Homelable 3.5.1
- Auto Layout can group devices into zones by device type or by subnet.
- Zigbee auto-sync can import mesh links, opted into from Settings.
- Security hardening of the MCP, Proxmox and scanner boundaries.
- The frontend's backend upstream is configurable, fixing a restart loop with the backend on
network_mode: host. - The bare-metal installer fails fast on Python 3.14 and low memory.
- Fixes for zone children in the live view, Device Inventory search, pending-scan cleanup and OIDC deprecation warnings.
Full changelog
Features
- Group devices into zones by type or subnet from Auto Layout, and size zones and groups at their real box during layout (#516, closes #326)
- Import Zigbee mesh links on auto-sync and Re-sync now, toggled from Settings (#527, closes #519)
Fixes
- Harden network and MCP security boundaries: MCP path-segment validation, Proxmox env token bound to its configured endpoint, single-IP deep rescan, tighter
.dockerignore(#513) — thanks @syscod3! - Make the frontend's backend upstream configurable with
BACKEND_UPSTREAM(#517, closes #512) - Fail fast on Python 3.14 and low memory in the bare-metal installer (#528, refs #511)
- Keep zone children parented in the read-only live view (#525, closes #524)
- Search Device Inventory by the name shown on the card (#526, closes #522)
- Keep the documents of a device approved while pending results are cleared (#509, closes #444)
- Migrate OIDC error handling from deprecated
authlib.josetojoserfc(#515) — thanks @slmingol!