OPNSense/core 6cd2661src/etc/inc filter.inc

filter:bogons - remove duplicate table definition and make sure bogonsv6 always exists, closes https://github.com/opnsense/core/issues/8212

In the long run, we should consider moving the bogons alias functionality to our standard table update, perhaps by implementing a "file" type to link a local file.
For now just remove the duplication and make sure bogonsv6 always exists, even when its empty.
DeltaFile
+18-11src/etc/inc/filter.inc
+18-111 files

OPNSense/core 12d15b2src/opnsense/mvc/app/views/OPNsense/Diagnostics traffic.volt

traffic: account for ChartJS v4 upgrade here as well
DeltaFile
+4-4src/opnsense/mvc/app/views/OPNsense/Diagnostics/traffic.volt
+4-41 files

OPNSense/core a6760casrc/opnsense/www/js chart.js chartjs-plugin-colorschemes.js

system: upgrade ChartJS to v4

A couple of notes:

- the streaming plugin is not officially supported with ChartJS v4. Instead, a fork
has been used (https://socket.dev/npm/package/@robloche/chartjs-plugin-streaming/overview/3.1.0).
This fork required a oneline-fix which has as of yet not been applied to the
minified or regular .js file, only to the .esm.js file
(see https://socket.dev/npm/package/@robloche/chartjs-plugin-streaming/diff/3.1.0).
- Only the .umd.js version of ChartJSv4 seems to work out of the box.
- The colorschemes plugin is also a fork (https://github.com/MaximBelov/chartjs-plugin-colorschemes)
- adapter-moment works out of the box.
- This commit has not been thoroughly tested across all usages of ChartJS in the UI.
- The responsive resizing nature of canvas elements using ChartJS don't seem to work
anymore when expanding a widget.
DeltaFile
+0-13,525src/opnsense/www/js/chart.js
+0-1,222src/opnsense/www/js/chartjs-plugin-colorschemes.js
+0-72src/opnsense/www/js/chartjs-adapter-moment.js
+8-8src/opnsense/www/js/chartjs-plugin-streaming.js
+14-0src/opnsense/www/js/chart.umd.js
+0-13src/opnsense/www/js/chart.min.js
+22-14,8405 files not shown
+31-14,86011 files

OPNSense/core 244c119src/etc/inc/plugins.inc.d unbound.inc

unbound: fixup permission on copy; closes #8133

(cherry picked from commit 14bdcc9d3d76a62c3c82929825f1b53a7cf73124)
DeltaFile
+1-0src/etc/inc/plugins.inc.d/unbound.inc
+1-01 files

OPNSense/core 14bdcc9src/etc/inc/plugins.inc.d unbound.inc

unbound: fixup permission on copy; closes #8133
DeltaFile
+1-0src/etc/inc/plugins.inc.d/unbound.inc
+1-01 files

OPNSense/core 0e2043csrc/etc/inc auth.inc

system: oops #8221
DeltaFile
+1-1src/etc/inc/auth.inc
+1-11 files

OPNSense/core b5f77eesrc/opnsense/mvc/app/models/OPNsense/Core ACL.php

acl: prioritize dashboard and ui routes for landing page
DeltaFile
+22-2src/opnsense/mvc/app/models/OPNsense/Core/ACL.php
+22-21 files

OPNSense/core d09cb92src/opnsense/mvc/app/views/layouts default.volt

system: remove status delay

With the introduction of the banners, the delay has become
a bit of a nuisance due to shifting elements
DeltaFile
+1-4src/opnsense/mvc/app/views/layouts/default.volt
+1-41 files

OPNSense/core 49f1b0dsrc/opnsense/mvc/app/controllers/OPNsense/Auth/forms dialogUser.xml

users: remove unused client certificate field for now

There's no model property backing it so this is probably a leftover
from the implementation.
DeltaFile
+0-6src/opnsense/mvc/app/controllers/OPNsense/Auth/forms/dialogUser.xml
+0-61 files

OPNSense/core 8a8d411src/opnsense/mvc/app/models/OPNsense/Core/ACL ACL.xml

system: adjust ACL for system status accordingly for previous
DeltaFile
+1-1src/opnsense/mvc/app/models/OPNsense/Core/ACL/ACL.xml
+1-11 files

OPNSense/core 1b2abc8src/opnsense/www/js opnsense_status.js

system: handle privileges for notifications
DeltaFile
+10-1src/opnsense/www/js/opnsense_status.js
+10-11 files

OPNSense/core 6d75f5dsrc/opnsense/mvc/app/models/OPNsense/Auth/FieldTypes StoreB64Field.php

mvc: allow to reset StoreB64Field values #8221
DeltaFile
+2-0src/opnsense/mvc/app/models/OPNsense/Auth/FieldTypes/StoreB64Field.php
+2-01 files

OPNSense/core d85bf8csrc/opnsense/mvc/app/controllers/OPNsense/Auth/Api GroupController.php UserController.php

system: configdpRun() needs to be used #8221

In the group case that is a refactor, in the user case that
is a bugfix because the argument was not passed...
DeltaFile
+5-3src/opnsense/mvc/app/controllers/OPNsense/Auth/Api/GroupController.php
+3-3src/opnsense/mvc/app/controllers/OPNsense/Auth/Api/UserController.php
+8-62 files

OPNSense/core 672c3dasrc/etc/inc auth.inc, src/opnsense/scripts/auth sync_user.php

system: more of the same, logic repair #8221
DeltaFile
+2-2src/etc/inc/auth.inc
+1-1src/opnsense/scripts/auth/sync_user.php
+3-32 files

OPNSense/core ad358edsrc/etc/inc auth.inc, src/etc/inc/plugins.inc.d core.inc

system: more of the same for #8221
DeltaFile
+2-2src/etc/inc/auth.inc
+2-1src/etc/inc/plugins.inc.d/core.inc
+4-32 files

OPNSense/core 43cf2fcsrc/opnsense/scripts/auth sync_user.php

system: root shell is implicit #8221
DeltaFile
+2-1src/opnsense/scripts/auth/sync_user.php
+2-11 files

OPNSense/core 32b8e9bsrc/opnsense/mvc/app/controllers/OPNsense/Core/Api SystemController.php, src/opnsense/mvc/app/library/OPNsense/System SystemStatus.php

system: overzealous status dot in UI due to banner/notification intermingling

While here, the dismissStatus relied on an objectMap being set, requiring
us to collect status in the constructor anyway.
DeltaFile
+20-15src/opnsense/mvc/app/controllers/OPNsense/Core/Api/SystemController.php
+17-7src/opnsense/mvc/app/library/OPNsense/System/SystemStatus.php
+3-0src/opnsense/www/js/opnsense_status.js
+40-223 files

OPNSense/core f32b64fsrc/etc opnsense-update.conf.in

firmware: getting ready for 25.1-RC1
DeltaFile
+2-0src/etc/opnsense-update.conf.in
+2-01 files

OPNSense/core ddbb390src/opnsense/mvc/app/library/OPNsense/System SystemStatus.php

system: style
DeltaFile
+2-1src/opnsense/mvc/app/library/OPNsense/System/SystemStatus.php
+2-11 files

OPNSense/core a77b5a3src/opnsense/mvc/app/library/OPNsense/System SystemStatus.php AbstractStatus.php, src/opnsense/mvc/app/library/OPNsense/System/Status OpensshOverrideStatus.php

system: add scope to status class to limit banner notifications to specific pages

While here, marking a status as a banner will exclude it from the notifications
popup
DeltaFile
+24-9src/opnsense/mvc/app/library/OPNsense/System/SystemStatus.php
+9-0src/opnsense/mvc/app/library/OPNsense/System/AbstractStatus.php
+3-4src/opnsense/scripts/system/status.php
+2-3src/opnsense/service/conf/actions.d/actions_system.conf
+2-2src/opnsense/www/js/opnsense_status.js
+2-1src/opnsense/mvc/app/library/OPNsense/System/Status/OpensshOverrideStatus.php
+42-191 files not shown
+43-207 files

OPNSense/core fd39bafsrc/opnsense/mvc/app/controllers/OPNsense/Core/Api SystemController.php, src/opnsense/mvc/app/library/OPNsense/System AbstractStatus.php SystemStatus.php

system: adjust for overrides banner

Introduces the isBanner property, which explicitly defines the message
as a banner, which doesn't necessarily have a relation to
the persistent property. While here, update the UI to remove
cursor events when the message doesn't have a location set.
DeltaFile
+197-154src/opnsense/www/js/opnsense_status.js
+48-0src/opnsense/mvc/app/library/OPNsense/System/Status/OpensshOverrideStatus.php
+9-3src/opnsense/mvc/app/library/OPNsense/System/AbstractStatus.php
+4-4src/opnsense/mvc/app/controllers/OPNsense/Core/Api/SystemController.php
+2-1src/opnsense/mvc/app/library/OPNsense/System/SystemStatus.php
+1-1src/opnsense/mvc/app/library/OPNsense/System/Status/FirewallStatus.php
+261-1634 files not shown
+265-16410 files

OPNSense/core 3c406c1src/opnsense/www/js opnsense_status.js

system: decouple UI logic using pub-sub mechanism
DeltaFile
+197-159src/opnsense/www/js/opnsense_status.js
+197-1591 files

OPNSense/core d4c35c1src/opnsense/www/js opnsense_status.js

system: rewire the updateSystemStatus call
DeltaFile
+2-2src/opnsense/www/js/opnsense_status.js
+2-21 files

OPNSense/core 1b7af62src/opnsense/mvc/app/controllers/OPNsense/Core/Api SystemController.php, src/opnsense/mvc/app/library/OPNsense/System AbstractStatus.php SystemStatus.php

system: adjust for overrides banner

Introduces the isBanner property, which explicitly defines the message
as a banner, which doesn't necessarily have a relation to
the persistent property. While here, update the UI to remove
cursor events when the message doesn't have a location set.
DeltaFile
+9-6src/opnsense/www/js/opnsense_status.js
+7-1src/opnsense/mvc/app/library/OPNsense/System/AbstractStatus.php
+4-4src/opnsense/mvc/app/controllers/OPNsense/Core/Api/SystemController.php
+2-1src/opnsense/mvc/app/library/OPNsense/System/SystemStatus.php
+1-0src/opnsense/mvc/app/library/OPNsense/System/Status/LiveMediaStatus.php
+1-0src/opnsense/mvc/app/library/OPNsense/System/Status/SystemBootingStatus.php
+24-126 files

OPNSense/core 83975b5src/etc/inc config.inc filter.lib.inc, src/opnsense/mvc/app/models/OPNsense/Base/Menu MenuSystem.php

Revert "Firewall - adhere to best practices  (#8010)" et al

This reverts commit 8e44615f865927fcd44d16720356d3a43b2b7d5f.
This reverts commit 9b0e211213929dda4ae18158b7eba5eae1ee7217.
This reverts commit fed2a352694a789cc09787cf93ec37ee23778ff9.
DeltaFile
+0-12src/opnsense/mvc/app/models/OPNsense/Firewall/Filter.xml
+4-7src/etc/inc/config.inc
+11-0src/etc/inc/filter.lib.inc
+3-2src/www/firewall_nat_edit.php
+1-1src/opnsense/mvc/app/models/OPNsense/Base/Menu/MenuSystem.php
+1-1src/www/firewall_nat_out_edit.php
+20-233 files not shown
+22-269 files

OPNSense/core 515e56f. plist, src/opnsense/mvc/app/library/OPNsense/System AbstractStatus.php

system: POC for overrides banner mentioned in #8206
DeltaFile
+48-0src/opnsense/mvc/app/library/OPNsense/System/Status/OpensshOverrideStatus.php
+3-1src/opnsense/www/js/opnsense_status.js
+2-2src/opnsense/mvc/app/library/OPNsense/System/AbstractStatus.php
+1-1src/opnsense/mvc/app/library/OPNsense/System/Status/CrashReporterStatus.php
+1-1src/opnsense/mvc/app/library/OPNsense/System/Status/FirewallStatus.php
+1-0plist
+56-56 files

OPNSense/core 1850661src/opnsense/mvc/app/library/OPNsense/System/Status SystemBootingStatus.php DiskSpaceStatus.php

system: dismissStatus() already implemented as such
DeltaFile
+0-5src/opnsense/mvc/app/library/OPNsense/System/Status/SystemBootingStatus.php
+0-5src/opnsense/mvc/app/library/OPNsense/System/Status/DiskSpaceStatus.php
+0-5src/opnsense/mvc/app/library/OPNsense/System/Status/LiveMediaStatus.php
+0-153 files

OPNSense/core 7235dd5. plist

pkg: fix plist
DeltaFile
+1-0plist
+1-01 files

OPNSense/core 99a4563src/etc/inc/plugins.inc.d openssh.inc, src/etc/ssh/sshd_config.d README

system: allow custom additions to sshd_config (#8206)

DeltaFile
+5-0src/etc/ssh/sshd_config.d/README
+1-0src/etc/inc/plugins.inc.d/openssh.inc
+6-02 files

OPNSense/core 20402d1. LICENSE

LICENSE: sync
DeltaFile
+3-3LICENSE
+3-31 files