MeshMonitor v4.10.2

MeshMonitor v4.10.2 is a feature-rich point release centered on cross-source messaging and extensibility. It adds server-side PKI direct-message decryption so DMs relayed still-encrypted through MQTT can be aggregated into the unified view, and brings MeshCore channel/DM traffic into Unified Messages while fixing a long-standing ~50-message-per-source cap with per-channel backlogs. User scripts can now declare and install Python/Node package dependencies. Meshtastic Traffic Management telemetry (firmware v2.7.22+) now renders as labelled graphs. Auto Welcome gained a configurable pre-send delay so first-contact welcomes survive a nodeDB reset, and malformed-key MeshCore contacts can finally be removed. The Map Features panel gained a "maximum age" slider, and the Helm chart now publishes a proper chart repository plus an optional Gateway API HTTPRoute. Rounding things out are a stable telemetry-graph order and an embed-map popup-padding fix.

Features

• PKI direct-message decryption across sources (#3445) — decrypt PKI DMs server-side (incl. MQTT-relayed) and surface them in Unified Messages; off by default behind a global + per-source opt-in, keys encrypted at rest.
• MeshCore in Unified Messages + per-channel backlog (#3442) — MeshCore channels/DMs join the cross-source feed; each channel loads its own history.
• User-script Python/Node dependencies (#3448) — declare via requirements.txt/package.json, install from an admin panel; persisted next to scripts.
• Traffic Management telemetry graphs (#3447) — the firmware module's stats now render as labelled, integer series.
• Map Features "maximum age" slider (#3435).
• Helm: optional Gateway API HTTPRoute (#3434).
• Helm: published chart repository at meshmonitor.org/charts (#3433).

Bug Fixes

• Auto Welcome pre-send delay — fixes DM failures on first contact after a nodeDB reset (#3440).
• Remove MeshCore contacts with malformed/short public keys (#3444).
• Stable telemetry graph order — graphs no longer reshuffle on every update (#3437).
• Embed map GeoJSON popup padding restored in dark theme (#3430).

Docs / CI

• Correct mislabeled #3441 → #3442 references in the MeshCore changelog/comments (#3446).

Dependencies / i18n

• Translations update from Hosted Weblate (#3427).

Issues Resolved

#3441, #3443, #3439, #3436, #3432, #3431, #3429

Upgrade Notes

No breaking changes. PKI direct-message decryption is off by default — it requires a configured SESSION_SECRET plus a global (Settings → Security) and per-source opt-in. Installing script dependencies is admin-gated and runs third-party code.

Full changelog: v4.10.1...v4.10.2

🚀 MeshMonitor v4.10.2

📦 Installation

Docker (recommended):

docker run -d \
  --name meshmonitor \
  -p 8080:3001 \
  -v meshmonitor-data:/data \
  ghcr.io/Yeraze/meshmonitor:4.10.2

🧪 Testing

✅ All tests passed
✅ TypeScript checks passed
✅ Docker images built for linux/amd64, linux/arm64, linux/arm/v7

📋 Changes

See commit history for detailed changes.