napalm-opnsense/CHANGELOG.md

Changelog

All notable changes to this driver. The format follows Keep a Changelog, versions follow Semantic Versioning.

[Unreleased]

Changed

• Python 3.12 is the floor (requires-python = ">=3.12"): netOrk runs every driver on 3.12, so 3.10 and 3.11 are no longer tested (NAPALM/driver-standard#6).
• The floor on napalm is 5.1: older releases import pkg_resources, which a Python 3.12 venv no longer has.

Fixed

• get_vpn_tunnels() keys a WireGuard peer by its interface and the start of its public key (wireguard-wg0-aBcD1234, URL-safe) instead of its position, so a peer added ahead of another no longer renumbers it (#32). Every WireGuard key changes once with this release.

[0.5.0] - 2026-10-23

The first release on PyPI.

Changed

• The driver follows the NAPALM driver standard (https://git.netork.io/NAPALM/driver-standard): CI on Gitea runs ruff, mypy, the tests on Python 3.10–3.13 and at the lowest declared versions, bandit, pip-audit and a build check, and a release tag publishes to PyPI. The package now ships py.typed and a LICENSE file. Python 3.10 remains the floor. Requires napalm-device-types 4.21.1.

Fixed

• get_dhcp_leases() raises when Kea, ISC DHCP and the ARP fallback all failed, instead of returning an empty list that looks like a server without leases (#27).
• create_dhcp_reservation() leaves a reservation that already holds what was asked alone, and does not reconfigure (restart) Kea for it.

[0.4.0] - 2026-10-18

Added

• napalm-device-types 4.17's public contracts: apply_updates() passes the packages it is given and get_update_progress() reports the upgrade's state and log; get_dns_forwards(), set_dns_forward() and remove_dns_forward() for Unbound; get_ospf(). Requires napalm-device-types 4.17.0.

[0.3.0] - 2026-10-17

Removed

• Breaking: get_device_warnings(). The pending updates are in get_available_updates().

[0.2.0] - 2026-10-17

Changed

• Breaking: run_device_action is removed. The SNMP agent is set up through napalm-device-types 4.13's configure_snmp_agent with the caller's community, contact, location and listen address, and the firewall opens UDP/161 only to the allowed sources (#13).