This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
Summary
AI summaryFix rate limiter IPv4-mapped IPv6 subnet masking so each IPv4 client receives its own bucket.
Full changelog
What's Changed
Features
- Add homoglyph message optimization setting — New setting to enable homoglyph character normalization for message display. Fixes #1997 (#2000)
- Add HAM Licensed checkbox to Node Identity settings — Restores the missing HAM license checkbox in node identity configuration. Fixes #1998 (#1999)
- Add location sharing status to channel overview — Channel overview now shows whether location sharing is enabled per channel. Fixes #1985 (#1986)
Bug Fixes
- Fix rate limiter IPv4-mapped IPv6 subnet masking — All IPv4 clients were sharing a single rate limit bucket because the default
ipKeyGeneratorapplied a/56subnet mask to::ffff:x.x.x.xaddresses, zeroing out the IPv4 data. Each IPv4 client now gets its own bucket. Fixes #1980 (#2001) - Fix NodeInfo broadcasting settings not saving — Added NodeInfo broadcast settings to the validKeys whitelist so they persist correctly. Fixes #1989 (#1990)
Documentation
- Add Community Add-ons section — New documentation for community add-ons including the AI Responder (#1987)
Dependencies
- Bump @typescript-eslint/eslint-plugin from 8.55.0 to 8.56.0 (#1994)
- Bump development dependencies group with 2 updates (#1991)
Full Changelog: https://github.com/Yeraze/meshmonitor/compare/v3.6.5...v3.6.6
🚀 MeshMonitor v3.6.6
📦 Installation
Docker (recommended):
docker run -d \
--name meshmonitor \
-p 8080:3001 \
-v meshmonitor-data:/data \
ghcr.io/Yeraze/meshmonitor:3.6.6
🧪 Testing
✅ All unit tests passed (16/16 rate limiter tests)
✅ All 10 system tests passed
✅ TypeScript checks passed
🚀 MeshMonitor v3.6.6
📦 Installation
Docker (recommended):
docker run -d \
--name meshmonitor \
-p 8080:3001 \
-v meshmonitor-data:/data \
ghcr.io/Yeraze/meshmonitor:3.6.6
🧪 Testing
✅ All tests passed
✅ TypeScript checks passed
✅ Docker images built for linux/amd64, linux/arm64, linux/arm/v7
📋 Changes
See commit history for detailed changes.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Yeraze/meshmonitor
All releases →Related context
Related tools
Earlier breaking changes
- v4.7.2 Route `destination` field now rejects non‑8‑hex nodeId or 64‑hex publicKey, returning HTTP 400.
Beta — feedback welcome: [email protected]