T8433: remove changelogs from documentation (#1809)

They are kept in Phorge and the KB
and do not need to be duplicated here

11 files changed, 0 insertions, 3106 deletions

diff --git a/docs/changelog/1.2.1.rst b/docs/changelog/1.2.1.rst
deleted file mode 100644
index 4f22dd0a..00000000
--- a/docs/changelog/1.2.1.rst
+++ /dev/null
@@ -1,52 +0,0 @@
-1.2.1
-=====
-
-VyOS 1.2.1 is a maintenance release made in April 2019.
-
-Resolved issues
----------------
-
-* Package updates: kernel 4.19.32, open-vm-tools 10.3, latest Intel NIC drivers
-* :vytask:`T1326` The kernel now includes drivers for various USB serial
-  adapters, which allows people to add a serial console to a machine without
-  onboard RS232, or connect to something else from the router
-* The collection of network card firmware is now much more extensive
-* :vytask:`T1271` VRRP now correctly uses a virtual rather than physical MAC
-  addresses in the RFC-compliant mode
-* :vytask:`T1330` DHCP WPAD URL option works correctly again
-* :vytask:`T1312` Many to many NAT rules now can use source/destination and
-  translation networks of non-matching size. If 1:1 network bits translation is
-  desired, it's now users responsibility to check if prefix length matches.
-* :vytask:`T1290` IPv6 network prefix translation is fixed
-* :vytask:`T1308` Non-alphanumeric characters such as ``>`` can now be safely
-  used in PPPoE passwords
-* :vytask:`T1305` ``show | commands`` no longer fails when a config section ends
-  with a leaf node such as ``timezone`` in ``show system | commands``
-* :vytask:`T1235` ``show | commands`` correctly works in config mode now
-* :vytask:`T1298` VTI is now compatible with the DHCP-interface IPsec option
-* :vytask:`T1277` ``show dhcp server statistics`` command was broken in latest
-  Crux
-* :vytask:`T1261` An issue with TFTP server refusing to listen on addresses
-  other than loopback was fixed
-* :vytask:`T1224` Template issue that might cause UDP broadcast relay fail to
-  start is fixed
-* :vytask:`T1067` VXLAN value validation is improved
-* :vytask:`T1211` Blank hostnames in DHCP updates no longer can crash DNS
-  forwarding
-* :vytask:`T1322` Correct configuration is now generated for DHCPv6 relays with
-  more than one upstream interface
-* :vytask:`T1234` ``relay-agents-packets`` option works correctly now
-* :vytask:`T1231` Dynamic DNS data is now cleaned on configuration change
-* :vytask:`T1282` Remote Syslog can now use a fully qualified domain name
-* :vytask:`T1279` ACPI power off works again
-* :vytask:`T1247` Negation in WAN load balancing rules works again
-* :vytask:`T1218` FRR staticd now starts on boot correctly
-* :vytask:`T1296` The installer now correctly detects SD card devices
-* :vytask:`T1225` Wireguard peers can be disabled now
-* :vytask:`T1217` The issue with Wireguard interfaces impossible to delete
-  is fixed
-* :vytask:`T1160` Unintended IPv6 access is fixed in SNMP configuration
-* :vytask:`T1060` It's now possible to exclude hosts from the transparent
-  web proxy
-* :vytask:`T484` An issue with rules impossible to delete from the zone-based
-  firewall is fixed
\ No newline at end of file
diff --git a/docs/changelog/1.2.2.rst b/docs/changelog/1.2.2.rst
deleted file mode 100644
index 17ba941f..00000000
--- a/docs/changelog/1.2.2.rst
+++ /dev/null
@@ -1,46 +0,0 @@
-1.2.2
-=====
-
-1.2.2 is a maintenance release made in July 2019.
-
-New features
-------------
-
-* Options for per-interface MSS clamping.
-* BGP extended next-hop capability
-* Relaxed BGP multipath option
-* Internal and external options for "remote-as" (accept any AS as long as it's
-  the same to this router or different, respectively)
-* "Unnumbered" (interface-based) BGP peers
-* BGP no-prepend option
-* Additive BGP community option
-* OSPFv3 network type option
-* Custom arguments for VRRP scripts
-* A script for querying values from config files
-
-Resolved issues
----------------
-
-* Linux kernel 4.19.54, including a fix for the TCP SACK vulnerability
-* :vytask:`T1371` VRRP health-check scripts now can use arguments
-* :vytask:`T1497` DNS server addresses coming from a DHCP server are now
-  correctly propagated to resolv.conf
-* :vytask:`T1469` Domain-specific name servers in DNS forwarding are now used
-  for recursive queries
-* :vytask:`T1433` ``run show dhcpv6 server leases`` now display leases correctly
-* :vytask:`T1461` Deleting ``firewall options`` node no longer causes errors
-* :vytask:`T1458` Correct hostname is sent to remote syslog again
-* :vytask:`T1438` Board serial number from DMI is correctly displayed in
-  ``show version``
-* :vytask:`T1358`, :vytask:`T1355`, :vytask:`T1294` Multiple corrections in
-  remote syslog config
-* :vytask:`T1255` Fixed missing newline in ``/etc/hosts``
-* :vytask:`T1174` ``system domain-name`` is correctly included in
-  ``/etc/resolv.conf``
-* :vytask:`T1465` Fixed priority inversion in ``interfaces vti vtiX ip``
-  settings
-* :vytask:`T1446` Fixed errors when installing with RAID1 on UEFI machines
-* :vytask:`T1387` Fixed an error on disabling an interfaces that has no address
-* :vytask:`T1367` Fixed deleting VLAN interface with non-default MTU
-* :vytask:`T1505` vyos.config ``return_effective_values()`` function now
-  correctly returns a list rather than a string
\ No newline at end of file
diff --git a/docs/changelog/1.2.3.rst b/docs/changelog/1.2.3.rst
deleted file mode 100644
index 653beec1..00000000
--- a/docs/changelog/1.2.3.rst
+++ /dev/null
@@ -1,62 +0,0 @@
-1.2.3
-=====
-
-1.2.3 is a maintenance and feature backport release made in September 2019.
-
-New features
-------------
-
-* HTTP API
-* :vytask:`T1524` "set service dns forwarding allow-from <IPv4 net|IPv6 net>"
-  option for limiting queries to specific client networks
-* :vytask:`T1503` Functions for checking if a commit is in progress
-* :vytask:`T1543` "set system contig-mangement commit-archive source-address"
-  option
-* :vytask:`T1554` Intel NIC drivers now support receive side scaling and
-  multiqueue
-
-Resolved issues
----------------
-
-* :vytask:`T1209` OSPF max-metric values over 100 no longer causes commit
-  errors
-* :vytask:`T1333` Fixes issue with DNS forwarding not performing recursive
-  lookups on domain specific forwarders
-* :vytask:`T1362` Special characters in VRRP passwords are handled correctly
-* :vytask:`T1377` BGP weight is applied properly
-* :vytask:`T1420` Fixed permission for log files
-* :vytask:`T1425` Wireguard interfaces now support /31 addresses
-* :vytask:`T1428` Wireguard correctly handles firewall marks
-* :vytask:`T1439` DHCPv6 static mappings now work correctly
-* :vytask:`T1450` Flood ping commands now works correctly
-* :vytask:`T1460` Op mode "show firewall" commands now support counters longer
-  than 8 digits (T1460)
-* :vytask:`T1465` Fixed priority inversion in VTI commands
-* :vytask:`T1468` Fixed remote-as check in the BGP route-reflector-client option
-* :vytask:`T1472` It's now possible to re-create VRRP groups with RFC
-  compatibility mode enabled
-* :vytask:`T1527` Fixed a typo in DHCPv6 server help strings
-* :vytask:`T1529` Unnumbered BGP peers now support VLAN interfaces
-* :vytask:`T1530` Fixed "set system syslog global archive file" command
-* :vytask:`T1531` Multiple fixes in cluster configuration scripts
-* :vytask:`T1537` Fixed missing help text for "service dns"
-* :vytask:`T1541` Fixed input validation in DHCPv6 relay options
-* :vytask:`T1551` It's now possible to create a QinQ interface and a firewall
-  assigned to it in one commit
-* :vytask:`T1559` URL filtering now uses correct rule database path and works
-  again
-* :vytask:`T1579` "show log vpn ipsec" command works again
-* :vytask:`T1576` "show arp interface <intf>" command works again
-* :vytask:`T1605` Fixed regression in L2TP/IPsec server
-* :vytask:`T1613` Netflow/sFlow captures IPv6 traffic correctly
-* :vytask:`T1616` "renew dhcpv6" command now works from op mode
-* :vytask:`T1642` BGP remove-private-as option iBGP vs eBGP check works
-  correctly now
-* :vytask:`T1540`, :vytask:`T1360`, :vytask:`T1264`, :vytask:`T1623` Multiple
-  improvements in name servers and hosts configuration handling
-
-Internals
----------
-
-``/etc/resolv.conf`` and ``/etc/hosts`` files are now managed by the
-*vyos-hostsd* service that listens on a ZMQ socket for update messages.
\ No newline at end of file
diff --git a/docs/changelog/1.2.4.rst b/docs/changelog/1.2.4.rst
deleted file mode 100644
index 3e228880..00000000
--- a/docs/changelog/1.2.4.rst
+++ /dev/null
@@ -1,77 +0,0 @@
-1.2.4
-=====
-
-1.2.4 is a maintenance release made in December 2019.
-
-Resolved issues
----------------
-
-* :vytask:`T258` Can not configure wan load-balancing on vyos-1.2
-* :vytask:`T818` SNMP v3 - remove required engineid from user node
-* :vytask:`T1030` Upgrade ddclient from 3.8.2 to 3.9.
-  (support Cloudflare API v4)
-* :vytask:`T1183` BFD Support via FRR
-* :vytask:`T1299` Allow SNMPd to be extended with custom scripts
-* :vytask:`T1351` accel-pppoe adding CIDR based IP pool option
-* :vytask:`T1391` In route-map set community additive
-* :vytask:`T1394` syslog systemd and host_name.py race condition
-* :vytask:`T1401` Copying files with the FTP protocol fails if the passwor
-  contains special characters
-* :vytask:`T1421` OpenVPN client push-route stopped working, needs added quotes
-  to fix
-* :vytask:`T1430` Add options for custom DHCP client-id and hostname
-* :vytask:`T1447` Python subprocess called without import in host_name.py
-* :vytask:`T1470` improve output of "show dhcpv6 server leases"
-* :vytask:`T1485` Enable 'AdvIntervalOpt' option in for radvd.conf
-* :vytask:`T1496` Separate rolling release and LTS kernel builds
-* :vytask:`T1560` "set load-balancing wan rule 0" causes segfault and prevent
-  load balancing from starting
-* :vytask:`T1568` strip-private command improvement for additional masking o
-  IPv6 and MAC address
-* :vytask:`T1578` completion offers "show table", but show table does not exist
-* :vytask:`T1593` Support ip6gre
-* :vytask:`T1597` /usr/sbin/rsyslogd after deleting "system syslog"
-* :vytask:`T1638` vyos-hostsd not setting system domain name
-* :vytask:`T1678` hostfile-update missing line feed
-* :vytask:`T1694` NTPd: Do not listen on all interfaces by default
-* :vytask:`T1701` Delete domain-name and domain-search won't work
-* :vytask:`T1705` High CPU usage by bgpd when snmp is active
-* :vytask:`T1707` DHCP static mapping and exclude address not working
-* :vytask:`T1708` Update Rolling Release Kernel to 4.19.76
-* :vytask:`T1709` Update WireGuard to 0.0.20190913
-* :vytask:`T1716` Update Intel NIC drivers to recent versions
-* :vytask:`T1726` Update Linux Firmware binaries to a more recen
-  version 2019-03-14 -> 2019-10-07
-* :vytask:`T1728` Update Linux Kernel to 4.19.79
-* :vytask:`T1737` SNMP tab completion missing
-* :vytask:`T1738` Copy SNMP configuration from node to node raises exception
-* :vytask:`T1740` Broken OSPFv2 virtual-link authentication
-* :vytask:`T1742` NHRP unable to commit.
-* :vytask:`T1745` dhcp-server commit fails with "DHCP range stop address 
-  must be greater or equal to the range start address y!" when static mapping
-  has same IP as range stop
-* :vytask:`T1749` numeric validator doesn't support multiple ranges
-* :vytask:`T1769` Remove complex SNMPv3 Transport Security Model (TSM)
-* :vytask:`T1772` <regex> constraints in XML are partially broken
-* :vytask:`T1778` Kilobits/Megabits difference in configuration Vyos/FRR
-* :vytask:`T1780` Adding ipsec ike closeaction
-* :vytask:`T1786` disable-dhcp-nameservers is missed in current host_name.p
-  implementation
-* :vytask:`T1788` Intel QAT (QuickAssist Technology ) implementation
-* :vytask:`T1792` Update WireGuard to Debian release 0.0.20191012-1
-* :vytask:`T1800` Update Linux Kernel to v4.19.84
-* :vytask:`T1809` Wireless: SSID scan does not work in AP mode
-* :vytask:`T1811` Upgrade from 1.1.8: Config file migratio
-  failed: module=l2tp
-* :vytask:`T1812` DHCP: hostnames of clients not resolving afte
-  update v1.2.3 -> 1.2-rolling
-* :vytask:`T1819` Reboot kills SNMPv3 configuration
-* :vytask:`T1822` Priority inversion wireless interface dhcpv6
-* :vytask:`T1825` Improve DHCP configuration error message
-* :vytask:`T1836` import-conf-mode-commands in vyos-1x/scripts fails
-  to create an xml
-* :vytask:`T1839` LLDP shows "VyOS unknown" instead of "VyOS"
-* :vytask:`T1841` PPP ipv6-up.d direcotry missing
-* :vytask:`T1893` igmp-proxy: Do not allow adding unknown interface
-* :vytask:`T1903` Implementation udev predefined interface naming
-* :vytask:`T1904` update eth1 and eth2 link files for the vep4600
\ No newline at end of file
diff --git a/docs/changelog/1.2.5.rst b/docs/changelog/1.2.5.rst
deleted file mode 100644
index 438e84f2..00000000
--- a/docs/changelog/1.2.5.rst
+++ /dev/null
@@ -1,70 +0,0 @@
-1.2.5
-=====
-
-1.2.5 is a maintenance release made in April 2020.
-
-Resolved issues
----------------
-
-* :vytask:`T1020` OSPF Stops distributing default route after a while
-* :vytask:`T1228` pppoe default-route force option not working (Rel 1.2.0-rc11)
-* :vytask:`T1301` bgp peer-groups don't work when "no-ipv4-unicast" is enabled.
-* :vytask:`T1341` Adding rate-limiter for pppoe server users
-* :vytask:`T1376` Incorrect DHCP lease counting
-* :vytask:`T1392` Large firewall rulesets cause the system to lose configuration
-  and crash at startup
-* :vytask:`T1416` 2 dhcp server run in failover mode can't sync hostname with
-  each other
-* :vytask:`T1452` accel-pppoe - add vendor option to shaper
-* :vytask:`T1490` BGP configuration (is lost|not applied) when updating
-  1.1.8 -> 1.2.1
-* :vytask:`T1780` Adding ipsec ike closeaction
-* :vytask:`T1803` Unbind NTP while it's not requested...
-* :vytask:`T1821` "authentication mode radius" has no effect for PPPoE server
-* :vytask:`T1827` Increase default gc_thresh
-* :vytask:`T1828` Missing completion helper for "set system syslog host
-  192.0.2.1 facility all protocol"
-* :vytask:`T1832` radvd adding feature DNSSL branch.example.com example.com to
-  existing package
-* :vytask:`T1837` PPPoE unrecognized option 'replacedefaultroute'
-* :vytask:`T1851` wireguard - changing the pubkey on an existing peer seems to
-  destroy the running config.
-* :vytask:`T1858` l2tp: Delete depricated outside-nexthop and add gateway-address
-* :vytask:`T1864` Lower IPSec DPD timeout lower limit from 10s -> 2s
-* :vytask:`T1879` Extend Dynamic DNS XML definition value help strings and
-  validators
-* :vytask:`T1881` Execute permissions are removed from custom SNMP scripts at
-  commit time
-* :vytask:`T1884` Keeping VRRP transition-script native behaviour and adding
-  stop-script
-* :vytask:`T1891` Router announcements broken on boot
-* :vytask:`T1900` Enable SNMP for VRRP.
-* :vytask:`T1902` Add redistribute non main table in bgp
-* :vytask:`T1909` Incorrect behaviour of static routes with overlapping networks
-* :vytask:`T1913` "system ipv6 blacklist" command has no effect
-* :vytask:`T1914` IPv6 multipath hash policy does not apply
-* :vytask:`T1917` Update WireGuard to Debian release 0.0.20191219-1
-* :vytask:`T1934` Change default hostname when deploy from OVA without params.
-* :vytask:`T1935` NIC identification and usage problem in Hyper-V environments
-* :vytask:`T1936` pppoe-server CLI control features
-* :vytask:`T1964` SNMP Script-extensions allows names with spaces, but commit
-  fails
-* :vytask:`T1967` BGP parameter "enforce-first-as" does not work anymore
-* :vytask:`T1970` Correct adding interfaces on boot
-* :vytask:`T1971` Missing modules in initrd.img for PXE boot
-* :vytask:`T1998` Update FRR to 7.3
-* :vytask:`T2001` Error when router reboot
-* :vytask:`T2032` Monitor bandwidth bits
-* :vytask:`T2059` Set source-validation on bond vif don't work
-* :vytask:`T2066` PPPoE interface can be created multiple times - last wins
-* :vytask:`T2069` PPPoE-client does not works with service-name option
-* :vytask:`T2077` ISO build from crux branch is failing
-* :vytask:`T2079` Update Linux Kernel to v4.19.106
-* :vytask:`T2087` Add maxfail 0 option to pppoe configuration.
-* :vytask:`T2100` BGP route adverisement wih checks rib
-* :vytask:`T2120` "reset vpn ipsec-peer" doesn't work with named peers
-* :vytask:`T2197` Cant add vif-s interface into a bridge
-* :vytask:`T2228` WireGuard does not allow ports < 1024 to be used
-* :vytask:`T2252` HTTP API add system image can return '504 Gateway Time-out'
-* :vytask:`T2272` Set system flow-accounting disable-imt has syntax error
-* :vytask:`T2276` PPPoE server vulnerability
\ No newline at end of file
diff --git a/docs/changelog/1.2.6.rst b/docs/changelog/1.2.6.rst
deleted file mode 100644
index 70786d07..00000000
--- a/docs/changelog/1.2.6.rst
+++ /dev/null
@@ -1,108 +0,0 @@
-1.2.6-S1
-========
-
-1.2.6-S1 is a security release release made in September 2020.
-
-Resolved issues
----------------
-
-VyOS 1.2.6 release was found to be suspectible to CVE-2020-10995. It's a low-
-impact vulnerability in the PowerDNS recursor that allows an attacker to cause
-performance degradation via a specially crafted authoritative DNS server reply.
-
-* :vytask:`T2899` remote syslog server migration error on update
-
-1.2.6
-=====
-
-1.2.6 is a maintenance release made in September 2020.
-
-.. _resovled issues 1.2.6:
-
-Resolved issues
----------------
-
-* :vytask:`T103` DHCP server prepends shared network name to hostnames
-* :vytask:`T125` Missing PPPoE interfaces in l2tp configuration
-* :vytask:`T1194` cronjob is being setup even if not saved
-* :vytask:`T1205` module pcspkr missing
-* :vytask:`T1219` Redundant active-active configuration, asymmetric routing and
-  conntrack-sync cache
-* :vytask:`T1220` Show transceiver information from plugin modules, e.g SFP+,
-  QSFP
-* :vytask:`T1221` BGP - Default route injection is not processed by the specific
-  route-map
-* :vytask:`T1241` Remove of policy route throws CLI error
-* :vytask:`T1291` Under certain conditions the VTI will stay forever down
-* :vytask:`T1463` Missing command `show ip bgp scan` appears in command
-  completion
-* :vytask:`T1575` `show snmp mib ifmib` crashes with IndexError
-* :vytask:`T1699` Default net.ipv6.route.max_size 32768 is too low
-* :vytask:`T1729` PIM (Protocol Independent Multicast) implementation
-* :vytask:`T1901` Semicolon in values is interpreted as a part of the shell
-  command by validators
-* :vytask:`T1934` Change default hostname when deploy from OVA without params.
-* :vytask:`T1938` syslog doesn't start automatically
-* :vytask:`T1949` Multihop IPv6 BFD is unconfigurable
-* :vytask:`T1953` DDNS service name validation rejects valid service names
-* :vytask:`T1956` PPPoE server: support PADO-delay
-* :vytask:`T1973` Allow route-map to match on BGP local preference value
-* :vytask:`T1974` Allow route-map to set administrative distance
-* :vytask:`T1982` Increase rotation for atop.acct
-* :vytask:`T1983` Expose route-map when BGP routes are programmed in to FIB
-* :vytask:`T1985` pppoe: Enable ipv6 modules without configured ipv6 pools
-* :vytask:`T2000` strongSwan does not install routes to table 220 in certain
-  cases
-* :vytask:`T2021` OSPFv3 doesn't support decimal area syntax
-* :vytask:`T2062` Wrong dhcp-server static route subnet bytes
-* :vytask:`T2091` swanctl.conf file is not generated properly is more than one
-  IPsec profile is used
-* :vytask:`T2131` Improve syslog remote host CLI definition
-* :vytask:`T2224` Update Linux Kernel to v4.19.114
-* :vytask:`T2286` IPoE server vulnerability
-* :vytask:`T2303` Unable to delete the image version that came from OVA
-* :vytask:`T2305` Add release name to "show version" command
-* :vytask:`T2311` Statically configured name servers may not take precedence
-  over ones from DHCP
-* :vytask:`T2327` Unable to create syslog server entry with different port
-* :vytask:`T2332` Backport node option for a syslog server
-* :vytask:`T2342` Bridge l2tpv3 + ethX errors
-* :vytask:`T2344` PPPoE server client static IP assignment silently fails
-* :vytask:`T2385` salt-minion: improve completion helpers
-* :vytask:`T2389` BGP community-list unknown command
-* :vytask:`T2398` op-mode "dhcp client leases interface" completion helper
-  misses interfaces
-* :vytask:`T2402` Live ISO should warn when configuring that changes won't
-  persist
-* :vytask:`T2443` NHRP: Add debugging information to syslog
-* :vytask:`T2448` `monitor protocol bgp` subcommands fail with 'command
-  incomplete'
-* :vytask:`T2458` Update FRR to 7.3.1
-* :vytask:`T2476` Bond member description change leads to network outage
-* :vytask:`T2478` login radius: use NAS-IP-Address if defined source address
-* :vytask:`T2482` Update PowerDNS recursor to 4.3.1 for CVE-2020-10995
-* :vytask:`T2517` vyos-container: link_filter: No such file or directory
-* :vytask:`T2526` Wake-On-Lan CLI implementation
-* :vytask:`T2528` "update dns dynamic" throws FileNotFoundError excepton
-* :vytask:`T2536` "show log dns forwarding" still refers to dnsmasq
-* :vytask:`T2538` Update Intel NIC drivers to recent release (preparation for
-  Kernel >=5.4)
-* :vytask:`T2545` Show physical device offloading capabilities for specified
-  ethernet interface
-* :vytask:`T2563` Wrong interface binding for Dell VEP 1445
-* :vytask:`T2605` SNMP service is not disabled by default
-* :vytask:`T2625` Provide generic Library for package builds
-* :vytask:`T2686` FRR: BGP: large-community configuration is not applied
-  properly after upgrading FRR to 7.3.x series
-* :vytask:`T2701` `vpn ipsec pfs enable` doesn't work with IKE groups
-* :vytask:`T2728` Protocol option ignored for IPSec peers in transport mode
-* :vytask:`T2734` WireGuard: fwmark CLI definition is inconsistent
-* :vytask:`T2757` "show system image version" contains additional new-line
-  character breaking output
-* :vytask:`T2797` Update Linux Kernel to v4.19.139
-* :vytask:`T2822` Update Linux Kernel to v4.19.141
-* :vytask:`T2829` PPPoE server: mppe setting is implemented as node instead of
-  leafNode
-* :vytask:`T2831` Update Linux Kernel to v4.19.142
-* :vytask:`T2852` rename dynamic dns interface breaks ddclient.cache permissions
-* :vytask:`T2853` Intel QAT acceleration does not work
\ No newline at end of file
diff --git a/docs/changelog/1.3.rst b/docs/changelog/1.3.rst
deleted file mode 100644
index 42a94a63..00000000
--- a/docs/changelog/1.3.rst
+++ /dev/null
@@ -1,941 +0,0 @@
-
-############
-1.3 Eqquleus
-############
-
-..
-   Please don't add anything by hand.
-   This file is managed by the script:
-   _ext/releasenotes.py
-
-
-1.3.9 (future release)
-======================
-
-
-
-
-
-**Bug fixes**
-
-
-* :vytask:`T5926`  ``IPSEC does not apply after l2tp configuration was changed``
-
-**Other resolved issues**
-
-
-* :vytask:`T1311`  ``WAN load-balancing can't flush connections when conntrack-sync is enabled``
-
-1.3.8 (25th June 2024)
-======================
-
-
-
-
-
-**Bug fixes**
-
-
-* :vytask:`T5725`  ``protocol IS-IS configuration is empty if a tunnel does not have remote address``
-* :vytask:`T6337`  ``Upgrade from 1.3.5 fails if ssh public key name has a space in it``
-* :vytask:`T6359`  ``Multicast does not forward after reboot``
-
-
-1.3.7 (13th May 2024)
-=====================
-
-**Security**
-
-
-* :vytask:`T6324`  ``CVE-2024-2961``
-
-
-
-**New features and improvements**
-
-
-* :vytask:`T1244`  ``Add support for StartupResync in conntrack-sync``
-* :vytask:`T5364`  ``Make it possible to set the PADO delay to 0``
-* :vytask:`T5418`  ``Allow arbitrary subnets in PPPoE client IP pools``
-* :vytask:`T5504`  ``Make it possible to set more than one peer-address in unicast VRRP``
-* :vytask:`T6057`  ``Add ability to disable syslog for conntrackd``
-
-**Bug fixes**
-
-
-* :vytask:`T1751`  ``DNS server addresses from DHCPv6 are not added to resolv.conf``
-* :vytask:`T1976`  ``deleting address-family under neighbor will disable neighbor``
-* :vytask:`T2044`  ``RPKI doesn't boot properly``
-* :vytask:`T2113`  ``OpenVPN Options error: you cannot use --verify-x509-name with --compat-names or --no-name-remapping``
-* :vytask:`T2279`  ``Router resolves as 127.0.1.1 when using Router's Recursive DNS``
-* :vytask:`T2590`  ``DHCPv6 not updating nameservers and search domains since replacing isc-dhcp-client with WIDE dhcp6c``
-* :vytask:`T2612`  ``HTTPS API, changing API key fails but goes through``
-* :vytask:`T2801`  ``conntrack-tools flooding logs``
-* :vytask:`T2998`  ``SNMP v3 oid "exclude" option doesn't work``
-* :vytask:`T3437`  ``BGP Confederation Addition Causes Error``
-* :vytask:`T3992`  ``Unhandled exception when trying to add an interface with an assigned address to a bridge``
-* :vytask:`T4270`  ``When "ignore-hosts-file" is unset, local hostname of the router resolves to 127.0.1.1 in the DNS forwarding service``
-* :vytask:`T4453`  ``dhclient fails to renew DHCP lease with VRF``
-* :vytask:`T5239`  ``Host name and domain name missing from the FRR configuration``
-* :vytask:`T5982`  ``Isolated interfaces smoketest fail``
-* :vytask:`T6004`  ``Missing RPKI boot priority prevents it from loading``
-* :vytask:`T6056`  ``Applying 'system static-host-mapping'  command calls unnecessary snmpd restart``
-* :vytask:`T6088`  ``Configuration corrupted after saving and powercut or force reboot``
-* :vytask:`T6096`  ``Config commits are not synced properly because 00vyos-sync is deleted by vyos-router``
-* :vytask:`T6110`  ``Insufficient validation of range option with failover in DHCP server``
-* :vytask:`T6124`  ``Docker equuleus build image doesn't build due to fpm``
-* :vytask:`T6141`  ``Trying to set PADO delay in PPPoE server without also configuring the session options causes a commit failure``
-* :vytask:`T6150`  ``Impossible to set a static IP address via RADIUS in IPoE``
-* :vytask:`T6193`  ``dhcp-client: invalid warning "is not a DHCP interface but uses DHCP name-server option" for VLAN interfaces``
-* :vytask:`T6196`  ``route-map and summary-only do not work in BGP aggregation at the same time``
-* :vytask:`T6243`  ``Update vyos-http-api-tools for package idna security advisory``
-
-**Other resolved issues**
-
-
-* :vytask:`T1198`  ``Extra hyphen in suggested image name on upgrade``
-* :vytask:`T3584`  ``Migrate NTP server addresses from *.pool.ntp.org to our own``
-* :vytask:`T6261`  ``Typo in the operational mode connect and disconnect command output``
-
-1.3.6 (14th February 2024)
-==========================
-
-**Security**
-
-
-* :vytask:`T5318`  ``Security Vulnerabilities for VyOS 1.3.3``
-
-
-**Configuration syntax changes (automatically migrated)**
-
-
-* :vytask:`T2060`  ``source-validation will be configured at different locations and could lead to massive confusion``
-* :vytask:`T2289`  ``Denest cerbot certificate configuration from service https``
-
-**New features and improvements**
-
-
-* :vytask:`T1929`  ``ipset in firewall``
-* :vytask:`T2060`  ``source-validation will be configured at different locations and could lead to massive confusion``
-* :vytask:`T2116`  ``Processing configuration via Cloud-init User-Data``
-* :vytask:`T2191`  ``Using tallow to block sshd probes``
-* :vytask:`T2289`  ``Denest cerbot certificate configuration from service https``
-* :vytask:`T3039`  ``Resize a root partition and filesystem automatically during deployment in virtual environments``
-* :vytask:`T4039`  ``Rsyslog to use 'protocol23format' for protocol UDP``
-* :vytask:`T4078`  ``A hybrid of "network-group" and "address-group".``
-* :vytask:`T5182`  ``Update Intel ice driver``
-* :vytask:`T5187`  ``Update Realtek r8152 driver``
-* :vytask:`T5275`  ``Add op mode commands for exporting certificates to PEM files with correct headers``
-* :vytask:`T5796`  ``Openconnect - HTTPS  security headers are missing``
-
-**Bug fixes**
-
-
-* :vytask:`T117`  ``Cannot install from ISO via serial console on ttyS1``
-* :vytask:`T1925`  ``DMVPN is always listed as down in "show vpn ipsec sa"``
-* :vytask:`T2085`  ``Building some packages with vyos-build no longer works for Equuleus/current``
-* :vytask:`T2163`  ``Disabled vif interface with "address dhcp" requests DHCP address``
-* :vytask:`T2404`  ``Cannot change MTU``
-* :vytask:`T2509`  ``No inotify notifications from /``
-* :vytask:`T2574`  ``wan-load-balance snat bug and route problem``
-* :vytask:`T2793`  ``compare + TAB completion does not show proper username if user contains _``
-* :vytask:`T2837`  ``make-version-file  executed too early during build process``
-* :vytask:`T3154`  ``route-map CLI allows 32-bit ASNs in community options even though FRR doesn't``
-* :vytask:`T3980`  ``vrrp transition-script validator makes warning fatal and also causes a python NameError exception``
-* :vytask:`T4062`  ``VRRP IPSEC-AH : sequence number xxxxxxx already processed. Packet dropped. Local(xxxxxxx)``
-* :vytask:`T4566`  ``Cannot log in on serial console on Equuleus v1.3.1``
-* :vytask:`T4752`  ``ICMP redirects not working / not properly configured``
-* :vytask:`T4760`  ``VyOS does not support running multiple instances of DHCPv6 clients``
-* :vytask:`T4990`  ``Commit results may not be properly saved if power is cut immediately after a successful commit``
-* :vytask:`T5180`  ``initramfs-tools ignores firmware from updates directory``
-* :vytask:`T5543`  ``Fix source address handling in static joins``
-* :vytask:`T5625`  ``"restart vpn" does not work if ipsec-interfaces is not set``
-* :vytask:`T5739`  ``Password recovery does not work if public keys are configured``
-* :vytask:`T5800`  ``HTTPS API unavailable after delete VRF``
-* :vytask:`T5852`  ``Reboots fail with eapol WAN interface``
-* :vytask:`T5914`  ``CVE-2023-48795 - Terrapin vulnerability``
-* :vytask:`T5924`  ``Build cannot pass the smoketest dialup-router-medium-vpn``
-* :vytask:`T5967`  ``Multi-hop BFD connections can't be established; please add minimum-ttl option.``
-* :vytask:`T6017`  ``Update vyos-http-api-tools for security advisory``
-
-**Other resolved issues**
-
-
-* :vytask:`T922`  ``OSPF - Process Crash after peer reboot``
-* :vytask:`T1297`  ``Add GARP settings to VRRP/keepalived``
-* :vytask:`T1369`  ``GCP Networking Failure``
-* :vytask:`T1500`  ``Slow boot/load and CLI response times``
-* :vytask:`T1667`  ``Add a tool for automatically importing old style command definitions into XML``
-* :vytask:`T1671`  ``rewrite udev script logic /lib/udev/vyatta_net_name``
-* :vytask:`T1981`  ``Allow route-map 'set src' to reference both IPv4 and IPv6``
-* :vytask:`T2223`  ``convert operational show interfaces to python/XML``
-* :vytask:`T2353`  ``Interface [conf_mode] errors parent task``
-* :vytask:`T2431`  ``Python validators are slow``
-* :vytask:`T2452`  ``Serial console related issues``
-* :vytask:`T2546`  ``The root task for rewriting [op-mode] to XML``
-* :vytask:`T2579`  ``The root task for VRF features``
-* :vytask:`T2655`  ``ConfigError formatting issue``
-* :vytask:`T2720`  ``Rework vyos.template Python module to make future extension easier``
-* :vytask:`T2755`  ``Requirements for partial interface setup``
-* :vytask:`T2799`  ``VyOS Certificates Manager``
-* :vytask:`T3191`  ``PAM RADIUS freezing when accounting does not configured on RADIUS server``
-* :vytask:`T3348`  ``dhcpd: Can't create new lease file: Permission denied``
-* :vytask:`T3403`  ``Error on interrupting list of pppoe sessions``
-* :vytask:`T3513`  ``Attempting to remove firewall rule results in error``
-* :vytask:`T3688`  ``Fail to save configuration via scp/sftp``
-* :vytask:`T3737`  ``openvpn-option needs to be able to support quotes as since openvpn 2.4.``
-* :vytask:`T3813`  ``Some custom sysctl parameters can't be applied bug``
-* :vytask:`T4222`  ``Support for TWAMP as round-trip metric``
-* :vytask:`T4646`  ``USB serial output console does not work``
-* :vytask:`T5274`  ``Add a deprecation warning for OpenVPN site-to-site with pre-shared secret``
-* :vytask:`T5714`  ``IPSec VPN: op-mode: "show log vpn" does not show results``
-* :vytask:`T5715`  ``IPSec VPN: restart vpn is not working``
-* :vytask:`T6014`  ``Bump keepalived version``
-* :vytask:`T6249`  ``ISO builder fails because of changed buster-backport repository``
-
-1.3.5 (15th December 2023)
-==========================
-
-
-
-**Configuration syntax changes (automatically migrated)**
-
-
-* :vytask:`T2139`  ``openvpn: allow "dh-file none" to disable DH for ECDH keys``
-
-**New features and improvements**
-
-
-* :vytask:`T1118`  ``Obsolete "utc" option in time selector in firewall``
-* :vytask:`T2014`  ``Use vendor specific NTP Pool hostname``
-* :vytask:`T2139`  ``openvpn: allow "dh-file none" to disable DH for ECDH keys``
-* :vytask:`T4269`  ``node.def generator should automatically add default values``
-* :vytask:`T5213`  ``Accel-ppp sending accounting interim updates acct-interim-interval option``
-* :vytask:`T5270`  ``Make OpenVPN `tls dh-params` optional``
-* :vytask:`T5271`  ``Add support for peer-fingerprint to OpenVPN``
-* :vytask:`T5273`  ``Add op mode commands for displaying certificate details and fingerprints``
-* :vytask:`T5387`  ``dhcp6c: add a no release option``
-* :vytask:`T5576`  ``Add bgp remove-private-as all option``
-* :vytask:`T5586`  ``Disable by default SNMP for Keepalived VRRP``
-* :vytask:`T5630`  ``pppoe: allow to specify MRU in addition to already configurable MTU``
-* :vytask:`T5661`  ``Add show show ssh dynamic-protection attacker and show log ssh dynamic-protection``
-
-**Bug fixes**
-
-
-* :vytask:`T305`  ``loadbalancing does not work with one pppoe connection and another connection of either dhcp or static``
-* :vytask:`T971`  ``authentication public-keys options quoting issue``
-* :vytask:`T1012`  ``vyos-build configure script should check /etc/issue to avoid confusion``
-* :vytask:`T2051`  ``Throughput anomalies``
-* :vytask:`T2250`  ``vyos-build "make iso" error if configure was ran outside of the docker container``
-* :vytask:`T3020`  ``The "scp" example is wrong in the bash-completion for "set system config-management commit-archive location"``
-* :vytask:`T3045`  ``Changes to Conntrack-Sync don't apply correctly (Mutlicast->UDP)``
-* :vytask:`T3940`  ``DHCP client does not remove IP address when stopped by the 02-vyos-stopdhclient hook``
-* :vytask:`T4146`  ``Nginx should not listen on port 80``
-* :vytask:`T4328`  ``Large MTU on 1.3.1-S1``
-* :vytask:`T4402`  ``OpenVPN client-ip-pool option is broken``
-* :vytask:`T4601`  ``dhcp : relay agent IP address issue.``
-* :vytask:`T4776`  ``NVME storage is not detected properly during installation``
-* :vytask:`T5223`  ``tunnel key doesn't clear``
-* :vytask:`T5235`  ``SSH keys with special characters cannot be applied via Cloud-init``
-* :vytask:`T5402`  ``VRRP router with rfc3768-compatibility sends multiple ARP replies``
-* :vytask:`T5413`  ``Deny the opportunity to use one public/private key pair on both wireguard peers.``
-* :vytask:`T5486`  ``Service dns dynamic cannot pass the smoketest``
-* :vytask:`T5669`  ``VXLAN interface changing port does not work``
-* :vytask:`T5670`  ``bridge: missing member interface validator``
-* :vytask:`T5763`  ``Fix imprecise check for remote file name in vyos-load-config.py``
-* :vytask:`T5777`  ``frr: backport and upstream recent bgpd daemon crashes``
-
-**Other resolved issues**
-
-
-* :vytask:`T1276`  ``dhcp relay + VLAN fails``
-* :vytask:`T2719`  ``Standardized op mode script structure``
-* :vytask:`T3536`  ``Unable to list all available routes``
-* :vytask:`T3702`  ``Policy: Allow routing by fwmark``
-* :vytask:`T5191`  ``Replace underscores with hyphens in command-line options generated by vyos.opmode``
-* :vytask:`T5268`  ``OpenVPN: upgrade package to 2.6 series``
-* :vytask:`T5280`  ``Update Expired keys (2023-06-08) for PowerDNS``
-* :vytask:`T5578`  ``"ikev2-reauth" description contains outdated information``
-* :vytask:`T5624`  ``Remove /etc/debian_version from the image``
-* :vytask:`T5632`  ``Add jq package to parse JSON files``
-* :vytask:`T5817`  ``Show openvpn server fails in some cases``
-
-1.3.4 (17th October 2023)
-=========================
-
-
-
-
-**New features and improvements**
-
-
-* :vytask:`T738`  ``Add local-port and resolver port options for powerdns in CLI configuration tree``
-* :vytask:`T2123`  ``Configure 3 NTP servers``
-* :vytask:`T2424`  ``Ability to choose the direction of Mirroring``
-* :vytask:`T3144`  ``Support op-mode command to release DHCP leases``
-* :vytask:`T3546`  ``Add support for running scripts on PPPoE server session events``
-* :vytask:`T4151`  ``IPV6 local PBR Support``
-* :vytask:`T4426`  ``Add arpwatch to the image``
-* :vytask:`T4475`  ``route-map does not support ipv6 peer``
-* :vytask:`T4825`  ``interfaces veth/veth-pairs -standalone used``
-* :vytask:`T5190`  ``Cloud-Init cannot fetch Meta-data on machines where the main Ethernet interface is not eth0``
-* :vytask:`T5265`  ``WAN load-balancing: missing completion helpers``
-* :vytask:`T5315`  ``vrrp: add support for version 3``
-* :vytask:`T5354`  ``Add sshguard to protect against brut-forces for 1.3``
-
-**Bug fixes**
-
-
-* :vytask:`T2611`  ``Prefix list names are shared between ipv4 and ipv6``
-* :vytask:`T2908`  ``VRF and bridge membership isn’t mutually exclusive``
-* :vytask:`T2958`  ``DHCP server doesn't work from a live CD``
-* :vytask:`T3070`  ``Firewall going OOM, possible related to nftables migration``
-* :vytask:`T3098`  ``Cannot talk to rtnetlink: Message too long Command failed -:1``
-* :vytask:`T3339`  ``Cloud-Init domain search setting not applied``
-* :vytask:`T4113`  ``Incorrect GRUB configuration parsing``
-* :vytask:`T4121`  ``Nameservers from DHCP client cannot be used in specific cases``
-* :vytask:`T4407`  ``Network-config v2 is broken in Cloud-init 22.1 and VyOS 1.3``
-* :vytask:`T4412`  ``commit archive: reboot not working with sftp``
-* :vytask:`T4459`  ``API service with VRF doesn't work in 1.3.1``
-* :vytask:`T4745`  ``CLI TAB issue with values with '-' at the beginning in conf mode``
-* :vytask:`T4790`  ``RADIUS login does not work if sum of timeouts more than 50s``
-* :vytask:`T4855`  ``Trying to create more than one tunnel of the same type to the same address causes unhandled exception``
-* :vytask:`T4869`  ``A network with `/32` or `/128` mask cannot be removed from a network-group``
-* :vytask:`T4895`  ``Tag nodes are overwritten when configured by Cloud-Init from User-Data``
-* :vytask:`T5006`  ``Http api segfault with concurrent requests``
-* :vytask:`T5140`  ``Firewall network-group problems``
-* :vytask:`T5221`  ``BGP as-override behavior differs from new FRR and other vendors``
-* :vytask:`T5240`  ``Service router-advert failed to start radvd with more then 3 name-servers``
-* :vytask:`T5305`  ``REST API configure operation should not be defined as async``
-* :vytask:`T5313`  ``UDP broadcast relay - missing verify() that relay interfaces have an IP address assigned``
-* :vytask:`T5329`  ``Wireguard interface as GRE tunnel source causes configuration error on boot``
-* :vytask:`T5428`  ``dhcp: client renewal fails when running inside VRF``
-* :vytask:`T5506`  ``Container bridge interfaces do not have a link-local address``
-* :vytask:`T5524`  ``Add config directory to liveCD``
-* :vytask:`T5533`  ``Keepalived VRRP IPv6 group enters in FAULT state``
-* :vytask:`T5545`  ``sflow is not working``
-* :vytask:`T5555`  ``Fix timezone migrator (system 13-to-14)``
-* :vytask:`T5594`  ``VRRP - Error if using IPv6 Link Local as hello source address``
-
-**Other resolved issues**
-
-
-* :vytask:`T469`  ``Problem after commit with errors``
-* :vytask:`T2296`  ``Upgrade WALinux to 2.2.41``
-* :vytask:`T3424`  ``PPPoE IA-PD doesn't work in VRF``
-* :vytask:`T3577`  ``Generating vpn x509 key pair fails with command not found``
-* :vytask:`T3713`  ``Create a meta-package for user utilities``
-* :vytask:`T4306`  ``Do not check for ditry repository when building release images``
-* :vytask:`T4874`  ``Add Warning message to Equuleus``
-* :vytask:`T4933`  ``Malformed lines cause vyos.util.colon_separated_to_dict fail with a nondescript error``
-* :vytask:`T5272`  ``Upgrade OpenVPN to 2.6 in Equuleus``
-* :vytask:`T5470`  ``wlan: can not disable interface if SSID is not configured``
-* :vytask:`T5557`  ``bgp: Use treat-as-withdraw for tunnel encapsulation attribute CVE-2023-38802``
-
-1.3.3 (22th June 2023)
-======================
-
-**Security**
-
-
-* :vytask:`T3835`  ``vyos router 1.2.7 snmp Dos bug``
-* :vytask:`T4970`  ``pin OCaml pcre package to avoid JIT support``
-
-
-**Configuration syntax changes (automatically migrated)**
-
-
-* :vytask:`T4628`  ``ConfigTree() throws ValueError() if tagNode contains whitespaces``
-
-**New features and improvements**
-
-
-* :vytask:`T1024`  ``Policy Based Routing by DSCP``
-* :vytask:`T1928`  ``Is the 'Welcome to VyOS' message when using SSH an information leak?``
-* :vytask:`T1993`  ``Extended pppoe rate-limiter``
-* :vytask:`T2603`  ``pppoe-server: reduce min MTU``
-* :vytask:`T2640`  ``Running VyOS inside Docker containers``
-* :vytask:`T2769`  ``Add VRF support for syslog``
-* :vytask:`T3937`  ``Rewrite "show system memory" in Python to make it usable as a library function``
-* :vytask:`T4219`  ``support incoming-interface (iif) in local PBR``
-* :vytask:`T4575`  ``vyos.utill add new wrapper "rc_cmd" to get the return code and output``
-* :vytask:`T4683`  ``Add kitty-terminfo package to build``
-* :vytask:`T4727`  ``Add RADIUS rate limit support to PPTP server``
-* :vytask:`T4743`  ``Enable IPv6 address for Dynamic DNS``
-* :vytask:`T4785`  ``snmp: Allow !, @, * and # in community name``
-* :vytask:`T4812`  ``IPsec ability to show all configured connections``
-* :vytask:`T4898`  ``Add mtu config option for dummy interfaces``
-* :vytask:`T4922`  ``Add ssh-client source-interface CLI option``
-* :vytask:`T4947`  ``Support mounting container volumes as ro or rw``
-* :vytask:`T4948`  ``pppoe: add CLI option to allow definition of host-uniq flag``
-* :vytask:`T4949`  ``Backport "monitor log" and "show log" op-mode definitions from current to equuleus``
-* :vytask:`T4959`  ``Add container registry authentication config for containers``
-* :vytask:`T4971`  ``Radius attribute "Framed-Pool" for PPPoE``
-* :vytask:`T5033`  ``generate-public-key command fails for address with multiple public keys like GitHub``
-* :vytask:`T5098`  ``PPPoE client holdoff configuration``
-
-**Bug fixes**
-
-
-* :vytask:`T2118`  ``Failure to boot after power outage due to dirty filesystem and no fsck in initramfs``
-* :vytask:`T2189`  ``Adding a large port-range will take ~ 20 minutes to commit``
-* :vytask:`T2516`  ``vyos-container: cannot configure ethernet interface``
-* :vytask:`T2838`  ``Ethernet device names changing, multiple hw-id being added``
-* :vytask:`T3852`  ``DHCP client issue - interface has two dhclient processes when link is unpluged and then plug again``
-* :vytask:`T4117`  ``Does not possible to configure PoD/CoA for L2TP vpn``
-* :vytask:`T4153`  ``Monitor bandwidth-test initiate not working``
-* :vytask:`T4177`  ``Strip-private doesn't work for service monitoring``
-* :vytask:`T4312`  ``Telegraf configuration doesn't accept IPs for URL``
-* :vytask:`T4533`  ``Radius clients don’t  have simple permissions``
-* :vytask:`T4582`  ``Router-advert: Preferred lifetime cannot equal valid lifetime in PIOs``
-* :vytask:`T4628`  ``ConfigTree() throws ValueError() if tagNode contains whitespaces``
-* :vytask:`T4630`  ``Prevent attempts to use the same interface as a source interface for pseudo-ethernet and MACsec at the same time``
-* :vytask:`T4642`  ``proxy: hyphen not allowed in proxy URL``
-* :vytask:`T4648`  ``PPPoE: Ignore default router from RA when PPPoE default-route is set to none``
-* :vytask:`T4664`  ``Add validation to reject whitespace in tag node value names``
-* :vytask:`T4668`  ``Adding/removing members from bond doesn't work/results in incorrect interface state``
-* :vytask:`T4671`  ``linux-firmware package is missing symlinks defined in WHENCE file``
-* :vytask:`T4679`  ``OpenVPN site-to-site incorrect check for IPv6 local and remote address``
-* :vytask:`T4680`  ``Telegraf prometheus-client listen-address invalid format``
-* :vytask:`T4702`  ``Wireguard peers configuration is not synchronized with CLI``
-* :vytask:`T4709`  ``TCP MSS clamping broken in equuleus``
-* :vytask:`T4730`  ``Conntrack-sync error - listen-address is not the correct type in config as it should be``
-* :vytask:`T4737`  ``FRRouting/zebra 7.5.1 does not redistribute routes to other protocols``
-* :vytask:`T4799`  ``PowerDNS >= 4.7 does not get reloaded by vyos-hostsd``
-* :vytask:`T4872`  ``Op-mode show openvpn misses a case when parsing for tunnel IP``
-* :vytask:`T4884`  ``Missing a community6 in snmpd config``
-* :vytask:`T4896`  ``ospfv3: Fix broken not-advertise option``
-* :vytask:`T4902`  ``snmpd: exclude container storage from monitoring``
-* :vytask:`T4918`  ``Odd show interface behavior``
-* :vytask:`T4939`  ``VRRP command  no-preempt not work as expected``
-* :vytask:`T4955`  ``Openconnect radiusclient.conf generating with extra authserver``
-* :vytask:`T4975`  ``CLI does not work after cutting off the power or reset``
-* :vytask:`T4978`  ``KeyError: 'memory' container_config['memory'] on upgrading to 1.4-rolling-202302041536``
-* :vytask:`T4992`  ``Incorrect check is_local_address for bgp neighbor with option ip_nonlocal_bind set``
-* :vytask:`T4993`  ``Can't delete conntrack ignore rule``
-* :vytask:`T5009`  ``op-mode command:  restart dhcp relay-agent not working``
-* :vytask:`T5011`  ``Some interface drivers don't support min_mtu and max_mtu and verify_mtu check should be skipped``
-* :vytask:`T5017`  ``Bug with validator interface-name``
-* :vytask:`T5047`  ``Recreate only a specific container``
-* :vytask:`T5066`  ``Different GRE tunnel but same tunnel keys error``
-* :vytask:`T5136`  ``Possible config corruption on upgrade``
-* :vytask:`T5152`  ``Telegraf agent hostname isn't qualified``
-* :vytask:`T5175`  ``http-api: error in MultiPart parser for FastAPI version >= 0.91.0``
-* :vytask:`T5176`  ``http-api: update vyos-http-api-tools for FastAPI security vulnerability``
-* :vytask:`T5186`  ``QoS test cannot pass for 1.3``
-
-**Other resolved issues**
-
-
-* :vytask:`T1288`  ``FRR: rewrite staticd backend (/opt/vyatta/share/vyatta-cfg/templates/protocols/static/*)``
-* :vytask:`T1875`  ``Add the ability to use network address as BGP neighbor (bgp listen range)``
-* :vytask:`T2913`  ``Failure to install fpm while building builder docker image``
-* :vytask:`T3083`  ``Add feature event-handler``
-* :vytask:`T3608`  ``Standardize warnings from configure scripts``
-* :vytask:`T3810`  ``webproxy squidguard rules don't work properly after rewriting to python.``
-* :vytask:`T4122`  ``interface ip address config missing after upgrade from 1.2.8 to 1.3.0 (when redirect is configured?)``
-* :vytask:`T4262`  ``install image doesn't respect chosen root partition size``
-* :vytask:`T4381`  ``OpenVPN: Add "Tunnel IP" column in "show openvpn server" operational command``
-* :vytask:`T4511`  ``IPv6 DNS lookup``
-* :vytask:`T4625`  ``Update ocserv to current revision (1.1.6)``
-* :vytask:`T4652`  ``Upgrade PowerDNS recursor to 4.7 series``
-* :vytask:`T4798`  ``Migrate the file-exists validator away from Python``
-* :vytask:`T4832`  ``dhcp: Add IPv6-only dhcp option support (RFC 8925)``
-* :vytask:`T4875`  ``Replace Python validator 'interface-name' to avoid Python startup cost``
-* :vytask:`T4900`  ``Cache intermediary results of get_config_diff in Config instance``
-* :vytask:`T4906`  ``ipsec connections shows only one connection as up``
-* :vytask:`T4925`  ``Need to add the possibility to configure Pseudo-Random Functions (PRF) in IKEv2``
-* :vytask:`T4999`  ``vyos.util backport dict_search_recursive``
-* :vytask:`T5007`  ``Interface multicast setting is invalid``
-* :vytask:`T5008`  ``MACsec CKN of 32 chars is not allowed in CLI, but works fine``
-* :vytask:`T5111`  ``pppd-dns.service startup failed``
-* :vytask:`T5243`  ``Default route is inactive if an interface has multiple ip addresses of the same subnet in 1.3.2 Equuleus``
-
-1.3.2 (7th November 2022)
-=========================
-
-
-
-
-**New features and improvements**
-
-
-* :vytask:`T1375`  ``Add clear  dhcp server  lease function``
-* :vytask:`T2580`  ``Support for ip pools for ippoe``
-* :vytask:`T2683`  ``no dual stack in system static-host-mapping host-name``
-* :vytask:`T2763`  ``New SNMP resource request - SNMP over TCP``
-* :vytask:`T3318`  ``Update Linux Kernel to v5.4.208 / 5.10.142``
-* :vytask:`T3785`  ``Add unicode support to configtree backend``
-* :vytask:`T4260`  ``Extend vyos.configdict.node_changed() to support recursiveness``
-* :vytask:`T4315`  ``Telegraf - Output to prometheus``
-* :vytask:`T4336`  ``isis: add support for MD5 authentication password on a circuit``
-* :vytask:`T4346`  ``Deprecate "system ipv6 disable" option to disable address family within OS kernel``
-* :vytask:`T4373`  ``PPPoE-server add multiplier option for shaper``
-* :vytask:`T4395`  ``Extend show vpn debug``
-* :vytask:`T4421`  ``Add support for floating point numbers in the numeric validator``
-* :vytask:`T4442`  ``HTTP API add action "reset"``
-* :vytask:`T4456`  ``NTP client in VRF tries to bind to interfaces outside VRF, logs many messages``
-* :vytask:`T4489`  ``MPLS sysctl not persistent for tunnel interfaces``
-* :vytask:`T4507`  ``IPoE-server add multiplier option for shaper``
-* :vytask:`T4509`  ``Feature Request: DNS64``
-* :vytask:`T4515`  ``Reduce telegraf binary size``
-* :vytask:`T4522`  ``bond: add ability to specify mii monitor interval via CLI``
-* :vytask:`T4584`  ``hostap: create custom package build``
-* :vytask:`T4614`  ``OpenConnect split-dns directive``
-* :vytask:`T4647`  ``Add Google Virtual NIC (gVNIC) support``
-
-**Bug fixes**
-
-
-* :vytask:`T2194`  ``"show firewall" garbled output``
-* :vytask:`T2654`  ``Multiple names unable to be assigned to the same static mapping``
-* :vytask:`T3507`  ``Bond with mode LACP show u/u in show interfaces even if peer is not configured``
-* :vytask:`T3714`  ``Some sysctl custom parameters disappear after reboot``
-* :vytask:`T4206`  ``Policy Based Routing with DHCP Interface Issue``
-* :vytask:`T4230`  ``OpenVPN server configuration deleted after reboot when using a VRRP virtual-address``
-* :vytask:`T4294`  ``Adding a new openvpn-option does not restart the OpenVPN process``
-* :vytask:`T4313`  ``"generate public-key-command" throws unhandled exceptions when it cannot retrieve the key``
-* :vytask:`T4319`  ``The command "set system ipv6 disable" doesn't work as expected.``
-* :vytask:`T4324`  ``wwan: check alive script should only be run via cron if a wwan interface is configured at all``
-* :vytask:`T4330`  ``MTU settings cannot be applied when IPv6 is disabled``
-* :vytask:`T4331`  ``IPv6 link local addresses are not configured when an interface is in a VRF``
-* :vytask:`T4337`  ``isis: IETF SPF delay algorithm can not be configured - results in vyos.frr.CommitError``
-* :vytask:`T4338`  ``wwan: changing interface description should not trigger reconnect``
-* :vytask:`T4339`  ``wwan: tab-completion results in "No such file or directory" if there is no WWAN interface``
-* :vytask:`T4341`  ``login: disable user-account prior to deletion and wait until deletion is complete``
-* :vytask:`T4350`  ``DMVPN opennhrp spokes dont work behind NAT``
-* :vytask:`T4354`  ``Slave interfaces fall out from bonding during configuration change``
-* :vytask:`T4361`  ```vyos.config.exists()` does not work for nodes with multiple values``
-* :vytask:`T4363`  ``salt-minion: default mine_interval option is not set``
-* :vytask:`T4366`  ``geneve: interface is removed on changes to e.g. description``
-* :vytask:`T4369`  ``OpenVPN: daemon not restarted on changes to "openvpn-option" CLI node``
-* :vytask:`T4388`  ``dhcp-server: missing constraint on tftp-server-name option``
-* :vytask:`T4405`  ``DHCP client sometimes ignores `no-default-route` option of an interface``
-* :vytask:`T4441`  ``wwan: connection not possible after a change added after 1.3.1-S1 release``
-* :vytask:`T4447`  ``DHCPv6 prefix delegation `sla-id` limited to 128``
-* :vytask:`T4468`  ``web-proxy source group cannot start with a number bug``
-* :vytask:`T4510`  ``set system static-host-mapping doesn't allow IPv4 and IPv6 for same name.``
-* :vytask:`T4513`  ``Webproxy monitor commands do not work``
-* :vytask:`T4521`  ``bond: ARP monitor interval is not configured despite set via CLI``
-* :vytask:`T4525`  ``Delete interface from VRF and add it to bonding error``
-* :vytask:`T4527`  ``Prevent to create VRF name default``
-* :vytask:`T4532`  ``Flow-accounting IPv6 server/receiver bug``
-* :vytask:`T4534`  ``bond: bridge: error out if member interface is assigned to a VRF instance``
-* :vytask:`T4537`  ``MACsec not working with cipher gcm-aes-256``
-* :vytask:`T4538`  ``Macsec does not work correctly when the interface status changes.``
-* :vytask:`T4565`  ``vlan aware bridge not working with - Kernel: T3318: update Linux Kernel to v5.4.205 #249``
-* :vytask:`T4572`  ``Add an option to force interface MTU to the value received from DHCP``
-* :vytask:`T4579`  ``bridge: can not delete member interface CLI option when VLAN is enabled``
-* :vytask:`T4592`  ``macsec: can not create two interfaces using the same source-interface``
-* :vytask:`T4616`  ``openconnect: KeyError: 'local_users'``
-* :vytask:`T4618`  ``Traffic policy not set on virtual interfaces``
-* :vytask:`T4632`  ``VLAN-aware bridge not working``
-* :vytask:`T4653`  ``Interface offload options are not applied correctly``
-* :vytask:`T4666`  ``EAP-TLS no longer allows TLSv1.0 after T4537, T4584``
-
-**Other resolved issues**
-
-
-* :vytask:`T4415`  ``Include license/copyright files in the image but remove user documentation from /usr/share/doc to reduce its size``
-* :vytask:`T4430`  ``Show firewall output with visual shift default rule``
-* :vytask:`T4629`  ``Raised ConfigErrors contain dict instead of only the dict key``
-* :vytask:`T4654`  ``RPKI cache incorrect description``
-
-1.3.1 (21th March 2022)
-=======================
-
-**Security**
-
-
-* :vytask:`T4204`  ``Update Accel-PPP to a newer revision``
-* :vytask:`T4310`  ``CVE-2022-0778: infinite loop in OpenSSL certificate parsing``
-* :vytask:`T4311`  ``CVE-2021-4034: local privilege escalation in PolKit``
-
-
-**Configuration syntax changes (automatically migrated)**
-
-
-* :vytask:`T1972`  ``Allow setting interface name for virtual_ipaddress in VRRP VRID``
-* :vytask:`T4273`  ``ssh: Upgrade from 1.2.X to 1.3.0 breaks config``
-
-**New features and improvements**
-
-
-* :vytask:`T1972`  ``Allow setting interface name for virtual_ipaddress in VRRP VRID``
-* :vytask:`T2400`  ``OpenVPN: dont restart server if no need``
-* :vytask:`T2764`  ``Increase maximum number of NAT rules``
-* :vytask:`T3164`  ``console-server ssh does not work with RADIUS PAM auth``
-* :vytask:`T3299`  ``Allow the web proxy service to listen on all IP addresses``
-* :vytask:`T3854`  ``Missing op-mode commands for conntrack-sync``
-* :vytask:`T3872`  ``Add configurable telegraf monitoring service``
-* :vytask:`T4055`  ``Add VRF support for HTTP(S) API service``
-* :vytask:`T4100`  ``Firewall increase maximum number of rules``
-* :vytask:`T4120`  ``[VXLAN] add ability to set multiple unicast-remotes``
-* :vytask:`T4128`  ``keepalived: Upgrade package to add VRF support``
-* :vytask:`T4261`  ``MACsec: add DHCP client support``
-
-**Bug fixes**
-
-
-* :vytask:`T2922`  ``The `vpn ipsec logging log-modes` miss the IPSec daemons state check``
-* :vytask:`T3380`  ``"show vpn ike sa" does not display IPv6 peers``
-* :vytask:`T3686`  ``Bridging OpenVPN tap with no local-address breaks``
-* :vytask:`T3914`  ``VRRP rfc3768-compatibility doesn't work with unicast peers``
-* :vytask:`T3924`  ``VRRP stops working with VRF``
-* :vytask:`T4002`  ``firewall group network-group long names restriction incorrect behavior``
-* :vytask:`T4081`  ``VRRP health-check script stops working when setting up a sync group``
-* :vytask:`T4087`  ``IPsec IKE-group proposals limit of 10 pieces``
-* :vytask:`T4092`  ``IKEv2 mobike commit failed with DMVPN nhrp``
-* :vytask:`T4093`  ``SNMPv3 snmpd.conf generation bug``
-* :vytask:`T4101`  ``commit-archive: Use of uninitialized value $source_address in concatenation``
-* :vytask:`T4104`  ``RAID1: "add raid md0 member sda1" does not restore boot sector``
-* :vytask:`T4110`  ``[IPV6-SSH/DNS}  enable IPv6 link local adresses as listen-address %eth0``
-* :vytask:`T4141`  ``Set high-availability vrrp sync-group without members error``
-* :vytask:`T4142`  ``Input ifbX interfaces not displayed in op-mode``
-* :vytask:`T4152`  ``NHRP shortcut-target holding-time does not work``
-* :vytask:`T4154`  ``Error add second gre tunnel with the same source interface``
-* :vytask:`T4165`  ``Custom conntrack rules cannot be deleted``
-* :vytask:`T4168`  ``IPsec VPN is impossible to restart when DMVPN is configured``
-* :vytask:`T4183`  ``IPv6 link-local address not accepted as wireguard peer``
-* :vytask:`T4184`  ``NTP allow-clients address doesn't work it allows to use ntp server for all addresses``
-* :vytask:`T4191`  ``Lost access to host after VRF re-creating``
-* :vytask:`T4196`  ``DHCP server client-prefix-length parameter results in non-functional leases``
-* :vytask:`T4203`  ``Reconfigure DHCP client interface causes brief outages``
-* :vytask:`T4226`  ``VRRP transition-script does not work for groups name which contains -(minus) sign``
-* :vytask:`T4228`  ``bond: OS error thrown when two bonds use the same member``
-* :vytask:`T4233`  ``ssh: sync regex for allow/deny usernames to "system login"``
-* :vytask:`T4234`  ``Show firewall partly broken in 1.3.x``
-* :vytask:`T4237`  ``Conntrack-sync error - error adding listen-address command``
-* :vytask:`T4240`  ``Cannot add wlan0 to bridge via configure``
-* :vytask:`T4241`  ``ocserv openconnect looks broken in recent bulds of 1.3 Equuleus``
-* :vytask:`T4242`  ``ethernet speed/duplex can never be switched back to auto/auto``
-* :vytask:`T4258`  ``[DHCP-SERVER]  error parameter on Failover``
-* :vytask:`T4259`  ``The conntrackd daemon can be started wrongly``
-* :vytask:`T4263`  ``vyos.util.leaf_node_changed() dos not honor valueLess nodes``
-* :vytask:`T4264`  ``vxlan: interface is destroyed and rebuild on description change``
-* :vytask:`T4267`  ``Error - Missing required "ip key" parameter``
-* :vytask:`T4273`  ``ssh: Upgrade from 1.2.X to 1.3.0 breaks config``
-* :vytask:`T4297`  ``Interface configuration saving fails for ice/iavf based interfaces because they can't change speed/duplex settings``
-* :vytask:`T4377`  ``generate tech-support archive includes previous archives``
-
-**Other resolved issues**
-
-
-* :vytask:`T4227`  ``Typo in help completion of hello-time option of bridge interface``
-* :vytask:`T4255`  ``Unexpected print of dict bridge on delete``
-* :vytask:`T4476`  ``Next steps after installation is not communicated properly to new users``
-
-1.3.0 (21th December 2021)
-==========================
-
-
-**Breaking changes**
-
-
-* :vytask:`T3350`  ``OpenVPN config file generation broken``
-* :vytask:`T3866`  ``Configs with DNS forwarding listening on OpenVPN interfaces or interfaces without a fixed address cannot be migrated to the new syntax``
-
-**Configuration syntax changes (automatically migrated)**
-
-
-* :vytask:`T2162`  ``migration script for router-advert sets link-mtu 0 on bridge interfaces``
-* :vytask:`T2691`  ``Upgrade from 1.2.5 to 1.3-rolling-202007040117 results in broken config due to case mismatch``
-* :vytask:`T3293`  ``RPKI migration script errors out after CLI rewrite``
-
-**New features and improvements**
-
-
-* :vytask:`T3704`  ``Add ability to interact with Areca RAID adapers``
-* :vytask:`T3745`  ``op-mode IPSec show vpn ipse sa sorting``
-* :vytask:`T3912`  ``Use a more informative default post-login banner``
-* :vytask:`T3945`  ``Add route-map for bgp aggregate-address``
-* :vytask:`T3971`  ``Ability to build ISO images for XCP-NG hypervisor``
-* :vytask:`T4012`  ``Add VRF support for TFTP``
-* :vytask:`T4013`  ``Add pkg cloudwatch for AWS images``
-* :vytask:`T4046`  ``Sflow - Add Source address parameter``
-* :vytask:`T4049`  ``support command-style output with compare command``
-* :vytask:`T4082`  ``Add op mode command to restart ldpd``
-* :vytask:`T4084`  ``Dehardcode the default login banner``
-
-**Bug fixes**
-
-
-* :vytask:`T1624`  ``Failed to set up config session``
-* :vytask:`T1710`  ``[equuleus] buster: add patch to fix live-build missing key error``
-* :vytask:`T1847`  ``set_level incorrectly handles path given as empty string``
-* :vytask:`T1876`  ``IPSec VTI tunnels are deleted after rekey and dangling around as A/D``
-* :vytask:`T2009`  ``Ethernet Interface always stays down``
-* :vytask:`T2022`  ``When RADIUS config is active, local logins won't work``
-* :vytask:`T2082`  ``WireGuard broken after merging T2057``
-* :vytask:`T2158`  ``Commit fails if ethernet interface doesn't support flow control (pause)``
-* :vytask:`T2162`  ``migration script for router-advert sets link-mtu 0 on bridge interfaces``
-* :vytask:`T2164`  ``Package libstrongswan-standard-plugins missing from image``
-* :vytask:`T2167`  ``vyos.ifconfig.get_mac() broken``
-* :vytask:`T2176`  ``'WiFiIf' object has no attribute 'set_state'``
-* :vytask:`T2177`  ``Commit fails on adding disabled interface to bridge``
-* :vytask:`T2241`  ``Changing settings on an interface causes it to fall out of bridge``
-* :vytask:`T2273`  ``OpenVPN no longer starts in latest rolling, migrate to systemd``
-* :vytask:`T2283`  ``openvpn not starting: ccd path in template not moved to /run/openvpn/ccd``
-* :vytask:`T2293`  ``OpenVPN: UnboundLocalError after merging server_network PullRequest``
-* :vytask:`T2318`  ``dns-forwarding migration script breaks with invalid interface name``
-* :vytask:`T2337`  ``hw-id gone missing from interfaces after upgrade to 1.3-rolling-202004191028``
-* :vytask:`T2427`  ``Interface addressing broken since fix for T2372 was merged``
-* :vytask:`T2466`  ``live-build encounters apt dependency problem when building with local packages``
-* :vytask:`T2578`  ``ipaddrcheck unaware of /31 host addresses - can no longer assign /31 mask to interface addresses``
-* :vytask:`T2600`  ``RADIUS system login configuration rendered wrongly``
-* :vytask:`T2624`  ``Serial Console: fix migration script for configured powersave and no console``
-* :vytask:`T2642`  ``sshd fails to start due to configuration error``
-* :vytask:`T2678`  ``High RAM usage on SSH logins with lots of IPv6 routes in the routing table.``
-* :vytask:`T2682`  ``VRF aware services - connection no longer possible after system reboot``
-* :vytask:`T2691`  ``Upgrade from 1.2.5 to 1.3-rolling-202007040117 results in broken config due to case mismatch``
-* :vytask:`T2746`  ``IPv6 link-local addresses not configured``
-* :vytask:`T2758`  ``router-advert: 'infinity' is not a valid integer number``
-* :vytask:`T2886`  ``RADIUS authentication broken only returns operator level``
-* :vytask:`T2894`  ``bond: lacp: member interfaces get removed once bond interface has vlans configured``
-* :vytask:`T2952`  ``configd: timeout breaks synchronization of messages, causing freeze``
-* :vytask:`T3208`  ``Does not possible to change user password``
-* :vytask:`T3350`  ``OpenVPN config file generation broken``
-* :vytask:`T3370`  ``dhcp: Invalid domain name "private"``
-* :vytask:`T3699`  ``login: verify selected "system login user" name is not already used by the base system.``
-* :vytask:`T3707`  ``Ping incorrect ip host checks``
-* :vytask:`T3822`  ``OpenVPN processes do not have permission to read key files generated with `run generate openvpn key```
-* :vytask:`T3866`  ``Configs with DNS forwarding listening on OpenVPN interfaces or interfaces without a fixed address cannot be migrated to the new syntax``
-* :vytask:`T3886`  ``DHCP server can not start``
-* :vytask:`T3887`  ``Removal of IPv6 BGP-peer with peer-group may trigger problems``
-* :vytask:`T3913`  ``VRF traffic fails after upgrade from 1.3.0-RC6 to 1.3.0-EPA1/2``
-* :vytask:`T3934`  ``Openconnect VPN broken: ocserv-worker general protection fault on client connect``
-* :vytask:`T3962`  ``Image cannot be built without open-vm-tools``
-* :vytask:`T3972`  ``Removing vif-c interface raises KeyError``
-* :vytask:`T4015`  ``Update Accel-PPP to a newer revision``
-* :vytask:`T4019`  ``Smoketests for SSTP and openconnect fails``
-* :vytask:`T4033`  ``VRRP - Error security when setting scripts``
-* :vytask:`T4035`  ``Geneve interfaces aren't displayed by operational mode commands``
-* :vytask:`T4052`  ``Validator return traceback on VRRP configuration with the script path not in config dir``
-* :vytask:`T4053`  ``VRRP impossible to set scripts out of the /config directory``
-* :vytask:`T4167`  ``DMVPN apply wrong param on the first configuration``
-* :vytask:`T4201`  ``Firewall - ICMPv6 matches not working as expected on 1.3.0``
-* :vytask:`T4268`  ``Elevated LA while using VyOS monitoring feature``
-* :vytask:`T4296`  ``Interface config injected by Cloud-Init may interfere with VyOS native``
-* :vytask:`T4344`  ``DHCP statistics not matching, conf-mode generates incorrect pool name with dash``
-* :vytask:`T4571`  ``Sflow with vrf configured does not use vrf to validate agent-address IP from vrf-configured interfaces``
-
-**Other resolved issues**
-
-
-* :vytask:`T1497`  ``"set system name-server" generates invalid/incorrect resolv.conf``
-* :vytask:`T1606`  ``Rolling release no longer boots after adding hostname daemon``
-* :vytask:`T1676`  ``[equuleus] buster: update GRUB boot parameters during upgrade``
-* :vytask:`T2129`  ``XML schema: tagNode not allowed on first level in new XML op-mode definition``
-* :vytask:`T2389`  ``BGP community-list unknown command``
-* :vytask:`T2722`  ``get_config_dict() and key_mangling=('-', '_') will alter CLI data for tagNodes``
-* :vytask:`T3182`  ``Main blocker Task for FRR 7.4/7.5 series update``
-* :vytask:`T3293`  ``RPKI migration script errors out after CLI rewrite``
-* :vytask:`T3302`  ``Make vyos-configd relay stdout from scripts to the user's console``
-* :vytask:`T3687`  ``IS-IS is missing IPv6 support``
-* :vytask:`T3689`  ``static ipv6 route doesn't deleted in some cases``
-* :vytask:`T3695`  ``OpenConnect reports commit success when ocserv fails to start due to SSL cert/key file issues``
-* :vytask:`T3697`  ``Impossible to delete IPsec completely``
-* :vytask:`T3711`  ``service router-advert interface <name> dnssl option has no effects``
-* :vytask:`T3725`  ``show configuration in json format``
-* :vytask:`T3735`  ``Configuration with multiple network addresses of firewall network-group via colud-init fails``
-* :vytask:`T4065`  ``IPSEC configuration error: connection to unix:///var/run/charon.ctl failed: No such file or directory``
-* :vytask:`T4088`  ``Fix typo in login banner``
-* :vytask:`T4115`  ``reboot in <x> not working as expected``
-* :vytask:`T4198`  ``Error shown on commit``
-
-1.3.0-epa3 (5th November 2021)
-==============================
-
-
-
-**Configuration syntax changes (automatically migrated)**
-
-
-* :vytask:`T3925`  ``Tunnel: dhcp-interface not implemented - use source-interface instead``
-
-**New features and improvements**
-
-
-* :vytask:`T3927`  ``Kernel: Enable kernel support for HW offload of the TLS protocol``
-* :vytask:`T3942`  ``Generate IPSec debug archive from op-mode``
-
-**Bug fixes**
-
-
-* :vytask:`T3610`  ``DHCP-Server creation for not primary IP address fails``
-* :vytask:`T3846`  ``dmvpn configuration not reapllied after "restart vpn"``
-* :vytask:`T3921`  ``tunnel: KeyError when using dhcp-interface``
-* :vytask:`T3922`  ``NHRP: delete fails``
-* :vytask:`T3925`  ``Tunnel: dhcp-interface not implemented - use source-interface instead``
-* :vytask:`T3926`  ``strip-private does not sanitize "cisco-authentication" from NHRP configuration``
-* :vytask:`T3941`  ``"show vpn ipsec sa" shows established time of parent SA not child SA's``
-* :vytask:`T3943`  ``"netflow source-ip" prevents image upgrades if IP address does not exist locally``
-* :vytask:`T3944`  ``VRRP fails over when adding new group to master``
-* :vytask:`T3954`  ``FTDI cable makes VyOS sagitta latest hang, /dev/serial unpopulated, config system error``
-* :vytask:`T3956`  ``GRE tunnel - unable to move from source-interface to source-address, commit error``
-* :vytask:`T4004`  ``IPsec ike-group parameters are not saved correctly (after reboot)``
-* :vytask:`T4034`  ``"make xcp-ng-iso" still includes vyos-xe-guest-utilities``
-
-**Other resolved issues**
-
-
-* :vytask:`T3188`  ``Tunnel local-ip to dhcp-interface Change Fails to Update``
-* :vytask:`T3341`  ``Wrong behavior of the "reset vpn ipsec-peer XXX tunnel XXX" command``
-* :vytask:`T3626`  ``Configuring and disabling DHCP Server``
-* :vytask:`T3918`  ``DHCPv6 prefix delegation incorrect verify error``
-* :vytask:`T3920`  ``dhclient exit hook script 01-vyos-cleanup causes too many arguments error``
-* :vytask:`T3990`  ``WATCHFRR: crashlog and per-thread log buffering unavailable (due to files left behind in /var/tmp/frr/ after reboot)``
-* :vytask:`T4005`  ``Feature Request: IPsec IKEv1 + IKEv2 for one peer``
-
-1.3.0-epa2 (18th October 2021)
-==============================
-
-
-
-
-**New features and improvements**
-
-
-* :vytask:`T3277`  ``DNS Forwarding - reverse zones``
-* :vytask:`T3885`  ``dhcpv6-pd: randomly generated DUID is not persisted``
-* :vytask:`T3890`  ``dhcp(v6): provide op-mode commands to retrieve both server and client logfiles``
-* :vytask:`T3899`  ``Add support for hd44780 LCD displays``
-
-**Bug fixes**
-
-
-* :vytask:`T3750`  ``pdns-recursor 4.4 issue with dont-query and private DNS servers``
-* :vytask:`T3874`  ``D-Link Ethernet Interface not working.``
-* :vytask:`T3877`  ``VRRP always enabled rfc3768-compatibility even when not specified``
-* :vytask:`T3878`  ``get_config_dict() no_tag_node_value_mangle has no effect``
-* :vytask:`T3879`  ``GPG key verification fails when upgrading from a 1.3 beta version``
-* :vytask:`T3883`  ``VRF - Delette vrf config on interface``
-* :vytask:`T3893`  ``MGRE Tunnel commit crash If sit tunnel available``
-* :vytask:`T3894`  ``Tunnel Commit Failed if system does not have `eth0```
-* :vytask:`T3904`  ``NTP pool associations silently fail``
-
-**Other resolved issues**
-
-
-* :vytask:`T3422`  ``Dynamic DNS doesn't allow zone field with cloudflare protocol``
-* :vytask:`T3425`  ``Scripts from the /config/scripts/ folder do not run on live system``
-* :vytask:`T3880`  ``EFI boot shows error on display``
-* :vytask:`T3882`  ``Upgrade PowerDNs recursor to 4.5 series``
-* :vytask:`T3888`  ``Incorrect warning when poweroff command executed from configure mode.``
-* :vytask:`T3889`  ``Migrate to journalctl when reading daemon logs``
-
-1.3.0-epa1 (30th September 2021)
-================================
-
-
-
-**Configuration syntax changes (automatically migrated)**
-
-
-* :vytask:`T3672`  ``DHCP-FO with multiple subnets results in invalid/non-functioning dhcpd.conf configuration file output``
-* :vytask:`T3779`  ``Backport all 1.4 IS-IS features and configuration to 1.3 except VRF``
-* :vytask:`T3804`  ``cli: Migrate and merge "system name-servers-dhcp" into "system name-server"``
-* :vytask:`T3842`  ``Backport DHCP server improvements from VyOS 1.4 sagitta to 1.3 equuleus``
-
-**New features and improvements**
-
-
-* :vytask:`T1099`  ``Openvpn: use config files instead of one long command.``
-* :vytask:`T1154`  ``use of local cache to build iso``
-* :vytask:`T1176`  ``FRR - BGP replicating routes``
-* :vytask:`T1350`  ``VRRP transition script will be executed once only``
-* :vytask:`T3716`  ``Linux kernel parameters ignore_routes_with_link_down- ignore disconnected routing connections``
-* :vytask:`T3779`  ``Backport all 1.4 IS-IS features and configuration to 1.3 except VRF``
-* :vytask:`T3789`  ``Add custom validator for base64 encoded CLI data``
-* :vytask:`T3803`  ``Add source-address option to the ping CLI``
-* :vytask:`T3804`  ``cli: Migrate and merge "system name-servers-dhcp" into "system name-server"``
-* :vytask:`T3840`  ``dns forwarding: Cache size should allow values > 10k``
-* :vytask:`T3841`  ``dhcp-server: add ping-check option to CLI``
-* :vytask:`T3842`  ``Backport DHCP server improvements from VyOS 1.4 sagitta to 1.3 equuleus``
-* :vytask:`T3857`  ``reboot: send wall message to all users for information``
-* :vytask:`T3859`  ``Add "log-adjacency-changes" to ospfv3 process``
-
-**Bug fixes**
-
-
-* :vytask:`T945`  ``Unable to change configuration after changing it from script (vbash + script-template)``
-* :vytask:`T1148`  ``epa2 BGP peers initiate before config is fully loaded, routes leak.``
-* :vytask:`T1249`  ``multiple PBR rules can set to a single interface``
-* :vytask:`T1894`  ``FRR config not loaded after daemons segfault or restart``
-* :vytask:`T2019`  ``LLDP wrong config generation for interface 'all'``
-* :vytask:`T2127`  ``restart dhcp server reports a failure``
-* :vytask:`T2161`  ``snmpd cannot start if ipv6 disabled``
-* :vytask:`T2328`  ``dhcpv6 server not starting (disable check reversed?)``
-* :vytask:`T2430`  ``cannot delete specific route static next-hop``
-* :vytask:`T2432`  ``dhcpd: Can't create new lease file: Permission denied``
-* :vytask:`T2434`  ``Duplicate Address Detection Breaks Interfaces``
-* :vytask:`T2525`  ``OSPFv3 missing route map, not establishing``
-* :vytask:`T2623`  ``Creating sit tunnel fails with “Can not set “local” for tunnel sit tun1 at tunnel creation”``
-* :vytask:`T2738`  ``Modifying configuration in the "interfaces" section from VRRP transition scripts causes configuration lockup and high CPU utilization``
-* :vytask:`T2759`  ``validate-value prints error messages from validators that fail even if overall validation succeeds``
-* :vytask:`T2800`  ``Pseudo-Ethernet: source-interface must not be member of a bridge``
-* :vytask:`T2895`  ``VPN IPsec "leftsubnet" declared 2 times``
-* :vytask:`T2920`  ``Commit crash when adding the second mGRE tunnel with the same key``
-* :vytask:`T2931`  ``Unicode decode error causes vyos.configd service to restart``
-* :vytask:`T2941`  ``Using a non-ASCII character in the description field causes UnicodeDecodeError in configsource.py``
-* :vytask:`T3076`  ``Router reboot adds unwanted 'conntrack-sync mcast-group '225.0.0.50'' line to configuration``
-* :vytask:`T3196`  ``No NAT translations showing up``
-* :vytask:`T3219`  ``Typo in openvpn server client config for IPv6 iroute``
-* :vytask:`T3601`  ``Error in ssh keys for vmware cloud-init if ssh keys is left empty.``
-* :vytask:`T3637`  ``vrf: bind-to-all didn't work properly``
-* :vytask:`T3672`  ``DHCP-FO with multiple subnets results in invalid/non-functioning dhcpd.conf configuration file output``
-* :vytask:`T3708`  ``isisd and gre-bridge commit error``
-* :vytask:`T3731`  ``verify_accel_ppp_base_service return wrong config error for SSP``
-* :vytask:`T3738`  ``openvpn fails if server and authentication are configured``
-* :vytask:`T3740`  ``HTTPs API breaks when the address is IPv6``
-* :vytask:`T3756`  ``VyOS generates invalid QR code for wireguard clients``
-* :vytask:`T3772`  ``VRRP virtual interfaces are not shown in show interfaces``
-* :vytask:`T3773`  ``Delete the "show system integrity" command (to prepare for a re-implementation)``
-* :vytask:`T3777`  ``adding IPv6 EUI64 address fails commit in 1.3.0-rc6``
-* :vytask:`T3781`  ``Revert the NAT implementation in 1.3 back to iptables``
-* :vytask:`T3782`  ``Ingress Shaping with IFB No Longer Functional with 1.3``
-* :vytask:`T3783`  ``"set protocols isis spf-delay-ietf" is not working``
-* :vytask:`T3786`  ``GRE tunnel source address 0.0.0.0 error``
-* :vytask:`T3788`  ``Keys are not allowed with ipip and sit tunnels``
-* :vytask:`T3790`  ``Does not possible to configure PPTP static ip-address to users``
-* :vytask:`T3792`  ``login: A hypen present in a username from "system login user" is replaced by an underscore``
-* :vytask:`T3797`  ``show interface errors with vrrp configuration``
-* :vytask:`T3802`  ``Commit fails if ethernet interface doesn't support flow control``
-* :vytask:`T3805`  ``OpenVPN insufficient privileges for rtnetlink when closing TUN/TAP interface``
-* :vytask:`T3806`  ``Don't set link local ipv6 address if MTU less then 1280``
-* :vytask:`T3807`  ``Op Command "show interfaces wireguard"  does not show the output``
-* :vytask:`T3808`  ``ipsec is mistakenly restarted after delete``
-* :vytask:`T3816`  ``Error after entering outbound-interface command in NAT``
-* :vytask:`T3850`  ``Dots are no longer allowed in SSH public key names``
-* :vytask:`T3860`  ``Error on pppoe, tunnel and wireguard interfaces for IPv6 EUI64 addresses``
-* :vytask:`T3867`  ``vxlan: multicast group address is not validated``
-
-**Other resolved issues**
-
-
-* :vytask:`T1202`  ``Add `hvinfo` to the packages directory``
-* :vytask:`T1214`  ``Add `ipaddrcheck` to the packages directory``
-* :vytask:`T1236`  ``Update Linux Kernel``
-* :vytask:`T2027`  ``get_config_dict is failing when the configuration section is empty/missing``
-* :vytask:`T2555`  ``XML op-mode generation scripts silently discard XML nodes``
-* :vytask:`T2727`  ``Add a dotted decimal value validator``
-* :vytask:`T2927`  ``isc-dhcpd release and expiry events never execute``
-* :vytask:`T3217`  ``Save FRR configuration on each commit``
-* :vytask:`T3234`  ``multi_to_list fails in certain cases, with root cause an element redundancy in XML interface-definitions``
-* :vytask:`T3254`  ``Dynamic DNS status shows incorrect last update time``
-* :vytask:`T3291`  ``Fault on setting offload RPS with single-core CPU``
-* :vytask:`T3362`  ``1.3 - RC1 ifb redirect failing to commit``
-* :vytask:`T3381`  ``Change GRE tunnel failed``
-* :vytask:`T3396`  ``syslog can't be configured with an ipv6 literal destination in 1.2.x``
-* :vytask:`T3431`  ``Show version all bug``
-* :vytask:`T3537`  ``Unable to override the default OSPFv3 link cost for wireguard interface``
-* :vytask:`T3634`  ``Add op command option for ping for do not fragment bit to be set``
-* :vytask:`T3683`  ``VXLAN not accept ipv6 and source-interface options and mtu bug``
-* :vytask:`T3730`  ``op-mode conntrack-sync miss some functions``
-* :vytask:`T3732`  ``override-default helper should support adding defaultValues to default less nodes``
-* :vytask:`T3768`  ``Remove early syntaxVersion implementation``
-* :vytask:`T3776`  ``Rename FRR daemon restart op-mode commands``
-* :vytask:`T3814`  ``wireguard: commit error showing incorrect peer name from the configured name``
-* :vytask:`T3819`  ``Upgrade Salt Stack 3002.3 -> 3003 release train``
-* :vytask:`T3820`  ``PowerDNS recursor - update from 4.3 -> 4.4 to sync with current``
diff --git a/docs/changelog/1.4.rst b/docs/changelog/1.4.rst
deleted file mode 100644
index 260020cc..00000000
--- a/docs/changelog/1.4.rst
+++ /dev/null
@@ -1,433 +0,0 @@
-
-###########
-1.4 Sagitta
-###########
-
-..
-   Please don't add anything by hand.
-   This file is managed by the script:
-   _ext/releasenotes.py
-
-
-1.4.1 (future release)
-======================
-
-
-
-**Configuration syntax changes (automatically migrated)**
-
-
-* :vytask:`T6505`  ``Support VXLAN VLAN-VNI range mapping in CLI``
-
-**New features and improvements**
-
-
-* :vytask:`T5878`  ``Make the list of SSH server ciphers configurable``
-* :vytask:`T5949`  ``Disable USB autosuspend``
-* :vytask:`T6320`  ``WiFi: Enable support for 6GHz AccesPoints``
-* :vytask:`T6423`  ``Require command definition nodes that have an owner to also have a priority``
-* :vytask:`T6424`  ``ipsec: op-mode command to generate client profiles should honor common name of the CA node that signed the server certificate``
-* :vytask:`T6454`  ``Explicitly set the default reverse proxy mode to HTTP``
-* :vytask:`T6462`  ``wireless: add op-mode command for hostapd and wpa_supplicant logs``
-* :vytask:`T6473`  ``bgp: missing completion helper for peer-groups inside a VRF``
-* :vytask:`T6477`  ``Adding Loki plugin to Telegraf``
-* :vytask:`T6505`  ``Support VXLAN VLAN-VNI range mapping in CLI``
-* :vytask:`T6538`  ``Allow adding a geneve interface to the vrf.``
-* :vytask:`T6539`  ``Add logging options to load-balancer reverse-proxy``
-* :vytask:`T6566`  ``op-mode: "monitor bandwidth" add support for listing all interfaces concurrently``
-* :vytask:`T6576`  ``op-mode: ntp: add support for NTP service restart via CLI``
-* :vytask:`T6614`  ``Initial support for smoketesting op-mode commands``
-
-**Bug fixes**
-
-
-* :vytask:`T2145`  ``openvpn: server default topology net30 is incompatible with static client IPs for Windows clients``
-* :vytask:`T4287`  ``wireless: cannot set regulatory domain``
-* :vytask:`T5514`  ``Improve error handling when/if config.boot is deleted or missing``
-* :vytask:`T5552`  ``'set system option performance throughput' enables IPv6 forwarding even if it's explicitly disabled with 'set system ipv6 disable-forwarding'``
-* :vytask:`T5725`  ``protocol IS-IS configuration is empty if a tunnel does not have remote address``
-* :vytask:`T5947`  ``[1.3.2 -> 1.4.0-RC1 Migration] Static ipv6 routes dropped``
-* :vytask:`T6148`  ``Reset vpn ipsec command breaks tunnel and does not reset SAs that are down``
-* :vytask:`T6332`  ``IPv6-only ISIS (or, in general, dual topology) is not working with other devices running frr``
-* :vytask:`T6401`  ``Attempts to delete vlan-to-vni option causes an unhandled exception``
-* :vytask:`T6429`  ``bug - isis metric-style not applied configuration``
-* :vytask:`T6431`  ``monitor traceroute broken VRF support``
-* :vytask:`T6453`  ``GRUB variables with `=` in a value are parsed improperly``
-* :vytask:`T6460`  ``Showing DHCPv6 leases can fail due to DUID parsing issues``
-* :vytask:`T6463`  ``reverse-proxy: service not reloaded when updating SSL certificate via PKI``
-* :vytask:`T6464`  ``sstpc: interface not restarted when updating SSL certificate via PKI``
-* :vytask:`T6480`  ``PermissionError: [Errno 13] Permission denied: '/config/auth/letsencrypt/live/..../cert.pem``
-* :vytask:`T6484`  ``Smoketest fails: fastnetmon killed due to OOM``
-* :vytask:`T6503`  ``Command 'restart ssh' not working``
-* :vytask:`T6519`  ``interfaces: 20-to-21 -> migration fails if new system has less ethernet interfaces``
-* :vytask:`T6523`  ``Error: "nft table ip vyos_filter not found" when commiting prometheus-client``
-* :vytask:`T6559`  ``vyos-configd should return commit error on config dependency error``
-* :vytask:`T6584`  ``Revert addition of Linux Kernel MT7921 driver``
-* :vytask:`T6593`  ``Release DHCP interface does not work``
-* :vytask:`T6600`  ``ospf: smoketest "router ospf' not found in" for ldp sync``
-* :vytask:`T6602`  ``interfaces: verify supplied VRF name on all interface types``
-* :vytask:`T6603`  ``vrf: nftables conntrack ct_iface_map contains multiple identical entries``
-* :vytask:`T6605`  ```ConfigError()` behavior is wrong with running `vyos-configd```
-* :vytask:`T6610`  ``Missing minisign pub key from image``
-
-**Other resolved issues**
-
-
-* :vytask:`T4026`  ``PKI:  generate pki certificate sign <ca-name> is not working``
-* :vytask:`T5570`  ``PAM config RADIUS  ignore for default and success``
-* :vytask:`T6290`  ``SNMPD show logs systemstats_linux: unexpected header length``
-* :vytask:`T6379`  ``"generate openvpn" uses "comp-lzo no", which leads to problems on Android-Clients``
-* :vytask:`T6446`  ``Display the support URL from image build data in LTS builds``
-* :vytask:`T6486`  ``Generate openvpn client-config ignores configured protocol type``
-* :vytask:`T6500`  ``openconnect: add support for new multi ca-certificate CLI node``
-* :vytask:`T6524`  ``Rewrite "release dhcp interface <interface>" to Python to drop remaining Perl dependencies``
-* :vytask:`T6592`  ``Changing VRF on interface fails``
-* :vytask:`T6594`  ``IPoE-server extended-scripts do not work``
-* :vytask:`T6597`  ``wireless: hostapd occationly gets deactivated via systemd and causes loss in connectivity``
-* :vytask:`T6598`  ``Unexpected podman version 4.3.1``
-
-1.4.0 (4th June 2024)
-=====================
-
-
-
-
-**New features and improvements**
-
-
-* :vytask:`T3202`  ``Enable wireguard debug messages by default``
-* :vytask:`T4022`  ``Add package nat-rtsp-dkms``
-* :vytask:`T4393`  ``sstp: add support for configuring host-name (SNI)``
-* :vytask:`T5386`  ``Execute VRRP transition script when `set high-availability disable` is commited``
-* :vytask:`T5752`  ``Check compatibility of new image tools with XCP-NG images``
-* :vytask:`T6293`  ``add Mediatek MT7921 to defconfig``
-* :vytask:`T6339`  ``Display the flavor name and build comment in "show version"``
-* :vytask:`T6395`  ``Enable VFIO No-IOMMU support in kernel config``
-
-**Bug fixes**
-
-
-* :vytask:`T4576`  ``vpn l2tp logging level configuration``
-* :vytask:`T5527`  ``Adjust for change in coreutils behavior on overlayfs``
-* :vytask:`T5939`  ``[1.3.5 -> 1.4.0-RC1 Migration]  as-path-list Entries Get Messed Up``
-* :vytask:`T5940`  ``[1.3.5 -> 1.4.0-RC1 Migration] commit-archive Fails to Migrate``
-* :vytask:`T6038`  ``Losing default route after first reboot (cloud-init & DHCP)``
-* :vytask:`T6094`  ``Destination Nat not Making Firewall Rules``
-* :vytask:`T6225`  ``Unhandled exception when configuring random-detect QoS policy``
-* :vytask:`T6348`  ``SNAT op-mode fails with flowtable offload entries``
-* :vytask:`T6356`  ``Correct the syntax of config.boot.default [..., 'ntp', 'server'] from leaf node with value to tag node``
-* :vytask:`T6365`  ``Negating interface names in NAT configuration causes invalid warnings``
-* :vytask:`T6377`  ``PermissionError on /config/auth/letsencrypt/live/ when running show pki``
-* :vytask:`T6400`  ``pki: unable to generate fingerprint for ACME issued certificates``
-* :vytask:`T6402`  ``Invalid variables referenced in reverse proxy validation``
-* :vytask:`T6404`  ``Include constraintGroup element in reference tree``
-* :vytask:`T6407`  ``Generate ipsec profile error``
-* :vytask:`T6419`  ``reverse-proxy: full CA chain is not build when verifying backend server``
-* :vytask:`T6421`  ``host-name has no explicit priority to be set on system boot``
-
-**Other resolved issues**
-
-
-* :vytask:`T1981`  ``Allow route-map 'set src' to reference both IPv4 and IPv6``
-* :vytask:`T3493`  ``DHCPv6 does not have prefix range validation``
-* :vytask:`T4519`  ``DHCPv6: "set show dhcpv6 server leases" should show DUID instead of IAID_DUID``
-* :vytask:`T4909`  ``Rewrite the NTP op mode in the new format``
-* :vytask:`T5351`  ``VyOS deployed with cloud-init improperly saves config.boot``
-* :vytask:`T6022`  ``set system image default-boot``
-* :vytask:`T6048`  ``Exception in event handler script``
-* :vytask:`T6328`  ``Add a warning message about deprecation of web proxy URL filtering``
-* :vytask:`T6333`  ``non-free-firmware to trixie``
-* :vytask:`T6345`  ``Source NAT Port Mapping setting of Fully-Random is superfluous in Kernels 5.0 onwards``
-* :vytask:`T6346`  ``Boot to multi-user.target instead of graphical.target``
-* :vytask:`T6358`  ``Container config option to enable host pid``
-* :vytask:`T6367`  ``op-mode: commit-archive: TypeError: attribute name must be string, not 'NoneType'``
-* :vytask:`T6383`  ``Incorrect completion for rollback-soft``
-* :vytask:`T6384`  ``rollback-soft should tell the user to compare and commit``
-* :vytask:`T6391`  ``load-balancing reverse-proxy: typo in timeout help``
-* :vytask:`T6396`  ``MINOR Typo: set system conntrack timeout custom ipv4 rule X``
-* :vytask:`T6409`  ``Remove unused parameter node from reverse-proxy backend``
-
-1.4.0-epa3 (14th May 2024)
-==========================
-
-**Security**
-
-
-* :vytask:`T6324`  ``CVE-2024-2961``
-
-
-**Configuration syntax changes (automatically migrated)**
-
-
-* :vytask:`T5535`  ``Move disable-directed-broadcast to firewall global-options``
-* :vytask:`T6171`  ``Rename the DHCP server "failover" command to "high-availability mode"``
-* :vytask:`T6208`  ``container: rename "cap-add" CLI node to "capability"``
-* :vytask:`T6216`  ``Firewall group names that contain the '+' character break the config``
-* :vytask:`T6295`  ``netns: disable incomplete support in VyOS 1.4 sagitta``
-
-**New features and improvements**
-
-
-* :vytask:`T4309`  ``Support network/address-groups and  ipv6-network/ipv6-address-groups in "conntrack ignore"``
-* :vytask:`T4903`  ``Support IPv6 addresses in "set system conntrack ignore"``
-* :vytask:`T5364`  ``Make it possible to set the PADO delay to 0``
-* :vytask:`T6127`  ``Ability to view logs for rules with Offload not functional``
-* :vytask:`T6133`  ``Add domain-name to commit-archive``
-* :vytask:`T6143`  ``Increase configuration timeout range for service config-sync``
-* :vytask:`T6154`  ``Installer should ask for password twice``
-* :vytask:`T6161`  ``Add support for displaying container image data in JSON``
-* :vytask:`T6162`  ``ixgbe: Add 1000BASE-BX support``
-* :vytask:`T6171`  ``Rename the DHCP server "failover" command to "high-availability mode"``
-* :vytask:`T6176`  ``image-tools: rationalize setting of console type``
-* :vytask:`T6184`  ``image-tools: add op-mode command to set default boot console type``
-* :vytask:`T6192`  ``Support running SSH server in more than one VRF``
-* :vytask:`T6226`  ``Add "tcp-requece inspect-delay" to reverse proxy``
-* :vytask:`T6257`  ``Add op mode commands for dynamic firewall address groups``
-* :vytask:`T6258`  ``Add IPv6 base-reachable-time option to interfaces``
-* :vytask:`T6260`  ``image-tools: remove the image directory if it fails to install due to insufficient drive space``
-* :vytask:`T6267`  ``Improve commit failure messages for wireless interface configuration``
-* :vytask:`T6278`  ``Attempt hint for console type during image install``
-* :vytask:`T6291`  ``Add op mode commands for displaying LACP information for bonding interfaces``
-* :vytask:`T6306`  ``EVPN-MH - missing options in uplink ports``
-
-**Bug fixes**
-
-
-* :vytask:`T2590`  ``DHCPv6 not updating nameservers and search domains since replacing isc-dhcp-client with WIDE dhcp6c``
-* :vytask:`T3655`  ``NAT doesn't work correctly with VRF``
-* :vytask:`T4718`  ``DHCP server listen-address doesn't take effect if the interface is in a VRF``
-* :vytask:`T5164`  ``op cmd: "show dhcp server leases state" with available options does not show any result``
-* :vytask:`T5862`  ``Default MTU is not acceptable in some environments``
-* :vytask:`T5875`  ``login: removing and re-adding a user keeps the home directory but changes the UID, thus SSH keys no longer work``
-* :vytask:`T5996`  ``Incorrect behavior for backslash escapes in config save and compare commands``
-* :vytask:`T6082`  ``BGP doesn't allow the same local AS and remote AS in peer groups``
-* :vytask:`T6085`  ``VTI interfaces are in UP state by default``
-* :vytask:`T6089`  ``[1.3.6->1.4.0-epa1 Migration] "ospf passive-interface default" incorrectly added``
-* :vytask:`T6090`  ``Migration of "policy route" configs fails due to TCP flag case sensitivity``
-* :vytask:`T6100`  ``NAT config migration error in 1.4.0-epa1 if invalid address/network defined in 1.3.6 version``
-* :vytask:`T6106`  ``Improve the commit error message for the case when route-reflector-client option is defined in a peer-group``
-* :vytask:`T6119`  ``Use a compliant TOML parser``
-* :vytask:`T6130`  ``[1.3.6->1.4.0-epa2 Migration] BGP "set community" missing``
-* :vytask:`T6131`  ``Disabling openvpn interface(s) causes OSPF to fail to load on reboot``
-* :vytask:`T6136`  ``Configuring a dynamic address group, config script did not check whether the group was created``
-* :vytask:`T6138`  ``Conntrack table op-mode fails with flowtable offload entries``
-* :vytask:`T6145`  ``Service config-sync does not rely on priorities``
-* :vytask:`T6147`  ``Conntrack not working as expected with global state-policy``
-* :vytask:`T6149`  ``Update node_data when merging nodes in reference tree generation``
-* :vytask:`T6152`  ``Kernel panic for ZimaBoard 232``
-* :vytask:`T6160`  ``Unhandled exception when configuring IS-IS``
-* :vytask:`T6165`  ``grub: vyos-grub-update failed to start on "slow" systems``
-* :vytask:`T6167`  ``VNI not set on VRF after reboot``
-* :vytask:`T6168`  ``"add system image" does not set the default boot image to the current console type in compatibility mode``
-* :vytask:`T6169`  ``DNS forwarding configuration rejects underscores in SRV records``
-* :vytask:`T6173`  ``Build Causes Errors When "--version" Contains Slashes ("/")``
-* :vytask:`T6175`  ``op-mode: "renew dhcp interface <name>" does not check if it's an actual DHCP interface``
-* :vytask:`T6178`  ``reverse-proxy doesn't check that a certificate exists at set time``
-* :vytask:`T6179`  ``Incorrect HAProxy config generated for reverse-proxy rules with url-path``
-* :vytask:`T6186`  ``'set system image default-boot' fails to find images that actually do exist in the system``
-* :vytask:`T6189`  ``BGP L3VPN connectivity is broken after re-enabling VRF``
-* :vytask:`T6191`  ``Policy route set-mss option is not working correctly``
-* :vytask:`T6193`  ``dhcp-client: invalid warning "is not a DHCP interface but uses DHCP name-server option" for VLAN interfaces``
-* :vytask:`T6196`  ``route-map and summary-only do not work in BGP aggregation at the same time``
-* :vytask:`T6197`  ``Validation error in the IPoE server interface client-subnet option``
-* :vytask:`T6202`  ``Multi-Protocol BGP is broken by 6PE patch in upstream FRR 9.1``
-* :vytask:`T6205`  ``ipoe: error in migration script logic while renaming mac-address to mac``
-* :vytask:`T6206`  ``L2tp smoketest fails if vyos-configd is running``
-* :vytask:`T6207`  ``image-tools: restore ability to copy config.boot.default on image install``
-* :vytask:`T6213`  ``Validations in firewall groups mistakenly reject correct configurations``
-* :vytask:`T6216`  ``Firewall group names that contain the '+' character break the config``
-* :vytask:`T6218`  ``Container network interface in VRF fails to generate IPv6 link-local address``
-* :vytask:`T6221`  ``Enabling VRF breaks connectivity``
-* :vytask:`T6222`  ``VRRP rfc3768-compatibility not working correctly when resulting interface name is over 15 characters``
-* :vytask:`T6241`  ``Updating CRL in "pki" config does not update OpenVPN``
-* :vytask:`T6243`  ``Update vyos-http-api-tools for package idna security advisory``
-* :vytask:`T6250`  ``"policy route-map set table" cannot be deleted from the rule``
-* :vytask:`T6252`  ``GRE tunnels don't allow configuring MTU larger than 8024``
-* :vytask:`T6255`  ``Static table description should not contain white-space``
-* :vytask:`T6263`  ``Commit failures when trying to set an IGMP group with source address on an interface``
-* :vytask:`T6269`  ``Polixy route "set table" option is not working correctly``
-* :vytask:`T6272`  ``PPPoE configuration does not load after deleting a PPPoE interface from the system``
-* :vytask:`T6276`  ``Do not call config dependencies on script error``
-* :vytask:`T6283`  ``Cannot delete as-path prepend from policy when it contains more than one AS``
-* :vytask:`T6284`  ``IPoE server op mode commands do not show IPv6 addresses``
-* :vytask:`T6299`  ``Building VyOS (Dockerized) current ISO fails dues to unmet dependencies podman : Depends: libgpgme11t64 (>= 1.4.1) but it is not installable``
-* :vytask:`T6305`  ``IPoE interface wildcard validation error in firewall rules``
-* :vytask:`T6307`  ``procps is missing from vyos-1x build dependencies``
-* :vytask:`T6317`  ``VLAN doesn't work on a bridge with a wireless interface member``
-* :vytask:`T6329`  ``Firewall - Error while printing groups``
-
-**Other resolved issues**
-
-
-* :vytask:`T4516`  ``Rewrite system image manipulation tools in Python``
-* :vytask:`T5535`  ``Move disable-directed-broadcast to firewall global-options``
-* :vytask:`T6146`  ``Add python script to get all priorities of service or section from XML``
-* :vytask:`T6159`  ``"show openvpn server" prints a superfluous "OpenVPN status on vtunx" message for every client connection``
-* :vytask:`T6180`  ``Add application of mask to configtree``
-* :vytask:`T6185`  ``Simplify marshalling of section and config data for config-sync``
-* :vytask:`T6187`  ``Use correct CPU counts adjusted for SMT when necessary``
-* :vytask:`T6195`  ``dropbear: package upgrade 2022.83-1 -> 2022.83-1+deb12u1``
-* :vytask:`T6198`  ``configverify: add common helper for PKI certificate validation``
-* :vytask:`T6203`  ``Remove references to the obsolete vyos.xml module (superseded by vyos.xml_ref)``
-* :vytask:`T6208`  ``container: rename "cap-add" CLI node to "capability"``
-* :vytask:`T6234`  ``PPPoE-server pado-delay refactoring``
-* :vytask:`T6245`  ``Unhandled exception in "show openvpn server"``
-* :vytask:`T6295`  ``netns: disable incomplete support in VyOS 1.4 sagitta``
-* :vytask:`T6327`  ``Drop boot console type ttyUSB (USB serial)``
-* :vytask:`T6330`  ``release.pref.chroot indentation broken``
-
-1.4.0-epa2 (15th March 2024)
-============================
-
-
-
-**Configuration syntax changes (automatically migrated)**
-
-
-* :vytask:`T6079`  ``dhcp: migration fails for duplicate static-mapping``
-
-**New features and improvements**
-
-
-* :vytask:`T4977`  ``Babel routing protocol support``
-* :vytask:`T5504`  ``Make it possible to set more than one peer-address in unicast VRRP``
-* :vytask:`T5530`  ``Add LFA to IS-IS``
-* :vytask:`T5631`  ``Ability to export the current configuration in JSON format``
-* :vytask:`T5717`  ``ospfv3 - add  allow to set metric-type to ospf redistribution while frr docs says its possible.``
-* :vytask:`T5772`  ``Require HTTPS API server configurations to include at least one key if key-based auth is used``
-* :vytask:`T5781`  ``Add ability to add additional minisign keys``
-* :vytask:`T6057`  ``Add ability to disable syslog for conntrackd``
-* :vytask:`T6060`  ``op-mode: container: support removing all container images at once``
-* :vytask:`T6087`  ``ospfv3: add support to redistribute IS-IS routes``
-
-**Bug fixes**
-
-
-* :vytask:`T2998`  ``SNMP v3 oid "exclude" option doesn't work``
-* :vytask:`T4270`  ``When "ignore-hosts-file" is unset, local hostname of the router resolves to 127.0.1.1 in the DNS forwarding service``
-* :vytask:`T5121`  ``Incorrect "architecture" config loaded``
-* :vytask:`T5646`  ``QoS policy limiter broken if class without match``
-* :vytask:`T5909`  ``Container registry with authentication prevents config load (section container) after reboot``
-* :vytask:`T6004`  ``Missing RPKI boot priority prevents it from loading``
-* :vytask:`T6020`  ``VRRP health-check script is not applied correctly in keepalived.conf``
-* :vytask:`T6054`  ``load-balancing wan - doesn't configure a list of ports``
-* :vytask:`T6055`  ``PKI error: "failed to install x value" when executed the command from conf mode``
-* :vytask:`T6061`  ``connection-status nat destination firewall filter not working in 1.4.0-epa1``
-* :vytask:`T6069`  ``HTTP API segfault during concurrent configuration requests``
-* :vytask:`T6070`  ``bnx2x NIC causes a commit error due to incorrect implementation of EEE status reading``
-* :vytask:`T6073`  ``Conntrack/NAT not being disabled when VRFs are defined``
-* :vytask:`T6074`  ``container: do not allow deleting images which have a container running``
-* :vytask:`T6079`  ``dhcp: migration fails for duplicate static-mapping``
-* :vytask:`T6081`  ``QoS policy shaper target and interval wrong calcuations``
-* :vytask:`T6084`  ``OpenNHRP DMVPN configuration file clean after reboot if we have any IPSec configuration``
-* :vytask:`T6086`  ``NAT does not work with network-groups``
-* :vytask:`T6093`  ``Incorrect dhcp-options vendor-class-id regex``
-* :vytask:`T6096`  ``Config commits are not synced properly because 00vyos-sync is deleted by vyos-router``
-* :vytask:`T6098`  ``Description doesnt seem to allow for non international characters``
-* :vytask:`T6104`  ``Regression in commit-archive for non-interactive configuration``
-* :vytask:`T6107`  ``Nginx does not allow big config queries for configure endpoint API``
-* :vytask:`T6141`  ``Trying to set PADO delay in PPPoE server without also configuring the session options causes a commit failure``
-
-**Other resolved issues**
-
-
-* :vytask:`T2199`  ``Rewrite firewall in new XML/Python style``
-* :vytask:`T5738`  ``Extend XML building blocks``
-* :vytask:`T5870`  ``ipsec remote access VPN: add x509 ("pubkey") authentication``
-* :vytask:`T5959`  ``Streamline dns forwarding service``
-* :vytask:`T6071`  ``firewall: CLI description limit of 256 characters cause config upgrade issues``
-* :vytask:`T6075`  ``Applying firewall rules with a non-existent interface group``
-* :vytask:`T6077`  ``banner: implement ASCII contest winner default logo``
-* :vytask:`T6083`  ``ethtool: move string parsing to JSON parsing``
-* :vytask:`T6095`  ``Tab completion for "set interfaces wireless wlan0 country-code" incorrect country "uk"``
-* :vytask:`T6214`  ``Error when using some constraints``
-
-1.4.0-epa1 (22th February 2024)
-===============================
-
-**Security**
-
-
-* :vytask:`T4915`  ``Minisign verification failure == pass??``
-
-**Breaking changes**
-
-
-* :vytask:`T5605`  ``Do not generate keysize option in OpenVPN configs``
-
-**Configuration syntax changes (automatically migrated)**
-
-
-* :vytask:`T1991`  ``Rework time services``
-* :vytask:`T5877`  ``Reduce unnecessary nesting in system domain-search path and improve smoketest``
-
-**New features and improvements**
-
-
-* :vytask:`T160`  ``Support NAT64``
-* :vytask:`T1991`  ``Rework time services``
-* :vytask:`T4221`  ``Add a template filter for converting scalars to single-item lists``
-* :vytask:`T4883`  ``Add a description field for routing tables``
-* :vytask:`T4940`  ``Interface debugging``
-* :vytask:`T5122`  ``Move "archive-areas" to defaults.toml to support "non-free-firmware" repository``
-* :vytask:`T5418`  ``Allow arbitrary subnets in PPPoE client IP pools``
-* :vytask:`T5449`  ``Add options for TCP MSS probing``
-* :vytask:`T5497`  ``Add ability to resequence rule numbers for firewall``
-* :vytask:`T5615`  ``Narrow down spurious name conflict with mdns``
-* :vytask:`T5877`  ``Reduce unnecessary nesting in system domain-search path and improve smoketest``
-* :vytask:`T5965`  ``WWAN modems using raw-ip do not work with dhclient/dhcp6c``
-* :vytask:`T5972`  ``login: add possibility to disable individual local user accounts``
-
-**Bug fixes**
-
-
-* :vytask:`T2113`  ``OpenVPN Options error: you cannot use --verify-x509-name with --compat-names or --no-name-remapping``
-* :vytask:`T2700`  ``Redirecting traffic from PPPoE interface to IFB fails``
-* :vytask:`T2801`  ``conntrack-tools flooding logs``
-* :vytask:`T3681`  ``The VMware Tools resume script did not run successfully in this virtual machine.``
-* :vytask:`T3774`  ``atop logs are not limited in size``
-* :vytask:`T3902`  ``Firewall does not load on boot, address-group not found, even though it exists``
-* :vytask:`T4796`  ``build-vyos-image ignores multiple options``
-* :vytask:`T5239`  ``Host name and domain name missing from the FRR configuration``
-* :vytask:`T5245`  ``Wireless interfaces do not get IPv6 link-local address assigned``
-* :vytask:`T5376`  ``Conntrack FTP helper does not work properly``
-* :vytask:`T5890`  ``OTP key generation is broken``
-* :vytask:`T5926`  ``IPSEC does not apply after l2tp configuration was changed``
-* :vytask:`T5977`  ``nftables: Operation not supported when using match-ipsec in outbound firewall``
-* :vytask:`T6005`  ``Error on adding a wireguard interface to OSPFv3``
-* :vytask:`T6043`  ``VxLAN and bridge error bug``
-* :vytask:`T6056`  ``Applying 'system static-host-mapping'  command calls unnecessary snmpd restart``
-* :vytask:`T6064`  ``Can not build VyOS if repository it not cloned to a branch``
-
-**Other resolved issues**
-
-
-* :vytask:`T671`  ``Identify and remove dead code``
-* :vytask:`T874`  ``Support for Two Factor Authentication for CLI access via Google Authenticator/OTP``
-* :vytask:`T1311`  ``WAN load-balancing can't flush connections when conntrack-sync is enabled``
-* :vytask:`T1436`  ``Config entries with default values do not correctly show as changed``
-* :vytask:`T1487`  ``DNS (pdns_recursor) stats logs not saved to disk``
-* :vytask:`T2433`  ``Improve CLI value validator performance``
-* :vytask:`T3337`  ``Add possibility to serve static DNS zones from the router``
-* :vytask:`T3471`  ``DHCP hook is not able to detect all running DHCP instances``
-* :vytask:`T3474`  ``Revisit storing syntax version of interface definitions in XML file``
-* :vytask:`T3522`  ``policy based routing not working``
-* :vytask:`T3574`  ``Add constraintGroup for combining validators with logical AND``
-* :vytask:`T3642`  ``PKI configuration``
-* :vytask:`T3722`  ``op-mode IPSec show vpn ike sa always shows L-TIME 0``
-* :vytask:`T3766`  ``containers: Expanding options for networking and building containers``
-* :vytask:`T4723`  ``Error when issuing 'show flow-accounting interface pppoe0'``
-* :vytask:`T4761`  ``Add a generic URL validator``
-* :vytask:`T4795`  ``Cleanup custom python validators``
-* :vytask:`T4951`  ``Add an op mode exception for cases when operations fail due to insufficient system resources``
-* :vytask:`T5109`  ``Improve OCaml XML validator``
-* :vytask:`T5195`  ``Break up the vyos.util module``
-* :vytask:`T5348`  ``Service config-sync can freeze the secondary router if it has commit-archive location``
-* :vytask:`T5605`  ``Do not generate keysize option in OpenVPN configs``
-* :vytask:`T5754`  ``Update to StrongSwan 5.9.11``
-* :vytask:`T5846`  ``Refactor and simplify DUID definition in conf-mode``
-* :vytask:`T5903`  ``NHRP don´t start on reboot from version 1.5-rolling-202401010026``
-* :vytask:`T6001`  ``Add option to enable resolve-via-default``
-* :vytask:`T6015`  ``"journalctl_charon" file does not contain data in the generated "ipsec debug-archive" file``
-* :vytask:`T6050`  ``Wrong scripting commands descriptions in accel-ppp services``
-* :vytask:`T6078`  ``Update ethtool to 6.6``
diff --git a/docs/changelog/1.5.rst b/docs/changelog/1.5.rst
deleted file mode 100644
index 94d7b9ab..00000000
--- a/docs/changelog/1.5.rst
+++ /dev/null
@@ -1,1295 +0,0 @@
-############
-1.5 Circinus
-############
-
-..
-   Please don't add anything by hand.
-   This file is managed by the script:
-   _ext/releasenotes.py
-
-
-2024-04-26
-==========
-
-* :vytask:`T6259` ``(feature): PKI: Support RFC822 (email) names in SAN``
-
-
-2024-04-25
-==========
-
-* :vytask:`T6263` ``(bug): Multicast: Could not commit multicast config with multicast join group using source-address``
-* :vytask:`T5833` ``(bug): Not all AFIs compatible with VRF``
-
-
-2024-04-24
-==========
-
-* :vytask:`T6255` ``(bug): Static table description should not contain white-space``
-* :vytask:`T6226` ``(feature): add HAPROXY `tcp-request content accept` related block to load-balancing reverse proxy config``
-* :vytask:`T6109` ``(bug): remote syslog do not get all the logs``
-* :vytask:`T6262` ``(default): Update the boot splash for VyOS 1.5 ISO``
-* :vytask:`T6217` ``(feature): VRRP contrack-sync script change name of the logger``
-* :vytask:`T6244` ``(feature): Spacing of "Show System Uptime" hard to parse``
-
-
-2024-04-23
-==========
-
-* :vytask:`T6260` ``(bug): image-tools: remove failed image directory if 'No space left on device' error``
-* :vytask:`T6261` ``(default): Typo in op_mode connect_disconnect print statement for check_ppp_running``
-* :vytask:`T6237` ``(feature): IPSec remote access VPN: ability to set EAP ID of clients``
-
-
-2024-04-22
-==========
-
-* :vytask:`T5996` ``(bug): unescape backslashes for config save, compare commands``
-
-
-2024-04-21
-==========
-
-* :vytask:`T6191` ``(bug): Policy Route TCP-MSS Behavior Different from 1.3.x``
-* :vytask:`T5535` ``(feature): disable-directed-broadcast should be moved to firewall global-options``
-
-
-2024-04-20
-==========
-
-* :vytask:`T6252` ``(bug): gre tunnel - doesn't allow configure jumbo frame more than 8024``
-
-
-2024-04-19
-==========
-
-* :vytask:`T6221` ``(bug): Enabling VRF breaks connectivity``
-* :vytask:`T6035` ``(bug): QoS policy shaper queue-type random-detect requires  limit avpkt``
-* :vytask:`T6246` ``(feature): Enable basic haproxy http-check configuration options``
-* :vytask:`T6242` ``(feature): Loadbalancer reverse-proxy: SSL backend skip CA certificate verification``
-
-
-2024-04-17
-==========
-
-* :vytask:`T6168` ``(bug): add system image does not set default boot to current console type in compatibility mode``
-* :vytask:`T6243` ``(bug): Update vyos-http-api-tools for package idna security advisory``
-* :vytask:`T6154` ``(enhancment): Installer should ask for password twice``
-* :vytask:`T5966` ``(default): Adjust dynamic dns configuration address subpath to be more intuitive and other op-mode adjustments``
-* :vytask:`T5723` ``(default): mdns repeater: Always reload systemd daemon before applying changes``
-* :vytask:`T5722` ``(bug): Failing to add route in failover if gateway not in the same interface network``
-* :vytask:`T5612` ``(default): Miscellaneous improvements and fixes for dynamic DNS configuration``
-* :vytask:`T5574` ``(default): Support per-service cache management for dynamic dns providers``
-
-
-2024-04-16
-==========
-
-* :vytask:`T6099` ``(bug): Suppress unsupported interfaces from appearing in messages log by Telegraf``
-
-
-2024-04-15
-==========
-
-* :vytask:`T6163` ``(bug): kea-dhcp4-server crashes due to incorrect lease file permissions after 1.5-rolling-202403120022 -> 1.5-rolling-202403230018 upgrade``
-* :vytask:`T6100` ``(bug): NAT config migration error in 1.4.0-epa1 if invalid address/network defined in 1.3.6 version``
-* :vytask:`T6174` ``(bug): can't view dhcp server leases if logged in as a tacacs account``
-* :vytask:`T5734` ``(bug): OpenVPN server dh-params that are not in PKI error``
-
-
-2024-04-14
-==========
-
-* :vytask:`T6210` ``(feature): Add container ability to configure capability sys-nice``
-
-
-2024-04-13
-==========
-
-* :vytask:`T6173` ``(bug): Build Causes Errors When "--version" Contains Slashes ("/")``
-* :vytask:`T2518` ``(feature): Support NAT for ipv6(NPT)``
-
-
-2024-04-12
-==========
-
-* :vytask:`T6214` ``(bug): Error when using some constraints``
-* :vytask:`T6213` ``(bug): Firewall group constraints``
-* :vytask:`T6222` ``(bug): VRRP rfc3768-compatibility not working correctly when resulting interface name is over 15 characters``
-* :vytask:`T6218` ``(bug): Container network interface in VRF fails to generate IPv6 link-local address``
-* :vytask:`T5044` ``(feature): High Availability in DHCPv6 -ISC DHCP Failover/Kea``
-* :vytask:`T6166` ``(bug): Tech support generation error for custom output location``
-* :vytask:`T344` ``(feature): Software basesd FastPath``
-
-
-2024-04-11
-==========
-
-* :vytask:`T4516` ``(feature): Rewrite system image manipulation tools in Python``
-* :vytask:`T4548` ``(feature): GRUB loader configuration rework``
-* :vytask:`T6228` ``(bug): Cleanup of not existing units``
-
-
-2024-04-10
-==========
-
-* :vytask:`T6207` ``(bug): image-tools: restore ability to copy config.boot.default on image install``
-* :vytask:`T6106` ``(bug): Valid commit error for route-reflector-client option defined in peer-group``
-* :vytask:`T5750` ``(bug): Upgrade from 1.3.4 to 1.4 Rolling fails QoS``
-* :vytask:`T5740` ``(bug): Generate wiregurad keys via HTTP-API fails``
-* :vytask:`T5858` ``(bug): Show conntrack statistics formatting is all over the place``
-
-
-2024-04-09
-==========
-
-* :vytask:`T6121` ``(feature): Extend service config-sync for sections  vpn, policy, vrf``
-
-
-2024-04-08
-==========
-
-* :vytask:`T6197` ``(bug): IPoE-server interface client-subnet looks broken or works with the wrong logic``
-* :vytask:`T6196` ``(bug): Route-map and summary-only do not work in BGP aggregation at the same time``
-* :vytask:`T6068` ``(feature): dhcp server: allow switching between load-balanced and hotspare mode``
-
-
-2024-04-07
-==========
-
-* :vytask:`T6205` ``(bug): ipoe: error in migration script logic while renaming mac-address to mac node``
-* :vytask:`T5862` ``(bug): Default MTU is not acceptable in some environments``
-* :vytask:`T6208` ``(feature): container: rename "cap-add" CLI node to "capability"``
-* :vytask:`T6188` ``(feature): Add Firewall Rule Description to "show firewall" commands``
-* :vytask:`T1244` ``(default): Support for StartupResync in conntrackd``
-
-
-2024-04-06
-==========
-
-* :vytask:`T6203` ``(enhancment): Remove obsoleted xml lib``
-* :vytask:`T6202` ``(bug): Multi-Protocol BGP is broken by 6PE patch in upstream FRR 9.1``
-
-
-2024-04-05
-==========
-
-* :vytask:`T6089` ``(bug): [1.3.6->1.4.0-epa1 Migration] "ospf passive-interface default" incorrectly added``
-* :vytask:`T2590` ``(bug): DHCPv6 not updating nameservers and search domains since replacing isc-dhcp-client with WIDE dhcp6c``
-* :vytask:`T6199` ``(feature): spring cleaning - drop unused Python imports``
-
-
-2024-04-04
-==========
-
-* :vytask:`T6119` ``(default): Use a compliant TOML parser``
-* :vytask:`T6171` ``(feature): dhcp server fail-over - Rename fail-over node``
-* :vytask:`T6128` ``(bug): minisign.pub is wrong on https://vyos.net/get/nightly-builds/``
-* :vytask:`T5882` ``(feature): vyos-utils: move to Dune as build system``
-* :vytask:`T5864` ``(default): 'show ntp' Commands Not Working``
-* :vytask:`T3843` ``(bug): l2tp configuration not cleared after delete``
-* :vytask:`T2187` ``(feature): Python Unit testing``
-* :vytask:`T788` ``(bug): Nightly builds are not signed``
-
-
-2024-04-03
-==========
-
-* :vytask:`T6198` ``(feature): configverify: add common helper for PKI certificate validation``
-* :vytask:`T6192` ``(feature): Multi VRF support for SSH``
-
-
-2024-04-02
-==========
-
-* :vytask:`T6167` ``(bug): VNI not set on VRF after reboot``
-* :vytask:`T6151` ``(default): BGP VRF - Route-leaking not work when the next-hop is a recursive route.``
-* :vytask:`T6033` ``(bug): hsflowd fails to start when using a tunnel interface``
-
-
-2024-04-01
-==========
-
-* :vytask:`T6195` ``(feature): dropbear: package upgrade 2022.83-1 -> 2022.83-1+deb12u1``
-* :vytask:`T6193` ``(bug): dhcp-client: invalid warning "is not a DHCP interface but uses DHCP name-server option" for VLAN interfaces``
-* :vytask:`T6178` ``(bug): Reverse-proxy should check that certificate exists during commit``
-
-
-2024-03-31
-==========
-
-* :vytask:`T6186` ``(bug): Fix regression in 'set system image default-boot'``
-* :vytask:`T5832` ``(feature): Keepalived: Allow using the 'dev' statement on excluded-addresses``
-
-
-2024-03-29
-==========
-
-* :vytask:`T6159` ``(bug): Openvpn Server Op-cmd adds heading "OpenVPN status on vtunx" for every client connection``
-
-
-2024-03-28
-==========
-
-* :vytask:`T6147` ``(bug): Conntrack not working as expected with global state-policy``
-* :vytask:`T6175` ``(bug): op-mode: "renew dhcp interface <name>" does not check if it's an actual DHCP interface``
-* :vytask:`T6102` ``(bug): Clear dhcp-server lease throws python exception on 1.5-rolling``
-
-
-2024-03-26
-==========
-
-* :vytask:`T6066` ``(bug): Setting same network in different ospf area will raise exception``
-
-
-2024-03-25
-==========
-
-* :vytask:`T6145` ``(bug): Service config-sync does not rely on priorities but must``
-
-
-2024-03-24
-==========
-
-* :vytask:`T6161` ``(feature): Output container images as JSON``
-* :vytask:`T6165` ``(bug): grub: vyos-grub-update failed to start on "slow" systems``
-* :vytask:`T6085` ``(bug): VTI interfaces are in UP state by default``
-* :vytask:`T6152` ``(bug): Kernel panic for ZimaBoard 232``
-
-
-2024-03-23
-==========
-
-* :vytask:`T6160` ``(bug): isis: NameError: name 'process' is not defined``
-* :vytask:`T6131` ``(bug): Disabling openvpn interface(s) causes OSPF to fail to load on reboot``
-* :vytask:`T4022` ``(feature): Add package nat-rtsp-dkms``
-
-
-2024-03-22
-==========
-
-* :vytask:`T6136` ``(bug): Configuring a dynamic address group, config script did not check whether the group was created``
-* :vytask:`T6130` ``(bug): [1.3.6->1.4.0-epa2 Migration] BGP "set community" missing``
-* :vytask:`T6090` ``(bug): [1.3.6->1.4.0-epa1 Migration] policy route fails due tcp flag case sensitivity``
-* :vytask:`T6155` ``(default): ixgbe: failed to initialize because an unsupported SFP+ module type was detected.``
-* :vytask:`T6125` ``(feature): Support 802.1ad (0x88a8) vlan filtering for bridge``
-
-
-2024-03-21
-==========
-
-* :vytask:`T6143` ``(feature): Increase configuration timeout range for service config-sync``
-
-
-2024-03-20
-==========
-
-* :vytask:`T6133` ``(feature): Add domain-name to commit-archive``
-* :vytask:`T6129` ``(feature): bgp: add route-map option "as-path exclude all"``
-
-
-2024-03-19
-==========
-
-* :vytask:`T6127` ``(bug): Ability to view logs for rules with Offload not functional``
-* :vytask:`T6138` ``(bug): Conntrack table op-mode fails with flowtable offload entries``
-
-
-2024-03-15
-==========
-
-* :vytask:`T6118` ``(feature): radvd: RFC8781: add nat64prefix support``
-
-
-2024-03-12
-==========
-
-* :vytask:`T6020` ``(bug): VRRP health-check script is not applied correctly in keepalived.conf``
-* :vytask:`T5646` ``(bug): QoS policy limiter broken if class without match``
-
-
-2024-03-11
-==========
-
-* :vytask:`T6098` ``(bug): Description doesnt seem to allow for non international characters``
-* :vytask:`T2998` ``(bug): SNMP v3 oid "exclude" option doesn't work``
-* :vytask:`T6107` ``(bug): Nginx does not allow big config queries for configure endpoint API``
-* :vytask:`T6096` ``(bug): Config commits are not synced properly because 00vyos-sync is deleted by vyos-router``
-* :vytask:`T6093` ``(bug): Incorrect dhcp-options vendor-class-id regex``
-* :vytask:`T6083` ``(feature): ethtool: move string parsing to JSON parsing``
-* :vytask:`T6069` ``(bug): HTTP API segfault during concurrent configuration requests``
-* :vytask:`T6057` ``(feature): Add ability to disable syslog for conntrackd``
-* :vytask:`T5504` ``(feature): Keepalived VRRP ability to set more than one peer-address``
-* :vytask:`T5717` ``(feature): ospfv3 - add  allow to set metric-type to ospf redistribution while frr docs says its possible.``
-* :vytask:`T6071` ``(bug): firewall: CLI description limit of 256 characters cause config upgrade issues``
-
-
-2024-03-08
-==========
-
-* :vytask:`T6086` ``(bug): NAT does not work with network-groups``
-* :vytask:`T6094` ``(bug): Destination Nat not Making Firewall Rules``
-* :vytask:`T6061` ``(bug): connection-status nat destination firewall filter not working in 1.4.0-epa1``
-* :vytask:`T6075` ``(bug): Applying firewall rules with a non-existent interface group``
-
-
-2024-03-07
-==========
-
-* :vytask:`T6104` ``(bug): Regression in commit-archive for non-interactive configuration``
-* :vytask:`T6084` ``(bug): OpenNHRP DMVPN configuration file clean after reboot if we have any IPSec configuration``
-* :vytask:`T5348` ``(bug): Service config-sync can freeze the secondary router if it has commit-archive location``
-* :vytask:`T6073` ``(bug): Conntrack/NAT not being disabled when VRFs are defined``
-* :vytask:`T6095` ``(default): Tab completion for "set interfaces wireless wlan0 country-code" incorrect country "uk"``
-
-
-2024-03-06
-==========
-
-* :vytask:`T6079` ``(bug): dhcp: migration fails for duplicate static-mapping``
-* :vytask:`T6063` ``(default): Kea DHCP: Expose match-client-id setting``
-* :vytask:`T5992` ``(default): DHCP: show dhcp server leases not showing all leases``
-
-
-2024-03-05
-==========
-
-* :vytask:`T5903` ``(bug): NHRP don´t start on reboot from version 1.5-rolling-202401010026``
-* :vytask:`T2447` ``(feature): Additional Boot Argument Configuration to limit CPU C-States``
-
-
-2024-03-04
-==========
-
-* :vytask:`T6087` ``(feature): ospfv3: add support to redistribute IS-IS routes``
-
-
-2024-03-02
-==========
-
-* :vytask:`T6081` ``(bug): QoS policy shaper target and interval wrong calcuations``
-
-
-2024-02-29
-==========
-
-* :vytask:`T6078` ``(feature): Update ethtool to 6.6``
-* :vytask:`T6077` ``(feature): banner: implement ASCII contest winner default logo``
-* :vytask:`T6074` ``(feature): container: do not allow deleting images which have a container running``
-
-
-2024-02-28
-==========
-
-* :vytask:`T4270` ``(bug): dns forwarding - When "ignore-hosts-file" is unset, local hostname of router resolves to 127.0.1.1``
-
-
-2024-02-26
-==========
-
-* :vytask:`T6064` ``(bug): Can not build VyOS if repository it not cloned to a branch``
-* :vytask:`T5754` ``(default): Update to StrongSwan 5.9.11``
-
-
-2024-02-25
-==========
-
-* :vytask:`T6060` ``(feature): op-mode: container: support removing all container images at once``
-
-
-2024-02-24
-==========
-
-* :vytask:`T5909` ``(bug): Container registry with authentication prevents config load (section container) after reboot``
-
-
-2024-02-23
-==========
-
-* :vytask:`T5376` ``(bug): Conntrack FTP helper does not work properly``
-
-
-2024-02-22
-==========
-
-* :vytask:`T6048` ``(bug): Exception in event handler script``
-
-
-2024-02-21
-==========
-
-* :vytask:`T6050` ``(bug): Wrong scripting commands descriptions in accel-ppp services``
-* :vytask:`T3771` ``(feature): DHCPv6 server prefix delegation - dynamically add route to delegated prefix via requesting router``
-
-
-2024-02-19
-==========
-
-* :vytask:`T5971` ``(default): Create the same view of ppp section  for all accel-ppp services``
-* :vytask:`T6029` ``(default): Rewrite Accel-PPP services to an identical feature set``
-* :vytask:`T3722` ``(bug): op-mode IPSec show vpn ike sa always shows L-TIME 0``
-
-
-2024-02-18
-==========
-
-* :vytask:`T6043` ``(bug): VxLAN and bridge error bug``
-* :vytask:`T6041` ``(bug): image-tools: install fails from PXE boot into live iso due to restrictive logic``
-
-
-2024-02-17
-==========
-
-* :vytask:`T5972` ``(feature): login: add possibility to disable individual local user accounts``
-
-
-2024-02-16
-==========
-
-* :vytask:`T6009` ``(bug): Firewall - Time not working properly when not using UTC``
-* :vytask:`T6005` ``(bug): Error on adding a wireguard interface to OSPFv3``
-* :vytask:`T6019` ``(feature): Bump nftables and libnftnl version``
-* :vytask:`T6001` ``(default): Add option to enable resolve-via-default``
-* :vytask:`T5965` ``(bug): WWAN modems using raw-ip do not work with dhclient/dhcp6c``
-* :vytask:`T5245` ``(bug): Wireless interfaces do not get IPv6 link-local address assigned``
-
-
-2024-02-15
-==========
-
-* :vytask:`T5977` ``(bug): nftables: Operation not supported when using match-ipsec in outbound firewall``
-* :vytask:`T2612` ``(bug): HTTPS API, changing API key fails but goes through``
-* :vytask:`T5989` ``(bug): IP subnets not usable in UPnP ACLs``
-* :vytask:`T5719` ``(default): mdns repeater: Add op-mode commands``
-* :vytask:`T4839` ``(feature): Dynamic Firewall groups``
-
-
-2024-02-14
-==========
-
-* :vytask:`T6034` ``(feature): rpki: move file based SSH keys for authentication to PKI subsystem``
-* :vytask:`T5981` ``(bug): IPsec site-to-site migrated PKI ca certificates are created with an '@'``
-* :vytask:`T5930` ``(bug): vrf - route-leak not work using route-target both command.``
-* :vytask:`T5709` ``(bug): IPoE-server fails if next pool mentioned but not defined``
-* :vytask:`T2044` ``(bug): RPKI doesn't boot properly``
-* :vytask:`T6032` ``(feature): bgp: add EVPN MAC-VRF Site-of-Origin support``
-* :vytask:`T5960` ``(default): Rewriting authentication section in accel-ppp services``
-
-
-2024-02-13
-==========
-
-* :vytask:`T5928` ``(bug): Configuration fails to load on boot if offloading has VLAN interfaces defined``
-* :vytask:`T5064` ``(bug): Value validation for domain-groups seems to be broken``
-
-
-2024-02-12
-==========
-
-* :vytask:`T6010` ``(bug): Support setting multiple values in BGP path-attribute``
-* :vytask:`T6004` ``(bug): RPKI is not configured``
-* :vytask:`T5952` ``(default): DHCP allow same MAC Address on same subnet``
-* :vytask:`T5849` ``(feature): Add SRv6 route commands``
-
-
-2024-02-10
-==========
-
-* :vytask:`T6023` ``(bug): rpki: add support for CLI knobs expire-interval and retry-interval``
-
-
-2024-02-09
-==========
-
-* :vytask:`T6028` ``(bug): QoS policy shaper wrong class_id_max and default_minor_id``
-* :vytask:`T6026` ``(bug): QoS hide attempts to delete qdisc from devices``
-* :vytask:`T5788` ``(feature): frr: update to 9.1 release``
-* :vytask:`T5703` ``(bug): QoS config on pppoe interface resets back to fq_codel after tunnel reboots``
-* :vytask:`T5685` ``(feature): Keepalived VRRP prefix is not necessary for the virtual address``
-
-
-2024-02-08
-==========
-
-* :vytask:`T6014` ``(feature): Bump keepalived version``
-* :vytask:`T5910` ``(bug): Grub problem(?) Serial Console no longer working``
-* :vytask:`T6021` ``(bug): QoS r2q wrong calculation``
-
-
-2024-02-07
-==========
-
-* :vytask:`T6017` ``(bug): Update vyos-http-api-tools for security advisory``
-* :vytask:`T6016` ``(bug): Resolve intermittent failures in cleanup function after failed image install``
-* :vytask:`T6024` ``(feature): bgp: add additional missing FRR features``
-* :vytask:`T6011` ``(feature): rpki: known-hosts-file is no longer supported by FRR CLI - remove VyOS CLI node``
-* :vytask:`T5998` ``(feature): replay_window setting under vpn in config``
-
-
-2024-02-06
-==========
-
-* :vytask:`T6018` ``(default): smoketest: updating http-api framework requires a pause before test``
-* :vytask:`T5921` ``(bug): Trying to commit an OpenConnect configuration without any local users results in an exception``
-* :vytask:`T5687` ``(feature): Implement ECS settings for PowerDNS recursor``
-
-
-2024-02-05
-==========
-
-* :vytask:`T5974` ``(bug): QoS policy shaper is currently miscalculating bandwidth and ceil values for the default class``
-* :vytask:`T5865` ``(feature): Rewrite ipv6 pool section to ipv6 named pools in Accel-ppp services``
-
-
-2024-02-02
-==========
-
-* :vytask:`T5739` ``(bug): Password recovery does not work if public keys are configured``
-* :vytask:`T5955` ``(feature): Rootless containers/set uid/gid for container``
-* :vytask:`T6003` ``(feature): Add 'show rpki as-number' and 'show rpki prefix'``
-* :vytask:`T5848` ``(feature): Add triple-isolate flow isolation option to CAKE QoS policy``
-
-
-2024-02-01
-==========
-
-* :vytask:`T5995` ``(bug): Kernel NIC-drivers for Huawei NICs are not properly enabled``
-* :vytask:`T5978` ``(bug): ethernet: hw-tc-offload does not actually get enabled on the NIC``
-* :vytask:`T5979` ``(enhancment): Add configurable kernel boot parameters``
-* :vytask:`T5973` ``(bug): vrf: RTNETLINK answers: File exists``
-* :vytask:`T5967` ``(bug): Multi-hop BFD connections can't be established; please add minimum-ttl option.``
-* :vytask:`T5619` ``(default): Update the Intel ixgbe driver due to issues with Intel X533``
-
-
-2024-01-31
-==========
-
-* :vytask:`T6000` ``(bug): [1.3.x -> 1.5.x] migrating threw exception in /opt/vyatta/etc/config-migrate/migrate/https/5-to-6, performed workaround``
-* :vytask:`T5999` ``(bug): load-balancing reverse-proxy can't configure root as a redirect``
-
-
-2024-01-30
-==========
-
-* :vytask:`T5980` ``(feature): Add image-tools support for configurable kernel boot options``
-
-
-2024-01-29
-==========
-
-* :vytask:`T5988` ``(bug): image-tools: a check of valid image name is missing from 'add image'``
-* :vytask:`T5994` ``(bug): Fix typo in 'remote' module preventing 'add system image' via ftp``
-
-
-2024-01-26
-==========
-
-* :vytask:`T5957` ``(bug): Firewall fails to delete inbound-interface name``
-* :vytask:`T5779` ``(bug): custom conntrack timeout rule not applicable``
-* :vytask:`T5984` ``(feature): Add user util numactl``
-
-
-2024-01-25
-==========
-
-* :vytask:`T5983` ``(bug): image-tools: minor regression in pruning version files in compatibility mode``
-* :vytask:`T5927` ``(bug): QoS policy shaper-hfsc class does not have a `bandwidth` node but requires one in the check``
-* :vytask:`T5834` ``(bug): Rename 'enable-default-log' to 'default-log'``
-
-
-2024-01-22
-==========
-
-* :vytask:`T5968` ``(feature): hsflowd: add VRF support``
-* :vytask:`T5961` ``(bug): QoS policy shaper vif with ceiling fails on commit``
-* :vytask:`T5958` ``(bug): QoS policy shaper-hfsc is not implemented``
-* :vytask:`T5969` ``(feature): op-mode: list multicast group membership``
-
-
-2024-01-21
-==========
-
-* :vytask:`T5799` ``(bug): vyos unbootable after 1.4-rolling-202308240020 to 1.5-rolling-202312010026 upgrade``
-* :vytask:`T5787` ``(bug): dhcp-server allows duplicate static-mapping for the same IP address``
-* :vytask:`T5912` ``(bug): DHCP Static mapping don't work on every first lease``
-* :vytask:`T5692` ``(enhancment): NTP leap smear``
-* :vytask:`T5954` ``(feature): Enable nvme_hwmon and drivetemp in KERNEL``
-
-
-2024-01-20
-==========
-
-* :vytask:`T5964` ``(bug): disconnect interface wwan0 throws exception``
-* :vytask:`T5948` ``(bug): pdns-recursor crashes on restart if hostfile-update is enabled and dhcp client sends hostname with trailing dot``
-* :vytask:`T5945` ``(bug): Missing minisign public key for rolling release``
-* :vytask:`T5922` ``(bug): Firewall - bug in zone config``
-* :vytask:`T5915` ``(bug): Firewall zone - Re add op-mode commands``
-* :vytask:`T5724` ``(feature): About dhcp client hooks``
-* :vytask:`T5721` ``(bug): Error in migrating configuration from VyOS 1.4``
-* :vytask:`T5550` ``(bug): Source validation on interface does not work properly``
-* :vytask:`T5239` ``(bug): frr 'hostname' missing or incorrect, and domain-name missing totally``
-* :vytask:`T4726` ``(default): Add completion and validation for the accel-ppp RADIUS vendor option``
-* :vytask:`T4085` ``(feature): Rewrite L2TP/PPTP/SSTP/PPPoE services to get_config_dict``
-* :vytask:`T5963` ``(bug): QoS policy shaper rate calculations could be wrong for some ethernet devices``
-* :vytask:`T5876` ``(bug): Dhcp bug in latest 1.5 rolling releases``
-* :vytask:`T5962` ``(feature): QoS policy set default speed to 100mbit or 1gbit instead of 10mbit``
-
-
-2024-01-19
-==========
-
-* :vytask:`T5897` ``(bug): VyOS with Cloud-init and VRF stucks at reboot/shutdown process``
-* :vytask:`T5554` ``(bug): Disable sudo for PAM RADIUS``
-* :vytask:`T4754` ``(default): Improvement: system login: show configured 2FA OTP key``
-* :vytask:`T5857` ``(bug): show interfaces wireless info``
-* :vytask:`T5841` ``(default): Remove old ssh-session-cleanup.service``
-* :vytask:`T5884` ``(default): Minor description fix (op-mode: generate wireguard)``
-* :vytask:`T5781` ``(default): Add ability to add additional minisign keys``
-
-
-2024-01-18
-==========
-
-* :vytask:`T5863` ``(bug): Failure to Load Config on Recent 1.5 Versions``
-* :vytask:`T4638` ``(bug): Deleting a parent interface does not delete its underlying VLAN interfaces``
-* :vytask:`T5953` ``(default): Rename 'close_action' value from `hold` to `trap` in IPSEC IKE``
-
-
-2024-01-17
-==========
-
-* :vytask:`T5923` ``(bug): Config mode system_console.py is not aware of revised GRUB file structure``
-* :vytask:`T4658` ``(feature): Rename DPD action `hold` to `trap```
-
-
-2024-01-16
-==========
-
-* :vytask:`T5859` ``(bug): Invalid format of pool range in accel-ppp services``
-* :vytask:`T5842` ``(feature): Rewrite PPTP service to get_config_dict``
-* :vytask:`T5801` ``(feature): Rewrite L2TP service to get_config_dict``
-* :vytask:`T5688` ``(default): Create the same view of pool configuration for all accel-ppp services``
-
-
-2024-01-15
-==========
-
-* :vytask:`T5944` ``(bug): "reboot in 1" not working``
-* :vytask:`T5936` ``(bug): [1.3.5 -> 1.4.0-RC1 Migration] OSPF Passive Interface Configuration Not Working Correctly``
-* :vytask:`T5247` ``(bug): the bug of the command "show interfaces system"``
-* :vytask:`T5901` ``(bug): Cloud-init and DHCP exit hook errors``
-* :vytask:`T2556` ``(bug): "show interfaces vrrp" does not return any interface``
-
-
-2024-01-12
-==========
-
-* :vytask:`T5925` ``(feature): Containers change systemd KillMode``
-* :vytask:`T5919` ``(bug): Firewall - opmode for ipv6``
-* :vytask:`T5306` ``(default): bgp config migration failed with v6only option configured with peer-group``
-* :vytask:`T3429` ``(bug): Hyper-V integration services not working on VyOS 1.4 (sagitta/current)``
-
-
-2024-01-11
-==========
-
-* :vytask:`T5713` ``(bug): strip-private doesn't strip string after "secret"``
-* :vytask:`T5532` ``(bug): After add system image the boot stuck and works again after the second reboot``
-* :vytask:`T5814` ``(bug): VyOS 1.3 to 1.4 LTS Firewall ruleset migration script breaks configuration``
-* :vytask:`T3191` ``(bug): PAM RADIUS freezing when accounting does not configured on RADIUS server``
-* :vytask:`T5917` ``(feature): Restore annotations of (running)/(default boot) in select image list``
-* :vytask:`T5916` ``(default): Added segment routing check for index size and SRGB size``
-* :vytask:`T5913` ``(feature): Allow for Peer-Groups in ipv4-labeled-unicast SAFI``
-
-
-2024-01-10
-==========
-
-* :vytask:`T5918` ``(bug): Verification problem for `set vpn ipsec interface```
-* :vytask:`T5911` ``(bug): pki: service update ignored if certificate name contains a hyphen (-)``
-* :vytask:`T5886` ``(feature): Add support for ACME protocol (LetsEncrypt)``
-* :vytask:`T5766` ``(bug): http: rewrite conf-mode script to get_config_dict()``
-* :vytask:`T4256` ``(feature): Display static DHCP server leases in the operational command output``
-* :vytask:`T5902` ``(bug): http: remove virtual-host configuration in webserver``
-* :vytask:`T3316` ``(feature): Use Kea DHCP(v6) instead of ISC DHCP(v6)``
-* :vytask:`T5791` ``(default): Update dynamic dns configuration path to be consistent with other areas of VyOS``
-* :vytask:`T5708` ``(default): Additional dynamic dns improvements to align with ddclient 3.11.1 release``
-* :vytask:`T5573` ``(bug): Fix ddclient cache entries``
-* :vytask:`T5614` ``(default): Add conntrack helper matching on firewall``
-
-
-2024-01-09
-==========
-
-* :vytask:`T5898` ``(bug): Replace partprobe with partx due to unable to install VyOS``
-* :vytask:`T5840` ``(feature): Upgrade Kea to 2.4.x``
-* :vytask:`T5838` ``(feature): Add Infiniband kernel modules``
-* :vytask:`T5785` ``(bug): API output of show container image broken``
-* :vytask:`T5249` ``(feature): Add rollback-soft feature to rollback without a reboot``
-* :vytask:`T2511` ``(feature): Migrate vyatta-op-quagga to new XML format``
-* :vytask:`T5905` ``(bug): pki: IPsec and VTI interface priority inversion when using x509 site-to-site peer``
-
-
-2024-01-08
-==========
-
-* :vytask:`T5888` ``(bug): Firewall upgrade fails because of icmpv6``
-* :vytask:`T5844` ``(bug): HTTPS API doesn't start without configured keys even when GraphQL authentication type is set to token``
-* :vytask:`T5904` ``(feature): op-mode: add "show ipv6 route vrf <name> <prefix>" command``
-
-
-2024-01-07
-==========
-
-* :vytask:`T5899` ``(feature): VyOS vm images use bookworm repo``
-* :vytask:`T5887` ``(feature): Upgrade Linux Kernel to 6.6.y (2023 LTS edition)``
-
-
-2024-01-06
-==========
-
-* :vytask:`T3214` ``(bug): OpenVPN IPv6 fixes``
-
-
-2024-01-05
-==========
-
-* :vytask:`T5894` ``(feature): Extend get_config_dict() with additional parameter with_pki that defaults to False``
-
-
-2024-01-03
-==========
-
-* :vytask:`T5880` ``(bug): verify_source_interface should not allow dynamic interfaces like ppp, l2tp, ipoe or sstpc client interfaces``
-* :vytask:`T5879` ``(bug): tunnel: sourceing from dynamic pppoe0 interface will fail on reboots``
-
-
-2024-01-02
-==========
-
-* :vytask:`T5885` ``(default): image-tools: relax restriction on image-name length from 32 to 64``
-
-
-2024-01-01
-==========
-
-* :vytask:`T5883` ``(bug): Preserve file ownership in /config subdirs on add system image``
-* :vytask:`T5474` ``(feature): Establish common file name pattern for XML conf mode commands``
-
-
-2023-12-30
-==========
-
-* :vytask:`T5875` ``(bug): login: removing and re-adding a user keeps the home directory but UID will change, thus SSH keys no longer work``
-* :vytask:`T5653` ``(feature): Command to display fingerprint``
-
-
-2023-12-29
-==========
-
-* :vytask:`T5829` ``(bug): Can't Add IPv6 Address to Containers``
-* :vytask:`T5852` ``(bug): Reboots fail with eapol WAN interface``
-* :vytask:`T5869` ``(bug): vyos.template.first_host_address() does not honor RFC4291 section 2.6.1``
-
-
-2023-12-28
-==========
-
-* :vytask:`T5827` ``(bug): image-tools: 'show system image' Command Not in Order``
-* :vytask:`T4163` ``(feature): [BMP-BGP]  Routing monitoring  feature``
-* :vytask:`T5867` ``(feature): Upgrade podman to Debian Trixie version 4.7.x``
-* :vytask:`T5866` ``(feature): Add op-mode command to restart IPv6 RA daemon``
-* :vytask:`T5861` ``(bug): Flavor build system fails with third-party packages``
-* :vytask:`T5854` ``(feature): Extend override-default script to allow embedded defaultValue settings``
-* :vytask:`T5792` ``(default): Upgrade ddclient 3.11.2 release``
-
-
-2023-12-25
-==========
-
-* :vytask:`T5855` ``(feature): Migrate "set service lldp snmp enable" -> `set service lldp snmp"``
-* :vytask:`T5837` ``(bug): vyos.configdict.node_changed does not return keys per adding``
-* :vytask:`T5856` ``(bug): SNMP service removal fails``
-
-
-2023-12-23
-==========
-
-* :vytask:`T5678` ``(feature): Improvements in PPPoE configuration``
-
-
-2023-12-22
-==========
-
-* :vytask:`T5804` ``(bug): SNAT "any" interface error``
-
-
-2023-12-21
-==========
-
-* :vytask:`T5807` ``(bug): NAT66  op-mode bugs``
-* :vytask:`T5778` ``(bug): The show dhcp server leases operation mode command does not work as expected``
-* :vytask:`T5775` ``(default): Migrated Firewall Global State Policy ineffective on latest firewall zone config``
-* :vytask:`T5676` ``(bug): NAT66 source rule with negation source/destination prefix causes TypeError``
-* :vytask:`T5637` ``(bug): Firewall default-action log``
-* :vytask:`T5796` ``(bug): Openconnect - HTTPS  security headers are missing``
-
-
-2023-12-20
-==========
-
-* :vytask:`T5823` ``(feature): Protocol BGP add default values for config dictionary``
-* :vytask:`T5798` ``(enhancment): reverse-proxy load-balancing service should support multiple certificates for frontend``
-
-
-2023-12-19
-==========
-
-* :vytask:`T5828` ``(default): Fix GRUB installation on arm64``
-
-
-2023-12-18
-==========
-
-* :vytask:`T5751` ``(feature): Adjust new image tools for non-interactive use``
-* :vytask:`T5831` ``(feature): show system image should reverse order by addition date``
-* :vytask:`T5825` ``(bug): image-tools: restore authentication on 'add system image'``
-* :vytask:`T5821` ``(bug): image-tools: restore vrf-aware 'add system image'``
-* :vytask:`T5819` ``(bug): Don't echo password on install image``
-* :vytask:`T5806` ``(bug): Clear old raid data on new install image``
-* :vytask:`T5789` ``(bug): image-tools should copy ssh host keys on image update``
-* :vytask:`T5758` ``(default): Restore scanning configs when live installing``
-
-
-2023-12-15
-==========
-
-* :vytask:`T5824` ``(bug): busybox cannot connect some websites from initramfs``
-* :vytask:`T5770` ``(bug): MACsec not encrypting``
-* :vytask:`T5803` ``(default): git/github: Adjust configuration for safe and baseline defaults``
-
-
-2023-12-14
-==========
-
-* :vytask:`T5773` ``(bug): Unable to load config via HTTP``
-* :vytask:`T5816` ``(bug): BGP Large Community List Validation Broken``
-* :vytask:`T5812` ``(bug): rollback check max revision number does not work``
-* :vytask:`T5749` ``(feature): Show MAC address VRF and MTU by default for "show interfaces"``
-* :vytask:`T5774` ``(bug): commit-archive to FTP server broken after update (VyOS 1.5-rolling)``
-* :vytask:`T5826` ``(default): Add dmicode as an explicit dependency``
-* :vytask:`T5793` ``(default): mdns-repeater: Cleanup avahi-daemon configuration in /etc``
-
-
-2023-12-13
-==========
-
-* :vytask:`T591` ``(feature): Support SRv6``
-
-
-2023-12-12
-==========
-
-* :vytask:`T5815` ``(enhancment): Add load_config module``
-
-
-2023-12-11
-==========
-
-* :vytask:`T5741` ``(bug): WAN Load Balancing failover route tables aren't created``
-
-
-2023-12-10
-==========
-
-* :vytask:`T5658` ``(default): Add VRF support for mtr``
-
-
-2023-12-09
-==========
-
-* :vytask:`T5808` ``(bug): op-mode: ipv6 ospfv3 graceful-restart description contains incorrect info``
-* :vytask:`T5802` ``(bug): ping (ip or hostname) interface <tab> produces error``
-* :vytask:`T5747` ``(feature): op-mode add MAC VRF and MTU for show interfaces summary``
-* :vytask:`T3983` ``(bug): show pki certificate Doesnt show x509 certificates``
-
-
-2023-12-08
-==========
-
-* :vytask:`T5782` ``(enhancment): Use a single config mode script for https and http-api``
-* :vytask:`T5768` ``(enhancment): Remove auxiliary http-api.conf for simplification of http-api config mode script``
-
-
-2023-12-04
-==========
-
-* :vytask:`T5769` ``(bug): VTI tunnels lose their v6 Link Local addresses when set down/up``
-
-
-2023-12-03
-==========
-
-* :vytask:`T5753` ``(feature): Add VXLAN vnifilter support``
-* :vytask:`T5759` ``(feature): Change VXLAN default MTU to 1500 bytes``
-
-
-2023-11-27
-==========
-
-* :vytask:`T5763` ``(bug): Fix imprecise check for remote file name in vyos-load-config.py``
-* :vytask:`T5783` ``(feature): frr: smoketests must notice any daemon crash``
-
-
-2023-11-26
-==========
-
-* :vytask:`T5760` ``(feature): DHCP client custom dhcp-options``
-* :vytask:`T2405` ``(feature): archive to GIT or other platform``
-
-
-2023-11-25
-==========
-
-* :vytask:`T5655` ``(bug): commit-archive: Ctrl+C should not eror out with stack trace, signal should be cought``
-
-
-2023-11-24
-==========
-
-* :vytask:`T5776` ``(feature): Enable VFIO support``
-* :vytask:`T5402` ``(bug): VRRP router with rfc3768-compatibility sends multiple ARP replies``
-
-
-2023-11-23
-==========
-
-* :vytask:`T5659` ``(bug): VPP cannot add interface to dataplane if it already has an address configured``
-
-
-2023-11-22
-==========
-
-* :vytask:`T5767` ``(feature): Add reboot and poweroff the system via API``
-* :vytask:`T5729` ``(bug): Firewall, nat and policy route - Switch to valueless``
-* :vytask:`T5681` ``(feature): Interface match - Simplified and unified cli``
-* :vytask:`T5643` ``(feature): NAT - Allow interface groups on nat rules``
-* :vytask:`T5616` ``(feature): Firewall mark - Add capabilities for matching firewall mark``
-* :vytask:`T5590` ``(default): Firewall "log enable" logs every packet``
-
-
-2023-11-21
-==========
-
-* :vytask:`T5762` ``(bug): http: api: smoketests fail as they can not establish IPv6 connection to uvicorn backend server``
-
-
-2023-11-18
-==========
-
-* :vytask:`T1354` ``(feature): Add support for VLAN-Aware bridges``
-
-
-2023-11-16
-==========
-
-* :vytask:`T5726` ``(bug): HTTPS API image cannot be updated``
-* :vytask:`T5738` ``(feature): Extend XML building blocks``
-* :vytask:`T5736` ``(feature): igmp: migrate "protocols igmp" to "protocols pim"``
-* :vytask:`T5733` ``(feature): pim(6): rewrite FRR PIM daemon configuration to get_config_dict() and add missing IGMP features``
-* :vytask:`T5689` ``(default): FRR 9.0.1 in VyOS current segfaults on show rpki prefix $prefix``
-* :vytask:`T5595` ``(feature): Multicast - PIM  bfd feature enable``
-
-
-2023-11-15
-==========
-
-* :vytask:`T5695` ``(feature): Build FRR with LUA scripts --enable-scripting option``
-* :vytask:`T5677` ``(bug): show lldp neighbors generates TypeError when neighbor has no `descr```
-* :vytask:`T5728` ``(bug): Improve compatibility between OpenVPN on VyOS 1.5 and OpenVPN Connect Client``
-* :vytask:`T5732` ``(bug): generate firewall rule-resequence drops geoip country-code from output``
-* :vytask:`T5661` ``(enhancment): Add show show ssh dynamic-protection attacker and show log ssh dynamic-protection``
-
-
-2023-11-13
-==========
-
-* :vytask:`T5698` ``(feature): EVPN ESI Multihoming``
-* :vytask:`T5563` ``(bug): container: Container environment variable cannot be set``
-* :vytask:`T5706` ``(bug): Systemd-udevd high CPU utilization for multiple dynamic ppp/l2tp/ipoe interfaces``
-
-
-2023-11-10
-==========
-
-* :vytask:`T5727` ``(bug): validator: Use native URL validator instead of regex-based validator``
-
-
-2023-11-08
-==========
-
-* :vytask:`T5720` ``(bug): PPPoE-server adding new interface does not work``
-* :vytask:`T5716` ``(bug): PPPoE-server shaper template bug down-limiter option does not rely on fwmark``
-* :vytask:`T5702` ``(feature): Add ability to set include_ifmib_iface_prefix and ifmib_max_num_ifaces  for SNMP``
-* :vytask:`T5693` ``(feature): Adding variable vyos_persistence_dir (and improve variable vyos_rootfs_dir)``
-* :vytask:`T5648` ``(bug): ldpd neighbour template errors``
-* :vytask:`T5564` ``(bug): Both show firewall group and show firewall summary fails``
-* :vytask:`T5559` ``(feature): Selective proxy-arp/proxy-ndp when doing SNAT/DNAT``
-* :vytask:`T5541` ``(bug): Zone-Based Firewalling in VyOS Sagitta 1.4``
-
-
-2023-11-07
-==========
-
-* :vytask:`T5586` ``(feature): Disable by default SNMP for Keepalived VRRP``
-
-
-2023-11-06
-==========
-
-* :vytask:`T5705` ``(bug): rsyslog - Not working when using facility=all``
-* :vytask:`T5704` ``(feature): PPPoE-server add max-starting option``
-* :vytask:`T5707` ``(bug): Wireguard peer public key update leaves redundant peers and breaks connectivity``
-
-
-2023-11-03
-==========
-
-* :vytask:`T5700` ``(bug): Monitoring telegraf deprecated plugins inputs outputs``
-
-
-2023-11-02
-==========
-
-* :vytask:`T5701` ``(feature): Update telegraf package``
-
-
-2023-11-01
-==========
-
-* :vytask:`T5690` ``(bug): Change to definition of environment variable 'vyos_rootfs_dir' is incorrect``
-
-
-2023-10-31
-==========
-
-* :vytask:`T5699` ``(feature): vxlan: migrate "external" CLI know to "parameters external"``
-* :vytask:`T5668` ``(feature): Disable VXLAN bridge learning and enable neigh_suppress when using EVPN``
-
-
-2023-10-27
-==========
-
-* :vytask:`T5663` ``(bug): pmacct package contains unwanted data``
-* :vytask:`T5652` ``(bug): Config migrate to image upgrade does not properly generate home directory``
-
-
-2023-10-26
-==========
-
-* :vytask:`T5683` ``(bug): reverse-proxy pki filenames mismatch``
-* :vytask:`T5600` ``(bug): Firewall - Remove or extend constraint on 'interface-name'``
-* :vytask:`T5598` ``(bug): unknown parameter 'nf_conntrack_helper' ignored``
-* :vytask:`T5571` ``(bug): Firewall does not delete networks from the table raw``
-* :vytask:`T4903` ``(bug): conntrack ignore does not suppotr IPv6 addresses``
-* :vytask:`T4309` ``(feature): Support network/address-groups and  ipv6-network/ipv6-address-groups in conntrack ignore``
-* :vytask:`T5594` ``(bug): VRRP - Error if using IPv6 Link Local as hello source address``
-* :vytask:`T5606` ``(feature): IPSec VPN: Allow multiple CAs certificates``
-* :vytask:`T5568` ``(default): Install image from live ISO always defaults boot to KVM entry``
-* :vytask:`T5558` ``(default): Update config test to check resulting migrations``
-
-
-2023-10-23
-==========
-
-* :vytask:`T5299` ``(bug): QoS shaper ceiling does not work``
-* :vytask:`T5667` ``(feature): BGP label-unicast - enable ecmp``
-
-
-2023-10-22
-==========
-
-* :vytask:`T5254` ``(bug): Modification of any interface setting sets MTU back to default when MTU has been inherited from a bond``
-* :vytask:`T5671` ``(feature): vxlan: change port to IANA assigned default port``
-
-
-2023-10-21
-==========
-
-* :vytask:`T5670` ``(bug): bridge: missing member interface validator``
-* :vytask:`T5617` ``(feature): Add an option to exclude single values to the numeric validator``
-
-
-2023-10-20
-==========
-
-* :vytask:`T5233` ``(bug): Op-mode flow-accounting netflow with disable-imt errors``
-* :vytask:`T5232` ``(bug): Flow-accounting uacctd.service cannot restart correctly``
-
-
-2023-10-19
-==========
-
-* :vytask:`T4913` ``(default): Rewrite the wireless op mode in the new style``
-
-
-2023-10-18
-==========
-
-* :vytask:`T5642` ``(bug): op cmd: generate tech-support archive: does not work``
-* :vytask:`T5521` ``(bug): Home owner directory changed to vyos for the user after reboot``
-
-
-2023-10-17
-==========
-
-* :vytask:`T5662` ``(bug): Fix indexing error in configdep script organization``
-* :vytask:`T5644` ``(bug): Firewall groups deletion can break config``
-
-
-2023-10-16
-==========
-
-* :vytask:`T5165` ``(feature): Policy local-route ability set protocol and port``
-
-
-2023-10-14
-==========
-
-* :vytask:`T5629` ``(bug): Policy local-route bug after migration to destination node address``
-
-
-2023-10-12
-==========
-
-* :vytask:`T5649` ``(bug): vyos-1x should generate XML cache after building command templates for less cryptic error on typo``
-
-
-2023-10-10
-==========
-
-* :vytask:`T5589` ``(bug): Nonstripped binaries exists in VyOS``
-* :vytask:`T5489` ``(feature): Change to BBR as TCP congestion control, or at least make it an config option``
-
-
-2023-10-08
-==========
-
-* :vytask:`T5630` ``(feature): pppoe: allow to specify MRU in addition to already configurable MTU``
-
-
-2023-10-06
-==========
-
-* :vytask:`T5576` ``(feature): Add bgp remove-private-as all option``
-
-
-2023-10-05
-==========
-
-* :vytask:`T4320` ``(default): Remove legacy version files in vyatta-cfg-system/cfg-version``
-
-
-2023-10-04
-==========
-
-* :vytask:`T5632` ``(feature): Add jq package to parse JSON files``
-* :vytask:`T3655` ``(bug): NAT  Problem with VRF``
-* :vytask:`T5585` ``(bug): Fix file access mode for dynamic dns configuration``
-
-
-2023-10-03
-==========
-
-* :vytask:`T5618` ``(bug): Flow-accounting crushes when IMT is enabled``
-* :vytask:`T5579` ``(bug): Log firewall - Wrong command after firewall refactor``
-* :vytask:`T5561` ``(feature): NAT - Inbound or outbound interface should not be mandatory``
-* :vytask:`T5626` ``(feature): Only select required Kernel CGROUP controllers``
-* :vytask:`T5628` ``(feature): op-mode: login: DeprecationWarning: 'spwd'``
-
-
-2023-09-28
-==========
-
-* :vytask:`T5596` ``(feature): bgp: add new features from FRR 9``
-* :vytask:`T5412` ``(feature): Add support for extending config-mode dependencies in supplemental package``
-
-
-2023-09-24
-==========
-
-* :vytask:`T5604` ``(bug): List of debian archives is out of date (non-free-firmware is missing)``
-* :vytask:`T5591` ``(feature): Cleanup of FRR daemons-file and various FRR fixes``
-
-
-2023-09-22
-==========
-
-* :vytask:`T5602` ``(feature): For reverse-proxy type of load-balancing feature, support "backup" option in backends configuration``
-* :vytask:`T5609` ``(enhancment): Add util to get drive device name from id``
-* :vytask:`T5608` ``(enhancment): Rewrite add/delete raid member to Python and remove from vyatta-op``
-* :vytask:`T5607` ``(bug): Adjust RAID smoketest for non-deterministic SCSI device probing``
-
-
-2023-09-20
-==========
-
-* :vytask:`T5588` ``(bug): Add kernel conntrack_bridge module``
-* :vytask:`T5241` ``(feature): Support veth interfaces to working with netns``
-* :vytask:`T5592` ``(feature): salt: upgrade minion to 3005.2``
-
-
-2023-09-19
-==========
-
-* :vytask:`T5597` ``(feature): isis: add new features from FRR 9.``
-
-
-2023-09-18
-==========
-
-* :vytask:`T5575` ``(bug): ARP/NDP table-size isnt set properly``
-
-
-2023-09-15
-==========
-
-* :vytask:`T5587` ``(bug): Firwall can not pass the smoketest``
-* :vytask:`T5581` ``(feature): Add "show ip nht" op-mode command (IPv4 nexthop tracking table)``
-
-
-2023-09-11
-==========
-
-* :vytask:`T5562` ``(bug): Smoketests fail for vyos:current (test_netns.py)``
-* :vytask:`T5551` ``(bug): Missing check for boot_configuration_complete raises error in vyos-save-config.py``
-* :vytask:`T5353` ``(bug): config-mgmt: normalize archive updates and commit log entries``
-
-
-2023-09-10
-==========
-
-* :vytask:`T5555` ``(bug): Fix timezone migrator (system 13-to-14)``
-
-
-2023-09-09
-==========
-
-* :vytask:`T5423` ``(bug): ipsec: no output for op-cmd "show vpn ike secrets"``
-
-
-2023-09-08
-==========
-
-* :vytask:`T5560` ``(bug): VyOS version in current branch should be changed from 1.4 to 1.5``
-
-
-2023-09-07
-==========
-
-* :vytask:`T5556` ``(bug): reboot now and  poweroff does not work``
-
-
-2023-09-06
-==========
-
-* :vytask:`T5548` ``(bug): HAProxy renders timeouts incorrectly``
diff --git a/docs/changelog/index.rst b/docs/changelog/index.rst
deleted file mode 100644
index 9467a716..00000000
--- a/docs/changelog/index.rst
+++ /dev/null
@@ -1,21 +0,0 @@
-.. _release-notes:
-
-
-#########
-Changelog
-#########
-
-
-.. toctree::
-   :maxdepth: 1
-   :includehidden:
-
-   1.5
-   1.4
-   1.3
-   1.2.6
-   1.2.5
-   1.2.4
-   1.2.3
-   1.2.2
-   1.2.1
diff --git a/docs/index.rst b/docs/index.rst
index 00db5dda..70b862b4 100644
--- a/docs/index.rst
+++ b/docs/index.rst
@@ -56,7 +56,6 @@ VyOS User Guide
 
    introducing/about
    introducing/history
-   changelog/index
 
 
 .. toctree::