release: v4.10.4 by Yeraze · Pull Request #3484 · Yeraze/meshmonitor

Yeraze · 2026-06-15T17:16:06Z

v4.10.4 — patch release

Version bumped to 4.10.4 across all five version files (package.json, package-lock.json, helm/meshmonitor/Chart.yaml, desktop/package.json, desktop/src-tauri/tauri.conf.json).

Bug Fixes (since 4.10.3)

Timed Events fired across all sources (fix(automation): timed events firing across all sources #3479) — timer-trigger result writes are now source-scoped, so a timed event only runs on the source it was configured for.
Saving Traffic Management / Status Message config failed (Bug: Invalid module type errors for trafficmanagement and statusmessage configs #3464) — the generic module-config save route now accepts both module types (was rejecting them with "Invalid module type").
Auto Favorites wrongly reported firmware as unsupported (fix(favorites): version-key supportsFavorites cache so it can't stick on unsupported #3482) — the firmware-support cache is keyed by version and no longer sticks on false when the version was briefly unknown.
MeshCore Share Contact failed silently (fix(meshcore): surface real Share Contact errors instead of failing silently #3481) — the real failure reason now reaches the user, with a faster 10s timeout instead of a silent hang.
Delivered icon missing on own replies in Firefox on Android (Bug: delivered icon not visible on own replies to public messages on Firefox android #3477) — CSS flex-sizing fix; desktop unaffected.
Air-quality particle counts never collected or graphed (fix(telemetry): collect air-quality particle counts (protobuf.js snake_case quirk) #3483) — underscore-before-digit protobuf fields are now read in their snake_case form, so all six particle bins are stored and graphed.

Changes

CHANGELOG.md: promoted [Unreleased] → [4.10.4] - 2026-06-15 and added the user-facing PRs merged after the section was last written.

Validation

tsc --noEmit: clean
Full Vitest suite: 6470 pass, 0 fail, 0 suite failures
System tests enabled via the system-test label on this PR.

🤖 Generated with Claude Code

Bump version to 4.10.4 across package.json, package-lock.json, helm/meshmonitor/Chart.yaml, desktop/package.json, and desktop/src-tauri/tauri.conf.json. Promote CHANGELOG [Unreleased] to [4.10.4] and add the user-facing fixes merged since 4.10.3: timed-events cross-source firing (#3479), module config save for Traffic Management/Status Message (#3464), Auto Favorites firmware-support cache (#3482), MeshCore Share Contact error surfacing (#3481), and the Firefox-Android delivered-icon CSS fix (#3477). The air-quality particle-count fix (#3483) was already in [Unreleased]. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

github-actions · 2026-06-15T17:17:08Z

Claude finished @Yeraze's task —— View job

Code Review for Release v4.10.4

Todo List:

Review version consistency across all 5 files
Analyze CHANGELOG format and content
Verify release process follows repository standards
Check for any security or quality concerns
Provide comprehensive feedback

Code Quality Assessment

✅ Version Consistency

All 5 version files are correctly updated to 4.10.4:

package.json:3, package-lock.json:3,9, helm/meshmonitor/Chart.yaml:5,6, desktop/package.json:4, desktop/src-tauri/tauri.conf.json:4

✅ CHANGELOG Quality

Format: Follows Keep a Changelog standard correctly
Content: All 6 bug fixes reference actual merged PRs with commit evidence:
- fix(telemetry): collect air-quality particle counts (protobuf.js snake_case quirk) #3483: 1a94d53 fix(telemetry): collect air-quality particle counts
- fix(favorites): version-key supportsFavorites cache so it can't stick on unsupported #3482: 304ac15 fix(favorites): version-key supportsFavorites cache
- fix(meshcore): surface real Share Contact errors instead of failing silently #3481: 522d0ad fix(meshcore): surface real Share Contact errors
- fix(automation): timed events firing across all sources #3479: f4f28ba fix(automation): scope timer-trigger result writes
- Bug: delivered icon not visible on own replies to public messages on Firefox android #3477: cbf70f4 fix(messages): keep delivered-icon visible
- Bug: Invalid module type errors for trafficmanagement and statusmessage configs #3464: 86fdc59 fix(config): accept statusmessage/trafficmanagement
Technical detail: Descriptions are thorough and explain root causes

✅ Release Process Adherence

Follows CLAUDE.md guidelines exactly (all 5 version files updated)
Clean commit: only version bumps + CHANGELOG promotion
Proper [Unreleased] → [4.10.4] - 2026-06-15 migration
No code changes mixed with version bump (good separation)

Security & Quality

✅ No Security Concerns

Pure release commit with no functional code changes
Version files contain expected package metadata only
CHANGELOG contains only documentation updates

✅ Best Practices

Atomic release commit: Only version + changelog changes
Traceable fixes: Every bug fix links to a merged PR
Date accuracy: Release date matches commit date
Semantic versioning: 4.10.3→4.10.4 appropriate for patch fixes

Performance Considerations

No performance impact - this is purely a version bump with no code changes.

Test Coverage Validation

✅ PR description claims "6470 pass, 0 fail" - all tests passing before release.

Recommendations

🎯 Excellent Release Practice

This release demonstrates exemplary release management:

Clean separation of functional fixes (in individual PRs) from version bump
Complete traceability - every CHANGELOG entry has corresponding commit evidence
Consistent versioning across all deployment targets (web, Helm, desktop)
Thorough documentation with technical root-cause explanations

💡 Minor Suggestion

Consider adding a brief summary line at the top of each release section (e.g., "6 bug fixes focusing on telemetry collection and multi-source behavior") for quick scanning, though the current detailed format is excellent for debugging.

Overall Assessment: ⭐ Exceptional release quality - ready to merge

github-actions · 2026-06-15T17:29:50Z

System Test Results

MeshMonitor System Test Results

Test Run: 2026-06-15 13:29:48 EDT

Test Summary

Test Suite	Result
Configuration Import	✅ PASSED
Quick Start Test	✅ PASSED
Security Test	✅ PASSED
V1 API Test	✅ PASSED
Reverse Proxy Test	✅ PASSED
Reverse Proxy + OIDC	✅ PASSED
Virtual Node CLI Test	✅ PASSED
Backup & Restore Test	✅ PASSED
Database Migration Test	✅ PASSED
DB Backing Consistency	✅ PASSED
API Exercise (3 DBs)	✅ PASSED

✅ Overall Result: PASSED

All deployment configurations are working correctly!

Test Details

Configuration Import:

Tests configuration import and device reboot cycle
Verifies channel roles, PSKs, and LoRa configuration
Note: Channel name verification skipped due to architectural limitation

Quick Start Test:

Zero-config deployment (no SESSION_SECRET or COOKIE_SECURE required)
HTTP access without HSTS
Auto-generated admin user with default credentials
Session cookies work over HTTP
Meshtastic node connection and message exchange verified

Security Test:

Verifies Node IP address hidden from anonymous users in API responses
Verifies MQTT configuration hidden from anonymous users
Verifies Node IP address visible to authenticated users
Verifies MQTT configuration visible to authenticated users
Verifies protected endpoints require authentication

V1 API Test:

Tests v1 REST API endpoints with Bearer token authentication
Verifies Bearer token requests bypass CSRF protection
Verifies POST/PUT/DELETE work without CSRF token when using Bearer auth
Verifies session-based requests still require CSRF token

Reverse Proxy Test:

Production deployment with COOKIE_SECURE=true
HTTPS-ready configuration
Trust proxy enabled for reverse proxy compatibility
CORS configured for HTTPS domain
Meshtastic node connection and message exchange verified

Reverse Proxy + OIDC Test:

OIDC authentication integration
Mock OIDC provider health checks
Authorization flow and session creation
Hybrid mode (OIDC + local auth)
Meshtastic node connection verified

Virtual Node CLI Test:

Virtual Node Server enabled on TCP port 4404
Meshtastic Python client successfully connects
Node data download and synchronization verified
Test message sent on gauntlet channel (index 3)
Message delivery confirmed via Web UI API
Virtual Node Server connection logging verified

Backup & Restore Test:

System backup created from running dev container
New container spun up with RESTORE_FROM_BACKUP env var
Data integrity verified (node count, message count, settings)
Restore event logged in audit log
Dev container unaffected by restore test

Database Migration Test:

SQLite to PostgreSQL migration verified
SQLite to MySQL migration verified
Data integrity confirmed for both target databases
Row counts match between source and target

DB Backing Consistency Test:

SQLite, PostgreSQL, and MySQL backends tested with same device
Node counts within ±10 across all three backends
Favorite counts identical across all backends
Key station verified as favorite on all backends

Yeraze added the system-test Trigger hardware system tests label Jun 15, 2026

Yeraze merged commit 507479b into main Jun 15, 2026
24 checks passed

Yeraze deleted the release/4.10.4 branch June 15, 2026 18:12

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

release: v4.10.4#3484

release: v4.10.4#3484
Yeraze merged 1 commit into
mainfrom
release/4.10.4

Yeraze commented Jun 15, 2026

Uh oh!

github-actions Bot commented Jun 15, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Jun 15, 2026

MeshMonitor System Test Results

Test Summary

✅ Overall Result: PASSED

Test Details

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

Yeraze commented Jun 15, 2026

v4.10.4 — patch release

Bug Fixes (since 4.10.3)

Changes

Validation

Uh oh!

github-actions Bot commented Jun 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Code Review for Release v4.10.4

Todo List:

Code Quality Assessment

✅ Version Consistency

✅ CHANGELOG Quality

✅ Release Process Adherence

Security & Quality

✅ No Security Concerns

✅ Best Practices

Performance Considerations

Test Coverage Validation

Recommendations

🎯 Excellent Release Practice

💡 Minor Suggestion

Uh oh!

github-actions Bot commented Jun 15, 2026

MeshMonitor System Test Results

Test Summary

✅ Overall Result: PASSED

Test Details

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

github-actions Bot commented Jun 15, 2026 •

edited

Loading