github: Add PR labels to easily identify base branches

container: T5463: Fixes indentation to publish all port nodes

save-config: T4292: rewrite vyatta-save-config.pl to Python

T5506: Add link-local IPv6 address for container interfaces

Fix for add IPv6 link-local address for container interfaces

set container network NET01 prefix...

Configuring "set system ip protocol ospf|bgp route-map foo" and commit it
installs the route-map...

system-ip: T5449: add TCP MSS probing options

wifi: T5491: allow white-/blacklisting station MAC addresses for security

T5448: Add configuration host-name for zabbix-agent

T5472: nat redirect: allow redirection without defining redirected port

T5463: Container allow publish listen-addresses

This is a workaround for the priority inversion from T5492 ("CLI node priority
is not inversed o...

Helper functions can and will be re-use din different code places.

T5450: allow inverted matcher for interface and interface-group

Ability to publish multiple IP/IPv6 addresses for container

set container name c1 port web dest...

Ability to configure host-name for zabbix-agent

set service monitoring zabbix-agent host-name '...

T5447: Initial support for MACsec static keys

T5478: remove config-trap configuration parser in firewall

Station MAC address-based authentication means:

* 'allow' accept all clients except the one on ...

This fixes a CLI typo added in commit 77ef9f800 ("T5466: L3VPN label allocation
mode").

Commit 77ef9f800 ("T5466: L3VPN label allocation mode") added support for a new
CLI node that is...

his extends commit b9655365b ("login: T5490: add stricter validation for
home-directory path") b...

wireguard: T5409: Added 'set interfaces wireguard wgX threaded'

Provides a per-device control to enable/disable the threaded mode for all the
napi instances of ...

Using threaded as CLI node is a very deep term used by kernel threads. To make
this more underst...

T5488: Set correct priority -300 for conntrack entries

For conntrack ignore priority must be less then -200

This reverts commit 9afcea251bdc895ffd49cb11f455fd636fdf817b

A DHCP relese must also be origina...

T5466: L3VPN label allocation mode

netplug: T5476: rewrite dhclient helper from Perl -> Python

T5271: allow OpenVPN peer-fingerprint to be used instead of a CA in site-to-site mode

There are two hooks called for bridge, ethernet and bond interfaces if the
link-state changes up...

in OpenVPN site-to-site mode

The condition is useless since OpenVPN simply switches to ECDH in all modes
when the classic DH ...

Testcases after the bugfix in commit 011697508 ("T5467: removing ospf(v3) or
isis interface in V...

This fixes the smoketest after the change in commit e7d7bd20b ("openvpn: T5270:
do not require c...

utils: T5410: Extended supported types in `convert_data()`

To reproduce:

set vrf name red table 2000
set vrf name red protocols ospf interface eth1 area 0...

This is only a cosmetic change so that the default value is properly retrieved
from the defaultV...

T5160: Firewall refactor

T5448: Move zabbix-agent to node monitoring

When migration from 1.3 to 1.4 and a user hat the following configured:

options {
interface...

Using variable ${vyos_rootfs_dir} instead of wildcard for both restore_if_missing_preconfig
and...

Move 'service zabbix-agent'
=> 'service monitoring zabbix-agent'

T5434: remove reamining calls to incorrect defaults

openvpn: T5270: do not require classic DH params in any mode