Homelable .net

RELEASE NOTES

Changelog

Everything that shipped in Homelable : node types, scanning, Zigbee & Z-Wave, exports and security. Newest first.

  1. 3.1.1

    Features
    • Drag to reorder services in the node detail panel. Thanks @Isilla. (#302)
    • Getting Started walkthrough tour with first-run canvas detection. (#300)
    Fixes
    • Round-trip Show Port Numbers on YAML export/import. (#301)
    • Render error toasts on a red surface. (#300)
    Docs
    • Rework README header with logo, badges, and nav links. (#300)
  2. 3.1.0

    Features
    • Drag to reorder node properties. (#296)
    • Search for nodes and properties. Thanks @Floyddotnet. (#294)
    • Widen zone modal into two columns. (#293)
    • Autosave canvas after a configurable inactivity delay (opt-in). Thanks @nicolabottini. (#289)
    • MCP: design_id on approve_device + delete_design tool. Thanks @nicolabottini. (#281)
    Fixes
    • Scanner: decouple port discovery from version detection. (#295, #277)
    • Allow undo after Auto Layout and YAML import. (#290)
    • Move edge waypoints when the connected node or its container is dragged. (#288)
    • Keep container host height when editing an unrelated field. (#287)
    • Keep container children in place when editing a host node. Thanks @nicolabottini. (#286)
    • list_pending_devices MCP tool leaked approved/hidden inventory rows. Thanks @MikeSviblov. (#273)
    Docs
    • Fix MCP client transport to http (was sse). (#275)
  3. 3.0.0

    Added
    • Proxmox VE import: pull hosts, VMs and LXC into inventory, with optional scheduled auto-sync and a manual re-sync button (connection config is now env-only). (#253, #259)
    • Scheduled auto-sync for Zigbee & Z-Wave imports. (#270)
    • Floor plan map background, LQI-based edge coloring, and Zigbee path highlighting. Thanks @pranjal-joshi. (#207)
    • Customizable connection points per node side. (#249)
    • Configurable edge line style + width per type and per edge, plus selectable endpoint marker shapes. (#250, #252)
    • Create a new canvas by copying an existing one. (#257)
    • Prompt on duplicate device instead of silently blocking/merging on approve. (#261)
    • Active design synced to URL for refresh/share. (#263)
    • MCP can target a specific design/canvas, create canvases, and auto-position nodes with auto-assigned edge handles. Thanks @nicolabottini. (#266)
    Fixed
    • Mesh (Zigbee/Z-Wave) import: duplicate-node crash and coordinator now routed to pending. (#247)
    • Keep mesh/cluster links so edges resolve onto a second canvas. (#254)
    • Preserve edge connection points in YAML export/import. (#255, #208)
    • Harden media path handling against path injection. (#256)
    • Match scanned devices to canvas nodes by ip-token and MAC. (#262, #258)
    • Record ScanRun for scheduled Proxmox auto-sync. (#269)
    Docs
    • User-facing FEATURES.md. (#248)
    • CHANGELOG with full release history. (#264)
  4. 2.6.1

    Added
    • Z-Wave nodes can be added/edited manually. A Z-Wave group (Controller / Router / End Device) is now in the Add/Edit node type selector, matching Zigbee. Mesh-radio nodes default to no status check.
    Fixed
    • Standalone (frontend-only) multi-canvas (designs) support, originally merged in #244 after the 2.6.0 tag with no version bump.
  5. 2.6.0

    Device Pending is gone — replaced by Device Inventory: devices stay in an inventory, can be placed in multiple canvases, rescanned and updated. New Z-Wave section: scan, import and store Z-Wave devices like Zigbee.

    Added
    • SVG export option in the canvas export modal, alongside PNG (#238).
    • Deep-scan HTTP probe + Device Inventory: scans probe HTTP services and surface a per-device inventory (#222, closes #195).
    • Z-Wave network scan via the MQTT bridge (#224).
    • Inventory timestamps on nodes — nodes show when their inventory was last collected (#233).
    • New nodes drop at the centre of the visible canvas instead of off-screen (#234).
    • Expanded MAC OUI database: router, switch, AP, NAS and camera vendor prefixes (#220).
    Fixed
    • Optional white background on export and working downloads in Firefox (#239, closes #165).
    • MCP-created nodes/edges attach to the active design instead of floating (#237, closes #225).
    • Stopping a scan interrupts the running nmap range immediately (#236, closes #218).
    • Auto-layout orders Proxmox children by parent port number (#235).
    • Copy-to-clipboard for Markdown works on non-secure HTTP origins (#219).
    Docs
    • Documented the SCANNER_HTTP_RANGES port-spec format (#232).
  6. 2.5.1

    Fixed
    • Manually resized nodes — including VM/LXC nodes nested inside a Proxmox container — keep their size on reload instead of snapping back to content-fit.
    • Node detail panel has a Size section for pixel-exact width/height; fields resync live when dragging a corner handle.
    • Adding an LXC/VM under a non-container-mode Proxmox node no longer confines it to a tiny box — it stays a free, draggable node.
    Security
    • Resolved high-severity npm audit advisories (esbuild, form-data, vite → 7.3.5).
    • Bumped python-multipart to 0.0.31 (CVE-2026-53538/53539/53540).
  7. 2.5.0

    Added
    • Scan History modal with run duration, finished timestamp, and kind/status filters (#203).
    • Container nesting: drag a node onto a container node to nest it; detach/re-parent via an editable container selector (#202).
    • Editable node groups: add/remove members and edit the group description directly (#200).
    • Multi-line edge labels (#199).
    • Per-service status checks with offline colouring (#198).
    Fixed
    • Reduce status flapping, add IPv6 ping, colour manually-added web services (#198).
    • Keep non-HTTP services grey instead of red (#198).
    • Idempotent WebSocket connection removal — release the slot on any error (#198).
    • Persist group description with Ctrl+S, not only on blur (#200).
    Security
    • Resolve Dependabot and code-scanning alerts; bump hono to 4.12.21+ (#197).
    • Bump zeroconf to 0.149.12 for CVE-2026-48045 (#202).
  8. 2.4.0

    Added
    • Multiple designs (canvases): build and switch between separate diagrams, plus a new electrical-device node type (#177).
    • Copy & paste nodes between designs (#189).
    • Switch port numbers (up to 64 ports) plus a new fibre-optic link style (#172).
    • Read-only Live View link in the header for sharing or wall displays (#185).
    • Scans keep discovered MAC addresses when a device is approved (#178).
    • Richer AI/MCP control: assistants can set the full set of node fields on create/update (#180).
    Changed
    • Settings moved into a dedicated window for a cleaner sidebar (#188).
    • "Hide IP" option now lives in Settings and is remembered between sessions (#189).
    • Smoother link animations for flowing/snake styles (#187).
    Fixed
    • "Show Port Numbers" now persists after reload (#191).
    • The Save button works again (previously only Ctrl/Cmd+S) (#190).
    • Zigbee re-import correctly brings back already-approved devices (#176).
    Security
    • Dependency updates: zeroconf, qs, brace-expansion (#175, #182).
  9. 2.3.0

    Added
    • Full node schema over MCP: create_node / update_node expose the complete backend schema (os, notes, mac, services, cpu_count, cpu_model, ram_gb, disk_gb, properties, …); get_canvas round-trips the same fields (#174).
    • MAC carried onto approved nodes from a scan (#168).
    • Richer switch & edge modeling: switch port cap raised to 64, port numbers shown, new fibre edge type.
    Fixed
    • Canvas includes the MAC property on the approved node so it shows immediately after approval (#168).
    • Zigbee: revive orphaned approved devices on re-import instead of dropping them (#167).
    Security
    • Bump zeroconf 0.131.0 → 0.149.7 for CVE fixes.
  10. 2.2.0

    Added
    • Laptop & mobile node types with theme-coherent styling (#166).
    • Collapsible / expandable zones — collapsed is now a first-class NodeData field with edge rewiring and read-only liveview support (#158).
    • LXC / bare-metal MCP install script lxc-mcp-install.sh with env-var overrides and repo-clone fallback; MCP image published to GHCR (#163).
  11. 2.1.1

    Fixed
    • LiveView: nest Docker container children under their host node; apply saved theme & custom style on load.
  12. 2.1.0

    Added
    • Draggable edge endpoints — reconnect either end of an edge to another node/handle; Proxmox containers gain snap points (#150).
    • Docker containers can live inside VMs, Proxmox hosts or LXCs; parent auto-cleaned on type change (#153, #154).
    • Group node side handles (top/right/bottom/left) for proper edge attachment (#152).
    • Multiple IPs per node — paste several IPs separated by comma/space/newline, each clickable individually (#136).
    • Zigbee device properties (IEEE, Vendor, Model, LQI) auto-populated on approve / re-import (#148).
    • Homepage widget stats endpoint: new /stats API for gethomepage integration (closes #131, #149).
    • Zone modal polish: centered opacity thumb, fixed font casing, full keyboard + ARIA support (#106).
    Security
    • Dropped passlib in favour of direct bcrypt; status-check targets reject CLI-flag injection.
  13. 2.0.3

    Changed
    • Remove check method for Zigbee nodes.
  14. 2.0.2

    Added
    • Activated dashboardicons icons — brand-new icons selectable for nodes.
    Fixed
    • Various modal fixes.
  15. 2.0.1

    Added
    • New Zigbee nodes available in the new/edit node modal.
  16. 2.0.0

    A major milestone: Zigbee2MQTT integration, a new pending-devices modal, text nodes and alignment guides.

    Added
    • Zigbee2MQTT integration (thanks @pranjal-joshi): import a full Zigbee network map from Z2M as a background scan run; three new node types (Coordinator, Router, End Device); MQTT TLS with optional cert-verify skip; imported devices flow through the pending section with edge persistence.
    • New pending devices modal: full-screen grid with cards, filters (IP / Zigbee / all), search, multi-select and bulk restore.
    • Text node type for free-form annotations (#138).
    • Alignment guides + snap while dragging nodes, built on OnNodeDrag (#139).
    • Per-node services toggle to show/hide the services list on the node (thanks @findthelorax) (#107).
    • Zigbee node types exposed in the Custom Style editor.
    Fixed
    • Status checker: ms timeout for ping on macOS.
    • Scan: default check_method='ping' for approved devices.
    • Detail panel: handle non-Z timezone offsets in Last Seen.
    • Groups: preserve children + size on edit; fix status WebSocket proxy.
    • Pending: drop dangling onNodeApproved call; null-safe pending IP in SearchModal.
    • Text node: persist text in label across reloads.
    Security
    • Bump fast-uri (GHSA-q3j6-qgpj-74h6, GHSA-v39h-62p7-jpjc), axios ^1.15.2, python-multipart.
    • Sanitize MQTT error messages to prevent credential leakage.
  17. 1.13.0

    Added
    • New Firewall node type under Add Node → Hardware, with distinct flame icon and red accent.
    • Up to 48 bottom connection points per node (slider, previously capped at 4); the node card grows wider as handles are added.
    Fixed
    • Sidebar no longer freezes on Scan History after starting a scan.
    • Delete confirmation respects Cancel — clicking Cancel keeps the modal open.
  18. 1.12.0

    Added
    • Custom Style Editor: per-node-type border/background/icon colour + opacity, per-edge colour/opacity/path/animation, default size per type, "Apply to existing nodes" and "Apply All to Canvas"; saved with the canvas.
    Changed
    • Accessibility overhaul: consistent hover/focus borders, pointer cursors, keyboard navigation and Enter-to-apply across all modals (#108).
    • IP address hint moved below the field; hover border colour toned down.
    Fixed
    • Edge labels and the + waypoint handle stay on the routed path when waypoints are used (#94).
    • Edge type select displays its full label (e.g. "IoT / Zigbee") instead of the raw value.
    • Status dot overlapping IP address in node cards.
    • Canvas style modal layout on smaller screens.
    • MCP session manager routing.
  19. 1.11.0

    Added
    • Docker Host node type with container mode support (visual group for containers).
    • Docker Container node type, nestable inside a Docker Host.
    • Container mode now works for docker_host, vm and lxc (was Proxmox-only).
    Changed
    • Service badges prioritise the service name; path truncates gracefully with a hover tooltip.
    • Node resizer handle hit area enlarged (8px → 16px).
    Fixed
    • Container mode not persisting after save/reload for non-Proxmox types.
    • Container mode toggle having no visual effect on docker_host nodes.
    • Status dot overlapping node content; consistent top-right placement.
    • Missing icon/label gap in ProxmoxGroupNode container header.
    • IP shown unmasked in ProxmoxGroupNode when hide-IP is enabled.
  20. 1.10.2

    Added
    • Logout button at the bottom of the sidebar (normal mode only).
    Fixed
    • Pending Devices checkbox click no longer opens the approval modal.
    • NaN sent to the API when the status-check interval input is cleared.
    • Potential open-redirect in the update badge (release URL scheme now validated).
  21. 1.10.1

    Added
    • PNG export quality selector: Standard (1×), High (2×, default), Ultra (4×) (#89).
    • Zone colour opacity sliders for text/border/background (#72).
    • Optional service paths (e.g. /admin) appended to the clickable URL; port optional when a path is set (thanks @findthelorax) (#86).
    Fixed
    • Bulk-approved nodes appear on canvas immediately (node IDs were null before DB flush).
    • Proxmox container mode: visible properties now shown; custom icon now applied.
    • approve_device returns 404 on missing device, 409 on double-approve (was 200).
    • Node form no longer retains previous-session values when reopened in Add mode (#87).
  22. 1.10.0

    Added
    • Bulk approve/hide pending devices (#70).
    • IPv6 support & multiple comma-separated IPs per node (#60).
    • Clickable IP addresses in the detail panel (#78).
    • Connection handles on zone/group rect nodes (#58).
    • Automatic DB backup before schema migrations.
    • Drag group from its title (#76); double-click a node to open its edit modal (#65).
    Fixed
    • Node width no longer expands when long content overflows after a user resize.
    • Proxmox nodes with container_mode=false restore their saved width on reload.
    • Added curl to the backend image for the default healthcheck.
  23. 1.9.0

    Added
    • Node properties system: dynamic key/value/icon/visible properties replacing static hardware fields; visible ones shown on the node card; 20 Lucide icons; existing hardware data auto-migrated.
    • Edge waypoints: click + to add, drag to move, double-click to remove; Bezier and Smooth step supported; persisted to backend.
    • Basic edge animation mode (native moving-dash), alongside Snake and Flow.
    • App version shown in sidebar with a GitHub release update check.
    Fixed
    • Node height no longer overflows when properties are added to a resized node.
    • Dot grid alignment with the snap grid.
    • Node selection layout shift.
  24. 1.8.3

    Added
    • Finer canvas grid: snap reduced from 16px to 8px.
    Changed
    • Updated frontend npm dependencies; upgraded lucide-react; removed unused Proxmox/LXC install scripts.
  25. 1.8.2

    Fixed
    • Scan no longer starts before confirmation — "Scan Network" opens the config modal first.
    • Windows ping compatibility (-n 1 -w 1000 instead of Linux/macOS flags).
  26. 1.8.1

    Added
    • Search now includes pending devices in both the canvas search bar (Ctrl+F) and command palette (Ctrl+K).
    Fixed
    • Timestamps (scan history, discovery time, Last Seen) now show local time instead of UTC.
  27. 1.8.0

    Added
    • Configurable 1–4 bottom connection points per node.
    • Fit view on load.
    • Inline Type and Icon pickers in the node modal.
    Changed
    • Scanner rewrite: Phase 1 concurrent asyncio ping sweep (50 parallel pings) supplemented by /proc/net/arp; Phase 2 explicit -sS/-sT scan type with 60s host-timeout; resilient gather so one failing host no longer aborts the batch.
    Fixed
    • Root logger StreamHandler so app.* logs are visible in Docker.
    • CIDR validation on frontend and backend to prevent nmap argument injection.
    • Pre-fetch canvas/hidden IPs before the scan loop (no N+1 queries); ARP table read off the event loop.
    • Hide/ignore on a missing device returns 404 instead of 500.
  28. 1.7.1

    Added
    • Concurrent status checks via asyncio.gather, ending "maximum instances reached" spam.
    • Improved IoT detection: two-phase nmap scan finds Shelly, Sonoff, Tapo devices with no open TCP ports.
    • mDNS/Bonjour discovery (_shelly._tcp, _esphomelib._tcp, _hap._tcp, _mqtt._tcp, …) in parallel with nmap.
    • 20+ IoT vendor MAC OUIs and CoAP ports added; IoT ranked above generic server.
    Fixed
    • LXC/VM container mode: attaching to a Proxmox no longer creates a spurious edge; nesting is instant.
    • Scheduler reliability: DetachedInstanceError, duplicate timestamps, shutdown handling, interval validation.
    Dependencies
    • Added zeroconf==0.131.0 for mDNS discovery.
  29. 1.7.0

    Added
    • Lasso / box selection — draw a rectangle to select multiple nodes; hold Space to pan; lasso/pan toggle in the controls.
    • Named groups — group 2+ nodes into a resizable, renamable container with hide-border option and per-member navigation; persisted across save/reload.
    • Canvas search (Ctrl+F) — filter nodes by label, IP, hostname, service; live match count; click to fly the camera.
    Fixed
    • LXC install script: apt-get update runs verbosely with --fix-missing to handle stale Debian mirrors (fixes #36).
    • Group parent/child relationships restore after save + reload.
    • Removed React Flow's default grey background from container node types.
  30. 1.6.0

    Added
    • Scan deduplication — pending devices already on canvas or hidden are skipped on rescan; stale entries purged at scan start.
    • Dedicated Settings panel (status-check interval moved out of the Scan Config modal).
    • Live interval update without a server restart.
    • Separate /api/v1/settings endpoint for the check interval.
    Fixed
    • DEL key deletes selected nodes (previously Backspace only).
    • Node deletion via shortcut/detail panel is undoable with Ctrl+Z.
    • APScheduler guards against double-start and unguarded reschedule calls.
  31. 1.5.0

    Added
    • Inline service editing in the detail panel (pencil icon).
    • Edge animation modes: None, Snake, Flow — fully persisted.
    • Zone improvements: rename Rectangle → Zone, border-width selector, label position, text-size options.
    Fixed
    • Edge animation not saved on new connections.
    • Backend 422 when saving canvas with string animation values.
    • Snake and Flow animations rendering identically in production.
    • Login returned 500 instead of 401 when a bcrypt hash had $ stripped by the shell (#21).
    • Hardcoded CORS in docker-compose; clearer login error messages.
  32. 1.4.0

    Added
    • Live View — share a read-only view of the canvas on your network, no login required.
    • Resizable nodes with persisted width/height.
    Fixed
    • QEMU arm64 crash during Docker image build (npm ci illegal instruction on ARM64).
    • nginx reload-or-start fallback broken on fresh LXC installs.
    CI
    • ShellCheck + hadolint linting; Docker smoke tests and full-stack integration tests.
  33. 1.3.3

    Fixed
    • Scan failures on fresh Docker installs — service_signatures.json moved into the app package so the volume mount no longer overwrites it.
    • Missing ping on Docker (iputils-ping added).
    • Thread-safe signature-file loading; clear error if the file is missing.
    • CORS restricted to the HTTP methods/headers the frontend uses.
  34. 1.3.2

    Fixed
    • Ping check method on fresh Docker installs — iputils-ping added to the backend image (python:3.13-slim ships without ping).
  35. 1.3.1

    Added
    • YAML import/export of the full canvas topology (nodes, edges, hardware specs, connections); import merges without overwriting; Dagre auto-layout on import; toolbar Import/Export buttons.
    Fixed
    • ESLint 10 incompatibility from npm audit fix — pinned back to ESLint 9.x.
    Docs
    • Split installation into INSTALLATION.md; documented the network scanner and dev mode.
  36. 1.3.0

    Added
    • Hardware specs per node (CPU model, cores, RAM, Disk) with "Show on node" and GB → TB formatting.
    • Docker Host node type (Anchor icon), themed across all 5 themes.
    • Group rectangle border style: Solid, Dashed, Dotted, Double, None.
    • Categorized node-type selector (Hardware / Virtualization / IoT / Generic).
  37. 1.2.2

    Added
    • scripts/update.sh for fast in-place LXC updates (never touches .env or DB).
    Fixed
    • crypto.randomUUID crash on HTTP/LXC installs — polyfill fallback.
    • WebSocket failure on LXC (hardcoded port 8000 bypassing Nginx); added /api/v1/status/ws/ upgrade block.
    • Production build crash on LXC (test files in tsconfig.app.json).
    Security
    • JWT no longer exposed in the WebSocket URL — sent as the first message after connect.
  38. 1.2.1

    Added
    • MCP server with HTTP/SSE transport for AI integration (Claude Code compatible); parent_id exposed in update_node; service-key auth for MCP → backend.
    Fixed
    • "Add node" appeared broken with an empty Label — native validation doesn't render in Radix Dialog portals; now shows an inline error.
    • SSE streaming crash; reduced get_canvas token usage.
  39. 1.2.0

    Added
    • Edge flow animation (per-edge toggle); Proxmox cluster edges animate bidirectionally.
    • Keyboard shortcuts: Undo/Redo, Ctrl+K search, copy/paste, Ctrl+S save, ? reference.
    • Canvas history (50-entry undo/redo stack) with toolbar buttons.
    • Node search spotlight (Ctrl+K) with fuzzy match and fly-to.
    • Copy/paste nodes (Ctrl+C / Ctrl+V) with 50px offset and fresh IDs.
    • Markdown table export of the node inventory.
    • Clickable hostname in the detail panel.
    • Shortcuts reference modal.
  40. 1.1.1

    Added
    • New logo and favicon; page title updated to Homelable.
    • Hide IPs toggle in the sidebar — masks the last two octets.
    Fixed
    • Auto-layout: peer nodes placed on the same row (no staircase); correct left-to-right ordering; child nodes always below their parent.
  41. 1.1.0

    Added
    • Group rectangles — decorative resizable zones with configurable label/font/position/colours and z-order; saved with the canvas.
    • Add/remove services manually in the detail panel.
    • All TCP services now clickable (HTTPS auto-detected for 443/8443; non-web ports excluded).
  42. 1.0.0

    First stable public release of Homelable, a self-hosted homelab visualization tool.

    Added
    • Canvas: interactive React Flow diagram; 11 node types; 5 edge types; Proxmox nested nodes; Dagre auto-layout; zoom/pan; snap-to-grid; PNG export.
    • Network discovery: nmap scanner over CIDR ranges; pending-device queue (approve/hide/ignore); service fingerprinting; MAC OUI detection for QEMU/Proxmox/VMware.
    • Status monitoring: per-node ping/http/https/tcp/ssh/prometheus/health checks; live WebSocket updates; scheduled background checks.
    • Auth & persistence: single-user JWT auth (bcrypt in .env); SQLite canvas state with an explicit Save button.
    • Standalone mode: backend-free diagram editor with localStorage persistence.
    • Install options: Docker Compose, Proxmox LXC, manual Debian/Ubuntu script.