This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
Summary
AI summaryBroad release touches Bug Fixes, Issues Resolved, meshcore, and π MeshMonitor v4.8.3.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Adds active node discovery buttons to MeshCore. Adds active node discovery buttons to MeshCore. Source: llm_adapter@2026-06-02 Confidence: high |
β |
| Feature | Medium |
Makes MeshCore nodes respond to inbound discovery requests. Makes MeshCore nodes respond to inbound discovery requests. Source: llm_adapter@2026-06-02 Confidence: high |
β |
| Feature | Medium |
Introduces dedicated MQTT bridge Configuration page with perβbridge publish filter. Introduces dedicated MQTT bridge Configuration page with perβbridge publish filter. Source: llm_adapter@2026-06-02 Confidence: high |
β |
| Feature | Medium |
Simplifies MQTT bridge sourceβedit modal to basics and adds deep link to Configuration page. Simplifies MQTT bridge sourceβedit modal to basics and adds deep link to Configuration page. Source: llm_adapter@2026-06-02 Confidence: high |
β |
| Dependency | Low |
Updates react-router-dom from 7.15.1 to 7.16.0. Updates react-router-dom from 7.15.1 to 7.16.0. Source: llm_adapter@2026-06-02 Confidence: high |
β |
| Dependency | Low |
Updates puppeteer from 25.0.4 to 25.1.0. Updates puppeteer from 25.0.4 to 25.1.0. Source: llm_adapter@2026-06-02 Confidence: high |
β |
| Dependency | Low |
Updates concurrently from 9.2.1 to 10.0.0. Updates concurrently from 9.2.1 to 10.0.0. Source: llm_adapter@2026-06-02 Confidence: high |
β |
| Dependency | Low |
Updates @typescript-eslint/eslint-plugin from 8.59.4 to 8.60.0. Updates @typescript-eslint/eslint-plugin from 8.59.4 to 8.60.0. Source: granite4.1:30b@2026-06-02-audit Confidence: low |
β |
| Dependency | Low |
Updates @typescript-eslint/parser from 8.59.4 to 8.60.0. Updates @typescript-eslint/parser from 8.59.4 to 8.60.0. Source: granite4.1:30b@2026-06-02-audit Confidence: low |
β |
| Dependency | Low |
Updates @rollup/rollup-linux-arm64-musl from 4.60.4 to 4.61.0. Updates @rollup/rollup-linux-arm64-musl from 4.60.4 to 4.61.0. Source: granite4.1:30b@2026-06-02-audit Confidence: low |
β |
| Dependency | Low |
Updates @rollup/rollup-linux-arm-gnueabihf from 4.60.4 to 4.61.0. Updates @rollup/rollup-linux-arm-gnueabihf from 4.60.4 to 4.61.0. Source: granite4.1:30b@2026-06-02-audit Confidence: low |
β |
| Bugfix | High |
Resolves transportβlevel orphanβreconnect flap causing perβsource TCP disconnect/reconnect cycles. Resolves transportβlevel orphanβreconnect flap causing perβsource TCP disconnect/reconnect cycles. Source: llm_adapter@2026-06-02 Confidence: high |
β |
| Bugfix | Medium |
Corrects MeshCore private key validation to accept 128βhexβchar (64βbyte) keys. Corrects MeshCore private key validation to accept 128βhexβchar (64βbyte) keys. Source: llm_adapter@2026-06-02 Confidence: high |
β |
| Bugfix | Medium |
Allows adding new hashtag channels in MeshCore. Allows adding new hashtag channels in MeshCore. Source: llm_adapter@2026-06-02 Confidence: high |
β |
Full changelog
MeshMonitor v4.8.3
Patch release centered on MeshCore discovery and MQTT bridge configuration. MeshCore sources can now actively probe for nearby nodes and repeaters (#3302) and answer inbound discovery requests so they're discoverable in return (#3303). MQTT bridges gain a dedicated Configuration page with a per-bridge publish filter (#3295), and the per-source bridge edit modal is slimmed to connection basics that deep-link to it (#3299). Correctness fixes round it out: MeshCore private keys now validate at the firmware's 128 hex-char (64-byte) format (#3301), brand-new hashtag channels can be added (#3298), and a transport-level orphan-reconnect flap that disrupted one of two TCP sources is closed out (#3290, #3291). Documentation was reviewed for accuracy against these changes, plus the OIDC first-user auto-admin behavior is now documented (#3293).
Features
- #3302 feat(meshcore): active node discovery β Discover Nearby Nodes / Discover Repeaters buttons sweep for MeshCore devices in direct (zero-hop) RF range.
- #3303 feat(meshcore): respond to discovery requests β this node now answers inbound discovery requests, making it discoverable by peers.
- #3295 feat(mqtt): dedicated bridge Configuration page with per-bridge publish filter β manage Connection, Forwarding, Subscribe, Publish (with advanced topic filter), and Topic rewrites from one page.
- #3299 feat(mqtt): slim bridge source-edit modal to basics + deep-link to the Configuration page.
Bug Fixes
- #3301 fix: correct MeshCore private key validation to 128 hex chars (64 bytes) β accepts firmware-exported keys.
- #3298 fix(meshcore): allow adding new hashtag channels.
- #3290 fix(stability): close transport-level orphan-reconnect flap β stops a per-source TCP disconnect/reconnect cycle.
- #3291 fix(build): pin
legacy-peer-depsin.npmrcsonpm cistays in sync.
Documentation
- #3293 docs: document OIDC first-user auto-admin behavior.
- docs(meshcore, mqtt): reviewed for accuracy β documented Active Node Discovery and moved the topic-rewrite / publish-filter docs to the new bridge Configuration page.
Dependencies
- #3288 react-router-dom 7.15.1 β 7.16.0
- #3285 puppeteer 25.0.4 β 25.1.0
- #3282 concurrently 9.2.1 β 10.0.1
- #3284 @typescript-eslint/eslint-plugin 8.59.4 β 8.60.0
- #3287 @typescript-eslint/parser 8.59.4 β 8.60.0
- #3283 @rollup/rollup-linux-arm64-musl 4.60.4 β 4.61.0
- #3286 @rollup/rollup-linux-arm-gnueabihf 4.60.4 β 4.61.0
- #3281 production-dependencies group (7 updates)
- #3280 development-dependencies group (2 updates)
Issues Resolved
- #3300 MeshCore private key import rejected exported (128-char) key
- #3297 MeshCore hashtag channel not working in v4.8.2
- #3294 per-bridge publish topic filtering for MQTT Bridge
- #3292 OIDC first-user auto-admin behavior not documented
- #3270 v4 source-manager TCP flap (per-source disconnect/reconnect cycle)
Full changelog: https://github.com/Yeraze/meshmonitor/compare/v4.8.2...v4.8.3
π MeshMonitor v4.8.3
π¦ Installation
Docker (recommended):
docker run -d \
--name meshmonitor \
-p 8080:3001 \
-v meshmonitor-data:/data \
ghcr.io/Yeraze/meshmonitor:4.8.3
π§ͺ Testing
β
All tests passed
β
TypeScript checks passed
β
Docker images built for linux/amd64, linux/arm64, linux/arm/v7
π Changes
See commit history for detailed changes.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Yeraze/meshmonitor
All releases βRelated context
Related tools
Earlier breaking changes
- v4.7.2 Route `destination` field now rejects nonβ8βhex nodeId or 64βhex publicKey, returning HTTPβ―400.
Beta — feedback welcome: [email protected]