v2.25.0

🚀 Features

• feat: add DISABLE_SECURITY_ACTIVATION environment variable
  • PR: #2522
• Use 2048-bit key for self-signed SSL certificates
  • PR: #2500
• feat: add conversion formulas to active preset and bulk metadata endpoint
  • PR: #2436
• feat: add custom unit support for per-path display unit override
  • PR: #2512
• Add unit category to performance paths
  • PR: #2539
• feat: add AsyncAPI docs for WebSocket delta APIs
  • PR: #2491
• Add input filtering for SeaTalk1 connections
  • PR: #2499
• feat(security): add disable/restore security from Admin UI
  • PR: #2530
• feat(tcp): guard against send buffer overflow in TCP connections
  • PR: #2472
• fix(admin-ui): redesign plugin config page layout
  • PR: #2457
• Radar API refactored
  • PR: #2357
• Feat: Add config & data preservation option to plugin removal
  • PR: #2575
• feat(ws): limit concurrent WebSocket connections per IP
  • PR: #2578
• feat: add environment variable TRUST_PROXY
  • PR: #2579
• Improve logging when auth cookies are cleared
  • PR: #2542
• perf(deltacache): string-compare ISO 8601 timestamps when sorting
  • PR: #2585
• perf: use structuredClone for metadata deep clones
  • PR: #2584
• perf: short-circuit eager JSON.stringify in debug calls
  • PR: #2581
• chore(logging): log full error objects to capture stack traces
  • PR: #2565
• feat(admin-ui): support ESM module federation containers
  • PR: #2552
• feat: include app-dock by default
  • PR: #2597

🐛 Fixes

• fix(streams): set provider error status on tcp disconnect
  • PR: #2525
• fix: sourcepriorities in admin ui not populating
  • PR: #2541
• fix(streams): improve gpsd connection handling , add connection timeout
  • PR: #2503
• fix(security): include timeToLive in login responses
  • PR: #2468
• fix(interfaces): convert NMEA0183PORT env var to number for mDNS
  • PR: #2548
• fix: prevent context prefix from contaminating meta PUT path
  • PR: #2544
• refactor(settings): defer in-memory mutation until after persist
  • PR: #2550
• fix(plugins): clean up leftover files after plugin uninstall
  • PR: #2458
• fix(security): add rate limiting to WebSocket login endpoint
  • PR: #2568
• fix: parse websocket PUT responses before matching requestId
  • PR: #2571
• Fix ReDoS vulnerability in chart tile route regex
  • PR: #2573
• fix: move anchor unit category to length
  • PR: #2576
• fix: reject deltas with invalid values entries
  • PR: #2460
• fix(streams): silence gpiod-seatalk noise via # comment convention
  • PR: #2586
• fix: suppress missing security.json warning on fresh install
  • PR: #2598
• Resources Provider: Fix the test for resource being within a specified distance from a position
  • PR: #2577
• fix(oidc): add redirectUri field to admin GUI and fix ENV validation
  • PR: #2603
• fix(oidc): persist user identity metadata to security.json
  • PR: #2600

📦 Uncategorized

• test(history): add tests for History API v2 endpoints
  • PR: #2490
• chore: add tests for login over websocket
  • PR: #2540
• refactor(interfaces): migrate providers to TypeScript
  • PR: #2537
• fix(admin-ui): resolve circular dependency in server-admin-ui
  • PR: #2558
• chore(admin-ui): upgrade to Vite 8
  • PR: #2553
• chore(deps): bump docker/login-action from 3 to 4
  • PR: #2557
• chore(deps): bump docker/metadata-action from 5 to 6
  • PR: #2556
• chore(deps): bump docker/setup-buildx-action from 3 to 4
  • PR: #2555
• chore(deps): bump docker/build-push-action from 6 to 7
  • PR: #2554
• docs(agents): add performance guidance for the hot path
  • PR: #2583
• chore(deps): bump @signalk/nmea0183-utilities to ^0.12.0 in streams
  • PR: #2596
• docs(oidc): fix auto-login bypass parameter
  • PR: #2602