This release includes breaking changes for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
ReleasePort's take
Light signalMeshMonitor v4.7.1 now hides global Channel Database entries in the perβsource Channels tab UI.
Why it matters: Affects only the Channels tab view on perβsource dashboards; no version bounds or security impact are indicated.
Summary
AI summaryUpdates π MeshMonitor v4.7.1, Bug Fixes, and channels across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Bugfix | Medium |
Hides global Channel Database entries in per-source Channels tab view. Hides global Channel Database entries in per-source Channels tab view. Source: llm_adapter@2026-05-25 Confidence: high |
β |
Full changelog
MeshMonitor v4.7.1
Patch release with a single targeted fix.
Bug Fixes
- #3175 fix(channels): hide global Channel Database entries in per-source view β the Channels tab on a per-source dashboard (e.g. clicking a meshtastic_tcp source like "Sandbox" from the dashboard sidebar) was inflating its visible channel list with every row in the global
channel_databasetable. That table is server-side MQTT decryption PSK storage; it auto-grows as MQTT ingest sees new channel names across every source, regardless of which source the user is viewing. Result: a Sandbox source with 3 real device channels appeared to have ~25 (mostly TX-mesh / SHARC / JAXMesh / etc. names from unrelated MQTT bridges).ChannelsTabnow accepts asourceIdprop and skips the Channel Database merge whenever it is set. The unified / legacy cross-source view (where the merge is meaningful) keeps the previous behavior. Themessagesandchannelsarrays were already source-scoped by the poll endpoint, so no client-side filter is needed for those.
Upgrade Notes
No breaking changes. The Channel Database itself is unchanged β it still lives under Global Settings β Channel Database and continues to serve server-side MQTT decryption. Only the per-source Channels tab's display behavior was adjusted.
Full Changelog: https://github.com/Yeraze/meshmonitor/compare/v4.7.0...v4.7.1
π MeshMonitor v4.7.1
π¦ Installation
Docker (recommended):
docker run -d \
--name meshmonitor \
-p 8080:3001 \
-v meshmonitor-data:/data \
ghcr.io/Yeraze/meshmonitor:4.7.1
π§ͺ Testing
β
All tests passed
β
TypeScript checks passed
β
Docker images built for linux/amd64, linux/arm64, linux/arm/v7
π Changes
See commit history for detailed changes.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Yeraze/meshmonitor
All releases βRelated context
Related tools
Earlier breaking changes
- v4.7.2 Route `destination` field now rejects nonβ8βhex nodeId or 64βhex publicKey, returning HTTPβ―400.
Beta — feedback welcome: [email protected]