fix(deps): update third party deps to v16

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
websockets (changelog)	>=13.1,<16.0 → >=16,<16.1

---

Release Notes

python-websockets/websockets (websockets)

v16.0

Compare Source

See https://websockets.readthedocs.io/en/stable/project/changelog.html for details.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 9am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: uv.lock

Command failed: uv lock --upgrade-package websockets
Using CPython 3.14.5 interpreter at: /opt/containerbase/tools/python/3.14.5/bin/python3
  × No solution found when resolving dependencies for split (markers:
  │ python_full_version == '3.14.*'):
  ╰─▶ Because openai[realtime]>=2.36.0 depends on websockets>=13,<16
      and websockets>=13,<16, we can conclude that
      openai[realtime]>=2.36.0,<=2.37.0 depends on websockets>=13,<16.
      And because openai[realtime]>=2.38.0 depends on websockets>=13,<16 and
      only the following versions of openai[realtime] are available:
          openai[realtime]<=2.36.0
          openai[realtime]==2.37.0
          openai[realtime]==2.38.0
          openai[realtime]==2.39.0
          openai[realtime]==2.40.0
      we can conclude that openai[realtime]>=2.36.0,<2.39.0 depends on
      websockets>=13,<16. (1)

      Because openai[realtime]>=2.39.0 depends on websockets>=13,<16 and only
      the following versions of openai[realtime] are available:
          openai[realtime]<=2.36.0
          openai[realtime]==2.37.0
          openai[realtime]==2.38.0
          openai[realtime]==2.39.0
          openai[realtime]==2.40.0
      we can conclude that openai[realtime]>2.38.0,<2.40.0 depends on
      websockets>=13,<16.
      And because we know from (1) that openai[realtime]>=2.36.0,<2.39.0
      depends on websockets>=13,<16, we can conclude that
      openai[realtime]>=2.36.0,<2.40.0 depends on websockets>=13,<16.
      And because openai[realtime]==2.40.0 depends on websockets>=13,<16,
      we can conclude that openai[realtime]>=2.36.0 depends on
      websockets>=13,<16.
      And because livekit-plugins-openai depends on openai[realtime]>=2.36 and
      livekit-plugins-gnani depends on websockets>=16,<16.1, we can conclude
      that livekit-plugins-gnani and livekit-plugins-openai are incompatible.
      And because your workspace requires livekit-plugins-gnani and
      livekit-plugins-openai[vertex], we can conclude that your workspace's
      requirements are unsatisfiable.

[devin-ai-integration]

Devin Review found 1 potential issue.

View 2 additional findings in Devin Review.

[devin-ai-integration]

🔴 uv.lock not updated after websockets version bump — lock file is stale and inconsistent

The pyproject.toml was changed to require websockets>=16,<16.1, but the shared uv.lock file was not regenerated. The lock file still resolves websockets to version 15.0.1 and records the old specifier >=13.1,<16.0 for livekit-plugins-gnani. This means uv sync will detect a stale lock and fail (or silently use the wrong version), since 15.0.1 does not satisfy >=16,<16.1.

Stale lock file metadata

In uv.lock, the gnani entry still reads:

[package.metadata]
requires-dist = [
    { name = "websockets", specifier = ">=13.1,<16.0" },
]

And websockets is resolved globally to 15.0.1, which is incompatible with the new >=16,<16.1 requirement.

Prompt for agents

The pyproject.toml was updated to require websockets>=16,<16.1 but the root uv.lock was not regenerated. The lock file still resolves websockets to 15.0.1 and records the old specifier >=13.1,<16.0 for livekit-plugins-gnani. Run `uv lock` from the repository root to regenerate the lock file. Note that since this is a uv workspace with a single lock file, upgrading websockets to 16.x will affect all workspace members that depend on websockets (e.g. livekit-plugins-phonic, google-genai, fal-client, speechmatics-rt). Verify that all those packages are compatible with websockets 16.x before merging.

---

Was this helpful? React with 👍 or 👎 to provide feedback.