This release adds 1 notable feature for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
Summary
AI summaryFixed BIGINT overflow in ignored_nodes.nodeNum to support full unsigned 32-bit Meshtastic node numbers.
Full changelog
What's Changed
Features
- Allow disabling rate limits via environment variables — Set
RATE_LIMIT_API,RATE_LIMIT_AUTH, orRATE_LIMIT_MESSAGEStounlimited,0, or-1to disable rate limiting for users behind authenticating reverse proxies or on private networks (#1981)
Bug Fixes
- Fix ignored_nodes.nodeNum BIGINT overflow — Upgraded
ignored_nodes.nodeNumfrom INTEGER to BIGINT for PostgreSQL/MySQL to support full unsigned 32-bit Meshtastic node numbers. Fixes #1973 (#1975) - Fix telemetry icons flickering on map load — Prevent telemetry cache invalidation from clearing cached data, preserving stale data over empty data during cache transitions (#1974)
- Fix auto-upgrade sidecar port mapping loss — Simplified the auto-upgrade sidecar script to prevent Docker port mappings from being lost during upgrades (#1977)
- Fix nodes with default shortName falsely classified as incomplete — Nodes using the default Meshtastic short name are no longer hidden by the "hide incomplete nodes" filter (#1972)
- Fix filter popup Reset All button — The Reset All button in the filter popup now correctly resets all filters (#1971)
- Fix premature new node notifications — New node notifications are now deferred until node info is fully populated, preventing notifications with missing data (#1970)
- Fix map preference persistence —
showAccuracyRegionsandshowEstimatedPositionsmap settings now persist across page reloads (#1969) - Remove incorrect "Desktop Only" label from packet monitor — The packet monitor works on all platforms, not just desktop (#1983)
- Fix MySQL migration idempotency — Fixed MySQL migrations 061 and 077 to correctly detect existing columns and avoid duplicate column/primary key errors (#1982)
CI/Infrastructure
- Add Node.js 25.x to CI test matrix (#1979)
Full Changelog: https://github.com/Yeraze/meshmonitor/compare/v3.6.4...v3.6.5
🚀 MeshMonitor v3.6.5
📦 Installation
Docker (recommended):
docker run -d \
--name meshmonitor \
-p 8080:3001 \
-v meshmonitor-data:/data \
ghcr.io/Yeraze/meshmonitor:3.6.5
🧪 Testing
✅ All tests passed
✅ TypeScript checks passed
✅ Docker images built for linux/amd64, linux/arm64, linux/arm/v7
📋 Changes
See commit history for detailed changes.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Yeraze/meshmonitor
All releases →Related context
Related tools
Earlier breaking changes
- v4.7.2 Route `destination` field now rejects non‑8‑hex nodeId or 64‑hex publicKey, returning HTTP 400.
Beta — feedback welcome: [email protected]