Reliability and hygiene batch for 1.34.8 - #107
Merged
Merged
Conversation
Setpoint raw max, int16/int8 ranges, and security zone limits lived in several decoders and routers. One table in constants.js keeps them from drifting apart. Co-authored-by: Doug Rathbone <dougrathbone@users.noreply.github.com>
Wire sanitizePlainObject into PUT/import payload normalization so prototype-polluting keys are dropped before nested maps are copied, and give httpHelpers its own tests instead of relying on webServer coverage. Co-authored-by: Doug Rathbone <dougrathbone@users.noreply.github.com>
Invalidate the healthy-connection cache on backpressure so execute() re-sorts, and add tests for that preference, event forwarding, and the destroy-and-recreate path when a reconnect attempt fails. Co-authored-by: Doug Rathbone <dougrathbone@users.noreply.github.com>
Add-on mode listens on all interfaces for Ingress. If the port is also published, mutating routes need web_api_key; say so at startup. Co-authored-by: Doug Rathbone <dougrathbone@users.noreply.github.com>
Relative ramps previously logged a warning and did nothing the MQTT client could observe. The timeout now calls the operation callback so the lighting router can skip the ramp and log that the command aborted. Co-authored-by: Doug Rathbone <dougrathbone@users.noreply.github.com>
Run aircon, security, measurement, and clock handlers through one pipeline so unparsed app traffic is dropped without four copy-pasted branches. Settings reload now pushes the label snapshot into HA discovery, which load() itself does not notify. Co-authored-by: Doug Rathbone <dougrathbone@users.noreply.github.com>
adm-zip still has no fix for extractAllTo following destination symlinks. We only inflate in memory, but preflight now refuses symlink members so a later on-disk extract cannot inherit that bug. Co-authored-by: Doug Rathbone <dougrathbone@users.noreply.github.com>
Co-authored-by: Doug Rathbone <dougrathbone@users.noreply.github.com>
dougrathbone
marked this pull request as ready for review
September 11, 2026 20:12
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Batch from the post-1.34.7 “what next” survey, minus HVAC hardware TODOs. Closes silent dimmer ramps, hardens CBZ import and the unbound web UI, and tightens tests around the connection pool and HTTP helpers.
Changes
Test plan
npm testpasses locally with no failures (3106 tests)npm run lintandnpm run typecheckpassChecklist
package.jsonandhomeassistant-addon/config.yaml(if releasing)CHANGELOG.mdupdated (if releasing)