Update module github.com/pion/rtp to v2

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/pion/rtp	v1.10.2 → v2.0.0

---

Release Notes

pion/rtp (github.com/pion/rtp)

v2.0.0

Compare Source

v1.10.5

Compare Source

Changelog

• e61bd16 Support multiple sps/pps/vps in h265 AU

v1.10.4

Compare Source

Changelog

• 2b19d5b Cache SPS/PPS/VPS in H265Payloader
• 0f341d6 Check data length it RTP ExtHdr handlers

v1.10.3

Compare Source

Changelog

• ac0f586 Skip allocations when reusing VP9 packets (#​364)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 9am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

• 🔍 Trigger a full review

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[devin-ai-integration]

Devin Review found 1 potential issue.

View 1 additional finding in Devin Review.

[devin-ai-integration]

🟡 New RTP v2 dependency is declared but never imported anywhere in the codebase

The new dependency is added to the module file (github.com/pion/rtp/v2 at go.mod:21) but no source file imports it, so it is unused and would be removed by go mod tidy.

Impact: The stated migration to RTP v2 is incomplete — all code still uses v1, and the v2 entry is dead weight.

All source files still import v1, not v2

Every .go file in the repository that uses the RTP library imports github.com/pion/rtp (v1), not github.com/pion/rtp/v2. For example:

• localtrack.go:29 imports "github.com/pion/rtp"
• pkg/samplebuilder/samplebuilder.go:26 imports "github.com/pion/rtp"
• e2ee/trackdecryptor.go:22 imports "github.com/pion/rtp"
• pkg/interceptor/pacerinteceptor.go:7 imports "github.com/pion/rtp"

The old github.com/pion/rtp v1.10.2 is still listed as a direct dependency at go.mod:20 and is still actively used. The go.sum file only contains a /go.mod hash for pion/rtp/v2 (no source hash), confirming no code downloads or uses the v2 module.

Prompt for agents

The PR adds github.com/pion/rtp/v2 as a direct dependency in go.mod but no Go source files import it. All imports throughout the codebase (localtrack.go, pkg/samplebuilder/samplebuilder.go, e2ee/trackdecryptor.go, pkg/interceptor/pacerinteceptor.go, pkg/synchronizer/track.go, etc.) still reference github.com/pion/rtp (v1). Either: (1) update all import paths from github.com/pion/rtp to github.com/pion/rtp/v2 and remove the v1 dependency, or (2) remove the v2 line from go.mod if this migration is not yet ready. Running go mod tidy in the current state would remove the v2 entry automatically.

---

Was this helpful? React with 👍 or 👎 to provide feedback.