Skip to content

Update SIPSorcery security dependency - #208

Open
flcl42 wants to merge 2 commits into
mainfrom
sipsorcery-security-update
Open

flcl42 wants to merge 2 commits into
mainfrom
sipsorcery-security-update

Conversation

@flcl42

@flcl42 flcl42 commented Aug 24, 2026

Copy link
Copy Markdown
Contributor

Summary

  • update SIPSorcery to 10.0.14, which contains the fixes for GHSA-28gm-jrmw-xx93 and GHSA-jwjp-4649-v8jp
  • adapt WebRTC-Direct certificate creation to the updated DTLS certificate API and cover the construction path
  • align dependent abstraction package pins and the transport interop lock file

@flcl42
flcl42 requested a review from rubo as a code owner August 24, 2026 06:38
@flcl42
flcl42 requested a lite review from Copilot August 24, 2026 07:03

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the repo’s SIPSorcery dependency to a security-fixed version and adjusts the WebRTC-Direct DTLS certificate creation code to match the updated DTLS certificate API, along with aligning related Microsoft.Extensions abstraction package pins and updating the transport-interop lockfile.

Changes:

  • Bump SIPSorcery to 10.0.14 and align Microsoft.Extensions.*.Abstractions pins to 10.0.10.
  • Update WebRTC-Direct local DTLS certificate creation to the new TLS certificate API surface.
  • Update transport-interop lock file and add a small constructor smoke test for the WebRTC-Direct certificate construction path.

Reviewed changes

Copilot reviewed 7 out of 7 changed files in this pull request and generated 2 comments.

Show a summary per file
File Description
src/samples/transport-interop/TransportInterop.csproj Bumps Logging.Abstractions to align with updated abstraction pins.
src/samples/transport-interop/packages.lock.json Updates resolved dependency graph (SIPSorcery 10.0.14, abstractions 10.0.10, and related transitive changes).
src/samples/pubsub-chat/PubsubChat.csproj Aligns DI.Abstractions version to 10.0.10.
src/samples/perf-benchmarks/PerfBenchmarks.csproj Aligns Logging.Abstractions version to 10.0.10.
src/libp2p/Libp2p.Protocols.WebRtc/WebRtcDirectProtocol.cs Adapts local DTLS certificate creation to updated DTLS/TLS certificate API.
src/libp2p/Libp2p.Protocols.WebRtc.Tests/WebRtcDirectProtocolTests.cs Adds a constructor smoke test covering DTLS certificate creation path.
src/libp2p/Directory.Packages.props Central package version updates for SIPSorcery and abstraction packages.

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Comment thread src/libp2p/Libp2p.Protocols.WebRtc/WebRtcDirectProtocol.cs
Comment thread src/libp2p/Libp2p.Protocols.WebRtc.Tests/WebRtcDirectProtocolTests.cs Outdated

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 7 out of 7 changed files in this pull request and generated no new comments.

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 7 out of 7 changed files in this pull request and generated no new comments.

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 7 out of 7 changed files in this pull request and generated no new comments.

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 7 out of 7 changed files in this pull request and generated no new comments.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants