From 65e0b9c6c8ab37b7715c6cd195f8fac98f0ec43b Mon Sep 17 00:00:00 2001 From: Hiroshi Horie <548776+hiroshihorie@users.noreply.github.com> Date: Mon, 26 Oct 2026 23:44:23 +0800 Subject: [PATCH 1/3] docs: add the 2.13.2 changelog section 2.13.2 was released from release/2.13.2, cut from v2.13.1, so main's CHANGELOG went from 2.13.1 to the next release without it. --- CHANGELOG.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 6bef5038c..ebe6141f1 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,9 @@ # CHANGELOG +## 2.13.2 + +* Security: Bump flutter_webrtc to 1.6.3 and WebRTC-SDK to 150.7871.04. The bundled TURN/TLS roots no longer include AAA Certificate Services, which cross-signs the compromised eMudhra intermediate CAs (CVE-2026-111943) + ## 2.13.1 * Changed: Bump flutter_webrtc to 1.6.2+hotfix.4, which fixes a crash on iOS and macOS when a video renderer is disposed while frames are still arriving From ccff9c231cceae6356fe587ea6bec385530ba684 Mon Sep 17 00:00:00 2001 From: Hiroshi Horie <548776+hiroshihorie@users.noreply.github.com> Date: Mon, 26 Oct 2026 23:44:33 +0800 Subject: [PATCH 2/3] chore: drop the flutter_webrtc 1.6.3 changeset, released in 2.13.2 livekit_client 2.13.2 already shipped flutter_webrtc 1.6.3 and WebRTC-SDK 150.7871.04, so the next release from main would list the same bump again. --- .changes/bump-flutter-webrtc-1.6.3 | 1 - 1 file changed, 1 deletion(-) delete mode 100644 .changes/bump-flutter-webrtc-1.6.3 diff --git a/.changes/bump-flutter-webrtc-1.6.3 b/.changes/bump-flutter-webrtc-1.6.3 deleted file mode 100644 index fa6bc5503..000000000 --- a/.changes/bump-flutter-webrtc-1.6.3 +++ /dev/null @@ -1 +0,0 @@ -patch type="changed" "Bump flutter_webrtc to 1.6.3 and WebRTC-SDK to 150.7871.04. Windows and Linux can attach native video processors to local tracks, Linux screen share no longer hangs in getSources(), and the bundled TURN/TLS roots no longer include the compromised eMudhra cross-signed AAA Certificate Services root" From e8f902d3a9aa3bc9ed0bf1ae42a4791a273a8def Mon Sep 17 00:00:00 2001 From: Hiroshi Horie <548776+hiroshihorie@users.noreply.github.com> Date: Tue, 27 Oct 2026 00:03:34 +0800 Subject: [PATCH 3/3] example: build Android with Gradle 9.1 and AGP 9.0.1 The example's Gradle 8.14 wrapper cannot run on Java 25, which the current Android Studio bundles, so the Android build failed before compiling anything. Gradle 9.1 supports Java 25. Bump the wrapper to 9.1.0, the Android Gradle plugin to 9.0.1 and the Kotlin Gradle plugin to 2.3.20, the same versions as the flutter-webrtc example. The builtInKotlin and newDsl flags AGP 9 needs are already in gradle.properties. CI builds on Java 17, which both support. --- example/android/gradle/wrapper/gradle-wrapper.properties | 2 +- example/android/settings.gradle | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/example/android/gradle/wrapper/gradle-wrapper.properties b/example/android/gradle/wrapper/gradle-wrapper.properties index 401a6ac2d..b37c59639 100644 --- a/example/android/gradle/wrapper/gradle-wrapper.properties +++ b/example/android/gradle/wrapper/gradle-wrapper.properties @@ -1,6 +1,6 @@ #Thu Nov 14 15:55:14 CST 2024 distributionBase=GRADLE_USER_HOME distributionPath=wrapper/dists -distributionUrl=https\://services.gradle.org/distributions/gradle-8.14-all.zip +distributionUrl=https\://services.gradle.org/distributions/gradle-9.1.0-all.zip zipStoreBase=GRADLE_USER_HOME zipStorePath=wrapper/dists diff --git a/example/android/settings.gradle b/example/android/settings.gradle index ebf08564f..ae7d225ec 100644 --- a/example/android/settings.gradle +++ b/example/android/settings.gradle @@ -18,8 +18,8 @@ pluginManagement { plugins { id "dev.flutter.flutter-plugin-loader" version "1.0.0" - id "com.android.application" version '8.11.1' apply false - id "org.jetbrains.kotlin.android" version "2.2.20" apply false + id "com.android.application" version '9.0.1' apply false + id "org.jetbrains.kotlin.android" version "2.3.20" apply false } include ":app"