0d23685b62
Fix flaky SsrfProtectionValidatorTest by moving @ResourceLock to class level
Tests that read shared static state (e.g. testAllowedUrls with 8.8.8.8)
could run concurrently with tests that mutate it (e.g. testAdditionalBlockedSingleIp),
causing intermittent failures. Class-level @ResourceLock serializes all tests.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
8 months ago
19e72cdeeb
Merge pull request #15116 from DmytroKhylko/fix/export-ws-configuration-variables
Made max WS message size configurable
8 months ago
ec6cd3897c
Merge pull request #15111 from volodymyr-babak/edge-store-sync-as-attribute
Added syncInProgress as edge attribute
8 months ago
31cbbc35a2
Merge pull request #15092 from volodymyr-babak/do-not-send-version-to-edge-cloud
Do not send entity version to edge or to cloud
8 months ago
9c197da296
Merge pull request #15055 from volodymyr-babak/admin-setting-fix-43
Implement event-sourced propagation for AdminSettings
8 months ago
bc0e63bea3
Merge pull request #15050 from volodymyr-babak/admin-setting-fix
Event-sourced propagation for admin settings
8 months ago
64c2bc051b
Merge pull request #15135 from dashevchenko/openApiClientGeneration
Api method renaming, hidden deprecated
8 months ago
405e11af76
api method renaming, hidden deprecated
8 months ago
22788378ee
Merge pull request #14929 from dashevchenko/openApiClientGeneration
Refactor APIs to follow OpenAPI standard
8 months ago
ed7ccae66c
swagger improvements
8 months ago
4ff630f28f
Merge pull request #15099 from mtsymbarov-del/fix/table-header-aignments
Fixed Asset and Entity Views table header alignment
8 months ago
67b698829b
Merge pull request #15132 from thingsboard/rc
RC
8 months ago
2402642c7d
Merge remote-tracking branch 'origin/lts-4.3' into rc
8 months ago
0e92e2116b
Merge remote-tracking branch 'origin/lts-4.2' into lts-4.3
8 months ago
ae6b47f8a6
swagger improvements
8 months ago
d11b588eba
Merge pull request #15102 from smatvienko-tb/fix/rule-chain-input-loop-detection
Fixed infinite loop when rule chain input node forwards to its own rule chain
8 months ago
644789604e
reverted method renaming
8 months ago
7d198fd958
Merge pull request #15091 from thingsboard/fix_bug_test_lwm2m_FW_Update
Fix Flaky LwM2M Integration Tests (OTA & PSK Validation)
8 months ago
5262252b9c
api methods renaming
8 months ago
345a694867
Merge pull request #15131 from thingsboard/rc
Merge rc into master
8 months ago
3491e5fd40
Merge branch 'lts-4.3' into rc
8 months ago
cfdcbe4115
Merge branch 'lts-4.2' into lts-4.3
8 months ago
75afbca8d2
Merge pull request #15128 from vvlladd28/improvement/security/2-03-26
Fixed CVE-2026-27970 and CVE-2026-2391
8 months ago
e4eb469e3b
Merge pull request #15130 from ChantsovaEkaterina/improvement/extend-modules-map
Extend modules map: moment-timezone, canvas-gauges and ngx-hm-carousel added
8 months ago
b2526f26f7
Extend modules map: moment-timezone, canvas-gauges and ngx-hm-carousel added
8 months ago
bc7a83b333
Fixed CVE-2026-2391
8 months ago
30f655d99c
UI: Fixed CVE-2026-27970
8 months ago
da24f4bc9f
Merge pull request #15110 from thingsboard/rc
Merge rc to master
8 months ago
d57e6b90e5
Merge remote-tracking branch 'origin/lts-4.3' into rc
8 months ago
ce880453d6
Merge remote-tracking branch 'origin/lts-4.2' into lts-4.3
8 months ago
95f794d71b
Merge pull request #15124 from thingsboard/fix/cves
Fixed CWE-770 in Jackson Core (GHSA-72hv-8253-57qq)
8 months ago
d16fe3d1be
Fixed CWE-770 in Jackson Core (GHSA-72hv-8253-57qq)
8 months ago
5c8ec170b0
fixed codeProcessingUrl api method, minor sswagger improvemts
8 months ago
19127f7d1c
Merge remote-tracking branch 'upstream/master' into openApiClientGeneration
8 months ago
b05af7e7b4
Merge pull request #15125 from thingsboard/feature/openapi-ci
Automatic OpenAPI spec generation
8 months ago
a0bccd0c92
Add automatic OpenAPI spec generation
8 months ago
b1051c09dc
unified api method names for better api client generation
8 months ago
422921df8e
Merge pull request #15123 from thingsboard/fix/ssrf
Added SSRF protection (must be enabled with SSRF_PROTECTION_ENABLED env)
8 months ago
4bb0345641
fixed infinite loop for DefaultNotificationRuleRecipientsConfig openapi schema
8 months ago
c569516a3c
fixed JsonSubTypes mapping
8 months ago
92a036a26c
deleted defaultImpl for models as openapi don`t suppport it
8 months ago
56b18989b3
updated EntityExportData with missing discriminator mappings
8 months ago
549e8ba12b
fixed openapi issue with defaultImpl, deleted redundant allOf
8 months ago
cc7aee6c0e
Merge pull request #15120 from thingsboard/fix/oauth2
Improved Apple OAuth2 mapper and refactored OAuth2 client validation
8 months ago
093bae6c00
Merge pull request #15117 from thingsboard/fix/git-sync-per-key-commit-cache
Fix per-key commit caching in DefaultGitSyncService
8 months ago
6ea7af0918
Improved Apple OAuth2 mapper and refactored OAuth2 client validation
- Use ID token claims as the source of truth for Apple OAuth2 attributes
- Added Apple mapper type to OAuth2 client data validation
- Consolidated duplicated validation logic for BASIC, GITHUB, and APPLE mapper types
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
8 months ago
45c0691b47
Add SSRF protection
8 months ago
08dcd79455
Fix ProjectInfo dependency issues
8 months ago
a2ec1248fc
Fix per-key commit caching in DefaultGitSyncService
The lastCommit field was shared across all repository keys, causing
MissingObjectException when multiple repositories were registered.
When onUpdate fired for repo A it overwrote lastCommit, and subsequent
listFiles/getFileContent calls for repo B used repo A's commit whose
tree objects don't exist in repo B's object database.
Changed to a per-key Map<String, RevCommit> so each repository's
resolved commit is stored and retrieved independently.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
8 months ago
b13b12cb34
openapi improvements
8 months ago
Viacheslav Klimov
dashevchenko
Vladyslav Prykhodko
Ekaterina Chantsova