1 files changed, 219 insertions, 2 deletions
diff --git a/docs/changelog/1.4.rst b/docs/changelog/1.4.rst
index c654199b..215a22e2 100644
--- a/docs/changelog/1.4.rst
+++ b/docs/changelog/1.4.rst
@@ -8,6 +8,225 @@
    _ext/releasenotes.py
 
 
+2023-09-24
+==========
+
+* :vytask:`T5511` ``(feature): Cleanup of unused directories (and files) in order to shrink image-size``
+
+
+2023-09-23
+==========
+
+* :vytask:`T5518` ``(default): Add MLD protocol support``
+
+
+2023-09-22
+==========
+
+* :vytask:`T5602` ``(feature): For reverse-proxy type of load-balancing feature, support "backup" option in backends configuration``
+* :vytask:`T5609` ``(enhancment): Add util to get drive device name from id``
+* :vytask:`T5608` ``(enhancment): Rewrite add/delete raid member to Python and remove from vyatta-op``
+* :vytask:`T5607` ``(bug): Adjust RAID smoketest for non-deterministic SCSI device probing``
+
+
+2023-09-20
+==========
+
+* :vytask:`T5588` ``(bug): Add kernel conntrack_bridge module``
+* :vytask:`T5271` ``(default): Add support for peer-fingerprint to OpenVPN``
+* :vytask:`T5241` ``(feature): Support veth interfaces to working with netns``
+* :vytask:`T5238` ``(default): interface virtual-etherne - error when it doesn't use a peer``
+* :vytask:`T5592` ``(feature): salt: upgrade minion to 3005.2``
+
+
+2023-09-19
+==========
+
+* :vytask:`T5597` ``(feature): isis: add new features from FRR 9.``
+* :vytask:`T4284` ``(feature): QoS: rewrite to XML and Python``
+
+
+2023-09-18
+==========
+
+* :vytask:`T5419` ``(feature): Software/Hardware fastpath with nftables flowtable``
+
+
+2023-09-15
+==========
+
+* :vytask:`T5581` ``(feature): Add "show ip nht" op-mode command (IPv4 nexthop tracking table)``
+
+
+2023-09-11
+==========
+
+* :vytask:`T5567` ``(bug): vyos-1x: webproxy: maximum-object-size allowed ranges not in sync with Equuleus``
+* :vytask:`T5551` ``(bug): Missing check for boot_configuration_complete raises error in vyos-save-config.py``
+* :vytask:`T5353` ``(bug): config-mgmt: normalize archive updates and commit log entries``
+* :vytask:`T3424` ``(default): PPPoE IA-PD doesn't work in VRF``
+* :vytask:`T2773` ``(feature): EIGRP support for VRF``
+
+
+2023-09-10
+==========
+
+* :vytask:`T5565` ``(bug): Builds as vyos-999-timestamp instead of vyos-1.4-rolling-timestamp``
+* :vytask:`T5555` ``(bug): Fix timezone migrator (system 13-to-14)``
+* :vytask:`T5529` ``(bug): Missing symbolic link in linux-firmware package.``
+
+
+2023-09-09
+==========
+
+* :vytask:`T5540` ``(bug): vyos-1x: Wrong VHT configuration for WiFi 802.11ac``
+* :vytask:`T5423` ``(bug): ipsec: no output for op-cmd "show vpn ike secrets"``
+* :vytask:`T3700` ``(feature): Support VLAN tunnel mapping of VLAN aware bridges``
+
+
+2023-09-08
+==========
+
+* :vytask:`T5502` ``(bug): Firewall - wrong parser for inbound and/or outbound interface``
+* :vytask:`T5460` ``(feature): Firewall - remove config-trap``
+* :vytask:`T5450` ``(feature): Firewall interface group - Allow inverted matcher``
+* :vytask:`T4426` ``(default): Add arpwatch to the image``
+* :vytask:`T4356` ``(bug): DHCP v6 client only supports single interface configuration``
+
+
+2023-09-07
+==========
+
+* :vytask:`T5489` ``(feature): Change to BBR as TCP congestion control, or at least make it an config option``
+* :vytask:`T5510` ``(feature): Shrink imagesize and improve read performance by changing mksquashfs syntax``
+
+
+2023-09-06
+==========
+
+* :vytask:`T5542` ``(bug): ipoe-server: external-dhcp(dhcp-relay) not woking / not implemented``
+* :vytask:`T5548` ``(bug): HAProxy renders timeouts incorrectly``
+* :vytask:`T5544` ``(feature): Allow CAP_SYS_MODULE to be set on containers``
+
+
+2023-09-05
+==========
+
+* :vytask:`T5524` ``(feature): Add config directory to liveCD``
+* :vytask:`T5519` ``(bug): Function `call` sometimes hangs``
+* :vytask:`T5508` ``(bug): Configuration Migration Fails to New Netfilter Firewall Syntax``
+* :vytask:`T5495` ``(feature): Enable snmp module also for frr/ldpd``
+* :vytask:`T2958` ``(bug): DHCP server doesn't work from a live CD``
+* :vytask:`T5428` ``(bug): dhcp: client renewal fails when running inside VRF``
+
+
+2023-09-04
+==========
+
+* :vytask:`T5536` ``(bug): show dhcp client leases caues No module named 'vyos.validate'``
+* :vytask:`T5506` ``(bug): Container bridge interfaces do not have a link-local address``
+
+
+2023-09-03
+==========
+
+* :vytask:`T5538` ``(bug): Change order within variable lb_config_tmpl to fit order of manpage and fix some typos``
+* :vytask:`T4612` ``(feature): Support arbitrary netmasks in firewall rules``
+
+
+2023-08-31
+==========
+
+* :vytask:`T5190` ``(feature): Cloud-Init cannot fetch Meta-data on machines where the main Ethernet interface is not eth0``
+* :vytask:`T4895` ``(bug): Tag nodes are overwritten when configured by Cloud-Init from User-Data``
+* :vytask:`T4776` ``(bug): NVME storage is not detected properly during installation``
+* :vytask:`T5531` ``(feature): Containers add label option``
+* :vytask:`T5525` ``(default): Change dev.packages.vyos.net repo to rolling-packages.vyos.net vyos-build:current uses``
+
+
+2023-08-30
+==========
+
+* :vytask:`T4933` ``(default): Malformed lines cause vyos.util.colon_separated_to_dict fail with a nondescript error``
+* :vytask:`T4790` ``(bug): RADIUS login does not work if sum of timeouts more than 50s``
+* :vytask:`T4113` ``(bug): Incorrect GRUB configuration parsing``
+* :vytask:`T5520` ``(bug): Likely source of corruption on system update exposed by change in coreutils for Bookworm``
+* :vytask:`T4151` ``(feature): IPV6 local PBR Support``
+* :vytask:`T4485` ``(default): OpenVPN: Allow multiple CAs certificates``
+
+
+2023-08-29
+==========
+
+* :vytask:`T3940` ``(bug): DHCP client does not remove IP address when stopped by the 02-vyos-stopdhclient hook``
+* :vytask:`T3713` ``(default): Create a meta-package for user utilities``
+* :vytask:`T3339` ``(bug): Cloud-Init domain search setting not applied``
+* :vytask:`T3577` ``(bug): Generating vpn x509 key pair fails with command not found``
+
+
+2023-08-28
+==========
+
+* :vytask:`T4745` ``(bug): CLI TAB issue with values with '-' at the beginning in conf mode``
+* :vytask:`T5472` ``(bug): NAT redirect should not require port``
+
+
+2023-08-27
+==========
+
+* :vytask:`T4759` ``(bug): domain-group on policy route not working``
+* :vytask:`T1097` ``(feature): Make firewall groups work everywhere that's appropropriate``
+
+
+2023-08-26
+==========
+
+* :vytask:`T5039` ``(bug): Can't add new local user``
+* :vytask:`T5023` ``(bug): PKI commit fails to update dependents``
+* :vytask:`T4512` ``(feature): enable-default-log on zone-policy``
+* :vytask:`T5003` ``(default): Upgrade base system to Debian 12 "Bookworm"``
+
+
+2023-08-25
+==========
+
+* :vytask:`T5468` ``(feature): Remove unused manpages to free up space``
+* :vytask:`T5463` ``(feature): Containers allow publish  IPv6  address port``
+* :vytask:`T4412` ``(bug): commit archive: reboot not working with sftp``
+* :vytask:`T3702` ``(feature): Policy: Allow routing by fwmark``
+* :vytask:`T3536` ``(default): Unable to list all available routes``
+
+
+2023-08-24
+==========
+
+* :vytask:`T5448` ``(feature): Add service zabbix-agent``
+* :vytask:`T5006` ``(bug): Http api segfault with concurrent requests``
+* :vytask:`T5505` ``(feature): system: zebra route-map is not removed from FRR``
+* :vytask:`T5305` ``(bug): REST API configure operation should not be defined as async``
+* :vytask:`T4292` ``(feature): Rewrite vyatta-save-config.pl to Python``
+
+
+2023-08-23
+==========
+
+* :vytask:`T5478` ``(bug): Cannot configure resolver-cache options for firewall``
+* :vytask:`T5466` ``(feature): L3VPN - label allocation mode``
+* :vytask:`T5453` ``(bug): Fix nat66 - broken after load-balance was introduced in nat``
+* :vytask:`T5446` ``(bug): bgp: validity check for bestpath med option``
+* :vytask:`T5500` ``(feature): Minor fixes to configtree render``
+* :vytask:`T5469` ``(default): Incorrect dependency set in the openvpn-dco package when building VyOS for arm64``
+* :vytask:`T5387` ``(feature): dhcp6c: add a no release option``
+* :vytask:`T5491` ``(feature): Hostapd - AP-Mode - allow white-/blacklisting of Clients``
+* :vytask:`T4889` ``(default): Add nftables NAT REDIRECT [to localhost] to CLI``
+
+
+2023-08-22
+==========
+
+* :vytask:`T5407` ``(bug): Static routes pointed to container networks fail to persist after reboot``
+
+
 2023-08-20
 ==========
 
@@ -98,7 +317,6 @@
 ==========
 
 * :vytask:`T5420` ``(feature): nftables - upgrade to latest 1.0.8``
-* :vytask:`T3424` ``(default): PPPoE IA-PD doesn't work in VRF``
 * :vytask:`T5445` ``(feature): dyndns: add possibility to specify update interval (timeout)``
 
 
@@ -3271,7 +3489,6 @@
 ==========
 
 * :vytask:`T3402` ``(feature): Add VyOS programming library for operational level commands``
-* :vytask:`T3275` ``(default): Disable conntrack helpers by default``
 
 
 2021-09-10