Table of Contents

OpenWrt 22.03.0-rc4 Changelog

This changelog lists all commits done in OpenWrt since the v22.03.0-rc1 tag, grouped by subsystem. The changes are chronologically ordered from top to bottom and cover the Git repository history until the tagging of the 22.03.0-rc4 release.

See also the release notes that provide a more accessible overview of the main changes in 22.03.0-rc4.

Build System / Buildroot (11 changes)

fbd9605 build: don't remove BUILD_LOG_DIR in _clean (+1,-1)
e9c14fa kernel: bump 5.10 to 5.10.112 (+35,-35)
d90c762 kernel: bump 5.10 to 5.10.113 (+51,-51)
e0aaecd kernel: bump 5.10 to 5.10.114 (+32,-32)
7a0af40 kernel: bump 5.10 to 5.10.115 (+45,-161)
e90f74f kernel: bump 5.10 to 5.10.116 (+11,-95)
720a7db build: fix find warning with SCAN_EXTRA (+1,-1)
3ce3de9 kernel: bump 5.10 to 5.10.117 (+30,-30)
49f8a75 kernel: bump 5.10 to 5.10.118 (+15,-131)
0ca9367 kernel: bump 5.10 to 5.10.119 (+9,-34)
ff88989 kernel: bump 5.10 to 5.10.120 (+12,-12)

Build System / Host Utilities (3 changes)

87f9dd6 firmware-utils: bump to git HEAD (+3,-3)
05fd700 tplink-safeloader: TP-Link RE650 v2 support (+39)
9c2ed54 firmware-utils: bump to git HEAD (+3,-3)
ceea1a7 tplink-safeloader: add TP-Link Deco M4R v1 and v2 support (+47)
ddc3e00 tplink-safeloader: add TP-Link EAP265 HD support (+2,-1)
f77d77e tools/mkimage: increase tmpfile name length limit (+11)

Kernel (16 changes)

e9c14fa kernel: bump 5.10 to 5.10.112 (+35,-35)
d90c762 kernel: bump 5.10 to 5.10.113 (+51,-51)
77e1233 mediatek: add patches for MT7622 WED (wireless ethernet dispatch) (+3.6K,-116)
53fc6e9 kernel: fix flow offload issues with pppoe (+413,-150)
ae64d06 kernel: fix corrupted padding on small packets with mt753x dsa (+29)
ec45e1f kernel: add support for Toshiba TC58NVG0S3HTA00 NAND flash (+36)
e0aaecd kernel: bump 5.10 to 5.10.114 (+32,-32)
7a0af40 kernel: bump 5.10 to 5.10.115 (+45,-161)
3963a90 kernel: Add missing devm_regulator_get_exclusive() (+79)
e90f74f kernel: bump 5.10 to 5.10.116 (+11,-95)
972160a kernel: backport flow offload fixes (+100,-1)
8e9eaef kernel: fix crashes in bridge offload code (+5,-5)
3ce3de9 kernel: bump 5.10 to 5.10.117 (+30,-30)
49f8a75 kernel: bump 5.10 to 5.10.118 (+15,-131)
0ca9367 kernel: bump 5.10 to 5.10.119 (+9,-34)
ff88989 kernel: bump 5.10 to 5.10.120 (+12,-12)

Packages / Boot Loaders (8 changes)

e4d8c0f uboot-mediatek: remove '0x' prefix from pstore node (+1,-1)
1b7cf4d uboot-envtools: add WS-AP3825i config (+4)
144d9c4 uboot-fritz4040: Add support for Toshiba NAND (+3,-3)
1914515 ipq40xx: fix compiler warnings (+21,-16)
685694a fritz: remove binaries ()
48430df add support for AVM FRITZ!Box 7520 (+129)
9d89013 Add fixup for new NAND chip in FRITZ!7530 A1 (+16,-5)
d627ea5 ramips: add support for YunCore AX820/HWAP-AX820 (+164,-1)
a11c3cd realtek: add support for ZyXEL GS1900-16 (+45)
3aeb6e9 ipq806x: add support for Arris TR4400 v2 / RAC2V1A (+447,-1)
ee4a765 realtek: add support for ZyXEL GS1900-24E (+72)
d04a947 uboot-imx: fix wrong make flags overriding (+2,-2)

Packages / Common (25 changes)

23170c6 ucode: update to latest Git HEAD (+5,-5)
4ce69a8 fs: implement access(), mkstemp(), file.flush() and proc.flush() (+130)
1af23a9 tests: fix proto() testcase (+1)
6b6d01f vm: release this context on exception in managed method call (+2)
a2a26ca lib: introduce uloop binding (+657)
05bd7ed types: treat resource type prototypes as GC roots (+3)
0e85974 uloop: clear errno before integer conversion attempts (+3)
1cb04f9 ubus: add object publishing, notify and subscribe support (+1.3K,-108)
6c66c83 ubus: refactor error and argument handling (+266,-188)
078d686 ubus: add event support (+158)
efe8a02 syntax: support add new operators (+285,-13)
c402551 vm: fix crash on object literals with non-string computed properties (+21,-7)
73dcd78 lib: fix potential integer underflow on empty render output (+2,-3)
4618807 main: rework CLI frontend (+452,-213)
b4a1fd5 lib: adjust require(), render() and include() raw mode semantics (+111,-20)
91f65de nl80211: add missing attributes and correct some attribute flags (+46,-6)
49838a8 include: rename include guards to avoid clashes with system headers (+33,-33)
⇒ + 40 more...
0481a5a firewall4: update to latest Git HEAD (+4,-4)
fde8070 treewide: forward compatibility changes (+509,-523)
9972f7d fw4: ensure to capitalize weekday names (+8,-8)
11feddf fw4: bracketize IPv6 addresses in dnat addr:port notation (+18,-3)
a378883 fw4: fix emitting family specific redirect rules without any addrs (+31,-3)
425ea8a fw4: fix applying zone flags for source bound rules (+1,-1)
9bce873 fw4: fix skipping invalid ipset entries (+1,-1)
fc83d46 ruleset: set auto-merge directive for interval sets (+1)
5a11704 ucode: reorder BuildPackage calls (+1,-1)
946f60a dnsmasq: add logfacility file to jail mounts (+6,-2)
fa8e050 f2fs-tools: fix resize.f2fs (#9800) (+47,-1)
efc38b3 selinux-policy: update to version 1.1 (+3,-3)
6f8db8f wolfssl: bump to v5.3.0-stable (+2,-45)
97a2012 openssl: bump to 1.1.1o (+6,-6)
4575498 ucode: update to latest Git HEAD (+3,-3)
9a72423 Update README.md (+119,-15)
8da140f lib: introduce hexenc() and hexdec() (+176)
090b426 fs: avoid input buffering with small limits in fs.readfile() (+3)
081871e compiler: fix segmentation fault on compiling unexpected unary expressions (+28)
80baa60 firewall4: update to latest Git HEAD (+3,-3)
2379c3d tests: add test coverage for zone family selection logic (+300)
2816a82 ruleset: ensure that family-agnostic ICMP rules cover ICMPv6 as well (+19,-5)
b479815 fw4: fix family auto-selection for config nat rules (+74,-16)
05995f1 fw4: fix emitting device jump rules for family restricted zones (+17,-26)
b0b8122 treewide: use modern syntax (+151,-176)
f0cc317 fw4: refactor family selection for forwarding rules (+254,-24)
72b196d config: remove restictions on DHCPv6 allow rule (+1,-3)
7782017 tests: fix mocked `fd.read("line")` api (+2,-2)
57984e0 fw4: always resolve lower flowtable devices (+51,-40)
b268225 fw4: filter non hw-offload capable devices when resolving lower devices (+46,-49)
d005293 fw4: store zone associations from ubus in statefile as well (+3,-1)
628d791 hotplug: reliably handle interfaces with ubus zone hints (+7,-1)
c22eeef fw4: support negative CIDR bit notation (+8,-3)
dad1533 ucode: update to latest Git HEAD (+3,-3)
559029e ci: make jobs faster during pull request testing (+63,-3)
da3f089 lib: rework uc_index() implementation (+168,-15)
9efbe18 lib: refactor `uc_int()` (+23,-10)
d996047 syntax: adjust number literal parsing and string to number conversion (+98,-11)
dbd4c34 firewall4: update to latest Git HEAD (+3,-3)
c4a78ed fw4: fix typo in emitted set types (+2,-2)
c7c9c84 fw4: ensure that negative bitcounts are properly translated (+9)
6dd2617 fw4: fix logic flaw in testing hw flow offloading support (+6,-8)
fb9a6b2 ruleset: correct mangle_output chain type (+18,-18)
30a7d47 fw4: fix datetime parsing (+12,-13)
221040e ruleset: emit time ranges when both start and stop times are specified (+260,-24)
4e5e322 fw4: make `fw4 restart` behavior more robust (+3,-3)
210991d fw4: prefer /dev/stdin if available (+4,-2)
638220b packages: nvram: add NVRAM quirks for bcm53xx target (+48,-17)
e56836d ltq-vectoring: add driver (+349)
642d6c0 ltq-vdsl-mei: enable vectoring error sample callback (+2,-13)
d0397ab ltq-vdsl-app: set MAC address for vectoring error reports (+14,-6)
290c13b ltq-vdsl-mei: add locking to interrupt handler (+46,-1)
ea0744f ltq-atm/ltq-ptm: avoid unnecessary build dependencies (+11,-6)
8f4b5fd ltq-vdsl/ltq-adsl: fix elapsed time calculation (+246,-2)
9c0f94e ltq-vdsl-app: disconnect when service is stopped (+78,-3)
b24c301 ksmbd: update to 3.4.5 (+2,-2)
f4b7541 wolfssl: don't change ABI because of hw crypto (+21,-10)
50b6f56 wolfssl: add benchmark utility (+23,-3)
fe9c459 wolfssl: enable CPU crypto instructions (+23)
3b90eda wolfssl: make WOLFSSL_HAS_OPENVPN default to y (+1,-1)

Packages / Firmware (2 changes)

3a974b5 ipq40xx: fix BDF file for pcie wifi chip on the GL.Inet GL-B2200 ()
f765f2f ipq40xx: add Aruba AP-365 specific BDF (+12,-1)

Packages / OpenWrt base files (3 changes)

9282cb0 base-files: address sed in-place without SELinux awareness (+1)
6cb08b1 base-files: add missing $IPKG_INSTROOT to restorecon call (+3,-1)
0dc3ecf base-files: simplify restorecon logic (+2,-2)

Packages / OpenWrt network userland (6 changes)

dbe8d4f iwinfo: update to latest HEAD (+3,-3)
562d015 iwinfo: nl80211: fix hwmode parsing for multi-band NICs (+33,-6)
a479b9b devices: remove whitespace (+1,-1)
832e3ad iwinfo: update to latest HEAD (+3,-3)
dc6847e iwinfo: nl80211: omit A-hwmode on non-5GHz hardware (+5,-5)
5ff900e firewall: config: remove restictions on DHCPv6 allow rule (+2,-4)
002e05b uqmi: update to git HEAD (+3,-3)
9a9019a uqmi: wms - added storage to read text messages (+45,-22)
56cb2d4 nas: add decoding of cell_id (+29,-25)
2ca8bcc netifd: update to the latest version (+3,-3)
4b4849c interface-ip: unify host and proto route handling (+47,-44)
507c051 interface-ip: add support for excluding interfaces in host route lookup (+21,-5)
76b4b50 netifd: update to git HEAD (+3,-3)
2e1fcf4 netifd: fix hwmode for 60g band (+2,-1)
39ef9fe interface-ip: fix memory corruption bug when using jail network namespaces (+3,-1)

Packages / OpenWrt system userland (7 changes)

dc71658 fstools: update to git HEAD (+3,-3)
f0fc66a libfstools: check for overlay mounting errors (+4,-1)
128ecaf Update / fix extroot comments (+5,-5)
8a0ba3b libfstools: get rid of "extroot_prefix" global variable (+4,-12)
649cd3f libfstools: use variable for overlay mount-point (+10,-9)
922f1b3 libfstools: avoid segfault in find_mount_point (+3)
ce5eacb libfstools: mtd: improve error handling (+4,-6)
898b328 blockd: restore device_move semantics (+4,-6)
0917d22 block: don't probe mtdblock on NAND (with legacy exceptions) (+53)
ffe12f8 procd: update to git HEAD (+3,-3)
652e6df init: restore SELinux labels after policy is loaded (+19,-8)
2ac5ee7 fstools: update to git HEAD (+3,-3)
9e11b37 fstools: remove SELinux restorecon hack (-27)
19f287a procd: update to git HEAD (+3,-3)
557c98e init: selinux: don't relabel virtual filesystems (+3,-1)
7a00968 init: only relabel rootfs if started from initramfs (+4,-3)
0a47d52 ubus: update to git HEAD (+4,-4)
2f793a4 lua: add optional path filter to objects() method (+2,-1)
2bebf93 ubusd: handle invoke on event object without data (+6)
4afa65a fstools: update to git HEAD (+3,-3)
93369be Revert "fstools: remove SELinux restorecon hack" (+27)
fe04b41 libubox: update to the latest version (+3,-3)
f2d6752 blob: clear buf->head when freeing a buffer (+1)
45210ce list.h: add container_of_safe macro (+8)
cfa372f blobmsg: implicitly reserve space for 0-terminator in string buf alloc (+5,-4)
d2223ef blobmsg: work around false positive gcc -Warray-bounds warnings (+1,-1)

Target / apm821xx (1 change)

e0aaecd kernel: bump 5.10 to 5.10.114 (+32,-32)

Target / at91 (2 changes)

d90c762 kernel: bump 5.10 to 5.10.113 (+51,-51)
49f8a75 kernel: bump 5.10 to 5.10.118 (+15,-131)

Target / ath25 (1 change)

ff88989 kernel: bump 5.10 to 5.10.120 (+12,-12)

Target / ath79 (20 changes)

d79380a ath79: ZTE MF286R: add comgt-ncm to DEVICE_PACKAGES (+2,-1)
6d5a097 ath79: ubnt: drop swconfig on ac-{lite,lr,mesh} (+3)
0c25b9c ath79: add USB power control for GL-AR300M series (+17)
e9c14fa kernel: bump 5.10 to 5.10.112 (+35,-35)
d90c762 kernel: bump 5.10 to 5.10.113 (+51,-51)
0f8eba4 ath79: fix I2C on GL-AR300M devices (+9)
9ef931f ath79: ZTE MF286[A,R]: add "Power button blocker" GPIO switch (+20)
e0aaecd kernel: bump 5.10 to 5.10.114 (+32,-32)
6729fa2 ath79: add support for TP-Link Deco M4R v1 and v2 (+169)
9b20e2a ath79: add Netgear WNDAP360 (+189,-2)
95c315f ath79: fix ar934x spi driver delays (+89)
03cfdf7 ath79: add support for MikroTik RouterBOARD hAP ac lite (+142)
34b6abf ath79: add support for MikroTik hAP (RB951Ui-2nD) (+21)
d9cb31f ath79: add support for Ubiquiti NanoBeam M5 (+34)
9f41579 ath79: NanoBeam M5 fix target_devices (+2,-2)
b42511c ath79: fix label MAC address for D-Link DIR-825B1 (+1)
9325aef ath79: ZTE MF286[,A,R]: fix WLAN LED mapping (+8)
c29641f ath79: ZTE MF286[,A,R]: use GPIO19 as ath9k LED (+7,-14)
e8fedf2 ath79: allow use GPIO17 as regular gpio on GL-AR300M devices (+3,-3)
0ca9367 kernel: bump 5.10 to 5.10.119 (+9,-34)

Target / bcm27xx (4 changes)

e9c14fa kernel: bump 5.10 to 5.10.112 (+35,-35)
d90c762 kernel: bump 5.10 to 5.10.113 (+51,-51)
6120a66 bcm27xx: include 'rtc' in target's 'FEATURES' (+1,-1)
e0aaecd kernel: bump 5.10 to 5.10.114 (+32,-32)

Target / bcm4908 (1 change)

3ce3de9 kernel: bump 5.10 to 5.10.117 (+30,-30)

Target / bcm53xx (3 changes)

bee8612 bcm53xx: add support for Asus RT-AC88U (+12)
638220b packages: nvram: add NVRAM quirks for bcm53xx target (+48,-17)
2b1941e bcm53xx: remove BROKEN flag from Asus RT-AC88U (-1)

Target / bcm63xx (1 change)

18649fb bcm63xx: fix description fix name case (+1,-1)

Target / bmips (1 change)

26958e9 bmips: dgnd3700v2: fix network config (+1)

Target / ipq40xx (8 changes)

d4053d2 ipq40xx: 5.10: fix ar40xx driver (+3)
308ce46 ipq40xx: Lyra: update RGB LED-Controller node for 5.10+ (+78,-47)
54e759d ipq40xx: revert Cell-C RTL30VW to legacy caldata extraction (+2,-15)
416e8ae IPQ4019: AVM FRITZ!Box 7530: Remove NAND ECC restrictions from DTS (+3)
7a0af40 kernel: bump 5.10 to 5.10.115 (+45,-161)
e90f74f kernel: bump 5.10 to 5.10.116 (+11,-95)
f765f2f ipq40xx: add Aruba AP-365 specific BDF (+12,-1)
ff88989 kernel: bump 5.10 to 5.10.120 (+12,-12)

Target / ipq806x (2 changes)

3aeb6e9 ipq806x: add support for Arris TR4400 v2 / RAC2V1A (+447,-1)
e90f74f kernel: bump 5.10 to 5.10.116 (+11,-95)

Target / lantiq (3 changes)

19a8c72 lantiq: xway: disable unused switch drivers (-3)
e0aaecd kernel: bump 5.10 to 5.10.114 (+32,-32)
49f8a75 kernel: bump 5.10 to 5.10.118 (+15,-131)

Target / malta (1 change)

59e1b59 malta: use default OpenWrt network configuration (-13)

Target / mediatek (2 changes)

be8e9ca mediatek: mt7622: remove '0x' prefix from pstore address in dts (+1,-1)
77e1233 mediatek: add patches for MT7622 WED (wireless ethernet dispatch) (+3.6K,-116)

Target / mpc85xx (3 changes)

084053d mpc85xx: define reset-delay for WS-AP3825i eth PHY (+4)
3579ee6 mpc85xx: set WS-AP3825i mac-address in preinit (+12)
a142d96 mpc85xx: Fix output location of padded dtb (+3,-3)

Target / mvebu (1 change)

e90f74f kernel: bump 5.10 to 5.10.116 (+11,-95)

Target / oxnas (2 changes)

e9c14fa kernel: bump 5.10 to 5.10.112 (+35,-35)
e90f74f kernel: bump 5.10 to 5.10.116 (+11,-95)

Target / ramips (13 changes)

4c5d2cd ramips: zbt-wg2626: Add the reset gpio for PCIe port 1 (+3)
77e1233 mediatek: add patches for MT7622 WED (wireless ethernet dispatch) (+3.6K,-116)
1c6a179 ramips: fix booting on Samknows SK-WB8 (+1)
d627ea5 ramips: add support for YunCore AX820/HWAP-AX820 (+164,-1)
7152bc8 ramips: add support for TP-Link RE650 v2 (+209,-1)
5454735 ramips: create shared DTSI for Wavlink WN53XAX devices (+207,-184)
fe5943a ramips: add support for Wavlink WL-WN533A8 (+43)
5439efe ramips: Add support for SERCOMM NA502S (+379)
e431195 ramips: add support for Cudy X6 (+192)
3c57430 ramips: add led_source for Asus RT-AC1200 devices (+1)
e90f74f kernel: bump 5.10 to 5.10.116 (+11,-95)
045fe28 ramips: use hotplug script for EAP615-Wall MACs (+4,-2)
3ce3de9 kernel: bump 5.10 to 5.10.117 (+30,-30)

Target / realtek (9 changes)

7b4702a realtek: Trap all frames with switch as destination to CPU-port (+9)
a374a95 realtek: do not reset SerDes on link change (+3,-1)
e0aaecd kernel: bump 5.10 to 5.10.114 (+32,-32)
a11c3cd realtek: add support for ZyXEL GS1900-16 (+45)
ee4a765 realtek: add support for ZyXEL GS1900-24E (+72)
e2ca166 realtek: add reset button for D-Link DGS-1210-28 (+18)
de0a9b0 realtek: add gpio-restart for D-Link DGS-1210-28 (+6)
0ca9367 kernel: bump 5.10 to 5.10.119 (+9,-34)
ff88989 kernel: bump 5.10 to 5.10.120 (+12,-12)

Target / {generic (1 change)

a83dc6b kernel: move Toshiba-TC58NVG0S3H patch to ipq40xx (+4,-3)

Wireless / Common (1 change)

33df033 mac80211: add a bug fix for a rare crash (+38)

Addressed bugs

#5066

Description: Firewall: Default Allow-DHCPv6 rule option src_ip 'fc00::/6' prevents receiving ipv6 DHCP from ISP
Link: https://github.com/openwrt/openwrt/issues/5066
Commits:
5ff900e firewall: config: remove restictions on DHCPv6 allow rule (+2,-4)
80baa60 firewall4: update to latest Git HEAD (+3,-3)
2379c3d tests: add test coverage for zone family selection logic (+300)
2816a82 ruleset: ensure that family-agnostic ICMP rules cover ICMPv6 as well (+19,-5)
b479815 fw4: fix family auto-selection for config nat rules (+74,-16)
05995f1 fw4: fix emitting device jump rules for family restricted zones (+17,-26)
b0b8122 treewide: use modern syntax (+151,-176)
f0cc317 fw4: refactor family selection for forwarding rules (+254,-24)
72b196d config: remove restictions on DHCPv6 allow rule (+1,-3)
7782017 tests: fix mocked `fd.read("line")` api (+2,-2)
57984e0 fw4: always resolve lower flowtable devices (+51,-40)
b268225 fw4: filter non hw-offload capable devices when resolving lower devices (+46,-49)
d005293 fw4: store zone associations from ubus in statefile as well (+3,-1)
628d791 hotplug: reliably handle interfaces with ubus zone hints (+7,-1)
c22eeef fw4: support negative CIDR bit notation (+8,-3)

#9594

Description: RTC modules not enabled for Raspberry Pi
Link: https://github.com/openwrt/openwrt/issues/9594
Commits:
6120a66 bcm27xx: include 'rtc' in target's 'FEATURES' (+1,-1)

#9611

Description: [22.03] FW4 - interfaces with firewall rules require manual firewall restart
Link: https://github.com/openwrt/openwrt/issues/9611
Commits:
80baa60 firewall4: update to latest Git HEAD (+3,-3)
2379c3d tests: add test coverage for zone family selection logic (+300)
2816a82 ruleset: ensure that family-agnostic ICMP rules cover ICMPv6 as well (+19,-5)
b479815 fw4: fix family auto-selection for config nat rules (+74,-16)
05995f1 fw4: fix emitting device jump rules for family restricted zones (+17,-26)
b0b8122 treewide: use modern syntax (+151,-176)
f0cc317 fw4: refactor family selection for forwarding rules (+254,-24)
72b196d config: remove restictions on DHCPv6 allow rule (+1,-3)
7782017 tests: fix mocked `fd.read("line")` api (+2,-2)
57984e0 fw4: always resolve lower flowtable devices (+51,-40)
b268225 fw4: filter non hw-offload capable devices when resolving lower devices (+46,-49)
d005293 fw4: store zone associations from ubus in statefile as well (+3,-1)
628d791 hotplug: reliably handle interfaces with ubus zone hints (+7,-1)
c22eeef fw4: support negative CIDR bit notation (+8,-3)

#9738

Description: wolfssl: add benchmark, enable CPU crypto instructions
Link: https://github.com/openwrt/openwrt/issues/9738
Commits:
3b90eda wolfssl: make WOLFSSL_HAS_OPENVPN default to y (+1,-1)

#9764

Description: firewall4: negative netmask not working
Link: https://github.com/openwrt/openwrt/issues/9764
Commits:
dbd4c34 firewall4: update to latest Git HEAD (+3,-3)
c4a78ed fw4: fix typo in emitted set types (+2,-2)
c7c9c84 fw4: ensure that negative bitcounts are properly translated (+9)
6dd2617 fw4: fix logic flaw in testing hw flow offloading support (+6,-8)
fb9a6b2 ruleset: correct mangle_output chain type (+18,-18)
30a7d47 fw4: fix datetime parsing (+12,-13)
221040e ruleset: emit time ranges when both start and stop times are specified (+260,-24)
4e5e322 fw4: make `fw4 restart` behavior more robust (+3,-3)
210991d fw4: prefer /dev/stdin if available (+4,-2)

#9765

Description: firewall4: ICMP rule without specified family is only applied for IPv4
Link: https://github.com/openwrt/openwrt/issues/9765
Commits:
80baa60 firewall4: update to latest Git HEAD (+3,-3)
2379c3d tests: add test coverage for zone family selection logic (+300)
2816a82 ruleset: ensure that family-agnostic ICMP rules cover ICMPv6 as well (+19,-5)
b479815 fw4: fix family auto-selection for config nat rules (+74,-16)
05995f1 fw4: fix emitting device jump rules for family restricted zones (+17,-26)
b0b8122 treewide: use modern syntax (+151,-176)
f0cc317 fw4: refactor family selection for forwarding rules (+254,-24)
72b196d config: remove restictions on DHCPv6 allow rule (+1,-3)
7782017 tests: fix mocked `fd.read("line")` api (+2,-2)
57984e0 fw4: always resolve lower flowtable devices (+51,-40)
b268225 fw4: filter non hw-offload capable devices when resolving lower devices (+46,-49)
d005293 fw4: store zone associations from ubus in statefile as well (+3,-1)
628d791 hotplug: reliably handle interfaces with ubus zone hints (+7,-1)
c22eeef fw4: support negative CIDR bit notation (+8,-3)

#9788

Description: Fw4 won't start after upgrade to 2022-04-21-fc83d462-1
Link: https://github.com/openwrt/openwrt/issues/9788
Commits:
5a11704 ucode: reorder BuildPackage calls (+1,-1)

#9824

Description: openwrt-22.03 bricks Samknows SK-WB8
Link: https://github.com/openwrt/openwrt/issues/9824
Commits:
1c6a179 ramips: fix booting on Samknows SK-WB8 (+1)

#9854

Description: firewall4: software offloading not working with bridge devices in flowtables
Link: https://github.com/openwrt/openwrt/issues/9854
Commits:
80baa60 firewall4: update to latest Git HEAD (+3,-3)
2379c3d tests: add test coverage for zone family selection logic (+300)
2816a82 ruleset: ensure that family-agnostic ICMP rules cover ICMPv6 as well (+19,-5)
b479815 fw4: fix family auto-selection for config nat rules (+74,-16)
05995f1 fw4: fix emitting device jump rules for family restricted zones (+17,-26)
b0b8122 treewide: use modern syntax (+151,-176)
f0cc317 fw4: refactor family selection for forwarding rules (+254,-24)
72b196d config: remove restictions on DHCPv6 allow rule (+1,-3)
7782017 tests: fix mocked `fd.read("line")` api (+2,-2)
57984e0 fw4: always resolve lower flowtable devices (+51,-40)
b268225 fw4: filter non hw-offload capable devices when resolving lower devices (+46,-49)
d005293 fw4: store zone associations from ubus in statefile as well (+3,-1)
628d791 hotplug: reliably handle interfaces with ubus zone hints (+7,-1)
c22eeef fw4: support negative CIDR bit notation (+8,-3)

#9923

Description: fw4: Doesn't take into account time restrictions
Link: https://github.com/openwrt/openwrt/issues/9923
Commits:
dad1533 ucode: update to latest Git HEAD (+3,-3)
559029e ci: make jobs faster during pull request testing (+63,-3)
da3f089 lib: rework uc_index() implementation (+168,-15)
9efbe18 lib: refactor `uc_int()` (+23,-10)
d996047 syntax: adjust number literal parsing and string to number conversion (+98,-11)
dbd4c34 firewall4: update to latest Git HEAD (+3,-3)
c4a78ed fw4: fix typo in emitted set types (+2,-2)
c7c9c84 fw4: ensure that negative bitcounts are properly translated (+9)
6dd2617 fw4: fix logic flaw in testing hw flow offloading support (+6,-8)
fb9a6b2 ruleset: correct mangle_output chain type (+18,-18)
30a7d47 fw4: fix datetime parsing (+12,-13)
221040e ruleset: emit time ranges when both start and stop times are specified (+260,-24)
4e5e322 fw4: make `fw4 restart` behavior more robust (+3,-3)
210991d fw4: prefer /dev/stdin if available (+4,-2)

#9927

Description: firewall4 typo
Link: https://github.com/openwrt/openwrt/issues/9927
Commits:
dbd4c34 firewall4: update to latest Git HEAD (+3,-3)
c4a78ed fw4: fix typo in emitted set types (+2,-2)
c7c9c84 fw4: ensure that negative bitcounts are properly translated (+9)
6dd2617 fw4: fix logic flaw in testing hw flow offloading support (+6,-8)
fb9a6b2 ruleset: correct mangle_output chain type (+18,-18)
30a7d47 fw4: fix datetime parsing (+12,-13)
221040e ruleset: emit time ranges when both start and stop times are specified (+260,-24)
4e5e322 fw4: make `fw4 restart` behavior more robust (+3,-3)
210991d fw4: prefer /dev/stdin if available (+4,-2)

#9935

Description: firewall4: 22.03.0-rc2/-rc3 fails to start fw4 on devices without hw-offload capability
Link: https://github.com/openwrt/openwrt/issues/9935
Commits:
dbd4c34 firewall4: update to latest Git HEAD (+3,-3)
c4a78ed fw4: fix typo in emitted set types (+2,-2)
c7c9c84 fw4: ensure that negative bitcounts are properly translated (+9)
6dd2617 fw4: fix logic flaw in testing hw flow offloading support (+6,-8)
fb9a6b2 ruleset: correct mangle_output chain type (+18,-18)
30a7d47 fw4: fix datetime parsing (+12,-13)
221040e ruleset: emit time ranges when both start and stop times are specified (+260,-24)
4e5e322 fw4: make `fw4 restart` behavior more robust (+3,-3)
210991d fw4: prefer /dev/stdin if available (+4,-2)

#9955

Description: firewall4: marking in outgoing rules
Link: https://github.com/openwrt/openwrt/issues/9955
Commits:
dbd4c34 firewall4: update to latest Git HEAD (+3,-3)
c4a78ed fw4: fix typo in emitted set types (+2,-2)
c7c9c84 fw4: ensure that negative bitcounts are properly translated (+9)
6dd2617 fw4: fix logic flaw in testing hw flow offloading support (+6,-8)
fb9a6b2 ruleset: correct mangle_output chain type (+18,-18)
30a7d47 fw4: fix datetime parsing (+12,-13)
221040e ruleset: emit time ranges when both start and stop times are specified (+260,-24)
4e5e322 fw4: make `fw4 restart` behavior more robust (+3,-3)
210991d fw4: prefer /dev/stdin if available (+4,-2)