RouterOS full changelog

certificate - do not download CRL if there is not enough free RAM;
certificate - fixed handling of capsman-cap certificates (introduced in v7.16);
dhcpv4-server/relay - added additional error messages for DHCP servers and relays;
dns - fixed lookup order for static DNS entries (introduced in v7.16.1);
ethernet - improved linking after reboot for hAP ax lite devices ("/system routerboard upgrade" required);
gps - changed default GPS antenna setting for LtAP mini with internal LTE/GPS combo antenna;
leds - fixed bogus argument for "leds" property (introduced in v7.16);
leds - fixed PoE-in LEDs for CRS318-1Fi-15Fr-2S device;
modem - KNOT BG77 modem, improved handling of modem unexpected restarts;
route - fixed possible issue with inactive routes after reboot (introduced in v7.16);
routerboot - improved stability for IPQ8072 and IPQ6010 when flash-boot is used ("/system routerboard upgrade" required);

device-mode - after upgrade, mode "enterprise" is renamed to "advanced" and bandwidth-test, traffic-gen, partition (command "repartition"), bootloader and downgrade features will be disabled;
webfig - redesigned HTML, styling and functionality (additional fixes);
arm64 - fixed for bare-metal servers to be able to access more than 2GB RAM;
arm64 - show CPU frequency on bare-metal installations;
bridge - correctly display PPP interfaces in VLAN menu;
bridge - fixed first host table response for SNMP;
bridge - fixed VLAN overlap check;
bridge - improved port handling;
certificate - fixed handling of capsman-cap certificates (introduced in v7.16);
console - added more argument definitions for mac-protocol property;
console - execute :return command without error;
crypto - improve crypto speeds (additional fixes);
crypto - use hardware accelerator for GCM cipher in TLS connection on Alpine CPUs;
defconf - changed wireless installation from "indoor" to "any";
defconf - disable 5GHz secondary channel on RB4011;
defconf - fixed new port name recognition;
device-mode - changed "partition" to allow activate and do not allow repartition (introduced in v7.17beta2);
device-mode - clarify message that pressing a button will reboot device;
device-mode - limit "/tool/ping-speed" and "/tool/flood-ping" under "traffic-gen" feature;
device-mode - show all features and active restrictions with "print" command;
dhcp-relay - added "local-address-as-src-ip" property;
dhcp-server - use interface ID for NAS-Port and added interface name to NAS-Port-ID attribute in RADIUS requests;
dhcp-server - use single RADIUS accounting session for IPv4 and IPv6 when dual stack is used;
dhcpv4-client - fixed crash when releasing disabled DHCP client;
dhcpv4-server - properly detect DHCP server address when underlying interface has multiple IP addresses configured;
dhcpv4-server/relay - added addi

6to4 - fixed 6to4 tunnel LL address generation after system reboot;
6to4 - improved system stability when using 6to4 tunnel without specified remote-address;
6to4 - limit keepalive timeout maximum value;
address - added "S" flag for addresses that belong to a slave interface;
arm64 - fixed "disable-running-check" for ARM64 UEFI;
arm64 - increased reserved storage space for bootloader;
arm64/x86 - added rtl8111/8168/8411 firmware;
arp - fixed possible issue with invalid entries;
bgp - fixed BGP sessions missing vpnv6 afi;
bgp - fixed cluster-list and originator-id;
bgp - fixed corrupted as-path when received update with empty AS_PATH attribute (introduced in v7.15);
bgp - fixed minor logging typo;
bgp - fixed vpnv6 safi;
bgp - small logging improvements;
bridge - added dynamic tagged entry when VLAN interface is created on vlan-filtering bridge;
bridge - added forward-reserved-addresses property which controls forwarding of MAC 01:80:C2:00:00:0x range (separated from "protocol-mode=none" functionality, disabled by default after upgrade);
bridge - added L2 MDB support for IGMP snooping;
bridge - added max-learned-entries property for bridge;
bridge - added message about who created a dynamic VLAN entry;
bridge - added MVRP support for VLANs assigned to bridge;
bridge - do not allow duplicate ports;
bridge - fixed BPDU address when using "ether-type=0x88a8" configuration;
bridge - fixed MVRP leave;
bridge - fixed port "point-to-point" status after first link change;
bridge - fixed typo in filter and NAT error message;
bridge - improved system stability when removing MLAG configuration;
bridge - show invalid flag for ports that fails to be added to bridge (e.g. maximum port limit of 1024 is reached);
bth - improved stability on system time change;
certificate - added no-key-export parameter for import;
certificate - added support for cloud-dns challenge validation for sn.mynetname.net (CLI only);
certificate - automatica

lte - fixed possible crash when enabling/disabling config-less modem interface;
lte - fixed R11e-LTE no traffic flow when modem with older firmware version is used;
routerboard - improved Etherboot stability for CRS320-8P-8B-4S+ device ("/system routerboard upgrade" required);
ssh - fixed unsupported user SSH public key import (introduced in v7.15);