ThingsBoard v4.3.x Release Notes

← Back to all releases

What’s Changed

• Security

  • #16200 Fixed CVE-2026-17495, CVE-2026-84375, CVE-2026-85061, CVE-2026-87776, CVE-2026-90711 by @vvlladd28
  • #16195 Fixed CVE-2026-63126, CVE-2026-68497, CVE-2026-75516, CVE-2026-87795, CVE-2026-87823, CVE-2026-87824, CVE-2026-87825, CVE-2026-87877, CVE-2026-90560, CVE-2026-90852 by @ViacheslavKlimov

• Core & Rule Engine

  • #15964 Fixed Nashorn Global PropertyMap leak on JS script release by @MazurenkoNick

• UI

  • #16138 Keep IoT Hub markdown table columns from overlapping by @pinkevmladchy
  • #16139 Refresh the installed items count after an install, update or delete by @pinkevmladchy
  • #16189 Added CARTO as a separate map provider with an optional API key by @mtsymbarov-del

• Transport

  • #16133 Fixed LwM2M device profile import failing when bootstrap short server id is non-zero by @nickAS21

• Edge

  • #16156 Do not clear edge activity state when session moved to another node by @volodymyr-babak

Full Changelog: https://github.com/thingsboard/thingsboard/compare/v4.3.1.5…v4.3.1.6

---

What’s Changed

• Security

  • #16122 Fixed CVE-2026-65182, CVE-2026-65905, CVE-2026-66257, CVE-2026-66273, CVE-2026-66274, CVE-2026-66275, CVE-2026-66276, CVE-2026-66277, CVE-2026-68525, CVE-2026-71290 by @ViacheslavKlimov
  • #16125 Fixed CVE-2026-73088, CVE-2026-73089, CVE-2026-76172, CVE-2026-75931, CVE-2026-75975, CVE-2026-84375 and CVE-2026-75899 by @mtsymbarov-del

• Core & Rule Engine

  • #15917 Fixed timeseries entity aggregation calculated field storing numeric results as strings by @ShvaykaD

• Transport

  • #16071 Sparkplug: fixed empty telemetry metric name when using alias by @nickAS21

• Edge

  • #15733 Prevent disconnect notification spam from flapping edges by @AndriiLandiak
  • #16044 Do not strand edge sync when an event fetcher fails by @AndriiLandiak
  • #16038 Compare edge customer before session state is replaced in onConfigurationUpdate by @AndriiLandiak

Full Changelog: https://github.com/thingsboard/thingsboard/compare/v4.3.1.4…v4.3.1.5

---

What’s Changed

• Security

  • #16046 Fixed CVE-2026-13149, CVE-2026-13311, CVE-2026-13676, CVE-2026-14257, CVE-2026-16221, CVE-2026-18446, CVE-2026-48815, CVE-2026-54466, CVE-2026-55388, CVE-2026-55603, CVE-2026-59869, CVE-2026-59873, CVE-2026-59874, CVE-2026-59879, CVE-2026-59880, CVE-2026-67213, CVE-2026-67214, CVE-2026-68945, CVE-2026-69151, CVE-2026-69152, CVE-2026-69192, CVE-2026-73646 and CWE-407 by @mtsymbarov-del
  • #16039 Fixed CVE-2026-8763, CVE-2026-12185, CVE-2026-12802, CVE-2026-12803, CVE-2026-12816, CVE-2026-12860, CVE-2026-13006, CVE-2026-13506, CVE-2026-14682, CVE-2026-44891, CVE-2026-53434, CVE-2026-54291, CVE-2026-54399, CVE-2026-54428, CVE-2026-55831, CVE-2026-55833, CVE-2026-55851, CVE-2026-55955, CVE-2026-56745, CVE-2026-56817, CVE-2026-56819, CVE-2026-56820, CVE-2026-56821, CVE-2026-56822, CVE-2026-58059, CVE-2026-58060, CVE-2026-58061, CVE-2026-58062, CVE-2026-59639, CVE-2026-59642, CVE-2026-59645, CVE-2026-59650, CVE-2026-59651, CVE-2026-59889, CVE-2026-59901, CVE-2026-59920, CVE-2026-59949, CVE-2026-73507 by @ViacheslavKlimov
  • #16057 Fixed CVE-2026-59902, CVE-2026-59903, CVE-2026-62243, CVE-2026-63337, CVE-2026-69219, CVE-2026-69220, CVE-2026-75595 by @ViacheslavKlimov

• UI

  • #15879 Used shared ShortNumberPipe for API usage value formatting by @mtsymbarov-del
  • #15847 Fixed chart axis ticks font size by @LeoMorgan113
  • #15892 Added missing translation for Label and Value Card widget by @mtsymbarov-del
  • #15893 Fixed validation for Digital Gauge widget maxValue when it is zero by @mtsymbarov-del
  • #15866 Fixed Calculated Field test script running against stale entity values instead of current form input by @mtsymbarov-del
  • #15945 Updated functionality block at System Administrator level by @mtsymbarov-del

Full Changelog: https://github.com/thingsboard/thingsboard/compare/v4.3.1.3…v4.3.1.4

---

What’s Changed

• Security

  • #15721 Fixed CVE-2026-44705 and CVE-2026-46625 by @mtsymbarov-del
  • #15757 Fixed CVE-2026-45799 by @ViacheslavKlimov
  • #15795 Fixed CVE-2026-44249, CVE-2026-44250, CVE-2026-44890, CVE-2026-44893, CVE-2026-45292, CVE-2026-45416, CVE-2026-45674, CVE-2026-46340, CVE-2026-47691, CVE-2026-48006, CVE-2026-48059, CVE-2026-50010, CVE-2026-50011 by @ViacheslavKlimov
  • #15799 Fixed CVE-2026-44705, CVE-2026-50171, CVE-2026-50170, CVE-2026-54267, CVE-2026-54266, CVE-2026-54290, CVE-2026-48779, CVE-2026-54268, CWE-426, CWE-494, CVE-2026-53571, CVE-2026-12143, CVE-2026-9277 by @mtsymbarov-del

• Core & Rule Engine

  • #15193 Integration with IoT Hub by @ikulikov
  • #15728 AI models: structured output support for more providers; fix Vertex AI location routing by @dskarzh
  • #15620 Prevented integer overflow in calculated field SUM output by @volodymyr-babak
  • #15666 Fixed queue prefix not applied in some cases causing orphaned topics by @AndriiLandiak
  • #15662 Fixed RPC call request rule node returning null body by @dashevchenko
  • #15715 Fixed permission check on alarm comment edit by @dashevchenko
  • #15550 Hardened device credentials validation by @dashevchenko
  • #15744 Fixed transport tenant-profile lock convoy under cold-cache reconnect storm by @ViacheslavKlimov

• UI

  • #15767 Added help pages for html container by @pinkevmladchy
  • #15711 Fixed Switch Control widget hanging on one-way persistent RPC by @mtsymbarov-del
  • #15710 Fixed no widgets shown in mobile view after state transition from divided layout by @mtsymbarov-del
  • #15701 Fixed change Password button stays disabled when form is filled programmatically by @mtsymbarov-del
  • #15754 Fixed sync highlight overlay scroll on Safari in string-pattern-autocomplete by @mtsymbarov-del
  • #15803 Fixed Advanced Widget Style Editor rendering by @mtsymbarov-del
  • #15800 Fixed dashboard logo stretch at full width by @mtsymbarov-del
  • #15764 Fixed “Confirm exit” dialog appearing when the form was not changed by @mtsymbarov-del
  • #15640 Added handler for WebGL unavailability in map widget by @mtsymbarov-del

• Edge

  • #15756 Fixed edge event loss for kafka edges during sync by @AndriiLandiak

Full Changelog: https://github.com/thingsboard/thingsboard/compare/v4.3.1.2…v4.3.1.3

---

What’s Changed

• Security

  • #15368 Fixed CWE-770 in Jackson Core by @zzzeebra
  • #15417 Fixed CVE-2026-34487, CVE-2026-34486, CVE-2026-34483 by @zzzeebra
  • #15377 Fixed CVE-2025-70340: system alarm comments access control by @dashevchenko
  • #15466 Fixed multiple CVEs: 2026-39364, 2026-39363, 2026-4800 by @vvlladd28
  • #15538 Fixed CVE-2026-40895 by @mtsymbarov-del
  • #15458 Fixed CVE-2026-5588, CVE-2026-5598, CVE-2025-14813, CVE-2026-35554, CVE-2026-27314 by @zzzeebra
  • #15557 Fixed CVE-2026-40975, CVE-2026-40973, CVE-2026-22740, CVE-2026-42198 by @zzzeebra
  • #15412 Fixed SSRF vulnerability in AI model provider URLs by @zzzeebra
  • #15585 Fixed SSRF and file access vulnerabilities in TBEL script sandbox by @zzzeebra
  • #15588 Fixed CVE-2026-40682, CVE-2026-42027 by @zzzeebra
  • #15598 Fixed CVE-2026-42579, CVE-2026-42583, CVE-2026-42584, CVE-2026-42587 by @ViacheslavKlimov
  • #15600 Hardened remote JS executor script invocation by @smatvienko-tb
  • #15649 Fixed CVE-2026-41284, CVE-2026-43512 by @ViacheslavKlimov

• Core & Rule Engine

  • #13076 Audit logging for tenant profile operations by @zzzeebra
  • #15044 Added entity keys V2 endpoint with sample values by @dskarzh
  • #15333 Performance and reliability improvements for Efento message processing by @dashevchenko
  • #15443 Refactored APIs to meet OpenAPI standard by @dashevchenko and @ViacheslavKlimov
  • #15520 Exposed HTTP response compression configuration params by @dashevchenko
  • #15565 LZ4 compression support for Kafka by @volodymyr-babak
  • #15313 Fixed WS sessions limit handling for public users by @dashevchenko
  • #15334 Fixed REST API Call node blocking actor thread and semaphore permit leak by @smatvienko-tb
  • #15457 Fixed entity filtering by boolean data key for EDQS by @dashevchenko
  • #15439 Fixed alarm rule crash on duration source change by @zzzeebra
  • #15560 Fixed MAX aggregation for mixed double and long telemetry values by @dashevchenko
  • #15425 Added config property to control null ordering in dashboards by @dashevchenko

• UI

  • #15000 Improved default tenant home dashboard by @vvlladd28
  • #14984 Changed default “Add” button style in entity tables by @vvlladd28
  • #15330 Bumped Node.js version from 22.18.0 to 22.22.2 by @ViacheslavKlimov
  • #15339 Enhanced localization: “save-to-gallery” translations by @deaflynx
  • #15395 Exposed http-utils functions via WidgetContext.httpUtils by @vvlladd28
  • #15393 Added roundDown option to ShortNumberPipe by @vvlladd28
  • #15556 HTML container widget by @ikulikov
  • #15362 Hidden “Add Telemetry” button for Entity view by @mtsymbarov-del
  • #15373 Added ‘@angular/core/rxjs-interop’ to modules map by @vvlladd28
  • #15340 Fixed Datasource determination for autocomplete patterns if datasource is empty by @mtsymbarov-del
  • #15360 Fixed hint alignment for propagate alarm rule field by @mtsymbarov-del
  • #15392 Fixed missing ‘type’ property in alarm rule condition on save by @vvlladd28
  • #15399 Fixed select options being clipped in widget settings form by @vvlladd28
  • #15421 Fixed translation for Asset and Device profile by @mtsymbarov-del
  • #15422 Removed “Alarm rules” step from setting up device profile by @mtsymbarov-del
  • #15408 Fixed display long texts in Alarm assignee panel by @mtsymbarov-del
  • #15423 Fixed Alarm Assignee icon placement by @mtsymbarov-del
  • #15427 Adjusted size of entity type select to fit error message by @mtsymbarov-del
  • #15430 Fixed show/hide of custom header actions when using function to control visibility by @mtsymbarov-del
  • #15433 Fixed not set pageSize to child nodes in Entities hierarchy widget by @mtsymbarov-del
  • #15434 Fixed aggregation keys not being processed in Entities hierarchy widget by @mtsymbarov-del
  • #15489 Fixed icon placement in Value stepper icon by @mtsymbarov-del
  • #15490 Fixed display column panel hiding not selectable columns by @mtsymbarov-del
  • #15531 Fixed map shape labels drifting from center after viewport resize by @mtsymbarov-del
  • #15579 Map widget: fixed data aggregation for additional data keys and import/export widget JSON for polylines layer by @ChantsovaEkaterina
  • #15581 Fixed CSV import not unescaping double quotes in unquoted fields by @ChantsovaEkaterina
  • #15639 Removed unnecessary DomSanitizer bypass in photo camera input widget by @mtsymbarov-del

• Transport

  • #15301 Added automatic SSL/TLS certificate reload for transports without service restart by @AndriiLandiak
  • #15451 Fixed app hanging on MQTT port conflict at startup by @zzzeebra
  • #15346 SNMP: defer querying tasks until transport session is registered by @volodymyr-babak

• Edge

  • #15111 Added syncInProgress as edge attribute by @volodymyr-babak
  • #15167 API key edge sync support by @volodymyr-babak

Full Changelog: https://github.com/thingsboard/thingsboard/compare/v4.3.1.1…v4.3.1.2

---

What’s Changed

• Security

  • #15204 Fixed XSS vulnerability in notification center by @vvlladd28
  • #15244 Fixed CVE-2026-24308, CVE-2026-24281 and CVE-2026-24400 by @ViacheslavKlimov
  • #15254 Added configurable security headers and env-var-backed CORS configuration by @ViacheslavKlimov
  • #15253 Fixed SSRF DNS rebinding bypass, added allow-list by @ViacheslavKlimov
  • #15251 Fixed CVE-2026-24281, CVE-2026-24308, CVE-2026-24400, CVE-2026-29063, CVE-2026-29087, CVE-2026-29786, CVE-2026-30827, CVE-2026-31802, CVE-2026-32141, CVE-2026-32635, CVE-2026-27904 by @vvlladd28
  • #15278 Fixed CVE-2026-22731, CVE-2026-22732, CVE-2026-22733, CVE-2026-22737 + Spring Boot 3.5 by @ViacheslavKlimov
  • #15293 Fixed CVE-2026-33228 by @vvlladd28
  • #15315 Fixed CVE-2026-33870, CVE-2026-33871 and GHSA-72hv-8253-57qq by @ViacheslavKlimov
  • #15322 Fixed CVE-2026-33895, CVE-2026-33894, CVE-2026-33896, CVE-2026-33750, CVE-2026-4923, CVE-2026-33671 by @vvlladd28
  • Fixed CVE-2026-0861, CVE-2026-0915, CVE-2025-15281 for Docker images by @ViacheslavKlimov

• Core & Rule Engine

  • #15262 Sanitize database error messages by @ViacheslavKlimov
  • #14775 Added OTA package data cleanup by @AndriiLandiak
  • #14762 Fixed notification requests and RPC cleanup timeout on large datasets by @AndriiLandiak
  • #14781 Added WS update on telemetry deletion by @dashevchenko

• UI

  • #15237 Updated locales da_DK, de_DE, el_GR, es_ES, fr_FR, it_IT, ja_JP, nl_NL, no_NO, pt_BR, tr_TR, uk_UA, zh_CN by @vvlladd28
  • #15203 Hidden “Show on widgets” button on sysadmin level by @vvlladd28
  • #15219 Fixed WS reconnect loop and notification spam when session limit is reached by @vvlladd28
  • #15252 Fixed missing translation for Polylines toggle in map settings by @vvlladd28
  • #15168 Fixed resetting of validation on storeLink property by @mtsymbarov-del
  • #15267 Fixed time series table widgets tab style by @mtsymbarov-del
  • #15292 Fixed proxy error handling for 502/503/504 HTTP status codes by @vvlladd28
  • #15273 Fixed string-items-list autocomplete selection and blur handling by @vvlladd28

• Edge

  • #15205 Support combined PEM cert+key for Edge gRPC SSL by @smatvienko-tb

• Transport

  • #15112 MQTTS metrics and client address logging on exceptionCaught by @smatvienko-tb
  • #15143 Fixed LwM2M Redis stores startup: use separate connections for SCAN and GET by @smatvienko-tb

Full Changelog: https://github.com/thingsboard/thingsboard/compare/v4.3.1…v4.3.1.1

---

What’s Changed

• Security

  • #15076 Fixed CVE-2026-24734 and CVE-2025-66614 by @ViacheslavKlimov
  • #15079 Fixed CVE-2025-7783, CVE-2026-26996 and CVE-2026-26960 by @vvlladd28
  • #15109 Fixed CVE-2026-27903 and CVE-2026-27904 by @vvlladd28
  • #15123 Added SSRF protection (must be enabled with SSRF_PROTECTION_ENABLED env) by @ViacheslavKlimov
  • #15124 Fixed CWE-770 in Jackson Core (GHSA-72hv-8253-57qq) by @ViacheslavKlimov
  • #15128 Fixed CVE-2026-27970 and CVE-2026-2391 by @vvlladd28
  • Fixed CVE-2026-2781, CVE-2026-25646, CVE-2026-21945 and CVE-2026-21932 for Docker images by @ViacheslavKlimov and @smatvienko-tb

• Major UI

  • #14944 Angular 20 migration by @ikulikov

• Core & Rule Engine

  • #15054 Fixed getTimeseries API (/{entityType}/{entityId}/values/timeseries) by @dashevchenko
  • #15058 Added Cassandra result set byte-size limit by @ViacheslavKlimov
  • #15078 Fixed TBEL script execution failures on repeated runs by @ViacheslavKlimov
  • #15101 Fixed blocking JPA queries on access-validator single thread by @dskarzh
  • #15100 Fixed preservation of rule node execution counter in delay and deduplication nodes by @dskarzh
  • #15120 Improved Apple OAuth2 mapper and refactored OAuth2 client validation by @ViacheslavKlimov
  • #15102 Fixed infinite loop when rule chain input node forwards to its own rule chain by @smatvienko-tb
  • #15116 Made max WS message size configurable by @DmytroKhylko

• UI

  • #14985 Fixed Redirect Url encoding by @mtsymbarov-del
  • #14959 Fixed loading and placement of Material icons by @mtsymbarov-del
  • #14978 Fixed Popover placement for Marker, Polygon and Circle overlay config by @mtsymbarov-del
  • #15018 Fixed adaptive in mail server configuration by @vvlladd28
  • #14964 Fixed Range and Bar chart limits setup by @mtsymbarov-del
  • #15031 Fixed RGBA and HSLA inputs in color picker by @mtsymbarov-del
  • #15080 Fixed Entity key autocomplete change check by @mtsymbarov-del
  • #15071 Fixed a race condition causing the toast component by @mtsymbarov-del
  • #15097 Fixed a race condition when init image map by @mtsymbarov-del
  • #15108 Fixed default timewindow config in widget editor page by @vvlladd28
  • #15142 Removed pattern validation from name field on CF by @mtsymbarov-del
  • #15096 Updated Ukrainian locale by @vvlladd28
  • #15130 Extend modules map: moment-timezone, canvas-gauges and ngx-hm-carousel added by @ChantsovaEkaterina

• Transport

  • #14760 Fixed Sparkplug BIRTH message validation for metrics with empty string values by @nickAS21

• Edge

  • #15050 Event-sourced propagation for admin settings by @volodymyr-babak

Full Changelog: https://github.com/thingsboard/thingsboard/compare/v4.3.0.1…v4.3.1

---

What’s Changed

• Security

  • Fixed CVE-2025-69420 and CVE-2025-69419 for Docker images by @ViacheslavKlimov and @smatvienko-tb
  • #14865 Fixed CVE-2026-22610 by @vvlladd28

• Core & Rule Engine

  • #14853 Fixed propagation path updates handling for propagation CF by @ShvaykaD
  • #14751 Fixed unnecessary database updates for disabled users during failed login by @AndriiLandiak

• UI

  • #14920 Updated locales el_GR, es_ES, hi_IN, nl_NL, no_NO by @vvlladd28
  • #14863 Fixed form settings in Send RPC and Segmented Button widgets by @mtsymbarov-del
  • #14864 Fixed help link for API key by @vvlladd28
  • #14816 Removed required from “Current Customer” field in entity alias by @mtsymbarov-del
  • #14903 Fixed missing ‘%’ character in alias help text by @mtsymbarov-del
  • #14909 Fixed default settings in API Usage widget by @mtsymbarov-del
  • #14895 Fixed padding in Range Chart and Bar Chart with label widgets when overlay enabled by @mtsymbarov-del
  • #14922 Fixed errors when public user views alarm comments by @mtsymbarov-del
  • #14941 Fixed errors in alarm rules by @ArtemDzhereleiko
  • #14925 Fixed race condition during Power Button widget initialization by @mtsymbarov-del

Full Changelog: https://github.com/thingsboard/thingsboard/compare/v4.3…v4.3.0.1

---

Major improvements

• #14036 Alarm rules 2.0 by @ViacheslavKlimov
• Calculated fields:
  • #13857 Geofencing by @ShvaykaD
  • #14107 Propagation by @ShvaykaD
  • #14253 Time series data aggregation by @irynamatveieva
  • #14141 Related entities aggregation by @irynamatveieva
• #14225 Calculated field output strategies by @irynamatveieva
• #14074 API keys by @AndriiLandiak
• #13629 Enforced 2FA by @ViacheslavKlimov
• #14687 Set default base Docker image to thingsboard/openjdk25:trixie-slim by @ViacheslavKlimov

Minor improvements

• Core & Rule Engine

  • #14136 Added new entity field ‘displayName’ by @vvlladd28
  • #13786 Added JSON ts type support for bulk import by @dashevchenko
  • #14156 Added API for tenant admins to delete the entire tenant by @dashevchenko
  • #14236 Added support for alarm originator label and alarm details in notification templates by @AndriiLandiak
  • #14268 Added ‘PATCH’ request method for ‘rest api call’ node by @volodymyr-babak
  • #14355 Added more find-by-ids API endpoints by @artem-barysh-dev
  • #14743 Added Redis ACL (username) authentication support by @AndriiLandiak
  • #13924 Configurable response timeout for Rule Engine API requests by @devaskim
  • #13987 Clear alarm node: async processing by @dskarzh
  • #13863 Configurable Swagger docs expansion by @dashevchenko
  • #14118 Entity name conflict strategies by @dashevchenko
  • #14310 Removed redundant persistence of CF links by @dskarzh
  • #13806 Prohibited blank relation types by @dskarzh

• UI

  • #13972 Added support for setting a custom image as the widget title by @deaflynx
  • #14101 Added default language and unit system selection to user form by @deaflynx
  • #13949 Added ability to upload dashboard JSON file for update by @LeoMorgan113
  • #14009 Added translation support for timestamp column in timeseries widgets by @mtsymbarov-del
  • #14058 Added tooltip truncation to entity version restore header by @deaflynx
  • #14060 Added “Show all” option for Columns to Display by @mtsymbarov-del
  • #14105 Added color adjustment for table pagination icons by @mtsymbarov-del
  • #14155 Added polylines support on map widget by @LeoMorgan113
  • #14144 Added queryParams support to mobile handler navigation action by @vvlladd28
  • #14153 Added ability to save pictures from Photo Camera widget to Image library by @mtsymbarov-del
  • #14159 Added option to sort tab entities in alphabetical order by @mtsymbarov-del
  • #14315 Added prevent whitespaces in string autocomplete by @ArtemDzhereleiko
  • #14336 Added system alarm comments localization by @dashevchenko
  • #14339 Added “Search propagated alarms” option to alarm count widget by @mtsymbarov-del
  • #14379 Added new 6h and 8h time window intervals with improved default time window by @vvlladd28
  • #14142 Added autocomplete pattern support in title widgets by @mtsymbarov-del
  • #14262 Added filters for audit log table by @mtsymbarov-del
  • #14507 Added string autocomplete for telemetry device tab by @mtsymbarov-del
  • #14513 Added debug events modal to rule chain elements by @mtsymbarov-del
  • #14488 Added support for dynamic Y-axis limits determination in time series charts by @mtsymbarov-del
  • #14472 Added ability to save time window selection as default for dashboard by @vvlladd28
  • #14629 Added Calculated fields page by @vvlladd28
  • #14357 Always display point symbol for single-point line charts by @vvlladd28
  • #14511 Always show time window in “Show on widget” feature by @vvlladd28
  • #14845 Added local hi_IN and updated locales da_DK, de_DE, fr_FR, it_IT, ja_JP, nl_NL, tr_TR by @vvlladd28
  • #14672 Enhanced alarm severity colors by @ArtemDzhereleiko
  • #13840 Improved create new action for entity autocomplete by @ArtemDzhereleiko
  • #13849 Improved mobile actions by @ArtemDzhereleiko
  • #13982 Improved attribute dialog style by @LeoMorgan113
  • #14335 Improved version name overflow handling in version control by @mtsymbarov-del
  • #14362 Improved user password fields validation by @mtsymbarov-del
  • #14653 Improved Audit log and Event details dialog by @vvlladd28
  • #13753 Optimized timewindow size in dashboard configuration when saving by @ChantsovaEkaterina
  • #13690 Optimized size of dashboards and widgets when saving by @vvlladd28
  • #13944 Updated API usage dashboard by @ArtemDzhereleiko
  • #14322 Updated password expiration message for en-US locale by @ArtemDzhereleiko
  • #14562 Updated login page layout by @vvlladd28
  • #14057 Refactored tb-logo as link in login, fullscreen dashboard and menu by @deaflynx
  • #14279 Shared UI components for extension: tb-phone-input, tb-widget-button by @DmytroKhylko
  • #14684 Shared UI components for extension: time-unit-input by @kalutkaz

• Transport

  • #14309 Set default LwM2M server CID length to 8 by @nickAS21

• Edge

  • #13998 [Edge] Added AI model sync by @jekka001
  • #14352 Sync user and user credentials from Edge to Cloud by @volodymyr-babak
  • #14447 Propagate entity deletions from edge to cloud (asset, device, dashboard, entity view) by @MazurenkoNick
  • #14489 Avoid duplicate edge updates by @MazurenkoNick
  • #14603 Edge Events - added merge and filter duplicates by @volodymyr-babak

Bug Fixes

• Core & Rule Engine

  • #13878 Fixed calculated fields search not working by @WangXin3
  • #14287 Fixed telemetry deletion for keys with comma by @dashevchenko
  • #14205 Fixed error when uploading resources approximately larger than 15 MB by @AndriiLandiak
  • #14728 Fixed invalid finish ts for jobs with zero tasks in task manager by @ViacheslavKlimov
  • #14564 Fixed entity data query for sysadmin by @dashevchenko
  • #14729 Fixed CVE-2025-15284 by @vvlladd28
  • #14631 Fixed partition cleanup for non-public PostgreSQL schemas by @AndriiLandiak
  • #14792 Fixed SMS usage state when disabled in tenant profile by @dashevchenko

• UI

  • #13993 Fixed help link for JavaScript library by @LeoMorgan113
  • #14011 Fixed multiple identical requests and updated template style in version control by @deaflynx
  • #13882 Fixed extra ‘]’ in RPC debug terminal help by @371518473
  • #13892 Fixed action buttons blinking in table widgets during API requests by @vvlladd28
  • #13894 Fixed map widget tooltip closing when hovering from overlay to tooltip by @vvlladd28
  • #14012 Fixed decimals support in Liquid level widget by @mtsymbarov-del
  • #14020 Fixed column order for “On cell click” action in Entities Table widget by @mtsymbarov-del
  • #14038 Fixed empty link in entity details menu by @mtsymbarov-del
  • #14157 Fixed bar chart label position by @mtsymbarov-del
  • #14255 Changed type of color picker fields by @mtsymbarov-del
  • #14420 Fixed Microsoft Teams notification preview by @vvlladd28
  • #14493 Fixed ‘TypeError: Missing parameter name …’ when running web-ui with TB_ENABLE_PROXY=true by @wiwiwa
  • #14582 Fixed slider styles for iOS platform by @mtsymbarov-del
  • #14614 Fixed LwM2M bootstrap toggle not persisting “Add Bootstrap config” button state by @mtsymbarov-del
  • #14744 Fixed background flashes when opening or closing date-time selector by @vvlladd28
  • #14745 Fixed map action panel hiding when opening other data layer by @mtsymbarov-del
  • #14685 Fixed applying aggregation options for latest timeseries data keys in map widgets by @ChantsovaEkaterina
  • #14772 Fixed typo in Korean translation for 2FA activation by @cafe-jun
  • #14804 Fixed opening tenant profile autocomplete when “Create new” button is clicked by @mtsymbarov-del
  • #14802 Fixed country autocomplete autofill and improved validation by @vvlladd28

• Transport

  • #14077 Fixed time LwM2M resource handling by @nickAS21
  • #14645 Fixed NPE for LwM2M client context after reboot by @nickAS21
  • #14748 Fixed CoAP Unicast/Multicast MID Conflict and Silent ACK Rejection by @nickAS21

• Edge

  • #13843 Improved Edge session cleanup to prevent resource leaks and message backlog due to unstable network conditions and Kafka busy timeout by @bcblr1993

New Contributors

• #13882 @371518473 made their first contribution
• #13878 @WangXin3 made their first contribution
• #13843 @bcblr1993 made their first contribution
• #14493 @wiwiwa made their first contribution
• #14772 @cafe-jun made their first contribution

Full Changelog: https://github.com/thingsboard/thingsboard/compare/v4.2.1.1…v4.3