pfSense

Don't refresh the cache when visiting the update page. Fix #15055

Show the target for auto outbound NAT rules. Fix #15025

Append a new line to NAT rule errors. Fix #15024

Update fontawesome references in form buttons

More fontawesomev6 updates

Merge pull request #4615 from blkeller/apu2-expanded-serial-fix

Merge pull request #4652 from jaredhendrickson13/fix/bring-down-proxyarp-after-deletion

Fix IPsec log value handling. Fixes #14990

Refactor use of return_gateways_array() with get_gateways(). Fix #14893

Most calls to return_gateways_array() do not need the gateway list to be
recreated. get_gateways() can filter the gateway list, and indexing is
moved from return_gateways_array() to get_gateways() to avoid using...

Don't split fontawesome icon names

This makes it easier to update fontawesome versions. While here, fix a
missing closing quote, and use the correct fontawesome prefix.

Remove duplicate class

Update fontawesome icon names to v6. Implement #13537

Revert "Update fontawesome icon names to v6. Implement #13537"

This reverts commit 32be4696a301144c650f4765b8a2b51e28d95a40.

Update fontawesome icon names to v6. Implement #13537

Utilize new -C flag to pfSense-upgrade

pfSense-upgrade's -c flag is intended to check only for upgrades against the
currently configured repository (better termed as updates). The new -C flag
expands the search for new versions of core packages into other non-devel repo...

Expand detection of PC Engines APU2 platform to include all variants

Fixes #13498 in Redmine.

Update direct config access in services_dhcpv6.php. Fix #14978

Remove use of 0.0.0.0 alias in pfSense-dhclient-script. Fixes #14966

Remove invalid field from input validation. Fix #14965

Save the mobile IPsec group auth setting. Fix #14963

Merge pull request #4642 from marcelloc/patch-8

Merge pull request #4634 from rlaager/fix-mss-clamping-for-v6-vpn

Merge pull request #4647 from Tsuser1/ecl-cdrom

Merge pull request #4653 from PhilZ-cwm6/patch_ovpn_nbdd

Update nvd3. Implement #13537

Update fontawesome. Implement #13537

Update jQuery and jQuery-ui. Implement #13537

Fix PHP error when saving PPP interface w/o config. Issue #14949

Merge pull request #4603 from luckman212/reduce-log-spew-during-static-dhcp-deletions

Merge pull request #4603 from luckman212/enhancement-to-dhcp-static-map-handling-of-duplicate-ips

Update misleading function names. Fix #11566

Support URL IP aliases in alias_expand(). Fix #14947

OpenVPN: expose NBDD servers in GUI

In GUI for both server and client specific overrides, add option to push DHCP NBDD option to client

Merge pull request #4575 from PhilZ-cwm6/patch_vpn_netbios_settings

Merge pull request #4576 from PhilZ-cwm6/patch_vpn_netbios_deprecated_settings

Hide WINS fields if NetBIOS is disabled. Fix #13087

Run rc.local on system boot instead of on user logon. Fix #10980

Merge pull request #4603 from luckman212/scrubing-to-scrubbing

Use a function to get OpenVPN device names

Rector some direct config array accesses with pure scalar paths.

Specify specialnet flags when calling get_specialnet(). Fix #14935

Allow passing specialnet flags to pconfig_to_address() to correctly
handle address/network config elements. Also correctly handle VIP
selection in nat/binat rules.

fix: delete vips before calling interface_proxyarp_configure()

kea: validate v4 client identifiers as being valid hex strings, otherwise wrap in single quotes

Don't use aliases in binat rules. Fix #14918
While there, handle negated binat addresses.
Also use the correct specialnet description.

Selectively kill DHCP server by family. Fixes #14897

Fix some syntax/logic errors in interface config.

Save rules changes before the ruleset is sorted.

MVC updates for SSH and gateways code.

Traffic Graph filtering corrections. Fix #14892

Recognize the 200xx Series QAT device. Implement #14844

Amend P12 error for bad ciphers. Fixes #14877

Revert "Enable OpenSSL legacy provider by default. Issue #14877"

This reverts commit 275ae19ad70336f06ed53d655ceb96c8b2ab56f0.

Generate a system alias for PPPoE clients. Fix #14885

Remove trigger_initial_wizard since it is not used in the pkg

Remove outddated DHCPv6 test. Fixes #14884

Fix state dump rule ID validation. Fixes #14880

Enable OpenSSL legacy provider by default. Issue #14877

Refresh OS CA list after updating trust store. Fixes #14876

Correct typo. Fixes #14873

Exclude address/network type from specialnet checks. Fix #14867
These are placeholders for the real value, not specialnets.

Use the interface name for the reserved system alias suffix. Fix #14866

Specify specialnet flags for GUI fields. Fix #14845
Store the flags in variables to allow easier future updates.

kea: enable RFC6842 compatibility mode

kea: fix netboot regression

Save a duplicated floating rule after the original rule. Fix #14856

Fix PHP error on 1:1 NAT w/if macros. Fixes #14845

kea: prevent configuring static reservations with both mac and cid matching

Refine IPsec P1 cert wildcard check. Fixes #14831

Don't down static v4+t6 on link loss. Fixes #14756

In this scenario, IPv4 is static and IPv6 is tracking another interface.
Neither of those conditions requires taking the interface down or
removing addresses.

Force gateway alarm for dynamic WAN link down

• Fixes Dynamic DNS updates when losing link. Issue #14829
• Fixes IPsec not failing over when losing link. Issue #14626

Include hostname in DDNS notify. Implements #9504

Handle saving empty values in system_advanced_admin.php. Fix #14820

Add notice when starting the zpool trim

Introduce Kea DHCP

Enable zpool autotrim and start a manual trim

Use intval of portal voucher data. Fixes #14325

It was already tested to be numeric but this normalizes the result so it
doesn't have things like leading zeroes or trailing decimal points.

Avoid PHP err with missing P2 data. Fixes #14525

Use access functions to ensure we always have an array when expected in
this block of code.

Update DDNS split host+domain list. Fixes #14783

Fix str concat for one.com DDNS. Fixes #14649

Correct CE logo w/Compact-Red Theme. Fixes #14807

Doesn't affect Plus logo, only CE.

Fix submitted by James White via Redmine

Fix build time on sysinfo widget. Fixes #14791

While here, add a fallback method and error handling in case the file is
missing or invalid.

Pcap: Validate+Encode count & length. Fixes #14809

Fix error output test in status.php. Fixes #14777

Cleanup some unused variables

Minor cleanup in shift_separators()

PHP memory limit calc correction. Fixes #13377

Do not limit the maximum to less than the default for the architecture.

Fixup some separator config access issues. Fixes #14794

Check disabled gw/ifs when validating gw addr fam. Fixes #8846

Fix variable name typo. Fixes #14790

status.php: Fix error count. Fixes #14513

Make header before adding note at the bottom, otherwise error count is
off by one.

Add input validation for sock_queue_timeout. Fix #14731

Correct HTTPS cert list. Fixes #14672

Make sure to exclude weak CA chains from list of HTTPS certificates.

Check for routing protocol flags when removing the default route. Fix #14717

Skip empty separators. Fixes #14794

Other nearby similar loops already had this check, this was the only one
missing.

Correct PPP provider pre-fill. Fixes #14544

• Make pre-fill behavior function correctly on interfaces_ppps_edit.php
• Fix some inconsistencies in similar code on interfaces.php and
  interfaces_ppps_edit.php

Prevent nginx from serving backup copies of files.

Files with .orig can be left in place from patching and .pkgsave files
are left in place if files are replaced with different copies from pkg.

Add status output package plugin hook. Implements #14777

• Move status output functions to a separate include file
• Change function names to be specific to this include, the old generic
  names may conflict in certain cases (e.g. FRR status uses the same...

Improve error handling in status.php. Implements #14513

PHP updates in interfaces.inc. Implements #14790

• Converted to new array/config access functions. Implements #14790
• Eliminated direct config and $g access. Issue #14790
• Fixes #14579
• Fixes the part of issue #14544 relevant to interfaces.php

Use full path to tail, sort output. Issue #14758