v2.20.0

🚀 Features

• Add support for WASM plugins (with examples)
  • PR: #2158
• feat: add WebSocket backpressure handling for slow clients
  • PR: #2235
• feat: Add Radar API for radar device control
  • PR: #2242
• feat: DataBrowser with granular subscriptions
  • PR: #2236
• feat: use --ignore-scripts for AppStore plugin installs
  • PR: #2183
• feat(auth): add OpenID Connect (OIDC) authentication
  • PR: #2202
• refactor(docker): switch from global to local npm install
  • PR: #2220
• feature: use atomic writes for config files
  • PR: #2227
• feat: increase default EventEmitter MaxListeners to 50
  • PR: #2246
• chore: upgrade ws from 7.x to 8.x
  • PR: #2239
• feature: use bonjour-service for mDNS announcements
  • PR: #2275

🐛 Fixes

• fix: Resources API exception handling when there are multiple providers for a resource type.
  • PR: #2223
• fix (admin-ui) regression error, message not appearing in notifications in DataBrowser
  • PR: #2233
• fix: use ephemeral port for MFD webapp multicast publishing
  • PR: #2238
• fix: Increase HTTP rate limit defaults to fix 429 errors with webapps
  • PR: #2257
• fix(security): validate zip entry paths in backup restore
  • PR: #2253
• fix(security): block prototype pollution in applicationData endpoint
  • PR: #2252
• fix(security): use global regex replacement in ACL pattern matching
  • PR: #2251
• fix(server-api): Allow calling history api with from/to without duration
  • PR: #2264
• fix: user self registration
  • PR: #2277

📦 Uncategorized

• docs: add AI coding guidelines (AGENTS.md)
  • PR: #2240
• chore(deps): update dependencies to fix security vulnerabilities
  • PR: #2254
• chore: run tests on node 22 & 24
  • PR: #2260
• Upgrade unzipper to fix fstream and rimraf deprecation warnings
  • PR: #2211
• chore: switch server-admin-ui bundler from Webpack to Vite
  • PR: #2177