Update go deps (major)

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/mjibson/go-dsp	v0.0.0-20180508042940-11479a337f12 → v1.0.0
github.com/pion/rtp	v1.10.5 → v2.0.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

pion/rtp (github.com/pion/rtp)

v2.0.0

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 9am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: go get -t ./...
go: github.com/mjibson/go-dsp@v1.0.0: parsing go.mod:
	module declares its path as: github.com/madelynnblue/go-dsp
	        but was required as: github.com/mjibson/go-dsp

[devin-ai-integration]

Devin Review found 2 potential issues.

View 2 additional findings in Devin Review.

[devin-ai-integration]

🟡 RTP upgrade never reaches application code

github.com/pion/rtp/v2 is required, but every RTP import still targets v1. Production packet handling remains on v1 while v2 sits unused.

---

Was this helpful? React with 👍 or 👎 to provide feedback.

[devin-ai-integration]

Devin Review found 1 new potential issue.

1 flag not posted on this PR by your GitHub settings — view it in Devin Review. (Configure)

[devin-ai-integration]

🔴 Dependency update blocks every build

go mod download rejects github.com/mjibson/go-dsp@v1.0.0 because that release declares github.com/madelynnblue/go-dsp. Tests, binaries, and container images cannot build.

Prompt for agents

The v1.0.0 release required as github.com/mjibson/go-dsp declares its module path as github.com/madelynnblue/go-dsp, causing go mod download to fail. Either retain the last compatible github.com/mjibson/go-dsp version or migrate go.mod and pkg/audiotest/freq.go to the renamed module. Regenerate go.sum and run the full Go test and container build workflows afterward.

---

Was this helpful? React with 👍 or 👎 to provide feedback.