relayd: free original cert after X509_dup in ssl_update_certificate
bgpd: adjust prefix_evaluate for clearer rde_generate_updates logic
sndiod: Add the server.mode control making the server mode dynamic
sys/ieee80211: support of uAPSD; sys/iwx: enable uAPSD when supported by AP
nvme: use I/O submission queue entry size reported by controller
patch: xenocara/fonts/alias: avoid chown dance around fc-cache invocation
rpki-client: backoff retry for persistently non-functional CAs
rpki-client: limit the filename length in Manifest listings to something reasonable
bgpd: don't fatal in rde_dump_ctx_new() for bad imsg types in the adj-rib-out case
bgpd: better limit the maximum number of SPAS in a ASPA record
bgpd: rework bitmap code to use max elements instead of bits
wg(4): move bpf on outgoing packets later in the transmit path
bgpd: use unsigned int instead of uint8_t as loop iterator var