Merge branch 'main' into release/rtc-v1.1.21

Author: cloudwebrtc

.github/workflows/build-rtc.yml

@@ -31,6 +31,7 @@ jobs:
       - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
         with:
           submodules: true
+          repository: ${{ github.event.pull_request.head.repo.full_name }}
           ref: ${{ github.event.pull_request.head.ref }}
 
       - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
@@ -48,7 +49,13 @@ jobs:
       - name: generate python stubs
         run: ./generate_proto.sh
 
+      # Fork PR tokens cannot push generated changes. Verify them read-only.
+      - name: Check generated stubs on forks
+        if: github.event.pull_request.head.repo.full_name != github.repository
+        run: git diff --exit-code -- livekit/rtc/_proto
+
       - name: Add changes
+        if: github.event.pull_request.head.repo.full_name == github.repository
         uses: EndBug/add-and-commit@cc9c08ba6c8df3b93a8f2db63e89b98368ae2ae8 # v11
         with:
           add: '["livekit-rtc/"]'

.github/workflows/check-types.yml

@@ -5,8 +5,6 @@ on:
     branches:
       - main
   pull_request:
-    branches:
-      - main
 
 jobs:
   type-check:
@@ -17,25 +15,28 @@ jobs:
         with:
           submodules: recursive
 
-      - name: Set up Python 3.9
+      - name: Set up Python 3.12
         uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
         with:
-          python-version: 3.9
+          python-version: "3.12"
 
       - name: Install uv
         uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
         with:
+          version: "0.12.24"
           enable-cache: true
           cache-dependency-glob: "uv.lock"
 
       - name: Install the project
-        run: uv sync --all-extras --dev
+        run: uv sync --locked --all-extras --dev
 
       - name: Install workspace packages
         run: uv pip install -e livekit-protocol -e livekit-api -e livekit-rtc
 
       - name: Download ffi
-        run: uv run python livekit-rtc/rust-sdks/download_ffi.py --output .venv/lib/python3.9/site-packages/livekit/rtc/resources
+        run: uv run python livekit-rtc/rust-sdks/download_ffi.py --output livekit-rtc/livekit/rtc/resources
 
       - name: Check Types
-        run: uv run mypy livekit-protocol livekit-api livekit-rtc
+        run: |
+          uv run mypy livekit-protocol livekit-api livekit-rtc
+          uv run mypy --python-version 3.9 livekit-protocol/livekit livekit-api/livekit livekit-rtc/livekit

.github/workflows/ruff.yml

@@ -7,16 +7,17 @@ jobs:
       - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
       - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
         with:
-          python-version: "3.9"
+          python-version: "3.12"
 
       - name: Install uv
         uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
         with:
+          version: "0.12.24"
           enable-cache: true
           cache-dependency-glob: "uv.lock"
 
       - name: Install the project
-        run: uv sync --all-extras --dev
+        run: uv sync --locked --all-extras --dev
 
       # Use the ruff version pinned in uv.lock rather than uvx's latest release,
       # so lint results only change when the lockfile is intentionally updated.

.github/workflows/test-api.yml

@@ -22,11 +22,15 @@ on:
   push:
     branches: [main]
   pull_request:
-    branches: [main]
 
 jobs:
   failover:
+    name: API (Python ${{ matrix.python-version }})
     runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        python-version: ["3.9", "3.10", "3.11", "3.12", "3.13", "3.14"]
     services:
       mock-server:
         image: livekit/test-server:latest
@@ -42,16 +46,19 @@ jobs:
 
       - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
         with:
-          python-version: "3.12"
+          python-version: ${{ matrix.python-version }}
 
       - name: Install uv
         uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
+        with:
+          version: "0.12.24"
 
       - name: Install livekit-api (without livekit-rtc)
         run: |
           uv venv .failover-venv
           source .failover-venv/bin/activate
-          uv pip install ./livekit-protocol ./livekit-api pytest aiohttp
+          uv pip install ./livekit-protocol ./livekit-api "pytest>=9.0.3; python_version >= '3.10'" "pytest==8.4.2; python_version < '3.10'"
+          uv pip check
 
       - name: Wait for mock server
         run: |
@@ -64,4 +71,44 @@ jobs:
       - name: Run API tests
         run: |
           source .failover-venv/bin/activate
-          pytest tests/api -v
+          # Use a private directory instead of pytest's shared /tmp default.
+          pytest tests/api -v --basetemp="$(mktemp -d)"
+
+  wheels:
+    name: API wheels (${{ matrix.os }}, Python ${{ matrix.python-version }}, ${{ matrix.resolution }})
+    runs-on: ${{ matrix.os }}
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [macos-latest, windows-latest]
+        python-version: ["3.9", "3.14"]
+        resolution: [lowest-direct, highest]
+    steps:
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
+        with:
+          python-version: ${{ matrix.python-version }}
+
+      - uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
+        with:
+          version: "0.12.24"
+
+      - name: Build and install distributions
+        shell: bash
+        run: |
+          uv build --package livekit-api --out-dir dist
+          uv build --package livekit-protocol --out-dir dist
+          uv venv .api-wheel-venv
+          uv pip install --python .api-wheel-venv --resolution '${{ matrix.resolution }}' dist/*.whl "pytest>=9.0.3; python_version >= '3.10'" "pytest==8.4.2; python_version < '3.10'"
+          uv pip check --python .api-wheel-venv
+
+      - name: Test token and webhook compatibility
+        shell: bash
+        run: |
+          if [ "$RUNNER_OS" = Windows ]; then
+            test_python=.api-wheel-venv/Scripts/python.exe
+          else
+            test_python=.api-wheel-venv/bin/python
+          fi
+          "$test_python" -m pytest tests/api/test_access_token.py tests/api/test_webhook.py -v --basetemp="$RUNNER_TEMP/pytest-api"

README.md

@@ -404,6 +404,14 @@ Software encoders (libvpx for VP8/VP9, libaom for AV1, OpenH264 for H264) are us
 
 Please join us on [Slack](https://livekit.io/join-slack) to get help from our devs / community members. We welcome your contributions(PRs) and details can be discussed there.
 
+### Development environment
+
+The published SDKs support Python 3.9 and later. Development and release tooling
+requires Python 3.10 or later so that patched versions of its dependencies can be
+installed. For example, run `uv sync --locked --dev --python 3.12` from the
+repository root. A Python 3.9 runtime environment can use
+`uv sync --locked --no-dev --python 3.9`.
+
 <!--BEGIN_REPO_NAV-->
 <br/><table>
 <thead><tr><th colspan="2">LiveKit Ecosystem</th></tr></thead>