Hello -
I have been using the business edition for about a year.
I have noted that minor version bumps happen automatically and smoothly via the cron job "Automatic firmware updates".
Major version updates aren't automatic, and I'm not clear on what is the correct way to engage with those to avoid being silently stranded in a dead-end branch and not getting updates.
I also have a cron job for "Firmware update check", but it doesn't notify me of its results. Because of this, it appears I missed the security updates for CVE-2026-44194 & 45158 due to being on 25.10.2, and the host was waiting for manual intervention to upgrade to 26.4.
I see a couple of things I could do:
- Since monit does email its output, I could create a custom monit task to run /usr/local/opnsense/scripts/firmware/check.sh.
- I can subscribe to notifications for https://github.com/opnsense/core/security/advisories, but that requires me to verify that each is addressed, whereas I'd like to simply know that it's automated.
Is there a better or more supported way to manage the transition to new major versions without surprises or gaps? (Even better, is an LTS version on the roadmap someday?)
Thank you, and apologies for my ignorance.