feat(container): update image livekit/livekit-server ( v1.12.0 → v1.13.10 ) - autoclosed by renovate[bot] · Pull Request #3135 · mglants/gitops

renovate · 2026-10-16T00:03:35Z

This PR contains the following updates:

Package	Update	Change
livekit/livekit-server	minor	`v1.12.0` → `v1.13.10`

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

livekit/livekit (livekit/livekit-server)

`v1.13.10`

Compare Source

Changed

sfu: forward the dependency descriptor for VP8 simulcast (#4987)
sfu: keep VP8 descriptor frame numbers across migration (#4989)
sfu: filter VP9 and AV1 simulcast temporal layers with the dependency descriptor (#4991)
sfu: filter VP8 temporal layers by frame when the dependency descriptor is sent (#4976)
sfu: switch VP8 temporal layers up with the dependency descriptor (#4974)
sfu: pad the slot of a filtered packet that follows a sequence number gap (#4983)
sfu: send padding in the slot of a dropped out-of-order packet (#4979)
sfu: parse VP8 and VP9 payload descriptors without an allocation (#4981)
DownTrack: arm key frame requester timer only while a layer lock is pending (#4980)
turn: refuse TCP relays and limit relays to this host to media ports (#4992)
agent endpoints: address an unnamed deployment as "_" (#4997)
Add OSS Scanner build image and threat model (#4995)
Update golang Docker tag to v1.27.1 (#4985)
Update alpine Docker tag to v3.24.2 (#4984)
Update module github.com/maxbrunsfeld/counterfeiter/v6 to v6.13.0 (#4915)

Fixed

Send NACKs when processing RTX packets (#5000)
sfu: send padding-only packets with no payload (#4993)
rtc: release timed out pending tracks at the pending track limit (#4998)
Fix nil pointer dereference in IOInfoService.UpdateIngressState (#4806)
rtc: keep update cache eviction order when listing recent disconnects (#4975)
fix(cli): return non-zero exit status on command errors (#4888)
Disable AV1 for Firefox clients before 157 (#4962)

`v1.13.9`

Compare Source

Please note that release v1.13.8 introduced a behaviour change that caused egress start failures explained in #4955. This release restores the behaviour to what it was in v1.13.7 and before.

Changed

bump protocol and psrpc deps (#4958)
sfu/buffer: parse the dependency descriptor without allocating (#4953)
sfu/buffer: stop allocating per ingested packet (#4951)

Fixed

v1 path: check for subscriber_allow_pause presence before using it (#4957)
Cap forward-jump loops in SelectorDecisionCache (#4952)

`v1.13.8`

Compare Source

Added

agent: HTTP endpoints data plane (#4779)
use sender report pass through setting to forward abs-capture-time verbatim (#4812)
Add sdk lable to session start time and participant join (#4885)
Add a local participant method to get recently disconnected (#4911)
service: start room composite egress configured in a room preset (#4926)

Changed

Update github workflows (#4446)
Reduce descriptor marshal allocations on Go 1.26.4/linux-amd64 (#4681)
config: reject unknown send_side_bwe_pacer, warn on unwired fallback (#4804)
Update github.com/livekit/protocol digest to a879e94 (#4864)
Update module github.com/gotesttools/gotestfmt/v2 to v2.5.0 (#4865)
Update module github.com/urfave/cli/v3 to v3.11.0 (#4867)
Update module golang.org/x/mod to v0.41.0 (#4868)
sfu: return VP8 munged header by value to avoid per-packet allocation (#4871)
sfu: patch pacer header extensions without per-packet allocation (#4872)
Update pion/sdp to get lesser SDP retention (#4873)
sfu: skip pacer allocation assertion under the race detector (#4874)
sfu: broadcast RTP to down tracks without per-packet allocations (#4875)
Track action versions and stop quarantining our own actions (#4877)
test: fix two data races in the test suites (#4878)
Bump go.opentelemetry.io/otel/sdk (#4879)
deps: update psrpc to v0.8.0 (#4882)
Update module github.com/moby/moby/client to v0.6.0 (#4883)
Update module golang.org/x/sync to v0.23.0 (#4884)
Propagate SIP_TRUNK_FAILURE (#4890)
ccutils: use millisecond resolution for probe interval backoff (#4891)
Increase receiver loadbalance threshold when batch io enabled (#4899)
rtc: parse each remote offer once per negotiation (#4904)
Bump protocol (#4909)
rtc: split EndSession out of MoveToRoom (#4917)
telemetry: drop the stats worker re-key path (#4918)
sfu: report forwarding latency as p90 instead of the mean (#4920)
rtc: accept ICE Completed in ICE-restart connect assertions (#4921)
rtc: measure data blob keys by their content, not their text form (#4923)
Remove deprecatred way of setting prometheus from the config file (#4928)
test: give mock participants a connection quality, close test rooms (#4933)
update warp dep (#4943)

Fixed

Do not add down tracks after receiver close (#4857)
Do not request media sections for transceivers that cannot send (#4892)
Deregister agent job when the server terminates it (#4893)
sfu: don't hold bindLock across the blank-frame flush in CloseWithFlush (#4895)
dynacast: re-send subscribed qualities after every publisher answer (#4907)
agent: release JobTerminate handler when job ends before registration (#4908)
Report disconnected for older disconnected participants. (#4910)
rtc: record a room's departure when the participant leaves it (#4913)
update deps to fix warp issue (#4916)
sfu: fix data stats active window bitrate and duration units (#4922)
fix: reject instead of drop for no dispatch rule (#4927)
fix: skip RTX/FEC when picking a fallback video codec (#4930)
fix: do not read invalid delta (#4935)
fix: use the fast debounce for the first negotiation (#4936)
fix: skip DTLS HelloVerifyRequest (#4937)
config: parse generated duration flags as durations (#4939)
fix: use the most common recent packet rate in connection quality (#4940)
fix: copy RED history packets instead of keeping pointers (#4941)
fix: keep one subscription when first subscribes race (#4944)
bump protocol to get unlock on no key fix (#4945)
fix: count leftover upstream loss after RTX repairs (#4946)
fix: switch VP8 temporal layer up only at a layer sync frame (#4947)
fix: reconcile everything when the reconcile queue overflows (#4948)
fix: enable H.264 publish for desktop Linux Firefox (#4949)

`v1.13.7`

Compare Source

Added

Participant kind agent details (#4809)
report a reason on room-ended telemetry (#4815)
telemetry: support roomID change for a participant (#4816)
log telemetry guard details (#4817)
ingress: add opt-in support for udp:// URL pull ingress (#4810)
Support VP9/AV1 simulcast (#4830)
add test-server support for compressed join requests (#4834)
wire psrpc bus compression into the message bus constructor (#4844)
turn: accept PROXY protocol on the TCP listener (#4852)
telemetry: add visibility into stats worker reference underflow (#4856)
rtc: add GetSubscribedDataTracks to LocalParticipant (#4862)

Changed

Skip the docker-backed service tests when there is no docker (#4799)
Wait for the callbacks these tests assert on. (#4803)
utils: make Median generic, overflow-safe, and add tests (#4553)
warp log (#4811)
Remove duplication within cpuload and sysload (#4818)
Update github.com/livekit/protocol digest to a469dd4 (#4820)
update ice fork for warp (#4824)
Move data track packet serialization to protocol (#4829)
Update README to include snippet about Agents (#4808)
protocol update for SDP unmarshal hardening (#4836)
Update golang Docker tag to v1.26.7 (#4846)
README rewrite (#4837)

Fixed

Set up track info properly for dummy receiver. (#4807)
Do not escape the ICE server URI in the WHIP Link header (#4795)
fix: hold signal messages until the ReconnectResponse goes out (#4827)
Fix/reconcile data track subscription deadlock (#4843)
telemetry: drop unused getCPUStats, unblocking darwin builds without cgo (#4841)
update psrpc for subscription close goroutine leak fix (#4859)
telemetry: do not recreate a stats worker for a released guard (#4860)
Get participant by authed identity in WHIP participant service. (#4861)

`v1.13.6`

Compare Source

Added

Expand room details in webhook events (#4730)
Add configurable read-message size limit on signalling WebSockets (#4743)
Add per-participant concurrent TURN allocation quota (#4744)
Limit number of pending tracks per participant. (#4750)
Limit API request body size (#4757)
Experimental WARP (#4649)
Log invalid APIKey on API failures. (#4762)
Add a small cache for data messages received via SendData API. (#4781)
Add bytes cap on migration data cache size (#4782)
TEL-912 Adding response for TransferSIPParticipant rpc (#4783)

Changed

Remove H.264 baseline (42001f) from default enabled codecs (#4723)
Apply ICE preference when switching to TCP on unstable UDP (#4703)
Include data track susbcriptions in WaitForSubscription. (#4727)
Return incompatible in SetCodecWithState if the codec PT changed (#4729)
return psrpc.FailedPrecondition for "participant client version does not support moving" error (#4736)
Update actions/setup-go action to v7 (#4720)
Validate TURN config to guard against invalid values (#4742)
Use request id to make api idempotence on sdk retry (#4694)
Set relay quota per participant at 12 default for dual peer connection + resume scenarios (#4745)
Record publish time on participant close for pending tracks. (#4738)
Make subscription limit log Debugw as it could spam in a large room. (#4748)
Fail server start up on partial prom config. (#4749)
sample codec payload mismatch error log (#4751)
Process NACK retransmissions in a single worker per DownTrack (#4758)
Update module github.com/moby/moby/client to v0.5.1 (#4769)
Update renovate and pinning behavior, run tools from go.mod (#4759)
Bump github.com/cilium/ebpf in the go_modules group across 1 directory (#4770)
bump protocol for passthrough + UpdateEgress removal (#4774)
Check for ICE connection before closing participant on signal close. (#4780)
Join failure is a canceled connection attempt. (#4788)
Update github.com/livekit/mediatransportutil digest to f234b53 (#4785)
Reduce locking in media track + telemetry listener on move participant. (#4790)
Group livekit dependency updates in renovate (#4791)
Return created ingress info from io service (#4787)
config: clarify AdvertiseInternalIP applies to explicit node_ip too (#4754)

Fixed

Fix AgentHandler.DrainConnections deadlock on worker close. (#4710)
Check for pictureID existence in VP8 and VP9 (#4721)
Do not report end time for participant if the participant is migrating (#4728)
Check layer value in dependency descriptor and keep it in bounds. (#4739)
Fix publish track count on migration in. (#4740)
Cover a couple of more cases on data track runt packet handling. (#4741)
Close web socket connections in all paths. (#4747)
Check slice length before access in a couple of more places (#4752)
Remove auth token from log/being sent back to client on invalid token error (#4756)
Flush sequencer on stream restart; bound frame-integrity loops (#4760)
Redact stream keys in UpdateStream API log fields (#4763)
Fix deadlock in regress codec check. (#4775)
Flush pending signal responses before closing the web socket. (#4776)
Strip packet trailers from every VP9 layer frame (#4773)
Fix simulcast RTX pairing broken by pion/webrtc#3470 (#4800)

`v1.13.5`

Compare Source

Added

add mock for testing region pins with API (#4691)
Add country to participant closing log (#4693)
Tests for down stream packet push. (#4692)
Add status code for twirp request latency prometheus metric (#4621)
Support more h264 profiles (#4708)
log high stream start latency. (#4714)

Changed

Use simulcast constructor for VP9 if simulcasted. (#4696)
send resolved ringing timeout (#4697)
Update go deps (#4645)
protocol deps for logging webhook status (#4699)
protocol update with webhook status logging (#4700)
Record subscribe stream start time in prometheus. (#4704)
A bit better counting for track publish. (#4707)

Fixed

Fix padding bit in forwarded packet. (#4690)
Spelling fixes (#4698)
Do not call telemetry listener under pending track lock. (#4706)
Fix getRefLayerRTPTimestamp off-by-one that can panic on max layer index (#4712)

`v1.13.4`

Compare Source

Added

added mocking function for SIP dialing methods (#4642)
Add signal tests to test-server (#4653)
Add option to exclude local IPv6 candidates. (#4657)
Add a method to get forward stats via API method. (#4664)
Add drop-on-close signal test scenario (#4669)
Log soft validation errors. (#4671)
add redaction flag in Job (#4650)

Changed

simpler mock protocol (#4641)
Make IsConnectionCanceled available at LocalParticipant interface. (#4643)
Update actions/checkout action to v7 (#4646)
Update protocol. (#4648)
Export migration to LocalParticipant interface. (#4652)
Record final RTC state as success/failure. (#4658)
Omit rtx/out-of-order packets from forwarding delay measurement. (#4659)
Move ForwardStats aggregation off the packet forwarding path (#4660)
protocol deps to get parallel exec alloc reduction (#4662)
Update pion/ice to deal with hang on close. (#4672)
Add more details to unreliable data channel drop error. (#4673)
Record rtc_success prom as soon as RTC connects. (#4677)
Use proto logger to get named enums in the logs. (#4679)
Propagate spreader threshold to RED receivers. (#4683)
Prefer QDisc.Stats till go-tc addresses QDisc.Stats2 parsing (#4685)
Bump protocol version to fix call to Validate. (#4686)

Fixed

bound data-track buffering under downlink congestion (targetLatency) (#4667)
Guard against nil TC qdisc stats to prevent SIGSEGV (#4668)
Fix goroutine leak from orphaned signal relay streams (#4674)
don't undercount data channel bitrate over idle gaps (#4676)
Fix receiver load balance threshold initialization (#4678)
rtc: guard against nil subscriber in TransportManager.HandleAnswer (#4680)
Potential fix for code scanning alert no. 42: Incorrect conversion between integer types (#4684)

`v1.13.3`

Compare Source

Added

feat: mock API server for testing server SDKs (#4627)
support auth checks with mock server (#4629)
Data track schema metadata (#4622)
Report average bitrates for whip ingress (#4634)

Changed

Update webrtc to fix interop issue with bundled datachannel (#4631)
Update module github.com/urfave/cli/v3 to v3.10.0 (#4612)
Use camel case log name in DataBlobKey (#4633)

Fixed

Stop WHIP session notifier when participant leaves (#4637)

`v1.13.2`

Compare Source

Added

Add Prometheus metrics for join latency and peer connection state (#4574, #4616)
Preserve original expiry when refreshing token (#4580)
Add grants expiry to Auth context (#4581)
Add ability to run pprof on dedicated HTTP server (#4584)
Add API to get latest node stats (#4589)
Enforce subscription permission to data track (#4588)
egress v2 api (#4592)
agent: thread attributes map from dispatch to job (#4598)
Log subscription limit breaches (#4603)
Acquire requested video layer directly at HIGH quality by default (#4595)
Report participant capabilities in ParticipantInfo (#4606)
Add option to force drain rtcService/agentService connections (#4618)
Add support for data blob (a. k. a. async participant attributes) (#4619)

Changed

Update dependencies: pion/sctp, DTLS v3.1.4, protocol (#4587, #4601, #4623)
rtc: add RestartSessionTimer to re-anchor participant session duration (#4566)
Record more RTC cancellation points (#4600)
Cap all metadata at 512 KiB; enforce on join, agent dispatch, and embedded agents (#4602)
Tighten up publish latency stat (#4615)
Echo offered audio payload types in single-PC subscriber answer (#4614)

Fixed

Fix skipped packets accounting (#4604)
Do not log due to negative getting interpreted as large unsigned positive (#4605)
Do not call nil callback (#4607)

`v1.13.1`

Compare Source

ATTENTION: This release removes backwards compatibility for TURN authentication without TTL. Please refer to change log of 1.12.0 for details on changes to TURN authentication and permissions handling. It was removed in #4539.

Added

rtc: report participant kind code and details (#4534)
Add IsIntentionalDisconnect (#4537)
rtc: emit per-data-track bytes via BytesTrackStats (#4540)
Start tracking Twirp method request latency in prometheus too, not just in logs (#4545)
Config documentation for advertise_internal_ip and skip_external_ip_validation (#4552, #4554, #4563)
Metrics for participant active, i. e. fully established. (#4557)
turn: allow for providing secret via file (#4564)
expose TCPFallbackRTTThreshold and AllowUDPUnstableFallback via config (#4556)

Changed

Always enable rtx codec (#4533)
Don't require media sections when joining (#4535)
Use NACKQuueInterface type. (#4538)
Remove backwards compatibility support for TURN auth. (#4539)
telemetry: split webhook-processed hook out of NewTelemetryService (#4548)
rtc: prevent duration reporting for inactive participants (#4550)
rtc: report participant session end time on room move (#4561)
Update mediatransportutil to get ICE candidate timeout config (#4572)

Fixed

Check Less and LessEq in version compare. (#4532)
fix sip error categorization (#4528)
handle nil clientInfo (#4546, #4547)
Prevent panic from nil(illegal) syncState.Subscriptions message (#4560)

`v1.13.0`

Compare Source

Configuration

📅 Schedule: (in timezone Europe/Moscow)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

…3.10 ) | datasource | package | from | to | | ---------- | ---------------------- | ------- | -------- | | docker | livekit/livekit-server | v1.12.0 | v1.13.10 |

mglants-bot · 2026-10-16T00:04:33Z

--- kubernetes/subterra/apps/apps/fluxer/app Kustomization: flux-system/cluster-apps-fluxer HelmRelease: apps/fluxer

+++ kubernetes/subterra/apps/apps/fluxer/app Kustomization: flux-system/cluster-apps-fluxer HelmRelease: apps/fluxer

@@ -669,13 +669,13 @@

                   tcp_port: 7881
                   udp_port: 7882
                   use_external_ip: false
               LIVEKIT_WEBHOOK_URL: http://fluxer-api:8080/webhooks/livekit
             image:
               repository: livekit/livekit-server
-              tag: v1.12.0
+              tag: v1.13.10
             ports:
             - containerPort: 7880
               name: http
             - containerPort: 7881
               name: rtc-tcp
             - containerPort: 7882

mglants-bot · 2026-10-16T00:04:55Z

--- HelmRelease: apps/fluxer Deployment: apps/fluxer-livekit

+++ HelmRelease: apps/fluxer Deployment: apps/fluxer-livekit

@@ -76,13 +76,13 @@

               - stun1.l.google.com:19302
               tcp_port: 7881
               udp_port: 7882
               use_external_ip: false
         - name: LIVEKIT_WEBHOOK_URL
           value: http://fluxer-api:8080/webhooks/livekit
-        image: livekit/livekit-server:v1.12.0
+        image: livekit/livekit-server:v1.13.10
         livenessProbe:
           failureThreshold: 6
           httpGet:
             path: /
             port: http
           periodSeconds: 10

feat(container): update image livekit/livekit-server ( v1.12.0 → v1.1…

746a848

…3.10 ) | datasource | package | from | to | | ---------- | ---------------------- | ------- | -------- | | docker | livekit/livekit-server | v1.12.0 | v1.13.10 |

renovate Bot added renovate/container type/minor labels Oct 16, 2026

mglants-bot Bot added area/kubernetes cluster/subterra labels Oct 16, 2026

renovate Bot changed the title ~~feat(container): update image livekit/livekit-server ( v1.12.0 → v1.13.10 )~~ feat(container): update image livekit/livekit-server ( v1.12.0 → v1.13.10 ) - autoclosed Oct 17, 2026

renovate Bot closed this Oct 17, 2026

renovate Bot deleted the renovate/livekit-livekit-server-1.x branch October 17, 2026 20:56

Navigation Menu

Repository navigation

feat(container): update image livekit/livekit-server ( v1.12.0 → v1.13.10 ) - autoclosed - #3135

feat(container): update image livekit/livekit-server ( v1.12.0 → v1.13.10 ) - autoclosed#3135
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/livekit-livekit-server-1.x

renovate Bot commented Oct 16, 2026

Uh oh!

mglants-bot Bot commented Oct 16, 2026

Uh oh!

mglants-bot Bot commented Oct 16, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Oct 16, 2026

Release Notes

Changed

Fixed

Changed

Fixed

Added

Changed

Fixed

Added

Changed

Fixed

Added

Changed

Fixed

Added

Changed

Fixed

Added

Changed

Fixed

Added

Changed

Fixed

Added

Changed

Fixed

ATTENTION: This release removes backwards compatibility for TURN authentication without TTL. Please refer to change log of 1.12.0 for details on changes to TURN authentication and permissions handling. It was removed in #​4539.

Added

Changed

Fixed

Configuration

Uh oh!

mglants-bot Bot commented Oct 16, 2026

Uh oh!

mglants-bot Bot commented Oct 16, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

ATTENTION: This release removes backwards compatibility for TURN authentication without TTL. Please refer to change log of 1.12.0 for details on changes to TURN authentication and permissions handling. It was removed in #4539.