1 files changed, 422 insertions, 4 deletions
diff --git a/docs/changelog/1.3.rst b/docs/changelog/1.3.rst
index 058f38d6..38adb0d2 100644
--- a/docs/changelog/1.3.rst
+++ b/docs/changelog/1.3.rst
@@ -8,13 +8,432 @@
    _ext/releasenotes.py
 
 
+2022-04-19
+==========
+
+* :vytask:`T4344` (bug): DHCP statistics not matching, conf-mode generates incorrect pool name with dash
+* :vytask:`T4268` (bug): Elevated LA while using VyOS monitoring feature
+
+
+2022-04-08
+==========
+
+* :vytask:`T4331` (bug): IPv6 link local addresses are not configured when an interface is in a VRF
+* :vytask:`T4339` (bug): wwan: tab-completion results in "No such file or directory" if there is no WWAN interface
+* :vytask:`T4338` (bug): wwan: changing interface description should not trigger reconnect
+* :vytask:`T4324` (bug): wwan: check alive script should only be run via cron if a wwan interface is configured at all
+
+
+2022-04-07
+==========
+
+* :vytask:`T4330` (bug): MTU settings cannot be applied when IPv6 is disabled
+* :vytask:`T4346` (feature): Deprecate "system ipv6 disable" option to disable address family within OS kernel
+* :vytask:`T4337` (bug): isis: IETF SPF delay algorithm can not be configured - results in vyos.frr.CommitError
+* :vytask:`T4319` (bug): The command "set system ipv6 disable" doesn't work as expected.
+* :vytask:`T4341` (feature): login: disable user-account prior to deletion and wait until deletion is complete
+* :vytask:`T4336` (feature): isis: add support for MD5 authentication password on a circuit
+
+
+2022-04-06
+==========
+
+* :vytask:`T4308` (feature): Op-comm "Show log frr"  to view specific protocol logs
+
+
+2022-03-29
+==========
+
+* :vytask:`T3686` (bug): Bridging OpenVPN tap with no local-address breaks
+
+
+2022-03-24
+==========
+
+* :vytask:`T4294` (bug): Adding a new openvpn-option does not restart the OpenVPN process
+* :vytask:`T4230` (bug): OpenVPN server configuration deleted after reboot when using a VRRP virtual-address
+
+
+2022-03-21
+==========
+
+* :vytask:`T4311` (bug): CVE-2021-4034: local privilege escalation in PolKit
+* :vytask:`T4310` (bug): CVE-2022-0778: infinite loop in OpenSSL certificate parsing
+
+
+2022-03-12
+==========
+
+* :vytask:`T4296` (bug): Interface config injected by Cloud-Init may interfere with VyOS native
+* :vytask:`T4002` (default): firewall group network-group long names restriction incorrect behavior
+
+
+2022-03-11
+==========
+
+* :vytask:`T4297` (bug): Interface configuration saving fails for ice/iavf based interfaces because they can't change speed/duplex settings
+
+
+2022-03-05
+==========
+
+* :vytask:`T4259` (bug): The conntrackd daemon can be started wrongly
+
+
+2022-02-28
+==========
+
+* :vytask:`T4273` (bug): ssh: Upgrade from 1.2.X to 1.3.0 breaks config
+* :vytask:`T4115` (bug): reboot in <x> not working as expected
+
+
+2022-02-24
+==========
+
+* :vytask:`T4267` (bug): Error - Missing required "ip key" parameter
+
+
+2022-02-23
+==========
+
+* :vytask:`T4264` (bug): vxlan: interface is destroyed and rebuild on description change
+* :vytask:`T4263` (bug): vyos.util.leaf_node_changed() dos not honor valueLess nodes
+
+
+2022-02-21
+==========
+
+* :vytask:`T4120` (feature): [VXLAN] add ability to set multiple unicast-remotes
+
+
+2022-02-20
+==========
+
+* :vytask:`T4261` (feature): MACsec: add DHCP client support
+* :vytask:`T4203` (bug): Reconfigure DHCP client interface causes brief outages
+
+
+2022-02-19
+==========
+
+* :vytask:`T4258` (bug): [DHCP-SERVER]  error parameter on Failover
+
+
+2022-02-17
+==========
+
+* :vytask:`T4241` (bug): ocserv openconnect looks broken in recent bulds of 1.3 Equuleus
+* :vytask:`T4255` (bug): Unexpected print of dict bridge on delete
+* :vytask:`T4240` (bug): Cannot add wlan0 to bridge via configure
+* :vytask:`T4154` (bug): Error add second gre tunnel with the same source interface
+
+
+2022-02-16
+==========
+
+* :vytask:`T4237` (bug): Conntrack-sync error - error adding listen-address command
+
+
+2022-02-15
+==========
+
+* :vytask:`T4201` (bug): Firewall - ICMPv6 matches not working as expected on 1.3.0
+* :vytask:`T3006` (bug): Accel-PPP & vlan-mon config get invalid VLAN
+* :vytask:`T3494` (bug): DHCPv6 leases traceback when PD using
+
+
+2022-02-13
+==========
+
+* :vytask:`T4242` (bug): ethernet speed/duplex can never be switched back to auto/auto
+* :vytask:`T4191` (bug): Lost access to host after VRF re-creating
+
+
+2022-02-11
+==========
+
+* :vytask:`T3872` (feature): Add configurable telegraf monitoring service
+* :vytask:`T4234` (bug): Show firewall partly broken in 1.3.x
+
+
+2022-02-10
+==========
+
+* :vytask:`T4165` (bug): Custom conntrack rules cannot be deleted
+
+
+2022-02-08
+==========
+
+* :vytask:`T4227` (bug): Typo in help completion of hello-time option of bridge interface
+
+
+2022-02-07
+==========
+
+* :vytask:`T4233` (bug): ssh: sync regex for allow/deny usernames to "system login"
+* :vytask:`T4087` (feature): IPsec IKE-group proposals limit of 10 pieces 
+
+
+2022-02-06
+==========
+
+* :vytask:`T4228` (bug): bond: OS error thrown when two bonds use the same member
+
+
+2022-02-05
+==========
+
+* :vytask:`T4226` (bug): VRRP transition-script does not work for groups name which contains -(minus) sign
+
+
+2022-02-04
+==========
+
+* :vytask:`T4196` (bug): DHCP server client-prefix-length parameter results in non-functional leases
+
+
+2022-02-03
+==========
+
+* :vytask:`T3643` (bug): show vpn ipsec sa doesn't show tunnels in "down" state
+
+
+2022-02-01
+==========
+
+* :vytask:`T4198` (bug): Error shown on commit
+
+
+2022-01-29
+==========
+
+* :vytask:`T4153` (bug): Monitor bandwidth-test initiate not working
+
+
+2022-01-28
+==========
+
+* :vytask:`T4184` (bug): NTP allow-clients address doesn't work it allows to use ntp server for all addresses
+
+
+2022-01-24
+==========
+
+* :vytask:`T4204` (feature): Update Accel-PPP to a newer revision
+
+
+2022-01-17
+==========
+
+* :vytask:`T3164` (bug): console-server ssh does not work with RADIUS PAM auth
+
+
+2022-01-15
+==========
+
+* :vytask:`T4183` (feature): IPv6 link-local address not accepted as wireguard peer
+* :vytask:`T4110` (feature): [IPV6-SSH/DNS}  enable IPv6 link local adresses as listen-address %eth0
+
+
+2022-01-12
+==========
+
+* :vytask:`T4168` (bug): IPsec VPN is impossible to restart when DMVPN is configured
+* :vytask:`T4167` (bug): DMVPN apply wrong param on the first configuration
+* :vytask:`T4152` (bug): NHRP shortcut-target holding-time does not work
+
+
+2022-01-10
+==========
+
+* :vytask:`T3299` (bug): Allow the web proxy service to listen on all IP addresses
+* :vytask:`T3115` (feature): Add support for firewall on L3 VIF bridge interface
+
+
+2022-01-09
+==========
+
+* :vytask:`T3822` (bug): OpenVPN processes do not have permission to read key files generated with `run generate openvpn key`
+* :vytask:`T4142` (bug): Input ifbX interfaces not displayed in op-mode
+* :vytask:`T3914` (bug): VRRP rfc3768-compatibility doesn't work with unicast peers
+
+
+2022-01-07
+==========
+
+* :vytask:`T3924` (bug): VRRP stops working with VRF
+
+
+2022-01-06
+==========
+
+* :vytask:`T4141` (bug): Set high-availability vrrp sync-group without members error
+
+
+2022-01-03
+==========
+
+* :vytask:`T4065` (bug): IPSEC configuration error: connection to unix:///var/run/charon.ctl failed: No such file or directory
+* :vytask:`T4052` (bug): Validator return traceback on VRRP configuration with the script path not in config dir
+* :vytask:`T4128` (bug): keepalived: Upgrade package to add VRF support
+
+
+2021-12-31
+==========
+
+* :vytask:`T4081` (bug): VRRP health-check script stops working when setting up a sync group
+
+
+2021-12-29
+==========
+
+* :vytask:`T2922` (bug): The `vpn ipsec logging log-modes` miss the IPSec daemons state check
+* :vytask:`T2695` (bug): Flow-accounting bug with subinterfaces
+* :vytask:`T2400` (default): OpenVPN: dont restart server if no need
+* :vytask:`T4086` (default): system login banner is not removed on deletion.
+
+
+2021-12-28
+==========
+
+* :vytask:`T3380` (bug): Show vpn ike sa with IPv6 remote peer
+* :vytask:`T2933` (feature): VRRP add option virtual_ipaddress_excluded
+
+
+2021-12-27
+==========
+
+* :vytask:`T2566` (bug): sstp not able to run tunnels ipv6 only
+* :vytask:`T4093` (bug): SNMPv3 snmpd.conf generation bug
+* :vytask:`T2764` (enhancment): Increase maximum number of NAT rules
+
+
+2021-12-26
+==========
+
+* :vytask:`T4104` (bug): RAID1: "add raid md0 member sda1" does not restore boot sector
+
+
+2021-12-25
+==========
+
+* :vytask:`T4101` (bug): commit-archive: Use of uninitialized value $source_address in concatenation
+* :vytask:`T4055` (feature): Add VRF support for HTTP(S) API service
+
+
+2021-12-24
+==========
+
+* :vytask:`T3854` (bug): Missing op-mode commands for conntrack-sync
+
+
+2021-12-23
+==========
+
+* :vytask:`T4092` (bug): IKEv2 mobike commit failed with DMVPN nhrp
+* :vytask:`T3354` (default): Convert strip-private script from Perl to Python
+
+
+2021-12-22
+==========
+
+* :vytask:`T3356` (feature): Script for remote file transfers
+
+
+2021-12-21
+==========
+
+* :vytask:`T4053` (bug): VRRP impossible to set scripts out of the /config directory
+* :vytask:`T4013` (bug): Add pkg cloudwatch for AWS images
+* :vytask:`T3913` (bug): VRF traffic fails after upgrade from 1.3.0-RC6 to 1.3.0-EPA1/2
+
+
+2021-12-20
+==========
+
+* :vytask:`T4088` (default): Fix typo in login banner
+
+
+2021-12-19
+==========
+
+* :vytask:`T3912` (default): Use a more informative default post-login banner
+
+
+2021-12-17
+==========
+
+* :vytask:`T3176` (bug): Ordering of ports on EdgeCore SAF51015I is mixed up?
+* :vytask:`T4059` (bug): VRRP sync-group transition script does not persist after reboot
+
+
+2021-12-16
+==========
+
+* :vytask:`T4046` (feature): Sflow - Add Source address parameter
+* :vytask:`T2615` (default): Provide an explicit option for server fingerprint in commit archive, and make insecure the default
+* :vytask:`T4076` (enhancment): Allow setting CORS options in HTTP API
+* :vytask:`T3378` (bug): commit-archive source-address broken for IPv6 addresses
+
+
+2021-12-15
+==========
+
+* :vytask:`T4077` (bug): op-mode: bfd: drop "show protocols bfd" in favour of "show bfd"
+* :vytask:`T4073` (bug): "show protocols bfd peer <>" shows incorrect peer information.
+
+
+2021-12-14
+==========
+
+* :vytask:`T4071` (feature): Allow HTTP API to bind to unix domain socket
+
+
+2021-12-12
+==========
+
+* :vytask:`T4036` (bug): VXLAN incorrect raiseError if set multicast network instead of singe address
+
+
+2021-12-10
+==========
+
+* :vytask:`T4068` (feature): Python: ConfigError should insert line breaks into the error message
+
+
+2021-12-09
+==========
+
+* :vytask:`T4033` (bug): VRRP - Error security when setting scripts
+* :vytask:`T4064` (bug): IP address for vif is not removed from the system when deleted in configuration
+* :vytask:`T4063` (bug): VRRP log error - /usr/libexec/vyos/vyos-vrrp-conntracksync.sh - No such file or directory
+* :vytask:`T4060` (enhancment): Extend configquery for use before boot configuration is complete
+
+
+2021-12-08
+==========
+
+* :vytask:`T4024` (bug): Access-lists and prefix-lists disappear when setting ldp hello-ipv4-interval
+
+
+2021-12-07
+==========
+
+* :vytask:`T4041` (servicerequest): "transition-script" doesn't work on "sync-group"
+
+
+2021-12-06
+==========
+
+* :vytask:`T4012` (feature): Add VRF support for TFTP
+
+
 2021-12-05
 ==========
 
 * :vytask:`T4034` (bug): "make xcp-ng-iso" still includes vyos-xe-guest-utilities
 * :vytask:`T2076` (feature): RAID install: sfdisk change-id is deprecated in favor of --part-type
-* :vytask:`T4041` (bug): "transition-script" doesn't work on "sync-group"
-* :vytask:`T1869` (bug): Install  and Boot from RAID Doesn't Work
 * :vytask:`T1126` (bug): Reusing a RAID from a BIOS install in an EFI install causes a failure to boot
 
 
@@ -261,7 +680,6 @@
 * :vytask:`T3254` (bug): Dynamic DNS status shows incorrect last update time
 * :vytask:`T3253` (bug): rpki: multiple peers cannot be configured 
 * :vytask:`T3219` (default): Typo in openvpn server client config for IPv6 iroute
-* :vytask:`T2764` (enhancment): Increase maximum number of NAT rules
 * :vytask:`T2100` (feature): BGP route adverisement wih checks rib
 * :vytask:`T1663` (enhancment): T1656 equuleus: buster: arm64/aarch64: ipaddrcheck does not complete testing
 * :vytask:`T1243` (bug): BGP local-as accept wrong values
@@ -1215,7 +1633,7 @@
 2021-02-16
 ==========
 
-* :vytask:`T3318` (feature): Update Linux Kernel to v5.4.163 / 5.10.83
+* :vytask:`T3318` (feature): Update Linux Kernel to v5.4.188 / 5.10.111
 
 
 2021-02-14