No more dependency on https://github.com/digitalocean/prometheus-client-c for prometheus metrics! Prometheus library has been rewritten from scratch for the use of coturn. Functionality still depends on libmicrohttpd. Prometheus support is now compiled in if libmicrohttpd is available. Still needs to be enabled to function.
HTTPS support for prometheus client (optional)
TLS support for redis - now compatible with managed redis (optional)
Rate limiting "401 Unauthorized" responses - reduces reflection attacks off the coturn server. This is an experimental feature - not fully tested on production scale deployment and massive DDoS attacks. New prometheus counters should help shed some light on real life behavior and performance. The feature is off by default.

What's Changed

validate hmackey length in sqlite_get_user_key before hex decode by @alhudz in #1948
Add out-of-tree patch to restore deprecated OpenSSL 1.1.1 support by @eakraly in #1952
Add optional TLS transport for Redis connections by @eakraly in #1951
Fix relay threads override by @eakraly in #1953
Flush prometheus hot-path counters once per second to kill lock contention by @eakraly in #1954
fix signed-char index out-of-bounds read in base64_decode by @alhudz in #1950
Build Prometheus exporter from vendored local sources by @eakraly in #1955
Prom https by @eakraly in #1956
Fix realm quota data race and warnings by @eakraly in #1958
Add per-source rate-limiting of UDP 401 Unauthorized responses by @eakraly in #1957

Full Changelog: https://github.com/coturn/coturn/compare/4.13.1...4.14.0

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [coturn/coturn](https://github.com/coturn/coturn) | minor | `4.13.1` → `4.14.0` | --- > ⚠️ **Warning** > > Some dependencies could not be looked up. Check the warning logs for more information. --- ### Release Notes <details> <summary>coturn/coturn (coturn/coturn)</summary> ### [`v4.14.0`](https://github.com/coturn/coturn/releases/tag/4.14.0) [Compare Source](https://github.com/coturn/coturn/compare/4.13.1...4.14.0) #### New - No more dependency on <https://github.com/digitalocean/prometheus-client-c> for prometheus metrics! Prometheus library has been rewritten from scratch for the use of coturn. Functionality still depends on libmicrohttpd. Prometheus support is now compiled in if libmicrohttpd is available. Still needs to be enabled to function. - HTTPS support for prometheus client (optional) - TLS support for redis - now compatible with managed redis (optional) - Rate limiting "401 Unauthorized" responses - reduces reflection attacks off the coturn server. This is an experimental feature - not fully tested on production scale deployment and massive DDoS attacks. New prometheus counters should help shed some light on real life behavior and performance. The feature is off by default. #### What's Changed - validate hmackey length in sqlite\_get\_user\_key before hex decode by [@alhudz](https://github.com/alhudz) in [#1948](https://github.com/coturn/coturn/pull/1948) - Add out-of-tree patch to restore deprecated OpenSSL 1.1.1 support by [@eakraly](https://github.com/eakraly) in [#1952](https://github.com/coturn/coturn/pull/1952) - Add optional TLS transport for Redis connections by [@eakraly](https://github.com/eakraly) in [#1951](https://github.com/coturn/coturn/pull/1951) - Fix relay threads override by [@eakraly](https://github.com/eakraly) in [#1953](https://github.com/coturn/coturn/pull/1953) - Flush prometheus hot-path counters once per second to kill lock contention by [@eakraly](https://github.com/eakraly) in [#1954](https://github.com/coturn/coturn/pull/1954) - fix signed-char index out-of-bounds read in base64\_decode by [@alhudz](https://github.com/alhudz) in [#1950](https://github.com/coturn/coturn/pull/1950) - Build Prometheus exporter from vendored local sources by [@eakraly](https://github.com/eakraly) in [#1955](https://github.com/coturn/coturn/pull/1955) - Prom https by [@eakraly](https://github.com/eakraly) in [#1956](https://github.com/coturn/coturn/pull/1956) - Fix realm quota data race and warnings by [@eakraly](https://github.com/eakraly) in [#1958](https://github.com/coturn/coturn/pull/1958) - Add per-source rate-limiting of UDP 401 Unauthorized responses by [@eakraly](https://github.com/eakraly) in [#1957](https://github.com/coturn/coturn/pull/1957) **Full Changelog**: <https://github.com/coturn/coturn/compare/4.13.1...4.14.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).

jessebot (Migrated from git.smallhack.org) approved these changes

2026-06-24 10:43:28 +00:00