v3.0.1

What's Changed

• build(deps): bump google-auth-library from 10.9.1 to 11.0.2 by @dependabot[bot] in #8202
• Update localfs docs for NodeJS 24 by @hardillb in #8315
• build(deps): bump ldapts from 8.1.8 to 9.0.0 by @dependabot[bot] in #7815
• docs: correct the ChatGPT and Claude connector steps by @dimitrieh in #8314
• docs: use the shared agent picker on the third-party agents page by @dimitrieh in #8313
• docs: correct the ChatGPT developer mode path by @dimitrieh in #8316
• [7918] Update the logo variant for dark backgrounds by @n-lark in #8322
• build(deps): bump nodemailer from 9.0.5 to 9.0.6 by @dependabot[bot] in #8353
• build(deps-dev): bump @typescript-eslint/parser from 8.67.0 to 8.68.0 by @dependabot[bot] in #8349
• build(deps): bump @sentry/vue from 10.70.0 to 10.72.0 by @dependabot[bot] in #8346
• build(deps-dev): bump webpack from 5.109.2 to 5.110.2 by @dependabot[bot] in #8348
• Fix error for lock file's globals@17.11.0 does not satisfy globals@17.12.0 by @n-lark in #8357
• Release 3.0.1 by @knolleary in #8361

Full Changelog: v3.0.0...v3.0.1

v3.0.0

What's Changed

• docs: declare sidebar group order in section frontmatter by @dimitrieh in #8069
• build(deps-dev): bump brace-expansion from 1.1.13 to 1.1.18 by @dependabot[bot] in #8068
• build(deps): bump fast-uri from 3.1.4 to 3.1.5 by @dependabot[bot] in #8060
• fix(expert): remove dead resources answer kind from AnswerBadge by @andypalmi in #8004
• feat: rename help, admin parent, and user settings route names to kebab-case by @cstns in #8100
• feat: rename account route names to kebab-case by @cstns in #8099
• feat: rename team library route names to kebab-case by @cstns in #8101
• feat: rename low-ref team route names to kebab-case by @cstns in #8102
• feat: rename team action route names to kebab-case by @cstns in #8103
• feat: rename Home and team navigation route names to kebab-case by @cstns in #8104
• feat: rename Team and Applications route names to kebab-case by @cstns in #8105
• build(deps): bump @fastify/swagger-ui from 6.1.0 to 6.1.1 by @dependabot[bot] in #8031
• build(deps-dev): bump webpack from 5.109.0 to 5.109.2 by @dependabot[bot] in #8032
• build(deps): bump @sentry/node from 10.68.0 to 10.69.0 by @dependabot[bot] in #8034
• build(deps): bump @aws-sdk/client-sesv2 from 3.1095.0 to 3.1102.0 by @dependabot[bot] in #8035
• build(deps-dev): bump vue-tsc from 3.3.8 to 3.3.9 by @dependabot[bot] in #8036
• build(deps): bump @redis/client from 6.1.0 to 6.2.0 by @dependabot[bot] in #8039
• build(deps-dev): bump jsdom from 29.1.1 to 30.0.1 by @dependabot[bot] in #8040
• [8074] Data Farm > Teams 1 - store + team list by @n-lark in #8077
• [8110] Carried-over status search term breaks pagination on Devices and Application instance/device lists by @n-lark in #8111
• [8075] Data Farm > Teams 2 - active team + subscriber by @n-lark in #8078
• build(deps): bump @fastify/csrf-protection from 8.0.0 to 8.0.1 by @dependabot[bot] in #8038
• build(deps): bump @fastify/rate-limit from 11.1.0 to 11.2.0 by @dependabot[bot] in #8041
• build(deps-dev): bump postcss from 8.5.23 to 8.5.25 by @dependabot[bot] in #8043
• build(deps): bump fastify from 5.10.0 to 5.11.2 by @dependabot[bot] in #8042
• build(deps): bump axios from 1.18.1 to 1.19.0 by @dependabot[bot] in #8046
• build(deps): bump posthog-node from 5.46.1 to 5.47.3 by @dependabot[bot] in #8048
• build(deps-dev): bump webpack-cli from 7.2.1 to 7.2.2 by @dependabot[bot] in #8049
• build(deps): bump dompurify from 3.4.12 to 3.4.13 by @dependabot[bot] in #8150
• build(deps): bump @sentry/vue from 10.68.0 to 10.69.0 by @dependabot[bot] in #8044
• Formalize HMR dev setup with hidden webpack dev server by @cstns in #8109
• Enforce cache key is a string by @Steve-Mcl in #8019
• Change EMQX Operator version by @hardillb in #8156
• docs: Remove underscore paths by @ZJvandeWeg in #8154
• build(deps-dev): bump mocha from 11.7.6 to 11.8.0 by @dependabot[bot] in #8164
• build(deps): bump @fastify/routes from 6.0.2 to 6.0.3 by @dependabot[bot] in #8165
• build(deps-dev): bump @typescript-eslint/eslint-plugin from 8.65.0 to 8.66.0 by @dependabot[bot] in #8166
• build(deps): bump @aws-sdk/client-sesv2 from 3.1102.0 to 3.1106.0 by @dependabot[bot] in #8167
• build(deps-dev): bump cypress from 15.19.0 to 15.20.0 by @dependabot[bot] in #8168
• build(deps): bump pg from 8.22.0 to 8.23.0 by @dependabot[bot] in #8169
• build(deps): bump nodemailer from 9.0.3 to 9.0.5 by @dependabot[bot] in #8170
• build(deps): bump @fastify/static from 10.1.2 to 10.1.3 by @dependabot[bot] in #8172
• build(deps): bump marked from 18.0.7 to 18.0.9 by @dependabot[bot] in #8173
• build(deps): bump posthog-node from 5.47.3 to 5.48.1 by @dependabot[bot] in #8175
• build(deps-dev): bump @fastify/response-validation from 3.0.3 to 3.0.4 by @dependabot[bot] in #8177
• build(deps): bump @fastify/formbody from 8.0.2 to 9.0.0 by @dependabot[bot] in #8178
• build(deps): bump vue-echarts from 8.0.1 to 8.1.0 by @dependabot[bot] in #8171
• build(deps-dev): bump postcss from 8.5.25 to 8.5.26 by @dependabot[bot] in #8179
• build(deps-dev): bump eslint-plugin-cypress from 6.4.3 to 6.4.4 by @dependabot[bot] in #8180
• build(deps): bump fastify from 5.11.2 to 5.11.3 by @dependabot[bot] in #8176
• build(deps-dev): bump ws from 8.21.1 to 8.21.3 by @dependabot[bot] in #8174
• Persist session ID in sessionStorage for tab identity by @cstns in #8162
• build(deps): bump docker/login-action from 4.4.0 to 4.6.0 by @dependabot[bot] in #8033
• build(deps): bump JarvusInnovations/background-action from 1.0.7 to 2.0.0 by @dependabot[bot] in #7958
• build(deps): bump 1password/install-cli-action from 4.0.0 to 4.1.0 by @dependabot[bot] in #7959
• docs: document the project node limitations by @dimitrieh in #8071
• re-sync package-lock.json by @hardillb in #8187
• docs: clarify EMQX broker dependency and dependent features by @dimitrieh in #7759
• Add tab presence support to track user activity across sessions by @cstns in #8182
• [7839] Data Farm > Applications 4 - remaining vue + loaders by @n-lark in #8052
• [8079] Data Farm > Hosted Instances 1 - backend: lifecycle events by @n-lark in #8112
• [8080] Data Farm > Hosted Instances 2 - store + first consumer by @n-lark in #8151
• feat: rename application route names to kebab-case by @cstns in #8106
• Add platform_list_browser_sessions MCP tool by @cstns in #8184
• Add TabPresencePublisher and MCP toggle integration in ExpertButton component by @cstns in #8183
• [8081] Data Farm > Hosted Instances 3 - subscriber by @n-lark in #8153
• feat: rename Device and Instance parent route names to kebab-case by @cstns in #8191
• Apply review follow-ups to Cloud billing and quota docs by @dimitrieh in #7946
• Add missing h1s to doc pages by @sumitshinde-84 in #8193
• Add SendMqttMessageAwaitReply utility by @cstns in #8195
• Update tab-presence topics to include browser prefix and adjust condition checks by @cstns in #8194
• feat: add lint rule to enforce kebab-case route names by @cstns in #8107
• build(deps): bump cypress-io/github-action from 7.4.1 to 7.4.2 by @dependabot[bot] in #8203
• build(deps): bump fastify from 5.11.3 to 5.12.0 by @dependabot[bot] in #8211
• build(deps-dev): bump cypress from 15.20.0 to 15.20.1 by @dependabot[bot] in #8212
• build(deps): bump @fastify/multipart from 10.1.0 to 10.1.1 by @dependabot[bot] in #8210
• build(deps): bump highlight.js from 11.11.1 to 11.12.0 by @dependabot[bot] in #8197
• build(deps): bump @redis/client from 6.2.0 to 6.2.1 by @dependabot[bot] in #8205
• build(deps): bump @aws-sdk/client-sesv2 from 3.1106.0 to 3.1111.0 by @dependabot[bot] in #8201
• build(deps): bump posthog-node from 5.48.1 to 5.49.1 by @dependabot[bot] in #8207
• build(deps): bump @sentry/node from 10.69.0 to 10.70.0 by @dependabot[bot] in http...

v2.33.2

What's Changed

• Fix device agent setup for windows PowerShell instructions in quickstart.md by @Steve-Mcl in #8018
• Update device agent docs and link to from node-red by @allthedoll in #8022
• Correct broken image path by @sumitshinde-84 in #8023
• build(deps): bump aws-actions/configure-aws-credentials from 6.2.2 to 6.2.3 by @dependabot[bot] in #7961
• [8011] Typescript: API Modules > client.js → client.ts by @n-lark in #8012
• [7650] Data-farm > Applications 1 - backend: publish lifecycle events by @n-lark in #8020
• Resync package-lock.json for globals 17.9.0 by @n-lark in #8027
• [8013] Typescript: API Modules > team.js → team.ts by @n-lark in #8014
• [8015] Typescript: API Modules > devices.js → devices.ts by @n-lark in #8016
• [7651] Data-farm > Applications 2 - store + first consumer by @n-lark in #8021
• Let docs publish run while the checks are disabled by @dimitrieh in #8029
• Clarify MCP Audit Log Scope by @sumitshinde-84 in #8028
• Fix self-hosted Expert default service URL and log chat transport by @andypalmi in #8057
• Fix the mcp audit log section url by @sumitshinde-84 in #8059
• Ensure Azure Git URLs accept project names by @hardillb in #8058
• Re-enable the documentation checks by @dimitrieh in #8024
• build(deps-dev): bump undici from 7.28.0 to 7.29.0 by @dependabot[bot] in #8056
• Gate docs publishing on the two documentation checks by @dimitrieh in #8062
• [7652] Data Farm > Applications 3 - subscriber by @n-lark in #8030
• [8064] Flaky spec > Offboarding redirect sometimes lands on login page by @n-lark in #8065
• feat(mcp): shared query schema fragments for platform tools by @andypalmi in #7714
• build(deps): bump ip-address from 10.2.0 to 10.4.0 by @dependabot[bot] in #8054
• Release 2.33.2 by @hardillb in #8067

Full Changelog: v2.33.1...v2.33.2

v2.33.1

What's Changed

• docs: fix the broken screenshot and stray characters in the token scoping docs by @dimitrieh in #8010
• Release 2.33.1 by @hardillb in #8017

Full Changelog: v2.33.0...v2.33.1

v2.33.0

What's Changed

• build(deps): bump @aws-sdk/client-sesv2 from 3.1085.0 to 3.1090.0 by @dependabot[bot] in #7853
• build(deps-dev): bump @vitejs/plugin-vue from 6.0.7 to 6.0.8 by @dependabot[bot] in #7856
• build(deps): bump @fastify/cookie from 11.1.1 to 11.1.2 by @dependabot[bot] in #7859
• build(deps): bump posthog-node from 5.41.0 to 5.45.2 by @dependabot[bot] in #7860
• build(deps-dev): bump @tailwindcss/postcss from 4.3.2 to 4.3.3 by @dependabot[bot] in #7867
• build(deps-dev): bump postcss from 8.5.17 to 8.5.20 by @dependabot[bot] in #7865
• build(deps-dev): bump autoprefixer from 10.5.2 to 10.5.4 by @dependabot[bot] in #7863
• build(deps-dev): bump eslint-plugin-cypress from 6.4.2 to 6.4.3 by @dependabot[bot] in #7868
• Split live-status tracking into its own subscriber (and share one MQTT connection) - Part 1: Add attachClient/detachClient by @n-lark in #7843
• [7869] Feature flag: EMBEDDED_DASHBOARD_ENABLED by @n-lark in #7877
• Split live-status tracking into its own subscriber (and share one MQTT connection) - Part 2: Add LiveStatusSubscriber by @n-lark in #7844
• [7827] Improve UI for device status by @n-lark in #7848
• build(deps): bump @sentry/node from 10.65.0 to 10.66.0 by @dependabot[bot] in #7862
• Add application-level dashboard-instances API endpoint by @cstns in #7882
• build(deps): bump @sentry/vue from 10.65.0 to 10.67.0 by @dependabot[bot] in #7866
• Add embedded dashboard tab to instance page by @cstns in #7885
• build(deps-dev): bump ws from 8.21.0 to 8.21.1 by @dependabot[bot] in #7864
• build(deps): bump body-parser from 1.20.5 to 1.20.6 by @dependabot[bot] in #7888
• build(deps): bump shell-quote from 1.8.4 to 1.10.0 by @dependabot[bot] in #7889
• build(deps): bump tar from 7.5.16 to 7.5.20 by @dependabot[bot] in #7890
• Ensure return after res.send() called by @hardillb in #7886
• Enabled Expert Insights by default for self-hosted by @cstns in #7895
• ci: Fix database setup steps in the pre-staging init script by @ppawlowski in #7902
• ci: Fix typo in the pre-staging init script by @ppawlowski in #7903
• Fix color linting script for cross platform development by @Steve-Mcl in #7776
• fix: use a shared subscription for the Expert platform request bridge source by @andypalmi in #7893
• Fix device assignment (F3) by @Steve-Mcl in #7897
• [7874] Refactor immersive editor logic into shared composable + move shared styles by @n-lark in #7904
• Expert bridge self healing via end-2-end heartbeat monitoring by @Steve-Mcl in #7887
• [7874] Frontend: team dashboards nav entry + view by @n-lark in #7894
• [7875] Frontend: application dashboards tab by @n-lark in #7907
• [7891] Frontend: Remove feature flag + simplify shared instances component by @n-lark in #7909
• [191] Mobile signup page parity by @n-lark in #7928
• fix(mcp): resolve stacks per instance type and expose an instance's specification by @andypalmi in #7908
• [123] f2 prevent diffing wrong snapshot by @hardillb in #7884
• Fix device group snapshot assignment (F5) by @Steve-Mcl in #7901
• 123 f6 cross team mcp registration by @hardillb in #7892
• Remove deprecated Starter and Team tiers from docs by @dimitrieh in #7930
• [7849] Carried-over search term from Home status tiles breaks pagination on Hosted Instances list by @n-lark in #7925
• docs: Kubernetes hardening by @ppawlowski in #7846
• build(deps): bump fast-uri from 3.1.2 to 3.1.4 by @dependabot[bot] in #7940
• Resync package-lock.json by @hardillb in #7945
• build(deps): bump find-my-way from 9.6.0 to 9.7.0 by @dependabot[bot] in #7941
• build(deps): bump tar from 7.5.20 to 7.5.22 by @dependabot[bot] in #7943
• build(deps): bump @fastify/static from 10.1.0 to 10.1.2 by @dependabot[bot] in #7942
• build(deps-dev): bump immutable from 5.1.5 to 5.1.9 by @dependabot[bot] in #7929
• Fix expert chat input focus on drawer open and after MQTT response by @cstns in #7933
• Fix: related flows hidden after non-streamed render by @andypalmi in #7948
• [7926] Frontend: dashboard buttons open embedded viewer or direct link by @n-lark in #7938
• build(deps): bump google-auth-library from 10.9.0 to 10.9.1 by @dependabot[bot] in #7973
• build(deps): bump marked from 18.0.6 to 18.0.7 by @dependabot[bot] in #7974
• build(deps): bump @aws-sdk/credential-provider-node from 3.972.70 to 3.972.72 by @dependabot[bot] in #7970
• build(deps-dev): bump webpack-dev-server from 5.2.5 to 5.2.6 by @dependabot[bot] in #7947
• build(deps-dev): bump eslint-plugin-vue from 10.9.2 to 10.10.0 by @dependabot[bot] in #7953
• build(deps-dev): bump @typescript-eslint/eslint-plugin from 8.64.0 to 8.65.0 by @dependabot[bot] in #7957
• build(deps): bump @sentry/vue from 10.67.0 to 10.68.0 by @dependabot[bot] in #7956
• build(deps-dev): bump html-webpack-plugin from 5.6.7 to 5.6.8 by @dependabot[bot] in #7962
• build(deps-dev): bump vue-tsc from 3.3.7 to 3.3.8 by @dependabot[bot] in #7963
• build(deps-dev): bump sinon from 22.0.0 to 22.1.0 by @dependabot[bot] in #7964
• build(deps): bump @sentry/node from 10.66.0 to 10.68.0 by @dependabot[bot] in #7965
• build(deps-dev): bump sass from 1.101.0 to 1.102.0 by @dependabot[bot] in #7960
• build(deps): bump @aws-sdk/client-sesv2 from 3.1090.0 to 3.1095.0 by @dependabot[bot] in #7967
• build(deps): bump posthog-node from 5.45.2 to 5.46.1 by @dependabot[bot] in #7968
• build(deps-dev): bump webpack from 5.108.4 to 5.109.0 by @dependabot[bot] in #7969
• build(deps-dev): bump postcss from 8.5.20 to 8.5.23 by @dependabot[bot] in #7971
• build(deps-dev): bump cypress from 15.18.1 to 15.19.0 by @dependabot[bot] in #7972
• build(deps-dev): bump @vitest/coverage-istanbul from 4.1.9 to 4.1.10 by @dependabot[bot] in #7814
• fix(mcp): forward device comms to platform automation tool calls by @andypalmi in #7936
• [7926] Frontend: Search for dashboard drawer & expert button bug by @n-lark in #7939
• [7883] Paginating hosted instances can return an incorrect count which leads to a blank page at the end of results by @n-lark in #7976
• [7876] Remote instances: consolidate buttons on details page and move status column on list by @n-lark in #7975
• fix(mcp): stop empty UI-tool errors and tighten tool-usage guardrails by @andypalmi in #7911
• build(deps): bump actions/checkout from 7.0.0 to 7.0.1 by @dependabot[bot] in #7855
• build(deps): bump actions/setup-node from 6.4.0 to 7.0.0 by @dependabot[bot] in #7852
• fix(tables): include schema in tables list, fix data queries and show schema in UI by @andypalmi in #7951
• Add platform tool catalog fingerprint and hashOnly mode by @andypalmi in #7840
• Add session persistence, session timer recovery, and store reset methods by @cstns in #7932
• Fix: guide header steps disappear after reopening expert drawer by @andypalmi in #7991
• fix(tables): make the feature-gate 404 message explici...

v2.32.1

What's Changed

• Device agent 4 related documentation update by @sumitshinde-84 in #7658
• Documentation Update For 2.32 by @sumitshinde-84 in #7656
• Upgrade echarts for XSS CVE by @hardillb in #7657
• fix(expert): dismiss pending tool-approval cards when a new message is sent by @andypalmi in #7663
• build(deps): bump nodemailer from 9.0.1 to 9.0.3 by @dependabot[bot] in #7738
• build(deps): bump @aws-sdk/credential-provider-node from 3.972.58 to 3.972.62 by @dependabot[bot] in #7742
• build(deps): bump @node-red/util from 5.0.0 to 5.0.1 by @dependabot[bot] in #7753
• build(deps): bump @redis/client from 6.0.1 to 6.1.0 by @dependabot[bot] in #7746
• build(deps-dev): bump @tailwindcss/postcss from 4.3.1 to 4.3.2 by @dependabot[bot] in #7752
• build(deps): bump @aws-sdk/client-sesv2 from 3.1075.0 to 3.1079.0 by @dependabot[bot] in #7751
• chore(expert): tool-permissions review follow-ups (comments + generic JsonViewer) by @andypalmi in #7730
• Add PAT scope foundation: request-context plugin, permission tagging, migrations, and models by @cstns in #7580
• ci: Replace custom scripts with slack_notification action in Tests workflow by @ppawlowski in #7762
• ci: Replace custom scripts with slack_notification action in Publish workflow by @ppawlowski in #7764
• ci: Replace custom scripts with slack_notification action in Install Test workflow by @ppawlowski in #7763
• ci: Replace manual scripts with slack_notification action in Create pre-staging environment by @ppawlowski in #7761
• Fix escaping in npm scripts in package.json by @Steve-Mcl in #7771
• chore: Upgrade eslint to v9 by @Steve-Mcl in #7760
• Remove @node-red/util dependency by @Steve-Mcl in #7768
• ci: Add slack notification to the release pipeline by @ppawlowski in #7779
• Enabled Expert Insights by default for self-hosted by @cstns in #7773
• fix: normalise Expert inbound origins to bare origin by @andypalmi in #7783
• [7446] Scoped PATs: API routes and controllers by @cstns in #7766
• Fix navigation for custom editor paths by @cstns in #7784
• fix: backfill adminOptIn for existing admin PATs by @cstns in #7785
• Scoped PATs: permission enforcement by @cstns in #7777
• build(deps): bump cypress-io/github-action from 7.4.0 to 7.4.1 by @dependabot[bot] in #7739
• build(deps): bump docker/setup-qemu-action from 4.1.0 to 4.2.0 by @dependabot[bot] in #7737
• build(deps): bump docker/setup-buildx-action from 4.1.0 to 4.2.0 by @dependabot[bot] in #7744
• build(deps): bump docker/login-action from 4.2.0 to 4.4.0 by @dependabot[bot] in #7745
• build(deps): bump docker/build-push-action from 7.2.0 to 7.3.0 by @dependabot[bot] in #7741
• Set admin flag on pre-staging setup token by @knolleary in #7788
• Add generic means for logging additional properties and add to acl routes by @knolleary in #7819
• build(deps): bump aws-actions/configure-aws-credentials from 6.2.1 to 6.2.2 by @dependabot[bot] in #7792
• fix: sanitise OpenMetrics metric names in admin stats endpoint by @ppawlowski in #7787
• docs: Introduce Kubernetes/FlowFuse observability documentation by @ppawlowski in #7769
• build(deps): bump @aws-sdk/credential-provider-node from 3.972.62 to 3.972.66 by @dependabot[bot] in #7813
• build(deps): bump dompurify from 3.4.11 to 3.4.12 by @dependabot[bot] in #7812
• build(deps): bump lru-cache from 11.5.1 to 11.5.2 by @dependabot[bot] in #7797
• build(deps): bump mqtt from 5.15.1 to 5.15.2 by @dependabot[bot] in #7801
• Use shared subscription group for Expert platform requests by @Steve-Mcl in #7823
• Introduce status field to Device model for better representation of state by @Steve-Mcl in #7828
• Skip offline devices in Expert API to avoid unnecessary timeouts by @Steve-Mcl in #7831
• [7833] Flaky HA unit test + update cypress config by @n-lark in #7834
• build(deps-dev): bump systeminformation from 5.31.6 to 5.31.17 by @dependabot[bot] in #7835
• build(deps): bump websocket-driver from 0.7.4 to 0.7.5 by @dependabot[bot] in #7836
• build(deps): bump @aws-sdk/client-sesv2 from 3.1079.0 to 3.1085.0 by @dependabot[bot] in #7793
• [7653] New instance creation fails to load immersive editor/FlowFuse Expert by @n-lark in #7661
• build(deps-dev): bump webpack from 5.108.1 to 5.108.4 by @dependabot[bot] in #7756
• build(deps): bump @sentry/node from 10.62.0 to 10.65.0 by @dependabot[bot] in #7791
• build(deps): bump @fastify/helmet from 13.0.2 to 13.1.0 by @dependabot[bot] in #7794
• build(deps-dev): bump vue-tsc from 3.3.5 to 3.3.7 by @dependabot[bot] in #7795
• build(deps): bump @fastify/websocket from 11.2.0 to 11.3.0 by @dependabot[bot] in #7796
• build(deps): bump @fastify/cookie from 11.0.2 to 11.1.1 by @dependabot[bot] in #7798
• build(deps): bump @fastify/static from 9.1.3 to 10.1.0 by @dependabot[bot] in #7799
• build(deps-dev): bump cypress from 15.18.0 to 15.18.1 by @dependabot[bot] in #7803
• build(deps): bump @fastify/swagger-ui from 6.0.0 to 6.1.0 by @dependabot[bot] in #7805
• build(deps-dev): bump @typescript-eslint/parser from 8.62.1 to 8.63.0 by @dependabot[bot] in #7816
• build(deps): bump fastify from 5.9.0 to 5.10.0 by @dependabot[bot] in #7748
• build(deps-dev): bump webpack-cli from 7.1.0 to 7.2.1 by @dependabot[bot] in #7740
• build(deps): bump marked from 18.0.5 to 18.0.6 by @dependabot[bot] in #7802
• build(deps-dev): bump postcss from 8.5.16 to 8.5.17 by @dependabot[bot] in #7806
• build(deps): bump @fastify/multipart from 10.0.0 to 10.1.0 by @dependabot[bot] in #7807
• build(deps): bump @fastify/swagger from 9.7.0 to 9.8.1 by @dependabot[bot] in #7800
• build(deps): bump posthog-node from 5.38.6 to 5.41.0 by @dependabot[bot] in #7808
• build(deps): bump @sentry/vue from 10.62.0 to 10.65.0 by @dependabot[bot] in #7809
• Fix MCP feature enumeration with with cap, deadline and per instance fault containement by @Steve-Mcl in #7841
• Add source column to AuditLog with request context propagation by @cstns in #7825
• Validate resource ownership in broker api by @knolleary in #7845
• Inject source context headers in MCP tool calls by @cstns in #7830
• build(deps-dev): bump @typescript-eslint/eslint-plugin from 8.62.1 to 8.64.0 by @dependabot[bot] in #7804
• Add granular RBAC SSO support by @hardillb in #7733
• Fix pipeline stage validations by @knolleary in #7850
• fix: enable default maintenance schedule for opt-out tiers on instance creation by @robmarcer in #7822
• Release 2.32.1 by @hardillb in #7851

Full Changelog: v2.32.0...v2.32.1

v2.32.0

What's Changed

• build(deps): bump vite, @vitejs/plugin-vue, @vitest/coverage-istanbul and vitest by @dependabot[bot] in #7520
• build(deps-dev): bump esbuild from 0.25.3 to 0.25.12 by @dependabot[bot] in #7546
• build(deps-dev): bump cypress from 15.14.2 to 15.17.0 by @dependabot[bot] in #7534
• build(deps): bump qs and express by @dependabot[bot] in #7547
• build(deps-dev): bump webpack-cli from 7.0.2 to 7.0.3 by @dependabot[bot] in #7541
• build(deps-dev): bump @vue/test-utils from 2.4.6 to 2.4.11 by @dependabot[bot] in #7531
• build(deps): bump @fastify/swagger from 9.6.1 to 9.7.0 by @dependabot[bot] in #7535
• [7320] Live team updates over MQTT/WS by @n-lark in #7327
• feat: improve markdown rendering in Expert panel by @andypalmi in #7512
• [7408] Typescript: API Modules - Utils by @n-lark in #7409
• [7550] Fix rbac specs failing in CI by @n-lark in #7555
• [7569] Device editor: redirect parent instead of iframe (flowfuse frontend) by @n-lark in #7570
• Add httpTokens end points for Devices by @knolleary in #7568
• build(deps): bump dompurify from 3.4.10 to 3.4.11 by @dependabot[bot] in #7575
• build(deps): bump nodemailer from 9.0.0 to 9.0.1 by @dependabot[bot] in #7576
• Fix Dark Mode OS icons being unreadable by @hardillb in #7574
• build(deps-dev): bump jsdom from 25.0.1 to 29.1.1 by @dependabot[bot] in #7537
• build(deps-dev): bump css-loader from 7.1.2 to 7.1.4 by @dependabot[bot] in #7474
• build(deps): bump pg from 8.21.0 to 8.22.0 by @dependabot[bot] in #7593
• build(deps-dev): bump @typescript-eslint/eslint-plugin from 8.58.0 to 8.61.1 by @dependabot[bot] in #7592
• build(deps): bump posthog-node from 5.37.0 to 5.38.2 by @dependabot[bot] in #7588
• build(deps-dev): bump eslint-plugin-promise from 6.1.1 to 6.6.0 by @dependabot[bot] in #7529
• build(deps-dev): bump sass from 1.97.3 to 1.101.0 by @dependabot[bot] in #7533
• build(deps): bump ldapts from 7.0.12 to 8.1.8 by @dependabot[bot] in #7594
• Bump @node-red/util from 4.1.2 to 5.0.0 by @dependabot[bot] in #7463
• build(deps-dev): bump ts-loader from 9.6.0 to 9.6.1 by @dependabot[bot] in #7584
• build(deps): bump @aws-sdk/credential-provider-node from 3.972.55 to 3.972.57 by @dependabot[bot] in #7583
• build(deps-dev): bump style-loader from 3.3.4 to 4.0.0 by @dependabot[bot] in #7540
• build(deps): bump semver from 7.8.4 to 7.8.5 by @dependabot[bot] in #7587
• Bump vue3-google-login from 2.0.33 to 2.1.4 by @dependabot[bot] in #7467
• build(deps): bump @sentry/node from 10.57.0 to 10.59.0 by @dependabot[bot] in #7589
• build(deps): bump uuid from 14.0.0 to 14.0.1 by @dependabot[bot] in #7591
• build(deps): bump @sentry/vue from 10.54.0 to 10.59.0 by @dependabot[bot] in #7595
• Bump cross-env from 7.0.3 to 10.1.0 by @dependabot[bot] in #7470
• build(deps): bump dotenv from 16.4.5 to 17.4.2 by @dependabot[bot] in #7502
• build(deps-dev): bump dotenv-webpack from 8.0.1 to 9.0.0 by @dependabot[bot] in #7468
• [7154] Follow Up: Poor UX when editor is disabled in immersive mode by @n-lark in #7180
• build(deps-dev): bump autoprefixer from 10.4.16 to 10.5.0 by @dependabot[bot] in #7532
• build(deps-dev): bump @types/mqtt from 0.0.34 to 2.5.0 by @dependabot[bot] in #7539
• [7578] Hosted Instances search field auto-submits and clears input when no matching results are found by @n-lark in #7597
• build(deps-dev): bump @tailwindcss/postcss from 4.2.4 to 4.3.1 by @dependabot[bot] in #7459
• [7521] Sync FlowFuse theme preference into the embedded Node-RED editor by @n-lark in #7523
• Store device nodejs version by @hardillb in #7577
• build(deps-dev): bump mini-css-extract-plugin from 2.9.0 to 2.10.2 by @dependabot[bot] in #7471
• build(deps): bump actions/checkout from 6.0.3 to 7.0.0 by @dependabot[bot] in #7585
• build(deps): bump @aws-sdk/client-sesv2 from 3.988.0 to 3.1073.0 by @dependabot[bot] in #7582
• Combine several dependabot Fastify updates by @hardillb in #7600
• Switch to v5 mqtt protocol in commsClient configuration by @Steve-Mcl in #7603
• Ensure Project name and safeName used when suspending Team by @hardillb in #7605
• ci: send tests failure Slack notification directly to a user by @ppawlowski in #7607
• UI for device HTTP Tokens by @knolleary in #7579
• build(deps): bump google-auth-library from 10.7.0 to 10.9.0 by @dependabot[bot] in #7616
• build(deps): bump @aws-sdk/credential-provider-node from 3.972.57 to 3.972.58 by @dependabot[bot] in #7618
• build(deps): bump aws-actions/configure-aws-credentials from 6.2.0 to 6.2.1 by @dependabot[bot] in #7617
• build(deps): bump fastify from 5.8.5 to 5.9.0 by @dependabot[bot] in #7621
• build(deps): bump @redis/client from 6.0.0 to 6.0.1 by @dependabot[bot] in #7625
• build(deps-dev): bump postcss from 8.5.15 to 8.5.16 by @dependabot[bot] in #7627
• build(deps-dev): bump ts-loader from 9.6.1 to 9.6.2 by @dependabot[bot] in #7628
• build(deps): bump axios from 1.18.0 to 1.18.1 by @dependabot[bot] in #7631
• build(deps-dev): bump cypress from 15.17.0 to 15.18.0 by @dependabot[bot] in #7633
• build(deps-dev): bump @typescript-eslint/parser from 8.61.1 to 8.62.0 by @dependabot[bot] in #7632
• build(deps-dev): bump @typescript-eslint/eslint-plugin from 8.61.1 to 8.62.0 by @dependabot[bot] in #7613
• build(deps): bump @sentry/vue from 10.59.0 to 10.62.0 by @dependabot[bot] in #7629
• build(deps): bump @aws-sdk/client-sesv2 from 3.1073.0 to 3.1075.0 by @dependabot[bot] in #7626
• build(deps): bump @fastify/rate-limit from 11.0.0 to 11.1.0 by @dependabot[bot] in #7630
• build(deps): bump @sentry/node from 10.59.0 to 10.62.0 by @dependabot[bot] in #7624
• build(deps): bump marked from 15.0.7 to 18.0.5 by @dependabot[bot] in #7506
• [5294] Git Integration in a DevOps Pipeline by @n-lark in #7435
• build(deps): bump fastify-metrics from 13.2.0 to 13.2.1 by @dependabot[bot] in #7623
• build(deps): bump posthog-node from 5.38.2 to 5.38.6 by @dependabot[bot] in #7611
• build(deps-dev): bump autoprefixer from 10.5.0 to 10.5.2 by @dependabot[bot] in #7615
• build(deps-dev): bump webpack from 5.107.2 to 5.108.1 by @dependabot[bot] in #7619
• build(deps-dev): bump webpack-cli from 7.0.3 to 7.1.0 by @dependabot[bot] in #7622
• build(deps-dev): bump nyc from 15.1.0 to 18.0.0 by @dependabot[bot] in #7590
• build(deps): bump untitaker/hyperlink from 0.2.1 to 0.3.2 by @dependabot[bot] in #7612
• build(deps): bump actions/cache from 5.0.5 to 6.1.0 by @dependabot[bot] in #7614
• Remove postcss-preset-env dependency by @n-lark in #7636
• build(deps): bump @headlessui/vue from 1.7.19 to 1.7.23 by @dependabot[bot] in #7484
• [7324] Replace HTTP polling of instance / device status with MQTT-over-WS by @n-lark in #7573
• feat(expert): grouped clarifying questions UI + render robustness (#407) by @andypalmi in https://github.com/FlowFuse/fl...

v2.31.3

What's Changed

• Bump babel-loader from 9.2.1 to 10.1.1 by @dependabot[bot] in #7392
• Bump shell-quote from 1.8.1 to 1.8.4 by @dependabot[bot] in #7404
• ci: Add Node-RED 5 stack to a pre-staging environment by @ppawlowski in #7391
• Pinning Remote Instances default NR to 4.1.x by @hardillb in #7412
• ci: Run single-replica emqx cluster on pre-staging environments by @ppawlowski in #7413
• [6343] Descriptive Page Titles by @n-lark in #7362
• [7400] Overflow menu is clipped by Expert by @n-lark in #7406
• [7307] Dark Mode by @n-lark in #7360
• fix: ListBox options cropped to trigger width for icon-only buttons by @andypalmi in #7415
• [17] Sentry Upgrade: v7 → v10 & drop unused Replay/Performance/Cron/Profiling collection by @n-lark in #7345
• Bump @babel/helpers from 7.26.9 to 7.29.7 by @dependabot[bot] in #7421
• [7257] Add proper pagination to Hosted and Remote Instances pages + N+1 fix for Hosted Instances by @n-lark in #7353
• Add hint to SSO SAML authentication query parameters by @hardillb in #7420
• docs: fix typo in hardware introduction by @meichuanyi in #7442
• ci: Increase the number of PRs created by dependabot to 30 by @ppawlowski in #7450
• Bump aws-actions/amazon-ecr-login from 2.1.5 to 2.1.6 by @dependabot[bot] in #7464
• Bump tailwindcss from 4.3.0 to 4.3.1 by @dependabot[bot] in #7469
• Bump codecov/codecov-action from 6.0.1 to 7.0.0 by @dependabot[bot] in #7461
• Bump axios from 1.16.0 to 1.17.0 by @dependabot[bot] in #7473
• Bump untitaker/hyperlink from 0.2.0 to 0.2.1 by @dependabot[bot] in #7394
• Bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in #7393
• Bump mocha from 11.7.5 to 11.7.6 by @dependabot[bot] in #7476
• Bump html-webpack-plugin from 5.6.0 to 5.6.7 by @dependabot[bot] in #7475
• Bump docker/setup-qemu-action from 4.0.0 to 4.1.0 by @dependabot[bot] in #7366
• Bump aws-actions/configure-aws-credentials from 6.1.1 to 6.2.0 by @dependabot[bot] in #7365
• Bump cypress-io/github-action from 7.3.0 to 7.4.0 by @dependabot[bot] in #7364
• Bump 1password/install-cli-action from 3.0.0 to 4.0.0 by @dependabot[bot] in #7466
• Bump @fastify/static from 9.1.2 to 9.1.3 by @dependabot[bot] in #7472
• Bump @babel/core from 7.26.9 to 7.29.7 by @dependabot[bot] in #7457
• ci: Increase the number of PRs created by dependabot to 50 by @ppawlowski in #7480
• build(deps): bump qrcode from 1.5.3 to 1.5.4 by @dependabot[bot] in #7498
• Bump sinon from 21.1.2 to 22.0.0 by @dependabot[bot] in #7488
• build(deps-dev): bump tmp from 0.2.6 to 0.2.7 by @dependabot[bot] in #7510
• build(deps): bump tar from 7.5.13 to 7.5.16 by @dependabot[bot] in #7519
• build(deps-dev): bump ws from 8.20.1 to 8.21.0 by @dependabot[bot] in #7511
• build(deps): bump form-data from 4.0.5 to 4.0.6 by @dependabot[bot] in #7517
• build(deps): bump nodemailer from 8.0.5 to 8.0.9 by @dependabot[bot] in #7518
• build(deps): bump tar-stream from 3.1.7 to 3.2.0 by @dependabot[bot] in #7501
• Bump vue from 3.5.30 to 3.5.38 by @dependabot[bot] in #7485
• build(deps): bump yaml from 2.8.3 to 2.9.0 by @dependabot[bot] in #7489
• build(deps-dev): bump ts-loader from 9.5.7 to 9.6.0 by @dependabot[bot] in #7507
• Bump @sentry/node from 10.54.0 to 10.57.0 by @dependabot[bot] in #7486
• build(deps): bump semver from 7.6.3 to 7.8.4 by @dependabot[bot] in #7496
• Bump eslint-plugin-no-only-tests from 3.3.0 to 3.4.0 by @dependabot[bot] in #7449
• build(deps): bump pg from 8.16.3 to 8.21.0 by @dependabot[bot] in #7505
• Bump fastify-metrics from 12.1.0 to 13.2.0 by @dependabot[bot] in #7478
• build(deps): bump launch-editor from 2.10.0 to 2.14.1 by @dependabot[bot] in #7516
• build(deps): bump posthog-node from 5.33.2 to 5.37.0 by @dependabot[bot] in #7528
• build(deps-dev): bump ajv from 8.18.0 to 8.20.0 by @dependabot[bot] in #7494
• build(deps): bump @aws-sdk/credential-provider-node from 3.972.7 to 3.972.55 by @dependabot[bot] in #7483
• build(deps): bump lru-cache from 11.2.7 to 11.5.1 by @dependabot[bot] in #7455
• build(deps-dev): bump postcss-loader from 8.1.1 to 8.2.1 by @dependabot[bot] in #7508
• build(deps-dev): bump webpack-dev-server from 5.2.4 to 5.2.5 by @dependabot[bot] in #7497
• build(deps): bump dompurify from 3.4.0 to 3.4.10 by @dependabot[bot] in #7503
• build(deps): bump google-auth-library from 10.5.0 to 10.7.0 by @dependabot[bot] in #7448
• build(deps): bump mqtt from 5.10.3 to 5.15.1 by @dependabot[bot] in #7454
• docs: explain upgrading the Node-RED version via Stacks by @robmarcer in #7444
• build(deps-dev): bump webpack from 5.105.0 to 5.107.2 by @dependabot[bot] in #7487
• Allow CertNode token to include catalogue URLS by @hardillb in #7428
• build(deps): bump axios from 1.17.0 to 1.18.0 by @dependabot[bot] in #7536
• build(deps): bump nodemailer from 8.0.9 to 9.0.0 by @dependabot[bot] in #7524
• build(deps): bump pino from 8.19.0 to 10.3.1 by @dependabot[bot] in #7527
• build(deps-dev): bump vue-tsc from 3.2.6 to 3.3.5 by @dependabot[bot] in #7526
• build(deps): bump pino-pretty from 10.3.1 to 13.1.3 by @dependabot[bot] in #7530
• Remove ffhttp token scope by @hardillb in #7543
• Release 2.31.3 by @knolleary in #7545

New Contributors

• @meichuanyi made their first contribution in #7442

Full Changelog: v2.31.2...v2.31.3

v2.31.2

What's Changed

• ci: point docs link checker at website/nuxt/dist by @dimitrieh in #7381
• docs: fix broken persistent-context image link by @dimitrieh in #7382
• Bump @redis/client from 5.11.0 to 6.0.0 by @dependabot[bot] in #7363
• docs: update FlowFuse Expert docs for 2.31 release by @sumitshinde-84 in #7378
• Update AI configuration description for licensing by @hardillb in #7390
• [7385] Expert Tools row not available on device by @n-lark in #7386
• fix: await DOM flush before rendering snapshot comparison by @andypalmi in #7398
• Fix ignored paths in webpack watch options by @Steve-Mcl in #7384
• fix: snapshots list dropdown not flexible on resize by @andypalmi in #7399
• Align Expert FF Expert chat and MCP endpoints by @Steve-Mcl in #7389
• [7356] Add cookie consent on login page by @n-lark in #7387
• Release 2.31.1 by @hardillb in #7402
• Release 2.31.2 by @hardillb in #7403

Full Changelog: v2.31.0...v2.31.2

v2.31.0

What's Changed

• Bump fast-uri from 3.1.0 to 3.1.2 by @dependabot[bot] in #7239
• Bump fast-xml-builder from 1.1.5 to 1.2.0 by @dependabot[bot] in #7236
• Bump @babel/plugin-transform-modules-systemjs from 7.24.1 to 7.29.4 by @dependabot[bot] in #7238
• ci: Build pre-staging environments on node 24 container by @ppawlowski in #7247
• ci: enable dependabot cooldown by @ppawlowski in #7248
• Bump systeminformation from 5.31.5 to 5.31.6 by @dependabot[bot] in #7249
• Bump minimatch from 10.1.1 to 10.2.5 by @dependabot[bot] in #7251
• Bump qs and body-parser by @dependabot[bot] in #7252
• Added a missing keycloack SSO setup required step by @robmarcer in #7284
• Bump diff from 5.2.0 to 9.0.0 by @dependabot[bot] in #7240
• Bump webpack-dev-server from 5.2.1 to 5.2.4 by @dependabot[bot] in #7286
• Update copy-webpack-plugin to pull new glob by @hardillb in #7288
• Bump mocha and copy-webpack-plugin by @hardillb in #7287
• Allow valid npm package names to be deployed via pipelines by @hardillb in #7294
• [7141] Bump tailwindcss from 2.2.19 to 4.2.1 by @n-lark in #7203
• Manually bump ws to 8.20.1 by @hardillb in #7297
• Bump aws-actions/configure-aws-credentials from 6.1.0 to 6.1.1 by @dependabot[bot] in #7241
• Bump aws-actions/amazon-ecr-login from 2.1.4 to 2.1.5 by @dependabot[bot] in #7242
• Bump slackapi/slack-github-action from 3.0.2 to 3.0.3 by @dependabot[bot] in #7189
• ci: Switch tagging approach for internal reusable workflows by @ppawlowski in #7298
• Bump benc-uk/workflow-dispatch from 1.3.1 to 1.3.2 by @dependabot[bot] in #7299
• Bump tailwindcss from 4.2.4 to 4.3.0 by @dependabot[bot] in #7245
• [7126] Tighten response schemas: add required and additionalProperties: false by @n-lark in #7131
• Bump codecov/codecov-action from 6.0.0 to 6.0.1 by @dependabot[bot] in #7290
• Bump protobufjs from 7.5.6 to 7.6.0 by @dependabot[bot] in #7309
• Fix dev/prod CSS loader inconsistencies causing cascade ordering mismatches by @cstns in #7304
• Bump @tootallnate/once and @sentry/profiling-node by @dependabot[bot] in #7227
• Bump actions/create-github-app-token from 3.1.1 to 3.2.0 by @dependabot[bot] in #7291
• Include updatedAt timestamp in MQTTTopicSchema by @hardillb in #7246
• Fix Team Broker response to match schema by @hardillb in #7323
• Adjust tab option margins for consistent spacing in ff-components by @cstns in #7301
• ci: Update website links validation method in Publish Documentation workflow by @ppawlowski in #7341
• Add section on private CA to k8s install instructions by @hardillb in #7328
• Bump nodemon from 3.1.7 to 3.1.14 by @dependabot[bot] in #7337
• docs: Clarify how to use TLS from a private Certificate Authority in the docker deployment by @ppawlowski in #7344
• Bump webpack-cli from 5.1.4 to 7.0.2 by @dependabot[bot] in #7336
• feat: update support agent initial sentence by @andypalmi in #7349
• ci: Improve pre-staging forge container image size by @ppawlowski in #7329
• chore: Bump docker/setup-buildx-action from 4.0.0 to 4.1.0 by @dependabot[bot] in #7339
• Bump docker/build-push-action from 7.1.0 to 7.2.0 by @dependabot[bot] in #7338
• Bump docker/login-action from 4.1.0 to 4.2.0 by @dependabot[bot] in #7340
• Bump tmp from 0.2.4 to 0.2.6 by @dependabot[bot] in #7351
• Add automated EMQX bridge setup for Expert broker by @Steve-Mcl in #7184
• Register startup and weekly tasks in expert module by @Steve-Mcl in #7357
• docs: update Cloud free trial length from 14 to 30 days by @dimitrieh in #7358
• Introduce generic ai platform and team type feature flag by @cstns in #7317
• Gate snapshot description and inline completions flags behind assistant config by @cstns in #7318
• Add documentation for soft launch enablement using PostHog feature flags by @cstns in #7343
• Enforce AI feature dependency checks for feature flags and assistant-… by @cstns in #7319
• docs: add ai.enabled platform configuration and team type feature by @cstns in #7321
• Fix inconsistend backend gating of snapshot description endpoint by @cstns in #7330
• Add team level support for expert features by @cstns in #7331
• Handle duplicate expert messages by @Steve-Mcl in #7372
• Document team-level and platform-level AI feature management options by @cstns in #7335
• Allow per-team cert nodes catalogues via admin override by @knolleary in #7369
• [5637] Upgrade hericons to v 2.1.5 by @n-lark in #7308
• Fix: Add type: 'object' to schema roots with required to silence AJV strictTypes warning on startup by @n-lark in #7375
• Validate snapshot owner in device api by @knolleary in #7377
• Update available Node-RED Versions for Application Devices by @Steve-Mcl in #7373
• Release 2.31.0 by @hardillb in #7379

Full Changelog: v2.30.1...v2.31.0