490482cdd1
Merge remote-tracking branch 'origin/lts-4.3' into release-4.3
8 months ago
bf7e8ecdfa
Add 4.2.2.x as supported from version for upgrade
8 months ago
7f62127439
Merge branch 'lts-4.3' of github.com:thingsboard/thingsboard into release-4.3
8 months ago
41e11da964
UI: Fixed build ui types in color picker input
8 months ago
46f3fcf66b
Version set to 4.3.1
8 months ago
a68f0fb0dc
Merge branch 'lts-4.3' into release-4.3
# Conflicts:
# application/pom.xml
# common/actor/pom.xml
# common/cache/pom.xml
# common/cluster-api/pom.xml
# common/coap-server/pom.xml
# common/dao-api/pom.xml
# common/data/pom.xml
# common/discovery-api/pom.xml
# common/edge-api/pom.xml
# common/edqs/pom.xml
# common/message/pom.xml
# common/pom.xml
# common/proto/pom.xml
# common/queue/pom.xml
# common/script/pom.xml
# common/script/remote-js-client/pom.xml
# common/script/script-api/pom.xml
# common/stats/pom.xml
# common/transport/coap/pom.xml
# common/transport/http/pom.xml
# common/transport/lwm2m/pom.xml
# common/transport/mqtt/pom.xml
# common/transport/pom.xml
# common/transport/snmp/pom.xml
# common/transport/transport-api/pom.xml
# common/util/pom.xml
# common/version-control/pom.xml
# dao/pom.xml
# edqs/pom.xml
# monitoring/pom.xml
# msa/black-box-tests/pom.xml
# msa/edqs/pom.xml
# msa/js-executor/pom.xml
# msa/monitoring/pom.xml
# msa/pom.xml
# msa/tb-node/pom.xml
# msa/tb/pom.xml
# msa/transport/coap/pom.xml
# msa/transport/http/pom.xml
# msa/transport/lwm2m/pom.xml
# msa/transport/mqtt/pom.xml
# msa/transport/pom.xml
# msa/transport/snmp/pom.xml
# msa/vc-executor-docker/pom.xml
# msa/vc-executor/pom.xml
# msa/web-ui/pom.xml
# netty-mqtt/pom.xml
# pom.xml
# rest-client/pom.xml
# rule-engine/pom.xml
# rule-engine/rule-engine-api/pom.xml
# rule-engine/rule-engine-components/pom.xml
# tools/pom.xml
# transport/coap/pom.xml
# transport/http/pom.xml
# transport/lwm2m/pom.xml
# transport/mqtt/pom.xml
# transport/pom.xml
# transport/snmp/pom.xml
# ui-ngx/pom.xml
8 months ago
c6e52ecb68
Merge remote-tracking branch 'origin/lts-4.2' into lts-4.3
8 months ago
c4bfb397d5
Merge pull request #15161 from smatvienko-tb/fix/mqtt-rpc-delivery-timeout-requeue-race
fix: Mqtt test await RPC re-queuing after session close on delivery timeout
8 months ago
cc35e71e55
fix: await RPC re-queuing after session close on delivery timeout
After the MQTT transport closes the session on RPC delivery timeout,
the server re-queues the RPC asynchronously. The test was asserting
the RPC status immediately after the client disconnect latch fired,
before the server-side re-queuing had completed — so the status was
still SENT instead of the expected QUEUED.
Replace the direct doGet assertion with an Awaitility poll that waits
up to DEFAULT_WAIT_TIMEOUT_SECONDS for the status to become QUEUED.
Fixes flaky: MqttV5CloseTransportSessionOnRpcDeliveryTimeoutIntegrationTest
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
8 months ago
5e228b6bc3
Merge remote-tracking branch 'origin/lts-4.2' into lts-4.3
8 months ago
a626f84c2f
Merge pull request #15164 from smatvienko-tb/fix/node-modules-pollution-parallel-build
Fix node_modules pollution between builds in parallel Maven execution
8 months ago
643fd573cc
Merge branch 'lts-4.2' into lts-4.3
8 months ago
49341412a1
Fix old extensions loading: Force standalone false for pipe declared inside module.
8 months ago
680e906aa8
Add --check-files to yarn install to enforce node_modules integrity
8 months ago
1738ad3ef1
Update yarn.lock: typescript 5.9.2 → 5.9.3
8 months ago
5629302bdb
Align typescript version to ~5.9.3 across all JS modules
8 months ago
a9394b8fb6
Fix node_modules pollution between builds in parallel Maven execution
When building with -T6, multiple JS modules run yarn install concurrently.
The --mutex network flag serializes yarn processes, but if node_modules from
a previous build (or a different branch/version) is left on disk, yarn may
skip reinstalling packages — including devDependencies — treating the stale
state as up-to-date. This causes tools like tsc to be missing at build time.
Configure maven-clean-plugin to delete node_modules during mvn clean for
all JS modules (ui-ngx, msa/js-executor, msa/web-ui). Yarn restores from
its global cache (~/.cache/yarn), so the overhead is relinking only.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
8 months ago
c8365a0267
Merge with lts-4.2
8 months ago
9958f549f1
Merge pull request #15145 from mtsymbarov-del/fix/cf-and-alarm-rules-name-validation
Removed pattern validation from name field on CF and Alarm rules
8 months ago
2ece50e03b
Fixed CF name validation
8 months ago
88a74a010e
Merge branch 'lts-4.3' into fix/cf-and-alarm-rules-name-validation
8 months ago
71839f77af
Merge remote-tracking branch 'origin/lts-4.2' into lts-4.3
8 months ago
f6e8d4e301
Merge pull request #15140 from thingsboard/fix/ssrf-validator-flaky-test
Fix flaky SsrfProtectionValidatorTest parallel execution
8 months ago
08f39aa35c
Fix merge miss
8 months ago
61d4fa6f57
Removed pattern validation from name field on CF and Alarm rules
8 months ago
0758a6bcc5
Merge remote-tracking branch 'origin/fix/cf-name-validation' into fix/cf-and-alarm-rules-name-validation
8 months ago
91216537a8
Fixed CF name validation
8 months ago
0d23685b62
Fix flaky SsrfProtectionValidatorTest by moving @ResourceLock to class level
Tests that read shared static state (e.g. testAllowedUrls with 8.8.8.8)
could run concurrently with tests that mutate it (e.g. testAdditionalBlockedSingleIp),
causing intermittent failures. Class-level @ResourceLock serializes all tests.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
8 months ago
19e72cdeeb
Merge pull request #15116 from DmytroKhylko/fix/export-ws-configuration-variables
Made max WS message size configurable
8 months ago
9c197da296
Merge pull request #15055 from volodymyr-babak/admin-setting-fix-43
Implement event-sourced propagation for AdminSettings
8 months ago
bc0e63bea3
Merge pull request #15050 from volodymyr-babak/admin-setting-fix
Event-sourced propagation for admin settings
8 months ago
0e92e2116b
Merge remote-tracking branch 'origin/lts-4.2' into lts-4.3
8 months ago
d11b588eba
Merge pull request #15102 from smatvienko-tb/fix/rule-chain-input-loop-detection
Fixed infinite loop when rule chain input node forwards to its own rule chain
8 months ago
7d198fd958
Merge pull request #15091 from thingsboard/fix_bug_test_lwm2m_FW_Update
Fix Flaky LwM2M Integration Tests (OTA & PSK Validation)
8 months ago
cfdcbe4115
Merge branch 'lts-4.2' into lts-4.3
8 months ago
75afbca8d2
Merge pull request #15128 from vvlladd28/improvement/security/2-03-26
Fixed CVE-2026-27970 and CVE-2026-2391
8 months ago
e4eb469e3b
Merge pull request #15130 from ChantsovaEkaterina/improvement/extend-modules-map
Extend modules map: moment-timezone, canvas-gauges and ngx-hm-carousel added
8 months ago
b2526f26f7
Extend modules map: moment-timezone, canvas-gauges and ngx-hm-carousel added
8 months ago
bc7a83b333
Fixed CVE-2026-2391
8 months ago
30f655d99c
UI: Fixed CVE-2026-27970
8 months ago
ce880453d6
Merge remote-tracking branch 'origin/lts-4.2' into lts-4.3
8 months ago
95f794d71b
Merge pull request #15124 from thingsboard/fix/cves
Fixed CWE-770 in Jackson Core (GHSA-72hv-8253-57qq)
8 months ago
d16fe3d1be
Fixed CWE-770 in Jackson Core (GHSA-72hv-8253-57qq)
8 months ago
422921df8e
Merge pull request #15123 from thingsboard/fix/ssrf
Added SSRF protection (must be enabled with SSRF_PROTECTION_ENABLED env)
8 months ago
cc7aee6c0e
Merge pull request #15120 from thingsboard/fix/oauth2
Improved Apple OAuth2 mapper and refactored OAuth2 client validation
8 months ago
093bae6c00
Merge pull request #15117 from thingsboard/fix/git-sync-per-key-commit-cache
Fix per-key commit caching in DefaultGitSyncService
8 months ago
6ea7af0918
Improved Apple OAuth2 mapper and refactored OAuth2 client validation
- Use ID token claims as the source of truth for Apple OAuth2 attributes
- Added Apple mapper type to OAuth2 client data validation
- Consolidated duplicated validation logic for BASIC, GITHUB, and APPLE mapper types
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
8 months ago
45c0691b47
Add SSRF protection
8 months ago
08dcd79455
Fix ProjectInfo dependency issues
8 months ago
a2ec1248fc
Fix per-key commit caching in DefaultGitSyncService
The lastCommit field was shared across all repository keys, causing
MissingObjectException when multiple repositories were registered.
When onUpdate fired for repo A it overwrote lastCommit, and subsequent
listFiles/getFileContent calls for repo B used repo A's commit whose
tree objects don't exist in repo B's object database.
Changed to a per-key Map<String, RevCommit> so each repository's
resolved commit is stored and retrieved independently.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
8 months ago
Viacheslav Klimov
Vladyslav_Prykhodko
Sergey Matvienko
Maksym Tsymbarov
Ekaterina Chantsova