Hi everyone,

The 21.1 series debut looks pretty good so far. Thanks again for your input and comments!

We will be spending a lot of time this year improving and adapting the code base. As a first glimpse, the changes of this stable update are a mix of security and reliability updates coupled with preparations for the update framework revamp we have planned for 21.7. The roadmap is still not final, but will likely contain long-yearned-for features. Stay tuned.

Here are the full patch notes:

- firewall: change order of shaper delay parameter to prevent parser errors
- firewall: fix multiple PHP warnings regarding category additions
- firewall: fix icon toggle for block and reject (contributed by ElJeffe)
- interfaces: unhide primary IPv6 in overview page
- interfaces: fix IPv6 misalignment in get_interfaces_info()
- reporting: fix sidebar menu collapse for NetFlow link (contributed by Maurice Walker)
- captive portal: validate that static IP address exists when writing the configuration
- firmware: add product status backend for upcoming firmware page redesign
- firmware: opnsense-code will now check out the default release branch
- firmware: opnsense-update adds "-R" option for major release selection
- firmware: opnsense-update will now update repositories if out of sync
- firmware: opnsense-update will attempt to recover from fatal pkg behaviour
- firmware: opnsense-update now correctly redirects stderr on major upgrades
- firmware: opnsense-update now retains vital flag on faulty release type transition
- intrusion detection: clean up rule based additions to prevent collisions with the new policies
- monit: minor bugfixes and UI changes (contributed by Manuel Faux)
- unbound: update documentation URL (contributed by xorbital)
- ui: format packet count with toLocaleString() in interface statistics widget (contributed by bleetsheep)
- ui: add compatibility for JS replaceAll() function
- rc: support reading JSON metadata from plugin version files
- plugins: provide JSON metadata in plugin version files
- plugins: os-dyndns GratisDNS apex domain fix (contributed by Fredrik Rambris)
- plugins: os-nginx upstream TLS verification fix (contributed by kulikov-a)
- plugins: os-theme-cicada 1.26 (contributed by Team Rebellion)
- plugins: os-theme-vicuna 1.2 (contributed by Team Rebellion)
- src: panic when destroying VNET and epair simultaneously[1]
- src: uninitialized file system kernel stack leaks[2]
- src: Xen guest-triggered out of memory[3]
- src: update timezone database information[4]
- ports: dnsmasq 2.84[5]
- ports: lighttpd 1.4.59[6]
- ports: krb5 1.19[7]
- ports: monit 5.27.2[8]
- ports: perl 5.32.1[9]
- ports: sqlite 3.34.1[10]

Stay safe,
Your OPNsense team