Development

🎯 Major Features

• r15362: Ports SNMP collection trust: table collector with repair, per port and GET-only modes, missing ports, adaptive max-rep, collection conditions; poller/discovery event kinds; ports.ifName 128 chars +2,366/−387
• r15361: Event log and syslog in the activity layout. Grouped and parsed entries, hiding, ingest filters, load-on-click panels and pop-ups, event kinds schema +6,560/−1,878
• r15333: Alert, notification and syslog alert logs: activity layout, grouping, filters, search suggestions, alert panel graph +4,719/−1,065
• r15321: UI refresh, audit log, settings and user pages rework +5,070/−651

⚡ Improvements

• r15367: Syslog rules page: alerts, last alert and contacts columns, enable/disable button, regex validation and test; delete as POST (CSRF error); centre small button icons +116/−24
• r15366: Syslog hidden patterns filtered in PHP by template, list refills when mostly hidden. +50/−15
• r15365: Sensor threshold auto-calibration limits learned from a year of daily extremes with per-class floors, one JSON state attribute (update/557.php), recalibration, vendor limit repair, no low limits for high-only classes, manual limits in the modal, threshold meter in the sensor tables +1,503/−440
• r15348: Skipped reverse DNS and AS name lookups after 3 lookups without a nameserver answer. +54/−7
• r15347: Reduced reverse DNS lookup time by short timeout for not global addresses and caching failed lookups in gethostbyaddr6(). +55/−5
• r15346: Reduced AS name lookup time and caching failed lookups in get_astext(). +68/−18
• r15343: Reduced DB queries in ports polling by writing port attribs only when changed. +70/−54
• r15340: Stopped DB schema update on a partially imported initial schema. Passed DB port and socket to the schema import. +21/−4
• r15335: VLAN pages: names by device, ID ranges, checks, history in the activity layout, linked status cards; fix search bar field spacing +1,826/−910
• r15334: Global auth log in the activity layout, login failure reasons in the auth log, auth-test.php login test +1,013/−142
• r15327: Added is_xss() with input normalization and extra XSS patterns. +102/−8
• r15324: Added copy button to device information box on overview page (OBS-5307). +76/−6
• r15318: Graphs - remove rrdtool tag, size graph rows and full-width graphs to fill their containers +43/−37
• r15317: Themes - striping on state rows, flex graph rows, dark/darkblue fixes (alert text contrast, link colour, box shadows, edges, darkblue as overrides on dark)
• r15306: Improved queries for get the remote devices in BGP peers discovery (OBS-3523). +34/−5
• r15305: Reduced BGP peers discovery db queries for AFI/SAAFI entries. +54/−10
• r15303: Converted BGP peer polling to multi-row updates. +21/−25

🐛 Bug Fixes

• r15372: Ports rework fixes: slow runs no longer step max-rep down, bulk switched off only after an hour of unanswered bulk and retried at the baseline, step-up after is_snmpable without a cache reset, v1 per port GET skips ifXEntry when discovery found no ifXTable, rrd.log notes dropped stale samples +60/−33
• r15371: Collection trust review fixes: v1 noSuchName absence, per chunk GET trust, genError not trusted, max-rep baseline from the value sent, explicit Max Repetitions over learned bulk off, repaired rows kept one sample, returning ports restored in no-bulk polling, entity delete grace from first discovery miss, lifecycle events for SLA/ports stack/pseudowires/custom OIDs; custom OID removal and HR processor cleanup fixed +260/−83
• r15370: Switch ports poller on SNMP v1 devices use the table walk again, not per port GETs (a v1 GET naming a missing column fails whole, some vendors don't even respond) +5/−3
• r15368: Prioritise dashboard time settings over graph time settings. +5/−1
• r15356: Fixed stale process entries with a reused PID blocking discovery. +75/−23
• r15355: Restored fixed eventlog severities on device overview. +1/−1
• r15353: Fixed walking all installed packages during os discovery on every Linux host. +5/−5
• r15350: Hide SNMP community and v3 auth in debug output of print_debug_vars(). +20/−9
• r15349: Fixed DNS lookups skip regression in r15348. +75/−36
• r15345: Fixed possible fatal error with failed LDAP/AD domain controllers SRV lookup. +9/−5
• r15344: Fixed BGP peers validation by remote IP and AS number (appear in r13588). Skipped BGP autodiscovery for peers in admin shutdown or down states. +27/−10
• r15341: IP address discovery: match stored addresses across ifIndex changes (no add/remove churn); widen ifIndex and Counter32 columns that were silently clamped +16/−5
• r15338: Fixed UniFi API URL validation and UniFi API auth header (OBS-5127). +6/−5
• r15337: Fixed tags input dropping text typed without Enter and splitting values on comma. +11/−2
• r15336: Settings - stop sending stored passwords to the browser, mask secrets in config dumps +16/−4
• r15332: Apache metrics RRD not created with old agents; hide missing-RRD graphs on Apps page +10/−1
• r15329: Fixed IP-MIB discovery for ipv6z/ipv4z addresses with zone index (OBS-5308). +11/−1
• r15328: Add table-condensed to ucd_mem overview box +1/−1
• r15314: Fixed list markers render in markdown notes. +3/0
• r15308: Fixed bill creation without admin level and request token. Disabled EasyMDE remote spell checker. Removed unused Bootstrap 2 tooltip. +15/−13
• r15302: Fixed multi-row updates on MySQL 8.0.20+. +94/−35
• r15301: Fixed collectd generic graph fallback for meta graph types. +4/0
• r15300: Fixed collectd graphs for collectd 5.x data source names. Added collectd_legacy option for 4.x RRD files (OBS-5302, OBS-740, OBS-1329, OBS-1551, OBS-2311). +222/−131
• r15298: Fixed is_intnum() to accept only the canonical integer form, without leading zeros. +9/−3

🔧 Minor Changes

• r15354: Limited SNMP max-rep to 30 instead of disabling bulk in get_device_os(). +22/−3
• r15351: Fixed poller wrapper processes limit, max_la 0 applies it always. +22/−13
• r15330: Logged SNMP bulk timeouts to eventlog only from discovery. +3/−1
• r15322: Replaced check_extension_exists() and OBS_ENCRYPT with direct extension_loaded() checks. +35/−81
• r15319: Switched API token copy button to ClipboardJS. +5/−21

🗄️ Database Changes

• r15369: devices.distro_ver widened to 64 chars (33-char AlmaLinux version string was truncated, causing a 'Distro Ver changed' event every poll)
• r15342: Added explicit collation to schema updates 500, 503 and 513.

🧪 Tests

• r15323: Fixed sessions tests after authentication changes (appear in r15204). +3/0
• r15304: Added DB layer checks for live MySQL/MariaDB servers with the test lab scripts.
• r15296: Added unit tests for the encrypt().

📝 Trivial Changes

• r15364: VLAN history panel buttons at normal size, as on the other log pages +4/−4
• r15357: Added process start time fallback when btime is missing or zero. +3/−2
• r15331: Use config for filter eventlog by severities. +1/−1
• r15325: Tagged the user_encpass session password migration with CLEANME. +6/−2
• r15320: Raised minimum PHP version to 7.4.19. +6/−10

📚 Library Updates

• r15297: Updated php-cli-tools to 0.13.2.

🧹 Code Cleanup

• r15363: Folded hacks.less into the stylesheets its rules belong to, new icons.less and sensor-calibration.less, unused rules removed
• r15360: Moved fetch_oids_lldp_addr() to the LLDP-MIB helper include. +152/−137
• r15359: Moved process_lshw_node() to the UNIX agent include. +59/−60
• r15358: Moved discover_juniatmvp() to the Juniper-UNI-ATM-MIB include. +42/−29
• r15326: Removed the RSS/Atom eventlog feed. +12/−289
• r15312: Removed unused bootbox lib and the broken status_donuts widget. +17/−167
• r15311: Removed unused D3 js lib and the dead front page files and settings. +2/−41
• r15310: Removed unused JS libs.

📦 Other Changes

• r15352: Added support for Calix AXOS (OBS-5313). +117/−12
• r15339: Improved polling hardware/type for Avaya IP Office (OBS-5312). +128/−19
• r15299: Added support for Network Thermostat X7 (OBS-5301). +307/0
• r15316: Fixed tag title attribute injection in bootstrap-tagsinput (CVE-2016-1000227).
• r15315: Updated lib clipboard.js to 2.0.11. Added copy to clipboard button in setting pages. +10/−3
• r15313: Updated libs Chart.js to 4.5.1, jQuery Migrate to 3.6.0, EasyMDE to 2.21.0.
• r15309: Updated lib Moment.js to 2.31.0.
• r15307: Updated lib DOMPurify to 3.4.16.