Christoph Anton Mitterer (8):
      doc: clarify evaluation of chains
      doc: minor improvements with respect to the term “ruleset”
      doc: describe include’s collation order to be that of the C locale
      doc: fix/improve documentation of jump/goto/return
      doc: add more documentation on bitmasks and sets
      doc: add overall description of the ruleset evaluation
      doc: fix/improve documentation of verdicts
      doc: minor improvements the `reject` statement

Fernando Fernandez Mancera (7):
      tunnel: add vxlan support
      tunnel: add tunnel object and statement json support
      tests: add tunnel shell and python tests
      meta: introduce meta ibrhwaddr support
      tests: shell: add packetpath test for meta ibrhwaddr
      rule: add missing documentation for cmd_obj enum
      tunnel: add missing tunnel object list support

Florian Westphal (19):
      tests: shell: skip two bitwise tests if multi-register support isn't available
      tests: py: objects.t: must use input, not output
      src: tunnel: handle tunnel delete command
      tests: shell: add regression tests for set flush+add bugs
      tests: shell: fix name based checks with CONFIG_MODULES=n
      tests: shell: type_route_chain: use in-tree nftables, not system-wide one
      tests: shell: add packetpath test for reject statement
      evaluate: tunnel: don't assume src is set
      src: tunnel src/dst must be a symbolic expression
      src: parser_bison: prevent multiple ip daddr/saddr definitions
      evaluate: reject tunnel section if another one is already present
      src: fix fmt string warnings
      src: parser_json: fix format string bugs
      evaluate: follow prefix expression recursively if needed
      doc: remove queue from verdict list
      src: add refcount asserts
      support for afl++ (american fuzzy lop++) fuzzer
      src: move fuzzer functionality to separate tool
      build: unbreak 'make distcheck'

Georg Pfuetzenreuter (1):
      doc: fix tcpdump example

Gyorgy Sarvari (1):
      tests: shell: fix typo in vmap_timeout test script

Jeremy Sowden (2):
      doc: fix some man-page mistakes
      build: don't install ancillary files without systemd service file

Pablo Neira Ayuso (23):
      src: add tunnel template support
      tunnel: add erspan support
      src: add tunnel statement and expression support
      tunnel: add geneve support
      src: add expr_type_catchall() helper and use it
      src: replace compound_expr_add() by type safe set_expr_add()
      src: replace compound_expr_add() by type safe concat_expr_add()
      src: replace compound_expr_add() by type safe list_expr_add()
      segtree: rename set_compound_expr_add() to set_expr_add_splice()
      expression: replace compound_expr_clone() by type safe function
      expression: remove compound_expr_add()
      expression: replace compound_expr_remove() by type safe function
      expression: replace compound_expr_destroy() by type safe funtion
      expression: replace compound_expr_print() by type safe function
      src: replace compound_expr_alloc() by type safe function
      evaluate: simplify set to list normalisation for device expressions
      tests: shell: combine flowtable devices with variable expression
      parser_bison: remove leftover utf-8 character in error
      libnftables: do not re-add default include directory in include search path
      rule: skip CMD_OBJ_SETELEMS with no elements after set flush
      tests: shell: add device to sets/0075tunnel_0 to support older kernels
      tests: shell: refer to python3 in json prettify script
      build: Bump version to 1.1.6

Phil Sutter (38):
      table: Embed creating nft version into userdata
      tools: gitignore nftables.service file
      monitor: Quote device names in chain declarations, too
      tests: monitor: Label diffs to help users
      tests: monitor: Fix regex collecting expected echo output
      tests: monitor: Test JSON echo mode as well
      tests: monitor: Extend debug output a bit
      Makefile: Fix for 'make CFLAGS=...'
      mnl: Allow for updating devices on existing inet ingress hook chains
      monitor: Inform JSON printer when reporting an object delete event
      tests: monitor: Extend testcases a bit
      tests: monitor: Excercise all syntaxes and variants by default
      tests: py: Enable JSON and JSON schema by default
      tests: Prepare exit codes for automake
      tests: json_echo: Skip if run as non-root
      tests: shell: Skip packetpath/nat_ftp in fake root env
      tests: build: Do not assume caller's CWD
      tests: build: Avoid a recursive 'make check' run
      Makefile: Enable support for 'make check'
      fib: Fix for existence check on Big Endian
      mnl: Support simple wildcards in netdev hooks
      parser_bison: Accept ASTERISK_STRING in flowtable_expr_member
      tests: shell: Test ifname-based hooks
      mnl: Drop asterisk from end of NFTA_DEVICE_PREFIX strings
      datatype: Fix boolean type on Big Endian
      optimize: Fix verdict expression comparison
      tests: py: any/tcpopt.t.json: Fix JSON equivalent
      tests: py: any/ct.t.json.output: Drop leftover entry
      tests: py: inet/osf.t: Fix element ordering in JSON equivalents
      tests: py: Fix for using wrong payload path
      tests: py: Implement payload_record()
      tests: py: Do not rely upon '[end]' marker
      netlink: No need to reference array when passing as pointer
      datatype: Increase symbolic constant printer robustness
      tests: py: ip6/vmap.t: Drop double whitespace in rule
      netlink: Zero nft_data_linearize objects when populating
      utils: Cover for missing newline after BUG() messages
      doc: libnftables-json: Describe RULESET object

Ronan Pigott (1):
      doc: don't suggest to disable GSO

Yi Chen (1):
      tests: shell: add packetpath test for meta time expression.