ipv6 - added 'valid' and 'lifetime' parameters for SLAAC IPv6 addresses ipsec - fixed packet processing by hardware encryption engine on RB850Gx2 device health - added limited manual control over fans for CRS3xx, CRS5xx, CCR2xxx devices firewall - added 'connection-nat-state' to IPv6 mangle and filter rules filesystem - fixed partition 'copy-to' function ethernet - fixed half-duplex forced mode at 10Mbps and 100Mbps on ether1 for RB5009, Chateau 5G ax and hAP ax3 devices disk - improved system stability when removing USB while formatting

dhcpv4-server - release lease if 'check-status' reveals no conflict dhcp - changed the default lease time for newly created DHCP servers to 30 minutes detnet - fixed interface state detection after reboot container - improved 'container pull' to support OCI manifest format container - fixed invoking 'container shell' more than once console - show Ethernet advertise, speed and duplex settings depending on configured auto-negotiation console - rename flag 'seen reply' to 'seen-reply' under '/ipv6 firewall connection' menu console - removed bogus 'reset' command from '/system resource usb' menu console - improved stability when editing long strings console - improved stability when doing '/console inspect' in certain menus console - added option to create new files using '/file add' command (CLI only) console - added '/task' submenu (CLI only) chr - fixed public SSH key pulling when running on AWS certificate - fixed bogus log messages

bridge - fixed FastPath when setting 'use-ip-firewall-for-vlan' or 'use-ip-firewall-for-pppoe' without enabled 'use-ip-firewall'

bridge - added warning log when 'ageing-time' exceeds supported hardware limit for 98DX224S, 98DX226S, and 98DX3236 switch chips

Mikrotik upgrade routerboard firmware