OPNSense/core e0e7e0bsrc/etc/inc/plugins.inc.d dnsmasq.inc

Update ICANN Trust Anchor to include the new one which will be active in 2026 (#7852)

Signed-off-by: Jagveer Loky (jagveer at cyberstorm.mu)

Signed-off-by: Jagveer Loky (jagveer at cyberstorm.mu)
DeltaFile
+1-0src/etc/inc/plugins.inc.d/dnsmasq.inc
+1-01 files

OPNSense/core 909e945src/opnsense/mvc/app/models/OPNsense/Auth User.xml

System: Access: Users: add missing dashboard container
DeltaFile
+1-0src/opnsense/mvc/app/models/OPNsense/Auth/User.xml
+1-01 files

OPNSense/core 7f62439. Makefile

make: move to better spot
DeltaFile
+2-2Makefile
+2-21 files

OPNSense/core 9176999. Makefile

make: add "glint" target ;)
DeltaFile
+2-0Makefile
+2-01 files

OPNSense/core 514f87asrc/etc/inc auth.inc, src/opnsense/service/templates/OPNsense/Auth system.pam sshd.pam

System: Access: Users - remove support for local passwords

Since https://github.com/opnsense/core/issues/998 we support our authenticators for all service types, for backward compatibility reasons we kept default unix authentication available, since this is hardly used anymore, after 8 years it's time to deprecate this option.
DeltaFile
+0-17src/www/system_advanced_admin.php
+2-9src/etc/inc/auth.inc
+0-4src/opnsense/service/templates/OPNsense/Auth/system.pam
+0-4src/opnsense/service/templates/OPNsense/Auth/sshd.pam
+2-344 files

OPNSense/core 6e9bcf7src/opnsense/mvc/app/models/OPNsense/Auth Group.xml, src/opnsense/mvc/app/models/OPNsense/Auth/FieldTypes UsernameField.php

system: typo, end sentence
DeltaFile
+2-2src/opnsense/mvc/app/models/OPNsense/Auth/FieldTypes/UsernameField.php
+1-1src/opnsense/mvc/app/models/OPNsense/Auth/Group.xml
+3-32 files

OPNSense/core 44f5964. plist, src/opnsense/mvc/app/models/OPNsense/Auth/FieldTypes UsernameField.php

src: style sweep
DeltaFile
+0-2src/opnsense/mvc/app/models/OPNsense/Auth/FieldTypes/UsernameField.php
+1-0plist
+1-22 files

OPNSense/core 7169b29src/etc/inc auth.inc, src/etc/inc/plugins.inc.d core.inc

System: Access: Users - allow long usernames for non local users (without a shell account), for https://github.com/opnsense/core/issues/7904

With the new mvc code inplace, it's also a good idea to loosen the constraints for some accounts. One of the mail advantages is that we can now user email addresses as usernames for most services.
DeltaFile
+87-0src/opnsense/mvc/app/models/OPNsense/Auth/FieldTypes/UsernameField.php
+15-2src/opnsense/scripts/auth/sync_user.php
+8-1src/etc/inc/auth.inc
+3-3src/opnsense/mvc/app/controllers/OPNsense/Auth/Api/UserController.php
+1-3src/opnsense/mvc/app/models/OPNsense/Auth/User.xml
+1-1src/etc/inc/plugins.inc.d/core.inc
+115-106 files

OPNSense/core 4f0fdfasrc/opnsense/www/themes/opnsense-dark/assets/stylesheets main.scss, src/opnsense/www/themes/opnsense-dark/build/css main.css

wizard: revert a373d411f67cb1 now that new logos are in
DeltaFile
+0-8src/opnsense/www/themes/opnsense/assets/stylesheets/main.scss
+0-8src/opnsense/www/themes/opnsense-dark/assets/stylesheets/main.scss
+0-4src/opnsense/www/themes/opnsense/build/css/main.css
+0-4src/opnsense/www/themes/opnsense-dark/build/css/main.css
+1-1src/www/index.php
+1-255 files

OPNSense/core 6a7352e. plist, src/etc rc.expireaccounts

authentication - remove expireaccounts script which has been disfunctional for some time, accounting for expirey is the responsibility of the authenticator.

ref: https://github.com/opnsense/core/blob/252fd04811bb0cb74b69895aed69d1e6944683a6/src/opnsense/mvc/app/library/OPNsense/Auth/Local.php#L161-L162
DeltaFile
+0-54src/etc/rc.expireaccounts
+0-1plist
+0-1src/etc/inc/plugins.inc.d/core.inc
+0-563 files

OPNSense/core 252fd04src/www vpn_ipsec_mobile.php

ipsec: fix mobile clients reload missing system.inc

PRL https://forum.opnsense.org/index.php?topic=44724.0
DeltaFile
+1-0src/www/vpn_ipsec_mobile.php
+1-01 files

OPNSense/core bf0c69dsrc/opnsense/mvc/app/models/OPNsense/Firewall Filter.php

mvc: style sweep
DeltaFile
+4-2src/opnsense/mvc/app/models/OPNsense/Firewall/Filter.php
+4-21 files

OPNSense/core 1058244src/opnsense/mvc/app/controllers/OPNsense/Firewall/forms dialogFilterRule.xml, src/opnsense/mvc/app/models/OPNsense/Firewall Filter.php Filter.xml

Firewall: Automation: Filter - add interface inverse for https://github.com/opnsense/core/issues/8143
DeltaFile
+9-0src/opnsense/mvc/app/models/OPNsense/Firewall/Filter.php
+6-0src/opnsense/mvc/app/controllers/OPNsense/Firewall/forms/dialogFilterRule.xml
+4-0src/opnsense/mvc/app/models/OPNsense/Firewall/Filter.xml
+19-03 files

OPNSense/core 83587d9src/opnsense/mvc/app/controllers/OPNsense/Firewall/forms dialogFilterRule.xml, src/opnsense/mvc/app/library/OPNsense/Firewall FilterRule.php

Firewall: Automation: Filter - reorganize input dialog and add reply-to option, for https://github.com/opnsense/core/issues/8143
DeltaFile
+44-18src/opnsense/mvc/app/controllers/OPNsense/Firewall/forms/dialogFilterRule.xml
+9-0src/opnsense/mvc/app/views/OPNsense/Firewall/filter.volt
+8-0src/opnsense/mvc/app/models/OPNsense/Firewall/Filter.xml
+2-1src/opnsense/mvc/app/models/OPNsense/Firewall/FieldTypes/FilterRuleField.php
+1-1src/opnsense/mvc/app/library/OPNsense/Firewall/FilterRule.php
+64-205 files

OPNSense/core 8e310b1src/opnsense/mvc/app/controllers/OPNsense/Firewall/forms dialogFilterRule.xml, src/opnsense/mvc/app/library/OPNsense/Firewall Rule.php

Firewall: Automation: Filter -  always lowercase 'protocol' to avoid mismatches, partly reverts previous commit.
DeltaFile
+5-1src/opnsense/mvc/app/library/OPNsense/Firewall/Rule.php
+4-0src/opnsense/mvc/app/controllers/OPNsense/Firewall/forms/dialogFilterRule.xml
+9-12 files

OPNSense/core bcb5baesrc/opnsense/mvc/app/library/OPNsense/Firewall Rule.php, src/opnsense/mvc/app/models/OPNsense/Base/FieldTypes ProtocolField.php

Firewall: Automation: Filter - allow TCP/UDP combination in protocol selection, closes https://github.com/opnsense/core/issues/7962
DeltaFile
+24-5src/opnsense/mvc/app/models/OPNsense/Base/FieldTypes/ProtocolField.php
+4-4src/opnsense/mvc/app/models/OPNsense/Firewall/Filter.php
+6-0src/opnsense/mvc/app/models/OPNsense/Firewall/Filter.xml
+1-1src/opnsense/mvc/app/library/OPNsense/Firewall/Rule.php
+35-104 files

OPNSense/core 0a408b3src/opnsense/mvc/app/models/OPNsense/Firewall Filter.xml

Firewall: Automation: Filter - add "IPv4+IPv6" in ipprotocol (https://github.com/opnsense/core/issues/7962)
DeltaFile
+1-0src/opnsense/mvc/app/models/OPNsense/Firewall/Filter.xml
+1-01 files

OPNSense/core 8302270src/opnsense/mvc/app/library/OPNsense/Mvc Router.php

src: style
DeltaFile
+1-1src/opnsense/mvc/app/library/OPNsense/Mvc/Router.php
+1-11 files

OPNSense/core 0761a96src/opnsense/mvc/app/library/OPNsense/Mvc Router.php

Mvc/Router - normalize multiple slashes in paths, fix regression in https://github.com/opnsense/core/commit/61c9d2f5b19ad4bec2bafc90d8d45aa24ce416dd

Although zero (0) is hardly used in url's, when it is used, the function should not suppress it. Fix this by using a closure in array_filter() which only filters empty strings.

ref: https://www.reddit.com/r/opnsense/comments/1hghfzv/health_reporting_rrd_graphs_stopped_working_with/
(cherry picked from commit 6145b7f0d0575a0d2adcf92ee4de8c3c7edda9ec)
DeltaFile
+4-1src/opnsense/mvc/app/library/OPNsense/Mvc/Router.php
+4-11 files

OPNSense/core 0b6025bsrc/opnsense/scripts/firmware launcher.sh, src/opnsense/scripts/shell firmware.sh

firmware: add a light script mode -S to launcher

Because otherwise we do not get the current return value in the
shell menu option script after the refactor.

(cherry picked from commit 3009ad964d9ee645b215844d51846c734c2d1f56)
DeltaFile
+6-2src/opnsense/scripts/firmware/launcher.sh
+1-1src/opnsense/scripts/shell/firmware.sh
+7-32 files

OPNSense/core ee269a1src/etc/inc/plugins.inc.d kea.inc

Services: Kea DHCP: Kea DHCPv4 - align hostname validation with manual host entries (support RFC2181), closes https://github.com/opnsense/core/issues/8128
DeltaFile
+1-1src/etc/inc/plugins.inc.d/kea.inc
+1-11 files

OPNSense/core 6145b7fsrc/opnsense/mvc/app/library/OPNsense/Mvc Router.php

Mvc/Router - normalize multiple slashes in paths, fix regression in https://github.com/opnsense/core/commit/61c9d2f5b19ad4bec2bafc90d8d45aa24ce416dd

Although zero (0) is hardly used in url's, when it is used, the function should not suppress it. Fix this by using a closure in array_filter() which only filters empty strings.

ref: https://www.reddit.com/r/opnsense/comments/1hghfzv/health_reporting_rrd_graphs_stopped_working_with/
DeltaFile
+4-1src/opnsense/mvc/app/library/OPNsense/Mvc/Router.php
+4-11 files

OPNSense/core 2448570src/opnsense/mvc/app/controllers/OPNsense/Core/forms hasyncSettings.xml, src/opnsense/mvc/app/models/OPNsense/Core/ACL ACL.xml

System: High Availability: Status -  some missing links for https://github.com/opnsense/core/issues/7899
DeltaFile
+2-1src/opnsense/mvc/app/models/OPNsense/Core/ACL/ACL.xml
+1-1src/opnsense/mvc/app/controllers/OPNsense/Core/forms/hasyncSettings.xml
+1-1src/www/guiconfig.inc
+4-33 files

OPNSense/core 3009ad9src/opnsense/scripts/firmware launcher.sh, src/opnsense/scripts/shell firmware.sh

firmware: add a light script mode -S to launcher

Because otherwise we do not get the current return value in the
shell menu option script after the refactor.
DeltaFile
+6-2src/opnsense/scripts/firmware/launcher.sh
+1-1src/opnsense/scripts/shell/firmware.sh
+7-32 files

OPNSense/core 3681807. plist

plist: fix
DeltaFile
+1-0plist
+1-01 files

OPNSense/core 7f61f1bsrc/etc/pkg/fingerprints/OPNsense/trusted pkg.opnsense.org.20241217

firmware: new fingerprint for 25.1
DeltaFile
+2-0src/etc/pkg/fingerprints/OPNsense/trusted/pkg.opnsense.org.20241217
+2-01 files

OPNSense/core 908f3eesrc/opnsense/scripts/firmware lock.sh unlock.sh

firmware: refactor lock/unlock scripts using new output helpers
DeltaFile
+5-5src/opnsense/scripts/firmware/lock.sh
+5-5src/opnsense/scripts/firmware/unlock.sh
+10-102 files

OPNSense/core 9735ebcsrc/etc/inc config.inc

src: style

(cherry picked from commit ec4277c9aa5a56c8f416482aa7737b7ad56e9f46)
DeltaFile
+0-1src/etc/inc/config.inc
+0-11 files

OPNSense/core ec4277csrc/etc/inc config.inc

src: style
DeltaFile
+0-1src/etc/inc/config.inc
+0-11 files

OPNSense/core 76076a9src/etc/inc auth.inc

src: style
DeltaFile
+0-1src/etc/inc/auth.inc
+0-11 files