Merge pull request #1205 from element-hq/jaywink/lk-jwt-service-0.4.2

Upgrade Matrix RTC LiveKit JWT Service to v0.4.2

Author: jaywink

charts/matrix-stack/source/matrix-rtc.yaml.j2

@@ -24,7 +24,7 @@ restrictRoomCreationToLocalUsers: true
 
 replicas: 1
 {{- sub_schema_values.ingress() }}
-{{- sub_schema_values.image(registry='ghcr.io', repository='element-hq/lk-jwt-service', tag='0.4.1') }}
+{{- sub_schema_values.image(registry='oci.element.io', repository='lk-jwt-service', tag='0.4.2') }}
 {{- sub_schema_values.labels() }}
 {{- sub_schema_values.workloadAnnotations() }}
 {{- sub_schema_values.containersSecurityContext() }}

charts/matrix-stack/values.yaml

@@ -518,14 +518,14 @@ matrixRTC:
   image:
     ## The host and (optional) port of the container image registry for this component.
     ## If not specified Docker Hub is implied
-    registry: ghcr.io
+    registry: oci.element.io
 
     ## The path in the registry where the container image is located
-    repository: element-hq/lk-jwt-service
+    repository: lk-jwt-service
 
     ## The tag of the container image to use.
     ## One of tag or digest must be provided.
-    tag: "0.4.1"
+    tag: "0.4.2"
 
     ## Container digest to use. Used to pull the image instead of the image tag if set
     ## The tag will still be set as the app.kubernetes.io/version label

newsfragments/1205.changed.md

@@ -0,0 +1,6 @@
+Upgrade Matrix RTC LiveKit JWT Service to v0.4.2.
+
+Resolves CVE-2026-26014 and CVE-2026-33186.
+
+Full Changelogs:
+- [v0.4.2](https://github.com/element-hq/lk-jwt-service/releases/tag/v0.4.2)