4 files changed, 428 insertions, 10 deletions
diff --git a/docs/changelog/1.3.rst b/docs/changelog/1.3.rst
index b452274c..ef74b249 100644
--- a/docs/changelog/1.3.rst
+++ b/docs/changelog/1.3.rst
@@ -8,6 +8,117 @@
    _ext/releasenotes.py
 
 
+2023-09-20
+==========
+
+* :vytask:`T5271` ``(default): Add support for peer-fingerprint to OpenVPN``
+
+
+2023-09-11
+==========
+
+* :vytask:`T5557` ``(bug): bgp: Use treat-as-withdraw for tunnel encapsulation attribute CVE-2023-38802``
+* :vytask:`T3424` ``(default): PPPoE IA-PD doesn't work in VRF``
+
+
+2023-09-10
+==========
+
+* :vytask:`T5555` ``(bug): Fix timezone migrator (system 13-to-14)``
+* :vytask:`T5545` ``(bug): sflow is not working``
+
+
+2023-09-08
+==========
+
+* :vytask:`T4426` ``(default): Add arpwatch to the image``
+
+
+2023-09-05
+==========
+
+* :vytask:`T5524` ``(feature): Add config directory to liveCD``
+* :vytask:`T2958` ``(bug): DHCP server doesn't work from a live CD``
+* :vytask:`T5428` ``(bug): dhcp: client renewal fails when running inside VRF``
+
+
+2023-09-04
+==========
+
+* :vytask:`T5506` ``(bug): Container bridge interfaces do not have a link-local address``
+
+
+2023-08-31
+==========
+
+* :vytask:`T5190` ``(feature): Cloud-Init cannot fetch Meta-data on machines where the main Ethernet interface is not eth0``
+* :vytask:`T5140` ``(bug): Firewall network-group problems``
+* :vytask:`T4895` ``(bug): Tag nodes are overwritten when configured by Cloud-Init from User-Data``
+* :vytask:`T4874` ``(default): Add Warning message to Equuleus``
+* :vytask:`T4855` ``(bug): Trying to create more than one tunnel of the same type to the same address causes unhandled exception``
+* :vytask:`T4776` ``(bug): NVME storage is not detected properly during installation``
+* :vytask:`T3546` ``(feature): Add pppoe-server CLI custom script feature``
+* :vytask:`T738` ``(feature): Add local-port and resolver port options for powerdns in CLI configuration tree``
+
+
+2023-08-30
+==========
+
+* :vytask:`T5221` ``(bug): BGP as-override behavior differs from new FRR and other vendors``
+* :vytask:`T4933` ``(default): Malformed lines cause vyos.util.colon_separated_to_dict fail with a nondescript error``
+* :vytask:`T4790` ``(bug): RADIUS login does not work if sum of timeouts more than 50s``
+* :vytask:`T4475` ``(bug): route-map does not support ipv6 peer``
+* :vytask:`T4459` ``(bug): API service with VRF doesn't work in 1.3.1``
+* :vytask:`T4407` ``(bug): Network-config v2 is broken in Cloud-init 22.1 and VyOS 1.3``
+* :vytask:`T4113` ``(bug): Incorrect GRUB configuration parsing``
+* :vytask:`T1764` ``(bug): Use lists instead of whitespace-separated strings in vyos.config``
+* :vytask:`T4121` ``(bug): Nameservers from DHCP client cannot be used in specific cases``
+* :vytask:`T4151` ``(feature): IPV6 local PBR Support``
+* :vytask:`T4306` ``(default): Do not check for ditry repository when building release images``
+
+
+2023-08-29
+==========
+
+* :vytask:`T3940` ``(bug): DHCP client does not remove IP address when stopped by the 02-vyos-stopdhclient hook``
+* :vytask:`T3713` ``(default): Create a meta-package for user utilities``
+* :vytask:`T3339` ``(bug): Cloud-Init domain search setting not applied``
+* :vytask:`T3144` ``(feature): Support op-mode command to release DHCP leases``
+* :vytask:`T2640` ``(feature): Running VyOS inside Docker containers``
+* :vytask:`T3577` ``(bug): Generating vpn x509 key pair fails with command not found``
+
+
+2023-08-28
+==========
+
+* :vytask:`T4745` ``(bug): CLI TAB issue with values with '-' at the beginning in conf mode``
+* :vytask:`T2611` ``(bug): Prefix list names are shared between ipv4 and ipv6``
+* :vytask:`T2296` ``(default): Upgrade WALinux to 2.2.41``
+* :vytask:`T2123` ``(default): Configure 3 NTP servers``
+* :vytask:`T469` ``(bug): Problem after commit with errors``
+
+
+2023-08-25
+==========
+
+* :vytask:`T4412` ``(bug): commit archive: reboot not working with sftp``
+* :vytask:`T3702` ``(feature): Policy: Allow routing by fwmark``
+* :vytask:`T3536` ``(default): Unable to list all available routes``
+
+
+2023-08-24
+==========
+
+* :vytask:`T5006` ``(bug): Http api segfault with concurrent requests``
+* :vytask:`T5305` ``(bug): REST API configure operation should not be defined as async``
+
+
+2023-08-23
+==========
+
+* :vytask:`T5387` ``(feature): dhcp6c: add a no release option``
+
+
 2023-08-20
 ==========
 
@@ -34,12 +145,6 @@
 * :vytask:`T5329` ``(bug): Wireguard interface as GRE tunnel source causes configuration error on boot``
 
 
-2023-08-06
-==========
-
-* :vytask:`T3424` ``(default): PPPoE IA-PD doesn't work in VRF``
-
-
 2023-07-24
 ==========
 
@@ -61,7 +166,6 @@
 2023-07-13
 ==========
 
-* :vytask:`T2315` ``(feature): Ability to have right address-family for BGP peers.``
 * :vytask:`T3045` ``(bug): Changes to Conntrack-Sync don't apply correctly (Mutlicast->UDP)``
 * :vytask:`T971` ``(bug): authentication public-keys options quoting issue``
 
@@ -415,6 +519,12 @@
 * :vytask:`T4671` ``(bug): linux-firmware package is missing symlinks defined in WHENCE file``
 
 
+2022-12-04
+==========
+
+* :vytask:`T4825` ``(feature): interfaces veth/veth-pairs -standalone used``
+
+
 2022-12-02
 ==========
 
@@ -1582,7 +1692,6 @@
 ==========
 
 * :vytask:`T3402` ``(feature): Add VyOS programming library for operational level commands``
-* :vytask:`T3275` ``(default): Disable conntrack helpers by default``
 
 
 2021-09-10
diff --git a/docs/changelog/1.4.rst b/docs/changelog/1.4.rst
index c654199b..215a22e2 100644
--- a/docs/changelog/1.4.rst
+++ b/docs/changelog/1.4.rst
@@ -8,6 +8,225 @@
    _ext/releasenotes.py
 
 
+2023-09-24
+==========
+
+* :vytask:`T5511` ``(feature): Cleanup of unused directories (and files) in order to shrink image-size``
+
+
+2023-09-23
+==========
+
+* :vytask:`T5518` ``(default): Add MLD protocol support``
+
+
+2023-09-22
+==========
+
+* :vytask:`T5602` ``(feature): For reverse-proxy type of load-balancing feature, support "backup" option in backends configuration``
+* :vytask:`T5609` ``(enhancment): Add util to get drive device name from id``
+* :vytask:`T5608` ``(enhancment): Rewrite add/delete raid member to Python and remove from vyatta-op``
+* :vytask:`T5607` ``(bug): Adjust RAID smoketest for non-deterministic SCSI device probing``
+
+
+2023-09-20
+==========
+
+* :vytask:`T5588` ``(bug): Add kernel conntrack_bridge module``
+* :vytask:`T5271` ``(default): Add support for peer-fingerprint to OpenVPN``
+* :vytask:`T5241` ``(feature): Support veth interfaces to working with netns``
+* :vytask:`T5238` ``(default): interface virtual-etherne - error when it doesn't use a peer``
+* :vytask:`T5592` ``(feature): salt: upgrade minion to 3005.2``
+
+
+2023-09-19
+==========
+
+* :vytask:`T5597` ``(feature): isis: add new features from FRR 9.``
+* :vytask:`T4284` ``(feature): QoS: rewrite to XML and Python``
+
+
+2023-09-18
+==========
+
+* :vytask:`T5419` ``(feature): Software/Hardware fastpath with nftables flowtable``
+
+
+2023-09-15
+==========
+
+* :vytask:`T5581` ``(feature): Add "show ip nht" op-mode command (IPv4 nexthop tracking table)``
+
+
+2023-09-11
+==========
+
+* :vytask:`T5567` ``(bug): vyos-1x: webproxy: maximum-object-size allowed ranges not in sync with Equuleus``
+* :vytask:`T5551` ``(bug): Missing check for boot_configuration_complete raises error in vyos-save-config.py``
+* :vytask:`T5353` ``(bug): config-mgmt: normalize archive updates and commit log entries``
+* :vytask:`T3424` ``(default): PPPoE IA-PD doesn't work in VRF``
+* :vytask:`T2773` ``(feature): EIGRP support for VRF``
+
+
+2023-09-10
+==========
+
+* :vytask:`T5565` ``(bug): Builds as vyos-999-timestamp instead of vyos-1.4-rolling-timestamp``
+* :vytask:`T5555` ``(bug): Fix timezone migrator (system 13-to-14)``
+* :vytask:`T5529` ``(bug): Missing symbolic link in linux-firmware package.``
+
+
+2023-09-09
+==========
+
+* :vytask:`T5540` ``(bug): vyos-1x: Wrong VHT configuration for WiFi 802.11ac``
+* :vytask:`T5423` ``(bug): ipsec: no output for op-cmd "show vpn ike secrets"``
+* :vytask:`T3700` ``(feature): Support VLAN tunnel mapping of VLAN aware bridges``
+
+
+2023-09-08
+==========
+
+* :vytask:`T5502` ``(bug): Firewall - wrong parser for inbound and/or outbound interface``
+* :vytask:`T5460` ``(feature): Firewall - remove config-trap``
+* :vytask:`T5450` ``(feature): Firewall interface group - Allow inverted matcher``
+* :vytask:`T4426` ``(default): Add arpwatch to the image``
+* :vytask:`T4356` ``(bug): DHCP v6 client only supports single interface configuration``
+
+
+2023-09-07
+==========
+
+* :vytask:`T5489` ``(feature): Change to BBR as TCP congestion control, or at least make it an config option``
+* :vytask:`T5510` ``(feature): Shrink imagesize and improve read performance by changing mksquashfs syntax``
+
+
+2023-09-06
+==========
+
+* :vytask:`T5542` ``(bug): ipoe-server: external-dhcp(dhcp-relay) not woking / not implemented``
+* :vytask:`T5548` ``(bug): HAProxy renders timeouts incorrectly``
+* :vytask:`T5544` ``(feature): Allow CAP_SYS_MODULE to be set on containers``
+
+
+2023-09-05
+==========
+
+* :vytask:`T5524` ``(feature): Add config directory to liveCD``
+* :vytask:`T5519` ``(bug): Function `call` sometimes hangs``
+* :vytask:`T5508` ``(bug): Configuration Migration Fails to New Netfilter Firewall Syntax``
+* :vytask:`T5495` ``(feature): Enable snmp module also for frr/ldpd``
+* :vytask:`T2958` ``(bug): DHCP server doesn't work from a live CD``
+* :vytask:`T5428` ``(bug): dhcp: client renewal fails when running inside VRF``
+
+
+2023-09-04
+==========
+
+* :vytask:`T5536` ``(bug): show dhcp client leases caues No module named 'vyos.validate'``
+* :vytask:`T5506` ``(bug): Container bridge interfaces do not have a link-local address``
+
+
+2023-09-03
+==========
+
+* :vytask:`T5538` ``(bug): Change order within variable lb_config_tmpl to fit order of manpage and fix some typos``
+* :vytask:`T4612` ``(feature): Support arbitrary netmasks in firewall rules``
+
+
+2023-08-31
+==========
+
+* :vytask:`T5190` ``(feature): Cloud-Init cannot fetch Meta-data on machines where the main Ethernet interface is not eth0``
+* :vytask:`T4895` ``(bug): Tag nodes are overwritten when configured by Cloud-Init from User-Data``
+* :vytask:`T4776` ``(bug): NVME storage is not detected properly during installation``
+* :vytask:`T5531` ``(feature): Containers add label option``
+* :vytask:`T5525` ``(default): Change dev.packages.vyos.net repo to rolling-packages.vyos.net vyos-build:current uses``
+
+
+2023-08-30
+==========
+
+* :vytask:`T4933` ``(default): Malformed lines cause vyos.util.colon_separated_to_dict fail with a nondescript error``
+* :vytask:`T4790` ``(bug): RADIUS login does not work if sum of timeouts more than 50s``
+* :vytask:`T4113` ``(bug): Incorrect GRUB configuration parsing``
+* :vytask:`T5520` ``(bug): Likely source of corruption on system update exposed by change in coreutils for Bookworm``
+* :vytask:`T4151` ``(feature): IPV6 local PBR Support``
+* :vytask:`T4485` ``(default): OpenVPN: Allow multiple CAs certificates``
+
+
+2023-08-29
+==========
+
+* :vytask:`T3940` ``(bug): DHCP client does not remove IP address when stopped by the 02-vyos-stopdhclient hook``
+* :vytask:`T3713` ``(default): Create a meta-package for user utilities``
+* :vytask:`T3339` ``(bug): Cloud-Init domain search setting not applied``
+* :vytask:`T3577` ``(bug): Generating vpn x509 key pair fails with command not found``
+
+
+2023-08-28
+==========
+
+* :vytask:`T4745` ``(bug): CLI TAB issue with values with '-' at the beginning in conf mode``
+* :vytask:`T5472` ``(bug): NAT redirect should not require port``
+
+
+2023-08-27
+==========
+
+* :vytask:`T4759` ``(bug): domain-group on policy route not working``
+* :vytask:`T1097` ``(feature): Make firewall groups work everywhere that's appropropriate``
+
+
+2023-08-26
+==========
+
+* :vytask:`T5039` ``(bug): Can't add new local user``
+* :vytask:`T5023` ``(bug): PKI commit fails to update dependents``
+* :vytask:`T4512` ``(feature): enable-default-log on zone-policy``
+* :vytask:`T5003` ``(default): Upgrade base system to Debian 12 "Bookworm"``
+
+
+2023-08-25
+==========
+
+* :vytask:`T5468` ``(feature): Remove unused manpages to free up space``
+* :vytask:`T5463` ``(feature): Containers allow publish  IPv6  address port``
+* :vytask:`T4412` ``(bug): commit archive: reboot not working with sftp``
+* :vytask:`T3702` ``(feature): Policy: Allow routing by fwmark``
+* :vytask:`T3536` ``(default): Unable to list all available routes``
+
+
+2023-08-24
+==========
+
+* :vytask:`T5448` ``(feature): Add service zabbix-agent``
+* :vytask:`T5006` ``(bug): Http api segfault with concurrent requests``
+* :vytask:`T5505` ``(feature): system: zebra route-map is not removed from FRR``
+* :vytask:`T5305` ``(bug): REST API configure operation should not be defined as async``
+* :vytask:`T4292` ``(feature): Rewrite vyatta-save-config.pl to Python``
+
+
+2023-08-23
+==========
+
+* :vytask:`T5478` ``(bug): Cannot configure resolver-cache options for firewall``
+* :vytask:`T5466` ``(feature): L3VPN - label allocation mode``
+* :vytask:`T5453` ``(bug): Fix nat66 - broken after load-balance was introduced in nat``
+* :vytask:`T5446` ``(bug): bgp: validity check for bestpath med option``
+* :vytask:`T5500` ``(feature): Minor fixes to configtree render``
+* :vytask:`T5469` ``(default): Incorrect dependency set in the openvpn-dco package when building VyOS for arm64``
+* :vytask:`T5387` ``(feature): dhcp6c: add a no release option``
+* :vytask:`T5491` ``(feature): Hostapd - AP-Mode - allow white-/blacklisting of Clients``
+* :vytask:`T4889` ``(default): Add nftables NAT REDIRECT [to localhost] to CLI``
+
+
+2023-08-22
+==========
+
+* :vytask:`T5407` ``(bug): Static routes pointed to container networks fail to persist after reboot``
+
+
 2023-08-20
 ==========
 
@@ -98,7 +317,6 @@
 ==========
 
 * :vytask:`T5420` ``(feature): nftables - upgrade to latest 1.0.8``
-* :vytask:`T3424` ``(default): PPPoE IA-PD doesn't work in VRF``
 * :vytask:`T5445` ``(feature): dyndns: add possibility to specify update interval (timeout)``
 
 
@@ -3271,7 +3489,6 @@
 ==========
 
 * :vytask:`T3402` ``(feature): Add VyOS programming library for operational level commands``
-* :vytask:`T3275` ``(default): Disable conntrack helpers by default``
 
 
 2021-09-10
diff --git a/docs/changelog/1.5.rst b/docs/changelog/1.5.rst
new file mode 100644
index 00000000..1d4333f7
--- /dev/null
+++ b/docs/changelog/1.5.rst
@@ -0,0 +1,91 @@
+############
+1.5 Circinus
+############
+
+..
+   Please don't add anything by hand.
+   This file is managed by the script:
+   _ext/releasenotes.py
+
+
+2023-09-24
+==========
+
+* :vytask:`T5604` ``(bug): List of debian archives is out of date (non-free-firmware is missing)``
+* :vytask:`T5591` ``(feature): Cleanup of FRR daemons-file and various FRR fixes``
+
+
+2023-09-22
+==========
+
+* :vytask:`T5602` ``(feature): For reverse-proxy type of load-balancing feature, support "backup" option in backends configuration``
+* :vytask:`T5609` ``(enhancment): Add util to get drive device name from id``
+* :vytask:`T5608` ``(enhancment): Rewrite add/delete raid member to Python and remove from vyatta-op``
+* :vytask:`T5607` ``(bug): Adjust RAID smoketest for non-deterministic SCSI device probing``
+
+
+2023-09-20
+==========
+
+* :vytask:`T5588` ``(bug): Add kernel conntrack_bridge module``
+* :vytask:`T5241` ``(feature): Support veth interfaces to working with netns``
+* :vytask:`T5592` ``(feature): salt: upgrade minion to 3005.2``
+* :vytask:`T5590` ``(default): Firewall "log enable" logs every packet``
+
+
+2023-09-19
+==========
+
+* :vytask:`T5597` ``(feature): isis: add new features from FRR 9.``
+
+
+2023-09-18
+==========
+
+* :vytask:`T5575` ``(bug): ARP/NDP table-size isnt set properly``
+
+
+2023-09-15
+==========
+
+* :vytask:`T5587` ``(bug): Firwall can not pass the smoketest``
+* :vytask:`T5581` ``(feature): Add "show ip nht" op-mode command (IPv4 nexthop tracking table)``
+
+
+2023-09-11
+==========
+
+* :vytask:`T5562` ``(bug): Smoketests fail for vyos:current (test_netns.py)``
+* :vytask:`T5551` ``(bug): Missing check for boot_configuration_complete raises error in vyos-save-config.py``
+* :vytask:`T5353` ``(bug): config-mgmt: normalize archive updates and commit log entries``
+
+
+2023-09-10
+==========
+
+* :vytask:`T5555` ``(bug): Fix timezone migrator (system 13-to-14)``
+
+
+2023-09-09
+==========
+
+* :vytask:`T5423` ``(bug): ipsec: no output for op-cmd "show vpn ike secrets"``
+
+
+2023-09-08
+==========
+
+* :vytask:`T5560` ``(bug): VyOS version in current branch should be changed from 1.4 to 1.5``
+
+
+2023-09-07
+==========
+
+* :vytask:`T5556` ``(bug): reboot now and  poweroff does not work``
+* :vytask:`T5489` ``(feature): Change to BBR as TCP congestion control, or at least make it an config option``
+
+
+2023-09-06
+==========
+
+* :vytask:`T5548` ``(bug): HAProxy renders timeouts incorrectly``
diff --git a/docs/changelog/index.rst b/docs/changelog/index.rst
index c5af65ef..9467a716 100644
--- a/docs/changelog/index.rst
+++ b/docs/changelog/index.rst
@@ -10,6 +10,7 @@ Changelog
    :maxdepth: 1
    :includehidden:
 
+   1.5
    1.4
    1.3
    1.2.6