OpenWrt 22.03.0-rc4 Changelog

This changelog lists all commits done in OpenWrt since the v22.03.0-rc1 tag, grouped by subsystem. The changes are chronologically ordered from top to bottom and cover the Git repository history until the tagging of the 22.03.0-rc4 release.

See also the release notes that provide a more accessible overview of the main changes in 22.03.0-rc4.

fbd9605 build: don't remove BUILD_LOG_DIR in _clean (+1,-1)
e9c14fa kernel: bump 5.10 to 5.10.112 (+35,-35)
d90c762 kernel: bump 5.10 to 5.10.113 (+51,-51)
e0aaecd kernel: bump 5.10 to 5.10.114 (+32,-32)
7a0af40 kernel: bump 5.10 to 5.10.115 (+45,-161)
e90f74f kernel: bump 5.10 to 5.10.116 (+11,-95)
720a7db build: fix find warning with SCAN_EXTRA (+1,-1)
3ce3de9 kernel: bump 5.10 to 5.10.117 (+30,-30)
49f8a75 kernel: bump 5.10 to 5.10.118 (+15,-131)
0ca9367 kernel: bump 5.10 to 5.10.119 (+9,-34)
ff88989 kernel: bump 5.10 to 5.10.120 (+12,-12)

87f9dd6 firmware-utils: bump to git HEAD (+3,-3)
⇒ 05fd700 tplink-safeloader: TP-Link RE650 v2 support (+39)
9c2ed54 firmware-utils: bump to git HEAD (+3,-3)
⇒ ceea1a7 tplink-safeloader: add TP-Link Deco M4R v1 and v2 support (+47)
⇒ ddc3e00 tplink-safeloader: add TP-Link EAP265 HD support (+2,-1)
f77d77e tools/mkimage: increase tmpfile name length limit (+11)

e9c14fa kernel: bump 5.10 to 5.10.112 (+35,-35)
d90c762 kernel: bump 5.10 to 5.10.113 (+51,-51)
77e1233 mediatek: add patches for MT7622 WED (wireless ethernet dispatch) (+3.6K,-116)
53fc6e9 kernel: fix flow offload issues with pppoe (+413,-150)
ae64d06 kernel: fix corrupted padding on small packets with mt753x dsa (+29)
ec45e1f kernel: add support for Toshiba TC58NVG0S3HTA00 NAND flash (+36)
e0aaecd kernel: bump 5.10 to 5.10.114 (+32,-32)
7a0af40 kernel: bump 5.10 to 5.10.115 (+45,-161)
3963a90 kernel: Add missing devm_regulator_get_exclusive() (+79)
e90f74f kernel: bump 5.10 to 5.10.116 (+11,-95)
972160a kernel: backport flow offload fixes (+100,-1)
8e9eaef kernel: fix crashes in bridge offload code (+5,-5)
3ce3de9 kernel: bump 5.10 to 5.10.117 (+30,-30)
49f8a75 kernel: bump 5.10 to 5.10.118 (+15,-131)
0ca9367 kernel: bump 5.10 to 5.10.119 (+9,-34)
ff88989 kernel: bump 5.10 to 5.10.120 (+12,-12)

e4d8c0f uboot-mediatek: remove '0x' prefix from pstore node (+1,-1)
1b7cf4d uboot-envtools: add WS-AP3825i config (+4)
144d9c4 uboot-fritz4040: Add support for Toshiba NAND (+3,-3)
⇒ 1914515 ipq40xx: fix compiler warnings (+21,-16)
⇒ 685694a fritz: remove binaries ()
⇒ 48430df add support for AVM FRITZ!Box 7520 (+129)
⇒ 9d89013 Add fixup for new NAND chip in FRITZ!7530 A1 (+16,-5)
d627ea5 ramips: add support for YunCore AX820/HWAP-AX820 (+164,-1)
a11c3cd realtek: add support for ZyXEL GS1900-16 (+45)
3aeb6e9 ipq806x: add support for Arris TR4400 v2 / RAC2V1A (+447,-1)
ee4a765 realtek: add support for ZyXEL GS1900-24E (+72)
d04a947 uboot-imx: fix wrong make flags overriding (+2,-2)

23170c6 ucode: update to latest Git HEAD (+5,-5)
⇒ 4ce69a8 fs: implement access(), mkstemp(), file.flush() and proc.flush() (+130)
⇒ 1af23a9 tests: fix proto() testcase (+1)
⇒ 6b6d01f vm: release this context on exception in managed method call (+2)
⇒ a2a26ca lib: introduce uloop binding (+657)
⇒ 05bd7ed types: treat resource type prototypes as GC roots (+3)
⇒ 0e85974 uloop: clear errno before integer conversion attempts (+3)
⇒ 1cb04f9 ubus: add object publishing, notify and subscribe support (+1.3K,-108)
⇒ 6c66c83 ubus: refactor error and argument handling (+266,-188)
⇒ 078d686 ubus: add event support (+158)
⇒ efe8a02 syntax: support add new operators (+285,-13)
⇒ c402551 vm: fix crash on object literals with non-string computed properties (+21,-7)
⇒ 73dcd78 lib: fix potential integer underflow on empty render output (+2,-3)
⇒ 4618807 main: rework CLI frontend (+452,-213)
⇒ b4a1fd5 lib: adjust require(), render() and include() raw mode semantics (+111,-20)
⇒ 91f65de nl80211: add missing attributes and correct some attribute flags (+46,-6)
⇒ 49838a8 include: rename include guards to avoid clashes with system headers (+33,-33)
⇒ + 40 more...
0481a5a firewall4: update to latest Git HEAD (+4,-4)
⇒ fde8070 treewide: forward compatibility changes (+509,-523)
⇒ 9972f7d fw4: ensure to capitalize weekday names (+8,-8)
⇒ 11feddf fw4: bracketize IPv6 addresses in dnat addr:port notation (+18,-3)
⇒ a378883 fw4: fix emitting family specific redirect rules without any addrs (+31,-3)
⇒ 425ea8a fw4: fix applying zone flags for source bound rules (+1,-1)
⇒ 9bce873 fw4: fix skipping invalid ipset entries (+1,-1)
⇒ fc83d46 ruleset: set auto-merge directive for interval sets (+1)
5a11704 ucode: reorder BuildPackage calls (+1,-1)
946f60a dnsmasq: add logfacility file to jail mounts (+6,-2)
fa8e050 f2fs-tools: fix resize.f2fs (#9800) (+47,-1)
efc38b3 selinux-policy: update to version 1.1 (+3,-3)
6f8db8f wolfssl: bump to v5.3.0-stable (+2,-45)
97a2012 openssl: bump to 1.1.1o (+6,-6)
4575498 ucode: update to latest Git HEAD (+3,-3)
⇒ 9a72423 Update README.md (+119,-15)
⇒ 8da140f lib: introduce hexenc() and hexdec() (+176)
⇒ 090b426 fs: avoid input buffering with small limits in fs.readfile() (+3)
⇒ 081871e compiler: fix segmentation fault on compiling unexpected unary expressions (+28)
80baa60 firewall4: update to latest Git HEAD (+3,-3)
⇒ 2379c3d tests: add test coverage for zone family selection logic (+300)
⇒ 2816a82 ruleset: ensure that family-agnostic ICMP rules cover ICMPv6 as well (+19,-5)
⇒ b479815 fw4: fix family auto-selection for config nat rules (+74,-16)
⇒ 05995f1 fw4: fix emitting device jump rules for family restricted zones (+17,-26)
⇒ b0b8122 treewide: use modern syntax (+151,-176)
⇒ f0cc317 fw4: refactor family selection for forwarding rules (+254,-24)
⇒ 72b196d config: remove restictions on DHCPv6 allow rule (+1,-3)
⇒ 7782017 tests: fix mocked `fd.read("line")` api (+2,-2)
⇒ 57984e0 fw4: always resolve lower flowtable devices (+51,-40)
⇒ b268225 fw4: filter non hw-offload capable devices when resolving lower devices (+46,-49)
⇒ d005293 fw4: store zone associations from ubus in statefile as well (+3,-1)
⇒ 628d791 hotplug: reliably handle interfaces with ubus zone hints (+7,-1)
⇒ c22eeef fw4: support negative CIDR bit notation (+8,-3)
dad1533 ucode: update to latest Git HEAD (+3,-3)
⇒ 559029e ci: make jobs faster during pull request testing (+63,-3)
⇒ da3f089 lib: rework uc_index() implementation (+168,-15)
⇒ 9efbe18 lib: refactor `uc_int()` (+23,-10)
⇒ d996047 syntax: adjust number literal parsing and string to number conversion (+98,-11)
dbd4c34 firewall4: update to latest Git HEAD (+3,-3)
⇒ c4a78ed fw4: fix typo in emitted set types (+2,-2)
⇒ c7c9c84 fw4: ensure that negative bitcounts are properly translated (+9)
⇒ 6dd2617 fw4: fix logic flaw in testing hw flow offloading support (+6,-8)
⇒ fb9a6b2 ruleset: correct mangle_output chain type (+18,-18)
⇒ 30a7d47 fw4: fix datetime parsing (+12,-13)
⇒ 221040e ruleset: emit time ranges when both start and stop times are specified (+260,-24)
⇒ 4e5e322 fw4: make `fw4 restart` behavior more robust (+3,-3)
⇒ 210991d fw4: prefer /dev/stdin if available (+4,-2)
638220b packages: nvram: add NVRAM quirks for bcm53xx target (+48,-17)
e56836d ltq-vectoring: add driver (+349)
642d6c0 ltq-vdsl-mei: enable vectoring error sample callback (+2,-13)
d0397ab ltq-vdsl-app: set MAC address for vectoring error reports (+14,-6)
290c13b ltq-vdsl-mei: add locking to interrupt handler (+46,-1)
ea0744f ltq-atm/ltq-ptm: avoid unnecessary build dependencies (+11,-6)
8f4b5fd ltq-vdsl/ltq-adsl: fix elapsed time calculation (+246,-2)
9c0f94e ltq-vdsl-app: disconnect when service is stopped (+78,-3)
b24c301 ksmbd: update to 3.4.5 (+2,-2)
f4b7541 wolfssl: don't change ABI because of hw crypto (+21,-10)
50b6f56 wolfssl: add benchmark utility (+23,-3)
fe9c459 wolfssl: enable CPU crypto instructions (+23)
3b90eda wolfssl: make WOLFSSL_HAS_OPENVPN default to y (+1,-1)

3a974b5 ipq40xx: fix BDF file for pcie wifi chip on the GL.Inet GL-B2200 ()
f765f2f ipq40xx: add Aruba AP-365 specific BDF (+12,-1)

9282cb0 base-files: address sed in-place without SELinux awareness (+1)
6cb08b1 base-files: add missing $IPKG_INSTROOT to restorecon call (+3,-1)
0dc3ecf base-files: simplify restorecon logic (+2,-2)

dbe8d4f iwinfo: update to latest HEAD (+3,-3)
⇒ 562d015 iwinfo: nl80211: fix hwmode parsing for multi-band NICs (+33,-6)
⇒ a479b9b devices: remove whitespace (+1,-1)
832e3ad iwinfo: update to latest HEAD (+3,-3)
⇒ dc6847e iwinfo: nl80211: omit A-hwmode on non-5GHz hardware (+5,-5)
5ff900e firewall: config: remove restictions on DHCPv6 allow rule (+2,-4)
002e05b uqmi: update to git HEAD (+3,-3)
⇒ 9a9019a uqmi: wms - added storage to read text messages (+45,-22)
⇒ 56cb2d4 nas: add decoding of cell_id (+29,-25)
2ca8bcc netifd: update to the latest version (+3,-3)
⇒ 4b4849c interface-ip: unify host and proto route handling (+47,-44)
⇒ 507c051 interface-ip: add support for excluding interfaces in host route lookup (+21,-5)
76b4b50 netifd: update to git HEAD (+3,-3)
⇒ 2e1fcf4 netifd: fix hwmode for 60g band (+2,-1)
⇒ 39ef9fe interface-ip: fix memory corruption bug when using jail network namespaces (+3,-1)

dc71658 fstools: update to git HEAD (+3,-3)
⇒ f0fc66a libfstools: check for overlay mounting errors (+4,-1)
⇒ 128ecaf Update / fix extroot comments (+5,-5)
⇒ 8a0ba3b libfstools: get rid of "extroot_prefix" global variable (+4,-12)
⇒ 649cd3f libfstools: use variable for overlay mount-point (+10,-9)
⇒ 922f1b3 libfstools: avoid segfault in find_mount_point (+3)
⇒ ce5eacb libfstools: mtd: improve error handling (+4,-6)
⇒ 898b328 blockd: restore device_move semantics (+4,-6)
⇒ 0917d22 block: don't probe mtdblock on NAND (with legacy exceptions) (+53)
ffe12f8 procd: update to git HEAD (+3,-3)
⇒ 652e6df init: restore SELinux labels after policy is loaded (+19,-8)
2ac5ee7 fstools: update to git HEAD (+3,-3)
⇒ 9e11b37 fstools: remove SELinux restorecon hack (-27)
19f287a procd: update to git HEAD (+3,-3)
⇒ 557c98e init: selinux: don't relabel virtual filesystems (+3,-1)
⇒ 7a00968 init: only relabel rootfs if started from initramfs (+4,-3)
0a47d52 ubus: update to git HEAD (+4,-4)
⇒ 2f793a4 lua: add optional path filter to objects() method (+2,-1)
⇒ 2bebf93 ubusd: handle invoke on event object without data (+6)
4afa65a fstools: update to git HEAD (+3,-3)
⇒ 93369be Revert "fstools: remove SELinux restorecon hack" (+27)
fe04b41 libubox: update to the latest version (+3,-3)
⇒ f2d6752 blob: clear buf->head when freeing a buffer (+1)
⇒ 45210ce list.h: add container_of_safe macro (+8)
⇒ cfa372f blobmsg: implicitly reserve space for 0-terminator in string buf alloc (+5,-4)
⇒ d2223ef blobmsg: work around false positive gcc -Warray-bounds warnings (+1,-1)

e0aaecd kernel: bump 5.10 to 5.10.114 (+32,-32)

d90c762 kernel: bump 5.10 to 5.10.113 (+51,-51)
49f8a75 kernel: bump 5.10 to 5.10.118 (+15,-131)

ff88989 kernel: bump 5.10 to 5.10.120 (+12,-12)

d79380a ath79: ZTE MF286R: add comgt-ncm to DEVICE_PACKAGES (+2,-1)
6d5a097 ath79: ubnt: drop swconfig on ac-{lite,lr,mesh} (+3)
0c25b9c ath79: add USB power control for GL-AR300M series (+17)
e9c14fa kernel: bump 5.10 to 5.10.112 (+35,-35)
d90c762 kernel: bump 5.10 to 5.10.113 (+51,-51)
0f8eba4 ath79: fix I2C on GL-AR300M devices (+9)
9ef931f ath79: ZTE MF286[A,R]: add "Power button blocker" GPIO switch (+20)
e0aaecd kernel: bump 5.10 to 5.10.114 (+32,-32)
6729fa2 ath79: add support for TP-Link Deco M4R v1 and v2 (+169)
9b20e2a ath79: add Netgear WNDAP360 (+189,-2)
95c315f ath79: fix ar934x spi driver delays (+89)
03cfdf7 ath79: add support for MikroTik RouterBOARD hAP ac lite (+142)
34b6abf ath79: add support for MikroTik hAP (RB951Ui-2nD) (+21)
d9cb31f ath79: add support for Ubiquiti NanoBeam M5 (+34)
9f41579 ath79: NanoBeam M5 fix target_devices (+2,-2)
b42511c ath79: fix label MAC address for D-Link DIR-825B1 (+1)
9325aef ath79: ZTE MF286[,A,R]: fix WLAN LED mapping (+8)
c29641f ath79: ZTE MF286[,A,R]: use GPIO19 as ath9k LED (+7,-14)
e8fedf2 ath79: allow use GPIO17 as regular gpio on GL-AR300M devices (+3,-3)
0ca9367 kernel: bump 5.10 to 5.10.119 (+9,-34)

e9c14fa kernel: bump 5.10 to 5.10.112 (+35,-35)
d90c762 kernel: bump 5.10 to 5.10.113 (+51,-51)
6120a66 bcm27xx: include 'rtc' in target's 'FEATURES' (+1,-1)
e0aaecd kernel: bump 5.10 to 5.10.114 (+32,-32)

3ce3de9 kernel: bump 5.10 to 5.10.117 (+30,-30)

bee8612 bcm53xx: add support for Asus RT-AC88U (+12)
638220b packages: nvram: add NVRAM quirks for bcm53xx target (+48,-17)
2b1941e bcm53xx: remove BROKEN flag from Asus RT-AC88U (-1)

18649fb bcm63xx: fix description fix name case (+1,-1)

26958e9 bmips: dgnd3700v2: fix network config (+1)

d4053d2 ipq40xx: 5.10: fix ar40xx driver (+3)
308ce46 ipq40xx: Lyra: update RGB LED-Controller node for 5.10+ (+78,-47)
54e759d ipq40xx: revert Cell-C RTL30VW to legacy caldata extraction (+2,-15)
416e8ae IPQ4019: AVM FRITZ!Box 7530: Remove NAND ECC restrictions from DTS (+3)
7a0af40 kernel: bump 5.10 to 5.10.115 (+45,-161)
e90f74f kernel: bump 5.10 to 5.10.116 (+11,-95)
f765f2f ipq40xx: add Aruba AP-365 specific BDF (+12,-1)
ff88989 kernel: bump 5.10 to 5.10.120 (+12,-12)

3aeb6e9 ipq806x: add support for Arris TR4400 v2 / RAC2V1A (+447,-1)
e90f74f kernel: bump 5.10 to 5.10.116 (+11,-95)

19a8c72 lantiq: xway: disable unused switch drivers (-3)
e0aaecd kernel: bump 5.10 to 5.10.114 (+32,-32)
49f8a75 kernel: bump 5.10 to 5.10.118 (+15,-131)

59e1b59 malta: use default OpenWrt network configuration (-13)

be8e9ca mediatek: mt7622: remove '0x' prefix from pstore address in dts (+1,-1)
77e1233 mediatek: add patches for MT7622 WED (wireless ethernet dispatch) (+3.6K,-116)

084053d mpc85xx: define reset-delay for WS-AP3825i eth PHY (+4)
3579ee6 mpc85xx: set WS-AP3825i mac-address in preinit (+12)
a142d96 mpc85xx: Fix output location of padded dtb (+3,-3)

e90f74f kernel: bump 5.10 to 5.10.116 (+11,-95)

e9c14fa kernel: bump 5.10 to 5.10.112 (+35,-35)
e90f74f kernel: bump 5.10 to 5.10.116 (+11,-95)

4c5d2cd ramips: zbt-wg2626: Add the reset gpio for PCIe port 1 (+3)
77e1233 mediatek: add patches for MT7622 WED (wireless ethernet dispatch) (+3.6K,-116)
1c6a179 ramips: fix booting on Samknows SK-WB8 (+1)
d627ea5 ramips: add support for YunCore AX820/HWAP-AX820 (+164,-1)
7152bc8 ramips: add support for TP-Link RE650 v2 (+209,-1)
5454735 ramips: create shared DTSI for Wavlink WN53XAX devices (+207,-184)
fe5943a ramips: add support for Wavlink WL-WN533A8 (+43)
5439efe ramips: Add support for SERCOMM NA502S (+379)
e431195 ramips: add support for Cudy X6 (+192)
3c57430 ramips: add led_source for Asus RT-AC1200 devices (+1)
e90f74f kernel: bump 5.10 to 5.10.116 (+11,-95)
045fe28 ramips: use hotplug script for EAP615-Wall MACs (+4,-2)
3ce3de9 kernel: bump 5.10 to 5.10.117 (+30,-30)

7b4702a realtek: Trap all frames with switch as destination to CPU-port (+9)
a374a95 realtek: do not reset SerDes on link change (+3,-1)
e0aaecd kernel: bump 5.10 to 5.10.114 (+32,-32)
a11c3cd realtek: add support for ZyXEL GS1900-16 (+45)
ee4a765 realtek: add support for ZyXEL GS1900-24E (+72)
e2ca166 realtek: add reset button for D-Link DGS-1210-28 (+18)
de0a9b0 realtek: add gpio-restart for D-Link DGS-1210-28 (+6)
0ca9367 kernel: bump 5.10 to 5.10.119 (+9,-34)
ff88989 kernel: bump 5.10 to 5.10.120 (+12,-12)

a83dc6b kernel: move Toshiba-TC58NVG0S3H patch to ipq40xx (+4,-3)

33df033 mac80211: add a bug fix for a rare crash (+38)

Description: Firewall: Default Allow-DHCPv6 rule option src_ip 'fc00::/6' prevents receiving ipv6 DHCP from ISP
Link: https://github.com/openwrt/openwrt/issues/5066
Commits:
5ff900e firewall: config: remove restictions on DHCPv6 allow rule (+2,-4)
80baa60 firewall4: update to latest Git HEAD (+3,-3)
⇒ 2379c3d tests: add test coverage for zone family selection logic (+300)
⇒ 2816a82 ruleset: ensure that family-agnostic ICMP rules cover ICMPv6 as well (+19,-5)
⇒ b479815 fw4: fix family auto-selection for config nat rules (+74,-16)
⇒ 05995f1 fw4: fix emitting device jump rules for family restricted zones (+17,-26)
⇒ b0b8122 treewide: use modern syntax (+151,-176)
⇒ f0cc317 fw4: refactor family selection for forwarding rules (+254,-24)
⇒ 72b196d config: remove restictions on DHCPv6 allow rule (+1,-3)
⇒ 7782017 tests: fix mocked `fd.read("line")` api (+2,-2)
⇒ 57984e0 fw4: always resolve lower flowtable devices (+51,-40)
⇒ b268225 fw4: filter non hw-offload capable devices when resolving lower devices (+46,-49)
⇒ d005293 fw4: store zone associations from ubus in statefile as well (+3,-1)
⇒ 628d791 hotplug: reliably handle interfaces with ubus zone hints (+7,-1)
⇒ c22eeef fw4: support negative CIDR bit notation (+8,-3)

Description: RTC modules not enabled for Raspberry Pi
Link: https://github.com/openwrt/openwrt/issues/9594
Commits:
6120a66 bcm27xx: include 'rtc' in target's 'FEATURES' (+1,-1)

Description: [22.03] FW4 - interfaces with firewall rules require manual firewall restart
Link: https://github.com/openwrt/openwrt/issues/9611
Commits:
80baa60 firewall4: update to latest Git HEAD (+3,-3)
⇒ 2379c3d tests: add test coverage for zone family selection logic (+300)
⇒ 2816a82 ruleset: ensure that family-agnostic ICMP rules cover ICMPv6 as well (+19,-5)
⇒ b479815 fw4: fix family auto-selection for config nat rules (+74,-16)
⇒ 05995f1 fw4: fix emitting device jump rules for family restricted zones (+17,-26)
⇒ b0b8122 treewide: use modern syntax (+151,-176)
⇒ f0cc317 fw4: refactor family selection for forwarding rules (+254,-24)
⇒ 72b196d config: remove restictions on DHCPv6 allow rule (+1,-3)
⇒ 7782017 tests: fix mocked `fd.read("line")` api (+2,-2)
⇒ 57984e0 fw4: always resolve lower flowtable devices (+51,-40)
⇒ b268225 fw4: filter non hw-offload capable devices when resolving lower devices (+46,-49)
⇒ d005293 fw4: store zone associations from ubus in statefile as well (+3,-1)
⇒ 628d791 hotplug: reliably handle interfaces with ubus zone hints (+7,-1)
⇒ c22eeef fw4: support negative CIDR bit notation (+8,-3)

Description: wolfssl: add benchmark, enable CPU crypto instructions
Link: https://github.com/openwrt/openwrt/issues/9738
Commits:
3b90eda wolfssl: make WOLFSSL_HAS_OPENVPN default to y (+1,-1)

Description: firewall4: negative netmask not working
Link: https://github.com/openwrt/openwrt/issues/9764
Commits:
dbd4c34 firewall4: update to latest Git HEAD (+3,-3)
⇒ c4a78ed fw4: fix typo in emitted set types (+2,-2)
⇒ c7c9c84 fw4: ensure that negative bitcounts are properly translated (+9)
⇒ 6dd2617 fw4: fix logic flaw in testing hw flow offloading support (+6,-8)
⇒ fb9a6b2 ruleset: correct mangle_output chain type (+18,-18)
⇒ 30a7d47 fw4: fix datetime parsing (+12,-13)
⇒ 221040e ruleset: emit time ranges when both start and stop times are specified (+260,-24)
⇒ 4e5e322 fw4: make `fw4 restart` behavior more robust (+3,-3)
⇒ 210991d fw4: prefer /dev/stdin if available (+4,-2)

Description: firewall4: ICMP rule without specified family is only applied for IPv4
Link: https://github.com/openwrt/openwrt/issues/9765
Commits:
80baa60 firewall4: update to latest Git HEAD (+3,-3)
⇒ 2379c3d tests: add test coverage for zone family selection logic (+300)
⇒ 2816a82 ruleset: ensure that family-agnostic ICMP rules cover ICMPv6 as well (+19,-5)
⇒ b479815 fw4: fix family auto-selection for config nat rules (+74,-16)
⇒ 05995f1 fw4: fix emitting device jump rules for family restricted zones (+17,-26)
⇒ b0b8122 treewide: use modern syntax (+151,-176)
⇒ f0cc317 fw4: refactor family selection for forwarding rules (+254,-24)
⇒ 72b196d config: remove restictions on DHCPv6 allow rule (+1,-3)
⇒ 7782017 tests: fix mocked `fd.read("line")` api (+2,-2)
⇒ 57984e0 fw4: always resolve lower flowtable devices (+51,-40)
⇒ b268225 fw4: filter non hw-offload capable devices when resolving lower devices (+46,-49)
⇒ d005293 fw4: store zone associations from ubus in statefile as well (+3,-1)
⇒ 628d791 hotplug: reliably handle interfaces with ubus zone hints (+7,-1)
⇒ c22eeef fw4: support negative CIDR bit notation (+8,-3)

Description: Fw4 won't start after upgrade to 2022-04-21-fc83d462-1
Link: https://github.com/openwrt/openwrt/issues/9788
Commits:
5a11704 ucode: reorder BuildPackage calls (+1,-1)

Description: openwrt-22.03 bricks Samknows SK-WB8
Link: https://github.com/openwrt/openwrt/issues/9824
Commits:
1c6a179 ramips: fix booting on Samknows SK-WB8 (+1)

Description: firewall4: software offloading not working with bridge devices in flowtables
Link: https://github.com/openwrt/openwrt/issues/9854
Commits:
80baa60 firewall4: update to latest Git HEAD (+3,-3)
⇒ 2379c3d tests: add test coverage for zone family selection logic (+300)
⇒ 2816a82 ruleset: ensure that family-agnostic ICMP rules cover ICMPv6 as well (+19,-5)
⇒ b479815 fw4: fix family auto-selection for config nat rules (+74,-16)
⇒ 05995f1 fw4: fix emitting device jump rules for family restricted zones (+17,-26)
⇒ b0b8122 treewide: use modern syntax (+151,-176)
⇒ f0cc317 fw4: refactor family selection for forwarding rules (+254,-24)
⇒ 72b196d config: remove restictions on DHCPv6 allow rule (+1,-3)
⇒ 7782017 tests: fix mocked `fd.read("line")` api (+2,-2)
⇒ 57984e0 fw4: always resolve lower flowtable devices (+51,-40)
⇒ b268225 fw4: filter non hw-offload capable devices when resolving lower devices (+46,-49)
⇒ d005293 fw4: store zone associations from ubus in statefile as well (+3,-1)
⇒ 628d791 hotplug: reliably handle interfaces with ubus zone hints (+7,-1)
⇒ c22eeef fw4: support negative CIDR bit notation (+8,-3)

Description: fw4: Doesn't take into account time restrictions
Link: https://github.com/openwrt/openwrt/issues/9923
Commits:
dad1533 ucode: update to latest Git HEAD (+3,-3)
⇒ 559029e ci: make jobs faster during pull request testing (+63,-3)
⇒ da3f089 lib: rework uc_index() implementation (+168,-15)
⇒ 9efbe18 lib: refactor `uc_int()` (+23,-10)
⇒ d996047 syntax: adjust number literal parsing and string to number conversion (+98,-11)
dbd4c34 firewall4: update to latest Git HEAD (+3,-3)
⇒ c4a78ed fw4: fix typo in emitted set types (+2,-2)
⇒ c7c9c84 fw4: ensure that negative bitcounts are properly translated (+9)
⇒ 6dd2617 fw4: fix logic flaw in testing hw flow offloading support (+6,-8)
⇒ fb9a6b2 ruleset: correct mangle_output chain type (+18,-18)
⇒ 30a7d47 fw4: fix datetime parsing (+12,-13)
⇒ 221040e ruleset: emit time ranges when both start and stop times are specified (+260,-24)
⇒ 4e5e322 fw4: make `fw4 restart` behavior more robust (+3,-3)
⇒ 210991d fw4: prefer /dev/stdin if available (+4,-2)

Description: firewall4 typo
Link: https://github.com/openwrt/openwrt/issues/9927
Commits:
dbd4c34 firewall4: update to latest Git HEAD (+3,-3)
⇒ c4a78ed fw4: fix typo in emitted set types (+2,-2)
⇒ c7c9c84 fw4: ensure that negative bitcounts are properly translated (+9)
⇒ 6dd2617 fw4: fix logic flaw in testing hw flow offloading support (+6,-8)
⇒ fb9a6b2 ruleset: correct mangle_output chain type (+18,-18)
⇒ 30a7d47 fw4: fix datetime parsing (+12,-13)
⇒ 221040e ruleset: emit time ranges when both start and stop times are specified (+260,-24)
⇒ 4e5e322 fw4: make `fw4 restart` behavior more robust (+3,-3)
⇒ 210991d fw4: prefer /dev/stdin if available (+4,-2)

Description: firewall4: 22.03.0-rc2/-rc3 fails to start fw4 on devices without hw-offload capability
Link: https://github.com/openwrt/openwrt/issues/9935
Commits:
dbd4c34 firewall4: update to latest Git HEAD (+3,-3)
⇒ c4a78ed fw4: fix typo in emitted set types (+2,-2)
⇒ c7c9c84 fw4: ensure that negative bitcounts are properly translated (+9)
⇒ 6dd2617 fw4: fix logic flaw in testing hw flow offloading support (+6,-8)
⇒ fb9a6b2 ruleset: correct mangle_output chain type (+18,-18)
⇒ 30a7d47 fw4: fix datetime parsing (+12,-13)
⇒ 221040e ruleset: emit time ranges when both start and stop times are specified (+260,-24)
⇒ 4e5e322 fw4: make `fw4 restart` behavior more robust (+3,-3)
⇒ 210991d fw4: prefer /dev/stdin if available (+4,-2)

Description: firewall4: marking in outgoing rules
Link: https://github.com/openwrt/openwrt/issues/9955
Commits:
dbd4c34 firewall4: update to latest Git HEAD (+3,-3)
⇒ c4a78ed fw4: fix typo in emitted set types (+2,-2)
⇒ c7c9c84 fw4: ensure that negative bitcounts are properly translated (+9)
⇒ 6dd2617 fw4: fix logic flaw in testing hw flow offloading support (+6,-8)
⇒ fb9a6b2 ruleset: correct mangle_output chain type (+18,-18)
⇒ 30a7d47 fw4: fix datetime parsing (+12,-13)
⇒ 221040e ruleset: emit time ranges when both start and stop times are specified (+260,-24)
⇒ 4e5e322 fw4: make `fw4 restart` behavior more robust (+3,-3)
⇒ 210991d fw4: prefer /dev/stdin if available (+4,-2)