[3.7.3] - 2026-04-10
New plugins
- [security]: Add Security Plugin v.1.0.0.
Dev news
- [frontend]: Implement rendering in config editor of array-items-enum-uniqueItems rjsf path (see the schema of Hass Plugin).
- [platform]: Add BasePlatformConfig to strictly type the platform config (see the matterbridge-irobot module.ts).
Added
- [security]: Escape user-controlled strings in backend responses (e.g. upload
filename) before sending them to the browser to reduce XSS risk (CodeQL). - [security]: Apply rate limiting to backend file-transfer endpoints (upload/download) to reduce brute-force/abuse and accidental DoS (CodeQL).
Changed
- [package]: Update dependencies.
- [frontend]: Update dependencies.
- [frontend]: Bump
frontendversion to v.3.4.11. - [terminal]: Ignore process.stdout.isTTY that was too restrictive.
Fixed
- [ansi]: Fix typo in getDefaultDeviceEnergyManagementModeClusterServer(). Thanks Ludovic BOUÉ (#542).