1.0.235

Security hardening + code-review fixes:

• OTA self-update now TLS-validates GitHub against the embedded Mozilla root bundle (fail-closed)
• CSRF origin guard on all state-changing web endpoints
• WiFi passphrases up to 63 characters
• Demo mode no longer pollutes the persisted SoH baseline
• New Timezone setting (Settings → System)
• Fixes: core-0 NVS race in self-update, espota password re-arm from device UI, /restore value clamps, web test-alert no longer blocks the UI core, UART pin picker prevents duplicate pins
• MQTT/JSON robustness + geo-IP provider order swap

1.0.234

Field devices on auto-update (or via the web app's Firmware update → Update now) will download and self-flash this build.

New since 1.0.220

• Comms health diagnostics — Modbus read success-rate, reconnect count and last error per pack, in the device info popup and /api.
• Hardware watchdog — the UI task is watchdog-protected; a wedged device now auto-reboots and recovers unattended.
• /metrics endpoint — Prometheus/OpenMetrics text for scraping into Grafana/InfluxDB (per-pack SOC, V, A, W, temps, cells, SoH, comms, energy). Telemetry-only, LAN-friendly.
• Long-term capacity / SoH trend — monthly capacity, state-of-health and cycle samples with an "as-new" baseline and retention %; on device, in /api, /metrics, and a web sparkline.
• Config backup / restore — download all settings as JSON and restore/clone from the web app's Security section.
• Offline weather cache + stale indicator — the last forecast survives a reboot and greys out when it isn't fresh.
• Lock screen — the top-bar icon now locks the screen (PIN pad) instead of the self-cancelling sleep.

Fixes

• Weather NVS writes moved off the network core (no more cross-core Preferences corruption risk).
• Watchdog no longer trips during a web OTA flash (the upload now keeps it fed).

1.0.223

Touch responsiveness: top-bar buttons & modals respond on press; looser tap jitter threshold; calmer charging spinner.