# 🎉 Node-RED 4.0 Beta 4 (the final one) released

**URL:** https://discourse.nodered.org/t/node-red-4-0-beta-4-the-final-one-released/88387
**Category:** News
**Tags:** docker
**Created:** [30 May 2024 16:23 UTC](https://discourse.nodered.org/t/node-red-4-0-beta-4-the-final-one-released/88387 "2024-05-30T16:23:09Z")
**Posts on this page:** 9
**Page:** 1

<div class="post-metadata">

### Author: ![knolleary](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/knolleary/32/3_2.png) [@knolleary](https://discourse.nodered.org/u/knolleary)
#### Post date: [30 May 2024 16:23 UTC](https://discourse.nodered.org/t/node-red-4-0-beta-4-the-final-one-released/88387/1 "2024-05-30T16:23:09Z")

</div>

🎉 The fourth and **final**  **beta** release of Node-RED 4.0 is now available!

**Node-RED 4.x requires at least Node 18.x. We recommend using Node 20**

We weren't going to do another beta release, but some churn in our dependencies over the last few days means we've had to make some bigger dependency updates than we were planning. In particular the `mqtt` module has had a major version update. Whilst it all looks good in our local testing, it felt sensible to do one more beta refresh. I know this delays getting to the final release, but we want to make sure we don't rush out anything at the last minute.

There have been a number of other fixes and small enhancements made alongside the dependency updates.

The [Change Log](https://github.com/node-red/node-red/blob/525d7356feaa9bd80b46a9bceafcdaaa02b46183/CHANGELOG.md) has the full list of changes.

**Note** : if any issues are reported against the beta, we'll update this post to list them here. If you hit a problem, please do check back here before adding a comment.

## Known Issues

- _none_

## Updated Proxy Handling

@Steve-Mcl has done a good job tidying up our support for proxies with the HTTP Request node. Our existing behaviour had a number of issues and didn't fully support the various standard environment variables used to configure proxies.

Details are in the [original issue](https://github.com/node-red/node-red/issues/3904) and the [pull request](https://github.com/node-red/node-red/pull/4616) that fixed it.

## Better feedback for read-only users

Previously if a user had read-only access to the editor, they could make changes and click the deploy button - only to be told at that point they cannot make changes.

With this release, the Deploy button now shows a lock icon if the current user doesn't have permission to deploy changes. They can still make changes in the workspace, but the deploy button won't become enabled.

 ![image](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/3X/c/7/c75ace64ea4cee0f86af0792cc65e132c544c324.png)

## Other updates

- Middle mouse clicking now pans the workspace properly on Windows - thanks [corentin-sodebo-voile](https://github.com/corentin-sodebo-voile)
- `node-red --version` now reports the node-red, node.js and os information without starting Node-RED.
- A new `httpAdminCookieOptions` option can be used to customise the options set on cookies as part of the authentication system
- Various code hygiene fixes from [Rotzbua](https://github.com/Rotzbua)
- Various tooltips and TypedInput fixes from @GogoVega

* * *

Be sure to read through the [Change Log](https://github.com/node-red/node-red/blob/c107c5fc92314ec8bfa9fe0b0d09e78d56b2f60c/CHANGELOG.md#400-beta3-beta-release) to see what else is in there.

## Installing the beta

If you want to try out the beta, you will need specify node-red@next when you use npm to update. Without the `@next` you'll still get 3.x

So on a Pi you'd do:

```auto
sudo npm install -g --unsafe-perm node-red@next

```

## Docker images

The beta images are available under `nodered/node-red-dev:v4.0.0-beta.4` - with the default image being based on node 20.

## Reporting problems

If you hit any problems, please report them either as a reply on this topic, or in the #core-dev slack channel. Please do not post new topics to the forum regarding the beta as that could confuse users who are not using the beta.

## Outstanding work

This would have been the full release if it weren't for the dependency updates we've had to make. So expect the full release in the next 2 weeks.... which is what I said last time, but there is barely anything left to do at this point.

---

<div class="post-metadata">

### Author: ![jbudd](https://avatars.discourse-cdn.com/v4/letter/j/5f8ce5/32.png) [@jbudd](https://discourse.nodered.org/u/jbudd)
#### Post date: [30 May 2024 18:28 UTC](https://discourse.nodered.org/t/node-red-4-0-beta-4-the-final-one-released/88387/2 "2024-05-30T18:28:53Z")

</div>

When I install it I get these warnings

```auto
 deprecated inflight@1.0.6: This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful.
npm WARN deprecated npmlog@5.0.1: This package is no longer supported.
npm WARN deprecated rimraf@3.0.2: Rimraf versions prior to v4 are no longer supported
npm WARN deprecated are-we-there-yet@2.0.0: This package is no longer supported.
npm WARN deprecated glob@7.2.3: Glob versions prior to v9 are no longer supported
npm WARN deprecated gauge@3.0.2: This package is no longer supported.

```

Are any of these from the core modules just installed or all from contrib nodes?  
Especially, is inflight@1.0.6 part of the core?

---

<div class="post-metadata">

### Author: ![knolleary](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/knolleary/32/3_2.png) [@knolleary](https://discourse.nodered.org/u/knolleary)
#### Post date: [30 May 2024 18:36 UTC](https://discourse.nodered.org/t/node-red-4-0-beta-4-the-final-one-released/88387/3 "2024-05-30T18:36:19Z")

</div>

They are a few layers down in the core dependencies and there aren't currently updates available to eliminate them. The `inflight` deprecation only happened last week and it's going to take a bit of time to filter down the dependency tree.

This is one of the motivations for the mqtt module update I mentioned.

---

<div class="post-metadata">

### Author: ![knolleary](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/knolleary/32/3_2.png) [@knolleary](https://discourse.nodered.org/u/knolleary)
#### Post date: [30 May 2024 18:47 UTC](https://discourse.nodered.org/t/node-red-4-0-beta-4-the-final-one-released/88387/4 "2024-05-30T18:47:22Z")

</div>

Also worth adding, _none_ of those deprecated modules are on functional code paths used by Node-RED. Unfortunately we don't have any way to suppress the warnings. I'm hoping updates filter their way through in the next week or two. The `inflight` module was deprecated despite having 43 million weekly downloads - it is going to impact _lots_ of people.

---

<div class="post-metadata">

### Author: ![jbudd](https://avatars.discourse-cdn.com/v4/letter/j/5f8ce5/32.png) [@jbudd](https://discourse.nodered.org/u/jbudd)
#### Post date: [30 May 2024 18:52 UTC](https://discourse.nodered.org/t/node-red-4-0-beta-4-the-final-one-released/88387/5 "2024-05-30T18:52:25Z")

</div>

> [@On another topic](https://discourse.nodered.org/t/82487/2):
>
> Secure by default for the next major version has been discussed between the core Devs. Nothing is set in stone or decided yet, just letting you know it has been discussed. Watch this space.

> [@On another topic](https://discourse.nodered.org/t/82487/7):
>
> > [@On another topic](https://discourse.nodered.org/t/82487/4):
> >
> > > [@On another topic](https://discourse.nodered.org/t/82487/2):
> > >
> > > Watch this space.
> > 
> > Still watching, no activity spotted yet.
> 
> We have only just got 3.1.x patch releases out the door.
> 
> V4.x stream is where it ~~will~~  ~~might~~ should be worked on.

I don't see anything on security in the changelog for v4.0?

---

<div class="post-metadata">

### Author: ![knolleary](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/knolleary/32/3_2.png) [@knolleary](https://discourse.nodered.org/u/knolleary)
#### Post date: [30 May 2024 18:53 UTC](https://discourse.nodered.org/t/node-red-4-0-beta-4-the-final-one-released/88387/6 "2024-05-30T18:53:28Z")

</div>

True. Still not got a clear plan for _core_ changes (rather than changes that could be made in the installer at any time).

---

<div class="post-metadata">

### Author: ![jbudd](https://avatars.discourse-cdn.com/v4/letter/j/5f8ce5/32.png) [@jbudd](https://discourse.nodered.org/u/jbudd)
#### Post date: [30 May 2024 19:09 UTC](https://discourse.nodered.org/t/node-red-4-0-beta-4-the-final-one-released/88387/7 "2024-05-30T19:09:33Z")

</div>

Thanks.  
Excellent work regardless.

---

<div class="post-metadata">

### Author: ![Paul-Reed](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/paul-reed/32/66906_2.png) [@Paul-Reed](https://discourse.nodered.org/u/Paul-Reed)
#### Post date: [19 June 2024 08:32 UTC](https://discourse.nodered.org/t/node-red-4-0-beta-4-the-final-one-released/88387/8 "2024-06-19T08:32:58Z")

</div>

A post was split to a new topic: [Dashboard2 sub-groups disappeared](https://discourse.nodered.org/t/dashboard2-sub-groups-disappeared/88790)

---

<div class="post-metadata">

### Author: ![knolleary](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/knolleary/32/3_2.png) [@knolleary](https://discourse.nodered.org/u/knolleary)
#### Post date: [20 June 2024 13:55 UTC](https://discourse.nodered.org/t/node-red-4-0-beta-4-the-final-one-released/88387/9 "2024-06-20T13:55:03Z")

</div>


