RouterOS 7.21.2 -arm64

Build Time:1769741017
What's new in 7.21.2 (2026-Jan-29 11:54):

*) app - added "media-path" and "download-path" setting in /app/settings;
*) app - added shm_size parameter to apps that require it;
*) app - calibre-web app auto add db if none exists;
*) app - fixed Firefox and Webtop to work with https-proxy;
*) app - fixed fossil app login typo;
*) bgp - implement revised input error handling per RFC 7606;
*) container - added support for the shm_size setting;
*) container - allow non-root user write to SMB share;
*) container - changed default container registry to docker.io;
*) container - do not mount tmpfs on /tmp and /run by default;
*) container - do not start container if any volume is not mounted;
*) container - fixed nftables/iptables not working with "Message too long" error;
*) container - made container mounts writable by the user;
*) defconf - added single port MGMT bridge on CCR/RDS for easier /app configuration;
*) defconf - improved firewall rule for local traffic to the loopback interface;
*) disk - fixed issue where mountpoint was not removed after removing the disk;
*) dns - fixed domain resolution for the ":resolve" command "server" parameter;
*) lte - fixed issue for Chateau 5G R17 ax (introduced in v7.21.1);
*) poe-out - firmware update for 802.3at capable boards (the update will cause a brief power interruption to poe-out interfaces);
*) poe-out - firmware update for 802.3bt capable boards (the update will cause a brief power interruption to poe-out interfaces);
*) poe-out - fixed occasional firmware update failure on CRS354;
*) poe-out - fixed PSU state recovery upon unplug/replug on CRS320;
*) ppp - added initial support for BG770A-GL modem firmware update;
*) ppp - fixed premature PPP client disconnect on BG77 modems during firmware update;
*) route - prevent creating routing tables with the same name;
*) routing-filter - fixed num-set matcher;
*) sfp - fixed sfp-ignore-rx-loss parameter for RB760iGS;
*) sfp - improved initialization and linking for some QSFP modules;
*) snmp - fixed handling of the script "dont-require-permissions" parameter when executing scripts using MIKROTIK-MIB::mtxrScriptRunOutput;
*) snmp - fixed permission error reporting when executing scripts using MIKROTIK-MIB::mtxrScriptRunOutput (introduced in v7.21);
*) snmp - fixed script "run-count" update after execution;
*) system - do not attempt to use FastPath RPS on non-ARM64 devices (introduced in v7.21);
*) user-manager - properly release database backup file after backup creation;
*) zerotier - improved route removal;

RouterOS 7.21.2

Build Time:1769741017
What's new in 7.21.2 (2026-Jan-29 11:54):

*) app - added "media-path" and "download-path" setting in /app/settings;
*) app - added shm_size parameter to apps that require it;
*) app - calibre-web app auto add db if none exists;
*) app - fixed Firefox and Webtop to work with https-proxy;
*) app - fixed fossil app login typo;
*) bgp - implement revised input error handling per RFC 7606;
*) container - added support for the shm_size setting;
*) container - allow non-root user write to SMB share;
*) container - changed default container registry to docker.io;
*) container - do not mount tmpfs on /tmp and /run by default;
*) container - do not start container if any volume is not mounted;
*) container - fixed nftables/iptables not working with "Message too long" error;
*) container - made container mounts writable by the user;
*) defconf - added single port MGMT bridge on CCR/RDS for easier /app configuration;
*) defconf - improved firewall rule for local traffic to the loopback interface;
*) disk - fixed issue where mountpoint was not removed after removing the disk;
*) dns - fixed domain resolution for the ":resolve" command "server" parameter;
*) lte - fixed issue for Chateau 5G R17 ax (introduced in v7.21.1);
*) poe-out - firmware update for 802.3at capable boards (the update will cause a brief power interruption to poe-out interfaces);
*) poe-out - firmware update for 802.3bt capable boards (the update will cause a brief power interruption to poe-out interfaces);
*) poe-out - fixed occasional firmware update failure on CRS354;
*) poe-out - fixed PSU state recovery upon unplug/replug on CRS320;
*) ppp - added initial support for BG770A-GL modem firmware update;
*) ppp - fixed premature PPP client disconnect on BG77 modems during firmware update;
*) route - prevent creating routing tables with the same name;
*) routing-filter - fixed num-set matcher;
*) sfp - fixed sfp-ignore-rx-loss parameter for RB760iGS;
*) sfp - improved initialization and linking for some QSFP modules;
*) snmp - fixed handling of the script "dont-require-permissions" parameter when executing scripts using MIKROTIK-MIB::mtxrScriptRunOutput;
*) snmp - fixed permission error reporting when executing scripts using MIKROTIK-MIB::mtxrScriptRunOutput (introduced in v7.21);
*) snmp - fixed script "run-count" update after execution;
*) system - do not attempt to use FastPath RPS on non-ARM64 devices (introduced in v7.21);
*) user-manager - properly release database backup file after backup creation;
*) zerotier - improved route removal;

RouterOS 7.21.1 -arm64

Build Time:1769048841
What's new in 7.21.1 (2026-Jan-19 17:09):

*) bridge - fixed dynamic switch-cpu VLAN creation (introduced in v7.21);
*) bridge - improved stability when using MVRP (introduced in v7.21);
*) certificate - fixed empty trust store handling in certain cases (introduced in v7.21);
*) container - changed app auto update to be off by default;
*) container - fixed issue where containers may not start with large mounts;
*) health - fixed fan and PSU state logging for MIPSBE devices;
*) leds - fixed power LED behavior for hAP ax S;
*) lte - fixed APN configuration for QMI modems in a 3G network when use-network-apn=yes is used;
*) switch - fixed switch type for hAP ax lite devices (introduced in v7.21);
*) system - fixed rare partial loss of RouterOS configuration;

RouterOS 7.21.1

Build Time:1769048841
What's new in 7.21.1 (2026-Jan-19 17:09):

*) bridge - fixed dynamic switch-cpu VLAN creation (introduced in v7.21);
*) bridge - improved stability when using MVRP (introduced in v7.21);
*) certificate - fixed empty trust store handling in certain cases (introduced in v7.21);
*) container - changed app auto update to be off by default;
*) container - fixed issue where containers may not start with large mounts;
*) health - fixed fan and PSU state logging for MIPSBE devices;
*) leds - fixed power LED behavior for hAP ax S;
*) lte - fixed APN configuration for QMI modems in a 3G network when use-network-apn=yes is used;
*) switch - fixed switch type for hAP ax lite devices (introduced in v7.21);
*) system - fixed rare partial loss of RouterOS configuration;

RouterOS 7.21

Build Time:1768357633
What's new in 7.21 (2026-Jan-12 14:56):

*) arm64 - allow enabling receive packet steering on /system/resource/irq/rps menu in order to overcome unbalanced CPU load;
*) bgp - allow duplicate router-ids for eBGP sessions (RFC 6286);
*) bgp - always advertise extended nexthop cap for all supported address families;
*) bgp - do not allow iBGP with non-equal ASNs;
*) bgp - fixed l2vpn-cisco decoding (introduced in v7.20);
*) bgp - fixed occasional corruption of MPLS labels in BGP VPN update messages;
*) bgp - fixed route refresh subcode 0 warning;
*) bgp - fixed selection of received BGP VPN routes;
*) bgp - implement RFC 9234 route leak prevention and detection using roles;
*) bonding - added lacp-system-id and lacp-system-priority settings;
*) bonding - fixed lacp-mode=passive;
*) bonding - improved stability for 802.3ad LACP;
*) bridge - expose more DHCP snooping warning logs;
*) bridge - fixed dynamic switch-cpu VLAN creation (introduced in v7.20);
*) bridge - fixed filter and NAT matching with "mac-protocol=length";
*) bridge - fixed missing local MAC after changing protocol-mode setting;
*) bridge - fixed multicast packet receiving on bridge as multicast-router when HW offloading is used;
*) bridge - fixed possible DHCP packet drop caused by the add-dhcp-option82;
*) bridge - fixed possible MVRP issues when STP topology changes;
*) bridge - fixed static host and MDB entry updates on VLAN add/remove;
*) bridge - improved DHCP Option 82 values (circuit-id:"interface-name:vid", remote-id:"bridge MAC address");
*) bridge - improved stability after failed protocol-mode=mstp change;
*) bridge - improved system stability when forwarding traffic with fast-path and bridged interface gets removed or disabled (introduced in v7.20);
*) bridge - properly apply bridge MVRP settings on the fly;
*) bth - added file-share link preview;
*) bth - fixed big file upload;
*) bth - fixed file-share expire after reboot;
*) bth - make user private-key sensitive;
*) certificate - added certificate "trust-store" parameter;
*) certificate - added option to configure built-in trust store (replaced "builtin-trust-anchors" parameter);
*) certificate - added SHA384, SHA512 support for SCEP;
*) certificate - allow ca-crl-host parameter for issued certificates;
*) certificate - fixed incorrect appearance of "invalid-before" and "invalid-after" dates;
*) certificate - improved logging;
*) certificate - on certificate import, added the "issued" flag if the certificate store contains the imported certificate's CA and its private key;
*) certificate - refactored Certificate internal processes;
*) chr - fixed guest OS type "Other Linux (64-bit)";
*) console - added "mvrp" to mac-protocol setting;
*) console - added delimiter parameter to :toarray command;
*) console - added fetch-changelog flag to check-for-updates command;
*) console - added reset command to settings directories;
*) console - added sensitive flag to QR code in WireGuard "show-client-config";
*) console - added show-sensitive option for print command, hide sensitive settings in print output by default;
*) console - changed file id format;
*) console - do not allow to set value as empty for arguments that require selection of a specific list entry;
*) console - do not set values when "setup" command is interrupted;
*) console - fixed :convert from=num on MIPSBE;
*) console - fixed "special-login" setting incorrect channel;
*) console - fixed autocomplete in fullscreen editor to append tabs, spaces, etc;
*) console - fixed empty output in route menus when using "print where gateway";
*) console - improved :toip command to get IPv4 address from IPv4 CIDR address;
*) console - improved :toip6 command to get IPv6 addresses from IPv6 prefixes;
*) console - improved hints for address arguments;
*) console - improved hints for DHCPv6;
*) console - improved printing visuals (column layout and paging);
*) console - improved stability;
*) console - remove unnecessary commands from /ip/hotspot/active menu;
*) console - removed /quickset menu;
*) console - return error values for certain commands if action failed (e.g. /system/routerboard/upgrade);
*) console - show fullscreen script editor completions above hintbar;
*) console - updated "Change your password" to "Change your password (Ctrl-C to skip)";
*) console - updated copyright notice;
*) container - add initial Bluetooth device support;
*) container - added "/app" menu for simple containerized app installation (requires "container" package and enabled "container" device-mode);
*) container - added CPU usage;
*) container - added hosts setting;
*) container - added kill command to send signals (CLI only);
*) container - added option to limit CPUs used by containers;
*) container - added root dir size;
*) container - added run command to allow interactive mode (CLI only);
*) container - added stop-time setting;
*) container - added update command (CLI only);
*) container - allow /tmp tmpfs to be unlimited in size;
*) container - allow app network to be any bridge interface;
*) container - allow to configure extra ENV variables directly in container;
*) container - allow to disable/enable envs and mounts;
*) container - allow to specify mounts directly in container;
*) container - calculate volume sizes;
*) container - convert container mounts setting to mountlists, old mount name becomes list name, list name can map to multiple mounts;
*) container - do not allow layer-dir to be within some containers root-dir;
*) container - enable relevant kernel features to support more container apps;
*) container - fixed error for starting container which consists of large number of layers;
*) container - fixed extract issues;
*) container - fixed VETH when using long interface name;
*) container - general container service stability fixes and improvements;
*) container - have per container layer-dir setting to be able to have separate layer stores for different sets of containers;
*) container - made it possible to set timeout on /container/shell;
*) container - make sure a working directory is created if it does not exist;
*) container - show detailed import status, helps understand long imports;
*) container - show image-id field (CLI only);
*) container - shows app URL and "running" status only when port is open;
*) container - store image import data (allows keeping container after netinstall);
*) detnet - do not try detection on slave interfaces;
*) detnet - fixed unnecessary process starting even when feature is not enabled;
*) dhcpv4-client - don't stop client on unsuccessful client option value change;
*) dhcpv4-server - added "support-broadband-tr101" setting to pass additional Option 82 suboptions to RADIUS server;
*) dhcpv4-server - added setting allowing to select client-id, MAC address and opt82 parameters for dynamic lease addition;
*) dhcpv4-server - allow creating static DHCPv4 leases for VETH interfaces;
*) dhcpv4-server - allow to set other gateway types not just IP for dhcp lease "routes" parameter;
*) dhcpv4-server - improved logging;
*) dhcpv4-server - improved setup wizard prompts relating to DNS;
*) dhcpv4-server - respond with hlen 0 when htype is 8;
*) dhcpv4-server - send RADIUS Accounting Stop messages when interim-update is zero;
*) dhcpv6-client - do not show I flag for disabled client;
*) dhcpv6-client - fixed misleading "couldn't acquire address, continue with prefix only" error when prefix is not even requested;
*) dhcpv6-relay - added "about" error message option;
*) dhcpv6-relay - enable configuration of options that are added to relayed DHCPv6 requests;
*) dhcpv6-server - added accounting to use-radius setting, similar to DHCPv4 server;
*) dhcpv6-server - attempt to extract MAC from DUID for dual-stack purposes when client uses DUID-EN type of DUID;
*) dhcpv6-server - improved event logging messages;
*) dhcpv6-server - improved service stability when receiving DHCP requests for PPP service clients without included IA_PD;
*) dhcpv6-server - include traffic usage statistics when accounting is stopped due to binding expiry and removal;
*) discovery - correctly report PoE dual signature per-pair class;
*) discovery - fixed MNDP IPv6 status reporting;
*) discovery - send out neighbor discovery immediately on IPv4/IPv6 changes;
*) disk - added nvme-tcp-server-nqn setting to be able to explicitly configure NQN, will default to "nqn.2000-02.com.mikrotik:slot" for new configurations;
*) disk - allow only lowercase chars in iscsi-server-iqn;
*) disk - allow to have type=file devices without rose-storage (needed for file based swap);
*) disk - allow to set smb-share only for type=smb;
*) disk - consolidate client states into single field, as each item can be only one type of "client";
*) disk - do not allow setting raid-master when have filesystem;
*) disk - do not allow starting Btrfs replace when replace is suspended;
*) disk - do not delete partition configs on device remove and eject (fixes lost config with unstable hardware);
*) disk - fixed iscsi client;
*) disk - fixed iscsi export disable;
*) disk - fixed issue with double "/" in SMB share path for some clients;
*) disk - fixed SATA eject/scan;
*) disk - fixed SMB mount to be writable by container;
*) disk - fixed write RAID superblock;
*) disk - improved cleanup order to avoid waiting for timeouts on shutdown;
*) disk - improved RDS2216 SATA controller;
*) disk - improved system stability;
*) disk - rename nvme-tcp client name to nqn everywhere symmetrically with server;
*) disk - show NVMe critical warnings;
*) disk - unshare iscsi and nfs client/server ids, add iscsi-server-iqn;
*) disk - update interface type/speed after scan;
*) disk - use default label when nothing specified when formatting from WinBox;
*) dns - added VRF support to ":resolve" command;
*) dns - added VRF support to DNS servers;
*) email - added "certificate-verification" parameter;
*) email - return all errors to console when executed from console;
*) eoipv6,gre6,ipip6...

RouterOS 7.20.8 -arm64

Build Time:1770086990
What's new in 7.20.8 (2026-Jan-30 11:17):

*) bgp - fixed route refresh subcode 0 warning;
*) bgp - implement revised input error handling per RFC 7606;
*) bridge - fixed dynamic switch-cpu VLAN creation (introduced in v7.20.7);
*) container - fixed nftables/iptables not working with "Message too long" error;
*) health - fixed fan and PSU state logging for MIPSBE devices;
*) poe-out - firmware update for 802.3bt capable boards (the update will cause a brief power interruption to poe-out interfaces);
*) poe-out - fixed PSU state recovery upon unplug/replug on CRS320;
*) ppp - added initial support for BG770A-GL modem firmware update;
*) route - prevent creating routing tables with the same name;
*) routing-filter - fixed num-set matcher;
*) sfp - fixed sfp-ignore-rx-loss parameter for RB760iGS;
*) snmp - fixed handling of the script "dont-require-permissions" parameter when executing scripts using MIKROTIK-MIB::mtxrScriptRunOutput;
*) snmp - fixed permission error reporting when executing scripts using MIKROTIK-MIB::mtxrScriptRunOutput (introduced in v7.20.7);
*) snmp - fixed script "run-count" update after execution;
*) system - fixed rare partial loss of RouterOS configuration;
*) user-manager - properly release database backup file after backup creation;
*) w60g - fixed possible memory leak when an interface is disabled;
*) zerotier - improved route removal;

RouterOS 7.20.8

Build Time:1770086990
What's new in 7.20.8 (2026-Jan-30 11:17):

*) bgp - fixed route refresh subcode 0 warning;
*) bgp - implement revised input error handling per RFC 7606;
*) bridge - fixed dynamic switch-cpu VLAN creation (introduced in v7.20.7);
*) container - fixed nftables/iptables not working with "Message too long" error;
*) health - fixed fan and PSU state logging for MIPSBE devices;
*) poe-out - firmware update for 802.3bt capable boards (the update will cause a brief power interruption to poe-out interfaces);
*) poe-out - fixed PSU state recovery upon unplug/replug on CRS320;
*) ppp - added initial support for BG770A-GL modem firmware update;
*) route - prevent creating routing tables with the same name;
*) routing-filter - fixed num-set matcher;
*) sfp - fixed sfp-ignore-rx-loss parameter for RB760iGS;
*) snmp - fixed handling of the script "dont-require-permissions" parameter when executing scripts using MIKROTIK-MIB::mtxrScriptRunOutput;
*) snmp - fixed permission error reporting when executing scripts using MIKROTIK-MIB::mtxrScriptRunOutput (introduced in v7.20.7);
*) snmp - fixed script "run-count" update after execution;
*) system - fixed rare partial loss of RouterOS configuration;
*) user-manager - properly release database backup file after backup creation;
*) w60g - fixed possible memory leak when an interface is disabled;
*) zerotier - improved route removal;

RouterOS 7.20.7 -arm64

Build Time:1768016686
What's new in 7.20.7 (2026-Jan-08 11:40):

*) bgp - fixed l2vpn-cisco decoding (introduced in v7.20);
*) bgp - fixed occasional corruption of MPLS labels in BGP VPN update messages;
*) bridge - fixed dynamic switch-cpu VLAN creation (introduced in v7.20);
*) bridge - improved system stability when forwarding traffic with fast-path and bridged interface gets removed or disabled (introduced in v7.20);
*) bth - make user private-key sensitive;
*) console - fixed empty output in route menus when using "print where gateway";
*) console - updated copyright notice;
*) firewall - clear relevant masqueraded connection tracking entries on IP address change;
*) ipv6 - initialize RA receiving when enabled and without any other IPv6 configuration;
*) log - fixed memory leak;
*) lte - fixed LTE interface IPv6 address generation to use EUI-64 (introduced in v7.20);
*) lte - fixed no re-connection after cellular network requested APN deactivation on Chateau 5G ax R17;
*) ovpn - fixed OVPN server handling on reboot (introduced in v7.20);
*) ovpn - improved system stability when using cipher=blowfish128;
*) sfp - fixed "sfp-tx-fault" state indication for CRS520-4XS-16XQ;
*) sfp - fixed missing link up/down notifies;
*) switch - fixed non-IP multicast packet receive on 98DX8208, 98DX8216, 98DX8212, 98DX8332, 98DX3257, 98DX4310, 98DX8525, 98DX3255, 98CX8410 switches;
*) system - detect policy mismatch sooner if script is executed internally by some other service;
*) ups - fixed board hibernation shutdown;
*) wifi-mediatek - added Superchannel regulatory profile;

RouterOS 7.20.7

Build Time:1768016686
What's new in 7.20.7 (2026-Jan-08 11:40):

*) bgp - fixed l2vpn-cisco decoding (introduced in v7.20);
*) bgp - fixed occasional corruption of MPLS labels in BGP VPN update messages;
*) bridge - fixed dynamic switch-cpu VLAN creation (introduced in v7.20);
*) bridge - improved system stability when forwarding traffic with fast-path and bridged interface gets removed or disabled (introduced in v7.20);
*) bth - make user private-key sensitive;
*) console - fixed empty output in route menus when using "print where gateway";
*) console - updated copyright notice;
*) firewall - clear relevant masqueraded connection tracking entries on IP address change;
*) ipv6 - initialize RA receiving when enabled and without any other IPv6 configuration;
*) log - fixed memory leak;
*) lte - fixed LTE interface IPv6 address generation to use EUI-64 (introduced in v7.20);
*) lte - fixed no re-connection after cellular network requested APN deactivation on Chateau 5G ax R17;
*) ovpn - fixed OVPN server handling on reboot (introduced in v7.20);
*) ovpn - improved system stability when using cipher=blowfish128;
*) sfp - fixed "sfp-tx-fault" state indication for CRS520-4XS-16XQ;
*) sfp - fixed missing link up/down notifies;
*) switch - fixed non-IP multicast packet receive on 98DX8208, 98DX8216, 98DX8212, 98DX8332, 98DX3257, 98DX4310, 98DX8525, 98DX3255, 98CX8410 switches;
*) system - detect policy mismatch sooner if script is executed internally by some other service;
*) ups - fixed board hibernation shutdown;
*) wifi-mediatek - added Superchannel regulatory profile;

RouterOS 7.21 -arm64

Build Time:1768357633
What's new in 7.21 (2026-Jan-12 14:56):

*) arm64 - allow enabling receive packet steering on /system/resource/irq/rps menu in order to overcome unbalanced CPU load;
*) bgp - allow duplicate router-ids for eBGP sessions (RFC 6286);
*) bgp - always advertise extended nexthop cap for all supported address families;
*) bgp - do not allow iBGP with non-equal ASNs;
*) bgp - fixed l2vpn-cisco decoding (introduced in v7.20);
*) bgp - fixed occasional corruption of MPLS labels in BGP VPN update messages;
*) bgp - fixed route refresh subcode 0 warning;
*) bgp - fixed selection of received BGP VPN routes;
*) bgp - implement RFC 9234 route leak prevention and detection using roles;
*) bonding - added lacp-system-id and lacp-system-priority settings;
*) bonding - fixed lacp-mode=passive;
*) bonding - improved stability for 802.3ad LACP;
*) bridge - expose more DHCP snooping warning logs;
*) bridge - fixed dynamic switch-cpu VLAN creation (introduced in v7.20);
*) bridge - fixed filter and NAT matching with "mac-protocol=length";
*) bridge - fixed missing local MAC after changing protocol-mode setting;
*) bridge - fixed multicast packet receiving on bridge as multicast-router when HW offloading is used;
*) bridge - fixed possible DHCP packet drop caused by the add-dhcp-option82;
*) bridge - fixed possible MVRP issues when STP topology changes;
*) bridge - fixed static host and MDB entry updates on VLAN add/remove;
*) bridge - improved DHCP Option 82 values (circuit-id:"interface-name:vid", remote-id:"bridge MAC address");
*) bridge - improved stability after failed protocol-mode=mstp change;
*) bridge - improved system stability when forwarding traffic with fast-path and bridged interface gets removed or disabled (introduced in v7.20);
*) bridge - properly apply bridge MVRP settings on the fly;
*) bth - added file-share link preview;
*) bth - fixed big file upload;
*) bth - fixed file-share expire after reboot;
*) bth - make user private-key sensitive;
*) certificate - added certificate "trust-store" parameter;
*) certificate - added option to configure built-in trust store (replaced "builtin-trust-anchors" parameter);
*) certificate - added SHA384, SHA512 support for SCEP;
*) certificate - allow ca-crl-host parameter for issued certificates;
*) certificate - fixed incorrect appearance of "invalid-before" and "invalid-after" dates;
*) certificate - improved logging;
*) certificate - on certificate import, added the "issued" flag if the certificate store contains the imported certificate's CA and its private key;
*) certificate - refactored Certificate internal processes;
*) chr - fixed guest OS type "Other Linux (64-bit)";
*) console - added "mvrp" to mac-protocol setting;
*) console - added delimiter parameter to :toarray command;
*) console - added fetch-changelog flag to check-for-updates command;
*) console - added reset command to settings directories;
*) console - added sensitive flag to QR code in WireGuard "show-client-config";
*) console - added show-sensitive option for print command, hide sensitive settings in print output by default;
*) console - changed file id format;
*) console - do not allow to set value as empty for arguments that require selection of a specific list entry;
*) console - do not set values when "setup" command is interrupted;
*) console - fixed :convert from=num on MIPSBE;
*) console - fixed "special-login" setting incorrect channel;
*) console - fixed autocomplete in fullscreen editor to append tabs, spaces, etc;
*) console - fixed empty output in route menus when using "print where gateway";
*) console - improved :toip command to get IPv4 address from IPv4 CIDR address;
*) console - improved :toip6 command to get IPv6 addresses from IPv6 prefixes;
*) console - improved hints for address arguments;
*) console - improved hints for DHCPv6;
*) console - improved printing visuals (column layout and paging);
*) console - improved stability;
*) console - remove unnecessary commands from /ip/hotspot/active menu;
*) console - removed /quickset menu;
*) console - return error values for certain commands if action failed (e.g. /system/routerboard/upgrade);
*) console - show fullscreen script editor completions above hintbar;
*) console - updated "Change your password" to "Change your password (Ctrl-C to skip)";
*) console - updated copyright notice;
*) container - add initial Bluetooth device support;
*) container - added "/app" menu for simple containerized app installation (requires "container" package and enabled "container" device-mode);
*) container - added CPU usage;
*) container - added hosts setting;
*) container - added kill command to send signals (CLI only);
*) container - added option to limit CPUs used by containers;
*) container - added root dir size;
*) container - added run command to allow interactive mode (CLI only);
*) container - added stop-time setting;
*) container - added update command (CLI only);
*) container - allow /tmp tmpfs to be unlimited in size;
*) container - allow app network to be any bridge interface;
*) container - allow to configure extra ENV variables directly in container;
*) container - allow to disable/enable envs and mounts;
*) container - allow to specify mounts directly in container;
*) container - calculate volume sizes;
*) container - convert container mounts setting to mountlists, old mount name becomes list name, list name can map to multiple mounts;
*) container - do not allow layer-dir to be within some containers root-dir;
*) container - enable relevant kernel features to support more container apps;
*) container - fixed error for starting container which consists of large number of layers;
*) container - fixed extract issues;
*) container - fixed VETH when using long interface name;
*) container - general container service stability fixes and improvements;
*) container - have per container layer-dir setting to be able to have separate layer stores for different sets of containers;
*) container - made it possible to set timeout on /container/shell;
*) container - make sure a working directory is created if it does not exist;
*) container - show detailed import status, helps understand long imports;
*) container - show image-id field (CLI only);
*) container - shows app URL and "running" status only when port is open;
*) container - store image import data (allows keeping container after netinstall);
*) detnet - do not try detection on slave interfaces;
*) detnet - fixed unnecessary process starting even when feature is not enabled;
*) dhcpv4-client - don't stop client on unsuccessful client option value change;
*) dhcpv4-server - added "support-broadband-tr101" setting to pass additional Option 82 suboptions to RADIUS server;
*) dhcpv4-server - added setting allowing to select client-id, MAC address and opt82 parameters for dynamic lease addition;
*) dhcpv4-server - allow creating static DHCPv4 leases for VETH interfaces;
*) dhcpv4-server - allow to set other gateway types not just IP for dhcp lease "routes" parameter;
*) dhcpv4-server - improved logging;
*) dhcpv4-server - improved setup wizard prompts relating to DNS;
*) dhcpv4-server - respond with hlen 0 when htype is 8;
*) dhcpv4-server - send RADIUS Accounting Stop messages when interim-update is zero;
*) dhcpv6-client - do not show I flag for disabled client;
*) dhcpv6-client - fixed misleading "couldn't acquire address, continue with prefix only" error when prefix is not even requested;
*) dhcpv6-relay - added "about" error message option;
*) dhcpv6-relay - enable configuration of options that are added to relayed DHCPv6 requests;
*) dhcpv6-server - added accounting to use-radius setting, similar to DHCPv4 server;
*) dhcpv6-server - attempt to extract MAC from DUID for dual-stack purposes when client uses DUID-EN type of DUID;
*) dhcpv6-server - improved event logging messages;
*) dhcpv6-server - improved service stability when receiving DHCP requests for PPP service clients without included IA_PD;
*) dhcpv6-server - include traffic usage statistics when accounting is stopped due to binding expiry and removal;
*) discovery - correctly report PoE dual signature per-pair class;
*) discovery - fixed MNDP IPv6 status reporting;
*) discovery - send out neighbor discovery immediately on IPv4/IPv6 changes;
*) disk - added nvme-tcp-server-nqn setting to be able to explicitly configure NQN, will default to "nqn.2000-02.com.mikrotik:slot" for new configurations;
*) disk - allow only lowercase chars in iscsi-server-iqn;
*) disk - allow to have type=file devices without rose-storage (needed for file based swap);
*) disk - allow to set smb-share only for type=smb;
*) disk - consolidate client states into single field, as each item can be only one type of "client";
*) disk - do not allow setting raid-master when have filesystem;
*) disk - do not allow starting Btrfs replace when replace is suspended;
*) disk - do not delete partition configs on device remove and eject (fixes lost config with unstable hardware);
*) disk - fixed iscsi client;
*) disk - fixed iscsi export disable;
*) disk - fixed issue with double "/" in SMB share path for some clients;
*) disk - fixed SATA eject/scan;
*) disk - fixed SMB mount to be writable by container;
*) disk - fixed write RAID superblock;
*) disk - improved cleanup order to avoid waiting for timeouts on shutdown;
*) disk - improved RDS2216 SATA controller;
*) disk - improved system stability;
*) disk - rename nvme-tcp client name to nqn everywhere symmetrically with server;
*) disk - show NVMe critical warnings;
*) disk - unshare iscsi and nfs client/server ids, add iscsi-server-iqn;
*) disk - update interface type/speed after scan;
*) disk - use default label when nothing specified when formatting from WinBox;
*) dns - added VRF support to ":resolve" command;
*) dns - added VRF support to DNS servers;
*) email - added "certificate-verification" parameter;
*) email - return all errors to console when executed from console;
*) eoipv6,gre6,ipip6...