2026.05.28.1

Features

• Quick-jump pill in the sidebar. A full-width search-style trigger sits directly under the logo: search icon, "Jump to..." placeholder, ⌘K kbd hint on the right. Click or hit ⌘K to open the same command palette — newcomers now have a visible entry point to the feature that was previously keyboard-shortcut only.

Security

• Bump jwt 2.10.2 → 2.10.3 to clear CVE-2026-45363 (empty-key HMAC bypass). We're not in the vulnerable code path (we never call LiveKit::TokenVerifier) but the backport stays within livekit-server-sdk's < 3.0 pin so shipping it is cheaper than maintaining a dismissal.