[PR #1045] [MERGED] v0.2.3.1 #1151

New issue

Closed

opened 2026-05-06 12:35:22 +02:00 by BreizhHardware · 0 comments

BreizhHardware commented

2026-05-06 12:35:22 +02:00

Owner

📋 Pull Request Information

Original PR: https://github.com/maziggy/bambuddy/pull/1045
Author: @maziggy
Created: 4/20/2026
Status: ✅ Merged
Merged: 4/20/2026
Merged by: @maziggy

Base: main ← Head: 0.2.3.1

📝 Commits (10+)

d17c87c Bumped version
b655b12 chore(docker): switch runtime image to Debian Trixie
5e5e8a5 feat(file-manager): collapse folders by default toggle (#996)
578aa75 chore(security): suppress three Debian-postponed CVEs in Trivy scans
2bf397e fix(queue): update LibraryFile.print_count and last_printed_at on completion (#1008)
c7ad449 fix(firmware): parse P2S/X2D wiki anchors without dash and full-width parens (#1030)
32c0b16 fix(frontend): thumbnails blank until reload after sign-in
936b748 fix(archive): truncation of large 3MF uploads on sendfile short-return (#1032)
74527d4 fix(smart-plug): restore MQTT subscriptions for per-type topic configs on startup (#1010)
b046c2c Enhance plate-clear tracking and visibility in printer cards (#939)

📊 Changes

40 files changed (+1948 additions, -606 deletions)

View changed files

📝 CHANGELOG.md (+20 -0)
📝 Dockerfile (+1 -1)
📝 backend/app/api/routes/smart_plugs.py (+7 -46)
📝 backend/app/core/config.py (+1 -1)
📝 backend/app/main.py (+29 -11)
📝 backend/app/services/archive.py (+71 -4)
📝 backend/app/services/bambu_ftp.py (+47 -24)
📝 backend/app/services/bambu_mqtt.py (+8 -1)
📝 backend/app/services/firmware_check.py (+15 -6)
📝 backend/app/services/mqtt_smart_plug.py (+35 -0)
📝 backend/app/services/obico_detection.py (+4 -0)
📝 backend/tests/integration/test_print_queue_api.py (+140 -0)
➕ backend/tests/unit/services/test_archive_copy.py (+133 -0)
📝 backend/tests/unit/services/test_bambu_ftp.py (+56 -0)
📝 backend/tests/unit/services/test_bambu_mqtt.py (+17 -5)
➕ backend/tests/unit/services/test_mqtt_smart_plug_subscribe.py (+145 -0)
📝 backend/tests/unit/test_firmware_versions.py (+47 -0)
📝 backend/tests/unit/test_obico_detection.py (+39 -0)
➕ frontend/src/__tests__/hooks/useCameraStreamToken.test.ts (+86 -0)
📝 frontend/src/__tests__/pages/FileManagerPage.test.tsx (+74 -1)

...and 20 more files

📄 Description

Bambuddy v0.2.3.1

Adds some important fixes for A1, A1 Mini, P1 and P1S which could prevent prints from not starting after uploading to printer.

⚠ Upgrade Notes — Read Before Updating

The in-app Update button does not reliably perform the one-time migration from 0.2.2.x to 0.2.3. Please do this one upgrade from the command line using one of the paths below. Once you're on 0.2.3, the in-app Update button works normally again for all future releases. Full guide: UPDATING.md.

Docker

First make sure your docker-compose.yml image: line points at :latest or :0.2.3 — if it pins an older tag (e.g. :0.2.2.2), docker compose pull will just re-fetch that tag. If your compose file is older than 0.2.3, also refresh it from the repo; recent releases added cap_add: NET_BIND_SERVICE, extra virtual-printer ports for bridge mode, and an optional PostgreSQL block.

docker compose pull
docker compose up -d

Native install (install.sh or manual git clone)

The bundled update.sh now stops the service, snapshots the database via the built-in backup API, fast-forwards to origin/main, installs Python dependencies, rebuilds the frontend, restarts the service, and rolls back automatically if any step fails.

sudo /opt/bambuddy/install/update.sh

Installed from a GitHub ZIP/tarball? Those installs have no .git directory and cannot be upgraded in place. See the UPDATING.md recovery procedure for backup-and-reinstall steps.

Take a backup first. update.sh takes one automatically; Docker and fully-manual paths do not. Settings → Backup → Create Backup produces a full ZIP.

New Features

(file-manager): collapse folders by default toggle (#996) — Add a "Collapse" toggle in the File Manager sidebar header next to "Wrap". When enabled, the folder tree opens with only top-level folders visible on every page load;
(i18n): add zh-TW locale — Contributed by @Minidoracat

Improved

Fixed

(queue): update LibraryFile.print_count and last_printed_at on completion (#1008) — Both fields have existed on the model and been shown in the File Manager for some time, but nothing ever wrote to them — every file in every library appeared to have never been printed.
**(firmware): parse P2S/X2D wiki anchors without dash and full-width parens (#1030) ** — The wiki scraper silently returned no versions for P2S and X2D, causing Bambuddy to fall back to the Bambu Lab download page, which still listed
01.01.01.00 as "latest" even though 01.02.00.00 shipped on 2026-04-09.
(frontend): thumbnails blank until reload after sign-in — On auth-enabled instances, logging out and back in left the File Manager (and occasionally the Archives page) full of broken thumbnails until a manual page reload. Thumbnail URLs are gated by a short-lived camera stream token that tags cannot send via Authorization headers, so the token is appended as ?token=… at render time.
(archive): truncation of large 3MF uploads on sendfile short-return (#1032) — On bare-metal Raspberry Pi OS bookworm / armv7l / Python 3.11, 3MF files larger than a few megabytes arrived complete via the virtual-printer FTP server but the copy into data/archives/ was silently truncated. The archive row was still written, the printer card looked fine, and the problem only surfaced later when opening the archive — the subsequent zipfile.ZipFile() in GET /archives/{id}/plates raised BadZipFile and the UI came up blank with no thumbnail, plate list, or filament data.
** (smart-plug): restore MQTT subscriptions for per-type topic configs on startup (#1010)** — Users integrating a Shelly plug through an external MQTT broker (ioBroker, Zigbee2MQTT, HA's MQTT broker, etc.) lost the plug's power/state/energy readings after every Bambuddy restart. The only fix was opening Settings → Smart Plugs, renaming the topic to a dummy
value, saving, renaming back, and saving again.
(printers): stop controls row overflowing in Chrome at narrow card widths
(obico): clear Status banner on next successful detection cycle (#172)
(ftp): wait for zombie thread to complete before giving up on download (#1014)
(mqtt): cap task_id at int32 max to prevent P1S dispatch stalls (#1042)
** Facebook and some other OAuth providers issue authorization codes that exceed 512 characters** — Raised max_length for the code and state query parameters from 512 to 2048. The OAuth 2.0 spec (RFC 6749) does not define a maximum authorization code length; 2048 characters aligns with limits used by major providers. Contributed by @netscout2001

Changes

Change the color catalog's default manufacturer filter from "Bambu Lab" to "All Manufacturers" (#1039)

Security

chore(docker): switch runtime image to Debian Trixie — Picks up ffmpeg 5 → 7 (HEVC/AV1 improvements), OpenSSL 3.0 → 3.3, and two more years of APT package freshness. Frontend-builder stays on Bookworm until the Node.js image team publishes Trixie variants.
**(security): suppress three Debian-postponed CVEs in Trivy scans ** — Add CVE-2026-6385, CVE-2026-30997 and CVE-2026-6192 to .trivyignore. All three are marked "vulnerable / postponed" in both bookworm and trixie by the Debian Security Tracker with no upstream fix yet, so the Trivy container scan will keep re-raising them on every run.

Contributors

Thank you to the contributors who helped make this release possible:

@netscout2001 — Two-Factor Authentication + OIDC/SSO implementation, OIDC callback length, OIDC issuer trailing-slash fixes (×2), auto-link existing accounts toggle, H2C nozzle rack slot report (#933, #973, #985, #995, #1024, #943)
@Minidoracat — (i18n): add zh-TW locale (#1025)

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/maziggy/bambuddy/pull/1045 **Author:** [@maziggy](https://github.com/maziggy) **Created:** 4/20/2026 **Status:** ✅ Merged **Merged:** 4/20/2026 **Merged by:** [@maziggy](https://github.com/maziggy) **Base:** `main` ← **Head:** `0.2.3.1` --- ### 📝 Commits (10+) - [`d17c87c`](https://github.com/maziggy/bambuddy/commit/d17c87c98269360813ffafd91b581efd46d7907a) Bumped version - [`b655b12`](https://github.com/maziggy/bambuddy/commit/b655b1211e86cf8d9825e79c1d949e7d184af441) chore(docker): switch runtime image to Debian Trixie - [`5e5e8a5`](https://github.com/maziggy/bambuddy/commit/5e5e8a519d8578875c2e04afe5f8667c62a02b91) feat(file-manager): collapse folders by default toggle (#996) - [`578aa75`](https://github.com/maziggy/bambuddy/commit/578aa75eeeea2ba43595ca7bb3c4f9265851a8d3) chore(security): suppress three Debian-postponed CVEs in Trivy scans - [`2bf397e`](https://github.com/maziggy/bambuddy/commit/2bf397e33e009a26465047600e6afdec4a641e20) fix(queue): update LibraryFile.print_count and last_printed_at on completion (#1008) - [`c7ad449`](https://github.com/maziggy/bambuddy/commit/c7ad449e4e80731e24482d18c88231cb0d7b5cfd) fix(firmware): parse P2S/X2D wiki anchors without dash and full-width parens (#1030) - [`32c0b16`](https://github.com/maziggy/bambuddy/commit/32c0b169bdbdcdd506eff5b35347473efec326c4) fix(frontend): thumbnails blank until reload after sign-in - [`936b748`](https://github.com/maziggy/bambuddy/commit/936b74812713a8c40ebaa735832a98a2eeac96e5) fix(archive): truncation of large 3MF uploads on sendfile short-return (#1032) - [`74527d4`](https://github.com/maziggy/bambuddy/commit/74527d4124cb4b8794a4c8548b853371b3ac81fa) fix(smart-plug): restore MQTT subscriptions for per-type topic configs on startup (#1010) - [`b046c2c`](https://github.com/maziggy/bambuddy/commit/b046c2cac445ddce710243d6b1720fb76ccaa316) Enhance plate-clear tracking and visibility in printer cards (#939) ### 📊 Changes **40 files changed** (+1948 additions, -606 deletions) <details> <summary>View changed files</summary> 📝 `CHANGELOG.md` (+20 -0) 📝 `Dockerfile` (+1 -1) 📝 `backend/app/api/routes/smart_plugs.py` (+7 -46) 📝 `backend/app/core/config.py` (+1 -1) 📝 `backend/app/main.py` (+29 -11) 📝 `backend/app/services/archive.py` (+71 -4) 📝 `backend/app/services/bambu_ftp.py` (+47 -24) 📝 `backend/app/services/bambu_mqtt.py` (+8 -1) 📝 `backend/app/services/firmware_check.py` (+15 -6) 📝 `backend/app/services/mqtt_smart_plug.py` (+35 -0) 📝 `backend/app/services/obico_detection.py` (+4 -0) 📝 `backend/tests/integration/test_print_queue_api.py` (+140 -0) ➕ `backend/tests/unit/services/test_archive_copy.py` (+133 -0) 📝 `backend/tests/unit/services/test_bambu_ftp.py` (+56 -0) 📝 `backend/tests/unit/services/test_bambu_mqtt.py` (+17 -5) ➕ `backend/tests/unit/services/test_mqtt_smart_plug_subscribe.py` (+145 -0) 📝 `backend/tests/unit/test_firmware_versions.py` (+47 -0) 📝 `backend/tests/unit/test_obico_detection.py` (+39 -0) ➕ `frontend/src/__tests__/hooks/useCameraStreamToken.test.ts` (+86 -0) 📝 `frontend/src/__tests__/pages/FileManagerPage.test.tsx` (+74 -1) _...and 20 more files_ </details> ### 📄 Description **Bambuddy v0.2.3.1** **Adds some important fixes for A1, A1 Mini, P1 and P1S which could prevent prints from not starting after uploading to printer.** ## ⚠ Upgrade Notes — Read Before Updating The in-app **Update** button does not reliably perform the one-time migration from 0.2.2.x to 0.2.3. Please do this one upgrade from the command line using one of the paths below. Once you're on 0.2.3, the in-app Update button works normally again for all future releases. Full guide: [UPDATING.md](https://github.com/maziggy/bambuddy/blob/main/UPDATING.md). **Docker** First make sure your `docker-compose.yml` `image:` line points at `:latest` or `:0.2.3` — if it pins an older tag (e.g. `:0.2.2.2`), `docker compose pull` will just re-fetch that tag. If your compose file is older than 0.2.3, also refresh it from the repo; recent releases added `cap_add: NET_BIND_SERVICE`, extra virtual-printer ports for bridge mode, and an optional PostgreSQL block. ```bash docker compose pull docker compose up -d ``` **Native install (`install.sh` or manual `git clone`)** The bundled `update.sh` now stops the service, snapshots the database via the built-in backup API, fast-forwards to `origin/main`, installs Python dependencies, rebuilds the frontend, restarts the service, and rolls back automatically if any step fails. ```bash sudo /opt/bambuddy/install/update.sh ``` **Installed from a GitHub ZIP/tarball?** Those installs have no `.git` directory and cannot be upgraded in place. See the [UPDATING.md recovery procedure](https://github.com/maziggy/bambuddy/blob/main/UPDATING.md#installed-from-a-github-zip-or-tarball-download) for backup-and-reinstall steps. **Take a backup first.** `update.sh` takes one automatically; Docker and fully-manual paths do not. Settings → Backup → **Create Backup** produces a full ZIP. --- **New Features** - **(file-manager): collapse folders by default toggle (#996)** — Add a "Collapse" toggle in the File Manager sidebar header next to "Wrap". When enabled, the folder tree opens with only top-level folders visible on every page load; - **(i18n): add zh-TW locale** — Contributed by @Minidoracat **Improved** **Fixed** - **(queue): update LibraryFile.print_count and last_printed_at on completion (#1008)** — Both fields have existed on the model and been shown in the File Manager for some time, but nothing ever wrote to them — every file in every library appeared to have never been printed. - **(firmware): parse P2S/X2D wiki anchors without dash and full-width parens (#1030) ** — The wiki scraper silently returned no versions for P2S and X2D, causing Bambuddy to fall back to the Bambu Lab download page, which still listed 01.01.01.00 as "latest" even though 01.02.00.00 shipped on 2026-04-09. - **(frontend): thumbnails blank until reload after sign-in** — On auth-enabled instances, logging out and back in left the File Manager (and occasionally the Archives page) full of broken thumbnails until a manual page reload. Thumbnail URLs are gated by a short-lived camera stream token that <img> tags cannot send via Authorization headers, so the token is appended as ?token=… at render time. - **(archive): truncation of large 3MF uploads on sendfile short-return (#1032)** — On bare-metal Raspberry Pi OS bookworm / armv7l / Python 3.11, 3MF files larger than a few megabytes arrived complete via the virtual-printer FTP server but the copy into data/archives/ was silently truncated. The archive row was still written, the printer card looked fine, and the problem only surfaced later when opening the archive — the subsequent zipfile.ZipFile() in GET /archives/{id}/plates raised BadZipFile and the UI came up blank with no thumbnail, plate list, or filament data. - ** (smart-plug): restore MQTT subscriptions for per-type topic configs on startup (#1010)** — Users integrating a Shelly plug through an external MQTT broker (ioBroker, Zigbee2MQTT, HA's MQTT broker, etc.) lost the plug's power/state/energy readings after every Bambuddy restart. The only fix was opening Settings → Smart Plugs, renaming the topic to a dummy value, saving, renaming back, and saving again. - **(printers): stop controls row overflowing in Chrome at narrow card widths** - **(obico): clear Status banner on next successful detection cycle (#172)** - **(ftp): wait for zombie thread to complete before giving up on download (#1014)** - **(mqtt): cap task_id at int32 max to prevent P1S dispatch stalls (#1042)** - ** Facebook and some other OAuth providers issue authorization codes that exceed 512 characters** — Raised max_length for the code and state query parameters from 512 to 2048. The OAuth 2.0 spec (RFC 6749) does not define a maximum authorization code length; 2048 characters aligns with limits used by major providers. Contributed by @netscout2001 **Changes** - **Change the color catalog's default manufacturer filter from "Bambu Lab" to "All Manufacturers" (#1039)** **Security** - **chore(docker): switch runtime image to Debian Trixie** — Picks up ffmpeg 5 → 7 (HEVC/AV1 improvements), OpenSSL 3.0 → 3.3, and two more years of APT package freshness. Frontend-builder stays on Bookworm until the Node.js image team publishes Trixie variants. - **(security): suppress three Debian-postponed CVEs in Trivy scans ** — Add CVE-2026-6385, CVE-2026-30997 and CVE-2026-6192 to .trivyignore. All three are marked "vulnerable / postponed" in both bookworm and trixie by the Debian Security Tracker with no upstream fix yet, so the Trivy container scan will keep re-raising them on every run. **Contributors** Thank you to the contributors who helped make this release possible: - **@netscout2001** — Two-Factor Authentication + OIDC/SSO implementation, OIDC callback length, OIDC issuer trailing-slash fixes (×2), auto-link existing accounts toggle, H2C nozzle rack slot report (#933, #973, #985, #995, #1024, #943) - **@Minidoracat** — (i18n): add zh-TW locale (#1025) --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>