Release packages

Cargo.toml

@@ -49,12 +49,12 @@ license = "Apache-2.0"
 [workspace.dependencies]
 device-info = { version = "0.1.1", path = "device-info" }
 imgproc = { version = "0.3.19", path = "imgproc" }
-libwebrtc = { version = "0.3.45", path = "libwebrtc" }
-livekit = { version = "0.8.3", path = "livekit" }
+libwebrtc = { version = "0.3.46", path = "libwebrtc" }
+livekit = { version = "0.8.4", path = "livekit" }
 livekit-api = { version = "0.6.3", path = "livekit-api" }
-livekit-ffi = { version = "0.12.75", path = "livekit-ffi" }
+livekit-ffi = { version = "0.12.76", path = "livekit-ffi" }
 livekit-datatrack = { version = "0.1.13", path = "livekit-datatrack" }
-livekit-token-source = { version = "0.1.1", path = "livekit-token-source" }
+livekit-token-source = { version = "0.1.2", path = "livekit-token-source" }
 livekit-common = { version = "0.1.1", path = "livekit-common" }
 livekit-data-stream = { version = "0.1.2", path = "livekit-data-stream" }
 livekit-net = { version = "0.1.2", path = "livekit-net" }
@@ -64,8 +64,8 @@ livekit-protocol = { version = "0.7.12", path = "livekit-protocol" }
 # feature is forced on everywhere and collides with `async`/`dispatcher` builds.
 livekit-runtime = { version = "0.4.0", path = "livekit-runtime", default-features = false }
 soxr-sys = { version = "0.1.3", path = "soxr-sys" }
-webrtc-sys = { version = "0.3.42", path = "webrtc-sys" }
-webrtc-sys-build = { version = "0.3.18", path = "webrtc-sys/build" }
+webrtc-sys = { version = "0.3.43", path = "webrtc-sys" }
+webrtc-sys-build = { version = "0.3.19", path = "webrtc-sys/build" }
 yuv-sys = { version = "0.3.14", path = "yuv-sys" }
 
 anyhow = "1.0"

libwebrtc/CHANGELOG.md

@@ -139,6 +139,25 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Added
 
 - bump libwebrtc to m125
+## 0.3.46 (2026-08-17)
+
+### Fixes
+
+- Automatically retry webrtc build downloads
+
+#### fix: bump libwebrtc to webrtc-b9233c3-2 so TURN/TLS can use the OS trust store
+
+WebRTC validates TURN/TLS against a small set of anchors compiled into
+`rtc_base/ssl_roots.h`, generated in 2023 from Google's own PKI list. It has no
+Amazon, Starfield Services or ISRG roots, so a relay-only connection to a TURN
+server fronted by AWS ACM or Let's Encrypt times out with `unknown_ca` even
+though the host OS trusts the chain.
+
+This build picks up webrtc-sdk/webrtc#277, which falls back to the operating
+system's trust store when the built-in anchors yield no path. It sits in
+`rtc_base` below every SDK, so the C++ API that webrtc-sys binds is covered
+without any Rust-side change.
+
 ## 0.3.45 (2026-08-10)
 
 ### Fixes

libwebrtc/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "libwebrtc"
-version = "0.3.45"
+version = "0.3.46"
 edition.workspace = true
 homepage = "https://livekit.io"
 license.workspace = true

livekit-ffi-node-bindings/npm/darwin-arm64/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@livekit/rtc-ffi-bindings-darwin-arm64",
-  "version": "0.12.75",
+  "version": "0.12.76",
   "cpu": [
     "arm64"
   ],

livekit-ffi-node-bindings/npm/darwin-x64/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@livekit/rtc-ffi-bindings-darwin-x64",
-  "version": "0.12.75",
+  "version": "0.12.76",
   "cpu": [
     "x64"
   ],

livekit-ffi-node-bindings/npm/linux-arm64-gnu/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@livekit/rtc-ffi-bindings-linux-arm64-gnu",
-  "version": "0.12.75",
+  "version": "0.12.76",
   "cpu": [
     "arm64"
   ],

livekit-ffi-node-bindings/npm/linux-x64-gnu/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@livekit/rtc-ffi-bindings-linux-x64-gnu",
-  "version": "0.12.75",
+  "version": "0.12.76",
   "cpu": [
     "x64"
   ],

livekit-ffi-node-bindings/npm/win32-x64-msvc/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@livekit/rtc-ffi-bindings-win32-x64-msvc",
-  "version": "0.12.75",
+  "version": "0.12.76",
   "cpu": [
     "x64"
   ],

livekit-ffi-node-bindings/package.json

@@ -3,7 +3,7 @@
   "description": "LiveKit RTC Node FFI bindings for internal use only",
   "license": "Apache-2.0",
   "author": "LiveKit",
-  "version": "0.12.75",
+  "version": "0.12.76",
   "main": "index.js",
   "types": "index.d.ts",
   "type": "commonjs",

livekit-ffi/CHANGELOG.md

@@ -316,6 +316,25 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Added
 
 - bump libwebrtc to m125
+## 0.12.76 (2026-08-17)
+
+### Fixes
+
+- Automatically retry webrtc build downloads
+
+#### fix: bump libwebrtc to webrtc-b9233c3-2 so TURN/TLS can use the OS trust store
+
+WebRTC validates TURN/TLS against a small set of anchors compiled into
+`rtc_base/ssl_roots.h`, generated in 2023 from Google's own PKI list. It has no
+Amazon, Starfield Services or ISRG roots, so a relay-only connection to a TURN
+server fronted by AWS ACM or Let's Encrypt times out with `unknown_ca` even
+though the host OS trusts the chain.
+
+This build picks up webrtc-sdk/webrtc#277, which falls back to the operating
+system's trust store when the built-in anchors yield no path. It sits in
+`rtc_base` below every SDK, so the C++ API that webrtc-sys binds is covered
+without any Rust-side change.
+
 ## 0.12.75 (2026-08-10)
 
 ### Features

livekit-ffi/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "livekit-ffi"
-version = "0.12.75"
+version = "0.12.76"
 edition.workspace = true
 license.workspace = true
 description = "FFI interface for bindings in other languages"

livekit-token-source/CHANGELOG.md

@@ -1,3 +1,9 @@
+## 0.1.2 (2026-08-17)
+
+### Features
+
+- Adds optional caching version of the token sources
+
 ## 0.1.1 (2026-08-10)
 
 ### Features

livekit-token-source/Cargo.toml

@@ -1,7 +1,7 @@
 [package]
 name = "livekit-token-source"
 description = "Token sources for the LiveKit Rust SDK"
-version = "0.1.1"
+version = "0.1.2"
 license.workspace = true
 edition.workspace = true
 repository.workspace = true

livekit/CHANGELOG.md

@@ -257,6 +257,25 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Added
 
 - bump libwebrtc to m125
+## 0.8.4 (2026-08-17)
+
+### Fixes
+
+- Automatically retry webrtc build downloads
+
+#### fix: bump libwebrtc to webrtc-b9233c3-2 so TURN/TLS can use the OS trust store
+
+WebRTC validates TURN/TLS against a small set of anchors compiled into
+`rtc_base/ssl_roots.h`, generated in 2023 from Google's own PKI list. It has no
+Amazon, Starfield Services or ISRG roots, so a relay-only connection to a TURN
+server fronted by AWS ACM or Let's Encrypt times out with `unknown_ca` even
+though the host OS trusts the chain.
+
+This build picks up webrtc-sdk/webrtc#277, which falls back to the operating
+system's trust store when the built-in anchors yield no path. It sits in
+`rtc_base` below every SDK, so the C++ API that webrtc-sys binds is covered
+without any Rust-side change.
+
 ## 0.8.3 (2026-08-10)
 
 ### Features

livekit/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "livekit"
-version = "0.8.3"
+version = "0.8.4"
 edition.workspace = true
 license.workspace = true
 description = "Rust Client SDK for LiveKit"

webrtc-sys/CHANGELOG.md

@@ -165,6 +165,25 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Added
 
 - bump libwebrtc to m125
+## 0.3.43 (2026-08-17)
+
+### Fixes
+
+- Automatically retry webrtc build downloads
+
+#### fix: bump libwebrtc to webrtc-b9233c3-2 so TURN/TLS can use the OS trust store
+
+WebRTC validates TURN/TLS against a small set of anchors compiled into
+`rtc_base/ssl_roots.h`, generated in 2023 from Google's own PKI list. It has no
+Amazon, Starfield Services or ISRG roots, so a relay-only connection to a TURN
+server fronted by AWS ACM or Let's Encrypt times out with `unknown_ca` even
+though the host OS trusts the chain.
+
+This build picks up webrtc-sdk/webrtc#277, which falls back to the operating
+system's trust store when the built-in anchors yield no path. It sits in
+`rtc_base` below every SDK, so the C++ API that webrtc-sys binds is covered
+without any Rust-side change.
+
 ## 0.3.42 (2026-08-10)
 
 ### Fixes

webrtc-sys/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "webrtc-sys"
-version = "0.3.42"
+version = "0.3.43"
 edition.workspace = true
 homepage = "https://livekit.io"
 license.workspace = true

webrtc-sys/build/CHANGELOG.md

@@ -57,6 +57,25 @@
 ### Added
 
 - bump libwebrtc to m125
+## 0.3.19 (2026-08-17)
+
+### Fixes
+
+- Automatically retry webrtc build downloads
+
+#### fix: bump libwebrtc to webrtc-b9233c3-2 so TURN/TLS can use the OS trust store
+
+WebRTC validates TURN/TLS against a small set of anchors compiled into
+`rtc_base/ssl_roots.h`, generated in 2023 from Google's own PKI list. It has no
+Amazon, Starfield Services or ISRG roots, so a relay-only connection to a TURN
+server fronted by AWS ACM or Let's Encrypt times out with `unknown_ca` even
+though the host OS trusts the chain.
+
+This build picks up webrtc-sdk/webrtc#277, which falls back to the operating
+system's trust store when the built-in anchors yield no path. It sits in
+`rtc_base` below every SDK, so the C++ API that webrtc-sys binds is covered
+without any Rust-side change.
+
 ## 0.3.18 (2026-05-21)
 
 ### Fixes

webrtc-sys/build/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "webrtc-sys-build"
-version = "0.3.18"
+version = "0.3.19"
 edition.workspace = true
 license.workspace = true
 description = "Build utilities when working with libwebrtc"