OPNSense/plugins 2e56601www/OPNProxy Makefile, www/OPNProxy/src/etc/inc/plugins.inc.d opnproxy.inc

www/OPNProxy: switch to mwexecf() use
DeltaFile
+5-6www/OPNProxy/src/etc/inc/plugins.inc.d/opnproxy.inc
+1-1www/OPNProxy/Makefile
+6-72 files

OPNSense/plugins 9f23adawww/caddy Makefile

www/caddy: revision bump after trust store vs. sudo fix
DeltaFile
+1-1www/caddy/Makefile
+1-11 files

OPNSense/plugins b50c0c3www/nginx/src/opnsense/scripts/nginx setup.php

www/nginx: another change here
DeltaFile
+4-1www/nginx/src/opnsense/scripts/nginx/setup.php
+4-11 files

OPNSense/plugins db0943anet/upnp/src/www status_upnp.php

net/upnp: safe execution change

shell_safe() is better than raw exec() although we do not have any
dynamic shell arguments to handle.  This call requires a new explode
extension (true parameter) that will be available in 25.7.8
DeltaFile
+2-2net/upnp/src/www/status_upnp.php
+2-21 files

OPNSense/plugins e2601dcnet/frr/src/etc/rc.syshook.d/carp 50-frr

net/frr: safe execution changes
DeltaFile
+3-3net/frr/src/etc/rc.syshook.d/carp/50-frr
+3-31 files

OPNSense/plugins 458997dnet/upnp/src/etc/inc/plugins.inc.d miniupnpd.inc, net/upnp/src/opnsense/mvc/app/models/OPNsense/UPnP/ACL ACL.xml

net/upnp: service improvements - additions (#5005)

DeltaFile
+47-7net/upnp/src/www/services_upnp.php
+22-8net/upnp/src/www/status_upnp.php
+20-4net/upnp/src/etc/inc/plugins.inc.d/miniupnpd.inc
+1-1net/upnp/src/opnsense/mvc/app/models/OPNsense/UPnP/ACL/ACL.xml
+1-1net/upnp/src/opnsense/mvc/app/models/OPNsense/UPnP/Menu/Menu.xml
+91-215 files

OPNSense/plugins c1b5dfenet/upnp/src/etc/inc/plugins.inc.d miniupnpd.inc

net/upnp: switch from shell_exec() to shell_safe() with automatic trim()
DeltaFile
+1-1net/upnp/src/etc/inc/plugins.inc.d/miniupnpd.inc
+1-11 files

OPNSense/plugins 0916addsecurity/acme-client Makefile, security/acme-client/src/opnsense/mvc/app/library/OPNsense/AcmeClient/LeValidation HttpOpnsense.php TlsalpnAcme.php

security/acme-client: fix legacy inclusion
DeltaFile
+7-7security/acme-client/src/opnsense/mvc/app/library/OPNsense/AcmeClient/LeValidation/HttpOpnsense.php
+7-7security/acme-client/src/opnsense/mvc/app/library/OPNsense/AcmeClient/LeValidation/TlsalpnAcme.php
+1-1security/acme-client/Makefile
+15-153 files

OPNSense/plugins 20b507enet/upnp/src/etc/inc/plugins.inc.d miniupnpd.inc

net/upnp: minor transformation as mwexecf_bg() will be removed
DeltaFile
+1-1net/upnp/src/etc/inc/plugins.inc.d/miniupnpd.inc
+1-11 files

OPNSense/plugins b92c2e6dns/rfc2136/src/etc/inc/plugins.inc.d rfc2136.inc

dns/rfc2136: second iteration using mwexecfb(), no functional changes
DeltaFile
+8-7dns/rfc2136/src/etc/inc/plugins.inc.d/rfc2136.inc
+8-71 files

OPNSense/plugins 6fba852net/frr/src/opnsense/service/templates/OPNsense/Quagga frr

net/frr: Fix snmp ospfd and ospf6d flags (#5025)

DeltaFile
+2-2net/frr/src/opnsense/service/templates/OPNsense/Quagga/frr
+2-21 files

OPNSense/plugins 3553095net/frr/src/opnsense/mvc/app/models/OPNsense/Quagga STATICd.php, net/frr/src/opnsense/service/templates/OPNsense/Quagga staticd.conf

net/frr: Fix STATIC template interface issue, use isEmpty() in validation (#5019)

* net/frr: Fix STATIC template interface issue, use isEmpty() in validation

* Properly safeguard optional parameters
DeltaFile
+12-1net/frr/src/opnsense/service/templates/OPNsense/Quagga/staticd.conf
+3-3net/frr/src/opnsense/mvc/app/models/OPNsense/Quagga/STATICd.php
+15-42 files

OPNSense/plugins 68505ednet/frr/src/opnsense/mvc/app/views/OPNsense/Quagga bfd.volt bgp.volt

net/frr: Add hint about service reload (frr-reload) vs full restart requirement (#5022)

* net/frr: Add hint about service reload (frr-reload) vs full restart requirement

* Add missing translations
DeltaFile
+8-1net/frr/src/opnsense/mvc/app/views/OPNsense/Quagga/bfd.volt
+8-1net/frr/src/opnsense/mvc/app/views/OPNsense/Quagga/bgp.volt
+8-1net/frr/src/opnsense/mvc/app/views/OPNsense/Quagga/general.volt
+8-1net/frr/src/opnsense/mvc/app/views/OPNsense/Quagga/ospf.volt
+8-1net/frr/src/opnsense/mvc/app/views/OPNsense/Quagga/ospf6.volt
+8-1net/frr/src/opnsense/mvc/app/views/OPNsense/Quagga/rip.volt
+48-61 files not shown
+56-77 files

OPNSense/plugins b6fe1d0net/frr/src/opnsense/service/templates/OPNsense/Quagga frr

net/frr: Fix snmp ospfd and ospf6d flags
DeltaFile
+2-2net/frr/src/opnsense/service/templates/OPNsense/Quagga/frr
+2-21 files

OPNSense/plugins 2fbcce5net/frr/src/opnsense/mvc/app/views/OPNsense/Quagga bfd.volt bgp.volt

Add missing translations
DeltaFile
+1-3net/frr/src/opnsense/mvc/app/views/OPNsense/Quagga/bfd.volt
+1-3net/frr/src/opnsense/mvc/app/views/OPNsense/Quagga/bgp.volt
+1-3net/frr/src/opnsense/mvc/app/views/OPNsense/Quagga/general.volt
+1-3net/frr/src/opnsense/mvc/app/views/OPNsense/Quagga/ospf.volt
+1-3net/frr/src/opnsense/mvc/app/views/OPNsense/Quagga/ospf6.volt
+1-3net/frr/src/opnsense/mvc/app/views/OPNsense/Quagga/rip.volt
+6-181 files not shown
+7-217 files

OPNSense/plugins 522b6d3net/frr/src/opnsense/mvc/app/views/OPNsense/Quagga ospf.volt bfd.volt

net/frr: Add hint about service reload (frr-reload) vs full restart requirement
DeltaFile
+10-1net/frr/src/opnsense/mvc/app/views/OPNsense/Quagga/ospf.volt
+10-1net/frr/src/opnsense/mvc/app/views/OPNsense/Quagga/bfd.volt
+10-1net/frr/src/opnsense/mvc/app/views/OPNsense/Quagga/bgp.volt
+10-1net/frr/src/opnsense/mvc/app/views/OPNsense/Quagga/general.volt
+10-1net/frr/src/opnsense/mvc/app/views/OPNsense/Quagga/ospf6.volt
+10-1net/frr/src/opnsense/mvc/app/views/OPNsense/Quagga/rip.volt
+60-61 files not shown
+70-77 files

OPNSense/plugins 6061da2net/ndp-proxy-go pkg-descr Makefile

net/ndp-proxy-go: Fix naming and add docs link (#5017)

DeltaFile
+4-2net/ndp-proxy-go/pkg-descr
+1-1net/ndp-proxy-go/Makefile
+5-32 files

OPNSense/plugins 3dc54fdnet/frr/src/opnsense/service/templates/OPNsense/Quagga staticd.conf

Properly safeguard optional parameters
DeltaFile
+12-1net/frr/src/opnsense/service/templates/OPNsense/Quagga/staticd.conf
+12-11 files

OPNSense/plugins 920ca38net/frr/src/opnsense/mvc/app/models/OPNsense/Quagga STATICd.php, net/frr/src/opnsense/service/templates/OPNsense/Quagga staticd.conf

net/frr: Fix STATIC template interface issue, use isEmpty() in validation
DeltaFile
+3-3net/frr/src/opnsense/mvc/app/models/OPNsense/Quagga/STATICd.php
+1-1net/frr/src/opnsense/service/templates/OPNsense/Quagga/staticd.conf
+4-42 files

OPNSense/plugins 0152180www/caddy/src/opnsense/service/templates/OPNsense/Caddy Caddyfile

www/caddy: Prevent sudo on startup via skip_install_trust (#5015)

This can happen when an internal domain has been added, e.g. example.internal. Caddy will then generate a self signed certificate via smallstep CA, and on startup it tries to install a root certificate for it into the FreeBSD trust store.

If running as www user, this causes sudo to appear at boot, because that is baked into smallstep CA.

https://github.com/smallstep/truststore/blob/master/truststore_freebsd.go

Via skip_install_trust, we prevent caddy from trying this.
DeltaFile
+1-0www/caddy/src/opnsense/service/templates/OPNsense/Caddy/Caddyfile
+1-01 files

OPNSense/plugins 447a2fbwww/caddy/src/opnsense/service/templates/OPNsense/Caddy Caddyfile

always skip_install_trust
DeltaFile
+1-3www/caddy/src/opnsense/service/templates/OPNsense/Caddy/Caddyfile
+1-31 files

OPNSense/plugins 66134c0www/caddy/src/opnsense/service/templates/OPNsense/Caddy Caddyfile

www/caddy: Prevent sudo on startup for unprivileged users

This can happen when an internal domain has been added, e.g. example.internal. Caddy will then generate a self signed certificate via smallstep CA, and on startup it tries to install a root certificate for it into the FreeBSD trust store.

If running as www user, this causes sudo to appear at boot, because that is baked into smallstep CA.

Via skip_install_trust, we prevent caddy from trying this.
DeltaFile
+4-0www/caddy/src/opnsense/service/templates/OPNsense/Caddy/Caddyfile
+4-01 files

OPNSense/plugins c4c5632misc/theme-flexcolor pkg-descr +POST_INSTALL.post, misc/theme-flexcolor/src/etc/rc.d flexcolor

misc/theme-flexcolor: add rc file for handling default_scheme.css

Due to not overcomplicating this with a GUI do the lower end RC so that
we users can change this easily.

This works nicely, but the import statement is cached by the browser:

@import url('default_scheme.css');

and this needs to be fixed or the plugin split.
DeltaFile
+0-380misc/theme-flexcolor/src/opnsense/www/themes/flexcolor/build/css/default_scheme.css
+36-0misc/theme-flexcolor/src/etc/rc.d/flexcolor
+16-5misc/theme-flexcolor/pkg-descr
+3-0misc/theme-flexcolor/src/etc/rc.syshook.d/early/50-flexcolor
+1-0misc/theme-flexcolor/+POST_INSTALL.post
+56-3855 files

OPNSense/plugins 33541f2misc/theme-flexcolor pkg-descr +POST_INSTALL.post, misc/theme-flexcolor/src/etc/rc.d flexcolor

misc/theme-flexcolor: add rc file for handling default_scheme.css

Due to not overcomplicating this with a GUI do the lower end RC so that
we users can change this easily.

This works nicely, but the import statement is cached by the browser:

@import url('default_scheme.css');

and this needs to be fixed or the plugin split.
DeltaFile
+0-380misc/theme-flexcolor/src/opnsense/www/themes/flexcolor/build/css/default_scheme.css
+36-0misc/theme-flexcolor/src/etc/rc.d/flexcolor
+16-5misc/theme-flexcolor/pkg-descr
+3-0misc/theme-flexcolor/src/etc/rc.syshook.d/early/50-vmware
+1-0misc/theme-flexcolor/+POST_INSTALL.post
+56-3855 files

OPNSense/plugins d96bb96misc/theme-flexcolor pkg-descr +POST_INSTALL.post, misc/theme-flexcolor/src/etc/rc.d flexcolor

misc/theme-flexcolor: add rc file for handling default_scheme.css

Due to not overcomplicating this with a GUI do the lower end RC so that
we users can change this easily.

This works nicely, but the import statement is cached by the browser:

@import url('default_scheme.css');

and this needs to be fixed or the plugin split.
DeltaFile
+0-380misc/theme-flexcolor/src/opnsense/www/themes/flexcolor/build/css/default_scheme.css
+38-0misc/theme-flexcolor/src/etc/rc.d/flexcolor
+16-5misc/theme-flexcolor/pkg-descr
+1-0misc/theme-flexcolor/+POST_INSTALL.post
+55-3854 files

OPNSense/plugins b4e0872misc/theme-flexcolor pkg-descr +POST_INSTALL.post, misc/theme-flexcolor/src/etc/rc.d flexcolor

misc/theme-flexcolor: add rc file for handling default_scheme.css

Due to not overcomplicating this with a GUI do the lower end RC so that
we users can change this easily.
DeltaFile
+0-380misc/theme-flexcolor/src/opnsense/www/themes/flexcolor/build/css/default_scheme.css
+30-0misc/theme-flexcolor/src/etc/rc.d/flexcolor
+16-5misc/theme-flexcolor/pkg-descr
+1-0misc/theme-flexcolor/+POST_INSTALL.post
+47-3854 files

OPNSense/plugins b33a6d6net/tayga/src/opnsense/mvc/app/controllers/OPNsense/Tayga/forms dialogEditStaticMapping.xml

net/tayga: fix typo in static mappings (#5010)

(cherry picked from commit 4518d481f5fcbe1d9531f9da433070784e0e7c45)
DeltaFile
+1-1net/tayga/src/opnsense/mvc/app/controllers/OPNsense/Tayga/forms/dialogEditStaticMapping.xml
+1-11 files

OPNSense/plugins 4518d48net/tayga/src/opnsense/mvc/app/controllers/OPNsense/Tayga/forms dialogEditStaticMapping.xml

net/tayga: fix typo in static mappings (#5010)

DeltaFile
+1-1net/tayga/src/opnsense/mvc/app/controllers/OPNsense/Tayga/forms/dialogEditStaticMapping.xml
+1-11 files

OPNSense/plugins e51e367net/igmp-proxy Makefile, net/igmp-proxy/src/etc/inc/plugins.inc.d igmpproxy.inc

net/igmp-proxy: remove the notion of a "realif"

Actually the last in the plugin code!
DeltaFile
+4-4net/igmp-proxy/src/etc/inc/plugins.inc.d/igmpproxy.inc
+1-1net/igmp-proxy/Makefile
+5-52 files

OPNSense/plugins 124194cdns/rfc2136 Makefile

dns/rfc2136: bump revision
DeltaFile
+1-1dns/rfc2136/Makefile
+1-11 files