Mikrotik Firmware Updates

1. RouterOS 7.13rc2 [Testing]

   7.13rc2 changelog:

   1. When upgrading by using "check-for-updates", all versions earlier than 7.12 will display 7.12 as the latest available version. Upgrade from v7.12 to v7.13 or later versions must be done through 7.12 in order to convert wireless packages automatically. Fresh installation with Netinstall or manual package installation works in the same manner as always.
   
   2. Drivers for older wireless and 60GHz interfaces, as well as the wireless management system CAPsMAN, are now part of a separate "wireless" package instead of being a part of the bundle package. This package can be uninstalled if not needed.
   
   3. The existing "wifiwave2" package has been divided into distinct packages: "wifi-qcom" and "wifi-qcom-ac", and the necessary utilities for WiFi management are now included in the RouterOS bundle. RouterOS and "wifi-qcom-ac" packages alongside each other now fit into 16MB flash memory.
   
   What's new in 7.13rc2 (2023-Nov-30 17:02):
   
   *) bth - improved automatic firewall rule generation process;
   *) certificate - added HTTP redirect support for CRL download;
   *) console - fixed user login through RADIUS (introduced in v7.13beta1);
   *) console - replace reserved characters in file and script names with underscores;
   *) defconf - use "fan-min-speed-percent=25" for CRS354-48P-4S+2Q+ device;
   *) ftp - improved upload and download speeds;
   *) ospf - fixed missing opaque bit in opaque LSA;
   *) ospf - fixed missing OSPF interface on L2TP interface reconnect;
   *) qos-hw - added initial congestion avoidance support for 98DX224S, 98DX226S, and 98DX3236 switch chips (CLI only);
   *) qsfp - added support for QSFP-to-SFP adapters;
   *) ssh-client - fixed bogus output in interactive mode (introduced in v7.13beta3);
   *) system - improved incoming and outgoing TCP connection performance;
   *) system - improved internal process communication performance;
   *) wifi - added "radio-mac" variable for "name-format" provisioning setting;
   *) wifi - create first interface without number when using "name-format" provisioning setting;
   *) wifi - fixed cap interface hangs with "busy" status (introduced in v7.13beta3);
   *) wifi - improved CAPsMAN stability during provisioning;
   *) winbox - improved connection speed;
   
   Other changes since v7.12:
   
   !) package - convert "wireless" and "wifi" packages automatically, if upgrading from v7.12;
   !) wifi - split existing "wifiwave2" package into separate packages "wifi-qcom", "wifi-qcom-ac", and include required utilities for WiFi management into bundle;
   !) wireless - separate "wireless" package from bundle and build as a standalone package;
   *) bridge - added automatic "path-cost" values depending on interface rate;
   *) bridge - added bridge interface property "port-cost-mode" with "short" and "long" arguments;
   *) bridge - fixed bogus VLAN entries from wifi when vlan-filtering is not enabled;
   *) bridge - fixed HW offload enable with multiple switches (introduced in v7.13beta1);
   *) bridge - fixed missing "S" flag after configuration changes (introduced in v7.13beta1);
   *) bridge - improved host flush when removing VLAN on HW offloaded bridge;
   *) bridge - improved HW offload enable;
   *) bth - added "VPN Prefer Relay Code" option;
   *) certificate - add support for multiple DNS names for Let's Encrypt;
   *) certificate - added support for certificates with key size 16384;
   *) certificate - fixed certificate auto renewal via SCEP when certificate contains "subject-alt-name";
   *) certificate - fixed CRL check (introduced in v7.13beta1);
   *) certificate - fixed host certificate verification if host is IP address (introduced in v7.13beta1);
   *) certificate - fixed manual URL addition for CRL (introduced in v7.13beta2);
   *) certificate - improved CRL signature verification and download error messages;
   *) certificate - improved initial certificate creation using SCEP;
   *) certificate - use error topic for CRL update failures;
   *) cloud - improved re-connect speed after network related connection errors;
   *) console - added ":grep" command;
   *) console - added ":onerror" command;
   *) console - added ":serialize" and ":deserialize" commands for converting values to/from JSON;
   *) console - added "interface" name when printing "interface/pppoe-server" entries;
   *) console - added "read" command under "file" menu;
   *) console - added "where" functionality for "export" command;
   *) console - added flags to "print" command with "value-list";
   *) console - added interface helper for "gateway" property under "ip/route" menu;
   *) console - added unset option for "ssid-regex" and "allow-signal-out-of-range" properties under "interface/wifi/access-list" menu;
   *) console - clear console history when resetting configuration;
   *) console - disallow setting existing "name" under "system/script" and "system/scheduler" menus;
   *) console - fixed "export" boolean arguments when saving output to file using API;
   *) console - fixed "interface/ethernet/switch/port-isolation" export;
   *) console - fixed "on-event" argument highlighting under "system/scheduler" menu;
   *) console - fixed graphic distortions in WinBox;
   *) console - fixed issue where API incorrectly asks for missing arguments;
   *) console - fixed misaligned columns (introduced in v7.13beta1);
   *) console - fixed missing escaped characters when using print in certain menus (introduced in v7.13beta1);
   *) console - fixed printing to file using API;
   *) console - ignore negative values for ":delay" command;
   *) console - improved flag printing in certain menus;
   *) console - improved stability when removing script;
   *) console - improved stability when running "tool/ping" from API;
   *) console - removed "route-cache" setting from "ip/settings" menu;
   *) console - resolve "wifiwave2" directory to "wifi";
   *) console - show "l2vpn-link" address family under "routing/route" menu;
   *) console - use more compact login screen for empty branding;
   *) defconf - expire password when reverting configuration;
   *) defconf - fixed bogus wifi password on certain Audience devices;
   *) defconf - hide default configuration for users without "sensitive" policy;
   *) defconf - updated configuration with new "wifi" directory;
   *) defconf - use "WISP Bridge" default configuration mode for RBGrooveGA-52HPacn device;
   *) defconf - use device factory preset credentials when using CAPs mode;
   *) defconf - use one SSID and enable FT when using "wifi" packages;
   *) disk - fixed hang on reboot when network file systems mounted;
   *) ethernet - improved packet CPU core classifier for Alpine CPUs for non IPv4/IPv6 traffic;
   *) fetch - added "http-auth-scheme" parameter, allows to select HTTP basic or digest authentication;
   *) fetch - added "http-content-encoding" setting;
   *) fetch - added raw logging;
   *) fetch - allow to receive HTTP response headers;
   *) fetch - require "ftp" user policy;
   *) firewall - added "nat-pmp" support;
   *) firewall - added new IPv6 filter arguments "icmp-err-src-routing-header" and "icmp-headers-too-long" for "reject-with" setting;
   *) firewall - do not mark all IPv6 GRE packets as invalid;
   *) firewall - fixed altered address-list when upgrading from RouterOS v6;
   *) firewall - fixed connections being tracked when tracking is disabled;
   *) firewall - fixed IPv6 address-list timeout;
   *) firewall - removed "prohibited" and "unreachable" IPv4 address-type arguments;
   *) health - dynamically add and remove invalid sensors (e.g. sfp-temperature);
   *) hotspot - fixed incorrect host moving to VLAN 0 when receiving packets through bridge;
   *) ike2 - fixed ike2 double reply;
   *) ipv6 - do not send out IPv6 RA deprecate message for re-used prefix;
   *) isis - added IS-IS protocol support (CLI only);
   *) l3hw - fixed routing for IPsec encapsulated packets;
   *) leds - fixed LED indication in multi-APN setup for Chateau;
   *) leds - improved LED indication during modem registration state for Chateau;
   *) log - added "fetch" topic;
   *) lora - added CUPs protocol support;
   *) lora - fixed issue with lost LoRa configuration when rebooting the device;
   *) lte - added RNDIS support for neoway N75-EA modem;
   *) lte - added support for FOTA firmware upgrade from custom URL for R11eL-FG621-EA;
   *) lte - disabled IMS service for Chateau 5G on A1 HR network;
   *) lte - fixed rare cases where Chateau 5G in passthrough mode may stop forwarding packets;
   *) lte - improved SIM slot status change notification handling for MBIM modems;
   *) lte - replaced "passthrough-subnet-selection" with "passthrough-subnet-size" setting (CLI only);
   *) lte - show each CA band in a new line;
   *) mipsbe - improved system stability when removing USB devices;
   *) mmips - properly mount and unmount USB devices;
   *) modem - added option to read SMS using MBIM interface;
   *) mpls - added "te-tunnel" property for VPLS monitor (CLI only);
   *) mpls - fixed IPv6 RSVP-TE;
   *) mpls - improved logging;
   *) netinstall-cli - added more details to help messages;
   *) ospf - fixed LSA Type3 advertisement for OSPFv2;
   *) ovpn - improved memory allocation during key-renegotiation;
   *) ovpn - removed "ping-timer-rem" option from client config file;
   *) package - added warning log about missing "wireless" or "wifi" package;
   *) pimsm - improved elected BSR change;
   *) poe-out - improved firmware upgrade stability for AF/AT controlled boards;
   *) ppc - fixed RouterOS bootup (introduced in v7.12);
   *) ppp - added remote-ipv6-prefix to IPv6 firewall address-list if "address-list" property is provided;
   *) ppp - allow at-chat and info commands in "waiting for packets" state for modems with shared data/info channel;
   *) ppp - improved IPv6 link-local address uniqueness;
   *) pppoe-server - fixed connection count limit per license level;
   *) profiler - improved "disk" and "supout.rif" classifiers;
   *) qsfp - fixed supported rates for breakout cables (introduced in v7.12);
   *) quickset - show DDNS name as VPN address for devices with new style serial number;
   *) route-filter - improved performance;
   *) sfp - added "1G-baseT" link mode for modules that supports "2.5G-baseT" mode;
   *) sfp - allow 2.5G rates only in forced link mode;
   *) sfp - fixed SFP and combo interface handling for CRS328-4C-20S-4S+ device (introduced in 7.13beta1);
   *) sfp - ignore "rx-loss" in forced link mode;
   *) sfp - ignore irrelevant extended compliance code for SFP modules;
   *) sfp - improved link establishment with certain modules for hEX S device;
   *) sfp - improved SFP interface handling for 98DX224S, 98DX226S, 98DX3236, 98DX8208, and 98DX8216 switch chips;
   *) sfp - show 10M and 100M supported rates for RJ45 copper modules;
   *) ssh - added cipher and hash function acceleration for ARM64 and x86 architectures;
   *) ssh - fix error that caused large chunks of text not being pasted in their entirety into console;
   *) supout - added multiple WiFi sections;
   *) supout - added VXLAN FDB section;
   *) supout - include missing wireless information (introduced in v7.13beta1);
   *) switch - fixed service VLAN tagged IP multicast packets for 98DX8208, 98DX8216, 98DX8212, 98DX8332, 98DX3257, 98DX4310, 98DX8525, 98DX3255 switches;
   *) system - added "rtrace" debugging tool (CLI only);
   *) traffic-generator - improved system stability when modifying interfaces;
   *) usb - added support for RTL8152 USB ethernet on ARM, ARM64 and x86;
   *) vpls - improved performance when decapsulating data;
   *) vrf - fixed ICMP reply lookup;
   *) webfig - allow to display comments in multiline or compact modes;
   *) webfig - make table headers always visible;
   *) webfig - use local storage for user preferences;
   *) wifi - added "flat-snoop" tool for surveying WiFi APs and stations (CLI only);
   *) wifi - added "remove" command in "capsman/remote-cap" menu;
   *) wifi - after radar detections, avoid selection of channels not permitted by the user;
   *) wifi - changed CAPsMAN generated certificate common name;
   *) wifi - enable protected interworking ANQP responses;
   *) wifi - fixed EAP authentication failures when the Session-Timout RADIUS attribute is defined;
   *) wifi - fixed occasional failures to start on 20/40mhz-eC channels for 2.4GHz 802.11ax interfaces;
   *) wifi - fixed overridden datapath settings on CAP when unsetting from CAPsMAN;
   *) wifi - improved system stability when using sniffer (introduced in v7.13beta1);
   *) wifi - make slave APs use datapath bridge settings inherited from master by default;
   *) wifi - removed "openflow-switch" setting;
   *) wifi-qcom - added fast-path for received packets;
   *) winbox - added "Hw. Offload" property under "IP/Firewall/Filter" menu;
   *) winbox - added "none" argument for "Preshared Key" under "WireGuard/Peers" menu;
   *) winbox - added "Ping" button under "IP/DHCP Server/Leases" menu;
   *) winbox - added "Tx bps" and "Rx bps" monitor values under "WiFi/Registration" menu;
   *) winbox - added icon to entries under "WiFi/Access List" menu;
   *) winbox - added missing "qos-classifier" argument for "Hw. Caps" under "WiFi/Radios" menu;
   *) winbox - added missing arguments for "MAC Format" under "Wireless/Security Profiles/RADIUS" menu;
   *) winbox - allow opening entries under "WiFi/Registration" menu;
   *) winbox - fixed default "Name Format" property under "WiFi/Provisioning" menu;
   *) winbox - fixed memory allocation (introduced in v7.13beta2);
   *) winbox - fixed minor typo under "Routing/BFD" menu;
   *) winbox - updated "wireless" and "wifi" menus;
   *) wireless - fixed "wlan1" default name for RBSXTsqG-5acD and RBLDFG-5acD;
   *) wireless - fixed snooper information gathering from re-assocation requests;
   
   Download the new 'RouterOS 7.13rc2' version here: https://mikrotik.com/download

2. RouterOS 7.13beta3 [Testing]

   7.13beta3 changelog:

   1. When upgrading by using "check-for-updates", all versions earlier than 7.12 will display 7.12 as the latest available version. Upgrade from v7.12 to v7.13 or later versions must be done through 7.12 in order to convert wireless packages automatically. Fresh installation with Netinstall or manual package installation works in the same manner as always.
   
   2. Drivers for older wireless and 60GHz interfaces, as well as the wireless management system CAPsMAN, are now part of a separate "wireless" package instead of being a part of the bundle package. This package can be uninstalled if not needed.
   
   3. The existing "wifiwave2" package has been divided into distinct packages: "wifi-qcom" and "wifi-qcom-ac", and the necessary utilities for WiFi management are now included in the RouterOS bundle. RouterOS and "wifi-qcom-ac" packages alongside each other now fit into 16MB flash memory.
   
   What's new in 7.13beta3 (2023-Nov-24 13:52):
   
   *) bridge - added automatic "path-cost" values depending on interface rate;
   *) bridge - fixed HW offload enable with multiple switches (introduced in v7.13beta1);
   *) bridge - improved HW offload enable;
   *) certificate - fixed CRL check (introduced in v7.13beta1);
   *) certificate - fixed host certificate verification if host is IP address (introduced in v7.13beta1);
   *) certificate - fixed manual URL addition for CRL (introduced in v7.13beta2);
   *) certificate - improved CRL signature verification and download error messages;
   *) certificate - use error topic for CRL update failures;
   *) console - added "read" command under "file" menu;
   *) console - added unset option for "ssid-regex" and "allow-signal-out-of-range" properties under "interface/wifi/access-list" menu;
   *) console - fixed misaligned columns (introduced in v7.13beta1);
   *) console - improved stability when removing script;
   *) defconf - fixed bogus wifi password on certain Audience devices;
   *) defconf - use "WISP Bridge" default configuration mode for RBGrooveGA-52HPacn device;
   *) fetch - added "http-auth-scheme" parameter, allows to select HTTP basic or digest authentication;
   *) fetch - added raw logging;
   *) ospf - fixed LSA Type3 advertisement for OSPFv2;
   *) qos-hw - added initial congestion avoidance support for 98DX224S, 98DX226S, and 98DX3236 switch chips (CLI only);
   *) qsfp - fixed supported rates for breakout cables (introduced in v7.12);
   *) sfp - added "1G-baseT" link mode for modules that supports "2.5G-baseT" mode;
   *) sfp - allow 2.5G rates only in forced link mode;
   *) sfp - fixed SFP and combo interface handling for CRS328-4C-20S-4S+ device (introduced in 7.13beta1);
   *) sfp - ignore "rx-loss" in forced link mode;
   *) sfp - ignore irrelevant extended compliance code for SFP modules;
   *) sfp - show 10M and 100M supported rates for RJ45 copper modules;
   *) ssh - added cipher and hash function acceleration for ARM64 and x86 architectures;
   *) supout - include missing wireless information (introduced in v7.13beta1);
   *) wifi - enable protected interworking ANQP responses;
   *) wifi-qcom - added fast-path for received packets;
   *) winbox - fixed memory allocation (introduced in v7.13beta2);
   
   Other changes since v7.12:
   
   !) package - convert "wireless" and "wifi" packages automatically, if upgrading from v7.12;
   !) wifi - split existing "wifiwave2" package into separate packages "wifi-qcom", "wifi-qcom-ac", and include required utilities for WiFi management into bundle;
   !) wireless - separate "wireless" package from bundle and build as a standalone package;
   *) bridge - added bridge interface property "port-cost-mode" with "short" and "long" arguments;
   *) bridge - fixed bogus VLAN entries from wifi when vlan-filtering is not enabled;
   *) bridge - fixed missing "S" flag after configuration changes (introduced in v7.13beta1);
   *) bridge - improved host flush when removing VLAN on HW offloaded bridge;
   *) bth - added "VPN Prefer Relay Code" option;
   *) certificate - add support for multiple DNS names for Let's Encrypt;
   *) certificate - added HTTP redirect support for CRL download;
   *) certificate - added support for certificates with key size 16384;
   *) certificate - fixed certificate auto renewal via SCEP when certificate contains "subject-alt-name";
   *) certificate - improved initial certificate creation using SCEP;
   *) cloud - improved re-connect speed after network related connection errors;
   *) console - added ":grep" command;
   *) console - added ":onerror" command;
   *) console - added ":serialize" and ":deserialize" commands for converting values to/from JSON;
   *) console - added "interface" name when printing "interface/pppoe-server" entries;
   *) console - added "where" functionality for "export" command;
   *) console - added flags to "print" command with "value-list";
   *) console - added interface helper for "gateway" property under "ip/route" menu;
   *) console - clear console history when resetting configuration;
   *) console - disallow setting existing "name" under "system/script" and "system/scheduler" menus;
   *) console - fixed "export" boolean arguments when saving output to file using API;
   *) console - fixed "interface/ethernet/switch/port-isolation" export;
   *) console - fixed "on-event" argument highlighting under "system/scheduler" menu;
   *) console - fixed graphic distortions in WinBox;
   *) console - fixed issue where API incorrectly asks for missing arguments;
   *) console - fixed missing escaped characters when using print in certain menus (introduced in v7.13beta1);
   *) console - fixed printing to file using API;
   *) console - ignore negative values for ":delay" command;
   *) console - improved flag printing in certain menus;
   *) console - improved stability when running "tool/ping" from API;
   *) console - removed "route-cache" setting from "ip/settings" menu;
   *) console - replace reserved characters in file and script names with underscores;
   *) console - resolve "wifiwave2" directory to "wifi";
   *) console - show "l2vpn-link" address family under "routing/route" menu;
   *) console - use more compact login screen for empty branding;
   *) defconf - expire password when reverting configuration;
   *) defconf - hide default configuration for users without "sensitive" policy;
   *) defconf - updated configuration with new "wifi" directory;
   *) defconf - use "fan-min-speed-percent=25" for CRS354-48P-4S+2Q+ device;
   *) defconf - use device factory preset credentials when using CAPs mode;
   *) defconf - use one SSID and enable FT when using "wifi" packages;
   *) disk - fixed hang on reboot when network file systems mounted;
   *) ethernet - improved packet CPU core classifier for Alpine CPUs for non IPv4/IPv6 traffic;
   *) fetch - added "http-content-encoding" setting;
   *) fetch - allow to receive HTTP response headers;
   *) fetch - require "ftp" user policy;
   *) firewall - added "nat-pmp" support;
   *) firewall - added new IPv6 filter arguments "icmp-err-src-routing-header" and "icmp-headers-too-long" for "reject-with" setting;
   *) firewall - do not mark all IPv6 GRE packets as invalid;
   *) firewall - fixed altered address-list when upgrading from RouterOS v6;
   *) firewall - fixed connections being tracked when tracking is disabled;
   *) firewall - fixed IPv6 address-list timeout;
   *) firewall - removed "prohibited" and "unreachable" IPv4 address-type arguments;
   *) health - dynamically add and remove invalid sensors (e.g. sfp-temperature);
   *) hotspot - fixed incorrect host moving to VLAN 0 when receiving packets through bridge;
   *) ike2 - fixed ike2 double reply;
   *) ipv6 - do not send out IPv6 RA deprecate message for re-used prefix;
   *) isis - added IS-IS protocol support (CLI only);
   *) l3hw - fixed routing for IPsec encapsulated packets;
   *) leds - fixed LED indication in multi-APN setup for Chateau;
   *) leds - improved LED indication during modem registration state for Chateau;
   *) log - added "fetch" topic;
   *) lora - added CUPs protocol support;
   *) lora - fixed issue with lost LoRa configuration when rebooting the device;
   *) lte - added RNDIS support for neoway N75-EA modem;
   *) lte - added support for FOTA firmware upgrade from custom URL for R11eL-FG621-EA;
   *) lte - disabled IMS service for Chateau 5G on A1 HR network;
   *) lte - fixed rare cases where Chateau 5G in passthrough mode may stop forwarding packets;
   *) lte - improved SIM slot status change notification handling for MBIM modems;
   *) lte - replaced "passthrough-subnet-selection" with "passthrough-subnet-size" setting (CLI only);
   *) lte - show each CA band in a new line;
   *) mipsbe - improved system stability when removing USB devices;
   *) mmips - properly mount and unmount USB devices;
   *) modem - added option to read SMS using MBIM interface;
   *) mpls - added "te-tunnel" property for VPLS monitor (CLI only);
   *) mpls - fixed IPv6 RSVP-TE;
   *) mpls - improved logging;
   *) netinstall-cli - added more details to help messages;
   *) ovpn - improved memory allocation during key-renegotiation;
   *) ovpn - removed "ping-timer-rem" option from client config file;
   *) package - added warning log about missing "wireless" or "wifi" package;
   *) pimsm - improved elected BSR change;
   *) poe-out - improved firmware upgrade stability for AF/AT controlled boards;
   *) ppc - fixed RouterOS bootup (introduced in v7.12);
   *) ppp - added remote-ipv6-prefix to IPv6 firewall address-list if "address-list" property is provided;
   *) ppp - allow at-chat and info commands in "waiting for packets" state for modems with shared data/info channel;
   *) ppp - improved IPv6 link-local address uniqueness;
   *) pppoe-server - fixed connection count limit per license level;
   *) profiler - improved "disk" and "supout.rif" classifiers;
   *) qsfp - added support for QSFP-to-SFP adapters;
   *) quickset - show DDNS name as VPN address for devices with new style serial number;
   *) route-filter - improved performance;
   *) sfp - improved link establishment with certain modules for hEX S device;
   *) sfp - improved SFP interface handling for 98DX224S, 98DX226S, 98DX3236, 98DX8208, and 98DX8216 switch chips;
   *) ssh - fix error that caused large chunks of text not being pasted in their entirety into console;
   *) supout - added multiple WiFi sections;
   *) supout - added VXLAN FDB section;
   *) switch - fixed service VLAN tagged IP multicast packets for 98DX8208, 98DX8216, 98DX8212, 98DX8332, 98DX3257, 98DX4310, 98DX8525, 98DX3255 switches;
   *) system - added "rtrace" debugging tool (CLI only);
   *) traffic-generator - improved system stability when modifying interfaces;
   *) usb - added support for RTL8152 USB ethernet on ARM, ARM64 and x86;
   *) vpls - improved performance when decapsulating data;
   *) vrf - fixed ICMP reply lookup;
   *) webfig - allow to display comments in multiline or compact modes;
   *) webfig - make table headers always visible;
   *) webfig - use local storage for user preferences;
   *) wifi - added "flat-snoop" tool for surveying WiFi APs and stations (CLI only);
   *) wifi - added "remove" command in "capsman/remote-cap" menu;
   *) wifi - after radar detections, avoid selection of channels not permitted by the user;
   *) wifi - changed CAPsMAN generated certificate common name;
   *) wifi - fixed EAP authentication failures when the Session-Timout RADIUS attribute is defined;
   *) wifi - fixed occasional failures to start on 20/40mhz-eC channels for 2.4GHz 802.11ax interfaces;
   *) wifi - fixed overridden datapath settings on CAP when unsetting from CAPsMAN;
   *) wifi - improved system stability when using sniffer (introduced in v7.13beta1);
   *) wifi - make slave APs use datapath bridge settings inherited from master by default;
   *) wifi - removed "openflow-switch" setting;
   *) winbox - added "Hw. Offload" property under "IP/Firewall/Filter" menu;
   *) winbox - added "none" argument for "Preshared Key" under "WireGuard/Peers" menu;
   *) winbox - added "Ping" button under "IP/DHCP Server/Leases" menu;
   *) winbox - added "Tx bps" and "Rx bps" monitor values under "WiFi/Registration" menu;
   *) winbox - added icon to entries under "WiFi/Access List" menu;
   *) winbox - added missing "qos-classifier" argument for "Hw. Caps" under "WiFi/Radios" menu;
   *) winbox - added missing arguments for "MAC Format" under "Wireless/Security Profiles/RADIUS" menu;
   *) winbox - allow opening entries under "WiFi/Registration" menu;
   *) winbox - fixed default "Name Format" property under "WiFi/Provisioning" menu;
   *) winbox - fixed minor typo under "Routing/BFD" menu;
   *) winbox - improved connection speed;
   *) winbox - updated "wireless" and "wifi" menus;
   *) wireless - fixed "wlan1" default name for RBSXTsqG-5acD and RBLDFG-5acD;
   *) wireless - fixed snooper information gathering from re-assocation requests;
   
   Download the new 'RouterOS 7.13beta3' version here: https://mikrotik.com/download

3. RouterOS 7.12.1 [Stable]

   7.12.1 changelog:

   *) defconf - fixed bogus wifi password on certain Audience devices;
   *) ipv6 - do not send out IPv6 RA deprecate message for re-used prefix;
   *) ospf - fixed LSA Type3 advertisement for OSPFv2;
   *) ppc - fixed RouterOS bootup (introduced in v7.12);
   *) qsfp - fixed supported rates for breakout cables;
   *) winbox - added missing arguments for "MAC Format" under "Wireless/Security Profiles/RADIUS" menu;
   
   Download the new 'RouterOS 7.12.1' version here: https://mikrotik.com/download

4. RouterOS 7.11.3 [Stable]

   7.11.3 changelog:

   (factory only release)
   
   Download the new 'RouterOS 7.11.3' version here: https://mikrotik.com/download

5. RouterOS 7.13beta2 [Testing]

   7.13beta2 changelog:

   1. When upgrading by using "check-for-updates", all versions earlier than 7.12 will display 7.12 as the latest available version. Upgrade from v7.12 to v7.13 or later versions must be done through 7.12 in order to convert wireless packages automatically. Fresh installation with Netinstall or manual package installation works in the same manner as always.
   
   2. Drivers for older wireless and 60GHz interfaces, as well as the wireless management system CAPsMAN, are now part of a separate "wireless" package instead of being a part of the bundle package. This package can be uninstalled if not needed.
   
   3. The existing "wifiwave2" package has been divided into distinct packages: "wifi-qcom" and "wifi-qcom-ac", and the necessary utilities for WiFi management are now included in the RouterOS bundle. RouterOS and "wifi-qcom-ac" packages alongside each other now fit into 16MB flash memory.
   
   What's new in 7.13beta2 (2023-Nov-14 13:04):
   
   Changes in this release:
   
   *) bridge - fixed missing "S" flag after configuration changes (introduced in v7.13beta1);
   *) certificate - added HTTP redirect support for CRL download;
   *) certificate - added support for certificates with key size 16384;
   *) console - added ":grep" command;
   *) console - added "interface" name when printing "interface/pppoe-server" entries;
   *) console - fixed missing escaped characters when using print in certain menus (introduced in v7.13beta1);
   *) disk - fixed hang on reboot when network file systems mounted;
   *) lora - added CUPs protocol support;
   *) lte - disabled IMS service for Chateau 5G on A1 HR network;
   *) ppc - fixed RouterOS bootup (introduced in v7.12);
   *) route-filter - improved performance;
   *) supout - added multiple WiFi sections;
   *) wifi - improved system stability when using sniffer (introduced in v7.13beta1);
   *) winbox - improved connection speed;
   
   Other changes since v7.12:
   
   !) package - convert "wireless" and "wifi" packages automatically, if upgrading from v7.12;
   !) wifi - split existing "wifiwave2" package into separate packages "wifi-qcom", "wifi-qcom-ac", and include required utilities for WiFi management into bundle;
   !) wireless - separate "wireless" package from bundle and build as a standalone package;
   *) bridge - added automatic "path-cost" values depending on interface rate;
   *) bridge - added bridge interface property "port-cost-mode" with "short" and "long" arguments;
   *) bridge - fixed bogus VLAN entries from wifi when vlan-filtering is not enabled;
   *) bridge - improved host flush when removing VLAN on HW offloaded bridge;
   *) bth - added "VPN Prefer Relay Code" option;
   *) certificate - add support for multiple DNS names for Let's Encrypt;
   *) certificate - fixed certificate auto renewal via SCEP when certificate contains "subject-alt-name";
   *) certificate - improved initial certificate creation using SCEP;
   *) cloud - improved re-connect speed after network related connection errors;
   *) console - added ":onerror" command;
   *) console - added ":serialize" and ":deserialize" commands for converting values to/from JSON;
   *) console - added "read" command under "file" menu;
   *) console - added "where" functionality for "export" command;
   *) console - added flags to "print" command with "value-list";
   *) console - added interface helper for "gateway" property under "ip/route" menu;
   *) console - clear console history when resetting configuration;
   *) console - disallow setting existing "name" under "system/script" and "system/scheduler" menus;
   *) console - fixed "export" boolean arguments when saving output to file using API;
   *) console - fixed "interface/ethernet/switch/port-isolation" export;
   *) console - fixed "on-event" argument highlighting under "system/scheduler" menu;
   *) console - fixed graphic distortions in WinBox;
   *) console - fixed issue where API incorrectly asks for missing arguments;
   *) console - fixed printing to file using API;
   *) console - ignore negative values for ":delay" command;
   *) console - improved flag printing in certain menus;
   *) console - improved stability when running "tool/ping" from API;
   *) console - removed "route-cache" setting from "ip/settings" menu;
   *) console - replace reserved characters in file and script names with underscores;
   *) console - resolve "wifiwave2" directory to "wifi";
   *) console - show "l2vpn-link" address family under "routing/route" menu;
   *) console - use more compact login screen for empty branding;
   *) defconf - expire password when reverting configuration;
   *) defconf - hide default configuration for users without "sensitive" policy;
   *) defconf - updated configuration with new "wifi" directory;
   *) defconf - use "fan-min-speed-percent=25" for CRS354-48P-4S+2Q+ device;
   *) defconf - use device factory preset credentials when using CAPs mode;
   *) defconf - use one SSID and enable FT when using "wifi" packages;
   *) ethernet - improved packet CPU core classifier for Alpine CPUs for non IPv4/IPv6 traffic;
   *) fetch - added "http-content-encoding" setting;
   *) fetch - allow to receive HTTP response headers;
   *) fetch - require "ftp" user policy;
   *) firewall - added "nat-pmp" support;
   *) firewall - added new IPv6 filter arguments "icmp-err-src-routing-header" and "icmp-headers-too-long" for "reject-with" setting;
   *) firewall - do not mark all IPv6 GRE packets as invalid;
   *) firewall - fixed altered address-list when upgrading from RouterOS v6;
   *) firewall - fixed connections being tracked when tracking is disabled;
   *) firewall - fixed IPv6 address-list timeout;
   *) firewall - removed "prohibited" and "unreachable" IPv4 address-type arguments;
   *) health - dynamically add and remove invalid sensors (e.g. sfp-temperature);
   *) hotspot - fixed incorrect host moving to VLAN 0 when receiving packets through bridge;
   *) ike2 - fixed ike2 double reply;
   *) ipv6 - do not send out IPv6 RA deprecate message for re-used prefix;
   *) isis - added IS-IS protocol support (CLI only);
   *) l3hw - fixed routing for IPsec encapsulated packets;
   *) leds - fixed LED indication in multi-APN setup for Chateau;
   *) leds - improved LED indication during modem registration state for Chateau;
   *) log - added "fetch" topic;
   *) lora - fixed issue with lost LoRa configuration when rebooting the device;
   *) lte - added RNDIS support for neoway N75-EA modem;
   *) lte - added support for FOTA firmware upgrade from custom URL for R11eL-FG621-EA;
   *) lte - fixed rare cases where Chateau 5G in passthrough mode may stop forwarding packets;
   *) lte - improved SIM slot status change notification handling for MBIM modems;
   *) lte - replaced "passthrough-subnet-selection" with "passthrough-subnet-size" setting (CLI only);
   *) lte - show each CA band in a new line;
   *) mipsbe - improved system stability when removing USB devices;
   *) mmips - properly mount and unmount USB devices;
   *) modem - added option to read SMS using MBIM interface;
   *) mpls - added "te-tunnel" property for VPLS monitor (CLI only);
   *) mpls - fixed IPv6 RSVP-TE;
   *) mpls - improved logging;
   *) netinstall-cli - added more details to help messages;
   *) ovpn - improved memory allocation during key-renegotiation;
   *) ovpn - removed "ping-timer-rem" option from client config file;
   *) package - added warning log about missing "wireless" or "wifi" package;
   *) pimsm - improved elected BSR change;
   *) poe-out - improved firmware upgrade stability for AF/AT controlled boards;
   *) ppp - added remote-ipv6-prefix to IPv6 firewall address-list if "address-list" property is provided;
   *) ppp - allow at-chat and info commands in "waiting for packets" state for modems with shared data/info channel;
   *) ppp - improved IPv6 link-local address uniqueness;
   *) pppoe-server - fixed connection count limit per license level;
   *) profiler - improved "disk" and "supout.rif" classifiers;
   *) qos-hw - added initial congestion avoidance support for 98DX224S, 98DX226S, and 98DX3236 switch chips (CLI only);
   *) qsfp - added support for QSFP-to-SFP adapters;
   *) quickset - show DDNS name as VPN address for devices with new style serial number;
   *) sfp - improved link establishment with certain modules for hEX S device;
   *) sfp - improved SFP interface handling for 98DX224S, 98DX226S, 98DX3236, 98DX8208, and 98DX8216 switch chips;
   *) ssh - fix error that caused large chunks of text not being pasted in their entirety into console;
   *) supout - added VXLAN FDB section;
   *) switch - fixed service VLAN tagged IP multicast packets for 98DX8208, 98DX8216, 98DX8212, 98DX8332, 98DX3257, 98DX4310, 98DX8525, 98DX3255 switches;
   *) system - added "rtrace" debugging tool (CLI only);
   *) traffic-generator - improved system stability when modifying interfaces;
   *) usb - added support for RTL8152 USB ethernet on ARM, ARM64 and x86;
   *) vpls - improved performance when decapsulating data;
   *) vrf - fixed ICMP reply lookup;
   *) webfig - allow to display comments in multiline or compact modes;
   *) webfig - make table headers always visible;
   *) webfig - use local storage for user preferences;
   *) wifi - added "flat-snoop" tool for surveying WiFi APs and stations (CLI only);
   *) wifi - added "remove" command in "capsman/remote-cap" menu;
   *) wifi - after radar detections, avoid selection of channels not permitted by the user;
   *) wifi - changed CAPsMAN generated certificate common name;
   *) wifi - fixed EAP authentication failures when the Session-Timout RADIUS attribute is defined;
   *) wifi - fixed occasional failures to start on 20/40mhz-eC channels for 2.4GHz 802.11ax interfaces;
   *) wifi - fixed overridden datapath settings on CAP when unsetting from CAPsMAN;
   *) wifi - make slave APs use datapath bridge settings inherited from master by default;
   *) wifi - removed "openflow-switch" setting;
   *) winbox - added "Hw. Offload" property under "IP/Firewall/Filter" menu;
   *) winbox - added "none" argument for "Preshared Key" under "WireGuard/Peers" menu;
   *) winbox - added "Ping" button under "IP/DHCP Server/Leases" menu;
   *) winbox - added "Tx bps" and "Rx bps" monitor values under "WiFi/Registration" menu;
   *) winbox - added icon to entries under "WiFi/Access List" menu;
   *) winbox - added missing "qos-classifier" argument for "Hw. Caps" under "WiFi/Radios" menu;
   *) winbox - added missing arguments for "MAC Format" under "Wireless/Security Profiles/RADIUS" menu;
   *) winbox - allow opening entries under "WiFi/Registration" menu;
   *) winbox - fixed default "Name Format" property under "WiFi/Provisioning" menu;
   *) winbox - fixed minor typo under "Routing/BFD" menu;
   *) winbox - updated "wireless" and "wifi" menus;
   *) wireless - fixed "wlan1" default name for RBSXTsqG-5acD and RBLDFG-5acD;
   *) wireless - fixed snooper information gathering from re-assocation requests;
   
   Download the new 'RouterOS 7.13beta2' version here: https://mikrotik.com/download

6. RouterOS 7.13beta1 [Testing]

   7.13beta1 changelog:

   1. When upgrading by using "check-for-updates", all versions earlier than 7.12 will display 7.12 as the latest available version. Upgrade from v7.12 to v7.13 or later versions must be done through 7.12 in order to convert wireless packages automatically. Fresh installation with Netinstall or manual package installation works in the same manner as always.
   
   2. Drivers for older wireless and 60GHz interfaces, as well as the wireless management system CAPsMAN, are now part of a separate "wireless" package instead of being a part of the bundle package. This package can be uninstalled if not needed.
   
   3. The existing "wifiwave2" package has been divided into distinct packages: "wifi-qcom" and "wifi-qcom-ac", and the necessary utilities for WiFi management are now included in the RouterOS bundle. RouterOS and "wifi-qcom-ac" packages alongside each other now fit into 16MB flash memory.
   
   What's new in 7.13beta1 (2023-Nov-09 13:15):
   
   !) package - convert "wireless" and "wifi" packages automatically, if upgrading from v7.12;
   !) wifi - split existing "wifiwave2" package into separate packages "wifi-qcom", "wifi-qcom-ac", and include required utilities for WiFi management into bundle;
   !) wireless - separate "wireless" package from bundle and build as a standalone package;
   *) bridge - added automatic "path-cost" values depending on interface rate;
   *) bridge - added bridge interface property "port-cost-mode" with "short" and "long" arguments;
   *) bridge - fixed bogus VLAN entries from wifi when vlan-filtering is not enabled;
   *) bridge - improved host flush when removing VLAN on HW offloaded bridge;
   *) bth - added "VPN Prefer Relay Code" option;
   *) certificate - add support for multiple DNS names for Let's Encrypt;
   *) certificate - fixed certificate auto renewal via SCEP when certificate contains "subject-alt-name";
   *) certificate - improved initial certificate creation using SCEP;
   *) cloud - improved re-connect speed after network related connection errors;
   *) console - added ":grep" command;
   *) console - added ":onerror" command;
   *) console - added ":serialize" and ":deserialize" commands for converting values to/from JSON;
   *) console - added "read" command under "file" menu;
   *) console - added "where" functionality for "export" command;
   *) console - added flags to "print" command with "value-list";
   *) console - added interface helper for "gateway" property under "ip/route" menu;
   *) console - clear console history when resetting configuration;
   *) console - disallow setting existing "name" under "system/script" and "system/scheduler" menus;
   *) console - fixed "export" boolean arguments when saving output to file using API;
   *) console - fixed "interface/ethernet/switch/port-isolation" export;
   *) console - fixed "on-event" argument highlighting under "system/scheduler" menu;
   *) console - fixed graphic distortions in WinBox;
   *) console - fixed issue where API incorrectly asks for missing arguments;
   *) console - fixed printing of "on-event" under "system/scheduler" menu;
   *) console - fixed printing to file using API;
   *) console - ignore negative values for ":delay" command;
   *) console - improved flag printing in certain menus;
   *) console - improved stability when running "tool/ping" from API;
   *) console - removed "route-cache" setting from "ip/settings" menu;
   *) console - replace reserved characters in file and script names with underscores;
   *) console - resolve "wifiwave2" directory to "wifi";
   *) console - show "l2vpn-link" address family under "routing/route" menu;
   *) console - use more compact login screen for empty branding;
   *) defconf - expire password when reverting configuration;
   *) defconf - hide default configuration for users without "sensitive" policy;
   *) defconf - updated configuration with new "wifi" directory;
   *) defconf - use "fan-min-speed-percent=25" for CRS354-48G-4S+2Q+ device;
   *) defconf - use device factory preset credentials when using CAPs mode;
   *) defconf - use one SSID and enable FT when using "wifi" packages;
   *) ethernet - improved packet CPU core classifier for Alpine CPUs for non IPv4/IPv6 traffic;
   *) fetch - added "http-content-encoding" setting;
   *) fetch - allow to receive HTTP response headers;
   *) fetch - require "ftp" user policy;
   *) firewall - added "nat-pmp" support;
   *) firewall - added new IPv6 filter arguments "icmp-err-src-routing-header" and "icmp-headers-too-long" for "reject-with" setting;
   *) firewall - do not mark all IPv6 GRE packets as invalid;
   *) firewall - fixed altered address-list when upgrading from RouterOS v6;
   *) firewall - fixed connections being tracked when tracking is disabled;
   *) firewall - fixed IPv6 address-list timeout;
   *) firewall - removed "prohibited" and "unreachable" IPv4 address-type arguments;
   *) health - dynamically add and remove invalid sensors (e.g. sfp-temperature);
   *) hotspot - fixed incorrect host moving to VLAN 0 when receiving packets through bridge;
   *) ike2 - fixed ike2 double reply;
   *) ipv6 - do not send out IPv6 RA deprecate message for re-used prefix;
   *) isis - added IS-IS protocol support (CLI only);
   *) l3hw - fixed routing for IPsec encapsulated packets;
   *) leds - fixed LED indication in multi-APN setup for Chateau;
   *) leds - improved LED indication during modem registration state for Chateau;
   *) log - added "fetch" topic;
   *) lora - fixed issue with lost LoRa configuration when rebooting the device;
   *) lte - added RNDIS support for neoway N75-EA modem;
   *) lte - added support for FOTA firmware upgrade from custom URL for R11eL-FG621-EA;
   *) lte - disabled IMS service for Chateau 5G on A1 HR network;
   *) lte - fixed rare cases where Chateau 5G in passthrough mode may stop forwarding packets;
   *) lte - improved SIM slot status change notification handling for MBIM modems;
   *) lte - replaced "passthrough-subnet-selection" with "passthrough-subnet-size" setting (CLI only);
   *) lte - show each CA band in a new line;
   *) mipsbe - improved system stability when removing USB devices;
   *) mmips - properly mount and unmount USB devices;
   *) modem - added option to read SMS using MBIM interface;
   *) mpls - added "te-tunnel" property for VPLS monitor (CLI only);
   *) mpls - fixed IPv6 RSVP-TE;
   *) mpls - improved logging;
   *) netinstall-cli - added more details to help messages;
   *) ovpn - improved memory allocation during key-renegotiation;
   *) ovpn - removed "ping-timer-rem" option from client config file;
   *) package - added warning log about missing "wireless" or "wifi" package;
   *) pimsm - improved elected BSR change;
   *) poe-out - improved firmware upgrade stability for AF/AT controlled boards;
   *) ppp - added remote-ipv6-prefix to IPv6 firewall address-list if "address-list" property is provided;
   *) ppp - allow at-chat and info commands in "waiting for packets" state for modems with shared data/info channel;
   *) ppp - improved IPv6 link-local address uniqueness;
   *) pppoe-server - fixed connection count limit per license level;
   *) profiler - improved "disk" and "supout.rif" classifiers;
   *) qos-hw - added initial congestion avoidance support for 98DX224S, 98DX226S, and 98DX3236 switch chips (CLI only);
   *) qsfp - added support for QSFP-to-SFP adapters;
   *) quickset - show DDNS name as VPN address for devices with new style serial number;
   *) sfp - improved link establishment with certain modules for hEX S device;
   *) sfp - improved SFP interface handling for 98DX224S, 98DX226S, 98DX3236, 98DX8208, and 98DX8216 switch chips;
   *) ssh - fix error that caused large chunks of text not being pasted in their entirety into console;
   *) supout - added VXLAN FDB section;
   *) switch - fixed service VLAN tagged IP multicast packets for 98DX8208, 98DX8216, 98DX8212, 98DX8332, 98DX3257, 98DX4310, 98DX8525, 98DX3255 switches;
   *) system - added "rtrace" debugging tool (CLI only);
   *) traffic-generator - improved system stability when modifying interfaces;
   *) usb - added support for RTL8152 USB ethernet on ARM, ARM64 and x86;
   *) vpls - improved performance when decapsulating data;
   *) vrf - fixed ICMP reply lookup;
   *) webfig - allow to display comments in multiline or compact modes;
   *) webfig - make table headers always visible;
   *) webfig - use local storage for user preferences;
   *) wifi - added "flat-snoop" tool for surveying WiFi APs and stations (CLI only);
   *) wifi - added "remove" command in "capsman/remote-cap" menu;
   *) wifi - after radar detections, avoid selection of channels not permitted by the user;
   *) wifi - changed CAPsMAN generated certificate common name;
   *) wifi - fixed EAP authentication failures when the Session-Timout RADIUS attribute is defined;
   *) wifi - fixed occasional failures to start on 20/40mhz-eC channels for 2.4GHz 802.11ax interfaces;
   *) wifi - fixed overridden datapath settings on CAP when unsetting from CAPsMAN;
   *) wifi - make slave APs use datapath bridge settings inherited from master by default;
   *) wifi - removed "openflow-switch" setting;
   *) winbox - added "Hw. Offload" property under "IP/Firewall/Filter" menu;
   *) winbox - added "none" argument for "Preshared Key" under "WireGuard/Peers" menu;
   *) winbox - added "Ping" button under "IP/DHCP Server/Leases" menu;
   *) winbox - added "Tx bps" and "Rx bps" monitor values under "WiFi/Registration" menu;
   *) winbox - added icon to entries under "WiFi/Access List" menu;
   *) winbox - added missing "qos-classifier" argument for "Hw. Caps" under "WiFi/Radios" menu;
   *) winbox - added missing arguments for "MAC Format" under "Wireless/Security Profiles/RADIUS" menu;
   *) winbox - allow opening entries under "WiFi/Registration" menu;
   *) winbox - fixed default "Name Format" property under "WiFi/Provisioning" menu;
   *) winbox - fixed minor typo under "Routing/BFD" menu;
   *) winbox - updated "wireless" and "wifi" menus;
   *) wireless - fixed "wlan1" default name for RBSXTsqG-5acD and RBLDFG-5acD;
   *) wireless - fixed snooper information gathering from re-assocation requests;
   
   Download the new 'RouterOS 7.13beta1' version here: https://mikrotik.com/download

7. RouterOS 7.12 [Stable]

   7.12 changelog:

   !) ethernet - changed "advertise" and "speed" arguments, and removed "half-duplex" setting under "/interface ethernet" menu;
   !) health - removed "temperature" health entry from boards, where it was the same as "sfp-temperature";
   !) sfp - convert configuration to support new link modes for SFP and QSFP type of interfaces;
   *) api - fixed fetching objects with warning option from REST API;
   *) bfd - fixed sessions when setting VRF;
   *) bfd - improved system stability;
   *) bgp - fixed "atomic-aggregate" always set in output;
   *) bgp - fixed "input.filter-chain" argument selection in VPN configuration;
   *) bgp - fixed local and remote port settings for BGP connections;
   *) bgp - fixed typos and missing spaces in log messages;
   *) bgp - implemented IGP metric sending in BGP messages;
   *) bgp - improved logging;
   *) bgp - increase "hold-time" limit to 65000;
   *) bluetooth - added basic support for connecting to BLE peripheral devices;
   *) bluetooth - use "g" units when decoding MikroTik beacon acceleration on peripheral devices menu;
   *) bridge - fixed fast-path forwarding with HW offloaded vlan-filtering (introduced in v7.11);
   *) bridge - fixed untagged VLAN entry disable;
   *) bridge - fixed vlan-filtering stability with HW and non-HW offloaded ports (introduced in v7.10);
   *) bridge - improved system stability;
   *) bridge - improved vlan-filtering bridge stability with CAPsMAN (introduced in v7.11);
   *) bth - added "Back To Home" VPN service for ARM, ARM64, and TILE devices;
   *) calea - improved system stability when trying to add rules without the CALEA package;
   *) certificate - allow to get and maintain Let's Encrypt certificate in IPv6 environment;
   *) certificate - allow to remove issued certificates when CRL is not used;
   *) certificate - fixed "subject-alt-name" duplicating itself when SCEP is used;
   *) certificate - fixed certificate auto renewal via SCEP;
   *) certificate - improved certificate validation logging error messages;
   *) certificate - log CRL HTTP errors under the "error" logging topic;
   *) chr - iavf updated driver to 4.9.1 version;
   *) chr - increased OVA default RAM amount from 160MB to 256MB;
   *) console - added ":jobname" command;
   *) console - added "as-string" and "as-string-value" properties for "get" command;
   *) console - added "terminal/ask" command;
   *) console - added "transform" property for ":convert" command;
   *) console - display "End-User License Agreement" prompt after configuration reset;
   *) console - export required properties with default values;
   *) console - fixed scheduler "on-event" script highlighting when editing;
   *) console - improved ":totime" and ":tonum" commands and added ":tonsec" command for time value manipulation;
   *) console - improved multi-argument property parsing into array;
   *) console - improved randomness for ":rndstr" and ":rndnum" commands;
   *) console - improved stability and responsiveness;
   *) console - improved stability when editing long scripts;
   *) console - improved stability when using "special-login";
   *) console - improved system stability through RoMON session;
   *) console - improved system stability when using autocomplete;
   *) console - improved system stability;
   *) console - restrict permissions to "read,write,reboot,ftp,romon,test" for scripts executed by DHCP, Hotspot, PPP and Traffic-Monitor services;
   *) console - show full date and time in scheduler "next-run" property;
   *) dhcp - fixed DHCP server and relay related response delays;
   *) email - rename "address" property to "server";
   *) ethernet - added "supported" and "sfp-supported" values for "monitor" command;
   *) firewall - added "ein-snat" and "ein-dnat" connection NAT state matchers for filter and mangle rules;
   *) flash - show more accurate "total-hdd-space" resource property;
   *) gps - expose GPS port for Quectel EM12-G (vendor-id="0x2c7c", device-id="0x0512");
   *) ike1 - fixed invalid key length on phase1 negotiation;
   *) ike1 - log an error when non-RSA keys are being used;
   *) ike2 - improved rekey collision handling;
   *) interface - added "macvlan" interface support;
   *) iot - fixed an issue where applying a script to GPIO pin caused GPIO to stop working;
   *) iot - fixed behavior where GPIO output state would change on boot;
   *) ipsec - fixed Diffie-Hellman public value encoding size;
   *) ipsec - fixed IPSec policy when using modp3072;
   *) ipsec - fixed minor typo in logs;
   *) ipsec - reduce disk writes when started without active configuration;
   *) ipv6 - fixed IPv6 RA delay time from 5s to 500ms according to RFC;
   *) ipv6 - send RA and RA deprecate messages out three times instead of just once;
   *) l3hw - fixed IPv6 route suppression;
   *) l3hw - improved system stability during IPv6 route offloading;
   *) l3hw - prioritize local IP addresses over the respective /32 and /128 routes;
   *) led - fixed "interface-status" configuration for virtual interfaces;
   *) led - fixed 5G modem mobile network category LED colours;
   *) leds - added "dark-mode" functionality for RBwAPG-5HacD2HnD;
   *) leds - added "wireless-status" and "wireless-signal-strength" configuration types for wifiwave2 interfaces;
   *) log - improved logging for user actions;
   *) lora - added LNS protocol support;
   *) lte - added at-chat support and increased wait time on modem at-chat for Dell DW5821e, DW5821e-eSIM, DW5829e and DW5829e-eSIM;
   *) lte - added SINR reporting for FG621-EA modem;
   *) lte - changed R11e-LTE ARP behavior to NoArp;
   *) lte - fixed 5G data-class reporting for Chateau 5G;
   *) lte - fixed APN authentification in multi APN setup for R11e-LTE6;
   *) lte - fixed FG621-EA possible timeouts during firmware upgrade;
   *) lte - fixed IPv6 prefix for MBIM modems in multi-apn setup when IPv6 APN used as not first APN;
   *) lte - fixed RSSI for FG621-EA modem to show the correct value;
   *) lte - fixed Sierra modem detection for modems with vendor-specific USB descriptors;
   *) lte - fixed Sierra modem initialization;
   *) lte - fixed startup race condition when SIM card is in "up" slot for LtAP mini;
   *) lte - fixed sub-interface auto-removal in multiple APN setups;
   *) lte - show correct data class when connected to 5G SA network;
   *) lte - use more compact logging messages;
   *) modbus - added additional security settings for Modbus TCP;
   *) mpls - added option to match and set MPLS EXP with bridge and mangle rules;
   *) mpls - fixed "propagate-ttl=no" setting;
   *) mpls - improved FastPath next-hop selection hash algorithm;
   *) mqtt - added on-message feature for subscribed topics;
   *) mqtt - added parallel-scripts-limit parameter to set maximum allowed number of scripts executed at the same time;
   *) mqtt - added wildcard topic subscription support;
   *) netinstall - added option to discard branding package;
   *) netinstall - display package filename in GUI Description column if package description is not specified;
   *) netinstall-cli - added empty configuration option "-e";
   *) netinstall-cli - added option to discard branding package;
   *) netinstall-cli - allow ".rsc" script filenames;
   *) netinstall-cli - prioritise interface option over address option;
   *) netinstall-cli - updated configuration option description;
   *) netwatch - decreased "thr-tcp-conn-time" maximum limit to 30 seconds;
   *) ospf - fixed adding ECMP routes;
   *) ospf - fixed BFD on virtual-link with configured VRF;
   *) ospf - fixed OSPFv3 authentication header length calculation;
   *) ospf - fixed OSPFv3 not working with NSSA areas;
   *) ospf - fixed parsing of opaque LSAs used by TE;
   *) ospf - fixed translated NSSA routes not showing in backbone;
   *) ovpn - added "tls-auth" option support for imported .ovpn profiles;
   *) ovpn - improved system stability;
   *) pimsm - fixed BSR update process;
   *) pimsm - fixed UIB update process;
   *) pimsm - improved system stability;
   *) poe-out - driver optimization for AF/AT controlled boards;
   *) poe-out - fixed rare CRS328 poe-out menu and poe-out port config loss after reboot;
   *) poe-out - improved "auto" mode for devices with single PoE-out port;
   *) poe-out - removed "auto" mode support for L009 devices;
   *) port - add support for Huawei MS237h-517;
   *) port - expose NMEA/DIAG ports for Dell DW5821e and DW5821e-eSIM;
   *) qsfp - added 50Gbps rate support for QSFP28 interfaces;
   *) qsfp - fixed incorrect QSFP temperature readings in negative temperature;
   *) qsfp - improved auto link detection for AOC cables;
   *) qsfp - use sub-interface configuration for establishing link (for 40Gbps and 100Gbps links, all sub-interfaces must be enabled);
   *) quickset - fixed "LAN" interface list members if configuration does not contain bridge;
   *) rip - added BFD support;
   *) rip - fixed session not working in VRF;
   *) route - added "single-process" configuration setting, enabled by default on devices with 64MB or less RAM memory;
   *) route - added "suppress-hw-offload" setting for IPv6 routes;
   *) route - fixed gateway after link restart;
   *) route - removed deprecated "received-from" property;
   *) route - reverse community "delete" and "filter" command behavior;
   *) routerboard - added "reset-button" support for RB800, RB1100 and RB1100AHx2 devices;
   *) routerboard - fixed "reset-button" support for wAP ac and wAP R ac devices;
   *) sfp - added 5Gbps rate for SFP+ interface on 98DX224S, 98DX226S, and 98DX3236 switch chips;
   *) sfp - fixed missing "rx-power" monitor with certain modules (introduced in v7.10);
   *) sfp - fixed occasional bad EEPROM data reading for L009 devices;
   *) sfp - improved interface stability for SFP and QSFP types of interfaces;
   *) sfp - improved system stability with certain modules for 98DX224S, 98DX226S, 98DX3236, 98DX8216 and 98DX8208 switch chips;
   *) snmp - changed "mtxrGaugeValue" type to integer;
   *) ssh - added support for user ed25519 public keys;
   *) ssh - allow to specify key owner on import;
   *) ssh - fixed SSH tunnel performance (introduced in v7.10);
   *) ssh - improved connection stability when pasting large chunks of text into console;
   *) supout - added interface list members section;
   *) supout - added LLDP power to supout.rif;
   *) supout - fixed BFD section;
   *) switch - improved resource allocation for 98DX224S, 98DX226S, and 98DX3236 switch chips;
   *) switch - improved switch chip stability for CCR2004-16g-2s+ devices;
   *) system - fixed process multithreading (introduced in v7.9);
   *) system - improved system stability during booting for L009 devices;
   *) system - improved system stability when MD5 checksums are used;
   *) tftp - fixed empty file name matching;
   *) tile - improved system stability when using queues;
   *) traffic-generator - added "priority" property for "inject" command;
   *) traffic-generator - fixed traffic-generator on CHR and x86;
   *) usb - added support for RTL8153 USB ethernet on ARM, ARM64 and x86;
   *) vrf - limit maximum VRFs to 1024;
   *) vxlan - improved system stability for Tile devices;
   *) webfig - fixed "Days" property configuration change under "IP/Firewall" menu;
   *) webfig - fixed timezone for interface "Last Link Down/Up Time";
   *) webfig - improved Webfig performance and responsiveness;
   *) webfig - try to re-establish connection after disconnect;
   *) wifiwave2 - added an alternative QoS priority assignment mechanism based on IP DSCP;
   *) wifiwave2 - added comment property for registration-table;
   *) wifiwave2 - added station-bridge interface mode;
   *) wifiwave2 - correctly add interface to specified "datapath.interface-list";
   *) wifiwave2 - do not show default "l2mtu" on compact export;
   *) wifiwave2 - enable changing interface MTU and L2MTU;
   *) wifiwave2 - fixed malformed Interworking packet elements;
   *) wifiwave2 - fixed PTK renewal for interfaces in station mode;
   *) wifiwave2 - fixed re-connection failures for 802.11ax interfaces in station mode;
   *) wifiwave2 - fixed sniffer command not receiving any QoS null function frames when using 802.11ax radios;
   *) wifiwave2 - fixed untagged VLAN 1 entry when using "vlan-id" setting together with vlan-filtering bridge;
   *) wifiwave2 - fixed warning on CAP devices when radar detected;
   *) wifiwave2 - implemented an option to transmit IP multicast packets as unicasts;
   *) wifiwave2 - improved compliance with regulatory requirements;
   *) wifiwave2 - limit L2MTU to 1560 until a fix is available for a bug causing interfaces to fail transmitting larger frames than that;
   *) wifiwave2 - list APs with a higher maximum data rate as more preferable roaming candidates;
   *) wifiwave2 - log more information regarding authentication failures;
   *) wifiwave2 - make 4-way handshake procedure more robust when acting as supplicant (client);
   *) wifiwave2 - use CAPsMAN's "datapath.vlan-id" on CAP for bridge port "pvid";
   *) winbox - added "Addresses" property under "Routing/BFD/Configuration" menu;
   *) winbox - added "BUS" property for USB Power Reset button for LtAP-2HnD and CCR1072;
   *) winbox - added "Comment" under "Routing/BFD/Configuration" menu;
   *) winbox - added "g" flag under "IPv6/Routes" menu;
   *) winbox - added "Host Key Type" setting under "IP/SSH" menu;
   *) winbox - added "Key Owner" setting under "System/User/SSH Keys" and "System/User/SSH Private Keys" menus;
   *) winbox - added "Name Format" property under "WifiWave2/Provisioning" menu;
   *) winbox - added "Remote Min Tx" parameter under "Routing/BFD/Session" menu;
   *) winbox - added "Startup Delay" setting under "Tools/Netwatch" menu;
   *) winbox - added "USB" button under "System/RouterBOARD" menu for LtAP-2HnD;
   *) winbox - added "Use BFD" setting under "Routing/RIP/Interface-Template" menu;
   *) winbox - added Enable/Disable button under "Routing/RIP/Static Neighbors" menu;
   *) winbox - added missing properties under "WifiWave2" menu;
   *) winbox - added MQTT subscription menu;
   *) winbox - allow to change port numbers for SCTP, DCCP, and UDP-LITE protocols under "IP/Firewall" menus;
   *) winbox - allow to set multiple addresses and added IPv6 support under "Interface/VETH" menu;
   *) winbox - allow to specify server as DNS name under "Tools/Email" menu;
   *) winbox - changed "MBR Partition Table" checkbox to unchecked by default under "System/Disks/Format-Drive" menu;
   *) winbox - do not show "F" flag for disabled entries under "IP/Routes" menu;
   *) winbox - fixed "Address" property under "WifiWave2/Remote-CAP" menu;
   *) winbox - fixed "Do" property under "Routing/Filters/Select Rule" menu;
   *) winbox - fixed "Group Key Update" maximum value under "WifiWave2/Security" menu;
   *) winbox - fixed "Range" property under "Routing/Filters/Num Set" menu;
   *) winbox - fixed "Switch" menu for CCR2004-16G-2S+;
   *) winbox - fixed entry numbering and ordering under "WifiWave2/Provisioning" menu;
   *) winbox - fixed minor typos;
   *) winbox - improved support for certain properties under "WifiWave2/Interworking Profiles" menu;
   *) winbox - rename "DSCP" setting to "DSCP (+ECN)" under "Tools/Traffic-Generator/Packet-Templates" menu;
   *) winbox - rename "Name" setting to "List" under "IP,IPv6/Firewall/Address-List" menu;
   *) winbox - rename "Password" button to "Change Now" under "System/Password" menu;
   *) winbox - show "unknown" value for "FS" property under "System/Disks" menu if the data is not available;
   *) wireguard - added "auto" and "none" parameter for "private-key" and "presharde-key" parameters;
   *) wireguard - added "wg-export" and "wg-import" functionality (CLI only);
   *) wireguard - allow to specify client settings under peer menu which will be included in configuration file and QR code;
   *) wireguard - request public or private key to be specified in order to create peer;
   *) wireless - added more "radius-mac-format" options (CLI only);
   *) wireless - fixed malformed Interworking packet elements;
   *) www - fixed allowed address setting for REST API users;
   *) www - fixed fragmented POST data for SCEP service;
   *) x86 - added support for Mellanox ConnectX-6 Dx NIC;
   *) x86 - i40e updated driver to 2.23.17 version;
   *) x86 - igb updated driver to 5.14.16 version;
   *) x86 - igbvf updated driver from in-tree Linux kernel;
   *) x86 - igc updated driver to 5.10.194 version;
   *) x86 - ixgbe updated driver to 5.19.6 version;
   *) x86 - Realtek r8169 updated driver;
   *) x86 - updated latest available pci.ids;
   
   Download the new 'RouterOS 7.12' version here: https://mikrotik.com/download

8. RouterOS 7.12rc7 [Testing]

   7.12rc7 changelog:

   Changes in this release:
   
   *) sfp - fixed occasional bad EEPROM data reading for L009 devices;
   *) webfig - fixed authentication for branded login page (introduced in v7.12beta7);
   
   Other changes since v7.11:
   
   !) ethernet - changed "advertise" and "speed" arguments, and removed "half-duplex" setting under "/interface ethernet" menu;
   !) health - removed "temperature" health entry from boards, where it was the same as "sfp-temperature";
   !) sfp - convert configuration to support new link modes for SFP and QSFP type of interfaces;
   *) api - fixed fetching objects with warning option from REST API;
   *) bfd - fixed sessions when setting VRF;
   *) bfd - improved system stability;
   *) bgp - fixed "atomic-aggregate" always set in output;
   *) bgp - fixed "input.filter-chain" argument selection in VPN configuration;
   *) bgp - fixed local and remote port settings for BGP connections;
   *) bgp - fixed typos and missing spaces in log messages;
   *) bgp - implemented IGP metric sending in BGP messages;
   *) bgp - improved logging;
   *) bgp - increase "hold-time" limit to 65000;
   *) bluetooth - added basic support for connecting to BLE peripheral devices;
   *) bluetooth - use "g" units when decoding MikroTik beacon acceleration on peripheral devices menu;
   *) bridge - fixed bridge host ageing timeout behaviour (introduced in 7.12beta8);
   *) bridge - fixed fast-path forwarding with HW offloaded vlan-filtering (introduced in v7.11);
   *) bridge - fixed untagged VLAN entry disable;
   *) bridge - fixed vlan-filtering stability with HW and non-HW offloaded ports (introduced in v7.10);
   *) bridge - improved system stability;
   *) bridge - improved vlan-filtering bridge stability with CAPsMAN (introduced in v7.11);
   *) bth - added "Back To Home" VPN service for ARM, ARM64, and TILE devices;
   *) calea - improved system stability when trying to add rules without the CALEA package;
   *) certificate - allow to get and maintain Let's Encrypt certificate in IPv6 environment;
   *) certificate - allow to remove issued certificates when CRL is not used;
   *) certificate - fixed "subject-alt-name" duplicating itself when SCEP is used;
   *) certificate - fixed certificate auto renewal via SCEP;
   *) certificate - improved certificate validation logging error messages;
   *) certificate - log CRL HTTP errors under the "error" logging topic;
   *) chr - iavf updated driver to 4.9.1 version;
   *) chr - increased OVA default RAM amount from 160MB to 256MB;
   *) console - added ":jobname" command;
   *) console - added "as-string" and "as-string-value" properties for "get" command;
   *) console - added "terminal/ask" command;
   *) console - added "transform" property for ":convert" command;
   *) console - display "End-User License Agreement" prompt after configuration reset;
   *) console - export required properties with default values;
   *) console - fixed scheduler "on-event" script highlighting when editing;
   *) console - improved ":totime" and ":tonum" commands and added ":tonsec" command for time value manipulation;
   *) console - improved multi-argument property parsing into array;
   *) console - improved randomness for ":rndstr" and ":rndnum" commands;
   *) console - improved stability and responsiveness;
   *) console - improved stability when editing long scripts;
   *) console - improved stability when using "special-login";
   *) console - improved system stability through RoMON session;
   *) console - improved system stability when using autocomplete;
   *) console - improved system stability;
   *) console - restrict permissions to "read,write,reboot,ftp,romon,test" for scripts executed by DHCP, Hotspot, PPP and Traffic-Monitor services;
   *) console - show full date and time in scheduler "next-run" property;
   *) dhcp - fixed DHCP server "authoritative" and "delay-threshold" settings (introduced in v7.12beta3);
   *) dhcp - fixed DHCP server and relay related response delays;
   *) email - rename "address" property to "server";
   *) ethernet - added "supported" and "sfp-supported" values for "monitor" command;
   *) ethernet - fixed default "advertise" property for CRS310-8G+2S+ device (introduced in v7.12beta3);
   *) firewall - added "ein-snat" and "ein-dnat" connection NAT state matchers for filter and mangle rules;
   *) flash - show more accurate "total-hdd-space" resource property;
   *) gps - expose GPS port for Quectel EM12-G (vendor-id="0x2c7c", device-id="0x0512");
   *) ike1 - fixed invalid key length on phase1 negotiation;
   *) ike1 - log an error when non-RSA keys are being used;
   *) ike2 - improved rekey collision handling;
   *) interface - added "macvlan" interface support;
   *) iot - fixed an issue where applying a script to GPIO pin caused GPIO to stop working;
   *) iot - fixed behavior where GPIO output state would change on boot;
   *) ipsec - fixed Diffie-Hellman public value encoding size;
   *) ipsec - fixed IPSec policy when using modp3072;
   *) ipsec - fixed minor typo in logs;
   *) ipsec - reduce disk writes when started without active configuration;
   *) ipv6 - fixed IPv6 RA delay time from 5s to 500ms according to RFC;
   *) ipv6 - send RA and RA deprecate messages out three times instead of just once;
   *) l3hw - fixed IPv6 route suppression;
   *) l3hw - improved system stability during IPv6 route offloading;
   *) l3hw - prioritize local IP addresses over the respective /32 and /128 routes;
   *) led - fixed "interface-status" configuration for virtual interfaces;
   *) led - fixed 5G modem mobile network category LED colours;
   *) led - fixed CRS312 Ethernet port LED functionality (introduced in 7.12rc1);
   *) leds - added "dark-mode" functionality for RBwAPG-5HacD2HnD;
   *) leds - added "wireless-status" and "wireless-signal-strength" configuration types for wifiwave2 interfaces;
   *) leds - fixed "wireless-status" and "wireless-signal-strength" for wireless interfaces (introduced in v7.12beta7);
   *) log - improved logging for user actions;
   *) lora - added LNS protocol support;
   *) lte - added at-chat support and increased wait time on modem at-chat for Dell DW5821e, DW5821e-eSIM, DW5829e and DW5829e-eSIM;
   *) lte - added SINR reporting for FG621-EA modem;
   *) lte - changed R11e-LTE ARP behavior to NoArp;
   *) lte - fixed 5G data-class reporting for Chateau 5G;
   *) lte - fixed APN authentification in multi APN setup for R11e-LTE6;
   *) lte - fixed FG621-EA possible timeouts during firmware upgrade;
   *) lte - fixed IPv6 prefix for MBIM modems in multi-apn setup when IPv6 APN used as not first APN;
   *) lte - fixed RSSI for FG621-EA modem to show the correct value;
   *) lte - fixed Sierra modem detection for modems with vendor-specific USB descriptors;
   *) lte - fixed Sierra modem initialization;
   *) lte - fixed startup race condition when SIM card is in "up" slot for LtAP mini;
   *) lte - fixed sub-interface auto-removal in multiple APN setups;
   *) lte - show correct data class when connected to 5G SA network;
   *) lte - use more compact logging messages;
   *) modbus - added additional security settings for Modbus TCP;
   *) mpls - added option to match and set MPLS EXP with bridge and mangle rules;
   *) mpls - fixed "propagate-ttl=no" setting;
   *) mpls - improved FastPath next-hop selection hash algorithm;
   *) mqtt - added on-message feature for subscribed topics;
   *) mqtt - added parallel-scripts-limit parameter to set maximum allowed number of scripts executed at the same time;
   *) mqtt - added wildcard topic subscription support;
   *) mqtt - fixed service startup on boot (introduced in v7.12rc4);
   *) netinstall - added option to discard branding package;
   *) netinstall - display package filename in GUI Description column if package description is not specified;
   *) netinstall-cli - added empty configuration option "-e";
   *) netinstall-cli - added option to discard branding package;
   *) netinstall-cli - allow ".rsc" script filenames;
   *) netinstall-cli - fixed "-k" key option (introduced in v7.12beta7);
   *) netinstall-cli - prioritise interface option over address option;
   *) netinstall-cli - updated configuration option description;
   *) netwatch - decreased "thr-tcp-conn-time" maximum limit to 30 seconds;
   *) ospf - fixed adding ECMP routes;
   *) ospf - fixed BFD on virtual-link with configured VRF;
   *) ospf - fixed OSPFv3 authentication header length calculation;
   *) ospf - fixed OSPFv3 not working with NSSA areas;
   *) ospf - fixed parsing of opaque LSAs used by TE;
   *) ospf - fixed translated NSSA routes not showing in backbone;
   *) ovpn - added "tls-auth" option support for imported .ovpn profiles;
   *) ovpn - improved system stability;
   *) pimsm - fixed BSR update process;
   *) pimsm - fixed UIB update process;
   *) pimsm - improved system stability;
   *) poe-out - driver optimization for AF/AT controlled boards;
   *) poe-out - fixed rare CRS328 poe-out menu and poe-out port config loss after reboot;
   *) poe-out - improved "auto" mode for devices with single PoE-out port;
   *) poe-out - removed "auto" mode support for L009 devices;
   *) port - add support for Huawei MS237h-517;
   *) port - expose NMEA/DIAG ports for Dell DW5821e and DW5821e-eSIM;
   *) qsfp - added 50Gbps rate support for QSFP28 interfaces;
   *) qsfp - fixed incorrect QSFP temperature readings in negative temperature;
   *) qsfp - fixed sub-interface EEPROM monitor data output (introduced in v7.12beta3);
   *) qsfp - improved auto link detection for 100G CWDM4 modules and AOC cables (introduced in v7.12beta3);
   *) qsfp - improved auto link detection for AOC cables;
   *) qsfp - use sub-interface configuration for establishing link (for 40Gbps and 100Gbps links, all sub-interfaces must be enabled);
   *) quickset - fixed "LAN" interface list members if configuration does not contain bridge;
   *) rip - added BFD support;
   *) rip - fixed session not working in VRF;
   *) route - added "single-process" configuration setting, enabled by default on devices with 64MB or less RAM memory;
   *) route - added "suppress-hw-offload" setting for IPv6 routes;
   *) route - fixed gateway after link restart;
   *) route - fixed VRF functionality on devices where "single-process" routing process mode is enabled (introduced in 7.12rc1);
   *) route - removed deprecated "received-from" property;
   *) route - reverse community "delete" and "filter" command behavior;
   *) routerboard - added "reset-button" support for RB800, RB1100 and RB1100AHx2 devices;
   *) routerboard - fixed "reset-button" support for wAP ac and wAP R ac devices;
   *) sfp - added 5Gbps rate for SFP+ interface on 98DX224S, 98DX226S, and 98DX3236 switch chips;
   *) sfp - fixed 1Gbps advertise for L009 devices (introduced in v7.12beta3);
   *) sfp - fixed 1Gbps advertise using SFP+ or SFP28 modules in SFP interface (introduced in v7.12beta3);
   *) sfp - fixed 25Gbps link with FEC91 (introduced in v7.12beta7);
   *) sfp - fixed failed auto-negotiation for RB5009 devices (introduced in v7.12beta3);
   *) sfp - fixed incorrect link speed when changing link modes (introduced in v7.12beta3);
   *) sfp - fixed link establishment after forced speed changes for RB4011 and CCR2004-16G-2S+ devices (introduced in 7.12rc1);
   *) sfp - fixed link establishment with passive copper cables for RB4011 and CCR2004-16G-2S+ devices (introduced in 7.12rc1);
   *) sfp - fixed missing "rx-power" monitor with certain modules (introduced in v7.10);
   *) sfp - improved interface stability for SFP and QSFP types of interfaces;
   *) sfp - improved system stability with certain modules for 98DX224S, 98DX226S, 98DX3236, 98DX8216 and 98DX8208 switch chips;
   *) snmp - changed "mtxrGaugeValue" type to integer;
   *) ssh - added support for user ed25519 public keys;
   *) ssh - allow to specify key owner on import;
   *) ssh - fixed SSH tunnel performance (introduced in v7.10);
   *) ssh - improved connection stability when pasting large chunks of text into console;
   *) supout - added interface list members section;
   *) supout - added LLDP power to supout.rif;
   *) supout - fixed BFD section;
   *) switch - fixed packet forwarding between Ethernet ports for CRS354 switches (introduced in v7.12beta7);
   *) switch - improved resource allocation for 98DX224S, 98DX226S, and 98DX3236 switch chips;
   *) switch - improved switch chip stability for CCR2004-16g-2s+ devices;
   *) system - fixed process multithreading (introduced in v7.9);
   *) system - improved system stability during booting for L009 devices;
   *) system - improved system stability when MD5 checksums are used;
   *) tftp - fixed empty file name matching;
   *) tile - improved system stability when using queues;
   *) traffic-generator - added "priority" property for "inject" command;
   *) traffic-generator - fixed traffic-generator on CHR and x86;
   *) usb - added support for RTL8153 USB ethernet on ARM, ARM64 and x86;
   *) vrf - limit maximum VRFs to 1024;
   *) vxlan - improved system stability for Tile devices;
   *) webfig - fixed "Days" property configuration change under "IP/Firewall" menu;
   *) webfig - fixed interface addition (introduced in v7.12beta7);
   *) webfig - fixed timezone for interface "Last Link Down/Up Time";
   *) webfig - improved Webfig performance and responsiveness;
   *) webfig - try to re-establish connection after disconnect;
   *) wifiwave2 - added an alternative QoS priority assignment mechanism based on IP DSCP;
   *) wifiwave2 - added comment property for registration-table;
   *) wifiwave2 - added station-bridge interface mode;
   *) wifiwave2 - correctly add interface to specified "datapath.interface-list";
   *) wifiwave2 - do not show default "l2mtu" on compact export;
   *) wifiwave2 - enable changing interface MTU and L2MTU;
   *) wifiwave2 - fixed malformed Interworking packet elements;
   *) wifiwave2 - fixed PTK renewal for interfaces in station mode;
   *) wifiwave2 - fixed re-connection failures for 802.11ax interfaces in station mode;
   *) wifiwave2 - fixed sniffer command not receiving any QoS null function frames when using 802.11ax radios;
   *) wifiwave2 - fixed untagged VLAN 1 entry when using "vlan-id" setting together with vlan-filtering bridge;
   *) wifiwave2 - fixed warning on CAP devices when radar detected;
   *) wifiwave2 - implemented an option to transmit IP multicast packets as unicasts;
   *) wifiwave2 - improved compliance with regulatory requirements;
   *) wifiwave2 - limit L2MTU to 1560 until a fix is available for a bug causing interfaces to fail transmitting larger frames than that;
   *) wifiwave2 - list APs with a higher maximum data rate as more preferable roaming candidates;
   *) wifiwave2 - log more information regarding authentication failures;
   *) wifiwave2 - make 4-way handshake procedure more robust when acting as supplicant (client);
   *) wifiwave2 - use CAPsMAN's "datapath.vlan-id" on CAP for bridge port "pvid";
   *) winbox - added "Addresses" property under "Routing/BFD/Configuration" menu;
   *) winbox - added "BUS" property for USB Power Reset button for LtAP-2HnD and CCR1072;
   *) winbox - added "Comment" under "Routing/BFD/Configuration" menu;
   *) winbox - added "g" flag under "IPv6/Routes" menu;
   *) winbox - added "Host Key Type" setting under "IP/SSH" menu;
   *) winbox - added "Key Owner" setting under "System/User/SSH Keys" and "System/User/SSH Private Keys" menus;
   *) winbox - added "Name Format" property under "WifiWave2/Provisioning" menu;
   *) winbox - added "Remote Min Tx" parameter under "Routing/BFD/Session" menu;
   *) winbox - added "Startup Delay" setting under "Tools/Netwatch" menu;
   *) winbox - added "USB" button under "System/RouterBOARD" menu for LtAP-2HnD;
   *) winbox - added "Use BFD" setting under "Routing/RIP/Interface-Template" menu;
   *) winbox - added Enable/Disable button under "Routing/RIP/Static Neighbors" menu;
   *) winbox - added missing properties under "WifiWave2" menu;
   *) winbox - added MQTT subscription menu;
   *) winbox - allow to change port numbers for SCTP, DCCP, and UDP-LITE protocols under "IP/Firewall" menus;
   *) winbox - allow to set multiple addresses and added IPv6 support under "Interface/VETH" menu;
   *) winbox - allow to specify server as DNS name under "Tools/Email" menu;
   *) winbox - changed "MBR Partition Table" checkbox to unchecked by default under "System/Disks/Format-Drive" menu;
   *) winbox - do not show "F" flag for disabled entries under "IP/Routes" menu;
   *) winbox - fixed "Address" property under "WifiWave2/Remote-CAP" menu;
   *) winbox - fixed "Do" property under "Routing/Filters/Select Rule" menu;
   *) winbox - fixed "Group Key Update" maximum value under "WifiWave2/Security" menu;
   *) winbox - fixed "Range" property under "Routing/Filters/Num Set" menu;
   *) winbox - fixed "Switch" menu for CCR2004-16G-2S+;
   *) winbox - fixed entry numbering and ordering under "WifiWave2/Provisioning" menu;
   *) winbox - fixed minor typos;
   *) winbox - improved support for certain properties under "WifiWave2/Interworking Profiles" menu;
   *) winbox - rename "DSCP" setting to "DSCP (+ECN)" under "Tools/Traffic-Generator/Packet-Templates" menu;
   *) winbox - rename "Name" setting to "List" under "IP,IPv6/Firewall/Address-List" menu;
   *) winbox - rename "Password" button to "Change Now" under "System/Password" menu;
   *) winbox - show "unknown" value for "FS" property under "System/Disks" menu if the data is not available;
   *) wireguard - added "auto" and "none" parameter for "private-key" and "presharde-key" parameters;
   *) wireguard - added "wg-export" and "wg-import" functionality (CLI only);
   *) wireguard - allow to specify client settings under peer menu which will be included in configuration file and QR code;
   *) wireguard - request public or private key to be specified in order to create peer;
   *) wireless - added more "radius-mac-format" options (CLI only);
   *) wireless - fixed malformed Interworking packet elements;
   *) www - fixed allowed address setting for REST API users;
   *) www - fixed fragmented POST data for SCEP service;
   *) x86 - added support for Mellanox ConnectX-6 Dx NIC;
   *) x86 - i40e updated driver to 2.23.17 version;
   *) x86 - igb updated driver to 5.14.16 version;
   *) x86 - igbvf updated driver from in-tree Linux kernel;
   *) x86 - igc updated driver to 5.10.194 version;
   *) x86 - ixgbe updated driver to 5.19.6 version;
   *) x86 - Realtek r8169 updated driver;
   *) x86 - updated latest available pci.ids;
   
   Download the new 'RouterOS 7.12rc7' version here: https://mikrotik.com/download

9. RouterOS 7.12rc6 [Testing]

   7.12rc6 changelog:

   Changes in this release:
   
   *) mqtt - fixed service startup on boot (introduced in v7.12rc4);
   
   Other changes since v7.11:
   
   !) ethernet - changed "advertise" and "speed" arguments, and removed "half-duplex" setting under "/interface ethernet" menu;
   !) health - removed "temperature" health entry from boards, where it was the same as "sfp-temperature";
   !) sfp - convert configuration to support new link modes for SFP and QSFP type of interfaces;
   *) api - fixed fetching objects with warning option from REST API;
   *) bfd - fixed sessions when setting VRF;
   *) bfd - improved system stability;
   *) bgp - fixed "atomic-aggregate" always set in output;
   *) bgp - fixed "input.filter-chain" argument selection in VPN configuration;
   *) bgp - fixed local and remote port settings for BGP connections;
   *) bgp - fixed typos and missing spaces in log messages;
   *) bgp - implemented IGP metric sending in BGP messages;
   *) bgp - improved logging;
   *) bgp - increase "hold-time" limit to 65000;
   *) bluetooth - added basic support for connecting to BLE peripheral devices;
   *) bluetooth - use "g" units when decoding MikroTik beacon acceleration on peripheral devices menu;
   *) bridge - fixed bridge host ageing timeout behaviour (introduced in 7.12beta8);
   *) bridge - fixed fast-path forwarding with HW offloaded vlan-filtering (introduced in v7.11);
   *) bridge - fixed untagged VLAN entry disable;
   *) bridge - fixed vlan-filtering stability with HW and non-HW offloaded ports (introduced in v7.10);
   *) bridge - improved system stability;
   *) bridge - improved vlan-filtering bridge stability with CAPsMAN (introduced in v7.11);
   *) bth - added "Back To Home" VPN service for ARM, ARM64, and TILE devices;
   *) calea - improved system stability when trying to add rules without the CALEA package;
   *) certificate - allow to get and maintain Let's Encrypt certificate in IPv6 environment;
   *) certificate - allow to remove issued certificates when CRL is not used;
   *) certificate - fixed "subject-alt-name" duplicating itself when SCEP is used;
   *) certificate - fixed certificate auto renewal via SCEP;
   *) certificate - improved certificate validation logging error messages;
   *) certificate - log CRL HTTP errors under the "error" logging topic;
   *) chr - iavf updated driver to 4.9.1 version;
   *) chr - increased OVA default RAM amount from 160MB to 256MB;
   *) console - added ":jobname" command;
   *) console - added "as-string" and "as-string-value" properties for "get" command;
   *) console - added "terminal/ask" command;
   *) console - added "transform" property for ":convert" command;
   *) console - display "End-User License Agreement" prompt after configuration reset;
   *) console - export required properties with default values;
   *) console - fixed scheduler "on-event" script highlighting when editing;
   *) console - improved ":totime" and ":tonum" commands and added ":tonsec" command for time value manipulation;
   *) console - improved multi-argument property parsing into array;
   *) console - improved randomness for ":rndstr" and ":rndnum" commands;
   *) console - improved stability and responsiveness;
   *) console - improved stability when editing long scripts;
   *) console - improved stability when using "special-login";
   *) console - improved system stability through RoMON session;
   *) console - improved system stability when using autocomplete;
   *) console - improved system stability;
   *) console - restrict permissions to "read,write,reboot,ftp,romon,test" for scripts executed by DHCP, Hotspot, PPP and Traffic-Monitor services;
   *) console - show full date and time in scheduler "next-run" property;
   *) dhcp - fixed DHCP server "authoritative" and "delay-threshold" settings (introduced in v7.12beta3);
   *) dhcp - fixed DHCP server and relay related response delays;
   *) email - rename "address" property to "server";
   *) ethernet - added "supported" and "sfp-supported" values for "monitor" command;
   *) ethernet - fixed default "advertise" property for CRS310-8G+2S+ device (introduced in v7.12beta3);
   *) firewall - added "ein-snat" and "ein-dnat" connection NAT state matchers for filter and mangle rules;
   *) flash - show more accurate "total-hdd-space" resource property;
   *) gps - expose GPS port for Quectel EM12-G (vendor-id="0x2c7c", device-id="0x0512");
   *) ike1 - fixed invalid key length on phase1 negotiation;
   *) ike1 - log an error when non-RSA keys are being used;
   *) ike2 - improved rekey collision handling;
   *) interface - added "macvlan" interface support;
   *) iot - fixed an issue where applying a script to GPIO pin caused GPIO to stop working;
   *) iot - fixed behavior where GPIO output state would change on boot;
   *) ipsec - fixed Diffie-Hellman public value encoding size;
   *) ipsec - fixed IPSec policy when using modp3072;
   *) ipsec - fixed minor typo in logs;
   *) ipsec - reduce disk writes when started without active configuration;
   *) ipv6 - fixed IPv6 RA delay time from 5s to 500ms according to RFC;
   *) ipv6 - send RA and RA deprecate messages out three times instead of just once;
   *) l3hw - fixed IPv6 route suppression;
   *) l3hw - improved system stability during IPv6 route offloading;
   *) l3hw - prioritize local IP addresses over the respective /32 and /128 routes;
   *) led - fixed "interface-status" configuration for virtual interfaces;
   *) led - fixed 5G modem mobile network category LED colours;
   *) led - fixed CRS312 Ethernet port LED functionality (introduced in 7.12rc1);
   *) leds - added "dark-mode" functionality for RBwAPG-5HacD2HnD;
   *) leds - added "wireless-status" and "wireless-signal-strength" configuration types for wifiwave2 interfaces;
   *) leds - fixed "wireless-status" and "wireless-signal-strength" for wireless interfaces (introduced in v7.12beta7);
   *) log - improved logging for user actions;
   *) lora - added LNS protocol support;
   *) lte - added at-chat support and increased wait time on modem at-chat for Dell DW5821e, DW5821e-eSIM, DW5829e and DW5829e-eSIM;
   *) lte - added SINR reporting for FG621-EA modem;
   *) lte - changed R11e-LTE ARP behavior to NoArp;
   *) lte - fixed 5G data-class reporting for Chateau 5G;
   *) lte - fixed APN authentification in multi APN setup for R11e-LTE6;
   *) lte - fixed FG621-EA possible timeouts during firmware upgrade;
   *) lte - fixed IPv6 prefix for MBIM modems in multi-apn setup when IPv6 APN used as not first APN;
   *) lte - fixed RSSI for FG621-EA modem to show the correct value;
   *) lte - fixed Sierra modem detection for modems with vendor-specific USB descriptors;
   *) lte - fixed Sierra modem initialization;
   *) lte - fixed startup race condition when SIM card is in "up" slot for LtAP mini;
   *) lte - fixed sub-interface auto-removal in multiple APN setups;
   *) lte - show correct data class when connected to 5G SA network;
   *) lte - use more compact logging messages;
   *) modbus - added additional security settings for Modbus TCP;
   *) mpls - added option to match and set MPLS EXP with bridge and mangle rules;
   *) mpls - fixed "propagate-ttl=no" setting;
   *) mpls - improved FastPath next-hop selection hash algorithm;
   *) mqtt - added on-message feature for subscribed topics;
   *) mqtt - added parallel-scripts-limit parameter to set maximum allowed number of scripts executed at the same time;
   *) mqtt - added wildcard topic subscription support;
   *) netinstall - added option to discard branding package;
   *) netinstall - display package filename in GUI Description column if package description is not specified;
   *) netinstall-cli - added empty configuration option "-e";
   *) netinstall-cli - added option to discard branding package;
   *) netinstall-cli - allow ".rsc" script filenames;
   *) netinstall-cli - fixed "-k" key option (introduced in v7.12beta7);
   *) netinstall-cli - prioritise interface option over address option;
   *) netinstall-cli - updated configuration option description;
   *) netwatch - decreased "thr-tcp-conn-time" maximum limit to 30 seconds;
   *) ospf - fixed adding ECMP routes;
   *) ospf - fixed BFD on virtual-link with configured VRF;
   *) ospf - fixed OSPFv3 authentication header length calculation;
   *) ospf - fixed OSPFv3 not working with NSSA areas;
   *) ospf - fixed parsing of opaque LSAs used by TE;
   *) ospf - fixed translated NSSA routes not showing in backbone;
   *) ovpn - added "tls-auth" option support for imported .ovpn profiles;
   *) ovpn - improved system stability;
   *) pimsm - fixed BSR update process;
   *) pimsm - fixed UIB update process;
   *) pimsm - improved system stability;
   *) poe-out - driver optimization for AF/AT controlled boards;
   *) poe-out - fixed rare CRS328 poe-out menu and poe-out port config loss after reboot;
   *) poe-out - improved "auto" mode for devices with single PoE-out port;
   *) poe-out - removed "auto" mode support for L009 devices;
   *) port - add support for Huawei MS237h-517;
   *) port - expose NMEA/DIAG ports for Dell DW5821e and DW5821e-eSIM;
   *) qsfp - added 50Gbps rate support for QSFP28 interfaces;
   *) qsfp - fixed incorrect QSFP temperature readings in negative temperature;
   *) qsfp - fixed sub-interface EEPROM monitor data output (introduced in v7.12beta3);
   *) qsfp - improved auto link detection for 100G CWDM4 modules and AOC cables (introduced in v7.12beta3);
   *) qsfp - improved auto link detection for AOC cables;
   *) qsfp - use sub-interface configuration for establishing link (for 40Gbps and 100Gbps links, all sub-interfaces must be enabled);
   *) quickset - fixed "LAN" interface list members if configuration does not contain bridge;
   *) rip - added BFD support;
   *) rip - fixed session not working in VRF;
   *) route - added "single-process" configuration setting, enabled by default on devices with 64MB or less RAM memory;
   *) route - added "suppress-hw-offload" setting for IPv6 routes;
   *) route - fixed gateway after link restart;
   *) route - fixed VRF functionality on devices where "single-process" routing process mode is enabled (introduced in 7.12rc1);
   *) route - removed deprecated "received-from" property;
   *) route - reverse community "delete" and "filter" command behavior;
   *) routerboard - added "reset-button" support for RB800, RB1100 and RB1100AHx2 devices;
   *) routerboard - fixed "reset-button" support for wAP ac and wAP R ac devices;
   *) sfp - added 5Gbps rate for SFP+ interface on 98DX224S, 98DX226S, and 98DX3236 switch chips;
   *) sfp - fixed 1Gbps advertise for L009 devices (introduced in v7.12beta3);
   *) sfp - fixed 1Gbps advertise using SFP+ or SFP28 modules in SFP interface (introduced in v7.12beta3);
   *) sfp - fixed 25Gbps link with FEC91 (introduced in v7.12beta7);
   *) sfp - fixed failed auto-negotiation for RB5009 devices (introduced in v7.12beta3);
   *) sfp - fixed incorrect link speed when changing link modes (introduced in v7.12beta3);
   *) sfp - fixed link establishment after forced speed changes for RB4011 and CCR2004-16G-2S+ devices (introduced in 7.12rc1);
   *) sfp - fixed link establishment with passive copper cables for RB4011 and CCR2004-16G-2S+ devices (introduced in 7.12rc1);
   *) sfp - fixed missing "rx-power" monitor with certain modules (introduced in v7.10);
   *) sfp - improved interface stability for SFP and QSFP types of interfaces;
   *) sfp - improved system stability with certain modules for 98DX224S, 98DX226S, 98DX3236, 98DX8216 and 98DX8208 switch chips;
   *) snmp - changed "mtxrGaugeValue" type to integer;
   *) ssh - added support for user ed25519 public keys;
   *) ssh - allow to specify key owner on import;
   *) ssh - fixed SSH tunnel performance (introduced in v7.10);
   *) ssh - improved connection stability when pasting large chunks of text into console;
   *) supout - added interface list members section;
   *) supout - added LLDP power to supout.rif;
   *) supout - fixed BFD section;
   *) switch - fixed packet forwarding between Ethernet ports for CRS354 switches (introduced in v7.12beta7);
   *) switch - improved resource allocation for 98DX224S, 98DX226S, and 98DX3236 switch chips;
   *) switch - improved switch chip stability for CCR2004-16g-2s+ devices;
   *) system - fixed process multithreading (introduced in v7.9);
   *) system - improved system stability during booting for L009 devices;
   *) system - improved system stability when MD5 checksums are used;
   *) tftp - fixed empty file name matching;
   *) tile - improved system stability when using queues;
   *) traffic-generator - added "priority" property for "inject" command;
   *) traffic-generator - fixed traffic-generator on CHR and x86;
   *) usb - added support for RTL8153 USB ethernet on ARM, ARM64 and x86;
   *) vrf - limit maximum VRFs to 1024;
   *) vxlan - improved system stability for Tile devices;
   *) webfig - fixed "Days" property configuration change under "IP/Firewall" menu;
   *) webfig - fixed interface addition (introduced in v7.12beta7);
   *) webfig - fixed timezone for interface "Last Link Down/Up Time";
   *) webfig - improved Webfig performance and responsiveness;
   *) webfig - try to re-establish connection after disconnect;
   *) wifiwave2 - added an alternative QoS priority assignment mechanism based on IP DSCP;
   *) wifiwave2 - added comment property for registration-table;
   *) wifiwave2 - added station-bridge interface mode;
   *) wifiwave2 - correctly add interface to specified "datapath.interface-list";
   *) wifiwave2 - do not show default "l2mtu" on compact export;
   *) wifiwave2 - enable changing interface MTU and L2MTU;
   *) wifiwave2 - fixed malformed Interworking packet elements;
   *) wifiwave2 - fixed PTK renewal for interfaces in station mode;
   *) wifiwave2 - fixed re-connection failures for 802.11ax interfaces in station mode;
   *) wifiwave2 - fixed sniffer command not receiving any QoS null function frames when using 802.11ax radios;
   *) wifiwave2 - fixed untagged VLAN 1 entry when using "vlan-id" setting together with vlan-filtering bridge;
   *) wifiwave2 - fixed warning on CAP devices when radar detected;
   *) wifiwave2 - implemented an option to transmit IP multicast packets as unicasts;
   *) wifiwave2 - improved compliance with regulatory requirements;
   *) wifiwave2 - limit L2MTU to 1560 until a fix is available for a bug causing interfaces to fail transmitting larger frames than that;
   *) wifiwave2 - list APs with a higher maximum data rate as more preferable roaming candidates;
   *) wifiwave2 - log more information regarding authentication failures;
   *) wifiwave2 - make 4-way handshake procedure more robust when acting as supplicant (client);
   *) wifiwave2 - use CAPsMAN's "datapath.vlan-id" on CAP for bridge port "pvid";
   *) winbox - added "Addresses" property under "Routing/BFD/Configuration" menu;
   *) winbox - added "BUS" property for USB Power Reset button for LtAP-2HnD and CCR1072;
   *) winbox - added "Comment" under "Routing/BFD/Configuration" menu;
   *) winbox - added "g" flag under "IPv6/Routes" menu;
   *) winbox - added "Host Key Type" setting under "IP/SSH" menu;
   *) winbox - added "Key Owner" setting under "System/User/SSH Keys" and "System/User/SSH Private Keys" menus;
   *) winbox - added "Name Format" property under "WifiWave2/Provisioning" menu;
   *) winbox - added "Remote Min Tx" parameter under "Routing/BFD/Session" menu;
   *) winbox - added "Startup Delay" setting under "Tools/Netwatch" menu;
   *) winbox - added "USB" button under "System/RouterBOARD" menu for LtAP-2HnD;
   *) winbox - added "Use BFD" setting under "Routing/RIP/Interface-Template" menu;
   *) winbox - added Enable/Disable button under "Routing/RIP/Static Neighbors" menu;
   *) winbox - added missing properties under "WifiWave2" menu;
   *) winbox - added MQTT subscription menu;
   *) winbox - allow to change port numbers for SCTP, DCCP, and UDP-LITE protocols under "IP/Firewall" menus;
   *) winbox - allow to set multiple addresses and added IPv6 support under "Interface/VETH" menu;
   *) winbox - allow to specify server as DNS name under "Tools/Email" menu;
   *) winbox - changed "MBR Partition Table" checkbox to unchecked by default under "System/Disks/Format-Drive" menu;
   *) winbox - do not show "F" flag for disabled entries under "IP/Routes" menu;
   *) winbox - fixed "Address" property under "WifiWave2/Remote-CAP" menu;
   *) winbox - fixed "Do" property under "Routing/Filters/Select Rule" menu;
   *) winbox - fixed "Group Key Update" maximum value under "WifiWave2/Security" menu;
   *) winbox - fixed "Range" property under "Routing/Filters/Num Set" menu;
   *) winbox - fixed "Switch" menu for CCR2004-16G-2S+;
   *) winbox - fixed entry numbering and ordering under "WifiWave2/Provisioning" menu;
   *) winbox - fixed minor typos;
   *) winbox - improved support for certain properties under "WifiWave2/Interworking Profiles" menu;
   *) winbox - rename "DSCP" setting to "DSCP (+ECN)" under "Tools/Traffic-Generator/Packet-Templates" menu;
   *) winbox - rename "Name" setting to "List" under "IP,IPv6/Firewall/Address-List" menu;
   *) winbox - rename "Password" button to "Change Now" under "System/Password" menu;
   *) winbox - show "unknown" value for "FS" property under "System/Disks" menu if the data is not available;
   *) wireguard - added "auto" and "none" parameter for "private-key" and "presharde-key" parameters;
   *) wireguard - added "wg-export" and "wg-import" functionality (CLI only);
   *) wireguard - allow to specify client settings under peer menu which will be included in configuration file and QR code;
   *) wireguard - request public or private key to be specified in order to create peer;
   *) wireless - added more "radius-mac-format" options (CLI only);
   *) wireless - fixed malformed Interworking packet elements;
   *) www - fixed allowed address setting for REST API users;
   *) www - fixed fragmented POST data for SCEP service;
   *) x86 - added support for Mellanox ConnectX-6 Dx NIC;
   *) x86 - i40e updated driver to 2.23.17 version;
   *) x86 - igb updated driver to 5.14.16 version;
   *) x86 - igbvf updated driver from in-tree Linux kernel;
   *) x86 - igc updated driver to 5.10.194 version;
   *) x86 - ixgbe updated driver to 5.19.6 version;
   *) x86 - Realtek r8169 updated driver;
   *) x86 - updated latest available pci.ids;
   
   Download the new 'RouterOS 7.12rc6' version here: https://mikrotik.com/download

10. RouterOS 7.12rc5 [Testing]

    7.12rc5 changelog:

    Changes in this release:
    
    *) bth - added "Back To Home" VPN service for ARM, ARM64, and TILE devices;
    *) console - display "End-User License Agreement" prompt after configuration reset;
    *) ethernet - fixed default "advertise" property for CRS310-8G+2S+ device (introduced in v7.12beta3);
    *) sfp - fixed 1Gbps advertise for L009 devices (introduced in v7.12beta3);
    *) sfp - fixed 1Gbps advertise using SFP+ or SFP28 modules in SFP interface (introduced in v7.12beta3);
    *) sfp - improved system stability with certain modules for 98DX224S, 98DX226S, 98DX3236, 98DX8216 and 98DX8208 switch chips;
    
    Other changes since v7.11:
    
    !) ethernet - changed "advertise" and "speed" arguments, and removed "half-duplex" setting under "/interface ethernet" menu;
    !) health - removed "temperature" health entry from boards, where it was the same as "sfp-temperature";
    !) sfp - convert configuration to support new link modes for SFP and QSFP type of interfaces;
    *) api - fixed fetching objects with warning option from REST API;
    *) bfd - fixed sessions when setting VRF;
    *) bfd - improved system stability;
    *) bgp - fixed "atomic-aggregate" always set in output;
    *) bgp - fixed "input.filter-chain" argument selection in VPN configuration;
    *) bgp - fixed local and remote port settings for BGP connections;
    *) bgp - fixed typos and missing spaces in log messages;
    *) bgp - implemented IGP metric sending in BGP messages;
    *) bgp - improved logging;
    *) bgp - increase "hold-time" limit to 65000;
    *) bluetooth - added basic support for connecting to BLE peripheral devices;
    *) bluetooth - use "g" units when decoding MikroTik beacon acceleration on peripheral devices menu;
    *) bridge - fixed bridge host ageing timeout behaviour (introduced in 7.12beta8);
    *) bridge - fixed fast-path forwarding with HW offloaded vlan-filtering (introduced in v7.11);
    *) bridge - fixed untagged VLAN entry disable;
    *) bridge - fixed vlan-filtering stability with HW and non-HW offloaded ports (introduced in v7.10);
    *) bridge - improved system stability;
    *) bridge - improved vlan-filtering bridge stability with CAPsMAN (introduced in v7.11);
    *) calea - improved system stability when trying to add rules without the CALEA package;
    *) certificate - allow to get and maintain Let's Encrypt certificate in IPv6 environment;
    *) certificate - allow to remove issued certificates when CRL is not used;
    *) certificate - fixed "subject-alt-name" duplicating itself when SCEP is used;
    *) certificate - fixed certificate auto renewal via SCEP;
    *) certificate - improved certificate validation logging error messages;
    *) certificate - log CRL HTTP errors under the "error" logging topic;
    *) chr - iavf updated driver to 4.9.1 version;
    *) chr - increased OVA default RAM amount from 160MB to 256MB;
    *) console - added ":jobname" command;
    *) console - added "as-string" and "as-string-value" properties for "get" command;
    *) console - added "terminal/ask" command;
    *) console - added "transform" property for ":convert" command;
    *) console - export required properties with default values;
    *) console - fixed scheduler "on-event" script highlighting when editing;
    *) console - improved ":totime" and ":tonum" commands and added ":tonsec" command for time value manipulation;
    *) console - improved multi-argument property parsing into array;
    *) console - improved randomness for ":rndstr" and ":rndnum" commands;
    *) console - improved stability and responsiveness;
    *) console - improved stability when editing long scripts;
    *) console - improved stability when using "special-login";
    *) console - improved system stability through RoMON session;
    *) console - improved system stability when using autocomplete;
    *) console - improved system stability;
    *) console - restrict permissions to "read,write,reboot,ftp,romon,test" for scripts executed by DHCP, Hotspot, PPP and Traffic-Monitor services;
    *) console - show full date and time in scheduler "next-run" property;
    *) dhcp - fixed DHCP server "authoritative" and "delay-threshold" settings (introduced in v7.12beta3);
    *) dhcp - fixed DHCP server and relay related response delays;
    *) email - rename "address" property to "server";
    *) ethernet - added "supported" and "sfp-supported" values for "monitor" command;
    *) firewall - added "ein-snat" and "ein-dnat" connection NAT state matchers for filter and mangle rules;
    *) flash - show more accurate "total-hdd-space" resource property;
    *) gps - expose GPS port for Quectel EM12-G (vendor-id="0x2c7c", device-id="0x0512");
    *) ike1 - fixed invalid key length on phase1 negotiation;
    *) ike1 - log an error when non-RSA keys are being used;
    *) ike2 - improved rekey collision handling;
    *) interface - added "macvlan" interface support;
    *) iot - fixed an issue where applying a script to GPIO pin caused GPIO to stop working;
    *) iot - fixed behavior where GPIO output state would change on boot;
    *) ipsec - fixed Diffie-Hellman public value encoding size;
    *) ipsec - fixed IPSec policy when using modp3072;
    *) ipsec - fixed minor typo in logs;
    *) ipsec - reduce disk writes when started without active configuration;
    *) ipv6 - fixed IPv6 RA delay time from 5s to 500ms according to RFC;
    *) ipv6 - send RA and RA deprecate messages out three times instead of just once;
    *) l3hw - fixed IPv6 route suppression;
    *) l3hw - improved system stability during IPv6 route offloading;
    *) l3hw - prioritize local IP addresses over the respective /32 and /128 routes;
    *) led - fixed "interface-status" configuration for virtual interfaces;
    *) led - fixed 5G modem mobile network category LED colours;
    *) led - fixed CRS312 Ethernet port LED functionality (introduced in 7.12rc1);
    *) leds - added "dark-mode" functionality for RBwAPG-5HacD2HnD;
    *) leds - added "wireless-status" and "wireless-signal-strength" configuration types for wifiwave2 interfaces;
    *) leds - fixed "wireless-status" and "wireless-signal-strength" for wireless interfaces (introduced in v7.12beta7);
    *) log - improved logging for user actions;
    *) lora - added LNS protocol support;
    *) lte - added at-chat support and increased wait time on modem at-chat for Dell DW5821e, DW5821e-eSIM, DW5829e and DW5829e-eSIM;
    *) lte - added SINR reporting for FG621-EA modem;
    *) lte - changed R11e-LTE ARP behavior to NoArp;
    *) lte - fixed 5G data-class reporting for Chateau 5G;
    *) lte - fixed APN authentification in multi APN setup for R11e-LTE6;
    *) lte - fixed FG621-EA possible timeouts during firmware upgrade;
    *) lte - fixed IPv6 prefix for MBIM modems in multi-apn setup when IPv6 APN used as not first APN;
    *) lte - fixed RSSI for FG621-EA modem to show the correct value;
    *) lte - fixed Sierra modem detection for modems with vendor-specific USB descriptors;
    *) lte - fixed Sierra modem initialization;
    *) lte - fixed startup race condition when SIM card is in "up" slot for LtAP mini;
    *) lte - fixed sub-interface auto-removal in multiple APN setups;
    *) lte - show correct data class when connected to 5G SA network;
    *) lte - use more compact logging messages;
    *) modbus - added additional security settings for Modbus TCP;
    *) mpls - added option to match and set MPLS EXP with bridge and mangle rules;
    *) mpls - fixed "propagate-ttl=no" setting;
    *) mpls - improved FastPath next-hop selection hash algorithm;
    *) mqtt - added on-message feature for subscribed topics;
    *) mqtt - added parallel-scripts-limit parameter to set maximum allowed number of scripts executed at the same time;
    *) mqtt - added wildcard topic subscription support;
    *) netinstall - added option to discard branding package;
    *) netinstall - display package filename in GUI Description column if package description is not specified;
    *) netinstall-cli - added empty configuration option "-e";
    *) netinstall-cli - added option to discard branding package;
    *) netinstall-cli - allow ".rsc" script filenames;
    *) netinstall-cli - fixed "-k" key option (introduced in v7.12beta7);
    *) netinstall-cli - prioritise interface option over address option;
    *) netinstall-cli - updated configuration option description;
    *) netwatch - decreased "thr-tcp-conn-time" maximum limit to 30 seconds;
    *) ospf - fixed adding ECMP routes;
    *) ospf - fixed BFD on virtual-link with configured VRF;
    *) ospf - fixed OSPFv3 authentication header length calculation;
    *) ospf - fixed OSPFv3 not working with NSSA areas;
    *) ospf - fixed parsing of opaque LSAs used by TE;
    *) ospf - fixed translated NSSA routes not showing in backbone;
    *) ovpn - added "tls-auth" option support for imported .ovpn profiles;
    *) ovpn - improved system stability;
    *) pimsm - fixed BSR update process;
    *) pimsm - fixed UIB update process;
    *) pimsm - improved system stability;
    *) poe-out - driver optimization for AF/AT controlled boards;
    *) poe-out - fixed rare CRS328 poe-out menu and poe-out port config loss after reboot;
    *) poe-out - improved "auto" mode for devices with single PoE-out port;
    *) poe-out - removed "auto" mode support for L009 devices;
    *) port - add support for Huawei MS237h-517;
    *) port - expose NMEA/DIAG ports for Dell DW5821e and DW5821e-eSIM;
    *) qsfp - added 50Gbps rate support for QSFP28 interfaces;
    *) qsfp - fixed incorrect QSFP temperature readings in negative temperature;
    *) qsfp - fixed sub-interface EEPROM monitor data output (introduced in v7.12beta3);
    *) qsfp - improved auto link detection for 100G CWDM4 modules and AOC cables (introduced in v7.12beta3);
    *) qsfp - improved auto link detection for AOC cables;
    *) qsfp - use sub-interface configuration for establishing link (for 40Gbps and 100Gbps links, all sub-interfaces must be enabled);
    *) quickset - fixed "LAN" interface list members if configuration does not contain bridge;
    *) rip - added BFD support;
    *) rip - fixed session not working in VRF;
    *) route - added "single-process" configuration setting, enabled by default on devices with 64MB or less RAM memory;
    *) route - added "suppress-hw-offload" setting for IPv6 routes;
    *) route - fixed gateway after link restart;
    *) route - fixed VRF functionality on devices where "single-process" routing process mode is enabled (introduced in 7.12rc1);
    *) route - removed deprecated "received-from" property;
    *) route - reverse community "delete" and "filter" command behavior;
    *) routerboard - added "reset-button" support for RB800, RB1100 and RB1100AHx2 devices;
    *) routerboard - fixed "reset-button" support for wAP ac and wAP R ac devices;
    *) sfp - added 5Gbps rate for SFP+ interface on 98DX224S, 98DX226S, and 98DX3236 switch chips;
    *) sfp - fixed 25Gbps link with FEC91 (introduced in v7.12beta7);
    *) sfp - fixed failed auto-negotiation for RB5009 devices (introduced in v7.12beta3);
    *) sfp - fixed incorrect link speed when changing link modes (introduced in v7.12beta3);
    *) sfp - fixed link establishment after forced speed changes for RB4011 and CCR2004-16G-2S+ devices (introduced in 7.12rc1);
    *) sfp - fixed link establishment with passive copper cables for RB4011 and CCR2004-16G-2S+ devices (introduced in 7.12rc1);
    *) sfp - fixed missing "rx-power" monitor with certain modules (introduced in v7.10);
    *) sfp - improved interface stability for SFP and QSFP types of interfaces;
    *) snmp - changed "mtxrGaugeValue" type to integer;
    *) ssh - added support for user ed25519 public keys;
    *) ssh - allow to specify key owner on import;
    *) ssh - fixed SSH tunnel performance (introduced in v7.10);
    *) ssh - improved connection stability when pasting large chunks of text into console;
    *) supout - added interface list members section;
    *) supout - added LLDP power to supout.rif;
    *) supout - fixed BFD section;
    *) switch - fixed packet forwarding between Ethernet ports for CRS354 switches (introduced in v7.12beta7);
    *) switch - improved resource allocation for 98DX224S, 98DX226S, and 98DX3236 switch chips;
    *) switch - improved switch chip stability for CCR2004-16g-2s+ devices;
    *) system - fixed process multithreading (introduced in v7.9);
    *) system - improved system stability during booting for L009 devices;
    *) system - improved system stability when MD5 checksums are used;
    *) tftp - fixed empty file name matching;
    *) tile - improved system stability when using queues;
    *) traffic-generator - added "priority" property for "inject" command;
    *) traffic-generator - fixed traffic-generator on CHR and x86;
    *) usb - added support for RTL8153 USB ethernet on ARM, ARM64 and x86;
    *) vrf - limit maximum VRFs to 1024;
    *) vxlan - improved system stability for Tile devices;
    *) webfig - fixed "Days" property configuration change under "IP/Firewall" menu;
    *) webfig - fixed interface addition (introduced in v7.12beta7);
    *) webfig - fixed timezone for interface "Last Link Down/Up Time";
    *) webfig - improved Webfig performance and responsiveness;
    *) webfig - try to re-establish connection after disconnect;
    *) wifiwave2 - added an alternative QoS priority assignment mechanism based on IP DSCP;
    *) wifiwave2 - added comment property for registration-table;
    *) wifiwave2 - added station-bridge interface mode;
    *) wifiwave2 - correctly add interface to specified "datapath.interface-list";
    *) wifiwave2 - do not show default "l2mtu" on compact export;
    *) wifiwave2 - enable changing interface MTU and L2MTU;
    *) wifiwave2 - fixed malformed Interworking packet elements;
    *) wifiwave2 - fixed PTK renewal for interfaces in station mode;
    *) wifiwave2 - fixed re-connection failures for 802.11ax interfaces in station mode;
    *) wifiwave2 - fixed sniffer command not receiving any QoS null function frames when using 802.11ax radios;
    *) wifiwave2 - fixed untagged VLAN 1 entry when using "vlan-id" setting together with vlan-filtering bridge;
    *) wifiwave2 - fixed warning on CAP devices when radar detected;
    *) wifiwave2 - implemented an option to transmit IP multicast packets as unicasts;
    *) wifiwave2 - improved compliance with regulatory requirements;
    *) wifiwave2 - limit L2MTU to 1560 until a fix is available for a bug causing interfaces to fail transmitting larger frames than that;
    *) wifiwave2 - list APs with a higher maximum data rate as more preferable roaming candidates;
    *) wifiwave2 - log more information regarding authentication failures;
    *) wifiwave2 - make 4-way handshake procedure more robust when acting as supplicant (client);
    *) wifiwave2 - use CAPsMAN's "datapath.vlan-id" on CAP for bridge port "pvid";
    *) winbox - added "Addresses" property under "Routing/BFD/Configuration" menu;
    *) winbox - added "BUS" property for USB Power Reset button for LtAP-2HnD and CCR1072;
    *) winbox - added "Comment" under "Routing/BFD/Configuration" menu;
    *) winbox - added "g" flag under "IPv6/Routes" menu;
    *) winbox - added "Host Key Type" setting under "IP/SSH" menu;
    *) winbox - added "Key Owner" setting under "System/User/SSH Keys" and "System/User/SSH Private Keys" menus;
    *) winbox - added "Name Format" property under "WifiWave2/Provisioning" menu;
    *) winbox - added "Remote Min Tx" parameter under "Routing/BFD/Session" menu;
    *) winbox - added "Startup Delay" setting under "Tools/Netwatch" menu;
    *) winbox - added "USB" button under "System/RouterBOARD" menu for LtAP-2HnD;
    *) winbox - added "Use BFD" setting under "Routing/RIP/Interface-Template" menu;
    *) winbox - added Enable/Disable button under "Routing/RIP/Static Neighbors" menu;
    *) winbox - added missing properties under "WifiWave2" menu;
    *) winbox - added MQTT subscription menu;
    *) winbox - allow to change port numbers for SCTP, DCCP, and UDP-LITE protocols under "IP/Firewall" menus;
    *) winbox - allow to set multiple addresses and added IPv6 support under "Interface/VETH" menu;
    *) winbox - allow to specify server as DNS name under "Tools/Email" menu;
    *) winbox - changed "MBR Partition Table" checkbox to unchecked by default under "System/Disks/Format-Drive" menu;
    *) winbox - do not show "F" flag for disabled entries under "IP/Routes" menu;
    *) winbox - fixed "Address" property under "WifiWave2/Remote-CAP" menu;
    *) winbox - fixed "Do" property under "Routing/Filters/Select Rule" menu;
    *) winbox - fixed "Group Key Update" maximum value under "WifiWave2/Security" menu;
    *) winbox - fixed "Range" property under "Routing/Filters/Num Set" menu;
    *) winbox - fixed "Switch" menu for CCR2004-16G-2S+;
    *) winbox - fixed entry numbering and ordering under "WifiWave2/Provisioning" menu;
    *) winbox - fixed minor typos;
    *) winbox - improved support for certain properties under "WifiWave2/Interworking Profiles" menu;
    *) winbox - rename "DSCP" setting to "DSCP (+ECN)" under "Tools/Traffic-Generator/Packet-Templates" menu;
    *) winbox - rename "Name" setting to "List" under "IP,IPv6/Firewall/Address-List" menu;
    *) winbox - rename "Password" button to "Change Now" under "System/Password" menu;
    *) winbox - show "unknown" value for "FS" property under "System/Disks" menu if the data is not available;
    *) wireguard - added "auto" and "none" parameter for "private-key" and "presharde-key" parameters;
    *) wireguard - added "wg-export" and "wg-import" functionality (CLI only);
    *) wireguard - allow to specify client settings under peer menu which will be included in configuration file and QR code;
    *) wireguard - request public or private key to be specified in order to create peer;
    *) wireless - added more "radius-mac-format" options (CLI only);
    *) wireless - fixed malformed Interworking packet elements;
    *) www - fixed allowed address setting for REST API users;
    *) www - fixed fragmented POST data for SCEP service;
    *) x86 - added support for Mellanox ConnectX-6 Dx NIC;
    *) x86 - i40e updated driver to 2.23.17 version;
    *) x86 - igb updated driver to 5.14.16 version;
    *) x86 - igbvf updated driver from in-tree Linux kernel;
    *) x86 - igc updated driver to 5.10.194 version;
    *) x86 - ixgbe updated driver to 5.19.6 version;
    *) x86 - Realtek r8169 updated driver;
    *) x86 - updated latest available pci.ids;
    
    Download the new 'RouterOS 7.12rc5' version here: https://mikrotik.com/download

11. RouterOS 7.12rc4 [Testing]

    7.12rc4 changelog:

    Changes in this release:
    
    *) lte - fixed FG621-EA possible timeouts during firmware upgrade;
    *) netinstall-cli - fixed "-k" key option (introduced in v7.12beta7);
    *) poe-out - removed "auto" mode support for L009 devices;
    *) routerboard - fixed "reset-button" support for wAP ac and wAP R ac devices;
    *) sfp - fixed incorrect link speed when changing link modes (introduced in v7.12beta3);
    *) system - fixed process multithreading (introduced in v7.9);
    *) system - improved system stability during booting for L009 devices;
    
    Other changes since v7.11:
    
    !) ethernet - changed "advertise" and "speed" arguments, and removed "half-duplex" setting under "/interface ethernet" menu;
    !) health - removed "temperature" health entry from boards, where it was the same as "sfp-temperature";
    !) sfp - convert configuration to support new link modes for SFP and QSFP type of interfaces;
    *) api - fixed fetching objects with warning option from REST API;
    *) bfd - fixed sessions when setting VRF;
    *) bfd - improved system stability;
    *) bgp - fixed "atomic-aggregate" always set in output;
    *) bgp - fixed "input.filter-chain" argument selection in VPN configuration;
    *) bgp - fixed local and remote port settings for BGP connections;
    *) bgp - fixed typos and missing spaces in log messages;
    *) bgp - implemented IGP metric sending in BGP messages;
    *) bgp - improved logging;
    *) bgp - increase "hold-time" limit to 65000;
    *) bluetooth - added basic support for connecting to BLE peripheral devices;
    *) bluetooth - use "g" units when decoding MikroTik beacon acceleration on peripheral devices menu;
    *) bridge - fixed bridge host ageing timeout behaviour (introduced in 7.12beta8);
    *) bridge - fixed fast-path forwarding with HW offloaded vlan-filtering (introduced in v7.11);
    *) bridge - fixed untagged VLAN entry disable;
    *) bridge - fixed vlan-filtering stability with HW and non-HW offloaded ports (introduced in v7.10);
    *) bridge - improved system stability;
    *) bridge - improved vlan-filtering bridge stability with CAPsMAN (introduced in v7.11);
    *) calea - improved system stability when trying to add rules without the CALEA package;
    *) certificate - allow to get and maintain Let's Encrypt certificate in IPv6 environment;
    *) certificate - allow to remove issued certificates when CRL is not used;
    *) certificate - fixed "subject-alt-name" duplicating itself when SCEP is used;
    *) certificate - fixed certificate auto renewal via SCEP;
    *) certificate - improved certificate validation logging error messages;
    *) certificate - log CRL HTTP errors under the "error" logging topic;
    *) chr - iavf updated driver to 4.9.1 version;
    *) chr - increased OVA default RAM amount from 160MB to 256MB;
    *) console - added ":jobname" command;
    *) console - added "as-string" and "as-string-value" properties for "get" command;
    *) console - added "terminal/ask" command;
    *) console - added "transform" property for ":convert" command;
    *) console - export required properties with default values;
    *) console - fixed scheduler "on-event" script highlighting when editing;
    *) console - improved ":totime" and ":tonum" commands and added ":tonsec" command for time value manipulation;
    *) console - improved multi-argument property parsing into array;
    *) console - improved randomness for ":rndstr" and ":rndnum" commands;
    *) console - improved stability and responsiveness;
    *) console - improved stability when editing long scripts;
    *) console - improved stability when using "special-login";
    *) console - improved system stability through RoMON session;
    *) console - improved system stability when using autocomplete;
    *) console - improved system stability;
    *) console - restrict permissions to "read,write,reboot,ftp,romon,test" for scripts executed by DHCP, Hotspot, PPP and Traffic-Monitor services;
    *) console - show full date and time in scheduler "next-run" property;
    *) dhcp - fixed DHCP server "authoritative" and "delay-threshold" settings (introduced in v7.12beta3);
    *) dhcp - fixed DHCP server and relay related response delays;
    *) email - rename "address" property to "server";
    *) ethernet - added "supported" and "sfp-supported" values for "monitor" command;
    *) firewall - added "ein-snat" and "ein-dnat" connection NAT state matchers for filter and mangle rules;
    *) flash - show more accurate "total-hdd-space" resource property;
    *) gps - expose GPS port for Quectel EM12-G (vendor-id="0x2c7c", device-id="0x0512");
    *) ike1 - fixed invalid key length on phase1 negotiation;
    *) ike1 - log an error when non-RSA keys are being used;
    *) ike2 - improved rekey collision handling;
    *) interface - added "macvlan" interface support;
    *) iot - fixed an issue where applying a script to GPIO pin caused GPIO to stop working;
    *) iot - fixed behavior where GPIO output state would change on boot;
    *) ipsec - fixed Diffie-Hellman public value encoding size;
    *) ipsec - fixed IPSec policy when using modp3072;
    *) ipsec - fixed minor typo in logs;
    *) ipsec - reduce disk writes when started without active configuration;
    *) ipv6 - fixed IPv6 RA delay time from 5s to 500ms according to RFC;
    *) ipv6 - send RA and RA deprecate messages out three times instead of just once;
    *) l3hw - fixed IPv6 route suppression;
    *) l3hw - improved system stability during IPv6 route offloading;
    *) l3hw - prioritize local IP addresses over the respective /32 and /128 routes;
    *) led - fixed "interface-status" configuration for virtual interfaces;
    *) led - fixed 5G modem mobile network category LED colours;
    *) led - fixed CRS312 Ethernet port LED functionality (introduced in 7.12rc1);
    *) leds - added "dark-mode" functionality for RBwAPG-5HacD2HnD;
    *) leds - added "wireless-status" and "wireless-signal-strength" configuration types for wifiwave2 interfaces;
    *) leds - fixed "wireless-status" and "wireless-signal-strength" for wireless interfaces (introduced in v7.12beta7);
    *) log - improved logging for user actions;
    *) lora - added LNS protocol support;
    *) lte - added at-chat support and increased wait time on modem at-chat for Dell DW5821e, DW5821e-eSIM, DW5829e and DW5829e-eSIM;
    *) lte - added SINR reporting for FG621-EA modem;
    *) lte - changed R11e-LTE ARP behavior to NoArp;
    *) lte - fixed 5G data-class reporting for Chateau 5G;
    *) lte - fixed APN authentification in multi APN setup for R11e-LTE6;
    *) lte - fixed IPv6 prefix for MBIM modems in multi-apn setup when IPv6 APN used as not first APN;
    *) lte - fixed RSSI for FG621-EA modem to show the correct value;
    *) lte - fixed Sierra modem detection for modems with vendor-specific USB descriptors;
    *) lte - fixed Sierra modem initialization;
    *) lte - fixed startup race condition when SIM card is in "up" slot for LtAP mini;
    *) lte - fixed sub-interface auto-removal in multiple APN setups;
    *) lte - show correct data class when connected to 5G SA network;
    *) lte - use more compact logging messages;
    *) modbus - added additional security settings for Modbus TCP;
    *) mpls - added option to match and set MPLS EXP with bridge and mangle rules;
    *) mpls - fixed "propagate-ttl=no" setting;
    *) mpls - improved FastPath next-hop selection hash algorithm;
    *) mqtt - added on-message feature for subscribed topics;
    *) mqtt - added parallel-scripts-limit parameter to set maximum allowed number of scripts executed at the same time;
    *) mqtt - added wildcard topic subscription support;
    *) netinstall - added option to discard branding package;
    *) netinstall - display package filename in GUI Description column if package description is not specified;
    *) netinstall-cli - added empty configuration option "-e";
    *) netinstall-cli - added option to discard branding package;
    *) netinstall-cli - allow ".rsc" script filenames;
    *) netinstall-cli - prioritise interface option over address option;
    *) netinstall-cli - updated configuration option description;
    *) netwatch - decreased "thr-tcp-conn-time" maximum limit to 30 seconds;
    *) ospf - fixed adding ECMP routes;
    *) ospf - fixed BFD on virtual-link with configured VRF;
    *) ospf - fixed OSPFv3 authentication header length calculation;
    *) ospf - fixed OSPFv3 not working with NSSA areas;
    *) ospf - fixed parsing of opaque LSAs used by TE;
    *) ospf - fixed translated NSSA routes not showing in backbone;
    *) ovpn - added "tls-auth" option support for imported .ovpn profiles;
    *) ovpn - improved system stability;
    *) pimsm - fixed BSR update process;
    *) pimsm - fixed UIB update process;
    *) pimsm - improved system stability;
    *) poe-out - driver optimization for AF/AT controlled boards;
    *) poe-out - fixed rare CRS328 poe-out menu and poe-out port config loss after reboot;
    *) poe-out - improved "auto" mode for devices with single PoE-out port;
    *) port - add support for Huawei MS237h-517;
    *) port - expose NMEA/DIAG ports for Dell DW5821e and DW5821e-eSIM;
    *) qsfp - added 50Gbps rate support for QSFP28 interfaces;
    *) qsfp - fixed incorrect QSFP temperature readings in negative temperature;
    *) qsfp - fixed sub-interface EEPROM monitor data output (introduced in v7.12beta3);
    *) qsfp - improved auto link detection for 100G CWDM4 modules and AOC cables (introduced in v7.12beta3);
    *) qsfp - improved auto link detection for AOC cables;
    *) qsfp - use sub-interface configuration for establishing link (for 40Gbps and 100Gbps links, all sub-interfaces must be enabled);
    *) quickset - fixed "LAN" interface list members if configuration does not contain bridge;
    *) rip - added BFD support;
    *) rip - fixed session not working in VRF;
    *) route - added "single-process" configuration setting, enabled by default on devices with 64MB or less RAM memory;
    *) route - added "suppress-hw-offload" setting for IPv6 routes;
    *) route - fixed gateway after link restart;
    *) route - fixed VRF functionality on devices where "single-process" routing process mode is enabled (introduced in 7.12rc1);
    *) route - removed deprecated "received-from" property;
    *) route - reverse community "delete" and "filter" command behavior;
    *) routerboard - added "reset-button" support for RB800, RB1100 and RB1100AHx2 devices;
    *) sfp - added 5Gbps rate for SFP+ interface on 98DX224S, 98DX226S, and 98DX3236 switch chips;
    *) sfp - fixed 25Gbps link with FEC91 (introduced in v7.12beta7);
    *) sfp - fixed failed auto-negotiation for RB5009 devices (introduced in v7.12beta3);
    *) sfp - fixed link establishment after forced speed changes for RB4011 and CCR2004-16G-2S+ devices (introduced in 7.12rc1);
    *) sfp - fixed link establishment with passive copper cables for RB4011 and CCR2004-16G-2S+ devices (introduced in 7.12rc1);
    *) sfp - fixed missing "rx-power" monitor with certain modules (introduced in v7.10);
    *) sfp - improved interface stability for SFP and QSFP types of interfaces;
    *) sfp - improved system stability with certain modules for 98DX224S, 98DX226S, 98DX3236, 98DX8216 and 98DX8208 switch chips;
    *) snmp - changed "mtxrGaugeValue" type to integer;
    *) ssh - added support for user ed25519 public keys;
    *) ssh - allow to specify key owner on import;
    *) ssh - fixed SSH tunnel performance (introduced in v7.10);
    *) ssh - improved connection stability when pasting large chunks of text into console;
    *) supout - added interface list members section;
    *) supout - added LLDP power to supout.rif;
    *) supout - fixed BFD section;
    *) switch - fixed packet forwarding between Ethernet ports for CRS354 switches (introduced in v7.12beta7);
    *) switch - improved resource allocation for 98DX224S, 98DX226S, and 98DX3236 switch chips;
    *) switch - improved switch chip stability for CCR2004-16g-2s+ devices;
    *) system - improved system stability when MD5 checksums are used;
    *) tftp - fixed empty file name matching;
    *) tile - improved system stability when using queues;
    *) traffic-generator - added "priority" property for "inject" command;
    *) traffic-generator - fixed traffic-generator on CHR and x86;
    *) usb - added support for RTL8153 USB ethernet on ARM, ARM64 and x86;
    *) vrf - limit maximum VRFs to 1024;
    *) vxlan - improved system stability for Tile devices;
    *) webfig - fixed "Days" property configuration change under "IP/Firewall" menu;
    *) webfig - fixed interface addition (introduced in v7.12beta7);
    *) webfig - fixed timezone for interface "Last Link Down/Up Time";
    *) webfig - improved Webfig performance and responsiveness;
    *) webfig - try to re-establish connection after disconnect;
    *) wifiwave2 - added an alternative QoS priority assignment mechanism based on IP DSCP;
    *) wifiwave2 - added comment property for registration-table;
    *) wifiwave2 - added station-bridge interface mode;
    *) wifiwave2 - correctly add interface to specified "datapath.interface-list";
    *) wifiwave2 - do not show default "l2mtu" on compact export;
    *) wifiwave2 - enable changing interface MTU and L2MTU;
    *) wifiwave2 - fixed malformed Interworking packet elements;
    *) wifiwave2 - fixed PTK renewal for interfaces in station mode;
    *) wifiwave2 - fixed re-connection failures for 802.11ax interfaces in station mode;
    *) wifiwave2 - fixed sniffer command not receiving any QoS null function frames when using 802.11ax radios;
    *) wifiwave2 - fixed untagged VLAN 1 entry when using "vlan-id" setting together with vlan-filtering bridge;
    *) wifiwave2 - fixed warning on CAP devices when radar detected;
    *) wifiwave2 - implemented an option to transmit IP multicast packets as unicasts;
    *) wifiwave2 - improved compliance with regulatory requirements;
    *) wifiwave2 - limit L2MTU to 1560 until a fix is available for a bug causing interfaces to fail transmitting larger frames than that;
    *) wifiwave2 - list APs with a higher maximum data rate as more preferable roaming candidates;
    *) wifiwave2 - log more information regarding authentication failures;
    *) wifiwave2 - make 4-way handshake procedure more robust when acting as supplicant (client);
    *) wifiwave2 - use CAPsMAN's "datapath.vlan-id" on CAP for bridge port "pvid";
    *) winbox - added "Addresses" property under "Routing/BFD/Configuration" menu;
    *) winbox - added "BUS" property for USB Power Reset button for LtAP-2HnD and CCR1072;
    *) winbox - added "Comment" under "Routing/BFD/Configuration" menu;
    *) winbox - added "g" flag under "IPv6/Routes" menu;
    *) winbox - added "Host Key Type" setting under "IP/SSH" menu;
    *) winbox - added "Key Owner" setting under "System/User/SSH Keys" and "System/User/SSH Private Keys" menus;
    *) winbox - added "Name Format" property under "WifiWave2/Provisioning" menu;
    *) winbox - added "Remote Min Tx" parameter under "Routing/BFD/Session" menu;
    *) winbox - added "Startup Delay" setting under "Tools/Netwatch" menu;
    *) winbox - added "USB" button under "System/RouterBOARD" menu for LtAP-2HnD;
    *) winbox - added "Use BFD" setting under "Routing/RIP/Interface-Template" menu;
    *) winbox - added Enable/Disable button under "Routing/RIP/Static Neighbors" menu;
    *) winbox - added missing properties under "WifiWave2" menu;
    *) winbox - added MQTT subscription menu;
    *) winbox - allow to change port numbers for SCTP, DCCP, and UDP-LITE protocols under "IP/Firewall" menus;
    *) winbox - allow to set multiple addresses and added IPv6 support under "Interface/VETH" menu;
    *) winbox - allow to specify server as DNS name under "Tools/Email" menu;
    *) winbox - changed "MBR Partition Table" checkbox to unchecked by default under "System/Disks/Format-Drive" menu;
    *) winbox - do not show "F" flag for disabled entries under "IP/Routes" menu;
    *) winbox - fixed "Address" property under "WifiWave2/Remote-CAP" menu;
    *) winbox - fixed "Do" property under "Routing/Filters/Select Rule" menu;
    *) winbox - fixed "Group Key Update" maximum value under "WifiWave2/Security" menu;
    *) winbox - fixed "Range" property under "Routing/Filters/Num Set" menu;
    *) winbox - fixed "Switch" menu for CCR2004-16G-2S+;
    *) winbox - fixed entry numbering and ordering under "WifiWave2/Provisioning" menu;
    *) winbox - fixed minor typos;
    *) winbox - improved support for certain properties under "WifiWave2/Interworking Profiles" menu;
    *) winbox - rename "DSCP" setting to "DSCP (+ECN)" under "Tools/Traffic-Generator/Packet-Templates" menu;
    *) winbox - rename "Name" setting to "List" under "IP,IPv6/Firewall/Address-List" menu;
    *) winbox - rename "Password" button to "Change Now" under "System/Password" menu;
    *) winbox - show "unknown" value for "FS" property under "System/Disks" menu if the data is not available;
    *) wireguard - added "auto" and "none" parameter for "private-key" and "presharde-key" parameters;
    *) wireguard - added "wg-export" and "wg-import" functionality (CLI only);
    *) wireguard - allow to specify client settings under peer menu which will be included in configuration file and QR code;
    *) wireguard - request public or private key to be specified in order to create peer;
    *) wireless - added more "radius-mac-format" options (CLI only);
    *) wireless - fixed malformed Interworking packet elements;
    *) www - fixed allowed address setting for REST API users;
    *) www - fixed fragmented POST data for SCEP service;
    *) x86 - added support for Mellanox ConnectX-6 Dx NIC;
    *) x86 - i40e updated driver to 2.23.17 version;
    *) x86 - igb updated driver to 5.14.16 version;
    *) x86 - igbvf updated driver from in-tree Linux kernel;
    *) x86 - igc updated driver to 5.10.194 version;
    *) x86 - ixgbe updated driver to 5.19.6 version;
    *) x86 - Realtek r8169 updated driver;
    *) x86 - updated latest available pci.ids;
    
    Download the new 'RouterOS 7.12rc4' version here: https://mikrotik.com/download

12. RouterOS 7.12rc2 [Testing]

    7.12rc2 changelog:

    *) bridge - fixed bridge host ageing timeout behaviour (introduced in 7.12beta8);
    *) led - fixed CRS312 Ethernet port LED functionality (introduced in 7.12rc1);
    *) led - fixed 5G modem mobile network category LED colours;
    *) ospf - fixed OSPFv3 authentication header length calculation;
    *) pimsm - fixed BSR update process;
    *) pimsm - fixed UIB update process;
    *) qsfp - fixed incorrect QSFP temperature readings in negative temperature;
    *) route - fixed VRF functionality on devices where "single-process" routing process mode is enabled (introduced in 7.12rc1);
    *) sfp - fixed link establishment after forced speed changes for RB4011 and CCR2004-16G-2S+ devices (introduced in 7.12rc1);
    *) sfp - fixed link establishment with passive copper cables for RB4011 and CCR2004-16G-2S+ devices (introduced in 7.12rc1);
    
    Other changes since v7.11:
    
    !) ethernet - changed "advertise" and "speed" arguments, and removed "half-duplex" setting under "/interface ethernet" menu;
    !) health - removed "temperature" health entry from boards, where it was the same as "sfp-temperature";
    !) sfp - convert configuration to support new link modes for SFP and QSFP type of interfaces;
    *) api - fixed fetching objects with warning option from REST API;
    *) bfd - fixed sessions when setting VRF;
    *) bfd - improved system stability;
    *) bgp - fixed "atomic-aggregate" always set in output;
    *) bgp - fixed "input.filter-chain" argument selection in VPN configuration;
    *) bgp - fixed local and remote port settings for BGP connections;
    *) bgp - fixed typos and missing spaces in log messages;
    *) bgp - implemented IGP metric sending in BGP messages;
    *) bgp - improved logging;
    *) bgp - increase "hold-time" limit to 65000;
    *) bluetooth - added basic support for connecting to BLE peripheral devices;
    *) bluetooth - use "g" units when decoding MikroTik beacon acceleration on peripheral devices menu;
    *) bridge - fixed fast-path forwarding with HW offloaded vlan-filtering (introduced in v7.11);
    *) bridge - fixed untagged VLAN entry disable;
    *) bridge - fixed vlan-filtering stability with HW and non-HW offloaded ports (introduced in v7.10);
    *) bridge - improved system stability;
    *) bridge - improved vlan-filtering bridge stability with CAPsMAN (introduced in v7.11);
    *) calea - improved system stability when trying to add rules without the CALEA package;
    *) certificate - allow to get and maintain Let's Encrypt certificate in IPv6 environment;
    *) certificate - allow to remove issued certificates when CRL is not used;
    *) certificate - fixed "subject-alt-name" duplicating itself when SCEP is used;
    *) certificate - fixed certificate auto renewal via SCEP;
    *) certificate - improved certificate validation logging error messages;
    *) certificate - log CRL HTTP errors under the "error" logging topic;
    *) chr - iavf updated driver to 4.9.1 version;
    *) chr - increased OVA default RAM amount from 160MB to 256MB;
    *) console - added ":jobname" command;
    *) console - added "as-string" and "as-string-value" properties for "get" command;
    *) console - added "terminal/ask" command;
    *) console - added "transform" property for ":convert" command;
    *) console - export required properties with default values;
    *) console - fixed scheduler "on-event" script highlighting when editing;
    *) console - improved ":totime" and ":tonum" commands and added ":tonsec" command for time value manipulation;
    *) console - improved multi-argument property parsing into array;
    *) console - improved randomness for ":rndstr" and ":rndnum" commands;
    *) console - improved stability and responsiveness;
    *) console - improved stability when editing long scripts;
    *) console - improved stability when using "special-login";
    *) console - improved system stability through RoMON session;
    *) console - improved system stability when using autocomplete;
    *) console - improved system stability;
    *) console - restrict permissions to "read,write,reboot,ftp,romon,test" for scripts executed by DHCP, Hotspot, PPP and Traffic-Monitor services;
    *) console - show full date and time in scheduler "next-run" property;
    *) dhcp - fixed DHCP server "authoritative" and "delay-threshold" settings (introduced in v7.12beta3);
    *) dhcp - fixed DHCP server and relay related response delays;
    *) email - rename "address" property to "server";
    *) ethernet - added "supported" and "sfp-supported" values for "monitor" command;
    *) firewall - added "ein-snat" and "ein-dnat" connection NAT state matchers for filter and mangle rules;
    *) flash - show more accurate "total-hdd-space" resource property;
    *) gps - expose GPS port for Quectel EM12-G (vendor-id="0x2c7c", device-id="0x0512");
    *) ike1 - fixed invalid key length on phase1 negotiation;
    *) ike1 - log an error when non-RSA keys are being used;
    *) ike2 - improved rekey collision handling;
    *) interface - added "macvlan" interface support;
    *) iot - fixed an issue where applying a script to GPIO pin caused GPIO to stop working;
    *) iot - fixed behavior where GPIO output state would change on boot;
    *) ipsec - fixed Diffie-Hellman public value encoding size;
    *) ipsec - fixed IPSec policy when using modp3072;
    *) ipsec - fixed minor typo in logs;
    *) ipsec - reduce disk writes when started without active configuration;
    *) ipv6 - fixed IPv6 RA delay time from 5s to 500ms according to RFC;
    *) ipv6 - send RA and RA deprecate messages out three times instead of just once;
    *) l3hw - fixed IPv6 route suppression;
    *) l3hw - improved system stability during IPv6 route offloading;
    *) l3hw - prioritize local IP addresses over the respective /32 and /128 routes;
    *) led - fixed "interface-status" configuration for virtual interfaces;
    *) leds - added "dark-mode" functionality for RBwAPG-5HacD2HnD;
    *) leds - added "wireless-status" and "wireless-signal-strength" configuration types for wifiwave2 interfaces;
    *) leds - fixed "wireless-status" and "wireless-signal-strength" for wireless interfaces (introduced in v7.12beta7);
    *) log - improved logging for user actions;
    *) lora - added LNS protocol support;
    *) lte - added SINR reporting for FG621-EA modem;
    *) lte - added at-chat support and increased wait time on modem at-chat for Dell DW5821e, DW5821e-eSIM, DW5829e and DW5829e-eSIM;
    *) lte - changed R11e-LTE ARP behavior to NoArp;
    *) lte - fixed 5G data-class reporting for Chateau 5G;
    *) lte - fixed APN authentification in multi APN setup for R11e-LTE6;
    *) lte - fixed IPv6 prefix for MBIM modems in multi-apn setup when IPv6 APN used as not first APN;
    *) lte - fixed RSSI for FG621-EA modem to show the correct value;
    *) lte - fixed Sierra modem detection for modems with vendor-specific USB descriptors;
    *) lte - fixed Sierra modem initialization;
    *) lte - fixed startup race condition when SIM card is in "up" slot for LtAP mini;
    *) lte - fixed sub-interface auto-removal in multiple APN setups;
    *) lte - show correct data class when connected to 5G SA network;
    *) lte - use more compact logging messages;
    *) modbus - added additional security settings for Modbus TCP;
    *) mpls - added option to match and set MPLS EXP with bridge and mangle rules;
    *) mpls - fixed "propagate-ttl=no" setting;
    *) mpls - improved FastPath next-hop selection hash algorithm;
    *) mqtt - added on-message feature for subscribed topics;
    *) mqtt - added parallel-scripts-limit parameter to set maximum allowed number of scripts executed at the same time;
    *) mqtt - added wildcard topic subscription support;
    *) netinstall - added option to discard branding package;
    *) netinstall - display package filename in GUI Description column if package description is not specified;
    *) netinstall-cli - added empty configuration option "-e";
    *) netinstall-cli - added option to discard branding package;
    *) netinstall-cli - allow ".rsc" script filenames;
    *) netinstall-cli - prioritise interface option over address option;
    *) netinstall-cli - updated configuration option description;
    *) netwatch - decreased "thr-tcp-conn-time" maximum limit to 30 seconds;
    *) ospf - fixed BFD on virtual-link with configured VRF;
    *) ospf - fixed OSPFv3 not working with NSSA areas;
    *) ospf - fixed adding ECMP routes;
    *) ospf - fixed parsing of opaque LSAs used by TE;
    *) ospf - fixed translated NSSA routes not showing in backbone;
    *) ovpn - added "tls-auth" option support for imported .ovpn profiles;
    *) ovpn - improved system stability;
    *) pimsm - improved system stability;
    *) poe-out - driver optimization for AF/AT controlled boards;
    *) poe-out - fixed rare CRS328 poe-out menu and poe-out port config loss after reboot;
    *) poe-out - improved "auto" mode for devices with single PoE-out port;
    *) port - add support for Huawei MS237h-517;
    *) port - expose NMEA/DIAG ports for Dell DW5821e and DW5821e-eSIM;
    *) qsfp - added 50Gbps rate support for QSFP28 interfaces;
    *) qsfp - fixed sub-interface EEPROM monitor data output (introduced in v7.12beta3);
    *) qsfp - improved auto link detection for 100G CWDM4 modules and AOC cables (introduced in v7.12beta3);
    *) qsfp - improved auto link detection for AOC cables;
    *) qsfp - use sub-interface configuration for establishing link (for 40Gbps and 100Gbps links, all sub-interfaces must be enabled);
    *) quickset - fixed "LAN" interface list members if configuration does not contain bridge;
    *) rip - added BFD support;
    *) rip - fixed session not working in VRF;
    *) route - added "single-process" configuration setting, enabled by default on devices with 64MB or less RAM memory;
    *) route - added "suppress-hw-offload" setting for IPv6 routes;
    *) route - fixed gateway after link restart;
    *) route - removed deprecated "received-from" property;
    *) route - reverse community "delete" and "filter" command behavior;
    *) routerboard - added "reset-button" support for RB800, RB1100 and RB1100AHx2 devices;
    *) sfp - added 5Gbps rate for SFP+ interface on 98DX224S, 98DX226S, and 98DX3236 switch chips;
    *) sfp - fixed 25Gbps link with FEC91 (introduced in v7.12beta7);
    *) sfp - fixed failed auto-negotiation for RB5009 devices (introduced in v7.12beta3);
    *) sfp - fixed missing "rx-power" monitor with certain modules (introduced in v7.10);
    *) sfp - improved interface stability for SFP and QSFP types of interfaces;
    *) sfp - improved system stability with certain modules for 98DX224S, 98DX226S, 98DX3236, 98DX8216 and 98DX8208 switch chips;
    *) snmp - changed "mtxrGaugeValue" type to integer;
    *) ssh - added support for user ed25519 public keys;
    *) ssh - allow to specify key owner on import;
    *) ssh - fixed SSH tunnel performance (introduced in v7.10);
    *) ssh - improved connection stability when pasting large chunks of text into console;
    *) supout - added LLDP power to supout.rif;
    *) supout - added interface list members section;
    *) supout - fixed BFD section;
    *) switch - fixed packet forwarding between Ethernet ports for CRS354 switches (introduced in v7.12beta7);
    *) switch - improved resource allocation for 98DX224S, 98DX226S, and 98DX3236 switch chips;
    *) switch - improved switch chip stability for CCR2004-16g-2s+ devices;
    *) system - improved system stability when MD5 checksums are used;
    *) tftp - fixed empty file name matching;
    *) tile - improved system stability when using queues;
    *) traffic-generator - added "priority" property for "inject" command;
    *) traffic-generator - fixed traffic-generator on CHR and x86;
    *) usb - added support for RTL8153 USB ethernet on ARM, ARM64 and x86;
    *) vrf - limit maximum VRFs to 1024;
    *) vxlan - improved system stability for Tile devices;
    *) webfig - fixed "Days" property configuration change under "IP/Firewall" menu;
    *) webfig - fixed interface addition (introduced in v7.12beta7);
    *) webfig - fixed timezone for interface "Last Link Down/Up Time";
    *) webfig - improved Webfig performance and responsiveness;
    *) webfig - try to re-establish connection after disconnect;
    *) wifiwave2 - added an alternative QoS priority assignment mechanism based on IP DSCP;
    *) wifiwave2 - added comment property for registration-table;
    *) wifiwave2 - added station-bridge interface mode;
    *) wifiwave2 - correctly add interface to specified "datapath.interface-list";
    *) wifiwave2 - do not show default "l2mtu" on compact export;
    *) wifiwave2 - enable changing interface MTU and L2MTU;
    *) wifiwave2 - fixed PTK renewal for interfaces in station mode;
    *) wifiwave2 - fixed malformed Interworking packet elements;
    *) wifiwave2 - fixed re-connection failures for 802.11ax interfaces in station mode;
    *) wifiwave2 - fixed sniffer command not receiving any QoS null function frames when using 802.11ax radios;
    *) wifiwave2 - fixed untagged VLAN 1 entry when using "vlan-id" setting together with vlan-filtering bridge;
    *) wifiwave2 - fixed warning on CAP devices when radar detected;
    *) wifiwave2 - implemented an option to transmit IP multicast packets as unicasts;
    *) wifiwave2 - improved compliance with regulatory requirements;
    *) wifiwave2 - limit L2MTU to 1560 until a fix is available for a bug causing interfaces to fail transmitting larger frames than that;
    *) wifiwave2 - list APs with a higher maximum data rate as more preferable roaming candidates;
    *) wifiwave2 - log more information regarding authentication failures;
    *) wifiwave2 - make 4-way handshake procedure more robust when acting as supplicant (client);
    *) wifiwave2 - use CAPsMAN's "datapath.vlan-id" on CAP for bridge port "pvid";
    *) winbox - added "Addresses" property under "Routing/BFD/Configuration" menu;
    *) winbox - added "BUS" property for USB Power Reset button for LtAP-2HnD and CCR1072;
    *) winbox - added "Comment" under "Routing/BFD/Configuration" menu;
    *) winbox - added "Host Key Type" setting under "IP/SSH" menu;
    *) winbox - added "Key Owner" setting under "System/User/SSH Keys" and "System/User/SSH Private Keys" menus;
    *) winbox - added "Name Format" property under "WifiWave2/Provisioning" menu;
    *) winbox - added "Remote Min Tx" parameter under "Routing/BFD/Session" menu;
    *) winbox - added "Startup Delay" setting under "Tools/Netwatch" menu;
    *) winbox - added "USB" button under "System/RouterBOARD" menu for LtAP-2HnD;
    *) winbox - added "Use BFD" setting under "Routing/RIP/Interface-Template" menu;
    *) winbox - added "g" flag under "IPv6/Routes" menu;
    *) winbox - added Enable/Disable button under "Routing/RIP/Static Neighbors" menu;
    *) winbox - added MQTT subscription menu;
    *) winbox - added missing properties under "WifiWave2" menu;
    *) winbox - allow to change port numbers for SCTP, DCCP, and UDP-LITE protocols under "IP/Firewall" menus;
    *) winbox - allow to set multiple addresses and added IPv6 support under "Interface/VETH" menu;
    *) winbox - allow to specify server as DNS name under "Tools/Email" menu;
    *) winbox - changed "MBR Partition Table" checkbox to unchecked by default under "System/Disks/Format-Drive" menu;
    *) winbox - do not show "F" flag for disabled entries under "IP/Routes" menu;
    *) winbox - fixed "Address" property under "WifiWave2/Remote-CAP" menu;
    *) winbox - fixed "Do" property under "Routing/Filters/Select Rule" menu;
    *) winbox - fixed "Group Key Update" maximum value under "WifiWave2/Security" menu;
    *) winbox - fixed "Range" property under "Routing/Filters/Num Set" menu;
    *) winbox - fixed "Switch" menu for CCR2004-16G-2S+;
    *) winbox - fixed entry numbering and ordering under "WifiWave2/Provisioning" menu;
    *) winbox - fixed minor typos;
    *) winbox - improved support for certain properties under "WifiWave2/Interworking Profiles" menu;
    *) winbox - rename "DSCP" setting to "DSCP (+ECN)" under "Tools/Traffic-Generator/Packet-Templates" menu;
    *) winbox - rename "Name" setting to "List" under "IP,IPv6/Firewall/Address-List" menu;
    *) winbox - rename "Password" button to "Change Now" under "System/Password" menu;
    *) winbox - show "unknown" value for "FS" property under "System/Disks" menu if the data is not available;
    *) wireguard - added "auto" and "none" parameter for "private-key" and "presharde-key" parameters;
    *) wireguard - added "wg-export" and "wg-import" functionality (CLI only);
    *) wireguard - allow to specify client settings under peer menu which will be included in configuration file and QR code;
    *) wireguard - request public or private key to be specified in order to create peer;
    *) wireless - added more "radius-mac-format" options (CLI only);
    *) wireless - fixed malformed Interworking packet elements;
    *) www - fixed allowed address setting for REST API users;
    *) www - fixed fragmented POST data for SCEP service;
    *) x86 - Realtek r8169 updated driver;
    *) x86 - added support for Mellanox ConnectX-6 Dx NIC;
    *) x86 - i40e updated driver to 2.23.17 version;
    *) x86 - igb updated driver to 5.14.16 version;
    *) x86 - igbvf updated driver from in-tree Linux kernel;
    *) x86 - igc updated driver to 5.10.194 version;
    *) x86 - ixgbe updated driver to 5.19.6 version;
    *) x86 - updated latest available pci.ids;
    
    Download the new 'RouterOS 7.12rc2' version here: https://mikrotik.com/download

13. RouterOS 7.12rc1 [Testing]

    7.12rc1 changelog:

    Changes in this release:
    
    !) ethernet - changed "advertise" and "speed" arguments, and removed "half-duplex" setting under "/interface ethernet" menu;
    !) sfp - convert configuration to support new link modes for SFP and QSFP type of interfaces;
    *) bfd - fixed sessions when setting VRF;
    *) bfd - improved system stability;
    *) console - improved system stability;
    *) email - rename "address" property to "server";
    *) flash - show more accurate "total-hdd-space" resource property;
    *) gps - expose GPS port for Quectel EM12-G (vendor-id="0x2c7c", device-id="0x0512");
    *) ike1 - fixed invalid key length on phase1 negotiation;
    *) interface - added "macvlan" interface support;
    *) l3hw - prioritize local IP addresses over the respective /32 and /128 routes;
    *) leds - fixed "wireless-status" and "wireless-signal-strength" for wireless interfaces (introduced in v7.12beta7);
    *) netinstall-cli - updated configuration option description;
    *) pimsm - improved system stability;
    *) poe-out - improved "auto" mode for devices with single PoE-out port;
    *) qsfp - improved auto link detection for AOC cables;
    *) route - added "single-process" configuration setting, enabled by default on devices with 64MB or less RAM memory;
    *) route - added "suppress-hw-offload" setting for IPv6 routes;
    *) sfp - added 5Gbps rate for SFP+ interface on 98DX224S, 98DX226S, and 98DX3236 switch chips;
    *) sfp - fixed failed auto-negotiation for RB5009 devices (introduced in v7.12beta3);
    *) sfp - improved system stability with certain modules for 98DX224S, 98DX226S, 98DX3236, 98DX8216 and 98DX8208 switch chips;
    *) tftp - fixed empty file name matching;
    *) webfig - fixed interface addition (introduced in v7.12beta7);
    *) wifiwave2 - added an alternative QoS priority assignment mechanism based on IP DSCP;
    *) wifiwave2 - added station-bridge interface mode;
    *) wifiwave2 - implemented an option to transmit IP multicast packets as unicasts;
    *) wifiwave2 - use CAPsMAN's "datapath.vlan-id" on CAP for bridge port "pvid";
    *) winbox - added "Addresses" property under "Routing/BFD/Configuration" menu;
    *) winbox - added "BUS" property for USB Power Reset button for LtAP-2HnD and CCR1072;
    *) winbox - added "USB" button under "System/RouterBOARD" menu for LtAP-2HnD;
    *) winbox - added Enable/Disable button under "Routing/RIP/Static Neighbors" menu;
    *) winbox - added missing properties under "WifiWave2" menu;
    *) winbox - do not show "F" flag for disabled entries under "IP/Routes" menu;
    *) winbox - fixed "Do" property under "Routing/Filters/Select Rule" menu;
    *) winbox - fixed "Range" property under "Routing/Filters/Num Set" menu;
    *) winbox - fixed "Switch" menu for CCR2004-16G-2S+;
    *) winbox - improved support for certain properties under "WifiWave2/Interworking Profiles" menu;
    *) winbox - show "unknown" value for "FS" property under "System/Disks" menu if the data is not available;
    *) wireguard - added "auto" and "none" parameter for "private-key" and "presharde-key" parameters;
    *) wireguard - allow to specify client settings under peer menu which will be included in configuration file and QR code;
    
    Other changes since v7.11:
    
    !) health - removed "temperature" health entry from boards, where it was the same as "sfp-temperature";
    *) api - fixed fetching objects with warning option from REST API;
    *) bgp - fixed "atomic-aggregate" always set in output;
    *) bgp - fixed "input.filter-chain" argument selection in VPN configuration;
    *) bgp - fixed local and remote port settings for BGP connections;
    *) bgp - fixed typos and missing spaces in log messages;
    *) bgp - implemented IGP metric sending in BGP messages;
    *) bgp - improved logging;
    *) bgp - increase "hold-time" limit to 65000;
    *) bluetooth - added basic support for connecting to BLE peripheral devices;
    *) bluetooth - use "g" units when decoding MikroTik beacon acceleration on peripheral devices menu;
    *) bridge - fixed fast-path forwarding with HW offloaded vlan-filtering (introduced in v7.11);
    *) bridge - fixed untagged VLAN entry disable;
    *) bridge - fixed vlan-filtering stability with HW and non-HW offloaded ports (introduced in v7.10);
    *) bridge - improved system stability;
    *) bridge - improved vlan-filtering bridge stability with CAPsMAN (introduced in v7.11);
    *) calea - improved system stability when trying to add rules without the CALEA package;
    *) certificate - allow to get and maintain Let's Encrypt certificate in IPv6 environment;
    *) certificate - allow to remove issued certificates when CRL is not used;
    *) certificate - fixed "subject-alt-name" duplicating itself when SCEP is used;
    *) certificate - fixed certificate auto renewal via SCEP;
    *) certificate - improved certificate validation logging error messages;
    *) certificate - log CRL HTTP errors under the "error" logging topic;
    *) chr - iavf updated driver to 4.9.1 version;
    *) chr - increased OVA default RAM amount from 160MB to 256MB;
    *) console - added ":jobname" command;
    *) console - added "as-string" and "as-string-value" properties for "get" command;
    *) console - added "terminal/ask" command;
    *) console - added "transform" property for ":convert" command;
    *) console - export required properties with default values;
    *) console - fixed scheduler "on-event" script highlighting when editing;
    *) console - improved ":totime" and ":tonum" commands and added ":tonsec" command for time value manipulation;
    *) console - improved multi-argument property parsing into array;
    *) console - improved randomness for ":rndstr" and ":rndnum" commands;
    *) console - improved stability and responsiveness;
    *) console - improved stability when editing long scripts;
    *) console - improved stability when using "special-login";
    *) console - improved system stability through RoMON session;
    *) console - improved system stability when using autocomplete;
    *) console - restrict permissions to "read,write,reboot,ftp,romon,test" for scripts executed by DHCP, Hotspot, PPP and Traffic-Monitor services;
    *) console - show full date and time in scheduler "next-run" property;
    *) dhcp - fixed DHCP server "authoritative" and "delay-threshold" settings (introduced in v7.12beta3);
    *) dhcp - fixed DHCP server and relay related response delays;
    *) ethernet - added "supported" and "sfp-supported" values for "monitor" command;
    *) firewall - added "ein-snat" and "ein-dnat" connection NAT state matchers for filter and mangle rules;
    *) ike1 - log an error when non-RSA keys are being used;
    *) ike2 - improved rekey collision handling;
    *) iot - fixed an issue where applying a script to GPIO pin caused GPIO to stop working;
    *) iot - fixed behavior where GPIO output state would change on boot;
    *) ipsec - fixed Diffie-Hellman public value encoding size;
    *) ipsec - fixed IPSec policy when using modp3072;
    *) ipsec - fixed minor typo in logs;
    *) ipsec - reduce disk writes when started without active configuration;
    *) ipv6 - fixed IPv6 RA delay time from 5s to 500ms according to RFC;
    *) ipv6 - send RA and RA deprecate messages out three times instead of just once;
    *) l3hw - fixed IPv6 route suppression;
    *) l3hw - improved system stability during IPv6 route offloading;
    *) led - fixed "interface-status" configuration for virtual interfaces;
    *) leds - added "dark-mode" functionality for RBwAPG-5HacD2HnD;
    *) leds - added "wireless-status" and "wireless-signal-strength" configuration types for wifiwave2 interfaces;
    *) log - improved logging for user actions;
    *) lora - added LNS protocol support;
    *) lte - added at-chat support and increased wait time on modem at-chat for Dell DW5821e, DW5821e-eSIM, DW5829e and DW5829e-eSIM;
    *) lte - added SINR reporting for FG621-EA modem;
    *) lte - changed R11e-LTE ARP behavior to NoArp;
    *) lte - fixed 5G data-class reporting for Chateau 5G;
    *) lte - fixed APN authentification in multi APN setup for R11e-LTE6;
    *) lte - fixed IPv6 prefix for MBIM modems in multi-apn setup when IPv6 APN used as not first APN;
    *) lte - fixed RSSI for FG621-EA modem to show the correct value;
    *) lte - fixed Sierra modem detection for modems with vendor-specific USB descriptors;
    *) lte - fixed Sierra modem initialization;
    *) lte - fixed startup race condition when SIM card is in "up" slot for LtAP mini;
    *) lte - fixed sub-interface auto-removal in multiple APN setups;
    *) lte - show correct data class when connected to 5G SA network;
    *) lte - use more compact logging messages;
    *) modbus - added additional security settings for Modbus TCP;
    *) mpls - added option to match and set MPLS EXP with bridge and mangle rules;
    *) mpls - fixed "propagate-ttl=no" setting;
    *) mpls - improved FastPath next-hop selection hash algorithm;
    *) mqtt - added on-message feature for subscribed topics;
    *) mqtt - added parallel-scripts-limit parameter to set maximum allowed number of scripts executed at the same time;
    *) mqtt - added wildcard topic subscription support;
    *) netinstall - added option to discard branding package;
    *) netinstall - display package filename in GUI Description column if package description is not specified;
    *) netinstall-cli - added empty configuration option "-e";
    *) netinstall-cli - added option to discard branding package;
    *) netinstall-cli - allow ".rsc" script filenames;
    *) netinstall-cli - prioritise interface option over address option;
    *) netwatch - decreased "thr-tcp-conn-time" maximum limit to 30 seconds;
    *) ospf - fixed adding ECMP routes;
    *) ospf - fixed BFD on virtual-link with configured VRF;
    *) ospf - fixed OSPFv3 not working with NSSA areas;
    *) ospf - fixed parsing of opaque LSAs used by TE;
    *) ospf - fixed translated NSSA routes not showing in backbone;
    *) ovpn - added "tls-auth" option support for imported .ovpn profiles;
    *) ovpn - improved system stability;
    *) poe-out - driver optimization for AF/AT controlled boards;
    *) poe-out - fixed rare CRS328 poe-out menu and poe-out port config loss after reboot;
    *) port - add support for Huawei MS237h-517;
    *) port - expose NMEA/DIAG ports for Dell DW5821e and DW5821e-eSIM;
    *) qsfp - added 50Gbps rate support for QSFP28 interfaces;
    *) qsfp - fixed sub-interface EEPROM monitor data output (introduced in v7.12beta3);
    *) qsfp - improved auto link detection for 100G CWDM4 modules and AOC cables (introduced in v7.12beta3);
    *) qsfp - use sub-interface configuration for establishing link (for 40Gbps and 100Gbps links, all sub-interfaces must be enabled);
    *) quickset - fixed "LAN" interface list members if configuration does not contain bridge;
    *) rip - added BFD support;
    *) rip - fixed session not working in VRF;
    *) route - fixed gateway after link restart;
    *) route - removed deprecated "received-from" property;
    *) route - reverse community "delete" and "filter" command behavior;
    *) routerboard - added "reset-button" support for RB800, RB1100 and RB1100AHx2 devices;
    *) sfp - fixed 25Gbps link with FEC91 (introduced in v7.12beta7);
    *) sfp - fixed missing "rx-power" monitor with certain modules (introduced in v7.10);
    *) sfp - improved interface stability for SFP and QSFP types of interfaces;
    *) snmp - changed "mtxrGaugeValue" type to integer;
    *) ssh - added support for user ed25519 public keys;
    *) ssh - allow to specify key owner on import;
    *) ssh - fixed SSH tunnel performance (introduced in v7.10);
    *) ssh - improved connection stability when pasting large chunks of text into console;
    *) supout - added interface list members section;
    *) supout - added LLDP power to supout.rif;
    *) supout - fixed BFD section;
    *) switch - fixed packet forwarding between Ethernet ports for CRS354 switches (introduced in v7.12beta7);
    *) switch - improved resource allocation for 98DX224S, 98DX226S, and 98DX3236 switch chips;
    *) switch - improved switch chip stability for CCR2004-16g-2s+ devices;
    *) system - improved system stability when MD5 checksums are used;
    *) tile - improved system stability when using queues;
    *) traffic-generator - added "priority" property for "inject" command;
    *) traffic-generator - fixed traffic-generator on CHR and x86;
    *) usb - added support for RTL8153 USB ethernet on ARM, ARM64 and x86;
    *) vrf - limit maximum VRFs to 1024;
    *) vxlan - improved system stability for Tile devices;
    *) webfig - fixed "Days" property configuration change under "IP/Firewall" menu;
    *) webfig - fixed timezone for interface "Last Link Down/Up Time";
    *) webfig - improved Webfig performance and responsiveness;
    *) webfig - try to re-establish connection after disconnect;
    *) wifiwave2 - added comment property for registration-table;
    *) wifiwave2 - correctly add interface to specified "datapath.interface-list";
    *) wifiwave2 - do not show default "l2mtu" on compact export;
    *) wifiwave2 - enable changing interface MTU and L2MTU;
    *) wifiwave2 - fixed malformed Interworking packet elements;
    *) wifiwave2 - fixed PTK renewal for interfaces in station mode;
    *) wifiwave2 - fixed re-connection failures for 802.11ax interfaces in station mode;
    *) wifiwave2 - fixed sniffer command not receiving any QoS null function frames when using 802.11ax radios;
    *) wifiwave2 - fixed untagged VLAN 1 entry when using "vlan-id" setting together with vlan-filtering bridge;
    *) wifiwave2 - fixed warning on CAP devices when radar detected;
    *) wifiwave2 - improved compliance with regulatory requirements;
    *) wifiwave2 - limit L2MTU to 1560 until a fix is available for a bug causing interfaces to fail transmitting larger frames than that;
    *) wifiwave2 - list APs with a higher maximum data rate as more preferable roaming candidates;
    *) wifiwave2 - log more information regarding authentication failures;
    *) wifiwave2 - make 4-way handshake procedure more robust when acting as supplicant (client);
    *) winbox - added "Comment" under "Routing/BFD/Configuration" menu;
    *) winbox - added "g" flag under "IPv6/Routes" menu;
    *) winbox - added "Host Key Type" setting under "IP/SSH" menu;
    *) winbox - added "Key Owner" setting under "System/User/SSH Keys" and "System/User/SSH Private Keys" menus;
    *) winbox - added "Name Format" property under "WifiWave2/Provisioning" menu;
    *) winbox - added "Remote Min Tx" parameter under "Routing/BFD/Session" menu;
    *) winbox - added "Startup Delay" setting under "Tools/Netwatch" menu;
    *) winbox - added "Use BFD" setting under "Routing/RIP/Interface-Template" menu;
    *) winbox - added MQTT subscription menu;
    *) winbox - allow to change port numbers for SCTP, DCCP, and UDP-LITE protocols under "IP/Firewall" menus;
    *) winbox - allow to set multiple addresses and added IPv6 support under "Interface/VETH" menu;
    *) winbox - allow to specify server as DNS name under "Tools/Email" menu;
    *) winbox - changed "MBR Partition Table" checkbox to unchecked by default under "System/Disks/Format-Drive" menu;
    *) winbox - fixed "Address" property under "WifiWave2/Remote-CAP" menu;
    *) winbox - fixed "Group Key Update" maximum value under "WifiWave2/Security" menu;
    *) winbox - fixed entry numbering and ordering under "WifiWave2/Provisioning" menu;
    *) winbox - fixed minor typos;
    *) winbox - rename "DSCP" setting to "DSCP (+ECN)" under "Tools/Traffic-Generator/Packet-Templates" menu;
    *) winbox - rename "Name" setting to "List" under "IP,IPv6/Firewall/Address-List" menu;
    *) winbox - rename "Password" button to "Change Now" under "System/Password" menu;
    *) wireguard - added "wg-export" and "wg-import" functionality (CLI only);
    *) wireguard - request public or private key to be specified in order to create peer;
    *) wireless - added more "radius-mac-format" options (CLI only);
    *) wireless - fixed malformed Interworking packet elements;
    *) www - fixed allowed address setting for REST API users;
    *) www - fixed fragmented POST data for SCEP service;
    *) x86 - added support for Mellanox ConnectX-6 Dx NIC;
    *) x86 - i40e updated driver to 2.23.17 version;
    *) x86 - igb updated driver to 5.14.16 version;
    *) x86 - igbvf updated driver from in-tree Linux kernel;
    *) x86 - igc updated driver to 5.10.194 version;
    *) x86 - ixgbe updated driver to 5.19.6 version;
    *) x86 - Realtek r8169 updated driver;
    *) x86 - updated latest available pci.ids;
    
    Download the new 'RouterOS 7.12rc1' version here: https://mikrotik.com/download

14. RouterOS 7.12beta9 [Testing]

    7.12beta9 changelog:

    Changes in this release:
    
    !) ethernet - changed "advertise" and "speed" arguments, and removed "half-duplex" setting under "/interface ethernet" menu;
    !) health - removed "temperature" health entry from boards, where it was the same as "sfp-temperature";
    !) sfp - convert configuration to support new link modes for SFP and QSFP type of interfaces;
    *) bfd - improved system stability;
    *) bgp - fixed "input.filter-chain" argument selection in VPN configuration;
    *) bgp - improved logging;
    *) bluetooth - added basic support for connecting to BLE peripheral devices;
    *) console - export required properties with default values;
    *) console - improved system stability;
    *) console - restrict permissions to "read,write,reboot,ftp,romon,test" for scripts executed by DHCP, Hotspot, PPP and Traffic-Monitor services;
    *) l3hw - fixed IPv6 route suppression;
    *) led - fixed "interface-status" configuration for virtual interfaces;
    *) lora - added LNS protocol support;
    *) lte - changed R11e-LTE ARP behavior to NoArp;
    *) lte - fixed sub-interface auto-removal in multiple APN setups;
    *) lte - show correct data class when connected to 5G SA network;
    *) mqtt - added on-message feature for subscribed topics;
    *) mqtt - added parallel-scripts-limit parameter to set maximum allowed number of scripts executed at the same time;
    *) mqtt - added wildcard topic subscription support;
    *) netinstall - added option to discard branding package;
    *) netinstall - display package filename in GUI Descption column if package description is not specified;
    *) netinstall-cli - added option to discard branding package;
    *) netinstall-cli - allow ".rsc" script filenames;
    *) poe-out - driver optimization for AF/AT controlled boards;
    *) poe-out - fixed rare CRS328 poe-out menu and poe-out port config loss after reboot;
    *) route - added "single-process" configuration setting, enabled by default on devices with 64MB or less RAM memory (CLI only);
    *) route - added "suppress-hw-offload" setting for IPv6 routes;
    *) route - reverse community "delete" and "filter" command behavior;
    *) routerboard - added "reset-button" support for RB800, RB1100 and RB1100AHx2 devices;
    *) sfp - fixed 25Gbps link with FEC91 (introduced in v7.12beta7);
    *) snmp - changed "mtxrGaugeValue" type to integer;
    *) switch - fixed packet forwarding between Ethernet ports for CRS354 switches (introduced in v7.12beta7);
    *) webfig - fixed timezone for interface "Last Link Down/Up Time";
    *) wifiwave2 - correctly add interface to specified "datapath.interface-list";
    *) wifiwave2 - fixed re-connection failures for 802.11ax interfaces in station mode;
    *) wifiwave2 - limit L2MTU to 1560 until a fix is available for a bug causing interfaces to fail transmitting larger frames than that;
    *) wifiwave2 - log more information regarding authentication failures;
    *) winbox - added "Host Key Type" setting under "IP/SSH" menu;
    *) winbox - added "Key Owner" setting under "System/User/SSH Keys" and "System/User/SSH Private Keys" menus;
    *) winbox - added "Remote Min Tx" parameter under "Routing/BFD/Session" menu;
    *) winbox - added "Startup Delay" setting under "Tools/Netwatch" menu;
    *) winbox - added "Use BFD" setting under "Routing/RIP/Interface-Template" menu;
    *) winbox - added MQTT subscription menu;
    *) winbox - allow to specify server as DNS name under "Tools/Email" menu;
    *) winbox - rename "DSCP" setting to "DSCP (+ECN)" under "Tools/Traffic-Generator/Packet-Templates" menu;
    *) winbox - rename "Name" setting to "List" under "IP,IPv6/Firewall/Address-List" menu;
    *) winbox - rename "Password" button to "Change Now" under "System/Password" menu;
    *) wireguard - added "auto" parameter for "private-key" and "presharde-key" parameters;
    *) wireguard - request public or private key to be specified in order to create peer;
    *) x86 - igb updated driver to 5.14.16 version;
    *) x86 - igbvf updated driver from in-tree Linux kernel;
    *) x86 - updated latest available pci.ids;
    
    Other changes since v7.11:
    
    *) api - fixed fetching objects with warning option from REST API;
    *) bgp - fixed "atomic-aggregate" always set in output;
    *) bgp - fixed local and remote port settings for BGP connections;
    *) bgp - fixed typos and missing spaces in log messages;
    *) bgp - implemented IGP metric sending in BGP messages;
    *) bgp - increase "hold-time" limit to 65000;
    *) bluetooth - use "g" units when decoding MikroTik beacon acceleration on peripheral devices menu;
    *) bridge - fixed fast-path forwarding with HW offloaded vlan-filtering (introduced in v7.11);
    *) bridge - fixed untagged VLAN entry disable;
    *) bridge - fixed vlan-filtering stability with HW and non-HW offloaded ports (introduced in v7.10);
    *) bridge - improved system stability;
    *) bridge - improved vlan-filtering bridge stability with CAPsMAN (introduced in v7.11);
    *) bth - added "Back To Home" VPN service for ARM, ARM64, and TILE devices;
    *) calea - improved system stability when trying to add rules without the CALEA package;
    *) certificate - allow to get and maintain Let's Encrypt certificate in IPv6 environment;
    *) certificate - allow to remove issued certificates when CRL is not used;
    *) certificate - fixed "subject-alt-name" duplicating itself when SCEP is used;
    *) certificate - fixed certificate auto renewal via SCEP;
    *) certificate - improved certificate validation logging error messages;
    *) certificate - log CRL HTTP errors under the "error" logging topic;
    *) chr - iavf updated driver to 4.9.1 version;
    *) chr - increased OVA default RAM amount from 160MB to 256MB;
    *) console - added ":jobname" command;
    *) console - added "as-string" and "as-string-value" properties for "get" command;
    *) console - added "terminal/ask" command;
    *) console - added "transform" property for ":convert" command;
    *) console - fixed scheduler "on-event" script highlighting when editing;
    *) console - improved ":totime" and ":tonum" commands and added ":tonsec" command for time value manipulation;
    *) console - improved multi-argument property parsing into array;
    *) console - improved randomness for ":rndstr" and ":rndnum" commands;
    *) console - improved stability and responsiveness;
    *) console - improved stability when editing long scripts;
    *) console - improved stability when using "special-login";
    *) console - improved system stability through RoMON session;
    *) console - improved system stability when using autocomplete;
    *) console - show full date and time in scheduler "next-run" property;
    *) dhcp - fixed DHCP server "authoritative" and "delay-threshold" settings (introduced in v7.12beta3);
    *) dhcp - fixed DHCP server and relay related response delays;
    *) ethernet - added "supported" and "sfp-supported" values for "monitor" command;
    *) firewall - added "ein-snat" and "ein-dnat" connection NAT state matchers for filter and mangle rules;
    *) ike1 - log an error when non-RSA keys are being used;
    *) ike2 - improved rekey collision handling;
    *) interface - added "macvlan" interface support;
    *) iot - fixed an issue where applying a script to GPIO pin caused GPIO to stop working;
    *) iot - fixed behavior where GPIO output state would change on boot;
    *) ipsec - fixed Diffie-Hellman public value encoding size;
    *) ipsec - fixed IPSec policy when using modp3072;
    *) ipsec - fixed minor typo in logs;
    *) ipsec - reduce disk writes when started without active configuration;
    *) ipv6 - fixed IPv6 RA delay time from 5s to 500ms according to RFC;
    *) ipv6 - send RA and RA deprecate messages out three times instead of just once;
    *) l3hw - improved system stability during IPv6 route offloading;
    *) leds - added "dark-mode" functionality for RBwAPG-5HacD2HnD;
    *) leds - added "wireless-status" and "wireless-signal-strength" configuration types for wifiwave2 interfaces;
    *) log - improved logging for user actions;
    *) lte - added at-chat support and increased wait time on modem at-chat for Dell DW5821e, DW5821e-eSIM, DW5829e and DW5829e-eSIM;
    *) lte - added SINR reporting for FG621-EA modem;
    *) lte - fixed 5G data-class reporting for Chateau 5G;
    *) lte - fixed APN authentification in multi APN setup for R11e-LTE6;
    *) lte - fixed IPv6 prefix for MBIM modems in multi-apn setup when IPv6 APN used as not first APN;
    *) lte - fixed RSSI for FG621-EA modem to show the correct value;
    *) lte - fixed Sierra modem detection for modems with vendor-specific USB descriptors;
    *) lte - fixed Sierra modem initialization;
    *) lte - fixed startup race condition when SIM card is in "up" slot for LtAP mini;
    *) lte - use more compact logging messages;
    *) modbus - added additional security settings for Modbus TCP;
    *) mpls - added option to match and set MPLS EXP with bridge and mangle rules;
    *) mpls - fixed "propagate-ttl=no" setting;
    *) mpls - improved FastPath next-hop selection hash algorithm;
    *) netinstall-cli - added empty configuration option "-e";
    *) netinstall-cli - prioritise interface option over address option;
    *) netwatch - decreased "thr-tcp-conn-time" maximum limit to 30 seconds;
    *) ospf - fixed adding ECMP routes;
    *) ospf - fixed BFD on virtual-link with configured VRF;
    *) ospf - fixed OSPFv3 not working with NSSA areas;
    *) ospf - fixed parsing of opaque LSAs used by TE;
    *) ospf - fixed translated NSSA routes not showing in backbone;
    *) ovpn - added "tls-auth" option support for imported .ovpn profiles;
    *) ovpn - improved system stability;
    *) pimsm - improved system stability;
    *) port - add support for Huawei MS237h-517;
    *) port - expose NMEA/DIAG ports for Dell DW5821e and DW5821e-eSIM;
    *) qsfp - added 50Gbps rate support for QSFP28 interfaces;
    *) qsfp - fixed sub-interface EEPROM monitor data output (introduced in v7.12beta3);
    *) qsfp - improved auto link detection for 100G CWDM4 modules and AOC cables (introduced in v7.12beta3);
    *) qsfp - use sub-interface configuration for establishing link (for 40Gbps and 100Gbps links, all sub-interfaces must be enabled);
    *) quickset - fixed "LAN" interface list members if configuration does not contain bridge;
    *) rip - added BFD support;
    *) rip - fixed session not working in VRF;
    *) route - fixed gateway after link restart;
    *) route - removed deprecated "received-from" property;
    *) sfp - fixed missing "rx-power" monitor with certain modules (introduced in v7.10);
    *) sfp - improved interface stability for SFP and QSFP types of interfaces;
    *) ssh - added support for user ed25519 public keys;
    *) ssh - allow to specify key owner on import;
    *) ssh - fixed SSH tunnel performance (introduced in v7.10);
    *) ssh - improved connection stability when pasting large chunks of text into console;
    *) supout - added interface list members section;
    *) supout - added LLDP power to supout.rif;
    *) supout - fixed BFD section;
    *) switch - improved resource allocation for 98DX224S, 98DX226S, and 98DX3236 switch chips;
    *) switch - improved switch chip stability for CCR2004-16g-2s+ devices;
    *) system - improved system stability when MD5 checksums are used;
    *) tile - improved system stability when using queues;
    *) traffic-generator - added "priority" property for "inject" command;
    *) traffic-generator - fixed traffic-generator on CHR and x86;
    *) usb - added support for RTL8153 USB ethernet on ARM, ARM64 and x86;
    *) vrf - limit maximum VRFs to 1024;
    *) vxlan - improved system stability for Tile devices;
    *) webfig - fixed "Days" property configuration change under "IP/Firewall" menu;
    *) webfig - improved Webfig performance and responsiveness;
    *) webfig - try to re-establish connection after disconnect;
    *) wifiwave2 - added an alternative QoS priority assignment mechanism based on IP DSCP (CLI only);
    *) wifiwave2 - added comment property for registration-table;
    *) wifiwave2 - added station-bridge interface mode (CLI only);
    *) wifiwave2 - do not show default "l2mtu" on compact export;
    *) wifiwave2 - enable changing interface MTU and L2MTU;
    *) wifiwave2 - fixed malformed Interworking packet elements;
    *) wifiwave2 - fixed PTK renewal for interfaces in station mode;
    *) wifiwave2 - fixed sniffer command not receiving any QoS null function frames when using 802.11ax radios;
    *) wifiwave2 - fixed untagged VLAN 1 entry when using "vlan-id" setting together with vlan-filtering bridge;
    *) wifiwave2 - fixed warning on CAP devices when radar detected;
    *) wifiwave2 - implemented an option to transmit IP multicast packets as unicasts (CLI only);
    *) wifiwave2 - improved compliance with regulatory requirements;
    *) wifiwave2 - list APs with a higher maximum data rate as more preferable roaming candidates;
    *) wifiwave2 - make 4-way handshake procedure more robust when acting as supplicant (client);
    *) winbox - added "Comment" under "Routing/BFD/Configuration" menu;
    *) winbox - added "g" flag under "IPv6/Routes" menu;
    *) winbox - added "Name Format" property under "WifiWave2/Provisioning" menu;
    *) winbox - allow to change port numbers for SCTP, DCCP, and UDP-LITE protocols under "IP/Firewall" menus;
    *) winbox - allow to set multiple addresses and added IPv6 support under "Interface/VETH" menu;
    *) winbox - changed "MBR Partition Table" checkbox to unchecked by default under "System/Disks/Format-Drive" menu;
    *) winbox - fixed "Address" property under "WifiWave2/Remote-CAP" menu;
    *) winbox - fixed "Group Key Update" maximum value under "WifiWave2/Security" menu;
    *) winbox - fixed entry numbering and ordering under "WifiWave2/Provisioning" menu;
    *) winbox - fixed minor typos;
    *) wireguard - added "wg-add-client" configuration wizard (CLI only);
    *) wireguard - added "wg-export" and "wg-import" functionality (CLI only);
    *) wireguard - allow to specify client settings under peer menu which will be included in configuration file and QR code;
    *) wireless - added more "radius-mac-format" options (CLI only);
    *) wireless - fixed malformed Interworking packet elements;
    *) www - fixed allowed address setting for REST API users;
    *) www - fixed fragmented POST data for SCEP service;
    *) x86 - added support for Mellanox ConnectX-6 Dx NIC;
    *) x86 - i40e updated driver to 2.23.17 version;
    *) x86 - igc updated driver to 5.10.194 version;
    *) x86 - ixgbe updated driver to 5.19.6 version;
    *) x86 - Realtek r8169 updated driver;
    
    Download the new 'RouterOS 7.12beta9' version here: https://mikrotik.com/download

15. RouterOS 6.49.10 [Long-term]

    6.49.10 changelog:

    *) www - improved service stability when receiving malformed packets;
    
    Download the new 'RouterOS 6.49.10' version here: https://mikrotik.com/download

16. RouterOS 7.12beta7 [Testing]

    7.12beta7 changelog:

    Changes in this release:
    
    !) ethernet - changed "advertise" and "speed" arguments, and removed "half-duplex" setting under "/interface ethernet" menu;
    !) sfp - convert configuration to support new link modes for SFP and QSFP type of interfaces;
    *) api - fixed fetching objects with warning option from REST API;
    *) bgp - implemented IGP metric sending in BGP messages;
    *) bluetooth - use "g" units when decoding MikroTik beacon acceleration on peripheral devices menu;
    *) certificate - allow to remove issued certificates when CRL is not used;
    *) certificate - fixed certificate auto renewal via SCEP;
    *) chr - iavf updated driver to 4.9.1 version;
    *) console - improved randomness for ":rndstr" and ":rndnum" commands;
    *) console - improved stability when using "special-login";
    *) console - improved system stability through RoMON session;
    *) console - improved system stability when using autocomplete;
    *) dhcp - fixed DHCP server "authoritative" and "delay-threshold" settings (introduced in v7.12beta3);
    *) ike2 - improved rekey collision handling;
    *) ipsec - fixed Diffie-Hellman public value encoding size;
    *) ipsec - fixed minor typo in logs;
    *) ipsec - reduce disk writes when started without active configuration;
    *) ipv6 - send RA and RA deprecate messages out three times instead of just once;
    *) l3hw - improved system stability during IPv6 route offloading;
    *) leds - added "dark-mode" functionality for RBwAPG-5HacD2HnD;
    *) leds - added "wireless-status" and "wireless-signal-strength" configuration types for wifiwave2 interfaces;
    *) log - improved logging for user actions;
    *) lte - fixed 5G data-class reporting for Chateau 5G;
    *) lte - fixed APN authentification in multi APN setup for R11e-LTE6;
    *) lte - fixed IPv6 prefix for MBIM modems in multi-apn setup when IPv6 APN used as not first APN;
    *) lte - fixed RSSI for FG621-EA modem to show the correct value;
    *) lte - fixed startup race condition when SIM card is in "up" slot for LtAP mini;
    *) mpls - improved FastPath next-hop selection hash algorithm;
    *) netinstall-cli - added empty configuration option "-e";
    *) netwatch - decreased "thr-tcp-conn-time" maximum limit to 30 seconds;
    *) ovpn - improved system stability;
    *) pimsm - improved system stability;
    *) qsfp - added 50Gbps rate support for QSFP28 interfaces;
    *) qsfp - fixed sub-interface EEPROM monitor data output (introduced in v7.12beta3);
    *) qsfp - improved auto link detection for 100G CWDM4 modules and AOC cables (introduced in v7.12beta3);
    *) qsfp - use sub-interface configuration for establishing link (for 40Gbps and 100Gbps links, all sub-interfaces must be enabled);
    *) routerboard - added "reset-button" support for RB800 and RB1100 devices;
    *) ssh - improved connection stability when pasting large chunks of text into console;
    *) supout - added interface list members section;
    *) switch - improved resource allocation for 98DX224S, 98DX226S, and 98DX3236 switch chips;
    *) traffic-generator - fixed traffic-generator on CHR and x86;
    *) usb - added support for RTL8153 USB ethernet on ARM, ARM64 and x86;
    *) vrf - limit maximum VRFs to 1024;
    *) vxlan - improved system stability for Tile devices;
    *) webfig - fixed "Days" property configuration change under "IP/Firewall" menu;
    *) webfig - fixed timezone for interface "Last Link Down/Up Time";
    *) webfig - improved Webfig performance and responsiveness;
    *) webfig - try to re-establish connection after disconnect;
    *) wifiwave2 - added an alternative QoS priority assignment mechanism based on IP DSCP (CLI only);
    *) wifiwave2 - added station-bridge interface mode (CLI only);
    *) wifiwave2 - do not show default "l2mtu" on compact export;
    *) wifiwave2 - fixed PTK renewal for interfaces in station mode;
    *) wifiwave2 - fixed sniffer command not receiving any QoS null function frames when using 802.11ax radios;
    *) wifiwave2 - fixed untagged VLAN 1 entry when using "vlan-id" setting together with vlan-filtering bridge;
    *) wifiwave2 - fixed warning on CAP devices when radar detected;
    *) wifiwave2 - implemented an option to transmit IP multicast packets as unicasts (CLI only);
    *) wifiwave2 - improved compliance with regulatory requirements;
    *) wifiwave2 - make 4-way handshake procedure more robust when acting as supplicant (client);
    *) winbox - added "Comment" under "Routing/BFD/Configuration" menu;
    *) winbox - added "g" flag under "IPv6/Routes" menu;
    *) winbox - added "Name Format" property under "WifiWave2/Provisioning" menu;
    *) winbox - changed "MBR Partition Table" checkbox to unchecked by default under "System/Disks/Format-Drive" menu;
    *) winbox - fixed "Address" property under "WifiWave2/Remote-CAP" menu;
    *) winbox - fixed "Group Key Update" maximum value under "WifiWave2/Security" menu;
    *) winbox - fixed entry numbering and ordering under "WifiWave2/Provisioning" menu;
    *) winbox - fixed minor typos;
    *) wireguard - allow to specify client settings under peer menu which will be included in configuration file and QR code;
    *) wireguard - generate Wireguard peer keys and preshared-key automatically, if value is specified but is not base64 string;
    *) wireguard - removed "wg-add-client" configuration wizard (introduced in v7.12beta3);
    *) wireless - added more "radius-mac-format" options (CLI only);
    *) www - fixed allowed address setting for REST API users;
    *) www - fixed fragmented POST data for SCEP service;
    *) x86 - i40e updated driver to 2.23.17 version;
    *) x86 - igc updated driver to 5.10.194 version;
    *) x86 - ixgbe updated driver to 5.19.6 version;
    *) x86 - Realtek r8169 updated driver;
    
    Other changes since v7.11:
    
    *) bgp - fixed "atomic-aggregate" always set in output;
    *) bgp - fixed local and remote port settings for BGP connections;
    *) bgp - fixed typos and missing spaces in log messages;
    *) bgp - increase "hold-time" limit to 65000;
    *) bridge - fixed fast-path forwarding with HW offloaded vlan-filtering (introduced in v7.11);
    *) bridge - fixed untagged VLAN entry disable;
    *) bridge - fixed vlan-filtering stability with HW and non-HW offloaded ports (introduced in v7.10);
    *) bridge - improved system stability;
    *) bridge - improved vlan-filtering bridge stability with CAPsMAN (introduced in v7.11);
    *) bth - added "Back To Home" VPN service for ARM, ARM64, and TILE devices;
    *) calea - improved system stability when trying to add rules without the CALEA package;
    *) certificate - allow to get and maintain Let's Encrypt certificate in IPv6 environment;
    *) certificate - fixed "subject-alt-name" duplicating itself when SCEP is used;
    *) certificate - improved certificate validation logging error messages;
    *) certificate - log CRL HTTP errors under the "error" logging topic;
    *) chr - increased OVA default RAM amount from 160MB to 256MB;
    *) console - added ":jobname" command;
    *) console - added "as-string" and "as-string-value" properties for "get" command;
    *) console - added "terminal/ask" command;
    *) console - added "transform" property for ":convert" command;
    *) console - fixed scheduler "on-event" script highlighting when editing;
    *) console - improved ":totime" and ":tonum" commands and added ":tonsec" command for time value manipulation;
    *) console - improved multi-argument property parsing into array;
    *) console - improved stability and responsiveness;
    *) console - improved stability when editing long scripts;
    *) console - show full date and time in scheduler "next-run" property;
    *) dhcp - fixed DHCP server and relay related response delays;
    *) ethernet - added "supported" and "sfp-supported" values for "monitor" command;
    *) firewall - added "ein-snat" and "ein-dnat" connection NAT state matchers for filter and mangle rules;
    *) ike1 - log an error when non-RSA keys are being used;
    *) interface - added "macvlan" interface support;
    *) iot - fixed an issue where applying a script to GPIO pin caused GPIO to stop working;
    *) iot - fixed behavior where GPIO output state would change on boot;
    *) ipsec - fixed IPSec policy when using modp3072;
    *) ipv6 - fixed IPv6 RA delay time from 5s to 500ms according to RFC;
    *) lte - added at-chat support and increased wait time on modem at-chat for Dell DW5821e, DW5821e-eSIM, DW5829e and DW5829e-eSIM;
    *) lte - added SINR reporting for FG621-EA modem;
    *) lte - fixed Sierra modem detection for modems with vendor-specific USB descriptors;
    *) lte - fixed Sierra modem initialization;
    *) lte - use more compact logging messages;
    *) modbus - added additional security settings for Modbus TCP;
    *) mpls - added option to match and set MPLS EXP with bridge and mangle rules;
    *) mpls - fixed "propagate-ttl=no" setting;
    *) netinstall - added option to discard branding package;
    *) netinstall-cli - prioritise interface option over address option;
    *) ospf - fixed adding ECMP routes;
    *) ospf - fixed BFD on virtual-link with configured VRF;
    *) ospf - fixed OSPFv3 not working with NSSA areas;
    *) ospf - fixed parsing of opaque LSAs used by TE;
    *) ospf - fixed translated NSSA routes not showing in backbone;
    *) ovpn - added "tls-auth" option support for imported .ovpn profiles;
    *) port - add support for Huawei MS237h-517;
    *) port - expose NMEA/DIAG ports for Dell DW5821e and DW5821e-eSIM;
    *) quickset - fixed "LAN" interface list members if configuration does not contain bridge;
    *) rip - added BFD support;
    *) rip - fixed session not working in VRF;
    *) route - fixed gateway after link restart;
    *) route - removed deprecated "received-from" property;
    *) sfp - fixed missing "rx-power" monitor with certain modules (introduced in v7.10);
    *) sfp - improved interface stability for SFP and QSFP types of interfaces;
    *) ssh - added support for user ed25519 public keys;
    *) ssh - allow to specify key owner on import;
    *) ssh - fixed SSH tunnel performance (introduced in v7.10);
    *) supout - added LLDP power to supout.rif;
    *) supout - fixed BFD section;
    *) switch - improved switch chip stability for CCR2004-16g-2s+ devices;
    *) system - improved system stability when MD5 checksums are used;
    *) tile - improved system stability when using queues;
    *) traffic-generator - added "priority" property for "inject" command;
    *) wifiwave2 - added comment property for registration-table;
    *) wifiwave2 - enable changing interface MTU and L2MTU;
    *) wifiwave2 - fixed malformed Interworking packet elements;
    *) wifiwave2 - list APs with a higher maximum data rate as more preferable roaming candidates;
    *) winbox - allow to change port numbers for SCTP, DCCP, and UDP-LITE protocols under "IP/Firewall" menus;
    *) winbox - allow to set multiple addresses and added IPv6 support under "Interface/VETH" menu;
    *) wireguard - added "wg-add-client" configuration wizard (CLI only);
    *) wireguard - added "wg-export" and "wg-import" functionality (CLI only);
    *) wireless - fixed malformed Interworking packet elements;
    *) x86 - added support for Mellanox ConnectX-6 Dx NIC;
    
    Download the new 'RouterOS 7.12beta7' version here: https://mikrotik.com/download

17. RouterOS 7.11.2 [Stable]

    7.11.2 changelog:

    *) dhcp - fixed DHCP server "authoritative" and "delay-threshold" settings (introduced in v7.11.1);
    
    Download the new 'RouterOS 7.11.2' version here: https://mikrotik.com/download

18. RouterOS 7.11.1 [Stable]

    7.11.1 changelog:

    *) bridge - fixed fast-path forwarding with HW offloaded vlan-filtering (introduced in v7.11);
    *) bridge - fixed untagged VLAN entry disable;
    *) bridge - fixed vlan-filtering stability with HW and non-HW offloaded ports (introduced in v7.10);
    *) bridge - improved system stability;
    *) bridge - improved vlan-filtering bridge stability with CAPsMAN (introduced in v7.11);
    *) console - improved stability and responsiveness;
    *) dhcp - fixed DHCP server and relay related response delays;
    *) ipsec - fixed IPSec policy when using modp3072;
    *) lte - fixed startup race condition when SIM card is in "up" slot for LtAP mini;
    
    Download the new 'RouterOS 7.11.1' version here: https://mikrotik.com/download

19. RouterOS 6.49.9 [Stable]

    6.49.9 changelog:

    (factory only release)
    
    Download the new 'RouterOS 6.49.9' version here: https://mikrotik.com/download

20. RouterOS 7.12beta3 [Testing]

    7.12beta3 changelog:

    Changes in this release:
    
    !) ethernet - changed "advertise" and "speed" arguments, and removed "half-duplex" setting under "/interface ethernet" menu;
    !) sfp - convert configuration to support new link modes for SFP and QSFP type of interfaces;
    *) bgp - fixed "atomic-aggregate" always set in output;
    *) bgp - fixed local and remote port settings for BGP connections;
    *) bgp - increase "hold-time" limit to 65000;
    *) bridge - fixed fast-path forwarding with HW offloaded vlan-filtering (introduced in v7.11);
    *) bridge - fixed untagged VLAN entry disable;
    *) bridge - fixed vlan-filtering stability with HW and non-HW offloaded ports (introduced in v7.10);
    *) bridge - improved vlan-filtering bridge stability with CAPsMAN (introduced in v7.11);
    *) bth - added "Back To Home" VPN service for ARM, ARM64, and TILE devices;
    *) calea - improved system stability when trying to add rules without the CALEA package;
    *) console - added "transform" property for ":convert" command;
    *) console - fixed scheduler "on-event" script highlighting when editing;
    *) console - improved multi-argument property parsing into array;
    *) console - improved stability when editing long scripts;
    *) console - show full date and time in scheduler "next-run" property;
    *) dhcp - fixed DHCP server and relay related response delays;
    *) ethernet - added "supported" and "sfp-supported" values for "monitor" command;
    *) interface - added "macvlan" interface support;
    *) ipsec - fixed IPSec policy when using modp3072;
    *) ipv6 - fixed IPv6 RA delay time from 5s to 500ms according to RFC;
    *) ipv6 - send RA and RA deprecate messages out three times instead of just once;
    *) log - improved logging for user actions;
    *) lte - added at-chat support and increased wait time on modem at-chat for Dell DW5821e, DW5821e-eSIM, DW5829e and DW5829e-eSIM;
    *) lte - added SINR reporting for FG621-EA modem;
    *) lte - fixed Sierra modem detection for modems with vendor-specific USB descriptors;
    *) lte - fixed startup race condition when SIM card is in "up" slot for LtAP mini;
    *) netinstall-cli - prioritise interface option over address option;
    *) ospf - fixed adding ECMP routes;
    *) ospf - fixed OSPFv3 not working with NSSA areas;
    *) ospf - fixed parsing of opaque LSAs used by TE;
    *) ospf - fixed translated NSSA routes not showing in backbone;
    *) port - add support for Huawei MS237h-517;
    *) port - expose NMEA/DIAG ports for Dell DW5821e and DW5821e-eSIM;
    *) quickset - fixed "LAN" interface list members if configuration does not contain bridge;
    *) rip - added BFD support;
    *) rip - fixed session not working in VRF;
    *) route - fixed gateway after link restart;
    *) route - removed deprecated "received-from" property;
    *) sfp - improved interface stability for SFP and QSFP types of interfaces;
    *) switch - improved switch chip stability for CCR2004-16g-2s+ devices;
    *) tile - improved system stability when using queues;
    *) traffic-generator - added "priority" property for "inject" command;
    *) wifiwave2 - added comment property for registration-table;
    *) wifiwave2 - enable changing interface MTU and L2MTU;
    *) wifiwave2 - fixed malformed Interworking packet elements;
    *) winbox - allow to set multiple addresses and added IPv6 support under "Interface/VETH" menu;
    *) wireguard - added "wg-add-client" configuration wizard (CLI only);
    *) wireguard - added "wg-export" and "wg-import" functionality (CLI only);
    *) wireless - fixed malformed Interworking packet elements;
    *) x86 - added support for Mellanox ConnectX-6 Dx NIC;
    
    Other changes since v7.11:
    
    *) bgp - fixed typos and missing spaces in log messages;
    *) bridge - improved system stability;
    *) certificate - allow to get and maintain Let's Encrypt certificate in IPv6 environment;
    *) certificate - fixed "subject-alt-name" duplicating itself when SCEP is used;
    *) certificate - improved certificate validation logging error messages;
    *) certificate - log CRL HTTP errors under the "error" logging topic;
    *) chr - increased OVA default RAM amount from 160MB to 256MB;
    *) console - added ":jobname" command;
    *) console - added "as-string" and "as-string-value" properties for "get" command;
    *) console - added "terminal/ask" command;
    *) console - improved ":totime" and ":tonum" commands and added ":tonsec" command for time value manipulation;
    *) console - improved stability and responsiveness;
    *) console - improved stability when using "special-login";
    *) firewall - added "ein-snat" and "ein-dnat" connection NAT state matchers for filter and mangle rules;
    *) ike1 - log an error when non-RSA keys are being used;
    *) iot - fixed an issue where applying a script to GPIO pin caused GPIO to stop working;
    *) iot - fixed behavior where GPIO output state would change on boot;
    *) lte - fixed Sierra modem initialization;
    *) lte - use more compact logging messages;
    *) modbus - added additional security settings for Modbus TCP;
    *) mpls - added option to match and set MPLS EXP with bridge and mangle rules;
    *) mpls - fixed "propagate-ttl=no" setting;
    *) netinstall - added option to discard branding package;
    *) ospf - fixed BFD on virtual-link with configured VRF;
    *) ovpn - added "tls-auth" option support for imported .ovpn profiles;
    *) sfp - fixed missing "rx-power" monitor with certain modules (introduced in v7.10);
    *) ssh - added support for user ed25519 public keys;
    *) ssh - allow to specify key owner on import;
    *) ssh - fixed SSH tunnel performance (introduced in v7.10);
    *) supout - added LLDP power to supout.rif;
    *) supout - fixed BFD section;
    *) system - improved system stability when MD5 checksums are used;
    *) wifiwave2 - list APs with a higher maximum data rate as more preferable roaming candidates;
    *) winbox - allow to change port numbers for SCTP, DCCP, and UDP-LITE protocols under "IP/Firewall" menus;
    
    Download the new 'RouterOS 7.12beta3' version here: https://mikrotik.com/download