feat(security): compile network ranges and CIDR arrays into edge firewall policies

2026-04-26 20:49:57 +00:00
parent 89ab918826
commit 7f3ab2499d
8 changed files with 241 additions and 19 deletions
@@ -1,5 +1,13 @@
 # Changelog

+## 2026-04-26 - 13.25.0 - feat(security)
+compile network ranges and CIDR arrays into edge firewall policies
+
+- add support for storing intelligence network CIDR arrays alongside single network ranges
+- convert start-end IPv4 ranges into CIDR blocks when compiling security policies
+- always return an explicit remote ingress firewall snapshot with a blockedIps array
+- add tests covering range normalization, ASN-derived CIDRs, and empty firewall snapshots
+
 ## 2026-04-26 - 13.24.0 - feat(security)
 add security policy management and IP intelligence operations to the ops UI