chore: release

[moq-bot]

🤖 New release

• moq-lite: 0.3.5 -> 0.4.0 (⚠ API breaking changes)
• hang: 0.4.1 -> 0.5.0 (⚠ API breaking changes)
• hang-cli: 0.1.9 -> 0.1.10
• moq-clock: 0.6.6 -> 0.6.7
• moq-token: 0.4.0 -> 0.5.0 (⚠ API breaking changes)
• moq-relay: 0.7.7 -> 0.7.8
• moq-token-cli: 0.1.5 -> 0.1.6
• moq-native: 0.7.3 -> 0.7.4

⚠ moq-lite breaking changes

--- failure enum_variant_added: enum variant added on exhaustive enum ---

Description:
A publicly-visible enum without #[non_exhaustive] has a new variant.
        ref: https://doc.rust-lang.org/cargo/reference/semver.html#enum-variant-new
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.41.0/src/lints/enum_variant_added.ron

Failed in:
  variant Error:Unauthorized in /tmp/.tmp7fMgP0/moq/rs/moq/src/error.rs:59

--- failure inherent_method_missing: pub method removed or renamed ---

Description:
A publicly-visible method or associated fn is no longer available under its prior name. It may have been renamed or removed entirely.
        ref: https://doc.rust-lang.org/cargo/reference/semver.html#item-remove
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.41.0/src/lints/inherent_method_missing.ron

Failed in:
  Session::publish, previously in file /tmp/.tmpHB791v/moq-lite/src/session/mod.rs:180
  Session::publish_prefix, previously in file /tmp/.tmpHB791v/moq-lite/src/session/mod.rs:185
  Session::publish_all, previously in file /tmp/.tmpHB791v/moq-lite/src/session/mod.rs:190
  Session::consume, previously in file /tmp/.tmpHB791v/moq-lite/src/session/mod.rs:197
  Session::consume_all, previously in file /tmp/.tmpHB791v/moq-lite/src/session/mod.rs:204
  Session::consume_prefix, previously in file /tmp/.tmpHB791v/moq-lite/src/session/mod.rs:211
  Session::consume_exact, previously in file /tmp/.tmpHB791v/moq-lite/src/session/mod.rs:221
  OriginProducer::publish_all, previously in file /tmp/.tmpHB791v/moq-lite/src/model/origin.rs:197
  OriginProducer::consume_exact, previously in file /tmp/.tmpHB791v/moq-lite/src/model/origin.rs:263

--- failure method_parameter_count_changed: pub method parameter count changed ---

Description:
A publicly-visible method now takes a different number of parameters.
        ref: https://doc.rust-lang.org/cargo/reference/semver.html#fn-change-arity
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.41.0/src/lints/method_parameter_count_changed.ron

Failed in:
  moq_lite::Session::connect now takes 3 parameters instead of 1, in /tmp/.tmp7fMgP0/moq/rs/moq/src/session/mod.rs:70
  moq_lite::Session::accept now takes 3 parameters instead of 1, in /tmp/.tmp7fMgP0/moq/rs/moq/src/session/mod.rs:100
  moq_lite::OriginProducer::new now takes 1 parameters instead of 0, in /tmp/.tmp7fMgP0/moq/rs/moq/src/model/origin.rs:169
  moq_lite::OriginProducer::publish_prefix now takes 2 parameters instead of 3, in /tmp/.tmp7fMgP0/moq/rs/moq/src/model/origin.rs:207

--- failure method_requires_different_generic_type_params: method now requires a different number of generic type parameters ---

Description:
A method now requires a different number of generic type parameters than it used to. Uses of this method that supplied the previous number of generic types will be broken.
        ref: https://doc.rust-lang.org/reference/items/generics.html
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.41.0/src/lints/method_requires_different_generic_type_params.ron

Failed in:
  moq_lite::Session::connect takes 3 generic types instead of 1, in /tmp/.tmp7fMgP0/moq/rs/moq/src/session/mod.rs:70
  moq_lite::Session::accept takes 3 generic types instead of 1, in /tmp/.tmp7fMgP0/moq/rs/moq/src/session/mod.rs:100
  moq_lite::OriginProducer::new takes 1 generic types instead of 0, in /tmp/.tmp7fMgP0/moq/rs/moq/src/model/origin.rs:169
  moq_lite::OriginProducer::publish takes 0 generic types instead of 1, in /tmp/.tmp7fMgP0/moq/rs/moq/src/model/origin.rs:186
  moq_lite::OriginProducer::consume_prefix takes 0 generic types instead of 1, in /tmp/.tmp7fMgP0/moq/rs/moq/src/model/origin.rs:231

⚠ hang breaking changes

--- failure method_parameter_count_changed: pub method parameter count changed ---

Description:
A publicly-visible method now takes a different number of parameters.
        ref: https://doc.rust-lang.org/cargo/reference/semver.html#fn-change-arity
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.41.0/src/lints/method_parameter_count_changed.ron

Failed in:
  hang::Room::new now takes 3 parameters instead of 2, in /tmp/.tmp7fMgP0/moq/rs/hang/src/model/room.rs:17

--- failure struct_pub_field_missing: pub struct's pub field removed or renamed ---

Description:
A publicly-visible struct has at least one public field that is no longer available under its prior name. It may have been renamed or removed entirely.
        ref: https://doc.rust-lang.org/cargo/reference/semver.html#item-remove
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.41.0/src/lints/struct_pub_field_missing.ron

Failed in:
  field path of struct Room, previously in file /tmp/.tmpHB791v/hang/src/model/room.rs:8

⚠ moq-token breaking changes

--- failure constructible_struct_adds_field: externally-constructible struct adds field ---

Description:
A pub struct constructible with a struct literal has a new pub field. Existing struct literals must be updated to include the new field.
        ref: https://doc.rust-lang.org/reference/expressions/struct-expr.html
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.41.0/src/lints/constructible_struct_adds_field.ron

Failed in:
  field Claims.root in /tmp/.tmp7fMgP0/moq/rs/moq-token/src/claims.rs:17

--- failure inherent_method_missing: pub method removed or renamed ---

Description:
A publicly-visible method or associated fn is no longer available under its prior name. It may have been renamed or removed entirely.
        ref: https://doc.rust-lang.org/cargo/reference/semver.html#item-remove
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.41.0/src/lints/inherent_method_missing.ron

Failed in:
  Key::verify, previously in file /tmp/.tmpHB791v/moq-token/src/key.rs:79
  Key::sign, previously in file /tmp/.tmpHB791v/moq-token/src/key.rs:107

--- failure struct_pub_field_missing: pub struct's pub field removed or renamed ---

Description:
A publicly-visible struct has at least one public field that is no longer available under its prior name. It may have been renamed or removed entirely.
        ref: https://doc.rust-lang.org/cargo/reference/semver.html#item-remove
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.41.0/src/lints/struct_pub_field_missing.ron

Failed in:
  field path of struct Claims, previously in file /tmp/.tmpHB791v/moq-token/src/claims.rs:19

Changelog

moq-lite

0.4.0 - 2025-07-19

Other

• Revamp connection URLs, broadcast paths, and origins (#472)

hang

0.5.0 - 2025-07-19

Other

• Revamp connection URLs, broadcast paths, and origins (#472)

hang-cli

0.1.10 - 2025-07-19

Other

• Revamp connection URLs, broadcast paths, and origins (#472)

moq-clock

0.6.7 - 2025-07-19

Other

• Revamp connection URLs, broadcast paths, and origins (#472)

moq-token

0.5.0 - 2025-07-19

Other

• Revamp connection URLs, broadcast paths, and origins (#472)
• Add a JS moq-token package. (#468)

moq-relay

0.7.8 - 2025-07-19

Other

• Revamp connection URLs, broadcast paths, and origins (#472)
• Fix hanging sessions for unauthorized connections (#470)

moq-token-cli

0.1.6 - 2025-07-19

Other

• Revamp connection URLs, broadcast paths, and origins (#472)

moq-native

0.7.4 - 2025-07-19

Other

• updated the following local packages: moq-lite

---

This PR was generated with release-plz.

[claude]

Claude finished @moq-bot[bot]'s task —— View job

---

Security & Bug Review

Reviewing this release PR for potential bugs and security issues.

Tasks:

• Examine changed files for suspicious modifications
• Verify version updates in Cargo.toml files
• Check changelog entries for accuracy
• Look for any security-related changes
• Review breaking changes alignment

Review Findings

✅ No Critical Security Issues or Bugs Found

This automated release PR appears to be properly generated by release-plz with standard version bumps and changelog updates. Analysis of the changes:

Version Updates:

• All version bumps follow semantic versioning correctly
• Breaking changes properly increment major version numbers
• Dependency updates between internal packages are consistent

Breaking Changes Review:

• moq-lite 0.3.5 → 0.4.0: API changes to Session methods and OriginProducer are documented
• hang 0.4.1 → 0.5.0: Room constructor parameter changes documented
• moq-token 0.4.0 → 0.5.0: Claims struct and Key method changes documented

Security Considerations:

• All changes are related to PR Revamp connection URLs, broadcast paths, and origins #472 "Revamp connection URLs, broadcast paths, and origins"
• No suspicious dependency additions or removals
• Breaking changes appear to be architectural improvements rather than security fixes
• No credentials or sensitive data exposed in changelog entries

Minor Observations:

• The breaking changes for authorization error handling (Error::Unauthorized) suggest improved security posture
• URL and path restructuring may improve security boundaries
• No indication of vulnerable dependency updates

Recommendation: ✅ Safe to merge - This is a standard automated release with proper semantic versioning and no security concerns.

[cursor]

Bug: Version Mismatch in `moq-clock` Package

The moq-clock package has a version mismatch: Cargo.toml shows version 0.7.0, but CHANGELOG.md indicates 0.6.7 for the same release. Cargo.toml should be 0.6.7 to align with the changelog and prevent release tooling issues.

rs/moq-clock/Cargo.toml#L7-L8

https://github.com/kixelated/moq/blob/aaec31b3480603aa169df888590036debf3e43f1/rs/moq-clock/Cargo.toml#L7-L8

rs/moq-clock/CHANGELOG.md#L8-L9

https://github.com/kixelated/moq/blob/aaec31b3480603aa169df888590036debf3e43f1/rs/moq-clock/CHANGELOG.md#L8-L9

Fix in Cursor • Fix in Web

---

Bug: Version Mismatch in `moq-relay` Documentation

The moq-relay package has a version mismatch: Cargo.toml was updated to 0.8.0, but the CHANGELOG.md entry for the same release is 0.7.8. This inconsistency impacts release tooling and documentation, as 0.7.8 appears to be the intended version.

rs/moq-relay/Cargo.toml#L7-L8

https://github.com/kixelated/moq/blob/aaec31b3480603aa169df888590036debf3e43f1/rs/moq-relay/Cargo.toml#L7-L8

rs/moq-relay/CHANGELOG.md#L8-L9

https://github.com/kixelated/moq/blob/aaec31b3480603aa169df888590036debf3e43f1/rs/moq-relay/CHANGELOG.md#L8-L9

Fix in Cursor • Fix in Web

---

Bug: Version Mismatch in `hang-cli` Documentation

Version mismatch in the hang-cli package: Cargo.toml specifies version 0.2.0, but CHANGELOG.md and the PR description indicate the intended version is 0.1.10. This inconsistency can cause user confusion and break tooling. Cargo.toml should be updated to 0.1.10 to match the changelog.

rs/hang-cli/Cargo.toml#L7-L8

https://github.com/kixelated/moq/blob/aaec31b3480603aa169df888590036debf3e43f1/rs/hang-cli/Cargo.toml#L7-L8

rs/hang-cli/CHANGELOG.md#L9-L10

https://github.com/kixelated/moq/blob/aaec31b3480603aa169df888590036debf3e43f1/rs/hang-cli/CHANGELOG.md#L9-L10

rs/moq-token-cli/Cargo.toml#L7-L8

https://github.com/kixelated/moq/blob/aaec31b3480603aa169df888590036debf3e43f1/rs/moq-token-cli/Cargo.toml#L7-L8

Fix in Cursor • Fix in Web

---

Bug: Version Mismatch in `moq-token-cli` Documentation

The moq-token-cli package has a version mismatch: its Cargo.toml was updated to 0.2.0, but the CHANGELOG.md entry for the same release is 0.1.6. The intended version bump was 0.1.5 to 0.1.6, so Cargo.toml should be 0.1.6.

rs/moq-token-cli/Cargo.toml#L7-L8

https://github.com/kixelated/moq/blob/aaec31b3480603aa169df888590036debf3e43f1/rs/moq-token-cli/Cargo.toml#L7-L8

rs/moq-token-cli/CHANGELOG.md#L9-L10

https://github.com/kixelated/moq/blob/aaec31b3480603aa169df888590036debf3e43f1/rs/moq-token-cli/CHANGELOG.md#L9-L10

Fix in Cursor • Fix in Web

---

BugBot free trial expires on July 22, 2025
Learn more in the Cursor dashboard.

Was this report helpful? Give feedback by reacting with 👍 or 👎