MeshMonitor v4.17.1-rc5

Summary

This release candidate adds passkey sign-in for local accounts. You can sign in with a device fingerprint, face or PIN, turn password sign-in off for a passkey-only account, and get back in with one-time recovery codes. Admins can see and revoke a user's passkeys from the Users page. Passkeys need HTTPS (or http://localhost) and bind to the hostname where you add them; the optional WEBAUTHN_RP_ID and WEBAUTHN_ORIGINS settings cover reverse proxies and multiple hostnames. Auto-Acknowledge gains a separate IP (MQTT / UDP) row, so messages that arrived over the internet no longer use the 0-hop or multi-hop settings; the new row starts off. MeshCore contacts can now take a manual location override, as Meshtastic nodes already could. The MeshCore Configuration and Automations pages get the same search box and section buttons as the Meshtastic pages. Show MQTT/Bridge Messages is now remembered per source, and tapping a node in Traceroute mode draws its newest answered run again.

Upgrade notes

• Auto-Acknowledge: messages received over MQTT or multicast UDP now fall into the new IP row, which starts off on every install. If you relied on the multi-hop (or 0-hop) row to answer MQTT/UDP messages, turn on the IP row under Automation → Auto Acknowledge.
• Passkeys are optional. Nothing changes until a user adds one. See the Passkeys guide.

Features

• Passkey sign-in for local accounts (#5841):
  • Passkey storage (#5849)
  • Sign in with a passkey (#5850)
  • Passkey-only accounts, recovery codes, admin revoke (#5851)
  • Passkeys user guide (#5853)
  • Design spec (#5847)
• Separate IP (MQTT/UDP) row in the Auto-Ack matrix (#5854)
• Override a MeshCore contact's location (#5848)
• Remember Show MQTT/Bridge Messages per source (#5844)
• Search and section buttons on MeshCore Configuration and Automations (#5855)

Bug Fixes

• Tapping a node in Traceroute mode draws its newest answered run (#5845)
• MeshCore Notifications section bar sits flush with the top of the pane (#5856)

Release

• Version bump to 4.17.1-rc5 (#5857)

Dependencies

• engine.io 6.6.11 and a single mysql2 for express-mysql-session (#5846)

Issues Resolved

• #5841 WebAuthn/passkey login as alternative to password (local auth)
• #5796 Auto-Ack for MQTT Messages
• #5842 MeshCore: override contact location (parity with Meshtastic)
• #5824 Make Show MQTT/Bridge Messages toggle per-source
• #5821 Per-source map: Show Traceroute toggle engages but clicking a node does nothing

Full Changelog: v4.17.1-rc4...v4.17.1-rc5

🚀 MeshMonitor v4.17.1-rc5

📦 Installation

Docker (recommended):

docker run -d \
  --name meshmonitor \
  -p 8080:3001 \
  -v meshmonitor-data:/data \
  ghcr.io/Yeraze/meshmonitor:4.17.1-rc5

🧪 Testing

✅ All tests passed
✅ TypeScript checks passed
✅ Docker images built for linux/amd64, linux/arm64, linux/arm/v7

📋 Changes

See commit history for detailed changes.