Brett Mastbergen (1): ct: Add support for the 'id' key Florian Westphal (1): concat: provide proper dtype when parsing typeof udata Laura Garcia Liebana (2): doc: add hashing expressions description build: fix tentative generation of nft.8 after disabled doc Matt Turner (2): build: Include generated man pages in dist tarball build: Allow building from tarballs without yacc/lex Michael Braun (7): main: fix ASAN -fsanitize=address error in get_optstring() utils: fix UBSAN warning in fls datatype: fix double-free resulting in use-after-free in datatype_free tests: dump generated use new nft tool main: fix get_optstring truncating output datatype: add frag-needed (ipv4) to reject options evaluate: enable reject with 802.1q Pablo Neira Ayuso (32): segtree: broken error reporting with mappings parser_bison: proper ct timeout list initialization src: NAT support for intervals in maps include: resync nf_nat.h kernel header src: add netmap support src: add STMT_NAT_F_CONCAT flag and use it evaluate: fix crash when handling concatenation without map tests: py: concatenation, netmap and nat mappings mnl: restore --debug=netlink output with sets tests: py: remove range test with service names tests: shell: add NAT mappings tests evaluate: incorrect byteorder with typeof and integer_datatype nat: transform range to prefix expression when possible rule: memleak in __do_add_setelems() rule: fix element cache update in __do_add_setelems() src: add rule_stmt_insert_at() and use it src: add rule_stmt_append() and use it parser_bison: release extended priority string after parsing parser_bison: release helper type string after parsing src: ct_timeout: release policy string and state list src: fix netlink_get_setelem() memleaks evaluate: fix memleak in stmt_evaluate_reject_icmp() mnl: fix error rule reporting with missing table/chain and anonymous sets src: rename CMD_OBJ_SETELEM to CMD_OBJ_ELEMENTS libnftables: call nft_cmd_expand() only with CMD_ADD src: add CMD_OBJ_SETELEMS src: remove empty file mnl: add function to convert flowtable device list to array src: add devices to an existing flowtable src: delete devices to an existing flowtable src: allow flowtable definitions with no devices build: Bump version to v0.9.5 Phil Sutter (5): segtree: Fix missing expires value in prefixes segtree: Use expr_clone in get_set_interval_*() segtree: Merge get_set_interval_find() and get_set_interval_end() segtree: Fix get element command with prefixes JSON: Improve performance of json_events_cb() Stefano Brivio (6): include: Resync nf_tables.h cache copy src: Set NFT_SET_CONCAT flag for sets with concatenated ranges build: Fix doc build, restore A2X assignment for doc/Makefile tests: py: Actually use all available hooks in bridge/chains.t evaluate: Perform set evaluation on implicitly declared (anonymous) sets tests: py: Enable anonymous set rule with concatenated ranges in inet/sets.t