net: mini_snmpd: Enable ethtool statistics

Been waiting more than 4 years for a release with this..  Let's stop
waiting and switch to the now 4 year old HEAD of the main branch.

Many DSA switches will not produce useful statistics in the
/proc/net/dev file used by default. It contains interfaces counters
associated with the DSA slave ports, which counts traffic between the
external ports and the CPU port. The usual expectation from snmp
on a switch is that it returns the actual switched traffic per port.
This is often exported using driver specific or phy specific ethtool
counters.

This update brings the ability to pull the per port snmp counters from
configurable ethtool counters.

Signed-off-by: Bjørn Mork <redacted>

net: mini_snmpd: Support more than 8 ports

The implementation of mini_snmpd is based on a number of fixed size arrays
for simplicity and efficiency.  This limits the number of ports which can
be monitored.  The default is as low as 8, which makes the package
unsuitable for many switches.

Make the size of these arrays a build time configuration add some package
variants for switches or other devices with more than 8 ports

Signed-off-by: Bjørn Mork <redacted>

socat: drop old patch

reverts
17cfc75b9874 ("socat: Fix compile with deprecated APIs disabled")

The package no longer relies on deprecated openssl functions.

Signed-off-by: Henning Schild <redacted>

socat: update to 1.8.0.3

reverting because upstream fixed it:
2650de468665 ("socat: fix compile error when ccache is enabled")

Closes: https://github.com/openwrt/packages/issues/26585
Signed-off-by: Henning Schild <redacted>

oniguruma: bump to 6.9.10

In addition to version bump, this is the min version needed to compile with
GCC 15.1

Signed-off-by: John Audia <redacted>

jq: bump to v1.8.0

In addition to shipping the latest upstream version, package shared objects.
It is worth noting that this release is required when building with GCC 15.1.

Signed-off-by: John Audia <redacted>

db: fix building with GCC 15.1

Force the default C version to -std=gnu17.

Signed-off-by: John Audia <redacted>

bc: fix building with GCC 15.1

Force the default C version to -std=gnu17.

Signed-off-by: John Audia <redacted>

sing-box: Update to 1.11.13

changelog: https://github.com/SagerNet/sing-box/releases/tag/v1.11.13

Signed-off-by: Anton P. <redacted>

openssh: wrong permissions on /etc/ssh

For users to make use of system-wide settings, the /etc/ssh/
directory and its contents need to be world readable.

Fixes: #26608
Signed-off-by: Philip Prindeville <redacted>

bwping: update to 2.6

This commit updates the bwping package to version 2.6.

Signed-off-by: Oleg Derevenetz <redacted>

tvheadend: cut subnet from lan IP reported by uci, fix bug #26681

Unannounced modifications (OpenWrt PR 13780) in uci network.lan.ipaddr broke tvheadend init script.
This commit updates the init script to cut the subnet from the ip address reported by uci.

Bug report: #26681

Reported-by: @DonKult
Tested-by: @DonKult
Signed-off-by: Marius Dinu <redacted>

tvheadend: update to git master 2025-06-04

removed patch is now included in tvheadend sources

Signed-off-by: Marius Dinu <redacted>

coreutils: bump to 9.7

Single patch automatically rebased.
Added -std=gnu23 to CFLAGS

Release news: https://savannah.gnu.org/news/?id=10751

Build system: x86/64
Build-tested: x86/64
Run-tested: x86/64

Signed-off-by: John Audia <redacted>

libarchive: bump to 3.8.1

This is a feaure and bugfix release.

New features:
bsdtar: support --mtime and --clamp-mtime (#2601)
lib: mbedtls 3.x compatibility (#2602)
7-zip reader: improve self-extracting archive detection (#2088)
xar: xmllite support for the XAR reader and writer (#2388)
zip writer: added XZ, LZMA, ZSTD and BZIP2 support (#2137, #2284, #2391)
zip writer: added LZMA + RISCV BCJ filter (#2403)

Notable security fixes:
rar: do not skip past EOF while reading (#2584)
rar: fix double free with over 4 billion nodes (#2598)
rar: fix heap-buffer-overflow (#2599)
warc: prevent signed integer overflow (#2568)
tar: fix overflow in build_ustar_entry (#2588)

Notable bugfixes:
ibarchive: fix FILE_skip regression (#2642)
compress: Prevent call stack overflow (#2649)
iso9660: always check archive_string_ensure return value (#2651)
tar: Support negative time values with pax (#2634)
tar: Reset accumulated header state after reading macOS metadata blob (#2636)
tar: Keep block alignment after pax error (#2637)
tar: Handle extra bytes after sparse entries (#2643)
windows: check archive_wstring_ensure return value (#2652)
bsdtar: don't hardlink negative inode files together (#2587)
gz: allow setting the original filename for gzip compressed files (#2544)
lib: improve lseek handling (#2564)
lib: support @-prefixed Unix epoch timestamps as date strings (#2606)
rar: support large headers on 32 bit systems (#2596)
tar reader: Improve LFS support on 32 bit systems (#2582)

Full changelog: https://github.com/libarchive/libarchive/compare/v3.7.9...v3.8.1

Build system: x86/64
Build-tested: x86/64
Run-tested: x86/64

Signed-off-by: John Audia <redacted>

procps-ng: bump to 4.0.5

Patch automatically rebased.

Build system: x86/64
Build-tested: x86/64
Run-tested: x86/64

Signed-off-by: John Audia <redacted>

bogofilter: replace no-docs patch with backport of upstream commit

Bogofilter added a --disable-documentation option to configure in
response to https://gitlab.com/bogofilter/bogofilter/-/issues/17.

Signed-off-by: W. Michael Petullo <redacted>

bcm27xx-eeprom: update to v2025-05-08-2712

bcm2711:
https://github.com/raspberrypi/rpi-eeprom/blob/v2025.05.08-2712/firmware-2711/release-notes.md#2025-05-08-implement-tcp-window-for-net-boot-latest

bcm2712:
https://github.com/raspberrypi/rpi-eeprom/blob/v2025.05.08-2712/firmware-2712/release-notes.md#2025-02-12-fixup-change-to-disable-37v-pmic-output-on-cm5-no-wifi-latest
https://github.com/raspberrypi/rpi-eeprom/blob/v2025.05.08-2712/firmware-2712/release-notes.md#2025-03-03-fix-bootloader-pull-configuration-on-2712d0-latest
https://github.com/raspberrypi/rpi-eeprom/blob/v2025.05.08-2712/firmware-2712/release-notes.md#2025-03-10-add-boot_partition-filter-plus-sdram-init-fixes-latest
https://github.com/raspberrypi/rpi-eeprom/blob/v2025.05.08-2712/firmware-2712/release-notes.md#2025-03-19-log-the-fan-speed-at-boot-latest
https://github.com/raspberrypi/rpi-eeprom/blob/v2025.05.08-2712/firmware-2712/release-notes.md#2025-03-27-os_check-cm5-check-for-cm5-specific-dtbs-latest
https://github.com/raspberrypi/rpi-eeprom/blob/v2025.05.08-2712/firmware-2712/release-notes.md#2025-04-07-arm_dt-revert-to-using-the-max-fan-speed-latest
https://github.com/raspberrypi/rpi-eeprom/blob/v2025.05.08-2712/firmware-2712/release-notes.md#2025-05-08-implement-tcp-window-for-net-boot-latest

Signed-off-by: Álvaro Fernández Rojas <redacted>

go2rtc: update to 1.9.9

- Update version to 1.9.9
- Add patch to fix build with CGO=0
- Add patch to support RISC-V 64
- Fix excludes not to include examples

Signed-off-by: Vladimir Ermakov <redacted>

golang: Fix host build compatibility with GCC 15

Fixes https://github.com/openwrt/packages/issues/26446.

Signed-off-by: Jeffery To <redacted>

fping: update to version 5.3

* update to version 5.3
* added test.sh file for ci testing

Signed-off-by: Nikolay Manev <redacted>

ddns-scripts: fix parsing of parameters for cloudflare.com

Compatible with domain without the `@` symbol, consistent with the previous.

Fixes 8c55d089 ("ddns-scripts: fix parsing of parameters for cloudflare.com")

Signed-off-by: Liangbin Lian <redacted>

netbird: update to 0.45.3

changelog: https://github.com/netbirdio/netbird/releases/tag/v0.45.3

Signed-off-by: Wesley Gimenes <redacted>

github: Add fields to help users in the bug report

Not everyone filling out the bug report is an expert.
These fields, with additional explanations, can hopefully
help users provide more accurate information.

Add fields to guide users in completing the bug report.

Signed-off-by: Wesley Gimenes <redacted>

github: require user to check all bug report fields

Previously, users could leave fields blank,
resulting in missing information in the bug report.
Now, it is mandatory for all fields to be filled out,
ensuring that no essential information is overlooked.

Signed-off-by: Wesley Gimenes <redacted>

github: Creating issue: Add external links

This is heavily inspired by OpenWrt main repository [1]
as in the packages feed we would like to follow
and be in sync with the main repository.

Having external, well, contact links, where users
can ask or propose feature request and even find links
for documentation or contacting us is a good idea.
Might help to improve the current state of this repository.

[1] https://github.com/openwrt/openwrt/blob/57c104ef7f8619d48579ada5ab24f78984391edd/.github/ISSUE_TEMPLATE/config.yml

Signed-off-by: Josef Schlehofer <redacted>

github: Use GitHub Issue Forms with yaml

This replaces the old issue templates with the new one.
It is going to reflect changes and require more details.

Issue Forms as also used in the main repository and in LuCI,
it helps users to create structured issue.

Signed-off-by: Josef Schlehofer <redacted>

collectd: Add `write_prometheus` uci config

Included with default options used by collectd

Signed-off-by: Xiao Yu <redacted>

scapy: update to 2.6.1

Upstream list of changes is available at
https://github.com/secdev/scapy/releases/tag/v2.6.1.

Signed-off-by: W. Michael Petullo <redacted>

nfdump: update to 1.7.6

Upstream list of changes is available at
https://github.com/phaag/nfdump/releases/tag/v1.7.6.

Signed-off-by: W. Michael Petullo <redacted>

adblock-fast: update to 1.1.3-13

* update to SPDX license identified in Makefile
* bugfix: correct HELP line description for sizes command (thanks @justops1337)
* performance fix: updated domains filter (thanks @justops1337)
* bugfix/improvement: more reliable get_url_filesize code with fall-back to
  uclient-fetch (thanks @justops1337)

Signed-off-by: Stan Grishin <redacted>

bogofilter: update to 1.3.0.rc1

Bogofilter development has moved to gitlab.com.
Upstream list of changes is available at
https://gitlab.com/bogofilter/bogofilter/-/blob/main/bogofilter/NEWS.

Signed-off-by: W. Michael Petullo <redacted>

github: Use Markdown and slight changes to PR template

The previous pull request was kinda not exactly tested.
This one should be better and more visible.

Fixes: 9a273c3e79ec1018aea4fe9bc338d679f5553bee ("github: Improve Pull Request template")
Signed-off-by: Josef Schlehofer <redacted>

perl-io-socket-ssl: Added description

As requested by @BKPepe , added a package
description to the Makefile

Signed-off-by: Jens Wagner <redacted>

perl-io-async: Added description

As requested by @BKPepe , added a package
description to the Makefile

Signed-off-by: Jens Wagner <redacted>

perl-xs-parse-sublike: Shorter TITLE in Makefile

As requested by @BKPepe , added a shorter title
to make it display correctly in make menuconfig

Signed-off-by: Jens Wagner <redacted>

perl-xs-parse-keyword: Shorter TITLE in Makefile

As requested by @BKPepe , added a shorter title
to make it display correctly in make menuconfig

Signed-off-by: Jens Wagner <redacted>

perl-struct-dumb: Shorter TITLE in Makefile

As requested by @BKPepe , added a shorter title
to make it display correctly in make menuconfig

Signed-off-by: Jens Wagner <redacted>

perl-net-ssleay: Removed PKG_BUILD_DEPENDS

As requested by @BKPepe , removed PKG_BUILD_DEPENDS
as build dependency already covered in DEPENDS

Signed-off-by: Jens Wagner <redacted>

perl-future: Shorter TITLE in Makefile

As requested by @BKPepe , added a shorter title
to make it display correctly in make menuconfig

Signed-off-by: Jens Wagner <redacted>

perl-future-asyncawait: Removed PKG_BUILD_DEPENDS

As requested by @BKPepe , removed PKG_BUILD_DEPENDS
as build dependency already covered in DEPENDS

Signed-off-by: Jens Wagner <redacted>

perl-file-sharedir: Shorter TITLE in Makefile

As requested by @BKPepe , added a shorter title
to make it display correctly in make menuconfig

Signed-off-by: Jens Wagner <redacted>

perl-class-inspector: Shorter TITLE in Makefile

As requested by @BKPepe , added a shorter title
to make it display correctly in make menuconfig

Signed-off-by: Jens Wagner <redacted>

luaexpat: update to 1.5.2

Upstream list of changes is available at
https://github.com/lunarmodules/luaexpat/releases/tag/1.5.2.

Signed-off-by: W. Michael Petullo <redacted>

snort3: update to 3.8.1.0

Changelog: https://github.com/snort3/snort3/releases/tag/3.8.1.0

   ,,_     -*> Snort++ <*-
  o"  )~   Version 3.8.1.0
   ''''    By Martin Roesch & The Snort Team
           http://snort.org/contact#team
           Copyright (C) 2014-2025 Cisco and/or its affiliates. All rights reserved.
           Copyright (C) 1998-2013 Sourcefire, Inc., et al.
           Using DAQ version 3.0.19
           Using Hyperscan version 5.4.2 2025-05-27
           Using libpcap version 1.10.5 (with TPACKET_V3)
           Using LuaJIT version 2.1.0-beta3
           Using LZMA version 5.6.2
           Using OpenSSL 3.5.0 8 Apr 2025
           Using PCRE2 version 10.42 2022-12-11
           Using ZLIB version 1.3.1

Build system: x86/64
Build-tested: x86/64
Run-tested: x86/64

Signed-off-by: John Audia <redacted>

perl-net-async-http: Perl Module Net::Async::HTTP

This object class implements an asynchronous HTTP user agent
for the IO::Async framework in Perl, similar to LWP::UserAgent.

Signed-off-by: Jens Wagner <redacted>

perl-io-async-ssl: Perl Module IO::Async::SSL

This module extends existing IO::Async classes with
methods to allow the use of SSL or TLS-based connections
Required be e.g. Net::Async::HTTP to support https://

Signed-off-by: Jens Wagner <redacted>

perl-net-dns-sec: Perl Module Net::DNS::SEC

This module adds DNSSEC extensions to Net::DNS

Signed-off-by: Jens Wagner <redacted>

perl-metrics-any: Perl Module Metrics::Any

Provides a central location for modules to report monitoring metrics.
Required e.g. by Net::Async::HTTP

Signed-off-by: Jens Wagner <redacted>

snort3: drop upstreamed patch

This patch is wrongly rebased and applied twice as
the same change might be possible and it does not break anything.
Since that, the patch is still being refreshed and included in
this repository.

No need as the patch is already included in the snort3 repository:
https://github.com/snort3/snort3/commit/70b811ca111f6df9d1353bda67e8383f69fcc5b0

Drop it once for all. :-)

Fixes: 65f6fee7c00a2afbe509247eb612f7d0c9afa16a ("snort3: update to 3.1.84.0")
Signed-off-by: Josef Schlehofer <redacted>

ncdu: bump to v1.22

Latest upstream release.

Changelog: https://dev.yorhel.nl/ncdu/changes

Build system: x86/64
Build-tested: x86/64
Run-tested: x86/64

Signed-off-by: John Audia <redacted>

github: Improve Pull Request template

By updating pull request template, this ensures that all newly patches
will be hopefully submitted to upstream, which help us that we dont need to
maintain these patches for ages. Also, all patches should be applied by git am.
This is important, because this follows OpenWrt main repo contribution policy
and we will know, who is the author of the patch and what it does (=
commit subject, commit description).

Also, we don't need to know on which host env, we compiled package.
If there is something host related, we can request details.

Signed-off-by: Josef Schlehofer <redacted>

samba4: fix building with GCC 15.1

Force the default C version to -std=gnu17.

Signed-off-by: John Audia <redacted>

python-networkx: update to 3.5

Upstream list of changes is available at
https://github.com/networkx/networkx/releases/tag/networkx-3.5.

Signed-off-by: W. Michael Petullo <redacted>

libtheora: update to 1.2.0

Upstream list of changes is available at
https://github.com/xiph/theora/releases/tag/v1.2.0.

Signed-off-by: W. Michael Petullo <redacted>

libtirpc: bump to 1.3.6 and fix for GCC 15.1

Bump to latest upstream version and include patches to fix build with GCC 15.1.

Removed 003-clang.patch

Signed-off-by: John Audia <redacted>

tcp_wrappers: fix building with GCC 15.1

Force the default C version to -std=gnu17.

Signed-off-by: John Audia <redacted>

bash: add CFLAGS_FOR_BUILD="-std=gnu17" flag

Fix #26469
add CFLAGS_FOR_BUILD="-std=gnu17" flag

Signed-off-by: Ariel Xiong <redacted>

bash: bump to 5.2.37

fix autoconf test for broken strtold
fix for parsing compound assignment while expanding alias
fix compilation on systems that provide select or pselect but not both
fix for reading partial invalid multibyte characters
fix issue where comparing quoted and unquoted words to be completed results in readline not displaying possible matches

Signed-off-by: Ariel Xiong <redacted>

liburcu: update to version 0.15.3

Signed-off-by: Jan Hák <redacted>

libsoup3: update to 3.6.5

Upstream record of changes is available at
https://gitlab.gnome.org/GNOME/libsoup.

Signed-off-by: W. Michael Petullo <redacted>

netbird: update to 0.45.2

changelog: https://github.com/netbirdio/netbird/releases/tag/v0.45.2

Signed-off-by: Wesley Gimenes <redacted>

php8-pecl-krb5: update to 1.2.4

Upstream list of changes is available at
https://pecl.php.net/package-changelog.php?package=krb5.

Signed-off-by: W. Michael Petullo <redacted>

libgpg-error: update to 1.55

Upstream list of changes is available at
https://dev.gnupg.org/source/libgpg-error/browse/master/NEWS.

Signed-off-by: W. Michael Petullo <redacted>

vala: update to 0.56.18

Upstream list of changes is available at
https://gitlab.gnome.org/GNOME/vala/-/blob/main/NEWS.

Signed-off-by: W. Michael Petullo <redacted>

quota: update to 4.10

Upstream list of changes is available at
https://sourceforge.net/p/linuxquota/news/.

Signed-off-by: W. Michael Petullo <redacted>

openldap: update to 2.6.10

Upstream record of changes is available at
https://git.openldap.org/openldap/openldap.

Signed-off-by: W. Michael Petullo <redacted>

fuse-overlayfs: update to 1.15

Upstream list of changes is available at
https://github.com/containers/fuse-overlayfs/releases/tag/v1.15.

Signed-off-by: W. Michael Petullo <redacted>

libexif: update 0.6.25

Upstream list of changes is available at
https://github.com/libexif/libexif/releases/tag/v0.6.25.

Signed-off-by: W. Michael Petullo <redacted>

hwloc: update to 2.12.1

Upstream list of changes is available at
https://github.com/open-mpi/hwloc/blob/master/NEWS.

Signed-off-by: W. Michael Petullo <redacted>

libgcrypt: update to 1.11.1

Upstream list of changes is available at
https://dev.gnupg.org/source/libgcrypt/browse/master/NEWS.

Signed-off-by: W. Michael Petullo <redacted>

vips: update to 8.16.1

Upstream list of changes is available at
https://github.com/libvips/libvips/releases/tag/v8.16.1.

Signed-off-by: W. Michael Petullo <redacted>

antiblock: Update to 2.1.2r2

1) Added the ability to disable routes without deleting them.

Signed-off-by: Khachatryan Karen <redacted>

yt-dlp: bump to 2025.05.22

Changelog: https://github.com/yt-dlp/yt-dlp/releases/tag/2025.05.22
Signed-off-by: George Sapkin <redacted>

mbpoll: Modbus command line interface

mbpoll is a command line interface to Modbus RTU & TCP,
it is based on libmodbus

Signed-off-by: Jens Wagner <redacted>

net/radius-mac: add new package

This introduces the package `radius-mac` to OpenWrt, documented here:
https://anton.lindstrom.io/radius-mac/

`radius-mac` is a minimal RADIUS server focusing solely on the use case
of MAC address authentication for assigning VLANs to an 802.1x device

Co-authored-by: Josef Schlehofer <redacted>
Signed-off-by: Brian 'redbeard' Harrington <redacted>

python-bcrypt: bump version to 4.1.3

Bumps pyo3 version to 21, which in result fixes copmilation on
platforms without 64-bit atomics.

Upstream-issue: https://github.com/pyca/bcrypt/issues/731
Link: https://github.com/pyca/bcrypt/compare/4.1.2...4.1.3#commits_bucket
Signed-off-by: Tomasz Maciej Nowak <redacted>

adblock: update 4.4.2-2

* sanitize the json reporting output

Signed-off-by: Dirk Brenken <redacted>

banIP: update 1.5.6-3

* add json reporting cache
* fixed the fetchcmd autodetection
* sanitize json reporting output
* small fixes and improvements

Signed-off-by: Dirk Brenken <redacted>

eza: update to 0.21.4

[release notes]
0.21.1: https://github.com/eza-community/eza/releases/tag/v0.21.1
0.21.2: https://github.com/eza-community/eza/releases/tag/v0.21.2
0.21.3: https://github.com/eza-community/eza/releases/tag/v0.21.3
0.21.4: https://github.com/eza-community/eza/releases/tag/v0.21.4

Signed-off-by: Jonas Jelonek <redacted>

crowdsec-firewall-bouncer: update to 0.0.33

Description:
updated to new upstream release version 0.0.33

Maintainer: Kerma Gérald <redacted>
Run tested: mediatek/filogic, BPI-R3, Openwrt 24.10.1

Signed-off-by: S. Brusch <redacted>

adblock: update 4.4.2-1

* added a new "divested" feed, see https://divested.dev/pages/dnsbl
* added a new nsfw category of the hagezi feed
* added the missing custom feed file handling in the backend
* added a geoIP map with all blocked domains (plus the homeIP) in a
  modal popup window on the Reporting tab in LuCI
* fixed the fetchcmd autodetection
* small code fixes and improvements
* update the readme, added a new "Best practise" section
* update different LuCI components (separate commit)

Signed-off-by: Dirk Brenken <redacted>

poemgr: update to latest Git HEAD

Signed-off-by: Packet Please <redacted>

alist: Update to 3.45.0

Signed-off-by: Tianling Shen <redacted>

rclone: Update to 1.69.3

Signed-off-by: Tianling Shen <redacted>

v2ray-core: Update to 5.32.0

Signed-off-by: Tianling Shen <redacted>

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <redacted>

modemmanager: add sourcefilter option support
This make source based IPv6 routing option available for
modemmanager when using modem SLAAC.

Signed-off-by: Ryan Press <redacted>

named: /var/run/named isn't being created with correct permissions

It needs to be group writable or session.key can't be written once
named drops privileges.

Signed-off-by: Philip Prindeville <redacted>

perl-io-async: Perl Module IO::Async

Asynchronous event-driven programming in Perl

Signed-off-by: Jens Wagner <redacted>

perl-future-asyncawait: Perl Module Future::AsyncAwait

Povides a deferred subroutine syntax for futures in Perl

Signed-off-by: Jens Wagner <redacted>

perl-future: Perl Module Future

Perl Future objects represent an operation awaiting completion

Signed-off-by: Jens Wagner <redacted>

perl-io-socket-ssl: Perl Module IO::Socket::SSL

SSL sockets with IO::Socket interface in Perl

Signed-off-by: Jens Wagner <redacted>

perl-net-ssleay: Perl Module Net::SSLeay

Perl bindings for OpenSSL and LibreSSL

Signed-off-by: Jens Wagner <redacted>

perl-file-sharedir: Perl Module File::ShareDir

Perl module to locate per-dist and per-module shared files

Signed-off-by: Jens Wagner <redacted>

perl-class-inspector: Perl Module Class::Inspector

Get information about a Perl class and its structure

Signed-off-by: Jens Wagner <redacted>

perl-struct-dumb: Perl Module Struct::Dumb

Perl module to make simple lightweight record-like structures

Signed-off-by: Jens Wagner <redacted>

perl-xs-parse-sublike: Perl Module XS::Parse::Sublike

Perl XS functions to assist in parsing sub-like syntax

Signed-off-by: Jens Wagner <redacted>

perl-xs-parse-keyword: Perl Module XS::Parse::Keyword

Perl XS functions to assist in parsing keyword syntax

Signed-off-by: Jens Wagner <redacted>

ddns-scripts: fix parsing of parameters for cloudflare.com

There is an obvious bug here:
if we want to update example.com.example.com in zone example.com,
so `domain=example.com@example.com`, after parsing,
the `__HOST` will be `example.com`, not expected `example.com.example.com`.

Signed-off-by: Liangbin Lian <redacted>