Security Update and MSC4195 Identity Alignment

This release introduces important security updates and aligns the LiveKit identity calculation with the latest MSC4195 specification.

⚠️ Breaking Change

The update to the LiveKit Identity hash calculation (#172) impacts two experimental modes in Element Call: Compatibility: state events & multi SFU and Matrix 2.0. Note that by default, these modes are not activated and Element Call will remain working with this release.

For these experimental features to function correctly, the versions of Element Call and the JWT Service must be aligned:

• Compatible: Element Call v0.19.2 or higher AND lk-jwt-service v0.4.3 or higher
• Incompatible:
  • Element Call v0.19.1 or lower AND lk-jwt-service v0.4.3 or higher
  • Element Call v0.19.2 or higher AND lk-jwt-service v0.4.2 or lower

Docker image

The service is available as a Docker image from the GitHub Container Registry.

docker pull ghcr.io/element-hq/lk-jwt-service:0.4.3

Precompiled binaries

The service is available as static precompiled binaries for amd64 and arm64 on linux attached to this release below.

What's Changed

• Pin element-hq/setup-ess-cluster-action action to aac02ff by @renovate[bot] in #169
• Update module github.com/go-jose/go-jose/v3 to v3.0.5 [SECURITY] by @renovate[bot] in #170
• Update all non-major dependencies by @renovate[bot] in #173
• Update softprops/action-gh-release action to v3 by @renovate[bot] in #174
• Adapt LiveKit Identity hash calculation to latest MSC4195 update by @fkwp in #172

Full Changelog: v0.4.2...v0.4.3