Skip to content

FlowForge

Automation & Workflows

A Node‑RED platform with AI‑assisted development, scalable remote deployment, and enterprise‑grade security for industrial applications

JavaScript Latest v2.32.1 · 6d ago Security brief →

Features

  • AI‑assisted collaborative Node‑RED development
  • Scalable remote deployment across edge devices
  • AI‑powered data transformation with low‑code tools
  • Flexible hosting via managed cloud or self‑hosted solution
  • Enterprise security framework with RBAC, audit trails and monitoring

Recent releases

View all 16 releases →
Upgrade now
v2.32.1 Mixed
Auth Dependencies

XSS fix + deps bumps + CI updates

Upgrade now
v2.32.0 Maintenance
Dependencies

Dependency bumps + Expert UI

Upgrade now
v2.31.3 Maintenance
Dependencies

Dependency bumps + CI updates

Upgrade now
v2.31.0 Mixed
Dependencies

CSS fix + AI features + CI improvements

v2.30.0 Security relevant
Security fixes
  • Force password reset for existing unverified accounts on first SSO login — mitigates credential reuse risk.
  • Prevent Google Social Login token reuse — stops replay attacks.
Notable features
  • Immersive Editor mobile header fix (issue 7207)
  • Allow wss:// connections to MQTT broker in CSP connect-src
  • Add origin property to user properties in product-expert
Full changelog

What's Changed

  • Bump nodemailer from 8.0.4 to 8.0.5 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7056
  • Bump 1password/install-cli-action from 2.0.2 to 3.0.0 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/6996
  • Bump axios from 1.13.5 to 1.15.0 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7066
  • docs: clarify FlowFuse Expert availability for self-hosted instances by @sumitshinde-84 in https://github.com/FlowFuse/flowfuse/pull/7042
  • Bump codecov/codecov-action from 5.5.2 to 6.0.0 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/6999
  • Bump aws-actions/amazon-ecr-login from 2.0.2 to 2.1.2 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7069
  • [7054] Sentry quota exhausted by @n-lark in https://github.com/FlowFuse/flowfuse/pull/7055
  • [7051] PostHog / rrweb Sentry Errors by @n-lark in https://github.com/FlowFuse/flowfuse/pull/7053
  • [7018] Typescript: Phase 1 — Tooling by @n-lark in https://github.com/FlowFuse/flowfuse/pull/7019
  • [6943] Pinia Task 14 - account-settings by @n-lark in https://github.com/FlowFuse/flowfuse/pull/6979
  • [6944] Pinia Task 15 - teardown by @n-lark in https://github.com/FlowFuse/flowfuse/pull/6987
  • Bump fastify from 5.8.4 to 5.8.5 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7086
  • Bump hono from 4.12.12 to 4.12.14 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7087
  • Bump follow-redirects from 1.15.11 to 1.16.0 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7072
  • Bump dompurify from 3.3.2 to 3.4.0 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7088
  • Replace npm install with npm ci in Dockerfile by @hardillb in https://github.com/FlowFuse/flowfuse/pull/7094
  • Bump protobufjs from 7.5.4 to 7.5.5 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7093
  • Pin @fastify/static and @fastify/swagger-ui by @hardillb in https://github.com/FlowFuse/flowfuse/pull/7095
  • Bump actions/github-script from 8.0.0 to 9.0.0 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7068
  • [7065] Typescript: Phase 2 — Domain Types by @n-lark in https://github.com/FlowFuse/flowfuse/pull/7067
  • Unpin @fastify/static and @fastify/swagger-ui by @hardillb in https://github.com/FlowFuse/flowfuse/pull/7103
  • Bump flowfuse/github-actions-workflows/.github/workflows/publish_node_package.yml from 0.52.0 to 0.76.0 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7109
  • Bump flowfuse/github-actions-workflows/.github/workflows/sast_scan.yaml from 0.52.0 to 0.76.0 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7107
  • Bump docker/login-action from 4.0.0 to 4.1.0 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7105
  • Bump actions/cache from 5.0.4 to 5.0.5 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7106
  • Bump docker/build-push-action from 7.0.0 to 7.1.0 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7111
  • Bump aws-actions/amazon-ecr-login from 2.1.2 to 2.1.3 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7112
  • Bump flowfuse/github-actions-workflows/.github/workflows/build_container_image.yml from 0.52.0 to 0.76.0 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7113
  • Bump actions/upload-artifact from 7.0.0 to 7.0.1 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7114
  • Bump actions/create-github-app-token from 3.0.0 to 3.1.1 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7115
  • Bump aws-actions/configure-aws-credentials from 6.0.0 to 6.1.0 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7116
  • Bump cypress-io/github-action from 7.1.8 to 7.1.9 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7117
  • [7082] Align client-side permission check for HTTP Bearer Tokens with server-side team-level check by @n-lark in https://github.com/FlowFuse/flowfuse/pull/7097
  • [7120] Fix flaky admin.spec.js test by @n-lark in https://github.com/FlowFuse/flowfuse/pull/7121
  • Force Device Editor to reload if it fails first time by @hardillb in https://github.com/FlowFuse/flowfuse/pull/7129
  • Bump uuid from 9.0.1 to 14.0.0 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7127
  • Bump @xmldom/xmldom from 0.8.12 to 0.8.13 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7128
  • Bump postcss from 8.5.8 to 8.5.12 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7133
  • Bump fast-xml-parser and @aws-sdk/xml-builder by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7134
  • Add logging when instance failed to suspend when team suspended by @hardillb in https://github.com/FlowFuse/flowfuse/pull/7110
  • Bump actions/setup-node from 6.3.0 to 6.4.0 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7108
  • [7124] Add response-validation & surface response schema drift in dev by @n-lark in https://github.com/FlowFuse/flowfuse/pull/7125
  • Move expert to ee by @hardillb in https://github.com/FlowFuse/flowfuse/pull/7132
  • Update Expert insights mode use app cache by @Steve-Mcl in https://github.com/FlowFuse/flowfuse/pull/7138
  • Support TTL in application caches by @Steve-Mcl in https://github.com/FlowFuse/flowfuse/pull/7136
  • [6267] Allow users to interact with the Instance drawer/FlowFuse expert in the immersive experience without it overlapping one another by @n-lark in https://github.com/FlowFuse/flowfuse/pull/7098
  • Bump slackapi/slack-github-action from 3.0.1 to 3.0.2 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7147
  • Bump aws-actions/amazon-ecr-login from 2.1.3 to 2.1.4 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7148
  • Ensure only Device Palette settings sent when changed by @hardillb in https://github.com/FlowFuse/flowfuse/pull/7175
  • Bump cypress from 13.17.0 to 15.14.2 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/6787
  • Refactor/account settings feature checks by @cstns in https://github.com/FlowFuse/flowfuse/pull/7176
  • Expert/mqtt FrontEnd scaffolding by @cstns in https://github.com/FlowFuse/flowfuse/pull/7004
  • [7168] Create EXPERT_COMMS_BETA_ENABLED feature flag for frontend by @n-lark in https://github.com/FlowFuse/flowfuse/pull/7169
  • Fix snapshot diff viewer highlights and diff panel by @andypalmi in https://github.com/FlowFuse/flowfuse/pull/7081
  • ci: Use new project-automation workflow by @ppawlowski in https://github.com/FlowFuse/flowfuse/pull/7179
  • Expert pubsub backend by @Steve-Mcl in https://github.com/FlowFuse/flowfuse/pull/7008
  • Force password reset for existing unverified accounts on first SSO login by @hardillb in https://github.com/FlowFuse/flowfuse/pull/7149
  • Prevent Google Social Login token reuse by @hardillb in https://github.com/FlowFuse/flowfuse/pull/7150
  • ci: Send notification about pre-staging per user by @ppawlowski in https://github.com/FlowFuse/flowfuse/pull/6986
  • Add FE API functions to generate and delete expert agent credentials by @Steve-Mcl in https://github.com/FlowFuse/flowfuse/pull/7009
  • Bump flow-renderer to 0.5.1 by @andypalmi in https://github.com/FlowFuse/flowfuse/pull/7186
  • Bump sinon from 21.0.1 to 21.1.2 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7188
  • [7157] Follow Up: Cannot regenerate remote instance credentials from overview/settings page by @n-lark in https://github.com/FlowFuse/flowfuse/pull/7183
  • [7158 + 7152] Follow Ups: Remote Instance "Add to group" button breaks out of immersive mode + "Change instance type" breaks out of immersive mode by @n-lark in https://github.com/FlowFuse/flowfuse/pull/7171
  • [7165 + 7164 + 7163 + 7162] Wire device-updated / assign-device events into the immersive remote-instance editor by @n-lark in https://github.com/FlowFuse/flowfuse/pull/7172
  • [7153 + 7166] Follow Ups: 500 error when setting npm configuration file or Node Catalogues entry on remote instance + Cannot set environment variables from settings page in immersive mode by @n-lark in https://github.com/FlowFuse/flowfuse/pull/7173
  • [7052] Silence rrweb Posthog errors in Sentry by @n-lark in https://github.com/FlowFuse/flowfuse/pull/7192
  • Bump axios from 1.15.0 to 1.16.0 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7196
  • Bump posthog-node from 4.2.0 to 5.33.2 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7190
  • [7151 + 7156] Follow Ups: Console errors when navigating hosted instances in immersive mode (open-source, no license) + Performance tab missing from hosted instance immersive mode by @n-lark in https://github.com/FlowFuse/flowfuse/pull/7174
  • Simplify tooltip directive by replacing custom tooltip logic with native title attribute by @cstns in https://github.com/FlowFuse/flowfuse/pull/7198
  • Fix flakey admin.spec test by @n-lark in https://github.com/FlowFuse/flowfuse/pull/7200
  • Switch support agent to mqtt by @cstns in https://github.com/FlowFuse/flowfuse/pull/7090
  • Improve snapshot comparison viewer UX by @andypalmi in https://github.com/FlowFuse/flowfuse/pull/7202
  • [7207] Immersive Editor — mobile header fix by @n-lark in https://github.com/FlowFuse/flowfuse/pull/7208
  • Allow wss:// connections to MQTT broker in CSP connect-src by @cstns in https://github.com/FlowFuse/flowfuse/pull/7205
  • fix: convert expert packages from grid to list layout by @andypalmi in https://github.com/FlowFuse/flowfuse/pull/7209
  • Add origin property to user properties in product-expert by @cstns in https://github.com/FlowFuse/flowfuse/pull/7211
  • Add origin property to userProperties of expert publishes by @Steve-Mcl in https://github.com/FlowFuse/flowfuse/pull/7215
  • [7100] Update FF theme to align with Node-RED 5.0.0 by @n-lark in https://github.com/FlowFuse/flowfuse/pull/7185
  • Allow Forcing all users to always use SSO by @hardillb in https://github.com/FlowFuse/flowfuse/pull/7119
  • fix: add ellipsis and tooltip for truncated expert package names and resource titles by @andypalmi in https://github.com/FlowFuse/flowfuse/pull/7213
  • Bump ip-address and express-rate-limit by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7220
  • Use stop reason in audit log detail by @Steve-Mcl in https://github.com/FlowFuse/flowfuse/pull/7078
  • Bump hono from 4.12.14 to 4.12.18 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7224
  • Bump cypress-io/github-action from 7.1.9 to 7.3.0 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7146
  • Add conditional check for agentMode before calling insights agent method by @cstns in https://github.com/FlowFuse/flowfuse/pull/7222
  • Convert device logs and performance to use MqttService by @cstns in https://github.com/FlowFuse/flowfuse/pull/7210
  • Replace message-bubble content with streamable-content component in HumanMessage by @cstns in https://github.com/FlowFuse/flowfuse/pull/7225
  • Release 2.30.0 by @ppawlowski in https://github.com/FlowFuse/flowfuse/pull/7226

Full Changelog: https://github.com/FlowFuse/flowfuse/compare/v2.29.1...v2.30.0

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

About

Stars
393
Forks
86
Languages
JavaScript Vue TypeScript
Downloads/week
5 ↓60%
NPM Maintainers
1
Contributors
45

Beta — feedback welcome: [email protected]