Hi there,Today ships the first release version of the supplemental firewall rule API via plugin, a new firewall shaper statistics GUI and API and the usual number of improvements and third party updates.Note that this version does not ship OpenSSL 1.1.1g as at this point our release decision would have been to push 20.1.5 to next week or do a smaller 20.1.6 next week on top.Here are the full patch notes:o system: support configuration for SSH HostKeyAlgorithms, KexAlgorithms, Ciphers and MACso system: simplify validations in gateway monitor settingso interfaces: mark VXLAN and loopback devices as configurableo interfaces: validation typo caused failure to communicate unassignable targetso interfaces: netstat tree view GUI and APIo interfaces: use libxo to extract ARP datao firewall: checkbox selection ignores visibility settingo firewall: add network group type to combine aliases cleanlyo firewall: IPv6 essential icmpv6 allow for ::o firewall: new shaper statistics GUI and APIo firewall: support filter log messages with PIDo reporting: when flow times are not returned stick to receive timestampo openvpn: use multihome when selecting "any" interface with UDPo unbound: create shared startup script for background tasko mvc: also store "" field value as initial state to prevent empty fields as being marked as changedo mvc: firewall source NAT ranges support in pluginso mvc: keep options in static set for PortFieldo mvc: support interface targets without addresseso mvc. add "migration_prefix" attribute to modelo mvc: catch ArgumentCountErroro mvc: skip empty gateway artefacto plugins: os-acme-client 1.31[1]o plugins: os-firewall 1.0 API supplemental packageo plugins: os-haproxy 2.22[2]o plugins: os-unbound-plus 1.1[3]o plugins: os-wol 2.3 adds case insensitive matching in widget (contributed by Gauss23)o ports: ca_root_nss 3.51.1o ports: dnsmasq 2.81[4]o ports: krb5 1.18.1[5]o ports: openvpn 2.4.9[6]o ports: php 7.2.30[7]o ports: py-certifi 2020.4.5.1o ports: strongswan 5.8.4[8]Stay safe and healthy,Your OPNsense team--[1] https://github.com/opnsense/plugins/pull/1784 [2] https://github.com/opnsense/plugins/pull/1783 [3] https://github.com/opnsense/plugins/blob/master/dns/unbound-plus/pkg-descr [4] http://www.thekelleys.org.uk/dnsmasq/CHANGELOG [5] https://web.mit.edu/kerberos/krb5-1.18/ [6] https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn24#OpenVPN2.4.9 [7] https://www.php.net/ChangeLog-7.php#7.2.30 [8] https://wiki.strongswan.org/versions/77