Yeraze/meshmonitor v4.3.2 on GitHub

Patch release rolling up fixes landed since 4.3.1.

Fixes

#3001 fix(firmware): keep uploadPhase on error so half-flash detection works (no more false-positive half-flash markers from commit-OK ECONNRESET)
#2998 chore: remove legacy /api/nodes/security-issues endpoint
#2997 fix(sourcey): scope purgeAllNodes / purgeAllTelemetry by sourceId
#2992 feat(embed): add showTraceroutes toggle to embed profiles
#2981 fix(firmware): scope OTA gateway IP to the active source
#2989 fix(sourcey): scope telemetry types and localNodeNum by sourceId
#2986 fix(auth): mount optionalAuth() in front of permission-gated router
#2983 fix(security): allowlist tables and validate column names in SQLite
#2982 fix: replace hasPermission non-null assertions with null-safe guards
#2980 fix(security): gate legacy /api/nodes/security-issues with security:read
#2978 fix(security): block message search when user has zero channel permissions
#2977 fix(security): gate /api/traceroutes/history with traceroute:read
#2976 fix(lxc): align LXC template Node version with runtime
#2975 refactor(audit): gate cleanup with requireAdmin instead of redundant checks

refactor(sourcey): extract resolveSourceManager helper, retire 65 inline lookups
refactor(backup): unify SQLite path with Drizzle misc repository
chore(eslint): close const db = …; db.prepare() escape hatch in no-raw-sql

Full Changelog: v4.3.1...v4.3.2

Docker (recommended):

docker run -d \
  --name meshmonitor \
  -p 8080:3001 \
  -v meshmonitor-data:/data \
  ghcr.io/Yeraze/meshmonitor:4.3.2

✅ All tests passed
✅ TypeScript checks passed
✅ Docker images built for linux/amd64, linux/arm64, linux/arm/v7

Docker (recommended):

docker run -d \
  --name meshmonitor \
  -p 8080:3001 \
  -v meshmonitor-data:/data \
  ghcr.io/Yeraze/meshmonitor:4.3.2

✅ All tests passed
✅ TypeScript checks passed
✅ Docker images built for linux/amd64, linux/arm64, linux/arm/v7

See commit history for detailed changes.