matterbridge 3.11.2-dev-20261104-98c7a1f → 3.11.2-dev-20261106-e5bb80a

package/CHANGELOG.md

@@ -29,7 +29,7 @@ If you like this project and find it useful, please consider giving it a star on
 
 <a href="https://www.buymeacoffee.com/luligugithub"><img src="https://matterbridge.io/assets/bmc-button.svg" alt="Buy me a coffee" width="120"></a>
 
-## [3.11.2] - Dev branch
+## [3.11.2] - 2026-11-06
 
 ### Development News
 
@@ -46,9 +46,9 @@ If you like this project and find it useful, please consider giving it a star on
 - [types]: Add `/api/unregister-device` and `/api/rename-device` request/response contracts with device identifiers and a required rename `label`.
 - [types]: Add the `PlatformSelectDevice`, `PlatformSelectEntity` and `PlatformNodeLabel` types, also re-exported by `MatterbridgePlatform`.
 - [frontend]: Add a device actions menu on registered devices opening `Reset device` and `Change controller name`.
-- [core]: Handle `/api/unregister-device` and `/api/rename-device` in the frontend and backend WebSocket servers, forwarding them to the plugin platform.
+- [core]: Handle `/api/unregister-device` and `/api/rename-device` in the frontend and backend WebSocket servers, forwarding them to the plugin platform. The backend WebSocket server validates every parameter with `isValidString()`.
 - [platform]: Reset (unregister) a device or set its controller name (`nodeLabel`) on request from the frontend; renaming back to the device name removes the custom label.
-- [platform]: Persist the controller names in the new `nodeLabels` plugin storage and apply them in `registerDevice()`.
+- [platform]: Persist the controller names in the new `nodeLabels` plugin storage and apply them in `registerDevice()`. Thanks to [@JoanYpersiel](https://github.com/JoanYpersiel) for [PR #669](https://github.com/Luligu/matterbridge/pull/669).
 - [endpoint]: Add optional `periodicEnergyImported`/`periodicEnergyExported` parameters to `createDefaultElectricalEnergyMeasurementClusterServer()`, `createImportedElectricalEnergyMeasurementClusterServer()` and `createExportedElectricalEnergyMeasurementClusterServer()` that enable the `PeriodicEnergy` feature (Matter 1.6.1 § 2.12.4.4), and document firing the `CumulativeEnergyMeasured`/`PeriodicEnergyMeasured` events.
 - [devices]: Add the `OnOffPlugInUnit`, `DimmablePlugInUnit`, `MountedOnOffControl` and `MountedDimmableLoadControl` single-class devices (Matter 1.6.1 § 5.1 - 5.4) with Identify, Groups, Scenes Management, OnOff (Lighting) and LevelControl (OnOff, Lighting, levels 1..254; optional through `levelControl` for the on/off device types) clusters, configured through an options object. The mounted device types also list their plug-in unit subset device type for older controllers (RECOMMENDED by the spec), unless `plugInUnitDeviceType` is `false`.
 - [chip]: Create the OnOffPlugInUnit (501), DimmablePlugInUnit (502), MountedOnOffControl (503) and MountedDimmableLoadControl (504) demo devices with the new device classes.
@@ -79,8 +79,11 @@ If you like this project and find it useful, please consider giving it a star on
 - [core]: Bump `ws` to v.8.22.1.
 - [core]: Remove the unused `@types/jest` dev dependency and the `jest` types from the core tsconfigs.
 - [tests]: Refactor the tests for the `no-unsafe-enum-assignment` rule of oxlint v.1.90.0: use enum members instead of numeric literals and mark the deliberately invalid enum values.
+- [core]: The `/api/plugins` endpoint now fetches the plugin list from the plugin manager through the server broadcast, with a 500 error response on failure.
+- [core]: The plugin API representation includes `frontendPath` and derives `hasWhiteList` and `hasBlackList` from the plugin config.
 - [docs]: Read the website's npm and Docker totals from the daily badge gist and animate stats after loading.
 - [core]: Don't auto-close a WebRTC session when werift 0.26.0 replaces or retires a DTLS transport during SDP negotiation.
+- [frontend]: Serve the WebSocket and HTTP `/api/settings` from Matterbridge through the `matterbridge_apisettings` broadcast request instead of building the settings locally.
 
 ### Fixed
 
@@ -89,6 +92,7 @@ If you like this project and find it useful, please consider giving it a star on
 - [docs]: Bind the heading text renderer to the parser for marked 18.1.2.
 - [core]: Map device classes explicitly to matter.js classifications, including App to Application.
 - [core]: Keep manufacturer-specific operational states across Pause and Resume in `MatterbridgeOperationalStateServer` and `MatterbridgeRvcOperationalStateServer`.
+- [frontend]: Require the frontend authentication on the plugin `/plugins/<name>/api/*` routes before dispatching to `onFetch`. Closes [#676](https://github.com/Luligu/matterbridge/issues/676). Thanks to [@macjl](https://github.com/macjl).
 
 <a href="https://www.buymeacoffee.com/luligugithub"><img src="https://matterbridge.io/assets/bmc-button.svg" alt="Buy me a coffee" width="80"></a>
 

package/apps/frontend/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@matterbridge/frontend",
-  "version": "3.11.2-dev-20261104-98c7a1f",
+  "version": "3.11.2-dev-20261106-e5bb80a",
   "description": "Matterbridge frontend application",
   "author": "https://github.com/Luligu",
   "license": "Apache-2.0",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "matterbridge",
-  "version": "3.11.2-dev-20261104-98c7a1f",
+  "version": "3.11.2-dev-20261106-e5bb80a",
   "description": "Matterbridge plugin manager for Matter",
   "author": "https://github.com/Luligu",
   "license": "Apache-2.0",
@@ -314,19 +314,19 @@
     }
   },
   "dependencies": {
-    "@matterbridge/core": "3.11.2-dev-20261104-98c7a1f",
-    "@matterbridge/dgram": "3.11.2-dev-20261104-98c7a1f",
-    "@matterbridge/test-utils": "3.11.2-dev-20261104-98c7a1f",
-    "@matterbridge/thread": "3.11.2-dev-20261104-98c7a1f",
-    "@matterbridge/types": "3.11.2-dev-20261104-98c7a1f",
-    "@matterbridge/utils": "3.11.2-dev-20261104-98c7a1f",
+    "@matterbridge/core": "3.11.2-dev-20261106-e5bb80a",
+    "@matterbridge/dgram": "3.11.2-dev-20261106-e5bb80a",
+    "@matterbridge/test-utils": "3.11.2-dev-20261106-e5bb80a",
+    "@matterbridge/thread": "3.11.2-dev-20261106-e5bb80a",
+    "@matterbridge/types": "3.11.2-dev-20261106-e5bb80a",
+    "@matterbridge/utils": "3.11.2-dev-20261106-e5bb80a",
     "node-ansi-logger": "3.3.1",
     "node-persist-manager": "2.1.1"
   },
   "build": {
     "version": "3.11.2",
-    "sha": "98c7a1f211e88b260538a669a18e9a4b3a560e31",
-    "sha7": "98c7a1f",
+    "sha": "e5bb80af7faf412cba31b4b154b86658fa72d5dc",
+    "sha7": "e5bb80a",
     "event": "workflow_dispatch",
     "workflow": "Publish to npm and trigger docker builds",
     "type": "branch",