The Dude full changelog

console - fixed unresponsiveness when entering safe-mode through the Windows 11 terminal;
discovery - added separate read-only menu "/ip/neighbor/lldp" for neighbors discovered by the LLDP (CLI only) (additional fixes);
ethernet - fixed stability issue after switch reset on devices with IPQ-40xx, IPQ-60xx CPUs (introduced in v7.22);
ip - added IPv6 and VRF support for reverse-proxy;
netwatch - fixed memory leak when using HTTP/HTTPS GET probe with invalid src-address;
sniffer - fixed missing VLAN tag in the TZSP packets (additional fixes);
system - improved switching to HTTP/1 if HTTP/2 is not supported by remote host;
upgrade - added the option to configure HTTP/HTTPS modes when connecting to MikroTik upgrade servers (additional fixes);
vrrp - fixed stability issue when using VRRP with a hardware-offloaded bridge for Marvell Prestera switch chip;
wifi - improved interface provisioning for WiFi 7 access points;

Bgp-vpn - fixed non-working import filter after reboot;
Certificate - added option to configure built-in trust store for all services (CLI only);
Certificate - use "default" for built-in trust store default value;
Chr - improved virtio_net stability;
Console - removed the "reset" command from shared settings menus (IP/IPv6/Bridge/L3HW/Neighbor-Discovery/Connection-Tracking);
Defconf - fixed architecture detection for apps;
Hardware - name serial devices after port names;
Hardware - name storage hardware devices after slot name in "/disk" menu;
L3hw - fixed a system stability issue (introduced in v7.21);
Leds - allow multiple interface selection for interface-activity trigger;
Log - do not provide non-existent logging topics for configuration;
Log - fixed "/system/logging/action/get" command (introduced in v7.22);
Lte - fixed LTE modem automatic modeswitch (introduced in v7.22);
Lte - fixed Tx stat reporting in LTE passthrough mode (introduced in v7.22);
Qos-hw - display queue0 limits for CPU port;
Qos-hw - fixed "offline" tx-manager ability to queue at least one packet (introduced in v7.21);
Qos-hw - prohibit setting CPU port with "offline" tx-manager;
Quickset - fixed configuration of multi-link APs;
Ssh - make login process asynchronous;
Switch - disable EEE on RB5009 and CCR2004-16G-2S+ devices;
System - fixed total memory reporting on hAP be3 Media;
Tr069 - fixed modem extended revision reporting;
Wifi - fixed bridge VLAN configuration for multi-link interfaces;
Wifi - fixed EAP authentication for multi-link clients;
Wifi - improved link-specific parameter application after reboot for multi-link interfaces;
Wifi - improved stability during association;
Winbox - added "Supported HW Caps" and "Multi Link Mode" configuration options under the "WiFi/Provisioning" menu;
Winbox - do not set empty chain when adding/editing routing rule;
Winbox - fixed "Remote AS" setting

Certificate - added support for multiple ACME certificates (services that use a previously generated certificate need to be reconfigured after the certificate expires);
Device-mode - added option to configure device-mode via Netinstall or FlashFig using a “mode script”;
App - added configurable app-store URL for custom apps;
App - added health check for apps, which automatically rewrites the composed YAML;
App - added jupyter-notebook, livebook, myip, and rustfs apps;
App - added support for custom apps;
App - allow configuring bridge port pvid for app;
App - changed ui-url parameter for Smokeping and Nextcloud;
App - clean the backup directory after container repull;
App - do not show duplicate entries of required-mounts;
App - enable swap on all devices that use apps to help with performance;
App - fixed /app/export;
App - fixed apps constantly polling the cloud;
App - fixed elasticsearch, element, pmacct-netflow apps failing to start;
App - fixed issue with Cinny not being able to create a root-dir;
App - fixed missing reverse-proxy URL;
App - fixed potential port collisions between apps;
App - show app URL only when it is running;
App - show DNS URL for app only if it has a reverse-proxy;
Bgp - added BGP unnumbered support;
Bgp - changed multipath to number argument;
Bgp - fixed BGP output sometimes not being cleaned after session restart;
Bgp - fixed early-cut not working properly;
Bgp - fixed ignore-as-path-len not being used;
Bgp - fixed update messages not being sent on default-prepend value change;
Bgp - implemented add-path;
Bgp - implemented multipath (ability for BGP best path to select ECMP routes);
Bgp - make remote.address parameter optional;
Bgp-vpn - allow modifying scopes with routing filters;
Bgp-vpn - use target scope for imported route;
Bridge - added local and static MAC synchronization for MLAG;
Bridge - added MLAG support per bridge interface (/interface/bridge/mlag menu is moved to /interface/bridge; configuration is automatically update

app - added jupyter-notebook, livebook, myip, and rustfs apps (additional fixes);
app - added support for custom apps (additional fixes);
app - do not show duplicate entries of required-mounts;
app - fixed elasticsearch, element, pmacct-netflow apps failing to start (additional fixes);
bgp-vpn - allow modifying scopes with routing filters;
bgp-vpn - use target scope for imported route;
netinstall-cli - fixed empty configuration option (introduced in v7.22rc3);
ospf - fixed typos in log messages;
route - added SLAAC route redistribution for IPv6 capable routing protocols;
route - fixed /routing/settings not able to set configuration without specifying policy-rule parameter (introduced in v7.22rc3);
routing-filter - added possibility to match SLAAC and bgp-mpls-vpn route types;
switch - improved system stability when changing bridge multicast-router property on CRS1xx/2xx (introduced in v7.19);
system - added reset-configuration keep-apps=yes (additional fixes);
wifi - improved support for 802.11be access points (additional fixes);
winbox - fixed L3HW default value for VLAN interface (introduced in v7.21);
winbox - rearrange filter wizard parameters in tabs;

App - added "media-path" and "download-path" setting in /app/settings;
App - added shm_size parameter to apps that require it;
App - calibre-web app auto add db if none exists;
App - fixed Firefox and Webtop to work with https-proxy;
App - fixed fossil app login typo;
Bgp - implement revised input error handling per RFC 7606;
Container - added support for the shm_size setting;
Container - allow non-root user write to SMB share;
Container - changed default container registry to docker.io;
Container - do not mount tmpfs on /tmp and /run by default;
Container - do not start container if any volume is not mounted;
Container - fixed nftables/iptables not working with "Message too long" error;
Container - made container mounts writable by the user;
Defconf - added single port MGMT bridge on CCR/RDS for easier /app configuration;
Defconf - improved firewall rule for local traffic to the loopback interface;
Disk - fixed issue where mountpoint was not removed after removing the disk;
Dns - fixed domain resolution for the ":resolve" command "server" parameter;
Lte - fixed issue for Chateau 5G R17 ax (introduced in v7.21.1);
Poe-out - firmware update for 802.3at capable boards (the update will cause a brief power interruption to poe-out interfaces);
Poe-out - firmware update for 802.3bt capable boards (the update will cause a brief power interruption to poe-out interfaces);
Poe-out - fixed occasional firmware update failure on CRS354;
Poe-out - fixed PSU state recovery upon unplug/replug on CRS320;
Ppp - added initial support for BG770A-GL modem firmware update;
Ppp - fixed premature PPP client disconnect on BG77 modems during firmware update;
Route - prevent creating routing tables with the same name;
Routing-filter - fixed num-set matcher;
Sfp - fixed sfp-ignore-rx-loss parameter for RB760iGS;
Sfp - improved initialization and linking for some QSFP modules;
Snmp - fixed handling of the script "dont-require-permissions&qu

bridge - fixed dynamic switch-cpu VLAN creation (introduced in v7.21);
bridge - improved stability when using MVRP (introduced in v7.21);
certificate - fixed empty trust store handling in certain cases (introduced in v7.21);
container - changed app auto update to be off by default;
container - fixed issue where containers may not start with large mounts;
health - fixed fan and PSU state logging for MIPSBE devices;
leds - fixed power LED behavior for hAP ax S;
lte - fixed APN configuration for QMI modems in a 3G network when use-network-apn=yes is used;
switch - fixed switch type for hAP ax lite devices (introduced in v7.21);
system - fixed rare partial loss of RouterOS configuration;

winbox - fixed switch QoS monitor for mirror properties;
winbox - hide certificate "Issuer" field for certificate template;
winbox - hide IPv6 addresses for IP neighbors that no longer have them;
winbox - make multiple address fields required;
winbox - make separate inputs for WiFi Interworking "Authentication Types" and "Connection Capabilities" fields;
winbox - make VETH gateway fields not required;
winbox - move VRF from Ethernet to generic Interface table;
winbox - removed "Add" for dynamic DNS servers;
winbox - reorder BGP and OSPF tabs in logical order;
winbox - restore route max object 10000 limit;
winbox - show "Trusted" field for certificate template;
winbox - show warnings in "Routing/BGP" menus;
winbox - show warnings in Disk menu;
winbox - updated and shortened window titles (e.g. Address List -> Addresses);
wireguard - added VRF option (CLI only);
wireguard - allow to add AllowedIPs configuration for client configuration template;
wireless - added last-ip parameter for the CAPSMAN registration-table tab;
wireless - improved system stability when stopping scan process;
www - added option to disable individual web services in /ip/service/webserver and IP>Services>Web Server;
www - handle escaped characters in resource IDs and names for REST API requests;
www - process REST API requests only after user authentication is completed;
www - removed ability to publish directories via "/files" www service;

Bgp - fixed l2vpn-cisco decoding (introduced in v7.20);
Bgp - fixed occasional corruption of MPLS labels in BGP VPN update messages;
Bridge - fixed dynamic switch-cpu VLAN creation (introduced in v7.20);
Bridge - improved system stability when forwarding traffic with fast-path and bridged interface gets removed or disabled (introduced in v7.20);
Bth - make user private-key sensitive;
Console - fixed empty output in route menus when using "print where gateway";
Console - updated copyright notice;
Firewall - clear relevant masqueraded connection tracking entries on IP address change;
Ipv6 - initialize RA receiving when enabled and without any other IPv6 configuration;
Log - fixed memory leak;
Lte - fixed LTE interface IPv6 address generation to use EUI-64 (introduced in v7.20);
Lte - fixed no re-connection after cellular network requested APN deactivation on Chateau 5G ax R17;
Ovpn - fixed OVPN server handling on reboot (introduced in v7.20);
Ovpn - improved system stability when using cipher=blowfish128;
Sfp - fixed "sfp-tx-fault" state indication for CRS520-4XS-16XQ;
Sfp - fixed missing link up/down notifies;
Switch - fixed non-IP multicast packet receive on 98DX8208, 98DX8216, 98DX8212, 98DX8332, 98DX3257, 98DX4310, 98DX8525, 98DX3255, 98CX8410 switches;
System - detect policy mismatch sooner if script is executed internally by some other service;
Ups - fixed board hibernation shutdown;
Wifi-mediatek - added Superchannel regulatory profile;

bridge - expose more DHCP snooping warning logs;
bridge - fixed possible DHCP packet drop caused by the add-dhcp-option82;
firewall - clear relevant masqueraded connection tracking entries on IP address change;
log - fixed memory leak;
tr069-client - expose 5G NR signal metrics for the Chateau R17 ax;
w60g - fixed possible memory leak when an interface is disabled;
winbox - fixed Preshared Key "auto" and "none" options for WireGuard Peer;

bridge - fixed issue where use-ip-firewall was enabled due to running container (introduced in v7.21beta8);
certificate - added certificate "trust-store" parameter (additional fixes);
console - fixed empty output in route menus when using "print where gateway";
console - improved service stability and memory allocation when using "regexp" operator;
console - improved service stability when executing commands that can timeout;
hotspot - prevent service from starting unnecessarily in the background on export/print commands;
lte - ask for user confirmation before installing eSIM profile (additional fixes);
ovpn - improved system stability when using cipher=blowfish128;
socksify - listen on all addresses for incoming connections;
ups - fixed board hibernation shutdown;
usb - fixed cases where USB bus order could change on D53 devices;