eisenzopf
diff --git a/‎Cargo.lock‎
Lines changed: 1171 additions & 1017 deletions b/‎Cargo.lock‎
Lines changed: 1171 additions & 1017 deletions
diff --git a/‎Cargo.toml‎
Lines changed: 18 additions & 18 deletions b/‎Cargo.toml‎
Lines changed: 18 additions & 18 deletions
diff --git a/‎crates/extensions/rvoip-redis/Cargo.toml‎
Lines changed: 1 addition & 1 deletion b/‎crates/extensions/rvoip-redis/Cargo.toml‎
Lines changed: 1 addition & 1 deletion
diff --git a/‎crates/extensions/rvoip-stir-shaken/Cargo.toml‎
Lines changed: 3 additions & 3 deletions b/‎crates/extensions/rvoip-stir-shaken/Cargo.toml‎
Lines changed: 3 additions & 3 deletions
diff --git a/‎crates/extensions/rvoip-vcon/Cargo.toml‎
Lines changed: 3 additions & 3 deletions b/‎crates/extensions/rvoip-vcon/Cargo.toml‎
Lines changed: 3 additions & 3 deletions
diff --git a/‎crates/foundation/infra-common/Cargo.toml‎
Lines changed: 1 addition & 1 deletion b/‎crates/foundation/infra-common/Cargo.toml‎
Lines changed: 1 addition & 1 deletion
diff --git a/‎crates/identity/auth-core/Cargo.toml‎
Lines changed: 4 additions & 4 deletions b/‎crates/identity/auth-core/Cargo.toml‎
Lines changed: 4 additions & 4 deletions
diff --git a/‎crates/identity/users-core/Cargo.toml‎
Lines changed: 10 additions & 10 deletions b/‎crates/identity/users-core/Cargo.toml‎
Lines changed: 10 additions & 10 deletions
diff --git a/‎crates/media/media-core/Cargo.toml‎
Lines changed: 3 additions & 3 deletions b/‎crates/media/media-core/Cargo.toml‎
Lines changed: 3 additions & 3 deletions
diff --git a/‎crates/media/rtp-core/Cargo.toml‎
Lines changed: 6 additions & 6 deletions b/‎crates/media/rtp-core/Cargo.toml‎
Lines changed: 6 additions & 6 deletions
@@ -270,12 +270,12 @@ tracing = "0.1"
 tracing-subscriber = { version = "0.3", features = ["env-filter"] }
 serde = { version = "1.0", features = ["derive"] }
 serde_json = "1.0"
-thiserror = "1.0"
+thiserror = "2.0"
 anyhow = "1.0"
 bytes = { version = "1.5", features = ["serde"] }
 uuid = { version = "1.7", features = ["v4", "serde"] }
-axum = "0.7"
-tower = "0.4"
+axum = "0.8"
+tower = "0.5"
 tower-http = { version = "0.5", features = ["trace", "cors"] }
 proptest = "1.4"
 async-trait = "0.1"
@@ -288,11 +288,11 @@ clap = { version = "4.0", features = ["derive"] }
 
 # Additional dependencies used by various crates
 serde_bytes = "0.11"
-base64 = "0.22"
-nom = "7.1"
+base64 = "0.23"
+nom = "8.0"
 log = "0.4"
-ordered-float = { version = "4.2.0", features = ["serde"] }
-socket2 = { version = "0.5", features = ["all"] }
+ordered-float = { version = "5.3.0", features = ["serde"] }
+socket2 = { version = "0.6", features = ["all"] }
 mio = { version = "0.8", features = ["os-poll", "net"] }
 # default-features=false drops rustls's default `aws_lc_rs` provider AND
 # `prefer-post-quantum` (which also requires aws_lc_rs) — otherwise the process
@@ -303,22 +303,22 @@ rustls-pemfile = "2.0"
 url = "2"
 # Used by rvoip-webrtc tls-rustls feature for in-process HTTPS/WSS termination.
 tokio-rustls = { version = "0.26", default-features = false, features = ["ring", "tls12", "logging"] }
-axum-server = { version = "0.7", features = ["tls-rustls"] }
+axum-server = { version = "0.8", features = ["tls-rustls"] }
 # Headless-Chromium driver for rvoip-webrtc's interop-browser dev-only test.
 # Requires a Chromium binary on PATH at test time. Default features disabled
 # to avoid pulling chromiumoxide_cdp's heavy proc-macro chain when the
 # feature isn't selected.
-chromiumoxide = { version = "0.7", default-features = false, features = ["tokio-runtime"] }
+chromiumoxide = { version = "0.8", default-features = false, features = ["tokio-runtime"] }
 sha2 = "0.10"
 zeroize = "1.9"
 hmac = "0.12"
-aes = "0.8"
+aes = "0.9"
 md-5 = "0.10"
 ring = "0.17"
 rcgen = "0.14"
 x509-parser = "0.18"
-webpki-roots = "0.26"
-serial_test = "3.1"
+webpki-roots = "1.0"
+serial_test = "4.0"
 fastrand = "2.0"
 
 # UCTP substrate deps — QUIC, WebTransport, length-prefix codec, metrics.
@@ -328,10 +328,10 @@ quinn = { version = "0.11", default-features = false, features = ["runtime-tokio
 # ring rustls provider (rustls/quinn are pinned to ring above). Force ring
 # so the process has exactly ONE rustls CryptoProvider — otherwise rustls
 # can't auto-select one and TLS/WSS paths panic at runtime.
-web-transport-quinn = { version = "0.11", default-features = false, features = ["ring"] }
-web-transport = "0.10.6"
+web-transport-quinn = { version = "0.12", default-features = false, features = ["ring"] }
+web-transport = "0.11.0"
 tokio-util = { version = "0.7", features = ["codec", "compat"] }
-metrics = "0.23"
+metrics = "0.24"
 # Qualified, attributed MOQT draft-19 forks. Package aliases retain the
 # upstream Rust crate names while the registry identities remain rvoip-owned.
 moq-transport = { package = "rvoip-moq-transport", path = "crates/moq/rvoip-moq-transport", version = "0.3.8" }
@@ -346,16 +346,16 @@ webrtc = { package = "rvoip-webrtc-stack", path = "crates/webrtc/rvoip-webrtc-st
 hickory-resolver = { version = "0.26.1", default-features = false, features = ["tokio", "system-config"] }
 tracing-appender = "0.2"
 env_logger = "0.11"
-criterion = { version = "0.5", features = ["html_reports"] }
+criterion = { version = "0.8", features = ["html_reports"] }
 
 # 🔧 Optimization Profiles for Binary Size Reduction
 
 
 # Optional perf-test instrumentation (rvoip-sip `perf-tests` feature).
-console-subscriber = "0.4"
+console-subscriber = "0.5"
 dhat = "0.3"
 hdrhistogram = "7.5"
-sysinfo = "0.31"
+sysinfo = "0.39"
 [profile.release]
 # Speed-optimized release for a perf-sensitive networking library.
 # Was previously `opt-level = "s"` (size) — switched to 3 after
 
@@ -19,7 +19,7 @@ moq = ["dep:rvoip-moq"]
 [dependencies]
 async-trait = { workspace = true }
 chrono = { workspace = true }
-redis = { version = "0.27", default-features = false, features = ["cluster-async", "connection-manager", "script", "tls-rustls-webpki-roots", "tokio-rustls-comp"] }
+redis = { version = "1.5", default-features = false, features = ["cluster-async", "connection-manager", "script", "tls-rustls-webpki-roots", "tokio-rustls-comp"] }
 rvoip-auth-core.workspace = true
 rvoip-moq = { workspace = true, optional = true }
 sha2 = { workspace = true }
 
@@ -32,7 +32,7 @@ rvoip-sip-core.workspace = true
 rvoip-sip-dialog.workspace = true
 
 # JWS / JWT for PASSporT (RFC 8225)
-jsonwebtoken = { version = "10.4", features = ["rust_crypto"] }
+jsonwebtoken = { version = "11.0", features = ["rust_crypto"] }
 
 # Certificate parsing for SHAKEN profile checks (TNAuthList, JWT Claim Constraints)
 x509-parser = "0.18"
@@ -57,10 +57,10 @@ url = "2.5"
 uuid = { version = "1.0", features = ["v4", "serde"] }
 
 # Errors
-thiserror = "1.0"
+thiserror = "2.0"
 
 # Base64url for PASSporT JWT segments
-base64 = "0.22"
+base64 = "0.23"
 
 # Logging
 tracing = "0.1"
 
@@ -31,13 +31,13 @@ x509-parser.workspace = true
 mime = "0.3"
 
 # JWS cryptographic primitives; wire framing is General JSON, not JWT.
-jsonwebtoken = { version = "10.4", features = ["rust_crypto"] }
+jsonwebtoken = { version = "11.0", features = ["rust_crypto"] }
 
-thiserror = "1.0"
+thiserror = "2.0"
 
 [dev-dependencies]
 tokio = { workspace = true, features = ["full", "test-util"] }
-jsonschema = { version = "0.33.0", default-features = false }
+jsonschema = { version = "0.49.9", default-features = false }
 
 [lints]
 workspace = true
@@ -31,7 +31,7 @@ async-trait.workspace = true
 dashmap.workspace = true
 
 # Crate-specific dependencies
-config = "0.14"
+config = "0.15"
 once_cell = "1.18.0"
 # Linux transparent huge-page promotion can commit partially used mimalloc
 # regions long after a burst has drained. Keep mimalloc's performance and
 
@@ -21,7 +21,7 @@ async-trait = "0.1"
 reqwest = { version = "0.12", default-features = false, features = ["json", "rustls-tls", "http2", "charset"] }
 
 # JWT handling
-jsonwebtoken = { version = "10.4", features = ["rust_crypto"] }
+jsonwebtoken = { version = "11.0", features = ["rust_crypto"] }
 
 # Serialization
 serde = { version = "1.0", features = ["derive"] }
@@ -31,15 +31,15 @@ serde_json = "1.0"
 url = "2.5"
 
 # Error handling
-thiserror = "1.0"
+thiserror = "2.0"
 anyhow = "1.0"
 
 # Caching
 moka = { version = "0.12", features = ["future"] }
 
 # Cryptography
 ring = "0.17"
-base64 = "0.22"
+base64 = "0.23"
 subtle = "2.6"
 
 # Time handling
@@ -49,7 +49,7 @@ chrono = { version = "0.4", features = ["serde"] }
 tracing = "0.1"
 
 # SIP Digest authentication
-md5 = "0.7"
+md5 = "0.8"
 sha2 = "0.10"
 hex = "0.4"
 rand = "0.8"
 
@@ -30,16 +30,16 @@ postgres = ["dep:sqlx-postgres"]
 tokio = { workspace = true, features = ["full"] }
 
 # Database
-sqlx-core = { version = "0.8", default-features = false, features = ["_rt-tokio", "json"] }
-sqlx-sqlite = { version = "0.8", default-features = false, features = ["bundled", "chrono", "json", "uuid"] }
+sqlx-core = { version = "0.9", default-features = false, features = ["_rt-tokio", "json"] }
+sqlx-sqlite = { version = "0.9", default-features = false, features = ["bundled", "chrono", "json", "uuid"] }
 sqlx-postgres = { version = "0.8", default-features = false, features = ["chrono", "json", "uuid"], optional = true }
 
 # Password hashing
 argon2 = "0.5"
-password-hash = "0.5"
+password-hash = "0.6"
 
 # JWT
-jsonwebtoken = { version = "10.4", features = ["rust_crypto"] }
+jsonwebtoken = { version = "11.0", features = ["rust_crypto"] }
 serde = { workspace = true, features = ["derive"] }
 serde_json = { workspace = true }
 
@@ -57,30 +57,30 @@ thiserror = { workspace = true }
 async-trait = "0.1"
 
 # Web framework (for REST API)
-axum = { version = "0.7", features = ["http2", "json", "tokio", "macros"] }
+axum = { version = "0.8", features = ["http2", "json", "tokio", "macros"] }
 axum-server = { version = "0.8", default-features = false, features = ["tls-rustls-no-provider"] }
-tower-http = { version = "0.6", features = ["cors", "trace"] }
+tower-http = { version = "0.7", features = ["cors", "trace"] }
 
 # Logging
 tracing = { workspace = true }
 tracing-subscriber = { workspace = true, features = ["env-filter", "json"] }
 
 # Configuration
-config = "0.14"
+config = "0.15"
 
 # Cryptography
 rand = "0.8"
-base64 = "0.22"
+base64 = "0.23"
 sha2 = "0.10"
 hex = "0.4"
-md5 = "0.7"
+md5 = "0.8"
 rsa = { version = "0.9", features = ["pem"] }
 
 # HTTP client (for examples)
 reqwest = { version = "0.12", features = ["json"], optional = true }
 
 # Validation
-validator = { version = "0.20", features = ["derive"] }
+validator = { version = "0.21", features = ["derive"] }
 regex = "1.10"
 once_cell = "1.19"
 ipnet = "2.12"
 
@@ -48,7 +48,7 @@ tokio.workspace = true
 anyhow.workspace = true
 
 # Error handling
-thiserror = "1.0"
+thiserror = "2.0"
 
 # Bytes handling
 bytes = "1.5"
@@ -69,7 +69,7 @@ num_cpus = "1.0"             # Used for default worker thread configuration
 rustfft = "6.1"
 num-complex = "0.4"          # Used in AEC v2 implementation
 apodize = "1.0"              # Used in VAD v2 for windowing functions
-biquad = "0.4"               # Used in AGC v2 for digital filters
+biquad = "0.6"               # Used in AGC v2 for digital filters
 
 # Media codecs are implemented by codec-core. media-core only provides the
 # media-frame adapter and negotiation/capability plumbing.
@@ -100,7 +100,7 @@ amr = ["amr-nb", "amr-wb"]
 all-codecs = ["pcmu", "pcma", "g729", "opus", "amr"]
 
 [dev-dependencies]
-serial_test = "3.0"
+serial_test = "4.0"
 tempfile = "3.8"
 criterion = { workspace = true }
 futures = "0.3"
 
@@ -23,16 +23,16 @@ workspace = true
 rvoip-infra-common.workspace = true
 
 bytes = "1.5.0"
-thiserror = "1.0.56"
+thiserror = "2.0.19"
 anyhow.workspace = true
 tokio = { version = "1.35.1", features = ["rt", "rt-multi-thread", "sync", "net", "time", "macros", "full"] }
 tracing = "0.1.40"
 tracing-subscriber = "0.3"
 rand = "0.8.5"
 async-trait = "0.1"
-base64 = "0.22"
+base64 = "0.23"
 futures = "0.3.30"
-hostname = "0.3"
+hostname = "0.4"
 once_cell = "1.10"
 parking_lot = "0.12.1"
 # RFC 4733 §2.5.1.3 retransmit dedup keyed on (peer_addr, ssrc, ts);
@@ -51,9 +51,9 @@ crossbeam-queue = "0.3"
 hmac = "0.12.1"
 sha1 = "0.10"
 sha2 = "0.10.8"
-aes = "0.8"
-ctr = "0.9"
-aes-gcm = "0.10.3"
+aes = "0.9"
+ctr = "0.10"
+aes-gcm = "0.11.0"
 p256 = { version = "0.13.2", features = ["ecdh"] }
 x509-parser = "0.18"
 rcgen = "0.14"