chore(deps): update dependency librenms/librenms to v26.5.1

[renovate]

This PR contains the following updates:

Package	Update	Change
librenms/librenms	minor	26.4.1 → 26.5.1

---

Release Notes

librenms/librenms (librenms/librenms)

v26.5.1

Compare Source

26.5.1

(2026-05-20)

A big thank you to the following 4 contributors this last month:

• laf (2)
• murrant (2)
• dependabot (1)
• robje (1)

Thanks to maintainers and others that helped with pull requests this month:

• laf (3)
• Jellyfrog (2)

Device

• Correct C1 RX and D1 RX description (#​19700) - robje

Webui

• Fix ports show filter text (#​19698) - murrant

Bug

• Fixed unknown ifOperStatus Enum values (#​19708) - laf
• Fix Network map (#​19707) - laf
• Fix display name on null device (#​19702) - murrant

Dependencies

• Bump composer/composer from 2.9.7 to 2.9.8 (#​19705) - dependabot

v26.5.0

Compare Source

26.5.0

(2026-05-18)

A big thank you to the following 27 contributors this last month:

• murrant (37)
• laf (17)
• mpikzink (6)
• bdg-robert (5)
• dependabot (4)
• Npeca75 (3)
• craig-nokia (2)
• Starson323 (2)
• redundantredundancy (2)
• szastan (1)
• swaymel (1)
• HaradaKumiko (1)
• sherlvoodi-create (1)
• kivu8 (1)
• opalivan (1)
• matheorism (1)
• casdr (1)
• 49phil (1)
• eskyuu (1)
• shward (1)
• JHarmonPMU (1)
• Palerm0 (1)
• Yish1 (1)
• isolson (1)
• Yanonix (1)
• glennmatth (1)
• peelman (1)

Thanks to maintainers and others that helped with pull requests this month:

• laf (37)
• murrant (25)
• Jellyfrog (3)
• PipoCanaja (3)
• mpikzink (1)
• copilot-pull-request-reviewer (1)

Feature

• Complex port filters (#​19596) - murrant

Breaking Change

• Remove default fortigate -> fortios match for Oxidized config (#​19598) - casdr
• Cleanup dbSyncRelationship and dbDelete (#​19583) - mpikzink
• Change default APP_TRUSTED_PROXIES to 127.0.0.1 (#​19537) - murrant

Security

• Composer wrapper escape args (#​19663) - murrant
• Fix netmap xss (#​19661) - murrant
• Various XSS fixes (#​19660) - murrant
• Fix legacy page title xss (#​19659) - murrant
• Fix xss in edituser (#​19592) - murrant
• Fix Device Type Widget access (#​19568) - murrant

Device

• Added Pool IPs used for FlexBNG devices (#​19684) - laf
• Default Nokia TiMOS transceiver channels to 1 when lane count is missing (#​19678) - craig-nokia
• Add discovery support for additional AXIS OS device types (#​19653) - redundantredundancy
• Add CPU and memory polling for AXIS OS 12.10+ (#​19639) - redundantredundancy
• Add minimal support/detection for tbs-kylone (#​19634) - Npeca75
• Added detection for Digital Logger devices (#​19631) - laf
• Updated Huber+Suhner OS Data (#​19630) - kivu8
• Adva FSP150cc XG210 PSU and Fan Support (#​19625) - opalivan
• Fix to add TiMOS BGP peer description (#​19614) - matheorism
• Refactor & add support for sti440 terra receivers (#​19600) - Npeca75
• Add health sensors for NetAgent2 UPS devices (#​19521) - laf
• Metaview support (#​19492) - laf
• Siklu MultiHaul Terragraph sensor support (#​19487) - bdg-robert
• EnGenius Switch OS detection for ECS and EWS line of switches (#​19471) - bdg-robert
• Improve AP radio polling and add per-subscriber sensors (#​19462) - isolson
• Add support for Teltonika OTD Series (OTD500) (#​19113) - glennmatth

Webui

• Filter widget ?filter= avoids saved (#​19687) - murrant
• Ports filter by device hostname (#​19682) - murrant
• Fix device overview port links (#​19676) - murrant
• Make port has errors a standard filter (#​19675) - murrant
• Migrate user permissions page to Laravel (#​19627) - murrant
• Cache display name (#​19618) - murrant
• Dashboard (Gridstack) fixes (#​19610) - murrant
• Panel "table" slot quick fix (#​19602) - murrant
• Panel component glow up (#​19595) - murrant
• Device delete pages to Laravel (#​19594) - murrant
• Convert iftype page to Laravel (#​19590) - eskyuu
• SNMP Settings: mask credentials with visibility toggle (#​19542) - Palerm0
• Alert operations mute (#​19535) - laf
• Fix for device dependency host to respect global display name template (#​19534) - bdg-robert
• Prevent blank windows or tabs when opening SSH/Telnet (#​19532) - bdg-robert
• Fixes to availability device widget (#​19524) - murrant
• Add ability to show single graph for Port Group (#​19518) - laf
• Replace Gridster with Gridstack for dashboard widgets (#​19517) - laf
• Fix Device Availability Widget when no inserted exists (#​19515) - murrant
• Improve visibility of and/or selector in alert rule builder (#​19499) - laf
• Health sensors widget (#​19497) - laf
• Added QoS data associated with ports (#​19491) - laf

Graphs

• Prevent graph title from being cropped off on both sides (#​19589) - murrant

Snmp Traps

• Add EES power alarm SNMP trap handler (#​19670) - craig-nokia

Api

• Refractor API call /v0/devices/{id} (#​19622) - mpikzink

Settings

• Interface parsing docs+settings improvements (#​19633) - murrant

Discovery

• Updated tpdin sensors skipping 0 values (#​19507) - laf
• Add FDB table support for Nokia TiMOS devices (#​18713) - peelman

Bug

• Fixed MapQuest API url (#​19671) - szastan
• Remove dead scopeLimit on Notification model (breaks daily.sh under Laravel 11) (#​19669) - swaymel
• Fix double-encoded builder/extra in alert rule legacy API (#​19666) - Starson323
• Fix graph time picker redirect 404 (#​19648) - HaradaKumiko
• Fixes Xdsl.php when the SNMP response data in an unexpected format (#​19641) - sherlvoodi-create
• Fix link to port on Inventory page (#​19597) - laf
• Added more defaults to OSPFv3 area fields missing from Arista (#​19588) - laf
• Fix logic for dev commands (#​19586) - mpikzink
• Fix SSL Certificate menu hiding on lower sized screen res (#​19571) - laf
• Mistyped variable name breaking custom OID (#​19569) - JHarmonPMU
• Handle GBK-encoded interface names and descriptions in ports polling (#​19528) - Yish1
• Zynos/Zyxel fix port ifName between 50 and 63 (#​19341) - Yanonix

Refactor

• Filter search improvements (#​19664) - murrant

Cleanup

• Add net-snmp version to about (#​19612) - murrant
• Strong typing for table and select controllers (#​19572) - murrant
• Cleanup generate_sensor_link (#​19523) - mpikzink
• Cleanup get_port_by_id (#​19480) - mpikzink

Translation

• German translations (#​19601) - mpikzink

Misc

• Fix uninitialized variables in smokeping graph templates (#​19599) - bdg-robert
• Add check_dnssec_delegation override (#​19591) - 49phil
• Fall back to IEEE 802.3ad LAG-MIB when ifStackTable is missing (#​19574) - shward
• Fix BGP peer device links incorrect with reused IP address space (#​19394) - Starson323

Dependencies

• PHP Dependency updates: (#​19644) - murrant
• Bump fast-uri from 3.1.0 to 3.1.2 (#​19636) - dependabot
• Bump axios from 1.15.0 to 1.15.2 (#​19619) - dependabot
• Bump phpseclib/phpseclib from 3.0.51 to 3.0.52 (#​19617) - dependabot
• Bump postcss and vue-loader (#​19570) - dependabot

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[AreYouLoco]

Checks passed. Please do merge

[Aterfax]

Change default APP_TRUSTED_PROXIES to 127.0.0.1 (#​19537) - murrant

This will/has caused breakage for users of the docker image who have not configured a specific docker network range and/or setting the APP_TRUSTED_PROXIES= value correctly when using a reverse proxy for HTTPS.

Without the value set correctly, LibreNMS will ignore the upstream proxy $scheme value and fall back to setting all page links/references to use http protocol which breaks the UI styling etc... (even if the reverse proxy has a 301 redirect set for http --> https).

[AreYouLoco]

I am using kubernetes with docker image and I got broken webui.

Tried setting APP_TRUSTED_PROXIES to 0.0.0.0 and null. To no success.
Edit:
Rolled back to 26.4.0 and its fine. My db schema is out of sync for now but all works.

[murrant]

@AreYouLoco those settings are both invalid. It needs to be set to the IPs of your reverse proxies. Or if you don't care about security, you can set it to *

https://docs.librenms.org/Support/Environment-Variables/#trusted-reverse-proxies