⬆️(dependencies) update GitHub Actions dependencies

.github/workflows/ci.yml

@@ -87,7 +87,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
 
@@ -117,11 +117,11 @@ jobs:
           timeout 30 sh -c 'until docker exec garage /garage health; do sleep 1; done'
 
       - name: Install Python
-        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
+        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
         with:
-          python-version: "3.13"
+          python-version: "3.14"
       - name: Install uv
-        uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
+        uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
       - name: Install the dependencies
         run: uv sync --locked --all-extras
 
@@ -160,7 +160,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
 
@@ -170,12 +170,12 @@ jobs:
           sudo apt-get install -y ffmpeg
 
       - name: Install Python
-        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
+        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
         with:
-          python-version: "3.13"
+          python-version: "3.14"
 
       - name: Install uv
-        uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
+        uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
 
       - name: Install the project
         run: uv sync --locked --all-extras
@@ -189,7 +189,7 @@ jobs:
       contents: read
     steps:
       - name: Checkout repository
-        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
 
@@ -208,12 +208,12 @@ jobs:
       contents: read
     steps:
       - name: Checkout repository
-        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
 
       - name: Install Node.js
-        uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6.5.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: "24"
 
@@ -232,7 +232,7 @@ jobs:
         working-directory: src/sdk/library
     steps:
       - name: Checkout repository
-        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
 
@@ -255,7 +255,7 @@ jobs:
         working-directory: src/sdk/library
     steps:
       - name: Checkout repository
-        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
 

CHANGELOG.md

@@ -10,13 +10,6 @@ and this project adheres to
 
 ### Added
 
-- ⚡️(backend) add UPPER(email) index for case-insensitive user lookups
-- 🔒️(backend) throttle the start recording endpoint
-
-## [1.35.0] - 2026-10-13
-
-### Added
-
 - ✨(frontend) let users pick the recording encoding
 - ✨(backend) introduce a token exchange endpoint for iframe embeds
 - ⚡️(backend) send recording notification emails from a Celery task

compose.yml

@@ -5,17 +5,17 @@ services:
     env_file:
       - env.d/development/postgresql
     ports:
-      - "127.0.0.1:15432:5432"
+      - "15432:5432"
 
   redis:
     image: redis:5
     ports:
-      - "127.0.0.1:6379:6379"
+      - "6379:6379"
 
   mailcatcher:
     image: sj26/mailcatcher:latest
     ports:
-      - "127.0.0.1:1081:1080"
+      - "1081:1080"
 
   garage:
     user: ${DOCKER_USER:-1000}
@@ -71,7 +71,7 @@ services:
       - env.d/development/common
       - env.d/development/postgresql
     ports:
-      - "127.0.0.1:8071:8000"
+      - "8071:8000"
     volumes:
       - ./src/backend:/app
       - ./data/static:/data/static
@@ -137,7 +137,7 @@ services:
   nginx:
     image: nginx:1.25
     ports:
-      - "127.0.0.1:8083:8083"
+      - "8083:8083"
     volumes:
       - ./docker/files/etc/nginx/conf.d:/etc/nginx/conf.d:ro
     depends_on:
@@ -159,7 +159,7 @@ services:
         VITE_APP_TITLE: "LaSuite Meet"
     image: meet:frontend-development
     ports:
-      - "127.0.0.1:3000:8080"
+      - "3000:8080"
 
   dockerize:
     image: jwilder/dockerize
@@ -185,7 +185,7 @@ services:
   kc_postgresql:
     image: postgres:14.3
     ports:
-      - "127.0.0.1:5433:5432"
+      - "5433:5432"
     env_file:
       - env.d/development/kc_postgresql
 
@@ -213,7 +213,7 @@ services:
       KC_DB_SCHEMA: public
       PROXY_ADDRESS_FORWARDING: 'true'
     ports:
-      - "127.0.0.1:8080:8080"
+      - "8080:8080"
     depends_on:
       - kc_postgresql
 
@@ -222,10 +222,10 @@ services:
     entrypoint: /livekit-server --dev --bind 0.0.0.0 --config ./config.yaml
     ports:
       - "7880:7880"
-      - "127.0.0.1:7881:7881"
-      - "127.0.0.1:7882:7882/udp"
-      - "127.0.0.1:3478:3478/udp"
-      - "127.0.0.1:30000-30100:30000-30100/udp"
+      - "7881:7881"
+      - "7882:7882/udp"
+      - "3478:3478/udp"
+      - "30000-30100:30000-30100/udp"
     volumes:
       - ./docker/livekit/config/livekit-server.yaml:/config.yaml
     depends_on:
@@ -283,7 +283,7 @@ services:
     env_file:
       - env.d/development/summary
     ports:
-      - "127.0.0.1:8001:8000"
+      - "8001:8000"
     volumes:
       - ./src/summary:/app
     depends_on:

docker/compose.d/compose.bureautix.yml

@@ -45,4 +45,4 @@ services:
   # The local proxy listens on 8080 and collides with Keycloak's published admin port.
   keycloak:
     ports: !override
-      - "127.0.0.1:8081:8080"
+      - "8081:8080"

docs/installation/kubernetes.md

@@ -335,8 +335,6 @@ These are the environmental options available on meet backend.
 | SESSION_COOKIE_AGE                              | Session cookie expiration in seconds                                                                                                                         | 43200 (12 hours)                                                                                                                                             |
 | ROOM_CREATION_THROTTLE_RATES                    | Room creation throttle rate per authenticated user | 50/minute                                                                                               | 50/minute                                                                                                                                                    |
 | ROOM_CREATION_DAILY_THROTTLE_RATES              | Daily room creation cap per authenticated user                                                                                                               | 1000/day                                                                                                                                                     |
-| START_RECORDING_THROTTLE_RATES                  | Recording start throttle rate per authenticated user                                                                                                         | 10/minute                                                                                                                                                    |
-| START_RECORDING_DAILY_THROTTLE_RATES            | Daily recording start cap per authenticated user                                                                                                             | 100/day                                                                                                                                                      |
 | REQUEST_ENTRY_THROTTLE_RATES                    | Entry request throttle rates                                                                                                                                 | 150/minute                                                                                                                                                   |
 | CREATION_CALLBACK_THROTTLE_RATES                | Creation callback throttle rates                                                                                                                             | 600/minute                                                                                                                                                   |
 | SPECTACULAR_SETTINGS_ENABLE_DJANGO_DEPLOY_CHECK | Enable Django deploy check                                                                                                                                   | false                                                                                                                                                        |

src/agents/pyproject.toml

@@ -1,7 +1,7 @@
 
 [project]
 name = "agents"
-version = "1.35.0"
+version = "1.34.0"
 requires-python = ">=3.12"
 dependencies = [
     "livekit-agents==1.7.0",

src/agents/uv.lock

@@ -9,7 +9,7 @@ resolution-markers = [
 
 [[package]]
 name = "agents"
-version = "1.35.0"
+version = "1.34.0"
 source = { virtual = "." }
 dependencies = [
     { name = "boto3" },

src/backend/core/api/throttling.py

@@ -47,18 +47,6 @@ class RoomCreationDailyUserRateThrottle(RoomCreationUserRateThrottle):
     scope = "room_creation_daily"
 
 
-class StartRecordingUserRateThrottle(MonitoredUserRateThrottle):
-    """Throttle recording starts per authenticated user."""
-
-    scope = "start_recording"
-
-
-class StartRecordingDailyUserRateThrottle(StartRecordingUserRateThrottle):
-    """Cap recording starts per authenticated user over a day."""
-
-    scope = "start_recording_daily"
-
-
 class RequestEntryAuthenticatedUserRateThrottle(MonitoredUserRateThrottle):
     """Throttle authenticated user requesting room entry"""
 

src/backend/core/api/viewsets.py

@@ -406,10 +406,6 @@ class RoomViewSet(
         permission_classes=[
             permissions.HasPrivilegesOnRoom,
         ],
-        throttle_classes=[
-            throttling.StartRecordingUserRateThrottle,
-            throttling.StartRecordingDailyUserRateThrottle,
-        ],
     )
     @FeatureFlag.require("recording")
     def start_room_recording(self, request, pk=None):  # pylint: disable=unused-argument

src/backend/core/migrations/0027_user_email_upper_idx.py

@@ -1,23 +0,0 @@
-# Generated by Django 5.2.14 on 2026-10-07 18:45
-
-from django.contrib.postgres.operations import AddIndexConcurrently
-from django.db import migrations, models
-from django.db.models.functions import Upper
-
-
-class Migration(migrations.Migration):
-    atomic = False
-
-    dependencies = [
-        ('core', '0026_alter_application_scopes'),
-    ]
-
-    operations = [
-        AddIndexConcurrently(
-            model_name="user",
-            index=models.Index(
-                Upper("email"),
-                name="user_email_upper_idx",
-            ),
-        ),
-    ]

src/backend/core/models.py

@@ -246,9 +246,6 @@ class User(AbstractBaseUser, BaseModel, auth_models.PermissionsMixin):
                 name="unique_email_when_sub_is_null",
             )
         ]
-        indexes = [
-            models.Index(models.functions.Upper("email"), name="user_email_upper_idx"),
-        ]
 
     def __str__(self):
         return self.email or self.admin_email or str(self.id)

src/backend/core/tests/rooms/test_api_rooms_start_recording_throttling.py

@@ -1,212 +0,0 @@
-"""
-Test rooms API endpoints in the Meet core app: start recording throttling.
-"""
-
-# pylint: disable=redefined-outer-name,unused-argument
-
-from unittest import mock
-
-import pytest
-from rest_framework.test import APIClient
-
-from ...api.throttling import (
-    StartRecordingDailyUserRateThrottle,
-    StartRecordingUserRateThrottle,
-)
-from ...factories import RoomFactory, UserFactory
-from ...models import Recording
-
-pytestmark = pytest.mark.django_db
-
-
-@pytest.fixture
-def start_recording_throttle(monkeypatch):
-    """Lower the start recording rates."""
-    rates = StartRecordingUserRateThrottle.THROTTLE_RATES
-    monkeypatch.setitem(rates, "start_recording", "2/minute")
-    monkeypatch.setitem(rates, "start_recording_daily", "100/day")
-
-
-@pytest.fixture
-def daily_start_recording_throttle(monkeypatch):
-    """Lower the daily start recording rate and control the clock."""
-    rates = StartRecordingDailyUserRateThrottle.THROTTLE_RATES
-    monkeypatch.setitem(rates, "start_recording", "100/minute")
-    monkeypatch.setitem(rates, "start_recording_daily", "3/day")
-    now = [1_000_000.0]
-    monkeypatch.setattr(StartRecordingUserRateThrottle, "timer", lambda self: now[0])
-    return now
-
-
-@mock.patch("core.api.viewsets.WorkerServiceMediator")
-@mock.patch("core.api.viewsets.get_worker_service")
-def test_start_recording_throttled(
-    mock_get_worker_service, mock_mediator_class, start_recording_throttle, settings
-):
-    """Starting a recording should return 429 when exceeding the per-minute rate."""
-    settings.RECORDING_ENABLE = True
-    user = UserFactory()
-    client = APIClient()
-    client.force_login(user)
-
-    for _ in range(2):
-        room = RoomFactory(users=[(user, "owner")])
-        response = client.post(
-            f"/api/v1.0/rooms/{room.id}/start-recording/",
-            {"mode": "screen_recording"},
-        )
-        assert response.status_code == 201
-
-    room = RoomFactory(users=[(user, "owner")])
-    response = client.post(
-        f"/api/v1.0/rooms/{room.id}/start-recording/",
-        {"mode": "screen_recording"},
-    )
-
-    assert response.status_code == 429
-    assert 0 < int(response["Retry-After"]) <= 60
-    assert Recording.objects.count() == 2
-    assert mock_mediator_class.return_value.start.call_count == 2
-
-
-@mock.patch("core.api.viewsets.WorkerServiceMediator")
-@mock.patch("core.api.viewsets.get_worker_service")
-def test_start_recording_throttle_counts_failed_attempts(
-    mock_get_worker_service, mock_mediator_class, start_recording_throttle, settings
-):
-    """Failed recording starts should count toward the rate."""
-    settings.RECORDING_ENABLE = True
-    user = UserFactory()
-    room = RoomFactory(users=[(user, "owner")])
-    Recording.objects.create(room=room, mode="screen_recording", status="active")
-    client = APIClient()
-    client.force_login(user)
-
-    for _ in range(2):
-        response = client.post(
-            f"/api/v1.0/rooms/{room.id}/start-recording/",
-            {"mode": "screen_recording"},
-        )
-        assert response.status_code == 409
-
-    response = client.post(
-        f"/api/v1.0/rooms/{room.id}/start-recording/",
-        {"mode": "screen_recording"},
-    )
-
-    assert response.status_code == 429
-
-
-@mock.patch("core.api.viewsets.WorkerServiceMediator")
-@mock.patch("core.api.viewsets.get_worker_service")
-def test_start_recording_throttle_per_user(
-    mock_get_worker_service, mock_mediator_class, start_recording_throttle, settings
-):
-    """Starting a recording should succeed when another user is throttled."""
-    settings.RECORDING_ENABLE = True
-    client = APIClient()
-
-    user = UserFactory()
-    client.force_login(user)
-    for _ in range(2):
-        room = RoomFactory(users=[(user, "owner")])
-        response = client.post(
-            f"/api/v1.0/rooms/{room.id}/start-recording/",
-            {"mode": "screen_recording"},
-        )
-        assert response.status_code == 201
-
-    room = RoomFactory(users=[(user, "owner")])
-    response = client.post(
-        f"/api/v1.0/rooms/{room.id}/start-recording/",
-        {"mode": "screen_recording"},
-    )
-    assert response.status_code == 429
-
-    other_user = UserFactory()
-    client.force_login(other_user)
-    room = RoomFactory(users=[(other_user, "owner")])
-    response = client.post(
-        f"/api/v1.0/rooms/{room.id}/start-recording/",
-        {"mode": "screen_recording"},
-    )
-
-    assert response.status_code == 201
-
-
-@mock.patch("core.api.viewsets.WorkerServiceMediator")
-@mock.patch("core.api.viewsets.get_worker_service")
-def test_start_recording_throttle_does_not_limit_other_actions(
-    mock_get_worker_service, mock_mediator_class, start_recording_throttle, settings
-):
-    """Other room actions should succeed when starting a recording is throttled."""
-    settings.RECORDING_ENABLE = True
-    user = UserFactory()
-    client = APIClient()
-    client.force_login(user)
-
-    rooms = RoomFactory.create_batch(3, users=[(user, "owner")])
-    for room in rooms[:2]:
-        response = client.post(
-            f"/api/v1.0/rooms/{room.id}/start-recording/",
-            {"mode": "screen_recording"},
-        )
-        assert response.status_code == 201
-
-    response = client.post(
-        f"/api/v1.0/rooms/{rooms[2].id}/start-recording/",
-        {"mode": "screen_recording"},
-    )
-    assert response.status_code == 429
-
-    Recording.objects.filter(room=rooms[0]).update(status="active")
-    response = client.post(f"/api/v1.0/rooms/{rooms[0].id}/stop-recording/")
-    assert response.status_code == 200
-
-    response = client.get("/api/v1.0/rooms/")
-    assert response.status_code == 200
-
-    response = client.post("/api/v1.0/rooms/", {"name": "New room"})
-    assert response.status_code == 201
-
-
-@mock.patch("core.api.viewsets.WorkerServiceMediator")
-@mock.patch("core.api.viewsets.get_worker_service")
-def test_start_recording_daily_throttled(
-    mock_get_worker_service,
-    mock_mediator_class,
-    daily_start_recording_throttle,
-    settings,
-):
-    """Starting a recording should return 429 when exceeding the daily rate."""
-    settings.RECORDING_ENABLE = True
-    now = daily_start_recording_throttle
-    user = UserFactory()
-    client = APIClient()
-    client.force_login(user)
-
-    for _ in range(3):
-        room = RoomFactory(users=[(user, "owner")])
-        response = client.post(
-            f"/api/v1.0/rooms/{room.id}/start-recording/",
-            {"mode": "screen_recording"},
-        )
-        assert response.status_code == 201
-        now[0] += 120
-
-    room = RoomFactory(users=[(user, "owner")])
-    response = client.post(
-        f"/api/v1.0/rooms/{room.id}/start-recording/",
-        {"mode": "screen_recording"},
-    )
-    assert response.status_code == 429
-    assert 60 < int(response["Retry-After"]) <= 86400
-
-    now[0] += 86400
-    room = RoomFactory(users=[(user, "owner")])
-    response = client.post(
-        f"/api/v1.0/rooms/{room.id}/start-recording/",
-        {"mode": "screen_recording"},
-    )
-
-    assert response.status_code == 201

src/backend/meet/settings.py

@@ -395,16 +395,6 @@ class Base(Configuration):
                 environ_name="ROOM_CREATION_DAILY_THROTTLE_RATES",
                 environ_prefix=None,
             ),
-            "start_recording": values.Value(
-                default="10/minute",
-                environ_name="START_RECORDING_THROTTLE_RATES",
-                environ_prefix=None,
-            ),
-            "start_recording_daily": values.Value(
-                default="100/day",
-                environ_name="START_RECORDING_DAILY_THROTTLE_RATES",
-                environ_prefix=None,
-            ),
             "request_entry": values.Value(
                 default="150/minute",
                 environ_name="REQUEST_ENTRY_THROTTLE_RATES",

src/backend/pyproject.toml

@@ -7,7 +7,7 @@ build-backend = "uv_build"
 
 [project]
 name = "meet"
-version = "1.35.0"
+version = "1.34.0"
 authors = [{ "name" = "DINUM", "email" = "dev@mail.numerique.gouv.fr" }]
 classifiers = [
     "Development Status :: 5 - Production/Stable",

src/backend/uv.lock

@@ -1297,7 +1297,7 @@ wheels = [
 
 [[package]]
 name = "meet"
-version = "1.35.0"
+version = "1.34.0"
 source = { editable = "." }
 dependencies = [
     { name = "aiohttp" },

src/frontend/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "meet",
-  "version": "1.35.0",
+  "version": "1.34.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "meet",
-      "version": "1.35.0",
+      "version": "1.34.0",
       "dependencies": {
         "@fontsource-variable/atkinson-hyperlegible-next": "5.3.0",
         "@fontsource-variable/lexend": "5.3.0",

src/frontend/package.json

@@ -1,7 +1,7 @@
 {
   "name": "meet",
   "private": true,
-  "version": "1.35.0",
+  "version": "1.34.0",
   "type": "module",
   "scripts": {
     "dev": "panda codegen && vite",

src/mail/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "mail_mjml",
-  "version": "1.35.0",
+  "version": "1.34.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "mail_mjml",
-      "version": "1.35.0",
+      "version": "1.34.0",
       "license": "MIT",
       "dependencies": {
         "@html-to/text-cli": "0.6.1",

src/mail/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mail_mjml",
-  "version": "1.35.0",
+  "version": "1.34.0",
   "description": "An util to generate html and text django's templates from mjml templates",
   "type": "module",
   "dependencies": {

src/sdk/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "sdk",
-  "version": "1.35.0",
+  "version": "1.34.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "sdk",
-      "version": "1.35.0",
+      "version": "1.34.0",
       "license": "ISC",
       "workspaces": [
         "./library",

src/sdk/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sdk",
-  "version": "1.35.0",
+  "version": "1.34.0",
   "author": "",
   "license": "ISC",
   "description": "",

src/summary/pyproject.toml

@@ -1,7 +1,7 @@
 
 [project]
 name = "summary"
-version = "1.35.0"
+version = "1.34.0"
 requires-python = ">=3.13"
 dependencies = [
     "fastapi[standard]>=0.105.0",

src/summary/uv.lock

@@ -1484,7 +1484,7 @@ wheels = [
 
 [[package]]
 name = "summary"
-version = "1.35.0"
+version = "1.34.0"
 source = { editable = "." }
 dependencies = [
     { name = "boto3" },