Version: 7.24beta3
Development56 changelog entries across 25 component(s)
2026-Jun-19 (1 month ago)
| Component | Change |
|---|---|
| app | added "HF_TOKEN" env to openwebui; |
| app | added "network-outgoing-access" parameter which does not allow app to make outgoing connections; |
| app | added hermes-agent; |
| app | allow "reset" even if disk not configured; |
| app | allow setting "working_dir" in app YAML; |
| app | fixed "reset" not working with certain apps; |
| app | fixed apps not updating firewall redirects when changed in YAML; |
| app | fixed apps sometimes getting stuck on "waiting for layer"; |
| app | only generate secrets for enabled apps; |
| app | removed healthcheck from opencloud-extended-collabora; |
| app | resolved issue where duplicate swaps are created; |
| app | show CHR's address instead of the container's; |
| bgp | improved stability when receiving malformed packets; |
| bridge | added scheduling point during VLAN processing to prevent soft lockups when flushing FDB over large VLAN ranges; |
| bridge | fixed local static host entries (additional fixes); |
| bridge | fixed MLAG MAC address handling issues related to aging, flushing and moving; |
| bridge | fixed stuck MLAG session when using mismatched L2MTU (introduced in v7.23); |
| bridge | temporarily reverted ARP inspection and IP source guard support (introduced in v7.24beta2); |
| certificate | use AES encryption when exporting certificates in PKCS#12 format; |
| console | added comparison operators for array type; |
| console | fixed issues with multi-argument properties (introduced in v7.24beta2); |
| console | renamed "reauth-timeout" to "reauth-period" in "/interface/dot1x/server" (backwards compatible via deprecation); |
| container | added "save" command to allow saving container images; |
| container | added "swap-current" usage; |
| container | added "swap-max" global and per-container limit; |
| container | added ability to run containers in privileged mode; |
| container | added initial support for RKE2; |
| container | fixed container "devices" override to appear under "/dev"; |
| container | improved layer size calculation to avoid potential loops; |
| discovery | added "last-breath" feature (additional fixes); |
| disk | resolved issue where storage device may change information upon reboot; |
| ethernet | fixed stability issue for Chateau PRO ax devices; |
| ethernet | fixed stability issue for devices with Alpine CPU; |
| ipsec | fixed policy move handling; |
| ipsec,ike1 | fixed negotiated PFS validation; |
| ipsec,ike2 | improved PPK handling by always using it when authorized, including additional Child SAs, and moved PPK processing to the Child SA task; |
| ipsec,qkd | moved QKD to "/system/keymat-provider" menu and made it a generic key material provider; |
| ipv6,ra | fixed prefix invalidation (additional fixes); |
| leds | added dark mode support for hAP ax2, hAP ax3, hEX refresh, hEX S (2025), hAP ax S and Chateau ax devices; |
| leds | fixed missing wireless LED configuration (introduced in v7.21); |
| lte | enabled AT registration unsolicited event reporting for EG25-G and EC25-EU boards; |
| lte | fixed cases where EC25-EU and EG25-G boards would receive packets with missing last 4 bytes; |
| lte | fixed IPv6 RA handling for multiapn non-primary interface; |
| lte | limit IPv6 prefix lifetime only when lifetime is advertised as infinity (additional fixes); |
| netwatch | fixed an issue with DNS probe "timeout" parameter; |
| netwatch | fixed HTTP GET probe over IPv6; |
| poe-out | firmware update for 802.3at capable boards (the update will cause a brief power interruption to poe-out interfaces); |
| poe-out | firmware update for 802.3bt capable boards (the update will cause a brief power interruption to poe-out interfaces); |
| ppp | fixed cases where BG77 or BG770 firmware upgrade was not available; |
| ppp | improved "info" command for BG77 and BG770 modems (additional fixes); |
| routerboard | renamed "ipq53xx" firmware type to "ipq5300"; |
| supout | added LTE eSIM section; |
| upgrade | prevent package scheduling from interfering with the upgrade feature; |
| wifi | updated radio regulatory information; |
| wifi-mediatek | improved channel switching; |
| wifi-qcom | fixed connectivity after interrupted DFS channel availability check (introduced in v7.24beta2); |