What librenms/librenms shipped
Written by FoxPlug from the repository's own releases; not affiliated with Librenms. Paste your own repository in the box below and FoxPlug writes the same weekly update for your product. This page is an automatic summary of the releases, pull requests and commits in github.com/librenms/librenms; Librenms did not write it and does not use or endorse FoxPlug. Every line links to the change it describes.
Get a weekly update like this for your product, free
Week of October 5, 2026
What shipped
- Scheduled polling adds experimental queue-based polling and discovery, configured through lnms migrate and QUEUE_CONNECTION in.env. Pull request #16319
- ArubaOS-CX now reports fan and module state sensors so failed fans and line modules appear in state sensors. Pull request #20661
- NTP application graphing was enhanced. Pull request #20338
- The Discovery Protocols module was modernized. Pull request #20849
- RRD failures now back off and retry instead of permanently disabling RRD. Pull request #20825
- Ports discovery only stores known port columns instead of using walked SNMP keys as column names. Pull request #20796
- ARP search interface sorting now uses the correct
port_ifdescrcolumn. Pull request #20845 - Printer toner graphs were fixed. Pull request #20844
- The inventory tab crash was fixed by moving parse_entity_state() into InventoryController. Pull request #20840
- Ignition log collection was disabled to stop a memory leak. Pull request #20841
Why it matters
This week fixed several user-visible breakages, including printer toner graphs, ARP search sorting and the inventory tab. It also improved state monitoring for ArubaOS-CX fans and modules, and made RRD recover after failures instead of staying disabled. Scheduled polling arrived as an experimental option for queue-based polling and discovery.
Changelog entry
- Add experimental scheduled polling: queue-based polling and discovery. Pull request #16319
- Add arubaos-cx fan and module state sensors. Pull request #20661
- Enhance NTP application graphing. Pull request #20338
- RRD: back off and retry on failures instead of permanently disabling. Pull request #20825
- Only store known port columns in ports discovery. Pull request #20796
- Fix ARP search interface sorting column name. Pull request #20845
- Fix printer toner graphs. Pull request #20844
- Fix inventory tab crash by moving parse_entity_state() into InventoryController. Pull request #20840
- Disable Ignition log collection to stop a memory leak. Pull request #20841
- Fix api/v0/alerts API call. Pull request #20823
- Fix device settings toggles being set incorrectly. Pull request #20817
- Fix validate cli crash and output. Pull request #20837
This week: experimental scheduled polling landed, ArubaOS-CX fan and module state sensors were added, RRD now retries after failures, and fixes went in for printer toner graphs, ARP search sorting and the inventory tab.
This week brought an experimental scheduled polling option for queue-based polling and discovery, plus new ArubaOS-CX fan and module state sensors. RRD no longer disables permanently on failures and instead backs off and retries. Several fixes landed too: printer toner graphs, ARP search interface sorting, the inventory tab crash, validate cli output, and Ignition log collection was disabled to stop a memory leak.
Week of September 28, 2026
What shipped
- Settings system rewritten with direct setting links and Vue.js v2 removed. Pull request #20743
- Device ports tab migrated to Laravel with server-side paging, filtering, and bulk actions. Pull request #20749
- Device modules settings page redesigned for better usability. Pull request #20730
- All billing pages migrated to Laravel. Pull request #20723
- Search navigation speed improved by fixing pending requests and incomplete results. Pull request #20726
- Device overview page optimization for ports reduces slowness on many links. Pull request #20727
- UTF-8 encoding handling in ENTITY-MIB strings prevents discovery crashes on non-UTF-8 data. Pull request #20738
- OSPF neighbor table out-of-order handling fixed for Aruba procurve switches. Pull request #20713
- Legacy ospfv3 polling module file removed as it's now handled by modern module class. Pull request #20751
- Twenty-five legacy discovery module adapter files removed after migrating to LibreNMS\Modules classes. Pull request #20752
Why it matters
This week focused on modernizing the codebase by migrating more UI pages to Laravel, removing legacy module files, and fixing device discovery and polling issues. Multiple performance optimizations and compatibility fixes improve stability on various hardware platforms.
Changelog entry
- Settings system rewritten with direct setting links; Vue.js v2 removed Pull request #20743
- Device ports tab migrated to Laravel with server-side paging, filtering, and bulk actions Pull request #20749
- All billing pages migrated to Laravel Pull request #20723
- Device modules settings page redesigned Pull request #20730
- Search navigation speed improved Pull request #20726
- Device overview page optimized for ports Pull request #20727
- UTF-8 encoding handling in ENTITY-MIB strings prevents discovery crashes Pull request #20738
- OSPF neighbor table ordering fixed for procurve switches Pull request #20713
- SG300 series temperature sensor exception added Pull request #20332
- Legacy ospfv3 polling module file removed Pull request #20751
- 25 legacy discovery module adapter files removed Pull request #20752
- GitHub pull request auto-labeling added Pull request #20759
Settings rewritten, ports page rebuilt in Laravel, modules page redesigned, billing migrated, search and device overview faster, UTF-8 and OSPF handling fixed, legacy files removed.
This week's LibreNMS updates include major UI modernization with the settings system rewritten, device ports and billing pages migrated to Laravel, and a redesigned modules settings interface. Performance improvements address slowdowns in search navigation and device overview rendering. Bug fixes handle UTF-8 encoding in ENTITY-MIB strings and OSPF table ordering issues on Aruba switches. Legacy module adapter files continue being removed as the modern module system handles these responsibilities.
Week of September 21, 2026
What shipped
- 26.9.1 bugfix release fixes billing polling, custom map pan/zoom, and IPMI locale issues. Release
- Device filter options now respect user permissions for location, device group, and poller group. Pull request #20643
- Device status reason now displayed when polling or discovering a down device. Pull request #20640
- IPMI sensor threshold float parsing fixed to handle locale and dirty-check issues. Pull request #20576
- ZFS wait-time graphs corrected to display milliseconds instead of raw nanoseconds. Pull request #20616
- PingCheck deferred alerts now execute for child devices using correct device lookup. Pull request #20610
- Fping can now run without specifying address family, letting fping choose automatically. Pull request #20641
- Email address parsing improved using Symfony Mime to correctly handle quoted names. Pull request #20605
- Key:rotate command no longer blocks on confirmation when run with --no-interaction flag. Pull request #20639
Why it matters
This week addresses stability and correctness across core features: billing calculations work again, IPMI sensors parse thresholds properly in all locales, and permission checks prevent unauthorized filter visibility. Several data display fixes ensure ZFS graphs and device status messages show accurate information.
Changelog entry
- Permission checks added for device filter options (location, device group, poller group) Pull request #20643
- Device status reason included when polling or discovering a down device Pull request #20640
- ZFS wait-time graphs now display milliseconds instead of nanoseconds Pull request #20616
- PingCheck deferred alerts fixed for child device lookups Pull request #20610
- Email address parsing improved with Symfony Mime for quoted names Pull request #20605
- IPMI sensor threshold float parsing fixed for locale handling Pull request #20576
- Fping can run without specifying address family Pull request #20641
- Key:rotate --no-interaction flag no longer blocks on confirmation Pull request #20639
- ZFS pool disk wait graphs fixed to read correct RRD file for Write series Pull request #20615
26.9.1 released. Fixes billing polling, IPMI sensor parsing with locale handling, and custom map settings. Permission checks tighten device filter visibility.
LibreNMS 26.9.1 is out with important fixes. Billing polling restored, IPMI sensor thresholds now parse correctly across locales, and device filter options properly respect user permissions. ZFS wait-time graphs display accurate milliseconds. Several additional refinements to device status reporting and ping functionality round out this maintenance release.
Week of September 14, 2026
What shipped
- Escaped default alert title definition to fix security vulnerability GHSA-9qcg-rgg9-mpjg. Pull request #20547
- Converted legacy API tokens to modern Sanctum tokens with backward compatibility for old format. Pull request #20528
- Added support for Palo Alto Networks Prisma SD-WAN ION appliances across 16 models. Pull request #20556
- Added SNR-OLT-GPON-16-2AC GPON OLT support with hardware, firmware, CPU, memory, temperature and transceiver discovery. Pull request #20558
- Added PoE power sensors for Netgear GS324TP with total budget and consumption reporting. Pull request #20480
- Health sensors widget now supports table mode with sorting by value and 100 entry hard cap. Pull request #20368
- Added complete Swedish translation covering all 27 PHP modules and JSON catalogue. Pull request #20167
- Replaced SnmpQueryMock with SnmprecSnmpBackend to read snmprec files directly with test optimizations. Pull request #20529
- Added error handling in Time::dateToMinutes() to catch malformed dates like those from APC UPS devices. Pull request #20577
- Fixed BGP peer discovery duplicates by setting
context_namein OS-specific modules and adding migration. Pull request #20560
Why it matters
This week includes critical security fixes for alert titles and API token handling, expanded device support for Palo Alto and Netgear equipment, and modernized token authentication. The Swedish translation and improved test infrastructure also enhance the project's accessibility and development experience.
Changelog entry
- Security: Escaped default alert title definition (GHSA-9qcg-rgg9-mpjg) Pull request #20547
- Security: Sanitized user and group inputs in LDAP search filters Pull request #20542
- Security: Prevented directory traversal in nfsen channel parameter Pull request #20540
- Security: Escaped device displayName and
sensor_descrin views Pull request #20539 - Security: Fixed oxidized XSS vulnerability Pull request #20538
- API: Converted legacy tokens to Sanctum with backward compatibility Pull request #20528
- Device: Added Palo Alto Networks Prisma SD-WAN ION support Pull request #20556
- Device: Added SNR-OLT-GPON-16-2AC GPON OLT support Pull request #20558
- Sensors: Added PoE power sensors for Netgear GS324TP Pull request #20480
- Sensors: Added Vertiv PDU GTHD temperature and humidity discovery Pull request #20567
- Widgets: Health sensors widget now supports table mode with sorting Pull request #20368
- UI: Improved custom maps with better zoom, dark mode, and mobile experience Pull request #20535
- Localization: Added complete Swedish translation Pull request #20167
- Fixes: Added error handling for malformed dates in Time::dateToMinutes() Pull request #20577
- Fixes: Fixed BGP peer discovery duplicates Pull request #20560
- Fixes: Fixed inventory loop due to duplicate index Pull request #20518
- Fixes: Device filter status down no longer affected by disable notify flag Pull request #20580
- Fixes: Fixed yaml snmpget exists checks comparison Pull request #20532
- Testing: Replaced SnmpQueryMock with SnmprecSnmpBackend for direct snmprec reading Pull request #20529
This week: security fixes for alert titles and LDAP injection, Palo Alto Prisma SD-WAN support, Netgear PoE sensors, Swedish translation, and API token modernization. Plus BGP duplicate fixes and improved error handling for malformed device data.
LibreNMS releases this week include important security updates addressing alert title escaping and LDAP filter sanitization, plus expanded device support for Palo Alto Networks Prisma SD-WAN ION and Netgear PoE switches. Major infrastructure improvements include modernized Sanctum-based API token handling with legacy support, a complete Swedish translation, and optimized SNMP test backend. Bug fixes address BGP peer duplicates, malformed date handling from UPS devices, and graph query parsing.