chore: upgrade lasuite/meet to v1.35.0, livekit to v1.13.10, nginx to 1.31.7 #11

Merged

trav merged 5 commits from upgrade-6cb491b into main 2026-10-19 16:57:05 +00:00

Conversation 10 Commits 5 Files Changed 1

+6 -6

autonomic-bot commented 2026-09-21 21:17:55 +00:00

Owner

Copy Link

Copy Source

Recipe upgrade: lasuite-meet v1.34.0 → v1.35.0 (+ livekit v1.13.10, nginx 1.31.7)

Extends this upgrade PR with the meet monorepo bump to v1.35.0, livekit to v1.13.10, and
nginx to 1.31.7. This PR does not touch the coop-cloud.${STACK_NAME}.version label.

service	image	current	new
app	lasuite/meet-frontend	v1.34.0	v1.35.0
backend	lasuite/meet-backend	v1.34.0	v1.35.0
celery	lasuite/meet-backend	v1.34.0	v1.35.0
livekit	livekit/livekit-server	v1.13.9	v1.13.10
web	nginx	1.31.6	1.31.7
redis	redis	8.10.2	unchanged (latest)
db	pgautoupgrade/pgautoupgrade	18-debian	unchanged (latest)

Upstream release notes: app/backend/celery meet v1.34.0→v1.35.0: https://github.com/suitenumerique/meet/releases/tag/v1.35.0
Upstream release notes: livekit v1.13.9→v1.13.10: https://github.com/livekit/livekit/releases/tag/v1.13.10
Upstream release notes: web nginx 1.31.6→1.31.7: https://nginx.org/en/CHANGES

Operator Action Required

None required. v1.35.0 adds new optional settings (USER_ACCESS_TOKEN_* default disabled;
EXCHANGE_ACCESS_TOKEN_THROTTLE_RATES, EMAIL_TIMEOUT defaulted) and a non-destructive migration
(core.0025_application_client_secret_sha256, a nullable column — runs automatically on boot). No
removed setting (APPLICATION_CLIENT_SECRET_LENGTH, LOBBY_COOKIE_NAME) is used by this recipe.
nginx 1.31.7 is a security release (5 CVEs).

Advisory scan

6 CVEs fixed in this window: 5 nginx (1.31.7 security release: CVE-2026-15176, CVE-2026-93479,
CVE-2026-95101, CVE-2026-97629, CVE-2026-97205) + CVE-2026-4775 (tiff, fixed in the meet frontend
v1.35.0). The deterministic scan flagged incomplete github-advisory sources for the non-moving
sidecars (redis/pgautoupgrade/nginx) — the nginx CVEs were recovered from the vendor CHANGES URL.

Recommended publish (after merge)

abra recipe release lasuite-meet -y

Semver reasoning: new features + security fixes, no breaking config change → minor
(0.7.0+v1.31.0 → 0.8.0+v1.35.0).

Deployed and inspected directly on cc-ci under a dev- domain with --chaos before opening this
PR: all 7 services 1/1, migrations applied (incl. core.0025/core.0026), backend + __heartbeat__
serving 200, livekit 1.13.10, nginx 1.31.7. The dev- deploy was torn down after.

Tested green on the cc-ci recipe CI server (full suite, cold, against this PR head). NOT merged — for operator review.

cc @trav @notplants

## Recipe upgrade: lasuite-meet v1.34.0 → v1.35.0 (+ livekit v1.13.10, nginx 1.31.7) Extends this upgrade PR with the meet monorepo bump to **v1.35.0**, livekit to **v1.13.10**, and nginx to **1.31.7**. This PR does **not** touch the `coop-cloud.${STACK_NAME}.version` label. | service | image | current | new | |---------|-------|---------|-----| | app | lasuite/meet-frontend | v1.34.0 | **v1.35.0** | | backend | lasuite/meet-backend | v1.34.0 | **v1.35.0** | | celery | lasuite/meet-backend | v1.34.0 | **v1.35.0** | | livekit | livekit/livekit-server | v1.13.9 | **v1.13.10** | | web | nginx | 1.31.6 | **1.31.7** | | redis | redis | 8.10.2 | unchanged (latest) | | db | pgautoupgrade/pgautoupgrade | 18-debian | unchanged (latest) | **Upstream release notes:** app/backend/celery meet v1.34.0→v1.35.0: https://github.com/suitenumerique/meet/releases/tag/v1.35.0 **Upstream release notes:** livekit v1.13.9→v1.13.10: https://github.com/livekit/livekit/releases/tag/v1.13.10 **Upstream release notes:** web nginx 1.31.6→1.31.7: https://nginx.org/en/CHANGES ### Operator Action Required None required. v1.35.0 adds new optional settings (`USER_ACCESS_TOKEN_*` default disabled; `EXCHANGE_ACCESS_TOKEN_THROTTLE_RATES`, `EMAIL_TIMEOUT` defaulted) and a non-destructive migration (`core.0025_application_client_secret_sha256`, a nullable column — runs automatically on boot). No removed setting (`APPLICATION_CLIENT_SECRET_LENGTH`, `LOBBY_COOKIE_NAME`) is used by this recipe. nginx 1.31.7 is a security release (5 CVEs). ### Advisory scan 6 CVEs fixed in this window: 5 nginx (1.31.7 security release: CVE-2026-15176, CVE-2026-93479, CVE-2026-95101, CVE-2026-97629, CVE-2026-97205) + CVE-2026-4775 (`tiff`, fixed in the meet frontend v1.35.0). The deterministic scan flagged incomplete github-advisory sources for the non-moving sidecars (redis/pgautoupgrade/nginx) — the nginx CVEs were recovered from the vendor `CHANGES` URL. ### Recommended publish (after merge) `abra recipe release lasuite-meet -y` Semver reasoning: new features + security fixes, no breaking config change → minor (`0.7.0+v1.31.0` → `0.8.0+v1.35.0`). _Deployed and inspected directly on cc-ci under a `dev-` domain with `--chaos` before opening this PR: all 7 services 1/1, migrations applied (incl. `core.0025`/`core.0026`), backend + `__heartbeat__` serving 200, livekit 1.13.10, nginx 1.31.7. The `dev-` deploy was torn down after._ Tested green on the cc-ci recipe CI server (full suite, cold, against this PR head). NOT merged — for operator review. cc @trav @notplants

autonomic-bot added 1 commit 2026-09-21 21:17:55 +00:00

chore: upgrade redis to 8.10.2 6cb491b796

autonomic-bot requested review from trav 2026-09-21 21:17:55 +00:00

autonomic-bot requested review from notplants 2026-09-21 21:17:55 +00:00

autonomic-bot commented 2026-09-21 21:18:08 +00:00

Author

Owner

Copy Link

Copy Source

!testme

!testme

autonomic-bot commented 2026-09-21 21:18:35 +00:00

Author

Owner

Copy Link

Copy Source

🌻 cc-ci — lasuite-meet @ 6cb491b7 ✅ passed

full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `lasuite-meet` @ `6cb491b7` ✅ **passed** [](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/8) [](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/8) [full logs](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/8) · [dashboard](https://ci.autonomic.zone/)

autonomic-bot changed title from chore: upgrade redis to 8.10.2 to chore: upgrade lasuite/meet to v1.32.1 2026-09-28 21:18:34 +00:00

autonomic-bot added 1 commit 2026-09-28 21:18:36 +00:00

chore: upgrade lasuite/meet to v1.32.1 547536dca3

autonomic-bot commented 2026-09-28 21:18:52 +00:00

Author

Owner

Copy Link

Copy Source

!testme

!testme

autonomic-bot commented 2026-09-28 21:18:55 +00:00

Author

Owner

Copy Link

Copy Source

🌻 cc-ci — lasuite-meet @ 547536dc ✅ passed

full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `lasuite-meet` @ `547536dc` ✅ **passed** [](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/19) [](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/19) [full logs](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/19) · [dashboard](https://ci.autonomic.zone/)

autonomic-bot changed title from chore: upgrade lasuite/meet to v1.32.1 to chore: upgrade lasuite/meet to v1.33.0 2026-10-02 02:58:35 +00:00

autonomic-bot added 1 commit 2026-10-02 02:58:37 +00:00

chore: upgrade lasuite/meet to v1.33.0 071101c1a7

autonomic-bot commented 2026-10-02 02:59:01 +00:00

Author

Owner

Copy Link

Copy Source

!testme

!testme

autonomic-bot commented 2026-10-02 02:59:20 +00:00

Author

Owner

Copy Link

Copy Source

🌻 cc-ci — lasuite-meet @ 071101c1 ✅ passed

full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `lasuite-meet` @ `071101c1` ✅ **passed** [](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/27) [](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/27) [full logs](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/27) · [dashboard](https://ci.autonomic.zone/)

autonomic-bot changed title from chore: upgrade lasuite/meet to v1.33.0 to chore: upgrade lasuite/meet to v1.34.0 2026-10-09 02:59:44 +00:00

autonomic-bot added 1 commit 2026-10-09 02:59:45 +00:00

chore: upgrade lasuite/meet to v1.34.0 e474ca5477

autonomic-bot commented 2026-10-09 02:59:52 +00:00

Author

Owner

Copy Link

Copy Source

!testme

!testme

autonomic-bot commented 2026-10-09 03:00:11 +00:00

Author

Owner

Copy Link

Copy Source

🌻 cc-ci — lasuite-meet @ e474ca54 ✅ passed

full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `lasuite-meet` @ `e474ca54` ✅ **passed** [](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/46) [](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/46) [full logs](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/46) · [dashboard](https://ci.autonomic.zone/)

autonomic-bot changed title from chore: upgrade lasuite/meet to v1.34.0 to chore: upgrade lasuite/meet to v1.35.0, livekit to v1.13.10, nginx to 1.31.7 2026-10-16 02:52:17 +00:00

autonomic-bot added 1 commit 2026-10-16 02:52:18 +00:00

chore: upgrade lasuite/meet to v1.35.0, livekit to v1.13.10, nginx to 1.31.7 0d8e0d6989

autonomic-bot commented 2026-10-16 02:52:27 +00:00

Author

Owner

Copy Link

Copy Source

!testme

!testme

autonomic-bot commented 2026-10-16 02:52:43 +00:00

Author

Owner

Copy Link

Copy Source

🌻 cc-ci — lasuite-meet @ 0d8e0d69 ✅ passed

full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `lasuite-meet` @ `0d8e0d69` ✅ **passed** [](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/59) [](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/59) [full logs](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/59) · [dashboard](https://ci.autonomic.zone/)

trav merged commit a46b22bfb0 into main 2026-10-19 16:57:05 +00:00

Sign in to join this conversation.

Reviewers

No Reviewers

trav

notplants

Labels

No items

No labels

Milestone

No items

No Milestone

Projects

Clear projects

No projects

Assignees

Clear assignees

autonomic autonomic-bot kawaiipunk (KawaiiPunk) notplants trav (Trav Fryer)

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: recipe-maintainers/lasuite-meet#11