Skip to content

OpenRemote

Dashboards & Home Pages

An intuitive, fully open‑source IoT platform for device management, automation, analytics, and multi‑tenant UI building

Java Latest 1.24.1 · 2d ago Security brief →

Features

  • Device management with auto provisioning
  • Customizable asset types and when‑then / flow rules (JavaScript & Groovy)
  • Multi‑tenancy (realms) with users/roles and edge gateway support

Recent releases

View all 24 releases →
No immediate action
1.24.1 Mixed

RulesEngine, UX, assets + Gradle fix

Config change
1.24.0 Breaking risk
Breaking upgrade

Postgres version bump + Kc deprecation + JWT change

1.23.1 Bug fix
Notable features
  • Added helper methods to extract latitude and longitude from a GeoJSONPoint
Full changelog

What's Changed

⭐ Enhancements

  • Update dependencies by @ebariaux in https://github.com/openremote/openremote/pull/2732

🐞 Bug fixes

  • Fix RULE_RESET_IMMEDIATE not working as expected by @ebariaux in https://github.com/openremote/openremote/pull/2733
  • Allow LoRaWAN asset attributes to ingest full JSON arrays by @rainerhitz in https://github.com/openremote/openremote/pull/2713
  • Fix ColourRGB incorrectly displayed as JSON forms text input by @Ekhorn in https://github.com/openremote/openremote/pull/2702

Other changes

  • Update security e-mail address by @ebariaux in https://github.com/openremote/openremote/pull/2731
  • Add helper methods to get latitude and longitude from a GeoJSONPoint by @ebariaux in https://github.com/openremote/openremote/pull/2734

Full Changelog: https://github.com/openremote/openremote/compare/1.23.0...1.23.1

1.23.0 Bug fix
Notable features
  • Bump gRPC version to 1.80.0
  • Expose `queryDatapoints` in `AbstractDatapointService`
Full changelog

What's Changed

⭐ Enhancements

  • JAX-RS client code cleanup by @richturner in https://github.com/openremote/openremote/pull/2656
  • Bump gRPC version to 1.80.0 by @denniskuijs in https://github.com/openremote/openremote/pull/2704
  • Update GHA versions by @wborn in https://github.com/openremote/openremote/pull/2705
  • Polish locale translations with new keys and i18n fixes by @michalpankau in https://github.com/openremote/openremote/pull/2699
  • Improve daily purge SQL querying by @richturner in https://github.com/openremote/openremote/pull/2728

🐞 Bug fixes

  • Fix: skip kc token refresh for unauthenticated (public) users by @Hackerberg43 in https://github.com/openremote/openremote/pull/2703
  • Fix for UI access token update interval not being ran by @MartinaeyNL in https://github.com/openremote/openremote/pull/2729

Other changes

  • Fix Docker buildx action by @denniskuijs in https://github.com/openremote/openremote/pull/2706
  • Fix Docker Buildx action by @denniskuijs in https://github.com/openremote/openremote/pull/2707
  • Expose queryDatapoints in the AbstractDatapointService for ease of use by @pankalog in https://github.com/openremote/openremote/pull/2674
  • Fix deploy step by @wborn in https://github.com/openremote/openremote/pull/2708
  • Use axion-release-plugin v1.21.1 by @wborn in https://github.com/openremote/openremote/pull/2709
  • Update deploy.sh by @richturner in https://github.com/openremote/openremote/pull/2723
  • Mask workflow dispatch input values by @richturner in https://github.com/openremote/openremote/pull/2724

New Contributors

  • @michalpankau made their first contribution in https://github.com/openremote/openremote/pull/2699

Full Changelog: https://github.com/openremote/openremote/compare/1.22.1...1.23.0

1.22.1 Security relevant
Security fixes
  • CVE-2026-41166 — improper access control in UserResourceImpl.java when updating cross‑realm user roles
Full changelog

What's Changed

🔒 Security updates

  • CVE-2026-41166 on improper access control in UserResourceImpl.java with cross-realm user role updates

⭐ Enhancements

  • Fix invalid CronExpression for AWS DLM (Data Lifecycle Manager) by @denniskuijs in https://github.com/openremote/openremote/pull/2687
  • Re-connect when MQTT connection lost in connect-and-publish load2 scenario by @ebariaux in https://github.com/openremote/openremote/pull/2693

🐞 Bug fixes

  • Websocket connection initialisation threading issue fix by @richturner in https://github.com/openremote/openremote/pull/2655
  • Improve access control and input validation on update parent endpoints by @ebariaux in https://github.com/openremote/openremote/pull/2692

Other changes

  • Enforce test execution order and directly run the manager jar for app tests by @Ekhorn in https://github.com/openremote/openremote/pull/2689
  • Aggregate test reports by @Ekhorn in https://github.com/openremote/openremote/pull/2691
  • Exclude test tasks from report aggregation step and fix setups not provisioning for pipeline deployments by @Ekhorn in https://github.com/openremote/openremote/pull/2697

Full Changelog: https://github.com/openremote/openremote/compare/1.22.0...1.22.1

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

About

Stars
1,763
Forks
434
Languages
Java TypeScript Groovy
Downloads/week
1,103 ↓22%
NPM Maintainers
2
Contributors
65
TypeScript
Types included ✓

Install & Platforms

Install via
docker
Platforms
linux arm64

Community & Support

Beta — feedback welcome: [email protected]