Upgrade Jitsi (v11248-4 -> v11248-5)

The role replaced `jitsi_web_framing_enabled` with `jitsi_web_framing_ancestors`.
Embedding is still allowed from anywhere, now via `jitsi_web_framing_ancestors_default: ['*']`.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

group_vars/matrix_servers

@@ -4065,8 +4065,9 @@ jitsi_web_stun_servers: |
     else [ 'stun:meet-jit-si-turnrelay.jitsi.net:443']
   }}
 
-# The Jitsi instance installed by this playbook is meant for embedding into Matrix clients, so framing is allowed.
-jitsi_web_framing_enabled: true
+# The Jitsi instance installed by this playbook is meant for embedding into Matrix clients, so framing is allowed from anywhere.
+# To restrict it, set this to `["'self'"]` and list any additional origins in `jitsi_web_framing_ancestors_custom`.
+jitsi_web_framing_ancestors_default: ['*']
 
 # Jitsi (Prosody) only seems to support authenticating with coturn using `auth-secret`, not `lt-cred-mech`.
 # See: https://prosody.im/doc/coturn

requirements.yml

@@ -42,7 +42,7 @@
   version: v0.5.1-8
   name: hydrogen
 - src: git+https://github.com/mother-of-all-self-hosting/ansible-role-jitsi.git
-  version: v11248-4
+  version: v11248-5
   name: jitsi
 - src: git+https://github.com/mother-of-all-self-hosting/ansible-role-livekit-server.git
   version: v1.13.9-0