Release 36.0.3
Bug
- ActiveMQ security vulnerabilities (Issue NMS-20087)
- Collectd shutdown can block for several minutes waiting for active collection RPCs (Issue NMS-20046)
- Dangling nodeParentID references in node table (Issue NMS-19971)
- Discovery REST scan (a provisioning operation) is reachable by low-privilege ROLE_REST (Issue NMS-20056)
- Filter evaluation fails entirely when an ipinterface row holds an unparseable IP address (Issue NMS-20004)
- Forced Rescan vs Scheduled Rescan not removing old interfaces (Issue NMS-19096)
- Horizon container health.sh always fails: curl -sSF is not a valid invocation (Issue NMS-20116)
- Lock jackson-databind and netty versions in OSGi to Maven (Issue NMS-20164)
- Menu issues in Firefox and Safari (Issue NMS-20174)
- NMS-19951 regression: local RPC TTL bound kills long-running SNMP collections at scale (36.0.2) (Issue NMS-20006)
- Newts
delete()is broken (Issue NMS-20047) - Notifid - Remove MicroblogNotificationStrategy (Twitter 1.0) (Issue NMS-20098)
- Notifid - Remove XMPPNotificationStrategy (Jabber) (Issue NMS-20099)
- Notifid - Replace IrcCatNotificationStrategy - Make it native or remove (Issue NMS-20112)
- Notifid - Rework JavaMailNotificationStrategy (Issue NMS-20102)
- Notifid - Rework of the TicketNotificationStrategy (Issue NMS-20101)
- Poller builds the metadata scope twice per poll (Issue NMS-20009)
- PostgreSQL JDBC security vulnerabilities (Issue NMS-20090)
- REST update endpoints lets ROLE_REST users set protected fields (Issue NMS-20055)
- Remove the Asterisk notification strategy and AGI gateway (Issue NMS-20114)
- Screen flickers between JSP pages (Issue NMS-19975)
- Smoke test logins intermittently fail on a CSRF/session race (Issue NMS-20049)
- Thresholding builds metadata scopes per resource and per threshold (Issue NMS-20007)
- Update Netty to 4.2.16.Final (Issue NMS-20168)
- Update com.fasterxml.jackson.core:jackson-core library (Issue NMS-20132)
- Update com.fasterxml.jackson.core:jackson-databind library (Issue NMS-19931)
- Update commons-io:commons-io library (Issue NMS-20183)
- Update glib2 library (Issue NMS-19956)
- Update io.netty:netty-codec library (Issue NMS-19995)
- Update io.netty:netty-codec-http library (Issue NMS-19996)
- Update io.netty:netty-codec-stomp library (Issue NMS-20037)
- Update libacl library (Issue NMS-19957)
- Update libpng library (Issue NMS-19937)
- Update log4j library (Issue NMS-20089)
- Update openssh library (Issues NMS-19819, NMS-19984)
- Update openssh-clients library (Issue NMS-19985)
- Update org.apache.mina:mina-core library (Issue NMS-20034)
- Update org.bouncycastle:bcprov-jdk18on library (Issue NMS-19961)
- Update org.eclipse.jetty:jetty-security library (Issue NMS-20060)
- Update org.jline:jline-remote-telnet library (Issue NMS-19934)
- Update org.json:json library (Issue NMS-20186)
- Update python3 library (Issue NMS-19986)
- Update python3-libs library (Issue NMS-19987)
- Update rsync library (Issue NMS-19930)
- Update tar library (Issue NMS-19988)
- Vmware VirtualMachine datacollection fail with com.vmware.vim25.ManagedObjectNotFound (Issue NMS-19977)
- thresholding-enabled parameter is ignored by collectd (Issue NMS-20008)
Enhancement
- Add a close-ticket notification strategy to complement TicketNotificationStrategy (Issue NMS-20105)
- Add a way for AlarmSync to clear alarms (Issue NMS-19954)
- Add a way to "stream" alarms to Kafka (Issue NMS-19955)
- Add startup time metrics for OpenNMS services (Issue NMS-19036)
- Improve UI for API Docs (Issue NMS-20166)
- Make Swagger/API Docs as part of build/repo (Issue NMS-20163)
- Mutual TLS support for collectors (XML/Prometheus/HTTPS) (Issue NMS-19974)
- Remove EOL BouncyCastle jdk15on and orphaned SAML dependencies from spring-security aggregator (Issue NMS-20092)
- Remove GWT sandbox under topology-map plugins (Issue NMS-20079)
- Remove OTRS ticketer orphan directories and packaging tombstones (Issue NMS-20084)
- Remove orphaned Karaf feature definitions (Issue NMS-20095)
- Remove sample REST response dumps served as static content from opennms-webapp (Issue NMS-20082)
- Remove unreferenced images from the webapp images directory (Issue NMS-20091)
- Remove unused dependencyManagement entries from the root pom (Issue NMS-20085)
- Remove vendored legacy OpenLayers and Leaflet copies from core/web-assets (Issue NMS-20080)
- Restore xstream and kotlin-stdlib dependencyManagement pins removed in NMS-20085 (Issue NMS-20093)
- Topology (Preview): graph-service provider for the path outage hierarchy (Issue NMS-19877)
Epic
- Integrate a widely used UI framework to enhance or replace FeatherDS (Issue NMS-19188)
New Feature
- Active/passive HA for OpenNMS core (Issue NMS-20109)
Story
- Mask passphrases in Trap Configuration (Issue NMS-19723)
- Upgrade Hibernate to 5.x (Issue NMS-18185)
- Upgrade Spring from 4.3.x to Spring 5.x (Issue NMS-19858)
Task
- Dependabot updates for Vue UI, August 2026 (Issue NMS-19725)
- Dependabot updates for core/web-assets, August 2026 (Issue NMS-20181)
- FE: Make new node list page the default in the menu, remove legacy node list page (Issue NMS-18217)
- Fix issues after plugin UI component library Phase 1 (Issue NMS-20150)
- Fix styling and PR review issues after Feather cleanup (Issue NMS-20033)
- Make top menubar more responsive (Issue NMS-20201)
- More Node List parity enhancements (Issue NMS-20125)
- More Side Menu fixes (Issue NMS-20171)
- Move Resource graphs to Resource Graphs (Preview) (Issue NMS-20176)
- Node List UI enhancements: Default columns, IP sorting, Indentation (Issue NMS-20175)
- PrimeVue Migration: Convert screens including Device Config (Issue NMS-19948)
- PrimeVue Migration: Feather cleanup, replace icons (Issue NMS-19981)
- PrimeVue Migration: Menubar (Issue NMS-19976)
- Shared core/plugin UI component library architecture: Phase 1 (Issue NMS-20054)
- Side Menu: Fix flicker, overlap (Issue NMS-20167)
- TicketNotificationStrategy is not functional (Issue NMS-20026)
- UI component seam layer: Phase 1 (Issue NMS-20029)
- UI component seam layer: Phase 2 (Issue NMS-20081)
- Update the links to documentation in our menu (Issue NMS-20202)