Hannu Nyman [Wed, 18 Feb 2026 18:03:45 +0000 (20:03 +0200)]
modbus: update to 3.1.12
Update modbus to version 3.1.12
https://github.com/stephane/libmodbus/releases/tag/v3.1.12
Fix FD_SET overflow when socket fd >= FD_SETSIZE.
Check dest pointer not null and nb in read functions.
NULL check for src and nb < 1 validation in write functions.
modbus_reply: don't compute address for FC 0x07/0x11.
Use O_NONBLOCK instead of deprecated O_NDELAY.
Explicit cast for Coverity CID 416366.
Document required buffer size of modbus_receive.
Document macros for error codes corresponding to Modbus exceptions.
Fix example of modbus_rtu_set_serial_mode.
Test filesystem provides symlink in autogen.sh.
Sync API signatures with the documentation.
Many documentation fixes and typo corrections.
Add coverage target and helper script.
bdk38 [Mon, 16 Feb 2026 12:49:45 +0000 (04:49 -0800)]
ddns-scripts: add API-based registered IP verification for Cloudflare proxied
records
Problem:
When using Cloudflare with proxy enabled (orange cloud), DNS lookups
return Cloudflare's edge IP instead of the actual origin IP registered
in the dashboard. This causes ddns-scripts to incorrectly detect IP
mismatches, triggering unnecessary updates and potential rate limiting.
Solution:
Add an optional 'use_api_check' configuration option that enables
provider scripts to fetch the registered IP directly via their API,
bypassing DNS lookups.
Changes:
- dynamic_dns_functions.sh: Add API check block to get_registered_ip()
(~25 lines). When use_api_check is enabled, sources the provider
script with GET_REGISTERED_IP=1 flag. Falls back to DNS lookup if
API check is disabled, unsupported, or fails.
- update_cloudflare_com_v4.sh: Add handler for GET_REGISTERED_IP mode
(~15 lines). Reuses existing cURL setup and authentication to query
Cloudflare API for actual record content.
- etc/config/ddns: Document use_api_check option
Behavior:
- use_api_check=0 or unset: DNS lookup (existing behavior, no changes)
- use_api_check=1 with API support: API query for registered IP
- use_api_check=1 without API support: Falls back to DNS lookup
- API failure: Gracefully falls back to DNS lookup
Testing:
- Cloudflare (proxied): Correctly retrieves origin IP via API
- Cloudflare (non-proxied): Works correctly
- No-IP: DNS lookup works (no regression)
- IPv4 and IPv6 records tested
- API failure gracefully falls back to DNS
Signed-off-by: Wayne King 244781262+bdk38@users.noreply.github.com
micpf [Mon, 9 Feb 2026 15:52:10 +0000 (16:52 +0100)]
modemmanager: fix netifd proto sim path
Use specific SIM path instead of 'any' when unlocking with PIN
code. This fixes PIN unlock issues on devices with multiple modems
where 'any' could select the wrong modem.
Bjørn Mork [Sun, 8 Feb 2026 18:21:31 +0000 (19:21 +0100)]
conserver: update to version 8.3.0
version 8.3.0 (February 2, 2026):
- Don't use `true` variable (Stanisław Pitucha <redacted>)
- Add VPATH to Makefile.in (saproj <redacted>)
- FileUnopen: always return a valid file descriptor (Jeff Moyer <redacted>)
- fix SEGFAULT on early exit with IPv6 enabled (Bjørn Mork <redacted>)
- In AddrsMatch, keep copies of addrinfos to free. (Darren Tucker <redacted>)
- Increase buffer size for GSSAPI exchanges (Alexander Bokovoy <redacted>)
- Show "(inactive)" rather than an invalid pty device name for ondemand consoles that
are closed. Show "(inactive)" rather than "(null)" for ondemand consoles that have
never been opened. (Greg Becker <redacted>)
- Prevent spy-mode clients from being promoted to the attached/writable state. (Greg Becker <redacted>)
- autoconf upgrade (Jörg Sommer <redacted>)
- reinitcheck allows time units (Jacek Tomasiak <redacted>)
- reduce level of string alloc management debug messages (Greg A. Woods <redacted>)
- fix bug with parser and "#" lines, fix debug output in ParseFile()
- Fix clobbering of breaklist and replstring (Anton Lundin <redacted>)
- Use strcmp() rather than strcasecmp() to compare console names when reading the config
file and creating the list of consoles. (Greg Becker <redacted>)
- Added passwordfile config option (Jason Ni <redacted>)
Drop upstreamed patches:
002-addrsmatch-freeaddrinfo.patch
002-fix-SEGFAULT-on-early-exit-with-IPv6-enabled.patch
Florian Eckert [Tue, 3 Feb 2026 09:54:54 +0000 (10:54 +0100)]
ddns-scripts: remove postinst and prerm script call
For reasons that have not been investigated in detail, the package blocks
during 'postinst' with the new 'apk' backend when the package is installed
on the target.
After much back and forth, it turned out that the '/etc/init.d/ddns start'
command is responsible for this. The call is blocking.
The command '/etc/init.d/ddns enabled' in the 'postinst' also makes no sense
here, as it only checks whether the ddns service is enabled. The return value
is not checked at all. And the 'prerm' script is also not needed, as the
calls made there are implicitly called during package deinstallation.
Therefore, this commit removes the entire and not needed 'postinst' and
'prerm' script call.
Hauke Mehrtens [Thu, 5 Feb 2026 23:06:57 +0000 (00:06 +0100)]
owut: activate by default in buildbot
This will activate owut in buildbot builds for targets with large flash
by default. This will integrate it into most images by default.
The buildbots already build LuCI with luci-app-attendedsysupgrade. This
adds ucode-mod-uclient and owut to the image.
These are the package sizes for mips_24kc:
29270 bin/packages/mips_24kc/packages/owut-2026.01.13~2526d84b-r1.apk
5449 bin/packages/mips_24kc/base/ucode-mod-uclient-2026.01.31~931bbfeb-r1.apk
Dirk Brenken [Sun, 8 Feb 2026 09:25:55 +0000 (10:25 +0100)]
adblock: release 4.5.1
* Remote DNS Allow: this additional firewall feature lets selected client devices
temporarily bypass local DNS blocking and use an external, unfiltered DNS resolver.
* LuCI: new Firewall options for remote Access
* readme update
Daniel Golle [Thu, 5 Feb 2026 02:44:24 +0000 (02:44 +0000)]
libutp: update to 2024-11-16
transmission/libutp@490874c Merge pull request #17 from tearfur/malformed-logs
transmission/libutp@2d29ce9 Merge pull request #18 from tearfur/ftbfs-log
transmission/libutp@6c7ee3f Merge pull request #16 from brad0/openbsd_monotonic
transmission/libutp@1e7e6c6 fix: FTBFS when `UTP_DEBUG_LOGGING` is defined
transmission/libutp@eedd8b9 fix: malformed logs produced by `struct_utp_context::log()`
transmission/libutp@14d6f57 Use monotonic clock on OpenBSD
transmission/libutp@52645d6 chore: remove invalid assertion
transmission/libutp@4ed4d43 refactor: use std::unordered_map instead of bespoke utpHashTable
transmission/libutp@13545a9 fixup! chore: savepoint
transmission/libutp@d0f70e6 chore: add code comments for new code that needs it
transmission/libutp@b109597 chore: remove extra include string.h
transmission/libutp@13b5cb4 chore: remove unnecessary #include utp_hash.h
transmission/libutp@958758b copyediting: tab damage, constify
transmission/libutp@165a316 refactor: replace UTPSocketHT method with one more narrowly-scoped
transmission/libutp@9bbf6b3 perf: do not rebuild UTPSocketKey in LookupAdjacent
transmission/libutp@a271636 chore: savepoint
transmission/libutp@d339167 feat: make UTPSocketKey std::hash-friendly
transmission/libutp@1354618 refactor: use std::min(), std::max() instead of bespoke
transmission/libutp@7480820 chore: remove redundant explicit types when invoking std::min, std::max
transmission/libutp@3189aba chore: restore undefs
transmission/libutp@1849bd1 chore: make vsc happy
transmission/libutp@24c967b refactor: make explicit type for std::min, std::max
transmission/libutp@1862df0 refactor: make explicit type for std::min, std::max
transmission/libutp@8080115 refactor: use std::min(), std::max() instead of bespoke
transmission/libutp@2589200 refactor: use std::vector instead of bespoke Array class
transmission/libutp@09ef1be Fix build on *BSD (#10)
transmission/libutp@4d4a3ce fixup! refactor: use std::vector instead of bespoke Array class
transmission/libutp@1320d78 Merge branch 'post-3.4-transmission' into refactor/replace-bespoke-to-std-pt-1
transmission/libutp@8bdf5e8 Try to reduce the number of CI builds
transmission/libutp@4ec3c96 Merge branch 'post-3.4-transmission' into refactor/replace-bespoke-to-std-pt-1
transmission/libutp@5820d8e Bump minimum CMake version to 3.12 to match Transmission (#9)
transmission/libutp@d9d3754 refactor: use std::vector instead of bespoke Array class
transmission/libutp@9cb9f9c build: Require C11 (#5)
Daniel Golle [Thu, 5 Feb 2026 02:40:12 +0000 (02:40 +0000)]
libdeflate: update to 1.25
ebiggers/libdeflate@c8c56a2 (tag: v1.25) v1.25
ebiggers/libdeflate@095bcab cmake: make installed package relocatable
ebiggers/libdeflate@7b9232c ci.yml: Use windows-latest for windows-visualstudio-build-and-test
ebiggers/libdeflate@d65d5db Add link to SwiftDeflate wrapper
ebiggers/libdeflate@6bb4936 lib/x86: drop any mention of `evex512`
ebiggers/libdeflate@2a3762c lib/x86/cpu_features.h: drop evex512 on gcc-16
Georgi Valkov [Sun, 1 Feb 2026 01:07:13 +0000 (03:07 +0200)]
ustreamer: add package 6.51
With mjpg-streamer pending removal [1], it would be nice if we add
a compatible replacement which is under active development.
ustreamer offers a better performance, especially when the
camera supports MJPEG encoding in hardware.
The package already includes OpenWRT support files ./pkg/openwrt
but they needed heavy editing, so it is more efficient to copy
the scripts and configuration, instead of using patches.
Notable changes:
While the init.d script can run in the background when no camera is
connected, it is more efficient to indicate no active instances.
A hotplug script is introduced to start and stop the service when
cameras are added or removed.
If the configured format or encoding are unsupported, a compatible
alternative is automatically selected, so I changed the default
configuration to use MJPEG encoding in hardware for better performance.
HACKS:
MAKE_FLAGS += WITH_SETPROCTITLE=0
is added to workaround the following linker error:
undefined reference to setproctitle_init
This symbol is defined in libbsd, however adding the build dependency
does not resolve the error, because -lbsd is added conditionally, only
when uname -s contains linux. This is unreliable and fails when
cross-compiling on a macOS host. An upstream fix is needed.
An alternative is to use
PKG_UNPACK=$(HOST_TAR) -C $(PKG_BUILD_DIR) --strip=2 -xf $(DL_DIR)/$(PKG_SOURCE)
however this modifies the directory structure, so patches would need
path editing to maintain upstream compatibility.
TODO:
luci-app-mjpg-streamer which is also pending removal [2] is able to
open the HTTP stream from ustreamer. It would be nice to create
luci-app-ustreamer based on that.
When selecting only a package of "no-configure" build variant, e.g.
CONFIG_PACKAGE_zabbix-frontend-server=y
but not any other zabbix package, then the build fails.
The sources are not extracted and the install fails finally with:
make[4]: Entering directory '/srv/openwrt/openwrt-2.git/build_dir/target-arm_arm926ej-s_musl_eabi/zabbix-no-configure/zabbix-7.0.22'
make[4]: *** No rule to make target 'install'. Stop.
make[4]: Leaving directory '/srv/openwrt.git/build_dir/target-arm_arm926ej-s_musl_eabi/zabbix-no-configure/zabbix-7.0.22'
make[3]: *** [Makefile:522: /srv/openwrt.git/build_dir/target-arm_arm926ej-s_musl_eabi/zabbix-no-configure/zabbix-7.0.22/.built] Error 2
This PR fixes this by always running the standard Prepare stage,
but skip the Install one when nothing needs to be compiled.
Stan Grishin [Fri, 30 Jan 2026 20:22:03 +0000 (20:22 +0000)]
pbr: update to 1.2.1-r87
Makefile:
* Remove installation of /usr/share/nftables.d/* files as they are no
longer needed
Init script:
* bugfixes/more mature netifd extensions support
* refactor of the nft_file function and global variables it uses
* the "main" atomic nft file now includes creation of pbr chains and jumps
from relevant fw4 chains to pbr chains
* more consistent use of "uplink" wording in the output and variable names
* implement resolver 'wait' call and use it before trying to resolve any
policy entries
* major overhaul of the split uplink case (IPv4-only wan and IPv6-only
wan6), should now create/use a single pbr_wan table for both legacy and
IPv6 routing and the same marking chain
* updates to IDs and text of some error messages (needs luci app update)
* major speed improvements for service stop
* unify the cleanup_* functions into a single cleanup function
* reject creating/additions to nft sets for src_address entries as dnsmasq
doesn't populate sets with local addresses
* minor bugfixes/code cleanups
* refactor processing of WG servers due to split uplink support (thanks
@egc112!)
* clearer (hopefully) argument names for process_interface calls
* small improvements to status_service
The error in the #24828 patch series left Kconfig recursive depedency
error on zabbix-frontend-server. We fix this by update the database
depedencies on zabbix-frontend-server. Now, you must select the PHP8
database module you want _before_ zabbix-frontend-server will be
visible in menuconfig.
This is not a big problem, because zabbix-frontend-server already
depends on having php8 slected before the frontend can be built.
Closes: #28458 Signed-off-by: Daniel F. Dickinson <redacted>
Due to package renaming the selection of database for the server and
proxy was missing from the Kconfig menu. This caused build failures for
proxy and server.
zabbix: fix compile skipped due to line continuation
Using line continuation (\\) in GNU Make \$(foreach ...) and
\$(call ...) resulted in the install section for many of the packages
not being defined. This resulted in 'skipping [package-name] no install
section' messages and no new package being generated.
We remove the line continuation from the parts foreach and call, in
ordeer to restore compilation and creation of packages.
George Sapkin [Mon, 2 Feb 2026 01:11:01 +0000 (03:11 +0200)]
golang: add option to skip building bootstrap
Introduce a new configuration option - GOLANG_BUILD_BOOTSTRAP - that
defaults to enabled:
- When enabled, build the local bootstrap instead of using an external
one for host Go. If GOLANG_EXTERNAL_BOOTSTRAP_ROOT is set, skip the
initial 1.4 step.
- When disabled, let Go auto-detect the toolchain or use the toolchain
specified in GOLANG_EXTERNAL_BOOTSTRAP_ROOT to skip building the
bootstrap and build host Go using that toolchain directly. Configured
toolchain must be compatible with the current version of Go.
HOST_BUILD_DEPENDS cannot be conditional, so some Makefile juggling is
needed.
Put menu config under bootstrap only.
Remove unnecessary package-related flags from host-only bootstrap.
Since the RFC-1918 in-addr.arpa empty zones are automatically created,
they will exist, but we can't use modzone on them because that's not
how things work.
zabbix: deduplicate and reorganize package defines
In preparation for further changes, deduplicate package definitions,
and reorganize them. At the same time make use of provides to ensure
both existing names are preserved, and that it is possible to be
specific about the variant of the package one wants.
Also, condense the package conffiles, install, postinst, etc handling.
This is more maintainable (less copy and paste and less to modify).
zabbix: drop unwanted file and wrong BUILD_VARIANT
cspell.json was accidentally include in a previous commit, so remove it.
VARIANT is to be used in package definitions, and BUILD_VARIANT
for checking which VARIANT is currently being built. BUILD_VARIANT was
incorrectly used in a package definition, so we fix that.
bind: backport patch replace automatic empty zones
The RFC-1918 zones are automatically synthesized locally by bind
to avoid forwarding queries about them to root nameservers. As
a result, we can't easily replace them with rndc addzone on the
fly. We need this for DHCP integration.
Rosen Penev [Fri, 30 Jan 2026 04:55:29 +0000 (20:55 -0800)]
faad2: update to 2.11.2
Remove no longer used CONFIGURE_ARGS since the conversion to CMake.
Remove patented stuff. Red Hat Legal seems to have approved its
inclusion into Fedora without any flags disabling SBR. If it's good
enough for Red Hat it's good enough for OpenWrt.
git.99rst.org / openwrt-packages.git / log