Yeraze/meshmonitor

v4.10.3 Feature

This release adds 1 notable feature for engineering teams evaluating rollout.

Published 1mo Monitoring & Metrics

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

meshcore meshtastic mqtt

Summary

AI summary

Updates Bug Fixes, 🚀 MeshMonitor v4.10.3, and https://github.com/Yeraze/meshmonitor/blob/main/CHANGELOG.md across a mixed release.

Changes in this release

Type	Severity	Summary	CVE
Feature	Medium	Bridged‑node detection now disables OTA firmware updates. Bridged‑node detection now disables OTA firmware updates. Source: llm_adapter@2026-06-14 Confidence: high	—
Feature	Medium	MeshMonitor provides advisories on MQTT/Network configuration when a bridged node is detected. MeshMonitor provides advisories on MQTT/Network configuration when a bridged node is detected. Source: llm_adapter@2026-06-14 Confidence: high	—
Bugfix
Bugfix	Medium	Traffic Management status message now correctly shows support based on firmware version. Traffic Management status message now correctly shows support based on firmware version. Source: llm_adapter@2026-06-14 Confidence: high	—
Bugfix	Medium	MQTT node names now persist and are no longer overwritten by "last heard" refreshes. MQTT node names now persist and are no longer overwritten by "last heard" refreshes. Source: llm_adapter@2026-06-14 Confidence: high	—
Bugfix	Medium	Local‑node module configuration refreshes are now stored instead of being discarded. Local‑node module configuration refreshes are now stored instead of being discarded. Source: llm_adapter@2026-06-14 Confidence: high	—
Bugfix	Medium	Ambiguous (psk, name) pairs no longer cause phantom channel swaps. Ambiguous (psk, name) pairs no longer cause phantom channel swaps. Source: llm_adapter@2026-06-14 Confidence: high	—
Bugfix	Medium	MeshCore auto‑ack messages now include the RX SNR value. MeshCore auto‑ack messages now include the RX SNR value. Source: llm_adapter@2026-06-14 Confidence: high	—
Bugfix	Medium	MeshCore device names now preserve printable Unicode, including parentheses and emoji. MeshCore device names now preserve printable Unicode, including parentheses and emoji. Source: llm_adapter@2026-06-14 Confidence: high	—

Full changelog

Maintenance release: Traffic Management detection fix and a round of bug fixes.

Bug Fixes

Traffic Management / Status Message shown "Unsupported" on capable firmware (#3457) — support is now gated on firmware version (Status Message ≥ 2.7.19, Traffic Management ≥ 2.7.22) instead of an unreliable presence check, so the modules show correctly on e.g. v2.7.24.
MQTT nodes appeared nameless (#3456) — the per-packet "last heard" refresh no longer clobbers saved NodeInfo with blanks; MQTT-sourced node names now persist.
Local-node module config refreshes were discarded (#3460) — the response handler was remote-node-only; local refreshes are now stored.
Phantom channel swaps when two channels share a PSK and name (#3453) — ambiguous (psk, name) pairs are skipped, preventing recurring message-attribution scrambling.
MeshCore auto-ack {SNR} always blank (#3454) — RX SNR is now carried onto MeshCore message events so {SNR} resolves.
MeshCore device name stripped parentheses and emoji on save (#3450) — printable Unicode is preserved (capped to the 32-byte field on a character boundary).

Features

Bridged-node detection disables OTA firmware update (#3455) and bridged-node advisories on MQTT/Network configuration (#3458) — MeshMonitor detects serial/BLE-only radios fronted by a TCP proxy and guides operators accordingly.

Docs

LoRa Transmit Power help text clarified (#3459) — 0 = hardware default max safe power; negative values are permitted (signed field) but radio-dependent.

Full details in the changelog.

🤖 Generated with Claude Code

🚀 MeshMonitor v4.10.3

📦 Installation

Docker (recommended):

docker run -d \
  --name meshmonitor \
  -p 8080:3001 \
  -v meshmonitor-data:/data \
  ghcr.io/Yeraze/meshmonitor:4.10.3

🧪 Testing

✅ All tests passed
✅ TypeScript checks passed
✅ Docker images built for linux/amd64, linux/arm64, linux/arm/v7

📋 Changes

See commit history for detailed changes.

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track Yeraze/meshmonitor

Get notified when new releases ship.

About Yeraze/meshmonitor

All releases →

Related context

Related tools

Earlier breaking changes

v4.13.0 Source‑scoped API endpoints now require an explicit `sourceId` parameter.
v4.13.0 Auto-Upgrade is retired; remove upgrade sidecar and related config.
v4.7.2 Route `destination` field now rejects non‑8‑hex nodeId or 64‑hex publicKey, returning HTTP 400.