[dependabot]

Bumps the livekit-crates group with 3 updates in the / directory: livekit, livekit-api and livekit-capture.

Updates livekit from 0.9.4 to 0.9.5

Release notes

Sourced from livekit's releases.

livekit 0.9.5 (2026-10-12)

Fixes

• In-flight incoming data streams now error with AbnormalEnd when the room closes. Before, the stream readers ended cleanly, so read_all() returned truncated content as if it were complete.
• Keep pre-encoded video decodable when WebRTC drops frames: the passthrough encoder disables WebRTC's frame dropper, and after a frame is dropped before it, holds delta frames and requests a keyframe until the next keyframe arrives.
• Add PeerConnection::set_bitrate to set the send bitrate limits of a peer connection.
• Public API tokens minted from an API key and secret now grant every thread action (list, create, read, write, delete) across the project. Before, they carried only all, so creating or reading a thread was refused.
• Re-apply dynacast publishing layers after every publisher answer, so that layers paused by dynacast stay paused after a renegotiation.
• Room::close now leaves the room Disconnected and emits RoomEvent::Disconnected before it returns, and Disconnected is final: a reconnect still finishing in the background (a queued resume, or the republish after a full reconnect) can no longer bring a closed room back to Connected or emit Reconnected after Disconnected. Before, the room's event task could drop the engine's Disconnected event when the close signal won the race, so a closed room kept reporting Connected (or Reconnecting) about half the time.

VideoGrants gains the agent grant and Claims the kind claim (with

AccessToken::with_kind), which the Go, Python and JS SDKs already carry. An agent worker's token is VideoGrants { agent: true } and a simulated job's participant token is kind: "agent"; neither could be minted from Rust before. livekit-uniffi exposes both: TokenOptions.kind, Claims.kind, and agent on its VideoGrants record.

Breaking: the four grants the server infers when absent -- can_publish, can_subscribe, can_publish_data, can_update_own_metadata -- are now Option<bool>, as in the Go and JS SDKs. None leaves the decision to the server, and the new getters (can_publish(), can_subscribe(), can_publish_data(), can_update_own_metadata()) read a token the way the server does, can_publish_data falling back to can_publish included. Code that set these fields writes Some(..); code that read them uses the getters. The same fields are optional on the livekit-uniffi record, and livekit-api re-exports the crate as livekit_api::access_token, so both carry the change.

Nothing at its default is written into the token any more: unset claims and grants are omitted, as the server's own omitempty grants are. Verification of existing tokens is unchanged.

Commits

• 49b3ebe Release packages (#1506)
• 8a1e1e8 webrtc-sys: keep pre-encoded video decodable when frames drop (#1511)
• 04cacaa livekit-api: grant every thread action to key pair tokens (#1519)
• 6b038ef livekit-protocol, livekit-token, livekit-api: the agent package, agent grants...
• bb60d68 Fix data stream implementation so any in-flight incoming streams when the man...
• 35d7655 Capture: GStreamer source (#1353)
• 39397b8 Stop the FFI server tests from running over each other (#1475)
• 5536930 libwebrtc: add PeerConnection::set_bitrate (#1503)
• 1d7fbac Refresh subscribed codecs after publisher answer (#1487)
• 84fcab5 room: leave the room Disconnected when close() returns (#1502)
• See full diff in compare view

Updates livekit-api from 0.8.2 to 0.9.0

Release notes

Sourced from livekit-api's releases.

livekit-api 0.9.0 (2026-10-12)

Breaking Changes

VideoGrants gains the agent grant and Claims the kind claim (with

AccessToken::with_kind), which the Go, Python and JS SDKs already carry. An agent worker's token is VideoGrants { agent: true } and a simulated job's participant token is kind: "agent"; neither could be minted from Rust before. livekit-uniffi exposes both: TokenOptions.kind, Claims.kind, and agent on its VideoGrants record.

Breaking: the four grants the server infers when absent -- can_publish, can_subscribe, can_publish_data, can_update_own_metadata -- are now Option<bool>, as in the Go and JS SDKs. None leaves the decision to the server, and the new getters (can_publish(), can_subscribe(), can_publish_data(), can_update_own_metadata()) read a token the way the server does, can_publish_data falling back to can_publish included. Code that set these fields writes Some(..); code that read them uses the getters. The same fields are optional on the livekit-uniffi record, and livekit-api re-exports the crate as livekit_api::access_token, so both carry the change.

Nothing at its default is written into the token any more: unset claims and grants are omitted, as the server's own omitempty grants are. Verification of existing tokens is unchanged.

Fixes

• Public API tokens minted from an API key and secret now grant every thread action (list, create, read, write, delete) across the project. Before, they carried only all, so creating or reading a thread was refused.

livekit-api gains ThreadClient and DatabaseClient services (LiveKitApi::threads() and

LiveKitApi::databases()) for agent threads and databases, built on a client generated from the LiveKit Cloud Public API spec. reqwest moves to 0.13; with rustls its TLS config is built on ring with the same webpki or native roots as before.

Commits

• 49b3ebe Release packages (#1506)
• 8a1e1e8 webrtc-sys: keep pre-encoded video decodable when frames drop (#1511)
• 04cacaa livekit-api: grant every thread action to key pair tokens (#1519)
• 6b038ef livekit-protocol, livekit-token, livekit-api: the agent package, agent grants...
• bb60d68 Fix data stream implementation so any in-flight incoming streams when the man...
• 35d7655 Capture: GStreamer source (#1353)
• 39397b8 Stop the FFI server tests from running over each other (#1475)
• 5536930 libwebrtc: add PeerConnection::set_bitrate (#1503)
• 1d7fbac Refresh subscribed codecs after publisher answer (#1487)
• 84fcab5 room: leave the room Disconnected when close() returns (#1502)
• See full diff in compare view

Updates livekit-capture from 0.1.4 to 0.1.5

Release notes

Sourced from livekit-capture's releases.

livekit-capture 0.1.5 (2026-10-12)

Features

• Add a capture source that ingests encoded video from a GStreamer pipeline.

Fixes

• In-flight incoming data streams now error with AbnormalEnd when the room closes. Before, the stream readers ended cleanly, so read_all() returned truncated content as if it were complete.
• Keep pre-encoded video decodable when WebRTC drops frames: the passthrough encoder disables WebRTC's frame dropper, and after a frame is dropped before it, holds delta frames and requests a keyframe until the next keyframe arrives.
• Add PeerConnection::set_bitrate to set the send bitrate limits of a peer connection.
• Public API tokens minted from an API key and secret now grant every thread action (list, create, read, write, delete) across the project. Before, they carried only all, so creating or reading a thread was refused.
• Re-apply dynacast publishing layers after every publisher answer, so that layers paused by dynacast stay paused after a renegotiation.
• Room::close now leaves the room Disconnected and emits RoomEvent::Disconnected before it returns, and Disconnected is final: a reconnect still finishing in the background (a queued resume, or the republish after a full reconnect) can no longer bring a closed room back to Connected or emit Reconnected after Disconnected. Before, the room's event task could drop the engine's Disconnected event when the close signal won the race, so a closed room kept reporting Connected (or Reconnecting) about half the time.

livekit-protocol carries the livekit.agent package (AgentSessionEvent,

SessionRequest, the EOT inference messages), the agent threads messages and the agent-db service; the crates that depend on it follow its bump.

Commits

• 49b3ebe Release packages (#1506)
• 8a1e1e8 webrtc-sys: keep pre-encoded video decodable when frames drop (#1511)
• 04cacaa livekit-api: grant every thread action to key pair tokens (#1519)
• 6b038ef livekit-protocol, livekit-token, livekit-api: the agent package, agent grants...
• bb60d68 Fix data stream implementation so any in-flight incoming streams when the man...
• 35d7655 Capture: GStreamer source (#1353)
• 39397b8 Stop the FFI server tests from running over each other (#1475)
• 5536930 libwebrtc: add PeerConnection::set_bitrate (#1503)
• 1d7fbac Refresh subscribed codecs after publisher answer (#1487)
• 84fcab5 room: leave the room Disconnected when close() returns (#1502)
• See full diff in compare view