7dbbfcc903
Fixed CVE-2026-48779
3 months ago
62783c1ca6
Fixed CVE-2026-54290
3 months ago
6653f5570b
Merge branch 'lts-4.3' into rc
3 months ago
6d3281da7e
Merge remote-tracking branch 'origin/lts-4.2' into lts-4.3
3 months ago
f412309695
Merge pull request #15797 from thingsboard/fix/cves-master
Fixed CVE-2026-44249, CVE-2026-44250, CVE-2026-44890, CVE-2026-44893, CVE-2026-45416, CVE-2026-45674, CVE-2026-46340, CVE-2026-47691, CVE-2026-48006, CVE-2026-48059, CVE-2026-50010, CVE-2026-50011
3 months ago
39b7bf8946
Merge pull request #15796 from thingsboard/fix/cves-lts-4.3
Fixed CVE-2026-44249, CVE-2026-44250, CVE-2026-44890, CVE-2026-44893, CVE-2026-45416, CVE-2026-45674, CVE-2026-46340, CVE-2026-47691, CVE-2026-48006, CVE-2026-48059, CVE-2026-50010, CVE-2026-50011
3 months ago
5dc65be6ab
Merge pull request #15795 from thingsboard/fix/cves-lts-4.2
Fixed CVE-2026-44249, CVE-2026-44250, CVE-2026-44890, CVE-2026-44893, CVE-2026-45416, CVE-2026-45674, CVE-2026-46340, CVE-2026-47691, CVE-2026-48006, CVE-2026-48059, CVE-2026-50010, CVE-2026-50011
3 months ago
41e5008383
Merge fix/cves-lts-4.3 into fix/cves-master
3 months ago
cf6446d18f
Merge fix/cves-lts-4.2 into fix/cves-lts-4.3
3 months ago
d54528ef55
Bump io.netty:netty-bom from 4.1.134.Final to 4.1.135.Final to fix CVE-2026-44249, CVE-2026-44250, and 10 others
3 months ago
57e342960d
UI: drop icon from breadcrumb, polish header layout, add sidebar-close icon
3 months ago
3464b7a6e7
Merge branch 'feature/lts-4.3-iot-hub' into feature/4.4-iot-hub
3 months ago
400aab24ee
Merge branch 'master' into feature/4.4-iot-hub
3 months ago
d36abea301
Merge branch 'feature/iot-hub' into feature/lts-4.3-iot-hub
3 months ago
9c21f8bcbe
Merge branch 'lts-4.3' into feature/lts-4.3-iot-hub
3 months ago
3c95be4ed9
Merge branch 'lts-4.2' into feature/iot-hub
3 months ago
479b1cbe7c
Merge pull request #15792 from vvlladd28/merge/160626/rc
Merge rc to master
3 months ago
94ac17c4ea
Merge remote-tracking branch 'upstream/rc' into merge/160626/rc
# Conflicts:
# pom.xml
# ui-ngx/src/app/modules/home/components/widget/widget-config.component.html
3 months ago
bc7f8c6ef4
Merge remote-tracking branch 'upstream/lts-4.3' into rc
3 months ago
a1365d0ca3
Merge remote-tracking branch 'upstream/lts-4.2' into lts-4.3
# Conflicts:
# ui-ngx/src/app/modules/home/pages/security/security.component.html
3 months ago
9728e2c03d
Fixed device/asset profile import when default rule chain no longer exists ( #15718 )
* Fixed device/asset profile import when default rule chain no longer exists
* Minor fixes
* Code refactorings and optimizations
3 months ago
9c610c4707
Fixed sync highlight overlay scroll on Safari in string-pattern-autocomplete ( #15754 )
* Fixed sync highlight overlay scroll on Safari in string-pattern-autocomplete
* Minor adjustment
* Code improvements
3 months ago
a94381b702
Fixed change Password button stays disabled when form is filled programmatically ( #15701 )
* Fixed change Password button stays disabled when form is filled programmatically
* Minor fixes
3 months ago
07af9eaf27
Added hint for Unread notifications widget in widget selector
4 months ago
0072074b0e
Fix no widgets shown in mobile view after state transition from divided layout
4 months ago
6b94053b7f
Merge branch 'feature/iot-hub' into feature/lts-4.3-iot-hub
3 months ago
5fa837fb03
fix(iot-hub): restrict installed-items list sort property to a server-side allow-list
Unvalidated sortProperty on GET /api/iot-hub/installedItems was passed straight into Spring Data's Sort.by, so a client could trigger a 500 PropertyReferenceException by naming an unknown entity field. Add ALLOWED_SORT_PROPERTIES on IotHubInstalledItemEntity (createdTime, itemName, itemType, version) and call validatePageLink in the service so the failure is a 400 with a clear message.
3 months ago
0d476bfaba
Fixed Switch Control widget hanging on one-way persistent RPC
4 months ago
8ddfab317a
Fixed Advanced Widget Style Editor rendering ( #15731 )
* Fixed Advanced Widget Style Editor rendering
* Moved styles to class for styles consistency
3 months ago
3571980aaa
Merge branch 'feature/iot-hub' into feature/lts-4.3-iot-hub
3 months ago
a4e4f56158
fix(iot-hub): show connection-method selector step even when a single method is available
3 months ago
729cdfc046
test: align DeviceConnectivityUtilTest with new DockerComposeParams signature
3 months ago
4e2bffa559
add help pages for html container
3 months ago
d0e14521c3
Merge branch 'feature/iot-hub' into feature/lts-4.3-iot-hub
3 months ago
77c74d7ccd
fix(iot-hub): compensate orphaned entities when installed-item tracking save fails
If iotHubInstalledItemService.save throws after the local entity was already created, the entity was orphaned — visible in the tenant but invisible to IoT Hub update/delete. Extracted the per-type entity-deletion dispatch from deleteInstalledItem into a deleteEntityForDescriptor helper and call it from doInstallVersion and registerDeviceInstall on tracking-save failure. registerDeviceInstall now also wraps reportVersionInstalled best-effort to match doInstallVersion.
3 months ago
3ccb437d94
Merge branch 'feature/iot-hub' into feature/lts-4.3-iot-hub
3 months ago
62c1963507
fix(solutions): clamp solution-template installTimeoutMs to a configurable max
The post-install Thread.sleep was driven by installTimeoutMs from the uploaded solution.json with no upper bound — a malicious or misconfigured template could pin an HTTP worker thread indefinitely. Cap it at a configurable max (default 60s) exposed as iot-hub.max-install-timeout-ms with an IOT_HUB_MAX_INSTALL_TIMEOUT_MS env override.
3 months ago
d7aa0889ae
Merge branch 'feature/iot-hub' into feature/lts-4.3-iot-hub
3 months ago
93b50bdf96
fix(solutions): bound solution-template zip extraction to mitigate zip-bomb attacks
Stream entries through a fixed buffer and abort with IOException when the archive crosses any of three configurable thresholds: total uncompressed bytes, per-entry uncompressed bytes, or entry count. Defaults — 200 MiB total, 50 MiB per entry, 10 000 entries — and env-var overrides IOT_HUB_MAX_UNCOMPRESSED_ARCHIVE_BYTES / IOT_HUB_MAX_UNCOMPRESSED_ENTRY_BYTES / IOT_HUB_MAX_ARCHIVE_ENTRY_COUNT are exposed under iot-hub in thingsboard.yml.
3 months ago
5c577a391b
Merge branch 'feature/iot-hub' into feature/lts-4.3-iot-hub
3 months ago
f264c123f8
Merge branch 'lts-4.3' into feature/lts-4.3-iot-hub
3 months ago
d839f1b465
Merge branch 'lts-4.2' into feature/iot-hub
3 months ago
6bbe5f7bb4
Merge branch 'feature/iot-hub' into feature/lts-4.3-iot-hub
3 months ago
456ef7e736
feat(iot-hub): add YouTube link to creator profile
Add youtubeUrl to CreatorView and render it alongside the other creator social links. Reindents the link block so it nests correctly inside the surrounding flex column.
3 months ago
eb5a50be26
Fix conflicts
3 months ago
8cbac06ffc
fix(iot-hub): skip already-installed check for non-widget/solution-template root entries
Root entries other than WIDGET or SOLUTION_TEMPLATE should always be installed even when a prior version is already installed — only widgets and solution templates are deduplicated by item id at install-plan resolution time.
3 months ago
b53ca8ca6e
Merge pull request #15682 from pinkevmladchy/add-related-items
Add related items logic
3 months ago
34134f3620
Merge branch 'feature/iot-hub' of github.com:thingsboard/thingsboard into add-related-items
3 months ago
ea70386a7a
fix alreadInstalledItems to searchByTenantAndItemId instead of only tenantId
3 months ago
5e06d3fe5b
Merge branch 'feature/iot-hub' into add-related-items
3 months ago
Maksym Tsymbarov
Viacheslav Klimov
Igor Kulikov
Vladyslav Prykhodko
dpinkevych