vyos-1x.git/debian, branch rolling

container: T7736: pin aardvark-dns to the same minimum version as netavark

2026-08-04T18:36:28+00:00

aardvark-dns ships in lockstep with netavark (both 1.14.0 on the box this was verified against), so pin it to the same >=1.14.0 minimum required for Podman's "host_interface_name" network option to actually take effect.

container: T7736: give container veths a deterministic host_interface_name

2026-08-04T18:36:28+00:00

Podman's default "vethN" auto-naming for a container's host-side veth can collide with VyOS's own "virtual-ethernet vethN" interfaces. Bump the minimum Podman dependency to 5.8 (which supports "host_interface_name" network connect option) and use it to name every non-macvlan container network attachment "veth-" instead, eliminating the collision by construction. Container names too long to fit are shortened to a recognizable prefix plus a short hash of the full name; verify() rejects the rare case where two containers still generate the same interface name. Add "show container interface" to display the resulting name-to-container mapping.

Merge pull request #5267 from vyos/T8099-strongswan-6.0

2026-06-23T16:03:48+00:00

T8099: strongswan: 6.0.6 + Post quantum options

op-mode: T9009: use journalctl build-in colorisation

2026-06-20T21:12:36+00:00

Drop third party binary grc for showing the log output in fancy colors. Solely rely on what journalctl brings to the table.

T8099: update strongswan dependency to 6.0.6

2026-06-19T16:14:04+00:00

Merge pull request #5270 from c-po/bgpq3-update

2026-06-18T14:11:35+00:00

T8971: upgrade from bgpq3 package to bgpq4

2026-06-12T16:39:13+00:00

Add symlink from bgpq3 to bgpq4 to keep backwards compatible behavior.

salt: T8973: remove feature

2026-06-09T19:44:03+00:00

As salt has been marked deprecated via T8056 and is thus deprecated in VyOS 1.5 and VyOS 1.4 it is time to remove it from the rolling release.

password-reset: T8346: Fix password recovery when only `plaintext-password` is set

2026-06-04T10:47:11+00:00

When a user account was provisioned with only `plaintext-password` (e.g. via cloud-init), the password recovery tool failed to persist the new password across reboots. On the next boot, VyOS would re-apply the `plaintext-password` from config.boot, silently overwriting the recovered encrypted password.

ipsec: T8954: Bump strongSwan deps to version 5.9.11-2+vyos0

2026-06-03T08:31:27+00:00

When strongSwan package is not available on `packages.vyos.net`, it causes the Debain 5.9.8 package version to be used, which fails the tests.