878 Commits

Author SHA1 Message Date
Stan Grishin
275052d5fa update to 1.2.0-r6
Signed-off-by: Stan Grishin <stangri@melmac.ca>
2025-12-09 02:02:44 +00:00
Josef Schlehofer
07cedfe325 python-ruamel-yaml: update to version 0.18.16
Release notes can be found here:
https://yaml.dev/doc/ruamel-yaml/

Wheel is compiled as ruamel_yaml (underscore), but on pypi it is ruamel.yaml (dot),
it failed on buildbot, so add slight tweak.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 974e8404c6)
2025-12-06 14:15:33 +01:00
Alexandru Ardelean
2ab7c24e28 python-automat: bump to version 25.4.16
Patches can be dropped.
They don't seem to be needed anymore.
The 'visualize' parts seem to be optional.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit 974dc9753c)
2025-12-04 22:07:35 +01:00
Josef Schlehofer
ca47b6ce11 python-unidecode: drop unmaintained package
It looks like based on opened PRs [1],
there is no official support for Python 3.12+.

Unfortunately, this project is still using setup.py,
which is deprecated and no longer supported.
These days project metadata are stored in pyproject.toml
according to PEP 621.

Also, this project does not follow PEP625 as their
wheel name is in uppercase and it should be in lowercase.

[1] https://github.com/avian2/unidecode/pulls
[2] https://peps.python.org/pep-0621/

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 09951a9cfd)
2025-12-04 22:04:58 +01:00
Josef Schlehofer
8ab520eef7 python-yaml: update to version 6.0.3
Release notes:
https://github.com/yaml/pyyaml/releases/tag/6.0.3

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 63aa7856bf)
2025-12-03 20:32:58 +01:00
Josef Schlehofer
cac957166a python-flask-login: update to version 0.6.3
Release notes:
https://github.com/maxcountryman/flask-login/releases/tag/0.6.3

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 0655f4ed3b)
2025-12-03 20:21:10 +01:00
Josef Schlehofer
c4b3cfae10 python-flask-seasurf: update to 2.0.0
Changes can be found here:
https://github.com/maxcountryman/flask-seasurf/tree/2.0.0

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit f02c368344)
2025-12-03 20:21:05 +01:00
Josef Schlehofer
14f766efff python-flask-socketio: update to version 5.5.1
Release notes:
https://github.com/miguelgrinberg/Flask-SocketIO/releases/tag/v5.5.1

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit ff9c11a9d7)
2025-12-03 20:20:58 +01:00
Josef Schlehofer
a9891c2877 python-flask-session: update to version 0.8.0
Release notes:
https://flask-session.readthedocs.io/en/latest/changes.html

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 03303c362d)
2025-12-03 20:20:47 +01:00
Josef Schlehofer
75ba28479e python-pysocks: remove outdated and not maintained package
The latest commit in https://github.com/Anorov/PySocks
is from 2019, it looks outdated and not maintained.

It does not follow PEP 625.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 95fe4bf332)
2025-12-03 20:19:33 +01:00
Josef Schlehofer
b03875c738 python-parsley: drop package
This looks like it is not maintained anymore.
The last commit in the repository [1] is from 2017,
and the last tarball uploaded on PyPI is from 2015.

That tarball does not follow PEP625, because the
wheel and tarball begins with uppercase, it should be
in lowercase and as well it is still using setup.py.

Python these days is using pyproject.toml.

[1] https://github.com/washort/parsley

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 598dc276f7)
2025-12-03 20:19:25 +01:00
Josef Schlehofer
8b1ea353d5 python-zope-interface: update to 8.0.1
Release notes:
https://github.com/zopefoundation/zope.interface/blob/8.0.1/CHANGES.rst

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit c4bcff285b)
2025-12-03 10:48:00 +01:00
Josef Schlehofer
cec82e394e python-zope-event: update to version 6.1
Release notes:
https://github.com/zopefoundation/zope.event/blob/6.1/CHANGES.rst

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit 9218d6ee4f)
2025-12-03 10:47:46 +01:00
Rui Salvaterra
94fbc8eebd tor: update to 0.4.8.21 stable
Minor release, see the changelog [1] for what's new.

[1] https://gitlab.torproject.org/tpo/core/tor/-/blob/tor-0.4.8.21/ChangeLog

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit ac4f614dfe)
2025-12-03 08:41:35 +01:00
Rui Salvaterra
124a7a7c0c tor: add myself as package maintainer
Also remove Peter Wagner (inactive) and Hauke Mehrtens (asked to be removed, in
private conversation).

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit a863fe3d7a)
2025-12-03 08:41:34 +01:00
Rui Salvaterra
b2c88cd6c2 tor: update to 0.4.8.20 stable
Minor release, see the changelog [1] for what's new.

[1] https://gitlab.torproject.org/tpo/core/tor/-/blob/tor-0.4.8.20/ChangeLog

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit 87ed4d7d19)
2025-12-03 08:41:33 +01:00
Yanase Yuki
1eb7e0e4a5 webui-aria2: remove package
It seems this software is no longer maintained.
- The latest upstream commit is 4 years ago.
- Author didn't respond security issue report. (CVE-2023-39141)

No packages depend on this.

Signed-off-by: Yanase Yuki <dev@zpc.st>
(cherry picked from commit 9d6d44487f)
2025-12-03 08:41:31 +01:00
Christian Lachner
0f1e74bb4c haproxy: update to v3.0.12
- Update haproxy PKG_VERSION and PKG_HASH
- See changes: http://git.haproxy.org/?p=haproxy-3.0.git;a=shortlog

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2025-12-03 07:25:09 +02:00
Josef Schlehofer
07ed6152fe django: update to version 5.1.14
Includes many CVEs fixes e.g.
- CVE-2025-64458
- CVE-2025-64459
- CVE-2025-59681
- CVE-2025-59682
and others while bumping this from version 5.1.7

Release notes:
https://docs.djangoproject.com/en/5.2/releases/5.1.14/

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2025-12-02 15:53:26 +02:00
Daniel Golle
960dfa2df8 exim: update to version 4.99
See https://code.exim.org/exim/exim/releases/tag/exim-4.99

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit aed8ca7bd9)
2025-12-01 22:40:02 +00:00
Konstantin Demin
80c90e9049 exim: adjust with glibc and libcrypt-compat
glibc 2.39 has removed libcrypt completely.
solution: link against libxcrypt built with glibc compatibility.

Signed-off-by: Konstantin Demin <rockdrilla@gmail.com>
(cherry picked from commit 14aed6a41b)
2025-12-01 22:40:02 +00:00
Noah Meyerhans
2dcc84370c kea: bump to 2.6.4
Create kea state directories with mode 0750 per restrictions added in 2.6.3

Refresh patches

Fixes the following CVEs:

* CVE-2025-32803: Change the umask to no group write and no other access
  at the entry of Kea server/agent binaries
* CVE-2025-32801: kea-dhcp4, kea-dhcp6, kea-dhcp-ddns, and kea-ctrl-agent will
  now only load hook libraries from the default installation directory

Full upstream changelogs are available at:

https://downloads.isc.org/isc/kea/2.6.1/Kea-2.6.1-ReleaseNotes.txt
https://downloads.isc.org/isc/kea/2.6.2/Kea-2.6.2-ReleaseNotes.txt
https://downloads.isc.org/isc/kea/2.6.3/Kea-2.6.3-ReleaseNotes.txt
https://downloads.isc.org/isc/kea/2.6.4/Kea-2.6.4-ReleaseNotes.txt

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
2025-12-01 15:46:05 -05:00
Rosen Penev
0f24c4daf8 httping: fix compilation with full NLS
-lintl is needed.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 824b2c09a0)
2025-11-29 17:19:59 +01:00
Eric Fahlgren
ea7cdeb0b6 owut: update to 2025.11.16
Enhancements:
    efahl/owut@af42b8afe3 owut: minor improvement on logging API
    efahl/owut@223d6e64b7 owut: add 'clean slate' option to reset to default packages
    efahl/owut@3a35acb7a0 owut: typos and wording fixes
    efahl/owut@eba5101ba7 owut: report counts of failed package builds
    efahl/owut@365eed1f26 owut: use library glob

Signed-off-by: Eric Fahlgren <ericfahlgren@gmail.com>
(cherry picked from commit 1545e6510f)
2025-11-18 13:47:24 +08:00
Dirk Brenken
e61d672e76 travelmate: update 2.2.1-6
- rework the iw device detection in the scan function
- remove any limits from the radio selection
- control the reverse radio processing order with a separate option 'trm_revradio'
- tweak a few (debug) log statements
- LuCI updates (separate commit)
- readme update

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 1a1c0d07a9)
2025-11-14 22:01:39 +01:00
Hannu Nyman
89c5d7ac77 nano: update to version 8.7
Update to version 8.7

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit d543522dbe)
2025-11-13 18:02:43 +02:00
Wesley Gimenes
07ffd2963d netbird: update to 0.59.12
changelog: https://github.com/netbirdio/netbird/releases/tag/v0.59.12

Signed-off-by: Wesley Gimenes <wehagy@proton.me>
(cherry picked from commit 5dccbddf10)
2025-11-11 18:31:27 +02:00
Wesley Gimenes
c124a7b3e6 netbird: update to 0.58.2
changelog: https://github.com/netbirdio/netbird/releases/tag/v0.58.2

Signed-off-by: Wesley Gimenes <wehagy@proton.me>
(cherry picked from commit 48b26e4463)
2025-11-11 18:31:27 +02:00
Wesley Gimenes
6da91701c3 netbird: update to 0.57.1
changelog: https://github.com/netbirdio/netbird/releases/tag/v0.57.1

Signed-off-by: Wesley Gimenes <wehagy@proton.me>
(cherry picked from commit 60ee485816)
2025-11-11 18:31:27 +02:00
Wesley Gimenes
ec5eaa46e9 netbird: update to 0.55.1
changelog: https://github.com/netbirdio/netbird/releases/tag/v0.55.1

Signed-off-by: Wesley Gimenes <wehagy@proton.me>
(cherry picked from commit 0bb7df85b855e35c8388122afc962054117d1c70)
2025-11-11 18:31:27 +02:00
Wesley Gimenes
391931477d netbird: update to 0.53.0 with config fix
changelog: https://github.com/netbirdio/netbird/releases/tag/v0.53.0

Update init file to include `NB_CONFIG="/etc/netbird/config.json"`
variable, ensuring configuration compatibility as before (fixes issue
introduced by profiles feature in 0.52.2). Existing configurations remain
compatible.

Note: license for some components (`management`, `relay`, `signal`) changed
to **AGPLv3**. These components aren't packaged for OpenWrt, so there's no
immediate effect, but record the change for future reference.

Signed-off-by: Wesley Gimenes <wehagy@proton.me>
(cherry picked from commit 7c3e0c1e5b804989b8e4d4310fec240cd43c9776)
2025-11-11 18:31:27 +02:00
Wesley Gimenes
7f9af2c24f netbird: update to 0.52.2
changelog: https://github.com/netbirdio/netbird/releases/tag/v0.52.2

`netbird` now supports profiles [1]. The configuration file has been
moved from `/etc/netbird/config.json` to `/var/lib/netbird/`. The
migration is handled by `netbird` itself.

However, in OpenWrt, the `/var` directory is a symbolic link to
`/tmp`, which is a temporary directory. This can result in
configuration loss after rebooting or flashing a new image. This
issue will be fixed in the next release, 0.53.0.
**I reported this behavior upstream [2].**

[1]: https://docs.netbird.io/how-to/profiles
[2]: https://github.com/netbirdio/netbird/issues/4322

Signed-off-by: Wesley Gimenes <wehagy@proton.me>
(cherry picked from commit f06a83c461810296615433a4ad31743d68c162a1)
2025-11-11 18:31:27 +02:00
Wesley Gimenes
8abcf5b207 netbird: update to 0.51.2
changelog: https://github.com/netbirdio/netbird/releases/tag/v0.51.2

Signed-off-by: Wesley Gimenes <wehagy@proton.me>
(cherry picked from commit eb3165b80c)
2025-11-11 18:31:27 +02:00
John Audia
17114bb326 tree: bump to 2.2.1
Changelog: https://github.com/Old-Man-Programmer/tree/blob/master/CHANGES

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit b939b3e793)
2025-11-09 12:16:57 +02:00
Hannu Nyman
b087edcd72 nano: set nano as default EDITOR for nano-plus/full
Set nano as the default EDITOR via /etc/profile.d for those apps
that respect the variable. Only for nano-plus and nano-full variants.

Suggested-by: Anthony Sepa <protectivedad@gmail.com>
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit d4f6c9c322)
2025-11-09 12:15:32 +02:00
Russell Senior
48f1c95d9f patch: update to v2.8
Delete patches already upstream.

Signed-off-by: Russell Senior <russell@personaltelco.net>
(cherry picked from commit f17c283cda)
2025-11-09 12:09:11 +02:00
George Sapkin
1f50c3f9a6 check-autorelease-deprecation: drop workflow
Drop the workflow since the setting has been deprecated over three years
ago.

Link: https://github.com/openwrt/packages/pull/27799#issuecomment-3506689211
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit f08c7993bd)
2025-11-08 20:09:35 +02:00
Ray Wang
6e96733db5 hev-socks5-server: update to 2.11.0
Upstream changelog:
https://github.com/heiher/hev-socks5-server/releases/tag/2.11.0

Signed-off-by: Ray Wang <git@hev.cc>
(cherry picked from commit ea11a81f6b)
2025-11-08 11:35:52 +02:00
Ray Wang
eac8996956 hev-socks5-tproxy: update to 2.10.0
Upstream changelog:
https://github.com/heiher/hev-socks5-tproxy/releases/tag/2.10.0

Signed-off-by: Ray Wang <git@hev.cc>
(cherry picked from commit a3acb2f4c3)
2025-11-08 11:35:34 +02:00
Ray Wang
84f89d13d8 hev-socks5-tunnel: update to 2.14.0
Upstream changelog:
https://github.com/heiher/hev-socks5-tunnel/releases/tag/2.14.0

Signed-off-by: Ray Wang <git@hev.cc>
(cherry picked from commit 4f84f78b4d)
2025-11-08 11:35:17 +02:00
George Sapkin
a2b8a064c6 sqlite3: bump to 3.51.0
Changelog: https://sqlite.org/releaselog/3_51_0.html
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit 9a62f4f67b)
2025-11-07 19:38:30 +02:00
Dirk Brenken
414afefa14 travelmate: update 2.2.1-5
- fix a cornercase issue in the scanning function with hidden uplinks

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit f9c132b3c5)
2025-11-07 17:30:01 +01:00
Tianling Shen
f1248cf640 btop: Update to 1.4.5
Release note: https://github.com/aristocratos/btop/releases/tag/v1.4.5

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 728dc6dd3a)
2025-11-07 21:34:16 +08:00
Dirk Brenken
fab57696d8 travelmate: update 2.2.1-4
- fix a possible race condition in the scan function
- limit the max. signal strength to 100
- cosmetics

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit b8486bd711)
2025-11-06 23:44:40 +01:00
Peter van Dijk
bb17d880b7 pdns-recursor: security update to 5.1.8
includes fix for CVE-2025-30192 (from 5.1.6)
includes fixes for CVE-2025-59023 and CVE-2025-59024 (from 5.1.8)

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
2025-11-06 22:26:22 +01:00
Anton P.
56ebb23cef sing-box: update to 1.12.12
changelog: https://github.com/SagerNet/sing-box/releases/tag/v1.12.12

Signed-off-by: Anton P. <dragunap@gmail.com>
(cherry picked from commit 3b802d28fe)
2025-11-07 02:21:16 +08:00
Gagan Deep
89871b5dbf openwisp-config: upgrade to 1.2.0
Upgrades openwisp-config package to 1.2.0

Signed-off-by: Gagan Deep <pandafy.dev@gmail.com>
(cherry picked from commit 61a81ccc7e)
2025-11-06 17:44:01 +02:00
Gagan Deep
ae100b2150 openwisp-monitoring: upgrade to 0.3.0
Upgraded openwisp-monitoring package to 0.3.0

Signed-off-by: Gagan Deep <pandafy.dev@gmail.com>
(cherry picked from commit 74e6bcc011)
2025-11-06 17:43:17 +02:00
Michael Heimpold
f8c3a1fd94 php8: update to 8.3.27
Upstream changelog:
https://www.php.net/ChangeLog-8.php#8.3.27

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2025-11-03 08:19:31 +01:00
Josef Schlehofer
1b990e991a python-setuptools: update to version 80.9.0
Release notes:
https://setuptools.pypa.io/en/stable/history.html#v80-9-0

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 9bf59d5f67)
2025-11-02 16:46:55 +01:00
Josef Schlehofer
45bfa5f87f python-wheel: update to 0.45.1
Release notes:
https://github.com/pypa/wheel/releases/tag/0.45.1

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 182156cfad)
2025-11-02 16:46:43 +01:00
Josef Schlehofer
5c58c629c8 strongswan: add build dependency for python and explicitly use python3
Before:
checking for python... /myworkingdir/build/staging_dir/host/bin/python
checking for python version... xcode-select: Failed to locate 'python', requesting installation of command line developer tools.
checking for python platform... xcode-select: Failed to locate 'python', requesting installation of command line developer tools.
checking for GNU default python prefix... ${prefix}
checking for GNU default python exec_prefix... ${exec_prefix}
checking for python script directory (pythondir)... xcode-select: Failed to locate 'python', requesting installation of command line developer tools.
checking for python extension module directory (pyexecdir)... xcode-select: Failed to locate 'python', requesting installation of command line developer tools.

After:
checking for python version... 3.11
checking for python platform... darwin
checking for GNU default python prefix... ${prefix}
checking for GNU default python exec_prefix... ${exec_prefix}
checking for python script directory (pythondir)... ${PYTHON_PREFIX}/lib/python3.11/site-packages
checking for python extension module directory (pyexecdir)... ${PYTHON_EXEC_PREFIX}/lib/python3.11/site-packages

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit dcb010bb43)
2025-11-02 16:46:08 +01:00
Josef Schlehofer
1c13afebe7 python-calver: update to version 2025.10.20
Fixes:
 SetuptoolsDeprecationWarning: License classifiers are deprecated.
!!

        ********************************************************************************
        Please consider removing the following classifiers in favor of a SPDX license expression:

        License :: OSI Approved :: Apache Software License

        See https://packaging.python.org/en/latest/guides/writing-pyproject-toml/#license for details.
        ********************************************************************************

!!
  self._finalize_license_expression()

Release notes:
https://github.com/di/calver/releases/tag/2025.10.20

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 7f64f6c0cf)
2025-11-02 16:45:48 +01:00
Josef Schlehofer
c8941adc2f python-cython: update to version 3.1.5
Fixes:
Traceback (most recent call last):
  File "<frozen runpy>", line 198, in _run_module_as_main
  File "<frozen runpy>", line 88, in _run_code
  File "/turris/build/staging_dir/hostpkg/lib/python3.11/site-packages/installer/__main__.py", line 98, in <module>
_main(sys.argv[1:], "python -m installer")
  File "/turris/build/staging_dir/hostpkg/lib/python3.11/site-packages/installer/__main__.py", line 86, in _main
with WheelFile.open(args.wheel) as source:
  File "/turris/build/staging_dir/hostpkg/lib/python3.11/contextlib.py", line 137, in __enter__
return next(self.gen)
   ^^^^^^^^^^^^^^
  File "/turris/build/staging_dir/hostpkg/lib/python3.11/site-packages/installer/sources.py", line 162, in open
with zipfile.ZipFile(path) as f:
 ^^^^^^^^^^^^^^^^^^^^^
  File "/turris/build/staging_dir/hostpkg/lib/python3.11/zipfile.py", line 1311, in __init__
self.fp = io.open(file, filemode)
  ^^^^^^^^^^^^^^^^^^^^^^^
FileNotFoundError: [Errno 2] No such file or directory: '/turris/build/build_dir/hostpkg/pypi/Cython-3.0.10//openwrt-build/Cython-3.0.10-*.whl'

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 7f233be4ce)
2025-10-31 12:48:40 +01:00
Josef Schlehofer
4da621cb23 bigclown-gateway: backport pending patch to fix JSON dumps
Pull request:
https://redirect.github.com/hardwario/bch-gateway/pull/20

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 5a9763deab)
2025-10-31 12:48:21 +01:00
Josef Schlehofer
f2f149b569 bigclown-gateway: update to version 1.17.0
Release notes:
https://github.com/hardwario/bch-gateway/releases/tag/v1.17.0

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 15121d222b)
2025-10-31 12:48:16 +01:00
Josef Schlehofer
7113624afb python-markupsafe: update to version 3.0.3
Release notes:
https://github.com/pallets/markupsafe/releases/tag/3.0.3

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 69539619b6)
2025-10-31 12:48:11 +01:00
Josef Schlehofer
7877590b82 python-uci: drop patches due to newer setuptools
These patches were required with older setuptools version,
but in Python 3.11.4 is bundled setuptools updated, thus
we can remove these patches.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit f4395c5d31)
2025-10-31 12:43:01 +01:00
Josef Schlehofer
5ea20ec4f0 python3: update to version 3.11.4
In this release, there is updated setuptools, so update
it as well.

Fixes CVEs:
- CVE-2025-47273
- CVE-2024-6345

Release notes:
https://pythoninsider.blogspot.com/2025/10/python-31212-31114-31019-and-3924-are.html

Patch:
- 0001-Adjust-library-header-paths-for-cross-compilation.patch
comes from buildroot [1], but they removed it as they switched to Python 3.12,
however Python 3.11 still supports distutils, but it is marked as deprecated [2]
and it will be gone in 3.12. So, don't rebase it this time as this patch does not apply
anymore due to this commit [3] and sooner switch to more up-to-date Python3 version.

[1] b37e4a5f56
[2] https://peps.python.org/pep-0632/
[3] 88eb8cc66f

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit ef509da52b)
2025-10-31 12:42:55 +01:00
Josef Schlehofer
5b9624dc6e umurmur: Use example config and add own init script
Files such as config file and init script related to OpenWrt
were removed in upstream [1]. Config file was same as umurmur.conf.example,
thus use it and init script, we need to ship our own. Add a simple one.

[1] 209edb5c88

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit b03e655bf0)
2025-10-31 08:03:59 +01:00
Josef Schlehofer
ecb4600c67 umurmur: move config file to its default location
This was changed in version 0.3.1 [1]

Fixes initial start of umurmur:
```
root@turris:~# umurmurd
Error in config file /etc/umurmur/umurmur.conf line 0: file I/O error
```

And also while running help of umurmurd, the defailt location is /etc/umurmur/umurmur.conf
```
Usage: umurmurd [-d] [-r] [-h] [-p <pidfile>] [-t] [-c <conf file>] [-a <addr>] [-b <port>]
       -c <conf file> - Specify configuration file (default /etc/umurmur/umurmur.conf)
```
[1] 4f3ed41357

Fixes: c4a23ca996 ("umurmur: update to version 0.3.1")

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 3d6be64ea3)
2025-10-31 08:03:51 +01:00
Josef Schlehofer
607aa2a4b3 syslog-ng: add dependency for ivykis
Replace embedded ivykis with a separate package to improve
dependency management and enable library reuse.

The ivykis library now properly supports io_uring when
CONFIG_KERNEL_IO_URING is enabled.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 8fcf45d05a)
2025-10-29 11:53:52 +01:00
Josef Schlehofer
74c7b55236 ivykis: add new package
Libivykis, an asynchronous I/O readiness notification library.
This library is required by syslog-ng and potentially other packages
that need event-driven I/O handling.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit c92d120690)
2025-10-29 11:53:52 +01:00
Josef Schlehofer
9110dd9e2a python-build: update to version 1.3.0
Release notes:
https://github.com/pypa/build/releases/tag/1.3.0

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 4ba2c1487c)
2025-10-29 11:53:52 +01:00
Josef Schlehofer
abf944ce4e python-flit-core: update to version 3.12.0
Release notes:
5714d1f78f/doc/history.rst (version-312)

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit caed169831)
2025-10-29 11:53:51 +01:00
Eric Fahlgren
8dda4c85f9 owut: update to 2025.10.24
Bug fixes:
    efahl/owut@07453922aa owut: create uclient singleton to minimize memory usage
    efahl/owut@f073587891 owut: fix bug in version number parsing

Signed-off-by: Eric Fahlgren <ericfahlgren@gmail.com>
(cherry picked from commit 904ad4a24c)
2025-10-25 19:02:31 +03:00
Fabian Lipken
271029f672 fx: update to 39.0.1
update fx from version 36.0.3 to 39.0.1

Signed-off-by: Fabian Lipken <dynasticorpheus@gmail.com>
(cherry picked from commit 08a431f446)
Signed-off-by: Gregory Gullin <garuwex@gmail.com>
2025-10-25 08:36:41 +03:00
Fabian Lipken
81d40c53bf fx: update to 36.0.3
This commit updates fx to version 36.0.3

For more details, please refer to release details:
https://github.com/antonmedv/fx/releases/tag/36.0.3

Signed-off-by: Fabian Lipken <dynasticorpheus@gmail.com>
(cherry picked from commit 8fff19135e)
Signed-off-by: Gregory Gullin <garuwex@gmail.com>
2025-10-25 08:36:41 +03:00
Fabian Lipken
db7801ec39 fx: update to 36.0.2
Signed-off-by: Fabian Lipken <dynasticorpheus@gmail.com>
(cherry picked from commit 4632f4553f)
Signed-off-by: Gregory Gullin <garuwex@gmail.com>
2025-10-25 08:36:41 +03:00
Fabian Lipken
fd188f0ae0 fx: update to 36.0.1
Signed-off-by: Fabian Lipken <dynasticorpheus@gmail.com>
(cherry picked from commit d8a233f90a)
Signed-off-by: Gregory Gullin <garuwex@gmail.com>
2025-10-25 08:36:41 +03:00
Tianling Shen
d8568263a5 cloudreve: Update to 4.9.2
> Breaking change:
> If you are using AlibabaCloud OSS storage policy, please go to the
> admin dashboard after upgrading, edit each OSS storage policy,
> fill in the correct Region in Basic info and save it, otherwise
> the storage policy will not continue to work.

Changelog:
- https://github.com/cloudreve/cloudreve/releases/tag/4.9.0
- https://github.com/cloudreve/cloudreve/releases/tag/4.9.1
- https://github.com/cloudreve/cloudreve/releases/tag/4.9.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 480d149323)
2025-10-23 15:39:24 +08:00
Tianling Shen
1bc126120d cloudreve: Update to 4.8.0
Release note:
- https://github.com/cloudreve/cloudreve/releases/tag/4.7.0
- https://github.com/cloudreve/cloudreve/releases/tag/4.8.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 5bd131c39d)
2025-10-23 15:39:21 +08:00
Tianling Shen
be6c2e14bf cloudreve: Update to 4.6.0
Changelogs:
  - https://github.com/cloudreve/cloudreve/releases/tag/4.5.0
  - https://github.com/cloudreve/cloudreve/releases/tag/4.6.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 11b0340c5c)
2025-10-23 15:39:11 +08:00
Tianling Shen
98ff7a1262 cloudreve: Update to 4.4.1
Release note: https://github.com/cloudreve/cloudreve/releases/tag/4.4.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 1dc51297e5)
2025-10-23 15:39:08 +08:00
Tianling Shen
0213954957 cloudreve: Update to 4.4.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 77783f9706)
2025-10-23 15:39:05 +08:00
Tianling Shen
393d45de3a dos2unix: Update to 7.5.3
2025-10-14: Version 7.5.3

  * Fix: Exit with non-zero code if the conversion is aborted
    due to a binary file.
  * Fix: Exit with zero code when an unicode conversion error
    occurs in quiet mode.
  * Updated Brazilian Portuguese, Catalan, Chinese (traditional), Dutch,
    Friulian, Georgian, and Serbian translations.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 49dbbf0dc9)
2025-10-23 15:38:32 +08:00
Tianling Shen
d42abaeb22 openlist: Update to 4.1.5
Release note: https://github.com/OpenListTeam/OpenList/releases/tag/v4.1.5

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit d93d55d28a)
2025-10-23 15:38:26 +08:00
Noah Meyerhans
801e26c8c4 bind: bump to 9.20.15
Fixes the following security issues:

- CVE-2025-8677: DNSSEC validation fails if matching but invalid
  DNSKEY is found.
- CVE-2025-40778 Address various spoofing attacks.
- CVE-2025-40780 Cache-poisoning due to weak pseudo-random number
  generator.

The complete list of changes from version 9.20.11 is available in the
upstream changelog at
https://ftp.isc.org/isc/bind9/9.20.15/doc/arm/html/changelog.html

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
(cherry picked from commit 59465b95b8)
2025-10-22 19:17:19 -04:00
Dirk Brenken
d73732c136 travelmate: update 2.2.1-3
- fix minor log issues
- restore old, efficient log viewer (in LuCI)

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit cf40213423)
2025-10-22 21:01:05 +02:00
Nate Robinson
081ed7ed23 lf: update to r38
https://github.com/gokcehan/lf/releases/tag/r38

Signed-off-by: Nate Robinson <nrobinson2000@me.com>
(cherry picked from commit 1fd9f95a37)
Signed-off-by: Gregory Gullin <garuwex@gmail.com>
2025-10-22 12:56:51 +02:00
Josef Schlehofer
5cf245f6ad python-hatch-requirements-txt: bump to 0.4.1
Release notes:
https://github.com/repo-helper/hatch-requirements-txt/releases/tag/v0.4.1

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit f182a567aa)
2025-10-22 12:55:50 +02:00
Josef Schlehofer
80e392b49c syslog-ng: update to version 4.10.2
Release notes:
https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-4.10.2

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit b5d9b7cf9d)
2025-10-22 12:55:45 +02:00
Joel Low
961d703b8b strongswan: preserve changed configuration files
After reinstalling the packages with the preserved configuration files
after a sysupgrade, the reinstalled package config files overwrite what
is on disk rather than being placed as conf-opkg. Defining these config
files will preserve them appropriately.

Signed-off-by: Joel Low <joel@joelsplace.sg>
(cherry picked from commit 03088536db)
2025-10-22 12:30:26 +02:00
Robert Marko
83bde05206 strongswan: mark UCI plugin as broken
UCI plugin in strongswan has been broken for years, and now its causing
strongswan to fail compilation.

So, instead of the whole strongswan package to be failing and missing from
feeds simply make UCI plug depend on @BROKEN.

Signed-off-by: Robert Marko <robimarko@gmail.com>
(cherry picked from commit a8c89a0c77)
2025-10-22 12:30:05 +02:00
Josef Schlehofer
b021aba0b4 multi-arch-test-build: run it only after the Formality check succeeds
Most of the time, when people contribute to the repository for the first time
 (or after a longer break), the multi-arch-test-build passes, but the
formality check fails and requires the contributor to make some changes.

This creates unnecessary load on the CI/CD, since the multi-arch-test-build
runs again even though it already passed, while other PRs are waiting for a runner.
Hopefully, this change will help decrease the waiting time.

Proposed changes:

- Run the formality check first, and only trigger the package tests afterwards.
This can be done using needs: https://docs.github.com/en/actions/reference/workflows-and-actions/workflow-syntax#jobsjob_idneeds

- Merge formal.yml into multi-arch-test-build.yml so that needs can be used.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 4474f539bb)
2025-10-22 01:44:45 +02:00
Felix Fietkau
ef893976e7 python3-host.mk: disable pip --no-binary on macOS
For some reason, pip builds a broken Cython, which segfaults on attempting
to install wheel. Work around this by allowing to use precompiled wheels.

Signed-off-by: Felix Fietkau <nbd@nbd.name>
(cherry picked from commit d798ccce9a)
2025-10-22 01:09:51 +02:00
W. Michael Petullo
58eb9bbf1d python-networkx: update to 3.5
Upstream list of changes is available at
https://github.com/networkx/networkx/releases/tag/networkx-3.5.

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit ac839af473)
2025-10-22 01:09:12 +02:00
Josef Schlehofer
d04de4200e yt-dlp: update to version 2025.9.26
Release notes:
https://github.com/yt-dlp/yt-dlp/releases/tag/2025.09.23
https://github.com/yt-dlp/yt-dlp/releases/tag/2025.09.26

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit c7253f97a3)
2025-10-22 01:07:55 +02:00
Josef Schlehofer
34a99de9c2 gzip: update to version 1.14
Add TARGET_CFLAGS += -std=gnu17
to fix following error discovered by CI/CD:
2025-09-30T23:53:47.3168066Z In file included from gzip.c:66:
2025-09-30T23:53:47.3189341Z gzip.c:131:34: error: expected declaration specifiers or '...' before numeric constant
2025-09-30T23:53:47.3190258Z   131 | # define BUFFER_ALIGNED alignas (4096)
2025-09-30T23:53:47.3190760Z       |                                  ^~~~
2025-09-30T23:53:47.3191259Z gzip.h:108:39: note: in definition of macro 'DECLARE'
2025-09-30T23:53:47.3191864Z   108 | #  define DECLARE(type, array, size)  type array[size]
2025-09-30T23:53:47.3192411Z       |                                       ^~~~
2025-09-30T23:53:47.3192942Z gzip.c:135:13: note: in expansion of macro 'BUFFER_ALIGNED'
2025-09-30T23:53:47.3193587Z   135 | DECLARE(uch BUFFER_ALIGNED, inbuf,  INBUFSIZ +INBUF_EXTRA);
2025-09-30T23:53:47.3194137Z       |             ^~~~~~~~~~~~~~
2025-09-30T23:53:47.3194752Z gzip.c:131:34: error: expected declaration specifiers or '...' before numeric constant
2025-09-30T23:53:47.3195442Z   131 | # define BUFFER_ALIGNED alignas (4096)
2025-09-30T23:53:47.3195880Z       |                                  ^~~~
2025-09-30T23:53:47.3196330Z gzip.h:108:39: note: in definition of macro 'DECLARE'
2025-09-30T23:53:47.3197297Z   108 | #  define DECLARE(type, array, size)  type array[size]
2025-09-30T23:53:47.3197829Z       |                                       ^~~~
2025-09-30T23:53:47.3198342Z gzip.c:136:13: note: in expansion of macro 'BUFFER_ALIGNED'
2025-09-30T23:53:47.3199113Z   136 | DECLARE(uch BUFFER_ALIGNED, outbuf, OUTBUFSIZ+OUTBUF_EXTRA);
2025-09-30T23:53:47.3199957Z       |             ^~~~~~~~~~~~~~
2025-09-30T23:53:47.3200589Z gzip.c:131:34: error: expected declaration specifiers or '...' before numeric constant
2025-09-30T23:53:47.3201250Z   131 | # define BUFFER_ALIGNED alignas (4096)
2025-09-30T23:53:47.3201688Z       |                                  ^~~~
2025-09-30T23:53:47.3202128Z gzip.h:108:39: note: in definition of macro 'DECLARE'
2025-09-30T23:53:47.3202665Z   108 | #  define DECLARE(type, array, size)  type array[size]
2025-09-30T23:53:47.3203150Z       |                                       ^~~~
2025-09-30T23:53:47.3203642Z gzip.c:138:13: note: in expansion of macro 'BUFFER_ALIGNED'
2025-09-30T23:53:47.3204203Z   138 | DECLARE(uch BUFFER_ALIGNED, window, 2L*WSIZE);
2025-09-30T23:53:47.3204684Z       |             ^~~~~~~~~~~~~~

- Release announcement:
https://lists.gnu.org/archive/html/info-gnu/2025-04/msg00007.html

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 3bf64e39b2)
2025-10-22 01:05:53 +02:00
Josef Schlehofer
91b94c2cb9 tor: update to version 0.4.8.18
Release notes:
https://gitlab.torproject.org/tpo/core/tor/-/blob/tor-0.4.8.18/ChangeLog

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 9bfc5a2a74)
2025-10-22 01:05:46 +02:00
George Sapkin
1326c21ec1 python-trove-classifiers: bump to 2025.9.11.17
Adds classifier for Python 3.15.
More details can be found in their tags:
https://github.com/pypa/trove-classifiers/releases

Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit d856cb45e3)
2025-10-22 01:05:38 +02:00
Robert Marko
28c2351f8f mhz: update to latest version
Update mhz to latest version to include new calibration features.

Signed-off-by: Robert Marko <robert.marko@sartura.hr>
(cherry picked from commit 7ef10e0364)
2025-10-22 01:04:54 +02:00
Jan Hák
644ab8c708 knot: update to version 3.5.1
Release notes: https://www.knot-dns.cz/2025-10-16-version-351.html

Delete patches already merged into master branch

Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 9fe9b952f7)
2025-10-22 01:03:10 +02:00
Petr Štetiar
1991fde201 lvm2: install: fix "Argument list too long" error when copying symlinks
It was reported that in some build environments the install step fails
with following:

 find /home/.../buildsystem/build_dir/target-aarch64-unknown-linux-gnu_musl/lvm2-normal/LVM2.2.03.22/ipkg-install/usr/sbin/ -type l -exec cp -fpR -a {} /home/.../buildsystem/build_dir/target-aarch64-unknown-linux-gnu_musl/lvm2-normal/LVM2.2.03.22/.pkgdir/lvm2/sbin/ \;
 make[6]: /bin/sh: Argument list too long

This is likely happening once the number of symlinks exceeds the shell's
maximum argument limit.

So lets fix it by switching to more reliable xargs based solution:

 print0/xargs -0 to handle filenames with special characters
 xargs -r to skip execution if no files are found
 cp -t to specify the target directory once instead of for each file

Fixes: #26552
Signed-off-by: Petr Štetiar <ynezz@true.cz>
(cherry picked from commit 073b460cb1)
2025-10-22 01:02:35 +02:00
Finn Landweber
9f66360e54 python-setuptools-scm: update to 8.1.0
Signed-off-by: Finn Landweber <finn@landweber.xyz>
(cherry picked from commit c6989438c3)
2025-10-22 00:29:03 +02:00
Alexandru Ardelean
0f4782d144 python-lxml: bump to version 5.4.0
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit eeacf8474b)
2025-10-22 00:20:09 +02:00
Alexandru Ardelean
c1a3e22aaf python-lxml: bump to version 5.3.0
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit 9060de91b0)
2025-10-22 00:20:04 +02:00
Wei-Ting Yang
62819b7e56 python-urllib3: update to 2.5.0
Changelogs can be found in https://github.com/urllib3/urllib3/releases.

Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com>
(cherry picked from commit c6ba0ce292)
2025-10-21 23:49:43 +02:00
Josef Schlehofer
e160ba18d5 python-hatchling: update to version 1.27.0
Release notes:
https://github.com/pypa/hatch/releases/tag/hatchling-v1.27.0

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 4d521dfbeb)
2025-10-21 23:49:42 +02:00
Wei-Ting Yang
fb35b87809 python-packaging: update to 25.0
Changelogs can be found in https://github.com/pypa/packaging/releases.

Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com>
(cherry picked from commit 7289cb0119)
2025-10-21 23:49:42 +02:00
Andrea Pesaresi
f1470815f4 ksmbd-tools: update to 3.5.5
Major change is:
 - set server signing to auto by default.

In recent versions of Windows 11, server signing is required.
However, server signing is disabled by default in ksmbd server.
So It is recommended to set server signing = auto as default,
so that it is used whenever it is required.

Signed-off-by: Andrea Pesaresi <andreapesaresi82@gmail.com>
(cherry picked from commit a7d51c511c)
2025-10-20 18:29:44 +03:00
Andrea Pesaresi
614450c850 ksmbd-tools: bump to 3.5.4
The major changes are:
 - Add max ip connections parameter. (ready for future upstream fix) at the moment is reverted by: 18bdeda011
 - unlock follow symlinks parameter to support symlink.
 - send bind_interfaces_only parameter to ksmbd.

Signed-off-by: Andrea Pesaresi <andreapesaresi82@gmail.com>
(cherry picked from commit 47f1bfa717)
2025-10-20 18:29:32 +03:00
Andrea Pesaresi
129e357fb8 ksmbd-tools: adjust smb2 max read/write/trans and cache
Now for all devices with every size of RAM it is set to:
`smb2 max read = 64K`
`smb2 max write = 64K`
`smb2 max trans = 64K`

Instead of fixed value to 64K is better to check RAM size and adjust to:

32 ~ 64MB RAM, set the value to 64K
64 ~ 128MB, set it to 128KB
128 ~ 256MB, set it to 1MB
More than 256MB leave default size to 4MB

With 64MB and 128MB is better also to disable the read/write cache
`cache read buffers = no`
`cache write buffers = no`

Signed-off-by: Andrea Pesaresi <andreapesaresi82@gmail.com>
(cherry picked from commit 0ca4794564)
2025-10-20 18:29:20 +03:00
Dirk Brenken
60606d6f61 travelmate: update 2.2.1-2
- fix a logical glitch in opensta-handling
- add a list option  'trm_ssidfilter' to maintain a list of SSID patterns
   for filtering/skipping specific open uplinks, e.g. 'Chromecast*' (fix #26406)

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 65b935cb58)
2025-10-19 20:20:53 +02:00
Ralph Siemsen
ea6950a07d znc: do not watch znc.conf for changes
ZNC can modify its own config file (znc.conf) during runtime, for
example using controlpanel or webadmin modules. Manually editing the
znc.conf file while znc is running is strongly discouraged.

Thus prodc should not watch this file, it would just lead to znc being
restarted unnecessarily.

As it happens, no restarts were done, because the watched path was
specified incorrectly. It used ZNC_CONFIG instead of ZNC_CONFIG_DIR,
and so it watched /tmp/etc/znc/configs/znc.conf/configs/znc.conf which
does not exist.

Remove the watch of znc.conf as it is not needed.

Signed-off-by: Ralph Siemsen <ralph.siemsen@linaro.org>
(cherry picked from commit 00feb12444)
Signed-off-by: Jonas Gorski <jonas.gorski@gmail.com>
2025-10-19 16:05:41 +02:00
Dirk Brenken
613f7d217e travelmate: release 2.2.1
- add a new lan/wan subnet check, to to show conflicts with router LAN network
- clean up bogus debug log outputs
- minor code clean ups
- readme update

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit a38196f151)
2025-10-18 22:05:59 +02:00
Dirk Brenken
f07a573a68 travelmate: release 2.2.0
- drop iwinfo, use iw/ip instead
- support passive wlan scanning (active scanning is still the default)
- drop qrencode, use the LuCI internal qrcode js library instead
- more vpn fixes
- various LuCI changes/enhancements
- fix #27599
- disable proactive scanning in the default config

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit a46dd4cf3c)
2025-10-18 22:05:59 +02:00
Tianling Shen
120259e87f openlist: Update to 4.1.4
Release note: https://github.com/OpenListTeam/OpenList/releases/tag/v4.1.4

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit adbfae95f8)
2025-10-17 15:56:21 +08:00
Tianling Shen
2f51ea9e91 openlist: Update to 4.1.3
Release note: https://github.com/OpenListTeam/OpenList/releases/tag/v4.1.3

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 07ca6a83aa)
2025-10-17 15:56:18 +08:00
Tianling Shen
7fd607eccc v2rayA: Update to 2.2.7.3
Release note:
- https://github.com/v2rayA/v2rayA/releases/tag/v2.2.7.2
- https://github.com/v2rayA/v2rayA/releases/tag/v2.2.7.3

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 5dbb378736)
2025-10-17 15:56:03 +08:00
Tianling Shen
aa6d5044cb v2ray-geodata: Update to latest version
Update all geodata.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 2ebf07e4d2)
2025-10-17 15:56:01 +08:00
Michal Hrusecky
98bdc9d8b6 samba4: update to version 4.18.11
For details see upstream release notes:

https://www.samba.org/samba/history/samba-4.18.9.html
https://www.samba.org/samba/history/samba-4.18.10.html
https://www.samba.org/samba/history/samba-4.18.11.html

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
2025-10-11 18:27:55 +08:00
Stan Grishin
88be1c248c adblock-fast: bugfixes
* bugfix: remove IPKG_INSTROOT check
* bugfix: do not attempt to download config update if package is disabled

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit a7f831b846)
Signed-off-by: Stan Grishin <stangri@melmac.ca>
2025-10-10 17:41:41 -07:00
Stan Grishin
63203845bd https-dns-proxy: bugfix: remove IPKG_INSTROOT check
Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 8301996f67)
Signed-off-by: Stan Grishin <stangri@melmac.ca>
2025-10-10 17:41:26 -07:00
Stan Grishin
4a1fbf06e0 pbr: update to 1.2.0-r2
Makefile:
* stop shipping/dealing with the firewall hotplug (obsolete)
* install a third user-script (dnsprefetch) by @betonmischer

Config:
* remove obsolete options
* include the new user script

Init-script:
* start much earlier so that on boot, the procd_add_raw_trigger works on all systems
* create a ubus() helper function so that service delete does not produce "Command not found"
* rename options to better reflect their function:
  * procd_lan_device to lan_device
  * procd_wan_interface to uplink_interface
  * procd_wan6_interface to uplink_interface6
  * procd_wan6_metric to uplink_interface6_metric
  * wan_ip_rules_priority to uplink_ip_rules_priority
  * wan_mark to uplink_mark
* visually separate run-time variables from variables loaded from config options
* use ${IPKG_INSTROOT} when sourcing files
* fix typo in str_to_dnsmasq_nftset()
* use pidof to kill dnsmasq in dnsmasq_kill()
* add helper function uci_add_list_if_new()
* add helper function uci_changes()
* add helper function ubus() so that service delete does not produce "Command not found"
* implement the dnsmasq features check similar to dnsmasq init script
* add get_url() function similar to luci package
* add/modify error and warning messages
* change how mktemp is used for more reliable file creation
* unset non-true boolean package config options on load for easier checks later
* improve handling of nft/nft set options
* fewer calls to resolver() and resolver() optimization to speed up the service
* use softlinks instead of duplicating dnsmasq nftset files into each instance
* prevent duplication of dnsmasq nftset elements
* option to target a specific dest dns port in DNS policies
* bugfix: more reliable interface reloads
* display README links to errors/warnings sections if any errors/warnings discovered

Uci-defaults:
* transition from old options to new ones

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit f0f8dc0fce)
Signed-off-by: Stan Grishin <stangri@melmac.ca>
2025-10-10 16:34:59 -07:00
Antonio Pastor
0178450e47 netatalk: fix config/uci files handling in all variants
Config/uci files were not being included in -full variant.
Config files were also being lost in firmware upgrades for all variants.
Both issues fixed, including correct file permissions for config files.

Signed-off-by: Antonio Pastor <antonio.pastor@gmail.com>
(cherry picked from commit 0d939af403)
2025-10-10 08:41:45 +02:00
John Audia
4542296dbb snort3: depend on libtirpc only for musl builds
The libtirpc package is only needed when building with musl, as glibc
includes the required RPC functionality. This change makes libtirpc a
conditional dependency and adjusts the build flags accordingly.

Building with x86_64-glibc:
...
Feature options:
    DAQ Modules:    Dynamic
    libatomic:      User-specified
    Hyperscan:      ON
    ICONV:          ON
    Libunwind:      OFF
    LZMA:           ON
    RPC DB:         Built-in
    SafeC:          OFF
    TCMalloc:       ON
    JEMalloc:       OFF
    UUID:           ON
    NUMA:           OFF
    LibML:          OFF
...

Building with aarch64_cortex-a76_musl:
...
Feature options:
    DAQ Modules:    Dynamic
    libatomic:      User-specified
    Hyperscan:      ON
    ICONV:          ON
    Libunwind:      OFF
    LZMA:           ON
    RPC DB:         TIRPC
    SafeC:          OFF
    TCMalloc:       ON
    JEMalloc:       OFF
    UUID:           ON
    NUMA:           OFF
    LibML:          OFF
...

Build system: x86/64
Build-tested: x86/64-glibc, bcm27flogic/xiaomi_redmi-router-ax6000-ubootmod (for musl)
Run-tested: x86/64-glibc

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit e4bdefe1c2)
2025-10-10 08:40:59 +02:00
Josef Schlehofer
8308097182 gperftools: include headers in the staging_dir
This fixes version detection issues when other packages (like snort3)
try to find the tcmalloc library using CMake's find_package(). Without
the headers in the staging directory, CMake cannot read the version
information from tcmalloc.h, resulting in empty version strings.

Fixes:
Found TCMalloc: /builder/staging_dir/target-x86_64_musl/usr/lib/libtcmalloc.so (found version "")

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit e52a809371)
2025-10-10 08:39:59 +02:00
Josef Schlehofer
5f8bd04c14 snort3: enable/disable options based on package availability
This simplifies checks enabling/disabling features, if packages are present
instead of having checks for specific architectures.

TCMALLOC_LIBRARIES is removed as it's auto-detected, unlike vectorscan
which requires explicit HS_INCLUDE_DIRS.

Fixes: 126364e105 ("snort3: refactor architecture-specific dependencies and CMake options")

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 02f78bc30a)
2025-10-10 08:39:46 +02:00
Stan Grishin
436c73d459 https-dns-proxy: update to 2025.10.07-r1
Makefile:
* update to latest upstream: 7b27ecd559
* update version, release
* drop CONFIGURE_ARGS as the build is curl-independent
* update the link to the documentation

README:
* add small README with the link to documentation

Config:
* rename procd_fw_src_interfaces to force_dns_src_interface to better reflect meaning
* add heartbeat_domain, heartbeat_sleep_timeout, heartbeat_wait_timeout options
* add default user, group and listen_addr options to the main config
* drop the user, group and listen_addr options from the instance configs

Init-script:
* start much earlier so that on boot, the procd_add_raw_trigger works on all systems
* create a ubus() helper function so that service delete does not produce "Command not found"
* new options handling where the global config options can be used for instance options
* some renaming of global/instance variables due to abovementioned redesign
* new open port detection, no longer relying on netstat
* new uci_changes() logic where it returns 0 or 1 instead of text
* new append_parm logic for not adding default value options to CLI
* new boolean options handling logic
* move config loading to load_package_config() function
* new logic for calling procd_set_config_changed firewall based solely on "$force_dns"
* source network.sh based on "${IPKG_INSTROOT}" path
* rename procd_fw_src_interfaces to force_dns_src_interface to better reflect meaning
* rename use_http1 to force_http1
* rename use_ipv6_resolvers_only to force_ipv6_resolvers

Uci-defaults:
* migrate to new option names

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit e1cf4ac52e)
Signed-off-by: Stan Grishin <stangri@melmac.ca>
2025-10-09 11:26:40 -07:00
Josef Schlehofer
7a30a574b3 snort3: refactor architecture-specific dependencies and CMake options
1. Enabled hyperscan/vectorscan together with adding dependency only for x86_64 and aarch64.
2. Disabled tmalloc (from gperftools package) for powerpc and mips.

By doing this refactor, snort3 is going to be available for more OpenWrt devices
(as it was in the past) as currently it was compiled only for x86_x64 and aarch64 by mistake.

Fixes: 257e2fc38a ("snort3: fix logic in gpertools-runtime depends")

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 126364e105)
[For OpenWrt 24.10: There is hyperscan instead of vectorscan]
2025-10-08 21:34:07 +02:00
Stan Grishin
eb39acf951 adblock-fast: update to 1.2.0-r20
Config file:
* add debug_init_script and debug_performance options
* remove led (default should be empty) option
* remove procd_boot_delay (obsolete) option

Init Script:
* reinstate IPKG_INSTROOT check
* change capitalization in status messages
* unset default value for led option on load_package_config
* bugfix: unset bool options which are later checked for non-empty
* bugfix: create compressed cache only if block-file exists
* adjust errors output/storing errors for later display in multuple cases
* produce information about cache/compressed cache files in service
  status output when service is stopped
* attempt to create compressed cache in service_started only if block-
  file exists
* bugfix: run service_started from the dl command (to create compressed
  cache file)
* rename StripToDomains variables for readability
* improve open port detection

Uci-Defaults:
* improve readability of debug options migration

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit ff2a55441d)
2025-10-08 12:10:04 -07:00
John Audia
0723d0f62e libdaq3: update to 3.0.21
Update to latest version.

Changelog: https://github.com/snort3/libdaq/releases/tag/v3.0.21

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 64b8872cf4)
2025-10-08 16:09:19 +02:00
Michal Hrusecky
ed702ba592 mariadb: add unconditional dependency on libaio
MariaDB now depends on libaio even when uring is enabled.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
(cherry picked from commit d50b5e583c)
2025-10-06 18:25:23 -03:00
John Audia
25238f1571 snort3: clean-up Makefile
Simplification of Makefile: remove line splits to increase readability.

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 87d0da8aa2)
2025-10-06 22:46:12 +02:00
John Audia
6a1ef4be71 snort3: switch from git proto to tarballs
Use upstream tarballs for source rather than using git. If we ever need
to build from git we can cherry pick and make a patch. This gives a
cleaner Makefile and faster build.

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 8914929466)
2025-10-06 22:46:00 +02:00
John Audia
d8fd46fdef snort3: update to 3.9.5.0
Changelog: https://github.com/snort3/snort3/releases/tag/3.9.5.0

Build system: x86/64
Build-tested: x86/64-glibc
Run-tested: x86/64-glibc

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit a75e0a6db9)
2025-10-06 22:46:00 +02:00
Tianling Shen
0382e4fb43 microsocks: run as unprivileged user
Run the daemon as unprivileged user for better security.

Trim whitespaces while at it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 182db0ac04)
2025-10-05 21:30:23 +08:00
Wesley Gimenes
b446c2e9e5 openvpn: bump PKG_RELEASE
Although recent updates were made, the `PKG_RELEASE` bump was missed.

Signed-off-by: Wesley Gimenes <wehagy@proton.me>
(cherry picked from commit 7c88f998e5)
Signed-off-by: Sander van Deijck <sander@vandeijck.com>
2025-10-02 20:06:48 -03:00
Dennis Camera
00623806bc openvpn: remove kmod-ovpn-dco-v2 dependency
OpenVPN does work without the kernel module, it just won't be able to use DCO.
To make life easier for OpenVPN users on very space-constrained devices make it
an optional dependency.

Signed-off-by: Dennis Camera <dennis.camera+openwrt@riiengineering.ch>
(cherry picked from commit 01fafd69ef)
Signed-off-by: Sander van Deijck <sander@vandeijck.com>
2025-10-02 20:06:48 -03:00
Dennis Camera
4e52a8f26e openvpn: enable DCO by default
Enable the DCO option by default in the openvpn package to allow for
better performance and have a use case for kmod-ovpn-dco-v2 :-)

Signed-off-by: Dennis Camera <dennis.camera+openwrt@riiengineering.ch>
(cherry picked from commit 11e17a3ed6)
Signed-off-by: Sander van Deijck <sander@vandeijck.com>
2025-10-02 20:06:48 -03:00
Austin Lane
0af825465e python-pyelftools: Update to v0.32
- Update pyelftools to version 0.32 (minor)

Signed-off-by: Austin Lane <vidplace7@gmail.com>
(cherry picked from commit f2d141912f)
2025-10-02 22:15:00 +02:00
Austin Lane
28ff64bed9 python-pyelftools: add package / hostbuild
Signed-off-by: Austin Lane <vidplace7@gmail.com>
(cherry picked from commit dc79b54b57)
2025-10-02 22:15:00 +02:00
Florian Maurer
3f75acf66a tunneldigger: add broker_selection option to expose load balancing capabilities
Using the broker_selection param makes it possible to decide by use (default),
always use the first available broker to connect or select a random broker

See also: 51a5e46ad1/client/l2tp_client.c (L1331-L1333)

Signed-off-by: Florian Maurer <f.maurer@outlook.de>
(cherry picked from commit 296c15c1f2)
2025-10-01 21:19:03 +02:00
Michael Heimpold
9d839fe5a7 php8: update to 8.3.26
Upstream changelog:
https://www.php.net/ChangeLog-8.php#8.3.26

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2025-10-01 19:46:35 +02:00
Josef Schlehofer
41823138b4 apache: update to version 2.4.65
Fixes CVEs:
- CVE-2025-54090
- CVE-2025-53020
- CVE-2025-49812
- CVE-2025-49630
- CVE-2025-23048
- CVE-2024-47252
- CVE-2024-43394
- CVE-2024-43204
- CVE-2024-42516

More details can be found in
https://downloads.apache.org/httpd/CHANGES_2.4

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 28adfd3d1e)
2025-10-01 19:12:20 +02:00
Josef Schlehofer
db71795485 syslog-ng: update to version 4.10.1
Release notes:
https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-4.10.1

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 2ba11a2da5)
2025-10-01 19:12:08 +02:00
Josef Schlehofer
d30b8d15ee umurmur: update to version 0.3.1
Makefile changes
----------------

1. The location of uMurmur binary was changed to /sbin
in release 0.3.1. See release notes [1]

2. I need to specify location of the library file instead of
the directory.

Fixes:
CMake Warning at src/CMakeLists.txt:44 (target_link_libraries):
  Target "umurmurd" requests linking to directory
  "/build/staging_dir/target-powerpc_8548_musl/usr/lib".
  Targets may link only to libraries.  CMake is dropping the item.

CMake Warning at src/CMakeLists.txt:44 (target_link_libraries):
  Target "umurmurd" requests linking to directory
  "/build/staging_dir/target-powerpc_8548_musl/usr/lib".
  Targets may link only to libraries.  CMake is dropping the item.

Because of these two warnings, the build fails with
undefined references to
protobuf-c symbols (e.g. protobuf_c_message_get_packed_size).

Patches
-------

Removed all of them, because they are included in
the upstream source code.

[1] https://github.com/umurmur/umurmur/releases/tag/v0.3.1

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit c4a23ca996)
2025-10-01 09:07:33 +02:00
Josef Schlehofer
d470781c9f msmtp: update to version 1.8.31
Release notes:
https://marlam.de/msmtp/news/

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit c488e1297f)
2025-10-01 09:07:27 +02:00
Josef Schlehofer
4164c25a6b mariadb: update to version 11.4.8
Release notes:
https://mariadb.com/docs/release-notes/community-server/mariadb-11-4-series/mariadb-11.4.8-release-notes

Refreshed patch

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 9d141eb9d5)
2025-10-01 09:07:21 +02:00
Josef Schlehofer
bf9b96456d gperftools: make libunwind dependency conditional
Make libunwind support optional depending on package availability.

Previously, gperftools unconditionally enabled libunwind as
mandatory dependency, which led to build failures on architectures where
libunwind is not provided.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 69bf2443d9)
2025-10-01 00:51:39 +02:00
Josef Schlehofer
9f5d22e99c gperftools: enable it for mips*
It should be working for mips*,
so enable it and let's see. :-)

In the past, there were some issues related to mips,
when the package was added, but these days, it appears
that these issues are gone. More details
about those issues could be found in the GitHub pull request
when gperftools was added. Reference is in the Fixes tag.

Fixes: c1b4e80825 ("gperftools: add new package")

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 4dc36ae9fd)
2025-10-01 00:51:33 +02:00
Andrey Zotikov
a578285a41 fail2ban: bump to 1.1.0
fail2ban changes:
- nftables support (iptables dependency removed)
- python3 support (old package patches removed)
- Upstream patches backports:
  - filter.d/dropbear.conf: failregex extended to match different format of "Exit before auth" message
  - cherry-pick from debian: debian default banactions are nftables, systemd backend for sshd
- Removed unresponsive/unreachable maintainer.

Fixes: https://github.com/openwrt/packages/issues/23015 ("fail2ban: very old version")

Signed-off-by: Andrey Zotikov <andrey.zotikov@gmail.com>
(cherry picked from commit 2a202b2091)
2025-10-01 00:51:16 +02:00
Eric Luehrsen
c8077ec8b3 unbound: update to 1.24.0
latest upstream 09182024

Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
(cherry picked from commit 7b63002273)
2025-10-01 00:51:06 +02:00
Rui Salvaterra
76c033817c tor: update to 0.4.8.17 stable
Minor release, see the changelog [1] for what's new.

[1] https://gitlab.torproject.org/tpo/core/tor/-/blob/tor-0.4.8.17/ChangeLog

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit f2c93e0e25)
2025-10-01 00:50:37 +02:00
Sergey Ponomarev
c1712bbb82 tor: add /etc/torrc.d/ to conffiles
The /etc/tor/torrc may contain the line:

    %include /etc/torrc.d/*.conf

So users may put their own config files there.
We should preserve the files during an upgrade.

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
[Added PKG_RELEASE bump]
(cherry picked from commit 83737ed9ea)
2025-10-01 00:50:36 +02:00
Rui Salvaterra
8d1dc048ed tor: update to 0.4.8.16 stable
Minor release, see the changelog [1] for what's new.

[1] https://gitlab.torproject.org/tpo/core/tor/-/blob/tor-0.4.8.16/ChangeLog

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit 60908b5b9b)
2025-10-01 00:50:36 +02:00
Eric Fahlgren
777d483db7 owut: update to 2025.09.27
Bug fixes:
    efahl/owut@f049043ed7 owut: use installed SSL certs instead of default

Signed-off-by: Eric Fahlgren <ericfahlgren@gmail.com>
(cherry picked from commit 29e614fa86)
2025-09-29 14:05:41 +08:00
Ray Wang
47898a8efa natmap: update to 20250924
Upstream changelog:
https://github.com/heiher/natmap/releases/tag/20250924

Signed-off-by: Ray Wang <git@hev.cc>
(cherry picked from commit c16fdd7e2b)
2025-09-29 14:05:18 +08:00
Stan Grishin
7fa3bd1be1 adblock-fast: update to 1.2.0
Makefile:
* update version/release
Init Script:
* boot up reliability improvements:
  - change START from 50 to 20 to ensure procd_add_raw_trigger works on boot
  - better logic of checking/using the cache/compressed cache on boot
* new dnsmasq handling/integration logic:
  - new logic for checking dnsmasq functionality (similar to dnsmasq init script)
  - instead of copying/duplicating adblock-fast files per specified dnsmasq instance, create one file
    and add softlinks to it for specified dnsmasq instances and make sure it's in the instance's addnmounts
  - update dnsmasqConfFile, dnsmasqIpsetFile and dnsmasqNftsetFile to point to the same filename as the
    logic for integrating with dnsmasq is the same for those options
  - get the confdir for specified dnsmasq instances via ubus info/config file since the config_get is broken
    between releases by https://github.com/openwrt/openwrt/pull/14975
  - update clean-up procedures for other dns backend settings to properly clean up when switching away from
    dnsmasq.conf, dnsmasq.ipset, dnsmasq.nftset where the new logic is used
  - remove obsolete outputDnsmasqFileList variable and logic of building and using it
  - only create compressed cache in service_started after successful resolver restart with the block-file
* new package config / environment loading logic
  - switch away from using `load_validate_config` to start functions to loading package config "manually"
  - unset boolean variables which are non-true on package config load
  - switch checking values of such variables from `-eq 0` to empty/non-empty
* debugging improvements:
  - rename debug option to debug_init_script and proc_debug to debug_performance
  - output performance debug info to log only when debug_performance is set
* miscellaneous changes:
  - move best dl tool detection into its own function for reuse in adb_config_update
  - change uci_changes function to return 0/1 instead of the text of changes
  - improve mktemp calls reliability by creating the file and not using `-u` anymore
  - add remove_cache/remove_gzip calls to adb_file function
  - better readability of the start_serice logic determining the action
  - change flock value from 207 to 209 to avoid collisions with pbr
  - temporarily switch namespaces when using jshn functions to avoid collisions with PROCD
  - move from using spaces to tabs in indentation in code
  - prevent Command Not Found message on uninstall
  - remove unneeded IPKG_INSTROOT check in the init script
  - update all sourcing instructions to include IPKG_INSTROOT in the path
Uci-defaults script:
* transition old debug and proc_debug options to debug_init_script/debug_performance

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 3c3d9d2b86)
2025-09-28 11:37:28 -07:00
Antonio Pastor
4fd7305440 netatalk: update to 4.3.2
Netatalk 4.3.x adds the option to use sqlite as a CNID DB. This
is now a config option for the full package.
(mysql is also an option but this has not been included here yet).

As CNID DB backends are now managed by the netatalk meta-daemon
the init script has been updated to use it instead of starting
afpd & dbd manually.

Cleaned up tab/space issues here and there.

Signed-off-by: Antonio Pastor <antonio.pastor@gmail.com>
(cherry picked from commit 2a8fdf37dc)
2025-09-28 09:39:06 +03:00
John Audia
748f2b825f jq: bump to v1.8.1
Simple bump to new release

Build system: x86/64
Build-tested: x86/64
Run-tested: x86/64

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 383fba198e)
2025-09-27 20:37:41 +08:00
John Audia
b51e3eb499 jq: bump to v1.8.0
In addition to shipping the latest upstream version, package shared objects.
It is worth noting that this release is required when building with GCC 15.1.

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 0f281ad57b)
2025-09-27 20:37:41 +08:00
Maximilian Trüpschuch
5c7aa7fa08 jq: provide regex support in additional package jq-full
I modified the makefile, so that it will build two packages: jq and
jq-full. The former will remain unchanged and the latter will have a
dependency to the oniguruma library, so jq-full will have regex functions
enabled.

Signed-off-by: Maximilian Trüpschuch <milanx@gmx.net>
(cherry picked from commit 711a19c4b2)
2025-09-27 20:37:41 +08:00
Jan Hák
301b96818b knot: backport patch to fix linking with libhiredis
It was discovered that even while using ``--enable-redis=no``
and ``--disable-redis`` that it was still linking with libhiredis.

This avoids to picking up libhiredis as dependency:

```
Package knot is missing dependencies for the following libraries:
libhiredis.so.1.1.0
```

Fixes: cbbd2b5b3b ("knot: disable redis as it was enabled since 3.5.0 by default")

Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 598504d895)
2025-09-26 15:52:40 +02:00
Jan Hák
bf326757d9 knot: disable redis as it was enabled since 3.5.0 by default
By disabling redis, it is not possible to use redis database as zone storage

Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit cbbd2b5b3b)
2025-09-26 12:57:09 +02:00
Josef Schlehofer
29a122d807 treewide: drop anything related to uClibc
uClibc-ng was removed in 2020 from OpenWrt main repo [1].
These things are leftovers.

[1] https://git.openwrt.org/?p=openwrt/openwrt.git;a=commit;h=63fb175203bbf3b336804587c2f5b3a2d8132ec1

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 3aab1ef313)
2025-09-26 00:54:33 +02:00
Josef Schlehofer
0632797c89 syslog-ng: update to version 4.10.0
Release notes:
https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-4.10.0

Makefile changes
----------------

1. Disable experimental feature: stackdump
due to issues, which were reported to upstream

2. Disabled example modules to avoid adding libstdc++.so.6 dependency
Fixes:
Package syslog-ng is missing dependencies for the following libraries:
libstdc++.so.6

Other changes
-------------

In syslog-ng 4.8.0, there was added possibility to use value "current"
as version in the config file, so use it, which confirm to use
the latest version instead of bumping the version in the file
manually.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit b1cfb71f7b)
2025-09-26 00:54:25 +02:00
Josef Schlehofer
9da18e3229 syslog-ng: add runtime test
It adds a runtime test to verify that the compiled binary in
CI/CD runs without segfault and prints the version.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 971a2164f5)
2025-09-26 00:54:19 +02:00
Jan Hák
5912f55113 knot: update to version 3.5.0
Release notes: https://www.knot-dns.cz/2025-09-18-version-350.html
Patch from commit 1297a6cc0f

Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit bddd5e9cb6)
2025-09-24 20:22:20 +02:00
Jan Hák
d5b7b5b2f4 knot: update to version 3.4.8
Release notes: https://www.knot-dns.cz/2025-07-29-version-348.html

Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 08e4df89b0)
2025-09-24 20:22:13 +02:00
Dirk Brenken
bd96a7bbce unbound: bring back the service to the startup menu
* trivial fix for #25963 to workaround the current "10 line parsing limit"

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 732a8405ef)
2025-09-24 13:26:34 +02:00
Eric Luehrsen
cd4ded7aa4 unbound: update to 1.23.0
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
(cherry picked from commit a0df926a01)
2025-09-24 13:26:29 +02:00
hingbong lo
86bbce8ecd Unbound: Fixed: local-data except IPv6 GA addresses with odhcpd
issue #25954

Signed-off-by: hingbong lo <hingbonglo@gmail.com>
(cherry picked from commit da4d3e9ab1)
2025-09-24 13:26:20 +02:00
Jan Klos
3bdb385732 unbound: update to 1.22.0
Signed-off-by: Jan Klos <jan@klos.xyz>
[Solve PKG_RELEASE conflict]
(cherry picked from commit 6b989e0ad5)
2025-09-24 13:26:14 +02:00
Ted Hess
0bad403236 Unbound: fix file lock race in odhcpd.sh
Signed-off-by: Ted Hess <thess@kitschensync.net>
(cherry picked from commit 4d8c6d1869)
2025-09-24 13:26:08 +02:00
Jeffery To
b0c81b768d golang: Fix host build compatibility with GCC 15
Fixes https://github.com/openwrt/packages/issues/26446.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit f7d2ebfe37)
2025-09-24 12:15:55 +02:00
hingbong lo
ac5b94a258 bash: fix build failed with GCC 15 #26784
by applying this patch, build successfully

Signed-off-by: hingbong lo <hingbonglo@gmail.com>
(cherry picked from commit 9672ccaf5b)
2025-09-24 12:15:21 +02:00
Ariel Xiong
3a911f6ce5 bash: add CFLAGS_FOR_BUILD="-std=gnu17" flag
Fix #26469
add CFLAGS_FOR_BUILD="-std=gnu17" flag

Signed-off-by: Ariel Xiong <ArielHeleneto@outlook.com>
(cherry picked from commit dab90ec210)
2025-09-24 12:15:13 +02:00
Ariel Xiong
bbcfa5f644 bash: bump to 5.2.37
fix autoconf test for broken strtold
fix for parsing compound assignment while expanding alias
fix compilation on systems that provide select or pselect but not both
fix for reading partial invalid multibyte characters
fix issue where comparing quoted and unquoted words to be completed results in readline not displaying possible matches

Signed-off-by: Ariel Xiong <ArielHeleneto@outlook.com>
(cherry picked from commit ca2b5ea51f)
2025-09-24 12:15:08 +02:00
John Audia
700b152306 gperftools: update to 2.17.2
Bump to latest release and removed upstreamed patch.

Resulting libs give a fully functional snort3 which was built against
this new version.

Build system: x86/64
Build-tested: x86/64-glibc
Run-tested: x86/64-glibc (Intel N150 based box)

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 465eddb46d)
2025-09-23 18:16:06 +02:00
John Audia
db82803f6e gperftools: bump to version 2.17
Changelog: https://github.com/gperftools/gperftools/releases/tag/gperftools-2.17

Add patch to fix build of some ARM toolchains

Build system: x86/64
Build-tested: x86/64-glibc
Run-tested: x86/64-glibc

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 0a0f2e884c)
2025-09-23 18:15:55 +02:00
Aleksey Vasilenko
793ae0e879 bottom: update to 0.11.1
update to 0.11.1

Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>
(cherry picked from commit 072b5c6f48)
2025-09-23 12:52:15 +02:00
George Sapkin
942c243661 yt-dlp: bump to 2025.09.05
Changelog: https://github.com/yt-dlp/yt-dlp/releases/tag/2025.08.27
Changelog: https://github.com/yt-dlp/yt-dlp/releases/tag/2025.09.05
Signed-off-by: George Sapkin <george@sapk.in>
2025-09-22 10:12:52 +02:00
Niklas Thorild
0e7a7d037c dnscrypt-proxy2: update to version 2.1.14
- update dnscrypt-proxy2 to version 2.1.14
- add GO_PKG_INSTALL_EXTRA:= dnscrypt-proxy/static/ to fix build error

Contributed-by: @ScoutJamboree

Signed-off-by: Niklas Thorild <niklas@thorild.se>
2025-09-22 10:03:13 +02:00
Wei-Ting Yang
44cff71992 python-certifi: update to 2025.8.3
Fix CVE-2024-39689.

Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com>
(cherry picked from commit 6d9d0d2bf8)
2025-09-20 23:24:32 +08:00
Wei-Ting Yang
d490217d82 python-certifi: assign PKG_CPE_ID
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:certifi:certifi

Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com>
(cherry picked from commit dc6724fca5)
2025-09-20 23:24:32 +08:00
Ray Wang
f24b2a6934 hev-socks5-server: update to 2.10.0
Upstream changelog:
https://github.com/heiher/hev-socks5-server/releases/tag/2.10.0

Signed-off-by: Ray Wang <git@hev.cc>
(cherry picked from commit 2391212aa4)
2025-09-19 20:25:06 +08:00
Aleksey Vasilenko
98d7b31c8e rust: update to 1.89.0
- switch source archive to tar.xz to save space and bandwidth
- refresh a patch

Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>
(cherry picked from commit 10862df850)
2025-09-19 20:24:37 +08:00
Dirk Brenken
b910bc1231 travelmate: release 2.1.4
- fixed  telekom login script (#27072)
- fixed the connection tracking/f_net function,
  to stabilize (vpn) connections (#27235)
- removed needless log message

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit ac175d902e)
2025-09-18 20:32:14 +02:00
George Sapkin
c66c74faca syncthing: improve relay argument parsing
Fixes: 47644ba46 ("syncthing: fix discovery and relay extra args")
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit d75075ce8e)
2025-09-18 19:55:12 +03:00
George Sapkin
73a2afc9e4 syncthing: improve discovery argument parsing
Fixes: 47644ba46 ("syncthing: fix discovery and relay extra args")
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit 6ccb3b6174)
2025-09-18 19:55:12 +03:00
George Sapkin
eda931370e syncthing: fix discovery and relay extra args
Update configuration option examples.

Fixes: #26952
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit 47644ba468)
2025-09-18 19:55:12 +03:00
Stan Grishin
31532024d0 adblock-fast: bugfix: dl command
* only test gzip existence and reset action/param on boot

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit de3deab1a6)
2025-09-17 15:06:12 -07:00
Michael Heimpold
dd6e009bde php8: update to 8.3.25
Upstream changelog:
https://www.php.net/ChangeLog-8.php#8.3.25

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2025-09-17 07:28:20 +02:00
Nate Robinson
fb6aee4b94 lf: update to r37
https://github.com/gokcehan/lf/releases/tag/r37

Signed-off-by: Nate Robinson <nrobinson2000@me.com>
(cherry picked from commit 8705423201)
2025-09-17 02:32:49 +08:00
Tianling Shen
8ed1e22308 arp-whisper: do not lock deps
The version specified in Cargo.lock is too old to build.

Trim whitespaces while at it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 6f6ad3fe1c)
2025-09-16 22:00:01 +08:00
Tianling Shen
5f82019f1e v2raya: Update to 2.2.7.1
Release note: https://github.com/v2rayA/v2rayA/releases/tag/v2.2.7.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 3eb22bc1f8)
2025-09-16 21:58:07 +08:00
Tianling Shen
370d4d07b7 v2raya: Update to 2.2.7
Release note: https://github.com/v2rayA/v2rayA/releases/tag/v2.2.7

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 5d2c923976)
2025-09-16 21:58:04 +08:00
Gregory Gullin
245cf57b06 nnn: update to version 5.1
Release notes: https://github.com/jarun/nnn/compare/v4.9...v5.1

Signed-off-by: Gregory Gullin <garuwex@gmail.com>
(cherry picked from commit ebb0d87450)
2025-09-16 15:20:16 +02:00
Glenn Strauss
43b2aff8fa lighttpd: update to lighttpd 1.4.82 release hash
Ref: https://www.lighttpd.net/2025/9/12/1.4.82/

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit c8e1b9af99)
2025-09-16 14:26:19 +02:00
Glenn Strauss
76abdbe651 lighttpd: update to lighttpd 1.4.81 release hash
https://www.lighttpd.net/2025/8/17/1.4.81/

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 62dbf8c87f)
2025-09-16 14:26:19 +02:00
John Audia
c1b9770adb snort3: fix logic in gpertools-runtime depends
The logic in e57cc9898a was flawed causing
gperftools-runtime to fail to get detected when building resulting in:
...
ninja: Entering directory `/scratch/union/build_dir/target-x86_64_glibc/snort3-3.9.1.0'
ninja: error: '/scratch/union/staging_dir/target-x86_64_glibc/usr/lib/libtcmalloc.so', needed by 'src/snort', missing and no known rule to make it
make[2]: *** [Makefile:161: /scratch/union/build_dir/target-x86_64_glibc/snort3-3.9.1.0/.built] Error 1

It was missed due testing in build root that already had gperftools-runtime
built only discovered when building from a clean build root.

This commit fixes this flaw.

Test:
cat <<EOF > .config
CONFIG_TARGET_x86=y
CONFIG_TARGET_x86_64=y
CONFIG_TARGET_x86_64_DEVICE_generic=y
CONFIG_PACKAGE_snort3=y
EOF

make defconfig
grep gperftools-run .config
CONFIG_PACKAGE_gperftools-runtime=y

cat <<EOF > .config
CONFIG_TARGET_qoriq=y
CONFIG_TARGET_qoriq_generic=y
CONFIG_TARGET_qoriq_generic_DEVICE_watchguard_firebox-m300=y
CONFIG_PACKAGE_snort3=y
EOF

make defconfig
grep gperftools-run .config

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 257e2fc38a)
2025-09-15 11:47:32 +02:00
John Audia
0176953535 snort3: update to 3.9.3.0
Changelog: https://github.com/snort3/snort3/releases/tag/3.9.3.0

Build system: x86/64
Build-tested: x86/64-glibc
Run-tested: x86/64-glibc (Intel N150 based box)

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit f8ace6e398)
2025-09-15 11:47:27 +02:00
Dan Srebnick
d1aea2b0fc ampr-ripd: script improvements and add QA script
Added test.sh
Predetermine count used by for loops in Makefile postrm
Implemented extra_command in initscript
Resolved shellcheck issues
Bump release

Signed-off-by: Dan Srebnick <k2ie@k2ie.net>
(cherry picked from commit 551ef4a7c1)
2025-09-14 19:23:02 +03:00
Dan Srebnick
3abbc29a9c ampr-ripd: Initial package release
This project can be used with the OpenWrt SDK to generate a package
for ampr-ripd.  It is intended for use only by licensed amateur radio
operators.  ampr-ripd is a modified RIPv2 listener that provides
route information for ARDC IPIP Mesh tunnels.

Signed-off-by: Dan Srebnick <k2ie@k2ie.net>
(cherry picked from commit 19249742cd)
2025-09-14 19:23:02 +03:00
Lukas Voegl
e1c314797b treewide: include nls.mk when depending on glib2
When compiling glib2 with NLS, it automatically sets linker flags to `-lglib-2.0 -lintl` in pkg-config (.pc) files.

Signed-off-by: Lukas Voegl <lvoegl@tdt.de>
(cherry picked from commit 7ee547b440)
2025-09-13 10:30:15 +02:00
Daniel Golle
8587135676 fluidsynth: update to version 2.4.5
fluidsynth 2.4.5

    Prebuilt Windows Binaries were missing SDL3.dll
    (FluidSynth/fluidsynth#1510)

    Fix SDL3 intercepting signals, causing CTRL+C to not quit fluidsynth
    (FluidSynth/fluidsynth#1509)

    Fix a few flaws in the AWE32 NRPN implementation
    (FluidSynth/fluidsynth#1452, FluidSynth/fluidsynth#1473)

    A regression introduced in 2.4.4 broke drum preset selection for XG
    MIDIs (FluidSynth/fluidsynth#1508)

    Fix for OpenMP thread affinity crashes on Android devices
    (FluidSynth/fluidsynth#1521, thanks to @looechao)

    Fix fluidsynth's systemd user daemon being unable to create lock
    file on some distros (FluidSynth/fluidsynth#1527, thanks to
    @andrew-sayers)

    Fix fluidsynth ignoring initialFilterFc generator limits
    (FluidSynth/fluidsynth#1502)

    A regression introduced in 2.3.6 prevented SF2 NRPN messages from
    being processed correctly (FluidSynth/fluidsynth#1536)

fluidsynth 2.4.4

    Support for SDL3 has been added, support for SDL2 has been
    deprecated (FluidSynth/fluidsynth#1485, FluidSynth/fluidsynth#1478,
    thanks to @andyvand)

    Soundfonts that are not respecting the 46 zero-sample padding-space
    previously sounded incorrect when

    synth.dynamic-sample-loading was active (FluidSynth/fluidsynth#1484)

    Allow drum channels to profit from Soundfont Bank Offsets by no
    longer ignoring MSB Bank changes (FluidSynth/fluidsynth#1475)

    Revise the preset fallback logic for drum channels
    (FluidSynth/fluidsynth#1486)

    A regression introduced in 2.4.1 may have caused interrupted
    real-time playback when voices were using the lowpass filter
    (FluidSynth/fluidsynth#1481)

    Improve multi-user experience when running fluidsynth as systemd
    service (FluidSynth/fluidsynth#1491, thanks to @andrew-sayers)

    Fix ordering and dependencies of fluidsynth's systemd service
    (FluidSynth/fluidsynth#1500, thanks to @fabiangreffrath)

    Revise fluidsynth's man page (FluidSynth/fluidsynth#1499, thanks to
    @fabiangreffrath)

fluidsynth 2.4.3

    It was discovered, that exclusive class note terminations were too
    slow (FluidSynth/fluidsynth#1467, thanks to @mrbumpy409)

    Fix a regression introduced in 2.4.0 that allowed the amplitude of a
    voice playing in delay phase to rise infinitely
    (FluidSynth/fluidsynth#1451)

    MSGS drum-style note-cut has been converted to an opt-in setting
    synth.note-cut (FluidSynth/fluidsynth#1466)

    Support for SDL2 has been disabled by default*
    (FluidSynth/fluidsynth#1472)

    Fix a regression introduced in 2.4.1 that could have caused infinite
    audio gain output for some MIDI files under certain configurations
    (FluidSynth/fluidsynth#1464)

    Silence a warning issued by Systemd v254+
    (FluidSynth/fluidsynth#1474, thanks to @andrew-sayers)

fluidsynth 2.4.2

    Fix audible clicks when turning off voices while using a high filter
    resonance (FluidSynth/fluidsynth#1427)

    Fix a build failure with MSYS2 and MinGW when processing
    VersionResource.rc (FluidSynth/fluidsynth#1448, thanks to @pedrolcl)

    Fix a crash on startup when there are no MIDI devices available on
    Windows (FluidSynth/fluidsynth#1446, thanks to @pedrolcl)

    Restore discovery of libsndfile (FluidSynth/fluidsynth#1445)

    Fix a race condition when loading SF3 files containing multiple
    uncompressed samples (FluidSynth/fluidsynth#1457)

fluidsynth 2.4.1

    Enable libsndfile to use filename with non-ASCII characters on
    Windows (FluidSynth/fluidsynth#1416, thanks to @pedrolcl and
    @stardusteyes)

    Fix a few commandline encoding related issues on Windows
    (FluidSynth/fluidsynth#1388, FluidSynth/fluidsynth#1421, thanks to
    @pedrolcl)

    Fix build errors on Windows (FluidSynth/fluidsynth#1419,
    FluidSynth/fluidsynth#1422, thanks to @carlo-bramini)

    Fix clicks and pops caused when changing parameters of the lowpass
    filter (FluidSynth/fluidsynth#1415, FluidSynth/fluidsynth#1417,
    FluidSynth/fluidsynth#1424)

    Minor adjustment to AWE32 NRPN behavior (FluidSynth/fluidsynth#1430)

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit dd8780e253)
2025-09-13 10:30:10 +02:00
Daniel Golle
3a68aa2aeb fluidsynth: add package
Package Fluidsynth wavetable MIDI synth.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit b734716f15)
2025-09-13 10:30:06 +02:00
Daniel Golle
8f71395fcd glib-networking: update to version 2.80.1
2.80.1 - January 8, 2025
========================

 - OpenSSL: fix crash in complete_handshake (!251, Dario Saccavino)
 - OpenSSL: fix invalid free in openssl_get_binding_tls_server_end_point() (!255)
 - TLS test should handle G_IO_ERROR_WOULD_BLOCK (!253, Richard Purdie and Alexander Kanavin)
 - Updated translations

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit b49f4cc0a3)
2025-09-13 10:29:57 +02:00
Daniel Golle
055f363620 glib-networking: add package
Add GIO modules for TLS support as well as defining proxies via well-known
environment variables.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 223d7e2995)
2025-09-13 10:29:51 +02:00
Daniel Golle
5613127a8c shared-mime-info: fix post-install behaviour
Move post-install script to /etc/uci-defaults so it always runs on the
target and doesn't require the host to provide 'update-mime-database'.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 0b2bd76ed1)
2025-09-13 10:20:04 +02:00
Tianling Shen
a94519e649 rust: add loongarch64 and powerpc to supported targets
Also removed i686 as OpenWrt replaces it with i386 in $(ARCH).

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a5c3fd1fee)
2025-09-13 10:16:22 +02:00
Roman Azarenko
db80134266 nginx: update CPE ID
Looking at the official CPE dictionary [1], `cpe:/a:nginx:nginx` was
only used until 1.21.4 inclusively. Later it was renamed to
`cpe:/a:f5:nginx`, and it showed up in a few more non-contiguous
versions numbers after 1.21.4.

In all nginx security advisories [2] starting from year 2024, the CPE
ID used is `cpe:/a:f5:nginx_open_source`. This includes versions 1.25.0
and newer.

Update the CPE ID to the newest known value of `cpe:/a:f5:nginx_open_source`
used in nginx's own security advirosies/CVEs.

[1]: https://nvd.nist.gov/products/cpe
[2]: https://nginx.org/en/security_advisories.html

Signed-off-by: Roman Azarenko <roman.azarenko+gh@genexis.eu>
(cherry picked from commit 973a26fc63)
2025-09-11 08:03:11 +02:00
Robert Marko
1ad8b179e7 nginx: actually download the specified git commit hash
Currently, we are using Download recipes to download the various modules,
however we are using then with PROTO:=git but SOURCE_VERSION is not set,
only VERSION variable so thus the dl_github_archive.py scripts gets called
with --version="" instead of being actually passed the desired commit hash
and thus actually the git head is fetched.

This explains why currently buildbots are failling with
nginx-mod-njs/104-endianness_fix.patch failling to apply since buildbots
are using prepackaged tarballs which are different than what we get when
manually building.

So, lets set SOURCE_VERSION to make sure we actually fetch the desired
git commit hash.

Signed-off-by: Robert Marko <robimarko@gmail.com>
(cherry picked from commit ea29db6daa)
Signed-off-by: Roman Azarenko <roman.azarenko+gh@genexis.eu>
2025-09-11 08:03:11 +02:00
Vladimír Čunát
bbc286bc3f knot-resolver: update to version 5.7.6
Knot Resolver 5.7.6 (2025-07-17)
================================

Security
--------
- DoS: fix a rare segfault in `resolve` function (!1720)
  Someone controlling the DNS traffic might be able
  to trigger this crash intentionally and too often.
- DoS: drop a wrong assertion/crash (!1721)
  Someone controlling the DNS traffic will most likely be able
  to trigger this crash intentionally and too often.

Knot Resolver 5.7.5 (2025-04-24)
================================

Security
--------
- DoS: fix unconfirmed crashes with the line below (!1683)
  [system] requirement "h && h->end > h->begin" failed in queue_pop_impl

Improvements
------------
- tests: disable problematic config.http test (#925, !1678)
- validator: accept a confusing NODATA proof with insecure delegation (!1678)

Bugfixes
--------
- daemon/http: DoH stream got stuck after returning an error code (!1652)
- stats: request latency was very incorrect in some cases (!1678)

Signed-off-by: Vladimír Čunát <vladimir.cunat@nic.cz>
(cherry picked from commit 4f22b4dceb)
2025-09-11 08:00:59 +02:00
Vladimír Čunát
e63cfba6fb knot-resolver: update DNSSEC root trust anchors
This is long overdue.  Honestly I dislike that packaging
is hardcoding it this way.  It's error-prone, as we can see.
Knot Resolver source does contain the up to date anchors,
and it also (optionally) installs them.  Still, I'm not up to
larger changes in OpenWrt packaging right now.

Signed-off-by: Vladimír Čunát <vladimir.cunat@nic.cz>
(cherry picked from commit 47f8b88f43)
2025-09-11 08:00:59 +02:00
Wesley Gimenes
c221d6a8a3 CONTRIBUTING.md: accept only real names in the SoB
Follow the rule from the Submission Guidelines:
https://openwrt.org/submitting-patches#submission_guidelines

And the shared formal check:
ba03db3b5a/.github/workflows/formal.yml (L37-L43)

And this commit 07c1218009

Signed-off-by: Wesley Gimenes <wehagy@proton.me>
(cherry picked from commit 0934d86240)
2025-09-11 08:00:59 +02:00
Richard Muzik
7e010914b3 python-twisted: Update to 25.5.0
This update fixes CVE-2024-41810 and CVE-2024-41671 [1]. For the full
changelog see NEWS [2].

Additionally changed the way the test files are omitted from patch file
to filespec in the Makefile.

[1] https://github.com/twisted/twisted/blob/twisted-25.5.0/NEWS.rst#twisted-2470-2024-08-08
[2] https://github.com/twisted/twisted/blob/twisted-25.5.0/NEWS.rst

Signed-off-by: Richard Muzik <richard.muzik@turris.com>
(cherry picked from commit e09ffebce1)
2025-09-11 08:00:59 +02:00
Richard Muzik
420f953f46 git: update to 2.50.1
- Refresh and rebase patches

Signed-off-by: Richard Muzik <richard.muzik@turris.com>
(cherry picked from commit a162c5dddc)
2025-09-11 08:00:59 +02:00
Alexandru Ardelean
55dd83fb3a sudo: bump to version 1.9.17p2
This change bumps sudo to version 1.9.17p2

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit 1e391d0520)
2025-09-11 08:00:58 +02:00
John Audia
bf4c309d19 lxc: update to 6.0.5
6.0.5 is a bug fix release, see:
https://discuss.linuxcontainers.org/t/lxc-6-0-5-lts-has-been-released/24438

Full changelog: https://github.com/lxc/lxc/compare/v6.0.4...v6.0.5

Build system: x86/64
Build-tested: x86/64-glibc
Run-tested: x86/64-glibc (Intel N150 based box)

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit ab1f60b74d)
2025-09-11 08:00:58 +02:00
John Audia
9b738cc3f7 lxc: update to 6.0.4
Added upstream patch to fix starting containers with complex hooks.
No existing patches needed to be rebased/simple version bump to 6.0.4.

Build system: x86/64
Build-tested: x86/64
Run-tested: x86/64

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 343f1151f9)
2025-09-11 08:00:58 +02:00
John Audia
7dacd6b606 lxc: add two files to default backup list
Users running unprivileged containers will need to create
/etc/subgid and /etc/subuid and want to have them preserved
across updates. This commit adds them to the default backup set.

Signed-off-by: John Audia <therealgraysky@proton.me>
Co-authored-by: Tianling Shen <cnsztl@gmail.com>
(cherry picked from commit 6fe80f5586)
2025-09-11 08:00:58 +02:00
John Audia
82448b1e33 lxc: lxc-checkconfig fix typo
Fix a typo introduced in fd686a3220
which partially broke lxc-checkconfig

Build system: x86/64
Build-tested: bcm27xx/bcm2712
Run-tested: bcm27xx/bcm2712

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit f32083fa27)
2025-09-11 08:00:58 +02:00
John Audia
98e504403d lxc: fix decompression of rootfs tarballs
Modified 025-remove-unsupported-option.patch to both remove
the bsdtar command as it ends in errors, see below, and to
circumvent an error when extracting to overlayfs[1].

Error when extracting rootfs tarball with bsdtar:
tar --absolute-names --numeric-owner '--xattrs-include=*' -xpJf /var/cache/lxc//download/archlinux/current/amd64//default/rootfs.tar.xz -C /mnt/data/lxc/test/rootfs
./usr/bin/newgidmap: Cannot restore extended attributes on this system: Illegal byte sequence
lxc-create: test: ../src/lxc/lxccontainer.c: create_run_template: 1589 Failed to create container from template
lxc-create: test: ../src/lxc/tools/lxc_create.c: lxc_create_main: 318 Failed to create container test

1. https://github.com/openwrt/openwrt/issues/15888

Signed-off-by: John Audia <therealgraysky@proton.me>

Build system: x86/64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 96c96fe041)
2025-09-11 08:00:58 +02:00
John Audia
f4f7100fb8 lxc: add gnu-tar as a depends to fix lxc-create
Add gnu-tar as a dependency for lxc-create which is needed to
properly extract the root file system tarball. Without it,
symlink target of /bin/tar is busybox and it lacks proper
support to extract with xattrs.  The default gnu-tar is actually
built without this support as well, but it is able to extract
the rootfs tarballs with a warning not an error which is not the
case with busybox which ends in an error.

Signed-off-by: John Audia <therealgraysky@proton.me>

Build system: x86/64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne

(cherry picked from commit b74dc8a119)
2025-09-11 08:00:58 +02:00
John Audia
356f36a5d2 lxc: add missing deps
Several deps are missing based the output of lxc-checkconfig shown below
before this commit is applied.

CONFIG_IP_NF_TARGET_MASQUERADE and CONFIG_IP6_NF_TARGET_MASQUERADE are
only needed for lxc-net which we do not package.

% lxc-checkconfig | grep missing
Cgroup device: missing
CONFIG_IP_NF_TARGET_MASQUERADE: missing
CONFIG_IP6_NF_TARGET_MASQUERADE: missing
CONFIG_NETFILTER_XT_TARGET_CHECKSUM: missing
FUSE (for use with lxcfs): missing
checkpoint restore: missing
CONFIG_UNIX_DIAG: missing
CONFIG_INET_DIAG: missing
CONFIG_PACKET_DIAG: missing
CONFIG_NETLINK_DIAG: missing

Additionally, two new patches have been added which remove checks for
options that OpenWrt currently does not package and can serve are
false positives for missing items from our kernel config, namely:
lxc-net and lxc-checkpoint

After applying this commit, below is the output showing that the kernel
config[1] should pass all tests for functionality:

% CONFIG=config ./lxc-checkconfig
LXC version 6.0.3

--- Namespaces ---
Namespaces: enabled
Utsname namespace: enabled
Ipc namespace: enabled
Pid namespace: enabled
User namespace: enabled
Network namespace: enabled
Namespace limits:
  cgroup: 383849
  ipc: 383849
  mnt: 383849
  net: 383849
  pid: 383849
  time: 383849
  user: 383849
  uts: 383849

--- Control groups ---
Cgroups: enabled
Cgroup namespace: enabled
Cgroup v1 mount points:
Cgroup v2 mount points:
 - /sys/fs/cgroup
Cgroup device: enabled
Cgroup sched: enabled
Cgroup cpu account: enabled
Cgroup memory controller: enabled
Cgroup cpuset: enabled

--- Misc ---
Veth pair device: enabled, loaded
Macvlan: enabled, not loaded
Vlan: enabled, not loaded
Bridges: enabled, loaded
Advanced netfilter: enabled, loaded
CONFIG_NETFILTER_XT_TARGET_CHECKSUM: enabled, not loaded
CONFIG_NETFILTER_XT_MATCH_COMMENT: enabled, loaded

--- Checkpoint/Restore ---
checkpoint restore: missing
CONFIG_FHANDLE: enabled
CONFIG_EVENTFD: enabled
CONFIG_EPOLL: enabled
CONFIG_UNIX_DIAG: enabled
CONFIG_INET_DIAG: enabled
CONFIG_PACKET_DIAG: enabled
CONFIG_NETLINK_DIAG: enabled
File capabilities: enabled

1. Generated on 23-Feb-2025 running bcm27xx/bcm2712 on r28869+1

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit ba7e4dccec)
2025-09-11 08:00:58 +02:00
John Audia
d833f47472 lxc: remove check for options we do not package
We do not package lxc-net or lxcfs so remove the lines within
lxc-checkconfig that looks forCONFIG_IP_NF_TARGET_MASQUERADE and
CONFIG_IP6_NF_TARGET_MASQUERADE which, as far as I know, is the only
part of lxc that needs them. Also remove the check for FUSE since we do
not pakcage lxcfs.

Without this commit, users will see these two as missing.

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 57434a290d)
2025-09-11 08:00:57 +02:00
John Audia
00c126a07b lxc: update to 6.0.3
No patches needed to be rebased/simple version bump.

Build system: x86/64
Build-tested: x86/64
Run-tested: x86/64

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit f8587b9ec4)
2025-09-11 08:00:57 +02:00
Aleksey Vasilenko
23ea85eb9d subversion: update to 1.14.5
update to 1.14.5

Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>
(cherry picked from commit 9443e91b6e)
2025-09-11 08:00:57 +02:00
Aleksey Vasilenko
df3f6d0459 ffmpeg: update to 6.1.3
- Remove 2 upstreamed patches

Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>
(cherry picked from commit 114f412408)
2025-09-11 08:00:57 +02:00
Rosen Penev
64ccc5e748 ffmpeg: add libatomic dependency
Some platforms lack builtin atomics and use libatomic. Add it.

Backport various patches to fix some warnings.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit e64ca4a0dc)
2025-09-11 08:00:57 +02:00
Rosen Penev
923a24b601 ffmpeg: fix compilation with GCC14
Upstream backport.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit ac258c05ec)
2025-09-11 08:00:57 +02:00
Sebastian Hamann
0feef68900 nut: switch to https:// download URL
Signed-off-by: Sebastian Hamann <code@ares-macrotechnology.com>
(cherry picked from commit f5371ab434)
2025-09-11 08:00:57 +02:00
Luiz Angelo Daros de Luca
014c5ffa11 ruby: update to 3.3.9
3.3.9 release includes the following security fix of default gems:

- CVE-2025-24294: Possible Denial of Service in resolv gem

And the following fixes for build issues:

- GCC 15.1
- Visual Studio 2022 Version 17.14

3.3.7 and 3.3.8 are routine update that includes minor bug fixes.

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
(cherry picked from commit 59880e81a6)
2025-09-11 08:00:34 +02:00
Luiz Angelo Daros de Luca
b5fffec056 ruby: update to 3.3.6
Ruby 3.3.6 is a routine update that includes minor bug fixes. It also
stops warning missing default gem dependencies that will be bundled gems
in Ruby 3.5.

Link: https://github.com/ruby/ruby/releases/tag/v3_3_6
Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
(cherry picked from commit 2b999558db)
2025-09-11 08:00:34 +02:00
Daniel Golle
c0e97f89be ruby: include JSON modules in host build
Ruby JSON modules are used to build WebKitGTK.
Include them in the host build.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit c667ae2efb)
2025-09-11 08:00:34 +02:00
Wesley Gimenes
99318bd1b8 gihub: fix PR template broken URL
changes the relative URL in the PR template to an absolute URL
to resolve a "Not Found" error.

Signed-off-by: Wesley Gimenes <wehagy@proton.me>
(cherry picked from commit ae6fd69de5)
2025-09-11 08:00:34 +02:00
Carl-Daniel Hailfinger
4df349df14 realtek-poe: increase version to 1.3
* Add support for RTL8238B

Signed-off-by: Carl-Daniel Hailfinger <c-d.hailfinger.devel.2006@gmx.net>
(cherry picked from commit a80cc41f20)
2025-09-11 08:00:34 +02:00
Josef Schlehofer
2f6357377d python3: update to version 3.11.13
Release notes:
https://docs.python.org/release/3.11.13/whatsnew/changelog.html#python-3-11-13

Fixes CVEs:
CVE 2024-12718
CVE 2025-4138
CVE 2025-4330
CVE 2025-4517

Patch refreshed

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 3686cbe417)
2025-09-11 08:00:33 +02:00
Tianling Shen
1411e1ca13 dufs: Update to 0.45.0
Removed upstreamed patches.

Release note: https://github.com/sigoden/dufs/releases/tag/v0.45.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit f7df64100d)
2025-09-10 16:33:12 +08:00
Tianling Shen
79665b283c dufs: backport upstream fixes
Including one security fix.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit bc2d10333b)
2025-09-10 16:33:09 +08:00
Tianling Shen
28e854d941 dufs: Update to 0.44.0
Release note: https://github.com/sigoden/dufs/releases/tag/v0.44.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 0cb83250b3)
2025-09-10 16:33:05 +08:00
Tianling Shen
31d77155c2 openlist: Update to 4.1.2
Release note: https://github.com/OpenListTeam/OpenList/releases/tag/v4.1.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 23475cb50e)
2025-09-08 23:23:57 +08:00
Tianling Shen
2cc9f530d7 openlist: Update to 4.1.1
Release note: https://github.com/OpenListTeam/OpenList/releases/tag/v4.1.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 713b37dd20)
2025-09-08 23:23:54 +08:00
Tianling Shen
b6c1abbf20 v2ray-geodata: Update to latest version
Update all geodata.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 9690cb87d1)
2025-09-08 23:23:31 +08:00
Tianling Shen
83723287ea v2ray-geodata: Update to latest version
Update all geodata.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 802e874d74)
2025-09-08 23:23:25 +08:00
Hannu Nyman
27d9a579a3 sing-box: Properly set only the full variant as default
Adjust the variant definition so that DEFAULT_VARIANT is only applied
to the full variant.
Set the title of the full variant to 'full' for menuconfig.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 2e2cc335a6)
2025-09-07 20:00:46 +03:00
Van Waholtz
4f1cade7b0 sing-box: add variant tiny
The tiny version disables tailscale by default for small package size.
OpenWrt also has the tailscale package as an alternative. We prefer
to keep the base version has the same build tags with the upstream
releases for compatibility.

Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
(cherry picked from commit 16ada8307b)
2025-09-07 20:00:46 +03:00
Anton P.
f70b4a4c6b sing-box: Update to 1.12.4
changelog: https://github.com/SagerNet/sing-box/releases/tag/v1.12.4

Signed-off-by: Anton P. <dragunap@gmail.com>
(cherry picked from commit 28ac7b8dc1)
2025-09-06 15:26:56 -03:00
Tianling Shen
c07c3f06a9 libtorrent-rasterbar: update boost dependencies
libtorrent only links to boost headers since boost 1.69.
Remove boost-system from the dependencies and add boost as build
dependency.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 7be94fac37)
2025-09-05 18:37:31 +08:00
Eric Fahlgren
e62d5f7ad0 owut: update to 2025.09.03
Bug fixes:
    efahl/owut@5743eea3bc owut: suppress all but json output when using dump
    efahl/owut@efe39e2e38 owut: handle sigint (ctrl-c) properly
Enhancements:
    efahl/owut@49e9bce7b8 owut: provide download progress for slow connections

Signed-off-by: Eric Fahlgren <ericfahlgren@gmail.com>
(cherry picked from commit 96ab3378d0)
2025-09-05 16:58:00 +08:00
George Sapkin
db7e548077 yt-dlp: bump to 2025.08.22
Changelog: https://github.com/yt-dlp/yt-dlp/releases/tag/2025.08.22
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit e604458151)
2025-08-29 17:54:38 -03:00
Stan Grishin
ca56e5c2d4 adblock-fast: update to 1.1.4-r12
README:
* update header

Init-script:
* set an earlier start to get triggers to work
* better str_contains
* improve readability of json() by getting rid of cascading case statements
* add new errors/status messages to get_text()
* prepare get_text() for localization by switching to inline printf
* adjust shellcheck disable comments where needed
* parse unbound config for DNS hijack ports
* test if the archived cache exists on boot and proceed to use it if it does
* add trigger waiting status so that luci app can display correct status
* do not run adb_config_update on boot, speeding up trigger setup

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit ea6111a4a0)
2025-08-29 10:53:14 -07:00
Thibaut VARÈNE
f4a0ee01e0 libradcli: fix build options
The provided Config.in was never sourced from the Makefile, making it
impossible to toggle TLS support.

This commit adds the necessary Makefile glue to fix this.

Also default to TLS disabled, as was the de-facto case since Config.in
was never sourced (and thus the default 'y' never enabled).

Signed-off-by: Thibaut VARÈNE <hacks@slashdirt.org>
(cherry picked from commit 5ffca82f54)
2025-08-28 17:32:26 +03:00
Hannu Nyman
d84d73c16d sing-box: Revert "sing-box: update to 1.12.3"
This reverts commit 6356527dd5.

sing-box 1.12.3 is apparently buggy and crashes.
Reference to #27346 and #27339
Let's revert the upgrade.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2025-08-27 22:29:33 +03:00
CupIvan
bb70450a57 yggdrasil: update to 0.5.12
Signed-off-by: Ivan Chashkin <mail@cupivan.ru>
2025-08-24 21:43:29 +03:00
Jan-Niklas Burfeind
6c57d3cfbb uradvd: provide warning upon disabled configuration
which grants clarity and better traceability.

Signed-off-by: Jan-Niklas Burfeind <git@aiyionpri.me>
(cherry picked from commit e7a4667175)
2025-08-24 19:39:51 +03:00
Jan-Niklas Burfeind
f7727e05d3 uradvd: Update to 2025-08-16
Provide four new options:
--valid-lifetime
--preferred-lifetime
--max-router-adv-interval
--min-router-adv-interval

Signed-off-by: Jan-Niklas Burfeind <git@aiyionpri.me>
(cherry picked from commit b2f14a5e8d)
2025-08-24 19:39:51 +03:00
Nate Robinson
cf712aa7d7 lf: update to r36
https://github.com/gokcehan/lf/releases/tag/r36

Signed-off-by: Nate Robinson <nrobinson2000@me.com>
(cherry picked from commit 0715dff919)
2025-08-24 22:23:32 +08:00
Nate Robinson
c68f78fcc1 lf: add new package
https://github.com/gokcehan/lf

Signed-off-by: Nate Robinson <nrobinson2000@me.com>
(cherry picked from commit 7e362a6e35)
2025-08-24 22:23:32 +08:00
Gregory Gullin
6356527dd5 sing-box: update to 1.12.3
changelog: https://github.com/SagerNet/sing-box/releases/tag/v1.12.3

Signed-off-by: Gregory Gullin <garuwex@gmail.com>
(cherry picked from commit 002e0559a5)
2025-08-24 15:45:57 +08:00
Hannu Nyman
89d3808d1b nano: Update to 8.6
Update nano editor to version 8.6

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 61f29f7435)
2025-08-23 10:05:23 +03:00
Eric Fahlgren
e7c2f839b3 owut: update to 2025.08.15
Bug fixes:
    efahl/owut@c6e75716d1 init: fix typo in file name
    efahl/owut@7f97ab67c2 examples: improve docs for writing pre-install scripts
Enhancements:
    efahl/owut@93f2b06b88 owut: utilize upstream limits instead of hardcoded values
    efahl/owut@7a45c412fc owut: improve usability of 'dump' option
    efahl/owut@35720e369a owut: improve age reporting

Signed-off-by: Eric Fahlgren <ericfahlgren@gmail.com>
(cherry picked from commit c79bed5fd5)
2025-08-23 01:11:14 +08:00
Wei-Ting Yang
091d10162a python-urllib3: update to 2.0.7
Fix CVE-2023-45803 and CVE-2023-43804.

Full changelogs:
- https://github.com/urllib3/urllib3/releases/tag/v2.0.5
- https://github.com/urllib3/urllib3/releases/tag/2.0.6
- https://github.com/urllib3/urllib3/releases/tag/2.0.7

Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com>
(cherry picked from commit 23646be59e)
2025-08-22 16:13:26 +03:00
Tianling Shen
3c8d6669a7 Revert "gping: lock cargo dependencies"
It's enabled by default now.
Make use of MAKE_PATH while at it.

This reverts commit 0118fb4896.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-08-22 17:12:09 +08:00
Tianling Shen
98f3ce412f dufs: remove --locked flag
It's enabled by default now.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ee49f00287)
2025-08-22 17:10:26 +08:00
Tianling Shen
c21161cc5b rust: read build path from {HOST_}MAKE_PATH
Allow set build path by `{HOST_}MAKE_PATH`.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 84cb850b7f)
2025-08-22 17:10:23 +08:00
Tianling Shen
3ac4d7b69a rust: introduce RUST_{HOST,PKG}_LOCKED flag
Introduce `RUST_{HOST,PKG}_LOCKED` flag (enabled by default) to respect
upstream lockfile. This can be disabled by setting it to 0 if you want
to have up-to-date dependencies.

This change also adds new `CARGO_{HOST,PKG}_ARGS` variable to pass extra
build arguments to cargo.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 1000e99185)
2025-08-22 17:10:21 +08:00
Stan Grishin
13b041489b pbr: 1.1.8-36 bugfixes
- drop load_environment_flag and always load environment on start, making
  restart command great again
- store/restore existing jshn namespace when using json()
- remove unneeded sleepCount in is_wan_up()
- move updated README inside files/

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 51686912e0)
2025-08-19 10:05:25 -07:00
George Sapkin
499d01f14f yt-dlp: bump to 2025.08.11
Changelog: https://github.com/yt-dlp/yt-dlp/releases/tag/2025.08.11
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit 9318a5fefb)
2025-08-19 17:42:42 +02:00
George Sapkin
d7ce96f2d2 golang: bump to 1.23.12
go1.23.12 (released 2025-08-06) includes security fixes to the
database/sql and os/exec packages, as well as bug fixes to the runtime.

Fixes: CVE-2025-47907
Link: https://github.com/golang/go/issues?q=milestone%3AGo1.23.12+label%3ACherryPickApproved
Signed-off-by: George Sapkin <george@sapk.in>
2025-08-18 23:39:04 +02:00
Tianling Shen
afe46160ce lttng-tools: fix build with libxml 2.14
Backport a pending patch to fix build with libxml 2.14.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 0ec95bd1f4)
2025-08-14 21:14:16 +08:00
Stan Grishin
1ddc0b1c8d pbr: update to 1.1.8-34
* bugfix: json init was destroying procd_triggers and screwing boot up
  fixes https://github.com/openwrt/packages/issues/27194
* improvement: explicit printf calls in get_text

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit a49f1e2610)
2025-08-12 13:31:49 -07:00
Tianling Shen
0118fb4896 gping: lock cargo dependencies
The new version of dns-lookup failed to build with musl:

error[E0308]: mismatched types
   --> gping/src/main.rs:331:19
    |
331 |         Ok(ip) => ip,
    |                   ^^ expected `Vec<IpAddr>`, found opaque type
    |
   ::: /builder/shared-workdir/build/sdk/dl/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/dns-lookup-2.1.0/src/lookup.rs:17:46
    |
17  | pub fn lookup_host(host: &str) -> io::Result<impl Iterator<Item = IpAddr> + use<>> {
    |                                              ------------------------------------ the found opaque type
    |
    = note:   expected struct `Vec<IpAddr>`

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-08-11 19:58:29 +08:00
Jonas Jelonek
c108b34de3 gping: update to 1.18.0
Signed-off-by: Jonas Jelonek <jelonek.jonas@gmail.com>
(cherry picked from commit c3dcb6c152)
2025-08-11 19:58:29 +08:00
Gregory Gullin
60d8f1e532 sing-box: update to 1.12.0
changelog: https://github.com/SagerNet/sing-box/releases/tag/v1.12.0

Signed-off-by: Gregory Gullin <garuwex@gmail.com>
(cherry picked from commit 654fa2f5f3)
2025-08-11 15:13:25 +08:00
Rosen Penev
8098a4ad60 mariadb: update to 11.4.7
Use upstream solutions to local patches.

Remove test.sh as it's broken.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit cf6ef1ac5a)
2025-08-09 15:32:01 +08:00
Rosen Penev
ee210e7a01 mariadb: fix liburing dependency
CMake is way too opertunistic. Avoid the dependency by manually handling
it.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 9d12a9618a)
2025-08-09 15:32:01 +08:00
Rosen Penev
cf68efad88 mariadb: update to 11.4.4
Remove upstreamed patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit f640d92aa4)
2025-08-09 15:32:01 +08:00
George Sapkin
fba861b38d sqlite3: bump to 3.50.4
Changelog: https://sqlite.org/releaselog/3_49_2.html
Changelog: https://sqlite.org/releaselog/3_50_0.html
Changelog: https://sqlite.org/releaselog/3_50_1.html
Changelog: https://sqlite.org/releaselog/3_50_2.html
Changelog: https://sqlite.org/releaselog/3_50_3.html
Changelog: https://sqlite.org/releaselog/3_50_4.html
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit 810341cf33)
2025-08-08 16:14:38 +08:00
George Sapkin
699dda7ff9 sqlite3: require matching lib version in shell
Shell expects a matching library version to be installed. Specify a
matching version using EXTRA_DEPENDS.

Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit 5b8e0fd464)
2025-08-08 16:14:38 +08:00
Thibaut VARÈNE
e13158a304 uspot: update to Git HEAD (2025-08-07)
e2e3c649ab80 README update
18e6bcc14cc2 uspot/portal: urldecode FORM POST data
bf6051dba822 uspot/handler-uam: accept /login endpoint
32273591d8d5 uspotfilter: provide peer_lookup answers only for known clients
b0aeef9973a9 README: clarify uam vs radius mode features
b7b0d0efb0e2 uspot: improve config documentation
bce68a97fad8 captive: rename to 'uspot'
da6ca713e15d uspot: client_remove(): pass device to ratelimit client_delete()
3ebfe262bfb1 uspot: remove unused radius_call() args
691d73aa00dc uspot: let radius_init() set all required payload members
be50a66b777f uspot: allow setting global bandwidth limits
4851ada4b0c0 uspot: send Called-Station-Id in Acct-On/Off requests
0974fc8d47ac Implement uspot-bpf, an eBPF traffic counter
e99809f97e34 introduce uspotbpf.uc
7f6f43883568 uspotbpf: work around ucode-mod-bpf bug
319e0c285afb uspot: hook traffic accounting
ccf3fa9b8e83 uspot: client_interim(): remove dead code
0e92cc9f6e75 uspotbpf: fix priority conflict with ratelimit
55d40a8794b6 uspot: implement traffic limiting
b05257e862cb uspot: implement swapio
e83f95081c21 uspot: radius_acct(): don't needlessly call uspotfilter
442cff773220 uspotfilter: cleanup unused API
7878d512cd21 handler-api: include 'seconds-remaining' only if not captive
cca6d218a6a7 handler-api: implement 'bytes-remaining'
e8cf3d08ac64 uspot: start(): ratelimit clearing is independent from RADIUS accounting
6d12a2da5b20 README update
bf6364cb61ea config: clarify units for acct_interval
8133b8cd215e uspot: implement state_get()/state_set()
094825fdfe68 radius-client: lowercase non-attribute JSON members
de70c588c2e3 radius-client: add error reporting
ebe9eac34f5b radius: add option for udp or tcp connection
d6b338d5d194 uspot: support RadSec with PSK authentication
53de77512159 uspot: validate config
d0578f740111 uspot: don't store debug data through uspotfilter
fe4fa5e8a25f uspot.init: rename DAS instance
bd1fbe481da3 README update
76a03155db44 uspot: add support for secondary RADIUS servers
694ff75f4fcc uspot: remove 'final_redirect_url' config option
a347454db08c handler: redirect UAM connected clients to the 'res=already' UAM url
0ea8f9bec545 handlers: simplify auth check
f69e1df8db0f Improve RADIUS error handling and reporting
34216b56b9ed src/CMakeLists: disable -Werror
8599a968877b Makefile: sync with OpenWrt repo

Update Makefile to reflect addition of the eBPF module and other changes
in the package

Signed-off-by: Thibaut VARÈNE <hacks@slashdirt.org>
(cherry picked from commit 3d76208b4d)
2025-08-08 16:12:58 +08:00
Bruce Chen
0c0a0c821e aliyun-cli: add new package
The Alibaba Cloud CLI is a tool to manage and
use Alibaba Cloud resources through a command line interface

Signed-off-by: Bruce Chen <a805899926@gmail.com>
(cherry picked from commit f6e404e96d)
2025-08-06 23:44:32 +08:00
Petr Štetiar
b723d5fa9c kmod: fix build failure in install step over dirty build dir
When building kmod-32 package for the first time (clean build_dir), it
builds and installs fine. When building for 2nd time, sometimes
(probably some race condition?) it fails to build in install step with
following error:

  for tool in insmod lsmod rmmod depmod modprobe modinfo; do \
  	ln -s kmod /tmp/build_dir/target-aarch64_cortex-a73+neon-vfpv4_musl/kmod-32/ipkg-install/usr/bin/$tool; \
  done
  ln: failed to create symbolic link '/tmp/build_dir/target-aarch64_cortex-a73+neon-vfpv4_musl/kmod-32/ipkg-install/usr/bin/insmod': File exists
  ln: failed to create symbolic link '/tmp/build_dir/target-aarch64_cortex-a73+neon-vfpv4_musl/kmod-32/ipkg-install/usr/bin/lsmod': File exists
  ln: failed to create symbolic link '/tmp/build_dir/target-aarch64_cortex-a73+neon-vfpv4_musl/kmod-32/ipkg-install/usr/bin/rmmod': File exists
  ln: failed to create symbolic link '/tmp/build_dir/target-aarch64_cortex-a73+neon-vfpv4_musl/kmod-32/ipkg-install/usr/bin/depmod': File exists
  ln: failed to create symbolic link '/tmp/build_dir/target-aarch64_cortex-a73+neon-vfpv4_musl/kmod-32/ipkg-install/usr/bin/modprobe': File exists
  ln: failed to create symbolic link '/tmp/build_dir/target-aarch64_cortex-a73+neon-vfpv4_musl/kmod-32/ipkg-install/usr/bin/modinfo': File exists

Lets fix it by backporting upstream fix.

Fixes: #27171
Link: https://lore.kernel.org/r/20240306145804.135709-1-lucas.de.marchi@gmail.com
Upstream-Status: Backport [c5054b2150]
Signed-off-by: Petr Štetiar <ynezz@true.cz>
(cherry picked from commit 79f78c0e77)
2025-08-06 16:33:20 +02:00
Tianling Shen
771e021d1c inih: Update to r61
Release note: https://github.com/benhoyt/inih/releases/tag/r61

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit f6f3f4c5fd)
2025-08-06 19:03:41 +08:00
Tianling Shen
32e0429e57 openlist: Update to 4.1.0
Release note: https://github.com/OpenListTeam/OpenList/releases/tag/v4.1.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 1f4064269f)
2025-08-06 19:02:24 +08:00
Tianling Shen
09dba4e716 openlist: Update to 4.0.9
Release note: https://github.com/OpenListTeam/OpenList/releases/tag/v4.0.9

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit dd6e44068f)
2025-08-06 19:02:05 +08:00
Tianling Shen
352aa68909 rclone: backport ftp insecure TLS ciphers fix
Added config field to allow insecure TLS ciphers that were disabled
in Go 1.22.

Fixes: #27039
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 80e343dd43)
2025-08-06 18:59:45 +08:00
Tianling Shen
fee8f2446f golang: disable build for powerpc64
e5500 is the only powerpc64 target we have in tree, but it's not
supported by golang[1]. Since it's hard to opt e5500 out from the
supported arch list, simply remove powerpc64 from it for now.

1. https://github.com/golang/go/issues/19074

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit c8ad05854d)
2025-08-06 18:59:38 +08:00
Stan Grishin
5f6bacdbd8 adblock-fast: update to 1.1.4-4
Makefile:
  - bugfix: change references to melmac.net to melmac.ca

README:
  - add basic README with the link to full documentation

Config:
  - add heartbeat_domain
  - add heartbeat_sleep_timeout
  - add sanity_check
  - add update_config_sizes

Init Script:
  - a lot of visual output improvements, especially with verbosity=2
  - better output separation for different verbosity levels
  - removed unneeded runningErrorFile
  - bugfix: updated runningConfigFile
  - updated runningStatusFile and added runningStatusFileLock
  - moved append_url() higher up for better visibility
  - refactor force-redownload/restart on some config changes functionality
  - improve count_blocked_domains
  - add internal debug_log() for debugging functions where output is captured
  - unified all json add/get calls in the same formatting
  - major rework on json() to allow storing of error/warning messages as json objects
  - added some error/warning messages
  - renamed `cache()` function to `adb_file()` to better reflect functionality
  - added functionality to test the dnsmasq config before restarting dnsmasq with ad-blocking
  - added functionality to throw warnings if TLDs or leading-dot domains are discovered
    in the final block-list file (can be disabled by `sanity_check` option)
  - added functionality to test DNS resolution after resolver restart with `heartbeat_domain`
    for `heartbeat_sleep_timeout` seconds
  - added functionality to revert the resolver's config/ad-blocking if heartbeat domain cannot
    be resolved after resolver restart
  - added `ALLOWED_TMP` variable/file for better processing of external allow-lists
  - added debug output to log with the elapsed time for each step of processing
  - drastically improved final block-list optimization with the new awk script
  - minor other performance improvements
  - added check_tld/check_leading_dot CLI commands to show domains breaking sanity checks
  - added validate functions to triggers

Bugfixes:
  - fixes: https://github.com/openwrt/packages/issues/27146
  - supercedes: https://github.com/openwrt/packages/pull/27159

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit af75ccbb4f)
2025-08-05 09:15:59 -07:00
Ray Wang
f0486d997b hev-socks5-tunnel: update to 2.13.0
Upstream changelog:
https://github.com/heiher/hev-socks5-tunnel/releases/tag/2.13.0

Signed-off-by: Ray Wang <git@hev.cc>
(cherry picked from commit 4c73e7f8bf)
2025-08-05 16:20:26 +08:00
Stan Grishin
208ccde35c pbr: update to 1.1.8-32
Makefile:
  - add SPDX-Identifier-License
  - update Copyright

README:
  - add basic README with the link to full documentation

Config:
  - add debug_dnsmasq
  - add procd_boot_trigger_delay

Init Script:
  - move extra_command calls high up for visibility
  - bump packageCompat to sync with luci app
  - implement support for debug_dnsmasq to dump dnsmasq debug into $packageDebugFile
  - create $runningStatusFile json-file allowing more verbose errors/warnings messages
  - replaced `state add` calls with json add calls to store errors/warnings messages
  - remove no longer needed errorSummary, warningSummary
  - ensure environment is only loaded once per run via $load_environment_flag
  - bugfix: update is_{host,hostname,domain,ipv4,mac_address} functions to properly sort policy entries
  - bugfix: change references to melmac.net to melmac.ca
  - add some new error/warning messages
  - add delay before service is started on boot via procd_boot_trigger_delay
  - bugfix: add logic to identify unknown policy entries instead of silently failing on them
  - store error/warning messages as json objects in ubus data for luci app
  - update load_validate_config with debug_dnsmasq and procd_boot_trigger_delay entries

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 4b831c6dbf)
2025-08-04 19:59:53 -07:00
Dirk Brenken
ff3c02aaf2 banIP: update 1.5.6-7
* skip rdap requests/replies with placeholders for all IPv4/IPv6 addresses
* sanitize possible bogus config values, e.g. '/dev/null' as a directory
* change URL for beycyber feed

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit ac1076ef95)
2025-08-04 20:56:28 +02:00
Michael Heimpold
3ae8b6f406 php8: update to 8.3.24
Upstream changelog:
https://www.php.net/ChangeLog-8.php#8.3.24

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2025-08-04 08:28:34 +02:00
Liangbin Lian
3fff86f481 openlist: Remove dependency on fuse
Fixes https://github.com/openwrt/packages/issues/27011

Signed-off-by: Liangbin Lian <jjm2473@gmail.com>
(cherry picked from commit 68c60fdc5d)
2025-08-04 12:50:55 +08:00
Javier Marcet
63664fb2f3 docker-compose: Update to version 2.39.1
Release notes:
https://github.com/docker/compose/releases/tag/v2.39.1

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit e3395ec43c)
2025-08-01 21:05:18 +08:00
Javier Marcet
11c91874c3 docker-compose: Update to version 2.38.2
Release notes:
https://github.com/docker/compose/releases/tag/v2.38.2

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 362b8cda74)
2025-08-01 21:05:18 +08:00
Javier Marcet
ee8e02fe35 docker-compose: Update to version 2.38.1
Release notes:
https://github.com/docker/compose/releases/tag/v2.38.1

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 0ea85424be)
2025-08-01 21:05:18 +08:00
Javier Marcet
22debca006 docker-compose: Update to version 2.38.0
Release notes:
https://github.com/docker/compose/releases/tag/v2.38.0

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit ce5dfd527b)
2025-08-01 21:05:18 +08:00
Javier Marcet
c94a1c8fb7 docker-compose: Update to version 2.37.3
Release notes:
https://github.com/docker/compose/releases/tag/v2.37.3

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 04493a8a8f)
2025-08-01 21:05:18 +08:00
Javier Marcet
0d0b1ecfce docker-compose: Update to version 2.37.2
Release notes:
https://github.com/docker/compose/releases/tag/v2.37.2

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 3b2a63dae2)
2025-08-01 21:05:18 +08:00
Javier Marcet
f69cadae28 docker-compose: Update to version 2.37.1
Release notes:
https://github.com/docker/compose/releases/tag/v2.37.1

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 18557c8547)
2025-08-01 21:05:18 +08:00
Javier Marcet
4baa0bda0e docker-compose: Update to version 2.37.0
Release notes:
https://github.com/docker/compose/releases/tag/v2.37.0

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit d1422dda41)
2025-08-01 21:05:18 +08:00
Javier Marcet
9f7c289d47 docker-compose: Update to version 2.36.2
Release notes:
https://github.com/docker/compose/releases/tag/v2.36.2

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit e344fcc369)
2025-08-01 21:05:18 +08:00
Javier Marcet
50f5b54c0e docker-compose: Update to version 2.36.1
Release notes:
https://github.com/docker/compose/releases/tag/v2.36.1

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 4ac47971db)
2025-08-01 21:05:18 +08:00
Javier Marcet
2378b3cf26 docker-compose: Update to version 2.36.0
Release notes:
https://github.com/docker/compose/releases/tag/v2.36.0

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 7f0b4e4bf5)
2025-08-01 21:05:18 +08:00
Javier Marcet
c969fece7d docker-compose: Update to version 2.35.1
Release notes:
https://github.com/docker/compose/releases/tag/v2.35.1

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 5af23930d3)
2025-08-01 21:05:18 +08:00
Javier Marcet
b96a03a412 docker-compose: Update to version 2.35.0
Release notes:
https://github.com/docker/compose/releases/tag/v2.35.0

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit daa3161704)
2025-08-01 21:05:18 +08:00
Javier Marcet
f7fb09aa3b docker-compose: Update to version 2.34.0
Release notes:
https://github.com/docker/compose/releases/tag/v2.34.0

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 0129618ea6)
2025-08-01 21:05:18 +08:00
Javier Marcet
fbb4759923 docker-compose: Update to version 2.33.1
Release notes:
https://github.com/docker/compose/releases/tag/v2.33.1

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 034505d969)
2025-08-01 21:05:18 +08:00
Javier Marcet
afc344b54f docker-compose: Update to version 2.33.0
Release notes:
https://github.com/docker/compose/releases/tag/v2.33.0

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 0f9bcfa8d8)
2025-08-01 21:05:18 +08:00
Javier Marcet
664f0f843b docker-compose: Update to version 2.32.4
Release notes:
https://github.com/docker/compose/releases/tag/v2.32.3
https://github.com/docker/compose/releases/tag/v2.32.4

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 4055a2b0a5)
2025-08-01 21:05:18 +08:00
Javier Marcet
c50bfe1ac9 docker-compose: Update to version 2.32.2
Release notes:
https://github.com/docker/compose/releases/tag/v2.32.2

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit b7974fb6d2)
2025-08-01 21:05:18 +08:00
Javier Marcet
4e560a183c docker-compose: Update to version 2.32.1
Release notes:
https://github.com/docker/compose/releases/tag/v2.32.1

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit de758f96de)
2025-08-01 21:05:18 +08:00
Javier Marcet
b5217db7fd docker-compose: Update to version 2.32.0
Release notes:
https://github.com/docker/compose/releases/tag/v2.32.0

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 95d201c260)
2025-08-01 21:05:18 +08:00
Javier Marcet
a833196c2c docker-compose: Update to version 2.31.0
Release notes:
https://github.com/docker/compose/releases/tag/v2.31.0

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 278b9d1f63)
2025-08-01 21:05:18 +08:00
Javier Marcet
5feb39aef5 docker-compose: Update to version 2.30.3
Release notes:
https://github.com/docker/compose/releases/tag/v2.30.3

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 5220a425c6)
2025-08-01 21:05:18 +08:00
Javier Marcet
1886d85659 docker-compose: Update to version 2.30.2
Release notes:
https://github.com/docker/compose/releases/tag/v2.30.2

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 6a1b0e8c9e)
2025-08-01 21:05:18 +08:00
Robert Marko
e8a705e21e atop: update to 2.12.0
2.11.0 will not compile with GCC15, so update to 2.12.0.
It also fixes CVE-2025-31160.

Fixes: #27085
Signed-off-by: Robert Marko <robimarko@gmail.com>
(cherry picked from commit 90dfd41b51)
2025-07-30 12:03:14 +02:00
Rosen Penev
fa86cd5abb atop: fix compilation with full NLS
nls.mk is missing.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 8a0f28c78c)
2025-07-30 12:01:37 +02:00
Wesley Gimenes
6484166d82 mstflint: fix SECTION variable typo
Change SECTION variable value from `Utilities` to `utils`,
probably a confusion with the variable CATEGORY.

Signed-off-by: Wesley Gimenes <wehagy@proton.me>
(cherry picked from commit 93d3840f1a)
2025-07-30 12:01:06 +02:00
Wesley Gimenes
c1d7a16928 bluez-tools: fix SECTION variable typo
Change SECTION variable value from `Utilities` to `utils`,
probably a confusion with the variable CATEGORY.

Signed-off-by: Wesley Gimenes <wehagy@proton.me>
(cherry picked from commit 59628aaceb)
2025-07-30 12:01:01 +02:00
Richard Muzik
a4ef5c8971 python-incremental: Update to 24.7.2
To see changes check NEWS [1].

[1] https://github.com/twisted/incremental/blob/incremental-24.7.2/NEWS.rst

Signed-off-by: Richard Muzik <richard.muzik@turris.com>
(cherry picked from commit 63b3e10116)
2025-07-30 12:00:32 +02:00
Luca Barbato
250ba60c52 rust: update to 1.87.0
Simplify the build invocation and reorder the target list to avoid
failures due the build process changes.

Signed-off-by: Luca Barbato <lu_zero@gentoo.org>
(cherry picked from commit 95eef0fd58)
2025-07-30 14:46:22 +08:00
George Sapkin
a52be003fb yt-dlp: bump to 2025.07.21
Changelog: https://github.com/yt-dlp/yt-dlp/releases/tag/2025.07.21
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit 17c6423e8f)
2025-07-30 03:08:02 +08:00
Tianling Shen
a4834a16bc microsocks: Update to 1.0.5
Release note: https://github.com/rofl0r/microsocks/releases/tag/v1.0.5

Removed upstreamed patches.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ab4b299591)
2025-07-29 17:09:21 +08:00
Ray Wang
98c37f2ae4 hev-socks5-tproxy: update to 2.9.0
Upstream changelog:
https://github.com/heiher/hev-socks5-tproxy/releases/tag/2.9.0

Signed-off-by: Ray Wang <git@hev.cc>
(cherry picked from commit dba6e9b94c)
2025-07-28 10:33:11 +03:00
Ray Wang
c9438196e8 hev-socks5-tunnel: update to 2.12.0
Upstream changelog:
https://github.com/heiher/hev-socks5-tunnel/releases/tag/2.12.0

Signed-off-by: Ray Wang <git@hev.cc>
(cherry picked from commit 17998bb7b8)
2025-07-28 10:32:50 +03:00
Ray Wang
a0f9d114fc hev-socks5-server: update to 2.9.0
Upstream changelog:
https://github.com/heiher/hev-socks5-server/releases/tag/2.9.0

Signed-off-by: Ray Wang <git@hev.cc>
(cherry picked from commit a835b3afc1)
2025-07-28 10:32:34 +03:00
Tianling Shen
694c74b00e dufs: lock cargo dependencies
The new version of tokio is not compatible with musl:

error[E0432]: unresolved import `tokio::net::TcpListener`
  --> src/main.rs:34:13
   |
34 | use tokio::{net::TcpListener, task::JoinHandle};
   |             ^^^^^^^^^^^^^^^^ no `TcpListener` in `net`

error[E0433]: failed to resolve: could not find `UnixListener` in `net`
   --> src/main.rs:156:44
    |
156 |                 let listener = tokio::net::UnixListener::bind(socket_path)
    |                                            ^^^^^^^^^^^^ could not find `UnixListener` in `net`

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 1716415018)
2025-07-25 18:34:17 +08:00
Tianling Shen
babd0b0d95 dufs: do not reload firewall manually
This is no longer required after commit openwrt/procd@2e206dbe77
("service: add support for triggers on service/instance data changes").

Also remove unused 'name' field.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 12b50193b1)
2025-07-25 18:34:17 +08:00
Tianling Shen
add0427cd2 dufs: add new package
Dufs is a distinctive utility file server that supports static serving,
uploading, searching, accessing control, webdav...

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 2c8a641e0a)
2025-07-25 18:34:17 +08:00
Tianling Shen
9af167342e cloudreve: Update to 4.3.0
Major update log: https://github.com/cloudreve/cloudreve/releases/tag/4.0.0

Updated assets build commands.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 5bfd9558f4)
2025-07-25 13:42:49 +08:00
Tianling Shen
9f7db6740c geoipupdate: Update to 7.1.1
Release note: https://github.com/maxmind/geoipupdate/releases/tag/v7.1.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 9b158a7efd)
2025-07-25 13:42:49 +08:00
Tianling Shen
69055d9003 cloudflared: Update to 2025.5.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit c26204d36a)
2025-07-25 13:42:49 +08:00
Tianling Shen
5332c102e2 cloudflared: Update to 2025.4.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 12b3f62910)
2025-07-25 13:42:49 +08:00
Tianling Shen
6259ccca6a rclone: Update to 1.70.3
Release note: https://github.com/rclone/rclone/releases/tag/v1.70.3

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit e565e93ed8)
2025-07-25 13:42:49 +08:00
Tianling Shen
cca20294fa v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 083f4ce617)
2025-07-25 13:42:49 +08:00
Tianling Shen
8e128bb4c1 openlist: Update to 4.0.8
Release note: https://github.com/OpenListTeam/OpenList/releases/tag/v4.0.8

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 27d1a4bf37)
2025-07-25 13:42:48 +08:00
Tianling Shen
0f5809232d btop: Update to 1.4.4
Removed upstreamed patch.

Release note: https://github.com/aristocratos/btop/releases/tag/v1.4.4

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 062287375c)
2025-07-25 13:42:48 +08:00
Nate Robinson
e2e3e60b13 btop: add patch to fix download/upload display
Uses https://github.com/aristocratos/btop/pull/1156

Signed-off-by: Nate Robinson <nrobinson2000@me.com>
(cherry picked from commit 99bc4798ed)
2025-07-25 13:42:48 +08:00
Ray Wang
0e6965cc7d fsh: update to 4.10.0
Upstream changelog:
https://github.com/heiher/hev-fsh/releases/tag/4.10.0

Signed-off-by: Ray Wang <git@hev.cc>
(cherry picked from commit c7fb6e96f8)
2025-07-25 13:37:58 +08:00
Ray Wang
2c5b810f83 natmap: update to 20250721
Upstream changelog:
https://github.com/heiher/natmap/releases/tag/20250721

Signed-off-by: Ray Wang <git@hev.cc>
(cherry picked from commit 30e1d245ac)
2025-07-25 13:37:48 +08:00
Gregory Gullin
48034babc5 sing-box: Update to 1.11.15
changelog: https://github.com/SagerNet/sing-box/releases/tag/v1.11.15

Signed-off-by: Gregory Gullin <garuwex@gmail.com>
(cherry picked from commit b9ac3c5e7d)
2025-07-23 20:01:37 +08:00
Josef Schlehofer
db0d5d7319 snort3: drop patches which were upstreamed
While backporting the latest version of snort3 into the OpenWrt 24.10,
it looks like that the patches folder was not pushed. Lets fix that.

Fixes: 46d6c499fe ("snort3: update to 3.9.1.0")

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2025-07-23 19:59:47 +08:00
Liu Yu
22b5394158 bind: bump to 9.20.11
Fix a possible assertion failure when stale-answer-client-timeout
is set to 0. (CVE-2025-40777)

Signed-off-by: Liu Yu <f78fk@live.com>
(cherry picked from commit 283702c29f)
2025-07-20 08:48:02 -04:00
Fabrice Fontaine
59dc9c9cde sound/wavpack: assign PKG_CPE_ID
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:wavpack:wavpack

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit ffd21c8762)
2025-07-20 11:39:58 +02:00
Daniel Golle
16a3c592cc wavpack: update to version 5.8.1
"This dot release replaces 5.8.0 that was missing a couple CMake files
 in the tarball and the multicore detection did not compile on MacOS
 and other BSDs. Because the Windows executables were not affected I
 will not be updating them."

 --------------------------------
 Release 5.8.0 - January 27, 2025
 --------------------------------

  added: if present, use multiple cores by default (cli programs only)
  added: option --no-threads to force single-threading (cli programs)
  fixed: noise issue in hybrid mode (low bitrate / high sample rate)
  improved: all new DNS algorithm for better hybrid mode quality
  improved: "extra" option with multithreading and hybrid modes
  added: TSOC (Composer Sort) added to handled ID3v2 tags
  added: --no-overwrite command-line option to wvunpack
  fixed: handling of 24+ channels (CoolEdit / Audition)
  fixed: encoding raw audio from pipes (Windows only)
  fixed: handling of unpacked samples in WAV files
  fixed: rare command-line option parsing issue

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit ab6dcf82d6)
2025-07-20 11:39:58 +02:00
Daniel Golle
079cd88324 wavpack: add wavpack library for audio compression
Add WavPack audio compression/decompression library.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit f9b8abf844)
2025-07-20 11:39:58 +02:00
Thibaut VARÈNE
8bce98d40a ratelimit: update to Git HEAD (2025-06-15)
60405a069668 update Makefile
6713c02a68de define filter priority constant
125fff7fab6b disable verbose debug logging

Fixes: 3211b6295b
Signed-off-by: Thibaut VARÈNE <hacks@slashdirt.org>
(cherry picked from commit 96ff9f4349)
2025-07-20 09:19:23 +02:00
Thibaut VARÈNE
2f0a6dd3c9 ratelimit: add package
ratelimit is a stateful ubus interface to the HTB traffic shaper,
enabling per-client bandwidth limits assignment.

Signed-off-by: Thibaut VARÈNE <hacks@slashdirt.org>
(cherry picked from commit 3211b6295b)
2025-07-20 09:19:23 +02:00
Jan Kardell
1989330e66 sudo: Fix license file
Signed-off-by: Jan Kardell <jan.kardell@telliq.com>
2025-07-18 22:25:04 +08:00
Jan Kardell
2c0a7f40c4 sudo: bump to version 1.9.17p1
Fixes: CVE-2025-32462
Fixes: CVE-2025-32463

Signed-off-by: Jan Kardell <jan.kardell@telliq.com>
(cherry picked from commit b153b6a034)
2025-07-18 22:25:04 +08:00
Liu Yu
0fd76149ec bind: bump to 9.20.10
New notify-defer configuration option
Removed dependency on libsystemd
Fixed zone deletion issue (GL #5291)
Fixed zone refresh bug (GL #5307)

reset PKG_RELEASE to 1

Signed-off-by: Liu Yu <f78fk@live.com>
Co-authored-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 43681b5420)
2025-07-18 08:42:33 -04:00
John Audia
52a1241738 snort3: remove gperftools dep for mips* and powerpc
Add conditional to disable gperftools-runtime depends for powerpc and mips due to inability
to compile introduced with 7345b73c30

Co-authored-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
Signed-off-by: John Audia <therealgraysky@proton.me>
2025-07-18 13:06:41 +02:00
John Audia
46d6c499fe snort3: update to 3.9.1.0
hangelog: https://github.com/snort3/snort3/releases/tag/3.9.1.0

% # snort --version

   ,,_     -*> Snort++ <*-
  o"  )~   Version 3.9.1.0
   ''''    By Martin Roesch & The Snort Team
           http://snort.org/contact#team
           Copyright (C) 2014-2025 Cisco and/or its affiliates. All rights reserved.
           Copyright (C) 1998-2013 Sourcefire, Inc., et al.
           Using DAQ version 3.0.20
           Using Hyperscan version 5.4.2 2025-06-30
           Using libpcap version 1.10.5 (with TPACKET_V3)
           Using LuaJIT version 2.1.0-beta3
           Using LZMA version 5.6.2
           Using OpenSSL 3.5.0 8 Apr 2025
           Using PCRE2 version 10.42 2022-12-11
           Using ZLIB version 1.3.1

Build system: x86/64
Build-tested: x86/64
Run-tested: x86/64

Signed-off-by: John Audia <therealgraysky@proton.me>
2025-07-18 13:06:41 +02:00
John Audia
62ea8e8e02 libdaq3: update to 3.0.20
Update to latest version.

Changelog: https://github.com/snort3/libdaq/releases/tag/v3.0.20

Signed-off-by: John Audia <therealgraysky@proton.me>
2025-07-18 13:06:41 +02:00
Rosen Penev
c7b68fb51c python3: update to 3.11.10
Just a security bugfix.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit f2d5c861bd)
2025-07-18 11:59:50 +02:00
Sean Khan
9684653566 python3: Bump version 3.11 to 3.11.9
Also bumps setuptools to version 24.0

Run tested: aarch64, Dynalink DL-WRX36, Master Branch

Maintainer: Jeffery To <jeffery.to@gmail.com>

Signed-off-by: Sean Khan <datapronix@protonmail.com>
(cherry picked from commit 49e3c330d4)
2025-07-18 11:59:44 +02:00
Ted Hess
d60efa0a24 sox: Remove unmaintained package. See sox_ng replacement
Sourceforge project abandoned - last version was 14.4.2 2015-02-22
New source: https://codeberg.org/sox_ng

Signed-off-by: Ted Hess <thess@kitschensync.net>
(cherry picked from commit bae138d392)
2025-07-18 11:49:13 +02:00
Ted Hess
c364282cfd sox: Remove wavpack (explicitly) from build
Remove myself as maintainer

Signed-off-by: Ted Hess <thess@kitschensync.net>
(cherry picked from commit 76d5db5856)
2025-07-18 11:48:54 +02:00
Daniel Golle
54f0f81029 gnupg2: update to 2.4.8
Noteworthy changes in version 2.4.8 (2025-05-14)
------------------------------------------------

  * gpg: Fix a verification DoS due to a malicious subkey in the
    keyring.  [T7527]

  * gpg: Fix a regression in 2.4.7 for generating a key from card.
    [T7457]

  * gpg: Fix --quick-add-key for Weierstrass ECC with usage given.
    [T7506]

  * gpg: Fully implement the group key flag.  [rGedd01d8fc4]

  * gpg: Make combination of show-only-fpr-mbox and show-unusable-uid
    work.  [rGeb2a90d343]

  * gpgsm: Do not return an error code when importing a certificate
    with an empty subject.  [T7171]

  * scd: Accept P15 cards with a zero-length label.  [rG18b4ebb28a]

  * keyboxd: Use case-insensitive search for mail addresses.  [T7576]

  * gpgconf: Fix reload and kill of keyboxd.  [T7569]

  * w32: Fix posssible lockup due to lost select results.
    [rG9448d01d61]

  Release-info: https://dev.gnupg.org/T7428

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 3017332949)
2025-07-18 11:47:15 +02:00
Daniel Golle
ab5236e32f gnupg2: update to version 2.4.7
A very long list of changes, see
https://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git;a=blob;f=NEWS;hb=7bdaf56479918806ea4013df0ba2dd24bbbb35d6

dirmngr now requires either GnuTLS or NTBTLS. Build against GnuTLS.
Add missing PACKAGE_MAINTAINER while at it.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit a52e843d83)
2025-07-18 11:47:10 +02:00
Thlv Alivs
2847dc3514 zabbix: update to 7.0.12
also fix build error

Signed-off-by: Thlv Alivs <zgmzzzz18@gmail.com>
(cherry picked from commit 7c268c3ac2)
2025-07-18 11:46:53 +02:00
John Audia
efdfbd86b4 htop: update to 3.4.1
Changelog: https://github.com/htop-dev/htop/blob/main/ChangeLog#L1-L10

Build system: x86/64
Build-tested: x86/64
Run-tested: x86/64

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 151156c9cc)
2025-07-18 11:44:16 +02:00
Maxim Storchak
bdadf5f75c htop: tell which variant of ncurses to look for
Signed-off-by: Maxim Storchak <m.storchak@gmail.com>
(cherry picked from commit dc0b480a73)
2025-07-18 11:44:10 +02:00
John Audia
bd0cc76a04 htop: update to 3.4.0
Changelog: https://github.com/htop-dev/htop/compare/3.3.0...3.4.0

Build system: x86/64
Build-tested: bcm27xx/bcm2712, x86/64
Run-tested: bcm27xx/bcm2712

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 23aeff2341)
2025-07-18 11:43:47 +02:00
Henning Schild
4ee5e08a24 socat: drop old patch
reverts
17cfc75b98 ("socat: Fix compile with deprecated APIs disabled")

The package no longer relies on deprecated openssl functions.

Signed-off-by: Henning Schild <henning@hennsch.de>
(cherry picked from commit adeaf14c2d)
2025-07-18 11:42:40 +02:00
Henning Schild
3a475298e9 socat: update to 1.8.0.3
reverting because upstream fixed it:
2650de4686 ("socat: fix compile error when ccache is enabled")

Closes: https://github.com/openwrt/packages/issues/26585
Signed-off-by: Henning Schild <henning@hennsch.de>
(cherry picked from commit 535ce8ea3f)
2025-07-18 11:42:34 +02:00
Jan Hák
4d7b45061f knot: update to version 3.4.7
Release notes: https://www.knot-dns.cz/2025-06-04-version-347.html

Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit a1d04258ed)
2025-07-18 11:40:45 +02:00
Josef Schlehofer
ef158efab8 stress: drop old unmaintained project
As a replacement for this project despite it was resurrected,
it is not maintained.

We added stress-ng [1], which is regularly updated and
gets new features and there is no reason to have two packages
in this repository.

[1] fba6bb9489 ("stress-ng: add")

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 74aaf9c131)
2025-07-18 11:40:13 +02:00
Ted Hess
f80a149eda sox_ng: Remove (lib)speex un-expected inclusion by discovery
Building sox_ng under certain environments inadvertantly tries to include Speex code.
This patch forces sox_ng to build without Speex codec references.

Signed-off-by: Ted Hess <thess@kitschensync.net>
(cherry picked from commit 2521e8cf86)
2025-07-18 11:40:03 +02:00
Ted Hess
006d09c351 sox_ng: Adding new package sox_ng v14.5.1.1
Upstream continued developement for SoX (abandoned project v14.4.x)
Added support for opus audio format and wavpack in new builds

Signed-off-by: Ted Hess <thess@kitschensync.net>
(cherry picked from commit 88b086fe45)
2025-07-18 11:39:37 +02:00
Jonas Gorski
a651827eea znc: update to 1.10.1
Update ZNC to latest release 1.10.1.

Changelogs:

* https://wiki.znc.in/ChangeLog/1.10.0
* https://wiki.znc.in/ChangeLog/1.10.1

Signed-off-by: Jonas Gorski <jonas.gorski@gmail.com>
(cherry picked from commit 2f38de7ffa)
2025-07-18 11:38:32 +02:00
Noah Meyerhans
bb6c61de15 knot-resolver: disable jemalloc support
knot-resolver will attempt to use jemalloc if it's available.
Jemalloc was added to openwrt packages in PR: Add jemalloc and integrate into bind #26721 [1].
At this time, we would rather continue linking with the libc malloc,
so this PR disables jemalloc support explicitly in the knot-resolver build configuration.

[1] https://github.com/openwrt/packages/pull/26721#issuecomment-2973865778

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
(cherry picked from commit 3413d5bd9c)
2025-07-18 11:37:38 +02:00
Daniel Golle
51e3ba11e4 cryptsetup: update to 2.8.0
See https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.8/v2.8.0-ReleaseNotes

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit b965e893b7)
2025-07-18 11:37:21 +02:00
Daniel Golle
4d4356f1a3 cryptsetup: update to version 2.7.5
Enable building cryptsetup-reencrypt, integritysetup and veritysetup,
add new binary packages for integritysetup and veritysetup.

Changes since version 2.7.4
~~~~~~~~~~~~~~~~~~~~~~~~~~~
* Fix possible online reencryption data corruption (only in 2.7.x).

  In some situations (initializing a suspended device-mapper device),
  cryptsetup disabled direct-io device access. This caused unsafe
  online reencryption operations that could lead to data corruption.
  The code now adds strict checks (and aborts the operation) and
  changes direct-io detection code to prevent data corruption.

* Fix a clang compilation error in SSH token plugin.

  As clang linker treats missing symbols as errors, the linker phase
  for the SSH token failed as the optional cryptsetup_token_buffer_free
  was not defined.

* Fix crypto backend initialization in crypt_format_luks2_opal API call.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit befdf8a5b2)
2025-07-18 11:37:16 +02:00
Rosen Penev
dfbed2c9ea vim: update to 9.1
Fixes compilation with GCC15.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 48f3c800a7)
2025-07-18 11:36:20 +02:00
Josef Schlehofer
45a9470246 python-uci: update to version 0.10.3 + two patches
Release notes:
https://gitlab.nic.cz/turris/pyuci/-/tags/v0.10.0
https://gitlab.nic.cz/turris/pyuci/-/tags/v0.10.1
https://gitlab.nic.cz/turris/pyuci/-/tags/v0.10.2
https://gitlab.nic.cz/turris/pyuci/-/tags/v0.10.3

Upstream (pyuci developers) removed setup.py,
I bring it back to be able to compile it despite
that we do support building packages, which are
using pyproject.toml, but the thing here is
that their pyproject.toml requires setuptools 74.1.0
[1] [2], but Python 3.11 is using bundled setuptools
and pip [3] [4]. In current version 3.11.13,
there is still outdated version of setuptools, but
it looks like that in the newer version, there will be
new one [5].

Once, there is released Python 3.11.14 and updated
in OpenWrt, these patches can be dropped.

[1] 240180b294/pyproject.toml (L29)
[2] https://setuptools.pypa.io/en/stable/history.html#v74-1-0
[3] c94ab433ca/lang/python/python3-version.mk (L18)
[4] https://github.com/python/cpython/commits/3.11/Lib/ensurepip/_bundled
[5] c96ab19ae4

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit d457c26c0d)
2025-07-18 11:35:19 +02:00
John Audia
510eb4d00b pciutils: update to 3.14.0
Removed upstreamed: 110-gcc14.patch

Changelog: 6f6d842ea8

% lspci  --version
lspci version 3.14.0

Build system: x86/64
Build-tested: x86/64
Run-tested: x86/64

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 011acd9ec0)
2025-07-18 11:22:22 +02:00
Javier Marcet
c5b8f0a5e0 luajit2: update to v2.1-20250529
For changes, see tagged commit:
https://github.com/openresty/luajit2/releases/tag/v2.1-20250529

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 157d881e65)
2025-07-18 09:39:47 +02:00
Javier Marcet
3296488f71 luajit2: update to v2.1-20250117
See: https://github.com/openresty/luajit2/releases/tag/v2.1-20250117

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 1a05910478)
2025-07-18 09:39:46 +02:00
Javier Marcet
ce106b22ed luajit2: update to v2.1-20241113
Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 6df4c936d6)
2025-07-18 09:39:46 +02:00
Javier Marcet
d09512d48d luajit2: update to v2.1-20241104
Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 5d3e411662)
2025-07-18 09:39:46 +02:00
Josef Schlehofer
29ccba7ee1 postgresql: update to version 15.13
Changelog:
https://www.postgresql.org/docs/release/15.7/
https://www.postgresql.org/docs/release/15.8/
https://www.postgresql.org/docs/release/15.9/
https://www.postgresql.org/docs/release/15.10/
https://www.postgresql.org/docs/release/15.11/
https://www.postgresql.org/docs/release/15.12/
https://www.postgresql.org/docs/release/15.13/

Removed patch:
700-no-arm-crc-march-change.patch: the patch was
removed from this repository in the master branch
and I see that there were some changes in upstream, so
it should be fixed [1].

[1] 851c6ff18f

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2025-07-17 11:47:00 +01:00
Rob Hoelz
7c43f53cb4 prometheus-node-exporter-lua: Fix broken textfile collector
A recent change (00d420e80) removed the `output` function, which textfile.lua was
using to output metrics.  So use the underlying output handle instead

Signed-off-by: Rob Hoelz <rob@hoelz.ro>
(cherry picked from commit 86e20d37a8)
2025-07-16 22:18:26 +02:00
Austin Lane
978dfa5be0 python-click: add hostbuild
Signed-off-by: Austin Lane <vidplace7@gmail.com>
(cherry picked from commit 117a3a2b1b)
2025-07-15 15:07:08 +02:00
Wesley Gimenes
b8c5c97d62 netbird: update to 0.50.2
changelog: https://github.com/netbirdio/netbird/releases/tag/v0.50.2

Signed-off-by: Wesley Gimenes <wehagy@proton.me>
(cherry picked from commit bcb6992f4b)
2025-07-12 15:40:32 +08:00
Wesley Gimenes
d499a8aa73 netbird: update to 0.50.1
changelog: https://github.com/netbirdio/netbird/releases/tag/v0.50.1

Signed-off-by: Wesley Gimenes <wehagy@proton.me>
(cherry picked from commit 9d0a14ed4e)
2025-07-12 15:40:32 +08:00
Wesley Gimenes
86cc3ea5ae netbird: update to 0.49.0
changelog: https://github.com/netbirdio/netbird/releases/tag/v0.49.0

Signed-off-by: Wesley Gimenes <wehagy@proton.me>
(cherry picked from commit 5745ffb547)
2025-07-12 15:40:32 +08:00
Wesley Gimenes
2ed9df1468 netbird: update to 0.45.3
changelog: https://github.com/netbirdio/netbird/releases/tag/v0.45.3

Signed-off-by: Wesley Gimenes <wehagy@proton.me>
(cherry picked from commit f71550540e)
2025-07-12 15:40:32 +08:00
Wesley Gimenes
c449584417 netbird: update to 0.45.2
changelog: https://github.com/netbirdio/netbird/releases/tag/v0.45.2

Signed-off-by: Wesley Gimenes <wehagy@proton.me>
(cherry picked from commit 1bba5b93f9)
2025-07-12 15:40:32 +08:00
Wesley Gimenes
b8ae88bd7d netbird: update to 0.45.1
changelog: https://github.com/netbirdio/netbird/releases/tag/v0.45.1

Signed-off-by: Wesley Gimenes <wehagy@proton.me>
(cherry picked from commit 37ff02b716)
2025-07-12 15:40:32 +08:00
Wesley Gimenes
5de5ac6e28 netbird: update to 0.44.0
changelog: https://github.com/netbirdio/netbird/releases/tag/v0.44.0

Signed-off-by: Wesley Gimenes <wehagy@proton.me>
(cherry picked from commit cffbe8b32a)
2025-07-12 15:40:32 +08:00
Wesley Gimenes
928f297bc5 netbird: update to 0.43.3
changelog: https://github.com/netbirdio/netbird/releases/tag/v0.43.3

Signed-off-by: Wesley Gimenes <wehagy@proton.me>
(cherry picked from commit c91e9322ce)
2025-07-12 15:40:32 +08:00
Wesley Gimenes
795063e19c netbird: update to 0.43.2
changelog: https://github.com/netbirdio/netbird/releases/tag/v0.43.2

Signed-off-by: Wesley Gimenes <wehagy@proton.me>
(cherry picked from commit cef2fb9d8e)
2025-07-12 15:40:32 +08:00
Wesley Gimenes
d94b61fdcf netbird: update to 0.43.1
changelog: https://github.com/netbirdio/netbird/releases/tag/v0.43.1

Signed-off-by: Wesley Gimenes <wehagy@proton.me>
(cherry picked from commit af32ef43f8)
2025-07-12 15:40:32 +08:00
Wesley Gimenes
7ef85ae500 netbird: update to 0.43.0
changelog: https://github.com/netbirdio/netbird/releases/tag/v0.43.0

Signed-off-by: Wesley Gimenes <wehagy@proton.me>
(cherry picked from commit c3692c601e)
2025-07-12 15:40:32 +08:00
Wesley Gimenes
5d1f4ee5b8 netbird: update to 0.42.0
changelog: https://github.com/netbirdio/netbird/releases/tag/v0.42.0

Signed-off-by: Wesley Gimenes <wehagy@proton.me>
(cherry picked from commit 2ac31acc54)
2025-07-12 15:40:32 +08:00
Wesley Gimenes
efd21555dd netbird: update to 0.41.3
changelog: https://github.com/netbirdio/netbird/releases/tag/v0.41.3

Signed-off-by: Wesley Gimenes <wehagy@proton.me>
(cherry picked from commit 2da44915c9)
2025-07-12 15:40:32 +08:00
Wesley Gimenes
6c5fe6f5ae netbird: update to 0.41.2
changelog: https://github.com/netbirdio/netbird/releases/tag/v0.41.2

Signed-off-by: Wesley Gimenes <wehagy@proton.me>
(cherry picked from commit 9c557d206b)
2025-07-12 15:40:32 +08:00
Wesley Gimenes
452c60178c netbird: update to 0.41.1
changelog: https://github.com/netbirdio/netbird/releases/tag/v0.41.1

Signed-off-by: Wesley Gimenes <wehagy@proton.me>
(cherry picked from commit 4dee0fc39e)
2025-07-12 15:40:32 +08:00
Wesley Gimenes
6401e82be9 netbird: update to 0.40.1
changelog: https://github.com/netbirdio/netbird/releases/tag/v0.40.1

Signed-off-by: Wesley Gimenes <wehagy@proton.me>
(cherry picked from commit c5576299a0)
2025-07-12 15:40:32 +08:00
Wesley Gimenes
05b2df911f netbird: update to 0.40.0
changelog: https://github.com/netbirdio/netbird/releases/tag/v0.40.0

Signed-off-by: Wesley Gimenes <wehagy@proton.me>
(cherry picked from commit d520931ef3)
2025-07-12 15:40:32 +08:00
Eric Fahlgren
ef36be79d9 owut: update to 2025.07.11
Bug fixes:
    efahl/owut@0d00192dbe package checks: change error to warning for missing dependencies
Enhancements:
    efahl/owut@2ba6d113ba status: show link to commit at which build performed

Signed-off-by: Eric Fahlgren <ericfahlgren@gmail.com>
(cherry picked from commit ea07bdb591)
2025-07-12 13:18:02 +08:00
Richard Muzik
868135c12f git: update to 2.46.4
Fixes:
  - CVE-2025-27613
  - CVE-2025-27614
  - CVE-2025-46334
  - CVE-2025-46835
  - CVE-2025-48384
  - CVE-2025-48385
  - CVE-2025-48386

Signed-off-by: Richard Muzik <richard.muzik@turris.com>
(cherry picked from commit 99c111e391)
2025-07-10 13:02:13 +02:00
Ryan Keane
f69ed68276 git: Set PKG_FORTIFY_SOURCE to 0 when lto enabled
If PKG_FORTIFY_SOURCE is not 0 and lto is enabled for package git, it
will fail to compile with the following example error:

/openwrt/staging_dir/toolchain-aarch64_generic_gcc-14.1.0_musl/include/stdio.h: In function 'process_curl_messages': /openwrt/staging_dir/toolchain-aarch64_generic_gcc-14.1.0_musl/include/stdio.h:90:8: error: inlining failed in call to 'always_inline' 'fwrite': function body can be overwritten at link time
   90 | size_t fwrite(const void *__restrict, size_t, size_t, FILE *__restrict);
      |        ^
http.c:355:33: note: called from here
  355 |                                 fprintf(stderr, "Received DONE message for unknown request!\n");
      |                                 ^

A related issue is #13016 .
This commit set PKG_FORTIFY_SOURCE to 0 if CONFIG_USE_LTO is y.

Close #24366

Link: https://lore.kernel.org/git/CAHfWF5mjquES-nocQaK+CAEsqWgdy-_OYdGtN82heYs0eJP3eQ@mail.gmail.com/T/#t
Link: https://github.com/openwrt/openwrt/issues/13016
Link: https://gcc.gnu.org/bugzilla/show_bug.cgi?id=110834
Signed-off-by: Ryan Keane <the.ra2.ifv@gmail.com>
(cherry picked from commit b7bbd42594)
2025-07-10 13:02:13 +02:00
Hirokazu MORIKAWA
055c9888a3 git: use symbolic link
The following error occurs when CONFIG_USE_APK is set.

```
ln /mnt/gl-mt6000-main/openwrt/build_dir/target-aarch64_cortex-a53_musl/git-2.46.2/.pkgdir/git/usr/lib/git-core/git /mnt/gl-mt6000-main/openwrt/build_dir/target-aarch64_cortex-a53_musl/git-2.46.2/.pkgdir/git/usr/bin/git
ln /mnt/gl-mt6000-main/openwrt/build_dir/target-aarch64_cortex-a53_musl/git-2.46.2/.pkgdir/git/usr/lib/git-core/git-shell /mnt/gl-mt6000-main/openwrt/build_dir/target-aarch64_cortex-a53_musl/git-2.46.2/.pkgdir/git/usr/bin/git-shell
touch /mnt/gl-mt6000-main/openwrt/build_dir/target-aarch64_cortex-a53_musl/git-2.46.2/.pkgdir/git.installed
mkdir -p /mnt/gl-mt6000-main/openwrt/staging_dir/target-aarch64_cortex-a53_musl/root-mediatek/stamp
SHELL= flock /mnt/gl-mt6000-main/openwrt/tmp/.root-copy.flock -c 'cp -fpR /mnt/gl-mt6000-main/openwrt/build_dir/target-aarch64_cortex-a53_musl/git-2.46.2/.pkgdir/git/. /mnt/gl-mt6000-main/openwrt/staging_dir/target-aarch64_cortex-a53_musl/root-mediatek/'
cp: '/mnt/gl-mt6000-main/openwrt/build_dir/target-aarch64_cortex-a53_musl/git-2.46.2/.pkgdir/git/./usr/bin/git' and '/mnt/gl-mt6000-main/openwrt/staging_dir/target-aarch64_cortex-a53_musl/root-mediatek/./usr/bin/git' are the same file
cp: '/mnt/gl-mt6000-main/openwrt/build_dir/target-aarch64_cortex-a53_musl/git-2.46.2/.pkgdir/git/./usr/bin/git-shell' and '/mnt/gl-mt6000-main/openwrt/staging_dir/target-aarch64_cortex-a53_musl/root-mediatek/./usr/bin/git-shell' are the same file
make[2]: *** [Makefile:167: /mnt/gl-mt6000-main/openwrt/staging_dir/target-aarch64_cortex-a53_musl/root-mediatek/stamp/.git_installed] Error 1
```
Use $(LN) instead of ln and use relative paths.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit ba445acd7c)
2025-07-10 13:02:12 +02:00
George Sapkin
65f50b7baa golang: bump to 1.23.11
go1.23.11 (released 2025-07-08) includes security fixes to the go
command, as well as bug fixes to the compiler, the linker, and the
runtime.

Link: https://github.com/golang/go/issues?q=milestone%3AGo1.23.11+label%3ACherryPickApproved
Signed-off-by: George Sapkin <george@sapk.in>
2025-07-09 08:38:20 +02:00
Robert Marko
27cce30b57 libffi: drop autoreconf
Trying to compile libffi now that automake has been updated to 1.17 will
fail, however there is no reason for us to be calling autoreconf as libffi
release tarballs already contain the generated configure script.

So, drop the unnecessary autoreconf that seems to be leftover from the
previous 3.4.2 bump as we dont have any patches targeting configure.ac nor
libffi in general.

Fixes: openwrt/openwrt#18041
Signed-off-by: Robert Marko <robimarko@gmail.com>
(cherry picked from commit c8949c84a2)
2025-07-08 08:31:56 +02:00
John Audia
4e1f0e137a libffi: update to 3.4.7
3.4.7 Feb-8-2024
        Add static trampoline support for Linux on s390x.
        Fix BTI support for ARM64.
        Support pointer authentication for ARM64.
        Fix ASAN compatibility.
        Fix x86-64 calls with 6 GP registers and some SSE registers.
        Miscellaneous fixes for ARC and Darwin ARM64.
        Fix OpenRISC or1k and Solaris 10 builds.
        Remove nios2 port.

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 00f28b8281)
2025-07-08 08:31:49 +02:00
George Sapkin
5de9ef66fd syncthing: bump to 1.30.0
Changelog: https://github.com/syncthing/syncthing/releases/tag/v1.30.0
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit b8d95d83ab)
2025-07-06 16:21:55 +02:00
George Sapkin
5d13d3cf39 syncthing: add George Sapkin as a maintainer
Remove Paul Spooren and add myself according to the discussion in the
PR.

Link: https://github.com/openwrt/packages/pull/26856
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit 793a3e1969)
2025-07-06 16:21:55 +02:00
George Sapkin
0305d2520e syncthing: fix relay and discovery args and permissions
Fixes: #26829
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit cd142a1ba8)
2025-07-06 16:21:55 +02:00
Christian Marangi
f25b062fec znc: update to use SOURCE_VERSION for submodule download
Commit 9fc79e2e2622 ("download: don't overwrite VERSION variable")
changed the variable for direct download call from VERSION to
SOURCE_VERSION.

This cause the dl_github_archive script to pass empty value for
--version arg making it always clone HEAD.

Correctly update the variable to SOURCE_VERSION to actually clone the
expected commit HASH.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 7dee8c47f1)
Signed-off-by: Jonas Gorski <jonas.gorski@gmail.com>
2025-07-06 13:26:26 +02:00
Tianling Shen
3be9c8285f rclone: Update to 1.70.2
Release note: https://github.com/rclone/rclone/releases/tag/v1.70.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 69afdca878)
2025-07-05 16:32:28 +08:00
Tianling Shen
f78ae62ccf rclone: Update to 1.70.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 05d32f0214)
2025-07-05 16:32:24 +08:00
Tianling Shen
e10f02bc15 rclone: Update to 1.69.3
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit e38edaea0e)
2025-07-05 16:32:20 +08:00
Tianling Shen
bccb9aa710 rclone: Update to 1.69.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit d2c2a47ff0)
2025-07-05 16:32:05 +08:00
Tianling Shen
dc40584222 openlist: move from alist and update to 4.0.5
The alist was sold to a Chinese commercial company by the project owner
without any clarification. Though the company bought it nearly a half
year ago, they still cannot show a clear roadmap and privacy policy now.
They also tried to collect runtime information from the user, but the
code was not merged into the main tree "luckily".

Anyway, various behaviors from the company indicate they are untrustable,
so the other developers from the alist project have forked and made a new
project named OpenList, which will continue to be maintained by the community.

===== security note =====
The alist code up to 3.45.0 has been reviewed "clean", however the main
problem is from the author's private API that used to connect to cloud drives.
For security reasons, please reset your password and/or token if possible.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit b13bdcbac6)
2025-07-05 16:31:05 +08:00
Tianling Shen
c9c2d2cd97 alist: Update to 3.45.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 7a16d926e0)
2025-07-05 16:30:59 +08:00
George Sapkin
e0c09c1a6e yt-dlp: bump to 2025.06.30
Changelog: https://github.com/yt-dlp/yt-dlp/releases/tag/2025.06.30
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit 3b2b5c73a9)
2025-07-03 15:05:28 +02:00
Stephen Howell
d5283863b9 realtek-poe: increase version
* Reduce regularly queried items
* Avoid queuing items endlessly to cap memory usage

Signed-off-by: Stephen Howell <howels@allthatwemight.be>
2025-07-02 20:42:31 +02:00
Rosen Penev
c94ab433ca tang: update to 15
Rebase patch

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit b083291941)
2025-07-01 10:23:47 +02:00
George Sapkin
2eb3553712 yt-dlp: don't hide error messages in CI test
Fixes: 6746398cb ("yt-dlp: run CI test for the main package only")
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit fa8425028a)
2025-06-30 13:33:41 +02:00
George Sapkin
82dd3c234f yt-dlp: bump to 2025.06.25
Changelog: https://github.com/yt-dlp/yt-dlp/releases/tag/2025.06.25
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit 731bddc3e8)
2025-06-30 13:33:41 +02:00
George Sapkin
464928b952 yt-dlp: bump to 2025.06.09
Changelog: https://github.com/yt-dlp/yt-dlp/releases/tag/2025.06.09
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit 92625ef0ab)
2025-06-30 13:33:41 +02:00
Fabrice Fontaine
37567eb429 admin/syslog-ng: fix PKG_CPE_ID
oneidentity:syslog-ng is a better CPE ID than balabit:syslog-ng as
this CPE ID has the latest CVEs (whereas balabit:syslog-ng only
has a CVE from 2000):
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:oneidentity:syslog-ng

Fixes: 5f07bb1094 (syslog-ng: update to version 3.19.1)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit 3d32c62444)
2025-06-30 10:18:26 +02:00
Wei-Ting Yang
cadbbc1dec treewide: assign some PKG_CPE_IDs
Assign some PKG_CPE_IDs to enhance CVE coverage.

https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=aardvark-dns
https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=alpine_project
https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=boringssl
https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=ecdsautils
https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=file_project
https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=knot_resolver
https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=libwrap
https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=lsof_project
https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=nfdump
https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=nlnetlabs%20name_server_daemon
https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=rclone
https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=setserial
https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=tang_project
https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=tesseract_project
https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=tmate-ssh-server
https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=ttyd
https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=uw-imap
https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=v2ray-core
https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=zstandard

Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com>
(cherry picked from commit ae56deff2c)
2025-06-30 10:18:26 +02:00
Fabrice Fontaine
11e51e4df4 libs/libuv: fix PKG_CPE_ID
libuv:libuv is a better CPE ID than libuv_project:libuv as this CPE ID
has the latest CVEs (whereas libuv_project:libuv only has a CVE from
2015):
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:libuv:libuv

Fixes: f8ecbf529b (libuv: update to 1.32.0)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit 1774871476)
2025-06-30 10:18:26 +02:00
Fabrice Fontaine
bd3960dc33 lang/tcl: fix PKG_CPE_ID
tcl:tcl is a better CPE ID than tcl_tk:tcl_tk as this CPE ID has the
latest CVE (whereas tcl_tk:tcl_tk only has CVEs up to 2008):
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:tcl:tcl

Fixes: 299e5b0a9b (treewide: add PKG_CPE_ID for better cvescanner coverage)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit 6de9eebf51)
2025-06-30 10:18:26 +02:00
Fabrice Fontaine
038c761484 utils/logrotate: fix PKG_CPE_ID
logrotate_project:logrotate is a better CPE ID than gentoo:logrotate as
this CPE ID has the latest CVE (whereas gentoo:logrotate only has CVEs
up to 2011):
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:logrotate_project:logrotate

Fixes: 299e5b0a9b (treewide: add PKG_CPE_ID for better cvescanner coverage)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit 996f0b81c6)
2025-06-30 10:18:26 +02:00
Fabrice Fontaine
72a3373f3d libs/libupnp: fix PKG_CPE_ID
pupnp_project:pupnp is a better CPE ID than libupnp_project:libupnp as
this CPE ID has the latest CVEs from 2021 (whereas
libupnp_project:libupnp only has CVEs up to 2020):
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:pupnp_project:pupnp

Fixes: 299e5b0a9b (treewide: add PKG_CPE_ID for better cvescanner coverage)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit 911d890b11)
2025-06-30 10:18:26 +02:00
Fabrice Fontaine
a6b7813c31 net/aria2: fix PKG_CPE_ID
aria2_project:aria2 is a better CPE ID than tatsuhiro_tsujikawa:aria2 as
this CPE ID has the latest CVE (whereas tatsuhiro_tsujikawa:aria2 only
has CVEs up to 2010):
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:aria2_project:aria2

Fixes: 299e5b0a9b (treewide: add PKG_CPE_ID for better cvescanner coverage)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit c1c47695a8)
2025-06-30 10:18:26 +02:00
Fabrice Fontaine
792cc6d31c net/openssh: fix PKG_CPE_ID
openbsd:openssh is a better CPE ID than openssh:openssh as this CPE ID
has the latest CVEs (whereas openssh:openssh has no CVEs):
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:openbsd:openssh

Fixes: 299e5b0a9b (treewide: add PKG_CPE_ID for better cvescanner coverage)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit 4faf09cfb5)
2025-06-30 10:18:26 +02:00
George Sapkin
5841587b3d tailscale: assign PKG_CPE_ID
Link: https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.2&orderBy=2.2&keyword=cpe%3A2.3%3Aa%3Atailscale%3Atailscale&status=FINAL
Link: https://github.com/openwrt/packages/issues/8534
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit f6c7871464)
2025-06-30 10:18:26 +02:00
George Sapkin
69d746d157 adguardhome: assign PKG_CPE_ID
Link: https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&orderBy=2.3&keyword=cpe%3A2.3%3Aa%3Aadguard%3Aadguardhome
Link: https://github.com/openwrt/packages/issues/8534
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit fd52fb6e3c)
2025-06-30 10:18:26 +02:00
Etienne Champetier
da86e7841e prometheus-node-exporter-lua: use buffered io, remove concat
netclass collector scrape time goes from 230ms to 170ms

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit 00d420e801)
2025-06-29 21:58:13 +02:00
Dirk Brenken
c988e44f95 banIP: update 1.5.6-6
* limit nft logging to a rate 10/second to prevent possible log-flooding
* skip external feed processing if "allowlist-only" mode is fully enabled (in in- and outbound)
* remove needless default icmpv6 rule in wan-input
* refine the housekeeping script (uci-defaults)
* readme update

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit d2599fb6b6)
2025-06-28 22:13:24 +02:00
Etienne Champetier
b053d4430a prometheus-node-exporter-lua: mwan3: speed up
Request only 'interfaces' status, as we don't use 'connected' and
'policies' status. On my router with 5 wans / 2 tracking IPs per wan,
scrape time goes from 1.90s to 1.30s (still pretty slow but better)

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit caeb4c1834)
2025-06-27 00:50:34 +03:00
Etienne Champetier
c7d1a8c1ae prometheus-node-exporter-lua: add HTTPS support
With valid 'cert'/'key' config, prometheus-node-exporter-lua
will respond to https instead of http on 'listen_port'.

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit 73f9b9ab79)
2025-06-23 22:01:43 +03:00
Etienne Champetier
1b103de5d8 prometheus-node-exporter-lua: remove '#!' / exec bit
collectors do not need to be executable.

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit 377f537aa3)
2025-06-23 22:01:43 +03:00
Michael Payne
2243dd0dee prometheus-node-exporter-lua: fix hostapd_ubus_stations & hostapd_stations
hostapd exposes the `hostapd-auth` ubus object. In both
hostapd_ubus_stations.lua and hostapd_stations.lua this object is
incorrectly matched as if it were a wifi phy such as `hostapd.phy0-ap0`.
Using the literal period to find interfaces (^hostapd%.) instead of the
pattern-matching period (hostapd.) fixes this.

fix formatting consistency

Signed-off-by: Michael Payne <10254938+mikepayne02@users.noreply.github.com>
[fix version conflict]
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit 28c085f7c3)
2025-06-23 22:01:43 +03:00
Sergey Shatunov
5e8bd2c1fe prometheus-node-exporter-lua: add nftables named counters collector
Signed-off-by: Sergey Shatunov <me@aur.rocks>
[bump version, remove #!]
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit 51137e5882)
2025-06-23 22:01:43 +03:00
Kym Eden
06846d4c35 prometheus-node-exporter-lua: netclass: Ignore non numbers
Prevent error caused by `tonumber` converting empty string to `nil`

Signed-off-by: Kym Eden <shikasta.net@gmail.com>
[rework]
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit f6cb2a6b0e)
2025-06-23 22:01:43 +03:00
Amos Shapira
1319b8f3a5 prometheus-node-exporter-lua: add newline to error messages
Description:

1. Avoid error on nil value by skipping over it
2. Adds a newline to error messages

Signed-off-by: Amos Shapira <amos.shapira@gmail.com>
[bump version]
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit bb43d5f28e)
2025-06-23 22:01:43 +03:00
Jack Baldry
312235ee9c prometheus-node-exporter-lua: Fix typos
Signed-off-by: Jack Baldry <jack.baldry@grafana.com>
(cherry picked from commit c9b32b99c0)
2025-06-23 22:01:43 +03:00
Etienne Champetier
9788d53631 simple-captive-portal: add new package
This package intercepts/blocks traffic from 'interface' and
redirects http requests to a splash page that you can personalize,
stored in '/etc/simple-captive-portal/'.
After clicking on 'connect' the MAC of the client is allowed,
for 'timeout' seconds (24h), allowing both IPv4 and IPv6.

If your guest interface defaults to input drop or reject (recommended),
make sure to allow tcp 8888-8889 on input (and also dns and dhcp).

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit e0d761e79b)
2025-06-23 08:55:20 +03:00
Tomasz Maciej Nowak
efe4a18b12 lttng-ust: bump version to 2.13.9
Fixes build on platforms without 64-bit atomics.

Fixes: https://github.com/openwrt/packages/issues/26575
Changelog: https://github.com/lttng/lttng-ust/compare/v2.13.5...v2.13.9
Signed-off-by: Tomasz Maciej Nowak <tmn505@gmail.com>
(cherry picked from commit ceb3349f38)
2025-06-21 13:07:26 +02:00
Hannu Nyman
b4afb21956 nano: update to 8.5
Update nano editor to version 8.5.

Upstream has fixed the gnulib related cross-compilation problem,
so remove the config hack that was added at the 8.4 update.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit cfdf5fffec)
2025-06-16 19:46:06 +03:00
Tianling Shen
7efd93e735 btop: add migration for alias command
Files in `/etc/profile.d/` are marked as user configs and won't be
replaced to new version when update the package, so add a migration
script for this.

Fixes: #26709
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ae33358c4f)
2025-06-16 18:30:29 +08:00
Tianling Shen
e6fe21069b v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 7d6535737c)
2025-06-16 18:30:28 +08:00
Tianling Shen
e53d49b5fb v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ed12bfe13c)
2025-06-16 18:30:26 +08:00
Tianling Shen
68b07dde35 v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a91d278804)
2025-06-16 18:30:18 +08:00
George Sapkin
af76294d1f golang: bump to 1.23.10
go1.23.10 (released 2025-06-05) includes security fixes to the net/http
and os packages, as well as bug fixes to the linker.

Fixes CVE-2025-4673

Link: https://github.com/golang/go/issues?q=milestone%3AGo1.23.10+label%3ACherryPickApproved
Signed-off-by: George Sapkin <george@sapk.in>
2025-06-16 18:23:37 +08:00
Sergey Ponomarev
1ee73951bd syslog-ng: alternative for logread
When the syslog-ng installed it records all messages to /var/log/messages.
This makes the default OpenWrt's ubox /sbin/logread useless and return nothing.

The logread script was added to the syslog-ng as a shim.
It's based on `tail /var/log/messages` and repeats basic options that the ubox logread have.
The script is installed instead of the /sbin/logread and this is causes an error.

Instead install it to /usr/libexec/logread.sh and specify as an alternative /sbin/logread.

The ubox logread also needs to be made as alternative in /usr/libexec/logread-ubox.

So we need to give it a separate name.
The most simple and clear would be logread-shell or just logread.sh.

Suggested-by: Andreas Gnau <andreas.gnau@iopsys.eu>
Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
(cherry picked from commit 641ec2b644)
2025-06-16 11:40:55 +02:00
Josef Schlehofer
f9c22f2fb7 mc: drop patches to handle newer terminfo
This patch was introduced by me in commit
62513dc576 ("mc: fix mouse handling")
and that commit backported patch from master branch and it that time,
there was not any release, which included it.
Since 4.8.2.5 update, we are still rebasing it, no need to do that.

Fixes: eb0c3b534a ("mc: update to 4.8.25")

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit fa01e8adfc)
2025-06-15 13:24:13 +02:00
Til Kaiser
9ca1451d2e mstflint: add missing nls.mk include
If nls.mk is not included and BUILD_NLS is set compilation
will fail with various undefined references to the libiconv
library. So this commit includes the missing nls.mk.

Signed-off-by: Til Kaiser <mail@tk154.de>
(cherry picked from commit d8f2960e14)
2025-06-15 13:23:47 +02:00
Wesley Gimenes
c0f5b71fff github: Add fields to help users in the bug report
Not everyone filling out the bug report is an expert.
These fields, with additional explanations, can hopefully
help users provide more accurate information.

Add fields to guide users in completing the bug report.

Signed-off-by: Wesley Gimenes <wehagy@proton.me>
(cherry picked from commit 38b89da400)
2025-06-15 09:31:20 +02:00
Wesley Gimenes
9103814642 github: require user to check all bug report fields
Previously, users could leave fields blank,
resulting in missing information in the bug report.
Now, it is mandatory for all fields to be filled out,
ensuring that no essential information is overlooked.

Signed-off-by: Wesley Gimenes <wehagy@proton.me>
(cherry picked from commit c323222c63)
2025-06-15 09:31:19 +02:00
Josef Schlehofer
ee2793e5fb github: Creating issue: Add external links
This is heavily inspired by OpenWrt main repository [1]
as in the packages feed we would like to follow
and be in sync with the main repository.

Having external, well, contact links, where users
can ask or propose feature request and even find links
for documentation or contacting us is a good idea.
Might help to improve the current state of this repository.

[1] 57c104ef7f/.github/ISSUE_TEMPLATE/config.yml

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 1f189894dc)
2025-06-15 09:31:19 +02:00
Josef Schlehofer
c513220703 github: Use GitHub Issue Forms with yaml
This replaces the old issue templates with the new one.
It is going to reflect changes and require more details.

Issue Forms as also used in the main repository and in LuCI,
it helps users to create structured issue.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 67dc75f941)
2025-06-15 09:31:19 +02:00
Josef Schlehofer
0c75084972 github: Use Markdown and slight changes to PR template
The previous pull request was kinda not exactly tested.
This one should be better and more visible.

Fixes: 9a273c3e79 ("github: Improve Pull Request template")

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit c623dbf30d)
2025-06-15 09:31:19 +02:00
Josef Schlehofer
4cee174b72 github: Improve Pull Request template
By updating pull request template, this ensures that all newly patches
will be hopefully submitted to upstream, which help us that we dont need to
maintain these patches for ages. Also, all patches should be applied by git am.
This is important, because this follows OpenWrt main repo contribution policy
and we will know, who is the author of the patch and what it does (=
commit subject, commit description).

Also, we don't need to know on which host env, we compiled package.
If there is something host related, we can request details.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 9a273c3e79)
2025-06-15 09:31:19 +02:00
Josef Schlehofer
620412bf90 CI: move script into separate directory
This change follows the structure of GitHub workflow
folders from the main OpenWrt repository, where scripts
are in separate folder.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 91a366e870)
2025-06-15 09:31:19 +02:00
Josef Schlehofer
cc6e455ae1 CI: formal check: use shared workflow in actions-shared-workflows
Lets switch to shared workflow in actions-shared-workflows instead of having
this separate file here. It will track and use the latest changes to avoid
being outdated.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 3621fded1e)
2025-06-15 09:31:19 +02:00
Dirk Brenken
e553df34ad banIP: update 1.5.6-5
* fixed the restore rc handling
* skip allowlist entries during map creation
* disable the map button by default (only enabled if map & NFT counter are selected)
* disable the content filter checkbox for elements with hits by default (only enabled if NFT counter are selected)
* readme update

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 645b0ab137)
2025-06-14 21:38:46 +02:00
Dirk Brenken
a53a5558f2 adblock: update 4.4.2-3
* minor reporting improvements in LuCI
* readme update
* cosmetics

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit f7505326d2)
2025-06-14 20:59:43 +02:00
Anton P.
5ebcafb00a sing-box: Update to 1.11.13
changelog: https://github.com/SagerNet/sing-box/releases/tag/v1.11.13

(cherry picked from commit 24e3f2a4c8)

Signed-off-by: Anton P. <dragunap@gmail.com>
2025-06-15 01:21:50 +08:00
Josef Schlehofer
dbb252fa83 sunwait: drop manual Build/Compile step to respect flags
The custom Build/Compile definition was overriding the default OpenWrt build logic,
 causing issues when compiling with fPIC.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 57d860a6aa)
2025-06-12 11:18:04 +02:00
Liangbin Lian
e1c294a18e zerotier: fix system include path
`-isystem ext` makes `#include <miniupnpc/miniupnpc.h>` actually include `ext/miniupnpc/miniupnpc.h`.

we should use `$(STAGING_DIR)/usr/include` as a higher priority system include path.

Fix https://github.com/openwrt/openwrt/issues/18019

Signed-off-by: Liangbin Lian <jjm2473@gmail.com>
(cherry picked from commit d1b5a6d68f)
2025-06-12 07:20:28 +02:00
Austin Lane
efd09d7f72 liborcania: Install library on target
Signed-off-by: Austin Lane <vidplace7@gmail.com>
(cherry picked from commit 768b995f98)
2025-06-12 05:31:47 +02:00
Austin Lane
0709797b98 libulfius: Install library on target
Signed-off-by: Austin Lane <vidplace7@gmail.com>
(cherry picked from commit 6c62e0fcfe)
2025-06-12 05:29:30 +02:00
Stan Grishin
440183db01 adblock-fast: update to 1.1.3-13
* update to SPDX license identified in Makefile
* bugfix: correct HELP line description for sizes command (thanks @justops1337)
* performance fix: updated domains filter (thanks @justops1337)
* bugfix/improvement: more reliable get_url_filesize code with fall-back to
  uclient-fetch (thanks @justops1337)

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 73744c3ac5)
2025-06-11 15:08:07 -07:00
Til Kaiser
d27ca08ca4 mstflint: update to 4.30.0
This commit updates the mstflint package to the latest
4.30.0 release. It also drops the zlib dependency because
libsqlite3 and libxml2 already depend on it.

Signed-off-by: Til Kaiser <mail@tk154.de>
(cherry picked from commit e337b588a4)
2025-06-11 22:31:33 +02:00
Georgi Valkov
6bd9dfc73d libideviceactivation: fix compilation with full NLS
nls.mk is needed.

Reported-by: Rosen Penev <rosenp@gmail.com>
Signed-off-by: Georgi Valkov <gvalkov@gmail.com>
(cherry picked from commit c287cbf11e)
2025-06-11 22:29:50 +02:00
Rosen Penev
36af6a597d avrdude: fix compilation with full NLS
nls.mk is needed.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 0b67c00092)
2025-06-11 22:28:46 +02:00
Rudy Andram
b3a38efb27 curl: bump to 8.12.1
Signed-off-by: Rudy Andram <rmandrad@gmail.com>
(cherry picked from commit e97cffc32e)
2025-06-11 22:24:20 +02:00
Peter van Dijk
285513ad2b curl: add LIBCURL_WEBSOCKETS flag
Signed-off-by: Peter van Dijk <peter@7bits.nl>
(cherry picked from commit a33e08ec6b)
2025-06-11 22:24:20 +02:00
Austin Lane
a6f877bee7 python-pyserial: add hostbuild
Signed-off-by: Austin Lane <vidplace7@gmail.com>
(cherry picked from commit ac212e0c43)
2025-06-11 22:10:26 +02:00
Austin Lane
32083d152c python-requests: add hostbuild
Signed-off-by: Austin Lane <vidplace7@gmail.com>

(cherry picked from commit edf093ff04)
2025-06-11 22:10:04 +02:00
Austin Lane
d0b8fe2731 python-urllib3: add hostbuild
Signed-off-by: Austin Lane <vidplace7@gmail.com>

(cherry picked from commit d6c644c5f5)
2025-06-11 22:10:04 +02:00
Austin Lane
0cce9c40b5 python-certifi: add hostbuild
Signed-off-by: Austin Lane <vidplace7@gmail.com>

(cherry picked from commit 955976cee7)
2025-06-11 22:10:04 +02:00
Austin Lane
b43daa56f5 python-idna: add hostbuild
Signed-off-by: Austin Lane <vidplace7@gmail.com>

(cherry picked from commit 6bb68d4682)
2025-06-11 22:10:04 +02:00
Austin Lane
6760772479 python-chardet: add hostbuild
Signed-off-by: Austin Lane <vidplace7@gmail.com>

(cherry picked from commit 7db7fd2aea)
2025-06-11 22:10:04 +02:00
Nikolay Manev
b577745932 zstd: update to v1.5.7
Signed-off-by: Nikolay Manev <just.ops@proton.me>
(cherry picked from commit 434eaba41f)
2025-06-11 18:48:00 +02:00
Marius Dinu
2451279d6c tvheadend: cut subnet from lan IP reported by uci, fix bug #26681
Unannounced modifications (OpenWrt PR 13780) in uci network.lan.ipaddr broke tvheadend init script.
This commit updates the init script to cut the subnet from the ip address reported by uci.

Bug report: #26681

Reported-by: @DonKult
Tested-by: @DonKult
Signed-off-by: Marius Dinu <m95d+git@psihoexpert.ro>
(cherry picked from commit ea07162ee5)
2025-06-11 18:24:52 +02:00
Marius Dinu
35f5962b0d tvheadend: update to git master 2025-06-04
removed patch is now included in tvheadend sources

Signed-off-by: Marius Dinu <m95d+git@psihoexpert.ro>
(cherry picked from commit df98d72e40)
2025-06-11 18:24:47 +02:00
Marius Dinu
4d8ddb85e1 tvheadend: update to 2024-11-12, new options, patch for bug #26422
Changes:
- update to git master 2024-11-12 (dev stalled since then)
- patch for OpenWrt bug #26422 / tvheadend bug #1786
- Options removed:
  - imagecache = tvheadend doesn't support disabling it anymore
- Options added:
  - detailed (but slow) memory utilization reporting
  - Timeshift (default on)
  - tsfile (currently bugged in tvheadend, commented out / always on)
  - HDHomeRun server emulation (default on)
  - Digital Devices DVB CI descrambling cards (default off)
- RegEx options cleaned up, PCRE2 is the new default.
- Some help text improved

Signed-off-by: Marius Dinu <m95d+git@psihoexpert.ro>
(cherry picked from commit 471960be94)
2025-06-11 18:24:41 +02:00
Hannu Nyman
4fc7923a08 collectd: Adjust .json names to match plugin names
Adjust .json names to match the plugin names: use '-' instead of '_'
Fix commits 033c19a and e36b727 that used a filename differing
from the plugin name used in OpenWrt. That prevented package compilation
to find and include the .json files that were left out of the package.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit beb0de663c)
2025-06-11 19:08:39 +03:00
Keith T. Garner
1ee1aae3ab rtl_433: bump version to 25.02
Also adds a simple init script and sample config file.

changelog: https://github.com/merbanan/rtl_433/releases/tag/25.02
Signed-off-by: Keith T. Garner <kgarner@kgarner.com>
(cherry picked from commit 4b21375059)
Signed-off-by: Keith T. Garner <kgarner@kgarner.com>
2025-06-11 11:29:46 +02:00
Donald Hoskins
50a5db44b9 libopenldap: Add missing Config.in hook
Package has a consistent Config.in file, but it isn't added to all parts of the file.

libopenldap is unable to be built with --enable-debug because the Config.in is never
attached to the libopenldap.

Signed-off-by: Donald Hoskins <grommish@gmail.com>
2025-06-10 11:09:21 +02:00
George Sapkin
1e4d87581e syncthing: bump to 1.29.7
Changelog: https://github.com/syncthing/syncthing/compare/v1.29.6...v1.29.7
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit 1f6308810a)
2025-06-09 15:59:57 +02:00
Dirk Brenken
948fbe614b banIP: update 1.5.6-4
* show the IP plus the packet counter in the modal Set content view (or on the CLI)
* add a filter to show only elements with hits in the modal Set content view (or on the CLI)
* limit the element output with hits to max. 50 per Set on the Set Reporting overview page
* fixed set names suffix in the report output
* fixed the Set content view for MAC based Sets
* display the map even if the HomeIP cannot be determined

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 7222ac88f0)
2025-06-09 07:02:10 +02:00
Kevin Jilissen
909a15a64b prometheus-node-exporter-lua: Add ethtool exporter
Based on ethtool-lua library, add interface statistics to the
prometheus-node-exporter.

As closely as possible, the behaviour of the implementation at
400c397993/collector/ethtool_linux.go (L208)
is replicated.

Signed-off-by: Kevin Jilissen <info@kevinjilissen.nl>
[squash commits, bump version, fix permission, use untyped, rename to ethtool]
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit 9f94448b71)
2025-06-08 17:13:07 -04:00
Kevin Jilissen
1cfdaeb792 ethtool-lua: Initial packaging
The ethtool-lua library is a partial re-implementation of the ethtool.
The goal is to provide the CLI queries and configuration options as a
Lua API.

The reason for staring this library, was the desire for a nice and
efficient way to query DSA switch statistics in the
prometheus-node-exporter-lua on OpenWRT devices. Existing suggestions
around the internet focussed mainly on calling the ethtool CLI program
and parsing the output. This is neither elegant nor efficient, as the
collection time for this implementation was 300% higher on my rtl838x
based switch running OpenWRT.

This package can be easily compiled and packaged for OpenWRT, as it was
initially created as an OpenWRT package.

Signed-off-by: Kevin Jilissen <info@kevinjilissen.nl>
[improve PKG_SOURCE/PKG_SOURCE_URL]
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit 054ba0ce9c)
2025-06-08 17:13:07 -04:00
Jianhui Zhao
28e15890e1 rtty: update to 8.1.5
changelog: https://github.com/zhaojh329/rtty/releases/tag/v8.1.5

Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
(cherry picked from commit ba10392cb5)
2025-06-08 23:03:16 +03:00
Peter van Dijk
75c74008db dnsdist: update to 1.9.10
fixes CVE-2025-30193

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
(cherry picked from commit ec30d1e4f6)
2025-06-08 23:02:46 +03:00
Jianhui Zhao
7b2e76b236 lua-cjson: add build VARIANT for Lua5.4
Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
(cherry picked from commit ae118bed18)
2025-06-08 11:49:07 +03:00
John Audia
28b7bb4e82 coreutils: bump to 9.7
Single patch automatically rebased.
Added -std=gnu23 to CFLAGS

Release news: https://savannah.gnu.org/news/?id=10751

Build system: x86/64
Build-tested: x86/64
Run-tested: x86/64

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit d40b6c9c13)
2025-06-07 21:01:13 +03:00
Hannu Nyman
be2724e55e coreutils: Fix gcc14 compilation via std=c17
Fix compilation with gcc 14 by applying the -std=c17 flag, as suggested
by lededev in 2d3f68cc8c (commitcomment-153860241)
(also -c23 seems to work ok with gcc14, but that seems to break gcc13)

Remove the previous autoreconf fix attempt.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 02c134e2ba)
2025-06-07 21:01:13 +03:00
John Audia
b7a805de81 coreutils: apply PKG_FIXUP conditionally
PKG_FIXUP:=autoreconf introduced in this commit[1] to fix builds with GCC 14
does not play well with GCC 13. Apply it conditionally.

I build some coreutils packages under GCC 13 and again under GCC 14 and both
completed successfully.

Build system: x86/64
Build-tested: x86/64

Fixes https://github.com/openwrt/packages/issues/26175

1. b1a648e1ff

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 716cb3deac)
2025-06-07 21:01:13 +03:00
Pascal Ernster
10c86de2b4 coreutils: Add PKG_FIXUP:=autoreconf and bump PKG_RELEASE
This fixes the build on GCC 14 and solves issue https://github.com/openwrt/packages/issues/26175

Maintainer: hnyman
Compile tested: x86/64, QEMU Standard PC (Q35 + ICH9, 2009), r29064-696ad7b1aa09
Compile tested: ath79/generic, TP-Link Archer C7 v4, r29064-696ad7b1aa09
Compile tested: realtek/rtl838x, Netgear GS108T v3, r29064-696ad7b1aa09
Run tested: x86/64, QEMU Standard PC (Q35 + ICH9, 2009), r29064-696ad7b1aa09, booted and used for 7h without issues
Run tested: ath79/generic, TP-Link Archer C7 v4, r29064-696ad7b1aa09, booted and used for 7h without issues
Run tested: realtek/rtl838x, Netgear GS108T v3, r29064-696ad7b1aa09, booted and used for 7h without issues

Signed-off-by: Pascal Ernster <git@hardfalcon.net>
(cherry picked from commit b1a648e1ff)
2025-06-07 21:01:13 +03:00
Hannu Nyman
1dd56f00fc coreutils: Adjust coreutils dependency in each app to be selective
Adjust the dependency to the virtual coreutils main package in
each app to be selective. Otherwise you need to first select the
main coreutils before the actuall apps can be selected. That has
prevented other applications from depending on just one individual
coreutils app, as they have needed to depend also on the empty main
coreutils package.

Reference to discussion in:
https://github.com/openwrt/luci/issues/7605

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 82852a9f15)
2025-06-07 21:01:13 +03:00
Hannu Nyman
04689bdbec coreutils: Upgrade to 9.6
Upgrade GNU coreutils to version 9.6
* refresh patch

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 2d3f68cc8c)
2025-06-07 21:01:13 +03:00
Xiao Yu
7f3365d2f7 collectd: Add write_prometheus uci config
Included with default options used by collectd

Signed-off-by: Xiao Yu <me@xyu.io>
(cherry picked from commit e36b727d99)
2025-06-07 18:32:58 +03:00
Josef Schlehofer
b744e54a85 transmissision: remove build dependency on nodejs
Have no idea why such dependency was added.
No documentation from transmission that they need
such dependency on build time. On the other hand
saves vast of time during build

Signed-off-by: Serhii Ivanov <icegood1980@gmail.com>
(cherry picked from commit a06829b0a2)
2025-06-07 15:07:40 +02:00
Nikolay Manev
ba3dfdc9d5 fping: update to version 5.3
* update to version 5.3
* added test.sh file for ci testing

Signed-off-by: Nikolay Manev <just.ops@proton.me>
(cherry picked from commit 08b4fcd5e6)
2025-06-06 19:19:48 +03:00
Álvaro Fernández Rojas
510c84db18 bcm27xx-eeprom: update to v2025-05-08-2712
bcm2711:
https://github.com/raspberrypi/rpi-eeprom/blob/v2025.05.08-2712/firmware-2711/release-notes.md#2025-05-08-implement-tcp-window-for-net-boot-latest

bcm2712:
https://github.com/raspberrypi/rpi-eeprom/blob/v2025.05.08-2712/firmware-2712/release-notes.md#2025-02-12-fixup-change-to-disable-37v-pmic-output-on-cm5-no-wifi-latest
https://github.com/raspberrypi/rpi-eeprom/blob/v2025.05.08-2712/firmware-2712/release-notes.md#2025-03-03-fix-bootloader-pull-configuration-on-2712d0-latest
https://github.com/raspberrypi/rpi-eeprom/blob/v2025.05.08-2712/firmware-2712/release-notes.md#2025-03-10-add-boot_partition-filter-plus-sdram-init-fixes-latest
https://github.com/raspberrypi/rpi-eeprom/blob/v2025.05.08-2712/firmware-2712/release-notes.md#2025-03-19-log-the-fan-speed-at-boot-latest
https://github.com/raspberrypi/rpi-eeprom/blob/v2025.05.08-2712/firmware-2712/release-notes.md#2025-03-27-os_check-cm5-check-for-cm5-specific-dtbs-latest
https://github.com/raspberrypi/rpi-eeprom/blob/v2025.05.08-2712/firmware-2712/release-notes.md#2025-04-07-arm_dt-revert-to-using-the-max-fan-speed-latest
https://github.com/raspberrypi/rpi-eeprom/blob/v2025.05.08-2712/firmware-2712/release-notes.md#2025-05-08-implement-tcp-window-for-net-boot-latest

Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
(cherry picked from commit bfb96a8592)
2025-06-06 12:38:46 +02:00
Tomasz Maciej Nowak
dfd8a8668f python-bcrypt: bump version to 4.1.3
Bumps pyo3 version to 21, which in result fixes copmilation on
platforms without 64-bit atomics.

Upstream-issue: https://github.com/pyca/bcrypt/issues/731
Link: https://github.com/pyca/bcrypt/compare/4.1.2...4.1.3#commits_bucket

Signed-off-by: Tomasz Maciej Nowak <tmn505@gmail.com>
(cherry picked from commit 40c6ef6941)
2025-06-03 19:25:16 +02:00
Khachatryan Karen
9d0cce2df8 antiblock: Update to 2.1.2r2
1) Added the ability to disable routes without deleting them.

Signed-off-by: Khachatryan Karen <karen0734@gmail.com>
2025-06-03 12:49:42 +03:00
George Sapkin
083286d0e9 yt-dlp: bump to 2025.05.22
Changelog: https://github.com/yt-dlp/yt-dlp/releases/tag/2025.05.22
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit 1410fcc5f9)
2025-06-02 13:45:54 +02:00
Jianhui Zhao
b9ac21a2d6 lua-eco: update to 3.10.0
* A new module `uci` added since this version.
* Fix an installation issue: Existing soft links should be preserved when installing libeco.

Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
(cherry picked from commit d1f9862893)
2025-06-01 10:25:23 +03:00
Jianhui Zhao
c124f4a2d6 rtty: update to 8.1.3
changelog: https://github.com/zhaojh329/rtty/releases/tag/v8.1.3

Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
(cherry picked from commit e63935b86a)
2025-06-01 00:02:16 +02:00
Dirk Brenken
731f753695 adblock: update 4.4.2-2
* sanitize the json reporting output

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 7825affaf9)
2025-05-31 23:08:04 +02:00
Dirk Brenken
a29e66b251 banIP: update 1.5.6-3
* add json reporting cache
* fixed the fetchcmd autodetection
* sanitize json reporting output
* small fixes and improvements

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 5607728fe6)
2025-05-31 22:10:38 +02:00
Dirk Brenken
923bd2dc5a adblock: update 4.4.2-1
* added a new "divested" feed, see https://divested.dev/pages/dnsbl
* added a new nsfw category of the hagezi feed
* added the missing custom feed file handling in the backend
* added a geoIP map with all blocked domains (plus the homeIP) in a
  modal popup window on the Reporting tab in LuCI
* fixed the fetchcmd autodetection
* small code fixes and improvements
* update the readme, added a new "Best practise" section
* update different LuCI components (separate commit)

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 58d0992886)
2025-05-30 18:39:48 +02:00
Packet Please
800173225f poemgr: update to latest Git HEAD
Signed-off-by: Packet Please <pktpls@systemli.org>
2025-05-29 10:03:58 +02:00
Philip Prindeville
69a395f687 named: /var/run/named isn't being created with correct permissions
It needs to be group writable or session.key can't be written once
named drops privileges.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit b82574b31c)
2025-05-27 09:54:16 -04:00
George Sapkin
acd385976d sqlite3: add legacy SONAME
With no SONAME set, when linking against the full library path, that
path will be used. But if SONAME is set, it will be used instead.

Set --soname=legacy to add a SONAME to the library to allow projects
that use full path to link correctly.

Link: https://sqlite.org/src/forumpost/5a3b44f510df8ded
Fixes: https://github.com/openwrt/packages/issues/26449
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit 53f8aa5c51)
2025-05-25 01:12:03 +08:00
George Sapkin
901589b331 sqlite3: bump to 3.49.1
Changelog: https://sqlite.org/releaselog/3_49_1.html
Suggested-by: Tianling Shen <cnsztl@immortalwrt.org>
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit aebfd49794)
2025-05-25 01:12:03 +08:00
Paul Donald
3806920406 sqlite3: bump to 3.47.2
https://sqlite.org/changes.html

build: x86_64
run tested: x86_64

```
3.47.2 2024-12-07 20:39:59 2aabe05e2e8cae4847a802ee2daddc1d7413d8fc560254d93ee3e72c14685b6c (64-bit)
```

Signed-off-by: Paul Donald <newtwen+github@gmail.com>
(cherry picked from commit db051c6ad9)
2025-05-25 01:12:03 +08:00
Goetz Goerisch
aee83b50a9 jool: update to 4.1.14
Changelog: https://github.com/NICMx/Jool/releases/tag/v4.1.14

Signed-off-by: Goetz Goerisch <ggoerisch@gmail.com>
(cherry picked from commit d66e7cbad1)
2025-05-22 23:28:35 +02:00
Jan Hák
597c40195b libedit: update to version 20250104-3.1
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 9b847a4e13)
2025-05-22 14:28:40 +02:00
Jan Hák
e0ec0bca76 liburcu: update to version 0.15.2
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit e4d8a07077)
2025-05-22 14:28:21 +02:00
Jan Hák
0b935d913a liburcu: update to version 0.15.1
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 4f2aba1c34)
2025-05-22 14:28:16 +02:00
Jan Hák
1d24a3ef6b liburcu: update to version 0.15.0
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 5445ad8c30)
2025-05-22 14:28:11 +02:00
Jan Hák
087bc67197 knot: fix patch for configuration sample
Fixes #26149

Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 49e5ac2beb)
2025-05-22 14:22:29 +02:00
Jan Hák
a41e6578ff knot: update to version 3.4.6
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 3764639cae)
2025-05-22 14:21:42 +02:00
Jan Hák
a7416471a7 knot: update to version 3.4.5
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit c8dca36e81)
2025-05-22 14:21:28 +02:00
Jan Hák
8902572a8e knot: update to version 3.4.4
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 089f77e615)
2025-05-22 14:21:23 +02:00
Jan Hák
685c81159b knot: update to version 3.4.3
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 1f24c07d0a)
2025-05-22 14:21:18 +02:00
Jan Hák
153ae05cf5 knot: update to verion 3.4.2
Signed-off-by: Jan Hák <jan.hak@nic.cz>
2025-05-22 14:21:10 +02:00
Noah Meyerhans
d48eb8f79d bind: bump to 9.20.9
CVE-2025-40775: Prevent assertion when processing TSIG algorithm.  DNS messages
that included a Transaction Signature (TSIG) containing an invalid value in the
algorithm field caused named to crash with an assertion failure. This has been
fixed.

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
(cherry picked from commit bafabd520e)
2025-05-21 16:51:03 -04:00
Florian Eckert
0a4a24a142 acme-common: update PKG_RELEASE
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2025-05-20 16:41:05 +02:00
Florian Eckert
45aafe3cd4 acme: remove crontab entry if service is stopped
Until now it was not possible to stop the acme service, because the handling
was done via cron. With this change, the acme handler can now be stopped by
calling '/etc/init.d/acme' stop. This call removes the entry from the crontab.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2025-05-20 16:41:05 +02:00
Florian Eckert
89f5a0d2d9 acme: remove lock handling
Since procd is now used, the call of '/etc/init.d/acme' does not have to be
locked separately. This code block can therefore be removed.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2025-05-20 16:41:05 +02:00
Florian Eckert
15cbcaad8b acme: fix service_triggers on config change
In the current implementation, the config change trigger is no longer set
at boot time. This is because during boot, only the '$CHALLENGE_DIR' is
created with the boot function. The 'start_service' is first called by first
cron call at midnight. This call is installing the service_triggers reload
handling.

To fix this, add a new extra_command 'renew' that is responsible to renew
the acme. This function is called from cron and the start_service
function does the rest.

* Create directories
* Install service reload trigger form acme config change

Fixes: 76f17ab15b (acme-common: Create challenge directory on boot)

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2025-05-20 16:41:05 +02:00
Bartosz Cieślik
e568cf35ff acme-common: Resolve problem with webroot symlink
Signed-off-by: Bartosz Cieślik <bartoszcieslik2@gmail.com>
2025-05-20 16:41:05 +02:00
Toke Høiland-Jørgensen
a3704b8e7a acme-common: Create challenge directory on boot
The challenge directory (for webroot challenges) is on a tmpfs, which
means it doesn't exist on boot. Some web servers (uhttpd in particular)
don't like being configured to serve files from a non-existent
directory. So add a boot() section to the ACME init script that just
creates the challenge directory, and make sure it runs relatively early.
That should take care of the non-existent directory issue, while still
keeping the actual certificate renewal controlled by cron.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2025-05-20 16:41:05 +02:00
Eric Fahlgren
abb40ea687 owut: update to 2025.05.12
Bug fixes:
    efahl/owut@8353c4e9e2 argparse: add a file path parser type
    efahl/owut@724c990d6c owut: avoid redirects on upstream queries

Signed-off-by: Eric Fahlgren <ericfahlgren@gmail.com>
(cherry picked from commit 444353f7ce)
2025-05-20 15:38:42 +08:00
Philip Prindeville
887573d1c3 bind: bump to 9.20.8
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit 77de6687df)
2025-05-19 19:32:57 -04:00
Pascal Ernster
8e8757ca5e bind: bump to 9.20.7
Verbatim copy from upstream's release notes:

Notes for BIND 9.20.7

- New Features
  - Implement the min-transfer-rate-in configuration option.
  - A new option min-transfer-rate-in has been added to the view and zone configurations. It can abort incoming zone transfers that run very slowly due to network-related issues, for example. The default value is 10240 bytes in five minutes. [GL #3914]
  - Add HTTPS record query to host command line tool.
  - The host command was extended to also query for the HTTPS RR type by default.
  - Implement sig0key-checks-limit and sig0message-checks-limit.
  - Previously, a hard-coded limitation of a maximum of two key or message verification checks was introduced when checking a message’s SIG(0) signature, to protect against possible DoS attacks. Two as a maximum was chosen so that more than a single key should only be required during key rotations, and in that case two keys are enough. It later became apparent that there are other use cases where even more keys are required; see the related GitLab issue for examples.
  - This change introduces two new configuration options for the views: sig0key-checks-limit and sig0message-checks-limit. They define how many keys can be checked to find a matching key, and how many message verifications are allowed to take place once a matching key has been found. The former provides slightly less “expensive” key parsing operations and defaults to 16. The latter protects against expensive cryptographic operations when there are keys with colliding tags and algorithm numbers; the default is 2. [GL #5050]
- Bug Fixes
  - Fix dual-stack-servers configuration option.
  - The dual-stack-servers configuration option was not working as expected; the specified servers were not being used when they should have been, leading to resolution failures. This has been fixed. [GL #5019]
  - Fix a data race causing a permanent active client increase.
  - Previously, a data race could cause a newly created fetch context for a new client to be used before it had been fully initialized, which would cause the query to become stuck; queries for the same data would be either paused indefinitely or dropped because of the clients-per-query limit. This has been fixed. [GL #5053]
  - Fix deferred validation of unsigned DS and DNSKEY records.
  - When processing a query with the “checking disabled” bit set (CD=1), named stores the invalidated result in the cache, marked “pending”. When the same query is sent with CD=0, the cached data is validated and either accepted as an answer, or ejected from the cache as invalid. This deferred validation was not attempted for DS and DNSKEY records if they had no cached signatures, causing spurious validation failures. The deferred validation is now completed in this scenario.
  - Also, if deferred validation fails, the data is now re-queried to find out whether the zone has been corrected since the invalid data was cached. [GL #5066]
  - Fix RPZ race condition during a reconfiguration.
  - With RPZ in use, named could terminate unexpectedly because of a race condition when a reconfiguration command was received using rndc. This has been fixed. [GL #5146]
  - “CNAME and other data check” not applied to all types.
  - An incorrect optimization caused “CNAME and other data” errors not to be detected if certain types were at the same node as a CNAME. This has been fixed. [GL #5150]
  - Relax private DNSKEY and RRSIG constraints.
  - DNSKEY, KEY, RRSIG, and SIG constraints have been relaxed to allow empty key and signature material after the algorithm identifier for PRIVATEOID and PRIVATEDNS. It is arguable whether this falls within the expected use of these types, as no key material is shared and the signatures are ineffective, but these are private algorithms and they can be totally insecure. [GL #5167]
  - Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse().
  - Previously, when parsing responses, named incorrectly rejected responses without matching RRSIG records for NSEC/DS/NSEC3 records in the authority section. This rejection, if appropriate, should have been left for the validator to determine and has been fixed. [GL #5185]
  - Fix TTL issue with ANY queries processed through RPZ “passthru”.
  - Answers to an “ANY” query which were processed by the RPZ “passthru” policy had the response-policy’s max-policy-ttl value unexpectedly applied. This has been fixed. [GL #5187]
  - dnssec-signzone needs to check for a NULL key when setting offline.
  - dnssec-signzone could dereference a NULL key pointer when resigning a zone. This has been fixed. [GL #5192]
  - Fix a bug in the statistics channel when querying zone transfer information.
  - When querying zone transfer information from the statistics channel, there was a rare possibility that named could terminate unexpectedly if a zone transfer was in a state when transferring from all the available primary servers had failed earlier. This has been fixed. [GL #5198]
  - Fix assertion failure when dumping recursing clients.
  - Previously, if a new counter was added to the hash table while dumping recursing clients via the rndc recursing command, and fetches-per-zone was enabled, an assertion failure could occur. This has been fixed. [GL #5200]
  - Dump the active resolver fetches from dns_resolver_dumpfetches()
  - Previously, active resolver fetches were only dumped when the fetches-per-zone configuration option was enabled. Now, active resolver fetches are dumped along with the number of clients-per-query counters per resolver fetch.

Notes for BIND 9.20.6

- New Features
  - Adds support for EDE code 1 and 2.
  - Support was added for EDE codes 1 and 2, which might occur during DNSSEC validation in the case of an unsupported RRSIG algorithm or DNSKEY digest. [GL #2715]
  - Add an rndc command to toggle jemalloc profiling.
  - The new command is rndc memprof; the memory profiling status is also reported inside rndc status. The status shows whether named can toggle memory profiling, and whether the server is built with jemalloc. [GL #4759]
  - Add support for multiple extended DNS errors.
  - The Extended DNS Error (EDE) mechanism may raise errors during a DNS resolution. named is now able to add up to three EDE codes in a DNS response. If there are duplicate error codes, only the first one is part of the DNS response. [GL #5085]
  - Print the expiration time of stale records.
  - BIND now prints the expiration time of any stale RRsets in the cache dump.
- Bug Fixes
  - Recently expired records could be returned with a timestamp in future.
  - Under rare circumstances, an RRSet that expired at the time of the query could be returned with a TTL in the future. This has been fixed.
  - As a side effect, the expiration time of expired RRSets is no longer returned in a cache dump. [GL #5094]
  - YAML string not terminated in negative response in delv.
  - [GL #5098]
  - Fix a bug in dnssec-signzone related to keys being offline.
  - When dnssec-signzone was called on an already-signed zone and the private key file was unavailable, a signature that needed to be refreshed was dropped without being able to generate a replacement. This has been fixed. [GL #5126]
  - Apply the memory limit only to ADB database items.
  - Under heavy load, a resolver could exhaust the memory available for storing the information in the Address Database (ADB), effectively discarding previously stored information in the ADB. The memory used to retrieve and provide information from the ADB is no longer subject to the same memory limits that are applied to the Address Database. [GL #5127]
  - Avoid unnecessary locking in the zone/cache database.
  - Lock contention among many worker threads referring to the same database node at the same time is now prevented. This improves zone and cache database performance for any heavily contended database nodes. [GL #5130]
  - Fix reporting of Extended DNS Error 22 (No Reachable Authority).
  - This error code was previously not reported in some applicable situations. This has been fixed. [GL #5137]

Compile tested: x86/64, QEMU Standard PC (Q35 + ICH9, 2009), r29064-696ad7b1aa09
Compile tested: ath79/generic, TP-Link Archer C7 v4, r29064-696ad7b1aa09
Compile tested: realtek/rtl838x, Netgear GS108T v3, r29064-696ad7b1aa09
Run tested: x86/64, QEMU Standard PC (Q35 + ICH9, 2009), r29064-696ad7b1aa09, booted and used for 7h without issues
Run tested: ath79/generic, TP-Link Archer C7 v4, r29064-696ad7b1aa09, booted and used for 7h without issues
Run tested: realtek/rtl838x, Netgear GS108T v3, r29064-696ad7b1aa09, booted and used for 7h without issues

Signed-off-by: Pascal Ernster <git@hardfalcon.net>
(cherry picked from commit 2d66b6c8f2)
2025-05-19 19:32:57 -04:00
Noah Meyerhans
95a8799087 bind: bump to 9.20.5
Fixes CVEs:
- CVE-2024-12705: DNS-over-HTTPS flooding
- CVE-2024-11187: Limit additional section processing for large RDATA sets

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
(cherry picked from commit 55c559347f)
2025-05-19 19:32:57 -04:00
Michael Heimpold
22ea458f2a php8: update to 8.3.21
Upstream changelog:
https://www.php.net/ChangeLog-8.php#8.3.21

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2025-05-18 18:00:14 +02:00
Angus Gratton
82a950d905 borgbackup: Bump to 1.2.8
Necessary for compatibility with python3-msgpack 1.0.7, which was updated in
f8bfe730df.

Signed-off-by: Angus Gratton <gus@projectgus.com>
2025-05-16 10:52:53 +03:00
Nikolay Manev
47add209b7 adblock-fast: improve the processing of combined list
Signed-off-by: Nikolay Manev <just.ops@proton.me>

adblock-fast: modify gawk statement

Signed-off-by: Nikolay Manev <just.ops@proton.me>
(cherry picked from commit 34c02108ce)
2025-05-14 10:51:36 -07:00
Toke Høiland-Jørgensen
437a7093a6 acme-acmesh: Bump to v3.1.1
Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2025-05-14 11:31:52 +02:00
Stan Grishin
b644705b42 https-dns-proxy: update to 2025.05.11
* update to 2025.05.11 from upstream: a34e20d6e2
* update default config with default value for procd_fw_src_interfaces

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit ece4291596)
2025-05-13 16:52:05 -07:00
Nikolay Manev
04bede5e02 adblock-fast: Fixed non-printable characters and bump PKG_VERSION
Signed-off-by: Nikolay Manev <just.ops@proton.me>
(cherry picked from commit 3d9eb08f8e)
2025-05-13 16:51:58 -07:00
Tianling Shen
99f3000c73 btop: Update to 1.4.3
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 5082f94791)
2025-05-13 14:30:15 +08:00
Tianling Shen
187324d2c5 yq: Update to 4.45.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 35eb372aa5)
2025-05-13 14:30:11 +08:00
George Sapkin
00a59e728b syncthing: bump to 1.29.6
- chore(lib): expose model methods to obtain progress
- feat(gui): explanation to options enabled or disabled per folder type
- fix(gui): validate device ID in canonical form
- fix(config): remove discontinued primary STUN server
- fix(stun): better error handling
- chore(config): remove discontinued secondary STUN servers
- chore(fs): speed up case normalization
- build(deps): update dependencies
- feat(fs, config): add support for custom filesystem type construction
- build: replace underscore in Debian version
- chore(model): add metric for total number of conflicts
- fix(config): properly apply defaults when reading folder configuration
- fix(config): zero filesystemtype is "basic"
- build: push artifacts to Azure
- chore(config): resolve primary STUN servers via SRV record
- chore(fs): changes to allow Filesystem to be implemented externally
- fix(strings): differentiate setup(n) and set(v) up
- fix(gui): mark unseen disconnected devices as inactive
- fix(syncthing): use separate lock file instead of locking the
  certificate
- feat(api, gui): allow authentication bypass for metrics
- chore: add missing copyright in new files from infra branch
- fix(osutil): give threads same I/O priority on Linux
- chore(syncthing): remove support for TLS 1.2 sync connections
- chore(gui): update dependency copyrights, add script for periodic
  maintenance
- chore(api): log X-Forwarded-For
- feat(config): add option for audit file
- chore(gui): use go list --deps for dependency list
- fix(strelaysrv): make the session limiter session-dependent

Changelog: https://github.com/syncthing/syncthing/compare/v1.29.5...v1.29.6
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit 9f78bed3f8)
2025-05-11 21:57:33 +03:00
George Sapkin
0081573a07 syncthing: add discovery and relay descriptions
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit a7f229fce5)
2025-05-11 21:57:33 +03:00
George Sapkin
fd190caac3 golang: bump to 1.23.9
go1.23.9 (released 2025-05-06) includes fixes to the runtime and the
linker.

Link: https://github.com/golang/go/issues?q=milestone%3AGo1.23.9+label%3ACherryPickApproved
Signed-off-by: George Sapkin <george@sapk.in>
2025-05-09 18:35:25 +08:00
Stan Grishin
f675fac54b pbr: bugfix: no errors on negated values
* do not display errors on negated values
* improved output in verbose mode

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit a443f2e200)
2025-05-08 19:36:42 -07:00
Peter van Dijk
6ad890af82 dnsdist: update to 1.9.9
fixes CVE-2025-30194

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
2025-05-08 22:06:23 +03:00
Jianhui Zhao
2c74f76956 lua-eco: update to 3.9.0
Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
(cherry picked from commit a25bfb468c)
2025-05-08 14:24:28 +08:00
Antonio Pastor
9a6ddd62b4 netatalk: update to 4.2.2
As of netatalk-4.2.0 the iniparser library is a prerequisite.

Signed-off-by: Antonio Pastor <antonio.pastor@gmail.com>
(cherry picked from commit 7cd8b345e4)
2025-05-07 19:53:01 +03:00
Antonio Pastor
b3eb363514 iniparser: library for parsing of ini files in C
Package is present in multiple linux distributions.
Upstream is actively maintained.

Signed-off-by: Antonio Pastor <antonio.pastor@gmail.com>
(cherry picked from commit 456d8ff5d5)
2025-05-07 19:53:01 +03:00
Antonio Pastor
075b108947 netatalk: fix small issues with sample config and config generation
Small issues with sample configureation caused services not to start
or flood log with errors.

Signed-off-by: Antonio Pastor <antonio.pastor@gmail.com>
(cherry picked from commit fa2eb8bf78)
2025-05-07 19:53:01 +03:00
Tianling Shen
a704eb4676 btop: Update to 1.4.2
Update alias command.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 8df8700a13)
2025-05-04 20:36:00 +08:00
Tianling Shen
41d30abfdc perl-ack: Update to 3.8.2
ack would always set a return code of 1 if -c was used. Now it properly
returns 1 if no files match, and 0 if any files match.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit b6b9cd38fa)
2025-05-04 20:35:57 +08:00
Tianling Shen
22f5c3c6ad v2ray-core: Update to 5.30.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit abec214201)
2025-05-04 20:35:55 +08:00
Tianling Shen
de94c521c6 btop: Update to 1.4.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 0e5cc7de57)
2025-05-04 20:35:51 +08:00
Tianling Shen
dbf721d027 libtorrent-rasterbar: enable python package
The python package now works with Python 3.11.

Also simplify Build/InstallDev with CMAKE_INSTALL.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 800924c435)
2025-05-04 20:35:47 +08:00
Tianling Shen
87dba14614 libtorrent-rasterbar: Update to 2.0.11
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit d6a058775d)
2025-05-04 20:35:44 +08:00
Lunatic Kochiya
f28d41f76a aria2: fix aira2-openssl install failed
Description: fix in full compile a firmware

    pkg_hash_check_unresolved: cannot find dependency aria2-openssl for aria2
    pkg_hash_fetch_best_installation_candidate: Packages for aria2 found, but incompatible with the architectures configured
    satisfy_dependencies_for: Cannot satisfy the following dependencies for luci-app-aria2:
    aria2-openssl
    opkg_install_cmd: Cannot install package luci-app-aria2.

Signed-off-by: Lunatic Kochiya <125438787@qq.com>
(cherry picked from commit 2a1b4a2035)
2025-05-04 20:34:09 +08:00
George Sapkin
190bc8f116 yt-dlp: bump to 2025.04.30
Important changes

- New option --preset-alias/-t has been added
- This provides convenient predefined aliases for common use cases.
  Available presets include mp4, mp3, mkv, aac, and sleep. See the
  README for more details.

Core changes

- Add --preset-alias option
- utils
  - _yield_json_ld: Make function less fatal
  - url_or_none: Support WebSocket URLs

Extractor changes

- abematv: Fix thumbnail extraction
- atresplayer: Rework extractor
- bpb: Fix formats extraction
- cda: Fix formats extraction
- cdafolder: Extend _VALID_URL
- crowdbunker: Make format extraction non-fatal
- dacast: Support tokenized URLs
- dzen.ru: Rework extractors
- generic: Fix MPD extraction for file:// URLs
- getcourseru: Fix extractors
- ivoox: Add extractor
- kika: Add playlist extractor
- linkedin
  - Support feed URLs
  - events: Add extractor
- loco: Fix extractor
- lrtradio: Add extractor
- manyvids: Fix extractor
- mixcloud: Refactor extractor
- mlbtv: Fix device ID caching
- niconico
  - Fix login support
  - Remove DMC formats support
  - live: Fix extractor
- panopto: Fix formats extraction
- parti: Add extractors
- raiplay: Fix DRM detection
- reddit: Support --ignore-no-formats-error
- royalive: Add extractor
- rtve: Rework extractors
- rumble: Improve format extraction
- tokfmpodcast: Fix formats extraction
- tv2dk: Fix extractor
- tvp: vod: Improve _VALID_URL
- tvw: tvchannels: Add extractor
- twitcasting: Fix livestream extraction
- twitch: clips: Fix uploader metadata extraction
- twitter
  - Fix extraction when logged-in
  - spaces: Improve metadata extraction
- vimeo: Extract from mobile API
- vk
  - Fix chapters extraction
  - Fix uploader extraction
- youtube
  - Add context to video request rate limit error
  - Add extractor arg to skip "initial_data" request
  - Add warning on video captcha challenge
  - Cache signature timestamps
  - Detect and warn when account cookies are rotated
  - Detect player JS variants for any locale
  - Do not strictly deprioritize missing_pot formats
  - Improve warning for SABR-only/SSAP player responses
  - tab: Extract continuation from empty page
- zdf: Fix extractors

Downloader changes

- niconicodmc: Remove downloader

Networking changes

- Add PATCH request shortcut

Changelog: https://github.com/yt-dlp/yt-dlp/releases/tag/2025.04.30
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit d3efd59182)
2025-05-03 18:15:45 +03:00
George Sapkin
2667d34e8f yt-dlp: update package description
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit fdbd1bc971)
2025-05-03 18:15:45 +03:00
Dirk Brenken
d120a8cbaa adblock: update 4.4.1-2
* init improvements
* jail mode fixes and improvements
* small code cleanups
* update the readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 52b51e30f4)
2025-05-03 14:40:18 +02:00
Anton P.
34afc97c0e sing-box: Update to 1.11.9
changelog: https://github.com/SagerNet/sing-box/releases/tag/v1.11.9

Signed-off-by: Anton P. <dragunap@gmail.com>
(cherry picked from commit c0a996ddd9)
2025-05-02 07:52:48 +03:00
Dirk Brenken
234806df39 banIP: update 1.5.6-2
* add an uci-defaults script for housekeeping and option migration from former versions
* small fixes and improvements

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 5402f8eea1)
2025-04-29 21:57:29 +02:00
Liangbin Lian
dfa01855b3 aria2: fix openssl legacy load failed
```
Mon Apr 21 13:30:56 2025 daemon.info aria2c[13301]: jail: exec-ing /usr/bin/aria2c
Mon Apr 21 13:30:56 2025 daemon.err aria2c[13301]: Exception caught
Mon Apr 21 13:30:56 2025 daemon.err aria2c[13301]: Exception: [Platform.cc:125] errorCode=1 OSSL_PROVIDER_load 'legacy' failed.
Mon Apr 21 13:30:56 2025 daemon.err aria2c[13301]:
Mon Apr 21 13:30:56 2025 daemon.info procd: Instance aria2::aria2.main s in a crash loop 6 crashes, 0 seconds since last crash
Mon Apr 21 13:30:56 2025 daemon.info aria2c[13301]: jail: jail (13302) exited with exit: 1

```

Links:
- https://github.com/aria2/aria2/issues/2152

Co-authored-by: Tianling Shen <cnsztl@gmail.com>
Signed-off-by: Liangbin Lian <jjm2473@gmail.com>
(cherry picked from commit d60028116d)
2025-04-29 20:44:53 +08:00
Christian Lachner
16adf3eb5e haproxy: update to v3.0.10
- Update haproxy PKG_VERSION and PKG_HASH
- See changes: http://git.haproxy.org/?p=haproxy-3.0.git;a=shortlog

Signed-off-by: Christian Lachner <gladiac@gmail.com>
(cherry picked from commit 83345c51fd)
2025-04-28 22:28:32 +03:00
Vladimir Ermakov
825ece13a4 qemu: update to 9.1.3
- Update version
- Refresh patches

Signed-off-by: Vladimir Ermakov <vooon341@gmail.com>
(cherry picked from commit 72b20db976)
2025-04-28 13:19:12 +08:00
Vladimir Ermakov
3f3730c02a qemu: fix guest agent patch
Replace to fix #25209

Signed-off-by: Vladimir Ermakov <vooon341@gmail.com>
(cherry picked from commit 1268618b49)
2025-04-28 13:19:12 +08:00
Jianhui Zhao
5e57bff149 lua: lua5.4 update to 5.4.7
1ab3208a1fceb12fca8f24ba57d6e13c5bff15e3 'lua.h' back to redundancy in version definitions
21ff8de33a5aca9c3c907592b894e4b9ab036d3e Bug: Tricky _PROMPT may trigger undefined behavior
7eb1ed21b7057ab5f1b921f8271eddcf13659737 More permissive use of 'errno'
2db966fcbf757775c842bc66449d7e697826aa1d Bug: luaL_traceback may need more than 5 stack slots
ae9a0cbbb446499e759acae47664d1d136d7ba90 Bug: overlapping assignments
d5212c13b081ed62d8e1ae436779e79c79edf564 More disciplined use of 'errno'
e0efebdbe4e4053c6fb78588c546f1dc23aa964a Detail in the manual
e84f7bf19852c35ad0a1e9a1654a7b99a211e17c Details
dfbde4c7d540f81f2cc539741a2c1f4c00f91c10 Bug: Active-lines for stripped vararg functions
de794a6527058e75b674118b35f39dcbb13e88b1 Towards release 5.4.7
8b83417de982d068bd92e0428a42ca0cdd909789 Avoids a warning when lua_Number is 'float'
e288c5a91883793d14ed9e9d93464f6ee0b08915 Bug: Yielding in a hook stops in the wrong instruction
5853c37a83ec66ccb45094f9aeac23dfdbcde671 Bug: Buffer overflow in string concatenation
842a83f09caa2ebd4bc03e0076420148ac07c808 Panic functions should not raise errors
7923dbbf72da303ca1cca17efd24725668992f15 Bug: Recursion in 'getobjname' can stack overflow
81e4fce5303fdb274bc5572fb168dd766fb8208e Simpler test in 'luaH_getint'
6baee9ef9d5657ab582c8a4b9f885ec58ed502d0 Removed test for "corrupted binary dump"
edd8589f478e784bb8d1a8e9a3bb2bb3ca51738c Avoid casts from unsigned long to floating-point
07a9eab23ac073362f231ddc7215688cf221ff45 Cannot use 'getshrstr' before setting 'shrlen'
9363a8b9901a5643c9da061ea8dda8a86cdc7ef1 Documentation for "LUA_NOENV"
5ab6a5756b3c50c99f1388885e9a48a7da8cbe2d Bug: Wrong line number for function calls
9b4f39ab14fb2e55345c3d23537d129dac23b091 More disciplined use of 'getstr' and 'tsslen'
f4211a5ea4e235ccfa8b8dfa46031c23e9e839e2 More control over encoding of test files
1b3f507f620d996ffb69da7476a19251acfb89ca Bug: Call hook may be called twice when count hook yields
6b51133a988587f34ee9581d799ea9913581afd3 Thread stacks resized in the atomic phase
cbae01620278f9b568805db16a96d0631ced473d Details
ea39042e13645f63713425c05cc9ee4cfdcf0a40 Removed redundancy in definitions of version/release
05ec55f16b389a4377adab84efe374437da8dbd2 Avoid inclusion loop in 'ltm.h'
f623b969325be736297bc1dff48e763c08778243 Bug: read overflow in 'l_strcmp'
9be74ccc214eb6f4d9d0b9496fd973542c7377d9 Several functions turned 'static'
09f3c2372f5dbeaec9f50614a26c1b5761726a88 Option '-l' discards version sufix from file name
c197885cb00b85251c35cffdc4057efaee2d7a88 Small improvements in tests
934e77a286aeb97ca02badf56956ccc78217e9d0 Details

Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
(cherry picked from commit 769e8f9d2d)
2025-04-28 13:15:31 +08:00
David Bauer
39846b16b7 poemgr: update to latest HEAD
eaaf7ea contrib: update GPIO numbering
28774ac poemgr: add error logging

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit 533d32face)
2025-04-26 01:01:10 +02:00
Stephen Howell
999fb9bad5 realtek-poe: Build for all targets
* realtek-poe was only being built for realtek/rtl838x with mips-4kec
* needed by targets in realtek/rtl839x with mips-24kc

Signed-off-by: Stephen Howell <howels@allthatwemight.be>
(cherry picked from commit 6ade11fc3a)
2025-04-25 17:01:15 +02:00
George Sapkin
9fbef36ae6 yt-dlp: run CI test for the main package only
Fixes: afe9935ff ("yt-dlp: add CI version check")
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit 6746398cb4)
2025-04-25 15:09:29 +08:00
George Sapkin
3ed77a2f03 yt-dlp: bump to 2025.03.31
Core changes

- Add --compat-options 2024

Extractor changes

- francaisfacile: Add extractor
- generic: Validate response before checking m3u8 live status
- microsoftlearnepisode: Extract more formats
- mlbtv: Fix radio-only extraction
- on24: Support mainEvent URLs
- sbs: Fix subtitles extraction
- stvr: Rename extractor from RTVS to STVR
- twitch: clips: Extract portrait formats
- youtube
  - Add player_js_variant extractor-arg
  - tab: Fix playlist continuation extraction

Pick up the package as a maintainer as per previous maintainer's
request.

Changelog: https://github.com/yt-dlp/yt-dlp/releases/tag/2025.03.31
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit 8c49ed8ade)
2025-04-25 15:09:29 +08:00
George Sapkin
49f9e28626 yt-dlp: assign PKG_CPE_ID
Link: https://nvd.nist.gov/products/cpe/detail/2739DE26-F16B-478E-A270-32C659C7F2C6?namingFormat=2.2&orderBy=CPEURI&keyword=yt-dlp&status=FINAL
Link: https://github.com/openwrt/packages/issues/8534
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit 303f7973f7)
2025-04-25 15:09:29 +08:00
George Sapkin
b3e7ba683e yt-dlp: add CI version check
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit afe9935ff4)
2025-04-25 15:09:29 +08:00
Vladimir Ermakov
691fb226d3 qemu: update to 9.1.2
- Update to 9.1.2
- Refresh the patches

Signed-off-by: Vladimir Ermakov <vooon341@gmail.com>
(cherry picked from commit 6ee7a479bc)
2025-04-24 19:47:05 +08:00
Keith T. Garner
0c9d96b6a6 lsd: update to latest stable/1.1.5
Signed-off-by: Keith T. Garner <kgarner@kgarner.com>
(cherry picked from commit 826a3a993c)
2025-04-24 19:43:33 +08:00
George Sapkin
9ce0af5e31 syncthing: bump to 1.29.5
Bugfixes:

- use separate lock file instead of locking the certificate

Changelog: https://github.com/syncthing/syncthing/releases/tag/v1.29.5
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit e076de270a)
2025-04-24 19:36:38 +08:00
George Sapkin
773671e2fb syncthing: bump to 1.29.4
Bugfixes:

- Tildes break directory autocomplete

Changelog: https://github.com/syncthing/syncthing/releases/tag/v1.29.4
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit e23dceaf4d)
2025-04-24 19:36:38 +08:00
George Sapkin
9c5d1502fa syncthing: bump to 1.29.3
Bugfixes:

- Unintelligible error message "setting metadata: lookup failed"

Changelog: https://github.com/syncthing/syncthing/releases/tag/v1.29.3
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit d7525fca43)
2025-04-24 19:36:38 +08:00
Yun Wang
bb823a5514 syncthing: Update to 1.29.2 and Change logfile path
Update to 1.29.2 and Change logfile path from /etc/syncthing/syncthing
log to /var/log/syncthing.log.
This utilizes tmpfs (memory-based storage) to prevent disk usage growth
caused by log file accumulation during extended operation.

Benefits:
- Avoids storage saturation from excessive log growth.
- Aligns with best practices for temporary log management.
- For systems using flash storage (e.g., SSDs or eMMC), storing logs in
  tmpfs avoids flash memory wear caused by frequent writes to
  /etc/syncthing.

Signed-off-by: Yun Wang <maoerpet@foxmail.com>
(cherry picked from commit 85fa8cfe0b)
Signed-off-by: George Sapkin <george@sapk.in>
2025-04-24 19:36:38 +08:00
Liangbin Lian
e4be6dba98 transmission: add syscalls to seccomp filter
Add missing syscalls found with `/etc/init.d/transmission trace`.

fix crash on boot on x86_64 platform

Signed-off-by: Liangbin Lian <jjm2473@gmail.com>
(cherry picked from commit d827297546)
2025-04-23 15:07:27 +02:00
Tianling Shen
dac2584846 v2raya: Update to 2.2.6.7
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit aad793b6f4)
2025-04-20 20:50:24 +08:00
Tianling Shen
2fd49df2ab alist: Update to 3.44.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 72591f1821)
2025-04-20 20:50:21 +08:00
Tianling Shen
a1b077ae25 inih: Update to r59
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 9e3887d8d4)
2025-04-20 20:50:17 +08:00
Tianling Shen
ffb7764879 librespeed-go: add missing conffiles
Add missing uci configuration to conffiles.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit df9ba18578)
2025-04-20 20:49:00 +08:00
Tianling Shen
d2d4a2a5a3 cloudflared: Update to 2025.4.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 87ed509841)
2025-04-20 20:48:22 +08:00
Tianling Shen
09d46defe2 v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 1d73b25ed8)
2025-04-20 20:48:22 +08:00
Tianling Shen
3f2324f6b6 v2ray-core: Update to 5.29.3
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 6f869c6ceb)
2025-04-20 20:48:22 +08:00
Dirk Brenken
02211fbea8 adblock: update 4.4.1-1
* add an uci-defaults script for housekeeping and option migration from former versions
* update the readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 519c7fcf96)
2025-04-19 20:05:23 +02:00
Dirk Brenken
b3f8fa0e73 adblock: update 4.4.0-3
* checked and fixed the kresd and smartdns support
* fixed another ETAG issue
* changed the enabled feeds in default config to certpl, aguard and adguard_tracking
* various other small fixes
* update the readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 3e99991067)
2025-04-19 20:05:23 +02:00
Dirk Brenken
f9d9c4f056 adblock: update 4.4.0-2
* minor ETAG fixes and improvements
* permanently set the addnmount option for dnsmasq
* cosmetics

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit d10813d62f)
2025-04-19 20:05:22 +02:00
Dirk Brenken
83f87d722d adblock: release 4.4.0-1
* added a 'DNS Shift' option, where the generated final DNS blocklist is moved to the backup directory and
   only a soft link to this file is set in memory. As long as your backup directory is located on an external drive,
   you should activate this option to save disk space
* added ETAG-Header support to make sure to download only feeds that has been changed,
   use backups otherwise (not supported by uclient-fetch)
* removed aria2 support
* added brave as a new safesearch provider
* removed the racist terminology from the local lists and renamed it to "allowlist" and "blocklist"
* removed the 'list' and 'timer' function from init, use the LuCI feed editor and the standard cron frontend instead
* various  code changes and improvements
* major LuCI frontend changes, incl. a custom feed editor (separate commit)
* partial readme update

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 4857db8e28)
2025-04-19 20:05:22 +02:00
Stan Grishin
1d67a5bb57 adblock-fast: bugfixes: empty allow-lists, support for swap
* do not produce an error on empty allow-lists, fixes https://github.com/openwrt/packages/issues/26228
* do not produce an error when swap is available, fixes https://github.com/openwrt/packages/issues/26313

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 392dc2ed72)
2025-04-18 08:38:26 -07:00
George Sapkin
99fe41307b external-protocol: add missing ip dependency
external.sh requires ip with -json flag that is not supported by the
BusyBox ip.

Fixes: https://github.com/openwrt/packages/issues/26302
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit 7b2daf0f0a)
2025-04-18 16:50:08 +02:00
Eric Fahlgren
b3e5930d99 owut: update to 2025.04.08
Bug fixes:
    efahl/owut@ef2bfb4d4c owut: remove trailing commas in json dump
Enhancements:
    efahl/owut@2586b2cfd5 owut: minor name cleanup

Signed-off-by: Eric Fahlgren <ericfahlgren@gmail.com>
(cherry picked from commit 3e2576c54c)
2025-04-18 12:05:12 +08:00
Ivan Pavlov
74bc84d118 openvpn: update to 2.6.14
Security fixes:

​CVE-2025-2704: fix possible ASSERT() on OpenVPN servers using --tls-crypt-v2
 Security scope: OpenVPN servers between 2.6.1 and 2.6.13 using --tls-crypt-v2 can be made
 to abort with an ASSERT() message by sending a particular combination of authenticated and
 malformed packets. No crypto integrity is violated, no data is leaked, and no remote code
 execution is possible. This bug does not affect OpenVPN clients.

For details refer to https://github.com/OpenVPN/openvpn/blob/v2.6.14/Changes.rst

Signed-off-by: Ivan Pavlov <AuthorReflex@gmail.com>
2025-04-16 19:04:30 +02:00
George Sapkin
a7cee9edfb expat: bump to 2.7.1 to fix several CVEs
Addresses CVE-2024-8176 and CVE-2024-50602.

Full changelog linked below.

Changelog: https://github.com/libexpat/libexpat/blob/R_2_7_1/expat/Changes
Fixes: https://github.com/openwrt/packages/issues/26255
Fixes: https://github.com/advisories/GHSA-9hcv-xw76-m4h6
Fixes: https://github.com/advisories/GHSA-79wf-qgrg-2p6c
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit c591f69b9b)
2025-04-16 18:50:40 +02:00
Wesley Gimenes
5632c069f7 netbird: update to 0.39.2
changelog: https://github.com/netbirdio/netbird/releases/tag/v0.39.2

Signed-off-by: Wesley Gimenes <wehagy@proton.me>
(cherry picked from commit 8efe42d86c)
2025-04-15 22:13:03 +03:00
Tianling Shen
5685c1be3e libcbor: disable sanitize by default
musl libc does not support this feature, and for glibc, additional
library libasan is required. Disable it explicitly to avoid build issue
when CONFIG_DEBUG is selected.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 1fc56e79d5)
2025-04-15 19:46:19 +08:00
Moritz Warning
7b747a18d2 zerotier: add patch to support miniupnpc 2.2.8
Signed-off-by: Moritz Warning <moritzwarning@web.de>
(cherry picked from commit 51f0219451)
2025-04-15 19:45:21 +08:00
Petr Štetiar
d21fd04a81 libarchive: bump to 3.7.9 fixing CVE-2025-25724, CVE-2025-1632, CVE-2024-57970
Libarchive 3.7.9 is a bugfix release, fixing a regression in libarchive
3.7.8 regarding GNU sparse entries was fixed.

Libarchive 3.7.8 is a bugfix and security release:

  Security fixes:

    * tar reader: Handle truncation in the middle of a GNU long linkname (CVE-2024-57970)
    * unzip: fix null pointer dereference (CVE-2025-1632)
    * tar reader: fix unchecked return value in list_item_verbose() (CVE-2025-25724)

  Important bugfixes:

    * 7zip reader: add SPARC and POWERPC filter support for non-LZMA compressors
    * tar reader: Ignore ustar size when pax size is present
    * tar writer: Fix bug when -s/a/b/ used more than once with b flag
    * cpio: Fix a Y2038 bug on Windows
    * libarchive: Handle ARCHIVE_FILTER_LZOP in archive_read_append_filter
    * libarchive: Adding missing seeker function to archive_read_open_FILE()

Full Changelog: https://github.com/libarchive/libarchive/compare/v3.7.7...v3.7.8

Signed-off-by: Petr Štetiar <ynezz@true.cz>
(cherry picked from commit 4803944c5a)
2025-04-14 13:47:05 +02:00
Matthias Franck
5a1e4db114 libarchive: bump to 3.7.7 fixing a lot of security issues
libarchive fixed a lot of security issues in the last few releases, listing only
notable changes,

libarchive 3.7.5:

   * rar4: protect copy_from_lzss_window_to_unp()  CVE-2024-20696
   * rar4: fix CVE-2024-26256

libarchive 3.7.6:

   * this release fixes a tar regression introduced in libarchive 3.7.5

libarchive 3.7.7:

   * gzip: prevent a hang when processing a malformed gzip inside a gzip (OSS-Fuzz)
   * tar: don't crash on truncated tar archives (OSS-Fuzz)
   * tar: fix two leaks in tar header parsing

Link: https://github.com/libarchive/libarchive/releases

Signed-off-by: Matthias Franck <matthias.franck@softathome.com>
(cherry picked from commit 39b1179bd6)
2025-04-14 13:47:02 +02:00
Stan Grishin
f37fd5c6bc https-dns-proxy: update to 2025.03.13 upstream
* fixes https://github.com/openwrt/packages/issues/25522

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit a6eec2ad92c2d8756616625b137ec9da96967a74)
2025-04-13 17:18:24 -07:00
Jianhui Zhao
d8cd30f4e2 lua-eco: update to 3.8.0
Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
(cherry picked from commit 733425e1da)
2025-04-13 16:47:01 +08:00
Glenn Strauss
ba22bf15f4 lighttpd: backport revert changed TLS defaults
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2025-04-13 16:46:11 +08:00
Glenn Strauss
a286391449 lighttpd: update to lighttpd 1.4.79 release hash
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit e800fc7e8c)
2025-04-13 16:46:11 +08:00
Dirk Brenken
91f6647882 banIP: release 1.5.6-1
* the ETAG function now supports country and asn feeds as well
* fixed becyber URL and other small fixes
* LuCI fixes and improvements (separate commit)

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 7383b4817b)
2025-04-11 22:00:04 +02:00
Joel Low
4c3068cc96 strongswan: DHCP on lo fixes backport
Fixes #25801. Adds the following commits to fix DHCP behaviour on
Strongswan 5.9.14:

 - abbf9d28b0
 - 00d8c36d6f
 - a50ed3006e

Signed-off-by: Joel Low <joel@joelsplace.sg>
(cherry picked from commit eb91f914b9)
2025-04-09 10:19:52 +02:00
Hannu Nyman
451c9e7919 nano: Update to 8.4
Update nano edit to version 8.4.

Add configure flags to overcome upstream bug 66978, where the newly added
gnulib module for strcasecmp always fails in the configure step when
cross-compiling.
https://savannah.gnu.org/bugs/?66978
b2927d1b1f

The added flags disable the strcasecmp function from gnulib.
If upstream (gnulib?) fixes things later, the flags should be removed.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 3d055f8dfb)
2025-04-06 20:05:14 +03:00
George Sapkin
41b2ea6d69 golang: bump to 1.23.8
go1.23.8 (released 2025-04-01) includes security fixes to the net/http
package, as well as bug fixes to the runtime and the go command. See the
Go 1.23.8 milestone on our issue tracker for details.

Link: https://github.com/golang/go/issues?q=milestone%3AGo1.23.8+label%3ACherryPickApproved
Signed-off-by: George Sapkin <george@sapk.in>
2025-04-05 02:34:21 +08:00
Daniel Golle
3d58a2ff5e exim: update to 4.98.2
Fixes CVE-2025-26794 (SQL injection when using SQLite for ETRN hints)

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 05f82abaa7)
2025-04-03 21:12:26 +01:00
Khachatryan Karen
4c7bd6f86b antiblock: Update to 2.1.2
1) Added the ability to route different domains through different gateways, up to 32 routes.
2) The program has been switched from proxying mode to sniffer mode.
3) Blacklist has been added so that the specified subnets are not added to the routing table.
4) Log updated.
5) The "output" option has been removed from the service, it is now /tmp/antiblock

Signed-off-by: Khachatryan Karen <karen0734@gmail.com>
2025-04-03 18:34:57 +03:00
Vasily Evseenko
40cb49f99e wfb-ng: Update to release 25.01
1) FEC optimizations
2) Add tunnel daemon
3) Add wfb_tx_cmd utility

Signed-off-by: Vasily Evseenko <svpcom@gmail.com>
(cherry picked from commit 85b4f08c9e)
2025-04-03 18:19:38 +08:00
Keith T. Garner
bff078f3b7 dockerd: add docker-storage to init
Docker's backend storage driver can be configurable for certain
filesystems. The default is the overlay storage driver, but if you run
openwrt on a system with btrfs, this will allow you to override the
default configuration by settings the storage_driver in uci in dockerd's
global section. This value will be used in the created dockerd.json
file.

Signed-off-by: Keith T. Garner <kgarner@kgarner.com>
(cherry picked from commit f2aa53cdef)
2025-04-01 01:02:01 +08:00
Gerard Ryan
6671df4686 dockerd: Improved error msg for rev ver dep check
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit 5e2e9b7e91)
2025-04-01 01:02:01 +08:00
Dirk Brenken
f739209d39 banIP: update 1.5.5-2
* fixed a JSON reporting issue (when the map and NFT counters are disabled)
* optimized the getfetch function call within the reporting function
* removed the stale IPv6 links in the becyber feed
* cosmetics

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 251f58d513)
2025-03-29 17:08:12 +01:00
Vladimir Ulrich
1577e071e4 zoneinfo: Updated to 2025b release.
Signed-off-by: Vladimir Ulrich <admin@evl.su>

(cherry picked from commit df9015f9da)
2025-03-29 13:43:26 +02:00
Vladimir Ulrich
bf216ab514 zoneinfo: Updated to 2025a release.
Signed-off-by: Vladimir Ulrich <admin@evl.su>

(cherry picked from commit 59db147031)
2025-03-29 13:43:21 +02:00
Dirk Brenken
a690d498f2 banIP: release 1.5.5-1
* added a geoIP Map to show home IPs and potential attacker IPs on a leafletjs based map
* significantly improved the reporting performance on multicore hardware
* removed aria2 support (it doesn't support post data requests)
* removed the following outbound feeds due to too many false positives:
   adaway, adguard, adguardtrackers, antipopads, oisdbig, oisdnsfw, oisdsmall, stevenblack and yoyo
* renamed the banIP command "survey" to "content"
* various other small tweaks
* update the readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 716e73da56)
2025-03-28 09:39:20 +01:00
Christian Lachner
64e0c6eb87 haproxy: update to v3.0.9
- Update haproxy PKG_VERSION and PKG_HASH
- See changes: http://git.haproxy.org/?p=haproxy-3.0.git;a=shortlog

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2025-03-28 14:23:58 +08:00
George Sapkin
69d4194a50 golang: bump to 1.23.7
go1.23.7 (released 2025-03-04) includes security fixes to the net/http
package, as well as bug fixes to cgo, the compiler, and the reflect,
runtime, and syscall packages.

Signed-off-by: George Sapkin <george@sapk.in>
2025-03-26 14:58:45 +08:00
Tianling Shen
4ff7d67e5d alist: Update to 3.43.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 08084d48a4)
2025-03-25 19:25:16 +08:00
Ray Wang
79cbb4820f fsh: update to 4.9.0
Signed-off-by: Ray Wang <git@hev.cc>
(cherry picked from commit fbfb671a19)
2025-03-22 19:20:44 +08:00
Dirk Brenken
f49f4c9218 adblock: update 4.2.7-3
* fixed a reversed domain output when TLD compression is disabled (reported in the forum)
* removed abandoned antipopads source
* added three energized source variants (blu, spark, ultimate)

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit ed57afa392)
2025-03-22 08:56:34 +01:00
Ray Wang
35a46e9ca0 hev-socks5-tunnel: update to 2.10.0
Signed-off-by: Ray Wang <git@hev.cc>
(cherry picked from commit b2c01054d6)
2025-03-21 16:39:14 +08:00
Thiago Pereira Ricciardi
57116cdb3e pptpd: Fix secrets update
Clear pptp-server existing logins from CHAP_SECRETS file before adding new login data.

Signed-off-by: Thiago Pereira Ricciardi <thiago.ricciardi@gmail.com>
2025-03-20 16:18:55 +01:00
Ray Wang
53f557b06d hev-socks5-tproxy: update to 2.8.0
Signed-off-by: Ray Wang <git@hev.cc>
(cherry picked from commit 9cdb467256)
2025-03-20 16:11:23 +08:00
Ray Wang
9b44418aa5 natmap: update to 20250318
Signed-off-by: Ray Wang <git@hev.cc>
(cherry picked from commit 0c5bda44d2)
2025-03-20 16:11:12 +08:00
George Sapkin
9cc0b720d4 adguardhome: bump to 0.107.57
Changelog: https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.57
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit 9ddc2c5dcd)
2025-03-17 20:16:17 +08:00
George Sapkin
5dd2864f2d adguardhome: remove unnecessary build options
Remove `node-yarn/host` because the upstream switched to npm
Remove `NODE_OPTIONS=--openssl-legacy-provider` because it's not necessary since Node.js 18.x

Link: 1afe226ce8 (diff-b335630551682c19a781afebcf4d07bf978fb1f8ac04c6bf87428ed5106870f5R210-L211)
Link: 1afe226ce8 (diff-b335630551682c19a781afebcf4d07bf978fb1f8ac04c6bf87428ed5106870f5L223-L230)
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit e416d3f12e)
2025-03-17 20:16:17 +08:00
Álvaro Fernández Rojas
ee0c098b61 bcm27xx-eeprom: update to v2025-02-12-2712
bcm2711:
https://github.com/raspberrypi/rpi-eeprom/blob/v2025.02.12-2712/firmware-2711/release-notes.md#2024-12-07-enable-banklow-and-so-numa-by-default-latest
https://github.com/raspberrypi/rpi-eeprom/blob/v2025.02.12-2712/firmware-2711/release-notes.md#2024-12-07-enable-banklow-and-so-numa-by-default-latest
https://github.com/raspberrypi/rpi-eeprom/blob/v2025.02.12-2712/firmware-2711/release-notes.md#2025-02-11-recovery-walk-partitions-to-delete-recoverybin-latest

bcm2712:
https://github.com/raspberrypi/rpi-eeprom/blob/v2025.02.12-2712/firmware-2712/release-notes.md#2024-11-27-rp1fw-add-fifo_state--drain_tx-fix-can_add_program-default
https://github.com/raspberrypi/rpi-eeprom/blob/v2025.02.12-2712/firmware-2712/release-notes.md#2024-12-07-enable-banklow-and-so-numa-by-default-latest
https://github.com/raspberrypi/rpi-eeprom/blob/v2025.02.12-2712/firmware-2712/release-notes.md#2024-12-15-add-net-install-to-boot-menu-latest
https://github.com/raspberrypi/rpi-eeprom/blob/v2025.02.12-2712/firmware-2712/release-notes.md#2024-12-19-disable-fan-pwm-before-shutdown-latest
https://github.com/raspberrypi/rpi-eeprom/blob/v2025.02.12-2712/firmware-2712/release-notes.md#2025-01-06-stop-the-fan-after-after-fan-probe-latest
https://github.com/raspberrypi/rpi-eeprom/blob/v2025.02.12-2712/firmware-2712/release-notes.md#2025-01-07-fixup-m2-hat-detection-latest
https://github.com/raspberrypi/rpi-eeprom/blob/v2025.02.12-2712/firmware-2712/release-notes.md#2025-01-08-update-sdram-refresh-timings-for-bcm2712d0-products-latest
https://github.com/raspberrypi/rpi-eeprom/blob/v2025.02.12-2712/firmware-2712/release-notes.md#2025-01-13-improved-sdram-refresh-timings-for-pi5-16gb-latest
https://github.com/raspberrypi/rpi-eeprom/blob/v2025.02.12-2712/firmware-2712/release-notes.md#2025-01-14-add-set_reboot_order-api-latest
https://github.com/raspberrypi/rpi-eeprom/blob/v2025.02.12-2712/firmware-2712/release-notes.md#2025-01-22-add-dt-chosen-property-signed-boot-bootimg-hash-latest
https://github.com/raspberrypi/rpi-eeprom/blob/v2025.02.12-2712/firmware-2712/release-notes.md#2025-01-27-walk-the-partition-table-if-the-requested-partition-is-not-bootable-latest
https://github.com/raspberrypi/rpi-eeprom/blob/v2025.02.12-2712/firmware-2712/release-notes.md#2025-02-11-cm5-no-wifi-stability-improvements-latest
https://github.com/raspberrypi/rpi-eeprom/blob/v2025.02.12-2712/firmware-2712/release-notes.md#2025-02-12-fixup-change-to-disable-37v-pmic-output-on-cm5-no-wifi-latest

Full changelog: https://github.com/raspberrypi/rpi-eeprom/compare/v2024.11.12-2712...v2025.02.12-2712

Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
(cherry picked from commit 3141672cee)
2025-03-16 14:19:14 +01:00
Eric Fahlgren
ac3811cdac owut: update to 2025.03.14
Bug fixes:
    efahl/owut@15d7342377 owut: fix incorrect log levels on list and blob commands
    efahl/owut@3867b98d0e owut: fix parsing of certain APK versions

Enhancements:
    efahl/owut@52e7d44c99 owut: allow user to override 'package_changes'

Signed-off-by: Eric Fahlgren <ericfahlgren@gmail.com>
(cherry picked from commit a0c4010b07)
2025-03-16 10:47:19 +08:00
Ivan Pavlov
9ec727432d openvpn: update to 2.6.13
Feature changes:
 - on non-windows clients (MacOS, Linux, Unix) send "release" string from uname() call as IV_PLAT_VER to server
 - Windows: protect cached username, password and token in client memory
 - Windows: use new API to get dco-win driver version from driver
 - Linux: pass --timeout=0 argument to systemd-ask-password, to avoid default timeout of 90 seconds

Security fixes:
 - improve server-side handling of clients sending usernames or passwords longer than USER_PASS_LEN

Notable bug fixes:
 - FreeBSD DCO: fix memory leaks in nvlist handling
 - purge proxy authentication credentials from memory after use

For details refer to https://github.com/OpenVPN/openvpn/blob/v2.6.13/Changes.rst

Signed-off-by: Ivan Pavlov <AuthorReflex@gmail.com>
2025-03-15 17:39:08 +01:00
Tianling Shen
76c57dd0b6 cloudflared: Update to 2025.2.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit dfa0ec2d5f)
2025-03-15 20:40:10 +08:00
Zephyr Lykos
771f07479f tailscale: Update to 1.80.3
Signed-off-by: Zephyr Lykos <git@mochaa.ws>
(cherry picked from commit d6461746c3)
2025-03-15 20:38:40 +08:00
Alexandru Ardelean
ad54bb46cd django: bump to version 5.1.7
Includes a bunch of fixes from 5.1 onwards.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2025-03-14 20:50:56 +02:00
John Audia
f1bf549d23 openssh: bump to 9.9p2
Updated and removed upstreamed patch.

Highlights relating to security:

* Fix CVE-2025-26465 - ssh(1) in OpenSSH versions 6.8p1 to 9.9p1
  (inclusive) contained a logic error that allowed an on-path
  attacker (a.k.a MITM) to impersonate any server when the
  VerifyHostKeyDNS option is enabled. This option is off by default.

* Fix CVE-2025-26466 - sshd(8) in OpenSSH versions 9.5p1 to 9.9p1
  (inclusive) is vulnerable to a memory/CPU denial-of-service related
  to the handling of SSH2_MSG_PING packets. This condition may be
  mitigated using the existing PerSourcePenalties feature.

Both vulnerabilities were discovered and demonstrated to be exploitable
by the Qualys Security Advisory team. We thank them for their detailed
review of OpenSSH.

Full release notes: https://www.openssh.com/txt/release-9.9p2

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 67784bf4d0)
2025-03-12 23:07:19 +01:00
Michael Heimpold
21a1865d30 openssh: fix recursive key file removal
The -r option is not required here but should also not hurt,
since it was already tested, that $key is a file.
However, to express the intent of the command more clearly,
let's drop it.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 9ef2d15c29)
2025-03-12 23:07:19 +01:00
Markus Gothe
9699a98ca8 openssh: Validate keys and regenerate if needed.
Imitate dropbear init.d-script and make sure we
don't end up with corrupt keys.

This can happen if we use a caching filesystem,
like 'ubifs', and the DUT is powered off during
boot-up.

Signed-off-by: Markus Gothe <markus.gothe@genexis.eu>
(cherry picked from commit 69c29a5b26)
2025-03-12 23:07:19 +01:00
Erik Karlsson
ec6418a683 openssh: fix killing of active sessions on shutdown
Starting with OpenSSH 9.8 sessions are handled by a separate binary
called sshd-session

Signed-off-by: Erik Karlsson <erik.karlsson@iopsys.eu>
(cherry picked from commit 3ac8092a39)
2025-03-12 23:07:19 +01:00
Alexandru Ardelean
056b7a42c7 numpy: bump to version 2.2.1
Dropped:
  003-without-vendored-meson.patch
  004-workaround-for-multiple-top-level-packages-discovered.patch

This time, we really need to use meson to build numpy.
And to make things more complicated, the 'vendored' meson package (that
comes with numpy) must be used. This is because they have some special
logic in there that's specific to numpy.

With this change, we also need to keep a special/internal
'openwrt-cross.txt.in' file, because cross-compiling numpy also requires
that a 'longdouble_format' property be added.
More details about this:
   https://github.com/numpy/numpy/issues/23972
   https://github.com/numpy/numpy/blob/maintenance/2.2.x/doc/source/building/cross_compilation.rst

Removing quirk fix for x86_64 with detecting 'avx512f'.
This should work with the new meson stuff.

And finally, added a test.sh script.
This should make sure that this package works fine during upgrades.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit 7b4ee2dabf)
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2025-03-11 16:09:52 +02:00
Jonathan McCrohan
c3a98403cb rust: update to 1.85.0
Fixes podman build breakage which was caused by podman depending on
netavark, which in turn depends on rust-iptables.

rust-iptables requires rust 1.85.0 since commit 75825cd
75825cd9c1

Signed-off-by: Jonathan McCrohan <jmccrohan@gmail.com>
(cherry picked from commit c675028528)
2025-03-08 16:47:52 +08:00
Dirk Brenken
40abe8b4cb banIP: update 1.5.3-3
* fix a race condition in the process scheduler
* sync the banIP country file with ipdeny feed
* refine etag handling with country/asn feeds
* refine logging with country/asn feeds
* refine the banIP status output (incl. LuCI changes)

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 764a77acfd)
2025-03-07 13:27:05 +01:00
Dirk Brenken
ff3aa69823 adblock: update 4.2.7-2
* fix an out of bound error reported in the forum
* set always a default for "adb_dnsdir" to prevent cornercase issues

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit dd4e3e336d)
2025-03-07 11:33:09 +01:00
Ray Wang
a8ca5aa8a5 hev-socks5-tunnel: update to 2.9.1
Signed-off-by: Ray Wang <r@hev.cc>
(cherry picked from commit eb64a29e8c)
2025-03-07 16:11:45 +08:00
Ray Wang
7937d02948 hev-socks5-tunnel: update to 2.7.5
Signed-off-by: Ray Wang <r@hev.cc>
(cherry picked from commit 102ce164eb)
2025-03-07 16:11:45 +08:00
Ray Wang
bf13144a53 hev-socks5-tproxy: update to 2.7.0
Signed-off-by: Ray Wang <r@hev.cc>
(cherry picked from commit a10e197aef)
2025-03-07 01:24:15 +08:00
Ray Wang
d1a5442bf6 hev-socks5-server: update to 2.8.0
Signed-off-by: Ray Wang <r@hev.cc>
(cherry picked from commit fea75c3532)
2025-03-07 01:24:06 +08:00
Dirk Brenken
e10966a3b1 adblock: release 4.2.7-1
* optimized uci config processing (list options)
* no longer set a hardcoded confdir in dhcp/dnsmasq config
* rework suspend/resume handling
* clean up download queue handling
* various small improvements & fixes

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit bf87a6dcec)
2025-03-03 21:52:32 +01:00
Dirk Brenken
d4dabf1ca3 banIP: update 1.5.3-2
* fix uci config processing (ban_logterm)
* update the readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 62a4633e7c)
2025-03-03 19:47:08 +01:00
Stan Grishin
106021f06d adblock-fast: bugfix: detect_file_type()
* Properly detect domain lists, fixes https://github.com/openwrt/packages/issues/25973
  Thanks @timfeierabend
* Better output when setting triggers
* No wait for ubus network.interface on boot

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 9b6d6ad611)
2025-03-01 09:57:21 -08:00
Dirk Brenken
4c3052dda1 banIP: release 1.5.3-1
* optimized uci config processing (list options)
* optimized icmp rules in pre-routing (thanks @brada)
* set inbound marker in pre-routing only if inbound logging is enabled (fixes #26044)
* fix cornercase in Set removal function
* print chain-, set- and rules-counter in the banIP status
* clean up logging und download queue handling
* update the readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit d5cd6f3cf2)
2025-02-28 16:51:30 +01:00
Ray Wang
d83dbde714 natmap: update to 20250221
Signed-off-by: Ray Wang <r@hev.cc>
(cherry picked from commit 2db5fca2d8)
2025-02-26 16:47:04 +08:00
Dimitri Souza
bc4779cfb5 ddns-scripts: Add option 'myip=no' to Dynu IPv6 update URL
Prevents IPv6 updates to also update IPv4 (undesirable when behind a CGNAT)

Signed-off-by: Dimitri Souza <dimitri.souza@gmail.com>
(cherry picked from commit 65cbccfded)
2025-02-24 08:34:29 +01:00
Bei Lin
76a38c8374 ddns-scripts: Accept 'good|nochg' for IPv4/IPv6 in ydns.io.json
Signed-off-by: Bei Lin <UVOEOO8@outlook.com>
(cherry picked from commit 0a2746c6d6)
2025-02-24 08:34:29 +01:00
FriesI23 Qin
7109d85d50 ddns-script: add retry_max_count's upgrade script
Signed-off-by: FriesI23 Qin <FriesI23@outlook.com>
(cherry picked from commit f02a1df129)
2025-02-24 08:34:29 +01:00
ACI0419
b180665f8f ddns-scripts: add ydns.io provider
(cherry picked from commit 1c1125a47e)
2025-02-24 08:34:29 +01:00
Adam Beck
44a192bb44 ddns-scripts: add type field for digitalocean API
DigitalOcean API requires a "type" JSON field to update a DNS
record. This adds that while checking for IPv6 to change which
record type to use. Without it, the API call fails, making
the script unable to update the DNS records for DigitalOcean.

Signed-off-by: Adam Beck <subcursion@gmail.com>
(cherry picked from commit 1302e503a3)
2025-02-24 08:34:29 +01:00
Coia Prant
9f1c89d2b7 ddns-scripts: get l3 device for bind network using curl
If pppoe is used for wan access. script set 'eth1' as interface for curl
call. The correct interface is however 'pppoe-wan'.

These scripts use 'network_get_physdev' function to get real device for
bind_network but this is wrong. We need instead the l3_device of the the
logical interface.

In case if we don't use pppoe connection - 'l3_device' is equal to real device.

Follow P/R:
 #14431

Signed-off-by: Coia Prant <coiaprant@gmail.com>
(cherry picked from commit 9cd00fb191)
2025-02-24 08:34:29 +01:00
FriesI23 Qin
5122cfcf6e ddns-scripts: Fixup dnspod.cn-v3
Migrate retry_count to retry_max_count in the script to fix infinite retry loop.

Signed-off-by: FriesI23 Qin <FriesI23@outlook.com>
(cherry picked from commit 0dceb9d0f1)
2025-02-24 08:34:29 +01:00
FriesI23 Qin
972dbf7e6c ddns-scripts: Fixup dnspod.cn-v3
Fix signature expiration issue during retries.

Signed-off-by: FriesI23 Qin <FriesI23@outlook.com>
(cherry picked from commit 9d5da216c9)
2025-02-24 08:34:29 +01:00
Gedalya Nie
7c3908d75a ddns-scripts: cloudflare: use PATCH method, minimize changes
Using the PUT method recreates the DNS record with and only with
the newly provided data. This seems unnecessary. In particular,
we don't need to hardcode a TTL of 120. Any existing comment
would be lost too.

The only detail we need to change is the IP address. Leave everything
else as it was.

Signed-off-by: Gedalya Nie <gedalya@gedalya.net>
(cherry picked from commit 0a98b6d0ed)
2025-02-24 08:34:29 +01:00
FriesI23 Qin
e9b7328643 ddns-scripts: Add dnspod.cn-v3
Signed-off-by: FriesI23 Qin <FriesI23@outlook.com>
(cherry picked from commit c1f247d5c2)
2025-02-24 08:34:29 +01:00
Hui Zhui
b69c7daa18 ddns-scripts: add support for ipv64.net
Adds ipv64.net service as DDNS provider

Docs: https://ipv64.net/dyndns_updater_api
Signed-off-by: Hui Zhui <barsikus07@gmail.com>
(cherry picked from commit da4e27063c)
2025-02-24 08:34:29 +01:00
Benjamin Frank
881abb1893 ddns-scripts: support IPv6 for joker.com
The existing endpoint can handle IPv6 addresses as well.

(cherry picked from commit ce4b32edee)
2025-02-24 08:34:29 +01:00
Dirk Brenken
4a4907f37e adblock: release 4.2.6-1
* removed needless 'adb_mailcnt' option
* fixed blocklist count formatting

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit fc35c4e9c8)
2025-02-22 06:56:08 +01:00
Dirk Brenken
5a84bd636b banIP: release 1.5.2-1
* add memory measurements:
 - free memory in MB (MemAvailable from /proc/meminfo)
 - script run max. used RAM in MB (VmHWM from /proc/$$/status)
* removed the obsolete (domain) lookup command in init script
* update the readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 884876c7e1)
2025-02-21 22:16:20 +01:00
Sandro Jäckel
2521a6ad5e tailscale: update to 1.80.2
Signed-off-by: Sandro Jäckel <sandro.jaeckel@gmail.com>
(cherry picked from commit a57913d54c)
2025-02-20 21:20:36 +08:00
Wesley Gimenes
5908ba19fb netbird: update to 0.36.7
changelog: https://github.com/netbirdio/netbird/releases/tag/v0.36.7

Signed-off-by: Wesley Gimenes <wehagy@proton.me>
(cherry picked from commit 7ff04e9e30)
2025-02-20 16:50:03 +08:00
Eric Fahlgren
399d9c764e owut: update to 2025.02.18
Bug fixes:
    efahl/owut@17a884e owut: clean up some apk-based hackery
    efahl/owut@065ac05 owut: add warnings for missing defaults

Enhancements:
    efahl/owut@f9fae6b owut: allow user to ignore removed default packages
    efahl/owut@5aa75b6 owut: message cleanup
    efahl/owut@5823db3 owut: reduce default verbosity

Signed-off-by: Eric Fahlgren <ericfahlgren@gmail.com>
(cherry picked from commit 6b85671450)
2025-02-20 16:47:13 +08:00
Tianling Shen
8530f6f238 v2raya: Update to 2.2.6.6
Remove unneeded reload_service func while at it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 39c5d7f851)
2025-02-20 16:22:20 +08:00
Tianling Shen
e23f9051c7 v2ray-core: Update to 5.28.0
Remove unneeded reload_service func while at it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ff191e50ec)
2025-02-20 16:22:19 +08:00
Tianling Shen
3083d28583 rclone: Update to 1.69.1
Remove unneeded reload_service func while at it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 944d48241c)
2025-02-20 16:22:19 +08:00
Tianling Shen
9d486d7024 cloudflared: Update to 2025.2.0
Remove unneeded reload_service func while at it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 66906b8677)
2025-02-20 16:22:19 +08:00
Olivier Poitrey
2e747ea88d nextdns: Update to version 1.45.0
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2025-02-18 16:38:16 +02:00
Dirk Brenken
17ec274d41 adblock: release 4.2.5-1
* removed needless subshell calls
* add memory measurements:
   - size of the final blocklist in MB
   - free memory in MB (MemAvailable from /proc/meminfo)
   - script max. used RAM (VmHWM from /proc/$$/status)
* optimized restart logic
* cosmetics

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 162b1e693e)
2025-02-17 21:58:58 +01:00
Ryan Keane
76d4c94908 adguardhome: Update init files
Move working directory from `/var/adguardhome` to
`/var/lib/adguardhome`, according to Linux FHS.
Add option to store PID file, defaulting to `/run/adguardhome.pid`.

Signed-off-by: Ryan Keane <the.ra2.ifv@gmail.com>
(cherry picked from commit c3a33e10a5)
2025-02-17 23:39:53 +08:00
Ryan Keane
9e2155d3d1 adguardhome: Bump to 0.107.56
Bump version to 0.107.56, it's a small update.
Changelog is in links below.

Use tarballs from upstream tags instead of a Git repo.

Link: https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.56
Signed-off-by: Ryan Keane <the.ra2.ifv@gmail.com>
(cherry picked from commit 62c7581238)
2025-02-17 23:39:53 +08:00
Christian Lachner
1b6c1bc090 haproxy: update to v3.0.8
- Update haproxy PKG_VERSION and PKG_HASH
- See changes: http://git.haproxy.org/?p=haproxy-3.0.git;a=shortlog

Signed-off-by: Christian Lachner <gladiac@gmail.com>
(cherry picked from commit 3618236a03)
2025-02-17 23:39:31 +08:00
John Audia
434cd60a3f rsync: update to 3.4.1
Changelog: https://download.samba.org/pub/rsync/NEWS#3.4.1

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit bc11060221)
2025-02-17 19:25:08 +08:00
John Audia
90627d2f6d rsync: update to 3.4.0
Changelog: https://download.samba.org/pub/rsync/NEWS#3.4.0

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit d91b062080)
2025-02-17 19:25:08 +08:00
Hirokazu MORIKAWA
eaec5f0bfc node: bump to 20.18.3
Notable Changes

    [030f155986] - esm: mark import attributes and JSON module as stable (Nicolò Ribaudo) #55333
    [b9b006331f] - doc: add LJHarb to collaborators (Jordan Harband) #56132
    [39b89e90b4] - doc: enforce strict policy to semver-major releases (Rafael Gonzaga) #55732
    [247fa1959f] - crypto: update root certificates to NSS 3.104 (Richard Lau) #55681
    [adfc2f993a] - tools: fix root certificate updater (Richard Lau) #55681
    [29862ae105] - doc: add jazelly to collaborators (Jason Zhang) #55531

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2025-02-17 18:51:28 +08:00
Tianling Shen
16af92dbdf dnsproxy: Update to 0.75.0
Fix passing value to hosts-file-enabled argument.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 939dea1622)
2025-02-15 23:38:08 +08:00
Tianling Shen
277587cc25 golang: Update to 1.23.6
go1.23.5 (released 2025-01-16) includes security fixes to the
crypto/x509 and net/http packages, as well as bug fixes to the
compiler, the runtime, and the net package.

go1.23.6 (released 2025-02-04) includes security fixes to the
crypto/elliptic package, as well as bug fixes to the compiler
and the go command.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 86b0144211)
2025-02-15 23:38:04 +08:00
Olivier Poitrey
849d60ae34 nextdns: Update to version 1.44.6
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2025-02-15 10:34:48 +02:00
Dirk Brenken
ddb2201601 adblock: update 4.2.4-2
* properly handle forced DNS ports <> 53,
  no longer make bogus local redirects, reject them instead (fixed #25897)
* support the jail mode for smartdns
* cosmetics

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 7699651f6c)
2025-02-14 07:31:07 +01:00
Dirk Brenken
a6aa9968e5 banIP: release 1.5.1-1
* optimized the f_nftload function
* reduced the prerouting priority to -175
* optimized the output of the f_survey function
* removed a needless fw4 call/check
* no longer skips regular blocklist feeds in "allowlist only" mode
* optimized init checks
* turris feed: enable IPv6 parsing, too (prvided by @curbengh)
* update the readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 4e3d7845fd)
2025-02-13 21:52:52 +01:00
Stan Grishin
cac67edb46 pbr: update to 1.1.8-10
* Improve verbose output on start
* Allow to not create ip rule for WG server
* Improve boot up start (take 2)
* Improve verbose output when setting triggers
* Override DNS hijack with DNS policies from pbr

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2025-02-12 16:22:23 -08:00
Stan Grishin
8ffcb98c0c https-dns-proxy: bugfix: start on boot
* bugfix: working start on boot when interfaces are up
  (thanks @tmcqueen-materials and @b1ackbeat)
* improvement: better output when setting triggers on start

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2025-02-12 16:21:38 -08:00
Khachatryan Karen
2e7cb467e8 antiblock: Update to 2.0.2
Fixed a bug using a non-thread-safe hashmap

Signed-off-by: Khachatryan Karen <karen0734@gmail.com>
(cherry picked from commit 9f4928f1ef)
2025-02-11 22:51:15 +08:00
Khachatryan Karen
f1d058da41 antiblock: Update to 2.0.1
Updated hashmap version.
In the code, almost all the url words have been replaced with domain.
Fixed a bug in the service of getting gateway from VPN name.

Signed-off-by: Khachatryan Karen <karen0734@gmail.com>
(cherry picked from commit f53f96d37c)
2025-02-10 00:40:11 +08:00
Sandro Jäckel
55b93a9e65 tailscale: update to 1.80.0
Signed-off-by: Sandro Jäckel <sandro.jaeckel@gmail.com>
(cherry picked from commit 7c8295dc2b)
2025-02-09 21:37:36 +08:00
Anirudh Srinivasan
ef77301d17 prometheus-node-exporter-ucode: fix missing .so mounts in jail
Signed-off-by: Anirudh Srinivasan <anirudhsriniv@gmail.com>
(cherry picked from commit d4a4de8309)
2025-02-09 17:59:51 +08:00
Milinda Brantini
70de36fcbf sing-box: Update to 1.11.1
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit 8eecd2e5a0)
2025-02-06 16:51:03 +08:00
Milinda Brantini
059e0a3778 sing-box: Update to 1.11.0
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit 2c7b8ef5a2)
2025-02-06 16:51:03 +08:00
Matt Eaton
56250817c4 strongswan: fix compilation against wolfssl
Backports upstream patch fix compilation error against recent versions of wolfssl.

Closes https://github.com/openwrt/packages/issues/25877

Signed-off-by: Matt Eaton <git@divinehawk.com>
(cherry picked from commit 1cc7069c64)
2025-02-06 08:17:22 +01:00
Martin Pecka
848f072f0f strongswan: Add support for EAP-MSCHAPv2 authentication
Support for EAP-MSCHAPv2 authentication scheme is added.

Different from the previously supported schemes, this one is
usually asymmetric in the way that server auth method (pubkey) is
different from the client auth method (eap-mschapv2).
The code handles this asymmetry automatically.

A new UCI config section mschapv2_secrets is added where the user
can specify the EAP identities and their passwords that are
accepted by the server. AFAIK, there is no way to select which
EAP IDs should be accepted by which remote, except setting
`eap_id` to something different than `%any`. But `eap_id`
does not support template matching, so either only a single
identity or all can be configured for one remote. This is why
the EAP identities are not subsections of remotes, but are
a standalone section.

Signed-off-by: Martin Pecka <peci1@seznam.cz>
Signed-off-by: Martin Pecka <peckama2@fel.cvut.cz>
(cherry picked from commit 88d1876f38)
2025-02-06 08:17:22 +01:00
Martin Pecka
477976f1b4 strongswan: Fix pools to be only generated once
Before this commit, if a user configures multiple remotes in UCI,
each remote generates one output section of pools.
This doesn't hurt because swanctl just merges all of them,
but it is apparently not needed to have N copies of the same.

This commit changes the behavior to only create one pools
section at the end of the generated swanctl config.

Signed-off-by: Martin Pecka <peci1@seznam.cz>
Signed-off-by: Martin Pecka <peckama2@fel.cvut.cz>
(cherry picked from commit 6b824ee7d7)
2025-02-06 08:17:22 +01:00
Martin Pecka
9dc95a4214 strongswan: Add support for send_cert option
This option is required by some clients, e.g. iOS.

Signed-off-by: Martin Pecka <peci1@seznam.cz>
(cherry picked from commit 4b9453b9a4)
2025-02-06 08:17:22 +01:00
Jianhui Zhao
92a1d609a7 lua-cjson: add build VARIANT for Lua5.3
Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
(cherry picked from commit 92953c1d7d)
2025-02-06 13:54:50 +08:00
Tianling Shen
de69db6abd rclone: Update to 1.69.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 35b614c437)
2025-02-05 15:53:54 +08:00
Liangbin Lian
094f5b334b rclone: fix configuration saving
The following error occurs when creating storage configuration in WEBUI:
```
Failed to save config after 10 tries: failed to create temp file for new config: open /etc/rclone/rclone.conf4258227003: permission denied
```

we should set the owner of the parent directory of the configuration
file to rclone.

Signed-off-by: Liangbin Lian <jjm2473@gmail.com>
[split chown command, wrap commit message]
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit bcd87dd8b6)
2025-02-05 15:53:51 +08:00
Tianling Shen
059f7cd328 alist: Update to 3.42.0
Fix the value of conf.WebVersion.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 155fe01112)
2025-02-05 15:53:29 +08:00
Tianling Shen
c7332612f5 cloudflared: Update to 2025.1.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 2d83d187a0)
2025-02-05 15:53:25 +08:00
Tianling Shen
a81206f6f5 cloudflared: Update to 2025.1.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 0c547b9ebb)
2025-02-05 15:53:24 +08:00
Tianling Shen
7b11e458da v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit cec4103bbc)
2025-02-05 15:53:11 +08:00
Tianling Shen
8dd11a55ca v2ray-core: Update to 5.26.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit c1b0143a79)
2025-02-05 15:53:08 +08:00
Tianling Shen
33b347215a v2ray-core: Update to 5.25.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 359a615d6f)
2025-02-05 15:53:05 +08:00
Tianling Shen
bf2e570a5a v2ray-core: Update to 5.24.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a4f19ba6b0)
2025-02-05 15:53:01 +08:00
Tianling Shen
75c273aef4 xray-core: Update to 25.1.30
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit e9a86e1809)
2025-02-05 15:52:45 +08:00
Antonio Pastor
9c1f4b62ba netatalk: add uci support
Signed-off-by: Antonio Pastor <antonio.pastor@gmail.com>
(cherry picked from commit 900e71b607)
2025-02-05 14:12:47 +08:00
Antonio Pastor
496dc40436 netatalk: create small and full variants
Small version includes only AFP file sharing to minimize size.
Base version adds AppleTalk. This matches the contents of the
existing package.
Full version includes everything that OpenWrt can support and
configuration option for build system (menuconfig).

Signed-off-by: Antonio Pastor <antonio.pastor@gmail.com>
(cherry picked from commit 0bd99d1cbb)
2025-02-05 14:12:47 +08:00
Antonio Pastor
7229446686 netatalk: update to 4.1.1
Signed-off-by: Antonio Pastor <antonio.pastor@gmail.com>
(cherry picked from commit 960fde3ace)
2025-02-05 14:12:47 +08:00
Lucian CRISTIAN
201fd099b8 frr: 10.2.1 fixes
add mgmtd and pim6d


Signed-off-by: Lucian CRISTIAN <lucian.cristian@gmail.com>
2025-02-03 20:21:19 +08:00
Dirk Brenken
59a03c07d2 banIP: update 1.5.0-6
* fixed  the incomplete rule maintainance during banIP reloads
* fixed the Set query function (if the Set counters are disabled)

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit bf2fb994fa)
2025-02-02 22:16:19 +01:00
Eric Fahlgren
9e72f5a412 owut: update to 2025.01.29
Bug fixes:
    efahl/owut@bced54a owut: prefer use of packages_changes when generating build request
    efahl/owut@b469547 owut: revert rootfs restrictions

Signed-off-by: Eric Fahlgren <ericfahlgren@gmail.com>
(cherry picked from commit 445e40c3c8)
2025-01-31 14:32:22 +08:00
Stan Grishin
f624dfa5a3 https-dns-proxy: bugfixes and improvements
* improvement: Makefile: prepend `r` to PKG_RELEASE in binary and init script versions to match package version
* bugfix: init script: more reliable/robust start on boot
* improvement: init script: more compact output()
* improvement: init script: better DNS Hijack login
* improvement: init script: fold some dnsmasq-related functions into dhcp_backup()

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2025-01-29 11:07:47 -08:00
Stan Grishin
7d60f73e1e adblock-fast: bugfixes: boot-up, StevenBlack list, new CERT.pl source
* bugfix: more robust boot-up start
* bugfix: processing of StevenBlack lists
* new remote block-list: CERT.pl

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2025-01-29 11:07:20 -08:00
Dirk Brenken
5d39fbd2b7 adblock: update 4.2.4-1
* support smartdns as dns backend
* support top level domains in local white- and blackklist,
  e.g. a 'de' in the blacklist blocks all domains with a german tld
  and the tld compression removes all subdomains from the final blocklist

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit f9effa495e)
2025-01-28 00:12:14 +01:00
Stan Grishin
cf301cd92c pbr: bugfixes: boot-up and negative dest_addr
* bugfix: more robust boot-up behaviour, obsoleting following config
  options: procd_boot_delay, procd_boot_timeout, procd_wan_ignore_status
* bugfix: fix typo in processing negations on dest_addr

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2025-01-27 10:46:53 -08:00
Eric Fahlgren
2dae71c8ba owut: update to 2025.01.25
Bug fixes:
    efahl/owut@2bf45d5 owut: exit immediately on ctrl-c
    efahl/owut@a95d383 owut: fix processing of device defaults
    efahl/owut@cd63564 owut: disallow --rootfs-size changes on some platforms
Enhancements:
    efahl/owut@eaca182 owut: minor code cleanup in sha256 calculator
    efahl/owut@2b65aa7 owut: improve messaging
    efahl/owut@d687824 git: define file attributes

Signed-off-by: Eric Fahlgren <ericfahlgren@gmail.com>
(cherry picked from commit 73fb1c4b38)
2025-01-27 19:05:18 +08:00
Dirk Brenken
512e387617 banip: update 1.5.0-5
* fix a reporting issue with multiple ports/protocols

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 737c0601cb)
2025-01-26 20:00:30 +01:00
Juan Orti Alcaine
eec82d58cc banip: Block UDP ports for HTTP/3
Block HTTP/3 by including UDP in the feeds that have the 80 443 ports in
their flag.

Signed-off-by: Juan Orti Alcaine <jorti@pm.me>
(cherry picked from commit f80fbec40f)
2025-01-26 20:00:30 +01:00
Matthias Schiffer
279638228e fastd: update to v23
Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
(cherry picked from commit 2434806621)
2025-01-26 15:14:34 +01:00
Federico Capoano
ac5519dcea coova-chilli: Fix WolfSSL support
Signed-off-by: Federico Capoano <f.capoano@openwisp.io>
(cherry picked from commit bf3333594a)
2025-01-26 12:33:05 +02:00
Lucian CRISTIAN
9ae63147f5 frr: update to 10.2.1
Signed-off-by: Lucian CRISTIAN <lucian.cristian@gmail.com>
2025-01-26 17:12:56 +08:00
Lucian CRISTIAN
e4045cdbe9 libyang: update to 2.1.128
this is needed for frr 10+

Signed-off-by: Lucian CRISTIAN <lucian.cristian@gmail.com>
2025-01-26 17:12:56 +08:00
hingbong lo
2cafd6bdfe rust: update to 1.84.0
Signed-off-by: hingbong lo <hingbonglo@gmail.com>
(cherry picked from commit aff8367c7a)
2025-01-26 15:12:39 +08:00
Ray Wang
f8042baeea hev-socks5-tproxy: update to 2.6.0
Signed-off-by: Ray Wang <r@hev.cc>
(cherry picked from commit d31598167e)
2025-01-26 00:23:07 +08:00
Ray Wang
17357872bc hev-socks5-server: update to 2.7.0
Signed-off-by: Ray Wang <r@hev.cc>
(cherry picked from commit d0d67ded93)
2025-01-26 00:22:59 +08:00
Ray Wang
ab030cbb8a hev-socks5-tproxy: update to 2.5.8
Signed-off-by: Ray Wang <r@hev.cc>
(cherry picked from commit a813c3a266)
2025-01-25 17:31:15 +08:00
Ray Wang
9f8cf3ae0f hev-socks5-server: update to 2.6.9
Signed-off-by: Ray Wang <r@hev.cc>
(cherry picked from commit 30db86cc9c)
2025-01-25 17:30:49 +08:00
Thibaut VARÈNE
22fe27f514 uspot: update to Git HEAD (2025-01-20)
57b737a49497 uspot/uspotfilter: s/discon_since/lost_since/
1c2f58000519 uspot/uspotfilter: use native MAC case
70934203a0b7 captive: cleanup
7566c2716eb9 uspot: correctly handle "debug=0"
f5cc70459233 portal: remove unused bits
54cdcf463c36 uspot: remove unused ssid parameter
f13440bd80ff Update issue templates
644fd6f52a8e uspotfilter: apply disconnect delay to active clients only

Signed-off-by: Thibaut VARÈNE <hacks@slashdirt.org>
(cherry picked from commit 2466aaccc1)
2025-01-24 16:27:03 +08:00
Wesley Gimenes
82cc16a4fe netbird: update to 0.36.3
changelog: https://github.com/netbirdio/netbird/releases/tag/v0.36.3

Signed-off-by: Wesley Gimenes <wehagy@proton.me>
(cherry picked from commit 8628bd16bb)
2025-01-24 15:55:37 +08:00
Wesley Gimenes
baeac42ead netbird: revert fix to build with musl >1.2.4
Partially revert: 7b3d033ab6
 - Revert: Also fixes issue of not being able to build with musl >1.2.4,
   The issue has been resolved as of March 2024. For more details, see:
   https://github.com/mattn/go-sqlite3/issues/1164#issuecomment-1975022901

Signed-off-by: Wesley Gimenes <wehagy@proton.me>
(cherry picked from commit 851386dc67)
2025-01-24 15:55:37 +08:00
Wesley Gimenes
47c906f593 netbird: change maintainer
- Add myself as maintainer
- Remove `Oskari Rauta <oskari.rauta@gmail.com>`

Signed-off-by: Wesley Gimenes <wehagy@proton.me>
(cherry picked from commit 2594fc3e2e)
2025-01-24 15:55:37 +08:00
Hirokazu MORIKAWA
34ae51f499 node: January 21, 2025 Security Releases
This is a security release.
Notable Changes

    CVE-2025-23083 - throw on InternalWorker use when permission model is enabled (High)
    CVE-2025-23085 - src: fix HTTP2 mem leak on premature close and ERR_PROTO (Medium)
    CVE-2025-23084 - path: fix path traversal in normalize() on Windows (Medium)

Dependency update:

    CVE-2025-22150 - Use of Insufficiently Random Values in undici fetch() (Medium)

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2025-01-24 15:53:10 +08:00
Dirk Brenken
0745847e9b banIP: update 1.5.0-3
* better logging of nft load errors
* update the readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 481215bab0)
2025-01-23 20:14:14 +01:00
Dirk Brenken
3f7f4427d3 banIP: update 1.5.0-2
* fix typo in the log_outbound target
* update the readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit c4f95cb0f2)
2025-01-23 20:14:14 +01:00
Dirk Brenken
750b2fff5a banIP: release 1.5.0-1
* change the chain structure: only two regular chains contain the generated banIP sets.
  “_inbound” covers the base chains WAN-Input and WAN-Forward, ‘_outbound’ covers the base chain LAN-Forward.
* pre-configure the default chains for every feed in the banip.feeds json file, no longer blocks
  selected feeds in all chains by default
* it's now possible to split country and asn Sets by country or asn (disabled by default)
* support Set counters to report easily suspicious IPs per Set (disabled by default)
* make it possible, to opt out certain chains from the deduplication process
* the element search now returns all matches (and not only the first one)
* the report engine now includes statistics about the Inbound & Outbound chains and the Set counters (optional)
* save the temp. files of possible nft loading errors in "/tmp/banIP-errors" by default for easier debugging
* various code improvements
* remove ssbl feed (deprecated)
* add two new vpn feeds
* update the readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 80768dfdae)
2025-01-23 20:14:14 +01:00
Khachatryan Karen
212eb308f1 antiblock: Add AntiBlock package
AntiBlock program proxies DNS requests.
The IP addresses of the specified domains are added to
the routing table for routing through the specified interface.

Signed-off-by: Khachatryan Karen <karen0734@gmail.com>
(cherry picked from commit 64f1a2835d)
2025-01-20 00:05:53 +08:00
Olivier Poitrey
4e2a572079 nextdns: Update to version 1.44.4
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2025-01-18 19:41:31 +08:00
Milinda Brantini
2f71667ed8 sing-box: Update to 1.10.7
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit 996c1819e3)
2025-01-18 19:41:04 +08:00
Dirk Brenken
c7ca2960b5 adblock: update 4.2.3-3
Summary of three PRs regarding new adblock sources with minor changes/additions:

- add new source reg_lithuania, PR provided by @Myginas
- add new source certpl, PR provided by @jkostorz
- add new source oisd_nsfw_small, PR provided by @Turjoy9

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit cd89956c13)
2025-01-17 16:51:52 +01:00
Ray Wang
49d4bee2df fsh: add new package
Fsh helps you access local shell and TCP services behind a NAT or firewall.

More details: https://github.com/heiher/hev-fsh

Signed-off-by: Ray Wang <r@hev.cc>
(cherry picked from commit fbcfd96e1b)
2025-01-12 20:07:23 +08:00
Noah Meyerhans
d6dd15f540 bind: bump to 9.20.4
Signed-off-by: Noah Meyerhans <frodo@morgul.net>
(cherry picked from commit e798731fa4)
2025-01-08 13:42:35 -05:00
Moritz Warning
a0d9c280e7 kadnode: update to version 2.4.1
* add new additional peer
* add more configuration comments
* expose dht_isolation_prefix setting

Signed-off-by: Moritz Warning <moritzwarning@web.de>
(cherry picked from commit b9739f5721)
2025-01-08 17:06:19 +08:00
Eric Fahlgren
1eedcb6b08 owut: update to 2025.01.06
Bug fixes:
    efahl/owut@9f63203 owut: fix missing SSL library message

Enhancements:
    efahl/owut@e623a90 owut: cosmetic: include kernel version in build results
    efahl/owut@05f3bbe owut: allow alternate delimiters between added/removed packages
    efahl/owut@31b0478 owut: list server in 'versions' output
    efahl/owut@ec97414 readme: general updates

Signed-off-by: Eric Fahlgren <ericfahlgren@gmail.com>
(cherry picked from commit 2318b700ee)
2025-01-08 17:02:31 +08:00
Tianling Shen
3bef76e7a4 v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit d750bb3182)
2025-01-08 17:00:32 +08:00
Tianling Shen
73664ef728 libtorrent-rasterbar: Update to 2.0.10
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit c83362fc6d)
2025-01-08 17:00:29 +08:00
Tianling Shen
9c0bf04e8e xray-core: Update to 24.12.31
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 1166a25311)
2025-01-08 17:00:26 +08:00
Ray Wang
73ebd4da5a natmap: update to 20250101
Signed-off-by: Ray Wang <r@hev.cc>
(cherry picked from commit 806b524a28)
2025-01-06 19:12:00 +08:00
Jianhui Zhao
9b5ce53f51 lua-eco: update to 3.7.0
Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
2025-01-06 11:54:06 +08:00
Stan Grishin
c84e022ee9 pbr: Makefile bugfixes
* remove indentation in postinst/prerm/postrm scripts to fix issues with APK

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2025-01-04 12:13:07 -08:00
Stan Grishin
aa6e159b83 adblock-fast: Makefile bugfixes and hijack rework
* remove indentation in postinst/prerm/postrm scripts to fix issues with APK
* rework hijack logic to redirect port 53 to the port of active/selected dnsmasq instances

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2025-01-04 12:12:41 -08:00
Tianling Shen
0c96404b46 dnsproxy: Update to 0.74.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 7dd3cd9abc)
2025-01-02 18:27:22 +08:00
Tianling Shen
141ffc0b02 golang: Update to 1.23.4
go1.23.4 (released 2024-12-03) includes fixes to the compiler, the
runtime, the trace command, and the syscall package.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit edab60b0f8)
2025-01-02 18:27:14 +08:00
Aleksey Kolosov
9e26713295 delve: update to 1.24.0
Signed-off-by: Aleksey Kolosov <softovick@gmail.com>
(cherry picked from commit db853b5d58)
Signed-off-by: Alexey Kolosov <softovick@gmail.com>
2024-12-31 14:35:46 +08:00
Olivier Poitrey
e7f5bd52dc nextdns: Update to version 1.44.3
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2024-12-31 14:35:14 +08:00
Álvaro Fernández Rojas
6e29324eda bcm27xx-eeprom: update to v2024.11.12-2712
bcm2711:
https://github.com/raspberrypi/rpi-eeprom/blob/v2024.11.12-2712/firmware-2711/release-notes.md#2024-10-10-use-soft-reset-to-preseve-sdram-contents-after-ramoops-latest
https://github.com/raspberrypi/rpi-eeprom/blob/v2024.11.12-2712/firmware-2711/release-notes.md#2024-10-21-fix-pcie-bar-issue-for-some-switches--latest

bcm2712:
https://github.com/raspberrypi/rpi-eeprom/blob/v2024.11.12-2712/firmware-2712/release-notes.md#2024-10-10-add-support-to-override-the-boot-mode-at-power-on-latest
https://github.com/raspberrypi/rpi-eeprom/blob/v2024.11.12-2712/firmware-2712/release-notes.md#2024-10-21-fix-pcie-bar-issue-for-some-switches--latest
https://github.com/raspberrypi/rpi-eeprom/blob/v2024.11.12-2712/firmware-2712/release-notes.md#2024-11-05-numa---add-system_heapmax_order0-when-needed-latest
https://github.com/raspberrypi/rpi-eeprom/blob/v2024.11.12-2712/firmware-2712/release-notes.md#2024-11-12-enable-initial_turbo60-by-default-latest

Full changelog: https://github.com/raspberrypi/rpi-eeprom/compare/v2024.09.23-2712...v2024.11.12-2712

Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
(cherry picked from commit dc273bfa44)
2024-12-28 17:30:46 +01:00
Tianling Shen
dfeae07c24 cloudflared: Update to 2024.12.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 34c79e8d83)
2024-12-26 15:58:24 +08:00
Tianling Shen
f53926772f xray-core: Update to 24.12.18
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit bd0fb6d3ed)
2024-12-26 15:58:22 +08:00
Tianling Shen
37b019ae9a ack: Update to 3.8.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 0c0d897b47)
2024-12-26 15:58:19 +08:00
Tianling Shen
62adf9e0eb alist: Update to 3.41.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 422655e0c0)
2024-12-26 15:58:12 +08:00
Tianling Shen
b003ab1eea v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 0c97b1a427)
2024-12-26 15:58:09 +08:00
Tianling Shen
498a93ec9c dnsproxy: Update to 0.73.4
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ea72433660)
2024-12-26 15:57:56 +08:00
Hannu Nyman
b9883eb8a2 nano: Update to 8.3
Update nano editor to version 8.3.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit b6176b6687)
2024-12-22 21:53:49 +02:00
Stan Grishin
81d22b35c4 pbr: update to 1.1.8
* update to 1.1.8 release version
* APK-style version stamping for init script

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2024-12-20 10:53:59 -08:00
Petr Štetiar
e558c89b1b lrzsz: fix random build failures by really disabling autofoo
Currently we're seeing random build failures, caused by autofoo being
called on very ancient bundled autofoo:

  cd . && aclocal
  aclocal.real: warning: autoconf input should be named 'configure.ac', not 'configure.in'
  acinclude.m4:2: warning: underquoted definition of AC_REPLACE_GNU_GETOPT
  acinclude.m4:2:   run info Automake 'Extending aclocal'
  acinclude.m4:2:   or see https://www.gnu.org/software/automake/manual/automake.html#Extending-aclocal
  configure.in:106: error: automatic de-ANSI-fication support has been removed

For some reason that `touch` based neutralization introduced in commit
6d6c4b21b5 ("lrzsz: update to v0.12.21rc and fix a CVE") doesn't
always work.

So lets fix it by removing the autofoo bits from the bundled Makefile.in
and while at it remove processing of man and testsuite subdirs to save
some computing cycles.

Fixes: #25543
Fixes: 6d6c4b21b5 ("lrzsz: update to v0.12.21rc and fix a CVE")
Signed-off-by: Petr Štetiar <ynezz@true.cz>
(cherry picked from commit 3e61258604)
2024-12-18 23:20:37 +08:00
Tianling Shen
bcb5ed21f6 yq: Update to 4.44.6
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 649ff95b1e)
2024-12-18 17:06:22 +08:00
Tianling Shen
e3f6552d06 cloudflared: Update to 2024.12.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 44544ee74e)
2024-12-18 17:06:19 +08:00
Tianling Shen
18e0aa1ceb xray-core: Update to 24.11.30
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 9e7026dedb)
2024-12-18 17:06:15 +08:00
Glenn Strauss
cf7048f2b7 micropython-lib: update to 1.24.0
* update micropython-lib to hash for 1.24.0

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 8ec794998f)
2024-12-18 17:02:39 +08:00
Glenn Strauss
0c20a9e187 micropython-lib: update to 1.23.0 and fix compile on external mbedtls3
* update micropython-lib to hash for 1.23.0
* remove micropython-lib unix-uffi patches

Co-authored-by: Jeffery To <jeffery.to@gmail.com>

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 4c751e454c)
2024-12-18 17:02:39 +08:00
Christian Marangi
722443d5e8 umurmur: add pending patch fixing support for MbedTLS 3.x
Add pending patch fixing support for MbedTLS 3.x.

Small variation to the provided PR from [0] to remove the dropped
mbedtls/certs.h header.

[0] https://github.com/umurmur/umurmur/pull/190

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit a8dc8a281a)
2024-12-18 17:02:39 +08:00
Moritz Warning
076062c555 kadnode: Update to version 2.4.0
* add support for mbedtls 3.0.0
* fix newline in init script

Signed-off-by: Moritz Warning <moritzwarning@web.de>
(cherry picked from commit e0d8a72da0)
2024-12-18 17:02:39 +08:00
Erwan MAS
e6942b5c98 qemu: add build for qemu-ga & virtio-console-helper on x86 target
Signed-off-by: Erwan MAS <erwan@mas.nom.fr>
(cherry picked from commit bba5282ff6)
2024-12-17 12:32:11 -08:00
Erwan MAS
63657d5c57 qemu: fix error on python dependency at build
qemu need a recent version of python build , this is visible when you build with the docker image of the sdk see https://github.com/openwrt/docker/
error generated during the build : found no usable tomli, please install it

Signed-off-by: Erwan MAS <erwan@mas.nom.fr>
(cherry picked from commit edad451a84)
2024-12-17 12:32:11 -08:00
Dirk Brenken
850a0b8576 travelmate: update to 2.1.3-3
* properly escape double quotes in travelmate option values
* minor procd tweaks

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 128875aa67)
2024-12-17 21:14:17 +01:00
Stan Grishin
0e019876a5 pbr: improve status_service output
Signed-off-by: Stan Grishin <stangri@melmac.ca>
2024-12-15 14:17:26 -08:00
Vasily Evseenko
8999e9ee83 wfb-ng: Add wfb-ng package
WFB-ng is long-range packet radio link based on raw WiFi radio.
Adding it to openwrt base packages will help a lot of it users
to use cheap wifi routers (supporting minitoring mode) instead
of build custom hardware yourself.

Signed-off-by: Vasily Evseenko <svpcom@gmail.com>
(cherry picked from commit 2c171be2b4)
2024-12-14 19:12:18 +08:00
Christian Lachner
2d2732be81 haproxy: update to v3.0.7
- Update haproxy PKG_VERSION and PKG_HASH
- See changes: http://git.haproxy.org/?p=haproxy-3.0.git;a=shortlog

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2024-12-14 12:11:25 +02:00
Eric Fahlgren
46d2cbfec9 owut: update to 2024.12.10
Bug fixes:
    efahl/owut@887ef92 owut: remove non-upgradable packages from update checks
Enhancements:
    efahl/owut@e38844a owut: cosmetic: add OpenWrt version to request output

Signed-off-by: Eric Fahlgren <ericfahlgren@gmail.com>
(cherry picked from commit 4cc56eb9e0)
2024-12-14 01:57:24 +08:00
Sandro Jäckel
f5ef02f5fa tailscale: update to 1.78.1
Signed-off-by: Sandro Jäckel <sandro.jaeckel@gmail.com>
(cherry picked from commit 87ecce39da)
2024-12-13 23:31:00 +08:00
Paul Spooren
8e97844e35 ci: drop APK version checking
APK is now the default, the SDK action will try to compile things and
fails if the version doesn't fit.

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit 57394d53af)
2024-12-13 19:23:55 +08:00
Tianling Shen
441a0c18cb v2raya: Update to 2.2.6.3
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a5a9140870)
2024-12-11 14:33:04 +08:00
Tianling Shen
c92bf4d89a xray-core: Update to 24.11.21
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 3d05b2c1a9)
2024-12-11 14:32:57 +08:00
Tianling Shen
9d9dc663e1 geoipupdate: Update to 7.1.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 5604c651b1)
2024-12-11 14:32:41 +08:00
Tianling Shen
fcbf91c99a cloudflared: Update to 2024.11.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit b0303ca161)
2024-12-11 14:32:36 +08:00
Tianling Shen
f2f6489c95 microsocks: backport upstream fixes
Fix segmentation fault with newer musl and improve throughput.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 77a7324de5)
2024-12-11 14:26:52 +08:00
Andrea Pesaresi
4a08b45f82 ksmbd-tools: update to version 3.5.3
- manually refresh patch 030-glib.patch

Major changes are:
    fix adduser / addshare prompting on musl libc
    fix use of veto files as global share parameter
    lookup primary group and don't recurse in ksmbd.conf @group handling
    fix a leak and an intermittent auth failure in Kerberos 5
    add global parameter kerberos support

detailed changelog here: https://github.com/cifsd-team/ksmbd-tools/releases/tag/3.5.3

Signed-off-by: Andrea Pesaresi <andreapesaresi82@gmail.com>
(cherry picked from commit 5b058c9949)
2024-12-08 11:57:42 +02:00
Alexandru Ardelean
0396341599 python-dateutil: "downgrade" to version 2.9.0
Fixes:
  https://github.com/openwrt/packages/pull/23648#issuecomment-2495371925

As weird as this sounds, the only different between the current version
(2.9.0.post0) and 2.9.0 is the pinning of `setuptools_scm` to `< 8`.
See:  https://github.com/dateutil/dateutil/releases/tag/2.9.0.post0

Also, the APK build doesn't seem to like the 'post0' suffix.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit 40cfff8fe9)
2024-12-08 11:54:29 +02:00
Stan Grishin
d364dcb7e5 pbr: 1.1.7-65 bugfixes and improvements
Maintainer: me
Compile tested: x86_64, Dell EMC Edge620, OpenWrt 24.10.0-rc2
Run tested: x86_64, Dell EMC Edge620, OpenWrt 24.10.0-rc2

Description:
* stop building netifd flavour until netifd isuees are resolved
* improve output()
* improve inline_set()
* improve is_config_enabled()
* bugfix is_domain()
* improve is_supported_protocol()
* improve is_supported_interface()
* bugfix is_tor_running()
* improve ipv4_leases_to_nftset()
* improve ipv6_leases_to_nftset()
* add check for ip-full binary on start
* bugfix: load environment on boot
* bugfix: hack around dnsmasq confdir instances
* bugfix: IPv6-related fixes for internet_routing() and status_service()
* improve netifd setup by bringing code into the init script from uci-defaults
* bugfix: do not attempt to use IPv6 prefixes in pbr.user.aws if IPv6 support is disabled in pbr config

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2024-12-06 19:11:13 -08:00
Stan Grishin
ab7fa32f54 adblock-fast: bugfix: dnsmasq instances confdir hack
* temporary hack until https://github.com/openwrt/openwrt/pull/16806 is merged

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2024-12-06 17:57:36 -08:00
Antonio Pastor
20fa4df8ba netatalk: Update to 4.0.7
Maintainer: Antonio Pastor / @APCCV
Compile tested: ipq806x (24.10-rc2, snapshot)
Run tested: ipq806x - C2600 (snapshot): install apk, start/stop sfpd service & review logs

Description:
Bump to version 4.0.7

Signed-off-by: Antonio Pastor <antonio.pastor@gmail.com>
(cherry picked from commit c487146f17)
2024-12-06 10:45:15 +02:00
Rosen Penev
8267680fca iperf3: fix crashing with musl
Upstream backport.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2024-12-04 16:59:15 -08:00
Eric Fahlgren
3b341e1aed owut: update to 2024.11.29
Bug fixes:
    efahl/owut@334534b owut: use robust method for setting new kernel version

Enhancements:
    efahl/owut@286d101 examples: update the pre-install.sh with firmware backup

Signed-off-by: Eric Fahlgren <ericfahlgren@gmail.com>
(cherry picked from commit 7605ef0edc)
2024-12-04 23:26:31 +08:00
Eric Fahlgren
fc2d8da36a owut: update to 2024.11.20
Bug fixes:
    efahl/owut@d7affce owut: deal with package list filtering
    efahl/owut@38a3916 owut: fix what_provides function
Issues:
    efahl/owut@42cd86c owut: better EFI target handling
Enhancements:
    efahl/owut@cb51617 readme: better instructions

Signed-off-by: Eric Fahlgren <ericfahlgren@gmail.com>
(cherry picked from commit 440a6e7fdf)
2024-12-04 23:26:28 +08:00
Eric Fahlgren
a1d78e32f3 owut: update to 2024.11.14
Bug fixes:
    efahl/owut@3b5e7bb owut: remove factory image types from image candidates

Signed-off-by: Eric Fahlgren <ericfahlgren@gmail.com>
(cherry picked from commit e076937490)
2024-12-04 23:26:25 +08:00
Eric Fahlgren
9ef093bc77 owut: update to 2024.10.27
Bug fix:
  efahl/owut@8c7e42f owut: force top-level when adding a package

Enhancement:
  efahl/owut@e26df83 argparse: add an exclusive store mechanism

Signed-off-by: Eric Fahlgren <ericfahlgren@gmail.com>
(cherry picked from commit c477c0b206)
2024-12-04 23:26:19 +08:00
Stan Grishin
b5f11b79d2 sunwait: initial commit
Sunwait calculates sunrise or sunset times with civil, nautical, astronomical and custom twilights.

It is intended for use in home automation with Windows Task Scheduler or cron. Use it to turn lights on before it gets dark! The program can wait from invocation until the event specified on the command line occurs or it can return immediately indicating if it is day or night. It's best to schedule Sunwait to run a little before the earliest opportunity for the event to occur each year - ie dusk range is 3:30pm to 10:30pm here, so it reasonable to schedule a dusk task at 3pm and allow Sunwait to pause the task for between 30mins and 7 and a half hours. If you scheduled the task for 6pm, then your lights will come on no earlier than 6pm.

The sun's position is calculated using time, and position - latitude and longitude should be specified on the command line.

Features:

Calculates sunrise and sunset for given coordinates
Can wait for sunrise/sunset, or return DAY or NIGHT codes
Works with Windows Task Scheduler (or cron)
Supports custom twilight angles
Used to automate domestic lighting with Arduino transmitter and radio controlled sockets

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2024-11-30 11:46:36 -08:00
Dirk Brenken
e6d2ac5585 adblock: update 4.2.3-2
* correctly parse json objects with hyphens in the autodetection functions

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 823633c0e6)
2024-11-27 22:01:20 +01:00
Daniel Golle
ec14d307c0 mptcpd: update to version 0.13
Changes since v0.12:
 7fb6416 tests: fix segfault with no /etc/protocols (#286)
 0dddc42 README: Update branch references in badge URLs
 5eea3f4 github: Update branch names for actions
 b102523 scripts: get debug info for bug reports
 334bb9c Make listening socket creation optional. (#297)
 a4e7b65 {etc,man}: improve check_route address notification flag documentation (#301)
 ffa276f Support ELL 0.68 l_netlink_message API. (#303)
 269f10a gh: daily validation of the ELL compatibility (#308)
 824ff8c Support listener events (#304)
 5d9f33a Some clean-ups (#305)
 05a08bf lib: switch to v4.0.1: only added items (#306)
 3702487 scripts: debug: also print system info (#307)
 5d8db15 ell: only include 'ell/ell.h' header (#309)
 772afe9 AUTHORS: Update e-mail addresses.
 0c36dba mptcpd 0.13

Drop backported patches which are part of the release.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 46e1b60f5d)
2024-11-26 12:26:04 +00:00
Daniel Golle
285ed06625 ell: update to version 0.70
c8f4dbc util: Add l_memcpy
 e5007ce unit: Add l_memcpy test
 373b828 Release 0.70

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 11b3b811b3)
2024-11-26 12:26:04 +00:00
Daniel Golle
85a9566b39 libpng: add symlink to debug library
Add convenience symlink when building with CONFIG_DEBUG.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 5313dd9be6)
2024-11-26 12:26:04 +00:00
Dirk Brenken
3294b616b1 banIP: update 1.0.1-2
* correctly parse json objects with hyphens in the autodetection function

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 3140259fc6)
2024-11-26 07:05:54 +01:00
Hirokazu MORIKAWA
4fbbc15d31 node: bump to 20.18.1
Notable Changes
    doc: add abmusse to collaborators (Abdirahim Musse)

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2024-11-25 17:04:25 +01:00
Dirk Brenken
d46534fe28 banIP: release 1.0.1-1
* optimized procd settings for better performance
* made the log monitor working again (even on master with apk migration issues)
* reworked the fetch autodetection function (still broken in master due to apk migration)

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 8609a5bbe5)
2024-11-24 15:48:09 +01:00
Dirk Brenken
02e11b0498 banIP: update to 1.0.0-10
* minimal fix to support all download utilities in currently broken apk snapshots
  (see https://github.com/openwrt/openwrt/issues/16907 for details)

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 4f00d8f0ee)
2024-11-24 15:47:44 +01:00
Dirk Brenken
659787412a adblock: release 4.2.3-1
* optimized procd settings for better performance
* reworked autodetection functions (still broken in master due to apk migration)
* made the tld function optional, set 'adb_tld' accordingly (enabled by default)
* reworked count function
* various code improvements

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 8afc26fafb)
2024-11-23 22:17:43 +01:00
Hannu Nyman
326430a71a qcsuper: Make version apk compatible
Adjust versioning to match apk's semantic rules.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 6ed915b060)
2024-11-23 11:22:27 +02:00
Hannu Nyman
ba4c0cf183 netifyd: Make version apk compatible
Adjust versioning to be compatible with apk's semantic rules.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 7ce6b6866e)
2024-11-23 11:22:19 +02:00
Hannu Nyman
c7bd260bd1 oci-runtime-tools: Make version apk compatible
Adjust version to be compatible with apk semantic rules.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 42026ab232)
2024-11-23 11:22:08 +02:00
Hannu Nyman
adeeef3998 debootstrap: Make version apk compatible
Adjust version to match apk semantic rules.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 863be39f2c)
2024-11-23 11:21:53 +02:00
Hannu Nyman
cfc3767c0f hfsprogs: Make version apk compatible
Adjust version to match apk semantic rules.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 97f0eb94ad)
2024-11-23 11:21:38 +02:00
Hannu Nyman
1369b2ce52 kafs-client: Make version apk compatible
Adjust version to compatible with apk's semantic rules.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit a2cae1facd)
2024-11-23 11:21:27 +02:00
Tianling Shen
227515d82b yq: Update to 4.44.5
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 6945c7bb65)
2024-11-21 14:48:26 +08:00
Ryan Keane
3fb7384384 alist: Bump to 3.39.2
Change Github repository owner from `alist-org` to `AlistGo`.
web-dist 3.39.2:
- No significant changes.
Release notes in links below.

Close: #25405
Link: https://github.com/AlistGo/alist/releases/tag/v3.39.2
Link: https://github.com/AlistGo/alist-web/compare/3.39.0...3.39.2
Signed-off-by: Ryan Keane <the.ra2.ifv@gmail.com>
(cherry picked from commit bf07d331b0)
2024-11-21 14:48:23 +08:00
Ryan Keane
c783904b5c rclone: Bump to 1.68.2
Release notes in links below.

Link: https://rclone.org/changelog/#v1-68-2-2024-11-15

Signed-off-by: Ryan Keane <the.ra2.ifv@gmail.com>
(cherry picked from commit c342279eb6)
2024-11-21 14:48:19 +08:00
Ryan Keane
d85e4cf3cd v2ray-core: Bump to 5.22.0
Shorten TITLE variable to fix missing title in ncurses menu.
Release notes and changes logs in the link below.

Link: https://github.com/v2fly/v2ray-core/releases/tag/v5.22.0
Link: https://github.com/v2fly/v2ray-core/compare/v5.21.0...v5.22.0

Signed-off-by: Ryan Keane <the.ra2.ifv@gmail.com>
(cherry picked from commit 9fc92eab22)
2024-11-21 14:48:13 +08:00
Tianling Shen
2a858b0289 dnsproxy: Update to 0.73.3
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 98b10bda70)
2024-11-21 14:47:59 +08:00
Tianling Shen
03b58ca78d golang: Update to 1.23.3
go1.23.3 (released 2024-11-06) includes fixes to the linker,
the runtime, and the net/http, os, and syscall packages.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit b9dc86034b)
2024-11-21 14:47:57 +08:00
Tianling Shen
d8c1dbf447 cloudflared: Update to 2024.11.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 78ccd862af)
2024-11-21 14:47:53 +08:00
Tianling Shen
83ccb0452e v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit d76d51a4b8)
2024-11-21 14:47:50 +08:00
Tianling Shen
f2fbed6f9a xray-core: Update to 24.11.11
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 41457908b8)
2024-11-21 14:47:48 +08:00
Sandro Jäckel
f991a502f8 tailscale: update to 1.76.6
(cherry picked from commit df52ee590b)

Signed-off-by: Sandro Jäckel <sandro.jaeckel@gmail.com>
2024-11-20 00:13:43 +08:00
Hannu Nyman
fc335523b7 netdiscover: Make version apk compatible
Adjust version to be compatible with apk's semantic rules.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 03f9a53cab)
2024-11-17 20:55:14 +02:00
Hannu Nyman
1dcf604c1e lua-curl-v3: Make version apk compatible
Adjust version to apk's semantic rules.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit abef31cacd)
2024-11-17 20:55:02 +02:00
Hannu Nyman
02f65a6feb svox: Make version apk compatible
Adjust PKG_VERSION to be compatible with apk's semantic rules.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit b665256d62)
2024-11-17 20:54:43 +02:00
Hannu Nyman
1af2a0af89 owfs: Make version apk compatible
Adjust version to be compatible with apk's semanting versioning.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 252efdc342)
2024-11-17 20:54:27 +02:00
Hannu Nyman
7f41947306 lua-openssl: Make version apk compatible
Make version compatible with apk.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit c8a46db23d)
2024-11-17 20:54:13 +02:00
Hannu Nyman
2241de51c0 pagekitec: Make version apk compatible
Make PKG_VERSION compatible with apk by dropping the C char,
simplifying Makefile also otherwise. Also remove unnecessary
variables.

Refresh patches (just cosmetics for CI).

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 69f5605e5a)
2024-11-17 20:53:58 +02:00
Hannu Nyman
333436a280 luv: Make version apk compatible
Make version apk compatible.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit f95f1ba47a)
2024-11-17 20:53:44 +02:00
Hannu Nyman
fcdda9d8bf rtklib: Make version apk compatible
Make version compatible with the apk package manager.
Add short explanation about rtklib purpose to the menu item.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 454e232e5b)
2024-11-17 20:53:28 +02:00
Tianling Shen
94a00b8e97 perl: perlmod: make version apk compatible
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 9dc0ee812d)
2024-11-17 20:53:00 +02:00
Ted Hess
afe1f53891 ntfs-3g: APK version compliance.
Remove libfuse/int hint from name.
  Remove myself as maintainer

Signed-off-by: Ted Hess <thess@kitschensync.net>
(cherry picked from commit 8b6d61294f)
2024-11-17 20:52:18 +02:00
Robert Marko
e26de2873d tinc: support apk version semantics
See: #23706

Signed-off-by: Robert Marko <robimarko@gmail.com>
(cherry picked from commit 3d6cfc732b)
2024-11-17 20:51:23 +02:00
Rosen Penev
6b2a4230bd openocd: fix version for APK compatibility
Need to get rid of the v.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 16fcf54e57)
2024-11-17 20:51:02 +02:00
Hirokazu MORIKAWA
8f9985dfad ntpd: Supports apk version semantics
See: https://github.com/openwrt/packages/issues/23706

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit de9f4eb324)
2024-11-17 20:50:13 +02:00
Robert Marko
4eebca8ed1 isc-dhcp: Use apk-compatible versioning
Adjust isc-dhcp versioning to be compatible with APK.

Signed-off-by: Robert Marko <robimarko@gmail.com>
(cherry picked from commit 1137da20e8)
2024-11-17 20:49:29 +02:00
Robert Marko
94ff8239d3 uspot: make EXTRA_DEPENDS APK compatible
APK versions use dots instead of dashes, so update EXTRA_DEPENDS to make it
APK compatible.

Signed-off-by: Robert Marko <robimarko@gmail.com>
(cherry picked from commit 49ef6ff303)
2024-11-17 20:48:29 +02:00
Nick Hainke
472fb12489 snowflake: update to 2.10.1
ChangeLog:
https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/blob/v2.10.1/ChangeLog?ref_type=tags

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit d6ad08828d)
2024-11-17 17:35:52 +02:00
Gagan Deep
1226b4b348 openwisp-monitoring: allow not depending on rpcd-mod-iwinfo
Add option to exclude rpcd-mod-iwinfo from dependency.

Signed-off-by: Gagan Deep <pandafy.dev@gmail.com>
(cherry picked from commit ca503cc405)
2024-11-16 17:46:04 +08:00
Gagan Deep
124b24d6e2 openwisp-monitoring: fix Makefile for 0.2.0 update
Commit 5e69da4ccb upgraded openwisp-monitoring
to version 0.2.0 but missed necessary Makefile adjustments, causing the
package to break in OpenWrt feeds.

This patch updates the Makefile to ensure proper functionality of
openwisp-monitoring with the 0.2.0 release.

Signed-off-by: Gagan Deep <pandafy.dev@gmail.com>
(cherry picked from commit 886b3fa36d)
2024-11-16 17:46:04 +08:00
Florian Eckert
da072f76e4 modemmanager: bump PKG_RELEASE
Bump PKG_RELEASE by one.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 2ecfcce324)
2024-11-15 11:19:58 +01:00
Florian Eckert
5b70e97e4a modemmanager: check during SIM unlocking whether initialization has been completed
After the SIM has been successfully unlocked, it is initialized. This can
take longer on some modems, so we must wait until the modem is ready to
execute the next commands.

Otherwise the modem cannot be enabled and aborts with the following
error message:

error: couldn't enable the modem: 'GDBus.Error:org.freedesktop.ModemManager1.Error.Core.WrongState: modem in initializing state'

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 24d2ba0ba8)
2024-11-15 11:19:51 +01:00
Florian Eckert
4488098bdc modemmanager: reset to 'no' plmn if nothing is configured
If a configured 'plmn' is deleted from the configuration between a connection
setup, it will continue to be used because the modem remembers it.

Therefore, the 'plmn' stored in the modem must be deleted when a new
connection is established if it is no longer in the configuration.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit fa6198e36b)
2024-11-15 11:19:42 +01:00
Florian Eckert
5ae505b1fe modemmanager: swap plmn and technology set command in the proto
In the current implementation of the modemmanager 'proto', if a 'plmn' and a
'technology' is configured, the 'plmn' is set first and then second the
'technology' on a 'proto' setup.

However, this is problematic if a 'technology' has already been set in an
earlier run. It is possible, that this previously set 'technology' is not
available at the current location, as the modem remembers the setting.

To fix this, first set the technology and then the plmn.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 3a5aa8a387)
2024-11-15 11:19:33 +01:00
Florian Eckert
b73b388b9c modemmanager: move plmn registration into own function
To improve the code, the setting of the 'plmn' is moved to separate function.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 8682084e34)
2024-11-15 11:19:20 +01:00
Florian Eckert
659403a1c5 modemmanager: rename function modemmanager_check_state to modemmanager_check_sim_state
This is a preparation commit for a new function.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 5ab483aa44)
2024-11-15 11:19:13 +01:00
Florian Eckert
7aa906ca15 modemmanager: move initial eps settings after modem enable
This settings are needed before any other mmcli command is executed.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 9f35173639)
2024-11-15 11:19:02 +01:00
Florian Eckert
21d3740818 modemmanager: add log file if syslog is set to DEBUG
If the ModemManager is started with debug, all outputs are written to the
system log. To simplify debugging, a logging file is now created under
'/var/log/mm.log' in this case. This simplifies error analysis.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit b6664ae938)
2024-11-15 11:18:58 +01:00
Christian Lachner
64b09bdbc6 haproxy: update to v3.0.6
- Update haproxy PKG_VERSION and PKG_HASH
- See changes: http://git.haproxy.org/?p=haproxy-3.0.git;a=shortlog

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2024-11-14 17:35:45 +02:00
Ryan Keane
921321fe1d nginx: Support APK versioning
Modify EXTRA_DEPENDS in package section to meet APK packaging
requirements.

Signed-off-by: Ryan Keane <the.ra2.ifv@gmail.com>
[ fix dependency also for nginx-full ]
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit ea5536c14c)
2024-11-13 15:23:02 +01:00
Gagan Deep
15fe770c17 openwisp-config: fix Makefile for 1.1.0
Update configuration in Makefile to fix #25168.
Add "/etc/openwisp/" to conf files.

Signed-off-by: Gagan Deep <pandafy.dev@gmail.com>
(cherry picked from commit 67d4fa3b05)
2024-11-12 23:02:37 +02:00
Hannu Nyman
262df75b0e squeezelite: Adjust versioning for apk
Adjust versioning to be compatible with apk.
As we fetch source via git commit hash, simply change - to .
in version string.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit bc14a5428b)
2024-11-10 18:51:52 +02:00
Hannu Nyman
4cc3988d05 pigeonhole: Make version apk compatible
Make the version compatible with apk.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 77dd5b2587)
2024-11-10 18:51:45 +02:00
Rosen Penev
a347cf6a25 tunneldigger-broker: fix APK version
Need to use PKG_VERSION.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit bec2793411)
2024-11-10 13:49:16 +02:00
Hannu Nyman
7399c0582a ddns-scripts: Adjust descriptions in Makefile for apk
Having both double quotes and parentheses in package
description may lead into troublewith apk, if parentheses
are located so that they get passed "outside" the quoted
parameter, and get interpreted as a token for shell.

Example:
 ash: -c: line 1: syntax error near unexpected token `('
 bash: -c: line 1: `/OpenWrt/e8450/staging_dir/host/bin/fakeroot
 /OpenWrt/e8450/staging_dir/host/bin/apk mkpkg --info "name:ddns
 -scripts-pdns" --info "version:2.8.2-r51" --info "description:D
 ynamic DNS Client scripts extension for "PowerDNS" via API. It
 requires: "option param_opt(Optional Parameter)" to be a valid

Avoid that by using single quotes in the detailed descriptions.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit b74ca8feb2)
2024-11-10 13:48:29 +02:00
Xiaolong Zhang
e95262a950 ddns-scripts: add colon char in DNS_CHARSET
The IPv6 address is separated by ':' instead of '.', so we need to add
':' in DNS_CHARSET.

See: 'https://github.com/openwrt/packages/issues/25051'

Fixes: #25051

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* bump PKG_RELEASE
* update commit message

Signed-off-by: Xiaolong Zhang <xliilQwQ@outlook.com>
(cherry picked from commit b962029fa8)
2024-11-10 13:48:25 +02:00
Christian Marangi
b2ce15d5b8 CI: multi-arch-test-build: move to shared workflow
Move multi-arch-test-build to shared workflow.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 2a35a9cab2)
2024-11-08 19:37:27 +01:00
Christian Marangi
50b704d51d fwupd: bump to 2.0.1 and make libdrm support configurable
Bump fwupd to 2.0.1 and make libdrm support configurable.
Set libdrm support disabled by default.

This is needed to fix a problem with buildbot where libdrm dependency is
silently included as buildbot compile every package and library is found
in the system.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit fe5649f379)
2024-11-08 08:26:33 +01:00
Tianling Shen
14d884d139 alist: Update to 3.39.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 605e717fc4)
2024-11-07 18:43:35 +08:00
Antonio Pastor
69521178e5 netatalk: Remove apfstats feature to solve dependency issues
afpstats requires several libraries that would increase significantly final install size.

Signed-off-by: Antonio Pastor <antonio.pastor@gmail.com>
2024-11-06 07:21:26 +02:00
Eric Fahlgren
9e11a64191 owut: fix order of uci-defaults
Move uci-defaults file to run level 51, so it is executed immediately
after the attendedsysupgrade-common package's uci-defaults script.

Signed-off-by: Eric Fahlgren <ericfahlgren@gmail.com>
(cherry picked from commit 712e403703)
2024-11-05 16:09:41 +08:00
Robert Marko
a30d0cbf46 atop: add missing nls.mk include
If nls.mk is not included and BUILD_NLS is set compilation will fail with:
aarch64-openwrt-linux-musl-gcc atop.o version.o various.o  deviate.o   procdbase.o acctproc.o photoproc.o photosyst.o cgroups.o rawlog.o ifprop.o parseable.o showgeneric.o drawbar.o showlinux.o  showsys.o showprocs.o atopsar.o  netatopif.o netatopbpfif.o gpucom.o  json.o utsnames.o -o atop -lncursesw -lz -lm -lrt -Lstaging_dir/toolchain-aarch64_cortex-a53_gcc-13.3.0_musl/usr/lib -Lstaging_dir/toolchain-aarch64_cortex-a53_gcc-13.3.0_musl/lib -fuse-ld=bfd -znow -zrelro  -Lstaging_dir/target-aarch64_cortex-a53_musl/usr/lib -lglib-2.0 -lintl
staging_dir/toolchain-aarch64_cortex-a53_gcc-13.3.0_musl/lib/gcc/aarch64-openwrt-linux-musl/13.3.0/../../../../aarch64-openwrt-linux-musl/bin/ld.bfd: cannot find -lintl: No such file or directory
collect2: error: ld returned 1 exit status

So make sure to include nls.mk.

Fixes: #25231
Signed-off-by: Robert Marko <robimarko@gmail.com>
(cherry picked from commit 1f3fa379d3)
2024-11-05 16:09:09 +08:00
Christian Marangi
0bbe4ac612 nginx-util: drop dummy-package extra dependency
In dropping the dummy-package, also the extra dependency for
nginx-ssl-util needed to be dropped.

Fixes: #25250
Fixes: b75050d59e ("nginx-util: drop nginx-util dummy packages")
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit f2e7f81307)
2024-11-04 19:11:56 +01:00
Christian Marangi
1ee098a45d nginx: improve libexslt optional patch
Improve libexslt optional patch to silent confusing output.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit b5183a3837)
2024-11-04 11:46:13 +01:00
Christian Marangi
b25afa4d05 nginx: add patch fixing libxslt library detection
Nginx hardcode the libxml2 include path to /usr/include/libxml2. This
works in a local build as pretty much everyone have the libxml2 library
installed but doesn't on buildbot container as the library doesn't
exist.

This effectively makes the host library leak intro library detection but
doesn't actually link to it as linking is still done with the correct
library in staging dir.

To fix this add a patch to define custom libxml2 include directory
instead of hardcoding it to host library.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit c919fddfc1)
2024-11-04 11:46:12 +01:00
Christian Marangi
a044fa2606 nginx-util: drop nginx-util dummy packages
Enough transition period has passed for nginx-util dummy package. Finally
drop it for good and drop the extra dependency.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit b75050d59e)
2024-11-04 11:46:12 +01:00
Christian Marangi
be5863867d nginx: drop extra dependency <2 for nginx-util
Drop extra dependency <2 for nginx-util. The reason is not clear and
cause problems with APK package creation.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 9c563d536c)
2024-11-04 11:46:12 +01:00
Christian Marangi
aa055461a0 nginx: drop nginx dummy packages
Enough transition period has passed for nginx dummy package. Finally
drop it for good and add Provides for nginx default.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit ad14af942c)
2024-11-04 11:46:11 +01:00
Christian Marangi
a398f6d537 nginx: mute warning on init.d script enable
Mute warning on procd init.d script enable as nginx_util is tried to be
called from /usr/bin host system. Limit it to be called only if
nginx-util is present.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 329d7e4f78)
2024-11-04 11:46:11 +01:00
Antonio Pastor
dcebb8add0 netatalk: Enable AppleTalk feature
Starting v4.0.0, netatalk brings back AppleTalk features lost in v3.
Updated description.

Signed-off-by: Antonio Pastor <antonio.pastor@gmail.com>
(cherry picked from commit 09a2427c2a)
2024-11-04 06:35:24 +01:00
Antonio Pastor
1848d56666 netatalk: Clean up Makefile
Updated title.
Updated description.
Reordered to match most common layout

Signed-off-by: Antonio Pastor <antonio.pastor@gmail.com>
(cherry picked from commit 049a055b76)
2024-11-04 06:35:24 +01:00
Antonio Pastor
399e8b3b38 netatalk: Update to 4.0.4
Maintainer: Antonio Pastor / @APCCV
Compile tested: ipq806x (23.05.3, snapshot)
Run tested: ipq806x - C2600: start server, connect from MacOS, read/write files to home share, create/update TimeMachine backups

Description:
No changes to package other than using latest available upstream code base. Starting Netatalk 4.x build uses meson instead of autotools.

Signed-off-by: Antonio Pastor <antonio.pastor@gmail.com>
(cherry picked from commit d0abe3d52d)
2024-11-04 06:35:24 +01:00
640 changed files with 13998 additions and 11958 deletions

92
.github/ISSUE_TEMPLATE/bug_report.yml vendored Normal file
View File

@@ -0,0 +1,92 @@
name: Package Bug Report
description: Report an issue with a package in this repository
title: "<package-name>: <short description>"
labels: [bug]
body:
- type: markdown
attributes:
value: |
# 📦 Package Details
- type: input
id: package-name
attributes:
label: Package Name
placeholder: e.g. iptables, curl, netdata
validations:
required: true
- type: input
id: maintainer
attributes:
label: Maintainer
description: |
Check the latest package commits and/or search the repo with the example below.\
```<package-name>/makefile maintainer```
placeholder: (@username)
validations:
required: true
- type: input
id: openwrt-version
attributes:
label: OpenWrt Version
description: |
If you are unsure, use the command below.\
```ubus call system board | jsonfilter -e '@.release.version'```
placeholder: e.g. 23.05.2 or SNAPSHOT
validations:
required: true
- type: input
id: target-subtarget
attributes:
label: OpenWrt Target/Subtarget
description: |
If you are unsure, use the command below.\
```ubus call system board | jsonfilter -e '@.release.target'```
placeholder: e.g. ramips/mt76x8, ath79/generic
validations:
required: true
- type: textarea
id: steps-to-reproduce
attributes:
label: Steps to Reproduce
description: Please list the steps that lead to the issue.
placeholder: |
1. Do this
2. Then this
3. Observe the issue
Try to avoid uploading screenshots, logs are preferred.
validations:
required: true
- type: textarea
id: actual-behavior
attributes:
label: Actual Behaviour
description: What actually happened? Be as detailed as possible.
placeholder: A clear and concise description of what happened.
validations:
required: true
- type: markdown
attributes:
value: |
# ✅ Formalities
Before submitting this issue, please confirm the following:
- type: checkboxes
id: confirmations
attributes:
label: Confirmation Checklist
options:
- label: The package is maintained in this repository.
required: true
- label: I understand that issues related to [the base OpenWrt repository](https://github.com/openwrt/openwrt/issues) or [LuCI repository](https://github.com/openwrt/luci/issues) will be closed.
required: true
- label: I am reporting an issue for OpenWrt, not an unsupported fork.
required: true

12
.github/ISSUE_TEMPLATE/config.yml vendored Normal file
View File

@@ -0,0 +1,12 @@
---
blank_issues_enabled: false
contact_links:
- name: Feature request
url: https://forum.openwrt.org/c/feature-requests
about: The OpenWrt project relies on volunteers. While we appreciate feature requests, we might lack the manpower to handle them. Ideally, you get familiar with the codebase and attempt to contribute the feature yourself. We recommend to post in the forum, as this is the most likely place to receive feedback on feature requests.
- name: OpenWrt community
url: https://openwrt.org/contact
about: Consider reaching out to our community to get help. OpenWrt is a complex software project with many pitfalls; there is a good chance someone can help you solve your issue in no time.
- name: OpenWrt documentation
url: https://openwrt.org/docs/start
about: The OpenWrt documentation contains a lot of valuable information.

View File

@@ -1,16 +0,0 @@
Please make sure that the issue subject starts with `<package-name>: `
Also make sure that the package is maintained in this repository and not in base which should be submitted at https://bugs.openwrt.org or in the LuCI repository which should be submitted at https://github.com/openwrt/luci/issues.
Issues related to releases below 18.06 and forks are not supported or maintained and will be closed.
# Issue template (remove lines from top till here)
Maintainer: @\<github-user> (find it by checking history of the package Makefile)
Environment: (put here arch, model, OpenWrt version)
Description:
```
Format code blocks by wrapping them with pairs of ```
```

View File

@@ -1,5 +0,0 @@
Maintainer: me / @\<github-user> (find it by checking history of the package Makefile)
Compile tested: (put here arch, model, OpenWrt version)
Run tested: (put here arch, model, OpenWrt version, tests done)
Description:

32
.github/pull_request_template.md vendored Normal file
View File

@@ -0,0 +1,32 @@
## 📦 Package Details
**Maintainer:** @<github-user>
<sub>(You can find this by checking the history of the package `Makefile`.)</sub>
**Description:**
<!-- Briefly describe what this package does or what changes are introduced -->
---
## 🧪 Run Testing Details
- **OpenWrt Version:**
- **OpenWrt Target/Subtarget:**
- **OpenWrt Device:**
---
## ✅ Formalities
- [ ] I have reviewed the [CONTRIBUTING.md](https://github.com/openwrt/packages/blob/master/CONTRIBUTING.md) file for detailed contributing guidelines.
### If your PR contains a patch:
- [ ] It can be applied using `git am`
- [ ] It has been refreshed to avoid offsets, fuzzes, etc., using
```bash
make package/<your-package>/refresh V=s
```
- [ ] It is structured in a way that it is potentially upstreamable
<sub>(e.g., subject line, commit description, etc.)</sub>
<sub>We must try to upstream patches to reduce maintenance burden.</sub>

View File

@@ -1,6 +0,0 @@
ARG ARCH=x86-64
FROM openwrt/rootfs:$ARCH
ADD entrypoint.sh /entrypoint.sh
CMD ["/entrypoint.sh"]

View File

@@ -1,106 +0,0 @@
name: Check APK compatible version/release
on:
pull_request_target:
types: [opened, synchronize, converted_to_draft, ready_for_review, edited]
jobs:
build:
name: Check APK compatible version/release
runs-on: ubuntu-latest
strategy:
fail-fast: false
permissions:
pull-requests: write
steps:
- uses: actions/checkout@v4
with:
ref: ${{ github.event.pull_request.head.sha }}
fetch-depth: 0
- name: Determine branch name
run: |
BRANCH="${GITHUB_BASE_REF#refs/heads/}"
echo "Building for $BRANCH"
echo "BRANCH=$BRANCH" >> $GITHUB_ENV
- name: Setup APK
run: |
wget -O $GITHUB_WORKSPACE/apk https://buildbot.aparcar.org/apk.static
chmod +x $GITHUB_WORKSPACE/apk
- name: Determine changed packages
run: |
RET=0
INCOMPATIBLE_VERSION=""
# only detect packages with changes
PKG_ROOTS=$(find . -name Makefile | \
grep -v ".*/src/Makefile" | \
sed -e 's@./\(.*\)/Makefile@\1/@')
CHANGES=$(git diff --diff-filter=d --name-only origin/$BRANCH...)
for ROOT in $PKG_ROOTS; do
for CHANGE in $CHANGES; do
if [[ "$CHANGE" == "$ROOT"* ]]; then
PKG_RELEASE=$(grep -E '^PKG_RELEASE' "$ROOT/Makefile" | cut -f 2 -d '=')
if [ -n "$PKG_RELEASE" ]; then
if [[ "$PKG_RELEASE" == '^[0-9]+$' ]]; then
echo "PKG_RELEASE is not an integer: $PKG_RELEASE"
INCOMPATIBLE_VERSION+=" $ROOT"
break
fi
fi
PKG_VERSION=$(grep -E '^PKG_VERSION' "$ROOT/Makefile" | cut -f 2 -d '=')
if [ -n "$PKG_VERSION" ]; then
$GITHUB_WORKSPACE/apk version --quiet --check "$PKG_VERSION"
if [[ "$?" -gt "0" ]]; then
echo "PKG_VERSION is not compatible: $PKG_VERSION"
INCOMPATIBLE_VERSION+=" $ROOT"
fi
fi
fi
done
done
echo "Incompatible versions: $INCOMPATIBLE_VERSION"
if [ -n "$INCOMPATIBLE_VERSION" ]; then
RET=1
cat > "$GITHUB_WORKSPACE/pr_comment.md" << EOF
OpenWrt will change to the APK package manager which requires
deterministic verisons. Please make sure that **PKG_VERSION**
follows [Semantic Versioning](https://semver.org) or more specifically,
the [APK version scheme](https://gitlab.alpinelinux.org/alpine/apk-tools/-/blob/master/doc/apk-package.5.scd?ref_type=heads#L47).
If the version is based on a date, please use dots instead of dashes, i.e. **24.01.01**.
The **PKG_RELEASE** should be an integer and not contain any letters or special characters.
EOF
fi
for ROOT in $INCOMPATIBLE_VERSION; do
echo " - ${ROOT}Makefile" >> "$GITHUB_WORKSPACE/pr_comment.md"
done
exit $RET
- name: Find Comment
uses: peter-evans/find-comment@v2
if: ${{ failure() }}
id: fc
with:
issue-number: ${{ github.event.pull_request.number }}
comment-author: "github-actions[bot]"
- name: Create or update comment
uses: peter-evans/create-or-update-comment@v2
if: ${{ failure() }}
with:
comment-id: ${{ steps.fc.outputs.comment-id }}
issue-number: ${{ github.event.pull_request.number }}
body-file: "pr_comment.md"
edit-mode: replace

View File

@@ -1,91 +0,0 @@
name: Check autorelease deprecation
on:
pull_request_target:
types: [opened, synchronize, converted_to_draft, ready_for_review, edited]
jobs:
build:
name: Check autorelease deprecation
runs-on: ubuntu-latest
strategy:
fail-fast: false
permissions:
pull-requests: write
steps:
- uses: actions/checkout@v4
with:
ref: ${{ github.event.pull_request.head.sha }}
fetch-depth: 0
- name: Determine branch name
run: |
BRANCH="${GITHUB_BASE_REF#refs/heads/}"
echo "Building for $BRANCH"
echo "BRANCH=$BRANCH" >> $GITHUB_ENV
- name: Determine changed packages
run: |
RET=0
# only detect packages with changes
PKG_ROOTS=$(find . -name Makefile | \
grep -v ".*/src/Makefile" | \
sed -e 's@./\(.*\)/Makefile@\1/@')
CHANGES=$(git diff --diff-filter=d --name-only origin/$BRANCH...)
for ROOT in $PKG_ROOTS; do
for CHANGE in $CHANGES; do
if [[ "$CHANGE" == "$ROOT"* ]]; then
if grep -q '$(AUTORELEASE)' "$ROOT/Makefile"; then
CONTAINS_AUTORELEASE+="$ROOT"
fi
break
fi
done
done
if [ -n "$CONTAINS_AUTORELEASE" ]; then
RET=1
cat > "$GITHUB_WORKSPACE/pr_comment.md" << EOF
Please do no longer set *PKG_RELEASE* to *AUTORELEASE* as the
feature is deprecated. Please use an integer instead. Below is a
list of affected packages including correct *PKG_RELEASE*:
EOF
fi
for ROOT in $CONTAINS_AUTORELEASE; do
echo -n " - ${ROOT}Makefile: PKG_RELEASE:=" >> "$GITHUB_WORKSPACE/pr_comment.md"
last_bump="$(git log --pretty=format:'%h %s' "$ROOT" |
grep --max-count=1 -e ': [uU]pdate to ' -e ': [bB]ump to ' |
cut -f 1 -d ' ')"
if [ -n "$last_bump" ]; then
echo -n $(($(git rev-list --count "$last_bump..HEAD" "$ROOT") + 2)) >> "$GITHUB_WORKSPACE/pr_comment.md"
else
echo -n $(($(git rev-list --count HEAD "$ROOT") + 2)) >> "$GITHUB_WORKSPACE/pr_comment.md"
fi
echo >> "$GITHUB_WORKSPACE/pr_comment.md"
done
exit $RET
- name: Find Comment
uses: peter-evans/find-comment@v2
if: ${{ failure() }}
id: fc
with:
issue-number: ${{ github.event.pull_request.number }}
comment-author: 'github-actions[bot]'
- name: Create or update comment
uses: peter-evans/create-or-update-comment@v2
if: ${{ failure() }}
with:
comment-id: ${{ steps.fc.outputs.comment-id }}
issue-number: ${{ github.event.pull_request.number }}
body-file: 'pr_comment.md'
edit-mode: replace

View File

@@ -1,70 +0,0 @@
#!/bin/sh
# not enabling `errtrace` and `pipefail` since those are bash specific
set -o errexit # failing commands causes script to fail
set -o nounset # undefined variables causes script to fail
echo "src/gz packages_ci file:///ci" >> /etc/opkg/distfeeds.conf
FINGERPRINT="$(usign -F -p /ci/packages_ci.pub)"
cp /ci/packages_ci.pub "/etc/opkg/keys/$FINGERPRINT"
mkdir -p /var/lock/
opkg update
export CI_HELPER="/ci/.github/workflows/ci_helpers.sh"
for PKG in /ci/*.ipk; do
tar -xzOf "$PKG" ./control.tar.gz | tar xzf - ./control
# package name including variant
PKG_NAME=$(sed -ne 's#^Package: \(.*\)$#\1#p' ./control)
# package version without release
PKG_VERSION=$(sed -ne 's#^Version: \(.*\)$#\1#p' ./control)
PKG_VERSION="${PKG_VERSION%-[!-]*}"
# package source containing test.sh script
PKG_SOURCE=$(sed -ne 's#^Source: \(.*\)$#\1#p' ./control)
PKG_SOURCE="${PKG_SOURCE#/feed/}"
echo
echo "Testing package $PKG_NAME in version $PKG_VERSION from $PKG_SOURCE"
if ! [ -d "/ci/$PKG_SOURCE" ]; then
echo "$PKG_SOURCE is not a directory"
exit 1
fi
PRE_TEST_SCRIPT="/ci/$PKG_SOURCE/pre-test.sh"
TEST_SCRIPT="/ci/$PKG_SOURCE/test.sh"
if ! [ -f "$TEST_SCRIPT" ]; then
echo "No test.sh script available"
continue
fi
export PKG_NAME PKG_VERSION
if [ -f "$PRE_TEST_SCRIPT" ]; then
echo "Use package specific pre-test.sh"
if sh "$PRE_TEST_SCRIPT" "$PKG_NAME" "$PKG_VERSION"; then
echo "Pre-test successful"
else
echo "Pre-test failed"
exit 1
fi
else
echo "No pre-test.sh script available"
fi
opkg install "$PKG"
echo "Use package specific test.sh"
if sh "$TEST_SCRIPT" "$PKG_NAME" "$PKG_VERSION"; then
echo "Test successful"
else
echo "Test failed"
exit 1
fi
opkg remove "$PKG_NAME" --force-removal-of-dependent-packages --force-remove --autoremove || true
done

View File

@@ -1,63 +0,0 @@
name: Test Formalities
on:
pull_request:
jobs:
build:
name: Test Formalities
runs-on: ubuntu-latest
strategy:
fail-fast: false
steps:
- uses: actions/checkout@v4
with:
ref: ${{ github.event.pull_request.head.sha }}
fetch-depth: 0
- name: Determine branch name
run: |
BRANCH="${GITHUB_BASE_REF#refs/heads/}"
echo "Building for $BRANCH"
echo "BRANCH=$BRANCH" >> $GITHUB_ENV
- name: Test formalities
run: |
source .github/workflows/ci_helpers.sh
RET=0
for commit in $(git rev-list HEAD ^origin/$BRANCH); do
info "=== Checking commit '$commit'"
if git show --format='%P' -s $commit | grep -qF ' '; then
err "Pull request should not include merge commits"
RET=1
fi
author="$(git show -s --format=%aN $commit)"
if echo $author | grep -q '\S\+\s\+\S\+'; then
success "Author name ($author) seems ok"
else
err "Author name ($author) need to be your real name 'firstname lastname'"
RET=1
fi
subject="$(git show -s --format=%s $commit)"
if echo "$subject" | grep -q -e '^[0-9A-Za-z,+/_-]\+: ' -e '^Revert ' -e '^CONTRIBUTING.md' -e '^README.md'; then
success "Commit subject line seems ok ($subject)"
else
err "Commit subject line MUST start with '<package name>: ' ($subject)"
RET=1
fi
body="$(git show -s --format=%b $commit)"
sob="$(git show -s --format='Signed-off-by: %aN <%aE>' $commit)"
if echo "$body" | grep -qF "$sob"; then
success "Signed-off-by match author"
else
err "Signed-off-by is missing or doesn't match author (should be '$sob')"
RET=1
fi
done
exit $RET

View File

@@ -1,206 +1,14 @@
name: Test Build
name: Test and Build
on:
pull_request:
concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
jobs:
formalities:
name: Test Formalities
uses: openwrt/actions-shared-workflows/.github/workflows/formal.yml@main
build:
name: Test ${{ matrix.arch }}
runs-on: ubuntu-latest
strategy:
fail-fast: false
matrix:
include:
- arch: aarch64_generic
target: armsr-armv8
runtime_test: true
- arch: arm_cortex-a15_neon-vfpv4
target: armsr-armv7
runtime_test: true
- arch: arm_cortex-a9_vfpv3-d16
target: mvebu-cortexa9
runtime_test: false
- arch: i386_pentium-mmx
target: x86-geode
runtime_test: true
- arch: mips_24kc
target: ath79-generic
runtime_test: true
- arch: mipsel_24kc
target: mt7621
runtime_test: false
- arch: powerpc_464fp
target: apm821xx-nand
runtime_test: false
- arch: powerpc_8548
target: mpc85xx-p1010
runtime_test: false
- arch: riscv64_riscv64
target: sifiveu-generic
runtime_test: false
- arch: x86_64
target: x86-64
runtime_test: true
steps:
- uses: actions/checkout@v4
with:
fetch-depth: 0
- name: Determine branch name
run: |
BRANCH="${GITHUB_BASE_REF#refs/heads/}"
echo "Building for $BRANCH"
echo "BRANCH=$BRANCH" >> $GITHUB_ENV
- name: Determine changed packages
run: |
# only detect packages with changes
PKG_ROOTS=$(find . -name Makefile | \
grep -v ".*/src/Makefile" | \
sed -e 's@./\(.*\)/Makefile@\1/@')
CHANGES=$(git diff --diff-filter=d --name-only origin/$BRANCH...)
for ROOT in $PKG_ROOTS; do
for CHANGE in $CHANGES; do
if [[ "$CHANGE" == "$ROOT"* ]]; then
PACKAGES+=$(echo "$ROOT" | sed -e 's@.*/\(.*\)/@\1 @')
break
fi
done
done
# fallback to test packages if nothing explicitly changes this is
# should run if other mechanics in packages.git changed
PACKAGES="${PACKAGES:-vim attendedsysupgrade-common bmon}"
echo "Building $PACKAGES"
echo "PACKAGES=$PACKAGES" >> $GITHUB_ENV
- name: Generate build keys
run: |
sudo apt-get update
sudo apt-get install -y signify-openbsd
signify-openbsd -G -n -c 'DO NOT USE - OpenWrt packages feed CI' -p packages_ci.pub -s packages_ci.sec
EOF=$(dd if=/dev/urandom bs=15 count=1 status=none | base64)
echo "KEY_BUILD<<$EOF" >> $GITHUB_ENV
cat packages_ci.sec >> $GITHUB_ENV
echo "$EOF" >> $GITHUB_ENV
- name: Build
uses: openwrt/gh-action-sdk@v7
env:
ARCH: ${{ matrix.arch }}-${{ env.BRANCH }}
FEEDNAME: packages_ci
INDEX: 1
KEY_BUILD: ${{ env.KEY_BUILD }}
V: s
- name: Move created packages to project dir
if: always()
run: cp bin/packages/${{ matrix.arch }}/packages_ci/* . || true
- name: Collect metadata
if: always()
run: |
MERGE_ID=$(git rev-parse --short HEAD)
echo "MERGE_ID=$MERGE_ID" >> $GITHUB_ENV
echo "BASE_ID=$(git rev-parse --short HEAD^1)" >> $GITHUB_ENV
echo "HEAD_ID=$(git rev-parse --short HEAD^2)" >> $GITHUB_ENV
PRNUMBER=${GITHUB_REF_NAME%/merge}
echo "PRNUMBER=$PRNUMBER" >> $GITHUB_ENV
echo "ARCHIVE_NAME=${{matrix.arch}}-PR$PRNUMBER-$MERGE_ID" >> $GITHUB_ENV
- name: Generate metadata
if: always()
run: |
cat << _EOF_ > PKG-INFO
Metadata-Version: 2.1
Name: ${{env.ARCHIVE_NAME}}
Version: $BRANCH
Author: $GITHUB_ACTOR
Home-page: $GITHUB_SERVER_URL/$GITHUB_REPOSITORY/pull/$PRNUMBER
Download-URL: $GITHUB_SERVER_URL/$GITHUB_REPOSITORY/actions/runs/$GITHUB_RUN_ID
Summary: $PACKAGES
Platform: ${{ matrix.arch }}
Packages for OpenWrt $BRANCH running on ${{matrix.arch}}, built from PR $PRNUMBER
at commit $HEAD_ID, against $BRANCH at commit $BASE_ID, with merge SHA $MERGE_ID.
Modified packages:
_EOF_
for p in $PACKAGES
do
echo " "$p >> PKG-INFO
done
echo >> PKG-INFO
echo Full file listing: >> PKG-INFO
ls -al *.ipk >> PKG-INFO || true
cat PKG-INFO
- name: Store packages
if: always()
uses: actions/upload-artifact@v4
with:
name: ${{env.ARCHIVE_NAME}}-packages
path: |
Packages
Packages.*
*.ipk
PKG-INFO
- name: Store logs
if: always()
uses: actions/upload-artifact@v4
with:
name: ${{env.ARCHIVE_NAME}}-logs
path: |
logs/
PKG-INFO
- name: Remove logs
if: always()
run: sudo rm -rf logs/ || true
- name: Check if any packages were built
run: |
if [ -n "$(find . -maxdepth 1 -type f -name '*.ipk' -print -quit)" ]; then
echo "Found *.ipk files"
HAVE_IPKS=true
else
echo "No *.ipk files found"
HAVE_IPKS=false
fi
echo "HAVE_IPKS=$HAVE_IPKS" >> $GITHUB_ENV
- name: Register QEMU
if: ${{ matrix.runtime_test && fromJSON(env.HAVE_IPKS) }}
run: |
sudo apt-get update
sudo apt-get install -y qemu-user-static binfmt-support
sudo update-binfmts --import
- name: Build Docker container
if: ${{ matrix.runtime_test && fromJSON(env.HAVE_IPKS) }}
run: |
docker build --platform linux/${{ matrix.arch }} -t test-container --build-arg ARCH .github/workflows/
env:
ARCH: ${{ matrix.arch }}-${{ env.BRANCH }}
- name: Test via Docker container
if: ${{ matrix.runtime_test && fromJSON(env.HAVE_IPKS) }}
run: |
docker run --platform linux/${{ matrix.arch }} --rm -v $GITHUB_WORKSPACE:/ci test-container
name: Feeds Package Test Build
needs: formalities
uses: openwrt/actions-shared-workflows/.github/workflows/multi-arch-test-build.yml@main

View File

@@ -74,8 +74,8 @@ guidelines:
Add libzot dependency").
- Include Signed-off-by tag in the commit comments. See: [Sign your
work](https://openwrt.org/submitting-patches#sign_your_work)
- Author and sign-off must match and be a real name or known identity and
a real email address. GitHub private email addresses will not be accepted.
- Author and sign-off must match and be a real name and real email address.
GitHub private email addresses will not be accepted.
- Follow all [Submission Guidelines](https://openwrt.org/submitting-patches#submission_guidelines)
requirements, including maximum characters per line.

View File

@@ -4,14 +4,15 @@
#
include $(TOPDIR)/rules.mk
include $(INCLUDE_DIR)/nls.mk
PKG_NAME:=atop
PKG_VERSION:=2.12.0
PKG_RELEASE:=1
PKG_VERSION:=2.11.0
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://www.atoptool.nl/download/
PKG_HASH:=9b94c666602efff7bf402ecce706c347f38c39cb63498f9d39626861e5646e20
PKG_HASH:=0d09ecc90c14e6ef41c22e3c57c142c3e4fb9cf3c94379077a33c961d5343086
PKG_MAINTAINER:=Toni Uhlig <matzeton@googlemail.com>
PKG_LICENSE:=GPL-2.0-or-later
@@ -19,6 +20,7 @@ PKG_LICENSE_FILES:=COPYING
PKG_CPE_ID:=cpe:/a:atop_project:atop
include $(INCLUDE_DIR)/package.mk
include $(INCLUDE_DIR)/nls.mk
define Package/atop
SECTION:=admin

View File

@@ -5,12 +5,12 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=bottom
PKG_VERSION:=0.9.7
PKG_VERSION:=0.11.1
PKG_RELEASE:=1
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://codeload.github.com/ClementTsang/bottom/tar.gz/$(PKG_VERSION)?
PKG_HASH:=29c3f75323ae0245576ea23268bb0956757352bf3b16d05f511357655b9cc71e
PKG_HASH:=0095ea9edb386ad7c49d845176314097713661d22ec42314e3be46426bc769ee
PKG_MAINTAINER:=Luca Barbato <lu_zero@luminem.org>
PKG_LICENSE:=MIT

View File

@@ -1,12 +1,12 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=btop
PKG_VERSION:=1.4.0
PKG_VERSION:=1.4.5
PKG_RELEASE:=1
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL=https://codeload.github.com/aristocratos/btop/tar.gz/v$(PKG_VERSION)?
PKG_HASH:=ac0d2371bf69d5136de7e9470c6fb286cbee2e16b4c7a6d2cd48a14796e86650
PKG_HASH:=0ffe03d3e26a3e9bbfd5375adf34934137757994f297d6b699a46edd43c3fc02
PKG_MAINTAINER:=Tianling Shen <cnsztl@immortalwrt.org>
PKG_LICENSE:=Apache-2.0
@@ -47,6 +47,8 @@ define Package/btop/install
$(INSTALL_DIR) $(1)/etc/profile.d
$(CP) $(CURDIR)/files/btop.sh $(1)/etc/profile.d/
$(INSTALL_DIR) $(1)/etc/uci-defaults
$(CP) $(CURDIR)/files/btop.uci $(1)/etc/uci-defaults/90-btop-migrate-alias
endef
$(eval $(call BuildPackage,btop))

View File

@@ -1 +1 @@
alias btop="btop --utf-force"
alias btop="btop --force-utf"

View File

@@ -0,0 +1,5 @@
#!/bin/sh
grep -q "utf-force" "/etc/profile.d/btop.sh" && sed -i "s,utf-force,force-utf,g" "/etc/profile.d/btop.sh"
exit 0

View File

@@ -9,10 +9,11 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=debootstrap
PKG_VERSION:=1.0.128+nmu2+deb12u1
PKG_RELEASE:=1
PKG_REAL_VERSION:=1.0.128+nmu2+deb12u1
PKG_VERSION:=1.0.128.2~deb121
PKG_RELEASE:=2
PKG_SOURCE:=$(PKG_NAME)-udeb_$(PKG_VERSION)_all.udeb
PKG_SOURCE:=$(PKG_NAME)-udeb_$(PKG_REAL_VERSION)_all.udeb
PKG_SOURCE_URL:=@DEBIAN/pool/main/d/debootstrap
PKG_HASH:=4fa4ec7c144ed047c47d0d8eb9b91b56eaa9b2db2b52510777abbabf5965d268
@@ -20,6 +21,8 @@ PKG_MAINTAINER:=Daniel Golle <daniel@makrotopia.org>
PKG_LICENSE:=Unique
PKG_LICENSE_FILES:=debian/copyright
PKG_BUILD_DIR:=$(BUILD_DIR)/$(PKG_NAME)-$(PKG_REAL_VERSION)
UNPACK_CMD=ar -p "$(DL_DIR)/$(PKG_SOURCE)" data.tar.xz | xzcat | tar -C $(1) -xf -
include $(INCLUDE_DIR)/package.mk

View File

@@ -8,12 +8,12 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=htop
PKG_VERSION:=3.3.0
PKG_RELEASE:=2
PKG_VERSION:=3.4.1
PKG_RELEASE:=1
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://codeload.github.com/htop-dev/htop/tar.gz/$(PKG_VERSION)?
PKG_HASH:=1e5cc328eee2bd1acff89f860e3179ea24b85df3ac483433f92a29977b14b045
PKG_HASH:=af9ec878f831b7c27d33e775c668ec79d569aa781861c995a0fbadc1bdb666cf
PKG_LICENSE:=GPL-2.0-or-later
PKG_LICENSE_FILES:=COPYING
@@ -63,7 +63,8 @@ CONFIGURE_ARGS += \
--disable-delayacct \
--disable-unicode \
--disable-unwind \
--disable-hwloc
--disable-hwloc \
--with-curses=ncursesw
CONFIGURE_VARS += \
ac_cv_file__proc_stat=yes \

View File

@@ -5,14 +5,14 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=openwisp-config
PKG_VERSION:=1.1.0
PKG_VERSION:=1.2.0
PKG_RELEASE:=1
PKG_MAINTAINER:=Federico Capoano <f.capoano@openwisp.io>
PKG_LICENSE:=GPL-3.0-or-later
PKG_SOURCE_URL:=https://github.com/openwisp/openwisp-config.git
PKG_MIRROR_HASH:=c78dc17353c642a6f998531f18e20f0651f946d665506a000308e77c02324a79
PKG_MIRROR_HASH:=30258c3ef4895fbf6e4fed8caee9d0dfbf05aebebd52604d75febac1a11d78bd
PKG_SOURCE_PROTO:=git
PKG_SOURCE_VERSION:=$(PKG_VERSION)
@@ -38,6 +38,7 @@ endef
define Package/openwisp-config/conffiles
/etc/config/openwisp
/etc/openwisp/
endef
define Package/openwisp-config/install
@@ -45,20 +46,24 @@ define Package/openwisp-config/install
$(1)/usr/sbin \
$(1)/etc/init.d \
$(1)/etc/config \
$(1)/etc/openwisp \
$(1)/usr/lib/lua/openwisp
$(1)/usr/lib/openwisp-config \
$(1)/usr/lib/lua/openwisp \
$(1)/etc/hotplug.d/iface
$(INSTALL_BIN) \
$(PKG_BUILD_DIR)/openwisp-config/files/openwisp.agent \
$(1)/usr/sbin/openwisp_config
$(1)/usr/sbin/openwisp-config
$(INSTALL_BIN) \
$(PKG_BUILD_DIR)/openwisp-config/files/openwisp.init \
$(1)/etc/init.d/openwisp_config
$(1)/etc/init.d/openwisp-config
$(INSTALL_CONF) $(PKG_BUILD_DIR)/openwisp-config/files/openwisp.config \
$(1)/etc/config/openwisp
$(INSTALL_BIN) $(PKG_BUILD_DIR)/openwisp-config/files/openwisp.hotplug \
$(1)/etc/hotplug.d/iface/90-openwisp-config
$(INSTALL_BIN) \
$(PKG_BUILD_DIR)/openwisp-config/files/sbin/openwisp-reload-config \
$(1)/usr/sbin/openwisp-reload-config
@@ -95,7 +100,11 @@ define Package/openwisp-config/install
$(PKG_BUILD_DIR)/openwisp-config/files/sbin/openwisp-get-address.lua \
$(1)/usr/sbin/openwisp-get-address
$(CP) $(PKG_BUILD_DIR)/VERSION $(1)/etc/openwisp/
$(INSTALL_BIN) \
$(PKG_BUILD_DIR)/openwisp-config/files/sbin/openwisp-get-random-number.lua \
$(1)/usr/sbin/openwisp-get-random-number
$(CP) $(PKG_BUILD_DIR)/VERSION $(1)/usr/lib/openwisp-config/
endef
$(eval $(call BuildPackage,openwisp-config))

View File

@@ -0,0 +1,10 @@
menu "netjson-monitoring Configuration"
depends on PACKAGE_netjson-monitoring
config NETJSON_MONITORING_IWINFO
bool "Enable rpcd-mod-iwinfo"
default y
help
Whether to include the rpcd-mod-iwinfo dependency (enabled by default).
endmenu

View File

@@ -5,15 +5,17 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=openwisp-monitoring
PKG_VERSION:=0.2.0
PKG_VERSION:=0.3.0
PKG_RELEASE:=1
PKG_MAINTAINER:=Federico Capoano <support@openwisp.io>
PKG_LICENSE:=GPL-3.0-or-later
PKG_LICENSE_FILES:=LICENSE
PKG_CONFIG_DEPENDS:=CONFIG_NETJSON_MONITORING_IWINFO
PKG_SOURCE_URL:=https://github.com/openwisp/openwrt-openwisp-monitoring.git
PKG_MIRROR_HASH:=6baad2b319cdc072a83547593b447e2c93c42fcdda386f5993c22b88ad991cdd
PKG_MIRROR_HASH:=a7778b0de1b560abf5bf5b8e6e45313fe58309a66438f3c9e043adc8f0248c04
PKG_SOURCE_PROTO:=git
PKG_SOURCE_VERSION:=$(PKG_VERSION)
PKGARCH:=all
@@ -30,14 +32,19 @@ define Package/openwisp-monitoring
endef
define Package/netjson-monitoring
TITLE:=NetJson Monitoring
TITLE:=NetJSON Monitoring
CATEGORY:=Administration
SECTION:=admin
SUBMENU:=openwisp
DEPENDS:=+libubus-lua +lua-cjson +rpcd +rpcd-mod-iwinfo
DEPENDS:=+libubus-lua +lua-cjson +rpcd
DEPENDS+=+NETJSON_MONITORING_IWINFO:rpcd-mod-iwinfo
URL:=http://openwisp.org
endef
define Package/netjson-monitoring/config
source "$(SOURCE)/Config.in"
endef
define Build/Compile
endef
@@ -50,7 +57,7 @@ define Package/netjson-monitoring/install
$(1)/usr/sbin \
$(1)/usr/libexec \
$(1)/usr/lib/lua/openwisp-monitoring \
$(1)/etc/openwisp-monitoring
$(1)/usr/lib/openwisp-monitoring
$(INSTALL_BIN) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/sbin/netjson-monitoring.lua \
@@ -88,7 +95,12 @@ define Package/netjson-monitoring/install
$(PKG_BUILD_DIR)/openwisp-monitoring/files/lib/openwisp-monitoring/wifi.lua \
$(1)/usr/lib/lua/openwisp-monitoring/wifi.lua
$(CP) $(PKG_BUILD_DIR)/VERSION $(1)/etc/openwisp-monitoring/
# Iwinfo is enabled by default unless specified otherwise
ifeq ($(CONFIG_NETJSON_MONITORING_IWINFO), y)
$(CP) $(PKG_BUILD_DIR)/openwisp-monitoring/files/lib/openwisp-monitoring/iwinfo.lua $(1)/usr/lib/lua/openwisp-monitoring/iwinfo.lua
endif
$(CP) $(PKG_BUILD_DIR)/VERSION $(1)/usr/lib/openwisp-monitoring/
endef
@@ -97,7 +109,8 @@ define Package/openwisp-monitoring/install
$(1)/usr/sbin \
$(1)/etc/init.d \
$(1)/etc/config \
$(1)/etc/openwisp-monitoring
$(1)/usr/lib/openwisp-monitoring \
$(1)/etc/hotplug.d/openwisp
$(INSTALL_BIN) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/monitoring.agent \
@@ -107,6 +120,10 @@ define Package/openwisp-monitoring/install
$(PKG_BUILD_DIR)/openwisp-monitoring/files/monitoring.init \
$(1)/etc/init.d/openwisp-monitoring
$(INSTALL_BIN) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/openwisp-monitoring.hotplug \
$(1)/etc/hotplug.d/openwisp/openwisp-monitoring
$(INSTALL_CONF) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/monitoring.config \
$(1)/etc/config/openwisp-monitoring

View File

@@ -8,19 +8,19 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=sudo
PKG_REALVERSION:=1.9.15p5
PKG_REALVERSION:=1.9.17p2
PKG_VERSION:=$(subst p,_p,$(PKG_REALVERSION))
PKG_RELEASE:=1
PKG_SOURCE:=$(PKG_NAME)-$(PKG_REALVERSION).tar.gz
PKG_SOURCE_URL:=https://www.sudo.ws/dist
PKG_HASH:=558d10b9a1991fb3b9fa7fa7b07ec4405b7aefb5b3cb0b0871dbc81e3a88e558
PKG_HASH:=4a38a1ab3adb1199257edc2a7c4a2bd714665eb605b04368843b06dada2cfcfb
PKG_BUILD_DIR:=$(BUILD_DIR)/$(PKG_NAME)-$(PKG_REALVERSION)
PKG_MAINTAINER:=Alexandru Ardelean <ardeleanalex@gmail.com>
PKG_LICENSE:=ISC
PKG_LICENSE_FILES:=doc/LICENSE
PKG_LICENSE_FILES:=LICENSE.md
PKG_CPE_ID:=cpe:/a:sudo_project:sudo
PKG_INSTALL:=1

View File

@@ -1,17 +1,17 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=syslog-ng
PKG_VERSION:=4.7.1
PKG_RELEASE:=1
PKG_VERSION:=4.10.2
PKG_RELEASE:=2
PKG_MAINTAINER:=Josef Schlehofer <pepe.schlehofer@gmail.com>
PKG_LICENSE:=LGPL-2.1-or-later GPL-2.0-or-later
PKG_LICENSE_FILES:=COPYING LGPL.txt GPL.txt
PKG_CPE_ID:=cpe:/a:balabit:syslog-ng
PKG_CPE_ID:=cpe:/a:oneidentity:syslog-ng
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://github.com/syslog-ng/syslog-ng/releases/download/$(PKG_NAME)-$(PKG_VERSION)/
PKG_HASH:=5477189a2d12325aa4faebfcf59f5bdd9084234732f0c3ec16dd253847dacf1c
PKG_HASH:=841503de6c2486e66fd08f0c62ac2568fc8ed1021297f855e8acd58ad7caff76
PKG_BUILD_PARALLEL:=1
PKG_INSTALL:=1
@@ -34,7 +34,8 @@ define Package/syslog-ng
CATEGORY:=Administration
TITLE:=A powerful syslog daemon
URL:=https://www.syslog-ng.com/products/open-source-log-management/
DEPENDS:=+libpcre2 +glib2 +libopenssl +libpthread +librt +libdbi +libjson-c +libcurl +libuuid +SYSLOGNG_LOGROTATE:logrotate +LIBCURL_ZLIB:zlib
DEPENDS:=+libpcre2 +glib2 +libopenssl +libpthread +librt +libdbi +libjson-c +libcurl +libuuid +ivykis +SYSLOGNG_LOGROTATE:logrotate +LIBCURL_ZLIB:zlib
ALTERNATIVES:=300:/sbin/logread:/usr/libexec/logread.sh
endef
define Package/syslog-ng/description
@@ -90,12 +91,15 @@ CONFIGURE_ARGS += \
--disable-sql \
--disable-linux-caps \
--with-jsonc=system \
--with-ivykis=system \
--enable-cpp=no \
--disable-example-modules \
--enable-json=yes \
$(if $(CONFIG_LIBCURL_ZLIB),--enable-http=yes,--enable-http=no) \
--disable-smtp \
--disable-mqtt \
--disable-redis \
--disable-stackdump \
--disable-dependency-tracking \
--disable-python \
--disable-geoip2 \
@@ -123,8 +127,8 @@ define Package/syslog-ng/install
$(INSTALL_DATA) ./files/syslog-ng.conf $(1)/etc
touch $(1)/etc/syslog-ng.d/.keep
$(INSTALL_DIR) $(1)/sbin
$(INSTALL_BIN) ./files/logread $(1)/sbin
$(INSTALL_DIR) $(1)/usr/libexec
$(INSTALL_BIN) ./files/logread.sh $(1)/usr/libexec/logread.sh
$(INSTALL_DIR) $(1)/usr/share/syslog-ng/include/
$(CP) -r ./files/scl $(1)/usr/share/syslog-ng/include/

View File

@@ -1,7 +1,7 @@
# Collect all local logs into a single file /var/log/messages.
# See https://www.syslog-ng.com/technical-documents/list/syslog-ng-open-source-edition
@version: 4.7
@version: current
@include "scl.conf"
options {

3
admin/syslog-ng/test.sh Normal file
View File

@@ -0,0 +1,3 @@
#!/bin/sh
syslog-ng --version | grep "$2"

View File

@@ -8,13 +8,13 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=zabbix
PKG_VERSION:=7.0.0
PKG_VERSION:=7.0.12
PKG_RELEASE:=1
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://cdn.zabbix.com/zabbix/sources/stable/$(basename $(PKG_VERSION))/ \
https://cdn.zabbix.com/zabbix/sources/oldstable/$(basename $(PKG_VERSION))/
PKG_HASH:=520641483223f680ef6e685284b556ba34a496d886a38dc3bca085cde21031b1
PKG_HASH:=6069ed604aa5e33fe631ccc68b782654a697071952a1cf365151655a0a122b05
PKG_MAINTAINER:=Etienne CHAMPETIER <champetier.etienne@gmail.com>
PKG_LICENSE:=AGPL-3.0-only
@@ -159,6 +159,7 @@ define Package/zabbix-server/Default
@(!ZABBIX_SQLITE) \
+libevent2 \
+libevent2-pthreads \
+libevent2-extra \
+fping
endef
@@ -212,6 +213,7 @@ define Package/zabbix-proxy/Default
+ZABBIX_SQLITE:libsqlite3 \
+libevent2 \
+libevent2-pthreads \
+libevent2-extra \
+fping
endef
@@ -277,9 +279,6 @@ ifeq ($(BUILD_VARIANT),gnutls)
CONFIGURE_ARGS+= --with-gnutls="$(STAGING_DIR)/usr"
endif
CONFIGURE_VARS += \
ac_cv_header_sys_sysinfo_h=no
MAKE_FLAGS += ARCH="linux"
define Package/zabbix/install/sbin

View File

@@ -1,12 +1,12 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=delve
PKG_VERSION:=1.22.1
PKG_VERSION:=1.24.0
PKG_RELEASE:=1
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://codeload.github.com/go-delve/delve/tar.gz/v$(PKG_VERSION)?
PKG_HASH:=fe6f0d97c233d4f0f1ed422c11508cc57c14e9e0915f9a258f1912c46824cbfb
PKG_HASH:=940fc50d6338dfe515982ac5fcc3247616f23e2652048ac4f2b439ebd51741c1
PKG_LICENSE:=MIT
PKG_LICENSE_FILES:=LICENSE

View File

@@ -9,7 +9,7 @@ include $(TOPDIR)/rules.mk
PKG_NAME:=lttng-tools
PKG_VERSION:=2.13.9
PKG_RELEASE:=1
PKG_RELEASE:=2
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.bz2
PKG_SOURCE_URL:=https://lttng.org/files/$(PKG_NAME)/

View File

@@ -0,0 +1,48 @@
From 7d669a90212e105b0f669aa2ab38c987b187baab Mon Sep 17 00:00:00 2001
From: Hongxu Jia <hongxu.jia@windriver.com>
Date: Wed, 21 May 2025 13:09:25 +0800
Subject: [PATCH] fix lttng-tools fails to compile with libxml2 2.14.0+
Description:
| In file included from /srv/pokybuild/yocto-worker/qemux86-alt/build/build/tmp/work/core2-32-poky-linux/lttng-tools/2.13.15/recipe-sysroot/usr/include/libxml2/libxml/parser.h:25,
| from ../../../../lttng-tools-2.13.15/src/common/config/session-config.c:29:
| /srv/pokybuild/yocto-worker/qemux86-alt/build/build/tmp/work/core2-32-poky-linux/lttng-tools/2.13.15/recipe-sysroot/usr/include/libxml2/libxml/encoding.h:173:7: note: declared here
| 173 | } input XML_DEPRECATED_MEMBER;
| | ^~~~~
| ../../../../lttng-tools-2.13.15/src/common/config/session-config.c:432:15: error: called object is not a function or function pointer
| 432 | ret = handler->input(out_str, &out_len, (const xmlChar *) in_str, &in_len);
| | ^~~~~~~
| At top level:
| cc1: note: unrecognized command-line option '-Wno-incomplete-setjmp-declaration' may have been intended to silence earlier diagnostics
According to [1][2], the UTF-8 handler is
```
static xmlCharEncError
UTF8ToUTF8(void *vctxt ATTRIBUTE_UNUSED,
unsigned char* out, int *outlen,
const unsigned char* in, int *inlen,
int flush ATTRIBUTE_UNUSED)
```
Update input.func with setting ATTRIBUTE_UNUSED params with NULL and 0
[1] https://gitlab.gnome.org/GNOME/libxml2/-/commit/38f475072aefe032fff1dc058df3e56c1e7062fa
[2] https://gitlab.gnome.org/GNOME/libxml2/-/commit/69b83bb68e2a8ed0013f80c51b9a358714b00c9a#478024cc18a2cc8dbaed34076e9775f6827f413d_2188_2201
Signed-off-by: Marko, Peter <Peter.Marko@siemens.com>
Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
---
src/common/config/session-config.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
--- a/src/common/config/session-config.c
+++ b/src/common/config/session-config.c
@@ -429,7 +429,7 @@ static xmlChar *encode_string(const char
goto end;
}
- ret = handler->input(out_str, &out_len, (const xmlChar *) in_str, &in_len);
+ ret = handler->input.func(NULL, out_str, &out_len, (const xmlChar *) in_str, &in_len, 0);
if (ret < 0) {
xmlFree(out_str);
out_str = NULL;

View File

@@ -8,12 +8,12 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=patch
PKG_VERSION:=2.7.6
PKG_RELEASE:=7
PKG_VERSION:=2.8
PKG_RELEASE:=1
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.xz
PKG_SOURCE_URL:=@GNU/patch
PKG_HASH:=ac610bda97abe0d9f6b7c963255a11dcb196c25e337c61f94e4778d632f1d8fd
PKG_HASH:=f87cee69eec2b4fcbf60a396b030ad6aa3415f192aa5f7ee84cad5e11f7f5ae3
PKG_LICENSE:=GPL-3.0-or-later
PKG_LICENSE_FILES:=COPYING

View File

@@ -1,24 +0,0 @@
From 9bf998b5fcbcde1dea0e472dc1538abb97e9012e Mon Sep 17 00:00:00 2001
From: Andreas Gruenbacher <agruen@gnu.org>
Date: Mon, 12 Feb 2018 16:48:24 +0100
Subject: [PATCH] Fix segfault with mangled rename patch
http://savannah.gnu.org/bugs/?53132
* src/pch.c (intuit_diff_type): Ensure that two filenames are specified
for renames and copies (fix the existing check).
---
src/pch.c | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
--- a/src/pch.c
+++ b/src/pch.c
@@ -974,7 +974,8 @@ intuit_diff_type (bool need_header, mode
if ((pch_rename () || pch_copy ())
&& ! inname
&& ! ((i == OLD || i == NEW) &&
- p_name[! reverse] &&
+ p_name[reverse] && p_name[! reverse] &&
+ name_is_valid (p_name[reverse]) &&
name_is_valid (p_name[! reverse])))
{
say ("Cannot %s file without two valid file names\n", pch_rename () ? "rename" : "copy");

View File

@@ -1,189 +0,0 @@
From b56779aed483f0036a32a65e62ab7b5e461b07cc Mon Sep 17 00:00:00 2001
From: Andreas Gruenbacher <agruen@gnu.org>
Date: Fri, 6 Apr 2018 12:14:49 +0200
Subject: [PATCH] Fix arbitrary command execution in ed-style patches
(CVE-2018-1000156)
* src/pch.c (do_ed_script): Write ed script to a temporary file instead
of piping it to ed: this will cause ed to abort on invalid commands
instead of rejecting them and carrying on.
* tests/ed-style: New test case.
* tests/Makefile.am (TESTS): Add test case. (OPENWRT REMOVED)
---
src/pch.c | 89 +++++++++++++++++++++++++++++++++++------------
tests/Makefile.am | 1 + (OPENWRT REMOVED)
tests/ed-style | 41 ++++++++++++++++++++++
3 files changed, 108 insertions(+), 23 deletions(-)
create mode 100644 tests/ed-style
--- a/src/pch.c
+++ b/src/pch.c
@@ -33,6 +33,7 @@
# include <io.h>
#endif
#include <safe.h>
+#include <sys/wait.h>
#define INITHUNKMAX 125 /* initial dynamic allocation size */
@@ -2389,22 +2390,28 @@ do_ed_script (char const *inname, char c
static char const editor_program[] = EDITOR_PROGRAM;
file_offset beginning_of_this_line;
- FILE *pipefp = 0;
size_t chars_read;
+ FILE *tmpfp = 0;
+ char const *tmpname;
+ int tmpfd;
+ pid_t pid;
+
+ if (! dry_run && ! skip_rest_of_patch)
+ {
+ /* Write ed script to a temporary file. This causes ed to abort on
+ invalid commands such as when line numbers or ranges exceed the
+ number of available lines. When ed reads from a pipe, it rejects
+ invalid commands and treats the next line as a new command, which
+ can lead to arbitrary command execution. */
+
+ tmpfd = make_tempfile (&tmpname, 'e', NULL, O_RDWR | O_BINARY, 0);
+ if (tmpfd == -1)
+ pfatal ("Can't create temporary file %s", quotearg (tmpname));
+ tmpfp = fdopen (tmpfd, "w+b");
+ if (! tmpfp)
+ pfatal ("Can't open stream for file %s", quotearg (tmpname));
+ }
- if (! dry_run && ! skip_rest_of_patch) {
- int exclusive = *outname_needs_removal ? 0 : O_EXCL;
- assert (! inerrno);
- *outname_needs_removal = true;
- copy_file (inname, outname, 0, exclusive, instat.st_mode, true);
- sprintf (buf, "%s %s%s", editor_program,
- verbosity == VERBOSE ? "" : "- ",
- outname);
- fflush (stdout);
- pipefp = popen(buf, binary_transput ? "wb" : "w");
- if (!pipefp)
- pfatal ("Can't open pipe to %s", quotearg (buf));
- }
for (;;) {
char ed_command_letter;
beginning_of_this_line = file_tell (pfp);
@@ -2415,14 +2422,14 @@ do_ed_script (char const *inname, char c
}
ed_command_letter = get_ed_command_letter (buf);
if (ed_command_letter) {
- if (pipefp)
- if (! fwrite (buf, sizeof *buf, chars_read, pipefp))
+ if (tmpfp)
+ if (! fwrite (buf, sizeof *buf, chars_read, tmpfp))
write_fatal ();
if (ed_command_letter != 'd' && ed_command_letter != 's') {
p_pass_comments_through = true;
while ((chars_read = get_line ()) != 0) {
- if (pipefp)
- if (! fwrite (buf, sizeof *buf, chars_read, pipefp))
+ if (tmpfp)
+ if (! fwrite (buf, sizeof *buf, chars_read, tmpfp))
write_fatal ();
if (chars_read == 2 && strEQ (buf, ".\n"))
break;
@@ -2435,13 +2442,49 @@ do_ed_script (char const *inname, char c
break;
}
}
- if (!pipefp)
+ if (!tmpfp)
return;
- if (fwrite ("w\nq\n", sizeof (char), (size_t) 4, pipefp) == 0
- || fflush (pipefp) != 0)
+ if (fwrite ("w\nq\n", sizeof (char), (size_t) 4, tmpfp) == 0
+ || fflush (tmpfp) != 0)
write_fatal ();
- if (pclose (pipefp) != 0)
- fatal ("%s FAILED", editor_program);
+
+ if (lseek (tmpfd, 0, SEEK_SET) == -1)
+ pfatal ("Can't rewind to the beginning of file %s", quotearg (tmpname));
+
+ if (! dry_run && ! skip_rest_of_patch) {
+ int exclusive = *outname_needs_removal ? 0 : O_EXCL;
+ *outname_needs_removal = true;
+ if (inerrno != ENOENT)
+ {
+ *outname_needs_removal = true;
+ copy_file (inname, outname, 0, exclusive, instat.st_mode, true);
+ }
+ sprintf (buf, "%s %s%s", editor_program,
+ verbosity == VERBOSE ? "" : "- ",
+ outname);
+ fflush (stdout);
+
+ pid = fork();
+ if (pid == -1)
+ pfatal ("Can't fork");
+ else if (pid == 0)
+ {
+ dup2 (tmpfd, 0);
+ execl ("/bin/sh", "sh", "-c", buf, (char *) 0);
+ _exit (2);
+ }
+ else
+ {
+ int wstatus;
+ if (waitpid (pid, &wstatus, 0) == -1
+ || ! WIFEXITED (wstatus)
+ || WEXITSTATUS (wstatus) != 0)
+ fatal ("%s FAILED", editor_program);
+ }
+ }
+
+ fclose (tmpfp);
+ safe_unlink (tmpname);
if (ofp)
{
--- /dev/null
+++ b/tests/ed-style
@@ -0,0 +1,41 @@
+# Copyright (C) 2018 Free Software Foundation, Inc.
+#
+# Copying and distribution of this file, with or without modification,
+# in any medium, are permitted without royalty provided the copyright
+# notice and this notice are preserved.
+
+. $srcdir/test-lib.sh
+
+require cat
+use_local_patch
+use_tmpdir
+
+# ==============================================================
+
+cat > ed1.diff <<EOF
+0a
+foo
+.
+EOF
+
+check 'patch -e foo -i ed1.diff' <<EOF
+EOF
+
+check 'cat foo' <<EOF
+foo
+EOF
+
+cat > ed2.diff <<EOF
+1337a
+r !echo bar
+,p
+EOF
+
+check 'patch -e foo -i ed2.diff 2> /dev/null || echo "Status: $?"' <<EOF
+?
+Status: 2
+EOF
+
+check 'cat foo' <<EOF
+foo
+EOF

View File

@@ -1,25 +0,0 @@
From 71607715f11c9875a5aaaf3240885c45f79138e9 Mon Sep 17 00:00:00 2001
From: Andreas Gruenbacher <agruen@gnu.org>
Date: Fri, 17 Aug 2018 13:35:40 +0200
Subject: [PATCH] Fix swapping fake lines in pch_swap
* src/pch.c (pch_swap): Fix swapping p_bfake and p_efake when there is a
blank line in the middle of a context-diff hunk: that empty line stays
in the middle of the hunk and isn't swapped.
Fixes: https://savannah.gnu.org/bugs/index.php?53133
---
src/pch.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
--- a/src/pch.c
+++ b/src/pch.c
@@ -2115,7 +2115,7 @@ pch_swap (void)
}
if (p_efake >= 0) { /* fix non-freeable ptr range */
if (p_efake <= i)
- n = p_end - i + 1;
+ n = p_end - p_ptrn_lines;
else
n = -i;
p_efake += n;

View File

@@ -1,101 +0,0 @@
From dce4683cbbe107a95f1f0d45fabc304acfb5d71a Mon Sep 17 00:00:00 2001
From: Andreas Gruenbacher <agruen@gnu.org>
Date: Mon, 15 Jul 2019 16:21:48 +0200
Subject: Don't follow symlinks unless --follow-symlinks is given
* src/inp.c (plan_a, plan_b), src/util.c (copy_to_fd, copy_file,
append_to_file): Unless the --follow-symlinks option is given, open files with
the O_NOFOLLOW flag to avoid following symlinks. So far, we were only doing
that consistently for input files.
* src/util.c (create_backup): When creating empty backup files, (re)create them
with O_CREAT | O_EXCL to avoid following symlinks in that case as well.
---
src/inp.c | 12 ++++++++++--
src/util.c | 14 +++++++++++---
2 files changed, 21 insertions(+), 5 deletions(-)
--- a/src/inp.c
+++ b/src/inp.c
@@ -238,8 +238,13 @@ plan_a (char const *filename)
{
if (S_ISREG (instat.st_mode))
{
- int ifd = safe_open (filename, O_RDONLY|binary_transput, 0);
+ int flags = O_RDONLY | binary_transput;
size_t buffered = 0, n;
+ int ifd;
+
+ if (! follow_symlinks)
+ flags |= O_NOFOLLOW;
+ ifd = safe_open (filename, flags, 0);
if (ifd < 0)
pfatal ("can't open file %s", quotearg (filename));
@@ -340,6 +345,7 @@ plan_a (char const *filename)
static void
plan_b (char const *filename)
{
+ int flags = O_RDONLY | binary_transput;
int ifd;
FILE *ifp;
int c;
@@ -353,7 +359,9 @@ plan_b (char const *filename)
if (instat.st_size == 0)
filename = NULL_DEVICE;
- if ((ifd = safe_open (filename, O_RDONLY | binary_transput, 0)) < 0
+ if (! follow_symlinks)
+ flags |= O_NOFOLLOW;
+ if ((ifd = safe_open (filename, flags, 0)) < 0
|| ! (ifp = fdopen (ifd, binary_transput ? "rb" : "r")))
pfatal ("Can't open file %s", quotearg (filename));
if (TMPINNAME_needs_removal)
--- a/src/util.c
+++ b/src/util.c
@@ -388,7 +388,7 @@ create_backup (char const *to, const str
try_makedirs_errno = ENOENT;
safe_unlink (bakname);
- while ((fd = safe_open (bakname, O_CREAT | O_WRONLY | O_TRUNC, 0666)) < 0)
+ while ((fd = safe_open (bakname, O_CREAT | O_EXCL | O_WRONLY | O_TRUNC, 0666)) < 0)
{
if (errno != try_makedirs_errno)
pfatal ("Can't create file %s", quotearg (bakname));
@@ -579,10 +579,13 @@ create_file (char const *file, int open_
static void
copy_to_fd (const char *from, int tofd)
{
+ int from_flags = O_RDONLY | O_BINARY;
int fromfd;
ssize_t i;
- if ((fromfd = safe_open (from, O_RDONLY | O_BINARY, 0)) < 0)
+ if (! follow_symlinks)
+ from_flags |= O_NOFOLLOW;
+ if ((fromfd = safe_open (from, from_flags, 0)) < 0)
pfatal ("Can't reopen file %s", quotearg (from));
while ((i = read (fromfd, buf, bufsize)) != 0)
{
@@ -625,6 +628,8 @@ copy_file (char const *from, char const
else
{
assert (S_ISREG (mode));
+ if (! follow_symlinks)
+ to_flags |= O_NOFOLLOW;
tofd = create_file (to, O_WRONLY | O_BINARY | to_flags, mode,
to_dir_known_to_exist);
copy_to_fd (from, tofd);
@@ -640,9 +645,12 @@ copy_file (char const *from, char const
void
append_to_file (char const *from, char const *to)
{
+ int to_flags = O_WRONLY | O_APPEND | O_BINARY;
int tofd;
- if ((tofd = safe_open (to, O_WRONLY | O_BINARY | O_APPEND, 0)) < 0)
+ if (! follow_symlinks)
+ to_flags |= O_NOFOLLOW;
+ if ((tofd = safe_open (to, to_flags, 0)) < 0)
pfatal ("Can't reopen file %s", quotearg (to));
copy_to_fd (from, tofd);
if (close (tofd) != 0)

View File

@@ -1,33 +0,0 @@
From 3fcd042d26d70856e826a42b5f93dc4854d80bf0 Mon Sep 17 00:00:00 2001
From: Andreas Gruenbacher <agruen@gnu.org>
Date: Fri, 6 Apr 2018 19:36:15 +0200
Subject: Invoke ed directly instead of using the shell
* src/pch.c (do_ed_script): Invoke ed directly instead of using a shell
command to avoid quoting vulnerabilities.
---
src/pch.c | 6 ++----
1 file changed, 2 insertions(+), 4 deletions(-)
--- a/src/pch.c
+++ b/src/pch.c
@@ -2459,9 +2459,6 @@ do_ed_script (char const *inname, char c
*outname_needs_removal = true;
copy_file (inname, outname, 0, exclusive, instat.st_mode, true);
}
- sprintf (buf, "%s %s%s", editor_program,
- verbosity == VERBOSE ? "" : "- ",
- outname);
fflush (stdout);
pid = fork();
@@ -2470,7 +2467,8 @@ do_ed_script (char const *inname, char c
else if (pid == 0)
{
dup2 (tmpfd, 0);
- execl ("/bin/sh", "sh", "-c", buf, (char *) 0);
+ assert (outname[0] != '!' && outname[0] != '-');
+ execlp (editor_program, editor_program, "-", outname, (char *) NULL);
_exit (2);
}
else

View File

@@ -205,7 +205,7 @@ endif
# Target Go
GO_ARCH_DEPENDS:=@(aarch64||arm||i386||i686||loongarch64||mips||mips64||mips64el||mipsel||powerpc64||riscv64||x86_64)
GO_ARCH_DEPENDS:=@(aarch64||arm||i386||i686||loongarch64||mips||mips64||mips64el||mipsel||riscv64||x86_64)
# ASLR/PIE

View File

@@ -8,11 +8,11 @@
include $(TOPDIR)/rules.mk
GO_VERSION_MAJOR_MINOR:=1.23
GO_VERSION_PATCH:=2
GO_VERSION_PATCH:=12
PKG_NAME:=golang
PKG_VERSION:=$(GO_VERSION_MAJOR_MINOR)$(if $(GO_VERSION_PATCH),.$(GO_VERSION_PATCH))
PKG_RELEASE:=1
PKG_RELEASE:=2
GO_SOURCE_URLS:=https://dl.google.com/go/ \
https://mirrors.ustc.edu.cn/golang/ \
@@ -20,7 +20,7 @@ GO_SOURCE_URLS:=https://dl.google.com/go/ \
PKG_SOURCE:=go$(PKG_VERSION).src.tar.gz
PKG_SOURCE_URL:=$(GO_SOURCE_URLS)
PKG_HASH:=36930162a93df417d90bd22c6e14daff4705baac2b02418edda671cdfa9cd07f
PKG_HASH:=e1cce9379a24e895714a412c7ddd157d2614d9edbe83a84449b6e1840b4f1226
PKG_MAINTAINER:=Jeffery To <jeffery.to@gmail.com>
PKG_LICENSE:=BSD-3-Clause
@@ -267,6 +267,7 @@ endef
define Host/Compile
$(call GoCompiler/Bootstrap/Make, \
$(HOST_GO_VARS) \
CC="$(HOSTCC_NOCACHE) -std=gnu17" \
)
$(call GoCompiler/Bootstrap-1.17/Make, \

View File

@@ -9,7 +9,7 @@ include $(TOPDIR)/rules.mk
PKG_NAME:=lua-cjson
PKG_VERSION:=2.1.0
PKG_RELEASE:=3
PKG_RELEASE:=5
PKG_MAINTAINER:=Dirk Chang <dirk@kooiot.com>
PKG_LICENSE:=MIT
PKG_LICENSE_FILES:=LICENSE
@@ -18,31 +18,62 @@ PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://kyne.au/~mark/software/download/
PKG_HASH:=51bc69cd55931e0cba2ceae39e9efa2483f4292da3a88a1ed470eda829f6c778
PKG_BUILD_DIR:=$(BUILD_DIR)/$(PKG_NAME)-$(BUILD_VARIANT)/$(PKG_NAME)-$(PKG_VERSION)
HOST_BUILD_DEPENDS:=lua/host
include $(INCLUDE_DIR)/host-build.mk
include $(INCLUDE_DIR)/package.mk
include $(INCLUDE_DIR)/cmake.mk
define Package/lua-cjson
define Package/lua-cjson/default
SUBMENU:=Lua
SECTION:=lang
CATEGORY:=Languages
TITLE:=Lua CJSON parser
URL:=https://github.com/mpx/lua-cjson
DEPENDS:= +lua
endef
define Package/lua-cjson/description
define Package/lua-cjson
$(Package/lua-cjson/default)
DEPENDS+=+liblua
VARIANT:=lua-51
endef
define Package/lua-cjson-lua5.3
$(Package/lua-cjson/default)
DEPENDS+=+liblua5.3
VARIANT:=lua-53
endef
define Package/lua-cjson-lua5.4
$(Package/lua-cjson/default)
DEPENDS+=+liblua5.4
VARIANT:=lua-54
endef
define Package/lua-cjson/default/description
Lua CJSON is a fast JSON encoding/parsing module for Lua.
endef
Package/lua-cjson/description = $(Package/lua-cjson/default/description)
Package/lua-cjson-lua5.3/description = $(Package/lua-cjson/default/description)
Package/lua-cjson-lua5.4/description = $(Package/lua-cjson/default/description)
CMAKE_OPTIONS += \
-DUSE_LUA=ON
CMAKE_HOST_OPTIONS += \
-DLUA_MATH_LIBRARY=m
ifeq ($(BUILD_VARIANT),lua-53)
CMAKE_OPTIONS += -DUSE_LUA53=ON
endif
ifeq ($(BUILD_VARIANT),lua-54)
CMAKE_OPTIONS += -DUSE_LUA54=ON
endif
define Package/lua-cjson/install
$(INSTALL_DIR) $(1)/usr/lib/lua
$(INSTALL_BIN) $(PKG_BUILD_DIR)/cjson.so $(1)/usr/lib/lua/
@@ -51,5 +82,17 @@ define Package/lua-cjson/install
$(INSTALL_DATA) $(PKG_BUILD_DIR)/lua/cjson/util.lua $(1)/usr/lib/lua/cjson
endef
define Package/lua-cjson-lua5.3/install
$(INSTALL_DIR) $(1)/usr/local/lib/lua/5.3
$(INSTALL_BIN) $(PKG_BUILD_DIR)/cjson.so $(1)/usr/local/lib/lua/5.3
endef
define Package/lua-cjson-lua5.4/install
$(INSTALL_DIR) $(1)/usr/local/lib/lua/5.4
$(INSTALL_BIN) $(PKG_BUILD_DIR)/cjson.so $(1)/usr/local/lib/lua/5.4
endef
$(eval $(call HostBuild))
$(eval $(call BuildPackage,lua-cjson))
$(eval $(call BuildPackage,lua-cjson-lua5.3))
$(eval $(call BuildPackage,lua-cjson-lua5.4))

View File

@@ -0,0 +1,78 @@
--- a/lua_cjson.c
+++ b/lua_cjson.c
@@ -1227,7 +1227,10 @@ static void json_process_value(lua_State
lua_pushlstring(l, token->value.string, token->string_len);
break;;
case T_NUMBER:
- lua_pushnumber(l, token->value.number);
+ if ((lua_Integer)token->value.number == token->value.number)
+ lua_pushinteger(l, (lua_Integer)token->value.number);
+ else
+ lua_pushnumber(l, token->value.number);
break;;
case T_BOOLEAN:
lua_pushboolean(l, token->value.boolean);
--- a/CMakeLists.txt
+++ b/CMakeLists.txt
@@ -15,8 +15,28 @@ if(NOT CMAKE_BUILD_TYPE)
FORCE)
endif()
-find_package(Lua51 REQUIRED)
-include_directories(${LUA_INCLUDE_DIR})
+if(USE_LUA54)
+ find_path(LUA54_INCLUDE_DIRS lua.h PATH_SUFFIXES lua5.4)
+ find_library(LUA54_LIBRARIES lua5.4)
+
+ if (NOT LUA54_INCLUDE_DIRS OR NOT LUA54_LIBRARIES)
+ message(FATAL_ERROR "Liblua 5.4 is required.")
+ endif()
+
+ include_directories(${LUA54_INCLUDE_DIRS})
+elseif(USE_LUA53)
+ find_path(LUA53_INCLUDE_DIRS lua.h PATH_SUFFIXES lua5.3)
+ find_library(LUA53_LIBRARIES lua5.3)
+
+ if (NOT LUA53_INCLUDE_DIRS OR NOT LUA53_LIBRARIES)
+ message(FATAL_ERROR "Liblua 5.3 is required.")
+ endif()
+
+ include_directories(${LUA53_INCLUDE_DIRS})
+else()
+ find_package(Lua51 REQUIRED)
+ include_directories(${LUA_INCLUDE_DIR})
+endif()
if(NOT USE_INTERNAL_FPCONV)
# Use libc number conversion routines (strtod(), sprintf())
@@ -51,7 +71,14 @@ if(NOT HAVE_ISINF)
endif()
set(_MODULE_LINK "${CMAKE_THREAD_LIBS_INIT}")
-get_filename_component(_lua_lib_dir ${LUA_LIBRARY} PATH)
+
+if(USE_LUA54)
+ get_filename_component(_lua_lib_dir ${LUA54_LIBRARIES} PATH)
+elseif(USE_LUA53)
+ get_filename_component(_lua_lib_dir ${LUA53_LIBRARIES} PATH)
+else()
+ get_filename_component(_lua_lib_dir ${LUA_LIBRARY} PATH)
+endif()
if(APPLE)
set(CMAKE_SHARED_MODULE_CREATE_C_FLAGS
@@ -65,7 +92,13 @@ if(WIN32)
# Windows sprintf()/strtod() handle NaN/inf differently. Not supported.
add_definitions(-DDISABLE_INVALID_NUMBERS)
else()
- set(_lua_module_dir "${_lua_lib_dir}/lua/5.1")
+ if(USE_LUA54)
+ set(_lua_module_dir "${_lua_lib_dir}/lua/5.4")
+ elseif(USE_LUA53)
+ set(_lua_module_dir "${_lua_lib_dir}/lua/5.3")
+ else()
+ set(_lua_module_dir "${_lua_lib_dir}/lua/5.1")
+ endif()
endif()
add_library(cjson MODULE lua_cjson.c strbuf.c ${FPCONV_SOURCES})

View File

@@ -8,13 +8,13 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=lua-curl-v3
PKG_VERSION:=0.3.13-snapshot
PKG_VERSION:=0.3.13~9f8b6dba8
PKG_RELEASE:=2
PKG_LICENSE:=MIT
PKG_LICENSE_FILES:=LICENSE
PKG_SOURCE_URL:=https://github.com/Lua-cURL/Lua-cURLv3.git
PKG_MIRROR_HASH:=f16fb26d93f7eb36a4c19ef66e1d1be23b07a41ec8342ee0394afa4f5190a98d
PKG_MIRROR_HASH:=41f9e418b203fe3bdf256e4a5517ac8dbaf5ab5026b972f603052a0c56dfcfc7
PKG_SOURCE_PROTO:=git
PKG_SOURCE_VERSION:=9f8b6dba8b5ef1b26309a571ae75cda4034279e5

View File

@@ -1,12 +1,12 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=lua-eco
PKG_VERSION:=3.6.0
PKG_VERSION:=3.10.0
PKG_RELEASE:=1
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL=https://github.com/zhaojh329/lua-eco/releases/download/v$(PKG_VERSION)
PKG_HASH:=0fdcd8eb9e93f2d1f0ff2132298faae2e13a8bfd676bd91db4d53e48917d6a74
PKG_HASH:=0205e0c20c4bbaa0829909b0722ac77df6f8a47d87669edaa8f79bdf87d15510
PKG_MAINTAINER:=Jianhui Zhao <zhaojh329@gmail.com>
PKG_LICENSE:=MIT
@@ -26,7 +26,7 @@ define Package/lua-eco
CATEGORY:=Languages
SUBMENU:=Lua
URL:=https://github.com/zhaojh329/lua-eco
DEPENDS:=+libev +liblua5.3
DEPENDS:=+libev +liblua5.4
endef
define Package/lua-eco/description
@@ -47,7 +47,9 @@ endef
Package/lua-eco-log=$(call Package/lua-eco/Module,log utils)
Package/lua-eco-base64=$(call Package/lua-eco/Module,base64)
Package/lua-eco-sha1=$(call Package/lua-eco/Module,sha1)
Package/lua-eco-sha256=$(call Package/lua-eco/Module,sha256)
Package/lua-eco-md5=$(call Package/lua-eco/Module,md5)
Package/lua-eco-hmac=$(call Package/lua-eco/Module,hmac)
Package/lua-eco-socket=$(call Package/lua-eco/Module,socket)
Package/lua-eco-dns=$(call Package/lua-eco/Module,dns,+lua-eco-socket)
Package/lua-eco-ssl=$(call Package/lua-eco/Module,ssl,\
@@ -63,6 +65,7 @@ Package/lua-eco-ip=$(call Package/lua-eco/Module,ip utils,+lua-eco-netlink)
Package/lua-eco-nl80211=$(call Package/lua-eco/Module,nl80211,+lua-eco-netlink)
Package/lua-eco-ssh=$(call Package/lua-eco/Module,ssh,+lua-eco-socket +libssh2)
Package/lua-eco-packet=$(call Package/lua-eco/Module,packet,+lua-eco-nl80211)
Package/lua-eco-uci=$(call Package/lua-eco/Module,uci,+libuci)
define Package/lua-eco-ssl/config
choice
@@ -95,113 +98,130 @@ ifneq ($(CONFIG_PACKAGE_lua-eco-ssl),)
endif
define Package/lua-eco/install
$(INSTALL_DIR) $(1)/usr/bin $(1)/usr/local/lib/lua/5.3/eco/core \
$(1)/usr/lib $(1)/usr/local/lib/lua/5.3/eco/encoding
$(INSTALL_DIR) $(1)/usr/bin $(1)/usr/local/lib/lua/5.4/eco/core \
$(1)/usr/lib $(1)/usr/local/lib/lua/5.4/eco/encoding
$(INSTALL_BIN) $(PKG_BUILD_DIR)/eco $(1)/usr/bin
$(INSTALL_BIN) $(PKG_BUILD_DIR)/libeco.so $(1)/usr/lib
$(INSTALL_BIN) $(PKG_BUILD_DIR)/bufio.so $(1)/usr/local/lib/lua/5.3/eco
$(INSTALL_DATA) $(PKG_BUILD_DIR)/hex.lua $(1)/usr/local/lib/lua/5.3/eco/encoding
$(INSTALL_BIN) $(PKG_BUILD_DIR)/{time,bufio,sys,file}.so $(1)/usr/local/lib/lua/5.3/eco/core
$(INSTALL_DATA) $(PKG_BUILD_DIR)/{time,sys,file,sync}.lua $(1)/usr/local/lib/lua/5.3/eco
$(CP) $(PKG_BUILD_DIR)/libeco.so* $(1)/usr/lib
$(INSTALL_BIN) $(PKG_BUILD_DIR)/bufio.so $(1)/usr/local/lib/lua/5.4/eco
$(INSTALL_DATA) $(PKG_BUILD_DIR)/hex.lua $(1)/usr/local/lib/lua/5.4/eco/encoding
$(INSTALL_BIN) $(PKG_BUILD_DIR)/{time,bufio,sys,file}.so $(1)/usr/local/lib/lua/5.4/eco/core
$(INSTALL_DATA) $(PKG_BUILD_DIR)/{time,sys,file,sync,channel}.lua $(1)/usr/local/lib/lua/5.4/eco
endef
define Package/lua-eco-log/install
$(INSTALL_DIR) $(1)/usr/local/lib/lua/5.3/eco
$(INSTALL_BIN) $(PKG_BUILD_DIR)/log.so $(1)/usr/local/lib/lua/5.3/eco
$(INSTALL_DIR) $(1)/usr/local/lib/lua/5.4/eco
$(INSTALL_BIN) $(PKG_BUILD_DIR)/log.so $(1)/usr/local/lib/lua/5.4/eco
endef
define Package/lua-eco-base64/install
$(INSTALL_DIR) $(1)/usr/local/lib/lua/5.3/eco/encoding
$(INSTALL_BIN) $(PKG_BUILD_DIR)/base64.so $(1)/usr/local/lib/lua/5.3/eco/encoding
$(INSTALL_DIR) $(1)/usr/local/lib/lua/5.4/eco/encoding
$(INSTALL_BIN) $(PKG_BUILD_DIR)/base64.so $(1)/usr/local/lib/lua/5.4/eco/encoding
endef
define Package/lua-eco-sha1/install
$(INSTALL_DIR) $(1)/usr/local/lib/lua/5.3/eco/hash
$(INSTALL_BIN) $(PKG_BUILD_DIR)/sha1.so $(1)/usr/local/lib/lua/5.3/eco/hash
$(INSTALL_DIR) $(1)/usr/local/lib/lua/5.4/eco/hash
$(INSTALL_BIN) $(PKG_BUILD_DIR)/sha1.so $(1)/usr/local/lib/lua/5.4/eco/hash
endef
define Package/lua-eco-sha256/install
$(INSTALL_DIR) $(1)/usr/local/lib/lua/5.4/eco/hash
$(INSTALL_BIN) $(PKG_BUILD_DIR)/sha256.so $(1)/usr/local/lib/lua/5.4/eco/hash
endef
define Package/lua-eco-md5/install
$(INSTALL_DIR) $(1)/usr/local/lib/lua/5.3/eco/hash
$(INSTALL_BIN) $(PKG_BUILD_DIR)/md5.so $(1)/usr/local/lib/lua/5.3/eco/hash
$(INSTALL_DIR) $(1)/usr/local/lib/lua/5.4/eco/hash
$(INSTALL_BIN) $(PKG_BUILD_DIR)/md5.so $(1)/usr/local/lib/lua/5.4/eco/hash
endef
define Package/lua-eco-hmac/install
$(INSTALL_DIR) $(1)/usr/local/lib/lua/5.4/eco/hash
$(INSTALL_BIN) $(PKG_BUILD_DIR)/hmac.lua $(1)/usr/local/lib/lua/5.4/eco/hash
endef
define Package/lua-eco-socket/install
$(INSTALL_DIR) $(1)/usr/local/lib/lua/5.3/eco/core
$(INSTALL_DATA) $(PKG_BUILD_DIR)/socket.lua $(1)/usr/local/lib/lua/5.3/eco
$(INSTALL_BIN) $(PKG_BUILD_DIR)/socket.so $(1)/usr/local/lib/lua/5.3/eco/core
$(INSTALL_DIR) $(1)/usr/local/lib/lua/5.4/eco/core
$(INSTALL_DATA) $(PKG_BUILD_DIR)/socket.lua $(1)/usr/local/lib/lua/5.4/eco
$(INSTALL_BIN) $(PKG_BUILD_DIR)/socket.so $(1)/usr/local/lib/lua/5.4/eco/core
endef
define Package/lua-eco-dns/install
$(INSTALL_DIR) $(1)/usr/local/lib/lua/5.3/eco
$(INSTALL_DATA) $(PKG_BUILD_DIR)/dns.lua $(1)/usr/local/lib/lua/5.3/eco
$(INSTALL_DIR) $(1)/usr/local/lib/lua/5.4/eco
$(INSTALL_DATA) $(PKG_BUILD_DIR)/dns.lua $(1)/usr/local/lib/lua/5.4/eco
endef
define Package/lua-eco-ssl/install
$(INSTALL_DIR) $(1)/usr/local/lib/lua/5.3/eco/core
$(INSTALL_DATA) $(PKG_BUILD_DIR)/ssl.lua $(1)/usr/local/lib/lua/5.3/eco
$(INSTALL_BIN) $(PKG_BUILD_DIR)/ssl.so $(1)/usr/local/lib/lua/5.3/eco/core
$(INSTALL_DIR) $(1)/usr/local/lib/lua/5.4/eco/core
$(INSTALL_DATA) $(PKG_BUILD_DIR)/ssl.lua $(1)/usr/local/lib/lua/5.4/eco
$(INSTALL_BIN) $(PKG_BUILD_DIR)/ssl.so $(1)/usr/local/lib/lua/5.4/eco/core
endef
define Package/lua-eco-ubus/install
$(INSTALL_DIR) $(1)/usr/local/lib/lua/5.3/eco/core
$(INSTALL_DATA) $(PKG_BUILD_DIR)/ubus.lua $(1)/usr/local/lib/lua/5.3/eco
$(INSTALL_BIN) $(PKG_BUILD_DIR)/ubus.so $(1)/usr/local/lib/lua/5.3/eco/core
$(INSTALL_DIR) $(1)/usr/local/lib/lua/5.4/eco/core
$(INSTALL_DATA) $(PKG_BUILD_DIR)/ubus.lua $(1)/usr/local/lib/lua/5.4/eco
$(INSTALL_BIN) $(PKG_BUILD_DIR)/ubus.so $(1)/usr/local/lib/lua/5.4/eco/core
endef
define Package/lua-eco-http/install
$(INSTALL_DIR) $(1)/usr/local/lib/lua/5.3/eco/http
$(INSTALL_DATA) $(PKG_BUILD_DIR)/http/*.lua $(1)/usr/local/lib/lua/5.3/eco/http
$(INSTALL_DIR) $(1)/usr/local/lib/lua/5.4/eco/http
$(INSTALL_DATA) $(PKG_BUILD_DIR)/http/*.lua $(1)/usr/local/lib/lua/5.4/eco/http
endef
define Package/lua-eco-mqtt/install
$(INSTALL_DIR) $(1)/usr/local/lib/lua/5.3/eco
$(INSTALL_DATA) $(PKG_BUILD_DIR)/mqtt.lua $(1)/usr/local/lib/lua/5.3/eco
$(INSTALL_DIR) $(1)/usr/local/lib/lua/5.4/eco
$(INSTALL_DATA) $(PKG_BUILD_DIR)/mqtt.lua $(1)/usr/local/lib/lua/5.4/eco
endef
define Package/lua-eco-websocket/install
$(INSTALL_DIR) $(1)/usr/local/lib/lua/5.3/eco
$(INSTALL_DATA) $(PKG_BUILD_DIR)/websocket.lua $(1)/usr/local/lib/lua/5.3/eco
$(INSTALL_DIR) $(1)/usr/local/lib/lua/5.4/eco
$(INSTALL_DATA) $(PKG_BUILD_DIR)/websocket.lua $(1)/usr/local/lib/lua/5.4/eco
endef
define Package/lua-eco-termios/install
$(INSTALL_DIR) $(1)/usr/local/lib/lua/5.3/eco
$(INSTALL_BIN) $(PKG_BUILD_DIR)/termios.so $(1)/usr/local/lib/lua/5.3/eco
$(INSTALL_DIR) $(1)/usr/local/lib/lua/5.4/eco
$(INSTALL_BIN) $(PKG_BUILD_DIR)/termios.so $(1)/usr/local/lib/lua/5.4/eco
endef
define Package/lua-eco-netlink/install
$(INSTALL_DIR) $(1)/usr/local/lib/lua/5.3/eco/core
$(INSTALL_DATA) $(PKG_BUILD_DIR)/{nl,genl}.lua $(1)/usr/local/lib/lua/5.3/eco
$(INSTALL_BIN) $(PKG_BUILD_DIR)/{nl,genl}.so $(1)/usr/local/lib/lua/5.3/eco/core
$(INSTALL_BIN) $(PKG_BUILD_DIR)/rtnl.so $(1)/usr/local/lib/lua/5.3/eco
$(INSTALL_DIR) $(1)/usr/local/lib/lua/5.4/eco/core
$(INSTALL_DATA) $(PKG_BUILD_DIR)/{nl,genl}.lua $(1)/usr/local/lib/lua/5.4/eco
$(INSTALL_BIN) $(PKG_BUILD_DIR)/{nl,genl}.so $(1)/usr/local/lib/lua/5.4/eco/core
$(INSTALL_BIN) $(PKG_BUILD_DIR)/rtnl.so $(1)/usr/local/lib/lua/5.4/eco
endef
define Package/lua-eco-ip/install
$(INSTALL_DIR) $(1)/usr/local/lib/lua/5.3/eco
$(INSTALL_DATA) $(PKG_BUILD_DIR)/ip.lua $(1)/usr/local/lib/lua/5.3/eco
$(INSTALL_DIR) $(1)/usr/local/lib/lua/5.4/eco
$(INSTALL_DATA) $(PKG_BUILD_DIR)/ip.lua $(1)/usr/local/lib/lua/5.4/eco
endef
define Package/lua-eco-nl80211/install
$(INSTALL_DIR) $(1)/usr/local/lib/lua/5.3/eco/core
$(INSTALL_DATA) $(PKG_BUILD_DIR)/nl80211.lua $(1)/usr/local/lib/lua/5.3/eco
$(INSTALL_BIN) $(PKG_BUILD_DIR)/nl80211.so $(1)/usr/local/lib/lua/5.3/eco/core
$(INSTALL_DIR) $(1)/usr/local/lib/lua/5.4/eco/core
$(INSTALL_DATA) $(PKG_BUILD_DIR)/nl80211.lua $(1)/usr/local/lib/lua/5.4/eco
$(INSTALL_BIN) $(PKG_BUILD_DIR)/nl80211.so $(1)/usr/local/lib/lua/5.4/eco/core
endef
define Package/lua-eco-ssh/install
$(INSTALL_DIR) $(1)/usr/local/lib/lua/5.3/eco/core
$(INSTALL_DATA) $(PKG_BUILD_DIR)/ssh.lua $(1)/usr/local/lib/lua/5.3/eco
$(INSTALL_BIN) $(PKG_BUILD_DIR)/ssh.so $(1)/usr/local/lib/lua/5.3/eco/core
$(INSTALL_DIR) $(1)/usr/local/lib/lua/5.4/eco/core
$(INSTALL_DATA) $(PKG_BUILD_DIR)/ssh.lua $(1)/usr/local/lib/lua/5.4/eco
$(INSTALL_BIN) $(PKG_BUILD_DIR)/ssh.so $(1)/usr/local/lib/lua/5.4/eco/core
endef
define Package/lua-eco-packet/install
$(INSTALL_DIR) $(1)/usr/local/lib/lua/5.3/eco
$(INSTALL_DATA) $(PKG_BUILD_DIR)/packet.lua $(1)/usr/local/lib/lua/5.3/eco
$(INSTALL_DIR) $(1)/usr/local/lib/lua/5.4/eco
$(INSTALL_DATA) $(PKG_BUILD_DIR)/packet.lua $(1)/usr/local/lib/lua/5.4/eco
endef
define Package/lua-eco-uci/install
$(INSTALL_DIR) $(1)/usr/local/lib/lua/5.4/eco
$(INSTALL_DATA) $(PKG_BUILD_DIR)/uci.so $(1)/usr/local/lib/lua/5.4/eco
endef
$(eval $(call BuildPackage,lua-eco))
$(eval $(call BuildPackage,lua-eco-log))
$(eval $(call BuildPackage,lua-eco-base64))
$(eval $(call BuildPackage,lua-eco-sha1))
$(eval $(call BuildPackage,lua-eco-sha256))
$(eval $(call BuildPackage,lua-eco-md5))
$(eval $(call BuildPackage,lua-eco-hmac))
$(eval $(call BuildPackage,lua-eco-socket))
$(eval $(call BuildPackage,lua-eco-dns))
$(eval $(call BuildPackage,lua-eco-ssl))
@@ -215,3 +235,4 @@ $(eval $(call BuildPackage,lua-eco-ip))
$(eval $(call BuildPackage,lua-eco-nl80211))
$(eval $(call BuildPackage,lua-eco-ssh))
$(eval $(call BuildPackage,lua-eco-packet))
$(eval $(call BuildPackage,lua-eco-uci))

View File

@@ -8,12 +8,13 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=lua-openssl
PKG_SOURCE_VERSION:=0.8.5-1
PKG_VERSION:=$(subst -,.,$(PKG_SOURCE_VERSION))
PKG_RELEASE:=1
PKG_SOURCE_PROTO:=git
PKG_SOURCE_URL:=https://github.com/zhaozg/lua-openssl.git
PKG_SOURCE_VERSION:=0.8.5-1
PKG_MIRROR_HASH:=3187a2342b01b88dfac5502a66902f4ef74695bcb512cc86cc5105e608202dfe
PKG_MIRROR_HASH:=415decabf303095a487f3882fd1f835b20e57c7c08e86a14d124c21131524f50
PKG_MAINTAINER:=Amnon Paz <pazamnon@gmail.com>
PKG_LICENSE:=MIT

View File

@@ -8,13 +8,13 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=lua
PKG_VERSION:=5.4.6
PKG_VERSION:=5.4.7
PKG_RELEASE:=1
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://www.lua.org/ftp/ \
https://www.tecgraf.puc-rio.br/lua/ftp/
PKG_HASH:=7d5ea1b9cb6aa0b59ca3dde1c6adcb57ef83a1ba8e5432c0ecd06bf439b3ad88
PKG_HASH:=9fbf5e28ef86c69858f6d3d34eccc32e911c1a28b4120ff3e84aaa70cfbf1e30
PKG_BUILD_PARALLEL:=1
PKG_MAINTAINER:=Christian Marangi <ansuelsmth@gmail.com>

View File

@@ -33,7 +33,7 @@ Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
# Lua version and release.
V= 5.4
@@ -52,7 +52,7 @@ R= $V.6
@@ -52,7 +52,7 @@ R= $V.7
all: $(PLAT)
$(PLATS) help test clean:

View File

@@ -33,7 +33,7 @@ Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
# Lua version and release.
V= 5.4
@@ -52,7 +52,7 @@ R= $V.6
@@ -52,7 +52,7 @@ R= $V.7
all: $(PLAT)
$(PLATS) help test clean:

View File

@@ -43,7 +43,7 @@
--- a/src/lundump.h
+++ b/src/lundump.h
@@ -30,7 +30,7 @@
@@ -29,7 +29,7 @@
LUAI_FUNC LClosure* luaU_undump (lua_State* L, ZIO* Z, const char* name);
/* dump one chunk; from ldump.c */

View File

@@ -1,14 +1,14 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=luajit2
PKG_SOURCE_DATE:=2024-08-15
PKG_SOURCE_DATE:=2025-05-29
PKG_VERSION:=2.1.$(subst -,.,$(PKG_SOURCE_DATE))
PKG_RELEASE:=1
PKG_SOURCE_PROTO:=git
PKG_SOURCE_URL:=https://github.com/openresty/luajit2
PKG_SOURCE_VERSION:=33d6b04681d2f079a6d013988a426a841c52e29e
PKG_MIRROR_HASH:=cb6687203153fd6b2f730e899728a911f8b7094f296cc11ca0f2b20ce849f952
PKG_SOURCE_VERSION:=afc74313c6f919f713e2a25003cf0066852bb24a
PKG_MIRROR_HASH:=cd3048e818c14e0f7b904de0bb3767d0e2e9c556096ed06401ad79ccb7defcda
PKG_MAINTAINER:=Javier Marcet <javier@marcet.info>
PKG_LICENSE:=MIT
@@ -47,7 +47,7 @@ define Build/Compile
$(MAKE) $(PKG_JOBS) -C $(PKG_BUILD_DIR) \
HOST_CC="$(HOSTCC) $(HOST_CFLAGS) $(HOST_BITS)" \
CROSS="$(TARGET_CROSS)" \
DPREFIX=$(PKG_INSTALL_DIR)/usr \
DESTDIR=$(PKG_INSTALL_DIR) \
PREFIX=/usr \
TARGET_SYS=Linux \
TARGET_CFLAGS="$(TARGET_CFLAGS)" \
@@ -55,7 +55,7 @@ define Build/Compile
$(RM) -rf $(PKG_INSTALL_DIR)
mkdir -p $(PKG_INSTALL_DIR)
$(MAKE) -C $(PKG_BUILD_DIR) \
DPREFIX=$(PKG_INSTALL_DIR)/usr \
DESTDIR=$(PKG_INSTALL_DIR) \
PREFIX=/usr \
TARGET_SYS=Linux \
install

View File

@@ -1,6 +1,6 @@
--- a/src/luaconf.h
+++ b/src/luaconf.h
@@ -35,8 +35,8 @@
@@ -34,8 +34,8 @@
#ifndef LUA_LMULTILIB
#define LUA_LMULTILIB "lib"
#endif

View File

@@ -1,13 +1,16 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=luv
PKG_VERSION:=1.40.0-0
PKG_REAL_VERSION:=1.40.0-0
PKG_VERSION:=$(subst -,.,$(PKG_REAL_VERSION))
PKG_RELEASE:=2
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://github.com/luvit/luv/releases/download/$(PKG_VERSION)
PKG_SOURCE:=$(PKG_NAME)-$(PKG_REAL_VERSION).tar.gz
PKG_SOURCE_URL:=https://github.com/luvit/luv/releases/download/$(PKG_REAL_VERSION)
PKG_HASH:=24473a081c3928eec2a352369cbafda97059574f4a4276861274473e7c7d17a0
PKG_BUILD_DIR :=$(BUILD_DIR)/$(PKG_NAME)-$(PKG_REAL_VERSION)
PKG_MAINTAINER:=Morteza Milani <milani@pichak.co>
PKG_LICENSE:=Apache-2.0
PKG_LICENSE_FILES:=LICENSE

View File

@@ -8,12 +8,12 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=node
PKG_VERSION:=20.18.0
PKG_VERSION:=20.18.3
PKG_RELEASE:=1
PKG_SOURCE:=$(PKG_NAME)-v$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://nodejs.org/dist/v$(PKG_VERSION)
PKG_HASH:=c0819f8fc5038584d24c22002aeffd23f2d4a6fd6b337b30c502cbe4a659720c
PKG_HASH:=eba088fa562735140b283c7bb33f53e026ccd5febe68c52c5737ef6e577ec874
PKG_BUILD_DIR:=$(BUILD_DIR)/$(PKG_NAME)-v$(PKG_VERSION)
HOST_BUILD_DIR:=$(BUILD_DIR_HOST)/$(PKG_NAME)-v$(PKG_VERSION)

View File

@@ -13,7 +13,7 @@ Forwarded: https://github.com/nodejs/node/issues/33816
//
// Permission is hereby granted, free of charge, to any person obtaining a
// copy of this software and associated documentation files (the
@@ -1339,13 +1340,6 @@ function lookupAndConnect(self, options)
@@ -1343,13 +1344,6 @@ function lookupAndConnect(self, options)
hints: options.hints || 0,
};

View File

@@ -5,12 +5,12 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=perl-ack
PKG_VERSION:=3.7.0
PKG_VERSION:=3.8.2
PKG_RELEASE:=1
PKG_SOURCE_URL:=http://www.cpan.org/authors/id/P/PE/PETDANCE/
PKG_SOURCE:=ack-v$(PKG_VERSION).tar.gz
PKG_HASH:=ea7caa14f757de083310ed2cba298661ddcca5dee06ec8f18043ea625a79df20
PKG_HASH:=a5239f5a2c12e0c7b4e432ffd7e936feef945a9621a41591c77d3b0cf458560b
PKG_LICENSE:=Artistic-2.0
PKG_LICENSE_FILE:=LICENSE.md

View File

@@ -8,7 +8,7 @@ endif
include $(PERL_INCLUDE_DIR)/perlver.mk
ifneq ($(PKG_NAME),perl)
PKG_VERSION:=$(PKG_VERSION)+perl$(PERL_VERSION2)
PKG_VERSION:=$(PKG_VERSION).$(PERL_VERSION2)
endif
PERL_VERSION:=$(PERL_VERSION2)

View File

@@ -6,7 +6,7 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=php
PKG_VERSION:=8.3.12
PKG_VERSION:=8.3.27
PKG_RELEASE:=1
PKG_MAINTAINER:=Michael Heimpold <mhei@heimpold.de>
@@ -16,7 +16,7 @@ PKG_CPE_ID:=cpe:/a:php:php
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.xz
PKG_SOURCE_URL:=https://www.php.net/distributions/
PKG_HASH:=f774e28633e26fc8c5197f4dae58ec9e3ff87d1b4311cbc61ab05a7ad24bd131
PKG_HASH:=c15a09a9d199437144ecfef7d712ec4ca5c6820cf34acc24cc8489dd0cee41ba
PKG_BUILD_PARALLEL:=1
PKG_BUILD_FLAGS:=no-mips16

View File

@@ -15,7 +15,7 @@ To be used in tandem with use_embedded_timezonedb.patch and use_embedded_timezon
--- a/ext/date/php_date.c
+++ b/ext/date/php_date.c
@@ -567,6 +567,23 @@ static const char* guess_timezone(const
@@ -568,6 +568,23 @@ static const char* guess_timezone(const
} else if (*DATEG(default_timezone)) {
return DATEG(default_timezone);
}

View File

@@ -9,7 +9,7 @@ Make generated php_config.h constant across rebuilds.
--- a/configure.ac
+++ b/configure.ac
@@ -1507,7 +1507,7 @@ PHP_REMOVE_USR_LIB(LDFLAGS)
@@ -1501,7 +1501,7 @@ PHP_REMOVE_USR_LIB(LDFLAGS)
EXTRA_LDFLAGS="$EXTRA_LDFLAGS $PHP_LDFLAGS"
EXTRA_LDFLAGS_PROGRAM="$EXTRA_LDFLAGS_PROGRAM $PHP_LDFLAGS"

View File

@@ -11,7 +11,7 @@
--- a/configure.ac
+++ b/configure.ac
@@ -1703,13 +1703,13 @@ CFLAGS_CLEAN="$CFLAGS \$(PROF_FLAGS)"
@@ -1697,13 +1697,13 @@ CFLAGS_CLEAN="$CFLAGS \$(PROF_FLAGS)"
CFLAGS="\$(CFLAGS_CLEAN) $standard_libtool_flag"
CXXFLAGS="$CXXFLAGS $standard_libtool_flag \$(PROF_FLAGS)"

View File

@@ -8,11 +8,11 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=django
PKG_VERSION:=5.1
PKG_VERSION:=5.1.14
PKG_RELEASE:=1
PYPI_NAME:=Django
PKG_HASH:=848a5980e8efb76eea70872fb0e4bc5e371619c70fffbe48e3e1b50b2c09455d
PKG_HASH:=b98409fb31fdd6e8c3a6ba2eef3415cc5c0020057b43b21ba7af6eff5f014831
PKG_MAINTAINER:=Alexandru Ardelean <ardeleanalex@gmail.com>, Peter Stadler <peter.stadler@student.uibk.ac.at>
PKG_LICENSE:=BSD-3-Clause

View File

@@ -12,9 +12,9 @@ PKG_RELEASE:=1
PKG_SOURCE_PROTO:=git
PKG_SOURCE_URL:=https://github.com/micropython/micropython-lib.git
PKG_SOURCE_VERSION:=d8e163bb5f3ef45e71e145c27bc4f207beaad70f
PKG_SOURCE_DATE:=20231031
PKG_MIRROR_HASH:=311651a719ae645d3e40c3c8ebf706fa2e964ac1455d84bee73606ec6d7c13a2
PKG_SOURCE_VERSION:=68e3e07bc7ab63931cead3854b2a114e9a084248
PKG_SOURCE_DATE:=20241017
PKG_MIRROR_HASH:=7ed2c1b4a5af1b00364e2e017b2b416865713dc82d94737a3ea605f9aeaed54a
PKG_MAINTAINER:=Jeffery To <jeffery.to@gmail.com>
PKG_LICENSE:=MIT Python-2.0.1

View File

@@ -1,7 +1,7 @@
--- a/tools/build.py
+++ b/tools/build.py
@@ -284,7 +284,7 @@ def _update_index_package_metadata(index
index_package_json["versions"][v].append(metadata.version)
@@ -289,7 +289,7 @@ def _update_index_package_metadata(index
index_package_json["path"] = package_path
-def build(output_path, hash_prefix_len, mpy_cross_path):
@@ -9,16 +9,19 @@
import manifestfile
import mpy_cross
@@ -310,7 +310,7 @@ def build(output_path, hash_prefix_len,
@@ -315,7 +315,10 @@ def build(output_path, hash_prefix_len,
# For now, don't process unix-ffi. In the future this can be extended to
# allow a way to request unix-ffi packages via mip.
- lib_dirs = ["micropython", "python-stdlib", "python-ecosys"]
+ lib_dirs = ["unix-ffi"] if unix_ffi else ["micropython", "python-stdlib", "python-ecosys"]
+
+ if unix_ffi:
+ manifestfile.BASE_LIBRARY_NAMES = ("unix-ffi",) + manifestfile.BASE_LIBRARY_NAMES
mpy_version, _mpy_sub_version = mpy_cross.mpy_version(mpy_cross=mpy_cross_path)
mpy_version = str(mpy_version)
@@ -438,6 +438,7 @@ def main():
@@ -446,6 +449,7 @@ def main():
cmd_parser = argparse.ArgumentParser(description="Compile micropython-lib for serving to mip.")
cmd_parser.add_argument("--output", required=True, help="output directory")
@@ -26,7 +29,7 @@
cmd_parser.add_argument("--hash-prefix", default=8, type=int, help="hash prefix length")
cmd_parser.add_argument("--mpy-cross", default=None, help="optional path to mpy-cross binary")
cmd_parser.add_argument("--micropython", default=None, help="path to micropython repo")
@@ -447,7 +448,7 @@ def main():
@@ -455,7 +459,7 @@ def main():
sys.path.append(os.path.join(args.micropython, "tools")) # for manifestfile
sys.path.append(os.path.join(args.micropython, "mpy-cross")) # for mpy_cross

View File

@@ -1,53 +0,0 @@
From dcce62dd525cf0f8e572e56a8990aea7ec2f0ade Mon Sep 17 00:00:00 2001
From: Jeffery To <jeffery.to@gmail.com>
Date: Tue, 30 May 2023 23:47:59 +0800
Subject: [PATCH] unix-ffi/os-path: Add unix-ffi version of `os-path` package.
This package reuses the code from the python-stdlib version of `os-path`
but requires the unix-ffi version of `os`.
This also updates `glob` to require this version of `os-path`.
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
---
unix-ffi/glob/manifest.py | 2 +-
unix-ffi/os-path/manifest.py | 6 ++++++
unix-ffi/os/os/__init__.py | 6 ++++++
3 files changed, 13 insertions(+), 1 deletion(-)
create mode 100644 unix-ffi/os-path/manifest.py
--- a/unix-ffi/glob/manifest.py
+++ b/unix-ffi/glob/manifest.py
@@ -1,7 +1,7 @@
metadata(version="0.5.2")
require("os", unix_ffi=True)
-require("os-path")
+require("os-path", unix_ffi=True)
require("re", unix_ffi=True)
require("fnmatch")
--- /dev/null
+++ b/unix-ffi/os-path/manifest.py
@@ -0,0 +1,6 @@
+metadata(version="0.1.4")
+
+# Originally written by Paul Sokolovsky.
+
+require("os", unix_ffi=True)
+package("os", base_path="../../python-stdlib/os-path")
--- a/unix-ffi/os/os/__init__.py
+++ b/unix-ffi/os/os/__init__.py
@@ -5,6 +5,12 @@ import stat as stat_
import ffilib
import uos
+# Provide optional dependencies (which may be installed separately).
+try:
+ from . import path
+except ImportError:
+ pass
+
R_OK = const(4)
W_OK = const(2)
X_OK = const(1)

View File

@@ -1,37 +0,0 @@
From 2e7bfd08a306bd9e80b22097ef8fe66e1dd85054 Mon Sep 17 00:00:00 2001
From: Jeffery To <jeffery.to@gmail.com>
Date: Wed, 31 May 2023 00:00:11 +0800
Subject: [PATCH] unix-ffi/uu: Add unix-ffi version of `uu` package.
This package reuses the code from the python-stdlib version of `uu` but
requires the unix-ffi version of `os-path`.
This also updates `email.message` to require this version of `uu`.
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
---
unix-ffi/email.message/manifest.py | 2 +-
unix-ffi/uu/manifest.py | 6 ++++++
2 files changed, 7 insertions(+), 1 deletion(-)
create mode 100644 unix-ffi/uu/manifest.py
--- a/unix-ffi/email.message/manifest.py
+++ b/unix-ffi/email.message/manifest.py
@@ -1,7 +1,7 @@
metadata(version="0.5.3")
require("re", unix_ffi=True)
-require("uu")
+require("uu", unix_ffi=True)
require("base64")
require("binascii")
require("email.utils", unix_ffi=True)
--- /dev/null
+++ b/unix-ffi/uu/manifest.py
@@ -0,0 +1,6 @@
+metadata(version="0.5.1")
+
+require("binascii")
+require("os-path", unix_ffi=True)
+
+module("uu.py", base_path="../../python-stdlib/uu")

View File

@@ -6,11 +6,11 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=numpy
PKG_VERSION:=2.1.0
PKG_VERSION:=2.2.1
PKG_RELEASE:=1
PYPI_NAME:=$(PKG_NAME)
PKG_HASH:=7dc90da0081f7e1da49ec4e398ede6a8e9cc4f5ebe5f9e06b443ed889ee9aaa2
PKG_HASH:=45681fd7128c8ad1c379f0ca0776a8b0c6583d2f69889ddac01559dfe4390918
PKG_MAINTAINER:=Alexandru Ardelean <ardeleanalex@gmail.com>
@@ -27,9 +27,43 @@ PKG_BUILD_DEPENDS:=python-cython/host pyproject-metadata/host
PYTHON3_PKG_BUILD_VARS:= \
$(if $(CONFIG_NUMPY_OPENBLAS_SUPPORT),,NPY_BLAS_ORDER= NPY_LAPACK_ORDER= )
MESON_USE_STAGING_PYTHON:=1
include ../pypi.mk
include $(INCLUDE_DIR)/package.mk
include ../python3-package.mk
include $(INCLUDE_DIR)/meson.mk
MESON_ARGS+= \
-Ddisable-optimization=true \
-Dcpu-baseline=min
# Override 'Meson', to use numpy's vendored meson
define Meson
$(call Python3/Run,,$(PKG_BUILD_DIR)/vendored-meson/meson/meson.py $(1),$(2))
endef
define Meson/CreateCrossFile
$(STAGING_DIR_HOST)/bin/sed \
-e "s|@CC@|$(foreach BIN,$(TARGET_CC),'$(BIN)',)|" \
-e "s|@CXX@|$(foreach BIN,$(TARGET_CXX),'$(BIN)',)|" \
-e "s|@LD@|$(foreach FLAG,$(TARGET_LINKER),'$(FLAG)',)|" \
-e "s|@AR@|$(TARGET_AR)|" \
-e "s|@STRIP@|$(TARGET_CROSS)strip|" \
-e "s|@NM@|$(TARGET_NM)|" \
-e "s|@PKGCONFIG@|$(PKG_CONFIG)|" \
-e "s|@CMAKE@|$(STAGING_DIR_HOST)/bin/cmake|" \
-e "s|@PYTHON@|$(PYTHON_BIN)|" \
-e "s|@CFLAGS@|$(foreach FLAG,$(TARGET_CFLAGS) $(EXTRA_CFLAGS) $(TARGET_CPPFLAGS) $(EXTRA_CPPFLAGS),'$(FLAG)',)|" \
-e "s|@CXXFLAGS@|$(foreach FLAG,$(TARGET_CXXFLAGS) $(EXTRA_CXXFLAGS) $(TARGET_CPPFLAGS) $(EXTRA_CPPFLAGS),'$(FLAG)',)|" \
-e "s|@LDFLAGS@|$(foreach FLAG,$(TARGET_LDFLAGS) $(EXTRA_LDFLAGS),'$(FLAG)',)|" \
-e "s|@ARCH@|$(MESON_ARCH)|" \
-e "s|@CPU@|$(MESON_CPU)|" \
-e "s|@ENDIAN@|$(if $(CONFIG_BIG_ENDIAN),big,little)|" \
< files/openwrt-cross.txt.in \
> $(1)
echo "longdouble_format = '$(if $(CONFIG_BIG_ENDIAN),IEEE_DOUBLE_BE,IEEE_DOUBLE_LE)'" >> $(1)
endef
define Package/python3-numpy
SUBMENU:=Python
@@ -54,12 +88,6 @@ config NUMPY_OPENBLAS_SUPPORT
endmenu
endef
ifeq ($(ARCH),x86_64)
# FIXME: temporary fix for x86_64 with GCC 13 + musl;
# numpy does not detect this compiler extension, so we just enable it
TARGET_CFLAGS += -mavx512f
endif
define Build/Prepare/numpy-sitecfg
echo "[DEFAULT]" > $(PKG_BUILD_DIR)/site.cfg
echo "library_dirs = $(STAGING_DIR)/usr/lib" >> $(PKG_BUILD_DIR)/site.cfg

View File

@@ -0,0 +1,27 @@
[binaries]
c = [@CC@]
c_ld = [@LD@]
cpp = [@CXX@]
cpp_ld = [@LD@]
ar = '@AR@'
strip = '@STRIP@'
nm = '@NM@'
pkg-config = '@PKGCONFIG@'
cmake = '@CMAKE@'
python = '@PYTHON@'
[built-in options]
c_args = [@CFLAGS@]
c_link_args = [@LDFLAGS@]
cpp_args = [@CXXFLAGS@]
cpp_link_args = [@LDFLAGS@]
prefix = '/usr'
[host_machine]
system = 'linux'
cpu_family = '@ARCH@'
cpu = '@CPU@'
endian = '@ENDIAN@'
[properties]
needs_exe_wrapper = true

View File

@@ -1,6 +1,6 @@
--- a/numpy/distutils/system_info.py
+++ b/numpy/distutils/system_info.py
@@ -404,7 +404,7 @@ def get_standard_file(fname):
@@ -403,7 +403,7 @@ def get_standard_file(fname):
pass
else:
user_file = os.path.join(f, fname)

View File

@@ -1,34 +0,0 @@
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -1,7 +1,7 @@
[build-system]
-build-backend = "mesonpy"
+#build-backend = "mesonpy"
requires = [
- "meson-python>=0.15.0",
+# "meson-python>=0.15.0",
"Cython>=3.0.6", # keep in sync with version check in meson.build
]
@@ -181,8 +181,8 @@ select = "*-win32"
config-settings = "setup-args=--vsenv setup-args=-Dallow-noblas=true build-dir=build"
repair-wheel-command = ""
-[tool.meson-python]
-meson = 'vendored-meson/meson/meson.py'
+#[tool.meson-python]
+#meson = 'vendored-meson/meson/meson.py'
[tool.meson-python.args]
install = ['--tags=runtime,python-runtime,tests,devel']
@@ -190,8 +190,8 @@ install = ['--tags=runtime,python-runtim
[tool.spin]
package = 'numpy'
-[tool.spin.meson]
-cli = 'vendored-meson/meson/meson.py'
+#[tool.spin.meson]
+#cli = 'vendored-meson/meson/meson.py'
[tool.spin.commands]
"Build" = [

View File

@@ -1,12 +0,0 @@
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -59,6 +59,9 @@ download = "https://pypi.org/project/num
tracker = "https://github.com/numpy/numpy/issues"
"release notes" = "https://numpy.org/doc/stable/release"
+[tool.setuptools]
+py-modules = []
+
[tool.towncrier]
single_file = false
filename = "doc/source/release/notes-towncrier.rst"

20
lang/python/numpy/test.sh Normal file
View File

@@ -0,0 +1,20 @@
#!/bin/sh
[ "$1" == "python3-numpy" ] || exit 0
EXP_VER="$2"
python3 - << EOF
import sys
import numpy as np
if (np.__version__ != "$EXP_VER"):
print("Got incorrect version: " + np.__version__)
sys.exit(1)
arr = np.array([1, 2, 3, 4, 5])
print(arr)
EOF

View File

@@ -8,11 +8,11 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=python-automat
PKG_VERSION:=22.10.0
PKG_VERSION:=25.4.16
PKG_RELEASE:=1
PYPI_NAME:=Automat
PKG_HASH:=e56beb84edad19dcc11d30e8d9b895f75deeb5ef5e96b84a467066b3b84bb04e
PYPI_NAME:=automat
PKG_HASH:=0017591a5477066e90d26b0e696ddc143baafd87b588cfac8100bc6be9634de0
PKG_LICENSE:=MIT
PKG_LICENSE_FILES:=LICENSE
@@ -32,8 +32,7 @@ define Package/python3-automat
URL:=https://github.com/glyph/Automat
DEPENDS:= \
+python3-light \
+python3-attrs \
+python3-six
+python3-attrs
endef
define Package/python3-automat/description

View File

@@ -1,18 +0,0 @@
--- a/setup.py
+++ b/setup.py
@@ -22,15 +22,6 @@ setup(
"attrs>=19.2.0",
"six",
],
- extras_require={
- "visualize": ["graphviz>0.5.1",
- "Twisted>=16.1.1"],
- },
- entry_points={
- "console_scripts": [
- "automat-visualize = automat._visualize:tool"
- ],
- },
author='Glyph',
author_email='glyph@twistedmatrix.com',
include_package_data=True,

View File

@@ -1,19 +0,0 @@
--- a/setup.py
+++ b/setup.py
@@ -12,7 +12,7 @@ setup(
Self-service finite-state machines for the programmer on the go.
""".strip(),
readme='README.md',
- packages=find_packages(exclude=[]),
+ packages=find_packages(exclude=["*._test", "*._test.*"]),
package_dir={'automat': 'automat'},
setup_requires=[
'wheel',
@@ -25,6 +25,7 @@ setup(
author='Glyph',
author_email='glyph@twistedmatrix.com',
include_package_data=True,
+ exclude_package_data={'':['_test/*']},
license="MIT",
keywords='fsm finite state machine automata',
classifiers=[

View File

@@ -6,11 +6,11 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=python-bcrypt
PKG_VERSION:=4.1.2
PKG_VERSION:=4.1.3
PKG_RELEASE:=1
PYPI_NAME:=bcrypt
PKG_HASH:=33313a1200a3ae90b75587ceac502b048b840fc69e7f7a0905b5f87fac7a1258
PKG_HASH:=2ee15dd749f5952fe3f0430d0ff6b74082e159c50332a1413d51b5689cf06623
PKG_LICENSE:=Apache-2.0
PKG_LICENSE_FILES:=LICENSE

View File

@@ -8,11 +8,11 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=python-build
PKG_VERSION:=1.0.3
PKG_VERSION:=1.3.0
PKG_RELEASE:=1
PYPI_NAME:=build
PKG_HASH:=538aab1b64f9828977f84bc63ae570b060a8ed1be419e7870b8b4fc5e6ea553b
PKG_HASH:=698edd0ea270bde950f53aed21f3a0135672206f3911e0176261a31e0e07b397
PKG_LICENSE:=MIT
PKG_LICENSE_FILES:=LICENSE

View File

@@ -8,11 +8,11 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=python-calver
PKG_VERSION:=2022.6.26
PKG_VERSION:=2025.10.20
PKG_RELEASE:=1
PYPI_NAME:=calver
PKG_HASH:=e05493a3b17517ef1748fbe610da11f10485faa7c416b9d33fd4a52d74894f8b
PKG_HASH:=c98b376c2424642224d456b2f70c51402343e008c63d204634665e1a2a2835f5
PKG_LICENSE:=Apache-2.0
PKG_LICENSE_FILES:=LICENSE

View File

@@ -6,19 +6,24 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=python-certifi
PKG_VERSION:=2024.2.2
PKG_VERSION:=2025.8.3
PKG_RELEASE:=1
PKG_MAINTAINER:=Eneas U de Queiroz <cotequeiroz@gmail.com>
PKG_LICENSE:=MPL-2.0
PKG_LICENSE_FILES:=LICENSE
PKG_CPE_ID:=cpe:/a:certifi:certifi
PYPI_NAME:=certifi
PKG_HASH:=0569859f95fc761b18b45ef421b1290a0f65f147e92a1e5eb3e635f9a5e4e66f
PKG_HASH:=e564105f78ded564e3ae7c923924435e1daa7463faeab5bb932bc53ffae63407
HOST_BUILD_DEPENDS:=python3/host python-build/host python-installer/host python-wheel/host
include ../pypi.mk
include $(INCLUDE_DIR)/package.mk
include $(INCLUDE_DIR)/host-build.mk
include ../python3-package.mk
include ../python3-host-build.mk
define Package/python3-certifi
SUBMENU:=Python
@@ -38,3 +43,4 @@ endef
$(eval $(call Py3Package,python3-certifi))
$(eval $(call BuildPackage,python3-certifi))
$(eval $(call BuildPackage,python3-certifi-src))
$(eval $(call HostBuild))

View File

@@ -9,15 +9,19 @@ include $(TOPDIR)/rules.mk
PKG_NAME:=python-chardet
PKG_VERSION:=5.2.0
PKG_RELEASE:=1
PKG_RELEASE:=2
PKG_LICENSE:=LGPL-2.1
PYPI_NAME:=chardet
PKG_HASH:=1b3b6ff479a8c414bc3fa2c0852995695c4a026dcd6d0633b2dd092ca39c1cf7
HOST_BUILD_DEPENDS:=python3/host python-build/host python-installer/host python-wheel/host
include ../pypi.mk
include $(INCLUDE_DIR)/package.mk
include $(INCLUDE_DIR)/host-build.mk
include ../python3-package.mk
include ../python3-host-build.mk
define Package/python3-chardet
SUBMENU:=Python
@@ -45,3 +49,4 @@ endef
$(eval $(call Py3Package,python3-chardet))
$(eval $(call BuildPackage,python3-chardet))
$(eval $(call BuildPackage,python3-chardet-src))
$(eval $(call HostBuild))

View File

@@ -6,7 +6,7 @@ include $(TOPDIR)/rules.mk
PKG_NAME:=python-click
PKG_VERSION:=8.1.7
PKG_RELEASE:=1
PKG_RELEASE:=2
PYPI_NAME:=click
PKG_HASH:=ca9853ad459e787e2192211578cc907e7594e294c7ccc834310722b41b9ca6de
@@ -15,9 +15,13 @@ PKG_MAINTAINER:=Jeffery To <jeffery.to@gmail.com>
PKG_LICENSE:=BSD-3-Clause
PKG_LICENSE_FILES:=LICENSE.rst
HOST_BUILD_DEPENDS:=python3/host python-build/host python-installer/host python-wheel/host
include ../pypi.mk
include $(INCLUDE_DIR)/package.mk
include $(INCLUDE_DIR)/host-build.mk
include ../python3-package.mk
include ../python3-host-build.mk
define Package/python3-click
SECTION:=lang
@@ -38,3 +42,4 @@ endef
$(eval $(call Py3Package,python3-click))
$(eval $(call BuildPackage,python3-click))
$(eval $(call BuildPackage,python3-click-src))
$(eval $(call HostBuild))

View File

@@ -8,11 +8,12 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=python-cython
PKG_VERSION:=3.0.10
PKG_VERSION:=3.1.5
PKG_RELEASE:=1
PYPI_NAME:=Cython
PKG_HASH:=dcc96739331fb854dcf503f94607576cfe8488066c61ca50dfd55836f132de99
PYPI_SOURCE_NAME:=cython
PKG_HASH:=7e73c7e6da755a8dffb9e0e5c4398e364e37671778624188444f1ff0d9458112
PKG_LICENSE:=Apache-2.0
PKG_LICENSE_FILES:=LICENSE.txt

View File

@@ -8,12 +8,12 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=python-dateutil
PKG_VERSION:=2.9.0.post0
PKG_VERSION:=2.9.0
PKG_RELEASE:=1
PKG_LICENSE:=BSD-2-Clause
PYPI_NAME:=$(PKG_NAME)
PKG_HASH:=37dd54208da7e1cd875388217d5e00ebd4179249f90fb72437e91a35459a0ad3
PKG_HASH:=78e73e19c63f5b20ffa567001531680d939dc042bf7850431877645523c66709
PKG_MAINTAINER:=Alexandru Ardelean <ardeleanalex@gmail.com>
PKG_BUILD_DEPENDS:=python-setuptools-scm/host

View File

@@ -9,11 +9,12 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=python-flask-login
PKG_VERSION:=0.6.2
PKG_VERSION:=0.6.3
PKG_RELEASE:=1
PYPI_NAME:=Flask-Login
PKG_HASH:=c0a7baa9fdc448cdd3dd6f0939df72eec5177b2f7abe6cb82fc934d29caac9c3
PYTHON3_PKG_WHEEL_NAME:=flask_login
PKG_HASH:=5e23d14a607ef12806c699590b89d0f0e0d67baeec599d75947bf9c147330333
PKG_MAINTAINER:=Jan Pavlinec <jan.pavlinec1@gmail.com>
PKG_LICENSE:=MIT

View File

@@ -8,11 +8,12 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=python-flask-seasurf
PKG_VERSION:=1.1.1
PKG_VERSION:=2.0.0
PKG_RELEASE:=1
PYPI_NAME:=Flask-SeaSurf
PKG_HASH:=54537008c769ac0ada8237877327c3e7ed74dcd8b01e74a9120ee0232c5951a9
PYTHON3_PKG_WHEEL_NAME:=flask_seasurf
PKG_HASH:=8e4003be1580ea8663d6bd3adf272f549ca4d735848895192618ed1945d5ad3c
PKG_MAINTAINER:=Josef Schlehofer <pepe.schlehofer@gmail.com>
PKG_LICENSE:=BSD-3-Clause

View File

@@ -0,0 +1,34 @@
From 8e6267a4c0e8cfedd18ab3efe616904d77ef99d6 Mon Sep 17 00:00:00 2001
From: Josef Schlehofer <pepe.schlehofer@gmail.com>
Date: Mon, 3 Nov 2025 23:15:33 +0100
Subject: [PATCH] setup.py: use up-to-date SPDX license identifier with LICENSE
file
It fixes setuptoolsDeprecationWarning about deprecated license
classifiers and adds LICENSE file.
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
---
setup.py | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
--- a/setup.py
+++ b/setup.py
@@ -15,7 +15,8 @@ setup(
name='Flask-SeaSurf',
version=__version__,
url='https://github.com/maxcountryman/flask-seasurf/',
- license='BSD',
+ license='BSD-3-Clause',
+ license_files=['LICENSE'],
author='Max Countryman',
author_email='maxc@me.com',
description='An updated CSRF extension for Flask.',
@@ -30,7 +31,6 @@ setup(
'Development Status :: 4 - Beta',
'Environment :: Web Environment',
'Intended Audience :: Developers',
- 'License :: OSI Approved :: BSD License',
'Operating System :: OS Independent',
'Programming Language :: Python',
'Programming Language :: Python :: 3',

View File

@@ -0,0 +1,56 @@
From 6b578f03f4efd89a05a120de919386a5834e4900 Mon Sep 17 00:00:00 2001
From: Josef Schlehofer <pepe.schlehofer@gmail.com>
Date: Mon, 3 Nov 2025 23:35:26 +0100
Subject: [PATCH 2/3] Add pyproject.toml with modern Python packaging
configuration
This follows PEP 621 and as well while keeping backward compatibility
with existing setup.py.
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
---
pyproject.toml | 38 ++++++++++++++++++++++++++++++++++++++
1 file changed, 38 insertions(+)
create mode 100644 pyproject.toml
--- /dev/null
+++ b/pyproject.toml
@@ -0,0 +1,38 @@
+[build-system]
+requires = ["setuptools>=61.0", "wheel"]
+build-backend = "setuptools.build_meta"
+
+[project]
+name = "Flask-SeaSurf"
+version = "2.0.0"
+description = "An updated CSRF extension for Flask."
+readme = {file = "README.markdown", content-type = "text/markdown"}
+license = "BSD-3-Clause"
+license-files = ["LICENSE"]
+authors = [{name = "Max Countryman", email = "maxc@me.com"}]
+requires-python = ">=3.8"
+dependencies = ["Flask"]
+classifiers = [
+ "Development Status :: 4 - Beta",
+ "Environment :: Web Environment",
+ "Intended Audience :: Developers",
+ "Operating System :: OS Independent",
+ "Programming Language :: Python",
+ "Programming Language :: Python :: 3",
+ "Programming Language :: Python :: 3.8",
+ "Programming Language :: Python :: 3.9",
+ "Programming Language :: Python :: 3.10",
+ "Programming Language :: Python :: 3.11",
+ "Programming Language :: Python :: 3.12",
+ "Topic :: Internet :: WWW/HTTP :: Dynamic Content",
+ "Topic :: Software Development :: Libraries :: Python Modules",
+]
+
+[project.urls]
+Homepage = "https://github.com/maxcountryman/flask-seasurf/"
+
+[tool.setuptools]
+py-modules = ["flask_seasurf"]
+
+[project.optional-dependencies]
+test = ["pytest"]

View File

@@ -8,11 +8,12 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=python-flask-session
PKG_VERSION:=0.3.2
PKG_VERSION:=0.8.0
PKG_RELEASE:=1
PYPI_NAME:=Flask-Session
PKG_HASH:=0768e2bbf06f963ec1aa711bde7aa32dc39ff70f89b495d6db687d899eae4423
PYPI_SOURCE_NAME:=flask_session
PKG_HASH:=20e045eb01103694e70be4a49f3a80dbb1b57296a22dc6f44bbf3f83ef0742ff
PKG_MAINTAINER:=Josef Schlehofer <pepe.schlehofer@gmail.com>
PKG_LICENSE:=BSD-3-Clause

View File

@@ -8,11 +8,12 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=python-flask-socketio
PKG_VERSION:=5.3.5
PKG_VERSION:=5.5.1
PKG_RELEASE:=1
PYPI_NAME:=Flask-SocketIO
PKG_HASH:=5f01158d10db71aa78c969b631ce3b9148b47ab0de1995158f9577f85b004d25
PYPI_SOURCE_NAME:=flask_socketio
PKG_HASH:=d946c944a1074ccad8e99485a6f5c79bc5789e3ea4df0bb9c864939586c51ec4
PKG_MAINTAINER:=Jan Pavlinec <jan.pavlinec1@gmail.com>
PKG_LICENSE:=MIT

View File

@@ -8,12 +8,12 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=python-flit-core
PKG_VERSION:=3.9.0
PKG_VERSION:=3.12.0
PKG_RELEASE:=1
PYPI_NAME:=flit-core
PYPI_SOURCE_NAME:=flit_core
PKG_HASH:=72ad266176c4a3fcfab5f2930d76896059851240570ce9a98733b658cb786eba
PKG_HASH:=18f63100d6f94385c6ed57a72073443e1a71a4acb4339491615d0f16d6ff01b2
PKG_LICENSE:=BSD-3-Clause
PKG_LICENSE_FILES:=LICENSE

View File

@@ -8,12 +8,12 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=python-hatch-requirements-txt
PKG_VERSION:=0.4.0
PKG_VERSION:=0.4.1
PKG_RELEASE:=1
PYPI_NAME:=hatch-requirements-txt
PYPI_SOURCE_NAME:=hatch_requirements_txt
PKG_HASH:=800509946e85d9e56d73242fab223ec36db50372e870a04e2dd1fd9bad98455d
PKG_HASH:=2c686e5758fd05bb55fa7d0c198fdd481f8d3aaa3c693260f5c0d74ce3547d20
PKG_LICENSE:=MIT
PKG_LICENSE_FILES:=LICENSE

View File

@@ -8,11 +8,11 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=python-hatchling
PKG_VERSION:=1.18.0
PKG_VERSION:=1.27.0
PKG_RELEASE:=1
PYPI_NAME:=hatchling
PKG_HASH:=50e99c3110ce0afc3f7bdbadff1c71c17758e476731c27607940cfa6686489ca
PKG_HASH:=971c296d9819abb3811112fc52c7a9751c8d381898f36533bb16f9791e941fd6
PKG_LICENSE:=MIT
PKG_LICENSE_FILES:=LICENSE.txt

View File

@@ -9,7 +9,7 @@ include $(TOPDIR)/rules.mk
PKG_NAME:=python-idna
PKG_VERSION:=3.6
PKG_RELEASE:=1
PKG_RELEASE:=2
PYPI_NAME:=idna
PKG_HASH:=9ecdbbd083b06798ae1e86adcbfe8ab1479cf864e4ee30fe4e46a003d12491ca
@@ -19,10 +19,13 @@ PKG_LICENSE_FILES:=LICENSE.md
PKG_MAINTAINER:=Jeffery To <jeffery.to@gmail.com>
PKG_BUILD_DEPENDS:=python-flit-core/host
HOST_BUILD_DEPENDS:=python3/host python-build/host python-installer/host python-flit-core/host
include ../pypi.mk
include $(INCLUDE_DIR)/package.mk
include $(INCLUDE_DIR)/host-build.mk
include ../python3-package.mk
include ../python3-host-build.mk
define Package/python3-idna
SECTION:=lang
@@ -43,3 +46,4 @@ endef
$(eval $(call Py3Package,python3-idna))
$(eval $(call BuildPackage,python3-idna))
$(eval $(call BuildPackage,python3-idna-src))
$(eval $(call HostBuild))

View File

@@ -8,11 +8,11 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=python-incremental
PKG_VERSION:=22.10.0
PKG_VERSION:=24.7.2
PKG_RELEASE:=1
PYPI_NAME:=incremental
PKG_HASH:=912feeb5e0f7e0188e6f42241d2f450002e11bbc0937c65865045854c24c0bd0
PKG_HASH:=fb4f1d47ee60efe87d4f6f0ebb5f70b9760db2b2574c59c8e8912be4ebd464c9
PKG_LICENSE:=MIT
PKG_LICENSE_FILES:=LICENSE
@@ -39,6 +39,11 @@ define Package/python3-incremental/description
Incremental is a small library that versions your Python projects.
endef
define Py3Package/python3-incremental/filespec
+|$(PYTHON3_PKG_DIR)
-|$(PYTHON3_PKG_DIR)/incremental/tests
endef
$(eval $(call Py3Package,python3-incremental))
$(eval $(call BuildPackage,python3-incremental))
$(eval $(call BuildPackage,python3-incremental-src))

View File

@@ -1,14 +0,0 @@
--- a/setup.cfg
+++ b/setup.cfg
@@ -30,7 +30,10 @@ zip_safe = False
[options.packages.find]
where = src
-exclude = exampleproj
+exclude =
+ exampleproj
+ *.tests
+ *.tests.*
[options.package_data]
incremental = py.typed

View File

@@ -8,11 +8,11 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=python-lxml
PKG_VERSION:=5.2.2
PKG_VERSION:=5.4.0
PKG_RELEASE:=1
PYPI_NAME:=lxml
PKG_HASH:=bb2dc4898180bea79863d5487e5f9c7c34297414bad54bcd0f0852aee9cfdb87
PKG_HASH:=d12832e1dbea4be280b22fd0ea7c9b87f0d8fc51ba06e92dc62d52f804f78ebd
PKG_LICENSE:=BSD-3-Clause
PKG_LICENSE_FILES:=LICENSES.txt

View File

@@ -0,0 +1,9 @@
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -1,5 +1,5 @@
[build-system]
-requires = ["Cython>=3.0.11, < 3.1.0", "setuptools", "wheel"]
+requires = ["Cython>=3.0.10", "setuptools", "wheel"]
[tool.cibuildwheel]
build-verbosity = 1

View File

@@ -1,7 +1,5 @@
#!/bin/sh
[ "$1" = "python3-lxml" ] || exit 0
EXP_VER="$2"
python3 - << EOF

View File

@@ -5,11 +5,12 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=python-markupsafe
PKG_VERSION:=2.1.3
PKG_VERSION:=3.0.3
PKG_RELEASE:=1
PYPI_NAME:=MarkupSafe
PKG_HASH:=af598ed32d6ae86f1b747b82783958b1a4ab8f617b06fe68795c7f026abbdcad
PYPI_SOURCE_NAME:=markupsafe
PKG_HASH:=722695808f4b6457b320fdc131280796bdceb04ab50fe1795cd540799ebe1698
PKG_MAINTAINER:=Jeffery To <jeffery.to@gmail.com>
PKG_LICENSE:=BSD-3-Clause

View File

@@ -6,11 +6,11 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=python-networkx
PKG_VERSION:=3.3
PKG_VERSION:=3.5
PKG_RELEASE:=1
PYPI_NAME:=networkx
PKG_HASH:=0c127d8b2f4865f59ae9cb8aafcd60b5c70f3241ebd66f7defad7c4ab90126c9
PKG_HASH:=d4c6f9cf81f52d69230866796b82afbccdec3db7ae4fbd1b65ea750feed50037
PKG_LICENSE:=BSD-3-Clause
PKG_LICENSE_FILES:=LICENSE.txt

View File

@@ -7,11 +7,11 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=python-packaging
PKG_VERSION:=23.2
PKG_VERSION:=25.0
PKG_RELEASE:=1
PYPI_NAME:=packaging
PKG_HASH:=048fb0e9405036518eaaf48a55953c750c11e1a1b68e0dd1a9d62ed0c092cfc5
PKG_HASH:=d443872c98d677bf60f6a1f2f8c1cb748e8fe762d2bf9d3148b5599295b0fc4f
PKG_MAINTAINER:=Jan Pavlinec <jan.pavlinec1@gmail.com>, Jeffery To <jeffery.to@gmail.com>
PKG_LICENSE:=Apache-2.0 BSD-2-Clause

Some files were not shown because too many files have changed in this diff Show More