- Force password reset for existing unverified accounts on first SSO login — mitigates credential reuse risk.
- Prevent Google Social Login token reuse — stops replay attacks.
- Immersive Editor mobile header fix (issue 7207)
- Allow wss:// connections to MQTT broker in CSP connect-src
- Add origin property to user properties in product-expert
Full changelog
What's Changed
- Bump nodemailer from 8.0.4 to 8.0.5 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7056
- Bump 1password/install-cli-action from 2.0.2 to 3.0.0 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/6996
- Bump axios from 1.13.5 to 1.15.0 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7066
- docs: clarify FlowFuse Expert availability for self-hosted instances by @sumitshinde-84 in https://github.com/FlowFuse/flowfuse/pull/7042
- Bump codecov/codecov-action from 5.5.2 to 6.0.0 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/6999
- Bump aws-actions/amazon-ecr-login from 2.0.2 to 2.1.2 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7069
- [7054] Sentry quota exhausted by @n-lark in https://github.com/FlowFuse/flowfuse/pull/7055
- [7051] PostHog / rrweb Sentry Errors by @n-lark in https://github.com/FlowFuse/flowfuse/pull/7053
- [7018] Typescript: Phase 1 — Tooling by @n-lark in https://github.com/FlowFuse/flowfuse/pull/7019
- [6943] Pinia Task 14 - account-settings by @n-lark in https://github.com/FlowFuse/flowfuse/pull/6979
- [6944] Pinia Task 15 - teardown by @n-lark in https://github.com/FlowFuse/flowfuse/pull/6987
- Bump fastify from 5.8.4 to 5.8.5 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7086
- Bump hono from 4.12.12 to 4.12.14 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7087
- Bump follow-redirects from 1.15.11 to 1.16.0 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7072
- Bump dompurify from 3.3.2 to 3.4.0 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7088
- Replace npm install with npm ci in Dockerfile by @hardillb in https://github.com/FlowFuse/flowfuse/pull/7094
- Bump protobufjs from 7.5.4 to 7.5.5 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7093
- Pin @fastify/static and @fastify/swagger-ui by @hardillb in https://github.com/FlowFuse/flowfuse/pull/7095
- Bump actions/github-script from 8.0.0 to 9.0.0 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7068
- [7065] Typescript: Phase 2 — Domain Types by @n-lark in https://github.com/FlowFuse/flowfuse/pull/7067
- Unpin @fastify/static and @fastify/swagger-ui by @hardillb in https://github.com/FlowFuse/flowfuse/pull/7103
- Bump flowfuse/github-actions-workflows/.github/workflows/publish_node_package.yml from 0.52.0 to 0.76.0 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7109
- Bump flowfuse/github-actions-workflows/.github/workflows/sast_scan.yaml from 0.52.0 to 0.76.0 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7107
- Bump docker/login-action from 4.0.0 to 4.1.0 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7105
- Bump actions/cache from 5.0.4 to 5.0.5 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7106
- Bump docker/build-push-action from 7.0.0 to 7.1.0 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7111
- Bump aws-actions/amazon-ecr-login from 2.1.2 to 2.1.3 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7112
- Bump flowfuse/github-actions-workflows/.github/workflows/build_container_image.yml from 0.52.0 to 0.76.0 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7113
- Bump actions/upload-artifact from 7.0.0 to 7.0.1 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7114
- Bump actions/create-github-app-token from 3.0.0 to 3.1.1 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7115
- Bump aws-actions/configure-aws-credentials from 6.0.0 to 6.1.0 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7116
- Bump cypress-io/github-action from 7.1.8 to 7.1.9 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7117
- [7082] Align client-side permission check for HTTP Bearer Tokens with server-side team-level check by @n-lark in https://github.com/FlowFuse/flowfuse/pull/7097
- [7120] Fix flaky admin.spec.js test by @n-lark in https://github.com/FlowFuse/flowfuse/pull/7121
- Force Device Editor to reload if it fails first time by @hardillb in https://github.com/FlowFuse/flowfuse/pull/7129
- Bump uuid from 9.0.1 to 14.0.0 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7127
- Bump @xmldom/xmldom from 0.8.12 to 0.8.13 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7128
- Bump postcss from 8.5.8 to 8.5.12 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7133
- Bump fast-xml-parser and @aws-sdk/xml-builder by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7134
- Add logging when instance failed to suspend when team suspended by @hardillb in https://github.com/FlowFuse/flowfuse/pull/7110
- Bump actions/setup-node from 6.3.0 to 6.4.0 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7108
- [7124] Add response-validation & surface response schema drift in dev by @n-lark in https://github.com/FlowFuse/flowfuse/pull/7125
- Move expert to ee by @hardillb in https://github.com/FlowFuse/flowfuse/pull/7132
- Update Expert insights mode use app cache by @Steve-Mcl in https://github.com/FlowFuse/flowfuse/pull/7138
- Support TTL in application caches by @Steve-Mcl in https://github.com/FlowFuse/flowfuse/pull/7136
- [6267] Allow users to interact with the Instance drawer/FlowFuse expert in the immersive experience without it overlapping one another by @n-lark in https://github.com/FlowFuse/flowfuse/pull/7098
- Bump slackapi/slack-github-action from 3.0.1 to 3.0.2 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7147
- Bump aws-actions/amazon-ecr-login from 2.1.3 to 2.1.4 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7148
- Ensure only Device Palette settings sent when changed by @hardillb in https://github.com/FlowFuse/flowfuse/pull/7175
- Bump cypress from 13.17.0 to 15.14.2 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/6787
- Refactor/account settings feature checks by @cstns in https://github.com/FlowFuse/flowfuse/pull/7176
- Expert/mqtt FrontEnd scaffolding by @cstns in https://github.com/FlowFuse/flowfuse/pull/7004
- [7168] Create EXPERT_COMMS_BETA_ENABLED feature flag for frontend by @n-lark in https://github.com/FlowFuse/flowfuse/pull/7169
- Fix snapshot diff viewer highlights and diff panel by @andypalmi in https://github.com/FlowFuse/flowfuse/pull/7081
- ci: Use new project-automation workflow by @ppawlowski in https://github.com/FlowFuse/flowfuse/pull/7179
- Expert pubsub backend by @Steve-Mcl in https://github.com/FlowFuse/flowfuse/pull/7008
- Force password reset for existing unverified accounts on first SSO login by @hardillb in https://github.com/FlowFuse/flowfuse/pull/7149
- Prevent Google Social Login token reuse by @hardillb in https://github.com/FlowFuse/flowfuse/pull/7150
- ci: Send notification about pre-staging per user by @ppawlowski in https://github.com/FlowFuse/flowfuse/pull/6986
- Add FE API functions to generate and delete expert agent credentials by @Steve-Mcl in https://github.com/FlowFuse/flowfuse/pull/7009
- Bump flow-renderer to 0.5.1 by @andypalmi in https://github.com/FlowFuse/flowfuse/pull/7186
- Bump sinon from 21.0.1 to 21.1.2 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7188
- [7157] Follow Up: Cannot regenerate remote instance credentials from overview/settings page by @n-lark in https://github.com/FlowFuse/flowfuse/pull/7183
- [7158 + 7152] Follow Ups: Remote Instance "Add to group" button breaks out of immersive mode + "Change instance type" breaks out of immersive mode by @n-lark in https://github.com/FlowFuse/flowfuse/pull/7171
- [7165 + 7164 + 7163 + 7162] Wire device-updated / assign-device events into the immersive remote-instance editor by @n-lark in https://github.com/FlowFuse/flowfuse/pull/7172
- [7153 + 7166] Follow Ups: 500 error when setting npm configuration file or Node Catalogues entry on remote instance + Cannot set environment variables from settings page in immersive mode by @n-lark in https://github.com/FlowFuse/flowfuse/pull/7173
- [7052] Silence rrweb Posthog errors in Sentry by @n-lark in https://github.com/FlowFuse/flowfuse/pull/7192
- Bump axios from 1.15.0 to 1.16.0 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7196
- Bump posthog-node from 4.2.0 to 5.33.2 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7190
- [7151 + 7156] Follow Ups: Console errors when navigating hosted instances in immersive mode (open-source, no license) + Performance tab missing from hosted instance immersive mode by @n-lark in https://github.com/FlowFuse/flowfuse/pull/7174
- Simplify tooltip directive by replacing custom tooltip logic with native
titleattribute by @cstns in https://github.com/FlowFuse/flowfuse/pull/7198 - Fix flakey admin.spec test by @n-lark in https://github.com/FlowFuse/flowfuse/pull/7200
- Switch support agent to mqtt by @cstns in https://github.com/FlowFuse/flowfuse/pull/7090
- Improve snapshot comparison viewer UX by @andypalmi in https://github.com/FlowFuse/flowfuse/pull/7202
- [7207] Immersive Editor — mobile header fix by @n-lark in https://github.com/FlowFuse/flowfuse/pull/7208
- Allow wss:// connections to MQTT broker in CSP connect-src by @cstns in https://github.com/FlowFuse/flowfuse/pull/7205
- fix: convert expert packages from grid to list layout by @andypalmi in https://github.com/FlowFuse/flowfuse/pull/7209
- Add
originproperty to user properties in product-expert by @cstns in https://github.com/FlowFuse/flowfuse/pull/7211 - Add origin property to userProperties of expert publishes by @Steve-Mcl in https://github.com/FlowFuse/flowfuse/pull/7215
- [7100] Update FF theme to align with Node-RED 5.0.0 by @n-lark in https://github.com/FlowFuse/flowfuse/pull/7185
- Allow Forcing all users to always use SSO by @hardillb in https://github.com/FlowFuse/flowfuse/pull/7119
- fix: add ellipsis and tooltip for truncated expert package names and resource titles by @andypalmi in https://github.com/FlowFuse/flowfuse/pull/7213
- Bump ip-address and express-rate-limit by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7220
- Use stop reason in audit log detail by @Steve-Mcl in https://github.com/FlowFuse/flowfuse/pull/7078
- Bump hono from 4.12.14 to 4.12.18 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7224
- Bump cypress-io/github-action from 7.1.9 to 7.3.0 by @dependabot[bot] in https://github.com/FlowFuse/flowfuse/pull/7146
- Add conditional check for
agentModebefore calling insights agent method by @cstns in https://github.com/FlowFuse/flowfuse/pull/7222 - Convert device logs and performance to use MqttService by @cstns in https://github.com/FlowFuse/flowfuse/pull/7210
- Replace
message-bubblecontent withstreamable-contentcomponent inHumanMessageby @cstns in https://github.com/FlowFuse/flowfuse/pull/7225 - Release 2.30.0 by @ppawlowski in https://github.com/FlowFuse/flowfuse/pull/7226
Full Changelog: https://github.com/FlowFuse/flowfuse/compare/v2.29.1...v2.30.0