1 files changed, 215 insertions, 2 deletions
diff --git a/docs/changelog/1.4.rst b/docs/changelog/1.4.rst
index a388ab4f..a601dbe2 100644
--- a/docs/changelog/1.4.rst
+++ b/docs/changelog/1.4.rst
@@ -8,6 +8,221 @@
    _ext/releasenotes.py
 
 
+2023-09-11
+==========
+
+* :vytask:`T5567` ``(bug): vyos-1x: webproxy: maximum-object-size allowed ranges not in sync with Equuleus``
+* :vytask:`T5551` ``(bug): Missing check for boot_configuration_complete raises error in vyos-save-config.py``
+* :vytask:`T5353` ``(bug): config-mgmt: normalize archive updates and commit log entries``
+* :vytask:`T3424` ``(default): PPPoE IA-PD doesn't work in VRF``
+* :vytask:`T2773` ``(feature): EIGRP support for VRF``
+
+
+2023-09-10
+==========
+
+* :vytask:`T5565` ``(bug): Builds as vyos-999-timestamp instead of vyos-1.4-rolling-timestamp``
+* :vytask:`T5555` ``(bug): Fix timezone migrator (system 13-to-14)``
+* :vytask:`T5529` ``(bug): Missing symbolic link in linux-firmware package.``
+
+
+2023-09-09
+==========
+
+* :vytask:`T5540` ``(bug): vyos-1x: Wrong VHT configuration for WiFi 802.11ac``
+* :vytask:`T5423` ``(bug): ipsec: no output for op-cmd "show vpn ike secrets"``
+* :vytask:`T3700` ``(feature): Support VLAN tunnel mapping of VLAN aware bridges``
+
+
+2023-09-08
+==========
+
+* :vytask:`T5502` ``(bug): Firewall - wrong parser for inbound and/or outbound interface``
+* :vytask:`T5460` ``(feature): Firewall - remove config-trap``
+* :vytask:`T5450` ``(feature): Firewall interface group - Allow inverted matcher``
+* :vytask:`T4426` ``(default): Add arpwatch to the image``
+* :vytask:`T4356` ``(bug): DHCP v6 client only supports single interface configuration``
+
+
+2023-09-07
+==========
+
+* :vytask:`T5489` ``(feature): Change to BBR as TCP congestion control, or at least make it an config option``
+* :vytask:`T5510` ``(feature): Shrink imagesize and improve read performance by changing mksquashfs syntax``
+
+
+2023-09-06
+==========
+
+* :vytask:`T5542` ``(bug): ipoe-server: external-dhcp(dhcp-relay) not woking / not implemented``
+* :vytask:`T5548` ``(bug): HAProxy renders timeouts incorrectly``
+* :vytask:`T5544` ``(feature): Allow CAP_SYS_MODULE to be set on containers``
+
+
+2023-09-05
+==========
+
+* :vytask:`T5524` ``(feature): Add config directory to liveCD``
+* :vytask:`T5519` ``(bug): Function `call` sometimes hangs``
+* :vytask:`T5508` ``(bug): Configuration Migration Fails to New Netfilter Firewall Syntax``
+* :vytask:`T5495` ``(feature): Enable snmp module also for frr/ldpd``
+* :vytask:`T2958` ``(bug): DHCP server doesn't work from a live CD``
+* :vytask:`T5428` ``(bug): dhcp: client renewal fails when running inside VRF``
+
+
+2023-09-04
+==========
+
+* :vytask:`T5536` ``(bug): show dhcp client leases caues No module named 'vyos.validate'``
+* :vytask:`T5506` ``(bug): Container bridge interfaces do not have a link-local address``
+
+
+2023-09-03
+==========
+
+* :vytask:`T5538` ``(bug): Change order within variable lb_config_tmpl to fit order of manpage and fix some typos``
+* :vytask:`T4612` ``(feature): Support arbitrary netmasks in firewall rules``
+
+
+2023-08-31
+==========
+
+* :vytask:`T5190` ``(feature): Cloud-Init cannot fetch Meta-data on machines where the main Ethernet interface is not eth0``
+* :vytask:`T4895` ``(bug): Tag nodes are overwritten when configured by Cloud-Init from User-Data``
+* :vytask:`T4776` ``(bug): NVME storage is not detected properly during installation``
+* :vytask:`T5531` ``(feature): Containers add label option``
+* :vytask:`T5525` ``(default): Change dev.packages.vyos.net repo to rolling-packages.vyos.net vyos-build:current uses``
+
+
+2023-08-30
+==========
+
+* :vytask:`T4933` ``(default): Malformed lines cause vyos.util.colon_separated_to_dict fail with a nondescript error``
+* :vytask:`T4790` ``(bug): RADIUS login does not work if sum of timeouts more than 50s``
+* :vytask:`T4113` ``(bug): Incorrect GRUB configuration parsing``
+* :vytask:`T5520` ``(bug): Likely source of corruption on system update exposed by change in coreutils for Bookworm``
+* :vytask:`T4151` ``(feature): IPV6 local PBR Support``
+* :vytask:`T4485` ``(default): OpenVPN: Allow multiple CAs certificates``
+
+
+2023-08-29
+==========
+
+* :vytask:`T3940` ``(bug): DHCP client does not remove IP address when stopped by the 02-vyos-stopdhclient hook``
+* :vytask:`T3713` ``(default): Create a meta-package for user utilities``
+* :vytask:`T3339` ``(bug): Cloud-Init domain search setting not applied``
+* :vytask:`T3577` ``(bug): Generating vpn x509 key pair fails with command not found``
+
+
+2023-08-28
+==========
+
+* :vytask:`T4745` ``(bug): CLI TAB issue with values with '-' at the beginning in conf mode``
+* :vytask:`T5472` ``(bug): NAT redirect should not require port``
+
+
+2023-08-27
+==========
+
+* :vytask:`T4759` ``(bug): domain-group on policy route not working``
+* :vytask:`T1097` ``(feature): Make firewall groups work everywhere that's appropropriate``
+
+
+2023-08-26
+==========
+
+* :vytask:`T5039` ``(bug): Can't add new local user``
+* :vytask:`T5023` ``(bug): PKI commit fails to update dependents``
+* :vytask:`T4512` ``(feature): enable-default-log on zone-policy``
+* :vytask:`T5003` ``(default): Upgrade base system to Debian 12 "Bookworm"``
+
+
+2023-08-25
+==========
+
+* :vytask:`T5468` ``(feature): Remove unused manpages to free up space``
+* :vytask:`T5463` ``(feature): Containers allow publish  IPv6  address port``
+* :vytask:`T4412` ``(bug): commit archive: reboot not working with sftp``
+* :vytask:`T3702` ``(feature): Policy: Allow routing by fwmark``
+* :vytask:`T3536` ``(default): Unable to list all available routes``
+
+
+2023-08-24
+==========
+
+* :vytask:`T5448` ``(feature): Add service zabbix-agent``
+* :vytask:`T5006` ``(bug): Http api segfault with concurrent requests``
+* :vytask:`T5505` ``(feature): system: zebra route-map is not removed from FRR``
+* :vytask:`T5305` ``(bug): REST API configure operation should not be defined as async``
+* :vytask:`T4292` ``(feature): Rewrite vyatta-save-config.pl to Python``
+
+
+2023-08-23
+==========
+
+* :vytask:`T5478` ``(bug): Cannot configure resolver-cache options for firewall``
+* :vytask:`T5466` ``(feature): L3VPN - label allocation mode``
+* :vytask:`T5453` ``(bug): Fix nat66 - broken after load-balance was introduced in nat``
+* :vytask:`T5446` ``(bug): bgp: validity check for bestpath med option``
+* :vytask:`T5500` ``(feature): Minor fixes to configtree render``
+* :vytask:`T5469` ``(default): Incorrect dependency set in the openvpn-dco package when building VyOS for arm64``
+* :vytask:`T5387` ``(feature): dhcp6c: add a no release option``
+* :vytask:`T5491` ``(feature): Hostapd - AP-Mode - allow white-/blacklisting of Clients``
+* :vytask:`T4889` ``(default): Add nftables NAT REDIRECT [to localhost] to CLI``
+
+
+2023-08-22
+==========
+
+* :vytask:`T5407` ``(bug): Static routes pointed to container networks fail to persist after reboot``
+
+
+2023-08-20
+==========
+
+* :vytask:`T5470` ``(bug): wlan: can not disable interface if SSID is not configured``
+
+
+2023-08-18
+==========
+
+* :vytask:`T5488` ``(bug): System conntrack ignore does not take any effect``
+
+
+2023-08-17
+==========
+
+* :vytask:`T4202` ``(bug): NFT: Zone policies fail to apply when "l2tp+" is in the interface list``
+* :vytask:`T5409` ``(feature): Add 'set interfaces wireguard wgX threaded'``
+* :vytask:`T5476` ``(feature): netplug: replace Perl helper scripts with a Python equivalent``
+* :vytask:`T5223` ``(bug): tunnel key doesn't clear``
+* :vytask:`T5490` ``(feature): login: add missing regex for home direcotry and radius server key``
+
+
+2023-08-16
+==========
+
+* :vytask:`T5483` ``(bug): Residual dhcp-server test file causing zabbix-agent smoketest to fail``
+
+
+2023-08-15
+==========
+
+* :vytask:`T5293` ``(feature): Support for Floating Rules (Global Firewall-Rules that are automatically applied before all other Zone Rules)``
+* :vytask:`T5273` ``(default): Add op mode commands for displaying certificate details and fingerprints``
+* :vytask:`T5270` ``(default): Make OpenVPN `tls dh-params` optional``
+
+
+2023-08-14
+==========
+
+* :vytask:`T5477` ``(bug): op-mode pki.py should use Config for defaults``
+* :vytask:`T5461` ``(feature): Improve rootfs directory variable``
+* :vytask:`T5457` ``(feature): Add environmental variable pointing to current rootfs directory``
+* :vytask:`T5440` ``(bug): Restore pre/postconfig scripts if user deleted them``
+* :vytask:`T5436` ``(bug): vyos-preconfig-bootup.script is missing``
+
+
 2023-08-12
 ==========
 
@@ -52,7 +267,6 @@
 ==========
 
 * :vytask:`T5420` ``(feature): nftables - upgrade to latest 1.0.8``
-* :vytask:`T3424` ``(default): PPPoE IA-PD doesn't work in VRF``
 * :vytask:`T5445` ``(feature): dyndns: add possibility to specify update interval (timeout)``
 
 
@@ -3225,7 +3439,6 @@
 ==========
 
 * :vytask:`T3402` ``(feature): Add VyOS programming library for operational level commands``
-* :vytask:`T3275` ``(default): Disable conntrack helpers by default``
 
 
 2021-09-10