Howdy,

This update mainly addresses a number of cosmetic UI concerns in core and plugins. 25.7 has been a very good release and we would like to thank everyone for trying it quickly and thoroughly. You people are awesome! <3

Here are the full patch notes:

- system: add banner to HA sync and firmware page when proxy environment override is used
- reporting: fixed internal parameter names in insight graphs
- interfaces: attempt to work around mangled MPD label
- firewall: a few minor improvements in automation GUI
- firmware: opnsense-version: support more elaborate -R replacement
- intrusion detection: fix interface name conversion
- intrusion detection: fix ja4 option templating
- openvpn: let server/server_ipv6 require a netmask
- radvd: refine checks that ignored 6rd and 6to4
- unbound: fix error in edge case of initial model migration
- mvc: migrated use of setInternalIsVirtual() to volatile field types
- mvc: fix getDescription() in NetworkAliasField
- ui: bootgrid: clean up leftover compatibility bits
- ui: bootgrid: add missing sortable option
- ui: bootgrid: provide more styling possibilities from formatters
- plugins: os-c-icap 1.9[1]
- plugins: os-dnscrypt-proxy 1.16[2]
- plugins: os-theme-cicada 1.40 (contributed by Team Rebellion)
- plugins: os-theme-tukan 1.30 (contributed by Team Rebellion)
- plugins: os-theme-vicuna 1.50 (contributed by Team Rebellion)
- ports: curl 8.15.0[3]
- ports: nss 3.114[4]
- ports: py-duckdb 1.3.2[5]
- ports: sudo 1.9.17p2[6]

A hotfix release was issued as 25.7.1_1:

- ipsec: fix regression in configuration write with introduced volatile fields

Stay safe,
Your OPNsense team