Skip to content

2.3.4 — RPC error sanitization

Latest

Choose a tag to compare

@n-car n-car released this 12 Oct 17:10

Released 2026-10-12.

  • Require rpc-express-toolkit ^4.5.2 for default internal-error sanitization and corrected JSON-RPC envelope handling.
  • Preserve intentional public application errors with an explicit integer code, public message, and safe data. Unexpected errors return -32603 / Internal error without internal details.
  • Add four flow-backed HTTP error regressions covering standard and Safe Mode.
  • Validation: 18 tests passed against the published dependency; all ten configured Node.js/Node-RED CI combinations plus package checks passed; runtime dependency audit reports no vulnerabilities.

The existing wire protocol and UI are unchanged. Flows that intentionally expose errors must follow the documented public-error contract.