pfSense

dhcp: ensure $pconfig is never null or not an array

kea: filter self-signed certs from TLS options

Add package hooks plugin_xmlrpc_send plugin_xmlrpc_recv, and plugin_xmlrpc_post_recv

Don't unnecessarily remove the config cache

Removing the cache is no longer necessary; the behavior remains the
same without removing the config cache.

Add safety check for alias ID

Avoid config access with unknown userid

Fix input validation for gateway

Set the working directory before checking unbound config. Fix #15723

Improve localhost DNS checks. Fix #15722

Improve thermal widget readability

Add a margin between progress bars and sort sensors.