Repository navigation
chore: bump flutter_webrtc to 1.6.3 and WebRTC-SDK to 150.7871.04 - #1258
Merged
Merged
Conversation
flutter_webrtc 1.6.3 lets Windows and Linux plugins attach native video processors to local tracks (flutter-webrtc/flutter-webrtc#2233), fixes a Linux deadlock in desktopCapturer.getSources() (#2244), and moves to WebRTC-SDK 150.7871.04 and libwebrtc m150.7871.07. Those drop the compromised eMudhra cross-signed AAA Certificate Services root from the TURN/TLS bundle. Both podspecs pin WebRTC-SDK exactly, like flutter_webrtc's own, so they move to 150.7871.04 together with the flutter_webrtc pin. Android moves to the same version.
livekit_ffi 0.13.2 moves the Rust core to libwebrtc webrtc-a545de4, which drops the compromised eMudhra cross-signed AAA Certificate Services root from its bundled TURN/TLS roots, matching the WebRTC-SDK 150.7871.04 bump. The SDK only calls buildVersion() today, so this changes no behavior.
hiroshihorie
marked this pull request as ready for review
October 26, 2026 05:06
hiroshihorie
requested review from
changt,
cloudwebrtc and
xianshijing-lk
as code owners
October 26, 2026 05:06
![devin-ai-integration[bot]](https://avatars.githubusercontent.com/in/811515?s=60&v=4){kind=small}
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Why
flutter_webrtc 1.6.3 carries two things livekit_client needs:
desktopCapturer.getSources()that hung every Linux screen share on flutter-webrtcmain(fix(desktop): run task runner tasks without holding the queue lock flutter-webrtc/flutter-webrtc#2244).AAA Certificate Services, which cross-signs the compromised eMudhra intermediates, in the TURN/TLS roots.What changed
Two commits:
flutter_webrtc: 1.6.3, and WebRTC-SDK150.7871.04in both podspecs andandroid/build.gradle. The podspecs pin WebRTC-SDK exactly like flutter_webrtc's own, so they have to move together.pubspec.lockonly changes theflutter_webrtcentry.livekit_ffi: ^0.13.2. Its libwebrtc also drops the AAA root. The SDK only callsbuildVersion()today, so this changes no behavior.Each commit has its own changeset.
Verification
flutter analyze,flutter test(466 passed) andcheck_versionpass locally.TrackProcessorreaches the subscriber processed, on both simulcast layers and acrossrestartTrack(). That run used the flutter-webrtc commits before the release tag, not the published 1.6.3.Not verified yet:
AAA Certificate Services, which is checked withgrepon the resolved WebRTC binaries.Related
TrackProcessoracrossrestartTrack()and default mute and unmute. Without it, a desktop processor is lost on every camera switch.