Last Month in Nautobot – June and July 2026

Welcome to our monthly Nautobot community update! We’ll dive into the latest updates across the Nautobot community, highlighting the key milestones, releases, and noteworthy contributions. From new features and enhancements to bug fixes and events, there’s always something happening in our dynamic ecosystem. Open source is at the core of our values, empowering individuals and organizations to collaborate, innovate, and make a positive impact together. This monthly blog post is our way of celebrating the accomplishments and contributions of our Nautobot community members.

Nautobot 3.2

July was a big month for us with the release of Nautobot 3.2. There is a lot packed into this core release, with three things that stand out. First is breakout cable support. Nautobot can now model a single physical cable that splits into multiple connections, such as one 400G port broken out into four 100G links. Second is the new IP Address Range model. You can now record a whole span of IP addresses inside a Prefix without creating a record for every single address. Third is job cancellation. If a job is running, pending, or abandoned, you can now cancel it right from the UI or the REST API. On top of all that, 3.2 includes a number of security fixes and smaller quality-of-life improvements.

This release also includes updates to our commercial apps, OS Upgrades, Operational Compliance, Device Discovery, and Nautobot Tools, with new features such as Job Chaining and a completely new app that creates powerful Reports based on your Nautobot data. For more details and the full list of what’s new, check out the 3.2 release blog post!

Nautobot Core

Releases – Stable

• v3.2.1 – 2026-07-28
  • #9313 – Resolved a cryptography dependency conflict so that Apps such as SSoT can be installed alongside Nautobot v3.2.
• v3.2.0 – 2026-07-27
  • Security Note: Several CVE fixes in this release introduce breaking changes.
  • Fixed multiple security advisories: the REST API and GraphQL now enforce object-level view permissions when traversing to related objects (GHSA-h8rv-c7c8-cvmx, GHSA-mfwj-pjgx-22v2), Jinja2 template sandbox escapes were fixed and template rendering was restricted (GHSA-p99c-c9qx-34fw, GHSA-6jmc-h6f2-46j4), and the Job Hook dispatch path now enforces the run permission (GHSA-qr7c-g3j2-hw5q).
  • Added support for breakout cables across the UI, REST API, and cable path tracing.
  • Reworked the cable data model so a cable may have more than two terminations, with backward-compatibility support for the most common access patterns.
  • Cables are no longer required to have both endpoints defined; terminations may be added, changed, or removed after a cable is created.
  • Added the new IP Address Range model, representing a contiguous span of IP addresses within a parent Prefix without creating individual IP Address records.
  • Added the ability to cancel running, pending, or abandoned jobs from both the UI and REST API, with support for both Celery and Kubernetes jobs.
  • The homepage now saves the position and collapsed state of each panel and automatically rearranges panels to fit the browser window.
  • Added model-name typeahead suggestions and live search results to the header search bar.
  • Object Metadata records can now be created, edited, and deleted directly through the web UI.
  • Changed the default sort ordering of device components to improve performance at large scale, and components belonging to a Module installed in a Device now automatically set their device foreign key to that Device.
  • Other additions include a hierarchical Module Bays tree view on the Device detail view, optional Markdown rendering for Computed Fields, and opt-in OpenTelemetry support.
• v3.2.0b2 – 2026-07-23
  • Pre-release of Nautobot v3.2.0; see the v3.2.0 release notes above for a summary of the 3.2 changes.
• v3.1.8 – 2026-07-17
  • Fixed stored XSS vulnerabilities (GHSA-56v6-2fhr-wxgq) and a REST API authorization bypass in approval workflows (GHSA-q4c5-2j6f-r476), and updated django and Pillow to mitigate multiple CVEs.
  • Added a “Go to page” input to the paginator and fixed several bugs, including dynamic group membership incorrectly returning no members for filters with multiple conjoined values.
• v3.2.0b1 – 2026-07-09
  • Pre-release of Nautobot v3.2.0; see the v3.2.0 release notes above for a summary of the 3.2 changes.
• v3.1.7 – 2026-07-06
  • Added missing filter forms for various models to make them usable with Dynamic Groups.
  • Fixed several bugs, including application crashes when creating an Interface with a required Custom Field and lingering git subprocesses after Git repository synchronization.
• v3.1.6 – 2026-06-23
  • Fixed an error when rendering Markdown for empty values and fixed device component tab actions returning the user to a stale URL that displayed an empty list.
• v3.1.5 – 2026-06-22
  • Updated django, pyjwt, cryptography, and other dependencies to mitigate multiple security vulnerabilities.
  • Added a “Queue Name” column to the Job Results table and improved the Relationship create/edit form for symmetric relationship types.
• v3.1.4 – 2026-06-08
  • Fixed the Scheduled Job “Assume Ownership” action to not bypass approval workflows.
  • Fixed bulk delete operations not creating change records for cascade-deleted child objects, along with several other bug fixes.

Releases – LTM 2.4

• v2.4.38 – 2026-07-27
  • Security Note: Several CVE fixes in this release introduce breaking changes.
  • Backported the Nautobot 3.2 security fixes: REST API and GraphQL enforcement of object-level view permissions on related objects, Jinja2 template sandbox escape fixes and rendering restrictions, and run permission enforcement on the Job Hook dispatch path.
• v2.4.37 – 2026-07-17
  • Fixed stored XSS vulnerabilities (GHSA-56v6-2fhr-wxgq) and updated Pillow to mitigate multiple CVEs.
• v2.4.36 – 2026-06-22
  • Updated pyjwt and cryptography dependencies to mitigate multiple security vulnerabilities.
• v2.4.35 – 2026-06-08
  • Fixed slow page loads on detail views at large scale, along with several other bug fixes.

Apps Ecosystem

• Nautobot App SSoT: v4.6.0 – 2026-07-28
  • #1252 – Added Cisco SD-WAN integration for Devices, DeviceTypes, SoftwareVersions, Interfaces, IP Addresses, and VRFs.
  • #1153 – Fixed LibreNMS device sync raising an error when updating a device’s OS version without also updating its platform.
  • #1245 – Fixed the remaining methods in Arista CloudVision SSoT sync when attributes are streamed in multiple gRPC notification frames.
  • #1292 – Fixed LibreNMS device sync overwriting a device’s location on every run regardless of the sync_locations setting.
  • #1294 – Fixed Bootstrap ScheduledJob create/update failing on Nautobot v3.
  • #1296 – Sped up the Infoblox integration by bulk-fetching records and paging large prefixes.
  • #1299 – Fixed Infoblox location EA mapping to be case-insensitive, LocationType-safe, and configurable.
  • #1304 – Fixed Meraki IP address sync incorrectly marking an address as primary when it was primary for a different device rather than the device being synced.
  • #1315 – Fixed Arista CloudVision SSoT failing to load on Python 3.12 when setuptools is not installed.
  • #1315 – Fixed DNA Center sync failing to import Devices on Nautobot v3.2.
• Nautobot App SSoT: v4.5.2 – 2026-07-06
  • #916 – Fixed LibreNMS SSoT crashing during Nautobot adapter load when a synced device has no Platform assigned, by skipping such devices with a warning instead.
  • #1277 – Fixed slow performance of the ServiceNow integration when tagging synced objects by replacing per-object saves with bulk database operations.
• Nautobot App SSoT: v4.5.1 – 2026-07-01
  • #1281 – Fixed _children mappings that reference a model property returning a queryset or manager raising an error during load.
• Nautobot App SSoT: v4.5.0 – 2026-06-29
  • #304 – Added configurable logging to log progress when using the contrib adapter.
  • #1226 – Added a skip_auto_component_creation opt-in for SSoT jobs, suppressing Nautobot’s automatic Device/Module component instantiation during sync.
  • #1249 – Added ObjectMetadataAnnotation to nautobot_ssot.contrib, letting DiffSync models read and write a field’s value to Nautobot Object Metadata.
  • #1261 – Added a setting to the Arista CloudVision integration to allow deletion of IP addresses that are present in Nautobot but not present in CloudVision (defaults to False).
  • #1275 – Added automatic field selection to the ServiceNow integration so each table load only requests the columns referenced by its mappings, and made the ServiceNow page size configurable.
  • #1193 – Changed MTU handling in the DNA Center integration to account for 0 as an output from DNAC and save it in Nautobot as None.
  • #791 – Fixed two latent bugs in the SSoT contrib adapter and model where custom-relationship error handlers raised errors instead of the intended warning/error message.
  • #1159 – Fixed Meraki SSoT crashing Nautobot startup when more than one Platform name contains “Meraki”.
  • #1205 – Fixed Meraki SSoT assigning the management/primary IP from an inactive uplink.
  • #1211 – Fixed the Infoblox integration blanking out the Infoblox comment field when any field of a Nautobot Prefix object gets updated.
  • #1222 – Fixed Meraki firewall port loading when devices have no uplink IP configured.
  • #1235 – Fixed token authentication against on-premise Arista CloudVision portals.
  • #1238 – Fixed an error in the LibreNMS integration when an IP address is missing.
  • #1239 – Fixed version parsing on newer Citrix devices.
  • #1245 – Fixed Arista CloudVision SSoT sync failing when attributes are streamed in multiple gRPC notification frames.
  • #1250 – Fixed vSphere SSoT sync crashing when more than one IP Address shares the primary IP host.
  • #1257 – Moved non-testing imports out of the test modules to avoid test dependency loading in a non-dev environment.
  • #1258 – Fixed handling of children when the child attribute is a one-to-one field.
  • #1261 – Fixed the Arista CloudVision integration attempting to create an IP address that already existed in Nautobot.
  • #1274 – Fixed a bug in the LibreNMS integration where all connections defaulted to port 443 regardless of the configured port.
  • #1275 – Fixed the ServiceNow integration silently truncating tables larger than 10,000 rows and raising spurious update errors on successful updates.
• Nautobot App SSoT: v3.12.5 – 2026-06-17
  • Backported the skip_auto_component_creation opt-in for SSoT jobs.
• Nautobot App SSoT: v4.4.0 – 2026-06-01
  • #1214 – Added thread-safe caching and prefetching for Nautobot objects to reduce query overhead.
  • #1203 – Fixed an error in the Infoblox SSoT integration when updating Prefix VLAN assignments.
  • #1236 – Fixed vSphere SSoT source load crashing when vSphere contains duplicate VM names within a cluster.
  • Fixed vSphere SSoT sync errors when a primary IP was not present in Nautobot.
• Nautobot App Device Onboarding: v5.4.1 – 2026-07-27
  • Maintenance release with test fixes.
• Nautobot App Device Onboarding: v5.4.0 – 2026-07-01
  • #244 – Added support for onboarding switch stacks as Virtual Chassis objects in the Sync Devices From Network job for Cisco IOS and Cisco IOS-XE platforms, including master identification via serial number matching and handling of provisioned-but-absent stack slots.
  • #568 – Added an optional “Sync VRF to Prefix” toggle on the Sync Network Data From Network job that additively associates each interface’s VRF with the parent prefix of the interface’s IP addresses.
  • #244 – Changed the sync jobs to require both hostname and serial to match an existing Nautobot Device by default; devices with a drifted serial are now skipped with a warning, and a new “Update Devices With Changed Serial” toggle restores hostname-only matching.
  • #555 – Fixed an erroneous Manufacturer being created and a duplicate DeviceType exception when the same model exists under multiple manufacturers.
  • #557 – Fixed trunk interfaces with no tagged VLANs raising an error during sync.
  • #561 – Fixed silently dropped per-host failure messages in sync jobs.
  • #563 – Fixed Sync Network Data From Network failing when the same IP host existed in multiple Nautobot namespaces.
  • #565 – Fixed VRF assignment lookup for VLAN SVI interfaces on Cisco IOS-XE devices.
  • #572 – Fixed Junos IPv6 loopback network mask discovery, and management interface and IP address discovery when an additional sub-string IP exists on the device.
  • #581 – Fixed the Sync Devices job to raise an error if platform auto-discovery fails and fail_job_on_task_failure is set to True.
• Nautobot App Device Onboarding: v4.4.6 – 2026-06-29
  • Backported the Junos discovery fixes and the platform auto-discovery failure handling from v5.4.0, and bumped the minimum version of ntc-templates to 9.0.0.
• Nautobot App Design Builder: v3.1.2 – 2026-07-28
  • #294 – Fixed compatibility with Nautobot 3.2 for changes to the Cable data model.
  • #295 – Fixed the original database error being masked by a secondary rollback failure when a design fails to implement; the underlying error is now surfaced.
  • #298 – Fixed the ChangeRecord.design_object API serializer not respecting the depth property.
• Nautobot App Design Builder: v3.1.1 – 2026-06-23
  • #287 – Fixed a DesignJob.render() crash when a DesignJob subclass uses multiple inheritance.
• Nautobot App ChatOps: v4.0.3 – 2026-07-29
  • #421 – Added Slack token rotation support.
  • Updated the Arista CloudVision integration dependencies and APIs, restoring compatibility with Nautobot 3.2.
• Nautobot App ChatOps: v4.0.2 – 2026-06-26
  • #438 – Fixed grafana_default_timespan to default to 0 if not provided.
• Nautobot App DNS Models: v2.2.0 – 2026-07-03
  • #160 – Added functionality to auto-create PTR records in a reverse zone when an A or AAAA record is created in the zone.
  • #228 – Added support for global search using FQDN.
  • #182 – Moved the DNS menu option to the top level instead of under Apps.
  • #221 – Added the DNS view to the DNS zone’s string representation.
• Nautobot App Nornir: v3.2.2 – 2026-07-16
  • #269 – Changed the minimum required nornir-nautobot version to 4.3.0.
• Nornir Nautobot: v4.3.0 – 2026-07-16
  • #289 – Added Git-sourced offline command output support to the NAPALM and Scrapli dispatchers.
  • #289 – Added a force_offline option to get_command on the Netmiko, NAPALM, and Scrapli dispatchers to force reading command output from a Git file.
  • #291 – Fixed the save step in the Netmiko merge_config logging a discarded error message on failure, and added a log message confirming when the configuration save has completed.
• Pynautobot: v3.1.1 – 2026-07-06
  • Fixed get_custom_fields and get_custom_field_choices ignoring the filters argument.
  • Added fixes for compatibility with Nautobot v3.2.
• Nautobot App Golden Config: v3.0.7 – 2026-06-30
  • #848 – Changed the Backup and Intended jobs to no longer create empty Git commits when device configurations are unchanged.
• Nautobot App Firewall Models: v3.0.1 – 2026-06-01
  • #319 – Fixed an incompatibility when slugifying Capirca names that start with a number by prefixing the name with an underscore.
  • #361 – Restored missing action buttons on PolicyRule and NATPolicyRule tables and fixed an issue with the UserObject q filter.
• Nautobot App Welcome Wizard: v3.0.1 – 2026-06-01
  • Maintenance release with documentation updates, including new 3.0 screenshots.

Community

• Nvidia AI Datacenter Config Manager Nautobot Integration
• Controlling APC PDUs with a Nautobot Job
• João Soares – Automating firewall rule deployment in a highly regulated environment
• Open Source Network Management by Josh VanDeraa