chore: release

[moq-bot]

🤖 New release

• kio: 0.6.1 -> 0.6.2 (✓ API compatible changes)
• moq-pattern: 0.1.1 -> 0.1.2 (✓ API compatible changes)
• moq-net: 0.3.7 -> 0.3.8 (✓ API compatible changes)
• moq-json: 0.5.5 -> 0.5.6 (✓ API compatible changes)
• moq-mux: 0.10.8 -> 0.10.9 (✓ API compatible changes)
• moq-sock: 0.1.0 -> 0.2.0 (⚠ API breaking changes)
• moq-tokio: 0.19.19 -> 0.19.20 (✓ API compatible changes)
• moq-audio: 0.1.7 -> 0.1.8 (✓ API compatible changes)
• moq-video: 0.1.7 -> 0.1.8 (✓ API compatible changes)
• libmoq: 0.6.8 -> 0.6.9
• moq-auth: 0.1.5 -> 0.2.0 (✓ API compatible changes)
• moq-uring: 0.0.9 -> 0.0.10 (✓ API compatible changes)
• moq-boy: 0.5.8 -> 0.5.9
• moq-hls: 0.5.8 -> 0.5.9 (✓ API compatible changes)
• moq-relay: 0.15.8 -> 0.16.0 (✓ API compatible changes)
• moq-rtc: 0.3.8 -> 0.3.9 (✓ API compatible changes)
• moq-rtmp: 0.3.8 -> 0.3.9 (✓ API compatible changes)
• moq-srt: 0.3.8 -> 0.3.9 (✓ API compatible changes)
• moq-cli: 0.12.8 -> 0.13.0
• moq-ffi: 0.4.8 -> 0.4.9
• moq-gst: 0.4.8 -> 0.4.9 (✓ API compatible changes)
• hang: 0.21.8 -> 0.21.9
• moq-binary: 0.1.7 -> 0.1.8
• moq-loc: 0.2.16 -> 0.2.17
• moq-archive: 0.0.8 -> 0.0.9
• moq-stats: 0.2.8 -> 0.2.9
• moq-transcode: 0.1.7 -> 0.1.8
• moq-e2ee: 0.0.8 -> 0.0.9
• moq-room: 0.2.8 -> 0.2.9

⚠ moq-sock breaking changes

--- failure auto_trait_impl_removed: auto trait no longer implemented ---

Description:
A public type has stopped implementing one or more auto traits. This can break downstream code that depends on the traits being implemented.
        ref: https://doc.rust-lang.org/reference/special-types-and-traits.html#auto-traits
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.50.0/src/lints/auto_trait_impl_removed.ron

Failed in:
  type Error is no longer UnwindSafe, in /tmp/nix-shell.qiVbLQ/.tmpSKYA04/moq/rs/moq-sock/src/shard.rs:110
  type Error is no longer RefUnwindSafe, in /tmp/nix-shell.qiVbLQ/.tmpSKYA04/moq/rs/moq-sock/src/shard.rs:110

Changelog

kio

0.6.2 - 2026-09-30

Fixed

• (kio) keep a lost waiter's recorded lists idempotent (#4422)
• (net) keep an aborted track's finished groups, expire ended tracks (#4378)

moq-pattern

0.1.2 - 2026-09-30

Fixed

• (pattern) JS subtree of a max-depth path is the path itself (#4360)

Other

• (quest) drop suffix-based routing from the plans (#4382)

moq-net

0.3.8 - 2026-09-30

Added

• (net) BigInt-free varint codec, internal U64, and checked Varint.decode (#4454)
• (net) drain queued stream data before a graceful close (#4430)
• (net) read a subtree through an origin mount (#4271)

Fixed

• (net) re-resolve a splice successor on every judgment
• (net) preserve cached history for late relay subscribers (#4472)
• (net) align IETF object extension limits (#4475)
• (net) cancel an unwanted lite track still waiting on TRACK_INFO (#4494)
• (net) skip announce updates the peer cannot tell apart (#4423)
• (net) an origin::Dynamic keeps its origin alive (#4417)
• (net) resolve a relayed subscription's start from its source (#4387)
• (moq-net) hide routes through a peer that withdrew the prefix (#4399)
• (net) forget spliced tracks unread for the linger, finished ones included (#4361)
• (net) select scoped routes after filtering, not before (#4363)
• (net) refuse chained and wildcard origin mounts in any order (#4362)
• (net) keep an aborted track's finished groups, expire ended tracks (#4378)
• (net) keep a settled track's groups when it is aborted (#4351)

Other

• (moq-net) watch mesh_withdraw's cursor from its own task (#4564)
• Merge pull request feat(net): a cluster publisher change updates the advertisement in place #4561 from moq-dev/quest/m1/cluster-publisher-in-place
• Merge pull request fix(net): preserve splice boundary and warm-head state #4484 from moq-dev/quest/m1/splice-edges
• Merge remote-tracking branch 'origin/main' into quest/m1/splice-edges
• (quest) drop suffix-based routing from the plans (#4382)

moq-json

0.5.6 - 2026-09-30

Fixed

• (net) keep an aborted track's finished groups, expire ended tracks (#4378)

Other

• (json) prove the Rust snapshot gate measures the encoded delta (#4462)

moq-mux

0.10.9 - 2026-09-30

Added

• (srt) select a program of a multi-program feed (#4569)
• (moq-mux) estimate the catalog framerate (#4576)
• (cli) linger export ts across a broadcast that leaves and returns (#4504)
• (ts) import one program of a multiplex, or each as its own broadcast (#4505)
• (srt) log the TS importer's per-stream counters on ingest (#4506)
• (mux) report every TS elementary stream's access units and quiet time (#4502)

Fixed

• (moq-mux) signal a new time base when the DTS reserve steps the PCR back (#4574)
• (mux) publish the 48 kHz decoder rate for Opus imports (#4443)
• (mux) follow the stream's reorder depth in TS export (#4500)
• (mux) rebind single-track FLV export to a better rendition before the header (#4445)
• (mux) LOC video groups end with the duration marker (#4450)

moq-sock

0.2.0 - 2026-09-30

Fixed

• (sock) resolve an ephemeral reuseport group's port with a plain bind (#4409)

moq-tokio

0.19.20 - 2026-09-30

Added

• (net) drain queued stream data before a graceful close (#4430)

Fixed

• (moq-net) a group awaiting its FIN ack still expires and follows priority (#4534)
• (tokio) drive raw stream handshakes per connection (#4474)
• (moq-tokio) iroh honors the configured versions (#4448)
• (tokio) keep a WebTransport session's H3 streams open while it closes (#4429)
• (tokio) drain a GOAWAY predecessor on Connection::close (#4436)
• (sock) resolve an ephemeral reuseport group's port with a plain bind (#4409)
• (tokio) handle IPv6 literals in TLS server names (#4322)
• (tokio) accept a bare IPv6 TLS host name override on WebSocket (#4405)

Other

• (tokio) isolate TLS root reload tests from shared /tmp (#4537)
• (tokio) match a worker group's full address when counting its sockets (#4404)
• prove stopped relays and worker groups closed their sockets instead of racing a rebind (#4408)

moq-audio

0.1.8 - 2026-09-30

Fixed

• (audio) conceal one Opus packet's length for a lost packet, not 120 ms (#4442)

Other

• compile the Windows, macOS, and OBS plugin code on every PR (#4370)

moq-video

0.1.8 - 2026-09-30

Fixed

• (video) list V4L2 cameras once with PipeWire (#4488)
• (video) guard portal sessions during negotiation (#4492)
• (video) re-anchor native capture above its last timestamp (#4418)

Other

• compile the Windows, macOS, and OBS plugin code on every PR (#4370)

libmoq

0.6.9 - 2026-09-30

Fixed

• (net) an origin::Dynamic keeps its origin alive (#4417)
• (libmoq) render moq.pc only when packaging (#4372)
• (libmoq) open extern "C" in the generated moq.h (#4350)

moq-auth

0.2.0 - 2026-09-30

Added

• (net) read a subtree through an origin mount (#4271)

Fixed

• (hls,auth) redact credentials from URLs in errors (#4536)
• (auth) make grant expiry exact, dropping the clock-skew grace (#4368)
• (auth) admit a SETUP token equal to the jwt query (#4359)
• (auth) [breaking] restore 0.14 auth parity (#4319)

Other

• (auth) run the outage tests on a paused clock without sockets (#4527)

moq-uring

0.0.10 - 2026-09-30

Fixed

• (uring) publish a local close only once its CONNECTION_CLOSE is staged (#4431)

Other

• (uring) noq paces inside poll_transmit, not ignored (#4400)

moq-boy

0.5.9 - 2026-09-30

Other

• update Cargo.lock dependencies

moq-hls

0.5.9 - 2026-09-30

Fixed

• (hls,auth) redact credentials from URLs in errors (#4536)

moq-relay

0.16.0 - 2026-09-30

Added

• (net) relays stamp an unknown publisher with a per-connection hop
• (net) read a subtree through an origin mount (#4271)

Fixed

• (relay) pass packaged service config positionally (#4469)
• (sock) resolve an ephemeral reuseport group's port with a plain bind (#4409)
• (auth) make grant expiry exact, dropping the clock-skew grace (#4368)
• (cli) refuse a client CA under --auth-public on a listener (#4364)
• (net) refuse chained and wildcard origin mounts in any order (#4362)
• (auth) [breaking] restore 0.14 auth parity (#4319)

Other

• one rpm repo command that works on DNF4 and DNF5 (#4567)
• Merge remote-tracking branch 'origin/main' into quest/m1/cluster-publisher-in-place
• prove stopped relays and worker groups closed their sockets instead of racing a rebind (#4408)

moq-rtc

0.3.9 - 2026-09-30

Fixed

• (rtc) redact WHIP and WHEP client URLs in logs (#4457)

moq-rtmp

0.3.9 - 2026-09-30

Added

• (rtmp) let an RTMP listener refuse plaintext (#4452)

Fixed

• (rtmp) bound AMF0 nesting (#4471)

moq-srt

0.3.9 - 2026-09-30

Added

• (srt) select a program of a multi-program feed (#4569)
• (srt) log the TS importer's per-stream counters on ingest (#4506)

moq-cli

0.13.0 - 2026-09-30

Added

• (srt) select a program of a multi-program feed (#4569)
• (cli) linger export ts across a broadcast that leaves and returns (#4504)
• (ts) import one program of a multiplex, or each as its own broadcast (#4505)
• (srt) log the TS importer's per-stream counters on ingest (#4506)
• (mux) report every TS elementary stream's access units and quiet time (#4502)
• (net) drain queued stream data before a graceful close (#4430)

Fixed

• (cli) refuse every MoQ-side flag a verb never reads (#4419)
• (cli) refuse a client CA under --auth-public on a listener (#4364)
• (cli) schedule play decode by the earliest owed picture (#4374)
• (auth) [breaking] restore 0.14 auth parity (#4319)

Other

• flush quiet audio in the documented ffmpeg MPEG-TS line (#4514)

moq-ffi

0.4.9 - 2026-09-30

Added

• (ffi) Python, Go, and Dart print MoqError's Rust message (#4433)

Fixed

• (net) an origin::Dynamic keeps its origin alive (#4417)

moq-gst

0.4.9 - 2026-09-30

Fixed

• (gst) recover from leading deltas and timestamp rewinds (#4480)
• (moq-gst) moqsrc waits for its session to end on stop (#4416)
• (gst) keep waiting for a keyframe after a header-only buffer (#4356)

Other

• one rpm repo command that works on DNF4 and DNF5 (#4567)

hang

0.21.9 - 2026-09-30

Other

• updated the following local packages: kio, moq-net, moq-json

moq-binary

0.1.8 - 2026-09-30

Other

• updated the following local packages: kio, moq-net

moq-loc

0.2.17 - 2026-09-30

Other

• updated the following local packages: moq-net

moq-archive

0.0.9 - 2026-09-30

Other

• updated the following local packages: moq-net

moq-stats

0.2.9 - 2026-09-30

Other

• updated the following local packages: moq-net, moq-json

moq-transcode

0.1.8 - 2026-09-30

Other

• updated the following local packages: kio, moq-net, moq-mux, moq-video, hang

moq-e2ee

0.0.9 - 2026-09-30

Other

• updated the following local packages: kio, moq-net

moq-room

0.2.9 - 2026-09-30

Other

• updated the following local packages: kio, moq-net, moq-json, moq-auth

---

This PR was generated with release-plz.

[kixelated]

RECONSIDER — do not merge this release-plz PR.

This looks like a broken second release-plz run right after #4256 merged (that real release landed at 23:04 UTC; this PR opened at 23:09 UTC).

Why this is not a positive improvement

• The PR body re-lists the same package bumps as chore: release #4256 (moq-pattern 0.1.0→0.1.1, moq-net 0.3.6→0.3.7, moq-tokio 0.19.18→0.19.19, etc.), but those versions are already on main.
• There are no Cargo.toml / Cargo.lock version bumps. A normal release PR here touches ~50+ files; this one only edits rs/moq-tokio/CHANGELOG.md (+15).
• That changelog change is harmful: it duplicates the entire ## [0.19.19] section and incorrectly inserts - release ([#4256]) under Other. Merging would leave two identical 0.19.19 headings.

Complexity / better approach

• Not worth any complexity — close the PR (or let release-plz supersede it).
• Prefer waiting for the next real release-plz bump after new commits land on main, rather than merging this noop/broken changelog rewrite.

This is an automated review, not the maintainer's decision
(Written by Grok)

[chatgpt-codex-connector]

💡 Codex Review

moq/rs/moq-tokio/CHANGELOG.md

Line 10 in 6f82585

## [0.19.19](https://github.com/moq-dev/moq/compare/moq-tokio-v0.19.18...moq-tokio-v0.19.19) - 2026-09-27

Remove the duplicate 0.19.19 release section

The parent release commit already contains the complete 0.19.19 section, including the same comparison URL and date. Adding it again makes the changelog list one published version twice with overlapping but different contents, so consumers cannot tell which notes belong to the actual release. Keep the existing section and add the release entry to it instead.

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

[kixelated]

Automated review by review (OpenAI)

Reviewed commit 36e10ec.

Direction: the coordinated release metadata update is appropriate. Prefer keeping unrelated dependency refreshes separate when practical, so release validation is attributable to a smaller change; the lockfile also advances iroh and other external packages.

No confirmed release-metadata defect in the refreshed diff. The old duplicate moq-tokio 0.19.19 concern is no longer present: this head adds a 0.19.20 section before the existing 0.19.19 section.

Verification: static diff and targeted source inspection. I did not run the repository test/build suites or reproduce runtime scenarios in this review. This is a COMMENT review, not a merge approval.