The Dude full changelog

app - added jupyter-notebook, livebook, myip, and rustfs apps (additional fixes);
app - added support for custom apps (additional fixes);
app - do not show duplicate entries of required-mounts;
app - fixed elasticsearch, element, pmacct-netflow apps failing to start (additional fixes);
bgp-vpn - allow modifying scopes with routing filters;
bgp-vpn - use target scope for imported route;
netinstall-cli - fixed empty configuration option (introduced in v7.22rc3);
ospf - fixed typos in log messages;
route - added SLAAC route redistribution for IPv6 capable routing protocols;
route - fixed /routing/settings not able to set configuration without specifying policy-rule parameter (introduced in v7.22rc3);
routing-filter - added possibility to match SLAAC and bgp-mpls-vpn route types;
switch - improved system stability when changing bridge multicast-router property on CRS1xx/2xx (introduced in v7.19);
system - added reset-configuration keep-apps=yes (additional fixes);
wifi - improved support for 802.11be access points (additional fixes);
winbox - fixed L3HW default value for VLAN interface (introduced in v7.21);
winbox - rearrange filter wizard parameters in tabs;

App - added "media-path" and "download-path" setting in /app/settings;
App - added shm_size parameter to apps that require it;
App - calibre-web app auto add db if none exists;
App - fixed Firefox and Webtop to work with https-proxy;
App - fixed fossil app login typo;
Bgp - implement revised input error handling per RFC 7606;
Container - added support for the shm_size setting;
Container - allow non-root user write to SMB share;
Container - changed default container registry to docker.io;
Container - do not mount tmpfs on /tmp and /run by default;
Container - do not start container if any volume is not mounted;
Container - fixed nftables/iptables not working with "Message too long" error;
Container - made container mounts writable by the user;
Defconf - added single port MGMT bridge on CCR/RDS for easier /app configuration;
Defconf - improved firewall rule for local traffic to the loopback interface;
Disk - fixed issue where mountpoint was not removed after removing the disk;
Dns - fixed domain resolution for the ":resolve" command "server" parameter;
Lte - fixed issue for Chateau 5G R17 ax (introduced in v7.21.1);
Poe-out - firmware update for 802.3at capable boards (the update will cause a brief power interruption to poe-out interfaces);
Poe-out - firmware update for 802.3bt capable boards (the update will cause a brief power interruption to poe-out interfaces);
Poe-out - fixed occasional firmware update failure on CRS354;
Poe-out - fixed PSU state recovery upon unplug/replug on CRS320;
Ppp - added initial support for BG770A-GL modem firmware update;
Ppp - fixed premature PPP client disconnect on BG77 modems during firmware update;
Route - prevent creating routing tables with the same name;
Routing-filter - fixed num-set matcher;
Sfp - fixed sfp-ignore-rx-loss parameter for RB760iGS;
Sfp - improved initialization and linking for some QSFP modules;
Snmp - fixed handling of the script "dont-require-permissions&qu

bridge - fixed dynamic switch-cpu VLAN creation (introduced in v7.21);
bridge - improved stability when using MVRP (introduced in v7.21);
certificate - fixed empty trust store handling in certain cases (introduced in v7.21);
container - changed app auto update to be off by default;
container - fixed issue where containers may not start with large mounts;
health - fixed fan and PSU state logging for MIPSBE devices;
leds - fixed power LED behavior for hAP ax S;
lte - fixed APN configuration for QMI modems in a 3G network when use-network-apn=yes is used;
switch - fixed switch type for hAP ax lite devices (introduced in v7.21);
system - fixed rare partial loss of RouterOS configuration;

winbox - fixed switch QoS monitor for mirror properties;
winbox - hide certificate "Issuer" field for certificate template;
winbox - hide IPv6 addresses for IP neighbors that no longer have them;
winbox - make multiple address fields required;
winbox - make separate inputs for WiFi Interworking "Authentication Types" and "Connection Capabilities" fields;
winbox - make VETH gateway fields not required;
winbox - move VRF from Ethernet to generic Interface table;
winbox - removed "Add" for dynamic DNS servers;
winbox - reorder BGP and OSPF tabs in logical order;
winbox - restore route max object 10000 limit;
winbox - show "Trusted" field for certificate template;
winbox - show warnings in "Routing/BGP" menus;
winbox - show warnings in Disk menu;
winbox - updated and shortened window titles (e.g. Address List -> Addresses);
wireguard - added VRF option (CLI only);
wireguard - allow to add AllowedIPs configuration for client configuration template;
wireless - added last-ip parameter for the CAPSMAN registration-table tab;
wireless - improved system stability when stopping scan process;
www - added option to disable individual web services in /ip/service/webserver and IP>Services>Web Server;
www - handle escaped characters in resource IDs and names for REST API requests;
www - process REST API requests only after user authentication is completed;
www - removed ability to publish directories via "/files" www service;

Bgp - fixed l2vpn-cisco decoding (introduced in v7.20);
Bgp - fixed occasional corruption of MPLS labels in BGP VPN update messages;
Bridge - fixed dynamic switch-cpu VLAN creation (introduced in v7.20);
Bridge - improved system stability when forwarding traffic with fast-path and bridged interface gets removed or disabled (introduced in v7.20);
Bth - make user private-key sensitive;
Console - fixed empty output in route menus when using "print where gateway";
Console - updated copyright notice;
Firewall - clear relevant masqueraded connection tracking entries on IP address change;
Ipv6 - initialize RA receiving when enabled and without any other IPv6 configuration;
Log - fixed memory leak;
Lte - fixed LTE interface IPv6 address generation to use EUI-64 (introduced in v7.20);
Lte - fixed no re-connection after cellular network requested APN deactivation on Chateau 5G ax R17;
Ovpn - fixed OVPN server handling on reboot (introduced in v7.20);
Ovpn - improved system stability when using cipher=blowfish128;
Sfp - fixed "sfp-tx-fault" state indication for CRS520-4XS-16XQ;
Sfp - fixed missing link up/down notifies;
Switch - fixed non-IP multicast packet receive on 98DX8208, 98DX8216, 98DX8212, 98DX8332, 98DX3257, 98DX4310, 98DX8525, 98DX3255, 98CX8410 switches;
System - detect policy mismatch sooner if script is executed internally by some other service;
Ups - fixed board hibernation shutdown;
Wifi-mediatek - added Superchannel regulatory profile;

bridge - expose more DHCP snooping warning logs;
bridge - fixed possible DHCP packet drop caused by the add-dhcp-option82;
firewall - clear relevant masqueraded connection tracking entries on IP address change;
log - fixed memory leak;
tr069-client - expose 5G NR signal metrics for the Chateau R17 ax;
w60g - fixed possible memory leak when an interface is disabled;
winbox - fixed Preshared Key "auto" and "none" options for WireGuard Peer;

bridge - fixed issue where use-ip-firewall was enabled due to running container (introduced in v7.21beta8);
certificate - added certificate "trust-store" parameter (additional fixes);
console - fixed empty output in route menus when using "print where gateway";
console - improved service stability and memory allocation when using "regexp" operator;
console - improved service stability when executing commands that can timeout;
hotspot - prevent service from starting unnecessarily in the background on export/print commands;
lte - ask for user confirmation before installing eSIM profile (additional fixes);
ovpn - improved system stability when using cipher=blowfish128;
socksify - listen on all addresses for incoming connections;
ups - fixed board hibernation shutdown;
usb - fixed cases where USB bus order could change on D53 devices;

bgp - fixed BGP origin attribute initial value;
bgp - properly apply link.local connection setting when it is used as an interface;
bgp-vpn - fixed prefix matching for filters "dst" matcher;
ospf - fixed wrong LS Ack warning;
pimsm - added comment for static-rp;
route - fixed gateway print when gateway is equal to BGP peers address;
route - fixed some routes installed in main routing table instead of specified VRF;
route - make discourse work with destinations from VRF;
routing-filter - fixed inline filters that process BGP communities;
system - improved incoming TCP connection responsiveness;
user - improved login service stability on busy system;
webfig - fixed broken WebFig after going to Quick Set (introduced in v7.20.4);
wifi - improved regulatory compliance for Bangladesh country profile;
winbox - group L3 and L4 fields under switch rules menu;

bgp - improved instance upgrade from versions prior to v7.20;
console - fixed file id conversion operations;
pppoe-server - fixed client disconnects when multiple servers are active (introduced in v7.20);
rip - fixed RIP configuration conversion on upgrade from v6 to v7;
route - fixed gateway print when gateway is equal to BGP peers address;
routing-filter - check AFI when setting pref-src;
routing-filter - fixed default route destination matcher behavior for different AFIs;
webfig - fixed button handling in skin designer;
winbox - show "Bus" parameter for "USB Power Reset" on Chateau LTE6/LTE18 ax devices;
winbox - show "System/RouterBOARD/Mode Button" on devices that have such a button;

bridge - fixed incorrectly blocked ports by STP (introduced in v7.20);
console - fixed incorrect ids in /file/print relative mode (introduced in v7.20);
console - improved stability when printing ids for a non-existent directory (introduced in v7.20)
dhcpv6-client - improved system stability when DHCPv6 client uses "rapid-commit=no", "accept-prefix-without-address=no" and receives only prefix from the server;
dhcpv6-server - do not force set "address-pool" on static bindings with unset pool option after system reboot;
evpn - added basic logging support;
evpn - fixed MAC mobility;
firewall - reduce maximum connection tracking entry count;
iot - fixed an issue preventing LoRa downlink packets from being broadcasted;
ip - removed duplicate CLI parameters for socksify;
log - cleaned up older config by removing leading slashes from "disk-file-name" values;
mpls - fixed LDP label binding if nexthop is link-local address;
poe-out - fixed RB5009 PoE-in indication on cold-boot with no other power source;
routing-filter - change "^$" regexp to bgp-path-len=0 on upgrade from v6 to v7;
routing-filter - use bgp-out-med for set bgp-med on upgrade from v6 to v7;
snmp - fixed SNMP SET operation (introduced in v7.20);
snmp - set maximum message size to 8 KB;
system - fixed ".auto.rsc" file execution (introduced in v7.20);
system - fixed package list fetch from local upgrade server;
system - fixed Windows executable compatibility with Microsoft AppLocker;
winbox - added IP/Socksify menu;
winbox - added support for 200Gbps/400Gbps Rate fields;
winbox - fixed Ethernet Tx Stats (introduced in v7.20);