Howdy,

This update mainly addresses a number of cosmetic UI concerns in core and plugins. 25.7 has been a very good release and we would like to thank everyone for trying it quickly and thoroughly. You people are awesome! <3

Here are the full patch notes:

• system: add banner to HA sync and firmware page when proxy environment override is used
• reporting: fixed internal parameter names in insight graphs
• interfaces: attempt to work around mangled MPD label
• firewall: a few minor improvements in automation GUI
• firmware: opnsense-version: support more elaborate -R replacement
• intrusion detection: fix interface name conversion
• intrusion detection: fix ja4 option templating
• openvpn: let server/server_ipv6 require a netmask
• radvd: refine checks that ignored 6rd and 6to4
• unbound: fix error in edge case of initial model migration
• mvc: migrated use of setInternalIsVirtual() to volatile field types
• mvc: fix getDescription() in NetworkAliasField
• ui: bootgrid: clean up leftover compatibility bits
• ui: bootgrid: add missing sortable option
• ui: bootgrid: provide more styling possibilities from formatters
• plugins: os-c-icap 1.9[1]
• plugins: os-dnscrypt-proxy 1.16[2]
• plugins: os-theme-cicada 1.40 (contributed by Team Rebellion)
• plugins: os-theme-tukan 1.30 (contributed by Team Rebellion)
• plugins: os-theme-vicuna 1.50 (contributed by Team Rebellion)
• ports: curl 8.15.0[3]
• ports: nss 3.114[4]
• ports: py-duckdb 1.3.2[5]
• ports: sudo 1.9.17p2[6]

A hotfix release was issued as 25.7.1_1:

• ipsec: fix regression in configuration write with introduced volatile fields

Stay safe,
Your OPNsense team