This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
Summary
AI summaryBroad release touches meshcore, Bug Fixes, Issues Resolved, and 🚀 MeshMonitor v4.7.4.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Adds MeshCore contact remove/export/import via meshcore:// URLs. Adds MeshCore contact remove/export/import via meshcore:// URLs. Source: llm_adapter@2026-05-26 Confidence: high |
— |
| Feature | Medium |
Adds MeshCore repeater neighbour list feature. Adds MeshCore repeater neighbour list feature. Source: llm_adapter@2026-05-26 Confidence: high |
— |
| Feature | Medium |
Adds MeshCore device time synchronization capability. Adds MeshCore device time synchronization capability. Source: llm_adapter@2026-05-26 Confidence: high |
— |
| Feature | Medium |
Adds MeshCore trace path diagnostic with per‑hop SNR measurement. Adds MeshCore trace path diagnostic with per‑hop SNR measurement. Source: llm_adapter@2026-05-26 Confidence: high |
— |
| Feature | Medium |
Exposes TX power configuration in the UI. Exposes TX power configuration in the UI. Source: llm_adapter@2026-05-26 Confidence: high |
— |
| Feature | Medium |
Adds ability to copy NodeInfo from another source. Adds ability to copy NodeInfo from another source. Source: llm_adapter@2026-05-26 Confidence: high |
— |
| Feature | Medium |
Adds MeshCore room server integration. Adds MeshCore room server integration. Source: llm_adapter@2026-05-26 Confidence: high |
— |
| Feature | Medium |
Adds MeshCore device reboot (danger‑gated) capability. Adds MeshCore device reboot (danger‑gated) capability. Source: llm_adapter@2026-05-26 Confidence: high |
— |
| Feature | Medium |
Adds Ed25519 private key backup/restore in MeshCore. Adds Ed25519 private key backup/restore in MeshCore. Source: llm_adapter@2026-05-26 Confidence: high |
— |
| Feature | Low |
Adds enhanced stats endpoints and send-confirmed RTT event to MeshCore. Adds enhanced stats endpoints and send-confirmed RTT event to MeshCore. Source: granite4.1:30b@2026-05-26-audit Confidence: low |
— |
| Bugfix | Medium |
Fixes MQTT bridge creation without a pre‑existing broker. Fixes MQTT bridge creation without a pre‑existing broker. Source: llm_adapter@2026-05-26 Confidence: high |
— |
| Bugfix | Medium |
Resolves MQTT bridge save hang and adds reconnect backoff. Resolves MQTT bridge save hang and adds reconnect backoff. Source: granite4.1:30b@2026-05-26-audit Confidence: low |
— |
| Bugfix | Medium |
Scopes security key fetch by sourceId in config handling. Scopes security key fetch by sourceId in config handling. Source: granite4.1:30b@2026-05-26-audit Confidence: low |
— |
| Bugfix | Low |
Provides graceful clipboard fallback for non-HTTPS contexts. Provides graceful clipboard fallback for non-HTTPS contexts. Source: granite4.1:30b@2026-05-26-audit Confidence: low |
— |
| Bugfix | Low |
Adds pretty labels for local-node poller telemetry types in MeshCore. Adds pretty labels for local-node poller telemetry types in MeshCore. Source: granite4.1:30b@2026-05-26-audit Confidence: low |
— |
| Bugfix | Low |
Fixes Copy NodeInfo button visibility and API routing. Fixes Copy NodeInfo button visibility and API routing. Source: granite4.1:30b@2026-05-26-audit Confidence: low |
— |
Full changelog
MeshMonitor v4.7.4
Patch release focused on MeshCore protocol completeness and multi-source improvements. Adds Tier 1 and Tier 2 MeshCore protocol features including contact management (remove/export/import via meshcore:// URLs), repeater neighbour lists, device time sync, reboot (danger-gated), and Ed25519 key backup/restore. Room server integration and trace path diagnostics with per-hop SNR measurement round out the MeshCore additions. TX power configuration is now exposed in the UI. On the multi-source side, NodeInfo can now be copied across sources, and MQTT bridges can be created without requiring a pre-existing broker. Clipboard operations now fall back gracefully in non-HTTPS contexts. Translation updates from Weblate are also included.
Features
- #3218 feat(meshcore): add Tier 1 protocol gap features — contact remove/export/import, repeater neighbour list, device time sync, enhanced stats endpoints, send-confirmed RTT event
- #3219 feat(meshcore): add Tier 2 protocol features — device reboot (danger-gated), Ed25519 private key backup/restore
- #3214 feat(meshcore): add room server integration
- #3209 feat(meshcore): add trace path diagnostic for per-hop SNR measurement
- #3210 feat(meshcore): add TX power configuration
- #3215 feat(nodes): add Copy NodeInfo from another source
- #2996 Translations update from Hosted Weblate
Bug Fixes
- #3221 fix(meshcore): add pretty labels for local-node poller telemetry types
- #3220 fix(meshcore): clipboard fallback for non-HTTPS contexts
- #3217 fix(sources): allow MQTT Bridge creation without existing Broker
- #3216 fix(nodes): Copy NodeInfo button visibility and API routing
- #3207 fix(config): scope security key fetch by sourceId
- #3206 fix(mqtt-bridge): resolve save hang and add reconnect backoff
- #3205 fix(meshcore): pretty telemetry labels, auto-login spam, DM page-scroll layout
Issues Resolved
- #3213 Cross-source NodeInfo enrichment in MeshMonitor DB
- #3212 Cross-source NodeInfo sync via add_contact
- #3211 Pre-populate NodeDB via add_contact before PKI DM sends
- #3197 MQTT bridge: per-gateway identity for upstream connections
Full Changelog: https://github.com/Yeraze/meshmonitor/compare/v4.7.3...v4.7.4
🚀 MeshMonitor v4.7.4
📦 Installation
Docker (recommended):
docker run -d \
--name meshmonitor \
-p 8080:3001 \
-v meshmonitor-data:/data \
ghcr.io/Yeraze/meshmonitor:4.7.4
🧪 Testing
✅ All tests passed
✅ TypeScript checks passed
✅ Docker images built for linux/amd64, linux/arm64, linux/arm/v7
📋 Changes
See commit history for detailed changes.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Yeraze/meshmonitor
All releases →Related context
Related tools
Earlier breaking changes
- v4.7.2 Route `destination` field now rejects non‑8‑hex nodeId or 64‑hex publicKey, returning HTTP 400.
Beta — feedback welcome: [email protected]