Thibaut VARÈNE [Tue, 9 Jan 2024 16:47:28 +0000 (17:47 +0100)]
uspot: update to Git HEAD (2024-01-09)
0cffba9458d3 treewide: add support for RADIUS Reply-Message c9fb744fdee8 treewide: add support for 'lang=' & ChilliSpot-Lang 584a162cb19a handler-uam: ensure that 'seconds_remaining' is always set bd1f7c5de1ae Makefile: align with packages feed one 0ea6ad3c4e54 Makefile: mark uspot-www and uspotfilter "PKGARCH:=all" e6a286ccfdbf uspot/uspotfilter: use 'logger -t' 427ed16cfde5 uspot: expose ratelimits in client data 4ba1dd9c5135 uspot: don't send NAS-Port-Type 78a37ef49b85 templates: add id="replymsg" to reply msg header e3f4e179fd17 templates: show remaining time in "connected" 398762dff711 radius-client: correctly use str_to_hex() 730ef800d9da templates: simplify HTML 6bb39282fd8f Documentation update b6c802adac19 portal: handle_request() logic refactoring 1aa1a5eb28d7 uspotfilter: implement peer_lookup() ba5547ec61f1 portal: speedup peer lookup by leveraging spotfilter d551376c29bb templates: added html5 time tag to timeleft output 154c98e0b77b uspotfilter: mark client as active when set() 8dcb03a37a77 uspotfilter: rework neigh management cfb2ce7909da uspotfilter: use client_remove() where applicable 8411314dbf90 Documentation update 8dacf3df9935 uspot: use a single operation for client removal 297b7857c1e0 uspotfilter: fix DELNEIGH processing 76003917c205 uspotfilter: client_set() only clear idle when allowing f46a855c5085 uspotfilter: remove botched IPv6 "support" 4ff31cbf0e2b uspot: client_remove(): stay in sync with spotfilter edc9ad7e60a3 uspot/uspotfilter: use ucode-mod-log for logging 52e24aecf2db uspotfilter: use ucode '??=' syntax c4b6f2f0bb1e Update README
Update the package Makefile to reflect the changes from the following
above-listed commits:
0ea6ad3c4e54 Makefile: mark uspot-www and uspotfilter "PKGARCH:=all" edc9ad7e60a3 uspot/uspotfilter: use ucode-mod-log for logging
Anya Lin [Sat, 6 Jan 2024 08:46:27 +0000 (16:46 +0800)]
sing-box: update to 1.8.0
New features for v1.8.0:
1. Migrate cache file from Clash API to independent options
2. Introducing Rule Set
3. Add `sing-box geoip`, `sing-box geosite` and `sing-box rule-set` commands
4. Allow nested logical rules
5. Independent `source_ip_is_private` and `ip_is_private` rules
6. Add context to JSON decode error message
7. Reject internal fake-ip queries
8. Add GSO support for TUN and WireGuard system interface
9. The legacy LWIP stack has been deprecated and removed
10. Add `idle_timeout` for URLTest outbound
11. Added some new uTLS fingerprints
...
Release notes: https://github.com/SagerNet/sing-box/releases/tag/v1.8.0
The new version has some breaking changes and may stop working after upgrading if use the original config.
Please see the migration manual to migrate the config: https://sing-box.sagernet.org/migration/
UCI's shairport-sync's pipe conf block is defined but has no effect without shairport-sync's pipe support
Rationale for pipe support:
- On SBC with no sound card available (built-in or external)
and without ALSA plugins support on OpenwRT (no package)
to reroute a stream from shairport-sync's ALSA default output
to a PulseAudio controlled Bluetooth sink , then pipe support
is required to enable the following flow:
- shairport-sync -> fifo pipe -> custom_binary_to_send_stream_to_pulse_audio_BT_sink
- small bump in package size: diff: +746 bytes
- shairport-sync-openssl_4.3.2-0_aarch64_generic.ipk without --pipe: 110806 bytes
- shairport-sync-openssl_4.3.2-0_aarch64_generic.ipk with --pipe: 111552 bytes
Various template wrapping improvements: template template parameters,
variadic templates, partially specialized templates, const template
parameters and improved error checking instantiating templates.
Improved decltype() support for expressions.
C++14 auto without trailing return type and C++11 auto variables.
Numerous C++ using declarations improvements.
Numerous fixes for constructors, destructors and assignment operators:
implicit, default and deleted and related non-assignable variable
wrappers.
STL: std::array and std::map improvements, std::string_view support
added.
Various C preprocessor improvements.
Various issues fixed to do with architecture specific long type.
Various Doxygen improvements.
D1/Tango support removed. D2/Phobos is now the supported D version
and SWIG now generates code which works with recent D2 releases.
New Javascript generator targeting Node.js binary stable ABI Node-API.
Octave 8.1 support added.
PHP7 support removed, PHP8 is now the supported PHP version.
Python STL container wrappers now use the Python Iterator Protocol.
Python stable ABI support added.
Python 3.12 support added.
Ruby 3.2 and 3.3 support.
Scilab 2023.* support added.
Various minor enhancements for C#, Go, Guile, Javascript, Lua, Ocaml,
Perl, PHP, R, Racket, Ruby, Scilab and Tcl.
A number of deprecated features have been removed.
Rani Hod [Sat, 23 Dec 2023 11:47:59 +0000 (13:47 +0200)]
wifi_schedule: fix startup problems
Fixes: e0d7181a6 Closes: #22973 Closes: #22988
1. Make the new `startup()` function in `/usr/bin/wifi_schedule.sh`
respect the global `enabled` config flag; in particular, make no
changes to `/etc/config/wireless` when wifi_schedule is disabled.
2. Make the new `/etc/init.d/wifi_schedule` service script executable.
Also add TAR_OPTIONS and TAR_CMD. Unfortunately, latest version of libsodium extracts to an additional libsodium-latest subfolder, which is unneccessary and removed by these options.
Andy Syam [Fri, 22 Dec 2023 13:52:35 +0000 (21:52 +0800)]
numpy: update to version 1.26.2
https://github.com/numpy/numpy/releases
NumPy 1.26.2 Release Notes
NumPy 1.26.2 is a maintenance release that fixes bugs and regressions
discovered after the 1.26.1 release. The 1.26.release series is the last
planned minor release series before NumPy 2.0. The Python versions
supported by this release are 3.9-3.12.
Eric Fahlgren [Sun, 17 Dec 2023 16:33:36 +0000 (08:33 -0800)]
snort3: add missing action-override option
Allow use of rules as-defined, and don't override their actions. This
is generally the best way to use the ruleset, and overriding their
actions should only be undertaken when you fully understand how it
affects their use.
John Audia [Sun, 17 Dec 2023 10:36:47 +0000 (05:36 -0500)]
snort3: compile with lzma support
This PR adds the ability of snort to process rules that target
swf and pdf files requiring lzma decompression to look for
malicious payloads therein. This change only increases the size
of the snort3 executable by a fraction of a KB and the added
dependency of liblzma (based on currently offered 5.4.4-1) is
only a 169 KB shared object. Based on CPU requirements of snort,
x86 users likely represent the majority user-base and space their
rootfs is not an issue as it may be for lower-powered SoCs.
Size of snort3-3.1.76.0-2: 7354403 bytes
Size of snort3-3.1.76.0-3: 7354435 bytes
Description:
[A previous commit](https://github.com/openwrt/packages/commit/f8a8b71e26b9bdbf86fbb7d4d1482637af7f3ba4) has added more script event options.
However it looked like that commit was not complete as it stops the use of the script events route-up, route-pre-down, and ipchange when those are placed in the openvpn config file.
This PR fixes a regression that makes it problematic to specify certain event options in the OpenVPN configuration file.
Discussion in [this thread](https://forum.openwrt.org/t/openvpn-custom-route-up-script-in-23-05-rc2/167105/13) and [here](https://forum.openwrt.org/t/openvpn-route-up-and-route-pre-down-broken-in-23-05/176568)
Please have a look and consider implementing or make it possible to use all script event options in the openvpn config file in another way.
Pull request has been discussed and improved with the help of @AuthorReflex, see: https://github.com/openwrt/packages/pull/21732
Xiang W [Tue, 19 Dec 2023 13:20:13 +0000 (13:20 +0000)]
syncthing: fix wrong group name in syncthing.init
The group does not always have the same name as user, and when I try
to run syncthing with nobody I get an error. Since nobody belongs to
the group nogroup, I added some code to find out which group user
belongs to.
Javier Marcet [Mon, 1 Jan 2024 11:07:28 +0000 (12:07 +0100)]
python3-distro: update to version 1.9.0
- ENHANCEMENTS:
- Refactor distro.info() method to return an InfoDict
- Ignore the file '/etc/board-release'
- Ignore the file '/etc/ec2_version'
- RELEASE:
- Run Python 3.6 on Ubuntu 20.04 for CI and bump isort
- TESTS:
- Test on modern versions of CPython and PyPy and macOS
- Add support for ALT Linux Server 10.1 distribution
- Add Debian Testing to the tests
- Update archlinux resource for tests
Javier Marcet [Mon, 1 Jan 2024 10:44:14 +0000 (11:44 +0100)]
python-docker: Update to 7.0.0
Upgrade Notes:
- Removed SSL version (ssl_version) and explicit hostname check
(assert_hostname) options
- assert_hostname has not been used since Python 3.6 and was
removed in 3.12
- Python 3.7+ supports TLSv1.3 by default
- Websocket support is no longer included by default
- By default, docker-py hijacks the TCP connection and does not use
Websockets
- Websocket client is only required to use attach_socket(container,
ws=True)
- Python 3.7 no longer officially supported (reached end-of-life June
2023)
Features:
- Python 3.12 support
- Full networking_config support for containers.create()
- Replaces network_driver_opt (added in 6.1.0)
- Add health() property to container that returns status (e.g.
unhealthy)
- Add pause option to container.commit()
- Add support for bind mount propagation (e.g. rshared, private)
- Add filters, keep_storage, and all parameters to prune_builds()
(requires API v1.39+)
Bugfixes:
- Consistently return docker.errors.NotFound on 404 responses
- Validate tag format before image push
Miscellaneous:
- Upgraded urllib3 version in requirements.txt (used for
development/tests)
- Documentation typo fixes & formatting improvements
- Fixed integration test compatibility for newer Moby engine versions
- Switch to ruff for linting
Javier Marcet [Mon, 1 Jan 2024 10:39:54 +0000 (11:39 +0100)]
python-websocket-client: update to 1.7.0
- Renamed `mask` variable in ABNF to prevent name collision with
`mask()` function (9b51f73)
- Fixed old http import of HTTPStatus in _handshake.py (9b51f73)
- Add `send_text()` and `send_bytes()` to _app.py
- Improved typehint support (9b51f73, 8b73d00)
- General readability improvements, made all string concatenations
use f-strings (780584f, 3eabc6e)
- Applied black formatting style to code (da7f286)