Skip to content

Bump the all group with 1 update - #6

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/src/tests/WebRTC.PublishedRegression/all-0a98dac636
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/src/tests/WebRTC.PublishedRegression/all-0a98dac636

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 10, 2026 •

Copy link
Copy Markdown
Contributor

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


Updated tryAGI.WebRTC from 0.2.2 to 0.2.8.

Release notes

Sourced from tryAGI.WebRTC's releases.

0.2.8

Full Changelog: v0.2.7...v0.2.8

0.2.7

Experimental 0.x release. Provider/device E2E acceptance remains; see README and docs/acceptance.md.

  • Accept bounded multiple DTLS fingerprint attributes as permitted by RFC 8122 while
    continuing to authenticate the peer exclusively with the negotiated SHA-256
    fingerprint. This restores interoperability with Simli/aiortc answers that
    advertise SHA-256, SHA-384 and SHA-512 together without weakening fingerprint
    binding. Add positive multi-algorithm and unsupported-only regression coverage.

Full Changelog: v0.2.6...v0.2.7

0.2.6

Experimental 0.x release. Provider/device E2E acceptance remains; see README and docs/acceptance.md.

  • Expose the loaded library's exact package version and source commit without
    reflection or consumer-inlined constants. Preserve this build identity in
    establishment evidence after cancellation/disposal and under NativeAOT.
    Verify the actual packaged DLL in a separate process before publication,
    including wrong-version/source negative controls; retain an assembly-hash-bound
    runtime proof alongside the package manifest proof.
  • Accept bounded, filtered and deduplicated trickle candidates after successful
    offer/answer but before ConnectAsync. Preserve cancellation, disposal,
    credential generation and destination checks. Bound retained candidates even
    when an application's filter changes; account for SDP and trickle together.
  • Cover empty BUNDLE tags, higher-priority non-tag decoys, both DTLS roles and
    audio/data tag orders with 16 encrypted local UDP permutations, before and
    after connect. Run bidirectional media/data and admission regressions in the
    managed integration suite and executed NativeAOT smoke.
  • Record a real deployed 0.2.5 Advantage series blocked at provider call creation
    by HTTP 429 for both transports. ICE/DTLS were not started, so this is neither
    successful provider acceptance nor evidence of a new transport regression.
    DId/Simli live-provider and physical Watch playback acceptance remain open.

Full Changelog: v0.2.5...v0.2.6

0.2.5

Experimental 0.x release. Provider/device E2E acceptance remains; see README and docs/acceptance.md.

  • Use the negotiated BUNDLE-tagged section for remote transport candidates,
    rather than combining unrelated media-section candidates. Add a local two-route
    regression: both routes answer ICE, but only the tagged route originates bundled
    DTLS. Preserve wrong-source rejection, bidirectional DCEP and authenticated
    media after a rejected packet. Cover tag/media ordering and a rejected suggested
    tag; execute the fixture under NativeAOT and against the pinned published baseline.

  • Retain seven exact ICE data-admission rejection counters independently of packet
    capture, including no nomination, unavailable/mismatched path, wrong source,
    oversize, expired consent and shutdown. Export immutable, address-free snapshots
    through ICE and peer establishment evidence. Preserve existing admission checks
    and trace categories; add actual host/relay rejection, truncation and disposal
    regressions to managed and executed NativeAOT tests.

  • Record a fresh real-provider timeout with incoming DTLS data rejected before
    parsing. The BUNDLE route regression is reproduced locally; its relationship to
    that provider's signaling remains unproven until deployed repeat acceptance.

Full Changelog: v0.2.4...v0.2.5

0.2.4

Experimental 0.x release. Provider/device E2E acceptance remains; see README and docs/acceptance.md.

  • Include outgoing DTLS handshake records and retries in opt-in packet socket
    boundaries; classify incoming DTLS at ICE demultiplexing without treating the
    label as authentication. Exercise silent/retrying and successful local peers,
    with no packet identifiers, under managed and executed NativeAOT tests.

  • Record fresh Advantage phase evidence isolating DTLS-client ServerHello timeouts
    before SCTP. The provider root cause and repeat acceptance remain open.

  • Exercise simultaneous SCTP initiators when one or both initial encrypted INIT
    records are dropped. Verify bidirectional DCEP data, preserved DTLS stream
    parity and handshake retransmission in managed and executed NativeAOT tests.

Full Changelog: v0.2.3...v0.2.4

0.2.3

Experimental 0.x release. Provider/device E2E acceptance remains; see README and docs/acceptance.md.

  • Initiate SCTP from both WebRTC endpoints regardless of DTLS setup, as required
    by RFC 8841 section 9.3. Previously a DTLS server waited passively, allowing
    a second passive SCTP peer to stall after successful ICE/DTLS. Add a pinned
    published-0.2.2 reproduction, positive control and fixed-source regressions
    with passive and simultaneously initiating peers in both DTLS roles, retaining
    DTLS-based DCEP stream parity. Execute fixed regressions under NativeAOT too.

  • Require managed protocol/network regressions and published/executed whole-root
    NativeAOT on native Linux arm64 CI, matching the Advantage establishment canary.

  • Require the pinned independent Pion interoperability suite on native Linux arm64
    in addition to x64, with host and container architecture assertions.

Full Changelog: v0.2.2...v0.2.3

Commits viewable in compare view.

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps tryAGI.WebRTC from 0.2.2 to 0.2.8

---
updated-dependencies:
- dependency-name: tryAGI.WebRTC
  dependency-version: 0.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from HavenDV as a code owner October 10, 2026 01:15
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code labels Oct 10, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 14, 2026

Copy link
Copy Markdown
Contributor Author

Looks like tryAGI.WebRTC is no longer being updated by Dependabot, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 14, 2026
@dependabot
dependabot Bot deleted the dependabot/nuget/src/tests/WebRTC.PublishedRegression/all-0a98dac636 branch October 14, 2026 14:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants