OPNSense/core a19a72csrc/opnsense/mvc/app/controllers/OPNsense/Routing/Api SettingsController.php

System: Gateways: Configuration - ensure proper types are emitted in searchGatewayAction() when configd action fails.

should prevent hard failures like:

TypeError: array_key_exists(): Argument #2 ($array) must be of type array, null given in /usr/local/opnsense/mvc/app/controllers/OPNsense/Routing/Api/SettingsController.php:122 Stack trace: #0
DeltaFile
+2-2src/opnsense/mvc/app/controllers/OPNsense/Routing/Api/SettingsController.php
+2-21 files

OPNSense/core fa61217src/opnsense/mvc/app/views/OPNsense/Firewall filter_rule.volt

Firewall: Rules [new]: adjust row selection behavior for internal rules

re-use the same logic that decides checkbox rendering to disable the
relevant hover CSS and disable tabulator internal selection functionality

(cherry picked from commit 4bc542cc7fad2ccd11e08bcd7bd2266f2accefd1)
DeltaFile
+5-0src/opnsense/mvc/app/views/OPNsense/Firewall/filter_rule.volt
+5-01 files

OPNSense/core ca0adccsrc/opnsense/mvc/app/models/OPNsense/Firewall DNat.xml

Firewall: NAT: Destination NAT: Allow well known ports in local-port (#9880)

(cherry picked from commit b09a3c69ea2cf9df605c2f266134e582c77b0098)
DeltaFile
+1-0src/opnsense/mvc/app/models/OPNsense/Firewall/DNat.xml
+1-01 files

OPNSense/core 4bc542csrc/opnsense/mvc/app/views/OPNsense/Firewall filter_rule.volt

Firewall: Rules [new]: adjust row selection behavior for internal rules

re-use the same logic that decides checkbox rendering to disable the
relevant hover CSS and disable tabulator internal selection functionality
DeltaFile
+5-0src/opnsense/mvc/app/views/OPNsense/Firewall/filter_rule.volt
+5-01 files

OPNSense/core b09a3c6src/opnsense/mvc/app/models/OPNsense/Firewall DNat.xml, src/opnsense/mvc/app/views/OPNsense/Firewall nat_rule.volt

Firewall: NAT: Destination NAT: Allow well known ports in local-port (#9880)

DeltaFile
+1-0src/opnsense/mvc/app/models/OPNsense/Firewall/DNat.xml
+0-1src/opnsense/mvc/app/views/OPNsense/Firewall/nat_rule.volt
+1-12 files

OPNSense/ports e12f228opnsense/aquantia-atlantic-kmod Makefile pkg-descr

opnsense/aquantia-atlantic-kmod: switch upstream

PR: https://github.com/Aquantia/aqtion-freebsd/issues/32
DeltaFile
+22-0opnsense/aquantia-atlantic-kmod/Makefile
+7-0opnsense/aquantia-atlantic-kmod/pkg-descr
+3-0opnsense/aquantia-atlantic-kmod/distinfo
+32-03 files

OPNSense/ports da45396opnsense/update distinfo Makefile

opnsense/update: ready now ;)
DeltaFile
+3-3opnsense/update/distinfo
+1-2opnsense/update/Makefile
+4-52 files

OPNSense/core bab283bsrc/opnsense/mvc/app/models/OPNsense/Firewall DNat.xml, src/opnsense/mvc/app/views/OPNsense/Firewall nat_rule.volt

Firewall: NAT: Destination NAT: Allow well known ports in local-port
DeltaFile
+1-0src/opnsense/mvc/app/models/OPNsense/Firewall/DNat.xml
+0-1src/opnsense/mvc/app/views/OPNsense/Firewall/nat_rule.volt
+1-12 files

OPNSense/core cc1b21bsrc/etc/inc system.inc

system: use safe iteration for cert/ca in system_trust_configure()
DeltaFile
+2-2src/etc/inc/system.inc
+2-21 files

OPNSense/core 9fc6e3dsrc/opnsense/mvc/app/controllers/OPNsense/Diagnostics/Api FirewallController.php

Firewall: Diagnostics: States - replacement of SanitizeFilter() seems to have killed our state network lookup, strings should be safe to pass here, closes https://github.com/opnsense/core/issues/9876

(cherry picked from commit 9dffcbdc416a00bdbe10b3edf3ccc82ef90eb46a)
DeltaFile
+1-1src/opnsense/mvc/app/controllers/OPNsense/Diagnostics/Api/FirewallController.php
+1-11 files

OPNSense/core 6c1530asrc/opnsense/mvc/app/library/OPNsense/Core Config.php

config: ignore future backups when they exist, closes https://github.com/opnsense/core/issues/9802

Although this is quite uncommon, having a machine with its clock set in the future for some time may leave backups that prevent future backups being made (because of the configured number of backups).
Usually diskspace is not really an issue and just removing future backups without knowing what the actual time is has downsides too, so lets leave them there and ignore them to warrant normal operation.

(cherry picked from commit 52a2dea4a54998bd01e687a8f5b3880bdec31b05)
DeltaFile
+8-1src/opnsense/mvc/app/library/OPNsense/Core/Config.php
+8-11 files

OPNSense/core 0c020ecsrc/opnsense/scripts/filter/lib states.py

Firewall: Diagnostics: States - minor glitch in searching, when no specific networks are selected, match all and offered filter. closes https://github.com/opnsense/core/issues/9876

(cherry picked from commit e5e6387318d267c56780205c142f380797ccf81f)
DeltaFile
+3-1src/opnsense/scripts/filter/lib/states.py
+3-11 files

OPNSense/core 28ecdf2src/opnsense/service/modules/actions script_output.py

configd: remove constant cleanups as they may influence requests from other threads executing different commands. As the file operations are already locked, we can simply trust these and close https://github.com/opnsense/core/issues/9864

In theory we might require a bit more temp space by not removing the already executed commands, but in practice that's likely not a huge issue.
If we would like to cleanup periodically, we would require the communication to stall for a bit when performing these cleanups on cached commands or flush their contents instead of removing them (so we can lock the files in the process). For now we assume the amount of cached commands is not very large and their content is managable.

(cherry picked from commit c8cd5565ec135a0111497fde2e20e3cb79324f0d)
DeltaFile
+6-10src/opnsense/service/modules/actions/script_output.py
+6-101 files

OPNSense/core 183fe77src/etc/inc/plugins.inc.d core.inc

system: style in core.inc

(cherry picked from commit b165e23001beec365cb61b8a3c6f81dfe5e4ac66)
DeltaFile
+35-43src/etc/inc/plugins.inc.d/core.inc
+35-431 files

OPNSense/core b165e23src/etc/inc/plugins.inc.d core.inc

system: style in core.inc
DeltaFile
+35-43src/etc/inc/plugins.inc.d/core.inc
+35-431 files

OPNSense/core 8f81179src/opnsense/mvc/app/models/OPNsense/Core/ACL ACL.xml

Firewall: NAT: Destination NAT - update ACL to match at least our menu entry, closes https://github.com/opnsense/core/issues/9871

(cherry picked from commit 71cf8c0d47aebb8a66f87eb5f7428868e9e0e619)
DeltaFile
+1-1src/opnsense/mvc/app/models/OPNsense/Core/ACL/ACL.xml
+1-11 files

OPNSense/core bab1540src/opnsense/mvc/app/views/OPNsense/Firewall nat_rule.volt

firewall: remove ports from redirect port #9190 #9763
DeltaFile
+1-0src/opnsense/mvc/app/views/OPNsense/Firewall/nat_rule.volt
+1-01 files

OPNSense/core 52a2deasrc/opnsense/mvc/app/library/OPNsense/Core Config.php

config: ignore future backups when they exist, closes https://github.com/opnsense/core/issues/9802

Although this is quite uncommon, having a machine with its clock set in the future for some time may leave backups that prevent future backups being made (because of the configured number of backups).
Usually diskspace is not really an issue and just removing future backups without knowing what the actual time is has downsides too, so lets leave them there and ignore them to warrant normal operation.
DeltaFile
+8-1src/opnsense/mvc/app/library/OPNsense/Core/Config.php
+8-11 files

OPNSense/core e5e6387src/opnsense/scripts/filter/lib states.py

Firewall: Diagnostics: States - minor glitch in searching, when no specific networks are selected, match all and offered filter. closes https://github.com/opnsense/core/issues/9876
DeltaFile
+3-1src/opnsense/scripts/filter/lib/states.py
+3-11 files

OPNSense/core c8cd556src/opnsense/service/modules/actions script_output.py

configd: remove constant cleanups as they may influence requests from other threads executing different commands. As the file operations are already locked, we can simply trust these and close https://github.com/opnsense/core/issues/9864

In theory we might require a bit more temp space by not removing the already executed commands, but in practice that's likely not a huge issue.
If we would like to cleanup periodically, we would require the communication to stall for a bit when performing these cleanups on cached commands or flush their contents instead of removing them (so we can lock the files in the process). For now we assume the amount of cached commands is not very large and their content is managable.
DeltaFile
+6-10src/opnsense/service/modules/actions/script_output.py
+6-101 files

OPNSense/core 9dffcbdsrc/opnsense/mvc/app/controllers/OPNsense/Diagnostics/Api FirewallController.php

Firewall: Diagnostics: States - replacement of SanitizeFilter() seems to have killed our state network lookup, strings should be safe to pass here, closes https://github.com/opnsense/core/issues/9876
DeltaFile
+1-1src/opnsense/mvc/app/controllers/OPNsense/Diagnostics/Api/FirewallController.php
+1-11 files

OPNSense/core 71cf8c0src/opnsense/mvc/app/models/OPNsense/Core/ACL ACL.xml

Firewall: NAT: Destination NAT - update ACL to match at least our menu entry, closes https://github.com/opnsense/core/issues/9871
DeltaFile
+1-1src/opnsense/mvc/app/models/OPNsense/Core/ACL/ACL.xml
+1-11 files

OPNSense/src b4ddb3eusr.sbin/bsdinstall/scripts bootconfig

bsdinstall: fix EFI boot entry creation

update_uefi_bootentry assumes that the caller sets FREEBSD_BOOTNAME and
mntpt, which isn't the case anymore. The result is that there is no
"FreeBSD" boot entry created/updated after install. Most machines manage
to boot from the removable media path (if the loader is installed there
too), but some don't.

Take the loader's path as an argument and rename the variable used in
the ZFS mirror loop so mntpt can be reused below.

Also mark nentries as a local variable so it doesn't leak out of the
function.

PR:             293385
Fixes:          494de51bc0074472d1b01604f085daea0844f240
MFC after:      2 days
Reviewed by:    imp
Differential Revision:  https://reviews.freebsd.org/D55469

    [2 lines not shown]
DeltaFile
+14-11usr.sbin/bsdinstall/scripts/bootconfig
+14-111 files

OPNSense/plugins 155aa2ewww/caddy pkg-descr Makefile

www/caddy: Add changelog and bump plugin version to v2.1.0 (#5270)

DeltaFile
+28-17www/caddy/pkg-descr
+1-2www/caddy/Makefile
+29-192 files

OPNSense/plugins bac0289databases/redis pkg-descr Makefile, databases/redis/src/opnsense/mvc/app/views/OPNsense/Redis index.volt

databases/redis: sync with master
DeltaFile
+4-7databases/redis/src/opnsense/mvc/app/views/OPNsense/Redis/index.volt
+1-3databases/redis/pkg-descr
+1-1databases/redis/Makefile
+6-113 files

OPNSense/plugins 1e2acfddatabases/redis pkg-descr Makefile

databases/redis: bump for latest change
DeltaFile
+1-3databases/redis/pkg-descr
+1-1databases/redis/Makefile
+2-42 files

OPNSense/plugins d150698.github pull_request_template.md

Contributing: Add plugin pull-request template (#5269)

(cherry picked from commit 4f7655a0ae15097915de070d6a6d275f46153060)
DeltaFile
+28-0.github/pull_request_template.md
+28-01 files

OPNSense/plugins 4f7655a.github pull_request_template.md

Contributing: Add plugin pull-request template (#5269)

DeltaFile
+28-0.github/pull_request_template.md
+28-01 files

OPNSense/plugins 67dfd23security/openvpn-legacy Makefile, security/openvpn-legacy/src/www vpn_openvpn_server.php

security/openvpn-legacy: sync with master
DeltaFile
+1-1security/openvpn-legacy/src/www/vpn_openvpn_server.php
+1-0security/openvpn-legacy/Makefile
+2-12 files

OPNSense/plugins ff0a8e1security/netbird Makefile, security/netbird/src/opnsense/mvc/app/controllers/OPNsense/Netbird/forms settings.xml

security/netbird: sync with master
DeltaFile
+30-0security/netbird/src/opnsense/mvc/app/controllers/OPNsense/Netbird/forms/settings.xml
+21-1security/netbird/src/opnsense/mvc/app/models/OPNsense/Netbird/Settings.xml
+5-0security/netbird/src/opnsense/mvc/app/models/OPNsense/Netbird/Settings.php
+1-1security/netbird/Makefile
+57-24 files