starred/bambuddy

Fork 0

mirror of https://github.com/maziggy/bambuddy.git synced 2026-05-09 05:35:30 +02:00

[PR #237] [MERGED] v0.1.7b #969

New issue

Closed

opened 2026-05-06 12:34:15 +02:00 by BreizhHardware · 0 comments

BreizhHardware commented

2026-05-06 12:34:15 +02:00

Owner

📋 Pull Request Information

Original PR: https://github.com/maziggy/bambuddy/pull/237
Author: @maziggy
Created: 2/3/2026
Status: ✅ Merged
Merged: 2/3/2026
Merged by: @maziggy

Base: main ← Head: 0.1.7b

📝 Commits (10+)

70f5b6a Bumped version
db68dda Document intentional JWT secret storage (CodeQL Alert #69)
7eb6058 Spoolman: Show "Open in Spoolman" for linked spools (Issue #210)
475773c Housekeeping
71def0a Added full i8n localization support. Available languages are English and German
be18ebb Fix P2S printer support - disable vibration_cali and fix FTP SSL
ef64687 Merge pull request #227 from deathly1987/fix/p2s-printer-support
38d9914 Virtual Printer: TLS proxy with real printer serial
588a771 Added Japanese language pack (Thanks to @nmori)
cc0bfa7 Fix authentication for download endpoints (fixes #231)

📊 Changes

104 files changed (+22477 additions, -11703 deletions)

View changed files

📝 .gitignore (+2 -2)
📝 CHANGELOG.md (+74 -0)
➖ PLAN.md (+0 -247)
📝 README.md (+24 -3)
➖ RELEASE_NOTES_0.1.6.md (+0 -318)
📝 backend/app/api/routes/ams_history.py (+5 -0)
📝 backend/app/api/routes/api_keys.py (+11 -2)
📝 backend/app/api/routes/archives.py (+141 -27)
📝 backend/app/api/routes/camera.py (+28 -3)
📝 backend/app/api/routes/cloud.py (+84 -19)
📝 backend/app/api/routes/discovery.py (+29 -8)
📝 backend/app/api/routes/external_links.py (+18 -2)
📝 backend/app/api/routes/filaments.py (+25 -4)
📝 backend/app/api/routes/firmware.py (+14 -2)
📝 backend/app/api/routes/github_backup.py (+28 -5)
📝 backend/app/api/routes/kprofiles.py (+10 -0)
📝 backend/app/api/routes/maintenance.py (+25 -3)
📝 backend/app/api/routes/metrics.py (+4 -2)
📝 backend/app/api/routes/notification_templates.py (+25 -5)
📝 backend/app/api/routes/notifications.py (+20 -2)

...and 80 more files

📄 Description

v0.1.7b

Bambuddy v0.1.7b Release Notes

A Note to Our Community

First, we want to sincerely apologize for the issues caused by the 0.1.6-final release. We know many of you experienced problems, and we're truly sorry for the disruption. We've taken this seriously and have improved our testing and release workflow to prevent similar issues in the future. Thank you for your patience and continued support.

🔒 Security Fixes (CRITICAL)

This release addresses a critical security vulnerability. Users running authentication-enabled instances should upgrade immediately.

CVE-2026-25505: Missing API Endpoint Authentication (CVSS 9.8)

Added authentication to 200+ API endpoints that were previously unprotected when auth was enabled
All route files now enforce permission checks via RequirePermissionIfAuthEnabled()
Protected endpoints include: archives, projects, settings, API keys, groups, cloud, notifications, maintenance, filaments, external links, smart plugs, discovery,
firmware, camera, k-profiles, AMS history, pending uploads, updates, spoolman, system, print queue, and printers
Backend integration tests added to verify endpoint authentication enforcement
Note: Image-serving endpoints (thumbnails, timelapse, photos, camera streams) remain public as they require knowing the resource ID and are loaded via tags
which cannot send Authorization headers

🌐 NEW: Virtual Printer Proxy Mode (Beta)

Print from anywhere in the world — no VPN, no port forwarding, no Bambu Cloud.

This is our most requested feature! Proxy Mode turns Bambuddy into a secure TLS relay between your slicer and your printer:

Remote Slicer → Internet → Bambuddy Server → Local Network → Printer

Key Features

No port forwarding required — your printer stays safely on your local network
No VPN needed — connect from coffee shops, hotels, work, anywhere
No Bambu Cloud dependency — fully self-hosted solution
End-to-end TLS encryption on FTP (port 9990) and MQTT (port 8883)
Works with Bambu Studio & OrcaSlicer — add Bambuddy as a network printer
Uses real printer credentials — authenticates with your actual printer's serial and access code

Beta Notice

This feature is marked as beta. While we've tested it extensively, remote printing involves many network configurations. Please report any issues on GitHub and include
your network setup details.

📖 https://wiki.bambuddy.cool/features/virtual-printer/#proxy-mode-new-in-017

✨ Enhancements

TOTP Authenticator Support for Bambu Cloud (#182)

Accounts with authenticator apps (Google Authenticator, Authy, etc.) now work correctly
Proper detection of verification type: email code vs TOTP code

Japanese Language Pack 🇯🇵

Full Japanese translation added (Thanks to @nmori!)
3000+ translation keys covering the entire UI

Complete German Translations 🇩🇪

All UI strings now fully translated to German (1800+ keys)

Spoolman: Open in Spoolman Button (#210)

FilamentHoverCard now shows "Open in Spoolman" button when spool is linked
Direct link to the spool's page in Spoolman for quick editing

🌍 A Note on Localization

We're committed to making Bambuddy accessible to users worldwide. While we've added Japanese and completed German translations in this release, there are still areas of the frontend that don't yet respect i18n. We're continuously working on improving localization coverage.

If you'd like to help translate Bambuddy into your language or spot untranslated strings, please reach out on GitHub! Community contributions are always welcome.

🐛 Bug Fixes

P1S/P2S Printer Support (#227)

Fixed P2S printer support — disabled vibration_cali and fixed FTP SSL (Thanks to @deathly1987!)

Multiple Home Assistant Entities per Printer (#214)

Fixed Home Assistant entities being limited to one per printer
Multiple HA entities (switches, scripts, lights, etc.) can now be linked to the same printer

Monthly Statistics Calculation (#229)

Fixed filament statistics not accounting for quantity multiplier
All charts and metrics now correctly multiply by quantity

Authentication for Downloads (#231)

Fixed support bundle, archive export, statistics export, and printer file downloads returning 401 when auth is enabled

Date Picker Format Issues (#233)

Date/time pickers now respect user's format settings (EU, US, ISO)

500 Error on Archive Detail Page

Fixed internal server error when viewing individual archive details

📦 Upgrade Instructions

Docker users

docker pull maziggy/bambuddy:0.1.7b
docker-compose down && docker-compose up -d

Or use :latest tag (will pull 0.1.7b)

docker pull maziggy/bambuddy:latest

Note: If you're upgrading from a version before 0.1.6.2, you will need to re-login after upgrading due to the JWT secret key security fix.

🙏 Thank You

Special thanks to our contributors:

@nmori — Japanese language pack
@deathly1987 — P2S printer fix

And to everyone who reported issues and helped us improve Bambuddy!

Full Changelog: https://github.com/maziggy/bambuddy/compare/0.1.6.2...0.1.7b

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/maziggy/bambuddy/pull/237 **Author:** [@maziggy](https://github.com/maziggy) **Created:** 2/3/2026 **Status:** ✅ Merged **Merged:** 2/3/2026 **Merged by:** [@maziggy](https://github.com/maziggy) **Base:** `main` ← **Head:** `0.1.7b` --- ### 📝 Commits (10+) - [`70f5b6a`](https://github.com/maziggy/bambuddy/commit/70f5b6ae98a6b8eed60dd39351bae221b494ef3c) Bumped version - [`db68dda`](https://github.com/maziggy/bambuddy/commit/db68dda1f5b408da1ef3ff127289b87a93c76580) Document intentional JWT secret storage (CodeQL Alert #69) - [`7eb6058`](https://github.com/maziggy/bambuddy/commit/7eb60589289b386db3689b9c3d0df262fdf21b75) Spoolman: Show "Open in Spoolman" for linked spools (Issue #210) - [`475773c`](https://github.com/maziggy/bambuddy/commit/475773c64d70f34566cb957ee353cdcb3587afd5) Housekeeping - [`71def0a`](https://github.com/maziggy/bambuddy/commit/71def0a9dceedb83686a649eb5cc606cde28d59c) Added full i8n localization support. Available languages are English and German - [`be18ebb`](https://github.com/maziggy/bambuddy/commit/be18ebb36cf60c7e74fe63f21718e62e6ee4d3b7) Fix P2S printer support - disable vibration_cali and fix FTP SSL - [`ef64687`](https://github.com/maziggy/bambuddy/commit/ef6468708055fb83229888515482b3c253e202c1) Merge pull request #227 from deathly1987/fix/p2s-printer-support - [`38d9914`](https://github.com/maziggy/bambuddy/commit/38d99143c7eeec40d871465713ac5560db9c0099) Virtual Printer: TLS proxy with real printer serial - [`588a771`](https://github.com/maziggy/bambuddy/commit/588a771ea3477adac9b3d21e6f529d6f7fdf0b31) Added Japanese language pack (Thanks to @nmori) - [`cc0bfa7`](https://github.com/maziggy/bambuddy/commit/cc0bfa764e9f45cbfebb82862f006d6d6f0602b9) Fix authentication for download endpoints (fixes #231) ### 📊 Changes **104 files changed** (+22477 additions, -11703 deletions) <details> <summary>View changed files</summary> 📝 `.gitignore` (+2 -2) 📝 `CHANGELOG.md` (+74 -0) ➖ `PLAN.md` (+0 -247) 📝 `README.md` (+24 -3) ➖ `RELEASE_NOTES_0.1.6.md` (+0 -318) 📝 `backend/app/api/routes/ams_history.py` (+5 -0) 📝 `backend/app/api/routes/api_keys.py` (+11 -2) 📝 `backend/app/api/routes/archives.py` (+141 -27) 📝 `backend/app/api/routes/camera.py` (+28 -3) 📝 `backend/app/api/routes/cloud.py` (+84 -19) 📝 `backend/app/api/routes/discovery.py` (+29 -8) 📝 `backend/app/api/routes/external_links.py` (+18 -2) 📝 `backend/app/api/routes/filaments.py` (+25 -4) 📝 `backend/app/api/routes/firmware.py` (+14 -2) 📝 `backend/app/api/routes/github_backup.py` (+28 -5) 📝 `backend/app/api/routes/kprofiles.py` (+10 -0) 📝 `backend/app/api/routes/maintenance.py` (+25 -3) 📝 `backend/app/api/routes/metrics.py` (+4 -2) 📝 `backend/app/api/routes/notification_templates.py` (+25 -5) 📝 `backend/app/api/routes/notifications.py` (+20 -2) _...and 80 more files_ </details> ### 📄 Description v0.1.7b Bambuddy v0.1.7b Release Notes A Note to Our Community First, we want to sincerely apologize for the issues caused by the 0.1.6-final release. We know many of you experienced problems, and we're truly sorry for the disruption. We've taken this seriously and have improved our testing and release workflow to prevent similar issues in the future. Thank you for your patience and continued support. --- 🔒 Security Fixes (CRITICAL) This release addresses a critical security vulnerability. Users running authentication-enabled instances should upgrade immediately. CVE-2026-25505: Missing API Endpoint Authentication (CVSS 9.8) - Added authentication to 200+ API endpoints that were previously unprotected when auth was enabled - All route files now enforce permission checks via RequirePermissionIfAuthEnabled() - Protected endpoints include: archives, projects, settings, API keys, groups, cloud, notifications, maintenance, filaments, external links, smart plugs, discovery, firmware, camera, k-profiles, AMS history, pending uploads, updates, spoolman, system, print queue, and printers - Backend integration tests added to verify endpoint authentication enforcement - Note: Image-serving endpoints (thumbnails, timelapse, photos, camera streams) remain public as they require knowing the resource ID and are loaded via <img> tags which cannot send Authorization headers --- 🌐 NEW: Virtual Printer Proxy Mode (Beta) Print from anywhere in the world — no VPN, no port forwarding, no Bambu Cloud. This is our most requested feature! Proxy Mode turns Bambuddy into a secure TLS relay between your slicer and your printer: Remote Slicer → Internet → Bambuddy Server → Local Network → Printer Key Features - No port forwarding required — your printer stays safely on your local network - No VPN needed — connect from coffee shops, hotels, work, anywhere - No Bambu Cloud dependency — fully self-hosted solution - End-to-end TLS encryption on FTP (port 9990) and MQTT (port 8883) - Works with Bambu Studio & OrcaSlicer — add Bambuddy as a network printer - Uses real printer credentials — authenticates with your actual printer's serial and access code Beta Notice This feature is marked as beta. While we've tested it extensively, remote printing involves many network configurations. Please report any issues on GitHub and include your network setup details. 📖 https://wiki.bambuddy.cool/features/virtual-printer/#proxy-mode-new-in-017 --- ✨ Enhancements TOTP Authenticator Support for Bambu Cloud (#182) - Accounts with authenticator apps (Google Authenticator, Authy, etc.) now work correctly - Proper detection of verification type: email code vs TOTP code Japanese Language Pack 🇯🇵 - Full Japanese translation added (Thanks to @nmori!) - 3000+ translation keys covering the entire UI Complete German Translations 🇩🇪 - All UI strings now fully translated to German (1800+ keys) Spoolman: Open in Spoolman Button (#210) - FilamentHoverCard now shows "Open in Spoolman" button when spool is linked - Direct link to the spool's page in Spoolman for quick editing --- 🌍 A Note on Localization We're committed to making Bambuddy accessible to users worldwide. While we've added Japanese and completed German translations in this release, there are still areas of the frontend that don't yet respect i18n. We're continuously working on improving localization coverage. If you'd like to help translate Bambuddy into your language or spot untranslated strings, please reach out on GitHub! Community contributions are always welcome. --- 🐛 Bug Fixes P1S/P2S Printer Support (#227) - Fixed P2S printer support — disabled vibration_cali and fixed FTP SSL (Thanks to @deathly1987!) Multiple Home Assistant Entities per Printer (#214) - Fixed Home Assistant entities being limited to one per printer - Multiple HA entities (switches, scripts, lights, etc.) can now be linked to the same printer Monthly Statistics Calculation (#229) - Fixed filament statistics not accounting for quantity multiplier - All charts and metrics now correctly multiply by quantity Authentication for Downloads (#231) - Fixed support bundle, archive export, statistics export, and printer file downloads returning 401 when auth is enabled Date Picker Format Issues (#233) - Date/time pickers now respect user's format settings (EU, US, ISO) 500 Error on Archive Detail Page - Fixed internal server error when viewing individual archive details --- 📦 Upgrade Instructions # Docker users docker pull maziggy/bambuddy:0.1.7b docker-compose down && docker-compose up -d # Or use :latest tag (will pull 0.1.7b) docker pull maziggy/bambuddy:latest Note: If you're upgrading from a version before 0.1.6.2, you will need to re-login after upgrading due to the JWT secret key security fix. --- 🙏 Thank You Special thanks to our contributors: - @nmori — Japanese language pack - @deathly1987 — P2S printer fix And to everyone who reported issues and helped us improve Bambuddy! --- Full Changelog: https://github.com/maziggy/bambuddy/compare/0.1.6.2...0.1.7b --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>