chore(deps): update rust crate librtmp2 to v0.8.1 - abandoned

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
librtmp2	dependencies	patch	0.8.0 → 0.8.1

---

Release Notes

OpenRTMP/librtmp2 (librtmp2)

v0.8.1

Compare Source

Security

• Capped multitrack/aggregate media fan-out against the per-poll message
  budget on both sides: the client no longer lets aggregate/multitrack
  messages dispatch past MAX_MESSAGES_PER_POLL, and the server decrements
  the budget per multitrack sub-track; pending_cache_evictions is now
  capped and publish renames are rejected once the limit is reached.
• max_connections_reached() now counts pending RTMPS handshakes together
  with active connections, closing a bypass where an attacker could fill
  the configured max_connections cap with stalled TLS handshakes and then
  open additional plaintext sessions up to roughly double the intended
  limit.
• Play/teardown sessions no longer refresh the setup-timeout window on
  teardown or createStream unless media actually flowed (sent, received,
  or injected), closing a way to squat a stream slot indefinitely across
  repeated teardown/createStream cycles.
• Multitrack on_media_cb authorization now charges the per-recv message
  budget for sub-tracks after the first and rejects over-budget containers
  with Protocol, restricted to connections that actually register an
  on_media_cb callback (the frame-callback path enforces its own budget
  separately).
• Aggregate message sub-tags — including unknown sub-tag types — now count
  individually against the per-recv message budget, and zero-length
  sub-tags are rejected, closing a CPU-amplification gap left by the
  aggregate budgeting added in 0.8.0.

Fixed

• Script/metadata tags are sent as AMF0 data instead of an AMF0 command,
  chunk reassembly keeps draining a message when a fragment is already
  buffered instead of stalling, E-RTMP audio FourCCs are mapped instead of
  dropped, and AMF decoding rewinds correctly after a failed
  connect-capabilities read instead of skipping the type byte twice.

Changed

• Reduced branching complexity in media-frame handling across
  session/conn.rs, the client, and the server module (internal refactor,
  no behavior change).

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: 3ae4ba37-72ee-4c71-9909-06d0df4fc182

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[renovate]

Autoclosing Skipped

This PR has been flagged for autoclosing. However, it is being skipped due to the branch being already modified. Please close/delete it manually or report a bug if you think this is in error.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud