Release Note 🎉

CLI Update Command · Security Improvements · Benchmark Fixes

MQTTX 1.13.3 adds a CLI update command, improves Desktop and Agent security, and fixes and optimizes the CLI benchmark command.

Update MQTTX CLI ⬆️

Run mqttx update to update an existing CLI installation. Standalone binaries update in place; npm and Homebrew installations use their package manager.

Security improvements 🔒

Strengthen Agent operation approvals, script execution, and content handling, and improve API key storage and CLI download verification.

Other improvements 🌈

Desktop:

• Support more payload formats for Last-Will messages.
• Show more complete operation details on Agent approval cards.

Distribution:

• Include SHA256SUMS with release downloads.

Fixes 🛠

CLI:

• Correct benchmark publish and subscribe rates and active connection counts.
• Fix workloads failing to start after an initial connection retry and split-file replay stalling after a disconnect.
• Fix %c not using the actual ClientId in benchmark and simulation topics.
• Accept whitespace around MQTT version options.

After upgrading, check subscriptions to topics that use %c.

Desktop:

• Correct Last-Will topics in connection history and Hex payload encoding.
• Improve Agent replies, MCP tool handling, and desktop startup compatibility.

What's Changed

• docs: recommend the one-line MQTTX CLI installer by @ysfscream in https://github.com/emqx/MQTTX/pull/2128
• docs: give each CLI install command its own code block by @ysfscream in https://github.com/emqx/MQTTX/pull/2135
• docs: refresh Agent and Dashboard content for v1.13.2 by @ysfscream in https://github.com/emqx/MQTTX/pull/2137
• docs: restore general product documentation scope by @ysfscream in https://github.com/emqx/MQTTX/pull/2138
• fix(agent): disable raw HTML in chat replies by @ysfscream in https://github.com/emqx/MQTTX/pull/2141
• fix(agent): require approval for every script change by @ysfscream in https://github.com/emqx/MQTTX/pull/2142
• fix(desktop): harden payload script execution by @ysfscream in https://github.com/emqx/MQTTX/pull/2143
• fix(agent): keep the first MCP tool when names collide by @ysfscream in https://github.com/emqx/MQTTX/pull/2152
• fix(desktop): verify the CLI download before installing it by @ysfscream in https://github.com/emqx/MQTTX/pull/2150
• fix(agent): store the API key with the OS keychain by @ysfscream in https://github.com/emqx/MQTTX/pull/2151
• fix(desktop): sanitize changelog HTML and drop Node from the update window by @ysfscream in https://github.com/emqx/MQTTX/pull/2149
• fix(agent): stop KaTeX from rendering raw HTML in replies by @ysfscream in https://github.com/emqx/MQTTX/pull/2144
• fix(agent): show what will run on approval cards by @ysfscream in https://github.com/emqx/MQTTX/pull/2145
• fix(cli): correct benchmark rates and connection recovery by @ysfscream in https://github.com/emqx/MQTTX/pull/2153
• fix(agent): treat tool output as untrusted data by @ysfscream in https://github.com/emqx/MQTTX/pull/2147
• fix(cli): trim whitespace around MQTT version options by @ysfscream in https://github.com/emqx/MQTTX/pull/2157
• docs: clarify Agent permissions for v1.13.3 by @ysfscream in https://github.com/emqx/MQTTX/pull/2156
• fix(desktop): restrict external links and remote images by @ysfscream in https://github.com/emqx/MQTTX/pull/2148
• fix(agent): tighten approval for deletes and other state changes by @ysfscream in https://github.com/emqx/MQTTX/pull/2146
• ci(release): publish SHA256SUMS with each release by @ysfscream in https://github.com/emqx/MQTTX/pull/2155
• feat(cli): add update command by @ysfscream in https://github.com/emqx/MQTTX/pull/2154
• feat(connections): support all payload formats for Last-Will messages by @Killian0812 in https://github.com/emqx/MQTTX/pull/2140
• refactor(cli): simplify the update command by @ysfscream in https://github.com/emqx/MQTTX/pull/2158
• chore: bump version to 1.13.3 by @ysfscream in https://github.com/emqx/MQTTX/pull/2159

New Contributors

• @Killian0812 made their first contribution in https://github.com/emqx/MQTTX/pull/2140

Full Changelog: https://github.com/emqx/MQTTX/compare/v1.13.2...v1.13.3