]> git.99rst.org Git - openwrt-packages.git/log
openwrt-packages.git
5 weeks agoluajit2: update to 2026-07-31
Josef Schlehofer [Sat, 15 Aug 2026 10:12:39 +0000 (12:12 +0200)]
luajit2: update to 2026-07-31

Also refresh 020-riscv64-support.patch from the current state of
openresty/luajit2#236. The previous snapshot defined
asm_tail_prep(ASMState *as), but since openresty/luajit2 commit
68354f44 the callers pass a second TraceNo argument, so the riscv64
build failed with:

  lj_asm.c:2559:5: error: too many arguments to function 'asm_tail_prep'

The refreshed patch carries the upstream adaptation and restores the
build. The other four patches apply unchanged.

Signed-off-by: Josef Schlehofer <redacted>
5 weeks agoluajit2: fix build and runtime on powerpc
Josef Schlehofer [Sat, 15 Aug 2026 09:21:08 +0000 (11:21 +0200)]
luajit2: fix build and runtime on powerpc

luajit2 currently fails to link for powerpc: lj_vm.o emits PLT calls
that force BSS-PLT, which the inline-PLT relocations emitted by GCC 12
and newer do not support. Add the same GOT-based fix that
lang/lua/luajit has carried as 060-ppc-musl.patch since 2019.

With that in place the package builds, but ipairs() and pairs() turn
out to be broken on 32-bit big-endian soft-float targets. Both are
regressions in luajit2's PPC64 patch and do not affect upstream
LuaJIT. To be submitted to openresty/luajit2 as well.

Signed-off-by: Josef Schlehofer <redacted>
5 weeks agogolang: bump 1.26 to 1.26.6
George Sapkin [Thu, 13 Aug 2026 22:22:07 +0000 (01:22 +0300)]
golang: bump 1.26 to 1.26.6

Fixes: CVE-2026-33818
Fixes: CVE-2026-39821
Fixes: CVE-2026-46600
Fixes: CVE-2026-56853
Fixes: CVE-2026-56858
Fixes: CVE-2026-56859
Fixes: CVE-2026-56860
Fixes: CVE-2026-56862
Fixes: CVE-2026-56864
Fixes: CVE-2026-56865
Changes: https://github.com/golang/go/issues?q=milestone%3AGo1.26.6+label%3ACherryPickApproved
Signed-off-by: George Sapkin <redacted>
5 weeks agobtrfs-progs: remove no-mold flag as it builds fine with mold 2.42.0
Carsten Schuette [Wed, 12 Aug 2026 16:41:37 +0000 (18:41 +0200)]
btrfs-progs: remove no-mold flag as it builds fine with mold 2.42.0

btrfs-progs have a no-mold flag since 2025. With latest mold 2.42.0
released a few days ago, the changes from #26541 can be reverted as
btrfs-progs compiles fine with mold.

Signed-off-by: Carsten Schuette <redacted>
5 weeks agoolsrd: record why the version check logs "Terminated"
Josef Schlehofer [Mon, 10 Aug 2026 07:56:58 +0000 (09:56 +0200)]
olsrd: record why the version check logs "Terminated"

olsrd leaves through olsr_exit(), which ends the process with
raise(SIGTERM) rather than returning from main, so the shell reports
"Terminated" right after the version banner even for a plain
`olsrd -v`. The pipeline status comes from grep, so the check itself
is unaffected, but the line in the CI log looks like a failure to
anyone reading it.

Note it in the script so the next reader does not go hunting.

Signed-off-by: Josef Schlehofer <redacted>
Co-authored-by: Claude Fable 5 <redacted>
5 weeks agoolsrd: report the packaged version in the binary
Josef Schlehofer [Thu, 6 Aug 2026 12:21:13 +0000 (14:21 +0200)]
olsrd: report the packaged version in the binary

olsrd builds its version banner from the VERS make variable, which
defaults to the upstream development version "pre-0.9.9", so
`olsrd -v` never mentioned the version the package was built from.
The source tarball carries no git metadata either, so the git hash
in that string is always zero:

    olsr.org - pre-0.9.9-git_0000000-hash_5fd8976...

Pass PKG_VERSION as VERS, the same way alfred and batctl already
pass REVISION, so the banner identifies the packaged revision. This
also lets test-version.sh check the real version instead of merely
confirming that the binary starts.

Signed-off-by: Josef Schlehofer <redacted>
Co-authored-by: Claude Fable 5 <redacted>
5 weeks agoolsrd: reject non-address input before eval in olsrd-neigh.sh
Josef Schlehofer [Thu, 6 Aug 2026 10:39:35 +0000 (12:39 +0200)]
olsrd: reject non-address input before eval in olsrd-neigh.sh

olsrd-neigh.sh builds shell variable names from data announced by
other nodes in the mesh and passes them through eval:

    eval IP_${ip//[.:]/_}="$hostname"

eval re-parses the string after the quotes have been consumed by the
first expansion pass, so a hostname of `x;reboot` announced by a
remote node is executed as a command on every node that runs the
utility. The values come from the nameservice plugin's hosts file
and from the txtinfo plugin, both of which carry unauthenticated
remote input.

Discard entries containing anything other than the characters that
can legitimately appear in an address or hostname before they reach
eval, in both places.

Reported-by: openwrt-ai[bot]
Signed-off-by: Josef Schlehofer <redacted>
Co-authored-by: Claude Fable 5 <redacted>
5 weeks agoolsrd: initialize the LQ multiplier list pointer in the ubus handler
Josef Schlehofer [Thu, 6 Aug 2026 10:39:35 +0000 (12:39 +0200)]
olsrd: initialize the LQ multiplier list pointer in the ubus handler

The ubus add_interface handler allocates a struct olsr_lq_mult with
malloc() and assigns only ->addr and ->value, leaving ->next
uninitialized before the node is published into cnf->lq_mult. olsrd
walks that list with

    for (mult = cnf->lq_mult; mult != NULL; mult = mult->next)

so the first traversal follows an indeterminate pointer.

Chain the new node onto the existing list, which is what the
configuration file parser does for LinkQualityMult in
src/cfgparser/oparse.y. This also makes the orig_lq_mult_cnt++ on
the next line consistent, since the entry really is prepended to the
list instead of replacing it.

Reported-by: openwrt-ai[bot]
Signed-off-by: Josef Schlehofer <redacted>
Co-authored-by: Claude Fable 5 <redacted>
5 weeks agoolsrd: add missing jshn dependency to olsrd-utils
Josef Schlehofer [Thu, 6 Aug 2026 10:39:35 +0000 (12:39 +0200)]
olsrd: add missing jshn dependency to olsrd-utils

The only file shipped by olsrd-utils is olsrd-neigh.sh, which
sources /usr/share/libubox/jshn.sh on its third line. That file
belongs to the jshn package, which is not pulled in by the
olsrd -> libubus -> libubox dependency chain, so on a minimal image
the utility fails immediately with "not found".

Reported-by: openwrt-ai[bot]
Signed-off-by: Josef Schlehofer <redacted>
Co-authored-by: Claude Fable 5 <redacted>
5 weeks agoolsrd: fix respawn_threshold lookup in the IPv6 init script
Josef Schlehofer [Thu, 6 Aug 2026 10:39:34 +0000 (12:39 +0200)]
olsrd: fix respawn_threshold lookup in the IPv6 init script

The UCI option is spelled respawn_threshold, as documented in
files/olsrd6.config and as read by files/olsrd4.init, but the IPv6
init script looks up _respawn_threshold. The lookup never matches,
so a user-configured value is silently ignored and the built-in
default of 3600 is always used.

Reported-by: openwrt-ai[bot]
Signed-off-by: Josef Schlehofer <redacted>
Co-authored-by: Claude Fable 5 <redacted>
5 weeks agoolsrd: add new package
Josef Schlehofer [Thu, 6 Aug 2026 08:08:02 +0000 (10:08 +0200)]
olsrd: add new package

olsrd is the olsr.org implementation of the Optimized Link
State Routing protocol, together with its plugins packaged as
olsrd-mod-* subpackages.

Moved from the openwrt/routing feed, as discussed in
https://github.com/openwrt/routing/issues/184.

Signed-off-by: Josef Schlehofer <redacted>
Co-authored-by: Claude Fable 5 <redacted>
5 weeks agobcp38: clean up nft rule handling
Dharmik Parmar [Sun, 28 Jun 2026 02:00:15 +0000 (07:30 +0530)]
bcp38: clean up nft rule handling

Quote interface names when creating nft rules and use destroy table for idempotent cleanup.

Signed-off-by: Dharmik Parmar <redacted>
5 weeks agotree-wide: rename version check test.sh to test-version.sh
Josef Schlehofer [Sun, 9 Aug 2026 06:01:33 +0000 (08:01 +0200)]
tree-wide: rename version check test.sh to test-version.sh

In actions-shared-workflows the version is now checked in
test-version.sh, while test.sh is left for the generic tests.

Signed-off-by: Josef Schlehofer <redacted>
5 weeks agogrep: set PKG_SUBDIRS instead of patching Makefile.in
Wei-Ting Yang [Tue, 11 Aug 2026 12:29:36 +0000 (20:29 +0800)]
grep: set PKG_SUBDIRS instead of patching Makefile.in

Set PKG_SUBDIRS in the package Makefile instead of patching Makefile.in
to exclude doc, tests, and gnulib-tests.

Signed-off-by: Wei-Ting Yang <redacted>
5 weeks agorsync: update to 3.5.0
John Audia [Thu, 13 Aug 2026 08:19:23 +0000 (04:19 -0400)]
rsync: update to 3.5.0

Changelog: https://download.samba.org/pub/rsync/NEWS#3.5.0

33 security fixes to call out in this bump:
CVE-2026-53802, CVE-2026-53803, CVE-2026-53785, CVE-2026-53784,
CVE-2026-53793, CVE-2026-53795, CVE-2026-53796, CVE-2026-53797,
CVE-2026-53799, CVE-2026-53800, CVE-2026-53801, CVE-2026-53783,
CVE-2026-53786, CVE-2026-53798, CVE-2026-53788, CVE-2026-53789,
CVE-2026-53791, CVE-2026-53790, CVE-2026-53792, CVE-2026-53794,
CVE-2026-70461, CVE-2026-70458, CVE-2026-70456, CVE-2026-70457,
CVE-2026-70459, CVE-2026-70464, CVE-2026-70455, CVE-2026-70453,
CVE-2026-70452, CVE-2026-70463, CVE-2026-70460, CVE-2026-70462,
CVE-2026-70454

Signed-off-by: John Audia <redacted>
5 weeks agolibrespeed-cli-rust: update to 0.1.1
Josef Schlehofer [Wed, 12 Aug 2026 06:00:03 +0000 (08:00 +0200)]
librespeed-cli-rust: update to 0.1.1

Brings the client in line with the fixes merged into the Go client: --json and
--csv end with a newline, --debug names the address each ICMP ping reached and
the spread of the samples, and the User-Agent carries the operating system and
architecture. Also tolerates a backend that answers getIP.php with an empty
rawIspInfo, which previously discarded the whole response.

Signed-off-by: Josef Schlehofer <redacted>
5 weeks agosing-box: bump to 1.13.18 without Naive outbound support
Sergei S. [Wed, 29 Jul 2026 10:50:56 +0000 (14:50 +0400)]
sing-box: bump to 1.13.18 without Naive outbound support

This patch updates sing-box from 1.12.22 to 1.13.18.

Upstream release information:
https://github.com/SagerNet/sing-box/releases/tag/v1.13.0
https://github.com/SagerNet/sing-box/releases/tag/v1.13.18

Scope note:

The upstream Naive outbound feature is intentionally not enabled in this update.
Naive outbound requires additional build system integration because it depends on
Chromium Network Stack (Cronet). Depending on target and build mode, it requires
either the Cronet runtime library or a Chromium-based toolchain.
Upstream documentation:
https://sing-box.sagernet.org/configuration/outbound/naive/#structure

Changes:

1. Add upstream linker flags and compatibility build tags

Add linker flags required by the sing-box upstream release build:
- -checklinkname=0

Documentation:
https://sing-box.sagernet.org/installation/build-from-source/#linker-flags

-checklinkname=0 is required by the sing-box 1.13.x build configuration due to its use of
low-level go:linkname functionality and the stricter linkname validation in newer Go toolchains.

Add upstream compatibility build tags required by sing-box 1.13.x:
- badlinkname
- tfogo_checklinkname0

These tags are part of the upstream sing-box release build configuration:
https://sing-box.sagernet.org/installation/build-from-source/#build-tags

2. Add optional CCM and OCM build options

Add new optional OpenWrt configuration options:
- CONFIG_SINGBOX_WITH_CCM
  Build with Claude Code Multiplexer service support
- CONFIG_SINGBOX_WITH_OCM
  Build with OpenAI Codex Multiplexer service support

Both options are disabled by default and are only enabled when explicitly
selected by the user.

The corresponding upstream build tags are:
- with_ccm
- with_ocm

Documentation: https://sing-box.sagernet.org/installation/build-from-source/#build-tags
Signed-off-by: Sergei S. <redacted>
5 weeks agobc: drop disable-doc patch for PKG_SUBDIRS
Alexandru Ardelean [Sun, 9 Aug 2026 18:07:30 +0000 (21:07 +0300)]
bc: drop disable-doc patch for PKG_SUBDIRS

001-disable-doc.patch dropped the doc subdir (which needs makeinfo) from
SUBDIRS in Makefile.in. Use PKG_SUBDIRS:=lib bc dc, OpenWrt's wired-in knob
for restricting the build, to skip doc without patching.

Signed-off-by: Alexandru Ardelean <redacted>
5 weeks agobird3: drop stale conffiles entries
Josef Schlehofer [Thu, 6 Aug 2026 10:56:45 +0000 (12:56 +0200)]
bird3: drop stale conffiles entries

/etc/bird4.conf and /etc/bird6.conf are left over from the bird1
packages, which shipped a separate configuration file per address
family. bird3 is a single daemon handling both and installs
/etc/bird.conf only, so the two entries refer to files this package
never creates.

Reported-by: openwrt-ai[bot]
Signed-off-by: Josef Schlehofer <redacted>
Co-authored-by: Claude Fable 5 <redacted>
5 weeks agobird3: add new package
Josef Schlehofer [Thu, 6 Aug 2026 08:08:01 +0000 (10:08 +0200)]
bird3: add new package

BIRD is an internet routing daemon with support of modern
routing protocols (BGP, OSPF, RIP, Babel) for IPv4 and IPv6. This is
the 3.x branch, a multithreaded rewrite.

Moved from the openwrt/routing feed, as discussed in
https://github.com/openwrt/routing/issues/184.

Signed-off-by: Josef Schlehofer <redacted>
Co-authored-by: Claude Fable 5 <redacted>
5 weeks agobird2: document the OSPF alignment patch
Josef Schlehofer [Thu, 6 Aug 2026 12:27:42 +0000 (14:27 +0200)]
bird2: document the OSPF alignment patch

The patch carried only a subject line and a placeholder commit id, so
nothing recorded why marking struct top_hash_entry as PACKED fixes a
bus error, or whether it can be dropped.

Restore the description and the sign-off from the commit that
introduced it in the routing feed, keeping the original author's
wording, and record the upstream status. Verified that BIRD 2.19.2
still declares the structure without any alignment attribute, so the
patch is still needed.

The header keeps the "---" separator the sibling patch uses, and
orders Signed-off-by last among the trailers.

Signed-off-by: Josef Schlehofer <redacted>
Co-authored-by: Claude Fable 5 <redacted>
5 weeks agobird2: drop stale conffiles entries
Josef Schlehofer [Thu, 6 Aug 2026 10:56:37 +0000 (12:56 +0200)]
bird2: drop stale conffiles entries

/etc/bird4.conf and /etc/bird6.conf are left over from the bird1
packages, which shipped a separate configuration file per address
family. bird2 is a single daemon handling both and installs
/etc/bird.conf only, so the two entries refer to files this package
never creates.

Reported-by: openwrt-ai[bot]
Signed-off-by: Josef Schlehofer <redacted>
Co-authored-by: Claude Fable 5 <redacted>
5 weeks agobird2: add new package
Josef Schlehofer [Thu, 6 Aug 2026 08:08:01 +0000 (10:08 +0200)]
bird2: add new package

BIRD is an internet routing daemon with support of modern
routing protocols (BGP, OSPF, RIP, Babel) for IPv4 and IPv6. This is
the 2.x branch.

Moved from the openwrt/routing feed, as discussed in
https://github.com/openwrt/routing/issues/184.

Signed-off-by: Josef Schlehofer <redacted>
Co-authored-by: Claude Fable 5 <redacted>
5 weeks agolibrespeed-cli: update to 1.0.13
Josef Schlehofer [Mon, 10 Aug 2026 08:46:16 +0000 (10:46 +0200)]
librespeed-cli: update to 1.0.13

Carry fixes for a data race, a goroutine leak, output escaping, JSON and CSV
termination, and sub-millisecond ping precision, plus additional --debug
output. All patches are under review upstream.

Set the version through GO_PKG_LDFLAGS_X. The package never passed one, so
--version reported neither a name nor a version.

Drop the serverIdx patch: 1.0.13 resolves the same problem by checking the map
lookup rather than reading a possibly absent key.

Signed-off-by: Josef Schlehofer <redacted>
5 weeks agopython-typing-extensions: bump to 4.16.0
Alexandru Ardelean [Sun, 9 Aug 2026 09:32:47 +0000 (12:32 +0300)]
python-typing-extensions: bump to 4.16.0

Refresh sha256 from PyPI sdist.

Signed-off-by: Alexandru Ardelean <redacted>
5 weeks agopython-pyasn1: bump to 0.6.4
Alexandru Ardelean [Sun, 9 Aug 2026 09:32:46 +0000 (12:32 +0300)]
python-pyasn1: bump to 0.6.4

Refresh sha256 from PyPI sdist.

Signed-off-by: Alexandru Ardelean <redacted>
5 weeks agofrp: add test script
Alexandru Ardelean [Sun, 9 Aug 2026 09:40:50 +0000 (12:40 +0300)]
frp: add test script

Add a CI test.sh exercising basic package functionality.

Signed-off-by: Alexandru Ardelean <redacted>
5 weeks agohwdata: update to 0.410
Alexandru Ardelean [Sun, 9 Aug 2026 09:35:34 +0000 (12:35 +0300)]
hwdata: update to 0.410

Refresh PKG_HASH from the release tarball.

Signed-off-by: Alexandru Ardelean <redacted>
5 weeks agofrp: update to 0.70.1
Alexandru Ardelean [Sun, 9 Aug 2026 09:35:33 +0000 (12:35 +0300)]
frp: update to 0.70.1

Refresh PKG_HASH from the release tarball.

Signed-off-by: Alexandru Ardelean <redacted>
5 weeks agodelve: update to 1.27.1
Alexandru Ardelean [Sun, 9 Aug 2026 09:35:33 +0000 (12:35 +0300)]
delve: update to 1.27.1

Refresh PKG_HASH from the release tarball.

Signed-off-by: Alexandru Ardelean <redacted>
5 weeks agopython-greenlet: bump to 3.5.4
Alexandru Ardelean [Sun, 9 Aug 2026 09:31:54 +0000 (12:31 +0300)]
python-greenlet: bump to 3.5.4

Refresh sha256 from PyPI sdist.

Signed-off-by: Alexandru Ardelean <redacted>
5 weeks agopython-cython: bump to 3.2.9
Alexandru Ardelean [Sun, 9 Aug 2026 09:31:54 +0000 (12:31 +0300)]
python-cython: bump to 3.2.9

Refresh sha256 from PyPI sdist.

Signed-off-by: Alexandru Ardelean <redacted>
5 weeks agopython-cffi: bump to 2.1.1
Alexandru Ardelean [Sun, 9 Aug 2026 09:31:53 +0000 (12:31 +0300)]
python-cffi: bump to 2.1.1

Refresh sha256 from PyPI sdist. Drop the macOS cross-compile patch;
2.1.1 already carries the sysconfig.get_platform() fix upstream.

Add test-version.sh: 2.1.1 ships the cffi-gen-src console tool, a
subcommand CLI with no version flag, so the generic per-executable
version probe fails the package ("No executables in the package
provided version"). test-version.sh skips that probe, and test.sh now
asserts cffi.__version__ against the packaged version.

Signed-off-by: Alexandru Ardelean <redacted>
5 weeks agopython-pika: add test script
Alexandru Ardelean [Sun, 9 Aug 2026 09:40:50 +0000 (12:40 +0300)]
python-pika: add test script

Add a CI test.sh exercising basic package functionality.

Signed-off-by: Alexandru Ardelean <redacted>
5 weeks agopython-click: bump to 8.4.2
Alexandru Ardelean [Sun, 9 Aug 2026 09:32:26 +0000 (12:32 +0300)]
python-click: bump to 8.4.2

Refresh sha256 from PyPI sdist.

Signed-off-by: Alexandru Ardelean <redacted>
5 weeks agopython-pika: bump to 1.4.4
Alexandru Ardelean [Sun, 9 Aug 2026 09:32:26 +0000 (12:32 +0300)]
python-pika: bump to 1.4.4

Refresh sha256 from PyPI sdist.

Signed-off-by: Alexandru Ardelean <redacted>
5 weeks agopython-awscli: bump to 1.46.0
Alexandru Ardelean [Sun, 9 Aug 2026 09:32:25 +0000 (12:32 +0300)]
python-awscli: bump to 1.46.0

Refresh sha256 from PyPI sdist.

Signed-off-by: Alexandru Ardelean <redacted>
5 weeks agopython-pytest-forked: add test script
Alexandru Ardelean [Sun, 9 Aug 2026 09:40:50 +0000 (12:40 +0300)]
python-pytest-forked: add test script

Add a CI test.sh exercising basic package functionality.

Signed-off-by: Alexandru Ardelean <redacted>
5 weeks agopython-pip: bump to 26.2.1
Alexandru Ardelean [Sun, 9 Aug 2026 09:32:05 +0000 (12:32 +0300)]
python-pip: bump to 26.2.1

Refresh sha256 from the PyPI sdist and refresh 003 for the shifted line.

Retarget 002-pip-runner-pyc-fix.patch instead of dropping it: in 26.2.1
get_runnable_pip() moved from build_env.py (now a package) to
_internal/utils/misc.py. The function is otherwise unchanged and still
returns __pip-runner__.py, so the .pyc fallback is still required. We ship
pip byte-compiled only (the .py sources live in the -src package), so
without it build isolation cannot locate the runner and every PEP 517
install fails on target. This is a packaging workaround, not an upstream
bug, so upstream has no reason to carry it.

Signed-off-by: Alexandru Ardelean <redacted>
5 weeks agopython-pytest-forked: bump to 1.7.5
Alexandru Ardelean [Sun, 9 Aug 2026 09:32:05 +0000 (12:32 +0300)]
python-pytest-forked: bump to 1.7.5

Refresh sha256 from PyPI sdist. Upstream renamed the sdist to use an
underscore (pytest_forked-1.7.5.tar.gz), so set PYPI_SOURCE_NAME.

Signed-off-by: Alexandru Ardelean <redacted>
5 weeks agopython-pytest: bump to 9.1.1
Alexandru Ardelean [Sun, 9 Aug 2026 09:32:05 +0000 (12:32 +0300)]
python-pytest: bump to 9.1.1

Refresh sha256 from PyPI sdist.

Signed-off-by: Alexandru Ardelean <redacted>
5 weeks agopython-uvicorn: add test script
Alexandru Ardelean [Sun, 9 Aug 2026 09:40:50 +0000 (12:40 +0300)]
python-uvicorn: add test script

Add a CI test.sh exercising basic package functionality.

Signed-off-by: Alexandru Ardelean <redacted>
5 weeks agopython-starlette: add test script
Alexandru Ardelean [Sun, 9 Aug 2026 09:40:50 +0000 (12:40 +0300)]
python-starlette: add test script

Add a CI test.sh exercising basic package functionality.

Signed-off-by: Alexandru Ardelean <redacted>
5 weeks agopython-socketio: bump to 5.16.4
Alexandru Ardelean [Sun, 9 Aug 2026 09:32:07 +0000 (12:32 +0300)]
python-socketio: bump to 5.16.4

Refresh sha256 from PyPI sdist.

Signed-off-by: Alexandru Ardelean <redacted>
5 weeks agopython-uvicorn: bump to 0.52.1
Alexandru Ardelean [Sun, 9 Aug 2026 09:32:07 +0000 (12:32 +0300)]
python-uvicorn: bump to 0.52.1

Refresh sha256 from PyPI sdist.

Signed-off-by: Alexandru Ardelean <redacted>
5 weeks agopython-starlette: bump to 1.6.0
Alexandru Ardelean [Sun, 9 Aug 2026 09:32:06 +0000 (12:32 +0300)]
python-starlette: bump to 1.6.0

Refresh sha256 from PyPI sdist. 1.6.0 switched its build backend from
setuptools to hatchling, so build-depend on python-hatchling/host.

Signed-off-by: Alexandru Ardelean <redacted>
5 weeks agopillow: drop the pybind11 build dependency
Alexandru Ardelean [Tue, 11 Aug 2026 06:22:14 +0000 (09:22 +0300)]
pillow: drop the pybind11 build dependency

Pillow uses pybind11 only for pybind11.setup_helpers.ParallelCompile,
which parallelises the C extension build; it ships no runtime bindings.
Patch setup.py to remove that import and call and drop pybind11 from
build-system.requires, then remove python-pybind11/host from
PKG_BUILD_DEPENDS. The C extensions are compiled serially instead, with
no functional change to the package.

Signed-off-by: Alexandru Ardelean <redacted>
5 weeks agopython-marshmallow: add test script
Alexandru Ardelean [Sun, 9 Aug 2026 09:40:50 +0000 (12:40 +0300)]
python-marshmallow: add test script

Add a CI test.sh exercising basic package functionality.

Signed-off-by: Alexandru Ardelean <redacted>
5 weeks agopython-platformdirs: bump to 4.11.1
Alexandru Ardelean [Sun, 9 Aug 2026 09:32:46 +0000 (12:32 +0300)]
python-platformdirs: bump to 4.11.1

Refresh sha256 from PyPI sdist.

Signed-off-by: Alexandru Ardelean <redacted>
5 weeks agopython-marshmallow: bump to 4.3.1
Alexandru Ardelean [Sun, 9 Aug 2026 09:32:46 +0000 (12:32 +0300)]
python-marshmallow: bump to 4.3.1

Refresh sha256 from PyPI sdist.

Signed-off-by: Alexandru Ardelean <redacted>
5 weeks agopython-mako: bump to 1.4.1
Alexandru Ardelean [Sun, 9 Aug 2026 09:32:45 +0000 (12:32 +0300)]
python-mako: bump to 1.4.1

Refresh sha256 from PyPI sdist.

Signed-off-by: Alexandru Ardelean <redacted>
5 weeks agopython-flit-core: revert to 3.12.0
Alexandru Ardelean [Tue, 11 Aug 2026 06:09:08 +0000 (09:09 +0300)]
python-flit-core: revert to 3.12.0

flit-core 4.0.2 breaks the whole python feed. flit-core is a host-only
build backend, but nearly everything built with it caps flit_core<4 (the
host tools wheel/installer/pyproject-hooks/typing-extensions and dozens of
leaf packages like marshmallow, click, pip), so their host builds fail with
"Missing dependencies: flit_core<4" against 4.0.2. Nothing needs
flit_core>=4; 3.12.0 satisfies every cap and has no runtime impact. Revert
until the ecosystem's upper bounds catch up.

Signed-off-by: Alexandru Ardelean <redacted>
5 weeks agosqueezelite: add version test override
Kel Modderman [Sat, 8 Aug 2026 10:46:57 +0000 (20:46 +1000)]
squeezelite: add version test override

The generic package test greps executable output for PKG_VERSION, which
cannot match here: PKG_VERSION separates the build number with a dot for
apk, while squeezelite reports it with a hyphen.

Derive the expected string from PKG_VERSION rather than hardcoding it, so
the check keeps working on later updates.

Signed-off-by: Kel Modderman <redacted>
5 weeks agosqueezelite: update to 2.0.0.1584
Kel Modderman [Sat, 8 Aug 2026 07:07:44 +0000 (17:07 +1000)]
squeezelite: update to 2.0.0.1584

Refresh sound/squeezelite/patches/010-select_broadcast_interface.patch
and add the git headers required for 'git am' compatibility.

Signed-off-by: Kel Modderman <redacted>
5 weeks agoopenvpn: update to 2.7.6
Sander van Deijck [Mon, 10 Aug 2026 12:36:39 +0000 (14:36 +0200)]
openvpn: update to 2.7.6

Update to the latest version.

For changes, see:
https://github.com/OpenVPN/openvpn/blob/v2.7.6/Changes.rst

Signed-off-by: Sander van Deijck <redacted>
5 weeks agoovpn-dco: update to version 7.1.0.2026080300
Sander van Deijck [Mon, 10 Aug 2026 12:33:13 +0000 (14:33 +0200)]
ovpn-dco: update to version 7.1.0.2026080300

Update to the latest version.

Signed-off-by: Sander van Deijck <redacted>
5 weeks agotelegraf: update to 1.39.3
Niklas Thorild [Mon, 10 Aug 2026 21:27:29 +0000 (23:27 +0200)]
telegraf: update to 1.39.3

Release notes: https://github.com/influxdata/telegraf/releases/tag/v1.39.3

Signed-off-by: Niklas Thorild <redacted>
5 weeks agoredis: update to 8.8.0
Alexandru Ardelean [Sun, 9 Aug 2026 09:16:41 +0000 (12:16 +0300)]
redis: update to 8.8.0

Update from the 6.2.x series to the current 8.x line. The 8.x releases
are tri-licensed (RSALv2 / SSPLv1 / AGPL-3.0); set PKG_LICENSE to
AGPL-3.0-only and follow upstream renaming COPYING to LICENSE.txt.

Drop 020-fix-atomicvar.patch, no longer needed, and keep
030-skip-module-tests.patch. Add a functional test.sh.

Signed-off-by: Alexandru Ardelean <redacted>
5 weeks agopython-s3transfer: bump to 0.19.2
Alexandru Ardelean [Sun, 9 Aug 2026 09:32:22 +0000 (12:32 +0300)]
python-s3transfer: bump to 0.19.2

Refresh sha256 from PyPI sdist.

Signed-off-by: Alexandru Ardelean <redacted>
5 weeks agopython-botocore: bump to 1.43.67
Alexandru Ardelean [Sun, 9 Aug 2026 09:32:22 +0000 (12:32 +0300)]
python-botocore: bump to 1.43.67

Refresh sha256 from PyPI sdist.

Signed-off-by: Alexandru Ardelean <redacted>
5 weeks agopython-boto3: bump to 1.43.67
Alexandru Ardelean [Sun, 9 Aug 2026 09:32:20 +0000 (12:32 +0300)]
python-boto3: bump to 1.43.67

Refresh sha256 from PyPI sdist.

Signed-off-by: Alexandru Ardelean <redacted>
5 weeks agopython-msgpack: add test script
Alexandru Ardelean [Sun, 9 Aug 2026 09:40:50 +0000 (12:40 +0300)]
python-msgpack: add test script

Add a CI test.sh exercising basic package functionality.

Signed-off-by: Alexandru Ardelean <redacted>
5 weeks agopython-eventlet: bump to 0.41.1
Alexandru Ardelean [Sun, 9 Aug 2026 09:32:04 +0000 (12:32 +0300)]
python-eventlet: bump to 0.41.1

Refresh sha256 from PyPI sdist.

Signed-off-by: Alexandru Ardelean <redacted>
5 weeks agopython-msgpack: bump to 1.2.1
Alexandru Ardelean [Sun, 9 Aug 2026 09:32:03 +0000 (12:32 +0300)]
python-msgpack: bump to 1.2.1

Refresh sha256 from PyPI sdist.

Signed-off-by: Alexandru Ardelean <redacted>
5 weeks agopython-gmpy2: bump to 2.3.1
Alexandru Ardelean [Sun, 9 Aug 2026 09:32:03 +0000 (12:32 +0300)]
python-gmpy2: bump to 2.3.1

Refresh sha256 from PyPI sdist.

Signed-off-by: Alexandru Ardelean <redacted>
5 weeks agobanip: fix cpu core calculation
Dirk Brenken [Mon, 10 Aug 2026 17:35:56 +0000 (19:35 +0200)]
banip: fix cpu core calculation

- only cap the cpu core count by available memory if it was auto-detected,
  a manually set 'ban_cores' is now authoritative and no longer lowered
- readme update: clarify that the auto-cap does not apply to a manually
  set core count

Signed-off-by: Dirk Brenken <redacted>
5 weeks agopython3-drf-nested-routers: update to 0.95.3
Wei-Ting Yang [Mon, 10 Aug 2026 14:25:23 +0000 (22:25 +0800)]
python3-drf-nested-routers: update to 0.95.3

Release notes:
https://github.com/alanjds/drf-nested-routers/releases/tag/v0.95.2
https://github.com/alanjds/drf-nested-routers/releases/tag/v0.95.3

Signed-off-by: Wei-Ting Yang <redacted>
5 weeks agodjango-restframework: update to 3.18.0
Wei-Ting Yang [Mon, 10 Aug 2026 14:01:42 +0000 (22:01 +0800)]
django-restframework: update to 3.18.0

Release notes:
https://github.com/encode/django-rest-framework/releases/tag/3.18.0

Signed-off-by: Wei-Ting Yang <redacted>
5 weeks agodjango: update to 6.1
Wei-Ting Yang [Mon, 10 Aug 2026 13:52:16 +0000 (21:52 +0800)]
django: update to 6.1

Release notes:
https://docs.djangoproject.com/en/6.1/releases/6.1/

Signed-off-by: Wei-Ting Yang <redacted>
5 weeks agopython-asgiref: update to 3.12.1
Wei-Ting Yang [Mon, 10 Aug 2026 14:18:35 +0000 (22:18 +0800)]
python-asgiref: update to 3.12.1

Release notes:
https://github.com/django/asgiref/blob/main/CHANGELOG.txt

Signed-off-by: Wei-Ting Yang <redacted>
5 weeks agouradvd: fix the version check override
Josef Schlehofer [Sun, 9 Aug 2026 10:18:45 +0000 (12:18 +0200)]
uradvd: fix the version check override

The script greps for "uradvd $PKG_SOURCE_DATE", but the test harness
only exports PKG_NAME, PKG_VERSION and CI_HELPERS. PKG_SOURCE_DATE is a
build time Makefile variable and is empty in the test container, so the
grep -Fx pattern is "uradvd " and never matches.

The binary is built with VERSION=$(PKG_SOURCE_DATE) and prints
"uradvd 2025-09-20", while PKG_VERSION is 2025.09.20~<short hash>, so
derive the date from the version instead.

Rename it to test-version.sh in the process: the generic probe looks for
PKG_VERSION verbatim and cannot match the dashed date either, and uradvd
is the only executable in the package, so without an override the whole
package fails. The shebang goes back to /bin/sh, which is what the
harness runs the script with.

Signed-off-by: Josef Schlehofer <redacted>
5 weeks agosyncthing: bump to 2.1.3
George Sapkin [Mon, 10 Aug 2026 12:50:43 +0000 (15:50 +0300)]
syncthing: bump to 2.1.3

Changes: https://github.com/syncthing/syncthing/releases/tag/v2.1.3
Signed-off-by: George Sapkin <redacted>
5 weeks agosudo: add test-version.sh and stop running sudo in tests
Alexandru Ardelean [Mon, 10 Aug 2026 09:41:17 +0000 (12:41 +0300)]
sudo: add test-version.sh and stop running sudo in tests

PKG_VERSION substitutes p->_p (1.9.17_p2) for a valid apk version, but the
binaries print the real 1.9.17p2, so the generic per-executable version
probe reports "no executables provided version" and fails. Add a
test-version.sh that matches the version string compiled into the binary.

Executing sudo under QEMU emulation (e.g. mips_24kc) hangs indefinitely, so
neither test-version.sh nor test.sh runs it any more: the version is read
from the binary and test.sh only checks the installed files.

Signed-off-by: Alexandru Ardelean <redacted>
5 weeks agosudo: drop 020-no-owner-change.patch for a make override
Alexandru Ardelean [Sun, 9 Aug 2026 10:00:37 +0000 (13:00 +0300)]
sudo: drop 020-no-owner-change.patch for a make override

The patch blanked INSTALL_OWNER in Makefile.in so the staged install does
not chown to install_uid/install_gid, which fails when building as an
unprivileged user. sudo already supports this: the top-level install rule
recurses with "INSTALL_OWNER=$(INSTALL_OWNER)" into every sub-make, and
sudo's own "package" target does "make install INSTALL_OWNER=" for exactly
this fakeroot case. Pass INSTALL_OWNER= via MAKE_INSTALL_FLAGS instead of
carrying a patch.

Signed-off-by: Alexandru Ardelean <redacted>
5 weeks agopython-installer: allow flit_core 4.x as the build backend
Alexandru Ardelean [Mon, 10 Aug 2026 12:15:27 +0000 (15:15 +0300)]
python-installer: allow flit_core 4.x as the build backend

installer caps flit_core<4 in its build-system, so its /host build fails
with "Missing dependencies: flit_core<4" against flit-core 4.0.2. flit_core
4 builds it unchanged; relax the upper bound.

Signed-off-by: Alexandru Ardelean <redacted>
5 weeks agopython-pyproject-hooks: allow flit_core 4.x as the build backend
Alexandru Ardelean [Mon, 10 Aug 2026 12:15:26 +0000 (15:15 +0300)]
python-pyproject-hooks: allow flit_core 4.x as the build backend

pyproject-hooks caps flit_core<4 in its build-system, so its /host build
fails with "Missing dependencies: flit_core<4" against flit-core 4.0.2.
flit_core 4 builds it unchanged; relax the upper bound.

Signed-off-by: Alexandru Ardelean <redacted>
5 weeks agoadblock: fix cpu core calculation
Dirk Brenken [Mon, 10 Aug 2026 17:15:09 +0000 (19:15 +0200)]
adblock: fix cpu core calculation

- only cap the cpu core count by available memory if it was auto-detected,
  a manually set 'adb_cores' is now authoritative and no longer lowered
- readme update: clarify that the auto-cap does not apply to a manually
  set core count

Signed-off-by: Dirk Brenken <redacted>
5 weeks agosamba4: bump to 4.24.5
Aditya Nugraha [Tue, 30 Jun 2026 21:04:47 +0000 (04:04 +0700)]
samba4: bump to 4.24.5

https://www.samba.org/samba/history/samba-4.24.5.html

Patch removed due to fixed in Makefile:
  012-fix-gnutls-version-check.patch

Patch removed because of no longer needed:
  005-musl_uintptr.patch

Makefile:
  Fixed gnutls sed related things.
  Fixed compile_et & asn1_compile linkage at build time to fixes build error
  Dropped NONE from bundled-libraries as to fix compilation errors, NONE
  now seems meaning not to bundle any libraries.
  Added RSTRIP from gcc Makefile to reduce compiled samba4 binaries and
  libraries filesize by around 15%, tested, --private-libraries rpath
  seems intact or identical with not-stripped binaries and libraries
  one.
  samba's cross_answer() returns on the *first* message matching a check in
  cross-answers.txt, and Build/Configure copies the per-arch answers file
  before appending its own answers.  Up to samba 4.16 the check message
  itself carried a "setting/geting hints" typo, which the generated answers
  files inherited; samba fixed its spelling later, so the file entries
  stopped matching and configure started aborting with

  Cross answers file ... is incomplete

  The 'Checking whether fcntl supports setting/getting hints: OK' line
  appended by Build/Configure was added to paper over that, not because the
  targets answer OK.

  Now that the spelling in the answers files is fixed, the generated
  (-11, "") entry matches first and the appended OK is dead code.  Keep the
  generated answer -- samba's test uses F_SET_FILE_RW_HINT/F_GET_FILE_RW_HINT,
  which the kernel no longer implements, so the check legitimately fails on
  every target -- and drop the unreachable echo so each check has exactly
  one answer.

smb.conf.template:
  Added SMB2 as default minimum protocol for client, also enabled server
  & client encryption by default. Use smbpasswd -a username to add a
  username & password for samba. To connect into samba from Windows 10
  and above, it need to be done by this guide : https://www.asus.com/support/faq/1054736/ .

Build system: x86/64
Build-tested: x86/64-glibc
Build-tested: x86/64-musl
Run-tested: x86/64-glibc

Signed-off-by: Aditya Nugraha <redacted>
5 weeks agopython-typing-extensions: allow flit_core 4.x as the build backend
Alexandru Ardelean [Mon, 10 Aug 2026 12:13:35 +0000 (15:13 +0300)]
python-typing-extensions: allow flit_core 4.x as the build backend

Like python-wheel, typing-extensions caps its build backend at
"flit_core >=3.11,<4", so python-typing-extensions/host fails with
"Missing dependencies: flit_core<4,>=3.11" now that the feed ships
flit-core 4.0.2. flit_core 4 builds it unchanged; relax the upper bound.

Signed-off-by: Alexandru Ardelean <redacted>
5 weeks agopython-vcs-versioning: bump to 2.2.4
Alexandru Ardelean [Sun, 9 Aug 2026 09:31:53 +0000 (12:31 +0300)]
python-vcs-versioning: bump to 2.2.4

Refresh sha256 from PyPI sdist.

Signed-off-by: Alexandru Ardelean <redacted>
5 weeks agopython-setuptools-rust: bump to 1.13.0
Alexandru Ardelean [Sun, 9 Aug 2026 09:31:52 +0000 (12:31 +0300)]
python-setuptools-rust: bump to 1.13.0

Refresh sha256 from PyPI sdist.

Signed-off-by: Alexandru Ardelean <redacted>
5 weeks agopython-setuptools: bump to 84.0.0
Alexandru Ardelean [Sun, 9 Aug 2026 09:31:52 +0000 (12:31 +0300)]
python-setuptools: bump to 84.0.0

Refresh sha256 from PyPI sdist.

Signed-off-by: Alexandru Ardelean <redacted>
5 weeks agopython-wheel: allow flit_core 4.x as the build backend
Alexandru Ardelean [Mon, 10 Aug 2026 08:21:25 +0000 (11:21 +0300)]
python-wheel: allow flit_core 4.x as the build backend

wheel 0.47.0 caps its build requirement at "flit_core >=3.11,<4", but the
feed now ships flit-core 4.0.2, so python-wheel/host (and the whole python
host build-chain that depends on it) fails with "Missing dependencies:
flit_core<4,>=3.11". flit_core 4 builds wheel unchanged, so relax the upper
bound.

Signed-off-by: Alexandru Ardelean <redacted>
5 weeks agolibmpc: update to 1.4.1 and drop only-src patch
Alexandru Ardelean [Sun, 9 Aug 2026 17:59:24 +0000 (20:59 +0300)]
libmpc: update to 1.4.1 and drop only-src patch

1.4.1 ships as a .tar.xz (the .tar.gz is gone), so switch PKG_SOURCE to
.tar.xz; the @GNU mirror still serves it. Replace 001-only-src.patch
(SUBDIRS = src) with PKG_SUBDIRS:=src so tests/doc/tools stay unbuilt.

Signed-off-by: Alexandru Ardelean <redacted>
5 weeks agolibrespeed-cli-rust: add new package
Josef Schlehofer [Mon, 10 Aug 2026 02:07:12 +0000 (04:07 +0200)]
librespeed-cli-rust: add new package

Rust port of librespeed-cli for 32-bit PowerPC targets not supported by
the Go implementation, such as CZ.NIC Turris 1.x.

The CLI output of --list and --csv-header matches the Go client, so it
can be used as a drop-in replacement. Both implementations install
/usr/bin/librespeed-cli and therefore PROVIDES/CONFLICTS are set
accordingly.

Use libopenssl instead of rustls' ring backend, which has significantly
better AES-GCM performance on big-endian PowerPC.

Signed-off-by: Josef Schlehofer <redacted>
5 weeks agosscep: rename test.sh to test-version.sh
Josef Schlehofer [Wed, 29 Jul 2026 05:47:46 +0000 (07:47 +0200)]
sscep: rename test.sh to test-version.sh

The script only performs a version check, which is what test-version.sh
is meant for. As a version check override it also replaces the generic
per-executable probing, which warns about mkrequest not reporting the
version.

Signed-off-by: Josef Schlehofer <redacted>
5 weeks agotree-wide: remove quiet mode from grep in test version checks
Josef Schlehofer [Wed, 29 Jul 2026 05:47:42 +0000 (07:47 +0200)]
tree-wide: remove quiet mode from grep in test version checks

Remove the quiet mode flag (-q) from grep in version check commands
to ensure that their stdout output is visible.

While at it, switch the remaining regex matches (perl, sscep, awscli) to
fixed-string matching where appropriate, so that special characters in the
version string are matched literally.

For libzip, the zipcmp and zipmerge branches ran grep and then
unconditionally exited 0, so a version mismatch was never reported and
the version check override always passed.

Signed-off-by: Josef Schlehofer <redacted>
5 weeks agolibsndfile: drop cmake4 patch for a policy override
Alexandru Ardelean [Sun, 9 Aug 2026 17:20:27 +0000 (20:20 +0300)]
libsndfile: drop cmake4 patch for a policy override

001-cmake4.patch backported the unreleased upstream commit 52b803f. The
buildroot's CMake 4 only needs the raised minimum (FindPythonInterp still
resolves), so replace it with -DCMAKE_POLICY_VERSION_MINIMUM=3.5.

Signed-off-by: Alexandru Ardelean <redacted>
5 weeks agopython-protobuf: add test script
Alexandru Ardelean [Sun, 9 Aug 2026 09:14:15 +0000 (12:14 +0300)]
python-protobuf: add test script

Add a CI test.sh that imports google.protobuf and round-trips the
Timestamp and Struct well-known types through SerializeToString and
ParseFromString, covering the descriptor pool, encoder and decoder
without needing a compiled .proto. Modelled on python-rpds-py's test.

Signed-off-by: Alexandru Ardelean <redacted>
5 weeks agopython-rpds-py: bump to 2026.6.3
Alexandru Ardelean [Wed, 3 Jun 2026 00:32:32 +0000 (03:32 +0300)]
python-rpds-py: bump to 2026.6.3

Refresh sha256 from the PyPI sdist. Upstream moved to a CalVer scheme.

Signed-off-by: Alexandru Ardelean <redacted>
5 weeks agopython-protobuf: bump to 7.35.1
Alexandru Ardelean [Wed, 3 Jun 2026 00:32:32 +0000 (03:32 +0300)]
python-protobuf: bump to 7.35.1

Refresh sha256 from the PyPI sdist.

Signed-off-by: Alexandru Ardelean <redacted>
5 weeks agopython-pybind11: bump to 3.1.0
Alexandru Ardelean [Wed, 3 Jun 2026 00:32:32 +0000 (03:32 +0300)]
python-pybind11: bump to 3.1.0

Refresh sha256 from the PyPI sdist. Package is HOST_ONLY, so no target
runtime test is exercised.

Signed-off-by: Alexandru Ardelean <redacted>
5 weeks agopython-setuptools-scm: bump to 10.2.1
Alexandru Ardelean [Sun, 9 Aug 2026 09:31:46 +0000 (12:31 +0300)]
python-setuptools-scm: bump to 10.2.1

Refresh sha256 from PyPI sdist.

Signed-off-by: Alexandru Ardelean <redacted>
5 weeks agopython-hatchling: bump to 1.31.0
Alexandru Ardelean [Sun, 9 Aug 2026 09:31:46 +0000 (12:31 +0300)]
python-hatchling: bump to 1.31.0

Refresh sha256 from PyPI sdist.

Signed-off-by: Alexandru Ardelean <redacted>
5 weeks agopython-flit-core: bump to 4.0.2
Alexandru Ardelean [Sun, 9 Aug 2026 09:31:45 +0000 (12:31 +0300)]
python-flit-core: bump to 4.0.2

Refresh sha256 from PyPI sdist.

Signed-off-by: Alexandru Ardelean <redacted>
5 weeks agopython-packaging: bump to 26.3
Alexandru Ardelean [Sun, 9 Aug 2026 09:31:03 +0000 (12:31 +0300)]
python-packaging: bump to 26.3

Refresh sha256 from PyPI sdist.

Signed-off-by: Alexandru Ardelean <redacted>
5 weeks agopython-argcomplete: bump to 3.7.2
Alexandru Ardelean [Sun, 9 Aug 2026 09:31:03 +0000 (12:31 +0300)]
python-argcomplete: bump to 3.7.2

Refresh sha256 from PyPI sdist.

Signed-off-by: Alexandru Ardelean <redacted>
5 weeks agopython-anyio: bump to 4.14.2
Alexandru Ardelean [Sun, 9 Aug 2026 09:31:02 +0000 (12:31 +0300)]
python-anyio: bump to 4.14.2

Refresh sha256 from PyPI sdist.

Signed-off-by: Alexandru Ardelean <redacted>
6 weeks agohev-socks5-tunnel: allow multiple instances
Sergei S. [Sun, 2 Aug 2026 15:56:02 +0000 (19:56 +0400)]
hev-socks5-tunnel: allow multiple instances

Add support for running multiple service instances.
- switch UCI config from a single named section to "instance" sections
- update the procd init script to start multiple instances
- migrate existing single-instance configurations during package upgrade (uci-defaults script)
- bump PKG_RELEASE

Signed-off-by: Sergei S. <redacted>
6 weeks agopython-cffi: fix cross-compilation on macOS hosts
Josef Schlehofer [Fri, 7 Aug 2026 11:19:31 +0000 (13:19 +0200)]
python-cffi: fix cross-compilation on macOS hosts

setup.py picks the macOS-only -iwithsysroot/usr/include/ffi flag from
sys.platform, which describes the interpreter running the build rather than
the target, so cross-compiling from a macOS host hands an Apple clang flag to
the GNU cross compiler and the build fails. Use sysconfig.get_platform(),
which honours the _PYTHON_HOST_PLATFORM that python3-package.mk exports.

Signed-off-by: Josef Schlehofer <redacted>
git clone https://git.99rst.org/PROJECT