v2.35.0

[karsten13]

Release Notes

Thanks to: @angeldeejay, @in-voker, @JHWelch, @khassel, @KristjanESPERANTO, @rejas, @sdetweil

⚠️ This release needs nodejs version >=22.21.1 <23 || >=24 (no change to previous release)

Compare to previous Release v2.34.0

⚠️ We introduced some internal changes with this release, please read this forum post before upgrading!

[core]

• Prepare Release 2.35.0 (#4071)
• docs: add security policy and vulnerability reporting guidelines (#4069)
• refactor: simplify internal require() calls (#4056)
• allow environment variables in cors urls (#4033)
• fix cors proxy getting binary data (e.g. png, webp) (#4030)
• fix: correct secret redaction and optimize loadConfig (#4031)
• change loading config.js, allow variables in config.js and try to protect sensitive data (#4029)
• remove kioskmode (#4027)
• Add dark theme logo (#4026)
• move custom.css from css to config (#4020)
• move default modules from /modules/default to /defaultmodules (#4019)
• update node versions in workflows (#4018)
• [core] refactor: extract and centralize HTTP fetcher (#4016)
• fix systeminformation not displaying electron version (#4012)
• Update node-ical and support it’s rrule-temporal changes (#4010)
• Change default start scripts from X11 to Wayland (#4011)
• refactor: unify favicon for index.html and Electron (#4006)
• [core] run systeminformation in subprocess so the info is always displayed (#4002)
• set next release dev number (#4000)

[dependencies]

• update dependencies (#4068)
• update dependencies incl. electron to v41 (#4058)
• chore: upgrade ESLint to v10 and fix newly surfaced issues (#4057)
• chore: update ESLint and plugins, simplify config, apply new rules (#4052)
• chore: update dependencies + add exports, files, and sideEffects fields to package.json (#4040)
• [core] refactor: enable ESLint rule require-await and handle detected issues (#4038)
• Update node-ical and other deps (#4025)
• chore: update dependencies (#4021)
• chore(eslint): migrate from eslint-plugin-vitest to @vitest/eslint-plugin and run rules only on test files (#4014)
• Update deps as requested by dependabot (#4008)
• update Collaboration.md and dependencies (#4001)

[logging]

• refactor: further logger clean-up (#4050)
• Fix Node.js v25 logging prefix and modernize logger (#4049)

[modules/calendar]

• fix(calendar): make showEnd behavior more consistent across time formats (#4059)
• test(calendar): fix hardcoded date in event shape test (#4055)
• [calendar] refactor: delegate event expansion to node-ical’s expandRecurringEvent (#4047)
• calendar.js: remove useless hasCalendarURL function (#4028)
• fix(calendar): update to node-ical 0.23.1 and fix full-day recurrence lookup (#4013)
• fix(calendar): correct day-of-week for full-day recurring events across all timezones (#4004)

[modules/newsfeed]

• fix(newsfeed): fix full article view and add framing check (#4039)
• [newsfeed] refactor: migrate to centralized HTTPFetcher (#4023)

[modules/weather]

• fix(weather): fix openmeteo forecast stuck in the past (#4064)
• fix(weather): fix weathergov forecast day labels off by one (#4065)
• weather: fixes for templates (#4054)
• weather: add possibility to override njk’s and css (#4051)
• Use getDateString in openmeteo (#4046)
• [weather] refactor: migrate to server-side providers with centralized HTTPFetcher (#4032)
• [weather] feat: add Weather API Provider (#4036)

[testing]

• chore: remove obsolete Jest config and unit test global setup (#4044)
• replace template_spec test with config_variables test (#4034)
• refactor(clientonly): modernize code structure and add comprehensive tests (#4022)
• Switch to undici Agent for HTTPS requests (#4015)
• chore: migrate CI workflows to ubuntu-slim for faster startup times (#4007)

see https://github.com/MagicMirrorOrg/MagicMirror/releases/tag/v2.35.0