v0.1.7

Bambuddy v0.1.7 Release Notes

A Note to Our Community

First, we want to sincerely apologize for the issues caused by the 0.1.6-final release. We know many of you experienced problems, and we're truly sorry for the disruption. We've taken this seriously and have improved our testing and release workflow to prevent similar issues in the future. Thank you for your patience and continued support.

🔒 Security Fixes (CRITICAL)

This release addresses a critical security vulnerability. Users running authentication-enabled instances should upgrade immediately.

CVE-2026-25505: Missing API Endpoint Authentication (CVSS 9.8)

• Added authentication to 200+ API endpoints that were previously unprotected when auth was enabled
• All route files now enforce permission checks via RequirePermissionIfAuthEnabled()
• Protected endpoints include: archives, projects, settings, API keys, groups, cloud, notifications, maintenance, filaments, external links, smart plugs, discovery,
  firmware, camera, k-profiles, AMS history, pending uploads, updates, spoolman, system, print queue, and printers
• Backend integration tests added to verify endpoint authentication enforcement
• Note: Image-serving endpoints (thumbnails, timelapse, photos, camera streams) remain public as they require knowing the resource ID and are loaded via tags
  which cannot send Authorization headers

🌐 NEW: Virtual Printer Proxy Mode (Beta)

Print from anywhere in the world — no VPN, no port forwarding, no Bambu Cloud.

This is our most requested feature! Proxy Mode turns Bambuddy into a secure TLS relay between your slicer and your printer:

Remote Slicer → Internet → Bambuddy Server → Local Network → Printer

Key Features

• No port forwarding required — your printer stays safely on your local network
• No VPN needed — connect from coffee shops, hotels, work, anywhere
• No Bambu Cloud dependency — fully self-hosted solution
• End-to-end TLS encryption on FTP (port 9990) and MQTT (port 8883)
• Works with Bambu Studio & OrcaSlicer — add Bambuddy as a network printer
• Uses real printer credentials — authenticates with your actual printer's serial and access code

Beta Notice

This feature is marked as beta. While we've tested it extensively, remote printing involves many network configurations. Please report any issues on GitHub and include
your network setup details.

📖 https://wiki.bambuddy.cool/features/virtual-printer/#proxy-mode-new-in-017

✨ Enhancements

TOTP Authenticator Support for Bambu Cloud (#182)

• Accounts with authenticator apps (Google Authenticator, Authy, etc.) now work correctly
• Proper detection of verification type: email code vs TOTP code

Japanese Language Pack 🇯🇵

• Full Japanese translation added (Thanks to @nmori!)
• 3000+ translation keys covering the entire UI

Complete German Translations 🇩🇪

• All UI strings now fully translated to German (1800+ keys)

Spoolman: Open in Spoolman Button (#210)

• FilamentHoverCard now shows "Open in Spoolman" button when spool is linked
• Direct link to the spool's page in Spoolman for quick editing

🌍 A Note on Localization

We're committed to making Bambuddy accessible to users worldwide. While we've added Japanese and completed German translations in this release, there are still areas of the frontend that don't yet respect i18n. We're continuously working on improving localization coverage.

If you'd like to help translate Bambuddy into your language or spot untranslated strings, please reach out on GitHub! Community contributions are always welcome.

🐛 Bug Fixes

P1S/P2S Printer Support (#227)

• Fixed P2S printer support — disabled vibration_cali and fixed FTP SSL (Thanks to @deathly1987!)

Multiple Home Assistant Entities per Printer (#214)

• Fixed Home Assistant entities being limited to one per printer
• Multiple HA entities (switches, scripts, lights, etc.) can now be linked to the same printer

Monthly Statistics Calculation (#229)

• Fixed filament statistics not accounting for quantity multiplier
• All charts and metrics now correctly multiply by quantity

Authentication for Downloads (#231)

• Fixed support bundle, archive export, statistics export, and printer file downloads returning 401 when auth is enabled

Date Picker Format Issues (#233)

• Date/time pickers now respect user's format settings (EU, US, ISO)

500 Error on Archive Detail Page

• Fixed internal server error when viewing individual archive details

📦 Upgrade Instructions

Docker users

docker pull maziggy/bambuddy:0.1.7
docker-compose down && docker-compose up -d

Or use :latest tag (will pull 0.1.7)

docker pull maziggy/bambuddy:latest

Note: If you're upgrading from a version before 0.1.6.2, you will need to re-login after upgrading due to the JWT secret key security fix.

🙏 Thank You

Special thanks to our contributors:

• @nmori — Japanese language pack
• @deathly1987 — P2S printer fix

And to everyone who reported issues and helped us improve Bambuddy!