Howdy,

This update mainly addresses a number of cosmetic UI concerns in core and
plugins.  25.7 has been a very good release and we would like to thank
everyone for trying it quickly and thoroughly.  You people are awesome!  <3

Here are the full patch notes:

o system: add banner to HA sync and firmware page when proxy environment override is used
o reporting: fixed internal parameter names in insight graphs
o interfaces: attempt to work around mangled MPD label
o firewall: a few minor improvements in automation GUI
o firmware: opnsense-version: support more elaborate -R replacement
o intrusion detection: fix interface name conversion
o intrusion detection: fix ja4 option templating
o openvpn: let server/server_ipv6 require a netmask
o radvd: refine checks that ignored 6rd and 6to4
o unbound: fix error in edge case of initial model migration
o mvc: migrated use of setInternalIsVirtual() to volatile field types
o mvc: fix getDescription() in NetworkAliasField
o ui: bootgrid: clean up leftover compatibility bits
o ui: bootgrid: add missing sortable option
o ui: bootgrid: provide more styling possibilities from formatters
o plugins: os-c-icap 1.9[1]
o plugins: os-dnscrypt-proxy 1.16[2]
o plugins: os-theme-cicada 1.40 (contributed by Team Rebellion)
o plugins: os-theme-tukan 1.30 (contributed by Team Rebellion)
o plugins: os-theme-vicuna 1.50 (contributed by Team Rebellion)
o ports: curl 8.15.0[3]
o ports: nss 3.114[4]
o ports: py-duckdb 1.3.2[5]
o ports: sudo 1.9.17p2[6]

A hotfix release was issued as 25.7.1_1:

o ipsec: fix regression in configuration write with introduced volatile fields


Stay safe,
Your OPNsense team

--
[1] https://github.com/opnsense/plugins/blob/stable/25.7/www/c-icap/pkg-descr
[2] https://github.com/opnsense/plugins/blob/stable/25.7/dns/dnscrypt-proxy/pkg-descr
[3] https://curl.se/changes.html#8_15_0
[4] https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_114.html
[5] https://github.com/duckdb/duckdb/releases/tag/v1.3.2
[6] https://www.sudo.ws/releases/stable/#1.9.17p2
