Features

• hardware-telemetry: carry the payload opaquely so readings stay firmware-only (eeaaf85)
• readiness: carry the die temperature, thermistor mV and current pair (02397ae)

1.9.0 (2026-09-09)

Features

• sync: fetch a month of rate history so past half-hourly sessions can be priced (4964d9c)

Bug Fixes

• cost-analysis: price Octopus tariffs, keep rate history, report unpriced energy (06f7e7b)
• reporting: derive transaction energy from the row's meter delta, and repair stored values (09c80c1)
• transactions: a session ends at its unplug, never after the next session starts (f6cf590)
• cost-analysis: read a session's meter window to the first sample after its end (684b44c)
• summary: return total session minutes and open sessions (b087dfe)
• statistics: energy-weighted bucket power; success rate over settled sessions only (0a8a62c)

Features

• service: deliver frozen CC reply envelopes safely (13111c5)
• service: expire private email copies after 30 days (d4ac554)
• service: integrate authorized public reply delivery (9379556)
• service: persist email intake with audited recovery (5b98490)
• service-email: reconcile uncertain provider outcomes without resend (607a5f5)
• service-email: authorize explicit agent-reviewed replies (3529f48)

Features

• internal: resolve active email subjects within one tenant (7ecd74a)
• identity: add active tenant-scoped subject lookup (9b3f473)

Bug Fixes

• ci: consume host schema coverage without Python in Rust image (fc7bac1)
• ci: initialize only declared firmware target submodules (ee0a76a)
• ocpp: enforce schema coverage for every implemented message (2f9a872)
• ocpp: exclude invalid TLS profiles from reconnect retries (7d2c7e9)
• ocpp: preserve transaction delivery and negotiated payloads (10b1809)
• ocpp: protect credentials and refresh secure reconnects (3d87225)
• ocpp: reconcile password recovery with current firmware (08b9253)
• ocpp: retry registration and report truthful command outcomes (3e96b11)
• ocpp: scope dynamic schedules and send unconfirmed event streams (67ff50b)
• reconnect after accepted OCPP password changes (da2a903)
• ocpp: certificate inventory and install speak OCPP 2.0.1, not just 1.6 (e5ff33f)
• ocpp: pre-deployment sweep of the certificate paths - four more 2.0.1 gaps (f2ca242)
• security: remove the dead CpCertificates class and its hardcoded passphrase (40fe0b4)
• firmware: OTA download trust must survive a CSMS root install (b5c3144)
• network: a 4-way handshake timeout is not proof of a wrong password (841d9c8)
• network: accept full-size (16KB) TLS records - restore spec-compliant RX buffer (52f2077)
• network: stop dialing the CSMS with no uplink IP; give sys_evt headroom (bdbca4f)
• security: one verified root bundle for every TLS client; BLE stays down during OTA (11f50f7)
• system: sys_evt stack 6144 -> 8192 - observed peak now 4376 bytes (b50a76e)
• network: dial the preferred-profile retry from an internal-stacked task (426ada4)
• network: widen the WS RX frame pool 3 -> 6 slots (b4514a6)
• ocpp: bound per-message response maps with FIFO eviction (90576ed)
• ocpp: bound the remaining v201 per-message state maps (b26f5f7)
• security: GetLog uploads trust the verified root bundle, not the counterfeit (8ffda32)
• ocpp: SignCertificate CALL went out with an empty action - map + guard + test (64bbce5)
• ocpp: keep the PSRAM-stacked monitor task out of NVS - first profile-3 connection boot-looped the unit (c05e711)
• tasks: close the "PSRAM stack touches flash" class - static audit, runtime attribution, two more paths fixed (489b1ff)
• websocket: run certificate CALLs on the flash worker, not ws_rx; give ws_rx its full 9K (2d70605)
• config: stop sdkconfig.defaults contradicting the build (a4476ea)
• ocpp: default MessageTimeout to 30 s, not 5 (11f1a4a)
• ocpp: report the real meter cadence, and let the CSMS set it (962d0dd)
• websocket: stop the TX path compounding its own pressure (3c67bbf)
• journal: rebuild an oversized idle offline journal, as the sensor journal does (293426b)
• journal: trim superseded acked rows at ack time, bounding an open session's file (65094a2)
• ocpp21: actually wire the tariff store Authorize needs, and gate the class (461b255)
• ocpp21: NotifyPeriodicEventStream was never actually sent (7cd1035)
• ocpp: ChangeAvailability never worked - wrong fields, and it cut drivers off (2d22541)
• ocpp: ChangeAvailability read the wrong field names and rejected everything (2e784c0)
• ocpp: honour the Reset type and evseId instead of discarding them (eaa7099)
• ocpp: negotiate the OCPP subprotocol instead of assuming it (39f2466)
• ocpp: preserve native status snapshots and binary authorization (153e7bd)
• ocpp: refresh live status after native transaction replay (fee8b93)
• ocpp: retain log request context and gate journal readiness (93c6e88)
• ocpp: stop emitting and reading keys the schemas do not define (2a6b55d)
• preserve transaction event lifecycle and retry connector status (c1589e3)
• websocket: send Basic authentication in the initial handshake (63ea921)

Features

• ocpp: make security profile 3 (mutual TLS) actually usable - cert-auth foundations (35f883b)
• ocpp: move CSR generation to a dedicated PSRAM worker task (7f11ede)
• ocpp: SessionIndicator.v1 - trusted session-completion progress on the LEDs (3b01bf6)
• bluetooth: move BLE stack start/stop onto a dedicated worker task (4a707e7)
• ocpp: retry the preferred certificate profile (2090dc4)
• security: database becomes the single source of TLS trust (55198de)
• security: seed only the Let's Encrypt roots (a6a23c5)
• security: bundle the announced ISRG successor roots (YE/YR) (6fc95e1)
• security: client-certificate renewal supervisor (cert-auth Phase 2) (8330efa)
• security: EC P-256 client keys - the backend mandates it (closes G7) (465b6ad)
• ocpp: report stored network profile slots via the device model (9913579)
• ble: release the BLE controller memory when the CSMS disables Bluetooth - RebootRequired + idle reboot (92f48b5)
• charging: CSMS-settable maximum charge current, and stop the pilot rounding up (d425147)
• charging: name the binding ceiling in limitSource (3b5a164)
• charging: report site load management separately from the power mode (2eedc81)
• ocpp21: advertise the two 2.1 capabilities this station actually has (07a2021)
• ocpp21: enforce the transaction limits this station can measure (5137608)
• ocpp21: honour a charging profile's offline validity, and stamp dynUpdateTime (954928e)
• ocpp21: honour ChargingScheduleType.useLocalTime, which costs nothing here (9643989)
• ocpp21: honour SetVariableMonitoring.periodicEventStream (2f8ea9a)
• ocpp21: honour the two fields AuthorizeResponse gained in 2.1 (a602bb2)
• ocpp21: indicate web payment on the LEDs, and fix two message directions (df21355)
• ocpp21: match a signed certificate to the CSR that asked for it (1dd6a9d)
• ocpp21: name the signing root on SignCertificate, derived rather than guessed (158a473)
• ocpp21: per-slot basic-auth credentials on SetNetworkProfile (7bf5205)
• ocpp21: pull dynamic schedule updates instead of only receiving them (b1fb5d1)
• ocpp21: report costDetails, and timeSpentCharging which was never filled in (ac66c99)
• ocpp21: report eventNotificationType and maxElements (989afc7)
• ocpp21: report the cost breakdown as chargingPeriods (5ba81cc)
• ocpp21: stagger schedule period starts with randomizedDelay (7796ebf)
• ocpp: implement GetCertificateChainStatus over CRL (a63f3e5)
• ocpp: implement GetReport, and stop discarding CostUpdated (8960e8e)
• ocpp: implement OCPP 2.1 dynamic schedules (6d1bb08)
• ocpp: implement OCPP 2.1 periodic event streams (48b4b1a)
• ocpp: implement OCPP 2.1 tariffs (5a4dd70)
• ocpp: speak OCPP 2.1 alongside 2.0.1 (d2b764c)
• ocpp: add native 1.6J adapter and durable transaction delivery (5dbab96)

Performance Improvements

• ram: turn the Wi-Fi IRAM speed optimisations off - ~32 KB of internal RAM back (44a1d61)
• db: route SQLite's allocator to PSRAM (f8cef97)

Bug Fixes

• ci: compile all OCPP core variants on feature branches (5efe050)
• ocpp: ingest OCPP 2.1 event streams without CALL responses (4374a15)
• ocppcore: let forced full audits claim for stations parked in manual_attention (69b21c0)
• ocpp: support one manual portal OTA from Pending recovery (f1dfc00)
• ocpp: unblock native authentication and security builds (cd355e4)
• admit credential-free connections into Pending review (a8ed5c4)
• ocpp: avoid dead-lettering malformed v16 data transfers (6281547)

Features

• add manual OCPP Pending credential recovery (a0bdec9)
• ci: version OCPP components independently (c5d3c55)
• ocpp: preserve telemetry and security operations for native 1.6J (377e607)

Bug Fixes

• ci: compile all OCPP core variants on feature branches (5efe050)
• ocpp: ingest OCPP 2.1 event streams without CALL responses (4374a15)
• ocppcore: let forced full audits claim for stations parked in manual_attention (69b21c0)
• ocpp: support one manual portal OTA from Pending recovery (f1dfc00)
• ocpp: unblock native authentication and security builds (cd355e4)
• admit credential-free connections into Pending review (a8ed5c4)

Features

• add manual OCPP Pending credential recovery (a0bdec9)
• ci: version OCPP components independently (c5d3c55)
• ocpp: preserve telemetry and security operations for native 1.6J (377e607)

Bug Fixes

• ci: compile all OCPP core variants on feature branches (5efe050)
• ocpp: ingest OCPP 2.1 event streams without CALL responses (4374a15)
• gateway: prefer ocpp2.1 when a station offers more than one version (1492493)
• ocpp: route Pending OTA through the shared platform queue (8f4e8fa)
• ocpp: support one manual portal OTA from Pending recovery (f1dfc00)
• ocpp: unblock native authentication and security builds (cd355e4)
• admit credential-free connections into Pending review (a8ed5c4)
• recognize trusted ingress TLS for Pending recovery (0a62518)
• correct firmware update payloads and surface charger rejections (2c6b27d)

Features

• add manual OCPP Pending credential recovery (a0bdec9)
• ci: version OCPP components independently (c5d3c55)
• ocpp: preserve telemetry and security operations for native 1.6J (377e607)

Bug Fixes

• ci: compile all OCPP core variants on feature branches (5efe050)
• ocpp: ingest OCPP 2.1 event streams without CALL responses (4374a15)
• ocppcore: let forced full audits claim for stations parked in manual_attention (69b21c0)
• ocpp: route Pending OTA through the shared platform queue (8f4e8fa)
• ocpp: support one manual portal OTA from Pending recovery (f1dfc00)
• ocpp: unblock native authentication and security builds (cd355e4)
• admit credential-free connections into Pending review (a8ed5c4)
• correct firmware update payloads and surface charger rejections (2c6b27d)

Features

• add manual OCPP Pending credential recovery (a0bdec9)
• ci: version OCPP components independently (c5d3c55)
• ocpp: preserve telemetry and security operations for native 1.6J (377e607)

Bug Fixes

• ci: compile all OCPP core variants on feature branches (5efe050)
• initialize recovery metadata in orchestrator commands (2f13eb8)
• ocpp: ingest OCPP 2.1 event streams without CALL responses (4374a15)
• ocpp: support one manual portal OTA from Pending recovery (f1dfc00)
• admit credential-free connections into Pending review (a8ed5c4)

Features

• add manual OCPP Pending credential recovery (a0bdec9)
• ci: version OCPP components independently (c5d3c55)
• ocpp: preserve telemetry and security operations for native 1.6J (377e607)

2.15.0 (2026-09-06)

Features

• ocpp: accept native 1.6J security commands (0083e8b)
• route manual Pending recovery commands (c055871)

Features

• email: add signed Resend receipt quarantine (75120ee)
• add core service persistence foundation (7130dca)
• bootstrap service API repository (6bc5bbe)
• auth: add signed tenant authorization foundation (0d17fc0)
• work-items: add CRUD and workflow APIs (ebbe10a)
• messages: add tenant-safe work-item timeline (e73a266)
• queues: add tenant-safe assignment and collaboration (68106fb)
• attachments: add tenant-safe quarantined upload pipeline (bc8e72a)
• events: add confirmed outbox and transactional inbox delivery (0916349)
• links: add validated relationships and references (0f24fc5)
• search: add tenant-safe filters and SQL summaries (34b7f0e)
• notifications: define tenant-safe customer audience policy (bf36491)

Bug Fixes

• ci: defer image automation until gitops delivery (eff9084)
• ci: use mirrored database test image (d1c5515)
• health: report readiness after database recovery (04a06dd)
• events: accept existing external reference relation metadata (f29d8c3)

Bug Fixes

• status: preserve pending registration until an accepted boot (9f8cedf)
• judge firmware readiness freshness on receive time, not device timestamp (353beb0)
• ocpp: expose Pending recovery presence for manual OTA (eedc6c5)

Features

• persist charge point certificate inventory (5554a70)
• enrich certificate inventory with well-known factory roots (63786c2)
• device network profile management (slots, priority, verdicts) (4e5f2ee)
• approved network endpoint allowlist for profile pushes (2b3a402)
• populate network profiles from the device (GetVariables sync) (6b107d6)

Bug Fixes

• ci: use internal Rust mirror for notification image builds (8965771)

Features

• service: add inactive durable email delivery foundation (4ec2fd2)
• link firmware update notifications to release notes (f5348a6)

Bug Fixes

• preserve device credentials during Pending review (9563435)

Features

• add Bluetooth device model control (b80a2d7)
• add OCPP message timeout and attempts device model controls (11f0a1b)
• add maximum charge current device model control (33c18a7)
• add the meter reporting interval device model control (b1b6573)

1.12.1 (2026-09-06)

Bug Fixes

• preserve manual OTA action time in firmware events (b5a76a7)

1.6.0 (2026-09-05)

Features

• add tenant-scoped passport reference lookup (bd6c5ce)

Bug Fixes

• performance: expose a versioned global probe route (19577bf)
• release: publish notes and report build version (e470361)

Changes

Release notes not available.

Features

• add authenticated performance probe (4218d46)

Bug Fixes

• performance: expose an authenticated global probe route (538a4ed)
• ci: restore staged image promotion (3607644)
• ci: target kubernetes runners (4fa286c)
• events: ingest OCPP command result identifiers (5a71d4a)
• reconcile station certificate activation (576ce6c)
• serve CRLs with matching encodings (1e6db84)

Features

• add certificate authentication service (f8fa945)
• pki: automate station profile migration (552108d)
• add authenticated performance probe (99b3311)

Bug Fixes

• auth: resolve tenants from absolute ingress URL paths (000ed79)

Features

• auth: support service global API paths (f92b693)

Features

• authz: add service management permissions (56d3ddf)
• authz: add certificate permissions (f444511)

1.7.1 (2026-09-01)

Bug Fixes

• ingest: recover missing connector from registry (3692ce0)

Learning API – 1.0.0 (2026-08-28)

Release notes not available.

1.24.0 (2026-08-28)

Features

• support learning programme orders (5dd68df)