Merge pull request #2 from vyos/master

import 2024-03

3 files changed, 607 insertions, 1 deletions

diff --git a/docs/changelog/1.3.rst b/docs/changelog/1.3.rst
index 11d3be91..6ae5a5fb 100644
--- a/docs/changelog/1.3.rst
+++ b/docs/changelog/1.3.rst
@@ -8,6 +8,103 @@
    _ext/releasenotes.py
 
 
+2024-01-14
+==========
+
+* :vytask:`T5715` ``(bug): IPSec VPN: restart vpn is not working``
+
+
+2024-01-13
+==========
+
+* :vytask:`T5924` ``(bug): Build cannot pass the smoketest dialup-router-medium-vpn``
+
+
+2024-01-11
+==========
+
+* :vytask:`T5275` ``(default): Add op mode commands for exporting certificates to PEM files with correct headers``
+* :vytask:`T5274` ``(default): Add a deprecation warning for OpenVPN site-to-site with pre-shared secret``
+* :vytask:`T3191` ``(bug): PAM RADIUS freezing when accounting does not configured on RADIUS server``
+
+
+2024-01-10
+==========
+
+* :vytask:`T4646` ``(bug): USB serial output console does not work``
+* :vytask:`T4466` ``(bug): intel i225-v nic does not detect link after boot``
+* :vytask:`T4222` ``(feature): Support for TWAMP as round-trip metric``
+* :vytask:`T1369` ``(bug): GCP Networking Failure``
+
+
+2024-01-09
+==========
+
+* :vytask:`T3242` ``(bug): PPPoE Server overhead on virtual interfaces creation``
+* :vytask:`T2755` ``(default): Requirements for partial interface setup``
+* :vytask:`T2494` ``(bug): systemd dependencies issues``
+* :vytask:`T2343` ``(feature): Disable memory ballooning in VM templates``
+* :vytask:`T2254` ``(default): Provide more information on the build branch in the version data``
+* :vytask:`T2223` ``(feature): convert operational show interfaces to python/XML``
+* :vytask:`T1925` ``(bug): DMVPN is always listed as down in "show vpn ipsec sa"``
+* :vytask:`T1297` ``(feature): Add GARP settings to VRRP/keepalived``
+
+
+2024-01-08
+==========
+
+* :vytask:`T5318` ``(bug): Security Vulnerabilities for VyOS 1.3.3``
+* :vytask:`T3980` ``(bug): vrrp transition-script validator makes warning fatal and also causes a python NameError exception``
+* :vytask:`T2799` ``(feature): VyOS Certificates Manager``
+
+
+2023-12-29
+==========
+
+* :vytask:`T5852` ``(bug): Reboots fail with eapol WAN interface``
+
+
+2023-12-22
+==========
+
+* :vytask:`T4760` ``(bug): VyOS does not support running multiple instances of DHCPv6 clients``
+
+
+2023-12-21
+==========
+
+* :vytask:`T5714` ``(bug): IPSec VPN: op-mode: "show log vpn" does not show results``
+* :vytask:`T3039` ``(feature): Resize a root partition and filesystem automatically during deployment in virtual environments``
+* :vytask:`T2404` ``(bug): Cannot change MTU``
+* :vytask:`T2353` ``(bug): Interface [conf_mode] errors parent task``
+* :vytask:`T5796` ``(bug): Openconnect - HTTPS  security headers are missing``
+
+
+2023-12-19
+==========
+
+* :vytask:`T2116` ``(feature): Processing configuration via Cloud-init User-Data``
+
+
+2023-12-18
+==========
+
+* :vytask:`T2191` ``(feature): Using tallow to block sshd probes``
+
+
+2023-12-15
+==========
+
+* :vytask:`T5824` ``(bug): busybox cannot connect some websites from initramfs``
+
+
+2023-12-12
+==========
+
+* :vytask:`T5817` ``(bug): Show openvpn server fails in some cases``
+* :vytask:`T5413` ``(default): Deny the opportunity to use one public/private key pair on both wireguard peers.``
+
+
 2023-11-30
 ==========
 
@@ -1942,7 +2039,6 @@
 ==========
 
 * :vytask:`T3682` ``(bug): Remove running dhclient from ether-resume.py``
-* :vytask:`T3681` ``(default): The VMware Tools resume script did not run successfully in this virtual machine.``
 
 
 2021-08-20
diff --git a/docs/changelog/1.4.rst b/docs/changelog/1.4.rst
index b6c901b4..1b9b09a0 100644
--- a/docs/changelog/1.4.rst
+++ b/docs/changelog/1.4.rst
@@ -8,6 +8,296 @@
    _ext/releasenotes.py
 
 
+2024-01-14
+==========
+
+* :vytask:`T4428` ``(feature): Update ddclient to newer version``
+
+
+2024-01-12
+==========
+
+* :vytask:`T5925` ``(feature): Containers change systemd KillMode``
+* :vytask:`T5920` ``(bug): Quick Start documentation contains error``
+* :vytask:`T5919` ``(bug): Firewall - opmode for ipv6``
+* :vytask:`T5306` ``(default): bgp config migration failed with v6only option configured with peer-group``
+* :vytask:`T3429` ``(bug): Hyper-V integration services not working on VyOS 1.4 (sagitta/current)``
+
+
+2024-01-11
+==========
+
+* :vytask:`T5896` ``(bug): Config Error on Boot with Podman and Firewall``
+* :vytask:`T5532` ``(bug): After add system image the boot stuck and works again after the second reboot``
+* :vytask:`T5512` ``(bug): build linux-firmware script cannot expand asterisks if firmware name is a glob string``
+* :vytask:`T5379` ``(bug): show system updates doesnt seem to be working``
+* :vytask:`T5275` ``(default): Add op mode commands for exporting certificates to PEM files with correct headers``
+* :vytask:`T5274` ``(default): Add a deprecation warning for OpenVPN site-to-site with pre-shared secret``
+* :vytask:`T5262` ``(default): Warn the user about unsaved config on reboot/shutdown attempts``
+* :vytask:`T5257` ``(feature): Cannont assign netflow source ip to ip in non default VRF``
+* :vytask:`T5026` ``(feature): Python3 modules crypt and spwd are deprecated``
+* :vytask:`T5814` ``(bug): VyOS 1.3 to 1.4 LTS Firewall ruleset migration script breaks configuration``
+* :vytask:`T4610` ``(bug): Firewall with 20K entries cannot load after reboot``
+* :vytask:`T3191` ``(bug): PAM RADIUS freezing when accounting does not configured on RADIUS server``
+* :vytask:`T5917` ``(feature): Restore annotations of (running)/(default boot) in select image list``
+* :vytask:`T5916` ``(default): Added segment routing check for index size and SRGB size``
+* :vytask:`T5913` ``(feature): Allow for Peer-Groups in ipv4-labeled-unicast SAFI``
+
+
+2024-01-10
+==========
+
+* :vytask:`T5918` ``(bug): Verification problem for `set vpn ipsec interface```
+* :vytask:`T5911` ``(bug): pki: service update ignored if certificate name contains a hyphen (-)``
+* :vytask:`T5886` ``(feature): Add support for ACME protocol (LetsEncrypt)``
+* :vytask:`T5766` ``(bug): http: rewrite conf-mode script to get_config_dict()``
+* :vytask:`T5144` ``(default): Modernize dynamic dns operation``
+* :vytask:`T4689` ``(feature): Support RFS(Receive Flow Steering)``
+* :vytask:`T4659` ``(feature): Use vtysh to display bridge and some interface parameter information``
+* :vytask:`T4646` ``(bug): USB serial output console does not work``
+* :vytask:`T4577` ``(bug): WWAN commit failed which simple config``
+* :vytask:`T4502` ``(feature): Consider implementing (NAT/other) flow table offload``
+* :vytask:`T4446` ``(default): Unified CLI for displaying neithbors (ARP, IP, and NDP)``
+* :vytask:`T4427` ``(default): Remove the vyos-utils package list from vyos-build``
+* :vytask:`T4300` ``(feature): Extend list of supported interfaces for Cloud-init Network Configuration``
+* :vytask:`T4250` ``(bug): Organize logrotate settings to avoid duplicates``
+* :vytask:`T4236` ``(feature): Generate ovpn openvpn client configuration files``
+* :vytask:`T4222` ``(feature): Support for TWAMP as round-trip metric``
+* :vytask:`T3833` ``(bug): Cloud-init not finding data source in OpenStack``
+* :vytask:`T5902` ``(bug): http: remove virtual-host configuration in webserver``
+* :vytask:`T3499` ``(bug): Podman is not compatible with nat rules``
+* :vytask:`T3430` ``(bug): Cloud-init failing with “Unable to render networking” on VyOS 1.3``
+* :vytask:`T3011` ``(bug): router becomes unreachable for few minutes when vti interfaces goes down``
+* :vytask:`T5791` ``(default): Update dynamic dns configuration path to be consistent with other areas of VyOS``
+* :vytask:`T5708` ``(default): Additional dynamic dns improvements to align with ddclient 3.11.1 release``
+* :vytask:`T5573` ``(bug): Fix ddclient cache entries``
+* :vytask:`T5012` ``(feature): Control network configuration from Cloud-Init config``
+* :vytask:`T3116` ``(feature): Support back-end L4 level load balancing``
+* :vytask:`T5614` ``(default): Add conntrack helper matching on firewall``
+* :vytask:`T5080` ``(bug): Conntrack enabled by default``
+* :vytask:`T4782` ``(enhancment): Allow multiple CA certificates (on e.g. EAPoL)``
+* :vytask:`T2199` ``(default): Rewrite firewall in new XML/Python style``
+
+
+2024-01-09
+==========
+
+* :vytask:`T5898` ``(bug): Replace partprobe with partx due to unable to install VyOS``
+* :vytask:`T5838` ``(feature): Add Infiniband kernel modules``
+* :vytask:`T5785` ``(bug): API output of show container image broken``
+* :vytask:`T5410` ``(feature): Improve `utils.convert.convert_data()` to process all stdtypes``
+* :vytask:`T5269` ``(default): OpenVPN non-TLS site-to-site mode deprecation``
+* :vytask:`T5249` ``(feature): Add rollback-soft feature to rollback without a reboot``
+* :vytask:`T4944` ``(default): Prevent op mode functions from returning bare literals in raw output``
+* :vytask:`T4910` ``(default): Rewrite the remote access VPN op mode in the new style``
+* :vytask:`T4470` ``(feature): Rewrite load-balancing wan to XML/Python``
+* :vytask:`T3763` ``(bug): wireguard checks if port already binding``
+* :vytask:`T3489` ``(bug): NUMA has been disabled for the past few years and no-one has noticed``
+* :vytask:`T3476` ``(feature): Update availability check``
+* :vytask:`T2845` ``(bug): BGP conf_mode unable to delete configuration with peer-group``
+* :vytask:`T2844` ``(bug): BGP conf_mode errors disable-send-community``
+* :vytask:`T2755` ``(default): Requirements for partial interface setup``
+* :vytask:`T2721` ``(enhancment): Set FQ-CoDel as the default queueing mechanism for every class in Shaper``
+* :vytask:`T2511` ``(feature): Migrate vyatta-op-quagga to new XML format``
+* :vytask:`T2302` ``(default): Convert configuration scripts from executables to modules and use a script runner``
+* :vytask:`T2281` ``(feature): DHCP and Static IPs on Same Interface``
+* :vytask:`T2216` ``(default): Containerized third-party applications for VyOS``
+* :vytask:`T2171` ``(feature): Unify creation and manipulation of interfaces``
+* :vytask:`T1759` ``(feature): Replacing Vyatta::Interface perl``
+* :vytask:`T2408` ``(enhancment): DHCP Relay upstream and downstream interfaces``
+* :vytask:`T1297` ``(feature): Add GARP settings to VRRP/keepalived``
+
+
+2024-01-08
+==========
+
+* :vytask:`T5888` ``(bug): Firewall upgrade fails because of icmpv6``
+* :vytask:`T5844` ``(bug): HTTPS API doesn't start without configured keys even when GraphQL authentication type is set to token``
+* :vytask:`T5664` ``(bug): 1.4 user has no permissions?``
+* :vytask:`T5215` ``(default): Add a built-in ICMP health check for VRRP groups``
+* :vytask:`T5045` ``(bug): BFD is not starting after upgrade to 1.4-rolling-202302150317``
+* :vytask:`T4193` ``(default): Add support for transparent firewall``
+* :vytask:`T3754` ``(default): Make config scripts more testable``
+* :vytask:`T3663` ``(default): Use inotify file watching where applicable``
+* :vytask:`T3480` ``(bug): Does not possible to change console baud-rate``
+* :vytask:`T2897` ``(default): Remove cluster command``
+* :vytask:`T5904` ``(feature): op-mode: add "show ipv6 route vrf <name> <prefix>" command``
+
+
+2024-01-07
+==========
+
+* :vytask:`T5891` ``(bug): OpenVPN IPv6 config issue with 1.4-rc1``
+* :vytask:`T5887` ``(feature): Upgrade Linux Kernel to 6.6.y (2023 LTS edition)``
+
+
+2024-01-06
+==========
+
+* :vytask:`T3670` ``(feature): Option to disable HTTP port 80 redirect``
+
+
+2024-01-05
+==========
+
+* :vytask:`T3642` ``(feature): PKI configuration``
+* :vytask:`T5894` ``(feature): Extend get_config_dict() with additional parameter with_pki that defaults to False``
+
+
+2024-01-04
+==========
+
+* :vytask:`T4072` ``(feature): Feature Request: Firewall on bridge interfaces``
+* :vytask:`T3459` ``(default): Inform the user when unable to install outdated image``
+
+
+2024-01-03
+==========
+
+* :vytask:`T5880` ``(bug): verify_source_interface should not allow dynamic interfaces like ppp, l2tp, ipoe or sstpc client interfaces``
+* :vytask:`T5879` ``(bug): tunnel: sourceing from dynamic pppoe0 interface will fail on reboots``
+* :vytask:`T4500` ``(bug): Missing firewall logs``
+
+
+2024-01-02
+==========
+
+* :vytask:`T5885` ``(default): image-tools: relax restriction on image-name length from 32 to 64``
+
+
+2024-01-01
+==========
+
+* :vytask:`T5883` ``(bug): Preserve file ownership in /config subdirs on add system image``
+* :vytask:`T5474` ``(feature): Establish common file name pattern for XML conf mode commands``
+
+
+2023-12-30
+==========
+
+* :vytask:`T5875` ``(bug): login: removing and re-adding a user keeps the home directory but UID will change, thus SSH keys no longer work``
+* :vytask:`T5653` ``(feature): Command to display fingerprint``
+
+
+2023-12-29
+==========
+
+* :vytask:`T5829` ``(bug): Can't Add IPv6 Address to Containers``
+* :vytask:`T5852` ``(bug): Reboots fail with eapol WAN interface``
+* :vytask:`T5869` ``(bug): vyos.template.first_host_address() does not honor RFC4291 section 2.6.1``
+
+
+2023-12-28
+==========
+
+* :vytask:`T4163` ``(feature): [BMP-BGP]  Routing monitoring  feature``
+* :vytask:`T5867` ``(feature): Upgrade podman to Debian Trixie version 4.7.x``
+* :vytask:`T5866` ``(feature): Add op-mode command to restart IPv6 RA daemon``
+* :vytask:`T5861` ``(bug): Flavor build system fails with third-party packages``
+* :vytask:`T5854` ``(feature): Extend override-default script to allow embedded defaultValue settings``
+* :vytask:`T5566` ``(feature): Be able to disable 802.3az/EEE (energy efficient ethernet) for a particular interface``
+* :vytask:`T5792` ``(default): Upgrade ddclient 3.11.2 release``
+
+
+2023-12-25
+==========
+
+* :vytask:`T5855` ``(feature): Migrate "set service lldp snmp enable" -> `set service lldp snmp"``
+* :vytask:`T5837` ``(bug): vyos.configdict.node_changed does not return keys per adding``
+* :vytask:`T5856` ``(bug): SNMP service removal fails``
+
+
+2023-12-24
+==========
+
+* :vytask:`T5853` ``(default): Typo interfaces-virtual-ethernet.xml.in``
+
+
+2023-12-22
+==========
+
+* :vytask:`T5811` ``(bug): static dhcp-interface routes not installed``
+* :vytask:`T5804` ``(bug): SNAT "any" interface error``
+* :vytask:`T4760` ``(bug): VyOS does not support running multiple instances of DHCPv6 clients``
+
+
+2023-12-21
+==========
+
+* :vytask:`T5778` ``(bug): The show dhcp server leases operation mode command does not work as expected``
+* :vytask:`T5775` ``(default): Migrated Firewall Global State Policy ineffective on latest firewall zone config``
+* :vytask:`T5637` ``(bug): Firewall default-action log``
+* :vytask:`T5796` ``(bug): Openconnect - HTTPS  security headers are missing``
+* :vytask:`T3580` ``(feature): Refactoring firewall ipv6 rule icmpv6``
+* :vytask:`T2898` ``(feature): Support NDP proxy``
+* :vytask:`T2229` ``(feature): PPPOE Default Queue type selection``
+
+
+2023-12-20
+==========
+
+* :vytask:`T5823` ``(feature): Protocol BGP add default values for config dictionary``
+* :vytask:`T5798` ``(enhancment): reverse-proxy load-balancing service should support multiple certificates for frontend``
+
+
+2023-12-19
+==========
+
+* :vytask:`T5828` ``(default): Fix GRUB installation on arm64``
+
+
+2023-12-18
+==========
+
+* :vytask:`T5751` ``(feature): Adjust new image tools for non-interactive use``
+* :vytask:`T5831` ``(feature): show system image should reverse order by addition date``
+* :vytask:`T5825` ``(bug): image-tools: restore authentication on 'add system image'``
+* :vytask:`T5821` ``(bug): image-tools: restore vrf-aware 'add system image'``
+* :vytask:`T5819` ``(bug): Don't echo password on install image``
+* :vytask:`T5806` ``(bug): Clear old raid data on new install image``
+* :vytask:`T5789` ``(bug): image-tools should copy ssh host keys on image update``
+* :vytask:`T5758` ``(default): Restore scanning configs when live installing``
+
+
+2023-12-15
+==========
+
+* :vytask:`T5824` ``(bug): busybox cannot connect some websites from initramfs``
+* :vytask:`T5803` ``(default): git/github: Adjust configuration for safe and baseline defaults``
+
+
+2023-12-14
+==========
+
+* :vytask:`T5773` ``(bug): Unable to load config via HTTP``
+* :vytask:`T5816` ``(bug): BGP Large Community List Validation Broken``
+* :vytask:`T5812` ``(bug): rollback check max revision number does not work``
+* :vytask:`T5749` ``(feature): Show MAC address VRF and MTU by default for "show interfaces"``
+* :vytask:`T5774` ``(bug): commit-archive to FTP server broken after update (VyOS 1.5-rolling)``
+* :vytask:`T5826` ``(default): Add dmicode as an explicit dependency``
+* :vytask:`T5793` ``(default): mdns-repeater: Cleanup avahi-daemon configuration in /etc``
+
+
+2023-12-13
+==========
+
+* :vytask:`T591` ``(feature): Support SRv6``
+
+
+2023-12-12
+==========
+
+* :vytask:`T4704` ``(feature): Allow to set metric  (MED) to rtt with rtt,+rtt or -rtt``
+* :vytask:`T5815` ``(enhancment): Add load_config module``
+* :vytask:`T5413` ``(default): Deny the opportunity to use one public/private key pair on both wireguard peers.``
+
+
+2023-12-11
+==========
+
+* :vytask:`T5741` ``(bug): WAN Load Balancing failover route tables aren't created``
+
+
 2023-12-10
 ==========
 
diff --git a/docs/changelog/1.5.rst b/docs/changelog/1.5.rst
index 1deedc72..3f88f950 100644
--- a/docs/changelog/1.5.rst
+++ b/docs/changelog/1.5.rst
@@ -8,6 +8,226 @@
    _ext/releasenotes.py
 
 
+2024-01-12
+==========
+
+* :vytask:`T5925` ``(feature): Containers change systemd KillMode``
+* :vytask:`T5919` ``(bug): Firewall - opmode for ipv6``
+* :vytask:`T5306` ``(default): bgp config migration failed with v6only option configured with peer-group``
+* :vytask:`T3429` ``(bug): Hyper-V integration services not working on VyOS 1.4 (sagitta/current)``
+
+
+2024-01-11
+==========
+
+* :vytask:`T5713` ``(bug): strip-private doesn't strip string after "secret"``
+* :vytask:`T5532` ``(bug): After add system image the boot stuck and works again after the second reboot``
+* :vytask:`T5814` ``(bug): VyOS 1.3 to 1.4 LTS Firewall ruleset migration script breaks configuration``
+* :vytask:`T3191` ``(bug): PAM RADIUS freezing when accounting does not configured on RADIUS server``
+* :vytask:`T5917` ``(feature): Restore annotations of (running)/(default boot) in select image list``
+* :vytask:`T5916` ``(default): Added segment routing check for index size and SRGB size``
+* :vytask:`T5913` ``(feature): Allow for Peer-Groups in ipv4-labeled-unicast SAFI``
+
+
+2024-01-10
+==========
+
+* :vytask:`T5918` ``(bug): Verification problem for `set vpn ipsec interface```
+* :vytask:`T5911` ``(bug): pki: service update ignored if certificate name contains a hyphen (-)``
+* :vytask:`T5886` ``(feature): Add support for ACME protocol (LetsEncrypt)``
+* :vytask:`T5766` ``(bug): http: rewrite conf-mode script to get_config_dict()``
+* :vytask:`T4256` ``(feature): Display static DHCP server leases in the operational command output``
+* :vytask:`T5902` ``(bug): http: remove virtual-host configuration in webserver``
+* :vytask:`T3316` ``(feature): Use Kea DHCP(v6) instead of ISC DHCP(v6)``
+* :vytask:`T5791` ``(default): Update dynamic dns configuration path to be consistent with other areas of VyOS``
+* :vytask:`T5708` ``(default): Additional dynamic dns improvements to align with ddclient 3.11.1 release``
+* :vytask:`T5573` ``(bug): Fix ddclient cache entries``
+* :vytask:`T5614` ``(default): Add conntrack helper matching on firewall``
+
+
+2024-01-09
+==========
+
+* :vytask:`T5898` ``(bug): Replace partprobe with partx due to unable to install VyOS``
+* :vytask:`T5862` ``(bug): Default MTU is not acceptable in some environments``
+* :vytask:`T5840` ``(feature): Upgrade Kea to 2.4.x``
+* :vytask:`T5838` ``(feature): Add Infiniband kernel modules``
+* :vytask:`T5785` ``(bug): API output of show container image broken``
+* :vytask:`T5249` ``(feature): Add rollback-soft feature to rollback without a reboot``
+* :vytask:`T2511` ``(feature): Migrate vyatta-op-quagga to new XML format``
+* :vytask:`T5905` ``(bug): pki: IPsec and VTI interface priority inversion when using x509 site-to-site peer``
+
+
+2024-01-08
+==========
+
+* :vytask:`T5888` ``(bug): Firewall upgrade fails because of icmpv6``
+* :vytask:`T5844` ``(bug): HTTPS API doesn't start without configured keys even when GraphQL authentication type is set to token``
+* :vytask:`T5904` ``(feature): op-mode: add "show ipv6 route vrf <name> <prefix>" command``
+
+
+2024-01-07
+==========
+
+* :vytask:`T5899` ``(feature): VyOS vm images use bookworm repo``
+* :vytask:`T5887` ``(feature): Upgrade Linux Kernel to 6.6.y (2023 LTS edition)``
+
+
+2024-01-06
+==========
+
+* :vytask:`T3214` ``(bug): OpenVPN IPv6 fixes``
+
+
+2024-01-05
+==========
+
+* :vytask:`T5894` ``(feature): Extend get_config_dict() with additional parameter with_pki that defaults to False``
+
+
+2024-01-03
+==========
+
+* :vytask:`T5880` ``(bug): verify_source_interface should not allow dynamic interfaces like ppp, l2tp, ipoe or sstpc client interfaces``
+* :vytask:`T5879` ``(bug): tunnel: sourceing from dynamic pppoe0 interface will fail on reboots``
+
+
+2024-01-02
+==========
+
+* :vytask:`T5885` ``(default): image-tools: relax restriction on image-name length from 32 to 64``
+
+
+2024-01-01
+==========
+
+* :vytask:`T5883` ``(bug): Preserve file ownership in /config subdirs on add system image``
+* :vytask:`T5474` ``(feature): Establish common file name pattern for XML conf mode commands``
+
+
+2023-12-30
+==========
+
+* :vytask:`T5875` ``(bug): login: removing and re-adding a user keeps the home directory but UID will change, thus SSH keys no longer work``
+* :vytask:`T5653` ``(feature): Command to display fingerprint``
+
+
+2023-12-29
+==========
+
+* :vytask:`T5829` ``(bug): Can't Add IPv6 Address to Containers``
+* :vytask:`T5852` ``(bug): Reboots fail with eapol WAN interface``
+* :vytask:`T5869` ``(bug): vyos.template.first_host_address() does not honor RFC4291 section 2.6.1``
+
+
+2023-12-28
+==========
+
+* :vytask:`T5827` ``(bug): image-tools: 'show system image' Command Not in Order``
+* :vytask:`T4163` ``(feature): [BMP-BGP]  Routing monitoring  feature``
+* :vytask:`T5867` ``(feature): Upgrade podman to Debian Trixie version 4.7.x``
+* :vytask:`T5866` ``(feature): Add op-mode command to restart IPv6 RA daemon``
+* :vytask:`T5861` ``(bug): Flavor build system fails with third-party packages``
+* :vytask:`T5854` ``(feature): Extend override-default script to allow embedded defaultValue settings``
+* :vytask:`T5566` ``(feature): Be able to disable 802.3az/EEE (energy efficient ethernet) for a particular interface``
+* :vytask:`T5792` ``(default): Upgrade ddclient 3.11.2 release``
+
+
+2023-12-25
+==========
+
+* :vytask:`T5855` ``(feature): Migrate "set service lldp snmp enable" -> `set service lldp snmp"``
+* :vytask:`T5837` ``(bug): vyos.configdict.node_changed does not return keys per adding``
+* :vytask:`T5856` ``(bug): SNMP service removal fails``
+
+
+2023-12-23
+==========
+
+* :vytask:`T5678` ``(feature): Improvements in PPPoE configuration``
+
+
+2023-12-22
+==========
+
+* :vytask:`T5804` ``(bug): SNAT "any" interface error``
+
+
+2023-12-21
+==========
+
+* :vytask:`T5807` ``(bug): NAT66  op-mode bugs``
+* :vytask:`T5778` ``(bug): The show dhcp server leases operation mode command does not work as expected``
+* :vytask:`T5775` ``(default): Migrated Firewall Global State Policy ineffective on latest firewall zone config``
+* :vytask:`T5676` ``(bug): NAT66 source rule with negation source/destination prefix causes TypeError``
+* :vytask:`T5637` ``(bug): Firewall default-action log``
+* :vytask:`T5796` ``(bug): Openconnect - HTTPS  security headers are missing``
+
+
+2023-12-20
+==========
+
+* :vytask:`T5823` ``(feature): Protocol BGP add default values for config dictionary``
+* :vytask:`T5798` ``(enhancment): reverse-proxy load-balancing service should support multiple certificates for frontend``
+
+
+2023-12-19
+==========
+
+* :vytask:`T5828` ``(default): Fix GRUB installation on arm64``
+
+
+2023-12-18
+==========
+
+* :vytask:`T5751` ``(feature): Adjust new image tools for non-interactive use``
+* :vytask:`T5831` ``(feature): show system image should reverse order by addition date``
+* :vytask:`T5825` ``(bug): image-tools: restore authentication on 'add system image'``
+* :vytask:`T5821` ``(bug): image-tools: restore vrf-aware 'add system image'``
+* :vytask:`T5819` ``(bug): Don't echo password on install image``
+* :vytask:`T5806` ``(bug): Clear old raid data on new install image``
+* :vytask:`T5789` ``(bug): image-tools should copy ssh host keys on image update``
+* :vytask:`T5758` ``(default): Restore scanning configs when live installing``
+
+
+2023-12-15
+==========
+
+* :vytask:`T5824` ``(bug): busybox cannot connect some websites from initramfs``
+* :vytask:`T5770` ``(bug): MACsec not encrypting``
+* :vytask:`T5803` ``(default): git/github: Adjust configuration for safe and baseline defaults``
+
+
+2023-12-14
+==========
+
+* :vytask:`T5773` ``(bug): Unable to load config via HTTP``
+* :vytask:`T5816` ``(bug): BGP Large Community List Validation Broken``
+* :vytask:`T5812` ``(bug): rollback check max revision number does not work``
+* :vytask:`T5749` ``(feature): Show MAC address VRF and MTU by default for "show interfaces"``
+* :vytask:`T5774` ``(bug): commit-archive to FTP server broken after update (VyOS 1.5-rolling)``
+* :vytask:`T5826` ``(default): Add dmicode as an explicit dependency``
+* :vytask:`T5793` ``(default): mdns-repeater: Cleanup avahi-daemon configuration in /etc``
+
+
+2023-12-13
+==========
+
+* :vytask:`T591` ``(feature): Support SRv6``
+
+
+2023-12-12
+==========
+
+* :vytask:`T5815` ``(enhancment): Add load_config module``
+
+
+2023-12-11
+==========
+
+* :vytask:`T5741` ``(bug): WAN Load Balancing failover route tables aren't created``
+
+
 2023-12-10
 ==========