bb20eedc78
Merge pull request #15602 from thingsboard/rc
Merge rc into master
4 weeks ago
8847a0413c
Merge remote-tracking branch 'origin/lts-4.3' into rc
4 weeks ago
d7935e4d41
Merge remote-tracking branch 'origin/lts-4.2' into lts-4.3
4 weeks ago
136c5da780
Merge pull request #15599 from thingsboard/fix/cves-lts-4.3
Fixed CVE-2026-42579, CVE-2026-42583, CVE-2026-42584, CVE-2026-42587
4 weeks ago
d8115cd40a
Merge pull request #15598 from thingsboard/fix/cves-lts-4.2
Fixed CVE-2026-42579, CVE-2026-42583, CVE-2026-42584, CVE-2026-42587
4 weeks ago
e01c0078b3
Merge fix/cves-lts-4.2 into fix/cves-lts-4.3
4 weeks ago
9a84ea35a0
Bump io.netty:netty-bom from 4.1.132.Final to 4.1.133.Final to fix CVE-2026-42579, CVE-2026-42583, CVE-2026-42584, and CVE-2026-42587
4 weeks ago
ec489671fe
Merge pull request #15594 from thingsboard/rc
Merge rc into master
4 weeks ago
dec4d0e6a8
Merge remote-tracking branch 'origin/lts-4.3' into rc
4 weeks ago
79b07a9de6
Merge remote-tracking branch 'origin/lts-4.2' into lts-4.3
4 weeks ago
44ca83b975
Merge pull request #15588 from zzzeebra/fix/security-scan-108009
Fixed CVE-2026-40682, CVE-2026-42027
4 weeks ago
3700f64595
Merge pull request #15554 from volodymyr-babak/busy-wait-loop-fix
Prevent consumer busy-wait when partition assignment is empty
4 weeks ago
547559db84
Merge pull request #15346 from volodymyr-babak/snmp-pooling-fixes
SNMP: defer querying tasks until transport session is registered
4 weeks ago
f230156ba8
Merge pull request #15582 from dashevchenko/jsExecutorWindowsFix
Fixed web-ui and js-executor exe files for Windows
4 weeks ago
d3e526058f
Code review changes
4 weeks ago
183def96f3
Fixed CVE-2026-40682, CVE-2026-42027
4 weeks ago
2395cd8c4e
split pkg per target to keep bytecode on Linux
--no-bytecode is only required for the Windows target; running pkg as a
single multi-target invocation applied it to Linux too, dropping V8
bytecode from the Linux exe. Split into two pkg invocations so Linux
keeps bytecode and only the Windows build relaxes it.
4 weeks ago
18aca10b73
Merge pull request #15586 from thingsboard/master-rc-merge
Merge rc into master
4 weeks ago
16cc7d841e
Merge remote-tracking branch 'origin/rc' into master-rc-merge
# Conflicts:
# application/src/main/resources/thingsboard.yml
4 weeks ago
a8df9bffa2
Merge remote-tracking branch 'origin/lts-4.3' into rc
4 weeks ago
17db55c9e5
Merge remote-tracking branch 'origin/lts-4.2' into lts-4.3
# Conflicts:
# application/src/test/java/org/thingsboard/server/service/entitiy/EdqsEntityServiceTest.java
4 weeks ago
563f5394f0
Merge pull request #15425 from dashevchenko/postgresSortOrderFix
Added config option for nulls ordering strategy in dashboards
4 weeks ago
3555f79a93
Merge pull request #15585 from zzzeebra/fix/tbel-sandbox-version-bump-lts-4.2
Fixed SSRF and file access vulnerabilities in TBEL script sandbox
4 weeks ago
739a33b721
Update tbel to 1.2.10 and add sandbox security tests
Bump tbel dependency to 1.2.10 which blocks dangerous java.util
subpackages (logging, zip, jar, prefs, spi) in TBEL sandbox.
Add integration tests verifying sandbox blocks SocketHandler, ZipFile,
FileHandler, JarFile, Preferences, and LocaleServiceProvider.
2 months ago
8e19d09f0b
Merge pull request #15574 from zzzeebra/feature/patch-applier-create-widgets-lts-4.2
Added support for new system widgets in patch upgrades
4 weeks ago
af659f36c0
fix(csv): assign result of replace in splitCSV else branch
The replace() call in the unquoted-field path was discarding its return
value, leaving "" sequences unescaped instead of collapsing them to ".
4 weeks ago
33ed4be121
fixed web-ui and js-executor exe files for Windows
4 weeks ago
f4bf5336dc
Merge pull request #15580 from vvlladd28/merge/05-05-26-1/rc
Merge rc to master
4 weeks ago
d8bad39a5c
Merge remote-tracking branch 'upstream/rc' into merge/05-05-26-1/rc
4 weeks ago
990e439247
Merge remote-tracking branch 'upstream/lts-4.3' into rc
4 weeks ago
af951945e1
Merge pull request #15579 from ChantsovaEkaterina/bug/map-model-definition-missing-polylines
Map widget: fix data aggregation for additional data keys and import/export widget JSON for polylines layer
4 weeks ago
1f5ecf2ced
Merge remote-tracking branch 'upstream/lts-4.3' into bug/map-model-definition-missing-polylines
4 weeks ago
0c2ab1276b
Map widget: derive mapDataLayerTypes from list of supported map data layers
4 weeks ago
c454c8cca8
Merge branch 'lts-4.2' into lts-4.3
4 weeks ago
2c554d4239
Merge branch 'feature/html-container-widget' into lts-4.2
4 weeks ago
3b5a1004f1
Merge pull request #15562 from zzzeebra/fix/alarm-duration-cleanup-on-reinit
Fixed stale duration check future warning on alarm rule REINIT
4 weeks ago
13ae00a6cd
feat(html-container): split-pane settings layout, fullscreen, mode-aware completer
- Split the settings dialog into a resizable two-pane layout (left:
resources/HTML/CSS/JS tabs; right: live preview) using split.js,
with a fullscreen toggle that resets the tab animation duration to
avoid jank during expand.
- Split ContainerFunctionEditorCompleter into HTML- and Angular-mode
variants so the autocomplete suggests `container` only in HTML
mode (Angular mode has no container argument).
- Mark the widget with previewWidth/previewHeight 100% and
overflowVisible: true in its controllerScript typeParameters so
the basic config preview fills its slot.
4 weeks ago
1a3dc83366
Map widget: fix data aggregation for additional data keys and import/export widget JSON for polylines layer
4 weeks ago
f3b6cb8e4a
Reused cancelDurationCheckFuture in clearDurationConditionState
4 weeks ago
ee54163352
Skipped image field when comparing widgets bundle metadata
ImageService.replaceBase64WithImageUrl rewrites base64 data URIs into
system-image URLs at save time. After install, the DB image is a
'tb-image;...' URL while the JSON file still carries a base64 data URI —
naive string compare always reported a diff and caused every system
bundle to be re-saved on every patch run.
4 weeks ago
f7ace959b3
Merge pull request #15451 from zzzeebra/fix/mqtt-transport-init-leak
Fixed app hanging on MQTT port conflict at startup
4 weeks ago
28b376aa3c
Merge pull request #15560 from dashevchenko/maxAggrFix
Fixed MAX aggregation for mixed double and long telemetry values
4 weeks ago
9733a0ca7e
Merge pull request #15578 from thingsboard/rc
Merge rc into master
4 weeks ago
38858966d6
Merge remote-tracking branch 'origin/lts-4.3' into rc
4 weeks ago
9e81235b28
Merge remote-tracking branch 'origin/lts-4.2' into lts-4.3
4 weeks ago
c2d7fcb9cb
Merge pull request #15563 from dashevchenko/defaultImplFix
Reverted defaultImpl for UI backward compatibility
4 weeks ago
31800a0bb2
Merge pull request #15561 from smatvienko-tb/fix/yarn-build-race-tsc-not-found-lts-4.2
Fix intermittent `tsc: not found` under `mvn -T`: serialize msa yarn modules
4 weeks ago
02228bf60b
Merge pull request #15577 from vvlladd28/merge/05-05-26/rc
Merge rc to master
4 weeks ago
3795f59ef3
Merge pull request #15412 from zzzeebra/fix/ai-provider-ssrf-protection
Fixed SSRF vulnerability in AI model provider URLs
4 weeks ago
f1cfd26276
Merge remote-tracking branch 'upstream/rc' into master
# Conflicts:
# pom.xml
# ui-ngx/src/app/modules/home/components/widget/widget-config.component.html
4 weeks ago
Viacheslav Klimov
Volodymyr Babak
Oleksandra Matviienko
Vladyslav_Prykhodko
Ekaterina Chantsova
dashevchenko
Igor Kulikov