🔖(minor) bump release to 0.1.26

Add noise reduction with RNNoise.
New feature needs to be battle tested,
it's protected with a feature flag.

.github/workflows/meet.yml

@@ -81,7 +81,7 @@ jobs:
       - name: Install Python
         uses: actions/setup-python@v5
         with:
-          python-version: "3.12"
+          python-version: "3.13"
       - name: Install development dependencies
         run: pip install --user .[dev]
       - name: Check code formatting with ruff
@@ -185,7 +185,7 @@ jobs:
       - name: Install Python
         uses: actions/setup-python@v5
         with:
-          python-version: "3.12"
+          python-version: "3.13"
 
       - name: Install development dependencies
         run: pip install --user .[dev]

Dockerfile

@@ -1,7 +1,7 @@
 # Django Meet
 
 # ---- base image to inherit from ----
-FROM python:3.12.6-alpine3.20 AS base
+FROM python:3.13.5-alpine3.21 AS base
 
 # Upgrade pip to its latest release to speed up dependencies installation
 RUN python -m pip install --upgrade pip setuptools

renovate.json

@@ -7,7 +7,7 @@
       "enabled": false,
       "groupName": "ignored python dependencies",
       "matchManagers": ["pep621"],
-      "matchPackageNames": []
+      "matchPackageNames": ["redis"]
     },
     {
       "enabled": false,

src/backend/core/api/permissions.py

@@ -64,7 +64,7 @@ class RoomPermissions(permissions.BasePermission):
         if request.method == "DELETE":
             return obj.is_owner(user)
 
-        return obj.is_administrator(user)
+        return obj.is_administrator_or_owner(user)
 
 
 class ResourceAccessPermission(IsAuthenticated):
@@ -80,7 +80,7 @@ class ResourceAccessPermission(IsAuthenticated):
         if request.method == "DELETE" and obj.role == RoleChoices.OWNER:
             return obj.user == user
 
-        return obj.resource.is_administrator(user)
+        return obj.resource.is_administrator_or_owner(user)
 
 
 class HasAbilityPermission(IsAuthenticated):
@@ -98,7 +98,7 @@ class HasPrivilegesOnRoom(IsAuthenticated):
 
     def has_object_permission(self, request, view, obj):
         """Determine if user has privileges on room."""
-        return obj.is_owner(request.user) or obj.is_administrator(request.user)
+        return obj.is_administrator_or_owner(request.user)
 
 
 class IsRecordingEnabled(permissions.BasePermission):

src/backend/core/api/serializers.py

@@ -1,5 +1,7 @@
 """Client serializers for the Meet core app."""
 
+import uuid
+
 from django.utils.translation import gettext_lazy as _
 
 from rest_framework import serializers
@@ -58,7 +60,9 @@ class ResourceAccessSerializerMixin:
         request = self.context.get("request", None)
         user = getattr(request, "user", None)
 
-        if not (user and user.is_authenticated and resource.is_administrator(user)):
+        if not (
+            user and user.is_authenticated and resource.is_administrator_or_owner(user)
+        ):
             raise PermissionDenied(
                 _("You must be administrator or owner of a room to add accesses to it.")
             )
@@ -118,9 +122,11 @@ class RoomSerializer(serializers.ModelSerializer):
             return output
 
         role = instance.get_role(request.user)
-        is_admin = models.RoleChoices.check_administrator_role(role)
+        is_admin_or_owner = models.RoleChoices.check_administrator_role(
+            role
+        ) or models.RoleChoices.check_owner_role(role)
 
-        if is_admin:
+        if is_admin_or_owner:
             access_serializer = NestedResourceAccessSerializer(
                 instance.accesses.select_related("resource", "user").all(),
                 context=self.context,
@@ -128,7 +134,7 @@ class RoomSerializer(serializers.ModelSerializer):
             )
             output["accesses"] = access_serializer.data
 
-        if not is_admin:
+        if not is_admin_or_owner:
             del output["configuration"]
 
         should_access_room = (
@@ -147,7 +153,7 @@ class RoomSerializer(serializers.ModelSerializer):
                 room_id=room_id, user=request.user, username=username
             )
 
-        output["is_administrable"] = is_admin
+        output["is_administrable"] = is_admin_or_owner
 
         return output
 
@@ -215,6 +221,14 @@ class ParticipantEntrySerializer(serializers.Serializer):
     participant_id = serializers.CharField(required=True)
     allow_entry = serializers.BooleanField(required=True)
 
+    def validate_participant_id(self, value):
+        """Validate that the participant_id is a valid UUID hex string."""
+        try:
+            uuid.UUID(hex=value, version=4)
+        except (ValueError, TypeError) as e:
+            raise serializers.ValidationError("Invalid UUID hex format") from e
+        return value
+
     def create(self, validated_data):
         """Not implemented as this is a validation-only serializer."""
         raise NotImplementedError("ParticipantEntrySerializer is validation-only")

src/backend/core/factories.py

@@ -1,4 +1,3 @@
-# ruff: noqa: S311
 """
 Core application factories
 """

src/backend/core/models.py

@@ -35,7 +35,7 @@ class RoleChoices(models.TextChoices):
     @classmethod
     def check_administrator_role(cls, role):
         """Check if a role is administrator."""
-        return role in [cls.ADMIN, cls.OWNER]
+        return role == cls.ADMIN
 
     @classmethod
     def check_owner_role(cls, role):
@@ -288,13 +288,13 @@ class Resource(BaseModel):
                 role = RoleChoices.MEMBER
         return role
 
-    def is_administrator(self, user):
+    def is_administrator_or_owner(self, user):
         """
-        Check if a user is administrator of the resource.
-
-        Users carrying the "owner" role are considered as administrators a fortiori.
-        """
-        return RoleChoices.check_administrator_role(self.get_role(user))
+        Check if a user is administrator or owner of the resource."""
+        role = self.get_role(user)
+        return RoleChoices.check_administrator_role(
+            role
+        ) or RoleChoices.check_owner_role(role)
 
     def is_owner(self, user):
         """Check if a user is owner of the resource."""

src/backend/core/tests/authentication/test_backends.py

@@ -287,9 +287,7 @@ def test_finds_user_whitespace_email(django_assert_num_queries, settings):
     [
         "john.doe@ｅxample.com",  # Fullwidth character in domain
         "john.doe@еxample.com",  # Cyrillic 'е' in domain
-        "JOHN.DOe@exam𝔭le.com",  # Mixed Gothic '𝔭' in domain
         "john.doe@exаmple.com",  # Cyrillic 'а' (a) in domain
-        "john.doe@ｅ𝓧𝓪𝓶𝓹𝓵𝓮.com",  # Mixed fullwidth and cursive in domain
     ],
 )
 def test_authentication_getter_existing_user_email_tricky(email, monkeypatch, settings):

src/backend/core/tests/rooms/test_api_rooms_lobby.py

@@ -132,18 +132,18 @@ def test_request_entry_with_existing_participants(settings):
 
     # Add two participants already waiting in the lobby
     cache.set(
-        f"mocked-cache-prefix_{room.id}_participant1",
+        f"mocked-cache-prefix_{room.id}_2f7f162fe7d1421b90e702bfbfbf8def",
         {
-            "id": "participant1",
+            "id": "2f7f162fe7d1421b90e702bfbfbf8def",
             "username": "user1",
             "status": "waiting",
             "color": "#123456",
         },
     )
     cache.set(
-        f"mocked-cache-prefix_{room.id}_participant2",
+        f"mocked-cache-prefix_{room.id}_f4ca3ab8a6c04ad88097b8da33f60f10",
         {
-            "id": "participant2",
+            "id": "f4ca3ab8a6c04ad88097b8da33f60f10",
             "username": "user2",
             "status": "accepted",
             "color": "#654321",
@@ -257,7 +257,9 @@ def test_request_entry_authenticated_user_public_room(settings):
     with (
         mock.patch.object(LobbyService, "notify_participants", return_value=None),
         mock.patch.object(
-            LobbyService, "_get_or_create_participant_id", return_value="123"
+            LobbyService,
+            "_get_or_create_participant_id",
+            return_value="2f7f162fe7d1421b90e702bfbfbf8def",
         ),
         mock.patch.object(
             utils, "generate_livekit_config", return_value={"token": "test-token"}
@@ -274,11 +276,11 @@ def test_request_entry_authenticated_user_public_room(settings):
     # Verify the lobby cookie was set
     cookie = response.cookies.get("mocked-cookie")
     assert cookie is not None
-    assert cookie.value == "123"
+    assert cookie.value == "2f7f162fe7d1421b90e702bfbfbf8def"
 
     # Verify response content matches expected structure and values
     assert response.json() == {
-        "id": "123",
+        "id": "2f7f162fe7d1421b90e702bfbfbf8def",
         "username": "test_user",
         "status": "accepted",
         "color": "mocked-color",
@@ -300,9 +302,9 @@ def test_request_entry_waiting_participant_public_room(settings):
 
     # Add a waiting participant to the room's lobby cache
     cache.set(
-        f"mocked-cache-prefix_{room.id}_participant1",
+        f"mocked-cache-prefix_{room.id}_2f7f162fe7d1421b90e702bfbfbf8def",
         {
-            "id": "participant1",
+            "id": "2f7f162fe7d1421b90e702bfbfbf8def",
             "username": "user1",
             "status": "waiting",
             "color": "#123456",
@@ -310,7 +312,7 @@ def test_request_entry_waiting_participant_public_room(settings):
     )
 
     # Simulate a browser with existing participant cookie
-    client.cookies.load({"mocked-cookie": "participant1"})
+    client.cookies.load({"mocked-cookie": "2f7f162fe7d1421b90e702bfbfbf8def"})
 
     with (
         mock.patch.object(LobbyService, "notify_participants", return_value=None),
@@ -328,11 +330,11 @@ def test_request_entry_waiting_participant_public_room(settings):
     # Verify the lobby cookie was set
     cookie = response.cookies.get("mocked-cookie")
     assert cookie is not None
-    assert cookie.value == "participant1"
+    assert cookie.value == "2f7f162fe7d1421b90e702bfbfbf8def"
 
     # Verify response content matches expected structure and values
     assert response.json() == {
-        "id": "participant1",
+        "id": "2f7f162fe7d1421b90e702bfbfbf8def",
         "username": "user1",
         "status": "accepted",
         "color": "#123456",
@@ -379,7 +381,7 @@ def test_allow_participant_to_enter_anonymous():
 
     response = client.post(
         f"/api/v1.0/rooms/{room.id}/enter/",
-        {"participant_id": "test-id", "allow_entry": True},
+        {"participant_id": "2f7f162fe7d1421b90e702bfbfbf8def", "allow_entry": True},
     )
 
     assert response.status_code == 401
@@ -394,7 +396,7 @@ def test_allow_participant_to_enter_non_owner():
 
     response = client.post(
         f"/api/v1.0/rooms/{room.id}/enter/",
-        {"participant_id": "test-id", "allow_entry": True},
+        {"participant_id": "2f7f162fe7d1421b90e702bfbfbf8def", "allow_entry": True},
     )
 
     assert response.status_code == 403
@@ -412,7 +414,7 @@ def test_allow_participant_to_enter_public_room():
 
     response = client.post(
         f"/api/v1.0/rooms/{room.id}/enter/",
-        {"participant_id": "test-id", "allow_entry": True},
+        {"participant_id": "2f7f162fe7d1421b90e702bfbfbf8def", "allow_entry": True},
     )
 
     assert response.status_code == 404
@@ -435,9 +437,9 @@ def test_allow_participant_to_enter_success(settings, allow_entry, updated_statu
     settings.LOBBY_KEY_PREFIX = "mocked-cache-prefix"
 
     cache.set(
-        f"mocked-cache-prefix_{room.id!s}_participant1",
+        f"mocked-cache-prefix_{room.id!s}_2f7f162fe7d1421b90e702bfbfbf8def",
         {
-            "id": "test-id",
+            "id": "2f7f162fe7d1421b90e702bfbfbf8def",
             "status": "waiting",
             "username": "foo",
             "color": "123",
@@ -446,13 +448,18 @@ def test_allow_participant_to_enter_success(settings, allow_entry, updated_statu
 
     response = client.post(
         f"/api/v1.0/rooms/{room.id}/enter/",
-        {"participant_id": "participant1", "allow_entry": allow_entry},
+        {
+            "participant_id": "2f7f162fe7d1421b90e702bfbfbf8def",
+            "allow_entry": allow_entry,
+        },
     )
 
     assert response.status_code == 200
     assert response.json() == {"message": "Participant was updated."}
 
-    participant_data = cache.get(f"mocked-cache-prefix_{room.id!s}_participant1")
+    participant_data = cache.get(
+        f"mocked-cache-prefix_{room.id!s}_2f7f162fe7d1421b90e702bfbfbf8def"
+    )
     assert participant_data.get("status") == updated_status
 
 
@@ -468,12 +475,14 @@ def test_allow_participant_to_enter_participant_not_found(settings):
 
     settings.LOBBY_KEY_PREFIX = "mocked-cache-prefix"
 
-    participant_data = cache.get(f"mocked-cache-prefix_{room.id!s}_test-id")
+    participant_data = cache.get(
+        f"mocked-cache-prefix_{room.id!s}_2f7f162fe7d1421b90e702bfbfbf8def"
+    )
     assert participant_data is None
 
     response = client.post(
         f"/api/v1.0/rooms/{room.id}/enter/",
-        {"participant_id": "test-id", "allow_entry": True},
+        {"participant_id": "2f7f162fe7d1421b90e702bfbfbf8def", "allow_entry": True},
     )
 
     assert response.status_code == 404
@@ -563,18 +572,18 @@ def test_list_waiting_participants_success(settings):
 
     # Add participants in the lobby
     cache.set(
-        f"mocked-cache-prefix_{room.id}_participant1",
+        f"mocked-cache-prefix_{room.id}_2f7f162fe7d1421b90e702bfbfbf8def",
         {
-            "id": "participant1",
+            "id": "2f7f162fe7d1421b90e702bfbfbf8def",
             "username": "user1",
             "status": "waiting",
             "color": "#123456",
         },
     )
     cache.set(
-        f"mocked-cache-prefix_{room.id}_participant2",
+        f"mocked-cache-prefix_{room.id}_f4ca3ab8a6c04ad88097b8da33f60f10",
         {
-            "id": "participant2",
+            "id": "f4ca3ab8a6c04ad88097b8da33f60f10",
             "username": "user2",
             "status": "waiting",
             "color": "#654321",
@@ -588,13 +597,13 @@ def test_list_waiting_participants_success(settings):
     participants = response.json().get("participants")
     assert sorted(participants, key=lambda p: p["id"]) == [
         {
-            "id": "participant1",
+            "id": "2f7f162fe7d1421b90e702bfbfbf8def",
             "username": "user1",
             "status": "waiting",
             "color": "#123456",
         },
         {
-            "id": "participant2",
+            "id": "f4ca3ab8a6c04ad88097b8da33f60f10",
             "username": "user2",
             "status": "waiting",
             "color": "#654321",

src/backend/core/tests/rooms/test_api_rooms_webhook.py

@@ -2,7 +2,6 @@
 Test LiveKit webhook endpoint on the rooms API.
 """
 
-# ruff: noqa: PLR0913
 # pylint: disable=R0913,W0621,R0917,W0613
 import base64
 import hashlib
@@ -25,7 +24,7 @@ def webhook_event_data():
             "name": "00000000-0000-0000-0000-000000000000",
             "emptyTimeout": 300,
             "creationTime": "1692627281",
-            "turnPassword": "2Pvdj+/WV1xV4EkB8klJ9xkXDWY=",
+            "turnPassword": "fake-turn-password",
             "enabledCodecs": [
                 {"mime": "audio/opus"},
                 {"mime": "video/H264"},

src/backend/core/tests/test_models_rooms.py

@@ -102,7 +102,7 @@ def test_models_rooms_access_rights_none(django_assert_num_queries):
     with django_assert_num_queries(0):
         assert room.get_role(None) is None
     with django_assert_num_queries(0):
-        assert room.is_administrator(None) is False
+        assert room.is_administrator_or_owner(None) is False
     with django_assert_num_queries(0):
         assert room.is_owner(None) is False
 
@@ -115,7 +115,7 @@ def test_models_rooms_access_rights_anonymous(django_assert_num_queries):
     with django_assert_num_queries(0):
         assert room.get_role(user) is None
     with django_assert_num_queries(0):
-        assert room.is_administrator(user) is False
+        assert room.is_administrator_or_owner(user) is False
     with django_assert_num_queries(0):
         assert room.is_owner(user) is False
 
@@ -128,7 +128,7 @@ def test_models_rooms_access_rights_authenticated(django_assert_num_queries):
     with django_assert_num_queries(1):
         assert room.get_role(user) is None
     with django_assert_num_queries(1):
-        assert room.is_administrator(user) is False
+        assert room.is_administrator_or_owner(user) is False
     with django_assert_num_queries(1):
         assert room.is_owner(user) is False
 
@@ -141,7 +141,7 @@ def test_models_rooms_access_rights_member_direct(django_assert_num_queries):
     with django_assert_num_queries(1):
         assert room.get_role(user) == "member"
     with django_assert_num_queries(1):
-        assert room.is_administrator(user) is False
+        assert room.is_administrator_or_owner(user) is False
     with django_assert_num_queries(1):
         assert room.is_owner(user) is False
 
@@ -154,7 +154,7 @@ def test_models_rooms_access_rights_administrator_direct(django_assert_num_queri
     with django_assert_num_queries(1):
         assert room.get_role(user) == "administrator"
     with django_assert_num_queries(1):
-        assert room.is_administrator(user) is True
+        assert room.is_administrator_or_owner(user) is True
     with django_assert_num_queries(1):
         assert room.is_owner(user) is False
 
@@ -167,7 +167,7 @@ def test_models_rooms_access_rights_owner_direct(django_assert_num_queries):
     with django_assert_num_queries(1):
         assert room.get_role(user) == "owner"
     with django_assert_num_queries(1):
-        assert room.is_administrator(user) is True
+        assert room.is_administrator_or_owner(user) is True
     with django_assert_num_queries(1):
         assert room.is_owner(user) is True
 

src/backend/manage.py

@@ -3,12 +3,12 @@
 meet's sandbox management script.
 """
 
-import os
 import sys
+from os import environ
 
 if __name__ == "__main__":
-    os.environ.setdefault("DJANGO_SETTINGS_MODULE", "meet.settings")
-    os.environ.setdefault("DJANGO_CONFIGURATION", "Development")
+    environ.setdefault("DJANGO_SETTINGS_MODULE", "meet.settings")
+    environ.setdefault("DJANGO_CONFIGURATION", "Development")
 
     from configurations.management import execute_from_command_line
 

src/backend/meet/celery_app.py

@@ -1,13 +1,13 @@
 """Meet celery configuration file."""
 
-import os
+from os import environ
 
 from celery import Celery
 from configurations.importer import install
 
 # Set the default Django settings module for the 'celery' program.
-os.environ.setdefault("DJANGO_SETTINGS_MODULE", "meet.settings")
-os.environ.setdefault("DJANGO_CONFIGURATION", "Development")
+environ.setdefault("DJANGO_SETTINGS_MODULE", "meet.settings")
+environ.setdefault("DJANGO_CONFIGURATION", "Development")
 
 install(check_options=True)
 

src/backend/meet/settings.py

@@ -11,7 +11,7 @@ https://docs.djangoproject.com/en/3.1/ref/settings/
 """
 
 import json
-import os
+from os import path
 from socket import gethostbyname, gethostname
 
 from django.utils.translation import gettext_lazy as _
@@ -22,7 +22,7 @@ from sentry_sdk.integrations.django import DjangoIntegration
 from sentry_sdk.integrations.logging import ignore_logger
 
 # Build paths inside the project like this: BASE_DIR / 'subdir'.
-BASE_DIR = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))
+BASE_DIR = path.dirname(path.dirname(path.abspath(__file__)))
 
 
 def get_release():
@@ -38,7 +38,7 @@ def get_release():
     # Try to get the current release from the version.json file generated by the
     # CI during the Docker image build
     try:
-        with open(os.path.join(BASE_DIR, "version.json"), encoding="utf8") as version:
+        with open(path.join(BASE_DIR, "version.json"), encoding="utf8") as version:
             return json.load(version)["version"]
     except FileNotFoundError:
         return "NA"  # Default: not available
@@ -69,7 +69,7 @@ class Base(Configuration):
 
     API_VERSION = "v1.0"
 
-    DATA_DIR = values.Value(os.path.join("/", "data"), environ_name="DATA_DIR")
+    DATA_DIR = values.Value(path.join("/", "data"), environ_name="DATA_DIR")
 
     # Security
     ALLOWED_HOSTS = values.ListValue([])
@@ -106,9 +106,9 @@ class Base(Configuration):
 
     # Static files (CSS, JavaScript, Images)
     STATIC_URL = "/static/"
-    STATIC_ROOT = os.path.join(DATA_DIR, "static")
+    STATIC_ROOT = path.join(DATA_DIR, "static")
     MEDIA_URL = "/media/"
-    MEDIA_ROOT = os.path.join(DATA_DIR, "media")
+    MEDIA_ROOT = path.join(DATA_DIR, "media")
 
     SITE_ID = 1
 
@@ -166,7 +166,7 @@ class Base(Configuration):
         )
     )
 
-    LOCALE_PATHS = (os.path.join(BASE_DIR, "locale"),)
+    LOCALE_PATHS = (path.join(BASE_DIR, "locale"),)
 
     TIME_ZONE = "UTC"
     USE_I18N = True
@@ -176,7 +176,7 @@ class Base(Configuration):
     TEMPLATES = [
         {
             "BACKEND": "django.template.backends.django.DjangoTemplates",
-            "DIRS": [os.path.join(BASE_DIR, "templates")],
+            "DIRS": [path.join(BASE_DIR, "templates")],
             "OPTIONS": {
                 "context_processors": [
                     "django.contrib.auth.context_processors.auth",

src/backend/meet/wsgi.py

@@ -7,11 +7,11 @@ For more information on this file, see
 https://docs.djangoproject.com/en/3.1/howto/deployment/wsgi/
 """
 
-import os
+from os import environ
 
 from configurations.wsgi import get_wsgi_application
 
-os.environ.setdefault("DJANGO_SETTINGS_MODULE", "meet.settings")
-os.environ.setdefault("DJANGO_CONFIGURATION", "Development")
+environ.setdefault("DJANGO_SETTINGS_MODULE", "meet.settings")
+environ.setdefault("DJANGO_CONFIGURATION", "Development")
 
 application = get_wsgi_application()

src/backend/pyproject.toml

@@ -7,7 +7,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "meet"
-version = "0.1.24"
+version = "0.1.26"
 authors = [{ "name" = "DINUM", "email" = "dev@mail.numerique.gouv.fr" }]
 classifiers = [
     "Development Status :: 5 - Production/Stable",
@@ -25,39 +25,38 @@ license = { file = "LICENSE" }
 readme = "README.md"
 requires-python = ">=3.10"
 dependencies = [
-    "boto3==1.37.24",
+    "boto3==1.38.42",
     "Brotli==1.1.0",
     "brevo-python==1.1.2",
-    "celery[redis]==5.4.0",
+    "celery[redis]==5.5.3",
     "django-configurations==2.5.1",
     "django-cors-headers==4.7.0",
     "django-countries==7.6.1",
-    "django-lasuite==0.0.7",
+    "django-lasuite==0.0.10",
     "django-parler==2.3",
     "redis==5.2.1",
-    "django-redis==5.4.0",
-    "django-storages[s3]==1.14.5",
+    "django-redis==6.0.0",
+    "django-storages[s3]==1.14.6",
     "django-timezone-field>=5.1",
-    "django==5.1.9",
-    "djangorestframework==3.15.2",
+    "django==5.2.3",
+    "djangorestframework==3.16.0",
     "drf_spectacular==0.28.0",
     "dockerflow==2024.4.2",
     "easy_thumbnails==2.10",
     "factory_boy==3.3.3",
     "gunicorn==23.0.0",
-    "jsonschema==4.23.0",
-    "june-analytics-python==2.3.0",
-    "markdown==3.7",
+    "jsonschema==4.24.0",
+    "markdown==3.8.2",
     "nested-multipart-parser==1.5.0",
-    "psycopg[binary]==3.2.6",
+    "psycopg[binary]==3.2.9",
     "PyJWT==2.10.1",
     "python-frontmatter==1.1.0",
-    "requests==2.32.3",
-    "sentry-sdk==2.24.1",
+    "requests==2.32.4",
+    "sentry-sdk==2.30.0",
     "whitenoise==6.9.0",
     "mozilla-django-oidc==4.0.1",
-    "livekit-api==1.0.2",
-    "aiohttp==3.11.14",
+    "livekit-api==1.0.3",
+    "aiohttp==3.12.13",
 ]
 
 [project.urls]
@@ -68,22 +67,22 @@ dependencies = [
 
 [project.optional-dependencies]
 dev = [
-    "django-extensions==3.2.3",
-    "drf-spectacular-sidecar==2025.3.1",
-    "freezegun==1.5.1",
+    "django-extensions==4.1",
+    "drf-spectacular-sidecar==2025.6.1",
+    "freezegun==1.5.2",
     "ipdb==0.13.13",
-    "ipython==9.0.2",
-    "pyfakefs==5.8.0",
+    "ipython==9.3.0",
+    "pyfakefs==5.9.1",
     "pylint-django==2.6.1",
-    "pylint==3.3.6",
-    "pytest-cov==6.0.0",
-    "pytest-django==4.10.0",
-    "pytest==8.3.5",
+    "pylint==3.3.7",
+    "pytest-cov==6.2.1",
+    "pytest-django==4.11.1",
+    "pytest==8.4.1",
     "pytest-icdiff==0.9",
-    "pytest-xdist==3.6.1",
+    "pytest-xdist==3.7.0",
     "responses==0.25.7",
-    "ruff==0.11.2",
-    "types-requests==2.32.0.20250306",
+    "ruff==0.12.0",
+    "types-requests==2.32.4.20250611",
 ]
 
 [tool.setuptools]

src/frontend/package-lock.json

@@ -1,20 +1,21 @@
 {
   "name": "meet",
-  "version": "0.1.24",
+  "version": "0.1.26",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "meet",
-      "version": "0.1.24",
+      "version": "0.1.26",
       "dependencies": {
-        "@livekit/components-react": "2.9.10",
+        "@livekit/components-react": "2.9.12",
         "@livekit/components-styles": "1.1.6",
         "@livekit/track-processors": "0.5.7",
         "@pandacss/preset-panda": "0.53.6",
         "@react-aria/toast": "3.0.2",
         "@remixicon/react": "4.6.0",
         "@tanstack/react-query": "5.76.0",
+        "@timephy/rnnoise-wasm": "1.0.0",
         "crisp-sdk-web": "1.0.25",
         "hoofd": "1.7.3",
         "i18next": "25.1.2",
@@ -1214,9 +1215,9 @@
       }
     },
     "node_modules/@livekit/components-core": {
-      "version": "0.12.7",
-      "resolved": "https://registry.npmjs.org/@livekit/components-core/-/components-core-0.12.7.tgz",
-      "integrity": "sha512-oxP2qlFy2Dqnu2u0ESQgcKF+5LfAMpOZ87FTMXyZ+RFogM3AkU0PWR31+j3tkAMPC9fCrgh4V1lZG3h6LjGTiw==",
+      "version": "0.12.8",
+      "resolved": "https://registry.npmjs.org/@livekit/components-core/-/components-core-0.12.8.tgz",
+      "integrity": "sha512-ZqQ88DkZZw6h4XY/lFklOFsM76zZX0mIpa6HKxDgMgW3QpDjl7oOpQCHZYvaDhmJJ9X2m58oOCuf3RUdTKSJMA==",
       "license": "Apache-2.0",
       "dependencies": {
         "@floating-ui/dom": "1.6.13",
@@ -1227,17 +1228,17 @@
         "node": ">=18"
       },
       "peerDependencies": {
-        "livekit-client": "^2.13.1",
+        "livekit-client": "^2.13.3",
         "tslib": "^2.6.2"
       }
     },
     "node_modules/@livekit/components-react": {
-      "version": "2.9.10",
-      "resolved": "https://registry.npmjs.org/@livekit/components-react/-/components-react-2.9.10.tgz",
-      "integrity": "sha512-itkMCP+KrG9KuidO+7A4W/9LaGweKxA35EyejCV49N1/gOelj4wi4Mmrf2ZIXAG8A+Xk5GXAxoCbEAh0mtMf9Q==",
+      "version": "2.9.12",
+      "resolved": "https://registry.npmjs.org/@livekit/components-react/-/components-react-2.9.12.tgz",
+      "integrity": "sha512-GSbVNEeJSGvjyRzUVHJvBahAvrC/zAG7gOD+UlgYnxjA1fEte4gSUtwbcdVauABGWZGtiaU2cQvSuNhCQaXRZQ==",
       "license": "Apache-2.0",
       "dependencies": {
-        "@livekit/components-core": "0.12.7",
+        "@livekit/components-core": "0.12.8",
         "clsx": "2.1.1",
         "usehooks-ts": "3.1.1"
       },
@@ -1246,7 +1247,7 @@
       },
       "peerDependencies": {
         "@livekit/krisp-noise-filter": "^0.2.12",
-        "livekit-client": "^2.13.1",
+        "livekit-client": "^2.13.3",
         "react": ">=18",
         "react-dom": ">=18",
         "tslib": "^2.6.2"
@@ -3888,6 +3889,11 @@
         "react": "^18 || ^19"
       }
     },
+    "node_modules/@timephy/rnnoise-wasm": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/@timephy/rnnoise-wasm/-/rnnoise-wasm-1.0.0.tgz",
+      "integrity": "sha512-zzRdFyALbhaNIuEo3LKazPWxabatbPxkaBrHzRjGDlVHX2dFklh68HUENHlvHkKsq+OOQSC1ag5sGPDMDgg2CA=="
+    },
     "node_modules/@ts-morph/common": {
       "version": "0.25.0",
       "resolved": "https://registry.npmjs.org/@ts-morph/common/-/common-0.25.0.tgz",

src/frontend/package.json

@@ -1,7 +1,7 @@
 {
   "name": "meet",
   "private": true,
-  "version": "0.1.24",
+  "version": "0.1.26",
   "type": "module",
   "scripts": {
     "dev": "panda codegen && vite",
@@ -13,13 +13,14 @@
     "check": "prettier --check ./src"
   },
   "dependencies": {
-    "@livekit/components-react": "2.9.10",
+    "@livekit/components-react": "2.9.12",
     "@livekit/components-styles": "1.1.6",
     "@livekit/track-processors": "0.5.7",
     "@pandacss/preset-panda": "0.53.6",
     "@react-aria/toast": "3.0.2",
     "@remixicon/react": "4.6.0",
     "@tanstack/react-query": "5.76.0",
+    "@timephy/rnnoise-wasm": "1.0.0",
     "crisp-sdk-web": "1.0.25",
     "hoofd": "1.7.3",
     "i18next": "25.1.2",

src/frontend/src/features/analytics/enums.ts

@@ -2,4 +2,5 @@ export enum FeatureFlags {
   Transcript = 'transcription-summary',
   ScreenRecording = 'screen-recording',
   faceLandmarks = 'face-landmarks',
+  noiseReduction = 'noise-reduction',
 }

src/frontend/src/features/rooms/components/Conference.tsx

@@ -15,8 +15,8 @@ import { InviteDialog } from './InviteDialog'
 import { VideoConference } from '../livekit/prefabs/VideoConference'
 import posthog from 'posthog-js'
 import { css } from '@/styled-system/css'
-import { LocalUserChoices } from '../routes/Room'
 import { BackgroundProcessorFactory } from '../livekit/components/blur'
+import { LocalUserChoices } from '@/stores/userChoices'
 
 export const Conference = ({
   roomId,

src/frontend/src/features/rooms/components/Join.tsx

@@ -9,7 +9,6 @@ import { SelectToggleDevice } from '../livekit/components/controls/SelectToggleD
 import { Field } from '@/primitives/Field'
 import { Button, Dialog, Text, Form } from '@/primitives'
 import { HStack, VStack } from '@/styled-system/jsx'
-import { LocalUserChoices } from '../routes/Room'
 import { Heading } from 'react-aria-components'
 import { RiImageCircleAiFill } from '@remixicon/react'
 import {
@@ -28,6 +27,7 @@ import { ApiLobbyStatus, ApiRequestEntry } from '../api/requestEntry'
 import { Spinner } from '@/primitives/Spinner'
 import { ApiAccessLevel } from '../api/ApiRoom'
 import { useLoginHint } from '@/hooks/useLoginHint'
+import { LocalUserChoices } from '@/stores/userChoices'
 
 const onError = (e: Error) => console.error('ERROR', e)
 
@@ -116,40 +116,26 @@ export const Join = ({
   const { t } = useTranslation('rooms', { keyPrefix: 'join' })
 
   const {
-    userChoices: initialUserChoices,
+    userChoices: {
+      audioEnabled,
+      videoEnabled,
+      audioDeviceId,
+      videoDeviceId,
+      processorSerialized,
+      username,
+    },
+    saveAudioInputEnabled,
+    saveVideoInputEnabled,
     saveAudioInputDeviceId,
     saveVideoInputDeviceId,
     saveUsername,
     saveProcessorSerialized,
-  } = usePersistentUserChoices({})
+  } = usePersistentUserChoices()
 
-  const [audioEnabled, setAudioEnabled] = useState(true)
-  const [videoEnabled, setVideoEnabled] = useState(true)
-  const [audioDeviceId, setAudioDeviceId] = useState<string>(
-    initialUserChoices.audioDeviceId
-  )
-  const [videoDeviceId, setVideoDeviceId] = useState<string>(
-    initialUserChoices.videoDeviceId
-  )
-  const [username, setUsername] = useState<string>(initialUserChoices.username)
   const [processor, setProcessor] = useState(
-    BackgroundProcessorFactory.deserializeProcessor(
-      initialUserChoices.processorSerialized
-    )
+    BackgroundProcessorFactory.deserializeProcessor(processorSerialized)
   )
 
-  useEffect(() => {
-    saveAudioInputDeviceId(audioDeviceId)
-  }, [audioDeviceId, saveAudioInputDeviceId])
-
-  useEffect(() => {
-    saveVideoInputDeviceId(videoDeviceId)
-  }, [videoDeviceId, saveVideoInputDeviceId])
-
-  useEffect(() => {
-    saveUsername(username)
-  }, [username, saveUsername])
-
   useEffect(() => {
     saveProcessorSerialized(processor?.serialize())
   }, [
@@ -161,8 +147,8 @@ export const Join = ({
 
   const tracks = usePreviewTracks(
     {
-      audio: { deviceId: initialUserChoices.audioDeviceId },
-      video: { deviceId: initialUserChoices.videoDeviceId },
+      audio: { deviceId: audioDeviceId },
+      video: { deviceId: videoDeviceId },
     },
     onError
   )
@@ -351,9 +337,9 @@ export const Join = ({
               </H>
               <Field
                 type="text"
-                onChange={setUsername}
+                onChange={saveUsername}
                 label={t('usernameLabel')}
-                defaultValue={initialUserChoices?.username}
+                defaultValue={username}
                 validate={(value) => !value && t('errors.usernameEmpty')}
                 wrapperProps={{
                   noMargin: true,
@@ -474,11 +460,11 @@ export const Join = ({
                 source={Track.Source.Microphone}
                 initialState={audioEnabled}
                 track={audioTrack}
-                initialDeviceId={initialUserChoices.audioDeviceId}
-                onChange={(enabled) => setAudioEnabled(enabled)}
+                initialDeviceId={audioDeviceId}
+                onChange={(enabled) => saveAudioInputEnabled(enabled)}
                 onDeviceError={(error) => console.error(error)}
                 onActiveDeviceChange={(deviceId) =>
-                  setAudioDeviceId(deviceId ?? '')
+                  saveAudioInputDeviceId(deviceId ?? '')
                 }
                 variant="tertiary"
               />
@@ -486,11 +472,11 @@ export const Join = ({
                 source={Track.Source.Camera}
                 initialState={videoEnabled}
                 track={videoTrack}
-                initialDeviceId={initialUserChoices.videoDeviceId}
-                onChange={(enabled) => setVideoEnabled(enabled)}
+                initialDeviceId={videoDeviceId}
+                onChange={(enabled) => saveVideoInputEnabled(enabled)}
                 onDeviceError={(error) => console.error(error)}
                 onActiveDeviceChange={(deviceId) =>
-                  setVideoDeviceId(deviceId ?? '')
+                  saveVideoInputDeviceId(deviceId ?? '')
                 }
                 variant="tertiary"
               />

src/frontend/src/features/rooms/livekit/components/controls/SelectToggleDevice.tsx

@@ -99,7 +99,7 @@ export const SelectToggleDevice = <T extends ToggleSource>({
   const { t } = useTranslation('rooms', { keyPrefix: 'join' })
   const trackProps = useTrackToggle(props)
 
-  const { userChoices } = usePersistentUserChoices({})
+  const { userChoices } = usePersistentUserChoices()
 
   const toggle = () => {
     if (props.source === Track.Source.Camera) {

src/frontend/src/features/rooms/livekit/hooks/useNoiseReduction.ts

@@ -0,0 +1,32 @@
+import { useEffect } from 'react'
+import { Track } from 'livekit-client'
+import { useRoomContext } from '@livekit/components-react'
+import { RnnNoiseProcessor } from '../processors/RnnNoiseProcessor'
+import { usePersistentUserChoices } from './usePersistentUserChoices'
+import { useNoiseReductionAvailable } from '@/features/rooms/livekit/hooks/useNoiseReductionAvailable'
+
+export const useNoiseReduction = () => {
+  const room = useRoomContext()
+  const noiseReductionAvailable = useNoiseReductionAvailable()
+
+  const {
+    userChoices: { noiseReductionEnabled },
+  } = usePersistentUserChoices()
+
+  const audioTrack = room.localParticipant.getTrackPublication(
+    Track.Source.Microphone
+  )?.audioTrack
+
+  useEffect(() => {
+    if (!audioTrack || !noiseReductionAvailable) return
+
+    const processor = audioTrack?.getProcessor()
+
+    if (noiseReductionEnabled && !processor) {
+      const rnnNoiseProcessor = new RnnNoiseProcessor()
+      audioTrack.setProcessor(rnnNoiseProcessor)
+    } else if (!noiseReductionEnabled && processor) {
+      audioTrack.stopProcessor()
+    }
+  }, [audioTrack, noiseReductionEnabled, noiseReductionAvailable])
+}

src/frontend/src/features/rooms/livekit/hooks/useNoiseReductionAvailable.ts

@@ -0,0 +1,13 @@
+import { useIsMobile } from '@/utils/useIsMobile'
+import { useFeatureFlagEnabled } from 'posthog-js/react'
+import { FeatureFlags } from '@/features/analytics/enums'
+import { useIsAnalyticsEnabled } from '@/features/analytics/hooks/useIsAnalyticsEnabled'
+
+export const useNoiseReductionAvailable = () => {
+  const featureEnabled = useFeatureFlagEnabled(FeatureFlags.faceLandmarks)
+  const isAnalyticsEnabled = useIsAnalyticsEnabled()
+
+  const isMobile = useIsMobile()
+
+  return !isMobile && (!isAnalyticsEnabled || featureEnabled)
+}

src/frontend/src/features/rooms/livekit/hooks/usePersistentUserChoices.ts

@@ -1,71 +1,34 @@
-import { UsePersistentUserChoicesOptions } from '@livekit/components-react'
-import React from 'react'
-import { LocalUserChoices } from '../../routes/Room'
-import { saveUserChoices, loadUserChoices } from '@livekit/components-core'
-import { ProcessorSerialized } from '../components/blur'
+import { useSnapshot } from 'valtio'
+import { userChoicesStore } from '@/stores/userChoices'
+import { ProcessorSerialized } from '@/features/rooms/livekit/components/blur'
 
-/**
- * From @livekit/component-react
- *
- * A hook that provides access to user choices stored in local storage, such as
- * selected media devices and their current state (on or off), as well as the user name.
- * @alpha
- */
-export function usePersistentUserChoices(
-  options: UsePersistentUserChoicesOptions = {}
-) {
-  const [userChoices, setSettings] = React.useState<LocalUserChoices>(
-    loadUserChoices(options.defaults, options.preventLoad ?? false)
-  )
-
-  const saveAudioInputEnabled = React.useCallback((isEnabled: boolean) => {
-    setSettings((prev: LocalUserChoices) => ({
-      ...prev,
-      audioEnabled: isEnabled,
-    }))
-  }, [])
-  const saveVideoInputEnabled = React.useCallback((isEnabled: boolean) => {
-    setSettings((prev: LocalUserChoices) => ({
-      ...prev,
-      videoEnabled: isEnabled,
-    }))
-  }, [])
-  const saveAudioInputDeviceId = React.useCallback((deviceId: string) => {
-    setSettings((prev: LocalUserChoices) => ({
-      ...prev,
-      audioDeviceId: deviceId,
-    }))
-  }, [])
-  const saveVideoInputDeviceId = React.useCallback((deviceId: string) => {
-    setSettings((prev: LocalUserChoices) => ({
-      ...prev,
-      videoDeviceId: deviceId,
-    }))
-  }, [])
-  const saveUsername = React.useCallback((username: string) => {
-    setSettings((prev: LocalUserChoices) => ({ ...prev, username: username }))
-  }, [])
-  const saveProcessorSerialized = React.useCallback(
-    (processorSerialized?: ProcessorSerialized) => {
-      setSettings((prev: LocalUserChoices) => ({
-        ...prev,
-        processorSerialized,
-      }))
-    },
-    []
-  )
-
-  React.useEffect(() => {
-    saveUserChoices(userChoices, options.preventSave ?? false)
-  }, [userChoices, options.preventSave])
+export function usePersistentUserChoices() {
+  const userChoicesSnap = useSnapshot(userChoicesStore)
 
   return {
-    userChoices,
-    saveAudioInputEnabled,
-    saveVideoInputEnabled,
-    saveAudioInputDeviceId,
-    saveVideoInputDeviceId,
-    saveUsername,
-    saveProcessorSerialized,
+    userChoices: userChoicesSnap,
+    saveAudioInputEnabled: (isEnabled: boolean) => {
+      userChoicesStore.audioEnabled = isEnabled
+    },
+    saveVideoInputEnabled: (isEnabled: boolean) => {
+      userChoicesStore.videoEnabled = isEnabled
+    },
+    saveAudioInputDeviceId: (deviceId: string) => {
+      userChoicesStore.audioDeviceId = deviceId
+    },
+    saveVideoInputDeviceId: (deviceId: string) => {
+      userChoicesStore.videoDeviceId = deviceId
+    },
+    saveUsername: (username: string) => {
+      userChoicesStore.username = username
+    },
+    saveNoiseReductionEnabled: (enabled: boolean) => {
+      userChoicesStore.noiseReductionEnabled = enabled
+    },
+    saveProcessorSerialized: (
+      processorSerialized: ProcessorSerialized | undefined
+    ) => {
+      userChoicesStore.processorSerialized = processorSerialized
+    },
   }
 }

src/frontend/src/features/rooms/livekit/prefabs/ControlBar/ControlBar.tsx

@@ -47,16 +47,13 @@ export interface ControlBarProps extends React.HTMLAttributes<HTMLDivElement> {
  * ```
  * @public
  */
-export function ControlBar({
-  saveUserChoices = true,
-  onDeviceError,
-}: ControlBarProps) {
+export function ControlBar({ onDeviceError }: ControlBarProps) {
   const {
     saveAudioInputEnabled,
     saveVideoInputEnabled,
     saveAudioInputDeviceId,
     saveVideoInputDeviceId,
-  } = usePersistentUserChoices({ preventSave: !saveUserChoices })
+  } = usePersistentUserChoices()
 
   const microphoneOnChange = React.useCallback(
     (enabled: boolean, isUserInitiated: boolean) =>

src/frontend/src/features/rooms/livekit/prefabs/VideoConference.tsx

@@ -31,6 +31,7 @@ import { useSidePanel } from '../hooks/useSidePanel'
 import { RecordingStateToast } from '@/features/recording'
 import { ScreenShareErrorModal } from '../components/ScreenShareErrorModal'
 import { useConnectionObserver } from '../hooks/useConnectionObserver'
+import { useNoiseReduction } from '../hooks/useNoiseReduction'
 
 const LayoutWrapper = styled(
   'div',
@@ -87,6 +88,8 @@ export function VideoConference({ ...props }: VideoConferenceProps) {
 
   const layoutContext = useCreateLayoutContext()
 
+  useNoiseReduction()
+
   const screenShareTracks = tracks
     .filter(isTrackReference)
     .filter((track) => track.publication.source === Track.Source.ScreenShare)

src/frontend/src/features/rooms/livekit/processors/RnnNoiseProcessor.ts

@@ -0,0 +1,102 @@
+import { Track, TrackProcessor, ProcessorOptions } from 'livekit-client'
+import { NoiseSuppressorWorklet_Name } from '@timephy/rnnoise-wasm'
+
+// This is an example how to get the script path using Vite, may be different when using other build tools
+// NOTE: `?worker&url` is important (`worker` to generate a working script, `url` to get its url to load it)
+import NoiseSuppressorWorklet from '@timephy/rnnoise-wasm/NoiseSuppressorWorklet?worker&url'
+
+// Use Jitsi's approach: maintain a global AudioContext variable
+// and suspend/resume it as needed to manage audio state
+let audioContext: AudioContext
+
+export interface AudioProcessorInterface
+  extends TrackProcessor<Track.Kind.Audio> {
+  name: string
+}
+
+export class RnnNoiseProcessor implements AudioProcessorInterface {
+  name: string = 'noise-reduction'
+  processedTrack?: MediaStreamTrack
+
+  private source?: MediaStreamTrack
+  private sourceNode?: MediaStreamAudioSourceNode
+  private destinationNode?: MediaStreamAudioDestinationNode
+  private noiseSuppressionNode?: AudioWorkletNode
+
+  constructor() {}
+
+  async init(opts: ProcessorOptions<Track.Kind.Audio>) {
+    if (!opts.track) {
+      throw new Error('Track is required for audio processing')
+    }
+
+    this.source = opts.track as MediaStreamTrack
+
+    if (!audioContext) {
+      audioContext = new AudioContext()
+    } else {
+      await audioContext.resume()
+    }
+
+    await audioContext.audioWorklet.addModule(NoiseSuppressorWorklet)
+
+    this.sourceNode = audioContext.createMediaStreamSource(
+      new MediaStream([this.source])
+    )
+
+    this.noiseSuppressionNode = new AudioWorkletNode(
+      audioContext,
+      NoiseSuppressorWorklet_Name
+    )
+
+    this.destinationNode = audioContext.createMediaStreamDestination()
+
+    // Connect the audio processing chain
+    this.sourceNode
+      .connect(this.noiseSuppressionNode)
+      .connect(this.destinationNode)
+
+    // Get the processed track
+    const tracks = this.destinationNode.stream.getAudioTracks()
+    if (tracks.length === 0) {
+      throw new Error('No audio tracks found for processing')
+    }
+
+    this.processedTrack = tracks[0]
+  }
+
+  async restart(opts: ProcessorOptions<Track.Kind.Audio>) {
+    await this.destroy()
+    return this.init(opts)
+  }
+
+  async destroy() {
+    // Clean up audio nodes and context
+    this.sourceNode?.disconnect()
+    this.noiseSuppressionNode?.disconnect()
+    this.destinationNode?.disconnect()
+
+    /**
+     * Audio Context Lifecycle Management
+     *
+     * We prefer suspending the audio context rather than destroying and recreating it
+     * to avoid memory leaks in WebAssembly-based audio processing.
+     *
+     * Issue: When an AudioContext containing WebAssembly modules is destroyed,
+     * the WASM resources are not properly garbage collected. This causes:
+     * - Retained JavaScript VM instances
+     * - Growing memory consumption over multiple create/destroy cycles
+     * - Potential performance degradation
+     *
+     * Solution: Use suspend() and resume() methods instead of close() to maintain
+     * the same context instance while controlling audio processing state.
+     */
+    await audioContext.suspend()
+
+    this.sourceNode = undefined
+    this.destinationNode = undefined
+    this.source = undefined
+    this.processedTrack = undefined
+    this.noiseSuppressionNode = undefined
+  }
+}

src/frontend/src/features/rooms/routes/Room.tsx

@@ -1,23 +1,16 @@
 import { useEffect, useState } from 'react'
-import {
-  usePersistentUserChoices,
-  type LocalUserChoices as LocalUserChoicesLK,
-} from '@livekit/components-react'
+import { usePersistentUserChoices } from '@livekit/components-react'
 import { useLocation, useParams } from 'wouter'
 import { ErrorScreen } from '@/components/ErrorScreen'
 import { useUser, UserAware } from '@/features/auth'
 import { Conference } from '../components/Conference'
 import { Join } from '../components/Join'
 import { useKeyboardShortcuts } from '@/features/shortcuts/useKeyboardShortcuts'
-import { ProcessorSerialized } from '../livekit/components/blur'
 import {
   isRoomValid,
   normalizeRoomId,
 } from '@/features/rooms/utils/isRoomValid'
-
-export type LocalUserChoices = LocalUserChoicesLK & {
-  processorSerialized?: ProcessorSerialized
-}
+import { LocalUserChoices } from '@/stores/userChoices'
 
 export const Room = () => {
   const { isLoggedIn } = useUser()

src/frontend/src/features/settings/components/tabs/AudioTab.tsx

@@ -1,4 +1,4 @@
-import { DialogProps, Field, H } from '@/primitives'
+import { DialogProps, Field, H, Switch } from '@/primitives'
 
 import { TabPanel, TabPanelProps } from '@/primitives/Tabs'
 import {
@@ -11,17 +11,48 @@ import { useTranslation } from 'react-i18next'
 import { SoundTester } from '@/components/SoundTester'
 import { HStack } from '@/styled-system/jsx'
 import { ActiveSpeaker } from '@/features/rooms/components/ActiveSpeaker'
+import { usePersistentUserChoices } from '@/features/rooms/livekit/hooks/usePersistentUserChoices'
 import { ReactNode } from 'react'
+import { css } from '@/styled-system/css'
+import posthog from 'posthog-js'
+import { useNoiseReductionAvailable } from '@/features/rooms/livekit/hooks/useNoiseReductionAvailable'
 
 type RowWrapperProps = {
   heading: string
   children: ReactNode[]
+  beta?: boolean
 }
 
-const RowWrapper = ({ heading, children }: RowWrapperProps) => {
+const BetaBadge = () => (
+  <span
+    className={css({
+      content: '"Beta"',
+      display: 'block',
+      letterSpacing: '-0.02rem',
+      padding: '0 0.25rem',
+      backgroundColor: '#E8EDFF',
+      color: '#0063CB',
+      fontSize: '12px',
+      fontWeight: 500,
+      margin: '0 0 0.9375rem 0.3125rem',
+      lineHeight: '1rem',
+      borderRadius: '4px',
+      width: 'fit-content',
+      height: 'fit-content',
+      marginTop: { base: '10px', sm: '5px' },
+    })}
+  >
+    Beta
+  </span>
+)
+
+const RowWrapper = ({ heading, children, beta }: RowWrapperProps) => {
   return (
     <>
-      <H lvl={2}>{heading}</H>
+      <HStack>
+        <H lvl={2}>{heading}</H>
+        {beta && <BetaBadge />}
+      </HStack>
       <HStack
         gap={0}
         style={{
@@ -60,6 +91,12 @@ export const AudioTab = ({ id }: AudioTabProps) => {
   const { t } = useTranslation('settings')
   const { localParticipant } = useRoomContext()
 
+  const {
+    userChoices: { noiseReductionEnabled },
+    saveAudioInputDeviceId,
+    saveNoiseReductionEnabled,
+  } = usePersistentUserChoices()
+
   const isSpeaking = useIsSpeaking(localParticipant)
 
   const {
@@ -106,6 +143,8 @@ export const AudioTab = ({ id }: AudioTabProps) => {
     return defaultItem.value
   }
 
+  const noiseReductionAvailable = useNoiseReductionAvailable()
+
   return (
     <TabPanel padding={'md'} flex id={id}>
       <RowWrapper heading={t('audio.microphone.heading')}>
@@ -116,7 +155,10 @@ export const AudioTab = ({ id }: AudioTabProps) => {
           defaultSelectedKey={
             activeDeviceIdIn || getDefaultSelectedKey(itemsIn)
           }
-          onSelectionChange={(key) => setActiveMediaDeviceIn(key as string)}
+          onSelectionChange={(key) => {
+            setActiveMediaDeviceIn(key as string)
+            saveAudioInputDeviceId(key as string)
+          }}
           {...disabledProps}
           style={{
             width: '100%',
@@ -126,7 +168,7 @@ export const AudioTab = ({ id }: AudioTabProps) => {
           {localParticipant.isMicrophoneEnabled ? (
             <ActiveSpeaker isSpeaking={isSpeaking} />
           ) : (
-            <span>Micro désactivé</span>
+            <span>{t('audio.microphone.disabled')}</span>
           )}
         </>
       </RowWrapper>
@@ -152,6 +194,23 @@ export const AudioTab = ({ id }: AudioTabProps) => {
           <SoundTester />
         </RowWrapper>
       )}
+      {noiseReductionAvailable && (
+        <RowWrapper heading={t('audio.noiseReduction.heading')} beta>
+          <Switch
+            aria-label={t(
+              `audio.noiseReduction.ariaLabel.${noiseReductionEnabled ? 'disable' : 'enable'}`
+            )}
+            isSelected={noiseReductionEnabled}
+            onChange={(v) => {
+              saveNoiseReductionEnabled(v)
+              if (v) posthog.capture('noise-reduction-init')
+            }}
+          >
+            {t('audio.noiseReduction.label')}
+          </Switch>
+          <div />
+        </RowWrapper>
+      )}
     </TabPanel>
   )
 }

src/frontend/src/locales/de/settings.json

@@ -9,7 +9,16 @@
   "audio": {
     "microphone": {
       "heading": "Mikrofon",
-      "label": "Wählen Sie Ihre Audioeingabe"
+      "label": "Wählen Sie Ihre Audioeingabe",
+      "disabled": "Mikrofon deaktiviert"
+    },
+    "noiseReduction": {
+      "label": "Rauschunterdrückung",
+      "heading": "Rauschunterdrückung",
+      "ariaLabel": {
+        "enable": "Rauschunterdrückung aktivieren",
+        "disable": "Rauschunterdrückung deaktivieren"
+      }
     },
     "speakers": {
       "heading": "Lautsprecher",

src/frontend/src/locales/en/settings.json

@@ -9,7 +9,16 @@
   "audio": {
     "microphone": {
       "heading": "Microphone",
-      "label": "Select your audio input"
+      "label": "Select your audio input",
+      "disabled": "Microphone disabled"
+    },
+    "noiseReduction": {
+      "label": "Noise reduction",
+      "heading": "Noise reduction",
+      "ariaLabel": {
+        "enable": "Enable noise reduction",
+        "disable": "Disable noise reduction"
+      }
     },
     "speakers": {
       "heading": "Speakers",

src/frontend/src/locales/fr/settings.json

@@ -9,7 +9,16 @@
   "audio": {
     "microphone": {
       "heading": "Micro",
-      "label": "Sélectionner votre entrée audio"
+      "label": "Sélectionner votre entrée audio",
+      "disabled": "Micro désactivé"
+    },
+    "noiseReduction": {
+      "label": "Réduction de bruit",
+      "heading": "Réduction de bruit",
+      "ariaLabel": {
+        "enable": "Activer la réduction du bruit",
+        "disable": "Désactiver la réduction du bruit"
+      }
     },
     "speakers": {
       "heading": "Haut-parleurs",

src/frontend/src/locales/nl/settings.json

@@ -9,7 +9,16 @@
   "audio": {
     "microphone": {
       "heading": "Microfoon",
-      "label": "Selecteer uw audioinvoer"
+      "label": "Selecteer uw audioinvoer",
+      "disabled": "Microfoon uitgeschakeld"
+    },
+    "noiseReduction": {
+      "label": "Ruisonderdrukking",
+      "heading": "Ruisonderdrukking",
+      "ariaLabel": {
+        "enable": "Ruisonderdrukking inschakelen",
+        "disable": "Ruisonderdrukking uitschakelen"
+      }
     },
     "speakers": {
       "heading": "Luidsprekers",

src/frontend/src/stores/userChoices.ts

@@ -0,0 +1,25 @@
+import { proxy, subscribe } from 'valtio'
+import { ProcessorSerialized } from '@/features/rooms/livekit/components/blur'
+import {
+  loadUserChoices,
+  saveUserChoices,
+  LocalUserChoices as LocalUserChoicesLK,
+} from '@livekit/components-core'
+
+export type LocalUserChoices = LocalUserChoicesLK & {
+  processorSerialized?: ProcessorSerialized
+  noiseReductionEnabled?: boolean
+}
+
+function getUserChoicesState(): LocalUserChoices {
+  return {
+    noiseReductionEnabled: false,
+    ...loadUserChoices(),
+  }
+}
+
+export const userChoicesStore = proxy<LocalUserChoices>(getUserChoicesState())
+
+subscribe(userChoicesStore, () => {
+  saveUserChoices(userChoicesStore, false)
+})

src/helm/env.d/dev-keycloak/values.meet.yaml.gotmpl

@@ -68,7 +68,7 @@ backend:
     SUMMARY_SERVICE_API_TOKEN: password
     SCREEN_RECORDING_BASE_URL: https://meet.127.0.0.1.nip.io/recordings
     ROOM_TELEPHONY_ENABLED: True
-    SSL_CERT_FILE: /usr/local/lib/python3.12/site-packages/certifi/cacert.pem
+    SSL_CERT_FILE: /usr/local/lib/python3.13/site-packages/certifi/cacert.pem
 
 
   migrate:
@@ -112,7 +112,7 @@ backend:
   # Extra volume mounts to manage our local custom CA and avoid to set ssl_verify: false
   extraVolumeMounts:
     - name: certs
-      mountPath: /usr/local/lib/python3.12/site-packages/certifi/cacert.pem
+      mountPath: /usr/local/lib/python3.13/site-packages/certifi/cacert.pem
       subPath: cacert.pem
 
   # Extra volumes to manage our local custom CA and avoid to set ssl_verify: false

src/helm/env.d/dev/values.meet.yaml.gotmpl

@@ -95,7 +95,7 @@ backend:
         key: BREVO_API_KEY
     BREVO_API_CONTACT_LIST_IDS: 8
     ROOM_TELEPHONY_ENABLED: True
-    SSL_CERT_FILE: /usr/local/lib/python3.12/site-packages/certifi/cacert.pem
+    SSL_CERT_FILE: /usr/local/lib/python3.13/site-packages/certifi/cacert.pem
 
 
   migrate:
@@ -139,7 +139,7 @@ backend:
   # Extra volume mounts to manage our local custom CA and avoid to set ssl_verify: false
   extraVolumeMounts:
     - name: certs
-      mountPath: /usr/local/lib/python3.12/site-packages/certifi/cacert.pem
+      mountPath: /usr/local/lib/python3.13/site-packages/certifi/cacert.pem
       subPath: cacert.pem
 
   # Extra volumes to manage our local custom CA and avoid to set ssl_verify: false

src/mail/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "mail_mjml",
-  "version": "0.1.24",
+  "version": "0.1.26",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "mail_mjml",
-      "version": "0.1.24",
+      "version": "0.1.26",
       "license": "MIT",
       "dependencies": {
         "@html-to/text-cli": "0.5.4",

src/mail/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mail_mjml",
-  "version": "0.1.24",
+  "version": "0.1.26",
   "description": "An util to generate html and text django's templates from mjml templates",
   "type": "module",
   "dependencies": {

src/sdk/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "sdk",
-  "version": "0.1.24",
+  "version": "0.1.26",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "sdk",
-      "version": "0.1.24",
+      "version": "0.1.26",
       "license": "ISC",
       "workspaces": [
         "./library",

src/sdk/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sdk",
-  "version": "0.1.24",
+  "version": "0.1.26",
   "author": "",
   "license": "ISC",
   "description": "",

src/summary/Dockerfile

@@ -1,4 +1,6 @@
-FROM python:3.12-slim AS builder
+FROM python:3.13-slim AS base
+
+FROM base AS builder
 
 WORKDIR /app
 
@@ -6,7 +8,7 @@ COPY pyproject.toml .
 
 RUN pip3 install --no-cache-dir .
 
-FROM python:3.12-slim AS production
+FROM base AS production
 
 WORKDIR /app
 

src/summary/pyproject.toml

@@ -1,23 +1,23 @@
 
 [project]
 name = "summary"
-version = "0.1.24"
+version = "0.1.26"
 dependencies = [
     "fastapi[standard]>=0.105.0",
     "uvicorn>=0.24.0",
     "pydantic>=2.5.0",
     "pydantic-settings>=2.1.0",
-    "celery==5.4.0",
+    "celery==5.5.3",
     "redis==5.2.1",
     "minio==7.2.15",
-    "openai==1.68.2",
-    "requests==2.32.3",
-    "sentry-sdk[fastapi, celery]==2.24.1",
+    "openai==1.91.0",
+    "requests==2.32.4",
+    "sentry-sdk[fastapi, celery]==2.30.0",
 ]
 
 [project.optional-dependencies]
 dev = [
-    "ruff==0.11.2",
+    "ruff==0.12.0",
 ]
 
 [build-system]