From addec160011985e1f7bbcd60a43b1f29c3f28b8f Mon Sep 17 00:00:00 2001
From: GogoVega <92022724+GogoVega@users.noreply.github.com>
Date: Thu, 31 Jul 2025 11:26:09 +0200
Subject: [PATCH 1/7] Fix the node docs icon for long catalog loading
---
.../editor-client/src/js/ui/palette-editor.js | 10 ++++++++++
1 file changed, 10 insertions(+)
diff --git a/packages/node_modules/@node-red/editor-client/src/js/ui/palette-editor.js b/packages/node_modules/@node-red/editor-client/src/js/ui/palette-editor.js
index 5cc1faddc..c8e62890f 100644
--- a/packages/node_modules/@node-red/editor-client/src/js/ui/palette-editor.js
+++ b/packages/node_modules/@node-red/editor-client/src/js/ui/palette-editor.js
@@ -336,6 +336,16 @@ RED.palette.editor = (function() {
const moduleInfo = nodeEntries[module].info;
const nodeEntry = nodeEntries[module].elements;
+
+ if (!moduleInfo.url) {
+ if (loadedIndex[module] && loadedIndex[module].url) {
+ // Add the link to the node documentation if the catalog contains it
+ moduleInfo.url = loadedIndex[module].url;
+ const titleRow = $(nodeEntry.container).find("div.red-ui-palette-module-header > div.red-ui-palette-module-meta.red-ui-palette-module-name");
+ $('').attr('href', moduleInfo.url).appendTo(titleRow);
+ }
+ }
+
if (nodeEntry) {
const setCount = [];
From a7491b0227ba2d83fb7f3c2740063f596b7982ea Mon Sep 17 00:00:00 2001
From: Kazuhito Yokoi
Date: Sun, 3 Aug 2025 09:43:56 +0900
Subject: [PATCH 2/7] Add tooltip for event log view
---
.../@node-red/editor-client/locales/en-US/editor.json | 1 +
.../node_modules/@node-red/editor-client/locales/ja/editor.json | 1 +
.../node_modules/@node-red/editor-client/src/js/ui/event-log.js | 1 +
3 files changed, 3 insertions(+)
diff --git a/packages/node_modules/@node-red/editor-client/locales/en-US/editor.json b/packages/node_modules/@node-red/editor-client/locales/en-US/editor.json
index 57b9e681e..c1c9316d8 100644
--- a/packages/node_modules/@node-red/editor-client/locales/en-US/editor.json
+++ b/packages/node_modules/@node-red/editor-client/locales/en-US/editor.json
@@ -164,6 +164,7 @@
}
},
"actions": {
+ "open-event-log": "Open event log",
"toggle-navigator": "Toggle navigator",
"zoom-out": "Zoom out",
"zoom-reset": "Reset zoom",
diff --git a/packages/node_modules/@node-red/editor-client/locales/ja/editor.json b/packages/node_modules/@node-red/editor-client/locales/ja/editor.json
index 1653662c2..1ff8b4653 100644
--- a/packages/node_modules/@node-red/editor-client/locales/ja/editor.json
+++ b/packages/node_modules/@node-red/editor-client/locales/ja/editor.json
@@ -164,6 +164,7 @@
}
},
"actions": {
+ "open-event-log": "イベントログを開く",
"toggle-navigator": "ナビゲータの表示/非表示を切替",
"zoom-out": "縮小",
"zoom-reset": "拡大/縮小を初期化",
diff --git a/packages/node_modules/@node-red/editor-client/src/js/ui/event-log.js b/packages/node_modules/@node-red/editor-client/src/js/ui/event-log.js
index 2918cacf1..dabb8f1d5 100644
--- a/packages/node_modules/@node-red/editor-client/src/js/ui/event-log.js
+++ b/packages/node_modules/@node-red/editor-client/src/js/ui/event-log.js
@@ -51,6 +51,7 @@ RED.eventLog = (function() {
align: "right",
element: statusWidget
});
+ RED.popover.tooltip(statusWidget, RED._('actions.open-event-log'));
RED.statusBar.hide("red-ui-event-log-status");
},
From f70770a63d82718f28bba27208c8d9f998a47c20 Mon Sep 17 00:00:00 2001
From: Kazuhito Yokoi
Date: Sun, 3 Aug 2025 14:23:23 +0900
Subject: [PATCH 3/7] Show requesting status correctly in http request node
when multiple processes are working
---
.../@node-red/nodes/core/network/21-httprequest.js | 7 ++++++-
1 file changed, 6 insertions(+), 1 deletion(-)
diff --git a/packages/node_modules/@node-red/nodes/core/network/21-httprequest.js b/packages/node_modules/@node-red/nodes/core/network/21-httprequest.js
index 0a3ac2560..33d9c3044 100644
--- a/packages/node_modules/@node-red/nodes/core/network/21-httprequest.js
+++ b/packages/node_modules/@node-red/nodes/core/network/21-httprequest.js
@@ -152,7 +152,9 @@ in your Node-RED user directory (${RED.settings.userDir}).
const asLowercase = name.toLowercase();
return headersObject[Object.keys(headersObject).find(k => k.toLowerCase() === asLowercase)];
}
+ this.count = 0;
this.on("input",function(msg,nodeSend,nodeDone) {
+ node.count++;
checkNodeAgentPatch();
//reset redirectList on each request
redirectList = [];
@@ -658,7 +660,10 @@ in your Node-RED user directory (${RED.settings.userDir}).
catch(e) { node.warn(RED._("httpin.errors.json-error")); }
}
}
- node.status({});
+ node.count--;
+ if (node.count === 0) {
+ node.status({});
+ }
nodeSend(msg);
nodeDone();
}).catch(err => {
From 22a3f47060216d342000653ad33f93958da8156f Mon Sep 17 00:00:00 2001
From: Ben Hardill
Date: Wed, 20 Aug 2025 18:40:19 +0100
Subject: [PATCH 4/7] Speed up split node
fixes #5251
The code changed from 4.0.x to 4.1.x
This change to to prevent making changes to the orginial input `msg`
object incase any values were stored in context (pass by refernce).
The change meant that for every output message the whole original
input `msg` was being cloned, which could be huge, causing a big
performance regresion.
This fix ensures the clone of the orginial `msg` is only done once
and the much smaller output message is then cloned again to update
`msg.parts` object for each output. This results in lots of small
clones rather than lots of very large clones.
---
.../node_modules/@node-red/nodes/core/sequence/17-split.js | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/packages/node_modules/@node-red/nodes/core/sequence/17-split.js b/packages/node_modules/@node-red/nodes/core/sequence/17-split.js
index 5fe6b3c4e..44745a21a 100644
--- a/packages/node_modules/@node-red/nodes/core/sequence/17-split.js
+++ b/packages/node_modules/@node-red/nodes/core/sequence/17-split.js
@@ -146,16 +146,16 @@ module.exports = function(RED) {
var pos = 0;
var data = value;
msg.parts.len = node.arraySplt;
+ const newmsg = RED.utils.cloneMessge(msg)
for (var i=0; i
Date: Wed, 20 Aug 2025 18:45:26 +0100
Subject: [PATCH 5/7] Update
packages/node_modules/@node-red/nodes/core/sequence/17-split.js
---
packages/node_modules/@node-red/nodes/core/sequence/17-split.js | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/packages/node_modules/@node-red/nodes/core/sequence/17-split.js b/packages/node_modules/@node-red/nodes/core/sequence/17-split.js
index 44745a21a..fe46dfe73 100644
--- a/packages/node_modules/@node-red/nodes/core/sequence/17-split.js
+++ b/packages/node_modules/@node-red/nodes/core/sequence/17-split.js
@@ -146,7 +146,7 @@ module.exports = function(RED) {
var pos = 0;
var data = value;
msg.parts.len = node.arraySplt;
- const newmsg = RED.utils.cloneMessge(msg)
+ const newmsg = RED.utils.cloneMessge(msg)
for (var i=0; i
Date: Wed, 20 Aug 2025 19:12:09 +0100
Subject: [PATCH 6/7] fix test
---
.../node_modules/@node-red/nodes/core/sequence/17-split.js | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/packages/node_modules/@node-red/nodes/core/sequence/17-split.js b/packages/node_modules/@node-red/nodes/core/sequence/17-split.js
index fe46dfe73..de1b716dc 100644
--- a/packages/node_modules/@node-red/nodes/core/sequence/17-split.js
+++ b/packages/node_modules/@node-red/nodes/core/sequence/17-split.js
@@ -146,7 +146,7 @@ module.exports = function(RED) {
var pos = 0;
var data = value;
msg.parts.len = node.arraySplt;
- const newmsg = RED.utils.cloneMessge(msg)
+ const newmsg = RED.util.cloneMessage(msg)
for (var i=0; i
Date: Mon, 15 Sep 2025 15:07:17 +0200
Subject: [PATCH 7/7] docs: add security escalation policy
---
SECURITY.md | 6 ++++++
1 file changed, 6 insertions(+)
diff --git a/SECURITY.md b/SECURITY.md
index 816ac507b..eac86a2e5 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -3,3 +3,9 @@
## Reporting a Vulnerability
Please report any potential security issues to `team@nodered.org`. This will notify the core project team who will respond accordingly.
+
+## Escalation
+
+If you do not receive an acknowledgement of your report within 6 business days, or if you cannot find a private security contact for the project, you may escalate to the OpenJS Foundation CNA at `security@lists.openjsf.org`.
+
+If the project acknowledges your report but does not provide any further response or engagement within 14 days, escalation is also appropriate.