Howdy,

This smallish update brings in more preparation for future features and reworks and fixes a couple of bugs reported over the last weeks.

The patch size for 25.1.x will likely not increase in future updates as 25.7 is near: July 23. Save the date!

Here are the full patch notes:

- system: add minimalistic interface to support SSO authentication
- system: refactor a couple of existing empty() tests to isEmpty()
- system: refactor cache flush into system_cache_flush()
- system: add backend call for returning timezones
- system: fix "weight" default fallback causing non-string return in gateway status
- interfaces: refactor newwanip IPv4/v6 scripts to reduce differences between them
- interfaces: do not call a description a "dmesg"
- interfaces: relax regex for dmesg probing to seamlessly support dmesg timestamps
- firewall: improve address family validation for rule source and destination
- firewall: fix faulty ICMP type evaluation on NAT rules
- dnsmasq: allow AliasesField values to be cleared
- dnsmasq: allow host wildcards in domain overrides again
- ipsec: add aes256-sha1 ESP proposal
- ui: backwards-compatible merge of Tabulator grid replacement changes
- plugins: os-haproxy 4.6[1]
- ports: curl 8.14.1[2]
- ports: nss 3.112[3]
- ports: openldap 2.6.10[4]
- ports: php 8.3.22[5]
- ports: python 3.11.13[6]

A hotfix release was issued as 25.1.9_2:

- system: fix route status removal buttons
- openvpn: fix server deletion in legacy page

Stay safe,
Your OPNsense team