ec489671fe
Merge pull request #15594 from thingsboard/rc
Merge rc into master
5 months ago
dec4d0e6a8
Merge remote-tracking branch 'origin/lts-4.3' into rc
5 months ago
79b07a9de6
Merge remote-tracking branch 'origin/lts-4.2' into lts-4.3
5 months ago
44ca83b975
Merge pull request #15588 from zzzeebra/fix/security-scan-108009
Fixed CVE-2026-40682, CVE-2026-42027
5 months ago
3700f64595
Merge pull request #15554 from volodymyr-babak/busy-wait-loop-fix
Prevent consumer busy-wait when partition assignment is empty
5 months ago
547559db84
Merge pull request #15346 from volodymyr-babak/snmp-pooling-fixes
SNMP: defer querying tasks until transport session is registered
5 months ago
f230156ba8
Merge pull request #15582 from dashevchenko/jsExecutorWindowsFix
Fixed web-ui and js-executor exe files for Windows
5 months ago
d3e526058f
Code review changes
5 months ago
183def96f3
Fixed CVE-2026-40682, CVE-2026-42027
5 months ago
2395cd8c4e
split pkg per target to keep bytecode on Linux
--no-bytecode is only required for the Windows target; running pkg as a
single multi-target invocation applied it to Linux too, dropping V8
bytecode from the Linux exe. Split into two pkg invocations so Linux
keeps bytecode and only the Windows build relaxes it.
5 months ago
18aca10b73
Merge pull request #15586 from thingsboard/master-rc-merge
Merge rc into master
5 months ago
16cc7d841e
Merge remote-tracking branch 'origin/rc' into master-rc-merge
# Conflicts:
# application/src/main/resources/thingsboard.yml
5 months ago
a8df9bffa2
Merge remote-tracking branch 'origin/lts-4.3' into rc
5 months ago
17db55c9e5
Merge remote-tracking branch 'origin/lts-4.2' into lts-4.3
# Conflicts:
# application/src/test/java/org/thingsboard/server/service/entitiy/EdqsEntityServiceTest.java
5 months ago
563f5394f0
Merge pull request #15425 from dashevchenko/postgresSortOrderFix
Added config option for nulls ordering strategy in dashboards
5 months ago
3555f79a93
Merge pull request #15585 from zzzeebra/fix/tbel-sandbox-version-bump-lts-4.2
Fixed SSRF and file access vulnerabilities in TBEL script sandbox
5 months ago
739a33b721
Update tbel to 1.2.10 and add sandbox security tests
Bump tbel dependency to 1.2.10 which blocks dangerous java.util
subpackages (logging, zip, jar, prefs, spi) in TBEL sandbox.
Add integration tests verifying sandbox blocks SocketHandler, ZipFile,
FileHandler, JarFile, Preferences, and LocaleServiceProvider.
6 months ago
8e19d09f0b
Merge pull request #15574 from zzzeebra/feature/patch-applier-create-widgets-lts-4.2
Added support for new system widgets in patch upgrades
5 months ago
af659f36c0
fix(csv): assign result of replace in splitCSV else branch
The replace() call in the unquoted-field path was discarding its return
value, leaving "" sequences unescaped instead of collapsing them to ".
5 months ago
33ed4be121
fixed web-ui and js-executor exe files for Windows
5 months ago
f4bf5336dc
Merge pull request #15580 from vvlladd28/merge/05-05-26-1/rc
Merge rc to master
5 months ago
d8bad39a5c
Merge remote-tracking branch 'upstream/rc' into merge/05-05-26-1/rc
5 months ago
990e439247
Merge remote-tracking branch 'upstream/lts-4.3' into rc
5 months ago
af951945e1
Merge pull request #15579 from ChantsovaEkaterina/bug/map-model-definition-missing-polylines
Map widget: fix data aggregation for additional data keys and import/export widget JSON for polylines layer
5 months ago
1f5ecf2ced
Merge remote-tracking branch 'upstream/lts-4.3' into bug/map-model-definition-missing-polylines
5 months ago
0c2ab1276b
Map widget: derive mapDataLayerTypes from list of supported map data layers
5 months ago
c454c8cca8
Merge branch 'lts-4.2' into lts-4.3
5 months ago
2c554d4239
Merge branch 'feature/html-container-widget' into lts-4.2
5 months ago
3b5a1004f1
Merge pull request #15562 from zzzeebra/fix/alarm-duration-cleanup-on-reinit
Fixed stale duration check future warning on alarm rule REINIT
5 months ago
13ae00a6cd
feat(html-container): split-pane settings layout, fullscreen, mode-aware completer
- Split the settings dialog into a resizable two-pane layout (left:
resources/HTML/CSS/JS tabs; right: live preview) using split.js,
with a fullscreen toggle that resets the tab animation duration to
avoid jank during expand.
- Split ContainerFunctionEditorCompleter into HTML- and Angular-mode
variants so the autocomplete suggests `container` only in HTML
mode (Angular mode has no container argument).
- Mark the widget with previewWidth/previewHeight 100% and
overflowVisible: true in its controllerScript typeParameters so
the basic config preview fills its slot.
5 months ago
1a3dc83366
Map widget: fix data aggregation for additional data keys and import/export widget JSON for polylines layer
5 months ago
f3b6cb8e4a
Reused cancelDurationCheckFuture in clearDurationConditionState
5 months ago
ee54163352
Skipped image field when comparing widgets bundle metadata
ImageService.replaceBase64WithImageUrl rewrites base64 data URIs into
system-image URLs at save time. After install, the DB image is a
'tb-image;...' URL while the JSON file still carries a base64 data URI —
naive string compare always reported a diff and caused every system
bundle to be re-saved on every patch run.
5 months ago
f7ace959b3
Merge pull request #15451 from zzzeebra/fix/mqtt-transport-init-leak
Fixed app hanging on MQTT port conflict at startup
5 months ago
28b376aa3c
Merge pull request #15560 from dashevchenko/maxAggrFix
Fixed MAX aggregation for mixed double and long telemetry values
5 months ago
9733a0ca7e
Merge pull request #15578 from thingsboard/rc
Merge rc into master
5 months ago
38858966d6
Merge remote-tracking branch 'origin/lts-4.3' into rc
5 months ago
9e81235b28
Merge remote-tracking branch 'origin/lts-4.2' into lts-4.3
5 months ago
c2d7fcb9cb
Merge pull request #15563 from dashevchenko/defaultImplFix
Reverted defaultImpl for UI backward compatibility
5 months ago
31800a0bb2
Merge pull request #15561 from smatvienko-tb/fix/yarn-build-race-tsc-not-found-lts-4.2
Fix intermittent `tsc: not found` under `mvn -T`: serialize msa yarn modules
5 months ago
02228bf60b
Merge pull request #15577 from vvlladd28/merge/05-05-26/rc
Merge rc to master
5 months ago
3795f59ef3
Merge pull request #15412 from zzzeebra/fix/ai-provider-ssrf-protection
Fixed SSRF vulnerability in AI model provider URLs
5 months ago
f1cfd26276
Merge remote-tracking branch 'upstream/rc' into master
# Conflicts:
# pom.xml
# ui-ngx/src/app/modules/home/components/widget/widget-config.component.html
5 months ago
308aafd1e2
Merge remote-tracking branch 'upstream/lts-4.3' into rc
5 months ago
44b0eb4793
Merge remote-tracking branch 'upstream/lts-4.2' into lts-4.3
# Conflicts:
# pom.xml
# ui-ngx/src/app/modules/home/components/widget/lib/settings/common/widget-settings-common.module.ts
# ui-ngx/src/app/modules/home/components/widget/lib/settings/widget-settings.module.ts
# ui-ngx/src/app/modules/home/components/widget/widget-components.module.ts
# ui-ngx/src/assets/locale/locale.constant-en_US.json
5 months ago
ab578a5f87
Added support for new system widgets in patch upgrades
SystemPatchApplier now creates widget types missing from the DB
instead of throwing, and merges new fqns into existing system bundles.
Bundle creation and inline widgetTypes in bundle JSONs are explicitly
rejected as out-of-scope for patch upgrades.
5 months ago
5ca319698e
Merge pull request #15557 from zzzeebra/fix/security-scan-106974
Fixed CVE-2026-40975, CVE-2026-40973, CVE-2026-22740, CVE-2026-42198
5 months ago
e1f6118be2
Merge remote-tracking branch 'upstream/lts-4.2' into fix/security-scan-106974
# Conflicts:
# pom.xml
5 months ago
6e79124c5c
Pinned spring-boot-test/spring-boot-test-autoconfigure to 3.5.13
Spring Boot 3.5.14 ships an ImportsContextCustomizer change that
double-registers legacy @SpyBean fields, causing "Duplicate spy definition"
failures during ApplicationContext load in tests that mix @SpyBean and
@MockitoSpyBean across the test class hierarchy. Pin the test artifacts
to 3.5.13 until 3.5.15+ is released with a fix; runtime stays on 3.5.14
so the CVE fixes remain in effect.
5 months ago
2943b37cf9
Merge pull request #15556 from thingsboard/feature/html-container-widget
HTML container widget
5 months ago
Viacheslav Klimov
Volodymyr Babak
Oleksandra Matviienko
Vladyslav_Prykhodko
Ekaterina Chantsova
dashevchenko
Igor Kulikov