The first feature release of the 5.15 series of NAV is now out!

The source code is available for download at GitHub [1].

New packages for Debian 12 (Bookworm) and 11 (Bullseye) are available in our APT repository.

Please be extra aware of config file changes, especially in ipdevpoll.conf. Look out for *.dpkg-dist files in /etc/nav and make sure to update your running config.

## Security

- In preparation for properly protecting against CSRF attacks throughout - NAV: Added CSRF tokens to AJAX POST requests (#3465) - Removed CSRF tokens from GET requests (#3472)

## Removed

- Removed unused vendored Foundation CSS stylesheets (#3479) - Removed vendored Foundation JavaScript library from codebase (#3542)

## Added

- Show VLAN netident in ipdevinfo port list (#2160) - Dashboards are now shareable between users (#2344) - Show device MAC address in the Device Info tab of ipdevinfo (#3222) - Added Django 5.2 and Python 3.13 to default test matrix (#3467) - Improved user feedback in PortAdmin by loading live port details in background, after initial page load (#3544) - Added search results preview in navbar (#3577) - Documented how to enable IPv6 connectivity inside devcontainer (Docker)

## Changed

- Updated NAPALM dependency to 5.1.0 (#3495) - Replaced SeedDB IP Device "check connectivity" JavaScript with HTMX, including improved user feedback (#3560)

### Non-visible and developer-centric changes

- The dated Foundation JavaScript libraries and CSS stylesheets are being replaced by a combination of HTMX-based features, new internal libraries and newer alternative libraries. The goal is to keep the outward user interface more or less unchanged:

- Use HTMX modals in SeedDB Patch tool (#3461) - Replaced tooltip in status actions with accessible help text toggle (#3463) - Replaced Foundation Joyride with `Driver.js` implementation (#3468) - Replaced Foundation Topbar JS with JQuery (#3476) - Replaced Foundation Equalizer with JQuery (#3477) - Replaced foundation alert plugin with custom JavaScript (#3481) - Replaced native tooltips with NAV tooltips (#3482) - Replaced navlet modals with HTMX implementation (#3487) - Replaced search hint modals in Radius tool with HTMX (#3494) - Replaced radius detail modals with HTMX (#3514) - Added fit-content size to modals to support large content - Replace IPAM subnet diagram help modal with HTMX - Replaced "about logging" modal with HTMX - Replaced Foundation dropdowns with custom implementation - Replaced "import dashboard" modal with HTMX - Replaced Machine Tracker modals with HTMX - Replaced modals in ipdevinfo tool with HTMX - Replaced threshold form help modal with HTMX - Added custom NAV tooltip as replacement for Foundation JS (#3449) - Added reusable HTMX modal utilities and styles (#3461) - Added modal closing behaviour controls for close button visibility and outside click handling (#3537) - Added support for positioning popover on multiple sides (#3550) - Replaced feedback modal in Portadmin with HTMX (#3540) - Replaced Foundation dropdowns with popovers (#3531) - Upgraded tinysort dependency (#3580) - Replaced Foundation Clearing Lightbox with custom Lightbox plugin for room/location picture gallery (#3530) - Use fixed position tooltips in status widgets and SeedDB list tree (#3576) - Added support for controlling popovers with client side events (#3578) - Replaced outdated timepicker library with flatpickr (#3587)

- Modernized Django URL config, mostly by replacing usage of `re_path()` with `path()` (#3515, #3548, #3631)

## Fixed

- Protect against unexpected NUL bytes in SNMP strings by stripping them (#2479) - Fixed bug where status widget tooltip gets stuck (#3301) - Show friendly error message in Arnold when attempting to block ports on switches that do not feature a writeable management profile (#3383) - Fixed bug where ipdevinfo job refresh does not display error messages properly (#3385) - Made it possible to un-revoke JWT refresh token by recreating the token (#3457) - Fixed broken all-time searches in Radius tool (#3500) - Removed "no racks" alert after adding a new rack to a room (#3506) - Show distinct filter groups in Groups and Permissions modal in Alert Profiles (#3523) - Show errors on invalid IP in Network Explorer search (#3534) - Fixed saving rooms/locations with active alerts widgets after editing (#3561) - Fixed sudo-ing to the default (anonymous) account (#3571) - Fixed PortAdmin bug where restarting interfaces fails (#3589) - Fixed tooltips in Device History and Subnet Matrix tools (#3591) - Enabled GetBulk / bulkwalk operations under synchronous SNMP v3 communication (enormously speeding up PortAdmin SNMPv3 queries) (#3594) - Adjusted size and position of "close modal" icon to avoid overlap with text - Fixed bug where QR Code button is not clickable

## Release notes

We always advise you to have a look at NAV’s accompanying release notes before upgrading.

Happy NAVing everyone!

## Links

[1] https://github.com/Uninett/nav/releases [2] https://nav.uninett.no/install-instructions/#debian [3] https://nav.readthedocs.io/en/latest/release-notes.html#nav-5-15