Skip to content

deps: bump livekit/protocol for golang-jwt/xsync v4/stdlib errors#29

Merged
paulwe merged 7 commits into
mainfrom
deps/protocol-major-updates
Jun 5, 2026
Merged

deps: bump livekit/protocol for golang-jwt/xsync v4/stdlib errors#29
paulwe merged 7 commits into
mainfrom
deps/protocol-major-updates

Conversation

@paulwe
Copy link
Copy Markdown
Contributor

@paulwe paulwe commented Jun 4, 2026

Summary

  • Pure go get -u sweep — go.mod / go.sum only, no source changes.
  • Picks up upstream library swaps in livekit/protocol:
    • go-jose/v3golang-jwt/jwt/v5 (avoids go-jose v4 HS256 ≥32-byte minimum that breaks short OSS dev secrets)
    • puzpuzpuz/xsync/v3/v4
    • pkg/errors → stdlib errors + fmt.Errorf %w
  • Also pulls routine bumps of AWS/Azure/GCP SDKs, oauth2, googleapis, and Go toolchain → 1.26.

Coordinated upstream: livekit/protocol#1606, livekit/cloud-protocol#1222, livekit/backend-common#891.

Test plan

  • go build ./...
  • go test ./... (pre-existing failures requiring Docker / Postgres / AWS creds)

@paulwe paulwe changed the title deps: bump protocol; migrate jwt/xsync/errors/atomic deps: upgrade protocol — golang-jwt v5, xsync v4, pkg/errors → stdlib Jun 4, 2026
paulwe added 3 commits June 4, 2026 16:42
Only direct dep change: livekit/protocol bumped to a7a83da5 (the
upstream go-get-u sweep). Transitive updates pulled in via tidy.

No newer-major direct dep candidates. +incompatible:
aliyun-oss-go-sdk v3.0.2+incompatible (transitive, upstream choice).
Pin protocol to a7a83da5 and run go get -u ./... sweep.
@paulwe paulwe changed the title deps: upgrade protocol — golang-jwt v5, xsync v4, pkg/errors → stdlib deps: bump livekit/protocol for golang-jwt/xsync v4/stdlib errors Jun 5, 2026
@paulwe paulwe merged commit cc8f74c into main Jun 5, 2026
5 checks passed
@paulwe paulwe deleted the deps/protocol-major-updates branch June 5, 2026 22:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants