netlink_delinearize: Sanitize concat data element decoding (Phil Sutter) [2160049]
optimize: Clarify chain_optimize() array allocations (Phil Sutter) [2160049]
optimize: Do not return garbage from stack (Phil Sutter) [2160049]
netlink: Fix for potential NULL-pointer deref (Phil Sutter) [2160049]
meta: parse_iso_date() returns boolean (Phil Sutter) [2160049]
mnl: dump_nf_hooks() leaks memory in error path (Phil Sutter) [2160049]
owner: Fix potential array out of bounds access (Phil Sutter) [2160049]

tests: add a test case for map update from packet path with concat (Phil Sutter) [2094894]
netlink_linearize: fix timeout with map updates (Phil Sutter) [2094894]
netlink_delinearize: fix decoding of concat data element (Phil Sutter) [2094894]

monitor: Sanitize startup race condition (Phil Sutter) [2130721]
evaluate: set eval ctx for add/update statements with integer constants (Phil Sutter) [2094894]
src: allow anon set concatenation with ether and vlan (Phil Sutter) [2094887]
evaluate: search stacked header list for matching payload dep (Phil Sutter) [2094887]
netlink_delinearize: also postprocess OP_AND in set element context (Phil Sutter) [2094887]
tests: add a test case for ether and vlan listing (Phil Sutter) [2094887]
debug: dump the l2 protocol stack (Phil Sutter) [2094887]
proto: track full stack of seen l2 protocols, not just cumulative offset (Phil Sutter) [2094887]
netlink_delinearize: postprocess binary ands in concatenations (Phil Sutter) [2094887]
netlink_delinearize: allow postprocessing on concatenated elements (Phil Sutter) [2094887]
intervals: check for EXPR_F_REMOVE in case of element mismatch (Phil Sutter) [2115627]
intervals: fix crash when trying to remove element in empty set (Phil Sutter) [2115627]
scanner: don't pop active flex scanner scope (Phil Sutter) [2113874]
parser: add missing synproxy scope closure (Phil Sutter) [2113874]
tests/py: Add a test for failing ipsec after counter (Phil Sutter) [2113874]
doc: Document limitations of ipsec expression with xfrm_interface (Phil Sutter) [1806431]

One more attempt at fixing expected error records (Phil Sutter) [1973687]

Realy fix expected error records (Phil Sutter) [1973687]

Fix expected error records (Phil Sutter) [1973687]

Add expected error records for testsuite runs (Phil Sutter) [1973687]

Prevent port-shadow attacks in sample nat config (Phil Sutter) [2061940]

intervals: Do not sort cached set elements over and over again (Phil Sutter) [1917398]
intervals: do not empty cache for maps (Phil Sutter) [1917398]
intervals: do not report exact overlaps for new elements (Phil Sutter) [1917398]
rule: collapse set element commands (Phil Sutter) [1917398]
tests: shell: runtime set element automerge (Phil Sutter) [1917398]

Review package dependencies
new version 1.0.4

tests: extend dtype test case to cover expression with integer type
evaluate: set evaluation context for set elements

evaluate: pick data element byte order, not dtype one

tests: py: add dnat to port without defining destination address
evaluate: fix inet nat with no layer 3 info
include: missing sctp_chunk.h in Makefile.am
exthdr: Implement SCTP Chunk matching
scanner: sctp: Move to own scope
scanner: introduce start condition stack
json: Simplify non-tcpopt exthdr printing a bit

tests: shell: better parameters for the interval stack overflow test
tests: shell: $NFT needs to be invoked unquoted

doc: nft.8: Extend monitor description by trace

tests: cover baecd1cf2685 ("segtree: Fix segfault when restoring a huge interval set")
segtree: Fix segfault when restoring a huge interval set