Update livekit deps

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending	Age	Confidence
github.com/livekit/media-sdk	require	digest	3d4d26d → 40d3338
github.com/livekit/server-sdk-go/v2	require	patch	v2.16.7-0.20260625120102-b6d1838861e7 → v2.16.7	v2.18.0 (+1)
github.com/livekit/sipgo	require	digest	a5b4a38 → ca5b8ca

---

Release Notes

livekit/server-sdk-go (github.com/livekit/server-sdk-go/v2)

v2.16.7

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 9am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[devin-ai-integration]

Devin Review found 1 potential issue.

[devin-ai-integration]

🔍 sipgo dependency appears to be downgraded by over a year

The livekit/sipgo pseudo-version changed from v0.13.2-0.20260519205735-a5b4a38b6ceb (May 19, 2026) to v0.13.2-0.20250410120437-ca5b8ca7b53d (April 10, 2025). The go.mod hashes differ (aDa6... vs nbNi...), confirming different source code. The codebase uses several sipgo APIs that may have been introduced after April 2025:

• sipgo.WithUserAgentTCPConfig, sipgo.TCPConfig, sipgo.PortRange at pkg/sip/service.go:234-237
• sipgo.WithUserAgenTLSConfig at pkg/sip/service.go:301
• sipgo.ClientRequestAddVia at pkg/sip/outbound_utilities_test.go:359
• sipClient.TransportLayer() and tpl.GetConnection() at pkg/sip/outbound.go:1114-1118
• "github.com/livekit/sipgo/transport" sub-package with transport.UDPMTUSize at pkg/sip/service.go:34,89

If any of these APIs were added between April 2025 and May 2026, this downgrade will cause compilation failures. This should be verified by CI or by checking the sipgo commit history. If this downgrade is intentional (e.g., reverting to a more stable commit), the PR description should explain why.

---

Was this helpful? React with 👍 or 👎 to provide feedback.

[devin-ai-integration]

Devin Review found 1 new potential issue.

View 2 additional findings in Devin Review.

[devin-ai-integration]

🔴 SIP library downgraded to a version that predates required features, breaking the build

The SIP signaling library is downgraded to an April 2025 snapshot (sipgo v0.13.2-0.20250410120437 at go.mod:17) that predates the TCP dial-port-range feature added in December 2025, so the project cannot compile.

Impact: The service fails to build because it references TCP configuration types and options that do not exist in the downgraded library version.

Mechanism: missing TCPConfig, PortRange, and WithUserAgentTCPConfig in older sipgo

The code at pkg/sip/service.go:234-239 uses sipgo.WithUserAgentTCPConfig, sipgo.TCPConfig, and sipgo.PortRange. These were introduced to the sipgo fork in a commit after April 2025 — the feature was added to this repo in commit f40d7bb (December 2025), which simultaneously upgraded sipgo from a June 2025 to a December 2025 version.

The PR downgrades sipgo from v0.13.2-0.20260519205735-a5b4a38b6ceb (May 2026) back to v0.13.2-0.20250410120437-ca5b8ca7b53d (April 2025), which is ~8 months before these APIs existed in the library.

Suggested change

	github.com/livekit/sipgo v0.13.2-0.20250410120437-ca5b8ca7b53d
	github.com/livekit/sipgo v0.13.2-0.20260519205735-a5b4a38b6ceb

---

Was this helpful? React with 👍 or 👎 to provide feedback.