icu: bump to 78.3

Unicode® ICU 78.3 is a maintenance update on top of ICU 78 and 78.2, mostly for the CLDR 48.2 bug fixes. In addition, it fixes a C++ code point iterator bug, and updates to timezone data 2026a.

Signed-off-by: Hirokazu MORIKAWA <redacted>

multimedia/icecast: fix PKG_CPE_ID

cpe:/a:xiph:icecast is the correct CPE ID for icecast:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:xiph:icecast

Fixes: a36f265f767da363b60ef09a3b72bb84d9d3cf33 (icecast: Update to 2.4.4)
Signed-off-by: Fabrice Fontaine <redacted>

mail/bogofilter: fix PKG_CPE_ID

cpe:/a:bogofilter_project:bogofilter is the correct CPE ID for bogofilter:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:bogofilter_project:bogofilter

Fixes: 299e5b0a9bce19d6e96cb9ff217028b36ee2dd36 (treewide: add PKG_CPE_ID for better cvescanner coverage)
Signed-off-by: Fabrice Fontaine <redacted>

sound/owntone: fix typo in PKG_CPE_ID

cpe:/a:owntone:owntone_server is the correct CPE ID for owntone:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:owntone:owntone_server

Fixes: e8360bc4e1205e9b931623f9a9a1044056af85cd (sound/owntone: assign PKG_CPE_ID)
Signed-off-by: Fabrice Fontaine <redacted>

python-build: bump to 1.4.0

Changelog since 1.3.0:
- v1.3.0: Add --config-json for JSON-based configuration; drop Python 3.8
  support; fix ModuleNotFoundError when pip isn't installed
- v1.4.0: Add --quiet flag for silent operation; add --metadata option to
  dump PEP 517 metadata; add support for UV environment variable;
  improve Python 3.14 compatibility

Full changelog:
https://github.com/pypa/build/releases

Signed-off-by: Alexandru Ardelean <redacted>

python-setuptools: bump to 82.0.1

Changelog since 80.9.0:
- v81.0.0: Remove --dry-run parameter from setup.py
- v82.0.0: Remove pkg_resources module (deprecated since 67.5.0);
  users should migrate to importlib.resources / importlib.metadata
- v82.0.1: Fix loading of launcher manifest.xml file; documentation
  improvements for installing source distributions

Since pkg_resources has been removed in v82.0.0, drop the
python3-pkg-resources sub-package and remove it as a dependency
from python3-setuptools.

Full changelog:
https://github.com/pypa/setuptools/releases

Signed-off-by: Alexandru Ardelean <redacted>

python-hatchling: bump to 1.29.0

Changelog since 1.27.0:
- v1.27.0: Update default version of core metadata to 2.4
- v1.28.0: Drop Python 3.9 support; add sbom-files option and
  sbom_files build data to wheel build target for SBOM file inclusion
- v1.29.0: Fix Source Date Epoch handling for dates before 1980

Full changelog:
https://github.com/pypa/hatch/releases

Signed-off-by: Alexandru Ardelean <redacted>

python-click: bump to 8.3.1

Changelog since 8.1.7:
- v8.1.8: Fix type hints for open_file(); fix multiline error messages
  for invalid Path; restore empty string defaults in help text
- v8.2.0: Drop Python 3.7-3.9 support; switch to pyproject.toml/flit_core;
  redesign shell completion system (Bash 4.4+, Zsh, Fish);
  add ProgressBar(hidden) parameter
- v8.2.1: Fix flag value handling for flag options with explicit types;
  fix shell completion for nested groups
- v8.2.2: Fix default/flag_value/type parameter reconciliation; fix Zsh
  completion for items containing colons
- v8.3.0: Rework flag_value and default parameters; enable default on
  Argument with nargs=-1; enhance Fish shell autocompletion
- v8.3.1: Fix pager argument handling; fix prompt rendering with empty
  prompt_suffix; fix parameter conversion timing issues

Add test.sh.

Full changelog:
https://github.com/pallets/click/releases

Signed-off-by: Alexandru Ardelean <redacted>

python3: bump to 3.14.3

Major version bump from 3.13.9 to 3.14.3.

Highlights of Python 3.14:
- PEP 649: Deferred evaluation of annotations
- PEP 750: Template string literals (t-strings)
- PEP 758: Exception syntax simplification (no brackets needed)
- PEP 765: Restrict control flow in finally blocks
- PEP 779: Official free-threaded mode support
- PEP 784: Zstandard compression module
- UUID versions 6-8 support with faster generation
- Formally verified HMAC implementation
- Experimental JIT compiler support
- Tail-call interpreter option for performance

Full release notes:
https://www.python.org/downloads/release/python-3143/

Dropped 100-test_hashlib-better-handle-support-for-SHA3.patch (upstreamed)
Adapted 027-fix-host-build-libressl.patch (for
X509_VERIFY_PARAM_get_hostflags() )

Refreshed other patches.

Signed-off-by: Alexandru Ardelean <redacted>

ddns-scripts: switch to procd handling

The 'ddns-scripts' packages still uses not the procd service handling.
This commit changes this.

This change also resolves the issue where, if a UCI configuration is
already present, the process is blocked during installation via APK and
does not complete.

Signed-off-by: Florian Eckert <redacted>
Tested-by: Luiz Angelo Daros de Luca <redacted>

adblock-fast: update to 1.2.2-r12

Config:
* update pause_timeout default value to 60
* add config option rpcd_token

Init script:
* add validation for rpcd_token

Ucode script:
* fix: always reload config options on RPCD calls to prevent stale values
* fix: shell_quote curl params
* fix: do not reload is_tty on each call

Signed-off-by: Stan Grishin <redacted>

telegraf: update to 1.38.1
- Update Telegraf to v1.38.1

Signed-off-by: Niklas Thorild <redacted>

python/python-wheel: assign PKG_CPE_ID

cpe:/a:wheel_project:wheel is the correct CPE ID for python-wheel:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:wheel_project:wheel

Signed-off-by: Fabrice Fontaine <redacted>

multimedia/go2rtc: assign PKG_CPE_ID

cpe:/a:alexxit:go2rtc is the correct CPE ID for go2rtc:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:alexxit:go2rtc

Signed-off-by: Fabrice Fontaine <redacted>

lang/chicken-scheme: assign PKG_CPE_ID

cpe:/a:call-cc:chicken is the correct CPE ID for chicken-scheme:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:call-cc:chicken

Signed-off-by: Fabrice Fontaine <redacted>

net/zerotier: assign PKG_CPE_ID

cpe:/a:zerotier:zerotierone is the correct CPE ID for zerotier:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:zerotier:zerotierone

Signed-off-by: Fabrice Fontaine <redacted>

libs/jose: assign PKG_CPE_ID

cpe:/a:latchset:jose is the correct CPE ID for jose:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:latchset:jose

Signed-off-by: Fabrice Fontaine <redacted>

net/jool: assign PKG_CPE_ID

cpe:/a:jool:jool is the correct CPE ID for jool:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:jool:jool

Signed-off-by: Fabrice Fontaine <redacted>

sound/fluidsynth: assign PKG_CPE_ID

cpe:/a:fluidsynth:fluidsynth is the correct CPE ID for fluidsynth:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:fluidsynth:fluidsynth

Signed-off-by: Fabrice Fontaine <redacted>

admin/fluent-bit: assign PKG_CPE_ID

cpe:/a:treasuredata:fluent_bit is the correct CPE ID for fluent_bit:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:treasuredata:fluent_bit

Signed-off-by: Fabrice Fontaine <redacted>

net/coredns: assign PKG_CPE_ID

cpe:/a:coredns.io:coredns is the correct CPE ID for coredns:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:coredns.io:coredns

Signed-off-by: Fabrice Fontaine <redacted>

net/croc: assign PKG_CPE_ID

cpe:/a:schollz:croc is the correct CPE ID for croc:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:schollz:croc

Signed-off-by: Fabrice Fontaine <redacted>

libs/libesmtp: assign PKG_CPE_ID

cpe:/a:libesmtp_project:libesmtp is the correct CPE ID for libesmtp:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:libesmtp_project:libesmtp

Signed-off-by: Fabrice Fontaine <redacted>

libs/libndpi: assign PKG_CPE_ID

cpe:/a:ntop:ndpi is the correct CPE ID for libndpi:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:ntop:ndpi

Signed-off-by: Fabrice Fontaine <redacted>

net/openlist: assign PKG_CPE_ID

cpe:/a:oplist:openlist is the correct CPE ID for openlist:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:oplist:openlist

Signed-off-by: Fabrice Fontaine <redacted>

hwdata: bump to 0.405

Update PCI and USB vendor/device IDs database.

Full release notes:
https://github.com/vcrhonek/hwdata/releases/tag/v0.405

Add quick test.sh to CI

Signed-off-by: Alexandru Ardelean <redacted>

python-eventlet: bump to 0.40.4

Full release notes:
https://github.com/eventlet/eventlet/blob/master/NEWS

Signed-off-by: Alexandru Ardelean <redacted>

openvpn: update to 2.6.19

Update the openvpn package to the latest version in
the 2.6.x branch while development of the 2.7.x branch
become stable enough to merge.

Signed-off-by: Sander van Deijck <redacted>

ovpn-dco: update to version 0.2.20251017

Update the ovpn-dco package to the latest version

Signed-off-by: Sander van Deijck <redacted>

i2pd: bump to 2.59.0

Updating package to 2.59.0

Signed-off-by: Andrey Zotikov <redacted>

python-userpath: bump to 1.9.2

Full release notes:
https://github.com/ofek/userpath/releases/tag/v1.9.2

Add a bit more testing.

Signed-off-by: Alexandru Ardelean <redacted>

libs/libirecovery: assign PKG_CPE_ID

cpe:/a:libimobiledevice:libirecovery is the correct CPE ID for libirecovery:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:libimobiledevice:libirecovery

Signed-off-by: Fabrice Fontaine <redacted>

libs/libimobiledevice: assign PKG_CPE_ID

cpe:/a:libimobiledevice:libimobiledevice is the correct CPE ID for libimobiledevice:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:libimobiledevice:libimobiledevice

Signed-off-by: Fabrice Fontaine <redacted>

admin/backuppc: assign PKG_CPE_ID

cpe:/a:backuppc:backuppc is the correct CPE ID for backuppc:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:backuppc:backuppc

Signed-off-by: Fabrice Fontaine <redacted>

utils/borgbackup: assign PKG_CPE_ID

cpe:/a:borgbackup:borg is the correct CPE ID for borgbackup:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:borgbackup:borg

Signed-off-by: Fabrice Fontaine <redacted>

net/kadnode: assign PKG_CPE_ID

cpe:/a:kadnode_project:kadnode is the correct CPE ID for kadnode:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:kadnode_project:kadnode

Signed-off-by: Fabrice Fontaine <redacted>

libs/libedit: assign PKG_CPE_ID

cpe:/a:libedit_project:libedit is the correct CPE ID for libedit:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:libedit_project:libedit

Signed-off-by: Fabrice Fontaine <redacted>

utils/apparmor: assign PKG_CPE_ID

cpe:/a:apparmor:apparmor is the correct CPE ID for apparmor:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:apparmor:apparmor

Signed-off-by: Fabrice Fontaine <redacted>

net/sing-box: assign PKG_CPE_ID

cpe:/a:sagernet:sing-box is the correct CPE ID for sing-box:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:sagernet:sing-box

Signed-off-by: Fabrice Fontaine <redacted>

libs/gperftools: assign PKG_CPE_ID

cpe:/a:gperftools_project:gperftools is the correct CPE ID for gperftools:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:gperftools_project:gperftools

Signed-off-by: Fabrice Fontaine <redacted>

admin/netdata: fix PKG_CPE_ID

cpe:/a:netdata:netdata is the correct CPE ID for netdata:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:netdata:netdata

Fixes: cbfc396ca6ab24d7607741fd63e27bd705ca1ede (netdata: update to version 1.14.0)
Signed-off-by: Fabrice Fontaine <redacted>

lang/erlang: fix PKG_CPE_ID

cpe:/a:erlang:erlang\/otp is the correct CPE ID for erlang:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:erlang:erlang%5C/otp

Fixes: 299e5b0a9bce19d6e96cb9ff217028b36ee2dd36 (treewide: add PKG_CPE_ID for better cvescanner coverage)
Signed-off-by: Fabrice Fontaine <redacted>

libs/libsoxr: drop PKG_CPE_ID

cpe:/a:sox:sox is not a correct CPE ID for libsoxr:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:sox:sox

Fixes: 299e5b0a9bce19d6e96cb9ff217028b36ee2dd36 (treewide: add PKG_CPE_ID for better cvescanner coverage)
Signed-off-by: Fabrice Fontaine <redacted>

libs/openpgm: drop PKG_CPE_ID

cpe:/a:openpgm:openpgm is not a correct CPE ID for openpgm:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:openpgm:openpgm

Fixes: 20f05f8e585e01729defe53fdbc49738c260fc5a (openpgm: Add Pragmatic General Multicast library)
Signed-off-by: Fabrice Fontaine <redacted>

net/boinc-wrapper: drop PKG_CPE_ID

cpe:/a:boinc-wrapper:boinc-wrapper is not a correct CPE ID for boinc-wrapper:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:boinc-wrapper:boinc-wrapper

Fixes: 40e144be7d4b4a7a9d3d3fd45b39878c73dee406 (boinc-wrapper: add new package)
Signed-off-by: Fabrice Fontaine <redacted>

utils/ifuse: drop PKG_CPE_ID

cpe:/a:libimobiledevice:ifuse is not a correct CPE ID for ifuse:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:libimobiledevice:ifuse

Fixes: 512afeb406126bfda22d1c4d1f5fe274fe02f357 (ifuse: add package from git)
Signed-off-by: Fabrice Fontaine <redacted>

utils/ideviceinstaller: drop PKG_CPE_ID

cpe:/a:libimobiledevice:ideviceinstaller is not a correct CPE ID for
ideviceinstaller:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:libimobiledevice:ideviceinstaller

Fixes: 84c69fed29259ba058bd6a78e4d112a17dcc91db (ideviceinstaller: add package from git)
Signed-off-by: Fabrice Fontaine <redacted>

utils/usbmuxd: drop PKG_CPE_ID

cpe:/a:libimobiledevice:usbmuxd is not a correct CPE ID for usbmuxd:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:libimobiledevice:usbmuxd

Fixes: 299e5b0a9bce19d6e96cb9ff217028b36ee2dd36 (treewide: add PKG_CPE_ID for better cvescanner coverage)
Signed-off-by: Fabrice Fontaine <redacted>

pbr: update to 1.2.2-r12

* fix: detect/support point-to-point interfaces in dynamic routing mode
* fix: avoid IPv4/IPv6 address collisions on Tor policies
* fix: do not set triggers on boot when service is disabled in config
* fix: more robust forward stop/enable

Signed-off-by: Stan Grishin <redacted>

dante: fix usaage with musl

Need to disable this function as it's unusable on musl.

Signed-off-by: Rosen Penev <redacted>

chrony: make chrony-hotplug more reliable

At startup there's a race situation where "chronyc waitsync" (and thus
chrony-hotplug) will exit right away because it can't bind to loopback.

This change tries quite hard to make chrony-hotplug wait for loopback to
come up before running chronyc.

Fixes #28434.

Signed-off-by: Florian Wagner <redacted>

adblock: release 4.5.3-1

* refine the domain validator regarding prefix handling, esp.
  relevant for ABP-syntax
* adapted the adguard feed to make use of the new prefix handling
* LuCI: various fixes & optimizations

Signed-off-by: Dirk Brenken <redacted>

net/davfs2: fix PKG_CPE_ID

cpe:/a:werner_baumann:davfs2 is the correct CPE ID for davfs2:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:werner_baumann:davfs2

Fixes: 299e5b0a9bce19d6e96cb9ff217028b36ee2dd36 (treewide: add PKG_CPE_ID for better cvescanner coverage)
Signed-off-by: Fabrice Fontaine <redacted>

banip: release 1.8.1-1

* the debug mode now captures internal error output in a dedicated log file,
  located by default in the banIP base directory as /tmp/ban_error.log
* replaced the non-functional recursive PID tree walk in f_rmpid with
  a correct iterative implementation
* added several IP validator improvements
* fixed a copy-paste error in f_report
* fixed a uninitialized variable in f_actual
* fixed missing token validation in banip.cgi
* various other minor improvement & fixes
* removed abandoned nixspam feed
* LuCI: various fixes & optimizations
* readme update

Signed-off-by: Dirk Brenken <redacted>

python-pyopenssl: fix PKG_CPE_ID

cpe:/a:pyopenssl:pyopenssl is the correct CPE ID for python-pyopenssl:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:pyopenssl:pyopenssl

Fixes: ceadbcbb64de727c3a974e552d9a723d532e4e40 (treewide: add PKG_CPE_ID for cvescanner)
Signed-off-by: Fabrice Fontaine <redacted>

utils/opendoas: assign PKG_CPE_ID

cpe:/a:opendoas_project:opendoas is the correct CPE ID for opendoas:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:opendoas_project:opendoas

Signed-off-by: Fabrice Fontaine <redacted>

net/openfortivpn: assign PKG_CPE_ID

cpe:/a:openfortivpn_project:openfortivpn is the correct CPE ID for openfortivpn:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:openfortivpn_project:openfortivpn

Signed-off-by: Fabrice Fontaine <redacted>

fail2ban: add host build deps to fix #28520

Adds the misssing build dependencies to remove the
"Cannot import 'setuptools.build_meta'" build error with 25.12.0-rc1 to 25.12.0-rc5

Signed-off-by: dwardor <redacted>

i2csfp: update to the latest git HEAD

Enables eepromfix on modules that don't need password

Signed-off-by: Henri Osmankäämi <redacted>

nfs-kernel-server: update to 2.8.7

Changelog: https://www.kernel.org/pub/linux/utils/nfs-utils/2.8.7/2.8.7-Changelog

Build system: x86/64
Build-tested: x86/64-glibc
Run-tested: x86/64-glibc

Signed-off-by: John Audia <redacted>

openvpn: increment PKG_RELEASE by one

Increment PKG_RELEASE by one.

Signed-off-by: Hannu Nyman <redacted>

net/smartdns: assign PKG_CPE_ID

cpe:/a:pymumu:smartdns is the correct CPE ID for smartdns:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:pymumu:smartdns

Signed-off-by: Fabrice Fontaine <redacted>

libs/libxerces-c: assign PKG_CPE_ID

cpe:/a:apache:xerces-c\+\+ is the correct CPE ID for libxerces-c:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe%3A2.3%3Aa%3Aapache%3Axerces-c%5C%2B%5C%2B

Signed-off-by: Fabrice Fontaine <redacted>

utils/miniflux: assign PKG_CPE_ID

cpe:/a:miniflux_project:miniflux is the correct CPE ID for miniflux:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:miniflux_project:miniflux

Signed-off-by: Fabrice Fontaine <redacted>

libs/linenoise: assign PKG_CPE_ID

cpe:/a:antirez:linenoise is the correct CPE ID for linenoise:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:antirez:linenoise

Signed-off-by: Fabrice Fontaine <redacted>

libs/libulfius: assign PKG_CPE_ID

cpe:/a:ulfius_project:ulfius is the correct CPE ID for libulfius:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:ulfius_project:ulfius

Signed-off-by: Fabrice Fontaine <redacted>

libs/libtheora: assign PKG_CPE_ID

cpe:/a:xiph:theora is the correct CPE ID for libtheora:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:xiph:theora

Signed-off-by: Fabrice Fontaine <redacted>

mail/opendkim: assign PKG_CPE_ID

cpe:/a:opendkim:opendkim is the correct CPE ID for opendkim:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:opendkim:opendkim

Signed-off-by: Fabrice Fontaine <redacted>

utils/podman: assign PKG_CPE_ID

cpe:/a:podman_project:podman is the correct CPE ID for podman:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:podman_project:podman

Signed-off-by: Fabrice Fontaine <redacted>

libs/qrencode: assign PKG_CPE_ID

cpe:/a:qrencode_project:qrencode is the correct CPE ID for qrencode:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:qrencode_project:qrencode

Signed-off-by: Fabrice Fontaine <redacted>

multimedia/grilo: assign PKG_CPE_ID

cpe:/a:gnome:grilo is the correct CPE ID for grilo:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:gnome:grilo

Signed-off-by: Fabrice Fontaine <redacted>

utils/dockerd: assign PKG_CPE_ID

cpe:/a:mobyproject:moby is the correct CPE ID for docker:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:mobyproject:moby

Signed-off-by: Fabrice Fontaine <redacted>

sound/owntone: assign PKG_CPE_ID

cpe:/a:owntone:owntone_server is the correct CPE ID for owntone:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:owntone:owntone_server

Signed-off-by: Fabrice Fontaine <redacted>

net/nanomq: assign PKG_CPE_ID

cpe:/a:emqx:nanomq is the correct CPE ID for nanomq:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:emqx:nanomq

Signed-off-by: Fabrice Fontaine <redacted>

net/mac-telnet: assign PKG_CPE_ID

cpe:/a:mac-telnet_project:mac-telnet is the correct CPE ID for mac-telnet:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:mac-telnet_project:mac-telnet

Signed-off-by: Fabrice Fontaine <redacted>

libs/libwebp: assign PKG_CPE_ID

cpe:/a:webmproject:libwebp is the correct CPE ID for libwebp:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:webmproject:libwebp

Signed-off-by: Fabrice Fontaine <redacted>

utils/acpid: fix PKG_CPE_ID

cpe:/a:tedfelix:acpid2 is the correct CPE ID for acpid:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:tedfelix:acpid2

Fixes: 299e5b0a9bce19d6e96cb9ff217028b36ee2dd36 (treewide: add PKG_CPE_ID for better cvescanner coverage)
Signed-off-by: Fabrice Fontaine <redacted>

net/ngircd: fix PKG_CPE_ID

cpe:/a:barton:ngircd is the correct CPE ID for ngircd:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:barton:ngircd

Fixes: 299e5b0a9bce19d6e96cb9ff217028b36ee2dd36 (treewide: add PKG_CPE_ID for better cvescanner coverage)
Signed-off-by: Fabrice Fontaine <redacted>

net/frr: fix PKG_CPE_ID

cpe:/a:frrouting:frrouting is the correct CPE ID for frr:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:frrouting:frrouting

Fixes: 5afe5c9031190844f267357c68efe3c9c3cbe51d (treewide: assign PKG_CPE_ID)
Signed-off-by: Fabrice Fontaine <redacted>

net/dhcpcd: fix PKG_CPE_ID

cpe:/a:dhcpcd_project:dhcpcd is the correct CPE ID for dhcpcd:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:dhcpcd_project:dhcpcd

Fixes: 299e5b0a9bce19d6e96cb9ff217028b36ee2dd36 (treewide: add PKG_CPE_ID for better cvescanner coverage)
Signed-off-by: Fabrice Fontaine <redacted>

libs/libexif: fix PKG_CPE_ID

cpe:/a:libexif_project:libexif is the correct CPE ID for libexif:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:libexif_project:libexif

Fixes: 299e5b0a9bce19d6e96cb9ff217028b36ee2dd36 (treewide: add PKG_CPE_ID for better cvescanner coverage)
Signed-off-by: Fabrice Fontaine <redacted>

utils/minicom: fix PKG_CPE_ID

cpe:/a:minicom_project:minicom is the correct CPE ID for minicom:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:minicom_project:minicom

Fixes: 299e5b0a9bce19d6e96cb9ff217028b36ee2dd36 (treewide: add PKG_CPE_ID for better cvescanner coverage)
Signed-off-by: Fabrice Fontaine <redacted>

libs/iniparser: fix PKG_CPE_ID

cpe:/a:ndevilla:iniparser is not a correct CPE ID for iniparser:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:ndevilla:iniparser

Fixes: 456d8ff5d58edd84ab361cc8c289d1d6c7507acc (iniparser: library for parsing of ini files in C)
Signed-off-by: Fabrice Fontaine <redacted>

net/rsync: fix PKG_CPE_ID

cpe:/a:samba:rsync is the correct CPE ID for rsync:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:samba:rsync

Fixes: 299e5b0a9bce19d6e96cb9ff217028b36ee2dd36 (treewide: add PKG_CPE_ID for better cvescanner coverage)
Signed-off-by: Fabrice Fontaine <redacted>

net/memcached: fix PKG_CPE_ID

cpe:/a:memcached:memcached is the correct CPE ID for memcached:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:memcached:memcached

Fixes: 299e5b0a9bce19d6e96cb9ff217028b36ee2dd36 (treewide: add PKG_CPE_ID for better cvescanner coverage)
Signed-off-by: Fabrice Fontaine <redacted>

lang/rust: assign PKG_CPE_ID

cpe:/a:rust-lang:rust is the correct CPE ID for rust:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:rust-lang:rust

Signed-off-by: Fabrice Fontaine <redacted>

python-mako: bump to 1.3.5

Changelog since 1.3.0:
- Fix escaped percent signs (%%) not rendering correctly when not at
  line beginnings (1.3.1/1.3.2)
- Add 'pass' statements to empty control blocks to prevent errors (1.3.3)
- Fix strict_undefined mode conflicts with comprehensions inside
  function definitions (1.3.3)
- Revert dictionary literal parsing changes that caused bracketed
  expression regressions (1.3.5)

Full changelog:
https://docs.makotemplates.org/en/latest/changelog.html

Signed-off-by: Alexandru Ardelean <redacted>

openvpn: change tmp-dir to /tmp

This allows openvpn to create any temp files after
user or group change at exec time.

Signed-off-by: Paul Donald <redacted>

openvpn: change file/path types

move file and path type values to FILE type params
so they are better handled with quoting, in case
paths contain spaces.

Remove duplicate 'extra_certs'.

Signed-off-by: Paul Donald <redacted>

openvpn: proto handler; write params to config file

writing the command line to a config file avoids
formatting pitfalls for the command line.

Signed-off-by: Paul Donald <redacted>

openvpn: proto handler; trim white-space from append

'append' inserts white-space by default (3rd parameter)

Signed-off-by: Paul Donald <redacted>

openvpn: shell proto script improvements

add mode server hook scripts hotplug handling

Signed-off-by: Paul Donald <redacted>

openvpn: ucode hotplug script improvements

add mode server hook scripts hotplug handling

Signed-off-by: Paul Donald <redacted>

openvpn: hotplug script improvements

add mode server hook scripts hotplug handling

Signed-off-by: Paul Donald <redacted>

openvpn: ucode proto script improvements

fix the pop() bug
write options to a config file in case argv length > 63

netifd has a hard limit of 64 argv entries for its ucode
proto.run_command whereby '--param' is one, and its
'option string' is two.

follow-up to affa96dc816653475bebef94d21443434cb1532c

Signed-off-by: Paul Donald <redacted>

openvpn: sync with proto shell-script

add hotplug script handlers to ucode version

follow-up to 647b67e18b6bf857e60e4e2e1874fd04d4138586

Signed-off-by: Paul Donald <redacted>

openvpn: proto handler; handle user config file

Handle a user provided config file.

Signed-off-by: Paul Donald <redacted>

openvpn: shellcheck fixes

correct spacing for [] if blocks and var quoting.
use json_get_vars to get user-defined scripts so the
setenv parameters are appended to the command line.

handle ovpnproto as a PROTO_STRING so it is monitored
and loaded.

follow-up to 337a449c03c597b49f2e18a7fd241d8945288e80
and 647b67e18b6bf857e60e4e2e1874fd04d4138586

Signed-off-by: Paul Donald <redacted>

openvpn: handling for 'push' and other array options

remove duplicate 'push' entry from string types.
push and other array values shall be "double quoted".
we also must 'eval' so that the double-quoted array values
don't get split on spaces.
Also quote file paths in case they contain spaces.

Signed-off-by: Paul Donald <redacted>

net/cloudreve: assign PKG_CPE_ID

cpe:/a:cloudreve:cloudreve is the correct CPE ID for cloudreve:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:cloudreve:cloudreve

Signed-off-by: Fabrice Fontaine <redacted>