kevin pushed to main at kevin/go_blog 2026-08-27 17:08:25 +08:00
f7870e8557 fix: 修复 P0 复审漏洞 #18 #19(数据库泄露 + SQL 注入)
kevin pushed to main at kevin/lora_meshtastic_project 2026-08-24 16:47:10 +08:00
07e8b366c9 uo pcb
kevin pushed to develop at kevin/meshtastic_firmware 2026-08-24 11:11:33 +08:00
0dc2f73c1b merge fix/llcc68-long-message-failure into develop
2d8220b0cb 下拉
f256499ca3 增加开机功能
3d5c3cc536 增加旅行版变体
dc58941e8e 修复 LLCC68 芯片长消息发送失败问题
Compare 5 commits »
kevin pushed to develop at kevin/meshtastic_firmware 2026-08-23 21:57:01 +08:00
4016ccb9ab Merge branch 'upstream/develop' into develop
bfd1e1a231 Add Heltec RC32, RC52 and RCC6 boards, and LC760CA GNSS support (#11572)
ac330e6a6b fix(radio): MeshBeacon heap leak and runtime packet payload size check (#11573)
05f6474108 meshnology-w10: define HAS_SPI_TFT so the TFT screen initializes again (#11042)
73f7b35bea Report the right hardware model on four boards (#11570)
Compare 110 commits »
kevin pushed to develop at kevin/meshtastic_firmware 2026-08-23 21:34:55 +08:00
5208b0023c Merge branch 'meshtastic:develop' into develop
512154ff97 feat(BaseUI): show 'GPS Time Only' when GNSS has time but no position fix (#11361)
2e958821f9 fix(BaseUI): suppress new-message pop-up while a menu is on screen (#11373)
e958f7bdef Add the PMU button handling to BPF (#11379)
cd716fe384 logging: audit log strings for terseness, reclaiming ~6.8 KB of string data (#11374)
Compare 60 commits »
kevin pushed to main at kevin/lora_meshtastic_project 2026-08-23 21:23:10 +08:00
4e42a01049 修复键盘板的连接器错误
kevin pushed to main at kevin/lora_meshtastic_project 2026-08-23 20:33:05 +08:00
db0e9892f9 使用tp4056做充电芯片
1877aa0fe6 忘记改pcb版本号了
Compare 3 commits »
kevin pushed to main at kevin/meshtastic_mqtt_server 2026-08-21 21:33:06 +08:00
34e50af068 Merge pull request '修复 install.sh 全新部署无法启动:web 配置块误缩进在 database 段下,默认口令触发启动守卫' (#3) from dsh/meshtastic_mqtt_server:fix/install-sh-web-block-indent into main
83f7f551fc 修复 install.sh 全新部署无法启动:web 配置块误缩进在 database 段下,随机管理员口令被解析器丢弃,程序以默认口令 admin 补全并触发非回环启动守卫拒绝;已修正缩进并补全 port_enabled/socket_enabled 字段
Compare 2 commits »
kevin merged pull request kevin/meshtastic_mqtt_server#3 2026-08-21 21:33:04 +08:00
修复 install.sh 全新部署无法启动:web 配置块误缩进在 database 段下,默认口令触发启动守卫
kevin pushed to main at kevin/meshtastic_mqtt_server 2026-08-21 21:16:21 +08:00
89e56a4048 修复聚合状态下无法删除所有显示的节点:视口接口聚合模式只返回聚合点(无 node_id),删除前按当前视野 bounds 分页拉取全部节点 ID 再逐个删除,前端 v0.3.3
kevin pushed to main at kevin/meshtastic_mqtt_server 2026-08-20 19:33:42 +08:00
b817a82cad Merge pull request '修复节点详情页加载慢:text_message.from_id 加 varchar(191)+索引' (#2) from dsh/meshtastic_mqtt_server:fix/text-message-from-id-index into main
d33ec0075d 修复节点详情页加载慢:text_message.from_id 加 varchar(191)+索引,避免百万行全表扫描(与 channel_id DBv1 处理一致)
Compare 2 commits »
kevin merged pull request kevin/meshtastic_mqtt_server#2 2026-08-20 19:33:41 +08:00
修复节点详情页加载慢:text_message.from_id 加 varchar(191)+索引
kevin pushed to main at kevin/meshtastic_mqtt_server 2026-08-20 18:17:04 +08:00
5d174caabb Merge pull request '修复签到墙日历与列表数量不一致:点选筛选按服务器时区构造区间' (#1) from dsh/meshtastic_mqtt_server:fix/signed-calendar-timezone into main
6fddcd11b5 修复签到墙日历与列表数量不一致:日历按服务器本地日期分组,点选某天时用服务器时区构造筛选区间(从 sign_time 动态推导偏移),任意浏览器时区下日历数字与列表条数一致
Compare 2 commits »
kevin merged pull request kevin/meshtastic_mqtt_server#1 2026-08-20 18:17:03 +08:00
修复签到墙日历与列表数量不一致:点选筛选按服务器时区构造区间
kevin pushed to main at kevin/meshtastic_mqtt_server 2026-08-20 17:19:41 +08:00
b0202062af 安全加固:console_log.meshtastic 默认关闭(不打印解密明文),session_secure 默认 true,config.yaml 回写权限改 0600,公开接口错误信息脱敏(/api/health、/api/channels、列表接口,text-messages 移除 mqtt_remote_host),bot PSK 不回显(psk_set+更新保持原值),前端 help 页 DOMPurify 客户端消毒,后端 v1.6.0
kevin pushed to main at kevin/meshtastic_mqtt_server 2026-08-20 17:13:18 +08:00
ba9be5b68b 安全加固:LLM 会话按 (bot,peer) 隔离+历史上限50条,LLM 入队按 (bot,from_node) 限流(60s内5条),瓦片磁盘缓存单源配额(3000文件/300MB 按mtime淘汰),签到墙读接口限速+全站每日1000条封顶,敏感数据落盘 AES-256-GCM 加密(MESH_SECRET_KEY, 兼容明文迁移),admin 改密需验证当前密码+pwd_version 会话撤销,后端 v1.5.0
kevin pushed to main at kevin/meshtastic_mqtt_server 2026-08-20 17:00:46 +08:00
f21e8337af 安全加固:Web 登录防爆破(IP+用户名双维度限速 5次/分钟锁10分钟,未知用户名 dummy bcrypt 防枚举),瓦片代理 SSRF 加固(DialContext 拒绝内网/链路本地/CGNAT/ULA 与重定向限制,Content-Type image 白名单+nosniff),/api/discard-details 公开去敏(新增 admin 全字段端点),公开地图源接口外部 URL/key 一律代理化,install.sh 随机管理员密码+非回环默认口令拒绝启动,后端 v1.4.0
kevin pushed to main at kevin/meshtastic_mqtt_server 2026-08-20 16:51:41 +08:00
fe0cf036cf 安全加固:MQTT broker 新增可选连接认证(bcrypt 用户+匿名开关+按 IP 失败限速,配置明文密码首启自动转哈希,默认关闭零影响),py 迁移脚本数据库口令改环境变量(新增 db_config.example.py 模板),新增 doc/SECURITY_FIX_TODO.md 安全修复清单,后端 v1.3.0
kevin pushed to main at kevin/mailgo 2026-08-20 15:18:58 +08:00
17d8dc1567 fix(imap): 序号按到达顺序(id ASC)分配,INTERNALDATE 使用到达时间
kevin pushed to main at kevin/mailgo 2026-08-20 12:27:03 +08:00
cca7e4f092 Merge pull request 'feat(web): 多语言界面(中/英/日)与用户语言偏好字段' (#15) from dsh/mailgo:fix/legacy-ban-index into main
c881146a40 feat(web): 多语言界面(中/英/日)与用户语言偏好字段
Compare 2 commits »