Last Month in Nautobot – May 2024

Blog Detail

Welcome to our monthly Nautobot community update! We’ll dive into the latest updates across the Nautobot community, highlighting the key milestones, releases, and noteworthy contributions. From new features and enhancements to bug fixes and events, there’s always something happening in our dynamic ecosystem. Open source is at the core of our values, empowering individuals and organizations to collaborate, innovate, and make a positive impact together. This monthly blog post is our way of celebrating the accomplishments and contributions of our Nautobot community members.

Nautobot Core

Releases – Stable

  • Nautobot: v2.2.5 – 2024-05-28
    • #5740 – Updated requests to 2.32.1 to address GHSA-9wx4-h78v-vm56. This is not a direct dependency, so it will not auto-update when upgrading Nautobot. Please be sure to update your local environment.
    • #5757 – Fixed missing member object permission enforcement (e.g., enforce Device permissions for a Dynamic Group containing Devices) when viewing Dynamic Group member objects in the UI or REST API (GHSA-qmjf-wc2h-6x3q).
    • #5690 – Removed deprecated CustomFieldFilterForm alias of CustomFieldModelFilterFormMixin, as this would have caused confusion with the newly added CustomFieldFilterForm class providing filtering support for the Custom Fields list view.
    • Multiple other various bug fixes and enhancements
  • Nautobot: v2.2.4 – 2024-05-13
    • #1858 – Added sanitization of HTML tags in the content of BANNER_TOPBANNER_BOTTOM, and BANNER_LOGIN configuration to prevent potential injection of malicious scripts (stored XSS) via these features (GHSA-r2hr-4v48-fjv3).
    • #5672 – Updated Jinja2 dependency to 3.1.4 to address CVE-2024-34064.
    • #1858 – Added support in BRANDING_FILEPATHS configuration to specify a custom css and/or javascript file to be added to Nautobot page content.
    • #1858 – Added Markdown support to the BANNER_TOPBANNER_BOTTOM, and BANNER_LOGIN configuration settings.
    • #4986 – Fixed inconsistent active tab in several views.
    • #5644 – Made the uniqueness constraints between the ContactAssociation model and the related API serializer consistent.
    • #5684 – Fixed standard CSV export when using export templates.
    • #5689 – Fixed change logging for bulk delete operations so that user is included in the log.

Releases – LTM 1.6

  • Nautobot: v1.6.23 – 2024-05-28
    • #5740 – Updated requests to 2.32.1 to address GHSA-9wx4-h78v-vm56. This is not a direct dependency so it will not auto-update when upgrading Nautobot. Please be sure to update your local environment.
    • #5762 – Fixed missing member object permission enforcement (e.g., enforce Device permissions for a Dynamic Group containing Devices) when viewing Dynamic Group member objects in the UI or REST API (GHSA-qmjf-wc2h-6x3q).
  • Nautobot: v1.6.22 – 2024-05-13
    • #1858 – Added sanitization of HTML tags in the content of BANNER_TOPBANNER_BOTTOM, and BANNER_LOGIN configuration to prevent potential injection of malicious scripts (stored XSS) via these features (GHSA-r2hr-4v48-fjv3).
    • #1858 – Added support in BRANDING_FILEPATHS configuration to specify a custom css and/or javascript file to be added to Nautobot page content.
    • #1858 – Added Markdown support to the BANNER_TOPBANNER_BOTTOM, and BANNER_LOGIN configuration settings.
    • #2974 – Fixed an error when deleting and then re-creating a GitRepository that provides Jobs.
  • Nautobot: v1.6.21 – 2024-05-07
    • #5521 – Updated Pillowsocial-auth-app-django, and Jinja2 to address CVEs.
    • #5561 – Updated idna to 3.7 due to CVE-2024-3651. This is not a direct dependency, so it will not auto-update when upgrading. Please be sure to upgrade your local environment.

Apps Ecosystem

Community


Conclusion

Do you have any cool Nautobot-related project we should write about? Swing by the Network to Code Slack -> channel #nautobot and write us a quick line! Sign up here if you don’t have an account.

-Cristian and Gary



ntc img
ntc img

Contact Us to Learn More

Share details about yourself & someone from our team will reach out to you ASAP!

Last Month in Nautobot – April 2024

Blog Detail

Welcome to our monthly Nautobot community update! We’ll dive into the latest updates across the Nautobot community, highlighting the key milestones, releases, and noteworthy contributions. From new features and enhancements to bug fixes and events, there’s always something happening in our dynamic ecosystem. Open source is at the core of our values, empowering individuals and organizations to collaborate, innovate, and make a positive impact together. This monthly blog post is our way of celebrating the accomplishments and contributions of our Nautobot community members.

New Nautobot Book Announced

The Nautobot book, Network Automation with NautobotAdopt a network source of truth and a data-driven approach to networking, is now available for preorder. For more information, including where to place your preorder, take a look at the blog post.

Nautobot Core

Releases – Stable

  • Nautobot: v2.2.3 – 2024-04-30
    • #2946 – Added custom link support for interfaces, console ports, console server ports, power ports, power outlets, front ports, rear ports, device bays, and inventory items.
    • #5034 – Added a view to convert location contact information to contacts or teams.
    • #5537 – Re-added run_job generic Celery task as a wrapper for execution of all Nautobot Jobs.
  • Nautobot: v2.2.2 – 2024-04-18
    • #2459 – Improved performance of bulk-edit and bulk-delete UI operations by refactoring change logging logic.
  • Nautobot: v2.2.1 – 2024-04-15
    • #5493 – Added a configuration setting METRICS_DISABLED_APPS to disable app metrics for specific apps.
    • #5521 – Updated most dependencies to the latest versions available as of 2024-04-01.

Releases – LTM 1.6

Apps Ecosystem

Community


Conclusion

Do you have any cool Nautobot-related project we should write about? Swing by the Network to Code Slack -> channel #nautobot and write us a quick line! Sign up here if you don’t have an account.

-Cristian and Gary



ntc img
ntc img

Contact Us to Learn More

Share details about yourself & someone from our team will reach out to you ASAP!

Last Month in Nautobot – March 2024

Blog Detail

Welcome to our monthly Nautobot community update! We’ll dive into the latest updates across the Nautobot community, highlighting the key milestones, releases, and noteworthy contributions. From new features and enhancements to bug fixes and events, there’s always something happening in our dynamic ecosystem. Open source is at the core of our values, empowering individuals and organizations to collaborate, innovate, and make a positive impact together. This monthly blog post is our way of celebrating the accomplishments and contributions of our Nautobot community members.

With the release of Nautobot 2.1.9 and 1.6.16 came new requirements for pynautobot to include an authentication token for some initial calls that were not previously required. So to make sure that pynautobot (and subsequently Nautobot Ansible) and Nautobot Helm Chart work with the most recent version of Nautobot, new versions have been released. Read more in the blog post here.

Nautobot Core

Releases – Stable

  • Nautobot: v2.2.0 – 2024-03-29
    • Contact and Team Models (#230): Contact and Team are models that represent an individual and a group of individuals who can be linked to an object. Contacts and teams store the necessary information (name, phone number, email, and address) to uniquely identify and contact them. They are added to track ownerships of organizational entities and to manage resources more efficiently in Nautobot. Check out the documentation for Contact and Team.
    • Controller Model (#3111): Controller models have been added to the dcim app. A Controller in Nautobot is an abstraction meant to represent network or SDN (Software-Defined Networking) controllers. These may include, but are not limited to, wireless controllers, cloud-based network management systems, and other forms of central network control mechanisms. For more details, refer to the documentation for the Controller model.
    • Device Family Model (#3559): A Device Family represents a group of related Device Types. A Device Type can be optionally assigned to a Device Family.
    • Jobs Tile View (#5129): Job list is now available in two display variants: list and tiles. List is a standard table view with no major changes introduced. Tiles is a new type of view, displaying jobs in a two-dimensional grid.
    • Prefix and VLAN Many Locations (#4334#4412): The Prefix and VLAN models have replaced their single location foreign-key field with a many-to-many locations field, allowing multiple Locations to be attached to a single Prefix or VLAN.
    • Software Image File and Software Version models (#1): New models have been added for Software Image Files and Software Versions. These models are used to track the software versions of Devices, Inventory Items, and Virtual Machines and their associated image files. These models have been ported from the Device Lifecycle Management App, and a future update to that app will migrate all existing data from the nautobot_device_lifecycle_mgmt.SoftwareImageLCM and nautobot_device_lifecycle_mgmt.SoftwareLCM models to the dcim.SoftwareImageFile and dcim.SoftwareVersion models added here.
    • Syntax Highlighting (#5098): Language syntax highlighting for GraphQL, JSON, XML, and YAML is now supported in the UI via JavaScript.
    • Data Imports as a System Job (#5064): The CSV import functionality for all models has been changed from a synchronous operation to an asynchronous background task (system Job). As a result, imports of large CSV files will no longer fail due to browser timeout.
    • Plugin to App Renames (#5341): Installed Plugins view has been renamed to Installed AppsPlugin terminologies in Installed Plugins (now Installed Apps) view and dependent views have been changed to App throughout.
    • Standardization of max_length on all Charfields (#2906): Model CharFields’ max_length attributes have been standardized globally to have at least 255 characters except where a shorter max_length is explicitly justified.
  • Nautobot: v2.1.9 – 2024-03-25
    • #5450 – Updated django to ~3.2.25 due to CVE-2024-27351
    • #5464 – Added requirement for user authentication to multiple URLs
    • #5464 – Added narrower permissions enforcement to multiple URLs
    • #5464 – Removed the URL endpoints /api/users/users/my-profile/, /api/users/users/session/, /api/users/tokens/authenticate/, and /api/users/tokens/logout/ as they are unused at this time
    • #5413 – Updated Device “LLDP Neighbors” detail panel to handle LLDP neighbors with MAC address as port-id
  • Nautobot: v2.1.8 – 2024-03-18
    • #1102 – Added CELERY_BEAT_HEARTBEAT_FILE settings variable
    • #5228 – Added the option to configure and enforce validation_minimum and validation_maximum as length constraints on a Custom Field of type TextURLJSONMarkdownSelection, or Multiple Selection
    • #5228 – Added the option to configure and enforce validation_regex as a constraint on valid choice definitions for a Custom Field of type Selection or Multiple Selection
    • #5400#5401#5402 – Added multiple power-port, power-outlet, front port, rear port, and interface types
    • #5228 – Removed the hard-coded 255-character limit on custom fields of type Text
  • Nautobot: v2.1.7 – 2024-03-05
    • #5387 – Fixed an error in the Dockerfile that resulted in pyuwsgi being installed without SSL support
  • Nautobot: v2.1.6 – 2024-03-04
    • #5319 – Updated cryptography to 42.0.4 due to CVE-2024-26130. This is not a direct dependency so will not auto-update when upgrading. Please be sure to upgrade your local environment
    • #5172 – Added Collapse Capable Side Navbar: Side Navbar is now able to be expanded and collapsed
    • #5172 – Multiple UI changes for a better mobile experience

Releases – LTM 1.6

Apps Ecosystem

Community


Conclusion

Do you have any cool Nautobot-related project we should write about? Swing by the Network to Code Slack -> channel #nautobot and write us a quick line! Sign up here if you don’t have an account.

-Cristian and Gary



ntc img
ntc img

Contact Us to Learn More

Share details about yourself & someone from our team will reach out to you ASAP!