Changelog

Release Meridian-2026.0.1

Bug

  • Add order by id to three Hibernate DAO queries to fix SnmpDataCollectionXmlToDbParityIT flaky test ordering (Issue NMS-20337)

  • Alarm northbounder filter rules can run arbitrary code on the server (Issue NMS-20382)

  • Bug fixes for Topology Preview UI (Issue NMS-20375)

  • Build fails in features/grpc/exporter when built on Apple Silicon without Rosetta (Issue NMS-20384)

  • BulkingIT.testFlushTimeout fails intermittently (Issue NMS-20361)

  • Deleting nodes does not update the gNMI OpenConfig telemetry connector twin (Issue NMS-20344)

  • End-to-End lag of 191 s from OpenConfig gNMI collection to the Kafka metrics topic (Issue NMS-20350)

  • Fix Camel JMS Hardening on 2026+ (Issue NMS-20445)

  • Fix SFTP Collections (Issue NMS-20360)

  • Fix Sentinel dropwizard-metrics version range in featuresProcessing (Issue NMS-20308)

  • Fix failing tests for Metrics API (Issue NMS-20444)

  • Harden Camel JMS (Issue NMS-20397)

  • Kafka Sink consumer drops message chunk for larger buffer sizes (Issue NMS-20335)

  • Main page content has a resize/shift animation away from the sidebar on every page load (Issue NMS-18311)

  • Migrate Topology Preview Icons to onms-ui icons. (Issue NMS-20393)

  • Minion/Sentinel ignore JAVA_MIN_MEM and JAVA_MAX_MEM from /etc/sysconfig/minion (Issue NMS-20334)

  • OpenAPI schemas document bean property names instead of the JSON wire names (Issue NMS-20321)

  • OpenConfig leaks a gRPC ManagedChannel on every failed retry (Issue NMS-20338)

  • Requisition and foreign-source import can exhaust memory through XML entity expansion (Issue NMS-20430)

  • Requisition import does not block DOCTYPE in imported XML (Issue NMS-20357)

  • Harden input validation in alarm search filters (Issue NMS-20383)

  • Startup time grows quadratically with the number of gNMI nodes per location (Issue NMS-20352)

  • Throw error for browsers without WebGL for new topology UI (Issue NMS-20300)

  • Topology Preview viewport doesn’t honor background size correctly (Issue NMS-20312)

  • Harden authorization checks on alarm REST endpoints (Issue NMS-20349)

  • Harden HTTP method handling in REST API authentication (Issue NMS-20348)

  • Update Karaf to version 4.4.9 in foundation-2024 (Issue NMS-20332)

  • Update com.fasterxml.jackson.core:jackson-core library (Issue NMS-20399)

  • Update com.fasterxml.jackson.core:jackson-databind library (Issue NMS-20400)

  • Update org.bouncycastle:bcprov-jdk18on library (Issue NMS-20346)

  • Update org.freemarker:freemarker library (Issue NMS-20378)

  • Update org.jline:jline-builtins library (Issues NMS-20380, NMS-20403)

  • Upgrade Kafka to 3.9.1 (Issue NMS-20395)

  • KafkaForwarderIT fails with ConcurrentModificationException (Issue NMS-20340)

  • gNMI subscription setup sleeps 1 second per device (Issue NMS-20336)

  • lldp allows duplicate node ID references, which causes lookup issues in the topology UI (Issue NMS-16196)

  • opennms:collect --persist cannot create RRD files (heartbeat 0) (Issue NMS-20433)

Enhancement

  • Allow re-ordering of event-configuration sources and of events within a source (Issue NMS-20270)

  • Expose event-configuration evaluation order (source order and event order) in the REST API and UI (Issue NMS-20269)

  • Improve files we store under evidence folder for flaky tests (Issue NMS-20341)

  • Improvements to Topology Preview UI Layout (Issue NMS-20376)

  • Metadata-Driven Kafka Metric Topic Routing (Issue NMS-19927)

  • Once an SNMP interface’s collect flag is set by the user, there is no way to revert back to policy-driven collection (Issue NMS-15209)

  • SNMP data collection: resolve MIB group references across sources (Issue NMS-20429)

  • Source and destination node info swapped on every enriched flow (Issue NMS-20408)

  • lastGood / lastFail for Collectd services (Issue NMS-20388)

New Feature

  • Add a Link Metrics API (Issue NMS-20354)

  • Add geomap feature to Topology Preview UI (Issue NMS-20417)

  • FE: Mib compiler test coverage (Issue NMS-19715)

  • Improve "Unsaved Changes" and menu header UX (Issue NMS-20419)

Story

  • Add Rest API to replace Mib compiler Vaadin UI (Issue NMS-20158)

  • Drop the Guava 17/21 features and update wsman to 1.3.3 (Issue NMS-20318)

  • Event-conf REST API: scripted-client improvements and accumulated API fixes (Issue NMS-20272)

  • Exclude Guice from the Newts dependencies (Issue NMS-20317)

  • Remove unused spring-dm, Spring 3.1, spring-messaging and spring-websocket features (Issue NMS-20316)

  • Update Objenesis to 3.5 (Issue NMS-20315)

  • Update xStream to 1.4.21 (Issue NMS-20310)

Task

  • Add a Save icon to onms-ui (Issue NMS-20394)

  • FE: MIB Compiler UI for deleting files (Issue NMS-19174)

  • FE: MIB Compiler UI for downloading files (Issue NMS-19175)

  • FE: MIB Compiler UI for editing and saving files (Issue NMS-19173)

  • FE: MIB Compiler UI for generating events (Issue NMS-19187)

  • FE: MIB Compiler UI for uploading files (Issue NMS-19171)

  • FE: MIB Compiler UI for viewing and editing files (Issue NMS-19172)

  • FE: MIB Compiler for compiling a MIB file (Issue NMS-19710)

  • FE: MIB Compiler tables for listing files (Issue NMS-19169)

  • FE: MIB Compiler, initial main page (Issue NMS-19168)

  • FE: MIB Compiler, wire up tables with Rest API for getting filenames (Issue NMS-19170)

  • Fix useRole caching issue (Issue NMS-20311)

  • MIB compiler UI design / task breakout (Issue NMS-19131)

  • Minion: Investigate if its possible to move away from Confd (Issue NMS-19541)

  • Restructure mib compiler to include rest module (Issue NMS-19625)

Release Meridian-2026.0.0

Release 2026.0.0, the first in the Meridian 2026 series, is based on Horizon 36 and includes work from both Horizon 36 and Horizon 35.

Meridian 2026 is currently in its polishing phase, with ongoing stabilization work. Because this release skips Horizon 35 and spans two major Horizon versions, commercially supported customers may encounter requests for additional configuration details or somewhat longer migration timelines than usual.

Bug

  • /notifications/summary counts notification deliveries instead of notifications (Issue NMS-20283)

  • Bump Apache CXF (Issue NMS-20205)

  • Event Translator bug with SQL cases and reloads (Issue NMS-20258)

  • Eventd drops every event until the webapp loads the database eventconf (Issue NMS-20289)

  • Fix OpenNMS Browser notification Bug (Firefox and chrome) (Issue NMS-20200)

  • Improve handling of failed collection alarms for restarts/reloads (Issue NMS-19979)

  • Intermittent deadlock in DataBlocksOffHeapQueue during memory to off-heap transition (Issue NMS-20271)

  • Update Jetty (Issue NMS-20088)

  • Kafka sink consumer manager tracks unstarted consumers, leaking live ones on reload (Issue NMS-20203)

  • Missing authorization on /api/v2 PATCH endpoints (Issue NMS-20248)

  • Outage records can permanently miss their event ID under a race condition (Issue NMS-20260)

  • Reduce per-event overhead in the event translator (Issue NMS-20204)

  • Restoring a JSON snmp-config download wipes inherited timeout and retry values (Issue NMS-20262)

  • Improper handling of user-supplied report parameters in shipped JasperReports templates (ROLE_USER) (Issue NMS-20245)

  • Update com.fasterxml.jackson.core:jackson-core library (Issue NMS-20226)

  • Update com.fasterxml.jackson.core:jackson-databind library (Issue NMS-20227)

  • Update com.mchange:mchange-commons-java library (Issue NMS-20236)

  • Update curl-minimal library (Issue NMS-19982)

  • Update io.netty:netty-codec library (Issue NMS-20237)

  • Update io.netty:netty-codec-http library (Issue NMS-20238)

  • Update io.netty:netty-transport-sctp library (Issue NMS-20251)

  • Update libcurl-minimal library (Issue NMS-19983)

  • Update org.apache.httpcomponents.core5:httpcore5 library (Issues NMS-20228, NMS-20231)

  • Update org.apache.httpcomponents.core5:httpcore5-h2 library (Issues NMS-20229, NMS-20232)

  • Update org.bouncycastle:bcprov-jdk18on library (Issue NMS-20239)

  • Update org.codehaus.plexus:plexus-utils library (Issues NMS-19667, NMS-20222)

  • Update org.eclipse.jetty:jetty-http library (Issue NMS-20196)

  • Update org.eclipse.jetty:jetty-security library (Issue NMS-20184)

  • Update org.jline:jline-remote-telnet library (Issue NMS-20223)

  • Update org.snmp4j:snmp4j-agent library (Issue NMS-20275)

  • Update python3 library (Issue NMS-20220)

  • Update python3-libs library (Issue NMS-20221)

  • Update vim-minimal library (Issue NMS-19958)

  • Improper XML parsing in the XML collector could allow unauthorized file access on the OpenNMS host (Issue NMS-20206)

  • XmlCollect unable to collect entities that begin with a number (Issue NMS-15222)

  • container-based upgrade from 35.0.5 to 36.0.3 fails due to java.lang.ClassNotFoundException: org.opennms.netmgt.ticketd.NullTicketerPlugin (Issue NMS-20259)

  • upgrade of container-based 35.0.5 to 36.0.3 fails with error: Unexpected exception while starting Karaf java.lang.RuntimeException: Could not resolve mvn:org.apache.felix/org.apache.felix.framework/6.0.5 (Issue NMS-20261)

  • v1 /rest/alarms returns a corrupt response body when an alarm’s lastEvent is deleted concurrently (Issue NMS-20161)

Enhancement

  • Improve shipped OpenAPI/Swagger Docs (Issue NMS-20263)

  • Kafka producer json payloads (Issue NMS-19840)

  • Move java.io.tmpdir out of $OPENNMS_HOME/data/ so Karaf cache cleanup can’t destroy JVM tmp state (Issue NMS-19841)

  • Small improvements to our docs (Issue NMS-20292)

  • Topology (Preview): new Vue topology map (compose, discover, inspect) (Issue NMS-19878)

  • Update WSMan library in OpenNMS (Issue NMS-20287)

New Feature

  • Expose a discovered link’s interfaces on its graph API edge (Issue NMS-20254)

Task

  • Add tooltip to OnmsIconButton (Issue NMS-20162)

  • Deprecate some plugins that we ship as part of opennms-plugins rpm (Issue NMS-19458)

  • Fix Alarm table checkboxes in dark mode (Issue NMS-20170)

  • Fix dependabot alerts for core/web-assets, August 2026 (Issue NMS-20250)

  • Make top menubar more responsive (Issue NMS-20201)

  • More menu issues to fix (Issue NMS-20180)

  • Move icons into onms-ui (Issue NMS-20243)

  • OnmsTimePicker control and Time support for OnmsDatePicker (Issue NMS-20280)

  • SideMenu: Flyout on hover fixes (Issue NMS-20273)

  • Unit test to confirm availability of static assets (Issue NMS-20246)

  • Update OnmsSearchInput to have 'clear' icon (Issue NMS-20160)

  • Update apacheThriftVersion (Issue NMS-20213)

  • Update log4j to newer version (Issue NMS-20177)

  • Various UI Fixes - dark mode, scrolling (Issue NMS-20182)