Skip to content

chore: bump version to 4.13.1-rc3 - #4198

Merged
Yeraze merged 1 commit into
mainfrom
chore/bump-4.13.1-rc3
Jul 18, 2026
Merged

chore: bump version to 4.13.1-rc3#4198
Yeraze merged 1 commit into
mainfrom
chore/bump-4.13.1-rc3

Conversation

@Yeraze

@Yeraze Yeraze commented Jul 18, 2026

Copy link
Copy Markdown
Owner

Version bump to 4.13.1-rc3 across all five files (package.json, package-lock.json, helm/meshmonitor/Chart.yaml version + appVersion, desktop/src-tauri/tauri.conf.json, desktop/package.json).

Rolled up since rc2 (13 PRs)

Features

Fixes

Docs

🤖 Generated with Claude Code

Release candidate 3 for 4.13.1. Rolls up 13 PRs merged since rc2:
6 features (position accuracy + location source, "Message anyway" override,
automation remote-admin reboot, sender short-names, render-side invalid-position
toggle, occupancy-scaled precision offset) and 6 fixes (MeshCore own-node sender
name, v1 default-alias scoping, per-conversation compose draft, Official-pin
router short-name, traceroute NO_CHANNEL, heatmap deleted-node density).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_018e4dtLyWeYJYJ7SbgFvGG1
@Yeraze Yeraze added the system-test Trigger hardware system tests label Jul 18, 2026
@github-actions

github-actions Bot commented Jul 18, 2026

Copy link
Copy Markdown

Claude finished @Yeraze's task —— View job


PR Review: chore/bump-4.13.1-rc3

  • Read changed files and verify version consistency
  • Check code quality and best practices
  • Security review
  • Final assessment

Summary

This is a straightforward version bump PR. All checks pass.

Version Consistency ✅

All 5 required files are consistently updated to 4.13.1-rc3:

File Version
package.json 4.13.1-rc3
package-lock.json 4.13.1-rc3 (both root + meshmonitor-desktop)
desktop/package.json 4.13.1-rc3
desktop/src-tauri/tauri.conf.json 4.13.1-rc3
helm/meshmonitor/Chart.yaml version: 4.13.1-rc3, appVersion: "4.13.1-rc3"

The CLAUDE.md requires updating all five files — this PR correctly updates all of them.

Code Quality ✅

No issues. The changes are purely mechanical version string replacements with no logic changes.

Potential Bugs / Issues ✅

None. The helm/Chart.yaml correctly updates both version and appVersion fields, which is important for Helm chart consumers.

Performance / Security ✅

No concerns — version bump only, no code changes.

Test Coverage

N/A — no logic changed, no tests needed.


Verdict: LGTM — clean, complete version bump across all required files following the documented versioning convention.

@github-actions

Copy link
Copy Markdown
System Test Results

MeshMonitor System Test Results

Test Run: 2026-07-18 15:34:17 EDT

Test Summary

Test Suite Result
Configuration Import ✅ PASSED
Quick Start Test ✅ PASSED
Security Test ✅ PASSED
V1 API Test ✅ PASSED
Reverse Proxy Test ✅ PASSED
Reverse Proxy + OIDC ✅ PASSED
Virtual Node CLI Test ✅ PASSED
Backup & Restore Test ✅ PASSED
Database Migration Test ✅ PASSED
DB Backing Consistency ✅ PASSED
API Exercise (3 DBs) ✅ PASSED

✅ Overall Result: PASSED

All deployment configurations are working correctly!

Test Details

Configuration Import:

  • Tests configuration import and device reboot cycle
  • Verifies channel roles, PSKs, and LoRa configuration
  • Note: Channel name verification skipped due to architectural limitation

Quick Start Test:

  • Zero-config deployment (no SESSION_SECRET or COOKIE_SECURE required)
  • HTTP access without HSTS
  • Auto-generated admin user with default credentials
  • Session cookies work over HTTP
  • Meshtastic node connection and message exchange verified

Security Test:

  • Verifies Node IP address hidden from anonymous users in API responses
  • Verifies MQTT configuration hidden from anonymous users
  • Verifies Node IP address visible to authenticated users
  • Verifies MQTT configuration visible to authenticated users
  • Verifies protected endpoints require authentication

V1 API Test:

  • Tests v1 REST API endpoints with Bearer token authentication
  • Verifies Bearer token requests bypass CSRF protection
  • Verifies POST/PUT/DELETE work without CSRF token when using Bearer auth
  • Verifies session-based requests still require CSRF token

Reverse Proxy Test:

  • Production deployment with COOKIE_SECURE=true
  • HTTPS-ready configuration
  • Trust proxy enabled for reverse proxy compatibility
  • CORS configured for HTTPS domain
  • Meshtastic node connection and message exchange verified

Reverse Proxy + OIDC Test:

  • OIDC authentication integration
  • Mock OIDC provider health checks
  • Authorization flow and session creation
  • Hybrid mode (OIDC + local auth)
  • Meshtastic node connection verified

Virtual Node CLI Test:

  • Virtual Node Server enabled on TCP port 4404
  • Meshtastic Python client successfully connects
  • Node data download and synchronization verified
  • Test message sent on gauntlet channel (index 3)
  • Message delivery confirmed via Web UI API
  • Virtual Node Server connection logging verified

Backup & Restore Test:

  • System backup created from running dev container
  • New container spun up with RESTORE_FROM_BACKUP env var
  • Data integrity verified (node count, message count, settings)
  • Restore event logged in audit log
  • Dev container unaffected by restore test

Database Migration Test:

  • SQLite to PostgreSQL migration verified
  • SQLite to MySQL migration verified
  • Data integrity confirmed for both target databases
  • Row counts match between source and target

DB Backing Consistency Test:

  • SQLite, PostgreSQL, and MySQL backends tested with same device
  • Node counts within ±10 across all three backends
  • Favorite counts identical across all backends
  • Key station verified as favorite on all backends

@Yeraze
Yeraze merged commit 6f0e529 into main Jul 18, 2026
24 checks passed
@Yeraze
Yeraze deleted the chore/bump-4.13.1-rc3 branch July 18, 2026 19:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

system-test Trigger hardware system tests

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant