vpn: Route Modbus TCP, MQTT, BACnet, DNP3, EtherNet/IP, CoAP, HTTP, and OPC UA connections through a built-in VPN, with a guided connect flow and a per-endpoint "Route via VPN" toggle in Device Manager. This replaces the older UDP tunnel.
networking: Full IPv6 support: dual-stack listeners across protocol drivers, device discovery (BACnet, SSDP, network scan), and IPv6-aware address fields throughout the UI.
device manager: Added a Device Discovery extension for automatic network scanning (mDNS, SSDP, BLE, network scan), with editable discovery configuration.
security: Escalating your own role now requires re-entering your password (step-up re-authentication), and administrators can edit privilege rank directly from the Role editor.
rule chain editor: Redesigned canvas nodes, editable entity/field bindings directly in the Properties panel, auto-enumerated Switch cases from a Choice source, and precise output types and variable names for Read Entity nodes.
ui: Dialogs across the platform now open as movable, taskbar-visible windows instead of popups.
mobile: Added a native bottom-sheet control with a refreshed touch-friendly layout across apps.
Bug Fixes
dnp3: Master and outstation TLS connections now fail closed instead of silently falling back to plaintext, and sessions that previously failed to establish now connect correctly.
opc ua: Migrated to a modern client library with strict hostname certificate verification when routed through the VPN.
mqtt / modbus / coap: Connections routed through the VPN now verify TLS certificates against the real hostname.
rule chain editor: Fixed nodes with multiple incoming branches executing twice, Time Condition ranges now evaluate in the platform's configured timezone instead of UTC, and fixed Save button and header clipping issues.
device manager: Discovery status now resets correctly before a re-scan, the discovery poller no longer mistakes an in-progress scan for done, point mapper naming is consistent, field IDs and label association are restored, drag-and-drop carries live values, and the Data Points table scrolls correctly on small windows.
extension marketplace: Replaced the filter-chip row with a searchable Categories dropdown.
chart builder: Fixed live preview, aggregation, rendering, and deletion issues.
shell: Fixed copy/paste over HTTP and native right-click paste in the terminal; Ctrl+W no longer closes the tab.
permissions: Fixed a regression that removed read access to node connection details; delete-capable entity types now correctly grant full access scope.
Performance
device manager: The device tree now appears immediately, with device details backfilled incrementally, so large trees load noticeably faster.
chart builder: Configuration reads are now batched into fewer round trips.
⚠️ Breaking Changes
DNP3 TLS connections no longer fall back to plaintext if the handshake fails. Endpoints relying on that fallback will need a valid TLS configuration to keep connecting.