Achill Gilgenast (1):
      configure: Avoid addition assignment operators

Alan Ross (1):
      libxtables: refuse to run under file capabilities

Florian Westphal (2):
      man: iptables-restore.8: document flush behaviour for user-defined chains
      nft: revert compat expressions in userdata

Jeremy Sowden (2):
      ip[6]tables-translate: fix test failures when WESP is defined
      nft: fix interface comparisons in `-C` commands

Miao Wang (1):
      extensions: libebt_redirect: prevent translation

Pablo Neira Ayuso (1):
      configure: Bump version for 1.8.12 release

Phil Sutter (20):
      nft: Drop interface mask leftovers from post_parse callbacks
      nft: Make add_log() static
      nft: ruleparse: Introduce nft_parse_rule_expr()
      nft: __add_{match,target}() can't fail
      nft: Introduce UDATA_TYPE_COMPAT_EXT
      nft-ruleparse: Fallback to compat expressions in userdata
      nft: Pass nft_handle into add_{action,match}()
      nft: Embed compat extensions in rule userdata
      tests: iptables-test: Add nft-compat variant
      extensions: icmp: Support info-request/-reply type names
      xshared: Accept an option if any given command allows it
      extensions: sctp: Translate bare '-m sctp' match
      libxtables: Promote xtopt_esize_by_type() as xtopt_psize getter
      Revert "libxtables: Promote xtopt_esize_by_type() as xtopt_psize getter"
      xtables-monitor: Print -X command for base chains, too
      nft: Support replacing a rule added in the same batch
      libxtables: Store all requested target types
      ruleparse: arp: Fix for all-zero mask on Big Endian
      tests: shell: Review nft-only/0009-needless-bitwise_0
      configure: Auto-detect libz unless explicitly requested

Remy D. Farley (1):
      iptables: fix null dereference parsing bitwise operations

Łukasz Stelmach (1):
      extensions: man: Add a note about route_localnet sysctl