🔖(minor) bump release to 0.1.39

Enable meeting summary (/w a feature flag)
⬆️(backend) upgrade django to 5.2.7
2025-10-06 10:53:22 +02:00 · 2025-10-06 10:52:44 +02:00 · 2025-10-01 15:32:27 +02:00 · 2025-10-01 15:32:27 +02:00 · 2025-09-30 22:46:30 +02:00 · 2025-09-30 15:14:51 +02:00
18 changed files with 74 additions and 21 deletions
@@ -42,7 +42,7 @@ COPY ./docker/dinum-frontend/fonts/ \
 FROM nginxinc/nginx-unprivileged:alpine3.21 AS frontend-production

 USER root
-RUN apk update && apk upgrade libssl3 libcrypto3 libxml2>=2.12.7-r2 libxslt>=1.1.39-r2
+RUN apk update && apk upgrade libssl3 libcrypto3 libxml2>=2.12.7-r2 libxslt>=1.1.39-r2 libexpat>=2.7.2-r0

 USER nginx

@@ -1,7 +1,7 @@

 [project]
 name = "agents"
-version = "0.1.38"
+version = "0.1.39"
 requires-python = ">=3.12"
 dependencies = [
    "livekit-agents==1.2.6",
@@ -131,8 +131,8 @@ class NotificationService:
        if not owner_access:
            logger.error("No owner found for recording %s", recording.id)
            return False
-
        payload = {
+            "owner_id": str(owner_access.user.id),
            "filename": recording.key,
            "email": owner_access.user.email,
            "sub": owner_access.user.sub,
@@ -7,7 +7,7 @@ build-backend = "setuptools.build_meta"

 [project]
 name = "meet"
-version = "0.1.38"
+version = "0.1.39"
 authors = [{ "name" = "DINUM", "email" = "dev@mail.numerique.gouv.fr" }]
 classifiers = [
    "Development Status :: 5 - Production/Stable",
@@ -38,7 +38,7 @@ dependencies = [
    "django-redis==6.0.0",
    "django-storages[s3]==1.14.6",
    "django-timezone-field>=5.1",
-    "django==5.2.6",
+    "django==5.2.7",
    "djangorestframework==3.16.0",
    "drf_spectacular==0.28.0",
    "dockerflow==2024.4.2",
@@ -38,7 +38,7 @@ RUN npm run build
 FROM nginxinc/nginx-unprivileged:alpine3.21 AS frontend-production

 USER root
-RUN apk update && apk upgrade libssl3 libcrypto3 libxml2>=2.12.7-r2 libxslt>=1.1.39-r2
+RUN apk update && apk upgrade libssl3 libcrypto3 libxml2>=2.12.7-r2 libxslt>=1.1.39-r2 libexpat>=2.7.2-r0

 USER nginx

@@ -1,12 +1,12 @@
 {
  "name": "meet",
-  "version": "0.1.38",
+  "version": "0.1.39",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "name": "meet",
-      "version": "0.1.38",
+      "version": "0.1.39",
      "dependencies": {
        "@livekit/components-react": "2.9.13",
        "@livekit/components-styles": "1.1.6",
@@ -1,7 +1,7 @@
 {
  "name": "meet",
  "private": true,
-  "version": "0.1.38",
+  "version": "0.1.39",
  "type": "module",
  "scripts": {
    "dev": "panda codegen && vite",
@@ -25,6 +25,18 @@ export const useConnectionObserver = () => {
      posthog.capture('reconnect-event')
    }

+    const handleReconnected = () => {
+      posthog.capture('reconnected-event')
+    }
+
+    const handleSignalingConnect = () => {
+      posthog.capture('signaling-connect-event')
+    }
+
+    const handleSignalingReconnect = () => {
+      posthog.capture('signaling-reconnect-event')
+    }
+
    const handleDisconnect = (
      disconnectReason: DisconnectReason | undefined
    ) => {
@@ -43,13 +55,19 @@ export const useConnectionObserver = () => {
    }

    room.on(RoomEvent.Connected, handleConnection)
+    room.on(RoomEvent.SignalConnected, handleSignalingConnect)
    room.on(RoomEvent.Disconnected, handleDisconnect)
    room.on(RoomEvent.Reconnecting, handleReconnect)
+    room.on(RoomEvent.Reconnected, handleReconnected)
+    room.on(RoomEvent.SignalReconnecting, handleSignalingReconnect)

    return () => {
      room.off(RoomEvent.Connected, handleConnection)
+      room.off(RoomEvent.SignalConnected, handleSignalingConnect)
      room.off(RoomEvent.Disconnected, handleDisconnect)
      room.off(RoomEvent.Reconnecting, handleReconnect)
+      room.off(RoomEvent.Reconnected, handleReconnected)
+      room.off(RoomEvent.SignalReconnecting, handleSignalingReconnect)
    }
  }, [room, isAnalyticsEnabled])

@@ -212,7 +212,8 @@ celeryTranscribe:
    - "worker"
    - "--pool=solo"
    - "--loglevel=info"
-    - "-Q transcribe-queue"
+    - "-Q"
+    - "transcribe-queue"

 celerySummarize:
  replicas: 1
@@ -248,7 +249,8 @@ celerySummarize:
    - "worker"
    - "--pool=solo"
    - "--loglevel=info"
-    - "-Q summarize-queue"
+    - "-Q"
+    - "summarize-queue"

 agents:
  replicas: 1
@@ -82,9 +82,15 @@ spec:
        volumeMounts:
        - mountPath: /data
          name: data
+        - mountPath: /etc/ssl/certs/mkcert-ca.pem
+          name: mkcert
+          subPath: rootCA.pem
      volumes:
      - name: data
        emptyDir:
+      - name: mkcert
+        secret:
+          secretName: mkcert
 ---
 apiVersion: batch/v1
 kind: Job
@@ -105,3 +111,26 @@ spec:
            exit 0
      restartPolicy: Never
  backoffLimit: 1
+---
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: minio-webhook
+spec:
+  template:
+    spec:
+      containers:
+      - name: mc
+        image: minio/mc
+        command:
+          - /bin/sh
+          - -c
+          - |
+            /usr/bin/mc alias set meet http://minio:9000 meet password && \
+            /usr/bin/mc admin config set meet notify_webhook:meet-webhook endpoint="https://meet.127.0.0.1.nip.io/api/v1.0/recordings/storage-hook/" auth_token="Bearer password" && \
+            /usr/bin/mc admin service restart meet --wait --json && \
+            sleep 15 && \
+            /usr/bin/mc event add meet/meet-media-storage arn:minio:sqs::meet-webhook:webhook --event put && \
+            exit 0
+      restartPolicy: Never
+  backoffLimit: 1
@@ -1,12 +1,12 @@
 {
  "name": "mail_mjml",
-  "version": "0.1.38",
+  "version": "0.1.39",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "name": "mail_mjml",
-      "version": "0.1.38",
+      "version": "0.1.39",
      "license": "MIT",
      "dependencies": {
        "@html-to/text-cli": "0.5.4",
@@ -1,6 +1,6 @@
 {
  "name": "mail_mjml",
-  "version": "0.1.38",
+  "version": "0.1.39",
  "description": "An util to generate html and text django's templates from mjml templates",
  "type": "module",
  "dependencies": {
@@ -1,12 +1,12 @@
 {
  "name": "sdk",
-  "version": "0.1.38",
+  "version": "0.1.39",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "name": "sdk",
-      "version": "0.1.38",
+      "version": "0.1.39",
      "license": "ISC",
      "workspaces": [
        "./library",
@@ -1,6 +1,6 @@
 {
  "name": "sdk",
-  "version": "0.1.38",
+  "version": "0.1.39",
  "author": "",
  "license": "ISC",
  "description": "",
@@ -1,7 +1,7 @@

 [project]
 name = "summary"
-version = "0.1.38"
+version = "0.1.39"
 dependencies = [
    "fastapi[standard]>=0.105.0",
    "uvicorn>=0.24.0",
@@ -18,6 +18,7 @@ settings = get_settings()
 class TaskCreation(BaseModel):
    """Task data."""

+    owner_id: str
    filename: str
    email: str
    sub: str
@@ -35,6 +36,7 @@ async def create_task(request: TaskCreation):
    """Create a task."""
    task = process_audio_transcribe_summarize_v2.apply_async(
        args=[
+            request.owner_id,
            request.filename,
            request.email,
            request.sub,
@@ -118,9 +118,9 @@ class MetadataManager:
            "retries": 0,
        }

-        _required_args_count = 7
+        _required_args_count = 8
        if len(task_args) != _required_args_count:
-            logger.error("Invalid number of arguments.")
+            logger.error("Invalid number of arguments to enable metadata manager.")
            return

        filename, email, _, received_at, *_ = task_args
@@ -200,9 +200,11 @@ def task_failure_handler(task_id, exception=None, **kwargs):
    bind=True,
    autoretry_for=[exceptions.HTTPError],
    max_retries=settings.celery_max_retries,
+    queue=settings.transcribe_queue,
 )
 def process_audio_transcribe_summarize_v2(
    self,
+    owner_id: str,
    filename: str,
    email: str,
    sub: str,
@@ -319,7 +321,7 @@ def process_audio_transcribe_summarize_v2(
    metadata_manager.capture(task_id, settings.posthog_event_success)

    if (
-        analytics.is_feature_enabled("summary-enabled", distinct_id=sub)
+        analytics.is_feature_enabled("summary-enabled", distinct_id=owner_id)
        and settings.is_summary_enabled
    ):
        logger.info("Queuing summary generation task.")
Author	SHA1	Message	Date
lebaudantoine	5604cf7509	🔖(minor) bump release to 0.1.39 Enable meeting summary (/w a feature flag)	2025-10-06 10:53:22 +02:00
lebaudantoine	c36d99b855	⬆️(backend) upgrade django to 5.2.7 Resolve vulnerability CVE-2025-59681, that triggers Trivy scan and block PR's merging. More information there https://avd.aquasec.com/nvd/cve-2025-59681	2025-10-06 10:52:44 +02:00
lebaudantoine	c83d3b99fc	💡(summary) improve metadata manager error messages with explicit source Enhance error logging in metadata manager to explicitly identify the metadata manager as error source.	2025-10-01 15:32:27 +02:00
lebaudantoine	a58d3416e0	🐛(summary) fix metadata manager args after adding owner_id parameter Update metadata manager initialization with additional required arguments after owner_id field addition broke existing initialization logic, restoring proper metadata handling functionality in summary microservice.	2025-10-01 15:32:27 +02:00
Martin Guitteny	c3eb877377	🐛(summary) fix feature flag on summary job Sadly, we used user db id as the posthog distinct id of identified user, and not the sub. Before this commit, we were only passing sub to the summary microservice. Add the owner's id. Please note we introduce a different naming behavir, by prefixing the id with "owner". We didn't for the sub and the email. We cannot align sub and email with this new naming approach, because external contributors have already started building their own microservice.	2025-09-30 22:46:30 +02:00
lebaudantoine	9cb9998384	⬆️(frontend) manually upgrade Alpine dependencies to fix libexpat vul Manually update libexpat to 2.7.2-r0 in Alpine 3.21.3 base image to address CVE-2025-59375 high-severity vulnerability until newer Alpine base image becomes available, ensuring Trivy security scans pass.	2025-09-30 15:14:51 +02:00
lebaudantoine	a3ca6f0113	📈(frontend) track more room events in PostHog for disconnections Add additional room event tracking to PostHog analytics to better understand and diagnose disconnection error patterns. Enhanced telemetry will provide insights for improving connection stability.	2025-09-18 23:47:13 +02:00
lebaudantoine	1d9caeb17f	🐛(helm) fix broken worker assignment due to extra space Remove incorrect whitespace in queue names that prevented Celery workers from listening to proper queues. Workers were attempting to connect to non-existent queues, breaking task distribution.	2025-09-18 18:27:10 +02:00
lebaudantoine	5caed6222b	🐛(summary) fix transcribe job queue assignment Ensure transcribe jobs are properly assigned to their specific queue instead of using default queue. This prevents job routing issues and ensures proper task distribution across workers.	2025-09-18 18:27:10 +02:00
lebaudantoine	46fdbc0430	✨(helm) configure MinIO webhook with Kubernetes job for recordings Implement automated MinIO webhook configuration using Kubernetes job to enable recording feature functionality. This eliminates manual setup requirements and ensures consistent webhook configuration across deployments.	2025-09-18 18:27:10 +02:00
lebaudantoine	534f3b2d47	🐛(helm) fix MinIO webhook certificate after Tilt stack changes Restore certificate mounting for MinIO webhook communication to backend after migrating away from unmaintained Bitnami chart. Mount certificate in proper volume to enable secure bucket-to-backend webhook delivery.	2025-09-18 18:27:10 +02:00