chore(deps): update dependency opennms/opennms to v36.0.4

[renovate]

This PR contains the following updates:

Package	Update	Change
OpenNMS/opennms	patch	36.0.3 → 36.0.4

---

Release Notes

OpenNMS/opennms (OpenNMS/opennms)

v36.0.4: OpenNMS Horizon 36.0.4

Compare Source

Release 36.0.4

Bug

• /notifications/summary counts notification deliveries instead of notifications (Issue NMS-20283)
• Bump Apache CXF (Issue NMS-20205)
• Event Translator bug with SQL cases and reloads (Issue NMS-20258)
• Eventd drops every event until the webapp loads the database eventconf (Issue NMS-20289)
• Fix OpenNMS Browser notification Bug (Firefox and chrome) (Issue NMS-20200)
• Fix regression CXF 3.6.12 caused by hardcoded default cap of 50 multipart attachments per request (Issue NMS-20216)
• Improve handling of failed collection alarms for restarts/reloads (Issue NMS-19979)
• Intermittent deadlock in DataBlocksOffHeapQueue during memory to off-heap transition (Issue NMS-20271)
• Update Jetty (Issue NMS-20088)
• Kafka sink consumer manager tracks unstarted consumers, leaking live ones on reload (Issue NMS-20203)
• Missing authorization on /api/v2 PATCH endpoints (Issue NMS-20248)
• Outage records can permanently miss their event ID under a race condition (Issue NMS-20260)
• Reduce per-event overhead in the event translator (Issue NMS-20204)
• Restoring a JSON snmp-config download wipes inherited timeout and retry values (Issue NMS-20262)
• Improper handling of user-supplied report parameters in shipped JasperReports templates (ROLE_USER) (Issue NMS-20245)
• Update com.fasterxml.jackson.core:jackson-core library (Issue NMS-20226)
• Update com.fasterxml.jackson.core:jackson-databind library (Issue NMS-20227)
• Update com.mchange:mchange-commons-java library (Issue NMS-20236)
• Update curl-minimal library (Issue NMS-19982)
• Update io.netty:netty-codec library (Issue NMS-20237)
• Update io.netty:netty-codec-http library (Issue NMS-20238)
• Update io.netty:netty-transport-sctp library (Issue NMS-20251)
• Update libcurl-minimal library (Issue NMS-19983)
• Update org.apache.httpcomponents.core5:httpcore5 library (Issues NMS-20228, NMS-20231)
• Update org.apache.httpcomponents.core5:httpcore5-h2 library (Issues NMS-20229, NMS-20232)
• Update org.bouncycastle:bcprov-jdk18on library (Issue NMS-20239)
• Update org.codehaus.plexus:plexus-utils library (Issues NMS-19667, NMS-20222)
• Update org.eclipse.jetty:jetty-http library (Issue NMS-20196)
• Update org.eclipse.jetty:jetty-security library (Issue NMS-20184)
• Update org.jline:jline-remote-telnet library (Issue NMS-20223)
• Update org.snmp4j:snmp4j-agent library (Issue NMS-20275)
• Update python3 library (Issue NMS-20220)
• Update python3-libs library (Issue NMS-20221)
• Update vim-minimal library (Issue NMS-19958)
• Improper XML parsing in the XML collector could allow unauthorized file access on the OpenNMS host (Issue NMS-20206)
• XmlCollect unable to collect entities that begin with a number (Issue NMS-15222)
• container-based upgrade from 35.0.5 to 36.0.3 fails due to java.lang.ClassNotFoundException: org.opennms.netmgt.ticketd.NullTicketerPlugin (Issue NMS-20259)
• upgrade of container-based 35.0.5 to 36.0.3 fails with error: Unexpected exception while starting Karaf java.lang.RuntimeException: Could not resolve mvn:org.apache.felix/org.apache.felix.framework/6.0.5 (Issue NMS-20261)
• v1 /rest/alarms returns a corrupt response body when an alarm's lastEvent is deleted concurrently (Issue NMS-20161)

Enhancement

• Importing our OPENNMS-GPG-KEY is violating security policy in CentOS 10+ (Issue NMS-19071)
• Improve shipped OpenAPI/Swagger Docs (Issue NMS-20263)
• Kafka producer json payloads (Issue NMS-19840)
• Move java.io.tmpdir out of $OPENNMS_HOME/data/ so Karaf cache cleanup can't destroy JVM tmp state (Issue NMS-19841)
• Replace the JSP "adhoc graphs" workflow with a Vue-based SPA (Issue NMS-20208)
• Small improvements to our docs (Issue NMS-20292)
• Topology (Preview): new Vue topology map (compose, discover, inspect) (Issue NMS-19878)
• Update WSMan library in OpenNMS (Issue NMS-20287)

New Feature

• Expose a discovered link's interfaces on its graph API edge (Issue NMS-20254)

Story

• Prevent shutdown delays from active daemon executor tasks (Issue NMS-20050)

Task

• Add tooltip to OnmsIconButton (Issue NMS-20162)
• Deprecate some plugins that we ship as part of opennms-plugins rpm (Issue NMS-19458)
• Fix Alarm table checkboxes in dark mode (Issue NMS-20170)
• Fix dependabot alerts for core/web-assets, August 2026 (Issue NMS-20250)
• Make top menubar more responsive (Issue NMS-20201)
• More menu issues to fix (Issue NMS-20180)
• Move icons into onms-ui (Issue NMS-20243)
• OnmsTimePicker control and Time support for OnmsDatePicker (Issue NMS-20280)
• SideMenu: Flyout on hover fixes (Issue NMS-20273)
• Unit test to confirm availability of static assets (Issue NMS-20246)
• Update OnmsSearchInput to have 'clear' icon (Issue NMS-20160)
• Update apacheThriftVersion (Issue NMS-20213)
• Update log4j to newer version (Issue NMS-20177)
• Various UI Fixes - dark mode, scrolling (Issue NMS-20182)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between day 8 and 14 of the month, and on Wednesday (* * 8-14 * 3)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.