Tianling Shen [Sun, 29 Jun 2025 08:48:11 +0000 (16:48 +0800)]
openlist: move from alist and update to 4.0.5
The alist was sold to a Chinese commercial company by the project owner
without any clarification. Though the company bought it nearly a half
year ago, they still cannot show a clear roadmap and privacy policy now.
They also tried to collect runtime information from the user, but the
code was not merged into the main tree "luckily".
Anyway, various behaviors from the company indicate they are untrustable,
so the other developers from the alist project have forked and made a new
project named OpenList, which will continue to be maintained by the community.
===== security note =====
The alist code up to 3.45.0 has been reviewed "clean", however the main
problem is from the author's private API that used to connect to cloud drives.
For security reasons, please reset your password and/or token if possible.
Dirk Brenken [Sat, 28 Jun 2025 20:10:34 +0000 (22:10 +0200)]
banIP: update 1.5.6-6
* limit nft logging to a rate 10/second to prevent possible log-flooding
* skip external feed processing if "allowlist-only" mode is fully enabled (in in- and outbound)
* remove needless default icmpv6 rule in wan-input
* refine the housekeeping script (uci-defaults)
* readme update
Paul Donald [Mon, 14 Apr 2025 15:12:36 +0000 (17:12 +0200)]
ddns-scripts: refactor get_current_ip()
Remove the awk based ifconfig output handling violence (omg) and instead
use the ip utility and its JSON output: this uses the available
system utility jsonfilter. Much cleaner and less brittle.
This fixes alias interface handling
Fixes issue #24922
Paul Donald [Fri, 11 Apr 2025 13:32:47 +0000 (15:32 +0200)]
ddns-scripts: refactor verify_host_port()
Leverage the resolveip utility - it does the same job that several
different resolvers do for a fraction of the resource usage. This...
to verify a host's connectivity.
resolveip dependency net delta: +2-3Kbytes
Also uses the ddns-scripts built-in 'timeout' function.
Request only 'interfaces' status, as we don't use 'connected' and
'policies' status. On my router with 5 wans / 2 tracking IPs per wan,
scrape time goes from 1.90s to 1.30s (still pretty slow but better)
hostapd exposes the `hostapd-auth` ubus object. In both
hostapd_ubus_stations.lua and hostapd_stations.lua this object is
incorrectly matched as if it were a wifi phy such as `hostapd.phy0-ap0`.
Using the literal period to find interfaces (^hostapd%.) instead of the
pattern-matching period (hostapd.) fixes this.
fix formatting consistency
Signed-off-by: Michael Payne <redacted>
[fix version conflict] Signed-off-by: Etienne Champetier <redacted>
Georgi Valkov [Fri, 13 Jun 2025 07:35:28 +0000 (10:35 +0300)]
fuse3: mount_util.c: restore symlink check
Fixes the following error when mounting iPhone using ifuse:
ifuse /mnt --container com.httpstorm.httpstorm
mount: mounting ifuse on /mnt failed: Invalid argument
Georgi Valkov [Thu, 12 Jun 2025 05:28:04 +0000 (08:28 +0300)]
fuse3: fix build warning in fuse_signals.c
BT_STACK_SZ and backtrace_buffer are not used when
HAVE_BACKTRACE is undefined. Wrap them in #ifdef
to avoid a build warning:
../lib/fuse_signals.c:31:14: warning: 'backtrace_buffer' defined but not used [-Wunused-variable]
31 | static void *backtrace_buffer[BT_STACK_SZ];
| ^~~~~~~~~~~~~~~~
Georgi Valkov [Thu, 12 Jun 2025 04:12:50 +0000 (07:12 +0300)]
fuse3: update to version 3.17.2
- Fixed uninitized bufsize value
(compilation warning and real issue when HAVE_SPLICE was not defined)
- Fixed initialization races related to buffer realocation when
large buf sizes are used
- Fixed a bug that may result in incorrect behaviour:
../util/fusermount.c:1069:17: warning: unsigned conversion from 'long long int' to 'long unsigned int' changes value from '8315462406243767374' to '1397118030' [-Woverflow]
1069 | 0x736675005346544e /* UFSD */,
| ^~~~~~~~~~~~~~~~~~
Til Kaiser [Fri, 20 Jun 2025 11:02:51 +0000 (13:02 +0200)]
rrdtool1: fix compilation with GCC 15
Currently, rrdtool1 produces the following build error
for various C files while building with GCC 15:
In file included from rrd_tool.h:93,
from rrd_cgi.c:11:
getopt.h:108:12: error: conflicting types for 'getopt'; have 'int(void)'
108 | extern int getopt ();
| ^~~~~~
In file included from include/fortify/unistd.h:22,
from rrd_tool.h:56:
include/unistd.h:127:5: note: previous declaration of 'getopt' with type 'int(int, char * const*, const char *)'
127 | int getopt(int, char * const [], const char *);
| ^~~~~~
This adds -std=gnu17 to TARGET_CFLAGS to fix the compilation error.
This package intercepts/blocks traffic from 'interface' and
redirects http requests to a splash page that you can personalize,
stored in '/etc/simple-captive-portal/'.
After clicking on 'connect' the MAC of the client is allowed,
for 'timeout' seconds (24h), allowing both IPv4 and IPv6.
If your guest interface defaults to input drop or reject (recommended),
make sure to allow tcp 8888-8889 on input (and also dns and dhcp).
Daniel Golle [Sun, 22 Jun 2025 17:15:05 +0000 (18:15 +0100)]
libtheora: use CONFIGURE_ARGS, fix build on armeb
Use CONFIGURE_ARGS instead of defining a custom Build/Configure target.
Set --disable-asm on armeb to fix build error:
CC apiwrapper.lo
In file included from state.h:56,
from apiwrapper.h:24,
from apiwrapper.c:21:
arm/armint.h:24:5: error: #error "Big-endian configurations are not supported by the ARM asm. " "Reconfigure with --disable-asm or undefine OC_ARM_ASM."
24 | # error "Big-endian configurations are not supported by the ARM asm. " \
| ^~~~~
John Audia [Thu, 19 Jun 2025 17:17:14 +0000 (13:17 -0400)]
samba4: add conditional depends
If users are building icu we need to depend on the corresponding
shared objects to avoid missing library dependencies, for example:
libicui18n.so.77
libicuuc.so.77
Vladimir Ermakov [Tue, 27 May 2025 07:59:16 +0000 (09:59 +0200)]
qemu: refresh patches to include git headers
Use git format-patch to be able to use git am later, to fix openwrt/openwrt#10272 .
Remove patch to skip tests as not needed anymore.
Then apply refresh.
Fixes: https://github.com/openwrt/packages/issues/26575
Changelog: https://github.com/lttng/lttng-ust/compare/v2.13.5...v2.13.9 Signed-off-by: Tomasz Maciej Nowak <redacted>
Ted Hess [Wed, 18 Jun 2025 23:57:30 +0000 (19:57 -0400)]
sox_ng: Remove (lib)speex un-expected inclusion by discovery
Building sox_ng under certain environments inadvertantly tries to include Speex code.
This patch forces sox_ng to build without Speex codec references.
Removed due to build failure:
104-samba-4.12-unbundle-icu.patch
Added:
104-fix-build-on-aarch64-and-risc.patch[1]
Makefile:
Removed section on --accel-aes due to upstream dropping support
Added line to correct fcntl check in cross-answers.txt
1. For aarch64 and risc64, the discard_const macro is used to remove
const qualifiers from string literals, but casting a string literal’s
address to uintptr_t and then to void * is not a constant expression in
some compilers or environments e.g. the musl libc and aarch64/risc64
combination seems to enforce stricter rules for constant initializers
or pointer/integer size handling compared to glibc-based systems.
Dennis Camera [Sat, 11 Jan 2025 17:59:42 +0000 (18:59 +0100)]
openvpn: remove kmod-ovpn-dco-v2 dependency
OpenVPN does work without the kernel module, it just won't be able to use DCO.
To make life easier for OpenVPN users on very space-constrained devices make it
an optional dependency.
Josef Schlehofer [Sun, 15 Jun 2025 06:16:44 +0000 (08:16 +0200)]
treewide: drop patches related to uClibc-ng
These patches seems leftovers, because uClibc-ng was
removed from OpenWrt main repo in 2020 [1].
If someone is uses still uClibc-ng, then these patches
should be upstreamed.
libmcrypt: drop package, as it is unmaintained upstream
Libmcrypt has not seen any updates for years. Distributions have started
patching libmcrypt to comply with C99 and recent versions of GCC,
but none of the OpenWrt packages require it anymore. The last OpenWrt
package to require libmcrypt was php8-pecl-mcrypt. OpenWrt dropped that
package with commit 1a0c8b72.
George Sapkin [Thu, 12 Jun 2025 11:55:37 +0000 (14:55 +0300)]
golang: bump to 1.24.4
go1.24.4 (released 2025-06-05) includes security fixes to the
crypto/x509, net/http, and os packages, as well as bug fixes to the
linker, the go command, and the hash/maphash and os packages.
Josef Schlehofer [Fri, 13 Jun 2025 13:06:17 +0000 (15:06 +0200)]
treewide: drop nanosleep patches related to uClibc-ng
These all patches were related to uClibc-ng
according to this commit [1]. uClibc-ng was
removed in OpenWrt main repo, so these patches
are not needed anymore. They could not be even
applied by `git am`, so there is difficult to find
who authored it, if it was upstreamed (most likely not).
Josef Schlehofer [Sun, 15 Jun 2025 06:55:08 +0000 (08:55 +0200)]
addrwatch: add patch header from upstreamed commit
This patch was upstreamed [1], so it can be removed in the future.
For now, I added patch header, so it can be applied with `git am`
and also, we know who commited such changes.
Daniel Cousens [Sun, 18 Feb 2024 11:46:51 +0000 (22:46 +1100)]
treewide: use https for some PKG_SOURCE_URLs
This changes a number of PKG_SOURCE_URLs that were using the http protocol to use https if available.
HTTPS was verified as functioning for the updated hosts.
Til Kaiser [Sat, 14 Jun 2025 18:13:17 +0000 (20:13 +0200)]
mstflint: add missing nls.mk include
If nls.mk is not included and BUILD_NLS is set compilation
will fail with various undefined references to the libiconv
library. So this commit includes the missing nls.mk.
Maintainer: me
Compile tested: mips, ath79, OpenWrt SNAPSHOT
Description:
Development container configuration.
The container can run locally or in cloud (Codespaces).
Sample usage: easily open full-featured VS Code IDE in browser,
pre-configured for OpenWrt packages development.
When run in the Codespaces, the packages repo is found in /workspaces/packages.
To add it to the feeds, run inside the container:
$ sed -i '1s;^;src-link workspaces /workspaces/packages\n;' ~/feeds.conf.default
Dirk Brenken [Sat, 14 Jun 2025 17:47:19 +0000 (19:47 +0200)]
banIP: update 1.5.6-5
* fixed the restore rc handling
* skip allowlist entries during map creation
* disable the map button by default (only enabled if map & NFT counter are selected)
* disable the content filter checkbox for elements with hits by default (only enabled if NFT counter are selected)
* readme update
Tianling Shen [Thu, 12 Jun 2025 11:09:49 +0000 (19:09 +0800)]
btop: add migration for alias command
Files in `/etc/profile.d/` are marked as user configs and won't be
replaced to new version when update the package, so add a migration
script for this.
Josef Schlehofer [Fri, 13 Jun 2025 13:41:01 +0000 (15:41 +0200)]
mc: drop patches to handle newer terminfo
This patch was introduced by me in commit 62513dc57661ac91a4ed7ba1260ebae959c19bbb ("mc: fix mouse handling")
and that commit backported patch from master branch and it that time,
there was not any release, which included it.
Since 4.8.2.5 update, we are still rebasing it, no need to do that.
Fixes: eb0c3b534a7f1676cc49552a3fbac3165e8b37eb ("mc: update to 4.8.25") Signed-off-by: Josef Schlehofer <redacted>
Hannu Nyman [Wed, 11 Jun 2025 15:53:52 +0000 (18:53 +0300)]
collectd: Adjust .json names to match plugin names
Adjust .json names to match the plugin names: use '-' instead of '_'
Fix commits 033c19a and e36b727 that used a filename differing
from the plugin name used in OpenWrt. That prevented package compilation
to find and include the .json files that were left out of the package.
Nikolay Manev [Sat, 31 May 2025 09:34:05 +0000 (12:34 +0300)]
tio: update to version 3.9
* update to version 3.9
* added lua as build dependency
* added glib as build dependency
* removed libinih as dependency
* disable bash-completion and man pages
* added test.sh file for ci testing
The second patch, which addresses a problem where the build would
include -I/usr/include, made the first patch obsolete. The first patch
had fixed the detection of pthreads, but this was a red herring caused
by the circumstances surrounding the second.
Robert Marko [Tue, 10 Jun 2025 17:22:12 +0000 (19:22 +0200)]
libarchive: pass CMAKE_INSTALL_LIBDIR
libarchive changed the pkgconfig install logic in 3.8.1, so that it now
installs the pkgconfig file in ${CMAKE_INSTALL_LIBDIR}/pkgconfig instead
of the previous lib/pkgconfig.
While this is a bug[1] in libarchive as this was unintended change, until
that is fixed upstream lets pass -DCMAKE_INSTALL_LIBDIR=lib to restore
previous behaviour in order for InstallDev step to install the .pc file so
other packages can find libarchive and link against it.