The current calculation `r2q` is wrong as it uses `Floor division`
but expecting `division`
This...

image-tools: T6016: wait for umount in cleanup function

T5921: Fix OpenConnect verify for local users

Fix verify error for the VPN OpenConnect configuration with
local authentication and without any...

vpn: T5926: IPSEC does not apply after l2tp configuration was changed

added dependency between l...

op-mode:T6015:Fix for charon file generated by ipsec debug script (backport #2942)

(cherry picked from commit 0c9c496961dc88110da53943a14dd88086ea920d)

rpki: T6011: known-hosts-file is no longer supported by FRR

init: T2044: always start/stop rpki during system boot

T6018: adjust smoketest for update to FastAPI web framework

ipsec: T5998: add replay-windows setting

The replay_window for child SA will always be 32 (hence enabled). Add a CLI node
to explicitly c...

configdict: T5894: preserve old behavior when dealing with PKI

Commit b152b5202 ("configdict: T5894: add get_config_dict() flag with_pki")
added the generic PK...

qos: T5848: Add triple-isolate option to CAKE policy config

dhcpv6: T3771: Installation of routes for delegated prefixes, add excluded-prefix to PD

container: T5955: add uid/gid settings

T5971: Rewritten ppp options in accel-ppp services

T4839: firewall: Add dynamic address group in firewall configuration

ddclient: T5966: Adjust dynamic dns config address subpath

dns forwarding: T5687: Implement ECS settings for PowerDNS recursor

Commit eb76729d6324 ("dns forwarding: T5687: Implement ECS settings for PowerDNS
recursor") adde...

Completion help suggests only IPv4 and IPv6 prefixes are supported, thus add a
proper constraint...

T5974: Fix QoS shape bandwidth and ceil calculation for default

T5941: Migration policy delete orphaned interface policy

T5941: Migration QoS delete orphaned interface traffic-policy

bgp: T5930: Denied using rt vpn 'export/import' with 'both' together

Denied using command 'route-target vpn export/import'
with 'both' together in bgp configuration.

T5977: firewall: remove ipsec options in output chain rule definition…

T5254: Deleted extra file git

Deleted extra file git.

reverse-proxy: T5999: Allow root for exact match in backend rule URL

Fix option descriptions

rpki: T6003: Add 'show rpki as-number' and 'show rpki prefix'

vrf: T5973: multiple bugfixes and improvements

https: T6000: fix error in migration of path https certbot

Rewritten 'ppp-options' to the same view in all accel-ppp services.
Adding IPv6 support to PPTP.

image-tools: T5988: validate image name in add_image

remote: T5994: fix typo in check_storage for Ftp class

Add missing name validation in add_image, and fix typo in error msg
string.

* Fix route deletion errors when interface is missing. Clarify variable names.

T5817: Fix for show openvpn server (backport #2619)

In some cases we can get error:
```
Traceback (most recent call last):
File "/usr/libexec/vyos...

image-tools: T5983: fix regression in prune_vyos_versions

We can get an orphaned interface traffic-policy when the traffic-policy
name is removed from the...

We can get orphaned interface policy when the policy name was
removed from the interface but the...

system-option: T5979: Add configurable kernel boot options

bfd: T5967: add minimum-ttl option

* set protocols bfd peer <x.x.x.x> minimum-ttl <1-254>
* set protocols bfd profile <name> minimu...

The default `bandwidth` and `ceiling` should calculate values
based on <tag> bandwidth but curre...

ethernet: T5978: hw-tc-offload does not actually get enabled on the NIC

Typo (missaligned -/_) in the code causes hw-tc-offload to never be enabled in
the underlaying h...

dhcp: T5787: Allow disabled duplicates on static-mapping

A code path was missing to check if only priority is available in the result of
"ip --json -4 ru...

There is no need to add and remove this table during runtime - it can lurk
in the standard firew...

This prevents the following error when configuring the first VRF:
sysctl: cannot stat /proc/sys/...

op-mode: T5969: list multicast group membership

ethernet: T4638: add smoketests verifying there are no stale VLAN interfaces left

T5957: fix removal of interface in firewall rules.

[email protected]:~$ show ip multicast group interface eth0.201
Interface Family Address
------...

sflow: T5968: add VRF support

Add support to run hsflowd in a dedicated (e.g. management) VRF.

Command will be "set system sf...

Since, we don't have op-mode operation for 'dns dynamic' anymore, we need
to add a top level pro...

Update op-mode for dynamic dns to standardize on `vyos.opmode`. All
methods of `op_mode/dns_dyna...

Modify the dynamic dns configuration 'address' subpath for better
clarity on how the address is ...

dns: T5959: Streamline dns forwarding service

For example, port 5353 is reserved for multicast DNS, this means tests
will fail if the host run...

Streamline configuration and operation of dns forwarding service in
following ways:

- Remove `d...

This extends commit 7ba47f027 ("ethernet: T4638: deleting parent interface does
not delete under...

ntp: T5692: add support to configure leap second behavior