LoginSign Up
← Back to all sparks
Z

Z-Wave JS

DEVOPS
Velocity5.0

Z-Wave protocol driver implementation for home automation in JavaScript

zwave-js.github.io/node-zwave-js ↗

Z-Wave JS patches the fallout from its security release and limits OTA updates to one node.

smart homez-wavesecurity hardeningdevice configsfirmware updates
◆Current state
v15.32.0 shipped fixes from two full-codebase security reviews; the patches since then handle the fallout. v15.32.2 warns instead of failing at startup when Classic and Long Range security keys are shared, applies modified Central Scene labels on startup and adds labels for 61 devices. v15.32.3 limits OTA firmware transfers to one node at a time.
◆Where it's heading
The project is in a stabilization phase after the hardening release, choosing warnings over hard failures where stricter checks broke real setups. Device config additions keep arriving in every patch.
◆Prediction
Expect more small patches on the 15.32 line and continued device config additions before the next minor release.

◆Recent moves

  1. 3d ago

    v15.32.3 limits OTA firmware transfers to one node

    Only one node receives an OTA firmware update at a time. A follow-up to the multi-node update fixes in 15.32.1.

    View source ↗
  2. 4d ago

    v15.32.2: shared security keys warn instead of blocking startup

    15.32.0's stricter checks stopped the driver for users who reused mesh keys for Long Range; it now warns instead. The patch also applies edited Central Scene labels and adds labels for 61 devices.

    View source ↗
  3. 9d ago

    v15.32.1 fixes multi-node OTA firmware update checks

    Two fixes: a node no longer reports an update in progress because another node is updating, and controller OTA updates can be queued for several nodes. A quick patch after the v15.32.0 hardening release.

    View source ↗
  4. 10d ago

    v15.32.0: fixes from two full-codebase security reviews

    Two codebase-wide reviews produced dozens of hardening fixes: crash-proof receive paths, stricter S2 and ESPHome parsing, capped firmware downloads and abortable firmware updates. It is the broadest robustness release in this range, with no headline feature beyond simpler ESPHome keys.

    View source ↗
  5. 23d ago

    v15.31.2: migration fixes and endpoint grouping for eight devices

    A patch that fixes controller-migration device classes and app preset overrides, then applies v15.31.0's endpoint grouping to eight more devices. It shows the new config feature paying off quickly.

    View source ↗
  6. 1mo ago

    v15.31.1: Application Busy retries, NVM restore, route rebuild fixes

    A patch for the controller and network paths: NVM restore and 500-series OTW updates stop aborting themselves during soft reset, Application Busy replies trigger a delayed retry, and overlapping network-wide route rebuilds are blocked. The Aeotec HEM 8 is the first config to use the endpoint grouping added in v15.31.0.

    View source ↗