Rename chain level defaults log option from `enable-default-log` to
`default-log` for consistency.

ddclient: T5144: Warn against configuration with broken IP lookup service

We always enable HTTPS in ddclient configuration, however
`http://checkip.dyndns.org` is HTTP on...

ddclient: T5144: Migrate web-options url to stricter format

ethernet: T5566: disable energy efficient ethernet (EEE) for interfaces

VyOS is a routing (packet pushing) platform, thus supporting EEE which
potentially causes issues...

snmp: T5855: migrate "set service lldp snmp enable" to "set service lldp snmp"

Legacy ddclient allowed arbitrary URLs in web-options, but the new
has stricter validations. App...

configdict: T5837: add support to return added nodes when calling node_changed()

snmp: 5856: fix service removal error

When deleting SNMP from CLI the 'delete' key was not honored in the config
dictionary, leading t...

In the past, node_changed() suggested it would also return nodes that got added
(function commen...

node_changed() will return a list of changed keys under "path". We are not
always interested wha...

T160: NAT64 add match firewall mark feature

Match mark allows to use firewall marks of packet to use
a specific pool

Example of instance co...

xml: T5854: clear empty paths left by embedded override of defaultValue

T5840: Add override for systemd kea-ctrl-agent.service

After update KEA to 2.4.x in the bf04cd8fea44d375fb7d93d75a1f31c220730c88
there is a file that e...

Also, have the smoketest start with a clean CLI instance.

Reinstate support for hostname in DHCP reservation. Having `hostname` in
allows for server-side ...

Updated image_installer.py to try and validate image with all
minisign public keys in /usr/shar...

srv6: T591: enable SR enabled packet processing on defined interfaces

T2898: add ndp-proxy service

dhcp: T5846: Ensure DUID regex range is bound

The DUID regex was missing a lower bound, which could cause it not to
match when it should.

We ...

frr: T4020: re-enable watchfrr in config as it is always running

dhcp: T5846: Fix include path

dhcp: T5846: Refactor and simplify DUID definition

Refactor DUID XML definition in conf-mode to be reusable. Additionally, remove
explicit call to ...

VyOS CLI command
set service ndp-proxy interface eth0 prefix 2001:db8::/64 mode 'static'

Will...

The Linux Kernel needs to be told if IPv6 SR enabled packets whether should be
processed or not....

Enable/Disable VRF strict mode, when net.vrf.strict_mode=0 (default) it is
possible to associate...

Allow the HTTPS API server to start without any configured keys when GraphQL JWT auth is configured

and use only PAM auth and JWT

when no API keys are set

Rewritten L2TP to get_config_dict
Rewritten L2TP xml to accel-ppp patterns
Migrated 'idle' to 'p...

T5828: fix grub installation on arm64-efi machines

configdep: T5836: add boolean check whether script called as dependency

This reverts commit 7036c761e74bcd48e3ba714dec4545208ee0e313.

image-tools: T5831: show system image reverse ordered by date

Since the migration of GRUB handling to vyos-1x, the grub install
sequence has hardcoded referen...

T5249: Add rollback-soft feature

dhcp: T3316: Adjust dhcp-run script to align with kea hooks

dhcp: T3316: Kea DHCP and DHCPv6 fixes

The hook arguments passed to `on-dhcp-event.sh` have changed in Kea.
Adjust the script to align ...

* Move Kea socket permission change on-demand and speed up conf scripts
* Fix issue with DHCP re...

ddclient: T5144,T5791: Fix migration to avoid config name conflict

ocserv: T5796: add CLI knob "http-security-headers"

OCserv manual recommended HTTP headers tobe included in the configuration.

(cherry picked from ...

Since `service dns dynamic address <address> service <service> ...`
changed to `service dns dyna...

frr: T4020: add option to define number of open file descriptors

This allows the operator to control the number of open file descriptors each
daemon is allowed t...

T5823: Add recursive_defaults for BGP get_config dictionary

Add recursive_defaults values for BGP "get_config" dictionary.

T5749: Add a more scrict search for get_vrf method

The current implementation is wrong as it searches `master` in the
iproute2 JSON output. It is a...

T4163: Add BGP Monitoring Protocol BMP feature

T5798: load-balancing revese-proxy add multiple SSL certificates

Add BMP feature.
BMP (BGP Monitoring Protocol, RFC 7854) is used to send monitoring
data from BG...

image-tools: T5825: restore authentication for add system image

T5827: made show system image alphabetical

image-tools: T5821: restore vrf-aware add system image

T5826: ensure dmidecode is installed as a dependency of vyos-1x

dmicode is used in the "show hardware dmi" and to derive
synthetic MAC addresses (see python/vyo...

image-tools: T5806: clear previous raid configs on install

Enforce constraint on Dynamic DNS service name to be alphanumeric
(including hyphens and undersc...

When migrating from `service dns dynamic interface <interface> ...` to
`service dns dynamic addr...

T5774: fix regression in remote.upload

SRv6: T591: initial implementation to support locator definition

ddclient: T5791: Adjust warning messages, minor refactor and smoketest updates

image-tools: T5819: do not echo password on image install

dhcp: T3316: Fix raw op-mode lease output

validator: T5816: large community validator should only allos character set and basic format

T5804: nat: remove inbound|outbound interface from old configuration when it was set to <any>.