1.12.1 (2026-09-06)

Bug Fixes

• preserve manual OTA action time in firmware events (b5a76a7)

1.6.0 (2026-09-05)

Features

• add tenant-scoped passport reference lookup (bd6c5ce)

Bug Fixes

• performance: expose a versioned global probe route (19577bf)
• release: publish notes and report build version (e470361)

Changes

Release notes not available.

Features

• add authenticated performance probe (4218d46)

Bug Fixes

• performance: expose an authenticated global probe route (538a4ed)
• ci: restore staged image promotion (3607644)
• ci: target kubernetes runners (4fa286c)
• events: ingest OCPP command result identifiers (5a71d4a)
• reconcile station certificate activation (576ce6c)
• serve CRLs with matching encodings (1e6db84)

Features

• add certificate authentication service (f8fa945)
• pki: automate station profile migration (552108d)
• add authenticated performance probe (99b3311)

Bug Fixes

• auth: resolve tenants from absolute ingress URL paths (000ed79)

Features

• auth: support service global API paths (f92b693)

Features

• authz: add service management permissions (56d3ddf)
• authz: add certificate permissions (f444511)

1.7.1 (2026-09-01)

Bug Fixes

• ingest: recover missing connector from registry (3692ce0)

Learning API – 1.0.0 (2026-08-28)

Release notes not available.

1.24.0 (2026-08-28)

Features

• support learning programme orders (5dd68df)

1.13.0 (2026-08-28)

Features

• notify installers about learning activity (4e3ff09)

Features

• publish installer programme events (18aebaa)
• publish canonical chargepoint readiness events (158d551)
• emit readiness on session identity changes (cb5cc27)
• expose session indicator model support (b27d829)

Bug Fixes

• use device tenant for diagnostic trace history (a811587)

1.6.0 (2026-08-28)

Features

• meter AmpNexus Learn usage (8c7af84)

1.25.0 (2026-08-28)

Features

• add installer learning verification (578b5a1)

Features

• allow roadmap idea text editing (892b70d)
• roadmap: seed visible vote counts (0d1ad62)
• add customer roadmap API (5258435)

1.9.0 (2026-08-27)

Features

• add customer vehicle self-service scopes (b00632a)

Features

• add provider-neutral vehicle profiles (1c1dd3b)
• add tenant-scoped Tesla vehicle service (34930a0)
• add database migration command (f4d32eb)

Bug Fixes

• ci: configure vehicle api semantic releases (68785c3)
• keep telemetry removal off command proxy (0d76184)

1.17.0 (2026-08-26)

Features

• add PlugStream session indicator model capability (6fd7be9)

Features

• gate session indicator by device model (d944133)
• add PlugStream session indicator backend (8795b47)
• add two-sided vehicle Sense planning (6a8d2b5)

Bug Fixes

• ocpp: execute the offline journal CREATE TABLE instead of only preparing it (38254ab)
• security: stop logging the presigned firmware URL in full (f8f1439)
• sensor: bound journal recovery so a broken database cannot burn the CPU (5aec47d)
• sensor: detect a slow journal, not just a broken one, and say so remotely (2318d52)
• sensor: keep the journal file small - littlefs charges every commit for it (02fef3b)
• ocpp: make the boot-recovery SQL executable on the device it ships to (1a99b6a)

Features

• ble: enable BLE 5 (2M PHY) and link encryption, keep BLE always on (c8ddf29)
• ble: report commissioning stage over BLE with GET_DIAGNOSTICS (28625dd)
• diagnostics: name the top CPU tasks in platform telemetry (73ed684)
• ocpp: close interrupted transactions at boot (offline journal phase 2) (b18eea0)

Bug Fixes

• diagnostics: stop the stack watchdog crying wolf over IDLE0 (867b3df)
• ble: recover stalled physical connections (def865f)
• ble: terminate connections across stop/start - zombie made charger unconnectable (a0e818e)
• ble: make commissioning robust during the post-boot radio burst (b5d778d)
• ble: Apple-recommended steady-state advertising interval (e5eed60)
• ble: defer NimBLE host recovery off the cp_runtime watchdog loop (7b4e196)
• monitor: recalibrate MemoryExhaustion criteria to genuine danger levels (fa40039)
• ble: re-register GATT services on every NimBLE host restart (66917e9)
• ble: stop the zombie-connection probe flooding the console (70d9832)
• coredump: read the stored image instead of mmapping it (8d21a48)
• phy: report silicon revision with the RF calibration posture (2dbf725)
• ble: remove the scan-response diagnostic payload (945f02b)
• wifi: start radio for diagnostic scans (3c83873)
• certificate: move the X509 layer off wolfSSL onto mbedTLS (f1545bf)
• certificate: repair private key generation - RSA never worked (0c36e72)
• ci: build host mbedTLS from the upstream release, not ESP-IDF's copy (97c0dca)
• ci: support the CI image's CMake 3.22 and lcov 1.14 (1df90d9)
• ota: report an intermediate status before the preflight reboot (e6e7095)
• ota: size the download task stack from its measured peak (089dc25)

Features

• led: night-dim schedule and custom standby colour (f6ab28a)
• led: standby light styles - Classic, Glow, Aurora, Sparkle, Stealth (d6da977)
• sensor: runtime calibration mode via SensorConfidenceCtrlr.CalibrationMode (6b8e657)
• sensor: warm-up gate for sensor journal backlog drain (e1b1d67)
• telemetry: system-health block in ReadinessState.v1 for portal graphs (2b9cc24)
• telemetry: network-interface picture in ReadinessState.v1 (76e64d9)
• thermal: stuck-sensor detection - fail-safe derate for frozen NTC (1b35447)
• ble: add scan-response payload as a receive-path probe (2e9f60b)
• build: support ESP-IDF 6.0.2 alongside 5.5 (2feb7ae)
• diagnostics: report internal heap fragmentation once per boot (0077dd6)

Bug Fixes

• mode-sync: accept newer audited policy version (c1e20bc)
• telemetry: box platform event payloads (5d01e43)
• auth: allow installers to request BLE grants (c718d37)
• auth: allow consumer BLE grants (d39c8a8)

Features

• telemetry: persist device health readings (311989a)
• telemetry: ingest device health frames (51a472d)

1.8.4 (2026-08-18)

Bug Fixes

• throttle sentinel security notifications (092031f)

1.16.0 (2026-08-18)

Features

• catalog: add sensor calibration control (49179d3)

Bug Fixes

• build: drop esp_websocket_client override_path - the lock is now portable (d2944da)
• hal: correct thermistor B value for fitted TDK NTC (4067 -> 3435) (67fe940)
• ocpp: correct malformed AuthCtrlr variable name (d4887ae)
• ocpp: harden device model transaction policies (dfe8fd8)
• ocpp: report the real WebSocketPingInterval (10s, IDF default) (cc5bcd0)
• sensor-confidence: close authority bypass and move journal writes off sys_evt (8220b5f)
• database: serialize all SQLite entry through one process-wide gate (a1555ad)
• sensor-confidence: defer journal startup from OCPP receive path (9150b5f)
• sensor-confidence: size reporter stack for journal begin (6144 -> 8192) (c729d16)
• nvs: log absent keys at debug with the key name, not as errors (55233bb)
• sensor-confidence: self-heal a corrupted journal database (b7e7e8a)
• monitor: stop counting OTA download size as network TX (5687098)
• sensor-confidence: delete SQLite sidecar files when recreating the journal (fa74bd4)
• sensor-confidence: probe sqlite_master instead of the compiled-out quick_check (f2c5082)
• crash: poison-pill the boot-time core dump parse (e9bbc6b)
• database: shared SQLite poison-pill guard for every boot-path open (5ce4727)
• database: temp_store=MEMORY on every connection - the esp32 VFS rejects temp files (be522fe)
• sensor-confidence: never probe an empty database - THAT was the crash all along (19d071b)
• sensor-confidence: poison-pill sentinel - never let SQLite reopen a file that crashed it (b0e5e43)
• sensor-confidence: rowid-only ordering - sorter temp files cannot exist on this VFS (b0a733a)
• sqlite-vfs: back anonymous temp files with the in-RAM file implementation (19ebc7c)
• sensor-confidence: delete the sqlite_master probe - the probe WAS the crash (1a29a5f)
• sensor-confidence: open the journal on the main task's stack, like every database that works (98556f1)
• sqlite: put the rollback journal on flash and make xTruncate real (c696cad)
• sqlite: restore real fsync and use the proven sqlite_master probe (10c3c17)
• system-monitor: label network stats as the app-layer WS counters they are (3df522d)
• logging: 64-deep PSRAM log queue; security lines never silently dropped (24a1b86)
• ota: let the preflight-reboot resume survive the factory stale-state guard (dc80072)

Features

• firmware: add sensor confidence control authority (0521653)
• ocpp: complete the 2.0.1 device model (missing components + variables) (331173e)
• ocpp: deauthorise on invalid idToken; TxCtrlr StopTxOnInvalidId/MaxEnergyOnInvalidId (dec5175)
• ocpp: honour TxCtrlr.EVConnectionTimeOut (writable, PSRAM-safe) [TxCtrlr 1/n] (f9951dc)
• ocpp: make OCPPCommCtrlr timing set CSMS-writable and honoured (f6e9ecc)
• ocpp: TxStartPoint/TxStopPoint ReadWrite with validated accept-supported [TxCtrlr 2/n] (c06ee7d)
• sensor-confidence: OCPP-controlled publication via SensorConfidenceCtrlr.Enabled (af1019b)
• ocpp: support vendor-scoped variables (327c8c1)
• ocpp: runtime control for readiness telemetry via ReadinessCtrlr.Enabled (d312e36)
• ble: demand policy - BLE only when it can actually be needed (1e611c8)
• sensor-confidence: baseline health tier - idle plausibility lifts Unknown to Ok (5c52ba4)
• sensor-confidence: severity-gated telemetry with CSMS-tunable summary cadence (cb44ae1)
• sensor-confidence: single-constant desk-calibration switch (936b660)
• ozev: BLE provisioning auth enforced by default (bfa4d41)
• ozev: persistent UTC security log - persist at raise, log access attempts (9b70024)
• ozev: randomised delay remotely increasable to 1,800 seconds (0ce613e)
• ozev: adoption code becomes the local credential; PLUGSTREAM fallback dies (b0e5312)
• ozev: signed OTA images - firmware authenticity without eFuses (4957bd8)
• storage: quiesce SQLite on every intentional restart (ab5add6)

Performance Improvements

• ram: sensor confidence diet + reconnect-path stack sizing (e5620bd)

Features

• allow owners to access device claim codes (6af90ef)
• sensor-confidence: persist and expose telemetry (f08c4ff)
• device-model: persist and reconcile controls (71ca438)

Bug Fixes

• device-model: fence stale control status updates (4414aae)