This release brings a number of new features, along with the usual
smattering of bug fixes and cleanups.

One minor-but-major change is that we no longer wait for IPv6 Duplicate
Address Detection to complete. This reduces execution time by 2 seconds.

New features:

• firewall: support ingressPolicy=(open|same-bridge) for isolating bridges as in Docker (#584)
• dhcp ipam: support customizing dhcp options from CNI args (#670)
• Allow setting sysctls on a particular interface (#669)
• bridge: Add macspoofchk support (#639).

Bug fixes:

• portmap: fix bug that new udp connection deletes all existing conntrack entries (#705)
• portmap: fix checkPorts result when chain does not exist (#707)
• dhcp: fixed DHCP problem that broke when fast retry was added (#681)
• ipvlan: Send Gratuitous ARP after IPs are set (#675)

Improvements

• host-device: Bring interfaces up after moving into container (#679)
• Explicitly Disable Duplicate Address Detection For Container Side Veth (#695)
• Replace arping package with arp_notify (#687)
• host-device: add ipam support for dpdk device (#642)

Other changes

• Ignore NetNS path errors on delete (#686)
• Fix confusing error msg invalid cidr (#638)