(New Feature Added support for new SSH cryptography method chacha20-poly1305@openssh.com
(New Feature) Added support for SSH Strict Key Exchange extension (kex-strict-c-v00@openssh.com) to protect against the Terrapin attack.
(New Feature) Added FileTar() to the CRBasic Instruction list. See CRBasic Help for details.
(New Feature) Added VariableSet and VariableGet to the MQTT Command and Control topics.
(New Feature) Added support for HTTP digest authentication.
(Major-Breaking Change) Removed support for the following deprecated and legacy SSH cryptographic algorithms (used for SFTP) to improve security: Host Keys: ssh-rsa, ssh-rsa-cert-v01@openssh.com MAC: hmac-md5, hmac-md5-96, hmac-ripemd160, hmac-ripemd160@openssh.com, hmac-sha1, hmac-sha1-etm@openssh.com, hmac-sha1-96 Encryption: aes128-cbc, aes192-cbc, aes256-cbc Key Exchanges: diffie-helman-group16-sha512, diffie-helman-group18-sha512, diffie-helman-group14-sha1, diffie-helman-group1-sha1, diffie-helman-group-exchange-sha1. NOTE: Despite being a breaking change, users should not see problems with SFTP connections if they are using SSH Server software released within the past 10 years.
(Major) Updated mbedtls stack 3.6.6
(Major) Updated TLS cipher suite preferences to prioritize more secure AES-GCM and AES-CCM ciphers over older AES-CBC ciphers. CBC-based ciphers remain available for compatibility.
(Major) Fixed an SFTP memory leak introduced in CR1000X OS 8.5.0 and CR6 OS 14.5.0 that could cause a watchdog reset.
(Major) Improved the processor code responsible for handling communication ports to enhance communication stability and robustness.
(Major) Fixed several issues affecting TOB3 file generation used by the CardOut instruction and TableFile option 64, improving reliability and long-term stability.
(Major) Fixed an issue introduced in OS CR1000X.8.0.0/CR6.14.0.0 where, under specific timing conditions, executing an IP Client instruction (HTTPGet, FTPClient, etc.) could cause the TableFile instruction using output option 64 (TOB3) to get stuck indefinitely and stop its CRBasic sequence from running.
(Major) Fixed an issue where the HTTP Client did not specify an Accept-Encoding header. The HTTP Client now specifies Accept-Encoding: identity to stop servers from using unsupported Content Encodings (affects HTTPGet, HTTPPut, HTTPPost).
(Major) Fixed issues introduced into HTTPGet in OS CR1000X.8.3.0/CR6.14.3.0 with processing redirects that used absolute URLs in the Location header.
(Minor) Improved efficiency of HTTPGet when processing redirects.
(Minor) Fixed an issue where a network interruption during an FTPClient SFTP transfer could prevent the executing sequence from continuing.
(Minor) Fixed an issue where FTPClient using SFTP table streaming did not correctly recover from missed streaming intervals, causing uploaded files to drift from the expected interval boundaries.
(Minor) Fixed URL path encoding in HTTPGet, HTTPPut, and HTTPPost to correctly handle spaces in HTTP request paths.
(Minor) MQTT metadata for the ConstTable is available only if the ConstTable is declared with a name.
(Minor) Fixed a compile error when a program contained more than one SubScan in Pipeline Mode.
(Minor) Fixed an issue where TableFile option 64 accepted invalid MaxFiles values of 0 or 1. These values now generate a compile-time error, preventing unsupported TOB3 file configurations.
(Minor) Fixed an issue where an RS-485 port could switch to Input mode after a restart when a microSD card was inserted.
(Minor) Fixed an issue where FileTime could incorrectly report an error for files created or modified at midnight due to FAT32 timestamp handling.
(Minor) Fixed an issue where changes to the Baud Rate COMSDC setting were not consistently applied when updated through DevConfig.
(Minor) Fixed a rare issue where repeated storage card access failures could cause TableFile processing to become stuck, potentially triggering a PakBusServer watchdog timeout.
(Minor) Fixed an issue where the NTP Server setting could stop performing scheduled daily time synchronization if the initial synchronization request failed due to a communication or network error.
(Minor) Fixed a FFTSample() compile error.
(Minor) Factory Defaults now reset the MQTT schema selection (Setting 99, 0x0063) to the default MQTT v2 schema.
(Minor-Breaking Change) Changed the default value of the HTTP client User-Agent header to CSI/2.0 (affects HTTPGet, HTTPPut, HTTPPost), removing OS version and Model information to improve security.
(Minor-Breaking Change) Writes to read-only Status and Settings table fields now generate compile errors (e.g., Status.CompileResults = "This Should Not Work").
(Minor) Updated HTTP(S) Server to serve javascript files (.js) using the text/javascript MIME type in the Content-Type header per RFC9239 for maximum browser compatibility. Previously, the application/javascript MIME type was used.
(Minor) Updated the HTTP(S) Server to support serving javascript module files (.mjs).
(Minor) Updated the HTTP(S) Server to serve files with newer data logger file extensions (.cr1x, .crb) using the text/plain MIME type, instead of application/octet-stream, matching existing file extensions (.cr1, .cr3, .cr8, .cr6, and .dld). This allows these files to be viewed in a web browser.
(Minor-Breaking Change) Fixed a CardOut filename generation issue that could cause memory corruption when long StationName and DataTable names were used. CardOut filenames now truncate the StationName portion to 37 characters (previously 49) to ensure the filename does not exceed the maximum supported length. Users with StationName values longer than 37 characters will see truncated StationName values in generated CardOut filenames.