Commit Graph

34187 Commits

Author SHA1 Message Date
Tianling Shen
9b158a7efd geoipupdate: Update to 7.1.1
Release note: https://github.com/maxmind/geoipupdate/releases/tag/v7.1.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-07-11 19:31:20 +08:00
Tianling Shen
e565e93ed8 rclone: Update to 1.70.3
Release note: https://github.com/rclone/rclone/releases/tag/v1.70.3

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-07-11 19:30:33 +08:00
Tianling Shen
68ddb79232 v2ray-core: Update to 5.37.0
Release note: https://github.com/v2fly/v2ray-core/releases/tag/v5.37.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-07-11 19:14:35 +08:00
Wesley Gimenes
bcb6992f4b netbird: update to 0.50.2
changelog: https://github.com/netbirdio/netbird/releases/tag/v0.50.2

Signed-off-by: Wesley Gimenes <wehagy@proton.me>
2025-07-11 13:59:40 +08:00
Chris Swan
109b1ff892 csshnpd: Bump to c1.0.14 release
Upstream release aligned to MbedTLS 3.6.4

Signed-off-by: Chris Swan <chris@atsign.com>
2025-07-10 20:01:29 +02:00
Paulo Neves
366629b117 afraid.org-v2-token.json: Fix 404 on update
The URL for update changed and updates were silently failing
with HTTP 404. Fixed the URL

Signed-off-by: Paulo Neves <ptsneves@gmail.com>
2025-07-10 13:23:58 +02:00
Richard Muzik
99c111e391 git: update to 2.46.4
Fixes:
  - CVE-2025-27613
  - CVE-2025-27614
  - CVE-2025-46334
  - CVE-2025-46835
  - CVE-2025-48384
  - CVE-2025-48385
  - CVE-2025-48386

Signed-off-by: Richard Muzik <richard.muzik@turris.com>
2025-07-10 12:59:40 +02:00
George Sapkin
d0932ad76c golang: bump to 1.24.5
go1.24.5 (released 2025-07-08) includes security fixes to the go
command, as well as bug fixes to the compiler, the linker, the runtime,
and the go command.

Link: https://github.com/golang/go/issues?q=milestone%3AGo1.24.5+label%3ACherryPickApproved
Signed-off-by: George Sapkin <george@sapk.in>
2025-07-10 15:44:43 +08:00
Wesley Gimenes
9d0a14ed4e netbird: update to 0.50.1
changelog: https://github.com/netbirdio/netbird/releases/tag/v0.50.1

Signed-off-by: Wesley Gimenes <wehagy@proton.me>
2025-07-10 15:44:19 +08:00
Tianling Shen
29c9bf31c5 cloudflared: change default protocol back to 'auto'
Most of the PQ and FIPS compliant curves are already available
in go 1.24.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-07-10 15:43:56 +08:00
Peter van Dijk
7c9c48d5dd pdns: update to 4.9.7
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
2025-07-09 18:53:10 +08:00
Jianhui Zhao
0858d257e2 rtty: update to 9.0.0
Two new command-line parameters have been added since this version:

* -g, --group=string       Set a group for the device
* -i number                Set heartbeat interval in seconds

changelog: https://github.com/zhaojh329/rtty/releases/tag/v9.0.0

Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
2025-07-09 18:52:43 +08:00
Tan Zien
d3a2fb39a7 unzip: fix build GCC 15.1
refer to:

b7410ac718/main/unzip/gcc15.patch

fix this:

unix/unxcfg.h:120:15: error: conflicting types for 'gmtime'; have 'struct tm *(void)'
  120 |    struct tm *gmtime(), *localtime();
      |               ^~~~~~
In file included from unix/unxcfg.h:119:
/home/nasbdh9/openwrt/staging_dir/toolchain-x86_64_gcc-15.1.0_musl/include/time.h:59:12: note: previous declaration of 'gmtime' with type 'struct tm *(const time_t *)' {aka 'struct tm *(const long int *)'}
   59 | struct tm *gmtime (const time_t *);
      |            ^~~~~~
unix/unxcfg.h:120:26: error: conflicting types for 'localtime'; have 'struct tm *(void)'
  120 |    struct tm *gmtime(), *localtime();
      |                          ^~~~~~~~~
/home/nasbdh9/openwrt/staging_dir/toolchain-x86_64_gcc-15.1.0_musl/include/time.h:60:12: note: previous declaration of 'localtime' with type 'struct tm *(const time_t *)' {aka 'struct tm *(const long int *)'}
   60 | struct tm *localtime (const time_t *);
      |            ^~~~~~~~~

Signed-off-by: Tan Zien <nabsdh9@gmail.com>
2025-07-09 18:52:06 +08:00
Daniel Golle
ab6ebc5c01 unifdef: fix build with GCC 15
Using GCC compiler on the host breaks the build due to 'constexpr' being
a reserved keyword in C22.
Build expecting the sources to be in GNU17 standard fixes that.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2025-07-09 18:50:33 +08:00
Javier Marcet
362b8cda74 docker-compose: Update to version 2.38.2
Release notes:
https://github.com/docker/compose/releases/tag/v2.38.2

Signed-off-by: Javier Marcet <javier@marcet.info>
2025-07-09 18:39:07 +08:00
Daniel Golle
b965e893b7 cryptsetup: update to 2.8.0
See https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.8/v2.8.0-ReleaseNotes

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2025-07-09 17:18:38 +08:00
Robert Marko
3d10039565 shadow: restore PKG_BUILD_DEPENDS to libxcrypt
This reverts commit f18594a00f.

The whole libxcrypt package was reworked in the base repo to fix
libcrypto-compat and the name was restored to libxcrypt.

Signed-off-by: Robert Marko <robimarko@gmail.com>
2025-07-09 11:01:07 +02:00
Eric Leung
dadafe3ac9 ddns-scripts: (cloudflare) add support for custom zone ID and DNS record ID
User can (optionally) set zone_id and dns_record_id in param_opt.
This allows round robin DNS setup in Cloudflare.

Signed-off-by: Eric Leung <contact@ericleung.dev>
2025-07-09 09:48:00 +02:00
Daniel Golle
763f09e19a gnunet: update to 0.24.3
See upstream NEWS file for more information

https://git.gnunet.org/gnunet.git/tree/NEWS?h=v0.24.3

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2025-07-09 00:33:14 +08:00
Daniel Golle
3017332949 gnupg2: update to 2.4.8
Noteworthy changes in version 2.4.8 (2025-05-14)
------------------------------------------------

  * gpg: Fix a verification DoS due to a malicious subkey in the
    keyring.  [T7527]

  * gpg: Fix a regression in 2.4.7 for generating a key from card.
    [T7457]

  * gpg: Fix --quick-add-key for Weierstrass ECC with usage given.
    [T7506]

  * gpg: Fully implement the group key flag.  [rGedd01d8fc4]

  * gpg: Make combination of show-only-fpr-mbox and show-unusable-uid
    work.  [rGeb2a90d343]

  * gpgsm: Do not return an error code when importing a certificate
    with an empty subject.  [T7171]

  * scd: Accept P15 cards with a zero-length label.  [rG18b4ebb28a]

  * keyboxd: Use case-insensitive search for mail addresses.  [T7576]

  * gpgconf: Fix reload and kill of keyboxd.  [T7569]

  * w32: Fix posssible lockup due to lost select results.
    [rG9448d01d61]

  Release-info: https://dev.gnupg.org/T7428

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2025-07-09 00:32:21 +08:00
Daniel Golle
177a676bfb libcurl-gnutls: update to cURL release 8.14.1
Quite a few versions of cURL have been released since last updating
libcurl-gnutls. See release notes since 8.9.1

https://curl.se/ch/8.10.0.html

https://curl.se/ch/8.10.1.html

https://curl.se/ch/8.11.0.html

https://curl.se/ch/8.11.1.html

https://curl.se/ch/8.12.0.html

https://curl.se/ch/8.12.1.html

https://curl.se/ch/8.13.0.html

https://curl.se/ch/8.14.0.html

https://curl.se/ch/8.14.1.html

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2025-07-09 00:31:45 +08:00
Daniel Golle
95a5d32115 libpbc: update to 1.0.0
The author writes on https://crypto.stanford.edu/pbc/news.html

---
pbc-1.0.0 released

Thanks to many contributors for fixes, wrappers, and tests.

It’s been over a decade since the last release, and over two since
pbc-0.0.0. I had thought this project would have faded into obscurity by
now, but I still receive patches occasionally. I challenged myself to
build a new release. Miraculously, the old scripts still seem to work,
and the only non-trivial edit was renaming a few MinGW invocations in a
Makefile.

I bumped up the major version number. At the rate I’m going, this could
be the last release, and it’d be a shame if the project never reached
v1.0!

Tue Jun 10 09:15:34 PM PDT 2025
---

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2025-07-09 00:31:21 +08:00
Daniel Golle
9f52621180 libp11: update to 0.4.16
See release notes since 0.4.13:

https://github.com/OpenSC/libp11/releases/tag/libp11-0.4.14

https://github.com/OpenSC/libp11/releases/tag/libp11-0.4.15

https://github.com/OpenSC/libp11/releases/tag/libp11-0.4.16

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2025-07-09 00:29:57 +08:00
Daniel Golle
ee2c220047 opentracker: update to git HEAD of 2025-04-25
b20b0b8 Do not ignore return value of iob_init_autofree
 123e8aa Silence warning about using a pointer after realloc, take offset of match before

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2025-07-09 00:29:13 +08:00
Daniel Golle
b9575aa51d libxmp: update to 4.6.3
See https://github.com/libxmp/libxmp/releases/tag/libxmp-4.6.3

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2025-07-09 00:28:29 +08:00
Daniel Golle
f2b49654eb lvm2: update to 2.03.33 and libdm to 1.02.207
LVM changes:

Version 2.03.33 - 27th June 2025
================================
  Various spelling, grammar, formatting, test, and build script improvements.
  Override LC_NUMERIC locale if unsuitable for json_std report format.
  Repair raid arrays with transiently lost devices.

Version 2.03.32 - 05th May 2025
===============================
  Lvconvert vdopool conversion properly validates acceptable LVs.
  Accept thin pool data LV as cacheable LV.
  Allow using zram block devices (likely for testing).
  Fix lvresize when resizing COW snapshots already covering origin.
  Fix lvmdbusd read of executed lvm commands output.
  Fix construction of DM UUID for cachevol _cdata and _cmeta devices.
  Ignore PV claims from old metadata when then PV belongs to a new VG.
  Fix integrity metadata rounding.
  Accept --autobackup option in pvresize.

libdm changes:

Version 1.02.207 - 27th June 2025
=================================
  Escape the escape character itself on JSON report format output.
  Fail dm_report_group_create if radix char from locale unsuitable for JSON_STD.

Version 1.02.206 - 05th May 2025
================================
  Add support for using regex in selection criteria for string lists.
  Fix string list selection when using [<item> || <item> ...].

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2025-07-09 00:28:11 +08:00
Daniel Golle
573b0f7d96 exfatprogs: update to 1.2.9
See https://github.com/exfatprogs/exfatprogs/releases/tag/1.2.9

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2025-07-09 00:26:41 +08:00
Daniel Golle
64a71ca1c2 postgresql: update to 17.5
See https://www.postgresql.org/docs/17/release-17-5.html

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2025-07-09 00:26:25 +08:00
Daniel Golle
3265ec3123 libwacom: update to 2.16.1
See release notes for changes
https://github.com/linuxwacom/libwacom/releases/tag/libwacom-2.16.0
https://github.com/linuxwacom/libwacom/releases/tag/libwacom-2.16.1

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2025-07-09 00:25:57 +08:00
Daniel Golle
d4fe5d3a9f libevdev: update to 1.13.4
Apart from documentation and improvements for the meson-based build there
are two functional changes since 1.13.1:

 080d1d0 include: sync event codes with kernel 6.9
 d06abb8 Always push changed mt events when syncing

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2025-07-09 00:25:40 +08:00
Daniel Golle
fba37516d7 libdeflate: update to 1.24
Version 1.24
------------

* The CMake-based build system now supports Apple Framework builds.

* libdeflate now builds for Windows ARM64EC.

* Made another small optimization to the x86 and ARM CRC32 code.

* Fixed a compiler warning on certain platforms (issue #416).

Version 1.23
------------

* Fixed bug introduced in 1.20 where incorrect checksums could be calculated if
  libdeflate was compiled with clang at -O0 and run on a CPU supporting AVX512.

* Fixed bug introduced in 1.20 where incorrect checksums could be calculated in
  rare cases on macOS computers that support AVX512 and are running an older
  version of macOS that contains a bug that corrupts AVX512 registers.  This
  could occur only if code outside libdeflate enabled AVX512 in the thread.

* Fixed build error when using -mno-evex512 with clang 18+ or gcc 14+.

* Increased the minimum CMake version to 3.10.

* Further optimized the x86 CRC code.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2025-07-09 00:25:20 +08:00
Daniel Golle
413f70d9c5 hiredis: update to 1.3.0
See https://github.com/redis/hiredis/releases/tag/v1.3.0

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2025-07-09 00:24:32 +08:00
Daniel Golle
821a5a0b86 ell: update to 0.78
Apart from documentation and improvement to unit tests, the new version
also comes with a small fix:
 4f77dca ecc: Check return value of l_getrandom()

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2025-07-09 00:24:08 +08:00
John Audia
383fba198e jq: bump to v1.8.1
Simple bump to new release

Build system: x86/64
Build-tested: x86/64
Run-tested: x86/64

Signed-off-by: John Audia <therealgraysky@proton.me>
2025-07-08 15:16:40 +08:00
Konstantin Demin
b7d4d32d8f quota: fix setproject binary
This patch fixes both a wrong openat() call and a build failure when using glibc 2.41 in OpenWrt.

Backported upstream commit d9852bd5b76ca65f283929e803b87343942ecb1f

Signed-off-by: Konstantin Demin <rockdrilla@gmail.com>
2025-07-08 08:42:22 +02:00
Noah Meyerhans
3413d5bd9c knot-resolver: disable jemalloc support
knot-resolver will attempt to use jemalloc if it's available.
Jemalloc was added to openwrt packages in PR: Add jemalloc and integrate into bind #26721 [1].
At this time, we would rather continue linking with the libc malloc,
so this PR disables jemalloc support explicitly in the knot-resolver build configuration.

[1] https://github.com/openwrt/packages/pull/26721#issuecomment-2973865778

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
2025-07-08 08:21:38 +02:00
Christian Korber
a6b332f4e9 modemmanager: change to configuration option disable_modem
This commit sets default of `disable_modem` to 1 and disconnects modem.
If set otherwise it keeps the modem connected.

Signed-off-by: Christian Korber <ck@dev.tdt.de>
2025-07-08 07:55:17 +02:00
Yuxi Yang
8f0b5561e1 nebula: bump to 1.9.5
- adopt nebula package
- bump version to 1.9.5
  changelog: https://github.com/slackhq/nebula/releases/tag/v1.9.5
- fix the wrong license
  nebula project license url: https://github.com/slackhq/nebula/blob/master/LICENSE

Signed-off-by: Yuxi Yang <i@bgme.me>
2025-07-08 07:53:48 +02:00
Tianling Shen
062287375c btop: Update to 1.4.4
Removed upstreamed patch.

Release note: https://github.com/aristocratos/btop/releases/tag/v1.4.4

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-07-07 21:04:03 +08:00
Tianling Shen
4df4bf3696 cloudflared: Update to 2025.7.0
Release note: https://github.com/cloudflare/cloudflared/releases/tag/2025.7.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-07-07 21:03:39 +08:00
Tianling Shen
f020276eb6 v2ray-core: Update to 5.35.0
Release note: https://github.com/v2fly/v2ray-core/releases/tag/v5.35.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-07-07 21:03:15 +08:00
Tianling Shen
27d1a4bf37 openlist: Update to 4.0.8
Release note: https://github.com/OpenListTeam/OpenList/releases/tag/v4.0.8

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-07-07 21:02:39 +08:00
John Audia
8ddf8ac209 snort3: update to 3.9.1.0
hangelog: https://github.com/snort3/snort3/releases/tag/3.9.1.0

% # snort --version

   ,,_     -*> Snort++ <*-
  o"  )~   Version 3.9.1.0
   ''''    By Martin Roesch & The Snort Team
           http://snort.org/contact#team
           Copyright (C) 2014-2025 Cisco and/or its affiliates. All rights reserved.
           Copyright (C) 1998-2013 Sourcefire, Inc., et al.
           Using DAQ version 3.0.20
           Using Hyperscan version 5.4.2 2025-06-30
           Using libpcap version 1.10.5 (with TPACKET_V3)
           Using LuaJIT version 2.1.0-beta3
           Using LZMA version 5.6.2
           Using OpenSSL 3.5.0 8 Apr 2025
           Using PCRE2 version 10.42 2022-12-11
           Using ZLIB version 1.3.1

Build system: x86/64
Build-tested: x86/64
Run-tested: x86/64

Signed-off-by: John Audia <therealgraysky@proton.me>
2025-07-07 11:22:39 +03:00
John Audia
babd333c6b libdaq3: update to 3.0.20
Update to latest version.

Changelog: https://github.com/snort3/libdaq/releases/tag/v3.0.20

Signed-off-by: John Audia <therealgraysky@proton.me>
2025-07-07 11:22:39 +03:00
Oldřich Jedlička
9a917dcc54 libssh2: update to 1.11.1
Fixes #26901

Signed-off-by: Oldřich Jedlička <oldium.pro@gmail.com>
2025-07-07 09:49:57 +02:00
Jens Wagner
5d19259d30 perl-io-socket-ssl: bump to 2.094
2.091 to 2.094 provide fixes related to one-sided SSL shutdowns

Changelog: https://metacpan.org/dist/IO-Socket-SSL/changes

Signed-off-by: Jens Wagner <jens@wagner2013.de>
2025-07-07 08:53:35 +02:00
Chris Swan
00b8146bef csshnpd: Preserve .atsign directory
Ensure that the default location for atKeys is preserved on upgrade

Signed-off-by: Chris Swan <chris@atsign.com>
2025-07-07 08:16:10 +02:00
Rui Salvaterra
f2c93e0e25 tor: update to 0.4.8.17 stable
Minor release, see the changelog [1] for what's new.

[1] https://gitlab.torproject.org/tpo/core/tor/-/blob/tor-0.4.8.17/ChangeLog

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
2025-07-06 19:47:22 +02:00
Jens Wagner
0ac2c7416a perl-clone: new module Clone, version 0.47
This module provides a clone() method to make recursive copies of various nested data types.

It is e.g. required by recent versions of HTTP::Message

Signed-off-by: Jens Wagner <jens@wagner2013.de>
2025-07-06 16:21:08 +02:00
Jens Wagner
1d33c0ed9d perl-www: restructure and update to 6.78
Changed maintainer to @jw2013
Updated Makefile to use metacpan.mk download helper

Changelog: https://metacpan.org/dist/libwww-perl/changes

Signed-off-by: Jens Wagner <jens@wagner2013.de>
2025-07-06 16:21:08 +02:00