v0.41.0

• MF-1250 - Add JSON converter endpoints, consolidate routes to ?to= query param, and extend SenML to support reader exports (#1255)
• MF-1144 - add audit log service (#1249)
• NOISSUE - Change Timescale chunk size to 1 week
• NOISSUE - converters: validate CSV before async publish (#1251)
• MF-1164 - Consume alarms in rules (#1248)
• Fix rules listing by thing crashing on sort by name (#1246)
• pass auth grpc client env. vars. to docker compose services (#1245)
• MF-1209 - Replace protomfx.Message with mfxproto.Command (#1226)
• MF-1161 - Introduce Input Config with subtopic filtering for rules (#1240)
• MF-1232 - attach acting user identity to redis events (#1237)
• MF-1232 - attach user identity information to contexts originating from HTTP requests (#1236)
• MF-1238 - Add comparator validation for rule conditions (#1239)
• MF-1230 - Add flags in Profile Config (#1233)
• NOISSUE - Fix Timescale docker compose (#1234)
• rename pkg/auth to pkg/authn (#1235)
• MF-1103 - TimescaleDB migration for readers (#1126)
• MF-1165 - Add webhook as rule action (#1231)
• MF-1192 - Consume thing.remove and group.remove events in certs (#1227)
• NOISSUE - Fix webhook forwarder to send raw payload instead of marshaled JSON (#1228)
• MF-1197 - Introduce Input field and refactor assign/unassign endpoints (#1212)
• MF-1218 - refactor Redis event stream code (#1211)
• MF-1191 - Consume thing.remove and group.remove events in readers (#1225)
• MF-1219 - Refactor TestAuthorize in auth service (#1220)
• RELEASE - v0.40.0 (#1223)

v0.40.0

• MF-1215 - Return null for missing aggregation fields (#1216)
• MF-1213 - Add SUM aggregation support for time-series queries (#1214)
• MF-1140 - Automatic Key Rotation (#1170)
• MF-1205 - Add alarm filtering by level and status (#1206)
• MF-1207 - Add nginx runtime file to gitignore (#1208)
• MF-1150 - Add level, status, and rule conditions to alarms (#1195)
• MF-1202 - Add first and last aggregation types (#1203)
• NOISSUE - Add second, millisecond and microsecond agg intervals for readers (#1201)
• MF-1175 - rules: scripts: add readers Lua API (#1189)
• MF-1198 - Add alarm publish/subscribe and refactor consumer interfaces (#1199)
• MF-1145 - add user identity information to service method logs (#1196)
• MF-1139 - Add CRL to Certs (#1176)
• MF-1096 - Refactor gRPC client interfaces to use domain types (#1171)
• MF-991 - Send commands via ws adapter (#1186)
• MF-991 - Send commands via coap adapter (#1187)
• NOISSUE - auth: use proper protobuf type in gRPC client Issue method (#1194)
• MF-1085 - Remove MongoDB reader and writer (#1190)

v0.39.0

• MF-1156 - refactor: extract shared domain types to domain subpackages (#1114)
• MF - 1153 - Allow OAuth login for existing users and invite-based registration when self-registration is disabled (#1154)
• MF-1179 - Polish logs and errors in MQTT handler (#1184)
• NOISSUE - Update READMEs, openapi, ENVARS (#1151)
• MF-1118 - Support thing key auth for commands (#1181)
• MF-1182 - Introduce ErrMissingAuth error (#1183)
• MF-1168 - Publish MQTT commands to corresponding NATS subject (#1178)
• MF-1177 - Fix changing scheduler frequency has no effect (#1180)
• MF-1118 - Implement machine‑to‑machine (M2M) authorization (#1132)
• MF-1092 - add per-service PageMetadata types and fix order query parameter validation (#1086)
• MF-1159 - Fix converters: message timestamp (#1167)
• NOISSUE - Add command to push individual docker images (#1157)
• NOISSUE - Update mproxy (#1158)
• NOISSUE - Fix two silent bugs in things Redis layer (#1155)
• NOISSUE - Clean up unused UI env vars and pass self-registraion flag (#1152)
• MF - 1129 - Add Group link in the group invites email (#1136)
• MF-1135 - Add thing type to Redis cache (#1137)
• NOISSUE - Don’t allow OAuth when self‑registration is off (#1134)

v0.38.1

• MF-1130 - Fix ReadStringArrayQuery splits comma-separated values unexpectedly via bone.GetQuery (#1131)
• MF-1121 - Add Thing type field (#1122)
• MF-1124 - Use dedicated error for missing thing key on update (#1125)
• MF-1128 - Upgrade go version to 1.25.8 (#1127)

v0.38.0

• RELEASE - v0.38.0 (#1123)
• MF-1020 - rules: Implement basic Lua scripting support (#1022)
• NOISSUE - Rename pagination fields to Order and Dir for consistency (#1120)
• MF-1116 - Restrict delete operations to Admin role (#1117)
• MF-1112 - Add endpoint for listing API Keys (#1111)
• NOISSUE - Include "subscriptions" in list response when empty (#1115)
• MF-1091 - Add complete support for Certs CLI (#1094)
• Mf-1109 - Email sub-templates not found at runtime (#1110)
• MF-786 - Add complete support for Readers CLI (#1090)
• MF-1099 - Rename mqtt subscription.Subtopic to Topic (#1113)
• MF-1097 - Authorize subscription topics for commands and messages (#1098)
• NOISSUE - Rename updateUser to updateUserMetadata (#1108)
• MF-1105 - remove subject from Message proto (#1106)
• NOISSUE - Fix uiconfig and messages rights (#1107)

v0.37.0

• MF-235 - Implement OAuth 2.0 SSO with Google and GitHub Providers (#943)
• NOISSUE - Remove populate group migration (#1104)
• RELEASE - v0.37.0 (#1102)
• MF-1085 - Remove mongo and timescale readers and writers from Makefile (#1101)
• MF-1059 - auth: when listing Org Invites by user/org, avoid returning dormant ones (#1058)
• NOISSUE - Remove unused consts from pkg (#1095)
• MF-1093 - Refactor downlinks service by moving helpers to separate files (#1084)
• NOISSUE - Add missing tests in rules and alarms services (#1080)
• NOISSUE - Add missing openapi (#1077)
• MF-1088 - Use consistent URLs for Redis cache and event store (#1089)
• NOISSUE - Add missing tests in downlinks and modbus (#1082)
• MF-922 - Support for ECDSA Certificates (#1050)
• NOISSUE - Secure certificate responses (#1083)
• NOISSUE - client key response (#1081)
• NOISSUE - Add missing readme files (#1076)

v0.36.1

• NOISSUE - Fix base email path
• MF-1073 - Add webhooks service in Makefile (#1075)
• MF-1073 - Add webhooks service (#1074)

v0.36.0

• MF-1037 - Update eclipse/paho.mqtt.golang to unaffected version (#1071)
• MF-1069 - Add converters service (#1070)
• MF-1067 - Add modbus service (#1068)
• MF-1065 - Add filestore service (#1066)
• MF-1063 - Move UIConfigs service into open-source mainflux repo (#1062)
• MF-1061 - Add downlinks service (#1064)
• MF-1037 - Update docker/docker and docker/cli to stable versions (#1060)
• MF-1054 - Run Docker containers as non-root user (#1055)
• MF-1056 - Add SBOM and provenance attestations to release images (#1057)
• MF-1037 - Update x/crypto, x/net, x/sync to unaffected versions (#1053)
• NOISSUE - Refactor aggregation (#1036)
• MF-1041 - Upgrade Go version to 1.25.7 in Dockerfile and go.mod (#1052)
• MF-230 - Update README (#1051)
• NOISSUE - Remove Vault leftovers (#1048)
• MF-1041 - Update Go version to 1.24.13 and fix test compatibility (#1049)
• NOISSUE - Remove vernemq and vault leftover docker files and config (#1047)
• MF-1044 - Upgrade Jaeger image to support mutiarch (#1046)
• MF-406 - Replace VerneMQ with Mosquitto for MQTT broker (#1045)

v0.35.1

• NOISSUE - Rename senmlPageMetadatas and jsonPageMetadatas vars (#1042)
• MF-1003 - Multi-device search for readers (#1027)
• MF-1037 - Update golang.org/x dependency versions (#1040)
• MF-1037 - Update github.com/golang-jwt/jwt/v4 to v4.5.2 (#1039)
• MF-1037 - Update github.com/jackc/pgx/v5 to v5.5.4 (#1038)
• MF-1028 - Add repo and cache tracing in mqtt-adapter (#1035)
• NOISSUE - Accept uuid when creating groups (#1034)
• MF-1002 - Refactor things tracing files (#1031)
• MF-954 - Consume things events in mqtt-adapter (#1032)
• NOISSUE - Update Prometheus client library to v1.11.1 (#1033)
• MF-1029 - Add public endpoint to retrieve platform invite email (#1030)
• MF-1014 - Expand list of allowed columns in dbutil.GetOrderQuery (#1024)
• MF-1017 - Properly validate invitee Org role when creating Platform Invite (#1025)
• NOISSUE - Fix Certs Expiration Date (#1026)
• MF-993 - Refactor mqtt Publish method (#1018)
• NOISSUE - Fix MultiArch Image Build (#1021)
• NOISSUE - Add indexes in json and senml tables (#1023)

v0.35.0

• RELEASE - v0.35.0 (#1019)
• MF-995 - Merge JSON and SenML backup into single endpoint and reorganize directories (#1011)
• MF-948 - CI/CD workflow (#956)
• NOISSUE - Add missing tests in things service (#1009)
• NOISSUE - Fixed staticcheck warnings across codebase (#1016)
• MF-1012 - Replace SDK by gRPC for retrieving thing key from certs (#1015)
• MF-987 - Rename things and auth gRPC methods (#1013)
• MF-991 - Send command via http adapter (#992)
• NOISSUE - Add client_max_body_size 1024M for readers nginx (#1010)
• MF-995 - Refactor backup endpoints, remove partial backups, and rename alarms backup (#1007)
• Refactor users service and reorganize backup structure (#1008)
• NOISSUE - Fix things auth and ws logging (#1005)
• NOISSUE - Fix adapters messages subject (#1006)
• MF-988 - Refactor MQTT subscriptions to be thing-centric (#989)
• NOISSUE - Update logging middleware method signatures (#1001)
• MF-999 - Use a new nats subject for messages (#1000)
• MF-980 - Support Group assignment when creating Platform+Org invites (#981)
• Fix backup and restore flow for JSON and SenML messages (#997)
• RELEASE - Fix docker-compose for v0.34.0 (#998)
• MF-912 - Support optional Group assignment when creating Org Invites (#968)