blin), PrjiBox (prji) and HfovBox (hfov), with a CreateVexuBox
    helper and VisualSampleEntryBox.Vexu/.Hfov child references (Apple
    "QuickTime and ISO Base Media File Formats and Spatial and Immersive Media")
  • LhvCBox for the L-HEVC configuration box (lhvC, ISO/IEC 14496-15 Ed. 7
    Sec. 9.5.3.1), carrying the L-HEVC decoder configuration record for the
    enhancement layers of a layered HEVC (MV-HEVC/SHVC) stream, with a
    CreateLhvCFromNalus constructor and a VisualSampleEntryBox.LhvC child
    reference
  • Parsing of the HEVC multilayer/multiview VPS extension (vps_extension(),
    ISO/IEC 23008-2 Annex F.7.3.2.1.1) used by MV-HEVC and SHVC, exposed as an
    optional hevc.VPS.Extension (*VPSExtension) with scalability mask,
    per-layer dimension/dependency info, layer profile-tier-levels, output layer
    sets and rep_format() resolutions, plus VPS.GetNumLayers,
    IsMultiLayer, GetNumViews and ScalabilityMaskBits helpers
  • L-HEVC (lhvC) decoder configuration record support in the hevc package:
    DecConfRec.DecodeLHEVCDecConfRec, EncodeLHEVC, EncodeLHEVCSW and
    LHEVCSize (ISO/IEC 14496-15 Ed. 7 Sec. 9.4.3)
  • OinfSampleGroupEntry for the Operating Points Information sample group
    (oinf, ISO/IEC 14496-15 Ed. 7 Sec. 9.6.2) and LinfSampleGroupEntry for
    the Layer Information sample group (linf, Sec. 4.15), used by layered HEVC
    (MV-HEVC/SHVC)
  • BuildOinfFromVPS and BuildLinfFromVPS to derive the oinf and linf
    sample group entries for a layered HEVC track from a parsed multilayer
    hevc.VPS
  • LbliSampleGroupEntry for the L-HEVC external base layer sample group
    (lbli, LhvcExternalBaseLayerInfo, ISO/IEC 14496-15 Ed. 7 Sec. 9.6.1),
    used by L-HEVC tracks that predict from an external base layer in a
    separate track
  • SampleAccessor.ReadMdatData for bulk reading of the raw mdat payload of a
    fragment in a single read, intended for streaming with lazy mdat decoding
  • HDR metadata boxes ClliBox (Content Light Level, clli, ISO/IEC 14496-12
    Sec. 12.1.6) and MdcvBox (Mastering Display Colour Volume, mdcv, ISO/IEC
    14496-12 Sec. 12.1.7), including VisualSampleEntryBox.Clli and .Mdcv
    child references
  • Support for Dolby Vision HEVC sample entries dvh1 and dvhe: box decoding,
    StsdBox.HvcX mapping, TrakBox.SetHEVCDescriptor (dvh1 like hvc1, dvhe like
    hev1), and CENC/CBCS encryption via InitProtect/ExtractInitProtectData
  • DoViConfigurationBox for the Dolby Vision Configuration Box (dvcC for
    dv_profile <= 7, dvvC for 8-9, dvwC for >= 10), carrying the
    DOVIDecoderConfigurationRecord, with a VisualSampleEntryBox.DoViConfig
    child reference
  • Parsing and writing of the recovery point SEI message (type 6) for both AVC
    (RecoveryPointAvcSEI, ISO/IEC 14496-10 D.1.8) and HEVC (RecoveryPointHevcSEI,
    ISO/IEC 23008-2 D.2.8)
  • Exponential Golomb support on the bit-level types used by the sei package:
    ReadExpGolomb/ReadSignedGolomb on bits.Reader and
    WriteExpGolomb/WriteSignedGolomb on bits.FixedSliceWriter
Changed
  • Minimum Go version bumped from 1.17 to 1.19. Fuzz tests require native
    fuzzing (testing.F, Go 1.18), and Go 1.19 fixes fuzz-corpus CRLF handling
    so the seed corpus loads on Windows CI
  • cenc encryption with an 8-byte input IV is now CMAF-conformant
    (ISO/IEC 23000-19 Sec. 8.2.3.1): InitProtect sets
    tenc.DefaultPerSampleIVSize to 8, EncryptFragment writes 8-byte
    per-sample IVs to senc and increments the IV by one per sample
    (ISO/IEC 23001-7 Sec. 9.2), and the returned chaining IV is 8 bytes.
    A 16-byte input IV keeps the previous 16-byte behavior
  • EncryptFragment omits the senc, saiz, and saio boxes when a
    fragment has no sample auxiliary information (full-sample encryption
    with a constant IV, e.g. cbcs audio), as CMAF Sec. 8.2.2.1 recommends
  • SaizBox.AddSampleInfo now returns an error (sample-info sizes above
    255 do not fit the 8-bit sample_info_size) instead of panicking on
    inconsistent sizes, collapses uniform sizes into
    default_sample_info_size, and switches to per-sample sizes when a
    differing size arrives
Fixed
  • DecryptFragment no longer fails on fragments without a senc box
    when the track uses full-sample encryption with a constant IV
  • SencBox keeps its subsample entries aligned with the sample index, so
    a fragment mixing samples with and without subsamples encodes a zero
    subsample count instead of panicking, and saiz sizes match the
    senc layout
  • GetAVCProtectRanges and GetHEVCProtectRanges return an all-clear
    subsample entry for a degenerate sample instead of an empty list
pion/dtls (github.com/pion/dtls/v3)

v3.1.5

Compare Source

Changelog

  • 9c642f8 Unblock reads when conn is closed
  • e2959fd Remove the obsolete Go 1.14 build tag
  • 8674b27 Update actions/checkout action to v7
  • 8f512dc Update module github.com/pion/transport/v4 to v4.0.2 (#​836)
  • 1ce56ab Update dtls-1.2 branch name
  • bc02e81 Document main-branch tagging freeze
pion/rtcp (github.com/pion/rtcp)

v1.2.17

Compare Source

Changelog

  • a9b71ae Fixed packet length checks (#​220)
  • d61b52c Update CI configs to v0.12.2
  • 2a11841 Aplly lint upgrades, and missing checks
  • 80c3aac Update CI configs to v0.12.1
  • 06eaa85 Update CI configs to v0.12.0
  • 84e0fcc Update CI configs to v0.11.39
  • 21f160a Update CI configs to v0.11.37
  • 460290b Update CI configs to v0.11.36
  • 603b7c3 Fix gosec slice bounds warnings
  • 99b388f Update CI configs to v0.11.32
pion/rtp (github.com/pion/rtp)

v1.10.3

Compare Source

Changelog

pion/webrtc (github.com/pion/webrtc/v4)

v4.2.16

Compare Source

Changelog

urfave/cli (github.com/urfave/cli/v3)

v3.10.1

Compare Source

What's Changed
New Contributors

Full Changelog: urfave/cli@v3.10.0...v3.10.1


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "before 9am on monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate

renovate Bot commented Jul 13, 2026

Copy link
Copy Markdown
Contributor Author

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 7 additional dependencies were updated

Details:

Package Change
github.com/pion/turn/v5 v5.0.9 -> v5.0.10
github.com/pion/datachannel v1.6.0 -> v1.6.2
github.com/pion/sctp v1.10.0 -> v1.10.3
github.com/pion/srtp/v3 v3.0.11 -> v3.0.12
github.com/pion/stun/v3 v3.1.5 -> v3.1.6
golang.org/x/sync v0.21.0 -> v0.22.0
golang.org/x/text v0.38.0 -> v0.40.0

@renovate
renovate Bot requested a review from a team as a code owner July 13, 2026 03:02
@renovate
renovate Bot force-pushed the renovate/go-deps branch 4 times, most recently from 034d9ce to a9fdcf2 Compare July 20, 2026 03:16
@renovate
renovate Bot force-pushed the renovate/go-deps branch 6 times, most recently from 16b4464 to ba61627 Compare July 26, 2026 21:11
Generated by renovateBot
@renovate
renovate Bot force-pushed the renovate/go-deps branch from ba61627 to 05eba80 Compare July 27, 2026 21:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants