FreshBSD

ipsec: plugin use indirect calls

system: style update

sysutils/syslog-ng: sync with upstream

Taken from: HardenedBSD

net/py-speedtest-cli: sync with upstream

Taken from: HardenedBSD

misc/p5-Array-Diff: sync with upstream

Taken from: HardenedBSD

*/*: sync with upstream

Taken from: HardenedBSD

dhcp/leases, forgot to replace from-to with address range min, max. for 
https://github.com/opnsense/core/issues/3487

dhcp/leases, simplify interface lookup and make it more consistent. should fix 
https://github.com/opnsense/core/issues/3487

Merge branch 'clystron-dhcp_failover_params'

minor cleanups for https://github.com/opnsense/core/pull/3484 and handle 0 values.

Merge branch 'dhcp_failover_params' of https://github.com/clystron/core into 
clystron-dhcp_failover_params

pkg: move python dep to 3

system: reduce diff vs. stable

openvpn: revamp status page

system: rename a number of service-related functions

config: add burp; closes #106

build: propagate python versions to plugins and core

Squid log webUI in readable date format #1831 (#3326)

(cherry picked from commit 1c1b8bcac95b07e0c63b95519d139273968d1ef6)
(cherry picked from commit 8fe295f70ece19df4cdbb345982f797dd241c71a)

captiveportal, use "onestop" to stop captiveportal, when there's no zone configured "stop" 
would be skipped since the service is disabled. issue seems to be introduced in 
https://github.com/opnsense/core/commit/0299224578b982c1e28681fbb967a49a96b58017

(cherry picked from commit 10108b0615d53640d55ad7b47a77464ba0bbdce3)

system: restyle config backup page

filter, port forward. support multiple interfaces per rule, when used and an automatic 
filter rule association is created it will be set as "Floating" + quick. closes 
https://github.com/opnsense/core/issues/1242

(cherry picked from commit 7af64730812680b63d95bb4c8d512e9ed6313615)

system: stop using a lock around resolv.conf handling #2267

This might kill a bit of delay in function use by doing an atomic
move to update resolv.conf.  Even if several instances are running
at the same time the contents of the file will be the same now.

I don't expect issues with the DNS route updates either: even if
they are removed or added twice, they will always end up being there.

(cherry picked from commit 5f4315c40ceeb6a9235cdaa4e5d758b777f72b1f)

system: login not using cache-safe image yet

(cherry picked from commit 65e31e7bbf125ccb7a58c091c1f8a62231bc0f68)
(cherry picked from commit aa9c83571fb7fcd34b51550e10cb1414b55e97d4)

auth / ldap, add group sync

PR: https://github.com/opnsense/core/issues/3471

(cherry picked from commit 5f743941754294bd2651616484c8b97cf53ae26a)
(cherry picked from commit ccdd7f65860bb3e2fc991fb1039011fee49adcac)
(cherry picked from commit 24b90841d16bb9f2ab2dcadf57abf83c11b23c3c)
(cherry picked from commit 1d7f87352819e162fe8a3645f7df195cd4c92016)

system: allow an arbitrary group for sudo like ssh login; closes #3407

(cherry picked from commit 6e727e43d2fde40e9d23ed3554c0404eb4ef153a)

log view, fix regression https://github.com/opnsense/plugins/issues/1345 (missing part of 
https://github.com/opnsense/core/commit/11f359c94afaad5d603c81fe1d853871b1b5fb44)

system: add pluginctl -s support

For legacy components route -s option through plugins_services()
to get a list of services that can be controlled like the GUI
controls.  E.g.:

    # pluginctl dhcpd [start|stop|restart]

PR: https://forum.opnsense.org/index.php?topic=12781.0

www/nginx: add TLS 1.3 0-RTT handshake support (HTTPS performance) (#1112)

* www/nginx: add TLS 1.3 0-RTT handshake support
* www/nginx: model bug fix
* www/nginx: Release note

opnsense/phalcon4: update to alpha 5

Framework: partially sync with upstream

Taken from: HardenedBSD

devel/p5-DateTime-HiRes: sync with upstream

Taken from: HardenedBSD

net/wireguard-go: sync with upstream

Taken from: HardenedBSD

graphics/giflib: sync with upstream

Taken from: HardenedBSD

www/p5-Mojolicious: sync with upstream

Taken from: HardenedBSD

textproc/p5-PPI: sync with upstream

Taken from: HardenedBSD

net/p5-Net-HTTP: sync with upstream

Taken from: HardenedBSD

devel/p5-Test2-Suite: sync with upstream

Taken from: HardenedBSD

devel/p5-Pod-Coverage: sync with upstream

Taken from: HardenedBSD

devel/p5-DateTime-TimeZone: sync with upstream

Taken from: HardenedBSD

devel/p5-Data-Dump: sync with upstream

Taken from: HardenedBSD

archivers/p5-Archive-Any-Lite: sync with upstream

Taken from: HardenedBSD

www/p5-HTTP-Date: sync with upstream

Taken from: HardenedBSD

www/p5-HTTP-Daemon: sync with upstream

Taken from: HardenedBSD

sysutils/py-filelock: sync with upstream

Taken from: HardenedBSD

net/py-pysocks: sync with upstream

Taken from: HardenedBSD

devel/py-hypothesis: sync with upstream

Taken from: HardenedBSD

lang/perl5.28: sync with upstream

Taken from: HardenedBSD

*/*: sync with upstream

Taken from: HardenedBSD

captiveportal, use "onestop" to stop captiveportal, when there's no zone configured "stop" 
would be skipped since the service is disabled. issue seems to be introduced in 
https://github.com/opnsense/core/commit/0299224578b982c1e28681fbb967a49a96b58017

system: fix netflow lib permission